@nextera.one/axis-server-sdk 2.1.3 → 2.1.4

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 import { A as AxisFrame$2 } from './index-DXHfWxLG.js';
 export { a as AxisBinaryFrame, b as AxisError, c as AxisFrameZ, d as AxisMediaTypes, e as computeReceiptHash, f as computeSignaturePayload, i as core, g as decodeFrame, h as encodeFrame, j as generateEd25519KeyPair, k as getSignTarget, s as sha256, l as signFrame, v as verifyFrameSignature } from './index-DXHfWxLG.js';
 import { ModuleRef, DiscoveryService, Reflector, MetadataScanner } from '@nestjs/core';
+import * as z from 'zod';
 import { PROOF_LOOM, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT } from '@nextera.one/axis-protocol';
 export { AXIS_MAGIC, AXIS_VERSION, TLV as AxisTlvType, BodyProfile, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, ProofType, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_LOOM_PRESENCE_ID as TLV_PRESENCE_ID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_LOOM_THREAD_HASH as TLV_THREAD_HASH, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, TLV_LOOM_WRIT as TLV_WRIT, decodeArray, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeTLVs, encodeVarint, varintLength } from '@nextera.one/axis-protocol';
 import { OnApplicationBootstrap, OnModuleInit } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
-import * as z from 'zod';
 
 type AxisExecutionMode = 'strict' | 'parallel' | 'best_effort' | 'atomic';
 type AxisObserverEvent = 'intent.received' | 'intent.completed' | 'intent.failed' | 'chain.received' | 'chain.admitted' | 'chain.completed' | 'chain.failed' | 'chain.partial' | 'step.started' | 'step.completed' | 'step.failed' | 'step.blocked' | 'step.skipped' | 'signature.verified' | 'decryption.succeeded' | 'sensor.passed' | 'sensor.failed' | 'handler.completed' | 'proof.recorded';
@@ -866,890 +866,16 @@ type CcePipelineResult = {
 };
 declare function executeCcePipeline(envelope: CceRequestEnvelope, config: CcePipelineConfig): Promise<CcePipelineResult>;
 
-interface IntentSchema$1 {
-    intent: string;
-    version: number;
-    bodyProfile: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
-    fields: Array<{
-        name: string;
-        tlv: number;
-        kind: IntentTlvField["kind"];
-        required?: boolean;
-        maxLen?: number;
-        max?: string;
-        scope?: "header" | "body";
-    }>;
-}
-interface AxisEffect {
-    ok: boolean;
-    effect: string;
-    body?: Uint8Array;
-    headers?: Map<number, Uint8Array>;
-    metadata?: any;
-}
-declare class IntentRouter {
-    private readonly moduleRef?;
-    private readonly observerDispatcher?;
-    private readonly logger;
-    private readonly decoder;
-    private readonly encoder;
-    private static readonly BUILTIN_INTENTS;
-    private handlers;
-    private intentSensors;
-    private intentDecoders;
-    private intentSchemas;
-    private intentValidators;
-    private intentKinds;
-    private intentChains;
-    private intentObservers;
-    private intentCapsulePolicies;
-    private cceHandlers;
-    private ccePipelineConfig;
-    constructor(moduleRef?: ModuleRef | undefined, observerDispatcher?: ObserverDispatcherService | undefined);
-    getSchema(intent: string): IntentSchema$1 | undefined;
-    getValidators(intent: string): Map<number, TlvValidatorFn[]> | undefined;
-    has(intent: string): boolean;
-    getRegisteredIntents(): string[];
-    getIntentEntry(intent: string): {
-        schema?: IntentSchema$1;
-        validators?: Map<number, TlvValidatorFn[]>;
-        hasSensors: boolean;
-        builtin: boolean;
-        kind?: IntentKind;
-        chain?: RegisteredChainConfig;
-        capsulePolicy?: CapsulePolicyOptions;
-        observerCount: number;
-    } | null;
-    getChainConfig(intent: string): RegisteredChainConfig | undefined;
-    getObservers(intent: string): AxisObserverBinding[];
-    register(intent: string, handler: any): void;
-    registerHandler(instance: any): void;
-    route(frame: AxisFrame$2): Promise<AxisEffect>;
-    private logIntent;
-    registerIntentMeta(intent: string, proto: object, methodName: string, handlerSensors?: Function[], handlerObservers?: AxisObserverBinding[]): void;
-    private emitIntentObservers;
-    private runIntentSensors;
-    private getEffectiveCapsulePolicy;
-    private enforceCapsulePolicy;
-    private executeChainRequest;
-    private parseIntentExecBody;
-    private parseChainRequestBody;
-    private isChainRequestLike;
-    private isChainEnvelopeLike;
-    private encodeJson;
-    private getActorIdFromFrame;
-    private getProofRefFromFrame;
-    private hasCapsuleReference;
-    private getHeaderValue;
-    private identifiersMatch;
-    private extractInlineCapsuleId;
-    private toInlineCapsuleRecord;
-    private toScopeList;
-    configureCce(config: Omit<CcePipelineConfig, "handlers">): void;
-    registerCceHandler(intent: string, handler: CceHandler): void;
-    hasCceHandler(intent: string): boolean;
-    routeCce(envelope: CceRequestEnvelope): Promise<CcePipelineResult>;
-    private storeSchema;
-}
-
-interface AxisObserverContext {
-    event: AxisObserverEvent;
-    timestamp: number;
-    intent?: string;
-    chainId?: string;
-    stepId?: string;
-    handler?: string;
-    frame?: AxisFrame$2;
-    envelope?: AxisChainEnvelope;
-    step?: AxisChainStep;
-    effect?: AxisEffect;
-    result?: AxisChainStepResult | AxisChainResult;
-    error?: string;
-    observerTags?: string[];
-    capsule?: AxisCapsuleRef;
-    keyExchange?: AxisKeyExchangeRef;
-    metadata?: Record<string, unknown>;
-}
-interface AxisIntentObserver {
-    readonly name: string;
-    supports?(context: AxisObserverContext): boolean;
-    observe(context: AxisObserverContext): Promise<void> | void;
-}
-interface AxisObserverRegistration {
-    name: string;
-    instance: AxisIntentObserver;
-    tags: string[];
-    events?: AxisObserverEvent[];
-    intents?: string[];
-    handlers?: string[];
-}
-
-declare class ObserverRegistry {
-    private readonly logger;
-    private readonly byName;
-    private readonly byType;
-    register(instance: AxisIntentObserver, meta?: AxisObserverDefinition): void;
-    resolve(ref: AxisObserverRef): AxisObserverRegistration | undefined;
-    list(): AxisObserverRegistration[];
-    clear(): void;
-}
-
-declare class ObserverDispatcherService {
-    private readonly registry;
-    private readonly logger;
-    constructor(registry: ObserverRegistry);
-    dispatch(bindings: AxisObserverBinding[] | undefined, context: AxisObserverContext): Promise<void>;
-}
-
-interface AxisChainExecutionOptions {
-    actorId?: string;
-    baseFrame?: Partial<AxisFrame$2>;
-}
-declare class AxisChainExecutor {
-    private readonly router;
-    private readonly observerDispatcher?;
-    private readonly logger;
-    private readonly encoder;
-    private readonly decoder;
-    constructor(router: IntentRouter, observerDispatcher?: ObserverDispatcherService | undefined);
-    execute(envelope: AxisChainEnvelope, options?: AxisChainExecutionOptions): Promise<AxisChainResult>;
-    private executeStep;
-    private buildFrame;
-    private validateEnvelope;
-    private canRun;
-    private blockStepsWithFailedDependencies;
-    private markUnresolvedSteps;
-    private buildSummary;
-    private resolveStepInput;
-    private lookupReference;
-    private serializeInput;
-    private decodeOutput;
-    private computeProofHash;
-    private collectChainBindings;
-    private dispatch;
-}
-
-declare const AXIS_EXECUTION_CONTEXT_KEY: unique symbol;
-interface AxisExecutionContext {
-    metaIntent?: "INTENT.EXEC" | "CHAIN.EXEC";
-    actorId?: string;
-    inlineCapsule?: Record<string, unknown>;
-    capsuleRef?: AxisCapsuleRef;
-    chainEnvelope?: AxisChainEnvelope;
-    chainStep?: AxisChainStep;
-}
-declare function getAxisExecutionContext(frame?: Partial<AxisFrame$2>): AxisExecutionContext | undefined;
-declare function withAxisExecutionContext<T extends object>(target: T, context: AxisExecutionContext): T;
-declare function mergeAxisExecutionContext(base?: AxisExecutionContext, override?: AxisExecutionContext): AxisExecutionContext | undefined;
-
-declare const BAND: {
-    readonly WIRE: 0;
-    readonly IDENTITY: 40;
-    readonly POLICY: 90;
-    readonly CONTENT: 140;
-    readonly BUSINESS: 200;
-    readonly AUDIT: 900;
-};
-type SensorBand = keyof typeof BAND;
-declare const PRE_DECODE_BOUNDARY = 40;
-
-declare function stableJsonStringify(value: unknown): string;
-
-interface ObservationStage {
-    name: string;
-    status: 'ok' | 'fail' | 'skip';
-    startMs: number;
-    endMs?: number;
-    durationMs?: number;
-    reason?: string;
-    code?: string;
-}
-interface ObservationSensor {
-    name: string;
-    allowed: boolean;
-    riskScore: number;
-    durationMs: number;
-    reasons: string[];
-    code?: string;
-}
-interface AxisObservation {
-    id: string;
-    startMs: number;
-    transport: 'http' | 'ws';
-    ip?: string;
-    intent?: string;
-    actorId?: string;
-    capsuleId?: string;
-    stages: ObservationStage[];
-    sensors: ObservationSensor[];
-    decision?: 'ALLOW' | 'DENY';
-    resultCode?: string;
-    statusCode?: number;
-    endMs?: number;
-    durationMs?: number;
-    facts: Record<string, unknown>;
-}
-declare function createObservation(transport: 'http' | 'ws', ip?: string): AxisObservation;
-declare function startStage(obs: AxisObservation, name: string): ObservationStage;
-declare function endStage(stage: ObservationStage, status?: 'ok' | 'fail' | 'skip', reason?: string, code?: string): void;
-declare function recordSensor(obs: AxisObservation, name: string, allowed: boolean, riskScore: number, durationMs: number, reasons: string[], code?: string): void;
-declare function finalizeObservation(obs: AxisObservation, decision: 'ALLOW' | 'DENY', statusCode: number, resultCode?: string): void;
-
-interface ObservationQueueMessage {
-    v: 1;
-    observation: AxisObservation;
-    attempts: number;
-    firstEnqueuedAt: number;
-    lastEnqueuedAt: number;
-    sourceNodeId: string;
-    lastError?: string;
-}
-interface ObservationQueueConfig {
-    enabled: boolean;
-    workerEnabled: boolean;
-    streamKey: string;
-    deadLetterStreamKey: string;
-    groupName: string;
-    consumerName: string;
-    readBlockMs: number;
-    readBatchSize: number;
-    reclaimIdleMs: number;
-    reclaimBatchSize: number;
-    maxRetries: number;
-    maxStreamLength: number;
-    workerConcurrency: number;
-}
-
-interface ObservationStreamEntry {
-    id: string;
-    message: ObservationQueueMessage;
-}
-declare function buildQueueMessage(observation: AxisObservation, sourceNodeId: string, previous?: ObservationQueueMessage, lastError?: string): ObservationQueueMessage;
-declare function encodeQueueMessage(message: ObservationQueueMessage): string;
-declare function decodeQueueMessage(raw: string): ObservationQueueMessage | null;
-declare function parseStreamEntries(raw: any): ObservationStreamEntry[];
-declare function parseAutoClaimEntries(raw: any): ObservationStreamEntry[];
-
-interface ObservationWitnessSummary {
-    intent?: string;
-    actorId?: string;
-    decision?: string;
-    statusCode?: number;
-    durationMs?: number;
-    sensorCount: number;
-    stageCount: number;
-}
-interface UnsignedObservationWitness {
-    v: 1;
-    observationId: string;
-    payloadHash: string;
-    sealedAt: number;
-    summary: ObservationWitnessSummary;
-}
-declare function canonicalizeObservation(obs: AxisObservation): string;
-declare function hashObservation(obs: AxisObservation): string;
-declare function buildUnsignedWitness(obs: AxisObservation): UnsignedObservationWitness | null;
-
-interface ResponseObserverContext {
-    actorId: string;
-    intent: string;
-}
-interface ResponseContract {
-    ok: boolean;
-    effect: string;
-    body?: Uint8Array;
-    headers?: Map<number, Uint8Array>;
-}
-interface ObserverVerdict {
-    passed: boolean;
-    code?: string;
-    reason?: string;
-}
-declare function verifyResponse(ctx: ResponseObserverContext, response: ResponseContract): ObserverVerdict;
-type ResponseObserver = (ctx: ResponseObserverContext, response: ResponseContract) => ObserverVerdict;
-declare const ResponseObserver: ResponseObserver;
-
-declare const ATS1_HDR: {
-    readonly INTENT_ID: 1;
-    readonly ACTOR_KEY_ID: 2;
-    readonly CAPSULE_ID: 3;
-    readonly NONCE: 4;
-    readonly TS_MS: 5;
-    readonly SCHEMA_ID: 6;
-    readonly BODY_HASH: 7;
-    readonly TRACE_ID: 8;
-};
-declare const ATS1_SCHEMA: {
-    readonly PASSKEY_LOGIN_OPTIONS_REQ: 2001;
-    readonly PASSKEY_LOGIN_OPTIONS_RES: 2002;
-    readonly PASSKEY_LOGIN_VERIFY_REQ: 2011;
-    readonly PASSKEY_LOGIN_VERIFY_RES: 2012;
-    readonly PASSKEY_REGISTER_OPTIONS_REQ: 2021;
-    readonly PASSKEY_REGISTER_OPTIONS_RES: 2022;
-    readonly PASSKEY_REGISTER_VERIFY_REQ: 2031;
-    readonly PASSKEY_REGISTER_VERIFY_RES: 2032;
-};
-
-type Ats1FieldType = 'bytes' | 'utf8' | 'uvarint' | 'u64be' | 'nested';
-type Ats1FieldDescriptor = {
-    tag: number;
-    name: string;
-    type: Ats1FieldType;
-    required?: boolean;
-    repeated?: boolean;
-    nestedSchema?: Ats1SchemaDescriptor;
-    maxLen?: number;
-};
