@cef-ai/vault-sdk 4.4.0 → 5.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +35 -19
- package/dist/agreements/payload.d.ts +15 -1
- package/dist/agreements/payload.d.ts.map +1 -1
- package/dist/agreements/payload.js +13 -1
- package/dist/agreements/payload.js.map +1 -1
- package/dist/agreements/sign.d.ts +16 -3
- package/dist/agreements/sign.d.ts.map +1 -1
- package/dist/agreements/sign.js +16 -1
- package/dist/agreements/sign.js.map +1 -1
- package/dist/client.d.ts +54 -52
- package/dist/client.d.ts.map +1 -1
- package/dist/client.js +95 -98
- package/dist/client.js.map +1 -1
- package/dist/core/connect-scopes.d.ts +18 -0
- package/dist/core/connect-scopes.d.ts.map +1 -0
- package/dist/core/connect-scopes.js +72 -0
- package/dist/core/connect-scopes.js.map +1 -0
- package/dist/core/endpoints.d.ts +28 -1
- package/dist/core/endpoints.d.ts.map +1 -1
- package/dist/core/endpoints.js +31 -1
- package/dist/core/endpoints.js.map +1 -1
- package/dist/core/errors.d.ts +13 -1
- package/dist/core/errors.d.ts.map +1 -1
- package/dist/core/errors.js +14 -2
- package/dist/core/errors.js.map +1 -1
- package/dist/core/types.d.ts +70 -3
- package/dist/core/types.d.ts.map +1 -1
- package/dist/fluent/agent-connection.d.ts +16 -1
- package/dist/fluent/agent-connection.d.ts.map +1 -1
- package/dist/fluent/agent-connection.js +20 -0
- package/dist/fluent/agent-connection.js.map +1 -1
- package/dist/fluent/service.d.ts +34 -0
- package/dist/fluent/service.d.ts.map +1 -0
- package/dist/fluent/service.js +41 -0
- package/dist/fluent/service.js.map +1 -0
- package/dist/fluent/vault.d.ts +75 -8
- package/dist/fluent/vault.d.ts.map +1 -1
- package/dist/fluent/vault.js +82 -6
- package/dist/fluent/vault.js.map +1 -1
- package/dist/index.d.ts +3 -3
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +7 -10
- package/dist/index.js.map +1 -1
- package/dist/internal/agents.d.ts +54 -7
- package/dist/internal/agents.d.ts.map +1 -1
- package/dist/internal/agents.js +110 -8
- package/dist/internal/agents.js.map +1 -1
- package/dist/internal/connectors.d.ts +161 -0
- package/dist/internal/connectors.d.ts.map +1 -0
- package/dist/internal/connectors.js +66 -0
- package/dist/internal/connectors.js.map +1 -0
- package/dist/internal/cubbies.d.ts +33 -0
- package/dist/internal/cubbies.d.ts.map +1 -1
- package/dist/internal/cubbies.js +39 -0
- package/dist/internal/cubbies.js.map +1 -1
- package/dist/internal/memory.d.ts +79 -5
- package/dist/internal/memory.d.ts.map +1 -1
- package/dist/internal/memory.js +53 -9
- package/dist/internal/memory.js.map +1 -1
- package/dist/internal/vaults.d.ts +8 -5
- package/dist/internal/vaults.d.ts.map +1 -1
- package/dist/internal/vaults.js +0 -10
- package/dist/internal/vaults.js.map +1 -1
- package/dist/internal-exports.d.ts +1 -0
- package/dist/internal-exports.d.ts.map +1 -1
- package/dist/internal-exports.js +1 -0
- package/dist/internal-exports.js.map +1 -1
- package/package.json +3 -3
- package/dist/internal/gateway-info.d.ts +0 -16
- package/dist/internal/gateway-info.d.ts.map +0 -1
- package/dist/internal/gateway-info.js +0 -34
- package/dist/internal/gateway-info.js.map +0 -1
package/dist/fluent/vault.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/fluent/vault.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,MAAM,GAGP,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/fluent/vault.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,MAAM,GAGP,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,cAAc,GAIf,MAAM,2BAA2B,CAAC;AAUnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAwC/D,MAAM,OAAO,KAAK;IACP,EAAE,CAAS;IACX,QAAQ,CAAS;IACjB,YAAY,CAAS;IACrB,eAAe,CAAS;IACxB,MAAM,CAAS;IACf,MAAM,CAAyB;IAC/B,cAAc,CAAU;IACjC;;;;OAIG;IACM,WAAW,CAAU;IAE9B,2EAA2E;IAClE,KAAK,CAAkB;IACf,OAAO,CAAS;IAChB,OAAO,CAAS;IAChB,OAAO,CAAS;IACjC;;;;OAIG;IACM,MAAM,CAAS;IACxB;;;;OAIG;IACM,WAAW,CAAc;IACjB,OAAO,CAAwB;IAC/B,IAAI,CAAa;IACjB,OAAO,CAAU;IACjB,WAAW,CAAS;IAErC,YACE,IAAqB,EACrB,MAAmB,EACnB,OAAkB,EAAE;QAEpB,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,0EAA0E;QAC1E,uEAAuE;QACvE,8BAA8B;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM;YAC5B,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG;QACP,IAAI,EAAE,GAAqB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,GAAG,EAAE,CAAC,CAAS,EAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,CAAqB,EAAkB,EAAE,CAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,CAAS,EAAE,CAAqB,EAAkB,EAAE,CAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC,CAAS,EAAiB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KACtE,CAAC;IAEF,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,wFAAwF;IACxF,UAAU;QACR,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,gFAAgF;IAChF,cAAc,KAAc,OAAO,IAAI,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC;IAEpE,MAAM,GAAG;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACH,OAAO,EAAE,KAAK,EACZ,KAAwB,EACQ,EAAE;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,sDAAsD;YACtD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;gBAC9B,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,OAAO,CAAC;YAC/D,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,uEAAuE;oBACrE,IAAI,KAAK,CAAC,OAAO,wCAAwC;oBACzD,+BAA+B,CAClC,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,kDAAkD;YAClD,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAC5E,oEAAoE;YACpE,uEAAuE;YACvE,6DAA6D;YAC7D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEhE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,sBAAsB,CAAC;gBAC1D,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE;gBACpD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE;gBACrD,MAAM,EAAE,eAAe;gBACvB,GAAG,EAAE,IAAI,CAAC,IAAI;aACf,CAAC,CAAC;YAEH,MAAM,WAAW,GACf,KAAK,CAAC,KAAK,KAAK,SAAS;gBACvB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;gBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC;YAChC,MAAM,GAAG,GAAwB;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,WAAW;gBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;gBAC9B,kBAAkB;gBAClB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,EAAE,KAAK,IAAsC,EAAE;YACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC,GAAG,CACd,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CACzD,CAAC;QACJ,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,CAAS,EAAkC,EAAE;YACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,sDAAsD;QACtD,WAAW,EAAE,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QACpF;;;WAGG;QACH,aAAa,EAAE,CACb,OAAe,EACf,YAAoB,EACpB,IAA2B,EACO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC;QACpF,gBAAgB,EAAE,CAAC,OAAe,EAAE,YAAoB,EAAiB,EAAE,CACzE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC;KAC7C,CAAC;IAEF,IAAI,GAAG;QACL,IAAI,EAAE,CACJ,IAAyD,EAAE,EACxC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,GAAG,EAAE,CAAC,KAAa,EAAa,EAAE,CAChC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;KAC5C,CAAC;CACH"}
