@arbidocs/sdk 0.3.116 → 0.3.118

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { o as ConfigStore, l as CliConfig, m as CliCredentials, C as ChatSession, a5 as SkippedFile, ad as UploadResult, i as AuthHeaders, a9 as UploadBatchResult, ac as UploadOptions, aa as UploadDirectOptions, ab as UploadDirectResult, a3 as SUPPORTED_EXTENSIONS, s as DmCryptoContext } from './browser-BS_k043E.cjs';
-export { a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, j as AuthenticatedClient, k as CitationSummary, n as CommandDescriptor, p as ConnectOptions, D as DOC_TERMINAL_STATUSES, t as DocNameMap, u as DocumentListFields, v as DocumentListOrder, w as DocumentWaiter, x as DocumentWaiterOptions, F as FormattedWsMessage, L as ListAllOptions, y as ListPaginatedOptions, E as MessageLevel, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, S as ResponseCompletedEvent, T as ResponseContentPartAddedEvent, U as ResponseCreatedEvent, V as ResponseFailedEvent, W as ResponseOutputItemAddedEvent, X as ResponseOutputItemDoneEvent, Y as ResponseOutputTextDeltaEvent, Z as ResponseOutputTextDoneEvent, _ as ResponseUsage, $ as SSEEvent, a0 as SSEStreamCallbacks, a1 as SSEStreamResult, a2 as SSEStreamStartData, a4 as SkillSummary, ae as UserDailyUsageResponse, af as UserInfo, ag as UserInputRequestEvent, ah as UserMessageEvent, ai as WebSocketAuthError, aj as WorkspaceChronologyOut, ak as WorkspaceContext, al as WsConnection, am as agentconfig, an as assistant, ao as authenticatedFetch, ap as buildRetrievalChunkTool, aq as buildRetrievalFullContextTool, ar as buildRetrievalTocTool, as as connectWebSocket, at as connectWithReconnect, au as consumeSSEStream, av as contacts, aw as conversations, ax as countCitations, ay as createAuthenticatedClient, az as createDocumentWaiter, aA as dm, aB as doctags, aC as documents, aD as files, aE as filterSkills, aF as formatAgentStepLabel, aG as formatFileSize, aH as formatStreamSummary, aI as formatUserName, aJ as formatWorkspaceChoices, aK as formatWsMessage, aL as generateEncryptedWorkspaceKey, aM as generateNewWorkspaceKey, aN as getErrorCode, aO as getErrorMessage, aP as getRawWorkspaceKey, aQ as health, aS as parseSSEEvents, aT as parseSlashCommand, aU as parseSlashTokenInProgress, aV as performPasswordLogin, aW as performSigningKeyLogin, aX as performSsoDeviceFlowLogin, aY as projects, aZ as requireData, a_ as requireOk, a$ as resolveAuth, b0 as resolveCitations, b1 as resolveWorkspace, b2 as responses, b3 as selectWorkspace, b4 as selectWorkspaceById, b5 as settings, b6 as streamSSE, b7 as stripCitationMarkdown, b8 as summarizeCitations, b9 as tags, bb as workspaces } from './browser-BS_k043E.cjs';
+import { o as ConfigStore, l as CliConfig, m as CliCredentials, C as ChatSession, a6 as SkippedFile, ae as UploadResult, i as AuthHeaders, aa as UploadBatchResult, ad as UploadOptions, ab as UploadDirectOptions, ac as UploadDirectResult, a4 as SUPPORTED_EXTENSIONS, s as DmCryptoContext } from './browser-CxTSIAhf.cjs';
+export { a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, j as AuthenticatedClient, k as CitationSummary, n as CommandDescriptor, p as ConnectOptions, D as DOC_TERMINAL_STATUSES, t as DocNameMap, u as DocumentListFields, v as DocumentListOrder, w as DocumentWaiter, x as DocumentWaiterOptions, F as FormattedWsMessage, L as ListAllOptions, y as ListPaginatedOptions, E as MessageLevel, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, S as ResolvedRecipient, T as ResponseCompletedEvent, U as ResponseContentPartAddedEvent, V as ResponseCreatedEvent, W as ResponseFailedEvent, X as ResponseOutputItemAddedEvent, Y as ResponseOutputItemDoneEvent, Z as ResponseOutputTextDeltaEvent, _ as ResponseOutputTextDoneEvent, $ as ResponseUsage, a0 as SSEEvent, a1 as SSEStreamCallbacks, a2 as SSEStreamResult, a3 as SSEStreamStartData, a5 as SkillSummary, af as UserDailyUsageResponse, ag as UserInfo, ah as UserInputRequestEvent, ai as UserMessageEvent, aj as WebSocketAuthError, ak as WorkspaceChronologyOut, al as WorkspaceContext, am as WsConnection, an as agentconfig, ao as assistant, ap as authenticatedFetch, aq as buildRetrievalChunkTool, ar as