@axonflow/openclaw 1.3.2 → 2.0.0

package/dist/index.js

@@ -30,16 +30,21 @@
  * Outbound messages ARE scanned via message_sending. See upstream issue
  * for async hook support.
  */
+import * as fs from "fs";
+import * as path from "path";
 import { AxonFlowClient } from "./axonflow-client.js";
+import { axonflowCacheDir } from "./cache-dir.js";
 import { resolveConfig } from "./config.js";
 import { createBeforeToolCallHandler } from "./governance.js";
 import { createAfterToolCallHandler } from "./audit.js";
 import { createMessageSendingHandler } from "./message-guard.js";
 import { createLlmInputHandler, createLlmOutputHandler } from "./llm-audit.js";
 import { sendTelemetryPing } from "./telemetry.js";
+import { bootstrapCommunitySaas } from "./community-saas-bootstrap.js";
 import { resetMetrics } from "./metrics.js";
+import { runPluginVersionCheck } from "./plugin-version-check.js";
 /** Plugin version — update before each release. */
-export const VERSION = "1.3.2";
+export const VERSION = "2.0.0";
 // Re-export for external consumers
 export { AxonFlowClient } from "./axonflow-client.js";
 export { resolveConfig, shouldGovernTool } from "./config.js";
@@ -54,13 +59,65 @@ export { getMetrics } from "./metrics.js";
  */
 export function registerAxonFlowGovernance(api) {
     const config = resolveConfig(api.pluginConfig);
-    const client = new AxonFlowClient(config);
     // Reset metrics on each registration (handles hot-reload)
     resetMetrics();
-    api.logger.info(`AxonFlow governance active: endpoint=${config.endpoint}, ` +
-        `highRiskTools=[${(config.highRiskTools ?? []).join(",")}]`);
+    // Mode-clarity canary — emitted on every plugin init so users always know
+    // which AxonFlow they're connected to. The Gate 4 mode-clarity test
+    // (tests/mode-clarity.test.ts) parses this exact line and asserts
+    // URL + mode match the resolved config.
+    api.logger.info(`[AxonFlow] Connected to AxonFlow at ${config.endpoint} (mode=${config.mode})`);
+    // In community-saas mode, register asynchronously against try.getaxonflow.com
+    // and override the client credentials with the bootstrapped values once
+    // they arrive. The startup health check + the first hook fire happen
+    // immediately; if the bootstrap is still pending when a hook fires, the
+    // existing AxonFlowClient handles the (transient) 401 and retries with
+    // the new credentials on the next call once they're loaded.
+    // Mutable holder so the bootstrap reassignment below is visible to every
+    // hook factory we register. Hook factories close over `clientRef` and read
+    // `clientRef.current.<method>(...)` so swapping in a freshly-credentialled
+    // client after the async bootstrap completes propagates immediately.
+    // Without this indirection the bootstrap would silently no-op for hooks
+    // (they'd keep using the empty-credential client they were registered with).
+    const clientRef = { current: new AxonFlowClient(config) };
+    if (config.mode === "community-saas") {
+        void bootstrapCommunitySaas({
+            endpoint: config.endpoint,
+            pluginVersion: VERSION,
+        }).then((result) => {
+            if (!result || result.source === "failed" || result.source === "rate-limited") {
+                const detail = result?.source === "rate-limited"
+                    ? "rate-limited (will retry)"
+                    : "failed (network error or non-2xx response)";
+                const msg = `AxonFlow Community SaaS registration ${detail}. Tool calls will fail-${config.onError === "allow" ? "open (allow through)" : "closed (block)"} until registration succeeds.`;
+                if (api.logger.warn) {
+                    api.logger.warn(msg);
+                }
+                else {
+                    api.logger.error(msg);
+                }
+                return;
+            }
+            const enriched = {
+                ...config,
+                endpoint: result.endpoint,
+                clientId: result.clientId,
+                clientSecret: result.clientSecret,
+            };
+            clientRef.current = new AxonFlowClient(enriched);
+            api.logger.info(`[AxonFlow] Community SaaS registration ${result.source === "fresh-registration" ? "complete" : "loaded from cache"} (tenant=${result.clientId.slice(0, 16)}...)`);
+        }).catch(() => {
+            // Silent — bootstrap should never block plugin registration. The
+            // governance handlers will fail-open or fail-closed per onError config.
+        });
+    }
+    // One-time positive disclosure on first Community-SaaS connection.
+    // Stamped at axonflowCacheDir()/openclaw-plugin-disclosure-shown so it
+    // fires exactly once per install (separate stamp from the heartbeat).
+    if (config.mode === "community-saas") {
+        showCommunitySaasDisclosureOnce(api);
+    }
     // Startup health check (fire-and-forget, non-blocking)
-    void client.healthCheck().then((healthy) => {
+    void clientRef.current.healthCheck().then((healthy) => {
         if (healthy) {
             api.logger.info(`AxonFlow connected: ${config.endpoint}`);
         }
@@ -76,30 +133,83 @@ export function registerAxonFlowGovernance(api) {
     }).catch(() => {
         // Silent — health check should never prevent plugin registration
     });
+    // Plugin/platform version compatibility check (fire-and-forget,
+    // platform 7.5.0+). Mirrors what the SDKs already do at startup —
+    // emits a one-time upgrade warning when the plugin's own version is
+    // below the floor the platform expects, stays silent otherwise.
+    // Failure modes (network error, older platform, malformed response)
+    // are swallowed by runPluginVersionCheck — never blocks startup.
+    void runPluginVersionCheck(clientRef.current, VERSION, api.logger);
     // Hook 1: Input governance (before tool execution)
-    const beforeToolCall = createBeforeToolCallHandler(client, config);
+    const beforeToolCall = createBeforeToolCallHandler(clientRef, config);
     api.on("before_tool_call", beforeToolCall, { priority: 10 });
     // Hook 2: Audit logging (after tool execution)
-    const afterToolCall = createAfterToolCallHandler(client, config);
+    const afterToolCall = createAfterToolCallHandler(clientRef, config);
     api.on("after_tool_call", afterToolCall, { priority: 90 });
     // Hook 3: Outbound message governance (before message reaches user)
-    const messageSending = createMessageSendingHandler(client, config);
+    const messageSending = createMessageSendingHandler(clientRef, config);
     api.on("message_sending", messageSending, { priority: 10 });
     // Hook 4-5: LLM call audit (observe-only, cannot block/modify)
     const llmCallState = new Map();
-    const llmInput = createLlmInputHandler(client, config, llmCallState);
+    const llmInput = createLlmInputHandler(clientRef, config, llmCallState);
     api.on("llm_input", llmInput, { priority: 90 });
-    const llmOutput = createLlmOutputHandler(client, config, llmCallState);
+    const llmOutput = createLlmOutputHandler(clientRef, config, llmCallState);
