@the-ai-company/cbio-node-runtime 1.61.0 → 1.62.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -5
- package/dist/clients/agent/client.js +12 -6
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/agent/contracts.d.ts +2 -1
- package/dist/clients/owner/client.js +4 -15
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +1 -1
- package/dist/vault-core/contracts.d.ts +9 -5
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +1 -0
- package/dist/vault-core/core.js +40 -93
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/read-policy.d.ts +2 -0
- package/dist/vault-core/read-policy.js +40 -0
- package/dist/vault-core/read-policy.js.map +1 -0
- package/dist/vault-core/tool-metadata.js +7 -6
- package/dist/vault-core/tool-metadata.js.map +1 -1
- package/dist/vault-ingress/defaults.js +1 -0
- package/dist/vault-ingress/defaults.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +2 -1
- package/dist/vault-ingress/index.js +14 -63
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.js +3 -5
- package/dist/vault-ingress/remote-transport.js.map +1 -1
- package/docs/REFERENCE.md +3 -2
- package/docs/api/README.md +2 -2
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/OwnerClientError.md +1 -1
- package/docs/api/classes/VaultCore.md +1 -1
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
- package/docs/api/functions/createOwnerSession.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
- package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +1 -1
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +1 -1
- package/docs/api/interfaces/AgentDispatchIntent.md +7 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +1 -1
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +7 -7
- package/docs/api/interfaces/CbioRuntime.md +1 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreateOwnerSessionOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -1
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +1 -1
- package/docs/api/interfaces/OwnerCreateSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerRemoveSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
- package/docs/api/interfaces/OwnerSession.md +1 -1
- package/docs/api/interfaces/OwnerUpdateSecretInput.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/VaultApproveDispatchInput.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +1 -1
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityRequest.md +1 -1
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
- package/docs/api/interfaces/VaultIssueSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +1 -1
- package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +7 -7
- package/docs/api/interfaces/VaultUpdateAgentInput.md +1 -1
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
- package/docs/api/type-aliases/AgentVisibleSecretRecord.md +1 -1
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/type-aliases/OwnerGrantCapabilityInput.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/docs/zh/README.md +5 -2
- package/package.json +1 -1
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.62.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -24,6 +24,12 @@
|
|
|
24
24
|
|
|
25
25
|
***
|
|
26
26
|
|
|
27
|
+
### reason
|
|
28
|
+
|
|
29
|
+
> **reason**: `string`
|
|
30
|
+
|
|
31
|
+
***
|
|
32
|
+
|
|
27
33
|
### requestedAt?
|
|
28
34
|
|
|
29
35
|
> `optional` **requestedAt?**: `string`
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.62.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -6,12 +6,6 @@
|
|
|
6
6
|
|
|
7
7
|
## Properties
|
|
8
8
|
|
|
9
|
-
### justification?
|
|
10
|
-
|
|
11
|
-
> `optional` **justification?**: `string`
|
|
12
|
-
|
|
13
|
-
***
|
|
14
|
-
|
|
15
9
|
### operation?
|
|
16
10
|
|
|
17
11
|
> `optional` **operation?**: `"dispatch_http"` \| `"custom_http"`
|
|
@@ -24,6 +18,12 @@
|
|
|
24
18
|
|
|
25
19
|
***
|
|
26
20
|
|
|
21
|
+
### reason
|
|
22
|
+
|
|
23
|
+
> **reason**: `string`
|
|
24
|
+
|
|
25
|
+
***
|
|
26
|
+
|
|
27
27
|
### requestedAt?
|
|
28
28
|
|
|
29
29
|
> `optional` **requestedAt?**: `string`
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.62.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -18,12 +18,6 @@
|
|
|
18
18
|
|
|
19
19
|
***
|
|
20
20
|
|
|
21
|
-
### justification?
|
|
22
|
-
|
|
23
|
-
> `optional` **justification?**: `string`
|
|
24
|
-
|
|
25
|
-
***
|
|
26
|
-
|
|
27
21
|
### operation?
|
|
28
22
|
|
|
29
23
|
> `optional` **operation?**: `string`
|
|
@@ -50,6 +44,12 @@
|
|
|
50
44
|
|
|
51
45
|
***
|
|
52
46
|
|
|
47
|
+
### reason?
|
|
48
|
+
|
|
49
|
+
> `optional` **reason?**: `string`
|
|
50
|
+
|
|
51
|
+
***
|
|
52
|
+
|
|
53
53
|
### requestedAt?
|
|
54
54
|
|
|
55
55
|
> `optional` **requestedAt?**: `string`
|
package/docs/zh/README.md
CHANGED
|
@@ -106,7 +106,7 @@ await client.ownerGrantCapability({
|
|
|
106
106
|
scope: 'https://api.example.com/*',
|
|
107
107
|
methods: ['POST']
|
|
108
108
|
},
|
|
109
|
-
read: {
|
|
109
|
+
read: { paths: ['$'] }
|
|
110
110
|
});
|
|
111
111
|
```
|
|
112
112
|
|
|
@@ -132,9 +132,12 @@ Agent 进程不会直接使用原始私钥执行请求。即使 Agent 拥有身
|
|
|
132
132
|
|
|
133
133
|
给 LLM 的直白规则：
|
|
134
134
|
- `agentDispatch(...)` = 立刻尝试执行真实任务
|
|
135
|
+
- `agentDispatch(...)` 必须带一条给 owner 看的 `reason`，说明为什么要发这个请求
|
|
135
136
|
- `agentSubmitCapabilityRequest(...)` = 只申请权限，不会执行任务
|
|
137
|
+
- `agentSubmitCapabilityRequest(...)` 也必须带 `reason`，说明为什么需要这项权限
|
|
136
138
|
- `agentListRequests()` / `agentGetRequest(...)` = 在请求执行后查看异步结果
|
|
137
139
|
- `ownerListRequests()` / `ownerGetRequest(...)` = owner 查看完整请求记录，用于决定是否放行 read
|
|
140
|
+
- `read.paths` 只控制哪些响应值可见；响应结构始终可见，`['$']` 表示整个 body 都可见
|
|
138
141
|
|
|
139
142
|
```ts
|
|
140
143
|
const manifest = await agent.agentIntrospect();
|
|
@@ -173,7 +176,7 @@ if (pending.length > 0) {
|
|
|
173
176
|
});
|
|
174
177
|
await client.ownerApproveCapabilityRead({
|
|
175
178
|
requestId: pending[0].requestId,
|
|
176
|
-
read: {
|
|
179
|
+
read: { paths: ['data.id', 'data.status'] }
|
|
177
180
|
});
|
|
178
181
|
}
|
|
179
182
|
```
|