@arbidocs/sdk 0.4.2 → 0.4.3

package/dist/{browser-U90kdb7T.d.cts → browser-4VHbRx1J.d.cts}

@@ -9,6 +9,10 @@ import { SessionStorageProvider, ArbiClient, LoginResult, components, WebSocketS
 declare class ArbiError extends Error {
     constructor(message: string);
 }
+/** The session cannot be recovered (token and workspace re-open both refused): sign in again. */
+declare class ArbiSessionExpiredError extends ArbiError {
+    constructor(message?: string);
+}
 declare class ArbiApiError extends ArbiError {
     readonly apiError?: unknown;
     constructor(message: string, apiError?: unknown);
@@ -2034,6 +2038,7 @@ declare class Arbi {
     private loginResult;
     private currentWorkspaceId;
     private dmCryptoContext;
+    private readonly sessionExpiredListeners;
     private readonly options;
     constructor(options: ArbiOptions);
     /** Initialize the SDK client and sodium crypto. Called automatically by login(). */
@@ -2068,6 +2073,20 @@ declare class Arbi {
      * workspace, decrypts the wrapped key, and sets up auth headers.
      */
     selectWorkspace(workspaceId: string): Promise<void>;
+    /**
+     * Subscribe to "the session cannot be recovered". Fires when a request failed with 401 or
+     * "No active workspace" and neither a workspace re-open nor a silent re-login was possible
+     * (the server refused; an unreachable server does not fire). The local session is already
+     * cleared when it fires: show "Your session expired, sign in again". Returns an unsubscribe.
+     */
+    onSessionExpired(listener: () => void): () => void;
+    private expireSession;
+    /**
+     * Run a raw-fetch operation (streaming, multipart: no middleware) and, when it fails because
+     * the token expired or the server lost the open workspace, recover once and run it again.
+     * `run` must read the auth headers itself so the retry carries the fresh token.
+     */
+    private recovering;
     /** Log out and clear internal state. */
     logout(): Promise<void>;
     /** Get the underlying ArbiClient (throws if not initialized). */
@@ -5978,4 +5997,4 @@ declare namespace projects {
   export { type projects_ProjectInvoicesResponse as ProjectInvoicesResponse, type projects_ProjectUpdateRequest as ProjectUpdateRequest, type projects_ProjectUsageResponse as ProjectUsageResponse, type projects_UserDailyUsageResponse as UserDailyUsageResponse, projects_createProject as createProject, projects_deleteProject as deleteProject, projects_getProjectInvoices as getProjectInvoices, projects_getProjectUsage as getProjectUsage, projects_getUserUsageToday as getUserUsageToday, projects_listProjects as listProjects, projects_refreshProject as refreshProject, projects_renameProject as renameProject, projects_updateProject as updateProject };
 }
 
-export { type ResponseFailedEvent as $, type AgentControlStateEvent as A, type DocumentWaiterOptions as B, type ChatSession as C, DOC_TERMINAL_STATUSES as D, type FactSearchRequest as E, type FactResponse as F, type FactSearchResponse as G, type FormattedWsMessage as H, type ListFactsOptions as I, type ListPaginatedOptions as J, type MessageMetadataPayload$1 as K, type ListAllOptions as L, type MessageLevel as M, type MessageQueuedEvent as N, type OutputTokensDetails as O, type ParsedSlashCommand as P, type ProbeAnswerEvent as Q, type ProjectInvoicesResponse as R, type ProjectUsageResponse as S, type QueryOptions as T, type ReconnectOptions as U, type ReconnectableWsConnection as V, type ResolvedCitation as W, type ResolvedRecipient as X, type ResponseCompletedEvent as Y, type ResponseContentPartAddedEvent as Z, type ResponseCreatedEvent as _, type AgentStepDeltaEvent as a, parseSlashCommand as a$, type ResponseOutputItemAddedEvent as a0, type ResponseOutputItemDoneEvent as a1, type ResponseOutputTextDeltaEvent as a2, type ResponseOutputTextDoneEvent