     api.on("llm_output", llmOutput, { priority: 90 });
-    // Telemetry (fire-and-forget, respects DO_NOT_TRACK=1)
-    sendTelemetryPing({
+    // Telemetry — 7-day heartbeat (fire-and-forget; opt out with
+    // AXONFLOW_TELEMETRY=off). The promise is intentionally not awaited.
+    void sendTelemetryPing({
         endpoint: config.endpoint,
         pluginVersion: VERSION,
         hookCount: 5,
         highRiskToolCount: (config.highRiskTools ?? []).length,
         onError: config.onError ?? "block",
+        mode: config.mode,
     });
 }
+/**
+ * One-time positive disclosure when first connecting to Community SaaS.
+ * Stamped at axonflowCacheDir()/openclaw-plugin-disclosure-shown so it
+ * fires exactly once per install. Failures (no writable cache dir, etc.)
+ * fall through silently — the disclosure is best-effort and never blocks
+ * plugin registration.
+ */
+function showCommunitySaasDisclosureOnce(api) {
+    const cacheDir = axonflowCacheDir();
+    if (!cacheDir)
+        return;
+    const stamp = path.join(cacheDir, "openclaw-plugin-disclosure-shown");
+    try {
+        fs.statSync(stamp);
+        return; // already shown
+    }
+    catch {
+        // not stamped yet — proceed
+    }
+    try {
+        fs.mkdirSync(cacheDir, { recursive: true, mode: 0o700 });
+        if (process.platform !== "win32") {
+            try {
+                fs.chmodSync(cacheDir, 0o700);
+            }
+            catch { /* best effort */ }
+        }
+    }
+    catch {
+        return;
+    }
+    api.logger.info("[AxonFlow] Connected to AxonFlow Community SaaS at https://try.getaxonflow.com.\n" +
+        "Intended for basic testing and evaluation. For real workflows, real systems,\n" +
+        "or sensitive data, we recommend self-hosting AxonFlow from day one:\n" +
+        "  https://docs.getaxonflow.com/quickstart\n" +
+        "Anonymous telemetry: weekly heartbeat. Opt out: AXONFLOW_TELEMETRY=off");
+    try {
+        fs.writeFileSync(stamp, "", { mode: 0o600 });
+    }
+    catch {
+        // best effort; if we can't stamp, the message will fire again
+        // next time. Acceptable trade-off vs not surfacing it.
+    }
+}
 /**
  * Default export for OpenClaw plugin loader.
  *
@@ -113,4 +223,5 @@ export default {
     description: "Policy enforcement for tool inputs, PII scanning on outbound messages, and audit trails for OpenClaw",
     register: registerAxonFlowGovernance,
 };
+// CI re-trigger: 1777491400
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,mDAAmD;AACnD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,mCAAmC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,UAAU,EAA0B,MAAM,cAAc,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAQ1C;IACC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAE1C,0DAA0D;IAC1D,YAAY,EAAE,CAAC;IAEf,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,wCAAwC,MAAM,CAAC,QAAQ,IAAI;QACzD,kBAAkB,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC9D,CAAC;IAEF,uDAAuD;IACvD,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,iCAAiC,MAAM,CAAC,QAAQ,0CAA0C,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;YACzL,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,iEAAiE;IACnE,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnE,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAE7D,+CAA+C;IAC/C,MAAM,aAAa,GAAG,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjE,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAE3D,oEAAoE;IACpE,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnE,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5D,+DAA+D;IAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgF,CAAC;IAC7G,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACrE,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACvE,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,uDAAuD;IACvD,iBAAiB,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM;QACtD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;KACnC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,eAAe;IACb,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,sGAAsG;IACnH,QAAQ,EAAE,0BAA0B;CACrC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,mDAAmD;AACnD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,mCAAmC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,UAAU,EAA0B,MAAM,cAAc,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAQ1C;IACC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAE/C,0DAA0D;IAC1D,YAAY,EAAE,CAAC;IAEf,0EAA0E;IAC1E,oEAAoE;IACpE,kEAAkE;IAClE,wCAAwC;IACxC,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,uCAAuC,MAAM,CAAC,QAAQ,UAAU,MAAM,CAAC,IAAI,GAAG,CAC/E,CAAC;IAEF,8EAA8E;IAC9E,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,4DAA4D;IAC5D,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,SAAS,GAAc,EAAE,OAAO,EAAE,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IACrE,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,KAAK,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9E,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,cAAc;oBAC9C,CAAC,CAAC,2BAA2B;oBAC7B,CAAC,CAAC,4CAA4C,CAAC;gBACjD,MAAM,GAAG,GAAG,wCAAwC,MAAM,0BAA0B,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,+BAA+B,CAAC;gBAC1L,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG;gBACf,GAAG,MAAM;gBACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;YACF,SAAS,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,0CAA0C,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,YAAY,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAClK,CAAC;QACJ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,iEAAiE;YACjE,wEAAwE;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,uDAAuD;IACvD,KAAK,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,iCAAiC,MAAM,CAAC,QAAQ,0CAA0C,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;YACzL,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,iEAAiE;IACnE,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,kEAAkE;IAClE,oEAAoE;IACpE,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,KAAK,qBAAqB,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEnE,mDAAmD;IACnD,MAAM,cAAc,GAAG,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAE7D,+CAA+C;IAC/C,MAAM,aAAa,GAAG,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpE,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAE3D,oEAAoE;IACpE,MAAM,cAAc,GAAG,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5D,+DAA+D;IAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgF,CAAC;IAC7G,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,6DAA6D;IAC7D,qEAAqE;IACrE,KAAK,iBAAiB,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM;QACtD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;QAClC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,+BAA+B,CAAC,GAExC;IACC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,gBAAgB;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,mFAAmF;QACnF,gFAAgF;QAChF,uEAAuE;QACvE,6CAA6C;QAC7C,wEAAwE,CACzE,CAAC;IACF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,uDAAuD;IACzD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,eAAe;IACb,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,sGAAsG;IACnH,QAAQ,EAAE,0BAA0B;CACrC,CAAC;AACF,4BAA4B"}

