@the-ai-company/cbio-node-runtime 1.63.3 → 1.63.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +48 -209
- package/dist/clients/agent/client.d.ts +18 -40
- package/dist/clients/agent/client.js +22 -109
- package/dist/clients/agent/client.js.map +1 -1
- package/dist/clients/agent/contracts.d.ts +1 -8
- package/dist/clients/agent/index.d.ts +1 -1
- package/dist/clients/owner/client.d.ts +2 -102
- package/dist/clients/owner/client.js +111 -266
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +37 -75
- package/dist/clients/owner/index.d.ts +2 -4
- package/dist/clients/owner/index.js +1 -2
- package/dist/clients/owner/index.js.map +1 -1
- package/dist/internal/id-factory.d.ts +0 -2
- package/dist/internal/id-factory.js +0 -6
- package/dist/internal/id-factory.js.map +1 -1
- package/dist/protocol/identity.d.ts +1 -1
- package/dist/protocol/identity.js +3 -3
- package/dist/protocol/identity.js.map +1 -1
- package/dist/public-types.d.ts +5 -14
- package/dist/public-types.js +1 -8
- package/dist/public-types.js.map +1 -1
- package/dist/runtime/bootstrap.d.ts +1 -3
- package/dist/runtime/bootstrap.js.map +1 -1
- package/dist/runtime/identity.d.ts +2 -2
- package/dist/runtime/identity.js +3 -5
- package/dist/runtime/identity.js.map +1 -1
- package/dist/runtime/index.d.ts +10 -12
- package/dist/runtime/index.js +7 -8
- package/dist/runtime/index.js.map +1 -1
- package/dist/runtime/owner-session.d.ts +7 -6
- package/dist/runtime/owner-session.js +5 -6
- package/dist/runtime/owner-session.js.map +1 -1
- package/dist/storage/fs.d.ts +3 -2
- package/dist/storage/fs.js +8 -5
- package/dist/storage/fs.js.map +1 -1
- package/dist/storage/prefix.d.ts +1 -0
- package/dist/storage/prefix.js +7 -0
- package/dist/storage/prefix.js.map +1 -1
- package/dist/storage/provider.d.ts +2 -0
- package/dist/vault-core/contracts.d.ts +95 -210
- package/dist/vault-core/contracts.js +8 -11
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +119 -62
- package/dist/vault-core/core.js +518 -1180
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.d.ts +22 -44
- package/dist/vault-core/defaults.js +65 -234
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/errors.d.ts +3 -2
- package/dist/vault-core/errors.js.map +1 -1
- package/dist/vault-core/index.d.ts +5 -5
- package/dist/vault-core/index.js +2 -2
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-core/persistence.d.ts +72 -119
- package/dist/vault-core/persistence.js +310 -427
- package/dist/vault-core/persistence.js.map +1 -1
- package/dist/vault-core/ports.d.ts +19 -30
- package/dist/vault-core/read-policy.d.ts +3 -2
- package/dist/vault-core/read-policy.js.map +1 -1
- package/dist/vault-core/tool-metadata.js +2 -2
- package/dist/vault-core/tool-metadata.js.map +1 -1
- package/dist/vault-ingress/defaults.d.ts +4 -2
- package/dist/vault-ingress/defaults.js +14 -8
- package/dist/vault-ingress/defaults.js.map +1 -1
- package/dist/vault-ingress/index.d.ts +39 -119
- package/dist/vault-ingress/index.js +98 -456
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/remote-transport.d.ts +5 -3
- package/dist/vault-ingress/remote-transport.js +8 -28
- package/dist/vault-ingress/remote-transport.js.map +1 -1
- package/docs/ARCHITECTURE.md +39 -22
- package/docs/CUSTODY_MODEL.md +1 -1
- package/docs/IDENTITY_MODEL.md +5 -5
- package/docs/MIGRATION-1.51.md +19 -19
- package/docs/MIGRATION-1.65.md +87 -0
- package/docs/PROCESS_ISOLATION.md +2 -2
- package/docs/REFERENCE.md +42 -224
- package/docs/api/README.md +48 -30
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/OwnerClientError.md +1 -1
- package/docs/api/classes/PersistentVaultAgentIdentityRegistry.md +89 -0
- package/docs/api/classes/PersistentVaultAgentSecretGrantRegistry.md +125 -0
- package/docs/api/classes/PersistentVaultAuditLog.md +65 -0
- package/docs/api/classes/PersistentVaultSecretCustody.md +93 -0
- package/docs/api/classes/PersistentVaultSecretDestinationGrantRegistry.md +125 -0
- package/docs/api/classes/PersistentVaultSecretRepository.md +127 -0
- package/docs/api/classes/VaultCore.md +264 -237
- package/docs/api/classes/VaultCoreError.md +3 -3
- package/docs/api/enumerations/AuditAction.md +143 -0
- package/docs/api/enumerations/AuditOutcome.md +35 -0
- package/docs/api/enumerations/DispatchStatus.md +35 -0
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -15
- package/docs/api/functions/createIdentity.md +2 -2
- package/docs/api/functions/createOwnerClient.md +17 -0
