@nextera.one/axis-server-sdk 1.6.0 → 1.7.0

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { ModuleRef, DiscoveryService, MetadataScanner, Reflector } from '@nestjs
 import { A as AxisFrame$2 } from './index-1uEwnW-w.js';
 export { a as AxisBinaryFrame, b as AxisError, c as AxisFrameZ, d as computeReceiptHash, e as computeSignaturePayload, i as core, f as decodeFrame, g as encodeFrame, h as generateEd25519KeyPair, j as getSignTarget, s as sha256, k as signFrame, v as verifyFrameSignature } from './index-1uEwnW-w.js';
 import { PROOF_LOOM, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT } from '@nextera.one/axis-protocol';
-export { AXIS_MAGIC, AXIS_VERSION, TLV as AxisTlvType, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
+export { AXIS_MAGIC, AXIS_VERSION, TLV as AxisTlvType, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_LOOM_PRESENCE_ID as TLV_PRESENCE_ID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_LOOM_THREAD_HASH as TLV_THREAD_HASH, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, TLV_LOOM_WRIT as TLV_WRIT, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
 import { OnModuleInit, OnApplicationBootstrap } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import * as z from 'zod';
@@ -1982,6 +1982,144 @@ declare class AxisSensorChainService {
     private evaluateSensors;
 }
 
+type AxisTlvDtoCtor<T = object> = new (...args: never[]) => T;
+declare function encodeAxisTlvDto<T extends object>(dtoClass: AxisTlvDtoCtor<T>, data: Partial<Record<keyof T, unknown>>): Uint8Array;
+
+interface PresenceDeclaration {
+    softid: string;
+    device_meta?: {
+        fingerprint?: string;
+        platform?: string;
+        user_agent?: string;
+    };
+}
+interface PresenceChallenge {
+    challenge_id: string;
+    nonce: string;
+    temporal_anchor: number;
+    ttl_ms: number;
+    expires_at: number;
+}
+interface PresenceProof {
+    challenge_id: string;
+    signature: string;
+    public_key: string;
+    kid?: string;
+}
+interface PresenceReceipt {
+    presence_id: string;
+    softid: string;
+    anchor_reflection: string;
+    scope: {
+        ip?: string;
+        device_fingerprint?: string;
+    };
+    issued_at: number;
+    expires_at: number;
+    renewed_at?: number;
+}
+type PresenceStatus = 'active' | 'expired' | 'revoked';
+interface WritHead {
+    tid: string;
+    seq: number;
+}
+interface WritBody {
+    who: string;
+    act: string;
+    res: string;
+    law: string;
+}
+interface WritMeta {
+    iat: number;
+    exp: number;
+    prev: string;
+}
+interface WritSignature {
+    alg: 'ed25519';
+    value: string;
+    kid?: string;
+}
+interface Writ {
+    head: WritHead;
+    body: WritBody;
+    meta: WritMeta;
+    sig: WritSignature;
+}
+type GrantType = 'sovereign' | 'delegated' | 'system';
+interface GrantCapability {
+    oec: string;
+    scope: string;
+    limit?: {
+        rate?: string;
+        amount?: number;
+        depth?: string;
+    };
+}
+interface GrantMeta {
+    iat: number;
+    exp: number;
+    revocable: boolean;
+    version: number;
+    contract_ref?: string;
+}
+interface Grant {
+    grant_id: string;
+    issuer: string;
+    subject: string;
+    grant_type: GrantType;
+    caps: GrantCapability[];
+    meta: GrantMeta;
+    sig: WritSignature;
+}
+type GrantStatus = 'active' | 'revoked' | 'expired';
+interface LoomReceipt {
+    receipt_id: string;
+    writ_hash: string;
+    thread_id: string;
