@pafi-dev/core 0.7.7 → 0.7.10

package/dist/index.d.cts

@@ -1,11 +1,11 @@
 import { Address, Hex, TypedDataDomain, PublicClient, WalletClient, TransactionReceipt, HttpTransport } from 'viem';
-import { P as PoolKey, C as ChainConfig, a as PafiSDKConfig, b as PointTokenDomainConfig, M as MintRequest, R as ReceiverConsent, E as EIP712Signature, S as SignatureVerification } from './types-BAkmxgVo.cjs';
-export { B as BestQuote, c as BurnRequest, I as Issuer, d as PathKey, Q as QuoteResult } from './types-BAkmxgVo.cjs';
+import { P as PoolKey, C as ChainConfig, a as PafiSDKConfig, b as PointTokenDomainConfig, M as MintRequest, R as ReceiverConsent, E as EIP712Signature, S as SignatureVerification } from './types-CCvAk-ma.cjs';
+export { B as BestQuote, c as BlackoutWindow, d as BurnRequest, I as Issuer, e as PathKey, Q as QuoteResult, f as RedemptionDecision, g as RedemptionDenial, h as RedemptionDenialCode, i as RedemptionPolicy, j as RedemptionPolicySource, k as RedemptionPreview } from './types-CCvAk-ma.cjs';
 export { pointTokenAbi as POINT_TOKEN_V2_ABI, erc20Abi, issuerRegistryAbi, mintingOracleAbi, permit2Abi, pointTokenAbi, pointTokenFactoryAbi, universalRouterAbi, v4QuoterAbi } from './abi/index.cjs';
-export { buildBurnRequestTypedData, buildDomain, buildMintRequestTypedData, buildReceiverConsentTypedData, signBurnRequest, signMintRequest, signReceiverConsent, verifyBurnRequest, verifyMintRequest, verifyReceiverConsent } from './eip712/index.cjs';
+export { Eip712DomainMismatchError, assertDomainMatchesContract, buildBurnRequestTypedData, buildDomain, buildMintRequestTypedData, buildReceiverConsentTypedData, signBurnRequest, signMintRequest, signReceiverConsent, verifyBurnRequest, verifyMintRequest, verifyReceiverConsent } from './eip712/index.cjs';
 export { getBurnRequestNonce, getIssuer, getMintRequestNonce, getPointTokenBalance, getPointTokenIssuer, getPointTokenIssuerAddress, getReceiverConsentNonce, getTokenName, isActiveIssuer, isMinter, issuerRegistryGetIssuerFlatAbi, verifyMintCap } from './contract/index.cjs';
 import { LoginMessageParams } from './auth/index.cjs';
-export { BuildSponsorAuthParams, BuiltSponsorAuth, SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_TYPES, SponsorAuthPayload, SponsorAuthVerifyResult, VerifyLoginResult, buildAndSignSponsorAuth, buildSponsorAuthDomain, buildSponsorAuthTypedData, computeCallDataHash, createLoginMessage, generateSponsorAuthNonce, parseLoginMessage, signSponsorAuth, verifyLoginMessage, verifySponsorAuth } from './auth/index.cjs';
+export { BuildSponsorAuthParams, BuiltSponsorAuth, SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET, SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_TYPES, SponsorAuthPayload, SponsorAuthVerifyResult, VerifyLoginResult, buildAndSignSponsorAuth, buildSponsorAuthDomain, buildSponsorAuthTypedData, computeCallDataHash, createLoginMessage, generateSponsorAuthNonce, getSponsorAuthDomainAnchor, parseLoginMessage, signSponsorAuth, verifyLoginMessage, verifySponsorAuth } from './auth/index.cjs';
 
 declare const mintRequestTypes: {
     readonly MintRequest: readonly [{
@@ -83,15 +83,13 @@ declare const ENTRY_POINT_V08: Address;
 declare const PERMIT2_ADDRESS: Address;
 
