@covia/covia-sdk 1.19.1 → 1.21.0

package/README.md

@@ -76,6 +76,14 @@ const venue = await Grid.connect("your-venue.example.com"); // DNS name → http
 const venue = await Venue.connect("https://your-venue.example.com");
 ```
 
+For an address without a scheme, the SDK picks one from the host:
+
+- **Public hosts** use `https://` only. There is no fallback to plain HTTP.
+- **Local hosts** (`localhost`, `*.local`, loopback, and the private ranges `10/8`, `172.16/12`, `192.168/16`, `169.254/16`) try `http://` first, then `https://`, so a venue on your machine or LAN works without TLS.
+- **Explicit `http://` or `https://`** addresses are used exactly as given.
+
+Credentials sent over `http://` travel in cleartext, so use `https://` for any venue reached over a network you don't control. To report a security issue, see [SECURITY.md](SECURITY.md).
+
 ### Authentication
 
 ```typescript

package/dist/index.d.mts

@@ -203,6 +203,48 @@ declare abstract class Asset {
     invoke(input?: unknown, options?: InvokeOptions): Promise<Job>;
 }
 
+/**
+ * Ed25519 signers: the key-holding half of every signing path, abstracted so
+ * the private key need not be readable bytes.
+ *
+ * A {@link rawKeySigner} wraps a 32-byte key (the classic path). A
+ * {@link webCryptoSigner} wraps a WebCrypto `CryptoKeyPair` whose private key
+ * can be **non-extractable**: it signs, but no script can read it back as
+ * bytes, and it persists in IndexedDB as a structured-cloneable `CryptoKey`.
+ * WebCrypto signing is async, so the {@link Ed25519Signer} contract is too.
+ *
+ * Ed25519 is deterministic (RFC 8032): the same key and message give the same
+ * signature on either path, so tokens are identical whichever signer made them.
+ */
+/** Signs with an Ed25519 key that may not be readable as bytes. */
+interface Ed25519Signer {
+    /** 32-byte raw public key. */
+    readonly publicKey: Uint8Array;
+    /** Ed25519 signature (64 bytes) over `data`. */
+    sign(data: Uint8Array): Promise<Uint8Array>;
+}
+/** A signer over a raw 32-byte private key (synchronous @noble signing underneath). */
+declare function rawKeySigner(privateKey: Uint8Array): Ed25519Signer;
+/**
+ * A signer over a WebCrypto Ed25519 keypair. The private key may be (and
+ * normally should be) non-extractable; the public key always is exportable.
+ */
+declare function webCryptoSigner(keyPair: CryptoKeyPair): Promise<Ed25519Signer>;
+/** Generate a WebCrypto Ed25519 keypair whose private key cannot be exported. */
+declare function generateNonExtractableKeyPair(): Promise<CryptoKeyPair>;
+/**
+ * Import an existing 32-byte private key as a non-extractable WebCrypto
+ * keypair — the one-time migration from a stored hex/raw key. The DID is
+ * unchanged. The caller should delete its own copy of the raw key afterwards.
+ */
+declare function importNonExtractableKey(privateKey: Uint8Array): Promise<CryptoKeyPair>;
+/**
+ * Whether this runtime can sign with WebCrypto Ed25519 (current Chrome,
+ * Firefox, Safari 17+ and Node). Apps without it fall back to a raw-key
+ * signer. Probed once, by generating and signing with a throwaway key.
+ */
+declare function isWebCryptoEd25519Supported(): Promise<boolean>;
+
 /**
  * Abstract base class for authentication strategies.
  * Subclass this to implement custom authentication.
@@ -224,8 +266,11 @@ declare abstract class Auth {
      * @param audience - The venue's DID, supplied by the transport. Providers
      *   that bind tokens to the venue's identity (e.g. {@link Ed25519Auth}) use it
      *   as the JWT `aud`; others ignore it.
+     * @returns Nothing, or a promise for providers that sign asynchronously
+     *   (e.g. {@link Ed25519Auth.fromSigner} over a WebCrypto key). The transport
+     *   awaits it before sending, so callers of `apply` must await it too.
      */
-    abstract apply(headers: Record<string, string>, audience?: string): void;
