@covia/covia-sdk 1.19.1 → 1.20.0

package/dist/index.d.mts

@@ -203,6 +203,48 @@ declare abstract class Asset {
     invoke(input?: unknown, options?: InvokeOptions): Promise<Job>;
 }
 
+/**
+ * Ed25519 signers: the key-holding half of every signing path, abstracted so
+ * the private key need not be readable bytes.
+ *
+ * A {@link rawKeySigner} wraps a 32-byte key (the classic path). A
+ * {@link webCryptoSigner} wraps a WebCrypto `CryptoKeyPair` whose private key
+ * can be **non-extractable**: it signs, but no script can read it back as
+ * bytes, and it persists in IndexedDB as a structured-cloneable `CryptoKey`.
+ * WebCrypto signing is async, so the {@link Ed25519Signer} contract is too.
+ *
+ * Ed25519 is deterministic (RFC 8032): the same key and message give the same
+ * signature on either path, so tokens are identical whichever signer made them.
+ */
+/** Signs with an Ed25519 key that may not be readable as bytes. */
+interface Ed25519Signer {
+    /** 32-byte raw public key. */
+    readonly publicKey: Uint8Array;
+    /** Ed25519 signature (64 bytes) over `data`. */
+    sign(data: Uint8Array): Promise<Uint8Array>;
+}
+/** A signer over a raw 32-byte private key (synchronous @noble signing underneath). */
+declare function rawKeySigner(privateKey: Uint8Array): Ed25519Signer;
+/**
+ * A signer over a WebCrypto Ed25519 keypair. The private key may be (and
+ * normally should be) non-extractable; the public key always is exportable.
+ */
+declare function webCryptoSigner(keyPair: CryptoKeyPair): Promise<Ed25519Signer>;
+/** Generate a WebCrypto Ed25519 keypair whose private key cannot be exported. */
+declare function generateNonExtractableKeyPair(): Promise<CryptoKeyPair>;
+/**
+ * Import an existing 32-byte private key as a non-extractable WebCrypto
+ * keypair — the one-time migration from a stored hex/raw key. The DID is
+ * unchanged. The caller should delete its own copy of the raw key afterwards.
+ */
+declare function importNonExtractableKey(privateKey: Uint8Array): Promise<CryptoKeyPair>;
+/**
+ * Whether this runtime can sign with WebCrypto Ed25519 (current Chrome,
+ * Firefox, Safari 17+ and Node). Apps without it fall back to a raw-key
+ * signer. Probed once, by generating and signing with a throwaway key.
+ */
+declare function isWebCryptoEd25519Supported(): Promise<boolean>;
+
 /**
  * Abstract base class for authentication strategies.
  * Subclass this to implement custom authentication.
@@ -224,8 +266,11 @@ declare abstract class Auth {
      * @param audience - The venue's DID, supplied by the transport. Providers
      *   that bind tokens to the venue's identity (e.g. {@link Ed25519Auth}) use it
      *   as the JWT `aud`; others ignore it.
+     * @returns Nothing, or a promise for providers that sign asynchronously
+     *   (e.g. {@link Ed25519Auth.fromSigner} over a WebCrypto key). The transport
+     *   awaits it before sending, so callers of `apply` must await it too.
      */
-    abstract apply(headers: Record<string, string>, audience?: string): void;
+    abstract apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
 }
 /** No-op authentication provider. Sends no credentials. */
 declare class NoAuth extends Auth {
@@ -262,23 +307,34 @@ declare class BasicAuth extends Auth {
  * client's Ed25519 private key.  The server verifies the signature and
  * extracts the caller's DID from the `sub` claim.
  *
+ * Construct it from a raw 32-byte key, or with {@link Ed25519Auth.fromSigner}
+ * from an {@link Ed25519Signer} — e.g. a non-extractable WebCrypto key, which
+ * signs without the key ever being readable by page scripts. Signer-backed
+ * instances sign asynchronously; the SDK transport awaits them.
+ *
  * Example:
  *   const auth = Ed25519Auth.generate();
  *   console.log(auth.getDID()); // did:key:z6Mk...
  *   const venue = await Grid.connect("https://your-venue.example.com", auth);
+ *
+ *   // Non-extractable key (browser):
+ *   const signer = await webCryptoSigner(await generateNonExtractableKeyPair());
+ *   const venue2 = await Grid.connect("https://your-venue.example.com", Ed25519Auth.fromSigner(signer));
  */
 declare class Ed25519Auth extends Auth {
-    private _privateKey;
+    /** Present only for raw-key instances; signer-backed ones never see key bytes. */
+    private _privateKey?;
+    private _signer;
     private _publicKey;
     private _did;
     private _lifetime;
     private _audience?;
     /**
-     * @param privateKey - 32-byte Ed25519 private key
+     * @param key - 32-byte Ed25519 private key, or an {@link Ed25519Signer}
      * @param tokenLifetimeSeconds - JWT lifetime in seconds (default 300 = 5 min)
      */
-    constructor(privateKey: Uint8Array, tokenLifetimeSeconds?: number);
-    apply(headers: Record<string, string>, audience?: string): void;
+    constructor(key: Uint8Array | Ed25519Signer, tokenLifetimeSeconds?: number);
+    apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     /**
      * Mint a bearer-usable identity JWT for this key — the same token
      * {@link apply} attaches to every request, exposed for callers that need
@@ -290,10 +346,19 @@ declare class Ed25519Auth extends Auth {
      * at any venue that accepts the caller's DID, so minting one is refused
      * rather than silently weakened.
      *
+     * Raw-key instances only: a signer-backed instance signs asynchronously,
+     * so use {@link mintIdentityToken}, which works for both.
+     *
      * @param audience - The venue DID the token is bound to (`aud` claim).
      * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
      */
     identityToken(audience?: string, lifetimeSeconds?: number): string;
+    /**
+     * Async {@link identityToken} that works for raw-key and signer-backed
+     * instances alike. Same token, same audience rules.
+     */
+    mintIdentityToken(audience?: string, lifetimeSeconds?: number): Promise<string>;
+    private resolveAudience;
     /** The caller's DID derived from the public key. */
     getDID(): string;
     /**
@@ -308,6 +373,11 @@ declare class Ed25519Auth extends Auth {
     static generate(tokenLifetimeSeconds?: number): Ed25519Auth;
     /** Create from a hex-encoded private key string. */
     static fromHex(privateKeyHex: string, tokenLifetimeSeconds?: number): Ed25519Auth;
+    /**
+     * Create from an {@link Ed25519Signer}, e.g. `await webCryptoSigner(keyPair)`
+     * over a non-extractable WebCrypto key. Requests sign asynchronously.
+     */
+    static fromSigner(signer: Ed25519Signer, tokenLifetimeSeconds?: number): Ed25519Auth;
 }
 /**
  * @deprecated Renamed to {@link Ed25519Auth} for cross-SDK consistency
@@ -367,7 +437,7 @@ interface VenueRequestContext {
     baseUrl: string;
     venueId: string;
     auth: {
-        apply(headers: Record<string, string>, audience?: string): void;
+        apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     };
 }
 
