@nextera.one/axis-server-sdk 2.3.9 → 2.3.12

package/dist/sensors/index.mjs

@@ -450,6 +450,31 @@ var init_capsule_policy_decorator = __esm({
 
 // src/decorators/intent-policy.decorator.ts
 import "reflect-metadata";
+function appendRequiredProof(target, propertyKey, proof) {
+  const existing = propertyKey !== void 0 ? Reflect.getMetadata(
+    REQUIRED_PROOF_METADATA_KEY,
+    target,
+    propertyKey
+  ) ?? [] : Reflect.getMetadata(
+    REQUIRED_PROOF_METADATA_KEY,
+    target
+  ) ?? [];
+  const merged = existing.includes(proof) ? existing : [...existing, proof];
+  if (propertyKey !== void 0) {
+    Reflect.defineMetadata(
+      REQUIRED_PROOF_METADATA_KEY,
+      merged,
+      target,
+      propertyKey
+    );
+    return;
+  }
+  Reflect.defineMetadata(
+    REQUIRED_PROOF_METADATA_KEY,
+    merged,
+    target
+  );
+}
 function Sensitivity(level) {
   return ((target, propertyKey) => {
     if (propertyKey !== void 0) {
@@ -498,56 +523,12 @@ function RequiredProof(proofs) {
 }
 function Capsule() {
   return ((target, propertyKey) => {
-    const existing = propertyKey !== void 0 ? Reflect.getMetadata(
-      REQUIRED_PROOF_METADATA_KEY,
-      target,
-      propertyKey
-    ) ?? [] : Reflect.getMetadata(
-      REQUIRED_PROOF_METADATA_KEY,
-      target
-    ) ?? [];
-    const merged = existing.includes("CAPSULE") ? existing : [...existing, "CAPSULE"];
-    if (propertyKey !== void 0) {
-      Reflect.defineMetadata(
-        REQUIRED_PROOF_METADATA_KEY,
-        merged,
-        target,
-        propertyKey
-      );
-    } else {
-      Reflect.defineMetadata(
-        REQUIRED_PROOF_METADATA_KEY,
-        merged,
-        target
-      );
-    }
+    appendRequiredProof(target, propertyKey, "CAPSULE");
   });
 }
 function Witness() {
   return ((target, propertyKey) => {
-    const existing = propertyKey !== void 0 ? Reflect.getMetadata(
-      REQUIRED_PROOF_METADATA_KEY,
-      target,
-      propertyKey
-    ) ?? [] : Reflect.getMetadata(
-      REQUIRED_PROOF_METADATA_KEY,
-      target
-    ) ?? [];
-    const merged = existing.includes("WITNESS") ? existing : [...existing, "WITNESS"];
-    if (propertyKey !== void 0) {
-      Reflect.defineMetadata(
-        REQUIRED_PROOF_METADATA_KEY,
-        merged,
-        target,
-        propertyKey
-      );
-    } else {
-      Reflect.defineMetadata(
-        REQUIRED_PROOF_METADATA_KEY,
-        merged,
-        target
-      );
-    }
+    appendRequiredProof(target, propertyKey, "WITNESS");
   });
 }
 function Axis() {
@@ -557,31 +538,37 @@ function Axis() {
 }
 function AxisPublic() {
   return (target, propertyKey, descriptor) => {
-    if (descriptor) {
+    if (propertyKey !== void 0) {
       Reflect.defineMetadata(AXIS_PUBLIC_KEY, true, target, propertyKey);
+      appendRequiredProof(target, propertyKey, "NONE");
       return descriptor;
     }
     Reflect.defineMetadata(AXIS_PUBLIC_KEY, true, target);
+    appendRequiredProof(target, void 0, "NONE");
     return target;
   };
 }
 function AxisAuthorized() {
   return (target, propertyKey, descriptor) => {
-    if (descriptor) {
+    if (propertyKey !== void 0) {
       Reflect.defineMetadata(AXIS_AUTHORIZED_KEY, true, target, propertyKey);
+      appendRequiredProof(target, propertyKey, "AUTHORIZED");
       return descriptor;
     }
     Reflect.defineMetadata(AXIS_AUTHORIZED_KEY, true, target);
+    appendRequiredProof(target, void 0, "AUTHORIZED");
     return target;
   };
 }
 function AxisAnonymous() {
