@axonflow/sdk 2.0.0 → 2.2.0

package/dist/cjs/client.js

@@ -12,15 +12,19 @@ class AxonFlow {
     constructor(config) {
         this.interceptors = [];
         this.sessionCookie = null;
+        // Configuration validation
+        if (config.clientSecret && !config.clientId) {
+            throw new errors_1.ConfigurationError('clientSecret requires clientId to be set. ' +
+                'Provide both clientId and clientSecret for OAuth2-style authentication.');
+        }
         // Set defaults first to determine endpoint
         const endpoint = config.endpoint || 'https://staging-eu.getaxonflow.com';
-        // Credentials are optional for community/self-hosted deployments
-        // Enterprise features (Gateway Mode, Policy CRUD) require credentials
-        const hasCredentials = !!(config.licenseKey || config.apiKey);
+        // Credentials check: OAuth2-style (clientId/clientSecret)
+        const hasCredentials = !!(config.clientId && config.clientSecret);
         // Set configuration
         this.config = {
-            apiKey: config.apiKey,
-            licenseKey: config.licenseKey,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
             endpoint,
             mode: config.mode || (hasCredentials ? 'production' : 'sandbox'),
             tenant: config.tenant || 'default',
@@ -40,17 +44,33 @@ class AxonFlow {
         // Initialize interceptors
         this.interceptors = [new openai_1.OpenAIInterceptor(), new anthropic_1.AnthropicInterceptor()];
         if (this.config.debug) {
+            // Determine auth method for logging
+            const authMethod = hasCredentials ? 'client-credentials' : 'community (no auth)';
             (0, helpers_1.debugLog)('AxonFlow initialized', {
                 mode: this.config.mode,
                 endpoint: this.config.endpoint,
-                authMethod: hasCredentials
-                    ? this.config.licenseKey
-                        ? 'license-key'
-                        : 'api-key'
-                    : 'community (no auth)',
+                authMethod,
             });
         }
     }
+    /**
+     * Get authentication headers based on configured credentials.
+     *
+     * Uses OAuth2-style Basic auth: Authorization: Basic base64(clientId:clientSecret)
+     * Also adds X-Tenant-ID header from clientId for tenant context.
+     *
+     * @returns Headers object with authentication headers
+     */
+    getAuthHeaders() {
+        const headers = {};
+        // OAuth2-style client credentials
+        if (this.config.clientId && this.config.clientSecret) {
+            const credentials = Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64');
+            headers['Authorization'] = `Basic ${credentials}`;
+            headers['X-Tenant-ID'] = this.config.clientId;
+        }
+        return headers;
+    }
     /**
      * Main method to protect AI calls with governance
      * @param aiCall The AI call to protect
@@ -169,8 +189,8 @@ class AxonFlow {
         // Transform SDK request to Agent API format
         const agentRequest = {
             query: request.aiRequest.prompt,
-            user_token: this.config.apiKey || '',
-            client_id: this.config.tenant,
+            user_token: '',
+            client_id: this.config.clientId || this.config.tenant,
             request_type: 'llm_chat',
             context: {
                 provider: request.aiRequest.provider,
@@ -182,12 +202,8 @@ class AxonFlow {
         };
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         const response = await fetch(url, {
             method: 'POST',
             headers,
@@ -250,9 +266,10 @@ class AxonFlow {
     /**
      * Create a sandbox client for testing
      */
-    static sandbox(apiKey = 'demo-key') {
+    static sandbox(clientId = 'demo-client', clientSecret = 'demo-secret') {
         return new AxonFlow({
-            apiKey,
+            clientId,
+            clientSecret,
             mode: 'sandbox',
             endpoint: 'https://staging-eu.getaxonflow.com',
             debug: true,
@@ -389,9 +406,11 @@ class AxonFlow {
      * ```
      */
     async executeQuery(options) {
+        // Default to "anonymous" if userToken is empty/undefined (community mode)
+        const effectiveUserToken = options.userToken || 'anonymous';
         const agentRequest = {
             query: options.query,
-            user_token: options.userToken,
+            user_token: effectiveUserToken,
             client_id: this.config.tenant,
             request_type: options.requestType,
             context: options.context || {},
@@ -399,15 +418,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Proxy Mode: executeQuery', {
                 requestType: options.requestType,
@@ -532,8 +544,8 @@ class AxonFlow {
     async queryConnector(connectorName, query, params) {
         const agentRequest = {
             query,
-            user_token: this.config.apiKey || '',
-            client_id: this.config.tenant,
+            user_token: '',
+            client_id: this.config.clientId || this.config.tenant,
             request_type: 'mcp-query',
             context: {
                 connector: connectorName,
@@ -543,10 +555,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         const response = await fetch(url, {
             method: 'POST',
             headers,
@@ -555,7 +565,7 @@ class AxonFlow {
         });
         if (!response.ok) {
             const errorText = await response.text();
-            throw new Error(`Connector query failed: ${response.status} ${response.statusText} - ${errorText}`);
+            throw new errors_1.ConnectorError(`Connector query failed: ${response.status} ${response.statusText} - ${errorText}`, connectorName, 'query');
         }
         const agentResponse = await response.json();
         if (this.config.debug) {
