@axonflow/sdk 2.1.0 → 2.2.0

package/README.md

@@ -26,7 +26,8 @@ import OpenAI from 'openai';
 // Initialize clients
 const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });
 const axonflow = new AxonFlow({
-  licenseKey: process.env.AXONFLOW_LICENSE_KEY,
+  clientId: process.env.AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.AXONFLOW_CLIENT_SECRET,
   endpoint: process.env.AXONFLOW_ENDPOINT || 'http://localhost:8080'
 });
 
@@ -75,7 +76,8 @@ For simpler integrations, Proxy Mode handles policy checking and auditing in a s
 import { AxonFlow } from '@axonflow/sdk';
 
 const axonflow = new AxonFlow({
-  licenseKey: process.env.AXONFLOW_LICENSE_KEY,
+  clientId: process.env.AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.AXONFLOW_CLIENT_SECRET,
   endpoint: 'http://localhost:8080'
 });
 
@@ -163,15 +165,6 @@ docker-compose up
 - ✅ Same API as production
 - ✅ Automatically detects localhost and skips authentication
 
-### Legacy API Key Auth (Deprecated)
-
-> **⚠️ Deprecated**: `apiKey` authentication is deprecated. Please migrate to license-based authentication using `licenseKey`.
-
-```typescript
-// Legacy method (still supported for backward compatibility)
-const axonflow = new AxonFlow({ apiKey: process.env.AXONFLOW_API_KEY });
-```
-
 ## Proxy Mode (executeQuery)
 
 Proxy Mode routes all requests through AxonFlow's `/api/request` endpoint, providing a simpler integration pattern with automatic policy enforcement:
@@ -182,7 +175,8 @@ Proxy Mode routes all requests through AxonFlow's `/api/request` endpoint, provi
 import { AxonFlow, PolicyViolationError } from '@axonflow/sdk';
 
 const axonflow = new AxonFlow({
-  licenseKey: process.env.AXONFLOW_LICENSE_KEY
+  clientId: process.env.AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.AXONFLOW_CLIENT_SECRET
 });
 
 // Execute a chat query with policy enforcement
@@ -298,7 +292,8 @@ import { AxonFlow } from '@axonflow/sdk';
 import { useState } from 'react';
 
 const axonflow = new AxonFlow({
-  licenseKey: process.env.REACT_APP_AXONFLOW_LICENSE_KEY,
+  clientId: process.env.REACT_APP_AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.REACT_APP_AXONFLOW_CLIENT_SECRET,
   endpoint: process.env.REACT_APP_AXONFLOW_ENDPOINT || 'http://localhost:8080'
 });
 
@@ -341,7 +336,8 @@ import OpenAI from 'openai';
 
 const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });
 const axonflow = new AxonFlow({
-  licenseKey: process.env.AXONFLOW_LICENSE_KEY,
+  clientId: process.env.AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.AXONFLOW_CLIENT_SECRET,
   endpoint: process.env.AXONFLOW_ENDPOINT || 'http://localhost:8080'
 });
 
@@ -396,12 +392,14 @@ export default async function handler(req, res) {
 
 ```typescript
 const axonflow = new AxonFlow({
-  apiKey: 'your-api-key',           // Required (use client_id from AxonFlow)
+  // Authentication (OAuth2 client credentials)
+  clientId: 'your-client-id',         // Required for cloud/enterprise
+  clientSecret: 'your-client-secret', // Required for cloud/enterprise
 
   // Optional settings
   mode: 'production',                // or 'sandbox' for testing
   endpoint: 'https://staging-eu.getaxonflow.com', // Default public endpoint
-  tenant: 'your-tenant-id',         // For multi-tenant setups (use client_id)
+  tenant: 'your-tenant-id',         // For multi-tenant setups
   debug: true,                       // Enable debug logging
 
   // Retry configuration
@@ -425,9 +423,9 @@ For customers running within AWS VPC, use the private endpoint for sub-10ms late
 