as a3, type ResponseUsage as a4, type SSEEvent as a5, type SSEStreamCallbacks as a6, type SSEStreamResult as a7, type SSEStreamStartData as a8, SUPPORTED_EXTENSIONS as a9, connectWithReconnect as aA, consumeSSEStream as aB, contacts as aC, conversations as aD, countCitations as aE, createAuthenticatedClient as aF, createDocumentWaiter as aG, dm as aH, doctags as aI, documents as aJ, facts as aK, files as aL, filterSkills as aM, formatAgentStepLabel as aN, formatFileSize as aO, formatItemLabel as aP, formatStreamSummary as aQ, formatUserName as aR, formatWorkspaceChoices as aS, formatWsMessage as aT, generateEncryptedWorkspaceKey as aU, generateNewWorkspaceKey as aV, getErrorCode as aW, getErrorMessage as aX, getRawWorkspaceKey as aY, health as aZ, parseSSEEvents as a_, type SkillSummary as aa, type SkippedFile as ab, type TaskResponse as ac, type TokenBudgetContext as ad, type UpdateFactRequest as ae, type UpdateTaskRequest as af, type UploadBatchResult as ag, type UploadDirectOptions as ah, type UploadDirectResult as ai, type UploadOptions as aj, type UploadResult as ak, type UserDailyUsageResponse as al, type UserInfo as am, type UserInputRequestEvent as an, type UserMessageEvent as ao, WebSocketAuthError as ap, type WorkspaceContext as aq, type WsConnection as ar, agentconfig as as, assistant as at, authenticatedFetch as au, buildDocNameMap as av, buildRetrievalChunkTool as aw, buildRetrievalFullContextTool as ax, buildRetrievalTocTool as ay, connectWebSocket as az, type AgentStepEvent as b, parseSlashTokenInProgress as b0, performPasswordLogin as b1, performSigningKeyLogin as b2, performSsoDeviceFlowLogin as b3, projects as b4, requireData as b5, requireOk as b6, resolveAuth as b7, resolveCitations as b8, resolveWorkspace as b9, responses as ba, selectWorkspace as bb, selectWorkspaceById as bc, settings as bd, streamSSE as be, stripCitationMarkdown as bf, summarizeCitations as bg, tags as bh, tasks as bi, workspaces as bj, Arbi as c, ArbiApiError as d, ArbiError as e, type ArbiErrorEvent as f, type ArbiOptions as g, type ArtifactEvent as h, type AuthContext as i, type AuthHeaders as j, type AuthenticatedClient as k, type CitationSummary as l, type CliConfig as m, type CliCredentials as n, type CommandDescriptor as o, type ConfigStore as p, type ConnectOptions as q, type CreateFactRequest as r, type CreateFactsRequest as s, type CreateTaskRequest as t, type DeferredInterjectionEvent as u, type DmCryptoContext as v, type DocNameMap as w, type DocumentListFields as x, type DocumentListOrder as y, type DocumentWaiter as z };
+export { type ResponseCreatedEvent as $, type AgentControlStateEvent as A, type DocumentWaiter as B, type ChatSession as C, DOC_TERMINAL_STATUSES as D, type DocumentWaiterOptions as E, type FactResponse as F, type FactSearchRequest as G, type FactSearchResponse as H, type FormattedWsMessage as I, type ListFactsOptions as J, type ListPaginatedOptions as K, type ListAllOptions as L, type MessageLevel as M, type MessageMetadataPayload$1 as N, type MessageQueuedEvent as O, type OutputTokensDetails as P, type ParsedSlashCommand as Q, type ProbeAnswerEvent as R, type ProjectInvoicesResponse as S, type ProjectUsageResponse as T, type QueryOptions as U, type ReconnectOptions as V, type ReconnectableWsConnection as W, type ResolvedCitation as X, type ResolvedRecipient as Y, type ResponseCompletedEvent as Z, type ResponseContentPartAddedEvent as _, type AgentStepDeltaEvent as a, parseSSEEvents as a$, type ResponseFailedEvent as a0, type ResponseOutputItemAddedEvent as a1, type ResponseOutputItemDoneEvent as a2, type ResponseOutputTextDeltaEvent as a3, type ResponseOutputTextDoneEvent as a4, type ResponseUsage as a5, type SSEEvent as a6, type SSEStreamCallbacks as a7, type SSEStreamResult as a8, type SSEStreamStartData as a9, connectWebSocket as aA, connectWithReconnect as aB, consumeSSEStream