@arbidocs/sdk 0.4.3 → 0.4.5

package/dist/{browser-4VHbRx1J.d.cts → browser-5spRium9.d.cts}

@@ -841,6 +841,8 @@ interface UploadOptions {
      *  ``wp_type='skill'`` AND in a ``skills/<slug>`` folder so the
      *  backend's ``SkillManager`` recognises them. */
     wpType?: 'source' | 'skill' | 'memory' | 'artifact' | 'webpage';
+    /** Save the upload as a new immutable version of this document (`parent_ext_id` lineage). */
+    parentExtId?: string;
 }
 interface SkippedFile {
     file_name: string;
@@ -1881,6 +1883,7 @@ declare namespace files {
 type TaskResponse = components['schemas']['TaskResponse'];
 type CreateTaskRequest = components['schemas']['CreateTaskRequest'];
 type UpdateTaskRequest = components['schemas']['UpdateTaskRequest'];
+type TaskRunResponse = components['schemas']['TaskRunResponse'];
 /** List the caller's scheduled tasks (newest first). */
 declare function listTasks(arbi: ArbiClient): Promise<TaskResponse[]>;
 /** Create a scheduled task. `name` is required; supply trigger + action fields. */
@@ -1891,18 +1894,22 @@ declare function updateTask(arbi: ArbiClient, taskId: string, body: UpdateTaskRe
 declare function deleteTask(arbi: ArbiClient, taskId: string): Promise<void>;
 /** Fire a task immediately without advancing its schedule. */
 declare function runTask(arbi: ArbiClient, taskId: string): Promise<TaskResponse>;
+/** A task's run history, newest first. Each run links to its conversation. */
+declare function listTaskRuns(arbi: ArbiClient, taskId: string): Promise<TaskRunResponse[]>;
 
 type tasks_CreateTaskRequest = CreateTaskRequest;
 type tasks_TaskResponse = TaskResponse;
+type tasks_TaskRunResponse = TaskRunResponse;
 type tasks_UpdateTaskRequest = UpdateTaskRequest;
 declare const tasks_createTask: typeof createTask;
 declare const tasks_deleteTask: typeof deleteTask;
 declare const tasks_getTask: typeof getTask;
+declare const tasks_listTaskRuns: typeof listTaskRuns;
 declare const tasks_listTasks: typeof listTasks;
 declare const tasks_runTask: typeof runTask;
 declare const tasks_updateTask: typeof updateTask;
 declare namespace tasks {
-  export { type tasks_CreateTaskRequest as CreateTaskRequest, type tasks_TaskResponse as TaskResponse, type tasks_UpdateTaskRequest as UpdateTaskRequest, tasks_createTask as createTask, tasks_deleteTask as deleteTask, tasks_getTask as getTask, tasks_listTasks as listTasks, tasks_runTask as runTask, tasks_updateTask as updateTask };
+  export { type tasks_CreateTaskRequest as CreateTaskRequest, type tasks_TaskResponse as TaskResponse, type tasks_TaskRunResponse as TaskRunResponse, type tasks_UpdateTaskRequest as UpdateTaskRequest, tasks_createTask as createTask, tasks_deleteTask as deleteTask, tasks_getTask as getTask, tasks_listTaskRuns as listTaskRuns, tasks_listTasks as listTasks, tasks_runTask as runTask, tasks_updateTask as updateTask };
 }
 
 /**
@@ -2068,6 +2075,8 @@ declare class Arbi {
      * Useful for session recovery without re-entering the password.
      */
     loginWithKey(email: string, signingPrivateKeyBase64: string): Promise<void>;
+    /** A workspace's key, sealed to the caller's own session (what `/open` and `POST /workspace/users` take). */
+    private sealWorkspaceKey;
     /**
      * Select a workspace by ID. Fetches the workspace list, finds the matching
      * workspace, decrypts the wrapped key, and sets up auth headers.
@@ -2418,6 +2427,63 @@ declare class Arbi {
             agent_ext_id?: string | null | undefined;
             is_temporary: boolean;
         }[]>;
+        /**
+         * Grant users a temporary key scoped to ONE session (identified by its public key), for
+         * example an agent's run session minted by `agents.authorize()`. Nothing standing is created:
+         * the grant expires with that session. Works for any workspace the caller holds a key for;
+         * it does not need to be the open one.