+    abstract apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
 }
 /** No-op authentication provider. Sends no credentials. */
 declare class NoAuth extends Auth {
@@ -262,23 +307,34 @@ declare class BasicAuth extends Auth {
  * client's Ed25519 private key.  The server verifies the signature and
  * extracts the caller's DID from the `sub` claim.
  *
+ * Construct it from a raw 32-byte key, or with {@link Ed25519Auth.fromSigner}
+ * from an {@link Ed25519Signer} — e.g. a non-extractable WebCrypto key, which
+ * signs without the key ever being readable by page scripts. Signer-backed
+ * instances sign asynchronously; the SDK transport awaits them.
+ *
  * Example:
  *   const auth = Ed25519Auth.generate();
  *   console.log(auth.getDID()); // did:key:z6Mk...
  *   const venue = await Grid.connect("https://your-venue.example.com", auth);
+ *
+ *   // Non-extractable key (browser):
+ *   const signer = await webCryptoSigner(await generateNonExtractableKeyPair());
+ *   const venue2 = await Grid.connect("https://your-venue.example.com", Ed25519Auth.fromSigner(signer));
  */
 declare class Ed25519Auth extends Auth {
-    private _privateKey;
+    /** Present only for raw-key instances; signer-backed ones never see key bytes. */
+    private _privateKey?;
+    private _signer;
     private _publicKey;
     private _did;
     private _lifetime;
     private _audience?;
     /**
-     * @param privateKey - 32-byte Ed25519 private key
+     * @param key - 32-byte Ed25519 private key, or an {@link Ed25519Signer}
      * @param tokenLifetimeSeconds - JWT lifetime in seconds (default 300 = 5 min)
      */
-    constructor(privateKey: Uint8Array, tokenLifetimeSeconds?: number);
-    apply(headers: Record<string, string>, audience?: string): void;
+    constructor(key: Uint8Array | Ed25519Signer, tokenLifetimeSeconds?: number);
+    apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     /**
      * Mint a bearer-usable identity JWT for this key — the same token
      * {@link apply} attaches to every request, exposed for callers that need
@@ -290,10 +346,19 @@ declare class Ed25519Auth extends Auth {
      * at any venue that accepts the caller's DID, so minting one is refused
      * rather than silently weakened.
      *
+     * Raw-key instances only: a signer-backed instance signs asynchronously,
+     * so use {@link mintIdentityToken}, which works for both.
+     *
      * @param audience - The venue DID the token is bound to (`aud` claim).
      * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
      */
     identityToken(audience?: string, lifetimeSeconds?: number): string;
+    /**
+     * Async {@link identityToken} that works for raw-key and signer-backed
+     * instances alike. Same token, same audience rules.
+     */
+    mintIdentityToken(audience?: string, lifetimeSeconds?: number): Promise<string>;
+    private resolveAudience;
     /** The caller's DID derived from the public key. */
     getDID(): string;
     /**
@@ -308,6 +373,11 @@ declare class Ed25519Auth extends Auth {
     static generate(tokenLifetimeSeconds?: number): Ed25519Auth;
     /** Create from a hex-encoded private key string. */
     static fromHex(privateKeyHex: string, tokenLifetimeSeconds?: number): Ed25519Auth;
+    /**
+     * Create from an {@link Ed25519Signer}, e.g. `await webCryptoSigner(keyPair)`
+     * over a non-extractable WebCrypto key. Requests sign asynchronously.
+     */
+    static fromSigner(signer: Ed25519Signer, tokenLifetimeSeconds?: number): Ed25519Auth;
 }
 /**
  * @deprecated Renamed to {@link Ed25519Auth} for cross-SDK consistency
@@ -367,7 +437,7 @@ interface VenueRequestContext {
     baseUrl: string;
     venueId: string;
     auth: {
-        apply(headers: Record<string, string>, audience?: string): void;
+        apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     };
 }
 
