@agirails/sdk 2.0.1-beta → 2.0.2

package/dist/utils/NonceManager.js

@@ -1,42 +1,190 @@
 "use strict";
+/**
+ * Nonce Manager Implementation
+ * Tracks nonces per DID + message type for AIP-4 delivery proofs
+ * Reference: AIP-4 §3.2 (nonce field requirement)
+ *
+ * SECURITY FIXES:
+ * - C-2: Added atomic nonce allocation with locking
+ * - H-1: Added persistent nonce storage option
+ * - H-5: Added nonce upper bound validation
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DIDScopedNonceManager = exports.InMemoryNonceManager = void 0;
-exports.createNonceManager = createNonceManager;
+exports.createNonceManager = exports.FileBasedNonceManager = exports.DIDScopedNonceManager = exports.InMemoryNonceManager = exports.MAX_NONCE_VALUE = void 0;
+const fsSafe_1 = require("./fsSafe");
+/**
+ * Maximum allowed nonce value.
+ * SECURITY FIX (H-5): Prevents nonce overflow attacks.
+ * Using Number.MAX_SAFE_INTEGER (2^53 - 1) to ensure safe JavaScript integer operations.
+ */
+exports.MAX_NONCE_VALUE = Number.MAX_SAFE_INTEGER;
+/**
+ * In-Memory Nonce Manager
+ * Simple implementation using Map for per-message-type nonce tracking
+ *
+ * SECURITY FIXES:
+ * - C-2: Added atomic getAndIncrementNonce() to prevent race conditions
+ * - H-5: Added nonce upper bound validation
+ *
+ * ⚠️ WARNING: Nonces are lost on process restart. For production:
+ * - Use persistent storage (Redis, PostgreSQL, etc.)
+ * - Implement nonce recovery from blockchain events
+ * - Add DID-scoped nonce tracking
+ */
 class InMemoryNonceManager {
+    /**
+     * Create in-memory nonce manager
+     * @param initialNonces - Optional initial nonce values (for recovery)
+     */
     constructor(initialNonces) {
         this.nonces = new Map();
+        // SECURITY FIX (C-2): Mutex for atomic nonce operations
+        // Store both the promise and its resolver for proper lock release
+        this.locks = new Map();
         if (initialNonces) {
             Object.entries(initialNonces).forEach(([messageType, nonce]) => {
+                // SECURITY FIX (H-5): Validate initial nonces
+                if (nonce > exports.MAX_NONCE_VALUE) {
+                    throw new Error(`Initial nonce ${nonce} for ${messageType} exceeds maximum allowed value ${exports.MAX_NONCE_VALUE}`);
+                }
                 this.nonces.set(messageType, nonce);
             });
         }
     }
+    /**
+     * SECURITY FIX (C-2 + DEADLOCK-FIX): Acquire lock for message type
+     * Ensures atomic nonce operations.
+     *
+     * FIXED: Previous implementation had a deadlock bug where:
+     * - The resolver was stored in a closure but never accessible to releaseLock()
+     * - releaseLock() just deleted the entry without resolving waiting Promises
+     *
+     * New implementation stores both promise AND resolver together.
+     */
+    async acquireLock(messageType) {
+        // Wait for any existing lock to be released
+        while (this.locks.has(messageType)) {
+            const existingLock = this.locks.get(messageType);
+            if (existingLock) {
+                await existingLock.promise;
+            }
+        }
+        // Create new lock with stored resolver
+        let resolver = () => { };
+        const lockPromise = new Promise((resolve) => {
+            resolver = resolve;
+        });
+        this.locks.set(messageType, { promise: lockPromise, resolve: resolver });
+    }
+    /**
+     * SECURITY FIX (C-2 + DEADLOCK-FIX): Release lock for message type
+     *
+     * FIXED: Now properly resolves the Promise before deleting,
+     * so any waiting acquireLock() calls can proceed.
