@the-ai-company/cbio-node-runtime 1.69.0 → 1.70.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +24 -0
- package/dist/clients/owner/client.js +9 -0
- package/dist/clients/owner/client.js.map +1 -1
- package/dist/clients/owner/contracts.d.ts +3 -1
- package/dist/public-types.d.ts +2 -1
- package/dist/public-types.js.map +1 -1
- package/dist/runtime/index.d.ts +4 -2
- package/dist/runtime/index.js +1 -1
- package/dist/runtime/index.js.map +1 -1
- package/dist/vault-core/contracts.d.ts +12 -22
- package/dist/vault-core/contracts.js +0 -6
- package/dist/vault-core/contracts.js.map +1 -1
- package/dist/vault-core/core.d.ts +2 -1
- package/dist/vault-core/core.js +39 -15
- package/dist/vault-core/core.js.map +1 -1
- package/dist/vault-core/defaults.d.ts +5 -6
- package/dist/vault-core/defaults.js +47 -15
- package/dist/vault-core/defaults.js.map +1 -1
- package/dist/vault-core/index.d.ts +3 -3
- package/dist/vault-core/index.js +1 -1
- package/dist/vault-core/index.js.map +1 -1
- package/dist/vault-core/persistence.d.ts +33 -37
- package/dist/vault-core/persistence.js +259 -369
- package/dist/vault-core/persistence.js.map +1 -1
- package/dist/vault-core/ports.d.ts +4 -3
- package/dist/vault-ingress/index.d.ts +1 -0
- package/dist/vault-ingress/index.js +3 -0
- package/dist/vault-ingress/index.js.map +1 -1
- package/dist/vault-ingress/server-utils.d.ts +30 -0
- package/dist/vault-ingress/server-utils.js +151 -0
- package/dist/vault-ingress/server-utils.js.map +1 -1
- package/docs/REFERENCE.md +3 -0
- package/docs/api/README.md +5 -2
- package/docs/api/classes/IdentityError.md +1 -1
- package/docs/api/classes/OwnerClientError.md +1 -1
- package/docs/api/classes/PersistentVaultAgentIdentityRegistry.md +5 -5
- package/docs/api/classes/PersistentVaultAgentSecretGrantRegistry.md +5 -5
- package/docs/api/classes/PersistentVaultAuditLog.md +29 -5
- package/docs/api/classes/PersistentVaultSecretCustody.md +5 -5
- package/docs/api/classes/PersistentVaultSecretDestinationGrantRegistry.md +5 -5
- package/docs/api/classes/PersistentVaultSecretRepository.md +5 -5
- package/docs/api/classes/VaultCore.md +17 -1
- package/docs/api/classes/VaultCoreError.md +1 -1
- package/docs/api/enumerations/AuditOperation.md +1 -37
- package/docs/api/enumerations/DispatchStatus.md +1 -1
- package/docs/api/enumerations/IdentityErrorCode.md +1 -1
- package/docs/api/enumerations/OwnerClientErrorCode.md +1 -1
- package/docs/api/functions/createAgentClient.md +1 -1
- package/docs/api/functions/createIdentity.md +1 -1
- package/docs/api/functions/createOwnerClient.md +1 -1
- package/docs/api/functions/createPersistentVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVault.md +1 -1
- package/docs/api/functions/createVaultCore.md +1 -1
- package/docs/api/functions/createVaultCoreDependencies.md +1 -1
- package/docs/api/functions/createVaultService.md +1 -1
- package/docs/api/functions/createWorkspaceStorage.md +1 -1
- package/docs/api/functions/deriveRootAgentId.md +1 -1
- package/docs/api/functions/deriveVaultWorkingKeyFromPassword.md +1 -1
- package/docs/api/functions/getDefaultWorkspaceDir.md +1 -1
- package/docs/api/functions/handleVaultAgentControlHttp.md +1 -1
