@arbidocs/sdk 0.3.116 → 0.3.117

package/dist/browser.d.cts

@@ -1,2 +1,2 @@
-export { A as AgentStepDeltaEvent, a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, e as ArbiErrorEvent, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, i as AuthHeaders, j as AuthenticatedClient, C as ChatSession, k as CitationSummary, l as CliConfig, m as CliCredentials, n as CommandDescriptor, o as ConfigStore, p as ConnectOptions, q as CreateMemoryRequest, r as CreateTaskRequest, M as MemoryResponse, z as MemorySearchRequest, B as MemorySearchResponse, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, S as ResponseCompletedEvent, T as ResponseContentPartAddedEvent, U as ResponseCreatedEvent, V as ResponseFailedEvent, W as ResponseOutputItemAddedEvent, X as ResponseOutputItemDoneEvent, Y as ResponseOutputTextDeltaEvent, Z as ResponseOutputTextDoneEvent, _ as ResponseUsage, $ as SSEEvent, a0 as SSEStreamCallbacks, a1 as SSEStreamResult, a2 as SSEStreamStartData, a4 as SkillSummary, a6 as TaskResponse, a7 as UpdateMemoryRequest, a8 as UpdateTaskRequest, ae as UserDailyUsageResponse, af as UserInfo, ag as UserInputRequestEvent, ah as UserMessageEvent, ai as WebSocketAuthError, aj as WorkspaceChronologyOut, ak as WorkspaceContext, al as WsConnection, am as agentconfig, an as assistant, ao as authenticatedFetch, ap as buildRetrievalChunkTool, aq as buildRetrievalFullContextTool, ar as buildRetrievalTocTool, as as connectWebSocket, at as connectWithReconnect, au as consumeSSEStream, av as contacts, aw as conversations, ax as countCitations, ay as createAuthenticatedClient, aA as dm, aB as doctags, aC as documents, aD as files, aE as filterSkills, aF as formatAgentStepLabel, aG as formatFileSize, aI as formatUserName, aJ as formatWorkspaceChoices, aO as getErrorMessage, aP as getRawWorkspaceKey, aQ as health, aR as memory, aS as parseSSEEvents, aT as parseSlashCommand, aU as parseSlashTokenInProgress, aV as performPasswordLogin, aY as projects, aZ as requireData, a_ as requireOk, a$ as resolveAuth, b0 as resolveCitations, b1 as resolveWorkspace, b2 as responses, b3 as selectWorkspace, b4 as selectWorkspaceById, b5 as settings, b6 as streamSSE, b7 as stripCitationMarkdown, b8 as summarizeCitations, b9 as tags, ba as tasks, bb as workspaces } from './browser-BS_k043E.cjs';
+export { A as AgentStepDeltaEvent, a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, e as ArbiErrorEvent, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, i as AuthHeaders, j as AuthenticatedClient, C as ChatSession, k as CitationSummary, l as CliConfig, m as CliCredentials, n as CommandDescriptor, o as ConfigStore, p as ConnectOptions, q as CreateMemoryRequest, r as CreateTaskRequest, M as MemoryResponse, z as MemorySearchRequest, B as MemorySearchResponse, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, T as ResponseCompletedEvent, U as ResponseContentPartAddedEvent, V as ResponseCreatedEvent, W as ResponseFailedEvent, X as ResponseOutputItemAddedEvent, Y as ResponseOutputItemDoneEvent, Z as ResponseOutputTextDeltaEvent, _ as ResponseOutputTextDoneEvent, $ as ResponseUsage, a0 as SSEEvent, a1 as SSEStreamCallbacks, a2 as SSEStreamResult, a3 as SSEStreamStartData, a5 as SkillSummary, a7 as TaskResponse, a8 as UpdateMemoryRequest, a9 as UpdateTaskRequest, af as UserDailyUsageResponse, ag as UserInfo, ah as UserInputRequestEvent, ai as UserMessageEvent, aj as WebSocketAuthError, ak as WorkspaceChronologyOut, al as WorkspaceContext, am as WsConnection, an as agentconfig, ao as assistant, ap as authenticatedFetch, aq as buildRetrievalChunkTool, ar as buildRetrievalFullContextTool, as as buildRetrievalTocTool, at as connectWebSocket, au as connectWithReconnect, av as consumeSSEStream, aw as contacts, ax as conversations, ay as countCitations, az as createAuthenticatedClient, aB as dm, aC as doctags, aD as documents, aE as files, aF as filterSkills, aG as formatAgentStepLabel, aH as formatFileSize, aJ as formatUserName, aK as formatWorkspaceChoices, aP as getErrorMessage, aQ as getRawWorkspaceKey, aR as health, aS as memory, aT as parseSSEEvents, aU as parseSlashCommand, aV as parseSlashTokenInProgress, aW as performPasswordLogin, aZ as projects, a_ as requireData, a$ as requireOk, b0 as resolveAuth, b1 as resolveCitations, b2 as resolveWorkspace, b3 as responses, b4 as selectWorkspace, b5 as selectWorkspaceById, b6 as settings, b7 as streamSSE, b8 as stripCitationMarkdown, b9 as summarizeCitations, ba as tags, bb as tasks, bc as workspaces } from './browser-CxTSIAhf.cjs';
 import '@arbidocs/client';

package/dist/browser.d.ts

@@ -1,2 +1,2 @@
-export { A as AgentStepDeltaEvent, a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, e as ArbiErrorEvent, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, i as AuthHeaders, j as AuthenticatedClient, C as ChatSession, k as CitationSummary, l as CliConfig, m as CliCredentials, n as CommandDescriptor, o as ConfigStore, p as ConnectOptions, q as CreateMemoryRequest, r as CreateTaskRequest, M as MemoryResponse, z as MemorySearchRequest, B as MemorySearchResponse, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, S as ResponseCompletedEvent, T as ResponseContentPartAddedEvent, U as ResponseCreatedEvent, V as ResponseFailedEvent, W as ResponseOutputItemAddedEvent, X as ResponseOutputItemDoneEvent, Y as ResponseOutputTextDeltaEvent, Z as ResponseOutputTextDoneEvent, _ as ResponseUsage, $ as SSEEvent, a0 as SSEStreamCallbacks, a1 as SSEStreamResult, a2 as SSEStreamStartData, a4 as SkillSummary, a6 as TaskResponse, a7 as UpdateMemoryRequest, a8 as UpdateTaskRequest, ae as UserDailyUsageResponse, af as UserInfo, ag as UserInputRequestEvent, ah as UserMessageEvent, ai as WebSocketAuthError, aj as WorkspaceChronologyOut, ak as WorkspaceContext, al as WsConnection, am as agentconfig, an as assistant, ao as authenticatedFetch, ap as buildRetrievalChunkTool, aq as buildRetrievalFullContextTool, ar as buildRetrievalTocTool, as as connectWebSocket, at as connectWithReconnect, au as consumeSSEStream, av as contacts, aw as conversations, ax as countCitations, ay as createAuthenticatedClient, aA as dm, aB as doctags, aC as documents, aD as files, aE as filterSkills, aF as formatAgentStepLabel, aG as formatFileSize, aI as formatUserName, aJ as formatWorkspaceChoices, aO as getErrorMessage, aP as getRawWorkspaceKey, aQ as health, aR as memory, aS as parseSSEEvents, aT as parseSlashCommand, aU as parseSlashTokenInProgress, aV as performPasswordLogin, aY as projects, aZ as requireData, a_ as requireOk, a$ as resolveAuth, b0 as resolveCitations, b1 as resolveWorkspace, b2 as responses, b3 as selectWorkspace, b4 as selectWorkspaceById, b5 as settings, b6 as streamSSE, b7 as stripCitationMarkdown, b8 as summarizeCitations, b9 as tags, ba as tasks, bb as workspaces } from './browser-BS_k043E.js';
+export { A as AgentStepDeltaEvent, a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, e as ArbiErrorEvent, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, i as AuthHeaders, j as AuthenticatedClient, C as ChatSession, k as CitationSummary, l as CliConfig, m as CliCredentials, n as CommandDescriptor, o as ConfigStore, p as ConnectOptions, q as CreateMemoryRequest, r as CreateTaskRequest, M as MemoryResponse, z as MemorySearchRequest, B as MemorySearchResponse, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, T as ResponseCompletedEvent, U as ResponseContentPartAddedEvent, V as ResponseCreatedEvent, W as ResponseFailedEvent, X as ResponseOutputItemAddedEvent, Y as ResponseOutputItemDoneEvent, Z as ResponseOutputTextDeltaEvent, _ as ResponseOutputTextDoneEvent, $ as ResponseUsage, a0 as SSEEvent, a1 as SSEStreamCallbacks, a2 as SSEStreamResult, a3 as SSEStreamStartData, a5 as SkillSummary, a7 as TaskResponse, a8 as UpdateMemoryRequest, a9 as UpdateTaskRequest, af as UserDailyUsageResponse, ag as UserInfo, ah as UserInputRequestEvent, ai as UserMessageEvent, aj as WebSocketAuthError, ak as WorkspaceChronologyOut, al as WorkspaceContext, am as WsConnection, an as agentconfig, ao as assistant, ap as authenticatedFetch, aq as buildRetrievalChunkTool, ar as buildRetrievalFullContextTool, as as buildRetrievalTocTool, at as connectWebSocket, au as connectWithReconnect, av as consumeSSEStream, aw as contacts, ax as conversations, ay as countCitations, az as createAuthenticatedClient, aB as dm, aC as doctags, aD as documents, aE as files, aF as filterSkills, aG as formatAgentStepLabel, aH as formatFileSize, aJ as formatUserName, aK as formatWorkspaceChoices, aP as getErrorMessage, aQ as getRawWorkspaceKey, aR as health, aS as memory, aT as parseSSEEvents, aU as parseSlashCommand, aV as parseSlashTokenInProgress, aW as performPasswordLogin, aZ as projects, a_ as requireData, a$ as requireOk, b0 as resolveAuth, b1 as resolveCitations, b2 as resolveWorkspace, b3 as responses, b4 as selectWorkspace, b5 as selectWorkspaceById, b6 as settings, b7 as streamSSE, b8 as stripCitationMarkdown, b9 as summarizeCitations, ba as tags, bb as tasks, bc as workspaces } from './browser-CxTSIAhf.js';
 import '@arbidocs/client';

package/dist/browser.js

@@ -5081,9 +5081,45 @@ __export(dm_exports, {
   listDecryptedDMs: () => listDecryptedDMs,
   markRead: () => markRead,
   requestWorkspaceAccess: () => requestWorkspaceAccess,
+  resolveRecipient: () => resolveRecipient,
   sendDM: () => sendDM,
   sendEncryptedDM: () => sendEncryptedDM
 });
+
+// src/operations/agents.ts
+async function listAgents(arbi) {
+  return requireData(await arbi.fetch.GET("/v1/agents"), "Failed to fetch agents");
+}
+async function createAgent(arbi, name) {
+  const body = { name };
+  return requireData(await arbi.fetch.POST("/v1/agents", { body }), "Failed to create agent");
+}
+async function getAgentConfig(arbi, agentExtId) {
+  return requireData(
+    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/config", {
+      params: { path: { agent_ext_id: agentExtId } }
+    }),
+    "Failed to fetch agent config"
+  );
+}
+async function listAgentWorkspaces(arbi, agentExtId) {
+  return requireData(
+    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/workspaces", {
+      params: { path: { agent_ext_id: agentExtId } }
+    }),
+    "Failed to fetch agent workspaces"
+  );
+}
+async function deleteAgents(arbi, agentExtIds) {
+  return requireData(
+    await arbi.fetch.DELETE("/v1/agents", {
+      body: { agent_ext_ids: agentExtIds }
+    }),
+    "Failed to delete agents"
+  );
+}
+
+// src/operations/dm.ts
 function createDmCryptoContext(arbi, signingPrivateKeyBytes, userExtId) {
   const ed25519PublicKey = signingPrivateKeyBytes.slice(32, 64);
   const encryptionKeypair = arbi.crypto.deriveEncryptionKeypairFromSigning({
@@ -5146,6 +5182,37 @@ async function listActivity(arbi, options) {
     "Failed to fetch activity"
   );
 }
+async function resolveRecipient(arbi, ref) {
+  const isEmail = ref.includes("@");
+  const matchKey = isEmail ? "email" : "external_id";
+  const contacts = await listContacts(arbi);
+  const contactMatch = contacts.find(
+    (c2) => isEmail ? c2.email === ref : c2.user?.external_id === ref || c2.external_id === ref
+  );
+  if (contactMatch?.user?.encryption_public_key) {
+    return {
+      extId: contactMatch.user.external_id,
+      pubKey: contactMatch.user.encryption_public_key
+    };
+  }
+  try {
+    const agents = await listAgents(arbi);
+    const agentMatch = agents.find((a2) => a2[matchKey] === ref);
+    if (agentMatch?.encryption_public_key) {
+      return { extId: agentMatch.external_id, pubKey: agentMatch.encryption_public_key };
+    }
+  } catch {
+  }
+  try {
+    const wsUsers = await listWorkspaceUsers(arbi);
+    const wsMatch = wsUsers.find((wu) => wu.user[matchKey] === ref);
+    if (wsMatch?.user.encryption_public_key) {
+      return { extId: wsMatch.user.external_id, pubKey: wsMatch.user.encryption_public_key };
+    }
+  } catch {
+  }
+  return null;
+}
 async function sendEncryptedDM(arbi, messages, crypto) {
   const encrypted = await Promise.all(
     messages.map(async (msg) => ({
@@ -5342,39 +5409,6 @@ async function getFileContent(auth, fileId) {
   });
 }
 
-// src/operations/agents.ts
-async function listAgents(arbi) {
-  return requireData(await arbi.fetch.GET("/v1/agents"), "Failed to fetch agents");
-}
-async function createAgent(arbi, name) {
-  const body = { name };
-  return requireData(await arbi.fetch.POST("/v1/agents", { body }), "Failed to create agent");
-}
-async function getAgentConfig(arbi, agentExtId) {
-  return requireData(
-    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/config", {
-      params: { path: { agent_ext_id: agentExtId } }
-    }),
-    "Failed to fetch agent config"
-  );
-}
-async function listAgentWorkspaces(arbi, agentExtId) {
-  return requireData(
-    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/workspaces", {
-      params: { path: { agent_ext_id: agentExtId } }
-    }),
-    "Failed to fetch agent workspaces"
-  );
-}
-async function deleteAgents(arbi, agentExtIds) {
-  return requireData(
-    await arbi.fetch.DELETE("/v1/agents", {
-      body: { agent_ext_ids: agentExtIds }
-    }),
-    "Failed to delete agents"
-  );
-}
-
 // src/operations/sessions.ts
 async function listSessions(arbi) {
   return requireData(await arbi.fetch.GET("/v1/user/sessions"), "Failed to fetch sessions");
@@ -5523,6 +5557,7 @@ var Arbi = class {
   client = null;
   loginResult = null;
   currentWorkspaceId = null;
+  dmCryptoContext = null;
   options;
   constructor(options) {
     this.options = options;
@@ -5609,6 +5644,7 @@ var Arbi = class {
     }
     this.loginResult = null;
     this.currentWorkspaceId = null;
+    this.dmCryptoContext = null;
   }
   // ── Accessors ─────────────────────────────────────────────────────────
   /** Get the underlying ArbiClient (throws if not initialized). */
@@ -5664,6 +5700,16 @@ var Arbi = class {
   };
   // ── User (account-scoped usage) ───────────────────────────────────────
   user = {
+    /**
+     * The authenticated user's identity from the current session
+     * (`external_id` + `email`), established at login. Returns `null` when not
+     * logged in. This is the canonical "who am I" accessor — DM direction and
+     * ownership checks read it instead of re-deriving identity per call.
+     */
+    identity: () => {
+      const state = this.requireClient().session.getState();
+      return state.userExtId && state.userEmail ? { externalId: state.userExtId, email: state.userEmail } : null;
+    },
     /** Today's deployment-wide credit spend for the current user. */
     usageToday: () => getUserUsageToday(this.requireClient())
   };
@@ -5847,9 +5893,76 @@ var Arbi = class {
     groupByStatus: groupContactsByStatus
   };
   // ── Direct Messages ───────────────────────────────────────────────────
+  /**
+   * Build (and cache) the DM crypto context for the current session.
+   *
+   * Derives the user's curve25519 keypair from the stored signing key and pairs
+   * it with their external_id — everything `list()`/`send()` need to encrypt and
+   * decrypt. Cached for the session and cleared on logout. Consumers never touch
+   * this: it's an internal of the `dm` surface.
+   */
+  async requireDmCrypto() {
+    if (this.dmCryptoContext) return this.dmCryptoContext;
+    const client = this.requireClient();
+    const session = await client.storage.getSession();
+    if (!session) {
+      throw new ArbiError("Not authenticated \u2014 no session available for DM encryption");
+    }
+    const userExtId = client.session.getState().userExtId;
+    if (!userExtId) {
+      throw new ArbiError("No user identity in session \u2014 cannot set up DM encryption");
+    }
+    this.dmCryptoContext = createDmCryptoContext(client, session.signingPrivateKey, userExtId);
+    return this.dmCryptoContext;
+  }
   dm = {
-    list: () => listDMs(this.requireClient()),
-    send: (messages) => sendDM(this.requireClient(), messages),
+    /**
+     * List direct messages, newest first, with content already **decrypted**.
+     * (A message that can't be decrypted comes back as `[Decryption failed]`.)
+     */
+    list: async () => listDecryptedDMs(this.requireClient(), await this.requireDmCrypto()),
+    /**
+     * Send an E2E-encrypted DM to a recipient (email or `usr-`/`agt-` id).
+     * Resolves the recipient's public key and encrypts internally — the caller
+     * passes plaintext and never handles keys or ciphertext.
+     */
+    send: async (recipient, text) => {
+      const client = this.requireClient();
+      const resolved = await resolveRecipient(client, recipient);
+      if (!resolved) {
+        throw new ArbiError(
+          `Could not resolve DM recipient "${recipient}" (not a known contact, agent, or workspace member)`
+        );
+      }
+      return sendEncryptedDM(
+        client,
+        [
+          {
+            recipient_ext_id: resolved.extId,
+            content: text,
+            recipient_encryption_public_key: resolved.pubKey
+          }
+        ],
+        await this.requireDmCrypto()
+      );
+    },
+    /**
+     * Send to a recipient whose external_id + public key are already known
+     * (e.g. from a message's `sender`), skipping directory resolution.
+     */
+    sendTo: async (recipientExtId, recipientPublicKey, text) => sendEncryptedDM(
+      this.requireClient(),
+      [
+        {
+          recipient_ext_id: recipientExtId,
+          content: text,
+          recipient_encryption_public_key: recipientPublicKey
+        }
+      ],
+      await this.requireDmCrypto()
+    ),
+    /** Resolve a recipient reference to `{ extId, pubKey }` (contacts → agents → workspace). */
+    resolveRecipient: (recipient) => resolveRecipient(this.requireClient(), recipient),
     markRead: (messageIds) => markRead(this.requireClient(), messageIds),
     delete: (messageIds) => deleteDMs(this.requireClient(), messageIds),
     /** List the current user's durable activity feed (never unread; excluded from DMs). */