package/dist/llm-audit.d.ts

@@ -6,7 +6,7 @@
  * observe-only (cannot block or modify), so they provide audit
  * evidence, not governance.
  */
-import type { AxonFlowClient } from "./axonflow-client.js";
+import type { ClientRef } from "./client-ref.js";
 import type { AxonFlowPluginConfig } from "./config.js";
 /** Shared state for correlating llm_input with llm_output. */
 interface LLMCallState {
@@ -21,7 +21,7 @@ interface LLMCallState {
  * Records the prompt, model, and provider at the start of each LLM call.
  * Stores state by runId for correlation with the llm_output handler.
  */
-export declare function createLlmInputHandler(_client: AxonFlowClient, _config: AxonFlowPluginConfig, callState: Map<string, LLMCallState>): (event: {
+export declare function createLlmInputHandler(_clientRef: ClientRef, _config: AxonFlowPluginConfig, callState: Map<string, LLMCallState>): (event: {
     runId: string;
     sessionId: string;
     provider: string;
@@ -38,7 +38,7 @@ export declare function createLlmInputHandler(_client: AxonFlowClient, _config:
  * audit entry to AxonFlow (provider, model, prompt summary, response
  * summary, token usage, latency).
  */
-export declare function createLlmOutputHandler(client: AxonFlowClient, _config: AxonFlowPluginConfig, callState: Map<string, LLMCallState>): (event: {
+export declare function createLlmOutputHandler(clientRef: ClientRef, _config: AxonFlowPluginConfig, callState: Map<string, LLMCallState>): (event: {
     runId: string;
     sessionId: string;
     provider: string;

