@agirails/sdk 2.0.1-beta → 2.0.2

package/dist/utils/Logger.js

@@ -0,0 +1,382 @@
+"use strict";
+/**
+ * Logger - Structured Logging Framework for ACTP SDK
+ *
+ * SECURITY FIX (M-6): Comprehensive logging with:
+ * - Log levels (debug, info, warn, error)
+ * - Structured metadata
+ * - Sensitive data filtering
+ * - Configurable output
+ *
+ * @module utils/Logger
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sdkMetrics = exports.MetricsCollector = exports.sdkLogger = exports.Logger = void 0;
+/**
+ * Sensitive key name patterns (for checking object keys)
+ *
+ * SECURITY FIX (NEW-HIGH-3): NO GLOBAL FLAG on patterns used with .test()
+ * Global regex maintains lastIndex state, causing alternating match/no-match
+ * on consecutive calls, potentially leaking sensitive data intermittently.
+ */
+const SENSITIVE_KEY_PATTERNS = [
+    /privateKey/i,
+    /secret/i,
+    /password/i,
+    /apiKey/i,
+    /authorization/i,
+    /mnemonic/i,
+    /seed/i,
+];
+/**
+ * Sensitive value patterns (for redacting from string values)
+ *
+ * SECURITY FIX (NEW-HIGH-3): These are PATTERN STRINGS that get converted
+ * to fresh RegExp instances with /g flag for each replace() call.
+ * This avoids lastIndex state pollution between calls.
+ */
+const SENSITIVE_VALUE_PATTERNS = [
+    'bearer\\s+[a-zA-Z0-9\\-_.]+', // Bearer tokens
+    '0x[a-fA-F0-9]{64}', // Private keys (64 hex chars)
+    '0x[a-fA-F0-9]{128}', // Extended private keys
+];
+/**
+ * Log level priority (higher = more severe)
+ */
+const LOG_LEVEL_PRIORITY = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+/**
+ * Structured Logger for ACTP SDK
+ *
+ * @example
+ * ```typescript
+ * const logger = new Logger({ source: 'BlockchainRuntime', minLevel: 'info' });
+ *
+ * logger.info('Transaction created', { txId: '0x...' });
+ * logger.error('Transaction failed', { txId: '0x...' }, error);
+ * ```
+ */
+class Logger {
+    constructor(config = {}) {
+        this.config = {
+            minLevel: config.minLevel ?? 'info',
+            source: config.source ?? 'ACTP-SDK',
+            timestamps: config.timestamps ?? true,
+            filterSensitive: config.filterSensitive ?? true,
+            output: config.output ?? this.defaultOutput.bind(this),
+            enabled: config.enabled ?? true,
+        };
+    }
+    /**
+     * Create child logger with inherited config
+     */
+    child(source) {
+        return new Logger({
+            ...this.config,
+            source: `${this.config.source}:${source}`,
+        });
+    }
+    /**
+     * Log debug message
+     */
+    debug(message, metadata) {
+        this.log('debug', message, metadata);
+    }
+    /**
+     * Log info message
+     */
+    info(message, metadata) {
+        this.log('info', message, metadata);
+    }
+    /**
+     * Log warning message
+     */
+    warn(message, metadata) {
+        this.log('warn', message, metadata);
+    }
+    /**
+     * Log error message
+     */
+    error(message, metadata, error) {
+        this.log('error', message, metadata, error);
+    }
+    /**
+     * Core logging method
+     */
+    log(level, message, metadata, error) {
+        if (!this.config.enabled) {
+            return;
+        }
+        // Check log level
+        if (LOG_LEVEL_PRIORITY[level] < LOG_LEVEL_PRIORITY[this.config.minLevel]) {
+            return;
+        }
+        // Build log entry
+        const entry = {
+            timestamp: this.config.timestamps ? new Date().toISOString() : '',
+            level,
+            message,
+            source: this.config.source,
+        };
+        // Add metadata (filtered for sensitive data)
+        if (metadata) {
+            entry.metadata = this.config.filterSensitive
+                ? this.filterSensitiveData(metadata)
+                : metadata;
+        }
+        // Add error details
+        if (error) {
+            entry.error = {
+                name: error.name,
+                message: error.message,
+                stack: error.stack,
+            };
+        }
+        // Output the log
+        this.config.output(entry);
+    }
+    /**
+     * Filter sensitive data from metadata
+     *
+     * SECURITY FIX (NEW-HIGH-3): Uses separate pattern arrays for keys and values.
