@hsuite/smart-engines-cli 1.0.0

package/dist/libs/infrastructure/src/messaging/message-sequence.service.js

@@ -0,0 +1,227 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var MessageSequenceService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessageSequenceService = void 0;
+const common_1 = require("@nestjs/common");
+let MessageSequenceService = MessageSequenceService_1 = class MessageSequenceService {
+    logger = new common_1.Logger(MessageSequenceService_1.name);
+    lastSequences = new Map();
+    seenMessages = new Map();
+    recentlyValidated = new Map();
+    cleanupInterval;
+    messageExpiryMs;
+    maxStoredMessages;
+    maxSequenceGap;
+    localFanoutWindowMs;
+    constructor(config) {
+        this.messageExpiryMs = config?.messageExpiryMs ?? 3600000;
+        this.maxStoredMessages = config?.maxStoredMessages ?? 100000;
+        this.maxSequenceGap = config?.maxSequenceGap ?? 100;
+        this.localFanoutWindowMs = config?.localFanoutWindowMs ?? 5000;
+        this.startPeriodicCleanup();
+    }
+    verifyMessage(messageId, sourceNode, sequence, timestamp) {
+        if (this.seenMessages.has(messageId)) {
+            const recentlyValidatedTime = this.recentlyValidated.get(messageId);
+            if (recentlyValidatedTime) {
+                const elapsed = Date.now() - recentlyValidatedTime;
+                if (elapsed < this.localFanoutWindowMs) {
+                    this.logger.debug(`📨 Local fanout detected for ${messageId} (${elapsed}ms since first receipt) - allowing`);
+                    return { isValid: true };
+                }
+            }
+            const original = this.seenMessages.get(messageId);
+            this.logger.warn(`🚨 DUPLICATE MESSAGE DETECTED!\n` +
+                `  Message ID: ${messageId}\n` +
+                `  Source: ${sourceNode}\n` +
+                `  Original: ${original.timestamp.toISOString()}\n` +
+                `  Duplicate: ${timestamp.toISOString()}`);
+            return {
+                isValid: false,
+                reason: `Duplicate message ID ${messageId} from ${sourceNode}`,
+            };
+        }
+        const age = Date.now() - timestamp.getTime();
+        if (age > this.messageExpiryMs) {
+            this.logger.warn(`🚨 STALE MESSAGE DETECTED!\n` +
+                `  Message ID: ${messageId}\n` +
+                `  Source: ${sourceNode}\n` +
+                `  Age: ${Math.floor(age / 1000)}s (max: ${this.messageExpiryMs / 1000}s)`);
+            return {
+                isValid: false,
+                reason: `Message too old: ${Math.floor(age / 1000)}s`,
+            };
+        }
+        if (age < -60000) {
+            this.logger.warn(`🚨 FUTURE MESSAGE DETECTED (clock skew attack?)!\n` +
+                `  Message ID: ${messageId}\n` +
+                `  Source: ${sourceNode}\n` +
+                `  Timestamp: ${timestamp.toISOString()}\n` +
+                `  Current: ${new Date().toISOString()}`);
+            return {
+                isValid: false,
+                reason: 'Message timestamp in future (clock skew)',
+            };
+        }
+        const lastSequence = this.lastSequences.get(sourceNode) || 0;
+        if (sequence <= lastSequence) {
+            const isFreshMessage = age < 120000;
+            const isLikelyRestart = sequence < lastSequence * 0.5;
+            if (isFreshMessage && isLikelyRestart) {
+                this.logger.warn(`♻️  Node restart detected for ${sourceNode}: ` +
+                    `sequence dropped from ${lastSequence} to ${sequence}. Resetting counter.`);
+                this.lastSequences.set(sourceNode, 0);
+            }
+            else {
+                this.logger.warn(`🚨 OUT-OF-ORDER MESSAGE DETECTED!\n` +
+                    `  Message ID: ${messageId}\n` +
+                    `  Source: ${sourceNode}\n` +
+                    `  Expected sequence > ${lastSequence}, got ${sequence}`);
+                return {
+                    isValid: false,
+                    reason: `Out-of-order sequence: expected > ${lastSequence}, got ${sequence}`,
+                };
+            }
+        }
+        const gap = sequence - lastSequence;
+        if (gap > this.maxSequenceGap) {
+            this.logger.warn(`⚠️  LARGE SEQUENCE GAP DETECTED!\n` +
+                `  Message ID: ${messageId}\n` +
+                `  Source: ${sourceNode}\n` +
+                `  Gap: ${gap} (max tolerable: ${this.maxSequenceGap})\n` +
+                `  This may indicate message loss or skip attack`);
+        }
+        if (this.seenMessages.size >= this.maxStoredMessages) {
+            this.logger.error(`⚠️  Message storage limit reached (${this.maxStoredMessages}). ` +
