@arbidocs/client 0.3.64 → 0.3.65

package/dist/index.d.cts

@@ -210,8 +210,21 @@ interface paths {
         /**
          * Get User Contacts
          * @description Get all contacts created by the current user.
-         *     Uses RLS to enforce that users can only see their own contacts.
-         *     Includes registered user info when available.
+         *
+         *     The contacts RLS policy uses ``is_self_or_own_agent(created_by)``, which
+         *     intentionally lets a user's auto-provisioned agents read their own
+         *     contact rows when *they* are the caller. For the human-facing list
+         *     endpoint we narrow that down explicitly to ``created_by = current_user``,
+         *     so the user only sees contacts they themselves added. Includes
+         *     registered user info when available.
+         *
+         *     Agent contacts (``contact_user.external_id`` starting with ``agt-``) are
+         *     also filtered out — those are auto-provisioned helpers surfaced through
+         *     a dedicated UI panel, not the human contact list. We can't filter that
+         *     in SQL via a join: ``users`` RLS hides cross-owner-group rows, so a
+         *     left join would NULL out the human contact's user row and ``NULL LIKE
+         *     'agt-%'`` evaluates to NULL — which silently drops the contact. The
+         *     agent check lives below, after the security-definer user lookup.
          */
         get: operations['get_user_contacts'];
         put?: never;
@@ -639,46 +652,6 @@ interface paths {
         patch: operations['update_user_settings'];
         trace?: never;
     };
-    '/v1/user/request-deletion': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Request Account Deletion
-         * @description Schedule account deletion after a 30-day grace period.
-         */
-        post: operations['request_account_deletion'];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/v1/user/cancel-deletion': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Cancel Account Deletion
-         * @description Cancel a pending account deletion, restoring full access.
-         */
-        post: operations['cancel_account_deletion'];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     '/v1/user/me': {
         parameters: {
             query?: never;
@@ -1928,6 +1901,29 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/oauth/create_code': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create Oauth Code
+         * @description Create an OAuth authorization code after user consent.
+         *
+         *     Called by the /mcp-connect frontend page when the user clicks Allow.
+         *     Requires the user's active browser session JWT as the Bearer token.
+         */
+        post: operations['create_oauth_code_v1_oauth_create_code_post'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/responses': {
         parameters: {
             query?: never;
@@ -3209,25 +3205,6 @@ interface components {
             /** Email */
             email: string;
         };
-        /**
-         * RequestDeletionResponse
-         * @description Response returned when a user requests account deletion.
-         */
-        RequestDeletionResponse: {
-            /**
-             * Deletion Scheduled At
-             * Format: date-time
-             */
-            deletion_scheduled_at: string;
-        };
-        /**
-         * CancelDeletionResponse
-         * @description Response returned when a user cancels account deletion.
-         */
-        CancelDeletionResponse: {
-            /** Detail */
-            detail: string;
-        };
         /**
          * ConnectionClosedMessage
          * @description Sent when connection is closed (e.g., another tab opened).
@@ -3436,6 +3413,33 @@ interface components {
              */
             mode: string;
         };
+        /** CreateCodeRequest */
+        CreateCodeRequest: {
+            /** Client Id */
+            client_id: string;
+            /** Redirect Uri */
+            redirect_uri: string;
+            /** State */
+            state: string;
+            /** Code Challenge */
+            code_challenge?: string | null;
+            /** Code Challenge Method */
+            code_challenge_method?: string | null;
+            /**
+             * Scopes
+             * @default []
+             */
+            scopes: string[];
+        };
+        /** CreateCodeResponse */
+        CreateCodeResponse: {
+            /** Code */
+            code: string;
+            /** Redirect Uri */
+            redirect_uri: string;
+            /** State */
+            state: string;
+        };
         /**
          * CreateDocTagRequest
          * @description Apply a tag to one or more documents.
@@ -7551,11 +7555,6 @@ interface components {
             premium_model?: string | null;
             /** Picture */
             picture?: string | null;
-            /**
-             * Deletion Requested At
-             * Format: date-time
-             */
-            deletion_requested_at?: string | null;
         } & {
             [key: string]: unknown;
         };
@@ -8914,64 +8913,6 @@ interface operations {
             };
         };
     };
-    request_account_deletion: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['RequestDeletionResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
-    cancel_account_deletion: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['CancelDeletionResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
     list_test_accounts: {
         parameters: {
             query?: never;
@@ -10931,6 +10872,39 @@ interface operations {
             };
         };
     };
+    create_oauth_code_v1_oauth_create_code_post: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['CreateCodeRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['CreateCodeResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
     create_response: {
         parameters: {
             query?: never;

package/dist/index.d.ts

@@ -210,8 +210,21 @@ interface paths {
         /**
          * Get User Contacts
          * @description Get all contacts created by the current user.
-         *     Uses RLS to enforce that users can only see their own contacts.
-         *     Includes registered user info when available.
+         *
+         *     The contacts RLS policy uses ``is_self_or_own_agent(created_by)``, which
+         *     intentionally lets a user's auto-provisioned agents read their own
+         *     contact rows when *they* are the caller. For the human-facing list
+         *     endpoint we narrow that down explicitly to ``created_by = current_user``,
+         *     so the user only sees contacts they themselves added. Includes
+         *     registered user info when available.
+         *
+         *     Agent contacts (``contact_user.external_id`` starting with ``agt-``) are
+         *     also filtered out — those are auto-provisioned helpers surfaced through
+         *     a dedicated UI panel, not the human contact list. We can't filter that
+         *     in SQL via a join: ``users`` RLS hides cross-owner-group rows, so a
+         *     left join would NULL out the human contact's user row and ``NULL LIKE
+         *     'agt-%'`` evaluates to NULL — which silently drops the contact. The
+         *     agent check lives below, after the security-definer user lookup.
          */
         get: operations['get_user_contacts'];
         put?: never;
@@ -639,46 +652,6 @@ interface paths {
         patch: operations['update_user_settings'];
         trace?: never;
     };
-    '/v1/user/request-deletion': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Request Account Deletion
-         * @description Schedule account deletion after a 30-day grace period.
-         */
-        post: operations['request_account_deletion'];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/v1/user/cancel-deletion': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Cancel Account Deletion
-         * @description Cancel a pending account deletion, restoring full access.
-         */
-        post: operations['cancel_account_deletion'];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     '/v1/user/me': {
         parameters: {
             query?: never;
@@ -1928,6 +1901,29 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/oauth/create_code': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create Oauth Code
+         * @description Create an OAuth authorization code after user consent.
+         *
+         *     Called by the /mcp-connect frontend page when the user clicks Allow.
+         *     Requires the user's active browser session JWT as the Bearer token.
+         */
+        post: operations['create_oauth_code_v1_oauth_create_code_post'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/responses': {
         parameters: {
             query?: never;
@@ -3209,25 +3205,6 @@ interface components {
             /** Email */
             email: string;
         };
-        /**
-         * RequestDeletionResponse
-         * @description Response returned when a user requests account deletion.
-         */
-        RequestDeletionResponse: {
-            /**
-             * Deletion Scheduled At
-             * Format: date-time
-             */
-            deletion_scheduled_at: string;
-        };
-        /**
-         * CancelDeletionResponse
-         * @description Response returned when a user cancels account deletion.
-         */
-        CancelDeletionResponse: {
-            /** Detail */
-            detail: string;
-        };
         /**
          * ConnectionClosedMessage
          * @description Sent when connection is closed (e.g., another tab opened).
@@ -3436,6 +3413,33 @@ interface components {
              */
             mode: string;
         };
+        /** CreateCodeRequest */
+        CreateCodeRequest: {
+            /** Client Id */
+            client_id: string;
+            /** Redirect Uri */
+            redirect_uri: string;
+            /** State */
+            state: string;
+            /** Code Challenge */
+            code_challenge?: string | null;
+            /** Code Challenge Method */
+            code_challenge_method?: string | null;
+            /**
+             * Scopes
+             * @default []
+             */
+            scopes: string[];
+        };
+        /** CreateCodeResponse */
+        CreateCodeResponse: {
+            /** Code */
+            code: string;
+            /** Redirect Uri */
+            redirect_uri: string;
+            /** State */
+            state: string;
+        };
         /**
          * CreateDocTagRequest
          * @description Apply a tag to one or more documents.
@@ -7551,11 +7555,6 @@ interface components {
             premium_model?: string | null;
             /** Picture */
             picture?: string | null;
-            /**
-             * Deletion Requested At
-             * Format: date-time
-             */
-            deletion_requested_at?: string | null;
         } & {
             [key: string]: unknown;
         };
@@ -8914,64 +8913,6 @@ interface operations {
             };
         };
     };
-    request_account_deletion: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['RequestDeletionResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
-    cancel_account_deletion: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['CancelDeletionResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
     list_test_accounts: {
         parameters: {
             query?: never;
@@ -10931,6 +10872,39 @@ interface operations {
             };
         };
     };
+    create_oauth_code_v1_oauth_create_code_post: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['CreateCodeRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['CreateCodeResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
     create_response: {
         parameters: {
             query?: never;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbidocs/client",
-  "version": "0.3.64",
+  "version": "0.3.65",
   "description": "TypeScript SDK for the ARBI API — zero-knowledge auth, E2E encryption, and type-safe REST client",
   "type": "module",
   "main": "dist/index.cjs",