@axonflow/sdk 9.2.0 → 9.3.0

package/dist/cjs/heartbeat.d.ts

@@ -6,8 +6,12 @@
  *   AxonFlow emits at most one heartbeat per environment every
  *   7 days during SDK activity.
  *
- * The gate is consulted at client construction and at every public HTTP
- * request site (via `_preRequestHook`). Each gate run:
+ * The gate is consulted at every public HTTP request site, via
+ * `_preRequestHook`. It is NOT consulted at client construction
+ * (axonflow-enterprise#3682): every framework adapter takes a client, so an
+ * adapter registering from its own constructor could never reach a
+ * constructor-time ping. A client that is constructed and never used does not
+ * ping. Each gate run:
  *
  *  1. Re-evaluates `AXONFLOW_TELEMETRY=off` cheaply (lock-free) so a
  *     mid-process opt-out toggle takes effect immediately.
@@ -36,6 +40,25 @@
 export declare const HEARTBEAT_INTERVAL_MS: number;
 /** 1 hour in milliseconds — bounds how often we stat() the stamp file. */
 export declare const HEARTBEAT_GUARD_INTERVAL_MS: number;
+/**
+ * How long the gate waits before re-consulting, given how many attempts in a
+ * row failed to deliver. Doubling from `HEARTBEAT_GUARD_INTERVAL_MS`, capped at
+ * `HEARTBEAT_INTERVAL_MS`.
+ *
+ * Without it the SDK has no backoff at all, and two deliberate design choices
+ * combine into a defect: the 7-day stamp only advances on DELIVERY, and the
+ * gate is re-evaluated on every request. In a deployment where egress to the
+ * checkpoint is blocked — the normal state of the air-gapped and in-VPC
+ * self-hosted topologies this SDK supports — every process would issue a
+ * `/health` GET against the CUSTOMER'S OWN platform once an hour,
+ * indefinitely, with a failed POST beside it. Unsolicited hourly traffic
+ * against someone else's platform, for a heartbeat disclosed as weekly, is not
+ * defensible.
+ *
+ * Backing off loses no ping: the stamp is still untouched, so the first attempt
+ * after the widened interval sends normally.
+ */
+export declare function guardIntervalFor(consecutiveFailures: number): number;
 /**
  * Resolve the OS-native stamp file path, or `null` if no user cache
  * directory is available (Lambda etc.). Hand-rolled rather than via the
@@ -61,6 +84,32 @@ export declare class HeartbeatState {
     lastCheckedMs: number | null;
     inFlight: Promise<void> | null;
     readonly stampPath: string | null;
+    /**
+     * Consecutive attempts that did NOT deliver. Widens the re-check interval so
+     * a deployment that can never reach the checkpoint stops probing its own
+     * platform every hour forever. Reset on delivery.
+     */
+    consecutiveFailures: number;
+    /**
+     * When this PROCESS last DELIVERED a ping.
+     *
+     * The stamp file is the cross-restart record of that, but it is not always
+     * available: `resolveStampPath` returns null where there is no usable cache
+     * dir (HOME unset — distroless and scratch containers, Lambda custom
+     * runtimes), and `writeStampAtomic` silently fails on a read-only root
+     * filesystem (`readOnlyRootFilesystem: true` is ordinary Kubernetes
+     * hardening). In both, `readStampMtimeMs` returns null forever.
+     *
+     * The failure backoff cannot bound that case, because it resets on delivery
+     * and these deliveries SUCCEED: the gate re-opens every hour, the ping lands,
+     * the stamp cannot be written, and the next hour repeats it — 168x the "at
+     * most one ping per machine every 7 days" this SDK discloses, in exactly the
+     * environments least able to notice.
+     *
+     * So the cadence is enforced in memory too. Redundant whenever the stamp
+     * works, and the only bound when it does not.
+     */
+    lastDeliveredMs: number | null;
     constructor(stampPath?: string | null | typeof USE_DEFAULT_CACHE_DIR);
     /**
      * Returns the stamp file's mtime as wall-clock ms-since-epoch, or null
@@ -102,8 +151,10 @@ export declare function restoreHeartbeatStateForTest(state: HeartbeatState): voi
  */
 export declare function flushHeartbeat(): Promise<void> | null;
 /**
- * Central gate for telemetry pings. Called from the AxonFlow constructor
- * and from `_preRequestHook` on every public HTTP entry point.
+ * Central gate for telemetry pings. Called from `_preRequestHook` on every
+ * public HTTP entry point — and NOT from the AxonFlow constructor, which
+ * stopped pinging in axonflow-enterprise#3682 so that an adapter registering
+ * from its own constructor can reach the first ping.
  *
  * The `pingFn` callback returns a Promise<boolean> indicating delivery
  * success. The stamp is written ONLY when this resolves to true,

package/dist/cjs/heartbeat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../src/heartbeat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH,8BAA8B;AAC9B,eAAO,MAAM,qBAAqB,QAA0B,CAAC;AAE7D,0EAA0E;AAC1E,eAAO,MAAM,2BAA2B,QAAiB,CAAC;AAE1D;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAoBhD;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,eAAkD,CAAC;AAErF;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;IACpC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAQ;IAC7C,SAAgB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;gBAE7B,SAAS,GAAE,MAAM,GAAG,IAAI,GAAG,OAAO,qBAA6C;IAI3F;;;;OAIG;IACH,gBAAgB,IAAI,MAAM,GAAG,IAAI;IASjC;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAsBxC;AAMD,wBAAgB,wBAAwB,IAAI,cAAc,CAEzD;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,qBAAqB,GACtD,cAAc,CAIhB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAExE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAErD;AAYD;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,kBAAkB,EAAE,OAAO,EAC3B,MAAM,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC,CAwCf"}
+{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../src/heartbeat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAKH,8BAA8B;AAC9B,eAAO,MAAM,qBAAqB,QAA0B,CAAC;AAE7D,0EAA0E;AAC1E,eAAO,MAAM,2BAA2B,QAAiB,CAAC;AAS1D;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAoBhD;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,eAAkD,CAAC;AAErF;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;IACpC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAQ;IAC7C,SAAgB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzC;;;;OAIG;IACI,mBAAmB,SAAK;IAE/B;;;;;;;;;;;;;;;;;;OAkBG;IACI,eAAe,EAAE,MAAM,GAAG,IAAI,CAAQ;gBAEjC,SAAS,GAAE,MAAM,GAAG,IAAI,GAAG,OAAO,qBAA6C;IAI3F;;;;OAIG;IACH,gBAAgB,IAAI,MAAM,GAAG,IAAI;IASjC;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAsBxC;AAMD,wBAAgB,wBAAwB,IAAI,cAAc,CAEzD;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,qBAAqB,GACtD,cAAc,CAIhB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAExE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAErD;AAYD;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,kBAAkB,EAAE,OAAO,EAC3B,MAAM,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC,CA4Df"}

package/dist/cjs/heartbeat.js

@@ -7,8 +7,12 @@
  *   AxonFlow emits at most one heartbeat per environment every
  *   7 days during SDK activity.
