@the-ai-company/cbio-node-runtime 1.48.6 → 1.49.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +40 -25
- package/dist/clients/agent/client.d.ts +8 -6
- package/dist/clients/agent/client.js +67 -49
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/agent/contracts.d.ts +13 -1
- package/dist/clients/agent/index.d.ts +1 -1
- package/dist/clients/owner/client.d.ts +20 -14
- package/dist/clients/owner/client.js +136 -51
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +58 -26
- package/dist/clients/owner/index.d.ts +1 -1
- package/dist/runtime/index.d.ts +4 -3
- package/dist/runtime/index.js +5 -1
- package/dist/runtime/index.js.map +1 -1
- package/dist/vault-core/contracts.d.ts +90 -3
- package/dist/vault-core/contracts.js +3 -0
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +44 -25
- package/dist/vault-core/core.js +290 -73
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.d.ts +9 -1
- package/dist/vault-core/defaults.js +39 -6
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/index.d.ts +3 -3
- package/dist/vault-core/index.js +1 -1
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-core/persistence.d.ts +1 -0
- package/dist/vault-core/persistence.js +7 -1
- package/dist/vault-core/persistence.js.map +1 -1
- package/dist/vault-core/ports.d.ts +8 -0
- package/dist/vault-ingress/defaults.d.ts +4 -1
- package/dist/vault-ingress/defaults.js +12 -3
- package/dist/vault-ingress/defaults.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +137 -21
- package/dist/vault-ingress/index.js +156 -46
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.d.ts +7 -2
- package/dist/vault-ingress/remote-transport.js +61 -3
- package/dist/vault-ingress/remote-transport.js.map +1 -1
- package/dist/vault-ingress/server-utils.d.ts +2 -1
- package/dist/vault-ingress/server-utils.js +42 -1
- package/dist/vault-ingress/server-utils.js.map +1 -1
- package/docs/REFERENCE.md +46 -17
- package/docs/api/README.md +10 -3
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/VaultCore.md +258 -102
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
- package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +21 -0
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +41 -5
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +51 -3
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +41 -0
- package/docs/api/interfaces/CbioRuntime.md +21 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +3 -9
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -1
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +17 -0
- package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +1 -1
- package/docs/api/interfaces/OwnerSecretTargetBinding.md +1 -1
- package/docs/api/interfaces/OwnerStoreSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerWriteSecretInput.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +23 -0
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +123 -33
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultDeleteSecretInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +13 -19
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/{VaultRegisterAgentInput.md → VaultImportAgentInput.md} +4 -10
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultListSecretsInput.md +11 -0
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +79 -0
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
- package/docs/api/type-aliases/AgentVisibleSecretRecord.md +7 -0
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/examples/process-isolation.ts +24 -15
- package/package.json +1 -1
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Function: handleVaultAgentControlHttp()
|
|
6
|
+
|
|
7
|
+
> **handleVaultAgentControlHttp**(`service`, `body`): `Promise`\<`VaultAgentControlResponse` \| `VaultAgentControlErrorResponse`\>
|
|
8
|
+
|
|
9
|
+
## Parameters
|
|
10
|
+
|
|
11
|
+
### service
|
|
12
|
+
|
|
13
|
+
`VaultService`
|
|
14
|
+
|
|
15
|
+
### body
|
|
16
|
+
|
|
17
|
+
`unknown`
|
|
18
|
+
|
|
19
|
+
## Returns
|
|
20
|
+
|
|
21
|
+
`Promise`\<`VaultAgentControlResponse` \| `VaultAgentControlErrorResponse`\>
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -9,11 +9,11 @@ This client uses a delegated capability granted by the owner.
|
|
|
9
9
|
|
|
10
10
|
## Methods
|
|
11
11
|
|
|
12
|
-
###
|
|
12
|
+
### agentDispatch()
|
|
13
13
|
|
|
14
|
-
> **
|
|
14
|
+
> **agentDispatch**(`intent`): `Promise`\<`DispatchResult`\>
|
|
15
15
|
|
|
16
|
-
Dispatches a
|
|
16
|
+
Dispatches a session-token-authenticated request to a target using a vault secret.
|
|
17
17
|
|
|
18
18
|
#### Parameters
|
|
19
19
|
|
|
@@ -32,10 +32,46 @@ The result of the remote operation.
|
|
|
32
32
|
#### Example
|
|
33
33
|
|
|
34
34
|
```ts
|
|
35
|
-
const result = await agent.
|
|
35
|
+
const result = await agent.agentDispatch({
|
|
36
36
|
targetUrl: 'https://api.example.com/data',
|
|
37
37
|
method: 'POST',
|
|
38
38
|
secretAlias: 'api-token',
|
|
39
39
|
body: JSON.stringify({ key: 'value' })
|
|
40
40
|
});
|
|
41
41
|
```
|
|
42
|
+
|
|
43
|
+
***
|
|
44
|
+
|
|
45
|
+
### agentListCapabilities()
|
|
46
|
+
|
|
47
|
+
> **agentListCapabilities**(): `Promise`\<readonly `AgentCapability`[]\>
|
|
48
|
+
|
|
49
|
+
#### Returns
|
|
50
|
+
|
|
51
|
+
`Promise`\<readonly `AgentCapability`[]\>
|
|
52
|
+
|
|
53
|
+
***
|
|
54
|
+
|
|
55
|
+
### agentListSecrets()
|
|
56
|
+
|
|
57
|
+
> **agentListSecrets**(): `Promise`\<readonly `AgentVisibleSecretRecord`[]\>
|
|
58
|
+
|
|
59
|
+
#### Returns
|
|
60
|
+
|
|
61
|
+
`Promise`\<readonly `AgentVisibleSecretRecord`[]\>
|
|
62
|
+
|
|
63
|
+
***
|
|
64
|
+
|
|
65
|
+
### agentSubmitCapabilityRequest()
|
|
66
|
+
|
|
67
|
+
> **agentSubmitCapabilityRequest**(`input`): `Promise`\<`PendingCapabilityRequestRecord`\>
|
|
68
|
+
|
|
69
|
+
#### Parameters
|
|
70
|
+
|
|
71
|
+
##### input
|
|
72
|
+
|
|
73
|
+
[`AgentSubmitCapabilityRequestInput`](AgentSubmitCapabilityRequestInput.md)
|
|
74
|
+
|
|
75
|
+
#### Returns
|
|
76
|
+
|
|
77
|
+
`Promise`\<`PendingCapabilityRequestRecord`\>
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -6,9 +6,9 @@
|
|
|
6
6
|
|
|
7
7
|
## Methods
|
|
8
8
|
|
|
9
|
-
###
|
|
9
|
+
### agentDispatch()
|
|
10
10
|
|
|
11
|
-
> **
|
|
11
|
+
> **agentDispatch**(`request`): `Promise`\<`DispatchResult`\>
|
|
12
12
|
|
|
13
13
|
#### Parameters
|
|
14
14
|
|
|
@@ -19,3 +19,51 @@
|
|
|
19
19
|
#### Returns
|
|
20
20
|
|
|
21
21
|
`Promise`\<`DispatchResult`\>
|
|
22
|
+
|
|
23
|
+
***
|
|
24
|
+
|
|
25
|
+
### agentListCapabilities()
|
|
26
|
+
|
|
27
|
+
> **agentListCapabilities**(`request`): `Promise`\<readonly `AgentCapability`[]\>
|
|
28
|
+
|
|
29
|
+
#### Parameters
|
|
30
|
+
|
|
31
|
+
##### request
|
|
32
|
+
|
|
33
|
+
`AgentListCapabilitiesRequest`
|
|
34
|
+
|
|
35
|
+
#### Returns
|
|
36
|
+
|
|
37
|
+
`Promise`\<readonly `AgentCapability`[]\>
|
|
38
|
+
|
|
39
|
+
***
|
|
40
|
+
|
|
41
|
+
### agentListSecrets()
|
|
42
|
+
|
|
43
|
+
> **agentListSecrets**(`request`): `Promise`\<readonly `AgentVisibleSecretRecord`[]\>
|
|
44
|
+
|
|
45
|
+
#### Parameters
|
|
46
|
+
|
|
47
|
+
##### request
|
|
48
|
+
|
|
49
|
+
`AgentListSecretsRequest`
|
|
50
|
+
|
|
51
|
+
#### Returns
|
|
52
|
+
|
|
53
|
+
`Promise`\<readonly `AgentVisibleSecretRecord`[]\>
|
|
54
|
+
|
|
55
|
+
***
|
|
56
|
+
|
|
57
|
+
### agentSubmitCapabilityRequest()
|
|
58
|
+
|
|
59
|
+
> **agentSubmitCapabilityRequest**(`request`): `Promise`\<`PendingCapabilityRequestRecord`\>
|
|
60
|
+
|
|
61
|
+
#### Parameters
|
|
62
|
+
|
|
63
|
+
##### request
|
|
64
|
+
|
|
65
|
+
`AgentSubmitCapabilityRequestCommand`
|
|
66
|
+
|
|
67
|
+
#### Returns
|
|
68
|
+
|
|
69
|
+
`Promise`\<`PendingCapabilityRequestRecord`\>
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: AgentSubmitCapabilityRequestInput
|
|
6
|
+
|
|
7
|
+
## Properties
|
|
8
|
+
|
|
9
|
+
### justification?
|
|
10
|
+
|
|
11
|
+
> `optional` **justification?**: `string`
|
|
12
|
+
|
|
13
|
+
***
|
|
14
|
+
|
|
15
|
+
### methods
|
|
16
|
+
|
|
17
|
+
> **methods**: readonly `string`[]
|
|
18
|
+
|
|
19
|
+
***
|
|
20
|
+
|
|
21
|
+
### operation?
|
|
22
|
+
|
|
23
|
+
> `optional` **operation?**: `"dispatch_http"` \| `"custom_http"`
|
|
24
|
+
|
|
25
|
+
***
|
|
26
|
+
|
|
27
|
+
### requestedAt?
|
|
28
|
+
|
|
29
|
+
> `optional` **requestedAt?**: `string`
|
|
30
|
+
|
|
31
|
+
***
|
|
32
|
+
|
|
33
|
+
### scope
|
|
34
|
+
|
|
35
|
+
> **scope**: `string`
|
|
36
|
+
|
|
37
|
+
***
|
|
38
|
+
|
|
39
|
+
### secretAliases?
|
|
40
|
+
|
|
41
|
+
> `optional` **secretAliases?**: readonly `string`[]
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -324,6 +324,26 @@ Using scrypt for memory-hard key derivation to resist brute-force attacks.
|
|
|
324
324
|
|
|
325
325
|
***
|
|
326
326
|
|
|
327
|
+
### handleVaultAgentControlHttp
|
|
328
|
+
|
|
329
|
+
> **handleVaultAgentControlHttp**: (`service`, `body`) => `Promise`\<`VaultAgentControlResponse` \| `VaultAgentControlErrorResponse`\>
|
|
330
|
+
|
|
331
|
+
#### Parameters
|
|
332
|
+
|
|
333
|
+
##### service
|
|
334
|
+
|
|
335
|
+
`VaultService`
|
|
336
|
+
|
|
337
|
+
##### body
|
|
338
|
+
|
|
339
|
+
`unknown`
|
|
340
|
+
|
|
341
|
+
#### Returns
|
|
342
|
+
|
|
343
|
+
`Promise`\<`VaultAgentControlResponse` \| `VaultAgentControlErrorResponse`\>
|
|
344
|
+
|
|
345
|
+
***
|
|
346
|
+
|
|
327
347
|
### handleVaultHttpDispatch
|
|
328
348
|
|
|
329
349
|
> **handleVaultHttpDispatch**: (`service`, `body`) => `Promise`\<`VaultAgentDispatchResponse` \| `VaultAgentDispatchErrorResponse`\>
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -24,15 +24,9 @@
|
|
|
24
24
|
|
|
25
25
|
***
|
|
26
26
|
|
|
27
|
-
###
|
|
27
|
+
### token
|
|
28
28
|
|
|
29
|
-
>
|
|
30
|
-
|
|
31
|
-
***
|
|
32
|
-
|
|
33
|
-
### token?
|
|
34
|
-
|
|
35
|
-
> `optional` **token?**: `string`
|
|
29
|
+
> **token**: `string`
|
|
36
30
|
|
|
37
31
|
***
|
|
38
32
|
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: OwnerAgentProvisionResult
|
|
6
|
+
|
|
7
|
+
## Properties
|
|
8
|
+
|
|
9
|
+
### agent
|
|
10
|
+
|
|
11
|
+
> **agent**: `AgentIdentityRecord`
|
|
12
|
+
|
|
13
|
+
***
|
|
14
|
+
|
|
15
|
+
### sessionToken
|
|
16
|
+
|
|
17
|
+
> **sessionToken**: `OwnerSessionToken`
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.49.0**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Interface: VaultApproveCapabilityRequestInput
|
|
6
|
+
|
|
7
|
+
## Properties
|
|
8
|
+
|
|
9
|
+
### capabilityId?
|
|
10
|
+
|
|
11
|
+
> `optional` **capabilityId?**: `string`
|
|
12
|
+
|
|
13
|
+
***
|
|
14
|
+
|
|
15
|
+
### requestedAt?
|
|
16
|
+
|
|
17
|
+
> `optional` **requestedAt?**: `string`
|
|
18
|
+
|
|
19
|
+
***
|
|
20
|
+
|
|
21
|
+
### requestId
|
|
22
|
+
|
|
23
|
+
> **requestId**: `string`
|