@the-ai-company/cbio-node-runtime 1.42.0 → 1.45.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (232) hide show
  1. package/README.md +1 -0
  2. package/dist/clients/agent/client.d.ts +35 -0
  3. package/dist/clients/agent/client.js +15 -0
  4. package/dist/clients/agent/client.js.map +1 -1
  5. package/dist/clients/owner/client.d.ts +60 -0
  6. package/dist/clients/owner/client.js +14 -0
  7. package/dist/clients/owner/client.js.map +1 -1
  8. package/dist/clients/owner/index.d.ts +1 -1
  9. package/dist/runtime/bootstrap.d.ts +43 -7
  10. package/dist/runtime/bootstrap.js +12 -1
  11. package/dist/runtime/bootstrap.js.map +1 -1
  12. package/dist/runtime/identity.d.ts +47 -0
  13. package/dist/runtime/identity.js +25 -0
  14. package/dist/runtime/identity.js.map +1 -1
  15. package/dist/runtime/index.d.ts +9 -11
  16. package/dist/runtime/index.js +2 -0
  17. package/dist/runtime/index.js.map +1 -1
  18. package/dist/runtime/private-vault.d.ts +1 -2
  19. package/dist/vault-core/contracts.d.ts +32 -4
  20. package/dist/vault-core/contracts.js +31 -1
  21. package/dist/vault-core/contracts.js.map +1 -1
  22. package/dist/vault-core/core.js +28 -27
  23. package/dist/vault-core/core.js.map +1 -1
  24. package/dist/vault-core/defaults.js +3 -2
  25. package/dist/vault-core/defaults.js.map +1 -1
  26. package/dist/vault-core/index.d.ts +1 -0
  27. package/dist/vault-core/index.js +1 -0
  28. package/dist/vault-core/index.js.map +1 -1
  29. package/dist/vault-ingress/index.d.ts +2 -0
  30. package/dist/vault-ingress/index.js +4 -2
  31. package/dist/vault-ingress/index.js.map +1 -1
  32. package/dist/vault-ingress/remote-transport.d.ts +12 -0
  33. package/dist/vault-ingress/remote-transport.js +45 -0
  34. package/dist/vault-ingress/remote-transport.js.map +1 -0
  35. package/dist/vault-ingress/server-utils.d.ts +10 -0
  36. package/dist/vault-ingress/server-utils.js +18 -0
  37. package/dist/vault-ingress/server-utils.js.map +1 -0
  38. package/docs/ARCHITECTURE.md +8 -0
  39. package/docs/PROCESS_ISOLATION.md +56 -0
  40. package/docs/api/README.md +211 -0
  41. package/docs/api/classes/AgentDispatchHttpTransport.md +52 -0
  42. package/docs/api/classes/DefaultPolicyEngine.md +117 -0
  43. package/docs/api/classes/DefaultVaultCore.md +405 -0
  44. package/docs/api/classes/FsStorageProvider.md +192 -0
  45. package/docs/api/classes/HttpDispatchExecutor.md +63 -0
  46. package/docs/api/classes/IdentityError.md +62 -0
  47. package/docs/api/classes/InMemoryAgentIdentityRegistry.md +83 -0
  48. package/docs/api/classes/InMemoryAuditLog.md +59 -0
  49. package/docs/api/classes/InMemoryCapabilityRegistry.md +91 -0
  50. package/docs/api/classes/InMemoryCapabilityRevocationRegistry.md +75 -0
  51. package/docs/api/classes/InMemoryCustomHttpFlowRegistry.md +63 -0
  52. package/docs/api/classes/InMemoryOwnerIdentityRegistry.md +83 -0
  53. package/docs/api/classes/InMemoryRateLimitStore.md +51 -0
  54. package/docs/api/classes/InMemoryReplayGuard.md +45 -0
  55. package/docs/api/classes/InMemorySecretCustody.md +83 -0
  56. package/docs/api/classes/InMemorySecretRepository.md +99 -0
  57. package/docs/api/classes/LocalSigner.md +59 -0
  58. package/docs/api/classes/LocalVaultTransport.md +45 -0
  59. package/docs/api/classes/MemoryStorageProvider.md +160 -0
  60. package/docs/api/classes/PersistentVaultAgentIdentityRegistry.md +101 -0
  61. package/docs/api/classes/PersistentVaultAuditLog.md +73 -0
  62. package/docs/api/classes/PersistentVaultCapabilityRegistry.md +109 -0
  63. package/docs/api/classes/PersistentVaultCapabilityRevocationRegistry.md +93 -0
  64. package/docs/api/classes/PersistentVaultCustomHttpFlowRegistry.md +81 -0
