@nextera.one/axis-server-sdk 2.2.1 → 2.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/axis-sensor-GBEI3Fab.d.mts +209 -0
- package/dist/axis-sensor-GBEI3Fab.d.ts +209 -0
- package/dist/cce/index.d.mts +162 -0
- package/dist/cce/index.d.ts +162 -0
- package/dist/cce/index.js +1502 -0
- package/dist/cce/index.js.map +1 -0
- package/dist/cce/index.mjs +1442 -0
- package/dist/cce/index.mjs.map +1 -0
- package/dist/cce-pipeline-B-zUBHo3.d.mts +294 -0
- package/dist/cce-pipeline-DbGBSsCG.d.ts +294 -0
- package/dist/idel/index.d.mts +24 -0
- package/dist/idel/index.d.ts +24 -0
- package/dist/idel/index.js +306 -0
- package/dist/idel/index.js.map +1 -0
- package/dist/idel/index.mjs +279 -0
- package/dist/idel/index.mjs.map +1 -0
- package/dist/idel.types-DuUAcOnQ.d.mts +83 -0
- package/dist/idel.types-DuUAcOnQ.d.ts +83 -0
- package/dist/index-B2G6cbRL.d.mts +824 -0
- package/dist/index-DbSxdR0f.d.ts +824 -0
- package/dist/index-_S4fmVUJ.d.mts +501 -0
- package/dist/index-l3Hhirqb.d.ts +501 -0
- package/dist/index.d.mts +91 -1891
- package/dist/index.d.ts +91 -1891
- package/dist/index.js +9339 -5123
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +10326 -5816
- package/dist/index.mjs.map +1 -1
- package/dist/needle/index.d.mts +4 -0
- package/dist/needle/index.d.ts +4 -0
- package/dist/needle/index.js +3499 -0
- package/dist/needle/index.js.map +1 -0
- package/dist/needle/index.mjs +3528 -0
- package/dist/needle/index.mjs.map +1 -0
- package/dist/sensors/index.d.mts +5 -0
- package/dist/sensors/index.d.ts +5 -0
- package/dist/sensors/index.js +12860 -0
- package/dist/sensors/index.js.map +1 -0
- package/dist/sensors/index.mjs +12928 -0
- package/dist/sensors/index.mjs.map +1 -0
- package/dist/timeline/index.d.mts +54 -0
- package/dist/timeline/index.d.ts +54 -0
- package/dist/timeline/index.js +389 -0
- package/dist/timeline/index.js.map +1 -0
- package/dist/timeline/index.mjs +362 -0
- package/dist/timeline/index.mjs.map +1 -0
- package/dist/timeline.types-Cn0aqbUj.d.mts +125 -0
- package/dist/timeline.types-Cn0aqbUj.d.ts +125 -0
- package/package.json +28 -10
package/dist/index.d.ts
CHANGED
|
@@ -1,354 +1,61 @@
|
|
|
1
|
-
import
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
import {
|
|
1
|
+
import { C as ChainOptions, A as AxisIntentSensorRef, I as IntentTlvField, T as TlvValidatorFn, a as IntentRouter, O as ObserverDispatcherService, b as AxisChainEnvelope, c as AxisChainResult, d as AxisCapsuleRef, e as AxisChainStep, f as AxisContext, S as SensorRegistry } from './index-DbSxdR0f.js';
|
|
2
|
+
export { g as AXIS_ANONYMOUS_KEY, h as AXIS_META_KEY, i as AXIS_PUBLIC_KEY, j as AXIS_RATE_LIMIT_KEY, k as AccessProfileResolverSensor, l as Axis, m as AxisAnonymous, n as AxisChainEncryption, o as AxisChainRequest, p as AxisChainStatus, q as AxisChainStepResult, r as AxisChainStepStatus, s as AxisEffect, t as AxisExecutionMode, u as AxisIntentEnvelope, v as AxisIntentObserver, w as AxisIntentSensorOptions, x as AxisKeyExchangeRef, y as AxisLawArticleSummary, z as AxisLawDecision, B as AxisLawEvaluationContext, D as AxisLawEvaluationResult, E as AxisLawEvaluator, F as AxisObserverBinding, G as AxisObserverBindingOptions, H as AxisObserverContext, J as AxisObserverDefinition, K as AxisObserverEvent, L as AxisObserverRef, M as AxisObserverRegistration, N as AxisPublic, P as AxisRateLimit, Q as AxisRateLimitConfig, R as BodyBudgetSensor, U as CAPSULE_POLICY_METADATA_KEY, V as CONTRACT_METADATA_KEY, W as CapabilityEnforcementSensor, X as Capsule, Y as CapsulePolicy, Z as CapsulePolicyOptions, _ as CapsuleScopeMode, $ as ChunkHashSensor, a0 as Contract, a1 as DEFAULT_CONTRACTS, a2 as EntropySensor, a3 as ExecutionContract, a4 as ExecutionTimeoutSensor, a5 as FALLBACK_CONTRACT, a6 as FrameBudgetSensor, a7 as FrameHeaderSanitySensor, a8 as HeaderTLVLimitSensor, a9 as INTENT_METADATA_KEY, aa as INTENT_ROUTES_KEY, ab as Intent, ac as IntentAllowlistSensor, ad as IntentKind, ae as IntentOptions, af as IntentRegistrySensor, ag as IntentRoute, ah as LawEvaluationSensor, ai as LawEvaluationSensorOptions, aj as OBSERVER_BINDINGS_KEY, ak as OBSERVER_METADATA_KEY, al as Observer, am as ObserverRegistry, an as ProofPresenceSensor, ao as ProtocolStrictSensor, ap as REQUIRED_PROOF_METADATA_KEY, aq as ReceiptPolicySensor, ar as RegisteredChainConfig, as as RequiredProof, at as RequiredProofKind, au as RiskDecision, av as RiskEvaluation, aw as RiskGateSensor, ax as RiskGateSensorOptions, ay as RiskSignal, az as RiskSignalCollector, aA as SENSITIVITY_METADATA_KEY, aB as SchemaValidationSensor, aC as Sensitivity, aD as StreamScopeSensor, aE as TLVParseSensor, aF as TLV_FIELDS_KEY, aG as TLV_VALIDATORS_KEY, aH as TickAuthCapsuleRef, aI as TickAuthSensor, aJ as TickAuthSensorOptions, aK as TickAuthVerifier, aL as TlvEnum, aM as TlvField, aN as TlvFieldKind, aO as TlvFieldMeta, aP as TlvFieldOptions, aQ as TlvMinLen, aR as TlvRange, aS as TlvUtf8Pattern, aT as TlvValidate, aU as TlvValidatorMeta, aV as TpsSensor, aW as TpsSensorOptions, aX as VarintHardeningSensor, aY as Witness, aZ as buildAxisLawEvaluationContext } from './index-DbSxdR0f.js';
|
|
3
|
+
import { AxisFrame } from '@nextera.one/axis-protocol';
|
|
4
|
+
export { AXIS_MAGIC, AXIS_VERSION, AxisBinaryFrame, AxisFrame, TLV as AxisTlvType, ERR_BAD_SIGNATURE, ERR_CONTRACT_VIOLATION, ERR_INVALID_PACKET, ERR_REPLAY_DETECTED, FLAG_BODY_TLV, FLAG_CHAIN_REQ, FLAG_HAS_WITNESS, MAX_BODY_LEN, MAX_FRAME_LEN, MAX_HDR_LEN, MAX_SIG_LEN, NCERT_ALG, NCERT_EXP, NCERT_ISSUER_KID, NCERT_KID, NCERT_NBF, NCERT_NODE_ID, NCERT_PAYLOAD, NCERT_PUB, NCERT_SCOPE, NCERT_SIG, PROOF_CAPSULE, PROOF_JWT, PROOF_LOOM, PROOF_MTLS, PROOF_NONE, PROOF_WITNESS, TLV, TLV_ACTOR_ID, TLV_AUD, TLV_BODY_ARR, TLV_BODY_OBJ, TLV_CAPSULE, TLV_EFFECT, TLV_ERROR_CODE, TLV_ERROR_MSG, TLV_INDEX, TLV_INTENT, TLV_KID, TLV_LOOM_PRESENCE_ID, TLV_LOOM_THREAD_HASH, TLV_LOOM_WRIT, TLV_NODE, TLV_NODE_CERT_HASH, TLV_NODE_KID, TLV_NONCE, TLV_OFFSET, TLV_OK, TLV_PID, TLV_LOOM_PRESENCE_ID as TLV_PRESENCE_ID, TLV_PREV_HASH, TLV_PROOF_REF, TLV_PROOF_TYPE, TLV_REALM, TLV_RECEIPT_HASH, TLV_RID, TLV_SHA256_CHUNK, TLV_LOOM_THREAD_HASH as TLV_THREAD_HASH, TLV_TRACE_ID, TLV_TS, TLV_UPLOAD_ID, TLV_LOOM_WRIT as TLV_WRIT, decodeArray, decodeFrame, decodeObject, decodeTLVs, decodeTLVsList, decodeVarint, encodeFrame, encodeTLVs, encodeVarint, getSignTarget, varintLength } from '@nextera.one/axis-protocol';
|
|
5
|
+
import { A as AxisObservation, L as LoomReceipt, T as ThreadState, W as WritValidationResult, G as Grant, a as GrantCapability, P as PresenceDeclaration, b as PresenceChallenge, c as Writ, R as Revocation, d as WritBody, e as WritMeta, f as PresenceReceipt, g as GrantStatus, h as PresenceStatus, i as PresenceProof, j as GrantValidationResult, k as PresenceVerifyResult } from './index-l3Hhirqb.js';
|
|
6
|
+
export { l as Anomaly, m as AnomalyLevel, E as ExpectedOutcome, F as Fabric, n as FabricCell, o as FabricDiff, p as FabricDiffEntry, q as FabricDiffKind, r as FabricEffect, s as FabricEffectResolver, t as FabricQuery, u as GrantMeta, v as GrantType, I as InMemoryPatternStore, K as Knot, w as KnotBreakRequest, x as KnotError, y as KnotStatus, z as KnotType, B as KnotValidationResult, C as LoomValidationResult, N as Needle, D as NeedleError, H as NeedleHandler, J as NeedleHandlerContext, M as NeedleHandlerResult, O as NeedlePhase, Q as NeedlePipelineConfig, S as NeedlePipelineResult, U as ObservationSensor, V as ObservationStage, X as ObservedDeed, Y as Pattern, Z as PatternConfidence, _ as PatternKind, $ as PatternMatch, a0 as PatternPrediction, a1 as PatternSignature, a2 as PatternStore, a3 as RevocationTargetType, a4 as Stitch, a5 as StitchKind, a6 as Thread, a7 as TruthStatus, a8 as TruthVerdict, a9 as WritHead, aa as WritSignature, ab as addStitchToKnot, ac as applyStitch, ad as assembleNeedle, ae as breakKnot, af as canonicalizeGrant, ag as canonicalizeWrit, ah as createFabric, ai as createObservation, aj as deriveAnchorReflection, ak as detectAnomalies, al as detectKnotPatterns, am as detectSequencePatterns, an as diffFabrics, ao as endStage, ap as finalizeObservation, aq as findKnotsForStitch, ar as forkFromKnot, as as formStitch, at as getDecisionPoints, au as getFabricValue, av as getIrreversibleKnots, aw as isKnotOpen, ax as isPointOfNoReturn, ay as lockCells, az as matchPatterns, aA as openKnot, aB as projectAt, aC as queryFabric, aD as recordOccurrence, aE as recordSensor, aF as runNeedlePipeline, aG as scoreTruth, aH as startStage, aI as tieKnot, aJ as validateKnot, aK as verifyObservation, aL as weave } from './index-l3Hhirqb.js';
|
|
6
7
|
export { AxisError, AxisFrameZ, computeReceiptHash, computeSignaturePayload, generateEd25519KeyPair, sha256, signFrame, verifyFrameSignature } from './core/index.js';
|
|
7
8
|
export { Axis1FrameToEncode, encodeAxis1Frame } from './codec/axis1.encode.js';
|
|
8
9
|
export { axis1SigningBytes } from './codec/axis1.signing.js';
|
|
10
|
+
import { S as SensorInput, a as SensorDecision } from './axis-sensor-GBEI3Fab.js';
|
|
11
|
+
export { b as AxisAlg, c as AxisCapsule, d as AxisCapsuleConstraints, e as AxisCapsulePayload, f as AxisJsonAlg, g as AxisJsonFrame, h as AxisJsonResponse, i as AxisJsonSig, j as AxisObservedContext, k as AxisPacket, l as AxisPostSensor, m as AxisPreSensor, n as AxisRequestContext, A as AxisSensor, o as AxisSensorInit, p as AxisSig, C as CapsuleMode, D as Decision, K as KeyStatus, q as SensorDecisions, r as SensorMinifiedDecision, s as SensorPhaseMetadata, t as normalizeSensorDecision } from './axis-sensor-GBEI3Fab.js';
|
|
9
12
|
import { Axis1DecodedFrame } from './types/frame.js';
|
|
10
13
|
export { decodeAxis1Frame } from './types/frame.js';
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
scope?: string | string[];
|
|
18
|
-
scopeMode?: 'chain' | 'step' | 'chain+step';
|
|
19
|
-
proofRequired?: boolean;
|
|
20
|
-
metadata?: Record<string, unknown>;
|
|
21
|
-
}
|
|
22
|
-
interface AxisKeyExchangeRef {
|
|
23
|
-
profile?: string;
|
|
24
|
-
sessionId?: string;
|
|
25
|
-
clientKid?: string;
|
|
26
|
-
serverKid?: string;
|
|
27
|
-
algorithm?: string;
|
|
28
|
-
derivedKeyRef?: string;
|
|
29
|
-
required?: boolean;
|
|
30
|
-
metadata?: Record<string, unknown>;
|
|
31
|
-
}
|
|
32
|
-
interface AxisIntentEnvelope<TPayload = unknown> {
|
|
33
|
-
intent: string;
|
|
34
|
-
handler?: string;
|
|
35
|
-
payload: TPayload;
|
|
36
|
-
capsule?: AxisCapsuleRef;
|
|
37
|
-
keyExchange?: AxisKeyExchangeRef;
|
|
38
|
-
observerTags?: string[];
|
|
39
|
-
proofRequired?: boolean;
|
|
40
|
-
metadata?: Record<string, unknown>;
|
|
41
|
-
}
|
|
42
|
-
interface AxisChainStep<TInput = unknown> {
|
|
43
|
-
stepId: string;
|
|
44
|
-
intent: string;
|
|
45
|
-
handler?: string;
|
|
46
|
-
input?: TInput;
|
|
47
|
-
dependsOn?: string[];
|
|
48
|
-
onSuccess?: string[];
|
|
49
|
-
onFailure?: string[];
|
|
50
|
-
capsuleScope?: string | string[];
|
|
51
|
-
observerTags?: string[];
|
|
52
|
-
proofRequired?: boolean;
|
|
53
|
-
keyExchange?: AxisKeyExchangeRef;
|
|
54
|
-
metadata?: Record<string, unknown>;
|
|
55
|
-
}
|
|
56
|
-
interface AxisChainEncryption {
|
|
57
|
-
enabled?: boolean;
|
|
58
|
-
profile?: string;
|
|
59
|
-
keyExchange?: AxisKeyExchangeRef;
|
|
60
|
-
}
|
|
61
|
-
interface AxisChainEnvelope<TInput = unknown> {
|
|
62
|
-
chainId: string;
|
|
63
|
-
subject?: string;
|
|
64
|
-
issuer?: string;
|
|
65
|
-
issuedAtTps?: string | number;
|
|
66
|
-
expiresAtTps?: string | number;
|
|
67
|
-
mode: AxisExecutionMode;
|
|
68
|
-
signature?: string;
|
|
69
|
-
encryption?: AxisChainEncryption;
|
|
70
|
-
capsule?: AxisCapsuleRef;
|
|
71
|
-
keyExchange?: AxisKeyExchangeRef;
|
|
72
|
-
observerTags?: string[];
|
|
73
|
-
dynamic?: boolean;
|
|
74
|
-
metadata?: Record<string, unknown>;
|
|
75
|
-
steps: Array<AxisChainStep<TInput>>;
|
|
76
|
-
}
|
|
77
|
-
interface AxisChainRequest<TInput = unknown, TCapsule = Record<string, unknown>> {
|
|
78
|
-
envelope: AxisChainEnvelope<TInput>;
|
|
79
|
-
capsule?: TCapsule;
|
|
80
|
-
actorId?: string;
|
|
81
|
-
}
|
|
82
|
-
type AxisChainStepStatus = 'SUCCEEDED' | 'FAILED' | 'BLOCKED' | 'SKIPPED';
|
|
83
|
-
interface AxisChainStepResult<TOutput = unknown> {
|
|
84
|
-
stepId: string;
|
|
85
|
-
intent: string;
|
|
86
|
-
status: AxisChainStepStatus;
|
|
87
|
-
effect?: string;
|
|
88
|
-
output?: TOutput;
|
|
89
|
-
error?: string;
|
|
90
|
-
dependsOn?: string[];
|
|
91
|
-
startedAt: number;
|
|
92
|
-
finishedAt: number;
|
|
93
|
-
proofHash?: string;
|
|
94
|
-
observerTags?: string[];
|
|
95
|
-
metadata?: Record<string, unknown>;
|
|
96
|
-
}
|
|
97
|
-
type AxisChainStatus = 'SUCCEEDED' | 'FAILED' | 'PARTIAL';
|
|
98
|
-
interface AxisChainResult<TOutput = unknown> {
|
|
99
|
-
chainId: string;
|
|
100
|
-
mode: AxisExecutionMode;
|
|
101
|
-
status: AxisChainStatus;
|
|
102
|
-
completedSteps: number;
|
|
103
|
-
failedSteps: number;
|
|
104
|
-
blockedSteps: number;
|
|
105
|
-
skippedSteps: number;
|
|
106
|
-
startedAt: number;
|
|
107
|
-
finishedAt: number;
|
|
108
|
-
results: Array<AxisChainStepResult<TOutput>>;
|
|
109
|
-
rollback?: {
|
|
110
|
-
supported: boolean;
|
|
111
|
-
attempted: boolean;
|
|
112
|
-
reason?: string;
|
|
113
|
