Metadata-Version: 2.4
Name: ory-argus
Version: 0.11.1
Summary: Ory Agent Security core for Python — authentication, per-tool authorization, tracing, and identity propagation for Agent SDK integrations. Python sibling of the TypeScript @ory/argus.
Author: Ory
License-Expression: Apache-2.0
Keywords: agent,ai,authentication,authorization,ory,permissions,tracing
Requires-Python: >=3.10
Requires-Dist: httpx>=0.24
Requires-Dist: opentelemetry-api>=1.20
Requires-Dist: opentelemetry-exporter-otlp-proto-http>=1.20
Requires-Dist: opentelemetry-sdk>=1.20
Requires-Dist: ory-client<2,>=1.22
Provides-Extra: dev
Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
Requires-Dist: pytest>=8; extra == 'dev'
Requires-Dist: ruff>=0.6; extra == 'dev'
Description-Content-Type: text/markdown

# ory-argus (Python)

Ory Agent Security core for Python — the sibling of the TypeScript
[`@ory/argus`](https://www.npmjs.com/package/@ory/argus) package.

It provides the shared primitives that the Ory **Agent SDK integrations**
(LangChain, OpenAI Agents, Pydantic AI, Microsoft Agent Framework, CrewAI,
LlamaIndex, Google ADK, AWS Strands, Google Antigravity) build on:

1. **Authenticate** the session on startup (user PKCE login + agent OAuth2 identity).
2. **Authorize** every tool call against Ory Permissions (Zanzibar-style relation checks).
3. **Trace** every tool invocation as a structured span (OTLP + NDJSON).
4. **Propagate identity** through the user → agent → sub-agent delegation chain.

## Interop with the TypeScript core

`ory-argus` reads and writes the **same** shared config file as every TS harness
plugin — `~/.config/ory-agent-plugins/config.json` (XDG / `%APPDATA%` aware). A
user who logs in via a TS coding-agent harness has those credentials transparently
reused by a Python SDK integration, and vice-versa. This package never invents a
second config location; use `get_data_dir()` / `get_config_path()`.

Install: `pip install ory-argus` · Console script: `ory-argus`