- package/docs/api/functions/createOwnerSession.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +4 -4
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +5 -13
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveRootAgentId.md +17 -0
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +2 -2
- package/docs/api/functions/handleVaultHttpDispatch.md +2 -2
- package/docs/api/functions/initializeVaultCustody.md +7 -3
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +4 -8
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +20 -59
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +12 -44
- package/docs/api/interfaces/AgentIdentity.md +3 -3
- package/docs/api/interfaces/AgentIdentityRecord.md +47 -0
- package/docs/api/interfaces/AgentRequestResult.md +35 -0
- package/docs/api/interfaces/AgentRuntimeManifest.md +55 -0
- package/docs/api/interfaces/AgentSecretGrant.md +41 -0
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentVisibleRequestRecord.md +53 -0
- package/docs/api/interfaces/AgentVisibleSecretRecord.md +65 -0
- package/docs/api/interfaces/AuditEntry.md +83 -0
- package/docs/api/interfaces/CbioRuntime.md +13 -154
- package/docs/api/interfaces/CreateAgentClientOptions.md +4 -10
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/{CreateVaultClientOptions.md → CreateOwnerClientOptions.md} +9 -11
- package/docs/api/interfaces/CreateOwnerSessionOptions.md +3 -121
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +3 -131
- package/docs/api/interfaces/CreateVaultOptions.md +1 -125
- package/docs/api/interfaces/CreatedVault.md +2 -2
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -13
- package/docs/api/interfaces/DispatchAuthorization.md +43 -0
- package/docs/api/interfaces/DispatchInstruction.md +47 -0
- package/docs/api/interfaces/DispatchRequest.md +83 -0
- package/docs/api/interfaces/DispatchResult.md +53 -0
- package/docs/api/interfaces/IStorageProvider.md +13 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +31 -11
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -7
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +2 -2
- package/docs/api/interfaces/OwnerClient.md +401 -0
- package/docs/api/interfaces/OwnerCreateSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerRemoveSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerRequestRecord.md +97 -0
- package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
- package/docs/api/interfaces/OwnerSession.md +3 -3
- package/docs/api/interfaces/OwnerUpdateSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerVisibleRequestRecord.md +73 -0
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -125
- package/docs/api/interfaces/RecoveredVault.md +2 -2
- package/docs/api/interfaces/RequestRecord.md +107 -0
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/SecretAlias.md +11 -0
- package/docs/api/interfaces/SecretDestinationGrant.md +41 -0
- package/docs/api/interfaces/SecretId.md +11 -0
- package/docs/api/interfaces/SecretRecord.md +89 -0
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveDispatchInput.md +3 -9
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -5
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGetRequestInput.md +17 -0
- package/docs/api/interfaces/VaultGrantAgentSecretInput.md +23 -0
- package/docs/api/interfaces/VaultGrantSecretDestinationInput.md +23 -0
- package/docs/api/interfaces/VaultId.md +11 -0
- package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
- package/docs/api/interfaces/VaultIssueSessionTokenInput.md +5 -5
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListGrantsInput.md +23 -0
- package/docs/api/interfaces/VaultListRequestsInput.md +17 -0
- package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +2 -2
- package/docs/api/interfaces/VaultPrincipal.md +17 -0
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +7 -7
- package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeAgentSecretInput.md +23 -0
- package/docs/api/interfaces/VaultRevokeSecretDestinationInput.md +23 -0
- package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultService.md +511 -0
- package/docs/api/interfaces/VaultUpdateAgentInput.md +7 -7
- package/docs/api/type-aliases/AgentId.md +7 -0
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/type-aliases/DispatchApprovalDecision.md +7 -0
- package/docs/api/type-aliases/GrantStatus.md +7 -0
- package/docs/api/type-aliases/SecretLifecycleStatus.md +7 -0
- package/docs/api/type-aliases/VaultPrincipalKind.md +7 -0
