@nextera.one/axis-server-sdk 1.1.0 → 1.2.0

package/dist/index.js

@@ -39,9 +39,9 @@ var index_exports = {};
 __export(index_exports, {
   ATS1_HDR: () => ATS1_HDR,
   ATS1_SCHEMA: () => ATS1_SCHEMA,
-  AXIS_MAGIC: () => AXIS_MAGIC,
+  AXIS_MAGIC: () => import_axis_protocol2.AXIS_MAGIC,
   AXIS_OPCODES: () => AXIS_OPCODES,
-  AXIS_VERSION: () => AXIS_VERSION,
+  AXIS_VERSION: () => import_axis_protocol2.AXIS_VERSION,
   Ats1Codec: () => ats1_exports,
   AxisFrameZ: () => AxisFrameZ,
   AxisIdDto: () => AxisIdDto,
@@ -49,21 +49,21 @@ __export(index_exports, {
   AxisPartialType: () => AxisPartialType,
   AxisResponseDto: () => AxisResponseDto,
   AxisTlvDto: () => AxisTlvDto,
-  BodyProfile: () => BodyProfile,
+  BodyProfile: () => import_axis_protocol2.BodyProfile,
   CAPABILITIES: () => CAPABILITIES,
   ContractViolationError: () => ContractViolationError,
   DEFAULT_CONTRACTS: () => DEFAULT_CONTRACTS,
   DEFAULT_TIMEOUT: () => DEFAULT_TIMEOUT,
   Decision: () => Decision,
-  ERR_BAD_SIGNATURE: () => ERR_BAD_SIGNATURE,
-  ERR_CONTRACT_VIOLATION: () => ERR_CONTRACT_VIOLATION,
-  ERR_INVALID_PACKET: () => ERR_INVALID_PACKET,
-  ERR_REPLAY_DETECTED: () => ERR_REPLAY_DETECTED,
+  ERR_BAD_SIGNATURE: () => import_axis_protocol2.ERR_BAD_SIGNATURE,
+  ERR_CONTRACT_VIOLATION: () => import_axis_protocol2.ERR_CONTRACT_VIOLATION,
+  ERR_INVALID_PACKET: () => import_axis_protocol2.ERR_INVALID_PACKET,
+  ERR_REPLAY_DETECTED: () => import_axis_protocol2.ERR_REPLAY_DETECTED,
   ExecutionMeter: () => ExecutionMeter,
   FALLBACK_CONTRACT: () => FALLBACK_CONTRACT,
-  FLAG_BODY_TLV: () => FLAG_BODY_TLV,
-  FLAG_CHAIN_REQ: () => FLAG_CHAIN_REQ,
-  FLAG_HAS_WITNESS: () => FLAG_HAS_WITNESS,
+  FLAG_BODY_TLV: () => import_axis_protocol2.FLAG_BODY_TLV,
+  FLAG_CHAIN_REQ: () => import_axis_protocol2.FLAG_CHAIN_REQ,
+  FLAG_HAS_WITNESS: () => import_axis_protocol2.FLAG_HAS_WITNESS,
   HANDLER_METADATA_KEY: () => HANDLER_METADATA_KEY,
   Handler: () => Handler,
   INTENT_METADATA_KEY: () => INTENT_METADATA_KEY,
@@ -74,28 +74,28 @@ __export(index_exports, {
   Intent: () => Intent,
   IntentRouter: () => IntentRouter,
   IntentSensitivity: () => IntentSensitivity,
-  MAX_BODY_LEN: () => MAX_BODY_LEN,
-  MAX_FRAME_LEN: () => MAX_FRAME_LEN,
-  MAX_HDR_LEN: () => MAX_HDR_LEN,
-  MAX_SIG_LEN: () => MAX_SIG_LEN,
-  NCERT_ALG: () => NCERT_ALG,
-  NCERT_EXP: () => NCERT_EXP,
-  NCERT_ISSUER_KID: () => NCERT_ISSUER_KID,
-  NCERT_KID: () => NCERT_KID,
-  NCERT_NBF: () => NCERT_NBF,
-  NCERT_NODE_ID: () => NCERT_NODE_ID,
-  NCERT_PAYLOAD: () => NCERT_PAYLOAD,
-  NCERT_PUB: () => NCERT_PUB,
-  NCERT_SCOPE: () => NCERT_SCOPE,
-  NCERT_SIG: () => NCERT_SIG,
+  MAX_BODY_LEN: () => import_axis_protocol2.MAX_BODY_LEN,
+  MAX_FRAME_LEN: () => import_axis_protocol2.MAX_FRAME_LEN,
+  MAX_HDR_LEN: () => import_axis_protocol2.MAX_HDR_LEN,
+  MAX_SIG_LEN: () => import_axis_protocol2.MAX_SIG_LEN,
+  NCERT_ALG: () => import_axis_protocol2.NCERT_ALG,
