@arbidocs/cli 0.3.16 → 0.3.18

package/dist/index.js

@@ -2,9 +2,9 @@
 'use strict';
 
 var commander = require('commander');
-var fs = require('fs');
-var os = require('os');
+var fs2 = require('fs');
 var path = require('path');
+var os = require('os');
 var chalk2 = require('chalk');
 var sdk = require('@arbidocs/sdk');
 var prompts = require('@inquirer/prompts');
@@ -15,11 +15,104 @@ var module$1 = require('module');
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
-var fs__default = /*#__PURE__*/_interopDefault(fs);
-var os__default = /*#__PURE__*/_interopDefault(os);
+var fs2__default = /*#__PURE__*/_interopDefault(fs2);
 var path__default = /*#__PURE__*/_interopDefault(path);
+var os__default = /*#__PURE__*/_interopDefault(os);
 var chalk2__default = /*#__PURE__*/_interopDefault(chalk2);
 
+function getCacheFile() {
+  const configDir = process.env.ARBI_CONFIG_DIR ?? path__default.default.join(os__default.default.homedir(), ".arbi");
+  return path__default.default.join(configDir, "completions.json");
+}
+function ensureDir(filePath) {
+  const dir = path__default.default.dirname(filePath);
+  if (!fs2__default.default.existsSync(dir)) {
+    fs2__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  }
+}
+function getCachedWorkspaceIds() {
+  try {
+    const content = fs2__default.default.readFileSync(getCacheFile(), "utf-8");
+    const cache = JSON.parse(content);
+    return cache.workspaces.map((w) => w.id);
+  } catch {
+    return [];
+  }
+}
+function updateCompletionCache(workspaces3) {
+  const cache = {
+    workspaces: workspaces3.filter((w) => w.external_id).map((w) => ({ id: w.external_id, name: w.name ?? "" })),
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const filePath = getCacheFile();
+  ensureDir(filePath);
+  fs2__default.default.writeFileSync(filePath, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
+}
+
+// src/completion.ts
+var WORKSPACE_ID_OPTIONS = /* @__PURE__ */ new Set(["-w", "--workspace"]);
+function getOptionFlags(cmd) {
+  const flags = [];
+  for (const opt of cmd.options) {
+    if (opt.short) flags.push(opt.short);
+    if (opt.long) flags.push(opt.long);
+  }
+  return flags;
+}
+function findOption(cmd, flag) {
+  return cmd.options.find((o) => o.short === flag || o.long === flag);
+}
+function getCompletions(program2, line) {
+  const parts = line.trim().split(/\s+/);
+  if (parts.length > 0) {
+    const first = parts[0];
+    if (first === program2.name() || first.endsWith("/" + program2.name())) {
+      parts.shift();
+    }
+  }
+  const endsWithSpace = line.endsWith(" ");
+  let current = program2;
+  let consumed = 0;
+  for (let i = 0; i < parts.length; i++) {
+    const word = parts[i];
+    const sub = current.commands.find(
+      (c) => c.name() === word || c.aliases().includes(word)
+    );
+    if (sub) {
+      current = sub;
+      consumed = i + 1;
+    } else {
+      break;
+    }
+  }
+  const remaining = parts.slice(consumed);
+  const lastWord = remaining.length > 0 ? remaining[remaining.length - 1] : "";
+  const prevWord = endsWithSpace ? remaining[remaining.length - 1] : remaining[remaining.length - 2];
+  if (prevWord && WORKSPACE_ID_OPTIONS.has(prevWord)) {
+    return getCachedWorkspaceIds();
+  }
+  const subcommands = current.commands.map((c) => c.name());
+  const options = getOptionFlags(current);
+  const allCandidates = [...subcommands, ...options];
+  if (remaining.length === 0 || endsWithSpace && remaining.length >= 0) {
+    if (endsWithSpace) {
+      const used = /* @__PURE__ */ new Set();
+      for (const part of remaining) {
+        if (part.startsWith("-")) {
+          used.add(part);
+          const opt = findOption(current, part);
+          if (opt) {
+            if (opt.short) used.add(opt.short);
+            if (opt.long) used.add(opt.long);
+          }
+        }
+      }
+      return allCandidates.filter((c) => !used.has(c));
+    }
+    return allCandidates;
+  }
+  return allCandidates.filter((c) => c.startsWith(lastWord));
+}
 var store = new sdk.FileConfigStore();
 function getConfig() {
   return store.getConfig();
@@ -51,6 +144,12 @@ function getCredentials() {
 function deleteCredentials() {
   store.deleteCredentials();
 }
+function saveLastMetadata(metadata) {
+  store.saveLastMetadata?.(metadata);
+}
+function loadLastMetadata() {
+  return store.loadLastMetadata?.() ?? null;
+}
 function getChatSession() {
   return store.getChatSession();
 }
@@ -98,8 +197,8 @@ function getShellRcPath() {
   return path.join(os.homedir(), ".bashrc");
 }
 function isAliasInstalled(rcPath) {
-  if (!fs.existsSync(rcPath)) return false;
-  const content = fs.readFileSync(rcPath, "utf-8");
+  if (!fs2.existsSync(rcPath)) return false;
+  const content = fs2.readFileSync(rcPath, "utf-8");
   return content.includes(ALIAS_LINE) || content.includes(ALIAS_MARKER);
 }
 function registerConfigCommand(program2) {
@@ -178,7 +277,7 @@ function registerConfigCommand(program2) {
       dim("Usage: A what is the meaning of life");
       return;
     }
-    fs.appendFileSync(rcPath, `
+    fs2.appendFileSync(rcPath, `
 ${ALIAS_MARKER}
 ${ALIAS_LINE}
 `);
@@ -3504,7 +3603,7 @@ var CACHE_FILE = path__default.default.join(os__default.default.homedir(), ".arb
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 function readCache() {
   try {
-    const data = JSON.parse(fs__default.default.readFileSync(CACHE_FILE, "utf8"));
+    const data = JSON.parse(fs2__default.default.readFileSync(CACHE_FILE, "utf8"));
     if (data.latest && data.checkedAt && Date.now() - data.checkedAt < CACHE_TTL_MS) {
       return data;
     }
@@ -3515,8 +3614,8 @@ function readCache() {
 function writeCache(latest) {
   try {
     const dir = path__default.default.dirname(CACHE_FILE);
-    if (!fs__default.default.existsSync(dir)) fs__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
-    fs__default.default.writeFileSync(CACHE_FILE, JSON.stringify({ latest, checkedAt: Date.now() }) + "\n");
+    if (!fs2__default.default.existsSync(dir)) fs2__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs2__default.default.writeFileSync(CACHE_FILE, JSON.stringify({ latest, checkedAt: Date.now() }) + "\n");
   } catch {
   }
 }
@@ -3537,13 +3636,13 @@ function getLatestVersion(skipCache = false) {
   }
 }
 function getCurrentVersion() {
-  return "0.3.16";
+  return "0.3.18";
 }
 function readChangelog(fromVersion, toVersion) {
   try {
     const globalRoot = child_process.execSync("npm root -g", { encoding: "utf8", timeout: 5e3 }).trim();
     const changelogPath = path__default.default.join(globalRoot, "@arbidocs", "cli", "CHANGELOG.md");
-    const text = fs__default.default.readFileSync(changelogPath, "utf8");
+    const text = fs2__default.default.readFileSync(changelogPath, "utf8");
     return extractSections(text, fromVersion, toVersion);
   } catch {
     return null;
@@ -3590,17 +3689,17 @@ function showChangelog(fromVersion, toVersion) {
 async function checkForUpdates(autoUpdate) {
   try {
     const latest = getLatestVersion();
-    if (!latest || latest === "0.3.16") return;
+    if (!latest || latest === "0.3.18") return;
     if (autoUpdate) {
       warn(`
-Your arbi version is out of date (${"0.3.16"} \u2192 ${latest}). Updating...`);
+Your arbi version is out of date (${"0.3.18"} \u2192 ${latest}). Updating...`);
       child_process.execSync("npm install -g @arbidocs/cli@latest", { stdio: "inherit" });
-      showChangelog("0.3.16", latest);
+      showChangelog("0.3.18", latest);
       console.log(`Updated to ${latest}.`);
     } else {
       warn(
         `
-Your arbi version is out of date (${"0.3.16"} \u2192 ${latest}).
