@the-ai-company/cbio-node-runtime 1.45.5 → 1.46.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/clients/owner/client.d.ts +4 -10
- package/dist/clients/owner/client.js +39 -182
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/protocol/crypto.d.ts +5 -0
- package/dist/protocol/crypto.js +11 -0
- package/dist/protocol/crypto.js.map +1 -1
- package/dist/runtime/bootstrap.d.ts +7 -20
- package/dist/runtime/bootstrap.js +15 -61
- package/dist/runtime/bootstrap.js.map +1 -1
- package/dist/runtime/identity.d.ts +1 -23
- package/dist/runtime/identity.js +2 -74
- package/dist/runtime/identity.js.map +1 -1
- package/dist/runtime/index.d.ts +8 -22
- package/dist/runtime/index.js +6 -10
- package/dist/runtime/index.js.map +1 -1
- package/dist/runtime/vault-metadata.d.ts +4 -16
- package/dist/runtime/vault-metadata.js +8 -43
- package/dist/runtime/vault-metadata.js.map +1 -1
- package/dist/vault-core/contracts.d.ts +0 -23
- package/dist/vault-core/contracts.js +0 -1
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +4 -4
- package/dist/vault-core/core.js +10 -76
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.d.ts +4 -52
- package/dist/vault-core/defaults.js +2 -300
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/index.d.ts +5 -5
- package/dist/vault-core/index.js +3 -3
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-core/persistence.d.ts +5 -34
- package/dist/vault-core/persistence.js +8 -38
- package/dist/vault-core/persistence.js.map +1 -1
- package/dist/vault-core/ports.d.ts +2 -51
- package/dist/vault-ingress/index.d.ts +1 -2
- package/dist/vault-ingress/index.js +0 -5
- package/dist/vault-ingress/index.js.map +1 -1
- package/docs/api/README.md +6 -91
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/VaultCore.md +320 -0
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +2 -2
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +4 -4
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +3 -67
- package/docs/api/functions/createStandardAcquireBoundary.md +3 -3
- package/docs/api/functions/createStandardDispatchBoundary.md +3 -3
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +2 -2
- package/docs/api/functions/createVaultCore.md +4 -4
- package/docs/api/functions/createVaultCoreDependencies.md +17 -0
- package/docs/api/functions/createVaultService.md +6 -6
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +24 -0
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultHttpDispatch.md +4 -4
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +3 -3
- package/docs/api/functions/readVaultProfile.md +3 -3
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +7 -7
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +6 -6
- package/docs/api/functions/writeVaultProfile.md +3 -3
- package/docs/api/interfaces/AgentClient.md +3 -3
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +4 -4
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/CbioRuntime.md +48 -389
- package/docs/api/interfaces/CreateAgentClientOptions.md +4 -4
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -5
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +9 -9
- package/docs/api/interfaces/CreateVaultClientOptions.md +5 -5
- package/docs/api/interfaces/CreateVaultOptions.md +16 -16
- package/docs/api/interfaces/CreatedVault.md +3 -3
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +3 -3
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +1 -1
- package/docs/api/interfaces/OwnerSecretTargetBinding.md +1 -1