@@ -2677,6 +2747,7 @@ declare function didFromPublicKey(publicKey: Uint8Array): string;
  * `ucans` request array and relayed across cross-venue hops. Delegation chains
  * embed parent tokens as JWT strings in `prf`.
  */
+
 /** The ability that instructs a venue to relay a cross-venue hop as itself. */
 declare const VENUE_RELAY = "venue/relay";
 interface UCANCapability {
@@ -2700,6 +2771,11 @@ declare function didFor(privateKey: Uint8Array): string;
  * @param proofs parent UCAN JWT strings (`prf`) for delegation chains
  */
 declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): string;
+/**
+ * {@link createUCANJWT} through an {@link Ed25519Signer}, for issuers whose
+ * key is not readable bytes (e.g. a non-extractable WebCrypto key). Same token.
+ */
+declare function createUCANJWTWith(signer: Ed25519Signer, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): Promise<string>;
 /**
  * Mint an **identity token**: a UCAN with an EMPTY attenuation list, audienced
  * to `venueDID`. Pure proof of identity — it grants nothing, and being
@@ -2716,6 +2792,8 @@ declare function identityToken(privateKey: Uint8Array, venueDID: string, lifetim
  * in issuance.
  */
 declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): string;
+/** {@link grant} through an {@link Ed25519Signer}. */
+declare function grantWith(ownerSigner: Ed25519Signer, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): Promise<string>;
 /**
  * Mint a **relay delegation**: instructs and authorises `venueDID` to make a
  * cross-venue hop authenticated as itself, exercising the caller's authority.
@@ -2724,5 +2802,7 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  * authenticated caller (COG-15).
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
+/** {@link relayDelegation} through an {@link Ed25519Signer}. */
+declare function relayDelegationWith(signer: Ed25519Signer, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): Promise<string>;
 
-export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type Ed25519Signer, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, createUCANJWTWith, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, generateNonExtractableKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, grantWith, hexToPrivateKey, identityToken, importNonExtractableKey, isDid, isJobComplete, isJobFinished, isJobPaused, isWebCryptoEd25519Supported, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, rawKeySigner, relayDelegation, relayDelegationWith, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates, webCryptoSigner };

package/dist/index.d.ts

@@ -203,6 +203,48 @@ declare abstract class Asset {
     invoke(input?: unknown, options?: InvokeOptions): Promise<Job>;
 }
 
+/**
+ * Ed25519 signers: the key-holding half of every signing path, abstracted so
+ * the private key need not be readable bytes.
+ *
+ * A {@link rawKeySigner} wraps a 32-byte key (the classic path). A
+ * {@link webCryptoSigner} wraps a WebCrypto `CryptoKeyPair` whose private key
+ * can be **non-extractable**: it signs, but no script can read it back as
+ * bytes, and it persists in IndexedDB as a structured-cloneable `CryptoKey`.
+ * WebCrypto signing is async, so the {@link Ed25519Signer} contract is too.
+ *
+ * Ed25519 is deterministic (RFC 8032): the same key and message give the same
+ * signature on either path, so tokens are identical whichever signer made them.
+ */
+/** Signs with an Ed25519 key that may not be readable as bytes. */
+interface Ed25519Signer {
+    /** 32-byte raw public key. */
+    readonly publicKey: Uint8Array;
+    /** Ed25519 signature (64 bytes) over `data`. */
+    sign(data: Uint8Array): Promise<Uint8Array>;
+}
+/** A signer over a raw 32-byte private key (synchronous @noble signing underneath). */
+declare function rawKeySigner(privateKey: Uint8Array): Ed25519Signer;
+/**
+ * A signer over a WebCrypto Ed25519 keypair. The private key may be (and
+ * normally should be) non-extractable; the public key always is exportable.
+ */
+declare function webCryptoSigner(keyPair: CryptoKeyPair): Promise<Ed25519Signer>;
+/** Generate a WebCrypto Ed25519 keypair whose private key cannot be exported. */
+declare function generateNonExtractableKeyPair(): Promise<CryptoKeyPair>;
+/**
+ * Import an existing 32-byte private key as a non-extractable WebCrypto
+ * keypair — the one-time migration from a stored hex/raw key. The DID is
+ * unchanged. The caller should delete its own copy of the raw key afterwards.
+ */
+declare function importNonExtractableKey(privateKey: Uint8Array): Promise<CryptoKeyPair>;
+/**
+ * Whether this runtime can sign with WebCrypto Ed25519 (current Chrome,
+ * Firefox, Safari 17+ and Node). Apps without it fall back to a raw-key
+ * signer. Probed once, by generating and signing with a throwaway key.
+ */
+declare function isWebCryptoEd25519Supported(): Promise<boolean>;
+
 /**
  * Abstract base class for authentication strategies.
  * Subclass this to implement custom authentication.
@@ -224,8 +266,11 @@ declare abstract class Auth {
      * @param audience - The venue's DID, supplied by the transport. Providers
      *   that bind tokens to the venue's identity (e.g. {@link Ed25519Auth}) use it
      *   as the JWT `aud`; others ignore it.
+     * @returns Nothing, or a promise for providers that sign asynchronously
+     *   (e.g. {@link Ed25519Auth.fromSigner} over a WebCrypto key). The transport
+     *   awaits it before sending, so callers of `apply` must await it too.
      */
-    abstract apply(headers: Record<string, string>, audience?: string): void;
+    abstract apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
 }
 /** No-op authentication provider. Sends no credentials. */
 declare class NoAuth extends Auth {
@@ -262,23 +307,34 @@ declare class BasicAuth extends Auth {
  * client's Ed25519 private key.  The server verifies the signature and
  * extracts the caller's DID from the `sub` claim.
  *
+ * Construct it from a raw 32-byte key, or with {@link Ed25519Auth.fromSigner}
+ * from an {@link Ed25519Signer} — e.g. a non-extractable WebCrypto key, which
+ * signs without the key ever being readable by page scripts. Signer-backed
+ * instances sign asynchronously; the SDK transport awaits them.
+ *
  * Example:
  *   const auth = Ed25519Auth.generate();
  *   console.log(auth.getDID()); // did:key:z6Mk...
  *   const venue = await Grid.connect("https://your-venue.example.com", auth);
+ *
+ *   // Non-extractable key (browser):
+ *   const signer = await webCryptoSigner(await generateNonExtractableKeyPair());
+ *   const venue2 = await Grid.connect("https://your-venue.example.com", Ed25519Auth.fromSigner(signer));
  */
 declare class Ed25519Auth extends Auth {
-    private _privateKey;
+    /** Present only for raw-key instances; signer-backed ones never see key bytes. */
+    private _privateKey?;
+    private _signer;
     private _publicKey;
     private _did;
     private _lifetime;
     private _audience?;
     /**
-     * @param privateKey - 32-byte Ed25519 private key
+     * @param key - 32-byte Ed25519 private key, or an {@link Ed25519Signer}
      * @param tokenLifetimeSeconds - JWT lifetime in seconds (default 300 = 5 min)
      */
-    constructor(privateKey: Uint8Array, tokenLifetimeSeconds?: number);
-    apply(headers: Record<string, string>, audience?: string): void;
+    constructor(key: Uint8Array | Ed25519Signer, tokenLifetimeSeconds?: number);
+    apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     /**
      * Mint a bearer-usable identity JWT for this key — the same token
      * {@link apply} attaches to every request, exposed for callers that need
@@ -290,10 +346,19 @@ declare class Ed25519Auth extends Auth {
      * at any venue that accepts the caller's DID, so minting one is refused
      * rather than silently weakened.
      *
+     * Raw-key instances only: a signer-backed instance signs asynchronously,
+     * so use {@link mintIdentityToken}, which works for both.
+     *
      * @param audience - The venue DID the token is bound to (`aud` claim).
      * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
      */
     identityToken(audience?: string, lifetimeSeconds?: number): string;
+    /**
+     * Async {@link identityToken} that works for raw-key and signer-backed
+     * instances alike. Same token, same audience rules.
+     */
+    mintIdentityToken(audience?: string, lifetimeSeconds?: number): Promise<string>;
+    private resolveAudience;
     /** The caller's DID derived from the public key. */
     getDID(): string;
     /**
@@ -308,6 +373,11 @@ declare class Ed25519Auth extends Auth {
     static generate(tokenLifetimeSeconds?: number): Ed25519Auth;
     /** Create from a hex-encoded private key string. */
     static fromHex(privateKeyHex: string, tokenLifetimeSeconds?: number): Ed25519Auth;
+    /**
+     * Create from an {@link Ed25519Signer}, e.g. `await webCryptoSigner(keyPair)`
+     * over a non-extractable WebCrypto key. Requests sign asynchronously.
+     */
+    static fromSigner(signer: Ed25519Signer, tokenLifetimeSeconds?: number): Ed25519Auth;
 }
 /**
  * @deprecated Renamed to {@link Ed25519Auth} for cross-SDK consistency
@@ -367,7 +437,7 @@ interface VenueRequestContext {
     baseUrl: string;
     venueId: string;
     auth: {
-        apply(headers: Record<string, string>, audience?: string): void;
+        apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     };
 }
 
