@arbidocs/client 0.3.184 → 0.4.0

package/dist/index.d.cts

@@ -3692,6 +3692,10 @@ interface components {
              * Format: date-time
              */
             joined_at: string;
+            /** Whether the grant has a persistent wrapped workspace key. */
+            permanent: boolean;
+            /** Whether this is the workspace selected for agent wakeups. */
+            is_default: boolean;
         };
         /**
          * AgentsConfig
@@ -17353,7 +17357,7 @@ declare function base64Decode(base64: string): Uint8Array;
  * @param deploymentDomain - Deployment domain for salt derivation
  * @returns Object with Ed25519 signing keypair and derived X25519 encryption keypair
  */
-declare function generateKeyPairs(username: string, password: string, deploymentDomain: string): Promise<{
+type DerivedKeyPairs = {
     signing: {
         publicKey: Uint8Array;
         privateKey: Uint8Array;
@@ -17364,7 +17368,15 @@ declare function generateKeyPairs(username: string, password: string, deployment
         privateKey: Uint8Array;
         publicKeyBase64: string;
     };
-}>;
+};
+/**
+ * Start deriving the keypairs for these credentials in the background (best
+ * effort — failures are swallowed; the real call will just derive again).
+ * A later `generateKeyPairs` with the same arguments awaits this instead of
+ * paying for Argon2 again.
+ */
+declare function prewarmKeyPairs(username: string, password: string, deploymentDomain: string): void;
+declare function generateKeyPairs(username: string, password: string, deploymentDomain: string): Promise<DerivedKeyPairs>;
 /**
  * Sign a message with Ed25519 private key
  *
@@ -17948,4 +17960,4 @@ declare function isMessageType<T extends WebSocketServerMessage>(msg: WebSocketS
  */
 declare function createReloginHandler(deps: ReloginDeps): () => Promise<string | null>;
 
-export { type $defs, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, type KeyPair, type LoginCredentials, type LoginParams, type LoginProvider, type LoginRequest, type LoginResult, type LoginWithKeyParams, type OnReloginSuccess, type PasswordChangeCredentials, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginHandler, type SessionData, type SessionKeys, type SessionManager, type SessionState, type SessionStorageProvider, type SsoTokenProvider, type TokenProvider, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceOpenProvider, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsConnectionClosedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, type components, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, type operations, parseServerMessage, type paths, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey, type webhooks };
+export { type $defs, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, type KeyPair, type LoginCredentials, type LoginParams, type LoginProvider, type LoginRequest, type LoginResult, type LoginWithKeyParams, type OnReloginSuccess, type PasswordChangeCredentials, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginHandler, type SessionData, type SessionKeys, type SessionManager, type SessionState, type SessionStorageProvider, type SsoTokenProvider, type TokenProvider, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceOpenProvider, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsConnectionClosedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, type components, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, type operations, parseServerMessage, type paths, prewarmKeyPairs, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey, type webhooks };

package/dist/index.d.ts

@@ -3692,6 +3692,10 @@ interface components {
              * Format: date-time
              */
             joined_at: string;
+            /** Whether the grant has a persistent wrapped workspace key. */
+            permanent: boolean;
+            /** Whether this is the workspace selected for agent wakeups. */
+            is_default: boolean;
         };
         /**
          * AgentsConfig
@@ -17353,7 +17357,7 @@ declare function base64Decode(base64: string): Uint8Array;
  * @param deploymentDomain - Deployment domain for salt derivation
  * @returns Object with Ed25519 signing keypair and derived X25519 encryption keypair
  */
-declare function generateKeyPairs(username: string, password: string, deploymentDomain: string): Promise<{
+type DerivedKeyPairs = {
     signing: {
         publicKey: Uint8Array;
         privateKey: Uint8Array;
@@ -17364,7 +17368,15 @@ declare function generateKeyPairs(username: string, password: string, deployment
         privateKey: Uint8Array;
         publicKeyBase64: string;
     };
-}>;
+};
+/**
+ * Start deriving the keypairs for these credentials in the background (best
+ * effort — failures are swallowed; the real call will just derive again).
+ * A later `generateKeyPairs` with the same arguments awaits this instead of
+ * paying for Argon2 again.
+ */
+declare function prewarmKeyPairs(username: string, password: string, deploymentDomain: string): void;
+declare function generateKeyPairs(username: string, password: string, deploymentDomain: string): Promise<DerivedKeyPairs>;
 /**
  * Sign a message with Ed25519 private key
  *
@@ -17948,4 +17960,4 @@ declare function isMessageType<T extends WebSocketServerMessage>(msg: WebSocketS
  */
 declare function createReloginHandler(deps: ReloginDeps): () => Promise<string | null>;
 
-export { type $defs, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, type KeyPair, type LoginCredentials, type LoginParams, type LoginProvider, type LoginRequest, type LoginResult, type LoginWithKeyParams, type OnReloginSuccess, type PasswordChangeCredentials, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginHandler, type SessionData, type SessionKeys, type SessionManager, type SessionState, type SessionStorageProvider, type SsoTokenProvider, type TokenProvider, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceOpenProvider, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsConnectionClosedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, type components, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, type operations, parseServerMessage, type paths, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey, type webhooks };
+export { type $defs, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, type KeyPair, type LoginCredentials, type LoginParams, type LoginProvider, type LoginRequest, type LoginResult, type LoginWithKeyParams, type OnReloginSuccess, type PasswordChangeCredentials, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginHandler, type SessionData, type SessionKeys, type SessionManager, type SessionState, type SessionStorageProvider, type SsoTokenProvider, type TokenProvider, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceOpenProvider, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsConnectionClosedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, type components, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, type operations, parseServerMessage, type paths, prewarmKeyPairs, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey, type webhooks };

package/dist/index.js

@@ -113,7 +113,38 @@ function generateSalt(username, deploymentDomain) {
   const hash = sodium.crypto_hash_sha256(sodium.from_string(saltString));
   return hash.slice(0, 16);
 }
+var PREWARM_TTL_MS = 6e4;
+var prewarmed = null;
+function prewarmId(username, password, deploymentDomain) {
+  return `${username}\0${deploymentDomain}\0${password}`;
+}
+function dropPrewarmed() {
+  if (prewarmed) clearTimeout(prewarmed.timer);
+  prewarmed = null;
+}
+function prewarmKeyPairs(username, password, deploymentDomain) {
+  if (!username || !password || !deploymentDomain) return;
+  const id = prewarmId(username, password, deploymentDomain);
+  if (prewarmed?.id === id) return;
+  dropPrewarmed();
+  const promise = deriveKeyPairs(username, password, deploymentDomain);
+  promise.catch(() => {
+    if (prewarmed?.promise === promise) dropPrewarmed();
+  });
+  prewarmed = { id, promise, timer: setTimeout(dropPrewarmed, PREWARM_TTL_MS) };
+}
 async function generateKeyPairs(username, password, deploymentDomain) {
+  if (prewarmed && prewarmed.id === prewarmId(username, password, deploymentDomain)) {
+    const { promise } = prewarmed;
+    dropPrewarmed();
+    try {
+      return await promise;
+    } catch {
+    }
+  }
+  return deriveKeyPairs(username, password, deploymentDomain);
+}
+async function deriveKeyPairs(username, password, deploymentDomain) {
   await initSodium();
   if (!deploymentDomain) {
     throw new Error("Deployment domain not available. Cannot generate keys.");
@@ -1125,6 +1156,6 @@ function isMessageType(msg, type) {
   return msg.type === type;
 }
 
-export { API_PREFIX, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, parseServerMessage, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey };
+export { API_PREFIX, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, parseServerMessage, prewarmKeyPairs, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map