@arbidocs/client 0.3.19 → 0.3.20

package/dist/index.d.ts

@@ -173,6 +173,87 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/user/agents': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List User Agents
+         * @description List current user's persistent agents.
+         */
+        get: operations['list_agents'];
+        put?: never;
+        post?: never;
+        /**
+         * Delete User Agents
+         * @description Delete agents by external ID.
+         *
+         *     A BEFORE DELETE trigger on users reassigns created_by to parent_user_id,
+         *     nulls updated_by, and deletes contacts. CASCADE handles WorkspaceUsers.
+         */
+        delete: operations['delete_agents'];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/user/authorize': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Authorize Session Endpoint
+         * @description Create a delegated session with pre-populated workspace keys.
+         *
+         *     Frontend sends workspace keys SealedBox-encrypted with the user's session public key.
+         *     Server decrypts them, re-encrypts with a new session keypair, and creates a pending
+         *     session keyed by a 3-word claim code. The recipient redeems the code via POST /user/token.
+         *
+         *     If persist_identity is True, the claim also creates a persistent Agent identity
+         *     with WorkspaceUsers rows so the agent can re-login later.
+         */
+        post: operations['authorize_session'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/user/token': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Claim Agent Session Endpoint
+         * @description Claim an agent session using a 3-word code.
+         *
+         *     Returns LoginResponse so the frontend can use the same auth code path as login.
+         *     Workspaces are filtered to only those included in the delegation.
+         *
+         *     If persist_identity was set on delegation:
+         *     - signing_key is required in the request
+         *     - Creates an Agent row and WorkspaceUsers rows (role=guest)
+         */
+        post: operations['claim_agent_session'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/user/logout': {
         parameters: {
             query?: never;
@@ -193,6 +274,26 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/user/sessions': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List User Sessions
+         * @description List active sessions. Agents/delegated see only their own session; users see all.
+         */
+        get: operations['list_sessions'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/user/change_password': {
         parameters: {
             query?: never;
@@ -257,8 +358,7 @@ interface paths {
          * Get Current User Workspaces
          * @description Retrieve the list of workspaces associated with the current authenticated user.
          *     Includes wrapped_key, stats (conversation/document counts with shared/private breakdown),
-         *     and users for each workspace. All data is fetched efficiently using batch queries to avoid N+1 problems.
-         *     Leverages RLS to enforce access control.
+         *     and users for each workspace. Leverages RLS to enforce access control.
          */
         get: operations['get_user_workspaces'];
         put?: never;
@@ -358,8 +458,9 @@ interface paths {
          * @description Create a new workspace with encryption and access controls.
          *     Sets up vector storage and associates the creator as the initial workspace user.
          *
-         *     Server generates the workspace symmetric key and wraps it with the user's public key.
-         *     The wrapped key is returned in the response for client-side storage.
+         *     Client generates the workspace symmetric key and sends it encrypted with the
+         *     session key (SecretBox). Server decrypts and wraps it with the user's
+         *     public key for storage. The wrapped key is returned in the response.
          *
          *     Public workspaces are visible to all users and grant non-members limited access:
          *     - Non-members can view shared documents and tags
@@ -387,13 +488,10 @@ interface paths {
         put?: never;
         /**
          * Open Workspace
-         * @description Open a workspace: decrypt workspace key, issue a workspace-scoped JWT, and return workspace data.
-         *
-         *     The workspace key is provided in the request body (same SealedBox-encrypted format as the
-         *     workspace-key header). A new JWT is issued with embedded workspace claims so subsequent API
-         *     calls only need the Authorization header — no workspace-key header required.
+         * @description Open a workspace: store encrypted workspace key in session, set active, return workspace data.
          *
-         *     Returns the workspace-scoped JWT along with conversations, documents, and tags.
+         *     Users provide ``workspace_key`` (SealedBox-encrypted with session public key).
+         *     Agents omit it — their keys are pre-populated via ``/agent-session``.
          */
         post: operations['open_workspace'];
         delete?: never;
@@ -456,7 +554,7 @@ interface paths {
          * @description Copy documents from source workspace (current) to target workspace.
          *
          *     Requires workspace-scoped JWT for the source workspace.
-         *     Target workspace key is provided in the request body (SealedBox-encrypted).
+         *     Target workspace key is provided in the request body (SecretBox-encrypted with session key).
          *
          *     Copies:
          *     - Document metadata (title, doc_date, shared status, etc.)
@@ -1416,6 +1514,19 @@ interface components {
             /** @default collaborator */
             role: components['schemas']['WorkspaceRole'];
         };
+        /**
+         * AgentSessionClaimRequest
+         * @description Claim an agent session using a 3-word code.
+         *
+         *     If the pending session has persist_identity=True, signing_key is required
+         *     to create the Agent identity. Otherwise it is accepted but ignored.
+         */
+        AgentSessionClaimRequest: {
+            /** Claim Code */
+            claim_code: string;
+            /** Signing Key */
+            signing_key?: string | null;
+        };
         /**
          * AgentStepEvent
          * @description A single agent step with a sequential index.
@@ -1430,13 +1541,13 @@ interface components {
          *         {"type": "arbi.agent_step", "index": 2,
          *          "focus": "Searching for force majeure clauses across the selected contracts.",
          *          "detail": [
-         *             {"tool": "search_documents", "query": "force majeure", "search_mode": "hybrid"},
-         *             {"tool": "get_table_of_contents", "doc_count": 2, "doc_ext_ids": ["doc-abc12345", "doc-def67890"]}
+         *             {"tool": "search_inside_documents", "query": "force majeure", "search_mode": "hybrid"},
+         *             {"tool": "get_table_of_contents", "doc_ext_id": "doc-abc12345"}
          *         ]}
          *         {"type": "arbi.agent_step", "index": 3,
          *          "focus": "Comparing the provisions found in Contract A with Contract B.",
          *          "detail": [
-         *             {"tool": "get_document_passages", "doc_ext_id": "doc-abc12345", "from_ref": "5", "to_ref": "8"}
+         *             {"tool": "read_document", "doc_ext_id": "doc-abc12345", "range_count": 2, "digest": false}
          *         ]}
          *         {"type": "arbi.agent_step", "index": 3, "detail": [
          *             {"tool": "web_search", "query": "latest arbitration developments 2026"}
@@ -1481,12 +1592,12 @@ interface components {
             step?: string | null;
             /**
              * Label
-             * @description Display label for the step (e.g. 'Searching documents'). Backend-driven.
+             * @description Display label for the step. Backend-driven, no frontend mapping needed.
              */
             label?: string | null;
             /**
              * Icon
-             * @description Lucide icon name for the step (e.g. 'search'). Backend-driven.
+             * @description Lucide icon name for the step (e.g. 'search'). Backend-driven, no frontend mapping needed.
              */
             icon?: string | null;
             /**
@@ -1525,6 +1636,16 @@ interface components {
              * @description Tool execution outcome (e.g. '15 chunks retrieved'). Sent as a follow-up event with the same index after tool execution.
              */
             outcome?: string | null;
+            /**
+             * Model Recommendation
+             * @description Model tier recommended by FilterPlan in auto mode: 'fast', 'wise', or 'premium'. Present only on the goal step when auto mode is active.
+             */
+            model_recommendation?: string | null;
+            /**
+             * Selected Model
+             * @description Actual model name selected after resolving the recommendation. Present only on the goal step when auto mode is active.
+             */
+            selected_model?: string | null;
         };
         /**
          * AgentsConfig
@@ -1577,18 +1698,6 @@ interface components {
              * @default false
              */
             VISION_ENABLED: boolean;
-            /**
-             * Doc Index Compact Threshold
-             * @description When the workspace has more documents than this, omit the Subject column from the document index to save tokens.
