@the-ai-company/cbio-node-runtime 1.42.0 → 1.45.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -0
- package/dist/clients/agent/client.d.ts +35 -0
- package/dist/clients/agent/client.js +15 -0
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/owner/client.d.ts +60 -0
- package/dist/clients/owner/client.js +14 -0
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/index.d.ts +1 -1
- package/dist/runtime/bootstrap.d.ts +43 -7
- package/dist/runtime/bootstrap.js +12 -1
- package/dist/runtime/bootstrap.js.map +1 -1
- package/dist/runtime/identity.d.ts +47 -0
- package/dist/runtime/identity.js +25 -0
- package/dist/runtime/identity.js.map +1 -1
- package/dist/runtime/index.d.ts +9 -11
- package/dist/runtime/index.js +2 -0
- package/dist/runtime/index.js.map +1 -1
- package/dist/runtime/private-vault.d.ts +1 -2
- package/dist/vault-core/contracts.d.ts +32 -4
- package/dist/vault-core/contracts.js +31 -1
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.js +28 -27
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.js +3 -2
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/index.d.ts +1 -0
- package/dist/vault-core/index.js +1 -0
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +2 -0
- package/dist/vault-ingress/index.js +4 -2
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.d.ts +12 -0
- package/dist/vault-ingress/remote-transport.js +45 -0
- package/dist/vault-ingress/remote-transport.js.map +1 -0
- package/dist/vault-ingress/server-utils.d.ts +10 -0
- package/dist/vault-ingress/server-utils.js +18 -0
- package/dist/vault-ingress/server-utils.js.map +1 -0
- package/docs/ARCHITECTURE.md +8 -0
- package/docs/PROCESS_ISOLATION.md +56 -0
- package/docs/api/README.md +211 -0
- package/docs/api/classes/AgentDispatchHttpTransport.md +52 -0
- package/docs/api/classes/DefaultPolicyEngine.md +117 -0
- package/docs/api/classes/DefaultVaultCore.md +405 -0
- package/docs/api/classes/FsStorageProvider.md +192 -0
- package/docs/api/classes/HttpDispatchExecutor.md +63 -0
- package/docs/api/classes/IdentityError.md +62 -0
- package/docs/api/classes/InMemoryAgentIdentityRegistry.md +83 -0
- package/docs/api/classes/InMemoryAuditLog.md +59 -0
- package/docs/api/classes/InMemoryCapabilityRegistry.md +91 -0
- package/docs/api/classes/InMemoryCapabilityRevocationRegistry.md +75 -0
- package/docs/api/classes/InMemoryCustomHttpFlowRegistry.md +63 -0
- package/docs/api/classes/InMemoryOwnerIdentityRegistry.md +83 -0
- package/docs/api/classes/InMemoryRateLimitStore.md +51 -0
- package/docs/api/classes/InMemoryReplayGuard.md +45 -0
- package/docs/api/classes/InMemorySecretCustody.md +83 -0
- package/docs/api/classes/InMemorySecretRepository.md +99 -0
- package/docs/api/classes/LocalSigner.md +59 -0
- package/docs/api/classes/LocalVaultTransport.md +45 -0
- package/docs/api/classes/MemoryStorageProvider.md +160 -0
- package/docs/api/classes/PersistentVaultAgentIdentityRegistry.md +101 -0
- package/docs/api/classes/PersistentVaultAuditLog.md +73 -0
- package/docs/api/classes/PersistentVaultCapabilityRegistry.md +109 -0
- package/docs/api/classes/PersistentVaultCapabilityRevocationRegistry.md +93 -0
- package/docs/api/classes/PersistentVaultCustomHttpFlowRegistry.md +81 -0
- package/docs/api/classes/PersistentVaultOwnerIdentityRegistry.md +101 -0
- package/docs/api/classes/PersistentVaultRateLimitStore.md +69 -0
- package/docs/api/classes/PersistentVaultReplayGuard.md +61 -0
- package/docs/api/classes/PersistentVaultSecretCustody.md +97 -0
- package/docs/api/classes/PersistentVaultSecretRepository.md +117 -0
- package/docs/api/classes/RandomIdGenerator.md +65 -0
- package/docs/api/classes/SignatureAgentProofVerifier.md +49 -0
- package/docs/api/classes/SignatureOwnerProofVerifier.md +249 -0
- package/docs/api/classes/SystemClock.md +33 -0
- package/docs/api/classes/VaultCoreError.md +39 -0
- package/docs/api/enumerations/AuditAction.md +95 -0
- package/docs/api/enumerations/AuditOutcome.md +29 -0
- package/docs/api/enumerations/DispatchStatus.md +23 -0
- package/docs/api/enumerations/IdentityErrorCode.md +121 -0
- package/docs/api/functions/createAgentClient.md +33 -0
- package/docs/api/functions/createChildIdentity.md +25 -0
- package/docs/api/functions/createDefaultVaultCoreDependencies.md +77 -0
- package/docs/api/functions/createIdentity.md +30 -0
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +17 -0
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +85 -0
- package/docs/api/functions/createStandardAcquireBoundary.md +31 -0
- package/docs/api/functions/createStandardDispatchBoundary.md +23 -0
- package/docs/api/functions/createVault.md +58 -0
- package/docs/api/functions/createVaultClient.md +32 -0
- package/docs/api/functions/createVaultCore.md +17 -0
- package/docs/api/functions/createVaultService.md +31 -0