  65. package/docs/api/classes/PersistentVaultOwnerIdentityRegistry.md +101 -0
  66. package/docs/api/classes/PersistentVaultRateLimitStore.md +69 -0
  67. package/docs/api/classes/PersistentVaultReplayGuard.md +61 -0
  68. package/docs/api/classes/PersistentVaultSecretCustody.md +97 -0
  69. package/docs/api/classes/PersistentVaultSecretRepository.md +117 -0
  70. package/docs/api/classes/RandomIdGenerator.md +65 -0
  71. package/docs/api/classes/SignatureAgentProofVerifier.md +49 -0
  72. package/docs/api/classes/SignatureOwnerProofVerifier.md +249 -0
  73. package/docs/api/classes/SystemClock.md +33 -0
  74. package/docs/api/classes/VaultCoreError.md +39 -0
  75. package/docs/api/enumerations/AuditAction.md +95 -0
  76. package/docs/api/enumerations/AuditOutcome.md +29 -0
  77. package/docs/api/enumerations/DispatchStatus.md +23 -0
  78. package/docs/api/enumerations/IdentityErrorCode.md +121 -0
  79. package/docs/api/functions/createAgentClient.md +33 -0
  80. package/docs/api/functions/createChildIdentity.md +25 -0
  81. package/docs/api/functions/createDefaultVaultCoreDependencies.md +77 -0
  82. package/docs/api/functions/createIdentity.md +30 -0
  83. package/docs/api/functions/createOwnerHttpFlowBoundary.md +17 -0
  84. package/docs/api/functions/createPersistentVaultCoreDependencies.md +85 -0
  85. package/docs/api/functions/createStandardAcquireBoundary.md +31 -0
  86. package/docs/api/functions/createStandardDispatchBoundary.md +23 -0
  87. package/docs/api/functions/createVault.md +58 -0
  88. package/docs/api/functions/createVaultClient.md +32 -0
  89. package/docs/api/functions/createVaultCore.md +17 -0
  90. package/docs/api/functions/createVaultService.md +31 -0
  91. package/docs/api/functions/createWorkspaceStorage.md +17 -0
  92. package/docs/api/functions/deriveChildIdentity.md +41 -0
  93. package/docs/api/functions/deriveIdentityId.md +17 -0
  94. package/docs/api/functions/ensureIdentityPrivateVault.md +21 -0
  95. package/docs/api/functions/getDefaultWorkspaceDir.md +11 -0
  96. package/docs/api/functions/handleVaultHttpDispatch.md +30 -0
  97. package/docs/api/functions/identityPrivateVaultChildrenKey.md +17 -0
  98. package/docs/api/functions/identityPrivateVaultPrefix.md +17 -0
  99. package/docs/api/functions/identityPrivateVaultProfileKey.md +17 -0
  100. package/docs/api/functions/identityPrivateVaultPublicSealedKey.md +17 -0
  101. package/docs/api/functions/initializeVaultCustody.md +21 -0
  102. package/docs/api/functions/listIdentities.md +19 -0
  103. package/docs/api/functions/listVaults.md +23 -0
  104. package/docs/api/functions/readIdentityMetadata.md +29 -0
  105. package/docs/api/functions/readIdentityPrivateVaultChildrenState.md +21 -0
  106. package/docs/api/functions/readIdentityPrivateVaultProfile.md +21 -0
  107. package/docs/api/functions/readVaultProfile.md +25 -0
  108. package/docs/api/functions/readVaultPublicMetadata.md +23 -0
  109. package/docs/api/functions/recoverVault.md +58 -0
  110. package/docs/api/functions/recoverVaultWorkingKey.md +25 -0
  111. package/docs/api/functions/restoreIdentity.md +35 -0
  112. package/docs/api/functions/toOwnerHttpFlowBoundary.md +17 -0
  113. package/docs/api/functions/updateVaultMetadata.md +33 -0
  114. package/docs/api/functions/wrapVaultCoreAsVaultService.md +31 -0
  115. package/docs/api/functions/writeVaultProfile.md +29 -0
  116. package/docs/api/interfaces/AgentCapability.md +103 -0
  117. package/docs/api/interfaces/AgentClient.md +41 -0
  118. package/docs/api/interfaces/AgentDispatchIntent.md +41 -0
  119. package/docs/api/interfaces/AgentDispatchTransport.md +21 -0
  120. package/docs/api/interfaces/AgentIdentity.md +11 -0
  121. package/docs/api/interfaces/AgentIdentityRecord.md +23 -0