buildRetrievalFullContextTool, as as buildRetrievalTocTool, at as connectWebSocket, au as connectWithReconnect, av as consumeSSEStream, aw as contacts, ax as conversations, ay as countCitations, az as createAuthenticatedClient, aA as createDocumentWaiter, aB as dm, aC as doctags, aD as documents, aE as files, aF as filterSkills, aG as formatAgentStepLabel, aH as formatFileSize, aI as formatStreamSummary, aJ as formatUserName, aK as formatWorkspaceChoices, aL as formatWsMessage, aM as generateEncryptedWorkspaceKey, aN as generateNewWorkspaceKey, aO as getErrorCode, aP as getErrorMessage, aQ as getRawWorkspaceKey, aR as health, aT as parseSSEEvents, aU as parseSlashCommand, aV as parseSlashTokenInProgress, aW as performPasswordLogin, aX as performSigningKeyLogin, aY as performSsoDeviceFlowLogin, aZ as projects, a_ as requireData, a$ as requireOk, b0 as resolveAuth, b1 as resolveCitations, b2 as resolveWorkspace, b3 as responses, b4 as selectWorkspace, b5 as selectWorkspaceById, b6 as settings, b7 as streamSSE, b8 as stripCitationMarkdown, b9 as summarizeCitations, ba as tags, bc as workspaces } from './browser-CxTSIAhf.cjs';
 import { SessionStorageProvider, ArbiClient, components } from '@arbidocs/client';
 
 /**

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { o as ConfigStore, l as CliConfig, m as CliCredentials, C as ChatSession, a5 as SkippedFile, ad as UploadResult, i as AuthHeaders, a9 as UploadBatchResult, ac as UploadOptions, aa as UploadDirectOptions, ab as UploadDirectResult, a3 as SUPPORTED_EXTENSIONS, s as DmCryptoContext } from './browser-BS_k043E.js';
-export { a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, j as AuthenticatedClient, k as CitationSummary, n as CommandDescriptor, p as ConnectOptions, D as DOC_TERMINAL_STATUSES, t as DocNameMap, u as DocumentListFields, v as DocumentListOrder, w as DocumentWaiter, x as DocumentWaiterOptions, F as FormattedWsMessage, L as ListAllOptions, y as ListPaginatedOptions, E as MessageLevel, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, S as ResponseCompletedEvent, T as ResponseContentPartAddedEvent, U as ResponseCreatedEvent, V as ResponseFailedEvent, W as ResponseOutputItemAddedEvent, X as ResponseOutputItemDoneEvent, Y as ResponseOutputTextDeltaEvent, Z as ResponseOutputTextDoneEvent, _ as ResponseUsage, $ as SSEEvent, a0 as SSEStreamCallbacks, a1 as SSEStreamResult, a2 as SSEStreamStartData, a4 as SkillSummary, ae as UserDailyUsageResponse, af as UserInfo, ag as UserInputRequestEvent, ah as UserMessageEvent, ai as WebSocketAuthError, aj as WorkspaceChronologyOut, ak as WorkspaceContext, al as WsConnection, am as agentconfig, an as assistant, ao as authenticatedFetch, ap as buildRetrievalChunkTool, aq as buildRetrievalFullContextTool, ar as buildRetrievalTocTool, as as connectWebSocket, at as connectWithReconnect, au as consumeSSEStream, av as contacts, aw as conversations, ax as countCitations, ay as createAuthenticatedClient, az as createDocumentWaiter, aA as dm, aB as doctags, aC as documents, aD as files, aE as filterSkills, aF as formatAgentStepLabel, aG as formatFileSize, aH as formatStreamSummary, aI as formatUserName, aJ as formatWorkspaceChoices, aK as formatWsMessage, aL as generateEncryptedWorkspaceKey, aM as generateNewWorkspaceKey, aN as getErrorCode, aO as getErrorMessage, aP as getRawWorkspaceKey, aQ as health, aS as parseSSEEvents, aT as parseSlashCommand, aU as parseSlashTokenInProgress, aV as performPasswordLogin, aW as performSigningKeyLogin, aX as performSsoDeviceFlowLogin, aY as projects, aZ as requireData, a_ as requireOk, a$ as resolveAuth, b0 as resolveCitations, b1 as resolveWorkspace, b2 as responses, b3 as selectWorkspace, b4 as selectWorkspaceById, b5 as settings, b6 as streamSSE, b7 as stripCitationMarkdown, b8 as summarizeCitations, b9 as tags, bb as workspaces } from './browser-BS_k043E.js';
+import { o as ConfigStore, l as CliConfig, m as CliCredentials, C as ChatSession, a6 as SkippedFile, ae as UploadResult, i as AuthHeaders, aa as UploadBatchResult, ad as UploadOptions, ab as UploadDirectOptions, ac as UploadDirectResult, a4 as SUPPORTED_EXTENSIONS, s as DmCryptoContext } from './browser-CxTSIAhf.js';
