@llmsafespaces/sdk 0.30.0 → 0.31.0

package/dist/index.cjs

@@ -205,7 +205,8 @@ var LLMSafeSpaces = class {
           throw new RateLimitError(msg);
         case 503: {
           const reason = errBody.reason;
-          const retryAfter = errBody.retryAfter;
+          const headerAfter = Number(res.headers.get("Retry-After"));
+          const retryAfter = errBody.retryAfter ?? (Number.isFinite(headerAfter) && headerAfter > 0 ? headerAfter : void 0);
           const apiMessage = errBody.message ?? msg;
           throw new ServiceUnavailableError(apiMessage, reason, retryAfter);
         }
@@ -418,13 +419,17 @@ var SessionsAPI = class {
   abort(workspaceId, sessionId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/abort`);
   }
+  /** Gets one session in contract shape (pkg/session Session). */
   get(workspaceId, sessionId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}`);
   }
   /**
-   * Sends a prompt asynchronously (202; the reply arrives on the workspace
-   * SSE stream). Optional `files` (Epic 68) are upload-namespace paths —
-   * the API composes the v1 attachment manifest into the dispatched text.
+   * Sends a prompt asynchronously into the delivery outbox (202) and
+   * returns the accepted-entry receipt; the agent's reply arrives on the
+   * workspace SSE stream. A retried clientMessageID answers 200 with the
+   * ORIGINAL accepted entry (status "duplicate"). Optional `files`
+   * (Epic 68) are upload-namespace paths — the API composes the v1
+   * attachment manifest into the dispatched text.
    */
   sendPromptAsync(workspaceId, sessionId, message, files) {
     const body = { parts: [{ type: "text", text: message }] };
@@ -623,25 +628,57 @@ var UsageAPI = class {
     return this.client.request("GET", "/usage/quota");
   }
 };
+function lateAnswerOnly(late) {
+  return late?.status === "queued" ? late : void 0;
+}
 var InputRequestsAPI = class {
   constructor(client) {
     this.client = client;
   }
   client;
+  /** Pending questions as contract InputRequest values (kind=question). */
   listQuestions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/question`);
   }
-  replyQuestion(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, body);
+  /**
+   * Answers a live question. When the ask is no longer live but its
+   * unanswered-question inbox record is pending (#1313), the server
+   * accepts the answer as a late answer through the delivery outbox
+   * (202) and the resolved value carries the outbox entry; a live
+   * answer (200) resolves to undefined.
+   */
+  replyQuestion(workspaceId, requestId, answers) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, { answers }).then(lateAnswerOnly);
   }
+  /** Rejects (dismisses) a pending question. */
   rejectQuestion(workspaceId, requestId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reject`);
   }
+  /** Pending permissions as contract InputRequest values (kind=permission). */
   listPermissions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/permission`);
   }
-  replyPermission(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body);
+  /**
+   * Answers a live permission with the reply vocabulary
+   * ("once" | "always" | "reject") and an optional message. A late
+   * decision (ask no longer live, inbox record pending) resolves to the
+   * 202 outbox entry; a live answer (200) resolves to undefined.
+   */
+  replyPermission(workspaceId, requestId, reply, message) {
+    const body = { reply };
+    if (message !== void 0 && message !== "") body.message = message;
+    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body).then(lateAnswerOnly);
+  }
+  /**
+   * Dismisses an unanswered-question inbox record (#1313): the record
+   * becomes dismissed; a still-live ask is rejected first server-side.
+   */
+  dismissInboxRecord(workspaceId, sessionId, requestId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}/inbox/${requestId}`);
+  }
+  /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+  requestInputSnapshot(workspaceId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/input-snapshot`);
   }
 };
 var ProbeAPI = class {