-             * @default 20
-             */
-            DOC_INDEX_COMPACT_THRESHOLD: number;
-            /**
-             * Doc Index Skip Threshold
-             * @description When the workspace has more documents than this, omit the document index entirely. The agent discovers documents via search_documents instead.
-             * @default 200
-             */
-            DOC_INDEX_SKIP_THRESHOLD: number;
             /**
              * Personal Agent
              * @description Enable the personal_agent tool for delegating tasks to an external agent via OpenClaw.
@@ -1628,7 +1737,7 @@ interface components {
             /**
              * Agent Model Name
              * @description The name of the model to be used for the agent decision-making.
-             * @default Fast
+             * @default auto
              */
             AGENT_MODEL_NAME: string;
             /**
@@ -1650,6 +1759,12 @@ interface components {
              * @default 10000
              */
             AGENT_MAX_TOKENS: number;
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode for the agentic loop LLM.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Agent Max Iterations
              * @description Maximum number of tool call iterations before forcing an answer.
@@ -1657,11 +1772,11 @@ interface components {
              */
             AGENT_MAX_ITERATIONS: number;
             /**
-             * Max Passage Pages
-             * @description Maximum number of pages allowed per get_document_passages call. Calls requesting a wider range are rejected, forcing the agent to use get_table_of_contents and target specific sections.
+             * Agent Max Parallel Tool Calls
+             * @description Maximum number of tool calls the agent can make in a single iteration. Extra calls beyond this limit are silently dropped.
              * @default 10
              */
-            MAX_PASSAGE_PAGES: number;
+            AGENT_MAX_PARALLEL_TOOL_CALLS: number;
             /**
              * Agent History Char Threshold
              * @description Char threshold for conversation history injected into the agent context. Below: verbatim user/assistant pairs. Above: summarized by SummariseLLM.
@@ -1677,10 +1792,16 @@ interface components {
              *
              *     When using documents, retrieve actual document content — do not rely on metadata or headings alone. Cross-check information across sources. Not all assertions in sources are factual — some are arguments by a party. Attribute claims to their source where parties disagree.
              *
+             *     DOCUMENT INDEX:
+             *     The "Workspace Documents" table in your system prompt already lists every document with its Id, Title, Date, Pages, and Subject. Use this table directly when the user asks to list, catalogue, or tabulate documents — do NOT call any tools for that. Only use tools when you need to read or search document content.
+             *
              *     DOCUMENT STRATEGY:
-             *     - For overview/summary requests: use get_table_of_contents first, then read key sections with get_document_passages.
-             *     - For specific questions: use search_documents to find relevant sections, then read those sections.
-             *     - Never search for meta-queries like "summary" or "overview" — search for the actual subject matter.
+             *     - For listing/cataloguing documents: use the document index already in your prompt — no tool calls needed.
+             *     - For overview/summary requests: use get_table_of_contents first, then read key sections with read_document.
+             *     - For specific questions: use search_inside_documents to find relevant sections, then read those sections with read_document.
+             *     - For translation, deep analysis, or detailed summaries of a single document: use read_document with no ranges to load the complete text.
+             *     - For extracting structured findings from passages: use read_document with digest=true or search_inside_documents with digest=true.
+             *     - Never search for meta-queries like "summary", "overview", or "all documents" — search for the actual subject matter.
              *
              *     FORMATTING:
              *     - Start your answer directly with the content — never open with a description of what you searched for or read (e.g. never write "Searching for X", "Reading Y", "I found Z documents" as the first lines of an answer).
@@ -1721,28 +1842,28 @@ interface components {
              *       "SUGGESTED_QUERIES": false,
              *       "ARTIFACTS_ENABLED": false,
              *       "VISION_ENABLED": false,
-             *       "DOC_INDEX_COMPACT_THRESHOLD": 20,
-             *       "DOC_INDEX_SKIP_THRESHOLD": 200,
              *       "PERSONAL_AGENT": false,
              *       "MEMORY_ENABLED": false,
              *       "SKILLS_ENABLED": false,
              *       "SKILL_CREATION": false,
              *       "REVIEW_ENABLED": false,
              *       "PERSONA": "You are ARBI, an AI assistant created by ARBI CITY. Be proactive, helpful and professional.",
-             *       "AGENT_MODEL_NAME": "Fast",
+             *       "AGENT_MODEL_NAME": "auto",
              *       "AGENT_API_TYPE": "remote",
              *       "LLM_AGENT_TEMPERATURE": 1,
              *       "AGENT_MAX_TOKENS": 10000,
+             *       "ENABLE_THINKING": false,
              *       "AGENT_MAX_ITERATIONS": 20,
-             *       "MAX_PASSAGE_PAGES": 10,
+             *       "AGENT_MAX_PARALLEL_TOOL_CALLS": 10,
              *       "AGENT_HISTORY_CHAR_THRESHOLD": 8000,
-             *       "AGENT_SYSTEM_PROMPT": "Answer any question the user asks. You have access to workspace documents — use them when relevant. When no documents are relevant, answer from your own knowledge. Always provide a helpful answer.\n\nIMPORTANT: Never say \"I don't have information in the available documents\" or refuse to answer. If documents are not relevant, just answer the question directly from your own knowledge.\n\nWhen using documents, retrieve actual document content — do not rely on metadata or headings alone. Cross-check information across sources. Not all assertions in sources are factual — some are arguments by a party. Attribute claims to their source where parties disagree.\n\nDOCUMENT STRATEGY:\n- For overview/summary requests: use get_table_of_contents first, then read key sections with get_document_passages.\n- For specific questions: use search_documents to find relevant sections, then read those sections.\n- Never search for meta-queries like \"summary\" or \"overview\" — search for the actual subject matter.\n\nFORMATTING:\n- Start your answer directly with the content — never open with a description of what you searched for or read (e.g. never write \"Searching for X\", \"Reading Y\", \"I found Z documents\" as the first lines of an answer).\n- Use markdown: headings, bold, bullet points, numbered lists\n- Main conclusion first, followed by supporting points\n- Bullet points for lists of discrete items\n- Numbering for sequential steps or prioritized items\n- Bold text for critical conclusions or decision points\n\nEFFICIENCY:\n1. Before each step, review the results of prior steps. Adapt your approach based on what you learned — if a call was rejected or returned poor results, adjust your strategy.\n2. Call multiple tools in parallel when a query has several aspects.\n3. NEVER repeat a tool call with the same arguments.\n4. Use targeted queries and narrow page ranges per retrieval call.\n5. Stop when you have sufficient evidence — do not over-research."
