@nylorun/runtime 0.6.0-beta → 0.8.0-beta

package/dist/vault/service.d.ts

@@ -0,0 +1,99 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { CreateCredentialRequest, CreateVaultRequest, CredentialInfo, CredentialSelection, HostModelProviderInfo, HostModelView, PutHostModelRequest, RotateCredentialRequest, SelectHostModelRequest, VaultInfo } from "@nylorun/core/contracts";
+export type HostModelSecret = {
+    provider: string;
+    model: string;
+    baseUrl?: string;
+    authType: "api_key" | "oauth";
+    credential: {
+        type: "api_key" | "oauth";
+        key?: string;
+        env?: Record<string, string>;
+        refresh?: string;
+        access?: string;
+        expires?: number;
+        [key: string]: unknown;
+    };
+};
+export type AuthorizeResult = {
+    status: "unauthenticated";
+    url: string;
+    headers: Record<string, string>;
+} | {
+    status: "authorized";
+    url: string;
+    headers: {
+        authorization: string;
+    };
+} | {
+    status: "refused";
+    url: string;
+    credentialIds: string[];
+    reason: string;
+};
+export declare class VaultService {
+    private readonly db;
+    private readonly tx;
+    private readonly kek;
+    private readonly fetchImpl;
+    constructor(db: DatabaseSync, tx: <T>(fn: () => T) => T, kek: () => Buffer, fetchImpl: typeof fetch);
+    createVault(body: CreateVaultRequest): VaultInfo;
+    listVaults(ownerUserId: string): VaultInfo[];
+    getVault(id: string): VaultInfo;
+    deleteVault(id: string): {
+        id: string;
+    };
+    createCredential(vaultId: string, body: CreateCredentialRequest): CredentialInfo;
+    listCredentials(vaultId: string): CredentialInfo[];
+    getCredential(vaultId: string, id: string): CredentialInfo;
+    rotateCredential(vaultId: string, id: string, body: RotateCredentialRequest): CredentialInfo;
+    deleteCredential(vaultId: string, id: string): {
+        id: string;
+    };
+    assertAttachment(ownerUserId: string, vaultIds: readonly string[], selections: readonly CredentialSelection[]): void;
+    recordAttachment(sessionId: string, vaultIds: readonly string[]): void;
+    authorize(input: {
+        sessionId: string;
+        vaultIds: readonly string[];
+        credentialSelections: readonly CredentialSelection[];
+        url: string;
+        serverName?: string;
+    }): Promise<AuthorizeResult>;
+    getHostModel(): HostModelView;
+    listHostProviders(): {
+        providers: HostModelProviderInfo[];
+    };
+    putHostModel(body: PutHostModelRequest): HostModelView;
+    selectHostModel(body: SelectHostModelRequest): HostModelView;
+    readHostModel(): HostModelSecret | undefined;
+    updateHostCredential(credential: {
+        type: "api_key" | "oauth";
+        key?: string;
+        env?: Record<string, string>;
+        refresh?: string;
+        access?: string;
+        expires?: number;
+    }): void;
+    reject(route: string): void;
+    private refresh;
+    private replay;
+    private insertCredential;
+    private writePayload;
+    private readPayload;
+    private vaultInfo;
+    private vaultRow;
+    private ensureHostVault;
+    private validateHostModel;
+    private insertHostCredential;
+    private readHostPayload;
+    private hostModelRows;
+    private hostCredentialRowFor;
+    private activeHostCredentialRow;
+    private activeProviderId;
+    private setActiveProvider;
+    private deleteHostProviderRows;
+    private credentialInfo;
+    private credentialRow;
+    private rowsForVault;
+    private audit;
+}