@arbidocs/sdk 0.3.18 → 0.3.20

package/dist/{browser-DUQ3Eyvd.d.ts → browser-z9a2abGo.d.ts}

@@ -1,5 +1,4 @@
-import * as _arbidocs_client from '@arbidocs/client';
-import { ArbiClient, LoginResult, components, WebSocketServerMessage, WsTaskUpdateMessage } from '@arbidocs/client';
+import { ArbiClient, LoginResult, components, WebSocketServerMessage, WsTaskUpdateMessage, KeyPair } from '@arbidocs/client';
 
 /**
  * Core error types and throwing error utilities.
@@ -49,7 +48,6 @@ declare function getErrorCode(err: unknown): string | undefined;
 interface AuthHeaders {
     baseUrl: string;
     accessToken: string;
-    workspaceKeyHeader: string;
 }
 interface AuthFetchOptions extends AuthHeaders {
     /** URL path relative to baseUrl (e.g. '/v1/document/upload'). */
@@ -61,7 +59,8 @@ interface AuthFetchOptions extends AuthHeaders {
 }
 /**
  * Make an authenticated fetch request with standard error handling.
- * Automatically sets Authorization + workspace-key headers.
+ * Automatically sets Authorization header. Workspace keys are stored
+ * server-side on the session — no client-side header needed.
  * Throws on non-ok responses with a human-readable message including server error details.
  */
 declare function authenticatedFetch(options: AuthFetchOptions): Promise<Response>;
@@ -79,21 +78,25 @@ interface CliConfig {
     notifications?: boolean;
     verbose?: boolean;
     watch?: boolean;
+    /** Default orchestrator for `arbi agent connect` (e.g. "claude") */
+    orchestrator?: string;
 }
 interface CliCredentials {
     email: string;
     signingPrivateKeyBase64: string;
     serverSessionKeyBase64: string;
-    /** Cached workspace-scoped JWT from last successful resolveWorkspace() */
+    /** Cached access token from last successful resolveWorkspace() */
     accessToken?: string;
-    /** Cached workspace key header from last successful resolveWorkspace() */
-    workspaceKeyHeader?: string;
+    /** Cached session-sealed workspace key from last successful resolveWorkspace() */
+    sealedWorkspaceKey?: string;
     /** Workspace ID the cached token was issued for */
     workspaceId?: string;
     /** ISO timestamp when the token was cached */
     tokenTimestamp?: string;
     /** Auth0 SSO token — needed for session recovery of SSO users */
     ssoToken?: string;
+    /** Parent user ext_id — set for persistent agent accounts */
+    parentExtId?: string;
 }
 interface ChatSession {
     /** Last assistant message ID — used as previous_response_id for follow-ups */
@@ -141,7 +144,7 @@ interface AuthContext {
 interface WorkspaceContext extends AuthContext {
     workspaceId: string;
     accessToken: string;
-    workspaceKeyHeader: string;
+    sealedWorkspaceKey: string;
 }
 /** Minimal workspace shape required by formatWorkspaceChoices. */
 interface WorkspaceForChoice {
@@ -187,15 +190,21 @@ declare function performSsoDeviceFlowLogin(config: CliConfig, email: string, pas
     onPoll?: (elapsedMs: number) => void;
 }): Promise<AuthContext>;
 /**
- * Decrypt wrapped workspace key and set it as the active workspace header.
+ * Decrypt wrapped workspace key and generate the encrypted workspace key header.
+ * Returns the encrypted key string for use with /open.
  */
-declare function selectWorkspace(arbi: ArbiClient, workspaceId: string, wrappedKey: string, serverSessionKey: Uint8Array, signingPrivateKeyBase64: string): Promise<void>;
+declare function selectWorkspace(arbi: ArbiClient, workspaceId: string, wrappedKey: string, serverSessionKey: Uint8Array, signingPrivateKeyBase64: string): Promise<string>;
 /**
  * Generate an encrypted workspace key for the given workspace.
  * Used for operations that need a key for a workspace other than the current one
  * (e.g., copy documents to a target workspace).
  */
 declare function generateEncryptedWorkspaceKey(arbi: ArbiClient, wrappedKey: string, serverSessionKey: Uint8Array, signingPrivateKeyBase64: string): Promise<string>;
+/**
+ * Generate a random workspace key encrypted with the session public key.
+ * Used when creating new workspaces.
+ */
+declare function generateNewWorkspaceKey(arbi: ArbiClient, serverSessionKey: Uint8Array): Promise<string>;
 /**
  * Find a workspace by ID in the user's workspace list, select it, and return workspace info.