 ```typescript
 const axonflow = new AxonFlow({
-  apiKey: 'your-client-id',
+  clientId: process.env.AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.AXONFLOW_CLIENT_SECRET,
   endpoint: 'https://vpc-private-endpoint.getaxonflow.com:8443',  // VPC private endpoint
-  tenant: 'your-client-id',
   mode: 'production'
 });
 ```
@@ -442,7 +440,7 @@ const axonflow = new AxonFlow({
 
 ```typescript
 // Use sandbox mode for testing without affecting production
-const axonflow = AxonFlow.sandbox('demo-key');
+const axonflow = AxonFlow.sandbox('demo-client', 'demo-secret');
 
 // Test with PII detection (will be blocked)
 try {
@@ -498,10 +496,11 @@ try {
 
 ## Production Best Practices
 
-1. **Environment Variables**: Never hardcode API keys
+1. **Environment Variables**: Never hardcode credentials
    ```typescript
    const axonflow = new AxonFlow({
-     apiKey: process.env.AXONFLOW_API_KEY
+     clientId: process.env.AXONFLOW_CLIENT_ID,
+     clientSecret: process.env.AXONFLOW_CLIENT_SECRET
    });
    ```
 
@@ -514,7 +513,8 @@ try {
 3. **Tenant Isolation**: Use tenant IDs for multi-tenant apps
    ```typescript
    const axonflow = new AxonFlow({
-     apiKey: 'your-key',
+     clientId: process.env.AXONFLOW_CLIENT_ID,
+     clientSecret: process.env.AXONFLOW_CLIENT_SECRET,
      tenant: getCurrentTenantId()
    });
    ```
@@ -738,9 +738,10 @@ if (status.status === 'running') {
 import { AxonFlow } from '@axonflow/sdk';
 
 async function planTrip() {
-  // Initialize client with license key
+  // Initialize client with OAuth2 credentials
   const axonflow = new AxonFlow({
-    licenseKey: process.env.AXONFLOW_LICENSE_KEY,
+    clientId: process.env.AXONFLOW_CLIENT_ID,
+    clientSecret: process.env.AXONFLOW_CLIENT_SECRET,
     debug: true
   });
 
@@ -770,33 +771,35 @@ planTrip().catch(console.error);
 
 ## Migration Guide
 
-### Migrating from API Key to License Key
+### Migrating to OAuth2 Client Credentials
 
-If you're currently using `apiKey` authentication, migrate to license-based authentication:
+If you're using older authentication methods (`apiKey` or `licenseKey`), migrate to OAuth2 client credentials:
 
-**Before:**
+**Before (v2.x):**
 ```typescript
 const axonflow = new AxonFlow({
   apiKey: process.env.AXONFLOW_API_KEY
 });
+// or
+const axonflow = new AxonFlow({
+  licenseKey: process.env.AXONFLOW_LICENSE_KEY
+});
 ```
 
-**After:**
+**After (v3.x):**
 ```typescript
 const axonflow = new AxonFlow({
-  licenseKey: process.env.AXONFLOW_LICENSE_KEY
+  clientId: process.env.AXONFLOW_CLIENT_ID,
+  clientSecret: process.env.AXONFLOW_CLIENT_SECRET
 });
 ```
 
-**How to get a license key:**
+**How to get credentials:**
 1. Contact AxonFlow support at [dev@getaxonflow.com](mailto:dev@getaxonflow.com)
-2. License keys are provided as part of your AxonFlow subscription
-3. Store keys securely in environment variables or secrets management systems
+2. Credentials are provided as part of your AxonFlow subscription
+3. Store credentials securely in environment variables or secrets management systems
 
-**Backward Compatibility:**
-- The SDK maintains full backward compatibility with `apiKey`
-- No breaking changes - existing code continues to work
-- You can migrate at your own pace
+**Self-hosted users:** No credentials required for localhost endpoints.
 