 /**
- * v0.7.1 — unified error base for the entire SDK (core + issuer +
- * trading). Subclasses declare `code` (machine-readable) and
- * `httpStatus` (recommended HTTP status for issuer's controller).
+ * Unified error base for the entire SDK (core + issuer + trading).
+ * Subclasses declare `code` (machine-readable) and `httpStatus`
+ * (recommended HTTP status for issuer's controller).
  *
  * Issuer's `createSdkErrorMapper` routes any `PafiSdkError` instance
  * through framework-specific exception factories; non-PafiSdkError
  * still becomes 500.
- *
- * See SDK_CORE_TRADING_AUDIT.md H3.
  */
 type SdkErrorHttpStatus = "not_found" | "forbidden" | "unprocessable" | "service_unavailable";
 declare abstract class PafiSdkError extends Error {
@@ -106,11 +104,11 @@ declare abstract class PafiSdkError extends Error {
     constructor(message: string);
 }
 /**
- * @deprecated v0.7.1 — use `PafiSdkError` (capital S, lowercase dk).
+ * @deprecated Use `PafiSdkError` (capital S, lowercase dk).
  * The two classes existed in parallel ("PafiSDKError" in core,
  * "PafiSdkError" in issuer) due to historical drift; consolidating
  * here. Kept as alias for back-compat through v0.7.x; will be removed
- * in v0.8. See SDK_CORE_TRADING_AUDIT.md H3.
+ * in v0.8.
  */
 declare class PafiSDKError extends Error {
     constructor(message: string);
@@ -133,11 +131,8 @@ declare class ApiError extends PafiSDKError {
 /**
  * Thrown by `quoteOperatorFee*` when an upstream price source
  * (Chainlink ETH/USD, PAFI subgraph) is unavailable or stale and the
- * caller did not opt in to the hardcoded fallback prices.
- *
- * v0.7.1 — previously `quoteOperatorFeePt` silently fell back to
- * ETH=$3000 / PT=$0.10 with `console.warn`. Now opt-in via
- * `allowStaleFallback: true`. See SDK_CORE_TRADING_AUDIT.md C2.
+ * caller did not opt in to the hardcoded fallback prices via
+ * `allowStaleFallback: true`.
  *
  * Extends the unified `PafiSdkError` so issuer's `createSdkErrorMapper`
  * routes it to 503 instead of leaking as a 500.
@@ -156,8 +151,6 @@ declare class OracleStaleError extends PafiSdkError {
  *
  * Uses an instance `details` field so subclasses can override the
  * declaration; matches the issuer-side shape that pre-existed here.
- *
- * v0.7.4 — added per SDK_CORE_TRADING_AUDIT.md H2/H13.
  */
 declare class ValidationError extends PafiSdkError {
     readonly httpStatus: "unprocessable";
@@ -1392,10 +1385,6 @@ interface SmartAccountSender {
  *
  * Use this to decide whether retrying without a paymaster makes sense.
  * Contract reverts (AA23, AA24, AA25) and bundler errors are NOT matched.
- *
- * v0.7.1 — replaced naive substring matching that false-positived on
- * arbitrary text containing "503"/"403"/"429" (e.g. address/transit ID).
- * See SDK_CORE_TRADING_AUDIT.md C3.
  */
 declare function isPaymasterError(err: unknown): boolean;
 interface SendWithPaymasterFallbackParams {
@@ -1459,8 +1448,7 @@ declare function sendWithPaymasterFallback(params: SendWithPaymasterFallbackPara
  *   perp-deposit — `buildPerpDepositViaRelay` 800k (LayerZero msg)
  *   delegate     — minimal no-op self-call, 200k margin
  *
- * Pass an explicit `gasUnits` to override. v0.7.4 — added per
- * SDK_CORE_TRADING_AUDIT.md H12.
+ * Pass an explicit `gasUnits` to override.
  */
 type FeeScenario = "mint" | "burn" | "swap" | "perp-deposit" | "delegate";
 interface QuoteOperatorFeePtConfig {
@@ -1497,17 +1485,38 @@ interface QuoteOperatorFeePtConfig {
      * `true` AND configure `fallbackEthPriceUsd` / `fallbackPtPriceUsdt`
      * to absorb oracle outages instead of surfacing them.
      *
-     * v0.7.1 — previously fallback was always-on with hardcoded
-     * defaults (ETH=$3000, PT=$0.10), causing under-priced fees during
-     * incidents. See SDK_CORE_TRADING_AUDIT.md C2.
+     * When fallback fires, callers SHOULD observe via `onFallback` so
+     * production can flag the under-priced quote (e.g. show "fee priced
+     * against stale oracle" banner in FE; alert on-call).
      */
     allowStaleFallback?: boolean;
     /** Fallback ETH price (USD) when Chainlink is unreachable. Only used when `allowStaleFallback: true`. Default 3000. */
     fallbackEthPriceUsd?: number;
     /** Fallback PT price (USDT per 1 PT) when subgraph is unreachable. Only used when `allowStaleFallback: true`. Default 0.1. */
     fallbackPtPriceUsdt?: number;
+    /**
+     * Observability hook fired when the quoter falls back to stale
+     * prices. Callers SHOULD wire this to their alert pipeline (Sentry,
+     * Datadog, PagerDuty) so under-priced quotes don't go unnoticed.
+     * When omitted, falls back to `console.warn` (kept for back-compat
+     * but invisible in most prod log shippers).
+     */
+    onFallback?: (info: FallbackInfo) => void;
     fetchImpl?: typeof fetch;
 }
+/**
+ * Detail surfaced via `onFallback` when the quoter substitutes a
+ * stale-fallback price. Callers can format this into a UI banner or
+ * log line.
+ */
+interface FallbackInfo {
+    /** Which oracle failed. */
+    source: "chainlink" | "subgraph";
+    /** Underlying reason from the oracle call (e.g. RPC error message). */
+    reason: string;
+    /** The fallback value that was used (in source-native units). */
+    fallbackValue: number;
+}
 /**
  * Subset of `QuoteOperatorFeePtConfig` that doesn't need the V4 pool
  * step — used by `quoteOperatorFeeUsdt` (FE cashout-preview / `/gas-fee`
@@ -1525,10 +1534,12 @@ interface QuoteOperatorFeeUsdtConfig {
     usdtDecimals?: number;
     /**
      * Opt-in fallback price when Chainlink is unavailable. Default
-     * `false` — throw `OracleStaleError`. v0.7.1 — see C2.
+     * `false` — throw `OracleStaleError`.
      */
     allowStaleFallback?: boolean;
     fallbackEthPriceUsd?: number;
+    /** See QuoteOperatorFeePtConfig.onFallback. */
+    onFallback?: (info: FallbackInfo) => void;
 }
 /**
  * Operator fee quoted in USDT raw units (default 6 decimals). Returns
@@ -1634,6 +1645,42 @@ declare const POINT_TOKEN_IMPL_ADDRESSES: Record<number, Address>;
  */
 declare function getContractAddresses(chainId: number): ContractAddresses;
 