as aC, contacts as aD, conversations as aE, countCitations as aF, createAuthenticatedClient as aG, createDocumentWaiter as aH, dm as aI, doctags as aJ, documents as aK, facts as aL, files as aM, filterSkills as aN, formatAgentStepLabel as aO, formatFileSize as aP, formatItemLabel as aQ, formatStreamSummary as aR, formatUserName as aS, formatWorkspaceChoices as aT, formatWsMessage as aU, generateEncryptedWorkspaceKey as aV, generateNewWorkspaceKey as aW, getErrorCode as aX, getErrorMessage as aY, getRawWorkspaceKey as aZ, health as a_, SUPPORTED_EXTENSIONS as aa, type SkillSummary as ab, type SkippedFile as ac, type TaskResponse as ad, type TokenBudgetContext as ae, type UpdateFactRequest as af, type UpdateTaskRequest as ag, type UploadBatchResult as ah, type UploadDirectOptions as ai, type UploadDirectResult as aj, type UploadOptions as ak, type UploadResult as al, type UserDailyUsageResponse as am, type UserInfo as an, type UserInputRequestEvent as ao, type UserMessageEvent as ap, WebSocketAuthError as aq, type WorkspaceContext as ar, type WsConnection as as, agentconfig as at, assistant as au, authenticatedFetch as av, buildDocNameMap as aw, buildRetrievalChunkTool as ax, buildRetrievalFullContextTool as ay, buildRetrievalTocTool as az, type AgentStepEvent as b, parseSlashCommand as b0, parseSlashTokenInProgress as b1, performPasswordLogin as b2, performSigningKeyLogin as b3, performSsoDeviceFlowLogin as b4, projects as b5, requireData as b6, requireOk as b7, resolveAuth as b8, resolveCitations as b9, resolveWorkspace as ba, responses as bb, selectWorkspace as bc, selectWorkspaceById as bd, settings as be, streamSSE as bf, stripCitationMarkdown as bg, summarizeCitations as bh, tags as bi, tasks as bj, workspaces as bk, Arbi as c, ArbiApiError as d, ArbiError as e, type ArbiErrorEvent as f, type ArbiOptions as g, ArbiSessionExpiredError as h, type ArtifactEvent as i, type AuthContext as j, type AuthHeaders as k, type AuthenticatedClient as l, type CitationSummary as m, type CliConfig as n, type CliCredentials as o, type CommandDescriptor as p, type ConfigStore as q, type ConnectOptions as r, type CreateFactRequest as s, type CreateFactsRequest as t, type CreateTaskRequest as u, type DeferredInterjectionEvent as v, type DmCryptoContext as w, type DocNameMap as x, type DocumentListFields as y, type DocumentListOrder as z };

package/dist/{browser-U90kdb7T.d.ts → browser-4VHbRx1J.d.ts}

@@ -9,6 +9,10 @@ import { SessionStorageProvider, ArbiClient, LoginResult, components, WebSocketS
 declare class ArbiError extends Error {
     constructor(message: string);
 }
+/** The session cannot be recovered (token and workspace re-open both refused): sign in again. */
+declare class ArbiSessionExpiredError extends ArbiError {
+    constructor(message?: string);
+}
 declare class ArbiApiError extends ArbiError {
     readonly apiError?: unknown;
     constructor(message: string, apiError?: unknown);
@@ -2034,6 +2038,7 @@ declare class Arbi {
     private loginResult;
     private currentWorkspaceId;
     private dmCryptoContext;
+    private readonly sessionExpiredListeners;
     private readonly options;
     constructor(options: ArbiOptions);
     /** Initialize the SDK client and sodium crypto. Called automatically by login(). */
@@ -2068,6 +2073,20 @@ declare class Arbi {
      * workspace, decrypts the wrapped key, and sets up auth headers.
      */
     selectWorkspace(workspaceId: string): Promise<void>;
+    /**
+     * Subscribe to "the session cannot be recovered". Fires when a request failed with 401 or
+     * "No active workspace" and neither a workspace re-open nor a silent re-login was possible
+     * (the server refused; an unreachable server does not fire). The local session is already
+     * cleared when it fires: show "Your session expired, sign in again". Returns an unsubscribe.
