@ory/gemini-cli 0.9.1 → 0.11.0

package/README.md

@@ -45,8 +45,8 @@ npx -y -p @ory/gemini-cli ory-gemini status
 <summary>Alternative install paths</summary>
 
 ```bash
-npx -y @ory/gemini-cli install
-npx -y @ory/gemini-cli uninstall
+npx -y -p @ory/gemini-cli ory-gemini install
+npx -y -p @ory/gemini-cli ory-gemini uninstall
 ```
 
 If the `gemini` binary isn't on your `PATH`, `npx -y -p @ory/gemini-cli ory-gemini-setup` writes the extension config directly into your project's `.gemini/settings.json`.
@@ -116,7 +116,7 @@ Bundled and registered automatically. Exposes the Ory CLI and the Ory Network RE
 /ory:temporal-up   # start a local Temporal dev server (for ory-temporal-worker)
 ```
 
-`local-up` runs a complete Ory on your laptop: the Ory APIs (Identities, OAuth2, Permissions) at `http://localhost:4000`, a login UI on `:3000`, and Jaeger (the trace viewer) on `:16686`. A test user identity is seeded and its credentials are printed for you. Use it to:
+`local-up` runs a complete Ory on your laptop: the Ory APIs (Identities, OAuth2, Permissions) at `http://localhost:4000`, a login UI on `:4455` (not :3000, to avoid Next.js port conflicts), and Jaeger (the trace viewer) on `:16686`. A test user identity is seeded and its credentials are printed for you. Use it to:
 
 - **Learn Ory hands-on** without signing up for a hosted project.
 - **Prototype** flows (login, social, MFA, recovery, permissions) against a real Ory backend.
@@ -264,7 +264,7 @@ Highlights:
 
 ## Troubleshooting
 
-- **`/ory:local-up` fails.** Make sure Docker is running and ports `3000`, `4000`, `4100`, and `16686` are free.
+- **`/ory:local-up` fails.** Make sure Docker is running and ports `4455` (login UI), `4000`, `4100`, and `16686` are free.
 - **PKCE login loops.** Clear persisted state with `npx -y -p @ory/gemini-cli ory-gemini agent unregister` and retry.
 - **`npx` fetches an old version.** Force a fresh fetch: `npx -y -p @ory/gemini-cli@latest ory-gemini …`.
 - **Need more signal.** Set `ORY_AGENT_DEBUG=true` and `ORY_AGENT_LOG_FILE=/tmp/ory.log` to capture structured logs.

package/dist/handlers.js

@@ -65,6 +65,12 @@ async function handleSessionStart(input, client, deps) {
     // attaches the agent's bearer token to outgoing Ory API calls.
     const agentGate = deps.agentGate ?? argus_1.ensureAgentIdentity;
     await agentGate(client, { projectUrl: (0, argus_1.resolveConfig)().projectUrl, harness: "gemini-cli" });
+    // Record the user→agent delegation so the audit trail captures that
+    // this user authorized this agent for this session. Best-effort:
+    // requires both principals to be populated, and any failure is logged
+    // and swallowed (fail-open — delegation tracking is for audit, not
+    // enforcement).
+    await recordUserDelegatesAgent(client);
     if (!decision.proceed) {
         return { decision: "deny", reason: decision.reason };
     }
@@ -330,6 +336,40 @@ async function handlePreCompress(input, client) {
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
 }
+/**
+ * Write the user→agent delegation tuple. Idempotent and fail-open:
+ * requires both principal subjects to be populated; any error (including
+ * an unconfigured projectUrl, which manifests as a network_error) is
+ * logged and swallowed. Purely audit-trail data — does not affect
+ * enforcement.
+ */
+async function recordUserDelegatesAgent(client) {
+    const user = client.userPrincipal.subject;
+    const agent = client.agentPrincipal.subject;
+    if (!user || !agent) {
+        client.logger.debug("delegation.skip", {
+            reason: "missing principal",
+            hasUser: !!user,
+            hasAgent: !!agent,
+        });
+        return;
+    }
+    try {
+        await client.createRelationship({
+            namespace: resolveNamespace(),
+            object: `agent:${agent}`,
+            relation: "delegate",
+            subjectId: `user:${user}`,
+        }, { spanAttributes: { delegation: "user-to-agent" } });
+    }
+    catch (err) {
+        const oryErr = err;
+        client.logger.warn("delegation.user_to_agent.failed", {
+            code: oryErr.code,
+            message: oryErr.message,
+        });
+    }
+}
 function handlePermissionError(oryErr, toolName, client) {
     if (oryErr.code === "network_error") {
         client.logger.warn("permission.network_error", {

package/gemini-extension/GEMINI.md

@@ -24,7 +24,7 @@ tool call.
 ## Slash commands
 
 - `/ory:local-up` — start a local Ory instance in Docker (Identities, OAuth2,
-  Permissions, plus a login UI on `:3000` and Jaeger on `:16686`, reachable
+  Permissions, plus a login UI on `:4455` (not :3000, to avoid Next.js port conflicts) and Jaeger on `:16686`, reachable
   through `http://localhost:4000`). Prints seeded test-user credentials.
 - `/ory:local-down` — tear it all down.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/gemini-cli",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "Ory extension for Gemini CLI: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -68,7 +68,7 @@
     "gemini-extension"
   ],
   "dependencies": {
-    "@ory/argus": "0.9.1"
+    "@ory/argus": "0.11.0"
   },
   "engines": {
     "node": ">=22"