@arbidocs/sdk 0.4.5 → 0.4.6

package/dist/index.d.cts

@@ -1,6 +1,7 @@
-import { q as ConfigStore, n as CliConfig, o as CliCredentials, C as ChatSession, ac as SkippedFile, al as UploadResult, k as AuthHeaders, ah as UploadBatchResult, ak as UploadOptions, ai as UploadDirectOptions, aj as UploadDirectResult, aa as SUPPORTED_EXTENSIONS, w as DmCryptoContext } from './browser-5spRium9.cjs';
-export { b as AgentStepEvent, c as Arbi, d as ArbiApiError, e as ArbiError, g as ArbiOptions, h as ArbiSessionExpiredError, i as ArtifactEvent, j as AuthContext, l as AuthenticatedClient, m as CitationSummary, p as CommandDescriptor, r as ConnectOptions, D as DOC_TERMINAL_STATUSES, x as DocNameMap, y as DocumentListFields, z as DocumentListOrder, B as DocumentWaiter, E as DocumentWaiterOptions, I as FormattedWsMessage, L as ListAllOptions, K as ListPaginatedOptions, M as MessageLevel, N as MessageMetadataPayload, O as MessageQueuedEvent, P as OutputTokensDetails, Q as ParsedSlashCommand, S as ProjectInvoicesResponse, T as ProjectUsageResponse, U as QueryOptions, V as ReconnectOptions, W as ReconnectableWsConnection, X as ResolvedCitation, Y as ResolvedRecipient, Z as ResponseCompletedEvent, _ as ResponseContentPartAddedEvent, $ as ResponseCreatedEvent, a0 as ResponseFailedEvent, a1 as ResponseOutputItemAddedEvent, a2 as ResponseOutputItemDoneEvent, a3 as ResponseOutputTextDeltaEvent, a4 as ResponseOutputTextDoneEvent, a5 as ResponseUsage, a6 as SSEEvent, a7 as SSEStreamCallbacks, a8 as SSEStreamResult, a9 as SSEStreamStartData, ab as SkillSummary, ae as TokenBudgetContext, am as UserDailyUsageResponse, an as UserInfo, ao as UserInputRequestEvent, ap as UserMessageEvent, aq as WebSocketAuthError, ar as WorkspaceContext, as as WsConnection, at as agentconfig, au as assistant, av as authenticatedFetch, aw as buildDocNameMap, ax as buildRetrievalChunkTool, ay as buildRetrievalFullContextTool, az as buildRetrievalTocTool, aA as connectWebSocket, aB as connectWithReconnect, aC as consumeSSEStream, aD as contacts, aE as conversations, aF as countCitations, aG as createAuthenticatedClient, aH as createDocumentWaiter, aI as dm, aJ as doctags, aK as documents, aL as facts, aM as files, aN as filterSkills, aO as formatAgentStepLabel, aP as formatFileSize, aQ as formatItemLabel, aR as formatStreamSummary, aS as formatUserName, aT as formatWorkspaceChoices, aU as formatWsMessage, aV as generateEncryptedWorkspaceKey, aW as generateNewWorkspaceKey, aX as getErrorCode, aY as getErrorMessage, aZ as getRawWorkspaceKey, a_ as health, a$ as parseSSEEvents, b0 as parseSlashCommand, b1 as parseSlashTokenInProgress, b2 as performPasswordLogin, b3 as performSigningKeyLogin, b4 as performSsoDeviceFlowLogin, b5 as projects, b6 as requireData, b7 as requireOk, b8 as resolveAuth, b9 as resolveCitations, ba as resolveWorkspace, bb as responses, bc as selectWorkspace, bd as selectWorkspaceById, be as settings, bf as streamSSE, bg as stripCitationMarkdown, bh as summarizeCitations, bi as tags, bj as tasks, bk as workspaces } from './browser-5spRium9.cjs';
+import { q as ConfigStore, n as CliConfig, o as CliCredentials, C as ChatSession, ac as SkippedFile, al as UploadResult, k as AuthHeaders, ah as UploadBatchResult, ak as UploadOptions, ai as UploadDirectOptions, aj as UploadDirectResult, aa as SUPPORTED_EXTENSIONS, w as DmCryptoContext } from './browser-B43Cvo9W.cjs';
+export { b as AgentStepEvent, c as Arbi, d as ArbiApiError, e as ArbiError, g as ArbiOptions, h as ArbiSessionExpiredError, i as ArtifactEvent, j as AuthContext, l as AuthenticatedClient, m as CitationSummary, p as CommandDescriptor, r as ConnectOptions, D as DOC_TERMINAL_STATUSES, x as DocNameMap, y as DocumentListFields, z as DocumentListOrder, B as DocumentWaiter, E as DocumentWaiterOptions, I as FormattedWsMessage, L as ListAllOptions, K as ListPaginatedOptions, M as MessageLevel, N as MessageMetadataPayload, O as MessageQueuedEvent, P as OutputTokensDetails, Q as ParsedSlashCommand, S as ProjectInvoicesResponse, T as ProjectUsageResponse, U as QueryOptions, V