|
package/dist/index.d.ts
CHANGED
|
@@ -4,6 +4,7 @@ export { OnboardingRequiredError, OnboardingTimeoutError, } from "./internal/onb
|
|
|
4
4
|
export type { OnboardingStatus, OnboardingResult, BootstrapResult, } from "./internal/onboarding.js";
|
|
5
5
|
export { Vault } from "./fluent/vault.js";
|
|
6
6
|
export { ScopeHandle } from "./fluent/scope.js";
|
|
7
|
+
export { ServiceHandle } from "./fluent/service.js";
|
|
7
8
|
export { AgentConnectionHandle } from "./fluent/agent-connection.js";
|
|
8
9
|
export { JobHandle } from "./fluent/job.js";
|
|
9
10
|
export { CubbyHandle } from "./fluent/cubby.js";
|
|
@@ -18,15 +19,14 @@ export { DelegationAuthProvider } from "./auth/delegation.js";
|
|
|
18
19
|
export type { AgentManifest, AgentCard, MarketplaceAgentCardResponse, MarketplaceAgentSummary, } from "./internal/marketplace.js";
|
|
19
20
|
export type { HealthResponse } from "./internal/health.js";
|
|
20
21
|
export type { MemoryRows } from "./internal/memory.js";
|
|
22
|
+
export type { AgentAccess, Connection, ConnectionOwner, ConnectorAction, ConnectorCredentialKind, ConnectorDescriptor, ConnectorEvent, ConnectorField, CreateConnectionRequest, SetAgentAccessRequest, UpdateConnectionRequest, } from "./internal/connectors.js";
|
|
21
23
|
export { GarClient, signAndSubmitAgreement, getAsPubkey, } from "./agreements/index.js";
|
|
22
24
|
export type { SignedAgreementEnvelope, SignAndSubmitAgreementOptions, SignAndSubmitAgreementResult, } from "./agreements/index.js";
|
|
23
25
|
export { VaultRequestError, VaultNotImplementedError, VaultSignerRequiredError, } from "./core/errors.js";
|
|
24
26
|
export { GRANT_ISSUED_AT_HEADER, GRANT_SCHEMA, GRANT_SCHEMA_V2, GRANT_SIGNATURE_HEADER, GrantVerificationError, NO_GRANT_EXPIRY, NO_PRIVACY_CEILING, PRIVACY_CEILINGS, canonicalGrantBytes, canonicalGrantBytesWithCeiling, canonicalPubkeyHex, decodeGrantDoc, grantExpiry, isValidPrivacyCeiling, privacyCeiling, vaultIdFor, verifyGrant, verifyGrantSig, verifySignedRoster, } from "./core/grant-doc.js";
|
|
25
27
|
export type { Grant, GrantExpiry, PrivacyCeiling, PrivacyCeilingName, RosterVerifyOptions } from "./core/grant-doc.js";
|
|
26
28
|
export type { PutMemberOptions, PutScopesOptions } from "./internal/memberships.js";
|
|
27
|
-
export type { Task, TasksPage, TaskState, AgentConnection, AgentConnectionStatus, ConnectAgentRequest, CubbyQueryResponse, CubbyExecResponse, EventInput, EventRole, EventsPage, IngestOrigin, Job, JobsPage, JobState, Member, MemberRole, MembershipState, MembershipSummary, PublishResult, Scope, ScopeGrants, ScopeLevel, SignedGrant, SignedRoster, StreamSummary, StreamsListResponse, VaultCredentialStatus, VaultEvent, VaultRecord, VaultSigType, } from "./core/types.js";
|
|
29
|
+
export type { Task, TasksPage, TaskState, AgentConnection, AgentConnectionStatus, ConnectAgentRequest, ConnectionCeiling, CubbyQueryResponse, CubbyExecResponse, EventInput, EventRole, EventsPage, IngestOrigin, Job, JobsPage, JobState, Member, MemberRole, MembershipState, MembershipSummary, PublishResult, Scope, ScopeGrants, ScopeLevel, ScopeSelector, SignedGrant, SignedRoster, StreamSummary, StreamsListResponse, VaultCredentialStatus, VaultEvent, VaultRecord, VaultSigType, } from "./core/types.js";
|
|
28
30
|
export { VaultInfo } from "./internal/vault-info.js";
|
|
29
31
|
export type { DelegateInfo } from "./internal/vault-info.js";
|
|
30
|
-
export { registerDelegate, revokeDelegate, GatewayDelegateError, } from "@cef-ai/account/delegate-grants";
|
|
31
|
-
export type { RegisterDelegateInput, RevokeDelegateInput, } from "@cef-ai/account/delegate-grants";
|
|
32
32
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzD,YAAY,EACV,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,YAAY,EACV,aAAa,EACb,SAAS,EACT,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzD,YAAY,EACV,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,YAAY,EACV,aAAa,EACb,SAAS,EACT,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAIvD,YAAY,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAKvH,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,YAAY,EACV,IAAI,EACJ,SAAS,EACT,SAAS,EACT,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,GAAG,EACH,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,KAAK,EACL,WAAW,EACX,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AAQzB,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -5,6 +5,7 @@ export { VaultSDK } from "./client.js";
|
|
|
5
5
|
export { OnboardingRequiredError, OnboardingTimeoutError, } from "./internal/onboarding.js";
|
|
6
6
|
export { Vault } from "./fluent/vault.js";
|
|
7
7
|
export { ScopeHandle } from "./fluent/scope.js";
|
|
8
|
+
export { ServiceHandle } from "./fluent/service.js";
|
|
8
9
|
export { AgentConnectionHandle } from "./fluent/agent-connection.js";
|
|
9
10
|
export { JobHandle } from "./fluent/job.js";
|
|
10
11
|
export { CubbyHandle } from "./fluent/cubby.js";
|
|
@@ -20,15 +21,11 @@ export { VaultRequestError, VaultNotImplementedError, VaultSignerRequiredError,
|
|
|
20
21
|
// `SignedGrant.role`/`.scopes` instead and end up with a signature it checked
|
|
21
22
|
// and did not act on.
