@arbidocs/sdk 0.3.119 → 0.3.120

package/dist/{browser-CxTSIAhf.d.cts → browser-BUspHdyk.d.cts}

@@ -1580,6 +1580,11 @@ declare function resolveRecipient(arbi: ArbiClient, ref: string): Promise<Resolv
  * Encrypts plaintext content for each recipient using their public key.
  * Requires recipient public keys — fetch via contacts or user lookup first.
  *
+ * Returns the created notifications with their content as **plaintext**, not
+ * ciphertext — matching what `listDecryptedDMs` returns. The sender supplied the
+ * text, so it is handed straight back: a caller must never have to re-fetch and
+ * re-decrypt its own ciphertext just to render the message it has just sent.
+ *
  * @param arbi - ArbiClient instance
  * @param messages - Array of { recipient_ext_id, content (plaintext), recipient_encryption_public_key }
  * @param crypto - DM crypto context for the sender
@@ -1588,35 +1593,7 @@ declare function sendEncryptedDM(arbi: ArbiClient, messages: Array<{
     recipient_ext_id: string;
     content: string;
     recipient_encryption_public_key: string;
-}>, crypto: DmCryptoContext): Promise<{
-    type: components["schemas"]["NotificationType"];
-    external_id: string;
-    sender: {
-        external_id: string;
-        parent_ext_id?: string | null | undefined;
-        email: string;
-        given_name: string;
-        family_name?: string | null | undefined;
-        picture?: string | null | undefined;
-        encryption_public_key: string;
-        is_sso: boolean;
-    };
-    recipient: {
-        external_id: string;
-        parent_ext_id?: string | null | undefined;
-        email: string;
-        given_name: string;
-        family_name?: string | null | undefined;
-        picture?: string | null | undefined;
-        encryption_public_key: string;
-        is_sso: boolean;
-    };
-    workspace_ext_id?: string | null | undefined;
-    content?: string | null | undefined;
-    read: boolean;
-    created_at: string;
-    updated_at: string;
-}[]>;
+}>, crypto: DmCryptoContext): Promise<NotificationResponse[]>;
 /**
  * Ask another user to grant you workspace access.
  *
@@ -2137,13 +2114,19 @@ declare class Arbi {
     readonly user: {
         /**
          * The authenticated user's identity from the current session
-         * (`external_id` + `email`), established at login. Returns `null` when not
-         * logged in. This is the canonical "who am I" accessor — DM direction and
-         * ownership checks read it instead of re-deriving identity per call.
+         * (`external_id`, plus `email` when the session carries one), established at
+         * login. Returns `null` when not logged in. This is the canonical "who am I"
+         * accessor — DM direction and ownership checks read it instead of re-deriving
+         * identity per call.
+         *
+         * The external_id alone decides identity. A session without an email (e.g. an
+         * agent, or a key-restored session) is still a known user, so `email` is
+         * nullable rather than gating the whole identity: an ownership check must
+         * never silently fail open just because the email is missing.
          */
         identity: () => {
             externalId: string;
-            email: string;
+            email: string | null;
         } | null;
         /** Today's deployment-wide credit spend for the current user. */
         usageToday: () => Promise<{
@@ -3126,10 +3109,18 @@ declare class Arbi {
     /**
      * Build (and cache) the DM crypto context for the current session.
      *
-     * Derives the user's curve25519 keypair from the stored signing key and pairs
-     * it with their external_id — everything `list()`/`send()` need to encrypt and
+     * Derives the user's curve25519 keypair from their signing key and pairs it
+     * with their external_id — everything `list()`/`send()` need to encrypt and
      * decrypt. Cached for the session and cleared on logout. Consumers never touch
      * this: it's an internal of the `dm` surface.
+     *
+     * The key comes from the live login result first, exactly as `selectWorkspace`
+     * sources it, and only then from persisted storage (which is what restores a
+     * session on reload). Reading storage first would make DMs the one feature that
+     * breaks whenever persistence is unavailable — `saveSession` deliberately
+     * no-ops without Web Crypto (a non-secure origin, tracking prevention, an
+     * embedded widget), so a perfectly authenticated user with a working workspace
+     * would be told they are "not authenticated" the moment they opened Messages.