- package/docs/api/functions/createWorkspaceStorage.md +17 -0
- package/docs/api/functions/deriveChildIdentity.md +41 -0
- package/docs/api/functions/deriveIdentityId.md +17 -0
- package/docs/api/functions/ensureIdentityPrivateVault.md +21 -0
- package/docs/api/functions/getDefaultWorkspaceDir.md +11 -0
- package/docs/api/functions/handleVaultHttpDispatch.md +30 -0
- package/docs/api/functions/identityPrivateVaultChildrenKey.md +17 -0
- package/docs/api/functions/identityPrivateVaultPrefix.md +17 -0
- package/docs/api/functions/identityPrivateVaultProfileKey.md +17 -0
- package/docs/api/functions/identityPrivateVaultPublicSealedKey.md +17 -0
- package/docs/api/functions/initializeVaultCustody.md +21 -0
- package/docs/api/functions/listIdentities.md +19 -0
- package/docs/api/functions/listVaults.md +23 -0
- package/docs/api/functions/readIdentityMetadata.md +29 -0
- package/docs/api/functions/readIdentityPrivateVaultChildrenState.md +21 -0
- package/docs/api/functions/readIdentityPrivateVaultProfile.md +21 -0
- package/docs/api/functions/readVaultProfile.md +25 -0
- package/docs/api/functions/readVaultPublicMetadata.md +23 -0
- package/docs/api/functions/recoverVault.md +58 -0
- package/docs/api/functions/recoverVaultWorkingKey.md +25 -0
- package/docs/api/functions/restoreIdentity.md +35 -0
- package/docs/api/functions/toOwnerHttpFlowBoundary.md +17 -0
- package/docs/api/functions/updateVaultMetadata.md +33 -0
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +31 -0
- package/docs/api/functions/writeVaultProfile.md +29 -0
- package/docs/api/interfaces/AgentCapability.md +103 -0
- package/docs/api/interfaces/AgentClient.md +41 -0
- package/docs/api/interfaces/AgentDispatchIntent.md +41 -0
- package/docs/api/interfaces/AgentDispatchTransport.md +21 -0
- package/docs/api/interfaces/AgentIdentity.md +11 -0
- package/docs/api/interfaces/AgentIdentityRecord.md +23 -0
- package/docs/api/interfaces/AgentIdentityRegistry.md +57 -0
- package/docs/api/interfaces/AgentProof.md +29 -0
- package/docs/api/interfaces/AgentProofVerifier.md +21 -0
- package/docs/api/interfaces/AgentSigner.md +21 -0
- package/docs/api/interfaces/AuditEntry.md +89 -0
- package/docs/api/interfaces/AuditLog.md +37 -0
- package/docs/api/interfaces/AuditQuery.md +29 -0
- package/docs/api/interfaces/CapabilityRegistry.md +65 -0
- package/docs/api/interfaces/CapabilityRevocationRegistry.md +53 -0
- package/docs/api/interfaces/CbioRuntime.md +886 -0
- package/docs/api/interfaces/ChildIdentity.md +77 -0
- package/docs/api/interfaces/Clock.md +15 -0
- package/docs/api/interfaces/CreateAgentClientOptions.md +41 -0
- package/docs/api/interfaces/CreateChildIdentityOptions.md +19 -0
- package/docs/api/interfaces/CreateDefaultVaultCoreDependenciesOptions.md +85 -0
- package/docs/api/interfaces/CreateIdentityOptions.md +15 -0
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +115 -0
- package/docs/api/interfaces/CreateVaultClientOptions.md +29 -0
- package/docs/api/interfaces/CreateVaultOptions.md +177 -0
- package/docs/api/interfaces/CreatedVault.md +39 -0
- package/docs/api/interfaces/CustomHttpFlowDefinition.md +71 -0
- package/docs/api/interfaces/CustomHttpFlowRegistry.md +41 -0
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +49 -0
- package/docs/api/interfaces/DeriveIdentityOptions.md +11 -0
- package/docs/api/interfaces/DispatchAuthorization.md +35 -0
- package/docs/api/interfaces/DispatchInstruction.md +47 -0
- package/docs/api/interfaces/DispatchRequest.md +77 -0
- package/docs/api/interfaces/DispatchResult.md +53 -0
- package/docs/api/interfaces/IStorageProvider.md +144 -0
- package/docs/api/interfaces/IdGenerator.md +39 -0
- package/docs/api/interfaces/IdentityPrivateVaultChildRecord.md +35 -0
- package/docs/api/interfaces/IdentityPrivateVaultChildrenState.md +17 -0
- package/docs/api/interfaces/IdentityPrivateVaultProfile.md +35 -0
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +29 -0
- package/docs/api/interfaces/InitializedVaultCustody.md +23 -0
- package/docs/api/interfaces/IssuerWriteSecretCommand.md +59 -0
- package/docs/api/interfaces/OwnerAuditRequest.md +47 -0
- package/docs/api/interfaces/OwnerDefineSecretTargetsCommand.md +53 -0
- package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +23 -0
- package/docs/api/interfaces/OwnerDeleteSecretCommand.md +47 -0
- package/docs/api/interfaces/OwnerExportSecretRequest.md +47 -0
- package/docs/api/interfaces/OwnerHttpFlowBoundary.md +51 -0
- package/docs/api/interfaces/OwnerIdentityRecord.md +23 -0
- package/docs/api/interfaces/OwnerIdentityRegistry.md +57 -0
- package/docs/api/interfaces/OwnerListAgentsRequest.md +41 -0
- package/docs/api/interfaces/OwnerListCapabilitiesRequest.md +47 -0
- package/docs/api/interfaces/OwnerProof.md +29 -0