  122. package/docs/api/interfaces/AgentIdentityRegistry.md +57 -0
  123. package/docs/api/interfaces/AgentProof.md +29 -0
  124. package/docs/api/interfaces/AgentProofVerifier.md +21 -0
  125. package/docs/api/interfaces/AgentSigner.md +21 -0
  126. package/docs/api/interfaces/AuditEntry.md +89 -0
  127. package/docs/api/interfaces/AuditLog.md +37 -0
  128. package/docs/api/interfaces/AuditQuery.md +29 -0
  129. package/docs/api/interfaces/CapabilityRegistry.md +65 -0
  130. package/docs/api/interfaces/CapabilityRevocationRegistry.md +53 -0
  131. package/docs/api/interfaces/CbioRuntime.md +886 -0
  132. package/docs/api/interfaces/ChildIdentity.md +77 -0
  133. package/docs/api/interfaces/Clock.md +15 -0
  134. package/docs/api/interfaces/CreateAgentClientOptions.md +41 -0
  135. package/docs/api/interfaces/CreateChildIdentityOptions.md +19 -0
  136. package/docs/api/interfaces/CreateDefaultVaultCoreDependenciesOptions.md +85 -0
  137. package/docs/api/interfaces/CreateIdentityOptions.md +15 -0
  138. package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +115 -0
  139. package/docs/api/interfaces/CreateVaultClientOptions.md +29 -0
  140. package/docs/api/interfaces/CreateVaultOptions.md +177 -0
  141. package/docs/api/interfaces/CreatedVault.md +39 -0
  142. package/docs/api/interfaces/CustomHttpFlowDefinition.md +71 -0
  143. package/docs/api/interfaces/CustomHttpFlowRegistry.md +41 -0
  144. package/docs/api/interfaces/DefaultPolicyEngineOptions.md +49 -0
  145. package/docs/api/interfaces/DeriveIdentityOptions.md +11 -0
  146. package/docs/api/interfaces/DispatchAuthorization.md +35 -0
  147. package/docs/api/interfaces/DispatchInstruction.md +47 -0
  148. package/docs/api/interfaces/DispatchRequest.md +77 -0
  149. package/docs/api/interfaces/DispatchResult.md +53 -0
  150. package/docs/api/interfaces/IStorageProvider.md +144 -0
  151. package/docs/api/interfaces/IdGenerator.md +39 -0
  152. package/docs/api/interfaces/IdentityPrivateVaultChildRecord.md +35 -0
  153. package/docs/api/interfaces/IdentityPrivateVaultChildrenState.md +17 -0
  154. package/docs/api/interfaces/IdentityPrivateVaultProfile.md +35 -0
  155. package/docs/api/interfaces/InitializeVaultCustodyOptions.md +29 -0
  156. package/docs/api/interfaces/InitializedVaultCustody.md +23 -0
  157. package/docs/api/interfaces/IssuerWriteSecretCommand.md +59 -0
  158. package/docs/api/interfaces/OwnerAuditRequest.md +47 -0
  159. package/docs/api/interfaces/OwnerDefineSecretTargetsCommand.md +53 -0
  160. package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +23 -0
  161. package/docs/api/interfaces/OwnerDeleteSecretCommand.md +47 -0
  162. package/docs/api/interfaces/OwnerExportSecretRequest.md +47 -0
  163. package/docs/api/interfaces/OwnerHttpFlowBoundary.md +51 -0
  164. package/docs/api/interfaces/OwnerIdentityRecord.md +23 -0
  165. package/docs/api/interfaces/OwnerIdentityRegistry.md +57 -0
  166. package/docs/api/interfaces/OwnerListAgentsRequest.md +41 -0
  167. package/docs/api/interfaces/OwnerListCapabilitiesRequest.md +47 -0
  168. package/docs/api/interfaces/OwnerProof.md +29 -0
  169. package/docs/api/interfaces/OwnerProofVerifier.md +181 -0
  170. package/docs/api/interfaces/OwnerRegisterAgentIdentityCommand.md +47 -0
  171. package/docs/api/interfaces/OwnerRegisterCapabilityCommand.md +47 -0
  172. package/docs/api/interfaces/OwnerRegisterCustomHttpFlowCommand.md +83 -0
  173. package/docs/api/interfaces/OwnerRevokeCapabilityCommand.md +53 -0
  174. package/docs/api/interfaces/OwnerSecretExport.md +35 -0
  175. package/docs/api/interfaces/OwnerSecretTargetBinding.md +35 -0
  176. package/docs/api/interfaces/OwnerStoreSecretInput.md +23 -0
  177. package/docs/api/interfaces/OwnerWriteSecretCommand.md +65 -0
