@nextera.one/axis-server-sdk 1.0.0 → 1.2.0

package/dist/index.mjs

@@ -31,20 +31,243 @@ function Handler(intent) {
 
 // src/decorators/intent.decorator.ts
 import "reflect-metadata";
+var INTENT_METADATA_KEY = "axis:intent";
 var INTENT_ROUTES_KEY = "axis:intent_routes";
 function Intent(action, options) {
   return (target, propertyKey) => {
+    Reflect.defineMetadata(
+      INTENT_METADATA_KEY,
+      { intent: action, ...options },
+      target,
+      propertyKey
+    );
     const routes = Reflect.getMetadata(INTENT_ROUTES_KEY, target.constructor) || [];
     routes.push({
       action,
       methodName: propertyKey,
       absolute: options?.absolute,
-      frame: options?.frame
+      frame: options?.frame,
+      kind: options?.kind,
+      bodyProfile: options?.bodyProfile,
+      tlv: options?.tlv,
+      dto: options?.dto
     });
     Reflect.defineMetadata(INTENT_ROUTES_KEY, routes, target.constructor);
   };
 }
 
+// src/decorators/tlv-field.decorator.ts
+import "reflect-metadata";
+var TLV_FIELDS_KEY = "axis:tlv:fields";
+var TLV_VALIDATORS_KEY = "axis:tlv:validators";
+function TlvField(tag, options) {
+  return (target, propertyKey) => {
+    const existing = Reflect.getOwnMetadata(TLV_FIELDS_KEY, target.constructor) || [];
+    existing.push({
+      property: String(propertyKey),
+      tag,
+      options
+    });
+    Reflect.defineMetadata(TLV_FIELDS_KEY, existing, target.constructor);
+  };
+}
+function TlvValidate(validator) {
+  return (target, propertyKey) => {
+    const existing = Reflect.getOwnMetadata(TLV_VALIDATORS_KEY, target.constructor) || [];
+    const prop = String(propertyKey);
+    let entry = existing.find((e) => e.property === prop);
+    if (!entry) {
+      entry = { property: prop, tag: 0, validators: [] };
+      existing.push(entry);
+    }
+    entry.validators.push(validator);
+    Reflect.defineMetadata(TLV_VALIDATORS_KEY, existing, target.constructor);
+  };
+}
+function TlvUtf8Pattern(pattern, message) {
+  return TlvValidate((val, prop) => {
+    const str = new TextDecoder().decode(val);
+    return pattern.test(str) ? null : message || `${prop}: failed pattern check`;
+  });
+}
+function TlvMinLen(min, message) {
+  return TlvValidate((val, prop) => {
+    return val.length >= min ? null : message || `${prop}: too short (${val.length} < ${min})`;
+  });
+}
+function TlvEnum(allowed, message) {
+  const set = new Set(allowed);
+  return TlvValidate((val, prop) => {
+    const str = new TextDecoder().decode(val);
+    return set.has(str) ? null : message || `${prop}: must be one of [${allowed.join(", ")}]`;
+  });
+}
+function TlvRange(min, max, message) {
+  return TlvValidate((val, prop) => {
+    if (val.length !== 8) return `${prop}: u64 must be 8 bytes`;
+    let n = 0n;
