@arbidocs/sdk 0.3.19 → 0.3.20

package/dist/{browser-D8aF-wkt.d.cts → browser-z9a2abGo.d.cts}

@@ -1,5 +1,4 @@
-import * as _arbidocs_client from '@arbidocs/client';
-import { ArbiClient, LoginResult, components, WebSocketServerMessage, WsTaskUpdateMessage } from '@arbidocs/client';
+import { ArbiClient, LoginResult, components, WebSocketServerMessage, WsTaskUpdateMessage, KeyPair } from '@arbidocs/client';
 
 /**
  * Core error types and throwing error utilities.
@@ -49,7 +48,6 @@ declare function getErrorCode(err: unknown): string | undefined;
 interface AuthHeaders {
     baseUrl: string;
     accessToken: string;
-    workspaceKeyHeader: string;
 }
 interface AuthFetchOptions extends AuthHeaders {
     /** URL path relative to baseUrl (e.g. '/v1/document/upload'). */
@@ -61,7 +59,8 @@ interface AuthFetchOptions extends AuthHeaders {
 }
 /**
  * Make an authenticated fetch request with standard error handling.
- * Automatically sets Authorization + workspace-key headers.
+ * Automatically sets Authorization header. Workspace keys are stored
+ * server-side on the session — no client-side header needed.
  * Throws on non-ok responses with a human-readable message including server error details.
  */
 declare function authenticatedFetch(options: AuthFetchOptions): Promise<Response>;
@@ -79,21 +78,25 @@ interface CliConfig {
     notifications?: boolean;
     verbose?: boolean;
     watch?: boolean;
+    /** Default orchestrator for `arbi agent connect` (e.g. "claude") */
+    orchestrator?: string;
 }
 interface CliCredentials {
     email: string;
     signingPrivateKeyBase64: string;
     serverSessionKeyBase64: string;
-    /** Cached workspace-scoped JWT from last successful resolveWorkspace() */
+    /** Cached access token from last successful resolveWorkspace() */
     accessToken?: string;
-    /** Cached workspace key header from last successful resolveWorkspace() */
-    workspaceKeyHeader?: string;
+    /** Cached session-sealed workspace key from last successful resolveWorkspace() */
+    sealedWorkspaceKey?: string;
     /** Workspace ID the cached token was issued for */
     workspaceId?: string;
     /** ISO timestamp when the token was cached */
     tokenTimestamp?: string;
     /** Auth0 SSO token — needed for session recovery of SSO users */
     ssoToken?: string;
+    /** Parent user ext_id — set for persistent agent accounts */
+    parentExtId?: string;
 }
 interface ChatSession {
     /** Last assistant message ID — used as previous_response_id for follow-ups */
@@ -141,7 +144,7 @@ interface AuthContext {
 interface WorkspaceContext extends AuthContext {
     workspaceId: string;
     accessToken: string;
-    workspaceKeyHeader: string;
+    sealedWorkspaceKey: string;
 }
 /** Minimal workspace shape required by formatWorkspaceChoices. */
 interface WorkspaceForChoice {
@@ -187,15 +190,21 @@ declare function performSsoDeviceFlowLogin(config: CliConfig, email: string, pas
     onPoll?: (elapsedMs: number) => void;
 }): Promise<AuthContext>;
 /**
- * Decrypt wrapped workspace key and set it as the active workspace header.
+ * Decrypt wrapped workspace key and generate the encrypted workspace key header.
+ * Returns the encrypted key string for use with /open.
  */
-declare function selectWorkspace(arbi: ArbiClient, workspaceId: string, wrappedKey: string, serverSessionKey: Uint8Array, signingPrivateKeyBase64: string): Promise<void>;
+declare function selectWorkspace(arbi: ArbiClient, workspaceId: string, wrappedKey: string, serverSessionKey: Uint8Array, signingPrivateKeyBase64: string): Promise<string>;
 /**
  * Generate an encrypted workspace key for the given workspace.
  * Used for operations that need a key for a workspace other than the current one
  * (e.g., copy documents to a target workspace).
  */
 declare function generateEncryptedWorkspaceKey(arbi: ArbiClient, wrappedKey: string, serverSessionKey: Uint8Array, signingPrivateKeyBase64: string): Promise<string>;
+/**
+ * Generate a random workspace key encrypted with the session public key.
+ * Used when creating new workspaces.
+ */
+declare function generateNewWorkspaceKey(arbi: ArbiClient, serverSessionKey: Uint8Array): Promise<string>;
 /**
  * Find a workspace by ID in the user's workspace list, select it, and return workspace info.