      */
     private requireDmCrypto;
     readonly dm: {
@@ -3156,28 +3147,10 @@ declare class Arbi {
         send: (recipient: string, text: string) => Promise<{
             type: components["schemas"]["NotificationType"];
             external_id: string;
-            sender: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            recipient: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            workspace_ext_id?: string | null | undefined;
-            content?: string | null | undefined;
+            sender: components["schemas"]["UserResponse"];
+            recipient: components["schemas"]["UserResponse"];
+            workspace_ext_id?: string | null;
+            content?: string | null;
             read: boolean;
             created_at: string;
             updated_at: string;
@@ -3189,28 +3162,10 @@ declare class Arbi {
         sendTo: (recipientExtId: string, recipientPublicKey: string, text: string) => Promise<{
             type: components["schemas"]["NotificationType"];
             external_id: string;
-            sender: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            recipient: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            workspace_ext_id?: string | null | undefined;
-            content?: string | null | undefined;
+            sender: components["schemas"]["UserResponse"];
+            recipient: components["schemas"]["UserResponse"];
+            workspace_ext_id?: string | null;
+            content?: string | null;
             read: boolean;
             created_at: string;
             updated_at: string;
@@ -5475,6 +5430,7 @@ declare namespace responses {
 type ProjectUsageResponse = components['schemas']['ProjectUsageResponse'];
 type ProjectInvoicesResponse = components['schemas']['ProjectInvoicesResponse'];
 type UserDailyUsageResponse = components['schemas']['UserDailyUsageResponse'];
+type ProjectUpdateRequest = components['schemas']['ProjectUpdateRequest'];
 declare function listProjects(arbi: ArbiClient): Promise<{
     external_id: string;
     name: string;
@@ -5537,6 +5493,71 @@ declare function createProject(arbi: ArbiClient, name: string): Promise<{
     cancel_at_period_end?: boolean | null | undefined;
     portal_url?: string | null | undefined;
 }>;
+/** Update a project's mutable fields (e.g. `name`, `daily_cap_per_user`). */
+declare function updateProject(arbi: ArbiClient, projectExtId: string, body: ProjectUpdateRequest): Promise<{
+    external_id: string;
+    name: string;
+    created_by: string;
+    packs: number;
+    subscription: string;
+    created_at: string;
+    quotas: {
+        storage_gb: {
+            used: number;
+            limit: number;
+        };
+        ai_credits: {
+            used: number;
+            limit: number;
+        };
+        collaborators: {
+            used: number;
+            limit: number;
+        };
+        budget_reset_at?: number | null | undefined;
+    };
+    daily_cap_per_user?: number | null | undefined;
+    price_id?: string | null | undefined;
+    plan?: string | null | undefined;
+    amount?: number | null | undefined;
+    currency?: string | null | undefined;
+    current_period_end?: number | null | undefined;
+    cancel_at_period_end?: boolean | null | undefined;
+    portal_url?: string | null | undefined;
+}>;
+/** Rename a project. Convenience wrapper over {@link updateProject}. */
+declare function renameProject(arbi: ArbiClient, projectExtId: string, name: string): Promise<{
+    external_id: string;
+    name: string;
+    created_by: string;
+    packs: number;
+    subscription: string;
+    created_at: string;
+    quotas: {
+        storage_gb: {
+            used: number;
+            limit: number;
+        };
+        ai_credits: {
+            used: number;
+            limit: number;
+        };
+        collaborators: {
+            used: number;
+            limit: number;
+        };
+        budget_reset_at?: number | null | undefined;
+    };
+    daily_cap_per_user?: number | null | undefined;
+    price_id?: string | null | undefined;
+    plan?: string | null | undefined;
+    amount?: number | null | undefined;
+    currency?: string | null | undefined;
+    current_period_end?: number | null | undefined;
+    cancel_at_period_end?: boolean | null | undefined;
+    portal_url?: string | null | undefined;
+}>;
+declare function deleteProject(arbi: ArbiClient, projectExtId: string): Promise<void>;