 ## License
 

package/dist/cjs/client.d.ts

@@ -7,6 +7,15 @@ export declare class AxonFlow {
     private interceptors;
     private sessionCookie;
     constructor(config: AxonFlowConfig);
+    /**
+     * Get authentication headers based on configured credentials.
+     *
+     * Uses OAuth2-style Basic auth: Authorization: Basic base64(clientId:clientSecret)
+     * Also adds X-Tenant-ID header from clientId for tenant context.
+     *
+     * @returns Headers object with authentication headers
+     */
+    private getAuthHeaders;
     /**
      * Main method to protect AI calls with governance
      * @param aiCall The AI call to protect
@@ -73,7 +82,7 @@ export declare class AxonFlow {
     /**
      * Create a sandbox client for testing
      */
-    static sandbox(apiKey?: string): AxonFlow;
+    static sandbox(clientId?: string, clientSecret?: string): AxonFlow;
     /**
      * Check if AxonFlow Agent is healthy and available.
      *
@@ -295,7 +304,9 @@ export declare class AxonFlow {
      */
     private parseAuditLogEntry;
     /**
-     * Build authentication headers for API requests
+     * Build authentication headers for API requests.
+     * Includes Content-Type and X-Org-ID for policy APIs.
+     * Uses getAuthHeaders() for authentication credentials.
      */
     private buildAuthHeaders;
     /**
@@ -732,6 +743,25 @@ export declare class AxonFlow {
      * ```
      */
     getPR(prId: string): Promise<PRRecord>;
+    /**
+     * Close a PR without merging and optionally delete the branch.
+     * Useful for cleaning up test PRs created by examples.
+     *
+     * @param prId - PR record ID
+     * @param deleteBranch - Whether to delete the associated branch (default: true)
+     * @returns Closed PR record
+     *
+     * @example
+     * ```typescript
+     * // Close PR and delete branch
+     * const pr = await axonflow.closePR('pr_123');
+     * console.log(`PR #${pr.prNumber} closed`);
+     *
+     * // Close PR but keep branch
+     * const pr = await axonflow.closePR('pr_123', false);
+     * ```
+     */
+    closePR(prId: string, deleteBranch?: boolean): Promise<PRRecord>;
     /**
      * Sync PR status with the Git provider.
      * This updates the local record with the current state from GitHub/GitLab/Bitbucket.