+     */
+    releaseLock(messageType) {
+        const lock = this.locks.get(messageType);
+        if (lock) {
+            lock.resolve(); // Resolve the promise first
+            this.locks.delete(messageType); // Then delete the entry
+        }
+    }
+    /**
+     * Get next nonce for message type
+     * @param messageType - Message type identifier
+     * @returns Monotonically increasing nonce
+     */
     getNextNonce(messageType) {
         const current = this.nonces.get(messageType) || 0;
-        return current + 1;
+        const next = current + 1;
+        // SECURITY FIX (H-5): Check upper bound
+        if (next > exports.MAX_NONCE_VALUE) {
+            throw new Error(`Nonce overflow: next nonce ${next} exceeds maximum allowed value ${exports.MAX_NONCE_VALUE}. ` +
+                `Consider resetting nonces or using a larger storage type.`);
+        }
+        return next;
+    }
+    /**
+     * SECURITY FIX (C-2): Atomic get-and-increment nonce
+     * Returns the next nonce and records it atomically to prevent race conditions.
+     *
+     * @param messageType - Message type identifier
+     * @returns Atomically allocated nonce
+     */
+    async getAndIncrementNonce(messageType) {
+        await this.acquireLock(messageType);
+        try {
+            const current = this.nonces.get(messageType) || 0;
+            const next = current + 1;
+            // SECURITY FIX (H-5): Check upper bound
+            if (next > exports.MAX_NONCE_VALUE) {
+                throw new Error(`Nonce overflow: next nonce ${next} exceeds maximum allowed value ${exports.MAX_NONCE_VALUE}`);
+            }
+            this.nonces.set(messageType, next);
+            return next;
+        }
+        finally {
+            this.releaseLock(messageType);
+        }
     }
+    /**
+     * Record nonce usage
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonce(messageType, nonce) {
         const current = this.nonces.get(messageType) || 0;
+        // SECURITY FIX (H-5): Check upper bound
+        if (nonce > exports.MAX_NONCE_VALUE) {
+            throw new Error(`Nonce ${nonce} exceeds maximum allowed value ${exports.MAX_NONCE_VALUE}`);
+        }
+        // Ensure monotonic increase
         if (nonce <= current) {
             throw new Error(`Nonce must be strictly increasing: attempted ${nonce}, current is ${current}`);
         }
         this.nonces.set(messageType, nonce);
     }
+    /**
+     * Get current nonce (last used)
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonce(messageType) {
         return this.nonces.get(messageType) || 0;
     }
+    /**
+     * Reset nonce for message type
+     * @param messageType - Message type identifier
+     */
     resetNonce(messageType) {
         this.nonces.delete(messageType);
     }
+    /**
+     * Get all nonces (for persistence)
+     * @returns Record of all message type nonces
+     */
     getAllNonces() {
         return Object.fromEntries(this.nonces.entries());
     }
+    /**
+     * Clear all nonces
+     */
     clearAll() {
         this.nonces.clear();
     }
 }
 exports.InMemoryNonceManager = InMemoryNonceManager;
+/**
+ * DID-Scoped Nonce Manager
+ * Tracks nonces per DID + message type combination
+ * Recommended for multi-agent scenarios
+ */
 class DIDScopedNonceManager {
+    /**
+     * Create DID-scoped nonce manager
+     * @param did - DID to track nonces for
+     * @param initialNonces - Optional initial nonce values
+     */
     constructor(did, initialNonces) {
         this.nonces = new Map();
         this.currentDID = did;
@@ -48,18 +196,43 @@ class DIDScopedNonceManager {
             this.nonces.set(did, didNonces);
         }
     }
