agentid-sdk 0.1.31 → 0.1.32

package/dist/{agentid-agvYW2vW.d.mts → agentid-BgahmiuN.d.mts}

@@ -152,6 +152,8 @@ declare class AgentID {
     private resolveEffectiveStrictMode;
     private maybeRaiseStrictIngestDependencyError;
     private shouldRunLocalInjectionScan;
+    private shouldRefreshCapabilityConfigBeforeLocalEnforcement;
+    private refreshCapabilityConfigBeforeLocalEnforcement;
     private applyLocalPolicyChecks;
     prepareInputForDispatch(params: {
         input: string;

package/dist/{agentid-agvYW2vW.d.ts → agentid-BgahmiuN.d.ts}

@@ -152,6 +152,8 @@ declare class AgentID {
     private resolveEffectiveStrictMode;
     private maybeRaiseStrictIngestDependencyError;
     private shouldRunLocalInjectionScan;
+    private shouldRefreshCapabilityConfigBeforeLocalEnforcement;
+    private refreshCapabilityConfigBeforeLocalEnforcement;
     private applyLocalPolicyChecks;
     prepareInputForDispatch(params: {
         input: string;

package/dist/{chunk-WGJ7SVQB.mjs → chunk-Z2M5A4YZ.mjs}

@@ -1810,7 +1810,7 @@ function getInjectionScanner() {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.31".trim().length > 0 ? "js-0.1.31" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.32".trim().length > 0 ? "js-0.1.32" : FALLBACK_SDK_VERSION;
 
 // src/local-security-enforcer.ts
 var DEFAULT_FAIL_OPEN_CONFIG = {
@@ -2058,8 +2058,11 @@ async function fetchCapabilityConfigAttempt(params) {
   try {
     const res = await fetch(`${normalizeBaseUrl2(params.baseUrl)}/agent/config`, {
       method: "GET",
+      cache: "no-store",
       headers: {
         "Content-Type": "application/json",
+        "Cache-Control": "no-cache, no-store, max-age=0",
+        Pragma: "no-cache",
         "x-agentid-api-key": params.apiKey,
         "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER
       },
@@ -2659,6 +2662,25 @@ var AgentID = class {
     }
     return config.block_on_heuristic;
   }
+  shouldRefreshCapabilityConfigBeforeLocalEnforcement(config) {
+    if (config.shadow_mode) {
+      return false;
+    }
+    return this.shouldRunLocalInjectionScan(config) || config.block_db_access || config.block_code_execution || config.block_pii_leakage;
+  }
+  async refreshCapabilityConfigBeforeLocalEnforcement(params) {
+    if (!this.shouldRefreshCapabilityConfigBeforeLocalEnforcement(params.capabilityConfig)) {
+      return {
+        capabilityConfig: params.capabilityConfig,
+        sdkConfigFetchMs: params.sdkConfigFetchMs
+      };
+    }
+    const refreshed = await this.getCapabilityConfigWithTelemetry(true, params.options);
+    return {
+      capabilityConfig: refreshed.capabilityConfig,
+      sdkConfigFetchMs: params.sdkConfigFetchMs + refreshed.sdkConfigFetchMs
+    };
+  }
   async applyLocalPolicyChecks(params) {
     const localScanStartedAt = Date.now();
     if (params.runPromptInjectionCheck && params.input && this.shouldRunLocalInjectionScan(params.capabilityConfig)) {
@@ -2715,7 +2737,7 @@ var AgentID = class {
   }
   async prepareInputForDispatch(params, options) {
     const effectiveApiKey = this.resolveApiKey(options?.apiKey);
-    const { capabilityConfig, sdkConfigFetchMs } = await this.getCapabilityConfigWithTelemetry(
+    let { capabilityConfig, sdkConfigFetchMs } = await this.getCapabilityConfigWithTelemetry(
       false,
       options
     );
@@ -2727,6 +2749,13 @@ var AgentID = class {
         sdkLocalScanMs: 0
       };
     }
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+      capabilityConfig,
+      sdkConfigFetchMs,
+      options
+    });
+    capabilityConfig = refreshedConfig.capabilityConfig;
+    sdkConfigFetchMs = refreshedConfig.sdkConfigFetchMs;
     const enforced = await this.applyLocalPolicyChecks({
       input: params.input,
       systemId: params.systemId,
@@ -2750,20 +2779,25 @@ var AgentID = class {
       capabilityConfig: params.capabilityConfig,
       sdkConfigFetchMs: params.sdkConfigFetchMs
     } : await this.getCapabilityConfigWithTelemetry(false, options);
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+      capabilityConfig: resolvedConfig.capabilityConfig,
+      sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
+      options
+    });
     const enforced = await this.applyLocalPolicyChecks({
       input: params.input,
       systemId: params.systemId,
       stream: params.stream,
-      capabilityConfig: resolvedConfig.capabilityConfig,
+      capabilityConfig: refreshedConfig.capabilityConfig,
       apiKey: effectiveApiKey,
       clientEventId: params.clientEventId,
-      sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
+      sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs,
       runPromptInjectionCheck: true
     });
     return {
       sanitizedInput: enforced.sanitizedInput,
-      capabilityConfig: resolvedConfig.capabilityConfig,
-      sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
+      capabilityConfig: refreshedConfig.capabilityConfig,
+      sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs,
       sdkLocalScanMs: enforced.sdkLocalScanMs
     };
   }
@@ -2771,11 +2805,16 @@ var AgentID = class {
     if (!input) {
       return;
     }
-    const { capabilityConfig, sdkConfigFetchMs } = await this.getCapabilityConfigWithTelemetry(
+    const initialConfig = await this.getCapabilityConfigWithTelemetry(
       false,
       options
     );
-    if (!this.shouldRunLocalInjectionScan(capabilityConfig)) {
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+      capabilityConfig: initialConfig.capabilityConfig,
+      sdkConfigFetchMs: initialConfig.sdkConfigFetchMs,
+      options
+    });
+    if (!this.shouldRunLocalInjectionScan(refreshedConfig.capabilityConfig)) {
       return;
     }
     const effectiveApiKey = this.resolveApiKey(options?.apiKey);
@@ -2791,7 +2830,7 @@ var AgentID = class {
       eventId: options?.clientEventId,
       clientEventId: options?.clientEventId,
       telemetryMetadata: buildSdkTimingMetadata({
-        sdkConfigFetchMs
+        sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs
       })
     });
   }