+     * Key patterns have no /g flag (used with .test()).
+     * Value patterns are strings converted to fresh RegExp instances per call.
+     */
+    filterSensitiveData(obj) {
+        const filtered = {};
+        for (const [key, value] of Object.entries(obj)) {
+            // SECURITY FIX (NEW-HIGH-3): Check if key matches sensitive pattern
+            // Using patterns without /g flag - safe to use with .test()
+            const isSensitiveKey = SENSITIVE_KEY_PATTERNS.some((pattern) => pattern.test(key));
+            if (isSensitiveKey) {
+                filtered[key] = '[REDACTED]';
+                continue;
+            }
+            // Recursively filter nested objects
+            if (value && typeof value === 'object' && !Array.isArray(value)) {
+                filtered[key] = this.filterSensitiveData(value);
+            }
+            else if (Array.isArray(value)) {
+                // SECURITY FIX: Also filter arrays
+                filtered[key] = value.map((item) => {
+                    if (typeof item === 'string') {
+                        return this.redactSensitiveValues(item);
+                    }
+                    else if (item && typeof item === 'object') {
+                        return this.filterSensitiveData(item);
+                    }
+                    return item;
+                });
+            }
+            else if (typeof value === 'string') {
+                // SECURITY FIX (NEW-HIGH-3): Redact sensitive patterns from values
+                filtered[key] = this.redactSensitiveValues(value);
+            }
+            else {
+                filtered[key] = value;
+            }
+        }
+        return filtered;
+    }
+    /**
+     * Redact sensitive patterns from a string value
+     *
+     * SECURITY FIX (NEW-HIGH-3): Creates fresh RegExp instances with /gi flag
+     * for each call, avoiding lastIndex state pollution.
+     */
+    redactSensitiveValues(value) {
+        let result = value;
+        for (const patternStr of SENSITIVE_VALUE_PATTERNS) {
+            // Create fresh RegExp instance with global+case-insensitive flags
+            // This avoids lastIndex state issues from reusing regex instances
+            const pattern = new RegExp(patternStr, 'gi');
+            result = result.replace(pattern, '[REDACTED]');
+        }
+        return result;
+    }
+    /**
+     * Default console output handler
+     */
+    defaultOutput(entry) {
+        const prefix = entry.timestamp ? `[${entry.timestamp}] ` : '';
+        const source = entry.source ? `[${entry.source}] ` : '';
+        const levelStr = entry.level.toUpperCase().padEnd(5);
+        const baseMessage = `${prefix}${levelStr} ${source}${entry.message}`;
+        switch (entry.level) {
+            case 'debug':
+                console.debug(baseMessage, entry.metadata || '');
+                break;
+            case 'info':
+                console.info(baseMessage, entry.metadata || '');
+                break;
+            case 'warn':
+                console.warn(baseMessage, entry.metadata || '');
+                break;
+            case 'error':
+                console.error(baseMessage, entry.metadata || '', entry.error || '');
+                break;
+        }
+    }
+    /**
+     * Enable logging
+     */
+    enable() {
+        this.config.enabled = true;
+    }
+    /**
+     * Disable logging
+     */
+    disable() {
+        this.config.enabled = false;
+    }
+    /**
+     * Set minimum log level
+     */
+    setLevel(level) {
+        this.config.minLevel = level;
+    }
+}
+exports.Logger = Logger;
+/**
+ * Global SDK logger instance
+ */
+exports.sdkLogger = new Logger({
+    source: 'ACTP-SDK',
+    minLevel: process.env.ACTP_LOG_LEVEL || 'info',
+    enabled: process.env.ACTP_LOGGING !== 'false',
+});
+/**
+ * Metrics collector for SDK operations
+ */
+class MetricsCollector {
+    constructor(logger) {
+        this.hooks = [];
+        this.logger = logger ?? exports.sdkLogger.child('Metrics');
+    }
+    /**
+     * Register a metrics hook
+     */
+    addHook(hook) {
+        this.hooks.push(hook);
+    }
+    /**
+     * Remove a metrics hook
+     */
+    removeHook(hook) {
+        const index = this.hooks.indexOf(hook);
+        if (index > -1) {
+            this.hooks.splice(index, 1);
+        }
+    }
+    /**
+     * Emit transaction created event
+     */
+    transactionCreated(txId, metadata) {
+        this.logger.info('Transaction created', { txId, ...metadata });
+        for (const hook of this.hooks) {
+            try {
+                hook.onTransactionCreated?.(txId, metadata);
+            }
+            catch (error) {
+                this.logger.error('Metrics hook error', { hook: 'onTransactionCreated' }, error);
+            }
+        }
+    }
+    /**
+     * Emit escrow linked event
+     */
+    escrowLinked(txId, escrowId, amount) {