  178. package/docs/api/interfaces/OwnerWriteSecretInput.md +29 -0
  179. package/docs/api/interfaces/PolicyEngine.md +81 -0
  180. package/docs/api/interfaces/RateLimitStore.md +33 -0
  181. package/docs/api/interfaces/RecoverVaultOptions.md +165 -0
  182. package/docs/api/interfaces/RecoveredVault.md +49 -0
  183. package/docs/api/interfaces/ReplayGuard.md +21 -0
  184. package/docs/api/interfaces/RestoreIdentityOptions.md +11 -0
  185. package/docs/api/interfaces/SecretAlias.md +11 -0
  186. package/docs/api/interfaces/SecretCustody.md +57 -0
  187. package/docs/api/interfaces/SecretId.md +11 -0
  188. package/docs/api/interfaces/SecretRecord.md +53 -0
  189. package/docs/api/interfaces/SecretRepository.md +69 -0
  190. package/docs/api/interfaces/SecretVersion.md +11 -0
  191. package/docs/api/interfaces/SignatureAgentProofVerifierOptions.md +21 -0
  192. package/docs/api/interfaces/Signer.md +31 -0
  193. package/docs/api/interfaces/TrustedExecutor.md +31 -0
  194. package/docs/api/interfaces/VaultAcquireSecretInput.md +53 -0
  195. package/docs/api/interfaces/VaultAcquireSecretResult.md +41 -0
  196. package/docs/api/interfaces/VaultAgentDispatchErrorResponse.md +25 -0
  197. package/docs/api/interfaces/VaultAgentDispatchRequest.md +75 -0
  198. package/docs/api/interfaces/VaultAgentDispatchResponse.md +17 -0
  199. package/docs/api/interfaces/VaultAuditQueryInput.md +29 -0
  200. package/docs/api/interfaces/VaultClient.md +234 -0
  201. package/docs/api/interfaces/VaultCore.md +311 -0
  202. package/docs/api/interfaces/VaultCoreDependencies.md +95 -0
  203. package/docs/api/interfaces/VaultCustomFlowResolver.md +25 -0
  204. package/docs/api/interfaces/VaultDeleteSecretInput.md +17 -0
  205. package/docs/api/interfaces/VaultExportSecretInput.md +17 -0
  206. package/docs/api/interfaces/VaultGrantCapabilityInput.md +17 -0
  207. package/docs/api/interfaces/VaultId.md +11 -0
  208. package/docs/api/interfaces/VaultIdentity.md +11 -0
  209. package/docs/api/interfaces/VaultListAgentsInput.md +11 -0
  210. package/docs/api/interfaces/VaultListCapabilitiesInput.md +17 -0
  211. package/docs/api/interfaces/VaultObject.md +33 -0
  212. package/docs/api/interfaces/VaultPrincipal.md +17 -0
  213. package/docs/api/interfaces/VaultProfile.md +23 -0
  214. package/docs/api/interfaces/VaultPublicMetadata.md +25 -0
  215. package/docs/api/interfaces/VaultRegisterAgentInput.md +23 -0
  216. package/docs/api/interfaces/VaultRegisterFlowInput.md +83 -0
  217. package/docs/api/interfaces/VaultRevokeCapabilityInput.md +23 -0
  218. package/docs/api/interfaces/VaultService.md +251 -0
  219. package/docs/api/interfaces/VaultSigner.md +21 -0
  220. package/docs/api/interfaces/VaultTargetBinding.md +35 -0
  221. package/docs/api/type-aliases/AgentCapabilityEnvelope.md +7 -0
  222. package/docs/api/type-aliases/CbioRuntimeModule.md +9 -0
  223. package/docs/api/type-aliases/IdentityPrivateVaultAccess.md +7 -0
  224. package/docs/api/type-aliases/RedactedResponseShape.md +7 -0
  225. package/docs/api/type-aliases/VaultAcquireSecretFlow.md +7 -0
  226. package/docs/api/type-aliases/VaultPrincipalKind.md +7 -0
  227. package/docs/api/type-aliases/VaultWriteSecretCommand.md +7 -0
  228. package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +7 -0
  229. package/docs/zh/PROCESS_ISOLATION.md +58 -0
  230. package/docs/zh/README.md +5 -0
  231. package/examples/process-isolation.ts +155 -0
  232. package/package.json +10 -2
@@ -0,0 +1,29 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: readIdentityMetadata()
6
+
7
+ > **readIdentityMetadata**(`storage`, `identityId`, `privateKey?`): `Promise`\<`any`\>
8
+
9
+ Metadata reader for identities.
