@pafi-dev/core 0.23.0 → 0.24.0

package/dist/index.d.cts

@@ -2491,9 +2491,34 @@ interface PafiServiceUrls {
  * NOTE: placeholder URLs — Phi will swap in real prod/staging hosts
  * once the deploy targets are finalized. SDK version bump captures
  * the change.
+ *
+ * Audit PACI5-17 — production deployments SHOULD pass explicit
+ * `overrides` to `getPafiServiceUrls(chainId, overrides)` (sourced from
+ * env vars like `PAFI_SPONSOR_RELAYER_URL`, `PAFI_ISSUER_API_URL`)
+ * instead of relying on these defaults. The SDK ship-default is a
+ * convenience for dev/test; relying on it for production means an SDK
+ * version bump is required to retarget environments.
  */
 declare const PAFI_SERVICE_URLS: Record<number, PafiServiceUrls>;
-declare function getPafiServiceUrls(chainId: number): PafiServiceUrls;
+/**
+ * Resolve PAFI HTTP service URLs for the chain. Caller MAY pass
+ * `overrides` to point at a different environment (production,
+ * staging, local mock) without bumping the SDK.
+ *
+ * Audit PACI5-17 — production issuer backends MUST surface the URL
+ * via env vars and pass them through here so the deployed binary
+ * does not depend on hardcoded ship-defaults that may target dev
+ * infrastructure. Example:
+ *
+ *   const services = getPafiServiceUrls(8453, {
+ *     sponsorRelayer: process.env.PAFI_SPONSOR_RELAYER_URL,
+ *     issuerApi:      process.env.PAFI_ISSUER_API_URL,
+ *   });
+ *
+ * Undefined / empty-string overrides are ignored so callers can safely
+ * pass through optional env vars.
+ */
+declare function getPafiServiceUrls(chainId: number, overrides?: Partial<PafiServiceUrls>): PafiServiceUrls;
 
 /**
  * Public contract surface for `@pafi-dev/core/contracts`.

package/dist/index.d.ts

@@ -2491,9 +2491,34 @@ interface PafiServiceUrls {
  * NOTE: placeholder URLs — Phi will swap in real prod/staging hosts
  * once the deploy targets are finalized. SDK version bump captures
  * the change.
+ *
+ * Audit PACI5-17 — production deployments SHOULD pass explicit
+ * `overrides` to `getPafiServiceUrls(chainId, overrides)` (sourced from
+ * env vars like `PAFI_SPONSOR_RELAYER_URL`, `PAFI_ISSUER_API_URL`)
+ * instead of relying on these defaults. The SDK ship-default is a
+ * convenience for dev/test; relying on it for production means an SDK
+ * version bump is required to retarget environments.
  */
 declare const PAFI_SERVICE_URLS: Record<number, PafiServiceUrls>;
-declare function getPafiServiceUrls(chainId: number): PafiServiceUrls;
+/**
+ * Resolve PAFI HTTP service URLs for the chain. Caller MAY pass
+ * `overrides` to point at a different environment (production,
+ * staging, local mock) without bumping the SDK.
+ *
+ * Audit PACI5-17 — production issuer backends MUST surface the URL
+ * via env vars and pass them through here so the deployed binary
+ * does not depend on hardcoded ship-defaults that may target dev
+ * infrastructure. Example:
+ *
+ *   const services = getPafiServiceUrls(8453, {
+ *     sponsorRelayer: process.env.PAFI_SPONSOR_RELAYER_URL,
+ *     issuerApi:      process.env.PAFI_ISSUER_API_URL,
+ *   });
+ *
+ * Undefined / empty-string overrides are ignored so callers can safely
+ * pass through optional env vars.
+ */
+declare function getPafiServiceUrls(chainId: number, overrides?: Partial<PafiServiceUrls>): PafiServiceUrls;
 
 /**
  * Public contract surface for `@pafi-dev/core/contracts`.

package/dist/index.js

@@ -1,15 +1,3 @@
-import {
-  erc20Abi,
-  permit2Abi,
-  pointModuleCoreAbi,
-  pointTokenFactoryAbi,
-  settlementVaultAbi,
-  tokenRegistryAbi,
-  universalRouterAbi,
-  v3QuoterV2Abi,
-  vaultFactoryAbi,
-  vaultRegistryAbi
-} from "./chunk-ZQVYWMOG.js";
 import {
   SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
@@ -45,6 +33,18 @@ import {
   verifyIssuerOperative,
   verifyMint
 } from "./chunk-4VPIPVV5.js";
+import {
+  erc20Abi,
+  permit2Abi,
+  pointModuleCoreAbi,
+  pointTokenFactoryAbi,
+  settlementVaultAbi,
+  tokenRegistryAbi,
+  universalRouterAbi,
+  v3QuoterV2Abi,
+  vaultFactoryAbi,
+  vaultRegistryAbi
+} from "./chunk-ZQVYWMOG.js";
 import {
   issuerRegistryAbi,
   mintFeeWrapperAbi,
@@ -1522,14 +1522,21 @@ var PAFI_SERVICE_URLS = {
     issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
   }
 };
-function getPafiServiceUrls(chainId) {
-  const urls = PAFI_SERVICE_URLS[chainId];
-  if (!urls) {
+function getPafiServiceUrls(chainId, overrides) {
+  const defaults = PAFI_SERVICE_URLS[chainId];
+  if (!defaults) {
     throw new Error(
-      `getPafiServiceUrls: no PAFI service URLs for chainId ${chainId}. Supported: ${Object.keys(PAFI_SERVICE_URLS).join(", ")}`
+      `getPafiServiceUrls: no PAFI service URLs for chainId ${chainId}. Supported: ${Object.keys(PAFI_SERVICE_URLS).join(", ")}. Provide explicit overrides for unsupported chains.`
     );
   }
-  return urls;
+  const cleanOverrides = {};
+  if (overrides?.sponsorRelayer) {
+    cleanOverrides.sponsorRelayer = overrides.sponsorRelayer;
+  }
+  if (overrides?.issuerApi) {
+    cleanOverrides.issuerApi = overrides.issuerApi;
+  }
+  return { ...defaults, ...cleanOverrides };
 }
 
 // src/web-handoff/webPopup.ts