@llmsafespaces/sdk 0.30.0 → 0.30.1

package/dist/index.cjs

@@ -205,7 +205,8 @@ var LLMSafeSpaces = class {
           throw new RateLimitError(msg);
         case 503: {
           const reason = errBody.reason;
-          const retryAfter = errBody.retryAfter;
+          const headerAfter = Number(res.headers.get("Retry-After"));
+          const retryAfter = errBody.retryAfter ?? (Number.isFinite(headerAfter) && headerAfter > 0 ? headerAfter : void 0);
           const apiMessage = errBody.message ?? msg;
           throw new ServiceUnavailableError(apiMessage, reason, retryAfter);
         }
@@ -623,25 +624,57 @@ var UsageAPI = class {
     return this.client.request("GET", "/usage/quota");
   }
 };
+function lateAnswerOnly(late) {
+  return late?.status === "queued" ? late : void 0;
+}
 var InputRequestsAPI = class {
   constructor(client) {
     this.client = client;
   }
   client;
+  /** Pending questions as contract InputRequest values (kind=question). */
   listQuestions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/question`);
   }
-  replyQuestion(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, body);
+  /**
+   * Answers a live question. When the ask is no longer live but its
+   * unanswered-question inbox record is pending (#1313), the server
+   * accepts the answer as a late answer through the delivery outbox
+   * (202) and the resolved value carries the outbox entry; a live
+   * answer (200) resolves to undefined.
+   */
+  replyQuestion(workspaceId, requestId, answers) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, { answers }).then(lateAnswerOnly);
   }
+  /** Rejects (dismisses) a pending question. */
   rejectQuestion(workspaceId, requestId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reject`);
   }
+  /** Pending permissions as contract InputRequest values (kind=permission). */
   listPermissions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/permission`);
   }
-  replyPermission(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body);
+  /**
+   * Answers a live permission with the reply vocabulary
+   * ("once" | "always" | "reject") and an optional message. A late
+   * decision (ask no longer live, inbox record pending) resolves to the
+   * 202 outbox entry; a live answer (200) resolves to undefined.
+   */
+  replyPermission(workspaceId, requestId, reply, message) {
+    const body = { reply };
+    if (message !== void 0 && message !== "") body.message = message;
+    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body).then(lateAnswerOnly);
+  }
+  /**
+   * Dismisses an unanswered-question inbox record (#1313): the record
+   * becomes dismissed; a still-live ask is rejected first server-side.
+   */
+  dismissInboxRecord(workspaceId, sessionId, requestId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}/inbox/${requestId}`);
+  }
+  /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+  requestInputSnapshot(workspaceId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/input-snapshot`);
   }
 };
 var ProbeAPI = class {

package/dist/index.d.cts

@@ -194,6 +194,20 @@ interface ToolRef {
     messageId?: string;
     callId?: string;
 }
+/**
+ * The 202 body for a reply that landed as a late answer through the
+ * delivery outbox (#1313): the ask was no longer live, so the answer
+ * rides a Q&A user message instead of the live ask.
+ */
+interface InboxLateAnswerAccepted {
+    status: "queued";
+    /** Ask-scoped dedupe key (`inbox-{requestID}-answer`); duplicate clicks return the original. */
+    clientMessageID: string;
+    /** The outbox entry ID (202) or the original accepted entry (duplicate). */
+    messageID: string;
+    /** Present and true when the ask-scoped key was already accepted. */
+    duplicate?: boolean;
+}
 interface ModelRef {
     id: string;
     provider?: string;
@@ -587,11 +601,34 @@ declare class UsageAPI {
 declare class InputRequestsAPI {
     private client;
     constructor(client: LLMSafeSpaces);
-    listQuestions(workspaceId: string): Promise<unknown[]>;
-    replyQuestion(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending questions as contract InputRequest values (kind=question). */
+    listQuestions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live question. When the ask is no longer live but its
+     * unanswered-question inbox record is pending (#1313), the server
+     * accepts the answer as a late answer through the delivery outbox
+     * (202) and the resolved value carries the outbox entry; a live
+     * answer (200) resolves to undefined.
+     */
+    replyQuestion(workspaceId: string, requestId: string, answers: string[][]): Promise<InboxLateAnswerAccepted | undefined>;
+    /** Rejects (dismisses) a pending question. */
     rejectQuestion(workspaceId: string, requestId: string): Promise<void>;
-    listPermissions(workspaceId: string): Promise<unknown[]>;
-    replyPermission(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending permissions as contract InputRequest values (kind=permission). */
+    listPermissions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live permission with the reply vocabulary
+     * ("once" | "always" | "reject") and an optional message. A late
+     * decision (ask no longer live, inbox record pending) resolves to the
+     * 202 outbox entry; a live answer (200) resolves to undefined.
+     */
+    replyPermission(workspaceId: string, requestId: string, reply: "once" | "always" | "reject", message?: string): Promise<InboxLateAnswerAccepted | undefined>;
+    /**
+     * Dismisses an unanswered-question inbox record (#1313): the record
+     * becomes dismissed; a still-live ask is rejected first server-side.
+     */
+    dismissInboxRecord(workspaceId: string, sessionId: string, requestId: string): Promise<void>;
+    /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+    requestInputSnapshot(workspaceId: string): Promise<void>;
 }
 declare class ProbeAPI {
     private client;
@@ -814,4 +851,4 @@ declare class ServiceUnavailableError extends LLMSafeSpacesError {
     constructor(message?: string, reason?: string, retryAfter?: number);
 }
 
