@ory/gemini-cli 0.2.1 → 0.3.0

package/dist/handlers.js

@@ -177,23 +177,27 @@ async function handleBeforeTool(input, client) {
                 object: mcpTool.serverName,
                 relation: "use",
                 subjectId,
+                ...("subjectSet" in subject ? { subjectSet: subject.subjectSet } : {}),
                 spanAttributes: mcpAttrs,
             });
+            const decisionAttrs = decision.spanAttributes;
             if (decision.kind === "allow") {
-                client.tracer.record("tool.invoke", "ok", { attributes: mcpAttrs });
+                client.tracer.record("tool.invoke", "ok", {
+                    attributes: { ...mcpAttrs, ...decisionAttrs },
+                });
                 return {};
             }
             if (decision.kind === "observe") {
                 client.tracer.record("tool.block", "denied", {
-                    attributes: { ...mcpAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
+                    attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
                 });
                 client.tracer.record("tool.invoke", "ok", {
-                    attributes: { ...mcpAttrs, allowed: false, observed: true },
+                    attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, observed: true },
                 });
                 return {};
             }
             client.tracer.record("tool.block", "denied", {
-                attributes: { ...mcpAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
+                attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
             });
             return {
                 decision: "deny",
@@ -207,21 +211,24 @@ async function handleBeforeTool(input, client) {
             return handlePermissionError(decision.error, toolName, client);
         }
         const attrs = { toolName, ...inputSummary };
+        const decisionAttrs = decision.spanAttributes;
         if (decision.kind === "allow") {
-            client.tracer.record("tool.invoke", "ok", { attributes: { ...attrs, allowed: true } });
+            client.tracer.record("tool.invoke", "ok", {
+                attributes: { ...attrs, ...decisionAttrs, allowed: true },
+            });
             return {};
         }
         if (decision.kind === "observe") {
             client.tracer.record("tool.block", "denied", {
-                attributes: { ...attrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
+                attributes: { ...attrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
             });
             client.tracer.record("tool.invoke", "ok", {
-                attributes: { ...attrs, allowed: false, observed: true },
+                attributes: { ...attrs, ...decisionAttrs, allowed: false, observed: true },
             });
             return {};
         }
         client.tracer.record("tool.block", "denied", {
-            attributes: { ...attrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
+            attributes: { ...attrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
         });
         return {
             decision: "deny",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/gemini-cli",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Ory extension for Gemini CLI: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -69,7 +69,7 @@
     "gemini-extension"
   ],
   "dependencies": {
-    "@ory/argus": "0.2.1"
+    "@ory/argus": "0.3.0"
   },
   "engines": {
     "node": ">=24"