+    /**
+     * Get next nonce for message type (current DID)
+     * @param messageType - Message type identifier
+     * @returns Monotonically increasing nonce
+     */
     getNextNonce(messageType) {
         return this.getNextNonceForDID(this.currentDID, messageType);
     }
+    /**
+     * Record nonce usage (current DID)
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonce(messageType, nonce) {
         this.recordNonceForDID(this.currentDID, messageType, nonce);
     }
+    /**
+     * Get current nonce (current DID)
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonce(messageType) {
         return this.getCurrentNonceForDID(this.currentDID, messageType);
     }
+    /**
+     * Reset nonce for message type (current DID)
+     * @param messageType - Message type identifier
+     */
     resetNonce(messageType) {
         this.resetNonceForDID(this.currentDID, messageType);
     }
+    /**
+     * Get next nonce for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     * @returns Monotonically increasing nonce
+     */
     getNextNonceForDID(did, messageType) {
         const didNonces = this.nonces.get(did);
         if (!didNonces) {
@@ -68,6 +241,12 @@ class DIDScopedNonceManager {
         const current = didNonces.get(messageType) || 0;
         return current + 1;
     }
+    /**
+     * Record nonce usage for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     * @param nonce - Nonce used
+     */
     recordNonceForDID(did, messageType, nonce) {
         let didNonces = this.nonces.get(did);
         if (!didNonces) {
@@ -75,24 +254,44 @@ class DIDScopedNonceManager {
             this.nonces.set(did, didNonces);
         }
         const current = didNonces.get(messageType) || 0;
+        // Ensure monotonic increase
         if (nonce <= current) {
             throw new Error(`Nonce must be strictly increasing for ${did}: attempted ${nonce}, current is ${current}`);
         }
         didNonces.set(messageType, nonce);
     }
+    /**
+     * Get current nonce for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     * @returns Current nonce or 0 if none used
+     */
     getCurrentNonceForDID(did, messageType) {
         const didNonces = this.nonces.get(did);
         return didNonces?.get(messageType) || 0;
     }
+    /**
+     * Reset nonce for specific DID + message type
+     * @param did - DID identifier
+     * @param messageType - Message type identifier
+     */
     resetNonceForDID(did, messageType) {
         const didNonces = this.nonces.get(did);
         if (didNonces) {
             didNonces.delete(messageType);
         }
     }
+    /**
+     * Switch current DID context
+     * @param did - New DID to track
+     */
     switchDID(did) {
         this.currentDID = did;
     }
+    /**
+     * Get all nonces for all DIDs (for persistence)
+     * @returns Nested record of DID → message type → nonce
+     */
     getAllNonces() {
         const result = {};
         this.nonces.forEach((didNonces, did) => {
@@ -100,15 +299,181 @@ class DIDScopedNonceManager {
         });
         return result;
     }
+    /**
+     * Clear all nonces for all DIDs
+     */
     clearAll() {
         this.nonces.clear();
     }
 }
 exports.DIDScopedNonceManager = DIDScopedNonceManager;
-function createNonceManager(did, initialNonces) {
-    if (did) {
-        return new DIDScopedNonceManager(did, initialNonces);
+/**
+ * File-based Nonce Manager for Persistent Storage
+ *
+ * SECURITY FIX (H-1): Persists nonces to disk to survive process restarts.
+ * SECURITY FIX (NEW-H-4): File locking to prevent concurrent write corruption.
+ * Uses atomic file writes (temp file + rename) for crash safety.
