@toon-protocol/connector 1.7.1

package/dist/security/rules/sudden-traffic-spike-rule.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuddenTrafficSpikeRule = void 0;
+class SuddenTrafficSpikeRule {
+    name = 'SuddenTrafficSpikeRule';
+    severity = 'medium';
+    config;
+    trafficHistory;
+    constructor(config) {
+        this.config = config;
+        this.trafficHistory = new Map();
+    }
+    async check(event) {
+        if (event.type !== 'packet') {
+            return { detected: false };
+        }
+        const packetEvent = event;
+        const now = packetEvent.timestamp;
+        let history = this.trafficHistory.get(packetEvent.peerId);
+        if (!history) {
+            history = {
+                peerId: packetEvent.peerId,
+                packetCounts: [],
+                timestamps: [],
+                windowStart: now,
+            };
+            this.trafficHistory.set(packetEvent.peerId, history);
+        }
+        history.packetCounts.push(packetEvent.packetCount);
+        history.timestamps.push(now);
+        this.cleanupOldEntries(history, now);
+        const currentRate = this.calculateCurrentRate(history);
+        const historicalAverage = this.calculateHistoricalAverage(history);
+        if (history.packetCounts.length < 2 || historicalAverage === 0) {
+            return { detected: false };
+        }
+        const spikeMultiplier = currentRate / historicalAverage;
+        if (spikeMultiplier >= this.config.spikeThreshold) {
+            return {
+                detected: true,
+                peerId: packetEvent.peerId,
+                details: {
+                    description: `Traffic spike detected: ${spikeMultiplier.toFixed(2)}x historical average`,
+                    currentRate,
+                    historicalAverage,
+                    spikeMultiplier,
+                    threshold: this.config.spikeThreshold,
+                    timeWindow: this.config.timeWindow,
+                },
+            };
+        }
+        return { detected: false };
+    }
+    cleanupOldEntries(history, now) {
+        const cutoffTime = now - this.config.timeWindow;
+        let firstValidIndex = 0;
+        for (let i = 0; i < history.timestamps.length; i++) {
+            const timestamp = history.timestamps[i];
+            if (timestamp !== undefined && timestamp >= cutoffTime) {
+                firstValidIndex = i;
+                break;
+            }
+        }
+        if (firstValidIndex > 0) {
+            history.packetCounts = history.packetCounts.slice(firstValidIndex);
+            history.timestamps = history.timestamps.slice(firstValidIndex);
+        }
+    }
+    calculateCurrentRate(history) {
+        if (history.packetCounts.length === 0) {
+            return 0;
+        }
+        const recentPacketCount = history.packetCounts[history.packetCounts.length - 1];
+        if (recentPacketCount === undefined) {
+            return 0;
+        }
+        return recentPacketCount;
+    }
+    calculateHistoricalAverage(history) {
+        if (history.packetCounts.length < 2) {
+            return 0;
+        }
+        const historicalCounts = history.packetCounts.slice(0, -1);
+        const sum = historicalCounts.reduce((acc, count) => acc + count, 0);
+        return sum / historicalCounts.length;
+    }
+    clearHistory() {
+        this.trafficHistory.clear();
+    }
+}
+exports.SuddenTrafficSpikeRule = SuddenTrafficSpikeRule;
+//# sourceMappingURL=sudden-traffic-spike-rule.js.map

package/dist/security/rules/sudden-traffic-spike-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sudden-traffic-spike-rule.js","sourceRoot":"","sources":["../../../src/security/rules/sudden-traffic-spike-rule.ts"],"names":[],"mappings":";;;AAuCA,MAAa,sBAAsB;IACjB,IAAI,GAAG,wBAAwB,CAAC;IAChC,QAAQ,GAAG,QAAiB,CAAC;IAE5B,MAAM,CAA2B;IACjC,cAAc,CAA8B;IAE7D,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;IAClC,CAAC;IAKM,KAAK,CAAC,KAAK,CAAC,KAAmD;QAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,WAAW,GAAG,KAAoB,CAAC;QACzC,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC;QAGlC,IAAI,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG;gBACR,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,GAAG;aACjB,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAGD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAG7B,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAGrC,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAGnE,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAGD,MAAM,eAAe,GAAG,WAAW,GAAG,iBAAiB,CAAC;QACxD,IAAI,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAClD,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE;oBACP,WAAW,EAAE,2BAA2B,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;oBACxF,WAAW;oBACX,iBAAiB;oBACjB,eAAe;oBACf,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;oBACrC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;iBACnC;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAKO,iBAAiB,CAAC,OAAuB,EAAE,GAAW;QAC5D,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAChD,IAAI,eAAe,GAAG,CAAC,CAAC;QAGxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;gBACvD,eAAe,GAAG,CAAC,CAAC;gBACpB,MAAM;YACR,CAAC;QACH,CAAC;QAGD,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACnE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAKO,oBAAoB,CAAC,OAAuB;QAClD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC;QACX,CAAC;QAGD,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEhF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAKO,0BAA0B,CAAC,OAAuB;QACxD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC;QACX,CAAC;QAGD,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;QAEpE,OAAO,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACvC,CAAC;IAKM,YAAY;QACjB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;AAtID,wDAsIC"}