+         */
+        grantTemporaryAccess: (params: {
+            workspaceId: string;
+            emails: string[];
+            sessionPubkeyB64: string;
+            role?: "owner" | "collaborator" | "guest";
+        }) => Promise<{
+            user: {
+                external_id: string;
+                parent_ext_id?: string | null | undefined;
+                email: string;
+                given_name: string;
+                family_name?: string | null | undefined;
+                picture?: string | null | undefined;
+                encryption_public_key: string;
+                is_sso: boolean;
+            };
+            role: components["schemas"]["WorkspaceRole"];
+            joined_at: string;
+            conversation_count: number;
+            document_count: number;
+            files_mb: number;
+            agent_ext_id?: string | null | undefined;
+            is_temporary: boolean;
+        }[]>;
+        /**
+         * Add users (standing, permanent membership) to ANY workspace the caller holds a key for,
+         * without opening it. `addUsers` does the same for the currently open workspace.
+         */
+        grantAccess: (params: {
+            workspaceId: string;
+            emails: string[];
+            role?: "owner" | "collaborator" | "guest";
+        }) => Promise<{
+            user: {
+                external_id: string;
+                parent_ext_id?: string | null | undefined;
+                email: string;
+                given_name: string;
+                family_name?: string | null | undefined;
+                picture?: string | null | undefined;
+                encryption_public_key: string;
+                is_sso: boolean;
+            };
+            role: components["schemas"]["WorkspaceRole"];
+            joined_at: string;
+            conversation_count: number;
+            document_count: number;
+            files_mb: number;
+            agent_ext_id?: string | null | undefined;
+            is_temporary: boolean;
+        }[]>;
         removeUsers: (userIds: string[]) => Promise<void>;
         setUserRole: (userIds: string[], role: "owner" | "collaborator" | "guest") => Promise<{
             user: {
@@ -2736,9 +2802,7 @@ declare class Arbi {
                 reason: string;
             }[] | undefined;
         }>;
-        uploadFile: (fileData: Blob, fileName: string, options?: {
-            folder?: string;
-        }) => Promise<UploadResult>;
+        uploadFile: (fileData: Blob, fileName: string, options?: UploadOptions) => Promise<UploadResult>;
         download: (docId: string) => Promise<Response>;
         getParsedContent: (docId: string, stage: string) => Promise<Record<string, unknown>>;
         getThumbnails: (docIds: string[]) => Promise<Record<string, string | null>>;
@@ -3119,6 +3183,22 @@ declare class Arbi {
          * Respond to an agent's question during a human-in-the-loop workflow.
          */
         respond: (assistantMessageExtId: string, answer: string) => Promise<unknown>;
+        /** The skills the caller can run (own + shared marketplace), metadata only. */
+        listSkills: (options?: {
+            includeHidden?: boolean;
+        }) => Promise<{
+            name: string;
+            slug: string;
+            description: string;
+            user_invocable: boolean;
+            arg_hint: string;
+            skill_type: string;
+            workspace_ext_id: string;
+            doc_ext_id: string;
+            updated_at: string;
+            visibility: string;
+            is_owner: boolean;
+        }[]>;
         /**
          * Search documents without LLM generation (retrieval only).
          */
@@ -4225,6 +4305,25 @@ declare class Arbi {
         delete: (agentExtIds: string[]) => Promise<{
             [x: string]: unknown;
         }>;
+        /** Mint a TTL'd run session for an agent; see `grantTemporaryAccess` to also deposit a key. */
+        authorize: (agentExtId: string, workspaceId: string, ttlSeconds?: number) => Promise<{
+            session_pubkey_b64: string;
+            agent_email: string;
+            ttl: number;
+        }>;
+        authorizeLimits: () => Promise<{
+            default_ttl_seconds: number;
+            max_ttl_seconds: number;
+        }>;
+        /**
+         * Give an agent temporary, session-scoped access to a workspace: mint its run session, then
+         * deposit the workspace key on it. Returns the session details (`ttl` in seconds).
