@ory/openclaw 0.10.0 → 0.11.1

package/dist/plugin.js

@@ -67,6 +67,12 @@ function createSessionStartHandler(client, deps) {
         // attaches the agent's bearer token to outgoing Ory API calls.
         const agentGate = deps.agentGate ?? argus_1.ensureAgentIdentity;
         await agentGate(client, { projectUrl: (0, argus_1.resolveConfig)().projectUrl, harness: "openclaw" });
+        // Record the user→agent delegation so the audit trail captures that
+        // this user authorized this agent for this session. Best-effort:
+        // requires both principals to be populated, and any failure is logged
+        // and swallowed (fail-open — delegation tracking is for audit, not
+        // enforcement).
+        await recordUserDelegatesAgent(client);
         if (decision.mode !== "disabled") {
             return;
         }
@@ -508,6 +514,40 @@ function createSubagentEndedHandler(client) {
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
 }
+/**
+ * Write the user→agent delegation tuple. Idempotent and fail-open:
+ * requires both principal subjects to be populated; any error (including
+ * an unconfigured projectUrl, which manifests as a network_error) is
+ * logged and swallowed. Purely audit-trail data — does not affect
+ * enforcement.
+ */
+async function recordUserDelegatesAgent(client) {
+    const user = client.userPrincipal.subject;
+    const agent = client.agentPrincipal.subject;
+    if (!user || !agent) {
+        client.logger.debug("delegation.skip", {
+            reason: "missing principal",
+            hasUser: !!user,
+            hasAgent: !!agent,
+        });
+        return;
+    }
+    try {
+        await client.createRelationship({
+            namespace: resolveNamespace(),
+            object: `agent:${agent}`,
+            relation: "delegate",
+            subjectId: `user:${user}`,
+        }, { spanAttributes: { delegation: "user-to-agent" } });
+    }
+    catch (err) {
+        const oryErr = err;
+        client.logger.warn("delegation.user_to_agent.failed", {
+            code: oryErr.code,
+            message: oryErr.message,
+        });
+    }
+}
 function isOryError(err) {
     return (typeof err === "object" &&
         err !== null &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/openclaw",
-  "version": "0.10.0",
+  "version": "0.11.1",
   "description": "Ory plugin for OpenClaw: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -65,7 +65,7 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "dependencies": {
-    "@ory/argus": "0.10.0"
+    "@ory/argus": "0.11.1"
   },
   "engines": {
     "node": ">=22"