-type Ats1SchemaDescriptor = {
-    schemaId: number;
-    name: string;
-    strict: boolean;
-    maxNestingDepth: number;
-    maxBodyBytes?: number;
-    fields: Ats1FieldDescriptor[];
-};
-type DecodedTlv = {
-    tag: number;
-    value: Buffer;
-};
-type DecodedTlvMap = Map<number, Buffer[]>;
-type SensorInputLike = {
-    hdrTLVs: DecodedTlvMap;
-    bodyTLVs: DecodedTlvMap;
-    schemaId: number;
-    intentId: number;
-};
-type Ats1Limits = {
-    maxVarintBytes: number;
-    maxTlvCount: number;
-    maxValueBytes: number;
-    maxNestingDepth: number;
-};
-declare const DEFAULT_LIMITS: Ats1Limits;
-declare function encodeUVarint(n: number | bigint): Buffer;
-declare function decodeUVarint(buf: Buffer, offset: number, limits?: Ats1Limits): {
-    value: bigint;
-    offset: number;
-    bytesRead: number;
-};
-declare function encodeU64BE(n: bigint): Buffer;
-declare function decodeU64BE(buf: Buffer): bigint;
-declare function sha256(data: Buffer): Buffer;
-declare function encodeTLV(tag: number, value: Buffer): Buffer;
-declare function encodeTLVStreamCanonical(entries: DecodedTlv[]): Buffer;
-declare function decodeTLVStream(stream: Buffer, limits?: Ats1Limits): DecodedTlv[];
-declare function tlvsToMap(entries: DecodedTlv[]): DecodedTlvMap;
-type LogicalBody = {
-    schemaId: number;
-    fields: Record<string, any>;
-};
-declare function validateTLVsAgainstSchema(schema: Ats1SchemaDescriptor, tlvs: DecodedTlv[], depth?: number, limits?: Ats1Limits): void;
-declare function logicalBodyToTLVs(schema: Ats1SchemaDescriptor, body: LogicalBody, limits?: Ats1Limits): DecodedTlv[];
-declare function tlvsToLogicalBody(schema: Ats1SchemaDescriptor, tlvs: DecodedTlv[], limits?: Ats1Limits): LogicalBody;
-declare const HDR_TAGS: {
-    readonly intent_id: 1;
-    readonly actor_key_id: 2;
-    readonly capsule_id: 3;
-    readonly nonce: 4;
-    readonly ts_ms: 5;
-    readonly schema_id: 6;
-    readonly body_hash: 7;
-    readonly trace_id: 8;
-};
-type AxisHeaderLogical = {
-    intentId: number;
-    actorKeyId: Uint8Array;
-    capsuleId?: Uint8Array;
-    nonce: Uint8Array;
-    tsMs: bigint;
-    schemaId: number;
-    bodyHash: Uint8Array;
-    traceId?: Uint8Array;
-    version?: number;
-    headerHash?: Uint8Array;
-    headerTlvs?: DecodedTlv[];
-    bodyTlvs?: DecodedTlv[];
-};
-type AxisLogicalRequest = {
-    hdr: AxisHeaderLogical;
-    body: LogicalBody;
-};
-declare function encodeAxisHeaderToTLVs(hdr: AxisHeaderLogical): DecodedTlv[];
-declare function decodeAxisHeaderFromTLVs(hdrTlvs: DecodedTlv[], limits?: Ats1Limits): AxisHeaderLogical;
-declare function encodeAxisRequestBinary(schema: Ats1SchemaDescriptor, req: Omit<AxisLogicalRequest, 'hdr'> & {
-    hdr: Omit<AxisHeaderLogical, 'bodyHash'>;
-}, limits?: Ats1Limits): {
-    hdrBytes: Buffer;
-    bodyBytes: Buffer;
-    bodyHash: Buffer;
-};
-declare function decodeAxisRequestBinary(schema: Ats1SchemaDescriptor, hdrBytes: Buffer, bodyBytes: Buffer, limits?: Ats1Limits): {
-    hdr: AxisHeaderLogical;
-    body: LogicalBody;
-    sensorInput: SensorInputLike;
-};
-declare const Schema3100_DeviceContext: Ats1SchemaDescriptor;
-declare const Schema2001_PasskeyLoginOptionsReq: Ats1SchemaDescriptor;
-declare const Schema4001_LoginWithDeviceReq: Ats1SchemaDescriptor;
-
-type ats1_Ats1FieldDescriptor = Ats1FieldDescriptor;
-type ats1_Ats1FieldType = Ats1FieldType;
-type ats1_Ats1Limits = Ats1Limits;
-type ats1_Ats1SchemaDescriptor = Ats1SchemaDescriptor;
-type ats1_AxisHeaderLogical = AxisHeaderLogical;
-type ats1_AxisLogicalRequest = AxisLogicalRequest;
-declare const ats1_DEFAULT_LIMITS: typeof DEFAULT_LIMITS;
-type ats1_DecodedTlv = DecodedTlv;
-type ats1_DecodedTlvMap = DecodedTlvMap;
-declare const ats1_HDR_TAGS: typeof HDR_TAGS;
-declare const ats1_Schema2001_PasskeyLoginOptionsReq: typeof Schema2001_PasskeyLoginOptionsReq;
-declare const ats1_Schema3100_DeviceContext: typeof Schema3100_DeviceContext;
-declare const ats1_Schema4001_LoginWithDeviceReq: typeof Schema4001_LoginWithDeviceReq;
-type ats1_SensorInputLike = SensorInputLike;
-declare const ats1_decodeAxisHeaderFromTLVs: typeof decodeAxisHeaderFromTLVs;
-declare const ats1_decodeAxisRequestBinary: typeof decodeAxisRequestBinary;
-declare const ats1_decodeTLVStream: typeof decodeTLVStream;
-declare const ats1_decodeU64BE: typeof decodeU64BE;
-declare const ats1_decodeUVarint: typeof decodeUVarint;
-declare const ats1_encodeAxisHeaderToTLVs: typeof encodeAxisHeaderToTLVs;
-declare const ats1_encodeAxisRequestBinary: typeof encodeAxisRequestBinary;
-declare const ats1_encodeTLV: typeof encodeTLV;
-declare const ats1_encodeTLVStreamCanonical: typeof encodeTLVStreamCanonical;
-declare const ats1_encodeU64BE: typeof encodeU64BE;
-declare const ats1_encodeUVarint: typeof encodeUVarint;
-declare const ats1_logicalBodyToTLVs: typeof logicalBodyToTLVs;
-declare const ats1_sha256: typeof sha256;
-declare const ats1_tlvsToLogicalBody: typeof tlvsToLogicalBody;
-declare const ats1_tlvsToMap: typeof tlvsToMap;
-declare const ats1_validateTLVsAgainstSchema: typeof validateTLVsAgainstSchema;
-declare namespace ats1 {
-  export { type ats1_Ats1FieldDescriptor as Ats1FieldDescriptor, type ats1_Ats1FieldType as Ats1FieldType, type ats1_Ats1Limits as Ats1Limits, type ats1_Ats1SchemaDescriptor as Ats1SchemaDescriptor, type ats1_AxisHeaderLogical as AxisHeaderLogical, type ats1_AxisLogicalRequest as AxisLogicalRequest, ats1_DEFAULT_LIMITS as DEFAULT_LIMITS, type ats1_DecodedTlv as DecodedTlv, type ats1_DecodedTlvMap as DecodedTlvMap, ats1_HDR_TAGS as HDR_TAGS, ats1_Schema2001_PasskeyLoginOptionsReq as Schema2001_PasskeyLoginOptionsReq, ats1_Schema3100_DeviceContext as Schema3100_DeviceContext, ats1_Schema4001_LoginWithDeviceReq as Schema4001_LoginWithDeviceReq, type ats1_SensorInputLike as SensorInputLike, ats1_decodeAxisHeaderFromTLVs as decodeAxisHeaderFromTLVs, ats1_decodeAxisRequestBinary as decodeAxisRequestBinary, ats1_decodeTLVStream as decodeTLVStream, ats1_decodeU64BE as decodeU64BE, ats1_decodeUVarint as decodeUVarint, ats1_encodeAxisHeaderToTLVs as encodeAxisHeaderToTLVs, ats1_encodeAxisRequestBinary as encodeAxisRequestBinary, ats1_encodeTLV as encodeTLV, ats1_encodeTLVStreamCanonical as encodeTLVStreamCanonical, ats1_encodeU64BE as encodeU64BE, ats1_encodeUVarint as encodeUVarint, ats1_logicalBodyToTLVs as logicalBodyToTLVs, ats1_sha256 as sha256, ats1_tlvsToLogicalBody as tlvsToLogicalBody, ats1_tlvsToMap as tlvsToMap, ats1_validateTLVsAgainstSchema as validateTLVsAgainstSchema };
-}
-
-declare function buildAts1Hdr(params: {
-    intentId: number;
-    schemaId: number;
-    actorKeyId?: Buffer;
-    capsuleId?: Buffer;
-    traceId?: Buffer;
-    tsMs?: bigint;
-    nonce?: Buffer;
-    bodyHash?: Buffer;
-}): Buffer;
-declare function packPasskeyLoginOptionsReq(params: {
-    intentId: number;
-    username: string;
-    actorKeyId?: Buffer;
-    capsuleId?: Buffer;
-    traceId?: Buffer;
-}): {
-    hdr: Buffer<ArrayBufferLike>;
-    body: Buffer<ArrayBufferLike>;
-};
-declare function unpackPasskeyLoginOptionsReq(body: Buffer): {
-    username: string;
-};
-declare const Schema2021_PasskeyRegisterOptionsReq: Ats1SchemaDescriptor;
-declare const Schema2011_PasskeyLoginVerifyReq: Ats1SchemaDescriptor;
-declare function packPasskeyRegisterOptionsReq(params: {
-    intentId: number;
-    username: string;
-    actorKeyId?: Buffer;
-    traceId?: Buffer;
-}): {
-    hdr: Buffer<ArrayBufferLike>;
-    body: Buffer<ArrayBufferLike>;
-};
-declare function unpackPasskeyRegisterOptionsReq(body: Buffer): {
-    username: string;
-};
-declare function packPasskeyLoginVerifyReq(params: {
-    intentId: number;
-    username: string;
-    credentialId: Buffer;
-    clientDataJSON: Buffer;
-    authenticatorData: Buffer;
-    signature: Buffer;
-    userHandle?: Buffer;
-    actorKeyId?: Buffer;
-    traceId?: Buffer;
-}): {
-    hdr: Buffer<ArrayBufferLike>;
-    body: Buffer<ArrayBufferLike>;
-};
-declare function unpackPasskeyLoginVerifyReq(body: Buffer): {
-    username: string;
-    credentialId: Buffer;
-    clientDataJSON: Buffer;
-    authenticatorData: Buffer;
-    signature: Buffer;
-    userHandle: Buffer | undefined;
-};
-declare const Schema2002_PasskeyLoginOptionsRes: Ats1SchemaDescriptor;
-declare function packPasskeyLoginOptionsRes(params: {
-    challenge: string;
-    timeout?: number;
-    rpId?: string;
-    userVerification?: string;
-    allowCredentials?: {
-        id: string;
-        type: string;
-        transports?: string[];
-    }[];
-}): Buffer;
-declare const Schema2012_PasskeyLoginVerifyRes: Ats1SchemaDescriptor;
-declare function packPasskeyLoginVerifyRes(params: {
-    actorId: string;
-    keyId: string;
-    capsule: Buffer;
-    expiresAt: bigint;
-}): Buffer;
-
-type Axis1FrameToEncode = {
-    ver: number;
-    flags: number;
-    hdr: Buffer;
-    body: Buffer;
-    sig: Buffer;
-};
-declare function encodeAxis1Frame(f: Axis1FrameToEncode): Buffer;
-
-declare function axis1SigningBytes(params: {
-    ver: number;
-    flags: number;
-    hdr: Buffer;
-    body: Buffer;
-}): Buffer;
-
-declare function encVarint(x: bigint): Buffer;
-declare function varintU(x: number | bigint): Buffer;
-declare function u64be(x: bigint): Buffer;
-declare function utf8(s: string): Buffer;
-declare function bytes(b: Uint8Array | Buffer): Buffer;
-declare function nonce16(): Buffer;
-declare function tlv(type: number, value: Buffer): Buffer;
-declare function buildTLVs(items: {
-    type: number;
-    value: Buffer;
-}[], opts?: {
-    allowDupTypes?: Set<number>;
-}): Buffer;
-
-declare function b64urlEncode(buf: Buffer): string;
-declare function b64urlDecode(str: string): Buffer;
-declare function b64urlEncodeString(str: string, encoding?: BufferEncoding): string;
-declare function b64urlDecodeString(str: string, encoding?: BufferEncoding): string;
-
-declare function canonicalJson(value: any): string;
-declare function canonicalJsonExcluding(obj: Record<string, any>, exclude: string[]): string;
-
-declare class ContractViolationError extends Error {
-    code: string;
-    constructor(code: string, message: string);
-}
-interface ExecutionMetrics {
-    dbWrites: number;
-    dbReads: number;
-    externalCalls: number;
-    elapsedMs: number;
-}
-declare class ExecutionMeter {
-    private dbWrites;
-    private dbReads;
-    private externalCalls;
-    private startTime;
-    private contract;
-    constructor(contract: any);
-    recordDbWrite(): void;
-    recordDbRead(): void;
-    recordExternalCall(): void;
-    checkTime(): void;
-    validateEffect(effect: string): void;
-    getMetrics(): ExecutionMetrics;
-    getContract(): any;
-}
-
-interface ExecutionContract {
-    maxDbWrites: number;
-    maxDbReads?: number;
-    maxExternalCalls: number;
-    maxTimeMs: number;
-    allowedEffects: string[];
-    maxMemoryMb?: number;
-}
-declare const DEFAULT_CONTRACTS: Record<string, ExecutionContract>;
-declare const FALLBACK_CONTRACT: ExecutionContract;
-
-type Axis1DecodedFrame = {
-    ver: number;
-    flags: number;
-    hdr: Buffer;
-    body: Buffer;
-    sig: Buffer;
-    frameSize: number;
-};
-declare function decodeAxis1Frame(buf: Buffer): Axis1DecodedFrame;
-
-declare const T: {
-    INTENT: number;
-    PID: number;
-    INTENT_VERSION: number;
-    ACTOR_ID: number;
-    CAPSULE_ID: number;
-    NONCE: number;
-    TS_MS: number;
-    PROOF_TYPE: number;
-    BODY: number;
-    JSON: number;
-};
-type AxisPacket = {
-    intent: string;
-    intentVersion: number;
-    actorId: string;
-    capsuleId?: Buffer;
-    pid: Buffer;
-    nonce: Buffer;
-    tsMs: bigint;
-    headersMap: Map<number, Buffer[]>;
-    bodyMap: Map<number, Buffer[]>;
-    hdrBytes: Buffer;
-    bodyBytes: Buffer;
-    sig: Buffer;
-};
-declare function buildPacket(hdr: Buffer, body: Buffer, sig: Buffer, flags?: number): AxisPacket;
-
-interface AxisHandler {
-    readonly name: string;
-    readonly open?: boolean;
-    readonly description?: string;
-    readonly execute?: (body: Uint8Array, headers?: Map<number, Uint8Array>) => Promise<Uint8Array | any>;
-}
-interface AxisHandlerInit extends AxisHandler {
-    onModuleInit?(): void | Promise<void>;
-}
-
-interface AxisCrudHandler extends AxisHandlerInit {
-    create(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
-    findAll(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
-    findOne(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
-    update(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
-    remove(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
-}
-
-declare function hasScope(scopes: string[], required: string): boolean;
-declare function parseScope(scope: string): {
-    resource: string;
-    id: string;
-} | null;
-declare function canAccessResource(scopes: string[], resourceType: string, resourceId: string): boolean;
-
-declare const CAPABILITIES: {
-    readonly read: "read";
-    readonly write: "write";
-    readonly execute: "execute";
-    readonly admin: "admin";
-    readonly sign: "sign";
-    readonly witness: "witness";
-};
-type Capability = keyof typeof CAPABILITIES;
-declare const PROOF_CAPABILITIES: Record<number, Capability[]>;
-declare const INTENT_REQUIREMENTS: Record<string, Capability[]>;
-
-interface RiskSignal {
