@llmsafespaces/sdk 0.22.0 → 0.24.0

package/dist/index.cjs

@@ -56,6 +56,8 @@ var NotFoundError = class extends LLMSafeSpacesError {
   }
 };
 var ConflictError = class extends LLMSafeSpacesError {
+  /** Current workspace phase, when the 409 body carries one (upload phase gate, Epic 67 D5). */
+  phase;
   constructor(message) {
     super(message, 409, "CONFLICT");
     this.name = "ConflictError";
@@ -120,6 +122,9 @@ var LLMSafeSpaces = class {
   agentRoles;
   workflows;
   triggers;
+  mcpServers;
+  adminMcpServers;
+  orgMcpServers;
   constructor(options) {
     this.baseUrl = options.baseUrl.replace(/\/$/, "");
     this.timeout = options.timeout ?? DEFAULT_TIMEOUT;
@@ -142,11 +147,15 @@ var LLMSafeSpaces = class {
     this.agentRoles = new AgentRolesAPI(this);
     this.workflows = new WorkflowsAPI(this);
     this.triggers = new TriggersAPI(this);
+    this.mcpServers = new McpServersAPI(this);
+    this.adminMcpServers = new AdminMcpServersAPI(this);
+    this.orgMcpServers = new OrgMcpServersAPI(this);
   }
   /** Internal: make an authenticated request. */
   async request(method, path, body, timeout) {
     const url = `${this.baseUrl}/api/v1${path}`;
-    const headers = { "Content-Type": "application/json" };
+    const isForm = typeof FormData !== "undefined" && body instanceof FormData;
+    const headers = isForm ? {} : { "Content-Type": "application/json" };
     if (this.apiKey) {
       headers["Authorization"] = `Bearer ${this.apiKey}`;
     } else if (this.token) {
@@ -162,7 +171,7 @@ var LLMSafeSpaces = class {
       res = await this.fetchFn(url, {
         method,
         headers,
-        body: body ? JSON.stringify(body) : void 0,
+        body: body ? isForm ? body : JSON.stringify(body) : void 0,
         signal: controller.signal
       });
     } catch (e) {
@@ -186,8 +195,12 @@ var LLMSafeSpaces = class {
           throw new AuthError(msg, res.status);
         case 404:
           throw new NotFoundError(msg);
-        case 409:
-          throw new ConflictError(msg);
+        case 409: {
+          const phase = errBody.phase;
+          const conflict = new ConflictError(msg);
+          if (phase) conflict.phase = phase;
+          throw conflict;
+        }
         case 429:
           throw new RateLimitError(msg);
         case 503: {
@@ -205,6 +218,52 @@ var LLMSafeSpaces = class {
     if (text === "") return void 0;
     return JSON.parse(text);
   }
+  /**
+   * Internal: like {@link request}, but also returns the response headers
+   * (e.g. pagination cursors). Body decoding follows the same contract.
+   */
+  async requestWithHeaders(method, path, body, timeout) {
+    const url = `${this.baseUrl}/api/v1${path}`;
+    const headers = { "Content-Type": "application/json" };
+    if (this.apiKey) {
+      headers["Authorization"] = `Bearer ${this.apiKey}`;
+    } else if (this.token) {
+      headers["Authorization"] = `Bearer ${this.token}`;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeout ?? this.timeout);
+    let res;
+    try {
+      res = await this.fetchFn(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+    } catch (e) {
+      clearTimeout(timer);
+      if (e instanceof Error && e.name === "AbortError") {
+        throw new TimeoutError();
+      }
+      throw e;
+    }
+    clearTimeout(timer);
+    if (!res.ok) {
+      const errBody = await res.json().catch(() => ({ error: res.statusText }));
+      const msg = errBody.error ?? res.statusText;
+      if (res.status === 401 || res.status === 403) throw new AuthError(msg, res.status);
+      if (res.status === 404) throw new NotFoundError(msg);
+      throw new LLMSafeSpacesError(msg, res.status);
+    }
+    let data;
+    if (res.status === 204) {
+      data = void 0;
+    } else {
+      const text = await res.text();
+      data = text === "" ? void 0 : JSON.parse(text);
+    }
+    return { data, headers: res.headers };
+  }
   async login() {
     if (!this.credentials) throw new AuthError("No credentials configured");
     this.loggingIn = true;
@@ -246,6 +305,18 @@ var WorkspacesAPI = class {
   getStatus(id) {
     return this.client.request("GET", `/workspaces/${id}/status`);
   }
+  /**
+   * Uploads a file into the workspace (Epic 67): multipart POST with a
+   * single part named `file`; the file lands on the workspace PVC under
+   * /workspace/uploads/. The returned path feeds the `files` parameter of
+   * sessions.sendPromptAsync / sessions.enqueue. The workspace must be
+   * Active; a 409 rejects with ConflictError carrying `phase`.
+   */
+  upload(id, filename, content) {
+    const form = new FormData();
+    form.append("file", typeof content === "string" ? new Blob([content]) : content, filename);
+    return this.client.request("POST", `/workspaces/${id}/uploads`, form);
+  }
   activate(id) {
     return this.client.request("POST", `/workspaces/${id}/activate`);
   }
@@ -327,20 +398,44 @@ var SessionsAPI = class {
   getHistory(workspaceId, sessionId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}/message`);
   }
+  /**
+   * Returns one page of session history with cursor pagination.
+   * nextCursor is "" when the beginning of the session was reached
+   * (no X-Next-Cursor response header).
+   */
+  async getHistoryPage(workspaceId, sessionId, opts) {
+    const q = new URLSearchParams();
+    if (opts?.limit && opts.limit > 0) q.set("limit", String(opts.limit));
+    if (opts?.before) q.set("before", opts.before);
+    const qs = q.toString();