@@ -543,11 +613,13 @@ declare class AssetManager {
      * @param options - Pagination options (offset, limit). Pass
      * `{ expand: 'metadata' }` to get each item's metadata inlined as
      * `{id, metadata}` instead of a bare id string, sparing a per-id fetch.
+     * Pass `kind: 'data'` or `kind: 'operation'` to have the venue filter the
+     * catalog before paging (see {@link CatalogListOptions}).
      */
-    list(options: AssetListOptions & {
+    list(options: CatalogListOptions & {
         expand: 'metadata';
     }): Promise<ExpandedAssetList>;
-    list(options?: AssetListOptions): Promise<AssetList>;
+    list(options?: CatalogListOptions): Promise<AssetList>;
     /**
      * List the authenticated caller's own assets — the per-user a/ namespace
      * populated by `store`/`pin`, distinct from the venue-wide catalog `list()`
@@ -1248,14 +1320,15 @@ declare class Venue implements VenueInterface {
     /**
      * List assets with pagination support (convenience delegate to venue.assets.list)
      * @param options - Pagination options (offset, limit). Pass
-     * `{ expand: 'metadata' }` to get each item's metadata inlined.
+     * `{ expand: 'metadata' }` to get each item's metadata inlined, and
+     * `kind` to filter the catalog on the venue.
      * @returns {Promise<AssetList>} Paginated list of asset ids, or of
      * `{id, metadata}` items when `expand: 'metadata'` is requested
      */
-    listAssets(options: AssetListOptions & {
+    listAssets(options: CatalogListOptions & {
         expand: 'metadata';
     }): Promise<ExpandedAssetList>;
-    listAssets(options?: AssetListOptions): Promise<AssetList>;
+    listAssets(options?: CatalogListOptions): Promise<AssetList>;
     /**
      * List all jobs
      * @returns {Promise<string[]>}
@@ -1369,10 +1442,10 @@ interface VenueInterface {
     getJob(jobId: string): Promise<Job>;
     listJobs(): Promise<string[]>;
     getAsset(assetId: AssetID): Promise<Asset>;
-    listAssets(options: AssetListOptions & {
+    listAssets(options: CatalogListOptions & {
         expand: 'metadata';
     }): Promise<ExpandedAssetList>;
-    listAssets(options?: AssetListOptions): Promise<AssetList>;
+    listAssets(options?: CatalogListOptions): Promise<AssetList>;
     didDocument(): Promise<DIDDocument>;
     mcpDiscovery(): Promise<MCPDiscovery>;
     agentCard(): Promise<AgentCard>;
@@ -1517,6 +1590,17 @@ interface AssetListOptions {
     limit?: number;
     expand?: 'metadata';
 }
+/**
+ * Options for the venue-wide catalog listing (`GET /api/v1/assets`).
+ * `kind` restricts it to assets that carry an operation (`'operation'`) or to
+ * those that do not (`'data'`); the venue filters before paging, so `offset`
+ * counts filtered entries and `total` is the filtered size. Venues older than
+ * covia 0.9.9 ignore `kind` and return the whole catalog, so a caller that
+ * depends on the split should still check each item.
+ */
+interface CatalogListOptions extends AssetListOptions {
+    kind?: 'operation' | 'data';
+}
 interface AssetList {
     items: string[];
     total: number;
@@ -2677,6 +2761,7 @@ declare function didFromPublicKey(publicKey: Uint8Array): string;
  * `ucans` request array and relayed across cross-venue hops. Delegation chains
  * embed parent tokens as JWT strings in `prf`.
  */
+
 /** The ability that instructs a venue to relay a cross-venue hop as itself. */
 declare const VENUE_RELAY = "venue/relay";
 interface UCANCapability {
@@ -2700,6 +2785,11 @@ declare function didFor(privateKey: Uint8Array): string;
  * @param proofs parent UCAN JWT strings (`prf`) for delegation chains
  */
 declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): string;
+/**
+ * {@link createUCANJWT} through an {@link Ed25519Signer}, for issuers whose
+ * key is not readable bytes (e.g. a non-extractable WebCrypto key). Same token.
+ */
+declare function createUCANJWTWith(signer: Ed25519Signer, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): Promise<string>;
 /**
  * Mint an **identity token**: a UCAN with an EMPTY attenuation list, audienced
  * to `venueDID`. Pure proof of identity — it grants nothing, and being
@@ -2716,6 +2806,8 @@ declare function identityToken(privateKey: Uint8Array, venueDID: string, lifetim
  * in issuance.
  */
 declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): string;
+/** {@link grant} through an {@link Ed25519Signer}. */
+declare function grantWith(ownerSigner: Ed25519Signer, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): Promise<string>;
 /**
  * Mint a **relay delegation**: instructs and authorises `venueDID` to make a
  * cross-venue hop authenticated as itself, exercising the caller's authority.
@@ -2724,5 +2816,7 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  * authenticated caller (COG-15).
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
+/** {@link relayDelegation} through an {@link Ed25519Signer}. */
+declare function relayDelegationWith(signer: Ed25519Signer, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): Promise<string>;
 