  */
@@ -836,9 +845,10 @@ declare function listContacts(arbi: ArbiClient): Promise<{
     email: string;
     user?: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     } | null | undefined;
@@ -850,9 +860,10 @@ declare function addContacts(arbi: ArbiClient, emails: string[]): Promise<{
     email: string;
     user?: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     } | null | undefined;
@@ -1075,9 +1086,10 @@ declare class Arbi {
             users: {
                 user: {
                     external_id: string;
+                    parent_ext_id?: string | null | undefined;
                     email: string;
                     given_name: string;
-                    family_name: string;
+                    family_name?: string | null | undefined;
                     picture?: string | null | undefined;
                     encryption_public_key: string;
                 };
@@ -1085,6 +1097,7 @@ declare class Arbi {
                 joined_at: string;
                 conversation_count: number;
                 document_count: number;
+                agent_ext_id?: string | null | undefined;
             }[];
         }[]>;
         create: (name: string, description?: string | null, isPublic?: boolean) => Promise<{
@@ -1105,9 +1118,10 @@ declare class Arbi {
             users: {
                 user: {
                     external_id: string;
+                    parent_ext_id?: string | null | undefined;
                     email: string;
                     given_name: string;
-                    family_name: string;
+                    family_name?: string | null | undefined;
                     picture?: string | null | undefined;
                     encryption_public_key: string;
                 };
@@ -1115,6 +1129,7 @@ declare class Arbi {
                 joined_at: string;
                 conversation_count: number;
                 document_count: number;
+                agent_ext_id?: string | null | undefined;
             }[];
         }>;
         delete: (workspaceIds: string[]) => Promise<void>;
@@ -1136,9 +1151,10 @@ declare class Arbi {
             users: {
                 user: {
                     external_id: string;
+                    parent_ext_id?: string | null | undefined;
                     email: string;
                     given_name: string;
-                    family_name: string;
+                    family_name?: string | null | undefined;
                     picture?: string | null | undefined;
                     encryption_public_key: string;
                 };
@@ -1146,14 +1162,16 @@ declare class Arbi {
                 joined_at: string;
                 conversation_count: number;
                 document_count: number;
+                agent_ext_id?: string | null | undefined;
             }[];
         }>;
         listUsers: () => Promise<{
             user: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1161,13 +1179,15 @@ declare class Arbi {
             joined_at: string;
             conversation_count: number;
             document_count: number;
+            agent_ext_id?: string | null | undefined;
         }[]>;
         addUsers: (emails: string[], role?: "owner" | "collaborator" | "guest") => Promise<{
             user: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1175,14 +1195,16 @@ declare class Arbi {
             joined_at: string;
             conversation_count: number;
             document_count: number;
+            agent_ext_id?: string | null | undefined;
         }[]>;
         removeUsers: (userIds: string[]) => Promise<void>;
         setUserRole: (userIds: string[], role: "owner" | "collaborator" | "guest") => Promise<{
             user: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1190,6 +1212,7 @@ declare class Arbi {
             joined_at: string;
             conversation_count: number;
             document_count: number;
+            agent_ext_id?: string | null | undefined;
         }[]>;
         copyDocuments: (targetWorkspaceId: string, docIds: string[], targetWorkspaceKey: string) => Promise<{
             detail: string;
@@ -1793,9 +1816,10 @@ declare class Arbi {
             email: string;
             user?: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             } | null | undefined;
@@ -1807,9 +1831,10 @@ declare class Arbi {
             email: string;
             user?: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             } | null | undefined;
@@ -1825,17 +1850,19 @@ declare class Arbi {
             external_id: string;
             sender: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
             recipient: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1853,17 +1880,19 @@ declare class Arbi {
             external_id: string;
             sender: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
             recipient: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1878,17 +1907,19 @@ declare class Arbi {
             external_id: string;
             sender: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
             recipient: {
                 external_id: string;
+                parent_ext_id?: string | null | undefined;
                 email: string;
                 given_name: string;