+export { a as AgentStepEvent, b as Arbi, c as ArbiApiError, d as ArbiError, f as ArbiOptions, g as ArtifactEvent, h as AuthContext, j as AuthenticatedClient, k as CitationSummary, n as CommandDescriptor, p as ConnectOptions, D as DOC_TERMINAL_STATUSES, t as DocNameMap, u as DocumentListFields, v as DocumentListOrder, w as DocumentWaiter, x as DocumentWaiterOptions, F as FormattedWsMessage, L as ListAllOptions, y as ListPaginatedOptions, E as MessageLevel, G as MessageMetadataPayload, H as MessageQueuedEvent, O as OutputTokensDetails, P as ParsedSlashCommand, I as ProjectInvoicesResponse, J as ProjectUsageResponse, Q as QueryOptions, R as ReconnectOptions, K as ReconnectableWsConnection, N as ResolvedCitation, S as ResolvedRecipient, T as ResponseCompletedEvent, U as ResponseContentPartAddedEvent, V as ResponseCreatedEvent, W as ResponseFailedEvent, X as ResponseOutputItemAddedEvent, Y as ResponseOutputItemDoneEvent, Z as ResponseOutputTextDeltaEvent, _ as ResponseOutputTextDoneEvent, $ as ResponseUsage, a0 as SSEEvent, a1 as SSEStreamCallbacks, a2 as SSEStreamResult, a3 as SSEStreamStartData, a5 as SkillSummary, af as UserDailyUsageResponse, ag as UserInfo, ah as UserInputRequestEvent, ai as UserMessageEvent, aj as WebSocketAuthError, ak as WorkspaceChronologyOut, al as WorkspaceContext, am as WsConnection, an as agentconfig, ao as assistant, ap as authenticatedFetch, aq as buildRetrievalChunkTool, ar as buildRetrievalFullContextTool, as as buildRetrievalTocTool, at as connectWebSocket, au as connectWithReconnect, av as consumeSSEStream, aw as contacts, ax as conversations, ay as countCitations, az as createAuthenticatedClient, aA as createDocumentWaiter, aB as dm, aC as doctags, aD as documents, aE as files, aF as filterSkills, aG as formatAgentStepLabel, aH as formatFileSize, aI as formatStreamSummary, aJ as formatUserName, aK as formatWorkspaceChoices, aL as formatWsMessage, aM as generateEncryptedWorkspaceKey, aN as generateNewWorkspaceKey, aO as getErrorCode, aP as getErrorMessage, aQ as getRawWorkspaceKey, aR as health, aT as parseSSEEvents, aU as parseSlashCommand, aV as parseSlashTokenInProgress, aW as performPasswordLogin, aX as performSigningKeyLogin, aY as performSsoDeviceFlowLogin, aZ as projects, a_ as requireData, a$ as requireOk, b0 as resolveAuth, b1 as resolveCitations, b2 as resolveWorkspace, b3 as responses, b4 as selectWorkspace, b5 as selectWorkspaceById, b6 as settings, b7 as streamSSE, b8 as stripCitationMarkdown, b9 as summarizeCitations, ba as tags, bc as workspaces } from './browser-CxTSIAhf.js';
 import { SessionStorageProvider, ArbiClient, components } from '@arbidocs/client';
 
 /**

package/dist/index.js

@@ -5620,9 +5620,53 @@ __export(dm_exports, {
   listDecryptedDMs: () => listDecryptedDMs,
   markRead: () => markRead,
   requestWorkspaceAccess: () => requestWorkspaceAccess,
+  resolveRecipient: () => resolveRecipient,
   sendDM: () => sendDM,
   sendEncryptedDM: () => sendEncryptedDM
 });
+
+// src/operations/agents.ts
+var agents_exports = {};
+__export(agents_exports, {
+  createAgent: () => createAgent,
+  deleteAgents: () => deleteAgents,
+  getAgentConfig: () => getAgentConfig,
+  listAgentWorkspaces: () => listAgentWorkspaces,
+  listAgents: () => listAgents
+});
+async function listAgents(arbi) {
+  return requireData(await arbi.fetch.GET("/v1/agents"), "Failed to fetch agents");
+}
+async function createAgent(arbi, name) {
+  const body = { name };
+  return requireData(await arbi.fetch.POST("/v1/agents", { body }), "Failed to create agent");
+}
+async function getAgentConfig(arbi, agentExtId) {
+  return requireData(
+    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/config", {
+      params: { path: { agent_ext_id: agentExtId } }
+    }),
+    "Failed to fetch agent config"
+  );
+}
+async function listAgentWorkspaces(arbi, agentExtId) {
+  return requireData(
+    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/workspaces", {
+      params: { path: { agent_ext_id: agentExtId } }
+    }),
+    "Failed to fetch agent workspaces"
+  );
+}
+async function deleteAgents(arbi, agentExtIds) {
+  return requireData(