-
};
|
|
114
|
-
metadata?: Record<string, unknown>;
|
|
115
|
-
}
|
|
116
|
-
interface ChainOptions {
|
|
117
|
-
mode?: AxisExecutionMode;
|
|
118
|
-
allowPartial?: boolean;
|
|
119
|
-
dynamic?: boolean;
|
|
120
|
-
proofRequired?: boolean;
|
|
121
|
-
capsuleScope?: string | string[];
|
|
122
|
-
observerTags?: string[];
|
|
123
|
-
keyExchangeRequired?: boolean;
|
|
124
|
-
}
|
|
125
|
-
interface RegisteredChainConfig extends ChainOptions {
|
|
126
|
-
enabled: boolean;
|
|
127
|
-
}
|
|
14
|
+
export { InMemoryTimelineStore, TimelineEngine, TimelineStore } from './timeline/index.js';
|
|
15
|
+
export { F as ForkRequest, a as ForkResult, R as ReplayDifference, b as ReplayRequest, c as ReplayResult, S as SimulatedSideEffect, d as SimulationRequest, e as SimulationResult, f as StateSnapshot, T as TimelineBranch, g as TimelineComparison, h as TimelineDomain, i as TimelineEvent, j as TimelineEventStatus, k as TimelineHandler, l as TimelineHandlerContext, m as TimelineHandlerResult } from './timeline.types-Cn0aqbUj.js';
|
|
16
|
+
export { e as CCE_ERROR, h as CCE_PROTOCOL_VERSION, C as CceCapsuleClaimsType, q as CceError, a as CceExecutionContextType, s as CceHandler, t as CceHandlerContext, u as CceHandlerResult, x as CcePipelineConfig, y as CcePipelineResult, z as CcePolicyContext, A as CcePolicyDecision, B as CcePolicyEvaluator, b as CceRequestEnvelopeType, D as CceResponseEnvelopeType, I as CceWitnessRecordType, O as executeCcePipeline } from './cce-pipeline-DbGBSsCG.js';
|
|
17
|
+
export { IdelCompiler, IdelSchemaRegistry } from './idel/index.js';
|
|
18
|
+
export { A as AlternativeIntent, C as ClarificationQuestion, a as CompilationError, b as CompilationResult, c as CompiledIntent, d as ConstraintKind, I as IntentConstraint, e as IntentParamSchema, f as IntentProposal, g as IntentRisk, h as IntentSchema, R as RiskLevel } from './idel.types-DuUAcOnQ.js';
|
|
19
|
+
import 'zod';
|
|
128
20
|
|
|
129
21
|
declare const CHAIN_METADATA_KEY = "axis:chain";
|
|
130
22
|
declare function Chain(options?: ChainOptions): MethodDecorator;
|
|
131
23
|
|
|
132
|
-
declare const CAPSULE_POLICY_METADATA_KEY = "axis:capsule:policy";
|
|
133
|
-
type CapsuleScopeMode = "all" | "any";
|
|
134
|
-
interface CapsulePolicyOptions {
|
|
135
|
-
required?: boolean;
|
|
136
|
-
scopes?: string | string[];
|
|
137
|
-
scopeMode?: CapsuleScopeMode;
|
|
138
|
-
intentBound?: boolean;
|
|
139
|
-
allowCapsuleRef?: boolean;
|
|
140
|
-
}
|
|
141
|
-
declare function CapsulePolicy(options?: CapsulePolicyOptions): ClassDecorator & MethodDecorator;
|
|
142
|
-
|
|
143
|
-
interface ExecutionContract {
|
|
144
|
-
maxDbWrites: number;
|
|
145
|
-
maxDbReads?: number;
|
|
146
|
-
maxExternalCalls: number;
|
|
147
|
-
maxTimeMs: number;
|
|
148
|
-
allowedEffects: string[];
|
|
149
|
-
maxMemoryMb?: number;
|
|
150
|
-
}
|
|
151
|
-
declare const DEFAULT_CONTRACTS: Record<string, ExecutionContract>;
|
|
152
|
-
declare const FALLBACK_CONTRACT: ExecutionContract;
|
|
153
|
-
|
|
154
|
-
declare const ProofKindZ: z.ZodEnum<{
|
|
155
|
-
NONE: "NONE";
|
|
156
|
-
CAPSULE: "CAPSULE";
|
|
157
|
-
PASSPORT: "PASSPORT";
|
|
158
|
-
MTLS: "MTLS";
|
|
159
|
-
JWT: "JWT";
|
|
160
|
-
}>;
|
|
161
|
-
type ProofKind = z.infer<typeof ProofKindZ>;
|
|
162
|
-
declare const SensitivityLevelZ: z.ZodEnum<{
|
|
163
|
-
LOW: "LOW";
|
|
164
|
-
MEDIUM: "MEDIUM";
|
|
165
|
-
HIGH: "HIGH";
|
|
166
|
-
CRITICAL: "CRITICAL";
|
|
167
|
-
}>;
|
|
168
|
-
type SensitivityLevel = z.infer<typeof SensitivityLevelZ>;
|
|
169
|
-
declare enum ProofType {
|
|
170
|
-
CAPSULE = 1,
|
|
171
|
-
JWT = 2,
|
|
172
|
-
MTLS_ID = 3,
|
|
173
|
-
DEVICE_SE = 4,
|
|
174
|
-
WITNESS_SIG = 5
|
|
175
|
-
}
|
|
176
|
-
declare const AxisContextZ: z.ZodObject<{
|
|
177
|
-
pid: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
|
|
178
|
-
ts: z.ZodBigInt;
|
|
179
|
-
intent: z.ZodString;
|
|
180
|
-
actorId: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
|
|
181
|
-
proofType: z.ZodEnum<typeof ProofType>;
|
|
182
|
-
proofRef: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
|
|
183
|
-
nonce: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
|
|
184
|
-
ip: z.ZodString;
|
|
185
|
-
nodeCertHash: z.ZodOptional<z.ZodString>;
|
|
186
|
-
capsule: z.ZodOptional<z.ZodObject<{
|
|
187
|
-
id: z.ZodString;
|
|
188
|
-
claims: z.ZodObject<{
|
|
189
|
-
capsuleId: z.ZodString;
|
|
190
|
-
allowIntents: z.ZodArray<z.ZodString>;
|
|
191
|
-
limits: z.ZodOptional<z.ZodObject<{
|
|
192
|
-
maxBodyBytes: z.ZodOptional<z.ZodNumber>;
|
|
193
|
-
}, z.z.core.$strip>>;
|
|
194
|
-
scopes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
|
|
195
|
-
}, z.z.core.$strip>;
|
|
196
|
-
issuedAt: z.ZodNumber;
|
|
197
|
-
expiresAt: z.ZodNumber;
|
|
198
|
-
tier: z.ZodEnum<{
|
|
199
|
-
FREE: "FREE";
|
|
200
|
-
STANDARD: "STANDARD";
|
|
201
|
-
PREMIUM: "PREMIUM";
|
|
202
|
-
}>;
|
|
203
|
-
}, z.z.core.$strip>>;
|
|
204
|
-
passport: z.ZodOptional<z.ZodObject<{
|
|
205
|
-
id: z.ZodString;
|
|
206
|
-
public_key: z.ZodCustom<Buffer<ArrayBufferLike>, Buffer<ArrayBufferLike>>;
|
|
207
|
-
status: z.ZodEnum<{
|
|
208
|
-
ACTIVE: "ACTIVE";
|
|
209
|
-
REVOKED: "REVOKED";
|
|
210
|
-
EXPIRED: "EXPIRED";
|
|
211
|
-
PENDING: "PENDING";
|
|
212
|
-
}>;
|
|
213
|
-
issuedAt: z.ZodNumber;
|
|
214
|
-
expiresAt: z.ZodOptional<z.ZodNumber>;
|
|
215
|
-
}, z.z.core.$strip>>;
|
|
216
|
-
meter: z.ZodOptional<z.ZodAny>;
|
|
217
|
-
}, z.z.core.$strip>;
|
|
218
|
-
type AxisContext$1 = z.infer<typeof AxisContextZ>;
|
|
219
|
-
|
|
220
|
-
declare const AXIS_META_KEY = "axis:axis";
|
|
221
|
-
declare const SENSITIVITY_METADATA_KEY = "axis:sensitivity";
|
|
222
|
-
declare const CONTRACT_METADATA_KEY = "axis:contract";
|
|
223
|
-
declare const REQUIRED_PROOF_METADATA_KEY = "axis:required_proof";
|
|
224
|
-
type RequiredProofKind = ProofKind | "WITNESS";
|
|
225
|
-
declare function Sensitivity(level: SensitivityLevel): ClassDecorator & MethodDecorator;
|
|
226
|
-
declare function Contract(options: Partial<ExecutionContract>): ClassDecorator & MethodDecorator;
|
|
227
|
-
declare function RequiredProof(proofs: [RequiredProofKind, ...RequiredProofKind[]]): ClassDecorator & MethodDecorator;
|
|
228
|
-
declare function Capsule(): ClassDecorator & MethodDecorator;
|
|
229
|
-
declare function Witness(): ClassDecorator & MethodDecorator;
|
|
230
|
-
declare function Axis(): ClassDecorator;
|
|
231
|
-
declare const AXIS_PUBLIC_KEY = "axis:public";
|
|
232
|
-
declare function AxisPublic(): ClassDecorator & MethodDecorator;
|
|
233
|
-
declare const AXIS_ANONYMOUS_KEY = "axis:anonymous";
|
|
234
|
-
declare function AxisAnonymous(): ClassDecorator & MethodDecorator;
|
|
235
|
-
declare const AXIS_RATE_LIMIT_KEY = "axis:rateLimit";
|
|
236
|
-
interface AxisRateLimitConfig {
|
|
237
|
-
max: number;
|
|
238
|
-
windowSec: number;
|
|
239
|
-
key?: string;
|
|
240
|
-
}
|
|
241
|
-
declare function AxisRateLimit(config: AxisRateLimitConfig): MethodDecorator;
|
|
242
|
-
|
|
243
24
|
declare const HANDLER_METADATA_KEY = "axis:handler";
|
|
244
25
|
declare function Handler(intent?: string): ClassDecorator;
|
|
245
26
|
|
|
246
|
-
declare const INTENT_METADATA_KEY = "axis:intent";
|
|
247
|
-
declare const INTENT_ROUTES_KEY = "axis:intent_routes";
|
|
248
|
-
type IntentKind = "create" | "read" | "update" | "delete" | "action";
|
|
249
|
-
type AxisIntentSensorRef = string | Function;
|
|
250
|
-
interface AxisIntentSensorOptions {
|
|
251
|
-
is?: AxisIntentSensorRef[];
|
|
252
|
-
}
|
|
253
|
-
interface IntentTlvField {
|
|
254
|
-
name: string;
|
|
255
|
-
tag: number;
|
|
256
|
-
kind: "utf8" | "u64" | "bytes" | "bytes16" | "bool" | "obj" | "arr";
|
|
257
|
-
required?: boolean;
|
|
258
|
-
maxLen?: number;
|
|
259
|
-
max?: string;
|
|
260
|
-
scope?: "header" | "body";
|
|
261
|
-
}
|
|
262
|
-
interface IntentRoute extends AxisIntentSensorOptions {
|
|
263
|
-
action: string;
|
|
264
|
-
methodName: string | symbol;
|
|
265
|
-
absolute?: boolean;
|
|
266
|
-
frame?: boolean;
|
|
267
|
-
kind?: IntentKind;
|
|
268
|
-
sensitivity?: SensitivityLevel;
|
|
269
|
-
chain?: boolean | ChainOptions;
|
|
270
|
-
bodyProfile?: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
|
|
271
|
-
tlv?: IntentTlvField[];
|
|
272
|
-
dto?: Function;
|
|
273
|
-
}
|
|
274
|
-
interface IntentOptions extends AxisIntentSensorOptions {
|
|
275
|
-
kind?: IntentKind;
|
|
276
|
-
sensitivity?: SensitivityLevel;
|
|
277
|
-
absolute?: boolean;
|
|
278
|
-
frame?: boolean;
|
|
279
|
-
chain?: boolean | ChainOptions;
|
|
280
|
-
bodyProfile?: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
|
|
281
|
-
tlv?: IntentTlvField[];
|
|
282
|
-
dto?: Function;
|
|
283
|
-
decoder?: (buf: Buffer) => any;
|
|
284
|
-
}
|
|
285
|
-
declare function Intent(action: string, options?: IntentOptions): MethodDecorator;
|
|
286
|
-
|
|
287
27
|
declare const INTENT_BODY_KEY = "axis:intent:body";
|
|
288
28
|
declare function IntentBody(decoder: (buf: Buffer) => any): MethodDecorator;
|
|
289
29
|
|
|
290
30
|
declare const INTENT_SENSORS_KEY = "axis:intent:sensors";
|
|
291
31
|
declare function IntentSensors(sensors: AxisIntentSensorRef[]): MethodDecorator;
|
|
292
32
|
|
|
293
|
-
declare const OBSERVER_METADATA_KEY = "axis:observer";
|
|
294
|
-
declare const OBSERVER_BINDINGS_KEY = "axis:observer:bindings";
|
|
295
|
-
type AxisObserverRef = string | Function;
|
|
296
|
-
interface AxisObserverDefinition {
|
|
297
|
-
name?: string;
|
|
298
|
-
tags?: string[];
|
|
299
|
-
events?: AxisObserverEvent[];
|
|
300
|
-
intents?: string[];
|
|
301
|
-
handlers?: string[];
|
|
302
|
-
}
|
|
303
|
-
interface AxisObserverBinding {
|
|
304
|
-
refs: AxisObserverRef[];
|
|
305
|
-
tags?: string[];
|
|
306
|
-
events?: AxisObserverEvent[];
|
|
307
|
-
}
|
|
308
|
-
interface AxisObserverBindingOptions {
|
|
309
|
-
use: AxisObserverRef | AxisObserverRef[];
|
|
310
|
-
tags?: string[];
|
|
311
|
-
events?: AxisObserverEvent[];
|
|
312
|
-
}
|
|
313
|
-
declare function Observer(input?: AxisObserverDefinition | AxisObserverBindingOptions | AxisObserverRef | AxisObserverRef[]): ClassDecorator & MethodDecorator;
|
|
314
|
-
|
|
315
33
|
declare const HANDLER_SENSORS_KEY = "axis:handler:sensors";
|
|
316
34
|
declare function HandlerSensors(sensors: AxisIntentSensorRef[]): ClassDecorator;
|
|
317
35
|
|
|
318
36
|
declare const SENSOR_METADATA_KEY = "axis:sensor";
|
|
319
|
-
type SensorPhase =
|
|
37
|
+
type SensorPhase = "PRE_DECODE" | "POST_DECODE";
|
|
320
38
|
interface SensorOptions {
|
|
321
39
|
phase?: SensorPhase;
|
|
322
40
|
}
|
|
323
41
|
declare function Sensor(options?: SensorOptions): ClassDecorator;
|
|
324
42
|
|
|
325
|
-
declare const
|
|
326
|
-
|
|
327
|
-
type
|
|
328
|
-
interface
|
|
329
|
-
|
|
330
|
-
|
|
331
|
-
maxLen?: number;
|
|
332
|
-
max?: string;
|
|
333
|
-
scope?: 'header' | 'body';
|
|
43
|
+
declare const PRIORITY_ORDER_METADATA_KEY = "axis:priority-order";
|
|
44
|
+
type AxisPriorityLevel = "HIGH" | "MEDIUM" | "LOW";
|
|
45
|
+
type AxisPriorityLevelInput = AxisPriorityLevel | "high" | "medium" | "low" | "High" | "Medium" | "Low";
|
|
46
|
+
interface PriorityOrderDefinition {
|
|
47
|
+
priority: AxisPriorityLevel;
|
|
48
|
+
order: number;
|
|
334
49
|
}
|
|
335
|
-
interface
|
|
336
|
-
|
|
337
|
-
|
|
338
|
-
options: TlvFieldOptions;
|
|
339
|
-
}
|
|
340
|
-
type TlvValidatorFn = (value: Uint8Array, property: string) => string | null | undefined;
|
|
341
|
-
interface TlvValidatorMeta {
|
|
342
|
-
property: string;
|
|
343
|
-
tag: number;
|
|
344
|
-
validators: TlvValidatorFn[];
|
|
50
|
+
interface PriorityOrderOptions {
|
|
51
|
+
priority?: AxisPriorityLevelInput;
|
|
52
|
+
order?: number;
|
|
345
53
|
}
|
|
346
|
-
declare function
|
|
347
|
-
declare function
|
|
348
|
-
declare function
|
|
349
|
-
declare function
|
|
350
|
-
declare
|
|
351
|
-
declare function TlvRange(min: bigint, max: bigint, message?: string): PropertyDecorator;
|
|
54
|
+
declare function getPriorityOrder(target: Function): PriorityOrderDefinition | null;
|
|
55
|
+
declare function comparePriorityOrder(left: PriorityOrderDefinition, right: PriorityOrderDefinition): number;
|
|
56
|
+
declare function getPriorityOrderedTargets(targets?: Iterable<Function>): Function[];
|
|
57
|
+
declare function PriorityOrder(priorityOrOptions?: AxisPriorityLevelInput | PriorityOrderOptions, order?: number): ClassDecorator;
|
|
58
|
+
declare const priorityOrder: typeof PriorityOrder;
|
|
352
59
|
|
|
353
60
|
interface DtoSchema {
|
|
354
61
|
fields: IntentTlvField[];
|
|
@@ -380,622 +87,9 @@ declare abstract class AxisResponseDto extends AxisTlvDto {
|
|
|
380
87
|
updated_by?: string;
|
|
381
88
|
}
|
|
382
89
|
|
|
383
|
-
declare const CCE_PROTOCOL_VERSION: "cce-v1";
|
|
384
|
-
type CceAlgorithm = "AES-256-GCM";
|
|
385
|
-
type CceKemAlgorithm = "X25519" | "RSA-OAEP-256";
|
|
386
|
-
type CceKdfAlgorithm = "HKDF-SHA256";
|
|
387
|
-
interface CceCapsuleClaims {
|
|
388
|
-
capsule_id: string;
|
|
389
|
-
ver: typeof CCE_PROTOCOL_VERSION;
|
|
390
|
-
sub: string;
|
|
391
|
-
kid: string;
|
|
392
|
-
intent: string;
|
|
393
|
-
aud: string;
|
|
394
|
-
tps_from: number;
|
|
395
|
-