+         */
+        grantTemporaryAccess: (agentExtId: string, workspaceId: string, ttlSeconds?: number) => Promise<{
+            session_pubkey_b64: string;
+            agent_email: string;
+            ttl: number;
+        }>;
     };
     readonly tasks: {
         list: () => Promise<{
@@ -4413,6 +4512,56 @@ declare class Arbi {
             created_at: string;
             updated_at: string;
         }>;
+        listRuns: (taskId: string) => Promise<{
+            run_id?: string | null;
+            conversation_ext_id?: string | null;
+            status: string;
+            error?: string | null;
+            started_at?: string | null;
+            finished_at?: string | null;
+        }[]>;
+        /**
+         * Run a task and, when the run is parked waiting for workspace access (a temporary
+         * authorization tier), grant the agent's run session a temporary key and run it again.
+         * A task that needs no approval returns from the first call already running.
+         */
+        runWithAuth: (taskId: string) => Promise<{
+            external_id: string;
+            name: string;
+            trigger_type: string;
+            rrule: string | null;
+            run_at: string | null;
+            timezone: string;
+            event_kind: string | null;
+            action_type: string;
+            prompt: string;
+            skill_ref: string | null;
+            status: string;
+            next_run_at: string | null;
+            last_run_at: string | null;
+            last_error: string | null;
+            in_progress: boolean;
+            active_run_id: string | null;
+            agent_session: string | null;
+            active_response_id?: string | null;
+            active_conversation_ext_id?: string | null;
+            run_started_at: string | null;
+            notify_on_complete: boolean;
+            auth_mode: components["schemas"]["AuthMode"];
+            pending_auth_request_id?: string | null;
+            pending_auth_session_pubkey?: string | null;
+            pending_auth_agent_email?: string | null;
+            created_by_kind: string;
+            workspace_ext_id?: string | null;
+            agent_ext_id?: string | null;
+            task_plan?: components["schemas"]["TaskPlan"] | null;
+            is_goal_task: boolean;
+            goal_state?: {
+                [key: string]: unknown;
+            } | null;
+            created_at: string;
+            updated_at: string;
+        }>;
     };
     readonly facts: {
         create: (body: CreateFactRequest) => Promise<{
@@ -4686,7 +4835,46 @@ declare function listWorkspaceUsers(arbi: ArbiClient): Promise<{
     agent_ext_id?: string | null | undefined;
     is_temporary: boolean;
 }[]>;
-declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'owner' | 'collaborator' | 'guest'): Promise<{
+declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'owner' | 'collaborator' | 'guest', 
+/** Share a workspace other than the open one: its id and its key sealed to the caller's session. */
+target?: {
+    workspaceExtId: string;
+    workspaceKey: string;
+}): Promise<{
+    user: {
+        external_id: string;
+        parent_ext_id?: string | null | undefined;
+        email: string;
+        given_name: string;
+        family_name?: string | null | undefined;
+        picture?: string | null | undefined;
+        encryption_public_key: string;
+        is_sso: boolean;
+    };
+    role: components["schemas"]["WorkspaceRole"];
+    joined_at: string;
+    conversation_count: number;
+    document_count: number;
+    files_mb: number;
+    agent_ext_id?: string | null | undefined;
+    is_temporary: boolean;
+}[]>;
+/**
+ * Grant users a TEMPORARY, session-scoped workspace key (`session_pubkey_b64` path of
+ * `POST /v1/workspace/users`). The key is deposited onto the recipient's session (typically an
+ * agent run session) and the membership row expires with it; no standing membership is created.
+ *
+ * `workspaceKey` is the workspace key sealed to the CALLER's own session (what `/open` takes), so
+ * the workspace need not be the open one. Use `Arbi.workspaces.grantTemporaryAccess()` to have the
+ * key derived for you.