package/dist/index.d.cts

@@ -103,6 +103,44 @@ interface SessionListItem {
     messageCount: number;
     status: string;
 }
+/**
+ * The platform-owned view of one agent session (pkg/session contract,
+ * design 0049) — the getSession response shape.
+ */
+interface Session {
+    id: string;
+    workspaceId: string;
+    parentId?: string;
+    title?: string;
+    agentId?: string;
+    model?: ModelRef;
+    status: "unknown" | "idle" | "busy" | "error" | "compacting" | "archived";
+    cost?: Cost;
+    contextUsage?: ContextUsage;
+    time?: TimeRange;
+    summary?: string;
+    archived?: boolean;
+}
+/** The session's live context occupancy (non-monotonic: compaction resets it). */
+interface ContextUsage {
+    used: number;
+    window?: number;
+}
+/** Bounds a session or message. completedAt is absent while busy. */
+interface TimeRange {
+    startedAt: string;
+    completedAt?: string;
+}
+/**
+ * The delivery-outbox receipt for an async prompt: the 202 body of a
+ * fresh accept, and the 200 body of a retried clientMessageID (which
+ * echoes the ORIGINAL accepted entry with status "duplicate").
+ */
+interface PromptAccepted {
+    messageID: string;
+    clientMessageID?: string;
+    status: "queued" | "duplicate";
+}
 interface ActiveSessionsResponse {
     active: string[];
     maxActive: number;
@@ -136,7 +174,7 @@ interface Message {
 }
 /** One renderable part of a message — the closed 5-type union. */
 interface Part {
-    type: "text" | "reasoning" | "tool" | "file-change" | "custom";
+    type: "text" | "reasoning" | "tool" | "file_change" | "custom";
     id?: string;
     text?: string;
     reasoning?: string;
@@ -194,6 +232,20 @@ interface ToolRef {
     messageId?: string;
     callId?: string;
 }
+/**
+ * The 202 body for a reply that landed as a late answer through the
+ * delivery outbox (#1313): the ask was no longer live, so the answer
+ * rides a Q&A user message instead of the live ask.
+ */
+interface InboxLateAnswerAccepted {
+    status: "queued";
+    /** Ask-scoped dedupe key (`inbox-{requestID}-answer`); duplicate clicks return the original. */
+    clientMessageID: string;
+    /** The outbox entry ID (202) or the original accepted entry (duplicate). */
+    messageID: string;
+    /** Present and true when the ask-scoped key was already accepted. */
+    duplicate?: boolean;
+}
 interface ModelRef {
     id: string;
     provider?: string;
@@ -463,13 +515,17 @@ declare class SessionsAPI {
         nextCursor: string;
     }>;
     abort(workspaceId: string, sessionId: string): Promise<void>;
-    get(workspaceId: string, sessionId: string): Promise<Record<string, unknown>>;
+    /** Gets one session in contract shape (pkg/session Session). */
+    get(workspaceId: string, sessionId: string): Promise<Session>;
     /**
-     * Sends a prompt asynchronously (202; the reply arrives on the workspace
-     * SSE stream). Optional `files` (Epic 68) are upload-namespace paths —
-     * the API composes the v1 attachment manifest into the dispatched text.
+     * Sends a prompt asynchronously into the delivery outbox (202) and
+     * returns the accepted-entry receipt; the agent's reply arrives on the
+     * workspace SSE stream. A retried clientMessageID answers 200 with the
+     * ORIGINAL accepted entry (status "duplicate"). Optional `files`
+     * (Epic 68) are upload-namespace paths — the API composes the v1
+     * attachment manifest into the dispatched text.
      */
-    sendPromptAsync(workspaceId: string, sessionId: string, message: string, files?: string[]): Promise<void>;
+    sendPromptAsync(workspaceId: string, sessionId: string, message: string, files?: string[]): Promise<PromptAccepted>;
     delete(workspaceId: string, sessionId: string): Promise<void>;
     /** Enqueues a message for a busy session; optional `files` as in sendPromptAsync. */
     enqueue(workspaceId: string, sessionId: string, text: string, files?: string[]): Promise<{
@@ -587,11 +643,34 @@ declare class UsageAPI {
 declare class InputRequestsAPI {
     private client;
     constructor(client: LLMSafeSpaces);
-    listQuestions(workspaceId: string): Promise<unknown[]>;
-    replyQuestion(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending questions as contract InputRequest values (kind=question). */
+    listQuestions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live question. When the ask is no longer live but its
+     * unanswered-question inbox record is pending (#1313), the server
+     * accepts the answer as a late answer through the delivery outbox
+     * (202) and the resolved value carries the outbox entry; a live
+     * answer (200) resolves to undefined.
+     */
+    replyQuestion(workspaceId: string, requestId: string, answers: string[][]): Promise<InboxLateAnswerAccepted | undefined>;
+    /** Rejects (dismisses) a pending question. */
     rejectQuestion(workspaceId: string, requestId: string): Promise<void>;
-    listPermissions(workspaceId: string): Promise<unknown[]>;
-    replyPermission(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending permissions as contract InputRequest values (kind=permission). */
+    listPermissions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live permission with the reply vocabulary
+     * ("once" | "always" | "reject") and an optional message. A late
+     * decision (ask no longer live, inbox record pending) resolves to the
+     * 202 outbox entry; a live answer (200) resolves to undefined.
+     */
+    replyPermission(workspaceId: string, requestId: string, reply: "once" | "always" | "reject", message?: string): Promise<InboxLateAnswerAccepted | undefined>;
+    /**
+     * Dismisses an unanswered-question inbox record (#1313): the record
+     * becomes dismissed; a still-live ask is rejected first server-side.
+     */
+    dismissInboxRecord(workspaceId: string, sessionId: string, requestId: string): Promise<void>;
+    /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+    requestInputSnapshot(workspaceId: string): Promise<void>;
 }
 declare class ProbeAPI {
     private client;
@@ -814,4 +893,4 @@ declare class ServiceUnavailableError extends LLMSafeSpacesError {
     constructor(message?: string, reason?: string, retryAfter?: number);
 }
 