-export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, type CatalogListOptions, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type Ed25519Signer, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, createUCANJWTWith, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, generateNonExtractableKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, grantWith, hexToPrivateKey, identityToken, importNonExtractableKey, isDid, isJobComplete, isJobFinished, isJobPaused, isWebCryptoEd25519Supported, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, rawKeySigner, relayDelegation, relayDelegationWith, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates, webCryptoSigner };

package/dist/index.d.ts

@@ -203,6 +203,48 @@ declare abstract class Asset {
     invoke(input?: unknown, options?: InvokeOptions): Promise<Job>;
 }
 
+/**
+ * Ed25519 signers: the key-holding half of every signing path, abstracted so
+ * the private key need not be readable bytes.
+ *
+ * A {@link rawKeySigner} wraps a 32-byte key (the classic path). A
+ * {@link webCryptoSigner} wraps a WebCrypto `CryptoKeyPair` whose private key
+ * can be **non-extractable**: it signs, but no script can read it back as
+ * bytes, and it persists in IndexedDB as a structured-cloneable `CryptoKey`.
+ * WebCrypto signing is async, so the {@link Ed25519Signer} contract is too.
+ *
+ * Ed25519 is deterministic (RFC 8032): the same key and message give the same
+ * signature on either path, so tokens are identical whichever signer made them.
+ */
+/** Signs with an Ed25519 key that may not be readable as bytes. */
+interface Ed25519Signer {
+    /** 32-byte raw public key. */
+    readonly publicKey: Uint8Array;
+    /** Ed25519 signature (64 bytes) over `data`. */
+    sign(data: Uint8Array): Promise<Uint8Array>;
+}
+/** A signer over a raw 32-byte private key (synchronous @noble signing underneath). */
+declare function rawKeySigner(privateKey: Uint8Array): Ed25519Signer;
+/**
+ * A signer over a WebCrypto Ed25519 keypair. The private key may be (and
+ * normally should be) non-extractable; the public key always is exportable.
+ */
+declare function webCryptoSigner(keyPair: CryptoKeyPair): Promise<Ed25519Signer>;
+/** Generate a WebCrypto Ed25519 keypair whose private key cannot be exported. */
+declare function generateNonExtractableKeyPair(): Promise<CryptoKeyPair>;
+/**
+ * Import an existing 32-byte private key as a non-extractable WebCrypto
+ * keypair — the one-time migration from a stored hex/raw key. The DID is
+ * unchanged. The caller should delete its own copy of the raw key afterwards.
+ */
+declare function importNonExtractableKey(privateKey: Uint8Array): Promise<CryptoKeyPair>;
+/**
+ * Whether this runtime can sign with WebCrypto Ed25519 (current Chrome,
+ * Firefox, Safari 17+ and Node). Apps without it fall back to a raw-key
+ * signer. Probed once, by generating and signing with a throwaway key.
+ */
+declare function isWebCryptoEd25519Supported(): Promise<boolean>;
+
 /**
  * Abstract base class for authentication strategies.
  * Subclass this to implement custom authentication.
@@ -224,8 +266,11 @@ declare abstract class Auth {
      * @param audience - The venue's DID, supplied by the transport. Providers
      *   that bind tokens to the venue's identity (e.g. {@link Ed25519Auth}) use it
      *   as the JWT `aud`; others ignore it.
+     * @returns Nothing, or a promise for providers that sign asynchronously
+     *   (e.g. {@link Ed25519Auth.fromSigner} over a WebCrypto key). The transport
+     *   awaits it before sending, so callers of `apply` must await it too.
      */
-    abstract apply(headers: Record<string, string>, audience?: string): void;
+    abstract apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
 }
