@covia/covia-sdk 1.9.0 → 1.10.0

package/dist/index.d.mts

@@ -262,6 +262,21 @@ declare class Ed25519Auth extends Auth {
      */
     constructor(privateKey: Uint8Array, tokenLifetimeSeconds?: number);
     apply(headers: Record<string, string>, audience?: string): void;
+    /**
+     * Mint a bearer-usable identity JWT for this key — the same token
+     * {@link apply} attaches to every request, exposed for callers that need
+     * to present this identity elsewhere (CLI tools, curl, another client:
+     * `Authorization: Bearer <token>`).
+     *
+     * An explicitly-pinned {@link audience} wins; otherwise the JWT `aud` is
+     * bound to the venue DID given here. A token with no `aud` is replayable
+     * at any venue that accepts the caller's DID, so minting one is refused
+     * rather than silently weakened.
+     *
+     * @param audience - The venue DID the token is bound to (`aud` claim).
+     * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
+     */
+    identityToken(audience?: string, lifetimeSeconds?: number): string;
     /** The caller's DID derived from the public key. */
     getDID(): string;
     /**
@@ -451,6 +466,13 @@ declare class AssetManager {
      * @param options - Pagination options (offset, limit)
      */
     list(options?: AssetListOptions): Promise<AssetList>;
+    /**
+     * List the authenticated caller's own assets — the per-user a/ namespace
+     * populated by `store`/`pin`, distinct from the venue-wide catalog `list()`
+     * reads. Job-free (a plain GET, not an operation invocation).
+     * @param options - Pagination options (offset, limit)
+     */
+    listMine(options?: AssetListOptions): Promise<MyAssetList>;
     /**
      * Register a new asset
      * @param assetData - Asset configuration
@@ -1018,6 +1040,18 @@ interface AssetList {
     offset: number;
     limit: number;
 }
+interface AssetSummary {
+    id: string;
+    name?: string;
+    type?: string;
+    description?: string;
+}
+interface MyAssetList {
+    items: AssetSummary[];
+    total: number;
+    offset: number;
+    limit: number;
+}
 interface MCPDiscovery {
     mcp_version?: string;
     server_url?: string;
@@ -1825,4 +1859,4 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
 
-export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, Auth, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, DataAsset, Ed25519Auth, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, DataAsset, Ed25519Auth, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/dist/index.d.ts

@@ -262,6 +262,21 @@ declare class Ed25519Auth extends Auth {
      */
     constructor(privateKey: Uint8Array, tokenLifetimeSeconds?: number);
     apply(headers: Record<string, string>, audience?: string): void;
+    /**
+     * Mint a bearer-usable identity JWT for this key — the same token
+     * {@link apply} attaches to every request, exposed for callers that need
+     * to present this identity elsewhere (CLI tools, curl, another client:
+     * `Authorization: Bearer <token>`).
+     *
+     * An explicitly-pinned {@link audience} wins; otherwise the JWT `aud` is
+     * bound to the venue DID given here. A token with no `aud` is replayable
+     * at any venue that accepts the caller's DID, so minting one is refused
+     * rather than silently weakened.
+     *
+     * @param audience - The venue DID the token is bound to (`aud` claim).
+     * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
+     */
+    identityToken(audience?: string, lifetimeSeconds?: number): string;
     /** The caller's DID derived from the public key. */
     getDID(): string;
     /**
@@ -451,6 +466,13 @@ declare class AssetManager {
      * @param options - Pagination options (offset, limit)
      */
     list(options?: AssetListOptions): Promise<AssetList>;
+    /**
+     * List the authenticated caller's own assets — the per-user a/ namespace
+     * populated by `store`/`pin`, distinct from the venue-wide catalog `list()`
+     * reads. Job-free (a plain GET, not an operation invocation).
+     * @param options - Pagination options (offset, limit)
+     */
+    listMine(options?: AssetListOptions): Promise<MyAssetList>;
     /**
      * Register a new asset
      * @param assetData - Asset configuration
@@ -1018,6 +1040,18 @@ interface AssetList {
     offset: number;
     limit: number;
 }
+interface AssetSummary {
+    id: string;
+    name?: string;
+    type?: string;
+    description?: string;
+}
+interface MyAssetList {
+    items: AssetSummary[];
+    total: number;
+    offset: number;
+    limit: number;
+}
 interface MCPDiscovery {
     mcp_version?: string;
     server_url?: string;
@@ -1825,4 +1859,4 @@ declare function grant(ownerPrivateKey: Uint8Array, audienceDID: string, withRes
  */
 declare function relayDelegation(privateKey: Uint8Array, venueDID: string, lifetimeSeconds: number, caps?: UCANCapability[]): string;
 