- package/docs/api/functions/handleVaultAuditSse.md +30 -0
- package/docs/api/functions/handleVaultHttpDispatch.md +1 -1
- package/docs/api/functions/handleVaultPendingDispatchSse.md +30 -0
- package/docs/api/functions/initializeVaultCustody.md +1 -1
- package/docs/api/functions/listVaults.md +1 -1
- package/docs/api/functions/openOwnerSession.md +1 -1
- package/docs/api/functions/readVaultProfile.md +1 -1
- package/docs/api/functions/recoverVault.md +1 -1
- package/docs/api/functions/recoverVaultWorkingKey.md +1 -1
- package/docs/api/functions/restoreIdentity.md +1 -1
- package/docs/api/functions/updateVaultMetadata.md +1 -1
- package/docs/api/functions/writeVaultProfile.md +1 -1
- package/docs/api/interfaces/AgentClient.md +1 -1
- package/docs/api/interfaces/AgentDispatchIntent.md +1 -1
- package/docs/api/interfaces/AgentDispatchTransport.md +1 -1
- package/docs/api/interfaces/AgentIdentity.md +1 -1
- package/docs/api/interfaces/AgentIdentityRecord.md +1 -1
- package/docs/api/interfaces/AgentRequestRecord.md +1 -1
- package/docs/api/interfaces/AgentRuntimeManifest.md +1 -1
- package/docs/api/interfaces/AgentSecretGrant.md +1 -1
- package/docs/api/interfaces/AgentSigner.md +1 -1
- package/docs/api/interfaces/AgentVisibleRequestRecord.md +1 -1
- package/docs/api/interfaces/AgentVisibleSecretRecord.md +1 -1
- package/docs/api/interfaces/AuditEntry.md +1 -1
- package/docs/api/interfaces/CbioRuntime.md +59 -1
- package/docs/api/interfaces/CreateAgentClientOptions.md +1 -1
- package/docs/api/interfaces/CreateIdentityOptions.md +1 -1
- package/docs/api/interfaces/CreateOwnerClientOptions.md +1 -1
- package/docs/api/interfaces/CreatePersistentVaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/CreateVaultOptions.md +1 -1
- package/docs/api/interfaces/CreatedVault.md +1 -1
- package/docs/api/interfaces/DefaultPolicyEngineOptions.md +1 -23
- package/docs/api/interfaces/DispatchAuthorization.md +1 -1
- package/docs/api/interfaces/DispatchInstruction.md +1 -1
- package/docs/api/interfaces/DispatchRequest.md +1 -1
- package/docs/api/interfaces/DispatchResult.md +1 -1
- package/docs/api/interfaces/IStorageProvider.md +1 -1
- package/docs/api/interfaces/InitializeVaultCustodyOptions.md +1 -1
- package/docs/api/interfaces/InitializedVaultCustody.md +1 -1
- package/docs/api/interfaces/OpenOwnerSessionOptions.md +1 -1
- package/docs/api/interfaces/OwnerAgentProvisionResult.md +1 -1
- package/docs/api/interfaces/OwnerAuditSubscription.md +45 -0
- package/docs/api/interfaces/OwnerClient.md +17 -1
- package/docs/api/interfaces/OwnerCreateSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerPendingDispatchSubscription.md +1 -1
- package/docs/api/interfaces/OwnerRemoveSecretInput.md +1 -1
- package/docs/api/interfaces/OwnerRequestRecord.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionConfirmation.md +1 -1
- package/docs/api/interfaces/OwnerSensitiveActionContext.md +1 -1
- package/docs/api/interfaces/OwnerSession.md +1 -1
- package/docs/api/interfaces/OwnerUpdateSecretInput.md +9 -3
- package/docs/api/interfaces/OwnerVisibleRequestRecord.md +1 -1
- package/docs/api/interfaces/PendingDispatchEvent.md +1 -1
- package/docs/api/interfaces/RecoverVaultOptions.md +1 -1