 declare function refreshProject(arbi: ArbiClient, projectExtId: string): Promise<{
     external_id: string;
     name: string;
@@ -5583,16 +5604,20 @@ declare function getProjectInvoices(arbi: ArbiClient, projectExtId: string): Pro
 declare function getUserUsageToday(arbi: ArbiClient): Promise<UserDailyUsageResponse>;
 
 type projects_ProjectInvoicesResponse = ProjectInvoicesResponse;
+type projects_ProjectUpdateRequest = ProjectUpdateRequest;
 type projects_ProjectUsageResponse = ProjectUsageResponse;
 type projects_UserDailyUsageResponse = UserDailyUsageResponse;
 declare const projects_createProject: typeof createProject;
+declare const projects_deleteProject: typeof deleteProject;
 declare const projects_getProjectInvoices: typeof getProjectInvoices;
 declare const projects_getProjectUsage: typeof getProjectUsage;
 declare const projects_getUserUsageToday: typeof getUserUsageToday;
 declare const projects_listProjects: typeof listProjects;
 declare const projects_refreshProject: typeof refreshProject;
+declare const projects_renameProject: typeof renameProject;
+declare const projects_updateProject: typeof updateProject;
 declare namespace projects {
-  export { type projects_ProjectInvoicesResponse as ProjectInvoicesResponse, type projects_ProjectUsageResponse as ProjectUsageResponse, type projects_UserDailyUsageResponse as UserDailyUsageResponse, projects_createProject as createProject, projects_getProjectInvoices as getProjectInvoices, projects_getProjectUsage as getProjectUsage, projects_getUserUsageToday as getUserUsageToday, projects_listProjects as listProjects, projects_refreshProject as refreshProject };
+  export { type projects_ProjectInvoicesResponse as ProjectInvoicesResponse, type projects_ProjectUpdateRequest as ProjectUpdateRequest, type projects_ProjectUsageResponse as ProjectUsageResponse, type projects_UserDailyUsageResponse as UserDailyUsageResponse, projects_createProject as createProject, projects_deleteProject as deleteProject, projects_getProjectInvoices as getProjectInvoices, projects_getProjectUsage as getProjectUsage, projects_getUserUsageToday as getUserUsageToday, projects_listProjects as listProjects, projects_refreshProject as refreshProject, projects_renameProject as renameProject, projects_updateProject as updateProject };
 }
 
 export { type ResponseUsage as $, type AgentStepDeltaEvent as A, type MemorySearchResponse as B, type ChatSession as C, DOC_TERMINAL_STATUSES as D, type MessageLevel as E, type FormattedWsMessage as F, type MessageMetadataPayload$1 as G, type MessageQueuedEvent as H, type ProjectInvoicesResponse as I, type ProjectUsageResponse as J, type ReconnectableWsConnection as K, type ListAllOptions as L, type MemoryResponse as M, type ResolvedCitation as N, type OutputTokensDetails as O, type ParsedSlashCommand as P, type QueryOptions as Q, type ReconnectOptions as R, type ResolvedRecipient as S, type ResponseCompletedEvent as T, type ResponseContentPartAddedEvent as U, type ResponseCreatedEvent as V, type ResponseFailedEvent as W, type ResponseOutputItemAddedEvent as X, type ResponseOutputItemDoneEvent as Y, type ResponseOutputTextDeltaEvent as Z, type ResponseOutputTextDoneEvent as _, type AgentStepEvent as a, requireOk as a$, type SSEEvent as a0, type SSEStreamCallbacks as a1, type SSEStreamResult as a2, type SSEStreamStartData as a3, SUPPORTED_EXTENSIONS as a4, type SkillSummary as a5, type SkippedFile as a6, type TaskResponse as a7, type UpdateMemoryRequest as a8, type UpdateTaskRequest as a9, createDocumentWaiter as aA, dm as aB, doctags as aC, documents as aD, files as aE, filterSkills as aF, formatAgentStepLabel as aG, formatFileSize as aH, formatStreamSummary as aI, formatUserName as aJ, formatWorkspaceChoices as aK, formatWsMessage as aL, generateEncryptedWorkspaceKey as aM, generateNewWorkspaceKey as aN, getErrorCode as aO, getErrorMessage as aP, getRawWorkspaceKey as aQ, health as aR, memory as aS, parseSSEEvents as aT, parseSlashCommand as aU, parseSlashTokenInProgress as aV, performPasswordLogin as aW, performSigningKeyLogin as aX, performSsoDeviceFlowLogin as aY, projects as aZ, requireData as a_, type UploadBatchResult as aa, type UploadDirectOptions as ab, type UploadDirectResult as ac, type UploadOptions as ad, type UploadResult as ae, type UserDailyUsageResponse as af, type UserInfo as ag, type UserInputRequestEvent as ah, type UserMessageEvent as ai, WebSocketAuthError as