All issues resolved

[Lakes41]

Description

This PR implements several core infrastructure packages for GuildPass, including secure nonce management, event deduplication, and role-permission inheritance resolution. These packages provide foundational primitives for cryptographic operations, distributed system reliability, and governance functionality.

Linked Issues

Closes #355
Closes #372
Closes #375
Closes #373
Closes #376
Closes #379
Closes#383

Type of Change

• ✨ New feature / endpoint
• 🧪 Tests only

Changes Made

• packages/nonce-manager: Implemented secure nonce manager with cryptographic randomness, configurable entropy, URL-safe encoding, expiry management, and memory constraints. Provides one-time-use semantics for replay protection.
• packages/event-deduplication: Implemented standalone event deduplication engine with atomic check-and-record behavior, configurable retention windows, FIFO eviction, and concurrent request safety.
• packages/permission-inheritance: Implemented role-permission inheritance resolver with cycle detection, multi-level inheritance support, diamond pattern handling, deterministic ordering, and configurable depth/graph limits.
• packages/stellar-memo: Verified existing implementation meets requirements for Stellar memo parsing and formatting.
• packages/voting-power-snapshot: Verified existing implementation meets requirements for voting power aggregation and snapshot calculation.

Test Evidence

All packages pass comprehensive test suites:

packages/nonce-manager: 26 tests passed
packages/event-deduplication: 28 tests passed  
packages/permission-inheritance: 38 tests passed
packages/stellar-memo: 6 tests passed
packages/voting-power-snapshot: 7 tests passed

Workspace typecheck: ✅ Passed
Workspace build: ✅ Passed

Smart Contract Checklist (complete if ⛓️ checked above)

N/A - No smart contract changes

General Checklist

• I have read CONTRIBUTING.md
• This PR is linked to open issues
• npm run typecheck passes
• npm run lint passes
• npm run test passes — all tests green
• Prisma schema changes include a migration file (N/A)
• New API endpoints are documented in OpenAPI (N/A)
• No secrets, keys, or wallet addresses introduced
• .env.example updated if new env variables were added (N/A)
• Documentation updated if new behaviour was introduced

Screenshots / Recordings

N/A - Core infrastructure packages with no UI components

Additional Notes

All implemented packages are:

• Framework-independent with no external dependencies on persistence, APIs, or wallet infrastructure
• Designed for future extensibility (e.g., Redis adapters possible without core changes)
• Comprehensive test coverage including edge cases, concurrency, and deterministic behavior
• Memory-constrained with explicit bounds and cleanup mechanisms
• Time-injection support for deterministic testing without long sleeps

The packages follow established GuildPass patterns and integrate seamlessly with the existing monorepo structure.