@nextera.one/axis-server-sdk 0.8.0 → 0.9.1

package/dist/index.mjs

@@ -1944,6 +1944,16 @@ var INTENT_REQUIREMENTS = {
   "admin.*": ["admin"]
 };
 
+// src/risk/index.ts
+var RiskDecision = /* @__PURE__ */ ((RiskDecision2) => {
+  RiskDecision2["ALLOW"] = "ALLOW";
+  RiskDecision2["THROTTLE"] = "THROTTLE";
+  RiskDecision2["STEP_UP"] = "STEP_UP";
+  RiskDecision2["WITNESS"] = "WITNESS";
+  RiskDecision2["DENY"] = "DENY";
+  return RiskDecision2;
+})(RiskDecision || {});
+
 // src/core/opcodes.ts
 var AXIS_OPCODES = /* @__PURE__ */ new Set([
   "CAPSULE.ISSUE",
@@ -2063,6 +2073,49 @@ function resolveTimeout(intent) {
   }
   return DEFAULT_TIMEOUT;
 }
+
+// src/core/frame-validator.ts
+function validateFrameShape(frame) {
+  if (!frame || typeof frame !== "object") {
+    return false;
+  }
+  if (frame.v !== 1) {
+    return false;
+  }
+  const requiredStrings = ["pid", "nonce", "actorId", "opcode"];
+  for (const key of requiredStrings) {
+    if (typeof frame[key] !== "string" || frame[key].length < 6) {
+      return false;
+    }
+  }
+  if (typeof frame.ts !== "number" || !Number.isFinite(frame.ts)) {
+    return false;
+  }
+  if (frame.aud !== void 0 && (typeof frame.aud !== "string" || frame.aud.length === 0)) {
+    return false;
+  }
+  if (!frame.sig || typeof frame.sig !== "object") {
+    return false;
+  }
+  if (frame.sig.alg !== "EdDSA") {
+    return false;
+  }
+  if (typeof frame.sig.kid !== "string" || frame.sig.kid.length < 8) {
+    return false;
+  }
+  if (typeof frame.sig.value !== "string" || frame.sig.value.length < 32) {
+    return false;
+  }
+  if (typeof frame.body !== "object" || frame.body === null) {
+    return false;
+  }
+  return true;
+}
+function isTimestampValid(ts, skewSeconds = 120) {
+  const now = Math.floor(Date.now() / 1e3);
+  const diff = Math.abs(now - ts);
+  return diff <= skewSeconds;
+}
 export {
   ATS1_HDR,
   ATS1_SCHEMA,
@@ -2118,6 +2171,7 @@ export {
   PROOF_NONE,
   PROOF_WITNESS,
   ProofType,
+  RiskDecision,
   Schema2002_PasskeyLoginOptionsRes,
   Schema2011_PasskeyLoginVerifyReq,
   Schema2012_PasskeyLoginVerifyRes,
@@ -2187,6 +2241,7 @@ export {
   hasScope,
   isAdminOpcode,
   isKnownOpcode,
+  isTimestampValid,
   nonce16,
   normalizeSensorDecision,
   packPasskeyLoginOptionsReq,
@@ -2205,6 +2260,7 @@ export {
   unpackPasskeyLoginVerifyReq,
   unpackPasskeyRegisterOptionsReq,
   utf8,
+  validateFrameShape,
   varintLength,
   varintU,
   verifyFrameSignature