+    sequence: number;
+    effect: string;
+    hash: string;
+    prev_hash: string | null;
+    executed_at: number;
+    metadata?: Record<string, unknown>;
+}
+interface ThreadState {
+    thread_id: string;
+    softid: string;
+    last_receipt_hash: string;
+    sequence: number;
+    updated_at: number;
+}
+type RevocationTargetType = 'grant' | 'presence' | 'softid';
+interface Revocation {
+    revocation_id: string;
+    target_type: RevocationTargetType;
+    target_id: string;
+    issuer_softid: string;
+    reason?: string;
+    effective_at: number;
+    sig_value: string;
+}
+interface LoomValidationResult {
+    valid: boolean;
+    error?: string;
+    code?: string;
+}
+interface PresenceVerifyResult extends LoomValidationResult {
+    presence?: PresenceReceipt;
+}
+interface WritValidationResult extends LoomValidationResult {
+    writ?: Writ;
+    gate_failed?: 'temporal' | 'causal' | 'legal' | 'authentic';
+}
+interface GrantValidationResult extends LoomValidationResult {
+    grant?: Grant;
+}
+
+declare function deriveAnchorReflection(softid: string, context?: string, scope?: string): string;
+declare function canonicalizeWrit(writ: Omit<Writ, 'sig'>): string;
+declare function canonicalizeGrant(grant: Omit<Grant, 'sig'>): string;
+
 interface CceDerivationInput {
     axisLocalSecret: string;
     capsule: CceCapsuleClaims;
@@ -2356,158 +2494,41 @@ type index$5_HandlerDiscoveryService = HandlerDiscoveryService;
 declare const index$5_HandlerDiscoveryService: typeof HandlerDiscoveryService;
 type index$5_IntentRouter = IntentRouter;
 declare const index$5_IntentRouter: typeof IntentRouter;
+type index$5_ObservationQueueConfig = ObservationQueueConfig;
+type index$5_ObservationQueueMessage = ObservationQueueMessage;
 type index$5_ObservationSensor = ObservationSensor;
 type index$5_ObservationStage = ObservationStage;
+type index$5_ObservationStreamEntry = ObservationStreamEntry;
+type index$5_ObservationWitnessSummary = ObservationWitnessSummary;
+type index$5_ObserverVerdict = ObserverVerdict;
 declare const index$5_PRE_DECODE_BOUNDARY: typeof PRE_DECODE_BOUNDARY;
+type index$5_ResponseContract = ResponseContract;
+type index$5_ResponseObserverContext = ResponseObserverContext;
 type index$5_SensorBand = SensorBand;
 type index$5_SensorDiscoveryService = SensorDiscoveryService;
 declare const index$5_SensorDiscoveryService: typeof SensorDiscoveryService;
 type index$5_SensorRegistry = SensorRegistry;
 declare const index$5_SensorRegistry: typeof SensorRegistry;
+type index$5_UnsignedObservationWitness = UnsignedObservationWitness;
+declare const index$5_buildQueueMessage: typeof buildQueueMessage;
+declare const index$5_buildUnsignedWitness: typeof buildUnsignedWitness;
+declare const index$5_canonicalizeObservation: typeof canonicalizeObservation;
 declare const index$5_createObservation: typeof createObservation;
+declare const index$5_decodeQueueMessage: typeof decodeQueueMessage;
+declare const index$5_encodeQueueMessage: typeof encodeQueueMessage;
 declare const index$5_endStage: typeof endStage;
 declare const index$5_finalizeObservation: typeof finalizeObservation;
+declare const index$5_hashObservation: typeof hashObservation;
+declare const index$5_parseAutoClaimEntries: typeof parseAutoClaimEntries;
+declare const index$5_parseStreamEntries: typeof parseStreamEntries;
 declare const index$5_recordSensor: typeof recordSensor;
+declare const index$5_stableJsonStringify: typeof stableJsonStringify;
 declare const index$5_startStage: typeof startStage;
+declare const index$5_verifyResponse: typeof verifyResponse;
 declare namespace index$5 {
-  export { type index$5_AxisDecoded as AxisDecoded, type index$5_AxisEffect as AxisEffect, type index$5_AxisObservation as AxisObservation, index$5_BAND as BAND, index$5_HandlerDiscoveryService as HandlerDiscoveryService, index$5_IntentRouter as IntentRouter, type IntentSchema$1 as IntentSchema, type index$5_ObservationSensor as ObservationSensor, type index$5_ObservationStage as ObservationStage, index$5_PRE_DECODE_BOUNDARY as PRE_DECODE_BOUNDARY, type index$5_SensorBand as SensorBand, index$5_SensorDiscoveryService as SensorDiscoveryService, index$5_SensorRegistry as SensorRegistry, index$5_createObservation as createObservation, index$5_endStage as endStage, index$5_finalizeObservation as finalizeObservation, index$6 as observation, index$5_recordSensor as recordSensor, index$5_startStage as startStage };
+  export { type index$5_AxisDecoded as AxisDecoded, type index$5_AxisEffect as AxisEffect, type index$5_AxisObservation as AxisObservation, index$5_BAND as BAND, index$5_HandlerDiscoveryService as HandlerDiscoveryService, index$5_IntentRouter as IntentRouter, type IntentSchema$1 as IntentSchema, type index$5_ObservationQueueConfig as ObservationQueueConfig, type index$5_ObservationQueueMessage as ObservationQueueMessage, type index$5_ObservationSensor as ObservationSensor, type index$5_ObservationStage as ObservationStage, type index$5_ObservationStreamEntry as ObservationStreamEntry, type index$5_ObservationWitnessSummary as ObservationWitnessSummary, type index$5_ObserverVerdict as ObserverVerdict, index$5_PRE_DECODE_BOUNDARY as PRE_DECODE_BOUNDARY, type index$5_ResponseContract as ResponseContract, type index$5_ResponseObserverContext as ResponseObserverContext, type index$5_SensorBand as SensorBand, index$5_SensorDiscoveryService as SensorDiscoveryService, index$5_SensorRegistry as SensorRegistry, type index$5_UnsignedObservationWitness as UnsignedObservationWitness, index$5_buildQueueMessage as buildQueueMessage, index$5_buildUnsignedWitness as buildUnsignedWitness, index$5_canonicalizeObservation as canonicalizeObservation, index$5_createObservation as createObservation, index$5_decodeQueueMessage as decodeQueueMessage, index$5_encodeQueueMessage as encodeQueueMessage, index$5_endStage as endStage, index$5_finalizeObservation as finalizeObservation, index$5_hashObservation as hashObservation, index$6 as observation, index$5_parseAutoClaimEntries as parseAutoClaimEntries, index$5_parseStreamEntries as parseStreamEntries, index$5_recordSensor as recordSensor, index$5_stableJsonStringify as stableJsonStringify, index$5_startStage as startStage, index$5_verifyResponse as verifyResponse };
 }
 
-interface PresenceDeclaration {
-    softid: string;
-    device_meta?: {
-        fingerprint?: string;
-        platform?: string;
-        user_agent?: string;
-    };
-}
-interface PresenceChallenge {
-    challenge_id: string;
-    nonce: string;
-    temporal_anchor: number;
-    ttl_ms: number;
-    expires_at: number;
-}
-interface PresenceProof {
-    challenge_id: string;
-    signature: string;
-    public_key: string;
-    kid?: string;
-}
-interface PresenceReceipt {
-    presence_id: string;
-    softid: string;
-    anchor_reflection: string;
-    scope: {
-        ip?: string;
-        device_fingerprint?: string;
-    };