- package/docs/api/interfaces/OwnerProofVerifier.md +181 -0
- package/docs/api/interfaces/OwnerRegisterAgentIdentityCommand.md +47 -0
- package/docs/api/interfaces/OwnerRegisterCapabilityCommand.md +47 -0
- package/docs/api/interfaces/OwnerRegisterCustomHttpFlowCommand.md +83 -0
- package/docs/api/interfaces/OwnerRevokeCapabilityCommand.md +53 -0
- package/docs/api/interfaces/OwnerSecretExport.md +35 -0
- package/docs/api/interfaces/OwnerSecretTargetBinding.md +35 -0
- package/docs/api/interfaces/OwnerStoreSecretInput.md +23 -0
- package/docs/api/interfaces/OwnerWriteSecretCommand.md +65 -0
- package/docs/api/interfaces/OwnerWriteSecretInput.md +29 -0
- package/docs/api/interfaces/PolicyEngine.md +81 -0
- package/docs/api/interfaces/RateLimitStore.md +33 -0
- package/docs/api/interfaces/RecoverVaultOptions.md +165 -0
- package/docs/api/interfaces/RecoveredVault.md +49 -0
- package/docs/api/interfaces/ReplayGuard.md +21 -0
- package/docs/api/interfaces/RestoreIdentityOptions.md +11 -0
- package/docs/api/interfaces/SecretAlias.md +11 -0
- package/docs/api/interfaces/SecretCustody.md +57 -0
- package/docs/api/interfaces/SecretId.md +11 -0
- package/docs/api/interfaces/SecretRecord.md +53 -0
- package/docs/api/interfaces/SecretRepository.md +69 -0
- package/docs/api/interfaces/SecretVersion.md +11 -0
- package/docs/api/interfaces/SignatureAgentProofVerifierOptions.md +21 -0
- package/docs/api/interfaces/Signer.md +31 -0
- package/docs/api/interfaces/TrustedExecutor.md +31 -0
- package/docs/api/interfaces/VaultAcquireSecretInput.md +53 -0
- package/docs/api/interfaces/VaultAcquireSecretResult.md +41 -0
- package/docs/api/interfaces/VaultAgentDispatchErrorResponse.md +25 -0
- package/docs/api/interfaces/VaultAgentDispatchRequest.md +75 -0
- package/docs/api/interfaces/VaultAgentDispatchResponse.md +17 -0
- package/docs/api/interfaces/VaultAuditQueryInput.md +29 -0
- package/docs/api/interfaces/VaultClient.md +234 -0
- package/docs/api/interfaces/VaultCore.md +311 -0
- package/docs/api/interfaces/VaultCoreDependencies.md +95 -0
- package/docs/api/interfaces/VaultCustomFlowResolver.md +25 -0
- package/docs/api/interfaces/VaultDeleteSecretInput.md +17 -0
- package/docs/api/interfaces/VaultExportSecretInput.md +17 -0
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +17 -0
- package/docs/api/interfaces/VaultId.md +11 -0
- package/docs/api/interfaces/VaultIdentity.md +11 -0
- package/docs/api/interfaces/VaultListAgentsInput.md +11 -0
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +17 -0
- package/docs/api/interfaces/VaultObject.md +33 -0
- package/docs/api/interfaces/VaultPrincipal.md +17 -0
- package/docs/api/interfaces/VaultProfile.md +23 -0
- package/docs/api/interfaces/VaultPublicMetadata.md +25 -0
- package/docs/api/interfaces/VaultRegisterAgentInput.md +23 -0
- package/docs/api/interfaces/VaultRegisterFlowInput.md +83 -0
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +23 -0
- package/docs/api/interfaces/VaultService.md +251 -0
- package/docs/api/interfaces/VaultSigner.md +21 -0
- package/docs/api/interfaces/VaultTargetBinding.md +35 -0
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +7 -0
- package/docs/api/type-aliases/CbioRuntimeModule.md +9 -0
- package/docs/api/type-aliases/IdentityPrivateVaultAccess.md +7 -0
- package/docs/api/type-aliases/RedactedResponseShape.md +7 -0
- package/docs/api/type-aliases/VaultAcquireSecretFlow.md +7 -0
- package/docs/api/type-aliases/VaultPrincipalKind.md +7 -0
- package/docs/api/type-aliases/VaultWriteSecretCommand.md +7 -0
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +7 -0
- package/docs/zh/PROCESS_ISOLATION.md +58 -0
- package/docs/zh/README.md +5 -0
- package/examples/process-isolation.ts +155 -0
- package/package.json +10 -2
|
@@ -0,0 +1,234 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.45.2**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: VaultClient
|
|
6
|
+
|
|
7
|
+
A client for vault owners to manage secrets, agents, and capabilities.
|
|
8
|
+
This client requires an owner signature for every operation.
|
|
9
|
+
|
|
10
|
+
## Methods
|
|
11
|
+
|
|
12
|
+
### defineSecretTargets()
|
|
13
|
+
|
|
14
|
+
> **defineSecretTargets**(`input`): `Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
15
|
+
|
|
16
|
+
Refines the allowed targets for an existing secret.
|
|
17
|
+
|
|
18
|
+
#### Parameters
|
|
19
|
+
|
|
20
|
+
##### input
|
|
21
|
+
|
|
22
|
+
[`OwnerDefineSecretTargetsInput`](OwnerDefineSecretTargetsInput.md)
|
|
23
|
+
|
|
24
|
+
#### Returns
|
|
25
|
+
|
|
26
|
+
`Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
27
|
+
|
|
28
|
+
***
|
|
29
|
+
|
|
30
|
+
### deleteSecret()
|
|
31
|
+
|
|
32
|
+
> **deleteSecret**(`input`): `Promise`\<`void`\>
|
|
33
|
+
|
|
34
|
+
Permanently deletes a secret from the vault.