 /** No-op authentication provider. Sends no credentials. */
 declare class NoAuth extends Auth {
@@ -262,23 +307,34 @@ declare class BasicAuth extends Auth {
  * client's Ed25519 private key.  The server verifies the signature and
  * extracts the caller's DID from the `sub` claim.
  *
+ * Construct it from a raw 32-byte key, or with {@link Ed25519Auth.fromSigner}
+ * from an {@link Ed25519Signer} — e.g. a non-extractable WebCrypto key, which
+ * signs without the key ever being readable by page scripts. Signer-backed
+ * instances sign asynchronously; the SDK transport awaits them.
+ *
  * Example:
  *   const auth = Ed25519Auth.generate();
  *   console.log(auth.getDID()); // did:key:z6Mk...
  *   const venue = await Grid.connect("https://your-venue.example.com", auth);
+ *
+ *   // Non-extractable key (browser):
+ *   const signer = await webCryptoSigner(await generateNonExtractableKeyPair());
+ *   const venue2 = await Grid.connect("https://your-venue.example.com", Ed25519Auth.fromSigner(signer));
  */
 declare class Ed25519Auth extends Auth {
-    private _privateKey;
+    /** Present only for raw-key instances; signer-backed ones never see key bytes. */
+    private _privateKey?;
+    private _signer;
     private _publicKey;
     private _did;
     private _lifetime;
     private _audience?;
     /**
-     * @param privateKey - 32-byte Ed25519 private key
+     * @param key - 32-byte Ed25519 private key, or an {@link Ed25519Signer}
      * @param tokenLifetimeSeconds - JWT lifetime in seconds (default 300 = 5 min)
      */
-    constructor(privateKey: Uint8Array, tokenLifetimeSeconds?: number);
-    apply(headers: Record<string, string>, audience?: string): void;
+    constructor(key: Uint8Array | Ed25519Signer, tokenLifetimeSeconds?: number);
+    apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     /**
      * Mint a bearer-usable identity JWT for this key — the same token
      * {@link apply} attaches to every request, exposed for callers that need
@@ -290,10 +346,19 @@ declare class Ed25519Auth extends Auth {
      * at any venue that accepts the caller's DID, so minting one is refused
      * rather than silently weakened.
      *
+     * Raw-key instances only: a signer-backed instance signs asynchronously,
+     * so use {@link mintIdentityToken}, which works for both.
+     *
      * @param audience - The venue DID the token is bound to (`aud` claim).
      * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
      */
     identityToken(audience?: string, lifetimeSeconds?: number): string;
+    /**
+     * Async {@link identityToken} that works for raw-key and signer-backed
+     * instances alike. Same token, same audience rules.
+     */
+    mintIdentityToken(audience?: string, lifetimeSeconds?: number): Promise<string>;
+    private resolveAudience;
     /** The caller's DID derived from the public key. */
     getDID(): string;
     /**
@@ -308,6 +373,11 @@ declare class Ed25519Auth extends Auth {
     static generate(tokenLifetimeSeconds?: number): Ed25519Auth;
     /** Create from a hex-encoded private key string. */
     static fromHex(privateKeyHex: string, tokenLifetimeSeconds?: number): Ed25519Auth;
+    /**
+     * Create from an {@link Ed25519Signer}, e.g. `await webCryptoSigner(keyPair)`
+     * over a non-extractable WebCrypto key. Requests sign asynchronously.
+     */
+    static fromSigner(signer: Ed25519Signer, tokenLifetimeSeconds?: number): Ed25519Auth;
 }
 /**
  * @deprecated Renamed to {@link Ed25519Auth} for cross-SDK consistency
@@ -367,7 +437,7 @@ interface VenueRequestContext {
     baseUrl: string;
     venueId: string;
     auth: {
-        apply(headers: Record<string, string>, audience?: string): void;
+        apply(headers: Record<string, string>, audience?: string): void | Promise<void>;
     };
 }
 
