@the-ai-company/cbio-node-runtime 1.55.1 → 1.57.0

package/docs/api/interfaces/VaultClient.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 
@@ -9,90 +9,90 @@ In Sovereign Vault model, administrative actions are implicitly authorized by th
 
 ## Methods
 
-### ownerApproveCapabilityRequest()
+### ownerCreateAgent()
+
+> **ownerCreateAgent**(`input`): `Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
 
-> **ownerApproveCapabilityRequest**(`input`): `Promise`\<`AgentCapability`\>
+Generates a new identity and registers it as an agent in one step.
+The private key is stored in the vault for managed custody.
 
 #### Parameters
 
 ##### input
 
-[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
+[`VaultCreateAgentInput`](VaultCreateAgentInput.md)
 
 #### Returns
 
-`Promise`\<`AgentCapability`\>
+`Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
 
 ***
 
-### ownerApproveDispatch()
+### ownerDefineSecretTargets()
+
+> **ownerDefineSecretTargets**(`input`): `Promise`\<`SecretRecord`\>
 
-> **ownerApproveDispatch**(`input`): `Promise`\<`DispatchResult`\>
+Refines the allowed targets for an existing secret.
 
 #### Parameters
 
 ##### input
 
-[`VaultApproveDispatchInput`](VaultApproveDispatchInput.md)
+[`OwnerDefineSecretTargetsInput`](OwnerDefineSecretTargetsInput.md)
 
 #### Returns
 
-`Promise`\<`DispatchResult`\>
+`Promise`\<`SecretRecord`\>
 
 ***
 
-### ownerCreateAgent()
+### ownerDeleteSecret()
 
-> **ownerCreateAgent**(`input`): `Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
+> **ownerDeleteSecret**(`input`): `Promise`\<`void`\>
 
-Generates a new identity and registers it as an agent in one step.
-The private key is stored in the vault for managed custody.
+Permanently deletes a secret from the vault.
 
 #### Parameters
 
 ##### input
 
-[`VaultCreateAgentInput`](VaultCreateAgentInput.md)
+[`VaultDeleteSecretInput`](VaultDeleteSecretInput.md)
 
 #### Returns
 
-`Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
+`Promise`\<`void`\>
 
 ***
 
-### ownerDefineSecretTargets()
+### ownerExecuteCapabilityStateAndGrant()
 
-> **ownerDefineSecretTargets**(`input`): `Promise`\<`SecretRecord`\>
-
-Refines the allowed targets for an existing secret.
+> **ownerExecuteCapabilityStateAndGrant**(`input`): `Promise`\<`DispatchResult`\>
 
 #### Parameters
 
 ##### input
 
-[`OwnerDefineSecretTargetsInput`](OwnerDefineSecretTargetsInput.md)
+[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
 
 #### Returns
 
-`Promise`\<`SecretRecord`\>
+`Promise`\<`DispatchResult`\>
 
 ***
 
-### ownerDeleteSecret()
-
-> **ownerDeleteSecret**(`input`): `Promise`\<`void`\>
+### ownerExecuteCapabilityStateOnce()
 
-Permanently deletes a secret from the vault.
+> **ownerExecuteCapabilityStateOnce**(`input`): `Promise`\<`DispatchResult`\>
 
 #### Parameters
 
 ##### input
 
-[`VaultDeleteSecretInput`](VaultDeleteSecretInput.md)
+[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
 
 #### Returns
 
-`Promise`\<`void`\>
+`Promise`\<`DispatchResult`\>
 
 ***
 
@@ -124,7 +124,7 @@ Grants a specific capability to an agent.
 
 ##### input
 
-[`VaultGrantCapabilityInput`](VaultGrantCapabilityInput.md)
+[`OwnerGrantCapabilityInput`](../type-aliases/OwnerGrantCapabilityInput.md)
 
 #### Returns
 
@@ -210,23 +210,19 @@ Lists all active capabilities granted to agents.
 
 ***
 
-### ownerListPendingCapabilityRequests()
-
-> **ownerListPendingCapabilityRequests**(): `Promise`\<readonly `PendingCapabilityRequestRecord`[]\>
+### ownerListCapabilityStates()
 
-#### Returns
-
-`Promise`\<readonly `PendingCapabilityRequestRecord`[]\>
+> **ownerListCapabilityStates**(`input?`): `Promise`\<readonly `CapabilityStateRecord`[]\>
 
-***
+#### Parameters
 
-### ownerListPendingDispatches()
+##### input?
 