as ReconnectOptions, W as ReconnectableWsConnection, X as ResolvedCitation, Y as ResolvedRecipient, Z as ResponseCompletedEvent, _ as ResponseContentPartAddedEvent, $ as ResponseCreatedEvent, a0 as ResponseFailedEvent, a1 as ResponseOutputItemAddedEvent, a2 as ResponseOutputItemDoneEvent, a3 as ResponseOutputTextDeltaEvent, a4 as ResponseOutputTextDoneEvent, a5 as ResponseUsage, a6 as SSEEvent, a7 as SSEStreamCallbacks, a8 as SSEStreamResult, a9 as SSEStreamStartData, ab as SkillSummary, ae as TokenBudgetContext, am as UserDailyUsageResponse, an as UserInfo, ao as UserInputRequestEvent, ap as UserMessageEvent, aq as WebSocketAuthError, ar as WorkspaceContext, as as WsConnection, at as account, au as agentconfig, av as assistant, aw as authenticatedFetch, ax as buildDocNameMap, ay as buildRetrievalChunkTool, az as buildRetrievalFullContextTool, aA as buildRetrievalTocTool, aB as connectWebSocket, aC as connectWithReconnect, aD as consumeSSEStream, aE as contacts, aF as conversations, aG as countCitations, aH as createAuthenticatedClient, aI as createDocumentWaiter, aJ as dm, aK as doctags, aL as documents, aM as facts, aN as files, aO as filterSkills, aP as formatAgentStepLabel, aQ as formatFileSize, aR as formatItemLabel, aS as formatStreamSummary, aT as formatUserName, aU as formatWorkspaceChoices, aV as formatWsMessage, aW as generateEncryptedWorkspaceKey, aX as generateNewWorkspaceKey, aY as getErrorCode, aZ as getErrorMessage, a_ as getRawWorkspaceKey, a$ as health, b0 as parseSSEEvents, b1 as parseSlashCommand, b2 as parseSlashTokenInProgress, b3 as performPasswordLogin, b4 as performSigningKeyLogin, b5 as performSsoDeviceFlowLogin, b6 as profile, b7 as projects, b8 as requireData, b9 as requireOk, ba as resolveAuth, bb as resolveCitations, bc as resolveWorkspace, bd as responses, be as selectWorkspace, bf as selectWorkspaceById, bg as sessions, bh as settings, bi as streamSSE, bj as stripCitationMarkdown, bk as summarizeCitations, bl as tags, bm as tasks, bn as workspaces } from './browser-B43Cvo9W.cjs';
 import { SessionStorageProvider, ArbiClient, components } from '@arbidocs/client';
+export { LoginProfile } from '@arbidocs/client';
 
 /**
  * Configuration persistence — file-based implementation for Node.js environments.
@@ -702,44 +703,6 @@ declare namespace agents {
   export { type agents_AuthorizeAgentResponse as AuthorizeAgentResponse, type agents_AuthorizeLimitsResponse as AuthorizeLimitsResponse, agents_authorizeAgent as authorizeAgent, agents_createAgent as createAgent, agents_deleteAgents as deleteAgents, agents_getAgentConfig as getAgentConfig, agents_getAuthorizeLimits as getAuthorizeLimits, agents_listAgentWorkspaces as listAgentWorkspaces, agents_listAgents as listAgents };
 }
 
-/**
- * Session operations — list active sessions.
- */
-
-type SessionInfoResponse = components['schemas']['SessionInfoResponse'];
-/**
- * List all active sessions for the current user.
- * Agents see only their own session.
- */
-declare function listSessions(arbi: ArbiClient): Promise<SessionInfoResponse[]>;
-
-declare const sessions_listSessions: typeof listSessions;
-declare namespace sessions {
-  export { sessions_listSessions as listSessions };
-}
-
-/**
- * User profile operations — the current user's display identity.
- */
-
-type UpdateProfileRequest = components['schemas']['UpdateProfileRequest'];
-/**
- * Update the signed-in user's profile. Fields are optional — pass only what
- * changes (e.g. `given_name`, `family_name`, `picture`).
- */
-declare function updateProfile(arbi: ArbiClient, body: UpdateProfileRequest): Promise<{
-    given_name: string;
-    family_name?: string | null | undefined;
-    email: string;
-    picture?: string | null | undefined;
-}>;
-
-type profile_UpdateProfileRequest = UpdateProfileRequest;
-declare const profile_updateProfile: typeof updateProfile;
-declare namespace profile {
-  export { type profile_UpdateProfileRequest as UpdateProfileRequest, profile_updateProfile as updateProfile };
-}
-
 /**
  * Orchestrator interface for `arbi listen`.