-    type: string;
-    severity: 'low' | 'medium' | 'high' | 'critical';
-    value: any;
-    message: string;
-}
-declare enum RiskDecision {
-    ALLOW = "ALLOW",
-    THROTTLE = "THROTTLE",
-    STEP_UP = "STEP_UP",
-    WITNESS = "WITNESS",
-    DENY = "DENY"
-}
-interface RiskEvaluation {
-    decision: RiskDecision;
-    reason?: string;
-    retryAfterMs?: number;
-    confidence: number;
-    signals: RiskSignal[];
-}
-
-declare const AXIS_OPCODES: Set<string>;
-declare function isKnownOpcode(op: string): boolean;
-declare function isAdminOpcode(op: string): boolean;
-
-type ReceiptEffect = 'ALLOW' | 'DENY' | 'ERROR';
-declare function buildReceiptHash(prevHash: Buffer | null, pid: Buffer, actorId: string, intent: string, effect: ReceiptEffect, ts: bigint): Buffer;
-
-declare enum IntentSensitivity {
-    LOW = 1,
-    MEDIUM = 2,
-    HIGH = 3,
-    CRITICAL = 4
-}
-declare const INTENT_SENSITIVITY_MAP: Record<string, IntentSensitivity>;
-declare function classifyIntent(intent: string): IntentSensitivity;
-declare function sensitivityName(level: IntentSensitivity): string;
-
-declare const INTENT_TIMEOUTS: Record<string, number>;
-declare const DEFAULT_TIMEOUT = 10000;
-declare function resolveTimeout(intent: string): number;
-
-interface IntentDefinition {
-    intent: string;
-    description: string;
-    sensitivity: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
-    requiredProof: string[];
-    contract: {
-        maxDbWrites: number;
-        maxTimeMs: number;
-    };
-    examples?: string[];
-    deprecated?: boolean;
-}
-
-declare function validateFrameShape(frame: any): boolean;
-declare function isTimestampValid(ts: number, skewSeconds?: number): boolean;
-
-type UploadSessionStatus = 'ACTIVE' | 'FINALIZING' | 'COMPLETE' | 'ABORTED';
-interface UploadSessionRecord {
-    id?: string;
-    fileId: string;
-    filename?: string;
-    status: UploadSessionStatus | string;
-    totalSize?: number;
-    chunkSize?: number;
-    totalChunks?: number;
-    receivedBitmap?: Uint8Array | Buffer | null;
-    hashState?: Uint8Array | Buffer | null;
-    mimeType?: string | null;
-    version?: number;
-}
-interface UploadSessionStore {
-    findByFileId(fileId: string): Promise<UploadSessionRecord | null>;
-    updateStatus(fileId: string, status: UploadSessionStatus, hashState?: Uint8Array | Buffer | null): Promise<void>;
-}
-interface UploadReceiptSigner {
-    signActive(message: Uint8Array): {
-        kid: string;
-        sig: Uint8Array;
-    };
-}
-interface UploadFileStat {
-    path: string;
-    size: number;
-}
-interface UploadFileStore {
-    getFinalPath(fileId: string, filename?: string): string;
-    getTempPath(fileId: string): string;
-    statFinal(fileId: string, filename?: string): Promise<UploadFileStat>;
-    readFinalRange(fileId: string, filename: string | undefined, start: number, length: number): Promise<Buffer>;
-    hasTemp(fileId: string): Promise<boolean>;
-    moveTempToFinal(fileId: string, filename?: string): Promise<string>;
-    createTempReadStream(fileId: string): NodeJS.ReadableStream;
-}
-
-declare class AxisFilesDownloadHandler implements AxisHandler {
-    private readonly sessions;
-    private readonly files;
-    private readonly logger;
-    readonly name = "axis.files.download";
-    readonly open = true;
-    readonly description = "File download handler";
-    constructor(sessions: UploadSessionStore, files: UploadFileStore);
-    execute(body: Uint8Array, headers?: Map<number, Uint8Array>): Promise<any>;
-}
-declare class AxisFilesFinalizeHandler implements AxisHandler {
-    private readonly sessions;
-    private readonly files;
-    private readonly keyring?;
-    private readonly logger;
-    readonly name = "axis.files.finalize";
-    readonly open = false;
-    readonly description = "File upload finalization handler";
-    constructor(sessions: UploadSessionStore, files: UploadFileStore, keyring?: UploadReceiptSigner | undefined);
-    execute(body: Uint8Array, headers?: Map<number, Uint8Array>): Promise<any>;
-}
-
-declare const AXIS_UPLOAD_SESSION_STORE = "AXIS_UPLOAD_SESSION_STORE";
-declare const AXIS_UPLOAD_FILE_STORE = "AXIS_UPLOAD_FILE_STORE";
-declare const AXIS_UPLOAD_RECEIPT_SIGNER = "AXIS_UPLOAD_RECEIPT_SIGNER";
-
-interface DiskUploadFileStoreOptions {
-    uploadDir: string;
-    chunkDir: string;
-}
-declare class DiskUploadFileStore implements UploadFileStore {
-    private readonly uploadDir;
-    private readonly chunkDir;
-    constructor(options: DiskUploadFileStoreOptions);
-    getFinalPath(fileId: string, filename?: string): string;
-    getTempPath(fileId: string): string;
-    statFinal(fileId: string, filename?: string): Promise<UploadFileStat>;
-    readFinalRange(fileId: string, filename: string | undefined, start: number, length: number): Promise<Buffer>;
-    hasTemp(fileId: string): Promise<boolean>;
-    moveTempToFinal(fileId: string, filename?: string): Promise<string>;
-    createTempReadStream(fileId: string): NodeJS.ReadableStream;
-}
-
-interface AxisRequestData {
-    raw: Buffer;
-    ip: string | undefined;
-    preDecodeInput: any;
-    frameBytesCount: number;
-}
-declare const AxisRaw: (...dataOrPipes: unknown[]) => ParameterDecorator;
-declare const AxisIp: (...dataOrPipes: unknown[]) => ParameterDecorator;
-declare const AxisContext$1: (...dataOrPipes: unknown[]) => ParameterDecorator;
-declare const AxisDemoPubkey: (...dataOrPipes: unknown[]) => ParameterDecorator;
-declare const AxisFrame: (...dataOrPipes: unknown[]) => ParameterDecorator;
-
-declare class ObserverDiscoveryService implements OnApplicationBootstrap {
-    private readonly discovery;
-    private readonly reflector;
-    private readonly registry;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, reflector: Reflector, registry: ObserverRegistry);
-    onApplicationBootstrap(): void;
-}
-
-declare class HandlerDiscoveryService implements OnModuleInit {
-    private readonly discovery;
-    private readonly scanner;
-    private readonly router;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
-    onModuleInit(): void;
-}
-
-declare class SensorRegistry {
-    private readonly configService;
-    private sensors;
-    private readonly logger;
-    constructor(configService: ConfigService);
-    register(sensor: AxisSensor): void;
-    list(): AxisSensor[];
-    getPreDecodeSensors(): AxisPreSensor[];
-    getPostDecodeSensors(): AxisPostSensor[];
-    private isPreDecodeSensor;
-    private isPostDecodeSensor;
-    getSensorCountByPhase(): {
-        preDecodeCount: number;
-        postDecodeCount: number;
-    };
-    clear(): void;
-}
-
-declare class SensorDiscoveryService implements OnApplicationBootstrap {
-    private readonly discovery;
-    private readonly reflector;
-    private readonly registry;
-    private readonly logger;
-    constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
-    onApplicationBootstrap(): void;
+interface ExecutionContract {
+    maxDbWrites: number;
+    maxDbReads?: number;
+    maxExternalCalls: number;
+    maxTimeMs: number;
+    allowedEffects: string[];
+    maxMemoryMb?: number;
 }
+declare const DEFAULT_CONTRACTS: Record<string, ExecutionContract>;
+declare const FALLBACK_CONTRACT: ExecutionContract;
 
 declare const SensorDecisionZ: z.ZodUnion<readonly [z.ZodObject<{
     action: z.ZodLiteral<"ALLOW">;
@@ -2130,7 +1256,7 @@ declare const IntentSchemaZ: z.ZodObject<{
         }>>;
     }, z.z.core.$strip>>;
 }, z.z.core.$strip>;
-type IntentSchema = z.infer<typeof IntentSchemaZ>;
+type IntentSchema$1 = z.infer<typeof IntentSchemaZ>;
 declare const WsHandshakeInputZ: z.ZodObject<{
     clientId: z.ZodString;
     isWs: z.ZodBoolean;
@@ -2158,11 +1284,11 @@ declare const IPReputationZ: z.ZodObject<{
 }, z.z.core.$strip>;
 type IPReputation = z.infer<typeof IPReputationZ>;
 declare const UploadStatusZ: z.ZodEnum<{
-    FINALIZING: "FINALIZING";
-    ABORTED: "ABORTED";
     INIT: "INIT";
     UPLOADING: "UPLOADING";
+    FINALIZING: "FINALIZING";
     DONE: "DONE";
+    ABORTED: "ABORTED";
 }>;
 type UploadStatus = z.infer<typeof UploadStatusZ>;
 declare const UploadSessionZ: z.ZodObject<{
@@ -2173,11 +1299,11 @@ declare const UploadSessionZ: z.ZodObject<{
     totalChunks: z.ZodNumber;
     receivedCount: z.ZodNumber;
     status: z.ZodEnum<{
-        FINALIZING: "FINALIZING";
-        ABORTED: "ABORTED";
         INIT: "INIT";
         UPLOADING: "UPLOADING";
+        FINALIZING: "FINALIZING";
         DONE: "DONE";
+        ABORTED: "ABORTED";
     }>;
 }, z.z.core.$strip>;
 type UploadSession = z.infer<typeof UploadSessionZ>;
@@ -2205,60 +1331,967 @@ declare enum ProofType$1 {
     DEVICE_SE = 4,
     WITNESS_SIG = 5
 }
-declare const AxisContextZ: z.ZodObject<{
-    pid: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-    ts: z.ZodBigInt;
-    intent: z.ZodString;
-    actorId: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-    proofType: z.ZodEnum<typeof ProofType$1>;
-    proofRef: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-    nonce: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-    ip: z.ZodString;
-    nodeCertHash: z.ZodOptional<z.ZodString>;
-    capsule: z.ZodOptional<z.ZodObject<{
-        id: z.ZodString;
-        claims: z.ZodObject<{
-            capsuleId: z.ZodString;
-            allowIntents: z.ZodArray<z.ZodString>;
-            limits: z.ZodOptional<z.ZodObject<{
-                maxBodyBytes: z.ZodOptional<z.ZodNumber>;
-            }, z.z.core.$strip>>;
-            scopes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-        }, z.z.core.$strip>;
-        issuedAt: z.ZodNumber;
-        expiresAt: z.ZodNumber;
-        tier: z.ZodEnum<{
-            FREE: "FREE";
-            STANDARD: "STANDARD";
-            PREMIUM: "PREMIUM";
-        }>;
-    }, z.z.core.$strip>>;
-    passport: z.ZodOptional<z.ZodObject<{
-        id: z.ZodString;
-        public_key: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
-        status: z.ZodEnum<{
-            ACTIVE: "ACTIVE";
-            REVOKED: "REVOKED";
-            EXPIRED: "EXPIRED";
-            PENDING: "PENDING";
-        }>;
-        issuedAt: z.ZodNumber;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-    }, z.z.core.$strip>>;
-    meter: z.ZodOptional<z.ZodAny>;
-}, z.z.core.$strip>;
-type AxisContext = z.infer<typeof AxisContextZ>;
-declare const AxisErrorZ: z.ZodObject<{
-    code: z.ZodString;
-    message: z.ZodString;
-    httpStatus: z.ZodNumber;
-}, z.z.core.$strip>;
-type AxisError = z.infer<typeof AxisErrorZ>;
+declare const AxisContextZ: z.ZodObject<{
+    pid: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
+    ts: z.ZodBigInt;
+    intent: z.ZodString;
+    actorId: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
+    proofType: z.ZodEnum<typeof ProofType$1>;
+    proofRef: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
+    nonce: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
+    ip: z.ZodString;
+    nodeCertHash: z.ZodOptional<z.ZodString>;
+    capsule: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        claims: z.ZodObject<{
+            capsuleId: z.ZodString;
+            allowIntents: z.ZodArray<z.ZodString>;
+            limits: z.ZodOptional<z.ZodObject<{
+                maxBodyBytes: z.ZodOptional<z.ZodNumber>;
+            }, z.z.core.$strip>>;
+            scopes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        }, z.z.core.$strip>;
+        issuedAt: z.ZodNumber;
+        expiresAt: z.ZodNumber;
+        tier: z.ZodEnum<{
+            FREE: "FREE";
+            STANDARD: "STANDARD";
+            PREMIUM: "PREMIUM";
+        }>;
+    }, z.z.core.$strip>>;
+    passport: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        public_key: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
+        status: z.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            REVOKED: "REVOKED";
+            EXPIRED: "EXPIRED";
+            PENDING: "PENDING";
+        }>;
+        issuedAt: z.ZodNumber;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+    }, z.z.core.$strip>>;
+    meter: z.ZodOptional<z.ZodAny>;
+}, z.z.core.$strip>;
+type AxisContext$1 = z.infer<typeof AxisContextZ>;
+declare const AxisErrorZ: z.ZodObject<{
+    code: z.ZodString;
+    message: z.ZodString;
+    httpStatus: z.ZodNumber;
+}, z.z.core.$strip>;
+type AxisError = z.infer<typeof AxisErrorZ>;
+
+declare const SENSITIVITY_METADATA_KEY = "axis:sensitivity";
+declare const CONTRACT_METADATA_KEY = "axis:contract";
+declare const REQUIRED_PROOF_METADATA_KEY = "axis:required_proof";
+type RequiredProofKind = ProofKind | "WITNESS";
+declare function Sensitivity(level: SensitivityLevel): ClassDecorator & MethodDecorator;
+declare function Contract(options: Partial<ExecutionContract>): ClassDecorator & MethodDecorator;
+declare function RequiredProof(proofs: [RequiredProofKind, ...RequiredProofKind[]]): ClassDecorator & MethodDecorator;
+declare function Capsule(): ClassDecorator & MethodDecorator;
+declare function Witness(): ClassDecorator & MethodDecorator;
+declare const AXIS_PUBLIC_KEY = "axis:public";
+declare function AxisPublic(): ClassDecorator & MethodDecorator;
+declare const AXIS_ANONYMOUS_KEY = "axis:anonymous";