-export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };
+export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type ContextUsage, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InboxLateAnswerAccepted, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type PromptAccepted, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type Session, type SessionListItem, type TerminalTicket, type TimeRange, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };

package/dist/index.d.ts

@@ -103,6 +103,44 @@ interface SessionListItem {
     messageCount: number;
     status: string;
 }
+/**
+ * The platform-owned view of one agent session (pkg/session contract,
+ * design 0049) — the getSession response shape.
+ */
+interface Session {
+    id: string;
+    workspaceId: string;
+    parentId?: string;
+    title?: string;
+    agentId?: string;
+    model?: ModelRef;
+    status: "unknown" | "idle" | "busy" | "error" | "compacting" | "archived";
+    cost?: Cost;
+    contextUsage?: ContextUsage;
+    time?: TimeRange;
+    summary?: string;
+    archived?: boolean;
+}
+/** The session's live context occupancy (non-monotonic: compaction resets it). */
+interface ContextUsage {
+    used: number;
+    window?: number;
+}
+/** Bounds a session or message. completedAt is absent while busy. */
+interface TimeRange {
+    startedAt: string;
+    completedAt?: string;
+}
+/**
+ * The delivery-outbox receipt for an async prompt: the 202 body of a
+ * fresh accept, and the 200 body of a retried clientMessageID (which
+ * echoes the ORIGINAL accepted entry with status "duplicate").
+ */
+interface PromptAccepted {
+    messageID: string;
+    clientMessageID?: string;
+    status: "queued" | "duplicate";
+}
 interface ActiveSessionsResponse {
     active: string[];
     maxActive: number;
@@ -136,7 +174,7 @@ interface Message {
 }
 /** One renderable part of a message — the closed 5-type union. */
 interface Part {
-    type: "text" | "reasoning" | "tool" | "file-change" | "custom";
+    type: "text" | "reasoning" | "tool" | "file_change" | "custom";
     id?: string;
     text?: string;
     reasoning?: string;
@@ -194,6 +232,20 @@ interface ToolRef {
     messageId?: string;
     callId?: string;
 }
+/**
+ * The 202 body for a reply that landed as a late answer through the
+ * delivery outbox (#1313): the ask was no longer live, so the answer
+ * rides a Q&A user message instead of the live ask.
+ */
+interface InboxLateAnswerAccepted {
+    status: "queued";
+    /** Ask-scoped dedupe key (`inbox-{requestID}-answer`); duplicate clicks return the original. */
+    clientMessageID: string;
+    /** The outbox entry ID (202) or the original accepted entry (duplicate). */
+    messageID: string;
+    /** Present and true when the ask-scoped key was already accepted. */
+    duplicate?: boolean;
+}
 interface ModelRef {
     id: string;
     provider?: string;
@@ -463,13 +515,17 @@ declare class SessionsAPI {
         nextCursor: string;
     }>;
     abort(workspaceId: string, sessionId: string): Promise<void>;
-    get(workspaceId: string, sessionId: string): Promise<Record<string, unknown>>;
+    /** Gets one session in contract shape (pkg/session Session). */
+    get(workspaceId: string, sessionId: string): Promise<Session>;
     /**
-     * Sends a prompt asynchronously (202; the reply arrives on the workspace
-     * SSE stream). Optional `files` (Epic 68) are upload-namespace paths —
-     * the API composes the v1 attachment manifest into the dispatched text.
+     * Sends a prompt asynchronously into the delivery outbox (202) and
+     * returns the accepted-entry receipt; the agent's reply arrives on the
+     * workspace SSE stream. A retried clientMessageID answers 200 with the
+     * ORIGINAL accepted entry (status "duplicate"). Optional `files`
+     * (Epic 68) are upload-namespace paths — the API composes the v1
+     * attachment manifest into the dispatched text.
      */
-    sendPromptAsync(workspaceId: string, sessionId: string, message: string, files?: string[]): Promise<void>;