- package/docs/api/interfaces/OwnerStoreSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerWriteSecretInput.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +10 -10
- package/docs/api/interfaces/RecoveredVault.md +3 -3
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +17 -27
- package/docs/api/interfaces/{CreateDefaultVaultCoreDependenciesOptions.md → VaultCoreDependenciesOptions.md} +3 -3
- package/docs/api/interfaces/VaultDeleteSecretInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +2 -2
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultObject.md +3 -3
- package/docs/api/interfaces/VaultProfile.md +7 -11
- package/docs/api/interfaces/VaultPublicMetadata.md +1 -1
- package/docs/api/interfaces/VaultRegisterAgentInput.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +7 -7
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +2 -2
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/package.json +1 -1
- package/docs/api/classes/InMemoryReplayGuard.md +0 -45
- package/docs/api/enumerations/AuditAction.md +0 -95
- package/docs/api/enumerations/AuditOutcome.md +0 -29
- package/docs/api/enumerations/DispatchStatus.md +0 -23
- package/docs/api/functions/createChildIdentity.md +0 -25
- package/docs/api/functions/createDefaultVaultCoreDependencies.md +0 -77
- package/docs/api/functions/deriveChildIdentity.md +0 -41
- package/docs/api/functions/ensureIdentityPrivateVault.md +0 -21
- package/docs/api/functions/identityPrivateVaultChildrenKey.md +0 -17
- package/docs/api/functions/identityPrivateVaultPrefix.md +0 -17
- package/docs/api/functions/identityPrivateVaultProfileKey.md +0 -17
- package/docs/api/functions/identityPrivateVaultPublicSealedKey.md +0 -17
- package/docs/api/functions/listIdentities.md +0 -19
- package/docs/api/functions/readIdentityMetadata.md +0 -29
- package/docs/api/functions/readIdentityPrivateVaultChildrenState.md +0 -21
- package/docs/api/functions/readIdentityPrivateVaultProfile.md +0 -21
- package/docs/api/functions/readVaultPublicMetadata.md +0 -23
- package/docs/api/functions/toOwnerHttpFlowBoundary.md +0 -17
- package/docs/api/interfaces/AgentCapability.md +0 -103
- package/docs/api/interfaces/AgentIdentityRecord.md +0 -23
- package/docs/api/interfaces/AgentIdentityRegistry.md +0 -57
- package/docs/api/interfaces/AgentProof.md +0 -29
- package/docs/api/interfaces/AgentProofVerifier.md +0 -21
- package/docs/api/interfaces/AuditEntry.md +0 -89
- package/docs/api/interfaces/AuditLog.md +0 -37
- package/docs/api/interfaces/AuditQuery.md +0 -29
- package/docs/api/interfaces/CapabilityRegistry.md +0 -65
- package/docs/api/interfaces/CapabilityRevocationRegistry.md +0 -53
- package/docs/api/interfaces/ChildIdentity.md +0 -77
- package/docs/api/interfaces/Clock.md +0 -15
- package/docs/api/interfaces/CreateChildIdentityOptions.md +0 -19
- package/docs/api/interfaces/CustomHttpFlowDefinition.md +0 -71
- package/docs/api/interfaces/CustomHttpFlowRegistry.md +0 -41
- package/docs/api/interfaces/DeriveIdentityOptions.md +0 -11
- package/docs/api/interfaces/DispatchAuthorization.md +0 -35
- package/docs/api/interfaces/DispatchInstruction.md +0 -47
- package/docs/api/interfaces/DispatchRequest.md +0 -77
- package/docs/api/interfaces/DispatchResult.md +0 -53
- package/docs/api/interfaces/IdGenerator.md +0 -39
- package/docs/api/interfaces/IdentityPrivateVaultChildRecord.md +0 -35
- package/docs/api/interfaces/IdentityPrivateVaultChildrenState.md +0 -17
- package/docs/api/interfaces/IdentityPrivateVaultProfile.md +0 -35