  *
@@ -917,4 +880,4 @@ declare namespace index {
   export { index_ClaudeOrchestrator as ClaudeOrchestrator, type index_ClaudeOrchestratorOptions as ClaudeOrchestratorOptions, type index_DmListener as DmListener, type index_DmListenerOptions as DmListenerOptions, index_OpenClawOrchestrator as OpenClawOrchestrator, type index_OpenClawOrchestratorOptions as OpenClawOrchestratorOptions, type index_Orchestrator as Orchestrator, type index_PromptContext as PromptContext, index_startDmListener as startDmListener };
 }
 
-export { AuthHeaders, ChatSession, ClaudeOrchestrator, type ClaudeOrchestratorOptions, CliConfig, CliCredentials, ConfigStore, DmCryptoContext, type DmListener, type DmListenerOptions, FileConfigStore, OpenClawOrchestrator, type OpenClawOrchestratorOptions, type Orchestrator, type PromptContext, agents, deviceFlow, documentsNode, index as listen, profile, sessions, startDmListener };
+export { AuthHeaders, ChatSession, ClaudeOrchestrator, type ClaudeOrchestratorOptions, CliConfig, CliCredentials, ConfigStore, DmCryptoContext, type DmListener, type DmListenerOptions, FileConfigStore, OpenClawOrchestrator, type OpenClawOrchestratorOptions, type Orchestrator, type PromptContext, agents, deviceFlow, documentsNode, index as listen, startDmListener };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import { q as ConfigStore, n as CliConfig, o as CliCredentials, C as ChatSession, ac as SkippedFile, al as UploadResult, k as AuthHeaders, ah as UploadBatchResult, ak as UploadOptions, ai as UploadDirectOptions, aj as UploadDirectResult, aa as SUPPORTED_EXTENSIONS, w as DmCryptoContext } from './browser-5spRium9.js';
-export { b as AgentStepEvent, c as Arbi, d as ArbiApiError, e as ArbiError, g as ArbiOptions, h as ArbiSessionExpiredError, i as ArtifactEvent, j as AuthContext, l as AuthenticatedClient, m as CitationSummary, p as CommandDescriptor, r as ConnectOptions, D as DOC_TERMINAL_STATUSES, x as DocNameMap, y as DocumentListFields, z as DocumentListOrder, B as DocumentWaiter, E as DocumentWaiterOptions, I as FormattedWsMessage, L as ListAllOptions, K as ListPaginatedOptions, M as MessageLevel, N as MessageMetadataPayload, O as MessageQueuedEvent, P as OutputTokensDetails, Q as ParsedSlashCommand, S as ProjectInvoicesResponse, T as ProjectUsageResponse, U as QueryOptions, V as ReconnectOptions, W as ReconnectableWsConnection, X as ResolvedCitation, Y as ResolvedRecipient, Z as ResponseCompletedEvent, _ as ResponseContentPartAddedEvent, $ as ResponseCreatedEvent, a0 as ResponseFailedEvent, a1 as ResponseOutputItemAddedEvent, a2 as ResponseOutputItemDoneEvent, a3 as ResponseOutputTextDeltaEvent, a4 as ResponseOutputTextDoneEvent, a5 as ResponseUsage, a6 as SSEEvent, a7 as SSEStreamCallbacks, a8 as SSEStreamResult, a9 as SSEStreamStartData, ab as SkillSummary, ae as TokenBudgetContext, am as UserDailyUsageResponse, an as UserInfo, ao as UserInputRequestEvent, ap as UserMessageEvent, aq as WebSocketAuthError, ar as WorkspaceContext, as as WsConnection, at as agentconfig, au as assistant, av as authenticatedFetch, aw as buildDocNameMap, ax as buildRetrievalChunkTool, ay as buildRetrievalFullContextTool, az as buildRetrievalTocTool, aA as connectWebSocket, aB as connectWithReconnect, aC as consumeSSEStream, aD as contacts, aE as conversations, aF as countCitations, aG as createAuthenticatedClient, aH as createDocumentWaiter, aI as dm, aJ as doctags, aK as documents, aL as facts, aM as files, aN as filterSkills, aO as formatAgentStepLabel, aP as formatFileSize, aQ as formatItemLabel, aR as formatStreamSummary, aS as formatUserName, aT as formatWorkspaceChoices, aU as formatWsMessage, aV as generateEncryptedWorkspaceKey, aW as generateNewWorkspaceKey, aX as getErrorCode, aY as getErrorMessage, aZ as getRawWorkspaceKey, a_ as health, a$ as parseSSEEvents, b0 as parseSlashCommand, b1 as parseSlashTokenInProgress, b2 as performPasswordLogin, b3 as performSigningKeyLogin, b4 as performSsoDeviceFlowLogin, b5 as projects, b6 as requireData, b7 as requireOk, b8 as resolveAuth, b9 as resolveCitations, ba as resolveWorkspace, bb as responses, bc as selectWorkspace, bd as selectWorkspaceById, be as settings, bf as streamSSE, bg as stripCitationMarkdown, bh as summarizeCitations, bi as tags, bj as tasks, bk as workspaces } from './browser-5spRium9.js';
