@arbidocs/sdk 0.3.119 → 0.3.121

package/dist/index.cjs

@@ -5770,6 +5770,7 @@ async function resolveRecipient(arbi, ref) {
   return null;
 }
 async function sendEncryptedDM(arbi, messages, crypto) {
+  const plaintextFor = new Map(messages.map((m2) => [m2.recipient_ext_id, m2.content]));
   const encrypted = await Promise.all(
     messages.map(async (msg) => ({
       recipient_ext_id: msg.recipient_ext_id,
@@ -5781,10 +5782,14 @@ async function sendEncryptedDM(arbi, messages, crypto) {
       )
     }))
   );
-  return requireData(
+  const created = requireData(
     await arbi.fetch.POST("/v1/notifications/", { body: { messages: encrypted } }),
     "Failed to send message"
   );
+  return created.map((n2) => ({
+    ...n2,
+    content: plaintextFor.get(n2.recipient.external_id) ?? n2.content
+  }));
 }
 async function requestWorkspaceAccess(arbi, params, crypto) {
   const payload = JSON.stringify({
@@ -5978,11 +5983,14 @@ async function listSessions(arbi) {
 var projects_exports = {};
 __export(projects_exports, {
   createProject: () => createProject,
+  deleteProject: () => deleteProject,
   getProjectInvoices: () => getProjectInvoices,
   getProjectUsage: () => getProjectUsage,
   getUserUsageToday: () => getUserUsageToday,
   listProjects: () => listProjects,
-  refreshProject: () => refreshProject
+  refreshProject: () => refreshProject,
+  renameProject: () => renameProject,
+  updateProject: () => updateProject
 });
 async function listProjects(arbi) {
   return requireData(await arbi.fetch.GET("/v1/user/projects/"), "Failed to fetch projects");
@@ -5995,6 +6003,26 @@ async function createProject(arbi, name) {
     "Failed to create project"
   );
 }
+async function updateProject(arbi, projectExtId, body) {
+  return requireData(
+    await arbi.fetch.PATCH("/v1/user/projects/{project_ext_id}", {
+      params: { path: { project_ext_id: projectExtId } },
+      body
+    }),
+    "Failed to update project"
+  );
+}
+async function renameProject(arbi, projectExtId, name) {
+  return updateProject(arbi, projectExtId, { name });
+}
+async function deleteProject(arbi, projectExtId) {
+  requireOk(
+    await arbi.fetch.DELETE("/v1/user/projects/{project_ext_id}", {
+      params: { path: { project_ext_id: projectExtId } }
+    }),
+    "Failed to delete project"
+  );
+}
 async function refreshProject(arbi, projectExtId) {
   return requireData(
     await arbi.fetch.POST("/v1/user/projects/{project_ext_id}/refresh", {
@@ -6027,6 +6055,15 @@ async function getUserUsageToday(arbi) {
 }
 