tps_to: number;
|
|
396
|
-
capsule_nonce: string;
|
|
397
|
-
challenge_id: string;
|
|
398
|
-
proof_hash?: string;
|
|
399
|
-
policy_hash?: string;
|
|
400
|
-
iat: number;
|
|
401
|
-
exp: number;
|
|
402
|
-
mode: "SINGLE_USE" | "SESSION";
|
|
403
|
-
scope?: string[];
|
|
404
|
-
constraints?: CceConstraints;
|
|
405
|
-
issuer_sig: CceSignature;
|
|
406
|
-
}
|
|
407
|
-
interface CceConstraints {
|
|
408
|
-
max_payload_bytes?: number;
|
|
409
|
-
ip_allow?: string[];
|
|
410
|
-
device_allow?: string[];
|
|
411
|
-
country_allow?: string[];
|
|
412
|
-
}
|
|
413
|
-
interface CceSignature {
|
|
414
|
-
alg: "EdDSA" | "ES256";
|
|
415
|
-
kid: string;
|
|
416
|
-
value: string;
|
|
417
|
-
}
|
|
418
|
-
interface CceRequestEnvelope {
|
|
419
|
-
ver: typeof CCE_PROTOCOL_VERSION;
|
|
420
|
-
request_id: string;
|
|
421
|
-
correlation_id: string;
|
|
422
|
-
client_kid: string;
|
|
423
|
-
capsule: CceCapsuleClaims;
|
|
424
|
-
encrypted_key: CceEncryptedKey;
|
|
425
|
-
encrypted_payload: CceEncryptedPayload;
|
|
426
|
-
request_nonce: string;
|
|
427
|
-
client_sig: CceSignature;
|
|
428
|
-
content_type: string;
|
|
429
|
-
algorithms: CceAlgorithmDescriptor;
|
|
430
|
-
aad_descriptor?: string;
|
|
431
|
-
}
|
|
432
|
-
interface CceEncryptedKey {
|
|
433
|
-
alg: CceKemAlgorithm;
|
|
434
|
-
axis_kid: string;
|
|
435
|
-
ciphertext: string;
|
|
436
|
-
ephemeral_pk?: string;
|
|
437
|
-
}
|
|
438
|
-
interface CceEncryptedPayload {
|
|
439
|
-
alg: CceAlgorithm;
|
|
440
|
-
iv: string;
|
|
441
|
-
ciphertext: string;
|
|
442
|
-
tag: string;
|
|
443
|
-
}
|
|
444
|
-
interface CceAlgorithmDescriptor {
|
|
445
|
-
kem: CceKemAlgorithm;
|
|
446
|
-
enc: CceAlgorithm;
|
|
447
|
-
kdf: CceKdfAlgorithm;
|
|
448
|
-
sig: "EdDSA" | "ES256";
|
|
449
|
-
}
|
|
450
|
-
interface CceResponseEnvelope {
|
|
451
|
-
ver: typeof CCE_PROTOCOL_VERSION;
|
|
452
|
-
response_id: string;
|
|
453
|
-
request_id: string;
|
|
454
|
-
correlation_id: string;
|
|
455
|
-
capsule_id: string;
|
|
456
|
-
encrypted_key: CceEncryptedKey;
|
|
457
|
-
encrypted_payload: CceEncryptedPayload;
|
|
458
|
-
response_nonce: string;
|
|
459
|
-
axis_sig: CceSignature;
|
|
460
|
-
witness_ref?: string;
|
|
461
|
-
algorithms: CceAlgorithmDescriptor;
|
|
462
|
-
status: CceResponseStatus;
|
|
463
|
-
}
|
|
464
|
-
type CceResponseStatus = "SUCCESS" | "DENIED" | "PARTIAL" | "FAILED" | "ERROR";
|
|
465
|
-
interface CceExecutionContext {
|
|
466
|
-
execution_key_hash: string;
|
|
467
|
-
request_id: string;
|
|
468
|
-
capsule_id: string;
|
|
469
|
-
sub: string;
|
|
470
|
-
kid: string;
|
|
471
|
-
intent: string;
|
|
472
|
-
aud: string;
|
|
473
|
-
tps_from: number;
|
|
474
|
-
tps_to: number;
|
|
475
|
-
policy_hash?: string;
|
|
476
|
-
derived_at: number;
|
|
477
|
-
valid: boolean;
|
|
478
|
-
}
|
|
479
|
-
interface CceWitnessRecord {
|
|
480
|
-
witness_id: string;
|
|
481
|
-
request_id: string;
|
|
482
|
-
capsule_id: string;
|
|
483
|
-
sub: string;
|
|
484
|
-
intent: string;
|
|
485
|
-
aud: string;
|
|
486
|
-
tps_from: number;
|
|
487
|
-
tps_to: number;
|
|
488
|
-
timestamp: number;
|
|
489
|
-
verification: {
|
|
490
|
-
client_sig: boolean;
|
|
491
|
-
capsule_sig: boolean;
|
|
492
|
-
tps_valid: boolean;
|
|
493
|
-
audience_match: boolean;
|
|
494
|
-
intent_match: boolean;
|
|
495
|
-
replay_clean: boolean;
|
|
496
|
-
nonce_unique: boolean;
|
|
497
|
-
decryption_ok: boolean;
|
|
498
|
-
};
|
|
499
|
-
execution: {
|
|
500
|
-
status: CceResponseStatus;
|
|
501
|
-
handler_duration_ms: number;
|
|
502
|
-
effect?: string;
|
|
503
|
-
};
|
|
504
|
-
response_encrypted: boolean;
|
|
505
|
-
execution_context_hash: string;
|
|
506
|
-
request_payload_hash?: string;
|
|
507
|
-
response_payload_hash?: string;
|
|
508
|
-
}
|
|
509
|
-
declare const CCE_ERROR: {
|
|
510
|
-
readonly INVALID_ENVELOPE: "CCE_INVALID_ENVELOPE";
|
|
511
|
-
readonly UNSUPPORTED_VERSION: "CCE_UNSUPPORTED_VERSION";
|
|
512
|
-
readonly MISSING_CAPSULE: "CCE_MISSING_CAPSULE";
|
|
513
|
-
readonly MISSING_ENCRYPTED_KEY: "CCE_MISSING_ENCRYPTED_KEY";
|
|
514
|
-
readonly CLIENT_SIG_INVALID: "CCE_CLIENT_SIG_INVALID";
|
|
515
|
-
readonly CLIENT_KEY_NOT_FOUND: "CCE_CLIENT_KEY_NOT_FOUND";
|
|
516
|
-
readonly CAPSULE_SIG_INVALID: "CCE_CAPSULE_SIG_INVALID";
|
|
517
|
-
readonly CAPSULE_EXPIRED: "CCE_CAPSULE_EXPIRED";
|
|
518
|
-
readonly CAPSULE_NOT_YET_VALID: "CCE_CAPSULE_NOT_YET_VALID";
|
|
519
|
-
readonly CAPSULE_REVOKED: "CCE_CAPSULE_REVOKED";
|
|
520
|
-
readonly CAPSULE_CONSUMED: "CCE_CAPSULE_CONSUMED";
|
|
521
|
-
readonly AUDIENCE_MISMATCH: "CCE_AUDIENCE_MISMATCH";
|
|
522
|
-
readonly INTENT_MISMATCH: "CCE_INTENT_MISMATCH";
|
|
523
|
-
readonly TPS_WINDOW_EXPIRED: "CCE_TPS_WINDOW_EXPIRED";
|
|
524
|
-
readonly TPS_WINDOW_FUTURE: "CCE_TPS_WINDOW_FUTURE";
|
|
525
|
-
readonly REPLAY_DETECTED: "CCE_REPLAY_DETECTED";
|
|
526
|
-
readonly NONCE_REUSED: "CCE_NONCE_REUSED";
|
|
527
|
-
readonly DECRYPTION_FAILED: "CCE_DECRYPTION_FAILED";
|
|
528
|
-
readonly KEY_UNWRAP_FAILED: "CCE_KEY_UNWRAP_FAILED";
|
|
529
|
-
readonly AEAD_TAG_MISMATCH: "CCE_AEAD_TAG_MISMATCH";
|
|
530
|
-
readonly PAYLOAD_TOO_LARGE: "CCE_PAYLOAD_TOO_LARGE";
|
|
531
|
-
readonly PAYLOAD_SCHEMA_INVALID: "CCE_PAYLOAD_SCHEMA_INVALID";
|
|
532
|
-
readonly INTENT_SCHEMA_MISMATCH: "CCE_INTENT_SCHEMA_MISMATCH";
|
|
533
|
-
readonly POLICY_DENIED: "CCE_POLICY_DENIED";
|
|
534
|
-
readonly CONSTRAINT_VIOLATED: "CCE_CONSTRAINT_VIOLATED";
|
|
535
|
-
readonly HANDLER_NOT_FOUND: "CCE_HANDLER_NOT_FOUND";
|
|
536
|
-
readonly HANDLER_EXECUTION_FAILED: "CCE_HANDLER_EXECUTION_FAILED";
|
|
537
|
-
readonly HANDLER_TIMEOUT: "CCE_HANDLER_TIMEOUT";
|
|
538
|
-
readonly RESPONSE_ENCRYPTION_FAILED: "CCE_RESPONSE_ENCRYPTION_FAILED";
|
|
539
|
-
};
|
|
540
|
-
type CceErrorCode = (typeof CCE_ERROR)[keyof typeof CCE_ERROR];
|
|
541
|
-
declare class CceError extends Error {
|
|
542
|
-
readonly code: CceErrorCode;
|
|
543
|
-
readonly metadata?: Record<string, unknown> | undefined;
|
|
544
|
-
constructor(code: CceErrorCode, message: string, metadata?: Record<string, unknown> | undefined);
|
|
545
|
-
get clientSafe(): boolean;
|
|
546
|
-
toClientError(): {
|
|
547
|
-
code: CceErrorCode;
|
|
548
|
-
message: string;
|
|
549
|
-
};
|
|
550
|
-
}
|
|
551
|
-
|
|
552
|
-
interface CceClientKeyEncryptor {
|
|
553
|
-
wrapKey(aesKey: Uint8Array, clientKid: string, clientPublicKeyHex: string): Promise<CceEncryptedKey>;
|
|
554
|
-
}
|
|
555
|
-
interface CceAxisSigner {
|
|
556
|
-
sign(payload: Uint8Array): Promise<CceSignature>;
|
|
557
|
-
}
|
|
558
|
-
|
|
559
|
-
interface CceWitnessStore {
|
|
560
|
-
record(witness: CceWitnessRecord): Promise<void>;
|
|
561
|
-
}
|
|
562
|
-
|
|
563
|
-
type AxisAlg$1 = 'EdDSA' | 'ES256' | 'RS256';
|
|
564
|
-
type CapsuleMode = 'SINGLE_USE' | 'MULTI_USE';
|
|
565
|
-
type KeyStatus = 'ACTIVE' | 'GRACE' | 'REVOKED' | 'RETIRED';
|
|
566
|
-
interface AxisSig$1 {
|
|
567
|
-
alg: AxisAlg$1;
|
|
568
|
-
kid: string;
|
|
569
|
-
value: string;
|
|
570
|
-
}
|
|
571
|
-
interface AxisPacket$1<T = any> {
|
|
572
|
-
v: 1;
|
|
573
|
-
pid: string;
|
|
574
|
-
nonce: string;
|
|
575
|
-
ts: number;
|
|
576
|
-
actorId: string;
|
|
577
|
-
opcode: string;
|
|
578
|
-
body: T;
|
|
579
|
-
sig: AxisSig$1;
|
|
580
|
-
}
|
|
581
|
-
interface AxisCapsuleConstraints {
|
|
582
|
-
maxAmount?: number;
|
|
583
|
-
maxCount?: number;
|
|
584
|
-
ttlSeconds?: number;
|
|
585
|
-
ipCidrAllow?: string[];
|
|
586
|
-
countryAllow?: string[];
|
|
587
|
-
deviceIdAllow?: string[];
|
|
588
|
-
sessionIdLock?: string;
|
|
589
|
-
nonceRequired?: boolean;
|
|
590
|
-
}
|
|
591
|
-
interface TickWindow {
|
|
592
|
-
start: number;
|
|
593
|
-
end: number;
|
|
594
|
-
}
|
|
595
|
-
interface AxisCapsulePayload {
|
|
596
|
-
v: 1;
|
|
597
|
-
capsuleId: string;
|
|
598
|
-
actorId: string;
|
|
599
|
-
issuer: string;
|
|
600
|
-
audience: string;
|
|
601
|
-
subject?: string;
|
|
602
|
-
intent: string;
|
|
603
|
-
scopes: string[];
|
|
604
|
-
actions?: string[];
|
|
605
|
-
iat: number;
|
|
606
|
-
nbf?: number;
|
|
607
|
-
exp: number;
|
|
608
|
-
tickWindow?: TickWindow;
|
|
609
|
-
mode: CapsuleMode;
|
|
610
|
-
maxUses: number;
|
|
611
|
-
nonceSeed?: string;
|
|
612
|
-
policyRefs?: string[];
|
|
613
|
-
riskScore?: number;
|
|
614
|
-
constraints?: AxisCapsuleConstraints;
|
|
615
|
-
meta?: Record<string, unknown>;
|
|
616
|
-
}
|
|
617
|
-
interface AxisCapsule {
|
|
618
|
-
payload: AxisCapsulePayload;
|
|
619
|
-
sig: AxisSig$1;
|
|
620
|
-
}
|
|
621
|
-
interface AxisResponse$1<T = any> {
|
|
622
|
-
ok: boolean;
|
|
623
|
-
pid: string;
|
|
624
|
-
decisionId: string;
|
|
625
|
-
code: string;
|
|
626
|
-
message?: string;
|
|
627
|
-
data?: T;
|
|
628
|
-
meta?: Record<string, unknown>;
|
|
629
|
-
}
|
|
630
|
-
|
|
631
|
-
type AxisAlg = Extract<AxisAlg$1, 'EdDSA'>;
|
|
632
|
-
type AxisSig = AxisSig$1 & {
|
|
633
|
-
alg: AxisAlg;
|
|
634
|
-
};
|
|
635
|
-
interface AxisFrame<T = any> {
|
|
636
|
-
v: 1;
|
|
637
|
-
pid: string;
|
|
638
|
-
nonce: string;
|
|
639
|
-
ts: number;
|
|
640
|
-
actorId: string;
|
|
641
|
-
aud?: string;
|
|
642
|
-
opcode: string;
|
|
643
|
-
headers: Map<number, Uint8Array>;
|
|
644
|
-
body: T;
|
|
645
|
-
sig: AxisSig;
|
|
646
|
-
}
|
|
647
|
-
type AxisResponse<T = any> = AxisResponse$1<T> & {
|
|
648
|
-
policyRefs?: string[];
|
|
649
|
-
riskScore?: number;
|
|
650
|
-
};
|
|
651
|
-
interface AxisObservedContext {
|
|
652
|
-
ip?: string;
|
|
653
|
-
ua?: string;
|
|
654
|
-
geo?: string;
|
|
655
|
-
}
|
|
656
|
-
interface AxisRequestContext {
|
|
657
|
-
observed: AxisObservedContext;
|
|
658
|
-
actorKeyKid?: string;
|
|
659
|
-
issuerKeyKid?: string;
|
|
660
|
-
decisionId: string;
|
|
661
|
-
actorId: string;
|
|
662
|
-
aud?: string;
|
|
663
|
-
opcode: string;
|
|
664
|
-
deviceId?: string;
|
|
665
|
-
sessionId?: string;
|
|
666
|
-
}
|
|
667
|
-
|
|
668
|
-
interface SensorPhaseMetadata {
|
|
669
|
-
phase: 'PRE_DECODE' | 'POST_DECODE';
|
|
670
|
-
dependencies?: string[];
|
|
671
|
-
asyncOk?: boolean;
|
|
672
|
-
cryptoOk?: boolean;
|
|
673
|
-
description?: string;
|
|
674
|
-
}
|
|
675
|
-
interface AxisSensor {
|
|
676
|
-
readonly name: string;
|
|
677
|
-
readonly order?: number;
|
|
678
|
-
phase?: SensorPhaseMetadata | 'PRE_DECODE' | 'POST_DECODE';
|
|
679
|
-
supports?(input: SensorInput): boolean;
|
|
680
|
-
run(input: SensorInput): Promise<SensorDecision>;
|
|
681
|
-
}
|
|
682
|
-
interface AxisSensorInit extends AxisSensor {
|
|
683
|
-
onModuleInit?(): void | Promise<void>;
|
|
684
|
-
}
|
|
685
|
-
interface AxisPreSensor extends AxisSensor {
|
|
686
|
-
phase: 'PRE_DECODE';
|
|
687
|
-
}
|
|
688
|
-
interface AxisPostSensor extends AxisSensor {
|
|
689
|
-
phase: 'POST_DECODE';
|
|
690
|
-
}
|
|
691
|
-
interface SensorInput {
|
|
692
|
-
rawBytes?: Buffer | Uint8Array;
|
|
693
|
-
intent?: string;
|
|
694
|
-
ip?: string;
|
|
695
|
-
path?: string;
|
|
696
|
-
contentLength?: number;
|
|
697
|
-
peek?: Uint8Array;
|
|
698
|
-
country?: string;
|
|
699
|
-
clientId?: string;
|
|
700
|
-
isWs?: boolean;
|
|
701
|
-
metadata?: Record<string, any>;
|
|
702
|
-
actorId?: string;
|
|
703
|
-
opcode?: string;
|
|
704
|
-
aud?: string;
|
|
705
|
-
observed?: AxisObservedContext;
|
|
706
|
-
frameBody?: any;
|
|
707
|
-
deviceId?: string;
|
|
708
|
-
sessionId?: string;
|
|
709
|
-
packet?: Record<string, any>;
|
|
710
|
-
[key: string]: any;
|
|
711
|
-
}
|
|
712
|
-
declare enum Decision {
|
|
713
|
-
ALLOW = "ALLOW",
|
|
714
|
-
DENY = "DENY",
|
|
715
|
-
THROTTLE = "THROTTLE",
|
|
716
|
-
FLAG = "FLAG"
|
|
717
|
-
}
|
|
718
|
-
type SensorDecision = {
|
|
719
|
-
decision?: Decision;
|
|
720
|
-
allow: boolean;
|
|
721
|
-
riskScore: number;
|
|
722
|
-
reasons: string[];
|
|
723
|
-
code?: string;
|
|
724
|
-
retryAfterMs?: number;
|
|
725
|
-
scoreDelta?: number;
|
|
726
|
-
tags?: Record<string, any>;
|
|
727
|
-
meta?: any;
|
|
728
|
-
tighten?: {
|
|
729
|
-
expSecondsMax?: number;
|
|
730
|
-
constraintsPatch?: Record<string, any>;
|
|
731
|
-
};
|
|
732
|
-
} | {
|
|
733
|
-
action: 'ALLOW';
|
|
734
|
-
meta?: any;
|
|
735
|
-
} | {
|
|
736
|
-
action: 'DENY';
|
|
737
|
-
code: string;
|
|
738
|
-
reason?: string;
|
|
739
|
-
retryAfterMs?: number;
|
|
740
|
-
meta?: any;
|
|
741
|
-
} | {
|
|
742
|
-
action: 'THROTTLE';
|
|
743
|
-
retryAfterMs: number;
|
|
744
|
-
meta?: any;
|
|
745
|
-
} | {
|
|
746
|
-
action: 'FLAG';
|
|
747
|
-
scoreDelta: number;
|
|
748
|
-
reasons: string[];
|
|
749
|
-
meta?: any;
|
|
750
|
-
};
|
|
751
|
-
type SensorMinifiedDecision = {
|
|
752
|
-
allow: boolean;
|
|
753
|
-
riskScore: number;
|
|
754
|
-
reasons: string[];
|
|
755
|
-
tags?: Record<string, any>;
|
|
756
|
-
meta?: any;
|
|
757
|
-
tighten?: {
|
|
758
|
-
expSecondsMax?: number;
|
|
759
|
-
constraintsPatch?: Record<string, any>;
|
|
760
|
-
};
|
|
761
|
-
retryAfterMs?: number;
|
|
762
|
-
};
|
|
763
|
-
declare function normalizeSensorDecision(sensorDecision: SensorDecision): SensorMinifiedDecision;
|
|
764
|
-
declare const SensorDecisions: {
|
|
765
|
-
allow(meta?: any, tags?: Record<string, any>): SensorDecision;
|
|
766
|
-
deny(code: string, reason?: string, meta?: any): SensorDecision;