@@ -2677,6 +2747,7 @@ declare function didFromPublicKey(publicKey: Uint8Array): string;
  * `ucans` request array and relayed across cross-venue hops. Delegation chains
  * embed parent tokens as JWT strings in `prf`.
  */
+
 /** The ability that instructs a venue to relay a cross-venue hop as itself. */
 declare const VENUE_RELAY = "venue/relay";
 interface UCANCapability {
@@ -2700,6 +2771,11 @@ declare function didFor(privateKey: Uint8Array): string;
  * @param proofs parent UCAN JWT strings (`prf`) for delegation chains
  */
 declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): string;
+/**
+ * {@link createUCANJWT} through an {@link Ed25519Signer}, for issuers whose
+ * key is not readable bytes (e.g. a non-extractable WebCrypto key). Same token.
+ */
+declare function createUCANJWTWith(signer: Ed25519Signer, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): Promise<string>;
 /**
  * Mint an **identity token**: a UCAN with an EMPTY attenuation list, audienced
  * to `venueDID`. Pure proof of identity — it grants nothing, and being
@@ -2716,6 +2792,8 @@ declare function identityToken(privateKey: Uint8Array, venueDID: string, lifetim
  * in issuance.
  */
 declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): string;
+/** {@link grant} through an {@link Ed25519Signer}. */
+declare function grantWith(ownerSigner: Ed25519Signer, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): Promise<string>;
 /**
  * Mint a **relay delegation**: instructs and authorises `venueDID` to make a
  * cross-venue hop authenticated as itself, exercising the caller's authority.
@@ -2724,5 +2802,7 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  * authenticated caller (COG-15).
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
+/** {@link relayDelegation} through an {@link Ed25519Signer}. */
+declare function relayDelegationWith(signer: Ed25519Signer, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): Promise<string>;
 
-export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type Ed25519Signer, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, createUCANJWTWith, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, generateNonExtractableKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, grantWith, hexToPrivateKey, identityToken, importNonExtractableKey, isDid, isJobComplete, isJobFinished, isJobPaused, isWebCryptoEd25519Supported, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, rawKeySigner, relayDelegation, relayDelegationWith, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates, webCryptoSigner };

package/dist/index.js

@@ -165,15 +165,15 @@ var isBig = (n) => typeof n === "bigint";
 var isStr = (s) => typeof s === "string";
 var isBytes = (a) => a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
 var abytes = (value, length, title = "") => {
-  const bytes = isBytes(value);
+  const bytes2 = isBytes(value);
   const len = value?.length;
   const needsLen = length !== void 0;
-  if (!bytes || needsLen && len !== length) {
+  if (!bytes2 || needsLen && len !== length) {
     const prefix = title && `"${title}" `;
     const ofLen = needsLen ? ` of length ${length}` : "";
-    const got = bytes ? `length=${len}` : `type=${typeof value}`;
+    const got = bytes2 ? `length=${len}` : `type=${typeof value}`;
     const msg = prefix + "expected Uint8Array" + ofLen + ", got " + got;
-    throw bytes ? new RangeError(msg) : new TypeError(msg);
+    throw bytes2 ? new RangeError(msg) : new TypeError(msg);
   }
   return value;
 };
@@ -632,15 +632,15 @@ function isBytes2(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
 }
 function abytes2(value, length, title = "") {
-  const bytes = isBytes2(value);
+  const bytes2 = isBytes2(value);
   const len = value?.length;
   const needsLen = length !== void 0;
-  if (!bytes || needsLen) {
+  if (!bytes2 || needsLen) {
     const prefix = title && `"${title}" `;
     const ofLen = "";
-    const got = bytes ? `length=${len}` : `type=${typeof value}`;
+    const got = bytes2 ? `length=${len}` : `type=${typeof value}`;
     const message = prefix + "expected Uint8Array" + ofLen + ", got " + got;
-    if (!bytes)
+    if (!bytes2)
       throw new TypeError(message);
     throw new RangeError(message);
   }
@@ -1061,11 +1061,11 @@ function hexToPrivateKey(hex) {
   if (!/^[0-9a-fA-F]{64}$/.test(cleaned)) {
     throw new Error("Invalid Ed25519 private key: expected 64 hex characters (32 bytes)");
   }
-  const bytes = new Uint8Array(32);
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(cleaned.substring(i * 2, i * 2 + 2), 16);
+  const bytes2 = new Uint8Array(32);
+  for (let i = 0; i < bytes2.length; i++) {
+    bytes2[i] = parseInt(cleaned.substring(i * 2, i * 2 + 2), 16);
   }
-  return bytes;
+  return bytes2;
 }
 