+    for (const b of val) n = n << 8n | BigInt(b);
+    if (n < min || n > max) {
+      return message || `${prop}: value ${n} out of range [${min}, ${max}]`;
+    }
+    return null;
+  });
+}
+
+// src/decorators/dto-schema.util.ts
+import "reflect-metadata";
+
+// src/core/tlv.ts
+import {
+  TLV,
+  encodeTLVs,
+  decodeTLVs,
+  decodeTLVsList,
+  decodeObject,
+  decodeArray
+} from "@nextera.one/axis-protocol";
+
+// src/decorators/dto-schema.util.ts
+function extractDtoSchema(dto) {
+  const fieldMetas = Reflect.getMetadata(TLV_FIELDS_KEY, dto) || [];
+  if (fieldMetas.length === 0) {
+    throw new Error(
+      `DTO class ${dto.name} has no @TlvField decorators \u2014 nothing to validate`
+    );
+  }
+  const tagByProp = /* @__PURE__ */ new Map();
+  const fields = fieldMetas.map((m) => {
+    tagByProp.set(m.property, m.tag);
+    return {
+      name: m.property,
+      tag: m.tag,
+      kind: m.options.kind,
+      required: m.options.required,
+      maxLen: m.options.maxLen,
+      max: m.options.max,
+      scope: m.options.scope
+    };
+  });
+  const validatorMetas = Reflect.getMetadata(TLV_VALIDATORS_KEY, dto) || [];
+  const validators = /* @__PURE__ */ new Map();
+  for (const vm of validatorMetas) {
+    const tag = tagByProp.get(vm.property);
+    if (tag === void 0) {
+      throw new Error(
+        `@TlvValidate on ${dto.name}.${vm.property} but no @TlvField found for that property`
+      );
+    }
+    vm.tag = tag;
+    validators.set(tag, vm.validators);
+  }
+  return { fields, validators };
+}
+function buildDtoDecoder(dto) {
+  const fieldMetas = Reflect.getMetadata(TLV_FIELDS_KEY, dto) || [];
+  if (fieldMetas.length === 0) {
+    throw new Error(
+      `DTO class ${dto.name} has no @TlvField decorators \u2014 cannot build decoder`
+    );
+  }
+  const tagMap = /* @__PURE__ */ new Map();
+  for (const m of fieldMetas) {
+    tagMap.set(m.tag, { property: m.property, kind: m.options.kind });
+  }
+  return (bodyBytes) => {
+    const tlvMap2 = decodeTLVs(new Uint8Array(bodyBytes));
+    const result = {};
+    for (const [tag, raw] of tlvMap2) {
+      const meta = tagMap.get(tag);
+      if (!meta) continue;
+      switch (meta.kind) {
+        case "utf8":
+          result[meta.property] = new TextDecoder().decode(raw);
+          break;
+        case "u64": {
+          let n = 0n;
+          for (let i = 0; i < raw.length; i++) {
+            n = n << 8n | BigInt(raw[i]);
+          }
+          result[meta.property] = n;
+          break;
+        }
+        case "bytes":
+        case "bytes16":
+          result[meta.property] = raw;
+          break;
+        case "bool":
+          result[meta.property] = raw.length > 0 && raw[0] !== 0;
+          break;
+        case "obj":
+        case "arr":