+    const path = `/workspaces/${workspaceId}/sessions/${sessionId}/message${qs ? `?${qs}` : ""}`;
+    const { data, headers } = await this.client.requestWithHeaders("GET", path);
+    return { messages: data ?? [], nextCursor: headers.get("X-Next-Cursor") ?? "" };
+  }
   abort(workspaceId, sessionId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/abort`);
   }
   get(workspaceId, sessionId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}`);
   }
-  sendPromptAsync(workspaceId, sessionId, message) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/prompt`, { message });
+  /**
+   * Sends a prompt asynchronously (202; the reply arrives on the workspace
+   * SSE stream). Optional `files` (Epic 67) are upload-namespace paths —
+   * the API composes the v1 attachment manifest into the dispatched text.
+   */
+  sendPromptAsync(workspaceId, sessionId, message, files) {
+    const body = { parts: [{ type: "text", text: message }] };
+    if (files && files.length > 0) body.files = files;
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/prompt`, body);
   }
   delete(workspaceId, sessionId) {
     return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}`);
   }
-  enqueue(workspaceId, sessionId, text) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/queue`, { text });
+  /** Enqueues a message for a busy session; optional `files` as in sendPromptAsync. */
+  enqueue(workspaceId, sessionId, text, files) {
+    const body = { text };
+    if (files && files.length > 0) body.files = files;
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/queue`, body);
   }
   /**
    * @deprecated Under the V2 session-queue model (Epic 63), the queue is
@@ -675,6 +770,110 @@ var TriggersAPI = class {
     return this.client.request("DELETE", `/me/triggers/${id}`);
   }
 };
+var McpServersAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list() {
+    return this.client.request("GET", "/me/mcp-servers").then((r) => Array.isArray(r) ? r : r.servers ?? []);
+  }
+  get(id) {
+    return this.client.request("GET", `/me/mcp-servers/${id}`);
+  }
+  create(req) {
+    return this.client.request("POST", "/me/mcp-servers", req);
+  }
+  update(id, req) {
+    return this.client.request("PUT", `/me/mcp-servers/${id}`, req);
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/me/mcp-servers/${id}`);
+  }
+  bind(id, workspaceId) {
+    return this.client.request("POST", `/me/mcp-servers/${id}/bindings`, { workspaceId });
+  }
+  unbind(id, workspaceId) {
+    return this.client.request("DELETE", `/me/mcp-servers/${id}/bindings/${workspaceId}`);
+  }
+  createAutoApply(id, targetType, targetId) {
+    return this.client.request("POST", `/me/mcp-servers/${id}/auto-apply`, { targetType, targetId });
+  }
+  listAutoApply(id) {
+    return this.client.request("GET", `/me/mcp-servers/${id}/auto-apply`).then((r) => Array.isArray(r) ? r : r.rules ?? []);
+  }
+};
+var AdminMcpServersAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list() {
+    return this.client.request("GET", "/admin/mcp-servers").then((r) => Array.isArray(r) ? r : r.servers ?? []);
+  }
+  get(id) {
+    return this.client.request("GET", `/admin/mcp-servers/${id}`);
+  }
+  create(req) {
+    return this.client.request("POST", "/admin/mcp-servers", req);
+  }
+  update(id, req) {
+    return this.client.request("PUT", `/admin/mcp-servers/${id}`, req);
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/admin/mcp-servers/${id}`);
+  }
+  bind(id, workspaceId) {
+    return this.client.request("POST", `/admin/mcp-servers/${id}/bindings`, { workspaceId });
+  }
+  unbind(id, workspaceId) {
+    return this.client.request("DELETE", `/admin/mcp-servers/${id}/bindings/${workspaceId}`);
+  }
+  createAutoApply(id, targetType, targetId) {
+    return this.client.request("POST", `/admin/mcp-servers/${id}/auto-apply`, { targetType, targetId });
+  }
+  listAutoApply(id) {
+    return this.client.request("GET", `/admin/mcp-servers/${id}/auto-apply`).then((r) => Array.isArray(r) ? r : r.rules ?? []);
+  }
+  /** targetId omitted → removes every rule of the targetType. */
+  deleteAutoApply(id, targetType, targetId) {
+    const suffix = targetId ? `/${targetId}` : "";
+    return this.client.request("DELETE", `/admin/mcp-servers/${id}/auto-apply/${targetType}${suffix}`);
+  }
+};
+var OrgMcpServersAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list(orgId) {
+    return this.client.request("GET", `/orgs/${orgId}/mcp-servers`).then((r) => Array.isArray(r) ? r : r.servers ?? []);
+  }
+  get(orgId, id) {
+    return this.client.request("GET", `/orgs/${orgId}/mcp-servers/${id}`);
+  }
+  create(orgId, req) {
+    return this.client.request("POST", `/orgs/${orgId}/mcp-servers`, req);
+  }
+  update(orgId, id, req) {
+    return this.client.request("PUT", `/orgs/${orgId}/mcp-servers/${id}`, req);
+  }
+  delete(orgId, id) {
+    return this.client.request("DELETE", `/orgs/${orgId}/mcp-servers/${id}`);
+  }
+  bind(orgId, id, workspaceId) {
+    return this.client.request("POST", `/orgs/${orgId}/mcp-servers/${id}/bindings`, { workspaceId });
+  }
+  unbind(orgId, id, workspaceId) {
+    return this.client.request("DELETE", `/orgs/${orgId}/mcp-servers/${id}/bindings/${workspaceId}`);
+  }
+  createAutoApply(orgId, id, targetType, targetId) {
+    return this.client.request("POST", `/orgs/${orgId}/mcp-servers/${id}/auto-apply`, { targetType, targetId });
+  }
+  listAutoApply(orgId, id) {
+    return this.client.request("GET", `/orgs/${orgId}/mcp-servers/${id}/auto-apply`).then((r) => Array.isArray(r) ? r : r.rules ?? []);
+  }
+};
 