  *
- * The gate is consulted at client construction and at every public HTTP
- * request site (via `_preRequestHook`). Each gate run:
+ * The gate is consulted at every public HTTP request site, via
+ * `_preRequestHook`. It is NOT consulted at client construction
+ * (axonflow-enterprise#3682): every framework adapter takes a client, so an
+ * adapter registering from its own constructor could never reach a
+ * constructor-time ping. A client that is constructed and never used does not
+ * ping. Each gate run:
  *
  *  1. Re-evaluates `AXONFLOW_TELEMETRY=off` cheaply (lock-free) so a
  *     mid-process opt-out toggle takes effect immediately.
@@ -68,6 +72,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HeartbeatState = exports.USE_DEFAULT_CACHE_DIR = exports.HEARTBEAT_GUARD_INTERVAL_MS = exports.HEARTBEAT_INTERVAL_MS = void 0;
+exports.guardIntervalFor = guardIntervalFor;
 exports.resolveStampPath = resolveStampPath;
 exports.getHeartbeatStateForTest = getHeartbeatStateForTest;
 exports.replaceHeartbeatStateForTest = replaceHeartbeatStateForTest;
@@ -80,6 +85,34 @@ const path = __importStar(require("path"));
 exports.HEARTBEAT_INTERVAL_MS = 7 * 24 * 60 * 60 * 1000;
 /** 1 hour in milliseconds — bounds how often we stat() the stamp file. */
 exports.HEARTBEAT_GUARD_INTERVAL_MS = 60 * 60 * 1000;
+/**
+ * Ceiling on how many times the guard interval may double. 16 doublings
+ * already exceed the 7-day cap by orders of magnitude; the clamp exists so an
+ * unbounded failure counter cannot produce an absurd interval.
+ */
+const MAX_BACKOFF_DOUBLINGS = 16;
+/**
+ * How long the gate waits before re-consulting, given how many attempts in a
+ * row failed to deliver. Doubling from `HEARTBEAT_GUARD_INTERVAL_MS`, capped at
+ * `HEARTBEAT_INTERVAL_MS`.
+ *
+ * Without it the SDK has no backoff at all, and two deliberate design choices
+ * combine into a defect: the 7-day stamp only advances on DELIVERY, and the
+ * gate is re-evaluated on every request. In a deployment where egress to the
+ * checkpoint is blocked — the normal state of the air-gapped and in-VPC
+ * self-hosted topologies this SDK supports — every process would issue a
+ * `/health` GET against the CUSTOMER'S OWN platform once an hour,
+ * indefinitely, with a failed POST beside it. Unsolicited hourly traffic
+ * against someone else's platform, for a heartbeat disclosed as weekly, is not
+ * defensible.
+ *
+ * Backing off loses no ping: the stamp is still untouched, so the first attempt
+ * after the widened interval sends normally.
+ */
+function guardIntervalFor(consecutiveFailures) {
+    const doublings = Math.min(consecutiveFailures, MAX_BACKOFF_DOUBLINGS);
+    return Math.min(exports.HEARTBEAT_GUARD_INTERVAL_MS * 2 ** doublings, exports.HEARTBEAT_INTERVAL_MS);
+}
 /**
  * Resolve the OS-native stamp file path, or `null` if no user cache
  * directory is available (Lambda etc.). Hand-rolled rather than via the
@@ -128,6 +161,32 @@ class HeartbeatState {
     constructor(stampPath = exports.USE_DEFAULT_CACHE_DIR) {
         this.lastCheckedMs = null;
         this.inFlight = null;
+        /**
+         * Consecutive attempts that did NOT deliver. Widens the re-check interval so
+         * a deployment that can never reach the checkpoint stops probing its own
+         * platform every hour forever. Reset on delivery.
+         */
+        this.consecutiveFailures = 0;
+        /**
+         * When this PROCESS last DELIVERED a ping.
+         *
+         * The stamp file is the cross-restart record of that, but it is not always
+         * available: `resolveStampPath` returns null where there is no usable cache
+         * dir (HOME unset — distroless and scratch containers, Lambda custom
+         * runtimes), and `writeStampAtomic` silently fails on a read-only root
+         * filesystem (`readOnlyRootFilesystem: true` is ordinary Kubernetes
+         * hardening). In both, `readStampMtimeMs` returns null forever.
+         *
+         * The failure backoff cannot bound that case, because it resets on delivery
+         * and these deliveries SUCCEED: the gate re-opens every hour, the ping lands,
+         * the stamp cannot be written, and the next hour repeats it — 168x the "at
+         * most one ping per machine every 7 days" this SDK discloses, in exactly the
+         * environments least able to notice.
+         *
+         * So the cadence is enforced in memory too. Redundant whenever the stamp
+         * works, and the only bound when it does not.
+         */
+        this.lastDeliveredMs = null;
         this.stampPath = stampPath === exports.USE_DEFAULT_CACHE_DIR ? resolveStampPath() : stampPath;
     }
     /**
@@ -228,8 +287,10 @@ function isOptedOut() {
     return process.env.AXONFLOW_TELEMETRY?.trim().toLowerCase() === 'off';
 }
 /**
- * Central gate for telemetry pings. Called from the AxonFlow constructor
- * and from `_preRequestHook` on every public HTTP entry point.
+ * Central gate for telemetry pings. Called from `_preRequestHook` on every
+ * public HTTP entry point — and NOT from the AxonFlow constructor, which
+ * stopped pinging in axonflow-enterprise#3682 so that an adapter registering
+ * from its own constructor can reach the first ping.
  *
  * The `pingFn` callback returns a Promise<boolean> indicating delivery
  * success. The stamp is written ONLY when this resolves to true,
@@ -250,12 +311,19 @@ async function maybeSendHeartbeat(isTelemetryEnabled, pingFn) {
     if (h.inFlight)
         return;
     const nowMs = Date.now();
-    // 3. In-memory 1-hour cache.
-    if (h.lastCheckedMs !== null && nowMs - h.lastCheckedMs < exports.HEARTBEAT_GUARD_INTERVAL_MS) {
+    // 3. In-memory guard, WIDENED by consecutive delivery failures.