|
|
767
|
-
throttle(retryAfterMs: number, meta?: any): SensorDecision;
|
|
768
|
-
flag(scoreDelta: number, reasons: string[], meta?: any): SensorDecision;
|
|
769
|
-
};
|
|
770
|
-
|
|
771
|
-
type CceHandler = (payload: Uint8Array, context: CceHandlerContext) => Promise<CceHandlerResult>;
|
|
772
|
-
interface CceHandlerContext {
|
|
773
|
-
capsule: CceCapsuleClaims;
|
|
774
|
-
executionContext: CceExecutionContext;
|
|
775
|
-
envelope: CceRequestEnvelope;
|
|
776
|
-
clientPublicKeyHex: string;
|
|
777
|
-
intent: string;
|
|
778
|
-
sub: string;
|
|
779
|
-
}
|
|
780
|
-
interface CceHandlerResult {
|
|
781
|
-
status: CceResponseStatus;
|
|
782
|
-
body: Uint8Array;
|
|
783
|
-
effect?: string;
|
|
784
|
-
}
|
|
785
|
-
interface CcePolicyContext {
|
|
786
|
-
envelope: CceRequestEnvelope;
|
|
787
|
-
capsule: CceCapsuleClaims;
|
|
788
|
-
executionContext: CceExecutionContext;
|
|
789
|
-
decryptedPayload: Uint8Array;
|
|
790
|
-
clientPublicKeyHex: string;
|
|
791
|
-
}
|
|
792
|
-
interface CcePolicyDecision {
|
|
793
|
-
allow: boolean;
|
|
794
|
-
code?: string;
|
|
795
|
-
message?: string;
|
|
796
|
-
}
|
|
797
|
-
interface CcePolicyEvaluator {
|
|
798
|
-
evaluate(context: CcePolicyContext): Promise<CcePolicyDecision>;
|
|
799
|
-
}
|
|
800
|
-
interface CcePipelineConfig {
|
|
801
|
-
axisLocalSecret: string;
|
|
802
|
-
axisAudience: string;
|
|
803
|
-
sensors: AxisSensor[];
|
|
804
|
-
handlers: Map<string, CceHandler>;
|
|
805
|
-
witnessStore: CceWitnessStore;
|
|
806
|
-
clientKeyEncryptor: CceClientKeyEncryptor;
|
|
807
|
-
axisSigner: CceAxisSigner;
|
|
808
|
-
policyEvaluator?: CcePolicyEvaluator;
|
|
809
|
-
}
|
|
810
|
-
type CcePipelineResult = {
|
|
811
|
-
ok: true;
|
|
812
|
-
response: CceResponseEnvelope;
|
|
813
|
-
witnessId: string;
|
|
814
|
-
} | {
|
|
815
|
-
ok: false;
|
|
816
|
-
error: {
|
|
817
|
-
code: string;
|
|
818
|
-
message: string;
|
|
819
|
-
};
|
|
820
|
-
status: CceResponseStatus;
|
|
821
|
-
};
|
|
822
|
-
declare function executeCcePipeline(envelope: CceRequestEnvelope, config: CcePipelineConfig): Promise<CcePipelineResult>;
|
|
823
|
-
|
|
824
|
-
declare class SensorRegistry {
|
|
825
|
-
private readonly configService;
|
|
826
|
-
private sensors;
|
|
827
|
-
private sensorsByName;
|
|
828
|
-
private sensorsByType;
|
|
829
|
-
private readonly logger;
|
|
830
|
-
constructor(configService: ConfigService);
|
|
831
|
-
register(sensor: AxisSensor): void;
|
|
832
|
-
list(): AxisSensor[];
|
|
833
|
-
resolve(ref: AxisIntentSensorRef): AxisSensor | undefined;
|
|
834
|
-
getByName(name: string): AxisSensor | undefined;
|
|
835
|
-
getPreDecodeSensors(): AxisPreSensor[];
|
|
836
|
-
getPostDecodeSensors(): AxisPostSensor[];
|
|
837
|
-
private isPreDecodeSensor;
|
|
838
|
-
private isPostDecodeSensor;
|
|
839
|
-
getSensorCountByPhase(): {
|
|
840
|
-
preDecodeCount: number;
|
|
841
|
-
postDecodeCount: number;
|
|
842
|
-
};
|
|
843
|
-
clear(): void;
|
|
844
|
-
private indexSensor;
|
|
845
|
-
}
|
|
846
|
-
|
|
847
|
-
interface IntentSchema$1 {
|
|
848
|
-
intent: string;
|
|
849
|
-
version: number;
|
|
850
|
-
bodyProfile: "TLV_MAP" | "RAW" | "TLV_OBJ" | "TLV_ARR";
|
|
851
|
-
fields: Array<{
|
|
852
|
-
name: string;
|
|
853
|
-
tlv: number;
|
|
854
|
-
kind: IntentTlvField["kind"];
|
|
855
|
-
required?: boolean;
|
|
856
|
-
maxLen?: number;
|
|
857
|
-
max?: string;
|
|
858
|
-
scope?: "header" | "body";
|
|
859
|
-
}>;
|
|
860
|
-
}
|
|
861
|
-
interface AxisEffect {
|
|
862
|
-
ok: boolean;
|
|
863
|
-
effect: string;
|
|
864
|
-
body?: Uint8Array;
|
|
865
|
-
headers?: Map<number, Uint8Array>;
|
|
866
|
-
metadata?: any;
|
|
867
|
-
}
|
|
868
|
-
declare class IntentRouter {
|
|
869
|
-
private readonly moduleRef?;
|
|
870
|
-
private readonly observerDispatcher?;
|
|
871
|
-
private readonly sensorRegistry?;
|
|
872
|
-
private readonly logger;
|
|
873
|
-
private readonly decoder;
|
|
874
|
-
private readonly encoder;
|
|
875
|
-
private static readonly BUILTIN_INTENTS;
|
|
876
|
-
private handlers;
|
|
877
|
-
private intentSensors;
|
|
878
|
-
private intentDecoders;
|
|
879
|
-
private intentSchemas;
|
|
880
|
-
private intentValidators;
|
|
881
|
-
private intentKinds;
|
|
882
|
-
private intentChains;
|
|
883
|
-
private intentObservers;
|
|
884
|
-
private intentCapsulePolicies;
|
|
885
|
-
private intentSensitivity;
|
|
886
|
-
private intentContracts;
|
|
887
|
-
private intentRequiredProof;
|
|
888
|
-
private publicIntents;
|
|
889
|
-
private anonymousIntents;
|
|
890
|
-
private intentRateLimits;
|
|
891
|
-
private cceHandlers;
|
|
892
|
-
private ccePipelineConfig;
|
|
893
|
-
constructor(moduleRef?: ModuleRef | undefined, observerDispatcher?: ObserverDispatcherService | undefined, sensorRegistry?: SensorRegistry | undefined);
|
|
894
|
-
getSchema(intent: string): IntentSchema$1 | undefined;
|
|
895
|
-
getValidators(intent: string): Map<number, TlvValidatorFn[]> | undefined;
|
|
896
|
-
has(intent: string): boolean;
|
|
897
|
-
getRegisteredIntents(): string[];
|
|
898
|
-
getIntentEntry(intent: string): {
|
|
899
|
-
schema?: IntentSchema$1;
|
|
900
|
-
validators?: Map<number, TlvValidatorFn[]>;
|
|
901
|
-
hasSensors: boolean;
|
|
902
|
-
builtin: boolean;
|
|
903
|
-
kind?: IntentKind;
|
|
904
|
-
chain?: RegisteredChainConfig;
|
|
905
|
-
capsulePolicy?: CapsulePolicyOptions;
|
|
906
|
-
observerCount: number;
|
|
907
|
-
} | null;
|
|
908
|
-
getChainConfig(intent: string): RegisteredChainConfig | undefined;
|
|
909
|
-
getObservers(intent: string): AxisObserverBinding[];
|
|
910
|
-
register(intent: string, handler: any): void;
|
|
911
|
-
registerHandler(instance: any): void;
|
|
912
|
-
route(frame: AxisFrame$1): Promise<AxisEffect>;
|
|
913
|
-
private logIntent;
|
|
914
|
-
registerIntentMeta(intent: string, proto: object, methodName: string, handlerSensors?: AxisIntentSensorRef[], handlerObservers?: AxisObserverBinding[]): void;
|
|
915
|
-
getSensitivity(intent: string): SensitivityLevel | undefined;
|
|
916
|
-
getContract(intent: string): Record<string, any> | undefined;
|
|
917
|
-
getRequiredProof(intent: string): RequiredProofKind[] | undefined;
|
|
918
|
-
isPublic(intent: string): boolean;
|
|
919
|
-
isAnonymous(intent: string): boolean;
|
|
920
|
-
getRateLimit(intent: string): AxisRateLimitConfig | undefined;
|
|
921
|
-
private emitIntentObservers;
|
|
922
|
-
private runIntentSensors;
|
|
923
|
-
private resolveIntentSensor;
|
|
924
|
-
private getEffectiveCapsulePolicy;
|
|
925
|
-
private enforceCapsulePolicy;
|
|
926
|
-
private executeChainRequest;
|
|
927
|
-
private parseIntentExecBody;
|
|
928
|
-
private parseChainRequestBody;
|
|
929
|
-
private isChainRequestLike;
|
|
930
|
-
private isChainEnvelopeLike;
|
|
931
|
-
private encodeJson;
|
|
932
|
-
private getActorIdFromFrame;
|
|
933
|
-
private getProofRefFromFrame;
|
|
934
|
-
private hasCapsuleReference;
|
|
935
|
-
private getHeaderValue;
|
|
936
|
-
private identifiersMatch;
|
|
937
|
-
private extractInlineCapsuleId;
|
|
938
|
-
private toInlineCapsuleRecord;
|
|
939
|
-
private toScopeList;
|
|
940
|
-
configureCce(config: Omit<CcePipelineConfig, "handlers">): void;
|
|
941
|
-
registerCceHandler(intent: string, handler: CceHandler): void;
|
|
942
|
-
hasCceHandler(intent: string): boolean;
|
|
943
|
-
routeCce(envelope: CceRequestEnvelope): Promise<CcePipelineResult>;
|
|
944
|
-
private storeSchema;
|
|
945
|
-
}
|
|
946
|
-
|
|
947
|
-
interface AxisObserverContext {
|
|
948
|
-
event: AxisObserverEvent;
|
|
949
|
-
timestamp: number;
|
|
950
|
-
intent?: string;
|
|
951
|
-
chainId?: string;
|
|
952
|
-
stepId?: string;
|
|
953
|
-
handler?: string;
|
|
954
|
-
frame?: AxisFrame$1;
|
|
955
|
-
envelope?: AxisChainEnvelope;
|
|
956
|
-
step?: AxisChainStep;
|
|
957
|
-
effect?: AxisEffect;
|
|
958
|
-
result?: AxisChainStepResult | AxisChainResult;
|
|
959
|
-
error?: string;
|
|
960
|
-
observerTags?: string[];
|
|
961
|
-
capsule?: AxisCapsuleRef;
|
|
962
|
-
keyExchange?: AxisKeyExchangeRef;
|
|
963
|
-
metadata?: Record<string, unknown>;
|
|
964
|
-
}
|
|
965
|
-
interface AxisIntentObserver {
|
|
966
|
-
readonly name: string;
|
|
967
|
-
supports?(context: AxisObserverContext): boolean;
|
|
968
|
-
observe(context: AxisObserverContext): Promise<void> | void;
|
|
969
|
-
}
|
|
970
|
-
interface AxisObserverRegistration {
|
|
971
|
-
name: string;
|
|
972
|
-
instance: AxisIntentObserver;
|
|
973
|
-
tags: string[];
|
|
974
|
-
events?: AxisObserverEvent[];
|
|
975
|
-
intents?: string[];
|
|
976
|
-
handlers?: string[];
|
|
977
|
-
}
|
|
978
|
-
|
|
979
|
-
declare class ObserverRegistry {
|
|
980
|
-
private readonly logger;
|
|
981
|
-
private readonly byName;
|
|
982
|
-
private readonly byType;
|
|
983
|
-
register(instance: AxisIntentObserver, meta?: AxisObserverDefinition): void;
|
|
984
|
-
resolve(ref: AxisObserverRef): AxisObserverRegistration | undefined;
|
|
985
|
-
list(): AxisObserverRegistration[];
|
|
986
|
-
clear(): void;
|
|
987
|
-
}
|
|
988
|
-
|
|
989
|
-
declare class ObserverDispatcherService {
|
|
990
|
-
private readonly registry;
|
|
991
|
-
private readonly logger;
|
|
992
|
-
constructor(registry: ObserverRegistry);
|
|
993
|
-
dispatch(bindings: AxisObserverBinding[] | undefined, context: AxisObserverContext): Promise<void>;
|
|
994
|
-
}
|
|
995
|
-
|
|
996
90
|
interface AxisChainExecutionOptions {
|
|
997
91
|
actorId?: string;
|
|
998
|
-
baseFrame?: Partial<AxisFrame
|
|
92
|
+
baseFrame?: Partial<AxisFrame>;
|
|
999
93
|
}
|
|
1000
94
|
declare class AxisChainExecutor {
|
|
1001
95
|
private readonly router;
|
|
@@ -1030,7 +124,7 @@ interface AxisExecutionContext {
|
|
|
1030
124
|
chainEnvelope?: AxisChainEnvelope;
|
|
1031
125
|
chainStep?: AxisChainStep;
|
|
1032
126
|
}
|
|
1033
|
-
declare function getAxisExecutionContext(frame?: Partial<AxisFrame
|
|
127
|
+
declare function getAxisExecutionContext(frame?: Partial<AxisFrame>): AxisExecutionContext | undefined;
|
|
1034
128
|
declare function withAxisExecutionContext<T extends object>(target: T, context: AxisExecutionContext): T;
|
|
1035
129
|
declare function mergeAxisExecutionContext(base?: AxisExecutionContext, override?: AxisExecutionContext): AxisExecutionContext | undefined;
|
|
1036
130
|
|
|
@@ -1047,46 +141,6 @@ declare const PRE_DECODE_BOUNDARY = 40;
|
|
|
1047
141
|
|
|
1048
142
|
declare function stableJsonStringify(value: unknown): string;
|
|
1049
143
|
|
|
1050
|
-
interface ObservationStage {
|
|
1051
|
-
name: string;
|
|
1052
|
-
status: 'ok' | 'fail' | 'skip';
|
|
1053
|
-
startMs: number;
|
|
1054
|
-
endMs?: number;
|
|
1055
|
-
durationMs?: number;
|
|
1056
|
-
reason?: string;
|
|
1057
|
-
code?: string;
|
|
1058
|
-
}
|
|
1059
|
-
interface ObservationSensor {
|
|
1060
|
-
name: string;
|
|
1061
|
-
allowed: boolean;
|
|
1062
|
-
riskScore: number;
|
|
1063
|
-
durationMs: number;
|
|
1064
|
-
reasons: string[];
|
|
1065
|
-
code?: string;
|
|
1066
|
-
}
|
|
1067
|
-
interface AxisObservation {
|
|
1068
|
-
id: string;
|
|
1069
|
-
startMs: number;
|
|
1070
|
-
transport: 'http' | 'ws';
|
|
1071
|
-
ip?: string;
|
|
1072
|
-
intent?: string;
|
|
1073
|
-
actorId?: string;
|
|
1074
|
-
capsuleId?: string;
|
|
1075
|
-
stages: ObservationStage[];
|
|
1076
|
-
sensors: ObservationSensor[];
|
|
1077
|
-
decision?: 'ALLOW' | 'DENY';
|
|
1078
|
-
resultCode?: string;
|
|
1079
|
-
statusCode?: number;
|
|
1080
|
-
endMs?: number;
|
|
1081
|
-
durationMs?: number;
|
|
1082
|
-
facts: Record<string, unknown>;
|
|
1083
|
-
}
|
|
1084
|
-
declare function createObservation(transport: 'http' | 'ws', ip?: string): AxisObservation;
|
|
1085
|
-
declare function startStage(obs: AxisObservation, name: string): ObservationStage;
|
|
1086
|
-
declare function endStage(stage: ObservationStage, status?: 'ok' | 'fail' | 'skip', reason?: string, code?: string): void;
|
|
1087
|
-
declare function recordSensor(obs: AxisObservation, name: string, allowed: boolean, riskScore: number, durationMs: number, reasons: string[], code?: string): void;
|
|
1088
|
-
declare function finalizeObservation(obs: AxisObservation, decision: 'ALLOW' | 'DENY', statusCode: number, resultCode?: string): void;
|
|
1089
|
-
|
|
1090
144
|
interface ObservationQueueMessage {
|
|
1091
145
|
v: 1;
|
|
1092
146
|
observation: AxisObservation;
|
|
@@ -1142,42 +196,6 @@ declare function canonicalizeObservation(obs: AxisObservation): string;
|
|
|
1142
196
|
declare function hashObservation(obs: AxisObservation): string;
|
|
1143
197
|
declare function buildUnsignedWitness(obs: AxisObservation): UnsignedObservationWitness | null;
|
|
1144
198
|
|
|
1145
|
-
type TruthStatus = 'confirmed' | 'partial' | 'uncertain' | 'failed' | 'disputed';
|
|
1146
|
-
interface ExpectedOutcome {
|
|
1147
|
-
decision?: 'ALLOW' | 'DENY';
|
|
1148
|
-
effect?: string;
|
|
1149
|
-
statusCode?: number;
|
|
1150
|
-
ok?: boolean;
|
|
1151
|
-
stateChanges?: Record<string, unknown>;
|
|
1152
|
-
maxDurationMs?: number;
|
|
1153
|
-
minSensorsPassed?: number;
|
|
1154
|
-
assertions?: Record<string, unknown>;
|
|
1155
|
-
}
|
|
1156
|
-
type AnomalyLevel = 'info' | 'warning' | 'critical';
|
|
1157
|
-
interface Anomaly {
|
|
1158
|
-