- package/docs/api/interfaces/RecoveredVault.md +1 -1
- package/docs/api/interfaces/RequestRecord.md +1 -1
- package/docs/api/interfaces/RestoreIdentityOptions.md +1 -1
- package/docs/api/interfaces/SecretAlias.md +1 -1
- package/docs/api/interfaces/SecretDestinationGrant.md +1 -1
- package/docs/api/interfaces/SecretId.md +1 -1
- package/docs/api/interfaces/SecretRecord.md +1 -1
- package/docs/api/interfaces/Signer.md +1 -1
- package/docs/api/interfaces/VaultApproveDispatchInput.md +1 -1
- package/docs/api/interfaces/VaultAuditQueryInput.md +1 -1
- package/docs/api/interfaces/VaultCoreDependenciesOptions.md +1 -1
- package/docs/api/interfaces/VaultCreateAgentInput.md +1 -1
- package/docs/api/interfaces/VaultExportSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGetRequestInput.md +1 -1
- package/docs/api/interfaces/VaultGrantAgentSecretInput.md +1 -1
- package/docs/api/interfaces/VaultGrantSecretDestinationInput.md +1 -1
- package/docs/api/interfaces/VaultId.md +1 -1
- package/docs/api/interfaces/VaultImportAgentInput.md +1 -1
- package/docs/api/interfaces/VaultIssueSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultListAgentsInput.md +1 -1
- package/docs/api/interfaces/VaultListGrantsInput.md +1 -1
- package/docs/api/interfaces/VaultListRequestsInput.md +1 -1
- package/docs/api/interfaces/VaultListSecretsInput.md +1 -1
- package/docs/api/interfaces/VaultMetadata.md +1 -1
- package/docs/api/interfaces/VaultObject.md +1 -1
- package/docs/api/interfaces/VaultPrincipal.md +1 -1
- package/docs/api/interfaces/VaultProfile.md +1 -1
- package/docs/api/interfaces/VaultReadAgentPrivateKeyInput.md +1 -1
- package/docs/api/interfaces/VaultReadSecretPlaintextInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeAgentSecretInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeSecretDestinationInput.md +1 -1
- package/docs/api/interfaces/VaultRevokeSessionTokenInput.md +1 -1
- package/docs/api/interfaces/VaultService.md +17 -1
- package/docs/api/interfaces/VaultUpdateAgentInput.md +1 -1
- package/docs/api/type-aliases/AgentId.md +1 -1
- package/docs/api/type-aliases/AgentRequestResult.md +1 -1
- package/docs/api/type-aliases/CbioRuntimeModule.md +1 -1
- package/docs/api/type-aliases/DispatchApprovalDecision.md +1 -1
- package/docs/api/type-aliases/GrantStatus.md +1 -1
- package/docs/api/type-aliases/SecretLifecycleStatus.md +1 -1
- package/docs/api/type-aliases/VaultPrincipalKind.md +2 -2
- package/docs/api/variables/DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY.md +1 -1
- package/package.json +5 -3
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.70.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -448,6 +448,22 @@
|
|
|
448
448
|
|
|
449
449
|
***
|
|
450
450
|
|
|
451
|
+
### ownerOnAudit()
|
|
452
|
+
|
|
453
|
+
> **ownerOnAudit**(`subscription`): () => `void`
|
|
454
|
+
|
|
455
|
+
#### Parameters
|
|
456
|
+
|
|
457
|
+
##### subscription
|
|
458
|
+
|
|
459
|
+
[`OwnerAuditSubscription`](../interfaces/OwnerAuditSubscription.md)
|
|
460
|
+
|
|
461
|
+
#### Returns
|
|
462
|
+
|
|
463
|
+
() => `void`
|
|
464
|
+
|
|
465
|
+
***
|
|
466
|
+
|
|
451
467
|
### ownerOnPendingDispatch()
|
|
452
468
|
|
|
453
469
|
> **ownerOnPendingDispatch**(`subscription`): () => `void`