+    if (h.lastCheckedMs !== null &&
+        nowMs - h.lastCheckedMs < guardIntervalFor(h.consecutiveFailures)) {
         return;
     }
     h.lastCheckedMs = nowMs;
-    // 4. Stamp file mtime gate.
+    // 4. In-memory 7-day cadence, checked BEFORE the stamp. Where the stamp
+    //    cannot be persisted this is the only thing standing between a delivered
+    //    ping and an hourly one — see `lastDeliveredMs`.
+    if (h.lastDeliveredMs !== null && nowMs - h.lastDeliveredMs < exports.HEARTBEAT_INTERVAL_MS) {
+        return;
+    }
+    // 5. Stamp file mtime gate.
     const mtimeMs = h.readStampMtimeMs();
     if (mtimeMs !== null && nowMs - mtimeMs < exports.HEARTBEAT_INTERVAL_MS) {
         return;
@@ -265,12 +333,23 @@ async function maybeSendHeartbeat(isTelemetryEnabled, pingFn) {
     h.inFlight = (async () => {
         try {
             const ok = await pingFn();
+            // Recorded for EVERY attempt: the failure counter drives the widened
+            // guard, and the delivery instant bounds the success cadence when the
+            // stamp file is unavailable. A pass that stopped at a fresh stamp never
+            // reaches here, and must not — a suppressed pass is the gate working,
+            // not an attempt that failed.
             if (ok) {
+                h.consecutiveFailures = 0;
+                h.lastDeliveredMs = Date.now();
                 await h.writeStampAtomic();
             }
+            else {
+                h.consecutiveFailures += 1;
+            }
         }
         catch {
             // pingFn must never throw in practice, but defend anyway.
+            h.consecutiveFailures += 1;
         }
         finally {
             h.inFlight = null;

package/dist/cjs/heartbeat.js.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat.js","sourceRoot":"","sources":["../../src/heartbeat.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBH,4CAoBC;AA4ED,4DAEC;AAED,oEAMC;AAUD,oEAEC;AAcD,wCAEC;AAsBD,gDA2CC;AArND,2BAAsD;AACtD,2CAA6B;AAE7B,8BAA8B;AACjB,QAAA,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7D,0EAA0E;AAC7D,QAAA,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1D;;;;GAIG;AACH,SAAgB,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IACxE,CAAC;IACD,+BAA+B;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;AACjF,CAAC;AAED,8EAA8E;AACjE,QAAA,qBAAqB,GAAG,MAAM,CAAC,uCAAuC,CAAC,CAAC;AAErF;;;;;;;;;;;;GAYG;AACH,MAAa,cAAc;IAKzB,YAAY,YAA0D,6BAAqB;QAJpF,kBAAa,GAAkB,IAAI,CAAC;QACpC,aAAQ,GAAyB,IAAI,CAAC;QAI3C,IAAI,CAAC,SAAS,GAAG,SAAS,KAAK,6BAAqB,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,IAAA,aAAQ,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,aAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,aAAU,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9F,MAAM,aAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,qBAAqB;YACrB,IAAI,CAAC;gBACH,MAAM,aAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AApDD,wCAoDC;AAED,iEAAiE;AACjE,iEAAiE;AACjE,IAAI,MAAM,GAAmB,IAAI,cAAc,EAAE,CAAC;AAElD,SAAgB,wBAAwB;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,4BAA4B,CAC1C,SAAuD;IAEvD,MAAM,QAAQ,GAAG,MAAM,CAAC;IACxB,MAAM,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,4BAA4B,CAAC,KAAqB;IAChE,MAAM,GAAG,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU;IACjB,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACxE,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,kBAAkB,CACtC,kBAA2B,EAC3B,MAA8B;IAE9B,+DAA+D;IAC/D,IAAI,UAAU,EAAE;QAAE,OAAO;IACzB,IAAI,CAAC,kBAAkB;QAAE,OAAO;IAEhC,MAAM,CAAC,GAAG,MAAM,CAAC;IAEjB,kEAAkE;IAClE,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO;IAEvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,6BAA6B;IAC7B,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,aAAa,GAAG,mCAA2B,EAAE,CAAC;QACtF,OAAO;IACT,CAAC;IACD,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC;IAExB,4BAA4B;IAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,GAAG,OAAO,GAAG,6BAAqB,EAAE,CAAC;QAChE,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,+DAA+D;IAC/D,CAAC,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;YAC1B,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;gBAAS,CAAC;YACT,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}
+{"version":3,"file":"heartbeat.js","sourceRoot":"","sources":["../../src/heartbeat.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCH,4CAGC;AAOD,4CAoBC;AAwGD,4DAEC;AAED,oEAMC;AAUD,oEAEC;AAcD,wCAEC;AAwBD,gDA+DC;AArSD,2BAAsD;AACtD,2CAA6B;AAE7B,8BAA8B;AACjB,QAAA,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7D,0EAA0E;AAC7D,QAAA,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1D;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gBAAgB,CAAC,mBAA2B;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,mCAA2B,GAAG,CAAC,IAAI,SAAS,EAAE,6BAAqB,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IACxE,CAAC;IACD,+BAA+B;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;AACjF,CAAC;AAED,8EAA8E;AACjE,QAAA,qBAAqB,GAAG,MAAM,CAAC,uCAAuC,CAAC,CAAC;AAErF;;;;;;;;;;;;GAYG;AACH,MAAa,cAAc;IAiCzB,YAAY,YAA0D,6BAAqB;QAhCpF,kBAAa,GAAkB,IAAI,CAAC;QACpC,aAAQ,GAAyB,IAAI,CAAC;QAG7C;;;;WAIG;QACI,wBAAmB,GAAG,CAAC,CAAC;QAE/B;;;;;;;;;;;;;;;;;;WAkBG;QACI,oBAAe,GAAkB,IAAI,CAAC;QAG3C,IAAI,CAAC,SAAS,GAAG,SAAS,KAAK,6BAAqB,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,IAAA,aAAQ,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,aAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,aAAU,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