opcjs-base 0.1.36-alpha → 0.1.38-alpha

package/dist/index.cjs

@@ -17874,19 +17874,21 @@ var SecureChannelMessageDecoder = class extends TransformStream {
    * seen remote sequence.  Allows exactly one UInt32 wrap-around per token.
    * Returns false and logs an error if the number is a duplicate or out of order.
    */
-  validateSequenceNumber(sequenceNumber, controller) {
+  validateSequenceNumber(sequenceNumber, msgType, controller) {
     const last = this.context.lastRemoteSequenceNumber;
     if (last === void 0) {
       this.context.lastRemoteSequenceNumber = sequenceNumber;
+      this.logger.debug(`[${msgType}] Sequence number initialized to ${sequenceNumber}`);
       return true;
     }
     const isIncrement = sequenceNumber === last + 1;
     const isWrap = last >= SEQ_WRAP_THRESHOLD2 && sequenceNumber < SEQ_WRAP_MAX;
     if (!isIncrement && !isWrap) {
-      this.logger.error(`Invalid remote sequence number: expected ${last + 1}, got ${sequenceNumber}`);
+      this.logger.error(`[${msgType}] Invalid remote sequence number: expected ${last + 1}, got ${sequenceNumber}`);
       controller.error(new Error(`Invalid remote sequence number: expected ${last + 1}, got ${sequenceNumber}`));
       return false;
     }
+    this.logger.debug(`[${msgType}] Sequence number advanced: ${last} \u2192 ${sequenceNumber}`);
     this.context.lastRemoteSequenceNumber = sequenceNumber;
     return true;
   }
@@ -17904,7 +17906,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
           secHeader,
           this.context.securityAlgorithm
         );
-        if (!this.validateSequenceNumber(msgAsym.sequenceHeader.sequenceNumber, controller)) return;
+        if (!this.validateSequenceNumber(msgAsym.sequenceHeader.sequenceNumber, "OPN", controller)) return;
         controller.enqueue(msgAsym);
         break;
       }
@@ -17912,7 +17914,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.warn("SecureChannel received Abort message");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, controller)) return;
+        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-A", controller)) return;
         controller.enqueue(msgSym);
         break;
       }
@@ -17920,7 +17922,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.debug("SecureChannel received Chunk message.");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, controller)) return;
+        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-C", controller)) return;
         controller.enqueue(msgSym);
         break;
       }
@@ -17928,13 +17930,17 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.debug("SecureChannel received Final message");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, controller)) return;
+        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-F", controller)) return;
         controller.enqueue(msgSym);
         break;
       }
-      case MsgTypeCloseFinal:
-        this.logger.warn("Unimplemented CloseFinal message.");
+      case MsgTypeCloseFinal: {
+        this.logger.warn("SecureChannel received CloseFinal message.");
+        const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
+        const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
+        this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "CLO-F", controller);
         break;
+      }
       default:
         this.logger.warn("SecureChannel received unknown message type:", header.msgType);
         break;