@nextera.one/axis-server-sdk 1.3.0 → 1.5.0

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 import { ModuleRef, DiscoveryService, MetadataScanner, Reflector } from '@nestjs/core';
-import { A as AxisFrame$2 } from './index-B5xzROld.js';
-export { a as AxisBinaryFrame, b as AxisFrameZ, c as computeReceiptHash, d as computeSignaturePayload, i as core, e as decodeFrame, f as encodeFrame, g as generateEd25519KeyPair, h as getSignTarget, s as sha256, j as signFrame, v as verifyFrameSignature } from './index-B5xzROld.js';
+import { A as AxisFrame$2 } from './index-1uEwnW-w.js';
+export { a as AxisBinaryFrame, b as AxisError, c as AxisFrameZ, d as computeReceiptHash, e as computeSignaturePayload, i as core, f as decodeFrame, g as encodeFrame, h as generateEd25519KeyPair, j as getSignTarget, s as sha256, k as signFrame, v as verifyFrameSignature } from './index-1uEwnW-w.js';
 import { PROOF_LOOM, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT } from '@nextera.one/axis-protocol';
 export { AXIS_MAGIC, AXIS_VERSION, TLV as AxisTlvType, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
-import * as z from 'zod';
 import { OnModuleInit, OnApplicationBootstrap } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
+import * as z from 'zod';
 
 declare const HANDLER_METADATA_KEY = "axis:handler";
 declare function Handler(intent?: string): ClassDecorator;
@@ -48,6 +48,16 @@ declare function IntentBody(decoder: (buf: Buffer) => any): MethodDecorator;
 declare const INTENT_SENSORS_KEY = "axis:intent:sensors";
 declare function IntentSensors(sensors: Function[]): MethodDecorator;
 
+declare const HANDLER_SENSORS_KEY = "axis:handler:sensors";
+declare function HandlerSensors(sensors: Function[]): ClassDecorator;
+
+declare const SENSOR_METADATA_KEY = "axis:sensor";
+type SensorPhase = 'PRE_DECODE' | 'POST_DECODE';
+interface SensorOptions {
+    phase?: SensorPhase;
+}
+declare function Sensor(options?: SensorOptions): ClassDecorator;
+
 declare const TLV_FIELDS_KEY = "axis:tlv:fields";
 declare const TLV_VALIDATORS_KEY = "axis:tlv:validators";
 type TlvFieldKind = 'utf8' | 'u64' | 'bytes' | 'bytes16' | 'bool' | 'obj' | 'arr';
@@ -108,15 +118,15 @@ declare abstract class AxisResponseDto extends AxisTlvDto {
 interface IntentSchema$1 {
     intent: string;
     version: number;
-    bodyProfile: 'TLV_MAP' | 'RAW' | 'TLV_OBJ' | 'TLV_ARR';
+    bodyProfile: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
     fields: Array<{
         name: string;
         tlv: number;
-        kind: IntentTlvField['kind'];
+        kind: IntentTlvField["kind"];
         required?: boolean;
         maxLen?: number;
         max?: string;
-        scope?: 'header' | 'body';
+        scope?: "header" | "body";
     }>;
 }
 interface AxisEffect {
@@ -152,11 +162,136 @@ declare class IntentRouter {
     registerHandler(instance: any): void;
     route(frame: AxisFrame$2): Promise<AxisEffect>;
     private logIntent;
-    registerIntentMeta(intent: string, proto: object, methodName: string): void;
+    registerIntentMeta(intent: string, proto: object, methodName: string, handlerSensors?: Function[]): void;
     private runIntentSensors;
     private storeSchema;
 }
 
+declare const BAND: {
+    readonly WIRE: 0;
+    readonly IDENTITY: 40;
+    readonly POLICY: 90;
+    readonly CONTENT: 140;
+    readonly BUSINESS: 200;
+    readonly AUDIT: 900;
+};
+type SensorBand = keyof typeof BAND;
+declare const PRE_DECODE_BOUNDARY = 40;
+
+declare function stableJsonStringify(value: unknown): string;
+
+interface ObservationStage {
+    name: string;
+    status: 'ok' | 'fail' | 'skip';
+    startMs: number;
+    endMs?: number;
+    durationMs?: number;
+    reason?: string;
+    code?: string;
+}
+interface ObservationSensor {
+    name: string;
+    allowed: boolean;
+    riskScore: number;
+    durationMs: number;
+    reasons: string[];
+    code?: string;
+}
+interface AxisObservation {
+    id: string;
+    startMs: number;
+    transport: 'http' | 'ws';
+    ip?: string;
+    intent?: string;
+    actorId?: string;
+    capsuleId?: string;
+    stages: ObservationStage[];
+    sensors: ObservationSensor[];
+    decision?: 'ALLOW' | 'DENY';
+    resultCode?: string;
+    statusCode?: number;
+    endMs?: number;
+    durationMs?: number;
+    facts: Record<string, unknown>;
+}
+declare function createObservation(transport: 'http' | 'ws', ip?: string): AxisObservation;
+declare function startStage(obs: AxisObservation, name: string): ObservationStage;
+declare function endStage(stage: ObservationStage, status?: 'ok' | 'fail' | 'skip', reason?: string, code?: string): void;
+declare function recordSensor(obs: AxisObservation, name: string, allowed: boolean, riskScore: number, durationMs: number, reasons: string[], code?: string): void;
+declare function finalizeObservation(obs: AxisObservation, decision: 'ALLOW' | 'DENY', statusCode: number, resultCode?: string): void;
+
+interface ObservationQueueMessage {
+    v: 1;
+    observation: AxisObservation;
+    attempts: number;
+    firstEnqueuedAt: number;
+    lastEnqueuedAt: number;
+    sourceNodeId: string;
+    lastError?: string;
+}
+interface ObservationQueueConfig {
+    enabled: boolean;
+    workerEnabled: boolean;
+    streamKey: string;
+    deadLetterStreamKey: string;
+    groupName: string;
+    consumerName: string;
+    readBlockMs: number;
+    readBatchSize: number;
+    reclaimIdleMs: number;
+    reclaimBatchSize: number;
+    maxRetries: number;
+    maxStreamLength: number;
+    workerConcurrency: number;
+}
+
+interface ObservationStreamEntry {
+    id: string;
+    message: ObservationQueueMessage;
+}
+declare function buildQueueMessage(observation: AxisObservation, sourceNodeId: string, previous?: ObservationQueueMessage, lastError?: string): ObservationQueueMessage;
+declare function encodeQueueMessage(message: ObservationQueueMessage): string;
+declare function decodeQueueMessage(raw: string): ObservationQueueMessage | null;
+declare function parseStreamEntries(raw: any): ObservationStreamEntry[];
+declare function parseAutoClaimEntries(raw: any): ObservationStreamEntry[];
+
+interface ObservationWitnessSummary {
+    intent?: string;
+    actorId?: string;
+    decision?: string;
+    statusCode?: number;
+    durationMs?: number;
+    sensorCount: number;
+    stageCount: number;
+}
+interface UnsignedObservationWitness {
+    v: 1;
+    observationId: string;
+    payloadHash: string;
+    sealedAt: number;
+    summary: ObservationWitnessSummary;
+}
+declare function canonicalizeObservation(obs: AxisObservation): string;
+declare function hashObservation(obs: AxisObservation): string;
+declare function buildUnsignedWitness(obs: AxisObservation): UnsignedObservationWitness | null;
+
+interface ResponseObserverContext {
+    actorId: string;
+    intent: string;
+}
+interface ResponseContract {
+    ok: boolean;
+    effect: string;
+    body?: Uint8Array;
+    headers?: Map<number, Uint8Array>;
+}
+interface ObserverVerdict {
+    passed: boolean;
+    code?: string;
+    reason?: string;
+}
+declare function verifyResponse(ctx: ResponseObserverContext, response: ResponseContract): ObserverVerdict;
+
 declare const ATS1_HDR: {
     readonly INTENT_ID: 1;
     readonly ACTOR_KEY_ID: 2;
@@ -986,78 +1121,6 @@ declare class DiskUploadFileStore implements UploadFileStore {
     createTempReadStream(fileId: string): NodeJS.ReadableStream;
 }
 