+ */
+declare function grantTemporaryWorkspaceAccess(arbi: ArbiClient, params: {
+    emails: string[];
+    workspaceExtId: string;
+    workspaceKey: string;
+    sessionPubkeyB64: string;
+    role?: 'owner' | 'collaborator' | 'guest';
+}): Promise<{
     user: {
         external_id: string;
         parent_ext_id?: string | null | undefined;
@@ -4746,13 +4934,14 @@ declare const workspaces_addWorkspaceUsers: typeof addWorkspaceUsers;
 declare const workspaces_copyDocuments: typeof copyDocuments;
 declare const workspaces_createWorkspace: typeof createWorkspace;
 declare const workspaces_deleteWorkspaces: typeof deleteWorkspaces;
+declare const workspaces_grantTemporaryWorkspaceAccess: typeof grantTemporaryWorkspaceAccess;
 declare const workspaces_listWorkspaceUsers: typeof listWorkspaceUsers;
 declare const workspaces_listWorkspaces: typeof listWorkspaces;
 declare const workspaces_removeWorkspaceUsers: typeof removeWorkspaceUsers;
 declare const workspaces_setUserRole: typeof setUserRole;
 declare const workspaces_updateWorkspace: typeof updateWorkspace;
 declare namespace workspaces {
-  export { workspaces_addWorkspaceUsers as addWorkspaceUsers, workspaces_copyDocuments as copyDocuments, workspaces_createWorkspace as createWorkspace, workspaces_deleteWorkspaces as deleteWorkspaces, workspaces_listWorkspaceUsers as listWorkspaceUsers, workspaces_listWorkspaces as listWorkspaces, workspaces_removeWorkspaceUsers as removeWorkspaceUsers, workspaces_setUserRole as setUserRole, workspaces_updateWorkspace as updateWorkspace };
+  export { workspaces_addWorkspaceUsers as addWorkspaceUsers, workspaces_copyDocuments as copyDocuments, workspaces_createWorkspace as createWorkspace, workspaces_deleteWorkspaces as deleteWorkspaces, workspaces_grantTemporaryWorkspaceAccess as grantTemporaryWorkspaceAccess, workspaces_listWorkspaceUsers as listWorkspaceUsers, workspaces_listWorkspaces as listWorkspaces, workspaces_removeWorkspaceUsers as removeWorkspaceUsers, workspaces_setUserRole as setUserRole, workspaces_updateWorkspace as updateWorkspace };
 }
 
 /**

package/dist/{browser-4VHbRx1J.d.ts → browser-5spRium9.d.ts}

@@ -841,6 +841,8 @@ interface UploadOptions {
      *  ``wp_type='skill'`` AND in a ``skills/<slug>`` folder so the
      *  backend's ``SkillManager`` recognises them. */
     wpType?: 'source' | 'skill' | 'memory' | 'artifact' | 'webpage';
+    /** Save the upload as a new immutable version of this document (`parent_ext_id` lineage). */
+    parentExtId?: string;
 }
 interface SkippedFile {
     file_name: string;
@@ -1881,6 +1883,7 @@ declare namespace files {
 type TaskResponse = components['schemas']['TaskResponse'];
 type CreateTaskRequest = components['schemas']['CreateTaskRequest'];
 type UpdateTaskRequest = components['schemas']['UpdateTaskRequest'];
+type TaskRunResponse = components['schemas']['TaskRunResponse'];
 /** List the caller's scheduled tasks (newest first). */
 declare function listTasks(arbi: ArbiClient): Promise<TaskResponse[]>;
 /** Create a scheduled task. `name` is required; supply trigger + action fields. */
@@ -1891,18 +1894,22 @@ declare function updateTask(arbi: ArbiClient, taskId: string, body: UpdateTaskRe
 declare function deleteTask(arbi: ArbiClient, taskId: string): Promise<void>;
 /** Fire a task immediately without advancing its schedule. */
 declare function runTask(arbi: ArbiClient, taskId: string): Promise<TaskResponse>;
+/** A task's run history, newest first. Each run links to its conversation. */
+declare function listTaskRuns(arbi: ArbiClient, taskId: string): Promise<TaskRunResponse[]>;
 
 type tasks_CreateTaskRequest = CreateTaskRequest;
 type tasks_TaskResponse = TaskResponse;
+type tasks_TaskRunResponse = TaskRunResponse;
 type tasks_UpdateTaskRequest = UpdateTaskRequest;
 declare const tasks_createTask: typeof createTask;
 declare const tasks_deleteTask: typeof deleteTask;
 declare const tasks_getTask: typeof getTask;
+declare const tasks_listTaskRuns: typeof listTaskRuns;
 declare const tasks_listTasks: typeof listTasks;
 declare const tasks_runTask: typeof runTask;
 declare const tasks_updateTask: typeof updateTask;
 declare namespace tasks {
-  export { type tasks_CreateTaskRequest as CreateTaskRequest, type tasks_TaskResponse as TaskResponse, type tasks_UpdateTaskRequest as UpdateTaskRequest, tasks_createTask as createTask, tasks_deleteTask as deleteTask, tasks_getTask as getTask, tasks_listTasks as listTasks, tasks_runTask as runTask, tasks_updateTask as updateTask };