-                family_name: string;
+                family_name?: string | null | undefined;
                 picture?: string | null | undefined;
                 encryption_public_key: string;
             };
@@ -1924,6 +1955,7 @@ declare class Arbi {
             show_help_page: boolean;
             show_templates: boolean;
             show_pa_mode: boolean;
+            show_agent_sessions: boolean;
             hide_online_status: boolean;
             muted_users: string[];
         }>;
@@ -1957,8 +1989,6 @@ declare class Arbi {
                 SUGGESTED_QUERIES: boolean;
                 ARTIFACTS_ENABLED: boolean;
                 VISION_ENABLED: boolean;
-                DOC_INDEX_COMPACT_THRESHOLD: number;
-                DOC_INDEX_SKIP_THRESHOLD: number;
                 PERSONAL_AGENT: boolean;
                 MEMORY_ENABLED: boolean;
                 SKILLS_ENABLED: boolean;
@@ -1969,13 +1999,15 @@ declare class Arbi {
                 AGENT_API_TYPE: "local" | "remote";
                 LLM_AGENT_TEMPERATURE: number;
                 AGENT_MAX_TOKENS: number;
+                ENABLE_THINKING: boolean;
                 AGENT_MAX_ITERATIONS: number;
-                MAX_PASSAGE_PAGES: number;
+                AGENT_MAX_PARALLEL_TOOL_CALLS: number;
                 AGENT_HISTORY_CHAR_THRESHOLD: number;
                 AGENT_SYSTEM_PROMPT: string;
             };
             QueryLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -1984,6 +2016,7 @@ declare class Arbi {
             };
             ReviewLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -1992,6 +2025,7 @@ declare class Arbi {
             };
             EvaluatorLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2000,6 +2034,7 @@ declare class Arbi {
             };
             TitleLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -2008,6 +2043,7 @@ declare class Arbi {
             };
             SummariseLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2018,6 +2054,7 @@ declare class Arbi {
             };
             DoctagLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 MAX_CHAR_CONTEXT_TO_ANSWER: number;
@@ -2035,6 +2072,7 @@ declare class Arbi {
             };
             MemoryLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2044,6 +2082,7 @@ declare class Arbi {
             };
             PlanningLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2051,8 +2090,17 @@ declare class Arbi {
                 MAX_CHAR_SIZE_TO_ANSWER: number;
                 APPROVAL_TIMEOUT: number;
             };
+            FilterPlanLLM: {
+                API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
+                MODEL_NAME: string;
+                SYSTEM_INSTRUCTION: string;
+                TEMPERATURE: number;
+                MAX_TOKENS: number;
+            };
             VisionLLM: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 TEMPERATURE: number;
                 MAX_TOKENS: number;
@@ -2061,6 +2109,7 @@ declare class Arbi {
             };
             CodeAgent: {
                 API_TYPE: "local" | "remote";
+                ENABLE_THINKING: boolean;
                 MODEL_NAME: string;
                 SYSTEM_INSTRUCTION: string;
                 TEMPERATURE: number;
@@ -2071,6 +2120,7 @@ declare class Arbi {
                 SIM_THREASHOLD: number;
                 MIN_CHAR_SIZE_TO_ANSWER: number;
                 MAX_NUMB_CITATIONS: number;
+                CITATION_INSTRUCTION: string;
             };
             Retriever: {
                 MIN_RETRIEVAL_SIM_SCORE: number;
@@ -2078,9 +2128,9 @@ declare class Arbi {
                 MAX_TOTAL_CHUNKS_TO_RETRIEVE: number;
                 GROUP_SIZE: number;
                 SEARCH_MODE: components["schemas"]["SearchMode"];
+                HYBRID_PREFETCH_LIMIT: number;
                 HYBRID_DENSE_WEIGHT: number;
                 HYBRID_SPARSE_WEIGHT: number;
-                HYBRID_RERANKER_WEIGHT: number;
             };
             Reranker: {
                 MIN_SCORE: number;
@@ -2088,6 +2138,7 @@ declare class Arbi {
                 MAX_CONCURRENT_REQUESTS: number;
                 MODEL_NAME: string;
                 API_TYPE: "local" | "remote";
+                RETRIEVAL_INSTRUCTION: string;
             };
             Parser: {
                 SKIP_DUPLICATES: boolean;
@@ -2247,6 +2298,48 @@ declare class Arbi {
         }>;
         getContent: (fileId: string) => Promise<Response>;
     };
+    readonly agents: {
+        list: () => Promise<{
+            external_id: string;
+            parent_ext_id?: string | null;
+            email: string;
+            given_name: string;
+            family_name?: string | null;
+            picture?: string | null;
+            encryption_public_key: string;
+        }[]>;
+        delete: (agentExtIds: string[]) => Promise<{
+            [x: string]: unknown;
+        }>;
+    };
+    readonly sessions: {
+        list: () => Promise<{
+            session_id: string;
+            external_id?: string | null;
+            name?: string | null;
+            ip_address?: string | null;
+            active_workspace?: string | null;
+            workspaces: string[];
+            status: string;
+            ttl: number;
+        }[]>;