package/dist/llm-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llm-audit.d.ts","sourceRoot":"","sources":["../src/llm-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGxD,8DAA8D;AAC9D,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAE5B,OAAO;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAG,IAAI,CAmBT;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAEtB,OAAO;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,KAAG,OAAO,CAAC,IAAI,CAAC,CAyBlB"}
+{"version":3,"file":"llm-audit.d.ts","sourceRoot":"","sources":["../src/llm-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGxD,8DAA8D;AAC9D,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,SAAS,EACrB,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAE5B,OAAO;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAG,IAAI,CAmBT;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAEtB,OAAO;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,KAAG,OAAO,CAAC,IAAI,CAAC,CAyBlB"}

package/dist/llm-audit.js

@@ -13,7 +13,7 @@ import { recordAuditEventSent } from "./metrics.js";
  * Records the prompt, model, and provider at the start of each LLM call.
  * Stores state by runId for correlation with the llm_output handler.
  */
-export function createLlmInputHandler(_client, _config, callState) {
+export function createLlmInputHandler(_clientRef, _config, callState) {
     return (event) => {
         callState.set(event.runId, {
             provider: event.provider,
@@ -40,14 +40,14 @@ export function createLlmInputHandler(_client, _config, callState) {
  * audit entry to AxonFlow (provider, model, prompt summary, response
  * summary, token usage, latency).
  */
-export function createLlmOutputHandler(client, _config, callState) {
+export function createLlmOutputHandler(clientRef, _config, callState) {
     return async (event) => {
         const inputState = callState.get(event.runId);
         callState.delete(event.runId);
         const responseSummary = event.assistantTexts.join(" ").slice(0, 200);
         const latencyMs = inputState ? Date.now() - inputState.startMs : 0;
         try {
-            await client.auditLLMCall(inputState?.provider ?? event.provider, inputState?.model ?? event.model, inputState?.prompt ?? "", responseSummary, {
+            await clientRef.current.auditLLMCall(inputState?.provider ?? event.provider, inputState?.model ?? event.model, inputState?.prompt ?? "", responseSummary, {
                 prompt_tokens: event.usage?.input ?? 0,
                 completion_tokens: event.usage?.output ?? 0,
                 total_tokens: event.usage?.total ?? 0,

package/dist/llm-audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"llm-audit.js","sourceRoot":"","sources":["../src/llm-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAUpD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAuB,EACvB,OAA6B,EAC7B,SAAoC;IAEpC,OAAO,CAAC,KASP,EAAQ,EAAE;QACT,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;SACpB,CAAC,CAAC;QAEH,gEAAgE;QAChE,oEAAoE;QACpE,4CAA4C;QAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;YACnC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;gBACnC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAsB,EACtB,OAA6B,EAC7B,SAAoC;IAEpC,OAAO,KAAK,EAAE,KAYb,EAAiB,EAAE;QAClB,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CACvB,UAAU,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,EACtC,UAAU,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,EAChC,UAAU,EAAE,MAAM,IAAI,EAAE,EACxB,eAAe,EACf;gBACE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC;gBACtC,iBAAiB,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;gBAC3C,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC;aACtC,EACD,SAAS,CACV,CAAC;YACF,oBAAoB,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"llm-audit.js","sourceRoot":"","sources":["../src/llm-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAUpD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAqB,EACrB,OAA6B,EAC7B,SAAoC;IAEpC,OAAO,CAAC,KASP,EAAQ,EAAE;QACT,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;SACpB,CAAC,CAAC;QAEH,gEAAgE;QAChE,oEAAoE;QACpE,4CAA4C;QAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;YACnC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;gBACnC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAoB,EACpB,OAA6B,EAC7B,SAAoC;IAEpC,OAAO,KAAK,EAAE,KAYb,EAAiB,EAAE;QAClB,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,CAClC,UAAU,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,EACtC,UAAU,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,EAChC,UAAU,EAAE,MAAM,IAAI,EAAE,EACxB,eAAe,EACf;gBACE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC;gBACtC,iBAAiB,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;gBAC3C,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC;aACtC,EACD,SAAS,CACV,CAAC;YACF,oBAAoB,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/message-guard.d.ts