+declare function AxisAnonymous(): ClassDecorator & MethodDecorator;
+declare const AXIS_RATE_LIMIT_KEY = "axis:rateLimit";
+interface AxisRateLimitConfig {
+    max: number;
+    windowSec: number;
+    key?: string;
+}
+declare function AxisRateLimit(config: AxisRateLimitConfig): MethodDecorator;
+
+interface IntentSchema {
+    intent: string;
+    version: number;
+    bodyProfile: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
+    fields: Array<{
+        name: string;
+        tlv: number;
+        kind: IntentTlvField["kind"];
+        required?: boolean;
+        maxLen?: number;
+        max?: string;
+        scope?: "header" | "body";
+    }>;
+}
+interface AxisEffect {
+    ok: boolean;
+    effect: string;
+    body?: Uint8Array;
+    headers?: Map<number, Uint8Array>;
+    metadata?: any;
+}
+declare class IntentRouter {
+    private readonly moduleRef?;
+    private readonly observerDispatcher?;
+    private readonly logger;
+    private readonly decoder;
+    private readonly encoder;
+    private static readonly BUILTIN_INTENTS;
+    private handlers;
+    private intentSensors;
+    private intentDecoders;
+    private intentSchemas;
+    private intentValidators;
+    private intentKinds;
+    private intentChains;
+    private intentObservers;
+    private intentCapsulePolicies;
+    private intentSensitivity;
+    private intentContracts;
+    private intentRequiredProof;
+    private publicIntents;
+    private anonymousIntents;
+    private intentRateLimits;
+    private cceHandlers;
+    private ccePipelineConfig;
+    constructor(moduleRef?: ModuleRef | undefined, observerDispatcher?: ObserverDispatcherService | undefined);
+    getSchema(intent: string): IntentSchema | undefined;
+    getValidators(intent: string): Map<number, TlvValidatorFn[]> | undefined;
+    has(intent: string): boolean;
+    getRegisteredIntents(): string[];
+    getIntentEntry(intent: string): {
+        schema?: IntentSchema;
+        validators?: Map<number, TlvValidatorFn[]>;
+        hasSensors: boolean;
+        builtin: boolean;
+        kind?: IntentKind;
+        chain?: RegisteredChainConfig;
+        capsulePolicy?: CapsulePolicyOptions;
+        observerCount: number;
+    } | null;
+    getChainConfig(intent: string): RegisteredChainConfig | undefined;
+    getObservers(intent: string): AxisObserverBinding[];
+    register(intent: string, handler: any): void;
+    registerHandler(instance: any): void;
+    route(frame: AxisFrame$2): Promise<AxisEffect>;
+    private logIntent;
+    registerIntentMeta(intent: string, proto: object, methodName: string, handlerSensors?: Function[], handlerObservers?: AxisObserverBinding[]): void;
+    getSensitivity(intent: string): string | undefined;
+    getContract(intent: string): Record<string, any> | undefined;
+    getRequiredProof(intent: string): RequiredProofKind[] | undefined;
+    isPublic(intent: string): boolean;
+    isAnonymous(intent: string): boolean;
+    getRateLimit(intent: string): AxisRateLimitConfig | undefined;
+    private emitIntentObservers;
+    private runIntentSensors;
+    private getEffectiveCapsulePolicy;
+    private enforceCapsulePolicy;
+    private executeChainRequest;
+    private parseIntentExecBody;
+    private parseChainRequestBody;
+    private isChainRequestLike;
+    private isChainEnvelopeLike;
+    private encodeJson;
+    private getActorIdFromFrame;
+    private getProofRefFromFrame;
+    private hasCapsuleReference;
+    private getHeaderValue;
+    private identifiersMatch;
+    private extractInlineCapsuleId;
+    private toInlineCapsuleRecord;
+    private toScopeList;
+    configureCce(config: Omit<CcePipelineConfig, "handlers">): void;
+    registerCceHandler(intent: string, handler: CceHandler): void;
+    hasCceHandler(intent: string): boolean;
+    routeCce(envelope: CceRequestEnvelope): Promise<CcePipelineResult>;
+    private storeSchema;
+}
+
+interface AxisObserverContext {
+    event: AxisObserverEvent;
+    timestamp: number;
+    intent?: string;
+    chainId?: string;
+    stepId?: string;
+    handler?: string;
+    frame?: AxisFrame$2;
+    envelope?: AxisChainEnvelope;
+    step?: AxisChainStep;
+    effect?: AxisEffect;
+    result?: AxisChainStepResult | AxisChainResult;
+    error?: string;
+    observerTags?: string[];
+    capsule?: AxisCapsuleRef;
+    keyExchange?: AxisKeyExchangeRef;
+    metadata?: Record<string, unknown>;
+}
+interface AxisIntentObserver {
+    readonly name: string;
+    supports?(context: AxisObserverContext): boolean;
+    observe(context: AxisObserverContext): Promise<void> | void;
+}
+interface AxisObserverRegistration {
+    name: string;
+    instance: AxisIntentObserver;
+    tags: string[];
+    events?: AxisObserverEvent[];
+    intents?: string[];
+    handlers?: string[];
+}
+
+declare class ObserverRegistry {
+    private readonly logger;
+    private readonly byName;
+    private readonly byType;
+    register(instance: AxisIntentObserver, meta?: AxisObserverDefinition): void;
+    resolve(ref: AxisObserverRef): AxisObserverRegistration | undefined;
+    list(): AxisObserverRegistration[];
+    clear(): void;
+}
+
+declare class ObserverDispatcherService {
+    private readonly registry;
+    private readonly logger;
+    constructor(registry: ObserverRegistry);
+    dispatch(bindings: AxisObserverBinding[] | undefined, context: AxisObserverContext): Promise<void>;
+}
+
+interface AxisChainExecutionOptions {
+    actorId?: string;
+    baseFrame?: Partial<AxisFrame$2>;
+}
+declare class AxisChainExecutor {
+    private readonly router;
+    private readonly observerDispatcher?;
+    private readonly logger;
+    private readonly encoder;
+    private readonly decoder;
+    constructor(router: IntentRouter, observerDispatcher?: ObserverDispatcherService | undefined);
+    execute(envelope: AxisChainEnvelope, options?: AxisChainExecutionOptions): Promise<AxisChainResult>;
+    private executeStep;
+    private buildFrame;
+    private validateEnvelope;
+    private canRun;
+    private blockStepsWithFailedDependencies;
+    private markUnresolvedSteps;
+    private buildSummary;
+    private resolveStepInput;
+    private lookupReference;
+    private serializeInput;
+    private decodeOutput;
+    private computeProofHash;
+    private collectChainBindings;
+    private dispatch;
+}
+
+declare const AXIS_EXECUTION_CONTEXT_KEY: unique symbol;
+interface AxisExecutionContext {
+    metaIntent?: "INTENT.EXEC" | "CHAIN.EXEC";
+    actorId?: string;
+    inlineCapsule?: Record<string, unknown>;
+    capsuleRef?: AxisCapsuleRef;
+    chainEnvelope?: AxisChainEnvelope;
+    chainStep?: AxisChainStep;
+}
+declare function getAxisExecutionContext(frame?: Partial<AxisFrame$2>): AxisExecutionContext | undefined;
+declare function withAxisExecutionContext<T extends object>(target: T, context: AxisExecutionContext): T;
+declare function mergeAxisExecutionContext(base?: AxisExecutionContext, override?: AxisExecutionContext): AxisExecutionContext | undefined;
+
+declare const BAND: {
+    readonly WIRE: 0;
+    readonly IDENTITY: 40;
+    readonly POLICY: 90;
+    readonly CONTENT: 140;
+    readonly BUSINESS: 200;
+    readonly AUDIT: 900;
+};
+type SensorBand = keyof typeof BAND;
+declare const PRE_DECODE_BOUNDARY = 40;
+
+declare function stableJsonStringify(value: unknown): string;
+
+interface ObservationStage {
+    name: string;
+    status: 'ok' | 'fail' | 'skip';
+    startMs: number;
+    endMs?: number;
+    durationMs?: number;
+    reason?: string;
+    code?: string;
+}
+interface ObservationSensor {
+    name: string;
+    allowed: boolean;
+    riskScore: number;
+    durationMs: number;
+    reasons: string[];
+    code?: string;
+}
+interface AxisObservation {
+    id: string;
+    startMs: number;
+    transport: 'http' | 'ws';
+    ip?: string;
+    intent?: string;
+    actorId?: string;
+    capsuleId?: string;
+    stages: ObservationStage[];
+    sensors: ObservationSensor[];
+    decision?: 'ALLOW' | 'DENY';
+    resultCode?: string;
+    statusCode?: number;
+    endMs?: number;
+    durationMs?: number;
+    facts: Record<string, unknown>;
+}
+declare function createObservation(transport: 'http' | 'ws', ip?: string): AxisObservation;
+declare function startStage(obs: AxisObservation, name: string): ObservationStage;
+declare function endStage(stage: ObservationStage, status?: 'ok' | 'fail' | 'skip', reason?: string, code?: string): void;
+declare function recordSensor(obs: AxisObservation, name: string, allowed: boolean, riskScore: number, durationMs: number, reasons: string[], code?: string): void;
+declare function finalizeObservation(obs: AxisObservation, decision: 'ALLOW' | 'DENY', statusCode: number, resultCode?: string): void;
+
+interface ObservationQueueMessage {
+    v: 1;
+    observation: AxisObservation;
+    attempts: number;
+    firstEnqueuedAt: number;
+    lastEnqueuedAt: number;
+    sourceNodeId: string;
+    lastError?: string;
+}
+interface ObservationQueueConfig {
+    enabled: boolean;
+    workerEnabled: boolean;
+    streamKey: string;
+    deadLetterStreamKey: string;
+    groupName: string;
+    consumerName: string;
+    readBlockMs: number;
+    readBatchSize: number;
+    reclaimIdleMs: number;
+    reclaimBatchSize: number;
+    maxRetries: number;
+    maxStreamLength: number;
+    workerConcurrency: number;
+}
+
+interface ObservationStreamEntry {
+    id: string;
+    message: ObservationQueueMessage;
+}
+declare function buildQueueMessage(observation: AxisObservation, sourceNodeId: string, previous?: ObservationQueueMessage, lastError?: string): ObservationQueueMessage;
+declare function encodeQueueMessage(message: ObservationQueueMessage): string;
+declare function decodeQueueMessage(raw: string): ObservationQueueMessage | null;
+declare function parseStreamEntries(raw: any): ObservationStreamEntry[];
+declare function parseAutoClaimEntries(raw: any): ObservationStreamEntry[];
+
+interface ObservationWitnessSummary {
+    intent?: string;
+    actorId?: string;
+    decision?: string;
+    statusCode?: number;
+    durationMs?: number;
+    sensorCount: number;
+    stageCount: number;
+}
+interface UnsignedObservationWitness {
+    v: 1;
+    observationId: string;
+    payloadHash: string;
+    sealedAt: number;
+    summary: ObservationWitnessSummary;
+}
+declare function canonicalizeObservation(obs: AxisObservation): string;
+declare function hashObservation(obs: AxisObservation): string;
+declare function buildUnsignedWitness(obs: AxisObservation): UnsignedObservationWitness | null;
+
+interface ResponseObserverContext {
+    actorId: string;
+    intent: string;
+}
+interface ResponseContract {
+    ok: boolean;
+    effect: string;
+    body?: Uint8Array;
+    headers?: Map<number, Uint8Array>;
+}
+interface ObserverVerdict {
+    passed: boolean;
+    code?: string;
+    reason?: string;
+}
+declare function verifyResponse(ctx: ResponseObserverContext, response: ResponseContract): ObserverVerdict;
+type ResponseObserver = (ctx: ResponseObserverContext, response: ResponseContract) => ObserverVerdict;
+declare const ResponseObserver: ResponseObserver;
+
+declare const ATS1_HDR: {
+    readonly INTENT_ID: 1;
+    readonly ACTOR_KEY_ID: 2;
+    readonly CAPSULE_ID: 3;
+    readonly NONCE: 4;
+    readonly TS_MS: 5;
+    readonly SCHEMA_ID: 6;
+    readonly BODY_HASH: 7;
+    readonly TRACE_ID: 8;
+};
+declare const ATS1_SCHEMA: {
+    readonly PASSKEY_LOGIN_OPTIONS_REQ: 2001;
+    readonly PASSKEY_LOGIN_OPTIONS_RES: 2002;
+    readonly PASSKEY_LOGIN_VERIFY_REQ: 2011;
+    readonly PASSKEY_LOGIN_VERIFY_RES: 2012;
+    readonly PASSKEY_REGISTER_OPTIONS_REQ: 2021;
+    readonly PASSKEY_REGISTER_OPTIONS_RES: 2022;
+    readonly PASSKEY_REGISTER_VERIFY_REQ: 2031;
+    readonly PASSKEY_REGISTER_VERIFY_RES: 2032;
+};
+
+type Ats1FieldType = 'bytes' | 'utf8' | 'uvarint' | 'u64be' | 'nested';
+type Ats1FieldDescriptor = {
+    tag: number;
+    name: string;
+    type: Ats1FieldType;
+    required?: boolean;
+    repeated?: boolean;
+    nestedSchema?: Ats1SchemaDescriptor;
+    maxLen?: number;
+};
+type Ats1SchemaDescriptor = {
+    schemaId: number;
+    name: string;
+    strict: boolean;
+    maxNestingDepth: number;
+    maxBodyBytes?: number;
+    fields: Ats1FieldDescriptor[];
+};
+type DecodedTlv = {
+    tag: number;
+    value: Buffer;
+};
+type DecodedTlvMap = Map<number, Buffer[]>;
+type SensorInputLike = {
+    hdrTLVs: DecodedTlvMap;
+    bodyTLVs: DecodedTlvMap;
+    schemaId: number;
+    intentId: number;
+};
+type Ats1Limits = {
+    maxVarintBytes: number;
+    maxTlvCount: number;
+    maxValueBytes: number;
+    maxNestingDepth: number;
+};
+declare const DEFAULT_LIMITS: Ats1Limits;
+declare function encodeUVarint(n: number | bigint): Buffer;
+declare function decodeUVarint(buf: Buffer, offset: number, limits?: Ats1Limits): {
+    value: bigint;
+    offset: number;
+    bytesRead: number;
+};
+declare function encodeU64BE(n: bigint): Buffer;
+declare function decodeU64BE(buf: Buffer): bigint;
+declare function sha256(data: Buffer): Buffer;
+declare function encodeTLV(tag: number, value: Buffer): Buffer;
+declare function encodeTLVStreamCanonical(entries: DecodedTlv[]): Buffer;
+declare function decodeTLVStream(stream: Buffer, limits?: Ats1Limits): DecodedTlv[];