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +2 -2
- package/docs/es/README.md +3 -3
- package/docs/fr/README.md +3 -3
- package/docs/ja/README.md +5 -5
- package/docs/ko/README.md +5 -5
- package/docs/pt/README.md +3 -3
- package/docs/zh/PROCESS_ISOLATION.md +2 -2
- package/docs/zh/README.md +47 -63
- package/examples/process-isolation.ts +26 -35
- package/package.json +1 -1
- package/docs/api/functions/createOwnerHttpFlowBoundary.md +0 -17
- package/docs/api/functions/createStandardAcquireBoundary.md +0 -31
- package/docs/api/functions/createStandardDispatchBoundary.md +0 -23
- package/docs/api/functions/createVaultClient.md +0 -32
- package/docs/api/functions/deriveIdentityId.md +0 -17
- package/docs/api/functions/wrapVaultCoreAsVaultService.md +0 -31
- package/docs/api/interfaces/AgentSubmitCapabilityRequestInput.md +0 -41
- package/docs/api/interfaces/VaultApproveCapabilityRequestInput.md +0 -23
- package/docs/api/interfaces/VaultClient.md +0 -473
- package/docs/api/interfaces/VaultGrantCapabilityInput.md +0 -79
- package/docs/api/interfaces/VaultGrantCapabilityRequest.md +0 -23
- package/docs/api/interfaces/VaultIdentity.md +0 -11
- package/docs/api/interfaces/VaultListCapabilitiesInput.md +0 -17
- package/docs/api/interfaces/VaultRegisterFlowInput.md +0 -77
- package/docs/api/interfaces/VaultRevokeCapabilityInput.md +0 -23
- package/docs/api/interfaces/VaultSigner.md +0 -21
- package/docs/api/interfaces/VaultSubmitCapabilityRequestInput.md +0 -73
- package/docs/api/type-aliases/AgentCapabilityEnvelope.md +0 -7
- package/docs/api/type-aliases/AgentVisibleSecretRecord.md +0 -7
- package/docs/api/type-aliases/CreateOwnerClientOptions.md +0 -7
- package/docs/api/type-aliases/OwnerAgentView.md +0 -7
- package/docs/api/type-aliases/OwnerClient.md +0 -13
- package/docs/api/type-aliases/OwnerGrantCapabilityInput.md +0 -7
- package/docs/api/type-aliases/OwnerPendingApprovalView.md +0 -7
- package/docs/api/type-aliases/OwnerRequestDetailView.md +0 -7
- package/docs/api/type-aliases/OwnerRequestSummaryView.md +0 -7
- package/docs/api/type-aliases/OwnerSecretView.md +0 -7
|
@@ -1,473 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultClient
|
|
6
|
-
|
|
7
|
-
A client for vault owners to manage secrets, agents, and capabilities.
|
|
8
|
-
In Sovereign Vault model, administrative actions are implicitly authorized by the working key.
|
|
9
|
-
|
|
10
|
-
## Methods
|
|
11
|
-
|
|
12
|
-
### ownerAllowAlways()
|
|
13
|
-
|
|
14
|
-
> **ownerAllowAlways**(`input`): `Promise`\<`DispatchResult`\>
|
|
15
|
-
|
|
16
|
-
#### Parameters
|
|
17
|
-
|
|
18
|
-
##### input
|
|
19
|
-
|
|
20
|
-
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
21
|
-
|
|
22
|
-
#### Returns
|
|
23
|
-
|
|
24
|
-
`Promise`\<`DispatchResult`\>
|
|
25
|
-
|
|
26
|
-
***
|
|
27
|
-
|
|
28
|
-
### ownerAllowOnce()
|
|
29
|
-
|
|
30
|
-
> **ownerAllowOnce**(`input`): `Promise`\<`DispatchResult`\>
|
|
31
|
-
|
|
32
|
-
#### Parameters
|
|
33
|
-
|
|
34
|
-
##### input
|
|
35
|
-
|
|
36
|
-
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
37
|
-
|
|
38
|
-
#### Returns
|
|
39
|
-
|
|
40
|
-
`Promise`\<`DispatchResult`\>
|
|
41
|
-
|
|
42
|
-
***
|
|
43
|
-
|
|
44
|
-
### ownerApproveCapabilityRead()
|
|
45
|
-
|
|
46
|
-
> **ownerApproveCapabilityRead**(`input`): `Promise`\<`CapabilityStateRecord`\>
|
|
47
|
-
|
|
48
|
-
#### Parameters
|
|
49
|
-
|
|
50
|
-
##### input
|
|
51
|
-
|
|
52
|
-
[`VaultApproveCapabilityRequestInput`](VaultApproveCapabilityRequestInput.md)
|
|
53
|
-
|
|
54
|
-
#### Returns
|
|
55
|
-
|
|
56
|
-
`Promise`\<`CapabilityStateRecord`\>
|
|
57
|
-
|
|
58
|
-
***
|
|
59
|
-
|
|
60
|
-
### ownerCreateAgent()
|
|
61
|
-
|
|
62
|
-
> **ownerCreateAgent**(`input`): `Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
|
63
|
-
|
|
64
|
-
Generates a new identity and registers it as an agent in one step.
|
|
65
|
-
The private key is stored in the vault for managed custody.
|
|
66
|
-
|
|
67
|
-
#### Parameters
|
|
68
|
-
|
|
69
|
-
##### input
|
|
70
|
-
|
|
71
|
-
[`VaultCreateAgentInput`](VaultCreateAgentInput.md)
|
|
72
|
-
|
|
73
|
-
#### Returns
|
|
74
|
-
|
|
75
|
-
`Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
|
76
|
-
|
|
77
|
-
***
|
|
78
|
-
|
|
79
|
-
### ownerCreateSecret()
|
|
80
|
-
|
|
81
|
-
> **ownerCreateSecret**(`input`): `Promise`\<`SecretRecord`\>
|
|
82
|
-
|
|
83
|
-
Inserts a new active secret into the vault.
