@highflame/sdk 0.3.2 → 0.3.4

package/dist/index.cjs

@@ -281,7 +281,7 @@ var Highflame = class {
     const baseUrl = options.baseUrl ?? SAAS_BASE_URL;
     const tokenUrl = options.tokenUrl ?? SAAS_TOKEN_URL;
     this.#baseUrl = baseUrl.replace(/\/$/, "");
-    this.#tokenUrl = options.apiKey.startsWith("hf_sk") ? tokenUrl : void 0;
+    this.#tokenUrl = options.apiKey.startsWith("hf_sk") || options.apiKey.startsWith("hfa_") ? tokenUrl : void 0;
     this.#apiKey = options.apiKey;
     this.#timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
     this.#maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;

package/dist/index.d.cts

@@ -36,9 +36,9 @@ interface EvidenceSource {
 /**  */
 interface ConditionResult {
     /** Actual value from the context (null if field was missing). */
-    actual: Record<string, unknown>;
+    actual: unknown;
     /** Expected value (threshold from the rule). */
-    expected: Record<string, unknown>;
+    expected: unknown;
     /** Context field name. */
     field: string;
     /** Whether this condition matched. */
@@ -285,13 +285,13 @@ interface DeterminingPolicy {
 /**  */
 interface EvaluatedExpression {
     /** Actual value from the context. */
-    actual?: Record<string, unknown>;
+    actual?: unknown;
     /** Child expression (for not nodes). */
     child?: EvaluatedExpression;
     /** Child expressions (for and/or nodes). */
     children?: EvaluatedExpression[];
     /** Expected value (threshold from the rule). */
-    expected?: Record<string, unknown>;
+    expected?: unknown;
     /** Context field name. */
     field?: string;
     /** Expression kind: comparison, contains, like, has, and, or, not, raw. */
@@ -506,8 +506,8 @@ interface ProblemDetails {
 interface StreamEvent {
     /** Event payload (DetectorResult for detector_result, GuardResponse for decision). */
     data: Record<string, unknown>;
-    /** Event type: detector_result (per-detector), decision (final), or error. */
-    type: "detector_result" | "decision" | "error";
+    /** Event type: detector_result (per-detector), decision (final), error, or message (keepalive/info). */
+    type: "detector_result" | "decision" | "error" | "message";
 }
 /** Response from the token exchange endpoint (used by SDK auth). */
 interface TokenResponse {
@@ -568,11 +568,11 @@ interface Logger {
     warn(message: string, ...args: unknown[]): void;
 }
 interface HighflameOptions {
-    /** Service API key (`hf_sk_...`) or a raw JWT. */
+    /** Service API key (`hf_sk_...`), agent API key (`hfa_...`), or a raw JWT. */
     apiKey: string;
     /** Base URL of the guard service. Defaults to Highflame SaaS. */
     baseUrl?: string;
-    /** Token exchange URL. Defaults to Highflame SaaS. Only used for `hf_sk_*` keys. */
+    /** Token exchange URL. Defaults to Highflame SaaS. Used for `hf_sk_*` and `hfa_*` keys. */
     tokenUrl?: string;
     /** Request timeout in milliseconds. Default: 30000. */
     timeout?: number;

package/dist/index.d.ts

@@ -36,9 +36,9 @@ interface EvidenceSource {
 /**  */
 interface ConditionResult {
     /** Actual value from the context (null if field was missing). */
-    actual: Record<string, unknown>;
+    actual: unknown;
     /** Expected value (threshold from the rule). */
-    expected: Record<string, unknown>;
+    expected: unknown;
     /** Context field name. */
     field: string;
     /** Whether this condition matched. */
@@ -285,13 +285,13 @@ interface DeterminingPolicy {
 /**  */
 interface EvaluatedExpression {
     /** Actual value from the context. */
-    actual?: Record<string, unknown>;
+    actual?: unknown;
     /** Child expression (for not nodes). */
     child?: EvaluatedExpression;
     /** Child expressions (for and/or nodes). */
     children?: EvaluatedExpression[];
     /** Expected value (threshold from the rule). */
-    expected?: Record<string, unknown>;
+    expected?: unknown;
     /** Context field name. */
     field?: string;
     /** Expression kind: comparison, contains, like, has, and, or, not, raw. */
@@ -506,8 +506,8 @@ interface ProblemDetails {
 interface StreamEvent {
     /** Event payload (DetectorResult for detector_result, GuardResponse for decision). */
     data: Record<string, unknown>;
-    /** Event type: detector_result (per-detector), decision (final), or error. */
-    type: "detector_result" | "decision" | "error";
+    /** Event type: detector_result (per-detector), decision (final), error, or message (keepalive/info). */
+    type: "detector_result" | "decision" | "error" | "message";
 }
 /** Response from the token exchange endpoint (used by SDK auth). */
 interface TokenResponse {
@@ -568,11 +568,11 @@ interface Logger {
     warn(message: string, ...args: unknown[]): void;
 }
 interface HighflameOptions {
-    /** Service API key (`hf_sk_...`) or a raw JWT. */
+    /** Service API key (`hf_sk_...`), agent API key (`hfa_...`), or a raw JWT. */
     apiKey: string;
     /** Base URL of the guard service. Defaults to Highflame SaaS. */
     baseUrl?: string;
-    /** Token exchange URL. Defaults to Highflame SaaS. Only used for `hf_sk_*` keys. */
+    /** Token exchange URL. Defaults to Highflame SaaS. Used for `hf_sk_*` and `hfa_*` keys. */
     tokenUrl?: string;
     /** Request timeout in milliseconds. Default: 30000. */
     timeout?: number;

package/dist/index.js

@@ -243,7 +243,7 @@ var Highflame = class {
     const baseUrl = options.baseUrl ?? SAAS_BASE_URL;
     const tokenUrl = options.tokenUrl ?? SAAS_TOKEN_URL;
     this.#baseUrl = baseUrl.replace(/\/$/, "");
-    this.#tokenUrl = options.apiKey.startsWith("hf_sk") ? tokenUrl : void 0;
+    this.#tokenUrl = options.apiKey.startsWith("hf_sk") || options.apiKey.startsWith("hfa_") ? tokenUrl : void 0;
     this.#apiKey = options.apiKey;
     this.#timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
     this.#maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/sdk",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "JavaScript/TypeScript SDK for Highflame AI guardrails",
   "type": "module",
   "sideEffects": false,