+declare function tlvsToMap(entries: DecodedTlv[]): DecodedTlvMap;
+type LogicalBody = {
+    schemaId: number;
+    fields: Record<string, any>;
+};
+declare function validateTLVsAgainstSchema(schema: Ats1SchemaDescriptor, tlvs: DecodedTlv[], depth?: number, limits?: Ats1Limits): void;
+declare function logicalBodyToTLVs(schema: Ats1SchemaDescriptor, body: LogicalBody, limits?: Ats1Limits): DecodedTlv[];
+declare function tlvsToLogicalBody(schema: Ats1SchemaDescriptor, tlvs: DecodedTlv[], limits?: Ats1Limits): LogicalBody;
+declare const HDR_TAGS: {
+    readonly intent_id: 1;
+    readonly actor_key_id: 2;
+    readonly capsule_id: 3;
+    readonly nonce: 4;
+    readonly ts_ms: 5;
+    readonly schema_id: 6;
+    readonly body_hash: 7;
+    readonly trace_id: 8;
+};
+type AxisHeaderLogical = {
+    intentId: number;
+    actorKeyId: Uint8Array;
+    capsuleId?: Uint8Array;
+    nonce: Uint8Array;
+    tsMs: bigint;
+    schemaId: number;
+    bodyHash: Uint8Array;
+    traceId?: Uint8Array;
+    version?: number;
+    headerHash?: Uint8Array;
+    headerTlvs?: DecodedTlv[];
+    bodyTlvs?: DecodedTlv[];
+};
+type AxisLogicalRequest = {
+    hdr: AxisHeaderLogical;
+    body: LogicalBody;
+};
+declare function encodeAxisHeaderToTLVs(hdr: AxisHeaderLogical): DecodedTlv[];
+declare function decodeAxisHeaderFromTLVs(hdrTlvs: DecodedTlv[], limits?: Ats1Limits): AxisHeaderLogical;
+declare function encodeAxisRequestBinary(schema: Ats1SchemaDescriptor, req: Omit<AxisLogicalRequest, 'hdr'> & {
+    hdr: Omit<AxisHeaderLogical, 'bodyHash'>;
+}, limits?: Ats1Limits): {
+    hdrBytes: Buffer;
+    bodyBytes: Buffer;
+    bodyHash: Buffer;
+};
+declare function decodeAxisRequestBinary(schema: Ats1SchemaDescriptor, hdrBytes: Buffer, bodyBytes: Buffer, limits?: Ats1Limits): {
+    hdr: AxisHeaderLogical;
+    body: LogicalBody;
+    sensorInput: SensorInputLike;
+};
+declare const Schema3100_DeviceContext: Ats1SchemaDescriptor;
+declare const Schema2001_PasskeyLoginOptionsReq: Ats1SchemaDescriptor;
+declare const Schema4001_LoginWithDeviceReq: Ats1SchemaDescriptor;
+
+type ats1_Ats1FieldDescriptor = Ats1FieldDescriptor;
+type ats1_Ats1FieldType = Ats1FieldType;
+type ats1_Ats1Limits = Ats1Limits;
+type ats1_Ats1SchemaDescriptor = Ats1SchemaDescriptor;
+type ats1_AxisHeaderLogical = AxisHeaderLogical;
+type ats1_AxisLogicalRequest = AxisLogicalRequest;
+declare const ats1_DEFAULT_LIMITS: typeof DEFAULT_LIMITS;
+type ats1_DecodedTlv = DecodedTlv;
+type ats1_DecodedTlvMap = DecodedTlvMap;
+declare const ats1_HDR_TAGS: typeof HDR_TAGS;
+declare const ats1_Schema2001_PasskeyLoginOptionsReq: typeof Schema2001_PasskeyLoginOptionsReq;
+declare const ats1_Schema3100_DeviceContext: typeof Schema3100_DeviceContext;
+declare const ats1_Schema4001_LoginWithDeviceReq: typeof Schema4001_LoginWithDeviceReq;
+type ats1_SensorInputLike = SensorInputLike;
+declare const ats1_decodeAxisHeaderFromTLVs: typeof decodeAxisHeaderFromTLVs;
+declare const ats1_decodeAxisRequestBinary: typeof decodeAxisRequestBinary;
+declare const ats1_decodeTLVStream: typeof decodeTLVStream;
+declare const ats1_decodeU64BE: typeof decodeU64BE;
+declare const ats1_decodeUVarint: typeof decodeUVarint;
+declare const ats1_encodeAxisHeaderToTLVs: typeof encodeAxisHeaderToTLVs;
+declare const ats1_encodeAxisRequestBinary: typeof encodeAxisRequestBinary;
+declare const ats1_encodeTLV: typeof encodeTLV;
+declare const ats1_encodeTLVStreamCanonical: typeof encodeTLVStreamCanonical;
+declare const ats1_encodeU64BE: typeof encodeU64BE;
+declare const ats1_encodeUVarint: typeof encodeUVarint;
+declare const ats1_logicalBodyToTLVs: typeof logicalBodyToTLVs;
+declare const ats1_sha256: typeof sha256;
+declare const ats1_tlvsToLogicalBody: typeof tlvsToLogicalBody;
+declare const ats1_tlvsToMap: typeof tlvsToMap;
+declare const ats1_validateTLVsAgainstSchema: typeof validateTLVsAgainstSchema;
+declare namespace ats1 {
+  export { type ats1_Ats1FieldDescriptor as Ats1FieldDescriptor, type ats1_Ats1FieldType as Ats1FieldType, type ats1_Ats1Limits as Ats1Limits, type ats1_Ats1SchemaDescriptor as Ats1SchemaDescriptor, type ats1_AxisHeaderLogical as AxisHeaderLogical, type ats1_AxisLogicalRequest as AxisLogicalRequest, ats1_DEFAULT_LIMITS as DEFAULT_LIMITS, type ats1_DecodedTlv as DecodedTlv, type ats1_DecodedTlvMap as DecodedTlvMap, ats1_HDR_TAGS as HDR_TAGS, ats1_Schema2001_PasskeyLoginOptionsReq as Schema2001_PasskeyLoginOptionsReq, ats1_Schema3100_DeviceContext as Schema3100_DeviceContext, ats1_Schema4001_LoginWithDeviceReq as Schema4001_LoginWithDeviceReq, type ats1_SensorInputLike as SensorInputLike, ats1_decodeAxisHeaderFromTLVs as decodeAxisHeaderFromTLVs, ats1_decodeAxisRequestBinary as decodeAxisRequestBinary, ats1_decodeTLVStream as decodeTLVStream, ats1_decodeU64BE as decodeU64BE, ats1_decodeUVarint as decodeUVarint, ats1_encodeAxisHeaderToTLVs as encodeAxisHeaderToTLVs, ats1_encodeAxisRequestBinary as encodeAxisRequestBinary, ats1_encodeTLV as encodeTLV, ats1_encodeTLVStreamCanonical as encodeTLVStreamCanonical, ats1_encodeU64BE as encodeU64BE, ats1_encodeUVarint as encodeUVarint, ats1_logicalBodyToTLVs as logicalBodyToTLVs, ats1_sha256 as sha256, ats1_tlvsToLogicalBody as tlvsToLogicalBody, ats1_tlvsToMap as tlvsToMap, ats1_validateTLVsAgainstSchema as validateTLVsAgainstSchema };
+}
+
+declare function buildAts1Hdr(params: {
+    intentId: number;
+    schemaId: number;
+    actorKeyId?: Buffer;
+    capsuleId?: Buffer;
+    traceId?: Buffer;
+    tsMs?: bigint;
+    nonce?: Buffer;
+    bodyHash?: Buffer;
+}): Buffer;
+declare function packPasskeyLoginOptionsReq(params: {
+    intentId: number;
+    username: string;
+    actorKeyId?: Buffer;
+    capsuleId?: Buffer;
+    traceId?: Buffer;
+}): {
+    hdr: Buffer<ArrayBufferLike>;
+    body: Buffer<ArrayBufferLike>;
+};
+declare function unpackPasskeyLoginOptionsReq(body: Buffer): {
+    username: string;
+};
+declare const Schema2021_PasskeyRegisterOptionsReq: Ats1SchemaDescriptor;
+declare const Schema2011_PasskeyLoginVerifyReq: Ats1SchemaDescriptor;
+declare function packPasskeyRegisterOptionsReq(params: {
+    intentId: number;
+    username: string;
+    actorKeyId?: Buffer;
+    traceId?: Buffer;
+}): {
+    hdr: Buffer<ArrayBufferLike>;
+    body: Buffer<ArrayBufferLike>;
+};
+declare function unpackPasskeyRegisterOptionsReq(body: Buffer): {
+    username: string;
+};
+declare function packPasskeyLoginVerifyReq(params: {
+    intentId: number;
+    username: string;
+    credentialId: Buffer;
+    clientDataJSON: Buffer;
+    authenticatorData: Buffer;
+    signature: Buffer;
+    userHandle?: Buffer;
+    actorKeyId?: Buffer;
+    traceId?: Buffer;
+}): {
+    hdr: Buffer<ArrayBufferLike>;
+    body: Buffer<ArrayBufferLike>;
+};
+declare function unpackPasskeyLoginVerifyReq(body: Buffer): {
+    username: string;
+    credentialId: Buffer;
+    clientDataJSON: Buffer;
+    authenticatorData: Buffer;
+    signature: Buffer;
+    userHandle: Buffer | undefined;
+};
+declare const Schema2002_PasskeyLoginOptionsRes: Ats1SchemaDescriptor;
+declare function packPasskeyLoginOptionsRes(params: {
+    challenge: string;
+    timeout?: number;
+    rpId?: string;
+    userVerification?: string;
+    allowCredentials?: {
+        id: string;
+        type: string;
+        transports?: string[];
+    }[];
+}): Buffer;
+declare const Schema2012_PasskeyLoginVerifyRes: Ats1SchemaDescriptor;
+declare function packPasskeyLoginVerifyRes(params: {
+    actorId: string;
+    keyId: string;
+    capsule: Buffer;
+    expiresAt: bigint;
+}): Buffer;
+
+type Axis1FrameToEncode = {
+    ver: number;
+    flags: number;
+    hdr: Buffer;
+    body: Buffer;
+    sig: Buffer;
+};
+declare function encodeAxis1Frame(f: Axis1FrameToEncode): Buffer;
+
+declare function axis1SigningBytes(params: {
+    ver: number;
+    flags: number;
+    hdr: Buffer;
+    body: Buffer;
+}): Buffer;
+
+declare function encVarint(x: bigint): Buffer;
+declare function varintU(x: number | bigint): Buffer;
+declare function u64be(x: bigint): Buffer;
+declare function utf8(s: string): Buffer;
+declare function bytes(b: Uint8Array | Buffer): Buffer;
+declare function nonce16(): Buffer;
+declare function tlv(type: number, value: Buffer): Buffer;
+declare function buildTLVs(items: {
+    type: number;
+    value: Buffer;
+}[], opts?: {
+    allowDupTypes?: Set<number>;
+}): Buffer;
+
+declare function b64urlEncode(buf: Buffer): string;
+declare function b64urlDecode(str: string): Buffer;
+declare function b64urlEncodeString(str: string, encoding?: BufferEncoding): string;
+declare function b64urlDecodeString(str: string, encoding?: BufferEncoding): string;
+
+declare function canonicalJson(value: any): string;
+declare function canonicalJsonExcluding(obj: Record<string, any>, exclude: string[]): string;
+
+declare class ContractViolationError extends Error {
+    code: string;
+    constructor(code: string, message: string);
+}
+interface ExecutionMetrics {
+    dbWrites: number;
+    dbReads: number;
+    externalCalls: number;
+    elapsedMs: number;
+}
+declare class ExecutionMeter {
+    private dbWrites;
+    private dbReads;
+    private externalCalls;
+    private startTime;
+    private contract;
+    constructor(contract: any);
+    recordDbWrite(): void;
+    recordDbRead(): void;
+    recordExternalCall(): void;
+    checkTime(): void;
+    validateEffect(effect: string): void;
+    getMetrics(): ExecutionMetrics;
+    getContract(): any;
+}
+
+type Axis1DecodedFrame = {
+    ver: number;
+    flags: number;
+    hdr: Buffer;
+    body: Buffer;
+    sig: Buffer;
+    frameSize: number;
+};
+declare function decodeAxis1Frame(buf: Buffer): Axis1DecodedFrame;
+
+declare const T: {
+    INTENT: number;
+    PID: number;
+    INTENT_VERSION: number;
+    ACTOR_ID: number;
+    CAPSULE_ID: number;
+    NONCE: number;
+    TS_MS: number;
+    PROOF_TYPE: number;
+    BODY: number;
+    JSON: number;
+};
+type AxisPacket = {
+    intent: string;
+    intentVersion: number;
+    actorId: string;
+    capsuleId?: Buffer;
+    pid: Buffer;
+    nonce: Buffer;
+    tsMs: bigint;
+    headersMap: Map<number, Buffer[]>;
+    bodyMap: Map<number, Buffer[]>;
+    hdrBytes: Buffer;
+    bodyBytes: Buffer;
+    sig: Buffer;
+};
+declare function buildPacket(hdr: Buffer, body: Buffer, sig: Buffer, flags?: number): AxisPacket;
+
+interface AxisHandler {
+    readonly name: string;
+    readonly open?: boolean;
+    readonly description?: string;
+    readonly execute?: (body: Uint8Array, headers?: Map<number, Uint8Array>) => Promise<Uint8Array | any>;
+}
+interface AxisHandlerInit extends AxisHandler {
+    onModuleInit?(): void | Promise<void>;
+}
+
+interface AxisCrudHandler extends AxisHandlerInit {
+    create(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
+    findAll(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
+    findOne(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
+    update(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
+    remove(body: Uint8Array | AxisTlvDto, headers?: Map<number, Uint8Array>): Promise<Uint8Array>;
+}
+
+declare function hasScope(scopes: string[], required: string): boolean;
+declare function parseScope(scope: string): {
+    resource: string;
+    id: string;
+} | null;
+declare function canAccessResource(scopes: string[], resourceType: string, resourceId: string): boolean;
+
+declare const CAPABILITIES: {
+    readonly read: "read";
+    readonly write: "write";
+    readonly execute: "execute";
+    readonly admin: "admin";
+    readonly sign: "sign";
+    readonly witness: "witness";
+};
+type Capability = keyof typeof CAPABILITIES;
+declare const PROOF_CAPABILITIES: Record<number, Capability[]>;
+declare const INTENT_REQUIREMENTS: Record<string, Capability[]>;
+
+interface RiskSignal {
+    type: string;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    value: any;
+    message: string;
+}
+declare enum RiskDecision {
+    ALLOW = "ALLOW",
+    THROTTLE = "THROTTLE",
+    STEP_UP = "STEP_UP",
+    WITNESS = "WITNESS",
+    DENY = "DENY"
+}
+interface RiskEvaluation {
+    decision: RiskDecision;
+    reason?: string;
+    retryAfterMs?: number;
+    confidence: number;
+    signals: RiskSignal[];
+}
+
+declare const AXIS_OPCODES: Set<string>;
+declare function isKnownOpcode(op: string): boolean;
+declare function isAdminOpcode(op: string): boolean;
+
+type ReceiptEffect = 'ALLOW' | 'DENY' | 'ERROR';
+declare function buildReceiptHash(prevHash: Buffer | null, pid: Buffer, actorId: string, intent: string, effect: ReceiptEffect, ts: bigint): Buffer;
+
+declare enum IntentSensitivity {
+    LOW = 1,
+    MEDIUM = 2,
+    HIGH = 3,
+    CRITICAL = 4
+}
+declare const INTENT_SENSITIVITY_MAP: Record<string, IntentSensitivity>;
+declare function classifyIntent(intent: string): IntentSensitivity;
+declare function sensitivityName(level: IntentSensitivity): string;
+
+declare const INTENT_TIMEOUTS: Record<string, number>;
+declare const DEFAULT_TIMEOUT = 10000;
+declare function resolveTimeout(intent: string): number;
+
+interface IntentDefinition {
+    intent: string;
+    description: string;
+    sensitivity: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
+    requiredProof: string[];
+    contract: {
+        maxDbWrites: number;