aj, type WorkspaceChronologyOut as ak, type WorkspaceContext as al, type WsConnection as am, agentconfig as an, assistant as ao, authenticatedFetch as ap, buildRetrievalChunkTool as aq, buildRetrievalFullContextTool as ar, buildRetrievalTocTool as as, connectWebSocket as at, connectWithReconnect as au, consumeSSEStream as av, contacts as aw, conversations as ax, countCitations as ay, createAuthenticatedClient as az, Arbi as b, resolveAuth as b0, resolveCitations as b1, resolveWorkspace as b2, responses as b3, selectWorkspace as b4, selectWorkspaceById as b5, settings as b6, streamSSE as b7, stripCitationMarkdown as b8, summarizeCitations as b9, tags as ba, tasks as bb, workspaces as bc, ArbiApiError as c, ArbiError as d, type ArbiErrorEvent as e, type ArbiOptions as f, type ArtifactEvent as g, type AuthContext as h, type AuthHeaders as i, type AuthenticatedClient as j, type CitationSummary as k, type CliConfig as l, type CliCredentials as m, type CommandDescriptor as n, type ConfigStore as o, type ConnectOptions as p, type CreateMemoryRequest as q, type CreateTaskRequest as r, type DmCryptoContext as s, type DocNameMap as t, type DocumentListFields as u, type DocumentListOrder as v, type DocumentWaiter as w, type DocumentWaiterOptions as x, type ListPaginatedOptions as y, type MemorySearchRequest as z };

package/dist/{browser-CxTSIAhf.d.ts → browser-BUspHdyk.d.ts}

@@ -1580,6 +1580,11 @@ declare function resolveRecipient(arbi: ArbiClient, ref: string): Promise<Resolv
  * Encrypts plaintext content for each recipient using their public key.
  * Requires recipient public keys — fetch via contacts or user lookup first.
  *
+ * Returns the created notifications with their content as **plaintext**, not
+ * ciphertext — matching what `listDecryptedDMs` returns. The sender supplied the
+ * text, so it is handed straight back: a caller must never have to re-fetch and
+ * re-decrypt its own ciphertext just to render the message it has just sent.
+ *
  * @param arbi - ArbiClient instance
  * @param messages - Array of { recipient_ext_id, content (plaintext), recipient_encryption_public_key }
  * @param crypto - DM crypto context for the sender
@@ -1588,35 +1593,7 @@ declare function sendEncryptedDM(arbi: ArbiClient, messages: Array<{
     recipient_ext_id: string;
     content: string;
     recipient_encryption_public_key: string;
-}>, crypto: DmCryptoContext): Promise<{
-    type: components["schemas"]["NotificationType"];
-    external_id: string;
-    sender: {
-        external_id: string;
-        parent_ext_id?: string | null | undefined;
-        email: string;
-        given_name: string;
-        family_name?: string | null | undefined;
-        picture?: string | null | undefined;
-        encryption_public_key: string;
-        is_sso: boolean;
-    };
-    recipient: {
-        external_id: string;
-        parent_ext_id?: string | null | undefined;
-        email: string;
-        given_name: string;
-        family_name?: string | null | undefined;
-        picture?: string | null | undefined;
-        encryption_public_key: string;
-        is_sso: boolean;
-    };
-    workspace_ext_id?: string | null | undefined;
-    content?: string | null | undefined;
-    read: boolean;
-    created_at: string;
-    updated_at: string;
-}[]>;
+}>, crypto: DmCryptoContext): Promise<NotificationResponse[]>;
 /**
  * Ask another user to grant you workspace access.
  *
@@ -2137,13 +2114,19 @@ declare class Arbi {
     readonly user: {
         /**
          * The authenticated user's identity from the current session
-         * (`external_id` + `email`), established at login. Returns `null` when not
-         * logged in. This is the canonical "who am I" accessor — DM direction and
-         * ownership checks read it instead of re-deriving identity per call.
+         * (`external_id`, plus `email` when the session carries one), established at
+         * login. Returns `null` when not logged in. This is the canonical "who am I"
+         * accessor — DM direction and ownership checks read it instead of re-deriving
+         * identity per call.
+         *
+         * The external_id alone decides identity. A session without an email (e.g. an
+         * agent, or a key-restored session) is still a known user, so `email` is
+         * nullable rather than gating the whole identity: an ownership check must
+         * never silently fail open just because the email is missing.