-    issued_at: number;
-    expires_at: number;
-    renewed_at?: number;
-}
-type PresenceStatus = 'active' | 'expired' | 'revoked';
-interface WritHead {
-    tid: string;
-    seq: number;
-}
-interface WritBody {
-    who: string;
-    act: string;
-    res: string;
-    law: string;
-}
-interface WritMeta {
-    iat: number;
-    exp: number;
-    prev: string;
-}
-interface WritSignature {
-    alg: 'ed25519';
-    value: string;
-    kid?: string;
-}
-interface Writ {
-    head: WritHead;
-    body: WritBody;
-    meta: WritMeta;
-    sig: WritSignature;
-}
-type GrantType = 'sovereign' | 'delegated' | 'system';
-interface GrantCapability {
-    oec: string;
-    scope: string;
-    limit?: {
-        rate?: string;
-        amount?: number;
-        depth?: string;
-    };
-}
-interface GrantMeta {
-    iat: number;
-    exp: number;
-    revocable: boolean;
-    version: number;
-    contract_ref?: string;
-}
-interface Grant {
-    grant_id: string;
-    issuer: string;
-    subject: string;
-    grant_type: GrantType;
-    caps: GrantCapability[];
-    meta: GrantMeta;
-    sig: WritSignature;
-}
-type GrantStatus = 'active' | 'revoked' | 'expired';
-interface LoomReceipt {
-    receipt_id: string;
-    writ_hash: string;
-    thread_id: string;
-    sequence: number;
-    effect: string;
-    hash: string;
-    prev_hash: string | null;
-    executed_at: number;
-    metadata?: Record<string, unknown>;
-}
-interface ThreadState {
-    thread_id: string;
-    softid: string;
-    last_receipt_hash: string;
-    sequence: number;
-    updated_at: number;
-}
-type RevocationTargetType = 'grant' | 'presence' | 'softid';
-interface Revocation {
-    revocation_id: string;
-    target_type: RevocationTargetType;
-    target_id: string;
-    issuer_softid: string;
-    reason?: string;
-    effective_at: number;
-    sig_value: string;
-}
-interface LoomValidationResult {
-    valid: boolean;
-    error?: string;
-    code?: string;
-}
-interface PresenceVerifyResult extends LoomValidationResult {
-    presence?: PresenceReceipt;
-}
-interface WritValidationResult extends LoomValidationResult {
-    writ?: Writ;
-    gate_failed?: 'temporal' | 'causal' | 'legal' | 'authentic';
-}
-interface GrantValidationResult extends LoomValidationResult {
-    grant?: Grant;
-}
-
-declare function deriveAnchorReflection(softid: string, context?: string, scope?: string): string;
-declare function canonicalizeWrit(writ: Omit<Writ, 'sig'>): string;
-declare function canonicalizeGrant(grant: Omit<Grant, 'sig'>): string;
-
 type index$4_Grant = Grant;
 type index$4_GrantCapability = GrantCapability;
 type index$4_GrantMeta = GrantMeta;
@@ -2876,12 +2897,9 @@ declare namespace index$1 {
   export { index$1_AccessProfileResolverSensor as AccessProfileResolverSensor, index$1_BodyBudgetSensor as BodyBudgetSensor, index$1_CapabilityEnforcementSensor as CapabilityEnforcementSensor, index$1_ChunkHashSensor as ChunkHashSensor, index$1_EntropySensor as EntropySensor, index$1_ExecutionTimeoutSensor as ExecutionTimeoutSensor, index$1_FrameBudgetSensor as FrameBudgetSensor, index$1_FrameHeaderSanitySensor as FrameHeaderSanitySensor, index$1_HeaderTLVLimitSensor as HeaderTLVLimitSensor, index$1_IntentAllowlistSensor as IntentAllowlistSensor, index$1_IntentRegistrySensor as IntentRegistrySensor, index$1_ProofPresenceSensor as ProofPresenceSensor, index$1_ProtocolStrictSensor as ProtocolStrictSensor, index$1_ReceiptPolicySensor as ReceiptPolicySensor, index$1_SchemaValidationSensor as SchemaValidationSensor, index$1_StreamScopeSensor as StreamScopeSensor, index$1_TLVParseSensor as TLVParseSensor, index$1_VarintHardeningSensor as VarintHardeningSensor };