+        maxTimeMs: number;
+    };
+    examples?: string[];
+    deprecated?: boolean;
+}
+
+declare function validateFrameShape(frame: any): boolean;
+declare function isTimestampValid(ts: number, skewSeconds?: number): boolean;
+
+type UploadSessionStatus = 'ACTIVE' | 'FINALIZING' | 'COMPLETE' | 'ABORTED';
+interface UploadSessionRecord {
+    id?: string;
+    fileId: string;
+    filename?: string;
+    status: UploadSessionStatus | string;
+    totalSize?: number;
+    chunkSize?: number;
+    totalChunks?: number;
+    receivedBitmap?: Uint8Array | Buffer | null;
+    hashState?: Uint8Array | Buffer | null;
+    mimeType?: string | null;
+    version?: number;
+}
+interface UploadSessionStore {
+    findByFileId(fileId: string): Promise<UploadSessionRecord | null>;
+    updateStatus(fileId: string, status: UploadSessionStatus, hashState?: Uint8Array | Buffer | null): Promise<void>;
+}
+interface UploadReceiptSigner {
+    signActive(message: Uint8Array): {
+        kid: string;
+        sig: Uint8Array;
+    };
+}
+interface UploadFileStat {
+    path: string;
+    size: number;
+}
+interface UploadFileStore {
+    getFinalPath(fileId: string, filename?: string): string;
+    getTempPath(fileId: string): string;
+    statFinal(fileId: string, filename?: string): Promise<UploadFileStat>;
+    readFinalRange(fileId: string, filename: string | undefined, start: number, length: number): Promise<Buffer>;
+    hasTemp(fileId: string): Promise<boolean>;
+    moveTempToFinal(fileId: string, filename?: string): Promise<string>;
+    createTempReadStream(fileId: string): NodeJS.ReadableStream;
+}
+
+declare class AxisFilesDownloadHandler implements AxisHandler {
+    private readonly sessions;
+    private readonly files;
+    private readonly logger;
+    readonly name = "axis.files.download";
+    readonly open = true;
+    readonly description = "File download handler";
+    constructor(sessions: UploadSessionStore, files: UploadFileStore);
+    execute(body: Uint8Array, headers?: Map<number, Uint8Array>): Promise<any>;
+}
+declare class AxisFilesFinalizeHandler implements AxisHandler {
+    private readonly sessions;
+    private readonly files;
+    private readonly keyring?;
+    private readonly logger;
+    readonly name = "axis.files.finalize";
+    readonly open = false;
+    readonly description = "File upload finalization handler";
+    constructor(sessions: UploadSessionStore, files: UploadFileStore, keyring?: UploadReceiptSigner | undefined);
+    execute(body: Uint8Array, headers?: Map<number, Uint8Array>): Promise<any>;
+}
+
+declare const AXIS_UPLOAD_SESSION_STORE = "AXIS_UPLOAD_SESSION_STORE";
+declare const AXIS_UPLOAD_FILE_STORE = "AXIS_UPLOAD_FILE_STORE";
+declare const AXIS_UPLOAD_RECEIPT_SIGNER = "AXIS_UPLOAD_RECEIPT_SIGNER";
+
+interface DiskUploadFileStoreOptions {
+    uploadDir: string;
+    chunkDir: string;
+}
+declare class DiskUploadFileStore implements UploadFileStore {
+    private readonly uploadDir;
+    private readonly chunkDir;
+    constructor(options: DiskUploadFileStoreOptions);
+    getFinalPath(fileId: string, filename?: string): string;
+    getTempPath(fileId: string): string;
+    statFinal(fileId: string, filename?: string): Promise<UploadFileStat>;
+    readFinalRange(fileId: string, filename: string | undefined, start: number, length: number): Promise<Buffer>;
+    hasTemp(fileId: string): Promise<boolean>;
+    moveTempToFinal(fileId: string, filename?: string): Promise<string>;
+    createTempReadStream(fileId: string): NodeJS.ReadableStream;
+}
+
+interface AxisRequestData {
+    raw: Buffer;
+    ip: string | undefined;
+    preDecodeInput: any;
+    frameBytesCount: number;
+}
+declare const AxisRaw: (...dataOrPipes: unknown[]) => ParameterDecorator;
+declare const AxisIp: (...dataOrPipes: unknown[]) => ParameterDecorator;
+declare const AxisContext: (...dataOrPipes: unknown[]) => ParameterDecorator;
+declare const AxisDemoPubkey: (...dataOrPipes: unknown[]) => ParameterDecorator;
+declare const AxisFrame: (...dataOrPipes: unknown[]) => ParameterDecorator;
+
+declare class ObserverDiscoveryService implements OnApplicationBootstrap {
+    private readonly discovery;
+    private readonly reflector;
+    private readonly registry;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, reflector: Reflector, registry: ObserverRegistry);
+    onApplicationBootstrap(): void;
+}
+
+declare class HandlerDiscoveryService implements OnModuleInit {
+    private readonly discovery;
+    private readonly scanner;
+    private readonly router;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
+    onModuleInit(): void;
+}
+
+declare class SensorRegistry {
+    private readonly configService;
+    private sensors;
+    private readonly logger;
+    constructor(configService: ConfigService);
+    register(sensor: AxisSensor): void;
+    list(): AxisSensor[];
+    getPreDecodeSensors(): AxisPreSensor[];
+    getPostDecodeSensors(): AxisPostSensor[];
+    private isPreDecodeSensor;
+    private isPostDecodeSensor;
+    getSensorCountByPhase(): {
+        preDecodeCount: number;
+        postDecodeCount: number;
+    };
+    clear(): void;
+}
+
+declare class SensorDiscoveryService implements OnApplicationBootstrap {
+    private readonly discovery;
+    private readonly reflector;
+    private readonly registry;
+    private readonly logger;
+    constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
+    onApplicationBootstrap(): void;
+}
 
 interface AxisDecoded {
     frame: Axis1DecodedFrame;
     packet: AxisPacket;
-    axisCtx: AxisContext;
+    axisCtx: AxisContext$1;
     correlationId: Buffer;
     correlationIdHex: string;
     sensorInput: SensorInput;
@@ -2740,16 +2773,11 @@ declare namespace index$8 {
   export { type index$8_ActorKeyRecord as ActorKeyRecord, type AxisAlg$1 as AxisAlg, type index$8_AxisCapsule as AxisCapsule, type index$8_AxisCapsuleConstraints as AxisCapsuleConstraints, type index$8_AxisCapsulePayload as AxisCapsulePayload, type AxisPacket$1 as AxisPacket, type AxisResponse$1 as AxisResponse, type AxisSig$1 as AxisSig, type index$8_CapsuleBatchBody as CapsuleBatchBody, type index$8_CapsuleBatchResult as CapsuleBatchResult, type index$8_CapsuleIssueBody as CapsuleIssueBody, type index$8_CapsuleIssueResult as CapsuleIssueResult, type index$8_CapsuleMode as CapsuleMode, type index$8_CapsuleRecord as CapsuleRecord, type index$8_CapsuleRevokeBody as CapsuleRevokeBody, type index$8_CapsuleStatus as CapsuleStatus, type index$8_DeviceSEContext as DeviceSEContext, type index$8_IntentExecBody as IntentExecBody, type index$8_IssuerKeyRecord as IssuerKeyRecord, type index$8_KeyStatus as KeyStatus, type index$8_MTLSContext as MTLSContext, type index$8_ProofType as ProofType, type index$8_ProofVerificationResult as ProofVerificationResult, index$8_ProofVerificationService as ProofVerificationService, type index$8_TickWindow as TickWindow, index$8_b64urlDecode as b64urlDecode, index$8_b64urlDecodeString as b64urlDecodeString, index$8_b64urlEncode as b64urlEncode, index$8_b64urlEncodeString as b64urlEncodeString, index$8_canonicalJson as canonicalJson, index$8_canonicalJsonExcluding as canonicalJsonExcluding };
 }
 
-declare const SENSITIVITY_METADATA_KEY = "axis:sensitivity";
-declare const CONTRACT_METADATA_KEY = "axis:contract";
-declare const REQUIRED_PROOF_METADATA_KEY = "axis:required_proof";
-type RequiredProofKind = ProofKind | "WITNESS";
-declare function Sensitivity(level: SensitivityLevel): ClassDecorator & MethodDecorator;
-declare function Contract(options: Partial<ExecutionContract>): ClassDecorator & MethodDecorator;
-declare function RequiredProof(proofs: [RequiredProofKind, ...RequiredProofKind[]]): ClassDecorator & MethodDecorator;
-declare function Capsule(): ClassDecorator & MethodDecorator;
-declare function Witness(): ClassDecorator & MethodDecorator;
-
+declare const index$7_AXIS_ANONYMOUS_KEY: typeof AXIS_ANONYMOUS_KEY;
+declare const index$7_AXIS_PUBLIC_KEY: typeof AXIS_PUBLIC_KEY;
+declare const index$7_AXIS_RATE_LIMIT_KEY: typeof AXIS_RATE_LIMIT_KEY;
+declare const index$7_AxisAnonymous: typeof AxisAnonymous;
+declare const index$7_AxisContext: typeof AxisContext;
 declare const index$7_AxisDemoPubkey: typeof AxisDemoPubkey;
 declare const index$7_AxisFrame: typeof AxisFrame;
 declare const index$7_AxisIp: typeof AxisIp;
@@ -2757,6 +2785,9 @@ type index$7_AxisObserverBinding = AxisObserverBinding;
 type index$7_AxisObserverBindingOptions = AxisObserverBindingOptions;
 type index$7_AxisObserverDefinition = AxisObserverDefinition;
 type index$7_AxisObserverRef = AxisObserverRef;
+declare const index$7_AxisPublic: typeof AxisPublic;
+declare const index$7_AxisRateLimit: typeof AxisRateLimit;
+type index$7_AxisRateLimitConfig = AxisRateLimitConfig;
 declare const index$7_AxisRaw: typeof AxisRaw;
 type index$7_AxisRequestData = AxisRequestData;
 declare const index$7_CAPSULE_POLICY_METADATA_KEY: typeof CAPSULE_POLICY_METADATA_KEY;
@@ -2813,7 +2844,7 @@ declare const index$7_extractDtoSchema: typeof extractDtoSchema;
 declare const index$7_mergeCapsulePolicyOptions: typeof mergeCapsulePolicyOptions;
 declare const index$7_normalizeCapsulePolicyOptions: typeof normalizeCapsulePolicyOptions;
 declare namespace index$7 {
-  export { AxisContext$1 as AxisContext, index$7_AxisDemoPubkey as AxisDemoPubkey, index$7_AxisFrame as AxisFrame, index$7_AxisIp as AxisIp, type index$7_AxisObserverBinding as AxisObserverBinding, type index$7_AxisObserverBindingOptions as AxisObserverBindingOptions, type index$7_AxisObserverDefinition as AxisObserverDefinition, type index$7_AxisObserverRef as AxisObserverRef, index$7_AxisRaw as AxisRaw, type index$7_AxisRequestData as AxisRequestData, index$7_CAPSULE_POLICY_METADATA_KEY as CAPSULE_POLICY_METADATA_KEY, index$7_CHAIN_METADATA_KEY as CHAIN_METADATA_KEY, index$7_CONTRACT_METADATA_KEY as CONTRACT_METADATA_KEY, index$7_Capsule as Capsule, index$7_CapsulePolicy as CapsulePolicy, type index$7_CapsulePolicyOptions as CapsulePolicyOptions, type index$7_CapsuleScopeMode as CapsuleScopeMode, index$7_Chain as Chain, index$7_Contract as Contract, type index$7_DtoSchema as DtoSchema, index$7_HANDLER_METADATA_KEY as HANDLER_METADATA_KEY, index$7_Handler as Handler, index$7_INTENT_BODY_KEY as INTENT_BODY_KEY, index$7_INTENT_METADATA_KEY as INTENT_METADATA_KEY, index$7_INTENT_ROUTES_KEY as INTENT_ROUTES_KEY, index$7_INTENT_SENSORS_KEY as INTENT_SENSORS_KEY, index$7_Intent as Intent, index$7_IntentBody as IntentBody, type index$7_IntentKind as IntentKind, type index$7_IntentOptions as IntentOptions, type index$7_IntentRoute as IntentRoute, index$7_IntentSensors as IntentSensors, type index$7_IntentTlvField as IntentTlvField, index$7_OBSERVER_BINDINGS_KEY as OBSERVER_BINDINGS_KEY, index$7_OBSERVER_METADATA_KEY as OBSERVER_METADATA_KEY, index$7_Observer as Observer, index$7_REQUIRED_PROOF_METADATA_KEY as REQUIRED_PROOF_METADATA_KEY, index$7_RequiredProof as RequiredProof, type index$7_RequiredProofKind as RequiredProofKind, index$7_SENSITIVITY_METADATA_KEY as SENSITIVITY_METADATA_KEY, index$7_SENSOR_METADATA_KEY as SENSOR_METADATA_KEY, index$7_Sensitivity as Sensitivity, index$7_Sensor as Sensor, type index$7_SensorOptions as SensorOptions, type index$7_SensorPhase as SensorPhase, index$7_TLV_FIELDS_KEY as TLV_FIELDS_KEY, index$7_TLV_VALIDATORS_KEY as TLV_VALIDATORS_KEY, index$7_TlvEnum as TlvEnum, index$7_TlvField as TlvField, type index$7_TlvFieldKind as TlvFieldKind, type index$7_TlvFieldMeta as TlvFieldMeta, type index$7_TlvFieldOptions as TlvFieldOptions, index$7_TlvMinLen as TlvMinLen, index$7_TlvRange as TlvRange, index$7_TlvUtf8Pattern as TlvUtf8Pattern, index$7_TlvValidate as TlvValidate, type index$7_TlvValidatorFn as TlvValidatorFn, type index$7_TlvValidatorMeta as TlvValidatorMeta, index$7_Witness as Witness, index$7_buildDtoDecoder as buildDtoDecoder, index$7_extractDtoSchema as extractDtoSchema, index$7_mergeCapsulePolicyOptions as mergeCapsulePolicyOptions, index$7_normalizeCapsulePolicyOptions as normalizeCapsulePolicyOptions };