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.70.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -60,42 +60,6 @@
|
|
|
60
60
|
|
|
61
61
|
***
|
|
62
62
|
|
|
63
|
-
### MANAGEMENT\_LIST\_AGENTS
|
|
64
|
-
|
|
65
|
-
> **MANAGEMENT\_LIST\_AGENTS**: `"management.list_agents"`
|
|
66
|
-
|
|
67
|
-
***
|
|
68
|
-
|
|
69
|
-
### MANAGEMENT\_LIST\_GRANTS
|
|
70
|
-
|
|
71
|
-
> **MANAGEMENT\_LIST\_GRANTS**: `"management.list_grants"`
|
|
72
|
-
|
|
73
|
-
***
|
|
74
|
-
|
|
75
|
-
### MANAGEMENT\_LIST\_REQUESTS
|
|
76
|
-
|
|
77
|
-
> **MANAGEMENT\_LIST\_REQUESTS**: `"management.list_requests"`
|
|
78
|
-
|
|
79
|
-
***
|
|
80
|
-
|
|
81
|
-
### MANAGEMENT\_LIST\_SECRETS
|
|
82
|
-
|
|
83
|
-
> **MANAGEMENT\_LIST\_SECRETS**: `"management.list_secrets"`
|
|
84
|
-
|
|
85
|
-
***
|
|
86
|
-
|
|
87
|
-
### MANAGEMENT\_READ\_AUDIT
|
|
88
|
-
|
|
89
|
-
> **MANAGEMENT\_READ\_AUDIT**: `"management.read_audit"`
|
|
90
|
-
|
|
91
|
-
***
|
|
92
|
-
|
|
93
|
-
### MANAGEMENT\_READ\_REQUEST
|
|
94
|
-
|
|
95
|
-
> **MANAGEMENT\_READ\_REQUEST**: `"management.read_request"`
|
|
96
|
-
|
|
97
|
-
***
|
|
98
|
-
|
|
99
63
|
### POLICY\_EVALUATE
|
|
100
64
|
|
|
101
65
|
> **POLICY\_EVALUATE**: `"policy.evaluate_dispatch"`
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.70.1**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Function: handleVaultAuditSse()
|
|
6
|
+
|
|
7
|
+
> **handleVaultAuditSse**(`service`, `options?`): `Response`
|
|
8
|
+
|
|
9
|
+
Creates an SSE response that streams owner-visible audit entries.
|
|
10
|
+
Host applications should authenticate owner access before exposing this helper remotely.
|
|
11
|
+
|
|
12
|
+
## Parameters
|
|
13
|
+
|
|
14
|
+
### service
|
|
15
|
+
|
|
16
|
+
[`VaultService`](../interfaces/VaultService.md)
|
|
17
|
+
|
|
18
|
+
The VaultService instance to subscribe against.
|
|
19
|
+
|
|
20
|
+
### options?
|
|
21
|
+
|
|
22
|
+
`VaultAuditSseOptions` = `{}`
|
|
23
|
+
|
|
24
|
+
Stream options such as replay cursor, filtering, and abort handling.
|
|
25
|
+
|
|
26
|
+
## Returns
|
|
27
|
+
|
|
28
|
+
`Response`
|
|
29
|
+
|
|
30
|
+
A streaming SSE Response that emits `audit_entry` events by default.
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.70.1**](../README.md)
|
|
2
|
+
|
|
3
|
+
***
|
|
4
|
+
|
|
5
|
+
# Function: handleVaultPendingDispatchSse()
|
|
6
|
+
|
|
7
|
+
> **handleVaultPendingDispatchSse**(`service`, `options?`): `Response`
|
|
8
|
+
|
|
9
|
+
Creates an SSE response that streams owner-visible pending dispatch events.
|
|
10
|
+
Host applications should authenticate owner access before exposing this helper remotely.
|
|
11
|
+
|
|
12
|
+
## Parameters
|
|
13
|
+
|
|
14
|
+
### service
|
|
15
|
+
|
|
16
|
+
[`VaultService`](../interfaces/VaultService.md)
|
|
17
|
+
|
|
18
|
+
The VaultService instance to subscribe against.
|
|
19
|
+
|
|
20
|
+
### options?
|
|
21
|
+
|
|
22
|
+
`VaultPendingDispatchSseOptions` = `{}`
|
|
23
|
+
|
|
24
|
+
Stream options such as replay cursor and abort handling.
|
|
25
|
+
|
|
26
|
+
## Returns
|
|
27
|
+
|
|
28
|
+
`Response`
|
|
29
|
+
|
|
30
|
+
A streaming SSE Response that emits `pending_dispatch` events.