|
|
84
|
-
|
|
85
|
-
#### Parameters
|
|
86
|
-
|
|
87
|
-
##### input
|
|
88
|
-
|
|
89
|
-
[`OwnerCreateSecretInput`](OwnerCreateSecretInput.md)
|
|
90
|
-
|
|
91
|
-
#### Returns
|
|
92
|
-
|
|
93
|
-
`Promise`\<`SecretRecord`\>
|
|
94
|
-
|
|
95
|
-
***
|
|
96
|
-
|
|
97
|
-
### ownerDeny()
|
|
98
|
-
|
|
99
|
-
> **ownerDeny**(`requestId`): `Promise`\<`CapabilityStateRecord`\>
|
|
100
|
-
|
|
101
|
-
#### Parameters
|
|
102
|
-
|
|
103
|
-
##### requestId
|
|
104
|
-
|
|
105
|
-
`string`
|
|
106
|
-
|
|
107
|
-
#### Returns
|
|
108
|
-
|
|
109
|
-
`Promise`\<`CapabilityStateRecord`\>
|
|
110
|
-
|
|
111
|
-
***
|
|
112
|
-
|
|
113
|
-
### ownerExportSecret()
|
|
114
|
-
|
|
115
|
-
> **ownerExportSecret**(`input`): `Promise`\<`OwnerSecretExport`\>
|
|
116
|
-
|
|
117
|
-
Exports a secret's plaintext.
|
|
118
|
-
|
|
119
|
-
#### Parameters
|
|
120
|
-
|
|
121
|
-
##### input
|
|
122
|
-
|
|
123
|
-
[`VaultExportSecretInput`](VaultExportSecretInput.md)
|
|
124
|
-
|
|
125
|
-
#### Returns
|
|
126
|
-
|
|
127
|
-
`Promise`\<`OwnerSecretExport`\>
|
|
128
|
-
|
|
129
|
-
***
|
|
130
|
-
|
|
131
|
-
### ownerGetRequest()
|
|
132
|
-
|
|
133
|
-
> **ownerGetRequest**(`input`): `Promise`\<`OwnerRequestRecord`\>
|
|
134
|
-
|
|
135
|
-
#### Parameters
|
|
136
|
-
|
|
137
|
-
##### input
|
|
138
|
-
|
|
139
|
-
`VaultGetRequestInput`
|
|
140
|
-
|
|
141
|
-
#### Returns
|
|
142
|
-
|
|
143
|
-
`Promise`\<`OwnerRequestRecord`\>
|
|
144
|
-
|
|
145
|
-
***
|
|
146
|
-
|
|
147
|
-
### ownerGrantCapability()
|
|
148
|
-
|
|
149
|
-
> **ownerGrantCapability**(`input`): `Promise`\<`AgentCapability`\>
|
|
150
|
-
|
|
151
|
-
Grants a specific capability to an agent.
|
|
152
|
-
|
|
153
|
-
#### Parameters
|
|
154
|
-
|
|
155
|
-
##### input
|
|
156
|
-
|
|
157
|
-
[`OwnerGrantCapabilityInput`](../type-aliases/OwnerGrantCapabilityInput.md)
|
|
158
|
-
|
|
159
|
-
#### Returns
|
|
160
|
-
|
|
161
|
-
`Promise`\<`AgentCapability`\>
|
|
162
|
-
|
|
163
|
-
***
|
|
164
|
-
|
|
165
|
-
### ownerImportAgent()
|
|
166
|
-
|
|
167
|
-
> **ownerImportAgent**(`input`): `Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
|
168
|
-
|
|
169
|
-
#### Parameters
|
|
170
|
-
|
|
171
|
-
##### input
|
|
172
|
-
|
|
173
|
-
[`VaultImportAgentInput`](VaultImportAgentInput.md)
|
|
174
|
-
|
|
175
|
-
#### Returns
|
|
176
|
-
|
|
177
|
-
`Promise`\<[`OwnerAgentProvisionResult`](OwnerAgentProvisionResult.md)\>
|
|
178
|
-
|
|
179
|
-
***
|
|
180
|
-
|
|
181
|
-
### ownerIssueAllSessionTokens()
|
|
182
|
-
|
|
183
|
-
> **ownerIssueAllSessionTokens**(): `Promise`\<readonly `OwnerSessionToken`[]\>
|
|
184
|
-
|
|
185
|
-
#### Returns
|
|
186
|
-
|
|
187
|
-
`Promise`\<readonly `OwnerSessionToken`[]\>
|
|
188
|
-
|
|
189
|
-
***
|
|
190
|
-
|
|
191
|
-
### ownerIssueSessionToken()
|
|
192
|
-
|
|
193
|
-
> **ownerIssueSessionToken**(`input`): `Promise`\<`OwnerSessionToken`\>
|
|
194
|
-
|
|
195
|
-
#### Parameters
|
|
196
|
-
|
|
197
|
-
##### input
|
|
198
|
-
|
|
199
|
-
[`VaultIssueSessionTokenInput`](VaultIssueSessionTokenInput.md)
|
|
200
|
-
|
|
201
|
-
#### Returns
|
|
202
|
-
|
|
203
|
-
`Promise`\<`OwnerSessionToken`\>
|
|
204
|
-
|
|
205
|
-
***
|
|
206
|
-
|
|
207
|
-
### ownerListAgents()
|
|
208
|
-
|
|
209
|
-
> **ownerListAgents**(`input?`): `Promise`\<readonly `AgentIdentityRecord`[]\>
|
|
210
|
-
|
|
211
|
-
Lists all agents registered in the vault.
