@llmsafespaces/sdk 0.5.2 → 0.5.3

package/dist/index.cjs

@@ -0,0 +1,602 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthError: () => AuthError,
+  ConflictError: () => ConflictError,
+  LLMSafeSpaces: () => LLMSafeSpaces,
+  LLMSafeSpacesError: () => LLMSafeSpacesError,
+  NotFoundError: () => NotFoundError,
+  RateLimitError: () => RateLimitError,
+  SECRET_NAME_PATTERN: () => SECRET_NAME_PATTERN,
+  TimeoutError: () => TimeoutError
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/errors.ts
+var LLMSafeSpacesError = class extends Error {
+  constructor(message, status, code) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.name = "LLMSafeSpacesError";
+  }
+  status;
+  code;
+};
+var AuthError = class extends LLMSafeSpacesError {
+  constructor(message, status = 401) {
+    super(message, status, "AUTH_ERROR");
+    this.name = "AuthError";
+  }
+};
+var NotFoundError = class extends LLMSafeSpacesError {
+  constructor(message) {
+    super(message, 404, "NOT_FOUND");
+    this.name = "NotFoundError";
+  }
+};
+var ConflictError = class extends LLMSafeSpacesError {
+  constructor(message) {
+    super(message, 409, "CONFLICT");
+    this.name = "ConflictError";
+  }
+};
+var TimeoutError = class extends LLMSafeSpacesError {
+  constructor(message = "Request timed out \u2014 the prompt may still be processing") {
+    super(message, 0, "TIMEOUT");
+    this.name = "TimeoutError";
+  }
+};
+var RateLimitError = class extends LLMSafeSpacesError {
+  constructor(message = "Rate limit exceeded") {
+    super(message, 429, "RATE_LIMIT");
+    this.name = "RateLimitError";
+  }
+};
+
+// src/client.ts
+var DEFAULT_TIMEOUT = 12e4;
+var LLMSafeSpaces = class {
+  baseUrl;
+  timeout;
+  fetchFn;
+  token;
+  apiKey;
+  credentials;
+  loggingIn = false;
+  workspaces;
+  sessions;
+  auth;
+  secrets;
+  terminal;
+  userSettings;
+  account;
+  providerCredentials;
+  adminProviderCredentials;
+  usage;
+  inputRequests;
+  probe;
+  prompts;
+  agentRoles;
+  constructor(options) {
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.timeout = options.timeout ?? DEFAULT_TIMEOUT;
+    this.apiKey = options.apiKey;
+    this.credentials = options.credentials;
+    this.fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);
+    this.workspaces = new WorkspacesAPI(this);
+    this.sessions = new SessionsAPI(this);
+    this.auth = new AuthAPI(this);
+    this.secrets = new SecretsAPI(this);
+    this.terminal = new TerminalAPI(this);
+    this.userSettings = new UserSettingsAPI(this);
+    this.account = new AccountAPI(this);
+    this.providerCredentials = new ProviderCredentialsAPI(this);
+    this.adminProviderCredentials = new AdminProviderCredentialsAPI(this);
+    this.usage = new UsageAPI(this);
+    this.inputRequests = new InputRequestsAPI(this);
+    this.probe = new ProbeAPI(this);
+    this.prompts = new PromptsAPI(this);
+    this.agentRoles = new AgentRolesAPI(this);
+  }
+  /** Internal: make an authenticated request. */
+  async request(method, path, body, timeout) {
+    const url = `${this.baseUrl}/api/v1${path}`;
+    const headers = { "Content-Type": "application/json" };
+    if (this.apiKey) {
+      headers["Authorization"] = `Bearer ${this.apiKey}`;
+    } else if (this.token) {
+      headers["Authorization"] = `Bearer ${this.token}`;
+    } else if (this.credentials && !this.loggingIn) {
+      await this.login();
+      headers["Authorization"] = `Bearer ${this.token}`;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeout ?? this.timeout);
+    let res;
+    try {
+      res = await this.fetchFn(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+    } catch (e) {
+      clearTimeout(timer);
+      if (e instanceof Error && e.name === "AbortError") {
+        throw new TimeoutError();
+      }
+      throw e;
+    }
+    clearTimeout(timer);
+    if (res.status === 401 && this.credentials && this.token) {
+      this.token = void 0;
+      return this.request(method, path, body, timeout);
+    }
+    if (!res.ok) {
+      const errBody = await res.json().catch(() => ({ error: res.statusText }));
+      const msg = errBody.error ?? res.statusText;
+      switch (res.status) {
+        case 401:
+        case 403:
+          throw new AuthError(msg, res.status);
+        case 404:
+          throw new NotFoundError(msg);