-> **ownerListPendingDispatches**(): `Promise`\<readonly `PendingDispatchRecord`[]\>
+`VaultListCapabilityStatesInput`
 
 #### Returns
 
-`Promise`\<readonly `PendingDispatchRecord`[]\>
+`Promise`\<readonly `CapabilityStateRecord`[]\>
 
 ***
 
@@ -246,25 +242,9 @@ Lists all active capabilities granted to agents.
 
 ***
 
-### ownerOnPendingCapabilityRequest()
+### ownerOnCapabilityState()
 
-> **ownerOnPendingCapabilityRequest**(`callback`): () => `void`
-
-#### Parameters
-
-##### callback
-
-(`record`) => `void`
-
-#### Returns
-
-() => `void`
-
-***
-
-### ownerOnPendingDispatch()
-
-> **ownerOnPendingDispatch**(`callback`): () => `void`
+> **ownerOnCapabilityState**(`callback`): () => `void`
 
 #### Parameters
 
@@ -346,9 +326,9 @@ Registers a custom HTTP flow for complex secret usage.
 
 ***
 
-### ownerRejectCapabilityRequest()
+### ownerRejectCapabilityState()
 
-> **ownerRejectCapabilityRequest**(`requestId`): `Promise`\<`void`\>
+> **ownerRejectCapabilityState**(`requestId`): `Promise`\<`CapabilityStateRecord`\>
 
 #### Parameters
 
@@ -358,23 +338,7 @@ Registers a custom HTTP flow for complex secret usage.
 
 #### Returns
 
-`Promise`\<`void`\>
-
-***
-
-### ownerRejectDispatch()
-
-> **ownerRejectDispatch**(`requestId`): `Promise`\<`void`\>
-
-#### Parameters
-
-##### requestId
-
-`string`
-
-#### Returns
-
-`Promise`\<`void`\>
+`Promise`\<`CapabilityStateRecord`\>
 
 ***
 
@@ -432,7 +396,7 @@ Securely stores a new secret in the vault.
 
 ### ownerSubmitCapabilityRequest()
 
-> **ownerSubmitCapabilityRequest**(`input`): `Promise`\<`PendingCapabilityRequestRecord`\>
+> **ownerSubmitCapabilityRequest**(`input`): `Promise`\<`CapabilityStateRecord`\>
 
 #### Parameters
 
@@ -442,7 +406,7 @@ Securely stores a new secret in the vault.
 
 #### Returns
 
-`Promise`\<`PendingCapabilityRequestRecord`\>
+`Promise`\<`CapabilityStateRecord`\>
 
 ***
 

package/docs/api/interfaces/VaultCoreDependenciesOptions.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultCreateAgentInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultDeleteSecretInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultExportSecretInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultGrantCapabilityInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 
@@ -12,6 +12,24 @@
 
 ***
 
+### auditRequired?
+
+> `optional` **auditRequired?**: `boolean`
+
+***
+
+### customFlowId?
+
+> `optional` **customFlowId?**: `string`
+
+***
+
+### expiresAt?
+
+> `optional` **expiresAt?**: `string`
+
+***
+
 ### expiresIn?
 
 > `optional` **expiresIn?**: `number`
@@ -62,6 +80,12 @@
 
 ***
 
+### secretIds?
+
+> `optional` **secretIds?**: readonly `string`[]
+
+***
+
 ### skipAudit?
 
 > `optional` **skipAudit?**: `boolean`

package/docs/api/interfaces/VaultGrantCapabilityRequest.md

@@ -0,0 +1,23 @@
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
+
+***
+
+# Interface: VaultGrantCapabilityRequest
+
+## Properties
+
+### capability
+
+> **capability**: `AgentCapability` & `object`
+
+#### Type Declaration
+
+##### auditRequired?
+
+> `optional` **auditRequired?**: `boolean`
+
+***
+
+### requestedAt?
+
+> `optional` **requestedAt?**: `string`

package/docs/api/interfaces/VaultIdentity.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultImportAgentInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultIssueSessionTokenInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultListAgentsInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultListCapabilitiesInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultListSecretsInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultMetadata.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultObject.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultProfile.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultReadSecretPlaintextInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultRegisterFlowInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultRevokeCapabilityInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultRevokeSessionTokenInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultSigner.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/interfaces/VaultUpdateAgentInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/AgentCapabilityEnvelope.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/AgentVisibleSecretRecord.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/CbioRuntimeModule.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/OwnerGrantCapabilityInput.md

@@ -0,0 +1,7 @@
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
+
+***
+
+# Type Alias: OwnerGrantCapabilityInput
+
+> **OwnerGrantCapabilityInput** = [`VaultGrantCapabilityInput`](../interfaces/VaultGrantCapabilityInput.md) \| [`VaultGrantCapabilityRequest`](../interfaces/VaultGrantCapabilityRequest.md)

package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.55.1**](../README.md)
+[**CBIO Node Runtime Agent API v1.57.0**](../README.md)
 
 ***
 

package/docs/es/README.md

@@ -18,14 +18,11 @@ npm install @the-ai-company/cbio-node-runtime
 
 ```ts
 import {
-  createVaultService,
   createIdentity,
-  readIdentityMetadata,
-   createVault,
-  listIdentities,
+  createVault,
   listVaults,
   recoverVault,
-  LocalVaultTransport,
+  createOwnerSession,
   createVaultClient,
   createAgentClient,
   FsStorageProvider,
@@ -41,10 +38,10 @@ import {
 
 Ruta principal recomendada para vault persistente:
 
-- crear el vault persistente con `createVault(...)` (soporta `publicMetadata` para el descubrimiento de información pública)
-- recuperar el vault persistente con `recoverVault(...)` usando la identidad del owner
-- Capas de almacenamiento divididas: `vaults/` (Bóvedas con nombre) e `identities/` (Espacio de identidad personal)
-    - Todos los metadatos públicos (como el apodo) ahora siguen la interfaz `VaultPublicMetadata` e incluyen una **firma digital**, la cual el SDK verifica automáticamente.
+- crear el vault persistente con `createVault(...)`
+- recuperar el vault persistente con `recoverVault(...)` usando `vaultId` + `password`
+- para GUIs o procesos de larga duración, conservar `createOwnerSession(...)` en lugar de cachear un `createVaultClient(...)` crudo
+- usar `createVaultClient(...)` solo para scripts breves o tareas puntuales en el runtime actual
 
 La API antigua centrada en `CbioIdentity` ya no es la superficie principal del producto.
 

package/docs/fr/README.md

@@ -18,14 +18,11 @@ npm install @the-ai-company/cbio-node-runtime
 
 ```ts
 import {
-  createVaultService,
   createIdentity,
-  readIdentityMetadata,
-   createVault,
-  listIdentities,
+  createVault,
   listVaults,
   recoverVault,
-  LocalVaultTransport,
+  createOwnerSession,
   createVaultClient,
   createAgentClient,
   FsStorageProvider,
@@ -41,11 +38,10 @@ import {
 
 Chemin principal recommande pour un vault persistant :
 
-- créer le coffre persistant avec `createVault(...)` (prend en charge `publicMetadata` pour la découverte d'informations publiques)
-- restaurer le coffre persistant avec `recoverVault(...)` via l'identité de l'owner
-- Couches de stockage divisées : `vaults/` (Coffres nommés) et `identities/` (Espace d'identité personnel)
-- **Découverte Vérifiable (Verifiable Discovery)** :
-    - Toutes les métadonnées publiques (comme le pseudo) suivent désormais l'interface `VaultPublicMetadata` et incluent une **signature numérique** que le SDK vérifie automatiquement.
+- créer le coffre persistant avec `createVault(...)`
+- restaurer le coffre persistant avec `recoverVault(...)` via `vaultId` + `password`
+- pour les GUIs ou processus longs, conserver `createOwnerSession(...)` plutôt qu'un `createVaultClient(...)` brut en cache
+- réserver `createVaultClient(...)` aux scripts courts ou aux tâches ponctuelles dans le runtime courant
 
 L'ancienne API centree sur `CbioIdentity` n'est plus la surface principale du produit.
 

package/docs/ja/README.md

@@ -18,14 +18,11 @@ npm install @the-ai-company/cbio-node-runtime
 
 ```ts
 import {
-  createVaultService,
   createIdentity,
-  readIdentityMetadata,
-   createVault,
-  listIdentities,
+  createVault,
   listVaults,
   recoverVault,
-  LocalVaultTransport,
+  createOwnerSession,
   createVaultClient,
   createAgentClient,
   FsStorageProvider,
@@ -41,10 +38,10 @@ import {
 
 推奨される persistent-vault の主経路:
 
-- `createVault(...)` で persistent vault を作成する (`publicMetadata` による公開情報のディスカバリをサポート)
-- `recoverVault(...)` で owner identity を使って persistent vault を復旧する
-- 分離されたストレージ層: `vaults/` (具名 Vault) と `identities/` (個人 ID スペース)
-    - ニックネームなどのすべての公開メタデータは `VaultPublicMetadata` インターフェースに従い、**電子署名** が付与されています。SDK がその正当性を自動的に検証します。
+- `createVault(...)` で persistent vault を作成する
+- `recoverVault(...)` で `vaultId` と `password` を使って persistent vault を復旧する
+- GUI や長寿命プロセスでは、生の `createVaultClient(...)` をキャッシュせず `createOwnerSession(...)` を保持する
+- `createVaultClient(...)` は短命スクリプトやその runtime 限定の単発処理に使う
 
 旧 `CbioIdentity` 中心 API は、もはや主要な公開面ではありません。
 

package/docs/ko/README.md

@@ -18,14 +18,11 @@ npm install @the-ai-company/cbio-node-runtime
 
 ```ts
 import {
-  createVaultService,
   createIdentity,
-  readIdentityMetadata,
-   createVault,
-  listIdentities,
+  createVault,
   listVaults,
   recoverVault,
-  LocalVaultTransport,
+  createOwnerSession,
   createVaultClient,
   createAgentClient,
   FsStorageProvider,
@@ -41,10 +38,10 @@ import {
 
 권장되는 persistent-vault 주 경로:
 
-- `createVault(...)` 로 persistent vault 를 생성합니다 (`publicMetadata` 를 통한 공개 정보 검색 지원)
-- `recoverVault(...)` 로 owner identity 를 사용해 persistent vault 를 복구합니다
-- 분리된 스토리지 계층: `vaults/` (기명 Vault) 및 `identities/` (개인 ID 공간)
-    - 닉네임과 같은 모든 공개 메타데이터는 `VaultPublicMetadata` 인터페이스를 따르며, **디지털 서명**이 포함되어 있어 SDK가 그 정당성을 자동으로 검증합니다.
+- `createVault(...)` 로 persistent vault 를 생성합니다
+- `recoverVault(...)` 로 `vaultId` 와 `password` 를 사용해 persistent vault 를 복구합니다
+- GUI 나 장수명 프로세스에서는 raw `createVaultClient(...)` 를 캐시하지 말고 `createOwnerSession(...)` 을 유지합니다
+- `createVaultClient(...)` 는 현재 runtime 안의 짧은 스크립트나 일회성 작업에 사용합니다
 
 이전 `CbioIdentity` 중심 API 는 더 이상 주요 제품 표면이 아닙니다.
 

package/docs/pt/README.md

@@ -18,14 +18,11 @@ npm install @the-ai-company/cbio-node-runtime
 
 ```ts
 import {
-  createVaultService,
   createIdentity,
-  readIdentityMetadata,
-   createVault,
-  listIdentities,
+  createVault,
   listVaults,
   recoverVault,
-  LocalVaultTransport,
+  createOwnerSession,
   createVaultClient,
   createAgentClient,
   FsStorageProvider,
@@ -41,10 +38,10 @@ import {
 
 Caminho principal recomendado para vault persistente:
 
-- criar o cofre persistente com `createVault(...)` (suporta `publicMetadata` para a descoberta de informações públicas)
-- recuperar o cofre persistente com `recoverVault(...)` usando a identidade do owner
-- Camadas de armazenamento divididas: `vaults/` (Cofres nomeados) e `identities/` (Espaço de identidade pessoal)
-    - Todos os metadados públicos (como o apelido) agora seguem a interface `VaultPublicMetadata` e incluem uma **assinatura digital**, que o SDK verifica automaticamente.
+- criar o cofre persistente com `createVault(...)`
+- recuperar o cofre persistente com `recoverVault(...)` usando `vaultId` + `password`
+- para GUIs ou processos longos, manter `createOwnerSession(...)` em vez de cachear um `createVaultClient(...)` bruto
+- usar `createVaultClient(...)` apenas para scripts curtos ou tarefas pontuais no runtime atual
 
 A antiga API centrada em `CbioIdentity` nao e mais a superficie principal do produto.