code: string;
|
|
1159
|
-
level: AnomalyLevel;
|
|
1160
|
-
message: string;
|
|
1161
|
-
field?: string;
|
|
1162
|
-
expected?: unknown;
|
|
1163
|
-
actual?: unknown;
|
|
1164
|
-
}
|
|
1165
|
-
interface TruthVerdict {
|
|
1166
|
-
status: TruthStatus;
|
|
1167
|
-
confidence: number;
|
|
1168
|
-
anomalies: Anomaly[];
|
|
1169
|
-
passedChecks: number;
|
|
1170
|
-
totalChecks: number;
|
|
1171
|
-
verifiedAt: number;
|
|
1172
|
-
isDeed: boolean;
|
|
1173
|
-
}
|
|
1174
|
-
declare function scoreTruth(obs: AxisObservation, expected?: ExpectedOutcome): TruthVerdict;
|
|
1175
|
-
interface ObservedDeed {
|
|
1176
|
-
observation: AxisObservation;
|
|
1177
|
-
verdict: TruthVerdict;
|
|
1178
|
-
}
|
|
1179
|
-
declare function verifyObservation(obs: AxisObservation, expected?: ExpectedOutcome): ObservedDeed;
|
|
1180
|
-
|
|
1181
199
|
interface ResponseObserverContext {
|
|
1182
200
|
actorId: string;
|
|
1183
201
|
intent: string;
|
|
@@ -1555,65 +573,64 @@ type Capability = keyof typeof CAPABILITIES;
|
|
|
1555
573
|
declare const PROOF_CAPABILITIES: Record<number, Capability[]>;
|
|
1556
574
|
declare const INTENT_REQUIREMENTS: Record<string, Capability[]>;
|
|
1557
575
|
|
|
1558
|
-
type
|
|
1559
|
-
interface
|
|
1560
|
-
|
|
1561
|
-
article_type?: string;
|
|
1562
|
-
decision?: string;
|
|
1563
|
-
reason?: string;
|
|
1564
|
-
}
|
|
1565
|
-
interface AxisLawEvaluationContext {
|
|
576
|
+
type ProofType = 1 | 2 | 3 | 4;
|
|
577
|
+
interface ProofVerificationResult {
|
|
578
|
+
valid: boolean;
|
|
1566
579
|
actorId?: string;
|
|
1567
|
-
|
|
1568
|
-
|
|
1569
|
-
tps?: string | number;
|
|
1570
|
-
country?: string;
|
|
1571
|
-
ip?: string;
|
|
1572
|
-
path?: string;
|
|
1573
|
-
clientId?: string;
|
|
1574
|
-
deviceId?: string;
|
|
1575
|
-
sessionId?: string;
|
|
1576
|
-
capsuleId?: string;
|
|
1577
|
-
metadata: Record<string, unknown>;
|
|
1578
|
-
packet?: Record<string, unknown>;
|
|
1579
|
-
frameBody?: unknown;
|
|
1580
|
-
}
|
|
1581
|
-
interface AxisLawEvaluationResult {
|
|
1582
|
-
decision: AxisLawDecision;
|
|
1583
|
-
reason: string;
|
|
1584
|
-
explanation?: string;
|
|
1585
|
-
denied?: AxisLawArticleSummary[];
|
|
1586
|
-
permitted?: AxisLawArticleSummary[];
|
|
1587
|
-
required?: AxisLawArticleSummary[];
|
|
1588
|
-
applicable?: AxisLawArticleSummary[];
|
|
1589
|
-
metadata?: Record<string, unknown>;
|
|
580
|
+
error?: string;
|
|
581
|
+
metadata?: Record<string, any>;
|
|
1590
582
|
}
|
|
1591
|
-
|
|
1592
|
-
|
|
1593
|
-
|
|
1594
|
-
|
|
583
|
+
interface MTLSContext {
|
|
584
|
+
clientCertPem?: string;
|
|
585
|
+
clientCertFingerprint?: string;
|
|
586
|
+
clientCertSubject?: string;
|
|
587
|
+
clientCertIssuer?: string;
|
|
588
|
+
verified?: boolean;
|
|
1595
589
|
}
|
|
1596
|
-
|
|
1597
|
-
|
|
1598
|
-
|
|
1599
|
-
|
|
1600
|
-
|
|
1601
|
-
value: any;
|
|
1602
|
-
message: string;
|
|
590
|
+
interface DeviceSEContext {
|
|
591
|
+
deviceId: string;
|
|
592
|
+
signature: Uint8Array;
|
|
593
|
+
publicKey: Uint8Array;
|
|
594
|
+
challenge?: Uint8Array;
|
|
1603
595
|
}
|
|
1604
|
-
declare
|
|
1605
|
-
|
|
1606
|
-
|
|
1607
|
-
|
|
1608
|
-
|
|
1609
|
-
|
|
596
|
+
declare class ProofVerificationService {
|
|
597
|
+
private readonly logger;
|
|
598
|
+
private readonly deviceKeys;
|
|
599
|
+
private readonly trustedCerts;
|
|
600
|
+
verifyProof(proofType: ProofType, proofRef: Uint8Array, context: {
|
|
601
|
+
signTarget?: Uint8Array;
|
|
602
|
+
signature?: Uint8Array;
|
|
603
|
+
mtls?: MTLSContext;
|
|
604
|
+
deviceSE?: DeviceSEContext;
|
|
605
|
+
}): Promise<ProofVerificationResult>;
|
|
606
|
+
private verifyCapsuleProof;
|
|
607
|
+
private verifyJWTProof;
|
|
608
|
+
private verifyMTLSProof;
|
|
609
|
+
private verifyDeviceSEProof;
|
|
610
|
+
registerDeviceKey(deviceId: string, publicKey: Uint8Array): void;
|
|
611
|
+
unregisterDevice(deviceId: string): boolean;
|
|
612
|
+
registerMTLSCert(fingerprint: string, actorId: string): void;
|
|
613
|
+
revokeMTLSCert(fingerprint: string): boolean;
|
|
614
|
+
static calculateFingerprint(certPem: string): string;
|
|
615
|
+
}
|
|
616
|
+
|
|
617
|
+
declare enum BodyProfile {
|
|
618
|
+
RAW = 0,
|
|
619
|
+
TLV_MAP = 1,
|
|
620
|
+
OBJ = 2,
|
|
621
|
+
ARR = 3
|
|
622
|
+
}
|
|
623
|
+
interface BodyProfileValidation {
|
|
624
|
+
valid: boolean;
|
|
625
|
+
error?: string;
|
|
626
|
+
profile: BodyProfile;
|
|
1610
627
|
}
|
|
1611
|
-
|
|
1612
|
-
|
|
1613
|
-
|
|
1614
|
-
|
|
1615
|
-
|
|
1616
|
-
|
|
628
|
+
declare class BodyProfileValidator {
|
|
629
|
+
validate(body: Uint8Array, profile: BodyProfile): BodyProfileValidation;
|
|
630
|
+
private validateRaw;
|
|
631
|
+
private validateTlvMap;
|
|
632
|
+
private validateObj;
|
|
633
|
+
private validateArr;
|
|
1617
634
|
}
|
|
1618
635
|
|
|
1619
636
|
declare const AXIS_OPCODES: Set<string>;
|
|
@@ -1653,6 +670,10 @@ interface IntentDefinition {
|
|
|
1653
670
|
declare function validateFrameShape(frame: any): boolean;
|
|
1654
671
|
declare function isTimestampValid(ts: number, skewSeconds?: number): boolean;
|
|
1655
672
|
|
|
673
|
+
declare const AXIS_UPLOAD_SESSION_STORE = "AXIS_UPLOAD_SESSION_STORE";
|
|
674
|
+
declare const AXIS_UPLOAD_FILE_STORE = "AXIS_UPLOAD_FILE_STORE";
|
|
675
|
+
declare const AXIS_UPLOAD_RECEIPT_SIGNER = "AXIS_UPLOAD_RECEIPT_SIGNER";
|
|
676
|
+
|
|
1656
677
|
type UploadSessionStatus = 'ACTIVE' | 'FINALIZING' | 'COMPLETE' | 'ABORTED';
|
|
1657
678
|
interface UploadSessionRecord {
|
|
1658
679
|
id?: string;
|
|
@@ -1691,32 +712,6 @@ interface UploadFileStore {
|
|
|
1691
712
|
createTempReadStream(fileId: string): NodeJS.ReadableStream;
|
|
1692
713
|
}
|
|
1693
714
|
|
|
1694
|
-
declare class AxisFilesDownloadHandler implements AxisHandler {
|
|
1695
|
-
private readonly sessions;
|
|
1696
|
-
private readonly files;
|
|
1697
|
-
private readonly logger;
|
|
1698
|
-
readonly name = "axis.files.download";
|
|
1699
|
-
readonly open = true;
|
|
1700
|
-
readonly description = "File download handler";
|
|
1701
|
-
constructor(sessions: UploadSessionStore, files: UploadFileStore);
|
|
1702
|
-
execute(body: Uint8Array, headers?: Map<number, Uint8Array>): Promise<any>;
|
|
1703
|
-
}
|
|
1704
|
-
declare class AxisFilesFinalizeHandler implements AxisHandler {
|
|
1705
|
-
private readonly sessions;
|
|
1706
|
-
private readonly files;
|
|
1707
|
-
private readonly keyring?;
|
|
1708
|
-
private readonly logger;
|
|
1709
|
-
readonly name = "axis.files.finalize";
|
|
1710
|
-
readonly open = false;
|
|
1711
|
-
readonly description = "File upload finalization handler";
|
|
1712
|
-
constructor(sessions: UploadSessionStore, files: UploadFileStore, keyring?: UploadReceiptSigner | undefined);
|
|
1713
|
-
execute(body: Uint8Array, headers?: Map<number, Uint8Array>): Promise<any>;
|
|
1714
|
-
}
|
|
1715
|
-
|
|
1716
|
-
declare const AXIS_UPLOAD_SESSION_STORE = "AXIS_UPLOAD_SESSION_STORE";
|
|
1717
|
-
declare const AXIS_UPLOAD_FILE_STORE = "AXIS_UPLOAD_FILE_STORE";
|
|
1718
|
-
declare const AXIS_UPLOAD_RECEIPT_SIGNER = "AXIS_UPLOAD_RECEIPT_SIGNER";
|
|
1719
|
-
|
|
1720
715
|
interface DiskUploadFileStoreOptions {
|
|
1721
716
|
uploadDir: string;
|
|
1722
717
|
chunkDir: string;
|
|
@@ -1734,48 +729,10 @@ declare class DiskUploadFileStore implements UploadFileStore {
|
|
|
1734
729
|
createTempReadStream(fileId: string): NodeJS.ReadableStream;
|
|
1735
730
|
}
|
|
1736
731
|
|
|
1737
|
-
interface AxisRequestData {
|
|
1738
|
-
raw: Buffer;
|
|
1739
|
-
ip: string | undefined;
|
|
1740
|
-
preDecodeInput: any;
|
|
1741
|
-
frameBytesCount: number;
|
|
1742
|
-
}
|
|
1743
|
-
declare const AxisRaw: (...dataOrPipes: unknown[]) => ParameterDecorator;
|
|
1744
|
-
declare const AxisIp: (...dataOrPipes: unknown[]) => ParameterDecorator;
|
|
1745
|
-
declare const AxisContext: (...dataOrPipes: unknown[]) => ParameterDecorator;
|
|
1746
|
-
declare const AxisDemoPubkey: (...dataOrPipes: unknown[]) => ParameterDecorator;
|
|
1747
|
-
|
|
1748
|
-
declare class ObserverDiscoveryService implements OnApplicationBootstrap {
|
|
1749
|
-
private readonly discovery;
|
|
1750
|
-
private readonly reflector;
|
|
1751
|
-
private readonly registry;
|
|
1752
|
-
private readonly logger;
|
|
1753
|
-
constructor(discovery: DiscoveryService, reflector: Reflector, registry: ObserverRegistry);
|
|
1754
|
-
onApplicationBootstrap(): void;
|
|
1755
|
-
}
|
|
1756
|
-
|
|
1757
|
-
declare class HandlerDiscoveryService implements OnModuleInit {
|
|
1758
|
-
private readonly discovery;
|
|
1759
|
-
private readonly scanner;
|
|
1760
|
-
private readonly router;
|
|
1761
|
-
private readonly logger;
|
|
1762
|
-
constructor(discovery: DiscoveryService, scanner: MetadataScanner, router: IntentRouter);
|
|
1763
|
-
onModuleInit(): void;
|
|
1764
|
-
}
|
|
1765
|
-
|
|
1766
|
-
declare class SensorDiscoveryService implements OnApplicationBootstrap {
|
|
1767
|
-
private readonly discovery;
|
|
1768
|
-
private readonly reflector;
|
|
1769
|
-
private readonly registry;
|
|
1770
|
-
private readonly logger;
|
|
1771
|
-
constructor(discovery: DiscoveryService, reflector: Reflector, registry: SensorRegistry);
|
|
1772
|
-
onApplicationBootstrap(): void;
|
|
1773
|
-
}
|
|
1774
|
-
|
|
1775
732
|
interface AxisDecoded {
|
|
1776
733
|
frame: Axis1DecodedFrame;
|
|
1777
734
|
packet: AxisPacket;
|
|
1778
|
-
axisCtx: AxisContext
|
|
735
|
+
axisCtx: AxisContext;
|
|
1779
736
|
correlationId: Buffer;
|
|
1780
737
|
correlationIdHex: string;
|
|
1781
738
|
sensorInput: SensorInput;
|
|
@@ -1796,324 +753,15 @@ interface ChainResult {
|
|
|
1796
753
|
declare class AxisSensorChainService {
|
|
1797
754
|
private readonly registry;
|
|
1798
755
|
constructor(registry: SensorRegistry);
|
|
1799
|
-
evaluate(input: SensorInput, phase?:
|
|
756
|
+
evaluate(input: SensorInput, phase?: "PRE_DECODE" | "POST_DECODE" | "BOTH", baseDecision?: SensorDecision): Promise<SensorDecision>;
|
|
1800
757
|
evaluatePre(input: SensorInput): Promise<SensorDecision>;
|
|
1801
758
|
evaluatePost(input: SensorInput, baseDecision?: SensorDecision): Promise<SensorDecision>;
|
|
1802
759
|
private evaluateSensors;
|
|
1803
760
|
}
|
|
1804
761
|
|
|
1805
|
-
type TimelineDomain = 'prime' | 'fork' | 'shadow' | 'training' | 'audit';
|
|
1806
|
-
type TimelineEventStatus = 'executed' | 'replayed' | 'forked' | 'simulated' | 'failed';
|
|
1807
|
-
interface TimelineEvent {
|
|
1808
|
-
event_id: string;
|
|
1809
|
-
timeline_id: string;
|
|
1810
|
-
branch_id: string;
|
|
1811
|
-
parent_event_id: string | null;
|
|
1812
|
-
intent: string;
|
|
1813
|
-
actor_id: string;
|
|
1814
|
-
capsule_id?: string;
|
|
1815
|
-
tps_coordinate?: string;
|
|
1816
|
-
payload_hash: string;
|
|
1817
|
-
result_hash?: string;
|
|
1818
|
-
status: TimelineEventStatus;
|
|
1819
|
-
domain: TimelineDomain;
|
|
1820
|
-
determinism: 'deterministic' | 'bounded_nondeterministic' | 'open_nondeterministic';
|
|
1821
|
-
witness_id?: string;
|
|
1822
|
-
created_at: number;
|
|
1823
|
-
metadata?: Record<string, unknown>;
|
|
1824
|
-
}
|
|
1825
|
-
interface TimelineBranch {
|
|
1826
|
-
branch_id: string;
|
|
1827
|
-
timeline_id: string;
|
|
1828
|
-
origin_timeline_id: string;
|
|
1829
|
-
origin_event_id: string;
|
|
1830
|
-
branch_type: 'fork' | 'simulation' | 'replay' | 'training';
|
|
1831
|
-
created_at_tps?: string;
|
|
1832
|
-
creator_subject_id: string;
|
|
1833
|
-
purpose: string;
|
|
1834
|
-
status: 'active' | 'completed' | 'abandoned';
|
|
1835
|
-
}
|
|
1836
|
-
interface StateSnapshot {
|
|
1837
|
-
snapshot_id: string;
|
|
1838
|
-
timeline_id: string;
|
|
1839
|
-
event_id: string;
|
|
1840
|
-
tps_coordinate?: string;
|
|
1841
|
-
state_hash: string;
|
|
1842
|
-
state_data: Record<string, unknown>;
|
|
1843
|
-
created_at: number;
|
|
1844
|
-
}
|
|
1845
|
-
type ReplayMode = 'strict' | 'analytical';
|
|
1846
|
-
interface ReplayRequest {
|
|
1847
|
-
source_event_id: string;
|
|
1848
|
-
mode: ReplayMode;
|
|
1849
|
-
override_payload?: Record<string, unknown>;
|
|
1850
|
-
}
|
|
1851
|
-
interface ReplayResult {
|
|
1852
|
-
original_event: TimelineEvent;
|
|
1853
|
-
replayed_event: TimelineEvent;
|
|
1854
|
-
mode: ReplayMode;
|
|
1855
|
-
deterministic_match: boolean;
|
|
1856
|
-
differences: ReplayDifference[];
|
|
1857
|
-
duration_ms: number;
|
|
1858
|
-
}
|
|
1859
|
-
interface ReplayDifference {
|
|
1860
|
-
field: string;
|
|
1861
|
-
original: unknown;
|
|
1862
|
-
replayed: unknown;
|
|
1863
|
-
}
|
|
1864
|
-
interface ForkRequest {
|
|
1865
|
-
source_event_id: string;
|
|
1866
|
-
new_payload: Record<string, unknown>;
|
|
1867
|
-
purpose: string;
|
|
1868
|
-
actor_id: string;
|
|
1869
|
-
}
|
|
1870
|
-
interface ForkResult {
|
|
1871
|
-
branch: TimelineBranch;
|
|
1872
|
-
forked_event: TimelineEvent;
|
|
1873
|
-
snapshot?: StateSnapshot;
|
|
1874
|
-
}
|
|
1875
|
-
interface SimulationRequest {
|
|
1876
|
-
intent: string;
|
|
1877
|
-
payload: Record<string, unknown>;
|
|
1878
|
-
actor_id: string;
|
|
1879
|
-
at_tps?: string;
|
|
1880
|
-
from_snapshot_id?: string;
|
|
1881
|
-
purpose: string;
|
|
1882
|
-
}
|
|
1883
|
-
interface SimulationResult {
|
|
1884
|
-
branch: TimelineBranch;
|
|
1885
|
-