-export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, Auth, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, DataAsset, Ed25519Auth, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };
+export { type AdapterInfo, AdapterManager, type AdaptersResult, Agent, type AgentCancelTaskInput, type AgentCard, type AgentChatInput, type AgentChatResult, type AgentCompleteTaskResult, type AgentContextInput, type AgentCreateInput, type AgentCreateResult, type AgentDeleteInput, type AgentDeleteResult, type AgentFailTaskResult, type AgentForkInput, type AgentForkResult, type AgentInfoResult, type AgentListInput, type AgentListResult, AgentManager, type AgentMessageInput, type AgentMessageResult, type AgentRenameSessionResult, type AgentRequestInput, type AgentRequestResult, type AgentResumeInput, type AgentSession, type AgentSessionListOptions, type AgentSessionMetadata, AgentSessionNotFoundError, type AgentSessionPage, AgentStatus, type AgentSuspendResult, type AgentTriggerInput, type AgentTriggerResult, type AgentUpdateInput, Asset, type AssetID, type AssetList, type AssetListOptions, AssetManager, type AssetMetadata, type AssetMetadataStore, AssetNotFoundError, type AssetPinResult, type AssetSummary, Auth, BasicAuth, BearerAuth, ChatSession, type ConnectionAttempt, type ContentDetails, type ContentHashResult, CoviaConnectionError, type CoviaConnectionErrorOptions, CoviaError, CoviaTimeoutError, type Credentials, CredentialsHTTP, type DIDDocument, type DIDURL, DataAsset, Ed25519Auth, type FunctionInfo, type FunctionsResult, Grid, GridError, type GroupCount, type InvokeOptions, type InvokePayload, Job, JobFailedError, JobManager, type JobMetadata, JobNotFoundError, JobStatus, KeyPairAuth, type MCPDiscovery, type MemoryChange, type MemoryEntry, MemoryManager, type MyAssetList, Namespace, NoAuth, NotFoundError, Operation, type OperationDetails, type OperationInfo, OperationManager, type OperationPayload, type OperationRunner, RateLimitError, RunStatus, type SSEEvent, type SecretExtractInput, type SecretExtractResult, SecretManager, type SecretSetInput, type SecretSetResult, type Skill, type SkillFacet, SkillManager, type SkillMetadata, type StatsData, type StatusData, type UCANAttenuation, type UCANCapability, type UCANIssueInput, type UCANIssueResult, UCANManager, type UCANVerifyResult, UnsupportedVenueFeatureError, VENUE_RELAY, Venue, type VenueConstructor, type VenueData, VenueIdentityChangedError, type VenueInterface, type VenueOptions, type WorkspaceAggregateResult, type WorkspaceAppendInput, type WorkspaceAppendResult, type WorkspaceCopyResult, type WorkspaceCountResult, type WorkspaceDeleteInput, type WorkspaceDeleteResult, type WorkspaceInspectInput, type WorkspaceInspectResult, type WorkspaceListInput, type WorkspaceListResult, WorkspaceManager, type WorkspaceReadInput, type WorkspaceReadResult, type WorkspaceSliceInput, type WorkspaceSliceResult, type WorkspaceWriteInput, type WorkspaceWriteResult, assetHash, createSSEEvent, createUCANJWT, decodePublicKey, didFor, didFromPublicKey, didMethod, didUrl, encodePublicKey, fetchStreamWithError, fetchWithError, generateKeyPair, getAssetIdFromPath, getAssetIdFromVenueId, getAssetMetadataStore, getParsedAssetId, grant, hexToPrivateKey, identityToken, isDid, isJobComplete, isJobFinished, isJobPaused, logger, parseDidUrl, parseRetryAfterMs, parseSSEStream, privateKeyToHex, relayDelegation, retryDelayMs, setAssetMetadataStore, venueBaseUrlCandidates };