@@ -5,7 +5,7 @@
  * Discord, Slack, WhatsApp). Can cancel messages containing PII/secrets
  * or redact sensitive content.
  */
-import type { AxonFlowClient } from "./axonflow-client.js";
+import type { ClientRef } from "./client-ref.js";
 import type { AxonFlowPluginConfig } from "./config.js";
 /**
  * Create the message_sending hook handler.
@@ -14,7 +14,7 @@ import type { AxonFlowPluginConfig } from "./config.js";
  * Can cancel (prevent sending) or redact (modify content) before delivery.
  * Respects config.onError for fail-open/fail-closed behavior.
  */
-export declare function createMessageSendingHandler(client: AxonFlowClient, config: AxonFlowPluginConfig): (event: {
+export declare function createMessageSendingHandler(clientRef: ClientRef, config: AxonFlowPluginConfig): (event: {
     to: string;
     content: string;
     metadata?: Record<string, unknown>;

package/dist/message-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-guard.d.ts","sourceRoot":"","sources":["../src/message-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAQxD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,oBAAoB,IAEd,OAAO;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,KAAG,OAAO,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAAC,CAyChE"}
+{"version":3,"file":"message-guard.d.ts","sourceRoot":"","sources":["../src/message-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAQxD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,oBAAoB,IAEd,OAAO;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,KAAG,OAAO,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAAC,CAyChE"}

package/dist/message-guard.js

@@ -13,7 +13,7 @@ import { recordMessageScanned, recordMessageCancelled, recordMessageRedacted, re
  * Can cancel (prevent sending) or redact (modify content) before delivery.
  * Respects config.onError for fail-open/fail-closed behavior.
  */
-export function createMessageSendingHandler(client, config) {
+export function createMessageSendingHandler(clientRef, config) {
     return async (event) => {
         if (!event.content) {
             return undefined;
@@ -21,7 +21,7 @@ export function createMessageSendingHandler(client, config) {
         recordMessageScanned();
         let check;
         try {
-            check = await client.mcpCheckOutput("openclaw.message_sending", event.content);
+            check = await clientRef.current.mcpCheckOutput("openclaw.message_sending", event.content);
         }
         catch {
             recordGovernanceError();

package/dist/message-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-guard.js","sourceRoot":"","sources":["../src/message-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAsB,EACtB,MAA4B;IAE5B,OAAO,KAAK,EAAE,KAIb,EAA+D,EAAE;QAChE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,oBAAoB,EAAE,CAAC;QAEvB,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CACjC,0BAA0B,EAC1B,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAC,CAAC,8CAA8C;YAClE,CAAC;YACD,sBAAsB,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,sBAAsB,EAAE,CAAC;YACzB,OAAO;gBACL,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;YAChC,qBAAqB,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EACL,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;oBACrC,CAAC,CAAC,KAAK,CAAC,aAAa;oBACrB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"message-guard.js","sourceRoot":"","sources":["../src/message-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAoB,EACpB,MAA4B;IAE5B,OAAO,KAAK,EAAE,KAIb,EAA+D,EAAE;QAChE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,oBAAoB,EAAE,CAAC;QAEvB,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAC5C,0BAA0B,EAC1B,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAC,CAAC,8CAA8C;YAClE,CAAC;YACD,sBAAsB,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,sBAAsB,EAAE,CAAC;YACzB,OAAO;gBACL,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;YAChC,qBAAqB,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EACL,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;oBACrC,CAAC,CAAC,KAAK,CAAC,aAAa;oBACrB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/plugin-version-check.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Plugin/platform version compatibility check.
+ *
+ * Mirrors the SDK pattern: the plugin queries the platform's /health,
+ * reads `plugin_compatibility.min_plugin_version["openclaw"]`, and
+ * logs a one-time upgrade warning when its own runtime version is
+ * below the floor the platform expects.
+ *
+ * The check is fire-and-forget — if the platform doesn't advertise
+ * the field (older platforms) or the request fails, the plugin keeps
+ * working silently. The warning is informational; nothing in the
+ * plugin's hot path depends on the result.
+ *
+ * Plugin id `"openclaw"` matches the canonical id in
+ * `axonflow-enterprise/platform/agent/integration_activation.go` and
+ * `getPluginCompatibility()` in capabilities.go.
+ */
+import type { AxonFlowClient } from "./axonflow-client.js";
+export declare const PLUGIN_ID = "openclaw";
+export interface VersionCheckLogger {
+    warn?: (msg: string) => void;
+    info?: (msg: string) => void;
+}
+/**
+ * Compare two semver-ish version strings.
+ *
+ * Returns -1 if `a < b`, 0 if equal, 1 if `a > b`. Treats invalid /
+ * pre-release / build-metadata segments by stripping them and comparing
+ * the major.minor.patch numeric prefix only — adequate for the
+ * downgrade-warning gate, which only cares about ordering of the
+ * canonical numeric tuple.
+ */
+export declare function compareVersions(a: string, b: string): number;
+/**
+ * Run the plugin/platform version compatibility check and emit a
+ * single log line on the result.
+ *
+ * - If the platform doesn't advertise plugin_compatibility (older
+ *   platform or unparseable response), no log line is emitted —
+ *   absence of signal is not a regression.
+ * - If the plugin runtime version is below `min_plugin_version`,
+ *   logger.warn is called with an upgrade hint.
+ * - If the plugin is at or above the floor but below the recommended
+ *   version, logger.info is called (informational).
+ *
+ * Exceptions are swallowed — the check must not prevent plugin
+ * startup or affect the hook hot path.
+ */
+export declare function runPluginVersionCheck(client: Pick<AxonFlowClient, "getPluginCompatibility">, pluginVersion: string, logger: VersionCheckLogger): Promise<void>;
+//# sourceMappingURL=plugin-version-check.d.ts.map