+        authorize: (workspaces: Record<string, string>, options?: {
+            activeWorkspace?: string;
+            ttl?: number;
+            persistIdentity?: boolean;
+            name?: string;
+        }) => Promise<{
+            claim_code: string;
+        }>;
+        claim: (claimCode: string, signingKey?: string) => Promise<{
+            access_token: string;
+            session_key: string;
+            user: components["schemas"]["UserResponse"];
+            workspaces: {
+                [key: string]: unknown;
+            }[];
+        }>;
+    };
     private requireClient;
     private requireLogin;
     private requireWorkspace;
@@ -2275,9 +2368,10 @@ declare function listWorkspaces(arbi: ArbiClient): Promise<{
     users: {
         user: {
             external_id: string;
+            parent_ext_id?: string | null | undefined;
             email: string;
             given_name: string;
-            family_name: string;
+            family_name?: string | null | undefined;
             picture?: string | null | undefined;
             encryption_public_key: string;
         };
@@ -2285,9 +2379,17 @@ declare function listWorkspaces(arbi: ArbiClient): Promise<{
         joined_at: string;
         conversation_count: number;
         document_count: number;
+        agent_ext_id?: string | null | undefined;
     }[];
 }[]>;
-declare function createWorkspace(arbi: ArbiClient, name: string, description?: string | null, isPublic?: boolean): Promise<{
+/**
+ * Create a workspace with a pre-encrypted workspace key.
+ *
+ * The caller must generate a random 32-byte key, encrypt it with the session
+ * public key (SealedBox via `sealKeyForSession`), and pass it here.
+ * Use `Arbi.workspaces.create()` for automatic key generation.
+ */
+declare function createWorkspace(arbi: ArbiClient, name: string, encryptedWorkspaceKey: string, description?: string | null, isPublic?: boolean): Promise<{
     external_id: string;
     name: string;
     description: string | null;
@@ -2305,9 +2407,10 @@ declare function createWorkspace(arbi: ArbiClient, name: string, description?: s
     users: {
         user: {
             external_id: string;
+            parent_ext_id?: string | null | undefined;
             email: string;
             given_name: string;
-            family_name: string;
+            family_name?: string | null | undefined;
             picture?: string | null | undefined;
             encryption_public_key: string;
         };
@@ -2315,6 +2418,7 @@ declare function createWorkspace(arbi: ArbiClient, name: string, description?: s
         joined_at: string;
         conversation_count: number;
         document_count: number;
+        agent_ext_id?: string | null | undefined;
     }[];
 }>;
 declare function deleteWorkspaces(arbi: ArbiClient, workspaceIds: string[]): Promise<void>;
@@ -2336,9 +2440,10 @@ declare function updateWorkspace(arbi: ArbiClient, body: WorkspaceUpdateRequest)
     users: {
         user: {
             external_id: string;
+            parent_ext_id?: string | null | undefined;
             email: string;
             given_name: string;
-            family_name: string;
+            family_name?: string | null | undefined;
             picture?: string | null | undefined;
             encryption_public_key: string;
         };
@@ -2346,14 +2451,16 @@ declare function updateWorkspace(arbi: ArbiClient, body: WorkspaceUpdateRequest)
         joined_at: string;
         conversation_count: number;
         document_count: number;
+        agent_ext_id?: string | null | undefined;
     }[];
 }>;
 declare function listWorkspaceUsers(arbi: ArbiClient): Promise<{
     user: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2361,13 +2468,15 @@ declare function listWorkspaceUsers(arbi: ArbiClient): Promise<{
     joined_at: string;
     conversation_count: number;
     document_count: number;
+    agent_ext_id?: string | null | undefined;
 }[]>;
 declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'owner' | 'collaborator' | 'guest'): Promise<{
     user: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2375,14 +2484,16 @@ declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'o
     joined_at: string;
     conversation_count: number;
     document_count: number;
+    agent_ext_id?: string | null | undefined;
 }[]>;
 declare function removeWorkspaceUsers(arbi: ArbiClient, userIds: string[]): Promise<void>;
 declare function setUserRole(arbi: ArbiClient, userIds: string[], role: 'owner' | 'collaborator' | 'guest'): Promise<{
     user: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2390,6 +2501,7 @@ declare function setUserRole(arbi: ArbiClient, userIds: string[], role: 'owner'
     joined_at: string;
     conversation_count: number;
     document_count: number;
+    agent_ext_id?: string | null | undefined;
 }[]>;
 declare function copyDocuments(arbi: ArbiClient, targetWorkspaceId: string, docIds: string[], targetWorkspaceKey: string): Promise<{
     detail: string;
@@ -2858,22 +2970,83 @@ declare namespace doctags {
   export { doctags_assignDocTags as assignDocTags, doctags_generateDocTags as generateDocTags, doctags_removeDocTags as removeDocTags, doctags_updateDocTag as updateDocTag };
 }
 
+/**
+ * Direct message / notification operations — list, send, mark read, delete.
