@the-ai-company/cbio-node-runtime 1.56.0 → 1.58.0

package/docs/api/type-aliases/AgentVisibleSecretRecord.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.56.0**](../README.md)
+[**CBIO Node Runtime Agent API v1.58.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/CbioRuntimeModule.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.56.0**](../README.md)
+[**CBIO Node Runtime Agent API v1.58.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/OwnerGrantCapabilityInput.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.56.0**](../README.md)
+[**CBIO Node Runtime Agent API v1.58.0**](../README.md)
 
 ***
 

package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.56.0**](../README.md)
+[**CBIO Node Runtime Agent API v1.58.0**](../README.md)
 
 ***
 

package/docs/zh/README.md

@@ -96,13 +96,7 @@ const sessionToken = createdAgent.sessionToken;
 ```ts
 const record = await client.ownerWriteSecret({
   alias: 'api-token',
-  plaintext: 'secret-value',
-  targetBindings: [{
-    kind: 'site',
-    targetId: 'my-api',
-    targetUrl: 'https://api.example.com/endpoint',
-    methods: ['POST']
-  }]
+  plaintext: 'secret-value'
 });
 
 await client.ownerGrantCapability({
@@ -130,9 +124,20 @@ const result = await agent.agentDispatch({ ... });
 
 Agent 进程不会直接使用原始私钥执行请求。即使 Agent 拥有身份材料，也应先换取 session token，再进行 dispatch。
 
+```ts
+const manifest = await agent.agentIntrospect();
+
+console.log(manifest.agent.agentId);
+console.log(manifest.agent.identityId);
+console.log(manifest.agent.nickname);
+console.log(manifest.capabilities); // 同一张能力状态表里同时包含 GRANTED 和 PENDING
+```
+
+`agentListCapabilities()` 现在返回的也是同一张统一能力状态表，因此调度器或 Agent 重启后，不需要分别拼“已授权能力”和“待审批能力”。
+
 ### 7. 人机协同（HITL）工作流
 
-系统采用 **“发现优先（Discovery-first）”** 模型。如果 Agent 尝试执行的动作不在白名单内，dispatch 会自动进入 `PENDING`，等待 Owner 审批。
+系统采用统一的 **能力状态（capability state）** 模型。如果 Agent 尝试执行的动作不在白名单内，dispatch 会返回 `PENDING`，同时运行时会写入一条 `PENDING` 能力状态，等待 Owner 审批。
 
 ```ts
 const result = await agent.agentDispatch({ ... });
@@ -140,15 +145,16 @@ if (result.status === 'PENDING') {
   console.log('触发发现流程：等待所有者审批...');
 }
 
-client.ownerOnPendingDispatch((req) => {
-  console.log('收到新请求:', req.requestId);
+client.ownerOnCapabilityState((state) => {
+  if (state.status === 'PENDING') {
+    console.log('收到新的待审批能力状态:', state.requestId);
+  }
 });
 
-const pending = await client.ownerListPendingDispatches();
+const pending = await client.ownerListCapabilityStates({ status: 'PENDING' });
 if (pending.length > 0) {
-  await client.ownerApproveDispatch({
-    requestId: pending[0].requestId,
-    permanent: true
+  await client.ownerExecuteCapabilityStateAndGrant({
+    requestId: pending[0].requestId
   });
 }
 ```

package/examples/process-isolation.ts

@@ -120,7 +120,7 @@ async function main() {
     owner: { kind: "owner", id: ownerIdentity.identityId },
     alias: "api-token",
     plaintext: "SK-PROD-12345",
-    targetBindings: [{ kind: "site", targetId: "httpbin.org", targetUrl: "https://httpbin.org/post", methods: ["POST"] }],
+    source: { kind: "manual" },
     requestedAt: new Date().toISOString(),
   });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-ai-company/cbio-node-runtime",
-  "version": "1.56.0",
+  "version": "1.58.0",
   "publishConfig": {
     "access": "public"
   },

package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md

@@ -1,23 +0,0 @@
-[**CBIO Node Runtime Agent API v1.56.0**](../README.md)
-
-***
-
-# Interface: OwnerDefineSecretTargetsInput
-
-## Properties
-
-### alias
-
-> **alias**: `string`
-
-***
-
-### requestedAt?
-
-> `optional` **requestedAt?**: `string`
-
-***
-
-### targetBindings
-
-> **targetBindings**: readonly [`OwnerSecretTargetBinding`](OwnerSecretTargetBinding.md)[]

package/docs/api/interfaces/OwnerSecretTargetBinding.md

@@ -1,35 +0,0 @@
-[**CBIO Node Runtime Agent API v1.56.0**](../README.md)
-
-***
-
-# Interface: OwnerSecretTargetBinding
-
-## Properties
-
-### kind
-
-> **kind**: `"owner"` \| `"site"`
-
-***
-
-### methods?
-
-> `optional` **methods?**: readonly `string`[]
-
-***
-
-### paths?
-
-> `optional` **paths?**: readonly `string`[]
-
-***
-
-### targetId
-
-> **targetId**: `string`
-
-***
-
-### targetUrl?
-
-> `optional` **targetUrl?**: `string`