+  NCERT_EXP: () => import_axis_protocol2.NCERT_EXP,
+  NCERT_ISSUER_KID: () => import_axis_protocol2.NCERT_ISSUER_KID,
+  NCERT_KID: () => import_axis_protocol2.NCERT_KID,
+  NCERT_NBF: () => import_axis_protocol2.NCERT_NBF,
+  NCERT_NODE_ID: () => import_axis_protocol2.NCERT_NODE_ID,
+  NCERT_PAYLOAD: () => import_axis_protocol2.NCERT_PAYLOAD,
+  NCERT_PUB: () => import_axis_protocol2.NCERT_PUB,
+  NCERT_SCOPE: () => import_axis_protocol2.NCERT_SCOPE,
+  NCERT_SIG: () => import_axis_protocol2.NCERT_SIG,
   PROOF_CAPABILITIES: () => PROOF_CAPABILITIES,
-  PROOF_CAPSULE: () => PROOF_CAPSULE,
-  PROOF_JWT: () => PROOF_JWT,
-  PROOF_LOOM: () => PROOF_LOOM,
-  PROOF_MTLS: () => PROOF_MTLS,
-  PROOF_NONE: () => PROOF_NONE,
-  PROOF_WITNESS: () => PROOF_WITNESS,
-  ProofType: () => ProofType,
+  PROOF_CAPSULE: () => import_axis_protocol2.PROOF_CAPSULE,
+  PROOF_JWT: () => import_axis_protocol2.PROOF_JWT,
+  PROOF_LOOM: () => import_axis_protocol2.PROOF_LOOM,
+  PROOF_MTLS: () => import_axis_protocol2.PROOF_MTLS,
+  PROOF_NONE: () => import_axis_protocol2.PROOF_NONE,
+  PROOF_WITNESS: () => import_axis_protocol2.PROOF_WITNESS,
+  ProofType: () => import_axis_protocol2.ProofType,
   RESPONSE_TAG_CREATED_AT: () => RESPONSE_TAG_CREATED_AT,
   RESPONSE_TAG_CREATED_BY: () => RESPONSE_TAG_CREATED_BY,
   RESPONSE_TAG_ID: () => RESPONSE_TAG_ID,
@@ -107,38 +107,39 @@ __export(index_exports, {
   Schema2012_PasskeyLoginVerifyRes: () => Schema2012_PasskeyLoginVerifyRes,
   Schema2021_PasskeyRegisterOptionsReq: () => Schema2021_PasskeyRegisterOptionsReq,
   SensorDecisions: () => SensorDecisions,
-  TLV_ACTOR_ID: () => TLV_ACTOR_ID,
-  TLV_AUD: () => TLV_AUD,
-  TLV_BODY_ARR: () => TLV_BODY_ARR,
-  TLV_BODY_OBJ: () => TLV_BODY_OBJ,
-  TLV_CAPSULE: () => TLV_CAPSULE,
-  TLV_EFFECT: () => TLV_EFFECT,
-  TLV_ERROR_CODE: () => TLV_ERROR_CODE,
-  TLV_ERROR_MSG: () => TLV_ERROR_MSG,
+  TLV: () => import_axis_protocol.TLV,
+  TLV_ACTOR_ID: () => import_axis_protocol2.TLV_ACTOR_ID,
+  TLV_AUD: () => import_axis_protocol2.TLV_AUD,
+  TLV_BODY_ARR: () => import_axis_protocol2.TLV_BODY_ARR,
+  TLV_BODY_OBJ: () => import_axis_protocol2.TLV_BODY_OBJ,
+  TLV_CAPSULE: () => import_axis_protocol2.TLV_CAPSULE,
+  TLV_EFFECT: () => import_axis_protocol2.TLV_EFFECT,
+  TLV_ERROR_CODE: () => import_axis_protocol2.TLV_ERROR_CODE,
+  TLV_ERROR_MSG: () => import_axis_protocol2.TLV_ERROR_MSG,
   TLV_FIELDS_KEY: () => TLV_FIELDS_KEY,
-  TLV_INDEX: () => TLV_INDEX,
-  TLV_INTENT: () => TLV_INTENT,
-  TLV_KID: () => TLV_KID,
-  TLV_LOOM_PRESENCE_ID: () => TLV_LOOM_PRESENCE_ID,
-  TLV_LOOM_THREAD_HASH: () => TLV_LOOM_THREAD_HASH,
-  TLV_LOOM_WRIT: () => TLV_LOOM_WRIT,
-  TLV_NODE: () => TLV_NODE,
-  TLV_NODE_CERT_HASH: () => TLV_NODE_CERT_HASH,
-  TLV_NODE_KID: () => TLV_NODE_KID,
-  TLV_NONCE: () => TLV_NONCE,
-  TLV_OFFSET: () => TLV_OFFSET,
-  TLV_OK: () => TLV_OK,
-  TLV_PID: () => TLV_PID,
-  TLV_PREV_HASH: () => TLV_PREV_HASH,