+     */
+    onSessionExpired(listener: () => void): () => void;
+    private expireSession;
+    /**
+     * Run a raw-fetch operation (streaming, multipart: no middleware) and, when it fails because
+     * the token expired or the server lost the open workspace, recover once and run it again.
+     * `run` must read the auth headers itself so the retry carries the fresh token.
+     */
+    private recovering;
     /** Log out and clear internal state. */
     logout(): Promise<void>;
     /** Get the underlying ArbiClient (throws if not initialized). */
@@ -5978,4 +5997,4 @@ declare namespace projects {
   export { type projects_ProjectInvoicesResponse as ProjectInvoicesResponse, type projects_ProjectUpdateRequest as ProjectUpdateRequest, type projects_ProjectUsageResponse as ProjectUsageResponse, type projects_UserDailyUsageResponse as UserDailyUsageResponse, projects_createProject as createProject, projects_deleteProject as deleteProject, projects_getProjectInvoices as getProjectInvoices, projects_getProjectUsage as getProjectUsage, projects_getUserUsageToday as getUserUsageToday, projects_listProjects as listProjects, projects_refreshProject as refreshProject, projects_renameProject as renameProject, projects_updateProject as updateProject };
 }
 
-export { type ResponseFailedEvent as $, type AgentControlStateEvent as A, type DocumentWaiterOptions as B, type ChatSession as C, DOC_TERMINAL_STATUSES as D, type FactSearchRequest as E, type FactResponse as F, type FactSearchResponse as G, type FormattedWsMessage as H, type ListFactsOptions as I, type ListPaginatedOptions as J, type MessageMetadataPayload$1 as K, type ListAllOptions as L, type MessageLevel as M, type MessageQueuedEvent as N, type OutputTokensDetails as O, type ParsedSlashCommand as P, type ProbeAnswerEvent as Q, type ProjectInvoicesResponse as R, type ProjectUsageResponse as S, type QueryOptions as T, type ReconnectOptions as U, type ReconnectableWsConnection as V, type ResolvedCitation as W, type ResolvedRecipient as X, type ResponseCompletedEvent as Y, type ResponseContentPartAddedEvent as Z, type ResponseCreatedEvent as _, type AgentStepDeltaEvent as a, parseSlashCommand as a$, type ResponseOutputItemAddedEvent as a0, type ResponseOutputItemDoneEvent as a1, type ResponseOutputTextDeltaEvent as a2, type ResponseOutputTextDoneEvent as a3, type ResponseUsage as a4, type SSEEvent as a5, type SSEStreamCallbacks as a6, type SSEStreamResult as a7, type SSEStreamStartData as a8, SUPPORTED_EXTENSIONS as a9, connectWithReconnect as aA, consumeSSEStream as aB, contacts as aC, conversations as aD, countCitations as aE, createAuthenticatedClient as aF, createDocumentWaiter as aG, dm as aH, doctags as aI, documents as aJ, facts as aK, files as aL, filterSkills as aM, formatAgentStepLabel as aN, formatFileSize as aO, formatItemLabel as aP, formatStreamSummary as aQ, formatUserName as aR, formatWorkspaceChoices as aS, formatWsMessage as aT, generateEncryptedWorkspaceKey as aU, generateNewWorkspaceKey as aV, getErrorCode as aW, getErrorMessage as aX, getRawWorkspaceKey as aY, health as aZ, parseSSEEvents as a_, type SkillSummary as aa, type SkippedFile as ab, type TaskResponse as ac, type TokenBudgetContext as ad, type UpdateFactRequest as ae, type UpdateTaskRequest as af, type UploadBatchResult as ag, type UploadDirectOptions as ah, type UploadDirectResult as ai, type UploadOptions as aj, type UploadResult as ak, type UserDailyUsageResponse as al, type UserInfo as am, type UserInputRequestEvent as an, type UserMessageEvent as ao, WebSocketAuthError as ap, type WorkspaceContext as aq, type WsConnection as ar, agentconfig