@covia/covia-sdk 1.14.0 → 1.16.0

package/dist/index.d.mts

@@ -174,7 +174,9 @@ declare abstract class Asset {
      */
     getContent(): Promise<ReadableStream<Uint8Array> | null>;
     /**
-     * Get the URL for downloading asset content
+     * Get the URL for downloading asset content. Resolves any reference form
+     * this asset was addressed by, via the venue's canonical any-ref content
+     * route (covia#368).
      * @returns {string} The URL for downloading the asset content
      */
     getContentURL(): string;
@@ -368,7 +370,6 @@ interface AgentManagerVenue extends VenueRequestContext {
         read(path: string, maxSize?: number): Promise<WorkspaceReadResult>;
         slice(path: string, offset?: number, limit?: number): Promise<WorkspaceSliceResult>;
     };
-    lastKnownStatus?: StatusData;
 }
 declare class AgentManager {
     private venue;
@@ -376,7 +377,10 @@ declare class AgentManager {
     private agentSseSupported;
     constructor(venue: AgentManagerVenue);
     /** Whether the venue serves `GET /api/v1/agents`: no if a probe already
-     *  404'd, or if the venue's last known status identifies it as pre-0.4. */
+     *  404'd. No version fast-path — a venue's self-reported version is weaker
+     *  evidence than its answer to the request (an embedded venue can report
+     *  its host application's version instead of its own; see covia-sdk#36).
+     *  Rely purely on the lazy 404 latch, same as UserManager.usersGet. */
     private supportsAgentsGet;
     /** A job-free agents GET that rejects when the endpoint is unavailable. */
     private agentsGet;
@@ -521,8 +525,11 @@ declare class AssetManager {
      */
     putContent(assetId: string, content: BodyInit): Promise<ContentHashResult>;
     /**
-     * Get asset content
-     * @param assetId - Asset identifier
+     * Get asset content. Resolves any reference form the metadata endpoint
+     * does — a bare hash, `a/<hash>`, a workspace/operation path, or a
+     * DID-qualified URL — via the venue's canonical `GET /api/v1/content/{ref}`
+     * (covia#368), not the hash-only legacy `assets/{id}/content` route.
+     * @param assetId - Asset reference (any form)
      */
     getContent(assetId: string): Promise<ReadableStream<Uint8Array> | null>;
     /**
@@ -581,7 +588,6 @@ declare class OperationManager {
 
 interface WorkspaceManagerVenue extends VenueRequestContext {
     operations: OperationRunner;
-    lastKnownStatus?: StatusData;
 }
 /**
  * Workspace (lattice) operations against a venue.
@@ -609,9 +615,10 @@ declare class WorkspaceManager {
     private _values;
     /**
      * Whether the venue serves `GET /api/v1/values/*`: no if a probe already
-     * 404'd, or if the venue's last known status identifies it as pre-0.3
-     * (venues that old don't report a `version` at all). Checked per read —
-     * connect/`status()` may populate the status after this manager exists.
+     * 404'd. No version fast-path — a venue's self-reported version is weaker
+     * evidence than its answer to the request (an embedded venue can report
+     * its host application's version instead of its own; see covia-sdk#36).
+     * Rely purely on the lazy 404 latch, same as UserManager.usersGet.
      */
     private supportsValues;
     private unsupported;
@@ -828,6 +835,47 @@ declare class UserManager {
     revokeAuthenticator(key: string, did?: string, ucans?: string[]): Promise<AuthenticatorRevokeResult>;
 }
 
