agentid-sdk 0.1.40 → 0.1.41

package/dist/{agentid-BWlN5KCq.d.mts → agentid-Mjh8rXn0.d.mts}

@@ -263,6 +263,7 @@ declare class AgentID {
     private localEnforcer;
     private injectionScanner;
     private recentGuardVerdicts;
+    private pendingGuardRequests;
     constructor(config?: AgentIDConfig);
     get piiMasking(): boolean | undefined;
     get secretMasking(): boolean | undefined;

package/dist/{agentid-BWlN5KCq.d.ts → agentid-Mjh8rXn0.d.ts}

@@ -263,6 +263,7 @@ declare class AgentID {
     private localEnforcer;
     private injectionScanner;
     private recentGuardVerdicts;
+    private pendingGuardRequests;
     constructor(config?: AgentIDConfig);
     get piiMasking(): boolean | undefined;
     get secretMasking(): boolean | undefined;

package/dist/{chunk-25SZBEYX.mjs → chunk-L2WVWRAC.mjs}

@@ -2290,7 +2290,7 @@ function getInjectionScanner() {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.40".trim().length > 0 ? "js-0.1.40" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.41".trim().length > 0 ? "js-0.1.41" : FALLBACK_SDK_VERSION;
 
 // src/local-security-enforcer.ts
 var DEFAULT_FAIL_OPEN_CONFIG = {
@@ -2708,7 +2708,7 @@ var GUARD_MAX_ATTEMPTS = 3;
 var GUARD_RETRY_DELAYS_MS = [250, 500];
 var INGEST_MAX_ATTEMPTS = 3;
 var INGEST_RETRY_DELAYS_MS = [250, 500];
-var GUARD_VERDICT_CACHE_TTL_MS = 0;
+var GUARD_VERDICT_CACHE_TTL_MS = 1500;
 var MAX_INGEST_TEXT_CHARS = 32e3;
 var OPENAI_TELEMETRY_FIELD = "agentid_telemetry";
 function normalizeBaseUrl3(baseUrl) {
@@ -3556,6 +3556,7 @@ var AgentID = class {
   constructor(config = {}) {
     this.injectionScanner = getInjectionScanner();
     this.recentGuardVerdicts = /* @__PURE__ */ new Map();
+    this.pendingGuardRequests = /* @__PURE__ */ new Map();
     this.apiKey = resolveConfiguredApiKey(config.apiKey);
     this.baseUrl = normalizeBaseUrl3(config.baseUrl ?? "https://app.getagentid.com/api/v1");
     this.configuredPiiMasking = typeof config.piiMasking === "boolean" ? config.piiMasking : null;
@@ -3646,13 +3647,14 @@ var AgentID = class {
     }
     return createEventId2();
   }
-  buildGuardCacheKey(params) {
+  buildGuardCacheKey(params, apiKey) {
     if (!params.system_id || !params.input) {
       return null;
     }
     const userId = params.user_id?.trim() ?? "";
-    const normalizedInput = params.input.slice(0, 2048);
-    return `${params.system_id}|${userId}|${normalizedInput.length}|${normalizedInput}`;
+    const normalizedInput = params.input.trim().replace(/\s+/g, " ").slice(0, 2048);
+    const keyPrefix = apiKey?.slice(0, 24) ?? "";
+    return `${keyPrefix}|${params.system_id}|${userId}|${normalizedInput.length}|${normalizedInput}`;
   }
   readCachedGuardVerdict(cacheKey) {
     if (!cacheKey) return null;
@@ -3665,7 +3667,7 @@ var AgentID = class {
     return cached.verdict;
   }
   cacheGuardVerdict(cacheKey, verdict) {
-    if (!cacheKey || !verdict.allowed || GUARD_VERDICT_CACHE_TTL_MS <= 0) {
+    if (!cacheKey || GUARD_VERDICT_CACHE_TTL_MS <= 0) {
       return;
     }
     this.recentGuardVerdicts.set(cacheKey, {
@@ -4163,98 +4165,122 @@ var AgentID = class {
       ...params,
       client_capabilities: params.client_capabilities ?? this.buildClientCapabilities()
     };
-    const guardCacheKey = this.buildGuardCacheKey(payload);
+    const guardCacheKey = this.buildGuardCacheKey(payload, effectiveApiKey);
     const cachedVerdict = this.readCachedGuardVerdict(guardCacheKey);
     if (cachedVerdict) {
       return withGuardLatency(cachedVerdict);
     }
-    const correlationId = createCorrelationId(payload.client_event_id);
-    let lastStatusCode = null;
-    let lastAbort = false;
-    let lastError = null;
-    for (let attempt = 0; attempt < GUARD_MAX_ATTEMPTS; attempt += 1) {
-      const controller = new AbortController();
-      const timeoutId = setTimeout(() => controller.abort(), this.guardTimeoutMs);
-      try {
-        const res = await fetch(`${this.baseUrl}/guard`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "x-agentid-api-key": effectiveApiKey,
-            "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER,
-            "x-correlation-id": correlationId
-          },
-          body: JSON.stringify(payload),
-          signal: controller.signal
-        });
-        lastStatusCode = res.status;
-        const responseBody = await safeReadJson2(res);
-        if (responseBody && typeof responseBody.allowed === "boolean") {
-          const rawVerdict = responseBody;
-          const transparency = coerceTransparencyMetadata(rawVerdict.transparency);
-          const verdict = {
-            ...rawVerdict,
-            ...transparency ? { transparency } : {}
-          };
-          const infrastructureFailure = verdict.allowed === false && (isInfrastructureGuardReason(verdict.reason) || !verdict.reason && res.status >= 500);
-          if (infrastructureFailure) {
-            if (attempt < GUARD_MAX_ATTEMPTS - 1) {