|
|
212
|
-
|
|
213
|
-
#### Parameters
|
|
214
|
-
|
|
215
|
-
##### input?
|
|
216
|
-
|
|
217
|
-
[`VaultListAgentsInput`](VaultListAgentsInput.md)
|
|
218
|
-
|
|
219
|
-
#### Returns
|
|
220
|
-
|
|
221
|
-
`Promise`\<readonly `AgentIdentityRecord`[]\>
|
|
222
|
-
|
|
223
|
-
***
|
|
224
|
-
|
|
225
|
-
### ownerListCapabilities()
|
|
226
|
-
|
|
227
|
-
> **ownerListCapabilities**(`input?`): `Promise`\<readonly `AgentCapability`[]\>
|
|
228
|
-
|
|
229
|
-
Lists all active capabilities granted to agents.
|
|
230
|
-
|
|
231
|
-
#### Parameters
|
|
232
|
-
|
|
233
|
-
##### input?
|
|
234
|
-
|
|
235
|
-
[`VaultListCapabilitiesInput`](VaultListCapabilitiesInput.md)
|
|
236
|
-
|
|
237
|
-
#### Returns
|
|
238
|
-
|
|
239
|
-
`Promise`\<readonly `AgentCapability`[]\>
|
|
240
|
-
|
|
241
|
-
***
|
|
242
|
-
|
|
243
|
-
### ownerListCapabilityStates()
|
|
244
|
-
|
|
245
|
-
> **ownerListCapabilityStates**(`input?`): `Promise`\<readonly `CapabilityStateRecord`[]\>
|
|
246
|
-
|
|
247
|
-
#### Parameters
|
|
248
|
-
|
|
249
|
-
##### input?
|
|
250
|
-
|
|
251
|
-
`VaultListCapabilityStatesInput`
|
|
252
|
-
|
|
253
|
-
#### Returns
|
|
254
|
-
|
|
255
|
-
`Promise`\<readonly `CapabilityStateRecord`[]\>
|
|
256
|
-
|
|
257
|
-
***
|
|
258
|
-
|
|
259
|
-
### ownerListRequests()
|
|
260
|
-
|
|
261
|
-
> **ownerListRequests**(`input?`): `Promise`\<readonly `OwnerVisibleRequestRecord`[]\>
|
|
262
|
-
|
|
263
|
-
#### Parameters
|
|
264
|
-
|
|
265
|
-
##### input?
|
|
266
|
-
|
|
267
|
-
`VaultListRequestsInput`
|
|
268
|
-
|
|
269
|
-
#### Returns
|
|
270
|
-
|
|
271
|
-
`Promise`\<readonly `OwnerVisibleRequestRecord`[]\>
|
|
272
|
-
|
|
273
|
-
***
|
|
274
|
-
|
|
275
|
-
### ownerListSecrets()
|
|
276
|
-
|
|
277
|
-
> **ownerListSecrets**(`input?`): `Promise`\<readonly `AgentVisibleSecretRecord`[]\>
|
|
278
|
-
|
|
279
|
-
#### Parameters
|
|
280
|
-
|
|
281
|
-
##### input?
|
|
282
|
-
|
|
283
|
-
[`VaultListSecretsInput`](VaultListSecretsInput.md)
|
|
284
|
-
|
|
285
|
-
#### Returns
|
|
286
|
-
|
|
287
|
-
`Promise`\<readonly `AgentVisibleSecretRecord`[]\>
|
|
288
|
-
|
|
289
|
-
***
|
|
290
|
-
|
|
291
|
-
### ownerOnCapabilityState()
|
|
292
|
-
|
|
293
|
-
> **ownerOnCapabilityState**(`callback`): () => `void`
|
|
294
|
-
|
|
295
|
-
#### Parameters
|
|
296
|
-
|
|
297
|
-
##### callback
|
|
298
|
-
|
|
299
|
-
(`record`) => `void`
|
|
300
|
-
|
|
301
|
-
#### Returns
|
|
302
|
-
|
|
303
|
-
() => `void`
|
|
304
|
-
|
|
305
|
-
***
|
|
306
|
-
|
|
307
|
-
### ownerReadAgentPrivateKey()
|
|
308
|
-
|
|
309
|
-
> **ownerReadAgentPrivateKey**(`input`): `Promise`\<`string`\>
|
|
310
|
-
|
|
311
|
-
#### Parameters
|
|
312
|
-
|
|
313
|
-
##### input
|
|
314
|
-
|
|
315
|
-
[`VaultReadAgentPrivateKeyInput`](VaultReadAgentPrivateKeyInput.md)
|
|
316
|
-
|
|
317
|
-
#### Returns
|
|
318
|
-
|
|
319
|
-
`Promise`\<`string`\>
|
|
320
|
-
|
|
321
|
-
***
|
|
322
|
-
|
|
323
|
-
### ownerReadAudit()
|
|
324
|
-
|
|
325
|
-
> **ownerReadAudit**(`query?`): `Promise`\<readonly `AuditEntry`[]\>
|
|
326
|
-
|
|
327
|
-
Reads the tamper-evident audit log for the vault.