+interface OpOps {
+    run<T = unknown>(assetId: string, input?: unknown, options?: InvokeOptions): Promise<T>;
+    invoke(assetId: string, input?: unknown, options?: InvokeOptions): Promise<Job>;
+}
+interface A2AManagerVenue {
+    operations: OpOps;
+}
+/**
+ * Bring-your-own-agent (A2A): import a remote A2A endpoint or another Covia
+ * agent as an immutable agent Asset, then task it. Both calls persist a Job
+ * (the venue records the import and mirrors the remote Task's lifecycle onto
+ * `send`'s Job) — there is no job-free surface here.
+ */
+declare class A2AManager {
+    private venue;
+    constructor(venue: A2AManagerVenue);
+    /**
+     * Register a remote A2A endpoint or Covia agent as an immutable agent
+     * Asset, with a mutable binding at `w/a2a/agents/<name>`. Waits for the
+     * import to complete and returns its result directly.
+     */
+    importAgent(input: A2AImportAgentInput): Promise<A2AImportAgentResult>;
+    /**
+     * Task an imported agent. Returns the raw Job rather than waiting for a
+     * result: the local Job mirrors the remote Task's lifecycle, so a reply
+     * that pauses (INPUT_REQUIRED, AUTH_REQUIRED) is a paused Job the caller
+     * inspects and continues via `job.sendMessage()` — the same shape as any
+     * other paused job, not a special case for A2A. Once the Job reaches a
+     * terminal state, `job.output` is the final remote `A2ATask`.
+     *
+     * @param agent Imported agent reference — `w/a2a/agents/<name>` or its
+     *   immutable `did:.../a/<hash>` id.
+     * @param message An A2A Message: `{ role, parts, messageId? }`.
+     * @param options.taskId Continue an existing remote Task instead of
+     *   starting a new one.
+     */
+    send(agent: string, message: A2AMessage, options?: {
+        taskId?: string;
+    }): Promise<Job>;
+}
+
 /**
  * Resolve a non-DID venue id into the ordered list of base URLs that
  * {@link Venue.connect} will try in turn. Explicit `http(s)://` inputs are
@@ -884,6 +932,7 @@ declare class Venue implements VenueInterface {
     private _memory?;
     private _dlfs?;
     private _users?;
+    private _a2a?;
     get adapters(): AdapterManager;
     get agents(): AgentManager;
     get jobs(): JobManager;
@@ -896,6 +945,7 @@ declare class Venue implements VenueInterface {
     get memory(): MemoryManager;
     get dlfs(): DLFSManager;
     get users(): UserManager;
+    get a2a(): A2AManager;
     constructor(options?: VenueOptions);
     /**
      * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
@@ -1853,6 +1903,67 @@ declare class AgentSessionNotFoundError extends CoviaError {
     readonly sessionId: string;
     constructor(agentId: string, sessionId: string);
 }
+/** Stored authentication binding for an imported A2A agent — a reference to
+ *  a secret, never a literal credential. */
+interface A2AAuthRef {
+    /** Agent Card-declared API key or Bearer scheme name. */
+    scheme?: string;
+    /** Bearer auth needed to discover a private card. */
+    kind?: 'bearer';
+    /** `s/<name>` — the stored secret this binds to. */
+    secret: string;
+}
+interface A2AImportAgentInput {
+    /** Local alias matching `[a-z0-9-]{1,64}`; creates `w/a2a/agents/<name>`. */
+    name: string;
+    /** Base URL of a standard external A2A agent. Exactly one of `url`/`coviaAgent`. */
+    url?: string;
+    /** Covia grid agent address: local `g/<agentId>` or full `<ownerDID>/g/<agentId>`. */
+    coviaAgent?: string;
+    /** Base URL of the venue hosting `coviaAgent` — required for a full address. */
+    venue?: string;
+    auth?: A2AAuthRef;
+}
+/** The immutable asset DID URL, mutable workspace binding, and exact agent
+ *  asset hash from importing an agent. */
+interface A2AImportAgentResult {
+    /** Mutable workspace binding, e.g. `w/a2a/agents/venue-b-bot`. */
+    path?: string;
+    /** Immutable agent-asset hash. */
+    a2aAgentAsset?: string;
+    /** Whether the binding was written. */
+    stored?: boolean;
+    /** Full immutable DID URL of the agent asset. */
+    id?: string;
+}
+/** One part of an A2A message/artifact (v1 wire format). */
+interface A2APart {
+    type?: string;
+    kind?: string;
+    text?: string;
+    data?: unknown;
+}
+interface A2AMessage {
+    role: string;
+    parts: A2APart[];
+    messageId?: string;
+}
+/** The remote A2A Task snapshot a send mirrors onto the local Job's output —
+ *  final when the Job reaches a terminal state, a live snapshot while paused. */
+interface A2ATask {
+    id?: string;
+    contextId?: string;
+    status?: {
+        state?: string;
+        timestamp?: string;
+    };
+    artifacts?: {
+        artifactId?: string;
+        parts?: A2APart[];
+    }[];
+    history?: A2AMessage[];
+    [key: string]: unknown;
+}
 