-export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };
+export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InboxLateAnswerAccepted, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };

package/dist/index.d.ts

@@ -194,6 +194,20 @@ interface ToolRef {
     messageId?: string;
     callId?: string;
 }
+/**
+ * The 202 body for a reply that landed as a late answer through the
+ * delivery outbox (#1313): the ask was no longer live, so the answer
+ * rides a Q&A user message instead of the live ask.
+ */
+interface InboxLateAnswerAccepted {
+    status: "queued";
+    /** Ask-scoped dedupe key (`inbox-{requestID}-answer`); duplicate clicks return the original. */
+    clientMessageID: string;
+    /** The outbox entry ID (202) or the original accepted entry (duplicate). */
+    messageID: string;
+    /** Present and true when the ask-scoped key was already accepted. */
+    duplicate?: boolean;
+}
 interface ModelRef {
     id: string;
     provider?: string;
@@ -587,11 +601,34 @@ declare class UsageAPI {
 declare class InputRequestsAPI {
     private client;
     constructor(client: LLMSafeSpaces);
-    listQuestions(workspaceId: string): Promise<unknown[]>;
-    replyQuestion(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending questions as contract InputRequest values (kind=question). */
+    listQuestions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live question. When the ask is no longer live but its
+     * unanswered-question inbox record is pending (#1313), the server
+     * accepts the answer as a late answer through the delivery outbox
+     * (202) and the resolved value carries the outbox entry; a live
+     * answer (200) resolves to undefined.
+     */
+    replyQuestion(workspaceId: string, requestId: string, answers: string[][]): Promise<InboxLateAnswerAccepted | undefined>;
+    /** Rejects (dismisses) a pending question. */
     rejectQuestion(workspaceId: string, requestId: string): Promise<void>;
-    listPermissions(workspaceId: string): Promise<unknown[]>;
-    replyPermission(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending permissions as contract InputRequest values (kind=permission). */
+    listPermissions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live permission with the reply vocabulary
+     * ("once" | "always" | "reject") and an optional message. A late
+     * decision (ask no longer live, inbox record pending) resolves to the
+     * 202 outbox entry; a live answer (200) resolves to undefined.
+     */
+    replyPermission(workspaceId: string, requestId: string, reply: "once" | "always" | "reject", message?: string): Promise<InboxLateAnswerAccepted | undefined>;
+    /**
+     * Dismisses an unanswered-question inbox record (#1313): the record
+     * becomes dismissed; a still-live ask is rejected first server-side.
+     */
+    dismissInboxRecord(workspaceId: string, sessionId: string, requestId: string): Promise<void>;
+    /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+    requestInputSnapshot(workspaceId: string): Promise<void>;
 }
 declare class ProbeAPI {
     private client;
@@ -814,4 +851,4 @@ declare class ServiceUnavailableError extends LLMSafeSpacesError {
     constructor(message?: string, reason?: string, retryAfter?: number);
 }
 
-export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };
+export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InboxLateAnswerAccepted, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };

package/dist/index.js

@@ -171,7 +171,8 @@ var LLMSafeSpaces = class {
           throw new RateLimitError(msg);
         case 503: {
           const reason = errBody.reason;
-          const retryAfter = errBody.retryAfter;
+          const headerAfter = Number(res.headers.get("Retry-After"));
+          const retryAfter = errBody.retryAfter ?? (Number.isFinite(headerAfter) && headerAfter > 0 ? headerAfter : void 0);
           const apiMessage = errBody.message ?? msg;
           throw new ServiceUnavailableError(apiMessage, reason, retryAfter);
         }
@@ -589,25 +590,57 @@ var UsageAPI = class {
     return this.client.request("GET", "/usage/quota");
   }
 };
+function lateAnswerOnly(late) {
+  return late?.status === "queued" ? late : void 0;
+}
 var InputRequestsAPI = class {
   constructor(client) {
     this.client = client;
   }
   client;
+  /** Pending questions as contract InputRequest values (kind=question). */
   listQuestions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/question`);
   }
-  replyQuestion(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, body);
+  /**
+   * Answers a live question. When the ask is no longer live but its
+   * unanswered-question inbox record is pending (#1313), the server
+   * accepts the answer as a late answer through the delivery outbox
+   * (202) and the resolved value carries the outbox entry; a live
+   * answer (200) resolves to undefined.
+   */
+  replyQuestion(workspaceId, requestId, answers) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, { answers }).then(lateAnswerOnly);
   }
+  /** Rejects (dismisses) a pending question. */
   rejectQuestion(workspaceId, requestId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reject`);
   }
+  /** Pending permissions as contract InputRequest values (kind=permission). */
   listPermissions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/permission`);
   }
-  replyPermission(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body);
+  /**
+   * Answers a live permission with the reply vocabulary
+   * ("once" | "always" | "reject") and an optional message. A late
+   * decision (ask no longer live, inbox record pending) resolves to the
+   * 202 outbox entry; a live answer (200) resolves to undefined.
+   */
+  replyPermission(workspaceId, requestId, reply, message) {
+    const body = { reply };
+    if (message !== void 0 && message !== "") body.message = message;
+    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body).then(lateAnswerOnly);
+  }
+  /**
+   * Dismisses an unanswered-question inbox record (#1313): the record
+   * becomes dismissed; a still-live ask is rejected first server-side.
+   */
+  dismissInboxRecord(workspaceId, sessionId, requestId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}/inbox/${requestId}`);
+  }
+  /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+  requestInputSnapshot(workspaceId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/input-snapshot`);
   }
 };
 var ProbeAPI = class {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llmsafespaces/sdk",
-  "version": "0.30.0",
+  "version": "0.30.1",
   "description": "TypeScript SDK for LLMSafeSpaces API",
   "type": "module",
   "main": "./dist/index.cjs",