@agirails/sdk 2.5.3 → 2.5.4

package/src/utils/SDKLifecycle.ts

@@ -1,416 +0,0 @@
-/**
- * SDKLifecycle - Proper cleanup and resource management
- *
- * SECURITY FIX (M-8): Ensures proper cleanup on SDK shutdown:
- * - Connection cleanup
- * - Pending request handling
- * - Memory release
- * - Graceful shutdown
- *
- * @module utils/SDKLifecycle
- */
-
-import { sdkLogger, Logger } from './Logger';
-
-/**
- * Disposable resource interface
- */
-export interface Disposable {
-  /** Cleanup method */
-  dispose(): Promise<void> | void;
-}
-
-/**
- * Shutdown handler function
- */
-export type ShutdownHandler = () => Promise<void> | void;
-
-/**
- * Lifecycle event types
- */
-export type LifecycleEvent =
-  | 'initializing'
-  | 'ready'
-  | 'shutting-down'
-  | 'shutdown'
-  | 'error';
-
-/**
- * Lifecycle event listener
- */
-export type LifecycleListener = (event: LifecycleEvent, data?: unknown) => void;
-
-/**
- * SDK Lifecycle Manager
- *
- * Manages SDK initialization, shutdown, and resource cleanup.
- *
- * @example
- * ```typescript
- * const lifecycle = new SDKLifecycle();
- *
- * // Register cleanup handlers
- * lifecycle.onShutdown(async () => {
- *   await closeConnections();
- * });
- *
- * // Register disposable resources
- * lifecycle.registerDisposable(myResource);
- *
- * // Later, initiate shutdown
- * await lifecycle.shutdown();
- * ```
- */
-export class SDKLifecycle {
-  private state: LifecycleEvent = 'initializing';
-  private shutdownHandlers: ShutdownHandler[] = [];
-  private disposables: Disposable[] = [];
-  private listeners: LifecycleListener[] = [];
-  private shutdownPromise: Promise<void> | null = null;
-  private readonly logger: Logger;
-  private isShuttingDown = false;
-
-  // SECURITY FIX (NEW-HIGH-2): Store handler references for cleanup
-  private processHandlers: {
-    sigint?: () => void;
-    sigterm?: () => void;
-    uncaughtException?: (error: Error) => void;
-    unhandledRejection?: (reason: unknown) => void;
-  } = {};
-  private processHandlersRegistered = false;
-
-  constructor(logger?: Logger) {
-    this.logger = logger ?? sdkLogger.child('Lifecycle');
-
-    // Register process shutdown handlers
-    this.registerProcessHandlers();
-  }
-
-  /**
-   * Get current lifecycle state
-   */
-  getState(): LifecycleEvent {
-    return this.state;
-  }
-
-  /**
-   * Check if SDK is ready for operations
-   */
-  isReady(): boolean {
-    return this.state === 'ready';
-  }
-
-  /**
-   * Mark SDK as ready
-   */
-  markReady(): void {
-    this.state = 'ready';
-    this.emit('ready');
-    this.logger.info('SDK ready');
-  }
-
-  /**
-   * Register a shutdown handler
-   *
-   * @param handler - Function to call during shutdown
-   * @returns Unregister function
-   */
-  onShutdown(handler: ShutdownHandler): () => void {
-    this.shutdownHandlers.push(handler);
-
-    return () => {
-      const index = this.shutdownHandlers.indexOf(handler);
-      if (index > -1) {
-        this.shutdownHandlers.splice(index, 1);
-      }
-    };
-  }
-
-  /**
-   * Register a disposable resource
-   *
-   * @param disposable - Resource with dispose() method
-   * @returns Unregister function
-   */
-  registerDisposable(disposable: Disposable): () => void {
-    this.disposables.push(disposable);
-
-    return () => {
-      const index = this.disposables.indexOf(disposable);
-      if (index > -1) {
-        this.disposables.splice(index, 1);
-      }
-    };
-  }
-
-  /**
-   * Add lifecycle event listener
-   *
-   * @param listener - Event listener function
-   * @returns Unregister function
-   */
-  addListener(listener: LifecycleListener): () => void {
-    this.listeners.push(listener);
-
-    return () => {
-      const index = this.listeners.indexOf(listener);
-      if (index > -1) {
-        this.listeners.splice(index, 1);
-      }
-    };
-  }
-
-  /**
-   * Emit lifecycle event
-   */
-  private emit(event: LifecycleEvent, data?: unknown): void {
-    for (const listener of this.listeners) {
-      try {
-        listener(event, data);
-      } catch (error) {
-        this.logger.error('Lifecycle listener error', { event }, error as Error);
-      }
-    }
-  }
-
-  /**
-   * Initiate graceful shutdown
-   *
-   * @param timeout - Maximum time to wait for cleanup (ms)
-   * @returns Promise that resolves when shutdown is complete
-   */
-  async shutdown(timeout = 30000): Promise<void> {
-    // Prevent multiple shutdown calls
-    if (this.shutdownPromise) {
-      return this.shutdownPromise;