 /** Parse a Retry-After header (delta-seconds or HTTP-date) to ms from now. */
 declare function parseRetryAfterMs(header: string | null, nowMs: number): number;
@@ -2147,4 +2258,4 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
 
-export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/dist/index.d.ts

@@ -174,7 +174,9 @@ declare abstract class Asset {
      */
     getContent(): Promise<ReadableStream<Uint8Array> | null>;
     /**
-     * Get the URL for downloading asset content
+     * Get the URL for downloading asset content. Resolves any reference form
+     * this asset was addressed by, via the venue's canonical any-ref content
+     * route (covia#368).
      * @returns {string} The URL for downloading the asset content
      */
     getContentURL(): string;
@@ -368,7 +370,6 @@ interface AgentManagerVenue extends VenueRequestContext {
         read(path: string, maxSize?: number): Promise<WorkspaceReadResult>;
         slice(path: string, offset?: number, limit?: number): Promise<WorkspaceSliceResult>;
     };
-    lastKnownStatus?: StatusData;
 }
 declare class AgentManager {
     private venue;
@@ -376,7 +377,10 @@ declare class AgentManager {
     private agentSseSupported;
     constructor(venue: AgentManagerVenue);
     /** Whether the venue serves `GET /api/v1/agents`: no if a probe already
-     *  404'd, or if the venue's last known status identifies it as pre-0.4. */
+     *  404'd. No version fast-path — a venue's self-reported version is weaker
+     *  evidence than its answer to the request (an embedded venue can report
+     *  its host application's version instead of its own; see covia-sdk#36).
+     *  Rely purely on the lazy 404 latch, same as UserManager.usersGet. */
     private supportsAgentsGet;
     /** A job-free agents GET that rejects when the endpoint is unavailable. */
     private agentsGet;
@@ -521,8 +525,11 @@ declare class AssetManager {
      */
     putContent(assetId: string, content: BodyInit): Promise<ContentHashResult>;
     /**
-     * Get asset content
-     * @param assetId - Asset identifier
+     * Get asset content. Resolves any reference form the metadata endpoint
+     * does — a bare hash, `a/<hash>`, a workspace/operation path, or a
+     * DID-qualified URL — via the venue's canonical `GET /api/v1/content/{ref}`
+     * (covia#368), not the hash-only legacy `assets/{id}/content` route.
+     * @param assetId - Asset reference (any form)
      */
     getContent(assetId: string): Promise<ReadableStream<Uint8Array> | null>;
     /**
@@ -581,7 +588,6 @@ declare class OperationManager {
 
 interface WorkspaceManagerVenue extends VenueRequestContext {
     operations: OperationRunner;
-    lastKnownStatus?: StatusData;
 }
 /**
  * Workspace (lattice) operations against a venue.
@@ -609,9 +615,10 @@ declare class WorkspaceManager {
     private _values;
     /**
      * Whether the venue serves `GET /api/v1/values/*`: no if a probe already
-     * 404'd, or if the venue's last known status identifies it as pre-0.3
-     * (venues that old don't report a `version` at all). Checked per read —
-     * connect/`status()` may populate the status after this manager exists.
+     * 404'd. No version fast-path — a venue's self-reported version is weaker
+     * evidence than its answer to the request (an embedded venue can report
+     * its host application's version instead of its own; see covia-sdk#36).
+     * Rely purely on the lazy 404 latch, same as UserManager.usersGet.
      */
     private supportsValues;
     private unsupported;
@@ -828,6 +835,47 @@ declare class UserManager {
     revokeAuthenticator(key: string, did?: string, ucans?: string[]): Promise<AuthenticatorRevokeResult>;
 }
 