+        this.logger.info('Escrow linked', { txId, escrowId, amount });
+        for (const hook of this.hooks) {
+            try {
+                hook.onEscrowLinked?.(txId, escrowId, amount);
+            }
+            catch (error) {
+                this.logger.error('Metrics hook error', { hook: 'onEscrowLinked' }, error);
+            }
+        }
+    }
+    /**
+     * Emit state transition event
+     */
+    stateTransition(txId, fromState, toState) {
+        this.logger.info('State transition', { txId, fromState, toState });
+        for (const hook of this.hooks) {
+            try {
+                hook.onStateTransition?.(txId, fromState, toState);
+            }
+            catch (error) {
+                this.logger.error('Metrics hook error', { hook: 'onStateTransition' }, error);
+            }
+        }
+    }
+    /**
+     * Emit escrow released event
+     */
+    escrowReleased(escrowId, amount) {
+        this.logger.info('Escrow released', { escrowId, amount });
+        for (const hook of this.hooks) {
+            try {
+                hook.onEscrowReleased?.(escrowId, amount);
+            }
+            catch (error) {
+                this.logger.error('Metrics hook error', { hook: 'onEscrowReleased' }, error);
+            }
+        }
+    }
+    /**
+     * Emit error event
+     */
+    recordError(error, context) {
+        this.logger.error('Error recorded', context, error);
+        for (const hook of this.hooks) {
+            try {
+                hook.onError?.(error, context);
+            }
+            catch (hookError) {
+                this.logger.error('Metrics hook error', { hook: 'onError' }, hookError);
+            }
+        }
+    }
+    /**
+     * Emit performance metric
+     */
+    recordPerformance(operation, durationMs, metadata) {
+        this.logger.debug('Performance', { operation, durationMs, ...metadata });
+        for (const hook of this.hooks) {
+            try {
+                hook.onPerformance?.(operation, durationMs, metadata);
+            }
+            catch (error) {
+                this.logger.error('Metrics hook error', { hook: 'onPerformance' }, error);
+            }
+        }
+    }
+    /**
+     * Helper to time an operation
+     */
+    async timeOperation(operation, fn, metadata) {
+        const startTime = Date.now();
+        try {
+            const result = await fn();
+            const durationMs = Date.now() - startTime;
+            this.recordPerformance(operation, durationMs, { ...metadata, success: true });
+            return result;
+        }
+        catch (error) {
+            const durationMs = Date.now() - startTime;
+            this.recordPerformance(operation, durationMs, { ...metadata, success: false });
+            throw error;
+        }
+    }
+}
+exports.MetricsCollector = MetricsCollector;
+/**
+ * Global metrics collector instance
+ */
+exports.sdkMetrics = new MetricsCollector();
+//# sourceMappingURL=Logger.js.map

package/dist/utils/Logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Logger.js","sourceRoot":"","sources":["../../src/utils/Logger.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA+CH;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAa;IACvC,aAAa;IACb,SAAS;IACT,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,WAAW;IACX,OAAO;CACR,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAa;IACzC,6BAA6B,EAAG,gBAAgB;IAChD,mBAAmB,EAAa,8BAA8B;IAC9D,oBAAoB,EAAY,wBAAwB;CACzD,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAA6B;IACnD,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAa,MAAM;IAGjB,YAAY,SAAuB,EAAE;QACnC,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,UAAU;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC/C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACtD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;SAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAc;QAClB,OAAO,IAAI,MAAM,CAAC;YAChB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAe,EAAE,QAAkC;QACvD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAe,EAAE,QAAkC;QACtD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAe,EAAE,QAAkC;QACtD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAe,EAAE,QAAkC,EAAE,KAAa;QACtE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,GAAG,CACT,KAAe,EACf,OAAe,EACf,QAAkC,EAClC,KAAa;QAEb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;YACjE,KAAK;YACL,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC3B,CAAC;QAEF,6CAA6C;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;gBAC1C,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,QAAQ,CAAC;QACf,CAAC;QAED,oBAAoB;QACpB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,GAAG;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CAAC,GAA4B;QACtD,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,oEAAoE;YACpE,4DAA4D;YAC5D,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAEnF,IAAI,cAAc,EAAE,CAAC;gBACnB,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC7B,SAAS;YACX,CAAC;YAED,oCAAoC;YACpC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAgC,CAAC,CAAC;YAC7E,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,mCAAmC;gBACnC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC7B,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;oBAC1C,CAAC;yBAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5C,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAA+B,CAAC,CAAC;oBACnE,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,mEAAmE;gBACnE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,KAAa;QACzC,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,UAAU,IAAI,wBAAwB,EAAE,CAAC;YAClD,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAe;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErD,MAAM,WAAW,GAAG,GAAG,MAAM,GAAG,QAAQ,IAAI,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAErE,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM;YACR,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpE,MAAM;QACV,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAe;QACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC/B,CAAC;CACF;AA/MD,wBA+MC;AAED;;GAEG;AACU,QAAA,SAAS,GAAG,IAAI,MAAM,CAAC;IAClC,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,cAA0B,IAAI,MAAM;IAC1D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,OAAO;CAC9C,CAAC,CAAC;AAsBH;;GAEG;AACH,MAAa,gBAAgB;IAI3B,YAAY,MAAe;QAHnB,UAAK,GAAkB,EAAE,CAAC;QAIhC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,iBAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAiB;QACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAiB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,IAAY,EAAE,QAAiC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,KAAc,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,KAAc,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAY,EAAE,SAAiB,EAAE,OAAe;QAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,KAAc,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB,EAAE,MAAc;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,KAAc,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAY,EAAE,OAAgC;QACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAkB,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAiB,EAAE,UAAkB,EAAE,QAAkC;QACzF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QACzE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,KAAc,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,EAAoB,EACpB,QAAkC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAjID,4CAiIC;AAED;;GAEG;AACU,QAAA,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC"}

package/dist/utils/NonceManager.d.ts

@@ -1,34 +1,267 @@
+/**
+ * Nonce Manager Implementation
+ * Tracks nonces per DID + message type for AIP-4 delivery proofs
+ * Reference: AIP-4 §3.2 (nonce field requirement)
+ *
+ * SECURITY FIXES:
+ * - C-2: Added atomic nonce allocation with locking
+ * - H-1: Added persistent nonce storage option
+ * - H-5: Added nonce upper bound validation
+ */
+/**
+ * Maximum allowed nonce value.
+ * SECURITY FIX (H-5): Prevents nonce overflow attacks.
+ * Using Number.MAX_SAFE_INTEGER (2^53 - 1) to ensure safe JavaScript integer operations.
+ */
+export declare const MAX_NONCE_VALUE: number;
+/**
+ * Nonce Manager Interface (from DeliveryProofBuilder)
+ */
 export interface NonceManager {
+    /**
+     * Get next nonce for message type
+     * @param messageType - Message type identifier (e.g., "agirails.delivery.v1")
+     * @returns Monotonically increasing nonce
+     */
     getNextNonce(messageType: string): number;
+    /**
+     * Record nonce usage
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonce(messageType: string, nonce: number): void;
+    /**
+     * Get current nonce (last used)
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonce(messageType: string): number;
+    /**
+     * Reset nonce for message type
+     * @param messageType - Message type identifier
+     */
     resetNonce(messageType: string): void;
 }
+/**
+ * In-Memory Nonce Manager
+ * Simple implementation using Map for per-message-type nonce tracking
+ *
+ * SECURITY FIXES:
+ * - C-2: Added atomic getAndIncrementNonce() to prevent race conditions
+ * - H-5: Added nonce upper bound validation
+ *
+ * ⚠️ WARNING: Nonces are lost on process restart. For production:
+ * - Use persistent storage (Redis, PostgreSQL, etc.)
+ * - Implement nonce recovery from blockchain events
+ * - Add DID-scoped nonce tracking
+ */
 export declare class InMemoryNonceManager implements NonceManager {
     private nonces;
+    private locks;
+    /**
+     * Create in-memory nonce manager
+     * @param initialNonces - Optional initial nonce values (for recovery)
+     */
     constructor(initialNonces?: Record<string, number>);
+    /**
+     * SECURITY FIX (C-2 + DEADLOCK-FIX): Acquire lock for message type
+     * Ensures atomic nonce operations.