-              await waitForRetry(attempt);
-              continue;
-            }
-            if (effectiveStrictMode) {
+    const pendingGuardRequest = guardCacheKey ? this.pendingGuardRequests.get(guardCacheKey) : void 0;
+    if (pendingGuardRequest) {
+      return withGuardLatency(await pendingGuardRequest.promise);
+    }
+    const executeGuardRequest = async () => {
+      const correlationId = createCorrelationId(payload.client_event_id);
+      let lastStatusCode = null;
+      let lastAbort = false;
+      let lastError = null;
+      for (let attempt = 0; attempt < GUARD_MAX_ATTEMPTS; attempt += 1) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.guardTimeoutMs);
+        try {
+          const res = await fetch(`${this.baseUrl}/guard`, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "x-agentid-api-key": effectiveApiKey,
+              "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER,
+              "x-correlation-id": correlationId
+            },
+            body: JSON.stringify(payload),
+            signal: controller.signal
+          });
+          lastStatusCode = res.status;
+          const responseBody = await safeReadJson2(res);
+          if (responseBody && typeof responseBody.allowed === "boolean") {
+            const rawVerdict = responseBody;
+            const transparency = coerceTransparencyMetadata(rawVerdict.transparency);
+            const verdict = {
+              ...rawVerdict,
+              ...transparency ? { transparency } : {}
+            };
+            const infrastructureFailure = verdict.allowed === false && (isInfrastructureGuardReason(verdict.reason) || !verdict.reason && res.status >= 500);
+            if (infrastructureFailure) {
+              if (attempt < GUARD_MAX_ATTEMPTS - 1) {
+                await waitForRetry(attempt);
+                continue;
+              }
+              if (effectiveStrictMode) {
+                console.warn(
+                  `[AgentID] Guard API infrastructure failure in strict mode (${verdict.reason ?? `http_${res.status}`}). Blocking request.`
+                );
+                return withGuardLatency({
+                  allowed: false,
+                  reason: verdict.reason ?? "network_error_strict_mode"
+                });
+              }
               console.warn(
-                `[AgentID] Guard API infrastructure failure in strict mode (${verdict.reason ?? `http_${res.status}`}). Blocking request.`
+                `[AgentID] Guard API infrastructure fallback in fail-open mode (${verdict.reason ?? `http_${res.status}`}).`
               );
-              return withGuardLatency({
-                allowed: false,
-                reason: verdict.reason ?? "network_error_strict_mode"
+              this.logGuardFallback({
+                reason: verdict.reason ?? `http_${res.status}`,
+                status: "upstream_error",
+                guardParams: params,
+                apiKey: effectiveApiKey
               });
+              return withGuardLatency(
+                this.buildFailOpenGuardVerdict(
+                  "system_failure_fail_open",
+                  params.input,
+                  { apiKey: effectiveApiKey }
+                )
+              );
             }
-            console.warn(
-              `[AgentID] Guard API infrastructure fallback in fail-open mode (${verdict.reason ?? `http_${res.status}`}).`
-            );
+            this.cacheGuardVerdict(guardCacheKey, verdict);
+            return withGuardLatency(verdict);
+          }
+          if (!res.ok) {
+            if (res.status >= 500 && attempt < GUARD_MAX_ATTEMPTS - 1) {
+              await waitForRetry(attempt);
+              continue;
+            }
+            throw new Error(`API Error ${res.status}`);
+          }
+          throw new Error("Invalid guard response");
+        } catch (error) {
+          lastError = error;
+          const isAbortError2 = Boolean(
+            error && typeof error === "object" && error.name === "AbortError"
+          );
+          lastAbort = isAbortError2;
+          if (attempt < GUARD_MAX_ATTEMPTS - 1) {
+            await waitForRetry(attempt);
+            continue;
+          }
+          if (isAbortError2) {
+            const timeoutMessage = "AgentID API Warning: Connection timeout exceeded.";
+            console.warn(timeoutMessage);
             this.logGuardFallback({
-              reason: verdict.reason ?? `http_${res.status}`,
-              status: "upstream_error",
+              reason: "timeout_fallback",
+              status: "latency_timeout",
               guardParams: params,
               apiKey: effectiveApiKey
             });
+            if (effectiveStrictMode) {
+              return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
+            }
             return withGuardLatency(
-              this.buildFailOpenGuardVerdict(
-                "system_failure_fail_open",