+    sendPromptAsync(workspaceId: string, sessionId: string, message: string, files?: string[]): Promise<PromptAccepted>;
     delete(workspaceId: string, sessionId: string): Promise<void>;
     /** Enqueues a message for a busy session; optional `files` as in sendPromptAsync. */
     enqueue(workspaceId: string, sessionId: string, text: string, files?: string[]): Promise<{
@@ -587,11 +643,34 @@ declare class UsageAPI {
 declare class InputRequestsAPI {
     private client;
     constructor(client: LLMSafeSpaces);
-    listQuestions(workspaceId: string): Promise<unknown[]>;
-    replyQuestion(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending questions as contract InputRequest values (kind=question). */
+    listQuestions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live question. When the ask is no longer live but its
+     * unanswered-question inbox record is pending (#1313), the server
+     * accepts the answer as a late answer through the delivery outbox
+     * (202) and the resolved value carries the outbox entry; a live
+     * answer (200) resolves to undefined.
+     */
+    replyQuestion(workspaceId: string, requestId: string, answers: string[][]): Promise<InboxLateAnswerAccepted | undefined>;
+    /** Rejects (dismisses) a pending question. */
     rejectQuestion(workspaceId: string, requestId: string): Promise<void>;
-    listPermissions(workspaceId: string): Promise<unknown[]>;
-    replyPermission(workspaceId: string, requestId: string, body: Record<string, unknown>): Promise<void>;
+    /** Pending permissions as contract InputRequest values (kind=permission). */
+    listPermissions(workspaceId: string): Promise<InputRequest[]>;
+    /**
+     * Answers a live permission with the reply vocabulary
+     * ("once" | "always" | "reject") and an optional message. A late
+     * decision (ask no longer live, inbox record pending) resolves to the
+     * 202 outbox entry; a live answer (200) resolves to undefined.
+     */
+    replyPermission(workspaceId: string, requestId: string, reply: "once" | "always" | "reject", message?: string): Promise<InboxLateAnswerAccepted | undefined>;
+    /**
+     * Dismisses an unanswered-question inbox record (#1313): the record
+     * becomes dismissed; a still-live ask is rejected first server-side.
+     */
+    dismissInboxRecord(workspaceId: string, sessionId: string, requestId: string): Promise<void>;
+    /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+    requestInputSnapshot(workspaceId: string): Promise<void>;
 }
 declare class ProbeAPI {
     private client;
@@ -814,4 +893,4 @@ declare class ServiceUnavailableError extends LLMSafeSpacesError {
     constructor(message?: string, reason?: string, retryAfter?: number);
 }
 
-export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type SessionListItem, type TerminalTicket, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };
+export { type APIKey, type ActivateWorkspaceResponse, type ActiveSessionsResponse, AuthError, type AuthResponse, type ClientOptions, ConflictError, type ContextUsage, type Cost, type CreateMcpServerRequest, type CreateProviderCredentialRequest, type CreateSecretRequest, type CreateWorkspaceRequest, type EnsureSessionResponse, type FetchFn, type FileDiff, type FileUpload, type InboxLateAnswerAccepted, type InputOption, type InputRequest, LLMSafeSpaces, LLMSafeSpacesError, type McpAutoApplyRule, type McpServer, type Message, type ModelRef, NotFoundError, type PaginationMetadata, type Part, type PromptAccepted, type ProviderCredential, type QueuedMessage, RateLimitError, type RefreshWorkspaceResult, SECRET_NAME_PATTERN, type SecretResponse, ServiceUnavailableError, type Session, type SessionListItem, type TerminalTicket, type TimeRange, TimeoutError, type ToolPart, type ToolRef, type UpdateMcpServerRequest, type UpdateProviderCredentialRequest, type User, type Workspace, type WorkspaceCondition, type WorkspaceListItem, type WorkspaceListResult, type WorkspaceStatusResult };