 // src/types.ts
 var SECRET_NAME_PATTERN = /^[a-z0-9._-]+$/;

package/dist/index.d.cts

@@ -294,6 +294,58 @@ interface QueuedMessage {
     enqueued_at: string;
     retry_count: number;
 }
+/**
+ * Result of a workspace file upload (Epic 67): the absolute path of the
+ * stored file on the workspace PVC (/workspace/uploads/<uuid>-<name>),
+ * its sanitized name, and the stored byte count.
+ */
+interface FileUpload {
+    path: string;
+    name: string;
+    size: number;
+}
+interface McpServer {
+    id: string;
+    name: string;
+    transport: "http" | "sse" | "stdio";
+    url?: string;
+    command?: string;
+    args?: string[];
+    timeoutMs?: number;
+    hasSecret: boolean;
+    enabled: boolean;
+    createdAt?: string;
+    updatedAt?: string;
+}
+interface CreateMcpServerRequest {
+    name: string;
+    transport: "http" | "sse" | "stdio";
+    url?: string;
+    command?: string;
+    args?: string[];
+    timeoutMs?: number;
+    enabled?: boolean;
+    env?: Record<string, string>;
+    headers?: Record<string, string>;
+    autoApply?: {
+        targetType: string;
+        targetId?: string;
+    };
+}
+interface UpdateMcpServerRequest {
+    name?: string;
+    url?: string;
+    command?: string;
+    args?: string[];
+    timeoutMs?: number;
+    enabled?: boolean;
+    env?: Record<string, string>;
+    headers?: Record<string, string>;
+}
+interface McpAutoApplyRule {
+    targetType: string;
+    targetId?: string;
+}
 