-  TLV_PROOF_REF: () => TLV_PROOF_REF,
-  TLV_PROOF_TYPE: () => TLV_PROOF_TYPE,
-  TLV_REALM: () => TLV_REALM,
-  TLV_RECEIPT_HASH: () => TLV_RECEIPT_HASH,
-  TLV_RID: () => TLV_RID,
-  TLV_SHA256_CHUNK: () => TLV_SHA256_CHUNK,
-  TLV_TRACE_ID: () => TLV_TRACE_ID,
-  TLV_TS: () => TLV_TS,
-  TLV_UPLOAD_ID: () => TLV_UPLOAD_ID,
+  TLV_INDEX: () => import_axis_protocol2.TLV_INDEX,
+  TLV_INTENT: () => import_axis_protocol2.TLV_INTENT,
+  TLV_KID: () => import_axis_protocol2.TLV_KID,
+  TLV_LOOM_PRESENCE_ID: () => import_axis_protocol2.TLV_LOOM_PRESENCE_ID,
+  TLV_LOOM_THREAD_HASH: () => import_axis_protocol2.TLV_LOOM_THREAD_HASH,
+  TLV_LOOM_WRIT: () => import_axis_protocol2.TLV_LOOM_WRIT,
+  TLV_NODE: () => import_axis_protocol2.TLV_NODE,
+  TLV_NODE_CERT_HASH: () => import_axis_protocol2.TLV_NODE_CERT_HASH,
+  TLV_NODE_KID: () => import_axis_protocol2.TLV_NODE_KID,
+  TLV_NONCE: () => import_axis_protocol2.TLV_NONCE,
+  TLV_OFFSET: () => import_axis_protocol2.TLV_OFFSET,
+  TLV_OK: () => import_axis_protocol2.TLV_OK,
+  TLV_PID: () => import_axis_protocol2.TLV_PID,
+  TLV_PREV_HASH: () => import_axis_protocol2.TLV_PREV_HASH,
+  TLV_PROOF_REF: () => import_axis_protocol2.TLV_PROOF_REF,
+  TLV_PROOF_TYPE: () => import_axis_protocol2.TLV_PROOF_TYPE,
+  TLV_REALM: () => import_axis_protocol2.TLV_REALM,
+  TLV_RECEIPT_HASH: () => import_axis_protocol2.TLV_RECEIPT_HASH,
+  TLV_RID: () => import_axis_protocol2.TLV_RID,
+  TLV_SHA256_CHUNK: () => import_axis_protocol2.TLV_SHA256_CHUNK,
+  TLV_TRACE_ID: () => import_axis_protocol2.TLV_TRACE_ID,
+  TLV_TS: () => import_axis_protocol2.TLV_TS,
+  TLV_UPLOAD_ID: () => import_axis_protocol2.TLV_UPLOAD_ID,
   TLV_VALIDATORS_KEY: () => TLV_VALIDATORS_KEY,
   TlvEnum: () => TlvEnum,
   TlvField: () => TlvField,
@@ -163,18 +164,18 @@ __export(index_exports, {
   classifyIntent: () => classifyIntent,
   computeReceiptHash: () => computeReceiptHash,
   computeSignaturePayload: () => computeSignaturePayload,
-  decodeArray: () => decodeArray,
+  decodeArray: () => import_axis_protocol.decodeArray,
   decodeAxis1Frame: () => decodeAxis1Frame,
   decodeFrame: () => decodeFrame,
-  decodeObject: () => decodeObject,
-  decodeTLVs: () => decodeTLVs,
-  decodeTLVsList: () => decodeTLVsList,
-  decodeVarint: () => decodeVarint,
+  decodeObject: () => import_axis_protocol.decodeObject,
+  decodeTLVs: () => import_axis_protocol.decodeTLVs,
+  decodeTLVsList: () => import_axis_protocol.decodeTLVsList,
+  decodeVarint: () => import_axis_protocol3.decodeVarint,
   encVarint: () => encVarint,
   encodeAxis1Frame: () => encodeAxis1Frame,
   encodeFrame: () => encodeFrame,
-  encodeTLVs: () => encodeTLVs,
-  encodeVarint: () => encodeVarint,
+  encodeTLVs: () => import_axis_protocol.encodeTLVs,
+  encodeVarint: () => import_axis_protocol3.encodeVarint,
   extractDtoSchema: () => extractDtoSchema,
   generateEd25519KeyPair: () => generateEd25519KeyPair,
   getSignTarget: () => getSignTarget,
