@arbidocs/sdk 0.4.5 → 0.4.7

package/dist/index.cjs

@@ -3581,14 +3581,15 @@ async function extractErrorMessage(res) {
   return `Request failed: ${res.status} ${res.statusText}`;
 }
 async function authenticatedFetch(options) {
-  const { baseUrl, accessToken, path: path3, method, body, headers } = options;
+  const { baseUrl, accessToken, path: path3, method, body, headers, signal } = options;
   const res = await fetch(`${baseUrl}${path3}`, {
     method: method ?? (body ? "POST" : "GET"),
     headers: {
       Authorization: `Bearer ${accessToken}`,
       ...headers
     },
-    body
+    body,
+    signal
   });
   if (!res.ok) {
     const message = await extractErrorMessage(res);
@@ -5476,7 +5477,7 @@ async function retrieve(options) {
   return data;
 }
 async function queryAssistant(options) {
-  const { workspaceId, question, docIds, previousResponseId, model, ...auth } = options;
+  const { workspaceId, question, docIds, previousResponseId, model, signal, ...auth } = options;
   const body = {
     input: question,
     workspace_ext_id: workspaceId,
@@ -5495,7 +5496,8 @@ async function queryAssistant(options) {
     path: "/v1/assistant/query",
     method: "POST",
     body: JSON.stringify(body),
-    headers: { "Content-Type": "application/json" }
+    headers: { "Content-Type": "application/json" },
+    signal
   });
 }
 async function respondToAgent(arbi, assistantMessageExtId, answer) {
@@ -6043,11 +6045,76 @@ async function getFileContent(auth, fileId) {
 // src/operations/sessions.ts
 var sessions_exports = {};
 __export(sessions_exports, {
-  listSessions: () => listSessions
+  currentSessionId: () => currentSessionId,
+  listSessions: () => listSessions,
+  logoutAllSessions: () => logoutAllSessions,
+  terminateSession: () => terminateSession
 });
 async function listSessions(arbi) {
   return requireData(await arbi.fetch.GET("/v1/user/sessions"), "Failed to fetch sessions");
 }
+async function terminateSession(arbi, sessionId) {
+  requireOk(
+    await arbi.fetch.PATCH("/v1/user/sessions/{session_id}", {
+      params: { path: { session_id: sessionId } },
+      body: { ttl: 0 }
+    }),
+    "Failed to end session"
+  );
+}
+async function logoutAllSessions(arbi) {
+  requireOk(
+    await arbi.fetch.POST("/v1/user/logout", { params: { query: { all_sessions: true } } }),
+    "Failed to sign out of all sessions"
+  );
+}
+function currentSessionId(accessToken) {
+  const payload = accessToken?.split(".")[1];
+  if (!payload) return null;
+  try {
+    const claims = JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/")));
+    return typeof claims.sk === "string" ? claims.sk.slice(0, 12) : null;
+  } catch {
+    return null;
+  }
+}
+
+// src/operations/profile.ts
+var profile_exports = {};
+__export(profile_exports, {
+  updateProfile: () => updateProfile
+});
+async function updateProfile(arbi, body) {
+  return requireData(
+    await arbi.fetch.PATCH("/v1/user/profile", { body }),
+    "Failed to update profile"
+  );
+}
+
+// src/operations/account.ts
+var account_exports = {};
+__export(account_exports, {
+  confirmEmailChange: () => confirmEmailChange,
+  requestDeletion: () => requestDeletion,
+  requestEmailChange: () => requestEmailChange
+});
+async function requestEmailChange(arbi, newEmail) {
+  requireOk(
+    await arbi.fetch.POST("/v1/user/request-email-change", { body: { new_email: newEmail } }),
+    "Failed to send the verification code"
+  );
+}
+async function confirmEmailChange(arbi, newEmail, verificationCode) {
+  return requireData(
+    await arbi.fetch.POST("/v1/user/confirm-email-change", {
+      body: { new_email: newEmail, verification_code: verificationCode }
+    }),
+    "Invalid or expired verification code"
+  );
+}
+async function requestDeletion(arbi) {
+  return requireData(await arbi.fetch.POST("/v1/user/request-deletion"), "Failed to delete account");
+}
 
 // src/operations/projects.ts
 var projects_exports = {};
@@ -6257,6 +6324,8 @@ function tokenExpiresWithin(token, seconds) {
 var Arbi = class {
   client = null;
   loginResult = null;
+  userProfile = null;
+  profileListeners = /* @__PURE__ */ new Set();
   currentWorkspaceId = null;
   dmCryptoContext = null;
   sessionExpiredListeners = /* @__PURE__ */ new Set();
@@ -6305,6 +6374,7 @@ var Arbi = class {
   async login(email, password) {
     const client = await this.init();
     this.loginResult = await client.auth.login({ email, password });
+    this.userProfile = this.loginResult.profile ?? null;
   }
   /**
    * Recover a session using a stored signing private key (base64).