+             *       "AGENT_SYSTEM_PROMPT": "Answer any question the user asks. You have access to workspace documents — use them when relevant. When no documents are relevant, answer from your own knowledge. Always provide a helpful answer.\n\nIMPORTANT: Never say \"I don't have information in the available documents\" or refuse to answer. If documents are not relevant, just answer the question directly from your own knowledge.\n\nWhen using documents, retrieve actual document content — do not rely on metadata or headings alone. Cross-check information across sources. Not all assertions in sources are factual — some are arguments by a party. Attribute claims to their source where parties disagree.\n\nDOCUMENT INDEX:\nThe \"Workspace Documents\" table in your system prompt already lists every document with its Id, Title, Date, Pages, and Subject. Use this table directly when the user asks to list, catalogue, or tabulate documents — do NOT call any tools for that. Only use tools when you need to read or search document content.\n\nDOCUMENT STRATEGY:\n- For listing/cataloguing documents: use the document index already in your prompt — no tool calls needed.\n- For overview/summary requests: use get_table_of_contents first, then read key sections with read_document.\n- For specific questions: use search_inside_documents to find relevant sections, then read those sections with read_document.\n- For translation, deep analysis, or detailed summaries of a single document: use read_document with no ranges to load the complete text.\n- For extracting structured findings from passages: use read_document with digest=true or search_inside_documents with digest=true.\n- Never search for meta-queries like \"summary\", \"overview\", or \"all documents\" — search for the actual subject matter.\n\nFORMATTING:\n- Start your answer directly with the content — never open with a description of what you searched for or read (e.g. never write \"Searching for X\", \"Reading Y\", \"I found Z documents\" as the first lines of an answer).\n- Use markdown: headings, bold, bullet points, numbered lists\n- Main conclusion first, followed by supporting points\n- Bullet points for lists of discrete items\n- Numbering for sequential steps or prioritized items\n- Bold text for critical conclusions or decision points\n\nEFFICIENCY:\n1. Before each step, review the results of prior steps. Adapt your approach based on what you learned — if a call was rejected or returned poor results, adjust your strategy.\n2. Call multiple tools in parallel when a query has several aspects.\n3. NEVER repeat a tool call with the same arguments.\n4. Use targeted queries and narrow page ranges per retrieval call.\n5. Stop when you have sufficient evidence — do not over-research."
              *     }
              */
             Agents: components['schemas']['AgentsConfig'];
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Fast",
              *       "SYSTEM_INSTRUCTION": "You are ARBI, an AI assistant created by ARBI CITY. Be proactive, helpful and professional.Be concise. Use markdown where it helps readability. Cross-check information across sources before answering. Never fabricate facts. Not all assertions in the sources are factual — some are arguments by a party. Attribute claims to their source, especially where parties disagree.",
              *       "MAX_CHAR_SIZE_TO_ANSWER": 200000,
@@ -1754,6 +1875,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Wise",
              *       "SYSTEM_INSTRUCTION": "You are reviewing a draft answer prepared by a research agent. The draft was written based on summaries, but you now have access to the full source material.\n\nYour task:\n1. Review the draft answer against the source material provided\n2. Verify claims are supported by the sources\n3. Correct any inaccuracies or unsupported statements\n4. Add any important details from the sources that were missed\n5. Maintain formal, objective tone appropriate for professional contexts\n\nIf information is not found in the sources but the draft answer is based on web search results or general knowledge, preserve it and ensure it is clearly labelled as such. Only flag missing source support for claims that purport to come from the documents.\nDo not add inline citation markers - the system handles citations automatically.",
              *       "TEMPERATURE": 0.1,
@@ -1765,6 +1887,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Fast",
              *       "SYSTEM_INSTRUCTION": "You are a chunk evaluator. Analyze retrieved chunks to determine which are relevant to the user's query and extract key learnings from the RELEVANT chunks only. You must return your response as valid JSON matching the provided schema.",
              *       "TEMPERATURE": 0.1,
@@ -1776,6 +1899,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Fast",
              *       "SYSTEM_INSTRUCTION": "You are a title generator that creates concise, descriptive titles.",
              *       "MAX_CHAR_SIZE_TO_ANSWER": 50,
@@ -1787,6 +1911,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Wise",
              *       "SYSTEM_INSTRUCTION": "You are a conversation summariser. Condense the conversation history into a concise summary that preserves:\n- Key decisions and conclusions reached\n- Specific names, dates, numbers, and document references\n- Open questions and unresolved items\n- The user's goals and constraints\n\nWrite in past tense, third person. Be specific, not vague. Do not omit important details in favour of brevity.",
              *       "TEMPERATURE": 0.1,
@@ -1800,6 +1925,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Fast",
              *       "SYSTEM_INSTRUCTION": "You are a document analysis assistant. Answer questions based strictly on document content.\n\nGuidelines:\n- Only use information explicitly stated in the document\n- Do not infer or assume information not present\n- If information is not found, respond with \"Information not found in document.\"\n- Follow format instructions exactly for each answer\n- Be concise and precise",
              *       "MAX_CHAR_CONTEXT_TO_ANSWER": 100000,
@@ -1858,6 +1984,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Wise",
              *       "SYSTEM_INSTRUCTION": "You are a knowledge synthesizer. You receive the full agent scratchpad from a completed conversation and decide what, if anything, is worth saving.\n\n## Work Product Types\n- **\"memory\"**: Facts, findings, reference data — for *looking up* information.\n- **\"skill\"**: Procedures, workflows, step-by-step instructions — for *doing* something.\n\nWhen ambiguous, default to memory.\n\n## Rules\n- Return an empty work_products array if the conversation is trivial or produced nothing substantive.\n- Each work product must cover ONE coherent topic. Never combine disparate subjects into a single document — create separate documents for each distinct topic.\n- Ground everything in the provided context. Do not invent information.\n- Be concise. These are reference documents, not essays.\n\n## Output Format\nJSON with a `work_products` array. Each item has `wp_type`, `title`, and `content` (markdown).\n\nMemory content: `# Title`, date, source, key findings as bullets, source documents.\nSkill content: `# Title`, prerequisites, numbered steps, when to apply.",
              *       "TEMPERATURE": 0.3,
@@ -1870,8 +1997,9 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": true,
              *       "MODEL_NAME": "Wise",
-             *       "SYSTEM_INSTRUCTION": "You are a research planning assistant. Your job is to analyze a user query and produce a concise, numbered research plan.\n\nYou have access to a workspace of documents. The available tools for executing the plan are:\n- search_documents: Search workspace documents for relevant passages (semantic, keyword, or hybrid)\n- get_document_passages: Read a specific page range from a document\n- get_table_of_contents: Get document headings with page references\n\nConsider:\n- What information is needed to answer the query\n- Which documents are likely relevant based on the document index\n- What search queries and document passages to examine\n- What order of operations will be most efficient\n- Whether parallel searches can be used for different aspects\n\nRespond with ONLY the plan (numbered steps). Do not execute any steps.",
+             *       "SYSTEM_INSTRUCTION": "You are a research planning assistant. Your job is to analyze a user query and produce a concise, numbered research plan.\n\nYou have access to a workspace of documents. The available tools for executing the plan are:\n- search_inside_documents: Search workspace documents for relevant passages (semantic, keyword, or hybrid). Use digest=true to extract learnings.\n- read_document: Read page ranges or entire documents. Use digest=true to extract learnings with citations.\n- get_table_of_contents: Get document headings with page references\n\nConsider:\n- What information is needed to answer the query\n- Which documents are likely relevant based on the document index\n- What search queries and document passages to examine\n- What order of operations will be most efficient\n- Whether parallel searches can be used for different aspects\n\nRespond with ONLY the plan (numbered steps). Do not execute any steps.",