package/dist/security/rules/unusual-settlement-amount-rule.d.ts

@@ -0,0 +1,12 @@
+import { FraudRule, FraudDetection, SettlementEvent, PacketEvent, ChannelEvent } from '../fraud-detector';
+export interface UnusualSettlementAmountConfig {
+    maxSettlementAmount: number;
+}
+export declare class UnusualSettlementAmountRule implements FraudRule {
+    readonly name = "UnusualSettlementAmountRule";
+    readonly severity: "high";
+    private readonly config;
+    constructor(config: UnusualSettlementAmountConfig);
+    check(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<FraudDetection>;
+}
+//# sourceMappingURL=unusual-settlement-amount-rule.d.ts.map

package/dist/security/rules/unusual-settlement-amount-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unusual-settlement-amount-rule.d.ts","sourceRoot":"","sources":["../../../src/security/rules/unusual-settlement-amount-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAK3B,MAAM,WAAW,6BAA6B;IAI5C,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAQD,qBAAa,2BAA4B,YAAW,SAAS;IAC3D,SAAgB,IAAI,iCAAiC;IACrD,SAAgB,QAAQ,EAAG,MAAM,CAAU;IAE3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAE3C,MAAM,EAAE,6BAA6B;IAOpC,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;CAyBjG"}

package/dist/security/rules/unusual-settlement-amount-rule.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnusualSettlementAmountRule = void 0;
+class UnusualSettlementAmountRule {
+    name = 'UnusualSettlementAmountRule';
+    severity = 'high';
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async check(event) {
+        if (event.type !== 'settlement') {
+            return { detected: false };
+        }
+        const settlementEvent = event;
+        if (settlementEvent.amount > this.config.maxSettlementAmount) {
+            return {
+                detected: true,
+                peerId: settlementEvent.peerId,
+                details: {
+                    description: `Unusual settlement amount: ${settlementEvent.amount} units exceeds threshold of ${this.config.maxSettlementAmount} units`,
+                    settlementAmount: settlementEvent.amount,
+                    threshold: this.config.maxSettlementAmount,
+                    channelId: settlementEvent.channelId,
+                    timestamp: settlementEvent.timestamp,
+                },
+            };
+        }
+        return { detected: false };
+    }
+}
+exports.UnusualSettlementAmountRule = UnusualSettlementAmountRule;
+//# sourceMappingURL=unusual-settlement-amount-rule.js.map

package/dist/security/rules/unusual-settlement-amount-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unusual-settlement-amount-rule.js","sourceRoot":"","sources":["../../../src/security/rules/unusual-settlement-amount-rule.ts"],"names":[],"mappings":";;;AAwBA,MAAa,2BAA2B;IACtB,IAAI,GAAG,6BAA6B,CAAC;IACrC,QAAQ,GAAG,MAAe,CAAC;IAE1B,MAAM,CAAgC;IAEvD,YAAY,MAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAKM,KAAK,CAAC,KAAK,CAAC,KAAmD;QAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,eAAe,GAAG,KAAwB,CAAC;QAGjD,IAAI,eAAe,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7D,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,OAAO,EAAE;oBACP,WAAW,EAAE,8BAA8B,eAAe,CAAC,MAAM,+BAA+B,IAAI,CAAC,MAAM,CAAC,mBAAmB,QAAQ;oBACvI,gBAAgB,EAAE,eAAe,CAAC,MAAM;oBACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;oBAC1C,SAAS,EAAE,eAAe,CAAC,SAAS;oBACpC,SAAS,EAAE,eAAe,CAAC,SAAS;iBACrC;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAtCD,kEAsCC"}