+Your arbi version is out of date (${"0.3.18"} \u2192 ${latest}).
 Run "arbi update" to upgrade, or "arbi update auto" to always stay up to date.`
       );
     }
@@ -3610,150 +3709,380 @@ Run "arbi update" to upgrade, or "arbi update auto" to always stay up to date.`
 function hintUpdateOnError() {
   try {
     const cached = readCache();
-    if (cached && cached.latest !== "0.3.16") {
+    if (cached && cached.latest !== "0.3.18") {
       warn(
-        `Your arbi version is out of date (${"0.3.16"} \u2192 ${cached.latest}). Run "arbi update".`
+        `Your arbi version is out of date (${"0.3.18"} \u2192 ${cached.latest}). Run "arbi update".`
       );
     }
   } catch {
   }
 }
+var MAX_TASKS = 50;
+var MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
+function getTasksFile() {
+  const configDir = process.env.ARBI_CONFIG_DIR ?? path__default.default.join(os__default.default.homedir(), ".arbi");
+  return path__default.default.join(configDir, "tasks.json");
+}
+function ensureDir2(filePath) {
+  const dir = path__default.default.dirname(filePath);
+  if (!fs2__default.default.existsSync(dir)) {
+    fs2__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  }
+}
+function readTasks() {
+  try {
+    const content = fs2__default.default.readFileSync(getTasksFile(), "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return [];
+  }
+}
+function writeTasks(tasks) {
+  const filePath = getTasksFile();
+  ensureDir2(filePath);
+  fs2__default.default.writeFileSync(filePath, JSON.stringify(tasks, null, 2) + "\n", { mode: 384 });
+}
+function getTasks() {
+  const now = Date.now();
+  const tasks = readTasks().filter((t) => now - new Date(t.submittedAt).getTime() < MAX_AGE_MS);
+  return tasks;
+}
+function addTask(task) {
+  const tasks = [task, ...getTasks().filter((t) => t.id !== task.id)].slice(0, MAX_TASKS);
+  writeTasks(tasks);
+}
+function updateTaskStatus(id, status2) {
+  const tasks = readTasks();
+  const task = tasks.find((t) => t.id === id);
+  if (task) {
+    task.status = status2;
+    writeTasks(tasks);
+  }
+}
+function getLatestTask() {
+  const tasks = getTasks();
+  return tasks[0] ?? null;
+}
 
-// src/commands/login.ts
-function registerLoginCommand(program2) {
-  program2.command("login").description("Log in to ARBI").option("-e, --email <email>", "Email address (or ARBI_EMAIL env var)").option("-p, --password <password>", "Password (or ARBI_PASSWORD env var)").option("-w, --workspace <id>", "Workspace ID to select after login").action(async (opts) => {
-    const config = store.requireConfig();
-    const email = opts.email || process.env.ARBI_EMAIL || await promptInput("Email");
-    const pw = opts.password || process.env.ARBI_PASSWORD || await promptPassword("Password");
-    try {
-      const { arbi } = await sdk.performPasswordLogin(config, email, pw, store);
-      clearChatSession();
-      const { data: workspaces2 } = await arbi.fetch.GET("/v1/user/workspaces");
-      const wsList = workspaces2 || [];
-      const memberWorkspaces = wsList.filter((ws2) => ws2.users?.some((u) => u.email === email));
-      if (memberWorkspaces.length === 0) {
-        console.log("No workspaces found. Create one with: arbi workspace create <name>");
-        return;
-      }
-      if (opts.workspace) {
-        const ws2 = memberWorkspaces.find((w) => w.external_id === opts.workspace);
-        if (!ws2) {
-          error(`Workspace ${opts.workspace} not found or you don't have access.`);
-          process.exit(1);
+// src/notifications.ts
+var activeConnection = null;
+function timestamp() {
+  return (/* @__PURE__ */ new Date()).toLocaleTimeString("en-GB", { hour12: false });
+}
+function colorize(level, text) {
+  if (level === "success") return chalk2__default.default.green(text);
+  if (level === "error") return chalk2__default.default.red(text);
+  if (level === "warning") return chalk2__default.default.yellow(text);
+  return text;
+}
+async function startBackgroundNotifications(baseUrl, accessToken) {
+  if (activeConnection) return;
+  try {
+    activeConnection = await sdk.connectWithReconnect({
+      baseUrl,
+      accessToken,
+      onMessage: (msg) => {
+        if (client.isMessageType(msg, "response_complete")) {
+          updateTaskStatus(msg.response_id, msg.status);
         }
-        updateConfig({ selectedWorkspaceId: ws2.external_id });
-        success(`Workspace: ${ws2.name} (${ref(ws2.external_id)})`);
-        return;
-      }
-      if (memberWorkspaces.length === 1) {
-        updateConfig({ selectedWorkspaceId: memberWorkspaces[0].external_id });
-        success(
-          `Workspace: ${memberWorkspaces[0].name} (${ref(memberWorkspaces[0].external_id)})`
+        const { text, level } = sdk.formatWsMessage(msg);
+        process.stderr.write(`
+${colorize(level, `[${timestamp()}] ${text}`)}
+`);
+      },
+      onClose: () => {
+        activeConnection = null;
+      },
+      onReconnecting: (attempt, maxRetries) => {
+        process.stderr.write(
+          `
+${chalk2__default.default.yellow(`[${timestamp()}] Reconnecting... (${attempt}/${maxRetries})`)}
+`
         );
-        return;
+      },
+      onReconnected: () => {
+        process.stderr.write(`
+${chalk2__default.default.green(`[${timestamp()}] Reconnected`)}
+`);
+      },
+      onReconnectFailed: () => {
+        process.stderr.write(`
+${chalk2__default.default.red(`[${timestamp()}] Reconnection failed`)}
+`);
       }
-      const choices = sdk.formatWorkspaceChoices(memberWorkspaces);
-      const selected = await promptSelect("Select workspace", choices);
-      updateConfig({ selectedWorkspaceId: selected });
-      const ws = memberWorkspaces.find((w) => w.external_id === selected);
-      success(`Workspace: ${ws.name} (${ref(selected)})`);
-      dim('\nTip: Run "arbi config alias" to use A as a shortcut for "arbi ask"');
-    } catch (err) {
-      error(`Login failed: ${sdk.getErrorMessage(err)}`);
-      process.exit(1);
-    } finally {
-      await checkForUpdates(getConfig()?.autoUpdate);
-    }
-  });
-}
-var CENTRAL_API_URL = "https://central.arbi.work";
-async function getVerificationCode(email, apiKey) {
-  const params = new URLSearchParams({ email });
-  const res = await fetch(`${CENTRAL_API_URL}/license-management/verify-ci?${params.toString()}`, {
-    method: "GET",
-    headers: { "x-api-key": apiKey }
-  });
-  if (!res.ok) {
-    const body = await res.text().catch(() => "");
-    throw new Error(`Failed to get verification code: ${res.status} ${body}`);