@@ -543,11 +613,13 @@ declare class AssetManager {
      * @param options - Pagination options (offset, limit). Pass
      * `{ expand: 'metadata' }` to get each item's metadata inlined as
      * `{id, metadata}` instead of a bare id string, sparing a per-id fetch.
+     * Pass `kind: 'data'` or `kind: 'operation'` to have the venue filter the
+     * catalog before paging (see {@link CatalogListOptions}).
      */
-    list(options: AssetListOptions & {
+    list(options: CatalogListOptions & {
         expand: 'metadata';
     }): Promise<ExpandedAssetList>;
-    list(options?: AssetListOptions): Promise<AssetList>;
+    list(options?: CatalogListOptions): Promise<AssetList>;
     /**
      * List the authenticated caller's own assets — the per-user a/ namespace
      * populated by `store`/`pin`, distinct from the venue-wide catalog `list()`
@@ -1248,14 +1320,15 @@ declare class Venue implements VenueInterface {
     /**
      * List assets with pagination support (convenience delegate to venue.assets.list)
      * @param options - Pagination options (offset, limit). Pass
-     * `{ expand: 'metadata' }` to get each item's metadata inlined.
+     * `{ expand: 'metadata' }` to get each item's metadata inlined, and
+     * `kind` to filter the catalog on the venue.
      * @returns {Promise<AssetList>} Paginated list of asset ids, or of
      * `{id, metadata}` items when `expand: 'metadata'` is requested
      */
-    listAssets(options: AssetListOptions & {
+    listAssets(options: CatalogListOptions & {
         expand: 'metadata';
     }): Promise<ExpandedAssetList>;
-    listAssets(options?: AssetListOptions): Promise<AssetList>;
+    listAssets(options?: CatalogListOptions): Promise<AssetList>;
     /**
      * List all jobs
      * @returns {Promise<string[]>}
@@ -1369,10 +1442,10 @@ interface VenueInterface {
     getJob(jobId: string): Promise<Job>;
     listJobs(): Promise<string[]>;
     getAsset(assetId: AssetID): Promise<Asset>;
-    listAssets(options: AssetListOptions & {
+    listAssets(options: CatalogListOptions & {
         expand: 'metadata';
     }): Promise<ExpandedAssetList>;
-    listAssets(options?: AssetListOptions): Promise<AssetList>;
+    listAssets(options?: CatalogListOptions): Promise<AssetList>;
     didDocument(): Promise<DIDDocument>;
     mcpDiscovery(): Promise<MCPDiscovery>;
     agentCard(): Promise<AgentCard>;
@@ -1517,6 +1590,17 @@ interface AssetListOptions {
     limit?: number;
     expand?: 'metadata';
 }
+/**
+ * Options for the venue-wide catalog listing (`GET /api/v1/assets`).
+ * `kind` restricts it to assets that carry an operation (`'operation'`) or to
+ * those that do not (`'data'`); the venue filters before paging, so `offset`
+ * counts filtered entries and `total` is the filtered size. Venues older than
+ * covia 0.9.9 ignore `kind` and return the whole catalog, so a caller that
+ * depends on the split should still check each item.
+ */
+interface CatalogListOptions extends AssetListOptions {
+    kind?: 'operation' | 'data';
+}
 interface AssetList {
     items: string[];
     total: number;
@@ -2677,6 +2761,7 @@ declare function didFromPublicKey(publicKey: Uint8Array): string;
  * `ucans` request array and relayed across cross-venue hops. Delegation chains
  * embed parent tokens as JWT strings in `prf`.
  */
+
 /** The ability that instructs a venue to relay a cross-venue hop as itself. */
 declare const VENUE_RELAY = "venue/relay";
 interface UCANCapability {
@@ -2700,6 +2785,11 @@ declare function didFor(privateKey: Uint8Array): string;
  * @param proofs parent UCAN JWT strings (`prf`) for delegation chains
  */
 declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): string;
+/**
+ * {@link createUCANJWT} through an {@link Ed25519Signer}, for issuers whose
+ * key is not readable bytes (e.g. a non-extractable WebCrypto key). Same token.
+ */
+declare function createUCANJWTWith(signer: Ed25519Signer, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): Promise<string>;
 /**
  * Mint an **identity token**: a UCAN with an EMPTY attenuation list, audienced
  * to `venueDID`. Pure proof of identity — it grants nothing, and being
@@ -2716,6 +2806,8 @@ declare function identityToken(privateKey: Uint8Array, venueDID: string, lifetim
  * in issuance.
  */
 declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): string;
+/** {@link grant} through an {@link Ed25519Signer}. */
+declare function grantWith(ownerSigner: Ed25519Signer, audienceDID: string, withResource: string, can: string, lifetimeSeconds: number): Promise<string>;
 /**
  * Mint a **relay delegation**: instructs and authorises `venueDID` to make a
  * cross-venue hop authenticated as itself, exercising the caller's authority.
@@ -2724,5 +2816,7 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  * authenticated caller (COG-15).
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
+/** {@link relayDelegation} through an {@link Ed25519Signer}. */
+declare function relayDelegationWith(signer: Ed25519Signer, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): Promise<string>;
 