+          result[meta.property] = JSON.parse(new TextDecoder().decode(raw));
+          break;
+        default:
+          result[meta.property] = raw;
+      }
+    }
+    return result;
+  };
+}
+
+// src/base/axis-tlv.dto.ts
+var AxisTlvDto = class {
+};
+
+// src/base/axis-id.dto.ts
+var AxisIdDto = class extends AxisTlvDto {
+};
+__decorateClass([
+  TlvField(1, { kind: "utf8", required: true, maxLen: 128 }),
+  TlvMinLen(1, "id must not be empty")
+], AxisIdDto.prototype, "id", 2);
+
+// src/base/axis-partial-type.ts
+import "reflect-metadata";
+function AxisPartialType(BaseDto) {
+  class PartialDto extends BaseDto {
+  }
+  const fields = Reflect.getOwnMetadata(TLV_FIELDS_KEY, BaseDto) || [];
+  const partialFields = fields.map((f) => ({
+    property: f.property,
+    tag: f.tag,
+    options: { ...f.options, required: false }
+  }));
+  Reflect.defineMetadata(TLV_FIELDS_KEY, partialFields, PartialDto);
+  const validators = Reflect.getOwnMetadata(TLV_VALIDATORS_KEY, BaseDto) || [];
+  if (validators.length > 0) {
+    Reflect.defineMetadata(TLV_VALIDATORS_KEY, [...validators], PartialDto);
+  }
+  Object.defineProperty(PartialDto, "name", {
+    value: `Partial${BaseDto.name}`
+  });
+  return PartialDto;
+}
+
+// src/base/axis-response.dto.ts
+var RESPONSE_TAG_ID = 1;
+var RESPONSE_TAG_CREATED_AT = 2;
+var RESPONSE_TAG_UPDATED_AT = 3;
+var RESPONSE_TAG_CREATED_BY = 4;
+var RESPONSE_TAG_UPDATED_BY = 5;
+var AxisResponseDto = class extends AxisTlvDto {
+};
+__decorateClass([
+  TlvField(RESPONSE_TAG_ID, { kind: "utf8" })
+], AxisResponseDto.prototype, "id", 2);
+__decorateClass([
+  TlvField(RESPONSE_TAG_CREATED_AT, { kind: "u64" })
+], AxisResponseDto.prototype, "created_at", 2);
+__decorateClass([
+  TlvField(RESPONSE_TAG_UPDATED_AT, { kind: "u64" })
+], AxisResponseDto.prototype, "updated_at", 2);
+__decorateClass([
+  TlvField(RESPONSE_TAG_CREATED_BY, { kind: "utf8" })
+], AxisResponseDto.prototype, "created_by", 2);
+__decorateClass([
+  TlvField(RESPONSE_TAG_UPDATED_BY, { kind: "utf8" })
+], AxisResponseDto.prototype, "updated_by", 2);
+
 // src/engine/intent.router.ts
 import { Injectable as Injectable2 } from "@nestjs/common";
 var IntentRouter = class {
@@ -208,215 +431,73 @@ IntentRouter = __decorateClass([
 ], IntentRouter);
 
 // src/core/constants.ts
-var AXIS_MAGIC = new Uint8Array([65, 88, 73, 83, 49]);
-var AXIS_VERSION = 1;
-var MAX_HDR_LEN = 2048;
-var MAX_BODY_LEN = 65536;
-var MAX_SIG_LEN = 128;
-var MAX_FRAME_LEN = 70 * 1024;
-var FLAG_BODY_TLV = 1;
-var FLAG_CHAIN_REQ = 2;
-var FLAG_HAS_WITNESS = 4;
-var TLV_PID = 1;
-var TLV_TS = 2;
-var TLV_INTENT = 3;
-var TLV_ACTOR_ID = 4;
-var TLV_PROOF_TYPE = 5;
-var TLV_PROOF_REF = 6;
-var TLV_NONCE = 7;
-var TLV_AUD = 8;
-var TLV_REALM = TLV_AUD;
-var TLV_NODE = 9;
