@arbidocs/client 0.4.49 → 0.4.50

package/dist/index.d.cts

@@ -1034,7 +1034,13 @@ interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Bootstrap Native */
+        /**
+         * Bootstrap Native
+         * @description Initial content of a room: its stored state, or the source document.
+         *
+         *     ``fresh`` ignores stored state so the collaboration service can start over from the saved document
+         *     when the state was written in a room format it no longer reads.
+         */
         get: operations['bootstrap_native_v1_editor_internal_rooms__room_id__bootstrap_get'];
         put?: never;
         post?: never;
@@ -2640,6 +2646,54 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/notifications/attachments': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Upload Dm Attachment
+         * @description Upload one client-encrypted DM attachment (multipart ``file``, at most 15 MB).
+         *
+         *     The body is SecretBox ciphertext the client produced with a fresh per-file key; the server stores it
+         *     as-is and never sees the key. Upload once, then name the returned ``external_id`` in
+         *     ``attachment_ext_ids`` when sending the DM — to any number of recipients. An upload that is never
+         *     sent is removed after 24 hours.
+         */
+        post: operations['upload_dm_attachment'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/notifications/attachments/{external_id}': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Download Dm Attachment
+         * @description Download a DM attachment's ciphertext.
+         *
+         *     Allowed for the uploader and for the sender or recipient of a DM that links it; everyone else gets
+         *     404, the same as for an id that does not exist. The client decrypts with the key from its manifest.
+         */
+        get: operations['download_dm_attachment'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/notifications/': {
         parameters: {
             query?: never;
@@ -2668,12 +2722,17 @@ interface paths {
          *     Creates bilateral notifications visible to both sender and recipient.
          *     If recipient is online via WebSocket, delivers in real-time.
          *
+         *     ``attachment_ext_ids`` must be the sender's own uploads (404 otherwise); each is linked to every
+         *     notification created here, and each recipient's ``attachments`` manifest carries the keys.
+         *
          *     Returns the created notifications.
          */
         post: operations['send_messages'];
         /**
          * Delete Notifications
          * @description Delete one or more notifications (bilateral - sender or recipient can delete).
+         *
+         *     Deleting a DM drops its attachment links; an attachment no DM links any more is deleted with its blob.
          */
         delete: operations['delete_notifications'];
         options?: never;
@@ -2684,6 +2743,7 @@ interface paths {
          *
          *     Supports:
          *     - content: Re-encrypt content (sender OR recipient can do this)
+         *     - attachments: Re-encrypt the attachment manifest (sender OR recipient; blobs are untouched)
          *     - read: Mark as read (only recipient can do this)
          *
          *     Returns the updated notifications.
@@ -7325,6 +7385,16 @@ interface components {
             /** External Ids */
             external_ids: string[];
         };
+        /**
+         * DmAttachmentUploadResponse
+         * @description An uploaded, client-encrypted DM attachment blob.
+         */
+        DmAttachmentUploadResponse: {
+            /** External Id */
+            external_id: string;
+            /** Size Bytes */
+            size_bytes: number;
+        };
         /**
          * DocMetadata
          * @description Structured model for document metadata stored in JSONB column.
@@ -8834,6 +8904,22 @@ interface components {
             /** Access */
             access: string;
         };
+        /** MailDeliveryRecipient */
+        MailDeliveryRecipient: {
+            /** Email */
+            email: string;
+            /**
+             * Status
+             * @enum {string}
+             */
+            status: 'accepted' | 'rejected' | 'delayed' | 'failed' | 'delivered' | 'relayed' | 'expanded';
+            /** Code */
+            code?: string | null;
+            /** Description */
+            description: string;
+            /** Updated At */
+            updated_at: string;
+        };
         /** MailDraftSaved */
         MailDraftSaved: {
             /** Id */
@@ -8902,6 +8988,10 @@ interface components {
             attachments?: components['schemas']['MailAttachment'][];
             /** Drafted By */
             drafted_by?: string | null;
+            /** Delivery Status */
+            delivery_status?: ('sent' | 'delivered' | 'delayed' | 'partially_bounced' | 'bounced') | null;
+            /** Delivery */
+            delivery?: components['schemas']['MailDeliveryRecipient'][];
         };
         /** MailMessagePage */
         MailMessagePage: {
@@ -9356,6 +9446,8 @@ interface components {
             recipient_ext_id: string;
             /** Content */
             content: string;
+            /** Attachments */
+            attachments?: string | null;
         };
         /**
          * MessageResponse
@@ -9662,6 +9754,8 @@ interface components {
             dm_context_only: boolean;
             /** Content */
             content?: string | null;
+            /** Attachments */
+            attachments?: string | null;
             /** Conversation Ext Id */
             conversation_ext_id?: string | null;
             /** Message Ext Id */
@@ -9689,13 +9783,14 @@ interface components {
          *     Type is self-descriptive, no need to parse content field.