 }
 
-type AxisTlvDtoCtor<T = object> = new (...args: never[]) => T;
-declare function encodeAxisTlvDto<T extends object>(dtoClass: AxisTlvDtoCtor<T>, data: Partial<Record<keyof T, unknown>>): Uint8Array;
-
 declare const index_encodeAxisTlvDto: typeof encodeAxisTlvDto;
 declare namespace index {
   export { index_encodeAxisTlvDto as encodeAxisTlvDto };
 }
 
-export { ATS1_HDR, ATS1_SCHEMA, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, AxisContext$1 as AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisObservation, type AxisObservedContext, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, CCE_ERROR, CCE_PROTOCOL_VERSION, type Capability, type CapsuleMode, type CceCapsuleClaims as CceCapsuleClaimsType, CceError, type CceExecutionContext as CceExecutionContextType, type CceHandler, type CceHandlerContext, type CceHandlerResult, type CcePipelineConfig, type CcePipelineResult, type CceRequestEnvelope as CceRequestEnvelopeType, type CceResponseEnvelope as CceResponseEnvelopeType, type CceWitnessRecord as CceWitnessRecordType, type ChainResult, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type ResponseContract, type ResponseObserverContext, RiskDecision, type RiskEvaluation, type RiskSignal, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeObservation, index$9 as cce, classifyIntent, createObservation, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, encVarint, encodeAxis1Frame, encodeQueueMessage, endStage, index$5 as engine, executeCcePipeline, extractDtoSchema, finalizeObservation, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, recordSensor, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, startStage, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse };
+export { ATS1_HDR, ATS1_SCHEMA, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, AxisContext$1 as AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisObservation, type AxisObservedContext, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, CCE_ERROR, CCE_PROTOCOL_VERSION, type Capability, type CapsuleMode, type CceCapsuleClaims as CceCapsuleClaimsType, CceError, type CceExecutionContext as CceExecutionContextType, type CceHandler, type CceHandlerContext, type CceHandlerResult, type CcePipelineConfig, type CcePipelineResult, type CceRequestEnvelope as CceRequestEnvelopeType, type CceResponseEnvelope as CceResponseEnvelopeType, type CceWitnessRecord as CceWitnessRecordType, type ChainResult, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, type Grant, type GrantCapability, type GrantMeta, type GrantStatus, type GrantType, type GrantValidationResult, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type LoomReceipt, type LoomValidationResult, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, type PresenceChallenge, type PresenceDeclaration, type PresenceProof, type PresenceReceipt, type PresenceStatus, type PresenceVerifyResult, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type ResponseContract, verifyResponse as ResponseObserver, type ResponseObserverContext, type Revocation, type RevocationTargetType, RiskDecision, type RiskEvaluation, type RiskSignal, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, type ThreadState, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, type Writ, type WritBody, type WritHead, type WritMeta, type WritSignature, type WritValidationResult, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeGrant, canonicalizeObservation, canonicalizeWrit, index$9 as cce, classifyIntent, createObservation, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, deriveAnchorReflection, encVarint, encodeAxis1Frame, encodeAxisTlvDto, encodeQueueMessage, endStage, index$5 as engine, executeCcePipeline, extractDtoSchema, finalizeObservation, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, recordSensor, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, startStage, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse };

package/dist/index.js

@@ -126,6 +126,7 @@ __export(index_exports, {
   RESPONSE_TAG_ID: () => RESPONSE_TAG_ID,
   RESPONSE_TAG_UPDATED_AT: () => RESPONSE_TAG_UPDATED_AT,
   RESPONSE_TAG_UPDATED_BY: () => RESPONSE_TAG_UPDATED_BY,
+  ResponseObserver: () => verifyResponse,
   RiskDecision: () => RiskDecision,
   SENSOR_METADATA_KEY: () => SENSOR_METADATA_KEY,
   Schema2002_PasskeyLoginOptionsRes: () => Schema2002_PasskeyLoginOptionsRes,
@@ -159,6 +160,7 @@ __export(index_exports, {
   TLV_OFFSET: () => import_axis_protocol2.TLV_OFFSET,
   TLV_OK: () => import_axis_protocol2.TLV_OK,
   TLV_PID: () => import_axis_protocol2.TLV_PID,
+  TLV_PRESENCE_ID: () => import_axis_protocol2.TLV_LOOM_PRESENCE_ID,
   TLV_PREV_HASH: () => import_axis_protocol2.TLV_PREV_HASH,
   TLV_PROOF_REF: () => import_axis_protocol2.TLV_PROOF_REF,
   TLV_PROOF_TYPE: () => import_axis_protocol2.TLV_PROOF_TYPE,
@@ -166,10 +168,12 @@ __export(index_exports, {
   TLV_RECEIPT_HASH: () => import_axis_protocol2.TLV_RECEIPT_HASH,
   TLV_RID: () => import_axis_protocol2.TLV_RID,
   TLV_SHA256_CHUNK: () => import_axis_protocol2.TLV_SHA256_CHUNK,
+  TLV_THREAD_HASH: () => import_axis_protocol2.TLV_LOOM_THREAD_HASH,
   TLV_TRACE_ID: () => import_axis_protocol2.TLV_TRACE_ID,
   TLV_TS: () => import_axis_protocol2.TLV_TS,
   TLV_UPLOAD_ID: () => import_axis_protocol2.TLV_UPLOAD_ID,
   TLV_VALIDATORS_KEY: () => TLV_VALIDATORS_KEY,
+  TLV_WRIT: () => import_axis_protocol2.TLV_LOOM_WRIT,
   TlvEnum: () => TlvEnum,
   TlvField: () => TlvField,
   TlvMinLen: () => TlvMinLen,
@@ -192,7 +196,9 @@ __export(index_exports, {
   canAccessResource: () => canAccessResource,
   canonicalJson: () => canonicalJson,
   canonicalJsonExcluding: () => canonicalJsonExcluding,
+  canonicalizeGrant: () => canonicalizeGrant,
   canonicalizeObservation: () => canonicalizeObservation,
+  canonicalizeWrit: () => canonicalizeWrit,
   cce: () => cce_exports,
   classifyIntent: () => classifyIntent,
   computeReceiptHash: () => computeReceiptHash,
@@ -209,8 +215,10 @@ __export(index_exports, {
   decodeTLVsList: () => import_axis_protocol.decodeTLVsList,
   decodeVarint: () => import_axis_protocol3.decodeVarint,
   decorators: () => decorators_exports,
+  deriveAnchorReflection: () => deriveAnchorReflection,
   encVarint: () => encVarint,
   encodeAxis1Frame: () => encodeAxis1Frame,
+  encodeAxisTlvDto: () => encodeAxisTlvDto,
   encodeFrame: () => encodeFrame,
   encodeQueueMessage: () => encodeQueueMessage,
   encodeTLVs: () => import_axis_protocol.encodeTLVs,
@@ -4236,6 +4244,88 @@ AxisSensorChainService = __decorateClass([
   (0, import_common9.Injectable)()
 ], AxisSensorChainService);
 
+// src/utils/axis-tlv-codec.ts
+function encodeAxisTlvDto(dtoClass, data) {
+  const schema = extractDtoSchema(dtoClass);
