@the-ai-company/cbio-node-runtime 1.57.0 → 1.59.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +53 -30
- package/dist/clients/agent/client.d.ts +3 -1
- package/dist/clients/agent/client.js +41 -11
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/agent/contracts.d.ts +5 -2
- package/dist/clients/owner/client.d.ts +8 -10
- package/dist/clients/owner/client.js +45 -38
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +11 -25
- package/dist/clients/owner/index.d.ts +1 -1
- package/dist/runtime/index.d.ts +1 -1
- package/dist/runtime/index.js.map +1 -1
- package/dist/vault-core/contracts.d.ts +133 -46
- package/dist/vault-core/contracts.js +4 -3
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +10 -5
- package/dist/vault-core/core.js +315 -160
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.d.ts +8 -4
- package/dist/vault-core/defaults.js +37 -70
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/index.d.ts +1 -1
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-core/persistence.d.ts +11 -2
- package/dist/vault-core/persistence.js +37 -1
- package/dist/vault-core/persistence.js.map +1 -1
- package/dist/vault-core/ports.d.ts +7 -2
- package/dist/vault-core/tool-metadata.js +25 -8
- package/dist/vault-core/tool-metadata.js.map +1 -1
- package/dist/vault-ingress/defaults.d.ts +2 -0
- package/dist/vault-ingress/defaults.js +6 -0
- package/dist/vault-ingress/defaults.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +39 -10
- package/dist/vault-ingress/index.js +142 -56
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.d.ts +2 -0
- package/dist/vault-ingress/remote-transport.js +33 -4
- package/dist/vault-ingress/remote-transport.js.map +1 -1
- package/docs/ARCHITECTURE.md +1 -1
- package/docs/REFERENCE.md +36 -27
- package/docs/WORKS_WITH_CUSTOM_FETCH.md +2 -2
- package/docs/api/README.md +2 -4
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/OwnerClientError.md +1 -1
- package/docs/api/classes/VaultCore.md +81 -33
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
- package/docs/api/functions/createOwnerSession.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
- package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +1 -1
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +27 -1
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +33 -1
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +9 -9
- package/docs/api/interfaces/CbioRuntime.md +1 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreateOwnerSessionOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -1
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
- package/docs/api/interfaces/OwnerSession.md +1 -1
- package/docs/api/interfaces/OwnerStoreSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerWriteSecretInput.md +1 -7
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/VaultApproveDispatchInput.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +58 -44
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultDeleteSecretInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +9 -21
- package/docs/api/interfaces/VaultGrantCapabilityRequest.md +1 -1
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
- package/docs/api/interfaces/VaultIssueSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +1 -1
- package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +11 -17
- package/docs/api/interfaces/VaultUpdateAgentInput.md +1 -1
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
- package/docs/api/type-aliases/AgentVisibleSecretRecord.md +1 -1
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/type-aliases/OwnerGrantCapabilityInput.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/docs/zh/README.md +26 -16
- package/examples/process-isolation.ts +7 -5
- package/package.json +1 -1
- package/docs/api/interfaces/OwnerDefineSecretTargetsInput.md +0 -23
- package/docs/api/interfaces/OwnerSecretTargetBinding.md +0 -35
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.59.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -21,9 +21,3 @@
|
|
|
21
21
|
### requestedAt?
|
|
22
22
|
|
|
23
23
|
> `optional` **requestedAt?**: `string`
|
|
24
|
-
|
|
25
|
-
***
|
|
26
|
-
|
|
27
|
-
### targetBindings
|
|
28
|
-
|
|
29
|
-
