@pafi-dev/core 0.7.7 → 0.8.0

package/dist/index.js

@@ -1,11 +1,13 @@
 import {
   erc20Abi,
+  mintFeeWrapperAbi,
   permit2Abi,
   pointTokenFactoryAbi,
   universalRouterAbi,
   v4QuoterAbi
-} from "./chunk-6CXTFOIH.js";
+} from "./chunk-ABNM6LMP.js";
 import {
+  SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
   SPONSOR_AUTH_TYPES,
   buildAndSignSponsorAuth,
@@ -14,11 +16,12 @@ import {
   computeCallDataHash,
   createLoginMessage,
   generateSponsorAuthNonce,
+  getSponsorAuthDomainAnchor,
   parseLoginMessage,
   signSponsorAuth,
   verifyLoginMessage,
   verifySponsorAuth
-} from "./chunk-6UX2IFA2.js";
+} from "./chunk-4EGXLYMM.js";
 import {
   getBurnRequestNonce,
   getIssuer,
@@ -32,22 +35,23 @@ import {
   isMinter,
   issuerRegistryGetIssuerFlatAbi,
   verifyMintCap
-} from "./chunk-YDLMVWDH.js";
+} from "./chunk-Y4CFC4OC.js";
 import {
   issuerRegistryAbi,
-  mintingOracleAbi,
-  pointTokenAbi
-} from "./chunk-5JZOJIBT.js";
+  mintingOracleAbi
+} from "./chunk-B2NDSIAI.js";
 import {
   COMMON_POOLS,
   COMMON_TOKENS,
   ENTRY_POINT_V07,
   ENTRY_POINT_V08,
+  Eip712DomainMismatchError,
   PERMIT2_ADDRESS,
   POINT_TOKEN_POOLS,
   SUPPORTED_CHAINS,
   UNIVERSAL_ROUTER_ADDRESSES,
   V4_QUOTER_ADDRESSES,
+  assertDomainMatchesContract,
   buildBurnRequestTypedData,
   buildDomain,
   buildMintRequestTypedData,
@@ -61,13 +65,32 @@ import {
   verifyBurnRequest,
   verifyMintRequest,
   verifyReceiverConsent
-} from "./chunk-WJSIB5GF.js";
+} from "./chunk-BB5YW57R.js";
+import {
+  pointTokenAbi
+} from "./chunk-CUVUSVWR.js";
 import "./chunk-DGUM43GV.js";
 
 // src/index.ts
 import { createPublicClient, http as http2 } from "viem";
 
 // src/errors.ts
+var SDK_ERROR_HTTP_STATUS_CODE = {
+  not_found: 404,
+  forbidden: 403,
+  unprocessable: 422,
+  service_unavailable: 503
+};
+function defaultErrorTypeForStatus(status) {
+  if (status === 400) return "validation_error";
+  if (status === 401) return "authentication_error";
+  if (status === 403) return "authorization_error";
+  if (status === 404) return "not_found_error";
+  if (status === 422) return "business_logic_error";
+  if (status === 429) return "rate_limit_error";
+  if (status === 503) return "service_unavailable_error";
+  return "server_error";
+}
 var PafiSdkError = class extends Error {
   /**
    * `true` when the FE should consider a retry safe — typically because
@@ -75,6 +98,24 @@ var PafiSdkError = class extends Error {
    */
   safeToRetry = false;
   details;
+  /**
+   * Optional Stripe-style taxonomy override. Defaults to the type
+   * implied by `httpStatus` (forbidden→authorization_error,
+   * unprocessable→business_logic_error, etc).
+   */
+  type;
+  /**
+   * Optional name of the request field that triggered the error (e.g.
+   * `"amount"`, `"chainId"`). Surfaced on validation failures so the
+   * client can highlight the offending field.
+   */
+  param;
+  /**
+   * Optional structured context (e.g. `{ available, requested }` for a
+   * cap denial). Distinct from `details` — `metadata` is meant for
+   * UI consumption; `details` carries raw debug info.
+   */
+  metadata;
   constructor(message) {
     super(message);
     this.name = new.target.name;
@@ -129,12 +170,18 @@ var OracleStaleError = class extends PafiSdkError {
 };
 var ValidationError = class extends PafiSdkError {
   httpStatus = "unprocessable";
+  type = "validation_error";
   code;
-  details;
-  constructor(code, message, details) {
+  constructor(code, message, details, options) {
     super(message);
     this.code = code;
     this.details = details;
+    if (options?.param) {
+      this.param = options.param;
+    }
+    if (options?.metadata) {
+      this.metadata = options.metadata;
+    }
   }
 };
 
@@ -582,7 +629,16 @@ function getDummySignatureFor7702(impl) {
 
 // src/paymaster/config.ts
 var _config = null;
+var _deprecationWarned = false;
+function warnDeprecated(fn) {
+  if (_deprecationWarned) return;
+  _deprecationWarned = true;
+  console.warn(
+    `[PAFI] DEPRECATION (v0.7.1+): \`${fn}\` from @pafi-dev/core/paymaster is deprecated and will be removed in v0.8. Use \`PafiBackendClient\` from @pafi-dev/issuer/pafi-backend instead.`
+  );
+}
 function setPaymasterConfig(config) {
+  warnDeprecated("setPaymasterConfig");
   if (!config.pafiBackendUrl) {
     throw new Error("setPaymasterConfig: pafiBackendUrl is required");
   }
@@ -598,6 +654,7 @@ function setPaymasterConfig(config) {
   _config = { ...config };
 }
 function getPaymasterConfig() {
+  warnDeprecated("getPaymasterConfig");
   if (!_config) {
     throw new Error(
       "PaymasterConfig not initialized \u2014 call setPaymasterConfig() at application boot before invoking any batch builder"
@@ -1058,7 +1115,8 @@ async function quoteOperatorFeeUsdt(config) {
   const ethPrice8dec = await getEthPrice8dec(
     provider,
     chainlinkFeedAddress,
-    allowStaleFallback ? fallbackEthPriceUsd : null
+    allowStaleFallback ? fallbackEthPriceUsd : null,
+    config.onFallback
   );
   const denomExp = 18 + 8 - usdtDecimals;
   return withPremium * ethPrice8dec / 10n ** BigInt(denomExp);
@@ -1086,18 +1144,20 @@ async function quoteOperatorFeePt(config) {
     getEthPrice8dec(
       provider,
       chainlinkFeedAddress,
-      allowStaleFallback ? fallbackEthPriceUsd : null
+      allowStaleFallback ? fallbackEthPriceUsd : null,
+      config.onFallback
     ),
     getPtPerUsdt18dec(
       fetchImpl,
       subgraphUrl,
       pointTokenAddress,
-      allowStaleFallback ? fallbackPtPriceUsdt : null
+      allowStaleFallback ? fallbackPtPriceUsdt : null,
+      config.onFallback
     )
   ]);
   return withPremium * ethPrice8dec * ptPerUsdt18dec / 10n ** 26n;
 }
-async function getEthPrice8dec(provider, feed, fallback) {
+async function getEthPrice8dec(provider, feed, fallback, onFallback) {
   try {
     const result = await provider.readContract({
       address: feed,
@@ -1117,14 +1177,18 @@ async function getEthPrice8dec(provider, feed, fallback) {
     if (fallback === null) {
       throw new OracleStaleError("chainlink", reason);
     }
-    console.warn(
-      "[quoteOperatorFee] Chainlink unavailable, using opt-in fallback:",
-      reason
-    );
+    if (onFallback) {
+      onFallback({ source: "chainlink", reason, fallbackValue: fallback });
+    } else {
+      console.warn(
+        "[quoteOperatorFee] Chainlink unavailable, using opt-in fallback:",
+        reason
+      );
+    }
     return BigInt(Math.round(fallback * 1e8));
   }
 }
-async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fallbackPtPriceUsdt) {
+async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fallbackPtPriceUsdt, onFallback) {
   try {
     const response = await fetchImpl(subgraphUrl, {
       method: "POST",
@@ -1156,10 +1220,18 @@ async function getPtPerUsdt18dec(fetchImpl, subgraphUrl, pointTokenAddress, fall
     if (fallbackPtPriceUsdt === null) {
       throw new OracleStaleError("subgraph", reason);
     }
-    console.warn(
-      "[quoteOperatorFeePt] subgraph unavailable, using opt-in fallback:",
-      reason
-    );
+    if (onFallback) {
+      onFallback({
+        source: "subgraph",
+        reason,
+        fallbackValue: fallbackPtPriceUsdt
+      });
+    } else {
+      console.warn(
+        "[quoteOperatorFeePt] subgraph unavailable, using opt-in fallback:",
+        reason
+      );
+    }
     const ptPerUsdtHuman = 1 / fallbackPtPriceUsdt;
     return parseBigDecimalTo18(ptPerUsdtHuman.toFixed(18));
   }
@@ -1175,6 +1247,29 @@ function parseBigDecimalTo18(s) {
 var BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = getContractAddresses(8453).batchExecutor;
 var BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = getContractAddresses(84532).batchExecutor;
 
+// src/contracts/real/pafi-services.ts
+var PAFI_SERVICE_URLS = {
+  // Base mainnet
+  8453: {
+    sponsorRelayer: "https://api-dev.pacificfinance.org/api/sponsor",
+    issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
+  },
+  // Base sepolia
+  84532: {
+    sponsorRelayer: "https://api-dev.pacificfinance.org/api/sponsor",
+    issuerApi: "https://api-dev.pacificfinance.org/api/issuer"
+  }
+};
+function getPafiServiceUrls(chainId) {
+  const urls = PAFI_SERVICE_URLS[chainId];
+  if (!urls) {
+    throw new Error(
+      `getPafiServiceUrls: no PAFI service URLs for chainId ${chainId}. Supported: ${Object.keys(PAFI_SERVICE_URLS).join(", ")}`
+    );
+  }
+  return urls;
+}
+
 // src/web-handoff/webPopup.ts
 var DEFAULT_WIDTH = 900;
 var DEFAULT_HEIGHT = 700;
@@ -1231,10 +1326,15 @@ function openWebPopup(url, options = {}) {
   }, 500);
   if (options.onMessage) {
     const allowed = options.allowedOrigins ?? [];
+    if (allowed.length === 0) {
+      throw new Error(
+        "openPafiWebModal: `allowedOrigins` is empty/missing while `onMessage` is supplied. The popup-message listener would silently reject every message \u2014 caller must explicitly whitelist PAFI Web's host (e.g. `['https://app.pacificfinance.org']`) before any payload reaches the callback. To accept any origin (insecure), pass an explicit list containing '*' or omit `onMessage` entirely."
+      );
+    }
     const onMessage = options.onMessage;
     messageListener = (event) => {
       if (event.source !== popup) return;
-      if (!allowed.includes(event.origin)) return;
+      if (!allowed.includes("*") && !allowed.includes(event.origin)) return;
       onMessage(event.data, event.origin);
     };
     window.addEventListener("message", messageListener);
@@ -1467,11 +1567,13 @@ export {
   DUMMY_SIGNATURE_V07,
   ENTRY_POINT_V07,
   ENTRY_POINT_V08,
+  Eip712DomainMismatchError,
   ORDERLY_RELAY_ABI,
   ORDERLY_VAULT_ABI,
   ORDERLY_VAULT_ADDRESSES,
   ORDERLY_VAULT_BASE_MAINNET,
   OracleStaleError,
+  PAFI_SERVICE_URLS,
   PAFI_SUBGRAPH_URL,
   PERMIT2_ADDRESS,
   POINT_TOKEN_FACTORY_ADDRESSES,
@@ -1481,7 +1583,9 @@ export {
   PafiSDK,
   PafiSDKError,
   PafiSdkError,
+  SDK_ERROR_HTTP_STATUS_CODE,
   SIMPLE_7702_IMPL_BASE_MAINNET,
+  SPONSOR_AUTH_DOMAIN_ANCHOR_BASE_MAINNET,
   SPONSOR_AUTH_DOMAIN_NAME,
   SPONSOR_AUTH_TYPES,
   SUPPORTED_CHAINS,
@@ -1494,6 +1598,7 @@ export {
   ZERO_VALUE,
   _resetPaymasterConfigForTests,
   assembleUserOperation,
+  assertDomainMatchesContract,
   buildAndSignSponsorAuth,
   buildBurnRequestTypedData,
   buildDelegationUserOp,
@@ -1517,6 +1622,7 @@ export {
   createLoginMessage,
   createPafiProxyTransport,
   decodeBatchExecuteCalls,
+  defaultErrorTypeForStatus,
   delegateDirect,
   detectDelegateImpl,
   encodeBatchExecute,
@@ -1532,12 +1638,14 @@ export {
   getDummySignatureFor7702,
   getIssuer2 as getIssuer,
   getMintRequestNonce,
+  getPafiServiceUrls,
   getPafiWebModalAdapter,
   getPaymasterConfig,
   getPointTokenBalance,
   getPointTokenIssuer,
   getIssuer as getPointTokenIssuerAddress,
   getReceiverConsentNonce,
+  getSponsorAuthDomainAnchor,
   getTokenName,
   isActiveIssuer,
   isDelegatedTo,
@@ -1547,6 +1655,7 @@ export {
   isPaymasterError,
   issuerRegistryAbi,
   issuerRegistryGetIssuerFlatAbi,
+  mintFeeWrapperAbi,
   mintRequestTypes,
   mintingOracleAbi,
   openPafiWebModal,