@the-ai-company/cbio-node-runtime 1.48.1 → 1.48.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -6
- package/dist/clients/agent/client.js +1 -2
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/owner/client.js +8 -4
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +9 -3
- package/dist/vault-core/contracts.d.ts +6 -4
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +3 -0
- package/dist/vault-core/core.js +91 -19
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.js +23 -19
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-ingress/defaults.js +1 -1
- package/dist/vault-ingress/defaults.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +2 -1
- package/dist/vault-ingress/index.js +8 -5
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.js +1 -1
- package/dist/vault-ingress/remote-transport.js.map +1 -1
- package/docs/REFERENCE.md +9 -3
- package/docs/api/README.md +2 -2
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/VaultCore.md +17 -1
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
- package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +1 -1
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +1 -1
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/CbioRuntime.md +1 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -1
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +1 -1
- package/docs/api/interfaces/OwnerSecretTargetBinding.md +1 -1
- package/docs/api/interfaces/OwnerStoreSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerWriteSecretInput.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +1 -1
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultDeleteSecretInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +5 -11
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultRegisterAgentInput.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/docs/zh/README.md +26 -2
- package/package.json +1 -1
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.48.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.48.4**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -30,12 +30,6 @@
|
|
|
30
30
|
|
|
31
31
|
***
|
|
32
32
|
|
|
33
|
-
### auditRequired?
|
|
34
|
-
|
|
35
|
-
> `optional` **auditRequired?**: `boolean`
|
|
36
|
-
|
|
37
|
-
***
|
|
38
|
-
|
|
39
33
|
### capabilityId?
|
|
40
34
|
|
|
41
35
|
> `optional` **capabilityId?**: `string`
|
|
@@ -74,12 +68,12 @@
|
|
|
74
68
|
|
|
75
69
|
***
|
|
76
70
|
|
|
77
|
-
###
|
|
71
|
+
### secretAliases?
|
|
78
72
|
|
|
79
|
-
> `optional` **
|
|
73
|
+
> `optional` **secretAliases?**: readonly `string`[]
|
|
80
74
|
|
|
81
75
|
***
|
|
82
76
|
|
|
83
|
-
###
|
|
77
|
+
### skipAudit?
|
|
84
78
|
|
|
85
|
-
> `optional` **
|
|
79
|
+
> `optional` **skipAudit?**: `boolean`
|
package/docs/zh/README.md
CHANGED
|
@@ -72,7 +72,31 @@ const record = await client.writeSecret({
|
|
|
72
72
|
|
|
73
73
|
---
|
|
74
74
|
|
|
75
|
-
|
|
75
|
+
### 4. 人机协同 (HITL) 工作流
|
|
76
|
+
|
|
77
|
+
系统采用 **“发现优先 (Discovery-first)”** 模型。如果 Agent 尝试执行的操作不在白名单内（即 Agent-Key-Action “铁三角”未对齐），动作将被自动暂停：
|
|
78
|
+
|
|
79
|
+
```ts
|
|
80
|
+
// Agent 进程中
|
|
81
|
+
const result = await agent.dispatch({ ... });
|
|
82
|
+
if (result.status === 'PENDING') {
|
|
83
|
+
console.log("触发发现流程：等待所有者审批...");
|
|
84
|
+
}
|
|
85
|
+
|
|
86
|
+
// 所有者进程中 (GUI 或 脚本)
|
|
87
|
+
const pending = await client.listPendingDispatches();
|
|
88
|
+
if (pending.length > 0) {
|
|
89
|
+
// 检查并批准请求，可选择将其设为“永久授权”
|
|
90
|
+
await client.approveDispatch({
|
|
91
|
+
requestId: pending[0].requestId,
|
|
92
|
+
permanent: true
|
|
93
|
+
});
|
|
94
|
+
}
|
|
95
|
+
```
|
|
96
|
+
|
|
97
|
+
---
|
|
98
|
+
|
|
99
|
+
## 详细文档
|
|
76
100
|
|
|
77
101
|
- [进程隔离 (A/B 架构)](../PROCESS_ISOLATION.md)
|
|
78
102
|
- [根目录 README (英文)](../../README.md)
|
|
@@ -81,5 +105,5 @@ const record = await client.writeSecret({
|
|
|
81
105
|
|
|
82
106
|
1. **机密隔离**：机密明文绝不离开安全进程。
|
|
83
107
|
2. **密码即权限**：主密码是唯一的管理授权来源。
|
|
84
|
-
3. **可审计性**：所有管理动作在高层均记录为 `vault-master` 身份。
|
|
108
|
+
3. **可审计性**：所有管理动作在高层均记录为 `vault-master` 或对应的 Agent 身份。
|
|
85
109
|
4. **二元状态**：保险箱要么被解锁并可见，要么是磁盘上一堆加密的碎片。
|