> **targetBindings**: readonly [`OwnerSecretTargetBinding`](OwnerSecretTargetBinding.md)[]
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.59.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -9,90 +9,120 @@ In Sovereign Vault model, administrative actions are implicitly authorized by th
|
|
|
9
9
|
|
|
10
10
|
## Methods
|
|
11
11
|
|
|
12
|
-
###
|
|
12
|
+
### ownerAllowAlways()
|
|
13
13
|
|
|
14
|
-
> **
|
|
14
|
+
> **ownerAllowAlways**(`input`): `Promise`\<`DispatchResult`\>
|
|
15
15
|
|
|
16
|
-
|
|
17
|
-
|
|
16
|
+
#### Parameters
|
|
17
|
+
|
|
18
|
+
##### input
|
|
19
|
+
|
|
20
|
+
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
21
|
+
|
|
22
|
+
#### Returns
|
|
23
|
+
|
|
24
|
+
`Promise`\<`DispatchResult`\>
|
|
25
|
+
|
|
26
|
+
***
|
|
27
|
+
|
|
28
|
+
### ownerAllowOnce()
|
|
29
|
+
|
|
30
|
+
> **ownerAllowOnce**(`input`): `Promise`\<`DispatchResult`\>
|
|
18
31
|
|
|
19
32
|
#### Parameters
|
|
20
33
|
|
|
21
34
|
##### input
|
|
22
35
|
|
|
23
|
-
[`
|
|
36
|
+
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
24
37
|
|
|
25
38
|
#### Returns
|
|
26
39
|
|
|
27
|
-
`Promise
|
|
40
|
+
`Promise`\<`DispatchResult`\>
|
|
28
41
|
|
|
29
42
|
***
|
|
30
43
|
|
|
31
|
-
###
|
|
44
|
+
### ownerApproveCapabilityRead()
|
|
45
|
+
|
|
46
|
+
> **ownerApproveCapabilityRead**(`input`): `Promise`\<`CapabilityStateRecord`\>
|
|
47
|
+
|
|
48
|
+
#### Parameters
|
|
49
|
+
|
|
50
|
+
##### input
|
|
32
51
|
|
|
33
|
-
|
|
52
|
+
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
34
53
|
|
|
35
|
-
|
|
54
|
+
#### Returns
|
|
55
|
+
|
|
56
|
+
`Promise`\<`CapabilityStateRecord`\>
|
|
57
|
+
|
|
58
|
+
***
|
|
59
|
+
|
|
60
|
+
### ownerApproveCapabilityWrite()
|
|
61
|
+
|
|
62
|
+
> **ownerApproveCapabilityWrite**(`input`): `Promise`\<`CapabilityStateRecord`\>
|
|
36
63
|
|
|
37
64
|
#### Parameters
|
|
38
65
|
|
|
39
66
|
##### input
|
|
40
67
|
|
|
41
|
-
[`
|
|
68
|
+
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
42
69
|
|
|
43
70
|
#### Returns
|
|
44
71
|
|
|
45
|
-
`Promise`\<`
|
|
72
|
+
`Promise`\<`CapabilityStateRecord`\>
|
|
46
73
|
|
|
47
74
|
***
|
|
48
75
|
|
|
49
|
-
###
|
|
76
|
+
### ownerCreateAgent()
|
|
50
77
|
|
|
51
|
-
> **
|
|
78
|
+
> **ownerCreateAgent**(`input`): `Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
|
52
79
|
|
|
53
|
-
|
|
80
|
+
Generates a new identity and registers it as an agent in one step.
|
|
81
|
+
The private key is stored in the vault for managed custody.
|
|
54
82
|
|
|
55
83
|
#### Parameters
|
|
56
84
|
|
|
57
85
|
##### input
|
|
58
86
|
|
|
59
|
-
[`
|
|
87
|
+
[`VaultCreateAgentInput`](VaultCreateAgentInput.md)
|
|
60
88
|
|
|
61
89
|
#### Returns
|
|
62
90
|
|
|
63
|
-
`Promise
|
|
91
|
+
`Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
|
64
92
|
|
|
65
93
|
***
|
|
66
94
|
|
|
67
|
-
###
|
|
95
|
+
### ownerDeleteSecret()
|
|
68
96
|
|
|
69
|
-
> **
|
|
97
|
+
> **ownerDeleteSecret**(`input`): `Promise`\<`void`\>
|
|
98
|
+
|
|
99
|
+
Permanently deletes a secret from the vault.
|
|
70
100
|
|
|
71
101
|
#### Parameters
|
|
72
102
|
|
|
73
103
|
##### input
|
|
74
104
|
|
|
75
|
-
[`
|
|
105
|
+
[`VaultDeleteSecretInput`](VaultDeleteSecretInput.md)
|
|
76
106
|
|
|
77
107
|
#### Returns
|
|
78
108
|
|
|
79
|
-
`Promise`\<`
|
|
109
|
+
`Promise`\<`void`\>
|
|
80
110
|
|
|
81
111
|
***
|
|
82
112
|
|
|
83
|
-
###
|
|
113
|
+
### ownerDeny()
|
|
84
114
|
|
|
85
|
-
> **
|
|
115
|
+
> **ownerDeny**(`requestId`): `Promise`\<`CapabilityStateRecord`\>
|
|
86
116
|
|
|
87
117
|
#### Parameters
|
|
88
118
|
|
|
89
|
-
#####
|
|
119
|
+
##### requestId
|
|
90
120
|
|
|
91
|
-
|
|
121
|
+
`string`
|
|
92
122
|
|
|
93
123
|
#### Returns
|
|
94
124
|
|
|
95
|
-
`Promise`\<`
|
|
125
|
+
`Promise`\<`CapabilityStateRecord`\>
|
|
96
126
|
|
|
97
127
|
***
|
|
98
128
|
|
|
@@ -312,7 +342,7 @@ Reads the tamper-evident audit log for the vault.
|
|
|
312
342
|
|
|
313
343
|
> **ownerRegisterFlow**(`input`): `Promise`\<`CustomHttpFlowDefinition`\>
|
|
314
344
|
|
|
315
|
-
Registers a
|
|
345
|
+
Registers a reusable HTTP request template for complex secret exchange patterns.
|
|
316
346
|
|
|
317
347
|
#### Parameters
|
|
318
348
|
|
|
@@ -326,22 +356,6 @@ Registers a custom HTTP flow for complex secret usage.
|
|
|
326
356
|
|
|
327
357
|
***
|
|
328
358
|
|
|
329
|
-
### ownerRejectCapabilityState()
|
|
330
|
-
|
|
331
|
-
> **ownerRejectCapabilityState**(`requestId`): `Promise`\<`CapabilityStateRecord`\>
|
|
332
|
-
|
|
333
|
-
#### Parameters
|
|
334
|
-
|
|
335
|
-
##### requestId
|
|
336
|
-
|
|
337
|
-
`string`
|
|
338
|
-
|
|
339
|
-
#### Returns
|
|
340
|
-
|
|
341
|
-
`Promise`\<`CapabilityStateRecord`\>
|
|
342
|
-
|
|
343
|
-
***
|
|
344
|
-
|
|
345
359
|
### ownerRevokeCapability()
|
|
346
360
|
|
|
347
361
|
> **ownerRevokeCapability**(`input`): `Promise`\<`void`\>
|
|
@@ -430,7 +444,7 @@ Securely stores a new secret in the vault.
|
|
|
430
444
|
|
|
431
445
|
> **ownerWriteSecret**(`input`): `Promise`\<`SecretRecord`\>
|
|
432
446
|
|
|
433
|
-
|
|
447
|
+
Stores a manually provided secret in the vault.
|
|
434
448
|
|
|
435
449
|
#### Parameters
|
|
436
450
|
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.59.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -36,12 +36,6 @@
|
|
|
36
36
|
|
|
37
37
|
***
|
|
38
38
|
|
|
39
|
-
### methods
|
|
40
|
-
|
|
41
|
-
> **methods**: readonly `string`[]
|
|
42
|
-
|
|
43
|
-
***
|
|
44
|
-
|
|
45
39
|
### operation?
|
|
46
40
|
|
|
47
41
|
> `optional` **operation?**: `string`
|
|
@@ -62,30 +56,24 @@
|
|
|
62
56
|
|
|
63
57
|
***
|
|
64
58
|
|
|
65
|
-
###
|
|
66
|
-
|
|
67
|
-
> `optional` **requestedAt?**: `string`
|
|
68
|
-
|
|
69
|
-
***
|
|
70
|
-
|
|
71
|
-
### scope
|
|
59
|
+
### read
|
|
72
60
|
|
|
73
|
-
> **
|
|
61
|
+
> **read**: `CapabilityReadPolicy`
|
|
74
62
|
|
|
75
63
|
***
|
|
76
64
|
|
|
77
|
-
###
|
|
65
|
+
### requestedAt?
|
|
78
66
|
|
|
79
|
-
> `optional` **
|
|
67
|
+
> `optional` **requestedAt?**: `string`
|
|
80
68
|
|
|
81
69
|
***
|
|
82
70
|
|
|
83
|
-
###
|
|
71
|
+
### skipAudit?
|
|
84
72
|
|
|
85
|
-
> `optional` **
|
|
73
|
+
> `optional` **skipAudit?**: `boolean`
|
|
86
74
|
|
|
87
75
|
***
|
|
88
76
|
|
|
89
|
-
###
|
|
77
|
+
### write
|
|
90
78
|
|
|
91
|
-
>
|
|
79
|
+
> **write**: `CapabilityWritePolicy`
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.59.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -24,12 +24,6 @@
|
|
|
24
24
|
|
|
25
25
|
***
|
|
26
26
|
|
|
27
|
-
### methods
|
|
28
|
-
|
|
29
|
-
> **methods**: readonly `string`[]
|
|
30
|
-
|
|
31
|
-
***
|
|
32
|
-
|
|
33
27
|
### operation?
|
|
34
28
|
|
|
35
29
|
> `optional` **operation?**: `string`
|
|
@@ -50,30 +44,30 @@
|
|
|
50
44
|
|
|
51
45
|
***
|
|
52
46
|
|
|
53
|
-
###
|
|
47
|
+
### read
|
|
54
48
|
|
|
55
|
-
>
|
|
49
|
+
> **read**: `CapabilityReadPolicy`
|
|
56
50
|
|
|
57
51
|
***
|
|
58
52
|
|
|
59
|
-
###
|
|
53
|
+
### requestedAt?
|
|
60
54
|
|
|
61
|
-
> **
|
|
55
|
+
> `optional` **requestedAt?**: `string`
|
|
62
56
|
|
|
63
57
|
***
|
|
64
58
|
|
|
65
|
-
###
|
|
59
|
+
### requester
|
|
66
60
|
|
|
67
|
-
> **
|
|
61
|
+
> **requester**: `VaultPrincipal`
|
|
68
62
|
|
|
69
63
|
***
|
|
70
64
|
|
|
71
|
-
###
|
|
65
|
+
### skipAudit?
|
|
72
66
|
|
|
73
|
-
> `optional` **
|
|
67
|
+
> `optional` **skipAudit?**: `boolean`
|
|
74
68
|
|
|
75
69
|
***
|
|
76
70
|
|
|
77
|
-
###
|
|
71
|
+
### write
|
|
78
72
|
|
|
79
|
-
>
|
|
73
|
+
> **write**: `CapabilityWritePolicy`
|