+interface OpOps {
+    run<T = unknown>(assetId: string, input?: unknown, options?: InvokeOptions): Promise<T>;
+    invoke(assetId: string, input?: unknown, options?: InvokeOptions): Promise<Job>;
+}
+interface A2AManagerVenue {
+    operations: OpOps;
+}
+/**
+ * Bring-your-own-agent (A2A): import a remote A2A endpoint or another Covia
+ * agent as an immutable agent Asset, then task it. Both calls persist a Job
+ * (the venue records the import and mirrors the remote Task's lifecycle onto
+ * `send`'s Job) — there is no job-free surface here.
+ */
+declare class A2AManager {
+    private venue;
+    constructor(venue: A2AManagerVenue);
+    /**
+     * Register a remote A2A endpoint or Covia agent as an immutable agent
+     * Asset, with a mutable binding at `w/a2a/agents/<name>`. Waits for the
+     * import to complete and returns its result directly.
+     */
+    importAgent(input: A2AImportAgentInput): Promise<A2AImportAgentResult>;
+    /**
+     * Task an imported agent. Returns the raw Job rather than waiting for a
+     * result: the local Job mirrors the remote Task's lifecycle, so a reply
+     * that pauses (INPUT_REQUIRED, AUTH_REQUIRED) is a paused Job the caller
+     * inspects and continues via `job.sendMessage()` — the same shape as any
+     * other paused job, not a special case for A2A. Once the Job reaches a
+     * terminal state, `job.output` is the final remote `A2ATask`.
+     *
+     * @param agent Imported agent reference — `w/a2a/agents/<name>` or its
+     *   immutable `did:.../a/<hash>` id.
+     * @param message An A2A Message: `{ role, parts, messageId? }`.
+     * @param options.taskId Continue an existing remote Task instead of
+     *   starting a new one.
+     */
+    send(agent: string, message: A2AMessage, options?: {
+        taskId?: string;
+    }): Promise<Job>;
+}
+
 /**
  * Resolve a non-DID venue id into the ordered list of base URLs that
  * {@link Venue.connect} will try in turn. Explicit `http(s)://` inputs are
@@ -884,6 +932,7 @@ declare class Venue implements VenueInterface {
     private _memory?;
     private _dlfs?;
     private _users?;
+    private _a2a?;
     get adapters(): AdapterManager;
     get agents(): AgentManager;
     get jobs(): JobManager;
@@ -896,6 +945,7 @@ declare class Venue implements VenueInterface {
     get memory(): MemoryManager;
     get dlfs(): DLFSManager;
     get users(): UserManager;
+    get a2a(): A2AManager;
     constructor(options?: VenueOptions);
     /**
      * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
@@ -1853,6 +1903,67 @@ declare class AgentSessionNotFoundError extends CoviaError {
     readonly sessionId: string;
     constructor(agentId: string, sessionId: string);
 }
+/** Stored authentication binding for an imported A2A agent — a reference to
+ *  a secret, never a literal credential. */
+interface A2AAuthRef {
+    /** Agent Card-declared API key or Bearer scheme name. */
+    scheme?: string;
+    /** Bearer auth needed to discover a private card. */
+    kind?: 'bearer';
+    /** `s/<name>` — the stored secret this binds to. */
+    secret: string;
+}
+interface A2AImportAgentInput {
+    /** Local alias matching `[a-z0-9-]{1,64}`; creates `w/a2a/agents/<name>`. */
+    name: string;
+    /** Base URL of a standard external A2A agent. Exactly one of `url`/`coviaAgent`. */
+    url?: string;
+    /** Covia grid agent address: local `g/<agentId>` or full `<ownerDID>/g/<agentId>`. */
+    coviaAgent?: string;
+    /** Base URL of the venue hosting `coviaAgent` — required for a full address. */
+    venue?: string;
+    auth?: A2AAuthRef;
+}
+/** The immutable asset DID URL, mutable workspace binding, and exact agent
+ *  asset hash from importing an agent. */
+interface A2AImportAgentResult {
+    /** Mutable workspace binding, e.g. `w/a2a/agents/venue-b-bot`. */
+    path?: string;
+    /** Immutable agent-asset hash. */
+    a2aAgentAsset?: string;
+    /** Whether the binding was written. */
+    stored?: boolean;
+    /** Full immutable DID URL of the agent asset. */
+    id?: string;
+}
+/** One part of an A2A message/artifact (v1 wire format). */
+interface A2APart {
+    type?: string;
+    kind?: string;
+    text?: string;
+    data?: unknown;
+}
+interface A2AMessage {
+    role: string;
+    parts: A2APart[];
+    messageId?: string;
+}
+/** The remote A2A Task snapshot a send mirrors onto the local Job's output —
+ *  final when the Job reaches a terminal state, a live snapshot while paused. */
+interface A2ATask {
+    id?: string;
+    contextId?: string;
+    status?: {
+        state?: string;
+        timestamp?: string;
+    };
+    artifacts?: {
+        artifactId?: string;
+        parts?: A2APart[];
+    }[];
+    history?: A2AMessage[];
+    [key: string]: unknown;
+}
 