 // src/crypto/base58.ts
@@ -1075,13 +1075,13 @@ var ALPHABET_MAP = /* @__PURE__ */ new Map();
 for (let i = 0; i < ALPHABET.length; i++) {
   ALPHABET_MAP.set(ALPHABET[i], i);
 }
-function encode(bytes) {
-  if (bytes.length === 0) return "";
+function encode(bytes2) {
+  if (bytes2.length === 0) return "";
   let zeros = 0;
-  while (zeros < bytes.length && bytes[zeros] === 0) zeros++;
+  while (zeros < bytes2.length && bytes2[zeros] === 0) zeros++;
   const digits = [];
-  for (let i = zeros; i < bytes.length; i++) {
-    let carry = bytes[i];
+  for (let i = zeros; i < bytes2.length; i++) {
+    let carry = bytes2[i];
     for (let j = 0; j < digits.length; j++) {
       carry += digits[j] << 8;
       digits[j] = carry % BASE;
@@ -1102,24 +1102,24 @@ function decode(str) {
   if (str.length === 0) return new Uint8Array(0);
   let zeros = 0;
   while (zeros < str.length && str[zeros] === ALPHABET[0]) zeros++;
-  const bytes = [];
+  const bytes2 = [];
   for (let i = zeros; i < str.length; i++) {
     const val = ALPHABET_MAP.get(str[i]);
     if (val === void 0) throw new Error(`Invalid base58 character: ${str[i]}`);
     let carry = val;
-    for (let j = 0; j < bytes.length; j++) {
-      carry += bytes[j] * BASE;
-      bytes[j] = carry & 255;
+    for (let j = 0; j < bytes2.length; j++) {
+      carry += bytes2[j] * BASE;
+      bytes2[j] = carry & 255;
       carry >>= 8;
     }
     while (carry > 0) {
-      bytes.push(carry & 255);
+      bytes2.push(carry & 255);
       carry >>= 8;
     }
   }
-  const result = new Uint8Array(zeros + bytes.length);
+  const result = new Uint8Array(zeros + bytes2.length);
   for (let i = 0; i < zeros; i++) result[i] = 0;
-  for (let i = 0; i < bytes.length; i++) result[zeros + i] = bytes[bytes.length - 1 - i];
+  for (let i = 0; i < bytes2.length; i++) result[zeros + i] = bytes2[bytes2.length - 1 - i];
   return result;
 }
 
@@ -1155,7 +1155,16 @@ function base64UrlEncode(data) {
   return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
 function createEdDSAJWT(privateKey, lifetimeSeconds = 300, audience) {
-  const publicKey = getPublicKey2(privateKey);
+  const signingInput = edDSASigningInput(getPublicKey2(privateKey), lifetimeSeconds, audience);
+  const signature = sign(encoder.encode(signingInput), privateKey);
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+async function createEdDSAJWTWith(signer, lifetimeSeconds = 300, audience) {
+  const signingInput = edDSASigningInput(signer.publicKey, lifetimeSeconds, audience);
+  const signature = await signer.sign(encoder.encode(signingInput));
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+function edDSASigningInput(publicKey, lifetimeSeconds, audience) {
   const multikey = encodePublicKey(publicKey);
   const did = `did:key:${multikey}`;
   const nowSecs = Math.floor(Date.now() / 1e3);
@@ -1173,18 +1182,95 @@ function createEdDSAJWT(privateKey, lifetimeSeconds = 300, audience) {
   const payload = JSON.stringify(claims);
   const headerB64 = base64UrlEncode(encoder.encode(header));
   const payloadB64 = base64UrlEncode(encoder.encode(payload));
-  const signingInput = `${headerB64}.${payloadB64}`;
-  const signature = sign(encoder.encode(signingInput), privateKey);
-  const signatureB64 = base64UrlEncode(signature);
-  return `${signingInput}.${signatureB64}`;
+  return `${headerB64}.${payloadB64}`;
+}
+
+// src/crypto/signer.ts
+var ED25519 = "Ed25519";
+var PKCS8_ED25519_PREFIX = new Uint8Array([
+  48,
+  46,
+  2,
+  1,
+  0,
+  48,
+  5,
+  6,
+  3,
+  43,
+  101,
+  112,
+  4,
+  34,
+  4,
+  32
+]);
+function subtle2() {
+  const s = globalThis.crypto?.subtle;
+  if (!s) {
+    throw new Error("WebCrypto is unavailable: crypto.subtle requires a secure context (HTTPS or localhost)");
+  }
+  return s;
+}
+function bytes(data) {
+  return new Uint8Array(data);
+}
+function rawKeySigner(privateKey) {
+  const publicKey = getPublicKey2(privateKey);
+  return {
+    publicKey,
+    sign: (data) => Promise.resolve(sign(data, privateKey))
+  };
+}
+async function webCryptoSigner(keyPair) {
+  const publicKey = new Uint8Array(await subtle2().exportKey("raw", keyPair.publicKey));
+  const privateKey = keyPair.privateKey;
+  return {
+    publicKey,
+    sign: async (data) => new Uint8Array(await subtle2().sign(ED25519, privateKey, bytes(data)))
+  };
+}
+async function generateNonExtractableKeyPair() {
+  return subtle2().generateKey(ED25519, false, ["sign", "verify"]);
+}
+async function importNonExtractableKey(privateKey) {
+  if (privateKey.length !== 32) {
+    throw new Error("Invalid Ed25519 private key: expected 32 bytes");
+  }
+  const pkcs8 = new Uint8Array(PKCS8_ED25519_PREFIX.length + 32);
+  pkcs8.set(PKCS8_ED25519_PREFIX, 0);
+  pkcs8.set(privateKey, PKCS8_ED25519_PREFIX.length);
+  try {
+    const s = subtle2();
+    const [priv, pub] = await Promise.all([
+      s.importKey("pkcs8", pkcs8, ED25519, false, ["sign"]),
+      s.importKey("raw", bytes(getPublicKey2(privateKey)), ED25519, true, ["verify"])
+    ]);
+    return { privateKey: priv, publicKey: pub };
+  } finally {
+    pkcs8.fill(0);
+  }
+}
+var supported;
+function isWebCryptoEd25519Supported() {
+  supported ?? (supported = (async () => {
+    try {
+      const kp = await generateNonExtractableKeyPair();
+      await subtle2().sign(ED25519, kp.privateKey, new Uint8Array(1));
+      return true;
+    } catch {
+      return false;
+    }
+  })());
+  return supported;
 }
 