|
|
328
|
-
|
|
329
|
-
#### Parameters
|
|
330
|
-
|
|
331
|
-
##### query?
|
|
332
|
-
|
|
333
|
-
[`VaultAuditQueryInput`](VaultAuditQueryInput.md)
|
|
334
|
-
|
|
335
|
-
#### Returns
|
|
336
|
-
|
|
337
|
-
`Promise`\<readonly `AuditEntry`[]\>
|
|
338
|
-
|
|
339
|
-
***
|
|
340
|
-
|
|
341
|
-
### ownerReadSecretPlaintext()
|
|
342
|
-
|
|
343
|
-
> **ownerReadSecretPlaintext**(`input`): `Promise`\<`string`\>
|
|
344
|
-
|
|
345
|
-
#### Parameters
|
|
346
|
-
|
|
347
|
-
##### input
|
|
348
|
-
|
|
349
|
-
[`VaultReadSecretPlaintextInput`](VaultReadSecretPlaintextInput.md)
|
|
350
|
-
|
|
351
|
-
#### Returns
|
|
352
|
-
|
|
353
|
-
`Promise`\<`string`\>
|
|
354
|
-
|
|
355
|
-
***
|
|
356
|
-
|
|
357
|
-
### ownerRegisterFlow()
|
|
358
|
-
|
|
359
|
-
> **ownerRegisterFlow**(`input`): `Promise`\<`CustomHttpFlowDefinition`\>
|
|
360
|
-
|
|
361
|
-
Registers a reusable HTTP request template for complex secret exchange patterns.
|
|
362
|
-
|
|
363
|
-
#### Parameters
|
|
364
|
-
|
|
365
|
-
##### input
|
|
366
|
-
|
|
367
|
-
[`VaultRegisterFlowInput`](VaultRegisterFlowInput.md)
|
|
368
|
-
|
|
369
|
-
#### Returns
|
|
370
|
-
|
|
371
|
-
`Promise`\<`CustomHttpFlowDefinition`\>
|
|
372
|
-
|
|
373
|
-
***
|
|
374
|
-
|
|
375
|
-
### ownerRemoveSecret()
|
|
376
|
-
|
|
377
|
-
> **ownerRemoveSecret**(`input`): `Promise`\<`void`\>
|
|
378
|
-
|
|
379
|
-
Logically removes the current active secret.
|
|
380
|
-
|
|
381
|
-
#### Parameters
|
|
382
|
-
|
|
383
|
-
##### input
|
|
384
|
-
|
|
385
|
-
[`OwnerRemoveSecretInput`](OwnerRemoveSecretInput.md)
|
|
386
|
-
|
|
387
|
-
#### Returns
|
|
388
|
-
|
|
389
|
-
`Promise`\<`void`\>
|
|
390
|
-
|
|
391
|
-
***
|
|
392
|
-
|
|
393
|
-
### ownerRevokeCapability()
|
|
394
|
-
|
|
395
|
-
> **ownerRevokeCapability**(`input`): `Promise`\<`void`\>
|
|
396
|
-
|
|
397
|
-
Revokes a previously granted capability.
|
|
398
|
-
|
|
399
|
-
#### Parameters
|
|
400
|
-
|
|
401
|
-
##### input
|
|
402
|
-
|
|
403
|
-
[`VaultRevokeCapabilityInput`](VaultRevokeCapabilityInput.md)
|
|
404
|
-
|
|
405
|
-
#### Returns
|
|
406
|
-
|
|
407
|
-
`Promise`\<`void`\>
|
|
408
|
-
|
|
409
|
-
***
|
|
410
|
-
|
|
411
|
-
### ownerRevokeSessionToken()
|
|
412
|
-
|
|
413
|
-
> **ownerRevokeSessionToken**(`input`): `Promise`\<`void`\>
|
|
414
|
-
|
|
415
|
-
#### Parameters
|
|
416
|
-
|
|
417
|
-
##### input
|
|
418
|
-
|
|
419
|
-
[`VaultRevokeSessionTokenInput`](VaultRevokeSessionTokenInput.md)
|
|
420
|
-
|
|
421
|
-
#### Returns
|
|
422
|
-
|
|
423
|
-
`Promise`\<`void`\>
|
|
424
|
-
|
|
425
|
-
***
|
|
426
|
-
|
|
427
|
-
### ownerSubmitCapabilityRequest()
|
|
428
|
-
|
|
429
|
-
> **ownerSubmitCapabilityRequest**(`input`): `Promise`\<`CapabilityStateRecord`\>
|
|
430
|
-
|
|
431
|
-
#### Parameters
|
|
432
|
-
|
|
433
|
-
##### input
|
|
434
|
-
|
|
435
|
-
[`VaultSubmitCapabilityRequestInput`](VaultSubmitCapabilityRequestInput.md)
|
|
436
|
-
|
|
437
|
-
#### Returns
|
|
438
|
-
|
|
439
|
-
`Promise`\<`CapabilityStateRecord`\>
|
|
440
|
-
|
|
441
|
-
***
|
|
442
|
-
|
|
443
|
-
### ownerUpdateAgent()
|
|
444
|
-
|
|
445
|
-
> **ownerUpdateAgent**(`input`): `Promise`\<`AgentIdentityRecord`\>
|
|
446
|
-
|
|
447
|
-
#### Parameters
|
|
448
|
-
|
|
449
|
-
##### input
|
|
450
|
-
|
|
451
|
-
[`VaultUpdateAgentInput`](VaultUpdateAgentInput.md)
|
|
452
|
-
|
|
453
|
-
#### Returns
|
|
454
|
-
|
|
455
|
-
`Promise`\<`AgentIdentityRecord`\>
|
|
456
|
-
|
|
457
|
-
***
|
|
458
|
-
|
|
459
|
-
### ownerUpdateSecret()
|
|
460
|
-
|
|
461
|
-
> **ownerUpdateSecret**(`input`): `Promise`\<`SecretRecord`\>
|
|
462
|
-
|
|
463
|
-
Inserts a new successor secret and marks the previous active version as superseded.