-type ProofType$1 = 1 | 2 | 3 | 4;
-interface ProofVerificationResult {
-    valid: boolean;
-    actorId?: string;
-    error?: string;
-    metadata?: Record<string, any>;
-}
-interface MTLSContext {
-    clientCertPem?: string;
-    clientCertFingerprint?: string;
-    clientCertSubject?: string;
-    clientCertIssuer?: string;
-    verified?: boolean;
-}
-interface DeviceSEContext {
-    deviceId: string;
-    signature: Uint8Array;
-    publicKey: Uint8Array;
-    challenge?: Uint8Array;
-}
-declare class ProofVerificationService {
-    private readonly logger;
-    private readonly deviceKeys;
-    private readonly trustedCerts;
-    verifyProof(proofType: ProofType$1, proofRef: Uint8Array, context: {
-        signTarget?: Uint8Array;
-        signature?: Uint8Array;
-        mtls?: MTLSContext;
-        deviceSE?: DeviceSEContext;
-    }): Promise<ProofVerificationResult>;
-    private verifyCapsuleProof;
-    private verifyJWTProof;
-    private verifyMTLSProof;
-    private verifyDeviceSEProof;
-    registerDeviceKey(deviceId: string, publicKey: Uint8Array): void;
-    unregisterDevice(deviceId: string): boolean;
-    registerMTLSCert(fingerprint: string, actorId: string): void;
-    revokeMTLSCert(fingerprint: string): boolean;
-    static calculateFingerprint(certPem: string): string;
-}
-
-type index$7_ActorKeyRecord = ActorKeyRecord;
-type index$7_AxisCapsule = AxisCapsule;
-type index$7_AxisCapsuleConstraints = AxisCapsuleConstraints;
-type index$7_AxisCapsulePayload = AxisCapsulePayload;
-type index$7_CapsuleBatchBody = CapsuleBatchBody;
-type index$7_CapsuleBatchResult = CapsuleBatchResult;
-type index$7_CapsuleIssueBody = CapsuleIssueBody;
-type index$7_CapsuleIssueResult = CapsuleIssueResult;
-type index$7_CapsuleMode = CapsuleMode;
-type index$7_CapsuleRecord = CapsuleRecord;
-type index$7_CapsuleRevokeBody = CapsuleRevokeBody;
-type index$7_CapsuleStatus = CapsuleStatus;
-type index$7_DeviceSEContext = DeviceSEContext;
-type index$7_IntentExecBody = IntentExecBody;
-type index$7_IssuerKeyRecord = IssuerKeyRecord;
-type index$7_KeyStatus = KeyStatus;
-type index$7_MTLSContext = MTLSContext;
-type index$7_ProofVerificationResult = ProofVerificationResult;
-type index$7_ProofVerificationService = ProofVerificationService;
-declare const index$7_ProofVerificationService: typeof ProofVerificationService;
-type index$7_TickWindow = TickWindow;
-declare const index$7_b64urlDecode: typeof b64urlDecode;
-declare const index$7_b64urlDecodeString: typeof b64urlDecodeString;
-declare const index$7_b64urlEncode: typeof b64urlEncode;
-declare const index$7_b64urlEncodeString: typeof b64urlEncodeString;
-declare const index$7_canonicalJson: typeof canonicalJson;
-declare const index$7_canonicalJsonExcluding: typeof canonicalJsonExcluding;
-declare namespace index$7 {
-  export { type index$7_ActorKeyRecord as ActorKeyRecord, type AxisAlg$1 as AxisAlg, type index$7_AxisCapsule as AxisCapsule, type index$7_AxisCapsuleConstraints as AxisCapsuleConstraints, type index$7_AxisCapsulePayload as AxisCapsulePayload, type AxisPacket$1 as AxisPacket, type AxisResponse$1 as AxisResponse, type AxisSig$1 as AxisSig, type index$7_CapsuleBatchBody as CapsuleBatchBody, type index$7_CapsuleBatchResult as CapsuleBatchResult, type index$7_CapsuleIssueBody as CapsuleIssueBody, type index$7_CapsuleIssueResult as CapsuleIssueResult, type index$7_CapsuleMode as CapsuleMode, type index$7_CapsuleRecord as CapsuleRecord, type index$7_CapsuleRevokeBody as CapsuleRevokeBody, type index$7_CapsuleStatus as CapsuleStatus, type index$7_DeviceSEContext as DeviceSEContext, type index$7_IntentExecBody as IntentExecBody, type index$7_IssuerKeyRecord as IssuerKeyRecord, type index$7_KeyStatus as KeyStatus, type index$7_MTLSContext as MTLSContext, type ProofType$1 as ProofType, type index$7_ProofVerificationResult as ProofVerificationResult, index$7_ProofVerificationService as ProofVerificationService, type index$7_TickWindow as TickWindow, index$7_b64urlDecode as b64urlDecode, index$7_b64urlDecodeString as b64urlDecodeString, index$7_b64urlEncode as b64urlEncode, index$7_b64urlEncodeString as b64urlEncodeString, index$7_canonicalJson as canonicalJson, index$7_canonicalJsonExcluding as canonicalJsonExcluding };
-}
-
 interface AxisRequestData {
     raw: Buffer;
     ip: string | undefined;
@@ -1070,53 +1133,40 @@ declare const AxisContext$1: (...dataOrPipes: unknown[]) => ParameterDecorator;
 declare const AxisDemoPubkey: (...dataOrPipes: unknown[]) => ParameterDecorator;
 declare const AxisFrame: (...dataOrPipes: unknown[]) => ParameterDecorator;
 