 // src/Credentials.ts
 function base64Encode(text) {
-  const bytes = new TextEncoder().encode(text);
+  const bytes2 = new TextEncoder().encode(text);
   let binary = "";
-  for (let i = 0; i < bytes.length; i++) {
-    binary += String.fromCharCode(bytes[i]);
+  for (let i = 0; i < bytes2.length; i++) {
+    binary += String.fromCharCode(bytes2[i]);
   }
   return btoa(binary);
 }
@@ -1216,18 +1302,29 @@ var BasicAuth = class extends Auth {
 };
 var Ed25519Auth = class _Ed25519Auth extends Auth {
   /**
-   * @param privateKey - 32-byte Ed25519 private key
+   * @param key - 32-byte Ed25519 private key, or an {@link Ed25519Signer}
    * @param tokenLifetimeSeconds - JWT lifetime in seconds (default 300 = 5 min)
    */
-  constructor(privateKey, tokenLifetimeSeconds = 300) {
+  constructor(key, tokenLifetimeSeconds = 300) {
     super();
-    this._privateKey = privateKey;
-    this._publicKey = getPublicKey2(privateKey);
+    if (isSigner(key)) {
+      this._signer = key;
+    } else {
+      this._privateKey = key;
+      this._signer = rawKeySigner(key);
+    }
+    this._publicKey = this._signer.publicKey;
     this._did = didFromPublicKey(this._publicKey);
     this._lifetime = tokenLifetimeSeconds;
   }
   apply(headers, audience) {
-    headers["Authorization"] = `Bearer ${this.identityToken(audience)}`;
+    if (this._privateKey) {
+      headers["Authorization"] = `Bearer ${this.identityToken(audience)}`;
+      return;
+    }
+    return this.mintIdentityToken(audience).then((token) => {
+      headers["Authorization"] = `Bearer ${token}`;
+    });
   }
   /**
    * Mint a bearer-usable identity JWT for this key — the same token
@@ -1240,17 +1337,37 @@ var Ed25519Auth = class _Ed25519Auth extends Auth {
    * at any venue that accepts the caller's DID, so minting one is refused
    * rather than silently weakened.
    *
+   * Raw-key instances only: a signer-backed instance signs asynchronously,
+   * so use {@link mintIdentityToken}, which works for both.
+   *
    * @param audience - The venue DID the token is bound to (`aud` claim).
    * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
    */
   identityToken(audience, lifetimeSeconds) {
+    const aud = this.resolveAudience(audience);
+    if (!this._privateKey) {
+      throw new CoviaError(
+        "Ed25519Auth.identityToken() needs a raw private key; this instance signs through an Ed25519Signer, so use the async mintIdentityToken() instead."
+      );
+    }
+    return createEdDSAJWT(this._privateKey, lifetimeSeconds ?? this._lifetime, aud);
+  }
+  /**
+   * Async {@link identityToken} that works for raw-key and signer-backed
+   * instances alike. Same token, same audience rules.
+   */
+  async mintIdentityToken(audience, lifetimeSeconds) {
+    const aud = this.resolveAudience(audience);
+    return createEdDSAJWTWith(this._signer, lifetimeSeconds ?? this._lifetime, aud);
+  }
+  resolveAudience(audience) {
     const aud = this._audience ?? (audience || void 0);
     if (!aud) {
       throw new CoviaError(
         "Ed25519Auth requires a venue audience to bind the token to: connect via Grid.connect()/Venue.connect() so the venue DID is known, or pin auth.audience explicitly."
       );
     }
-    return createEdDSAJWT(this._privateKey, lifetimeSeconds ?? this._lifetime, aud);
+    return aud;
   }
   /** The caller's DID derived from the public key. */
   getDID() {
@@ -1279,7 +1396,17 @@ var Ed25519Auth = class _Ed25519Auth extends Auth {
   static fromHex(privateKeyHex, tokenLifetimeSeconds = 300) {
     return new _Ed25519Auth(hexToPrivateKey(privateKeyHex), tokenLifetimeSeconds);
   }
+  /**
+   * Create from an {@link Ed25519Signer}, e.g. `await webCryptoSigner(keyPair)`
+   * over a non-extractable WebCrypto key. Requests sign asynchronously.
+   */
+  static fromSigner(signer, tokenLifetimeSeconds = 300) {
+    return new _Ed25519Auth(signer, tokenLifetimeSeconds);
+  }
 };
+function isSigner(key) {
+  return !ArrayBuffer.isView(key) && typeof key.sign === "function";
+}
 var KeyPairAuth = Ed25519Auth;
 var CredentialsHTTP = class {
   constructor(venueId, apiKey, userId) {
@@ -1703,7 +1830,7 @@ var AdapterManager = class {
 };
 
 // src/VenueTransport.ts
-function requestOptions(venue, options) {
+async function requestOptions(venue, options) {
   const {
     contentType,
     headers: suppliedHeaders = {},
@@ -1714,19 +1841,19 @@ function requestOptions(venue, options) {
   if (effectiveContentType && headers["Content-Type"] === void 0) {
     headers["Content-Type"] = effectiveContentType;
   }
-  venue.auth.apply(headers, venue.venueId);
+  await venue.auth.apply(headers, venue.venueId);
   return { ...request, headers };
 }
-function venueJson(venue, path, options = {}) {
+async function venueJson(venue, path, options = {}) {
   return fetchWithError(
     `${venue.baseUrl}${path}`,
-    requestOptions(venue, options)
+    await requestOptions(venue, options)
   );
 }
-function venueStream(venue, path, options = {}) {
+async function venueStream(venue, path, options = {}) {
   return fetchStreamWithError(
     `${venue.baseUrl}${path}`,
-    requestOptions(venue, options)
+    await requestOptions(venue, options)
   );
 }
 
@@ -4067,7 +4194,17 @@ function didFor(privateKey) {
   return `did:key:${encodePublicKey(getPublicKey2(privateKey))}`;
 }
 function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = []) {
-  const multikey = encodePublicKey(getPublicKey2(privateKey));
+  const signingInput = ucanSigningInput(getPublicKey2(privateKey), audienceDID, att, lifetimeSeconds, proofs);
+  const signature = sign(encoder2.encode(signingInput), privateKey);
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+async function createUCANJWTWith(signer, audienceDID, att, lifetimeSeconds, proofs = []) {
+  const signingInput = ucanSigningInput(signer.publicKey, audienceDID, att, lifetimeSeconds, proofs);
+  const signature = await signer.sign(encoder2.encode(signingInput));
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+function ucanSigningInput(publicKey, audienceDID, att, lifetimeSeconds, proofs) {
+  const multikey = encodePublicKey(publicKey);
   const nowSecs = Math.floor(Date.now() / 1e3);
   const header = JSON.stringify({ alg: "EdDSA", typ: "JWT", kid: multikey });
   const claims = {
@@ -4083,9 +4220,7 @@ function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = [
     // CVMDouble the venue's UcanJwtValidator rejects outright (covia-sdk#46).
     exp: lifetimeSeconds === null ? null : Math.floor(nowSecs + lifetimeSeconds)
   };
-  const signingInput = `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
-  const signature = sign(encoder2.encode(signingInput), privateKey);
-  return `${signingInput}.${base64UrlEncode(signature)}`;
+  return `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
 }
 function identityToken(privateKey, venueDID, lifetimeSeconds = 300) {
   return createUCANJWT(privateKey, venueDID, [], lifetimeSeconds);
@@ -4093,10 +4228,17 @@ function identityToken(privateKey, venueDID, lifetimeSeconds = 300) {
 function grant(ownerPrivateKey, audienceDID, withResource, can, lifetimeSeconds) {
   return createUCANJWT(ownerPrivateKey, audienceDID, [{ with: withResource, can }], lifetimeSeconds);
 }
+function grantWith(ownerSigner, audienceDID, withResource, can, lifetimeSeconds) {
+  return createUCANJWTWith(ownerSigner, audienceDID, [{ with: withResource, can }], lifetimeSeconds);
+}
 function relayDelegation(privateKey, venueDID, lifetimeSeconds, caps = []) {
   const att = [{ with: didFor(privateKey), can: VENUE_RELAY }, ...caps];
   return createUCANJWT(privateKey, venueDID, att, lifetimeSeconds);
 }
+function relayDelegationWith(signer, venueDID, lifetimeSeconds, caps = []) {
+  const att = [{ with: didFromPublicKey(signer.publicKey), can: VENUE_RELAY }, ...caps];
+  return createUCANJWTWith(signer, venueDID, att, lifetimeSeconds);
+}
 /*! Bundled license information:
 