@@ -201,7 +202,7 @@ __export(index_exports, {
   unpackPasskeyRegisterOptionsReq: () => unpackPasskeyRegisterOptionsReq,
   utf8: () => utf8,
   validateFrameShape: () => validateFrameShape,
-  varintLength: () => varintLength,
+  varintLength: () => import_axis_protocol3.varintLength,
   varintU: () => varintU,
   verifyFrameSignature: () => verifyFrameSignature
 });
@@ -305,142 +306,12 @@ function TlvRange(min, max, message) {
 // src/decorators/dto-schema.util.ts
 var import_reflect_metadata3 = require("reflect-metadata");
 
-// src/core/varint.ts
-function encodeVarint(value) {
-  if (value < 0) throw new Error("Varint must be unsigned");
-  const bytes2 = [];
-  while (true) {
-    const byte = value & 127;
-    value >>>= 7;
-    if (value === 0) {
-      bytes2.push(byte);
-      break;
-    }
-    bytes2.push(byte | 128);
-  }
-  return new Uint8Array(bytes2);
-}
-function decodeVarint(buf, offset = 0) {
-  let value = 0;
-  let shift = 0;
-  let length = 0;
-  while (true) {
-    if (offset + length >= buf.length) {
-      throw new Error("Varint decode out of bounds");
-    }
-    const byte = buf[offset + length];
-    value += (byte & 127) * Math.pow(2, shift);
-    length++;
-    shift += 7;
-    if ((byte & 128) === 0) {
-      break;
-    }
-    if (length > 8) throw new Error("Varint too large");
-  }
-  return { value, length };
-}
-function varintLength(value) {
-  if (value < 0) throw new Error("Varint must be unsigned");
-  let len = 0;
-  do {
-    value >>>= 7;
-    len++;
-  } while (value !== 0);
-  return len;
-}
-
 // src/core/tlv.ts
-function encodeTLVs(tlvs) {
-  const sorted = [...tlvs].sort((a, b) => a.type - b.type);
-  for (let i = 0; i < sorted.length - 1; i++) {
-    if (sorted[i].type === sorted[i + 1].type) {
-      throw new Error(`Duplicate TLV type: ${sorted[i].type}`);
-    }
-  }
-  let totalSize = 0;
-  for (const t of sorted) {
-    totalSize += varintLength(t.type);
-    totalSize += varintLength(t.value.length);
-    totalSize += t.value.length;
-  }
-  const buf = new Uint8Array(totalSize);
-  let offset = 0;
-  for (const t of sorted) {
-    const typeBytes = encodeVarint(t.type);
-    buf.set(typeBytes, offset);
-    offset += typeBytes.length;
-    const lenBytes = encodeVarint(t.value.length);
-    buf.set(lenBytes, offset);
-    offset += lenBytes.length;
-    buf.set(t.value, offset);
-    offset += t.value.length;
-  }
-  return buf;
-}
-function decodeTLVsList(buf, maxItems = 1024) {
-  const list = [];
-  let offset = 0;
-  while (offset < buf.length) {
-    if (list.length >= maxItems) throw new Error("TLV_LIMIT");
-    const { value: type, length: typeLen } = decodeVarint(buf, offset);
-    offset += typeLen;
-    const { value: len, length: lenLen } = decodeVarint(buf, offset);
-    offset += lenLen;
-    if (offset + len > buf.length) {
-      throw new Error(`TLV violation: Length ${len} exceeds buffer`);
-    }