+ *
+ * All message content is E2E encrypted using ECDH (X25519 + XSalsa20-Poly1305).
+ * Encryption keys are derived from the user's Ed25519 signing keypair.
+ */
+
+type NotificationResponse = components['schemas']['NotificationResponse'];
+/**
+ * Everything needed to encrypt/decrypt DMs.
+ * Derive once per session, pass to all DM operations.
+ */
+interface DmCryptoContext {
+    /** User's X25519 encryption keypair (derived from Ed25519 signing key) */
+    encryptionKeypair: KeyPair;
+    /** User's own external_id (to determine send vs receive direction) */
+    userExtId: string;
+}
+/**
+ * Create a DM crypto context from a signing private key.
+ *
+ * @param arbi - ArbiClient instance (provides crypto utilities)
+ * @param signingPrivateKeyBytes - Ed25519 signing private key (64 bytes)
+ * @param userExtId - Current user's external_id
+ */
+declare function createDmCryptoContext(arbi: ArbiClient, signingPrivateKeyBytes: Uint8Array, userExtId: string): DmCryptoContext;
+/**
+ * Encrypt a plaintext message for a recipient.
+ *
+ * @param arbi - ArbiClient instance
+ * @param plaintext - Message content to encrypt
+ * @param recipientEncryptionPubKeyBase64 - Recipient's X25519 public key (base64)
+ * @param senderEncryptionSecretKey - Sender's X25519 secret key (Uint8Array)
+ * @returns Base64-encoded ciphertext (nonce prepended)
+ */
+declare function encryptDmContent(arbi: ArbiClient, plaintext: string, recipientEncryptionPubKeyBase64: string, senderEncryptionSecretKey: Uint8Array): Promise<string>;
+/**
+ * Decrypt an encrypted notification message.
+ *
+ * Uses the sender/recipient public keys embedded in NotificationResponse
+ * to determine the "other party" for ECDH decryption.
+ *
+ * @param arbi - ArbiClient instance
+ * @param notification - The notification with encrypted content
+ * @param crypto - DM crypto context for the current user
+ * @returns Decrypted plaintext, or null if content is empty
+ * @throws Error if decryption fails (wrong keys or tampered message)
+ */
+declare function decryptDmContent(arbi: ArbiClient, notification: NotificationResponse, crypto: DmCryptoContext): Promise<string | null>;
+/**
+ * Decrypt a batch of notifications, replacing content in-place.
+ * Failed decryptions get content set to '[Decryption failed]'.
+ *
+ * @returns New array with decrypted content
+ */
+declare function decryptDmBatch(arbi: ArbiClient, notifications: NotificationResponse[], crypto: DmCryptoContext): Promise<NotificationResponse[]>;
+/**
+ * List DMs (raw — content is encrypted ciphertext).
+ */
 declare function listDMs(arbi: ArbiClient): Promise<{
-    type: _arbidocs_client.components["schemas"]["NotificationType"];
+    type: components["schemas"]["NotificationType"];
     external_id: string;
     sender: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
     recipient: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2883,25 +3056,86 @@ declare function listDMs(arbi: ArbiClient): Promise<{
     created_at: string;
     updated_at: string;
 }[]>;
+/**
+ * List and decrypt DMs in one call.
+ */
+declare function listDecryptedDMs(arbi: ArbiClient, crypto: DmCryptoContext): Promise<{
+    type: components["schemas"]["NotificationType"];
+    external_id: string;
+    sender: components["schemas"]["UserResponse"];
+    recipient: components["schemas"]["UserResponse"];
+    workspace_ext_id?: string | null;
+    content?: string | null;
+    read: boolean;
+    created_at: string;
+    updated_at: string;
+}[]>;
+/**
+ * Send an E2E encrypted DM.
+ *
+ * Encrypts plaintext content for each recipient using their public key.