-declare const SENSOR_METADATA_KEY = "axis:sensor";
-type SensorPhase = 'PRE_DECODE' | 'POST_DECODE';
-interface SensorOptions {
-    phase?: SensorPhase;
+declare class HandlerDiscoveryService implements OnModuleInit {
+    private readonly discovery;
+    private readonly scanner;
+    private readonly router;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
+    onModuleInit(): void;
 }
-declare function Sensor(options?: SensorOptions): ClassDecorator;
 
-declare const index$6_AxisDemoPubkey: typeof AxisDemoPubkey;
-declare const index$6_AxisFrame: typeof AxisFrame;
-declare const index$6_AxisIp: typeof AxisIp;
-declare const index$6_AxisRaw: typeof AxisRaw;
-type index$6_AxisRequestData = AxisRequestData;
-type index$6_DtoSchema = DtoSchema;
-declare const index$6_HANDLER_METADATA_KEY: typeof HANDLER_METADATA_KEY;
-declare const index$6_Handler: typeof Handler;
-declare const index$6_INTENT_BODY_KEY: typeof INTENT_BODY_KEY;
-declare const index$6_INTENT_METADATA_KEY: typeof INTENT_METADATA_KEY;
-declare const index$6_INTENT_ROUTES_KEY: typeof INTENT_ROUTES_KEY;
-declare const index$6_INTENT_SENSORS_KEY: typeof INTENT_SENSORS_KEY;
-declare const index$6_Intent: typeof Intent;
-declare const index$6_IntentBody: typeof IntentBody;
-type index$6_IntentKind = IntentKind;
-type index$6_IntentOptions = IntentOptions;
-type index$6_IntentRoute = IntentRoute;
-declare const index$6_IntentSensors: typeof IntentSensors;
-type index$6_IntentTlvField = IntentTlvField;
-declare const index$6_SENSOR_METADATA_KEY: typeof SENSOR_METADATA_KEY;
-declare const index$6_Sensor: typeof Sensor;
-type index$6_SensorOptions = SensorOptions;
-type index$6_SensorPhase = SensorPhase;
-declare const index$6_TLV_FIELDS_KEY: typeof TLV_FIELDS_KEY;
-declare const index$6_TLV_VALIDATORS_KEY: typeof TLV_VALIDATORS_KEY;
-declare const index$6_TlvEnum: typeof TlvEnum;
-declare const index$6_TlvField: typeof TlvField;
-type index$6_TlvFieldKind = TlvFieldKind;
-type index$6_TlvFieldMeta = TlvFieldMeta;
-type index$6_TlvFieldOptions = TlvFieldOptions;
-declare const index$6_TlvMinLen: typeof TlvMinLen;
-declare const index$6_TlvRange: typeof TlvRange;
-declare const index$6_TlvUtf8Pattern: typeof TlvUtf8Pattern;
-declare const index$6_TlvValidate: typeof TlvValidate;
-type index$6_TlvValidatorFn = TlvValidatorFn;
-type index$6_TlvValidatorMeta = TlvValidatorMeta;
-declare const index$6_buildDtoDecoder: typeof buildDtoDecoder;
-declare const index$6_extractDtoSchema: typeof extractDtoSchema;
-declare namespace index$6 {
-  export { AxisContext$1 as AxisContext, index$6_AxisDemoPubkey as AxisDemoPubkey, index$6_AxisFrame as AxisFrame, index$6_AxisIp as AxisIp, index$6_AxisRaw as AxisRaw, type index$6_AxisRequestData as AxisRequestData, type index$6_DtoSchema as DtoSchema, index$6_HANDLER_METADATA_KEY as HANDLER_METADATA_KEY, index$6_Handler as Handler, index$6_INTENT_BODY_KEY as INTENT_BODY_KEY, index$6_INTENT_METADATA_KEY as INTENT_METADATA_KEY, index$6_INTENT_ROUTES_KEY as INTENT_ROUTES_KEY, index$6_INTENT_SENSORS_KEY as INTENT_SENSORS_KEY, index$6_Intent as Intent, index$6_IntentBody as IntentBody, type index$6_IntentKind as IntentKind, type index$6_IntentOptions as IntentOptions, type index$6_IntentRoute as IntentRoute, index$6_IntentSensors as IntentSensors, type index$6_IntentTlvField as IntentTlvField, index$6_SENSOR_METADATA_KEY as SENSOR_METADATA_KEY, index$6_Sensor as Sensor, type index$6_SensorOptions as SensorOptions, type index$6_SensorPhase as SensorPhase, index$6_TLV_FIELDS_KEY as TLV_FIELDS_KEY, index$6_TLV_VALIDATORS_KEY as TLV_VALIDATORS_KEY, index$6_TlvEnum as TlvEnum, index$6_TlvField as TlvField, type index$6_TlvFieldKind as TlvFieldKind, type index$6_TlvFieldMeta as TlvFieldMeta, type index$6_TlvFieldOptions as TlvFieldOptions, index$6_TlvMinLen as TlvMinLen, index$6_TlvRange as TlvRange, index$6_TlvUtf8Pattern as TlvUtf8Pattern, index$6_TlvValidate as TlvValidate, type index$6_TlvValidatorFn as TlvValidatorFn, type index$6_TlvValidatorMeta as TlvValidatorMeta, index$6_buildDtoDecoder as buildDtoDecoder, index$6_extractDtoSchema as extractDtoSchema };
+declare class SensorRegistry {
+    private readonly configService;
+    private sensors;
+    private readonly logger;
+    constructor(configService: ConfigService);
+    register(sensor: AxisSensor): void;
+    list(): AxisSensor[];
+    getPreDecodeSensors(): AxisPreSensor[];
+    getPostDecodeSensors(): AxisPostSensor[];
+    private isPreDecodeSensor;
+    private isPostDecodeSensor;
+    getSensorCountByPhase(): {
+        preDecodeCount: number;
+        postDecodeCount: number;
+    };
+    clear(): void;
+}
+
+declare class SensorDiscoveryService implements OnApplicationBootstrap {
+    private readonly discovery;
+    private readonly reflector;
+    private readonly registry;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
+    onApplicationBootstrap(): void;
 }
 
 declare const SensorDecisionZ: z.ZodUnion<readonly [z.ZodObject<{
@@ -1566,7 +1616,7 @@ declare const ChunkHashInputZ: z.ZodObject<{
     intent: z.ZodString;
 }, z.core.$strip>;
 type ChunkHashInput = z.infer<typeof ChunkHashInputZ>;
-declare enum ProofType {
+declare enum ProofType$1 {
     CAPSULE = 1,
     JWT = 2,
     MTLS_ID = 3,
@@ -1578,7 +1628,7 @@ declare const AxisContextZ: z.ZodObject<{
     ts: z.ZodBigInt;
     intent: z.ZodString;
     actorId: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-    proofType: z.ZodEnum<typeof ProofType>;
+    proofType: z.ZodEnum<typeof ProofType$1>;
     proofRef: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
     nonce: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
     ip: z.ZodString;
@@ -1623,46 +1673,6 @@ declare const AxisErrorZ: z.ZodObject<{
 }, z.core.$strip>;
 type AxisError = z.infer<typeof AxisErrorZ>;
 