-    }
-
-    if (this.isShuttingDown) {
-      return;
-    }
-
-    this.isShuttingDown = true;
-    this.state = 'shutting-down';
-    this.emit('shutting-down');
-    this.logger.info('SDK shutting down...');
-
-    this.shutdownPromise = this.executeShutdown(timeout);
-    return this.shutdownPromise;
-  }
-
-  /**
-   * Execute shutdown sequence
-   */
-  private async executeShutdown(timeout: number): Promise<void> {
-    const startTime = Date.now();
-    const errors: Error[] = [];
-
-    // Create timeout promise
-    const timeoutPromise = new Promise<void>((_, reject) => {
-      setTimeout(() => {
-        reject(new Error(`Shutdown timed out after ${timeout}ms`));
-      }, timeout);
-    });
-
-    try {
-      // Run shutdown handlers first (in reverse order - LIFO)
-      const handlersPromise = (async () => {
-        for (let i = this.shutdownHandlers.length - 1; i >= 0; i--) {
-          try {
-            const elapsed = Date.now() - startTime;
-            if (elapsed >= timeout) {
-              this.logger.warn('Shutdown timeout reached, skipping remaining handlers');
-              break;
-            }
-
-            const handler = this.shutdownHandlers[i];
-            await handler();
-          } catch (error) {
-            this.logger.error('Shutdown handler error', {}, error as Error);
-            errors.push(error as Error);
-          }
-        }
-
-        // Dispose resources (in reverse order)
-        for (let i = this.disposables.length - 1; i >= 0; i--) {
-          try {
-            const elapsed = Date.now() - startTime;
-            if (elapsed >= timeout) {
-              this.logger.warn('Shutdown timeout reached, skipping remaining disposables');
-              break;
-            }
-
-            const disposable = this.disposables[i];
-            await disposable.dispose();
-          } catch (error) {
-            this.logger.error('Disposable cleanup error', {}, error as Error);
-            errors.push(error as Error);
-          }
-        }
-      })();
-
-      // Race against timeout
-      await Promise.race([handlersPromise, timeoutPromise]);
-
-    } catch (error) {
-      if ((error as Error).message.includes('timed out')) {
-        this.logger.warn('Shutdown timed out, forcing cleanup');
-      } else {
-        errors.push(error as Error);
-      }
-    }
-
-    // SECURITY FIX (NEW-HIGH-2): Remove process handlers to prevent memory leaks
-    this.unregisterProcessHandlers();
-
-    // Clear registrations
-    this.shutdownHandlers = [];
-    this.disposables = [];
-
-    this.state = 'shutdown';
-    this.emit('shutdown');
-    this.logger.info('SDK shutdown complete', { errors: errors.length });
-
-    if (errors.length > 0) {
-      this.logger.error('Shutdown completed with errors', {
-        errorCount: errors.length,
-        errors: errors.map((e) => e.message),
-      });
-    }
-  }
-
-  /**
-   * Register process-level shutdown handlers
-   *
-   * SECURITY FIX (NEW-HIGH-2): Store handler references for cleanup
-   * to prevent memory leaks when multiple SDKLifecycle instances are created.
-   */
-  private registerProcessHandlers(): void {
-    // Only register in Node.js environment
-    if (typeof process === 'undefined') {
-      return;
-    }
-
-    // SECURITY FIX (NEW-HIGH-2): Prevent duplicate registrations
-    if (this.processHandlersRegistered) {
-      return;
-    }
-
-    // SECURITY FIX (NEW-HIGH-2): Create named handlers we can remove later
-    this.processHandlers.sigint = () => {
-      this.logger.info('Received SIGINT, initiating shutdown');
-      this.shutdown().then(() => {
-        process.exit(0);
-      }).catch((error) => {
-        this.logger.error('Shutdown error', {}, error);
-        process.exit(1);
-      });
-    };
-
-    this.processHandlers.sigterm = () => {
-      this.logger.info('Received SIGTERM, initiating shutdown');
-      this.shutdown().then(() => {
-        process.exit(0);
-      }).catch((error) => {
-        this.logger.error('Shutdown error', {}, error);
-        process.exit(1);
-      });
-    };
-
-    this.processHandlers.uncaughtException = (error: Error) => {
-      this.logger.error('Uncaught exception', {}, error);
-      this.emit('error', error);
-      this.shutdown().finally(() => {
-        process.exit(1);
-      });
-    };
-
-    this.processHandlers.unhandledRejection = (reason: unknown) => {
-      const error = reason instanceof Error ? reason : new Error(String(reason));