+/**
+ * PAFI HTTP service URLs by chainId. Mirrors the `getContractAddresses`
+ * pattern: SDK ships with the URL for each supported chain so issuers
+ * don't pass URLs as env vars / constructor args.
+ *
+ * When PAFI changes URLs (rebrand, re-host, environment migration),
+ * bump the SDK version and re-publish. Issuers pin a version, get the
+ * URLs that match.
+ *
+ * No env override is provided on purpose — different environments use
+ * different SDK versions (e.g. an `@pafi-dev/issuer-dev` channel for
+ * staging). This keeps issuer integration to chainId + creds only.
+ */
+interface PafiServiceUrls {
+    /**
+     * sponsor-relayer base URL (paymaster proxy). PafiBackendClient
+     * appends `/paymaster/sponsor`, `/bundler/receipt`, etc.
+     */
+    sponsorRelayer: string;
+    /**
+     * issuer-api base URL. SettlementClient appends
+     * `/issuers/:issuerId/redemption-policy`.
+     */
+    issuerApi: string;
+}
+/**
+ * Per-chain URL map. URLs follow the pattern
+ * `https://<host>/api/<service>` so Kong gateway can route by path.
+ *
+ * NOTE: placeholder URLs — Phi will swap in real prod/staging hosts
+ * once the deploy targets are finalized. SDK version bump captures
+ * the change.
+ */
+declare const PAFI_SERVICE_URLS: Record<number, PafiServiceUrls>;
+declare function getPafiServiceUrls(chainId: number): PafiServiceUrls;
+
 /**
  * Public contract surface for `@pafi-dev/core/contracts`.
  *
@@ -1971,4 +2018,4 @@ declare class PafiSDK {
     signLoginMessage(message: string): Promise<Hex>;
 }
 
-export { ApiError, BATCH_EXECUTOR_7702_IMPL, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, type BuildDelegationUserOpParams, type BuildPartialUserOpParams, type BuildPerpDepositViaRelayParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, DUMMY_SIGNATURE_V07, type DelegateDirectParams, type DelegateDirectResult, type DelegateImpl, EIP712Signature, ENTRY_POINT_V07, ENTRY_POINT_V08, type Eip7702AuthorizationJsonRpc, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_RELAY_ABI, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, type Operation, OracleStaleError, type OrderlyRelayDepositRequest, PAFI_SUBGRAPH_URL, PERMIT2_ADDRESS, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, type PackedUserOperationMessage, type PafiProxyTransportParams, PafiSDK, PafiSDKConfig, PafiSDKError, PafiSdkError, type PafiWebModalAdapter, type PafiWebModalHandle, type PartialUserOperation, type PaymasterConfig, type PaymasterFields, PointTokenDomainConfig, PoolKey, type QuoteOperatorFeePtConfig, type QuoteOperatorFeeUsdtConfig, ReceiverConsent, SIMPLE_7702_IMPL_BASE_MAINNET, SUPPORTED_CHAINS, type SdkErrorHttpStatus, type SendWithPaymasterFallbackParams, type SignAuthorizationFn, type SignatureStruct, SignatureVerification, type SignedAuthorization, SigningError, SimulationError, type SmartAccountSender, type SponsorshipScenario, type SubmissionPath, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, type UserOpReceipt, type UserOpTypedData, type UserOperation, V4_QUOTER_ADDRESSES, ValidationError, type VaultDepositFE, ZERO_VALUE, _resetPaymasterConfigForTests, assembleUserOperation, buildDelegationUserOp, buildEip7702Authorization, buildPartialUserOperation, buildPerpDepositViaRelay, buildPerpDepositWithGasDeduction, buildUserOpTypedData, burnRequestTypes, checkDelegation, checkEthAndBranch, computeAccountId, computeAuthorizationHash, computeUserOpHash, createPafiProxyTransport, decodeBatchExecuteCalls, delegateDirect, detectDelegateImpl, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, fetchPafiPools, getAaNonce, getContractAddresses, getDummySignatureFor7702, getPafiWebModalAdapter, getPaymasterConfig, isDelegatedTo, isDelegatedToTarget, isPaymasterConfigured, isPaymasterError, mintRequestTypes, openPafiWebModal, openWebPopup, parseEip7702DelegatedAddress, quoteOperatorFeePt, quoteOperatorFeeUsdt, rawCallOp, receiverConsentTypes, sendWithPaymasterFallback, serializeUserOpToJsonRpc, setPafiWebModalAdapter, setPaymasterConfig, splitAuthorizationSig, webPopupAdapter };
+export { ApiError, BATCH_EXECUTOR_7702_IMPL, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, type BuildDelegationUserOpParams, type BuildPartialUserOpParams, type BuildPerpDepositViaRelayParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, DUMMY_SIGNATURE_V07, type DelegateDirectParams, type DelegateDirectResult, type DelegateImpl, EIP712Signature, ENTRY_POINT_V07, ENTRY_POINT_V08, type Eip7702AuthorizationJsonRpc, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_RELAY_ABI, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, type Operation, OracleStaleError, type OrderlyRelayDepositRequest, PAFI_SERVICE_URLS, PAFI_SUBGRAPH_URL, PERMIT2_ADDRESS, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, type PackedUserOperationMessage, type PafiProxyTransportParams, PafiSDK, PafiSDKConfig, PafiSDKError, PafiSdkError, type PafiServiceUrls, type PafiWebModalAdapter, type PafiWebModalHandle, type PartialUserOperation, type PaymasterConfig, type PaymasterFields, PointTokenDomainConfig, PoolKey, type QuoteOperatorFeePtConfig, type QuoteOperatorFeeUsdtConfig, ReceiverConsent, SIMPLE_7702_IMPL_BASE_MAINNET, SUPPORTED_CHAINS, type SdkErrorHttpStatus, type SendWithPaymasterFallbackParams, type SignAuthorizationFn, type SignatureStruct, SignatureVerification, type SignedAuthorization, SigningError, SimulationError, type SmartAccountSender, type SponsorshipScenario, type SubmissionPath, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, type UserOpReceipt, type UserOpTypedData, type UserOperation, V4_QUOTER_ADDRESSES, ValidationError, type VaultDepositFE, ZERO_VALUE, _resetPaymasterConfigForTests, assembleUserOperation, buildDelegationUserOp, buildEip7702Authorization, buildPartialUserOperation, buildPerpDepositViaRelay, buildPerpDepositWithGasDeduction, buildUserOpTypedData, burnRequestTypes, checkDelegation, checkEthAndBranch, computeAccountId, computeAuthorizationHash, computeUserOpHash, createPafiProxyTransport, decodeBatchExecuteCalls, delegateDirect, detectDelegateImpl, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, fetchPafiPools, getAaNonce, getContractAddresses, getDummySignatureFor7702, getPafiServiceUrls, getPafiWebModalAdapter, getPaymasterConfig, isDelegatedTo, isDelegatedToTarget, isPaymasterConfigured, isPaymasterError, mintRequestTypes, openPafiWebModal, openWebPopup, parseEip7702DelegatedAddress, quoteOperatorFeePt, quoteOperatorFeeUsdt, rawCallOp, receiverConsentTypes, sendWithPaymasterFallback, serializeUserOpToJsonRpc, setPafiWebModalAdapter, setPaymasterConfig, splitAuthorizationSig, webPopupAdapter };