-interface ObservationStage {
-    name: string;
-    status: 'ok' | 'fail' | 'skip';
-    startMs: number;
-    endMs?: number;
-    durationMs?: number;
-    reason?: string;
-    code?: string;
-}
-interface ObservationSensor {
-    name: string;
-    allowed: boolean;
-    riskScore: number;
-    durationMs: number;
-    reasons: string[];
-    code?: string;
-}
-interface AxisObservation {
-    id: string;
-    startMs: number;
-    transport: 'http' | 'ws';
-    ip?: string;
-    intent?: string;
-    actorId?: string;
-    capsuleId?: string;
-    stages: ObservationStage[];
-    sensors: ObservationSensor[];
-    decision?: 'ALLOW' | 'DENY';
-    resultCode?: string;
-    statusCode?: number;
-    endMs?: number;
-    durationMs?: number;
-    facts: Record<string, unknown>;
-}
-declare function createObservation(transport: 'http' | 'ws', ip?: string): AxisObservation;
-declare function startStage(obs: AxisObservation, name: string): ObservationStage;
-declare function endStage(stage: ObservationStage, status?: 'ok' | 'fail' | 'skip', reason?: string, code?: string): void;
-declare function recordSensor(obs: AxisObservation, name: string, allowed: boolean, riskScore: number, durationMs: number, reasons: string[], code?: string): void;
-declare function finalizeObservation(obs: AxisObservation, decision: 'ALLOW' | 'DENY', statusCode: number, resultCode?: string): void;
-
 interface AxisDecoded {
     frame: Axis1DecodedFrame;
     packet: AxisPacket;
@@ -1677,51 +1687,157 @@ interface AxisDecoded {
     observation: AxisObservation;
 }
 
-declare class HandlerDiscoveryService implements OnModuleInit {
-    private readonly discovery;
-    private readonly scanner;
-    private readonly router;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
-    onModuleInit(): void;
+interface ChainResult {
+    allowed: boolean;
+    scoreDelta: number;
+    statusCode: number;
+    body?: string | Buffer | Uint8Array;
+    headers?: Map<number, Uint8Array>;
+}
+declare class AxisSensorChainService {
+    private readonly registry;
+    constructor(registry: SensorRegistry);
+    evaluate(input: SensorInput, phase?: 'PRE_DECODE' | 'POST_DECODE' | 'BOTH', baseDecision?: SensorDecision): Promise<SensorDecision>;
+    evaluatePre(input: SensorInput): Promise<SensorDecision>;
+    evaluatePost(input: SensorInput, baseDecision?: SensorDecision): Promise<SensorDecision>;
+    private evaluateSensors;
 }
 
-declare const BAND: {
-    readonly WIRE: 0;
-    readonly IDENTITY: 40;
-    readonly POLICY: 90;
-    readonly CONTENT: 140;
-    readonly BUSINESS: 200;
-    readonly AUDIT: 900;
-};
-type SensorBand = keyof typeof BAND;
-declare const PRE_DECODE_BOUNDARY = 40;
-
-declare class SensorRegistry {
-    private readonly configService;
-    private sensors;
+type ProofType = 1 | 2 | 3 | 4;
+interface ProofVerificationResult {
+    valid: boolean;
+    actorId?: string;
+    error?: string;
+    metadata?: Record<string, any>;
+}
+interface MTLSContext {
+    clientCertPem?: string;
+    clientCertFingerprint?: string;
+    clientCertSubject?: string;
+    clientCertIssuer?: string;
+    verified?: boolean;
+}
+interface DeviceSEContext {
+    deviceId: string;
+    signature: Uint8Array;
+    publicKey: Uint8Array;
+    challenge?: Uint8Array;
+}
+declare class ProofVerificationService {
     private readonly logger;
-    constructor(configService: ConfigService);
-    register(sensor: AxisSensor): void;
-    list(): AxisSensor[];
-    getPreDecodeSensors(): AxisPreSensor[];
-    getPostDecodeSensors(): AxisPostSensor[];
-    private isPreDecodeSensor;
-    private isPostDecodeSensor;
-    getSensorCountByPhase(): {
-        preDecodeCount: number;
-        postDecodeCount: number;
-    };
-    clear(): void;
+    private readonly deviceKeys;
+    private readonly trustedCerts;
+    verifyProof(proofType: ProofType, proofRef: Uint8Array, context: {
+        signTarget?: Uint8Array;
+        signature?: Uint8Array;
+        mtls?: MTLSContext;
+        deviceSE?: DeviceSEContext;
+    }): Promise<ProofVerificationResult>;
+    private verifyCapsuleProof;
+    private verifyJWTProof;
+    private verifyMTLSProof;
+    private verifyDeviceSEProof;
+    registerDeviceKey(deviceId: string, publicKey: Uint8Array): void;
+    unregisterDevice(deviceId: string): boolean;
+    registerMTLSCert(fingerprint: string, actorId: string): void;
+    revokeMTLSCert(fingerprint: string): boolean;
+    static calculateFingerprint(certPem: string): string;
 }
 