  */
@@ -255,17 +264,19 @@ interface SSEEvent {
     event: string;
     data: string;
 }
-declare const TOOL_LABELS: Record<string, string>;
-declare const LIFECYCLE_LABELS: Record<string, string>;
 /**
  * Format an AgentStepEvent into a human-readable label.
  *
+ * Uses backend-provided `label` field when available, falling back to
+ * tool name or step name for old persisted events.
+ *
  * Priority:
  * 1. `focus` — the agent's descriptive sentence about what it's doing
- * 2. For `tool_progress` — tool-specific label + optional message
- * 3. Lifecycle label (planning, evaluation, etc.)
- * 4. Tool name from detail
- * 5. Fallback to step name or empty string
+ * 2. `label` — backend-provided display label
+ * 3. For `tool_progress` — detail label + optional message
+ * 4. Lifecycle fallback (planning, evaluation, etc.)
+ * 5. Tool name from detail
+ * 6. Fallback to step name or empty string
  */
 declare function formatAgentStepLabel(step: AgentStepEvent): string;
 /**
@@ -834,9 +845,10 @@ declare function listContacts(arbi: ArbiClient): Promise<{
     email: string;
     user?: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     } | null | undefined;
@@ -848,9 +860,10 @@ declare function addContacts(arbi: ArbiClient, emails: string[]): Promise<{
     email: string;
     user?: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     } | null | undefined;
@@ -1073,9 +1086,10 @@ declare class Arbi {
             users: {
                 user: {
                     external_id: string;
+                    parent_ext_id?: string | null | undefined;
                     email: string;
                     given_name: string;
-                    family_name: string;
+                    family_name?: string | null | undefined;
                     picture?: string | null | undefined;
                     encryption_public_key: string;
                 };
@@ -1083,6 +1097,7 @@ declare class Arbi {
                 joined_at: string;
                 conversation_count: number;
                 document_count: number;
+                agent_ext_id?: string | null | undefined;
             }[];
         }[]>;
         create: (name: string, description?: string | null, isPublic?: boolean) => Promise<{
@@ -1103,9 +1118,10 @@ declare class Arbi {
             users: {
                 user: {
                     external_id: string;
+                    parent_ext_id?: string | null | undefined;
                     email: string;
                     given_name: string;
-                    family_name: string;
+                    family_name?: string | null | undefined;
                     picture?: string | null | undefined;
                     encryption_public_key: string;
                 };
@@ -1113,6 +1129,7 @@ declare class Arbi {
                 joined_at: string;
                 conversation_count: number;
                 document_count: number;
+                agent_ext_id?: string | null | undefined;
             }[];
         }>;
         delete: (workspaceIds: string[]) => Promise<void>;
@@ -1134,9 +1151,10 @@ declare class Arbi {
             users: {
                 user: {
                     external_id: string;
+                    parent_ext_id?: string | null | undefined;
                     email: string;
                     given_name: string;
-                    family_name: string;
+                    family_name?: string | null | undefined;
                     picture?: string | null | undefined;
                     encryption_public_key: string;
                 };
@@ -1144,14 +1162,16 @@ declare class Arbi {
                 joined_at: string;
                 conversation_count: number;
                 document_count: number;
+                agent_ext_id?: string | null | undefined;
             }[];
         }>;
         listUsers: () => Promise<{
             user: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1159,13 +1179,15 @@ declare class Arbi {
             joined_at: string;
             conversation_count: number;
             document_count: number;
+            agent_ext_id?: string | null | undefined;
         }[]>;
         addUsers: (emails: string[], role?: "owner" | "collaborator" | "guest") => Promise<{
             user: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1173,14 +1195,16 @@ declare class Arbi {
             joined_at: string;
             conversation_count: number;
             document_count: number;
+            agent_ext_id?: string | null | undefined;
         }[]>;
         removeUsers: (userIds: string[]) => Promise<void>;
         setUserRole: (userIds: string[], role: "owner" | "collaborator" | "guest") => Promise<{
             user: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1188,6 +1212,7 @@ declare class Arbi {
             joined_at: string;
             conversation_count: number;
             document_count: number;
+            agent_ext_id?: string | null | undefined;
         }[]>;
         copyDocuments: (targetWorkspaceId: string, docIds: string[], targetWorkspaceKey: string) => Promise<{
             detail: string;
@@ -1791,9 +1816,10 @@ declare class Arbi {
             email: string;
             user?: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             } | null | undefined;
@@ -1805,9 +1831,10 @@ declare class Arbi {
             email: string;
             user?: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             } | null | undefined;