-var TLV_TRACE_ID = 10;
-var TLV_KID = 11;
-var TLV_RID = 15;
-var TLV_OK = 16;
-var TLV_EFFECT = 17;
-var TLV_ERROR_CODE = 18;
-var TLV_ERROR_MSG = 19;
-var TLV_PREV_HASH = 20;
-var TLV_RECEIPT_HASH = 21;
-var TLV_NODE_KID = 30;
-var TLV_NODE_CERT_HASH = 34;
-var TLV_LOOM_PRESENCE_ID = 91;
-var TLV_LOOM_WRIT = 92;
-var TLV_LOOM_THREAD_HASH = 93;
-var TLV_UPLOAD_ID = 70;
-var TLV_INDEX = 71;
-var TLV_OFFSET = 72;
-var TLV_SHA256_CHUNK = 73;
-var TLV_CAPSULE = 90;
-var TLV_BODY_OBJ = 254;
-var TLV_BODY_ARR = 255;
-var NCERT_NODE_ID = 1;
-var NCERT_KID = 2;
-var NCERT_ALG = 3;
-var NCERT_PUB = 4;
-var NCERT_NBF = 5;
-var NCERT_EXP = 6;
-var NCERT_SCOPE = 7;
-var NCERT_ISSUER_KID = 8;
-var NCERT_PAYLOAD = 50;
-var NCERT_SIG = 51;
-var PROOF_NONE = 0;
-var PROOF_CAPSULE = 1;
-var PROOF_JWT = 2;
-var PROOF_MTLS = 3;
-var PROOF_LOOM = 4;
-var PROOF_WITNESS = 5;
-var ProofType = /* @__PURE__ */ ((ProofType2) => {
-  ProofType2[ProofType2["NONE"] = 0] = "NONE";
-  ProofType2[ProofType2["CAPSULE"] = 1] = "CAPSULE";
-  ProofType2[ProofType2["JWT"] = 2] = "JWT";
-  ProofType2[ProofType2["MTLS"] = 3] = "MTLS";
-  ProofType2[ProofType2["LOOM"] = 4] = "LOOM";
-  ProofType2[ProofType2["WITNESS"] = 5] = "WITNESS";
-  return ProofType2;
-})(ProofType || {});
-var BodyProfile = /* @__PURE__ */ ((BodyProfile2) => {
-  BodyProfile2[BodyProfile2["RAW"] = 0] = "RAW";
-  BodyProfile2[BodyProfile2["TLV_MAP"] = 1] = "TLV_MAP";
-  BodyProfile2[BodyProfile2["OBJ"] = 2] = "OBJ";
-  BodyProfile2[BodyProfile2["ARR"] = 3] = "ARR";
-  return BodyProfile2;
-})(BodyProfile || {});
-var ERR_INVALID_PACKET = "INVALID_PACKET";
-var ERR_BAD_SIGNATURE = "BAD_SIGNATURE";
-var ERR_REPLAY_DETECTED = "REPLAY_DETECTED";
-var ERR_CONTRACT_VIOLATION = "CONTRACT_VIOLATION";
+import {
+  AXIS_MAGIC,
+  AXIS_VERSION,
+  MAX_HDR_LEN,
+  MAX_BODY_LEN,
+  MAX_SIG_LEN,
+  MAX_FRAME_LEN,
+  FLAG_BODY_TLV,
+  FLAG_CHAIN_REQ,
+  FLAG_HAS_WITNESS,
+  TLV_PID,
+  TLV_TS,
+  TLV_INTENT,
+  TLV_ACTOR_ID,
+  TLV_PROOF_TYPE,
+  TLV_PROOF_REF,
+  TLV_NONCE,
+  TLV_AUD,
+  TLV_REALM,
+  TLV_NODE,
+  TLV_TRACE_ID,
+  TLV_KID,
+  TLV_RID,
+  TLV_OK,
+  TLV_EFFECT,
+  TLV_ERROR_CODE,
+  TLV_ERROR_MSG,
+  TLV_PREV_HASH,
+  TLV_RECEIPT_HASH,
+  TLV_NODE_KID,
+  TLV_NODE_CERT_HASH,
+  TLV_LOOM_PRESENCE_ID,
+  TLV_LOOM_WRIT,
+  TLV_LOOM_THREAD_HASH,
+  TLV_UPLOAD_ID,
+  TLV_INDEX,
+  TLV_OFFSET,
+  TLV_SHA256_CHUNK,
+  TLV_CAPSULE,
+  TLV_BODY_OBJ,
+  TLV_BODY_ARR,
+  NCERT_NODE_ID,
+  NCERT_KID,
+  NCERT_ALG,
+  NCERT_PUB,
+  NCERT_NBF,
+  NCERT_EXP,
+  NCERT_SCOPE,
+  NCERT_ISSUER_KID,
+  NCERT_PAYLOAD,
+  NCERT_SIG,
+  PROOF_NONE,
+  PROOF_CAPSULE,
+  PROOF_JWT,
+  PROOF_MTLS,
+  PROOF_LOOM,
+  PROOF_WITNESS,
+  ProofType,
+  BodyProfile,
+  ERR_INVALID_PACKET,
+  ERR_BAD_SIGNATURE,
+  ERR_REPLAY_DETECTED,