+  export { type tasks_CreateTaskRequest as CreateTaskRequest, type tasks_TaskResponse as TaskResponse, type tasks_TaskRunResponse as TaskRunResponse, type tasks_UpdateTaskRequest as UpdateTaskRequest, tasks_createTask as createTask, tasks_deleteTask as deleteTask, tasks_getTask as getTask, tasks_listTaskRuns as listTaskRuns, tasks_listTasks as listTasks, tasks_runTask as runTask, tasks_updateTask as updateTask };
 }
 
 /**
@@ -2068,6 +2075,8 @@ declare class Arbi {
      * Useful for session recovery without re-entering the password.
      */
     loginWithKey(email: string, signingPrivateKeyBase64: string): Promise<void>;
+    /** A workspace's key, sealed to the caller's own session (what `/open` and `POST /workspace/users` take). */
+    private sealWorkspaceKey;
     /**
      * Select a workspace by ID. Fetches the workspace list, finds the matching
      * workspace, decrypts the wrapped key, and sets up auth headers.
@@ -2418,6 +2427,63 @@ declare class Arbi {
             agent_ext_id?: string | null | undefined;
             is_temporary: boolean;
         }[]>;
+        /**
+         * Grant users a temporary key scoped to ONE session (identified by its public key), for
+         * example an agent's run session minted by `agents.authorize()`. Nothing standing is created:
+         * the grant expires with that session. Works for any workspace the caller holds a key for;
+         * it does not need to be the open one.
+         */
+        grantTemporaryAccess: (params: {
+            workspaceId: string;
+            emails: string[];
+            sessionPubkeyB64: string;
+            role?: "owner" | "collaborator" | "guest";
+        }) => Promise<{
+            user: {
+                external_id: string;
+                parent_ext_id?: string | null | undefined;
+                email: string;
+                given_name: string;
+                family_name?: string | null | undefined;
+                picture?: string | null | undefined;
+                encryption_public_key: string;
+                is_sso: boolean;
+            };
+            role: components["schemas"]["WorkspaceRole"];
+            joined_at: string;
+            conversation_count: number;
+            document_count: number;
+            files_mb: number;
+            agent_ext_id?: string | null | undefined;
+            is_temporary: boolean;
+        }[]>;
+        /**
+         * Add users (standing, permanent membership) to ANY workspace the caller holds a key for,
+         * without opening it. `addUsers` does the same for the currently open workspace.
+         */
+        grantAccess: (params: {
+            workspaceId: string;
+            emails: string[];
+            role?: "owner" | "collaborator" | "guest";
+        }) => Promise<{
+            user: {
+                external_id: string;
+                parent_ext_id?: string | null | undefined;
+                email: string;
+                given_name: string;
+                family_name?: string | null | undefined;
+                picture?: string | null | undefined;
+                encryption_public_key: string;
+                is_sso: boolean;
+            };
+            role: components["schemas"]["WorkspaceRole"];
+            joined_at: string;
+            conversation_count: number;
+            document_count: number;
+            files_mb: number;
+            agent_ext_id?: string | null | undefined;
+            is_temporary: boolean;
+        }[]>;
         removeUsers: (userIds: string[]) => Promise<void>;
         setUserRole: (userIds: string[], role: "owner" | "collaborator" | "guest") => Promise<{
             user: {
@@ -2736,9 +2802,7 @@ declare class Arbi {
                 reason: string;
             }[] | undefined;
         }>;
-        uploadFile: (fileData: Blob, fileName: string, options?: {
-            folder?: string;
-        }) => Promise<UploadResult>;
+        uploadFile: (fileData: Blob, fileName: string, options?: UploadOptions) => Promise<UploadResult>;
         download: (docId: string) => Promise<Response>;
         getParsedContent: (docId: string, stage: string) => Promise<Record<string, unknown>>;
         getThumbnails: (docIds: string[]) => Promise<Record<string, string | null>>;
@@ -3119,6 +3183,22 @@ declare class Arbi {
          * Respond to an agent's question during a human-in-the-loop workflow.