|
|
35
|
+
|
|
36
|
+
#### Parameters
|
|
37
|
+
|
|
38
|
+
##### input
|
|
39
|
+
|
|
40
|
+
[`VaultDeleteSecretInput`](VaultDeleteSecretInput.md)
|
|
41
|
+
|
|
42
|
+
#### Returns
|
|
43
|
+
|
|
44
|
+
`Promise`\<`void`\>
|
|
45
|
+
|
|
46
|
+
***
|
|
47
|
+
|
|
48
|
+
### exportSecret()
|
|
49
|
+
|
|
50
|
+
> **exportSecret**(`input`): `Promise`\<[`OwnerSecretExport`](OwnerSecretExport.md)\>
|
|
51
|
+
|
|
52
|
+
Exports a secret's plaintext (requires owner permission).
|
|
53
|
+
|
|
54
|
+
#### Parameters
|
|
55
|
+
|
|
56
|
+
##### input
|
|
57
|
+
|
|
58
|
+
[`VaultExportSecretInput`](VaultExportSecretInput.md)
|
|
59
|
+
|
|
60
|
+
#### Returns
|
|
61
|
+
|
|
62
|
+
`Promise`\<[`OwnerSecretExport`](OwnerSecretExport.md)\>
|
|
63
|
+
|
|
64
|
+
***
|
|
65
|
+
|
|
66
|
+
### grantCapability()
|
|
67
|
+
|
|
68
|
+
> **grantCapability**(`input`): `Promise`\<`void`\>
|
|
69
|
+
|
|
70
|
+
Grants a specific capability to an agent.
|
|
71
|
+
|
|
72
|
+
#### Parameters
|
|
73
|
+
|
|
74
|
+
##### input
|
|
75
|
+
|
|
76
|
+
[`VaultGrantCapabilityInput`](VaultGrantCapabilityInput.md)
|
|
77
|
+
|
|
78
|
+
#### Returns
|
|
79
|
+
|
|
80
|
+
`Promise`\<`void`\>
|
|
81
|
+
|
|
82
|
+
***
|
|
83
|
+
|
|
84
|
+
### listAgents()
|
|
85
|
+
|
|
86
|
+
> **listAgents**(`input?`): `Promise`\<readonly [`AgentIdentityRecord`](AgentIdentityRecord.md)[]\>
|
|
87
|
+
|
|
88
|
+
Lists all agents registered in the vault.
|
|
89
|
+
|
|
90
|
+
#### Parameters
|
|
91
|
+
|
|
92
|
+
##### input?
|
|
93
|
+
|
|
94
|
+
[`VaultListAgentsInput`](VaultListAgentsInput.md)
|
|
95
|
+
|
|
96
|
+
#### Returns
|
|
97
|
+
|
|
98
|
+
`Promise`\<readonly [`AgentIdentityRecord`](AgentIdentityRecord.md)[]\>
|
|
99
|
+
|
|
100
|
+
***
|
|
101
|
+
|
|
102
|
+
### listCapabilities()
|
|
103
|
+
|
|
104
|
+
> **listCapabilities**(`input?`): `Promise`\<readonly [`AgentCapability`](AgentCapability.md)[]\>
|
|
105
|
+
|
|
106
|
+
Lists all active capabilities granted to agents.
|
|
107
|
+
|
|
108
|
+
#### Parameters
|
|
109
|
+
|
|
110
|
+
##### input?
|
|
111
|
+
|
|
112
|
+
[`VaultListCapabilitiesInput`](VaultListCapabilitiesInput.md)
|
|
113
|
+
|
|
114
|
+
#### Returns
|
|
115
|
+
|
|
116
|
+
`Promise`\<readonly [`AgentCapability`](AgentCapability.md)[]\>
|
|
117
|
+
|
|
118
|
+
***
|
|
119
|
+
|
|
120
|
+
### readAudit()
|
|
121
|
+
|
|
122
|
+
> **readAudit**(`query?`): `Promise`\<readonly [`AuditEntry`](AuditEntry.md)[]\>
|
|
123
|
+
|
|
124
|
+
Reads the tamper-evident audit log for the vault.
|
|
125
|
+
|
|
126
|
+
#### Parameters
|
|
127
|
+
|
|
128
|
+
##### query?
|
|
129
|
+
|
|
130
|
+
[`VaultAuditQueryInput`](VaultAuditQueryInput.md)
|
|
131
|
+
|
|
132
|
+
#### Returns
|
|
133
|
+
|
|
134
|
+
`Promise`\<readonly [`AuditEntry`](AuditEntry.md)[]\>
|
|
135
|
+
|
|
136
|
+
***
|
|
137
|
+
|
|
138
|
+
### registerAgent()
|
|
139
|
+
|
|
140
|
+
> **registerAgent**(`input`): `Promise`\<`void`\>
|
|
141
|
+
|
|
142
|
+
Registers a new agent identity within the vault.
|
|
143
|
+
|
|
144
|
+
#### Parameters
|
|
145
|
+
|
|
146
|
+
##### input
|
|
147
|
+
|
|
148
|
+
[`VaultRegisterAgentInput`](VaultRegisterAgentInput.md)
|
|
149
|
+
|
|
150
|
+
#### Returns
|
|
151
|
+
|
|
152
|
+
`Promise`\<`void`\>
|
|
153
|
+
|
|
154
|
+
***
|
|
155
|
+
|
|
156
|
+
### registerFlow()
|
|
157
|
+
|
|
158
|
+
> **registerFlow**(`input`): `Promise`\<`void`\>
|
|
159
|
+
|
|
160
|
+
Registers a custom HTTP flow for complex secret usage.