   return (target, propertyKey, descriptor) => {
-    if (descriptor) {
+    if (propertyKey !== void 0) {
       Reflect.defineMetadata(AXIS_ANONYMOUS_KEY, true, target, propertyKey);
+      appendRequiredProof(target, propertyKey, "ANONYMOUS");
       return descriptor;
     }
     Reflect.defineMetadata(AXIS_ANONYMOUS_KEY, true, target);
+    appendRequiredProof(target, void 0, "ANONYMOUS");
     return target;
   };
 }
@@ -2536,6 +2523,22 @@ function sensorRefKey(ref) {
 function sensorBindingKey(binding) {
   return `${binding.when}:${sensorRefKey(binding.ref)}`;
 }
+function mergeProofKinds(...proofGroups) {
+  const merged = /* @__PURE__ */ new Set();
+  for (const proofs of proofGroups) {
+    for (const proof of proofs ?? []) {
+      merged.add(proof);
+    }
+  }
+  return Array.from(merged);
+}
+function accessProofKinds(isPublic, isAnonymous, isAuthorized) {
+  const proofs = [];
+  if (isPublic) proofs.push("NONE");
+  if (isAnonymous) proofs.push("ANONYMOUS");
+  if (isAuthorized) proofs.push("AUTHORIZED");
+  return proofs;
+}
 function mergeIntentSensorBindings(...sensorGroups) {
   const merged = /* @__PURE__ */ new Map();
   for (const group of sensorGroups) {
@@ -3070,10 +3073,6 @@ var init_intent_router = __esm({
           REQUIRED_PROOF_METADATA_KEY,
           proto.constructor
         );
-        const requiredProof = methodProof ?? classProof;
-        if (requiredProof && requiredProof.length > 0) {
-          this.intentRequiredProof.set(intent, requiredProof);
-        }
         const isPublicMethod = Reflect.getMetadata(
           AXIS_PUBLIC_KEY,
           proto,
@@ -3083,9 +3082,6 @@ var init_intent_router = __esm({
           AXIS_PUBLIC_KEY,
           proto.constructor
         );
-        if (isPublicMethod || isPublicClass) {
-          this.publicIntents.add(intent);
-        }
         const isAnonMethod = Reflect.getMetadata(
           AXIS_ANONYMOUS_KEY,
           proto,
@@ -3095,9 +3091,6 @@ var init_intent_router = __esm({
           AXIS_ANONYMOUS_KEY,
           proto.constructor
         );
-        if (isAnonMethod || isAnonClass) {
-          this.anonymousIntents.add(intent);
-        }
         const isAuthorizedMethod = Reflect.getMetadata(
           AXIS_AUTHORIZED_KEY,
           proto,
@@ -3107,7 +3100,25 @@ var init_intent_router = __esm({
           AXIS_AUTHORIZED_KEY,
           proto.constructor
         );
-        if (isAuthorizedMethod || isAuthorizedClass) {
+        const methodPolicyProof = mergeProofKinds(
+          methodProof,
+          accessProofKinds(isPublicMethod, isAnonMethod, isAuthorizedMethod)
+        );
+        const classPolicyProof = mergeProofKinds(
+          classProof,
+          accessProofKinds(isPublicClass, isAnonClass, isAuthorizedClass)
+        );
+        const requiredProof = methodPolicyProof.length ? methodPolicyProof : classPolicyProof;
+        if (requiredProof.length > 0) {
+          this.intentRequiredProof.set(intent, requiredProof);
+        }
+        if (requiredProof.includes("NONE")) {
+          this.publicIntents.add(intent);
+        }
+        if (requiredProof.includes("ANONYMOUS")) {
+          this.anonymousIntents.add(intent);
+        }
+        if (requiredProof.includes("AUTHORIZED")) {
           this.authorizedIntents.add(intent);
         }
         const rateLimit = Reflect.getMetadata(
@@ -11811,6 +11822,80 @@ var require_intent_registry_sensor = __commonJS({
   }
 });
 
+// src/sensors/law-article-presence.sensor.ts