          */
         respond: (assistantMessageExtId: string, answer: string) => Promise<unknown>;
+        /** The skills the caller can run (own + shared marketplace), metadata only. */
+        listSkills: (options?: {
+            includeHidden?: boolean;
+        }) => Promise<{
+            name: string;
+            slug: string;
+            description: string;
+            user_invocable: boolean;
+            arg_hint: string;
+            skill_type: string;
+            workspace_ext_id: string;
+            doc_ext_id: string;
+            updated_at: string;
+            visibility: string;
+            is_owner: boolean;
+        }[]>;
         /**
          * Search documents without LLM generation (retrieval only).
          */
@@ -4225,6 +4305,25 @@ declare class Arbi {
         delete: (agentExtIds: string[]) => Promise<{
             [x: string]: unknown;
         }>;
+        /** Mint a TTL'd run session for an agent; see `grantTemporaryAccess` to also deposit a key. */
+        authorize: (agentExtId: string, workspaceId: string, ttlSeconds?: number) => Promise<{
+            session_pubkey_b64: string;
+            agent_email: string;
+            ttl: number;
+        }>;
+        authorizeLimits: () => Promise<{
+            default_ttl_seconds: number;
+            max_ttl_seconds: number;
+        }>;
+        /**
+         * Give an agent temporary, session-scoped access to a workspace: mint its run session, then
+         * deposit the workspace key on it. Returns the session details (`ttl` in seconds).
+         */
+        grantTemporaryAccess: (agentExtId: string, workspaceId: string, ttlSeconds?: number) => Promise<{
+            session_pubkey_b64: string;
+            agent_email: string;
+            ttl: number;
+        }>;
     };
     readonly tasks: {
         list: () => Promise<{
@@ -4413,6 +4512,56 @@ declare class Arbi {
             created_at: string;
             updated_at: string;
         }>;
+        listRuns: (taskId: string) => Promise<{
+            run_id?: string | null;
+            conversation_ext_id?: string | null;
+            status: string;
+            error?: string | null;
+            started_at?: string | null;
+            finished_at?: string | null;
+        }[]>;
+        /**
+         * Run a task and, when the run is parked waiting for workspace access (a temporary
+         * authorization tier), grant the agent's run session a temporary key and run it again.
+         * A task that needs no approval returns from the first call already running.
+         */
+        runWithAuth: (taskId: string) => Promise<{
+            external_id: string;
+            name: string;
+            trigger_type: string;
+            rrule: string | null;
+            run_at: string | null;
+            timezone: string;
+            event_kind: string | null;
+            action_type: string;
+            prompt: string;
+            skill_ref: string | null;
+            status: string;
+            next_run_at: string | null;
+            last_run_at: string | null;
+            last_error: string | null;
+            in_progress: boolean;
+            active_run_id: string | null;
+            agent_session: string | null;
+            active_response_id?: string | null;
+            active_conversation_ext_id?: string | null;
+            run_started_at: string | null;
+            notify_on_complete: boolean;
+            auth_mode: components["schemas"]["AuthMode"];
+            pending_auth_request_id?: string | null;
+            pending_auth_session_pubkey?: string | null;
+            pending_auth_agent_email?: string | null;
+            created_by_kind: string;
+            workspace_ext_id?: string | null;
+            agent_ext_id?: string | null;
+            task_plan?: components["schemas"]["TaskPlan"] | null;
+            is_goal_task: boolean;
+            goal_state?: {
+                [key: string]: unknown;