+ * Requires recipient public keys — fetch via contacts or user lookup first.
+ *
+ * @param arbi - ArbiClient instance
+ * @param messages - Array of { recipient_ext_id, content (plaintext), recipient_encryption_public_key }
+ * @param crypto - DM crypto context for the sender
+ */
+declare function sendEncryptedDM(arbi: ArbiClient, messages: Array<{
+    recipient_ext_id: string;
+    content: string;
+    recipient_encryption_public_key: string;
+}>, crypto: DmCryptoContext): Promise<{
+    type: components["schemas"]["NotificationType"];
+    external_id: string;
+    sender: {
+        external_id: string;
+        parent_ext_id?: string | null | undefined;
+        email: string;
+        given_name: string;
+        family_name?: string | null | undefined;
+        picture?: string | null | undefined;
+        encryption_public_key: string;
+    };
+    recipient: {
+        external_id: string;
+        parent_ext_id?: string | null | undefined;
+        email: string;
+        given_name: string;
+        family_name?: string | null | undefined;
+        picture?: string | null | undefined;
+        encryption_public_key: string;
+    };
+    workspace_ext_id?: string | null | undefined;
+    content?: string | null | undefined;
+    read: boolean;
+    created_at: string;
+    updated_at: string;
+}[]>;
+/**
+ * Send a plaintext DM (no encryption).
+ * @deprecated Use sendEncryptedDM instead.
+ */
 declare function sendDM(arbi: ArbiClient, messages: Array<{
     recipient_ext_id: string;
     content: string;
 }>): Promise<{
-    type: _arbidocs_client.components["schemas"]["NotificationType"];
+    type: components["schemas"]["NotificationType"];
     external_id: string;
     sender: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
     recipient: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2912,21 +3146,23 @@ declare function sendDM(arbi: ArbiClient, messages: Array<{
     updated_at: string;
 }[]>;
 declare function markRead(arbi: ArbiClient, messageIds: string[]): Promise<{
-    type: _arbidocs_client.components["schemas"]["NotificationType"];
+    type: components["schemas"]["NotificationType"];
     external_id: string;
     sender: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
     recipient: {
         external_id: string;
+        parent_ext_id?: string | null | undefined;
         email: string;
         given_name: string;
-        family_name: string;
+        family_name?: string | null | undefined;
         picture?: string | null | undefined;
         encryption_public_key: string;
     };
@@ -2938,12 +3174,19 @@ declare function markRead(arbi: ArbiClient, messageIds: string[]): Promise<{
 }[]>;
 declare function deleteDMs(arbi: ArbiClient, messageIds: string[]): Promise<void>;
 
+type dm_DmCryptoContext = DmCryptoContext;
+declare const dm_createDmCryptoContext: typeof createDmCryptoContext;
+declare const dm_decryptDmBatch: typeof decryptDmBatch;
+declare const dm_decryptDmContent: typeof decryptDmContent;
 declare const dm_deleteDMs: typeof deleteDMs;
+declare const dm_encryptDmContent: typeof encryptDmContent;
 declare const dm_listDMs: typeof listDMs;
+declare const dm_listDecryptedDMs: typeof listDecryptedDMs;
 declare const dm_markRead: typeof markRead;
 declare const dm_sendDM: typeof sendDM;
+declare const dm_sendEncryptedDM: typeof sendEncryptedDM;
 declare namespace dm {
-  export { dm_deleteDMs as deleteDMs, dm_listDMs as listDMs, dm_markRead as markRead, dm_sendDM as sendDM };
+  export { type dm_DmCryptoContext as DmCryptoContext, dm_createDmCryptoContext as createDmCryptoContext, dm_decryptDmBatch as decryptDmBatch, dm_decryptDmContent as decryptDmContent, dm_deleteDMs as deleteDMs, dm_encryptDmContent as encryptDmContent, dm_listDMs as listDMs, dm_listDecryptedDMs as listDecryptedDMs, dm_markRead as markRead, dm_sendDM as sendDM, dm_sendEncryptedDM as sendEncryptedDM };
 }
 
 /**
@@ -2974,6 +3217,7 @@ declare function getSettings(arbi: ArbiClient): Promise<{
     show_help_page: boolean;
     show_templates: boolean;
     show_pa_mode: boolean;
+    show_agent_sessions: boolean;
     hide_online_status: boolean;
     muted_users: string[];
 }>;
@@ -3017,8 +3261,6 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         SUGGESTED_QUERIES: boolean;