|
|
22
23
|
export { GRANT_ISSUED_AT_HEADER, GRANT_SCHEMA, GRANT_SCHEMA_V2, GRANT_SIGNATURE_HEADER, GrantVerificationError, NO_GRANT_EXPIRY, NO_PRIVACY_CEILING, PRIVACY_CEILINGS, canonicalGrantBytes, canonicalGrantBytesWithCeiling, canonicalPubkeyHex, decodeGrantDoc, grantExpiry, isValidPrivacyCeiling, privacyCeiling, vaultIdFor, verifyGrant, verifyGrantSig, verifySignedRoster, } from "./core/grant-doc.js";
|
|
23
|
-
//
|
|
24
|
-
//
|
|
25
|
-
//
|
|
26
|
-
//
|
|
27
|
-
//
|
|
28
|
-
//
|
|
29
|
-
// through the SDK instance). Re-exported here via the leaf `delegate-grants`
|
|
30
|
-
// subpath — never the `@cef-ai/account` root barrel — to keep vault-sdk
|
|
31
|
-
// chain-free (ADR-033).
|
|
24
|
+
// Vault-api's delegate identity (`VaultInfo` / `DelegateInfo`) stays exported
|
|
25
|
+
// for the frontend. The `registerDelegate`/`revokeDelegate` re-exports (and
|
|
26
|
+
// the `vault.delegate.{pubkey,grant,revoke}` namespace they backed) were
|
|
27
|
+
// removed with the gateway's `/auth/delegates` API: vault write delegation is
|
|
28
|
+
// now a durable on-chain NonTransfer proxy grant
|
|
29
|
+
// (`@cef-ai/account`'s `ensureVaultDelegate`).
|
|
32
30
|
export { VaultInfo } from "./internal/vault-info.js";
|
|
33
|
-
export { registerDelegate, revokeDelegate, GatewayDelegateError, } from "@cef-ai/account/delegate-grants";
|
|
34
31
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,kCAAkC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,kCAAkC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA+B9D,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,sBAAsB;AACtB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AA4C7B,8EAA8E;AAC9E,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,iDAAiD;AACjD,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import type { VaultHttpClient } from "../core/http.js";
|
|
2
|
-
import type { AgentConnection, AgentConnectionStatus, ConnectAgentRequest } from "../core/types.js";
|
|
2
|
+
import type { AgentConnection, AgentConnectionStatus, ConnectAgentRequest, ConnectionCeiling } from "../core/types.js";
|
|
3
3
|
export interface ListAgentsOptions {
|
|
4
4
|
status?: AgentConnectionStatus;
|
|
5
5
|
}
|
|
@@ -7,17 +7,64 @@ export declare class Agents {
|
|
|
7
7
|
private readonly http;
|
|
8
8
|
constructor(http: VaultHttpClient);
|
|
9
9
|
/**
|
|
10
|
-
* Low-level surface — POSTs a `ConnectAgentRequest` (`{ agentId, scope
|
|
11
|
-
* settings?, agreementSignature? }`) with a pre-signed
|
|
12
|
-
* `
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
10
|
+
* Low-level surface — POSTs a `ConnectAgentRequest` (`{ agentId, scope?,
|
|
11
|
+
* scopes?, settings?, agreementSignature? }`) with a pre-signed
|
|
12
|
+
* `agreementSignature`. Pass `scopes` for a set of vault scopes, or the
|
|
13
|
+
* singular `scope` for callers that predate the set — exactly one of the
|
|
14
|
+
* two is required (`ScopeSelector`); whichever is supplied is sent through
|
|
15
|
+
* untouched, never derived from the other. `version`/`manifestCid` are not
|
|
16
|
+
* sent; the vault-api resolves the manifest from the DDC registry. For the
|
|
17
|
+
* high-level flow that signs the GAR agreement on your behalf, use
|
|
18
|
+
* `vault.agents.connect({ agentId, scope, settings })` from
|
|
19
|
+
* `@cef-ai/vault-sdk` (requires `garEndpoint` + `wallet` on the SDK config).
|
|
20
|
+
*
|
|
21
|
+
* `ceiling` (optional) is the connection's spend ceiling, written
|
|
22
|
+
* atomically with the connection row. Set it here to avoid a window where
|
|
23
|
+
* the connection exists with no ceiling; use {@link setCeiling} to change it
|
|
24
|
+
* later. It is validated exactly as `setCeiling` validates (see there) and a
|
|
25
|
+
* violation rejects with `VaultRequestError(status 0, "BAD_REQUEST")` before
|
|
26
|
+
* any request is made. When present it is sent as `{ gpuUnits, a2aTokens }`
|
|
27
|
+
* with both axes explicit (absent axis = `0` = no ceiling on that axis);
|
|
28
|
+
* when `undefined` the `ceiling` key is omitted from the body. The resolved
|
|
29
|
+
* connection's `ceiling` reports what the server stored (absent when
|
|
30
|
+
* neither axis is set).
|
|
16
31
|
*/
|
|
17
32
|
connect(v: string, req: ConnectAgentRequest): Promise<AgentConnection>;
|
|
18
33
|
list(v: string, opts?: ListAgentsOptions): Promise<AgentConnection[]>;
|
|
19
34
|
get(v: string, a: string): Promise<AgentConnection>;
|
|
20
35
|
update(v: string, a: string, settings: Record<string, unknown>): Promise<AgentConnection>;
|
|
36
|
+
/**
|
|
37
|
+
* Set (replace) the connection's spend ceiling —
|
|
38
|
+
* `PUT /vaults/:v/agents/:a/ceiling`, wallet-signed like {@link update}.
|
|
39
|
+
*
|
|
40
|
+
* Both axes are always sent; an absent axis is sent as `0` (= no ceiling on
|
|
41
|
+
* that axis), so `setCeiling(v, a, {})` clears both. This is a full replace,
|
|
42
|
+
* not a merge: omitting `a2aTokens` clears an existing token ceiling.
|
|
43
|
+
*
|
|
44
|
+
* Validated before sending: only the keys `gpuUnits` and `a2aTokens` are
|
|
45
|
+
* allowed (any other own key is refused, even with an `undefined` value,
|
|
46
|
+
* mirroring vault-api's unknown-field refusal); each axis must be a finite
|
|
47
|
+
* number >= 0; `a2aTokens` must be an integer <= `Number.MAX_SAFE_INTEGER`.
|
|
48
|
+
* A violation throws {@link VaultRequestError} with `status` 0 and `code`
|
|
49
|
+
* "BAD_REQUEST" (the same code vault-api uses), and no request is made; the
|
|
50
|
+
* returned promise rejects. `status` 0 is also what a network failure
|
|
51
|
+
* carries — distinguish a validation refusal by `code === "BAD_REQUEST"`.
|
|
52
|
+
*
|
|
53
|
+
* Resolves to the updated {@link AgentConnection}; its `ceiling` is absent
|
|
54
|
+
* when both axes are 0.
|
|
55
|
+
*/
|
|
56
|
+
setCeiling(v: string, a: string, ceiling: ConnectionCeiling): Promise<AgentConnection>;
|
|
21
57
|
disconnect(v: string, a: string): Promise<void>;
|
|
22
58
|
}
|
|
59
|
+
/**
|
|
60
|
+
* Client-side mirror of vault-api's ceiling validation. Returns the wire body
|
|
61
|
+
* (`{ gpuUnits, a2aTokens }`, both axes explicit). Throws
|
|
62
|
+
* `VaultRequestError(status 0, "BAD_REQUEST")` on a violation. Shared by
|
|
63
|
+
* `setCeiling`, `connect` and the fluent `vault.agents.connect` (which calls it
|
|
64
|
+
* before the GAR agreement is signed, so a bad ceiling costs no ceremony).
|
|
65
|
+
*/
|
|
66
|
+
export declare function validateCeiling(c: ConnectionCeiling): {
|
|
67
|
+
gpuUnits: number;
|
|
68
|
+
a2aTokens: number;
|
|
69
|
+
};
|
|
23
70
|
//# sourceMappingURL=agents.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/internal/agents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/internal/agents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIvH,MAAM,WAAW,iBAAiB;IAAG,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAAE;AAErE,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAkBtE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAK/E,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAGnD,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAGzF;;;;;;;;;;;;;;;;;;;OAmBG;IACG,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAK5F,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhD;AAMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,iBAAiB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAiC7F"}
|
package/dist/internal/agents.js
CHANGED
|
@@ -1,19 +1,50 @@
|
|
|
1
1
|
import { endpoints } from "../core/endpoints.js";
|
|
2
|
+
import { resolveConnectScopes } from "../core/connect-scopes.js";
|
|
3
|
+
import { VaultRequestError } from "../core/errors.js";
|
|
2
4
|
export class Agents {
|
|
3
5
|
http;
|
|
4
6
|
constructor(http) {
|
|
5
7
|
this.http = http;
|
|
6
8
|
}
|
|
7
9
|
/**
|
|
8
|
-
* Low-level surface — POSTs a `ConnectAgentRequest` (`{ agentId, scope
|
|
9
|
-
* settings?, agreementSignature? }`) with a pre-signed
|
|
10
|
-
* `
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
10
|
+
* Low-level surface — POSTs a `ConnectAgentRequest` (`{ agentId, scope?,
|
|
11
|
+
* scopes?, settings?, agreementSignature? }`) with a pre-signed
|
|
12
|
+
* `agreementSignature`. Pass `scopes` for a set of vault scopes, or the
|
|
13
|
+
* singular `scope` for callers that predate the set — exactly one of the
|
|
14
|
+
* two is required (`ScopeSelector`); whichever is supplied is sent through
|
|
15
|
+
* untouched, never derived from the other. `version`/`manifestCid` are not
|
|
16
|
+
* sent; the vault-api resolves the manifest from the DDC registry. For the
|
|
17
|
+
* high-level flow that signs the GAR agreement on your behalf, use
|
|
18
|
+
* `vault.agents.connect({ agentId, scope, settings })` from
|
|
19
|
+
* `@cef-ai/vault-sdk` (requires `garEndpoint` + `wallet` on the SDK config).
|
|
20
|
+
*
|
|
21
|
+
* `ceiling` (optional) is the connection's spend ceiling, written
|
|
22
|
+
* atomically with the connection row. Set it here to avoid a window where
|
|
23
|
+
* the connection exists with no ceiling; use {@link setCeiling} to change it
|
|
24
|
+
* later. It is validated exactly as `setCeiling` validates (see there) and a
|
|
25
|
+
* violation rejects with `VaultRequestError(status 0, "BAD_REQUEST")` before
|
|
26
|
+
* any request is made. When present it is sent as `{ gpuUnits, a2aTokens }`
|
|
27
|
+
* with both axes explicit (absent axis = `0` = no ceiling on that axis);
|
|
28
|
+
* when `undefined` the `ceiling` key is omitted from the body. The resolved
|
|
29
|
+
* connection's `ceiling` reports what the server stored (absent when
|
|
30
|
+
* neither axis is set).
|
|
14
31
|
*/
|
|
15
|
-
connect(v, req) {
|
|
16
|
-
|
|
32
|
+
async connect(v, req) {
|
|
33
|
+
// The ceiling is validated (and normalised to the two-axis wire body)
|
|
34
|
+
// before the request goes out — the same `validateCeiling` setCeiling
|
|
35
|
+
// uses. Absent → the key stays off the body entirely.
|
|
36
|
+
const { ceiling, ...rest } = req;
|
|
37
|
+
const body = ceiling === undefined ? { ...rest } : { ...rest, ceiling: validateCeiling(ceiling) };
|
|
38
|
+
// Validates the scope selector without rewriting it — `req` is still
|
|
39
|
+
// forwarded exactly as given below; see resolveConnectScopes for why
|
|
40
|
+
// this check is needed even though `ConnectAgentRequest` is typed to
|
|
41
|
+
// forbid both-or-neither already. `connect` is `async` (rather than
|
|
42
|
+
// just returning the `http.send` promise) specifically so this
|
|
43
|
+
// validation failure is a rejected promise like every other error from
|
|
44
|
+
// this method, not a synchronous throw a caller's `await`/`.catch`
|
|
45
|
+
// wouldn't expect.
|
|
46
|
+
resolveConnectScopes(req, "Agents.connect");
|
|
47
|
+
return this.http.send("POST", endpoints.agents(v), { body });
|
|
17
48
|
}
|
|
18
49
|
async list(v, opts = {}) {
|
|
19
50
|
const res = await this.http.send("GET", endpoints.agents(v), { query: { status: opts.status } });
|
|
@@ -25,8 +56,79 @@ export class Agents {
|
|
|
25
56
|
update(v, a, settings) {
|
|
26
57
|
return this.http.send("PATCH", endpoints.agent(v, a), { body: { settings } });
|
|
27
58
|
}
|
|
59
|
+
/**
|
|
60
|
+
* Set (replace) the connection's spend ceiling —
|
|
61
|
+
* `PUT /vaults/:v/agents/:a/ceiling`, wallet-signed like {@link update}.
|
|
62
|
+
*
|
|
63
|
+
* Both axes are always sent; an absent axis is sent as `0` (= no ceiling on
|
|
64
|
+
* that axis), so `setCeiling(v, a, {})` clears both. This is a full replace,
|
|
65
|
+
* not a merge: omitting `a2aTokens` clears an existing token ceiling.
|
|
66
|
+
*
|
|
67
|
+
* Validated before sending: only the keys `gpuUnits` and `a2aTokens` are
|
|
68
|
+
* allowed (any other own key is refused, even with an `undefined` value,
|
|
69
|
+
* mirroring vault-api's unknown-field refusal); each axis must be a finite
|
|
70
|
+
* number >= 0; `a2aTokens` must be an integer <= `Number.MAX_SAFE_INTEGER`.
|
|
71
|
+
* A violation throws {@link VaultRequestError} with `status` 0 and `code`
|
|
72
|
+
* "BAD_REQUEST" (the same code vault-api uses), and no request is made; the
|
|
73
|
+
* returned promise rejects. `status` 0 is also what a network failure
|
|
74
|
+
* carries — distinguish a validation refusal by `code === "BAD_REQUEST"`.
|
|
75
|
+
*
|
|
76
|
+
* Resolves to the updated {@link AgentConnection}; its `ceiling` is absent
|
|
77
|
+
* when both axes are 0.
|
|
78
|
+
*/
|
|
79
|
+
async setCeiling(v, a, ceiling) {
|
|
80
|
+
// `async` so a validation failure is a rejected promise, not a sync throw.
|
|
81
|
+
const body = validateCeiling(ceiling);
|
|
82
|
+
return this.http.send("PUT", endpoints.agentCeiling(v, a), { body: { ...body } });
|
|
83
|
+
}
|
|
28
84
|
disconnect(v, a) {
|
|
29
85
|
return this.http.send("DELETE", endpoints.agent(v, a), { body: {} });
|
|
30
86
|
}
|
|
31
87
|
}
|
|
88
|
+
function invalidCeiling(msg) {
|
|
89
|
+
return new VaultRequestError(`invalid ceiling: ${msg}`, 0, "BAD_REQUEST");
|
|
90
|
+
}
|
|
91
|
+
/**
|
|
92
|
+
* Client-side mirror of vault-api's ceiling validation. Returns the wire body
|
|
93
|
+
* (`{ gpuUnits, a2aTokens }`, both axes explicit). Throws
|
|
94
|
+
* `VaultRequestError(status 0, "BAD_REQUEST")` on a violation. Shared by
|
|
95
|
+
* `setCeiling`, `connect` and the fluent `vault.agents.connect` (which calls it
|
|
96
|
+
* before the GAR agreement is signed, so a bad ceiling costs no ceremony).
|
|
97
|
+
*/
|
|
98
|
+
export function validateCeiling(c) {
|
|
99
|
+
if (c === null || typeof c !== "object" || Array.isArray(c)) {
|
|
100
|
+
throw invalidCeiling("expected an object { gpuUnits?, a2aTokens? }");
|
|
101
|
+
}
|
|
102
|
+
// Mirror vault-api's DisallowUnknownFields: a misspelled key (`a2a_tokens`)
|
|
103
|
+
// would otherwise be dropped and its axis sent as 0 — silently clearing a
|
|
104
|
+
// ceiling in force. Checked before the axes are read. A key present with an
|
|
105
|
+
// `undefined` value is refused too: the key itself is the mistake.