 /** Parse a Retry-After header (delta-seconds or HTTP-date) to ms from now. */
 declare function parseRetryAfterMs(header: string | null, nowMs: number): number;
@@ -2147,4 +2258,4 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
 
-export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/dist/index.js

@@ -1157,7 +1157,10 @@ function createEdDSAJWT(privateKey, lifetimeSeconds = 300, audience) {
     sub: did,
     iss: did,
     iat: nowSecs,
-    exp: nowSecs + lifetimeSeconds
+    // Floored defensively — lifetimeSeconds has no integer enforcement at
+    // the type level, and a float exp claim can fail JWT validation on
+    // servers that require a bare integer Unix timestamp (covia-sdk#46).
+    exp: Math.floor(nowSecs + lifetimeSeconds)
   };
   if (audience) claims.aud = audience;
   const payload = JSON.stringify(claims);
@@ -1712,12 +1715,6 @@ function venueStream(venue, path, options = {}) {
 }
 
 // src/venue-features.ts
-function versionAtLeast(version, major, minor) {
-  const m = version?.match(/^(\d+)\.(\d+)/);
-  if (!m) return true;
-  const [maj, min] = [Number(m[1]), Number(m[2])];
-  return maj > major || maj === major && min >= minor;
-}
 var ROUTE_MISSING_404 = /\bEndpoint (GET|POST|PUT|DELETE|PATCH|HEAD) /;
 
 // src/values-util.ts
@@ -1772,13 +1769,11 @@ var AgentManager = class {
     this.agentSseSupported = true;
   }
   /** Whether the venue serves `GET /api/v1/agents`: no if a probe already
-   *  404'd, or if the venue's last known status identifies it as pre-0.4. */
+   *  404'd. No version fast-path — a venue's self-reported version is weaker
+   *  evidence than its answer to the request (an embedded venue can report
+   *  its host application's version instead of its own; see covia-sdk#36).
+   *  Rely purely on the lazy 404 latch, same as UserManager.usersGet. */
   supportsAgentsGet() {
-    if (!this.agentsGetSupported) return false;
-    const status = this.venue.lastKnownStatus;
-    if (status && (!status.version || !versionAtLeast(status.version, 0, 4))) {
-      this.agentsGetSupported = false;
-    }
     return this.agentsGetSupported;
   }
   /** A job-free agents GET that rejects when the endpoint is unavailable. */
@@ -2270,11 +2265,13 @@ var Asset = class {
     return this._assets.getContent(this.id);
   }
   /**
-   * Get the URL for downloading asset content
+   * Get the URL for downloading asset content. Resolves any reference form
+   * this asset was addressed by, via the venue's canonical any-ref content
+   * route (covia#368).
    * @returns {string} The URL for downloading the asset content
    */
   getContentURL() {
-    return `${this.venue.baseUrl}/api/v1/assets/${this.id}/content`;
+    return `${this.venue.baseUrl}/api/v1/content/${this.id}`;
   }
   /**
    * Execute the operation and await its result.
@@ -2451,14 +2448,17 @@ var AssetManager = class {
     }
   }
   /**
-   * Get asset content
-   * @param assetId - Asset identifier
+   * Get asset content. Resolves any reference form the metadata endpoint
+   * does — a bare hash, `a/<hash>`, a workspace/operation path, or a
+   * DID-qualified URL — via the venue's canonical `GET /api/v1/content/{ref}`
+   * (covia#368), not the hash-only legacy `assets/{id}/content` route.
+   * @param assetId - Asset reference (any form)
    */
   async getContent(assetId) {
     try {
       const response = await venueStream(
         this.venue,
-        `/api/v1/assets/${assetId}/content`,
+        `/api/v1/content/${assetId}`,
         { contentType: null }
       );
       return response.body;
@@ -2598,16 +2598,12 @@ var WorkspaceManager = class {
   }
   /**
    * Whether the venue serves `GET /api/v1/values/*`: no if a probe already
-   * 404'd, or if the venue's last known status identifies it as pre-0.3
-   * (venues that old don't report a `version` at all). Checked per read —
-   * connect/`status()` may populate the status after this manager exists.
+   * 404'd. No version fast-path — a venue's self-reported version is weaker
+   * evidence than its answer to the request (an embedded venue can report
+   * its host application's version instead of its own; see covia-sdk#36).
+   * Rely purely on the lazy 404 latch, same as UserManager.usersGet.
    */
   supportsValues() {
-    if (!this.valuesSupported) return false;
-    const status = this.venue.lastKnownStatus;
-    if (status && (!status.version || !versionAtLeast(status.version, 0, 3))) {
-      this.valuesSupported = false;
-    }
     return this.valuesSupported;
   }
   unsupported(feature) {
@@ -2970,6 +2966,44 @@ var UserManager = class {
   }
 };
 