         ARTIFACTS_ENABLED: boolean;
         VISION_ENABLED: boolean;
-        DOC_INDEX_COMPACT_THRESHOLD: number;
-        DOC_INDEX_SKIP_THRESHOLD: number;
         PERSONAL_AGENT: boolean;
         MEMORY_ENABLED: boolean;
         SKILLS_ENABLED: boolean;
@@ -3029,13 +3271,15 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         AGENT_API_TYPE: "local" | "remote";
         LLM_AGENT_TEMPERATURE: number;
         AGENT_MAX_TOKENS: number;
+        ENABLE_THINKING: boolean;
         AGENT_MAX_ITERATIONS: number;
-        MAX_PASSAGE_PAGES: number;
+        AGENT_MAX_PARALLEL_TOOL_CALLS: number;
         AGENT_HISTORY_CHAR_THRESHOLD: number;
         AGENT_SYSTEM_PROMPT: string;
     };
     QueryLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -3044,6 +3288,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     ReviewLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3052,6 +3297,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     EvaluatorLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3060,6 +3306,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     TitleLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         MAX_CHAR_SIZE_TO_ANSWER: number;
@@ -3068,6 +3315,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     SummariseLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3078,6 +3326,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     DoctagLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         MAX_CHAR_CONTEXT_TO_ANSWER: number;
@@ -3095,6 +3344,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     MemoryLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3104,6 +3354,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     PlanningLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3111,8 +3362,17 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         MAX_CHAR_SIZE_TO_ANSWER: number;
         APPROVAL_TIMEOUT: number;
     };
+    FilterPlanLLM: {
+        API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
+        MODEL_NAME: string;
+        SYSTEM_INSTRUCTION: string;
+        TEMPERATURE: number;
+        MAX_TOKENS: number;
+    };
     VisionLLM: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         TEMPERATURE: number;
         MAX_TOKENS: number;
@@ -3121,6 +3381,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
     };
     CodeAgent: {
         API_TYPE: "local" | "remote";
+        ENABLE_THINKING: boolean;
         MODEL_NAME: string;
         SYSTEM_INSTRUCTION: string;
         TEMPERATURE: number;
@@ -3131,6 +3392,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         SIM_THREASHOLD: number;
         MIN_CHAR_SIZE_TO_ANSWER: number;
         MAX_NUMB_CITATIONS: number;
+        CITATION_INSTRUCTION: string;
     };
     Retriever: {
         MIN_RETRIEVAL_SIM_SCORE: number;
@@ -3138,9 +3400,9 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         MAX_TOTAL_CHUNKS_TO_RETRIEVE: number;
         GROUP_SIZE: number;
         SEARCH_MODE: components["schemas"]["SearchMode"];
+        HYBRID_PREFETCH_LIMIT: number;
         HYBRID_DENSE_WEIGHT: number;
         HYBRID_SPARSE_WEIGHT: number;
-        HYBRID_RERANKER_WEIGHT: number;
     };
     Reranker: {
         MIN_SCORE: number;
@@ -3148,6 +3410,7 @@ declare function getConfig(arbi: ArbiClient, configId: string): Promise<{
         MAX_CONCURRENT_REQUESTS: number;
         MODEL_NAME: string;
         API_TYPE: "local" | "remote";
+        RETRIEVAL_INSTRUCTION: string;
     };
     Parser: {
         SKIP_DUPLICATES: boolean;
@@ -3321,4 +3584,4 @@ declare namespace responses {
   export { type responses_SubmitBackgroundQueryOptions as SubmitBackgroundQueryOptions, responses_extractResponseText as extractResponseText, responses_getResponse as getResponse, responses_submitBackgroundQuery as submitBackgroundQuery };
 }
 