package/dist/index.js

@@ -171,7 +171,8 @@ var LLMSafeSpaces = class {
           throw new RateLimitError(msg);
         case 503: {
           const reason = errBody.reason;
-          const retryAfter = errBody.retryAfter;
+          const headerAfter = Number(res.headers.get("Retry-After"));
+          const retryAfter = errBody.retryAfter ?? (Number.isFinite(headerAfter) && headerAfter > 0 ? headerAfter : void 0);
           const apiMessage = errBody.message ?? msg;
           throw new ServiceUnavailableError(apiMessage, reason, retryAfter);
         }
@@ -384,13 +385,17 @@ var SessionsAPI = class {
   abort(workspaceId, sessionId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/abort`);
   }
+  /** Gets one session in contract shape (pkg/session Session). */
   get(workspaceId, sessionId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}`);
   }
   /**
-   * Sends a prompt asynchronously (202; the reply arrives on the workspace
-   * SSE stream). Optional `files` (Epic 68) are upload-namespace paths —
-   * the API composes the v1 attachment manifest into the dispatched text.
+   * Sends a prompt asynchronously into the delivery outbox (202) and
+   * returns the accepted-entry receipt; the agent's reply arrives on the
+   * workspace SSE stream. A retried clientMessageID answers 200 with the
+   * ORIGINAL accepted entry (status "duplicate"). Optional `files`
+   * (Epic 68) are upload-namespace paths — the API composes the v1
+   * attachment manifest into the dispatched text.
    */
   sendPromptAsync(workspaceId, sessionId, message, files) {
     const body = { parts: [{ type: "text", text: message }] };
@@ -589,25 +594,57 @@ var UsageAPI = class {
     return this.client.request("GET", "/usage/quota");
   }
 };
+function lateAnswerOnly(late) {
+  return late?.status === "queued" ? late : void 0;
+}
 var InputRequestsAPI = class {
   constructor(client) {
     this.client = client;
   }
   client;
+  /** Pending questions as contract InputRequest values (kind=question). */
   listQuestions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/question`);
   }
-  replyQuestion(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, body);
+  /**
+   * Answers a live question. When the ask is no longer live but its
+   * unanswered-question inbox record is pending (#1313), the server
+   * accepts the answer as a late answer through the delivery outbox
+   * (202) and the resolved value carries the outbox entry; a live
+   * answer (200) resolves to undefined.
+   */
+  replyQuestion(workspaceId, requestId, answers) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, { answers }).then(lateAnswerOnly);
   }
+  /** Rejects (dismisses) a pending question. */
   rejectQuestion(workspaceId, requestId) {
     return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reject`);
   }
+  /** Pending permissions as contract InputRequest values (kind=permission). */
   listPermissions(workspaceId) {
     return this.client.request("GET", `/workspaces/${workspaceId}/permission`);
   }
-  replyPermission(workspaceId, requestId, body) {
-    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body);
+  /**
+   * Answers a live permission with the reply vocabulary
+   * ("once" | "always" | "reject") and an optional message. A late
+   * decision (ask no longer live, inbox record pending) resolves to the
+   * 202 outbox entry; a live answer (200) resolves to undefined.
+   */
+  replyPermission(workspaceId, requestId, reply, message) {
+    const body = { reply };
+    if (message !== void 0 && message !== "") body.message = message;
+    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body).then(lateAnswerOnly);
+  }
+  /**
+   * Dismisses an unanswered-question inbox record (#1313): the record
+   * becomes dismissed; a still-live ask is rejected first server-side.
+   */
+  dismissInboxRecord(workspaceId, sessionId, requestId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}/inbox/${requestId}`);
+  }
+  /** Triggers an input-snapshot flight (202; events arrive on the event streams). */
+  requestInputSnapshot(workspaceId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/input-snapshot`);
   }
 };
 var ProbeAPI = class {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llmsafespaces/sdk",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "description": "TypeScript SDK for LLMSafeSpaces API",
   "type": "module",
   "main": "./dist/index.cjs",