              *       "TEMPERATURE": 0.3,
              *       "MAX_TOKENS": 4000,
              *       "MAX_CHAR_SIZE_TO_ANSWER": 200000,
@@ -1882,6 +2010,18 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
+             *       "MODEL_NAME": "Fast",
+             *       "SYSTEM_INSTRUCTION": "You are a context selector. Given a user's query, conversation history, and a table of available documents, determine the user's goal and select relevant context.\n\n## Instructions\n\n1. **goal**: 1-2 concise sentences describing the user's intent AND your filtering rationale. Explain what documents are needed and why. Examples:\n   - \"The user is greeting the assistant. No documents are needed.\"\n   - \"The user wants to find force majeure clauses. Only the three contracts are relevant, so I will keep only those.\"\n   - \"The user wants a full timeline of the case. Most documents are relevant, so I will drop only the unrelated procedural orders.\"\n\n2. **doc_filter_mode** and **doc_ids**: Select which documents the agent needs.\n   - `\"keep\"` mode: `doc_ids` lists the ONLY docs to keep. Everything else is dropped.\n   - `\"drop\"` mode: `doc_ids` lists the ONLY docs to drop. Everything else is kept.\n   - Pick whichever mode produces the **shorter `doc_ids` list**.\n   - Doc IDs are in the **Id** column of the Available Documents table (e.g. `\"doc-abc12345\"`). Copy them **exactly** from the table — do not invent, guess, or modify IDs.\n\n   | Scenario | doc_filter_mode | doc_ids |\n   |----------|----------------|---------|\n   | Need ALL docs | `\"drop\"` | `[]` |\n   | Need NO docs | `\"keep\"` | `[]` |\n   | Need 3 of 100 docs | `\"keep\"` | `[\"id1\",\"id2\",\"id3\"]` |\n   | Drop 3 of 100 docs | `\"drop\"` | `[\"id1\",\"id2\",\"id3\"]` |\n\n3. **chat_range_start** and **chat_range_end**: 0-based inclusive range of earlier history messages that provide relevant context. The last 3 messages are always included automatically. Set both to -1 if no earlier history is needed.\n\n## Rules\n\n- **Never repeat a doc ID.** Each ID must appear at most once.\n- Before writing `doc_ids`, count how many you would keep vs drop, then pick the shorter list.\n- Greetings or meta-questions about the assistant (e.g. \"hello\", \"who are you?\", \"what can you do?\"): the agent does NOT need any documents → `\"keep\"` with `[]`.\n- Ambiguous references like \"the document\" or \"this contract\" without specifying which: keep all → `\"drop\"` with `[]`.\n- For follow-up questions, include history messages that establish the topic.\n- Always return valid JSON matching the schema.",
+             *       "TEMPERATURE": 0,
+             *       "MAX_TOKENS": 3000
+             *     }
+             */
+            FilterPlanLLM: components['schemas']['FilterPlanLLMConfig'];
+            /**
+             * @default {
+             *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": false,
              *       "MODEL_NAME": "Fast",
              *       "TEMPERATURE": 0.1,
              *       "MAX_TOKENS": 4000,
@@ -1893,6 +2033,7 @@ interface components {
             /**
              * @default {
              *       "API_TYPE": "remote",
+             *       "ENABLE_THINKING": true,
              *       "MODEL_NAME": "Premium",
              *       "SYSTEM_INSTRUCTION": "You are a code execution agent. You write and run code to accomplish tasks.\n\nYou have access to an execute_code tool that runs code in a sandboxed Docker container.\n\nThe sandbox has:\n- Python 3.12 with numpy, pandas, matplotlib, requests, beautifulsoup4,\n  httpx, pillow, sympy, pyyaml (plus uv for installing more)\n- Node.js 22 with TypeScript (ts-node) and npm\n- Bash with git, curl, wget, jq, sqlite3, build-essential\n- Network access (can pip/npm install additional packages)\n\nInstructions:\n1. Write clean, correct code to accomplish the user's task\n2. Always call execute_code to run your code — never guess the output\n3. If execution errors, analyze the traceback, fix the code, and retry\n4. Once you have the correct output, respond with ONLY the final result\n\nKeep code simple and direct. Prefer Python unless the task specifically requires another language.",
              *       "TEMPERATURE": 0.2,
@@ -1905,20 +2046,21 @@ interface components {
              * @default {
              *       "SIM_THREASHOLD": 0.5,
              *       "MIN_CHAR_SIZE_TO_ANSWER": 30,
-             *       "MAX_NUMB_CITATIONS": 5
+             *       "MAX_NUMB_CITATIONS": 5,
+             *       "CITATION_INSTRUCTION": "Judge whether the passage contains evidence that directly supports or sources the claim made in the query. Only answer yes if the passage provides the basis for the statement"
              *     }
              */
             ModelCitation: components['schemas']['ModelCitationConfig'];
             /**
              * @default {
-             *       "MIN_RETRIEVAL_SIM_SCORE": 0.3,
+             *       "MIN_RETRIEVAL_SIM_SCORE": 0.1,
              *       "MAX_DISTINCT_DOCUMENTS": 200,
              *       "MAX_TOTAL_CHUNKS_TO_RETRIEVE": 400,
              *       "GROUP_SIZE": 10000,
              *       "SEARCH_MODE": "semantic",
+             *       "HYBRID_PREFETCH_LIMIT": 500,
              *       "HYBRID_DENSE_WEIGHT": 0.7,
-             *       "HYBRID_SPARSE_WEIGHT": 0.3,
-             *       "HYBRID_RERANKER_WEIGHT": 0.5
+             *       "HYBRID_SPARSE_WEIGHT": 0.3
              *     }
              */
             Retriever: components['schemas']['RetrieverConfig'];
@@ -1928,7 +2070,8 @@ interface components {
              *       "MAX_NUMB_OF_CHUNKS": 30,
              *       "MAX_CONCURRENT_REQUESTS": 64,
              *       "MODEL_NAME": "Qwen/Qwen3-Reranker-0.6B",
-             *       "API_TYPE": "remote"
+             *       "API_TYPE": "remote",
+             *       "RETRIEVAL_INSTRUCTION": "Judge whether the passage contains the specific facts, figures, names, or references mentioned in the query. Only answer yes if the passage directly contains these details"
              *     }
              */
             Reranker: components['schemas']['RerankerConfig'];
@@ -2122,6 +2265,47 @@ interface components {
             /** Reason */
             reason?: string | null;
         };
+        /**
+         * AuthorizeRequest
+         * @description Authorize a delegated session with workspace keys.
+         *
+         *     Used by: POST /user/authorize (authenticated)
+         *
+         *     Frontend sends workspace keys SealedBox-encrypted with the user's session public key.
+         *     Server decrypts them, re-encrypts with a new session keypair, and creates a pending
+         *     session keyed by a 3-word claim code. The recipient redeems the code via POST /user/token.
+         *
+         *     If persist_identity is True, the claim creates a persistent Agent identity
+         *     with its own keypair and WorkspaceUsers rows. The agent can then re-login.
+         */
+        AuthorizeRequest: {
+            /** Workspaces */
+            workspaces: {
+                [key: string]: string;
+            };
+            /** Active Workspace */
+            active_workspace?: string | null;
+            /**
+             * Ttl
+             * @default 3600
+             */
+            ttl: number;
+            /**
+             * Persist Identity
+             * @default false
+             */
+            persist_identity: boolean;
+            /** Name */
+            name: string;
+        };
+        /**
+         * AuthorizeResponse
+         * @description Response containing a 3-word claim code for the recipient to retrieve a JWT.
+         */
+        AuthorizeResponse: {
+            /** Claim Code */
+            claim_code: string;
+        };
         /**
          * BatchCompleteMessage
          * @description Notification that a batch operation (upload or doctag generation) completed.
@@ -2339,6 +2523,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default true
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description Model for code generation. Should be a strong coding model.
@@ -2617,7 +2807,7 @@ interface components {
             target_workspace_ext_id: string;
             /**
              * Target Workspace Key
-             * @description SealedBox-encrypted target workspace key (same format as WorkspaceOpenRequest.workspace_key)
+             * @description SealedBox-encrypted target workspace key (encrypted with session public key)
              */
             target_workspace_key: string;
             /**
@@ -2728,6 +2918,14 @@ interface components {
             /** Parent Ext Id */
             parent_ext_id?: string | null;
         };
+        /**
+         * DeleteAgentsRequest
+         * @description Request to delete agents by external ID.
+         */
+        DeleteAgentsRequest: {
+            /** Agent Ext Ids */
+            agent_ext_ids: string[];
+        };
         /**
          * DeleteContactsRequest
          * @description Request model for deleting specific contacts.
@@ -2912,6 +3110,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The name of the non-reasoning model to be used.