@@ -585,10 +595,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         // Use mapTimeout for MAP operations (default 2 minutes)
         const response = await fetch(url, {
             method: 'POST',
@@ -598,11 +606,11 @@ class AxonFlow {
         });
         if (!response.ok) {
             const errorText = await response.text();
-            throw new Error(`Plan generation failed: ${response.status} ${response.statusText} - ${errorText}`);
+            throw new errors_1.PlanExecutionError(`Plan generation failed: ${response.status} ${response.statusText} - ${errorText}`, undefined, 'generation');
         }
         const agentResponse = await response.json();
         if (!agentResponse.success) {
-            throw new Error(`Plan generation failed: ${agentResponse.error}`);
+            throw new errors_1.PlanExecutionError(`Plan generation failed: ${agentResponse.error}`, undefined, 'generation');
         }
         // plan_id can be at top level or inside data
         const planId = agentResponse.plan_id || agentResponse.data?.plan_id;
@@ -634,10 +642,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         // Use mapTimeout for MAP operations (default 2 minutes)
         const response = await fetch(url, {
             method: 'POST',
@@ -647,7 +653,7 @@ class AxonFlow {
         });
         if (!response.ok) {
             const errorText = await response.text();
-            throw new Error(`Plan execution failed: ${response.status} ${response.statusText} - ${errorText}`);
+            throw new errors_1.PlanExecutionError(`Plan execution failed: ${response.status} ${response.statusText} - ${errorText}`, planId, 'execution');
         }
         const agentResponse = await response.json();
         if (this.config.debug) {
@@ -666,7 +672,7 @@ class AxonFlow {
      * Get the status of a running or completed plan
      */
     async getPlanStatus(planId) {
-        const url = `${this.config.endpoint}/api/plans/${planId}`;
+        const url = `${this.config.endpoint}/api/v1/plan/${planId}`;
         const response = await fetch(url, {
             method: 'GET',
             signal: AbortSignal.timeout(this.config.timeout),
@@ -749,15 +755,8 @@ class AxonFlow {
         };
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Gateway Mode: Pre-check', { query: options.query.substring(0, 50) });
         }
@@ -848,15 +847,8 @@ class AxonFlow {
         };
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Gateway Mode: Audit', {
                 contextId: options.contextId,
@@ -1038,23 +1030,19 @@ class AxonFlow {
     // Policy CRUD Methods - Static Policies
     // ============================================================================
     /**
-     * Build authentication headers for API requests
+     * Build authentication headers for API requests.
+     * Includes Content-Type and X-Org-ID for policy APIs.
+     * Uses getAuthHeaders() for authentication credentials.
      */
     buildAuthHeaders() {
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Always include tenant ID for policy APIs
+        // Always include tenant ID for policy APIs (X-Org-ID header for server compatibility)
+        // Note: getAuthHeaders() already adds X-Tenant-ID when tenant is non-default
         if (this.config.tenant) {
-            headers['X-Tenant-ID'] = this.config.tenant;
-        }
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
+            headers['X-Org-ID'] = this.config.tenant;
         }
         return headers;
     }
@@ -1080,8 +1068,8 @@ class AxonFlow {
             }
             throw new errors_1.APIError(response.status, response.statusText, errorText);
         }
-        // Handle DELETE responses with no body
-        if (response.status === 204 || method === 'DELETE') {
+        // Handle 204 No Content responses
+        if (response.status === 204) {
             return undefined;
         }
         return response.json();
@@ -1318,7 +1306,16 @@ class AxonFlow {
             (0, helpers_1.debugLog)('Getting static policy versions', { id });
         }
         const response = await this.policyRequest('GET', `/api/v1/static-policies/${id}/versions`);
-        return response.versions;
+        // Transform snake_case API response to camelCase
+        return response.versions.map(v => ({
+            version: v.version,
+            changedBy: v.changed_by,
+            changedAt: v.changed_at,
+            changeType: v.change_type,
+            changeDescription: v.change_description,
+            previousValues: v.previous_values,
+            newValues: v.new_values,
+        }));
     }
     // ============================================================================
     // Policy Override Methods (Enterprise)
@@ -1423,7 +1420,10 @@ class AxonFlow {
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Listing dynamic policies', { options });
         }
-        return this.orchestratorRequest('GET', path);
+        // API returns {"policies": [...]} wrapper via Agent proxy
+        const response = await this.orchestratorRequest('GET', path);
+        // Handle both wrapped and unwrapped responses for compatibility
+        return Array.isArray(response) ? response : response.policies || [];
     }
     /**
      * Get a specific dynamic policy by ID.
@@ -1435,7 +1435,10 @@ class AxonFlow {
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Getting dynamic policy', { id });
         }
-        return this.orchestratorRequest('GET', `/api/v1/dynamic-policies/${id}`);
+        // API returns {"policy": {...}} wrapper via Agent proxy
+        const response = await this.orchestratorRequest('GET', `/api/v1/dynamic-policies/${id}`);
+        // Handle both wrapped and unwrapped responses for compatibility
+        return 'policy' in response ? response.policy : response;
     }
     /**
      * Create a new dynamic policy.