+     *
+     * FIXED: Previous implementation had a deadlock bug where:
+     * - The resolver was stored in a closure but never accessible to releaseLock()
+     * - releaseLock() just deleted the entry without resolving waiting Promises
+     *
+     * New implementation stores both promise AND resolver together.
+     */
+    private acquireLock;
+    /**
+     * SECURITY FIX (C-2 + DEADLOCK-FIX): Release lock for message type
+     *
+     * FIXED: Now properly resolves the Promise before deleting,
+     * so any waiting acquireLock() calls can proceed.
+     */
+    private releaseLock;
+    /**
+     * Get next nonce for message type
+     * @param messageType - Message type identifier
+     * @returns Monotonically increasing nonce
+     */
     getNextNonce(messageType: string): number;
+    /**
+     * SECURITY FIX (C-2): Atomic get-and-increment nonce
+     * Returns the next nonce and records it atomically to prevent race conditions.
+     *
+     * @param messageType - Message type identifier
+     * @returns Atomically allocated nonce
+     */
+    getAndIncrementNonce(messageType: string): Promise<number>;
+    /**
+     * Record nonce usage
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonce(messageType: string, nonce: number): void;
+    /**
+     * Get current nonce (last used)
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonce(messageType: string): number;
+    /**
+     * Reset nonce for message type
+     * @param messageType - Message type identifier
+     */
     resetNonce(messageType: string): void;
+    /**
+     * Get all nonces (for persistence)
+     * @returns Record of all message type nonces
+     */
     getAllNonces(): Record<string, number>;
+    /**
+     * Clear all nonces
+     */
     clearAll(): void;
 }
+/**
+ * DID-Scoped Nonce Manager
+ * Tracks nonces per DID + message type combination
+ * Recommended for multi-agent scenarios
+ */
 export declare class DIDScopedNonceManager implements NonceManager {
     private nonces;
     private currentDID;
+    /**
+     * Create DID-scoped nonce manager
+     * @param did - DID to track nonces for
+     * @param initialNonces - Optional initial nonce values
+     */
     constructor(did: string, initialNonces?: Record<string, number>);
+    /**
+     * Get next nonce for message type (current DID)
+     * @param messageType - Message type identifier
+     * @returns Monotonically increasing nonce
+     */
     getNextNonce(messageType: string): number;
+    /**
+     * Record nonce usage (current DID)
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonce(messageType: string, nonce: number): void;
+    /**
+     * Get current nonce (current DID)
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonce(messageType: string): number;
+    /**
+     * Reset nonce for message type (current DID)
+     * @param messageType - Message type identifier
+     */
     resetNonce(messageType: string): void;
+    /**
+     * Get next nonce for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     * @returns Monotonically increasing nonce
+     */
     getNextNonceForDID(did: string, messageType: string): number;
+    /**
+     * Record nonce usage for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonceForDID(did: string, messageType: string, nonce: number): void;
+    /**
+     * Get current nonce for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonceForDID(did: string, messageType: string): number;
+    /**
+     * Reset nonce for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     */
     resetNonceForDID(did: string, messageType: string): void;
+    /**
+     * Switch current DID context
+     * @param did - New DID to track
+     */
     switchDID(did: string): void;
+    /**
+     * Get all nonces for all DIDs (for persistence)
+     * @returns Nested record of DID → message type → nonce
+     */
     getAllNonces(): Record<string, Record<string, number>>;
+    /**
+     * Clear all nonces for all DIDs
+     */
     clearAll(): void;
 }
-export declare function createNonceManager(did?: string, initialNonces?: Record<string, number>): NonceManager;
+/**
+ * File-based Nonce Manager for Persistent Storage
+ *
+ * SECURITY FIX (H-1): Persists nonces to disk to survive process restarts.
+ * SECURITY FIX (NEW-H-4): File locking to prevent concurrent write corruption.
+ * Uses atomic file writes (temp file + rename) for crash safety.