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, P as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-agvYW2vW.mjs';
+export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, P as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-BgahmiuN.mjs';
 
 type PIIMapping = Record<string, string>;
 declare class PIIManager {

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, P as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-agvYW2vW.js';
+export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, P as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-BgahmiuN.js';
 
 type PIIMapping = Record<string, string>;
 declare class PIIManager {

package/dist/index.js

@@ -75,7 +75,7 @@ var OpenAIAdapter = class {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.31".trim().length > 0 ? "js-0.1.31" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.32".trim().length > 0 ? "js-0.1.32" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;
@@ -1432,8 +1432,11 @@ async function fetchCapabilityConfigAttempt(params) {
   try {
     const res = await fetch(`${normalizeBaseUrl(params.baseUrl)}/agent/config`, {
       method: "GET",
+      cache: "no-store",
       headers: {
         "Content-Type": "application/json",
+        "Cache-Control": "no-cache, no-store, max-age=0",
+        Pragma: "no-cache",
         "x-agentid-api-key": params.apiKey,
         "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER
       },
@@ -2692,6 +2695,25 @@ var AgentID = class {
     }
     return config.block_on_heuristic;
   }
+  shouldRefreshCapabilityConfigBeforeLocalEnforcement(config) {
+    if (config.shadow_mode) {
+      return false;
+    }
+    return this.shouldRunLocalInjectionScan(config) || config.block_db_access || config.block_code_execution || config.block_pii_leakage;
+  }
+  async refreshCapabilityConfigBeforeLocalEnforcement(params) {
+    if (!this.shouldRefreshCapabilityConfigBeforeLocalEnforcement(params.capabilityConfig)) {
+      return {
+        capabilityConfig: params.capabilityConfig,
+        sdkConfigFetchMs: params.sdkConfigFetchMs
+      };
+    }
+    const refreshed = await this.getCapabilityConfigWithTelemetry(true, params.options);
+    return {
+      capabilityConfig: refreshed.capabilityConfig,
+      sdkConfigFetchMs: params.sdkConfigFetchMs + refreshed.sdkConfigFetchMs
+    };
+  }
   async applyLocalPolicyChecks(params) {
     const localScanStartedAt = Date.now();
     if (params.runPromptInjectionCheck && params.input && this.shouldRunLocalInjectionScan(params.capabilityConfig)) {
@@ -2748,7 +2770,7 @@ var AgentID = class {
   }
   async prepareInputForDispatch(params, options) {
     const effectiveApiKey = this.resolveApiKey(options?.apiKey);
-    const { capabilityConfig, sdkConfigFetchMs } = await this.getCapabilityConfigWithTelemetry(
+    let { capabilityConfig, sdkConfigFetchMs } = await this.getCapabilityConfigWithTelemetry(
       false,
       options
     );
@@ -2760,6 +2782,13 @@ var AgentID = class {
         sdkLocalScanMs: 0
       };
     }
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+      capabilityConfig,
+      sdkConfigFetchMs,
+      options
+    });
+    capabilityConfig = refreshedConfig.capabilityConfig;
+    sdkConfigFetchMs = refreshedConfig.sdkConfigFetchMs;
     const enforced = await this.applyLocalPolicyChecks({
       input: params.input,
       systemId: params.systemId,
@@ -2783,20 +2812,25 @@ var AgentID = class {
       capabilityConfig: params.capabilityConfig,
       sdkConfigFetchMs: params.sdkConfigFetchMs
     } : await this.getCapabilityConfigWithTelemetry(false, options);
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+      capabilityConfig: resolvedConfig.capabilityConfig,
+      sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
+      options
+    });
     const enforced = await this.applyLocalPolicyChecks({
       input: params.input,
       systemId: params.systemId,
       stream: params.stream,
-      capabilityConfig: resolvedConfig.capabilityConfig,
+      capabilityConfig: refreshedConfig.capabilityConfig,
       apiKey: effectiveApiKey,
       clientEventId: params.clientEventId,
-      sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
+      sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs,
       runPromptInjectionCheck: true
     });
     return {
       sanitizedInput: enforced.sanitizedInput,
-      capabilityConfig: resolvedConfig.capabilityConfig,
-      sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
+      capabilityConfig: refreshedConfig.capabilityConfig,
+      sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs,
       sdkLocalScanMs: enforced.sdkLocalScanMs
     };
   }
@@ -2804,11 +2838,16 @@ var AgentID = class {
     if (!input) {
       return;
     }
-    const { capabilityConfig, sdkConfigFetchMs } = await this.getCapabilityConfigWithTelemetry(
+    const initialConfig = await this.getCapabilityConfigWithTelemetry(
       false,
       options
     );
-    if (!this.shouldRunLocalInjectionScan(capabilityConfig)) {
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+      capabilityConfig: initialConfig.capabilityConfig,
+      sdkConfigFetchMs: initialConfig.sdkConfigFetchMs,
+      options
+    });
+    if (!this.shouldRunLocalInjectionScan(refreshedConfig.capabilityConfig)) {
       return;
     }
     const effectiveApiKey = this.resolveApiKey(options?.apiKey);
@@ -2824,7 +2863,7 @@ var AgentID = class {
       eventId: options?.clientEventId,
       clientEventId: options?.clientEventId,
       telemetryMetadata: buildSdkTimingMetadata({
-        sdkConfigFetchMs
+        sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs
       })
     });
   }