          */
         identity: () => {
             externalId: string;
-            email: string;
+            email: string | null;
         } | null;
         /** Today's deployment-wide credit spend for the current user. */
         usageToday: () => Promise<{
@@ -3126,10 +3109,18 @@ declare class Arbi {
     /**
      * Build (and cache) the DM crypto context for the current session.
      *
-     * Derives the user's curve25519 keypair from the stored signing key and pairs
-     * it with their external_id — everything `list()`/`send()` need to encrypt and
+     * Derives the user's curve25519 keypair from their signing key and pairs it
+     * with their external_id — everything `list()`/`send()` need to encrypt and
      * decrypt. Cached for the session and cleared on logout. Consumers never touch
      * this: it's an internal of the `dm` surface.
+     *
+     * The key comes from the live login result first, exactly as `selectWorkspace`
+     * sources it, and only then from persisted storage (which is what restores a
+     * session on reload). Reading storage first would make DMs the one feature that
+     * breaks whenever persistence is unavailable — `saveSession` deliberately
+     * no-ops without Web Crypto (a non-secure origin, tracking prevention, an
+     * embedded widget), so a perfectly authenticated user with a working workspace
+     * would be told they are "not authenticated" the moment they opened Messages.
      */
     private requireDmCrypto;
     readonly dm: {
@@ -3156,28 +3147,10 @@ declare class Arbi {
         send: (recipient: string, text: string) => Promise<{
             type: components["schemas"]["NotificationType"];
             external_id: string;
-            sender: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            recipient: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            workspace_ext_id?: string | null | undefined;
-            content?: string | null | undefined;
+            sender: components["schemas"]["UserResponse"];
+            recipient: components["schemas"]["UserResponse"];
+            workspace_ext_id?: string | null;
+            content?: string | null;
             read: boolean;
             created_at: string;
             updated_at: string;
@@ -3189,28 +3162,10 @@ declare class Arbi {
         sendTo: (recipientExtId: string, recipientPublicKey: string, text: string) => Promise<{
             type: components["schemas"]["NotificationType"];
             external_id: string;
-            sender: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            recipient: {
-                external_id: string;
-                parent_ext_id?: string | null | undefined;
-                email: string;
-                given_name: string;
-                family_name?: string | null | undefined;
-                picture?: string | null | undefined;
-                encryption_public_key: string;
-                is_sso: boolean;
-            };
-            workspace_ext_id?: string | null | undefined;
-            content?: string | null | undefined;
+            sender: components["schemas"]["UserResponse"];
+            recipient: components["schemas"]["UserResponse"];
+            workspace_ext_id?: string | null;
+            content?: string | null;
             read: boolean;
             created_at: string;
             updated_at: string;
@@ -5475,6 +5430,7 @@ declare namespace responses {
 type ProjectUsageResponse = components['schemas']['ProjectUsageResponse'];
 type ProjectInvoicesResponse = components['schemas']['ProjectInvoicesResponse'];
 type UserDailyUsageResponse = components['schemas']['UserDailyUsageResponse'];
+type ProjectUpdateRequest = components['schemas']['ProjectUpdateRequest'];
 declare function listProjects(arbi: ArbiClient): Promise<{
     external_id: string;
     name: string;
@@ -5537,6 +5493,71 @@ declare function createProject(arbi: ArbiClient, name: string): Promise<{
     cancel_at_period_end?: boolean | null | undefined;
     portal_url?: string | null | undefined;
 }>;
+/** Update a project's mutable fields (e.g. `name`, `daily_cap_per_user`). */
+declare function updateProject(arbi: ArbiClient, projectExtId: string, body: ProjectUpdateRequest): Promise<{
+    external_id: string;
+    name: string;
+    created_by: string;
+    packs: number;
+    subscription: string;
+    created_at: string;
+    quotas: {
+        storage_gb: {
+            used: number;