package/dist/cjs/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAId,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EAEjB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EAEZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EAExB,eAAe,EACf,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,EAEd,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EAEtB,MAAM,EACN,eAAe,EACf,YAAY,EAEZ,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,cAAc,EAGd,oBAAoB,EAEpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAOjB;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAWZ;IACF,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,aAAa,CAAuB;gBAEhC,MAAM,EAAE,cAAc;IA6ClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACG,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA4D5D;;OAEG;YACW,cAAc;IAiB5B;;OAEG;YACW,aAAa;IAuE3B;;OAEG;YACW,QAAQ;IAYtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAAM,GAAE,MAAmB,GAAG,QAAQ;IAarD;;;;;;;;;;;;OAYG;IACG,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IA0C1C;;;;;;;;;;;OAWG;IACG,uBAAuB,IAAI,OAAO,CAAC,YAAY,CAAC;IA0CtD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsG/E;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAgBpD;;OAEG;IACG,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAevE;;OAEG;IACG,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9D;;OAEG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAanE;;OAEG;IACG,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAa7E;;OAEG;IACG,cAAc,CAClB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,GAAG,GACX,OAAO,CAAC,iBAAiB,CAAC;IAkD7B;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAyD7F;;;;OAIG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAkDrF;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA+BnE;;;OAGG;IACG,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACG,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkF7F;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAyE/D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,eAAe,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwCjF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IAoC/B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAqBxB;;OAEG;YACW,aAAa;IAgC3B;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAyBtF;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQxD;;;;;;;;;;;;;;;;OAgBG;IACG,kBAAkB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC;IA0BlF;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ9F;;;;;;;;;OASG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD;;;;;;;;;;;;OAYG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ7E;;;;;;;;;;;;;;OAcG;IACG,0BAA0B,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmB7F;;;;;;;;;;;;;;;;OAgBG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAWpF;;;;;;;;;;;OAWG;IACG,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAmCnE;;;;;;;;;;;;;;;;;OAiBG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC,cAAc,CAAC;IAY1B;;;;;;;;;;OAUG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D;;;;;;;;;;;;;OAaG;IACG,mBAAmB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAgBtD;;;;;;;;;;;;;OAaG;IACG,mBAAmB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA0BzF;;;;;OAKG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAc1D;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAerF;;;;;;OAMG;IACG,mBAAmB,CACvB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,aAAa,CAAC;IAezB;;;;OAIG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpD;;;;;;OAMG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAe/E;;;;;OAKG;IACG,2BAA2B,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAyB/F;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAkDhG;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBvC;;OAEG;IACH,UAAU,IAAI,OAAO;IAQrB;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,mBAAmB,CACvB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,2BAA2B,CAAC;IAsBvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,oBAAoB,CACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,4BAA4B,CAAC;IAsBxC;;;;;;;;;;;OAWG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAW3D;;;;;;;;;OASG;IACG,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACG,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgDnE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IA0DjE;;;;;;;;;;;OAWG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2C5C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+CnD;;;;;;;;;;;;OAYG;IACG,wBAAwB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAgChE;;;;;;;;;;;;;;;;;;;OAmBG;IACG,wBAAwB,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA4DhF;;;;;;;;;;;;;OAaG;IACG,2BAA2B,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB3E;;;OAGG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;YACW,mBAAmB;IAsCjC;;;;OAIG;YACW,aAAa;IAgD3B;;;;;;;;;;;;;;;;;;OAkBG;IACG,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkEtF;;;;;;;;;;;;;;;OAeG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA4FjE;;;;;;;;;;;;;OAaG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAsD1E;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA8BzE;;;;;;;;;;;;;;;;;OAiBG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAkBnC;;;;;;;;;;OAUG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBjE;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlD;;;;;OAKG;IACG,WAAW,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBzE;;;;;;OAMG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAenF;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAiB9D;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuBtE;;;;;OAKG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IA6BvE;;;;;OAKG;IACG,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAe7D;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA6BlF;;;;;OAKG;IACG,gBAAgB,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoCxF;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA2BjF,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,kBAAkB;IAY1B;;;;OAIG;YACW,iBAAiB;CAkChC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAId,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EAEjB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EAEZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EAExB,eAAe,EACf,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,EAEd,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EAEtB,MAAM,EACN,eAAe,EACf,YAAY,EAEZ,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,cAAc,EAGd,oBAAoB,EAEpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAcjB;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAWZ;IACF,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,aAAa,CAAuB;gBAEhC,MAAM,EAAE,cAAc;IAmDlC;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACG,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA4D5D;;OAEG;YACW,cAAc;IAiB5B;;OAEG;YACW,aAAa;IAkE3B;;OAEG;YACW,QAAQ;IAYtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAE,MAAsB,EAAE,YAAY,GAAE,MAAsB,GAAG,QAAQ;IAchG;;;;;;;;;;;;OAYG;IACG,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IA0C1C;;;;;;;;;;;OAWG;IACG,uBAAuB,IAAI,OAAO,CAAC,YAAY,CAAC;IA0CtD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkG/E;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAgBpD;;OAEG;IACG,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAevE;;OAEG;IACG,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9D;;OAEG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAanE;;OAEG;IACG,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAa7E;;OAEG;IACG,cAAc,CAClB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,GAAG,GACX,OAAO,CAAC,iBAAiB,CAAC;IAiD7B;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA4D7F;;;;OAIG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiDrF;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA+BnE;;;OAGG;IACG,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACG,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2E7F;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAkE/D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,eAAe,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwCjF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IAoC/B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;YACW,aAAa;IAgC3B;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAyBtF;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQxD;;;;;;;;;;;;;;;;OAgBG;IACG,kBAAkB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC;IA0BlF;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ9F;;;;;;;;;OASG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD;;;;;;;;;;;;OAYG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ7E;;;;;;;;;;;;;;OAcG;IACG,0BAA0B,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmB7F;;;;;;;;;;;;;;;;OAgBG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAWpF;;;;;;;;;;;OAWG;IACG,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAmCnE;;;;;;;;;;;;;;;;;OAiBG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC,cAAc,CAAC;IAY1B;;;;;;;;;;OAUG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D;;;;;;;;;;;;;OAaG;IACG,mBAAmB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAgBtD;;;;;;;;;;;;;OAaG;IACG,mBAAmB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA0BzF;;;;;OAKG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAc1D;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,CAAC;IAerF;;;;;;OAMG;IACG,mBAAmB,CACvB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,aAAa,CAAC;IAezB;;;;OAIG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpD;;;;;;OAMG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAe/E;;;;;OAKG;IACG,2BAA2B,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAyB/F;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAkDhG;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBvC;;OAEG;IACH,UAAU,IAAI,OAAO;IAQrB;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,mBAAmB,CACvB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,2BAA2B,CAAC;IAsBvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,oBAAoB,CACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,4BAA4B,CAAC;IAsBxC;;;;;;;;;;;OAWG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAW3D;;;;;;;;;OASG;IACG,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACG,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgDnE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IA0DjE;;;;;;;;;;;OAWG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2C5C;;;;;;;;;;;;;;;;;OAiBG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,GAAE,OAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;IA6C5E;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+CnD;;;;;;;;;;;;OAYG;IACG,wBAAwB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAgChE;;;;;;;;;;;;;;;;;;;OAmBG;IACG,wBAAwB,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA4DhF;;;;;;;;;;;;;OAaG;IACG,2BAA2B,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB3E;;;OAGG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;YACW,mBAAmB;IAsCjC;;;;OAIG;YACW,aAAa;IAgD3B;;;;;;;;;;;;;;;;;;OAkBG;IACG,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkEtF;;;;;;;;;;;;;;;OAeG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA4FjE;;;;;;;;;;;;;OAaG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAsD1E;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA8BzE;;;;;;;;;;;;;;;;;OAiBG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAkBnC;;;;;;;;;;OAUG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBjE;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlD;;;;;OAKG;IACG,WAAW,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBzE;;;;;;OAMG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAenF;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAiB9D;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuBtE;;;;;OAKG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IA6BvE;;;;;OAKG;IACG,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAe7D;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA6BlF;;;;;OAKG;IACG,gBAAgB,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoCxF;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA2BjF,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,kBAAkB;IAY1B;;;;OAIG;YACW,iBAAiB;CAkChC"}