-    const value = buf.slice(offset, offset + len);
-    list.push({ type, value });
-    offset += len;
-  }
-  return list;
-}
-function decodeTLVs(buf) {
-  const map2 = /* @__PURE__ */ new Map();
-  let offset = 0;
-  let lastType = -1;
-  while (offset < buf.length) {
-    const { value: type, length: typeLen } = decodeVarint(buf, offset);
-    offset += typeLen;
-    if (type <= lastType) {
-      throw new Error(
-        `TLV violation: Unsorted or duplicate type ${type} after ${lastType}`
-      );
-    }
-    lastType = type;
-    const { value: len, length: lenLen } = decodeVarint(buf, offset);
-    offset += lenLen;
-    if (offset + len > buf.length) {
-      throw new Error(`TLV violation: Length ${len} exceeds buffer`);
-    }
-    const value = buf.slice(offset, offset + len);
-    map2.set(type, value);
-    offset += len;
-  }
-  return map2;
-}
-function decodeObject(bytes2, depth = 0, limits = { maxDepth: 8, maxItems: 128 }) {
-  if (depth > limits.maxDepth) {
-    throw new Error("OBJECT_DEPTH_EXCEEDED");
-  }
-  const map2 = decodeTLVs(bytes2);
-  return map2;
-}
-function decodeArray(bytes2, itemType, maxItems = 256) {
-  const list = decodeTLVsList(bytes2, maxItems);
-  const items = [];
-  for (const tlv2 of list) {
-    if (tlv2.type !== itemType) {
-      throw new Error(`INVALID_ARRAY_ITEM:${tlv2.type}`);
-    }
-    items.push(tlv2.value);
-  }
-  return items;
-}
+var import_axis_protocol = require("@nextera.one/axis-protocol");
 
 // src/decorators/dto-schema.util.ts
 function extractDtoSchema(dto) {
-  const fieldMetas = Reflect.getOwnMetadata(TLV_FIELDS_KEY, dto) || [];
+  const fieldMetas = Reflect.getMetadata(TLV_FIELDS_KEY, dto) || [];
   if (fieldMetas.length === 0) {
     throw new Error(
       `DTO class ${dto.name} has no @TlvField decorators \u2014 nothing to validate`
@@ -459,7 +330,7 @@ function extractDtoSchema(dto) {
       scope: m.options.scope
     };
   });
-  const validatorMetas = Reflect.getOwnMetadata(TLV_VALIDATORS_KEY, dto) || [];
+  const validatorMetas = Reflect.getMetadata(TLV_VALIDATORS_KEY, dto) || [];
   const validators = /* @__PURE__ */ new Map();
   for (const vm of validatorMetas) {
     const tag = tagByProp.get(vm.property);
@@ -474,7 +345,7 @@ function extractDtoSchema(dto) {
   return { fields, validators };
 }
 function buildDtoDecoder(dto) {
-  const fieldMetas = Reflect.getOwnMetadata(TLV_FIELDS_KEY, dto) || [];
+  const fieldMetas = Reflect.getMetadata(TLV_FIELDS_KEY, dto) || [];
   if (fieldMetas.length === 0) {
     throw new Error(
       `DTO class ${dto.name} has no @TlvField decorators \u2014 cannot build decoder`
@@ -485,7 +356,7 @@ function buildDtoDecoder(dto) {
     tagMap.set(m.tag, { property: m.property, kind: m.options.kind });
   }
   return (bodyBytes) => {
-    const tlvMap2 = decodeTLVs(new Uint8Array(bodyBytes));
+    const tlvMap2 = (0, import_axis_protocol.decodeTLVs)(new Uint8Array(bodyBytes));
     const result = {};