+ *
+ * @module utils/NonceManager
+ */
+class FileBasedNonceManager {
+    /**
+     * Create file-based nonce manager
+     * @param stateDirectory - Directory to store nonces file
+     */
+    constructor(stateDirectory) {
+        this.fs = require('fs');
+        this.path = require('path');
+        // SECURITY FIX (NEW-H-4): File locking to prevent race conditions
+        this.lockfile = require('proper-lockfile');
+        // Ensure .actp directory exists
+        const actpDir = this.path.join(stateDirectory, '.actp');
+        (0, fsSafe_1.ensureSafeDir)(actpDir, 0o755);
+        this.filePath = this.path.join(actpDir, 'nonces.json');
+        // Load existing nonces
+        const initialNonces = this.loadFromFile();
+        this.inMemory = new InMemoryNonceManager(initialNonces);
+    }
+    /**
+     * Load nonces from file
+     */
+    loadFromFile() {
+        if (!this.fs.existsSync(this.filePath)) {
+            return undefined;
+        }
+        try {
+            // SECURITY: Refuse to read from symlinked nonce files
+            (0, fsSafe_1.assertSafeFileForRead)(this.filePath);
+            const MAX_NONCE_FILE_SIZE = 5 * 1024 * 1024; // 5MB
+            const st = this.fs.statSync(this.filePath);
+            if (st.size > MAX_NONCE_FILE_SIZE) {
+                throw new Error(`nonces.json exceeds ${MAX_NONCE_FILE_SIZE / 1024 / 1024}MB limit: ${this.filePath}`);
+            }
+            const data = JSON.parse(this.fs.readFileSync(this.filePath, 'utf-8'));
+            return data;
+        }
+        catch (e) {
+            // Fail closed: nonce resets can enable replay.
+            throw new Error(`Failed to parse nonces.json (replay protection would be weakened). ` +
+                `Fix/delete the file: ${this.filePath}. Error: ${e?.message || String(e)}`);
+        }
+    }
+    /**
+     * Save nonces to file atomically with file locking
+     *
+     * SECURITY FIX (NEW-H-4): File locking prevents concurrent write corruption
+     */
+    async saveToFile() {
+        const data = this.inMemory.getAllNonces();
+        const tempPath = `${this.filePath}.tmp`;
+        // SECURITY FIX: Ensure file exists before locking (proper-lockfile requirement)
+        (0, fsSafe_1.ensureSafeFile)(this.filePath, '{}', 0o644);
+        // SECURITY FIX (NEW-H-4): Acquire file lock before writing
+        let release = null;
+        try {
+            release = await this.lockfile.lock(this.filePath, {
+                stale: 10000, // Lock expires after 10 seconds if process crashes
+                retries: {
+                    retries: 5,
+                    minTimeout: 100,
+                    maxTimeout: 500
+                }
+            });
+            // Atomic write: temp file + rename
+            if (this.fs.existsSync(tempPath)) {
+                this.fs.unlinkSync(tempPath);
+            }
+            this.fs.writeFileSync(tempPath, JSON.stringify(data, null, 2), {
+                encoding: 'utf-8',
+                mode: 0o644,
+                flag: 'wx'
+            });
+            this.fs.renameSync(tempPath, this.filePath);
+        }
+        catch (error) {
+            // Clean up temp file on error
+            if (this.fs.existsSync(tempPath)) {
+                try {
+                    this.fs.unlinkSync(tempPath);
+                }
+                catch {
+                    // Ignore cleanup errors
+                }
+            }
+            throw error;
+        }
+        finally {
+            if (release) {
+                await release();
+            }
+        }
+    }
+    getNextNonce(messageType) {
+        return this.inMemory.getNextNonce(messageType);
+    }
+    /**
+     * Atomic get and increment with persistence
+     */
+    async getAndIncrementNonce(messageType) {
+        const nonce = await this.inMemory.getAndIncrementNonce(messageType);
+        // SECURITY FIX (NEW-H-4): saveToFile is now async
+        await this.saveToFile();
+        return nonce;
+    }
+    recordNonce(messageType, nonce) {
+        this.inMemory.recordNonce(messageType, nonce);
+        // Fire-and-forget to maintain sync interface
+        this.saveToFile().catch((err) => {
+            console.error('Failed to save nonce manager state:', err);
+        });
+    }
+    getCurrentNonce(messageType) {
+        return this.inMemory.getCurrentNonce(messageType);
+    }
+    resetNonce(messageType) {
+        this.inMemory.resetNonce(messageType);