-                params.input,
-                { apiKey: effectiveApiKey }
-              )
+              this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+                apiKey: effectiveApiKey
+              })
             );
           }
-          this.cacheGuardVerdict(guardCacheKey, verdict);
-          return withGuardLatency(verdict);
-        }
-        if (!res.ok) {
-          if (res.status >= 500 && attempt < GUARD_MAX_ATTEMPTS - 1) {
-            await waitForRetry(attempt);
-            continue;
-          }
-          throw new Error(`API Error ${res.status}`);
-        }
-        throw new Error("Invalid guard response");
-      } catch (error) {
-        lastError = error;
-        const isAbortError2 = Boolean(
-          error && typeof error === "object" && error.name === "AbortError"
-        );
-        lastAbort = isAbortError2;
-        if (attempt < GUARD_MAX_ATTEMPTS - 1) {
-          await waitForRetry(attempt);
-          continue;
-        }
-        if (isAbortError2) {
-          const timeoutMessage = "AgentID API Warning: Connection timeout exceeded.";
-          console.warn(timeoutMessage);
+          console.warn(
+            effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
+            error
+          );
           this.logGuardFallback({
-            reason: "timeout_fallback",
-            status: "latency_timeout",
+            reason: "guard_unreachable",
+            status: "guard_unreachable",
             guardParams: params,
             apiKey: effectiveApiKey
           });
@@ -4262,67 +4288,62 @@ var AgentID = class {
             return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
           }
           return withGuardLatency(
-            this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+            this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
               apiKey: effectiveApiKey
             })
           );
+        } finally {
+          clearTimeout(timeoutId);
         }
-        console.warn(
-          effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
-          error
-        );
-        this.logGuardFallback({
-          reason: "guard_unreachable",
-          status: "guard_unreachable",
-          guardParams: params,
-          apiKey: effectiveApiKey
-        });
+      }
+      if (lastAbort) {
         if (effectiveStrictMode) {
           return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
         }
         return withGuardLatency(
-          this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
+          this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
             apiKey: effectiveApiKey
           })
         );
-      } finally {
-        clearTimeout(timeoutId);
       }
-    }
-    if (lastAbort) {
+      if (typeof lastStatusCode === "number" && lastStatusCode >= 500) {
+        if (effectiveStrictMode) {
+          return withGuardLatency({ allowed: false, reason: "server_error" });
+        }
+        return withGuardLatency(
+          this.buildFailOpenGuardVerdict(
+            "system_failure_fail_open",
+            params.input,
+            { apiKey: effectiveApiKey }
+          )
+        );
+      }
+      console.warn(
+        effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
+        lastError
+      );
       if (effectiveStrictMode) {
         return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
       }
       return withGuardLatency(
-        this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+        this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
           apiKey: effectiveApiKey
         })
       );
+    };
+    if (!guardCacheKey) {
+      return executeGuardRequest();
     }
-    if (typeof lastStatusCode === "number" && lastStatusCode >= 500) {
-      if (effectiveStrictMode) {
-        return withGuardLatency({ allowed: false, reason: "server_error" });
+    const promise = executeGuardRequest();
+    this.pendingGuardRequests.set(guardCacheKey, { promise });
+    try {
+      return await promise;
+    } finally {
+      const pending = this.pendingGuardRequests.get(guardCacheKey);
+      if (pending?.promise === promise) {
+        this.pendingGuardRequests.delete(guardCacheKey);
       }
-      return withGuardLatency(
-        this.buildFailOpenGuardVerdict(
-          "system_failure_fail_open",
-          params.input,
-          { apiKey: effectiveApiKey }
-        )
-      );
     }
-    console.warn(
-      effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
-      lastError
-    );
-    if (effectiveStrictMode) {
-      return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
-    }
-    return withGuardLatency(
-      this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
-        apiKey: effectiveApiKey
-      })
-    );
   }
   async sendIngest(params, options, internal) {
     const ingestStartedAt = Date.now();