|
|
464
|
-
|
|
465
|
-
#### Parameters
|
|
466
|
-
|
|
467
|
-
##### input
|
|
468
|
-
|
|
469
|
-
[`OwnerUpdateSecretInput`](OwnerUpdateSecretInput.md)
|
|
470
|
-
|
|
471
|
-
#### Returns
|
|
472
|
-
|
|
473
|
-
`Promise`\<`SecretRecord`\>
|
|
@@ -1,79 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultGrantCapabilityInput
|
|
6
|
-
|
|
7
|
-
## Properties
|
|
8
|
-
|
|
9
|
-
### agentId
|
|
10
|
-
|
|
11
|
-
> **agentId**: `string`
|
|
12
|
-
|
|
13
|
-
***
|
|
14
|
-
|
|
15
|
-
### auditRequired?
|
|
16
|
-
|
|
17
|
-
> `optional` **auditRequired?**: `boolean`
|
|
18
|
-
|
|
19
|
-
***
|
|
20
|
-
|
|
21
|
-
### customFlowId?
|
|
22
|
-
|
|
23
|
-
> `optional` **customFlowId?**: `string`
|
|
24
|
-
|
|
25
|
-
***
|
|
26
|
-
|
|
27
|
-
### expiresAt?
|
|
28
|
-
|
|
29
|
-
> `optional` **expiresAt?**: `string`
|
|
30
|
-
|
|
31
|
-
***
|
|
32
|
-
|
|
33
|
-
### expiresIn?
|
|
34
|
-
|
|
35
|
-
> `optional` **expiresIn?**: `number`
|
|
36
|
-
|
|
37
|
-
***
|
|
38
|
-
|
|
39
|
-
### operation?
|
|
40
|
-
|
|
41
|
-
> `optional` **operation?**: `string`
|
|
42
|
-
|
|
43
|
-
***
|
|
44
|
-
|
|
45
|
-
### rateLimit?
|
|
46
|
-
|
|
47
|
-
> `optional` **rateLimit?**: `object`
|
|
48
|
-
|
|
49
|
-
#### maxRequests
|
|
50
|
-
|
|
51
|
-
> **maxRequests**: `number`
|
|
52
|
-
|
|
53
|
-
#### windowMs
|
|
54
|
-
|
|
55
|
-
> **windowMs**: `number`
|
|
56
|
-
|
|
57
|
-
***
|
|
58
|
-
|
|
59
|
-
### read
|
|
60
|
-
|
|
61
|
-
> **read**: `CapabilityReadPolicy`
|
|
62
|
-
|
|
63
|
-
***
|
|
64
|
-
|
|
65
|
-
### requestedAt?
|
|
66
|
-
|
|
67
|
-
> `optional` **requestedAt?**: `string`
|
|
68
|
-
|
|
69
|
-
***
|
|
70
|
-
|
|
71
|
-
### skipAudit?
|
|
72
|
-
|
|
73
|
-
> `optional` **skipAudit?**: `boolean`
|
|
74
|
-
|
|
75
|
-
***
|
|
76
|
-
|
|
77
|
-
### write
|
|
78
|
-
|
|
79
|
-
> **write**: `CapabilityWritePolicy`
|
|
@@ -1,23 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultGrantCapabilityRequest
|
|
6
|
-
|
|
7
|
-
## Properties
|
|
8
|
-
|
|
9
|
-
### capability
|
|
10
|
-
|
|
11
|
-
> **capability**: `AgentCapability` & `object`
|
|
12
|
-
|
|
13
|
-
#### Type Declaration
|
|
14
|
-
|
|
15
|
-
##### auditRequired?
|
|
16
|
-
|
|
17
|
-
> `optional` **auditRequired?**: `boolean`
|
|
18
|
-
|
|
19
|
-
***
|
|
20
|
-
|
|
21
|
-
### requestedAt?
|
|
22
|
-
|
|
23
|
-
> `optional` **requestedAt?**: `string`
|
|
@@ -1,17 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultListCapabilitiesInput
|
|
6
|
-
|
|
7
|
-
## Properties
|
|
8
|
-
|
|
9
|
-
### agentId?
|
|
10
|
-
|
|
11
|
-
> `optional` **agentId?**: `string`
|
|
12
|
-
|
|
13
|
-
***
|
|
14
|
-
|
|
15
|
-
### requestedAt?
|
|
16
|
-
|
|
17
|
-
> `optional` **requestedAt?**: `string`
|
|
@@ -1,77 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultRegisterFlowInput
|
|
6
|
-
|
|
7
|
-
## Extends
|
|
8
|
-
|
|
9
|
-
- `OwnerHttpFlowBoundary`
|
|
10
|
-
|
|
11
|
-
## Properties
|
|
12
|
-
|
|
13
|
-
### method
|
|
14
|
-
|
|
15
|
-
> **method**: `string`
|
|
16
|
-
|
|
17
|
-
#### Inherited from
|
|
18
|
-
|
|
19
|
-
`OwnerHttpFlowBoundary.method`
|
|
20
|
-
|
|
21
|
-
***
|
|
22
|
-
|
|
23
|
-
### mode
|
|
24
|
-
|
|
25
|
-
> **mode**: `"acquire_secret"` \| `"send_secret"` \| `"bidirectional_secret"`
|
|
26
|
-
|
|
27
|
-
#### Inherited from
|
|
28
|
-
|
|
29
|
-
`OwnerHttpFlowBoundary.mode`
|
|
30
|
-
|
|
31
|
-
***
|
|
32
|
-
|
|
33
|
-
### requestedAt?
|
|
34
|
-
|
|
35
|
-
> `optional` **requestedAt?**: `string`
|
|
36
|
-
|
|
37
|
-
***
|
|
38
|
-
|
|
39
|
-
### responseSecret?
|
|
40
|
-
|
|
41
|
-
> `optional` **responseSecret?**: `object`
|
|
42
|
-
|
|
43
|
-
#### field
|
|
44
|
-
|
|
45
|
-
> **field**: `string`
|
|
46
|
-
|
|
47
|
-
#### kind
|
|
48
|
-
|
|
49
|
-
> **kind**: `"json_field"`
|
|
50
|
-
|
|
51
|
-
#### storeAlias
|
|
52
|
-
|
|
53
|
-
> **storeAlias**: `string`
|
|
54
|
-
|
|
55
|
-
#### Inherited from
|
|
56
|
-
|
|
57
|
-
`OwnerHttpFlowBoundary.responseSecret`
|
|
58
|
-
|
|
59
|
-
***
|
|
60
|
-
|
|
61
|
-
### responseVisibility
|
|
62
|
-
|
|
63
|
-
> **responseVisibility**: `"passthrough"` \| `"shape_only"`
|
|
64
|
-
|
|
65
|
-
#### Inherited from
|
|
66
|
-
|
|
67
|
-
`OwnerHttpFlowBoundary.responseVisibility`
|
|
68
|
-
|
|
69
|
-
***
|
|
70
|
-
|
|
71
|
-
### targetUrl
|
|
72
|
-
|
|
73
|
-
> **targetUrl**: `string`
|
|
74
|
-
|
|
75
|
-
#### Inherited from
|
|
76
|
-
|
|
77
|
-
`OwnerHttpFlowBoundary.targetUrl`
|
|
@@ -1,23 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultRevokeCapabilityInput
|
|
6
|
-
|
|
7
|
-
## Properties
|
|
8
|
-
|
|
9
|
-
### agentId
|
|
10
|
-
|
|
11
|
-
> **agentId**: `string`
|
|
12
|
-
|
|
13
|
-
***
|
|
14
|
-
|
|
15
|
-
### capabilityId
|
|
16
|
-
|
|
17
|
-
> **capabilityId**: `string`
|
|
18
|
-
|
|
19
|
-
***
|
|
20
|
-
|
|
21
|
-
### requestedAt?
|
|
22
|
-
|
|
23
|
-
> `optional` **requestedAt?**: `string`
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.63.3**](../README.md)
|
|
2
|
-
|
|
3
|
-
***
|
|
4
|
-
|
|
5
|
-
# Interface: VaultSigner
|
|
6
|
-
|
|
7
|
-
## Methods
|
|
8
|
-
|
|
9
|
-
### sign()
|
|
10
|
-
|
|
11
|
-
> **sign**(`input`): `Promise`\<`string`\>
|
|
12
|
-
|
|
13
|
-
#### Parameters
|
|
14
|
-
|
|
15
|
-
##### input
|
|
16
|
-
|
|
17
|
-
`string`
|
|
18
|
-
|
|
19
|
-
#### Returns
|
|
20
|
-
|
|
21
|
-
`Promise`\<`string`\>
|