 @noble/ed25519/index.js:
@@ -4154,6 +4296,7 @@ exports.WorkspaceManager = WorkspaceManager;
 exports.assetHash = assetHash;
 exports.createSSEEvent = createSSEEvent;
 exports.createUCANJWT = createUCANJWT;
+exports.createUCANJWTWith = createUCANJWTWith;
 exports.decodePublicKey = decodePublicKey;
 exports.didFor = didFor;
 exports.didFromPublicKey = didFromPublicKey;
@@ -4163,23 +4306,30 @@ exports.encodePublicKey = encodePublicKey;
 exports.fetchStreamWithError = fetchStreamWithError;
 exports.fetchWithError = fetchWithError;
 exports.generateKeyPair = generateKeyPair;
+exports.generateNonExtractableKeyPair = generateNonExtractableKeyPair;
 exports.getAssetIdFromPath = getAssetIdFromPath;
 exports.getAssetIdFromVenueId = getAssetIdFromVenueId;
 exports.getAssetMetadataStore = getAssetMetadataStore;
 exports.getParsedAssetId = getParsedAssetId;
 exports.grant = grant;
+exports.grantWith = grantWith;
 exports.hexToPrivateKey = hexToPrivateKey;
 exports.identityToken = identityToken;
+exports.importNonExtractableKey = importNonExtractableKey;
 exports.isDid = isDid;
 exports.isJobComplete = isJobComplete;
 exports.isJobFinished = isJobFinished;
 exports.isJobPaused = isJobPaused;
+exports.isWebCryptoEd25519Supported = isWebCryptoEd25519Supported;
 exports.logger = logger;
 exports.parseDidUrl = parseDidUrl;
 exports.parseRetryAfterMs = parseRetryAfterMs;
 exports.parseSSEStream = parseSSEStream;
 exports.privateKeyToHex = privateKeyToHex;
+exports.rawKeySigner = rawKeySigner;
 exports.relayDelegation = relayDelegation;
+exports.relayDelegationWith = relayDelegationWith;
 exports.retryDelayMs = retryDelayMs;
 exports.setAssetMetadataStore = setAssetMetadataStore;
 exports.venueBaseUrlCandidates = venueBaseUrlCandidates;
+exports.webCryptoSigner = webCryptoSigner;

package/dist/index.mjs

@@ -163,15 +163,15 @@ var isBig = (n) => typeof n === "bigint";
 var isStr = (s) => typeof s === "string";
 var isBytes = (a) => a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
 var abytes = (value, length, title = "") => {
-  const bytes = isBytes(value);
+  const bytes2 = isBytes(value);
   const len = value?.length;
   const needsLen = length !== void 0;
-  if (!bytes || needsLen && len !== length) {
+  if (!bytes2 || needsLen && len !== length) {
     const prefix = title && `"${title}" `;
     const ofLen = needsLen ? ` of length ${length}` : "";
-    const got = bytes ? `length=${len}` : `type=${typeof value}`;
+    const got = bytes2 ? `length=${len}` : `type=${typeof value}`;
     const msg = prefix + "expected Uint8Array" + ofLen + ", got " + got;
-    throw bytes ? new RangeError(msg) : new TypeError(msg);
+    throw bytes2 ? new RangeError(msg) : new TypeError(msg);
   }
   return value;
 };
@@ -630,15 +630,15 @@ function isBytes2(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
 }
 function abytes2(value, length, title = "") {
-  const bytes = isBytes2(value);
+  const bytes2 = isBytes2(value);
   const len = value?.length;
   const needsLen = length !== void 0;
-  if (!bytes || needsLen) {
+  if (!bytes2 || needsLen) {
     const prefix = title && `"${title}" `;
     const ofLen = "";
-    const got = bytes ? `length=${len}` : `type=${typeof value}`;
+    const got = bytes2 ? `length=${len}` : `type=${typeof value}`;
     const message = prefix + "expected Uint8Array" + ofLen + ", got " + got;
-    if (!bytes)
+    if (!bytes2)
       throw new TypeError(message);
     throw new RangeError(message);
   }
@@ -1059,11 +1059,11 @@ function hexToPrivateKey(hex) {
   if (!/^[0-9a-fA-F]{64}$/.test(cleaned)) {
     throw new Error("Invalid Ed25519 private key: expected 64 hex characters (32 bytes)");
   }
-  const bytes = new Uint8Array(32);
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(cleaned.substring(i * 2, i * 2 + 2), 16);
+  const bytes2 = new Uint8Array(32);
+  for (let i = 0; i < bytes2.length; i++) {
+    bytes2[i] = parseInt(cleaned.substring(i * 2, i * 2 + 2), 16);
   }
-  return bytes;
+  return bytes2;
 }
 
 // src/crypto/base58.ts
@@ -1073,13 +1073,13 @@ var ALPHABET_MAP = /* @__PURE__ */ new Map();
 for (let i = 0; i < ALPHABET.length; i++) {
   ALPHABET_MAP.set(ALPHABET[i], i);
 }
-function encode(bytes) {
-  if (bytes.length === 0) return "";
+function encode(bytes2) {
+  if (bytes2.length === 0) return "";
   let zeros = 0;
-  while (zeros < bytes.length && bytes[zeros] === 0) zeros++;
+  while (zeros < bytes2.length && bytes2[zeros] === 0) zeros++;
   const digits = [];
-  for (let i = zeros; i < bytes.length; i++) {
-    let carry = bytes[i];
+  for (let i = zeros; i < bytes2.length; i++) {
+    let carry = bytes2[i];
     for (let j = 0; j < digits.length; j++) {
       carry += digits[j] << 8;
       digits[j] = carry % BASE;
@@ -1100,24 +1100,24 @@ function decode(str) {
   if (str.length === 0) return new Uint8Array(0);
   let zeros = 0;
   while (zeros < str.length && str[zeros] === ALPHABET[0]) zeros++;
-  const bytes = [];
+  const bytes2 = [];
   for (let i = zeros; i < str.length; i++) {
     const val = ALPHABET_MAP.get(str[i]);
     if (val === void 0) throw new Error(`Invalid base58 character: ${str[i]}`);
     let carry = val;
-    for (let j = 0; j < bytes.length; j++) {
-      carry += bytes[j] * BASE;
-      bytes[j] = carry & 255;
+    for (let j = 0; j < bytes2.length; j++) {
+      carry += bytes2[j] * BASE;
+      bytes2[j] = carry & 255;
       carry >>= 8;
     }
     while (carry > 0) {
-      bytes.push(carry & 255);
+      bytes2.push(carry & 255);
       carry >>= 8;
     }
   }
-  const result = new Uint8Array(zeros + bytes.length);
+  const result = new Uint8Array(zeros + bytes2.length);
   for (let i = 0; i < zeros; i++) result[i] = 0;
-  for (let i = 0; i < bytes.length; i++) result[zeros + i] = bytes[bytes.length - 1 - i];
+  for (let i = 0; i < bytes2.length; i++) result[zeros + i] = bytes2[bytes2.length - 1 - i];
   return result;
 }
 