+            } | null;
+            created_at: string;
+            updated_at: string;
+        }>;
     };
     readonly facts: {
         create: (body: CreateFactRequest) => Promise<{
@@ -4686,7 +4835,46 @@ declare function listWorkspaceUsers(arbi: ArbiClient): Promise<{
     agent_ext_id?: string | null | undefined;
     is_temporary: boolean;
 }[]>;
-declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'owner' | 'collaborator' | 'guest'): Promise<{
+declare function addWorkspaceUsers(arbi: ArbiClient, emails: string[], role?: 'owner' | 'collaborator' | 'guest', 
+/** Share a workspace other than the open one: its id and its key sealed to the caller's session. */
+target?: {
+    workspaceExtId: string;
+    workspaceKey: string;
+}): Promise<{
+    user: {
+        external_id: string;
+        parent_ext_id?: string | null | undefined;
+        email: string;
+        given_name: string;
+        family_name?: string | null | undefined;
+        picture?: string | null | undefined;
+        encryption_public_key: string;
+        is_sso: boolean;
+    };
+    role: components["schemas"]["WorkspaceRole"];
+    joined_at: string;
+    conversation_count: number;
+    document_count: number;
+    files_mb: number;
+    agent_ext_id?: string | null | undefined;
+    is_temporary: boolean;
+}[]>;
+/**
+ * Grant users a TEMPORARY, session-scoped workspace key (`session_pubkey_b64` path of
+ * `POST /v1/workspace/users`). The key is deposited onto the recipient's session (typically an
+ * agent run session) and the membership row expires with it; no standing membership is created.
+ *
+ * `workspaceKey` is the workspace key sealed to the CALLER's own session (what `/open` takes), so
+ * the workspace need not be the open one. Use `Arbi.workspaces.grantTemporaryAccess()` to have the
+ * key derived for you.
+ */
+declare function grantTemporaryWorkspaceAccess(arbi: ArbiClient, params: {
+    emails: string[];
+    workspaceExtId: string;
+    workspaceKey: string;
+    sessionPubkeyB64: string;
+    role?: 'owner' | 'collaborator' | 'guest';
+}): Promise<{
     user: {
         external_id: string;
         parent_ext_id?: string | null | undefined;
@@ -4746,13 +4934,14 @@ declare const workspaces_addWorkspaceUsers: typeof addWorkspaceUsers;
 declare const workspaces_copyDocuments: typeof copyDocuments;
 declare const workspaces_createWorkspace: typeof createWorkspace;
 declare const workspaces_deleteWorkspaces: typeof deleteWorkspaces;
+declare const workspaces_grantTemporaryWorkspaceAccess: typeof grantTemporaryWorkspaceAccess;
 declare const workspaces_listWorkspaceUsers: typeof listWorkspaceUsers;
 declare const workspaces_listWorkspaces: typeof listWorkspaces;
 declare const workspaces_removeWorkspaceUsers: typeof removeWorkspaceUsers;
 declare const workspaces_setUserRole: typeof setUserRole;
 declare const workspaces_updateWorkspace: typeof updateWorkspace;
 declare namespace workspaces {
-  export { workspaces_addWorkspaceUsers as addWorkspaceUsers, workspaces_copyDocuments as copyDocuments, workspaces_createWorkspace as createWorkspace, workspaces_deleteWorkspaces as deleteWorkspaces, workspaces_listWorkspaceUsers as listWorkspaceUsers, workspaces_listWorkspaces as listWorkspaces, workspaces_removeWorkspaceUsers as removeWorkspaceUsers, workspaces_setUserRole as setUserRole, workspaces_updateWorkspace as updateWorkspace };
+  export { workspaces_addWorkspaceUsers as addWorkspaceUsers, workspaces_copyDocuments as copyDocuments, workspaces_createWorkspace as createWorkspace, workspaces_deleteWorkspaces as deleteWorkspaces, workspaces_grantTemporaryWorkspaceAccess as grantTemporaryWorkspaceAccess, workspaces_listWorkspaceUsers as listWorkspaceUsers, workspaces_listWorkspaces as listWorkspaces, workspaces_removeWorkspaceUsers as removeWorkspaceUsers, workspaces_setUserRole as setUserRole, workspaces_updateWorkspace as updateWorkspace };
 }
 
 /**