@nextera.one/axis-server-sdk 1.4.0 → 1.5.0

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
 export { AXIS_MAGIC, AXIS_VERSION, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
-export { a as AxisBinaryFrame, k as AxisError, A as AxisFrame, b as AxisFrameZ, c as computeReceiptHash, d as computeSignaturePayload, e as decodeFrame, f as encodeFrame, g as generateEd25519KeyPair, h as getSignTarget, s as sha256, j as signFrame, v as verifyFrameSignature } from '../index-B5xzROld.mjs';
+export { a as AxisBinaryFrame, b as AxisError, A as AxisFrame, c as AxisFrameZ, d as computeReceiptHash, e as computeSignaturePayload, f as decodeFrame, g as encodeFrame, h as generateEd25519KeyPair, j as getSignTarget, s as sha256, k as signFrame, v as verifyFrameSignature } from '../index-1uEwnW-w.mjs';
 import 'zod';

package/dist/core/index.d.ts

@@ -1,3 +1,3 @@
 export { AXIS_MAGIC, AXIS_VERSION, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
-export { a as AxisBinaryFrame, k as AxisError, A as AxisFrame, b as AxisFrameZ, c as computeReceiptHash, d as computeSignaturePayload, e as decodeFrame, f as encodeFrame, g as generateEd25519KeyPair, h as getSignTarget, s as sha256, j as signFrame, v as verifyFrameSignature } from '../index-B5xzROld.js';
+export { a as AxisBinaryFrame, b as AxisError, A as AxisFrame, c as AxisFrameZ, d as computeReceiptHash, e as computeSignaturePayload, f as decodeFrame, g as encodeFrame, h as generateEd25519KeyPair, j as getSignTarget, s as sha256, k as signFrame, v as verifyFrameSignature } from '../index-1uEwnW-w.js';
 import 'zod';

package/dist/{index-B5xzROld.d.mts → index-1uEwnW-w.d.mts}

@@ -119,4 +119,4 @@ declare namespace index {
   export { index_AXIS_MAGIC as AXIS_MAGIC, index_AXIS_VERSION as AXIS_VERSION, type index_AxisBinaryFrame as AxisBinaryFrame, index_AxisError as AxisError, type index_AxisFrame as AxisFrame, index_AxisFrameZ as AxisFrameZ, index_BodyProfile as BodyProfile, index_ERR_BAD_SIGNATURE as ERR_BAD_SIGNATURE, index_ERR_CONTRACT_VIOLATION as ERR_CONTRACT_VIOLATION, index_ERR_INVALID_PACKET as ERR_INVALID_PACKET, index_ERR_REPLAY_DETECTED as ERR_REPLAY_DETECTED, index_FLAG_BODY_TLV as FLAG_BODY_TLV, index_FLAG_CHAIN_REQ as FLAG_CHAIN_REQ, index_FLAG_HAS_WITNESS as FLAG_HAS_WITNESS, index_MAX_BODY_LEN as MAX_BODY_LEN, index_MAX_FRAME_LEN as MAX_FRAME_LEN, index_MAX_HDR_LEN as MAX_HDR_LEN, index_MAX_SIG_LEN as MAX_SIG_LEN, index_NCERT_ALG as NCERT_ALG, index_NCERT_EXP as NCERT_EXP, index_NCERT_ISSUER_KID as NCERT_ISSUER_KID, index_NCERT_KID as NCERT_KID, index_NCERT_NBF as NCERT_NBF, index_NCERT_NODE_ID as NCERT_NODE_ID, index_NCERT_PAYLOAD as NCERT_PAYLOAD, index_NCERT_PUB as NCERT_PUB, index_NCERT_SCOPE as NCERT_SCOPE, index_NCERT_SIG as NCERT_SIG, index_PROOF_CAPSULE as PROOF_CAPSULE, index_PROOF_JWT as PROOF_JWT, index_PROOF_LOOM as PROOF_LOOM, index_PROOF_MTLS as PROOF_MTLS, index_PROOF_NONE as PROOF_NONE, index_PROOF_WITNESS as PROOF_WITNESS, index_ProofType as ProofType, index_TLV as TLV, index_TLV_ACTOR_ID as TLV_ACTOR_ID, index_TLV_AUD as TLV_AUD, index_TLV_BODY_ARR as TLV_BODY_ARR, index_TLV_BODY_OBJ as TLV_BODY_OBJ, index_TLV_CAPSULE as TLV_CAPSULE, index_TLV_EFFECT as TLV_EFFECT, index_TLV_ERROR_CODE as TLV_ERROR_CODE, index_TLV_ERROR_MSG as TLV_ERROR_MSG, index_TLV_INDEX as TLV_INDEX, index_TLV_INTENT as TLV_INTENT, index_TLV_KID as TLV_KID, index_TLV_LOOM_PRESENCE_ID as TLV_LOOM_PRESENCE_ID, index_TLV_LOOM_THREAD_HASH as TLV_LOOM_THREAD_HASH, index_TLV_LOOM_WRIT as TLV_LOOM_WRIT, index_TLV_NODE as TLV_NODE, index_TLV_NODE_CERT_HASH as TLV_NODE_CERT_HASH, index_TLV_NODE_KID as TLV_NODE_KID, index_TLV_NONCE as TLV_NONCE, index_TLV_OFFSET as TLV_OFFSET, index_TLV_OK as TLV_OK, index_TLV_PID as TLV_PID, index_TLV_PREV_HASH as TLV_PREV_HASH, index_TLV_PROOF_REF as TLV_PROOF_REF, index_TLV_PROOF_TYPE as TLV_PROOF_TYPE, index_TLV_REALM as TLV_REALM, index_TLV_RECEIPT_HASH as TLV_RECEIPT_HASH, index_TLV_RID as TLV_RID, index_TLV_SHA256_CHUNK as TLV_SHA256_CHUNK, index_TLV_TRACE_ID as TLV_TRACE_ID, index_TLV_TS as TLV_TS, index_TLV_UPLOAD_ID as TLV_UPLOAD_ID, index_computeReceiptHash as computeReceiptHash, index_computeSignaturePayload as computeSignaturePayload, index_decodeArray as decodeArray, index_decodeFrame as decodeFrame, index_decodeObject as decodeObject, index_decodeTLVs as decodeTLVs, index_decodeTLVsList as decodeTLVsList, index_decodeVarint as decodeVarint, index_encodeFrame as encodeFrame, index_encodeTLVs as encodeTLVs, index_encodeVarint as encodeVarint, index_generateEd25519KeyPair as generateEd25519KeyPair, index_getSignTarget as getSignTarget, index_sha256 as sha256, index_signFrame as signFrame, index_varintLength as varintLength, index_verifyFrameSignature as verifyFrameSignature };
 }
 