 // src/operations/tasks.ts
+var tasks_exports = {};
+__export(tasks_exports, {
+  createTask: () => createTask,
+  deleteTask: () => deleteTask,
+  getTask: () => getTask,
+  listTasks: () => listTasks,
+  runTask: () => runTask,
+  updateTask: () => updateTask
+});
 async function listTasks(arbi) {
   return requireData(await arbi.fetch.GET("/v1/tasks"), "Failed to list tasks");
 }
@@ -6245,13 +6282,19 @@ var Arbi = class {
   user = {
     /**
      * The authenticated user's identity from the current session
-     * (`external_id` + `email`), established at login. Returns `null` when not
-     * logged in. This is the canonical "who am I" accessor — DM direction and
-     * ownership checks read it instead of re-deriving identity per call.
+     * (`external_id`, plus `email` when the session carries one), established at
+     * login. Returns `null` when not logged in. This is the canonical "who am I"
+     * accessor — DM direction and ownership checks read it instead of re-deriving
+     * identity per call.
+     *
+     * The external_id alone decides identity. A session without an email (e.g. an
+     * agent, or a key-restored session) is still a known user, so `email` is
+     * nullable rather than gating the whole identity: an ownership check must
+     * never silently fail open just because the email is missing.
      */
     identity: () => {
       const state = this.requireClient().session.getState();
-      return state.userExtId && state.userEmail ? { externalId: state.userExtId, email: state.userEmail } : null;
+      return state.userExtId ? { externalId: state.userExtId, email: state.userEmail ?? null } : null;
     },
     /** Today's deployment-wide credit spend for the current user. */
     usageToday: () => getUserUsageToday(this.requireClient())
@@ -6439,23 +6482,31 @@ var Arbi = class {
   /**
    * Build (and cache) the DM crypto context for the current session.
    *
-   * Derives the user's curve25519 keypair from the stored signing key and pairs
-   * it with their external_id — everything `list()`/`send()` need to encrypt and
+   * Derives the user's curve25519 keypair from their signing key and pairs it
+   * with their external_id — everything `list()`/`send()` need to encrypt and
    * decrypt. Cached for the session and cleared on logout. Consumers never touch
    * this: it's an internal of the `dm` surface.
+   *
+   * The key comes from the live login result first, exactly as `selectWorkspace`
+   * sources it, and only then from persisted storage (which is what restores a
+   * session on reload). Reading storage first would make DMs the one feature that
+   * breaks whenever persistence is unavailable — `saveSession` deliberately
+   * no-ops without Web Crypto (a non-secure origin, tracking prevention, an
+   * embedded widget), so a perfectly authenticated user with a working workspace
+   * would be told they are "not authenticated" the moment they opened Messages.
    */
   async requireDmCrypto() {
     if (this.dmCryptoContext) return this.dmCryptoContext;
     const client = this.requireClient();
-    const session = await client.storage.getSession();
-    if (!session) {
+    const signingPrivateKey = this.loginResult?.signingPrivateKey ?? (await client.storage.getSession())?.signingPrivateKey;
+    if (!signingPrivateKey) {
       throw new ArbiError("Not authenticated \u2014 no session available for DM encryption");
     }
     const userExtId = client.session.getState().userExtId;
     if (!userExtId) {
       throw new ArbiError("No user identity in session \u2014 cannot set up DM encryption");
     }
-    this.dmCryptoContext = createDmCryptoContext(client, session.signingPrivateKey, userExtId);
+    this.dmCryptoContext = createDmCryptoContext(client, signingPrivateKey, userExtId);
     return this.dmCryptoContext;
   }
   dm = {
@@ -7398,6 +7449,18 @@ function extractResponseText(response) {
   return parts.join("");
 }
 
+// src/operations/profile.ts
+var profile_exports = {};
+__export(profile_exports, {
+  updateProfile: () => updateProfile
+});
+async function updateProfile(arbi, body) {
+  return requireData(
+    await arbi.fetch.PATCH("/v1/user/profile", { body }),
+    "Failed to update profile"
+  );
+}
+
 // src/listen/index.ts
 var listen_exports = {};
 __export(listen_exports, {
@@ -7749,6 +7812,7 @@ exports.parseSlashTokenInProgress = parseSlashTokenInProgress;
 exports.performPasswordLogin = performPasswordLogin;
 exports.performSigningKeyLogin = performSigningKeyLogin;
 exports.performSsoDeviceFlowLogin = performSsoDeviceFlowLogin;
+exports.profile = profile_exports;
 exports.projects = projects_exports;
 exports.requireData = requireData;
 exports.requireOk = requireOk;
@@ -7765,6 +7829,7 @@ exports.streamSSE = streamSSE;
 exports.stripCitationMarkdown = stripCitationMarkdown;
 exports.summarizeCitations = summarizeCitations;
 exports.tags = tags_exports;
+exports.tasks = tasks_exports;
 exports.workspaces = workspaces_exports;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map