+        // Fire-and-forget to maintain sync interface
+        this.saveToFile().catch((err) => {
+            console.error('Failed to save nonce manager state:', err);
+        });
+    }
+    getAllNonces() {
+        return this.inMemory.getAllNonces();
+    }
+    clearAll() {
+        this.inMemory.clearAll();
+        if (this.fs.existsSync(this.filePath)) {
+            this.fs.unlinkSync(this.filePath);
+        }
     }
-    return new InMemoryNonceManager(initialNonces);
 }
+exports.FileBasedNonceManager = FileBasedNonceManager;
+/**
+ * Create nonce manager based on environment
+ * @param options - Configuration options
+ * @returns NonceManager instance
+ *
+ * @example
+ * ```typescript
+ * // In-memory (default)
+ * const manager = createNonceManager();
+ *
+ * // DID-scoped
+ * const manager = createNonceManager({ did: 'did:ethr:0x...' });
+ *
+ * // Persistent (survives restarts)
+ * const manager = createNonceManager({ stateDirectory: '/path/to/project' });
+ * ```
+ */
+function createNonceManager(options) {
+    // SECURITY FIX (H-1): Support persistent storage
+    if (options?.stateDirectory) {
+        return new FileBasedNonceManager(options.stateDirectory);
+    }
+    if (options?.did) {
+        return new DIDScopedNonceManager(options.did, options?.initialNonces);
+    }
+    return new InMemoryNonceManager(options?.initialNonces);
+}
+exports.createNonceManager = createNonceManager;
 //# sourceMappingURL=NonceManager.js.map

package/dist/utils/NonceManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"NonceManager.js","sourceRoot":"","sources":["../../src/utils/NonceManager.ts"],"names":[],"mappings":";;;AA4RA,gDAQC;AArPD,MAAa,oBAAoB;IAO/B,YAAY,aAAsC;QAN1C,WAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;QAO9C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAOD,YAAY,CAAC,WAAmB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,OAAO,GAAG,CAAC,CAAC;IACrB,CAAC;IAOD,WAAW,CAAC,WAAmB,EAAE,KAAa;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAGlD,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,gBAAgB,OAAO,EAAE,CAC/E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAOD,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAMD,UAAU,CAAC,WAAmB;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAMD,YAAY;QACV,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAKD,QAAQ;QACN,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AA1ED,oDA0EC;AAOD,MAAa,qBAAqB;IAShC,YAAY,GAAW,EAAE,aAAsC;QARvD,WAAM,GAAqC,IAAI,GAAG,EAAE,CAAC;QAS3D,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QAEtB,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7D,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAOD,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC;IAOD,WAAW,CAAC,WAAmB,EAAE,KAAa;QAC5C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAOD,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC;IAMD,UAAU,CAAC,WAAmB;QAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IAQD,kBAAkB,CAAC,GAAW,EAAE,WAAmB;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,OAAO,GAAG,CAAC,CAAC;IACrB,CAAC;IAQD,iBAAiB,CAAC,GAAW,EAAE,WAAmB,EAAE,KAAa;QAC/D,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAGhD,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,eAAe,KAAK,gBAAgB,OAAO,EAAE,CAC1F,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAQD,qBAAqB,CAAC,GAAW,EAAE,WAAmB;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAOD,gBAAgB,CAAC,GAAW,EAAE,WAAmB;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAMD,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IAMD,YAAY;QACV,MAAM,MAAM,GAA2C,EAAE,CAAC;QAE1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAKD,QAAQ;QACN,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AApJD,sDAoJC;AAQD,SAAgB,kBAAkB,CAChC,GAAY,EACZ,aAAsC;IAEtC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,qBAAqB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"NonceManager.js","sourceRoot":"","sources":["../../src/utils/NonceManager.