@@ -3081,6 +3285,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The name of the non-reasoning model to be used.
@@ -3188,6 +3398,83 @@ interface components {
             /** Status Details */
             status_details?: string | null;
         };
+        /**
+         * FilterPlanLLMConfig
+         * @description Configuration for FilterPlanLLM — pre-agentic context selector.
+         *
+         *     Runs before the agent loop to select relevant history messages and documents,
+         *     plus produce a concise goal statement that primes the agent.
+         *     Always uses the fast model (LLM_MODEL_NAME). In auto mode, also recommends
+         *     a model tier (fast/wise/premium) for the agent loop.
+         */
+        FilterPlanLLMConfig: {
+            /**
+             * Api Type
+             * @description The inference type (local or remote).
+             * @default remote
+             * @enum {string}
+             */
+            API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
+            /**
+             * Model Name
+             * @description The name of the non-reasoning model to be used.
+             * @default Fast
+             */
+            MODEL_NAME: string;
+            /**
+             * System Instruction
+             * @description System prompt for the filter/plan LLM.
+             * @default You are a context selector. Given a user's query, conversation history, and a table of available documents, determine the user's goal and select relevant context.
+             *
+             *     ## Instructions
+             *
+             *     1. **goal**: 1-2 concise sentences describing the user's intent AND your filtering rationale. Explain what documents are needed and why. Examples:
+             *        - "The user is greeting the assistant. No documents are needed."
+             *        - "The user wants to find force majeure clauses. Only the three contracts are relevant, so I will keep only those."
+             *        - "The user wants a full timeline of the case. Most documents are relevant, so I will drop only the unrelated procedural orders."
+             *
+             *     2. **doc_filter_mode** and **doc_ids**: Select which documents the agent needs.
+             *        - `"keep"` mode: `doc_ids` lists the ONLY docs to keep. Everything else is dropped.
+             *        - `"drop"` mode: `doc_ids` lists the ONLY docs to drop. Everything else is kept.
+             *        - Pick whichever mode produces the **shorter `doc_ids` list**.
+             *        - Doc IDs are in the **Id** column of the Available Documents table (e.g. `"doc-abc12345"`). Copy them **exactly** from the table — do not invent, guess, or modify IDs.
+             *
+             *        | Scenario | doc_filter_mode | doc_ids |
+             *        |----------|----------------|---------|
+             *        | Need ALL docs | `"drop"` | `[]` |
+             *        | Need NO docs | `"keep"` | `[]` |
+             *        | Need 3 of 100 docs | `"keep"` | `["id1","id2","id3"]` |
+             *        | Drop 3 of 100 docs | `"drop"` | `["id1","id2","id3"]` |
+             *
+             *     3. **chat_range_start** and **chat_range_end**: 0-based inclusive range of earlier history messages that provide relevant context. The last 3 messages are always included automatically. Set both to -1 if no earlier history is needed.
+             *
+             *     ## Rules
+             *
+             *     - **Never repeat a doc ID.** Each ID must appear at most once.
+             *     - Before writing `doc_ids`, count how many you would keep vs drop, then pick the shorter list.
+             *     - Greetings or meta-questions about the assistant (e.g. "hello", "who are you?", "what can you do?"): the agent does NOT need any documents → `"keep"` with `[]`.
+             *     - Ambiguous references like "the document" or "this contract" without specifying which: keep all → `"drop"` with `[]`.
+             *     - For follow-up questions, include history messages that establish the topic.
+             *     - Always return valid JSON matching the schema.
+             */
+            SYSTEM_INSTRUCTION: string;
+            /**
+             * Temperature
+             * @default 0
+             */
+            TEMPERATURE: number;
+            /**
+             * Max Tokens
+             * @default 3000
+             */
+            MAX_TOKENS: number;
+        };
         /**
          * GenerateAnnotationsRequest
          * @description Request to generate AI annotations for documents using tag instructions.
@@ -3219,67 +3506,6 @@ interface components {
              */
             tag_ext_ids: string[];
         };
-        /**
-         * GetDocumentPassagesDetail
-         * @description Detail for a get_document_passages tool call.
-         */
-        GetDocumentPassagesDetail: {
-            /**
-             * Tool
-             * @default get_document_passages
-             * @constant
-             */
-            tool: 'get_document_passages';
-            /**
-             * Doc Ext Id
-             * @description Document external ID
-             */
-            doc_ext_id: string;
-            /**
-             * From Ref
-             * @description Start reference (page.chunk)
-             */
-            from_ref: string;
-            /**
-             * To Ref
-             * @description End reference (page.chunk)
-             */
-            to_ref: string;
-            /**
-             * Label
-             * @description Display label for the tool step
-             * @default Reading document
-             */
-            label: string;
-            /**
-             * Icon
-             * @description Lucide icon name for the tool step
-             * @default file-text
-             */
-            icon: string;
-            /**
-             * Summary
-             * @description Human-readable summary (e.g. 'Reading {doc-abc12345} pp. 5–10')
-             */
-            summary?: string | null;
-        };
-        /**
-         * GetFullDocumentDetail
-         * @description Detail for a get_full_document tool call.
-         */
-        GetFullDocumentDetail: {
-            /**
-             * Tool
-             * @default get_full_document
-             * @constant
-             */
-            tool: 'get_full_document';
-            /**
-             * Doc Ext Id
-             * @description Document external ID
-             */
-            doc_ext_id: string;
-        };
         /**
          * GetTableOfContentsDetail
          * @description Detail for a get_table_of_contents tool call.
@@ -3292,15 +3518,10 @@ interface components {
              */
             tool: 'get_table_of_contents';
             /**
-             * Doc Count
-             * @description Number of documents requested
-             */
-            doc_count: number;
-            /**
-             * Doc Ext Ids
-             * @description Document external IDs
+             * Doc Ext Id
+             * @description Document external ID
              */
-            doc_ext_ids: string[];
+            doc_ext_id: string;
             /**
              * Label
              * @description Display label for the tool step
@@ -3362,23 +3583,24 @@ interface components {
         };
         /**
          * LoginRequest
-         * @description Unified login request (local and SSO).
+         * @description Unified login request for users and agents.
          *
          *     For local users: email + signature + timestamp
          *     For SSO users: email + signature + timestamp + sso_token
+         *     For agents: agent_ext_id + signature + timestamp
+         *
+         *     Exactly one of ``email`` or ``agent_ext_id`` must be provided.
          *
          *     Authentication flow:
-         *     1. Client derives Ed25519 keypair from password
-         *     2. Client signs "email|timestamp" with Ed25519 private key
+         *     1. Client derives Ed25519 keypair from password (users) or has stored key (agents)
+         *     2. Client signs "identity|timestamp" with Ed25519 private key
          *     3. Server verifies signature using stored Ed25519 public key
-         *     4. Server derives X25519 from Ed25519 for session key encryption
          */
         LoginRequest: {
-            /**
-             * Email
-             * Format: email
-             */
-            email: string;
+            /** Email */
+            email?: string | null;
+            /** Agent Ext Id */
+            agent_ext_id?: string | null;
             /** Signature */
             signature: string;
             /** Timestamp */
@@ -3388,9 +3610,9 @@ interface components {
         };
         /**
          * LoginResponse
-         * @description Login response with access token, session key, and user info.
+         * @description Login response with access token, session key, user info, and workspaces.
          *
-         *     Used by: /user/login
+         *     Used by: /user/login, /user/token (claim agent session)
          */
         LoginResponse: {
             /** Access Token */
@@ -3398,6 +3620,13 @@ interface components {
             /** Session Key */
             session_key: string;
             user: components['schemas']['UserResponse'];
+            /**
+             * Workspaces
+             * @default []
+             */
+            workspaces: {
+                [key: string]: unknown;
+            }[];
         };
         /** LogoutResponse */
         LogoutResponse: {
@@ -3434,6 +3663,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The model for memory synthesis. Defaults to reasoning model.