-declare class SensorDiscoveryService implements OnApplicationBootstrap {
-    private readonly discovery;
-    private readonly reflector;
-    private readonly registry;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
-    onApplicationBootstrap(): void;
+type index$8_ActorKeyRecord = ActorKeyRecord;
+type index$8_AxisCapsule = AxisCapsule;
+type index$8_AxisCapsuleConstraints = AxisCapsuleConstraints;
+type index$8_AxisCapsulePayload = AxisCapsulePayload;
+type index$8_CapsuleBatchBody = CapsuleBatchBody;
+type index$8_CapsuleBatchResult = CapsuleBatchResult;
+type index$8_CapsuleIssueBody = CapsuleIssueBody;
+type index$8_CapsuleIssueResult = CapsuleIssueResult;
+type index$8_CapsuleMode = CapsuleMode;
+type index$8_CapsuleRecord = CapsuleRecord;
+type index$8_CapsuleRevokeBody = CapsuleRevokeBody;
+type index$8_CapsuleStatus = CapsuleStatus;
+type index$8_DeviceSEContext = DeviceSEContext;
+type index$8_IntentExecBody = IntentExecBody;
+type index$8_IssuerKeyRecord = IssuerKeyRecord;
+type index$8_KeyStatus = KeyStatus;
+type index$8_MTLSContext = MTLSContext;
+type index$8_ProofType = ProofType;
+type index$8_ProofVerificationResult = ProofVerificationResult;
+type index$8_ProofVerificationService = ProofVerificationService;
+declare const index$8_ProofVerificationService: typeof ProofVerificationService;
+type index$8_TickWindow = TickWindow;
+declare const index$8_b64urlDecode: typeof b64urlDecode;
+declare const index$8_b64urlDecodeString: typeof b64urlDecodeString;
+declare const index$8_b64urlEncode: typeof b64urlEncode;
+declare const index$8_b64urlEncodeString: typeof b64urlEncodeString;
+declare const index$8_canonicalJson: typeof canonicalJson;
+declare const index$8_canonicalJsonExcluding: typeof canonicalJsonExcluding;
+declare namespace index$8 {
+  export { type index$8_ActorKeyRecord as ActorKeyRecord, type AxisAlg$1 as AxisAlg, type index$8_AxisCapsule as AxisCapsule, type index$8_AxisCapsuleConstraints as AxisCapsuleConstraints, type index$8_AxisCapsulePayload as AxisCapsulePayload, type AxisPacket$1 as AxisPacket, type AxisResponse$1 as AxisResponse, type AxisSig$1 as AxisSig, type index$8_CapsuleBatchBody as CapsuleBatchBody, type index$8_CapsuleBatchResult as CapsuleBatchResult, type index$8_CapsuleIssueBody as CapsuleIssueBody, type index$8_CapsuleIssueResult as CapsuleIssueResult, type index$8_CapsuleMode as CapsuleMode, type index$8_CapsuleRecord as CapsuleRecord, type index$8_CapsuleRevokeBody as CapsuleRevokeBody, type index$8_CapsuleStatus as CapsuleStatus, type index$8_DeviceSEContext as DeviceSEContext, type index$8_IntentExecBody as IntentExecBody, type index$8_IssuerKeyRecord as IssuerKeyRecord, type index$8_KeyStatus as KeyStatus, type index$8_MTLSContext as MTLSContext, type index$8_ProofType as ProofType, type index$8_ProofVerificationResult as ProofVerificationResult, index$8_ProofVerificationService as ProofVerificationService, type index$8_TickWindow as TickWindow, index$8_b64urlDecode as b64urlDecode, index$8_b64urlDecodeString as b64urlDecodeString, index$8_b64urlEncode as b64urlEncode, index$8_b64urlEncodeString as b64urlEncodeString, index$8_canonicalJson as canonicalJson, index$8_canonicalJsonExcluding as canonicalJsonExcluding };
+}
+
+declare const index$7_AxisDemoPubkey: typeof AxisDemoPubkey;
+declare const index$7_AxisFrame: typeof AxisFrame;
+declare const index$7_AxisIp: typeof AxisIp;
+declare const index$7_AxisRaw: typeof AxisRaw;
+type index$7_AxisRequestData = AxisRequestData;
+type index$7_DtoSchema = DtoSchema;
+declare const index$7_HANDLER_METADATA_KEY: typeof HANDLER_METADATA_KEY;
+declare const index$7_Handler: typeof Handler;
+declare const index$7_INTENT_BODY_KEY: typeof INTENT_BODY_KEY;
+declare const index$7_INTENT_METADATA_KEY: typeof INTENT_METADATA_KEY;
+declare const index$7_INTENT_ROUTES_KEY: typeof INTENT_ROUTES_KEY;
+declare const index$7_INTENT_SENSORS_KEY: typeof INTENT_SENSORS_KEY;
+declare const index$7_Intent: typeof Intent;
+declare const index$7_IntentBody: typeof IntentBody;
+type index$7_IntentKind = IntentKind;
+type index$7_IntentOptions = IntentOptions;
+type index$7_IntentRoute = IntentRoute;
+declare const index$7_IntentSensors: typeof IntentSensors;
+type index$7_IntentTlvField = IntentTlvField;
+declare const index$7_SENSOR_METADATA_KEY: typeof SENSOR_METADATA_KEY;
+declare const index$7_Sensor: typeof Sensor;
+type index$7_SensorOptions = SensorOptions;
+type index$7_SensorPhase = SensorPhase;
+declare const index$7_TLV_FIELDS_KEY: typeof TLV_FIELDS_KEY;
+declare const index$7_TLV_VALIDATORS_KEY: typeof TLV_VALIDATORS_KEY;
+declare const index$7_TlvEnum: typeof TlvEnum;
+declare const index$7_TlvField: typeof TlvField;
+type index$7_TlvFieldKind = TlvFieldKind;
+type index$7_TlvFieldMeta = TlvFieldMeta;
+type index$7_TlvFieldOptions = TlvFieldOptions;
+declare const index$7_TlvMinLen: typeof TlvMinLen;
+declare const index$7_TlvRange: typeof TlvRange;
+declare const index$7_TlvUtf8Pattern: typeof TlvUtf8Pattern;
+declare const index$7_TlvValidate: typeof TlvValidate;
+type index$7_TlvValidatorFn = TlvValidatorFn;
+type index$7_TlvValidatorMeta = TlvValidatorMeta;
+declare const index$7_buildDtoDecoder: typeof buildDtoDecoder;
+declare const index$7_extractDtoSchema: typeof extractDtoSchema;
+declare namespace index$7 {
+  export { AxisContext$1 as AxisContext, index$7_AxisDemoPubkey as AxisDemoPubkey, index$7_AxisFrame as AxisFrame, index$7_AxisIp as AxisIp, index$7_AxisRaw as AxisRaw, type index$7_AxisRequestData as AxisRequestData, type index$7_DtoSchema as DtoSchema, index$7_HANDLER_METADATA_KEY as HANDLER_METADATA_KEY, index$7_Handler as Handler, index$7_INTENT_BODY_KEY as INTENT_BODY_KEY, index$7_INTENT_METADATA_KEY as INTENT_METADATA_KEY, index$7_INTENT_ROUTES_KEY as INTENT_ROUTES_KEY, index$7_INTENT_SENSORS_KEY as INTENT_SENSORS_KEY, index$7_Intent as Intent, index$7_IntentBody as IntentBody, type index$7_IntentKind as IntentKind, type index$7_IntentOptions as IntentOptions, type index$7_IntentRoute as IntentRoute, index$7_IntentSensors as IntentSensors, type index$7_IntentTlvField as IntentTlvField, index$7_SENSOR_METADATA_KEY as SENSOR_METADATA_KEY, index$7_Sensor as Sensor, type index$7_SensorOptions as SensorOptions, type index$7_SensorPhase as SensorPhase, index$7_TLV_FIELDS_KEY as TLV_FIELDS_KEY, index$7_TLV_VALIDATORS_KEY as TLV_VALIDATORS_KEY, index$7_TlvEnum as TlvEnum, index$7_TlvField as TlvField, type index$7_TlvFieldKind as TlvFieldKind, type index$7_TlvFieldMeta as TlvFieldMeta, type index$7_TlvFieldOptions as TlvFieldOptions, index$7_TlvMinLen as TlvMinLen, index$7_TlvRange as TlvRange, index$7_TlvUtf8Pattern as TlvUtf8Pattern, index$7_TlvValidate as TlvValidate, type index$7_TlvValidatorFn as TlvValidatorFn, type index$7_TlvValidatorMeta as TlvValidatorMeta, index$7_buildDtoDecoder as buildDtoDecoder, index$7_extractDtoSchema as extractDtoSchema };
+}
+
+type index$6_ObservationQueueConfig = ObservationQueueConfig;
+type index$6_ObservationQueueMessage = ObservationQueueMessage;
+type index$6_ObservationStreamEntry = ObservationStreamEntry;
+type index$6_ObservationWitnessSummary = ObservationWitnessSummary;
+type index$6_ObserverVerdict = ObserverVerdict;
+type index$6_ResponseContract = ResponseContract;
+type index$6_ResponseObserverContext = ResponseObserverContext;
+type index$6_UnsignedObservationWitness = UnsignedObservationWitness;
+declare const index$6_buildQueueMessage: typeof buildQueueMessage;
+declare const index$6_buildUnsignedWitness: typeof buildUnsignedWitness;
+declare const index$6_canonicalizeObservation: typeof canonicalizeObservation;
+declare const index$6_decodeQueueMessage: typeof decodeQueueMessage;
+declare const index$6_encodeQueueMessage: typeof encodeQueueMessage;
+declare const index$6_hashObservation: typeof hashObservation;
+declare const index$6_parseAutoClaimEntries: typeof parseAutoClaimEntries;
+declare const index$6_parseStreamEntries: typeof parseStreamEntries;
+declare const index$6_stableJsonStringify: typeof stableJsonStringify;
+declare const index$6_verifyResponse: typeof verifyResponse;
+declare namespace index$6 {
+  export { type index$6_ObservationQueueConfig as ObservationQueueConfig, type index$6_ObservationQueueMessage as ObservationQueueMessage, type index$6_ObservationStreamEntry as ObservationStreamEntry, type index$6_ObservationWitnessSummary as ObservationWitnessSummary, type index$6_ObserverVerdict as ObserverVerdict, type index$6_ResponseContract as ResponseContract, type index$6_ResponseObserverContext as ResponseObserverContext, type index$6_UnsignedObservationWitness as UnsignedObservationWitness, index$6_buildQueueMessage as buildQueueMessage, index$6_buildUnsignedWitness as buildUnsignedWitness, index$6_canonicalizeObservation as canonicalizeObservation, index$6_decodeQueueMessage as decodeQueueMessage, index$6_encodeQueueMessage as encodeQueueMessage, index$6_hashObservation as hashObservation, index$6_parseAutoClaimEntries as parseAutoClaimEntries, index$6_parseStreamEntries as parseStreamEntries, index$6_stableJsonStringify as stableJsonStringify, index$6_verifyResponse as verifyResponse };
 }
 
