@covia/covia-sdk 1.7.4 → 1.8.0

package/dist/index.d.mts

@@ -1658,16 +1658,20 @@ interface UCANCapability {
 /** The did:key DID for a private key. */
 declare function didFor(privateKey: Uint8Array): string;
 /**
- * Mint a UCAN as an EdDSA JWT: `{iss, aud, att, exp[, prf]}` signed by
- * `privateKey` (iss = its did:key).
+ * Mint a UCAN as an EdDSA JWT in the Convex UCAN JWT profile:
+ * `{iss, aud, ucv, att, prf, exp}` signed by `privateKey` (iss = its did:key).
+ * From Convex 0.8.11 venues parse only this profile: the `ucv` claim and the
+ * `att`/`prf` arrays are always present, and the `exp` key is always present —
+ * explicitly `null` for a non-expiring token (UCAN v0.10.0; an absent `exp`
+ * is malformed).
  *
  * @param privateKey 32-byte Ed25519 private key (the issuer)
  * @param audienceDID who receives the token (`aud`)
  * @param att capabilities delegated (empty array = pure identity token)
- * @param lifetimeSeconds validity window
+ * @param lifetimeSeconds validity window, or `null` for a non-expiring token
  * @param proofs parent UCAN JWT strings (`prf`) for delegation chains
  */
-declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number, proofs?: string[]): string;
+declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): string;
 /**
  * Mint an **identity token**: a UCAN with an EMPTY attenuation list, audienced
  * to `venueDID`. Pure proof of identity — it grants nothing, and being

package/dist/index.d.ts

@@ -1658,16 +1658,20 @@ interface UCANCapability {
 /** The did:key DID for a private key. */
 declare function didFor(privateKey: Uint8Array): string;
 /**
- * Mint a UCAN as an EdDSA JWT: `{iss, aud, att, exp[, prf]}` signed by
- * `privateKey` (iss = its did:key).
+ * Mint a UCAN as an EdDSA JWT in the Convex UCAN JWT profile:
+ * `{iss, aud, ucv, att, prf, exp}` signed by `privateKey` (iss = its did:key).
+ * From Convex 0.8.11 venues parse only this profile: the `ucv` claim and the
+ * `att`/`prf` arrays are always present, and the `exp` key is always present —
+ * explicitly `null` for a non-expiring token (UCAN v0.10.0; an absent `exp`
+ * is malformed).
  *
  * @param privateKey 32-byte Ed25519 private key (the issuer)
  * @param audienceDID who receives the token (`aud`)
  * @param att capabilities delegated (empty array = pure identity token)
- * @param lifetimeSeconds validity window
+ * @param lifetimeSeconds validity window, or `null` for a non-expiring token
  * @param proofs parent UCAN JWT strings (`prf`) for delegation chains
  */
-declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number, proofs?: string[]): string;
+declare function createUCANJWT(privateKey: Uint8Array, audienceDID: string, att: UCANCapability[], lifetimeSeconds: number | null, proofs?: string[]): string;
 /**
  * Mint an **identity token**: a UCAN with an EMPTY attenuation list, audienced
  * to `venueDID`. Pure proof of identity — it grants nothing, and being

package/dist/index.js

@@ -2913,6 +2913,7 @@ var Grid = class {
 // src/crypto/ucan.ts
 var encoder2 = new TextEncoder();
 var VENUE_RELAY = "venue/relay";
+var UCV_VERSION = "0.10.0";
 function didFor(privateKey) {
   return `did:key:${encodePublicKey(getPublicKey2(privateKey))}`;
 }
@@ -2923,10 +2924,11 @@ function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = [
   const claims = {
     iss: `did:key:${multikey}`,
     aud: audienceDID,
+    ucv: UCV_VERSION,
     att,
-    exp: nowSecs + lifetimeSeconds
+    prf: proofs,
+    exp: lifetimeSeconds === null ? null : nowSecs + lifetimeSeconds
   };
-  if (proofs.length) claims.prf = proofs;
   const signingInput = `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
   const signature = sign(encoder2.encode(signingInput), privateKey);
   return `${signingInput}.${base64UrlEncode(signature)}`;

package/dist/index.mjs

@@ -2911,6 +2911,7 @@ var Grid = class {
 // src/crypto/ucan.ts
 var encoder2 = new TextEncoder();
 var VENUE_RELAY = "venue/relay";
+var UCV_VERSION = "0.10.0";
 function didFor(privateKey) {
   return `did:key:${encodePublicKey(getPublicKey2(privateKey))}`;
 }
@@ -2921,10 +2922,11 @@ function createUCANJWT(privateKey, audienceDID, att, lifetimeSeconds, proofs = [
   const claims = {
     iss: `did:key:${multikey}`,
     aud: audienceDID,
+    ucv: UCV_VERSION,
     att,
-    exp: nowSecs + lifetimeSeconds
+    prf: proofs,
+    exp: lifetimeSeconds === null ? null : nowSecs + lifetimeSeconds
   };
-  if (proofs.length) claims.prf = proofs;
   const signingInput = `${base64UrlEncode(encoder2.encode(header))}.${base64UrlEncode(encoder2.encode(JSON.stringify(claims)))}`;
   const signature = sign(encoder2.encode(signingInput), privateKey);
   return `${signingInput}.${base64UrlEncode(signature)}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@covia/covia-sdk",
-  "version": "1.7.4",
+  "version": "1.8.0",
   "description": "Typescript library for covia-ai",
   "packageManager": "pnpm@11.9.0",
   "main": "./dist/index.js",