package/dist/cjs/client.js

@@ -12,15 +12,19 @@ class AxonFlow {
     constructor(config) {
         this.interceptors = [];
         this.sessionCookie = null;
+        // Configuration validation
+        if (config.clientSecret && !config.clientId) {
+            throw new errors_1.ConfigurationError('clientSecret requires clientId to be set. ' +
+                'Provide both clientId and clientSecret for OAuth2-style authentication.');
+        }
         // Set defaults first to determine endpoint
         const endpoint = config.endpoint || 'https://staging-eu.getaxonflow.com';
-        // Credentials are optional for community/self-hosted deployments
-        // Enterprise features (Gateway Mode, Policy CRUD) require credentials
-        const hasCredentials = !!(config.licenseKey || config.apiKey);
+        // Credentials check: OAuth2-style (clientId/clientSecret)
+        const hasCredentials = !!(config.clientId && config.clientSecret);
         // Set configuration
         this.config = {
-            apiKey: config.apiKey,
-            licenseKey: config.licenseKey,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
             endpoint,
             mode: config.mode || (hasCredentials ? 'production' : 'sandbox'),
             tenant: config.tenant || 'default',
@@ -40,17 +44,33 @@ class AxonFlow {
         // Initialize interceptors
         this.interceptors = [new openai_1.OpenAIInterceptor(), new anthropic_1.AnthropicInterceptor()];
         if (this.config.debug) {
+            // Determine auth method for logging
+            const authMethod = hasCredentials ? 'client-credentials' : 'community (no auth)';
             (0, helpers_1.debugLog)('AxonFlow initialized', {
                 mode: this.config.mode,
                 endpoint: this.config.endpoint,
-                authMethod: hasCredentials
-                    ? this.config.licenseKey
-                        ? 'license-key'
-                        : 'api-key'
-                    : 'community (no auth)',
+                authMethod,
             });
         }
     }
+    /**
+     * Get authentication headers based on configured credentials.
+     *
+     * Uses OAuth2-style Basic auth: Authorization: Basic base64(clientId:clientSecret)
+     * Also adds X-Tenant-ID header from clientId for tenant context.
+     *
+     * @returns Headers object with authentication headers
+     */
+    getAuthHeaders() {
+        const headers = {};
+        // OAuth2-style client credentials
+        if (this.config.clientId && this.config.clientSecret) {
+            const credentials = Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64');
+            headers['Authorization'] = `Basic ${credentials}`;
+            headers['X-Tenant-ID'] = this.config.clientId;
+        }
+        return headers;
+    }
     /**
      * Main method to protect AI calls with governance
      * @param aiCall The AI call to protect
@@ -169,8 +189,8 @@ class AxonFlow {
         // Transform SDK request to Agent API format
         const agentRequest = {
             query: request.aiRequest.prompt,
-            user_token: this.config.apiKey || '',
-            client_id: this.config.tenant,
+            user_token: '',
+            client_id: this.config.clientId || this.config.tenant,
             request_type: 'llm_chat',
             context: {
                 provider: request.aiRequest.provider,
@@ -182,12 +202,8 @@ class AxonFlow {
         };
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         const response = await fetch(url, {
             method: 'POST',
             headers,
@@ -250,9 +266,10 @@ class AxonFlow {
     /**
      * Create a sandbox client for testing
      */
-    static sandbox(apiKey = 'demo-key') {
+    static sandbox(clientId = 'demo-client', clientSecret = 'demo-secret') {
         return new AxonFlow({
-            apiKey,
+            clientId,
+            clientSecret,
             mode: 'sandbox',
             endpoint: 'https://staging-eu.getaxonflow.com',
             debug: true,
@@ -389,9 +406,11 @@ class AxonFlow {
      * ```
      */
     async executeQuery(options) {
+        // Default to "anonymous" if userToken is empty/undefined (community mode)
+        const effectiveUserToken = options.userToken || 'anonymous';
         const agentRequest = {
             query: options.query,
-            user_token: options.userToken,
+            user_token: effectiveUserToken,
             client_id: this.config.tenant,
             request_type: options.requestType,
             context: options.context || {},
@@ -399,15 +418,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Proxy Mode: executeQuery', {