@@ -1153,7 +1153,16 @@ function base64UrlEncode(data) {
   return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
 function createEdDSAJWT(privateKey, lifetimeSeconds = 300, audience) {
-  const publicKey = getPublicKey2(privateKey);
+  const signingInput = edDSASigningInput(getPublicKey2(privateKey), lifetimeSeconds, audience);
+  const signature = sign(encoder.encode(signingInput), privateKey);
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+async function createEdDSAJWTWith(signer, lifetimeSeconds = 300, audience) {
+  const signingInput = edDSASigningInput(signer.publicKey, lifetimeSeconds, audience);
+  const signature = await signer.sign(encoder.encode(signingInput));
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+function edDSASigningInput(publicKey, lifetimeSeconds, audience) {
   const multikey = encodePublicKey(publicKey);
   const did = `did:key:${multikey}`;
   const nowSecs = Math.floor(Date.now() / 1e3);
@@ -1171,18 +1180,95 @@ function createEdDSAJWT(privateKey, lifetimeSeconds = 300, audience) {
   const payload = JSON.stringify(claims);
   const headerB64 = base64UrlEncode(encoder.encode(header));
   const payloadB64 = base64UrlEncode(encoder.encode(payload));
-  const signingInput = `${headerB64}.${payloadB64}`;
-  const signature = sign(encoder.encode(signingInput), privateKey);
-  const signatureB64 = base64UrlEncode(signature);
-  return `${signingInput}.${signatureB64}`;
+  return `${headerB64}.${payloadB64}`;
+}
+
+// src/crypto/signer.ts
+var ED25519 = "Ed25519";
+var PKCS8_ED25519_PREFIX = new Uint8Array([
+  48,
+  46,
+  2,
+  1,
+  0,
+  48,
+  5,
+  6,
+  3,
+  43,
+  101,
+  112,
+  4,
+  34,
+  4,
+  32
+]);
+function subtle2() {
+  const s = globalThis.crypto?.subtle;
+  if (!s) {
+    throw new Error("WebCrypto is unavailable: crypto.subtle requires a secure context (HTTPS or localhost)");
+  }
+  return s;
+}
+function bytes(data) {
+  return new Uint8Array(data);
+}
+function rawKeySigner(privateKey) {
+  const publicKey = getPublicKey2(privateKey);
+  return {
+    publicKey,
+    sign: (data) => Promise.resolve(sign(data, privateKey))
+  };
+}
+async function webCryptoSigner(keyPair) {
+  const publicKey = new Uint8Array(await subtle2().exportKey("raw", keyPair.publicKey));
+  const privateKey = keyPair.privateKey;
+  return {
+    publicKey,
+    sign: async (data) => new Uint8Array(await subtle2().sign(ED25519, privateKey, bytes(data)))
+  };
+}
+async function generateNonExtractableKeyPair() {
+  return subtle2().generateKey(ED25519, false, ["sign", "verify"]);
+}
+async function importNonExtractableKey(privateKey) {
+  if (privateKey.length !== 32) {
+    throw new Error("Invalid Ed25519 private key: expected 32 bytes");
+  }
+  const pkcs8 = new Uint8Array(PKCS8_ED25519_PREFIX.length + 32);
+  pkcs8.set(PKCS8_ED25519_PREFIX, 0);
+  pkcs8.set(privateKey, PKCS8_ED25519_PREFIX.length);
+  try {
+    const s = subtle2();
+    const [priv, pub] = await Promise.all([
+      s.importKey("pkcs8", pkcs8, ED25519, false, ["sign"]),
+      s.importKey("raw", bytes(getPublicKey2(privateKey)), ED25519, true, ["verify"])
+    ]);
+    return { privateKey: priv, publicKey: pub };
+  } finally {
+    pkcs8.fill(0);
+  }
+}
+var supported;
+function isWebCryptoEd25519Supported() {
+  supported ?? (supported = (async () => {
+    try {
+      const kp = await generateNonExtractableKeyPair();
+      await subtle2().sign(ED25519, kp.privateKey, new Uint8Array(1));
+      return true;
+    } catch {
+      return false;
+    }
+  })());
+  return supported;
 }
 
 // src/Credentials.ts
 function base64Encode(text) {
-  const bytes = new TextEncoder().encode(text);
+  const bytes2 = new TextEncoder().encode(text);
   let binary = "";
-  for (let i = 0; i < bytes.length; i++) {
-    binary += String.fromCharCode(bytes[i]);
+  for (let i = 0; i < bytes2.length; i++) {
+    binary += String.fromCharCode(bytes2[i]);
   }
   return btoa(binary);
 }
@@ -1214,18 +1300,29 @@ var BasicAuth = class extends Auth {
 };
 var Ed25519Auth = class _Ed25519Auth extends Auth {
   /**
-   * @param privateKey - 32-byte Ed25519 private key
+   * @param key - 32-byte Ed25519 private key, or an {@link Ed25519Signer}
    * @param tokenLifetimeSeconds - JWT lifetime in seconds (default 300 = 5 min)
    */
-  constructor(privateKey, tokenLifetimeSeconds = 300) {
+  constructor(key, tokenLifetimeSeconds = 300) {
     super();
-    this._privateKey = privateKey;
-    this._publicKey = getPublicKey2(privateKey);
+    if (isSigner(key)) {
+      this._signer = key;
+    } else {
+      this._privateKey = key;
+      this._signer = rawKeySigner(key);
+    }
+    this._publicKey = this._signer.publicKey;
     this._did = didFromPublicKey(this._publicKey);
     this._lifetime = tokenLifetimeSeconds;
   }
   apply(headers, audience) {
-    headers["Authorization"] = `Bearer ${this.identityToken(audience)}`;
+    if (this._privateKey) {
+      headers["Authorization"] = `Bearer ${this.identityToken(audience)}`;
+      return;
+    }
+    return this.mintIdentityToken(audience).then((token) => {
+      headers["Authorization"] = `Bearer ${token}`;
+    });
   }
   /**
    * Mint a bearer-usable identity JWT for this key — the same token
@@ -1238,17 +1335,37 @@ var Ed25519Auth = class _Ed25519Auth extends Auth {
    * at any venue that accepts the caller's DID, so minting one is refused
    * rather than silently weakened.
    *
+   * Raw-key instances only: a signer-backed instance signs asynchronously,
+   * so use {@link mintIdentityToken}, which works for both.
+   *
    * @param audience - The venue DID the token is bound to (`aud` claim).
    * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
    */
   identityToken(audience, lifetimeSeconds) {
+    const aud = this.resolveAudience(audience);
+    if (!this._privateKey) {
+      throw new CoviaError(
+        "Ed25519Auth.identityToken() needs a raw private key; this instance signs through an Ed25519Signer, so use the async mintIdentityToken() instead."
+      );
+    }
+    return createEdDSAJWT(this._privateKey, lifetimeSeconds ?? this._lifetime, aud);
+  }
+  /**
+   * Async {@link identityToken} that works for raw-key and signer-backed
+   * instances alike. Same token, same audience rules.
+   */
+  async mintIdentityToken(audience, lifetimeSeconds) {
+    const aud = this.resolveAudience(audience);
+    return createEdDSAJWTWith(this._signer, lifetimeSeconds ?? this._lifetime, aud);
+  }
+  resolveAudience(audience) {
     const aud = this._audience ?? (audience || void 0);
     if (!aud) {
       throw new CoviaError(
         "Ed25519Auth requires a venue audience to bind the token to: connect via Grid.connect()/Venue.connect() so the venue DID is known, or pin auth.audience explicitly."
       );
     }
-    return createEdDSAJWT(this._privateKey, lifetimeSeconds ?? this._lifetime, aud);
+    return aud;
   }
   /** The caller's DID derived from the public key. */
   getDID() {
@@ -1277,7 +1394,17 @@ var Ed25519Auth = class _Ed25519Auth extends Auth {
   static fromHex(privateKeyHex, tokenLifetimeSeconds = 300) {
     return new _Ed25519Auth(hexToPrivateKey(privateKeyHex), tokenLifetimeSeconds);
   }
+  /**
+   * Create from an {@link Ed25519Signer}, e.g. `await webCryptoSigner(keyPair)`
+   * over a non-extractable WebCrypto key. Requests sign asynchronously.
+   */
+  static fromSigner(signer, tokenLifetimeSeconds = 300) {
+    return new _Ed25519Auth(signer, tokenLifetimeSeconds);
+  }
 };
+function isSigner(key) {
+  return !ArrayBuffer.isView(key) && typeof key.sign === "function";
+}
 var KeyPairAuth = Ed25519Auth;
 var CredentialsHTTP = class {
   constructor(venueId, apiKey, userId) {
@@ -1701,7 +1828,7 @@ var AdapterManager = class {
 };
 
