@the-ai-company/cbio-node-runtime 1.63.7 → 1.64.0

package/docs/api/type-aliases/GrantStatus.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.63.7**](../README.md)
+[**CBIO Node Runtime Agent API v1.64.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/SecretLifecycleStatus.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.63.7**](../README.md)
+[**CBIO Node Runtime Agent API v1.64.0**](../README.md)
 
 ***
 

package/docs/api/type-aliases/VaultPrincipalKind.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.63.7**](../README.md)
+[**CBIO Node Runtime Agent API v1.64.0**](../README.md)
 
 ***
 

package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md

@@ -1,4 +1,4 @@
-[**CBIO Node Runtime Agent API v1.63.7**](../README.md)
+[**CBIO Node Runtime Agent API v1.64.0**](../README.md)
 
 ***
 

package/docs/zh/README.md

@@ -1,6 +1,6 @@
 # cbio Vault Runtime（中文文档）
 
-cbio Vault Runtime 采用 **Sovereign Vault（主权保险箱）** 架构：管理权限扎根于主密码，Agent 身份与机密材料由保险箱加密托管。
+cbio Vault Runtime 采用 **Vault（保险箱）** 架构：管理权限扎根于主密码，Agent 身份与机密材料由保险箱加密托管。
 
 ---
 
@@ -97,12 +97,18 @@ const sessionToken = createdAgent.sessionToken;
 v1.65+ 采用了简化的 **Grant（授权）** 模型，通过白名单控制访问：
 
 ```ts
-// 1. 创建机密
+// 1. 创建机密（严格语义：别名重复则报错）
 const record = await client.ownerCreateSecret({
   alias: 'api-token',
   plaintext: 'secret-value'
 });
 
+// 1b. 批量创建（原子性：全部成功或全部失败）
+await client.ownerCreateSecret([
+  { alias: 'stripe-key', plaintext: 'sk_test_...' },
+  { alias: 'openai-key', plaintext: 'sk-proj-...' }
+]);
+
 // 2. 授权 Agent 使用该机密
 await client.ownerGrantAgentSecret({
   rootAgentId,
@@ -112,7 +118,7 @@ await client.ownerGrantAgentSecret({
 // 3. 授权该机密可发送至的目标域名
 await client.ownerGrantSecretDestination({
   secretAlias: 'api-token',
-  domain: 'api.example.com',
+  siteId: 'api.example.com',
 });
 ```
 

package/examples/process-isolation.ts

@@ -74,8 +74,8 @@ async function runAgentDemo(port: number, agentRecord: any, token: string) {
   
   try {
     const result = await agentClient.agentDispatch({
-      secretAlias: "api-token",
-      targetUrl: "https://httpbin.org/post",
+      secret_alias: "api-token",
+      target_url: "https://httpbin.org/post",
       method: "POST",
       reason: "LLM agent needs to perform isolated dispatch",
       body: JSON.stringify({ message: "Hello from isolated Process A" }),
@@ -101,48 +101,48 @@ async function main() {
   
   // Owner registers the agent and a grant (simulated local call for setup)
   await vault.ownerRegisterAgentIdentity({
-    vaultId: vault.vaultId,
-    requestId: `setup:${Date.now()}:register_agent`,
-    owner: { kind: "owner", id: ownerIdentity.rootAgentId },
+    vault_id: vault.vault_id,
+    request_id: `setup:${Date.now()}:register_agent`,
+    owner: { kind: "owner", id: ownerIdentity.root_agent_id },
     agentRecord: {
-      vaultId: vault.vaultId,
-      rootAgentId: agentRecord.rootAgentId,
-      publicKey: agentRecord.publicKey,
+      vault_id: vault.vault_id,
+      root_agent_id: agentRecord.root_agent_id,
+      public_key: agentRecord.public_key,
     },
-    requestedAt: new Date().toISOString(),
+    requested_at: new Date().toISOString(),
   });
 
   // Owner writes a secret (simulated local call for setup)
   const secret = await vault.ownerCreateSecret({
     kind: "owner.create_secret",
-    vaultId: vault.vaultId,
-    requestId: `setup:${Date.now()}:write_secret`,
-    owner: { kind: "owner", id: ownerIdentity.rootAgentId },
+    vault_id: vault.vault_id,
+    request_id: `setup:${Date.now()}:write_secret`,
+    owner: { kind: "owner", id: ownerIdentity.root_agent_id },
     alias: "api-token",
     plaintext: "SK-PROD-12345",
     source: { kind: "manual" },
-    requestedAt: new Date().toISOString(),
+    requested_at: new Date().toISOString(),
   });
 
   // Owner grants permissions (New Grant-based API)
   await vault.ownerGrantAgentSecret(
-    { kind: "owner", id: ownerIdentity.rootAgentId },
-    agentRecord.rootAgentId,
+    { kind: "owner", id: ownerIdentity.root_agent_id },
+    agentRecord.root_agent_id,
     "api-token"
   );
 
   await vault.ownerGrantSecretDestination(
-    { kind: "owner", id: ownerIdentity.rootAgentId },
+    { kind: "owner", id: ownerIdentity.root_agent_id },
     "api-token",
     "httpbin.org"
   );
 
   const session = await vault.ownerIssueSessionToken({
-    vaultId: vault.vaultId,
-    requestId: `setup:${Date.now()}:issue_session_token`,
-    actor: { kind: "owner", id: ownerIdentity.rootAgentId },
-    rootAgentId: agentRecord.rootAgentId,
-    requestedAt: new Date().toISOString(),
+    vault_id: vault.vault_id,
+    request_id: `setup:${Date.now()}:issue_session_token`,
+    actor: { kind: "owner", id: ownerIdentity.root_agent_id },
+    root_agent_id: agentRecord.root_agent_id,
+    requested_at: new Date().toISOString(),
   });
 
