@arbidocs/sdk 0.4.2 → 0.4.3

package/dist/index.cjs

@@ -3496,6 +3496,12 @@ var ArbiError = class extends Error {
     this.name = "ArbiError";
   }
 };
+var ArbiSessionExpiredError = class extends ArbiError {
+  constructor(message = "Your session expired. Sign in again.") {
+    super(message);
+    this.name = "ArbiSessionExpiredError";
+  }
+};
 var ArbiApiError = class extends ArbiError {
   apiError;
   constructor(message, apiError) {
@@ -6191,11 +6197,23 @@ async function remindFact(arbi, factId, options = {}) {
 }
 
 // src/arbi.ts
+function tokenExpiresWithin(token, seconds) {
+  const payload = token?.split(".")[1];
+  if (!payload) return false;
+  try {
+    const json = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    const { exp } = JSON.parse(json);
+    return typeof exp === "number" && exp * 1e3 - Date.now() < seconds * 1e3;
+  } catch {
+    return false;
+  }
+}
 var Arbi = class {
   client = null;
   loginResult = null;
   currentWorkspaceId = null;
   dmCryptoContext = null;
+  sessionExpiredListeners = /* @__PURE__ */ new Set();
   options;
   constructor(options) {
     this.options = options;
@@ -6208,7 +6226,13 @@ var Arbi = class {
     this.client = client.createArbiClient({
       baseUrl: this.options.url,
       deploymentDomain: domain,
-      credentials: this.options.credentials ?? "omit"
+      credentials: this.options.credentials ?? "omit",
+      // A silent re-login rotates the server session key: keep ours in step, or the next
+      // workspace open would seal the key for a session the server no longer has.
+      onReloginSuccess: ({ serverSessionKey }) => {
+        if (this.loginResult) this.loginResult = { ...this.loginResult, serverSessionKey };
+      },
+      onSessionExpired: () => this.expireSession()
     });
     await this.client.crypto.initSodium();
     return this.client;
@@ -6271,6 +6295,52 @@ var Arbi = class {
     });
     this.currentWorkspaceId = ws.external_id;
   }
+  /**
+   * Subscribe to "the session cannot be recovered". Fires when a request failed with 401 or
+   * "No active workspace" and neither a workspace re-open nor a silent re-login was possible
+   * (the server refused; an unreachable server does not fire). The local session is already
+   * cleared when it fires: show "Your session expired, sign in again". Returns an unsubscribe.
+   */
+  onSessionExpired(listener) {
+    this.sessionExpiredListeners.add(listener);
+    return () => this.sessionExpiredListeners.delete(listener);
+  }
+  expireSession() {
+    if (this.loginResult) {
+      this.loginResult.signingPrivateKey.fill(0);
+      this.loginResult.serverSessionKey.fill(0);
+    }
+    this.loginResult = null;
+    this.currentWorkspaceId = null;
+    this.dmCryptoContext = null;
+    this.client?.session.clear();
+    for (const listener of [...this.sessionExpiredListeners]) listener();
+  }
+  /**
+   * Run a raw-fetch operation (streaming, multipart: no middleware) and, when it fails because
+   * the token expired or the server lost the open workspace, recover once and run it again.
+   * `run` must read the auth headers itself so the retry carries the fresh token.
+   */
+  async recovering(run) {
+    if (this.client && tokenExpiresWithin(this.client.session.getState().accessToken, 30)) {
+      await this.client.auth.relogin();
+    }
+    try {
+      return await run();
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "";
+      const noWorkspace = /no active workspace/i.test(message);
+      const unauthorised = /\b401\b|token has expired/i.test(message);
+      if (!(error instanceof ArbiApiError) || !(noWorkspace || unauthorised)) throw error;
+      const client = this.requireClient();
+      const recovered = noWorkspace && await client.auth.reopenWorkspace() || await client.auth.relogin() !== null;
+      if (!recovered) {
+        this.expireSession();
+        throw new ArbiSessionExpiredError();
+      }
+      return run();
+    }
+  }
   /** Log out and clear internal state. */
   async logout() {
     if (this.client) {
@@ -6437,16 +6507,18 @@ var Arbi = class {
     },
     uploadFile: (fileData, fileName, options) => {
       this.requireWorkspace();
-      return uploadFile(
-        this.getAuthHeaders(),
-        fileData,
-        fileName,
-        options?.folder ? { folder: options.folder } : void 0
+      return this.recovering(
+        () => uploadFile(
+          this.getAuthHeaders(),
+          fileData,
+          fileName,
+          options?.folder ? { folder: options.folder } : void 0
+        )
       );
     },
-    download: (docId) => downloadDocument(this.getAuthHeaders(), docId),
-    getParsedContent: (docId, stage) => getParsedContent(this.getAuthHeaders(), docId, stage),
-    getThumbnails: (docIds) => getThumbnails(this.getAuthHeaders(), docIds)
+    download: (docId) => this.recovering(() => downloadDocument(this.getAuthHeaders(), docId)),
+    getParsedContent: (docId, stage) => this.recovering(() => getParsedContent(this.getAuthHeaders(), docId, stage)),
+    getThumbnails: (docIds) => this.recovering(() => getThumbnails(this.getAuthHeaders(), docIds))
   };
   // ── Conversations ─────────────────────────────────────────────────────
   conversations = {
@@ -6465,16 +6537,17 @@ var Arbi = class {
      * Returns the accumulated result after the stream completes.
      */
     query: async (question, options) => {
-      const auth = this.getAuthHeaders();
       const workspaceId = this.requireWorkspace();
-      const response = await queryAssistant({
-        ...auth,
-        workspaceId,
-        question,
-        docIds: options.docIds,
-        previousResponseId: options.previousResponseId,
-        model: options.model
-      });
+      const response = await this.recovering(
+        () => queryAssistant({
+          ...this.getAuthHeaders(),
+          workspaceId,
+          question,
+          docIds: options.docIds,
+          previousResponseId: options.previousResponseId,
+          model: options.model
+        })
+      );
       const callbacks = {
         onToken: options.onToken,
         onStreamStart: options.onStreamStart,
@@ -6638,8 +6711,10 @@ var Arbi = class {
     list: (options) => listFiles(this.requireClient(), options),
     get: (fileId) => getFile(this.requireClient(), fileId),
     delete: (fileId) => deleteFile(this.requireClient(), fileId),
-    upload: (fileData, fileName, purpose) => uploadFile2(this.getAuthHeaders(), fileData, fileName, purpose),
-    getContent: (fileId) => getFileContent(this.getAuthHeaders(), fileId)
+    upload: (fileData, fileName, purpose) => this.recovering(
+      () => uploadFile2(this.getAuthHeaders(), fileData, fileName, purpose)
+    ),
+    getContent: (fileId) => this.recovering(() => getFileContent(this.getAuthHeaders(), fileId))
   };
   // ── Agents ──────────────────────────────────────────────────────────
   agents = {
@@ -7824,6 +7899,7 @@ async function startDmListener(options) {
 exports.Arbi = Arbi;
 exports.ArbiApiError = ArbiApiError;
 exports.ArbiError = ArbiError;
+exports.ArbiSessionExpiredError = ArbiSessionExpiredError;
 exports.ClaudeOrchestrator = ClaudeOrchestrator;
 exports.DOC_TERMINAL_STATUSES = DOC_TERMINAL_STATUSES;
 exports.FileConfigStore = FileConfigStore;