simulated_event: TimelineEvent;
|
|
1886
|
-
predicted_outcome: Record<string, unknown>;
|
|
1887
|
-
side_effects: SimulatedSideEffect[];
|
|
1888
|
-
duration_ms: number;
|
|
1889
|
-
}
|
|
1890
|
-
interface SimulatedSideEffect {
|
|
1891
|
-
type: string;
|
|
1892
|
-
target: string;
|
|
1893
|
-
action: string;
|
|
1894
|
-
predicted_result: unknown;
|
|
1895
|
-
}
|
|
1896
|
-
interface TimelineComparison {
|
|
1897
|
-
timeline_a: string;
|
|
1898
|
-
timeline_b: string;
|
|
1899
|
-
event_pairs: Array<{
|
|
1900
|
-
event_a: TimelineEvent;
|
|
1901
|
-
event_b: TimelineEvent;
|
|
1902
|
-
match: boolean;
|
|
1903
|
-
differences: ReplayDifference[];
|
|
1904
|
-
}>;
|
|
1905
|
-
divergence_point?: string;
|
|
1906
|
-
}
|
|
1907
|
-
interface TimelineHandler {
|
|
1908
|
-
intent: string;
|
|
1909
|
-
execute(payload: Record<string, unknown>, context: TimelineHandlerContext): Promise<TimelineHandlerResult>;
|
|
1910
|
-
}
|
|
1911
|
-
interface TimelineHandlerContext {
|
|
1912
|
-
event_id: string;
|
|
1913
|
-
timeline_id: string;
|
|
1914
|
-
branch_id: string;
|
|
1915
|
-
domain: TimelineDomain;
|
|
1916
|
-
actor_id: string;
|
|
1917
|
-
tps_coordinate?: string;
|
|
1918
|
-
snapshot?: StateSnapshot;
|
|
1919
|
-
is_replay: boolean;
|
|
1920
|
-
is_simulation: boolean;
|
|
1921
|
-
}
|
|
1922
|
-
interface TimelineHandlerResult {
|
|
1923
|
-
ok: boolean;
|
|
1924
|
-
effect: string;
|
|
1925
|
-
result_data: Record<string, unknown>;
|
|
1926
|
-
side_effects?: SimulatedSideEffect[];
|
|
1927
|
-
}
|
|
1928
|
-
|
|
1929
|
-
interface TimelineStore {
|
|
1930
|
-
saveEvent(event: TimelineEvent): Promise<void>;
|
|
1931
|
-
getEvent(eventId: string): Promise<TimelineEvent | null>;
|
|
1932
|
-
getEventsByTimeline(timelineId: string): Promise<TimelineEvent[]>;
|
|
1933
|
-
getEventsByBranch(branchId: string): Promise<TimelineEvent[]>;
|
|
1934
|
-
saveBranch(branch: TimelineBranch): Promise<void>;
|
|
1935
|
-
getBranch(branchId: string): Promise<TimelineBranch | null>;
|
|
1936
|
-
getBranchesByTimeline(timelineId: string): Promise<TimelineBranch[]>;
|
|
1937
|
-
saveSnapshot(snapshot: StateSnapshot): Promise<void>;
|
|
1938
|
-
getSnapshot(snapshotId: string): Promise<StateSnapshot | null>;
|
|
1939
|
-
getSnapshotByEvent(eventId: string): Promise<StateSnapshot | null>;
|
|
1940
|
-
}
|
|
1941
|
-
declare class InMemoryTimelineStore implements TimelineStore {
|
|
1942
|
-
private events;
|
|
1943
|
-
private branches;
|
|
1944
|
-
private snapshots;
|
|
1945
|
-
saveEvent(event: TimelineEvent): Promise<void>;
|
|
1946
|
-
getEvent(eventId: string): Promise<TimelineEvent | null>;
|
|
1947
|
-
getEventsByTimeline(timelineId: string): Promise<TimelineEvent[]>;
|
|
1948
|
-
getEventsByBranch(branchId: string): Promise<TimelineEvent[]>;
|
|
1949
|
-
saveBranch(branch: TimelineBranch): Promise<void>;
|
|
1950
|
-
getBranch(branchId: string): Promise<TimelineBranch | null>;
|
|
1951
|
-
getBranchesByTimeline(timelineId: string): Promise<TimelineBranch[]>;
|
|
1952
|
-
saveSnapshot(snapshot: StateSnapshot): Promise<void>;
|
|
1953
|
-
getSnapshot(snapshotId: string): Promise<StateSnapshot | null>;
|
|
1954
|
-
getSnapshotByEvent(eventId: string): Promise<StateSnapshot | null>;
|
|
1955
|
-
}
|
|
1956
|
-
|
|
1957
|
-
declare class TimelineEngine {
|
|
1958
|
-
private readonly store;
|
|
1959
|
-
private handlers;
|
|
1960
|
-
constructor(store: TimelineStore);
|
|
1961
|
-
registerHandler(handler: TimelineHandler): void;
|
|
1962
|
-
recordEvent(intent: string, actorId: string, payload: Record<string, unknown>, result: Record<string, unknown>, options?: {
|
|
1963
|
-
timelineId?: string;
|
|
1964
|
-
branchId?: string;
|
|
1965
|
-
capsuleId?: string;
|
|
1966
|
-
tpsCoordinate?: string;
|
|
1967
|
-
witnessId?: string;
|
|
1968
|
-
determinism?: TimelineEvent['determinism'];
|
|
1969
|
-
parentEventId?: string;
|
|
1970
|
-
}): Promise<TimelineEvent>;
|
|
1971
|
-
replay(request: ReplayRequest): Promise<ReplayResult>;
|
|
1972
|
-
fork(request: ForkRequest): Promise<ForkResult>;
|
|
1973
|
-
simulate(request: SimulationRequest): Promise<SimulationResult>;
|
|
1974
|
-
compare(timelineIdA: string, timelineIdB: string): Promise<TimelineComparison>;
|
|
1975
|
-
createSnapshot(eventId: string, stateData: Record<string, unknown>): Promise<StateSnapshot>;
|
|
1976
|
-
restoreSnapshot(snapshotId: string): Promise<StateSnapshot>;
|
|
1977
|
-
}
|
|
1978
|
-
|
|
1979
762
|
type AxisTlvDtoCtor<T = object> = new (...args: never[]) => T;
|
|
1980
763
|
declare function encodeAxisTlvDto<T extends object>(dtoClass: AxisTlvDtoCtor<T>, data: Partial<Record<keyof T, unknown>>): Uint8Array;
|
|
1981
764
|
|
|
1982
|
-
interface PresenceDeclaration {
|
|
1983
|
-
softid: string;
|
|
1984
|
-
device_meta?: {
|
|
1985
|
-
fingerprint?: string;
|
|
1986
|
-
platform?: string;
|
|
1987
|
-
user_agent?: string;
|
|
1988
|
-
};
|
|
1989
|
-
}
|
|
1990
|
-
interface PresenceChallenge {
|
|
1991
|
-
challenge_id: string;
|
|
1992
|
-
nonce: string;
|
|
1993
|
-
temporal_anchor: number;
|
|
1994
|
-
ttl_ms: number;
|
|
1995
|
-
expires_at: number;
|
|
1996
|
-
}
|
|
1997
|
-
interface PresenceProof {
|
|
1998
|
-
challenge_id: string;
|
|
1999
|
-
signature: string;
|
|
2000
|
-
public_key: string;
|
|
2001
|
-
kid?: string;
|
|
2002
|
-
}
|
|
2003
|
-
interface PresenceReceipt {
|
|
2004
|
-
presence_id: string;
|
|
2005
|
-
softid: string;
|
|
2006
|
-
anchor_reflection: string;
|
|
2007
|
-
scope: {
|
|
2008
|
-
ip?: string;
|
|
2009
|
-
device_fingerprint?: string;
|
|
2010
|
-
};
|
|
2011
|
-
issued_at: number;
|
|
2012
|
-
expires_at: number;
|
|
2013
|
-
renewed_at?: number;
|
|
2014
|
-
}
|
|
2015
|
-
type PresenceStatus = 'active' | 'expired' | 'revoked';
|
|
2016
|
-
interface WritHead {
|
|
2017
|
-
tid: string;
|
|
2018
|
-
seq: number;
|
|
2019
|
-
}
|
|
2020
|
-
interface WritBody {
|
|
2021
|
-
who: string;
|
|
2022
|
-
act: string;
|
|
2023
|
-
res: string;
|
|
2024
|
-
law: string;
|
|
2025
|
-
}
|
|
2026
|
-
interface WritMeta {
|
|
2027
|
-
iat: number;
|
|
2028
|
-
exp: number;
|
|
2029
|
-
prev: string;
|
|
2030
|
-
}
|
|
2031
|
-
interface WritSignature {
|
|
2032
|
-
alg: 'ed25519';
|
|
2033
|
-
value: string;
|
|
2034
|
-
kid?: string;
|
|
2035
|
-
}
|
|
2036
|
-
interface Writ {
|
|
2037
|
-
head: WritHead;
|
|
2038
|
-
body: WritBody;
|
|
2039
|
-
meta: WritMeta;
|
|
2040
|
-
sig: WritSignature;
|
|
2041
|
-
}
|
|
2042
|
-
type GrantType = 'sovereign' | 'delegated' | 'system';
|
|
2043
|
-
interface GrantCapability {
|
|
2044
|
-
oec: string;
|
|
2045
|
-
scope: string;
|
|
2046
|
-
limit?: {
|
|
2047
|
-
rate?: string;
|
|
2048
|
-
amount?: number;
|
|
2049
|
-
depth?: string;
|
|
2050
|
-
};
|
|
2051
|
-
}
|
|
2052
|
-
interface GrantMeta {
|
|
2053
|
-
iat: number;
|
|
2054
|
-
exp: number;
|
|
2055
|
-
revocable: boolean;
|
|
2056
|
-
version: number;
|
|
2057
|
-
contract_ref?: string;
|
|
2058
|
-
}
|
|
2059
|
-
interface Grant {
|
|
2060
|
-
grant_id: string;
|
|
2061
|
-
issuer: string;
|
|
2062
|
-
subject: string;
|
|
2063
|
-
grant_type: GrantType;
|
|
2064
|
-
caps: GrantCapability[];
|
|
2065
|
-
meta: GrantMeta;
|
|
2066
|
-
sig: WritSignature;
|
|
2067
|
-
}
|
|
2068
|
-
type GrantStatus = 'active' | 'revoked' | 'expired';
|
|
2069
|
-
interface LoomReceipt {
|
|
2070
|
-
receipt_id: string;
|
|
2071
|
-
writ_hash: string;
|
|
2072
|
-
thread_id: string;
|
|
2073
|
-
sequence: number;
|
|
2074
|
-
effect: string;
|
|
2075
|
-
hash: string;
|
|
2076
|
-
prev_hash: string | null;
|
|
2077
|
-
executed_at: number;
|
|
2078
|
-
metadata?: Record<string, unknown>;
|
|
2079
|
-
}
|
|
2080
|
-
interface ThreadState {
|
|
2081
|
-
thread_id: string;
|
|
2082
|
-
softid: string;
|
|
2083
|
-
last_receipt_hash: string;
|
|
2084
|
-
sequence: number;
|
|
2085
|
-
updated_at: number;
|
|
2086
|
-
}
|
|
2087
|
-
type RevocationTargetType = 'grant' | 'presence' | 'softid';
|
|
2088
|
-
interface Revocation {
|
|
2089
|
-
revocation_id: string;
|
|
2090
|
-
target_type: RevocationTargetType;
|
|
2091
|
-
target_id: string;
|
|
2092
|
-
issuer_softid: string;
|
|
2093
|
-
reason?: string;
|
|
2094
|
-
effective_at: number;
|
|
2095
|
-
sig_value: string;
|
|
2096
|
-
}
|
|
2097
|
-
interface LoomValidationResult {
|
|
2098
|
-
valid: boolean;
|
|
2099
|
-
error?: string;
|
|
2100
|
-
code?: string;
|
|
2101
|
-
}
|
|
2102
|
-
interface PresenceVerifyResult extends LoomValidationResult {
|
|
2103
|
-
presence?: PresenceReceipt;
|
|
2104
|
-
}
|
|
2105
|
-
interface WritValidationResult extends LoomValidationResult {
|
|
2106
|
-
writ?: Writ;
|
|
2107
|
-
gate_failed?: 'temporal' | 'causal' | 'legal' | 'authentic';
|
|
2108
|
-
}
|
|
2109
|
-
interface GrantValidationResult extends LoomValidationResult {
|
|
2110
|
-
grant?: Grant;
|
|
2111
|
-
}
|
|
2112
|
-
|
|
2113
|
-
declare function deriveAnchorReflection(softid: string, context?: string, scope?: string): string;
|
|
2114
|
-
declare function canonicalizeWrit(writ: Omit<Writ, 'sig'>): string;
|
|
2115
|
-
declare function canonicalizeGrant(grant: Omit<Grant, 'sig'>): string;
|
|
2116
|
-
|
|
2117
765
|
declare function createPresenceChallenge(declaration: PresenceDeclaration, ttlMs?: number): PresenceChallenge;
|
|
2118
766
|
declare function signPresenceChallenge(challenge: PresenceChallenge, privateKeyHex: string, publicKeyHex: string, declaration: PresenceDeclaration, kid?: string): PresenceProof;
|
|
2119
767
|
declare function verifyPresenceProof(challenge: PresenceChallenge, proof: PresenceProof, declaration: PresenceDeclaration, durationMs?: number): PresenceVerifyResult;
|
|
@@ -2149,452 +797,4 @@ declare function executeLoomPipeline(writ: Writ, publicKeyHex: string, presence:
|
|
|
2149
797
|
code: string;
|
|
2150
798
|
};
|
|
2151
799
|
|
|
2152
|
-
|
|
2153
|
-
raw: string;
|
|
2154
|
-
actor_id: string;
|
|
2155
|
-
target?: string;
|
|
2156
|
-
params?: Record<string, unknown>;
|
|
2157
|
-
context?: Record<string, unknown>;
|
|
2158
|
-
}
|
|
2159
|
-
interface CompiledIntent {
|
|
2160
|
-
intent: string;
|
|
2161
|
-
actor_id: string;
|
|
2162
|
-
target?: string;
|
|
2163
|
-
params: Record<string, unknown>;
|
|
2164
|
-
constraints: IntentConstraint[];
|
|
2165
|
-
confidence: number;
|
|
2166
|
-
alternatives: AlternativeIntent[];
|
|
2167
|
-
needs_clarification: boolean;
|
|
2168
|
-
clarifications: ClarificationQuestion[];
|
|
2169
|
-
expected_outcome?: string;
|
|
2170
|
-
fallback?: string;
|
|
2171
|
-
risk: IntentRisk;
|
|
2172
|
-
metadata: Record<string, unknown>;
|
|
2173
|
-
}
|
|
2174
|
-
type ConstraintKind = 'required_param' | 'type_check' | 'range' | 'pattern' | 'temporal' | 'spatial' | 'authority' | 'safety' | 'custom';
|
|
2175
|
-
interface IntentConstraint {
|
|
2176
|
-
kind: ConstraintKind;
|
|
2177
|
-
field: string;
|
|
2178
|
-
description: string;
|
|
2179
|
-
satisfied: boolean;
|
|
2180
|
-
value?: unknown;
|
|
2181
|
-
expected?: unknown;
|
|
2182
|
-
}
|
|
2183
|
-
interface AlternativeIntent {
|
|
2184
|
-
intent: string;
|
|
2185
|
-
confidence: number;
|
|
2186
|
-
reason: string;
|
|
2187
|
-
}
|
|
2188
|
-
interface ClarificationQuestion {
|
|
2189
|
-
id: string;
|
|
2190
|
-
question: string;
|
|
2191
|
-
field: string;
|
|
2192
|
-
options?: string[];
|
|
2193
|
-
required: boolean;
|
|
2194
|
-
}
|
|
2195
|
-
type RiskLevel = 'none' | 'low' | 'medium' | 'high' | 'critical';
|
|
2196
|
-
interface IntentRisk {
|
|
2197
|
-
level: RiskLevel;
|
|
2198
|
-
score: number;
|
|
2199
|
-
factors: string[];
|
|
2200
|
-
}
|
|
2201
|
-
interface IntentParamSchema {
|
|
2202
|
-
name: string;
|
|
2203
|
-
type: 'string' | 'number' | 'boolean' | 'object' | 'array';
|
|
2204
|
-
required: boolean;
|
|
2205
|
-
description?: string;
|
|
2206
|
-
default?: unknown;
|
|
2207
|
-
pattern?: string;
|
|
2208
|
-
min?: number;
|
|
2209
|
-
max?: number;
|
|
2210
|
-
enum?: unknown[];
|
|
2211
|
-
}
|
|
2212
|
-
interface IntentSchema {
|
|
2213
|
-
intent: string;
|
|
2214
|
-
description: string;
|
|
2215
|
-
params: IntentParamSchema[];
|
|
2216
|
-
required_scopes?: string[];
|
|
2217
|
-
risk_level: RiskLevel;
|
|
2218
|
-
has_side_effects: boolean;
|
|
2219
|
-
reversible: boolean;
|
|
2220
|
-
related?: string[];
|
|
2221
|
-
tags?: string[];
|
|
2222
|
-
}
|
|
2223
|
-
interface CompilationResult {
|
|
2224
|
-
ok: boolean;
|
|
2225
|
-
compiled?: CompiledIntent;
|
|
2226
|
-
errors: CompilationError[];
|
|
2227
|
-
}
|
|
2228
|
-
interface CompilationError {
|
|
2229
|
-
code: string;
|
|
2230
|
-
message: string;
|
|
2231
|
-
field?: string;
|
|
2232
|
-
}
|
|
2233
|
-
|
|
2234
|
-
declare class IdelSchemaRegistry {
|
|
2235
|
-
private schemas;
|
|
2236
|
-
private aliases;
|
|
2237
|
-
register(schema: IntentSchema): void;
|
|
2238
|
-
registerAlias(alias: string, intent: string): void;
|
|
2239
|
-
get(intent: string): IntentSchema | undefined;
|
|
2240
|
-
resolve(raw: string): IntentSchema | undefined;
|
|
2241
|
-
findCandidates(raw: string): Array<{
|
|
2242
|
-
schema: IntentSchema;
|
|
2243
|
-
score: number;
|
|
2244
|
-
}>;
|
|
2245
|
-
list(): IntentSchema[];
|
|
2246
|
-
}
|
|
2247
|
-
declare class IdelCompiler {
|
|
2248
|
-
private readonly registry;
|
|
2249