+// src/A2AManager.ts
+var IMPORT_AGENT_OP = "v/ops/a2a/import-agent";
+var SEND_OP = "v/ops/a2a/send";
+var A2AManager = class {
+  constructor(venue) {
+    this.venue = venue;
+  }
+  /**
+   * Register a remote A2A endpoint or Covia agent as an immutable agent
+   * Asset, with a mutable binding at `w/a2a/agents/<name>`. Waits for the
+   * import to complete and returns its result directly.
+   */
+  async importAgent(input) {
+    return this.venue.operations.run(IMPORT_AGENT_OP, input);
+  }
+  /**
+   * Task an imported agent. Returns the raw Job rather than waiting for a
+   * result: the local Job mirrors the remote Task's lifecycle, so a reply
+   * that pauses (INPUT_REQUIRED, AUTH_REQUIRED) is a paused Job the caller
+   * inspects and continues via `job.sendMessage()` — the same shape as any
+   * other paused job, not a special case for A2A. Once the Job reaches a
+   * terminal state, `job.output` is the final remote `A2ATask`.
+   *
+   * @param agent Imported agent reference — `w/a2a/agents/<name>` or its
+   *   immutable `did:.../a/<hash>` id.
+   * @param message An A2A Message: `{ role, parts, messageId? }`.
+   * @param options.taskId Continue an existing remote Task instead of
+   *   starting a new one.
+   */
+  async send(agent, message, options) {
+    return this.venue.operations.invoke(SEND_OP, {
+      agent,
+      message,
+      ...options?.taskId !== void 0 && { taskId: options.taskId }
+    });
+  }
+};
+
 // src/Agent.ts
 var Agent = class _Agent {
   constructor(id, venue) {
@@ -3178,6 +3212,9 @@ var Venue = class _Venue {
   get users() {
     return this._users ?? (this._users = new UserManager(this));
   }
+  get a2a() {
+    return this._a2a ?? (this._a2a = new A2AManager(this));
+  }
   /**
    * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
    * venue is auth-gated (status answers 401/403 — public access disabled), the
@@ -3487,7 +3524,12 @@ function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = [
     ucv: UCV_VERSION,
     att,
     prf: proofs,
-    exp: lifetimeSeconds === null ? null : nowSecs + lifetimeSeconds
+    // Floored even though nowSecs already is: lifetimeSeconds is a public
+    // number param with no integer enforcement, and Convex's JSON reader
+    // only decodes a bare integer as CVMLong — a float exp (e.g. a caller
+    // passing Date.now()/1000 + n instead of an integer offset) becomes a
+    // CVMDouble the venue's UcanJwtValidator rejects outright (covia-sdk#46).
+    exp: lifetimeSeconds === null ? null : Math.floor(nowSecs + lifetimeSeconds)
   };
   const signingInput = `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
   const signature = sign(encoder2.encode(signingInput), privateKey);
@@ -3509,6 +3551,7 @@ function relayDelegation(privateKey, venueDID, lifetimeSeconds, caps = []) {
   (*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) *)
 */
 
+exports.A2AManager = A2AManager;
 exports.AdapterManager = AdapterManager;
 exports.Agent = Agent;
 exports.AgentManager = AgentManager;

package/dist/index.mjs

@@ -1155,7 +1155,10 @@ function createEdDSAJWT(privateKey, lifetimeSeconds = 300, audience) {
     sub: did,
     iss: did,
     iat: nowSecs,
-    exp: nowSecs + lifetimeSeconds
+    // Floored defensively — lifetimeSeconds has no integer enforcement at
+    // the type level, and a float exp claim can fail JWT validation on
+    // servers that require a bare integer Unix timestamp (covia-sdk#46).
+    exp: Math.floor(nowSecs + lifetimeSeconds)
   };
   if (audience) claims.aud = audience;
   const payload = JSON.stringify(claims);
@@ -1710,12 +1713,6 @@ function venueStream(venue, path, options = {}) {
 }
 