@@ -1823,17 +1850,19 @@ declare class Arbi {
             external_id: string;
             sender: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
             recipient: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1851,17 +1880,19 @@ declare class Arbi {
             external_id: string;
             sender: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
             recipient: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1876,17 +1907,19 @@ declare class Arbi {
             external_id: string;
             sender: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
             recipient: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1922,6 +1955,7 @@ declare class Arbi {
             show_help_page: boolean;
             show_templates: boolean;
             show_pa_mode: boolean;
+            show_agent_sessions: boolean;
             hide_online_status: boolean;
             muted_users: string[];
         }>;
@@ -1955,8 +1989,6 @@ declare class Arbi {
                 SUGGESTED_QUERIES: boolean;
                 ARTIFACTS_ENABLED: boolean;
                 VISION_ENABLED: boolean;
-                DOC_INDEX_COMPACT_THRESHOLD: number;
-                DOC_INDEX_SKIP_THRESHOLD: number;
                 PERSONAL_AGENT: boolean;
                 MEMORY_ENABLED: boolean;
                 SKILLS_ENABLED: boolean;
@@ -1967,13 +1999,15 @@ declare class Arbi {
                 AGENT_API_TYPE: "local" | "remote";
                 LLM_AGENT_TEMPERATURE: number;
                 AGENT_MAX_TOKENS: number;
+                ENABLE_THINKING: boolean;
                 AGENT_MAX_ITERATIONS: number;
-                MAX_PASSAGE_PAGES: number;
+                AGENT_MAX_PARALLEL_TOOL_CALLS: number;
                 AGENT_HISTORY_CHAR_THRESHOLD: number;
                 AGENT_SYSTEM_PROMPT: string;
             };
             QueryLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -1982,6 +2016,7 @@ declare class Arbi {
             };
             ReviewLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -1990,6 +2025,7 @@ declare class Arbi {
             };
             EvaluatorLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -1998,6 +2034,7 @@ declare class Arbi {
             };
             TitleLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -2006,6 +2043,7 @@ declare class Arbi {
             };
             SummariseLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2016,6 +2054,7 @@ declare class Arbi {
             };
             DoctagLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 MAX_CHAR_CONTEXT_TO_ANSWER: number;
@@ -2033,6 +2072,7 @@ declare class Arbi {
             };
             MemoryLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2042,6 +2082,7 @@ declare class Arbi {
             };
             PlanningLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2049,8 +2090,17 @@ declare class Arbi {
                 MAX_CHAR_SIZE_TO_ANSWER: number;
                 APPROVAL_TIMEOUT: number;
             };
+            FilterPlanLLM: {
+                API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
+                MODEL_NAME: string;
+                SYSTEM_INSTRUCTION: string;
+                TEMPERATURE: number;
+                MAX_TOKENS: number;
+            };
             VisionLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 TEMPERATURE: number;
                 MAX_TOKENS: number;
@@ -2059,6 +2109,7 @@ declare class Arbi {
             };
             CodeAgent: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2069,6 +2120,7 @@ declare class Arbi {
                 SIM_THREASHOLD: number;
                 MIN_CHAR_SIZE_TO_ANSWER: number;
                 MAX_NUMB_CITATIONS: number;
+                CITATION_INSTRUCTION: string;
             };
             Retriever: {
                 MIN_RETRIEVAL_SIM_SCORE: number;
@@ -2076,9 +2128,9 @@ declare class Arbi {
                 MAX_TOTAL_CHUNKS_TO_RETRIEVE: number;
                 GROUP_SIZE: number;
                 SEARCH_MODE: components["schemas"]["SearchMode"];
+                HYBRID_PREFETCH_LIMIT: number;
                 HYBRID_DENSE_WEIGHT: number;
                 HYBRID_SPARSE_WEIGHT: number;
-                HYBRID_RERANKER_WEIGHT: number;
             };
             Reranker: {
                 MIN_SCORE: number;
@@ -2086,6 +2138,7 @@ declare class Arbi {
                 MAX_CONCURRENT_REQUESTS: number;
                 MODEL_NAME: string;
                 API_TYPE: "local" | "remote";
+                RETRIEVAL_INSTRUCTION: string;
             };
             Parser: {
                 SKIP_DUPLICATES: boolean;
@@ -2245,6 +2298,48 @@ declare class Arbi {
         }>;
         getContent: (fileId: string) => Promise<Response>;
     };
+    readonly agents: {
+        list: () => Promise<{
+            external_id: string;
+            parent_ext_id?: string | null;
+            email: string;
+            given_name: string;
+            family_name?: string | null;
+            picture?: string | null;
+            encryption_public_key: string;
+        }[]>;
+        delete: (agentExtIds: string[]) => Promise<{
+            [x: string]: unknown;
+        }>;
+    };
+    readonly sessions: {
+        list: () => Promise<{
+            session_id: string;
+            external_id?: string | null;
+            name?: string | null;
+            ip_address?: string | null;