 declare class LLMSafeSpaces {
     readonly baseUrl: string;
@@ -319,9 +371,20 @@ declare class LLMSafeSpaces {
     readonly agentRoles: AgentRolesAPI;
     readonly workflows: WorkflowsAPI;
     readonly triggers: TriggersAPI;
+    readonly mcpServers: McpServersAPI;
+    readonly adminMcpServers: AdminMcpServersAPI;
+    readonly orgMcpServers: OrgMcpServersAPI;
     constructor(options: ClientOptions);
     /** Internal: make an authenticated request. */
     request<T>(method: string, path: string, body?: unknown, timeout?: number): Promise<T>;
+    /**
+     * Internal: like {@link request}, but also returns the response headers
+     * (e.g. pagination cursors). Body decoding follows the same contract.
+     */
+    requestWithHeaders<T>(method: string, path: string, body?: unknown, timeout?: number): Promise<{
+        data: T;
+        headers: Headers;
+    }>;
     private login;
 }
 declare class WorkspacesAPI {
@@ -333,6 +396,14 @@ declare class WorkspacesAPI {
     rename(id: string, name: string): Promise<void>;
     delete(id: string): Promise<void>;
     getStatus(id: string): Promise<WorkspaceStatusResult>;
+    /**
+     * Uploads a file into the workspace (Epic 67): multipart POST with a
+     * single part named `file`; the file lands on the workspace PVC under
+     * /workspace/uploads/. The returned path feeds the `files` parameter of
+     * sessions.sendPromptAsync / sessions.enqueue. The workspace must be
+     * Active; a 409 rejects with ConflictError carrying `phase`.
+     */
+    upload(id: string, filename: string, content: Blob | string): Promise<FileUpload>;
     activate(id: string): Promise<ActivateWorkspaceResponse>;
     suspend(id: string): Promise<void>;
     restart(id: string): Promise<void>;
@@ -378,11 +449,29 @@ declare class SessionsAPI {
     sendMessage(workspaceId: string, sessionId: string, content: string): Promise<Message>;
     /** Returns the session transcript in contract shape. */
     getHistory(workspaceId: string, sessionId: string): Promise<Message[]>;
+    /**
+     * Returns one page of session history with cursor pagination.
+     * nextCursor is "" when the beginning of the session was reached
+     * (no X-Next-Cursor response header).
+     */
+    getHistoryPage(workspaceId: string, sessionId: string, opts?: {
+        limit?: number;
+        before?: string;
+    }): Promise<{
+        messages: Message[];
+        nextCursor: string;
+    }>;
     abort(workspaceId: string, sessionId: string): Promise<void>;
     get(workspaceId: string, sessionId: string): Promise<Record<string, unknown>>;
-    sendPromptAsync(workspaceId: string, sessionId: string, message: string): Promise<void>;
+    /**
+     * Sends a prompt asynchronously (202; the reply arrives on the workspace
+     * SSE stream). Optional `files` (Epic 67) are upload-namespace paths —
+     * the API composes the v1 attachment manifest into the dispatched text.
+     */
+    sendPromptAsync(workspaceId: string, sessionId: string, message: string, files?: string[]): Promise<void>;
     delete(workspaceId: string, sessionId: string): Promise<void>;
-    enqueue(workspaceId: string, sessionId: string, text: string): Promise<{
+    /** Enqueues a message for a busy session; optional `files` as in sendPromptAsync. */
+    enqueue(workspaceId: string, sessionId: string, text: string, files?: string[]): Promise<{
         messageID: string;
     }>;
     /**
@@ -640,6 +729,50 @@ declare class TriggersAPI {
     }): Promise<TriggerResponse>;
     delete(id: string): Promise<void>;
 }
+/** MCP servers owned by the caller (/me/mcp-servers, Epic 53). */
+declare class McpServersAPI {
+    private readonly client;
+    constructor(client: LLMSafeSpaces);
+    list(): Promise<McpServer[]>;
+    get(id: string): Promise<McpServer>;
+    create(req: CreateMcpServerRequest): Promise<McpServer>;
+    update(id: string, req: UpdateMcpServerRequest): Promise<McpServer>;
+    delete(id: string): Promise<void>;
+    bind(id: string, workspaceId: string): Promise<void>;
+    unbind(id: string, workspaceId: string): Promise<void>;
+    createAutoApply(id: string, targetType: string, targetId?: string): Promise<void>;
+    listAutoApply(id: string): Promise<McpAutoApplyRule[]>;
+}
+/** Platform MCP servers (/admin/mcp-servers; admin scope). */
+declare class AdminMcpServersAPI {
+    private readonly client;
+    constructor(client: LLMSafeSpaces);
+    list(): Promise<McpServer[]>;
+    get(id: string): Promise<McpServer>;
+    create(req: CreateMcpServerRequest): Promise<McpServer>;
+    update(id: string, req: UpdateMcpServerRequest): Promise<McpServer>;
+    delete(id: string): Promise<void>;
+    bind(id: string, workspaceId: string): Promise<void>;
+    unbind(id: string, workspaceId: string): Promise<void>;
+    createAutoApply(id: string, targetType: string, targetId?: string): Promise<void>;
+    listAutoApply(id: string): Promise<McpAutoApplyRule[]>;
+    /** targetId omitted → removes every rule of the targetType. */
+    deleteAutoApply(id: string, targetType: string, targetId?: string): Promise<void>;
+}
+/** Organization MCP servers (/orgs/{orgId}/mcp-servers; org-admin scope). */
+declare class OrgMcpServersAPI {
+    private readonly client;
+    constructor(client: LLMSafeSpaces);
+    list(orgId: string): Promise<McpServer[]>;
+    get(orgId: string, id: string): Promise<McpServer>;
+    create(orgId: string, req: CreateMcpServerRequest): Promise<McpServer>;
+    update(orgId: string, id: string, req: UpdateMcpServerRequest): Promise<McpServer>;
+    delete(orgId: string, id: string): Promise<void>;
+    bind(orgId: string, id: string, workspaceId: string): Promise<void>;
+    unbind(orgId: string, id: string, workspaceId: string): Promise<void>;
+    createAutoApply(orgId: string, id: string, targetType: string, targetId?: string): Promise<void>;
+    listAutoApply(orgId: string, id: string): Promise<McpAutoApplyRule[]>;
+}
 
 /** Base error for all LLMSafeSpaces API errors. */
 declare class LLMSafeSpacesError extends Error {
@@ -654,6 +787,8 @@ declare class NotFoundError extends LLMSafeSpacesError {
     constructor(message: string);
 }
 declare class ConflictError extends LLMSafeSpacesError {
+    /** Current workspace phase, when the 409 body carries one (upload phase gate, Epic 67 D5). */
+    phase?: string;
     constructor(message: string);
 }
 declare class TimeoutError extends LLMSafeSpacesError {
@@ -678,4 +813,4 @@ declare class ServiceUnavailableError extends LLMSafeSpacesError {
     constructor(message?: string, reason?: string, retryAfter?: number);
 }
 
