@arbidocs/client 0.4.169 → 0.5.1

package/dist/index.d.cts

@@ -38763,6 +38763,41 @@ declare function createWorkspaceKeys(deps: WorkspaceKeysDeps): WorkspaceKeys;
 /** The workspace a 409 `{detail: {code: "workspace_key_required", workspace_ext_id}}` names. */
 declare function workspaceKeyRequiredOf(body: unknown): string | null;
 
+/**
+ * Workspace opens, one at a time.
+ *
+ * The server keeps ONE open ("active") workspace per session, and every `POST /workspace/{id}/open`
+ * replaces it. Every request that does not name its workspace reads that one. Two opens in flight
+ * at once can land in either order, so the server may end on a workspace the client already left
+ * while the client believes the other is open: the next lists read would return the wrong
+ * workspace's data. So every open on a client goes through this queue (the SDK's
+ * `selectWorkspace`, the re-open after a lost workspace, the re-open after a re-login, the
+ * open-all): the server applies them in the order they were asked for, and ends on the last.
+ *
+ * The queue also says when the active workspace may have changed: `generation` moves whenever an
+ * open that may change it starts (or one fails, leaving it unknown), so a read can tell whether
+ * its response may belong to another workspace than the one it was issued for.
+ */
+interface WorkspaceOpens {
+    /**
+     * Run `open` alone: after every open queued before it, before any queued after it. `target` is
+     * read when it starts: the workspace it leaves active, or `null` when that is not one known
+     * workspace (an open-all).
+     */
+    run<T>(target: () => string | null, open: () => Promise<T>): Promise<T>;
+    /** An open is running or waiting. */
+    readonly busy: boolean;
+    /** Moves whenever an open that may change the server's active workspace starts or fails. */
+    readonly generation: number;
+    /** The workspace the last open left active on the server; `null` when unknown. */
+    readonly active: string | null;
+    /** Resolves once no open is running or waiting. */
+    idle(): Promise<void>;
+    /** The server session changed (a login, a re-login, a sign-out): nothing is known to be open. */
+    reset(): void;
+}
+declare function createWorkspaceOpens(): WorkspaceOpens;
+
 /**
  * storage.ts - IndexedDB Storage Module
  *
@@ -39098,6 +39133,12 @@ interface ArbiClient {
      * refused with 409 `workspace_key_required` primes the workspace it names and is sent again.
      */
     workspaceKeys: WorkspaceKeys;
+    /**
+     * Every workspace `/open` on this client, one at a time and in the order asked (the server keeps
+     * one active workspace per session, so concurrent opens could leave it on a workspace the client
+     * left). The SDK's `selectWorkspace` and the re-opens below all go through it.
+     */
+    workspaceOpens: WorkspaceOpens;
     /** High-level auth operations */
     auth: {
         register(params: RegisterParams): Promise<RegisterResult>;
@@ -39306,6 +39347,11 @@ interface OpenAllDeps {
         wrapped_key?: string | null;
     }> | null>;
     workspaceOpenProvider: WorkspaceOpenProvider;
+    /**
+     * The workspace to open last, so the session's active workspace ends on it (each `/open` makes
+     * its workspace the active one): the selected workspace.
+     */
+    lastWorkspace?: () => string | null;
 }
 /**
  * Returns `openAllWorkspaces()`: seal every workspace key the user holds to this server session
@@ -39316,4 +39362,4 @@ interface OpenAllDeps {
  */
 declare function createAllWorkspacesOpener(deps: OpenAllDeps): () => Promise<void>;
 
-export { type $defs, ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, CALL_KEY_BYTES, CHAT_KEY_BYTES, type CallPeer, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, ENCRYPTED_RECOVERY_KEY_SIZE, type KeyLoginCredentials, type KeyPair, type ListedWorkspaceKey, type LoginCredentials, type LoginParams, type LoginProfile, type LoginProvider, type LoginRequest, type LoginResponse, type LoginResult, type LoginWithKeyParams, type OfflineSealer, type OfflineSealerOptions, type OnReloginSuccess, type OpenAllDeps, type ParsedRecoveryUrl, type PasswordChangeCredentials, RECOVERY_KEY_ERRORS, type RecoveryKeyParams, type RecoveryKeyValidationResult, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginFailure, type ReloginHandler, type ReopenDeps, SECURE_MAIL_KEY_BYTES, type SealedSecureMail, type SecureMailCiphertexts, type SecureMailClaim, type SessionClaims, type SessionData, type SessionKeys, type SessionManager, type SessionManagerOptions, type SessionPersistence, type SessionSignIn, type SessionState, type SessionStateStorage, type SessionUser, type SignInHooks, type SsoTokenSource, type StoredSessionState, type TokenProvider, UNENCRYPTED_RECOVERY_KEY_SIZE, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceKeys, type WorkspaceOpenProvider, type WsAgentDmStatusMessage, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsChatMessageMessage, type WsChatReadMessage, type WsChatUpdatedMessage, type WsConnectionClosedMessage, type WsConversationMessagePostedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, type components, computeSharedSecret, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isEncryptedRecoveryKey, isMessageType, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, type operations, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, type paths, prewarmKeyPairs, readSessionClaims, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, type webhooks, workspaceKeyRequiredOf, wrapIdentityKey };
+export { type $defs, ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, CALL_KEY_BYTES, CHAT_KEY_BYTES, type CallPeer, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, ENCRYPTED_RECOVERY_KEY_SIZE, type KeyLoginCredentials, type KeyPair, type ListedWorkspaceKey, type LoginCredentials, type LoginParams, type LoginProfile, type LoginProvider, type LoginRequest, type LoginResponse, type LoginResult, type LoginWithKeyParams, type OfflineSealer, type OfflineSealerOptions, type OnReloginSuccess, type OpenAllDeps, type ParsedRecoveryUrl, type PasswordChangeCredentials, RECOVERY_KEY_ERRORS, type RecoveryKeyParams, type RecoveryKeyValidationResult, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginFailure, type ReloginHandler, type ReopenDeps, SECURE_MAIL_KEY_BYTES, type SealedSecureMail, type SecureMailCiphertexts, type SecureMailClaim, type SessionClaims, type SessionData, type SessionKeys, type SessionManager, type SessionManagerOptions, type SessionPersistence, type SessionSignIn, type SessionState, type SessionStateStorage, type SessionUser, type SignInHooks, type SsoTokenSource, type StoredSessionState, type TokenProvider, UNENCRYPTED_RECOVERY_KEY_SIZE, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceKeys, type WorkspaceOpenProvider, type WorkspaceOpens, type WsAgentDmStatusMessage, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsChatMessageMessage, type WsChatReadMessage, type WsChatUpdatedMessage, type WsConnectionClosedMessage, type WsConversationMessagePostedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, type components, computeSharedSecret, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceOpens, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isEncryptedRecoveryKey, isMessageType, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, type operations, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, type paths, prewarmKeyPairs, readSessionClaims, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, type webhooks, workspaceKeyRequiredOf, wrapIdentityKey };

package/dist/index.d.ts

@@ -38763,6 +38763,41 @@ declare function createWorkspaceKeys(deps: WorkspaceKeysDeps): WorkspaceKeys;
 /** The workspace a 409 `{detail: {code: "workspace_key_required", workspace_ext_id}}` names. */
 declare function workspaceKeyRequiredOf(body: unknown): string | null;
 
+/**
+ * Workspace opens, one at a time.
+ *
+ * The server keeps ONE open ("active") workspace per session, and every `POST /workspace/{id}/open`
+ * replaces it. Every request that does not name its workspace reads that one. Two opens in flight
+ * at once can land in either order, so the server may end on a workspace the client already left
+ * while the client believes the other is open: the next lists read would return the wrong
+ * workspace's data. So every open on a client goes through this queue (the SDK's
+ * `selectWorkspace`, the re-open after a lost workspace, the re-open after a re-login, the
+ * open-all): the server applies them in the order they were asked for, and ends on the last.
+ *
+ * The queue also says when the active workspace may have changed: `generation` moves whenever an
+ * open that may change it starts (or one fails, leaving it unknown), so a read can tell whether
+ * its response may belong to another workspace than the one it was issued for.
+ */
+interface WorkspaceOpens {
+    /**
+     * Run `open` alone: after every open queued before it, before any queued after it. `target` is
+     * read when it starts: the workspace it leaves active, or `null` when that is not one known
+     * workspace (an open-all).
+     */
+    run<T>(target: () => string | null, open: () => Promise<T>): Promise<T>;
+    /** An open is running or waiting. */
+    readonly busy: boolean;
+    /** Moves whenever an open that may change the server's active workspace starts or fails. */
+    readonly generation: number;
+    /** The workspace the last open left active on the server; `null` when unknown. */
+    readonly active: string | null;
+    /** Resolves once no open is running or waiting. */
+    idle(): Promise<void>;
+    /** The server session changed (a login, a re-login, a sign-out): nothing is known to be open. */
+    reset(): void;
+}
+declare function createWorkspaceOpens(): WorkspaceOpens;
+
 /**
  * storage.ts - IndexedDB Storage Module
  *
@@ -39098,6 +39133,12 @@ interface ArbiClient {
      * refused with 409 `workspace_key_required` primes the workspace it names and is sent again.
      */
     workspaceKeys: WorkspaceKeys;
+    /**
+     * Every workspace `/open` on this client, one at a time and in the order asked (the server keeps
+     * one active workspace per session, so concurrent opens could leave it on a workspace the client
+     * left). The SDK's `selectWorkspace` and the re-opens below all go through it.
+     */
+    workspaceOpens: WorkspaceOpens;
     /** High-level auth operations */
     auth: {
         register(params: RegisterParams): Promise<RegisterResult>;
@@ -39306,6 +39347,11 @@ interface OpenAllDeps {
         wrapped_key?: string | null;
     }> | null>;
     workspaceOpenProvider: WorkspaceOpenProvider;
+    /**
+     * The workspace to open last, so the session's active workspace ends on it (each `/open` makes
+     * its workspace the active one): the selected workspace.
+     */
+    lastWorkspace?: () => string | null;
 }
 /**
  * Returns `openAllWorkspaces()`: seal every workspace key the user holds to this server session
@@ -39316,4 +39362,4 @@ interface OpenAllDeps {
  */
 declare function createAllWorkspacesOpener(deps: OpenAllDeps): () => Promise<void>;
 
-export { type $defs, ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, CALL_KEY_BYTES, CHAT_KEY_BYTES, type CallPeer, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, ENCRYPTED_RECOVERY_KEY_SIZE, type KeyLoginCredentials, type KeyPair, type ListedWorkspaceKey, type LoginCredentials, type LoginParams, type LoginProfile, type LoginProvider, type LoginRequest, type LoginResponse, type LoginResult, type LoginWithKeyParams, type OfflineSealer, type OfflineSealerOptions, type OnReloginSuccess, type OpenAllDeps, type ParsedRecoveryUrl, type PasswordChangeCredentials, RECOVERY_KEY_ERRORS, type RecoveryKeyParams, type RecoveryKeyValidationResult, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginFailure, type ReloginHandler, type ReopenDeps, SECURE_MAIL_KEY_BYTES, type SealedSecureMail, type SecureMailCiphertexts, type SecureMailClaim, type SessionClaims, type SessionData, type SessionKeys, type SessionManager, type SessionManagerOptions, type SessionPersistence, type SessionSignIn, type SessionState, type SessionStateStorage, type SessionUser, type SignInHooks, type SsoTokenSource, type StoredSessionState, type TokenProvider, UNENCRYPTED_RECOVERY_KEY_SIZE, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceKeys, type WorkspaceOpenProvider, type WsAgentDmStatusMessage, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsChatMessageMessage, type WsChatReadMessage, type WsChatUpdatedMessage, type WsConnectionClosedMessage, type WsConversationMessagePostedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, type components, computeSharedSecret, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isEncryptedRecoveryKey, isMessageType, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, type operations, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, type paths, prewarmKeyPairs, readSessionClaims, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, type webhooks, workspaceKeyRequiredOf, wrapIdentityKey };
+export { type $defs, ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, type ArbiClient, type ArbiClientOptions, type AuthStateProvider, type AutoReloginMiddlewareConfig, type BearerAuthMiddlewareConfig, CALL_KEY_BYTES, CHAT_KEY_BYTES, type CallPeer, type ChangePasswordParams, type ChangePasswordRequest, type ChangePasswordResult, type CryptoProvider, ENCRYPTED_RECOVERY_KEY_SIZE, type KeyLoginCredentials, type KeyPair, type ListedWorkspaceKey, type LoginCredentials, type LoginParams, type LoginProfile, type LoginProvider, type LoginRequest, type LoginResponse, type LoginResult, type LoginWithKeyParams, type OfflineSealer, type OfflineSealerOptions, type OnReloginSuccess, type OpenAllDeps, type ParsedRecoveryUrl, type PasswordChangeCredentials, RECOVERY_KEY_ERRORS, type RecoveryKeyParams, type RecoveryKeyValidationResult, type RegisterParams, type RegisterRequest, type RegisterResult, type RegistrationCredentials, type ReloginDeps, type ReloginFailure, type ReloginHandler, type ReopenDeps, SECURE_MAIL_KEY_BYTES, type SealedSecureMail, type SecureMailCiphertexts, type SecureMailClaim, type SessionClaims, type SessionData, type SessionKeys, type SessionManager, type SessionManagerOptions, type SessionPersistence, type SessionSignIn, type SessionState, type SessionStateStorage, type SessionUser, type SignInHooks, type SsoTokenSource, type StoredSessionState, type TokenProvider, UNENCRYPTED_RECOVERY_KEY_SIZE, type UserKeypairs, type WebSocketClientMessage, type WebSocketServerMessage, type WorkspaceKeyRefreshProvider, type WorkspaceKeys, type WorkspaceOpenProvider, type WorkspaceOpens, type WsAgentDmStatusMessage, type WsAuthMessage, type WsAuthResultMessage, type WsBatchCompleteMessage, type WsChatMessageMessage, type WsChatReadMessage, type WsChatUpdatedMessage, type WsConnectionClosedMessage, type WsConversationMessagePostedMessage, type WsErrorMessage, type WsNotificationResponse, type WsPresenceUpdateMessage, type WsResponseCompleteMessage, type WsTaskUpdateMessage, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, type components, computeSharedSecret, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceOpens, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isEncryptedRecoveryKey, isMessageType, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, type operations, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, type paths, prewarmKeyPairs, readSessionClaims, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, type webhooks, workspaceKeyRequiredOf, wrapIdentityKey };

package/dist/index.js

@@ -1220,6 +1220,59 @@ function workspaceKeyRequiredOf(body) {
   return d.code === "workspace_key_required" && typeof d.workspace_ext_id === "string" ? d.workspace_ext_id : null;
 }
 
+// src/workspace-opens.ts
+function createWorkspaceOpens() {
+  let tail = Promise.resolve();
+  let pending = 0;
+  let generation = 0;
+  let active = null;
+  return {
+    run(target, open) {
+      pending++;
+      const result = tail.then(async () => {
+        const workspaceId = target();
+        if (workspaceId === null || workspaceId !== active) {
+          generation++;
+          active = null;
+        }
+        try {
+          const value = await open();
+          active = workspaceId;
+          return value;
+        } catch (error) {
+          generation++;
+          active = null;
+          throw error;
+        }
+      });
+      const done = () => {
+        pending--;
+      };
+      tail = result.then(done, done);
+      return result;
+    },
+    get busy() {
+      return pending > 0;
+    },
+    get generation() {
+      return generation;
+    },
+    get active() {
+      return active;
+    },
+    async idle() {
+      for (let current = tail; ; current = tail) {
+        await current;
+        if (current === tail && pending === 0) return;
+      }
+    },
+    reset() {
+      generation++;
+      active = null;
+    }
+  };
+}
+
 // src/middleware/auto-relogin.ts
 var NO_ACTIVE_WORKSPACE = /no active workspace/i;
 async function keyRequiredWorkspace(response) {
@@ -1498,7 +1551,11 @@ function createAllWorkspacesOpener(deps) {
     } catch {
       return;
     }
-    for (const ws of workspaces ?? []) {
+    const last = deps.lastWorkspace?.() ?? null;
+    const ordered = [...workspaces ?? []].sort(
+      (a, b) => Number(a.external_id === last) - Number(b.external_id === last)
+    );
+    for (const ws of ordered) {
       if (!ws.wrapped_key || !ws.external_id) continue;
       try {
         const workspaceKey = deps.unwrapWorkspaceKey(ws.wrapped_key, session.signingPrivateKey);
@@ -1747,7 +1804,7 @@ function readBaseUrlPerRequest(fetchClient, base) {
 }
 var deploymentDomainOf = ({ deploymentDomain }) => typeof deploymentDomain === "function" ? deploymentDomain() : deploymentDomain;
 function createArbiClient(options) {
-  const { fetch: fetch2, session, persistence, workspaceKeys, auth } = createTransport(options);
+  const { fetch: fetch2, session, persistence, workspaceKeys, workspaceOpens, auth } = createTransport(options);
   const authDeps = {
     fetchClient: fetch2,
     session,
@@ -1760,6 +1817,7 @@ function createArbiClient(options) {
   return {
     fetch: fetch2,
     workspaceKeys,
+    workspaceOpens,
     session,
     auth: {
       register: (params) => register(params, authDeps),
@@ -1885,10 +1943,14 @@ function createTransport(options) {
       if (!response.ok) throw new Error(`Could not unlock the workspace (${response.status})`);
     }
   });
+  const workspaceOpens = createWorkspaceOpens();
   let keysUser = session.getState().signedIn ? session.getState().userExtId : null;
   session.subscribe((state) => {
     const user = state.signedIn ? state.userExtId : null;
-    if (user !== keysUser) workspaceKeys.clear();
+    if (user !== keysUser) {
+      workspaceKeys.clear();
+      workspaceOpens.reset();
+    }
     keysUser = user;
   });
   const workspaceKeyRefreshProvider = {
@@ -1896,7 +1958,7 @@ function createTransport(options) {
       return (await workspaceKeys.wrappedKey(workspaceId).catch(() => null))?.wrappedKey ?? null;
     }
   };
-  const workspaceOpenProvider = {
+  const rawWorkspaceOpenProvider = {
     async openWorkspace(accessToken, workspaceId, encryptedWorkspaceKey) {
       const query = "?include_documents=false&include_conversations=false&include_tags=false";
       try {
@@ -1918,6 +1980,16 @@ function createTransport(options) {
       }
     }
   };
+  const workspaceOpenProvider = {
+    openWorkspace: (accessToken, workspaceId, encryptedWorkspaceKey) => workspaceOpens.busy ? Promise.resolve(true) : workspaceOpens.run(
+      () => workspaceId,
+      () => rawWorkspaceOpenProvider.openWorkspace(
+        accessToken,
+        workspaceId,
+        encryptedWorkspaceKey
+      )
+    )
+  };
   let lastFailure = null;
   const expiredListeners = /* @__PURE__ */ new Set();
   const rawRelogin = createReloginHandler({
@@ -1951,15 +2023,19 @@ function createTransport(options) {
     }
     return null;
   }
-  const reopenWorkspace = createWorkspaceReopener({
+  const reopenSelected = createWorkspaceReopener({
     crypto: cryptoProvider,
     persistence,
     authState,
     getAccessToken: () => session.getState().accessToken,
     workspaceKeyRefreshProvider,
-    workspaceOpenProvider
+    workspaceOpenProvider: rawWorkspaceOpenProvider
+  });
+  let reopening = null;
+  const reopenWorkspace = () => reopening ??= workspaceOpens.run(() => authState.getSelectedWorkspaceId(), reopenSelected).finally(() => {
+    reopening = null;
   });
-  const openAllWorkspaces = createAllWorkspacesOpener({
+  const openEveryWorkspace = createAllWorkspacesOpener({
     crypto: cryptoProvider,
     persistence,
     getAccessToken: () => session.getState().accessToken,
@@ -1969,8 +2045,10 @@ function createTransport(options) {
       const list = await listWorkspaces(accessToken);
       return list && workspaceKeys.remember(list);
     },
-    workspaceOpenProvider
+    workspaceOpenProvider: rawWorkspaceOpenProvider,
+    lastWorkspace: () => authState.getSelectedWorkspaceId()
   });
+  const openAllWorkspaces = () => workspaceOpens.run(() => null, openEveryWorkspace);
   const fetchClient = createFetchClient({
     baseUrl: base(),
     credentials,
@@ -1999,6 +2077,7 @@ function createTransport(options) {
     session,
     persistence,
     workspaceKeys,
+    workspaceOpens,
     auth: {
       relogin,
       reopenWorkspace,
@@ -2094,6 +2173,6 @@ function isMessageType(msg, type) {
   return msg.type === type;
 }
 
-export { ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, CALL_KEY_BYTES, CHAT_KEY_BYTES, ENCRYPTED_RECOVERY_KEY_SIZE, RECOVERY_KEY_ERRORS, SECURE_MAIL_KEY_BYTES, UNENCRYPTED_RECOVERY_KEY_SIZE, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, computeSharedSecret, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isEncryptedRecoveryKey, isMessageType, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, readSessionClaims, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, workspaceKeyRequiredOf, wrapIdentityKey };
+export { ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, CALL_KEY_BYTES, CHAT_KEY_BYTES, ENCRYPTED_RECOVERY_KEY_SIZE, RECOVERY_KEY_ERRORS, SECURE_MAIL_KEY_BYTES, UNENCRYPTED_RECOVERY_KEY_SIZE, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, computeSharedSecret, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceOpens, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isEncryptedRecoveryKey, isMessageType, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, readSessionClaims, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, workspaceKeyRequiredOf, wrapIdentityKey };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map