|
|
106
|
+
for (const k of Object.keys(c)) {
|
|
107
|
+
if (k !== "gpuUnits" && k !== "a2aTokens") {
|
|
108
|
+
throw invalidCeiling(`unknown field ${JSON.stringify(k)} (expected { gpuUnits?, a2aTokens? })`);
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
const axis = (name) => {
|
|
112
|
+
const v = c[name];
|
|
113
|
+
if (v === undefined)
|
|
114
|
+
return 0;
|
|
115
|
+
if (typeof v !== "number" || !Number.isFinite(v)) {
|
|
116
|
+
throw invalidCeiling(`${name} must be a finite number (got ${String(v)})`);
|
|
117
|
+
}
|
|
118
|
+
if (v < 0)
|
|
119
|
+
throw invalidCeiling(`${name} must be >= 0 (got ${v})`);
|
|
120
|
+
return v;
|
|
121
|
+
};
|
|
122
|
+
const gpuUnits = axis("gpuUnits");
|
|
123
|
+
const a2aTokens = axis("a2aTokens");
|
|
124
|
+
if (!Number.isInteger(a2aTokens)) {
|
|
125
|
+
throw invalidCeiling(`a2aTokens must be an integer (got ${a2aTokens})`);
|
|
126
|
+
}
|
|
127
|
+
// Above 2^53 the number no longer round-trips exactly through JSON (and
|
|
128
|
+
// above 2^63 the server fails to decode it into int64 at all).
|
|
129
|
+
if (a2aTokens > Number.MAX_SAFE_INTEGER) {
|
|
130
|
+
throw invalidCeiling(`a2aTokens must be <= Number.MAX_SAFE_INTEGER (got ${a2aTokens})`);
|
|
131
|
+
}
|
|
132
|
+
return { gpuUnits, a2aTokens };
|
|
133
|
+
}
|
|
32
134
|
//# sourceMappingURL=agents.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/internal/agents.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/internal/agents.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAItD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,OAAO,CAAC,CAAS,EAAE,GAAwB;QAC/C,sEAAsE;QACtE,sEAAsE;QACtE,sDAAsD;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACjC,MAAM,IAAI,GACR,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,+DAA+D;QAC/D,uEAAuE;QACvE,mEAAmE;QACnE,mBAAmB;QACnB,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAS,EAAE,OAA0B,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC9B,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,GAAG,CAAC,CAAS,EAAE,CAAS;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS,EAAE,QAAiC;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IACD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,UAAU,CAAC,CAAS,EAAE,CAAS,EAAE,OAA0B;QAC/D,2EAA2E;QAC3E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,UAAU,CAAC,CAAS,EAAE,CAAS;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;CACF;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,IAAI,iBAAiB,CAAC,oBAAoB,GAAG,EAAE,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,CAAoB;IAClD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,cAAc,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,cAAc,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAA8B,EAAU,EAAE;QACtD,MAAM,CAAC,GAAY,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,cAAc,CAAC,GAAG,IAAI,iCAAiC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,cAAc,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,qCAAqC,SAAS,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,wEAAwE;IACxE,+DAA+D;IAC/D,IAAI,SAAS,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,cAAc,CAAC,qDAAqD,SAAS,GAAG,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}
|
|
@@ -0,0 +1,161 @@
|
|
|
1
|
+
import type { VaultHttpClient } from "../core/http.js";
|
|
2
|
+
/**
|
|
3
|
+
* One field of a connector's config, secrets, action input/output, event
|
|
4
|
+
* payload or event filter.
|
|
5
|
+
*
|
|
6
|
+
* `list` is an array of strings (a list input also accepts a comma-separated
|
|
7
|
+
* string, which the vault splits); `json` is any JSON object or array.
|
|
8
|
+
*/
|
|
9
|
+
export interface ConnectorField {
|
|
10
|
+
key: string;
|
|
11
|
+
label: string;
|
|
12
|
+
type: "string" | "text" | "number" | "boolean" | "url" | "email" | "secret" | "options" | "list" | "json";
|
|
13
|
+
required?: boolean;
|
|
14
|
+
options?: string[];
|
|
15
|
+
placeholder?: string;
|
|
16
|
+
help?: string;
|
|
17
|
+
/** Filled by the connector (e.g. Slack's bot user id); never sent by a client. */
|
|
18
|
+
readOnly?: boolean;
|
|
19
|
+
}
|
|
20
|
+
/** How a connector's credential is held; copied onto each connection. */
|
|
21
|
+
export type ConnectorCredentialKind = "bot_token" | "api_key" | "smtp" | "oauth_user";
|
|
22
|
+
/** Something a workflow step can ask the connector to do (`send_message`). */
|
|
23
|
+
export interface ConnectorAction {
|
|
24
|
+
name: string;
|
|
25
|
+
displayName: string;
|
|
26
|
+
description?: string;
|
|
27
|
+
/** Whether the action only reads from the external system or changes it. */
|
|
28
|
+
access: "read" | "write";
|
|
29
|
+
/** Provider permission scopes the credential must hold (`chat:write`). */
|
|
30
|
+
scopes: string[];
|
|
31
|
+
input: ConnectorField[];
|
|
32
|
+
output: ConnectorField[];
|
|
33
|
+
}
|
|
34
|
+
/** Something the connector can start a workflow with (`message.received`). */
|
|
35
|
+
export interface ConnectorEvent {
|
|
36
|
+
name: string;
|
|
37
|
+
displayName: string;
|
|
38
|
+
description?: string;
|
|
39
|
+
payload: ConnectorField[];
|
|
40
|
+
filter: ConnectorField[];
|
|
41
|
+
}
|
|
42
|
+
/** A connector, as the vault's catalogue describes it — enough to render its forms and nodes. */
|
|
43
|
+
export interface ConnectorDescriptor {
|
|
44
|
+
name: string;
|
|
45
|
+
displayName: string;
|
|
46
|
+
description?: string;
|
|
47
|
+
credentialKind: ConnectorCredentialKind;
|
|
48
|
+
config: ConnectorField[];
|
|
49
|
+
secrets: ConnectorField[];
|
|
50
|
+
actions: ConnectorAction[];
|
|
51
|
+
events: ConnectorEvent[];
|
|
52
|
+
ingress: boolean;
|
|
53
|
+
/**
|
|
54
|
+
* The actions are discovered per connection (an MCP server's tools), not
|
|
55
|
+
* listed here: read them with `connections.actions(connectionId)`.