- package/docs/api/interfaces/IssuerWriteSecretCommand.md +0 -59
- package/docs/api/interfaces/OwnerAuditRequest.md +0 -47
- package/docs/api/interfaces/OwnerDefineSecretTargetsCommand.md +0 -53
- package/docs/api/interfaces/OwnerDeleteSecretCommand.md +0 -47
- package/docs/api/interfaces/OwnerExportSecretRequest.md +0 -47
- package/docs/api/interfaces/OwnerHttpFlowBoundary.md +0 -51
- package/docs/api/interfaces/OwnerIdentityRecord.md +0 -23
- package/docs/api/interfaces/OwnerIdentityRegistry.md +0 -57
- package/docs/api/interfaces/OwnerListAgentsRequest.md +0 -41
- package/docs/api/interfaces/OwnerListCapabilitiesRequest.md +0 -47
- package/docs/api/interfaces/OwnerProof.md +0 -29
- package/docs/api/interfaces/OwnerProofVerifier.md +0 -181
- package/docs/api/interfaces/OwnerRegisterAgentIdentityCommand.md +0 -47
- package/docs/api/interfaces/OwnerRegisterCapabilityCommand.md +0 -47
- package/docs/api/interfaces/OwnerRegisterCustomHttpFlowCommand.md +0 -83
- package/docs/api/interfaces/OwnerRevokeCapabilityCommand.md +0 -53
- package/docs/api/interfaces/OwnerSecretExport.md +0 -35
- package/docs/api/interfaces/OwnerWriteSecretCommand.md +0 -65
- package/docs/api/interfaces/PolicyEngine.md +0 -81
- package/docs/api/interfaces/RateLimitStore.md +0 -33
- package/docs/api/interfaces/ReplayGuard.md +0 -21
- package/docs/api/interfaces/SecretAlias.md +0 -11
- package/docs/api/interfaces/SecretCustody.md +0 -57
- package/docs/api/interfaces/SecretId.md +0 -11
- package/docs/api/interfaces/SecretRecord.md +0 -53
- package/docs/api/interfaces/SecretRepository.md +0 -69
- package/docs/api/interfaces/SecretVersion.md +0 -11
- package/docs/api/interfaces/SignatureAgentProofVerifierOptions.md +0 -21
- package/docs/api/interfaces/TrustedExecutor.md +0 -31
- package/docs/api/interfaces/VaultAcquireSecretInput.md +0 -53
- package/docs/api/interfaces/VaultAcquireSecretResult.md +0 -41
- package/docs/api/interfaces/VaultAgentDispatchErrorResponse.md +0 -25
- package/docs/api/interfaces/VaultAgentDispatchRequest.md +0 -75
- package/docs/api/interfaces/VaultAgentDispatchResponse.md +0 -17
- package/docs/api/interfaces/VaultCore.md +0 -311
- package/docs/api/interfaces/VaultCoreDependencies.md +0 -95
- package/docs/api/interfaces/VaultCustomFlowResolver.md +0 -25
- package/docs/api/interfaces/VaultId.md +0 -11
- package/docs/api/interfaces/VaultPrincipal.md +0 -17
- package/docs/api/interfaces/VaultService.md +0 -251
- package/docs/api/interfaces/VaultTargetBinding.md +0 -35
- package/docs/api/type-aliases/IdentityPrivateVaultAccess.md +0 -7
- package/docs/api/type-aliases/RedactedResponseShape.md +0 -7
- package/docs/api/type-aliases/VaultAcquireSecretFlow.md +0 -7
- package/docs/api/type-aliases/VaultPrincipalKind.md +0 -7
- package/docs/api/type-aliases/VaultWriteSecretCommand.md +0 -7
|
@@ -0,0 +1,320 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Class: VaultCore
|
|
6
|
+
|
|
7
|
+
The Sovereign Vault Core.
|
|
8
|
+
This is the primary implementation of the Vault logic.
|
|
9
|
+
|
|
10
|
+
## Constructors
|
|
11
|
+
|
|
12
|
+
### Constructor
|
|
13
|
+
|
|
14
|
+
> **new VaultCore**(`_deps`): `VaultCore`
|
|
15
|
+
|
|
16
|
+
#### Parameters
|
|
17
|
+
|
|
18
|
+
##### \_deps
|
|
19
|
+
|
|
20
|
+
`VaultCoreDependencies`
|
|
21
|
+
|
|
22
|
+
#### Returns
|
|
23
|
+
|
|
24
|
+
`VaultCore`
|
|
25
|
+
|
|
26
|
+
## Accessors
|
|
27
|
+
|
|
28
|
+
### vaultId
|
|
29
|
+
|
|
30
|
+
#### Get Signature
|
|
31
|
+
|
|
32
|
+