package/dist/security/token-bucket.d.ts

@@ -0,0 +1,16 @@
+export interface TokenBucketConfig {
+    capacity: number;
+    refillRate: number;
+}
+export declare class TokenBucket {
+    private capacity;
+    private refillRate;
+    private tokens;
+    private lastRefill;
+    constructor(capacity: number, refillRate: number);
+    tryConsume(): boolean;
+    getAvailableTokens(): number;
+    private refill;
+    reset(): void;
+}
+//# sourceMappingURL=token-bucket.d.ts.map

package/dist/security/token-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-bucket.d.ts","sourceRoot":"","sources":["../../src/security/token-bucket.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,EAAE,MAAM,CAAC;IAEjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD,qBAAa,WAAW;IAKpB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,UAAU;IALpB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;gBAGjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM;IAoB5B,UAAU,IAAI,OAAO;IAYrB,kBAAkB,IAAI,MAAM;IAQ5B,OAAO,CAAC,MAAM;IAWd,KAAK,IAAI,IAAI;CAId"}

package/dist/security/token-bucket.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenBucket = void 0;
+class TokenBucket {
+    capacity;
+    refillRate;
+    tokens;
+    lastRefill;
+    constructor(capacity, refillRate) {
+        this.capacity = capacity;
+        this.refillRate = refillRate;
+        if (capacity <= 0) {
+            throw new Error('Token bucket capacity must be positive');
+        }
+        if (refillRate <= 0) {
+            throw new Error('Token bucket refill rate must be positive');
+        }
+        if (!Number.isFinite(capacity) || !Number.isFinite(refillRate)) {
+            throw new Error('Token bucket parameters must be finite numbers');
+        }
+        this.tokens = capacity;
+        this.lastRefill = Date.now();
+    }
+    tryConsume() {
+        this.refill();
+        if (this.tokens >= 1) {
+            this.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+    getAvailableTokens() {
+        this.refill();
+        return this.tokens;
+    }
+    refill() {
+        const now = Date.now();
+        const elapsed = (now - this.lastRefill) / 1000;
+        const tokensToAdd = elapsed * this.refillRate;
+        this.tokens = Math.min(this.capacity, this.tokens + tokensToAdd);
+        this.lastRefill = now;
+    }
+    reset() {
+        this.tokens = this.capacity;
+        this.lastRefill = Date.now();
+    }
+}
+exports.TokenBucket = TokenBucket;
+//# sourceMappingURL=token-bucket.js.map

package/dist/security/token-bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-bucket.js","sourceRoot":"","sources":["../../src/security/token-bucket.ts"],"names":[],"mappings":";;;AAmBA,MAAa,WAAW;IAKZ;IACA;IALF,MAAM,CAAS;IACf,UAAU,CAAS;IAE3B,YACU,QAAgB,EAChB,UAAkB;QADlB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAQ;QAE1B,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAMD,UAAU;QACR,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAKD,kBAAkB;QAChB,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAKO,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IAKD,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;CACF;AA7DD,kCA6DC"}

package/dist/security/violation-counter.d.ts

@@ -0,0 +1,11 @@
+export declare class ViolationCounter {
+    private violations;
+    private windowSizeMs;
+    constructor(windowSizeSeconds?: number);
+    increment(peerId: string): number;
+    getCount(peerId: string): number;
+    reset(peerId: string): void;
+    cleanup(): void;
+    getActivePeers(): string[];
+}
+//# sourceMappingURL=violation-counter.d.ts.map

package/dist/security/violation-counter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"violation-counter.d.ts","sourceRoot":"","sources":["../../src/security/violation-counter.ts"],"names":[],"mappings":"AAiBA,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,UAAU,CAAsC;IACxD,OAAO,CAAC,YAAY,CAAS;gBAKjB,iBAAiB,GAAE,MAAW;IAY1C,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAuBjC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAqBhC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAO3B,OAAO,IAAI,IAAI;IAYf,cAAc,IAAI,MAAM,EAAE;CAY3B"}