-export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };
+export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };

package/dist/index.d.ts

@@ -294,6 +294,58 @@ interface QueuedMessage {
     enqueued_at: string;
     retry_count: number;
 }
+/**
+ * Result of a workspace file upload (Epic 67): the absolute path of the
+ * stored file on the workspace PVC (/workspace/uploads/<uuid>-<name>),
+ * its sanitized name, and the stored byte count.
+ */
+interface FileUpload {
+    path: string;
+    name: string;
+    size: number;
+}
+interface McpServer {
+    id: string;
+    name: string;
+    transport: "http" | "sse" | "stdio";
+    url?: string;
+    command?: string;
+    args?: string[];
+    timeoutMs?: number;
+    hasSecret: boolean;
+    enabled: boolean;
+    createdAt?: string;
+    updatedAt?: string;
+}
+interface CreateMcpServerRequest {
+    name: string;
+    transport: "http" | "sse" | "stdio";
+    url?: string;
+    command?: string;
+    args?: string[];
+    timeoutMs?: number;
+    enabled?: boolean;
+    env?: Record<string, string>;
+    headers?: Record<string, string>;
+    autoApply?: {
+        targetType: string;
+        targetId?: string;
+    };
+}
+interface UpdateMcpServerRequest {
+    name?: string;
+    url?: string;
+    command?: string;
+    args?: string[];
+    timeoutMs?: number;
+    enabled?: boolean;
+    env?: Record<string, string>;
+    headers?: Record<string, string>;
+}
+interface McpAutoApplyRule {
+    targetType: string;
+    targetId?: string;
+}
 
 declare class LLMSafeSpaces {
     readonly baseUrl: string;
@@ -319,9 +371,20 @@ declare class LLMSafeSpaces {
     readonly agentRoles: AgentRolesAPI;
     readonly workflows: WorkflowsAPI;
     readonly triggers: TriggersAPI;
+    readonly mcpServers: McpServersAPI;
+    readonly adminMcpServers: AdminMcpServersAPI;
+    readonly orgMcpServers: OrgMcpServersAPI;
     constructor(options: ClientOptions);
     /** Internal: make an authenticated request. */
     request<T>(method: string, path: string, body?: unknown, timeout?: number): Promise<T>;
+    /**
+     * Internal: like {@link request}, but also returns the response headers
+     * (e.g. pagination cursors). Body decoding follows the same contract.
+     */
+    requestWithHeaders<T>(method: string, path: string, body?: unknown, timeout?: number): Promise<{
+        data: T;
+        headers: Headers;
+    }>;
     private login;
 }
 declare class WorkspacesAPI {
@@ -333,6 +396,14 @@ declare class WorkspacesAPI {
     rename(id: string, name: string): Promise<void>;
     delete(id: string): Promise<void>;
     getStatus(id: string): Promise<WorkspaceStatusResult>;
+    /**
+     * Uploads a file into the workspace (Epic 67): multipart POST with a
+     * single part named `file`; the file lands on the workspace PVC under
+     * /workspace/uploads/. The returned path feeds the `files` parameter of
+     * sessions.sendPromptAsync / sessions.enqueue. The workspace must be
+     * Active; a 409 rejects with ConflictError carrying `phase`.
+     */
+    upload(id: string, filename: string, content: Blob | string): Promise<FileUpload>;
     activate(id: string): Promise<ActivateWorkspaceResponse>;
     suspend(id: string): Promise<void>;
     restart(id: string): Promise<void>;
@@ -378,11 +449,29 @@ declare class SessionsAPI {
     sendMessage(workspaceId: string, sessionId: string, content: string): Promise<Message>;
     /** Returns the session transcript in contract shape. */
     getHistory(workspaceId: string, sessionId: string): Promise<Message[]>;
+    /**
+     * Returns one page of session history with cursor pagination.
+     * nextCursor is "" when the beginning of the session was reached