+    await arbi.fetch.DELETE("/v1/agents", {
+      body: { agent_ext_ids: agentExtIds }
+    }),
+    "Failed to delete agents"
+  );
+}
+
+// src/operations/dm.ts
 function createDmCryptoContext(arbi, signingPrivateKeyBytes, userExtId) {
   const ed25519PublicKey = signingPrivateKeyBytes.slice(32, 64);
   const encryptionKeypair = arbi.crypto.deriveEncryptionKeypairFromSigning({
@@ -5685,6 +5729,37 @@ async function listActivity(arbi, options) {
     "Failed to fetch activity"
   );
 }
+async function resolveRecipient(arbi, ref) {
+  const isEmail = ref.includes("@");
+  const matchKey = isEmail ? "email" : "external_id";
+  const contacts = await listContacts(arbi);
+  const contactMatch = contacts.find(
+    (c2) => isEmail ? c2.email === ref : c2.user?.external_id === ref || c2.external_id === ref
+  );
+  if (contactMatch?.user?.encryption_public_key) {
+    return {
+      extId: contactMatch.user.external_id,
+      pubKey: contactMatch.user.encryption_public_key
+    };
+  }
+  try {
+    const agents = await listAgents(arbi);
+    const agentMatch = agents.find((a2) => a2[matchKey] === ref);
+    if (agentMatch?.encryption_public_key) {
+      return { extId: agentMatch.external_id, pubKey: agentMatch.encryption_public_key };
+    }
+  } catch {
+  }
+  try {
+    const wsUsers = await listWorkspaceUsers(arbi);
+    const wsMatch = wsUsers.find((wu) => wu.user[matchKey] === ref);
+    if (wsMatch?.user.encryption_public_key) {
+      return { extId: wsMatch.user.external_id, pubKey: wsMatch.user.encryption_public_key };
+    }
+  } catch {
+  }
+  return null;
+}
 async function sendEncryptedDM(arbi, messages, crypto) {
   const encrypted = await Promise.all(
     messages.map(async (msg) => ({
@@ -5881,47 +5956,6 @@ async function getFileContent(auth, fileId) {
   });
 }
 
-// src/operations/agents.ts
-var agents_exports = {};
-__export(agents_exports, {
-  createAgent: () => createAgent,
-  deleteAgents: () => deleteAgents,
-  getAgentConfig: () => getAgentConfig,
-  listAgentWorkspaces: () => listAgentWorkspaces,
-  listAgents: () => listAgents
-});
-async function listAgents(arbi) {
-  return requireData(await arbi.fetch.GET("/v1/agents"), "Failed to fetch agents");
-}
-async function createAgent(arbi, name) {
-  const body = { name };
-  return requireData(await arbi.fetch.POST("/v1/agents", { body }), "Failed to create agent");
-}
-async function getAgentConfig(arbi, agentExtId) {
-  return requireData(
-    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/config", {
-      params: { path: { agent_ext_id: agentExtId } }
-    }),
-    "Failed to fetch agent config"
-  );
-}
-async function listAgentWorkspaces(arbi, agentExtId) {
-  return requireData(
-    await arbi.fetch.GET("/v1/agents/{agent_ext_id}/workspaces", {
-      params: { path: { agent_ext_id: agentExtId } }
-    }),
-    "Failed to fetch agent workspaces"
-  );
-}
-async function deleteAgents(arbi, agentExtIds) {
-  return requireData(
-    await arbi.fetch.DELETE("/v1/agents", {
-      body: { agent_ext_ids: agentExtIds }
-    }),
-    "Failed to delete agents"
-  );
-}
-
 // src/operations/sessions.ts
 var sessions_exports = {};
 __export(sessions_exports, {
@@ -6057,6 +6091,7 @@ var Arbi = class {
   client = null;
   loginResult = null;
   currentWorkspaceId = null;
+  dmCryptoContext = null;
   options;
   constructor(options) {
     this.options = options;
@@ -6143,6 +6178,7 @@ var Arbi = class {
     }
     this.loginResult = null;
     this.currentWorkspaceId = null;
+    this.dmCryptoContext = null;
   }
   // ── Accessors ─────────────────────────────────────────────────────────
   /** Get the underlying ArbiClient (throws if not initialized). */
@@ -6198,6 +6234,16 @@ var Arbi = class {
   };
   // ── User (account-scoped usage) ───────────────────────────────────────
   user = {
+    /**
+     * The authenticated user's identity from the current session
+     * (`external_id` + `email`), established at login. Returns `null` when not
+     * logged in. This is the canonical "who am I" accessor — DM direction and
+     * ownership checks read it instead of re-deriving identity per call.