+        case 409:
+          throw new ConflictError(msg);
+        case 429:
+          throw new RateLimitError(msg);
+        default:
+          throw new LLMSafeSpacesError(msg, res.status);
+      }
+    }
+    if (res.status === 204) return void 0;
+    const text = await res.text();
+    if (text === "") return void 0;
+    return JSON.parse(text);
+  }
+  async login() {
+    if (!this.credentials) throw new AuthError("No credentials configured");
+    this.loggingIn = true;
+    try {
+      const url = `${this.baseUrl}/api/v1/auth/login`;
+      const res = await this.fetchFn(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(this.credentials)
+      });
+      if (!res.ok) throw new AuthError("Login failed", res.status);
+      const data = await res.json();
+      this.token = data.token;
+    } finally {
+      this.loggingIn = false;
+    }
+  }
+};
+var WorkspacesAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list(limit = 20, offset = 0) {
+    return this.client.request("GET", `/workspaces?limit=${limit}&offset=${offset}`);
+  }
+  create(req) {
+    return this.client.request("POST", "/workspaces", req);
+  }
+  get(id) {
+    return this.client.request("GET", `/workspaces/${id}`);
+  }
+  rename(id, name) {
+    return this.client.request("PUT", `/workspaces/${id}`, { name });
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/workspaces/${id}`);
+  }
+  getStatus(id) {
+    return this.client.request("GET", `/workspaces/${id}/status`);
+  }
+  activate(id) {
+    return this.client.request("POST", `/workspaces/${id}/activate`);
+  }
+  suspend(id) {
+    return this.client.request("POST", `/workspaces/${id}/suspend`);
+  }
+  restart(id) {
+    return this.client.request("POST", `/workspaces/${id}/restart`);
+  }
+  refreshCompute(id) {
+    return this.client.request("POST", `/workspaces/${id}/refresh-compute`);
+  }
+  setBindings(id, secretIds) {
+    return this.client.request("PUT", `/workspaces/${id}/bindings`, { secretIds });
+  }
+  getBindings(id) {
+    return this.client.request(
+      "GET",
+      `/workspaces/${id}/bindings`
+    );
+  }
+  reloadSecrets(id) {
+    return this.client.request("POST", `/workspaces/${id}/reload-secrets`);
+  }
+  setModel(id, model) {
+    return this.client.request("PUT", `/workspaces/${id}/model`, { model });
+  }
+  getModels(id) {
+    return this.client.request("GET", `/workspaces/${id}/models`);
+  }
+  setEnv(id, env) {
+    return this.client.request("PUT", `/workspaces/${id}/env`, { vars: env });
+  }
+  getEnv(id) {
+    return this.client.request("GET", `/workspaces/${id}/env`);
+  }
+  deleteEnv(id, varName) {
+    return this.client.request("DELETE", `/workspaces/${id}/env/${varName}`);
+  }
+};
+var SessionsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  ensure(workspaceId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/new`);
+  }
+  list(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/sessions`);
+  }
+  getActive(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/sessions/active`);
+  }
+  rename(workspaceId, sessionId, title) {
+    return this.client.request("PUT", `/workspaces/${workspaceId}/sessions/${sessionId}/title`, { title });
+  }
+  async sendMessage(workspaceId, sessionId, content) {
+    const raw = await this.client.request(
+      "POST",
+      `/workspaces/${workspaceId}/sessions/${sessionId}/message`,
+      { content, parts: [{ type: "text", text: content }] }
+    );
+    return { raw, content: extractTextContent(raw) };
+  }
+  getHistory(workspaceId, sessionId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}/message`);
+  }
+  abort(workspaceId, sessionId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/abort`);
+  }
+  get(workspaceId, sessionId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}`);
+  }
+  sendPromptAsync(workspaceId, sessionId, message) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/prompt`, { message });
+  }
+  delete(workspaceId, sessionId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}`);
+  }
+  enqueue(workspaceId, sessionId, text) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/sessions/${sessionId}/queue`, { text });
+  }
+  listQueue(workspaceId, sessionId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/sessions/${sessionId}/queue`);
+  }
