@the-ai-company/cbio-node-runtime 1.53.0 → 1.55.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -2
- package/dist/clients/agent/client.js +5 -4
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/owner/client.js +23 -26
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/internal/id-factory.d.ts +8 -0
- package/dist/internal/id-factory.js +37 -0
- package/dist/internal/id-factory.js.map +1 -0
- package/dist/runtime/bootstrap.d.ts +0 -1
- package/dist/runtime/bootstrap.js +31 -4
- package/dist/runtime/bootstrap.js.map +1 -1
- package/dist/runtime/vault-metadata.js +1 -1
- package/dist/runtime/vault-metadata.js.map +1 -1
- package/dist/vault-core/core.js +4 -4
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.d.ts +4 -0
- package/dist/vault-core/defaults.js +16 -3
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/persistence.d.ts +1 -1
- package/dist/vault-core/persistence.js +12 -12
- package/dist/vault-core/persistence.js.map +1 -1
- package/dist/vault-core/ports.d.ts +4 -0
- package/docs/ARCHITECTURE.md +11 -7
- package/docs/MIGRATION-1.51.md +16 -0
- package/docs/REFERENCE.md +10 -5
- package/docs/api/README.md +2 -2
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/OwnerClientError.md +1 -1
- package/docs/api/classes/VaultCore.md +1 -1
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
- package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +1 -1
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +1 -1
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +1 -1
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/CbioRuntime.md +1 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -7
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +1 -1
- package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +1 -1
- package/docs/api/interfaces/OwnerSecretTargetBinding.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
- package/docs/api/interfaces/OwnerStoreSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerWriteSecretInput.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/VaultApproveDispatchInput.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +1 -1
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultDeleteSecretInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
- package/docs/api/interfaces/VaultIssueSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +1 -1
- package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/VaultUpdateAgentInput.md +1 -1
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
- package/docs/api/type-aliases/AgentVisibleSecretRecord.md +1 -1
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +2 -2
- package/examples/process-isolation.ts +0 -1
- package/package.json +1 -1
package/docs/REFERENCE.md
CHANGED
|
@@ -19,10 +19,11 @@ The v1.48.4 runtime centers on a simplified, authority-centric model with manage
|
|
|
19
19
|
|
|
20
20
|
### Vault Lifecycle
|
|
21
21
|
|
|
22
|
-
#### `createVault(storage, {
|
|
22
|
+
#### `createVault(storage, { password, nickname, metadata })`
|
|
23
23
|
Creates a secure vault.
|
|
24
24
|
- **Authority**: Rooted in the `password`.
|
|
25
25
|
- **Storage**: All data is encrypted using a key derived from the password via `scrypt`.
|
|
26
|
+
- **Vault ID**: Generated internally by the runtime.
|
|
26
27
|
|
|
27
28
|
#### `recoverVault(storage, { vaultId, password })`
|
|
28
29
|
Unlocks and reopens a vault.
|
|
@@ -172,10 +173,14 @@ The proactive request flow does not replace dispatch discovery. It is an additio
|
|
|
172
173
|
## Storage Layout
|
|
173
174
|
|
|
174
175
|
The vault uses a unified encrypted partition:
|
|
175
|
-
- `
|
|
176
|
-
- `
|
|
177
|
-
- `
|
|
178
|
-
- `
|
|
176
|
+
- `vaults/<vaultId>_v1/profile.sealed`: Unified vault profile.
|
|
177
|
+
- `vaults/<vaultId>_v1/secrets.sealed`: Secret registry.
|
|
178
|
+
- `vaults/<vaultId>_v1/agents.sealed`: Agent identity registry.
|
|
179
|
+
- `vaults/<vaultId>_v1/capabilities.sealed`: Capability registry.
|
|
180
|
+
- `vaults/<vaultId>_v1/custom-flows.sealed`: Custom flow registry.
|
|
181
|
+
- `vaults/<vaultId>_v1/audit.jsonl`: Tamper-evident audit log.
|
|
182
|
+
- `vaults/<vaultId>_v1/working-key.sealed`: Sealed working-key custody blob.
|
|
183
|
+
- `vaults/<vaultId>_v1/secret-<secretId>.sealed`: Encrypted secret material.
|
|
179
184
|
|
|
180
185
|
## Build & Integration
|
|
181
186
|
|
package/docs/api/README.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.55.0**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -199,9 +199,3 @@
|
|
|
199
199
|
###### Returns
|
|
200
200
|
|
|
201
201
|
`Promise`\<`Response`\>
|
|
202
|
-
|
|
203
|
-
***
|
|
204
|
-
|
|
205
|
-
### vaultId?
|
|
206
|
-
|
|
207
|
-
> `optional` **vaultId?**: `string`
|