+     * (no X-Next-Cursor response header).
+     */
+    getHistoryPage(workspaceId: string, sessionId: string, opts?: {
+        limit?: number;
+        before?: string;
+    }): Promise<{
+        messages: Message[];
+        nextCursor: string;
+    }>;
     abort(workspaceId: string, sessionId: string): Promise<void>;
     get(workspaceId: string, sessionId: string): Promise<Record<string, unknown>>;
-    sendPromptAsync(workspaceId: string, sessionId: string, message: string): Promise<void>;
+    /**
+     * Sends a prompt asynchronously (202; the reply arrives on the workspace
+     * SSE stream). Optional `files` (Epic 67) are upload-namespace paths —
+     * the API composes the v1 attachment manifest into the dispatched text.
+     */
+    sendPromptAsync(workspaceId: string, sessionId: string, message: string, files?: string[]): Promise<void>;
     delete(workspaceId: string, sessionId: string): Promise<void>;
-    enqueue(workspaceId: string, sessionId: string, text: string): Promise<{
+    /** Enqueues a message for a busy session; optional `files` as in sendPromptAsync. */
+    enqueue(workspaceId: string, sessionId: string, text: string, files?: string[]): Promise<{
         messageID: string;
     }>;
     /**
@@ -640,6 +729,50 @@ declare class TriggersAPI {
     }): Promise<TriggerResponse>;
     delete(id: string): Promise<void>;
 }
+/** MCP servers owned by the caller (/me/mcp-servers, Epic 53). */
+declare class McpServersAPI {
+    private readonly client;
+    constructor(client: LLMSafeSpaces);
+    list(): Promise<McpServer[]>;
+    get(id: string): Promise<McpServer>;
+    create(req: CreateMcpServerRequest): Promise<McpServer>;
+    update(id: string, req: UpdateMcpServerRequest): Promise<McpServer>;
+    delete(id: string): Promise<void>;
+    bind(id: string, workspaceId: string): Promise<void>;
+    unbind(id: string, workspaceId: string): Promise<void>;
+    createAutoApply(id: string, targetType: string, targetId?: string): Promise<void>;
+    listAutoApply(id: string): Promise<McpAutoApplyRule[]>;
+}
+/** Platform MCP servers (/admin/mcp-servers; admin scope). */
+declare class AdminMcpServersAPI {
+    private readonly client;
+    constructor(client: LLMSafeSpaces);
+    list(): Promise<McpServer[]>;
+    get(id: string): Promise<McpServer>;
+    create(req: CreateMcpServerRequest): Promise<McpServer>;
+    update(id: string, req: UpdateMcpServerRequest): Promise<McpServer>;
+    delete(id: string): Promise<void>;
+    bind(id: string, workspaceId: string): Promise<void>;
+    unbind(id: string, workspaceId: string): Promise<void>;
+    createAutoApply(id: string, targetType: string, targetId?: string): Promise<void>;
+    listAutoApply(id: string): Promise<McpAutoApplyRule[]>;
+    /** targetId omitted → removes every rule of the targetType. */
+    deleteAutoApply(id: string, targetType: string, targetId?: string): Promise<void>;
+}
+/** Organization MCP servers (/orgs/{orgId}/mcp-servers; org-admin scope). */
+declare class OrgMcpServersAPI {
+    private readonly client;
+    constructor(client: LLMSafeSpaces);
+    list(orgId: string): Promise<McpServer[]>;
+    get(orgId: string, id: string): Promise<McpServer>;
+    create(orgId: string, req: CreateMcpServerRequest): Promise<McpServer>;
+    update(orgId: string, id: string, req: UpdateMcpServerRequest): Promise<McpServer>;
+    delete(orgId: string, id: string): Promise<void>;
+    bind(orgId: string, id: string, workspaceId: string): Promise<void>;
+    unbind(orgId: string, id: string, workspaceId: string): Promise<void>;
+    createAutoApply(orgId: string, id: string, targetType: string, targetId?: string): Promise<void>;
+    listAutoApply(orgId: string, id: string): Promise<McpAutoApplyRule[]>;
+}
 