+  ERR_CONTRACT_VIOLATION
+} from "@nextera.one/axis-protocol";
 
 // src/core/varint.ts
-function encodeVarint(value) {
-  if (value < 0) throw new Error("Varint must be unsigned");
-  const bytes2 = [];
-  while (true) {
-    const byte = value & 127;
-    value >>>= 7;
-    if (value === 0) {
-      bytes2.push(byte);
-      break;
-    }
-    bytes2.push(byte | 128);
-  }
-  return new Uint8Array(bytes2);
-}
-function decodeVarint(buf, offset = 0) {
-  let value = 0;
-  let shift = 0;
-  let length = 0;
-  while (true) {
-    if (offset + length >= buf.length) {
-      throw new Error("Varint decode out of bounds");
-    }
-    const byte = buf[offset + length];
-    value += (byte & 127) * Math.pow(2, shift);
-    length++;
-    shift += 7;
-    if ((byte & 128) === 0) {
-      break;
-    }
-    if (length > 8) throw new Error("Varint too large");
-  }
-  return { value, length };
-}
-function varintLength(value) {
-  if (value < 0) throw new Error("Varint must be unsigned");
-  let len = 0;
-  do {
-    value >>>= 7;
-    len++;
-  } while (value !== 0);
-  return len;
-}
-
-// src/core/tlv.ts
-function encodeTLVs(tlvs) {
-  const sorted = [...tlvs].sort((a, b) => a.type - b.type);
-  for (let i = 0; i < sorted.length - 1; i++) {
-    if (sorted[i].type === sorted[i + 1].type) {
-      throw new Error(`Duplicate TLV type: ${sorted[i].type}`);
-    }
-  }
-  let totalSize = 0;
-  for (const t of sorted) {
-    totalSize += varintLength(t.type);
-    totalSize += varintLength(t.value.length);
-    totalSize += t.value.length;
-  }
-  const buf = new Uint8Array(totalSize);
-  let offset = 0;
-  for (const t of sorted) {
-    const typeBytes = encodeVarint(t.type);
-    buf.set(typeBytes, offset);
-    offset += typeBytes.length;
-    const lenBytes = encodeVarint(t.value.length);
-    buf.set(lenBytes, offset);
-    offset += lenBytes.length;
-    buf.set(t.value, offset);
-    offset += t.value.length;
-  }
-  return buf;
-}
-function decodeTLVsList(buf, maxItems = 1024) {
-  const list = [];
-  let offset = 0;
-  while (offset < buf.length) {
-    if (list.length >= maxItems) throw new Error("TLV_LIMIT");
-    const { value: type, length: typeLen } = decodeVarint(buf, offset);
-    offset += typeLen;
-    const { value: len, length: lenLen } = decodeVarint(buf, offset);
-    offset += lenLen;
-    if (offset + len > buf.length) {
-      throw new Error(`TLV violation: Length ${len} exceeds buffer`);
-    }
-    const value = buf.slice(offset, offset + len);
-    list.push({ type, value });
-    offset += len;
-  }
-  return list;
-}
-function decodeTLVs(buf) {
-  const map2 = /* @__PURE__ */ new Map();
-  let offset = 0;
-  let lastType = -1;
-  while (offset < buf.length) {
-    const { value: type, length: typeLen } = decodeVarint(buf, offset);
