@covia/covia-sdk 1.11.0 → 1.13.0

package/dist/index.d.mts

@@ -735,6 +735,74 @@ declare class MemoryManager {
     forget(number: number, path?: string): Promise<MemoryChange>;
 }
 
+interface DLFSManagerVenue extends VenueRequestContext {
+    lastKnownStatus?: StatusData;
+}
+declare class DLFSManager {
+    private venue;
+    private dlfsSupported;
+    constructor(venue: DLFSManagerVenue);
+    /** A job-free DLFS metadata GET that rejects when the endpoint is unavailable. */
+    private dlfsGet;
+    /**
+     * List the caller's DLFS drives, vault included. **Job-free** on covia
+     * venues serving `GET /api/v1/dlfs/drives` (covia#253).
+     */
+    listDrives(): Promise<DLFSDrivesResult>;
+    /**
+     * List one directory of a drive. **Job-free** on covia venues serving
+     * `GET /api/v1/dlfs/list` (covia#253). Own drives by bare name only —
+     * cross-user DID-URL drive addressing isn't supported by this manager.
+     */
+    list(drive: string, path?: string): Promise<DLFSListResult>;
+    /**
+     * Job-free file content — `GET /api/v1/content/dlfs/<drive>/<path>`, the
+     * same route the venue's generic asset-content resolver already serves
+     * (DLFSAdapter implements ContentProvider). Real streamed bytes with a
+     * correct Content-Type, not the JSON/base64 shape `dlfs:read` returns.
+     */
+    getContent(drive: string, path: string): Promise<ReadableStream<Uint8Array>>;
+}
+
+interface UserManagerVenue extends VenueRequestContext {
+    operations: OperationRunner;
+    lastKnownStatus?: StatusData;
+}
+declare class UserManager {
+    private venue;
+    private usersSupported;
+    constructor(venue: UserManagerVenue);
+    /** A job-free users GET that rejects when the endpoint is unavailable. */
+    private usersGet;
+    /**
+     * List registered venue users. **Job-free** on covia venues serving
+     * `GET /api/v1/users` (covia#255) — synchronous, no Job persisted.
+     * Operator-only: throws a `GridError` with `statusCode` 403 for a
+     * signed-in caller that is not the venue itself and holds no venue-issued
+     * delegation over `<venueDID>/users` — that is an expected, common
+     * outcome to branch on, not a bug.
+     */
+    list(): Promise<UserListResult>;
+    /**
+     * Get one registered user. The caller's own DID needs no operator
+     * authority; any other DID does (403 otherwise).
+     */
+    info(did: string): Promise<UserInfo>;
+    /**
+     * List a venue-managed user's authenticators, active and revoked
+     * tombstones alike — revocation is a status transition in place, never a
+     * deletion. The caller's own DID needs no operator authority; any other
+     * DID does (403 otherwise).
+     */
+    listAuthenticators(did: string): Promise<AuthenticationKeysResult>;
+    /**
+     * Revoke one of a venue-managed user's authenticators. A mutation, so —
+     * unlike the reads above — this goes through `operations.run` and mints a
+     * Job, matching every other write in this SDK (e.g. `SecretManager.set`).
+     */
+    revokeAuthenticator(key: string, did?: string, ucans?: string[]): Promise<AuthenticatorRevokeResult>;
+}
+
 /**
  * Resolve a non-DID venue id into the ordered list of base URLs that
  * {@link Venue.connect} will try in turn. Explicit `http(s)://` inputs are
@@ -789,6 +857,8 @@ declare class Venue implements VenueInterface {
     private _secrets?;
     private _skills?;
     private _memory?;
+    private _dlfs?;
+    private _users?;
     get adapters(): AdapterManager;
     get agents(): AgentManager;
     get jobs(): JobManager;
@@ -799,6 +869,8 @@ declare class Venue implements VenueInterface {
     get secrets(): SecretManager;
     get skills(): SkillManager;
     get memory(): MemoryManager;
+    get dlfs(): DLFSManager;
+    get users(): UserManager;
     constructor(options?: VenueOptions);
     /**
      * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
@@ -1043,6 +1115,12 @@ interface StatusData {
     /** Venue platform version (e.g. "0.3.0"). Absent on venues before 0.3. */
     version?: string;
     stats?: StatsData;
+    /** Curated admission-policy fields (#255) — safe to state to any caller.
+     *  Absent on venues before this shipped; treat as unknown, not false. */
+    access?: {
+        public: boolean;
+        userAutoCreate: boolean;
+    };
 }
 interface StatsData {
     assets?: number;
@@ -1483,6 +1561,63 @@ interface SecretExtractResult {
     name: string;
     value: string;
 }
+interface DLFSEntry {
+    name: string;
+    type: "file" | "directory";
+    size?: number;
+    modified?: string;
+}
+interface DLFSDrivesResult {
+    drives: string[];
+}
+interface DLFSListResult {
+    entries: DLFSEntry[];
+    warnings?: string[];
+}
+interface UserSummary {
+    did: string;
+    registered: boolean;
+    /** True for a venue-managed named account (a did:web identity minted from
+     *  a username); false/absent for a plain registered DID. */
+    managed?: boolean;
+    meta?: Record<string, unknown>;
+}
+interface UserListResult {
+    users: UserSummary[];
+    total: number;
+}
+interface UserInfo {
+    did: string;
+    registered: boolean;
+    managed?: boolean;
+    meta?: Record<string, unknown>;
+}
+/** One authenticator's lifecycle record. Revocation is a status transition
+ *  in place — a revoked entry is retained forever, never deleted, so the
+ *  key's full add/revoke history stays visible as an audit tombstone. */
+interface AuthenticationKeyEntry {
+    status: "active" | "revoked";
+    /** Epoch millis. */
+    addedAt: number;
+    /** Actor DID that added this key. */
+    addedBy: string;
+    label?: string;
+    /** Epoch millis, present only once status is "revoked". */
+    revokedAt?: number;
+    /** Actor DID that revoked this key, present only once status is "revoked". */
+    revokedBy?: string;
+}
+/** Keyed by the authenticator's own `did:key:...` string. */
+type AuthenticationKeysMap = Record<string, AuthenticationKeyEntry>;
+interface AuthenticationKeysResult {
+    did: string;
+    authenticationKeys: AuthenticationKeysMap;
+}
+interface AuthenticatorRevokeResult {
+    did: string;
+    key: string;
+    revoked: boolean;
+}
 interface FunctionInfo {
     name: string;
     id: string;
@@ -1890,4 +2025,4 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
 
