@nextera.one/axis-server-sdk 2.3.5 → 2.3.7

package/dist/{axis-sensor-DMW4rfRg.d.mts → axis-sensor-BLUemDiZ.d.mts}

@@ -114,7 +114,7 @@ interface AxisSensor {
     readonly name: string;
     readonly order?: number;
     phase?: SensorPhaseMetadata | "PRE_DECODE" | "POST_DECODE";
-    supports?(input: SensorInput): Promise<SensorDecision>;
+    supports?(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 interface AxisSensorInit extends AxisSensor {

package/dist/{axis-sensor-DMW4rfRg.d.ts → axis-sensor-BLUemDiZ.d.ts}

@@ -114,7 +114,7 @@ interface AxisSensor {
     readonly name: string;
     readonly order?: number;
     phase?: SensorPhaseMetadata | "PRE_DECODE" | "POST_DECODE";
-    supports?(input: SensorInput): Promise<SensorDecision>;
+    supports?(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 interface AxisSensorInit extends AxisSensor {

package/dist/cce/index.d.mts

@@ -1,6 +1,6 @@
-import { C as CceCapsuleClaims, a as CceExecutionContext, b as CceRequestEnvelope } from '../cce-pipeline-CBt56guN.mjs';
-export { c as CCE_AES_KEY_BYTES, d as CCE_DERIVATION, e as CCE_ERROR, f as CCE_IV_BYTES, g as CCE_NONCE_BYTES, h as CCE_PROTOCOL_VERSION, i as CCE_TAG_BYTES, j as CceAlgorithm, k as CceAlgorithmDescriptor, l as CceAxisSigner, m as CceClientKeyEncryptor, n as CceConstraints, o as CceEncryptedKey, p as CceEncryptedPayload, q as CceError, r as CceErrorCode, s as CceHandler, t as CceHandlerContext, u as CceHandlerResult, v as CceKdfAlgorithm, w as CceKemAlgorithm, x as CcePipelineConfig, y as CcePipelineResult, z as CcePolicyContext, A as CcePolicyDecision, B as CcePolicyEvaluator, D as CceResponseEnvelope, E as CceResponseOptions, F as CceResponseStatus, G as CceSignature, H as CceVerificationState, I as CceWitnessRecord, J as CceWitnessStore, K as InMemoryCceWitnessStore, L as buildCceErrorResponse, M as buildCceResponse, N as buildWitnessRecord, O as executeCcePipeline, P as extractVerificationState } from '../cce-pipeline-CBt56guN.mjs';
-import { A as AxisSensor, S as SensorInput, a as SensorDecision } from '../axis-sensor-DMW4rfRg.mjs';
+import { C as CceCapsuleClaims, a as CceExecutionContext, b as CceRequestEnvelope } from '../cce-pipeline-By7ps8_F.mjs';
+export { c as CCE_AES_KEY_BYTES, d as CCE_DERIVATION, e as CCE_ERROR, f as CCE_IV_BYTES, g as CCE_NONCE_BYTES, h as CCE_PROTOCOL_VERSION, i as CCE_TAG_BYTES, j as CceAlgorithm, k as CceAlgorithmDescriptor, l as CceAxisSigner, m as CceClientKeyEncryptor, n as CceConstraints, o as CceEncryptedKey, p as CceEncryptedPayload, q as CceError, r as CceErrorCode, s as CceHandler, t as CceHandlerContext, u as CceHandlerResult, v as CceKdfAlgorithm, w as CceKemAlgorithm, x as CcePipelineConfig, y as CcePipelineResult, z as CcePolicyContext, A as CcePolicyDecision, B as CcePolicyEvaluator, D as CceResponseEnvelope, E as CceResponseOptions, F as CceResponseStatus, G as CceSignature, H as CceVerificationState, I as CceWitnessRecord, J as CceWitnessStore, K as InMemoryCceWitnessStore, L as buildCceErrorResponse, M as buildCceResponse, N as buildWitnessRecord, O as executeCcePipeline, P as extractVerificationState } from '../cce-pipeline-By7ps8_F.mjs';
+import { A as AxisSensor, S as SensorInput, a as SensorDecision } from '../axis-sensor-BLUemDiZ.mjs';
 