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { P as PIIAnonymizeOptions, a as PIIManager } from './agentid-BWlN5KCq.mjs';
-export { A as AgentEventType, b as AgentID, c as AgentIDWorkflowRunHooks, d as AgentIDWorkflowStep, e as AgentIDWorkflowStepParams, f as AgentIDWorkflowTrail, g as AgentIDWorkflowTrailOptions, h as AgentOperationCategory, i as AgentOperationStatus, j as AgentTelemetryContext, D as DependencyError, G as GuardAttachment, k as GuardParams, l as GuardResponse, L as LogParams, O as OperationLogParams, m as PIIMapping, n as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata, W as WrapOpenAIOptions, o as createAgentIdCorrelationId, p as createAgentIdOperationLog, q as createAgentIdTelemetryContext, r as createAgentIdWorkflowTrail } from './agentid-BWlN5KCq.mjs';
+import { P as PIIAnonymizeOptions, a as PIIManager } from './agentid-Mjh8rXn0.mjs';
+export { A as AgentEventType, b as AgentID, c as AgentIDWorkflowRunHooks, d as AgentIDWorkflowStep, e as AgentIDWorkflowStepParams, f as AgentIDWorkflowTrail, g as AgentIDWorkflowTrailOptions, h as AgentOperationCategory, i as AgentOperationStatus, j as AgentTelemetryContext, D as DependencyError, G as GuardAttachment, k as GuardParams, l as GuardResponse, L as LogParams, O as OperationLogParams, m as PIIMapping, n as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata, W as WrapOpenAIOptions, o as createAgentIdCorrelationId, p as createAgentIdOperationLog, q as createAgentIdTelemetryContext, r as createAgentIdWorkflowTrail } from './agentid-Mjh8rXn0.mjs';
 