10
+ Discovery info (nickname) can be read with just identityId.
11
+ Full profile requires privateKey.
12
+
13
+ ## Parameters
14
+
15
+ ### storage
16
+
17
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
18
+
19
+ ### identityId
20
+
21
+ `string`
22
+
23
+ ### privateKey?
24
+
25
+ `string`
26
+
27
+ ## Returns
28
+
29
+ `Promise`\<`any`\>
@@ -0,0 +1,21 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: readIdentityPrivateVaultChildrenState()
6
+
7
+ > **readIdentityPrivateVaultChildrenState**(`storage`, `identityOrPrivateKey`): `Promise`\<[`IdentityPrivateVaultChildrenState`](../interfaces/IdentityPrivateVaultChildrenState.md)\>
8
+
9
+ ## Parameters
10
+
11
+ ### storage
12
+
13
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
14
+
15
+ ### identityOrPrivateKey
16
+
17
+ [`IdentityPrivateVaultAccess`](../type-aliases/IdentityPrivateVaultAccess.md)
18
+
19
+ ## Returns
20
+
21
+ `Promise`\<[`IdentityPrivateVaultChildrenState`](../interfaces/IdentityPrivateVaultChildrenState.md)\>
@@ -0,0 +1,21 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: readIdentityPrivateVaultProfile()
6
+
7
+ > **readIdentityPrivateVaultProfile**(`storage`, `identityOrPrivateKey`): `Promise`\<[`IdentityPrivateVaultProfile`](../interfaces/IdentityPrivateVaultProfile.md) \| `null`\>
8
+
9
+ ## Parameters
10
+
11
+ ### storage
12
+
13
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
14
+
15
+ ### identityOrPrivateKey
16
+
17
+ [`IdentityPrivateVaultAccess`](../type-aliases/IdentityPrivateVaultAccess.md)
18
+
19
+ ## Returns
20
+
21
+ `Promise`\<[`IdentityPrivateVaultProfile`](../interfaces/IdentityPrivateVaultProfile.md) \| `null`\>
@@ -0,0 +1,25 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: readVaultProfile()
6
+
7
+ > **readVaultProfile**(`storage`, `vaultWorkingKey`, `vaultId`): `Promise`\<[`VaultProfile`](../interfaces/VaultProfile.md) \| `null`\>
8
+
9
+ ## Parameters
10
+
11
+ ### storage
12
+
13
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
14
+
15
+ ### vaultWorkingKey
16
+
17
+ `string`
18
+
19
+ ### vaultId
20
+
21
+ `string`
22
+
23
+ ## Returns
24
+
25
+ `Promise`\<[`VaultProfile`](../interfaces/VaultProfile.md) \| `null`\>
@@ -0,0 +1,23 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: readVaultPublicMetadata()
6
+
7
+ > **readVaultPublicMetadata**(`storage`, `vaultId`): `Promise`\<`Record`\<`string`, `any`\>\>
8
+
9
+ Reads the 'public' metadata of a vault. Requires vaultId but no private key.
10
+
11
+ ## Parameters
12
+
13
+ ### storage
14
+
15
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
16
+
17
+ ### vaultId
18
+
19
+ `string`
20
+
21
+ ## Returns
22
+
23
+ `Promise`\<`Record`\<`string`, `any`\>\>
@@ -0,0 +1,58 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: recoverVault()
6
+
7
+ ## Call Signature
8
+
9
+ > **recoverVault**(`storage`, `options`): `Promise`\<[`RecoveredVault`](../interfaces/RecoveredVault.md)\>
10
+
11
+ Reopens an existing vault from storage.
12
+
13
+ ### Parameters
14
+
15
+ #### storage
16
+
17
+ `string` \| [`IStorageProvider`](../interfaces/IStorageProvider.md)
18
+
19
+ Workspace storage where the vault was created.
20
+
21
+ #### options
22
+
23
+ [`RecoverVaultOptions`](../interfaces/RecoverVaultOptions.md)
24
+
25
+ Recovery options (must include `vaultId` and `ownerIdentity`).