 interface CceDerivationInput {
     axisLocalSecret: string;
@@ -40,7 +40,7 @@ declare class CcePayloadDecryptionSensor implements AxisSensor {
     readonly order = 145;
     readonly phase: "POST_DECODE";
     constructor(keyProvider: CceAxisKeyProvider, aesProvider: CceAesGcmProvider, maxPayloadBytes?: number, payloadValidator?: CcePayloadValidator | undefined);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -62,7 +62,7 @@ declare class CceEnvelopeValidationSensor implements AxisSensor {
     readonly name = "cce.envelope.validation";
     readonly order = 5;
     readonly phase: "PRE_DECODE";
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -82,7 +82,7 @@ declare class CceClientSignatureSensor implements AxisSensor {
     readonly order = 45;
     readonly phase: "POST_DECODE";
     constructor(keyResolver: CceClientKeyResolver, signatureVerifier: CceSignatureVerifier);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -105,7 +105,7 @@ declare class CceCapsuleVerificationSensor implements AxisSensor {
     readonly order = 50;
     readonly phase: "POST_DECODE";
     constructor(issuerKeyResolver: CceIssuerKeyResolver, capsuleVerifier: CceCapsuleSignatureVerifier);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -115,7 +115,7 @@ declare class CceTpsWindowSensor implements AxisSensor {
     readonly order = 92;
     readonly phase: "POST_DECODE";
     constructor(skewMs?: number);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -125,7 +125,7 @@ declare class CceAudienceIntentBindingSensor implements AxisSensor {
     readonly order = 95;
     readonly phase: "POST_DECODE";
     constructor(axisAudience: string);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -155,7 +155,7 @@ declare class CceReplayProtectionSensor implements AxisSensor {
     constructor(replayStore: CceReplayStore, options?: {
         nonceTtlMs?: number;
     });
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 

package/dist/cce/index.d.ts

@@ -1,6 +1,6 @@
-import { C as CceCapsuleClaims, a as CceExecutionContext, b as CceRequestEnvelope } from '../cce-pipeline-BJ-F1isr.js';
-export { c as CCE_AES_KEY_BYTES, d as CCE_DERIVATION, e as CCE_ERROR, f as CCE_IV_BYTES, g as CCE_NONCE_BYTES, h as CCE_PROTOCOL_VERSION, i as CCE_TAG_BYTES, j as CceAlgorithm, k as CceAlgorithmDescriptor, l as CceAxisSigner, m as CceClientKeyEncryptor, n as CceConstraints, o as CceEncryptedKey, p as CceEncryptedPayload, q as CceError, r as CceErrorCode, s as CceHandler, t as CceHandlerContext, u as CceHandlerResult, v as CceKdfAlgorithm, w as CceKemAlgorithm, x as CcePipelineConfig, y as CcePipelineResult, z as CcePolicyContext, A as CcePolicyDecision, B as CcePolicyEvaluator, D as CceResponseEnvelope, E as CceResponseOptions, F as CceResponseStatus, G as CceSignature, H as CceVerificationState, I as CceWitnessRecord, J as CceWitnessStore, K as InMemoryCceWitnessStore, L as buildCceErrorResponse, M as buildCceResponse, N as buildWitnessRecord, O as executeCcePipeline, P as extractVerificationState } from '../cce-pipeline-BJ-F1isr.js';
-import { A as AxisSensor, S as SensorInput, a as SensorDecision } from '../axis-sensor-DMW4rfRg.js';
+import { C as CceCapsuleClaims, a as CceExecutionContext, b as CceRequestEnvelope } from '../cce-pipeline-CVeMpuKr.js';
+export { c as CCE_AES_KEY_BYTES, d as CCE_DERIVATION, e as CCE_ERROR, f as CCE_IV_BYTES, g as CCE_NONCE_BYTES, h as CCE_PROTOCOL_VERSION, i as CCE_TAG_BYTES, j as CceAlgorithm, k as CceAlgorithmDescriptor, l as CceAxisSigner, m as CceClientKeyEncryptor, n as CceConstraints, o as CceEncryptedKey, p as CceEncryptedPayload, q as CceError, r as CceErrorCode, s as CceHandler, t as CceHandlerContext, u as CceHandlerResult, v as CceKdfAlgorithm, w as CceKemAlgorithm, x as CcePipelineConfig, y as CcePipelineResult, z as CcePolicyContext, A as CcePolicyDecision, B as CcePolicyEvaluator, D as CceResponseEnvelope, E as CceResponseOptions, F as CceResponseStatus, G as CceSignature, H as CceVerificationState, I as CceWitnessRecord, J as CceWitnessStore, K as InMemoryCceWitnessStore, L as buildCceErrorResponse, M as buildCceResponse, N as buildWitnessRecord, O as executeCcePipeline, P as extractVerificationState } from '../cce-pipeline-CVeMpuKr.js';
+import { A as AxisSensor, S as SensorInput, a as SensorDecision } from '../axis-sensor-BLUemDiZ.js';
 