 type index$5_AxisDecoded = AxisDecoded;
@@ -1746,7 +1862,7 @@ declare const index$5_finalizeObservation: typeof finalizeObservation;
 declare const index$5_recordSensor: typeof recordSensor;
 declare const index$5_startStage: typeof startStage;
 declare namespace index$5 {
-  export { type index$5_AxisDecoded as AxisDecoded, type index$5_AxisEffect as AxisEffect, type index$5_AxisObservation as AxisObservation, index$5_BAND as BAND, index$5_HandlerDiscoveryService as HandlerDiscoveryService, index$5_IntentRouter as IntentRouter, type IntentSchema$1 as IntentSchema, type index$5_ObservationSensor as ObservationSensor, type index$5_ObservationStage as ObservationStage, index$5_PRE_DECODE_BOUNDARY as PRE_DECODE_BOUNDARY, type index$5_SensorBand as SensorBand, index$5_SensorDiscoveryService as SensorDiscoveryService, index$5_SensorRegistry as SensorRegistry, index$5_createObservation as createObservation, index$5_endStage as endStage, index$5_finalizeObservation as finalizeObservation, index$5_recordSensor as recordSensor, index$5_startStage as startStage };
+  export { type index$5_AxisDecoded as AxisDecoded, type index$5_AxisEffect as AxisEffect, type index$5_AxisObservation as AxisObservation, index$5_BAND as BAND, index$5_HandlerDiscoveryService as HandlerDiscoveryService, index$5_IntentRouter as IntentRouter, type IntentSchema$1 as IntentSchema, type index$5_ObservationSensor as ObservationSensor, type index$5_ObservationStage as ObservationStage, index$5_PRE_DECODE_BOUNDARY as PRE_DECODE_BOUNDARY, type index$5_SensorBand as SensorBand, index$5_SensorDiscoveryService as SensorDiscoveryService, index$5_SensorRegistry as SensorRegistry, index$5_createObservation as createObservation, index$5_endStage as endStage, index$5_finalizeObservation as finalizeObservation, index$6 as observation, index$5_recordSensor as recordSensor, index$5_startStage as startStage };
 }
 
