@pafi-dev/core 0.7.6 → 0.7.10

package/dist/index.js

@@ -6,6 +6,7 @@ import {
   v4QuoterAbi
 } from "./chunk-6CXTFOIH.js";
 import {
+  SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
   SPONSOR_AUTH_TYPES,
   buildAndSignSponsorAuth,
@@ -14,11 +15,12 @@ import {
   computeCallDataHash,
   createLoginMessage,
   generateSponsorAuthNonce,
+  getSponsorAuthDomainAnchor,
   parseLoginMessage,
   signSponsorAuth,
   verifyLoginMessage,
   verifySponsorAuth
-} from "./chunk-6UX2IFA2.js";
+} from "./chunk-4EGXLYMM.js";
 import {
   getBurnRequestNonce,
   getIssuer,
@@ -32,22 +34,23 @@ import {
   isMinter,
   issuerRegistryGetIssuerFlatAbi,
   verifyMintCap
-} from "./chunk-YDLMVWDH.js";
+} from "./chunk-AEYEFV5G.js";
 import {
   issuerRegistryAbi,
-  mintingOracleAbi,
-  pointTokenAbi
-} from "./chunk-5JZOJIBT.js";
+  mintingOracleAbi
+} from "./chunk-B2NDSIAI.js";
 import {
   COMMON_POOLS,
   COMMON_TOKENS,
   ENTRY_POINT_V07,
   ENTRY_POINT_V08,
+  Eip712DomainMismatchError,
   PERMIT2_ADDRESS,
   POINT_TOKEN_POOLS,
   SUPPORTED_CHAINS,
   UNIVERSAL_ROUTER_ADDRESSES,
   V4_QUOTER_ADDRESSES,
+  assertDomainMatchesContract,
   buildBurnRequestTypedData,
   buildDomain,
   buildMintRequestTypedData,
@@ -61,7 +64,10 @@ import {
   verifyBurnRequest,
   verifyMintRequest,
   verifyReceiverConsent
-} from "./chunk-WJSIB5GF.js";
+} from "./chunk-QL5COJQI.js";
+import {
+  pointTokenAbi
+} from "./chunk-SZMSKZHY.js";
 import "./chunk-DGUM43GV.js";
 
 // src/index.ts
@@ -582,7 +588,16 @@ function getDummySignatureFor7702(impl) {
 
 // src/paymaster/config.ts
 var _config = null;
+var _deprecationWarned = false;
+function warnDeprecated(fn) {
+  if (_deprecationWarned) return;
+  _deprecationWarned = true;
+  console.warn(
+    `[PAFI] DEPRECATION (v0.7.1+): \`${fn}\` from @pafi-dev/core/paymaster is deprecated and will be removed in v0.8. Use \`PafiBackendClient\` from @pafi-dev/issuer/pafi-backend instead.`
+  );
+}
 function setPaymasterConfig(config) {
+  warnDeprecated("setPaymasterConfig");
   if (!config.pafiBackendUrl) {
     throw new Error("setPaymasterConfig: pafiBackendUrl is required");
   }
@@ -598,6 +613,7 @@ function setPaymasterConfig(config) {
   _config = { ...config };
 }
 function getPaymasterConfig() {
+  warnDeprecated("getPaymasterConfig");
   if (!_config) {
     throw new Error(
       "PaymasterConfig not initialized \u2014 call setPaymasterConfig() at application boot before invoking any batch builder"
@@ -838,7 +854,8 @@ async function delegateDirect(params) {
     nonce
   });
   const yParityRaw = raw.yParity;
-  const yParity = typeof yParityRaw === "number" ? yParityRaw : String(yParityRaw) === "1" || String(yParityRaw) === "0x1" ? 1 : 0;
+  const yParityNum = typeof yParityRaw === "number" ? yParityRaw : String(yParityRaw) === "1" || String(yParityRaw) === "0x1" ? 1 : 0;
+  const yParity = yParityNum === 1 ? 1 : 0;
   const authorization = {
     contractAddress: target,
     chainId: params.chainId,
@@ -1057,7 +1074,8 @@ async function quoteOperatorFeeUsdt(config) {
   const ethPrice8dec = await getEthPrice8dec(
     provider,
     chainlinkFeedAddress,
-    allowStaleFallback ? fallbackEthPriceUsd : null
+    allowStaleFallback ? fallbackEthPriceUsd : null,
+    config.onFallback
   );
   const denomExp = 18 + 8 - usdtDecimals;
   return withPremium * ethPrice8dec / 10n ** BigInt(denomExp);
@@ -1085,18 +1103,20 @@ async function quoteOperatorFeePt(config) {
     getEthPrice8dec(
       provider,
       chainlinkFeedAddress,
-      allowStaleFallback ? fallbackEthPriceUsd : null
+      allowStaleFallback ? fallbackEthPriceUsd : null,
+      config.onFallback
     ),
     getPtPerUsdt18dec(
       fetchImpl,
       subgraphUrl,
       pointTokenAddress,
-      allowStaleFallback ? fallbackPtPriceUsdt : null
+      allowStaleFallback ? fallbackPtPriceUsdt : null,
+      config.onFallback
     )
   ]);
   return withPremium * ethPrice8dec * ptPerUsdt18dec / 10n ** 26n;
 }
-async function getEthPrice8dec(provider, feed, fallback) {
+async function getEthPrice8dec(provider, feed, fallback, onFallback) {
   try {
     const result = await provider.readContract({
       address: feed,
@@ -1116,14 +1136,18 @@ async function getEthPrice8dec(provider, feed, fallback) {
     if (fallback === null) {
       throw new OracleStaleError("chainlink", reason);
     }
-    console.warn(
-      "[quoteOperatorFee] Chainlink unavailable, using opt-in fallback:",
-      reason
-    );
+    if (onFallback) {
+      onFallback({ source: "chainlink", reason, fallbackValue: fallback });
+    } else {
+      console.warn(
+        "[quoteOperatorFee] Chainlink unavailable, using opt-in fallback:",
+        reason
+      );
+    }
     return BigInt(Math.round(fallback * 1e8));
   }
 }
-async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fallbackPtPriceUsdt) {
+async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fallbackPtPriceUsdt, onFallback) {
   try {
     const response = await fetchImpl(subgraphUrl, {
       method: "POST",
@@ -1155,10 +1179,18 @@ async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fall
     if (fallbackPtPriceUsdt === null) {
       throw new OracleStaleError("subgraph", reason);
     }
-    console.warn(
-      "[quoteOperatorFeePt] subgraph unavailable, using opt-in fallback:",
-      reason
-    );
+    if (onFallback) {
+      onFallback({
+        source: "subgraph",
+        reason,
+        fallbackValue: fallbackPtPriceUsdt
+      });
+    } else {
+      console.warn(
+        "[quoteOperatorFeePt] subgraph unavailable, using opt-in fallback:",
+        reason
+      );
+    }
     const ptPerUsdtHuman = 1 / fallbackPtPriceUsdt;
     return parseBigDecimalTo18(ptPerUsdtHuman.toFixed(18));
   }
@@ -1174,6 +1206,29 @@ function parseBigDecimalTo18(s) {
 var BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = getContractAddresses(8453).batchExecutor;
 var BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = getContractAddresses(84532).batchExecutor;
 
+// src/contracts/real/pafi-services.ts
+var PAFI_SERVICE_URLS = {
+  // Base mainnet
+  8453: {
+    sponsorRelayer: "https://api-dev.pacificfinance.org/api/sponsor",
+    issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
+  },
+  // Base sepolia
+  84532: {
+    sponsorRelayer: "https://api-dev.pacificfinance.org/api/sponsor",
+    issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
+  }
+};
+function getPafiServiceUrls(chainId) {
+  const urls = PAFI_SERVICE_URLS[chainId];
+  if (!urls) {
+    throw new Error(
+      `getPafiServiceUrls: no PAFI service URLs for chainId ${chainId}. Supported: ${Object.keys(PAFI_SERVICE_URLS).join(", ")}`
+    );
+  }
+  return urls;
+}
+
 // src/web-handoff/webPopup.ts
 var DEFAULT_WIDTH = 900;
 var DEFAULT_HEIGHT = 700;
@@ -1230,10 +1285,15 @@ function openWebPopup(url, options = {}) {
   }, 500);
   if (options.onMessage) {
     const allowed = options.allowedOrigins ?? [];
+    if (allowed.length === 0) {
+      throw new Error(
+        "openPafiWebModal: `allowedOrigins` is empty/missing while `onMessage` is supplied. The popup-message listener would silently reject every message \u2014 caller must explicitly whitelist PAFI Web's host (e.g. `['https://app.pacificfinance.org']`) before any payload reaches the callback. To accept any origin (insecure), pass an explicit list containing '*' or omit `onMessage` entirely."
+      );
+    }
     const onMessage = options.onMessage;
     messageListener = (event) => {
       if (event.source !== popup) return;
-      if (!allowed.includes(event.origin)) return;
+      if (!allowed.includes("*") && !allowed.includes(event.origin)) return;
       onMessage(event.data, event.origin);
     };
     window.addEventListener("message", messageListener);
@@ -1466,11 +1526,13 @@ export {
   DUMMY_SIGNATURE_V07,
   ENTRY_POINT_V07,
   ENTRY_POINT_V08,
+  Eip712DomainMismatchError,
   ORDERLY_RELAY_ABI,
   ORDERLY_VAULT_ABI,
   ORDERLY_VAULT_ADDRESSES,
   ORDERLY_VAULT_BASE_MAINNET,
   OracleStaleError,
+  PAFI_SERVICE_URLS,
   PAFI_SUBGRAPH_URL,
   PERMIT2_ADDRESS,
   POINT_TOKEN_FACTORY_ADDRESSES,
@@ -1481,6 +1543,7 @@ export {
   PafiSDKError,
   PafiSdkError,
   SIMPLE_7702_IMPL_BASE_MAINNET,
+  SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
   SPONSOR_AUTH_TYPES,
   SUPPORTED_CHAINS,
@@ -1493,6 +1556,7 @@ export {
   ZERO_VALUE,
   _resetPaymasterConfigForTests,
   assembleUserOperation,
+  assertDomainMatchesContract,
   buildAndSignSponsorAuth,
   buildBurnRequestTypedData,
   buildDelegationUserOp,
@@ -1531,12 +1595,14 @@ export {
   getDummySignatureFor7702,
   getIssuer2 as getIssuer,
   getMintRequestNonce,
+  getPafiServiceUrls,
   getPafiWebModalAdapter,
   getPaymasterConfig,
   getPointTokenBalance,
   getPointTokenIssuer,
   getIssuer as getPointTokenIssuerAddress,
   getReceiverConsentNonce,
+  getSponsorAuthDomainAnchor,
   getTokenName,
   isActiveIssuer,
   isDelegatedTo,