> **get** **vaultId**(): `VaultId`
|
|
33
|
+
|
|
34
|
+
##### Returns
|
|
35
|
+
|
|
36
|
+
`VaultId`
|
|
37
|
+
|
|
38
|
+
## Methods
|
|
39
|
+
|
|
40
|
+
### authorizeDispatch()
|
|
41
|
+
|
|
42
|
+
> **authorizeDispatch**(`request`): `Promise`\<`DispatchAuthorization`\>
|
|
43
|
+
|
|
44
|
+
#### Parameters
|
|
45
|
+
|
|
46
|
+
##### request
|
|
47
|
+
|
|
48
|
+
`DispatchRequest`
|
|
49
|
+
|
|
50
|
+
#### Returns
|
|
51
|
+
|
|
52
|
+
`Promise`\<`DispatchAuthorization`\>
|
|
53
|
+
|
|
54
|
+
***
|
|
55
|
+
|
|
56
|
+
### defineSecretTargets()
|
|
57
|
+
|
|
58
|
+
> **defineSecretTargets**(`command`): `Promise`\<`SecretRecord`\>
|
|
59
|
+
|
|
60
|
+
#### Parameters
|
|
61
|
+
|
|
62
|
+
##### command
|
|
63
|
+
|
|
64
|
+
`OwnerDefineSecretTargetsCommand`
|
|
65
|
+
|
|
66
|
+
#### Returns
|
|
67
|
+
|
|
68
|
+
`Promise`\<`SecretRecord`\>
|
|
69
|
+
|
|
70
|
+
***
|
|
71
|
+
|
|
72
|
+
### deleteSecret()
|
|
73
|
+
|
|
74
|
+
> **deleteSecret**(`command`): `Promise`\<`void`\>
|
|
75
|
+
|
|
76
|
+
#### Parameters
|
|
77
|
+
|
|
78
|
+
##### command
|
|
79
|
+
|
|
80
|
+
`OwnerDeleteSecretCommand`
|
|
81
|
+
|
|
82
|
+
#### Returns
|
|
83
|
+
|
|
84
|
+
`Promise`\<`void`\>
|
|
85
|
+
|
|
86
|
+
***
|
|
87
|
+
|
|
88
|
+
### dispatchSecret()
|
|
89
|
+
|
|
90
|
+
> **dispatchSecret**(`request`): `Promise`\<`DispatchResult`\>
|
|
91
|
+
|
|
92
|
+
#### Parameters
|
|
93
|
+
|
|
94
|
+
##### request
|
|
95
|
+
|
|
96
|
+
`DispatchRequest`
|
|
97
|
+
|
|
98
|
+
#### Returns
|
|
99
|
+
|
|
100
|
+
`Promise`\<`DispatchResult`\>
|
|
101
|
+
|
|
102
|
+
***
|
|
103
|
+
|
|
104
|
+
### exportSecret()
|
|
105
|
+
|
|
106
|
+
> **exportSecret**(`actor`, `alias`, `request?`): `Promise`\<`OwnerSecretExport`\>
|
|
107
|
+
|
|
108
|
+
#### Parameters
|
|
109
|
+
|
|
110
|
+
##### actor
|
|
111
|
+
|
|
112
|
+
`VaultPrincipal` & `object`
|
|
113
|
+
|
|
114
|
+
##### alias
|
|
115
|
+
|
|
116
|
+
`string`
|
|
117
|
+
|
|
118
|
+
##### request?
|
|
119
|
+
|
|
120
|
+
`Omit`\<`OwnerExportSecretRequest`, `"vaultId"` \| `"actor"` \| `"alias"`\>
|
|
121
|
+
|
|
122
|
+
#### Returns
|
|
123
|
+
|
|
124
|
+
`Promise`\<`OwnerSecretExport`\>
|
|
125
|
+
|
|
126
|
+
***
|
|
127
|
+
|
|
128
|
+
### getAudit()
|
|
129
|
+
|
|
130
|
+
> **getAudit**(`actor`, `query`, `request?`): `Promise`\<readonly `AuditEntry`[]\>
|
|
131
|
+
|
|
132
|
+
#### Parameters
|
|
133
|
+
|
|
134
|
+
##### actor
|
|
135
|
+
|
|
136
|
+
`VaultPrincipal` & `object`
|
|
137
|
+
|
|
138
|
+
##### query
|
|
139
|
+
|
|
140
|
+
`AuditQuery`
|
|
141
|
+
|
|
142
|
+
##### request?
|
|
143
|
+
|
|
144
|
+
`Omit`\<`OwnerAuditRequest`, `"vaultId"` \| `"actor"` \| `"query"`\>
|
|
145
|
+
|
|
146
|
+
#### Returns
|
|
147
|
+
|
|
148
|
+
`Promise`\<readonly `AuditEntry`[]\>
|
|
149
|
+
|
|
150
|
+
***
|
|
151
|
+
|
|
152
|
+
### getCapability()
|
|
153
|
+
|
|
154
|
+
> **getCapability**(`vaultId`, `agentId`, `capabilityId`): `Promise`\<`AgentCapability` \| `null`\>
|
|
155
|
+
|
|
156
|
+
#### Parameters
|
|
157
|
+
|
|
158
|
+
##### vaultId
|
|
159
|
+
|
|
160
|
+
`VaultId`
|
|
161
|
+
|
|
162
|
+
##### agentId
|
|
163
|
+
|
|
164
|
+
`string`
|
|
165
|
+
|
|
166
|
+
##### capabilityId
|
|
167
|
+
|
|
168
|
+
`string`
|
|
169
|
+
|
|
170
|
+
#### Returns
|
|
171
|
+
|
|
172
|
+
`Promise`\<`AgentCapability` \| `null`\>
|
|
173
|
+
|
|
174
|
+
***
|
|
175
|
+
|
|
176
|
+
### listAgents()
|
|
177
|
+
|
|
178
|
+
> **listAgents**(`actor`, `request?`): `Promise`\<readonly `AgentIdentityRecord`[]\>