-export { type AxisFrame as A, type AxisBinaryFrame as a, AxisFrameZ as b, computeReceiptHash as c, computeSignaturePayload as d, decodeFrame as e, encodeFrame as f, generateEd25519KeyPair as g, getSignTarget as h, index as i, signFrame as j, AxisError as k, sha256 as s, verifyFrameSignature as v };
+export { type AxisFrame as A, type AxisBinaryFrame as a, AxisError as b, AxisFrameZ as c, computeReceiptHash as d, computeSignaturePayload as e, decodeFrame as f, encodeFrame as g, generateEd25519KeyPair as h, index as i, getSignTarget as j, signFrame as k, sha256 as s, verifyFrameSignature as v };

package/dist/{index-B5xzROld.d.ts → index-1uEwnW-w.d.ts}

@@ -119,4 +119,4 @@ declare namespace index {
   export { index_AXIS_MAGIC as AXIS_MAGIC, index_AXIS_VERSION as AXIS_VERSION, type index_AxisBinaryFrame as AxisBinaryFrame, index_AxisError as AxisError, type index_AxisFrame as AxisFrame, index_AxisFrameZ as AxisFrameZ, index_BodyProfile as BodyProfile, index_ERR_BAD_SIGNATURE as ERR_BAD_SIGNATURE, index_ERR_CONTRACT_VIOLATION as ERR_CONTRACT_VIOLATION, index_ERR_INVALID_PACKET as ERR_INVALID_PACKET, index_ERR_REPLAY_DETECTED as ERR_REPLAY_DETECTED, index_FLAG_BODY_TLV as FLAG_BODY_TLV, index_FLAG_CHAIN_REQ as FLAG_CHAIN_REQ, index_FLAG_HAS_WITNESS as FLAG_HAS_WITNESS, index_MAX_BODY_LEN as MAX_BODY_LEN, index_MAX_FRAME_LEN as MAX_FRAME_LEN, index_MAX_HDR_LEN as MAX_HDR_LEN, index_MAX_SIG_LEN as MAX_SIG_LEN, index_NCERT_ALG as NCERT_ALG, index_NCERT_EXP as NCERT_EXP, index_NCERT_ISSUER_KID as NCERT_ISSUER_KID, index_NCERT_KID as NCERT_KID, index_NCERT_NBF as NCERT_NBF, index_NCERT_NODE_ID as NCERT_NODE_ID, index_NCERT_PAYLOAD as NCERT_PAYLOAD, index_NCERT_PUB as NCERT_PUB, index_NCERT_SCOPE as NCERT_SCOPE, index_NCERT_SIG as NCERT_SIG, index_PROOF_CAPSULE as PROOF_CAPSULE, index_PROOF_JWT as PROOF_JWT, index_PROOF_LOOM as PROOF_LOOM, index_PROOF_MTLS as PROOF_MTLS, index_PROOF_NONE as PROOF_NONE, index_PROOF_WITNESS as PROOF_WITNESS, index_ProofType as ProofType, index_TLV as TLV, index_TLV_ACTOR_ID as TLV_ACTOR_ID, index_TLV_AUD as TLV_AUD, index_TLV_BODY_ARR as TLV_BODY_ARR, index_TLV_BODY_OBJ as TLV_BODY_OBJ, index_TLV_CAPSULE as TLV_CAPSULE, index_TLV_EFFECT as TLV_EFFECT, index_TLV_ERROR_CODE as TLV_ERROR_CODE, index_TLV_ERROR_MSG as TLV_ERROR_MSG, index_TLV_INDEX as TLV_INDEX, index_TLV_INTENT as TLV_INTENT, index_TLV_KID as TLV_KID, index_TLV_LOOM_PRESENCE_ID as TLV_LOOM_PRESENCE_ID, index_TLV_LOOM_THREAD_HASH as TLV_LOOM_THREAD_HASH, index_TLV_LOOM_WRIT as TLV_LOOM_WRIT, index_TLV_NODE as TLV_NODE, index_TLV_NODE_CERT_HASH as TLV_NODE_CERT_HASH, index_TLV_NODE_KID as TLV_NODE_KID, index_TLV_NONCE as TLV_NONCE, index_TLV_OFFSET as TLV_OFFSET, index_TLV_OK as TLV_OK, index_TLV_PID as TLV_PID, index_TLV_PREV_HASH as TLV_PREV_HASH, index_TLV_PROOF_REF as TLV_PROOF_REF, index_TLV_PROOF_TYPE as TLV_PROOF_TYPE, index_TLV_REALM as TLV_REALM, index_TLV_RECEIPT_HASH as TLV_RECEIPT_HASH, index_TLV_RID as TLV_RID, index_TLV_SHA256_CHUNK as TLV_SHA256_CHUNK, index_TLV_TRACE_ID as TLV_TRACE_ID, index_TLV_TS as TLV_TS, index_TLV_UPLOAD_ID as TLV_UPLOAD_ID, index_computeReceiptHash as computeReceiptHash, index_computeSignaturePayload as computeSignaturePayload, index_decodeArray as decodeArray, index_decodeFrame as decodeFrame, index_decodeObject as decodeObject, index_decodeTLVs as decodeTLVs, index_decodeTLVsList as decodeTLVsList, index_decodeVarint as decodeVarint, index_encodeFrame as encodeFrame, index_encodeTLVs as encodeTLVs, index_encodeVarint as encodeVarint, index_generateEd25519KeyPair as generateEd25519KeyPair, index_getSignTarget as getSignTarget, index_sha256 as sha256, index_signFrame as signFrame, index_varintLength as varintLength, index_verifyFrameSignature as verifyFrameSignature };
 }
 
-export { type AxisFrame as A, type AxisBinaryFrame as a, AxisFrameZ as b, computeReceiptHash as c, computeSignaturePayload as d, decodeFrame as e, encodeFrame as f, generateEd25519KeyPair as g, getSignTarget as h, index as i, signFrame as j, AxisError as k, sha256 as s, verifyFrameSignature as v };
+export { type AxisFrame as A, type AxisBinaryFrame as a, AxisError as b, AxisFrameZ as c, computeReceiptHash as d, computeSignaturePayload as e, decodeFrame as f, encodeFrame as g, generateEd25519KeyPair as h, index as i, getSignTarget as j, signFrame as k, sha256 as s, verifyFrameSignature as v };

package/dist/index.d.mts

@@ -1,11 +1,11 @@
 import { ModuleRef, DiscoveryService, MetadataScanner, Reflector } from '@nestjs/core';
-import { A as AxisFrame$2 } from './index-B5xzROld.mjs';
-export { a as AxisBinaryFrame, b as AxisFrameZ, c as computeReceiptHash, d as computeSignaturePayload, i as core, e as decodeFrame, f as encodeFrame, g as generateEd25519KeyPair, h as getSignTarget, s as sha256, j as signFrame, v as verifyFrameSignature } from './index-B5xzROld.mjs';
+import { A as AxisFrame$2 } from './index-1uEwnW-w.mjs';
+export { a as AxisBinaryFrame, b as AxisError, c as AxisFrameZ, d as computeReceiptHash, e as computeSignaturePayload, i as core, f as decodeFrame, g as encodeFrame, h as generateEd25519KeyPair, j as getSignTarget, s as sha256, k as signFrame, v as verifyFrameSignature } from './index-1uEwnW-w.mjs';
 import { PROOF_LOOM, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT } from '@nextera.one/axis-protocol';
 export { AXIS_MAGIC, AXIS_VERSION, TLV as AxisTlvType, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
-import * as z from 'zod';
 import { OnModuleInit, OnApplicationBootstrap } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
+import * as z from 'zod';
 
 declare const HANDLER_METADATA_KEY = "axis:handler";
 declare function Handler(intent?: string): ClassDecorator;
@@ -48,6 +48,16 @@ declare function IntentBody(decoder: (buf: Buffer) => any): MethodDecorator;
 declare const INTENT_SENSORS_KEY = "axis:intent:sensors";
 declare function IntentSensors(sensors: Function[]): MethodDecorator;
 
+declare const HANDLER_SENSORS_KEY = "axis:handler:sensors";
+declare function HandlerSensors(sensors: Function[]): ClassDecorator;
+
+declare const SENSOR_METADATA_KEY = "axis:sensor";
+type SensorPhase = 'PRE_DECODE' | 'POST_DECODE';
+interface SensorOptions {
+    phase?: SensorPhase;
+}
+declare function Sensor(options?: SensorOptions): ClassDecorator;
+
 declare const TLV_FIELDS_KEY = "axis:tlv:fields";
 declare const TLV_VALIDATORS_KEY = "axis:tlv:validators";
 type TlvFieldKind = 'utf8' | 'u64' | 'bytes' | 'bytes16' | 'bool' | 'obj' | 'arr';
@@ -108,15 +118,15 @@ declare abstract class AxisResponseDto extends AxisTlvDto {
 interface IntentSchema$1 {
     intent: string;
     version: number;
-    bodyProfile: 'TLV_MAP' | 'RAW' | 'TLV_OBJ' | 'TLV_ARR';
+    bodyProfile: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
     fields: Array<{
         name: string;
         tlv: number;
-        kind: IntentTlvField['kind'];
+        kind: IntentTlvField["kind"];
         required?: boolean;
         maxLen?: number;
         max?: string;
-        scope?: 'header' | 'body';
+        scope?: "header" | "body";
     }>;
 }
 interface AxisEffect {
@@ -152,11 +162,22 @@ declare class IntentRouter {
     registerHandler(instance: any): void;
     route(frame: AxisFrame$2): Promise<AxisEffect>;
     private logIntent;
-    registerIntentMeta(intent: string, proto: object, methodName: string): void;
+    registerIntentMeta(intent: string, proto: object, methodName: string, handlerSensors?: Function[]): void;
     private runIntentSensors;
     private storeSchema;
 }
 
+declare const BAND: {
+    readonly WIRE: 0;
+    readonly IDENTITY: 40;
+    readonly POLICY: 90;
+    readonly CONTENT: 140;
+    readonly BUSINESS: 200;
+    readonly AUDIT: 900;
+};
+type SensorBand = keyof typeof BAND;
+declare const PRE_DECODE_BOUNDARY = 40;
+
 declare function stableJsonStringify(value: unknown): string;
 
 interface ObservationStage {
@@ -1100,78 +1121,6 @@ declare class DiskUploadFileStore implements UploadFileStore {
     createTempReadStream(fileId: string): NodeJS.ReadableStream;
 }
 
-type ProofType$1 = 1 | 2 | 3 | 4;
-interface ProofVerificationResult {
-    valid: boolean;
-    actorId?: string;
-    error?: string;
-    metadata?: Record<string, any>;
-}
-interface MTLSContext {
-    clientCertPem?: string;
-    clientCertFingerprint?: string;
-    clientCertSubject?: string;
-    clientCertIssuer?: string;
-    verified?: boolean;
-}
-interface DeviceSEContext {
-    deviceId: string;
-    signature: Uint8Array;
-    publicKey: Uint8Array;
-    challenge?: Uint8Array;
-}
-declare class ProofVerificationService {
-    private readonly logger;
-    private readonly deviceKeys;
-    private readonly trustedCerts;
-    verifyProof(proofType: ProofType$1, proofRef: Uint8Array, context: {
-        signTarget?: Uint8Array;
-        signature?: Uint8Array;
-        mtls?: MTLSContext;
-        deviceSE?: DeviceSEContext;
-    }): Promise<ProofVerificationResult>;
-    private verifyCapsuleProof;
-    private verifyJWTProof;
-    private verifyMTLSProof;
-    private verifyDeviceSEProof;
-    registerDeviceKey(deviceId: string, publicKey: Uint8Array): void;
-    unregisterDevice(deviceId: string): boolean;
-    registerMTLSCert(fingerprint: string, actorId: string): void;
-    revokeMTLSCert(fingerprint: string): boolean;
-    static calculateFingerprint(certPem: string): string;
-}
-
-type index$8_ActorKeyRecord = ActorKeyRecord;
-type index$8_AxisCapsule = AxisCapsule;
-type index$8_AxisCapsuleConstraints = AxisCapsuleConstraints;
-type index$8_AxisCapsulePayload = AxisCapsulePayload;
-type index$8_CapsuleBatchBody = CapsuleBatchBody;
-type index$8_CapsuleBatchResult = CapsuleBatchResult;
-type index$8_CapsuleIssueBody = CapsuleIssueBody;
-type index$8_CapsuleIssueResult = CapsuleIssueResult;
-type index$8_CapsuleMode = CapsuleMode;
-type index$8_CapsuleRecord = CapsuleRecord;
-type index$8_CapsuleRevokeBody = CapsuleRevokeBody;
-type index$8_CapsuleStatus = CapsuleStatus;
-type index$8_DeviceSEContext = DeviceSEContext;
-type index$8_IntentExecBody = IntentExecBody;
-type index$8_IssuerKeyRecord = IssuerKeyRecord;
-type index$8_KeyStatus = KeyStatus;
-type index$8_MTLSContext = MTLSContext;
-type index$8_ProofVerificationResult = ProofVerificationResult;
-type index$8_ProofVerificationService = ProofVerificationService;
-declare const index$8_ProofVerificationService: typeof ProofVerificationService;
-type index$8_TickWindow = TickWindow;
-declare const index$8_b64urlDecode: typeof b64urlDecode;
-declare const index$8_b64urlDecodeString: typeof b64urlDecodeString;
-declare const index$8_b64urlEncode: typeof b64urlEncode;
-declare const index$8_b64urlEncodeString: typeof b64urlEncodeString;
-declare const index$8_canonicalJson: typeof canonicalJson;
-declare const index$8_canonicalJsonExcluding: typeof canonicalJsonExcluding;
-declare namespace index$8 {
-  export { type index$8_ActorKeyRecord as ActorKeyRecord, type AxisAlg$1 as AxisAlg, type index$8_AxisCapsule as AxisCapsule, type index$8_AxisCapsuleConstraints as AxisCapsuleConstraints, type index$8_AxisCapsulePayload as AxisCapsulePayload, type AxisPacket$1 as AxisPacket, type AxisResponse$1 as AxisResponse, type AxisSig$1 as AxisSig, type index$8_CapsuleBatchBody as CapsuleBatchBody, type index$8_CapsuleBatchResult as CapsuleBatchResult, type index$8_CapsuleIssueBody as CapsuleIssueBody, type index$8_CapsuleIssueResult as CapsuleIssueResult, type index$8_CapsuleMode as CapsuleMode, type index$8_CapsuleRecord as CapsuleRecord, type index$8_CapsuleRevokeBody as CapsuleRevokeBody, type index$8_CapsuleStatus as CapsuleStatus, type index$8_DeviceSEContext as DeviceSEContext, type index$8_IntentExecBody as IntentExecBody, type index$8_IssuerKeyRecord as IssuerKeyRecord, type index$8_KeyStatus as KeyStatus, type index$8_MTLSContext as MTLSContext, type ProofType$1 as ProofType, type index$8_ProofVerificationResult as ProofVerificationResult, index$8_ProofVerificationService as ProofVerificationService, type index$8_TickWindow as TickWindow, index$8_b64urlDecode as b64urlDecode, index$8_b64urlDecodeString as b64urlDecodeString, index$8_b64urlEncode as b64urlEncode, index$8_b64urlEncodeString as b64urlEncodeString, index$8_canonicalJson as canonicalJson, index$8_canonicalJsonExcluding as canonicalJsonExcluding };
-}
-
 interface AxisRequestData {
     raw: Buffer;
     ip: string | undefined;
@@ -1184,53 +1133,40 @@ declare const AxisContext$1: (...dataOrPipes: unknown[]) => ParameterDecorator;
 declare const AxisDemoPubkey: (...dataOrPipes: unknown[]) => ParameterDecorator;
 declare const AxisFrame: (...dataOrPipes: unknown[]) => ParameterDecorator;
 
-declare const SENSOR_METADATA_KEY = "axis:sensor";
-type SensorPhase = 'PRE_DECODE' | 'POST_DECODE';
-interface SensorOptions {
-    phase?: SensorPhase;
+declare class HandlerDiscoveryService implements OnModuleInit {
+    private readonly discovery;
+    private readonly scanner;
+    private readonly router;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
+    onModuleInit(): void;
 }
-declare function Sensor(options?: SensorOptions): ClassDecorator;
 
-declare const index$7_AxisDemoPubkey: typeof AxisDemoPubkey;
-declare const index$7_AxisFrame: typeof AxisFrame;
-declare const index$7_AxisIp: typeof AxisIp;
-declare const index$7_AxisRaw: typeof AxisRaw;
-type index$7_AxisRequestData = AxisRequestData;
-type index$7_DtoSchema = DtoSchema;
-declare const index$7_HANDLER_METADATA_KEY: typeof HANDLER_METADATA_KEY;
-declare const index$7_Handler: typeof Handler;
-declare const index$7_INTENT_BODY_KEY: typeof INTENT_BODY_KEY;
-declare const index$7_INTENT_METADATA_KEY: typeof INTENT_METADATA_KEY;
-declare const index$7_INTENT_ROUTES_KEY: typeof INTENT_ROUTES_KEY;
-declare const index$7_INTENT_SENSORS_KEY: typeof INTENT_SENSORS_KEY;
-declare const index$7_Intent: typeof Intent;
-declare const index$7_IntentBody: typeof IntentBody;
-type index$7_IntentKind = IntentKind;
-type index$7_IntentOptions = IntentOptions;
-type index$7_IntentRoute = IntentRoute;
-declare const index$7_IntentSensors: typeof IntentSensors;
-type index$7_IntentTlvField = IntentTlvField;
-declare const index$7_SENSOR_METADATA_KEY: typeof SENSOR_METADATA_KEY;
-declare const index$7_Sensor: typeof Sensor;
-type index$7_SensorOptions = SensorOptions;
-type index$7_SensorPhase = SensorPhase;
-declare const index$7_TLV_FIELDS_KEY: typeof TLV_FIELDS_KEY;
-declare const index$7_TLV_VALIDATORS_KEY: typeof TLV_VALIDATORS_KEY;
-declare const index$7_TlvEnum: typeof TlvEnum;
-declare const index$7_TlvField: typeof TlvField;
-type index$7_TlvFieldKind = TlvFieldKind;
-type index$7_TlvFieldMeta = TlvFieldMeta;
-type index$7_TlvFieldOptions = TlvFieldOptions;
-declare const index$7_TlvMinLen: typeof TlvMinLen;
-declare const index$7_TlvRange: typeof TlvRange;
-declare const index$7_TlvUtf8Pattern: typeof TlvUtf8Pattern;
-declare const index$7_TlvValidate: typeof TlvValidate;
-type index$7_TlvValidatorFn = TlvValidatorFn;
-type index$7_TlvValidatorMeta = TlvValidatorMeta;
-declare const index$7_buildDtoDecoder: typeof buildDtoDecoder;
-declare const index$7_extractDtoSchema: typeof extractDtoSchema;
-declare namespace index$7 {
-  export { AxisContext$1 as AxisContext, index$7_AxisDemoPubkey as AxisDemoPubkey, index$7_AxisFrame as AxisFrame, index$7_AxisIp as AxisIp, index$7_AxisRaw as AxisRaw, type index$7_AxisRequestData as AxisRequestData, type index$7_DtoSchema as DtoSchema, index$7_HANDLER_METADATA_KEY as HANDLER_METADATA_KEY, index$7_Handler as Handler, index$7_INTENT_BODY_KEY as INTENT_BODY_KEY, index$7_INTENT_METADATA_KEY as INTENT_METADATA_KEY, index$7_INTENT_ROUTES_KEY as INTENT_ROUTES_KEY, index$7_INTENT_SENSORS_KEY as INTENT_SENSORS_KEY, index$7_Intent as Intent, index$7_IntentBody as IntentBody, type index$7_IntentKind as IntentKind, type index$7_IntentOptions as IntentOptions, type index$7_IntentRoute as IntentRoute, index$7_IntentSensors as IntentSensors, type index$7_IntentTlvField as IntentTlvField, index$7_SENSOR_METADATA_KEY as SENSOR_METADATA_KEY, index$7_Sensor as Sensor, type index$7_SensorOptions as SensorOptions, type index$7_SensorPhase as SensorPhase, index$7_TLV_FIELDS_KEY as TLV_FIELDS_KEY, index$7_TLV_VALIDATORS_KEY as TLV_VALIDATORS_KEY, index$7_TlvEnum as TlvEnum, index$7_TlvField as TlvField, type index$7_TlvFieldKind as TlvFieldKind, type index$7_TlvFieldMeta as TlvFieldMeta, type index$7_TlvFieldOptions as TlvFieldOptions, index$7_TlvMinLen as TlvMinLen, index$7_TlvRange as TlvRange, index$7_TlvUtf8Pattern as TlvUtf8Pattern, index$7_TlvValidate as TlvValidate, type index$7_TlvValidatorFn as TlvValidatorFn, type index$7_TlvValidatorMeta as TlvValidatorMeta, index$7_buildDtoDecoder as buildDtoDecoder, index$7_extractDtoSchema as extractDtoSchema };
+declare class SensorRegistry {
+    private readonly configService;
+    private sensors;
+    private readonly logger;
+    constructor(configService: ConfigService);
+    register(sensor: AxisSensor): void;
+    list(): AxisSensor[];
+    getPreDecodeSensors(): AxisPreSensor[];
+    getPostDecodeSensors(): AxisPostSensor[];
+    private isPreDecodeSensor;
+    private isPostDecodeSensor;
+    getSensorCountByPhase(): {
+        preDecodeCount: number;
+        postDecodeCount: number;
+    };
+    clear(): void;
+}
+
+declare class SensorDiscoveryService implements OnApplicationBootstrap {
+    private readonly discovery;
+    private readonly reflector;
+    private readonly registry;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
+    onApplicationBootstrap(): void;
 }
 
 declare const SensorDecisionZ: z.ZodUnion<readonly [z.ZodObject<{
@@ -1680,7 +1616,7 @@ declare const ChunkHashInputZ: z.ZodObject<{
     intent: z.ZodString;
 }, z.core.$strip>;
 type ChunkHashInput = z.infer<typeof ChunkHashInputZ>;
-declare enum ProofType {
+declare enum ProofType$1 {
     CAPSULE = 1,
     JWT = 2,
     MTLS_ID = 3,
@@ -1692,7 +1628,7 @@ declare const AxisContextZ: z.ZodObject<{
     ts: z.ZodBigInt;
     intent: z.ZodString;
     actorId: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-    proofType: z.ZodEnum<typeof ProofType>;
+    proofType: z.ZodEnum<typeof ProofType$1>;
     proofRef: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
     nonce: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
     ip: z.ZodString;
@@ -1751,51 +1687,135 @@ interface AxisDecoded {
     observation: AxisObservation;
 }
 
-declare class HandlerDiscoveryService implements OnModuleInit {
-    private readonly discovery;
-    private readonly scanner;
-    private readonly router;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
-    onModuleInit(): void;
+interface ChainResult {
+    allowed: boolean;
+    scoreDelta: number;
+    statusCode: number;
+    body?: string | Buffer | Uint8Array;
+    headers?: Map<number, Uint8Array>;
+}
+declare class AxisSensorChainService {
+    private readonly registry;
+    constructor(registry: SensorRegistry);
+    evaluate(input: SensorInput, phase?: 'PRE_DECODE' | 'POST_DECODE' | 'BOTH', baseDecision?: SensorDecision): Promise<SensorDecision>;
+    evaluatePre(input: SensorInput): Promise<SensorDecision>;
+    evaluatePost(input: SensorInput, baseDecision?: SensorDecision): Promise<SensorDecision>;
+    private evaluateSensors;
 }
 
-declare const BAND: {
-    readonly WIRE: 0;
-    readonly IDENTITY: 40;
-    readonly POLICY: 90;
-    readonly CONTENT: 140;
-    readonly BUSINESS: 200;
-    readonly AUDIT: 900;
-};
-type SensorBand = keyof typeof BAND;
-declare const PRE_DECODE_BOUNDARY = 40;
-
-declare class SensorRegistry {
-    private readonly configService;
-    private sensors;
+type ProofType = 1 | 2 | 3 | 4;
+interface ProofVerificationResult {
+    valid: boolean;
+    actorId?: string;
+    error?: string;
+    metadata?: Record<string, any>;
+}
+interface MTLSContext {
+    clientCertPem?: string;
+    clientCertFingerprint?: string;
+    clientCertSubject?: string;
+    clientCertIssuer?: string;
+    verified?: boolean;
+}
+interface DeviceSEContext {
+    deviceId: string;
+    signature: Uint8Array;
+    publicKey: Uint8Array;
+    challenge?: Uint8Array;
+}
+declare class ProofVerificationService {
     private readonly logger;
-    constructor(configService: ConfigService);
-    register(sensor: AxisSensor): void;
-    list(): AxisSensor[];
-    getPreDecodeSensors(): AxisPreSensor[];
-    getPostDecodeSensors(): AxisPostSensor[];
-    private isPreDecodeSensor;
-    private isPostDecodeSensor;
-    getSensorCountByPhase(): {
-        preDecodeCount: number;
-        postDecodeCount: number;
-    };
-    clear(): void;
+    private readonly deviceKeys;
+    private readonly trustedCerts;
+    verifyProof(proofType: ProofType, proofRef: Uint8Array, context: {
+        signTarget?: Uint8Array;
+        signature?: Uint8Array;
+        mtls?: MTLSContext;
+        deviceSE?: DeviceSEContext;
+    }): Promise<ProofVerificationResult>;
+    private verifyCapsuleProof;
+    private verifyJWTProof;
+    private verifyMTLSProof;
+    private verifyDeviceSEProof;
+    registerDeviceKey(deviceId: string, publicKey: Uint8Array): void;
+    unregisterDevice(deviceId: string): boolean;
+    registerMTLSCert(fingerprint: string, actorId: string): void;
+    revokeMTLSCert(fingerprint: string): boolean;
+    static calculateFingerprint(certPem: string): string;
 }
 
-declare class SensorDiscoveryService implements OnApplicationBootstrap {
-    private readonly discovery;
-    private readonly reflector;
-    private readonly registry;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
-    onApplicationBootstrap(): void;
+type index$8_ActorKeyRecord = ActorKeyRecord;
+type index$8_AxisCapsule = AxisCapsule;
+type index$8_AxisCapsuleConstraints = AxisCapsuleConstraints;
+type index$8_AxisCapsulePayload = AxisCapsulePayload;
+type index$8_CapsuleBatchBody = CapsuleBatchBody;
+type index$8_CapsuleBatchResult = CapsuleBatchResult;
+type index$8_CapsuleIssueBody = CapsuleIssueBody;
+type index$8_CapsuleIssueResult = CapsuleIssueResult;
+type index$8_CapsuleMode = CapsuleMode;
+type index$8_CapsuleRecord = CapsuleRecord;
+type index$8_CapsuleRevokeBody = CapsuleRevokeBody;
+type index$8_CapsuleStatus = CapsuleStatus;
+type index$8_DeviceSEContext = DeviceSEContext;
+type index$8_IntentExecBody = IntentExecBody;
+type index$8_IssuerKeyRecord = IssuerKeyRecord;
+type index$8_KeyStatus = KeyStatus;
+type index$8_MTLSContext = MTLSContext;
+type index$8_ProofType = ProofType;
+type index$8_ProofVerificationResult = ProofVerificationResult;
+type index$8_ProofVerificationService = ProofVerificationService;
+declare const index$8_ProofVerificationService: typeof ProofVerificationService;
+type index$8_TickWindow = TickWindow;
+declare const index$8_b64urlDecode: typeof b64urlDecode;
+declare const index$8_b64urlDecodeString: typeof b64urlDecodeString;
+declare const index$8_b64urlEncode: typeof b64urlEncode;
+declare const index$8_b64urlEncodeString: typeof b64urlEncodeString;
+declare const index$8_canonicalJson: typeof canonicalJson;
+declare const index$8_canonicalJsonExcluding: typeof canonicalJsonExcluding;
+declare namespace index$8 {
+  export { type index$8_ActorKeyRecord as ActorKeyRecord, type AxisAlg$1 as AxisAlg, type index$8_AxisCapsule as AxisCapsule, type index$8_AxisCapsuleConstraints as AxisCapsuleConstraints, type index$8_AxisCapsulePayload as AxisCapsulePayload, type AxisPacket$1 as AxisPacket, type AxisResponse$1 as AxisResponse, type AxisSig$1 as AxisSig, type index$8_CapsuleBatchBody as CapsuleBatchBody, type index$8_CapsuleBatchResult as CapsuleBatchResult, type index$8_CapsuleIssueBody as CapsuleIssueBody, type index$8_CapsuleIssueResult as CapsuleIssueResult, type index$8_CapsuleMode as CapsuleMode, type index$8_CapsuleRecord as CapsuleRecord, type index$8_CapsuleRevokeBody as CapsuleRevokeBody, type index$8_CapsuleStatus as CapsuleStatus, type index$8_DeviceSEContext as DeviceSEContext, type index$8_IntentExecBody as IntentExecBody, type index$8_IssuerKeyRecord as IssuerKeyRecord, type index$8_KeyStatus as KeyStatus, type index$8_MTLSContext as MTLSContext, type index$8_ProofType as ProofType, type index$8_ProofVerificationResult as ProofVerificationResult, index$8_ProofVerificationService as ProofVerificationService, type index$8_TickWindow as TickWindow, index$8_b64urlDecode as b64urlDecode, index$8_b64urlDecodeString as b64urlDecodeString, index$8_b64urlEncode as b64urlEncode, index$8_b64urlEncodeString as b64urlEncodeString, index$8_canonicalJson as canonicalJson, index$8_canonicalJsonExcluding as canonicalJsonExcluding };
+}
+
+declare const index$7_AxisDemoPubkey: typeof AxisDemoPubkey;
+declare const index$7_AxisFrame: typeof AxisFrame;
+declare const index$7_AxisIp: typeof AxisIp;
+declare const index$7_AxisRaw: typeof AxisRaw;
+type index$7_AxisRequestData = AxisRequestData;
+type index$7_DtoSchema = DtoSchema;
+declare const index$7_HANDLER_METADATA_KEY: typeof HANDLER_METADATA_KEY;
+declare const index$7_Handler: typeof Handler;
+declare const index$7_INTENT_BODY_KEY: typeof INTENT_BODY_KEY;
+declare const index$7_INTENT_METADATA_KEY: typeof INTENT_METADATA_KEY;
+declare const index$7_INTENT_ROUTES_KEY: typeof INTENT_ROUTES_KEY;
+declare const index$7_INTENT_SENSORS_KEY: typeof INTENT_SENSORS_KEY;
+declare const index$7_Intent: typeof Intent;
+declare const index$7_IntentBody: typeof IntentBody;
+type index$7_IntentKind = IntentKind;
+type index$7_IntentOptions = IntentOptions;
+type index$7_IntentRoute = IntentRoute;
+declare const index$7_IntentSensors: typeof IntentSensors;
+type index$7_IntentTlvField = IntentTlvField;
+declare const index$7_SENSOR_METADATA_KEY: typeof SENSOR_METADATA_KEY;
+declare const index$7_Sensor: typeof Sensor;
+type index$7_SensorOptions = SensorOptions;
+type index$7_SensorPhase = SensorPhase;
+declare const index$7_TLV_FIELDS_KEY: typeof TLV_FIELDS_KEY;
+declare const index$7_TLV_VALIDATORS_KEY: typeof TLV_VALIDATORS_KEY;
+declare const index$7_TlvEnum: typeof TlvEnum;
+declare const index$7_TlvField: typeof TlvField;
+type index$7_TlvFieldKind = TlvFieldKind;
+type index$7_TlvFieldMeta = TlvFieldMeta;
+type index$7_TlvFieldOptions = TlvFieldOptions;
+declare const index$7_TlvMinLen: typeof TlvMinLen;
+declare const index$7_TlvRange: typeof TlvRange;
+declare const index$7_TlvUtf8Pattern: typeof TlvUtf8Pattern;
+declare const index$7_TlvValidate: typeof TlvValidate;
+type index$7_TlvValidatorFn = TlvValidatorFn;
+type index$7_TlvValidatorMeta = TlvValidatorMeta;
+declare const index$7_buildDtoDecoder: typeof buildDtoDecoder;
+declare const index$7_extractDtoSchema: typeof extractDtoSchema;
+declare namespace index$7 {
+  export { AxisContext$1 as AxisContext, index$7_AxisDemoPubkey as AxisDemoPubkey, index$7_AxisFrame as AxisFrame, index$7_AxisIp as AxisIp, index$7_AxisRaw as AxisRaw, type index$7_AxisRequestData as AxisRequestData, type index$7_DtoSchema as DtoSchema, index$7_HANDLER_METADATA_KEY as HANDLER_METADATA_KEY, index$7_Handler as Handler, index$7_INTENT_BODY_KEY as INTENT_BODY_KEY, index$7_INTENT_METADATA_KEY as INTENT_METADATA_KEY, index$7_INTENT_ROUTES_KEY as INTENT_ROUTES_KEY, index$7_INTENT_SENSORS_KEY as INTENT_SENSORS_KEY, index$7_Intent as Intent, index$7_IntentBody as IntentBody, type index$7_IntentKind as IntentKind, type index$7_IntentOptions as IntentOptions, type index$7_IntentRoute as IntentRoute, index$7_IntentSensors as IntentSensors, type index$7_IntentTlvField as IntentTlvField, index$7_SENSOR_METADATA_KEY as SENSOR_METADATA_KEY, index$7_Sensor as Sensor, type index$7_SensorOptions as SensorOptions, type index$7_SensorPhase as SensorPhase, index$7_TLV_FIELDS_KEY as TLV_FIELDS_KEY, index$7_TLV_VALIDATORS_KEY as TLV_VALIDATORS_KEY, index$7_TlvEnum as TlvEnum, index$7_TlvField as TlvField, type index$7_TlvFieldKind as TlvFieldKind, type index$7_TlvFieldMeta as TlvFieldMeta, type index$7_TlvFieldOptions as TlvFieldOptions, index$7_TlvMinLen as TlvMinLen, index$7_TlvRange as TlvRange, index$7_TlvUtf8Pattern as TlvUtf8Pattern, index$7_TlvValidate as TlvValidate, type index$7_TlvValidatorFn as TlvValidatorFn, type index$7_TlvValidatorMeta as TlvValidatorMeta, index$7_buildDtoDecoder as buildDtoDecoder, index$7_extractDtoSchema as extractDtoSchema };
 }
 