@@ -3712,6 +3947,12 @@ interface components {
              * @default 5
              */
             MAX_NUMB_CITATIONS: number;
+            /**
+             * Citation Instruction
+             * @description Instruction for the <Instruct> tag when scoring chunks for citation attribution.
+             * @default Judge whether the passage contains evidence that directly supports or sources the claim made in the query. Only answer yes if the passage provides the basis for the statement
+             */
+            CITATION_INSTRUCTION: string;
         };
         /** ModelCitationTool */
         ModelCitationTool: {
@@ -3833,7 +4074,7 @@ interface components {
          *     Type is self-descriptive, no need to parse content field.
          * @enum {string}
          */
-        NotificationType: 'user_message' | 'workspaceuser_added_owner' | 'workspaceuser_added_collaborator' | 'workspaceuser_added_guest' | 'workspaceuser_removed' | 'workspaceuser_updated_owner' | 'workspaceuser_updated_collaborator' | 'workspaceuser_updated_guest' | 'contact_accepted' | 'email_reply';
+        NotificationType: 'user_message' | 'workspaceuser_added_owner' | 'workspaceuser_added_collaborator' | 'workspaceuser_added_guest' | 'workspaceuser_removed' | 'workspaceuser_updated_owner' | 'workspaceuser_updated_collaborator' | 'workspaceuser_updated_guest' | 'contact_accepted' | 'access_request' | 'access_code' | 'email_reply';
         /**
          * NotificationUpdate
          * @description Single notification update for bulk PATCH.
@@ -4028,6 +4269,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default true
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The model for plan generation. Defaults to reasoning model.
@@ -4040,8 +4287,8 @@ interface components {
              * @default You are a research planning assistant. Your job is to analyze a user query and produce a concise, numbered research plan.
              *
              *     You have access to a workspace of documents. The available tools for executing the plan are:
-             *     - search_documents: Search workspace documents for relevant passages (semantic, keyword, or hybrid)
-             *     - get_document_passages: Read a specific page range from a document
+             *     - search_inside_documents: Search workspace documents for relevant passages (semantic, keyword, or hybrid). Use digest=true to extract learnings.
+             *     - read_document: Read page ranges or entire documents. Use digest=true to extract learnings with citations.
              *     - get_table_of_contents: Get document headings with page references
              *
              *     Consider:
@@ -4141,6 +4388,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The model for query answering.
@@ -4172,6 +4425,50 @@ interface components {
              */
             MAX_TOKENS: number;
         };
+        /**
+         * ReadDocumentDetail
+         * @description Detail for a read_document tool call.
+         */
+        ReadDocumentDetail: {
+            /**
+             * Tool
+             * @default read_document
+             * @constant
+             */
+            tool: 'read_document';
+            /**
+             * Doc Ext Id
+             * @description Document external ID
+             */
+            doc_ext_id: string;
+            /**
+             * Range Count
+             * @description Number of page ranges requested (0 = full document)
+             */
+            range_count: number;
+            /**
+             * Digest
+             * @description Whether learnings extraction was requested
+             */
+            digest: boolean;
+            /**
+             * Label
+             * @description Display label for the tool step
+             * @default Reading document
+             */
+            label: string;
+            /**
+             * Icon
+             * @description Lucide icon name for the tool step
+             * @default file-text
+             */
+            icon: string;
+            /**
+             * Summary
+             * @description Human-readable summary (e.g. 'Reading {doc-abc12345} pp. 5–10')
+             */
+            summary?: string | null;
+        };
         /**
          * ReadUrlDetail
          * @description Detail for a read_url tool call.
@@ -4226,7 +4523,7 @@ interface components {
         };
         /**
          * RemoveWorkspaceUserItem
-         * @description A user to remove from a workspace.
+         * @description A user or agent to remove from a workspace.
          */
         RemoveWorkspaceUserItem: {
             /** User Ext Id */
@@ -4273,6 +4570,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Retrieval Instruction
+             * @description Instruction for the <Instruct> tag when reranking retrieval results against a user query.
+             * @default Judge whether the passage contains the specific facts, figures, names, or references mentioned in the query. Only answer yes if the passage directly contains these details
+             */
+            RETRIEVAL_INSTRUCTION: string;
         };
         /**
          * ResponseCompleteMessage
@@ -4886,7 +5189,7 @@ interface components {
             /**
              * Min Retrieval Sim Score
              * @description Minimum similarity score for retrieval of a chunk.
-             * @default 0.3
+             * @default 0.1
              */
             MIN_RETRIEVAL_SIM_SCORE: number;
             /**
@@ -4912,6 +5215,12 @@ interface components {
              * @default semantic
              */
             SEARCH_MODE: components['schemas']['SearchMode'];
+            /**
+             * Hybrid Prefetch Limit
+             * @description Maximum number of candidates each prefetch (dense and sparse) returns in hybrid mode before RRF fusion. Caps the sparse BM25 prefetch to avoid returning tens of thousands of chunks for common tokens.
+             * @default 500
+             */
+            HYBRID_PREFETCH_LIMIT: number;
             /**
              * Hybrid Dense Weight
              * @description Weight for dense vectors in hybrid mode
@@ -4924,12 +5233,6 @@ interface components {
              * @default 0.3
              */
             HYBRID_SPARSE_WEIGHT: number;
-            /**
-             * Hybrid Reranker Weight
-             * @description Weight for reranker score in hybrid mode score blending (0-1). RRF weight = 1 - this value
-             * @default 0.5
-             */
-            HYBRID_RERANKER_WEIGHT: number;
         };
         /**
          * ReviewLLMConfig
@@ -4943,6 +5246,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The model for reviewing agent draft answers. Defaults to reasoning model.
@@ -5068,11 +5377,10 @@ interface components {
             output_tokens_details?: components['schemas']['OutputTokensDetails'] | null;
             context_usage?: components['schemas']['ContextUsage'] | null;
             message_metadata?: components['schemas']['MessageMetadataPayload'] | null;
-            detail_search_documents?: components['schemas']['SearchDocumentsDetail'] | null;
-            detail_get_document_passages?: components['schemas']['GetDocumentPassagesDetail'] | null;
+            detail_search_inside_documents?: components['schemas']['SearchInsideDocumentsDetail'] | null;
+            detail_read_document?: components['schemas']['ReadDocumentDetail'] | null;
             detail_get_table_of_contents?: components['schemas']['GetTableOfContentsDetail'] | null;
             detail_view_document_pages?: components['schemas']['ViewDocumentPagesDetail'] | null;
-            detail_get_full_document?: components['schemas']['GetFullDocumentDetail'] | null;
             detail_web_search?: components['schemas']['WebSearchDetail'] | null;
             detail_personal_agent?: components['schemas']['PersonalAgentDetail'] | null;
             detail_read_url?: components['schemas']['ReadUrlDetail'] | null;
@@ -5189,16 +5497,16 @@ interface components {
             title: string;
         };
         /**
-         * SearchDocumentsDetail
-         * @description Detail for a search_documents tool call.
+         * SearchInsideDocumentsDetail
+         * @description Detail for a search_inside_documents tool call.
          */
-        SearchDocumentsDetail: {
+        SearchInsideDocumentsDetail: {
             /**
              * Tool
-             * @default search_documents
+             * @default search_inside_documents
              * @constant
              */
-            tool: 'search_documents';
+            tool: 'search_inside_documents';
             /**
              * Query
              * @description Search query (truncated to 80 chars)
@@ -5257,6 +5565,34 @@ interface components {
                 [key: string]: unknown;
             } | null;
         };
+        /**
+         * SessionInfoResponse
+         * @description Active session info returned by GET /user/sessions.
