fix: remove client-side credential validation from Gateway Mode (#24)

Gateway Mode methods (getPolicyApprovedContext, auditLLMCall) now work
without credentials in community/self-hosted deployments. The server
decides authentication requirements based on DEPLOYMENT_MODE.

This matches the TypeScript SDK v1.11.1 behavior where we made the same
fix to let the server decide auth requirements rather than validating
client-side.

Fixes: Community mode Gateway Mode not working without credentials

Author: saurabhjain1592

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to the AxonFlow Java SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.9.0] - 2025-12-31
+
+### Fixed
+
+- **Gateway Mode Community Fix**: Removed client-side credential validation from Gateway Mode methods
+  - `getPolicyApprovedContext()` and `auditLLMCall()` now work without credentials in community/self-hosted deployments
+  - Server decides auth requirements based on `DEPLOYMENT_MODE`
+  - Matches TypeScript SDK v1.11.1 behavior
+
+---
+
 ## [1.8.0] - 2025-12-30
 
 ### Changed
@@ -18,14 +29,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - `hasCredentials()` method in `AxonFlowConfig` to check if credentials are configured
 - `requireCredentials()` helper for enterprise feature validation
-- Enterprise features (`getPolicyApprovedContext`, `auditLLMCall`) now validate credentials at call time
 
 ### Fixed
 
 - Fixed `PolicyOverride` JSON field mappings (`action_override`, `override_reason`)
 - Fixed `listPolicyOverrides()` endpoint path and response parsing
 - Fixed `getStaticPolicyVersions()` response parsing
-- Gateway Mode methods now throw `AuthenticationException` when called without credentials
 
 ---
 

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>com.getaxonflow</groupId>
     <artifactId>axonflow-sdk</artifactId>
-    <version>1.8.0</version>
+    <version>1.9.0</version>
     <packaging>jar</packaging>
 
     <name>AxonFlow Java SDK</name>

src/main/java/com/getaxonflow/sdk/AxonFlow.java

@@ -226,8 +226,8 @@ public CompletableFuture<HealthStatus> healthCheckAsync() {
     public PolicyApprovalResult getPolicyApprovedContext(PolicyApprovalRequest request) {
         Objects.requireNonNull(request, "request cannot be null");
 
-        // Gateway Mode requires credentials (enterprise feature)
-        requireCredentials("Gateway Mode (getPolicyApprovedContext)");
+        // Gateway Mode: Let server decide if credentials are required based on DEPLOYMENT_MODE
+        // Community/self-hosted deployments work without credentials
 
         return retryExecutor.execute(() -> {
             Request httpRequest = buildRequest("POST", "/api/policy/pre-check", request);
@@ -280,8 +280,8 @@ public CompletableFuture<PolicyApprovalResult> getPolicyApprovedContextAsync(Pol
     public AuditResult auditLLMCall(AuditOptions options) {
         Objects.requireNonNull(options, "options cannot be null");
 
-        // Gateway Mode requires credentials (enterprise feature)
-        requireCredentials("Gateway Mode (auditLLMCall)");
+        // Gateway Mode: Let server decide if credentials are required based on DEPLOYMENT_MODE
+        // Community/self-hosted deployments work without credentials
 
         return retryExecutor.execute(() -> {
             Request httpRequest = buildRequest("POST", "/api/audit/llm-call", options);