|
-
constructor(registry: IdelSchemaRegistry);
|
|
2250
|
-
compile(proposal: IntentProposal): CompilationResult;
|
|
2251
|
-
applyClarifications(compiled: CompiledIntent, answers: Record<string, unknown>): CompilationResult;
|
|
2252
|
-
}
|
|
2253
|
-
|
|
2254
|
-
type NeedlePhase = 'created' | 'validated' | 'executing' | 'observed' | 'stitched' | 'failed';
|
|
2255
|
-
interface Needle {
|
|
2256
|
-
needle_id: string;
|
|
2257
|
-
phase: NeedlePhase;
|
|
2258
|
-
tps_coordinate?: string;
|
|
2259
|
-
intent: CompiledIntent;
|
|
2260
|
-
presence: PresenceReceipt;
|
|
2261
|
-
writ: Writ;
|
|
2262
|
-
grants: Grant[];
|
|
2263
|
-
observation?: AxisObservation;
|
|
2264
|
-
receipt?: LoomReceipt;
|
|
2265
|
-
verdict?: TruthVerdict;
|
|
2266
|
-
created_at: number;
|
|
2267
|
-
completed_at?: number;
|
|
2268
|
-
error?: NeedleError;
|
|
2269
|
-
}
|
|
2270
|
-
interface NeedleError {
|
|
2271
|
-
phase: NeedlePhase;
|
|
2272
|
-
code: string;
|
|
2273
|
-
message: string;
|
|
2274
|
-
}
|
|
2275
|
-
type StitchKind = 'deed' | 'silent' | 'torn';
|
|
2276
|
-
interface Stitch {
|
|
2277
|
-
stitch_id: string;
|
|
2278
|
-
kind: StitchKind;
|
|
2279
|
-
intent: string;
|
|
2280
|
-
actor_id: string;
|
|
2281
|
-
tps_coordinate?: string;
|
|
2282
|
-
observation: AxisObservation;
|
|
2283
|
-
verdict: TruthVerdict;
|
|
2284
|
-
receipt: LoomReceipt;
|
|
2285
|
-
thread_id: string;
|
|
2286
|
-
sequence: number;
|
|
2287
|
-
timeline_event_id?: string;
|
|
2288
|
-
stitched_at: number;
|
|
2289
|
-
}
|
|
2290
|
-
interface Thread {
|
|
2291
|
-
state: ThreadState;
|
|
2292
|
-
length: number;
|
|
2293
|
-
started_at_tps?: string;
|
|
2294
|
-
last_stitch_tps?: string;
|
|
2295
|
-
has_branches: boolean;
|
|
2296
|
-
branch_ids: string[];
|
|
2297
|
-
}
|
|
2298
|
-
|
|
2299
|
-
type NeedleHandler = (intent: CompiledIntent, context: NeedleHandlerContext) => Promise<NeedleHandlerResult>;
|
|
2300
|
-
interface NeedleHandlerContext {
|
|
2301
|
-
needle_id: string;
|
|
2302
|
-
actor_id: string;
|
|
2303
|
-
presence_id: string;
|
|
2304
|
-
writ: Writ;
|
|
2305
|
-
grants: Grant[];
|
|
2306
|
-
tps_coordinate?: string;
|
|
2307
|
-
}
|
|
2308
|
-
interface NeedleHandlerResult {
|
|
2309
|
-
ok: boolean;
|
|
2310
|
-
effect: string;
|
|
2311
|
-
data?: Record<string, unknown>;
|
|
2312
|
-
status_code?: number;
|
|
2313
|
-
}
|
|
2314
|
-
interface NeedlePipelineConfig {
|
|
2315
|
-
handlers: Map<string, NeedleHandler>;
|
|
2316
|
-
private_key: string;
|
|
2317
|
-
public_key: string;
|
|
2318
|
-
sensors?: AxisSensor[];
|
|
2319
|
-
record_timeline?: boolean;
|
|
2320
|
-
tps_provider?: () => string;
|
|
2321
|
-
}
|
|
2322
|
-
interface NeedlePipelineResult {
|
|
2323
|
-
ok: boolean;
|
|
2324
|
-
needle: Needle;
|
|
2325
|
-
stitch?: Stitch;
|
|
2326
|
-
thread_state?: ThreadState;
|
|
2327
|
-
timeline_event?: TimelineEvent;
|
|
2328
|
-
}
|
|
2329
|
-
|
|
2330
|
-
declare function assembleNeedle(params: {
|
|
2331
|
-
intent: CompiledIntent;
|
|
2332
|
-
presence: PresenceReceipt;
|
|
2333
|
-
writ: Writ;
|
|
2334
|
-
grants: Grant[];
|
|
2335
|
-
tps_coordinate?: string;
|
|
2336
|
-
}): Needle;
|
|
2337
|
-
declare function formStitch(needle: Needle, observation: AxisObservation, verdict: TruthVerdict, receipt: LoomReceipt): Stitch;
|
|
2338
|
-
declare function runNeedlePipeline(needle: Needle, config: NeedlePipelineConfig, threadState: ThreadState | null, prevReceipt: LoomReceipt | null, expectedOutcome?: ExpectedOutcome): Promise<NeedlePipelineResult>;
|
|
2339
|
-
|
|
2340
|
-
type KnotType = 'authority' | 'law' | 'causal' | 'decision' | 'irreversible';
|
|
2341
|
-
type KnotStatus = 'open' | 'tied' | 'broken' | 'forked';
|
|
2342
|
-
interface Knot {
|
|
2343
|
-
knot_id: string;
|
|
2344
|
-
type: KnotType;
|
|
2345
|
-
status: KnotStatus;
|
|
2346
|
-
stitch_ids: string[];
|
|
2347
|
-
thread_id: string;
|
|
2348
|
-
tps_anchor?: string;
|
|
2349
|
-
irreversible: boolean;
|
|
2350
|
-
capsule_id?: string;
|
|
2351
|
-
law_ref?: string;
|
|
2352
|
-
decision_stitch_id?: string;
|
|
2353
|
-
branch_ids: string[];
|
|
2354
|
-
required_count?: number;
|
|
2355
|
-
all_or_nothing: boolean;
|
|
2356
|
-
actor_id: string;
|
|
2357
|
-
created_at: number;
|
|
2358
|
-
tied_at?: number;
|
|
2359
|
-
broken_at?: number;
|
|
2360
|
-
break_reason?: string;
|
|
2361
|
-
witness_hash?: string;
|
|
2362
|
-
}
|
|
2363
|
-
interface KnotValidationResult {
|
|
2364
|
-
valid: boolean;
|
|
2365
|
-
passed_stitch_ids: string[];
|
|
2366
|
-
failed_stitch_ids: string[];
|
|
2367
|
-
can_tie: boolean;
|
|
2368
|
-
errors: KnotError[];
|
|
2369
|
-
}
|
|
2370
|
-
interface KnotError {
|
|
2371
|
-
code: string;
|
|
2372
|
-
message: string;
|
|
2373
|
-
stitch_id?: string;
|
|
2374
|
-
}
|
|
2375
|
-
interface KnotBreakRequest {
|
|
2376
|
-
knot_id: string;
|
|
2377
|
-
actor_id: string;
|
|
2378
|
-
reason: string;
|
|
2379
|
-
override_grant_id?: string;
|
|
2380
|
-
signature?: string;
|
|
2381
|
-
}
|
|
2382
|
-
|
|
2383
|
-
interface OpenKnotParams {
|
|
2384
|
-
type: KnotType;
|
|
2385
|
-
thread_id: string;
|
|
2386
|
-
actor_id: string;
|
|
2387
|
-
tps_anchor?: string;
|
|
2388
|
-
capsule_id?: string;
|
|
2389
|
-
law_ref?: string;
|
|
2390
|
-
required_count?: number;
|
|
2391
|
-
all_or_nothing?: boolean;
|
|
2392
|
-
}
|
|
2393
|
-
declare function openKnot(params: OpenKnotParams): Knot;
|
|
2394
|
-
declare function addStitchToKnot(knot: Knot, stitch: Stitch): string | null;
|
|
2395
|
-
declare function validateKnot(knot: Knot, stitches: Stitch[]): KnotValidationResult;
|
|
2396
|
-
declare function tieKnot(knot: Knot, stitches: Stitch[]): KnotValidationResult & {
|
|
2397
|
-
knot: Knot;
|
|
2398
|
-
};
|
|
2399
|
-
declare function breakKnot(knot: Knot, request: KnotBreakRequest): {
|
|
2400
|
-
ok: boolean;
|
|
2401
|
-
error?: string;
|
|
2402
|
-
};
|
|
2403
|
-
declare function forkFromKnot(knot: Knot, branchId: string, decisionStitchId?: string): {
|
|
2404
|
-
ok: boolean;
|
|
2405
|
-
error?: string;
|
|
2406
|
-
};
|
|
2407
|
-
declare function isKnotOpen(knot: Knot): boolean;
|
|
2408
|
-
declare function isPointOfNoReturn(knot: Knot): boolean;
|
|
2409
|
-
declare function findKnotsForStitch(stitchId: string, knots: Knot[]): Knot[];
|
|
2410
|
-
declare function getIrreversibleKnots(knots: Knot[]): Knot[];
|
|
2411
|
-
declare function getDecisionPoints(knots: Knot[]): Knot[];
|
|
2412
|
-
|
|
2413
|
-
interface FabricCell {
|
|
2414
|
-
key: string;
|
|
2415
|
-
value: unknown;
|
|
2416
|
-
last_stitch_id: string;
|
|
2417
|
-
last_tps?: string;
|
|
2418
|
-
write_count: number;
|
|
2419
|
-
locked: boolean;
|
|
2420
|
-
locked_by_knot?: string;
|
|
2421
|
-
}
|
|
2422
|
-
interface Fabric {
|
|
2423
|
-
fabric_id: string;
|
|
2424
|
-
state_hash: string;
|
|
2425
|
-
cells: Map<string, FabricCell>;
|
|
2426
|
-
thread_ids: string[];
|
|
2427
|
-
stitch_count: number;
|
|
2428
|
-
knot_count: number;
|
|
2429
|
-
projected_at_tps?: string;
|
|
2430
|
-
computed_at: number;
|
|
2431
|
-
version: number;
|
|
2432
|
-
}
|
|
2433
|
-
interface FabricEffect {
|
|
2434
|
-
mutations: Record<string, unknown | null>;
|
|
2435
|
-
reads?: string[];
|
|
2436
|
-
}
|
|
2437
|
-
type FabricEffectResolver = (stitch: Stitch) => FabricEffect;
|
|
2438
|
-
type FabricDiffKind = 'added' | 'modified' | 'deleted';
|
|
2439
|
-
interface FabricDiffEntry {
|
|
2440
|
-
key: string;
|
|
2441
|
-
kind: FabricDiffKind;
|
|
2442
|
-
before?: unknown;
|
|
2443
|
-
after?: unknown;
|
|
2444
|
-
caused_by_stitch?: string;
|
|
2445
|
-
}
|
|
2446
|
-
interface FabricDiff {
|
|
2447
|
-
from_fabric_id: string;
|
|
2448
|
-
to_fabric_id: string;
|
|
2449
|
-
entries: FabricDiffEntry[];
|
|
2450
|
-
added_count: number;
|
|
2451
|
-
modified_count: number;
|
|
2452
|
-
deleted_count: number;
|
|
2453
|
-
}
|
|
2454
|
-
interface FabricQuery {
|
|
2455
|
-
prefix?: string;
|
|
2456
|
-
keys?: string[];
|
|
2457
|
-
actor_id?: string;
|
|
2458
|
-
thread_id?: string;
|
|
2459
|
-
locked_only?: boolean;
|
|
2460
|
-
}
|
|
2461
|
-
|
|
2462
|
-
declare function createFabric(): Fabric;
|
|
2463
|
-
declare function applyStitch(fabric: Fabric, stitch: Stitch, effect: FabricEffect): void;
|
|
2464
|
-
declare function weave(stitches: Stitch[], resolver: FabricEffectResolver, knots?: Knot[]): Fabric;
|
|
2465
|
-
declare function projectAt(stitches: Stitch[], resolver: FabricEffectResolver, tpsFilter: (tps: string | undefined) => boolean, knots?: Knot[]): Fabric;
|
|
2466
|
-
declare function lockCells(fabric: Fabric, keys: string[], knotId: string): void;
|
|
2467
|
-
declare function queryFabric(fabric: Fabric, query: FabricQuery): FabricCell[];
|
|
2468
|
-
declare function getFabricValue(fabric: Fabric, key: string): unknown | undefined;
|
|
2469
|
-
declare function diffFabrics(a: Fabric, b: Fabric): FabricDiff;
|
|
2470
|
-
|
|
2471
|
-
type PatternKind = 'sequence' | 'knot' | 'state' | 'decision' | 'anomaly';
|
|
2472
|
-
type PatternConfidence = number;
|
|
2473
|
-
interface Pattern {
|
|
2474
|
-
pattern_id: string;
|
|
2475
|
-
kind: PatternKind;
|
|
2476
|
-
name: string;
|
|
2477
|
-
description?: string;
|
|
2478
|
-
signature: PatternSignature;
|
|
2479
|
-
confidence: PatternConfidence;
|
|
2480
|
-
occurrence_count: number;
|
|
2481
|
-
first_seen_at: number;
|
|
2482
|
-
last_seen_at: number;
|
|
2483
|
-
seen_in_threads: string[];
|
|
2484
|
-
classification: 'normal' | 'anomalous' | 'unclassified';
|
|
2485
|
-
predicted_next?: PatternPrediction;
|
|
2486
|
-
}
|
|
2487
|
-
interface PatternSignature {
|
|
2488
|
-
intent_sequence?: string[];
|
|
2489
|
-
stitch_kinds?: StitchKind[];
|
|
2490
|
-
knot_type?: KnotType;
|
|
2491
|
-
knot_size?: number;
|
|
2492
|
-
state_keys?: string[];
|
|
2493
|
-
state_mutations?: Record<string, 'created' | 'updated' | 'deleted'>;
|
|
2494
|
-
decision_outcome?: string;
|
|
2495
|
-
actor?: string;
|
|
2496
|
-
min_length?: number;
|
|
2497
|
-
max_length?: number;
|
|
2498
|
-
}
|
|
2499
|
-
interface PatternMatch {
|
|
2500
|
-
pattern_id: string;
|
|
2501
|
-
matched_stitch_ids: string[];
|
|
2502
|
-
matched_knot_ids?: string[];
|
|
2503
|
-
match_score: number;
|
|
2504
|
-
thread_id: string;
|
|
2505
|
-
detected_at: number;
|
|
2506
|
-
}
|
|
2507
|
-
interface PatternPrediction {
|
|
2508
|
-
next_intent: string;
|
|
2509
|
-
confidence: PatternConfidence;
|
|
2510
|
-
alternatives: Array<{
|
|
2511
|
-
intent: string;
|
|
2512
|
-
confidence: PatternConfidence;
|
|
2513
|
-
}>;
|
|
2514
|
-
predicted_outcome?: string;
|
|
2515
|
-
risk_note?: string;
|
|
2516
|
-
}
|
|
2517
|
-
interface PatternStore {
|
|
2518
|
-
save(pattern: Pattern): void;
|
|
2519
|
-
get(patternId: string): Pattern | undefined;
|
|
2520
|
-
findByKind(kind: PatternKind): Pattern[];
|
|
2521
|
-
findByIntent(intent: string): Pattern[];
|
|
2522
|
-
all(): Pattern[];
|
|
2523
|
-
}
|
|
2524
|
-
|
|
2525
|
-
declare class InMemoryPatternStore implements PatternStore {
|
|
2526
|
-
private patterns;
|
|
2527
|
-
save(pattern: Pattern): void;
|
|
2528
|
-
get(patternId: string): Pattern | undefined;
|
|
2529
|
-
findByKind(kind: PatternKind): Pattern[];
|
|
2530
|
-
findByIntent(intent: string): Pattern[];
|
|
2531
|
-
all(): Pattern[];
|
|
2532
|
-
}
|
|
2533
|
-
declare function detectSequencePatterns(stitches: Stitch[], windowSize: number, minOccurrences: number): Pattern[];
|
|
2534
|
-
declare function detectKnotPatterns(knots: Knot[], minOccurrences: number): Pattern[];
|
|
2535
|
-
declare function matchPatterns(stitches: Stitch[], patterns: Pattern[]): PatternMatch[];
|
|
2536
|
-
declare function recordOccurrence(pattern: Pattern, threadId: string): void;
|
|
2537
|
-
declare function detectAnomalies(recentStitches: Stitch[], knownPatterns: Pattern[], threshold?: number): Pattern[];
|
|
2538
|
-
|
|
2539
|
-
interface TpsSensorOptions {
|
|
2540
|
-
maxDriftMs?: number;
|
|
2541
|
-
resolver?: (tps: string) => number | null;
|
|
2542
|
-
}
|
|
2543
|
-
declare class TpsSensor implements AxisSensor {
|
|
2544
|
-
readonly name = "TpsSensor";
|
|
2545
|
-
readonly order: number;
|
|
2546
|
-
private readonly maxDriftMs;
|
|
2547
|
-
private readonly resolver;
|
|
2548
|
-
constructor(options?: TpsSensorOptions);
|
|
2549
|
-
supports(input: SensorInput): boolean;
|
|
2550
|
-
run(input: SensorInput): Promise<SensorDecision>;
|
|
2551
|
-
}
|
|
2552
|
-
|
|
2553
|
-
type RiskSignalCollector = (input: SensorInput) => Promise<RiskSignal[]> | RiskSignal[];
|
|
2554
|
-
interface RiskGateSensorOptions {
|
|
2555
|
-
collectors: RiskSignalCollector[];
|
|
2556
|
-
denyThreshold?: number;
|
|
2557
|
-
flagThreshold?: number;
|
|
2558
|
-
}
|
|
2559
|
-
declare class RiskGateSensor implements AxisSensor {
|
|
2560
|
-
readonly name = "RiskGateSensor";
|
|
2561
|
-
readonly order: number;
|
|
2562
|
-
private readonly collectors;
|
|
2563
|
-
private readonly denyThreshold;
|
|
2564
|
-
private readonly flagThreshold;
|
|
2565
|
-
constructor(options: RiskGateSensorOptions);
|
|
2566
|
-
run(input: SensorInput): Promise<SensorDecision>;
|
|
2567
|
-
private evaluate;
|
|
2568
|
-
}
|
|
2569
|
-
|
|
2570
|
-
interface TickAuthCapsuleRef {
|
|
2571
|
-