+                `Running AGGRESSIVE cleanup...`);
+            this.aggressiveCleanup();
+            if (this.seenMessages.size >= this.maxStoredMessages * 0.95) {
+                this.logger.error(`🚨 CRITICAL: Message storage still at limit after cleanup!\n` +
+                    `  Current: ${this.seenMessages.size}\n` +
+                    `  Limit: ${this.maxStoredMessages}\n` +
+                    `  **POSSIBLE DOS ATTACK - Rejecting message**`);
+                return {
+                    isValid: false,
+                    reason: 'System under memory pressure - message rejected',
+                };
+            }
+        }
+        const record = {
+            messageId,
+            sequence,
+            timestamp,
+            sourceNode,
+        };
+        this.seenMessages.set(messageId, record);
+        this.lastSequences.set(sourceNode, sequence);
+        this.recentlyValidated.set(messageId, Date.now());
+        if (this.recentlyValidated.size > 1000) {
+            this.cleanupRecentlyValidated();
+        }
+        this.logger.debug(`✅ Message verified: ${messageId} (seq ${sequence}) from ${sourceNode}`);
+        return { isValid: true };
+    }
+    cleanupRecentlyValidated() {
+        const now = Date.now();
+        for (const [messageId, timestamp] of this.recentlyValidated) {
+            if (now - timestamp > this.localFanoutWindowMs * 2) {
+                this.recentlyValidated.delete(messageId);
+            }
+        }
+    }
+    getNextSequence(nodeId) {
+        const current = this.lastSequences.get(nodeId) || 0;
+        let next = current + 1;
+        if (next > Number.MAX_SAFE_INTEGER - 1000) {
+            this.logger.warn(`⚠️  Sequence number approaching MAX_SAFE_INTEGER for ${nodeId}. ` +
+                `Wrapping around to 1. This is expected after ~9 quadrillion messages.`);
+            next = 1;
+            for (const [messageId, record] of this.seenMessages.entries()) {
+                if (record.sourceNode === nodeId) {
+                    this.seenMessages.delete(messageId);
+                }
+            }
+        }
+        this.lastSequences.set(nodeId, next);
+        return next;
+    }
+    cleanupExpiredMessages() {
+        const now = Date.now();
+        let cleaned = 0;
+        for (const [messageId, record] of this.seenMessages.entries()) {
+            const age = now - record.timestamp.getTime();
+            if (age > this.messageExpiryMs) {
+                this.seenMessages.delete(messageId);
+                cleaned++;
+            }
+        }
+        if (cleaned > 0) {
+            this.logger.log(`🧹 Cleaned up ${cleaned} expired messages (${this.seenMessages.size} remaining)`);
+        }
+    }
+    aggressiveCleanup() {
+        const messages = Array.from(this.seenMessages.entries());
+        messages.sort((a, b) => a[1].timestamp.getTime() - b[1].timestamp.getTime());
+        const toRemove = Math.floor(messages.length / 2);
+        let removed = 0;
+        for (let i = 0; i < toRemove; i++) {
+            this.seenMessages.delete(messages[i][0]);
+            removed++;
+        }
+        this.logger.warn(`🚨 AGGRESSIVE CLEANUP: Removed ${removed} oldest messages ` +
+            `(${this.seenMessages.size} remaining)`);
+    }
+    startPeriodicCleanup() {
+        this.cleanupInterval = setInterval(() => {
+            this.cleanupExpiredMessages();
+        }, 600000);
+        this.logger.log('Started periodic message cleanup (every 10 minutes)');
+    }
+    onModuleDestroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+        }
+    }
+    getStats() {
+        let oldestMessage = null;
+        for (const record of this.seenMessages.values()) {
+            if (!oldestMessage || record.timestamp < oldestMessage) {
+                oldestMessage = record.timestamp;
+            }
+        }
+        return {
+            trackedMessages: this.seenMessages.size,
+            trackedSources: this.lastSequences.size,
+            oldestMessage,
+        };
+    }
+    clearAll() {
+        this.seenMessages.clear();
+        this.lastSequences.clear();
+        this.logger.log('🧹 Cleared all message tracking data');
+    }
+    resetSequence(nodeId) {
+        this.lastSequences.delete(nodeId);
+        this.logger.warn(`⚠️  Reset sequence counter for node ${nodeId}`);
+    }
+};
+exports.MessageSequenceService = MessageSequenceService;
+exports.MessageSequenceService = MessageSequenceService = MessageSequenceService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)('MESSAGE_SEQUENCE_CONFIG')),
+    __metadata("design:paramtypes", [Object])
+], MessageSequenceService);
+//# sourceMappingURL=message-sequence.service.js.map