+var require_law_article_presence_sensor = __commonJS({
+  "src/sensors/law-article-presence.sensor.ts"(exports) {
+    "use strict";
+    var __decorate = exports && exports.__decorate || function(decorators, target, key, desc) {
+      var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+      if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+      else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      return c > 3 && r && Object.defineProperty(target, key, r), r;
+    };
+    var __metadata = exports && exports.__metadata || function(k, v) {
+      if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+    };
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.LawArticlePresenceSensor = void 0;
+    var sensor_decorator_1 = (init_sensor_decorator(), __toCommonJS(sensor_decorator_exports));
+    var sensor_bands_1 = (init_sensor_bands(), __toCommonJS(sensor_bands_exports));
+    var LawArticlePresenceSensor = class LawArticlePresenceSensor {
+      constructor(options) {
+        this.options = options;
+        this.name = "LawArticlePresenceSensor";
+        this.order = sensor_bands_1.BAND.IDENTITY + 27;
+      }
+      supports(input) {
+        if (this.mode() === "off")
+          return false;
+        if (!input.intent)
+          return false;
+        if (this.exemptIntents().includes(input.intent))
+          return false;
+        return true;
+      }
+      async run(input) {
+        const intent = input.intent;
+        const count = await this.options.getLawArticleCount(intent, input);
+        if (count > 0) {
+          return {
+            action: "ALLOW",
+            meta: { lawArticles: count }
+          };
+        }
+        const reason = `Intent '${intent}' has no law article mapping`;
+        if (this.mode() === "strict") {
+          return {
+            action: "DENY",
+            code: this.options.missingCode ?? "CAPSULE_NOT_LAWFUL",
+            reason
+          };
+        }
+        return {
+          action: "FLAG",
+          scoreDelta: this.options.auditScoreDelta ?? 5,
+          reasons: ["LAW_ARTICLE_MISSING", reason],
+          meta: { lawArticles: 0 }
+        };
+      }
+      mode() {
+        const configured = this.options.mode;
+        if (typeof configured === "function")
+          return configured();
+        return configured ?? "audit";
+      }
+      exemptIntents() {
+        return this.options.exemptIntents ?? ["system.ping"];
+      }
+    };
+    exports.LawArticlePresenceSensor = LawArticlePresenceSensor;
+    exports.LawArticlePresenceSensor = LawArticlePresenceSensor = __decorate([
+      (0, sensor_decorator_1.Sensor)({ phase: "POST_DECODE" }),
+      __metadata("design:paramtypes", [Object])
+    ], LawArticlePresenceSensor);
+  }
+});
+
 // src/sensors/law-evaluation.sensor.ts
 var require_law_evaluation_sensor = __commonJS({
   "src/sensors/law-evaluation.sensor.ts"(exports) {
@@ -13282,6 +13367,7 @@ var init_sensors = __esm({
     __reExport(sensors_exports, __toESM(require_header_tlv_limit_sensor()));
     __reExport(sensors_exports, __toESM(require_intent_allowlist_sensor()));
     __reExport(sensors_exports, __toESM(require_intent_registry_sensor()));
+    __reExport(sensors_exports, __toESM(require_law_article_presence_sensor()));
     __reExport(sensors_exports, __toESM(require_law_evaluation_sensor()));
     __reExport(sensors_exports, __toESM(require_proof_presence_sensor()));
     __reExport(sensors_exports, __toESM(require_protocol_strict_sensor()));