-export { connectWebSocket as $, type AuthHeaders as A, type ResponseOutputTextDeltaEvent as B, type ConfigStore as C, type DocumentWaiter as D, type ResponseOutputTextDoneEvent as E, type FormattedWsMessage as F, type ResponseUsage as G, type SSEStreamCallbacks as H, type SSEStreamResult as I, type SSEStreamStartData as J, type UserInfo as K, type UserInputRequestEvent as L, type MessageLevel as M, type UserMessageEvent as N, type OutputTokensDetails as O, type WsConnection as P, type QueryOptions as Q, type ReconnectOptions as R, type SSEEvent as S, agentconfig as T, type UploadBatchResult as U, assistant as V, type WorkspaceContext as W, authenticatedFetch as X, buildRetrievalChunkTool as Y, buildRetrievalFullContextTool as Z, buildRetrievalTocTool as _, type CliConfig as a, connectWithReconnect as a0, consumeSSEStream as a1, contacts as a2, conversations as a3, countCitations as a4, createAuthenticatedClient as a5, createDocumentWaiter as a6, dm as a7, doctags as a8, documents as a9, tags as aA, workspaces as aB, files as aa, formatAgentStepLabel as ab, formatFileSize as ac, formatStreamSummary as ad, formatUserName as ae, formatWorkspaceChoices as af, formatWsMessage as ag, generateEncryptedWorkspaceKey as ah, getErrorCode as ai, getErrorMessage as aj, health as ak, parseSSEEvents as al, performPasswordLogin as am, performSsoDeviceFlowLogin as an, requireData as ao, requireOk as ap, resolveAuth as aq, resolveCitations as ar, resolveWorkspace as as, responses as at, selectWorkspace as au, selectWorkspaceById as av, settings as aw, streamSSE as ax, stripCitationMarkdown as ay, summarizeCitations as az, type CliCredentials as b, type ChatSession as c, type UploadOptions as d, type UploadResult as e, type AgentStepEvent as f, Arbi as g, ArbiApiError as h, ArbiError as i, type ArbiOptions as j, type ArtifactEvent as k, type AuthContext as l, type AuthenticatedClient as m, type CitationSummary as n, type ConnectOptions as o, type DocumentWaiterOptions as p, type MessageMetadataPayload$1 as q, type MessageQueuedEvent as r, type ReconnectableWsConnection as s, type ResolvedCitation as t, type ResponseCompletedEvent as u, type ResponseContentPartAddedEvent as v, type ResponseCreatedEvent as w, type ResponseFailedEvent as x, type ResponseOutputItemAddedEvent as y, type ResponseOutputItemDoneEvent as z };
+export { buildRetrievalTocTool as $, type AuthHeaders as A, type ResponseOutputItemDoneEvent as B, type ConfigStore as C, type DmCryptoContext as D, type ResponseOutputTextDeltaEvent as E, type FormattedWsMessage as F, type ResponseOutputTextDoneEvent as G, type ResponseUsage as H, type SSEStreamCallbacks as I, type SSEStreamResult as J, type SSEStreamStartData as K, type UserInfo as L, type MessageLevel as M, type UserInputRequestEvent as N, type OutputTokensDetails as O, type UserMessageEvent as P, type QueryOptions as Q, type ReconnectOptions as R, type SSEEvent as S, type WsConnection as T, type UploadBatchResult as U, agentconfig as V, type WorkspaceContext as W, assistant as X, authenticatedFetch as Y, buildRetrievalChunkTool as Z, buildRetrievalFullContextTool as _, type CliConfig as a, connectWebSocket as a0, connectWithReconnect as a1, consumeSSEStream as a2, contacts as a3, conversations as a4, countCitations as a5, createAuthenticatedClient as a6, createDocumentWaiter as a7, dm as a8, doctags as a9, stripCitationMarkdown as aA, summarizeCitations as aB, tags as aC, workspaces as aD, documents as aa, files as ab, formatAgentStepLabel as ac, formatFileSize as ad, formatStreamSummary as ae, formatUserName as af, formatWorkspaceChoices as ag, formatWsMessage as ah, generateEncryptedWorkspaceKey as ai, generateNewWorkspaceKey as aj, getErrorCode as ak, getErrorMessage as al, health as am, parseSSEEvents as an, performPasswordLogin as ao, performSsoDeviceFlowLogin as ap, requireData as aq, requireOk as ar, resolveAuth as as, resolveCitations as at, resolveWorkspace as au, responses as av, selectWorkspace as aw, selectWorkspaceById as ax, settings as ay, streamSSE as az, type CliCredentials as b, type ChatSession as c, type UploadOptions as d, type UploadResult as e, type AgentStepEvent as f, Arbi as g, ArbiApiError as h, ArbiError as i, type ArbiOptions as j, type ArtifactEvent as k, type AuthContext as l, type AuthenticatedClient as m, type CitationSummary as n, type ConnectOptions as o, type DocumentWaiter as p, type DocumentWaiterOptions as q, type MessageMetadataPayload$1 as r, type MessageQueuedEvent as s, type ReconnectableWsConnection as t, type ResolvedCitation as u, type ResponseCompletedEvent as v, type ResponseContentPartAddedEvent as w, type ResponseCreatedEvent as x, type ResponseFailedEvent as y, type ResponseOutputItemAddedEvent as z };