+  export { index$7_AXIS_ANONYMOUS_KEY as AXIS_ANONYMOUS_KEY, index$7_AXIS_PUBLIC_KEY as AXIS_PUBLIC_KEY, index$7_AXIS_RATE_LIMIT_KEY as AXIS_RATE_LIMIT_KEY, index$7_AxisAnonymous as AxisAnonymous, index$7_AxisContext as AxisContext, index$7_AxisDemoPubkey as AxisDemoPubkey, index$7_AxisFrame as AxisFrame, index$7_AxisIp as AxisIp, type index$7_AxisObserverBinding as AxisObserverBinding, type index$7_AxisObserverBindingOptions as AxisObserverBindingOptions, type index$7_AxisObserverDefinition as AxisObserverDefinition, type index$7_AxisObserverRef as AxisObserverRef, index$7_AxisPublic as AxisPublic, index$7_AxisRateLimit as AxisRateLimit, type index$7_AxisRateLimitConfig as AxisRateLimitConfig, index$7_AxisRaw as AxisRaw, type index$7_AxisRequestData as AxisRequestData, index$7_CAPSULE_POLICY_METADATA_KEY as CAPSULE_POLICY_METADATA_KEY, index$7_CHAIN_METADATA_KEY as CHAIN_METADATA_KEY, index$7_CONTRACT_METADATA_KEY as CONTRACT_METADATA_KEY, index$7_Capsule as Capsule, index$7_CapsulePolicy as CapsulePolicy, type index$7_CapsulePolicyOptions as CapsulePolicyOptions, type index$7_CapsuleScopeMode as CapsuleScopeMode, index$7_Chain as Chain, index$7_Contract as Contract, type index$7_DtoSchema as DtoSchema, index$7_HANDLER_METADATA_KEY as HANDLER_METADATA_KEY, index$7_Handler as Handler, index$7_INTENT_BODY_KEY as INTENT_BODY_KEY, index$7_INTENT_METADATA_KEY as INTENT_METADATA_KEY, index$7_INTENT_ROUTES_KEY as INTENT_ROUTES_KEY, index$7_INTENT_SENSORS_KEY as INTENT_SENSORS_KEY, index$7_Intent as Intent, index$7_IntentBody as IntentBody, type index$7_IntentKind as IntentKind, type index$7_IntentOptions as IntentOptions, type index$7_IntentRoute as IntentRoute, index$7_IntentSensors as IntentSensors, type index$7_IntentTlvField as IntentTlvField, index$7_OBSERVER_BINDINGS_KEY as OBSERVER_BINDINGS_KEY, index$7_OBSERVER_METADATA_KEY as OBSERVER_METADATA_KEY, index$7_Observer as Observer, index$7_REQUIRED_PROOF_METADATA_KEY as REQUIRED_PROOF_METADATA_KEY, index$7_RequiredProof as RequiredProof, type index$7_RequiredProofKind as RequiredProofKind, index$7_SENSITIVITY_METADATA_KEY as SENSITIVITY_METADATA_KEY, index$7_SENSOR_METADATA_KEY as SENSOR_METADATA_KEY, index$7_Sensitivity as Sensitivity, index$7_Sensor as Sensor, type index$7_SensorOptions as SensorOptions, type index$7_SensorPhase as SensorPhase, index$7_TLV_FIELDS_KEY as TLV_FIELDS_KEY, index$7_TLV_VALIDATORS_KEY as TLV_VALIDATORS_KEY, index$7_TlvEnum as TlvEnum, index$7_TlvField as TlvField, type index$7_TlvFieldKind as TlvFieldKind, type index$7_TlvFieldMeta as TlvFieldMeta, type index$7_TlvFieldOptions as TlvFieldOptions, index$7_TlvMinLen as TlvMinLen, index$7_TlvRange as TlvRange, index$7_TlvUtf8Pattern as TlvUtf8Pattern, index$7_TlvValidate as TlvValidate, type index$7_TlvValidatorFn as TlvValidatorFn, type index$7_TlvValidatorMeta as TlvValidatorMeta, index$7_Witness as Witness, index$7_buildDtoDecoder as buildDtoDecoder, index$7_extractDtoSchema as extractDtoSchema, index$7_mergeCapsulePolicyOptions as mergeCapsulePolicyOptions, index$7_normalizeCapsulePolicyOptions as normalizeCapsulePolicyOptions };
 }
 
 type index$6_ObservationQueueConfig = ObservationQueueConfig;
@@ -2869,6 +2900,7 @@ type index$5_HandlerDiscoveryService = HandlerDiscoveryService;
 declare const index$5_HandlerDiscoveryService: typeof HandlerDiscoveryService;
 type index$5_IntentRouter = IntentRouter;
 declare const index$5_IntentRouter: typeof IntentRouter;
+type index$5_IntentSchema = IntentSchema;
 type index$5_ObservationQueueConfig = ObservationQueueConfig;
 type index$5_ObservationQueueMessage = ObservationQueueMessage;
 type index$5_ObservationSensor = ObservationSensor;
@@ -2912,7 +2944,7 @@ declare const index$5_startStage: typeof startStage;
 declare const index$5_verifyResponse: typeof verifyResponse;
 declare const index$5_withAxisExecutionContext: typeof withAxisExecutionContext;
 declare namespace index$5 {
-  export { index$5_AXIS_EXECUTION_CONTEXT_KEY as AXIS_EXECUTION_CONTEXT_KEY, type index$5_AxisCapsuleRef as AxisCapsuleRef, type index$5_AxisChainEncryption as AxisChainEncryption, type index$5_AxisChainEnvelope as AxisChainEnvelope, type index$5_AxisChainExecutionOptions as AxisChainExecutionOptions, index$5_AxisChainExecutor as AxisChainExecutor, type index$5_AxisChainRequest as AxisChainRequest, type index$5_AxisChainResult as AxisChainResult, type index$5_AxisChainStatus as AxisChainStatus, type index$5_AxisChainStep as AxisChainStep, type index$5_AxisChainStepResult as AxisChainStepResult, type index$5_AxisChainStepStatus as AxisChainStepStatus, type index$5_AxisDecoded as AxisDecoded, type index$5_AxisEffect as AxisEffect, type index$5_AxisExecutionContext as AxisExecutionContext, type index$5_AxisExecutionMode as AxisExecutionMode, type index$5_AxisIntentEnvelope as AxisIntentEnvelope, type index$5_AxisIntentObserver as AxisIntentObserver, type index$5_AxisKeyExchangeRef as AxisKeyExchangeRef, type index$5_AxisObservation as AxisObservation, type index$5_AxisObserverContext as AxisObserverContext, type index$5_AxisObserverEvent as AxisObserverEvent, type index$5_AxisObserverRegistration as AxisObserverRegistration, index$5_BAND as BAND, type index$5_ChainOptions as ChainOptions, index$5_HandlerDiscoveryService as HandlerDiscoveryService, index$5_IntentRouter as IntentRouter, type IntentSchema$1 as IntentSchema, type index$5_ObservationQueueConfig as ObservationQueueConfig, type index$5_ObservationQueueMessage as ObservationQueueMessage, type index$5_ObservationSensor as ObservationSensor, type index$5_ObservationStage as ObservationStage, type index$5_ObservationStreamEntry as ObservationStreamEntry, type index$5_ObservationWitnessSummary as ObservationWitnessSummary, index$5_ObserverDiscoveryService as ObserverDiscoveryService, index$5_ObserverDispatcherService as ObserverDispatcherService, index$5_ObserverRegistry as ObserverRegistry, type index$5_ObserverVerdict as ObserverVerdict, index$5_PRE_DECODE_BOUNDARY as PRE_DECODE_BOUNDARY, type index$5_RegisteredChainConfig as RegisteredChainConfig, type index$5_ResponseContract as ResponseContract, index$5_ResponseObserver as ResponseObserver, type index$5_ResponseObserverContext as ResponseObserverContext, type index$5_SensorBand as SensorBand, index$5_SensorDiscoveryService as SensorDiscoveryService, index$5_SensorRegistry as SensorRegistry, type index$5_UnsignedObservationWitness as UnsignedObservationWitness, index$5_buildQueueMessage as buildQueueMessage, index$5_buildUnsignedWitness as buildUnsignedWitness, index$5_canonicalizeObservation as canonicalizeObservation, index$5_createObservation as createObservation, index$5_decodeQueueMessage as decodeQueueMessage, index$5_encodeQueueMessage as encodeQueueMessage, index$5_endStage as endStage, index$5_finalizeObservation as finalizeObservation, index$5_getAxisExecutionContext as getAxisExecutionContext, index$5_hashObservation as hashObservation, index$5_mergeAxisExecutionContext as mergeAxisExecutionContext, index$6 as observation, index$5_parseAutoClaimEntries as parseAutoClaimEntries, index$5_parseStreamEntries as parseStreamEntries, index$5_recordSensor as recordSensor, index$5_stableJsonStringify as stableJsonStringify, index$5_startStage as startStage, index$5_verifyResponse as verifyResponse, index$5_withAxisExecutionContext as withAxisExecutionContext };
+  export { index$5_AXIS_EXECUTION_CONTEXT_KEY as AXIS_EXECUTION_CONTEXT_KEY, type index$5_AxisCapsuleRef as AxisCapsuleRef, type index$5_AxisChainEncryption as AxisChainEncryption, type index$5_AxisChainEnvelope as AxisChainEnvelope, type index$5_AxisChainExecutionOptions as AxisChainExecutionOptions, index$5_AxisChainExecutor as AxisChainExecutor, type index$5_AxisChainRequest as AxisChainRequest, type index$5_AxisChainResult as AxisChainResult, type index$5_AxisChainStatus as AxisChainStatus, type index$5_AxisChainStep as AxisChainStep, type index$5_AxisChainStepResult as AxisChainStepResult, type index$5_AxisChainStepStatus as AxisChainStepStatus, type index$5_AxisDecoded as AxisDecoded, type index$5_AxisEffect as AxisEffect, type index$5_AxisExecutionContext as AxisExecutionContext, type index$5_AxisExecutionMode as AxisExecutionMode, type index$5_AxisIntentEnvelope as AxisIntentEnvelope, type index$5_AxisIntentObserver as AxisIntentObserver, type index$5_AxisKeyExchangeRef as AxisKeyExchangeRef, type index$5_AxisObservation as AxisObservation, type index$5_AxisObserverContext as AxisObserverContext, type index$5_AxisObserverEvent as AxisObserverEvent, type index$5_AxisObserverRegistration as AxisObserverRegistration, index$5_BAND as BAND, type index$5_ChainOptions as ChainOptions, index$5_HandlerDiscoveryService as HandlerDiscoveryService, index$5_IntentRouter as IntentRouter, type index$5_IntentSchema as IntentSchema, type index$5_ObservationQueueConfig as ObservationQueueConfig, type index$5_ObservationQueueMessage as ObservationQueueMessage, type index$5_ObservationSensor as ObservationSensor, type index$5_ObservationStage as ObservationStage, type index$5_ObservationStreamEntry as ObservationStreamEntry, type index$5_ObservationWitnessSummary as ObservationWitnessSummary, index$5_ObserverDiscoveryService as ObserverDiscoveryService, index$5_ObserverDispatcherService as ObserverDispatcherService, index$5_ObserverRegistry as ObserverRegistry, type index$5_ObserverVerdict as ObserverVerdict, index$5_PRE_DECODE_BOUNDARY as PRE_DECODE_BOUNDARY, type index$5_RegisteredChainConfig as RegisteredChainConfig, type index$5_ResponseContract as ResponseContract, index$5_ResponseObserver as ResponseObserver, type index$5_ResponseObserverContext as ResponseObserverContext, type index$5_SensorBand as SensorBand, index$5_SensorDiscoveryService as SensorDiscoveryService, index$5_SensorRegistry as SensorRegistry, type index$5_UnsignedObservationWitness as UnsignedObservationWitness, index$5_buildQueueMessage as buildQueueMessage, index$5_buildUnsignedWitness as buildUnsignedWitness, index$5_canonicalizeObservation as canonicalizeObservation, index$5_createObservation as createObservation, index$5_decodeQueueMessage as decodeQueueMessage, index$5_encodeQueueMessage as encodeQueueMessage, index$5_endStage as endStage, index$5_finalizeObservation as finalizeObservation, index$5_getAxisExecutionContext as getAxisExecutionContext, index$5_hashObservation as hashObservation, index$5_mergeAxisExecutionContext as mergeAxisExecutionContext, index$6 as observation, index$5_parseAutoClaimEntries as parseAutoClaimEntries, index$5_parseStreamEntries as parseStreamEntries, index$5_recordSensor as recordSensor, index$5_stableJsonStringify as stableJsonStringify, index$5_startStage as startStage, index$5_verifyResponse as verifyResponse, index$5_withAxisExecutionContext as withAxisExecutionContext };
 }
 
 type index$4_Grant = Grant;
@@ -2968,7 +3000,6 @@ declare class BodyProfileValidator {
 
 type index$3_AccessProfile = AccessProfile;
 declare const index$3_AccessProfileZ: typeof AccessProfileZ;
-type index$3_AxisContext = AxisContext;
 declare const index$3_AxisContextZ: typeof AxisContextZ;
 type index$3_AxisError = AxisError;
 declare const index$3_AxisErrorZ: typeof AxisErrorZ;
@@ -3010,7 +3041,6 @@ declare const index$3_IntentPolicyDecisionZ: typeof IntentPolicyDecisionZ;
 type index$3_IntentPolicySensorInput = IntentPolicySensorInput;
 declare const index$3_IntentPolicySensorInputZ: typeof IntentPolicySensorInputZ;
 declare const index$3_IntentPolicyZ: typeof IntentPolicyZ;
-type index$3_IntentSchema = IntentSchema;
 declare const index$3_IntentSchemaZ: typeof IntentSchemaZ;
 type index$3_Passport = Passport;
 declare const index$3_PassportZ: typeof PassportZ;
@@ -3053,7 +3083,7 @@ declare const index$3_WsHandshakeDecisionZ: typeof WsHandshakeDecisionZ;
 type index$3_WsHandshakeInput = WsHandshakeInput;
 declare const index$3_WsHandshakeInputZ: typeof WsHandshakeInputZ;
 declare namespace index$3 {
-  export { type index$3_AccessProfile as AccessProfile, index$3_AccessProfileZ as AccessProfileZ, type index$3_AxisContext as AxisContext, index$3_AxisContextZ as AxisContextZ, type index$3_AxisError as AxisError, index$3_AxisErrorZ as AxisErrorZ, type index$3_BodyBudgetInput as BodyBudgetInput, index$3_BodyBudgetInputZ as BodyBudgetInputZ, type index$3_BodyBudgetPolicy as BodyBudgetPolicy, index$3_BodyBudgetPolicyZ as BodyBudgetPolicyZ, index$3_BodyProfile as BodyProfile, type index$3_BodyProfileValidation as BodyProfileValidation, index$3_BodyProfileValidator as BodyProfileValidator, index$3_BodyProfileZ as BodyProfileZ, type Capsule$1 as Capsule, type index$3_CapsuleClaims as CapsuleClaims, index$3_CapsuleClaimsZ as CapsuleClaimsZ, type index$3_CapsuleValidationResult as CapsuleValidationResult, index$3_CapsuleValidationResultZ as CapsuleValidationResultZ, type index$3_CapsuleVerifyResult as CapsuleVerifyResult, index$3_CapsuleVerifyResultZ as CapsuleVerifyResultZ, type index$3_CapsuleVerifySensorInput as CapsuleVerifySensorInput, index$3_CapsuleVerifySensorInputZ as CapsuleVerifySensorInputZ, index$3_CapsuleZ as CapsuleZ, type index$3_ChunkHashInput as ChunkHashInput, index$3_ChunkHashInputZ as ChunkHashInputZ, type index$3_CountryBlockDecision as CountryBlockDecision, index$3_CountryBlockDecisionZ as CountryBlockDecisionZ, type index$3_CountryBlockSensorInput as CountryBlockSensorInput, index$3_CountryBlockSensorInputZ as CountryBlockSensorInputZ, type index$3_EntropySensorInput as EntropySensorInput, index$3_EntropySensorInputZ as EntropySensorInputZ, index$3_ExecutionMetricsZ as ExecutionMetricsZ, type index$3_IPReputation as IPReputation, type index$3_IPReputationInput as IPReputationInput, index$3_IPReputationInputZ as IPReputationInputZ, index$3_IPReputationZ as IPReputationZ, type index$3_IntentPolicy as IntentPolicy, type index$3_IntentPolicyDecision as IntentPolicyDecision, index$3_IntentPolicyDecisionZ as IntentPolicyDecisionZ, type index$3_IntentPolicySensorInput as IntentPolicySensorInput, index$3_IntentPolicySensorInputZ as IntentPolicySensorInputZ, index$3_IntentPolicyZ as IntentPolicyZ, type index$3_IntentSchema as IntentSchema, index$3_IntentSchemaZ as IntentSchemaZ, type index$3_Passport as Passport, index$3_PassportZ as PassportZ, type index$3_ProofKind as ProofKind, index$3_ProofKindZ as ProofKindZ, type index$3_ProofPresenceInput as ProofPresenceInput, index$3_ProofPresenceInputZ as ProofPresenceInputZ, ProofType$1 as ProofType, type index$3_ProtocolStrictInput as ProtocolStrictInput, index$3_ProtocolStrictInputZ as ProtocolStrictInputZ, type index$3_RateLimitConfig as RateLimitConfig, index$3_RateLimitConfigZ as RateLimitConfigZ, type index$3_RateLimitInput as RateLimitInput, index$3_RateLimitInputZ as RateLimitInputZ, type index$3_RateLimitProfile as RateLimitProfile, index$3_RateLimitProfileZ as RateLimitProfileZ, type index$3_ScanBurstDecision as ScanBurstDecision, index$3_ScanBurstDecisionZ as ScanBurstDecisionZ, type index$3_ScanBurstSensorInput as ScanBurstSensorInput, index$3_ScanBurstSensorInputZ as ScanBurstSensorInputZ, type index$3_SchemaField as SchemaField, type index$3_SchemaFieldKind as SchemaFieldKind, index$3_SchemaFieldKindZ as SchemaFieldKindZ, index$3_SchemaFieldZ as SchemaFieldZ, type index$3_Scope as Scope, index$3_ScopeZ as ScopeZ, type index$3_SensitivityLevel as SensitivityLevel, index$3_SensitivityLevelZ as SensitivityLevelZ, type index$3_SensorChainInput as SensorChainInput, index$3_SensorChainInputZ as SensorChainInputZ, index$3_SensorDecisionWithMetadataZ as SensorDecisionWithMetadataZ, index$3_SensorDecisionZ as SensorDecisionZ, type index$3_SensorResult as SensorResult, index$3_SensorResultZ as SensorResultZ, type index$3_UploadSession as UploadSession, index$3_UploadSessionZ as UploadSessionZ, type index$3_UploadStatus as UploadStatus, index$3_UploadStatusZ as UploadStatusZ, type index$3_WsHandshakeDecision as WsHandshakeDecision, index$3_WsHandshakeDecisionZ as WsHandshakeDecisionZ, type index$3_WsHandshakeInput as WsHandshakeInput, index$3_WsHandshakeInputZ as WsHandshakeInputZ };