     for (const [tag, raw] of tlvMap2) {
       const meta = tagMap.get(tag);
@@ -742,82 +613,10 @@ IntentRouter = __decorateClass([
 ], IntentRouter);
 
 // src/core/constants.ts
-var AXIS_MAGIC = new Uint8Array([65, 88, 73, 83, 49]);
-var AXIS_VERSION = 1;
-var MAX_HDR_LEN = 2048;
-var MAX_BODY_LEN = 65536;
-var MAX_SIG_LEN = 128;
-var MAX_FRAME_LEN = 70 * 1024;
-var FLAG_BODY_TLV = 1;
-var FLAG_CHAIN_REQ = 2;
-var FLAG_HAS_WITNESS = 4;
-var TLV_PID = 1;
-var TLV_TS = 2;
-var TLV_INTENT = 3;
-var TLV_ACTOR_ID = 4;
-var TLV_PROOF_TYPE = 5;
-var TLV_PROOF_REF = 6;
-var TLV_NONCE = 7;
-var TLV_AUD = 8;
-var TLV_REALM = TLV_AUD;
-var TLV_NODE = 9;
-var TLV_TRACE_ID = 10;
-var TLV_KID = 11;
-var TLV_RID = 15;
-var TLV_OK = 16;
-var TLV_EFFECT = 17;
-var TLV_ERROR_CODE = 18;
-var TLV_ERROR_MSG = 19;
-var TLV_PREV_HASH = 20;
-var TLV_RECEIPT_HASH = 21;
-var TLV_NODE_KID = 30;
-var TLV_NODE_CERT_HASH = 34;
-var TLV_LOOM_PRESENCE_ID = 91;
-var TLV_LOOM_WRIT = 92;
-var TLV_LOOM_THREAD_HASH = 93;
-var TLV_UPLOAD_ID = 70;
-var TLV_INDEX = 71;
-var TLV_OFFSET = 72;
-var TLV_SHA256_CHUNK = 73;
-var TLV_CAPSULE = 90;
-var TLV_BODY_OBJ = 254;
-var TLV_BODY_ARR = 255;
-var NCERT_NODE_ID = 1;
-var NCERT_KID = 2;
-var NCERT_ALG = 3;
-var NCERT_PUB = 4;
-var NCERT_NBF = 5;
-var NCERT_EXP = 6;
-var NCERT_SCOPE = 7;
-var NCERT_ISSUER_KID = 8;
-var NCERT_PAYLOAD = 50;
-var NCERT_SIG = 51;
-var PROOF_NONE = 0;
-var PROOF_CAPSULE = 1;
-var PROOF_JWT = 2;
-var PROOF_MTLS = 3;
-var PROOF_LOOM = 4;
-var PROOF_WITNESS = 5;
-var ProofType = /* @__PURE__ */ ((ProofType2) => {
-  ProofType2[ProofType2["NONE"] = 0] = "NONE";
-  ProofType2[ProofType2["CAPSULE"] = 1] = "CAPSULE";
-  ProofType2[ProofType2["JWT"] = 2] = "JWT";
-  ProofType2[ProofType2["MTLS"] = 3] = "MTLS";
-  ProofType2[ProofType2["LOOM"] = 4] = "LOOM";
-  ProofType2[ProofType2["WITNESS"] = 5] = "WITNESS";
-  return ProofType2;
-})(ProofType || {});
-var BodyProfile = /* @__PURE__ */ ((BodyProfile2) => {
-  BodyProfile2[BodyProfile2["RAW"] = 0] = "RAW";
-  BodyProfile2[BodyProfile2["TLV_MAP"] = 1] = "TLV_MAP";
-  BodyProfile2[BodyProfile2["OBJ"] = 2] = "OBJ";
-  BodyProfile2[BodyProfile2["ARR"] = 3] = "ARR";
-  return BodyProfile2;
-})(BodyProfile || {});
-var ERR_INVALID_PACKET = "INVALID_PACKET";
-var ERR_BAD_SIGNATURE = "BAD_SIGNATURE";
-var ERR_REPLAY_DETECTED = "REPLAY_DETECTED";
-var ERR_CONTRACT_VIOLATION = "CONTRACT_VIOLATION";
+var import_axis_protocol2 = require("@nextera.one/axis-protocol");
+
+// src/core/varint.ts
+var import_axis_protocol3 = require("@nextera.one/axis-protocol");
 
 // src/core/signature.ts
 var crypto = __toESM(require("crypto"));
@@ -838,28 +637,28 @@ var AxisFrameZ = z.object({
   sig: z.custom((v) => v instanceof Uint8Array)
 });
 function encodeFrame(frame) {
-  const hdrBytes = encodeTLVs(
+  const hdrBytes = (0, import_axis_protocol.encodeTLVs)(
     Array.from(frame.headers.entries()).map(([t, v]) => ({
       type: t,