-export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/dist/index.d.ts

@@ -735,6 +735,74 @@ declare class MemoryManager {
     forget(number: number, path?: string): Promise<MemoryChange>;
 }
 
+interface DLFSManagerVenue extends VenueRequestContext {
+    lastKnownStatus?: StatusData;
+}
+declare class DLFSManager {
+    private venue;
+    private dlfsSupported;
+    constructor(venue: DLFSManagerVenue);
+    /** A job-free DLFS metadata GET that rejects when the endpoint is unavailable. */
+    private dlfsGet;
+    /**
+     * List the caller's DLFS drives, vault included. **Job-free** on covia
+     * venues serving `GET /api/v1/dlfs/drives` (covia#253).
+     */
+    listDrives(): Promise<DLFSDrivesResult>;
+    /**
+     * List one directory of a drive. **Job-free** on covia venues serving
+     * `GET /api/v1/dlfs/list` (covia#253). Own drives by bare name only —
+     * cross-user DID-URL drive addressing isn't supported by this manager.
+     */
+    list(drive: string, path?: string): Promise<DLFSListResult>;
+    /**
+     * Job-free file content — `GET /api/v1/content/dlfs/<drive>/<path>`, the
+     * same route the venue's generic asset-content resolver already serves
+     * (DLFSAdapter implements ContentProvider). Real streamed bytes with a
+     * correct Content-Type, not the JSON/base64 shape `dlfs:read` returns.
+     */
+    getContent(drive: string, path: string): Promise<ReadableStream<Uint8Array>>;
+}
+
+interface UserManagerVenue extends VenueRequestContext {
+    operations: OperationRunner;
+    lastKnownStatus?: StatusData;
+}
+declare class UserManager {
+    private venue;
+    private usersSupported;
+    constructor(venue: UserManagerVenue);
+    /** A job-free users GET that rejects when the endpoint is unavailable. */
+    private usersGet;
+    /**
+     * List registered venue users. **Job-free** on covia venues serving
+     * `GET /api/v1/users` (covia#255) — synchronous, no Job persisted.
+     * Operator-only: throws a `GridError` with `statusCode` 403 for a
+     * signed-in caller that is not the venue itself and holds no venue-issued
+     * delegation over `<venueDID>/users` — that is an expected, common
+     * outcome to branch on, not a bug.
+     */
+    list(): Promise<UserListResult>;
+    /**
+     * Get one registered user. The caller's own DID needs no operator
+     * authority; any other DID does (403 otherwise).
+     */
+    info(did: string): Promise<UserInfo>;
+    /**
+     * List a venue-managed user's authenticators, active and revoked
+     * tombstones alike — revocation is a status transition in place, never a
+     * deletion. The caller's own DID needs no operator authority; any other
+     * DID does (403 otherwise).
+     */
+    listAuthenticators(did: string): Promise<AuthenticationKeysResult>;
+    /**
+     * Revoke one of a venue-managed user's authenticators. A mutation, so —
+     * unlike the reads above — this goes through `operations.run` and mints a
+     * Job, matching every other write in this SDK (e.g. `SecretManager.set`).
+     */
+    revokeAuthenticator(key: string, did?: string, ucans?: string[]): Promise<AuthenticatorRevokeResult>;
+}
+
 /**
  * Resolve a non-DID venue id into the ordered list of base URLs that