+            active_workspace?: string | null;
+            workspaces: string[];
+            status: string;
+            ttl: number;
+        }[]>;
+        authorize: (workspaces: Record<string, string>, options?: {
+            activeWorkspace?: string;
+            ttl?: number;
+            persistIdentity?: boolean;
+            name?: string;
+        }) => Promise<{
+            claim_code: string;
+        }>;
+        claim: (claimCode: string, signingKey?: string) => Promise<{
+            access_token: string;
+            session_key: string;
+            user: components["schemas"]["UserResponse"];
+            workspaces: {
+                [key: string]: unknown;
+            }[];
+        }>;
+    };
     private requireClient;
     private requireLogin;
     private requireWorkspace;
@@ -2273,9 +2368,10 @@ declare function listWorkspaces(arbi: ArbiClient): Promise<{
     users: {
         user: {
             external_id: string;
+            parent_ext_id?: string | null | undefined;
             email: string;
             given_name: string;
-            family_name: string;
+            family_name?: string | null | undefined;
             picture?: string | null | undefined;
             encryption_public_key: string;
         };
@@ -2283,9 +2379,17 @@ declare function listWorkspaces(arbi: ArbiClient): Promise<{
         joined_at: string;
         conversation_count: number;
         document_count: number;
+        agent_ext_id?: string | null | undefined;
     }[];
 }[]>;
-declare function createWorkspace(arbi: ArbiClient, name: string, description?: string | null, isPublic?: boolean): Promise<{
+/**
+ * Create a workspace with a pre-encrypted workspace key.
+ *
+ * The caller must generate a random 32-byte key, encrypt it with the session
+ * public key (SealedBox via `sealKeyForSession`), and pass it here.
+ * Use `Arbi.workspaces.create()` for automatic key generation.
+ */
+declare function createWorkspace(arbi: ArbiClient, name: string, encryptedWorkspaceKey: string, description?: string | null, isPublic?: boolean): Promise<{
     external_id: string;
     name: string;
     description: string | null;
@@ -2303,9 +2407,10 @@ declare function createWorkspace(arbi: ArbiClient, name: string, description?: s
     users: {
         user: {
             external_id: string;
+            parent_ext_id?: string | null | undefined;
             email: string;
             given_name: string;
-            family_name: string;
+            family_name?: string | null | undefined;
             picture?: string | null | undefined;
             encryption_public_key: string;
         };
@@ -2313,6 +2418,7 @@ declare function createWorkspace(arbi: ArbiClient, name: string, description?: s
         joined_at: string;
         conversation_count: number;
         document_count: number;
+        agent_ext_id?: string | null | undefined;
     }[];
 }>;
 declare function deleteWorkspaces(arbi: ArbiClient, workspaceIds: string[]): Promise<void>;
@@ -2334,9 +2440,10 @@ declare function updateWorkspace(arbi: ArbiClient, body: WorkspaceUpdateRequest)
     users: {
         user: {
             external_id: string;
+            parent_ext_id?: string | null | undefined;
             email: string;
             given_name: string;
-            family_name: string;
+            family_name?: string | null | undefined;
             picture?: string | null | undefined;
             encryption_public_key: string;
         };
@@ -2344,14 +2451,16 @@ declare function updateWorkspace(arbi: ArbiClient, body: WorkspaceUpdateRequest)
         joined_at: string;
         conversation_count: number;
         document_count: number;
+        agent_ext_id?: string | null | undefined;
     }[];
 }>;
 declare function listWorkspaceUsers(arbi: ArbiClient): Promise<{
     user: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2359,13 +2468,15 @@ declare function listWorkspaceUsers(arbi: ArbiClient): Promise<{
     joined_at: string;
     conversation_count: number;
     document_count: number;
+    agent_ext_id?: string | null | undefined;
 }[]>;
 declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'owner' | 'collaborator' | 'guest'): Promise<{
     user: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2373,14 +2484,16 @@ declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'o
     joined_at: string;
     conversation_count: number;
     document_count: number;
+    agent_ext_id?: string | null | undefined;
 }[]>;
 declare function removeWorkspaceUsers(arbi: ArbiClient, userIds: string[]): Promise<void>;
 declare function setUserRole(arbi: ArbiClient, userIds: string[], role: 'owner' | 'collaborator' | 'guest'): Promise<{
     user: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2388,6 +2501,7 @@ declare function setUserRole(arbi: ArbiClient, userIds: string[], role: 'owner'
     joined_at: string;
     conversation_count: number;
     document_count: number;
+    agent_ext_id?: string | null | undefined;
 }[]>;
 declare function copyDocuments(arbi: ArbiClient, targetWorkspaceId: string, docIds: string[], targetWorkspaceKey: string): Promise<{
     detail: string;
@@ -2856,22 +2970,138 @@ declare namespace doctags {
   export { doctags_assignDocTags as assignDocTags, doctags_generateDocTags as generateDocTags, doctags_removeDocTags as removeDocTags, doctags_updateDocTag as updateDocTag };
 }
 
+/**
+ * Direct message / notification operations — list, send, mark read, delete.