package/dist/plugin-version-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-version-check.d.ts","sourceRoot":"","sources":["../src/plugin-version-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,SAAS,aAAa,CAAC;AAEpC,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAa5D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,EACtD,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/plugin-version-check.js

@@ -0,0 +1,89 @@
+/**
+ * Plugin/platform version compatibility check.
+ *
+ * Mirrors the SDK pattern: the plugin queries the platform's /health,
+ * reads `plugin_compatibility.min_plugin_version["openclaw"]`, and
+ * logs a one-time upgrade warning when its own runtime version is
+ * below the floor the platform expects.
+ *
+ * The check is fire-and-forget — if the platform doesn't advertise
+ * the field (older platforms) or the request fails, the plugin keeps
+ * working silently. The warning is informational; nothing in the
+ * plugin's hot path depends on the result.
+ *
+ * Plugin id `"openclaw"` matches the canonical id in
+ * `axonflow-enterprise/platform/agent/integration_activation.go` and
+ * `getPluginCompatibility()` in capabilities.go.
+ */
+export const PLUGIN_ID = "openclaw";
+/**
+ * Compare two semver-ish version strings.
+ *
+ * Returns -1 if `a < b`, 0 if equal, 1 if `a > b`. Treats invalid /
+ * pre-release / build-metadata segments by stripping them and comparing
+ * the major.minor.patch numeric prefix only — adequate for the
+ * downgrade-warning gate, which only cares about ordering of the
+ * canonical numeric tuple.
+ */
+export function compareVersions(a, b) {
+    const parse = (v) => v.replace(/^v/, "").split(/[-+]/, 1)[0].split(".").map((p) => Number(p) | 0);
+    const pa = parse(a);
+    const pb = parse(b);
+    const len = Math.max(pa.length, pb.length);
+    for (let i = 0; i < len; i++) {
+        const av = pa[i] ?? 0;
+        const bv = pb[i] ?? 0;
+        if (av < bv)
+            return -1;
+        if (av > bv)
+            return 1;
+    }
+    return 0;
+}
+/**
+ * Run the plugin/platform version compatibility check and emit a
+ * single log line on the result.
+ *
+ * - If the platform doesn't advertise plugin_compatibility (older
+ *   platform or unparseable response), no log line is emitted —
+ *   absence of signal is not a regression.
+ * - If the plugin runtime version is below `min_plugin_version`,
+ *   logger.warn is called with an upgrade hint.
+ * - If the plugin is at or above the floor but below the recommended
+ *   version, logger.info is called (informational).
+ *
+ * Exceptions are swallowed — the check must not prevent plugin
+ * startup or affect the hook hot path.
+ */
+export async function runPluginVersionCheck(client, pluginVersion, logger) {
+    let compat;
+    try {
+        compat = await client.getPluginCompatibility();
+    }
+    catch {
+        return;
+    }
+    if (!compat)
+        return;
+    const min = compat.minPluginVersion[PLUGIN_ID];
+    const recommended = compat.recommendedPluginVersion[PLUGIN_ID];
+    if (min && compareVersions(pluginVersion, min) < 0) {
+        const msg = `AxonFlow @axonflow/openclaw v${pluginVersion} is below the platform's ` +
+            `minimum supported version (v${min}). Upgrade with ` +
+            `\`npm install @axonflow/openclaw@latest\` — older releases may mis-handle ` +
+            `newer platform contract fields.`;
+        if (logger.warn) {
+            logger.warn(msg);
+        }
+        return;
+    }
+    if (recommended && compareVersions(pluginVersion, recommended) < 0) {
+        const msg = `AxonFlow @axonflow/openclaw v${pluginVersion} is below the recommended ` +
+            `version (v${recommended}). Plugin will keep working; upgrade for the ` +
+            `full feature set.`;
+        if (logger.info) {
+            logger.info(msg);
+        }
+    }
+}
+//# sourceMappingURL=plugin-version-check.js.map