as as, assistant as at, authenticatedFetch as au, buildDocNameMap as av, buildRetrievalChunkTool as aw, buildRetrievalFullContextTool as ax, buildRetrievalTocTool as ay, connectWebSocket as az, type AgentStepEvent as b, parseSlashTokenInProgress as b0, performPasswordLogin as b1, performSigningKeyLogin as b2, performSsoDeviceFlowLogin as b3, projects as b4, requireData as b5, requireOk as b6, resolveAuth as b7, resolveCitations as b8, resolveWorkspace as b9, responses as ba, selectWorkspace as bb, selectWorkspaceById as bc, settings as bd, streamSSE as be, stripCitationMarkdown as bf, summarizeCitations as bg, tags as bh, tasks as bi, workspaces as bj, Arbi as c, ArbiApiError as d, ArbiError as e, type ArbiErrorEvent as f, type ArbiOptions as g, type ArtifactEvent as h, type AuthContext as i, type AuthHeaders as j, type AuthenticatedClient as k, type CitationSummary as l, type CliConfig as m, type CliCredentials as n, type CommandDescriptor as o, type ConfigStore as p, type ConnectOptions as q, type CreateFactRequest as r, type CreateFactsRequest as s, type CreateTaskRequest as t, type DeferredInterjectionEvent as u, type DmCryptoContext as v, type DocNameMap as w, type DocumentListFields as x, type DocumentListOrder as y, type DocumentWaiter as z };
+export { type ResponseCreatedEvent as $, type AgentControlStateEvent as A, type DocumentWaiter as B, type ChatSession as C, DOC_TERMINAL_STATUSES as D, type DocumentWaiterOptions as E, type FactResponse as F, type FactSearchRequest as G, type FactSearchResponse as H, type FormattedWsMessage as I, type ListFactsOptions as J, type ListPaginatedOptions as K, type ListAllOptions as L, type MessageLevel as M, type MessageMetadataPayload$1 as N, type MessageQueuedEvent as O, type OutputTokensDetails as P, type ParsedSlashCommand as Q, type ProbeAnswerEvent as R, type ProjectInvoicesResponse as S, type ProjectUsageResponse as T, type QueryOptions as U, type ReconnectOptions as V, type ReconnectableWsConnection as W, type ResolvedCitation as X, type ResolvedRecipient as Y, type ResponseCompletedEvent as Z, type ResponseContentPartAddedEvent as _, type AgentStepDeltaEvent as a, parseSSEEvents as a$, type ResponseFailedEvent as a0, type ResponseOutputItemAddedEvent as a1, type ResponseOutputItemDoneEvent as a2, type ResponseOutputTextDeltaEvent as a3, type ResponseOutputTextDoneEvent as a4, type ResponseUsage as a5, type SSEEvent as a6, type SSEStreamCallbacks as a7, type SSEStreamResult as a8, type SSEStreamStartData as a9, connectWebSocket as aA, connectWithReconnect as aB, consumeSSEStream as aC, contacts as aD, conversations as aE, countCitations as aF, createAuthenticatedClient as aG, createDocumentWaiter as aH, dm as aI, doctags as aJ, documents as aK, facts as aL, files as aM, filterSkills as aN, formatAgentStepLabel as aO, formatFileSize as aP, formatItemLabel as aQ, formatStreamSummary as aR, formatUserName as aS, formatWorkspaceChoices as aT, formatWsMessage as aU, generateEncryptedWorkspaceKey as aV, generateNewWorkspaceKey as aW, getErrorCode as aX, getErrorMessage as aY, getRawWorkspaceKey as aZ, health as a_, SUPPORTED_EXTENSIONS as aa, type SkillSummary as ab, type SkippedFile as ac, type TaskResponse as ad, type TokenBudgetContext as ae, type UpdateFactRequest as af, type UpdateTaskRequest as ag, type UploadBatchResult as ah, type UploadDirectOptions as ai, type UploadDirectResult as aj, type UploadOptions as ak, type UploadResult as al, type UserDailyUsageResponse as am, type UserInfo as an, type UserInputRequestEvent as ao, type UserMessageEvent as ap, WebSocketAuthError as aq, type WorkspaceContext as ar, type