26
+
27
+ ### Returns
28
+
29
+ `Promise`\<[`RecoveredVault`](../interfaces/RecoveredVault.md)\>
30
+
31
+ A [RecoveredVault](../interfaces/RecoveredVault.md) instance.
32
+
33
+ ### Example
34
+
35
+ ```ts
36
+ const vault = await recoverVault({
37
+ vaultId: 'vault_123',
38
+ ownerIdentity
39
+ });
40
+ ```
41
+
42
+ ## Call Signature
43
+
44
+ > **recoverVault**(`options`): `Promise`\<[`RecoveredVault`](../interfaces/RecoveredVault.md)\>
45
+
46
+ Recovers an existing vault using the default workspace storage.
47
+
48
+ ### Parameters
49
+
50
+ #### options
51
+
52
+ [`RecoverVaultOptions`](../interfaces/RecoverVaultOptions.md)
53
+
54
+ Recovery options including vaultId and owner identity.
55
+
56
+ ### Returns
57
+
58
+ `Promise`\<[`RecoveredVault`](../interfaces/RecoveredVault.md)\>
@@ -0,0 +1,25 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: recoverVaultWorkingKey()
6
+
7
+ > **recoverVaultWorkingKey**(`storage`, `vaultRecoveryKey`, `storageKey?`): `Promise`\<`string`\>
8
+
9
+ ## Parameters
10
+
11
+ ### storage
12
+
13
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
14
+
15
+ ### vaultRecoveryKey
16
+
17
+ `string`
18
+
19
+ ### storageKey?
20
+
21
+ `string` = `DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY`
22
+
23
+ ## Returns
24
+
25
+ `Promise`\<`string`\>
@@ -0,0 +1,35 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: restoreIdentity()
6
+
7
+ > **restoreIdentity**(`privateKey`, `options?`): `CreatedIdentity`
8
+
9
+ Restores an identity from an existing private key.
10
+
11
+ ## Parameters
12
+
13
+ ### privateKey
14
+
15
+ `string`
16
+
17
+ The base64url-encoded PKCS#8 private key.
18
+
19
+ ### options?
20
+
21
+ [`RestoreIdentityOptions`](../interfaces/RestoreIdentityOptions.md) = `{}`
22
+
23
+ Optional metadata to attach to the restored object.
24
+
25
+ ## Returns
26
+
27
+ `CreatedIdentity`
28
+
29
+ The reconstructed CreatedIdentity.
30
+
31
+ ## Example
32
+
33
+ ```ts
34
+ const identity = restoreIdentity('MIIB...');
35
+ ```
@@ -0,0 +1,17 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: toOwnerHttpFlowBoundary()
6
+
7
+ > **toOwnerHttpFlowBoundary**(`flow`): [`OwnerHttpFlowBoundary`](../interfaces/OwnerHttpFlowBoundary.md)
8
+
9
+ ## Parameters
10
+
11
+ ### flow
12
+
13
+ `Pick`\<[`CustomHttpFlowDefinition`](../interfaces/CustomHttpFlowDefinition.md), `"mode"` \| `"targetUrl"` \| `"method"` \| `"responseVisibility"` \| `"responseSecret"`\>
14
+
15
+ ## Returns
16
+
17
+ [`OwnerHttpFlowBoundary`](../interfaces/OwnerHttpFlowBoundary.md)
@@ -0,0 +1,33 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: updateVaultMetadata()
6
+
7
+ > **updateVaultMetadata**(`vault`, `options`): `Promise`\<`void`\>
8
+
9
+ Updates the metadata (like nickname) of an existing vault.
10
+
11
+ ## Parameters
12
+
13
+ ### vault
14
+
15
+ [`CreatedVault`](../interfaces/CreatedVault.md) \| [`RecoveredVault`](../interfaces/RecoveredVault.md)
16
+
17
+ ### options
18
+
19
+ #### nickname?
20
+
21
+ `string`
22
+
23
+ #### ownerIdentity
24
+
25
+ `CreatedIdentity`
26
+
27
+ #### publicMetadata?
28
+
29
+ `Record`\<`string`, `any`\>
30
+
31
+ ## Returns
32
+
33
+ `Promise`\<`void`\>
@@ -0,0 +1,31 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: wrapVaultCoreAsVaultService()
6
+
7
+ > **wrapVaultCoreAsVaultService**(`core`, `options?`): [`VaultService`](../interfaces/VaultService.md)
8
+
9
+ ## Parameters
10
+
11
+ ### core
12
+
13
+ [`VaultCore`](../interfaces/VaultCore.md)
14
+
15
+ ### options?