+  export { type index$3_AccessProfile as AccessProfile, index$3_AccessProfileZ as AccessProfileZ, type AxisContext$1 as AxisContext, index$3_AxisContextZ as AxisContextZ, type index$3_AxisError as AxisError, index$3_AxisErrorZ as AxisErrorZ, type index$3_BodyBudgetInput as BodyBudgetInput, index$3_BodyBudgetInputZ as BodyBudgetInputZ, type index$3_BodyBudgetPolicy as BodyBudgetPolicy, index$3_BodyBudgetPolicyZ as BodyBudgetPolicyZ, index$3_BodyProfile as BodyProfile, type index$3_BodyProfileValidation as BodyProfileValidation, index$3_BodyProfileValidator as BodyProfileValidator, index$3_BodyProfileZ as BodyProfileZ, type Capsule$1 as Capsule, type index$3_CapsuleClaims as CapsuleClaims, index$3_CapsuleClaimsZ as CapsuleClaimsZ, type index$3_CapsuleValidationResult as CapsuleValidationResult, index$3_CapsuleValidationResultZ as CapsuleValidationResultZ, type index$3_CapsuleVerifyResult as CapsuleVerifyResult, index$3_CapsuleVerifyResultZ as CapsuleVerifyResultZ, type index$3_CapsuleVerifySensorInput as CapsuleVerifySensorInput, index$3_CapsuleVerifySensorInputZ as CapsuleVerifySensorInputZ, index$3_CapsuleZ as CapsuleZ, type index$3_ChunkHashInput as ChunkHashInput, index$3_ChunkHashInputZ as ChunkHashInputZ, type index$3_CountryBlockDecision as CountryBlockDecision, index$3_CountryBlockDecisionZ as CountryBlockDecisionZ, type index$3_CountryBlockSensorInput as CountryBlockSensorInput, index$3_CountryBlockSensorInputZ as CountryBlockSensorInputZ, type index$3_EntropySensorInput as EntropySensorInput, index$3_EntropySensorInputZ as EntropySensorInputZ, index$3_ExecutionMetricsZ as ExecutionMetricsZ, type index$3_IPReputation as IPReputation, type index$3_IPReputationInput as IPReputationInput, index$3_IPReputationInputZ as IPReputationInputZ, index$3_IPReputationZ as IPReputationZ, type index$3_IntentPolicy as IntentPolicy, type index$3_IntentPolicyDecision as IntentPolicyDecision, index$3_IntentPolicyDecisionZ as IntentPolicyDecisionZ, type index$3_IntentPolicySensorInput as IntentPolicySensorInput, index$3_IntentPolicySensorInputZ as IntentPolicySensorInputZ, index$3_IntentPolicyZ as IntentPolicyZ, type IntentSchema$1 as IntentSchema, index$3_IntentSchemaZ as IntentSchemaZ, type index$3_Passport as Passport, index$3_PassportZ as PassportZ, type index$3_ProofKind as ProofKind, index$3_ProofKindZ as ProofKindZ, type index$3_ProofPresenceInput as ProofPresenceInput, index$3_ProofPresenceInputZ as ProofPresenceInputZ, ProofType$1 as ProofType, type index$3_ProtocolStrictInput as ProtocolStrictInput, index$3_ProtocolStrictInputZ as ProtocolStrictInputZ, type index$3_RateLimitConfig as RateLimitConfig, index$3_RateLimitConfigZ as RateLimitConfigZ, type index$3_RateLimitInput as RateLimitInput, index$3_RateLimitInputZ as RateLimitInputZ, type index$3_RateLimitProfile as RateLimitProfile, index$3_RateLimitProfileZ as RateLimitProfileZ, type index$3_ScanBurstDecision as ScanBurstDecision, index$3_ScanBurstDecisionZ as ScanBurstDecisionZ, type index$3_ScanBurstSensorInput as ScanBurstSensorInput, index$3_ScanBurstSensorInputZ as ScanBurstSensorInputZ, type index$3_SchemaField as SchemaField, type index$3_SchemaFieldKind as SchemaFieldKind, index$3_SchemaFieldKindZ as SchemaFieldKindZ, index$3_SchemaFieldZ as SchemaFieldZ, type index$3_Scope as Scope, index$3_ScopeZ as ScopeZ, type index$3_SensitivityLevel as SensitivityLevel, index$3_SensitivityLevelZ as SensitivityLevelZ, type index$3_SensorChainInput as SensorChainInput, index$3_SensorChainInputZ as SensorChainInputZ, index$3_SensorDecisionWithMetadataZ as SensorDecisionWithMetadataZ, index$3_SensorDecisionZ as SensorDecisionZ, type index$3_SensorResult as SensorResult, index$3_SensorResultZ as SensorResultZ, type index$3_UploadSession as UploadSession, index$3_UploadSessionZ as UploadSessionZ, type index$3_UploadStatus as UploadStatus, index$3_UploadStatusZ as UploadStatusZ, type index$3_WsHandshakeDecision as WsHandshakeDecision, index$3_WsHandshakeDecisionZ as WsHandshakeDecisionZ, type index$3_WsHandshakeInput as WsHandshakeInput, index$3_WsHandshakeInputZ as WsHandshakeInputZ };
 }
 
 type index$2_AxisSensorChainService = AxisSensorChainService;
@@ -3287,4 +3317,4 @@ declare namespace index {
   export { index_encodeAxisTlvDto as encodeAxisTlvDto };
 }
 
-export { ATS1_HDR, ATS1_SCHEMA, AXIS_EXECUTION_CONTEXT_KEY, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, type AxisCapsuleRef, type AxisChainEncryption, type AxisChainEnvelope, AxisChainExecutor, type AxisChainRequest, type AxisChainResult, type AxisChainStatus, type AxisChainStep, type AxisChainStepResult, type AxisChainStepStatus, AxisContext$1 as AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, type AxisExecutionContext, type AxisExecutionMode, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, type AxisIntentEnvelope, type AxisIntentObserver, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisKeyExchangeRef, type AxisObservation, type AxisObservedContext, type AxisObserverBinding, type AxisObserverBindingOptions, type AxisObserverContext, type AxisObserverDefinition, type AxisObserverEvent, type AxisObserverRef, type AxisObserverRegistration, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, CAPSULE_POLICY_METADATA_KEY, CCE_ERROR, CCE_PROTOCOL_VERSION, CHAIN_METADATA_KEY, type Capability, type CapsuleMode, CapsulePolicy, type CapsulePolicyOptions, type CapsuleScopeMode, type CceCapsuleClaims as CceCapsuleClaimsType, CceError, type CceExecutionContext as CceExecutionContextType, type CceHandler, type CceHandlerContext, type CceHandlerResult, type CcePipelineConfig, type CcePipelineResult, type CcePolicyContext, type CcePolicyDecision, type CcePolicyEvaluator, type CceRequestEnvelope as CceRequestEnvelopeType, type CceResponseEnvelope as CceResponseEnvelopeType, type CceWitnessRecord as CceWitnessRecordType, Chain, type ChainOptions, type ChainResult, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, type Grant, type GrantCapability, type GrantMeta, type GrantStatus, type GrantType, type GrantValidationResult, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type LoomReceipt, type LoomValidationResult, OBSERVER_BINDINGS_KEY, OBSERVER_METADATA_KEY, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, Observer, ObserverDiscoveryService, ObserverDispatcherService, ObserverRegistry, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, type PresenceChallenge, type PresenceDeclaration, type PresenceProof, type PresenceReceipt, type PresenceStatus, type PresenceVerifyResult, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type RegisteredChainConfig, type ResponseContract, ResponseObserver, type ResponseObserverContext, type Revocation, type RevocationTargetType, RiskDecision, type RiskEvaluation, type RiskSignal, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, type ThreadState, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, type Writ, type WritBody, type WritHead, type WritMeta, type WritSignature, type WritValidationResult, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeGrant, canonicalizeObservation, canonicalizeWrit, index$9 as cce, classifyIntent, createObservation, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, deriveAnchorReflection, encVarint, encodeAxis1Frame, encodeAxisTlvDto, encodeQueueMessage, endStage, index$5 as engine, executeCcePipeline, extractDtoSchema, finalizeObservation, getAxisExecutionContext, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, mergeAxisExecutionContext, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, recordSensor, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, startStage, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse, withAxisExecutionContext };
+export { ATS1_HDR, ATS1_SCHEMA, AXIS_EXECUTION_CONTEXT_KEY, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, type Axis1DecodedFrame, type Axis1FrameToEncode, type AxisAlg$1 as AxisAlg, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, type AxisCapsuleRef, type AxisChainEncryption, type AxisChainEnvelope, AxisChainExecutor, type AxisChainRequest, type AxisChainResult, type AxisChainStatus, type AxisChainStep, type AxisChainStepResult, type AxisChainStepStatus, AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, type AxisExecutionContext, type AxisExecutionMode, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, AxisFrame$2 as AxisFrame, type AxisHandler, type AxisHandlerInit, AxisIdDto, type AxisIntentEnvelope, type AxisIntentObserver, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame$1 as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisKeyExchangeRef, type AxisObservation, type AxisObservedContext, type AxisObserverBinding, type AxisObserverBindingOptions, type AxisObserverContext, type AxisObserverDefinition, type AxisObserverEvent, type AxisObserverRef, type AxisObserverRegistration, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, CAPSULE_POLICY_METADATA_KEY, CCE_ERROR, CCE_PROTOCOL_VERSION, CHAIN_METADATA_KEY, type Capability, type CapsuleMode, CapsulePolicy, type CapsulePolicyOptions, type CapsuleScopeMode, type CceCapsuleClaims as CceCapsuleClaimsType, CceError, type CceExecutionContext as CceExecutionContextType, type CceHandler, type CceHandlerContext, type CceHandlerResult, type CcePipelineConfig, type CcePipelineResult, type CcePolicyContext, type CcePolicyDecision, type CcePolicyEvaluator, type CceRequestEnvelope as CceRequestEnvelopeType, type CceResponseEnvelope as CceResponseEnvelopeType, type CceWitnessRecord as CceWitnessRecordType, Chain, type ChainOptions, type ChainResult, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, FALLBACK_CONTRACT, type Grant, type GrantCapability, type GrantMeta, type GrantStatus, type GrantType, type GrantValidationResult, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, Intent, IntentBody, type IntentDefinition, type IntentKind, type IntentOptions, type IntentRoute, IntentRouter, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type LoomReceipt, type LoomValidationResult, OBSERVER_BINDINGS_KEY, OBSERVER_METADATA_KEY, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, Observer, ObserverDiscoveryService, ObserverDispatcherService, ObserverRegistry, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, type PresenceChallenge, type PresenceDeclaration, type PresenceProof, type PresenceReceipt, type PresenceStatus, type PresenceVerifyResult, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type RegisteredChainConfig, type ResponseContract, ResponseObserver, type ResponseObserverContext, type Revocation, type RevocationTargetType, RiskDecision, type RiskEvaluation, type RiskSignal, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, type ThreadState, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, type Writ, type WritBody, type WritHead, type WritMeta, type WritSignature, type WritValidationResult, axis1SigningBytes, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeGrant, canonicalizeObservation, canonicalizeWrit, index$9 as cce, classifyIntent, createObservation, index$8 as crypto, decodeAxis1Frame, decodeQueueMessage, index$7 as decorators, deriveAnchorReflection, encVarint, encodeAxis1Frame, encodeAxisTlvDto, encodeQueueMessage, endStage, index$5 as engine, executeCcePipeline, extractDtoSchema, finalizeObservation, getAxisExecutionContext, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isTimestampValid, index$4 as loom, mergeAxisExecutionContext, nonce16, normalizeSensorDecision, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, recordSensor, resolveTimeout, index$3 as schemas, index$2 as security, sensitivityName, index$1 as sensors, stableJsonStringify, startStage, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, utf8, index as utils, validateFrameShape, varintU, verifyResponse, withAxisExecutionContext };