-export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type A2AAuthRef, type A2AImportAgentInput, type A2AImportAgentResult, A2AManager, type A2AMessage, type A2APart, type A2ATask, type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompactedSegment, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentCycleEndEvent, type AgentCycleStartEvent, type AgentDeleteInput, type AgentDeleteResult, type AgentEvent, type AgentEventEnvelope, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInferenceEndEvent, type AgentInferenceStartEvent, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentRunEndEvent, type AgentRunStartEvent, type AgentSession, type AgentSessionListOptions, type AgentSessionMessage, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, type AgentSessionRole, AgentStatus, type AgentStatusEvent, type AgentSuspendResult, type AgentToolResultEvent, type AgentToolStartEvent, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListItem, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, type AuthenticationKeyEntry, type AuthenticationKeysMap, type AuthenticationKeysResult, type AuthenticatorRevokeResult, BasicAuth, BearerAuth, type CatalogListOptions, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, type DLFSDrivesResult, type DLFSEntry, type DLFSListResult, DLFSManager, DataAsset, Ed25519Auth, type Ed25519Signer, type ExecutionScope, type ExpandedAssetList, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, type JobHistoryOptions, type JobHistoryPage, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPContent, type MCPDiscovery, MCPError, MCPManager, type MCPTool, type MCPToolPage, type MCPToolResult, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, ScopedWorkspace, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, type UserInfo, type UserListResult, UserManager, type UserSummary, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceFieldValue, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceProjectedList, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, createUCANJWTWith, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, generateNonExtractableKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, grantWith, hexToPrivateKey, identityToken, importNonExtractableKey, isDid, isJobComplete, isJobFinished, isJobPaused, isWebCryptoEd25519Supported, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, rawKeySigner, relayDelegation, relayDelegationWith, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates, webCryptoSigner };