+  const items = schema.fields.flatMap((field) => {
+    const value = data[field.name];
+    if (value === void 0 || value === null) {
+      if (field.required) {
+        throw new Error(`Missing required TLV response field: ${field.name}`);
+      }
+      return [];
+    }
+    return [{ type: field.tag, value: encodeField(field, value) }];
+  });
+  return buildTLVs(items);
+}
+function encodeField(field, value) {
+  switch (field.kind) {
+    case "utf8":
+      return Buffer.from(String(value), "utf8");
+    case "u64":
+      return encodeU64(value);
+    case "bytes":
+    case "bytes16":
+      return toBuffer(value);
+    case "bool":
+      return Buffer.from([value ? 1 : 0]);
+    case "obj":
+    case "arr":
+      return Buffer.from(JSON.stringify(value), "utf8");
+    default:
+      return toBuffer(value);
+  }
+}
+function encodeU64(value) {
+  const encoded = Buffer.alloc(8);
+  encoded.writeBigUInt64BE(
+    typeof value === "bigint" ? value : BigInt(value)
+  );
+  return encoded;
+}
+function toBuffer(value) {
+  if (Buffer.isBuffer(value)) {
+    return value;
+  }
+  if (value instanceof Uint8Array) {
+    return Buffer.from(value);
+  }
+  if (typeof value === "string") {
+    return Buffer.from(value, "utf8");
+  }
+  throw new Error(`Unsupported TLV bytes value: ${typeof value}`);
+}
+
+// src/loom/loom.types.ts
+function deriveAnchorReflection(softid, context = "openlogs", scope = "loom") {
+  return `ar:${context}:${scope}:${softid}`;
+}
+function canonicalizeWrit(writ) {
+  const ordered = {
+    head: { tid: writ.head.tid, seq: writ.head.seq },
+    body: {
+      who: writ.body.who,
+      act: writ.body.act,
+      res: writ.body.res,
+      law: writ.body.law
+    },
+    meta: { iat: writ.meta.iat, exp: writ.meta.exp, prev: writ.meta.prev }
+  };
+  return JSON.stringify(ordered);
+}
+function canonicalizeGrant(grant) {
+  const ordered = {
+    grant_id: grant.grant_id,
+    issuer: grant.issuer,
+    subject: grant.subject,
+    grant_type: grant.grant_type,
+    caps: grant.caps,
+    meta: grant.meta
+  };
+  return JSON.stringify(ordered);
+}
+
 // src/cce/index.ts
 var cce_exports = {};
 __export(cce_exports, {
@@ -5283,12 +5373,22 @@ __export(engine_exports, {
   PRE_DECODE_BOUNDARY: () => PRE_DECODE_BOUNDARY,
   SensorDiscoveryService: () => SensorDiscoveryService,
   SensorRegistry: () => SensorRegistry,
+  buildQueueMessage: () => buildQueueMessage,
+  buildUnsignedWitness: () => buildUnsignedWitness,
+  canonicalizeObservation: () => canonicalizeObservation,
   createObservation: () => createObservation,
+  decodeQueueMessage: () => decodeQueueMessage,
+  encodeQueueMessage: () => encodeQueueMessage,
   endStage: () => endStage,
   finalizeObservation: () => finalizeObservation,
+  hashObservation: () => hashObservation,
   observation: () => observation_exports,
+  parseAutoClaimEntries: () => parseAutoClaimEntries,
+  parseStreamEntries: () => parseStreamEntries,
   recordSensor: () => recordSensor,
-  startStage: () => startStage
+  stableJsonStringify: () => stableJsonStringify,
+  startStage: () => startStage,
+  verifyResponse: () => verifyResponse
 });
 
 // src/engine/observation/index.ts
@@ -5318,35 +5418,6 @@ __export(loom_exports, {
   deriveAnchorReflection: () => deriveAnchorReflection
 });
 
-// src/loom/loom.types.ts
-function deriveAnchorReflection(softid, context = "openlogs", scope = "loom") {
-  return `ar:${context}:${scope}:${softid}`;