 /** Base error for all LLMSafeSpaces API errors. */
 declare class LLMSafeSpacesError extends Error {
@@ -654,6 +787,8 @@ declare class NotFoundError extends LLMSafeSpacesError {
     constructor(message: string);
 }
 declare class ConflictError extends LLMSafeSpacesError {
+    /** Current workspace phase, when the 409 body carries one (upload phase gate, Epic 67 D5). */
+    phase?: string;
     constructor(message: string);
 }
 declare class TimeoutError extends LLMSafeSpacesError {
@@ -678,4 +813,4 @@ declare class ServiceUnavailableError extends LLMSafeSpacesError {
     constructor(message?: string, reason?: string, retryAfter?: number);
 }
 
-export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };
+export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };

package/dist/index.js

@@ -22,6 +22,8 @@ var NotFoundError = class extends LLMSafeSpacesError {
   }
 };
 var ConflictError = class extends LLMSafeSpacesError {
+  /** Current workspace phase, when the 409 body carries one (upload phase gate, Epic 67 D5). */
+  phase;
   constructor(message) {
     super(message, 409, "CONFLICT");
     this.name = "ConflictError";
@@ -86,6 +88,9 @@ var LLMSafeSpaces = class {
   agentRoles;
   workflows;
   triggers;
+  mcpServers;
+  adminMcpServers;
+  orgMcpServers;
   constructor(options) {
     this.baseUrl = options.baseUrl.replace(/\/$/, "");
     this.timeout = options.timeout ?? DEFAULT_TIMEOUT;
@@ -108,11 +113,15 @@ var LLMSafeSpaces = class {
     this.agentRoles = new AgentRolesAPI(this);
     this.workflows = new WorkflowsAPI(this);
     this.triggers = new TriggersAPI(this);
+    this.mcpServers = new McpServersAPI(this);
+    this.adminMcpServers = new AdminMcpServersAPI(this);
+    this.orgMcpServers = new OrgMcpServersAPI(this);
   }
   /** Internal: make an authenticated request. */
   async request(method, path, body, timeout) {
     const url = `${this.baseUrl}/api/v1${path}`;
-    const headers = { "Content-Type": "application/json" };
+    const isForm = typeof FormData !== "undefined" && body instanceof FormData;
+    const headers = isForm ? {} : { "Content-Type": "application/json" };
     if (this.apiKey) {
       headers["Authorization"] = `Bearer ${this.apiKey}`;
     } else if (this.token) {
@@ -128,7 +137,7 @@ var LLMSafeSpaces = class {
       res = await this.fetchFn(url, {
         method,
         headers,
-        body: body ? JSON.stringify(body) : void 0,
+        body: body ? isForm ? body : JSON.stringify(body) : void 0,
         signal: controller.signal
       });
     } catch (e) {
@@ -152,8 +161,12 @@ var LLMSafeSpaces = class {
           throw new AuthError(msg, res.status);
         case 404:
           throw new NotFoundError(msg);
-        case 409:
-          throw new ConflictError(msg);
+        case 409: {
+          const phase = errBody.phase;
+          const conflict = new ConflictError(msg);
+          if (phase) conflict.phase = phase;
+          throw conflict;
+        }
         case 429:
           throw new RateLimitError(msg);
         case 503: {
@@ -171,6 +184,52 @@ var LLMSafeSpaces = class {
     if (text === "") return void 0;
     return JSON.parse(text);
   }
+  /**
+   * Internal: like {@link request}, but also returns the response headers
+   * (e.g. pagination cursors). Body decoding follows the same contract.
+   */
+  async requestWithHeaders(method, path, body, timeout) {
+    const url = `${this.baseUrl}/api/v1${path}`;
+    const headers = { "Content-Type": "application/json" };
+    if (this.apiKey) {
+      headers["Authorization"] = `Bearer ${this.apiKey}`;
+    } else if (this.token) {
+      headers["Authorization"] = `Bearer ${this.token}`;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeout ?? this.timeout);
+    let res;
+    try {
+      res = await this.fetchFn(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+    } catch (e) {
+      clearTimeout(timer);
+      if (e instanceof Error && e.name === "AbortError") {
+        throw new TimeoutError();
+      }
+      throw e;
+    }
+    clearTimeout(timer);
+    if (!res.ok) {
+      const errBody = await res.json().catch(() => ({ error: res.statusText }));
+      const msg = errBody.error ?? res.statusText;
+      if (res.status === 401 || res.status === 403) throw new AuthError(msg, res.status);
+      if (res.status === 404) throw new NotFoundError(msg);
+      throw new LLMSafeSpacesError(msg, res.status);
+    }
+    let data;
+    if (res.status === 204) {
+      data = void 0;
+    } else {
+      const text = await res.text();
+      data = text === "" ? void 0 : JSON.parse(text);
+    }
+    return { data, headers: res.headers };
+  }
   async login() {
     if (!this.credentials) throw new AuthError("No credentials configured");
     this.loggingIn = true;
@@ -212,6 +271,18 @@ var WorkspacesAPI = class {
   getStatus(id) {
     return this.client.request("GET", `/workspaces/${id}/status`);
   }
+  /**
+   * Uploads a file into the workspace (Epic 67): multipart POST with a
+   * single part named `file`; the file lands on the workspace PVC under
+   * /workspace/uploads/. The returned path feeds the `files` parameter of
+   * sessions.sendPromptAsync / sessions.enqueue. The workspace must be
+   * Active; a 409 rejects with ConflictError carrying `phase`.
+   */
+  upload(id, filename, content) {
+    const form = new FormData();
+    form.append("file", typeof content === "string" ? new Blob([content]) : content, filename);
+    return this.client.request("POST", `/workspaces/${id}/uploads`, form);
+  }
   activate(id) {
     return this.client.request("POST", `/workspaces/${id}/activate`);
   }
@@ -293,20 +364,44 @@ var SessionsAPI = class {
   getHistory(workspaceId, sessionId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}/message`);
   }
+  /**
+   * Returns one page of session history with cursor pagination.
+   * nextCursor is "" when the beginning of the session was reached
+   * (no X-Next-Cursor response header).
+   */
+  async getHistoryPage(workspaceId, sessionId, opts) {