9F,MAAM,aAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,qBAAqB;YACrB,IAAI,CAAC;gBACH,MAAM,aAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAhFD,wCAgFC;AAED,iEAAiE;AACjE,iEAAiE;AACjE,IAAI,MAAM,GAAmB,IAAI,cAAc,EAAE,CAAC;AAElD,SAAgB,wBAAwB;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,4BAA4B,CAC1C,SAAuD;IAEvD,MAAM,QAAQ,GAAG,MAAM,CAAC;IACxB,MAAM,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,4BAA4B,CAAC,KAAqB;IAChE,MAAM,GAAG,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU;IACjB,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,kBAAkB,CACtC,kBAA2B,EAC3B,MAA8B;IAE9B,+DAA+D;IAC/D,IAAI,UAAU,EAAE;QAAE,OAAO;IACzB,IAAI,CAAC,kBAAkB;QAAE,OAAO;IAEhC,MAAM,CAAC,GAAG,MAAM,CAAC;IAEjB,kEAAkE;IAClE,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO;IAEvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,gEAAgE;IAChE,IACE,CAAC,CAAC,aAAa,KAAK,IAAI;QACxB,KAAK,GAAG,CAAC,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,EACjE,CAAC;QACD,OAAO;IACT,CAAC;IACD,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC;IAExB,wEAAwE;IACxE,6EAA6E;IAC7E,qDAAqD;IACrD,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,eAAe,GAAG,6BAAqB,EAAE,CAAC;QACpF,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,GAAG,OAAO,GAAG,6BAAqB,EAAE,CAAC;QAChE,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,+DAA+D;IAC/D,CAAC,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;YAC1B,qEAAqE;YACrE,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,8BAA8B;YAC9B,IAAI,EAAE,EAAE,CAAC;gBACP,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;gBAC1B,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC/B,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/cjs/index.d.ts

@@ -49,6 +49,8 @@
  * ```
  */
 export { AxonFlow } from './client';
+export { HEADER_READ_SCOPE, HEADER_USER_TOKEN, ReadScope, ReadScopeError } from './read-identity';
+export type { ReadIdentityOptions } from './read-identity';
 export { wasRedacted } from './types/connector';
 export type { ConnectorResponse, ConnectorMetadata, ConnectorInstallRequest, PolicyMatchInfo, DynamicPolicyInfo, DynamicPolicyMatch, ConnectorHealthStatus, PolicyInfo, MCPPolicyInfo, ExfiltrationCheckInfo, MCPCheckInputOptions, MCPCheckInputResponse, MCPCheckOutputOptions, MCPCheckOutputResponse, MCPExplainPolicy, } from './types/connector';
 export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, ObligationNotFulfillableError, } from './errors';
@@ -84,4 +86,5 @@ export type { TryRegistration } from './community';
 export { VERSION } from './version';
 import { AxonFlow } from './client';
 export default AxonFlow;
+export { registerAdapter } from './telemetry';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EAKrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EAKtB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,EACR,6BAA6B,GAC9B,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAK5C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,OAAO,CAAC;AACf,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,GACf,MAAM,OAAO,CAAC;AAGf,YAAY,EACV,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EAEZ,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EAEnB,aAAa,EAEb,oBAAoB,EACpB,qBAAqB,EAErB,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,EAE1B,WAAW,EAKX,eAAe,EACf,0BAA0B,EAC1B,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAEhB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,EAC3B,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,QAAQ,EACR,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,eAAe,EACf,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAExB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,uBAAuB,EAEvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGpF,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,YAAY,EACV,yBAAyB,EACzB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAUzB,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EACL,wBAAwB,EACxB,YAAY,EACZ,sBAAsB,EACtB,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,4BAA4B,EAC5B,+BAA+B,EAC/B,iCAAiC,EACjC,+BAA+B,EAC/B,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,MAAM,GACP,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAG3F,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClG,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EAKrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EAKtB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,EACR,6BAA6B,GAC9B,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAK5C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,OAAO,CAAC;AACf,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,GACf,MAAM,OAAO,CAAC;AAGf,YAAY,EACV,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EAEZ,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EAEnB,aAAa,EAEb,oBAAoB,EACpB,qBAAqB,EAErB,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,EAE1B,WAAW,EAKX,eAAe,EACf,0BAA0B,EAC1B,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAEhB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,EAC3B,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,QAAQ,EACR,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,eAAe,EACf,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAExB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,uBAAuB,EAEvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGpF,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,YAAY,EACV,yBAAyB,EACzB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAUzB,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EACL,wBAAwB,EACxB,YAAY,EACZ,sBAAsB,EACtB,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,4BAA4B,EAC5B,+BAA+B,EAC/B,iCAAiC,EACjC,+BAA+B,EAC/B,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,MAAM,GACP,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAG3F,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC;AAIxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/cjs/index.js