|
|
56
|
+
*/
|
|
57
|
+
dynamicActions?: boolean;
|
|
58
|
+
/**
|
|
59
|
+
* `initialManifest` creates the external app before the connection exists
|
|
60
|
+
* (no webhook); `appManifest` is applied after and may contain
|
|
61
|
+
* `{{webhookUrl}}`.
|
|
62
|
+
*/
|
|
63
|
+
setup: {
|
|
64
|
+
instructions: string;
|
|
65
|
+
initialManifest?: string;
|
|
66
|
+
appManifest?: string;
|
|
67
|
+
};
|
|
68
|
+
}
|
|
69
|
+
/**
|
|
70
|
+
* Who a connection belongs to. Only `workspace` can be created today; the
|
|
71
|
+
* vault answers 400 for a `member` (personal) connection.
|
|
72
|
+
*/
|
|
73
|
+
export type ConnectionOwner = {
|
|
74
|
+
kind: "workspace";
|
|
75
|
+
} | {
|
|
76
|
+
kind: "member";
|
|
77
|
+
pubkey: string;
|
|
78
|
+
};
|
|
79
|
+
/**
|
|
80
|
+
* One configured account of a connector in a vault. Secrets are write-only:
|
|
81
|
+
* sent on `create`/`update` and never returned. Non-admin readers get no
|
|
82
|
+
* `config`.
|
|
83
|
+
*/
|
|
84
|
+
export interface Connection {
|
|
85
|
+
id: string;
|
|
86
|
+
vaultId: string;
|
|
87
|
+
connector: string;
|
|
88
|
+
name: string;
|
|
89
|
+
scopes: string[];
|
|
90
|
+
owner: ConnectionOwner;
|
|
91
|
+
credentialKind: ConnectorCredentialKind;
|
|
92
|
+
config?: Record<string, unknown>;
|
|
93
|
+
status: "active" | "revoked";
|
|
94
|
+
createdBy: string;
|
|
95
|
+
createdAt: string;
|
|
96
|
+
updatedAt: string;
|
|
97
|
+
/** Where the external system posts webhooks, for connectors with ingress. */
|
|
98
|
+
webhookUrl?: string;
|
|
99
|
+
}
|
|
100
|
+
/** What one agent may do with one connection, in the agent connection's scope. */
|
|
101
|
+
export interface AgentAccess {
|
|
102
|
+
connectionId: string;
|
|
103
|
+
agentId: string;
|
|
104
|
+
scope: string;
|
|
105
|
+
actions: string[];
|
|
106
|
+
events: string[];
|
|
107
|
+
filter: Record<string, unknown>;
|
|
108
|
+
grantedBy: string;
|
|
109
|
+
updatedAt: string;
|
|
110
|
+
}
|
|
111
|
+
export interface CreateConnectionRequest {
|
|
112
|
+
connector: string;
|
|
113
|
+
name: string;
|
|
114
|
+
scopes: string[];
|
|
115
|
+
/** Defaults to the workspace. */
|
|
116
|
+
owner?: ConnectionOwner;
|
|
117
|
+
config: Record<string, unknown>;
|
|
118
|
+
secrets: Record<string, unknown>;
|
|
119
|
+
}
|
|
120
|
+
/** Omitted keys are unchanged; `secrets` omitted keeps the sealed ones. */
|
|
121
|
+
export interface UpdateConnectionRequest {
|
|
122
|
+
name?: string;
|
|
123
|
+
scopes?: string[];
|
|
124
|
+
config?: Record<string, unknown>;
|
|
125
|
+
secrets?: Record<string, unknown>;
|
|
126
|
+
}
|
|
127
|
+
/**
|
|
128
|
+
* An agent's access to a connection. The scope is not sent: it is the agent
|
|
129
|
+
* connection's own. Both lists empty deletes the access.
|
|
130
|
+
*/
|
|
131
|
+
export interface SetAgentAccessRequest {
|
|
132
|
+
actions: string[];
|
|
133
|
+
events: string[];
|
|
134
|
+
filter?: Record<string, unknown>;
|
|
135
|
+
}
|
|
136
|
+
/** The connectors vault-api supports (public, vault-less). */
|
|
137
|
+
export declare function listConnectors(http: VaultHttpClient): Promise<ConnectorDescriptor[]>;
|
|
138
|
+
/** This vault's connections: create, edit and revoke them. */
|
|
139
|
+
export declare class Connections {
|
|
140
|
+
private readonly http;
|
|
141
|
+
private readonly vaultId;
|
|
142
|
+
constructor(http: VaultHttpClient, vaultId: string);
|
|
143
|
+
list(): Promise<Connection[]>;
|
|
144
|
+
create(body: CreateConnectionRequest): Promise<Connection>;
|
|
145
|
+
update(connectionId: string, body: UpdateConnectionRequest): Promise<Connection>;
|
|
146
|
+
/** Revokes the connection and every agent's access to it. */
|
|
147
|
+
revoke(connectionId: string): Promise<void>;
|
|
148
|
+
/** A connection's actions as its connector reports them now (an MCP server's tools). */
|
|
149
|
+
actions(connectionId: string): Promise<ConnectorAction[]>;
|
|
150
|
+
}
|
|
151
|
+
/** Agents' access to this vault's connections (`/agents/:agentId/connections`). */
|
|
152
|
+
export declare class AgentConnectionAccess {
|
|
153
|
+
private readonly http;
|
|
154
|
+
private readonly vaultId;
|
|
155
|
+
constructor(http: VaultHttpClient, vaultId: string);
|
|
156
|
+
list(agentId: string): Promise<AgentAccess[]>;
|
|
157
|
+
/** Resolves `undefined` when both lists are empty and the vault deleted the access (204). */
|
|
158
|
+
set(agentId: string, connectionId: string, body: SetAgentAccessRequest): Promise<AgentAccess | undefined>;
|
|
159
|
+
remove(agentId: string, connectionId: string): Promise<void>;
|
|
160
|
+
}
|
|
161
|
+
//# sourceMappingURL=connectors.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connectors.d.ts","sourceRoot":"","sources":["../../src/internal/connectors.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EACA,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GACjF,MAAM,GAAG,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,yEAAyE;AACzE,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;AAEtF,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,iGAAiG;AACjG,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,uBAAuB,CAAC;IACxC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjF;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,eAAe,CAAC;IACvB,cAAc,EAAE,uBAAuB,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iCAAiC;IACjC,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,8DAA8D;AAC9D,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAE1F;AAED,8DAA8D;AAC9D,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM;IAG5B,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAInC,MAAM,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI1D,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,UAAU,CAAC;IAIhF,6DAA6D;IACvD,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,wFAAwF;IAClF,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAIhE;AAED,mFAAmF;AACnF,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM;IAG5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAKnD,6FAA6F;IAC7F,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAMnG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGnE"}