+            limit: number;
+        };
+        ai_credits: {
+            used: number;
+            limit: number;
+        };
+        collaborators: {
+            used: number;
+            limit: number;
+        };
+        budget_reset_at?: number | null | undefined;
+    };
+    daily_cap_per_user?: number | null | undefined;
+    price_id?: string | null | undefined;
+    plan?: string | null | undefined;
+    amount?: number | null | undefined;
+    currency?: string | null | undefined;
+    current_period_end?: number | null | undefined;
+    cancel_at_period_end?: boolean | null | undefined;
+    portal_url?: string | null | undefined;
+}>;
+/** Rename a project. Convenience wrapper over {@link updateProject}. */
+declare function renameProject(arbi: ArbiClient, projectExtId: string, name: string): Promise<{
+    external_id: string;
+    name: string;
+    created_by: string;
+    packs: number;
+    subscription: string;
+    created_at: string;
+    quotas: {
+        storage_gb: {
+            used: number;
+            limit: number;
+        };
+        ai_credits: {
+            used: number;
+            limit: number;
+        };
+        collaborators: {
+            used: number;
+            limit: number;
+        };
+        budget_reset_at?: number | null | undefined;
+    };
+    daily_cap_per_user?: number | null | undefined;
+    price_id?: string | null | undefined;
+    plan?: string | null | undefined;
+    amount?: number | null | undefined;
+    currency?: string | null | undefined;
+    current_period_end?: number | null | undefined;
+    cancel_at_period_end?: boolean | null | undefined;
+    portal_url?: string | null | undefined;
+}>;
+declare function deleteProject(arbi: ArbiClient, projectExtId: string): Promise<void>;
 declare function refreshProject(arbi: ArbiClient, projectExtId: string): Promise<{
     external_id: string;
     name: string;
@@ -5583,16 +5604,20 @@ declare function getProjectInvoices(arbi: ArbiClient, projectExtId: string): Pro
 declare function getUserUsageToday(arbi: ArbiClient): Promise<UserDailyUsageResponse>;
 
 type projects_ProjectInvoicesResponse = ProjectInvoicesResponse;
+type projects_ProjectUpdateRequest = ProjectUpdateRequest;
 type projects_ProjectUsageResponse = ProjectUsageResponse;
 type projects_UserDailyUsageResponse = UserDailyUsageResponse;
 declare const projects_createProject: typeof createProject;
+declare const projects_deleteProject: typeof deleteProject;
 declare const projects_getProjectInvoices: typeof getProjectInvoices;
 declare const projects_getProjectUsage: typeof getProjectUsage;
 declare const projects_getUserUsageToday: typeof getUserUsageToday;
 declare const projects_listProjects: typeof listProjects;
 declare const projects_refreshProject: typeof refreshProject;
+declare const projects_renameProject: typeof renameProject;
+declare const projects_updateProject: typeof updateProject;
 declare namespace projects {
-  export { type projects_ProjectInvoicesResponse as ProjectInvoicesResponse, type projects_ProjectUsageResponse as ProjectUsageResponse, type projects_UserDailyUsageResponse as UserDailyUsageResponse, projects_createProject as createProject, projects_getProjectInvoices as getProjectInvoices, projects_getProjectUsage as getProjectUsage, projects_getUserUsageToday as getUserUsageToday, projects_listProjects as listProjects, projects_refreshProject as refreshProject };
+  export { type projects_ProjectInvoicesResponse as ProjectInvoicesResponse, type projects_ProjectUpdateRequest as ProjectUpdateRequest, type projects_ProjectUsageResponse as ProjectUsageResponse, type projects_UserDailyUsageResponse as UserDailyUsageResponse, projects_createProject as createProject, projects_deleteProject as deleteProject, projects_getProjectInvoices as getProjectInvoices, projects_getProjectUsage as getProjectUsage, projects_getUserUsageToday as getUserUsageToday, projects_listProjects as listProjects, projects_refreshProject as refreshProject, projects_renameProject as renameProject, projects_updateProject as updateProject };
 }
 