+    });
+  } catch {
   }
-  const data = await res.json();
-  const words = data?.verification_words ?? data?.verification_code ?? null;
-  if (!words) throw new Error("No verification code in response");
-  return Array.isArray(words) ? words.join(" ") : String(words);
 }
-function registerRegisterCommand(program2) {
-  program2.command("register").description("Register a new ARBI account").option("--non-interactive", "CI/automation mode (requires SUPPORT_API_KEY env var)").option("-e, --email <email>", "Email address (or ARBI_EMAIL env var)").option("-p, --password <password>", "Password (or ARBI_PASSWORD env var)").option("-c, --verification-code <code>", "Verification code (skip prompt)").option("--first-name <name>", "First name").option("--last-name <name>", "Last name").action(async (opts) => {
-    const config = requireConfig();
-    if (opts.nonInteractive) {
-      await nonInteractiveRegister(config, opts);
-    } else {
-      await smartRegister(config, opts);
-    }
-  });
+function stopBackgroundNotifications() {
+  activeConnection?.close();
+  activeConnection = null;
 }
-async function smartRegister(config, opts) {
-  let email = opts.email || process.env.ARBI_EMAIL || await promptInput("Email");
-  if ((opts.email || process.env.ARBI_EMAIL) && !email.includes("@")) {
-    email = `${email}@${config.deploymentDomain}`;
-    console.log(`Using email: ${email}`);
+process.on("exit", stopBackgroundNotifications);
+process.on("SIGINT", () => {
+  stopBackgroundNotifications();
+  process.exit(0);
+});
+
+// src/helpers.ts
+var CONNECTION_ERROR_HINTS = {
+  ECONNREFUSED: "Connection refused. Is the backend running?",
+  ECONNRESET: "Connection reset by server. The backend may have restarted.",
+  ENOTFOUND: "DNS resolution failed. Check the server URL.",
+  ETIMEDOUT: "Connection timed out. Check network connectivity.",
+  UNABLE_TO_VERIFY_LEAF_SIGNATURE: "TLS certificate cannot be verified. The cert may be expired or self-signed.",
+  CERT_HAS_EXPIRED: "TLS certificate has expired. Renew with manage-deployment.",
+  ERR_TLS_CERT_ALTNAME_INVALID: "TLS certificate hostname mismatch. Check the server URL.",
+  DEPTH_ZERO_SELF_SIGNED_CERT: "Self-signed TLS certificate. The cert may need to be renewed.",
+  SELF_SIGNED_CERT_IN_CHAIN: "Self-signed certificate in chain. The cert may need to be renewed."
+};
+function diagnoseConnectionError(err) {
+  const code = sdk.getErrorCode(err);
+  if (code && code in CONNECTION_ERROR_HINTS) {
+    return CONNECTION_ERROR_HINTS[code];
   }
-  const arbi = client.createArbiClient({
-    baseUrl: config.baseUrl,
-    deploymentDomain: config.deploymentDomain,
-    credentials: "omit"
-  });
-  await arbi.crypto.initSodium();
-  let verificationCode;
-  if (opts.verificationCode) {
-    verificationCode = opts.verificationCode;
-  } else {
-    const codeMethod = await promptSelect("Verification method", [
-      { name: "I have an invitation code", value: "code" },
-      { name: "Send me a verification email", value: "email" }
-    ]);
-    if (codeMethod === "code") {
-      verificationCode = await promptInput("Invitation code");
-    } else {
-      console.log("Sending verification email...");
-      const verifyResponse = await arbi.fetch.POST("/v1/user/verify-email", {
-        body: { email }
-      });
-      if (verifyResponse.error) {
-        error(`Failed to send verification email: ${JSON.stringify(verifyResponse.error)}`);
-        process.exit(1);
-      }
-      success("Verification email sent. Check your inbox.");
-      verificationCode = await promptInput("Verification code");
+  const msg = err instanceof Error ? err.message : "";
+  if (msg === "fetch failed" || msg.includes("fetch failed")) {
+    return "Network error connecting to the server. Run `arbi health` to diagnose.";
+  }
+  return void 0;
+}
+function formatCliError(err) {
+  const connectionHint = diagnoseConnectionError(err);
+  if (connectionHint) return connectionHint;
+  if (err instanceof sdk.ArbiApiError && err.apiError && typeof err.apiError === "object") {
+    const base = err.message;
+    const apiErr = err.apiError;
+    const detail = apiErr.detail ?? apiErr.message ?? apiErr.error;
+    if (typeof detail === "string" && detail && !base.includes(detail)) {
+      return `${base} \u2014 ${detail}`;
     }
+    return base;
   }
-  let pw;
-  const flagOrEnvPassword = opts.password || process.env.ARBI_PASSWORD;
-  if (flagOrEnvPassword) {
-    pw = flagOrEnvPassword;
-  } else {
-    pw = await promptPassword("Password");
-    const confirmPw = await promptPassword("Confirm password");
-    if (pw !== confirmPw) {
-      error("Passwords do not match.");
+  return sdk.getErrorMessage(err);
+}
+function runAction(fn) {
+  return async () => {
+    try {
+      await fn();
+      process.exit(0);
+    } catch (err) {
+      error(`Error: ${formatCliError(err)}`);
+      hintUpdateOnError();
       process.exit(1);
     }
-  }
-  const hasAllCoreFlags = !!(opts.email || process.env.ARBI_EMAIL) && !!(opts.password || process.env.ARBI_PASSWORD) && !!opts.verificationCode;
-  const firstName = opts.firstName || (hasAllCoreFlags ? "User" : await promptInput("First name", false) || "User");
-  const lastName = opts.lastName || (hasAllCoreFlags ? "" : await promptInput("Last name", false) || "");
+  };
+}
+async function resolveAuth() {
   try {
-    await arbi.auth.register({
-      email,
-      password: pw,
-      verificationCode,
-      firstName,
+    resolveConfig();
+    return await sdk.resolveAuth(store);
+  } catch (err) {
+    if (err instanceof sdk.ArbiError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+}
+async function resolveWorkspace(workspaceOpt) {
+  try {
+    resolveConfig();
+    const ctx = await sdk.resolveWorkspace(store, workspaceOpt);
+    if (getConfig()?.notifications !== false) {
+      startBackgroundNotifications(ctx.config.baseUrl, ctx.accessToken).catch(() => {
+      });
+    }
+    return ctx;
+  } catch (err) {
+    if (err instanceof sdk.ArbiError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+}
+function printTable(columns, rows) {
+  console.log(chalk2__default.default.bold(columns.map((c) => c.header.padEnd(c.width)).join("")));
+  for (const row of rows) {
+    console.log(
+      columns.map((c) => {
+        const val = c.value(row);
+        return val.slice(0, c.width - 2).padEnd(c.width);
+      }).join("")
+    );
+  }
+}
+function parseJsonArg(input2, example) {
+  try {
+    return JSON.parse(input2);
+  } catch {
+    error(`Invalid JSON. Example: ${example}`);
+    process.exit(1);
+  }
+}
+
+// src/commands/login.ts
+function registerLoginCommand(program2) {
+  program2.command("login").description("Log in to ARBI").option("-e, --email <email>", "Email address (or ARBI_EMAIL env var)").option("-p, --password <password>", "Password (or ARBI_PASSWORD env var)").option("-w, --workspace <id>", "Workspace ID to select after login").option("--sso", "Log in with Auth0 SSO (device flow)").action(
+    (opts) => runAction(async () => {
+      const config = store.requireConfig();
+      const email = opts.email || process.env.ARBI_EMAIL || await promptInput("Email");
+      const pw = opts.password || process.env.ARBI_PASSWORD || await promptPassword("Password");
+      try {
+        let ssoPolling = false;
+        const { arbi } = opts.sso ? await (async () => {
+          const result = await sdk.performSsoDeviceFlowLogin(config, email, pw, store, {
+            onUserCode: (userCode, verificationUri) => {
+              console.log(`
+Open this URL in your browser:
+  ${verificationUri}
+`);
+              console.log(`And enter code: ${userCode}
+`);
+              console.log("Waiting for authorization...");
+              ssoPolling = true;
+            },
+            onPoll: () => {
+              process.stdout.write(".");
+            }
+          });
+          if (ssoPolling) console.log("\n");
+          return result;
+        })() : await sdk.performPasswordLogin(config, email, pw, store);
+        clearChatSession();
+        const { data: workspaces3 } = await arbi.fetch.GET("/v1/user/workspaces");
+        const wsList = workspaces3 || [];
+        updateCompletionCache(wsList);
+        const memberWorkspaces = wsList.filter(
+          (ws2) => ws2.users?.some((u) => u.user.email === email)
+        );
+        if (memberWorkspaces.length === 0) {
+          console.log("No workspaces found. Create one with: arbi workspace create <name>");
+          return;
+        }
+        if (opts.workspace) {
+          const ws2 = memberWorkspaces.find((w) => w.external_id === opts.workspace);
+          if (!ws2) {
+            error(`Workspace ${opts.workspace} not found or you don't have access.`);
+            process.exit(1);
+          }
+          updateConfig({ selectedWorkspaceId: ws2.external_id });
+          success(`Workspace: ${ws2.name} (${ref(ws2.external_id)})`);
+          return;
+        }
+        if (memberWorkspaces.length === 1) {
+          updateConfig({ selectedWorkspaceId: memberWorkspaces[0].external_id });
+          success(
+            `Workspace: ${memberWorkspaces[0].name} (${ref(memberWorkspaces[0].external_id)})`
+          );
+          return;
+        }
+        const choices = sdk.formatWorkspaceChoices(memberWorkspaces);
+        const selected = await promptSelect("Select workspace", choices);
+        updateConfig({ selectedWorkspaceId: selected });
+        const ws = memberWorkspaces.find((w) => w.external_id === selected);
+        success(`Workspace: ${ws.name} (${ref(selected)})`);
+        dim('\nTip: Run "arbi config alias" to use A as a shortcut for "arbi ask"');
+      } catch (err) {
+        error(`Login failed: ${formatCliError(err)}`);
+        process.exit(1);
+      } finally {
+        await checkForUpdates(getConfig()?.autoUpdate);
+      }
+    })()
+  );
+}
+var CENTRAL_API_URL = "https://central.arbi.work";
+async function getVerificationCode(email, apiKey) {
+  const params = new URLSearchParams({ email });
+  const res = await fetch(`${CENTRAL_API_URL}/license-management/verify-ci?${params.toString()}`, {
+    method: "GET",
+    headers: { "x-api-key": apiKey }
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(`Failed to get verification code: ${res.status} ${body}`);
+  }
+  const data = await res.json();
+  const words = data?.verification_words ?? data?.verification_code ?? null;
+  if (!words) throw new Error("No verification code in response");
+  return Array.isArray(words) ? words.join(" ") : String(words);
+}
+function registerRegisterCommand(program2) {
+  program2.command("register").description("Register a new ARBI account").option("--non-interactive", "CI/automation mode (requires SUPPORT_API_KEY env var)").option("-e, --email <email>", "Email address (or ARBI_EMAIL env var)").option("-p, --password <password>", "Password (or ARBI_PASSWORD env var)").option("-c, --verification-code <code>", "Verification code (skip prompt)").option("--first-name <name>", "First name").option("--last-name <name>", "Last name").action(
+    (opts) => runAction(async () => {
+      const config = requireConfig();
+      if (opts.nonInteractive) {
+        await nonInteractiveRegister(config, opts);
+      } else {
+        await smartRegister(config, opts);
+      }
+    })()
+  );
+}
+async function smartRegister(config, opts) {
+  let email = opts.email || process.env.ARBI_EMAIL || await promptInput("Email");
+  if ((opts.email || process.env.ARBI_EMAIL) && !email.includes("@")) {
+    email = `${email}@${config.deploymentDomain}`;
+    console.log(`Using email: ${email}`);
+  }
+  const arbi = client.createArbiClient({
+    baseUrl: config.baseUrl,
+    deploymentDomain: config.deploymentDomain,
+    credentials: "omit"
+  });
+  await arbi.crypto.initSodium();
+  let verificationCode;
+  if (opts.verificationCode) {
+    verificationCode = opts.verificationCode;
+  } else {
+    const codeMethod = await promptSelect("Verification method", [
+      { name: "I have an invitation code", value: "code" },
+      { name: "Send me a verification email", value: "email" }
+    ]);
+    if (codeMethod === "code") {
+      verificationCode = await promptInput("Invitation code");
+    } else {
+      console.log("Sending verification email...");
+      const verifyResponse = await arbi.fetch.POST("/v1/user/verify-email", {
+        body: { email }
+      });
+      if (verifyResponse.error) {
+        error(`Failed to send verification email: ${JSON.stringify(verifyResponse.error)}`);
+        process.exit(1);
+      }
+      success("Verification email sent. Check your inbox.");
+      verificationCode = await promptInput("Verification code");
+    }
+  }
+  let pw;
+  const flagOrEnvPassword = opts.password || process.env.ARBI_PASSWORD;
+  if (flagOrEnvPassword) {
+    pw = flagOrEnvPassword;
+  } else {
+    pw = await promptPassword("Password");
+    const confirmPw = await promptPassword("Confirm password");
+    if (pw !== confirmPw) {
+      error("Passwords do not match.");
+      process.exit(1);
+    }
+  }
+  const hasAllCoreFlags = !!(opts.email || process.env.ARBI_EMAIL) && !!(opts.password || process.env.ARBI_PASSWORD) && !!opts.verificationCode;
+  const firstName = opts.firstName || (hasAllCoreFlags ? "User" : await promptInput("First name", false) || "User");
+  const lastName = opts.lastName || (hasAllCoreFlags ? "" : await promptInput("Last name", false) || "");
+  try {
+    await arbi.auth.register({
+      email,
+      password: pw,
+      verificationCode,
+      firstName,
       lastName
     });
     success(`
 Registered successfully as ${email}`);
   } catch (err) {
-    error(`Registration failed: ${sdk.getErrorMessage(err)}`);
+    error(`Registration failed: ${formatCliError(err)}`);
     process.exit(1);
   }
   const allFlagsProvided = !!(opts.email || process.env.ARBI_EMAIL) && !!(opts.password || process.env.ARBI_PASSWORD) && !!opts.verificationCode;
@@ -3813,7 +4142,7 @@ async function nonInteractiveRegister(config, opts) {
     });
     success(`Registered: ${email}`);
   } catch (err) {
-    error(`Registration failed: ${sdk.getErrorMessage(err)}`);
+    error(`Registration failed: ${formatCliError(err)}`);
     process.exit(1);
   }
   await loginAfterRegister(config, email, password2);
@@ -3822,8 +4151,9 @@ async function loginAfterRegister(config, email, password2) {
   try {
     const { arbi } = await sdk.performPasswordLogin(config, email, password2, store);
     success(`Logged in as ${email}`);
-    const { data: workspaces2 } = await arbi.fetch.GET("/v1/user/workspaces");
-    const wsList = workspaces2 || [];
+    const { data: workspaces3 } = await arbi.fetch.GET("/v1/user/workspaces");
+    const wsList = workspaces3 || [];
+    updateCompletionCache(wsList);
     const memberWorkspaces = wsList.filter((ws2) => ws2.users?.some((u) => u.email === email));
     if (memberWorkspaces.length === 0) {
       console.log("Creating your first workspace...");
@@ -3843,7 +4173,7 @@ async function loginAfterRegister(config, email, password2) {
     const ws = memberWorkspaces.find((w) => w.external_id === selected);
     success(`Workspace: ${ws.name} (${ref(selected)})`);
   } catch (err) {
-    error(`Login failed: ${sdk.getErrorMessage(err)}`);
+    error(`Login failed: ${formatCliError(err)}`);
     error("You can log in later with: arbi login");
   }
 }
@@ -3880,217 +4210,12 @@ function registerStatusCommand(program2) {
     }
   });
 }
-var MAX_TASKS = 50;
-var MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
-function getTasksFile() {
-  const configDir = process.env.ARBI_CONFIG_DIR ?? path__default.default.join(os__default.default.homedir(), ".arbi");
-  return path__default.default.join(configDir, "tasks.json");
-}
-function ensureDir(filePath) {
-  const dir = path__default.default.dirname(filePath);
-  if (!fs__default.default.existsSync(dir)) {
-    fs__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
-  }
-}
-function readTasks() {
-  try {
-    const content = fs__default.default.readFileSync(getTasksFile(), "utf-8");
-    return JSON.parse(content);
-  } catch {
-    return [];
-  }
-}
-function writeTasks(tasks) {
-  const filePath = getTasksFile();
-  ensureDir(filePath);
-  fs__default.default.writeFileSync(filePath, JSON.stringify(tasks, null, 2) + "\n", { mode: 384 });
-}
-function getTasks() {
-  const now = Date.now();
-  const tasks = readTasks().filter((t) => now - new Date(t.submittedAt).getTime() < MAX_AGE_MS);
-  return tasks;
-}
-function addTask(task) {
-  const tasks = [task, ...getTasks().filter((t) => t.id !== task.id)].slice(0, MAX_TASKS);
-  writeTasks(tasks);
-}
-function updateTaskStatus(id, status2) {
-  const tasks = readTasks();
-  const task = tasks.find((t) => t.id === id);
-  if (task) {
-    task.status = status2;
-    writeTasks(tasks);
-  }
-}
-function getLatestTask() {
-  const tasks = getTasks();
-  return tasks[0] ?? null;
-}
-
-// src/notifications.ts
-var activeConnection = null;
-function timestamp() {
-  return (/* @__PURE__ */ new Date()).toLocaleTimeString("en-GB", { hour12: false });
-}
-function colorize(level, text) {
-  if (level === "success") return chalk2__default.default.green(text);
-  if (level === "error") return chalk2__default.default.red(text);
-  if (level === "warning") return chalk2__default.default.yellow(text);
-  return text;
-}
-async function startBackgroundNotifications(baseUrl, accessToken) {
-  if (activeConnection) return;
-  try {
-    activeConnection = await sdk.connectWithReconnect({
-      baseUrl,
-      accessToken,
-      onMessage: (msg) => {
-        if (client.isMessageType(msg, "response_complete")) {
-          updateTaskStatus(msg.response_id, msg.status);
-        }
-        const { text, level } = sdk.formatWsMessage(msg);
-        process.stderr.write(`
-${colorize(level, `[${timestamp()}] ${text}`)}
-`);
-      },
-      onClose: () => {
-        activeConnection = null;
-      },
-      onReconnecting: (attempt, maxRetries) => {
-        process.stderr.write(
-          `
-${chalk2__default.default.yellow(`[${timestamp()}] Reconnecting... (${attempt}/${maxRetries})`)}
-`
-        );
-      },
-      onReconnected: () => {
-        process.stderr.write(`
-${chalk2__default.default.green(`[${timestamp()}] Reconnected`)}
-`);
-      },
-      onReconnectFailed: () => {
-        process.stderr.write(`
-${chalk2__default.default.red(`[${timestamp()}] Reconnection failed`)}
-`);
-      }
-    });
-  } catch {
-  }
-}
-function stopBackgroundNotifications() {
-  activeConnection?.close();
-  activeConnection = null;
-}
-process.on("exit", stopBackgroundNotifications);
-process.on("SIGINT", () => {
-  stopBackgroundNotifications();
-  process.exit(0);
-});
-
-// src/helpers.ts
-var CONNECTION_ERROR_HINTS = {
-  ECONNREFUSED: "Connection refused. Is the backend running?",
-  ECONNRESET: "Connection reset by server. The backend may have restarted.",
-  ENOTFOUND: "DNS resolution failed. Check the server URL.",
-  ETIMEDOUT: "Connection timed out. Check network connectivity.",
-  UNABLE_TO_VERIFY_LEAF_SIGNATURE: "TLS certificate cannot be verified. The cert may be expired or self-signed.",
-  CERT_HAS_EXPIRED: "TLS certificate has expired. Renew with manage-deployment.",
-  ERR_TLS_CERT_ALTNAME_INVALID: "TLS certificate hostname mismatch. Check the server URL.",
-  DEPTH_ZERO_SELF_SIGNED_CERT: "Self-signed TLS certificate. The cert may need to be renewed.",
-  SELF_SIGNED_CERT_IN_CHAIN: "Self-signed certificate in chain. The cert may need to be renewed."
-};
-function diagnoseConnectionError(err) {
-  const code = sdk.getErrorCode(err);
-  if (code && code in CONNECTION_ERROR_HINTS) {
-    return CONNECTION_ERROR_HINTS[code];
-  }
-  const msg = err instanceof Error ? err.message : "";
-  if (msg === "fetch failed" || msg.includes("fetch failed")) {
-    return "Network error connecting to the server. Run `arbi health` to diagnose.";
-  }
-  return void 0;
-}
-function formatCliError(err) {
-  const connectionHint = diagnoseConnectionError(err);
-  if (connectionHint) return connectionHint;
-  if (err instanceof sdk.ArbiApiError && err.apiError && typeof err.apiError === "object") {
-    const base = err.message;
-    const apiErr = err.apiError;
-    const detail = apiErr.detail ?? apiErr.message ?? apiErr.error;
-    if (typeof detail === "string" && detail && !base.includes(detail)) {
-      return `${base} \u2014 ${detail}`;
-    }
-    return base;
-  }
-  return sdk.getErrorMessage(err);
-}
-function runAction(fn) {
-  return async () => {
-    try {
-      await fn();
-      process.exit(0);
-    } catch (err) {
-      error(`Error: ${formatCliError(err)}`);
-      hintUpdateOnError();
-      process.exit(1);
-    }
-  };
-}
-async function resolveAuth() {
-  try {
-    resolveConfig();
-    return await sdk.resolveAuth(store);
-  } catch (err) {
-    if (err instanceof sdk.ArbiError) {
-      error(err.message);
-      process.exit(1);
-    }
-    throw err;
-  }
-}
-async function resolveWorkspace(workspaceOpt) {
-  try {
-    resolveConfig();
-    const ctx = await sdk.resolveWorkspace(store, workspaceOpt);
-    if (getConfig()?.notifications !== false) {
-      startBackgroundNotifications(ctx.config.baseUrl, ctx.accessToken).catch(() => {
-      });
-    }
-    return ctx;
-  } catch (err) {
-    if (err instanceof sdk.ArbiError) {
-      error(err.message);
-      process.exit(1);
-    }
-    throw err;
-  }
-}
-function printTable(columns, rows) {
-  console.log(chalk2__default.default.bold(columns.map((c) => c.header.padEnd(c.width)).join("")));
-  for (const row of rows) {
-    console.log(
-      columns.map((c) => {
-        const val = c.value(row);
-        return val.slice(0, c.width - 2).padEnd(c.width);
-      }).join("")
-    );
-  }
-}
-function parseJsonArg(input2, example) {
-  try {
-    return JSON.parse(input2);
-  } catch {
-    error(`Invalid JSON. Example: ${example}`);
-    process.exit(1);
-  }
-}
-
-// src/commands/workspaces.ts
 function registerWorkspacesCommand(program2) {
   program2.command("workspaces").description("List workspaces").action(
     runAction(async () => {
       const { arbi } = await resolveAuth();
       const data = await sdk.workspaces.listWorkspaces(arbi);
+      updateCompletionCache(data);
       if (data.length === 0) {
         console.log("No workspaces found.");
         return;
@@ -4119,6 +4244,7 @@ function registerWorkspacesCommand(program2) {
     (id) => runAction(async () => {
       const { arbi } = await resolveAuth();
       const data = await sdk.workspaces.listWorkspaces(arbi);
+      updateCompletionCache(data);
       if (data.length === 0) {
         console.log("No workspaces found.");
         return;
@@ -4171,17 +4297,17 @@ function registerWorkspacesCommand(program2) {
       success(`Deleted workspace ${targetId}`);
     })()
   );
-  workspace.command("update <id> <json>").description("Update workspace properties (pass JSON)").action(
-    (id, json) => runAction(async () => {
-      const body = parseJsonArg(json, `arbi workspace update wrk-123 '{"name": "New Name"}'`);
-      const { arbi } = await resolveWorkspace(id);
+  workspace.command("update <json>").description("Update workspace properties (pass JSON)").option("-w, --workspace <id>", "Workspace ID (defaults to selected workspace)").action(
+    (json, opts) => runAction(async () => {
+      const body = parseJsonArg(json, `arbi workspace update '{"name": "New Name"}'`);
+      const { arbi } = await resolveWorkspace(opts.workspace);
       const data = await sdk.workspaces.updateWorkspace(arbi, body);
       success(`Updated: ${data.name} (${ref(data.external_id)})`);
     })()
   );
   workspace.command("users").description("List users in the active workspace").option("-w, --workspace <id>", "Workspace ID (defaults to selected workspace)").action(
     (opts) => runAction(async () => {
-      const { arbi, workspaceId } = await resolveWorkspace(opts.workspace);
+      const { arbi } = await resolveWorkspace(opts.workspace);
       const data = await sdk.workspaces.listWorkspaceUsers(arbi);
       if (data.length === 0) {
         console.log("No users found.");
@@ -4217,7 +4343,7 @@ function registerWorkspacesCommand(program2) {
   );
   workspace.command("add-user <emails...>").description("Add users to the active workspace").option("-w, --workspace <id>", "Workspace ID (defaults to selected workspace)").option("-r, --role <role>", "Role: owner, collaborator, guest", "collaborator").action(
     (emails, opts) => runAction(async () => {
-      const { arbi, workspaceId } = await resolveWorkspace(opts.workspace);
+      const { arbi } = await resolveWorkspace(opts.workspace);
       const role = opts.role ?? "collaborator";
       const data = await sdk.workspaces.addWorkspaceUsers(arbi, emails, role);
       for (const u of data) success(`Added: ${u.user.email} as ${u.role}`);
@@ -4225,14 +4351,14 @@ function registerWorkspacesCommand(program2) {
   );
   workspace.command("remove-user <user-ids...>").description("Remove users from the active workspace").option("-w, --workspace <id>", "Workspace ID (defaults to selected workspace)").action(
     (userIds, opts) => runAction(async () => {
-      const { arbi, workspaceId } = await resolveWorkspace(opts.workspace);
+      const { arbi } = await resolveWorkspace(opts.workspace);
       await sdk.workspaces.removeWorkspaceUsers(arbi, userIds);
       success(`Removed ${userIds.length} user(s).`);
     })()
   );
   workspace.command("set-role <role> <user-ids...>").description("Update user roles (owner, collaborator, guest)").option("-w, --workspace <id>", "Workspace ID (defaults to selected workspace)").action(
     (role, userIds, opts) => runAction(async () => {
-      const { arbi, workspaceId } = await resolveWorkspace(opts.workspace);
+      const { arbi } = await resolveWorkspace(opts.workspace);
       const data = await sdk.workspaces.setUserRole(
         arbi,
         userIds,
@@ -4243,14 +4369,15 @@ function registerWorkspacesCommand(program2) {
   );
   workspace.command("copy <target-workspace-id> <doc-ids...>").description("Copy documents to another workspace").option("-w, --workspace <id>", "Source workspace ID (defaults to selected workspace)").action(
     (targetId, docIds, opts) => runAction(async () => {
-      const { arbi, loginResult } = await resolveWorkspace(opts.workspace);
-      const signingPrivateKeyBase64 = arbi.crypto.bytesToBase64(loginResult.signingPrivateKey);
-      const wsList = await sdk.workspaces.listWorkspaces(arbi);
+      const { arbi: userArbi } = await resolveAuth();
+      const wsList = await sdk.workspaces.listWorkspaces(userArbi);
       const targetWs = wsList.find((w) => w.external_id === targetId);
       if (!targetWs || !targetWs.wrapped_key) {
         error(`Target workspace ${targetId} not found or has no encryption key`);
         process.exit(1);
       }
+      const { arbi, loginResult } = await resolveWorkspace(opts.workspace);
+      const signingPrivateKeyBase64 = arbi.crypto.bytesToBase64(loginResult.signingPrivateKey);
       const targetKey = await sdk.generateEncryptedWorkspaceKey(
         arbi,
         targetWs.wrapped_key,
@@ -4449,7 +4576,7 @@ function registerUploadCommand(program2) {
   program2.command("add <paths...>").alias("upload").description("Add files, directories, or zip archives to the active workspace").option("-w, --workspace <id>", "Workspace ID (defaults to selected workspace)").option("-W, --watch", "Watch document processing progress after upload").option("--no-watch", "Skip watching document processing").action(
     (paths, opts) => runAction(async () => {
       for (const p of paths) {
-        if (!fs__default.default.existsSync(p)) {
+        if (!fs2__default.default.existsSync(p)) {
           error(`Path not found: ${p}`);
           process.exit(1);
         }
@@ -4460,7 +4587,7 @@ function registerUploadCommand(program2) {
       const uploadedDocs = /* @__PURE__ */ new Map();
       const auth = { baseUrl: config.baseUrl, accessToken, workspaceKeyHeader };
       for (const filePath of paths) {
-        const stat = fs__default.default.statSync(filePath);
+        const stat = fs2__default.default.statSync(filePath);
         if (stat.isDirectory()) {
           const result = await sdk.documentsNode.uploadDirectory(auth, workspaceId, filePath);
           if (result.doc_ext_ids.length === 0) {
@@ -4596,7 +4723,7 @@ function registerDownloadCommand(program2) {
       }
       const outputPath = opts.output || path__default.default.join(process.cwd(), filename);
       const buffer = Buffer.from(await res.arrayBuffer());
-      fs__default.default.writeFileSync(outputPath, buffer);
+      fs2__default.default.writeFileSync(outputPath, buffer);
       success(
         `Downloaded: ${path__default.default.basename(outputPath)} (${(buffer.length / (1024 * 1024)).toFixed(1)} MB)`
       );
@@ -4682,13 +4809,22 @@ function registerAskCommand(program2) {
       }
       const verbose = opts.quiet === true ? false : getConfig()?.verbose !== false;
       let elapsedTime = null;
+      let firstToken = true;
       const result = await sdk.streamSSE(res, {
-        onToken: (content) => process.stdout.write(content),
+        onToken: (content) => {
+          if (firstToken) {
+            process.stderr.write(chalk2__default.default.dim("[ARBI] "));
+            firstToken = false;
+          }
+          process.stdout.write(content);
+        },
         onAgentStep: (data) => {
           if (verbose) {
             const label2 = sdk.formatAgentStepLabel(data);
-            if (label2) console.error(chalk2__default.default.dim(`
-[agent] ${label2}`));
+            if (label2 && data.step !== "answering") {
+              console.error(chalk2__default.default.dim(`
+[ARBI] ${label2}`));
+            }
           }
         },
         onElapsedTime: (t) => {
@@ -4698,29 +4834,23 @@ function registerAskCommand(program2) {
 Error: ${message}`))
       });
       process.stdout.write("\n");
-      const parts = [];
-      if (result.agentSteps.length > 0) {
-        let stepLabel = `${result.agentSteps.length} step${result.agentSteps.length === 1 ? "" : "s"}`;
-        if (result.toolCallCount > 0) {
-          stepLabel += ` (${result.toolCallCount} tool call${result.toolCallCount === 1 ? "" : "s"})`;
-        }
-        parts.push(stepLabel);
-      }
-      if (result.usage) {
-        parts.push(`${result.usage.total_tokens.toLocaleString()} tokens`);
-      }
-      if (result.context && result.context.context_window > 0) {
-        const used = result.context.all_llm_calls?.last_input_tokens ?? result.context.total_input;
-        parts.push(
-          `${used.toLocaleString()}/${result.context.context_window.toLocaleString()} context`
+      if (result.metadata) {
+        saveLastMetadata(result.metadata);
+      }
+      const refs = sdk.countCitations(result.metadata);
+      const summary = opts.quiet !== true ? sdk.formatStreamSummary(result, elapsedTime) : "";
+      if (summary) {
+        const refSuffix = refs > 0 ? ` \xB7 ${refs} ref${refs === 1 ? "" : "s"}` : "";
+        const text = `[${summary}${refSuffix}]`;
+        const cols = process.stderr.columns || 80;
+        const pad = Math.max(0, cols - text.length);
+        console.error(chalk2__default.default.dim(" ".repeat(pad) + text));
+      }
+      if (refs > 0 && opts.quiet !== true) {
+        console.error(
+          chalk2__default.default.dim(`[${refs} citation${refs === 1 ? "" : "s"} \u2014 arbi cite to browse]`)
         );
       }
-      if (elapsedTime != null) {
-        parts.push(`${elapsedTime.toFixed(1)}s`);
-      }
-      if (parts.length > 0) {
-        console.error(chalk2__default.default.dim(`[${parts.join(" \xB7 ")}]`));
-      }
       if (result.assistantMessageExtId) {
         const updates = {
           lastMessageExtId: result.assistantMessageExtId,
@@ -4735,6 +4865,87 @@ Error: ${message}`))
     })()
   );
 }
+var MAX_PASSAGE_LINES = 40;
+function registerCiteCommand(program2) {
+  program2.command("cite [number]").description("Browse citations from the last response").option("-a, --all", "Show all citations with full passages").action(
+    (number, opts) => runAction(async () => {
+      const raw = loadLastMetadata();
+      if (!raw) {
+        console.error(chalk2__default.default.dim("No citation data available. Run `arbi ask` first."));
+        return;
+      }
+      const metadata = raw;
+      const count = sdk.countCitations(metadata);
+      if (count === 0) {
+        console.log(chalk2__default.default.dim("The last response contained no citations."));
+        return;
+      }
+      const resolved = sdk.resolveCitations(metadata);
+      if (opts.all) {
+        for (const r of resolved) {
+          printCitationDetail(r.citationNum, resolved);
+          console.log();
+        }
+        return;
+      }
+      if (number) {
+        printCitationDetail(number, resolved);
+        return;
+      }
+      const summaries = sdk.summarizeCitations(resolved);
+      console.log(chalk2__default.default.bold(`Citations (${summaries.length}):
+`));
+      for (const s of summaries) {
+        const page = s.pageNumber != null ? `, p${s.pageNumber}` : "";
+        const chunks = s.chunkCount > 1 ? ` (${s.chunkCount} passages)` : "";
+        console.log(
+          `  ${chalk2__default.default.cyan(`[${s.citationNum}]`)} ${chalk2__default.default.bold(s.docTitle)}${page}${chunks}`
+        );
+        const truncated = s.statement.length > 120 ? s.statement.slice(0, 120).replace(/\n/g, " ").trim() + "..." : s.statement.replace(/\n/g, " ").trim();
+        console.log(`      ${chalk2__default.default.dim(truncated)}`);
+      }
+      console.log(chalk2__default.default.dim(`
+Use \`arbi cite <N>\` to view full passage.`));
+    })()
+  );
+}
+function printCitationDetail(num, resolved) {
+  const citation = resolved.find((r) => r.citationNum === num);
+  if (!citation) {
+    console.error(chalk2__default.default.red(`Citation [${num}] not found.`));
+    return;
+  }
+  const firstChunk = citation.chunks[0];
+  const docTitle = firstChunk?.metadata?.doc_title ?? "Unknown document";
+  const page = firstChunk?.metadata?.page_number;
+  console.log(chalk2__default.default.bold.cyan(`[Citation ${citation.citationNum}]`) + " " + chalk2__default.default.bold(docTitle));
+  if (page != null) {
+    console.log(chalk2__default.default.dim(`Page ${page}`));
+  }
+  console.log();
+  console.log(chalk2__default.default.bold("Statement:"));
+  console.log(`  ${citation.citationData.statement}`);
+  console.log();
+  for (let i = 0; i < citation.chunks.length; i++) {
+    const chunk = citation.chunks[i];
+    if (citation.chunks.length > 1) {
+      console.log(chalk2__default.default.bold(`Passage ${i + 1}/${citation.chunks.length}:`));
+    } else {
+      console.log(chalk2__default.default.bold("Passage:"));
+    }
+    const lines = chunk.content.split("\n");
+    if (lines.length > MAX_PASSAGE_LINES) {
+      console.log(lines.slice(0, MAX_PASSAGE_LINES).join("\n"));
+      console.log(chalk2__default.default.dim(`  ... (${lines.length - MAX_PASSAGE_LINES} more lines)`));
+    } else {
+      console.log(chunk.content);
+    }
+    if (i < citation.chunks.length - 1) console.log();
+  }
+  if (citation.chunks.length === 0) {
+    console.log(chalk2__default.default.dim("  (no passage data available)"));
+  }
+}
 function chunkScore(chunk) {
   return chunk.metadata.rerank_score ?? chunk.metadata.score ?? 0;
 }
@@ -5819,8 +6030,8 @@ function registerQuickstartCommand(program2) {
     try {
       const { arbi } = await sdk.performPasswordLogin(config, email, password2, store);
       success(`Logged in as ${email}`);
-      const { data: workspaces2 } = await arbi.fetch.GET("/v1/user/workspaces");
-      const wsList = workspaces2 || [];
+      const { data: workspaces3 } = await arbi.fetch.GET("/v1/user/workspaces");
+      const wsList = workspaces3 || [];
       const memberWorkspaces = wsList.filter((ws) => ws.users?.some((u) => u.email === email));
       let workspaceId;
       let workspaceName;
@@ -6052,6 +6263,85 @@ function registerTaskCommand(program2) {
     })()
   );
 }
+var MARKER_START = "# arbi-cli completion start";
+var MARKER_END = "# arbi-cli completion end";
+var BASH_COMPLETION = `
+${MARKER_START}
+_arbi_completions() {
+  local cur="\${COMP_WORDS[COMP_CWORD]}"
+  local candidates
+  candidates=$(arbi --get-completions "\${COMP_LINE}" 2>/dev/null)
+  COMPREPLY=($(compgen -W "$candidates" -- "$cur"))
+}
+complete -o default -F _arbi_completions arbi
+${MARKER_END}`;
+var ZSH_COMPLETION = `
+${MARKER_START}
+_arbi_completions() {
+  local candidates
+  candidates=(\${(f)"$(arbi --get-completions "\${words[*]}" 2>/dev/null)"})
+  compadd -a candidates
+}
+compdef _arbi_completions arbi
+${MARKER_END}`;
+function getShellRcPath2() {
+  const shell = process.env.SHELL || "";
+  if (shell.includes("zsh")) return path.join(os.homedir(), ".zshrc");
+  return path.join(os.homedir(), ".bashrc");
+}
+function isZsh() {
+  return (process.env.SHELL || "").includes("zsh");
+}
+function isCompletionInstalled(rcPath) {
+  if (!fs2.existsSync(rcPath)) return false;
+  const content = fs2.readFileSync(rcPath, "utf-8");
+  return content.includes(MARKER_START);
+}
+function removeCompletionBlock(content) {
+  const startIdx = content.indexOf(MARKER_START);
+  const endIdx = content.indexOf(MARKER_END);
+  if (startIdx === -1 || endIdx === -1) return content;
+  const before = content.substring(0, startIdx).replace(/\n+$/, "");
+  const after = content.substring(endIdx + MARKER_END.length);
+  return before + after;
+}
+function registerCompletionCommand(program2) {
+  const completion = program2.command("completion").description("Manage shell tab completion");
+  completion.command("install").description("Install shell tab completion (bash/zsh)").action(() => {
+    const rcPath = getShellRcPath2();
+    if (isCompletionInstalled(rcPath)) {
+      success(`Completion already installed in ${rcPath}`);
+      dim("If it's not working, run: source " + rcPath);
+      return;
+    }
+    const snippet = isZsh() ? ZSH_COMPLETION : BASH_COMPLETION;
+    fs2.appendFileSync(rcPath, snippet + "\n");
+    success(`Installed tab completion in ${rcPath}`);
+    dim("");
+    dim(`Run: source ${rcPath}`);
+    dim("Then try: arbi <TAB>");
+  });
+  completion.command("uninstall").description("Remove shell tab completion").action(() => {
+    const rcPath = getShellRcPath2();
+    if (!isCompletionInstalled(rcPath)) {
+      dim("Completion is not installed.");
+      return;
+    }
+    const content = fs2.readFileSync(rcPath, "utf-8");
+    const cleaned = removeCompletionBlock(content);
+    fs2.writeFileSync(rcPath, cleaned);
+    success(`Removed tab completion from ${rcPath}`);
+    dim(`Run: source ${rcPath}`);
+  });
+  completion.command("refresh").description("Refresh cached workspace IDs for tab completion").action(
+    runAction(async () => {
+      const { arbi } = await resolveAuth();
+      const data = await sdk.workspaces.listWorkspaces(arbi);
+      updateCompletionCache(data);
+      success(`Cached ${data.length} workspace(s) for tab completion.`);
+    })
+  );
+}
 
 // src/index.ts
 console.debug = () => {
@@ -6062,7 +6352,7 @@ console.info = (...args) => {
   _origInfo(...args);
 };
 var program = new commander.Command();
-program.name("arbi").description("ARBI CLI \u2014 interact with ARBI from the terminal").version("0.3.16");
+program.name("arbi").description("ARBI CLI \u2014 interact with ARBI from the terminal").version("0.3.18");
 registerConfigCommand(program);
 registerLoginCommand(program);
 registerRegisterCommand(program);
@@ -6073,6 +6363,7 @@ registerDocsCommand(program);
 registerUploadCommand(program);
 registerDownloadCommand(program);
 registerAskCommand(program);
+registerCiteCommand(program);
 registerFindCommand(program);
 registerWatchCommand(program);
 registerContactsCommand(program);
@@ -6088,6 +6379,14 @@ registerUpdateCommand(program);
 registerQuickstartCommand(program);
 registerAgentCreateCommand(program);
 registerTaskCommand(program);
+registerCompletionCommand(program);
+var completionIdx = process.argv.indexOf("--get-completions");
+if (completionIdx !== -1) {
+  const line = process.argv[completionIdx + 1] ?? "";
+  const candidates = getCompletions(program, line);
+  if (candidates.length > 0) process.stdout.write(candidates.join("\n") + "\n");
+  process.exit(0);
+}
 program.parse();
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map