+    const q = new URLSearchParams();
+    if (opts?.limit && opts.limit > 0) q.set("limit", String(opts.limit));
+    if (opts?.before) q.set("before", opts.before);
+    const qs = q.toString();
+    const path = `/workspaces/${workspaceId}/sessions/${sessionId}/message${qs ? `?${qs}` : ""}`;
+    const { data, headers } = await this.client.requestWithHeaders("GET", path);
+    return { messages: data ?? [], nextCursor: headers.get("X-Next-Cursor") ?? "" };
+  }
   abort(workspaceId, sessionId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/abort`);
   }
   get(workspaceId, sessionId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}`);
   }
-  sendPromptAsync(workspaceId, sessionId, message) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/prompt`, { message });
+  /**
+   * Sends a prompt asynchronously (202; the reply arrives on the workspace
+   * SSE stream). Optional `files` (Epic 67) are upload-namespace paths —
+   * the API composes the v1 attachment manifest into the dispatched text.
+   */
+  sendPromptAsync(workspaceId, sessionId, message, files) {
+    const body = { parts: [{ type: "text", text: message }] };
+    if (files && files.length > 0) body.files = files;
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/prompt`, body);
   }
   delete(workspaceId, sessionId) {
     return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}`);
   }
-  enqueue(workspaceId, sessionId, text) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/queue`, { text });
+  /** Enqueues a message for a busy session; optional `files` as in sendPromptAsync. */
+  enqueue(workspaceId, sessionId, text, files) {
+    const body = { text };
+    if (files && files.length > 0) body.files = files;
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/queue`, body);
   }
   /**
    * @deprecated Under the V2 session-queue model (Epic 63), the queue is
@@ -641,6 +736,110 @@ var TriggersAPI = class {
     return this.client.request("DELETE", `/me/triggers/${id}`);
   }
 };
+var McpServersAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list() {
+    return this.client.request("GET", "/me/mcp-servers").then((r) => Array.isArray(r) ? r : r.servers ?? []);
+  }
+  get(id) {
+    return this.client.request("GET", `/me/mcp-servers/${id}`);
+  }
+  create(req) {
+    return this.client.request("POST", "/me/mcp-servers", req);
+  }
+  update(id, req) {
+    return this.client.request("PUT", `/me/mcp-servers/${id}`, req);
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/me/mcp-servers/${id}`);
+  }
+  bind(id, workspaceId) {
+    return this.client.request("POST", `/me/mcp-servers/${id}/bindings`, { workspaceId });
+  }
+  unbind(id, workspaceId) {
+    return this.client.request("DELETE", `/me/mcp-servers/${id}/bindings/${workspaceId}`);
+  }
+  createAutoApply(id, targetType, targetId) {
+    return this.client.request("POST", `/me/mcp-servers/${id}/auto-apply`, { targetType, targetId });
+  }
+  listAutoApply(id) {
+    return this.client.request("GET", `/me/mcp-servers/${id}/auto-apply`).then((r) => Array.isArray(r) ? r : r.rules ?? []);
+  }
+};
+var AdminMcpServersAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list() {
+    return this.client.request("GET", "/admin/mcp-servers").then((r) => Array.isArray(r) ? r : r.servers ?? []);
+  }
+  get(id) {
+    return this.client.request("GET", `/admin/mcp-servers/${id}`);
+  }
+  create(req) {
+    return this.client.request("POST", "/admin/mcp-servers", req);
+  }
+  update(id, req) {
+    return this.client.request("PUT", `/admin/mcp-servers/${id}`, req);
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/admin/mcp-servers/${id}`);
+  }
+  bind(id, workspaceId) {
+    return this.client.request("POST", `/admin/mcp-servers/${id}/bindings`, { workspaceId });
+  }
+  unbind(id, workspaceId) {
+    return this.client.request("DELETE", `/admin/mcp-servers/${id}/bindings/${workspaceId}`);
+  }
+  createAutoApply(id, targetType, targetId) {
+    return this.client.request("POST", `/admin/mcp-servers/${id}/auto-apply`, { targetType, targetId });
+  }
+  listAutoApply(id) {
+    return this.client.request("GET", `/admin/mcp-servers/${id}/auto-apply`).then((r) => Array.isArray(r) ? r : r.rules ?? []);
+  }
+  /** targetId omitted → removes every rule of the targetType. */
+  deleteAutoApply(id, targetType, targetId) {
+    const suffix = targetId ? `/${targetId}` : "";
+    return this.client.request("DELETE", `/admin/mcp-servers/${id}/auto-apply/${targetType}${suffix}`);
+  }
+};
+var OrgMcpServersAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list(orgId) {
+    return this.client.request("GET", `/orgs/${orgId}/mcp-servers`).then((r) => Array.isArray(r) ? r : r.servers ?? []);
+  }
+  get(orgId, id) {
+    return this.client.request("GET", `/orgs/${orgId}/mcp-servers/${id}`);
+  }
+  create(orgId, req) {
+    return this.client.request("POST", `/orgs/${orgId}/mcp-servers`, req);
+  }
+  update(orgId, id, req) {
+    return this.client.request("PUT", `/orgs/${orgId}/mcp-servers/${id}`, req);
+  }
+  delete(orgId, id) {
+    return this.client.request("DELETE", `/orgs/${orgId}/mcp-servers/${id}`);
+  }
+  bind(orgId, id, workspaceId) {
+    return this.client.request("POST", `/orgs/${orgId}/mcp-servers/${id}/bindings`, { workspaceId });
+  }
+  unbind(orgId, id, workspaceId) {
+    return this.client.request("DELETE", `/orgs/${orgId}/mcp-servers/${id}/bindings/${workspaceId}`);
+  }
+  createAutoApply(orgId, id, targetType, targetId) {
+    return this.client.request("POST", `/orgs/${orgId}/mcp-servers/${id}/auto-apply`, { targetType, targetId });
+  }
+  listAutoApply(orgId, id) {
+    return this.client.request("GET", `/orgs/${orgId}/mcp-servers/${id}/auto-apply`).then((r) => Array.isArray(r) ? r : r.rules ?? []);
+  }
+};
 
 // src/types.ts
 var SECRET_NAME_PATTERN = /^[a-z0-9._-]+$/;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llmsafespaces/sdk",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "TypeScript SDK for LLMSafeSpaces API",
   "type": "module",
   "main": "./dist/index.cjs",