 interface PresenceDeclaration {
@@ -1988,8 +2104,6 @@ type index$3_ProofKind = ProofKind;
 declare const index$3_ProofKindZ: typeof ProofKindZ;
 type index$3_ProofPresenceInput = ProofPresenceInput;
 declare const index$3_ProofPresenceInputZ: typeof ProofPresenceInputZ;
-type index$3_ProofType = ProofType;
-declare const index$3_ProofType: typeof ProofType;
 type index$3_ProtocolStrictInput = ProtocolStrictInput;
 declare const index$3_ProtocolStrictInputZ: typeof ProtocolStrictInputZ;
 type index$3_RateLimitConfig = RateLimitConfig;
@@ -2025,18 +2139,23 @@ declare const index$3_WsHandshakeDecisionZ: typeof WsHandshakeDecisionZ;
 type index$3_WsHandshakeInput = WsHandshakeInput;
 declare const index$3_WsHandshakeInputZ: typeof WsHandshakeInputZ;
 declare namespace index$3 {
-  export { type index$3_AccessProfile as AccessProfile, index$3_AccessProfileZ as AccessProfileZ, type index$3_AxisContext as AxisContext, index$3_AxisContextZ as AxisContextZ, type index$3_AxisError as AxisError, index$3_AxisErrorZ as AxisErrorZ, type index$3_BodyBudgetInput as BodyBudgetInput, index$3_BodyBudgetInputZ as BodyBudgetInputZ, type index$3_BodyBudgetPolicy as BodyBudgetPolicy, index$3_BodyBudgetPolicyZ as BodyBudgetPolicyZ, index$3_BodyProfile as BodyProfile, type index$3_BodyProfileValidation as BodyProfileValidation, index$3_BodyProfileValidator as BodyProfileValidator, index$3_BodyProfileZ as BodyProfileZ, type index$3_Capsule as Capsule, type index$3_CapsuleClaims as CapsuleClaims, index$3_CapsuleClaimsZ as CapsuleClaimsZ, type index$3_CapsuleValidationResult as CapsuleValidationResult, index$3_CapsuleValidationResultZ as CapsuleValidationResultZ, type index$3_CapsuleVerifyResult as CapsuleVerifyResult, index$3_CapsuleVerifyResultZ as CapsuleVerifyResultZ, type index$3_CapsuleVerifySensorInput as CapsuleVerifySensorInput, index$3_CapsuleVerifySensorInputZ as CapsuleVerifySensorInputZ, index$3_CapsuleZ as CapsuleZ, type index$3_ChunkHashInput as ChunkHashInput, index$3_ChunkHashInputZ as ChunkHashInputZ, type index$3_CountryBlockDecision as CountryBlockDecision, index$3_CountryBlockDecisionZ as CountryBlockDecisionZ, type index$3_CountryBlockSensorInput as CountryBlockSensorInput, index$3_CountryBlockSensorInputZ as CountryBlockSensorInputZ, type index$3_EntropySensorInput as EntropySensorInput, index$3_EntropySensorInputZ as EntropySensorInputZ, index$3_ExecutionMetricsZ as ExecutionMetricsZ, type index$3_IPReputation as IPReputation, type index$3_IPReputationInput as IPReputationInput, index$3_IPReputationInputZ as IPReputationInputZ, index$3_IPReputationZ as IPReputationZ, type index$3_IntentPolicy as IntentPolicy, type index$3_IntentPolicyDecision as IntentPolicyDecision, index$3_IntentPolicyDecisionZ as IntentPolicyDecisionZ, type index$3_IntentPolicySensorInput as IntentPolicySensorInput, index$3_IntentPolicySensorInputZ as IntentPolicySensorInputZ, index$3_IntentPolicyZ as IntentPolicyZ, type index$3_IntentSchema as IntentSchema, index$3_IntentSchemaZ as IntentSchemaZ, type index$3_Passport as Passport, index$3_PassportZ as PassportZ, type index$3_ProofKind as ProofKind, index$3_ProofKindZ as ProofKindZ, type index$3_ProofPresenceInput as ProofPresenceInput, index$3_ProofPresenceInputZ as ProofPresenceInputZ, index$3_ProofType as ProofType, type index$3_ProtocolStrictInput as ProtocolStrictInput, index$3_ProtocolStrictInputZ as ProtocolStrictInputZ, type index$3_RateLimitConfig as RateLimitConfig, index$3_RateLimitConfigZ as RateLimitConfigZ, type index$3_RateLimitInput as RateLimitInput, index$3_RateLimitInputZ as RateLimitInputZ, type index$3_RateLimitProfile as RateLimitProfile, index$3_RateLimitProfileZ as RateLimitProfileZ, type index$3_ScanBurstDecision as ScanBurstDecision, index$3_ScanBurstDecisionZ as ScanBurstDecisionZ, type index$3_ScanBurstSensorInput as ScanBurstSensorInput, index$3_ScanBurstSensorInputZ as ScanBurstSensorInputZ, type index$3_SchemaField as SchemaField, type index$3_SchemaFieldKind as SchemaFieldKind, index$3_SchemaFieldKindZ as SchemaFieldKindZ, index$3_SchemaFieldZ as SchemaFieldZ, type index$3_Scope as Scope, index$3_ScopeZ as ScopeZ, type index$3_SensitivityLevel as SensitivityLevel, index$3_SensitivityLevelZ as SensitivityLevelZ, type index$3_SensorChainInput as SensorChainInput, index$3_SensorChainInputZ as SensorChainInputZ, index$3_SensorDecisionWithMetadataZ as SensorDecisionWithMetadataZ, index$3_SensorDecisionZ as SensorDecisionZ, type index$3_SensorResult as SensorResult, index$3_SensorResultZ as SensorResultZ, type index$3_UploadSession as UploadSession, index$3_UploadSessionZ as UploadSessionZ, type index$3_UploadStatus as UploadStatus, index$3_UploadStatusZ as UploadStatusZ, type index$3_WsHandshakeDecision as WsHandshakeDecision, index$3_WsHandshakeDecisionZ as WsHandshakeDecisionZ, type index$3_WsHandshakeInput as WsHandshakeInput, index$3_WsHandshakeInputZ as WsHandshakeInputZ };
+  export { type index$3_AccessProfile as AccessProfile, index$3_AccessProfileZ as AccessProfileZ, type index$3_AxisContext as AxisContext, index$3_AxisContextZ as AxisContextZ, type index$3_AxisError as AxisError, index$3_AxisErrorZ as AxisErrorZ, type index$3_BodyBudgetInput as BodyBudgetInput, index$3_BodyBudgetInputZ as BodyBudgetInputZ, type index$3_BodyBudgetPolicy as BodyBudgetPolicy, index$3_BodyBudgetPolicyZ as BodyBudgetPolicyZ, index$3_BodyProfile as BodyProfile, type index$3_BodyProfileValidation as BodyProfileValidation, index$3_BodyProfileValidator as BodyProfileValidator, index$3_BodyProfileZ as BodyProfileZ, type index$3_Capsule as Capsule, type index$3_CapsuleClaims as CapsuleClaims, index$3_CapsuleClaimsZ as CapsuleClaimsZ, type index$3_CapsuleValidationResult as CapsuleValidationResult, index$3_CapsuleValidationResultZ as CapsuleValidationResultZ, type index$3_CapsuleVerifyResult as CapsuleVerifyResult, index$3_CapsuleVerifyResultZ as CapsuleVerifyResultZ, type index$3_CapsuleVerifySensorInput as CapsuleVerifySensorInput, index$3_CapsuleVerifySensorInputZ as CapsuleVerifySensorInputZ, index$3_CapsuleZ as CapsuleZ, type index$3_ChunkHashInput as ChunkHashInput, index$3_ChunkHashInputZ as ChunkHashInputZ, type index$3_CountryBlockDecision as CountryBlockDecision, index$3_CountryBlockDecisionZ as CountryBlockDecisionZ, type index$3_CountryBlockSensorInput as CountryBlockSensorInput, index$3_CountryBlockSensorInputZ as CountryBlockSensorInputZ, type index$3_EntropySensorInput as EntropySensorInput, index$3_EntropySensorInputZ as EntropySensorInputZ, index$3_ExecutionMetricsZ as ExecutionMetricsZ, type index$3_IPReputation as IPReputation, type index$3_IPReputationInput as IPReputationInput, index$3_IPReputationInputZ as IPReputationInputZ, index$3_IPReputationZ as IPReputationZ, type index$3_IntentPolicy as IntentPolicy, type index$3_IntentPolicyDecision as IntentPolicyDecision, index$3_IntentPolicyDecisionZ as IntentPolicyDecisionZ, type index$3_IntentPolicySensorInput as IntentPolicySensorInput, index$3_IntentPolicySensorInputZ as IntentPolicySensorInputZ, index$3_IntentPolicyZ as IntentPolicyZ, type index$3_IntentSchema as IntentSchema, index$3_IntentSchemaZ as IntentSchemaZ, type index$3_Passport as Passport, index$3_PassportZ as PassportZ, type index$3_ProofKind as ProofKind, index$3_ProofKindZ as ProofKindZ, type index$3_ProofPresenceInput as ProofPresenceInput, index$3_ProofPresenceInputZ as ProofPresenceInputZ, ProofType$1 as ProofType, type index$3_ProtocolStrictInput as ProtocolStrictInput, index$3_ProtocolStrictInputZ as ProtocolStrictInputZ, type index$3_RateLimitConfig as RateLimitConfig, index$3_RateLimitConfigZ as RateLimitConfigZ, type index$3_RateLimitInput as RateLimitInput, index$3_RateLimitInputZ as RateLimitInputZ, type index$3_RateLimitProfile as RateLimitProfile, index$3_RateLimitProfileZ as RateLimitProfileZ, type index$3_ScanBurstDecision as ScanBurstDecision, index$3_ScanBurstDecisionZ as ScanBurstDecisionZ, type index$3_ScanBurstSensorInput as ScanBurstSensorInput, index$3_ScanBurstSensorInputZ as ScanBurstSensorInputZ, type index$3_SchemaField as SchemaField, type index$3_SchemaFieldKind as SchemaFieldKind, index$3_SchemaFieldKindZ as SchemaFieldKindZ, index$3_SchemaFieldZ as SchemaFieldZ, type index$3_Scope as Scope, index$3_ScopeZ as ScopeZ, type index$3_SensitivityLevel as SensitivityLevel, index$3_SensitivityLevelZ as SensitivityLevelZ, type index$3_SensorChainInput as SensorChainInput, index$3_SensorChainInputZ as SensorChainInputZ, index$3_SensorDecisionWithMetadataZ as SensorDecisionWithMetadataZ, index$3_SensorDecisionZ as SensorDecisionZ, type index$3_SensorResult as SensorResult, index$3_SensorResultZ as SensorResultZ, type index$3_UploadSession as UploadSession, index$3_UploadSessionZ as UploadSessionZ, type index$3_UploadStatus as UploadStatus, index$3_UploadStatusZ as UploadStatusZ, type index$3_WsHandshakeDecision as WsHandshakeDecision, index$3_WsHandshakeDecisionZ as WsHandshakeDecisionZ, type index$3_WsHandshakeInput as WsHandshakeInput, index$3_WsHandshakeInputZ as WsHandshakeInputZ };
 }
 