 export { type ResponseUsage as $, type AgentStepDeltaEvent as A, type MemorySearchResponse as B, type ChatSession as C, DOC_TERMINAL_STATUSES as D, type MessageLevel as E, type FormattedWsMessage as F, type MessageMetadataPayload$1 as G, type MessageQueuedEvent as H, type ProjectInvoicesResponse as I, type ProjectUsageResponse as J, type ReconnectableWsConnection as K, type ListAllOptions as L, type MemoryResponse as M, type ResolvedCitation as N, type OutputTokensDetails as O, type ParsedSlashCommand as P, type QueryOptions as Q, type ReconnectOptions as R, type ResolvedRecipient as S, type ResponseCompletedEvent as T, type ResponseContentPartAddedEvent as U, type ResponseCreatedEvent as V, type ResponseFailedEvent as W, type ResponseOutputItemAddedEvent as X, type ResponseOutputItemDoneEvent as Y, type ResponseOutputTextDeltaEvent as Z, type ResponseOutputTextDoneEvent as _, type AgentStepEvent as a, requireOk as a$, type SSEEvent as a0, type SSEStreamCallbacks as a1, type SSEStreamResult as a2, type SSEStreamStartData as a3, SUPPORTED_EXTENSIONS as a4, type SkillSummary as a5, type SkippedFile as a6, type TaskResponse as a7, type UpdateMemoryRequest as a8, type UpdateTaskRequest as a9, createDocumentWaiter as aA, dm as aB, doctags as aC, documents as aD, files as aE, filterSkills as aF, formatAgentStepLabel as aG, formatFileSize as aH, formatStreamSummary as aI, formatUserName as aJ, formatWorkspaceChoices as aK, formatWsMessage as aL, generateEncryptedWorkspaceKey as aM, generateNewWorkspaceKey as aN, getErrorCode as aO, getErrorMessage as aP, getRawWorkspaceKey as aQ, health as aR, memory as aS, parseSSEEvents as aT, parseSlashCommand as aU, parseSlashTokenInProgress as aV, performPasswordLogin as aW, performSigningKeyLogin as aX, performSsoDeviceFlowLogin as aY, projects as aZ, requireData as a_, type UploadBatchResult as aa, type UploadDirectOptions as ab, type UploadDirectResult as ac, type UploadOptions as ad, type UploadResult as ae, type UserDailyUsageResponse as af, type UserInfo as ag, type UserInputRequestEvent as ah, type UserMessageEvent as ai, WebSocketAuthError as aj, type WorkspaceChronologyOut as ak, type WorkspaceContext as al, type WsConnection as am, agentconfig as an, assistant as ao, authenticatedFetch as ap, buildRetrievalChunkTool as aq, buildRetrievalFullContextTool as ar, buildRetrievalTocTool as as, connectWebSocket as at, connectWithReconnect as au, consumeSSEStream as av, contacts as aw, conversations as ax, countCitations as ay, createAuthenticatedClient as az, Arbi as b, resolveAuth as b0, resolveCitations as b1, resolveWorkspace as b2, responses as b3, selectWorkspace as b4, selectWorkspaceById as b5, settings as b6, streamSSE as b7, stripCitationMarkdown as b8, summarizeCitations as b9, tags as ba, tasks as bb, workspaces as bc, ArbiApiError as c, ArbiError as d, type ArbiErrorEvent as e, type ArbiOptions as f, type ArtifactEvent as g, type AuthContext as h, type AuthHeaders as i, type AuthenticatedClient as j, type CitationSummary as k, type CliConfig as l, type CliCredentials as m, type CommandDescriptor as n, type ConfigStore as o, type ConnectOptions as p, type CreateMemoryRequest as q, type CreateTaskRequest as r, type DmCryptoContext as s, type DocNameMap as t, type DocumentListFields as u, type DocumentListOrder as v, type DocumentWaiter as w, type DocumentWaiterOptions as x, type ListPaginatedOptions as y, type MemorySearchRequest as z };

package/dist/browser.cjs

@@ -5217,6 +5217,7 @@ async function resolveRecipient(arbi, ref) {
   return null;
 }
 async function sendEncryptedDM(arbi, messages, crypto) {
+  const plaintextFor = new Map(messages.map((m2) => [m2.recipient_ext_id, m2.content]));
   const encrypted = await Promise.all(
     messages.map(async (msg) => ({
       recipient_ext_id: msg.recipient_ext_id,
@@ -5228,10 +5229,14 @@ async function sendEncryptedDM(arbi, messages, crypto) {
       )
     }))
   );
-  return requireData(
+  const created = requireData(
     await arbi.fetch.POST("/v1/notifications/", { body: { messages: encrypted } }),
     "Failed to send message"
   );
+  return created.map((n2) => ({
+    ...n2,
+    content: plaintextFor.get(n2.recipient.external_id) ?? n2.content
+  }));
 }
 async function requestWorkspaceAccess(arbi, params, crypto) {
   const payload = JSON.stringify({
@@ -5421,11 +5426,14 @@ async function listSessions(arbi) {
 var projects_exports = {};
 __export(projects_exports, {
   createProject: () => createProject,
+  deleteProject: () => deleteProject,
   getProjectInvoices: () => getProjectInvoices,
   getProjectUsage: () => getProjectUsage,
   getUserUsageToday: () => getUserUsageToday,
   listProjects: () => listProjects,
-  refreshProject: () => refreshProject
+  refreshProject: () => refreshProject,
+  renameProject: () => renameProject,
+  updateProject: () => updateProject
 });