  * {@link Venue.connect} will try in turn. Explicit `http(s)://` inputs are
@@ -789,6 +857,8 @@ declare class Venue implements VenueInterface {
     private _secrets?;
     private _skills?;
     private _memory?;
+    private _dlfs?;
+    private _users?;
     get adapters(): AdapterManager;
     get agents(): AgentManager;
     get jobs(): JobManager;
@@ -799,6 +869,8 @@ declare class Venue implements VenueInterface {
     get secrets(): SecretManager;
     get skills(): SkillManager;
     get memory(): MemoryManager;
+    get dlfs(): DLFSManager;
+    get users(): UserManager;
     constructor(options?: VenueOptions);
     /**
      * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
@@ -1043,6 +1115,12 @@ interface StatusData {
     /** Venue platform version (e.g. "0.3.0"). Absent on venues before 0.3. */
     version?: string;
     stats?: StatsData;
+    /** Curated admission-policy fields (#255) — safe to state to any caller.
+     *  Absent on venues before this shipped; treat as unknown, not false. */
+    access?: {
+        public: boolean;
+        userAutoCreate: boolean;
+    };
 }
 interface StatsData {
     assets?: number;
@@ -1483,6 +1561,63 @@ interface SecretExtractResult {
     name: string;
     value: string;
 }
+interface DLFSEntry {
+    name: string;
+    type: "file" | "directory";
+    size?: number;
+    modified?: string;
+}
+interface DLFSDrivesResult {
+    drives: string[];
+}
+interface DLFSListResult {
+    entries: DLFSEntry[];
+    warnings?: string[];
+}
+interface UserSummary {
+    did: string;
+    registered: boolean;
+    /** True for a venue-managed named account (a did:web identity minted from
+     *  a username); false/absent for a plain registered DID. */
+    managed?: boolean;
+    meta?: Record<string, unknown>;
+}
+interface UserListResult {
+    users: UserSummary[];
+    total: number;
+}
+interface UserInfo {
+    did: string;
+    registered: boolean;
+    managed?: boolean;
+    meta?: Record<string, unknown>;
+}
+/** One authenticator's lifecycle record. Revocation is a status transition
+ *  in place — a revoked entry is retained forever, never deleted, so the
+ *  key's full add/revoke history stays visible as an audit tombstone. */
+interface AuthenticationKeyEntry {
+    status: "active" | "revoked";
+    /** Epoch millis. */
+    addedAt: number;
+    /** Actor DID that added this key. */
+    addedBy: string;
+    label?: string;
+    /** Epoch millis, present only once status is "revoked". */
+    revokedAt?: number;
+    /** Actor DID that revoked this key, present only once status is "revoked". */
+    revokedBy?: string;
+}
+/** Keyed by the authenticator's own `did:key:...` string. */
+type AuthenticationKeysMap = Record<string, AuthenticationKeyEntry>;
+interface AuthenticationKeysResult {
+    did: string;
+    authenticationKeys: AuthenticationKeysMap;
+}
+interface AuthenticatorRevokeResult {
+    did: string;
+    key: string;
+    revoked: boolean;
+}
 interface FunctionInfo {
     name: string;
     id: string;
@@ -1890,4 +2025,4 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
 
-export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/dist/index.js

@@ -2798,6 +2798,121 @@ var MemoryManager = class {
   }
 };
 
+// src/DLFSManager.ts
+var DLFSManager = class {
+  constructor(venue) {
+    this.venue = venue;
+    // Whether this venue serves GET /api/v1/dlfs/* — flipped on a route-missing
+    // 404 so a pre-#253 venue pays the probe once, not one failed GET per read.
+    this.dlfsSupported = true;
+  }
+  /** A job-free DLFS metadata GET that rejects when the endpoint is unavailable. */
+  async dlfsGet(path) {
+    if (!this.dlfsSupported) throw new UnsupportedVenueFeatureError("venue DLFS browsing");
+    try {
+      return await venueJson(this.venue, `/api/v1/dlfs${path}`);
+    } catch (e) {
+      if (!(e instanceof NotFoundError)) throw e;
+      if (!ROUTE_MISSING_404.test(e.message)) throw e;
+      this.dlfsSupported = false;
+      throw new UnsupportedVenueFeatureError("venue DLFS browsing");
+    }
+  }
+  /**
+   * List the caller's DLFS drives, vault included. **Job-free** on covia
+   * venues serving `GET /api/v1/dlfs/drives` (covia#253).
+   */
+  async listDrives() {
+    return this.dlfsGet("/drives");
+  }
+  /**
+   * List one directory of a drive. **Job-free** on covia venues serving
+   * `GET /api/v1/dlfs/list` (covia#253). Own drives by bare name only —
+   * cross-user DID-URL drive addressing isn't supported by this manager.
+   */
+  async list(drive, path) {
+    const qs = new URLSearchParams({ drive, ...path ? { path } : {} });
+    return this.dlfsGet(`/list?${qs}`);
+  }
+  /**
+   * Job-free file content — `GET /api/v1/content/dlfs/<drive>/<path>`, the
+   * same route the venue's generic asset-content resolver already serves
+   * (DLFSAdapter implements ContentProvider). Real streamed bytes with a
+   * correct Content-Type, not the JSON/base64 shape `dlfs:read` returns.
+   */
+  async getContent(drive, path) {
+    const segments = path.split("/").filter(Boolean).map(encodeURIComponent).join("/");
+    const response = await venueStream(
+      this.venue,
+      `/api/v1/content/dlfs/${encodeURIComponent(drive)}/${segments}`
+    );
+    if (!response.body) throw new Error("Empty response body for DLFS content read");
+    return response.body;
+  }
+};
+
+// src/UserManager.ts
+var UserManager = class {
+  constructor(venue) {
+    this.venue = venue;
+    // Whether this venue serves GET /api/v1/users — flipped on a route-missing
+    // 404 so a pre-#255 venue pays the probe once, not one failed GET per read.
+    this.usersSupported = true;
+  }
+  /** A job-free users GET that rejects when the endpoint is unavailable. */
+  async usersGet(path) {
+    if (!this.usersSupported) throw new UnsupportedVenueFeatureError("venue users");
+    try {
+      return await venueJson(this.venue, `/api/v1/users${path}`);
+    } catch (e) {
+      if (!(e instanceof NotFoundError)) throw e;
+      const routeMissing = path === "" || ROUTE_MISSING_404.test(e.message);
+      if (!routeMissing) throw e;
+      this.usersSupported = false;
+      throw new UnsupportedVenueFeatureError("venue users");
+    }
+  }
+  /**
+   * List registered venue users. **Job-free** on covia venues serving
+   * `GET /api/v1/users` (covia#255) — synchronous, no Job persisted.
+   * Operator-only: throws a `GridError` with `statusCode` 403 for a
+   * signed-in caller that is not the venue itself and holds no venue-issued
+   * delegation over `<venueDID>/users` — that is an expected, common
+   * outcome to branch on, not a bug.
+   */
+  async list() {
+    return this.usersGet("");
+  }
+  /**
+   * Get one registered user. The caller's own DID needs no operator
+   * authority; any other DID does (403 otherwise).
+   */
+  async info(did) {
+    return this.usersGet(`/${encodeURIComponent(did)}`);
+  }
+  /**
+   * List a venue-managed user's authenticators, active and revoked
+   * tombstones alike — revocation is a status transition in place, never a
+   * deletion. The caller's own DID needs no operator authority; any other
+   * DID does (403 otherwise).
+   */
+  async listAuthenticators(did) {
+    return this.usersGet(`/${encodeURIComponent(did)}/authentications`);
+  }
+  /**
+   * Revoke one of a venue-managed user's authenticators. A mutation, so —
+   * unlike the reads above — this goes through `operations.run` and mints a
+   * Job, matching every other write in this SDK (e.g. `SecretManager.set`).
+   */
+  async revokeAuthenticator(key, did, ucans) {
+    return this.venue.operations.run(
+      "v/ops/user/authentication-revoke",
+      { did, key },
+      { ucans }
+    );
+  }
+};
+
 // src/Agent.ts
 var Agent = class _Agent {
   constructor(id, venue) {
@@ -2996,6 +3111,12 @@ var Venue = class _Venue {
   get memory() {
     return this._memory ?? (this._memory = new MemoryManager(this));
   }
+  get dlfs() {
+    return this._dlfs ?? (this._dlfs = new DLFSManager(this));
+  }
+  get users() {
+    return this._users ?? (this._users = new UserManager(this));
+  }
   /**
    * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
    * venue is auth-gated (status answers 401/403 — public access disabled), the
@@ -3343,6 +3464,7 @@ exports.CoviaConnectionError = CoviaConnectionError;
 exports.CoviaError = CoviaError;
 exports.CoviaTimeoutError = CoviaTimeoutError;
 exports.CredentialsHTTP = CredentialsHTTP;
+exports.DLFSManager = DLFSManager;
 exports.DataAsset = DataAsset;
 exports.Ed25519Auth = Ed25519Auth;
 exports.Grid = Grid;
@@ -3365,6 +3487,7 @@ exports.SecretManager = SecretManager;
 exports.SkillManager = SkillManager;
 exports.UCANManager = UCANManager;
 exports.UnsupportedVenueFeatureError = UnsupportedVenueFeatureError;
+exports.UserManager = UserManager;
 exports.VENUE_RELAY = VENUE_RELAY;
 exports.Venue = Venue;
 exports.VenueIdentityChangedError = VenueIdentityChangedError;