+import { q as ConfigStore, n as CliConfig, o as CliCredentials, C as ChatSession, ac as SkippedFile, al as UploadResult, k as AuthHeaders, ah as UploadBatchResult, ak as UploadOptions, ai as UploadDirectOptions, aj as UploadDirectResult, aa as SUPPORTED_EXTENSIONS, w as DmCryptoContext } from './browser-B43Cvo9W.js';
+export { b as AgentStepEvent, c as Arbi, d as ArbiApiError, e as ArbiError, g as ArbiOptions, h as ArbiSessionExpiredError, i as ArtifactEvent, j as AuthContext, l as AuthenticatedClient, m as CitationSummary, p as CommandDescriptor, r as ConnectOptions, D as DOC_TERMINAL_STATUSES, x as DocNameMap, y as DocumentListFields, z as DocumentListOrder, B as DocumentWaiter, E as DocumentWaiterOptions, I as FormattedWsMessage, L as ListAllOptions, K as ListPaginatedOptions, M as MessageLevel, N as MessageMetadataPayload, O as MessageQueuedEvent, P as OutputTokensDetails, Q as ParsedSlashCommand, S as ProjectInvoicesResponse, T as ProjectUsageResponse, U as QueryOptions, V as ReconnectOptions, W as ReconnectableWsConnection, X as ResolvedCitation, Y as ResolvedRecipient, Z as ResponseCompletedEvent, _ as ResponseContentPartAddedEvent, $ as ResponseCreatedEvent, a0 as ResponseFailedEvent, a1 as ResponseOutputItemAddedEvent, a2 as ResponseOutputItemDoneEvent, a3 as ResponseOutputTextDeltaEvent, a4 as ResponseOutputTextDoneEvent, a5 as ResponseUsage, a6 as SSEEvent, a7 as SSEStreamCallbacks, a8 as SSEStreamResult, a9 as SSEStreamStartData, ab as SkillSummary, ae as TokenBudgetContext, am as UserDailyUsageResponse, an as UserInfo, ao as UserInputRequestEvent, ap as UserMessageEvent, aq as WebSocketAuthError, ar as WorkspaceContext, as as WsConnection, at as account, au as agentconfig, av as assistant, aw as authenticatedFetch, ax as buildDocNameMap, ay as buildRetrievalChunkTool, az as buildRetrievalFullContextTool, aA as buildRetrievalTocTool, aB as connectWebSocket, aC as connectWithReconnect, aD as consumeSSEStream, aE as contacts, aF as conversations, aG as countCitations, aH as createAuthenticatedClient, aI as createDocumentWaiter, aJ as dm, aK as doctags, aL as documents, aM as facts, aN as files, aO as filterSkills, aP as formatAgentStepLabel, aQ as formatFileSize, aR as formatItemLabel, aS as formatStreamSummary, aT as formatUserName, aU as formatWorkspaceChoices, aV as formatWsMessage, aW as generateEncryptedWorkspaceKey, aX as generateNewWorkspaceKey, aY as getErrorCode, aZ as getErrorMessage, a_ as getRawWorkspaceKey, a$ as health, b0 as parseSSEEvents, b1 as parseSlashCommand, b2 as parseSlashTokenInProgress, b3 as performPasswordLogin, b4 as performSigningKeyLogin, b5 as performSsoDeviceFlowLogin, b6 as profile, b7 as projects, b8 as requireData, b9 as requireOk, ba as resolveAuth, bb as resolveCitations, bc as resolveWorkspace, bd as responses, be as selectWorkspace, bf as selectWorkspaceById, bg as sessions, bh as settings, bi as streamSSE, bj as stripCitationMarkdown, bk as summarizeCitations, bl as tags, bm as tasks, bn as workspaces } from './browser-B43Cvo9W.js';
 import { SessionStorageProvider, ArbiClient, components } from '@arbidocs/client';
+export { LoginProfile } from '@arbidocs/client';
 
 /**
  * Configuration persistence — file-based implementation for Node.js environments.
@@ -702,44 +703,6 @@ declare namespace agents {
   export { type agents_AuthorizeAgentResponse as AuthorizeAgentResponse, type agents_AuthorizeLimitsResponse as AuthorizeLimitsResponse, agents_authorizeAgent as authorizeAgent, agents_createAgent as createAgent, agents_deleteAgents as deleteAgents, agents_getAgentConfig as getAgentConfig, agents_getAuthorizeLimits as getAuthorizeLimits, agents_listAgentWorkspaces as listAgentWorkspaces, agents_listAgents as listAgents };
 }
 
-/**
- * Session operations — list active sessions.
- */
-
-type SessionInfoResponse = components['schemas']['SessionInfoResponse'];
-/**
- * List all active sessions for the current user.
- * Agents see only their own session.
- */
-declare function listSessions(arbi: ArbiClient): Promise<SessionInfoResponse[]>;
-
-declare const sessions_listSessions: typeof listSessions;
-declare namespace sessions {
-  export { sessions_listSessions as listSessions };
-}
-
-/**
- * User profile operations — the current user's display identity.
- */
-
-type UpdateProfileRequest = components['schemas']['UpdateProfileRequest'];
-/**
- * Update the signed-in user's profile. Fields are optional — pass only what
- * changes (e.g. `given_name`, `family_name`, `picture`).
- */
-declare function updateProfile(arbi: ArbiClient, body: UpdateProfileRequest): Promise<{
-    given_name: string;
-    family_name?: string | null | undefined;
-    email: string;
-    picture?: string | null | undefined;
-}>;
-
-type profile_UpdateProfileRequest = UpdateProfileRequest;
-declare const profile_updateProfile: typeof updateProfile;
-declare namespace profile {
-  export { type profile_UpdateProfileRequest as UpdateProfileRequest, profile_updateProfile as updateProfile };
-}
-
 /**
  * Orchestrator interface for `arbi listen`.
  *
@@ -917,4 +880,4 @@ declare namespace index {
   export { index_ClaudeOrchestrator as ClaudeOrchestrator, type index_ClaudeOrchestratorOptions as ClaudeOrchestratorOptions, type index_DmListener as DmListener, type index_DmListenerOptions as DmListenerOptions, index_OpenClawOrchestrator as OpenClawOrchestrator, type index_OpenClawOrchestratorOptions as OpenClawOrchestratorOptions, type index_Orchestrator as Orchestrator, type index_PromptContext as PromptContext, index_startDmListener as startDmListener };
 }
 
-export { AuthHeaders, ChatSession, ClaudeOrchestrator, type ClaudeOrchestratorOptions, CliConfig, CliCredentials, ConfigStore, DmCryptoContext, type DmListener, type DmListenerOptions, FileConfigStore, OpenClawOrchestrator, type OpenClawOrchestratorOptions, type Orchestrator, type PromptContext, agents, deviceFlow, documentsNode, index as listen, profile, sessions, startDmListener };
+export { AuthHeaders, ChatSession, ClaudeOrchestrator, type ClaudeOrchestratorOptions, CliConfig, CliCredentials, ConfigStore, DmCryptoContext, type DmListener, type DmListenerOptions, FileConfigStore, OpenClawOrchestrator, type OpenClawOrchestratorOptions, type Orchestrator, type PromptContext, agents, deviceFlow, documentsNode, index as listen, startDmListener };

package/dist/index.js

@@ -1,7 +1,7 @@
 import fs2, { readFileSync } from 'fs';
 import path2, { dirname, resolve } from 'path';
 import os2 from 'os';
-import { createArbiClient, base64ToBytes, deriveEncryptionKeypairFromSigning, sealedBoxDecrypt, sealKeyForSession, buildWebSocketUrl, createAuthMessage, parseServerMessage, isMessageType, createContentHash, encryptFile } from '@arbidocs/client';
+import { createArbiClient, base64ToBytes, deriveEncryptionKeypairFromSigning, sealedBoxDecrypt, sealKeyForSession, buildWebSocketUrl, createAuthMessage, parseServerMessage, isMessageType, createContentHash, encryptFile, changePasswordWithRekey } from '@arbidocs/client';
 import { execSync, spawn } from 'child_process';
 import { createHash } from 'crypto';
 import { fileURLToPath } from 'url';
@@ -3572,14 +3572,15 @@ async function extractErrorMessage(res) {
   return `Request failed: ${res.status} ${res.statusText}`;
 }
 async function authenticatedFetch(options) {
-  const { baseUrl, accessToken, path: path3, method, body, headers } = options;
+  const { baseUrl, accessToken, path: path3, method, body, headers, signal } = options;