capsule_id: string;
|
|
2572
|
-
capsule_type?: string;
|
|
2573
|
-
intent?: string;
|
|
2574
|
-
mode?: string;
|
|
2575
|
-
verification?: {
|
|
2576
|
-
status: 'approved' | 'denied' | 'expired' | 'replay_rejected' | 'consumed' | 'revoked';
|
|
2577
|
-
reason?: string;
|
|
2578
|
-
};
|
|
2579
|
-
scope?: string[];
|
|
2580
|
-
single_use?: boolean;
|
|
2581
|
-
tick_index?: number;
|
|
2582
|
-
}
|
|
2583
|
-
type TickAuthVerifier = (capsule: TickAuthCapsuleRef, input: SensorInput) => Promise<string | null> | (string | null);
|
|
2584
|
-
interface TickAuthSensorOptions {
|
|
2585
|
-
verifier?: TickAuthVerifier;
|
|
2586
|
-
matchIntent?: boolean;
|
|
2587
|
-
acceptTypes?: string[];
|
|
2588
|
-
}
|
|
2589
|
-
declare class TickAuthSensor implements AxisSensor {
|
|
2590
|
-
readonly name = "TickAuthSensor";
|
|
2591
|
-
readonly order: number;
|
|
2592
|
-
private readonly verifier?;
|
|
2593
|
-
private readonly matchIntent;
|
|
2594
|
-
private readonly acceptTypes;
|
|
2595
|
-
constructor(options?: TickAuthSensorOptions);
|
|
2596
|
-
supports(input: SensorInput): boolean;
|
|
2597
|
-
run(input: SensorInput): Promise<SensorDecision>;
|
|
2598
|
-
}
|
|
2599
|
-
|
|
2600
|
-
export { ATS1_HDR, ATS1_SCHEMA, AXIS_ANONYMOUS_KEY, AXIS_EXECUTION_CONTEXT_KEY, AXIS_META_KEY, AXIS_OPCODES, AXIS_PUBLIC_KEY, AXIS_RATE_LIMIT_KEY, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, type AlternativeIntent, type Anomaly, type AnomalyLevel, ats1 as Ats1Codec, Axis, Axis1DecodedFrame, type AxisAlg$1 as AxisAlg, AxisAnonymous, type AxisPacket as AxisBinaryPacket, type AxisCapsule, type AxisCapsuleConstraints, type AxisCapsulePayload, type AxisCapsuleRef, type AxisChainEncryption, type AxisChainEnvelope, AxisChainExecutor, type AxisChainRequest, type AxisChainResult, type AxisChainStatus, type AxisChainStep, type AxisChainStepResult, type AxisChainStepStatus, AxisContext, type AxisCrudHandler, type AxisDecoded, AxisDemoPubkey, type AxisEffect, type AxisExecutionContext, type AxisExecutionMode, AxisFilesDownloadHandler, AxisFilesFinalizeHandler, type AxisHandler, type AxisHandlerInit, AxisIdDto, type AxisIntentEnvelope, type AxisIntentObserver, type AxisIntentSensorOptions, type AxisIntentSensorRef, AxisIp, type AxisAlg as AxisJsonAlg, type AxisFrame as AxisJsonFrame, type AxisResponse as AxisJsonResponse, type AxisSig as AxisJsonSig, type AxisKeyExchangeRef, type AxisLawArticleSummary, type AxisLawDecision, type AxisLawEvaluationContext, type AxisLawEvaluationResult, type AxisLawEvaluator, AxisMediaTypes, type AxisObservation, type AxisObservedContext, type AxisObserverBinding, type AxisObserverBindingOptions, type AxisObserverContext, type AxisObserverDefinition, type AxisObserverEvent, type AxisObserverRef, type AxisObserverRegistration, type AxisPacket$1 as AxisPacket, T as AxisPacketTags, AxisPartialType, type AxisPostSensor, type AxisPreSensor, AxisPublic, AxisRateLimit, type AxisRateLimitConfig, AxisRaw, type AxisRequestContext, type AxisRequestData, AxisResponseDto, type AxisSensor, AxisSensorChainService, type AxisSensorInit, type AxisSig$1 as AxisSig, AxisTlvDto, BAND, CAPABILITIES, CAPSULE_POLICY_METADATA_KEY, CCE_ERROR, CCE_PROTOCOL_VERSION, CHAIN_METADATA_KEY, CONTRACT_METADATA_KEY, type Capability, Capsule, type CapsuleMode, CapsulePolicy, type CapsulePolicyOptions, type CapsuleScopeMode, type CceCapsuleClaims as CceCapsuleClaimsType, CceError, type CceExecutionContext as CceExecutionContextType, type CceHandler, type CceHandlerContext, type CceHandlerResult, type CcePipelineConfig, type CcePipelineResult, type CcePolicyContext, type CcePolicyDecision, type CcePolicyEvaluator, type CceRequestEnvelope as CceRequestEnvelopeType, type CceResponseEnvelope as CceResponseEnvelopeType, type CceWitnessRecord as CceWitnessRecordType, Chain, type ChainOptions, type ChainResult, type ClarificationQuestion, type CompilationError, type CompilationResult, type CompiledIntent, type ConstraintKind, Contract, ContractViolationError, DEFAULT_CONTRACTS, DEFAULT_TIMEOUT, Decision, DiskUploadFileStore, type DtoSchema, type ExecutionContract, ExecutionMeter, type ExecutionMetrics, type ExpectedOutcome, FALLBACK_CONTRACT, type Fabric, type FabricCell, type FabricDiff, type FabricDiffEntry, type FabricDiffKind, type FabricEffect, type FabricEffectResolver, type FabricQuery, type ForkRequest, type ForkResult, type Grant, type GrantCapability, type GrantMeta, type GrantStatus, type GrantType, type GrantValidationResult, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerDiscoveryService, HandlerSensors, INTENT_BODY_KEY, INTENT_METADATA_KEY, INTENT_REQUIREMENTS, INTENT_ROUTES_KEY, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, IdelCompiler, IdelSchemaRegistry, InMemoryPatternStore, InMemoryTimelineStore, Intent, IntentBody, type IntentConstraint, type IntentDefinition, type IntentKind, type IntentOptions, type IntentParamSchema, type IntentProposal, type IntentRisk, type IntentRoute, IntentRouter, type IntentSchema, IntentSensitivity, IntentSensors, type IntentTlvField, type KeyStatus, type Knot, type KnotBreakRequest, type KnotError, type KnotStatus, type KnotType, type KnotValidationResult, type LawEvaluationSensorOptions, type LoomExecutionResult, type LoomReceipt, type LoomValidationResult, type Needle, type NeedleError, type NeedleHandler, type NeedleHandlerContext, type NeedleHandlerResult, type NeedlePhase, type NeedlePipelineConfig, type NeedlePipelineResult, OBSERVER_BINDINGS_KEY, OBSERVER_METADATA_KEY, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationSensor, type ObservationStage, type ObservationStreamEntry, type ObservationWitnessSummary, type ObservedDeed, Observer, ObserverDiscoveryService, ObserverDispatcherService, ObserverRegistry, type ObserverVerdict, PRE_DECODE_BOUNDARY, PROOF_CAPABILITIES, type Pattern, type PatternConfidence, type PatternKind, type PatternMatch, type PatternPrediction, type PatternSignature, type PatternStore, type PresenceChallenge, type PresenceDeclaration, type PresenceProof, type PresenceReceipt, type PresenceStatus, type PresenceVerifyResult, REQUIRED_PROOF_METADATA_KEY, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type RegisteredChainConfig, type ReplayDifference, type ReplayRequest, type ReplayResult, RequiredProof, type RequiredProofKind, type ResponseContract, ResponseObserver, type ResponseObserverContext, type Revocation, type RevocationTargetType, RiskDecision, type RiskEvaluation, RiskGateSensor, type RiskGateSensorOptions, type RiskLevel, type RiskSignal, type RiskSignalCollector, SENSITIVITY_METADATA_KEY, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensitivity, Sensor, type SensorBand, type SensorDecision, SensorDecisions, SensorDiscoveryService, type SensorInput, type SensorMinifiedDecision, type SensorOptions, type SensorPhase, type SensorPhaseMetadata, SensorRegistry, type SimulatedSideEffect, type SimulationRequest, type SimulationResult, type StateSnapshot, type Stitch, type StitchKind, TLV_FIELDS_KEY, TLV_VALIDATORS_KEY, type Thread, type ThreadState, type TickAuthCapsuleRef, TickAuthSensor, type TickAuthSensorOptions, type TickAuthVerifier, type TimelineBranch, type TimelineComparison, type TimelineDomain, TimelineEngine, type TimelineEvent, type TimelineEventStatus, type TimelineHandler, type TimelineHandlerContext, type TimelineHandlerResult, type TimelineStore, TlvEnum, TlvField, type TlvFieldKind, type TlvFieldMeta, type TlvFieldOptions, TlvMinLen, TlvRange, TlvUtf8Pattern, TlvValidate, type TlvValidatorFn, type TlvValidatorMeta, TpsSensor, type TpsSensorOptions, type TruthStatus, type TruthVerdict, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, Witness, type Writ, type WritBody, type WritHead, type WritMeta, type WritSignature, type WritValidationResult, addStitchToKnot, applyStitch, assembleNeedle, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, breakKnot, buildAts1Hdr, buildAxisLawEvaluationContext, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeGrant, canonicalizeObservation, canonicalizeWrit, classifyIntent, createFabric, createGrant, createObservation, createPresenceChallenge, createReceipt, createRevocation, createWrit, decodeQueueMessage, deriveAnchorReflection, detectAnomalies, detectKnotPatterns, detectSequencePatterns, diffFabrics, encVarint, encodeAxisTlvDto, encodeQueueMessage, endStage, executeCcePipeline, executeLoomPipeline, extractDtoSchema, finalizeObservation, findKnotsForStitch, forkFromKnot, formStitch, getAxisExecutionContext, getDecisionPoints, getFabricValue, getGrantStatus, getIrreversibleKnots, getPresenceStatus, grantCoversAction, hasScope, hashObservation, isAdminOpcode, isKnotOpen, isKnownOpcode, isPointOfNoReturn, isRevoked, isTimestampValid, lockCells, matchPatterns, mergeAxisExecutionContext, nonce16, normalizeSensorDecision, openKnot, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, projectAt, queryFabric, recordOccurrence, recordSensor, renewPresence, resolveTimeout, runNeedlePipeline, scoreTruth, sensitivityName, signPresenceChallenge, stableJsonStringify, startStage, tieKnot, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, updateThreadState, utf8, validateFrameShape, validateGrant, validateKnot, validateWrit, varintU, verifyObservation, verifyPresenceProof, verifyReceiptChain, verifyResponse, weave, withAxisExecutionContext };
|
|
800
|
+
export { ATS1_HDR, ATS1_SCHEMA, AXIS_EXECUTION_CONTEXT_KEY, AXIS_OPCODES, AXIS_UPLOAD_FILE_STORE, AXIS_UPLOAD_RECEIPT_SIGNER, AXIS_UPLOAD_SESSION_STORE, ats1 as Ats1Codec, Axis1DecodedFrame, type AxisPacket as AxisBinaryPacket, AxisCapsuleRef, AxisChainEnvelope, AxisChainExecutor, AxisChainResult, AxisChainStep, type AxisCrudHandler, type AxisDecoded, type AxisExecutionContext, type AxisHandler, type AxisHandlerInit, AxisIdDto, AxisIntentSensorRef, AxisMediaTypes, AxisObservation, T as AxisPacketTags, AxisPartialType, type AxisPriorityLevel, type AxisPriorityLevelInput, AxisResponseDto, AxisSensorChainService, AxisTlvDto, BAND, BodyProfile, type BodyProfileValidation, BodyProfileValidator, CAPABILITIES, CHAIN_METADATA_KEY, type Capability, Chain, ChainOptions, type ChainResult, ContractViolationError, DEFAULT_TIMEOUT, type DeviceSEContext, DiskUploadFileStore, type DtoSchema, ExecutionMeter, type ExecutionMetrics, Grant, GrantCapability, GrantStatus, GrantValidationResult, HANDLER_METADATA_KEY, HANDLER_SENSORS_KEY, Handler, HandlerSensors, INTENT_BODY_KEY, INTENT_REQUIREMENTS, INTENT_SENSITIVITY_MAP, INTENT_SENSORS_KEY, INTENT_TIMEOUTS, IntentBody, type IntentDefinition, IntentRouter, IntentSensitivity, IntentSensors, IntentTlvField, type LoomExecutionResult, LoomReceipt, type MTLSContext, type ObservationQueueConfig, type ObservationQueueMessage, type ObservationStreamEntry, type ObservationWitnessSummary, ObserverDispatcherService, type ObserverVerdict, PRE_DECODE_BOUNDARY, PRIORITY_ORDER_METADATA_KEY, PROOF_CAPABILITIES, PresenceChallenge, PresenceDeclaration, PresenceProof, PresenceReceipt, PresenceStatus, PresenceVerifyResult, PriorityOrder, type PriorityOrderDefinition, type PriorityOrderOptions, type ProofType, type ProofVerificationResult, ProofVerificationService, RESPONSE_TAG_CREATED_AT, RESPONSE_TAG_CREATED_BY, RESPONSE_TAG_ID, RESPONSE_TAG_UPDATED_AT, RESPONSE_TAG_UPDATED_BY, type ReceiptEffect, type ResponseContract, ResponseObserver, type ResponseObserverContext, Revocation, SENSOR_METADATA_KEY, Schema2002_PasskeyLoginOptionsRes, Schema2011_PasskeyLoginVerifyReq, Schema2012_PasskeyLoginVerifyRes, Schema2021_PasskeyRegisterOptionsReq, Sensor, type SensorBand, SensorDecision, SensorInput, type SensorOptions, type SensorPhase, SensorRegistry, ThreadState, TlvValidatorFn, type UnsignedObservationWitness, type UploadFileStat, type UploadFileStore, type UploadReceiptSigner, type UploadSessionRecord, type UploadSessionStatus, type UploadSessionStore, Writ, WritBody, WritMeta, WritValidationResult, b64urlDecode, b64urlDecodeString, b64urlEncode, b64urlEncodeString, buildAts1Hdr, buildDtoDecoder, buildPacket, buildQueueMessage, buildReceiptHash, buildTLVs, buildUnsignedWitness, bytes, canAccessResource, canonicalJson, canonicalJsonExcluding, canonicalizeObservation, classifyIntent, comparePriorityOrder, createGrant, createPresenceChallenge, createReceipt, createRevocation, createWrit, decodeQueueMessage, encVarint, encodeAxisTlvDto, encodeQueueMessage, executeLoomPipeline, extractDtoSchema, getAxisExecutionContext, getGrantStatus, getPresenceStatus, getPriorityOrder, getPriorityOrderedTargets, grantCoversAction, hasScope, hashObservation, isAdminOpcode, isKnownOpcode, isRevoked, isTimestampValid, mergeAxisExecutionContext, nonce16, packPasskeyLoginOptionsReq, packPasskeyLoginOptionsRes, packPasskeyLoginVerifyReq, packPasskeyLoginVerifyRes, packPasskeyRegisterOptionsReq, parseAutoClaimEntries, parseScope, parseStreamEntries, priorityOrder, renewPresence, resolveTimeout, sensitivityName, signPresenceChallenge, stableJsonStringify, tlv, u64be, unpackPasskeyLoginOptionsReq, unpackPasskeyLoginVerifyReq, unpackPasskeyRegisterOptionsReq, updateThreadState, utf8, validateFrameShape, validateGrant, validateWrit, varintU, verifyPresenceProof, verifyReceiptChain, verifyResponse, withAxisExecutionContext };
|