|
|
161
|
+
|
|
162
|
+
#### Parameters
|
|
163
|
+
|
|
164
|
+
##### input
|
|
165
|
+
|
|
166
|
+
[`VaultRegisterFlowInput`](VaultRegisterFlowInput.md)
|
|
167
|
+
|
|
168
|
+
#### Returns
|
|
169
|
+
|
|
170
|
+
`Promise`\<`void`\>
|
|
171
|
+
|
|
172
|
+
***
|
|
173
|
+
|
|
174
|
+
### revokeCapability()
|
|
175
|
+
|
|
176
|
+
> **revokeCapability**(`input`): `Promise`\<`void`\>
|
|
177
|
+
|
|
178
|
+
Revokes a previously granted capability.
|
|
179
|
+
|
|
180
|
+
#### Parameters
|
|
181
|
+
|
|
182
|
+
##### input
|
|
183
|
+
|
|
184
|
+
[`VaultRevokeCapabilityInput`](VaultRevokeCapabilityInput.md)
|
|
185
|
+
|
|
186
|
+
#### Returns
|
|
187
|
+
|
|
188
|
+
`Promise`\<`void`\>
|
|
189
|
+
|
|
190
|
+
***
|
|
191
|
+
|
|
192
|
+
### storeSecret()
|
|
193
|
+
|
|
194
|
+
> **storeSecret**(`input`): `Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
195
|
+
|
|
196
|
+
Securely stores a new secret in the vault.
|
|
197
|
+
|
|
198
|
+
#### Parameters
|
|
199
|
+
|
|
200
|
+
##### input
|
|
201
|
+
|
|
202
|
+
[`OwnerStoreSecretInput`](OwnerStoreSecretInput.md)
|
|
203
|
+
|
|
204
|
+
The secret alias and plaintext.
|
|
205
|
+
|
|
206
|
+
#### Returns
|
|
207
|
+
|
|
208
|
+
`Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
209
|
+
|
|
210
|
+
The record of the stored secret.
|
|
211
|
+
|
|
212
|
+
#### Example
|
|
213
|
+
|
|
214
|
+
```ts
|
|
215
|
+
await client.storeSecret({ alias: 'db-pass', plaintext: 's3cret' });
|
|
216
|
+
```
|
|
217
|
+
|
|
218
|
+
***
|
|
219
|
+
|
|
220
|
+
### writeSecret()
|
|
221
|
+
|
|
222
|
+
> **writeSecret**(`input`): `Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
223
|
+
|
|
224
|
+
Atomic operation to store a secret and define its targets in one step.
|
|
225
|
+
|
|
226
|
+
#### Parameters
|
|
227
|
+
|
|
228
|
+
##### input
|
|
229
|
+
|
|
230
|
+
[`OwnerWriteSecretInput`](OwnerWriteSecretInput.md)
|
|
231
|
+
|
|
232
|
+
#### Returns
|
|
233
|
+
|
|
234
|
+
`Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
@@ -0,0 +1,311 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.45.2**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: VaultCore
|
|
6
|
+
|
|
7
|
+
## Properties
|
|
8
|
+
|
|
9
|
+
### vaultId
|
|
10
|
+
|
|
11
|
+
> `readonly` **vaultId**: [`VaultId`](VaultId.md)
|
|
12
|
+
|
|
13
|
+
## Methods
|
|
14
|
+
|
|
15
|
+
### authorizeDispatch()
|
|
16
|
+
|
|
17
|
+
> **authorizeDispatch**(`request`): `Promise`\<[`DispatchAuthorization`](DispatchAuthorization.md)\>
|
|
18
|
+
|
|
19
|
+
#### Parameters
|
|
20
|
+
|
|
21
|
+
##### request
|
|
22
|
+
|
|
23
|
+
[`DispatchRequest`](DispatchRequest.md)
|
|
24
|
+
|
|
25
|
+
#### Returns
|
|
26
|
+
|
|
27
|
+
`Promise`\<[`DispatchAuthorization`](DispatchAuthorization.md)\>
|
|
28
|
+
|
|
29
|
+
***
|
|
30
|
+
|
|
31
|
+
### bootstrapOwnerIdentity()
|
|
32
|
+
|
|
33
|
+
> **bootstrapOwnerIdentity**(`identity`): `Promise`\<`void`\>
|
|
34
|
+
|
|
35
|
+
#### Parameters
|
|
36
|
+
|
|
37
|
+
##### identity
|
|
38
|
+
|
|
39
|
+
[`OwnerIdentityRecord`](OwnerIdentityRecord.md)
|
|
40
|
+
|
|
41
|
+
#### Returns
|
|
42
|
+
|
|
43
|
+
`Promise`\<`void`\>
|
|
44
|
+
|
|
45
|
+
***
|
|
46
|
+
|
|
47
|
+
### defineSecretTargets()
|
|
48
|
+
|
|
49
|
+
> **defineSecretTargets**(`command`): `Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