 type TokenUsage = Record<string, unknown>;
 type ExtractedGuardAttachment = {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { P as PIIAnonymizeOptions, a as PIIManager } from './agentid-BWlN5KCq.js';
-export { A as AgentEventType, b as AgentID, c as AgentIDWorkflowRunHooks, d as AgentIDWorkflowStep, e as AgentIDWorkflowStepParams, f as AgentIDWorkflowTrail, g as AgentIDWorkflowTrailOptions, h as AgentOperationCategory, i as AgentOperationStatus, j as AgentTelemetryContext, D as DependencyError, G as GuardAttachment, k as GuardParams, l as GuardResponse, L as LogParams, O as OperationLogParams, m as PIIMapping, n as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata, W as WrapOpenAIOptions, o as createAgentIdCorrelationId, p as createAgentIdOperationLog, q as createAgentIdTelemetryContext, r as createAgentIdWorkflowTrail } from './agentid-BWlN5KCq.js';
+import { P as PIIAnonymizeOptions, a as PIIManager } from './agentid-Mjh8rXn0.js';
+export { A as AgentEventType, b as AgentID, c as AgentIDWorkflowRunHooks, d as AgentIDWorkflowStep, e as AgentIDWorkflowStepParams, f as AgentIDWorkflowTrail, g as AgentIDWorkflowTrailOptions, h as AgentOperationCategory, i as AgentOperationStatus, j as AgentTelemetryContext, D as DependencyError, G as GuardAttachment, k as GuardParams, l as GuardResponse, L as LogParams, O as OperationLogParams, m as PIIMapping, n as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata, W as WrapOpenAIOptions, o as createAgentIdCorrelationId, p as createAgentIdOperationLog, q as createAgentIdTelemetryContext, r as createAgentIdWorkflowTrail } from './agentid-Mjh8rXn0.js';
 