WsConnection as as, agentconfig as at, assistant as au, authenticatedFetch as av, buildDocNameMap as aw, buildRetrievalChunkTool as ax, buildRetrievalFullContextTool as ay, buildRetrievalTocTool as az, type AgentStepEvent as b, parseSlashCommand as b0, parseSlashTokenInProgress as b1, performPasswordLogin as b2, performSigningKeyLogin as b3, performSsoDeviceFlowLogin as b4, projects as b5, requireData as b6, requireOk as b7, resolveAuth as b8, resolveCitations as b9, resolveWorkspace as ba, responses as bb, selectWorkspace as bc, selectWorkspaceById as bd, settings as be, streamSSE as bf, stripCitationMarkdown as bg, summarizeCitations as bh, tags as bi, tasks as bj, workspaces as bk, Arbi as c, ArbiApiError as d, ArbiError as e, type ArbiErrorEvent as f, type ArbiOptions as g, ArbiSessionExpiredError as h, type ArtifactEvent as i, type AuthContext as j, type AuthHeaders as k, type AuthenticatedClient as l, type CitationSummary as m, type CliConfig as n, type CliCredentials as o, type CommandDescriptor as p, type ConfigStore as q, type ConnectOptions as r, type CreateFactRequest as s, type CreateFactsRequest as t, type CreateTaskRequest as u, type DeferredInterjectionEvent as v, type DmCryptoContext as w, type DocNameMap as x, type DocumentListFields as y, type DocumentListOrder as z };

package/dist/browser.cjs

@@ -3484,6 +3484,12 @@ var ArbiError = class extends Error {
     this.name = "ArbiError";
   }
 };
+var ArbiSessionExpiredError = class extends ArbiError {
+  constructor(message = "Your session expired. Sign in again.") {
+    super(message);
+    this.name = "ArbiSessionExpiredError";
+  }
+};
 var ArbiApiError = class extends ArbiError {
   apiError;
   constructor(message, apiError) {
@@ -5620,11 +5626,23 @@ async function remindFact(arbi, factId, options = {}) {
 }
 
 // src/arbi.ts
+function tokenExpiresWithin(token, seconds) {
+  const payload = token?.split(".")[1];
+  if (!payload) return false;
+  try {
+    const json = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    const { exp } = JSON.parse(json);
+    return typeof exp === "number" && exp * 1e3 - Date.now() < seconds * 1e3;
+  } catch {
+    return false;
+  }
+}
 var Arbi = class {
   client = null;
   loginResult = null;
   currentWorkspaceId = null;
   dmCryptoContext = null;
+  sessionExpiredListeners = /* @__PURE__ */ new Set();
   options;
   constructor(options) {
     this.options = options;
@@ -5637,7 +5655,13 @@ var Arbi = class {
     this.client = client.createArbiClient({
       baseUrl: this.options.url,
       deploymentDomain: domain,
-      credentials: this.options.credentials ?? "omit"
+      credentials: this.options.credentials ?? "omit",
+      // A silent re-login rotates the server session key: keep ours in step, or the next
+      // workspace open would seal the key for a session the server no longer has.
+      onReloginSuccess: ({ serverSessionKey }) => {
+        if (this.loginResult) this.loginResult = { ...this.loginResult, serverSessionKey };
+      },
+      onSessionExpired: () => this.expireSession()
     });
     await this.client.crypto.initSodium();
     return this.client;
@@ -5700,6 +5724,52 @@ var Arbi = class {
     });
     this.currentWorkspaceId = ws.external_id;
   }
+  /**
+   * Subscribe to "the session cannot be recovered". Fires when a request failed with 401 or
+   * "No active workspace" and neither a workspace re-open nor a silent re-login was possible
+   * (the server refused; an unreachable server does not fire). The local session is already
+   * cleared when it fires: show "Your session expired, sign in again". Returns an unsubscribe.