                 requestType: options.requestType,
@@ -532,8 +544,8 @@ class AxonFlow {
     async queryConnector(connectorName, query, params) {
         const agentRequest = {
             query,
-            user_token: this.config.apiKey || '',
-            client_id: this.config.tenant,
+            user_token: '',
+            client_id: this.config.clientId || this.config.tenant,
             request_type: 'mcp-query',
             context: {
                 connector: connectorName,
@@ -543,10 +555,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         const response = await fetch(url, {
             method: 'POST',
             headers,
@@ -555,7 +565,7 @@ class AxonFlow {
         });
         if (!response.ok) {
             const errorText = await response.text();
-            throw new Error(`Connector query failed: ${response.status} ${response.statusText} - ${errorText}`);
+            throw new errors_1.ConnectorError(`Connector query failed: ${response.status} ${response.statusText} - ${errorText}`, connectorName, 'query');
         }
         const agentResponse = await response.json();
         if (this.config.debug) {
@@ -585,10 +595,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         // Use mapTimeout for MAP operations (default 2 minutes)
         const response = await fetch(url, {
             method: 'POST',
@@ -598,11 +606,11 @@ class AxonFlow {
         });
         if (!response.ok) {
             const errorText = await response.text();
-            throw new Error(`Plan generation failed: ${response.status} ${response.statusText} - ${errorText}`);
+            throw new errors_1.PlanExecutionError(`Plan generation failed: ${response.status} ${response.statusText} - ${errorText}`, undefined, 'generation');
         }
         const agentResponse = await response.json();
         if (!agentResponse.success) {
-            throw new Error(`Plan generation failed: ${agentResponse.error}`);
+            throw new errors_1.PlanExecutionError(`Plan generation failed: ${agentResponse.error}`, undefined, 'generation');
         }
         // plan_id can be at top level or inside data
         const planId = agentResponse.plan_id || agentResponse.data?.plan_id;
@@ -634,10 +642,8 @@ class AxonFlow {
         const url = `${this.config.endpoint}/api/request`;
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
         // Use mapTimeout for MAP operations (default 2 minutes)
         const response = await fetch(url, {
             method: 'POST',
@@ -647,7 +653,7 @@ class AxonFlow {
         });
         if (!response.ok) {
             const errorText = await response.text();
-            throw new Error(`Plan execution failed: ${response.status} ${response.statusText} - ${errorText}`);
+            throw new errors_1.PlanExecutionError(`Plan execution failed: ${response.status} ${response.statusText} - ${errorText}`, planId, 'execution');
         }
         const agentResponse = await response.json();
         if (this.config.debug) {
@@ -666,7 +672,7 @@ class AxonFlow {
      * Get the status of a running or completed plan
      */
     async getPlanStatus(planId) {
-        const url = `${this.config.endpoint}/api/plans/${planId}`;
+        const url = `${this.config.endpoint}/api/v1/plan/${planId}`;
         const response = await fetch(url, {
             method: 'GET',
             signal: AbortSignal.timeout(this.config.timeout),
@@ -749,15 +755,8 @@ class AxonFlow {
         };
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Gateway Mode: Pre-check', { query: options.query.substring(0, 50) });
         }
@@ -848,15 +847,8 @@ class AxonFlow {
         };
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         if (this.config.debug) {
             (0, helpers_1.debugLog)('Gateway Mode: Audit', {
                 contextId: options.contextId,
@@ -1038,24 +1030,20 @@ class AxonFlow {
     // Policy CRUD Methods - Static Policies
     // ============================================================================
     /**
-     * Build authentication headers for API requests
+     * Build authentication headers for API requests.
+     * Includes Content-Type and X-Org-ID for policy APIs.
+     * Uses getAuthHeaders() for authentication credentials.
      */
     buildAuthHeaders() {
         const headers = {
             'Content-Type': 'application/json',
+            ...this.getAuthHeaders(),
         };
         // Always include tenant ID for policy APIs (X-Org-ID header for server compatibility)
+        // Note: getAuthHeaders() already adds X-Tenant-ID when tenant is non-default
         if (this.config.tenant) {