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,qCAAgF;AAEhF;;;;GAIG;AACU,QAAA,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAkCvD;;;;;;;;;;;;GAYG;AACH,MAAa,oBAAoB;IAM/B;;;OAGG;IACH,YAAY,aAAsC;QAT1C,WAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;QAChD,wDAAwD;QACxD,kEAAkE;QAC1D,UAAK,GAAiE,IAAI,GAAG,EAAE,CAAC;QAOtF,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7D,8CAA8C;gBAC9C,IAAI,KAAK,GAAG,uBAAe,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CACb,iBAAiB,KAAK,QAAQ,WAAW,kCAAkC,uBAAe,EAAE,CAC7F,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,WAAW,CAAC,WAAmB;QAC3C,4CAA4C;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,YAAY,CAAC,OAAO,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,QAAQ,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChD,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,WAAmB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,4BAA4B;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB;QAC1D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,WAAmB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC;QAEzB,wCAAwC;QACxC,IAAI,IAAI,GAAG,uBAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,kCAAkC,uBAAe,IAAI;gBACvF,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CAAC,WAAmB;QAC5C,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC;YAEzB,wCAAwC;YACxC,IAAI,IAAI,GAAG,uBAAe,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,kCAAkC,uBAAe,EAAE,CACtF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,WAAmB,EAAE,KAAa;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAElD,wCAAwC;QACxC,IAAI,KAAK,GAAG,uBAAe,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,kCAAkC,uBAAe,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,gBAAgB,OAAO,EAAE,CAC/E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,WAAmB;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAxKD,oDAwKC;AAED;;;;GAIG;AACH,MAAa,qBAAqB;IAIhC;;;;OAIG;IACH,YAAY,GAAW,EAAE,aAAsC;QARvD,WAAM,GAAqC,IAAI,GAAG,EAAE,CAAC;QAS3D,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QAEtB,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7D,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,WAAmB,EAAE,KAAa;QAC5C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,WAAmB;QAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,GAAW,EAAE,WAAmB;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,OAAO,GAAG,CAAC,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,GAAW,EAAE,WAAmB,EAAE,KAAa;QAC/D,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEhD,4BAA4B;QAC5B,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,eAAe,KAAK,gBAAgB,OAAO,EAAE,CAC1F,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,GAAW,EAAE,WAAmB;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,GAAW,EAAE,WAAmB;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,MAAM,MAAM,GAA2C,EAAE,CAAC;QAE1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AApJD,sDAoJC;AAED;;;;;;;;GAQG;AACH,MAAa,qBAAqB;IAOhC;;;OAGG;IACH,YAAY,cAAsB;QAChC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,kEAAkE;QAClE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE3C,gCAAgC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACxD,IAAA,sBAAa,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEvD,uBAAuB;QACvB,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,sDAAsD;YACtD,IAAA,8BAAqB,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAErC,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM;YACnD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,EAAE,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,uBAAuB,mBAAmB,GAAG,IAAI,GAAG,IAAI,aAAa,IAAI,CAAC,QAAQ,EAAE,CACrF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,OAAO,IAA8B,CAAC;QACxC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,+CAA+C;YAC/C,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACnE,wBAAwB,IAAI,CAAC,QAAQ,YAAY,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;QAExC,gFAAgF;QAChF,IAAA,uBAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE3C,2DAA2D;QAC3D,IAAI,OAAO,GAAiC,IAAI,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAChD,KAAK,EAAE,KAAK,EAAE,mDAAmD;gBACjE,OAAO,EAAE;oBACP,OAAO,EAAE,CAAC;oBACV,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;iBAChB;aACF,CAAC,CAAC;YAEH,mCAAmC;YACnC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBAC7D,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8BAA8B;YAC9B,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,WAAmB;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACpE,kDAAkD;QAClD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CAAC,WAAmB,EAAE,KAAa;QAC5C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9C,6CAA6C;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,UAAU,CAAC,WAAmB;QAC5B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACtC,6CAA6C;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF;AA1JD,sDA0JC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,kBAAkB,CAChC,OAIC;IAED,iDAAiD;IACjD,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;QAC5B,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAjBD,gDAiBC"}