+   */
+  onSessionExpired(listener) {
+    this.sessionExpiredListeners.add(listener);
+    return () => this.sessionExpiredListeners.delete(listener);
+  }
+  expireSession() {
+    if (this.loginResult) {
+      this.loginResult.signingPrivateKey.fill(0);
+      this.loginResult.serverSessionKey.fill(0);
+    }
+    this.loginResult = null;
+    this.currentWorkspaceId = null;
+    this.dmCryptoContext = null;
+    this.client?.session.clear();
+    for (const listener of [...this.sessionExpiredListeners]) listener();
+  }
+  /**
+   * Run a raw-fetch operation (streaming, multipart: no middleware) and, when it fails because
+   * the token expired or the server lost the open workspace, recover once and run it again.
+   * `run` must read the auth headers itself so the retry carries the fresh token.
+   */
+  async recovering(run) {
+    if (this.client && tokenExpiresWithin(this.client.session.getState().accessToken, 30)) {
+      await this.client.auth.relogin();
+    }
+    try {
+      return await run();
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "";
+      const noWorkspace = /no active workspace/i.test(message);
+      const unauthorised = /\b401\b|token has expired/i.test(message);
+      if (!(error instanceof ArbiApiError) || !(noWorkspace || unauthorised)) throw error;
+      const client = this.requireClient();
+      const recovered = noWorkspace && await client.auth.reopenWorkspace() || await client.auth.relogin() !== null;
+      if (!recovered) {
+        this.expireSession();
+        throw new ArbiSessionExpiredError();
+      }
+      return run();
+    }
+  }
   /** Log out and clear internal state. */
   async logout() {
     if (this.client) {
@@ -5866,16 +5936,18 @@ var Arbi = class {
     },
     uploadFile: (fileData, fileName, options) => {
       this.requireWorkspace();
-      return uploadFile(
-        this.getAuthHeaders(),
-        fileData,
-        fileName,
-        options?.folder ? { folder: options.folder } : void 0
+      return this.recovering(
+        () => uploadFile(
+          this.getAuthHeaders(),
+          fileData,
+          fileName,
+          options?.folder ? { folder: options.folder } : void 0
+        )
       );
     },
-    download: (docId) => downloadDocument(this.getAuthHeaders(), docId),
-    getParsedContent: (docId, stage) => getParsedContent(this.getAuthHeaders(), docId, stage),
-    getThumbnails: (docIds) => getThumbnails(this.getAuthHeaders(), docIds)
+    download: (docId) => this.recovering(() => downloadDocument(this.getAuthHeaders(), docId)),
+    getParsedContent: (docId, stage) => this.recovering(() => getParsedContent(this.getAuthHeaders(), docId, stage)),
+    getThumbnails: (docIds) => this.recovering(() => getThumbnails(this.getAuthHeaders(), docIds))
   };
   // ── Conversations ─────────────────────────────────────────────────────
   conversations = {
@@ -5894,16 +5966,17 @@ var Arbi = class {
      * Returns the accumulated result after the stream completes.
      */
     query: async (question, options) => {
-      const auth = this.getAuthHeaders();
       const workspaceId = this.requireWorkspace();
-      const response = await queryAssistant({
-        ...auth,
-        workspaceId,
-        question,
-        docIds: options.docIds,
-        previousResponseId: options.previousResponseId,
-        model: options.model
-      });
+      const response = await this.recovering(
+        () => queryAssistant({
+          ...this.getAuthHeaders(),
+          workspaceId,
+          question,
+          docIds: options.docIds,
+          previousResponseId: options.previousResponseId,
+          model: options.model
+        })
+      );
       const callbacks = {
         onToken: options.onToken,
         onStreamStart: options.onStreamStart,
@@ -6067,8 +6140,10 @@ var Arbi = class {
     list: (options) => listFiles(this.requireClient(), options),
     get: (fileId) => getFile(this.requireClient(), fileId),
     delete: (fileId) => deleteFile(this.requireClient(), fileId),
-    upload: (fileData, fileName, purpose) => uploadFile2(this.getAuthHeaders(), fileData, fileName, purpose),
-    getContent: (fileId) => getFileContent(this.getAuthHeaders(), fileId)
+    upload: (fileData, fileName, purpose) => this.recovering(
+      () => uploadFile2(this.getAuthHeaders(), fileData, fileName, purpose)
+    ),
+    getContent: (fileId) => this.recovering(() => getFileContent(this.getAuthHeaders(), fileId))
   };
   // ── Agents ──────────────────────────────────────────────────────────
   agents = {