package/dist/plugin-version-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-version-check.js","sourceRoot":"","sources":["../src/plugin-version-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC;AAOpC;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAC1B,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAsD,EACtD,aAAqB,EACrB,MAA0B;IAE1B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAE/D,IAAI,GAAG,IAAI,eAAe,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,GACP,gCAAgC,aAAa,2BAA2B;YACxE,+BAA+B,GAAG,kBAAkB;YACpD,4EAA4E;YAC5E,iCAAiC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,WAAW,IAAI,eAAe,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,GAAG,GACP,gCAAgC,aAAa,4BAA4B;YACzE,aAAa,WAAW,+CAA+C;YACvE,mBAAmB,CAAC;QACtB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/telemetry-config.d.ts

@@ -7,9 +7,11 @@
  */
 export interface TelemetryConfig {
     /**
-     * True if the user has opted out via AXONFLOW_TELEMETRY=off (canonical) or
-     * DO_NOT_TRACK=1 (deprecated — scheduled for removal after 2026-05-05 in the
-     * next major release).
+     * True if the user has opted out via AXONFLOW_TELEMETRY=off.
+     *
+     * DO_NOT_TRACK is intentionally not honored: it is commonly inherited from
+     * host tools and developer environments, which makes it an unreliable
+     * expression of user intent for AxonFlow telemetry.
      */
     optedOut: boolean;
     /** Endpoint that receives the anonymous ping. Configurable for self-hosted checkpoint deployments. */

package/dist/telemetry-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry-config.d.ts","sourceRoot":"","sources":["../src/telemetry-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB,sGAAsG;IACtG,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,mBAAmB,IAAI,eAAe,CA0BrD"}
+{"version":3,"file":"telemetry-config.d.ts","sourceRoot":"","sources":["../src/telemetry-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB,sGAAsG;IACtG,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,mBAAmB,IAAI,eAAe,CAYrD"}

package/dist/telemetry-config.js

@@ -11,22 +11,8 @@ export function loadTelemetryConfig() {
         return { optedOut: false, checkpointUrl: DEFAULT_CHECKPOINT_URL };
     }
     const env = process.env;
-    const dntActive = env.DO_NOT_TRACK?.trim() === "1";
-    const axonflowTelemetryOff = env.AXONFLOW_TELEMETRY?.trim().toLowerCase() === "off";
-    const optedOut = dntActive || axonflowTelemetryOff;
-    // Deprecation warning — fires only when DO_NOT_TRACK is the active control
-    // and AXONFLOW_TELEMETRY=off is NOT set. If both are set, the operator has
-    // already migrated to the canonical switch; no warning. Guarded to run at
-    // most once per plugin process via a module-level sentinel.
-    if (dntActive && !axonflowTelemetryOff && !doNotTrackDeprecationWarningShown) {
-        doNotTrackDeprecationWarningShown = true;
-        // eslint-disable-next-line no-console
-        console.warn("[AxonFlow] DO_NOT_TRACK=1 is deprecated as an AxonFlow telemetry opt-out and will be removed after 2026-05-05 in the next major release. Set AXONFLOW_TELEMETRY=off to opt out going forward. See https://docs.getaxonflow.com/docs/telemetry for details.");
-    }
+    const optedOut = env.AXONFLOW_TELEMETRY?.trim().toLowerCase() === "off";
     const checkpointUrl = env.AXONFLOW_CHECKPOINT_URL || DEFAULT_CHECKPOINT_URL;
     return { optedOut, checkpointUrl };
 }
-// Module-level sentinel keeps the deprecation warning to one emission per
-// process even if loadTelemetryConfig is called from multiple code paths.
-let doNotTrackDeprecationWarningShown = false;
 //# sourceMappingURL=telemetry-config.js.map