|
|
179
|
+
|
|
180
|
+
#### Parameters
|
|
181
|
+
|
|
182
|
+
##### actor
|
|
183
|
+
|
|
184
|
+
`VaultPrincipal` & `object`
|
|
185
|
+
|
|
186
|
+
##### request?
|
|
187
|
+
|
|
188
|
+
`Omit`\<`OwnerListAgentsRequest`, `"vaultId"` \| `"actor"`\>
|
|
189
|
+
|
|
190
|
+
#### Returns
|
|
191
|
+
|
|
192
|
+
`Promise`\<readonly `AgentIdentityRecord`[]\>
|
|
193
|
+
|
|
194
|
+
***
|
|
195
|
+
|
|
196
|
+
### listCapabilities()
|
|
197
|
+
|
|
198
|
+
> **listCapabilities**(`actor`, `agentId?`, `request?`): `Promise`\<readonly `AgentCapability`[]\>
|
|
199
|
+
|
|
200
|
+
#### Parameters
|
|
201
|
+
|
|
202
|
+
##### actor
|
|
203
|
+
|
|
204
|
+
`VaultPrincipal` & `object`
|
|
205
|
+
|
|
206
|
+
##### agentId?
|
|
207
|
+
|
|
208
|
+
`string`
|
|
209
|
+
|
|
210
|
+
##### request?
|
|
211
|
+
|
|
212
|
+
`Omit`\<`OwnerListCapabilitiesRequest`, `"vaultId"` \| `"actor"` \| `"agentId"`\>
|
|
213
|
+
|
|
214
|
+
#### Returns
|
|
215
|
+
|
|
216
|
+
`Promise`\<readonly `AgentCapability`[]\>
|
|
217
|
+
|
|
218
|
+
***
|
|
219
|
+
|
|
220
|
+
### registerAgentIdentity()
|
|
221
|
+
|
|
222
|
+
> **registerAgentIdentity**(`command`): `Promise`\<`void`\>
|
|
223
|
+
|
|
224
|
+
#### Parameters
|
|
225
|
+
|
|
226
|
+
##### command
|
|
227
|
+
|
|
228
|
+
`OwnerRegisterAgentIdentityCommand`
|
|
229
|
+
|
|
230
|
+
#### Returns
|
|
231
|
+
|
|
232
|
+
`Promise`\<`void`\>
|
|
233
|
+
|
|
234
|
+
***
|
|
235
|
+
|
|
236
|
+
### registerCapability()
|
|
237
|
+
|
|
238
|
+
> **registerCapability**(`command`): `Promise`\<`void`\>
|
|
239
|
+
|
|
240
|
+
#### Parameters
|
|
241
|
+
|
|
242
|
+
##### command
|
|
243
|
+
|
|
244
|
+
`OwnerRegisterCapabilityCommand`
|
|
245
|
+
|
|
246
|
+
#### Returns
|
|
247
|
+
|
|
248
|
+
`Promise`\<`void`\>
|
|
249
|
+
|
|
250
|
+
***
|
|
251
|
+
|
|
252
|
+
### registerCustomFlow()
|
|
253
|
+
|
|
254
|
+
> **registerCustomFlow**(`command`): `Promise`\<`void`\>
|
|
255
|
+
|
|
256
|
+
#### Parameters
|
|
257
|
+
|
|
258
|
+
##### command
|
|
259
|
+
|
|
260
|
+
`OwnerRegisterCustomHttpFlowCommand`
|
|
261
|
+
|
|
262
|
+
#### Returns
|
|
263
|
+
|
|
264
|
+
`Promise`\<`void`\>
|
|
265
|
+
|
|
266
|
+
***
|
|
267
|
+
|
|
268
|
+
### revokeCapability()
|
|
269
|
+
|
|
270
|
+
> **revokeCapability**(`command`): `Promise`\<`void`\>
|
|
271
|
+
|
|
272
|
+
#### Parameters
|
|
273
|
+
|
|
274
|
+
##### command
|
|
275
|
+
|
|
276
|
+
`OwnerRevokeCapabilityCommand`
|
|
277
|
+
|
|
278
|
+
#### Returns
|
|
279
|
+
|
|
280
|
+
`Promise`\<`void`\>
|
|
281
|
+
|
|
282
|
+
***
|
|
283
|
+
|
|
284
|
+
### storeCustomFlowSecret()
|
|
285
|
+
|
|
286
|
+
> **storeCustomFlowSecret**(`flow`, `alias`, `plaintext`): `Promise`\<`SecretRecord`\>
|
|
287
|
+
|
|
288
|
+
#### Parameters
|
|
289
|
+
|
|
290
|
+
##### flow
|
|
291
|
+
|
|
292
|
+
`CustomHttpFlowDefinition`
|
|
293
|
+
|
|
294
|
+
##### alias
|
|
295
|
+
|
|
296
|
+
`string`
|
|
297
|
+
|
|
298
|
+
##### plaintext
|
|
299
|
+
|
|
300
|
+
`string`
|
|
301
|
+
|
|
302
|
+
#### Returns
|
|
303
|
+
|
|
304
|
+
`Promise`\<`SecretRecord`\>
|
|
305
|
+
|
|
306
|
+
***
|
|
307
|
+
|
|
308
|
+
### writeSecret()
|
|
309
|
+
|
|
310
|
+
> **writeSecret**(`command`): `Promise`\<`SecretRecord`\>
|
|
311
|
+
|
|
312
|
+
#### Parameters
|
|
313
|
+
|
|
314
|
+
##### command
|
|
315
|
+
|
|
316
|
+
`VaultWriteSecretCommand`
|
|
317
|
+
|
|
318
|
+
#### Returns
|
|
319
|
+
|
|
320
|
+
`Promise`\<`SecretRecord`\>
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -6,7 +6,7 @@
|
|
|
6
6
|
|
|
7
7
|
> **createIdentity**(`options?`): `CreatedIdentity`
|
|
8
8
|
|
|
9
|
-
Creates a new
|
|
9
|
+
Creates a new identity with a fresh Ed25519 keypair.
|
|
10
10
|
|
|
11
11
|
## Parameters
|
|
12
12
|
|
|
@@ -1,17 +1,17 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: createOwnerHttpFlowBoundary()
|
|
6
6
|
|
|
7
|
-
> **createOwnerHttpFlowBoundary**(`boundary`):
|
|
7
|
+
> **createOwnerHttpFlowBoundary**(`boundary`): `OwnerHttpFlowBoundary`
|
|
8
8
|
|
|
9
9
|
## Parameters
|
|
10
10
|
|
|
11
11
|
### boundary
|
|
12
12
|
|
|
13
|
-
|
|
13
|
+
`OwnerHttpFlowBoundary`
|
|
14
14
|
|
|
15
15
|
## Returns
|
|
16
16
|
|
|
17
|
-
|
|
17
|
+
`OwnerHttpFlowBoundary`
|
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: createPersistentVaultCoreDependencies()
|
|
6
6
|
|
|
7
|
-
> **createPersistentVaultCoreDependencies**(`storage`, `options`): `
|
|
7
|
+
> **createPersistentVaultCoreDependencies**(`storage`, `options`): `VaultCoreDependencies`
|
|
8
8
|
|
|
9
9
|
## Parameters
|
|
10
10
|
|
|
@@ -18,68 +18,4 @@
|
|
|
18
18
|
|
|
19
19
|
## Returns
|
|
20
20
|
|
|
21
|
-
`
|
|
22
|
-
|
|
23
|
-
### agentIdentities
|
|
24
|
-
|
|
25
|
-
> **agentIdentities**: `FileAgentIdentityRegistry`
|
|
26
|
-
|
|
27
|
-
### audit
|
|
28
|
-
|
|
29
|
-
> **audit**: `FileAuditLog`
|
|
30
|
-
|
|
31
|
-
### capabilities
|
|
32
|
-
|
|
33
|
-
> **capabilities**: `FileCapabilityRegistry`
|
|
34
|
-
|
|
35
|
-
### capabilityRevocations
|
|
36
|
-
|
|
37
|
-
> **capabilityRevocations**: [`CapabilityRevocationRegistry`](../interfaces/CapabilityRevocationRegistry.md)