 // src/venue-features.ts
-function versionAtLeast(version, major, minor) {
-  const m = version?.match(/^(\d+)\.(\d+)/);
-  if (!m) return true;
-  const [maj, min] = [Number(m[1]), Number(m[2])];
-  return maj > major || maj === major && min >= minor;
-}
 var ROUTE_MISSING_404 = /\bEndpoint (GET|POST|PUT|DELETE|PATCH|HEAD) /;
 
 // src/values-util.ts
@@ -1770,13 +1767,11 @@ var AgentManager = class {
     this.agentSseSupported = true;
   }
   /** Whether the venue serves `GET /api/v1/agents`: no if a probe already
-   *  404'd, or if the venue's last known status identifies it as pre-0.4. */
+   *  404'd. No version fast-path — a venue's self-reported version is weaker
+   *  evidence than its answer to the request (an embedded venue can report
+   *  its host application's version instead of its own; see covia-sdk#36).
+   *  Rely purely on the lazy 404 latch, same as UserManager.usersGet. */
   supportsAgentsGet() {
-    if (!this.agentsGetSupported) return false;
-    const status = this.venue.lastKnownStatus;
-    if (status && (!status.version || !versionAtLeast(status.version, 0, 4))) {
-      this.agentsGetSupported = false;
-    }
     return this.agentsGetSupported;
   }
   /** A job-free agents GET that rejects when the endpoint is unavailable. */
@@ -2268,11 +2263,13 @@ var Asset = class {
     return this._assets.getContent(this.id);
   }
   /**
-   * Get the URL for downloading asset content
+   * Get the URL for downloading asset content. Resolves any reference form
+   * this asset was addressed by, via the venue's canonical any-ref content
+   * route (covia#368).
    * @returns {string} The URL for downloading the asset content
    */
   getContentURL() {
-    return `${this.venue.baseUrl}/api/v1/assets/${this.id}/content`;
+    return `${this.venue.baseUrl}/api/v1/content/${this.id}`;
   }
   /**
    * Execute the operation and await its result.
@@ -2449,14 +2446,17 @@ var AssetManager = class {
     }
   }
   /**
-   * Get asset content
-   * @param assetId - Asset identifier
+   * Get asset content. Resolves any reference form the metadata endpoint
+   * does — a bare hash, `a/<hash>`, a workspace/operation path, or a
+   * DID-qualified URL — via the venue's canonical `GET /api/v1/content/{ref}`
+   * (covia#368), not the hash-only legacy `assets/{id}/content` route.
+   * @param assetId - Asset reference (any form)
    */
   async getContent(assetId) {
     try {
       const response = await venueStream(
         this.venue,
-        `/api/v1/assets/${assetId}/content`,
+        `/api/v1/content/${assetId}`,
         { contentType: null }
       );
       return response.body;
@@ -2596,16 +2596,12 @@ var WorkspaceManager = class {
   }
   /**
    * Whether the venue serves `GET /api/v1/values/*`: no if a probe already
-   * 404'd, or if the venue's last known status identifies it as pre-0.3
-   * (venues that old don't report a `version` at all). Checked per read —
-   * connect/`status()` may populate the status after this manager exists.
+   * 404'd. No version fast-path — a venue's self-reported version is weaker
+   * evidence than its answer to the request (an embedded venue can report
+   * its host application's version instead of its own; see covia-sdk#36).
+   * Rely purely on the lazy 404 latch, same as UserManager.usersGet.
    */
   supportsValues() {
-    if (!this.valuesSupported) return false;
-    const status = this.venue.lastKnownStatus;
-    if (status && (!status.version || !versionAtLeast(status.version, 0, 3))) {
-      this.valuesSupported = false;
-    }
     return this.valuesSupported;
   }
   unsupported(feature) {
@@ -2968,6 +2964,44 @@ var UserManager = class {
   }
 };
 