@@ -6314,6 +6384,7 @@ var Arbi = class {
     const client = await this.init();
     const signingPrivateKey = client.crypto.base64ToBytes(signingPrivateKeyBase64);
     this.loginResult = await client.auth.loginWithKey({ email, signingPrivateKey });
+    this.userProfile = this.loginResult.profile ?? null;
   }
   /** A workspace's key, sealed to the caller's own session (what `/open` and `POST /workspace/users` take). */
   async sealWorkspaceKey(workspaceId) {
@@ -6373,6 +6444,7 @@ var Arbi = class {
       this.loginResult.serverSessionKey.fill(0);
     }
     this.loginResult = null;
+    this.userProfile = null;
     this.currentWorkspaceId = null;
     this.dmCryptoContext = null;
     this.client?.session.clear();
@@ -6403,6 +6475,10 @@ var Arbi = class {
       return run();
     }
   }
+  setUserProfile(profile) {
+    this.userProfile = profile;
+    for (const listener of [...this.profileListeners]) listener(profile);
+  }
   /** Log out and clear internal state. */
   async logout() {
     if (this.client) {
@@ -6413,6 +6489,7 @@ var Arbi = class {
       this.loginResult.serverSessionKey.fill(0);
     }
     this.loginResult = null;
+    this.userProfile = null;
     this.currentWorkspaceId = null;
     this.dmCryptoContext = null;
   }
@@ -6486,9 +6563,76 @@ var Arbi = class {
       const state = this.requireClient().session.getState();
       return state.userExtId ? { externalId: state.userExtId, email: state.userEmail ?? null } : null;
     },
+    /**
+     * The signed-in user's profile (name, picture, email, SSO flag) as the login response
+     * carried it, kept current by `profile.update` and `account.confirmEmailChange`. `null` when
+     * not logged in or when the session was restored without a login (then read the workspace
+     * roster instead).
+     */
+    profile: () => this.userProfile,
+    /** Be told when the profile changes (name, picture or email saved). Returns the unsubscribe. */
+    onProfileChange: (listener) => {
+      this.profileListeners.add(listener);
+      return () => this.profileListeners.delete(listener);
+    },
     /** Today's deployment-wide credit spend for the current user. */
     usageToday: () => getUserUsageToday(this.requireClient())
   };
+  // ── Profile ───────────────────────────────────────────────────────────
+  profile = {
+    /** Update the display profile; pass only what changes (`''` clears family name or picture). */
+    update: async (body) => {
+      const updated = await updateProfile(this.requireClient(), body);
+      if (this.userProfile) {
+        this.setUserProfile({
+          ...this.userProfile,
+          givenName: updated.given_name ?? this.userProfile.givenName,
+          familyName: updated.family_name ?? null,
+          picture: updated.picture ?? null
+        });
+      }
+      return updated;
+    }
+  };
+  // ── Account ───────────────────────────────────────────────────────────
+  account = {
+    /** Send a verification code to the new address (not for SSO accounts). */
+    requestEmailChange: (newEmail) => requestEmailChange(this.requireClient(), newEmail),
+    /** Confirm the email change with the emailed code; the session and profile follow. */
+    confirmEmailChange: async (newEmail, verificationCode) => {
+      const client = this.requireClient();
+      const result = await confirmEmailChange(client, newEmail, verificationCode);
+      client.session.setUser(result.email, client.session.getState().userExtId ?? void 0);
+      if (this.userProfile) this.setUserProfile({ ...this.userProfile, email: result.email });
+      return result;
+    },
+    /**
+     * Change (or, after recovery, set) the master password: re-keys the workspaces and direct
+     * messages. Omit `currentPassword` in recovery mode. Resolves with the new signing key, whose
+     * recovery file the user should save.