50
|
+
|
|
51
|
+
#### Parameters
|
|
52
|
+
|
|
53
|
+
##### command
|
|
54
|
+
|
|
55
|
+
[`OwnerDefineSecretTargetsCommand`](OwnerDefineSecretTargetsCommand.md)
|
|
56
|
+
|
|
57
|
+
#### Returns
|
|
58
|
+
|
|
59
|
+
`Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
60
|
+
|
|
61
|
+
***
|
|
62
|
+
|
|
63
|
+
### deleteSecret()
|
|
64
|
+
|
|
65
|
+
> **deleteSecret**(`command`): `Promise`\<`void`\>
|
|
66
|
+
|
|
67
|
+
#### Parameters
|
|
68
|
+
|
|
69
|
+
##### command
|
|
70
|
+
|
|
71
|
+
[`OwnerDeleteSecretCommand`](OwnerDeleteSecretCommand.md)
|
|
72
|
+
|
|
73
|
+
#### Returns
|
|
74
|
+
|
|
75
|
+
`Promise`\<`void`\>
|
|
76
|
+
|
|
77
|
+
***
|
|
78
|
+
|
|
79
|
+
### dispatchSecret()
|
|
80
|
+
|
|
81
|
+
> **dispatchSecret**(`request`): `Promise`\<[`DispatchResult`](DispatchResult.md)\>
|
|
82
|
+
|
|
83
|
+
#### Parameters
|
|
84
|
+
|
|
85
|
+
##### request
|
|
86
|
+
|
|
87
|
+
[`DispatchRequest`](DispatchRequest.md)
|
|
88
|
+
|
|
89
|
+
#### Returns
|
|
90
|
+
|
|
91
|
+
`Promise`\<[`DispatchResult`](DispatchResult.md)\>
|
|
92
|
+
|
|
93
|
+
***
|
|
94
|
+
|
|
95
|
+
### exportSecret()
|
|
96
|
+
|
|
97
|
+
> **exportSecret**(`actor`, `alias`, `request?`): `Promise`\<[`OwnerSecretExport`](OwnerSecretExport.md)\>
|
|
98
|
+
|
|
99
|
+
#### Parameters
|
|
100
|
+
|
|
101
|
+
##### actor
|
|
102
|
+
|
|
103
|
+
[`VaultPrincipal`](VaultPrincipal.md) & `object`
|
|
104
|
+
|
|
105
|
+
##### alias
|
|
106
|
+
|
|
107
|
+
`string`
|
|
108
|
+
|
|
109
|
+
##### request?
|
|
110
|
+
|
|
111
|
+
`Omit`\<[`OwnerExportSecretRequest`](OwnerExportSecretRequest.md), `"actor"` \| `"vaultId"` \| `"alias"`\>
|
|
112
|
+
|
|
113
|
+
#### Returns
|
|
114
|
+
|
|
115
|
+
`Promise`\<[`OwnerSecretExport`](OwnerSecretExport.md)\>
|
|
116
|
+
|
|
117
|
+
***
|
|
118
|
+
|
|
119
|
+
### getAudit()
|
|
120
|
+
|
|
121
|
+
> **getAudit**(`actor`, `query`, `request?`): `Promise`\<readonly [`AuditEntry`](AuditEntry.md)[]\>
|
|
122
|
+
|
|
123
|
+
#### Parameters
|
|
124
|
+
|
|
125
|
+
##### actor
|
|
126
|
+
|
|
127
|
+
[`VaultPrincipal`](VaultPrincipal.md) & `object`
|
|
128
|
+
|
|
129
|
+
##### query
|
|
130
|
+
|
|
131
|
+
[`AuditQuery`](AuditQuery.md)
|
|
132
|
+
|
|
133
|
+
##### request?
|
|
134
|
+
|
|
135
|
+
`Omit`\<[`OwnerAuditRequest`](OwnerAuditRequest.md), `"actor"` \| `"query"` \| `"vaultId"`\>
|
|
136
|
+
|
|
137
|
+
#### Returns
|
|
138
|
+
|
|
139
|
+
`Promise`\<readonly [`AuditEntry`](AuditEntry.md)[]\>
|
|
140
|
+
|
|
141
|
+
***
|
|
142
|
+
|
|
143
|
+
### getCapability()
|
|
144
|
+
|
|
145
|
+
> **getCapability**(`vaultId`, `agentId`, `capabilityId`): `Promise`\<[`AgentCapability`](AgentCapability.md) \| `null`\>
|
|
146
|
+
|
|
147
|
+
#### Parameters
|
|
148
|
+
|
|
149
|
+
##### vaultId
|
|
150
|
+
|
|
151
|
+
[`VaultId`](VaultId.md)
|
|
152
|
+
|
|
153
|
+
##### agentId
|
|
154
|
+
|
|
155
|
+
`string`
|
|
156
|
+
|
|
157
|
+
##### capabilityId
|
|
158
|
+
|
|
159
|
+
`string`
|
|
160
|
+
|
|
161
|
+
#### Returns
|
|
162
|
+
|
|
163
|
+
`Promise`\<[`AgentCapability`](AgentCapability.md) \| `null`\>
|
|
164
|
+
|
|
165
|
+
***
|
|
166
|
+
|
|
167
|
+
### listAgents()
|
|
168
|
+
|
|
169
|
+
> **listAgents**(`actor`, `request?`): `Promise`\<readonly [`AgentIdentityRecord`](AgentIdentityRecord.md)[]\>