+         */
+        SessionInfoResponse: {
+            /** Session Id */
+            session_id: string;
+            /** External Id */
+            external_id?: string | null;
+            /** Name */
+            name?: string | null;
+            /** Ip Address */
+            ip_address?: string | null;
+            /** Active Workspace */
+            active_workspace?: string | null;
+            /**
+             * Workspaces
+             * @default []
+             */
+            workspaces: string[];
+            /**
+             * Status
+             * @default user
+             */
+            status: string;
+            /** Ttl */
+            ttl: number;
+        };
         /** ShareConversationResponse */
         ShareConversationResponse: {
             /**
@@ -5378,6 +5714,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The model for conversation summarisation. Defaults to reasoning model.
@@ -5556,6 +5898,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The name of the non-reasoning model to be used.
@@ -5798,9 +6146,10 @@ interface components {
         };
         /**
          * UpdateWorkspaceUserRolesRequest
-         * @description Request to update user roles in a workspace (PATCH /workspace/{id}/users).
+         * @description Request to update user or agent roles in a workspace (PATCH /workspace/{id}/users).
          *
-         *     All specified users are updated to the same role.
+         *     All specified users/agents are updated to the same role.
+         *     Accepts both usr-XXXXXXXX and agt-XXXXXXXX external IDs.
          */
         UpdateWorkspaceUserRolesRequest: {
             /** User Ext Ids */
@@ -5934,16 +6283,19 @@ interface components {
          * @description Standard user representation used across all endpoints.
          *
          *     Used for: login response, workspace users, contacts (when registered).
+         *     Agents have agt- prefix and may have nullable name/email fields.
          */
         UserResponse: {
             /** External Id */
             external_id: string;
+            /** Parent Ext Id */
+            parent_ext_id?: string | null;
             /** Email */
             email: string;
             /** Given Name */
             given_name: string;
             /** Family Name */
-            family_name: string;
+            family_name?: string | null;
             /** Picture */
             picture?: string | null;
             /** Encryption Public Key */
@@ -6017,6 +6369,11 @@ interface components {
              * @default false
              */
             show_pa_mode: boolean;
+            /**
+             * Show Agent Sessions
+             * @default false
+             */
+            show_agent_sessions: boolean;
             /**
              * Hide Online Status
              * @default false
@@ -6061,6 +6418,8 @@ interface components {
             show_templates?: boolean | null;
             /** Show Pa Mode */
             show_pa_mode?: boolean | null;
+            /** Show Agent Sessions */
+            show_agent_sessions?: boolean | null;
             /** Hide Online Status */
             hide_online_status?: boolean | null;
             /** Muted Users */
@@ -6123,7 +6482,7 @@ interface components {
          * VisionLLMConfig
          * @description Configuration for VisionLLM — visually inspects document pages.
          *
-         *     Used as a targeted fallback when text extraction (get_document_passages)
+         *     Used as a targeted fallback when text extraction (read_document)
          *     is insufficient, e.g. for figures, charts, tables, scanned pages.
          *     The prompt is constructed dynamically per call (no system instruction).
          */
@@ -6135,6 +6494,12 @@ interface components {
              * @enum {string}
              */
             API_TYPE: 'local' | 'remote';
+            /**
+             * Enable Thinking
+             * @description Enable reasoning/thinking mode.
+             * @default false
+             */
+            ENABLE_THINKING: boolean;
             /**
              * Model Name
              * @description The vision-capable model name (must support image inputs).
@@ -6232,22 +6597,25 @@ interface components {
              * @default false
              */
             is_public: boolean;
+            /** Workspace Key */
+            workspace_key: string;
         };
         /**
          * WorkspaceOpenRequest
-         * @description Request to open a workspace and get a workspace-scoped JWT.
+         * @description Request to open a workspace — stores encrypted key in session and sets active.
+         *
+         *     workspace_key is required for users (SealedBox-encrypted with session public key).
+         *     Agents omit it — their workspace keys are pre-populated via /agent-session.
          */
         WorkspaceOpenRequest: {
             /** Workspace Key */
-            workspace_key: string;
+            workspace_key?: string | null;
         };
         /**
          * WorkspaceOpenResponse
-         * @description Response from opening a workspace — includes workspace-scoped JWT and workspace data.
+         * @description Response from opening a workspace — workspace data (no new JWT).
          */
         WorkspaceOpenResponse: {
-            /** Access Token */
-            access_token: string;
             workspace: components['schemas']['WorkspaceResponse'];
             /** Conversations */
             conversations: components['schemas']['ConversationResponse'][];
@@ -6330,7 +6698,9 @@ interface components {
         };
         /**
          * WorkspaceUserResponse
-         * @description User with their role in a workspace.
+         * @description User (or agent) with their role in a workspace.
+         *
+         *     For agents: agent_ext_id is set (agt-XXXXXXXX), name is user.given_name.
          */
         WorkspaceUserResponse: {
             user: components['schemas']['UserResponse'];
@@ -6350,6 +6720,8 @@ interface components {
              * @default 0
              */
             document_count: number;
+            /** Agent Ext Id */
+            agent_ext_id?: string | null;
         };
     };
     responses: never;
@@ -6596,6 +6968,127 @@ interface operations {
             };
         };
     };
+    list_agents: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['UserResponse'][];
+                };
+            };
+        };
+    };
+    delete_agents: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['DeleteAgentsRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    authorize_session: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['AuthorizeRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['AuthorizeResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    claim_agent_session: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['AgentSessionClaimRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['LoginResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
     logout: {
         parameters: {
             query?: {
@@ -6628,6 +7121,26 @@ interface operations {
             };
         };
     };
+    list_sessions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['SessionInfoResponse'][];
+                };
+            };
+        };
+    };
     change_password: {
         parameters: {
             query?: never;
@@ -8634,22 +9147,9 @@ interface operations {
 interface TokenProvider {
     getAccessToken(): string | null;
 }
-interface WorkspaceKeyProvider {
-    getWorkspaceKeyHeader(): string | null;
-}
-interface WorkspaceKeyUrlConfig {
-    /** URL substrings that NEVER need workspace key */
-    excludePatterns: string[];
-    /** URL substrings that DO need workspace key */
-    includePatterns: string[];
-}
 interface BearerAuthMiddlewareConfig {
     tokenProvider: TokenProvider;
 }
-interface WorkspaceKeyMiddlewareConfig {
-    workspaceKeyProvider: WorkspaceKeyProvider;
-    urlConfig: WorkspaceKeyUrlConfig;
-}
 type ReloginHandler = () => Promise<string | null>;
 interface AutoReloginMiddlewareConfig {
     reloginHandler: ReloginHandler;
@@ -8672,7 +9172,7 @@ interface CryptoProvider {
     signMessage(message: string, privateKey: Uint8Array): string;
     deriveEncryptionKeypair(signingKeyPair: KeyPair$1): KeyPair$1;
     sealedBoxDecrypt(encryptedBase64: string, privateKey: Uint8Array): Uint8Array;
-    createWorkspaceKeyHeader(workspaceKey: Uint8Array, serverSessionKey: Uint8Array): Promise<string>;
+    sealKeyForSession(workspaceKey: Uint8Array, serverSessionKey: Uint8Array): Promise<string>;
     fromBase64(base64: string): Uint8Array;
 }
 interface SessionKeys {
@@ -8694,8 +9194,6 @@ interface AuthStateProvider {
     };
     getSelectedWorkspaceId(): string | null;
     setAccessToken(token: string): void;
-    clearWorkspaceHeaders(): void;
-    setCachedWorkspaceHeader(workspaceId: string, header: string): void;
 }
 interface SsoTokenProvider {
     getToken(): Promise<string | null>;
@@ -8723,11 +9221,11 @@ interface WorkspaceKeyRefreshProvider {
     getWrappedKey(accessToken: string, workspaceId: string): Promise<string | null>;
 }
 /**
- * Opens a workspace by calling the /open endpoint to get a workspace-scoped JWT.