@@ -64,10 +64,16 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthZENAttribute = exports.AUTHZEN_UNKNOWN_STALE = exports.AUTHZEN_UNKNOWN_SCHEMA_MISMATCH = exports.AUTHZEN_UNKNOWN_RESOLUTION_FAILED = exports.AUTHZEN_UNKNOWN_REQUIRED_ABSENT = exports.AUTHZEN_UNKNOWN_NOT_SUPPLIED = exports.AUTHZEN_UNKNOWN_MALFORMED_VALUE = exports.AUTHZEN_UNKNOWN_CLOSURE_UNAVAILABLE = exports.AUTHZEN_UNKNOWN_CLOSURE_TRUNCATED = exports.AUTHZEN_PROFILE_HEADER = exports.AUTHZEN_PATH = exports.AUTHZEN_ATTRIBUTE_MARKER = exports.ExecutionHelpers = exports.WorkflowApprovalRequiredError = exports.WorkflowBlockedError = exports.AxonFlowLangGraphAdapter = exports.governTools = exports.GovernedTool = exports.WorkflowHelpers = exports.CATEGORY_MEDIA_PII = exports.CATEGORY_MEDIA_DOCUMENT = exports.CATEGORY_MEDIA_BIOMETRIC = exports.CATEGORY_MEDIA_SAFETY = exports.endpointPathMatches = exports.hasRequestRedaction = exports.DECIDE_PATH = exports.RESPONSE_REDACTION_PATH = exports.REQUEST_REDACTION_PATH = exports.VERDICT_NEEDS_APPROVAL = exports.VERDICT_DENY = exports.VERDICT_ALLOW = exports.CONTENT_TYPE_TEXT = exports.PHASE_RESPONSE = exports.PHASE_REQUEST = exports.OBLIGATION_REDACT_PII = exports.ObligationNotFulfillableError = exports.APIError = exports.IdempotencyKeyMismatchError = exports.TimeoutError = exports.RateLimitError = exports.AuthenticationError = exports.PolicyViolationError = exports.VersionConflictError = exports.PlanExecutionError = exports.ConnectorError = exports.ConnectionError = exports.ConfigurationError = exports.AxonFlowError = exports.wasRedacted = exports.AxonFlow = void 0;
-exports.VERSION = exports.registerTry = exports.toWire = exports.buildEnvelope = exports.AuthZENRefusal = exports.AuthZENProtocolError = exports.AuthZENDecision = void 0;
+exports.AUTHZEN_UNKNOWN_REQUIRED_ABSENT = exports.AUTHZEN_UNKNOWN_NOT_SUPPLIED = exports.AUTHZEN_UNKNOWN_MALFORMED_VALUE = exports.AUTHZEN_UNKNOWN_CLOSURE_UNAVAILABLE = exports.AUTHZEN_UNKNOWN_CLOSURE_TRUNCATED = exports.AUTHZEN_PROFILE_HEADER = exports.AUTHZEN_PATH = exports.AUTHZEN_ATTRIBUTE_MARKER = exports.ExecutionHelpers = exports.WorkflowApprovalRequiredError = exports.WorkflowBlockedError = exports.AxonFlowLangGraphAdapter = exports.governTools = exports.GovernedTool = exports.WorkflowHelpers = exports.CATEGORY_MEDIA_PII = exports.CATEGORY_MEDIA_DOCUMENT = exports.CATEGORY_MEDIA_BIOMETRIC = exports.CATEGORY_MEDIA_SAFETY = exports.endpointPathMatches = exports.hasRequestRedaction = exports.DECIDE_PATH = exports.RESPONSE_REDACTION_PATH = exports.REQUEST_REDACTION_PATH = exports.VERDICT_NEEDS_APPROVAL = exports.VERDICT_DENY = exports.VERDICT_ALLOW = exports.CONTENT_TYPE_TEXT = exports.PHASE_RESPONSE = exports.PHASE_REQUEST = exports.OBLIGATION_REDACT_PII = exports.ObligationNotFulfillableError = exports.APIError = exports.IdempotencyKeyMismatchError = exports.TimeoutError = exports.RateLimitError = exports.AuthenticationError = exports.PolicyViolationError = exports.VersionConflictError = exports.PlanExecutionError = exports.ConnectorError = exports.ConnectionError = exports.ConfigurationError = exports.AxonFlowError = exports.wasRedacted = exports.ReadScopeError = exports.ReadScope = exports.HEADER_USER_TOKEN = exports.HEADER_READ_SCOPE = exports.AxonFlow = void 0;
+exports.registerAdapter = exports.VERSION = exports.registerTry = exports.toWire = exports.buildEnvelope = exports.AuthZENRefusal = exports.AuthZENProtocolError = exports.AuthZENDecision = exports.AuthZENAttribute = exports.AUTHZEN_UNKNOWN_STALE = exports.AUTHZEN_UNKNOWN_SCHEMA_MISMATCH = exports.AUTHZEN_UNKNOWN_RESOLUTION_FAILED = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "AxonFlow", { enumerable: true, get: function () { return client_1.AxonFlow; } });
+// Read-path per-user identity and the platform's read-scope contract (#2922).
+var read_identity_1 = require("./read-identity");
+Object.defineProperty(exports, "HEADER_READ_SCOPE", { enumerable: true, get: function () { return read_identity_1.HEADER_READ_SCOPE; } });
+Object.defineProperty(exports, "HEADER_USER_TOKEN", { enumerable: true, get: function () { return read_identity_1.HEADER_USER_TOKEN; } });
+Object.defineProperty(exports, "ReadScope", { enumerable: true, get: function () { return read_identity_1.ReadScope; } });
+Object.defineProperty(exports, "ReadScopeError", { enumerable: true, get: function () { return read_identity_1.ReadScopeError; } });
 // Export connector utilities
 var connector_1 = require("./types/connector");
 Object.defineProperty(exports, "wasRedacted", { enumerable: true, get: function () { return connector_1.wasRedacted; } });
@@ -158,4 +164,8 @@ Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () {
 // Default export for convenience
 const client_2 = require("./client");
 exports.default = client_2.AxonFlow;
+// Telemetry: declaring a framework adapter on the existing heartbeat.
+// See telemetry.ts registerAdapter; it performs no I/O.
+var telemetry_1 = require("./telemetry");