@@ -1460,7 +1463,10 @@ class AxonFlow {
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Creating dynamic policy', { name: policy.name });
         }
-        return this.orchestratorRequest('POST', '/api/v1/dynamic-policies', policy);
+        // API returns {"policy": {...}} wrapper via Agent proxy
+        const response = await this.orchestratorRequest('POST', '/api/v1/dynamic-policies', policy);
+        // Handle both wrapped and unwrapped responses for compatibility
+        return 'policy' in response ? response.policy : response;
     }
     /**
      * Update an existing dynamic policy.
@@ -1473,7 +1479,10 @@ class AxonFlow {
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Updating dynamic policy', { id, updates: Object.keys(policy) });
         }
-        return this.orchestratorRequest('PUT', `/api/v1/dynamic-policies/${id}`, policy);
+        // API returns {"policy": {...}} wrapper via Agent proxy
+        const response = await this.orchestratorRequest('PUT', `/api/v1/dynamic-policies/${id}`, policy);
+        // Handle both wrapped and unwrapped responses for compatibility
+        return 'policy' in response ? response.policy : response;
     }
     /**
      * Delete a dynamic policy.
@@ -1497,9 +1506,10 @@ class AxonFlow {
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Toggling dynamic policy', { id, enabled });
         }
-        return this.orchestratorRequest('PATCH', `/api/v1/dynamic-policies/${id}`, {
-            enabled,
-        });
+        // API returns {"policy": {...}} wrapper via Agent proxy
+        const response = await this.orchestratorRequest('PUT', `/api/v1/dynamic-policies/${id}`, { enabled });
+        // Handle both wrapped and unwrapped responses for compatibility
+        return 'policy' in response ? response.policy : response;
     }
     /**
      * Get effective dynamic policies with tier inheritance applied.
@@ -1518,7 +1528,10 @@ class AxonFlow {
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Getting effective dynamic policies', { options });
         }
-        return this.orchestratorRequest('GET', path);
+        // API returns {"policies": [...]} wrapper via Agent proxy
+        const response = await this.orchestratorRequest('GET', path);
+        // Handle both wrapped and unwrapped responses for compatibility
+        return Array.isArray(response) ? response : response.policies || [];
     }
     // ============================================================================
     // Portal Authentication Methods (Enterprise)
@@ -1903,6 +1916,49 @@ class AxonFlow {
             providerType: response.provider_type,
         };
     }
+    /**
+     * Close a PR without merging and optionally delete the branch.
+     * Useful for cleaning up test PRs created by examples.
+     *
+     * @param prId - PR record ID
+     * @param deleteBranch - Whether to delete the associated branch (default: true)
+     * @returns Closed PR record
+     *
+     * @example
+     * ```typescript
+     * // Close PR and delete branch
+     * const pr = await axonflow.closePR('pr_123');
+     * console.log(`PR #${pr.prNumber} closed`);
+     *
+     * // Close PR but keep branch
+     * const pr = await axonflow.closePR('pr_123', false);
+     * ```
+     */
+    async closePR(prId, deleteBranch = true) {
+        if (this.config.debug) {
+            (0, helpers_1.debugLog)('Closing PR', { prId, deleteBranch });
+        }
+        const query = deleteBranch ? '?delete_branch=true' : '';
+        const response = await this.portalRequest('DELETE', `/api/v1/code-governance/prs/${prId}${query}`);
+        return {
+            id: response.id,
+            prNumber: response.pr_number,
+            prUrl: response.pr_url,
+            title: response.title,
+            state: response.state,
+            owner: response.owner,
+            repo: response.repo,
+            headBranch: response.head_branch,
+            baseBranch: response.base_branch,
+            filesCount: response.files_count,
+            secretsDetected: response.secrets_detected,
+            unsafePatterns: response.unsafe_patterns,
+            createdAt: response.created_at,
+            closedAt: response.closed_at,
+            createdBy: response.created_by,
+            providerType: response.provider_type,
+        };
+    }
     /**
      * Sync PR status with the Git provider.
      * This updates the local record with the current state from GitHub/GitLab/Bitbucket.
@@ -2096,8 +2152,8 @@ class AxonFlow {
             }
             throw new errors_1.APIError(response.status, response.statusText, errorText);
         }
-        // Handle DELETE responses with no body
-        if (response.status === 204 || method === 'DELETE') {
+        // Handle 204 No Content responses
+        if (response.status === 204) {
             return undefined;
         }
         return response.json();
@@ -2140,8 +2196,8 @@ class AxonFlow {
             }
             throw new errors_1.APIError(response.status, response.statusText, errorText);
         }
-        // Handle DELETE responses with no body
-        if (response.status === 204 || method === 'DELETE') {
+        // Handle 204 No Content responses
+        if (response.status === 204) {
             return undefined;
         }
         return response.json();