16
+
17
+ #### clock?
18
+
19
+ [`Clock`](../interfaces/Clock.md)
20
+
21
+ #### customFlows?
22
+
23
+ [`VaultCustomFlowResolver`](../interfaces/VaultCustomFlowResolver.md)
24
+
25
+ #### fetchImpl?
26
+
27
+ \{(`input`, `init?`): `Promise`\<`Response`\>; (`input`, `init?`): `Promise`\<`Response`\>; \}
28
+
29
+ ## Returns
30
+
31
+ [`VaultService`](../interfaces/VaultService.md)
@@ -0,0 +1,29 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Function: writeVaultProfile()
6
+
7
+ > **writeVaultProfile**(`storage`, `profile`, `vaultWorkingKey`, `vaultId`): `Promise`\<`void`\>
8
+
9
+ ## Parameters
10
+
11
+ ### storage
12
+
13
+ [`IStorageProvider`](../interfaces/IStorageProvider.md)
14
+
15
+ ### profile
16
+
17
+ [`VaultProfile`](../interfaces/VaultProfile.md)
18
+
19
+ ### vaultWorkingKey
20
+
21
+ `string`
22
+
23
+ ### vaultId
24
+
25
+ `string`
26
+
27
+ ## Returns
28
+
29
+ `Promise`\<`void`\>
@@ -0,0 +1,103 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentCapability
6
+
7
+ ## Properties
8
+
9
+ ### agentId
10
+
11
+ > **agentId**: `string`
12
+
13
+ ***
14
+
15
+ ### allowedMethods
16
+
17
+ > **allowedMethods**: readonly `string`[]
18
+
19
+ ***
20
+
21
+ ### allowedPaths?
22
+
23
+ > `optional` **allowedPaths?**: readonly `string`[]
24
+
25
+ ***
26
+
27
+ ### allowedTargets
28
+
29
+ > **allowedTargets**: readonly `string`[]
30
+
31
+ ***
32
+
33
+ ### auditRequired?
34
+
35
+ > `optional` **auditRequired?**: `boolean`
36
+
37
+ ***
38
+
39
+ ### capabilityId
40
+
41
+ > **capabilityId**: `string`
42
+
43
+ ***
44
+
45
+ ### customFlowId?
46
+
47
+ > `optional` **customFlowId?**: `string`
48
+
49
+ ***
50
+
51
+ ### expiresAt?
52
+
53
+ > `optional` **expiresAt?**: `string`
54
+
55
+ ***
56
+
57
+ ### issuedAt
58
+
59
+ > **issuedAt**: `string`
60
+
61
+ ***
62
+
63
+ ### operation
64
+
65
+ > **operation**: `"dispatch_http"` \| `"custom_http"`
66
+
67
+ ***
68
+
69
+ ### rateLimit?
70
+
71
+ > `optional` **rateLimit?**: `object`
72
+
73
+ #### maxRequests
74
+
75
+ > **maxRequests**: `number`
76
+
77
+ #### windowMs
78
+
79
+ > **windowMs**: `number`
80
+
81
+ ***
82
+
83
+ ### revocationVersion?
84
+
85
+ > `optional` **revocationVersion?**: `number`
86
+
87
+ ***
88
+
89
+ ### secretAliases?
90
+
91
+ > `optional` **secretAliases?**: readonly `string`[]
92
+
93
+ ***
94
+
95
+ ### secretIds?
96
+
97
+ > `optional` **secretIds?**: readonly `string`[]
98
+
99
+ ***
100
+
101
+ ### vaultId
102
+
103
+ > **vaultId**: [`VaultId`](VaultId.md)
@@ -0,0 +1,41 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentClient
6
+
7
+ A client for agents to perform authorized operations (e.g., dispatch HTTP requests with secrets).
8
+ This client uses a delegated capability granted by the owner.
9
+
10
+ ## Methods
11
+
12
+ ### dispatch()
13
+
14
+ > **dispatch**(`intent`): `Promise`\<[`DispatchResult`](DispatchResult.md)\>
15
+
16
+ Dispatches a signed request to a target using a vault secret.
17
+
18
+ #### Parameters
19
+
20
+ ##### intent
21
+
22
+ [`AgentDispatchIntent`](AgentDispatchIntent.md)
23
+
24
+ The destination, method, and secret alias to use.
25
+
26
+ #### Returns
27
+
28
+ `Promise`\<[`DispatchResult`](DispatchResult.md)\>
29
+
30
+ The result of the remote operation.