 type TokenUsage = Record<string, unknown>;
 type ExtractedGuardAttachment = {

package/dist/index.js

@@ -182,7 +182,7 @@ var OpenAIAdapter = class {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.40".trim().length > 0 ? "js-0.1.40" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.41".trim().length > 0 ? "js-0.1.41" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;
@@ -2748,7 +2748,7 @@ var GUARD_MAX_ATTEMPTS = 3;
 var GUARD_RETRY_DELAYS_MS = [250, 500];
 var INGEST_MAX_ATTEMPTS = 3;
 var INGEST_RETRY_DELAYS_MS = [250, 500];
-var GUARD_VERDICT_CACHE_TTL_MS = 0;
+var GUARD_VERDICT_CACHE_TTL_MS = 1500;
 var MAX_INGEST_TEXT_CHARS = 32e3;
 var OPENAI_TELEMETRY_FIELD = "agentid_telemetry";
 function normalizeBaseUrl3(baseUrl) {
@@ -3596,6 +3596,7 @@ var AgentID = class {
   constructor(config = {}) {
     this.injectionScanner = getInjectionScanner();
     this.recentGuardVerdicts = /* @__PURE__ */ new Map();
+    this.pendingGuardRequests = /* @__PURE__ */ new Map();
     this.apiKey = resolveConfiguredApiKey(config.apiKey);
     this.baseUrl = normalizeBaseUrl3(config.baseUrl ?? "https://app.getagentid.com/api/v1");
     this.configuredPiiMasking = typeof config.piiMasking === "boolean" ? config.piiMasking : null;
@@ -3686,13 +3687,14 @@ var AgentID = class {
     }
     return createEventId2();
   }
-  buildGuardCacheKey(params) {
+  buildGuardCacheKey(params, apiKey) {
     if (!params.system_id || !params.input) {
       return null;
     }
     const userId = params.user_id?.trim() ?? "";
-    const normalizedInput = params.input.slice(0, 2048);
-    return `${params.system_id}|${userId}|${normalizedInput.length}|${normalizedInput}`;
+    const normalizedInput = params.input.trim().replace(/\s+/g, " ").slice(0, 2048);
+    const keyPrefix = apiKey?.slice(0, 24) ?? "";
+    return `${keyPrefix}|${params.system_id}|${userId}|${normalizedInput.length}|${normalizedInput}`;
   }
   readCachedGuardVerdict(cacheKey) {
     if (!cacheKey) return null;
@@ -3705,7 +3707,7 @@ var AgentID = class {
     return cached.verdict;
   }
   cacheGuardVerdict(cacheKey, verdict) {
-    if (!cacheKey || !verdict.allowed || GUARD_VERDICT_CACHE_TTL_MS <= 0) {
+    if (!cacheKey || GUARD_VERDICT_CACHE_TTL_MS <= 0) {
       return;
     }
     this.recentGuardVerdicts.set(cacheKey, {
@@ -4203,98 +4205,122 @@ var AgentID = class {
       ...params,
       client_capabilities: params.client_capabilities ?? this.buildClientCapabilities()
     };
-    const guardCacheKey = this.buildGuardCacheKey(payload);
+    const guardCacheKey = this.buildGuardCacheKey(payload, effectiveApiKey);
     const cachedVerdict = this.readCachedGuardVerdict(guardCacheKey);
     if (cachedVerdict) {
       return withGuardLatency(cachedVerdict);
     }
-    const correlationId = createCorrelationId(payload.client_event_id);
-    let lastStatusCode = null;
-    let lastAbort = false;
-    let lastError = null;
-    for (let attempt = 0; attempt < GUARD_MAX_ATTEMPTS; attempt += 1) {
-      const controller = new AbortController();
-      const timeoutId = setTimeout(() => controller.abort(), this.guardTimeoutMs);
-      try {
-        const res = await fetch(`${this.baseUrl}/guard`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "x-agentid-api-key": effectiveApiKey,
-            "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER,
-            "x-correlation-id": correlationId
-          },
-          body: JSON.stringify(payload),
-          signal: controller.signal
-        });
-        lastStatusCode = res.status;
-        const responseBody = await safeReadJson2(res);
-        if (responseBody && typeof responseBody.allowed === "boolean") {
-          const rawVerdict = responseBody;
-          const transparency = coerceTransparencyMetadata(rawVerdict.transparency);
-          const verdict = {
-            ...rawVerdict,
-            ...transparency ? { transparency } : {}
-          };
-          const infrastructureFailure = verdict.allowed === false && (isInfrastructureGuardReason(verdict.reason) || !verdict.reason && res.status >= 500);
-          if (infrastructureFailure) {
-            if (attempt < GUARD_MAX_ATTEMPTS - 1) {
-              await waitForRetry(attempt);
-              continue;
-            }
-            if (effectiveStrictMode) {
+    const pendingGuardRequest = guardCacheKey ? this.pendingGuardRequests.get(guardCacheKey) : void 0;
+    if (pendingGuardRequest) {
+      return withGuardLatency(await pendingGuardRequest.promise);
+    }
+    const executeGuardRequest = async () => {
+      const correlationId = createCorrelationId(payload.client_event_id);
+      let lastStatusCode = null;
+      let lastAbort = false;
+      let lastError = null;
+      for (let attempt = 0; attempt < GUARD_MAX_ATTEMPTS; attempt += 1) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.guardTimeoutMs);
+        try {
+          const res = await fetch(`${this.baseUrl}/guard`, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "x-agentid-api-key": effectiveApiKey,
+              "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER,
+              "x-correlation-id": correlationId
+            },
+            body: JSON.stringify(payload),
+            signal: controller.signal
+          });
+          lastStatusCode = res.status;
+          const responseBody = await safeReadJson2(res);
+          if (responseBody && typeof responseBody.allowed === "boolean") {
+            const rawVerdict = responseBody;
+            const transparency = coerceTransparencyMetadata(rawVerdict.transparency);
+            const verdict = {
+              ...rawVerdict,
+              ...transparency ? { transparency } : {}
+            };
+            const infrastructureFailure = verdict.allowed === false && (isInfrastructureGuardReason(verdict.reason) || !verdict.reason && res.status >= 500);
+            if (infrastructureFailure) {
+              if (attempt < GUARD_MAX_ATTEMPTS - 1) {
+                await waitForRetry(attempt);
+                continue;
+              }
+              if (effectiveStrictMode) {
+                console.warn(
+                  `[AgentID] Guard API infrastructure failure in strict mode (${verdict.reason ?? `http_${res.status}`}). Blocking request.`
+                );
+                return withGuardLatency({
+                  allowed: false,
+                  reason: verdict.reason ?? "network_error_strict_mode"
+                });
+              }
               console.warn(
-                `[AgentID] Guard API infrastructure failure in strict mode (${verdict.reason ?? `http_${res.status}`}). Blocking request.`
+                `[AgentID] Guard API infrastructure fallback in fail-open mode (${verdict.reason ?? `http_${res.status}`}).`
               );
-              return withGuardLatency({
-                allowed: false,
-                reason: verdict.reason ?? "network_error_strict_mode"
+              this.logGuardFallback({
+                reason: verdict.reason ?? `http_${res.status}`,