package/dist/security/violation-counter.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViolationCounter = void 0;
+class ViolationCounter {
+    violations = new Map();
+    windowSizeMs;
+    constructor(windowSizeSeconds = 60) {
+        if (windowSizeSeconds <= 0) {
+            throw new Error('Violation counter window size must be positive');
+        }
+        this.windowSizeMs = windowSizeSeconds * 1000;
+    }
+    increment(peerId) {
+        const now = Date.now();
+        const existing = this.violations.get(peerId);
+        if (!existing || now - existing.windowStart >= this.windowSizeMs) {
+            this.violations.set(peerId, {
+                count: 1,
+                windowStart: now,
+            });
+            return 1;
+        }
+        existing.count += 1;
+        return existing.count;
+    }
+    getCount(peerId) {
+        const now = Date.now();
+        const existing = this.violations.get(peerId);
+        if (!existing) {
+            return 0;
+        }
+        if (now - existing.windowStart >= this.windowSizeMs) {
+            this.violations.delete(peerId);
+            return 0;
+        }
+        return existing.count;
+    }
+    reset(peerId) {
+        this.violations.delete(peerId);
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [peerId, record] of this.violations.entries()) {
+            if (now - record.windowStart >= this.windowSizeMs) {
+                this.violations.delete(peerId);
+            }
+        }
+    }
+    getActivePeers() {
+        const now = Date.now();
+        const activePeers = [];
+        for (const [peerId, record] of this.violations.entries()) {
+            if (now - record.windowStart < this.windowSizeMs) {
+                activePeers.push(peerId);
+            }
+        }
+        return activePeers;
+    }
+}
+exports.ViolationCounter = ViolationCounter;
+//# sourceMappingURL=violation-counter.js.map

package/dist/security/violation-counter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"violation-counter.js","sourceRoot":"","sources":["../../src/security/violation-counter.ts"],"names":[],"mappings":";;;AAiBA,MAAa,gBAAgB;IACnB,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,YAAY,CAAS;IAK7B,YAAY,oBAA4B,EAAE;QACxC,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,iBAAiB,GAAG,IAAI,CAAC;IAC/C,CAAC;IAOD,SAAS,CAAC,MAAc;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAEjE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;gBAC1B,KAAK,EAAE,CAAC;gBACR,WAAW,EAAE,GAAG;aACjB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QAGD,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAOD,QAAQ,CAAC,MAAc;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC;QACX,CAAC;QAGD,IAAI,GAAG,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAMD,KAAK,CAAC,MAAc;QAClB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAKD,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAKD,cAAc;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AA9FD,4CA8FC"}

package/dist/settlement/account-id-generator.d.ts

@@ -0,0 +1,4 @@
+import { AccountType } from './types';
+export declare function generateAccountId(nodeId: string, peerId: string, tokenId: string, accountType: AccountType): bigint;
+export declare function isValidAccountId(accountId: bigint): boolean;
+//# sourceMappingURL=account-id-generator.d.ts.map

package/dist/settlement/account-id-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-id-generator.d.ts","sourceRoot":"","sources":["../../src/settlement/account-id-generator.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAoDtC,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW,GACvB,MAAM,CAwBR;AA0DD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiB3D"}

package/dist/settlement/account-id-generator.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAccountId = generateAccountId;
+exports.isValidAccountId = isValidAccountId;
+const crypto_1 = require("crypto");
+function generateAccountId(nodeId, peerId, tokenId, accountType) {
+    const concatenated = `${nodeId}|${peerId}|${tokenId}|${accountType}`;
+    const hash = (0, crypto_1.createHash)('sha256').update(concatenated).digest();
+    const id128Bits = hash.subarray(0, 16);
+    const accountId = BigInt('0x' + id128Bits.toString('hex'));
+    if (accountId === 0n) {
+        return generateAccountIdWithSalt(nodeId, peerId, tokenId, accountType, 1);
+    }
+    return accountId;
+}
+function generateAccountIdWithSalt(nodeId, peerId, tokenId, accountType, salt) {
+    const concatenated = `${nodeId}|${peerId}|${tokenId}|${accountType}|${salt}`;
+    const hash = (0, crypto_1.createHash)('sha256').update(concatenated).digest();
+    const id128Bits = hash.subarray(0, 16);
+    const accountId = BigInt('0x' + id128Bits.toString('hex'));
+    if (accountId === 0n) {
+        return generateAccountIdWithSalt(nodeId, peerId, tokenId, accountType, salt + 1);
+    }
+    return accountId;
+}
+function isValidAccountId(accountId) {
+    if (typeof accountId !== 'bigint') {
+        return false;
+    }
+    if (accountId === 0n) {
+        return false;
+    }
+    if (accountId < 0n) {
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=account-id-generator.js.map

package/dist/settlement/account-id-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-id-generator.js","sourceRoot":"","sources":["../../src/settlement/account-id-generator.ts"],"names":[],"mappings":";;AA6EA,8CA6BC;AA0DD,4CAiBC;AA7JD,mCAAoC;AAqDpC,SAAgB,iBAAiB,CAC/B,MAAc,EACd,MAAc,EACd,OAAe,EACf,WAAwB;IAIxB,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;IAGrE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAIhE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAIvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAG3D,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QAGrB,OAAO,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAiBD,SAAS,yBAAyB,CAChC,MAAc,EACd,MAAc,EACd,OAAe,EACf,WAAwB,EACxB,IAAY;IAGZ,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;IAG7E,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAGhE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAGvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAG3D,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAgBD,SAAgB,gBAAgB,CAAC,SAAiB;IAEhD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAGD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAGD,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/settlement/account-manager.d.ts