 type index$6_ObservationQueueConfig = ObservationQueueConfig;
@@ -2084,8 +2104,6 @@ type index$3_ProofKind = ProofKind;
 declare const index$3_ProofKindZ: typeof ProofKindZ;
 type index$3_ProofPresenceInput = ProofPresenceInput;
 declare const index$3_ProofPresenceInputZ: typeof ProofPresenceInputZ;
-type index$3_ProofType = ProofType;
-declare const index$3_ProofType: typeof ProofType;
 type index$3_ProtocolStrictInput = ProtocolStrictInput;
 declare const index$3_ProtocolStrictInputZ: typeof ProtocolStrictInputZ;
 type index$3_RateLimitConfig = RateLimitConfig;
@@ -2121,18 +2139,23 @@ declare const index$3_WsHandshakeDecisionZ: typeof WsHandshakeDecisionZ;
 type index$3_WsHandshakeInput = WsHandshakeInput;
 declare const index$3_WsHandshakeInputZ: typeof WsHandshakeInputZ;
 declare namespace index$3 {
-  export { type index$3_AccessProfile as AccessProfile, index$3_AccessProfileZ as AccessProfileZ, type index$3_AxisContext as AxisContext, index$3_AxisContextZ as AxisContextZ, type index$3_AxisError as AxisError, index$3_AxisErrorZ as AxisErrorZ, type index$3_BodyBudgetInput as BodyBudgetInput, index$3_BodyBudgetInputZ as BodyBudgetInputZ, type index$3_BodyBudgetPolicy as BodyBudgetPolicy, index$3_BodyBudgetPolicyZ as BodyBudgetPolicyZ, index$3_BodyProfile as BodyProfile, type index$3_BodyProfileValidation as BodyProfileValidation, index$3_BodyProfileValidator as BodyProfileValidator, index$3_BodyProfileZ as BodyProfileZ, type index$3_Capsule as Capsule, type index$3_CapsuleClaims as CapsuleClaims, index$3_CapsuleClaimsZ as CapsuleClaimsZ, type index$3_CapsuleValidationResult as CapsuleValidationResult, index$3_CapsuleValidationResultZ as CapsuleValidationResultZ, type index$3_CapsuleVerifyResult as CapsuleVerifyResult, index$3_CapsuleVerifyResultZ as CapsuleVerifyResultZ, type index$3_CapsuleVerifySensorInput as CapsuleVerifySensorInput, index$3_CapsuleVerifySensorInputZ as CapsuleVerifySensorInputZ, index$3_CapsuleZ as CapsuleZ, type index$3_ChunkHashInput as ChunkHashInput, index$3_ChunkHashInputZ as ChunkHashInputZ, type index$3_CountryBlockDecision as CountryBlockDecision, index$3_CountryBlockDecisionZ as CountryBlockDecisionZ, type index$3_CountryBlockSensorInput as CountryBlockSensorInput, index$3_CountryBlockSensorInputZ as CountryBlockSensorInputZ, type index$3_EntropySensorInput as EntropySensorInput, index$3_EntropySensorInputZ as EntropySensorInputZ, index$3_ExecutionMetricsZ as ExecutionMetricsZ, type index$3_IPReputation as IPReputation, type index$3_IPReputationInput as IPReputationInput, index$3_IPReputationInputZ as IPReputationInputZ, index$3_IPReputationZ as IPReputationZ, type index$3_IntentPolicy as IntentPolicy, type index$3_IntentPolicyDecision as IntentPolicyDecision, index$3_IntentPolicyDecisionZ as IntentPolicyDecisionZ, type index$3_IntentPolicySensorInput as IntentPolicySensorInput, index$3_IntentPolicySensorInputZ as IntentPolicySensorInputZ, index$3_IntentPolicyZ as IntentPolicyZ, type index$3_IntentSchema as IntentSchema, index$3_IntentSchemaZ as IntentSchemaZ, type index$3_Passport as Passport, index$3_PassportZ as PassportZ, type index$3_ProofKind as ProofKind, index$3_ProofKindZ as ProofKindZ, type index$3_ProofPresenceInput as ProofPresenceInput, index$3_ProofPresenceInputZ as ProofPresenceInputZ, index$3_ProofType as ProofType, type index$3_ProtocolStrictInput as ProtocolStrictInput, index$3_ProtocolStrictInputZ as ProtocolStrictInputZ, type index$3_RateLimitConfig as RateLimitConfig, index$3_RateLimitConfigZ as RateLimitConfigZ, type index$3_RateLimitInput as RateLimitInput, index$3_RateLimitInputZ as RateLimitInputZ, type index$3_RateLimitProfile as RateLimitProfile, index$3_RateLimitProfileZ as RateLimitProfileZ, type index$3_ScanBurstDecision as ScanBurstDecision, index$3_ScanBurstDecisionZ as ScanBurstDecisionZ, type index$3_ScanBurstSensorInput as ScanBurstSensorInput, index$3_ScanBurstSensorInputZ as ScanBurstSensorInputZ, type index$3_SchemaField as SchemaField, type index$3_SchemaFieldKind as SchemaFieldKind, index$3_SchemaFieldKindZ as SchemaFieldKindZ, index$3_SchemaFieldZ as SchemaFieldZ, type index$3_Scope as Scope, index$3_ScopeZ as ScopeZ, type index$3_SensitivityLevel as SensitivityLevel, index$3_SensitivityLevelZ as SensitivityLevelZ, type index$3_SensorChainInput as SensorChainInput, index$3_SensorChainInputZ as SensorChainInputZ, index$3_SensorDecisionWithMetadataZ as SensorDecisionWithMetadataZ, index$3_SensorDecisionZ as SensorDecisionZ, type index$3_SensorResult as SensorResult, index$3_SensorResultZ as SensorResultZ, type index$3_UploadSession as UploadSession, index$3_UploadSessionZ as UploadSessionZ, type index$3_UploadStatus as UploadStatus, index$3_UploadStatusZ as UploadStatusZ, type index$3_WsHandshakeDecision as WsHandshakeDecision, index$3_WsHandshakeDecisionZ as WsHandshakeDecisionZ, type index$3_WsHandshakeInput as WsHandshakeInput, index$3_WsHandshakeInputZ as WsHandshakeInputZ };
+  export { type index$3_AccessProfile as AccessProfile, index$3_AccessProfileZ as AccessProfileZ, type index$3_AxisContext as AxisContext, index$3_AxisContextZ as AxisContextZ, type index$3_AxisError as AxisError, index$3_AxisErrorZ as AxisErrorZ, type index$3_BodyBudgetInput as BodyBudgetInput, index$3_BodyBudgetInputZ as BodyBudgetInputZ, type index$3_BodyBudgetPolicy as BodyBudgetPolicy, index$3_BodyBudgetPolicyZ as BodyBudgetPolicyZ, index$3_BodyProfile as BodyProfile, type index$3_BodyProfileValidation as BodyProfileValidation, index$3_BodyProfileValidator as BodyProfileValidator, index$3_BodyProfileZ as BodyProfileZ, type index$3_Capsule as Capsule, type index$3_CapsuleClaims as CapsuleClaims, index$3_CapsuleClaimsZ as CapsuleClaimsZ, type index$3_CapsuleValidationResult as CapsuleValidationResult, index$3_CapsuleValidationResultZ as CapsuleValidationResultZ, type index$3_CapsuleVerifyResult as CapsuleVerifyResult, index$3_CapsuleVerifyResultZ as CapsuleVerifyResultZ, type index$3_CapsuleVerifySensorInput as CapsuleVerifySensorInput, index$3_CapsuleVerifySensorInputZ as CapsuleVerifySensorInputZ, index$3_CapsuleZ as CapsuleZ, type index$3_ChunkHashInput as ChunkHashInput, index$3_ChunkHashInputZ as ChunkHashInputZ, type index$3_CountryBlockDecision as CountryBlockDecision, index$3_CountryBlockDecisionZ as CountryBlockDecisionZ, type index$3_CountryBlockSensorInput as CountryBlockSensorInput, index$3_CountryBlockSensorInputZ as CountryBlockSensorInputZ, type index$3_EntropySensorInput as EntropySensorInput, index$3_EntropySensorInputZ as EntropySensorInputZ, index$3_ExecutionMetricsZ as ExecutionMetricsZ, type index$3_IPReputation as IPReputation, type index$3_IPReputationInput as IPReputationInput, index$3_IPReputationInputZ as IPReputationInputZ, index$3_IPReputationZ as IPReputationZ, type index$3_IntentPolicy as IntentPolicy, type index$3_IntentPolicyDecision as IntentPolicyDecision, index$3_IntentPolicyDecisionZ as IntentPolicyDecisionZ, type index$3_IntentPolicySensorInput as IntentPolicySensorInput, index$3_IntentPolicySensorInputZ as IntentPolicySensorInputZ, index$3_IntentPolicyZ as IntentPolicyZ, type index$3_IntentSchema as IntentSchema, index$3_IntentSchemaZ as IntentSchemaZ, type index$3_Passport as Passport, index$3_PassportZ as PassportZ, type index$3_ProofKind as ProofKind, index$3_ProofKindZ as ProofKindZ, type index$3_ProofPresenceInput as ProofPresenceInput, index$3_ProofPresenceInputZ as ProofPresenceInputZ, ProofType$1 as ProofType, type index$3_ProtocolStrictInput as ProtocolStrictInput, index$3_ProtocolStrictInputZ as ProtocolStrictInputZ, type index$3_RateLimitConfig as RateLimitConfig, index$3_RateLimitConfigZ as RateLimitConfigZ, type index$3_RateLimitInput as RateLimitInput, index$3_RateLimitInputZ as RateLimitInputZ, type index$3_RateLimitProfile as RateLimitProfile, index$3_RateLimitProfileZ as RateLimitProfileZ, type index$3_ScanBurstDecision as ScanBurstDecision, index$3_ScanBurstDecisionZ as ScanBurstDecisionZ, type index$3_ScanBurstSensorInput as ScanBurstSensorInput, index$3_ScanBurstSensorInputZ as ScanBurstSensorInputZ, type index$3_SchemaField as SchemaField, type index$3_SchemaFieldKind as SchemaFieldKind, index$3_SchemaFieldKindZ as SchemaFieldKindZ, index$3_SchemaFieldZ as SchemaFieldZ, type index$3_Scope as Scope, index$3_ScopeZ as ScopeZ, type index$3_SensitivityLevel as SensitivityLevel, index$3_SensitivityLevelZ as SensitivityLevelZ, type index$3_SensorChainInput as SensorChainInput, index$3_SensorChainInputZ as SensorChainInputZ, index$3_SensorDecisionWithMetadataZ as SensorDecisionWithMetadataZ, index$3_SensorDecisionZ as SensorDecisionZ, type index$3_SensorResult as SensorResult, index$3_SensorResultZ as SensorResultZ, type index$3_UploadSession as UploadSession, index$3_UploadSessionZ as UploadSessionZ, type index$3_UploadStatus as UploadStatus, index$3_UploadStatusZ as UploadStatusZ, type index$3_WsHandshakeDecision as WsHandshakeDecision, index$3_WsHandshakeDecisionZ as WsHandshakeDecisionZ, type index$3_WsHandshakeInput as WsHandshakeInput, index$3_WsHandshakeInputZ as WsHandshakeInputZ };
 }
 