+ *
+ * All message content is E2E encrypted using ECDH (X25519 + XSalsa20-Poly1305).
+ * Encryption keys are derived from the user's Ed25519 signing keypair.
+ */
+
+type NotificationResponse = components['schemas']['NotificationResponse'];
+/**
+ * Everything needed to encrypt/decrypt DMs.
+ * Derive once per session, pass to all DM operations.
+ */
+interface DmCryptoContext {
+    /** User's X25519 encryption keypair (derived from Ed25519 signing key) */
+    encryptionKeypair: KeyPair;
+    /** User's own external_id (to determine send vs receive direction) */
+    userExtId: string;
+}
+/**
+ * Create a DM crypto context from a signing private key.
+ *
+ * @param arbi - ArbiClient instance (provides crypto utilities)
+ * @param signingPrivateKeyBytes - Ed25519 signing private key (64 bytes)
+ * @param userExtId - Current user's external_id
+ */
+declare function createDmCryptoContext(arbi: ArbiClient, signingPrivateKeyBytes: Uint8Array, userExtId: string): DmCryptoContext;
+/**
+ * Encrypt a plaintext message for a recipient.
+ *
+ * @param arbi - ArbiClient instance
+ * @param plaintext - Message content to encrypt
+ * @param recipientEncryptionPubKeyBase64 - Recipient's X25519 public key (base64)
+ * @param senderEncryptionSecretKey - Sender's X25519 secret key (Uint8Array)
+ * @returns Base64-encoded ciphertext (nonce prepended)
+ */
+declare function encryptDmContent(arbi: ArbiClient, plaintext: string, recipientEncryptionPubKeyBase64: string, senderEncryptionSecretKey: Uint8Array): Promise<string>;
+/**
+ * Decrypt an encrypted notification message.
+ *
+ * Uses the sender/recipient public keys embedded in NotificationResponse
+ * to determine the "other party" for ECDH decryption.
+ *
+ * @param arbi - ArbiClient instance
+ * @param notification - The notification with encrypted content
+ * @param crypto - DM crypto context for the current user
+ * @returns Decrypted plaintext, or null if content is empty
+ * @throws Error if decryption fails (wrong keys or tampered message)
+ */
+declare function decryptDmContent(arbi: ArbiClient, notification: NotificationResponse, crypto: DmCryptoContext): Promise<string | null>;
+/**
+ * Decrypt a batch of notifications, replacing content in-place.
+ * Failed decryptions get content set to '[Decryption failed]'.
+ *
+ * @returns New array with decrypted content
+ */
+declare function decryptDmBatch(arbi: ArbiClient, notifications: NotificationResponse[], crypto: DmCryptoContext): Promise<NotificationResponse[]>;
+/**
+ * List DMs (raw — content is encrypted ciphertext).
+ */
 declare function listDMs(arbi: ArbiClient): Promise<{
-    type: _arbidocs_client.components["schemas"]["NotificationType"];
+    type: components["schemas"]["NotificationType"];
+    external_id: string;
+    sender: {
+        external_id: string;
+        parent_ext_id?: string | null | undefined;
+        email: string;
+        given_name: string;
+        family_name?: string | null | undefined;
+        picture?: string | null | undefined;
+        encryption_public_key: string;
+    };
+    recipient: {
+        external_id: string;
+        parent_ext_id?: string | null | undefined;
+        email: string;
+        given_name: string;
+        family_name?: string | null | undefined;
+        picture?: string | null | undefined;
+        encryption_public_key: string;
+    };
+    workspace_ext_id?: string | null | undefined;
+    content?: string | null | undefined;
+    read: boolean;
+    created_at: string;
+    updated_at: string;
+}[]>;
+/**
+ * List and decrypt DMs in one call.
+ */
+declare function listDecryptedDMs(arbi: ArbiClient, crypto: DmCryptoContext): Promise<{
+    type: components["schemas"]["NotificationType"];
+    external_id: string;
+    sender: components["schemas"]["UserResponse"];
+    recipient: components["schemas"]["UserResponse"];
+    workspace_ext_id?: string | null;
+    content?: string | null;
+    read: boolean;
+    created_at: string;
+    updated_at: string;
+}[]>;
+/**
+ * Send an E2E encrypted DM.
+ *
+ * Encrypts plaintext content for each recipient using their public key.
+ * Requires recipient public keys — fetch via contacts or user lookup first.
+ *
+ * @param arbi - ArbiClient instance
+ * @param messages - Array of { recipient_ext_id, content (plaintext), recipient_encryption_public_key }
+ * @param crypto - DM crypto context for the sender
+ */
+declare function sendEncryptedDM(arbi: ArbiClient, messages: Array<{
+    recipient_ext_id: string;
+    content: string;
+    recipient_encryption_public_key: string;
+}>, crypto: DmCryptoContext): Promise<{
+    type: components["schemas"]["NotificationType"];
     external_id: string;
     sender: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
     recipient: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2881,25 +3111,31 @@ declare function listDMs(arbi: ArbiClient): Promise<{
     created_at: string;
     updated_at: string;
 }[]>;
+/**
+ * Send a plaintext DM (no encryption).
+ * @deprecated Use sendEncryptedDM instead.
+ */
 declare function sendDM(arbi: ArbiClient, messages: Array<{
     recipient_ext_id: string;
     content: string;
 }>): Promise<{
-    type: _arbidocs_client.components["schemas"]["NotificationType"];
+    type: components["schemas"]["NotificationType"];
     external_id: string;
     sender: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
     recipient: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2910,21 +3146,23 @@ declare function sendDM(arbi: ArbiClient, messages: Array<{
     updated_at: string;
 }[]>;
 declare function markRead(arbi: ArbiClient, messageIds: string[]): Promise<{
-    type: _arbidocs_client.components["schemas"]["NotificationType"];
+    type: components["schemas"]["NotificationType"];
     external_id: string;
     sender: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
     recipient: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2936,12 +3174,19 @@ declare function markRead(arbi: ArbiClient, messageIds: string[]): Promise<{
 }[]>;
 declare function deleteDMs(arbi: ArbiClient, messageIds: string[]): Promise<void>;
 
+type dm_DmCryptoContext = DmCryptoContext;
+declare const dm_createDmCryptoContext: typeof createDmCryptoContext;
+declare const dm_decryptDmBatch: typeof decryptDmBatch;
+declare const dm_decryptDmContent: typeof decryptDmContent;
 declare const dm_deleteDMs: typeof deleteDMs;
+declare const dm_encryptDmContent: typeof encryptDmContent;
 declare const dm_listDMs: typeof listDMs;
+declare const dm_listDecryptedDMs: typeof listDecryptedDMs;
 declare const dm_markRead: typeof markRead;
 declare const dm_sendDM: typeof sendDM;
+declare const dm_sendEncryptedDM: typeof sendEncryptedDM;
 declare namespace dm {
-  export { dm_deleteDMs as deleteDMs, dm_listDMs as listDMs, dm_markRead as markRead, dm_sendDM as sendDM };
+  export { type dm_DmCryptoContext as DmCryptoContext, dm_createDmCryptoContext as createDmCryptoContext, dm_decryptDmBatch as decryptDmBatch, dm_decryptDmContent as decryptDmContent, dm_deleteDMs as deleteDMs, dm_encryptDmContent as encryptDmContent, dm_listDMs as listDMs, dm_listDecryptedDMs as listDecryptedDMs, dm_markRead as markRead, dm_sendDM as sendDM, dm_sendEncryptedDM as sendEncryptedDM };
 }
 
 /**
@@ -2972,6 +3217,7 @@ declare function getSettings(arbi: ArbiClient): Promise<{
     show_help_page: boolean;
     show_templates: boolean;
     show_pa_mode: boolean;
+    show_agent_sessions: boolean;
     hide_online_status: boolean;
     muted_users: string[];
 }>;
@@ -3015,8 +3261,6 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         SUGGESTED_QUERIES: boolean;
         ARTIFACTS_ENABLED: boolean;
         VISION_ENABLED: boolean;
-        DOC_INDEX_COMPACT_THRESHOLD: number;
-        DOC_INDEX_SKIP_THRESHOLD: number;
         PERSONAL_AGENT: boolean;
         MEMORY_ENABLED: boolean;
         SKILLS_ENABLED: boolean;
@@ -3027,13 +3271,15 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         AGENT_API_TYPE: "local" | "remote";
         LLM_AGENT_TEMPERATURE: number;
         AGENT_MAX_TOKENS: number;
+        ENABLE_THINKING: boolean;
         AGENT_MAX_ITERATIONS: number;
-        MAX_PASSAGE_PAGES: number;
+        AGENT_MAX_PARALLEL_TOOL_CALLS: number;
         AGENT_HISTORY_CHAR_THRESHOLD: number;
         AGENT_SYSTEM_PROMPT: string;
     };
     QueryLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -3042,6 +3288,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     ReviewLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3050,6 +3297,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     EvaluatorLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3058,6 +3306,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     TitleLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -3066,6 +3315,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     SummariseLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3076,6 +3326,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     DoctagLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         MAX_CHAR_CONTEXT_TO_ANSWER: number;
@@ -3093,6 +3344,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     MemoryLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3102,6 +3354,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     PlanningLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3109,8 +3362,17 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         MAX_CHAR_SIZE_TO_ANSWER: number;
         APPROVAL_TIMEOUT: number;
     };
+    FilterPlanLLM: {
+        API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
+        MODEL_NAME: string;
+        SYSTEM_INSTRUCTION: string;
+        TEMPERATURE: number;
+        MAX_TOKENS: number;
+    };
     VisionLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         TEMPERATURE: number;
         MAX_TOKENS: number;
@@ -3119,6 +3381,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     CodeAgent: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3129,6 +3392,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         SIM_THREASHOLD: number;
         MIN_CHAR_SIZE_TO_ANSWER: number;
         MAX_NUMB_CITATIONS: number;
+        CITATION_INSTRUCTION: string;
     };
     Retriever: {
         MIN_RETRIEVAL_SIM_SCORE: number;
@@ -3136,9 +3400,9 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         MAX_TOTAL_CHUNKS_TO_RETRIEVE: number;
         GROUP_SIZE: number;
         SEARCH_MODE: components["schemas"]["SearchMode"];
+        HYBRID_PREFETCH_LIMIT: number;
         HYBRID_DENSE_WEIGHT: number;
         HYBRID_SPARSE_WEIGHT: number;
-        HYBRID_RERANKER_WEIGHT: number;
     };
     Reranker: {
         MIN_SCORE: number;
@@ -3146,6 +3410,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         MAX_CONCURRENT_REQUESTS: number;
         MODEL_NAME: string;
         API_TYPE: "local" | "remote";
+        RETRIEVAL_INSTRUCTION: string;
     };
     Parser: {
         SKIP_DUPLICATES: boolean;
@@ -3319,4 +3584,4 @@ declare namespace responses {
   export { type responses_SubmitBackgroundQueryOptions as SubmitBackgroundQueryOptions, responses_extractResponseText as extractResponseText, responses_getResponse as getResponse, responses_submitBackgroundQuery as submitBackgroundQuery };
 }
 