package/dist/index.mjs

@@ -7,7 +7,7 @@ import {
   SecurityBlockError,
   getInjectionScanner,
   scanWithRegex
-} from "./chunk-WGJ7SVQB.mjs";
+} from "./chunk-Z2M5A4YZ.mjs";
 export {
   AgentID,
   DependencyError,

package/dist/langchain.d.mts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { A as AgentID } from './agentid-agvYW2vW.mjs';
+import { A as AgentID } from './agentid-BgahmiuN.mjs';
 
 /**
  * LangChainJS callback handler (dependency-free shape).

package/dist/langchain.d.ts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { A as AgentID } from './agentid-agvYW2vW.js';
+import { A as AgentID } from './agentid-BgahmiuN.js';
 
 /**
  * LangChainJS callback handler (dependency-free shape).

package/dist/langchain.js

@@ -27,7 +27,7 @@ var import_base = require("@langchain/core/callbacks/base");
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.31".trim().length > 0 ? "js-0.1.31" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.32".trim().length > 0 ? "js-0.1.32" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var REGION_ANCHORS = {

package/dist/langchain.mjs

@@ -1,6 +1,6 @@
 import {
   SecurityBlockError
-} from "./chunk-WGJ7SVQB.mjs";
+} from "./chunk-Z2M5A4YZ.mjs";
 
 // src/langchain.ts
 import { BaseCallbackHandler } from "@langchain/core/callbacks/base";

package/dist/transparency-badge.d.mts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { T as TransparencyMetadata } from './agentid-agvYW2vW.mjs';
+import { T as TransparencyMetadata } from './agentid-BgahmiuN.mjs';
 
 type AgentIDTransparencyBadgeTelemetry = {
     systemId: string;

package/dist/transparency-badge.d.ts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { T as TransparencyMetadata } from './agentid-agvYW2vW.js';
+import { T as TransparencyMetadata } from './agentid-BgahmiuN.js';
 
 type AgentIDTransparencyBadgeTelemetry = {
     systemId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentid-sdk",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "description": "AgentID JavaScript/TypeScript SDK for guard, ingest, tracing, and analytics.",
   "license": "MIT",
   "homepage": "https://agentid.ai",