 interface CceDerivationInput {
     axisLocalSecret: string;
@@ -40,7 +40,7 @@ declare class CcePayloadDecryptionSensor implements AxisSensor {
     readonly order = 145;
     readonly phase: "POST_DECODE";
     constructor(keyProvider: CceAxisKeyProvider, aesProvider: CceAesGcmProvider, maxPayloadBytes?: number, payloadValidator?: CcePayloadValidator | undefined);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -62,7 +62,7 @@ declare class CceEnvelopeValidationSensor implements AxisSensor {
     readonly name = "cce.envelope.validation";
     readonly order = 5;
     readonly phase: "PRE_DECODE";
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -82,7 +82,7 @@ declare class CceClientSignatureSensor implements AxisSensor {
     readonly order = 45;
     readonly phase: "POST_DECODE";
     constructor(keyResolver: CceClientKeyResolver, signatureVerifier: CceSignatureVerifier);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -105,7 +105,7 @@ declare class CceCapsuleVerificationSensor implements AxisSensor {
     readonly order = 50;
     readonly phase: "POST_DECODE";
     constructor(issuerKeyResolver: CceIssuerKeyResolver, capsuleVerifier: CceCapsuleSignatureVerifier);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -115,7 +115,7 @@ declare class CceTpsWindowSensor implements AxisSensor {
     readonly order = 92;
     readonly phase: "POST_DECODE";
     constructor(skewMs?: number);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -125,7 +125,7 @@ declare class CceAudienceIntentBindingSensor implements AxisSensor {
     readonly order = 95;
     readonly phase: "POST_DECODE";
     constructor(axisAudience: string);
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 
@@ -155,7 +155,7 @@ declare class CceReplayProtectionSensor implements AxisSensor {
     constructor(replayStore: CceReplayStore, options?: {
         nonceTtlMs?: number;
     });
-    supports(input: SensorInput): Promise<SensorDecision>;
+    supports(input: SensorInput): boolean;
     run(input: SensorInput): Promise<SensorDecision>;
 }
 

package/dist/cce/index.js

@@ -791,13 +791,13 @@ var CceEnvelopeValidationSensor = class {
     this.order = 5;
     this.phase = "PRE_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cce === true || input.metadata?.contentType === "application/axis-cce" ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "Not a CCE envelope"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cce === true || input.metadata?.contentType === "application/axis-cce";
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const envelope = input.metadata?.cceEnvelope;
     if (!envelope) {
@@ -883,13 +883,13 @@ var CceClientSignatureSensor = class {
     this.order = 45;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceEnvelopeValid === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE envelope not validated"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceEnvelopeValid === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const envelope = input.metadata?.cceEnvelope;
     if (!envelope) {
@@ -964,13 +964,13 @@ var CceCapsuleVerificationSensor = class {
     this.order = 50;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceEnvelopeValid === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: CCE_ERROR.CAPSULE_NOT_VERIFIED,
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceEnvelopeValid === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceEnvelope?.capsule;
     if (!capsule) {
@@ -1082,13 +1082,13 @@ var CceTpsWindowSensor = class {
     this.order = 92;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceCapsuleVerified === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceCapsuleVerified === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceCapsule;
     if (!capsule) {
@@ -1139,13 +1139,13 @@ var CceAudienceIntentBindingSensor = class {
     this.order = 95;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceCapsuleVerified === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: CCE_ERROR.CAPSULE_NOT_VERIFIED,
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceCapsuleVerified === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceCapsule;
     const envelope = input.metadata?.cceEnvelope;
@@ -1240,13 +1240,13 @@ var CceReplayProtectionSensor = class {
     this.phase = "POST_DECODE";
     this.nonceTtlMs = options?.nonceTtlMs ?? 5 * 60 * 1e3;
   }
-  async supports(input) {
-    return input.metadata?.cceCapsuleVerified === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceCapsuleVerified === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceCapsule;
     const envelope = input.metadata?.cceEnvelope;
@@ -1324,13 +1324,13 @@ var CcePayloadDecryptionSensor = class {
     this.order = 145;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceEnvelopeValid === true && input.metadata?.cceClientSigVerified === true && input.metadata?.cceCapsuleVerified === true && input.metadata?.cceReplayClean === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE preconditions not met"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceEnvelopeValid === true && input.metadata?.cceClientSigVerified === true && input.metadata?.cceCapsuleVerified === true && input.metadata?.cceReplayClean === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const envelope = input.metadata?.cceEnvelope;
     if (!envelope) {