|
|
170
|
+
|
|
171
|
+
#### Parameters
|
|
172
|
+
|
|
173
|
+
##### actor
|
|
174
|
+
|
|
175
|
+
[`VaultPrincipal`](VaultPrincipal.md) & `object`
|
|
176
|
+
|
|
177
|
+
##### request?
|
|
178
|
+
|
|
179
|
+
`Omit`\<[`OwnerListAgentsRequest`](OwnerListAgentsRequest.md), `"actor"` \| `"vaultId"`\>
|
|
180
|
+
|
|
181
|
+
#### Returns
|
|
182
|
+
|
|
183
|
+
`Promise`\<readonly [`AgentIdentityRecord`](AgentIdentityRecord.md)[]\>
|
|
184
|
+
|
|
185
|
+
***
|
|
186
|
+
|
|
187
|
+
### listCapabilities()
|
|
188
|
+
|
|
189
|
+
> **listCapabilities**(`actor`, `agentId?`, `request?`): `Promise`\<readonly [`AgentCapability`](AgentCapability.md)[]\>
|
|
190
|
+
|
|
191
|
+
#### Parameters
|
|
192
|
+
|
|
193
|
+
##### actor
|
|
194
|
+
|
|
195
|
+
[`VaultPrincipal`](VaultPrincipal.md) & `object`
|
|
196
|
+
|
|
197
|
+
##### agentId?
|
|
198
|
+
|
|
199
|
+
`string`
|
|
200
|
+
|
|
201
|
+
##### request?
|
|
202
|
+
|
|
203
|
+
`Omit`\<[`OwnerListCapabilitiesRequest`](OwnerListCapabilitiesRequest.md), `"actor"` \| `"vaultId"` \| `"agentId"`\>
|
|
204
|
+
|
|
205
|
+
#### Returns
|
|
206
|
+
|
|
207
|
+
`Promise`\<readonly [`AgentCapability`](AgentCapability.md)[]\>
|
|
208
|
+
|
|
209
|
+
***
|
|
210
|
+
|
|
211
|
+
### registerAgentIdentity()
|
|
212
|
+
|
|
213
|
+
> **registerAgentIdentity**(`command`): `Promise`\<`void`\>
|
|
214
|
+
|
|
215
|
+
#### Parameters
|
|
216
|
+
|
|
217
|
+
##### command
|
|
218
|
+
|
|
219
|
+
[`OwnerRegisterAgentIdentityCommand`](OwnerRegisterAgentIdentityCommand.md)
|
|
220
|
+
|
|
221
|
+
#### Returns
|
|
222
|
+
|
|
223
|
+
`Promise`\<`void`\>
|
|
224
|
+
|
|
225
|
+
***
|
|
226
|
+
|
|
227
|
+
### registerCapability()
|
|
228
|
+
|
|
229
|
+
> **registerCapability**(`command`): `Promise`\<`void`\>
|
|
230
|
+
|
|
231
|
+
#### Parameters
|
|
232
|
+
|
|
233
|
+
##### command
|
|
234
|
+
|
|
235
|
+
[`OwnerRegisterCapabilityCommand`](OwnerRegisterCapabilityCommand.md)
|
|
236
|
+
|
|
237
|
+
#### Returns
|
|
238
|
+
|
|
239
|
+
`Promise`\<`void`\>
|
|
240
|
+
|
|
241
|
+
***
|
|
242
|
+
|
|
243
|
+
### registerCustomFlow()
|
|
244
|
+
|
|
245
|
+
> **registerCustomFlow**(`command`): `Promise`\<`void`\>
|
|
246
|
+
|
|
247
|
+
#### Parameters
|
|
248
|
+
|
|
249
|
+
##### command
|
|
250
|
+
|
|
251
|
+
[`OwnerRegisterCustomHttpFlowCommand`](OwnerRegisterCustomHttpFlowCommand.md)
|
|
252
|
+
|
|
253
|
+
#### Returns
|
|
254
|
+
|
|
255
|
+
`Promise`\<`void`\>
|
|
256
|
+
|
|
257
|
+
***
|
|
258
|
+
|
|
259
|
+
### revokeCapability()
|
|
260
|
+
|
|
261
|
+
> **revokeCapability**(`command`): `Promise`\<`void`\>
|
|
262
|
+
|
|
263
|
+
#### Parameters
|
|
264
|
+
|
|
265
|
+
##### command
|
|
266
|
+
|
|
267
|
+
[`OwnerRevokeCapabilityCommand`](OwnerRevokeCapabilityCommand.md)
|
|
268
|
+
|
|
269
|
+
#### Returns
|
|
270
|
+
|
|
271
|
+
`Promise`\<`void`\>
|
|
272
|
+
|
|
273
|
+
***
|
|
274
|
+
|
|
275
|
+
### storeCustomFlowSecret()
|
|
276
|
+
|
|
277
|
+
> **storeCustomFlowSecret**(`flow`, `alias`, `plaintext`): `Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
278
|
+
|
|
279
|
+
#### Parameters
|
|
280
|
+
|
|
281
|
+
##### flow
|
|
282
|
+
|
|
283
|
+
[`CustomHttpFlowDefinition`](CustomHttpFlowDefinition.md)
|
|
284
|
+
|
|
285
|
+
##### alias
|
|
286
|
+
|
|
287
|
+
`string`
|
|
288
|
+
|
|
289
|
+
##### plaintext
|
|
290
|
+
|
|
291
|
+
`string`
|
|
292
|
+
|
|
293
|
+
#### Returns
|
|
294
|
+
|
|
295
|
+
`Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
296
|
+
|
|
297
|
+
***
|
|
298
|
+
|
|
299
|
+
### writeSecret()
|
|
300
|
+
|
|
301
|
+
> **writeSecret**(`command`): `Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
