@the-ai-company/cbio-node-runtime 1.62.0 → 1.62.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -15
- package/dist/clients/agent/client.js +1 -4
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/owner/client.d.ts +0 -1
- package/dist/clients/owner/client.js +5 -23
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +2 -3
- package/dist/vault-core/contracts.d.ts +18 -30
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +1 -1
- package/dist/vault-core/core.js +80 -187
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/index.d.ts +1 -1
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-core/read-policy.d.ts +2 -0
- package/dist/vault-core/read-policy.js +40 -0
- package/dist/vault-core/read-policy.js.map +1 -0
- package/dist/vault-core/tool-metadata.js +1 -1
- package/dist/vault-core/tool-metadata.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +2 -8
- package/dist/vault-ingress/index.js +12 -68
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.js +1 -4
- package/dist/vault-ingress/remote-transport.js.map +1 -1
- package/docs/REFERENCE.md +3 -6
- package/docs/api/README.md +2 -2
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/OwnerClientError.md +1 -1
- package/docs/api/classes/VaultCore.md +1 -17
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +1 -1
- package/docs/api/functions/createOwnerSession.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createStandardAcquireBoundary.md +1 -1
- package/docs/api/functions/createStandardDispatchBoundary.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultClient.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveIdentityId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +1 -1
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +1 -1
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +1 -1
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/CbioRuntime.md +1 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreateOwnerSessionOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultClientOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -1
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +1 -1
- package/docs/api/interfaces/OwnerCreateSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerRemoveSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
- package/docs/api/interfaces/OwnerSession.md +1 -1
- package/docs/api/interfaces/OwnerUpdateSecretInput.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/VaultApproveDispatchInput.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultClient.md +1 -17
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultGrantCapabilityRequest.md +1 -1
- package/docs/api/interfaces/VaultIdentity.md +1 -1
- package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
- package/docs/api/interfaces/VaultIssueSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +1 -1
- package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +1 -1
- package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
- package/docs/api/interfaces/VaultRegisterFlowInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultSigner.md +1 -1
- package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +1 -1
- package/docs/api/interfaces/VaultUpdateAgentInput.md +1 -1
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +1 -1
- package/docs/api/type-aliases/AgentVisibleSecretRecord.md +1 -1
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/type-aliases/OwnerGrantCapabilityInput.md +1 -1
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/docs/zh/README.md +5 -7
- package/package.json +1 -1
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.62.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.62.2**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -57,22 +57,6 @@ In Sovereign Vault model, administrative actions are implicitly authorized by th
|
|
|
57
57
|
|
|
58
58
|
***
|
|
59
59
|
|
|
60
|
-
### ownerApproveCapabilityWrite()
|
|
61
|
-
|
|
62
|
-
> **ownerApproveCapabilityWrite**(`input`): `Promise`\<`CapabilityStateRecord`\>
|
|
63
|
-
|
|
64
|
-
#### Parameters
|
|
65
|
-
|
|
66
|
-
##### input
|
|
67
|
-
|
|
68
|
-
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
69
|
-
|
|
70
|
-
#### Returns
|
|
71
|
-
|
|
72
|
-
`Promise`\<`CapabilityStateRecord`\>
|
|
73
|
-
|
|
74
|
-
***
|
|
75
|
-
|
|
76
60
|
### ownerCreateAgent()
|
|
77
61
|
|
|
78
62
|
> **ownerCreateAgent**(`input`): `Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
package/docs/zh/README.md
CHANGED
|
@@ -106,7 +106,7 @@ await client.ownerGrantCapability({
|
|
|
106
106
|
scope: 'https://api.example.com/*',
|
|
107
107
|
methods: ['POST']
|
|
108
108
|
},
|
|
109
|
-
read: {
|
|
109
|
+
read: { paths: ['$'] }
|
|
110
110
|
});
|
|
111
111
|
```
|
|
112
112
|
|
|
@@ -137,6 +137,7 @@ Agent 进程不会直接使用原始私钥执行请求。即使 Agent 拥有身
|
|
|
137
137
|
- `agentSubmitCapabilityRequest(...)` 也必须带 `reason`,说明为什么需要这项权限
|
|
138
138
|
- `agentListRequests()` / `agentGetRequest(...)` = 在请求执行后查看异步结果
|
|
139
139
|
- `ownerListRequests()` / `ownerGetRequest(...)` = owner 查看完整请求记录,用于决定是否放行 read
|
|
140
|
+
- `read.paths` 只控制哪些响应值可见;响应结构始终可见,`['$']` 表示整个 body 都可见
|
|
140
141
|
|
|
141
142
|
```ts
|
|
142
143
|
const manifest = await agent.agentIntrospect();
|
|
@@ -160,22 +161,19 @@ if (result.status === 'PENDING') {
|
|
|
160
161
|
}
|
|
161
162
|
|
|
162
163
|
client.ownerOnCapabilityState((state) => {
|
|
163
|
-
if (state.
|
|
164
|
+
if (state.writeGrant === null) {
|
|
164
165
|
console.log('收到新的待审批能力状态:', state.requestId);
|
|
165
166
|
}
|
|
166
167
|
});
|
|
167
168
|
|
|
168
|
-
const pending = await client.ownerListCapabilityStates({
|
|
169
|
+
const pending = await client.ownerListCapabilityStates({ writeGranted: false });
|
|
169
170
|
if (pending.length > 0) {
|
|
170
|
-
await client.ownerApproveCapabilityWrite({
|
|
171
|
-
requestId: pending[0].requestId
|
|
172
|
-
});
|
|
173
171
|
await client.ownerAllowAlways({
|
|
174
172
|
requestId: pending[0].requestId
|
|
175
173
|
});
|
|
176
174
|
await client.ownerApproveCapabilityRead({
|
|
177
175
|
requestId: pending[0].requestId,
|
|
178
|
-
read: {
|
|
176
|
+
read: { paths: ['data.id', 'data.status'] }
|
|
179
177
|
});
|
|
180
178
|
}
|
|
181
179
|
```
|