+type index$2_AxisSensorChainService = AxisSensorChainService;
+declare const index$2_AxisSensorChainService: typeof AxisSensorChainService;
 declare const index$2_CAPABILITIES: typeof CAPABILITIES;
 type index$2_Capability = Capability;
+type index$2_ChainResult = ChainResult;
 declare const index$2_INTENT_REQUIREMENTS: typeof INTENT_REQUIREMENTS;
 declare const index$2_PROOF_CAPABILITIES: typeof PROOF_CAPABILITIES;
+type index$2_SensorDecision = SensorDecision;
+type index$2_SensorInput = SensorInput;
 declare const index$2_canAccessResource: typeof canAccessResource;
 declare const index$2_hasScope: typeof hasScope;
 declare const index$2_parseScope: typeof parseScope;
 declare namespace index$2 {
-  export { index$2_CAPABILITIES as CAPABILITIES, type index$2_Capability as Capability, index$2_INTENT_REQUIREMENTS as INTENT_REQUIREMENTS, index$2_PROOF_CAPABILITIES as PROOF_CAPABILITIES, index$2_canAccessResource as canAccessResource, index$2_hasScope as hasScope, index$2_parseScope as parseScope };
+  export { index$2_AxisSensorChainService as AxisSensorChainService, index$2_CAPABILITIES as CAPABILITIES, type index$2_Capability as Capability, type index$2_ChainResult as ChainResult, index$2_INTENT_REQUIREMENTS as INTENT_REQUIREMENTS, index$2_PROOF_CAPABILITIES as PROOF_CAPABILITIES, type index$2_SensorDecision as SensorDecision, type index$2_SensorInput as SensorInput, index$2_canAccessResource as canAccessResource, index$2_hasScope as hasScope, index$2_parseScope as parseScope };
 }
 
 declare class AccessProfileResolverSensor implements AxisSensor {
@@ -2257,4 +2376,4 @@ declare namespace index {
   export { index_encodeAxisTlvDto as encodeAxisTlvDto };
 }
 
-export { ATS1_HDR, ATS1_SCHEMA, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, type AxisCrudHandler, type AxisEffect, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisObservedContext, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, type AxisRequestContext, AxisResponseDto, type AxisSensor, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, CAPABILITIES, type Capability, type CapsuleMode, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, HANDLER_METADATA_KEY, Handler, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, PROOF_CAPABILITIES, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, RiskDecision, type RiskEvaluation, type RiskSignal, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, type SensorDecision, SensorDecisions, type SensorInput, type SensorMinifiedDecision, type SensorPhaseMetadata, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildReceiptHash, buildTLVs, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, classifyIntent, index$7 as crypto, decodeAxis1Frame, index$6 as decorators, encVarint, encodeAxis1Frame, index$5 as engine, extractDtoSchema, hasScope, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseScope, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU };
+export { ATS1_HDR, ATS1_SCHEMA, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, AxisContext$1 as AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisObservation, type AxisObservedContext, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, type Capability, type CapsuleMode, type ChainResult, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type ResponseContract, type ResponseObserverContext, RiskDecision, type RiskEvaluation, type RiskSignal, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeObservation, classifyIntent, createObservation, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, encVarint, encodeAxis1Frame, encodeQueueMessage, endStage, index$5 as engine, extractDtoSchema, finalizeObservation, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, recordSensor, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, startStage, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse };