@agirails/sdk 2.0.1-beta → 2.0.2

package/dist/utils/UsedAttestationTracker.js

@@ -0,0 +1,309 @@
+"use strict";
+/**
+ * UsedAttestationTracker - Prevents EAS Attestation Replay Attacks (C-1)
+ *
+ * Tracks which attestation UIDs have been used for which transaction IDs.
+ * This prevents a malicious provider from reusing an attestation from
+ * Transaction A to settle Transaction B.
+ *
+ * SECURITY: ACTPKernel V1 contract accepts any attestationUID without validation.
+ * This tracker provides SDK-side protection until contract is upgraded.
+ *
+ * @module utils/UsedAttestationTracker
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createUsedAttestationTracker = exports.FileBasedUsedAttestationTracker = exports.InMemoryUsedAttestationTracker = void 0;
+const fsSafe_1 = require("./fsSafe");
+/**
+ * In-Memory Used Attestation Tracker
+ *
+ * SECURITY FIX (C-1): Prevents attestation replay attacks by tracking
+ * which attestation UIDs have been used for which transactions.
+ *
+ * SECURITY FIX (NEW-H-2): LRU-style cache with max size to prevent DoS
+ *
+ * WARNING: In-memory only. For production:
+ * - Use persistent storage (Redis, PostgreSQL, etc.)
+ * - Implement recovery from blockchain events
+ */
+class InMemoryUsedAttestationTracker {
+    /**
+     * Create in-memory tracker with optional max size
+     * @param maxSize - Maximum entries to store (default: 100,000)
+     */
+    constructor(maxSize = 100000) {
+        // Map: attestationUID -> txId
+        this.usedAttestations = new Map();
+        if (maxSize <= 0) {
+            throw new Error('maxSize must be positive');
+        }
+        this.maxSize = maxSize;
+    }
+    /**
+     * Record that an attestation was used for a transaction
+     * @param attestationUID - EAS attestation UID (bytes32)
+     * @param txId - Transaction ID (bytes32)
+     * @returns true if recorded, false if already used for different transaction
+     *
+     * SECURITY FIX (NEW-H-2): LRU eviction when max size reached
+     * SECURITY FIX (HIGH-1): Now async for interface consistency
+     */
+    async recordUsage(attestationUID, txId) {
+        return this.recordUsageSync(attestationUID, txId);
+    }
+    /**
+     * Synchronous version of recordUsage (for backward compatibility)
+     * @param attestationUID - EAS attestation UID (bytes32)
+     * @param txId - Transaction ID (bytes32)
+     * @returns true if recorded, false if already used for different transaction
+     */
+    recordUsageSync(attestationUID, txId) {
+        const normalizedUID = attestationUID.toLowerCase();
+        const normalizedTxId = txId.toLowerCase();
+        const existingTxId = this.usedAttestations.get(normalizedUID);
+        // If attestation was already used for a different transaction, reject
+        if (existingTxId && existingTxId !== normalizedTxId) {
+            return false;
+        }
+        // SECURITY FIX (NEW-H-2): Enforce max size limit with true LRU behavior
+        if (this.usedAttestations.size >= this.maxSize && !existingTxId) {
+            // Remove oldest entry (first entry in Map)
+            const firstKey = this.usedAttestations.keys().next().value;
+            if (firstKey) {
+                this.usedAttestations.delete(firstKey);
+            }
+        }
+        else if (existingTxId) {
+            // SECURITY FIX (M-3): True LRU - delete and re-add to move to end
+            this.usedAttestations.delete(normalizedUID);
+        }
+        // Record the usage (at end for LRU)
+        this.usedAttestations.set(normalizedUID, normalizedTxId);
+        return true;
+    }
+    /**
+     * Check if attestation has been used
+     * @param attestationUID - EAS attestation UID (bytes32)
+     * @returns Transaction ID if used, null if not used
+     *
+     * SECURITY FIX (MEDIUM-4): Updates access order for true LRU behavior
+     * Accessed items are moved to end of Map (most recently used)
+     */
+    getUsageForAttestation(attestationUID) {
+        const normalizedUID = attestationUID.toLowerCase();
+        const txId = this.usedAttestations.get(normalizedUID);
+        // SECURITY FIX (MEDIUM-4): True LRU - move accessed item to end
+        // Without this, eviction uses insertion order, not access order
+        if (txId !== undefined) {
+            this.usedAttestations.delete(normalizedUID);
+            this.usedAttestations.set(normalizedUID, txId);
+        }
+        return txId || null;
+    }
+    /**
+     * Check if attestation is valid for transaction
+     * @param attestationUID - EAS attestation UID
+     * @param txId - Transaction ID
+     * @returns true if attestation is unused or already used for this txId
+     *
+     * SECURITY FIX (MEDIUM-4): Updates access order for true LRU behavior
+     */
+    isValidForTransaction(attestationUID, txId) {
+        const normalizedUID = attestationUID.toLowerCase();
+        const normalizedTxId = txId.toLowerCase();
+        const existingTxId = this.usedAttestations.get(normalizedUID);
+        // SECURITY FIX (MEDIUM-4): True LRU - move accessed item to end
+        if (existingTxId !== undefined) {
+            this.usedAttestations.delete(normalizedUID);
+            this.usedAttestations.set(normalizedUID, existingTxId);
+        }
+        // Valid if: not used OR used for same transaction
+        return !existingTxId || existingTxId === normalizedTxId;
+    }
+    /**
+     * Clear all tracked attestations
+     */
+    clear() {
+        this.usedAttestations.clear();
+    }
+    /**
+     * Get all tracked attestations (for debugging/persistence)
+     */
+    getAllUsages() {
+        return Object.fromEntries(this.usedAttestations.entries());
+    }
+    /**
+     * Get count of tracked attestations
+     */
+    getCount() {
+        return this.usedAttestations.size;
+    }
+    /**
+     * Cleanup old entries based on timestamp (optional)
+     *
+     * SECURITY FIX (NEW-H-2): Manual cleanup for old entries
+     * Note: This requires external timestamp tracking. For automatic cleanup,
+     * use FileBasedUsedAttestationTracker with periodic cleanup.
+     *
+     * @param maxAgeHours - Remove entries older than this many hours
+     */
+    cleanupOldEntries(maxAgeHours) {
+        // In-memory tracker doesn't track timestamps
+        // This is a placeholder for future enhancement
+        console.warn('cleanupOldEntries not implemented for InMemoryUsedAttestationTracker. ' +
+            'Consider using FileBasedUsedAttestationTracker for time-based cleanup.');
+        return 0;
+    }
+}
+exports.InMemoryUsedAttestationTracker = InMemoryUsedAttestationTracker;
+/**
+ * File-based Used Attestation Tracker for persistence
+ *
+ * SECURITY FIX (C-1): Persistent storage for attestation tracking
+ * SECURITY FIX (NEW-H-4): File locking to prevent concurrent write corruption
+ *
+ * Survives process restarts.
+ */
+class FileBasedUsedAttestationTracker {
+    constructor(stateDirectory) {
+        this.inMemory = new InMemoryUsedAttestationTracker();
+        this.fs = require('fs');
+        this.path = require('path');
+        // SECURITY FIX (NEW-H-4): File locking to prevent race conditions
+        this.lockfile = require('proper-lockfile');
+        // Ensure directory exists
+        const actpDir = this.path.join(stateDirectory, '.actp');
+        (0, fsSafe_1.ensureSafeDir)(actpDir, 0o755);
+        this.filePath = this.path.join(actpDir, 'used-attestations.json');
+        // Load existing data
+        this.loadFromFile();
+    }
+    loadFromFile() {
+        if (!this.fs.existsSync(this.filePath))
+            return;
+        // SECURITY: Refuse to read from symlinked tracker files
+        (0, fsSafe_1.assertSafeFileForRead)(this.filePath);
+        // Basic size limit to avoid memory DoS on parse
+        const MAX_TRACKER_FILE_SIZE = 10 * 1024 * 1024; // 10MB
+        const st = this.fs.statSync(this.filePath);
+        if (st.size > MAX_TRACKER_FILE_SIZE) {
+            throw new Error(`used-attestations.json exceeds ${MAX_TRACKER_FILE_SIZE / 1024 / 1024}MB limit: ${this.filePath}`);
+        }
+        try {
+            const data = JSON.parse(this.fs.readFileSync(this.filePath, 'utf-8'));
+            for (const [uid, txId] of Object.entries(data)) {
+                this.inMemory.recordUsageSync(uid, txId);
+            }
+        }
+        catch (e) {
+            // Fail closed: losing replay-protection state is a security issue.
+            throw new Error(`Failed to parse used-attestations.json (replay protection would be disabled). ` +
+                `Fix/delete the file: ${this.filePath}. Error: ${e?.message || String(e)}`);
+        }
+    }
+    /**
+     * Save data to file with file locking
+     *
+     * SECURITY FIX (NEW-H-4): File locking prevents concurrent write corruption
+     * SECURITY FIX (NEW-HIGH-1): Create file before locking if it doesn't exist
+     */
+    async saveToFile() {
+        const data = this.inMemory.getAllUsages();
+        const tempPath = `${this.filePath}.tmp`;
+        // SECURITY FIX (NEW-HIGH-1): Ensure file exists before locking
+        // proper-lockfile.lock() fails on non-existent files
+        (0, fsSafe_1.ensureSafeFile)(this.filePath, '{}', 0o644);
+        // SECURITY FIX (NEW-H-4): Acquire file lock before writing
+        let release = null;
+        try {
+            release = await this.lockfile.lock(this.filePath, {
+                stale: 10000, // Lock expires after 10 seconds if process crashes
+                retries: {
+                    retries: 5,
+                    minTimeout: 100,
+                    maxTimeout: 500
+                }
+            });
+            // Atomic write: temp file + rename
+            if (this.fs.existsSync(tempPath)) {
+                this.fs.unlinkSync(tempPath);
+            }
+            this.fs.writeFileSync(tempPath, JSON.stringify(data, null, 2), {
+                encoding: 'utf-8',
+                mode: 0o644,
+                flag: 'wx'
+            });
+            this.fs.renameSync(tempPath, this.filePath);
+        }
+        catch (error) {
+            // Clean up temp file on error
+            if (this.fs.existsSync(tempPath)) {
+                try {
+                    this.fs.unlinkSync(tempPath);
+                }
+                catch {
+                    // Ignore cleanup errors
+                }
+            }
+            throw error;
+        }
+        finally {
+            // Always release lock if acquired
+            if (release) {
+                await release();
+            }
+        }
+    }
+    /**
+     * Record attestation usage with guaranteed persistence
+     *
+     * SECURITY FIX (HIGH-1): Now properly awaits persistence to prevent data loss
+     */
+    async recordUsage(attestationUID, txId) {
+        const result = this.inMemory.recordUsageSync(attestationUID, txId);
+        if (result) {
+            // SECURITY FIX (HIGH-1): Await persistence to ensure data is saved
+            await this.saveToFile();
+        }
+        return result;
+    }
+    /**
+     * Fire-and-forget version for backward compatibility
+     * WARNING: May lose data if process crashes before save completes
+     */
+    recordUsageSync(attestationUID, txId) {
+        const result = this.inMemory.recordUsageSync(attestationUID, txId);
+        if (result) {
+            this.saveToFile().catch((err) => {
+                console.error('Failed to save attestation tracker state:', err);
+            });
+        }
+        return result;
+    }
+    getUsageForAttestation(attestationUID) {
+        return this.inMemory.getUsageForAttestation(attestationUID);
+    }
+    isValidForTransaction(attestationUID, txId) {
+        return this.inMemory.isValidForTransaction(attestationUID, txId);
+    }
+    clear() {
+        this.inMemory.clear();
+        if (this.fs.existsSync(this.filePath)) {
+            this.fs.unlinkSync(this.filePath);
+        }
+    }
+}
+exports.FileBasedUsedAttestationTracker = FileBasedUsedAttestationTracker;
+/**
+ * Factory to create attestation tracker
+ * @param stateDirectory - Optional directory for persistent storage
+ * @returns IUsedAttestationTracker instance
+ */
+function createUsedAttestationTracker(stateDirectory) {
+    if (stateDirectory) {
+        return new FileBasedUsedAttestationTracker(stateDirectory);
+    }
+    return new InMemoryUsedAttestationTracker();
+}
+exports.createUsedAttestationTracker = createUsedAttestationTracker;
+//# sourceMappingURL=UsedAttestationTracker.js.map

package/dist/utils/UsedAttestationTracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UsedAttestationTracker.js","sourceRoot":"","sources":["../../src/utils/UsedAttestationTracker.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,qCAAgF;AAsChF;;;;;;;;;;;GAWG;AACH,MAAa,8BAA8B;IAOzC;;;OAGG;IACH,YAAY,UAAkB,MAAM;QAVpC,8BAA8B;QACtB,qBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;QAUxD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,IAAY;QACpD,OAAO,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,cAAsB,EAAE,IAAY;QAClD,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAE1C,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE9D,sEAAsE;QACtE,IAAI,YAAY,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wEAAwE;QACxE,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAChE,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACxB,kEAAkE;YAClE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;QAED,oCAAoC;QACpC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,sBAAsB,CAAC,cAAsB;QAC3C,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAEtD,gEAAgE;QAChE,gEAAgE;QAChE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB,CAAC,cAAsB,EAAE,IAAY;QACxD,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAE1C,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE9D,gEAAgE;QAChE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;QAED,kDAAkD;QAClD,OAAO,CAAC,YAAY,IAAI,YAAY,KAAK,cAAc,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;IAED;;;;;;;;OAQG;IACH,iBAAiB,CAAC,WAAmB;QACnC,6CAA6C;QAC7C,+CAA+C;QAC/C,OAAO,CAAC,IAAI,CACV,wEAAwE;YACxE,wEAAwE,CACzE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AAtJD,wEAsJC;AAED;;;;;;;GAOG;AACH,MAAa,+BAA+B;IAO1C,YAAY,cAAsB;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,kEAAkE;QAClE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE3C,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACxD,IAAA,sBAAa,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAElE,qBAAqB;QACrB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO;QAE/C,wDAAwD;QACxD,IAAA,8BAAqB,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAErC,gDAAgD;QAChD,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;QACvD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,IAAI,GAAG,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,kCAAkC,qBAAqB,GAAG,IAAI,GAAG,IAAI,aAAa,IAAI,CAAC,QAAQ,EAAE,CAClG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,IAAc,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,mEAAmE;YACnE,MAAM,IAAI,KAAK,CACb,gFAAgF;gBAC9E,wBAAwB,IAAI,CAAC,QAAQ,YAAY,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;QAExC,+DAA+D;QAC/D,qDAAqD;QACrD,IAAA,uBAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE3C,2DAA2D;QAC3D,IAAI,OAAO,GAAiC,IAAI,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAChD,KAAK,EAAE,KAAK,EAAE,mDAAmD;gBACjE,OAAO,EAAE;oBACP,OAAO,EAAE,CAAC;oBACV,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;iBAChB;aACF,CAAC,CAAC;YAEH,mCAAmC;YACnC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBAC7D,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8BAA8B;YAC9B,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,kCAAkC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,IAAY;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,MAAM,EAAE,CAAC;YACX,mEAAmE;YACnE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,cAAsB,EAAE,IAAY;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9B,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sBAAsB,CAAC,cAAsB;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB,CAAC,cAAsB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF;AArJD,0EAqJC;AAED;;;;GAIG;AACH,SAAgB,4BAA4B,CAC1C,cAAuB;IAEvB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,IAAI,+BAA+B,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,8BAA8B,EAAE,CAAC;AAC9C,CAAC;AAPD,oEAOC"}

package/dist/utils/canonicalJson.d.ts

@@ -1,4 +1,26 @@
+/**
+ * Canonical JSON Serialization for AIP-4
+ * Reference: AIP-4 §3.6
+ *
+ * CRITICAL: Uses fast-json-stable-stringify@^2.1.0 for deterministic hashing
+ * This ensures resultHash is identical across all implementations (JS, Python, Go, Rust)
+ */
+/**
+ * Canonical JSON stringify (sorted keys, no whitespace)
+ * @param obj - Any JSON-serializable object
+ * @returns Canonical JSON string
+ */
 export declare function canonicalJsonStringify(obj: any): string;
+/**
+ * Compute keccak256 hash of canonical JSON
+ * @param obj - Any JSON-serializable object
+ * @returns Keccak256 hash (0x-prefixed hex string)
+ */
 export declare function computeCanonicalHash(obj: any): string;
+/**
+ * Compute result hash for delivery proof (AIP-4)
+ * @param resultData - Service result data
+ * @returns Keccak256 hash of canonical result JSON
+ */
 export declare function computeResultHash(resultData: any): string;
 //# sourceMappingURL=canonicalJson.d.ts.map

package/dist/utils/canonicalJson.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonicalJson.d.ts","sourceRoot":"","sources":["../../src/utils/canonicalJson.ts"],"names":[],"mappings":"AAgBA,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAEvD;AAOD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAGrD;AAOD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,GAAG,GAAG,MAAM,CAEzD"}
+{"version":3,"file":"canonicalJson.d.ts","sourceRoot":"","sources":["../../src/utils/canonicalJson.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAGrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,GAAG,GAAG,MAAM,CAEzD"}

package/dist/utils/canonicalJson.js

@@ -1,21 +1,44 @@
 "use strict";
+/**
+ * Canonical JSON Serialization for AIP-4
+ * Reference: AIP-4 §3.6
+ *
+ * CRITICAL: Uses fast-json-stable-stringify@^2.1.0 for deterministic hashing
+ * This ensures resultHash is identical across all implementations (JS, Python, Go, Rust)
+ */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.canonicalJsonStringify = canonicalJsonStringify;
-exports.computeCanonicalHash = computeCanonicalHash;
-exports.computeResultHash = computeResultHash;
+exports.computeResultHash = exports.computeCanonicalHash = exports.canonicalJsonStringify = void 0;
 const fast_json_stable_stringify_1 = __importDefault(require("fast-json-stable-stringify"));
 const ethers_1 = require("ethers");
+/**
+ * Canonical JSON stringify (sorted keys, no whitespace)
+ * @param obj - Any JSON-serializable object
+ * @returns Canonical JSON string
+ */
 function canonicalJsonStringify(obj) {
     return (0, fast_json_stable_stringify_1.default)(obj);
 }
+exports.canonicalJsonStringify = canonicalJsonStringify;
+/**
+ * Compute keccak256 hash of canonical JSON
+ * @param obj - Any JSON-serializable object
+ * @returns Keccak256 hash (0x-prefixed hex string)
+ */
 function computeCanonicalHash(obj) {
     const canonical = canonicalJsonStringify(obj);
     return (0, ethers_1.keccak256)((0, ethers_1.toUtf8Bytes)(canonical));
 }
+exports.computeCanonicalHash = computeCanonicalHash;
+/**
+ * Compute result hash for delivery proof (AIP-4)
+ * @param resultData - Service result data
+ * @returns Keccak256 hash of canonical result JSON
+ */
 function computeResultHash(resultData) {
     return computeCanonicalHash(resultData);
 }
+exports.computeResultHash = computeResultHash;
 //# sourceMappingURL=canonicalJson.js.map

package/dist/utils/canonicalJson.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonicalJson.js","sourceRoot":"","sources":["../../src/utils/canonicalJson.ts"],"names":[],"mappings":";;;;;AAgBA,wDAEC;AAOD,oDAGC;AAOD,8CAEC;AA7BD,4FAAmD;AACnD,mCAAgD;AAOhD,SAAgB,sBAAsB,CAAC,GAAQ;IAC7C,OAAO,IAAA,oCAAS,EAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAOD,SAAgB,oBAAoB,CAAC,GAAQ;IAC3C,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAA,kBAAS,EAAC,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAOD,SAAgB,iBAAiB,CAAC,UAAe;IAC/C,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"canonicalJson.js","sourceRoot":"","sources":["../../src/utils/canonicalJson.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;AAEH,4FAAmD;AACnD,mCAAgD;AAEhD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,GAAQ;IAC7C,OAAO,IAAA,oCAAS,EAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAFD,wDAEC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,GAAQ;IAC3C,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAA,kBAAS,EAAC,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAHD,oDAGC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,UAAe;IAC/C,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAFD,8CAEC"}

package/dist/utils/computeTypeHash.d.ts

@@ -1,3 +1,17 @@
+/**
+ * Compute EIP-712 Type Hash for AIP-4 Delivery Proof
+ * Reference: AIP-4 §3.3, EIP-712 specification
+ *
+ * Run with: npx tsx src/utils/computeTypeHash.ts
+ */
+/**
+ * Compute EIP-712 type hash for DeliveryProof
+ * @returns Type hash (bytes32)
+ */
 export declare function computeDeliveryProofTypeHash(): string;
+/**
+ * Get encoded type string for DeliveryProof
+ * @returns Type string (for documentation)
+ */
 export declare function getDeliveryProofTypeString(): string;
 //# sourceMappingURL=computeTypeHash.d.ts.map

package/dist/utils/computeTypeHash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"computeTypeHash.d.ts","sourceRoot":"","sources":["../../src/utils/computeTypeHash.ts"],"names":[],"mappings":"AAcA,wBAAgB,4BAA4B,IAAI,MAAM,CAQrD;AAMD,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD"}
+{"version":3,"file":"computeTypeHash.d.ts","sourceRoot":"","sources":["../../src/utils/computeTypeHash.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,CAQrD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD"}

package/dist/utils/computeTypeHash.js

@@ -1,18 +1,35 @@
 "use strict";
+/**
+ * Compute EIP-712 Type Hash for AIP-4 Delivery Proof
+ * Reference: AIP-4 §3.3, EIP-712 specification
+ *
+ * Run with: npx tsx src/utils/computeTypeHash.ts
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.computeDeliveryProofTypeHash = computeDeliveryProofTypeHash;
-exports.getDeliveryProofTypeString = getDeliveryProofTypeString;
+exports.getDeliveryProofTypeString = exports.computeDeliveryProofTypeHash = void 0;
 const ethers_1 = require("ethers");
 const eip712_1 = require("../types/eip712");
+/**
+ * Compute EIP-712 type hash for DeliveryProof
+ * @returns Type hash (bytes32)
+ */
 function computeDeliveryProofTypeHash() {
     const encoder = ethers_1.TypedDataEncoder.from(eip712_1.AIP4DeliveryProofTypes);
     const typeString = encoder.encodeType('DeliveryProof');
+    // Type hash is keccak256 of the encoded type string
     const typeHash = (0, ethers_1.keccak256)((0, ethers_1.toUtf8Bytes)(typeString));
     return typeHash;
 }
+exports.computeDeliveryProofTypeHash = computeDeliveryProofTypeHash;
+/**
+ * Get encoded type string for DeliveryProof
+ * @returns Type string (for documentation)
+ */
 function getDeliveryProofTypeString() {
     return ethers_1.TypedDataEncoder.from(eip712_1.AIP4DeliveryProofTypes).encodeType('DeliveryProof');
 }
+exports.getDeliveryProofTypeString = getDeliveryProofTypeString;
+// If run directly, compute and print type hash
 if (require.main === module) {
     console.log('=== AIP-4 Delivery Proof EIP-712 Type Hash ===\n');
     const typeString = getDeliveryProofTypeString();

package/dist/utils/computeTypeHash.js.map

@@ -1 +1 @@
-{"version":3,"file":"computeTypeHash.js","sourceRoot":"","sources":["../../src/utils/computeTypeHash.ts"],"names":[],"mappings":";;AAcA,oEAQC;AAMD,gEAEC;AAvBD,mCAAkE;AAClE,4CAAyD;AAMzD,SAAgB,4BAA4B;IAC1C,MAAM,OAAO,GAAG,yBAAgB,CAAC,IAAI,CAAC,+BAAsB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAGvD,MAAM,QAAQ,GAAG,IAAA,kBAAS,EAAC,IAAA,oBAAW,EAAC,UAAU,CAAC,CAAC,CAAC;IAEpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAMD,SAAgB,0BAA0B;IACxC,OAAO,yBAAgB,CAAC,IAAI,CAAC,+BAAsB,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACnF,CAAC;AAGD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,4BAA4B,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"computeTypeHash.js","sourceRoot":"","sources":["../../src/utils/computeTypeHash.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,mCAAkE;AAClE,4CAAyD;AAEzD;;;GAGG;AACH,SAAgB,4BAA4B;IAC1C,MAAM,OAAO,GAAG,yBAAgB,CAAC,IAAI,CAAC,+BAAsB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEvD,oDAAoD;IACpD,MAAM,QAAQ,GAAG,IAAA,kBAAS,EAAC,IAAA,oBAAW,EAAC,UAAU,CAAC,CAAC,CAAC;IAEpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AARD,oEAQC;AAED;;;GAGG;AACH,SAAgB,0BAA0B;IACxC,OAAO,yBAAgB,CAAC,IAAI,CAAC,+BAAsB,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACnF,CAAC;AAFD,gEAEC;AAED,+CAA+C;AAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,4BAA4B,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;AACvE,CAAC"}

package/dist/utils/fsSafe.d.ts

@@ -0,0 +1,14 @@
+/**
+ * fsSafe - minimal filesystem hardening helpers
+ *
+ * Focus:
+ * - Prevent symlink-based path escapes when persisting local state
+ * - Avoid clobbering arbitrary files via pre-created symlink temp files
+ *
+ * NOTE: This is not a complete TOCTOU-proof sandbox, but it eliminates the
+ * most common local symlink/hardlink footguns for SDK-managed state files.
+ */
+export declare function ensureSafeDir(dirPath: string, mode?: number): void;
+export declare function assertSafeFileForRead(filePath: string): void;
+export declare function ensureSafeFile(filePath: string, contents: string, mode?: number): void;
+//# sourceMappingURL=fsSafe.d.ts.map

package/dist/utils/fsSafe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsSafe.d.ts","sourceRoot":"","sources":["../../src/utils/fsSafe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAc,GAAG,IAAI,CAmBzE;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAS5D;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAAc,GACnB,IAAI,CAmBN"}

package/dist/utils/fsSafe.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * fsSafe - minimal filesystem hardening helpers
+ *
+ * Focus:
+ * - Prevent symlink-based path escapes when persisting local state
+ * - Avoid clobbering arbitrary files via pre-created symlink temp files
+ *
+ * NOTE: This is not a complete TOCTOU-proof sandbox, but it eliminates the
+ * most common local symlink/hardlink footguns for SDK-managed state files.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureSafeFile = exports.assertSafeFileForRead = exports.ensureSafeDir = void 0;
+const fs = __importStar(require("fs"));
+function ensureSafeDir(dirPath, mode = 0o755) {
+    if (fs.existsSync(dirPath)) {
+        const st = fs.lstatSync(dirPath);
+        if (st.isSymbolicLink()) {
+            throw new Error(`Refusing to use symlink directory: ${dirPath}`);
+        }
+        if (!st.isDirectory()) {
+            throw new Error(`Expected directory but found non-directory: ${dirPath}`);
+        }
+        return;
+    }
+    fs.mkdirSync(dirPath, { recursive: true, mode });
+    // Post-create sanity: ensure it didn't become a symlink (defense-in-depth)
+    const st = fs.lstatSync(dirPath);
+    if (st.isSymbolicLink() || !st.isDirectory()) {
+        throw new Error(`Created unsafe directory (symlink or non-dir): ${dirPath}`);
+    }
+}
+exports.ensureSafeDir = ensureSafeDir;
+function assertSafeFileForRead(filePath) {
+    if (!fs.existsSync(filePath))
+        return;
+    const st = fs.lstatSync(filePath);
+    if (st.isSymbolicLink()) {
+        throw new Error(`Refusing to read from symlink file: ${filePath}`);
+    }
+    if (!st.isFile()) {
+        throw new Error(`Expected file but found non-file: ${filePath}`);
+    }
+}
+exports.assertSafeFileForRead = assertSafeFileForRead;
+function ensureSafeFile(filePath, contents, mode = 0o644) {
+    if (fs.existsSync(filePath)) {
+        const st = fs.lstatSync(filePath);
+        if (st.isSymbolicLink()) {
+            throw new Error(`Refusing to use symlink file: ${filePath}`);
+        }
+        if (!st.isFile()) {
+            throw new Error(`Expected file but found non-file: ${filePath}`);
+        }
+        return;
+    }
+    // Use exclusive create to avoid clobbering a file that appears between
+    // existsSync() and writeFileSync().
+    fs.writeFileSync(filePath, contents, {
+        encoding: 'utf-8',
+        mode,
+        flag: 'wx',
+    });
+}
+exports.ensureSafeFile = ensureSafeFile;
+//# sourceMappingURL=fsSafe.js.map

package/dist/utils/fsSafe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsSafe.js","sourceRoot":"","sources":["../../src/utils/fsSafe.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AAEzB,SAAgB,aAAa,CAAC,OAAe,EAAE,OAAe,KAAK;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO;IACT,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,2EAA2E;IAC3E,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAnBD,sCAmBC;AAED,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IACrC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AATD,sDASC;AAED,SAAgB,cAAc,CAC5B,QAAgB,EAChB,QAAgB,EAChB,OAAe,KAAK;IAEpB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,oCAAoC;IACpC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE;QACnC,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;AACL,CAAC;AAvBD,wCAuBC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ACTP SDK Utilities
+ *
+ * This module exports all utility classes for the ACTP SDK.
+ *
+ * @module utils
+ */
+export { ErrorRecoveryGuide, withRecoveryGuidance, type ErrorRecoveryInfo, type ErrorSeverity, type ErrorCategory, } from './ErrorRecoveryGuide';
+export { RateLimiter, CircuitBreaker, APIProtector, type RateLimiterConfig, type RateLimitResult, type CircuitBreakerConfig, type CircuitBreakerResult, type CircuitState, } from './RateLimiter';
+export { Logger, MetricsCollector, sdkLogger, sdkMetrics, type LogLevel, type LogEntry, type LoggerConfig, type MetricsHook, } from './Logger';
+export { SDKLifecycle, sdkLifecycle, onShutdown, registerDisposable, shutdownSDK, type Disposable, type ShutdownHandler, type LifecycleEvent, type LifecycleListener, } from './SDKLifecycle';
+export { InMemoryReceivedNonceTracker, SetBasedReceivedNonceTracker, createReceivedNonceTracker, type IReceivedNonceTracker, type NonceValidationResult, } from './ReceivedNonceTracker';
+export { InMemoryUsedAttestationTracker, FileBasedUsedAttestationTracker, createUsedAttestationTracker, type IUsedAttestationTracker, } from './UsedAttestationTracker';
+export { USDC, Deadline, Address, Bytes32, State, DisputeWindow, } from './Helpers';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,WAAW,EACX,cAAc,EACd,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,YAAY,GAClB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,MAAM,EACN,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,4BAA4B,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,OAAO,EACP,KAAK,EACL,aAAa,GACd,MAAM,WAAW,CAAC"}