package/dist/telemetry-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry-config.js","sourceRoot":"","sources":["../src/telemetry-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,sBAAsB,GAAG,4CAA4C,CAAC;AAa5E,MAAM,UAAU,mBAAmB;IACjC,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC;IACnD,MAAM,oBAAoB,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACpF,MAAM,QAAQ,GAAG,SAAS,IAAI,oBAAoB,CAAC;IAEnD,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,SAAS,IAAI,CAAC,oBAAoB,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAC7E,iCAAiC,GAAG,IAAI,CAAC;QACzC,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,4PAA4P,CAC7P,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,uBAAuB,IAAI,sBAAsB,CAAC;IAE5E,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,IAAI,iCAAiC,GAAG,KAAK,CAAC"}
+{"version":3,"file":"telemetry-config.js","sourceRoot":"","sources":["../src/telemetry-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,sBAAsB,GAAG,4CAA4C,CAAC;AAe5E,MAAM,UAAU,mBAAmB;IACjC,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IAExE,MAAM,aAAa,GAAG,GAAG,CAAC,uBAAuB,IAAI,sBAAsB,CAAC;IAE5E,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC"}

package/dist/telemetry.d.ts

@@ -1,17 +1,25 @@
 /**
- * Anonymous usage telemetry for the OpenClaw plugin.
+ * Anonymous usage telemetry — 7-day heartbeat (TypeScript).
  *
- * Sends a single fire-and-forget ping on plugin initialization to
- * checkpoint.getaxonflow.com. Collects SDK version, platform info,
- * and OpenClaw version. No PII, no tool arguments, no policy data.
+ * Sends an anonymous POST to checkpoint.getaxonflow.com on plugin
+ * initialization, at most once every 7 days per machine.
  *
- * Opt out: AXONFLOW_TELEMETRY=off (canonical)
- * Also honored for backward compatibility: DO_NOT_TRACK=1 (deprecated — removed
- * after 2026-05-05 in the next major release; a one-time warning emits when
- * it's the active opt-out so operators can migrate).
+ * Design rules (per feedback_telemetry_heartbeat_design_rules.md):
+ *   1. Stamp-on-delivery, not stamp-on-attempt. Stamp file mtime
+ *      advances ONLY after the HTTP POST returns 2xx. A transient
+ *      network failure does not silence telemetry for 7 days.
+ *   2. In-flight gate via a per-process Promise. Concurrent plugin
+ *      loads do not race to send duplicate pings.
+ *   3. Opt-out check FIRST, before any rate-limit or filesystem ops.
+ *      AXONFLOW_TELEMETRY=off is re-evaluated every call.
+ *   4. mtime as the freshness source; stamp body holds instance_id.
+ *   5. Atomic stamp write: tmp + rename.
+ *   6. Persistent instance_id across heartbeats.
+ *   7. Defensive against future-dated stamps (clock skew → treat absent).
+ *   8. Cross-platform cache dir resolution (cache-dir.ts).
  *
  * Configuration resolution (opt-out flags and checkpoint URL) lives in
- * telemetry-config.ts so this file only handles the network-sending side.
+ * telemetry-config.ts so this module only handles the network-sending side.
  */
 export interface TelemetryPayload {
     sdk: string;
@@ -24,17 +32,29 @@ export interface TelemetryPayload {
     features: string[];
     instance_id: string;
 }
-/**
- * Send an anonymous telemetry ping on plugin initialization.
- *
- * Fire-and-forget: errors are silently swallowed, 3-second timeout
- * prevents blocking. Never affects plugin behavior.
- */
-export declare function sendTelemetryPing(options: {
+interface SendOptions {
     endpoint: string;
     pluginVersion: string;
     hookCount: number;
     highRiskToolCount: number;
     onError: string;
-}): void;
+    /** "community-saas" | "self-hosted" — set by the caller after resolveConfig. */
+    mode: string;
+    now?: () => Date;
+}
+/**
+ * Send an anonymous telemetry heartbeat. Concurrent calls are de-duplicated
+ * via a per-process in-flight gate; the second concurrent caller awaits the
+ * first's promise rather than firing a duplicate.
+ *
+ * Returns a promise that resolves when the heartbeat completes (success,
+ * skip, or failure). Production callers should treat as fire-and-forget;
+ * tests can await for assertions.
+ */
+export declare function sendTelemetryPing(options: SendOptions): Promise<void>;
+/**
+ * Test-only: clear the in-flight gate between tests.
+ */
+export declare function _resetTelemetryInFlightForTests(): void;
+export {};
 //# sourceMappingURL=telemetry.d.ts.map

package/dist/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwBH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AA2BD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CA4DP"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAWH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAqCD,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQrE;AAgID;;GAEG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD"}