@the-ai-company/cbio-node-runtime 1.58.0 → 1.59.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. package/README.md +51 -22
  2. package/dist/clients/agent/client.d.ts +3 -1
  3. package/dist/clients/agent/client.js +41 -11
  4. package/dist/clients/agent/client.js.map +1 -1
  5. package/dist/clients/agent/contracts.d.ts +5 -2
  6. package/dist/clients/owner/client.d.ts +6 -4
  7. package/dist/clients/owner/client.js +43 -19
  8. package/dist/clients/owner/client.js.map +1 -1
  9. package/dist/clients/owner/contracts.d.ts +11 -11
  10. package/dist/vault-core/contracts.d.ts +120 -24
  11. package/dist/vault-core/contracts.js +4 -2
  12. package/dist/vault-core/contracts.js.map +1 -1
  13. package/dist/vault-core/core.d.ts +10 -4
  14. package/dist/vault-core/core.js +302 -101
  15. package/dist/vault-core/core.js.map +1 -1
  16. package/dist/vault-core/defaults.d.ts +8 -2
  17. package/dist/vault-core/defaults.js +33 -10
  18. package/dist/vault-core/defaults.js.map +1 -1
  19. package/dist/vault-core/index.d.ts +1 -1
  20. package/dist/vault-core/index.js.map +1 -1
  21. package/dist/vault-core/persistence.d.ts +11 -2
  22. package/dist/vault-core/persistence.js +37 -1
  23. package/dist/vault-core/persistence.js.map +1 -1
  24. package/dist/vault-core/ports.d.ts +7 -1
  25. package/dist/vault-core/tool-metadata.js +25 -8
  26. package/dist/vault-core/tool-metadata.js.map +1 -1
  27. package/dist/vault-ingress/defaults.d.ts +2 -0
  28. package/dist/vault-ingress/defaults.js +6 -0
  29. package/dist/vault-ingress/defaults.js.map +1 -1
  30. package/dist/vault-ingress/index.d.ts +39 -9
  31. package/dist/vault-ingress/index.js +140 -45
  32. package/dist/vault-ingress/index.js.map +1 -1
  33. package/dist/vault-ingress/remote-transport.d.ts +2 -0
  34. package/dist/vault-ingress/remote-transport.js +33 -4
  35. package/dist/vault-ingress/remote-transport.js.map +1 -1
  36. package/docs/ARCHITECTURE.md +1 -1
  37. package/docs/REFERENCE.md +36 -27
  38. package/docs/WORKS_WITH_CUSTOM_FETCH.md +2 -2
  39. package/docs/api/README.md +2 -2
  40. package/docs/api/classes/IdentityError.md +1 -1
  41. package/docs/api/classes/OwnerClientError.md +1 -1
  42. package/docs/api/classes/VaultCore.md +92 -28
  43. package/docs/api/classes/VaultCoreError.md +1 -1
  44. package/docs/api/enumerations/IdentityErrorCode.md +1 -1
  45. package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
  46. package/docs/api/functions/createAgentClient.md +1 -1
  47. package/docs/api/functions/createIdentity.md +1 -1
  48. package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
  49. package/docs/api/functions/createOwnerSession.md +1 -1
  50. package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
  51. package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
  52. package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
  53. package/docs/api/functions/createVault.md +1 -1
  54. package/docs/api/functions/createVaultClient.md +1 -1
  55. package/docs/api/functions/createVaultCore.md +1 -1
  56. package/docs/api/functions/createVaultCoreDependencies.md +1 -1
  57. package/docs/api/functions/createVaultService.md +1 -1
  58. package/docs/api/functions/createWorkspaceStorage.md +1 -1
  59. package/docs/api/functions/deriveIdentityId.md +1 -1
  60. package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
  61. package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
  62. package/docs/api/functions/handleVaultAgentControlHttp.md +1 -1
  63. package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
  64. package/docs/api/functions/initializeVaultCustody.md +1 -1
  65. package/docs/api/functions/listVaults.md +1 -1
  66. package/docs/api/functions/readVaultProfile.md +1 -1
  67. package/docs/api/functions/recoverVault.md +1 -1
  68. package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
  69. package/docs/api/functions/restoreIdentity.md +1 -1
  70. package/docs/api/functions/updateVaultMetadata.md +1 -1
  71. package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
  72. package/docs/api/functions/writeVaultProfile.md +1 -1
  73. package/docs/api/interfaces/AgentClient.md +27 -1
  74. package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
  75. package/docs/api/interfaces/AgentDispatchTransport.md +33 -1
  76. package/docs/api/interfaces/AgentIdentity.md +1 -1
  77. package/docs/api/interfaces/AgentSigner.md +1 -1
  78. package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +9 -9
  79. package/docs/api/interfaces/CbioRuntime.md +1 -1
  80. package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
  81. package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
  82. package/docs/api/interfaces/CreateOwnerSessionOptions.md +1 -1
  83. package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
  84. package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
  85. package/docs/api/interfaces/CreateVaultOptions.md +1 -1
  86. package/docs/api/interfaces/CreatedVault.md +1 -1
  87. package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
  88. package/docs/api/interfaces/IStorageProvider.md +1 -1
  89. package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
  90. package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
  91. package/docs/api/interfaces/OwnerAgentProvisionResult.md +1 -1
  92. package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
  93. package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
  94. package/docs/api/interfaces/OwnerSession.md +1 -1
  95. package/docs/api/interfaces/OwnerStoreSecretInput.md +1 -1
  96. package/docs/api/interfaces/OwnerWriteSecretInput.md +1 -1
  97. package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
  98. package/docs/api/interfaces/RecoveredVault.md +1 -1
  99. package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
  100. package/docs/api/interfaces/Signer.md +1 -1
  101. package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +1 -1
  102. package/docs/api/interfaces/VaultApproveDispatchInput.md +1 -1
  103. package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
  104. package/docs/api/interfaces/VaultClient.md +69 -37
  105. package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
  106. package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
  107. package/docs/api/interfaces/VaultDeleteSecretInput.md +1 -1
  108. package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
  109. package/docs/api/interfaces/VaultGrantCapabilityInput.md +9 -21
  110. package/docs/api/interfaces/VaultGrantCapabilityRequest.md +1 -1
  111. package/docs/api/interfaces/VaultIdentity.md +1 -1
  112. package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
  113. package/docs/api/interfaces/VaultIssueSessionTokenInput.md +1 -1
  114. package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
  115. package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
  116. package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
  117. package/docs/api/interfaces/VaultMetadata.md +1 -1
  118. package/docs/api/interfaces/VaultObject.md +1 -1
  119. package/docs/api/interfaces/VaultProfile.md +1 -1
  120. package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +1 -1
  121. package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
  122. package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
  123. package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
  124. package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
  125. package/docs/api/interfaces/VaultSigner.md +1 -1
  126. package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +11 -17
  127. package/docs/api/interfaces/VaultUpdateAgentInput.md +1 -1
  128. package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
  129. package/docs/api/type-aliases/AgentVisibleSecretRecord.md +1 -1
  130. package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
  131. package/docs/api/type-aliases/OwnerGrantCapabilityInput.md +1 -1
  132. package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
  133. package/docs/zh/README.md +25 -9
  134. package/examples/process-isolation.ts +6 -4
  135. package/package.json +1 -1
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -36,12 +36,6 @@
36
36
 
37
37
  ***
38
38
 
39
- ### methods
40
-
41
- > **methods**: readonly `string`[]
42
-
43
- ***
44
-
45
39
  ### operation?
46
40
 
47
41
  > `optional` **operation?**: `string`
@@ -62,30 +56,24 @@
62
56
 
63
57
  ***
64
58
 
65
- ### requestedAt?
66
-
67
- > `optional` **requestedAt?**: `string`
68
-
69
- ***
70
-
71
- ### scope
59
+ ### read
72
60
 
73
- > **scope**: `string`
61
+ > **read**: `CapabilityReadPolicy`
74
62
 
75
63
  ***
76
64
 
77
- ### secretAliases?
65
+ ### requestedAt?
78
66
 
79
- > `optional` **secretAliases?**: readonly `string`[]
67
+ > `optional` **requestedAt?**: `string`
80
68
 
81
69
  ***
82
70
 
83
- ### secretIds?
71
+ ### skipAudit?
84
72
 
85
- > `optional` **secretIds?**: readonly `string`[]
73
+ > `optional` **skipAudit?**: `boolean`
86
74
 
87
75
  ***
88
76
 
89
- ### skipAudit?
77
+ ### write
90
78
 
91
- > `optional` **skipAudit?**: `boolean`
79
+ > **write**: `CapabilityWritePolicy`
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -24,12 +24,6 @@
24
24
 
25
25
  ***
26
26
 
27
- ### methods
28
-
29
- > **methods**: readonly `string`[]
30
-
31
- ***
32
-
33
27
  ### operation?
34
28
 
35
29
  > `optional` **operation?**: `string`
@@ -50,30 +44,30 @@
50
44
 
51
45
  ***
52
46
 
53
- ### requestedAt?
47
+ ### read
54
48
 
55
- > `optional` **requestedAt?**: `string`
49
+ > **read**: `CapabilityReadPolicy`
56
50
 
57
51
  ***
58
52
 
59
- ### requester
53
+ ### requestedAt?
60
54
 
61
- > **requester**: `VaultPrincipal`
55
+ > `optional` **requestedAt?**: `string`
62
56
 
63
57
  ***
64
58
 
65
- ### scope
59
+ ### requester
66
60
 
67
- > **scope**: `string`
61
+ > **requester**: `VaultPrincipal`
68
62
 
69
63
  ***
70
64
 
71
- ### secretAliases?
65
+ ### skipAudit?
72
66
 
73
- > `optional` **secretAliases?**: readonly `string`[]
67
+ > `optional` **skipAudit?**: `boolean`
74
68
 
75
69
  ***
76
70
 
77
- ### skipAudit?
71
+ ### write
78
72
 
79
- > `optional` **skipAudit?**: `boolean`
73
+ > **write**: `CapabilityWritePolicy`
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
@@ -1,4 +1,4 @@
1
- [**CBIO Node Runtime Agent API v1.58.0**](../README.md)
1
+ [**CBIO Node Runtime Agent API v1.59.1**](../README.md)
2
2
 
3
3
  ***
4
4
 
package/docs/zh/README.md CHANGED
@@ -101,9 +101,12 @@ const record = await client.ownerWriteSecret({
101
101
 
102
102
  await client.ownerGrantCapability({
103
103
  agentId,
104
- secretAliases: ['api-token'],
105
- scope: 'https://api.example.com/*',
106
- methods: ['POST']
104
+ write: {
105
+ secretIds: [record.secretId.value],
106
+ scope: 'https://api.example.com/*',
107
+ methods: ['POST']
108
+ },
109
+ read: { mode: 'full' }
107
110
  });
108
111
  ```
109
112
 
@@ -120,24 +123,31 @@ const agent = createAgentClient({
120
123
  });
121
124
 
122
125
  const result = await agent.agentDispatch({ ... });
126
+ const requests = await agent.agentListRequests();
127
+ const request = await agent.agentGetRequest(result.requestId);
123
128
  ```
124
129
 
125
130
  Agent 进程不会直接使用原始私钥执行请求。即使 Agent 拥有身份材料,也应先换取 session token,再进行 dispatch。
126
131
 
132
+ 给 LLM 的直白规则:
133
+ - `agentDispatch(...)` = 立刻尝试执行真实任务
134
+ - `agentSubmitCapabilityRequest(...)` = 只申请权限,不会执行任务
135
+ - `agentListRequests()` / `agentGetRequest(...)` = 在请求执行后查看异步结果
136
+
127
137
  ```ts
128
138
  const manifest = await agent.agentIntrospect();
129
139
 
130
140
  console.log(manifest.agent.agentId);
131
141
  console.log(manifest.agent.identityId);
132
142
  console.log(manifest.agent.nickname);
133
- console.log(manifest.capabilities); // 同一张能力状态表里同时包含 GRANTED 和 PENDING
143
+ console.log(manifest.capabilities); // 同一组能力载体里包含 write/read 动作状态
134
144
  ```
135
145
 
136
- `agentListCapabilities()` 现在返回的也是同一张统一能力状态表,因此调度器或 Agent 重启后,不需要分别拼“已授权能力”和“待审批能力”。
146
+ `agentListCapabilities()` 返回能力载体视图,`agentListRequests()` / `agentGetRequest()` 则负责暴露请求历史和按权限裁剪后的结果。
137
147
 
138
148
  ### 7. 人机协同(HITL)工作流
139
149
 
140
- 系统采用统一的 **能力状态(capability state)** 模型。如果 Agent 尝试执行的动作不在白名单内,dispatch 会返回 `PENDING`,同时运行时会写入一条 `PENDING` 能力状态,等待 Owner 审批。
150
+ 如果 Agent 尝试执行的动作不在白名单内,dispatch 会返回 `PENDING`,同时运行时会写入一条能力载体记录,其 `write` 动作等待 Owner 审批。
141
151
 
142
152
  ```ts
143
153
  const result = await agent.agentDispatch({ ... });
@@ -146,14 +156,20 @@ if (result.status === 'PENDING') {
146
156
  }
147
157
 
148
158
  client.ownerOnCapabilityState((state) => {
149
- if (state.status === 'PENDING') {
159
+ if (state.actions.write.status === 'PENDING') {
150
160
  console.log('收到新的待审批能力状态:', state.requestId);
151
161
  }
152
162
  });
153
163
 
154
- const pending = await client.ownerListCapabilityStates({ status: 'PENDING' });
164
+ const pending = await client.ownerListCapabilityStates({ writeStatus: 'PENDING' });
155
165
  if (pending.length > 0) {
156
- await client.ownerExecuteCapabilityStateAndGrant({
166
+ await client.ownerApproveCapabilityWrite({
167
+ requestId: pending[0].requestId
168
+ });
169
+ await client.ownerAllowAlways({
170
+ requestId: pending[0].requestId
171
+ });
172
+ await client.ownerApproveCapabilityRead({
157
173
  requestId: pending[0].requestId
158
174
  });
159
175
  }
@@ -128,11 +128,13 @@ async function main() {
128
128
  vaultId: vault.vaultId,
129
129
  capabilityId: "cap-llm-1",
130
130
  agentId: agentIdentity.identityId,
131
- secretIds: [secret.secretId.value],
132
- secretAliases: ["api-token"],
133
131
  operation: "dispatch_http" as const,
134
- scope: "https://httpbin.org/post",
135
- methods: ["POST"],
132
+ write: {
133
+ secretIds: [secret.secretId.value],
134
+ scope: "https://httpbin.org/post",
135
+ methods: ["POST"],
136
+ },
137
+ read: { mode: "full" },
136
138
  issuedAt: new Date().toISOString(),
137
139
  };
138
140
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@the-ai-company/cbio-node-runtime",
3
- "version": "1.58.0",
3
+ "version": "1.59.1",
4
4
  "publishConfig": {
5
5
  "access": "public"
6
6
  },