+  dismissQueued(workspaceId, sessionId, messageId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/sessions/${sessionId}/queue/${messageId}`);
+  }
+  markSeen(workspaceId, sessionId) {
+    return this.client.request("PUT", `/workspaces/${workspaceId}/sessions/${sessionId}/seen`);
+  }
+};
+var AuthAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  me() {
+    return this.client.request("GET", "/auth/me");
+  }
+  listApiKeys() {
+    return this.client.request("GET", "/auth/api-keys");
+  }
+  createApiKey(name) {
+    return this.client.request("POST", "/auth/api-keys", { name });
+  }
+  deleteApiKey(id) {
+    return this.client.request("DELETE", `/auth/api-keys/${id}`);
+  }
+};
+var SecretsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  create(req) {
+    return this.client.request("POST", "/secrets", req);
+  }
+  list() {
+    return this.client.request("GET", "/secrets").then((r) => r?.secrets ?? r);
+  }
+  get(id) {
+    return this.client.request("GET", `/secrets/${id}`);
+  }
+  update(id, value) {
+    return this.client.request("PUT", `/secrets/${id}`, { value });
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/secrets/${id}`);
+  }
+  reveal(id, password) {
+    return this.client.request("POST", `/secrets/${id}/reveal`, { password });
+  }
+  getAuditLog() {
+    return this.client.request("GET", "/secrets/audit");
+  }
+  getBindingsForSecret(id) {
+    return this.client.request("GET", `/secrets/${id}/bindings`);
+  }
+};
+var TerminalAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  getTicket(workspaceId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/terminal/ticket`);
+  }
+};
+var UserSettingsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  get() {
+    return this.client.request("GET", "/users/me/settings");
+  }
+  getSchema() {
+    return this.client.request("GET", "/users/me/settings/schema");
+  }
+  set(key, value) {
+    return this.client.request("PUT", `/users/me/settings/${key}`, { value });
+  }
+};
+var AccountAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  rotateKey(password) {
+    return this.client.request("POST", "/account/rotate-key", { password });
+  }
+  changePassword(oldPassword, newPassword) {
+    return this.client.request("POST", "/account/change-password", { oldPassword, newPassword });
+  }
+  recover(userId, recoveryKey, newPassword) {
+    return this.client.request("POST", "/account/recover", { userId, recoveryKey, newPassword });
+  }
+};
+var ProviderCredentialsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  create(req) {
+    return this.client.request("POST", "/provider-credentials", req).then((data) => {
+      if (data && typeof data === "object" && "credential" in data) {
+        return data.credential;
+      }
+      return data;
+    });
+  }
+  list() {
+    return this.client.request("GET", "/provider-credentials");
+  }
+  get(id) {
+    return this.client.request("GET", `/provider-credentials/${id}`);
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/provider-credentials/${id}`);
+  }
+  probeModels(id) {
+    return this.client.request("GET", `/provider-credentials/${id}/models`);
+  }
+  listBindings(id) {
+    return this.client.request("GET", `/provider-credentials/${id}/bindings`).then((data) => data.workspaceIds);
+  }
+  bind(credId, workspaceId) {
+    return this.client.request("POST", `/provider-credentials/${credId}/bind/${workspaceId}`);
+  }
+  unbind(credId, workspaceId) {
+    return this.client.request("DELETE", `/provider-credentials/${credId}/bind/${workspaceId}`);
+  }
+};
+var AdminProviderCredentialsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  list() {
+    return this.client.request("GET", "/admin/provider-credentials");
+  }
+  create(req) {
+    return this.client.request("POST", "/admin/provider-credentials", req);
+  }
+  get(id) {
+    return this.client.request("GET", `/admin/provider-credentials/${id}`);
+  }
+  update(id, req) {
+    return this.client.request("PUT", `/admin/provider-credentials/${id}`, req);
+  }
+  delete(id) {
+    return this.client.request("DELETE", `/admin/provider-credentials/${id}`);
+  }
+  probeModels(id) {
+    return this.client.request("GET", `/admin/provider-credentials/${id}/models`);
+  }
+  createAutoApply(id, req) {