-      this.logger.error('Unhandled rejection', {}, error);
-      this.emit('error', error);
-    };
-
-    // Handle termination signals
-    process.on('SIGINT', this.processHandlers.sigint);
-    process.on('SIGTERM', this.processHandlers.sigterm);
-
-    // Handle uncaught errors
-    process.on('uncaughtException', this.processHandlers.uncaughtException);
-    process.on('unhandledRejection', this.processHandlers.unhandledRejection);
-
-    this.processHandlersRegistered = true;
-  }
-
-  /**
-   * Unregister process-level shutdown handlers
-   *
-   * SECURITY FIX (NEW-HIGH-2): Remove handlers to prevent memory leaks
-   */
-  private unregisterProcessHandlers(): void {
-    if (typeof process === 'undefined' || !this.processHandlersRegistered) {
-      return;
-    }
-
-    if (this.processHandlers.sigint) {
-      process.removeListener('SIGINT', this.processHandlers.sigint);
-    }
-    if (this.processHandlers.sigterm) {
-      process.removeListener('SIGTERM', this.processHandlers.sigterm);
-    }
-    if (this.processHandlers.uncaughtException) {
-      process.removeListener('uncaughtException', this.processHandlers.uncaughtException);
-    }
-    if (this.processHandlers.unhandledRejection) {
-      process.removeListener('unhandledRejection', this.processHandlers.unhandledRejection);
-    }
-
-    this.processHandlers = {};
-    this.processHandlersRegistered = false;
-  }
-
-  /**
-   * Create a disposable wrapper for any cleanup function
-   */
-  static createDisposable(cleanup: () => Promise<void> | void): Disposable {
-    return {
-      dispose: cleanup,
-    };
-  }
-}
-
-/**
- * Global SDK lifecycle manager instance
- */
-export const sdkLifecycle = new SDKLifecycle();
-
-/**
- * Convenience function to run cleanup on shutdown
- *
- * @example
- * ```typescript
- * const cleanup = onShutdown(async () => {
- *   await closeDatabase();
- * });
- *
- * // Later, to remove the handler:
- * cleanup();
- * ```
- */
-export function onShutdown(handler: ShutdownHandler): () => void {
-  return sdkLifecycle.onShutdown(handler);
-}
-
-/**
- * Convenience function to register disposable
- */
-export function registerDisposable(disposable: Disposable): () => void {
-  return sdkLifecycle.registerDisposable(disposable);
-}
-
-/**
- * Convenience function to shutdown SDK
- */
-export function shutdownSDK(timeout?: number): Promise<void> {
-  return sdkLifecycle.shutdown(timeout);
-}

package/src/utils/SecureNonce.ts

@@ -1,78 +0,0 @@
-/**
- * SecureNonce - Cryptographically secure nonce generation
- *
- * SECURITY FIX (NEW-H-3): Provides secure random nonce generation
- * to prevent weak randomness vulnerabilities in EIP-712 message signing.
- *
- * Reference: V7 Re-Audit NEW-H-3 (Weak Random Nonce Generation)
- *
- * @module utils/SecureNonce
- */
-
-import { ethers } from 'ethers';
-
-/**
- * Generate a cryptographically secure random nonce (bytes32)
- *
- * Uses ethers.js randomBytes() which:
- * - Uses Node.js crypto.randomBytes() (CSPRNG)
- * - Uses Web Crypto API in browsers (window.crypto.getRandomValues)
- * - Guaranteed to be cryptographically secure
- *
- * @returns 32-byte hex string (0x...)
- *
- * @example
- * ```typescript
- * import { generateSecureNonce } from '@agirails/sdk';
- *
- * const nonce = generateSecureNonce();
- * console.log(nonce); // 0x1234...abcd (64 hex chars)
- * ```
- */
-export function generateSecureNonce(): string {
-  return ethers.hexlify(ethers.randomBytes(32));
-}
-
-/**
- * Validate nonce format (must be bytes32)
- *
- * @param nonce - Nonce to validate
- * @returns true if valid bytes32 format
- *
- * @example
- * ```typescript
- * isValidNonce('0x' + '00'.repeat(32)); // true
- * isValidNonce('0x1234'); // false (too short)
- * isValidNonce('not-hex'); // false (invalid format)
- * ```
- */
-export function isValidNonce(nonce: string): boolean {
-  return /^0x[a-fA-F0-9]{64}$/.test(nonce);
-}
-
-/**
- * Generate an array of secure nonces
- *
- * @param count - Number of nonces to generate
- * @returns Array of bytes32 hex strings
- *
- * @example
- * ```typescript
- * const nonces = generateSecureNonces(10);
- * console.log(nonces.length); // 10
- * ```
- */
-export function generateSecureNonces(count: number): string[] {
-  if (count <= 0) {
-    throw new Error('Count must be positive');
-  }
-  if (count > 10000) {
-    throw new Error('Count exceeds maximum allowed (10000)');
-  }
-
-  const nonces: string[] = [];
-  for (let i = 0; i < count; i++) {
-    nonces.push(generateSecureNonce());
-  }
-  return nonces;
-}