package/dist/libs/infrastructure/src/messaging/message-sequence.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-sequence.service.js","sourceRoot":"","sources":["../../../../../../../libs/infrastructure/src/messaging/message-sequence.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAsE;AA2C/D,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAChB,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAG1D,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAG1C,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IAGhD,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAG9C,eAAe,CAAkB;IAGxB,eAAe,CAAS;IACxB,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,mBAAmB,CAAS;IAE7C,YAA2D,MAA8B;QACvF,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,eAAe,IAAI,OAAO,CAAC;QAC1D,IAAI,CAAC,iBAAiB,GAAG,MAAM,EAAE,iBAAiB,IAAI,MAAM,CAAC;QAC7D,IAAI,CAAC,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,GAAG,CAAC;QACpD,IAAI,CAAC,mBAAmB,GAAG,MAAM,EAAE,mBAAmB,IAAI,IAAI,CAAC;QAC/D,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAWD,aAAa,CACX,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAe;QAMf,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAErC,MAAM,qBAAqB,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;gBACnD,IAAI,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAEvC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gCAAgC,SAAS,KAAK,OAAO,oCAAoC,CAC1F,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAEnD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kCAAkC;gBAChC,iBAAiB,SAAS,IAAI;gBAC9B,aAAa,UAAU,IAAI;gBAC3B,eAAe,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI;gBACnD,gBAAgB,SAAS,CAAC,WAAW,EAAE,EAAE,CAC5C,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,wBAAwB,SAAS,SAAS,UAAU,EAAE;aAC/D,CAAC;QACJ,CAAC;QAGD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8BAA8B;gBAC5B,iBAAiB,SAAS,IAAI;gBAC9B,aAAa,UAAU,IAAI;gBAC3B,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,GAAG,IAAI,IAAI,CAC7E,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,oBAAoB,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;aACtD,CAAC;QACJ,CAAC;QAGD,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;YAEjB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oDAAoD;gBAClD,iBAAiB,SAAS,IAAI;gBAC9B,aAAa,UAAU,IAAI;gBAC3B,gBAAgB,SAAS,CAAC,WAAW,EAAE,IAAI;gBAC3C,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAC3C,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,0CAA0C;aACnD,CAAC;QACJ,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAK7D,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,GAAG,GAAG,MAAM,CAAC;YACpC,MAAM,eAAe,GAAG,QAAQ,GAAG,YAAY,GAAG,GAAG,CAAC;YAEtD,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iCAAiC,UAAU,IAAI;oBAC7C,yBAAyB,YAAY,OAAO,QAAQ,sBAAsB,CAC7E,CAAC;gBAEF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qCAAqC;oBACnC,iBAAiB,SAAS,IAAI;oBAC9B,aAAa,UAAU,IAAI;oBAC3B,yBAAyB,YAAY,SAAS,QAAQ,EAAE,CAC3D,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,qCAAqC,YAAY,SAAS,QAAQ,EAAE;iBAC7E,CAAC;YACJ,CAAC;QACH,CAAC;QAGD,MAAM,GAAG,GAAG,QAAQ,GAAG,YAAY,CAAC;QACpC,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC;gBAClC,iBAAiB,SAAS,IAAI;gBAC9B,aAAa,UAAU,IAAI;gBAC3B,UAAU,GAAG,oBAAoB,IAAI,CAAC,cAAc,KAAK;gBACzD,iDAAiD,CACpD,CAAC;QAIJ,CAAC;QAGD,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sCAAsC,IAAI,CAAC,iBAAiB,KAAK;gBAC/D,+BAA+B,CAClC,CAAC;YACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAGzB,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,GAAG,IAAI,EAAE,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,8DAA8D;oBAC5D,cAAc,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI;oBACxC,YAAY,IAAI,CAAC,iBAAiB,IAAI;oBACtC,+CAA+C,CAClD,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,iDAAiD;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAGD,MAAM,MAAM,GAAkB;YAC5B,SAAS;YACT,QAAQ;YACR,SAAS;YACT,UAAU;SACX,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAG7C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAGlD,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,SAAS,SAAS,QAAQ,UAAU,UAAU,EAAE,CAAC,CAAC;QAE3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAKO,wBAAwB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5D,IAAI,GAAG,GAAG,SAAS,GAAG,IAAI,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAUD,eAAe,CAAC,MAAc;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC;QAGvB,IAAI,IAAI,GAAG,MAAM,CAAC,gBAAgB,GAAG,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wDAAwD,MAAM,IAAI;gBAChE,uEAAuE,CAC1E,CAAC;YACF,IAAI,GAAG,CAAC,CAAC;YAGT,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9D,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAKO,sBAAsB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,iBAAiB,OAAO,sBAAsB,IAAI,CAAC,YAAY,CAAC,IAAI,aAAa,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAOO,iBAAiB;QACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QAGzD,QAAQ,CAAC,IAAI,CACX,CAAC,CAA0B,EAAE,CAA0B,EAAE,EAAE,CACzD,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CACtD,CAAC;QAGF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kCAAkC,OAAO,mBAAmB;YAC1D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,aAAa,CAC1C,CAAC;IACJ,CAAC;IAKO,oBAAoB;QAE1B,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAKD,eAAe;QACb,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAKD,QAAQ;QAKN,IAAI,aAAa,GAAgB,IAAI,CAAC;QAEtC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,GAAG,aAAa,EAAE,CAAC;gBACvD,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YACvC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI;YACvC,aAAa;SACd,CAAC;IACJ,CAAC;IAKD,QAAQ;QACN,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAOD,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;CACF,CAAA;AA1WY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAsBE,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,yBAAyB,CAAC,CAAA;;GArB/C,sBAAsB,CA0WlC"}

package/dist/libs/infrastructure/src/nats/nats-acl.service.d.ts

@@ -0,0 +1,51 @@
+import { OnModuleInit, OnModuleDestroy } from '@nestjs/common';
+export interface NatsAclRule {
+    subject: string;
+    allowedNodeIds: string[] | '*';
+    action: 'publish' | 'subscribe' | 'both';
+}
+export interface IValidatorRegistryProvider {
+    getActiveValidatorIds(): string[];
+    isGenesisComplete(): boolean;
+    onUpdate(callback: (state: any, change: any) => void): () => void;
+}
+export declare class NatsAclService implements OnModuleInit, OnModuleDestroy {
+    private readonly validatorRegistry?;
+    private readonly logger;
+    private aclRules;
+    private defaultPolicy;
+    private readonly localNodeId;
+    private useDynamicRegistry;
+    private _registryUnsubscribe?;
+    constructor(validatorRegistry?: IValidatorRegistryProvider | undefined);
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): void;
+    private get validatorWhitelist();
+    private refreshAclRules;
+    private initializeDefaultRules;
+    addRule(rule: NatsAclRule): void;
+    removeRule(subject: string): void;
+    canSubscribe(nodeId: string, subject: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    canPublish(nodeId: string, subject: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    private checkPermission;
+    private checkPrivateShareAccess;
+    private findMatchingRule;
+    private subjectMatches;
+    grantCeremonyAccess(ceremonyId: string, participants: string[], durationMs?: number): void;
+    getAllRules(): NatsAclRule[];
+    getStats(): {
+        totalRules: number;
+        publicRules: number;
+        privateRules: number;
+        defaultPolicy: string;
+    };
+    private describeWhitelist;
+    private formatAllowedNodes;
+}
+//# sourceMappingURL=nats-acl.service.d.ts.map

package/dist/libs/infrastructure/src/nats/nats-acl.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nats-acl.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/infrastructure/src/nats/nats-acl.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,YAAY,EACZ,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAKxB,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAC/B,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;CAC1C;AAKD,MAAM,WAAW,0BAA0B;IACzC,qBAAqB,IAAI,MAAM,EAAE,CAAC;IAClC,iBAAiB,IAAI,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACnE;AAuBD,qBACa,cAAe,YAAW,YAAY,EAAE,eAAe;IAmBhE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAlBrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAG1D,OAAO,CAAC,QAAQ,CAAkC;IAGlD,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IAGrC,OAAO,CAAC,kBAAkB,CAAS;IAGnC,OAAO,CAAC,oBAAoB,CAAC,CAAa;gBAKvB,iBAAiB,CAAC,EAAE,0BAA0B,YAAA;IAW3D,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IA4BnC,eAAe,IAAI,IAAI;IAoBvB,OAAO,KAAK,kBAAkB,GAuB7B;IAKD,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,sBAAsB;IA8Q9B,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAUhC,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAYjC,YAAY,CACV,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd;QACD,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAWD,UAAU,CACR,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd;QACD,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAYD,OAAO,CAAC,eAAe;IA2EvB,OAAO,CAAC,uBAAuB;IA4C/B,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,cAAc;IAuBtB,mBAAmB,CACjB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EAAE,EACtB,UAAU,GAAE,MAAgB,GAC3B,IAAI;IAyBP,WAAW,IAAI,WAAW,EAAE;IAO5B,QAAQ,IAAI;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB;IAoBD,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,kBAAkB;CAS3B"}