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.70.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -239,6 +239,35 @@ Using scrypt for memory-hard key derivation to resist brute-force attacks.
|
|
|
239
239
|
|
|
240
240
|
***
|
|
241
241
|
|
|
242
|
+
### handleVaultAuditSse
|
|
243
|
+
|
|
244
|
+
> **handleVaultAuditSse**: (`service`, `options`) => `Response`
|
|
245
|
+
|
|
246
|
+
Creates an SSE response that streams owner-visible audit entries.
|
|
247
|
+
Host applications should authenticate owner access before exposing this helper remotely.
|
|
248
|
+
|
|
249
|
+
#### Parameters
|
|
250
|
+
|
|
251
|
+
##### service
|
|
252
|
+
|
|
253
|
+
[`VaultService`](VaultService.md)
|
|
254
|
+
|
|
255
|
+
The VaultService instance to subscribe against.
|
|
256
|
+
|
|
257
|
+
##### options?
|
|
258
|
+
|
|
259
|
+
`VaultAuditSseOptions` = `{}`
|
|
260
|
+
|
|
261
|
+
Stream options such as replay cursor, filtering, and abort handling.
|
|
262
|
+
|
|
263
|
+
#### Returns
|
|
264
|
+
|
|
265
|
+
`Response`
|
|
266
|
+
|
|
267
|
+
A streaming SSE Response that emits `audit_entry` events by default.
|
|
268
|
+
|
|
269
|
+
***
|
|
270
|
+
|
|
242
271
|
### handleVaultHttpDispatch
|
|
243
272
|
|
|
244
273
|
> **handleVaultHttpDispatch**: (`service`, `body`) => `Promise`\<`VaultAgentDispatchResponse` \| `VaultAgentDispatchErrorResponse`\>
|
|
@@ -268,6 +297,35 @@ A JSON-serializable response object.
|
|
|
268
297
|
|
|
269
298
|
***
|
|
270
299
|
|
|
300
|
+
### handleVaultPendingDispatchSse
|
|
301
|
+
|
|
302
|
+
> **handleVaultPendingDispatchSse**: (`service`, `options`) => `Response`
|
|
303
|
+
|
|
304
|
+
Creates an SSE response that streams owner-visible pending dispatch events.
|
|
305
|
+
Host applications should authenticate owner access before exposing this helper remotely.
|
|
306
|
+
|
|
307
|
+
#### Parameters
|
|
308
|
+
|
|
309
|
+
##### service
|
|
310
|
+
|
|
311
|
+
[`VaultService`](VaultService.md)
|
|
312
|
+
|
|
313
|
+
The VaultService instance to subscribe against.
|
|
314
|
+
|
|
315
|
+
##### options?
|
|
316
|
+
|
|
317
|
+
`VaultPendingDispatchSseOptions` = `{}`
|
|
318
|
+
|
|
319
|
+
Stream options such as replay cursor and abort handling.
|
|
320
|
+
|
|
321
|
+
#### Returns
|
|
322
|
+
|
|
323
|
+
`Response`
|
|
324
|
+
|
|
325
|
+
A streaming SSE Response that emits `pending_dispatch` events.
|
|
326
|
+
|
|
327
|
+
***
|
|
328
|
+
|
|
271
329
|
### IdentityError
|
|
272
330
|
|
|
273
331
|
> **IdentityError**: *typeof* [`IdentityError`](../classes/IdentityError.md)
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
[**CBIO Node Runtime Agent API v1.
|
|
1
|
+
[**CBIO Node Runtime Agent API v1.70.1**](../README.md)
|
|
2
2
|
|
|
3
3
|
***
|
|
4
4
|
|
|
@@ -13,25 +13,3 @@
|
|
|
13
13
|
#### Returns
|
|
14
14
|
|
|
15
15
|
`Date`
|
|
16
|
-
|
|
17
|
-
***
|
|
18
|
-
|
|
19
|
-
### trusted\_issuer\_ids?
|
|
20
|
-
|
|
21
|
-
> `optional` **trusted\_issuer\_ids?**: readonly `string`[]
|
|
22
|
-
|
|
23
|
-
***
|
|
24
|
-
|
|
25
|
-
### trustedIssuerIdResolver?
|
|
26
|
-
|
|
27
|
-
> `optional` **trustedIssuerIdResolver?**: (`issuer_id`) => `boolean` \| `Promise`\<`boolean`\>
|
|
28
|
-
|
|
29
|
-
#### Parameters
|
|
30
|
-
|
|
31
|
-
##### issuer\_id
|
|
32
|
-
|
|
33
|
-
`string`
|
|
34
|
-
|
|
35
|
-
#### Returns
|
|
36
|
-
|
|
37
|
-
`boolean` \| `Promise`\<`boolean`\>
|