-    offset += typeLen;
-    if (type <= lastType) {
-      throw new Error(
-        `TLV violation: Unsorted or duplicate type ${type} after ${lastType}`
-      );
-    }
-    lastType = type;
-    const { value: len, length: lenLen } = decodeVarint(buf, offset);
-    offset += lenLen;
-    if (offset + len > buf.length) {
-      throw new Error(`TLV violation: Length ${len} exceeds buffer`);
-    }
-    const value = buf.slice(offset, offset + len);
-    map2.set(type, value);
-    offset += len;
-  }
-  return map2;
-}
-function decodeObject(bytes2, depth = 0, limits = { maxDepth: 8, maxItems: 128 }) {
-  if (depth > limits.maxDepth) {
-    throw new Error("OBJECT_DEPTH_EXCEEDED");
-  }
-  const map2 = decodeTLVs(bytes2);
-  return map2;
-}
-function decodeArray(bytes2, itemType, maxItems = 256) {
-  const list = decodeTLVsList(bytes2, maxItems);
-  const items = [];
-  for (const tlv2 of list) {
-    if (tlv2.type !== itemType) {
-      throw new Error(`INVALID_ARRAY_ITEM:${tlv2.type}`);
-    }
-    items.push(tlv2.value);
-  }
-  return items;
-}
+import { encodeVarint, decodeVarint, varintLength } from "@nextera.one/axis-protocol";
 
 // src/core/signature.ts
 import * as crypto from "crypto";
@@ -2189,7 +2270,11 @@ export {
   AXIS_VERSION,
   ats1_exports as Ats1Codec,
   AxisFrameZ,
+  AxisIdDto,
   T as AxisPacketTags,
+  AxisPartialType,
+  AxisResponseDto,
+  AxisTlvDto,
   BodyProfile,
   CAPABILITIES,
   ContractViolationError,
@@ -2207,6 +2292,7 @@ export {
   FLAG_HAS_WITNESS,
   HANDLER_METADATA_KEY,
   Handler,
+  INTENT_METADATA_KEY,
   INTENT_REQUIREMENTS,
   INTENT_ROUTES_KEY,
   INTENT_SENSITIVITY_MAP,
@@ -2236,12 +2322,18 @@ export {
   PROOF_NONE,
   PROOF_WITNESS,
   ProofType,
+  RESPONSE_TAG_CREATED_AT,
+  RESPONSE_TAG_CREATED_BY,
+  RESPONSE_TAG_ID,
+  RESPONSE_TAG_UPDATED_AT,
+  RESPONSE_TAG_UPDATED_BY,
   RiskDecision,
   Schema2002_PasskeyLoginOptionsRes,
   Schema2011_PasskeyLoginVerifyReq,
   Schema2012_PasskeyLoginVerifyRes,
   Schema2021_PasskeyRegisterOptionsReq,
   SensorDecisions,
+  TLV,
   TLV_ACTOR_ID,
   TLV_AUD,
   TLV_BODY_ARR,
@@ -2250,6 +2342,7 @@ export {
   TLV_EFFECT,
   TLV_ERROR_CODE,
   TLV_ERROR_MSG,
+  TLV_FIELDS_KEY,
   TLV_INDEX,
   TLV_INTENT,
   TLV_KID,
@@ -2273,12 +2366,20 @@ export {
   TLV_TRACE_ID,
   TLV_TS,
   TLV_UPLOAD_ID,
+  TLV_VALIDATORS_KEY,
+  TlvEnum,
+  TlvField,
+  TlvMinLen,
+  TlvRange,
+  TlvUtf8Pattern,
+  TlvValidate,
   axis1SigningBytes,
   b64urlDecode,
   b64urlDecodeString,
   b64urlEncode,
   b64urlEncodeString,
   buildAts1Hdr,
+  buildDtoDecoder,
   buildPacket,
   buildReceiptHash,
   buildTLVs,
@@ -2301,6 +2402,7 @@ export {
   encodeFrame,
   encodeTLVs,
   encodeVarint,
+  extractDtoSchema,
   generateEd25519KeyPair,
   getSignTarget,
   hasScope,