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 import { Address, Hex, TypedDataDomain, PublicClient, WalletClient, TransactionReceipt, HttpTransport } from 'viem';
-import { P as PoolKey, C as ChainConfig, a as PafiSDKConfig, b as PointTokenDomainConfig, M as MintRequest, R as ReceiverConsent, E as EIP712Signature, S as SignatureVerification } from './types-BAkmxgVo.js';
-export { B as BestQuote, c as BurnRequest, I as Issuer, d as PathKey, Q as QuoteResult } from './types-BAkmxgVo.js';
+import { P as PoolKey, C as ChainConfig, a as PafiSDKConfig, b as PointTokenDomainConfig, M as MintRequest, R as ReceiverConsent, E as EIP712Signature, S as SignatureVerification } from './types-CCvAk-ma.js';
+export { B as BestQuote, c as BlackoutWindow, d as BurnRequest, I as Issuer, e as PathKey, Q as QuoteResult, f as RedemptionDecision, g as RedemptionDenial, h as RedemptionDenialCode, i as RedemptionPolicy, j as RedemptionPolicySource, k as RedemptionPreview } from './types-CCvAk-ma.js';
 export { pointTokenAbi as POINT_TOKEN_V2_ABI, erc20Abi, issuerRegistryAbi, mintingOracleAbi, permit2Abi, pointTokenAbi, pointTokenFactoryAbi, universalRouterAbi, v4QuoterAbi } from './abi/index.js';
-export { buildBurnRequestTypedData, buildDomain, buildMintRequestTypedData, buildReceiverConsentTypedData, signBurnRequest, signMintRequest, signReceiverConsent, verifyBurnRequest, verifyMintRequest, verifyReceiverConsent } from './eip712/index.js';
+export { Eip712DomainMismatchError, assertDomainMatchesContract, buildBurnRequestTypedData, buildDomain, buildMintRequestTypedData, buildReceiverConsentTypedData, signBurnRequest, signMintRequest, signReceiverConsent, verifyBurnRequest, verifyMintRequest, verifyReceiverConsent } from './eip712/index.js';
 export { getBurnRequestNonce, getIssuer, getMintRequestNonce, getPointTokenBalance, getPointTokenIssuer, getPointTokenIssuerAddress, getReceiverConsentNonce, getTokenName, isActiveIssuer, isMinter, issuerRegistryGetIssuerFlatAbi, verifyMintCap } from './contract/index.js';
 import { LoginMessageParams } from './auth/index.js';
-export { BuildSponsorAuthParams, BuiltSponsorAuth, SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_TYPES, SponsorAuthPayload, SponsorAuthVerifyResult, VerifyLoginResult, buildAndSignSponsorAuth, buildSponsorAuthDomain, buildSponsorAuthTypedData, computeCallDataHash, createLoginMessage, generateSponsorAuthNonce, parseLoginMessage, signSponsorAuth, verifyLoginMessage, verifySponsorAuth } from './auth/index.js';
+export { BuildSponsorAuthParams, BuiltSponsorAuth, SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET, SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_TYPES, SponsorAuthPayload, SponsorAuthVerifyResult, VerifyLoginResult, buildAndSignSponsorAuth, buildSponsorAuthDomain, buildSponsorAuthTypedData, computeCallDataHash, createLoginMessage, generateSponsorAuthNonce, getSponsorAuthDomainAnchor, parseLoginMessage, signSponsorAuth, verifyLoginMessage, verifySponsorAuth } from './auth/index.js';
 
 declare const mintRequestTypes: {
     readonly MintRequest: readonly [{
@@ -83,15 +83,13 @@ declare const ENTRY_POINT_V08: Address;
 declare const PERMIT2_ADDRESS: Address;
 
 /**
- * v0.7.1 — unified error base for the entire SDK (core + issuer +
- * trading). Subclasses declare `code` (machine-readable) and
- * `httpStatus` (recommended HTTP status for issuer's controller).
+ * Unified error base for the entire SDK (core + issuer + trading).
+ * Subclasses declare `code` (machine-readable) and `httpStatus`
+ * (recommended HTTP status for issuer's controller).
  *
  * Issuer's `createSdkErrorMapper` routes any `PafiSdkError` instance
  * through framework-specific exception factories; non-PafiSdkError
  * still becomes 500.
- *
- * See SDK_CORE_TRADING_AUDIT.md H3.
  */
 type SdkErrorHttpStatus = "not_found" | "forbidden" | "unprocessable" | "service_unavailable";
 declare abstract class PafiSdkError extends Error {
@@ -106,11 +104,11 @@ declare abstract class PafiSdkError extends Error {
     constructor(message: string);
 }
 /**
- * @deprecated v0.7.1 — use `PafiSdkError` (capital S, lowercase dk).
+ * @deprecated Use `PafiSdkError` (capital S, lowercase dk).
  * The two classes existed in parallel ("PafiSDKError" in core,
  * "PafiSdkError" in issuer) due to historical drift; consolidating
  * here. Kept as alias for back-compat through v0.7.x; will be removed
- * in v0.8. See SDK_CORE_TRADING_AUDIT.md H3.
+ * in v0.8.
  */
 declare class PafiSDKError extends Error {
     constructor(message: string);
@@ -133,11 +131,8 @@ declare class ApiError extends PafiSDKError {
 /**
  * Thrown by `quoteOperatorFee*` when an upstream price source
  * (Chainlink ETH/USD, PAFI subgraph) is unavailable or stale and the
- * caller did not opt in to the hardcoded fallback prices.
- *
- * v0.7.1 — previously `quoteOperatorFeePt` silently fell back to
- * ETH=$3000 / PT=$0.10 with `console.warn`. Now opt-in via
- * `allowStaleFallback: true`. See SDK_CORE_TRADING_AUDIT.md C2.
+ * caller did not opt in to the hardcoded fallback prices via
+ * `allowStaleFallback: true`.
  *
  * Extends the unified `PafiSdkError` so issuer's `createSdkErrorMapper`
  * routes it to 503 instead of leaking as a 500.
@@ -156,8 +151,6 @@ declare class OracleStaleError extends PafiSdkError {
  *
  * Uses an instance `details` field so subclasses can override the
  * declaration; matches the issuer-side shape that pre-existed here.
- *
- * v0.7.4 — added per SDK_CORE_TRADING_AUDIT.md H2/H13.
  */
 declare class ValidationError extends PafiSdkError {
     readonly httpStatus: "unprocessable";
@@ -1392,10 +1385,6 @@ interface SmartAccountSender {
  *
  * Use this to decide whether retrying without a paymaster makes sense.
  * Contract reverts (AA23, AA24, AA25) and bundler errors are NOT matched.
- *
- * v0.7.1 — replaced naive substring matching that false-positived on
- * arbitrary text containing "503"/"403"/"429" (e.g. address/transit ID).
- * See SDK_CORE_TRADING_AUDIT.md C3.
  */
 declare function isPaymasterError(err: unknown): boolean;
 interface SendWithPaymasterFallbackParams {
@@ -1459,8 +1448,7 @@ declare function sendWithPaymasterFallback(params: SendWithPaymasterFallbackPara
  *   perp-deposit — `buildPerpDepositViaRelay` 800k (LayerZero msg)
  *   delegate     — minimal no-op self-call, 200k margin
  *
- * Pass an explicit `gasUnits` to override. v0.7.4 — added per
- * SDK_CORE_TRADING_AUDIT.md H12.
+ * Pass an explicit `gasUnits` to override.
  */
 type FeeScenario = "mint" | "burn" | "swap" | "perp-deposit" | "delegate";
 interface QuoteOperatorFeePtConfig {
@@ -1497,17 +1485,38 @@ interface QuoteOperatorFeePtConfig {
      * `true` AND configure `fallbackEthPriceUsd` / `fallbackPtPriceUsdt`
      * to absorb oracle outages instead of surfacing them.
      *
-     * v0.7.1 — previously fallback was always-on with hardcoded
-     * defaults (ETH=$3000, PT=$0.10), causing under-priced fees during
-     * incidents. See SDK_CORE_TRADING_AUDIT.md C2.
+     * When fallback fires, callers SHOULD observe via `onFallback` so
+     * production can flag the under-priced quote (e.g. show "fee priced
+     * against stale oracle" banner in FE; alert on-call).
      */
     allowStaleFallback?: boolean;
     /** Fallback ETH price (USD) when Chainlink is unreachable. Only used when `allowStaleFallback: true`. Default 3000. */
     fallbackEthPriceUsd?: number;
     /** Fallback PT price (USDT per 1 PT) when subgraph is unreachable. Only used when `allowStaleFallback: true`. Default 0.1. */
     fallbackPtPriceUsdt?: number;
+    /**
+     * Observability hook fired when the quoter falls back to stale
+     * prices. Callers SHOULD wire this to their alert pipeline (Sentry,
+     * Datadog, PagerDuty) so under-priced quotes don't go unnoticed.
+     * When omitted, falls back to `console.warn` (kept for back-compat
+     * but invisible in most prod log shippers).
+     */
+    onFallback?: (info: FallbackInfo) => void;
     fetchImpl?: typeof fetch;
 }
+/**
+ * Detail surfaced via `onFallback` when the quoter substitutes a
+ * stale-fallback price. Callers can format this into a UI banner or
+ * log line.
+ */
+interface FallbackInfo {
+    /** Which oracle failed. */
+    source: "chainlink" | "subgraph";
+    /** Underlying reason from the oracle call (e.g. RPC error message). */
+    reason: string;
+    /** The fallback value that was used (in source-native units). */
+    fallbackValue: number;
+}
 /**
  * Subset of `QuoteOperatorFeePtConfig` that doesn't need the V4 pool
  * step — used by `quoteOperatorFeeUsdt` (FE cashout-preview / `/gas-fee`
@@ -1525,10 +1534,12 @@ interface QuoteOperatorFeeUsdtConfig {
     usdtDecimals?: number;
     /**
      * Opt-in fallback price when Chainlink is unavailable. Default
-     * `false` — throw `OracleStaleError`. v0.7.1 — see C2.
+     * `false` — throw `OracleStaleError`.
      */
     allowStaleFallback?: boolean;
     fallbackEthPriceUsd?: number;
+    /** See QuoteOperatorFeePtConfig.onFallback. */
+    onFallback?: (info: FallbackInfo) => void;
 }
 /**
  * Operator fee quoted in USDT raw units (default 6 decimals). Returns
@@ -1634,6 +1645,42 @@ declare const POINT_TOKEN_IMPL_ADDRESSES: Record<number, Address>;
  */
 declare function getContractAddresses(chainId: number): ContractAddresses;
 
+/**
+ * PAFI HTTP service URLs by chainId. Mirrors the `getContractAddresses`
+ * pattern: SDK ships with the URL for each supported chain so issuers
+ * don't pass URLs as env vars / constructor args.
+ *
+ * When PAFI changes URLs (rebrand, re-host, environment migration),
+ * bump the SDK version and re-publish. Issuers pin a version, get the
+ * URLs that match.
+ *
+ * No env override is provided on purpose — different environments use
+ * different SDK versions (e.g. an `@pafi-dev/issuer-dev` channel for
+ * staging). This keeps issuer integration to chainId + creds only.
+ */
+interface PafiServiceUrls {
+    /**
+     * sponsor-relayer base URL (paymaster proxy). PafiBackendClient
+     * appends `/paymaster/sponsor`, `/bundler/receipt`, etc.
+     */
+    sponsorRelayer: string;
+    /**
+     * issuer-api base URL. SettlementClient appends
+     * `/issuers/:issuerId/redemption-policy`.
+     */
+    issuerApi: string;
+}
+/**
+ * Per-chain URL map. URLs follow the pattern
+ * `https://<host>/api/<service>` so Kong gateway can route by path.
+ *
+ * NOTE: placeholder URLs — Phi will swap in real prod/staging hosts
+ * once the deploy targets are finalized. SDK version bump captures
+ * the change.
+ */
+declare const PAFI_SERVICE_URLS: Record<number, PafiServiceUrls>;
+declare function getPafiServiceUrls(chainId: number): PafiServiceUrls;
+
 /**
  * Public contract surface for `@pafi-dev/core/contracts`.
  *
@@ -1971,4 +2018,4 @@ declare class PafiSDK {
     signLoginMessage(message: string): Promise<Hex>;
 }
 
-export { ApiError, BATCH_EXECUTOR_7702_IMPL, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, type BuildDelegationUserOpParams, type BuildPartialUserOpParams, type BuildPerpDepositViaRelayParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, DUMMY_SIGNATURE_V07, type DelegateDirectParams, type DelegateDirectResult, type DelegateImpl, EIP712Signature, ENTRY_POINT_V07, ENTRY_POINT_V08, type Eip7702AuthorizationJsonRpc, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_RELAY_ABI, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, type Operation, OracleStaleError, type OrderlyRelayDepositRequest, PAFI_SUBGRAPH_URL, PERMIT2_ADDRESS, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, type PackedUserOperationMessage, type PafiProxyTransportParams, PafiSDK, PafiSDKConfig, PafiSDKError, PafiSdkError, type PafiWebModalAdapter, type PafiWebModalHandle, type PartialUserOperation, type PaymasterConfig, type PaymasterFields, PointTokenDomainConfig, PoolKey, type QuoteOperatorFeePtConfig, type QuoteOperatorFeeUsdtConfig, ReceiverConsent, SIMPLE_7702_IMPL_BASE_MAINNET, SUPPORTED_CHAINS, type SdkErrorHttpStatus, type SendWithPaymasterFallbackParams, type SignAuthorizationFn, type SignatureStruct, SignatureVerification, type SignedAuthorization, SigningError, SimulationError, type SmartAccountSender, type SponsorshipScenario, type SubmissionPath, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, type UserOpReceipt, type UserOpTypedData, type UserOperation, V4_QUOTER_ADDRESSES, ValidationError, type VaultDepositFE, ZERO_VALUE, _resetPaymasterConfigForTests, assembleUserOperation, buildDelegationUserOp, buildEip7702Authorization, buildPartialUserOperation, buildPerpDepositViaRelay, buildPerpDepositWithGasDeduction, buildUserOpTypedData, burnRequestTypes, checkDelegation, checkEthAndBranch, computeAccountId, computeAuthorizationHash, computeUserOpHash, createPafiProxyTransport, decodeBatchExecuteCalls, delegateDirect, detectDelegateImpl, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, fetchPafiPools, getAaNonce, getContractAddresses, getDummySignatureFor7702, getPafiWebModalAdapter, getPaymasterConfig, isDelegatedTo, isDelegatedToTarget, isPaymasterConfigured, isPaymasterError, mintRequestTypes, openPafiWebModal, openWebPopup, parseEip7702DelegatedAddress, quoteOperatorFeePt, quoteOperatorFeeUsdt, rawCallOp, receiverConsentTypes, sendWithPaymasterFallback, serializeUserOpToJsonRpc, setPafiWebModalAdapter, setPaymasterConfig, splitAuthorizationSig, webPopupAdapter };
+export { ApiError, BATCH_EXECUTOR_7702_IMPL, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, type BuildDelegationUserOpParams, type BuildPartialUserOpParams, type BuildPerpDepositViaRelayParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, DUMMY_SIGNATURE_V07, type DelegateDirectParams, type DelegateDirectResult, type DelegateImpl, EIP712Signature, ENTRY_POINT_V07, ENTRY_POINT_V08, type Eip7702AuthorizationJsonRpc, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_RELAY_ABI, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, type Operation, OracleStaleError, type OrderlyRelayDepositRequest, PAFI_SERVICE_URLS, PAFI_SUBGRAPH_URL, PERMIT2_ADDRESS, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, type PackedUserOperationMessage, type PafiProxyTransportParams, PafiSDK, PafiSDKConfig, PafiSDKError, PafiSdkError, type PafiServiceUrls, type PafiWebModalAdapter, type PafiWebModalHandle, type PartialUserOperation, type PaymasterConfig, type PaymasterFields, PointTokenDomainConfig, PoolKey, type QuoteOperatorFeePtConfig, type QuoteOperatorFeeUsdtConfig, ReceiverConsent, SIMPLE_7702_IMPL_BASE_MAINNET, SUPPORTED_CHAINS, type SdkErrorHttpStatus, type SendWithPaymasterFallbackParams, type SignAuthorizationFn, type SignatureStruct, SignatureVerification, type SignedAuthorization, SigningError, SimulationError, type SmartAccountSender, type SponsorshipScenario, type SubmissionPath, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, type UserOpReceipt, type UserOpTypedData, type UserOperation, V4_QUOTER_ADDRESSES, ValidationError, type VaultDepositFE, ZERO_VALUE, _resetPaymasterConfigForTests, assembleUserOperation, buildDelegationUserOp, buildEip7702Authorization, buildPartialUserOperation, buildPerpDepositViaRelay, buildPerpDepositWithGasDeduction, buildUserOpTypedData, burnRequestTypes, checkDelegation, checkEthAndBranch, computeAccountId, computeAuthorizationHash, computeUserOpHash, createPafiProxyTransport, decodeBatchExecuteCalls, delegateDirect, detectDelegateImpl, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, fetchPafiPools, getAaNonce, getContractAddresses, getDummySignatureFor7702, getPafiServiceUrls, getPafiWebModalAdapter, getPaymasterConfig, isDelegatedTo, isDelegatedToTarget, isPaymasterConfigured, isPaymasterError, mintRequestTypes, openPafiWebModal, openWebPopup, parseEip7702DelegatedAddress, quoteOperatorFeePt, quoteOperatorFeeUsdt, rawCallOp, receiverConsentTypes, sendWithPaymasterFallback, serializeUserOpToJsonRpc, setPafiWebModalAdapter, setPaymasterConfig, splitAuthorizationSig, webPopupAdapter };

package/dist/index.js

@@ -6,6 +6,7 @@ import {
   v4QuoterAbi
 } from "./chunk-6CXTFOIH.js";
 import {
+  SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
   SPONSOR_AUTH_TYPES,
   buildAndSignSponsorAuth,
@@ -14,11 +15,12 @@ import {
   computeCallDataHash,
   createLoginMessage,
   generateSponsorAuthNonce,
+  getSponsorAuthDomainAnchor,
   parseLoginMessage,
   signSponsorAuth,
   verifyLoginMessage,
   verifySponsorAuth
-} from "./chunk-6UX2IFA2.js";
+} from "./chunk-4EGXLYMM.js";
 import {
   getBurnRequestNonce,
   getIssuer,
@@ -32,22 +34,23 @@ import {
   isMinter,
   issuerRegistryGetIssuerFlatAbi,
   verifyMintCap
-} from "./chunk-YDLMVWDH.js";
+} from "./chunk-AEYEFV5G.js";
 import {
   issuerRegistryAbi,
-  mintingOracleAbi,
-  pointTokenAbi
-} from "./chunk-5JZOJIBT.js";
+  mintingOracleAbi
+} from "./chunk-B2NDSIAI.js";
 import {
   COMMON_POOLS,
   COMMON_TOKENS,
   ENTRY_POINT_V07,
   ENTRY_POINT_V08,
+  Eip712DomainMismatchError,
   PERMIT2_ADDRESS,
   POINT_TOKEN_POOLS,
   SUPPORTED_CHAINS,
   UNIVERSAL_ROUTER_ADDRESSES,
   V4_QUOTER_ADDRESSES,
+  assertDomainMatchesContract,
   buildBurnRequestTypedData,
   buildDomain,
   buildMintRequestTypedData,
@@ -61,7 +64,10 @@ import {
   verifyBurnRequest,
   verifyMintRequest,
   verifyReceiverConsent
-} from "./chunk-WJSIB5GF.js";
+} from "./chunk-QL5COJQI.js";
+import {
+  pointTokenAbi
+} from "./chunk-SZMSKZHY.js";
 import "./chunk-DGUM43GV.js";
 
 // src/index.ts
@@ -582,7 +588,16 @@ function getDummySignatureFor7702(impl) {
 
 // src/paymaster/config.ts
 var _config = null;
+var _deprecationWarned = false;
+function warnDeprecated(fn) {
+  if (_deprecationWarned) return;
+  _deprecationWarned = true;
+  console.warn(
+    `[PAFI] DEPRECATION (v0.7.1+): \`${fn}\` from @pafi-dev/core/paymaster is deprecated and will be removed in v0.8. Use \`PafiBackendClient\` from @pafi-dev/issuer/pafi-backend instead.`
+  );
+}
 function setPaymasterConfig(config) {
+  warnDeprecated("setPaymasterConfig");
   if (!config.pafiBackendUrl) {
     throw new Error("setPaymasterConfig: pafiBackendUrl is required");
   }
@@ -598,6 +613,7 @@ function setPaymasterConfig(config) {
   _config = { ...config };
 }
 function getPaymasterConfig() {
+  warnDeprecated("getPaymasterConfig");
   if (!_config) {
     throw new Error(
       "PaymasterConfig not initialized \u2014 call setPaymasterConfig() at application boot before invoking any batch builder"
@@ -1058,7 +1074,8 @@ async function quoteOperatorFeeUsdt(config) {
   const ethPrice8dec = await getEthPrice8dec(
     provider,
     chainlinkFeedAddress,
-    allowStaleFallback ? fallbackEthPriceUsd : null
+    allowStaleFallback ? fallbackEthPriceUsd : null,
+    config.onFallback
   );
   const denomExp = 18 + 8 - usdtDecimals;
   return withPremium * ethPrice8dec / 10n ** BigInt(denomExp);
@@ -1086,18 +1103,20 @@ async function quoteOperatorFeePt(config) {
     getEthPrice8dec(
       provider,
       chainlinkFeedAddress,
-      allowStaleFallback ? fallbackEthPriceUsd : null
+      allowStaleFallback ? fallbackEthPriceUsd : null,
+      config.onFallback
     ),
     getPtPerUsdt18dec(
       fetchImpl,
       subgraphUrl,
       pointTokenAddress,
-      allowStaleFallback ? fallbackPtPriceUsdt : null
+      allowStaleFallback ? fallbackPtPriceUsdt : null,
+      config.onFallback
     )
   ]);
   return withPremium * ethPrice8dec * ptPerUsdt18dec / 10n ** 26n;
 }
-async function getEthPrice8dec(provider, feed, fallback) {
+async function getEthPrice8dec(provider, feed, fallback, onFallback) {
   try {
     const result = await provider.readContract({
       address: feed,
@@ -1117,14 +1136,18 @@ async function getEthPrice8dec(provider, feed, fallback) {
     if (fallback === null) {
       throw new OracleStaleError("chainlink", reason);
     }
-    console.warn(
-      "[quoteOperatorFee] Chainlink unavailable, using opt-in fallback:",
-      reason
-    );
+    if (onFallback) {
+      onFallback({ source: "chainlink", reason, fallbackValue: fallback });
+    } else {
+      console.warn(
+        "[quoteOperatorFee] Chainlink unavailable, using opt-in fallback:",
+        reason
+      );
+    }
     return BigInt(Math.round(fallback * 1e8));
   }
 }
-async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fallbackPtPriceUsdt) {
+async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fallbackPtPriceUsdt, onFallback) {
   try {
     const response = await fetchImpl(subgraphUrl, {
       method: "POST",
@@ -1156,10 +1179,18 @@ async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fall
     if (fallbackPtPriceUsdt === null) {
       throw new OracleStaleError("subgraph", reason);
     }
-    console.warn(
-      "[quoteOperatorFeePt] subgraph unavailable, using opt-in fallback:",
-      reason
-    );
+    if (onFallback) {
+      onFallback({
+        source: "subgraph",
+        reason,
+        fallbackValue: fallbackPtPriceUsdt
+      });
+    } else {
+      console.warn(
+        "[quoteOperatorFeePt] subgraph unavailable, using opt-in fallback:",
+        reason
+      );
+    }
     const ptPerUsdtHuman = 1 / fallbackPtPriceUsdt;
     return parseBigDecimalTo18(ptPerUsdtHuman.toFixed(18));
   }
@@ -1175,6 +1206,29 @@ function parseBigDecimalTo18(s) {
 var BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = getContractAddresses(8453).batchExecutor;
 var BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = getContractAddresses(84532).batchExecutor;
 
+// src/contracts/real/pafi-services.ts
+var PAFI_SERVICE_URLS = {
+  // Base mainnet
+  8453: {
+    sponsorRelayer: "https://api-dev.pacificfinance.org/api/sponsor",
+    issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
+  },
+  // Base sepolia
+  84532: {
+    sponsorRelayer: "https://api-dev.pacificfinance.org/api/sponsor",
+    issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
+  }
+};
+function getPafiServiceUrls(chainId) {
+  const urls = PAFI_SERVICE_URLS[chainId];
+  if (!urls) {
+    throw new Error(
+      `getPafiServiceUrls: no PAFI service URLs for chainId ${chainId}. Supported: ${Object.keys(PAFI_SERVICE_URLS).join(", ")}`
+    );
+  }
+  return urls;
+}
+
 // src/web-handoff/webPopup.ts
 var DEFAULT_WIDTH = 900;
 var DEFAULT_HEIGHT = 700;
@@ -1231,10 +1285,15 @@ function openWebPopup(url, options = {}) {
   }, 500);
   if (options.onMessage) {
     const allowed = options.allowedOrigins ?? [];
+    if (allowed.length === 0) {
+      throw new Error(
+        "openPafiWebModal: `allowedOrigins` is empty/missing while `onMessage` is supplied. The popup-message listener would silently reject every message \u2014 caller must explicitly whitelist PAFI Web's host (e.g. `['https://app.pacificfinance.org']`) before any payload reaches the callback. To accept any origin (insecure), pass an explicit list containing '*' or omit `onMessage` entirely."
+      );
+    }
     const onMessage = options.onMessage;
     messageListener = (event) => {
       if (event.source !== popup) return;
-      if (!allowed.includes(event.origin)) return;
+      if (!allowed.includes("*") && !allowed.includes(event.origin)) return;
       onMessage(event.data, event.origin);
     };
     window.addEventListener("message", messageListener);
@@ -1467,11 +1526,13 @@ export {
   DUMMY_SIGNATURE_V07,
   ENTRY_POINT_V07,
   ENTRY_POINT_V08,
+  Eip712DomainMismatchError,
   ORDERLY_RELAY_ABI,
   ORDERLY_VAULT_ABI,
   ORDERLY_VAULT_ADDRESSES,
   ORDERLY_VAULT_BASE_MAINNET,
   OracleStaleError,
+  PAFI_SERVICE_URLS,
   PAFI_SUBGRAPH_URL,
   PERMIT2_ADDRESS,
   POINT_TOKEN_FACTORY_ADDRESSES,
@@ -1482,6 +1543,7 @@ export {
   PafiSDKError,
   PafiSdkError,
   SIMPLE_7702_IMPL_BASE_MAINNET,
+  SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
   SPONSOR_AUTH_TYPES,
   SUPPORTED_CHAINS,
@@ -1494,6 +1556,7 @@ export {
   ZERO_VALUE,
   _resetPaymasterConfigForTests,
   assembleUserOperation,
+  assertDomainMatchesContract,
   buildAndSignSponsorAuth,
   buildBurnRequestTypedData,
   buildDelegationUserOp,
@@ -1532,12 +1595,14 @@ export {
   getDummySignatureFor7702,
   getIssuer2 as getIssuer,
   getMintRequestNonce,
+  getPafiServiceUrls,
   getPafiWebModalAdapter,
   getPaymasterConfig,
   getPointTokenBalance,
   getPointTokenIssuer,
   getIssuer as getPointTokenIssuerAddress,
   getReceiverConsentNonce,
+  getSponsorAuthDomainAnchor,
   getTokenName,
   isActiveIssuer,
   isDelegatedTo,