|
|
38
|
-
|
|
39
|
-
### clock
|
|
40
|
-
|
|
41
|
-
> **clock**: `SystemClock`
|
|
42
|
-
|
|
43
|
-
### custody
|
|
44
|
-
|
|
45
|
-
> **custody**: `FileSecretCustody`
|
|
46
|
-
|
|
47
|
-
### customFlows
|
|
48
|
-
|
|
49
|
-
> **customFlows**: [`CustomHttpFlowRegistry`](../interfaces/CustomHttpFlowRegistry.md)
|
|
50
|
-
|
|
51
|
-
### executor
|
|
52
|
-
|
|
53
|
-
> **executor**: `HttpDispatchExecutor`
|
|
54
|
-
|
|
55
|
-
### ids
|
|
56
|
-
|
|
57
|
-
> **ids**: `RandomIdGenerator`
|
|
58
|
-
|
|
59
|
-
### ownerIdentities
|
|
60
|
-
|
|
61
|
-
> **ownerIdentities**: `FileOwnerIdentityRegistry`
|
|
62
|
-
|
|
63
|
-
### ownerProofVerifier
|
|
64
|
-
|
|
65
|
-
> **ownerProofVerifier**: `SignatureOwnerProofVerifier`
|
|
66
|
-
|
|
67
|
-
### policy
|
|
68
|
-
|
|
69
|
-
> **policy**: `DefaultPolicyEngine`
|
|
70
|
-
|
|
71
|
-
### proofVerifier
|
|
72
|
-
|
|
73
|
-
> **proofVerifier**: `SignatureAgentProofVerifier`
|
|
74
|
-
|
|
75
|
-
### replayGuard
|
|
76
|
-
|
|
77
|
-
> **replayGuard**: [`ReplayGuard`](../interfaces/ReplayGuard.md)
|
|
78
|
-
|
|
79
|
-
### secrets
|
|
80
|
-
|
|
81
|
-
> **secrets**: `FileSecretRepository`
|
|
82
|
-
|
|
83
|
-
### vaultId
|
|
84
|
-
|
|
85
|
-
> **vaultId**: [`VaultId`](../interfaces/VaultId.md)
|
|
21
|
+
`VaultCoreDependencies`
|
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: createStandardAcquireBoundary()
|
|
6
6
|
|
|
7
|
-
> **createStandardAcquireBoundary**(`input`):
|
|
7
|
+
> **createStandardAcquireBoundary**(`input`): `OwnerHttpFlowBoundary`
|
|
8
8
|
|
|
9
9
|
## Parameters
|
|
10
10
|
|
|
@@ -28,4 +28,4 @@
|
|
|
28
28
|
|
|
29
29
|
## Returns
|
|
30
30
|
|
|
31
|
-
|
|
31
|
+
`OwnerHttpFlowBoundary`
|
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: createStandardDispatchBoundary()
|
|
6
6
|
|
|
7
|
-
> **createStandardDispatchBoundary**(`input`):
|
|
7
|
+
> **createStandardDispatchBoundary**(`input`): `OwnerHttpFlowBoundary`
|
|
8
8
|
|
|
9
9
|
## Parameters
|
|
10
10
|
|
|
@@ -20,4 +20,4 @@
|
|
|
20
20
|
|
|
21
21
|
## Returns
|
|
22
22
|
|
|
23
|
-
|
|
23
|
+
`OwnerHttpFlowBoundary`
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -14,7 +14,7 @@ Creates a [VaultClient](../interfaces/VaultClient.md) instance for a specific va
|
|
|
14
14
|
|
|
15
15
|
[`CreateVaultClientOptions`](../interfaces/CreateVaultClientOptions.md)
|
|
16
16
|
|
|
17
|
-
Configuration including owner identity and the vault service.
|
|
17
|
+
Configuration including optional owner identity and the vault service.