       value: v
     }))
   );
-  if (hdrBytes.length > MAX_HDR_LEN) throw new Error("Header too large");
-  if (frame.body.length > MAX_BODY_LEN) throw new Error("Body too large");
-  if (frame.sig.length > MAX_SIG_LEN) throw new Error("Signature too large");
-  const hdrLenBytes = encodeVarint(hdrBytes.length);
-  const bodyLenBytes = encodeVarint(frame.body.length);
-  const sigLenBytes = encodeVarint(frame.sig.length);
+  if (hdrBytes.length > import_axis_protocol2.MAX_HDR_LEN) throw new Error("Header too large");
+  if (frame.body.length > import_axis_protocol2.MAX_BODY_LEN) throw new Error("Body too large");
+  if (frame.sig.length > import_axis_protocol2.MAX_SIG_LEN) throw new Error("Signature too large");
+  const hdrLenBytes = (0, import_axis_protocol3.encodeVarint)(hdrBytes.length);
+  const bodyLenBytes = (0, import_axis_protocol3.encodeVarint)(frame.body.length);
+  const sigLenBytes = (0, import_axis_protocol3.encodeVarint)(frame.sig.length);
   const totalLen = 5 + // Magic (AXIS1)
   1 + // Version
   1 + // Flags
   hdrLenBytes.length + bodyLenBytes.length + sigLenBytes.length + hdrBytes.length + frame.body.length + frame.sig.length;
-  if (totalLen > MAX_FRAME_LEN) throw new Error("Total frame too large");
+  if (totalLen > import_axis_protocol2.MAX_FRAME_LEN) throw new Error("Total frame too large");
   const buf = new Uint8Array(totalLen);
   let offset = 0;
-  buf.set(AXIS_MAGIC, offset);
+  buf.set(import_axis_protocol2.AXIS_MAGIC, offset);
   offset += 5;
-  buf[offset++] = AXIS_VERSION;
+  buf[offset++] = import_axis_protocol2.AXIS_VERSION;
   buf[offset++] = frame.flags;
   buf.set(hdrLenBytes, offset);
   offset += hdrLenBytes.length;
@@ -879,21 +678,21 @@ function decodeFrame(buf) {
   let offset = 0;
   if (offset + 5 > buf.length) throw new Error("Packet too short");
   for (let i = 0; i < 5; i++) {
-    if (buf[offset + i] !== AXIS_MAGIC[i]) throw new Error("Invalid Magic");
+    if (buf[offset + i] !== import_axis_protocol2.AXIS_MAGIC[i]) throw new Error("Invalid Magic");
   }
   offset += 5;
   const ver = buf[offset++];
-  if (ver !== AXIS_VERSION) throw new Error(`Unsupported version: ${ver}`);
+  if (ver !== import_axis_protocol2.AXIS_VERSION) throw new Error(`Unsupported version: ${ver}`);
   const flags = buf[offset++];
-  const { value: hdrLen, length: hlLen } = decodeVarint(buf, offset);
+  const { value: hdrLen, length: hlLen } = (0, import_axis_protocol3.decodeVarint)(buf, offset);
   offset += hlLen;
-  if (hdrLen > MAX_HDR_LEN) throw new Error("Header limit exceeded");
-  const { value: bodyLen, length: blLen } = decodeVarint(buf, offset);
+  if (hdrLen > import_axis_protocol2.MAX_HDR_LEN) throw new Error("Header limit exceeded");
+  const { value: bodyLen, length: blLen } = (0, import_axis_protocol3.decodeVarint)(buf, offset);
   offset += blLen;
-  if (bodyLen > MAX_BODY_LEN) throw new Error("Body limit exceeded");
-  const { value: sigLen, length: slLen } = decodeVarint(buf, offset);