-}
-function canonicalizeWrit(writ) {
-  const ordered = {
-    head: { tid: writ.head.tid, seq: writ.head.seq },
-    body: {
-      who: writ.body.who,
-      act: writ.body.act,
-      res: writ.body.res,
-      law: writ.body.law
-    },
-    meta: { iat: writ.meta.iat, exp: writ.meta.exp, prev: writ.meta.prev }
-  };
-  return JSON.stringify(ordered);
-}
-function canonicalizeGrant(grant) {
-  const ordered = {
-    grant_id: grant.grant_id,
-    issuer: grant.issuer,
-    subject: grant.subject,
-    grant_type: grant.grant_type,
-    caps: grant.caps,
-    meta: grant.meta
-  };
-  return JSON.stringify(ordered);
-}
-
 // src/schemas/index.ts
 var schemas_exports = {};
 __export(schemas_exports, {
@@ -7357,59 +7428,6 @@ var utils_exports = {};
 __export(utils_exports, {
   encodeAxisTlvDto: () => encodeAxisTlvDto
 });
-
-// src/utils/axis-tlv-codec.ts
-function encodeAxisTlvDto(dtoClass, data) {
-  const schema = extractDtoSchema(dtoClass);
-  const items = schema.fields.flatMap((field) => {
-    const value = data[field.name];
-    if (value === void 0 || value === null) {
-      if (field.required) {
-        throw new Error(`Missing required TLV response field: ${field.name}`);
-      }
-      return [];
-    }
-    return [{ type: field.tag, value: encodeField(field, value) }];
-  });
-  return buildTLVs(items);
-}
-function encodeField(field, value) {
-  switch (field.kind) {
-    case "utf8":
-      return Buffer.from(String(value), "utf8");
-    case "u64":
-      return encodeU64(value);
-    case "bytes":
-    case "bytes16":
-      return toBuffer(value);
-    case "bool":
-      return Buffer.from([value ? 1 : 0]);
-    case "obj":
-    case "arr":
-      return Buffer.from(JSON.stringify(value), "utf8");
-    default:
-      return toBuffer(value);
-  }
-}
-function encodeU64(value) {
-  const encoded = Buffer.alloc(8);
-  encoded.writeBigUInt64BE(
-    typeof value === "bigint" ? value : BigInt(value)
-  );
-  return encoded;
-}
-function toBuffer(value) {
-  if (Buffer.isBuffer(value)) {
-    return value;
-  }
-  if (value instanceof Uint8Array) {
-    return Buffer.from(value);
-  }
-  if (typeof value === "string") {
-    return Buffer.from(value, "utf8");
-  }
-  throw new Error(`Unsupported TLV bytes value: ${typeof value}`);
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ATS1_HDR,
@@ -7500,6 +7518,7 @@ function toBuffer(value) {
   RESPONSE_TAG_ID,
   RESPONSE_TAG_UPDATED_AT,
   RESPONSE_TAG_UPDATED_BY,
+  ResponseObserver,
   RiskDecision,
   SENSOR_METADATA_KEY,
   Schema2002_PasskeyLoginOptionsRes,
@@ -7533,6 +7552,7 @@ function toBuffer(value) {
   TLV_OFFSET,
   TLV_OK,
   TLV_PID,
+  TLV_PRESENCE_ID,
   TLV_PREV_HASH,
   TLV_PROOF_REF,
   TLV_PROOF_TYPE,
@@ -7540,10 +7560,12 @@ function toBuffer(value) {
   TLV_RECEIPT_HASH,
   TLV_RID,
   TLV_SHA256_CHUNK,
+  TLV_THREAD_HASH,
   TLV_TRACE_ID,
   TLV_TS,
   TLV_UPLOAD_ID,
   TLV_VALIDATORS_KEY,
+  TLV_WRIT,
   TlvEnum,
   TlvField,
   TlvMinLen,
@@ -7566,7 +7588,9 @@ function toBuffer(value) {
   canAccessResource,
   canonicalJson,
   canonicalJsonExcluding,
+  canonicalizeGrant,
   canonicalizeObservation,
+  canonicalizeWrit,
   cce,
   classifyIntent,
   computeReceiptHash,
@@ -7583,8 +7607,10 @@ function toBuffer(value) {
   decodeTLVsList,
   decodeVarint,
   decorators,
+  deriveAnchorReflection,
   encVarint,
   encodeAxis1Frame,
+  encodeAxisTlvDto,
   encodeFrame,
   encodeQueueMessage,
   encodeTLVs,