- * Returns the new workspace-scoped access token, or null on failure.
+ * Opens a workspace by calling the /open endpoint to store keys on session.
+ * Returns true on success, null on failure.
  */
 interface WorkspaceOpenProvider {
-    openWorkspace(accessToken: string, workspaceId: string, encryptedWorkspaceKey: string): Promise<string | null>;
+    openWorkspace(accessToken: string, workspaceId: string, encryptedWorkspaceKey: string): Promise<boolean | null>;
 }
 type OnReloginSuccess = (data: {
     email: string;
@@ -8750,7 +9248,7 @@ interface ReloginDeps {
  * SessionManager - In-memory session state for SDK consumers
  *
  * Replaces Zustand for SDK consumers. Simple in-memory store with subscribe pattern.
- * Implements TokenProvider, WorkspaceKeyProvider, and AuthStateProvider —
+ * Implements TokenProvider and AuthStateProvider —
  * plugs directly into middleware and relogin handler without any framework.
  */
 
@@ -8759,7 +9257,6 @@ interface SessionState {
     userEmail: string | null;
     userExtId: string | null;
     selectedWorkspaceId: string | null;
-    cachedWorkspaceHeaders: Record<string, string>;
     isSsoMode: boolean;
     isAuth0Authenticated: boolean;
     auth0AccessToken: string | null;
@@ -8769,9 +9266,6 @@ interface SessionManager {
     setAccessToken(token: string | null): void;
     setUser(email: string, extId?: string): void;
     setSelectedWorkspace(id: string | null): void;
-    setCachedWorkspaceHeader(workspaceId: string, header: string): void;
-    clearWorkspaceHeaders(): void;
-    getWorkspaceKeyHeader(): string | null;
     setSsoState(opts: Partial<{
         isSsoMode: boolean;
         isAuth0Authenticated: boolean;
@@ -8845,9 +9339,10 @@ declare function generateKeyPairs(username: string, password: string, deployment
  */
 declare function signMessage(message: string, privateKey: Uint8Array): string;
 /**
- * Create Workspace-Key header for API requests using SealedBox
+ * Seal a workspace key with the session's X25519 public key (SealedBox).
+ * The result is sent to the backend in the /open request body.
  */
-declare function createWorkspaceKeyHeader(workspaceKey: Uint8Array, serverSessionPublicKey: Uint8Array): Promise<string>;
+declare function sealKeyForSession(workspaceKey: Uint8Array, serverSessionPublicKey: Uint8Array): Promise<string>;
 /**
  * Decrypt data using SealedBox (anonymous decryption).
  *
@@ -8874,6 +9369,11 @@ declare function derivePublicKey(privateKey: Uint8Array): Uint8Array;
  * Used when we have stored Ed25519 keys and need X25519 for encryption
  */
 declare function deriveEncryptionKeypairFromSigning(signingKeyPair: KeyPair): KeyPair;
+/**
+ * Generate a random Ed25519 signing keypair.
+ * Used for agent accounts that don't derive keys from a password.
+ */
+declare function generateRandomSigningKeypair(): KeyPair;
 /**
  * Precompute shared secret for ECDH encryption.
  *
@@ -9171,6 +9671,8 @@ interface LoginWithKeyParams {
 interface LoginResult {
     accessToken: string;
     userExtId?: string;
+    /** Owner's ext_id for agent accounts; null/undefined for human users */
+    parentExtId?: string | null;
     signingPrivateKey: Uint8Array;
     serverSessionKey: Uint8Array;
 }
@@ -9211,8 +9713,6 @@ interface ArbiClientOptions {
     baseUrl: string;
     /** Deployment domain used for deterministic key derivation (e.g. "mydeployment.com") */
     deploymentDomain: string;
-    /** Optional custom URL patterns for workspace key injection */
-    workspaceKeyUrlConfig?: WorkspaceKeyUrlConfig;
     /** URL patterns that should never trigger re-login */
     reloginExcludePatterns?: string[];
     /** Include credentials (cookies) in requests. Default: true */
@@ -9251,8 +9751,9 @@ interface ArbiClient {
         signMessage: typeof signMessage;
         sealedBoxDecrypt: typeof sealedBoxDecrypt;
         sealedBoxEncrypt: typeof sealedBoxEncrypt;
-        createWorkspaceKeyHeader: typeof createWorkspaceKeyHeader;
+        sealKeyForSession: typeof sealKeyForSession;
         deriveEncryptionKeypairFromSigning: typeof deriveEncryptionKeypairFromSigning;
+        generateRandomSigningKeypair: typeof generateRandomSigningKeypair;
         derivePublicKey: typeof derivePublicKey;
         base64ToBytes: typeof base64ToBytes;
         bytesToBase64: typeof bytesToBase64;
@@ -9280,19 +9781,6 @@ declare function createArbiClient(options: ArbiClientOptions): ArbiClient;
 
 declare function createBearerAuthMiddleware(config: BearerAuthMiddlewareConfig): Middleware;
 
-/**
- * Workspace Key Middleware
- *
- * Injects Workspace-Key header on workspace-scoped requests.
- * URL matching is data-driven via WorkspaceKeyUrlConfig.
- */
-
-/**
- * Check if a URL needs the Workspace-Key header based on URL patterns.
- */
-declare function needsWorkspaceKey(url: string, urlConfig: WorkspaceKeyUrlConfig): boolean;
-declare function createWorkspaceKeyMiddleware(config: WorkspaceKeyMiddlewareConfig): Middleware;
-
 /**
  * Auto Re-login Middleware
  *
@@ -9373,4 +9861,4 @@ declare function isMessageType<T extends WebSocketServerMessage>(msg: WebSocketS
  */
 declare function createReloginHandler(deps: ReloginDeps): () => Promise<string | null>;
 
-export { type $defs, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, type KeyPair, type LoginCredentials, type LoginParams, type LoginProvider, type LoginRequest, type LoginResult, type LoginWithKeyParams, type OnReloginSuccess, type PasswordChangeCredentials, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginHandler, type SessionData, type SessionKeys, type SessionManager, type SessionState, type SessionStorageProvider, type SsoTokenProvider, type TokenProvider, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyMiddlewareConfig, type WorkspaceKeyProvider, type WorkspaceKeyRefreshProvider, type WorkspaceKeyUrlConfig, type WorkspaceOpenProvider, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsConnectionClosedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, type components, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createReloginHandler, createSessionManager, createWorkspaceKeyHeader, createWorkspaceKeyMiddleware, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, hasSession, initSodium, initializeDatabase, isMessageType, needsWorkspaceKey, type operations, parseServerMessage, type paths, saveSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey, type webhooks };
+export { type $defs, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, type KeyPair, type LoginCredentials, type LoginParams, type LoginProvider, type LoginRequest, type LoginResult, type LoginWithKeyParams, type OnReloginSuccess, type PasswordChangeCredentials, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginHandler, type SessionData, type SessionKeys, type SessionManager, type SessionState, type SessionStorageProvider, type SsoTokenProvider, type TokenProvider, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceOpenProvider, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsConnectionClosedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, clearAllData, clearSession, type components, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createReloginHandler, createSessionManager, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, hasSession, initSodium, initializeDatabase, isMessageType, type operations, parseServerMessage, type paths, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey, type webhooks };