|
|
18
18
|
|
|
19
19
|
## Returns
|
|
20
20
|
|
|
@@ -1,17 +1,17 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: createVaultCore()
|
|
6
6
|
|
|
7
|
-
> **createVaultCore**(`deps`): [`VaultCore`](../
|
|
7
|
+
> **createVaultCore**(`deps`): [`VaultCore`](../classes/VaultCore.md)
|
|
8
8
|
|
|
9
9
|
## Parameters
|
|
10
10
|
|
|
11
11
|
### deps
|
|
12
12
|
|
|
13
|
-
|
|
13
|
+
`VaultCoreDependencies`
|
|
14
14
|
|
|
15
15
|
## Returns
|
|
16
16
|
|
|
17
|
-
[`VaultCore`](../
|
|
17
|
+
[`VaultCore`](../classes/VaultCore.md)
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Function: createVaultCoreDependencies()
|
|
6
|
+
|
|
7
|
+
> **createVaultCoreDependencies**(`options?`): `VaultCoreDependencies`
|
|
8
|
+
|
|
9
|
+
## Parameters
|
|
10
|
+
|
|
11
|
+
### options?
|
|
12
|
+
|
|
13
|
+
[`VaultCoreDependenciesOptions`](../interfaces/VaultCoreDependenciesOptions.md) = `{}`
|
|
14
|
+
|
|
15
|
+
## Returns
|
|
16
|
+
|
|
17
|
+
`VaultCoreDependencies`
|
|
@@ -1,26 +1,26 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: createVaultService()
|
|
6
6
|
|
|
7
|
-
> **createVaultService**(`deps`, `options?`):
|
|
7
|
+
> **createVaultService**(`deps`, `options?`): `VaultService`
|
|
8
8
|
|
|
9
9
|
## Parameters
|
|
10
10
|
|
|
11
11
|
### deps
|
|
12
12
|
|
|
13
|
-
|
|
13
|
+
`VaultCoreDependencies`
|
|
14
14
|
|
|
15
15
|
### options?
|
|
16
16
|
|
|
17
17
|
#### clock?
|
|
18
18
|
|
|
19
|
-
|
|
19
|
+
`Clock`
|
|
20
20
|
|
|
21
21
|
#### customFlows?
|
|
22
22
|
|
|
23
|
-
|
|
23
|
+
`VaultCustomFlowResolver`
|
|
24
24
|
|
|
25
25
|
#### fetchImpl?
|
|
26
26
|
|
|
@@ -28,4 +28,4 @@
|
|
|
28
28
|
|
|
29
29
|
## Returns
|
|
30
30
|
|
|
31
|
-
|
|
31
|
+
`VaultService`
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Function: deriveVaultWorkingKeyFromPassword()
|
|
6
|
+
|
|
7
|
+
> **deriveVaultWorkingKeyFromPassword**(`password`, `vaultId`): `string`
|
|
8
|
+
|
|
9
|
+
Derives a 256-bit working key from a user password and salt (vaultId).
|
|
10
|
+
Using scrypt for memory-hard key derivation to resist brute-force attacks.
|
|
11
|
+
|
|
12
|
+
## Parameters
|
|
13
|
+
|
|
14
|
+
### password
|
|
15
|
+
|
|
16
|
+
`string`
|
|
17
|
+
|
|
18
|
+
### vaultId
|
|
19
|
+
|
|
20
|
+
`string`
|
|
21
|
+
|
|
22
|
+
## Returns
|
|
23
|
+
|
|
24
|
+
`string`
|
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.46.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
5
5
|
# Function: handleVaultHttpDispatch()
|
|
6
6
|
|
|
7
|
-
> **handleVaultHttpDispatch**(`service`, `body`): `Promise
|
|
7
|
+
> **handleVaultHttpDispatch**(`service`, `body`): `Promise`\<`VaultAgentDispatchResponse` \| `VaultAgentDispatchErrorResponse`\>
|
|
8
8
|
|
|
9
9
|
Standard server-side helper to handle a vault agent dispatch request from an HTTP body.
|
|
10
10
|
This can be used in any HTTP server framework (Express, Fastify, etc.).
|
|
@@ -13,7 +13,7 @@ This can be used in any HTTP server framework (Express, Fastify, etc.).
|
|
|
13
13
|
|
|
14
14
|
### service
|
|
15
15
|
|
|
16
|
-
|
|
16
|
+
`VaultService`
|
|
17
17
|
|
|
18
18
|
The VaultService instance to handle the request.
|
|
19
19
|
|
|
@@ -25,6 +25,6 @@ The parsed JSON body of the incoming HTTP request.
|
|
|
25
25
|
|
|
26
26
|
## Returns
|
|
27
27
|
|
|
28
|
-
`Promise
|
|
28
|
+
`Promise`\<`VaultAgentDispatchResponse` \| `VaultAgentDispatchErrorResponse`\>
|
|
29
29
|
|
|
30
30
|
A JSON-serializable response object.
|