+type index$2_AxisSensorChainService = AxisSensorChainService;
+declare const index$2_AxisSensorChainService: typeof AxisSensorChainService;
 declare const index$2_CAPABILITIES: typeof CAPABILITIES;
 type index$2_Capability = Capability;
+type index$2_ChainResult = ChainResult;
 declare const index$2_INTENT_REQUIREMENTS: typeof INTENT_REQUIREMENTS;
 declare const index$2_PROOF_CAPABILITIES: typeof PROOF_CAPABILITIES;
+type index$2_SensorDecision = SensorDecision;
+type index$2_SensorInput = SensorInput;
 declare const index$2_canAccessResource: typeof canAccessResource;
 declare const index$2_hasScope: typeof hasScope;
 declare const index$2_parseScope: typeof parseScope;
 declare namespace index$2 {
-  export { index$2_CAPABILITIES as CAPABILITIES, type index$2_Capability as Capability, index$2_INTENT_REQUIREMENTS as INTENT_REQUIREMENTS, index$2_PROOF_CAPABILITIES as PROOF_CAPABILITIES, index$2_canAccessResource as canAccessResource, index$2_hasScope as hasScope, index$2_parseScope as parseScope };
+  export { index$2_AxisSensorChainService as AxisSensorChainService, index$2_CAPABILITIES as CAPABILITIES, type index$2_Capability as Capability, type index$2_ChainResult as ChainResult, index$2_INTENT_REQUIREMENTS as INTENT_REQUIREMENTS, index$2_PROOF_CAPABILITIES as PROOF_CAPABILITIES, type index$2_SensorDecision as SensorDecision, type index$2_SensorInput as SensorInput, index$2_canAccessResource as canAccessResource, index$2_hasScope as hasScope, index$2_parseScope as parseScope };
 }
 
 declare class AccessProfileResolverSensor implements AxisSensor {
@@ -2353,4 +2376,4 @@ declare namespace index {
   export { index_encodeAxisTlvDto as encodeAxisTlvDto };
 }
 
-export { ATS1_HDR, ATS1_SCHEMA, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, type AxisCrudHandler, type AxisEffect, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisObservedContext, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, type AxisRequestContext, AxisResponseDto, type AxisSensor, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, CAPABILITIES, type Capability, type CapsuleMode, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, HANDLER_METADATA_KEY, Handler, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationStreamEntry, type ObservationWitnessSummary, type ObserverVerdict, PROOF_CAPABILITIES, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type ResponseContract, type ResponseObserverContext, RiskDecision, type RiskEvaluation, type RiskSignal, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, type SensorDecision, SensorDecisions, type SensorInput, type SensorMinifiedDecision, type SensorPhaseMetadata, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeObservation, classifyIntent, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, encVarint, encodeAxis1Frame, encodeQueueMessage, index$5 as engine, extractDtoSchema, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse };
+export { ATS1_HDR, ATS1_SCHEMA, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, AxisContext$1 as AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisObservation, type AxisObservedContext, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, type Capability, type CapsuleMode, type ChainResult, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type ResponseContract, type ResponseObserverContext, RiskDecision, type RiskEvaluation, type RiskSignal, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeObservation, classifyIntent, createObservation, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, encVarint, encodeAxis1Frame, encodeQueueMessage, endStage, index$5 as engine, extractDtoSchema, finalizeObservation, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, recordSensor, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, startStage, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse };