@arbidocs/cli 0.4.31 → 0.4.33

package/CHANGELOG.md

@@ -1,5 +1,125 @@
 # Changelog
 
+## v0.4.33
+
+[compare changes](https://github.com/arbicity/ARBI-frontend/compare/v0.4.31...HEAD)
+
+### 🚀 Enhancements
+
+- **automations:** Separate editor and history with concise run results ([ececfaf59](https://github.com/arbicity/ARBI-frontend/commit/ececfaf59))
+- **ui:** Unify automation tabs and sidebar with compact rows and inbox previews ([75b020457](https://github.com/arbicity/ARBI-frontend/commit/75b020457))
+- **home:** Group workspaces under project headings in the table view ([#1391](https://github.com/arbicity/ARBI-frontend/pull/1391))
+- **theme:** Premium Midnight & Cyan tokens - serif display, paper canvas, navy sidebar, ink shadows, tighter radius ([7743678ce](https://github.com/arbicity/ARBI-frontend/commit/7743678ce))
+- **theme:** Raised white cards, eyebrow section labels, cyan active nav marker ([9d5a25f73](https://github.com/arbicity/ARBI-frontend/commit/9d5a25f73))
+- **theme:** Finish premium look; session works without Web Crypto (memory-only) with visible warning ([182b9eb5d](https://github.com/arbicity/ARBI-frontend/commit/182b9eb5d))
+- **theme:** Redesign for lawyers - Office/Fluent familiarity, brand arch on the login hero ([c584e0e4b](https://github.com/arbicity/ARBI-frontend/commit/c584e0e4b))
+- **files:** Wider Title, inline status glyph, visible column resize ticks; square sidebar boxes and toasts ([368b03717](https://github.com/arbicity/ARBI-frontend/commit/368b03717))
+- Mail folders use the Files folder control in the tab header; migrate saved layouts to hide the Status column ([ff205f57e](https://github.com/arbicity/ARBI-frontend/commit/ff205f57e))
+- Automations and Mail behind developer-only Experimental switches, off by default ([a817df1f7](https://github.com/arbicity/ARBI-frontend/commit/a817df1f7))
+- **e2e:** Persona think-aloud evals — simulated users in real browsers, recorded, with fixer hand-off ([1786856ff](https://github.com/arbicity/ARBI-frontend/commit/1786856ff))
+- **personas:** Any agent harness (claude ([ external ](https://github.com/arbicity/ARBI-frontend/commit/ external ))
+- **personas:** Six-persona cast + round 1 results in handoff ([1ce966912](https://github.com/arbicity/ARBI-frontend/commit/1ce966912))
+- **personas:** Run on the Claude subscription, not API keys; label $ as list-price equivalents ([b914b6cb4](https://github.com/arbicity/ARBI-frontend/commit/b914b6cb4))
+- **mail:** Mail header matches Files and Facts - icon + count, shared filter box with dropdown, no refresh ([d58156a3d](https://github.com/arbicity/ARBI-frontend/commit/d58156a3d))
+- **mail:** Header button reads '+ Email' ([d048c885e](https://github.com/arbicity/ARBI-frontend/commit/d048c885e))
+- **mail:** First-run setup in the main screen, ready greeting, refresh on new mail ([3d9ea7bb5](https://github.com/arbicity/ARBI-frontend/commit/3d9ea7bb5))
+- **personas:** --baseline <run> compares a re-run against an earlier round ([f4e49ef22](https://github.com/arbicity/ARBI-frontend/commit/f4e49ef22))
+- **sdk:** Typed mail module and arbi mail CLI (agents can draft) ([ed5366654](https://github.com/arbicity/ARBI-frontend/commit/ed5366654))
+
+### 🩹 Fixes
+
+- **react:** Show fractional credits and route all credit displays through formatCredits ([bcf12acbe](https://github.com/arbicity/ARBI-frontend/commit/bcf12acbe))
+- **react:** Render italic and list markers when a citation link wraps them ([5fd043cf8](https://github.com/arbicity/ARBI-frontend/commit/5fd043cf8))
+- **react:** Keep a citation link from ending inside an italic source note ([98b77be7f](https://github.com/arbicity/ARBI-frontend/commit/98b77be7f))
+- **automations:** Use standard grids for rules and run history ([94f9da431](https://github.com/arbicity/ARBI-frontend/commit/94f9da431))
+- **ui:** Compact sidebar menus and link run result badges to history ([381d63a42](https://github.com/arbicity/ARBI-frontend/commit/381d63a42))
+- **automations:** Improve trigger badge legibility ([f2e247364](https://github.com/arbicity/ARBI-frontend/commit/f2e247364))
+- **automations:** Simplify trigger labels to text and icon ([64929ee96](https://github.com/arbicity/ARBI-frontend/commit/64929ee96))
+- **automations:** Preserve document rows and validate shared UI and clients ([b6b98bd18](https://github.com/arbicity/ARBI-frontend/commit/b6b98bd18))
+- **notifications:** Open task alerts in their originating workspace ([7c8c05c9b](https://github.com/arbicity/ARBI-frontend/commit/7c8c05c9b))
+- **theme:** Website skyline on the login hero, drop sparkle art and nav accent bar ([0ec8eeb07](https://github.com/arbicity/ARBI-frontend/commit/0ec8eeb07))
+- **theme:** Consistency pass - one rule for fields, cards and chips; drop row accent bar ([3f34159bb](https://github.com/arbicity/ARBI-frontend/commit/3f34159bb))
+- **theme:** Keep the open-document row accent bar in the files grid ([0da8b82f5](https://github.com/arbicity/ARBI-frontend/commit/0da8b82f5))
+- **theme:** Square sidebar nav rows with a straight leading bar on the selected row ([7ca5777c5](https://github.com/arbicity/ARBI-frontend/commit/7ca5777c5))
+- **theme:** Quiet entity labels - plain icon + text at rest, fill only on hover ([eeabe8e57](https://github.com/arbicity/ARBI-frontend/commit/eeabe8e57))
+- Fresh browsers crash opening a workspace (grid migration clobbered gridStates) ([7e114ab08](https://github.com/arbicity/ARBI-frontend/commit/7e114ab08))
+- **personas:** Count fixer commits against the resolved base, not the fix branch's HEAD ([283a8bfbe](https://github.com/arbicity/ARBI-frontend/commit/283a8bfbe))
+- Fresh browsers crash opening a workspace (grid migration clobbered gridStates) ([4acdaaa6d](https://github.com/arbicity/ARBI-frontend/commit/4acdaaa6d))
+- **ci:** Trust Let's Encrypt staging CA for the SDK/CLI integration tests ([103a4b20f](https://github.com/arbicity/ARBI-frontend/commit/103a4b20f))
+- **react:** Text, Word, sheet and HTML files no longer get the PDF icon (persona smoke I01) ([c5d76f775](https://github.com/arbicity/ARBI-frontend/commit/c5d76f775))
+- **mail:** Drop the header's own bottom border (the tab header already draws one) ([e330b2aa8](https://github.com/arbicity/ARBI-frontend/commit/e330b2aa8))
+- **files:** Add menu no longer closes right after a hover-opened click (persona smoke I02) ([55066376b](https://github.com/arbicity/ARBI-frontend/commit/55066376b))
+- **react:** Citation popover re-docks when the chat column narrows (persona smoke I05) ([24a262151](https://github.com/arbicity/ARBI-frontend/commit/24a262151))
+- **viewer:** Show the zoom button on desktop so documents can be enlarged (persona ken-low-vision I01) ([ac4a0588c](https://github.com/arbicity/ARBI-frontend/commit/ac4a0588c))
+- **messages:** Confirm copy of an answer with a toast, and report failures (persona maya-paralegal I05) ([22f4c5d8d](https://github.com/arbicity/ARBI-frontend/commit/22f4c5d8d))
+- **search:** Label Smart Search passages found by meaning, not words (persona lena-legal-ops I02) ([7e5a79d53](https://github.com/arbicity/ARBI-frontend/commit/7e5a79d53))
+- **search:** Explain quotes and relevance threshold in Smart Search results (persona lena-legal-ops I03) ([ed64d06fe](https://github.com/arbicity/ARBI-frontend/commit/ed64d06fe))
+- **upload:** Default visibility to private and say who can see files (persona tom-first-timer I01) ([abfdec1ff](https://github.com/arbicity/ARBI-frontend/commit/abfdec1ff))
+- **citations:** Readable hover passage preview (persona ken-low-vision I02) ([bf64b7a0a](https://github.com/arbicity/ARBI-frontend/commit/bf64b7a0a))
+- **chat:** Offer backend follow-up as a chip instead of pre-filled ghost text (persona smoke I06) ([8859cbb4a](https://github.com/arbicity/ARBI-frontend/commit/8859cbb4a))
+- **facts:** Chronology tables save as dated facts (persona maya-paralegal I07) ([a76dad930](https://github.com/arbicity/ARBI-frontend/commit/a76dad930))
+- **ui:** Citation card closes on any press outside, even one that opens another menu (persona priya-mobile I05) ([4f99f2aff](https://github.com/arbicity/ARBI-frontend/commit/4f99f2aff))
+- **upload:** Keep uploads shared with the workspace by default ([d62538b0c](https://github.com/arbicity/ARBI-frontend/commit/d62538b0c))
+- **ci:** Trust the staging CA inside the deployment container too ([ede715fc2](https://github.com/arbicity/ARBI-frontend/commit/ede715fc2))
+- **conversation:** Show a new chat's question while its answer generates (persona raj-partner I01) ([f05e2d0fd](https://github.com/arbicity/ARBI-frontend/commit/f05e2d0fd))
+- **chat:** Show the passages an uncited answer read as its sources (persona tom-first-timer I03) ([3f1833640](https://github.com/arbicity/ARBI-frontend/commit/3f1833640))
+- **a11y:** Thicker keyboard focus ring on controls (persona ken-low-vision I04) ([f40403d78](https://github.com/arbicity/ARBI-frontend/commit/f40403d78))
+- **viewer:** Name a text file's preview tab Text, not PDF (persona lena-legal-ops I01) ([0195e80f6](https://github.com/arbicity/ARBI-frontend/commit/0195e80f6))
+- **chronology:** State the sort key and how to date ranges (persona maya-paralegal I02) ([9a63cb6cb](https://github.com/arbicity/ARBI-frontend/commit/9a63cb6cb))
+- **facts:** Empty Facts page offers a route to pull dates from documents (persona maya-paralegal I01) ([22124287e](https://github.com/arbicity/ARBI-frontend/commit/22124287e))
+- **facts:** Saved answer fact no longer titled with the chat lead-in (persona maya-paralegal I06) ([3a6a7d701](https://github.com/arbicity/ARBI-frontend/commit/3a6a7d701))
+- **sharing:** Close member suggestion list after adding an email (persona raj-partner I04) ([ed22db368](https://github.com/arbicity/ARBI-frontend/commit/ed22db368))
+- **viewer:** Keep the HTML tab labelled on phones (persona priya-mobile I03) ([e153cac99](https://github.com/arbicity/ARBI-frontend/commit/e153cac99))
+- **documents:** Larger default file tile so titles and thumbnails are readable (persona raj-partner I06) ([c83f28416](https://github.com/arbicity/ARBI-frontend/commit/c83f28416))
+- **react:** Citation menus no longer pop up while scrolling (persona priya-mobile I04) ([c21a7bccc](https://github.com/arbicity/ARBI-frontend/commit/c21a7bccc))
+- **personas:** Mask the demo cursor from agent screenshots; tell personas their OS ([48d6a1938](https://github.com/arbicity/ARBI-frontend/commit/48d6a1938))
+- **workflows:** Name the agent picker 'Who this runs for' (persona tom-first-timer I04) ([666a9d03d](https://github.com/arbicity/ARBI-frontend/commit/666a9d03d))
+- **markdown:** Table cells wrap between words, not mid-word (persona maya-paralegal I03) ([79196bbe9](https://github.com/arbicity/ARBI-frontend/commit/79196bbe9))
+- **personas:** Retry seed documents that fail backend processing instead of testing on them ([ea793d446](https://github.com/arbicity/ARBI-frontend/commit/ea793d446))
+- **chat:** Explain held messages in a task awaiting review (persona priya-mobile I03) ([fc723248c](https://github.com/arbicity/ARBI-frontend/commit/fc723248c))
+- **messages:** Show backticked doc ids as document pills (persona lena-legal-ops I10) ([277501761](https://github.com/arbicity/ARBI-frontend/commit/277501761))
+- **shell:** Bold navy focus ring on the Ask or search field (persona ken-low-vision I04) ([4d78a2480](https://github.com/arbicity/ARBI-frontend/commit/4d78a2480))
+- **workspace:** Explain the common/members-only switch in plain words (persona tom-first-timer I03) ([9e97ceb8f](https://github.com/arbicity/ARBI-frontend/commit/9e97ceb8f))
+- **annotations:** Say the AI has not run after creating an annotation (persona lena-legal-ops I02) ([7ab8cbeef](https://github.com/arbicity/ARBI-frontend/commit/7ab8cbeef))
+- **documents:** Keep a newly created folder listed and selected in Move dialog (persona lena-legal-ops I08) ([3b02f0739](https://github.com/arbicity/ARBI-frontend/commit/3b02f0739))
+- **facts:** Ask the assistant to report the count it actually saved (persona maya-paralegal I03) ([4bbd34e99](https://github.com/arbicity/ARBI-frontend/commit/4bbd34e99))
+- **facts:** Keep the Find-dates prompt in plain words; handoff: round-2 fixes + drag-selection call ([10caf467c](https://github.com/arbicity/ARBI-frontend/commit/10caf467c))
+- **thread:** Keep 'Started Task' / 'Answered' activity in the header, not the chat ([15ca6823b](https://github.com/arbicity/ARBI-frontend/commit/15ca6823b))
+- **auth:** Hero text no longer jumps when switching Login/Register ([1cf652104](https://github.com/arbicity/ARBI-frontend/commit/1cf652104))
+- **connectors:** Show Google (Gmail + Drive) connectors by default ([#1398](https://github.com/arbicity/ARBI-frontend/pull/1398))
+
+### 📖 Documentation
+
+- **changeset:** Include automation clients and final shared UI ([0dab73760](https://github.com/arbicity/ARBI-frontend/commit/0dab73760))
+- **personas:** Handoff — fix pass, round 2 re-test, UX calls for a human ([fef6b99c1](https://github.com/arbicity/ARBI-frontend/commit/fef6b99c1))
+
+### 🏡 Chore
+
+- Drop incidental version and lockfile changes ([a1e735dca](https://github.com/arbicity/ARBI-frontend/commit/a1e735dca))
+- **examples:** Let the react-chat example name the deployment domain behind a proxy ([c31409b35](https://github.com/arbicity/ARBI-frontend/commit/c31409b35))
+
+### ✅ Tests
+
+- **e2e:** Login specs follow the verified-link signup (code field hidden when the link carries a code) ([#1387](https://github.com/arbicity/ARBI-frontend/pull/1387))
+- **e2e:** The saved workflow is found on the Active tab, not below 21 skills ([#1388](https://github.com/arbicity/ARBI-frontend/pull/1388))
+- **e2e:** Goal task demo follows the one Threads list ([#1389](https://github.com/arbicity/ARBI-frontend/pull/1389))
+
+### 🎨 Styles
+
+- **upload:** Add button is white on cyan when the upload is shared ([72e1e810d](https://github.com/arbicity/ARBI-frontend/commit/72e1e810d))
+- **upload:** Shared Add button uses the brand cyan (--secondary), matching the Shared switch ([f55aa8388](https://github.com/arbicity/ARBI-frontend/commit/f55aa8388))
+- **upload:** Keep the Add button primary whether the upload is shared or private ([7ee51e2b2](https://github.com/arbicity/ARBI-frontend/commit/7ee51e2b2))
+
+### 🤖 CI
+
+- Give the SDK and CLI integration job 35 minutes ([#1384](https://github.com/arbicity/ARBI-frontend/pull/1384))
+- Route remaining general jobs to disposable CPU runners ([d99a7d5df](https://github.com/arbicity/ARBI-frontend/commit/d99a7d5df))
+- Configure software signing and public endpoints for CPU guests ([79fcac6b0](https://github.com/arbicity/ARBI-frontend/commit/79fcac6b0))
+- Use isolated Redis for full-stack jobs ([484a2d6bc](https://github.com/arbicity/ARBI-frontend/commit/484a2d6bc))
+- Isolate deployment identities across parallel VM jobs ([b4834b72a](https://github.com/arbicity/ARBI-frontend/commit/b4834b72a))
+- Use the deployment CLI domain option ([535c3a208](https://github.com/arbicity/ARBI-frontend/commit/535c3a208))
+- Preserve the remote parser queue endpoint ([d9275d599](https://github.com/arbicity/ARBI-frontend/commit/d9275d599))
+
 ## v0.4.31
 
 [compare changes](https://github.com/arbicity/ARBI-frontend/compare/v0.4.28...HEAD)

package/SKILL.md

@@ -147,3 +147,23 @@ Footnote-style rendering at the end of the answer is currently not supported —
 - **Listen side-effects**: `arbi listen --agent claude` writes `~/.claude/commands/arbi/SKILL.md` and sets a `defaultAgent` in the CLI config. Run it only on a machine you control.
 - **Persistent agents**: `arbi agent create --name <n> -w <ws-id>` creates a child identity the parent can delegate to (printed email+password). Share workspace IDs via `-w` rather than the interactive picker when running non-interactively.
 - **Agent-create errors**: `agent-create` rejects non-`agent-*` emails with a clear message. If you see "No verification record found" the account probably already exists — use `arbi login` instead.
+
+## Workspace automations
+
+`arbi automation` is an alias for `arbi workflow`. Triggers are run now (no trigger flags), a schedule (`--run-at` or `--rrule`), or a notification (`--event-kind`, optional `--event-filter` JSON). `run <wfl-id>` starts any saved action now. Scheduled document actions require an assistant with standing workspace access (`--agent <agt-id> --auth-mode scheduled_permanent`). Do not silently grant that access.
+
+```bash
+# Daily annotation review of documents currently carrying a label.
+arbi automation create --name 'Daily relevance review' --rrule 'FREQ=DAILY;BYHOUR=9;BYMINUTE=0;BYSECOND=0' --timezone Europe/London --action annotate_documents --labels lbl-needs-review --tags tag-relevance --agent agt-reviewer --auth-mode scheduled_permanent
+# Daily email digest of documents uploaded since the last successful run.
+arbi automation create --name 'Latest documents' --rrule 'FREQ=DAILY;BYHOUR=17;BYMINUTE=0;BYSECOND=0' --timezone Europe/London --action email_documents --latest --agent agt-reviewer --auth-mode scheduled_permanent
+arbi automation run wfl-example --json
+arbi automation runs wfl-example --json
+arbi automation update wfl-example --file changes.json
+```
+
+Document actions return `execution_id` and do not require a conversation. Execution history includes status, selected documents, a run label, errors and result metadata. Annotation answers/citations remain document annotation fields; emails report delivery metadata. Chat/prompt actions retain their linked conversation history. `--overwrite` regenerates existing annotation answers; the default preserves them. Label selection is resolved at execution time rather than frozen when creating the rule. `arbi task` still refers to local background ask requests, not workspace automations.
+
+In the terminal UI: `/automations` lists rules; `/automation view|run|runs|pause|resume|delete <wfl-id>` manages them; `/automation create <JSON>` and `/automation update <wfl-id> <JSON>` accept the same request bodies as the SDK.
+
+For latest-document digests, the first run covers the preceding 24 hours; later runs use the previous successful run cutoff. Failed delivery does not advance it. Emails contain document names and authenticated platform links, without attachments.

package/dist/index.js

@@ -3694,7 +3694,7 @@ function getLatestVersion(skipCache = false) {
   }
 }
 function getCurrentVersion() {
-  return "0.4.31";
+  return "0.4.33";
 }
 function readChangelog(fromVersion, toVersion) {
   try {
@@ -3747,17 +3747,17 @@ function showChangelog(fromVersion, toVersion) {
 async function checkForUpdates(autoUpdate) {
   try {
     const latest = getLatestVersion();
-    if (!latest || latest === "0.4.31") return;
+    if (!latest || latest === "0.4.33") return;
     if (autoUpdate) {
       warn(`
-Your arbi version is out of date (${"0.4.31"} \u2192 ${latest}). Updating...`);
+Your arbi version is out of date (${"0.4.33"} \u2192 ${latest}). Updating...`);
       child_process.execSync("npm install -g @arbidocs/cli@latest", { stdio: "inherit" });
-      showChangelog("0.4.31", latest);
+      showChangelog("0.4.33", latest);
       console.log(`Updated to ${latest}.`);
     } else {
       warn(
         `
-Your arbi version is out of date (${"0.4.31"} \u2192 ${latest}).
+Your arbi version is out of date (${"0.4.33"} \u2192 ${latest}).
 Run "arbi update" to upgrade, or "arbi update auto" to always stay up to date.`
       );
     }
@@ -3789,10 +3789,10 @@ function markNagShown(latest) {
 function hintUpdateOnError() {
   try {
     const cached = readCache();
-    if (!cached || cached.latest === "0.4.31") return;
+    if (!cached || cached.latest === "0.4.33") return;
     if (!shouldShowNag(cached.latest)) return;
     warn(
-      `Your arbi version is out of date (${"0.4.31"} \u2192 ${cached.latest}). Run "arbi update".`
+      `Your arbi version is out of date (${"0.4.33"} \u2192 ${cached.latest}). Run "arbi update".`
     );
     markNagShown(cached.latest);
   } catch {
@@ -9583,7 +9583,7 @@ function resolveTaskId(taskIdArg) {
 }
 function statusColor2(s) {
   if (s === "completed") return chalk2__default.default.green(s);
-  if (s === "failed") return chalk2__default.default.red(s);
+  if (s === "failed" || s === "cancelled") return chalk2__default.default.red(s);
   if (s === "queued" || s === "in_progress") return chalk2__default.default.yellow(s);
   return s;
 }
@@ -9633,7 +9633,7 @@ function registerTaskCommand(program2) {
       const id = resolveTaskId(taskId);
       const { accessToken, config } = await resolveWorkspace(opts?.workspace);
       const result = await sdk.responses.getResponse({ baseUrl: config.baseUrl, accessToken }, id);
-      if (result.status === "completed" || result.status === "failed") {
+      if (result.status === "completed" || result.status === "failed" || result.status === "cancelled") {
         updateTaskStatus(id, result.status);
       }
       if (opts?.json) {
@@ -9653,7 +9653,7 @@ function registerTaskCommand(program2) {
       const id = resolveTaskId(taskId);
       const { accessToken, config } = await resolveWorkspace(opts?.workspace);
       const result = await sdk.responses.getResponse({ baseUrl: config.baseUrl, accessToken }, id);
-      if (result.status === "completed" || result.status === "failed") {
+      if (result.status === "completed" || result.status === "failed" || result.status === "cancelled") {
         updateTaskStatus(id, result.status);
       }
       if (opts?.json) {
@@ -9675,8 +9675,12 @@ function registerTaskCommand(program2) {
   );
 }
 function registerWorkflowCommand(program2) {
-  const workflow = program2.command("workflow").description("Workflows (/v1/workflow): create, list, resume, pause, run, delete");
-  workflow.command("create").description("Create a workflow with exactly one trigger").requiredOption("--name <name>", "Workflow name (required)").option("--rrule <RRULE>", "Trigger: RFC-5545 recurrence rule").option("--run-at <ISO>", "Trigger: run once at this time (ISO-8601)").option("--event-kind <kind>", "Trigger: a notification type to react to").option("--after <con-id>", "Trigger: when this task (conversation) is done").option("--timezone <tz>", "IANA timezone for --rrule", "UTC").option("--prompt <text>", "Instruction the agent runs").option("--skill <ref>", "Skill reference to run").option("--agent <agt-id>", "Agent to run it as (external id)").option("--workspace <wrk-id>", "Workspace to scope the workflow to (default: the current one)").option("--shared", "Share it with the workspace").option("--json", "Output as JSON").action(
+  const workflow = program2.command("workflow").alias("automation").description("Workflows (/v1/workflow): create, list, resume, pause, run, delete");
+  workflow.command("create").description("Create a workflow with exactly one trigger").requiredOption("--name <name>", "Workflow name (required)").option("--rrule <RRULE>", "Trigger: RFC-5545 recurrence rule").option("--run-at <ISO>", "Trigger: run once at this time (ISO-8601)").option("--event-kind <kind>", "Trigger: a notification type to react to").option("--after <con-id>", "Trigger: when this task (conversation) is done").option("--timezone <tz>", "IANA timezone for --rrule", "UTC").option("--action <type>", "Action: annotate_documents or email_documents").option("--documents <ids>", "Comma-separated document IDs").option("--labels <ids>", "Select documents matching these label IDs at execution time").option("--latest", "Select documents uploaded since the previous successful run").option("--tags <ids>", "Annotation field IDs for AI review").option("--overwrite", "Regenerate existing annotation answers").option(
+    "--auth-mode <mode>",
+    "scheduled_require_auth or scheduled_permanent",
+    "scheduled_require_auth"
+  ).option("--event-filter <json>", "Notification attribute filters as a JSON object").option("--prompt <text>", "Instruction the agent runs").option("--skill <ref>", "Skill reference to run").option("--agent <agt-id>", "Agent to run it as (external id)").option("--workspace <wrk-id>", "Workspace to scope the workflow to (default: the current one)").option("--shared", "Share it with the workspace").option("--json", "Output as JSON").action(
     (opts) => runAction(async () => {
       const { arbi, workspaceId } = await resolveWorkspace();
       const body = {
@@ -9688,9 +9692,31 @@ function registerWorkflowCommand(program2) {
         timezone: opts.timezone,
         prompt: opts.prompt ?? "",
         // Unattended runs ask the owner for access each time unless the workflow is made permanent.
-        auth_mode: "scheduled_require_auth",
+        auth_mode: opts.authMode,
         workspace_ext_id: opts.workspace ?? workspaceId
       };
+      if (!["scheduled_require_auth", "scheduled_permanent"].includes(opts.authMode)) {
+        throw new Error(
+          "Invalid --auth-mode: use scheduled_require_auth or scheduled_permanent"
+        );
+      }
+      if (opts.action) {
+        if (!["annotate_documents", "email_documents"].includes(opts.action)) {
+          throw new Error("Invalid --action: use annotate_documents or email_documents");
+        }
+        const ids = (value) => value?.split(",").map((id) => id.trim()).filter(Boolean) ?? [];
+        body.action = {
+          type: opts.action,
+          documents: {
+            doc_ext_ids: ids(opts.documents),
+            label_ext_ids: ids(opts.labels),
+            latest: !!opts.latest
+          },
+          tag_ext_ids: ids(opts.tags),
+          overwrite: !!opts.overwrite
+        };
+      }
+      if (opts.eventFilter) body.event_filter = JSON.parse(opts.eventFilter);
       if (opts.rrule) body.rrule = opts.rrule;
       if (opts.runAt) body.run_at = opts.runAt;
       if (opts.eventKind) body.event_kind = opts.eventKind;
@@ -9735,7 +9761,7 @@ function registerWorkflowCommand(program2) {
       })()
     );
   }
-  workflow.command("run <id>").description("Run a workflow now (creates a task like its trigger would)").option("--json", "Output as JSON").action(
+  workflow.command("run <id>").description("Start the saved action now (document actions do not create a thread)").option("--json", "Output as JSON").action(
     (id, opts) => runAction(async () => {
       const { arbi } = await resolveAuth();
       const data = await sdk.workflows.runWorkflow(arbi, id);
@@ -9743,7 +9769,47 @@ function registerWorkflowCommand(program2) {
         printJson(data);
         return;
       }
-      success(`Started workflow ${ref(id)}`);
+      if (data.error) throw new Error(data.error);
+      success(
+        `${data.started ? "Started" : "Submitted"} automation ${ref(id)}${data.execution_id ? ` \u2014 execution ${data.execution_id}` : ""}${data.conversation_ext_id ? ` \u2014 thread ${ref(data.conversation_ext_id)}` : ""}`
+      );
+    })()
+  );
+  workflow.command("get <id>").description("Read the complete saved automation configuration").action(
+    (id) => runAction(async () => {
+      const { arbi } = await resolveAuth();
+      printJson(await sdk.workflows.getWorkflow(arbi, id));
+    })()
+  );
+  workflow.command("runs <id>").alias("executions").description("Show persisted document-action runs, results and failures").option("--json", "Output as JSON").action(
+    (id, opts) => runAction(async () => {
+      const { arbi } = await resolveAuth();
+      const data = await sdk.workflows.listWorkflowRuns(arbi, id);
+      if (!emitListOrTable(data, opts, "This automation has not run yet.")) return;
+      printTable(
+        [
+          { header: "RUN", width: 10, value: (r) => String(r.id) },
+          { header: "STATUS", width: 14, value: (r) => String(r.status) },
+          { header: "ACTION", width: 22, value: (r) => String(r.action_type) },
+          {
+            header: "DOCUMENTS",
+            width: 12,
+            value: (r) => String(r.document_ext_ids.length)
+          },
+          { header: "CREATED", width: 26, value: (r) => String(r.created_at) },
+          { header: "ERROR", width: 40, value: (r) => String(r.error ?? "") }
+        ],
+        data
+      );
+    })()
+  );
+  workflow.command("update <id>").description("Update any saved automation settings from a JSON file").requiredOption("--file <path>", "JSON UpdateWorkflowRequest file").option("--json", "Output as JSON").action(
+    (id, opts) => runAction(async () => {
+      const { arbi } = await resolveAuth();
+      const body = JSON.parse(fs5.readFileSync(opts.file, "utf8"));
+      const data = await sdk.workflows.updateWorkflow(arbi, id, body);
+      if (opts.json) printJson(data);
+      else success(`Updated automation ${ref(id)}`);
     })()
   );
   workflow.command("delete <id>").description("Delete a workflow (tasks it already created stay)").action(
@@ -10045,6 +10111,204 @@ function registerSessionCommand(program2) {
     await session.commands.find((c) => c.name() === "list").parseAsync([], { from: "user" });
   });
 }
+function parseAddress(value) {
+  const match = /^\s*(.*?)\s*<([^<>\s]+)>\s*$/.exec(value);
+  const email = (match ? match[2] : value).trim();
+  if (!/^[^\s@<>]+@[^\s@<>]+\.[^\s@<>]+$/.test(email)) {
+    throw new Error(`Not an email address: ${value}`);
+  }
+  const name = match?.[1].replace(/^"|"$/g, "");
+  return name ? { email, name } : { email };
+}
+function collect(value, previous = []) {
+  return [...previous, ...value.split(",").filter((v) => v.trim())];
+}
+var readTextFile = (path7) => fs5__default.default.readFileSync(path7 === "-" ? 0 : path7, "utf8");
+function buildCompose(options) {
+  const read = options.readText ?? readTextFile;
+  if (options.text !== void 0 && options.textFile) {
+    throw new Error("Use either --text or --text-file, not both");
+  }
+  if (options.html !== void 0 && options.htmlFile) {
+    throw new Error("Use either --html or --html-file, not both");
+  }
+  const html = options.html ?? (options.htmlFile ? read(options.htmlFile) : void 0);
+  return {
+    to: (options.to ?? []).map(parseAddress),
+    cc: (options.cc ?? []).map(parseAddress),
+    bcc: (options.bcc ?? []).map(parseAddress),
+    subject: options.subject ?? "",
+    text: options.text ?? (options.textFile ? read(options.textFile) : ""),
+    ...html ? { html } : {},
+    secure_delivery: false,
+    attachments: (options.attach ?? []).map((file) => sdk.mailNode.attachmentFromFile(file))
+  };
+}
+function addComposeOptions(command) {
+  return command.option("--to <addresses>", "Recipient(s), comma-separated or repeated", collect).option("--cc <addresses>", "Cc recipient(s)", collect).option("--bcc <addresses>", "Bcc recipient(s)", collect).option("-s, --subject <subject>", "Subject").option("--text <text>", "Plain-text body").option("--text-file <path>", "Read the plain-text body from a file (- for stdin)").option("--html <html>", "HTML body (the plain text stays as the fallback)").option("--html-file <path>", "Read the HTML body from a file (- for stdin)").option("-a, --attach <path>", "Attach a file (repeatable)", (v, prev = []) => [
+    ...prev,
+    v
+  ]).option("--json", "Output as JSON (recommended for scripting / agents)");
+}
+function registerMailCommand(program2) {
+  const mail = program2.command("mail").enablePositionalOptions().description("Your ARBI mailbox: read, draft and send (an agent can only draft)");
+  async function connect() {
+    const { loginResult, config } = await resolveAuth();
+    return {
+      fetch: sdk.mail.createMailFetch({
+        baseUrl: config.baseUrl,
+        accessToken: loginResult.accessToken
+      }),
+      login: loginResult,
+      isAgent: Boolean(loginResult.parentExtId)
+    };
+  }
+  async function connectToRead() {
+    const ctx = await connect();
+    if (ctx.isAgent) {
+      error("Agents can only create drafts. Use: arbi mail draft --to <address> ...");
+      process.exit(1);
+    }
+    await sdk.mail.unlockNativeMail(ctx.fetch, {
+      signingPrivateKey: ctx.login.signingPrivateKey,
+      serverSessionKey: ctx.login.serverSessionKey
+    });
+    return ctx;
+  }
+  mail.command("alias <name>").description("Claim your ARBI address, name@<deployment domain> (one per user)").action(
+    (name) => runAction(async () => {
+      const { fetch: fetch2 } = await connect();
+      success(`Your ARBI email is ${await sdk.mail.claimNativeAlias(fetch2, name.toLowerCase())}`);
+    })()
+  );
+  mail.command("folders").description("List folders with unread counts").option("--json", "Output as JSON").action(
+    (opts) => runAction(async () => {
+      const { fetch: fetch2 } = await connectToRead();
+      const folders = await sdk.mail.listFolders(fetch2);
+      if (opts.json) return printJson(folders);
+      printTable(
+        [
+          { header: "ID", width: 14, value: (f) => f.id },
+          { header: "NAME", width: 20, value: (f) => f.name },
+          { header: "UNREAD", width: 8, value: (f) => String(f.unread ?? 0) }
+        ],
+        folders
+      );
+    })()
+  );
+  mail.command("list").description("List messages in a folder (default: inbox)").option("-f, --folder <id>", "Folder id: inbox, sent, drafts, archive, trash", "inbox").option("-q, --query <text>", "Filter by subject, sender or recipient").option("-l, --limit <n>", "Messages per page", (v) => parseInt(v, 10), 30).option("--cursor <cursor>", "Continue from a previous page (its next_cursor)").option("--json", "Output as JSON (includes next_cursor)").action(
+    (opts) => runAction(async () => {
+      const { fetch: fetch2 } = await connectToRead();
+      const page = await sdk.mail.listMessages(fetch2, {
+        folderId: opts.folder,
+        query: opts.query,
+        limit: opts.limit,
+        cursor: opts.cursor
+      });
+      if (opts.json) return printJson(page);
+      if (page.messages.length === 0) {
+        process.stderr.write("No messages.\n");
+        return;
+      }
+      const people = (m) => (["sent", "drafts"].includes(opts.folder) ? m.to : m.sender).map((a) => a.name || a.email).join(", ");
+      printTable(
+        [
+          { header: "ID", width: 38, value: (m) => m.id },
+          { header: "WHO", width: 24, value: (m) => truncate(people(m), 23) },
+          {
+            header: "SUBJECT",
+            width: 40,
+            value: (m) => truncate(m.subject || "(no subject)", 39)
+          },
+          {
+            header: "FLAGS",
+            width: 14,
+            value: (m) => [
+              m.unread ? "unread" : "",
+              m.attachments.length ? "attach" : "",
+              m.drafted_by ? `by ${m.drafted_by}` : ""
+            ].filter(Boolean).join(" ")
+          }
+        ],
+        page.messages
+      );
+      if (page.next_cursor) dim(`More: --cursor ${page.next_cursor}`);
+    })()
+  );
+  mail.command("read <id>").description("Read a message, or save one of its attachments with --attachment").option("--attachment <id>", "Save this attachment (id from the attachment list) instead").option("-o, --output <path>", "Where to save the attachment (default: its file name)").option("--json", "Output the full message as JSON").action(
+    (id, opts) => runAction(async () => {
+      const { fetch: fetch2 } = await connectToRead();
+      const message = await sdk.mail.getMessage(fetch2, id);
+      if (opts.attachment !== void 0) {
+        const meta = message.attachments.find((a) => a.id === opts.attachment);
+        if (!meta) throw new Error(`No attachment ${opts.attachment} on this message`);
+        const bytes = await sdk.mail.downloadAttachment(fetch2, id, meta.id);
+        const target = opts.output ?? meta.name;
+        fs5__default.default.writeFileSync(target, bytes);
+        success(`Saved ${target} (${bytes.length} bytes)`);
+        return;
+      }
+      if (opts.json) return printJson(message);
+      const who = (list) => list.map((a) => a.name ? `${a.name} <${a.email}>` : a.email).join(", ");
+      console.log(`From:    ${who(message.sender)}`);
+      console.log(`To:      ${who(message.to)}`);
+      if (message.cc.length) console.log(`Cc:      ${who(message.cc)}`);
+      console.log(`Subject: ${message.subject}`);
+      if (message.received_at) console.log(`Date:    ${message.received_at}`);
+      if (message.drafted_by) console.log(`Drafted by: ${message.drafted_by}`);
+      if (message.attachments.length) {
+        console.log(
+          `Attachments: ${message.attachments.map((a) => `${a.name} (id ${a.id}, ${a.size} bytes)`).join("; ")}`
+        );
+      }
+      console.log(`
+${message.text}`);
+    })()
+  );
+  addComposeOptions(
+    mail.command("draft").description(
+      "Save a draft. Run by an agent, it goes to its owner's Drafts, from their address, for them to review and send"
+    )
+  ).action(
+    (opts) => runAction(async () => {
+      const compose = buildCompose(opts);
+      const { fetch: fetch2, isAgent } = await connect();
+      const saved = await sdk.mail.saveDraft(fetch2, compose);
+      if (opts.json) return printJson(saved);
+      success(
+        isAgent ? `Draft ${saved.id} saved to your owner's Drafts. They review it and send.` : `Draft ${saved.id} saved to Drafts.`
+      );
+    })()
+  );
+  addComposeOptions(
+    mail.command("send").description("Send a message from your ARBI address (not available to agents)")
+  ).option("--request-id <id>", "Idempotency key: retrying with the same id never sends twice").action(
+    (opts) => runAction(async () => {
+      const compose = buildCompose(opts);
+      if (compose.to?.length === 0 && compose.cc?.length === 0 && compose.bcc?.length === 0) {
+        throw new Error("Add at least one recipient with --to, --cc or --bcc");
+      }
+      const { fetch: fetch2, isAgent } = await connect();
+      if (isAgent) {
+        error("Agents cannot send mail. Save a draft instead: arbi mail draft ...");
+        process.exit(1);
+      }
+      const result = await sdk.mail.sendMessage(fetch2, { ...compose, request_id: opts.requestId });
+      if (opts.json) return printJson(result);
+      success(`Sent (${result.id}).`);
+    })()
+  );
+  mail.arguments("[maybeSubcommand]").action((maybe) => {
+    if (maybe) {
+      suggestSubcommandAndExit(
+        "mail",
+        maybe,
+        mail.commands.map((c) => c.name())
+      );
+    }
+    mail.outputHelp();
+  });
+}
 function registerNotificationsCommand(program2) {
   const notif = program2.command("notifications").enablePositionalOptions().description("Non-DM notifications");
   notif.command("list").description("List non-DM notifications (workspace invites, contact accepts, \u2026)").option("--unread", "Only show unread notifications").option("--type <comma-list>", "Filter to specific type(s), e.g. workspaceuser_invited").option("-l, --limit <n>", "Cap to N most-recent", (v) => parseInt(v, 10)).option("--json", "Output as JSON (recommended for scripting / agents)").action(
@@ -10610,7 +10874,7 @@ console.info = (...args) => {
   _origInfo(...args);
 };
 var program = new commander.Command();
-program.name("arbi").description("ARBI CLI \u2014 interact with ARBI from the terminal").version("0.4.31").showHelpAfterError(true).showSuggestionAfterError(true);
+program.name("arbi").description("ARBI CLI \u2014 interact with ARBI from the terminal").version("0.4.33").showHelpAfterError(true).showSuggestionAfterError(true);
 registerConfigCommand(program);
 registerLoginCommand(program);
 registerRegisterCommand(program);
@@ -10645,6 +10909,7 @@ registerListenCommand(program);
 registerSessionCommand(program);
 registerLocalCommand(program);
 registerNotificationsCommand(program);
+registerMailCommand(program);
 registerProjectCommand(program);
 registerFilesCommand(program);
 registerUsageCommand(program);