package/dist/index.mjs

@@ -2796,6 +2796,121 @@ var MemoryManager = class {
   }
 };
 
+// src/DLFSManager.ts
+var DLFSManager = class {
+  constructor(venue) {
+    this.venue = venue;
+    // Whether this venue serves GET /api/v1/dlfs/* — flipped on a route-missing
+    // 404 so a pre-#253 venue pays the probe once, not one failed GET per read.
+    this.dlfsSupported = true;
+  }
+  /** A job-free DLFS metadata GET that rejects when the endpoint is unavailable. */
+  async dlfsGet(path) {
+    if (!this.dlfsSupported) throw new UnsupportedVenueFeatureError("venue DLFS browsing");
+    try {
+      return await venueJson(this.venue, `/api/v1/dlfs${path}`);
+    } catch (e) {
+      if (!(e instanceof NotFoundError)) throw e;
+      if (!ROUTE_MISSING_404.test(e.message)) throw e;
+      this.dlfsSupported = false;
+      throw new UnsupportedVenueFeatureError("venue DLFS browsing");
+    }
+  }
+  /**
+   * List the caller's DLFS drives, vault included. **Job-free** on covia
+   * venues serving `GET /api/v1/dlfs/drives` (covia#253).
+   */
+  async listDrives() {
+    return this.dlfsGet("/drives");
+  }
+  /**
+   * List one directory of a drive. **Job-free** on covia venues serving
+   * `GET /api/v1/dlfs/list` (covia#253). Own drives by bare name only —
+   * cross-user DID-URL drive addressing isn't supported by this manager.
+   */
+  async list(drive, path) {
+    const qs = new URLSearchParams({ drive, ...path ? { path } : {} });
+    return this.dlfsGet(`/list?${qs}`);
+  }
+  /**
+   * Job-free file content — `GET /api/v1/content/dlfs/<drive>/<path>`, the
+   * same route the venue's generic asset-content resolver already serves
+   * (DLFSAdapter implements ContentProvider). Real streamed bytes with a
+   * correct Content-Type, not the JSON/base64 shape `dlfs:read` returns.
+   */
+  async getContent(drive, path) {
+    const segments = path.split("/").filter(Boolean).map(encodeURIComponent).join("/");
+    const response = await venueStream(
+      this.venue,
+      `/api/v1/content/dlfs/${encodeURIComponent(drive)}/${segments}`
+    );
+    if (!response.body) throw new Error("Empty response body for DLFS content read");
+    return response.body;
+  }
+};
+
+// src/UserManager.ts
+var UserManager = class {
+  constructor(venue) {
+    this.venue = venue;
+    // Whether this venue serves GET /api/v1/users — flipped on a route-missing
+    // 404 so a pre-#255 venue pays the probe once, not one failed GET per read.
+    this.usersSupported = true;
+  }
+  /** A job-free users GET that rejects when the endpoint is unavailable. */
+  async usersGet(path) {
+    if (!this.usersSupported) throw new UnsupportedVenueFeatureError("venue users");
+    try {
+      return await venueJson(this.venue, `/api/v1/users${path}`);
+    } catch (e) {
+      if (!(e instanceof NotFoundError)) throw e;
+      const routeMissing = path === "" || ROUTE_MISSING_404.test(e.message);
+      if (!routeMissing) throw e;
+      this.usersSupported = false;
+      throw new UnsupportedVenueFeatureError("venue users");
+    }
+  }
+  /**
+   * List registered venue users. **Job-free** on covia venues serving
+   * `GET /api/v1/users` (covia#255) — synchronous, no Job persisted.
+   * Operator-only: throws a `GridError` with `statusCode` 403 for a
+   * signed-in caller that is not the venue itself and holds no venue-issued
+   * delegation over `<venueDID>/users` — that is an expected, common
+   * outcome to branch on, not a bug.
+   */
+  async list() {
+    return this.usersGet("");
+  }
+  /**
+   * Get one registered user. The caller's own DID needs no operator
+   * authority; any other DID does (403 otherwise).
+   */
+  async info(did) {
+    return this.usersGet(`/${encodeURIComponent(did)}`);
+  }
+  /**
+   * List a venue-managed user's authenticators, active and revoked
+   * tombstones alike — revocation is a status transition in place, never a
+   * deletion. The caller's own DID needs no operator authority; any other
+   * DID does (403 otherwise).
+   */
+  async listAuthenticators(did) {
+    return this.usersGet(`/${encodeURIComponent(did)}/authentications`);
+  }
+  /**
+   * Revoke one of a venue-managed user's authenticators. A mutation, so —
+   * unlike the reads above — this goes through `operations.run` and mints a
+   * Job, matching every other write in this SDK (e.g. `SecretManager.set`).
+   */
+  async revokeAuthenticator(key, did, ucans) {
+    return this.venue.operations.run(
+      "v/ops/user/authentication-revoke",
+      { did, key },
+      { ucans }
+    );
+  }
+};
+
 // src/Agent.ts
 var Agent = class _Agent {
   constructor(id, venue) {
@@ -2994,6 +3109,12 @@ var Venue = class _Venue {
   get memory() {
     return this._memory ?? (this._memory = new MemoryManager(this));
   }
+  get dlfs() {
+    return this._dlfs ?? (this._dlfs = new DLFSManager(this));
+  }
+  get users() {
+    return this._users ?? (this._users = new UserManager(this));
+  }
   /**
    * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
    * venue is auth-gated (status answers 401/403 — public access disabled), the
@@ -3325,4 +3446,4 @@ function relayDelegation(privateKey, venueDID, lifetimeSeconds, caps = []) {
   (*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) *)
 */
 
-export { AdapterManager, Agent, AgentManager, AgentSessionNotFoundError, AgentStatus, Asset, AssetManager, AssetNotFoundError, Auth, BasicAuth, BearerAuth, ChatSession, CoviaConnectionError, CoviaError, CoviaTimeoutError, CredentialsHTTP, DataAsset, Ed25519Auth, Grid, GridError, Job, JobFailedError, JobManager, JobNotFoundError, JobStatus, KeyPairAuth, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, OperationManager, RateLimitError, RunStatus, SecretManager, SkillManager, UCANManager, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, VenueIdentityChangedError, WorkspaceManager, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { AdapterManager, Agent, AgentManager, AgentSessionNotFoundError, AgentStatus, Asset, AssetManager, AssetNotFoundError, Auth, BasicAuth, BearerAuth, ChatSession, CoviaConnectionError, CoviaError, CoviaTimeoutError, CredentialsHTTP, DLFSManager, DataAsset, Ed25519Auth, Grid, GridError, Job, JobFailedError, JobManager, JobNotFoundError, JobStatus, KeyPairAuth, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, OperationManager, RateLimitError, RunStatus, SecretManager, SkillManager, UCANManager, UnsupportedVenueFeatureError, UserManager, VENUE_RELAY, Venue, VenueIdentityChangedError, WorkspaceManager, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@covia/covia-sdk",
-  "version": "1.11.0",
+  "version": "1.13.0",
   "description": "Typescript library for covia-ai",
   "packageManager": "pnpm@11.9.0",
   "main": "./dist/index.js",