+  if (bodyLen > import_axis_protocol2.MAX_BODY_LEN) throw new Error("Body limit exceeded");
+  const { value: sigLen, length: slLen } = (0, import_axis_protocol3.decodeVarint)(buf, offset);
   offset += slLen;
-  if (sigLen > MAX_SIG_LEN) throw new Error("Signature limit exceeded");
+  if (sigLen > import_axis_protocol2.MAX_SIG_LEN) throw new Error("Signature limit exceeded");
   if (offset + hdrLen + bodyLen + sigLen > buf.length) {
     throw new Error("Frame truncated");
   }
@@ -903,7 +702,7 @@ function decodeFrame(buf) {
   offset += bodyLen;
   const sigBytes = buf.slice(offset, offset + sigLen);
   offset += sigLen;
-  const headers = decodeTLVs(hdrBytes);
+  const headers = (0, import_axis_protocol.decodeTLVs)(hdrBytes);
   return {
     flags,
     headers,
@@ -2130,22 +1929,22 @@ function decodeAxis1Frame(buf) {
 // src/types/packet.ts
 var T = {
   /** The specific intent or action (e.g., 'vault.create') */
-  INTENT: TLV_INTENT,
+  INTENT: import_axis_protocol2.TLV_INTENT,
   /** Package identifier / ID */
-  PID: TLV_PID,
+  PID: import_axis_protocol2.TLV_PID,
   /** Versioning of the intent schema */
   INTENT_VERSION: 10,
   // Defaulting to TRACE_ID for now or a new tag if available
   /** Unique identifier for the requesting actor */
-  ACTOR_ID: TLV_ACTOR_ID,
+  ACTOR_ID: import_axis_protocol2.TLV_ACTOR_ID,
   /** Optional Capability Token identifier (16 bytes) */
-  CAPSULE_ID: TLV_PROOF_REF,
+  CAPSULE_ID: import_axis_protocol2.TLV_PROOF_REF,
   /** Unique session/request identifier (16 bytes) */
-  NONCE: TLV_NONCE,
+  NONCE: import_axis_protocol2.TLV_NONCE,
   /** High-precision Unix timestamp in milliseconds */
-  TS_MS: TLV_TS,
+  TS_MS: import_axis_protocol2.TLV_TS,
   /** Proof type */
-  PROOF_TYPE: TLV_PROOF_TYPE,
+  PROOF_TYPE: import_axis_protocol2.TLV_PROOF_TYPE,
   /** Standard binary body tag */
   BODY: 100,
   /** Standard JSON-encoded body tag */
@@ -2322,12 +2121,12 @@ var CAPABILITIES = {
   witness: "witness"
 };
 var PROOF_CAPABILITIES = {
-  [PROOF_NONE]: [],
-  [PROOF_CAPSULE]: ["read", "write", "execute"],
-  [PROOF_JWT]: ["read"],
-  [PROOF_MTLS]: ["read", "write", "admin"],
-  [PROOF_LOOM]: ["read", "write", "execute"],
-  [PROOF_WITNESS]: ["read", "write", "execute", "witness"]
+  [import_axis_protocol2.PROOF_NONE]: [],
+  [import_axis_protocol2.PROOF_CAPSULE]: ["read", "write", "execute"],
+  [import_axis_protocol2.PROOF_JWT]: ["read"],
+  [import_axis_protocol2.PROOF_MTLS]: ["read", "write", "admin"],
+  [import_axis_protocol2.PROOF_LOOM]: ["read", "write", "execute"],
+  [import_axis_protocol2.PROOF_WITNESS]: ["read", "write", "execute", "witness"]
 };
 var INTENT_REQUIREMENTS = {
   "public.*": [],
@@ -2654,6 +2453,7 @@ function isTimestampValid(ts, skewSeconds = 120) {
   Schema2012_PasskeyLoginVerifyRes,
   Schema2021_PasskeyRegisterOptionsReq,
   SensorDecisions,
+  TLV,
   TLV_ACTOR_ID,
   TLV_AUD,
   TLV_BODY_ARR,