+     */
+    changePassword: async (params) => {
+      const client$1 = this.requireClient();
+      const lr2 = this.requireLogin();
+      const email = client$1.session.getState().userEmail ?? this.userProfile?.email;
+      if (!email) throw new ArbiError("The account email is unknown; sign in again.");
+      const result = await client.changePasswordWithRekey(
+        { ...params, email, userExtId: lr2.userExtId },
+        {
+          fetchClient: client$1.fetch,
+          deploymentDomain: this.options.deploymentDomain ?? new URL(this.options.url).hostname
+        }
+      );
+      this.loginResult = { ...lr2, signingPrivateKey: result.newSigningPrivateKey };
+      return result;
+    },
+    /** Close the account (soft delete) and sign out. Refused while a subscription is active. */
+    requestDeletion: async () => {
+      const result = await requestDeletion(this.requireClient());
+      await this.logout();
+      return result;
+    }
+  };
   // ── Workspaces ────────────────────────────────────────────────────────
   workspaces = {
     list: () => listWorkspaces(this.requireClient()),
@@ -6626,7 +6770,8 @@ var Arbi = class {
           question,
           docIds: options.docIds,
           previousResponseId: options.previousResponseId,
-          model: options.model
+          model: options.model,
+          signal: options.signal
         })
       );
       const callbacks = {
@@ -6874,7 +7019,16 @@ var Arbi = class {
   };
   // ── Sessions ────────────────────────────────────────────────────────
   sessions = {
-    list: () => listSessions(this.requireClient())
+    list: () => listSessions(this.requireClient()),
+    /** The id this device's session is listed under in `list()`; `null` when unknown. */
+    currentId: () => currentSessionId(this.client?.session.getState().accessToken),
+    /** End one of your own sessions now (not the one this device is on: that is `logout`). */
+    terminate: (sessionId) => terminateSession(this.requireClient(), sessionId),
+    /** Sign out of every device on the server, then clear this instance. */
+    logoutAll: async () => {
+      await logoutAllSessions(this.requireClient());
+      await this.logout();
+    }
   };
   // ── Internal guards ───────────────────────────────────────────────────
   requireClient() {
@@ -7705,18 +7859,6 @@ function extractResponseText(response) {
   return parts.join("");
 }
 
-// src/operations/profile.ts
-var profile_exports = {};
-__export(profile_exports, {
-  updateProfile: () => updateProfile
-});
-async function updateProfile(arbi, body) {
-  return requireData(
-    await arbi.fetch.PATCH("/v1/user/profile", { body }),
-    "Failed to update profile"
-  );
-}
-
 // src/listen/index.ts
 var listen_exports = {};
 __export(listen_exports, {
@@ -8028,6 +8170,7 @@ exports.DOC_TERMINAL_STATUSES = DOC_TERMINAL_STATUSES;
 exports.FileConfigStore = FileConfigStore;
 exports.OpenClawOrchestrator = OpenClawOrchestrator;
 exports.WebSocketAuthError = WebSocketAuthError;
+exports.account = account_exports;
 exports.agentconfig = agentconfig_exports;
 exports.agents = agents_exports;
 exports.assistant = assistant_exports;