+// src/A2AManager.ts
+var IMPORT_AGENT_OP = "v/ops/a2a/import-agent";
+var SEND_OP = "v/ops/a2a/send";
+var A2AManager = class {
+  constructor(venue) {
+    this.venue = venue;
+  }
+  /**
+   * Register a remote A2A endpoint or Covia agent as an immutable agent
+   * Asset, with a mutable binding at `w/a2a/agents/<name>`. Waits for the
+   * import to complete and returns its result directly.
+   */
+  async importAgent(input) {
+    return this.venue.operations.run(IMPORT_AGENT_OP, input);
+  }
+  /**
+   * Task an imported agent. Returns the raw Job rather than waiting for a
+   * result: the local Job mirrors the remote Task's lifecycle, so a reply
+   * that pauses (INPUT_REQUIRED, AUTH_REQUIRED) is a paused Job the caller
+   * inspects and continues via `job.sendMessage()` — the same shape as any
+   * other paused job, not a special case for A2A. Once the Job reaches a
+   * terminal state, `job.output` is the final remote `A2ATask`.
+   *
+   * @param agent Imported agent reference — `w/a2a/agents/<name>` or its
+   *   immutable `did:.../a/<hash>` id.
+   * @param message An A2A Message: `{ role, parts, messageId? }`.
+   * @param options.taskId Continue an existing remote Task instead of
+   *   starting a new one.
+   */
+  async send(agent, message, options) {
+    return this.venue.operations.invoke(SEND_OP, {
+      agent,
+      message,
+      ...options?.taskId !== void 0 && { taskId: options.taskId }
+    });
+  }
+};
+
 // src/Agent.ts
 var Agent = class _Agent {
   constructor(id, venue) {
@@ -3176,6 +3210,9 @@ var Venue = class _Venue {
   get users() {
     return this._users ?? (this._users = new UserManager(this));
   }
+  get a2a() {
+    return this._a2a ?? (this._a2a = new A2AManager(this));
+  }
   /**
    * Connect to a venue, validating it with `GET {base}/api/v1/status`. If the
    * venue is auth-gated (status answers 401/403 — public access disabled), the
@@ -3485,7 +3522,12 @@ function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = [
     ucv: UCV_VERSION,
     att,
     prf: proofs,
-    exp: lifetimeSeconds === null ? null : nowSecs + lifetimeSeconds
+    // Floored even though nowSecs already is: lifetimeSeconds is a public
+    // number param with no integer enforcement, and Convex's JSON reader
+    // only decodes a bare integer as CVMLong — a float exp (e.g. a caller
+    // passing Date.now()/1000 + n instead of an integer offset) becomes a
+    // CVMDouble the venue's UcanJwtValidator rejects outright (covia-sdk#46).
+    exp: lifetimeSeconds === null ? null : Math.floor(nowSecs + lifetimeSeconds)
   };
   const signingInput = `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
   const signature = sign(encoder2.encode(signingInput), privateKey);
@@ -3507,4 +3549,4 @@ function relayDelegation(privateKey, venueDID, lifetimeSeconds, caps = []) {
   (*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) *)
 */
 
-export { AdapterManager, Agent, AgentManager, AgentSessionNotFoundError, AgentStatus, Asset, AssetManager, AssetNotFoundError, Auth, BasicAuth, BearerAuth, ChatSession, CoviaConnectionError, CoviaError, CoviaTimeoutError, CredentialsHTTP, DLFSManager, DataAsset, Ed25519Auth, Grid, GridError, Job, JobFailedError, JobManager, JobNotFoundError, JobStatus, KeyPairAuth, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, OperationManager, RateLimitError, RunStatus, SecretManager, SkillManager, UCANManager, UnsupportedVenueFeatureError, UserManager, VENUE_RELAY, Venue, VenueIdentityChangedError, WorkspaceManager, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { A2AManager, AdapterManager, Agent, AgentManager, AgentSessionNotFoundError, AgentStatus, Asset, AssetManager, AssetNotFoundError, Auth, BasicAuth, BearerAuth, ChatSession, CoviaConnectionError, CoviaError, CoviaTimeoutError, CredentialsHTTP, DLFSManager, DataAsset, Ed25519Auth, Grid, GridError, Job, JobFailedError, JobManager, JobNotFoundError, JobStatus, KeyPairAuth, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, OperationManager, RateLimitError, RunStatus, SecretManager, SkillManager, UCANManager, UnsupportedVenueFeatureError, UserManager, VENUE_RELAY, Venue, VenueIdentityChangedError, WorkspaceManager, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@covia/covia-sdk",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "description": "Typescript library for covia-ai",
   "packageManager": "pnpm@11.9.0",
   "main": "./dist/index.js",