   const res = await fetch(`${baseUrl}${path3}`, {
     method: method ?? (body ? "POST" : "GET"),
     headers: {
       Authorization: `Bearer ${accessToken}`,
       ...headers
     },
-    body
+    body,
+    signal
   });
   if (!res.ok) {
     const message = await extractErrorMessage(res);
@@ -5467,7 +5468,7 @@ async function retrieve(options) {
   return data;
 }
 async function queryAssistant(options) {
-  const { workspaceId, question, docIds, previousResponseId, model, ...auth } = options;
+  const { workspaceId, question, docIds, previousResponseId, model, signal, ...auth } = options;
   const body = {
     input: question,
     workspace_ext_id: workspaceId,
@@ -5486,7 +5487,8 @@ async function queryAssistant(options) {
     path: "/v1/assistant/query",
     method: "POST",
     body: JSON.stringify(body),
-    headers: { "Content-Type": "application/json" }
+    headers: { "Content-Type": "application/json" },
+    signal
   });
 }
 async function respondToAgent(arbi, assistantMessageExtId, answer) {
@@ -6034,11 +6036,76 @@ async function getFileContent(auth, fileId) {
 // src/operations/sessions.ts
 var sessions_exports = {};
 __export(sessions_exports, {
-  listSessions: () => listSessions
+  currentSessionId: () => currentSessionId,
+  listSessions: () => listSessions,
+  logoutAllSessions: () => logoutAllSessions,
+  terminateSession: () => terminateSession
 });
 async function listSessions(arbi) {
   return requireData(await arbi.fetch.GET("/v1/user/sessions"), "Failed to fetch sessions");
 }
+async function terminateSession(arbi, sessionId) {
+  requireOk(
+    await arbi.fetch.PATCH("/v1/user/sessions/{session_id}", {
+      params: { path: { session_id: sessionId } },
+      body: { ttl: 0 }
+    }),
+    "Failed to end session"
+  );
+}
+async function logoutAllSessions(arbi) {
+  requireOk(
+    await arbi.fetch.POST("/v1/user/logout", { params: { query: { all_sessions: true } } }),
+    "Failed to sign out of all sessions"
+  );
+}
+function currentSessionId(accessToken) {
+  const payload = accessToken?.split(".")[1];
+  if (!payload) return null;
+  try {
+    const claims = JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/")));
+    return typeof claims.sk === "string" ? claims.sk.slice(0, 12) : null;
+  } catch {
+    return null;
+  }
+}
+
+// src/operations/profile.ts
+var profile_exports = {};
+__export(profile_exports, {
+  updateProfile: () => updateProfile
+});
+async function updateProfile(arbi, body) {
+  return requireData(
+    await arbi.fetch.PATCH("/v1/user/profile", { body }),
+    "Failed to update profile"
+  );
+}
+
+// src/operations/account.ts
+var account_exports = {};
+__export(account_exports, {
+  confirmEmailChange: () => confirmEmailChange,
+  requestDeletion: () => requestDeletion,
+  requestEmailChange: () => requestEmailChange
+});
+async function requestEmailChange(arbi, newEmail) {
+  requireOk(
+    await arbi.fetch.POST("/v1/user/request-email-change", { body: { new_email: newEmail } }),
+    "Failed to send the verification code"
+  );
+}
+async function confirmEmailChange(arbi, newEmail, verificationCode) {
+  return requireData(
+    await arbi.fetch.POST("/v1/user/confirm-email-change", {
+      body: { new_email: newEmail, verification_code: verificationCode }
+    }),
+    "Invalid or expired verification code"
+  );
+}
+async function requestDeletion(arbi) {
+  return requireData(await arbi.fetch.POST("/v1/user/request-deletion"), "Failed to delete account");
+}
 
 // src/operations/projects.ts
 var projects_exports = {};
@@ -6248,6 +6315,8 @@ function tokenExpiresWithin(token, seconds) {
 var Arbi = class {
   client = null;
   loginResult = null;
+  userProfile = null;
+  profileListeners = /* @__PURE__ */ new Set();
   currentWorkspaceId = null;
   dmCryptoContext = null;
   sessionExpiredListeners = /* @__PURE__ */ new Set();
@@ -6296,6 +6365,7 @@ var Arbi = class {
   async login(email, password) {
     const client = await this.init();
     this.loginResult = await client.auth.login({ email, password });
+    this.userProfile = this.loginResult.profile ?? null;
   }
   /**
    * Recover a session using a stored signing private key (base64).