 async function listProjects(arbi) {
   return requireData(await arbi.fetch.GET("/v1/user/projects/"), "Failed to fetch projects");
@@ -5438,6 +5446,26 @@ async function createProject(arbi, name) {
     "Failed to create project"
   );
 }
+async function updateProject(arbi, projectExtId, body) {
+  return requireData(
+    await arbi.fetch.PATCH("/v1/user/projects/{project_ext_id}", {
+      params: { path: { project_ext_id: projectExtId } },
+      body
+    }),
+    "Failed to update project"
+  );
+}
+async function renameProject(arbi, projectExtId, name) {
+  return updateProject(arbi, projectExtId, { name });
+}
+async function deleteProject(arbi, projectExtId) {
+  requireOk(
+    await arbi.fetch.DELETE("/v1/user/projects/{project_ext_id}", {
+      params: { path: { project_ext_id: projectExtId } }
+    }),
+    "Failed to delete project"
+  );
+}
 async function refreshProject(arbi, projectExtId) {
   return requireData(
     await arbi.fetch.POST("/v1/user/projects/{project_ext_id}/refresh", {
@@ -5705,13 +5733,19 @@ var Arbi = class {
   user = {
     /**
      * The authenticated user's identity from the current session
-     * (`external_id` + `email`), established at login. Returns `null` when not
-     * logged in. This is the canonical "who am I" accessor — DM direction and
-     * ownership checks read it instead of re-deriving identity per call.
+     * (`external_id`, plus `email` when the session carries one), established at
+     * login. Returns `null` when not logged in. This is the canonical "who am I"
+     * accessor — DM direction and ownership checks read it instead of re-deriving
+     * identity per call.
+     *
+     * The external_id alone decides identity. A session without an email (e.g. an
+     * agent, or a key-restored session) is still a known user, so `email` is
+     * nullable rather than gating the whole identity: an ownership check must
+     * never silently fail open just because the email is missing.
      */
     identity: () => {
       const state = this.requireClient().session.getState();
-      return state.userExtId && state.userEmail ? { externalId: state.userExtId, email: state.userEmail } : null;
+      return state.userExtId ? { externalId: state.userExtId, email: state.userEmail ?? null } : null;
     },
     /** Today's deployment-wide credit spend for the current user. */
     usageToday: () => getUserUsageToday(this.requireClient())
@@ -5899,23 +5933,31 @@ var Arbi = class {
   /**
    * Build (and cache) the DM crypto context for the current session.
    *
-   * Derives the user's curve25519 keypair from the stored signing key and pairs
-   * it with their external_id — everything `list()`/`send()` need to encrypt and
+   * Derives the user's curve25519 keypair from their signing key and pairs it
+   * with their external_id — everything `list()`/`send()` need to encrypt and
    * decrypt. Cached for the session and cleared on logout. Consumers never touch
    * this: it's an internal of the `dm` surface.
+   *
+   * The key comes from the live login result first, exactly as `selectWorkspace`
+   * sources it, and only then from persisted storage (which is what restores a
+   * session on reload). Reading storage first would make DMs the one feature that
+   * breaks whenever persistence is unavailable — `saveSession` deliberately
+   * no-ops without Web Crypto (a non-secure origin, tracking prevention, an
+   * embedded widget), so a perfectly authenticated user with a working workspace
+   * would be told they are "not authenticated" the moment they opened Messages.
    */
   async requireDmCrypto() {
     if (this.dmCryptoContext) return this.dmCryptoContext;
     const client = this.requireClient();
-    const session = await client.storage.getSession();
-    if (!session) {
+    const signingPrivateKey = this.loginResult?.signingPrivateKey ?? (await client.storage.getSession())?.signingPrivateKey;
+    if (!signingPrivateKey) {
       throw new ArbiError("Not authenticated \u2014 no session available for DM encryption");
     }
     const userExtId = client.session.getState().userExtId;
     if (!userExtId) {
       throw new ArbiError("No user identity in session \u2014 cannot set up DM encryption");
     }
-    this.dmCryptoContext = createDmCryptoContext(client, session.signingPrivateKey, userExtId);
+    this.dmCryptoContext = createDmCryptoContext(client, signingPrivateKey, userExtId);
     return this.dmCryptoContext;
   }
   dm = {