             headers['X-Org-ID'] = this.config.tenant;
         }
-        // Add auth headers only when credentials are provided
-        // Community/self-hosted mode works without credentials
-        if (this.config.licenseKey) {
-            headers['X-License-Key'] = this.config.licenseKey;
-        }
-        else if (this.config.apiKey) {
-            headers['X-Client-Secret'] = this.config.apiKey;
-        }
         return headers;
     }
     /**
@@ -1080,8 +1068,8 @@ class AxonFlow {
             }
             throw new errors_1.APIError(response.status, response.statusText, errorText);
         }
-        // Handle DELETE responses with no body
-        if (response.status === 204 || method === 'DELETE') {
+        // Handle 204 No Content responses
+        if (response.status === 204) {
             return undefined;
         }
         return response.json();
@@ -1435,7 +1423,7 @@ class AxonFlow {
         // API returns {"policies": [...]} wrapper via Agent proxy
         const response = await this.orchestratorRequest('GET', path);
         // Handle both wrapped and unwrapped responses for compatibility
-        return Array.isArray(response) ? response : response.policies;
+        return Array.isArray(response) ? response : response.policies || [];
     }
     /**
      * Get a specific dynamic policy by ID.
@@ -1543,7 +1531,7 @@ class AxonFlow {
         // API returns {"policies": [...]} wrapper via Agent proxy
         const response = await this.orchestratorRequest('GET', path);
         // Handle both wrapped and unwrapped responses for compatibility
-        return Array.isArray(response) ? response : response.policies;
+        return Array.isArray(response) ? response : response.policies || [];
     }
     // ============================================================================
     // Portal Authentication Methods (Enterprise)
@@ -1928,6 +1916,49 @@ class AxonFlow {
             providerType: response.provider_type,
         };
     }
+    /**
+     * Close a PR without merging and optionally delete the branch.
+     * Useful for cleaning up test PRs created by examples.
+     *
+     * @param prId - PR record ID
+     * @param deleteBranch - Whether to delete the associated branch (default: true)
+     * @returns Closed PR record
+     *
+     * @example
+     * ```typescript
+     * // Close PR and delete branch
+     * const pr = await axonflow.closePR('pr_123');
+     * console.log(`PR #${pr.prNumber} closed`);
+     *
+     * // Close PR but keep branch
+     * const pr = await axonflow.closePR('pr_123', false);
+     * ```
+     */
+    async closePR(prId, deleteBranch = true) {
+        if (this.config.debug) {
+            (0, helpers_1.debugLog)('Closing PR', { prId, deleteBranch });
+        }
+        const query = deleteBranch ? '?delete_branch=true' : '';
+        const response = await this.portalRequest('DELETE', `/api/v1/code-governance/prs/${prId}${query}`);
+        return {
+            id: response.id,
+            prNumber: response.pr_number,
+            prUrl: response.pr_url,
+            title: response.title,
+            state: response.state,
+            owner: response.owner,
+            repo: response.repo,
+            headBranch: response.head_branch,
+            baseBranch: response.base_branch,
+            filesCount: response.files_count,
+            secretsDetected: response.secrets_detected,
+            unsafePatterns: response.unsafe_patterns,
+            createdAt: response.created_at,
+            closedAt: response.closed_at,
+            createdBy: response.created_by,
+            providerType: response.provider_type,
+        };
+    }
     /**
      * Sync PR status with the Git provider.
      * This updates the local record with the current state from GitHub/GitLab/Bitbucket.
@@ -2121,8 +2152,8 @@ class AxonFlow {
             }
             throw new errors_1.APIError(response.status, response.statusText, errorText);
         }
-        // Handle DELETE responses with no body
-        if (response.status === 204 || method === 'DELETE') {
+        // Handle 204 No Content responses
+        if (response.status === 204) {
             return undefined;
         }
         return response.json();
@@ -2165,8 +2196,8 @@ class AxonFlow {
             }
             throw new errors_1.APIError(response.status, response.statusText, errorText);
         }
-        // Handle DELETE responses with no body
-        if (response.status === 204 || method === 'DELETE') {
+        // Handle 204 No Content responses
+        if (response.status === 204) {
             return undefined;
         }
         return response.json();