+     */
+    identity: () => {
+      const state = this.requireClient().session.getState();
+      return state.userExtId && state.userEmail ? { externalId: state.userExtId, email: state.userEmail } : null;
+    },
     /** Today's deployment-wide credit spend for the current user. */
     usageToday: () => getUserUsageToday(this.requireClient())
   };
@@ -6381,9 +6427,76 @@ var Arbi = class {
     groupByStatus: groupContactsByStatus
   };
   // ── Direct Messages ───────────────────────────────────────────────────
+  /**
+   * Build (and cache) the DM crypto context for the current session.
+   *
+   * Derives the user's curve25519 keypair from the stored signing key and pairs
+   * it with their external_id — everything `list()`/`send()` need to encrypt and
+   * decrypt. Cached for the session and cleared on logout. Consumers never touch
+   * this: it's an internal of the `dm` surface.
+   */
+  async requireDmCrypto() {
+    if (this.dmCryptoContext) return this.dmCryptoContext;
+    const client = this.requireClient();
+    const session = await client.storage.getSession();
+    if (!session) {
+      throw new ArbiError("Not authenticated \u2014 no session available for DM encryption");
+    }
+    const userExtId = client.session.getState().userExtId;
+    if (!userExtId) {
+      throw new ArbiError("No user identity in session \u2014 cannot set up DM encryption");
+    }
+    this.dmCryptoContext = createDmCryptoContext(client, session.signingPrivateKey, userExtId);
+    return this.dmCryptoContext;
+  }
   dm = {
-    list: () => listDMs(this.requireClient()),
-    send: (messages) => sendDM(this.requireClient(), messages),
+    /**
+     * List direct messages, newest first, with content already **decrypted**.
+     * (A message that can't be decrypted comes back as `[Decryption failed]`.)
+     */
+    list: async () => listDecryptedDMs(this.requireClient(), await this.requireDmCrypto()),
+    /**
+     * Send an E2E-encrypted DM to a recipient (email or `usr-`/`agt-` id).
+     * Resolves the recipient's public key and encrypts internally — the caller
+     * passes plaintext and never handles keys or ciphertext.
+     */
+    send: async (recipient, text) => {
+      const client = this.requireClient();
+      const resolved = await resolveRecipient(client, recipient);
+      if (!resolved) {
+        throw new ArbiError(
+          `Could not resolve DM recipient "${recipient}" (not a known contact, agent, or workspace member)`
+        );
+      }
+      return sendEncryptedDM(
+        client,
+        [
+          {
+            recipient_ext_id: resolved.extId,
+            content: text,
+            recipient_encryption_public_key: resolved.pubKey
+          }
+        ],
+        await this.requireDmCrypto()
+      );
+    },
+    /**
+     * Send to a recipient whose external_id + public key are already known
+     * (e.g. from a message's `sender`), skipping directory resolution.
+     */
+    sendTo: async (recipientExtId, recipientPublicKey, text) => sendEncryptedDM(
+      this.requireClient(),
+      [
+        {
+          recipient_ext_id: recipientExtId,
+          content: text,
+          recipient_encryption_public_key: recipientPublicKey
+        }
+      ],
+      await this.requireDmCrypto()
+    ),
+    /** Resolve a recipient reference to `{ extId, pubKey }` (contacts → agents → workspace). */
+    resolveRecipient: (recipient) => resolveRecipient(this.requireClient(), recipient),
     markRead: (messageIds) => markRead(this.requireClient(), messageIds),
     delete: (messageIds) => deleteDMs(this.requireClient(), messageIds),
     /** List the current user's durable activity feed (never unread; excluded from DMs). */