-export { buildRetrievalFullContextTool as $, type AuthHeaders as A, type ResponseOutputTextDeltaEvent as B, type ConfigStore as C, type DocumentWaiter as D, type ResponseOutputTextDoneEvent as E, type FormattedWsMessage as F, type ResponseUsage as G, type SSEStreamCallbacks as H, type SSEStreamResult as I, type SSEStreamStartData as J, type UserInfo as K, LIFECYCLE_LABELS as L, type MessageLevel as M, type UserInputRequestEvent as N, type OutputTokensDetails as O, type UserMessageEvent as P, type QueryOptions as Q, type ReconnectOptions as R, type SSEEvent as S, TOOL_LABELS as T, type UploadBatchResult as U, type WsConnection as V, type WorkspaceContext as W, agentconfig as X, assistant as Y, authenticatedFetch as Z, buildRetrievalChunkTool as _, type CliConfig as a, buildRetrievalTocTool as a0, connectWebSocket as a1, connectWithReconnect as a2, consumeSSEStream as a3, contacts as a4, conversations as a5, countCitations as a6, createAuthenticatedClient as a7, createDocumentWaiter as a8, dm as a9, stripCitationMarkdown as aA, summarizeCitations as aB, tags as aC, workspaces as aD, doctags as aa, documents as ab, files as ac, formatAgentStepLabel as ad, formatFileSize as ae, formatStreamSummary as af, formatUserName as ag, formatWorkspaceChoices as ah, formatWsMessage as ai, generateEncryptedWorkspaceKey as aj, getErrorCode as ak, getErrorMessage as al, health as am, parseSSEEvents as an, performPasswordLogin as ao, performSsoDeviceFlowLogin as ap, requireData as aq, requireOk as ar, resolveAuth as as, resolveCitations as at, resolveWorkspace as au, responses as av, selectWorkspace as aw, selectWorkspaceById as ax, settings as ay, streamSSE as az, type CliCredentials as b, type ChatSession as c, type UploadOptions as d, type UploadResult as e, type AgentStepEvent as f, Arbi as g, ArbiApiError as h, ArbiError as i, type ArbiOptions as j, type ArtifactEvent as k, type AuthContext as l, type AuthenticatedClient as m, type CitationSummary as n, type ConnectOptions as o, type DocumentWaiterOptions as p, type MessageMetadataPayload$1 as q, type MessageQueuedEvent as r, type ReconnectableWsConnection as s, type ResolvedCitation as t, type ResponseCompletedEvent as u, type ResponseContentPartAddedEvent as v, type ResponseCreatedEvent as w, type ResponseFailedEvent as x, type ResponseOutputItemAddedEvent as y, type ResponseOutputItemDoneEvent as z };
+export { buildRetrievalTocTool as $, type AuthHeaders as A, type ResponseOutputItemDoneEvent as B, type ConfigStore as C, type DmCryptoContext as D, type ResponseOutputTextDeltaEvent as E, type FormattedWsMessage as F, type ResponseOutputTextDoneEvent as G, type ResponseUsage as H, type SSEStreamCallbacks as I, type SSEStreamResult as J, type SSEStreamStartData as K, type UserInfo as L, type MessageLevel as M, type UserInputRequestEvent as N, type OutputTokensDetails as O, type UserMessageEvent as P, type QueryOptions as Q, type ReconnectOptions as R, type SSEEvent as S, type WsConnection as T, type UploadBatchResult as U, agentconfig as V, type WorkspaceContext as W, assistant as X, authenticatedFetch as Y, buildRetrievalChunkTool as Z, buildRetrievalFullContextTool as _, type CliConfig as a, connectWebSocket as a0, connectWithReconnect as a1, consumeSSEStream as a2, contacts as a3, conversations as a4, countCitations as a5, createAuthenticatedClient as a6, createDocumentWaiter as a7, dm as a8, doctags as a9, stripCitationMarkdown as aA, summarizeCitations as aB, tags as aC, workspaces as aD, documents as aa, files as ab, formatAgentStepLabel as ac, formatFileSize as ad, formatStreamSummary as ae, formatUserName as af, formatWorkspaceChoices as ag, formatWsMessage as ah, generateEncryptedWorkspaceKey as ai, generateNewWorkspaceKey as aj, getErrorCode as ak, getErrorMessage as al, health as am, parseSSEEvents as an, performPasswordLogin as ao, performSsoDeviceFlowLogin as ap, requireData as aq, requireOk as ar, resolveAuth as as, resolveCitations as at, resolveWorkspace as au, responses as av, selectWorkspace as aw, selectWorkspaceById as ax, settings as ay, streamSSE as az, type CliCredentials as b, type ChatSession as c, type UploadOptions as d, type UploadResult as e, type AgentStepEvent as f, Arbi as g, ArbiApiError as h, ArbiError as i, type ArbiOptions as j, type ArtifactEvent as k, type AuthContext as l, type AuthenticatedClient as m, type CitationSummary as n, type ConnectOptions as o, type DocumentWaiter as p, type DocumentWaiterOptions as q, type MessageMetadataPayload$1 as r, type MessageQueuedEvent as s, type ReconnectableWsConnection as t, type ResolvedCitation as u, type ResponseCompletedEvent as v, type ResponseContentPartAddedEvent as w, type ResponseCreatedEvent as x, type ResponseFailedEvent as y, type ResponseOutputItemAddedEvent as z };