31
+
32
+ #### Example
33
+
34
+ ```ts
35
+ const result = await agent.dispatch({
36
+ targetUrl: 'https://api.example.com/data',
37
+ method: 'POST',
38
+ secretAlias: 'api-token',
39
+ body: JSON.stringify({ key: 'value' })
40
+ });
41
+ ```
@@ -0,0 +1,41 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentDispatchIntent
6
+
7
+ ## Properties
8
+
9
+ ### body?
10
+
11
+ > `optional` **body?**: `string`
12
+
13
+ ***
14
+
15
+ ### headers?
16
+
17
+ > `optional` **headers?**: `Record`\<`string`, `string`\>
18
+
19
+ ***
20
+
21
+ ### method
22
+
23
+ > **method**: `string`
24
+
25
+ ***
26
+
27
+ ### requestedAt?
28
+
29
+ > `optional` **requestedAt?**: `string`
30
+
31
+ ***
32
+
33
+ ### secretAlias?
34
+
35
+ > `optional` **secretAlias?**: `string`
36
+
37
+ ***
38
+
39
+ ### targetUrl
40
+
41
+ > **targetUrl**: `string`
@@ -0,0 +1,21 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentDispatchTransport
6
+
7
+ ## Methods
8
+
9
+ ### dispatch()
10
+
11
+ > **dispatch**(`request`): `Promise`\<[`DispatchResult`](DispatchResult.md)\>
12
+
13
+ #### Parameters
14
+
15
+ ##### request
16
+
17
+ [`DispatchRequest`](DispatchRequest.md)
18
+
19
+ #### Returns
20
+
21
+ `Promise`\<[`DispatchResult`](DispatchResult.md)\>
@@ -0,0 +1,11 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentIdentity
6
+
7
+ ## Properties
8
+
9
+ ### agentId
10
+
11
+ > **agentId**: `string`
@@ -0,0 +1,23 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentIdentityRecord
6
+
7
+ ## Properties
8
+
9
+ ### agentId
10
+
11
+ > **agentId**: `string`
12
+
13
+ ***
14
+
15
+ ### publicKey
16
+
17
+ > **publicKey**: `string`
18
+
19
+ ***
20
+
21
+ ### vaultId
22
+
23
+ > **vaultId**: [`VaultId`](VaultId.md)
@@ -0,0 +1,57 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentIdentityRegistry
6
+
7
+ ## Methods
8
+
9
+ ### get()
10
+
11
+ > **get**(`vaultId`, `agentId`): `Promise`\<[`AgentIdentityRecord`](AgentIdentityRecord.md) \| `null`\>
12
+
13
+ #### Parameters
14
+
15
+ ##### vaultId
16
+
17
+ [`VaultId`](VaultId.md)
18
+
19
+ ##### agentId
20
+
21
+ `string`
22
+
23
+ #### Returns
24
+
25
+ `Promise`\<[`AgentIdentityRecord`](AgentIdentityRecord.md) \| `null`\>
26
+
27
+ ***
28
+
29
+ ### list()
30
+
31
+ > **list**(`vaultId`): `Promise`\<readonly [`AgentIdentityRecord`](AgentIdentityRecord.md)[]\>
32
+
33
+ #### Parameters
34
+
35
+ ##### vaultId
36
+
37
+ [`VaultId`](VaultId.md)
38
+
39
+ #### Returns
40
+
41
+ `Promise`\<readonly [`AgentIdentityRecord`](AgentIdentityRecord.md)[]\>
42
+
43
+ ***
44
+
45
+ ### register()
46
+
47
+ > **register**(`identity`): `Promise`\<`void`\>
48
+
49
+ #### Parameters
50
+
51
+ ##### identity
52
+
53
+ [`AgentIdentityRecord`](AgentIdentityRecord.md)
54
+
55
+ #### Returns
56
+
57
+ `Promise`\<`void`\>
@@ -0,0 +1,29 @@
1
+ [**CBIO Node Runtime Agent API v1.45.2**](../README.md)
2
+
3
+ ***
4
+
5
+ # Interface: AgentProof
6
+
7
+ ## Properties
8
+
9
+ ### agentId
10
+
11
+ > **agentId**: `string`
12
+
13
+ ***
14
+
15
+ ### requestedAt
16
+
17
+ > **requestedAt**: `string`
18
+
19
+ ***
20
+
21
+ ### requestId
22
+
23
+ > **requestId**: `string`
24
+
25
+ ***
26
+
27
+ ### signature
28
+
29
+ > **signature**: `string`