+    return this.client.request("POST", `/admin/provider-credentials/${id}/auto-apply`, req);
+  }
+  listAutoApply(id) {
+    return this.client.request("GET", `/admin/provider-credentials/${id}/auto-apply`);
+  }
+  deleteAutoApply(id, targetType, targetId) {
+    return this.client.request("DELETE", `/admin/provider-credentials/${id}/auto-apply/${targetType}/${targetId}`);
+  }
+};
+var UsageAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  get() {
+    return this.client.request("GET", "/usage");
+  }
+  getWorkspace(workspaceId) {
+    return this.client.request("GET", `/usage/workspaces/${workspaceId}`);
+  }
+  getQuota() {
+    return this.client.request("GET", "/usage/quota");
+  }
+};
+var InputRequestsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  listQuestions(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/question`);
+  }
+  replyQuestion(workspaceId, requestId, body) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reply`, body);
+  }
+  rejectQuestion(workspaceId, requestId) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/question/${requestId}/reject`);
+  }
+  listPermissions(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/permission`);
+  }
+  replyPermission(workspaceId, requestId, body) {
+    return this.client.request("POST", `/workspaces/${workspaceId}/permission/${requestId}/reply`, body);
+  }
+};
+var ProbeAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  probeModels(apiKey, baseURL) {
+    return this.client.request("POST", "/probe-models", { apiKey, baseURL });
+  }
+};
+function extractTextContent(raw) {
+  if (!raw || typeof raw !== "object") return "";
+  const obj = raw;
+  if (!Array.isArray(obj.parts)) return "";
+  return obj.parts.filter((p) => p.type === "text" && p.text).map((p) => p.text).join("");
+}
+var PromptsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  getPlatform() {
+    return this.client.request("GET", "/admin/prompt");
+  }
+  setPlatform(prompt) {
+    return this.client.request("PUT", "/admin/prompt", { prompt });
+  }
+  getOrg(orgId) {
+    return this.client.request("GET", `/orgs/${orgId}/prompt`);
+  }
+  setOrg(orgId, body) {
+    return this.client.request("PUT", `/orgs/${orgId}/prompt`, body);
+  }
+  getWorkspace(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/prompt`);
+  }
+  setWorkspace(workspaceId, prompt) {
+    return this.client.request("PUT", `/workspaces/${workspaceId}/prompt`, { prompt });
+  }
+};
+var AgentRolesAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  listPlatform() {
+    return this.client.request("GET", "/admin/agent-roles");
+  }
+  createPlatform(body) {
+    return this.client.request("POST", "/admin/agent-roles", body);
+  }
+  getPlatform(roleId) {
+    return this.client.request("GET", `/admin/agent-roles/${roleId}`);
+  }
+  updatePlatform(roleId, body) {
+    return this.client.request("PUT", `/admin/agent-roles/${roleId}`, body);
+  }
+  deletePlatform(roleId) {
+    return this.client.request("DELETE", `/admin/agent-roles/${roleId}`);
+  }
+  listOrg(orgId) {
+    return this.client.request("GET", `/orgs/${orgId}/agent-roles`);
+  }
+  createOrg(orgId, body) {
+    return this.client.request("POST", `/orgs/${orgId}/agent-roles`, body);
+  }
+  getOrg(orgId, roleId) {
+    return this.client.request("GET", `/orgs/${orgId}/agent-roles/${roleId}`);
+  }
+  updateOrg(orgId, roleId, body) {
+    return this.client.request("PUT", `/orgs/${orgId}/agent-roles/${roleId}`, body);
+  }
+  deleteOrg(orgId, roleId) {
+    return this.client.request("DELETE", `/orgs/${orgId}/agent-roles/${roleId}`);
+  }
+  getWorkspaceRole(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/agent-role`);
+  }
+  setWorkspaceRole(workspaceId, roleId) {
+    return this.client.request("PUT", `/workspaces/${workspaceId}/agent-role`, { roleId });
+  }
+  clearWorkspaceRole(workspaceId) {
+    return this.client.request("DELETE", `/workspaces/${workspaceId}/agent-role`);
+  }
+  getEffectiveWorkspaceRole(workspaceId) {
+    return this.client.request("GET", `/workspaces/${workspaceId}/effective-agent-role`);
+  }
+};
+
+// src/types.ts
+var SECRET_NAME_PATTERN = /^[a-z0-9._-]+$/;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthError,
+  ConflictError,
+  LLMSafeSpaces,
+  LLMSafeSpacesError,
+  NotFoundError,
+  RateLimitError,
+  SECRET_NAME_PATTERN,
+  TimeoutError
+});