@ory/openclaw 0.9.1 → 0.11.0

package/README.md

@@ -106,7 +106,7 @@ ory-temporal-up   # start a local Temporal dev server (for ory-temporal-worker)
 
 Or via the CLI: `npx -y -p @ory/openclaw ory-openclaw local up | down`.
 
-`ory-local-up` runs a complete Ory on your laptop: the Ory APIs (Identities, OAuth2, Permissions) at `http://localhost:4000`, a login UI on `:3000`, and Jaeger (the trace viewer) on `:16686`. A test user identity is seeded and its credentials are printed for you. Use it to:
+`ory-local-up` runs a complete Ory on your laptop: the Ory APIs (Identities, OAuth2, Permissions) at `http://localhost:4000`, a login UI on `:4455` (not :3000, to avoid Next.js port conflicts), and Jaeger (the trace viewer) on `:16686`. A test user identity is seeded and its credentials are printed for you. Use it to:
 
 - **Learn Ory hands-on** without signing up for a hosted project.
 - **Prototype** flows (login, social, MFA, recovery, permissions) against a real Ory backend.
@@ -254,7 +254,7 @@ Highlights:
 
 ## Troubleshooting
 
-- **`ory-local-up` fails.** Make sure Docker is running and ports `3000`, `4000`, `4100`, and `16686` are free.
+- **`ory-local-up` fails.** Make sure Docker is running and ports `4455` (login UI), `4000`, `4100`, and `16686` are free.
 - **PKCE login loops.** Clear persisted state with `npx -y -p @ory/openclaw ory-openclaw agent unregister` and retry.
 - **`npx` fetches an old version.** Force a fresh fetch: `npx -y -p @ory/openclaw@latest ory-openclaw …`.
 - **Need more signal.** Set `ORY_AGENT_DEBUG=true` and `ORY_AGENT_LOG_FILE=/tmp/ory.log` to capture structured logs.

package/dist/plugin.js

@@ -67,6 +67,12 @@ function createSessionStartHandler(client, deps) {
         // attaches the agent's bearer token to outgoing Ory API calls.
         const agentGate = deps.agentGate ?? argus_1.ensureAgentIdentity;
         await agentGate(client, { projectUrl: (0, argus_1.resolveConfig)().projectUrl, harness: "openclaw" });
+        // Record the user→agent delegation so the audit trail captures that
+        // this user authorized this agent for this session. Best-effort:
+        // requires both principals to be populated, and any failure is logged
+        // and swallowed (fail-open — delegation tracking is for audit, not
+        // enforcement).
+        await recordUserDelegatesAgent(client);
         if (decision.mode !== "disabled") {
             return;
         }
@@ -508,6 +514,40 @@ function createSubagentEndedHandler(client) {
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
 }
+/**
+ * Write the user→agent delegation tuple. Idempotent and fail-open:
+ * requires both principal subjects to be populated; any error (including
+ * an unconfigured projectUrl, which manifests as a network_error) is
+ * logged and swallowed. Purely audit-trail data — does not affect
+ * enforcement.
+ */
+async function recordUserDelegatesAgent(client) {
+    const user = client.userPrincipal.subject;
+    const agent = client.agentPrincipal.subject;
+    if (!user || !agent) {
+        client.logger.debug("delegation.skip", {
+            reason: "missing principal",
+            hasUser: !!user,
+            hasAgent: !!agent,
+        });
+        return;
+    }
+    try {
+        await client.createRelationship({
+            namespace: resolveNamespace(),
+            object: `agent:${agent}`,
+            relation: "delegate",
+            subjectId: `user:${user}`,
+        }, { spanAttributes: { delegation: "user-to-agent" } });
+    }
+    catch (err) {
+        const oryErr = err;
+        client.logger.warn("delegation.user_to_agent.failed", {
+            code: oryErr.code,
+            message: oryErr.message,
+        });
+    }
+}
 function isOryError(err) {
     return (typeof err === "object" &&
         err !== null &&
@@ -522,9 +562,6 @@ function handlePermissionError(err, toolId, client) {
                 code: err.code,
                 message: "Failing open",
             });
-            client.tracer.record("tool.invoke", "ok", {
-                attributes: { toolName: toolId, failOpen: true, reason: err.code },
-            });
             return;
         }
         client.logger.error("permission.check.error", {
@@ -539,8 +576,7 @@ function handlePermissionError(err, toolId, client) {
             error: err instanceof Error ? err.message : String(err),
         });
     }
-    // Record fail-open trace for unknown errors too
-    client.tracer.record("tool.invoke", "ok", {
-        attributes: { toolName: toolId, failOpen: true },
-    });
+    // Fail-open is log-and-allow: no tool.invoke span, matching the core
+    // gate() vocabulary. The errored permission.check span carries the audit
+    // trail for the failed check itself.
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/openclaw",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "Ory plugin for OpenClaw: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -65,7 +65,7 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "dependencies": {
-    "@ory/argus": "0.9.1"
+    "@ory/argus": "0.11.0"
   },
   "engines": {
     "node": ">=22"