 // src/VenueTransport.ts
-function requestOptions(venue, options) {
+async function requestOptions(venue, options) {
   const {
     contentType,
     headers: suppliedHeaders = {},
@@ -1712,19 +1839,19 @@ function requestOptions(venue, options) {
   if (effectiveContentType && headers["Content-Type"] === void 0) {
     headers["Content-Type"] = effectiveContentType;
   }
-  venue.auth.apply(headers, venue.venueId);
+  await venue.auth.apply(headers, venue.venueId);
   return { ...request, headers };
 }
-function venueJson(venue, path, options = {}) {
+async function venueJson(venue, path, options = {}) {
   return fetchWithError(
     `${venue.baseUrl}${path}`,
-    requestOptions(venue, options)
+    await requestOptions(venue, options)
   );
 }
-function venueStream(venue, path, options = {}) {
+async function venueStream(venue, path, options = {}) {
   return fetchStreamWithError(
     `${venue.baseUrl}${path}`,
-    requestOptions(venue, options)
+    await requestOptions(venue, options)
   );
 }
 
@@ -4065,7 +4192,17 @@ function didFor(privateKey) {
   return `did:key:${encodePublicKey(getPublicKey2(privateKey))}`;
 }
 function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = []) {
-  const multikey = encodePublicKey(getPublicKey2(privateKey));
+  const signingInput = ucanSigningInput(getPublicKey2(privateKey), audienceDID, att, lifetimeSeconds, proofs);
+  const signature = sign(encoder2.encode(signingInput), privateKey);
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+async function createUCANJWTWith(signer, audienceDID, att, lifetimeSeconds, proofs = []) {
+  const signingInput = ucanSigningInput(signer.publicKey, audienceDID, att, lifetimeSeconds, proofs);
+  const signature = await signer.sign(encoder2.encode(signingInput));
+  return `${signingInput}.${base64UrlEncode(signature)}`;
+}
+function ucanSigningInput(publicKey, audienceDID, att, lifetimeSeconds, proofs) {
+  const multikey = encodePublicKey(publicKey);
   const nowSecs = Math.floor(Date.now() / 1e3);
   const header = JSON.stringify({ alg: "EdDSA", typ: "JWT", kid: multikey });
   const claims = {
@@ -4081,9 +4218,7 @@ function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = [
     // CVMDouble the venue's UcanJwtValidator rejects outright (covia-sdk#46).
     exp: lifetimeSeconds === null ? null : Math.floor(nowSecs + lifetimeSeconds)
   };
-  const signingInput = `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
-  const signature = sign(encoder2.encode(signingInput), privateKey);
-  return `${signingInput}.${base64UrlEncode(signature)}`;
+  return `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
 }
 function identityToken(privateKey, venueDID, lifetimeSeconds = 300) {
   return createUCANJWT(privateKey, venueDID, [], lifetimeSeconds);
@@ -4091,14 +4226,21 @@ function identityToken(privateKey, venueDID, lifetimeSeconds = 300) {
 function grant(ownerPrivateKey, audienceDID, withResource, can, lifetimeSeconds) {
   return createUCANJWT(ownerPrivateKey, audienceDID, [{ with: withResource, can }], lifetimeSeconds);
 }
+function grantWith(ownerSigner, audienceDID, withResource, can, lifetimeSeconds) {
+  return createUCANJWTWith(ownerSigner, audienceDID, [{ with: withResource, can }], lifetimeSeconds);
+}
 function relayDelegation(privateKey, venueDID, lifetimeSeconds, caps = []) {
   const att = [{ with: didFor(privateKey), can: VENUE_RELAY }, ...caps];
   return createUCANJWT(privateKey, venueDID, att, lifetimeSeconds);
 }
+function relayDelegationWith(signer, venueDID, lifetimeSeconds, caps = []) {
+  const att = [{ with: didFromPublicKey(signer.publicKey), can: VENUE_RELAY }, ...caps];
+  return createUCANJWTWith(signer, venueDID, att, lifetimeSeconds);
+}
 /*! Bundled license information:
 
 @noble/ed25519/index.js:
   (*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) *)
 */
 
-export { A2AManager, AdapterManager, Agent, AgentManager, AgentSessionNotFoundError, AgentStatus, Asset, AssetManager, AssetNotFoundError, Auth, BasicAuth, BearerAuth, ChatSession, CoviaConnectionError, CoviaError, CoviaTimeoutError, CredentialsHTTP, DLFSManager, DataAsset, Ed25519Auth, Grid, GridError, Job, JobFailedError, JobManager, JobNotFoundError, JobStatus, KeyPairAuth, MCPError, MCPManager, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, OperationManager, RateLimitError, RunStatus, ScopedWorkspace, SecretManager, SkillManager, UCANManager, UnsupportedVenueFeatureError, UserManager, VENUE_RELAY, Venue, VenueIdentityChangedError, WorkspaceManager, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { A2AManager, AdapterManager, Agent, AgentManager, AgentSessionNotFoundError, AgentStatus, Asset, AssetManager, AssetNotFoundError, Auth, BasicAuth, BearerAuth, ChatSession, CoviaConnectionError, CoviaError, CoviaTimeoutError, CredentialsHTTP, DLFSManager, DataAsset, Ed25519Auth, Grid, GridError, Job, JobFailedError, JobManager, JobNotFoundError, JobStatus, KeyPairAuth, MCPError, MCPManager, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, OperationManager, RateLimitError, RunStatus, ScopedWorkspace, SecretManager, SkillManager, UCANManager, UnsupportedVenueFeatureError, UserManager, VENUE_RELAY, Venue, VenueIdentityChangedError, WorkspaceManager, assetHash, createSSEEvent, createUCANJWT, createUCANJWTWith, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, generateNonExtractableKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, grantWith, hexToPrivateKey, identityToken, importNonExtractableKey, isDid, isJobComplete, isJobFinished, isJobPaused, isWebCryptoEd25519Supported, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, rawKeySigner, relayDelegation, relayDelegationWith, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates, webCryptoSigner };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@covia/covia-sdk",
-  "version": "1.19.1",
+  "version": "1.20.0",
   "description": "Typescript library for covia-ai",
   "packageManager": "pnpm@11.9.0",
   "main": "./dist/index.js",