          * @enum {string}
          */
-        NotificationType: 'user_message' | 'workspaceuser_added_owner' | 'workspaceuser_added_collaborator' | 'workspaceuser_added_guest' | 'workspaceuser_removed' | 'workspaceuser_updated_owner' | 'workspaceuser_updated_collaborator' | 'workspaceuser_updated_guest' | 'contact_accepted' | 'signup_reward' | 'referral_reward' | 'native_mail_received' | 'mail_draft_ready' | 'email_reply' | 'quota_threshold_50' | 'quota_threshold_90' | 'quota_threshold_100' | 'doc_shared' | 'docx_mention' | 'workspace_access_request' | 'conversation_ready_for_review' | 'conversation_done' | 'conversation_approval_request' | 'conversation_notified' | 'workflow_failed' | 'agent_input_requested' | 'workflow_completed' | 'mailbox_sync_complete' | 'drive_sync_complete' | 'activity' | 'mention';
+        NotificationType: 'user_message' | 'workspaceuser_added_owner' | 'workspaceuser_added_collaborator' | 'workspaceuser_added_guest' | 'workspaceuser_removed' | 'workspaceuser_updated_owner' | 'workspaceuser_updated_collaborator' | 'workspaceuser_updated_guest' | 'contact_accepted' | 'signup_reward' | 'referral_reward' | 'native_mail_received' | 'mail_draft_ready' | 'email_reply' | 'quota_threshold_50' | 'quota_threshold_90' | 'quota_threshold_100' | 'doc_shared' | 'docx_mention' | 'workspace_access_request' | 'conversation_ready_for_review' | 'conversation_done' | 'conversation_approval_request' | 'conversation_notified' | 'workflow_failed' | 'agent_input_requested' | 'workflow_completed' | 'task_started' | 'task_completed' | 'mailbox_sync_complete' | 'drive_sync_complete' | 'activity' | 'mention';
         /**
          * NotificationUpdate
          * @description Single notification update for bulk PATCH.
          *
-         *     Supports two operations:
+         *     Supports three operations:
          *     - content: Re-encrypt content (key rotation)
+         *     - attachments: Re-encrypt the attachment manifest (key rotation; the blobs are never touched)
          *     - read: Mark as read (only recipient can do this)
          */
         NotificationUpdate: {
@@ -9703,6 +9798,8 @@ interface components {
             external_id: string;
             /** Content */
             content?: string | null;
+            /** Attachments */
+            attachments?: string | null;
             /** Read */
             read?: boolean | null;
         };
@@ -11900,8 +11997,6 @@ interface components {
             request_id: string;
             /** Draft Id */
             draft_id?: string | null;
-            /** Conversation Ext Id */
-            conversation_ext_id?: string | null;
             /** Recipients */
             recipients: components['schemas']['SecureMailRecipient'][];
             /** Ciphertext */
@@ -11919,6 +12014,11 @@ interface components {
          *
          *     Each recipient gets the same logical message, encrypted with their
          *     individual shared key (derived from X25519 DH).
+         *
+         *     ``attachment_ext_ids`` names ciphertext blobs the sender uploaded through
+         *     ``POST /v1/notifications/attachments``; each is linked to every notification
+         *     this request creates. The keys that open them travel in each recipient's
+         *     encrypted ``attachments`` manifest.
          */
         SendMessageRequest: {
             /** Workspace Ext Id */
@@ -11930,6 +12030,8 @@ interface components {
             context_only: boolean;
             /** Messages */
             messages: components['schemas']['MessageRecipient'][];
+            /** Attachment Ext Ids */
+            attachment_ext_ids?: string[];
         };
         /** ServiceStatus */
         ServiceStatus: {
@@ -13343,7 +13445,7 @@ interface components {
             show_connector_sharepoint: boolean;
             /**
              * Show Connector Google
-             * @default false
+             * @default true
              */
             show_connector_google: boolean;
             /**
@@ -15527,7 +15629,9 @@ interface operations {
     };
     bootstrap_native_v1_editor_internal_rooms__room_id__bootstrap_get: {
         parameters: {
-            query?: never;
+            query?: {
+                fresh?: boolean;
+            };
             header?: never;
             path: {
                 room_id: string;
@@ -17931,6 +18035,81 @@ interface operations {
             };
         };
     };
+    upload_dm_attachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'multipart/form-data': {
+                    /**
+                     * Format: binary
+                     * @description The client-encrypted attachment (SecretBox ciphertext, nonce-prefixed)
+                     */
+                    file: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['DmAttachmentUploadResponse'];
+                };
+            };
+            /** @description Attachment exceeds the 15 MB limit */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    download_dm_attachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                external_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The attachment ciphertext */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/octet-stream': string;
+                };
+            };
+            /** @description No such attachment, or not visible to the caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
     get_notifications: {
         parameters: {
             query?: {

package/dist/index.d.ts

@@ -1034,7 +1034,13 @@ interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Bootstrap Native */
+        /**
+         * Bootstrap Native
+         * @description Initial content of a room: its stored state, or the source document.
+         *
+         *     ``fresh`` ignores stored state so the collaboration service can start over from the saved document
+         *     when the state was written in a room format it no longer reads.
+         */
         get: operations['bootstrap_native_v1_editor_internal_rooms__room_id__bootstrap_get'];
         put?: never;
         post?: never;
@@ -2640,6 +2646,54 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/notifications/attachments': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Upload Dm Attachment
+         * @description Upload one client-encrypted DM attachment (multipart ``file``, at most 15 MB).
+         *
+         *     The body is SecretBox ciphertext the client produced with a fresh per-file key; the server stores it
+         *     as-is and never sees the key. Upload once, then name the returned ``external_id`` in
+         *     ``attachment_ext_ids`` when sending the DM — to any number of recipients. An upload that is never
+         *     sent is removed after 24 hours.
+         */
+        post: operations['upload_dm_attachment'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/notifications/attachments/{external_id}': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Download Dm Attachment
+         * @description Download a DM attachment's ciphertext.
+         *
+         *     Allowed for the uploader and for the sender or recipient of a DM that links it; everyone else gets
+         *     404, the same as for an id that does not exist. The client decrypts with the key from its manifest.
+         */
+        get: operations['download_dm_attachment'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/notifications/': {
         parameters: {
             query?: never;
@@ -2668,12 +2722,17 @@ interface paths {
          *     Creates bilateral notifications visible to both sender and recipient.
          *     If recipient is online via WebSocket, delivers in real-time.
          *
+         *     ``attachment_ext_ids`` must be the sender's own uploads (404 otherwise); each is linked to every
+         *     notification created here, and each recipient's ``attachments`` manifest carries the keys.
+         *
          *     Returns the created notifications.
          */
         post: operations['send_messages'];
         /**
          * Delete Notifications
          * @description Delete one or more notifications (bilateral - sender or recipient can delete).
+         *
+         *     Deleting a DM drops its attachment links; an attachment no DM links any more is deleted with its blob.
          */
         delete: operations['delete_notifications'];
         options?: never;
@@ -2684,6 +2743,7 @@ interface paths {
          *
          *     Supports:
          *     - content: Re-encrypt content (sender OR recipient can do this)
+         *     - attachments: Re-encrypt the attachment manifest (sender OR recipient; blobs are untouched)
          *     - read: Mark as read (only recipient can do this)
          *
          *     Returns the updated notifications.
@@ -7325,6 +7385,16 @@ interface components {
             /** External Ids */
             external_ids: string[];
         };
+        /**
+         * DmAttachmentUploadResponse
+         * @description An uploaded, client-encrypted DM attachment blob.
+         */
+        DmAttachmentUploadResponse: {
+            /** External Id */
+            external_id: string;
+            /** Size Bytes */
+            size_bytes: number;
+        };
         /**
          * DocMetadata
          * @description Structured model for document metadata stored in JSONB column.
@@ -8834,6 +8904,22 @@ interface components {
             /** Access */
             access: string;
         };
+        /** MailDeliveryRecipient */
+        MailDeliveryRecipient: {
+            /** Email */
+            email: string;
+            /**
+             * Status
+             * @enum {string}
+             */
+            status: 'accepted' | 'rejected' | 'delayed' | 'failed' | 'delivered' | 'relayed' | 'expanded';
+            /** Code */
+            code?: string | null;
+            /** Description */
+            description: string;
+            /** Updated At */
+            updated_at: string;
+        };
         /** MailDraftSaved */
         MailDraftSaved: {
             /** Id */
@@ -8902,6 +8988,10 @@ interface components {
             attachments?: components['schemas']['MailAttachment'][];
             /** Drafted By */
             drafted_by?: string | null;
+            /** Delivery Status */
+            delivery_status?: ('sent' | 'delivered' | 'delayed' | 'partially_bounced' | 'bounced') | null;
+            /** Delivery */
+            delivery?: components['schemas']['MailDeliveryRecipient'][];
         };
         /** MailMessagePage */
         MailMessagePage: {
@@ -9356,6 +9446,8 @@ interface components {
             recipient_ext_id: string;
             /** Content */
             content: string;
+            /** Attachments */
+            attachments?: string | null;
         };
         /**
          * MessageResponse
@@ -9662,6 +9754,8 @@ interface components {
             dm_context_only: boolean;
             /** Content */
             content?: string | null;
+            /** Attachments */
+            attachments?: string | null;
             /** Conversation Ext Id */
             conversation_ext_id?: string | null;
             /** Message Ext Id */
@@ -9689,13 +9783,14 @@ interface components {
          *     Type is self-descriptive, no need to parse content field.
          * @enum {string}
          */
-        NotificationType: 'user_message' | 'workspaceuser_added_owner' | 'workspaceuser_added_collaborator' | 'workspaceuser_added_guest' | 'workspaceuser_removed' | 'workspaceuser_updated_owner' | 'workspaceuser_updated_collaborator' | 'workspaceuser_updated_guest' | 'contact_accepted' | 'signup_reward' | 'referral_reward' | 'native_mail_received' | 'mail_draft_ready' | 'email_reply' | 'quota_threshold_50' | 'quota_threshold_90' | 'quota_threshold_100' | 'doc_shared' | 'docx_mention' | 'workspace_access_request' | 'conversation_ready_for_review' | 'conversation_done' | 'conversation_approval_request' | 'conversation_notified' | 'workflow_failed' | 'agent_input_requested' | 'workflow_completed' | 'mailbox_sync_complete' | 'drive_sync_complete' | 'activity' | 'mention';
+        NotificationType: 'user_message' | 'workspaceuser_added_owner' | 'workspaceuser_added_collaborator' | 'workspaceuser_added_guest' | 'workspaceuser_removed' | 'workspaceuser_updated_owner' | 'workspaceuser_updated_collaborator' | 'workspaceuser_updated_guest' | 'contact_accepted' | 'signup_reward' | 'referral_reward' | 'native_mail_received' | 'mail_draft_ready' | 'email_reply' | 'quota_threshold_50' | 'quota_threshold_90' | 'quota_threshold_100' | 'doc_shared' | 'docx_mention' | 'workspace_access_request' | 'conversation_ready_for_review' | 'conversation_done' | 'conversation_approval_request' | 'conversation_notified' | 'workflow_failed' | 'agent_input_requested' | 'workflow_completed' | 'task_started' | 'task_completed' | 'mailbox_sync_complete' | 'drive_sync_complete' | 'activity' | 'mention';
         /**
          * NotificationUpdate
          * @description Single notification update for bulk PATCH.
          *
-         *     Supports two operations:
+         *     Supports three operations:
          *     - content: Re-encrypt content (key rotation)
+         *     - attachments: Re-encrypt the attachment manifest (key rotation; the blobs are never touched)
          *     - read: Mark as read (only recipient can do this)
          */
         NotificationUpdate: {
@@ -9703,6 +9798,8 @@ interface components {
             external_id: string;
             /** Content */
             content?: string | null;
+            /** Attachments */
+            attachments?: string | null;
             /** Read */
             read?: boolean | null;
         };
@@ -11900,8 +11997,6 @@ interface components {
             request_id: string;
             /** Draft Id */
             draft_id?: string | null;
-            /** Conversation Ext Id */
-            conversation_ext_id?: string | null;
             /** Recipients */
             recipients: components['schemas']['SecureMailRecipient'][];
             /** Ciphertext */
@@ -11919,6 +12014,11 @@ interface components {
          *
          *     Each recipient gets the same logical message, encrypted with their
          *     individual shared key (derived from X25519 DH).
+         *
+         *     ``attachment_ext_ids`` names ciphertext blobs the sender uploaded through
+         *     ``POST /v1/notifications/attachments``; each is linked to every notification
+         *     this request creates. The keys that open them travel in each recipient's
+         *     encrypted ``attachments`` manifest.
          */
         SendMessageRequest: {
             /** Workspace Ext Id */
@@ -11930,6 +12030,8 @@ interface components {
             context_only: boolean;
             /** Messages */
             messages: components['schemas']['MessageRecipient'][];
+            /** Attachment Ext Ids */
+            attachment_ext_ids?: string[];
         };
         /** ServiceStatus */
         ServiceStatus: {
@@ -13343,7 +13445,7 @@ interface components {
             show_connector_sharepoint: boolean;
             /**
              * Show Connector Google
-             * @default false
+             * @default true
              */
             show_connector_google: boolean;
             /**
@@ -15527,7 +15629,9 @@ interface operations {
     };
     bootstrap_native_v1_editor_internal_rooms__room_id__bootstrap_get: {
         parameters: {
-            query?: never;
+            query?: {
+                fresh?: boolean;
+            };
             header?: never;
             path: {
                 room_id: string;
@@ -17931,6 +18035,81 @@ interface operations {
             };
         };
     };
+    upload_dm_attachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'multipart/form-data': {
+                    /**
+                     * Format: binary
+                     * @description The client-encrypted attachment (SecretBox ciphertext, nonce-prefixed)
+                     */
+                    file: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['DmAttachmentUploadResponse'];
+                };
+            };
+            /** @description Attachment exceeds the 15 MB limit */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    download_dm_attachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                external_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The attachment ciphertext */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/octet-stream': string;
+                };
+            };
+            /** @description No such attachment, or not visible to the caller */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
     get_notifications: {
         parameters: {
             query?: {

package/dist/index.js

@@ -1078,7 +1078,9 @@ function passwordChangeErrorMessage(err) {
 }
 async function reEncryptDirectMessages(fetchClient, userExtId, oldSecretKey, newSecretKey) {
   const { data } = await fetchClient.GET("/v1/notifications/");
-  const messages = (data ?? []).filter((n) => n.type === "user_message" && n.content);
+  const messages = (data ?? []).filter(
+    (n) => n.type === "user_message" && (n.content || n.attachments)
+  );
   const oldSecrets = {};
   const newSecrets = {};
   const updates = [];
@@ -1088,10 +1090,16 @@ async function reEncryptDirectMessages(fetchClient, userExtId, oldSecretKey, new
       const id = other.external_id;
       oldSecrets[id] ??= await computeSharedSecret(other.encryption_public_key, oldSecretKey);
       newSecrets[id] ??= await computeSharedSecret(other.encryption_public_key, newSecretKey);
-      const plain = await decryptMessageWithSharedSecret(n.content, oldSecrets[id]);
+      const reEncrypt = async (ciphertext) => encryptMessageWithSharedSecret(
+        await decryptMessageWithSharedSecret(ciphertext, oldSecrets[id]),
+        newSecrets[id]
+      );
+      const content = n.content ? await reEncrypt(n.content) : void 0;
+      const attachments = n.attachments ? await reEncrypt(n.attachments) : void 0;
       updates.push({
         external_id: n.external_id,
-        content: await encryptMessageWithSharedSecret(plain, newSecrets[id])
+        ...content !== void 0 ? { content } : {},
+        ...attachments !== void 0 ? { attachments } : {}
       });
     } catch {
     }