+                status: "upstream_error",
+                guardParams: params,
+                apiKey: effectiveApiKey
               });
+              return withGuardLatency(
+                this.buildFailOpenGuardVerdict(
+                  "system_failure_fail_open",
+                  params.input,
+                  { apiKey: effectiveApiKey }
+                )
+              );
             }
-            console.warn(
-              `[AgentID] Guard API infrastructure fallback in fail-open mode (${verdict.reason ?? `http_${res.status}`}).`
-            );
+            this.cacheGuardVerdict(guardCacheKey, verdict);
+            return withGuardLatency(verdict);
+          }
+          if (!res.ok) {
+            if (res.status >= 500 && attempt < GUARD_MAX_ATTEMPTS - 1) {
+              await waitForRetry(attempt);
+              continue;
+            }
+            throw new Error(`API Error ${res.status}`);
+          }
+          throw new Error("Invalid guard response");
+        } catch (error) {
+          lastError = error;
+          const isAbortError2 = Boolean(
+            error && typeof error === "object" && error.name === "AbortError"
+          );
+          lastAbort = isAbortError2;
+          if (attempt < GUARD_MAX_ATTEMPTS - 1) {
+            await waitForRetry(attempt);
+            continue;
+          }
+          if (isAbortError2) {
+            const timeoutMessage = "AgentID API Warning: Connection timeout exceeded.";
+            console.warn(timeoutMessage);
             this.logGuardFallback({
-              reason: verdict.reason ?? `http_${res.status}`,
-              status: "upstream_error",
+              reason: "timeout_fallback",
+              status: "latency_timeout",
               guardParams: params,
               apiKey: effectiveApiKey
             });
+            if (effectiveStrictMode) {
+              return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
+            }
             return withGuardLatency(
-              this.buildFailOpenGuardVerdict(
-                "system_failure_fail_open",
-                params.input,
-                { apiKey: effectiveApiKey }
-              )
+              this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+                apiKey: effectiveApiKey
+              })
             );
           }
-          this.cacheGuardVerdict(guardCacheKey, verdict);
-          return withGuardLatency(verdict);
-        }
-        if (!res.ok) {
-          if (res.status >= 500 && attempt < GUARD_MAX_ATTEMPTS - 1) {
-            await waitForRetry(attempt);
-            continue;
-          }
-          throw new Error(`API Error ${res.status}`);
-        }
-        throw new Error("Invalid guard response");
-      } catch (error) {
-        lastError = error;
-        const isAbortError2 = Boolean(
-          error && typeof error === "object" && error.name === "AbortError"
-        );
-        lastAbort = isAbortError2;
-        if (attempt < GUARD_MAX_ATTEMPTS - 1) {
-          await waitForRetry(attempt);
-          continue;
-        }
-        if (isAbortError2) {
-          const timeoutMessage = "AgentID API Warning: Connection timeout exceeded.";
-          console.warn(timeoutMessage);
+          console.warn(
+            effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
+            error
+          );
           this.logGuardFallback({
-            reason: "timeout_fallback",
-            status: "latency_timeout",
+            reason: "guard_unreachable",
+            status: "guard_unreachable",
             guardParams: params,
             apiKey: effectiveApiKey
           });
@@ -4302,67 +4328,62 @@ var AgentID = class {
             return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
           }
           return withGuardLatency(
-            this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+            this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
               apiKey: effectiveApiKey
             })
           );
+        } finally {
+          clearTimeout(timeoutId);
         }
-        console.warn(
-          effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
-          error
-        );
-        this.logGuardFallback({
-          reason: "guard_unreachable",
-          status: "guard_unreachable",
-          guardParams: params,
-          apiKey: effectiveApiKey
-        });
+      }
+      if (lastAbort) {
         if (effectiveStrictMode) {
           return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
         }
         return withGuardLatency(
-          this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
+          this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
             apiKey: effectiveApiKey
           })
         );
-      } finally {
-        clearTimeout(timeoutId);
       }
-    }
-    if (lastAbort) {
+      if (typeof lastStatusCode === "number" && lastStatusCode >= 500) {
+        if (effectiveStrictMode) {
+          return withGuardLatency({ allowed: false, reason: "server_error" });
+        }
+        return withGuardLatency(
+          this.buildFailOpenGuardVerdict(
+            "system_failure_fail_open",
+            params.input,
+            { apiKey: effectiveApiKey }
+          )
+        );
+      }
+      console.warn(
+        effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
+        lastError
+      );
       if (effectiveStrictMode) {
         return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
       }
       return withGuardLatency(
-        this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+        this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
           apiKey: effectiveApiKey
         })
       );
+    };
+    if (!guardCacheKey) {
+      return executeGuardRequest();
     }
-    if (typeof lastStatusCode === "number" && lastStatusCode >= 500) {
-      if (effectiveStrictMode) {
-        return withGuardLatency({ allowed: false, reason: "server_error" });
+    const promise = executeGuardRequest();
+    this.pendingGuardRequests.set(guardCacheKey, { promise });
+    try {
+      return await promise;
+    } finally {
+      const pending = this.pendingGuardRequests.get(guardCacheKey);
+      if (pending?.promise === promise) {
+        this.pendingGuardRequests.delete(guardCacheKey);
       }
-      return withGuardLatency(
-        this.buildFailOpenGuardVerdict(
-          "system_failure_fail_open",
-          params.input,
-          { apiKey: effectiveApiKey }
-        )
-      );
     }
-    console.warn(
-      effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
-      lastError
-    );
-    if (effectiveStrictMode) {
-      return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
-    }
-    return withGuardLatency(
-      this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
-        apiKey: effectiveApiKey
-      })
-    );
   }
   async sendIngest(params, options, internal) {
     const ingestStartedAt = Date.now();