+Object.defineProperty(exports, "registerAdapter", { enumerable: true, get: function () { return telemetry_1.registerAdapter; } });
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;;;;;;;;;;;;;;;;;;AAEH,mCAAoC;AAA3B,kGAAA,QAAQ,OAAA;AAEjB,6BAA6B;AAC7B,+CAAgD;AAAvC,wGAAA,WAAW,OAAA;AA6BpB,iDAAiD;AACjD,mCAckB;AAbhB,uGAAA,aAAa,OAAA;AACb,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AACd,4GAAA,kBAAkB,OAAA;AAClB,8GAAA,oBAAoB,OAAA;AACpB,8GAAA,oBAAoB,OAAA;AACpB,6GAAA,mBAAmB,OAAA;AACnB,wGAAA,cAAc,OAAA;AACd,sGAAA,YAAY,OAAA;AACZ,qHAAA,2BAA2B,OAAA;AAC3B,kGAAA,QAAQ,OAAA;AACR,uHAAA,6BAA6B,OAAA;AAI/B,kEAAkE;AAClE,2EAA2E;AAC3E,4CAA4C;AAC5C,6BAae;AAZb,4GAAA,qBAAqB,OAAA;AACrB,oGAAA,aAAa,OAAA;AACb,qGAAA,cAAc,OAAA;AACd,wGAAA,iBAAiB,OAAA;AACjB,oGAAA,aAAa,OAAA;AACb,mGAAA,YAAY,OAAA;AACZ,6GAAA,sBAAsB,OAAA;AACtB,6GAAA,sBAAsB,OAAA;AACtB,8GAAA,uBAAuB,OAAA;AACvB,kGAAA,WAAW,OAAA;AACX,0GAAA,mBAAmB,OAAA;AACnB,0GAAA,mBAAmB,OAAA;AA2FrB,6CAK0B;AAJxB,iHAAA,qBAAqB,OAAA;AACrB,oHAAA,wBAAwB,OAAA;AACxB,mHAAA,uBAAuB,OAAA;AACvB,8GAAA,kBAAkB,OAAA;AAmHpB,+CAAoD;AAA3C,4GAAA,eAAe,OAAA;AAExB,mEAAmE;AACnE,0DAAqE;AAA5D,6GAAA,YAAY,OAAA;AAAE,4GAAA,WAAW,OAAA;AAGlC,2BAA2B;AAC3B,kDAI8B;AAH5B,qHAAA,wBAAwB,OAAA;AACxB,iHAAA,oBAAoB,OAAA;AACpB,0HAAA,6BAA6B,OAAA;AA8C/B,+CAAqD;AAA5C,6GAAA,gBAAgB,OAAA;AAsDzB,0CAA0C;AAC1C,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,0EAA0E;AAC1E,gFAAgF;AAChF,sEAAsE;AACtE,sDAAoC;AAEpC,6EAA6E;AAC7E,8CAA8C;AAC9C,qCAkBmB;AAjBjB,mHAAA,wBAAwB,OAAA;AACxB,uGAAA,YAAY,OAAA;AACZ,iHAAA,sBAAsB,OAAA;AACtB,4HAAA,iCAAiC,OAAA;AACjC,8HAAA,mCAAmC,OAAA;AACnC,0HAAA,+BAA+B,OAAA;AAC/B,uHAAA,4BAA4B,OAAA;AAC5B,0HAAA,+BAA+B,OAAA;AAC/B,4HAAA,iCAAiC,OAAA;AACjC,0HAAA,+BAA+B,OAAA;AAC/B,gHAAA,qBAAqB,OAAA;AACrB,2GAAA,gBAAgB,OAAA;AAChB,0GAAA,eAAe,OAAA;AACf,+GAAA,oBAAoB,OAAA;AACpB,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,iGAAA,MAAM,OAAA;AAIR,4CAA4C;AAC5C,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AAGpB,iBAAiB;AACjB,qCAAoC;AAA3B,kGAAA,OAAO,OAAA;AAEhB,iCAAiC;AACjC,qCAAoC;AACpC,kBAAe,iBAAQ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;;;;;;;;;;;;;;;;;;AAEH,mCAAoC;AAA3B,kGAAA,QAAQ,OAAA;AAEjB,8EAA8E;AAC9E,iDAAkG;AAAzF,kHAAA,iBAAiB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAAE,0GAAA,SAAS,OAAA;AAAE,+GAAA,cAAc,OAAA;AAGxE,6BAA6B;AAC7B,+CAAgD;AAAvC,wGAAA,WAAW,OAAA;AA6BpB,iDAAiD;AACjD,mCAckB;AAbhB,uGAAA,aAAa,OAAA;AACb,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AACd,4GAAA,kBAAkB,OAAA;AAClB,8GAAA,oBAAoB,OAAA;AACpB,8GAAA,oBAAoB,OAAA;AACpB,6GAAA,mBAAmB,OAAA;AACnB,wGAAA,cAAc,OAAA;AACd,sGAAA,YAAY,OAAA;AACZ,qHAAA,2BAA2B,OAAA;AAC3B,kGAAA,QAAQ,OAAA;AACR,uHAAA,6BAA6B,OAAA;AAI/B,kEAAkE;AAClE,2EAA2E;AAC3E,4CAA4C;AAC5C,6BAae;AAZb,4GAAA,qBAAqB,OAAA;AACrB,oGAAA,aAAa,OAAA;AACb,qGAAA,cAAc,OAAA;AACd,wGAAA,iBAAiB,OAAA;AACjB,oGAAA,aAAa,OAAA;AACb,mGAAA,YAAY,OAAA;AACZ,6GAAA,sBAAsB,OAAA;AACtB,6GAAA,sBAAsB,OAAA;AACtB,8GAAA,uBAAuB,OAAA;AACvB,kGAAA,WAAW,OAAA;AACX,0GAAA,mBAAmB,OAAA;AACnB,0GAAA,mBAAmB,OAAA;AA2FrB,6CAK0B;AAJxB,iHAAA,qBAAqB,OAAA;AACrB,oHAAA,wBAAwB,OAAA;AACxB,mHAAA,uBAAuB,OAAA;AACvB,8GAAA,kBAAkB,OAAA;AAmHpB,+CAAoD;AAA3C,4GAAA,eAAe,OAAA;AAExB,mEAAmE;AACnE,0DAAqE;AAA5D,6GAAA,YAAY,OAAA;AAAE,4GAAA,WAAW,OAAA;AAGlC,2BAA2B;AAC3B,kDAI8B;AAH5B,qHAAA,wBAAwB,OAAA;AACxB,iHAAA,oBAAoB,OAAA;AACpB,0HAAA,6BAA6B,OAAA;AA8C/B,+CAAqD;AAA5C,6GAAA,gBAAgB,OAAA;AAsDzB,0CAA0C;AAC1C,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,0EAA0E;AAC1E,gFAAgF;AAChF,sEAAsE;AACtE,sDAAoC;AAEpC,6EAA6E;AAC7E,8CAA8C;AAC9C,qCAkBmB;AAjBjB,mHAAA,wBAAwB,OAAA;AACxB,uGAAA,YAAY,OAAA;AACZ,iHAAA,sBAAsB,OAAA;AACtB,4HAAA,iCAAiC,OAAA;AACjC,8HAAA,mCAAmC,OAAA;AACnC,0HAAA,+BAA+B,OAAA;AAC/B,uHAAA,4BAA4B,OAAA;AAC5B,0HAAA,+BAA+B,OAAA;AAC/B,4HAAA,iCAAiC,OAAA;AACjC,0HAAA,+BAA+B,OAAA;AAC/B,gHAAA,qBAAqB,OAAA;AACrB,2GAAA,gBAAgB,OAAA;AAChB,0GAAA,eAAe,OAAA;AACf,+GAAA,oBAAoB,OAAA;AACpB,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,iGAAA,MAAM,OAAA;AAIR,4CAA4C;AAC5C,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AAGpB,iBAAiB;AACjB,qCAAoC;AAA3B,kGAAA,OAAO,OAAA;AAEhB,iCAAiC;AACjC,qCAAoC;AACpC,kBAAe,iBAAQ,CAAC;AAExB,sEAAsE;AACtE,wDAAwD;AACxD,yCAA8C;AAArC,4GAAA,eAAe,OAAA"}

package/dist/cjs/read-identity.d.ts

@@ -0,0 +1,267 @@
+/**
+ * Read-path per-user identity and the platform's read-scope contract.
+ *
+ * Since platform #2922 the role-scoped read routes (audit / decisions /
+ * overrides) answer from the identity the CALLER presents, not from the tenant
+ * credential alone. The tenant credential in `Authorization` says which
+ * organization is asking; it does not say WHO. A caller that presents no
+ * per-user identity to an enterprise stack is not "a caller who sees
+ * everything" and is not "a caller who sees nothing by coincidence" — it is a
+ * caller the platform cannot scope, and every scoped read it makes returns
+ * zero rows by construction.
+ *
+ * This module carries the whole surface:
+ *
+ * - the per-user identity itself (`userToken` on the config for a client-wide
+ *   identity, the per-call `{ userToken }` option on a read, and
+ *   `client.asUser(token)` for a process acting on behalf of several people),
+ *   stamped as the `X-User-Token` header from exactly ONE site — the client's
+ *   `_fetch` wrapper, which every request goes through. There is no per-method
+ *   header plumbing, deliberately: the platform reads the header once in its
+ *   own proxy middleware (`platform/agent/proxy.go` `proxyAuthMiddleware`),
+ *   not per route, so a per-method sprinkle here would be a second, drifting
+ *   copy of a decision the platform makes in one place.