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
import { endpoints } from "../core/endpoints.js";
|
|
2
|
+
/** The connectors vault-api supports (public, vault-less). */
|
|
3
|
+
export async function listConnectors(http) {
|
|
4
|
+
return listOf(await http.send("GET", endpoints.connectors()), "connectors");
|
|
5
|
+
}
|
|
6
|
+
/** This vault's connections: create, edit and revoke them. */
|
|
7
|
+
export class Connections {
|
|
8
|
+
http;
|
|
9
|
+
vaultId;
|
|
10
|
+
constructor(http, vaultId) {
|
|
11
|
+
this.http = http;
|
|
12
|
+
this.vaultId = vaultId;
|
|
13
|
+
}
|
|
14
|
+
async list() {
|
|
15
|
+
return listOf(await this.http.send("GET", endpoints.connections(this.vaultId)), "connections");
|
|
16
|
+
}
|
|
17
|
+
create(body) {
|
|
18
|
+
return this.http.send("POST", endpoints.connections(this.vaultId), { body: defined(body) });
|
|
19
|
+
}
|
|
20
|
+
update(connectionId, body) {
|
|
21
|
+
return this.http.send("PATCH", endpoints.connection(this.vaultId, connectionId), { body: defined(body) });
|
|
22
|
+
}
|
|
23
|
+
/** Revokes the connection and every agent's access to it. */
|
|
24
|
+
async revoke(connectionId) {
|
|
25
|
+
await this.http.send("DELETE", endpoints.connection(this.vaultId, connectionId), { body: {} });
|
|
26
|
+
}
|
|
27
|
+
/** A connection's actions as its connector reports them now (an MCP server's tools). */
|
|
28
|
+
async actions(connectionId) {
|
|
29
|
+
return listOf(await this.http.send("GET", endpoints.connectionActions(this.vaultId, connectionId)), "actions");
|
|
30
|
+
}
|
|
31
|
+
}
|
|
32
|
+
/** Agents' access to this vault's connections (`/agents/:agentId/connections`). */
|
|
33
|
+
export class AgentConnectionAccess {
|
|
34
|
+
http;
|
|
35
|
+
vaultId;
|
|
36
|
+
constructor(http, vaultId) {
|
|
37
|
+
this.http = http;
|
|
38
|
+
this.vaultId = vaultId;
|
|
39
|
+
}
|
|
40
|
+
async list(agentId) {
|
|
41
|
+
return listOf(await this.http.send("GET", endpoints.agentConnections(this.vaultId, agentId)), "connections");
|
|
42
|
+
}
|
|
43
|
+
/** Resolves `undefined` when both lists are empty and the vault deleted the access (204). */
|
|
44
|
+
set(agentId, connectionId, body) {
|
|
45
|
+
return this.http.send("PUT", endpoints.agentConnection(this.vaultId, agentId, connectionId), {
|
|
46
|
+
body: { actions: body.actions, events: body.events, filter: body.filter ?? {} },
|
|
47
|
+
});
|
|
48
|
+
}
|
|
49
|
+
async remove(agentId, connectionId) {
|
|
50
|
+
await this.http.send("DELETE", endpoints.agentConnection(this.vaultId, agentId, connectionId), { body: {} });
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
/** `body` without its undefined keys: an absent key means "unchanged" / "default". */
|
|
54
|
+
function defined(body) {
|
|
55
|
+
const out = {};
|
|
56
|
+
for (const [k, v] of Object.entries(body))
|
|
57
|
+
if (v !== undefined)
|
|
58
|
+
out[k] = v;
|
|
59
|
+
return out;
|
|
60
|
+
}
|
|
61
|
+
/** A list response: `{<key>: [...]}` as vault-api wraps it. */
|
|
62
|
+
function listOf(r, key) {
|
|
63
|
+
const v = r && typeof r === "object" ? r[key] : undefined;
|
|
64
|
+
return Array.isArray(v) ? v : [];
|
|
65
|
+
}
|
|
66
|
+
//# sourceMappingURL=connectors.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connectors.js","sourceRoot":"","sources":["../../src/internal/connectors.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AA8IjD,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,OAAO,MAAM,CAAsB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AACnG,CAAC;AAED,8DAA8D;AAC9D,MAAM,OAAO,WAAW;IAEH;IACA;IAFnB,YACmB,IAAqB,EACrB,OAAe;QADf,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,KAAK,CAAC,IAAI;QACR,OAAO,MAAM,CAAa,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,CAAC,IAA6B;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,CAAC,YAAoB,EAAE,IAA6B;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,OAAO,MAAM,CACX,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACrG,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,qBAAqB;IAEb;IACA;IAFnB,YACmB,IAAqB,EACrB,OAAe;QADf,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,OAAO,MAAM,CACX,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACnG,CAAC;IAED,6FAA6F;IAC7F,GAAG,CAAC,OAAe,EAAE,YAAoB,EAAE,IAA2B;QACpE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;YAC3F,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,YAAoB;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/G,CAAC;CACF;AAED,sFAAsF;AACtF,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+DAA+D;AAC/D,SAAS,MAAM,CAAI,CAAU,EAAE,GAAW;IACxC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC"}
|