@@ -0,0 +1,47 @@
+import { Logger } from 'pino';
+import type { ILedgerClient } from './ledger-client';
+import { CreditLimitConfig, CreditLimitViolation } from '../config/types';
+import { PeerAccountPair, PeerAccountBalance } from './types';
+import { BatchWriterConfig } from './tigerbeetle-batch-writer';
+export interface AccountManagerConfig {
+    nodeId: string;
+    defaultLedger?: number;
+    creditLimits?: CreditLimitConfig;
+    batchWriterConfig?: BatchWriterConfig;
+}
+export declare class AccountManager {
+    private readonly _ledgerClient;
+    private readonly _logger;
+    private readonly _config;
+    private readonly _accountCache;
+    private readonly _confirmedAccounts;
+    private readonly _creditLimitConfig;
+    private readonly _batchWriter;
+    constructor(config: AccountManagerConfig, _ledgerClient: ILedgerClient, _logger: Logger);
+    createPeerAccounts(peerId: string, tokenId: string): Promise<PeerAccountPair>;
+    getPeerAccountPair(peerId: string, tokenId: string): PeerAccountPair;
+    ensurePeerAccounts(peerId: string, tokenId: string): Promise<PeerAccountPair>;
+    getAccountBalance(peerId: string, tokenId: string): Promise<PeerAccountBalance>;
+    recordPacketTransfers(fromPeerId: string, toPeerId: string, tokenId: string, incomingAmount: bigint, outgoingAmount: bigint, transferId1: bigint, transferId2: bigint, ledger: number, code: number): Promise<void>;
+    checkCreditLimit(peerId: string, tokenId: string, amount: bigint): Promise<CreditLimitViolation | null>;
+    wouldExceedCreditLimit(peerId: string, tokenId: string, amount: bigint): Promise<boolean>;
+    clearCache(): void;
+    getCacheStats(): {
+        size: number;
+    };
+    shutdown(): Promise<void>;
+    getBatchWriterStats(): {
+        pendingTransfers: number;
+        totalTransfersProcessed: number;
+        totalBatchesFlushed: number;
+        isFlushing: boolean;
+    } | undefined;
+    recordSettlement(peerId: string, tokenId: string, amount: bigint): Promise<void>;
+    private _buildAccountObject;
+    private _getCreditLimitForPeer;
+    private _applyCeiling;
+    private _getCacheKey;
+    private _createTransferFn;
+    private _convertToBatchWriterTransfer;
+}
+//# sourceMappingURL=account-manager.d.ts.map

package/dist/settlement/account-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager.d.ts","sourceRoot":"","sources":["../../src/settlement/account-manager.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAQ9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIrD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAGL,eAAe,EACf,kBAAkB,EAEnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,iBAAiB,EAGlB,MAAM,4BAA4B,CAAC;AAKpC,MAAM,WAAW,oBAAoB;IAKnC,MAAM,EAAE,MAAM,CAAC;IAOf,aAAa,CAAC,EAAE,MAAM,CAAC;IAOvB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAOjC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AA+BD,qBAAa,cAAc;IAWvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAX1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAEtB;IACF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+B;IAC7D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgC;IACnE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;gBAGhE,MAAM,EAAE,oBAAoB,EACX,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM;IA8E5B,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA0InF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe;IAqD9D,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAmD7E,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4F/E,qBAAqB,CACzB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IA4GV,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA6FjC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW/F,UAAU,IAAI,IAAI;IAYlB,aAAa,IAAI;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;IAe3B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAY/B,mBAAmB,IACf;QACE,gBAAgB,EAAE,MAAM,CAAC;QACzB,uBAAuB,EAAE,MAAM,CAAC;QAChC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,UAAU,EAAE,OAAO,CAAC;KACrB,GACD,SAAS;IAwCP,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAyGxE,mBAAmB;IA+CjC,OAAO,CAAC,sBAAsB;IA0C9B,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,YAAY;YAcN,iBAAiB;IAkC/B,OAAO,CAAC,6BAA6B;CAiBtC"}