+ *
+ * - the response side of the same contract: `X-Axonflow-Read-Scope`, which the
+ *   platform stamps on every scoped read (`platform/orchestrator/read_scope.go`
+ *   `applyReadScopeHeader`) to say which of the three scopes the answer was
+ *   computed under. Without it, a 404 from explain and an empty list from
+ *   `listDecisions` are indistinguishable from "the row is not there", which is
+ *   how a governed read comes to report a confident, vacuous nothing.
+ */
+/**
+ * The request header carrying the per-user identity.
+ *
+ * This constant is the SDK's only spelling of it. The header is set in exactly
+ * one place (`applyReadIdentity`, called from the client's `_fetch`); if you
+ * find yourself setting it in a method, the method is the wrong altitude.
+ */
+export declare const HEADER_USER_TOKEN = "X-User-Token";
+/** The response header the platform stamps on scoped reads. */
+export declare const HEADER_READ_SCOPE = "X-Axonflow-Read-Scope";
+/**
+ * The scope the platform computed a role-scoped read under, taken from the
+ * `X-Axonflow-Read-Scope` response header.
+ *
+ * A plain string union widened with `(string & {})` rather than a closed enum,
+ * for one deliberate reason: a scope value a newer platform names and this
+ * build does not recognise must round-trip verbatim instead of being narrowed
+ * away or folded into a neighbour.
+ *
+ * Three named values are the platform's closed set. Two states are NOT in it
+ * and are deliberately distinct from each other and from the three:
+ *
+ * - `''` (ReadScope.Absent) — the response carried no such header. That is
+ *   what a pre-#2922 platform, a non-scoped route, or a proxy that dropped the
+ *   header looks like. It means "not stated", never "none": treating an absent
+ *   header as a scope of `none` would turn every older stack's perfectly good
+ *   read into a refusal.
+ *
+ * - any other non-empty string — preserved verbatim so a caller can see what it
+ *   was, and never a trigger for a refusal: this header is the platform's
+ *   account of a decision it has ALREADY made and applied, so an unrecognised
+ *   value is a reporting gap on our side, not a licence to invent an outcome.
+ */
+export type ReadScope = 'tenant' | 'own-rows' | 'none' | '' | (string & {});
+export declare const ReadScope: {
+    /** No `X-Axonflow-Read-Scope` header at all. Distinct from `None`. */
+    readonly Absent: ReadScope;
+    /**
+     * Tenant-wide: a tenant-wide role (admin / owner / policy_admin), or a
+     * Community / Community-SaaS deployment where the whole tenant is the one
+     * operator.
+     */
+    readonly Tenant: ReadScope;
+    /**
+     * Narrowed to the rows attributed to the identity presented. A miss under
+     * this scope means "not among yours", which is NOT the same statement as
+     * "not there" — see `ReadScopeError`.
+     */
+    readonly OwnRows: ReadScope;
+    /**
+     * The platform RESOLVED no per-user identity and the caller holds no
+     * tenant-wide authority, so it returned zero rows by construction. Under this
+     * scope a read CANNOT have returned data, so its empty answer says nothing
+     * about what exists.
+     *
+     * "Resolved none" is wider than "presented none", and the difference is worth
+     * knowing before you go looking in the wrong place. A token that validates
+     * perfectly still resolves to no identity when its address is one the
+     * platform reserves for SHARED, non-personal identities — the whole of
+     * `@axonflow.local` and `@axonflow.internal`, plus the community and
+     * evaluator addresses. Those name a pool of callers rather than a person, and
+     * scoping a read to one would return the pool, so the platform deliberately
+     * censuses them to nothing. A per-user token minted with an address in one of
+     * those domains therefore reads exactly like no token at all. (Easy to hit:
+     * the platform's own `generate-jwt.sh` defaults to
+     * `demo-user@axonflow.local`.)
+     */
+    readonly None: ReadScope;
+};
+/**
+ * The scope the platform reported on `response`.
+ *
+ * Trimmed and lower-cased, for the same reason the platform's own header
+ * helpers are: a proxy that normalises header casing or appends whitespace must
+ * not silently change the answer. The cost of getting that wrong is one-sided
+ * and quiet — a scope spelled `None` would fall to the unrecognised branch and
+ * the vacuous empty page it describes would come back as data again. An
+ * unrecognised value is otherwise unchanged, so it still round-trips.
+ */
+export declare function readScopeOf(response: Response | null | undefined): ReadScope;
+/**
+ * A role-scoped read whose answer was decided by the caller's identity scope
+ * rather than by the data.
+ *
+ * It exists because "no rows" and "no identity" are the same bytes on the wire.
+ * The platform distinguishes them in the `X-Axonflow-Read-Scope` header; this
+ * error is that distinction made visible, so a read that could not have
+ * succeeded reports a cause instead of a confident nothing.
+ *
+ * Two shapes, told apart by `identityMissing`:
+ *
+ * - `ReadScope.None` — no identity was RESOLVED; the read returned zero rows by
+ *   construction and says nothing about what exists. Remedy: present an
+ *   identity whose address is a real person's — see `ReadScope.None` for why a
+ *   valid token can still resolve to nothing.
+ * - `ReadScope.OwnRows` — an identity WAS resolved, and the row is not among
+ *   the ones attributed to it. That does NOT mean the row exists and belongs to
+ *   somebody else: the platform answers "not attributed to you" and "not there
+ *   at all" with the identical 404, deliberately, so that a miss cannot be used
+ *   to probe for another user's rows. This error therefore reports the scope,
+ *   not a claim about what exists.
+ *
+ * The presented token is never included in the message: it is safe to log,
+ * which is the point of putting the diagnosis in a type rather than in a string
+ * the caller assembles from the credential.
+ */
+export declare class ReadScopeError extends Error {
+    readonly scope: ReadScope;
+    readonly statusCode: number;
+    readonly resource: string;
+    readonly identifier?: string;
+    constructor(args: {
+        scope: ReadScope;
+        statusCode: number;
+        resource?: string;
+        identifier?: string;
+    });
+    /**
+     * Whether the read failed because no per-user identity was resolved, as
+     * opposed to one being resolved and not matching.
+     */
+    get identityMissing(): boolean;
+}
+/**
+ * The typed refusal for a scoped read that came back with nothing, or
+ * `undefined` when the scope does not explain the result.
