@ory/openclaw 0.2.1 → 0.4.0

package/README.md

@@ -37,6 +37,14 @@ From any project where you'd like Ory authentication, inside OpenClaw:
 
 3. **Sign in.** Start your app, visit the login page OpenClaw added, and sign in with the seeded credentials. You now have a real Ory session backed by a real Ory stack — locally, offline, with zero configuration.
 
+4. **Turn on Ory login for the OpenClaw session itself.** *(Optional but recommended.)* Out of the box the plugin only governs your *app*. To also attach an Ory identity to *OpenClaw's* session — so every tool call is attributed to you, not a fallback `session:<id>` subject — set:
+
+   ```bash
+   export ORY_AUTH_GATE=1
+   ```
+
+   Then restart OpenClaw. On next session start, OpenClaw opens an Ory login in your browser; sign in with the same seeded credentials from step 1. This is what makes `permissions enforce` (see [Agent security](#agent-security)) deny on the right identity later. (Note: OpenClaw's session-start primitive can't hard-block, so the gate runs in advisory mode — auth still happens and the audit trail is correct, but the session always proceeds.)
+
 That's the full Ory DX path. Stop here if you're just evaluating the plugin. Continue to [Agent security](#agent-security) when you're ready to enforce.
 
 ## What's included

package/dist/cli/main.js

@@ -79,7 +79,10 @@ function main() {
             });
             break;
         case "status":
-            status(args);
+            status(args).then(() => process.exit(0), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
             break;
         case "local":
             (0, argus_1.runLocalCommand)("ory-openclaw", args).catch((err) => {
@@ -157,36 +160,25 @@ function uninstall(args) {
     fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
     console.log(`Ory plugin and skills removed from ${configPath}`);
 }
-function status(args) {
+async function status(args) {
     const projectDir = parseProjectDir(args);
     const configPath = getOpenClawConfigPath(projectDir);
-    console.log("Ory Agent Plugin Status (OpenClaw)");
-    console.log("===================================");
-    console.log("");
-    // OpenClaw-specific: check plugin registration
-    const config = (0, argus_1.readJsonFile)(configPath);
-    const plugins = (config.plugins ?? []);
-    const registered = plugins.includes(PLUGIN_MODULE);
-    console.log("Plugin Registration:");
-    console.log(`  Config file: ${configPath}`);
-    console.log(`  Plugin registered: ${registered ? "yes" : "NO"}`);
-    if (registered) {
-        console.log(`  Module: ${PLUGIN_MODULE}`);
-    }
-    // Shared Ory config
-    console.log("");
-    console.log("Ory Configuration:");
-    const resolved = (0, argus_1.resolveConfig)();
-    const oryConfigPath = (0, argus_1.getConfigPath)();
-    console.log(`  Config file: ${oryConfigPath}`);
-    console.log(`  Project URL: ${resolved.projectUrl ?? "NOT SET"} [source: ${resolved.projectUrlSource}]`);
-    console.log(`  API Key:     ${resolved.apiKey ? "(set)" : "NOT SET"} [source: ${resolved.apiKeySource}]`);
-    console.log("");
-    console.log("OpenClaw Integration:");
-    console.log("  Blocking support: YES (before_tool_call can deny tool execution)");
-    console.log("  Hooks registered: session_start, before_tool_call, after_tool_call");
-    (0, argus_1.printEnvironment)();
-    (0, argus_1.printLogTail)();
+    await (0, argus_1.runStatusCommand)("ory-openclaw", "openclaw", {
+        title: "OpenClaw",
+        printPluginSection: () => {
+            const config = (0, argus_1.readJsonFile)(configPath);
+            const plugins = (config.plugins ?? []);
+            const registered = plugins.includes(PLUGIN_MODULE);
+            console.log("Hooks & plugin:");
+            console.log(`  Config file:       ${configPath}`);
+            console.log(`  Plugin registered: ${registered ? "yes" : "NO"}`);
+            if (registered) {
+                console.log(`  Module:            ${PLUGIN_MODULE}`);
+            }
+            console.log(`  Blocking support:  yes (before_tool_call can deny tool execution)`);
+            console.log(`  Hooks registered:  session_start, before_tool_call, after_tool_call`);
+        },
+    });
 }
 function help() {
     console.log(`

package/dist/plugin.js

@@ -229,23 +229,27 @@ function createBeforeToolCallHandler(client) {
                     object: mcpTool.serverName,
                     relation: "use",
                     subjectId,
+                    ...("subjectSet" in subject ? { subjectSet: subject.subjectSet } : {}),
                     spanAttributes: mcpAttrs,
                 });
+                const decisionAttrs = decision.spanAttributes;
                 if (decision.kind === "allow") {
-                    client.tracer.record("tool.invoke", "ok", { attributes: mcpAttrs });
+                    client.tracer.record("tool.invoke", "ok", {
+                        attributes: { ...mcpAttrs, ...decisionAttrs },
+                    });
                     return;
                 }
                 if (decision.kind === "observe") {
                     client.tracer.record("tool.block", "denied", {
-                        attributes: { ...mcpAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
+                        attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
                     });
                     client.tracer.record("tool.invoke", "ok", {
-                        attributes: { ...mcpAttrs, allowed: false, observed: true },
+                        attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, observed: true },
                     });
                     return;
                 }
                 client.tracer.record("tool.block", "denied", {
-                    attributes: { ...mcpAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
+                    attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
                 });
                 const blockReason = (0, argus_1.formatDenialMessage)({
                     tool: ctx.toolId,
@@ -266,21 +270,24 @@ function createBeforeToolCallHandler(client) {
                 return;
             }
             const attrs = { toolName: ctx.toolId, ...inputSummary };
+            const decisionAttrs = decision.spanAttributes;
             if (decision.kind === "allow") {
-                client.tracer.record("tool.invoke", "ok", { attributes: { ...attrs, allowed: true } });
+                client.tracer.record("tool.invoke", "ok", {
+                    attributes: { ...attrs, ...decisionAttrs, allowed: true },
+                });
                 return;
             }
             if (decision.kind === "observe") {
                 client.tracer.record("tool.block", "denied", {
-                    attributes: { ...attrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
+                    attributes: { ...attrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
                 });
                 client.tracer.record("tool.invoke", "ok", {
-                    attributes: { ...attrs, allowed: false, observed: true },
+                    attributes: { ...attrs, ...decisionAttrs, allowed: false, observed: true },
                 });
                 return;
             }
             client.tracer.record("tool.block", "denied", {
-                attributes: { ...attrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
+                attributes: { ...attrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
             });
             const blockReason = (0, argus_1.formatDenialMessage)({
                 tool: ctx.toolId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/openclaw",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "description": "Ory plugin for OpenClaw: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -65,10 +65,10 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "dependencies": {
-    "@ory/argus": "0.2.1"
+    "@ory/argus": "0.4.0"
   },
   "engines": {
-    "node": ">=24"
+    "node": ">=22"
   },
   "scripts": {
     "build": "tsc",