package/dist/index.js

@@ -1217,14 +1217,30 @@ var Ed25519Auth = class _Ed25519Auth extends Auth {
     this._lifetime = tokenLifetimeSeconds;
   }
   apply(headers, audience) {
+    headers["Authorization"] = `Bearer ${this.identityToken(audience)}`;
+  }
+  /**
+   * Mint a bearer-usable identity JWT for this key — the same token
+   * {@link apply} attaches to every request, exposed for callers that need
+   * to present this identity elsewhere (CLI tools, curl, another client:
+   * `Authorization: Bearer <token>`).
+   *
+   * An explicitly-pinned {@link audience} wins; otherwise the JWT `aud` is
+   * bound to the venue DID given here. A token with no `aud` is replayable
+   * at any venue that accepts the caller's DID, so minting one is refused
+   * rather than silently weakened.
+   *
+   * @param audience - The venue DID the token is bound to (`aud` claim).
+   * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
+   */
+  identityToken(audience, lifetimeSeconds) {
     const aud = this._audience ?? (audience || void 0);
     if (!aud) {
       throw new CoviaError(
         "Ed25519Auth requires a venue audience to bind the token to: connect via Grid.connect()/Venue.connect() so the venue DID is known, or pin auth.audience explicitly."
       );
     }
-    const jwt = createEdDSAJWT(this._privateKey, this._lifetime, aud);
-    headers["Authorization"] = `Bearer ${jwt}`;
+    return createEdDSAJWT(this._privateKey, lifetimeSeconds ?? this._lifetime, aud);
   }
   /** The caller's DID derived from the public key. */
   getDID() {
@@ -2311,6 +2327,25 @@ var AssetManager = class {
       { contentType: null }
     );
   }
+  /**
+   * List the authenticated caller's own assets — the per-user a/ namespace
+   * populated by `store`/`pin`, distinct from the venue-wide catalog `list()`
+   * reads. Job-free (a plain GET, not an operation invocation).
+   * @param options - Pagination options (offset, limit)
+   */
+  async listMine(options = {}) {
+    const params = new URLSearchParams();
+    params.set("scope", "own");
+    params.set("offset", String(options.offset ?? 0));
+    if (options.limit !== void 0) {
+      params.set("limit", String(options.limit));
+    }
+    return venueJson(
+      this.venue,
+      `/api/v1/assets?${params.toString()}`,
+      { contentType: null }
+    );
+  }
   /**
    * Register a new asset
    * @param assetData - Asset configuration

package/dist/index.mjs

@@ -1215,14 +1215,30 @@ var Ed25519Auth = class _Ed25519Auth extends Auth {
     this._lifetime = tokenLifetimeSeconds;
   }
   apply(headers, audience) {
+    headers["Authorization"] = `Bearer ${this.identityToken(audience)}`;
+  }
+  /**
+   * Mint a bearer-usable identity JWT for this key — the same token
+   * {@link apply} attaches to every request, exposed for callers that need
+   * to present this identity elsewhere (CLI tools, curl, another client:
+   * `Authorization: Bearer <token>`).
+   *
+   * An explicitly-pinned {@link audience} wins; otherwise the JWT `aud` is
+   * bound to the venue DID given here. A token with no `aud` is replayable
+   * at any venue that accepts the caller's DID, so minting one is refused
+   * rather than silently weakened.
+   *
+   * @param audience - The venue DID the token is bound to (`aud` claim).
+   * @param lifetimeSeconds - Token lifetime; defaults to this instance's.
+   */
+  identityToken(audience, lifetimeSeconds) {
     const aud = this._audience ?? (audience || void 0);
     if (!aud) {
       throw new CoviaError(
         "Ed25519Auth requires a venue audience to bind the token to: connect via Grid.connect()/Venue.connect() so the venue DID is known, or pin auth.audience explicitly."
       );
     }
-    const jwt = createEdDSAJWT(this._privateKey, this._lifetime, aud);
-    headers["Authorization"] = `Bearer ${jwt}`;
+    return createEdDSAJWT(this._privateKey, lifetimeSeconds ?? this._lifetime, aud);
   }
   /** The caller's DID derived from the public key. */
   getDID() {
@@ -2309,6 +2325,25 @@ var AssetManager = class {
       { contentType: null }
     );
   }
+  /**
+   * List the authenticated caller's own assets — the per-user a/ namespace
+   * populated by `store`/`pin`, distinct from the venue-wide catalog `list()`
+   * reads. Job-free (a plain GET, not an operation invocation).
+   * @param options - Pagination options (offset, limit)
+   */
+  async listMine(options = {}) {
+    const params = new URLSearchParams();
+    params.set("scope", "own");
+    params.set("offset", String(options.offset ?? 0));
+    if (options.limit !== void 0) {
+      params.set("limit", String(options.limit));
+    }
+    return venueJson(
+      this.venue,
+      `/api/v1/assets?${params.toString()}`,
+      { contentType: null }
+    );
+  }
   /**
    * Register a new asset
    * @param assetData - Asset configuration

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@covia/covia-sdk",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Typescript library for covia-ai",
   "packageManager": "pnpm@11.9.0",
   "main": "./dist/index.js",