   // 3. Run the "LLM Agent" (Process A)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-ai-company/cbio-node-runtime",
-  "version": "1.63.7",
+  "version": "1.64.0",
   "publishConfig": {
     "access": "public"
   },
@@ -28,7 +28,7 @@
   "scripts": {
     "build": "tsc",
     "build:docs": "npx typedoc --options typedoc.json",
-    "release": "npx standard-version && npm publish",
+    "release": "npm test && npx standard-version && npm publish",
     "prepare": "npm run build && npm run build:docs",
     "test": "npm run build && npm run test:types && npm run test:acceptance",
     "test:types": "tsc -p tsconfig.type-tests.json --noEmit",

package/docs/api/enumerations/AuditAction.md

@@ -1,143 +0,0 @@
-[**CBIO Node Runtime Agent API v1.63.7**](../README.md)
-
-***
-
-# Enumeration: AuditAction
-
-## Enumeration Members
-
-### APPROVE\_DISPATCH
-
-> **APPROVE\_DISPATCH**: `"APPROVE_DISPATCH"`
-
-***
-
-### DELETE\_SECRET
-
-> **DELETE\_SECRET**: `"DELETE_SECRET"`
-
-***
-
-### DISPATCH\_SECRET
-
-> **DISPATCH\_SECRET**: `"DISPATCH_SECRET"`
-
-***
-
-### EVALUATE\_DISPATCH\_POLICY
-
-> **EVALUATE\_DISPATCH\_POLICY**: `"EVALUATE_DISPATCH_POLICY"`
-
-***
-
-### EXPORT\_SECRET
-
-> **EXPORT\_SECRET**: `"EXPORT_SECRET"`
-
-***
-
-### GRANT\_AGENT\_SECRET
-
-> **GRANT\_AGENT\_SECRET**: `"GRANT_AGENT_SECRET"`
-
-***
-
-### GRANT\_SECRET\_DESTINATION
-
-> **GRANT\_SECRET\_DESTINATION**: `"GRANT_SECRET_DESTINATION"`
-
-***
-
-### ISSUE\_SESSION\_TOKEN
-
-> **ISSUE\_SESSION\_TOKEN**: `"ISSUE_SESSION_TOKEN"`
-
-***
-
-### LIST\_AGENTS
-
-> **LIST\_AGENTS**: `"LIST_AGENTS"`
-
-***
-
-### LIST\_GRANTS
-
-> **LIST\_GRANTS**: `"LIST_GRANTS"`
-
-***
-
-### LIST\_REQUESTS
-
-> **LIST\_REQUESTS**: `"LIST_REQUESTS"`
-
-***
-
-### LIST\_SECRETS
-
-> **LIST\_SECRETS**: `"LIST_SECRETS"`
-
-***
-
-### PENDING\_DISPATCH\_APPROVAL
-
-> **PENDING\_DISPATCH\_APPROVAL**: `"PENDING_DISPATCH_APPROVAL"`
-
-***
-
-### READ\_AUDIT
-
-> **READ\_AUDIT**: `"READ_AUDIT"`
-
-***
-
-### READ\_REQUEST
-
-> **READ\_REQUEST**: `"READ_REQUEST"`
-
-***
-
-### REASSIGN\_ALIAS
-
-> **REASSIGN\_ALIAS**: `"REASSIGN_ALIAS"`
-
-***
-
-### REGISTER\_AGENT\_IDENTITY
-
-> **REGISTER\_AGENT\_IDENTITY**: `"REGISTER_AGENT_IDENTITY"`
-
-***
-
-### REJECT\_DISPATCH
-
-> **REJECT\_DISPATCH**: `"REJECT_DISPATCH"`
-
-***
-
-### REVOKE\_AGENT\_SECRET
-
-> **REVOKE\_AGENT\_SECRET**: `"REVOKE_AGENT_SECRET"`
-
-***
-
-### REVOKE\_SECRET\_DESTINATION
-
-> **REVOKE\_SECRET\_DESTINATION**: `"REVOKE_SECRET_DESTINATION"`
-
-***
-
-### REVOKE\_SESSION\_TOKEN
-
-> **REVOKE\_SESSION\_TOKEN**: `"REVOKE_SESSION_TOKEN"`
-
-***
-
-### UPDATE\_AGENT\_IDENTITY
-
-> **UPDATE\_AGENT\_IDENTITY**: `"UPDATE_AGENT_IDENTITY"`
-
-***
-
-### WRITE\_SECRET
-
-> **WRITE\_SECRET**: `"WRITE_SECRET"`

package/docs/api/enumerations/AuditOutcome.md

@@ -1,35 +0,0 @@
-[**CBIO Node Runtime Agent API v1.63.7**](../README.md)
-
-***
-
-# Enumeration: AuditOutcome
-
-## Enumeration Members
-
-### ALLOWED
-
-> **ALLOWED**: `"ALLOWED"`
-
-***
-
-### DENIED
-
-> **DENIED**: `"DENIED"`
-
-***
-
-### FAILED
-
-> **FAILED**: `"FAILED"`
-
-***
-
-### PENDING
-
-> **PENDING**: `"PENDING"`
-
-***
-
-### SUCCEEDED
-
-> **SUCCEEDED**: `"SUCCEEDED"`