@@ -6305,6 +6375,7 @@ var Arbi = class {
     const client = await this.init();
     const signingPrivateKey = client.crypto.base64ToBytes(signingPrivateKeyBase64);
     this.loginResult = await client.auth.loginWithKey({ email, signingPrivateKey });
+    this.userProfile = this.loginResult.profile ?? null;
   }
   /** A workspace's key, sealed to the caller's own session (what `/open` and `POST /workspace/users` take). */
   async sealWorkspaceKey(workspaceId) {
@@ -6364,6 +6435,7 @@ var Arbi = class {
       this.loginResult.serverSessionKey.fill(0);
     }
     this.loginResult = null;
+    this.userProfile = null;
     this.currentWorkspaceId = null;
     this.dmCryptoContext = null;
     this.client?.session.clear();
@@ -6394,6 +6466,10 @@ var Arbi = class {
       return run();
     }
   }
+  setUserProfile(profile) {
+    this.userProfile = profile;
+    for (const listener of [...this.profileListeners]) listener(profile);
+  }
   /** Log out and clear internal state. */
   async logout() {
     if (this.client) {
@@ -6404,6 +6480,7 @@ var Arbi = class {
       this.loginResult.serverSessionKey.fill(0);
     }
     this.loginResult = null;
+    this.userProfile = null;
     this.currentWorkspaceId = null;
     this.dmCryptoContext = null;
   }
@@ -6477,9 +6554,76 @@ var Arbi = class {
       const state = this.requireClient().session.getState();
       return state.userExtId ? { externalId: state.userExtId, email: state.userEmail ?? null } : null;
     },
+    /**
+     * The signed-in user's profile (name, picture, email, SSO flag) as the login response
+     * carried it, kept current by `profile.update` and `account.confirmEmailChange`. `null` when
+     * not logged in or when the session was restored without a login (then read the workspace
+     * roster instead).
+     */
+    profile: () => this.userProfile,
+    /** Be told when the profile changes (name, picture or email saved). Returns the unsubscribe. */
+    onProfileChange: (listener) => {
+      this.profileListeners.add(listener);
+      return () => this.profileListeners.delete(listener);
+    },
     /** Today's deployment-wide credit spend for the current user. */
     usageToday: () => getUserUsageToday(this.requireClient())
   };
+  // ── Profile ───────────────────────────────────────────────────────────
+  profile = {
+    /** Update the display profile; pass only what changes (`''` clears family name or picture). */
+    update: async (body) => {
+      const updated = await updateProfile(this.requireClient(), body);
+      if (this.userProfile) {
+        this.setUserProfile({
+          ...this.userProfile,
+          givenName: updated.given_name ?? this.userProfile.givenName,
+          familyName: updated.family_name ?? null,
+          picture: updated.picture ?? null
+        });
+      }
+      return updated;
+    }
+  };
+  // ── Account ───────────────────────────────────────────────────────────
+  account = {
+    /** Send a verification code to the new address (not for SSO accounts). */
+    requestEmailChange: (newEmail) => requestEmailChange(this.requireClient(), newEmail),
+    /** Confirm the email change with the emailed code; the session and profile follow. */
+    confirmEmailChange: async (newEmail, verificationCode) => {
+      const client = this.requireClient();
+      const result = await confirmEmailChange(client, newEmail, verificationCode);
+      client.session.setUser(result.email, client.session.getState().userExtId ?? void 0);
+      if (this.userProfile) this.setUserProfile({ ...this.userProfile, email: result.email });
+      return result;
+    },
+    /**
+     * Change (or, after recovery, set) the master password: re-keys the workspaces and direct
+     * messages. Omit `currentPassword` in recovery mode. Resolves with the new signing key, whose
+     * recovery file the user should save.
+     */
+    changePassword: async (params) => {
+      const client = this.requireClient();
+      const lr2 = this.requireLogin();
+      const email = client.session.getState().userEmail ?? this.userProfile?.email;
+      if (!email) throw new ArbiError("The account email is unknown; sign in again.");
+      const result = await changePasswordWithRekey(
+        { ...params, email, userExtId: lr2.userExtId },
+        {
+          fetchClient: client.fetch,
+          deploymentDomain: this.options.deploymentDomain ?? new URL(this.options.url).hostname
+        }
+      );
+      this.loginResult = { ...lr2, signingPrivateKey: result.newSigningPrivateKey };
+      return result;
+    },
+    /** Close the account (soft delete) and sign out. Refused while a subscription is active. */
+    requestDeletion: async () => {
+      const result = await requestDeletion(this.requireClient());
+      await this.logout();
+      return result;
+    }
+  };
   // ── Workspaces ────────────────────────────────────────────────────────
   workspaces = {
     list: () => listWorkspaces(this.requireClient()),
@@ -6617,7 +6761,8 @@ var Arbi = class {