+ *
+ * `undefined` for `ReadScope.Tenant` (the caller could see the whole tenant and
+ * it still was not there — a genuine miss), for `ReadScope.Absent` (the
+ * platform did not state a scope; see `ReadScope` for why absent is not none),
+ * and for any scope value this build does not recognise (a newer platform's;
+ * reporting a cause we cannot actually read would be a confident wrong
+ * diagnosis).
+ */
+export declare function readScopeErrorFor(args: {
+    resource: string;
+    identifier?: string;
+    scope: ReadScope;
+    statusCode: number;
+}): ReadScopeError | undefined;
+/**
+ * The typed refusal for a scoped read that came back EMPTY under a scope that
+ * could not have returned a row; `undefined` in every other case.
+ *
+ * One helper rather than a check at each read, because "the page is empty and
+ * the scope is none" is one rule and the reads that need it decode their body
+ * on more than one path each. A rule copied per return site is a rule that ends
+ * up applied on some of them.
+ *
+ * The emptiness guard is as load-bearing as the scope guard: a non-empty page
+ * is never turned into an error, whatever the header says. And only
+ * `ReadScope.None` refuses — an own-rows or tenant-wide read that legitimately
+ * found nothing is a real answer, and replacing it with an error would swap one
+ * wrong report for another.
+ */
+export declare function refuseVacuousScopedPage(response: Response | null | undefined, resource: string, rows: number): ReadScopeError | undefined;
+/** Options every read method accepts on top of its own. */
+export interface ReadIdentityOptions {
+    /**
+     * Per-user identity for THIS call only, overriding the client-wide
+     * `userToken`.
+     *
+     * Use it when one process acts on behalf of several people. An empty string
+     * is not an identity: it makes this read explicitly unidentified rather than
+     * falling back to the client-wide one. That distinction has to exist, because
+     * "unidentified" is a state the platform treats as different from every other
+     * (see `ReadScope.None`).
+     *
+     * For a process acting for several people across MANY methods, prefer
+     * `client.asUser(token)`: this option is only accepted by the read methods,
+     * while a derived client reaches every method with no carve-out.
+     */
+    userToken?: string;
+}
+/**
+ * Drop every credential from `headers` because the request is leaving the
+ * origin they were issued for.
+ *
+ * Case-insensitive on the way in: a caller may have spelled a header
+ * differently, and two spellings of one header is one credential that survives.
+ */
+export declare function stripCredentialsOffOrigin(headers: Record<string, string>): void;
+/**
+ * Stamp the per-user identity on `headers`, if there is one, for a request to
+ * `target` from a client configured for `endpoint`.
+ *
+ * Called from the client's `_fetch` — the one site every request goes through —
+ * so the identity travels on every request without any method knowing about it.
+ * That is on purpose and mirrors the platform: the agent reads `X-User-Token`
+ * once, in the middleware in front of every proxied route, and the routes
+ * themselves never look at it.
+ *
+ * **The header is NOT inert on the routes that are not reads.** It is validated
+ * on every route the agent proxies: `proxyAuthMiddleware` resolves it before
+ * dispatch and answers `401 invalid user token` for a present-but-INVALID one —
+ * on `/api/v1/plans`, `/api/v1/policies`, `/api/v1/connectors`,
+ * `/api/v1/process`, `/api/v1/budgets`, `/api/v1/cost`, `/api/v1/executions`
+ * and the rest. So a stale or rotated token does not degrade to "unscoped
+ * reads"; it turns `listConnectors`, `installConnector` and policy CRUD into
+ * 401s. Fail-closed is the right direction, but it puts the value in the same
+ * rotation story as `clientSecret`.
+ *
+ * Genuinely inert only on the routes the agent SERVES ITSELF — only `proxy.go`
+ * and `mcp_identity.go` read the header at all: `/api/request`,
+ * `/api/v1/decide` (whose identity comes from the request BODY's `user_token`,
+ * which is the whole reason the read path needed a surface of its own),
+ * `/api/v1/access/evaluation`, `/api/v1/static-policies/*`,
+ * `/api/v1/circuit-breaker/*`, `/api/v1/hitl/*`, `/api/v1/mcp/check-input`,
+ * `/api/v1/mcp/check-output`, `/api/v1/register`, `/api/policy/pre-check`,
+ * `/api/audit/llm-call` and `/health`.
+ *
+ * **It is never sent anywhere but the configured endpoint.** `target` is
+ * compared against `endpoint` and the header is removed when they differ. That
+ * guard exists because of redirects: the fetch spec strips `Authorization` on a
+ * cross-origin redirect, but its list is fixed and `X-User-Token` is not on it.
+ * Measured on Node 25: the redirect target received `authorization: undefined`
+ * and `x-user-token: SENTINEL`. The client follows redirects manually while an
+ * identity is attached, re-entering this function on each hop, so the identity
+ * is dropped the moment the origin changes.
+ *
+ * The token is a CREDENTIAL. It is written to the header and nowhere else: it
+ * is never logged, never carried in an error message, and never reaches
+ * telemetry — the heartbeat uses raw `fetch`, deliberately not the wrapper this
+ * is called from.
+ */
+/**
+ * @param headers the request's header bag, MUTATED in place.
+ *
+ * A plain record rather than a `Headers` instance, deliberately: this SDK
+ * builds its requests with plain objects, and converting them here would change
+ * the shape every existing caller and test observes on `fetch`. Widening the
+ * blast radius of an identity fix to "every request's header representation"
+ * is how a small change acquires a long tail of unrelated failures.
+ */
+export declare function applyReadIdentity(headers: Record<string, string>, target: URL, endpoint: string | undefined, token: string | undefined): void;
+//# sourceMappingURL=read-identity.d.ts.map

package/dist/cjs/read-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-identity.d.ts","sourceRoot":"","sources":["../../src/read-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE5E,eAAO,MAAM,SAAS;IACpB,sEAAsE;qBACxD,SAAS;IACvB;;;;OAIG;qBACiB,SAAS;IAC7B;;;;OAIG;sBACoB,SAAS;IAChC;;;;;;;;;;;;;;;;;OAiBG;mBACa,SAAS;CACjB,CAAC;AAEX;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,CAQ5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,IAAI,EAAE;QAChB,KAAK,EAAE,SAAS,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IA6BD;;;OAGG;IACH,IAAI,eAAe,IAAI,OAAO,CAE7B;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,SAAS,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,cAAc,GAAG,SAAS,CAK7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,cAAc,GAAG,SAAS,CAQ5B;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA4BD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAM/E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,GAAG,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,IAAI,CA0BN"}