@axonflow/sdk 4.3.1 → 5.1.0

package/dist/esm/client.js

@@ -78,21 +78,19 @@ export class AxonFlow {
      * Get authentication headers based on configured credentials.
      *
      * Uses OAuth2-style Basic auth: Authorization: Basic base64(clientId:clientSecret)
-     * Also adds X-Tenant-ID header from clientId for tenant context.
+     * Tenant identity is derived server-side from the client credentials.
      *
      * @returns Headers object with authentication headers
      */
     getAuthHeaders() {
         const headers = {};
-        // OAuth2-style client credentials
-        if (this.config.clientId && this.config.clientSecret) {
-            const credentials = Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64');
+        // Always send Basic auth when clientId is set — server derives tenant from it.
+        // clientSecret defaults to empty string for community/no-secret mode.
+        const effectiveClientId = this.getEffectiveClientId();
+        if (effectiveClientId) {
+            const credentials = Buffer.from(`${effectiveClientId}:${this.config.clientSecret || ''}`).toString('base64');
             headers['Authorization'] = `Basic ${credentials}`;
         }
-        // Always add X-Tenant-ID when clientId is set (required for multi-tenant APIs)
-        if (this.config.clientId) {
-            headers['X-Tenant-ID'] = this.config.clientId;
-        }
         // Include SDK version for version discovery and compatibility checks
         headers['User-Agent'] = `axonflow-sdk-typescript/${VERSION}`;
         return headers;
@@ -364,10 +362,12 @@ export class AxonFlow {
                 };
             }
             const data = await response.json();
-            // Warn if SDK version is below platform minimum
-            if (data.sdk_compatibility?.min_sdk_version &&
-                compareSemver(VERSION, data.sdk_compatibility.min_sdk_version) < 0) {
-                console.warn(`[AxonFlow SDK] WARNING: SDK version ${VERSION} is below minimum supported version ${data.sdk_compatibility.min_sdk_version}. Please upgrade.`);
+            // Warn if SDK version is below platform minimum for TypeScript
+            const minVersion = typeof data.sdk_compatibility?.min_sdk_version === 'string'
+                ? data.sdk_compatibility.min_sdk_version
+                : data.sdk_compatibility?.min_sdk_version?.typescript;
+            if (minVersion && compareSemver(VERSION, minVersion) < 0) {
+                console.warn(`[AxonFlow SDK] WARNING: SDK version ${VERSION} is below minimum supported version ${minVersion}. Please upgrade.`);
             }
             return {
                 status: data.status === 'healthy' ? 'healthy' : 'degraded',
@@ -956,6 +956,24 @@ export class AxonFlow {
         }
         return responseData;
     }
+    /**
+     * Alias for {@link mcpCheckInput}. Validates tool input against configured policies.
+     *
+     * @param options - Input check options including connector type and statement
+     * @returns MCPCheckInputResponse with allowed status and policy evaluation details
+     */
+    async checkToolInput(options) {
+        return this.mcpCheckInput(options);
+    }
+    /**
+     * Alias for {@link mcpCheckOutput}. Validates tool output against configured policies.
+     *
+     * @param options - Output check options including connector type and response data
+     * @returns MCPCheckOutputResponse with allowed status, redacted data, and policy details
+     */
+    async checkToolOutput(options) {
+        return this.mcpCheckOutput(options);
+    }
     /**
      * Generate a multi-agent execution plan from a natural language query
      * @param query - Natural language query describing the task
@@ -1005,6 +1023,7 @@ export class AxonFlow {
         }
         return {
             planId,
+            status: agentResponse.data?.status || 'pending',
             steps: agentResponse.data?.steps || [],
             domain: agentResponse.data?.domain || domain || 'generic',
             complexity: agentResponse.data?.complexity || 0,
@@ -1915,7 +1934,6 @@ export class AxonFlow {
             'Content-Type': 'application/json',
             ...this.getAuthHeaders(),
         };
-        // Note: X-Tenant-ID is set by getAuthHeaders() from clientId
         // Do NOT set X-Org-ID here - the server derives org from tenant context
         // Setting X-Org-ID to 'default' breaks budget queries which expect org_id to match client.OrgID
         return headers;
@@ -4275,8 +4293,8 @@ export class AxonFlow {
             params.append('status', options.status);
         if (options?.useCase)
             params.append('use_case', options.useCase);
-        if (options?.materiality)
-            params.append('materiality', options.materiality);
+        if (options?.materialityClassification)
+            params.append('materiality', options.materialityClassification);
         if (options?.limit)
             params.append('limit', options.limit.toString());
         if (options?.offset)
@@ -4745,7 +4763,7 @@ export class AxonFlow {
             customerImpact: data.customer_impact ?? data.risk_rating_impact,
             modelComplexity: data.model_complexity ?? data.risk_rating_complexity,
             humanReliance: data.human_reliance ?? data.risk_rating_reliance,
-            materiality: data.materiality || data.materiality_classification,
+            materialityClassification: data.materiality_classification,
             status: data.status,
             metadata: data.metadata,
             createdAt: new Date(data.created_at),