package/dist/index.mjs

@@ -13,7 +13,7 @@ import {
   createAgentIdWorkflowTrail,
   getInjectionScanner,
   scanWithRegex
-} from "./chunk-25SZBEYX.mjs";
+} from "./chunk-L2WVWRAC.mjs";
 
 // src/message-history.ts
 function isPlainRecord(value) {

package/dist/langchain.d.mts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { b as AgentID, j as AgentTelemetryContext } from './agentid-BWlN5KCq.mjs';
+import { b as AgentID, j as AgentTelemetryContext } from './agentid-Mjh8rXn0.mjs';
 
 /**
  * LangChainJS callback handler (dependency-free shape).

package/dist/langchain.d.ts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { b as AgentID, j as AgentTelemetryContext } from './agentid-BWlN5KCq.js';
+import { b as AgentID, j as AgentTelemetryContext } from './agentid-Mjh8rXn0.js';
 
 /**
  * LangChainJS callback handler (dependency-free shape).

package/dist/langchain.js

@@ -27,7 +27,7 @@ var import_base = require("@langchain/core/callbacks/base");
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.40".trim().length > 0 ? "js-0.1.40" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.41".trim().length > 0 ? "js-0.1.41" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;

package/dist/langchain.mjs

@@ -2,7 +2,7 @@ import {
   PIIManager,
   SecurityBlockError,
   createAgentIdTelemetryContext
-} from "./chunk-25SZBEYX.mjs";
+} from "./chunk-L2WVWRAC.mjs";
 
 // src/langchain.ts
 import { BaseCallbackHandler } from "@langchain/core/callbacks/base";

package/dist/transparency-badge.d.mts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { T as TransparencyMetadata } from './agentid-BWlN5KCq.mjs';
+import { T as TransparencyMetadata } from './agentid-Mjh8rXn0.mjs';
 
 type AgentIDTransparencyBadgeTelemetry = {
     systemId: string;

package/dist/transparency-badge.d.ts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { T as TransparencyMetadata } from './agentid-BWlN5KCq.js';
+import { T as TransparencyMetadata } from './agentid-Mjh8rXn0.js';
 
 type AgentIDTransparencyBadgeTelemetry = {
     systemId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentid-sdk",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "AgentID JavaScript/TypeScript SDK for guardrails, masking, workflow telemetry, and audit logging.",
   "license": "MIT",
   "homepage": "https://agentid.ai",