302
|
+
|
|
303
|
+
#### Parameters
|
|
304
|
+
|
|
305
|
+
##### command
|
|
306
|
+
|
|
307
|
+
[`VaultWriteSecretCommand`](../type-aliases/VaultWriteSecretCommand.md)
|
|
308
|
+
|
|
309
|
+
#### Returns
|
|
310
|
+
|
|
311
|
+
`Promise`\<[`SecretRecord`](SecretRecord.md)\>
|
|
@@ -0,0 +1,95 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.45.2**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: VaultCoreDependencies
|
|
6
|
+
|
|
7
|
+
## Properties
|
|
8
|
+
|
|
9
|
+
### agentIdentities
|
|
10
|
+
|
|
11
|
+
> **agentIdentities**: [`AgentIdentityRegistry`](AgentIdentityRegistry.md)
|
|
12
|
+
|
|
13
|
+
***
|
|
14
|
+
|
|
15
|
+
### audit
|
|
16
|
+
|
|
17
|
+
> **audit**: [`AuditLog`](AuditLog.md)
|
|
18
|
+
|
|
19
|
+
***
|
|
20
|
+
|
|
21
|
+
### capabilities
|
|
22
|
+
|
|
23
|
+
> **capabilities**: [`CapabilityRegistry`](CapabilityRegistry.md)
|
|
24
|
+
|
|
25
|
+
***
|
|
26
|
+
|
|
27
|
+
### clock
|
|
28
|
+
|
|
29
|
+
> **clock**: [`Clock`](Clock.md)
|
|
30
|
+
|
|
31
|
+
***
|
|
32
|
+
|
|
33
|
+
### custody
|
|
34
|
+
|
|
35
|
+
> **custody**: [`SecretCustody`](SecretCustody.md)
|
|
36
|
+
|
|
37
|
+
***
|
|
38
|
+
|
|
39
|
+
### customFlows
|
|
40
|
+
|
|
41
|
+
> **customFlows**: [`CustomHttpFlowRegistry`](CustomHttpFlowRegistry.md)
|
|
42
|
+
|
|
43
|
+
***
|
|
44
|
+
|
|
45
|
+
### executor
|
|
46
|
+
|
|
47
|
+
> **executor**: [`TrustedExecutor`](TrustedExecutor.md)
|
|
48
|
+
|
|
49
|
+
***
|
|
50
|
+
|
|
51
|
+
### ids
|
|
52
|
+
|
|
53
|
+
> **ids**: [`IdGenerator`](IdGenerator.md)
|
|
54
|
+
|
|
55
|
+
***
|
|
56
|
+
|
|
57
|
+
### ownerIdentities
|
|
58
|
+
|
|
59
|
+
> **ownerIdentities**: [`OwnerIdentityRegistry`](OwnerIdentityRegistry.md)
|
|
60
|
+
|
|
61
|
+
***
|
|
62
|
+
|
|
63
|
+
### ownerProofVerifier
|
|
64
|
+
|
|
65
|
+
> **ownerProofVerifier**: [`OwnerProofVerifier`](OwnerProofVerifier.md)
|
|
66
|
+
|
|
67
|
+
***
|
|
68
|
+
|
|
69
|
+
### policy
|
|
70
|
+
|
|
71
|
+
> **policy**: [`PolicyEngine`](PolicyEngine.md)
|
|
72
|
+
|
|
73
|
+
***
|
|
74
|
+
|
|
75
|
+
### proofVerifier
|
|
76
|
+
|
|
77
|
+
> **proofVerifier**: [`AgentProofVerifier`](AgentProofVerifier.md)
|
|
78
|
+
|
|
79
|
+
***
|
|
80
|
+
|
|
81
|
+
### replayGuard
|
|
82
|
+
|
|
83
|
+
> **replayGuard**: [`ReplayGuard`](ReplayGuard.md)
|
|
84
|
+
|
|
85
|
+
***
|
|
86
|
+
|
|
87
|
+
### secrets
|
|
88
|
+
|
|
89
|
+
> **secrets**: [`SecretRepository`](SecretRepository.md)
|
|
90
|
+
|
|
91
|
+
***
|
|
92
|
+
|
|
93
|
+
### vaultId
|
|
94
|
+
|
|
95
|
+
> **vaultId**: [`VaultId`](VaultId.md)
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.45.2**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: VaultCustomFlowResolver
|
|
6
|
+
|
|
7
|
+
## Methods
|
|
8
|
+
|
|
9
|
+
### get()
|
|
10
|
+
|
|
11
|
+
> **get**(`vaultId`, `flowId`): `Promise`\<[`CustomHttpFlowDefinition`](CustomHttpFlowDefinition.md) \| `null`\>
|
|
12
|
+
|
|
13
|
+
#### Parameters
|
|
14
|
+
|
|
15
|
+
##### vaultId
|
|
16
|
+
|
|
17
|
+
[`VaultId`](VaultId.md)
|
|
18
|
+
|
|
19
|
+
##### flowId
|
|
20
|
+
|
|
21
|
+
`string`
|
|
22
|
+
|
|
23
|
+
#### Returns
|
|
24
|
+
|
|
25
|
+
`Promise`\<[`CustomHttpFlowDefinition`](CustomHttpFlowDefinition.md) \| `null`\>
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.45.2**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: VaultGrantCapabilityInput
|
|
6
|
+
|
|
7
|
+
## Properties
|
|
8
|
+
|
|
9
|
+
### capability
|
|
10
|
+
|
|
11
|
+
> **capability**: [`AgentCapability`](AgentCapability.md)
|
|
12
|
+
|
|
13
|
+
***
|
|
14
|
+
|
|
15
|
+
### requestedAt?
|
|
16
|
+
|
|
17
|
+
> `optional` **requestedAt?**: `string`
|