           question,
           docIds: options.docIds,
           previousResponseId: options.previousResponseId,
-          model: options.model
+          model: options.model,
+          signal: options.signal
         })
       );
       const callbacks = {
@@ -6865,7 +7010,16 @@ var Arbi = class {
   };
   // ── Sessions ────────────────────────────────────────────────────────
   sessions = {
-    list: () => listSessions(this.requireClient())
+    list: () => listSessions(this.requireClient()),
+    /** The id this device's session is listed under in `list()`; `null` when unknown. */
+    currentId: () => currentSessionId(this.client?.session.getState().accessToken),
+    /** End one of your own sessions now (not the one this device is on: that is `logout`). */
+    terminate: (sessionId) => terminateSession(this.requireClient(), sessionId),
+    /** Sign out of every device on the server, then clear this instance. */
+    logoutAll: async () => {
+      await logoutAllSessions(this.requireClient());
+      await this.logout();
+    }
   };
   // ── Internal guards ───────────────────────────────────────────────────
   requireClient() {
@@ -7696,18 +7850,6 @@ function extractResponseText(response) {
   return parts.join("");
 }
 
-// src/operations/profile.ts
-var profile_exports = {};
-__export(profile_exports, {
-  updateProfile: () => updateProfile
-});
-async function updateProfile(arbi, body) {
-  return requireData(
-    await arbi.fetch.PATCH("/v1/user/profile", { body }),
-    "Failed to update profile"
-  );
-}
-
 // src/listen/index.ts
 var listen_exports = {};
 __export(listen_exports, {
@@ -8010,6 +8152,6 @@ async function startDmListener(options) {
   };
 }
 
-export { Arbi, ArbiApiError, ArbiError, ArbiSessionExpiredError, ClaudeOrchestrator, DOC_TERMINAL_STATUSES, FileConfigStore, OpenClawOrchestrator, WebSocketAuthError, agentconfig_exports as agentconfig, agents_exports as agents, assistant_exports as assistant, authenticatedFetch, buildDocNameMap, buildRetrievalChunkTool, buildRetrievalFullContextTool, buildRetrievalTocTool, connectWebSocket, connectWithReconnect, consumeSSEStream, contacts_exports as contacts, conversations_exports as conversations, countCitations, createAuthenticatedClient, createDocumentWaiter, device_flow_exports as deviceFlow, dm_exports as dm, doctags_exports as doctags, documents_exports as documents, documents_node_exports as documentsNode, facts_exports as facts, files_exports as files, filterSkills, formatAgentStepLabel, formatFileSize, formatItemLabel, formatStreamSummary, formatUserName, formatWorkspaceChoices, formatWsMessage, generateEncryptedWorkspaceKey, generateNewWorkspaceKey, getErrorCode, getErrorMessage, getRawWorkspaceKey, health_exports as health, listen_exports as listen, parseSSEEvents, parseSlashCommand, parseSlashTokenInProgress, performPasswordLogin, performSigningKeyLogin, performSsoDeviceFlowLogin, profile_exports as profile, projects_exports as projects, requireData, requireOk, resolveAuth, resolveCitations, resolveWorkspace, responses_exports as responses, selectWorkspace, selectWorkspaceById, sessions_exports as sessions, settings_exports as settings, startDmListener, streamSSE, stripCitationMarkdown, summarizeCitations, tags_exports as tags, tasks_exports as tasks, workspaces_exports as workspaces };
+export { Arbi, ArbiApiError, ArbiError, ArbiSessionExpiredError, ClaudeOrchestrator, DOC_TERMINAL_STATUSES, FileConfigStore, OpenClawOrchestrator, WebSocketAuthError, account_exports as account, agentconfig_exports as agentconfig, agents_exports as agents, assistant_exports as assistant, authenticatedFetch, buildDocNameMap, buildRetrievalChunkTool, buildRetrievalFullContextTool, buildRetrievalTocTool, connectWebSocket, connectWithReconnect, consumeSSEStream, contacts_exports as contacts, conversations_exports as conversations, countCitations, createAuthenticatedClient, createDocumentWaiter, device_flow_exports as deviceFlow, dm_exports as dm, doctags_exports as doctags, documents_exports as documents, documents_node_exports as documentsNode, facts_exports as facts, files_exports as files, filterSkills, formatAgentStepLabel, formatFileSize, formatItemLabel, formatStreamSummary, formatUserName, formatWorkspaceChoices, formatWsMessage, generateEncryptedWorkspaceKey, generateNewWorkspaceKey, getErrorCode, getErrorMessage, getRawWorkspaceKey, health_exports as health, listen_exports as listen, parseSSEEvents, parseSlashCommand, parseSlashTokenInProgress, performPasswordLogin, performSigningKeyLogin, performSsoDeviceFlowLogin, profile_exports as profile, projects_exports as projects, requireData, requireOk, resolveAuth, resolveCitations, resolveWorkspace, responses_exports as responses, selectWorkspace, selectWorkspaceById, sessions_exports as sessions, settings_exports as settings, startDmListener, streamSSE, stripCitationMarkdown, summarizeCitations, tags_exports as tags, tasks_exports as tasks, workspaces_exports as workspaces };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map