+ *
+ * @module utils/NonceManager
+ */
+export declare class FileBasedNonceManager implements NonceManager {
+    private inMemory;
+    private filePath;
+    private fs;
+    private path;
+    private lockfile;
+    /**
+     * Create file-based nonce manager
+     * @param stateDirectory - Directory to store nonces file
+     */
+    constructor(stateDirectory: string);
+    /**
+     * Load nonces from file
+     */
+    private loadFromFile;
+    /**
+     * Save nonces to file atomically with file locking
+     *
+     * SECURITY FIX (NEW-H-4): File locking prevents concurrent write corruption
+     */
+    private saveToFile;
+    getNextNonce(messageType: string): number;
+    /**
+     * Atomic get and increment with persistence
+     */
+    getAndIncrementNonce(messageType: string): Promise<number>;
+    recordNonce(messageType: string, nonce: number): void;
+    getCurrentNonce(messageType: string): number;
+    resetNonce(messageType: string): void;
+    getAllNonces(): Record<string, number>;
+    clearAll(): void;
+}
+/**
+ * Create nonce manager based on environment
+ * @param options - Configuration options
+ * @returns NonceManager instance
+ *
+ * @example
+ * ```typescript
+ * // In-memory (default)
+ * const manager = createNonceManager();
+ *
+ * // DID-scoped
+ * const manager = createNonceManager({ did: 'did:ethr:0x...' });
+ *
+ * // Persistent (survives restarts)
+ * const manager = createNonceManager({ stateDirectory: '/path/to/project' });
+ * ```
+ */
+export declare function createNonceManager(options?: {
+    did?: string;
+    initialNonces?: Record<string, number>;
+    stateDirectory?: string;
+}): NonceManager;
 //# sourceMappingURL=NonceManager.d.ts.map

package/dist/utils/NonceManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NonceManager.d.ts","sourceRoot":"","sources":["../../src/utils/NonceManager.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,YAAY;IAM3B,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAO1C,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAOtD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAM7C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAWD,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,MAAM,CAAkC;gBAMpC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAalD,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAUzC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAkBrD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAQ5C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAQrC,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAOtC,QAAQ,IAAI,IAAI;CAGjB;AAOD,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,MAAM,CAA+C;IAC7D,OAAO,CAAC,UAAU,CAAS;gBAOf,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiB/D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IASzC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASrD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAQ5C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAUrC,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;IAe5D,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IA0BxE,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;IAU/D,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAWxD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQ5B,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAatD,QAAQ,IAAI,IAAI;CAGjB;AAQD,wBAAgB,kBAAkB,CAChC,GAAG,CAAC,EAAE,MAAM,EACZ,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,YAAY,CAKd"}
+{"version":3,"file":"NonceManager.d.ts","sourceRoot":"","sources":["../../src/utils/NonceManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAA0B,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAE1C;;;;OAIG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtD;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAE7C;;;OAGG;IACH,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,MAAM,CAAkC;IAGhD,OAAO,CAAC,KAAK,CAA2E;IAExF;;;OAGG;gBACS,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAclD;;;;;;;;;OASG;YACW,WAAW;IAiBzB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAQnB;;;;OAIG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAezC;;;;;;OAMG;IACG,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBhE;;;;OAIG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAoBrD;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAI5C;;;OAGG;IACH,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAIrC;;;OAGG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAItC;;OAEG;IACH,QAAQ,IAAI,IAAI;CAGjB;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,MAAM,CAA+C;IAC7D,OAAO,CAAC,UAAU,CAAS;IAE3B;;;;OAIG;gBACS,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAY/D;;;;OAIG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIzC;;;;OAIG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrD;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAI5C;;;OAGG;IACH,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAIrC;;;;;OAKG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;IAS5D;;;;;OAKG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAoBxE;;;;;OAKG;IACH,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;IAK/D;;;;OAIG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAOxD;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI5B;;;OAGG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAUtD;;OAEG;IACH,QAAQ,IAAI,IAAI;CAGjB;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,EAAE,CAAsB;IAChC,OAAO,CAAC,IAAI,CAAwB;IACpC,OAAO,CAAC,QAAQ,CAAmC;IAEnD;;;OAGG;gBACS,cAAc,EAAE,MAAM;IAiBlC;;OAEG;IACH,OAAO,CAAC,YAAY;IA4BpB;;;;OAIG;YACW,UAAU;IA8CxB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIzC;;OAEG;IACG,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOhE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAQrD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAI5C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAQrC,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAItC,QAAQ,IAAI,IAAI;CAMjB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,CAAC,EAAE;IACR,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,YAAY,CAWd"}