@pafi-dev/core 0.9.6 → 0.10.0

package/README.md

@@ -4,21 +4,43 @@
 [![License: Apache-2.0](https://img.shields.io/badge/License-Apache--2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
 Pure primitives for the PAFI point-token system. EIP-712 signing,
-contract ABIs + addresses, ERC-4337 UserOp building, EIP-7702
-delegation, sponsor-auth signing, perp deposit calldata, fee quoting.
+contract ABIs + addresses (v1.6), ERC-4337 UserOp building, EIP-7702
+delegation, sponsor-auth signing, perp deposit calldata, fee quoting,
+MintFeeWrapper helpers.
 
 **Browser + Node-safe.** Zero HTTP client. Peer-dep: `viem ^2`.
 
 ---
 
-## Requirements
+## What's new in 0.10.0 (breaking)
 
-- Node.js >= 18 (or modern browser with native `fetch`)
-- TypeScript >= 5.0
-- `viem` ^2.0.0 (peer)
+| Change | Detail |
+|---|---|
+| `ReceiverConsent` removed | The `ReceiverConsent` EIP-712 type, helpers (`buildReceiverConsentTypedData`, `signReceiverConsent`, `verifyReceiverConsent`), constants (`receiverConsentTypes`), and contract reader (`getReceiverConsentNonce`) are all **deleted**. The deployed `PointToken` contract never had a 3rd "sponsored" mint path — that pattern is implemented at the relayer layer (sponsor-relayer pays gas for path-2 `MintForRequest` sig-gated mint). The previous fallback that read ERC-2612 `nonces(owner)` was semantically wrong and is gone. |
+| `PafiSDK.consent` namespace removed | The convenience class no longer exposes `consent.buildTypedData / sign / verify / getNonce`. |
+| Action required for callers | Replace any `signReceiverConsent` / `getReceiverConsentNonce` usage with the path-2 sig-gated mint flow (`MintRequest` + `getMintRequestNonce`). |
+
+### What's new in v1.6 (since 0.9.0)
+
+| Change | Detail |
+|---|---|
+| `MintFeeWrapper` (NEW) | Single global wrapper contract that skims a configurable fee on every sig-gated mint and distributes to per-PT recipients |
+| EIP-712 typehash | `MintRequest(to, amount, nonce, deadline)` → **`MintForRequest(user, receiver, amount, nonce, deadline)`** (5 fields) |
+| Issuer struct | Dropped `declaredTotalSupply` + `capBasisPoints` — caps moved to `MintingOracle.tokenCaps(pointToken)` (per-token, not per-issuer) |
+| `verifyMintCap` signature | Now takes `pointToken` as first arg |
+| New helpers | `getMintFeeBps`, `getMintFeeRecipients`, `getTokenCap` |
+| Subgraph URL | Hardcoded to `pafi-subgraph-v3` (`getPafiServiceUrls(chainId)`) |
+| `pafiHook` | DEPRECATED — V4 swap-time fee removed entirely in v1.6 |
+| `getPtPerUsdt18dec` math fix (0.9.6) | Subgraph V4 returns HUMAN-readable price; old formula `10^24/raw` was off by ~10^11 |
 
 ---
 
+## Requirements
+
+- Node.js ≥ 18 (or modern browser with native `fetch`)
+- TypeScript ≥ 5.0
+- `viem` ^2.0.0 (peer)
+
 ## Installation
 
 ```bash
@@ -27,10 +49,9 @@ pnpm add @pafi-dev/core viem
 
 ---
 
-## What's in core (and what's not)
+## Package layout (v1.6)
 
-Core ships **data + primitives** only. Higher-level orchestration lives
-in sibling packages:
+Core ships **data + primitives** only. Higher-level orchestration in siblings:
 
 | Concern | Package |
 | --- | --- |
@@ -39,75 +60,62 @@ in sibling packages:
 | Issuer DB ledger (TypeORM + Postgres) | `@pafi-dev/issuer-postgres` |
 | Trading (swap + quote, FE-callable) | `@pafi-dev/trading` |
 
-> **0.6.0 (2026-04-27):** swap UserOp builders + V4 quoting moved
-> from core to `@pafi-dev/trading`. Core retains the underlying
-> `universalRouterAbi`, `permit2Abi`, `v4QuoterAbi`, `PoolKey`,
-> `PathKey`, `QuoteResult` types — trading wraps them with the actual
-> swap logic. The `PafiSDK` class also drops `quote` / `swap`
-> namespaces; use trading or import primitives directly.
->
-> **0.6.1 (2026-04-27):** added `quoteOperatorFeeUsdt` so FE can
-> compute USDT-denominated gas fee without round-tripping the issuer
-> backend (`/gas-fee` is now optional).
->
-> **0.7.5 (2026-04-28):** added `delegateDirect()` — FE one-shot EIP-7702
-> delegation that user pays gas for. Bypasses the AA + sponsor-relayer
-> stack entirely. See [section below](#delegatedirect--fe-one-shot-delegation-no-aa--no-sponsor).
-
 ---
 
-## Modules
+## Exports cheatsheet
 
-| Symbol / area | What it provides |
+| Symbol / area | Provides |
 | --- | --- |
-| `getContractAddresses(chainId)` | All deployed PAFI contract addresses keyed by chain |
-| `signMintRequest`, `verifyMintRequest` | EIP-712 sign / recover for `MintRequest` |
-| `signBurnRequest`, `verifyBurnRequest` | EIP-712 sign / recover for `BurnRequest` |
-| `signReceiverConsent`, `verifyReceiverConsent` | EIP-712 for sponsored-mint consent |
+| `getContractAddresses(chainId)` | All deployed PAFI v1.6 addresses keyed by chain |
+| `signMintRequest`, `verifyMintRequest`, `buildMintRequestTypedData` | EIP-712 sign/recover for v1.6 `MintForRequest` (5 fields) |
+| `signBurnRequest`, `verifyBurnRequest`, `buildBurnRequestTypedData` | EIP-712 for `BurnRequest` |
 | `signSponsorAuth`, `verifySponsorAuth`, `buildAndSignSponsorAuth` | EIP-712 for sponsor-relayer auth |
 | `buildPartialUserOperation`, `assembleUserOperation`, `computeUserOpHash` | ERC-4337 v0.7+ UserOp builder + hash |
-| `encodeBatchExecute`, `decodeBatchExecuteCalls` | BatchExecutor (Coinbase SW v2) calldata |
-| `buildDelegationUserOp`, `computeAuthorizationHash`, `parseEip7702DelegatedAddress` | EIP-7702 helpers |
-| `splitAuthorizationSig`, `buildEip7702Authorization` | Split user's authSig + assemble bundler tuple |
-| `delegateDirect` | One-shot FE-direct EIP-7702 delegation (user pays gas, no AA) |
+| `encodeBatchExecute`, `decodeBatchExecuteCalls` | BatchExecutor (Pimlico Simple7702Account) calldata |
+| `buildDelegationUserOp`, `computeAuthorizationHash`, `parseEip7702DelegatedAddress`, `splitAuthorizationSig`, `buildEip7702Authorization`, `delegateDirect` | EIP-7702 helpers (build + introspect) |
 | `buildPerpDepositViaRelay`, `buildPerpDepositWithGasDeduction`, `ORDERLY_RELAY_ABI`, `ORDERLY_VAULT_ABI`, `BROKER_HASHES`, `TOKEN_HASHES`, `computeAccountId` | Orderly perp deposit calldata + types |
-| `quoteOperatorFeePt`, `quoteOperatorFeeUsdt` | Off-issuer fee quoter (Chainlink + V4 subgraph) |
-| `fetchPafiPools`, `PAFI_SUBGRAPH_URL` | Pool discovery via PAFI subgraph |
-| `pointTokenAbi` (alias `POINT_TOKEN_V2_ABI`), `issuerRegistryAbi`, `mintingOracleAbi`, `pointTokenFactoryAbi`, `erc20Abi`, `permit2Abi`, `universalRouterAbi`, `v4QuoterAbi` | Contract ABIs |
-| `getMintRequestNonce`, `getBurnRequestNonce`, `getReceiverConsentNonce`, `getPointTokenBalance`, `isMinter`, `getTokenName` | On-chain read helpers |
-| `createLoginMessage` | EIP-4361 SIWE login message builder |
-| `parseEip7702DelegatedAddress`, `checkDelegation`, `isDelegatedTo`, `isDelegatedToTarget` | EIP-7702 delegation introspection |
+| `quoteOperatorFeePt`, `quoteOperatorFeeUsdt` | Gas-reimbursement fee quoter (Chainlink + V4 subgraph) |
+| `getMintFeeBps`, `getMintFeeRecipients` | v1.6 — read wrapper fee config per pointToken |
+| `getTokenCap` | v1.6 — read `MintingOracle.tokenCaps(pointToken)` |
+| `verifyMintCap`, `getPointTokenIssuer` | MintingOracle read helpers (v1.6 signature) |
+| `getIssuer`, `isActiveIssuer`, `issuerRegistryGetIssuerFlatAbi` | IssuerRegistry helpers (v1.6 — 7 fields) |
+| `getMintRequestNonce`, `getBurnRequestNonce`, `getPointTokenBalance`, `isMinter`, `getTokenName`, `getPointTokenIssuerAddress` | PointToken read helpers |
+| `fetchPafiPools`, `PAFI_SUBGRAPH_URL` | Pool discovery via PAFI subgraph v3 |
+| `getPafiServiceUrls(chainId)` | Hardcoded PAFI service endpoints (sponsorRelayer, issuerApi) |
+| `pointTokenAbi` (alias `POINT_TOKEN_V2_ABI`), `issuerRegistryAbi`, `mintingOracleAbi`, `mintFeeWrapperAbi`, `pointTokenFactoryAbi`, `erc20Abi`, `permit2Abi`, `universalRouterAbi`, `v4QuoterAbi` | Contract ABIs (regenerated from Foundry artifacts) |
+| `createLoginMessage` | EIP-4361 SIWE login builder |
 
 ---
 
-## Contract addresses
+## Contract addresses (v1.6)
 
 ```ts
 import { getContractAddresses } from "@pafi-dev/core";
 
-const {
-  pointToken,
-  batchExecutor,        // EIP-7702 delegation target (Coinbase SW v2)
-  usdt,
-  issuerRegistry,
-  mintingOracle,
-  pafiHook,             // Uniswap V4 hook (10% fee on PT→USDT only)
-  chainlinkEthUsd,
-  orderlyRelay,
-  pafiFeeRecipient,
-  universalRouter,
-} = getContractAddresses(8453);
+const addr = getContractAddresses(8453);  // Base mainnet
+// addr.issuerRegistry  = 0xAB1d1e117c41636f30bb10194Fe6B774B6Da9E01
+// addr.mintingOracle   = 0x2f4cf8C5F8b41efC970c5b46a5d905CeA1f871a0
+// addr.mintFeeWrapper  = 0xD324EE2e3220B23d1b1BfbB85f5bC1EF2E917B93  (NEW)
+// addr.usdt            = 0x3F7e71B150e97316Bb9f363A32c19CcD36ac2382
+// addr.batchExecutor   = 0xe6Cae83BdE06E4c305530e199D7217f42808555B  (Pimlico Simple7702)
+// addr.pafiFeeRecipient = ... (PAFI ops wallet)
+// addr.chainlinkEthUsd  = 0x71041dddad3595F9CEd3DcCFBe3D1F4b0a16Bb70
+// addr.pafiHook        = 0x...dead  (DEPRECATED in v1.6)
+// addr.pointToken      = dead-zero  (PER-ISSUER — read from env or factory)
 ```
 
-Throws if `chainId` isn't in the map. Base mainnet (8453) is the only
-chain in active use.
+> Per-issuer `pointToken` clones are NOT in the chain-level address bag.
+> Read from your issuer env (e.g. `POINT_TOKEN_ADDRESS`) or
+> `PointTokenFactory.createToken()` at runtime.
+
+Deploy block: **45683465** (canonical for all v1.6 indexers).
 
 ---
 
-## EIP-712 signing
+## EIP-712 — `MintForRequest` (v1.6)
 
 ```ts
-import { signMintRequest, getContractAddresses } from "@pafi-dev/core";
+import { signMintRequest, verifyMintRequest } from "@pafi-dev/core";
 import { privateKeyToAccount } from "viem/accounts";
 import { createWalletClient, http } from "viem";
 
@@ -116,183 +124,131 @@ const wallet = createWalletClient({
   transport: http(),
 });
 
-const { pointToken } = getContractAddresses(8453);
 const sig = await signMintRequest(
   wallet,
-  { name: "POINT", chainId: 8453, verifyingContract: pointToken },
+  { name: "POINT", chainId: 8453, verifyingContract: pointTokenAddress },
   {
-    to: userAddress,
+    user,                      // off-chain spender (drives nonces)
+    receiver: wrapperAddress,  // on-chain caller of PointToken.mint
+                               // (= wrapper for wrapper-mediated; = user for direct)
     amount: 1000n * 10n ** 18n,
-    nonce: currentMintRequestNonce,
+    nonce: currentMintRequestNonce,   // from PointToken.mintRequestNonces(user)
     deadline: BigInt(Math.floor(Date.now() / 1000) + 900),
   },
 );
 
-// sig.serialized — bytes hex passed to PointToken.mint(...)
+// sig.serialized — bytes hex passed to PointToken.mint(...) or wrapper.mintWithFee(...)
 ```
 
-Same pattern for `signBurnRequest`, `signReceiverConsent`,
-`signSponsorAuth`. KMS-backed wallets work — pass any
-`viem WalletClient`.
+Wrapper-mediated mint puts `receiver = wrapperAddress`; direct mint puts
+`receiver = user`. The contract requires `msg.sender == receiver`.
 
 ---
 
-## ERC-4337 UserOp building
+## MintFeeWrapper helpers (v1.6)
 
 ```ts
-import { encodeBatchExecute, buildPartialUserOperation } from "@pafi-dev/core";
+import { getMintFeeBps, getMintFeeRecipients, getContractAddresses } from "@pafi-dev/core";
 
-const callData = encodeBatchExecute([
-  { target: pointToken, value: 0n, data: mintCallData },
-  { target: pointToken, value: 0n, data: feeTransferCallData }, // optional
-]);
+const { mintFeeWrapper } = getContractAddresses(8453);
+const POINT_TOKEN = "0x855c2046...";
 
-const partial = buildPartialUserOperation({
-  sender: userAddress,
-  nonce: aaNonce,
-  operations: [...],
-  gasLimits: { callGasLimit: 300_000n, verificationGasLimit: 150_000n, preVerificationGas: 50_000n },
-});
+const bps = await getMintFeeBps(provider, mintFeeWrapper, POINT_TOKEN);
+// bps = 50 (= 0.50%)
+
+const recipients = await getMintFeeRecipients(provider, mintFeeWrapper, POINT_TOKEN);
+// [{ account: 0x..., basisPoints: 20 }, { account: 0x..., basisPoints: 30 }]
 ```
 
-`computeUserOpHash(userOp, chainId)` — EntryPoint v0.8 EIP-712 digest.
-The mobile prepare/submit flow signs this hash via Privy
-`personal_sign`.
+Wrapper deducts `gross × bps / 10000` PT on every mint and distributes
+to recipients. User receives `gross × (1 - bps/10000)` net.
 
 ---
 
-## EIP-7702 delegation helpers
+## Operator fee quoter
 
-```ts
-import {
-  computeAuthorizationHash,
-  parseEip7702DelegatedAddress,
-  splitAuthorizationSig,
-  buildEip7702Authorization,
-} from "@pafi-dev/core";
+Two helpers for FE direct usage (no backend round-trip):
 
-// Check whether user EOA already has delegation installed
-const code = await provider.getCode({ address: userAddress });
-const designator = parseEip7702DelegatedAddress(code);  // null = not delegated
+```ts
+import { quoteOperatorFeeUsdt, quoteOperatorFeePt } from "@pafi-dev/core";
 
-// Build the hash the user signs to authorize delegation
-const accountNonce = BigInt(await provider.getTransactionCount({ address: userAddress }));
-const authHash = computeAuthorizationHash(8453, batchExecutor, accountNonce);
+// USDT-denominated (replaces issuer's GET /gas-fee). Chainlink-only.
+const gasFeeUsdt = await quoteOperatorFeeUsdt({
+  provider, chainId: 8453, scenario: "mint",
+});
 
-// On the bundler side: split the user's 65-byte signature into the tuple
-const { r, s, yParity } = splitAuthorizationSig(authSig);
-const authorization = buildEip7702Authorization({
-  chainId: 8453,
-  address: batchExecutor,
-  nonce: accountNonce,
-  authSig,
+// PT-denominated (used by mint/burn flows). Adds V4 subgraph call.
+const gasFeePt = await quoteOperatorFeePt({
+  provider, chainId: 8453, scenario: "mint",
+  pointTokenAddress: POINT_TOKEN,
+  allowStaleFallback: true,   // recommended: don't block on subgraph outage
 });
 ```
 
----
-
-## `delegateDirect` — FE one-shot delegation, no AA / no sponsor
-
-For the **FE-direct** path where the user pays gas in ETH and you don't
-want a dependency on `permissionless` / Pimlico bundlers / PAFI
-sponsor-relayer:
+Both return `bigint` raw units. Fallback prices (`0.1 USDT/PT` default,
+3000 USD/ETH default) used when oracles unreachable + `allowStaleFallback`
+is true. Sponsor-relayer's `FeeValidator` runs the same math server-side
+with a 5% tolerance window.
 
-```ts
-import { useSign7702Authorization, useWallets } from "@privy-io/react-auth";
-import { delegateDirect } from "@pafi-dev/core";
-import { createWalletClient, custom, createPublicClient, http } from "viem";
-import { base } from "viem/chains";
-
-const publicClient = createPublicClient({ chain: base, transport: http() });
-
-function DelegateButton() {
-  const { wallets } = useWallets();
-  const { signAuthorization } = useSign7702Authorization();
-
-  // Privy ALWAYS signs EIP-7702 with the embedded wallet — pick that
-  // one as the smart-account owner regardless of how user logged in.
-  const wallet = wallets.find((w) => w.walletClientType === "privy");
-
-  async function handleClick() {
-    if (!wallet) return;
-    const provider = await wallet.getEthereumProvider();
-    const walletClient = createWalletClient({
-      account: wallet.address as `0x${string}`,
-      chain: base,
-      transport: custom(provider),
-    });
-
-    const result = await delegateDirect({
-      userAddress: wallet.address as `0x${string}`,
-      chainId: 8453,
-      publicClient,
-      walletClient,
-      signAuthorization,
-      // optional: skipIfAlreadyDelegated (default true), waitForReceipt (default true)
-    });
-
-    if (result.status === "already-delegated") {
-      console.log("Already delegated to", result.delegatedTo);
-    } else {
-      console.log("Delegated! tx:", result.txHash);
-      // result.receipt — full TransactionReceipt when waitForReceipt=true
-    }
-  }
-
-  return <button onClick={handleClick}>Delegate</button>;
-}
-```
+See [`docs/FEE_FLOW.md`](../../../docs/FEE_FLOW.md) in the main repo for
+full math derivation.
 
-**What happens internally:**
+---
 
-1. `getCode(userAddress)` → if already delegated to expected impl, return early.
-2. `getTransactionCount(userAddress, 'pending')` → tx nonce.
-3. `signAuthorization({ contractAddress, chainId, nonce })` — Privy hook signs with embedded wallet (raw `secp256k1_sign`, no EIP-191 prefix).
-4. `walletClient.sendTransaction({ to: userAddress, data: '0x', authorizationList: [auth] })` — viem encodes a type-4 EIP-7702 transaction.
-5. `waitForTransactionReceipt(txHash)` (optional).
+## ERC-4337 UserOp building
 
-**Requirements:**
+```ts
+import { encodeBatchExecute, buildPartialUserOperation } from "@pafi-dev/core";
 
-- Privy embedded wallet (external wallets like MetaMask **cannot**
-  sign EIP-7702 — only Privy's embedded wallet exposes raw
-  `secp256k1_sign`).
-- A few cents of ETH on Base for gas (~$0.01–0.10).
+const callData = encodeBatchExecute([
+  { target: mintFeeWrapper, value: 0n, data: mintWithFeeCallData },
+  { target: pointToken,     value: 0n, data: feeTransferCallData },
+]);
 
-**vs. AA path:** `delegateDirect` produces 1 native L1 tx instead of an
-ERC-4337 UserOp. Cheaper, simpler, no bundler / paymaster involvement —
-but the user pays gas. Use the AA path (via `permissionless` +
-sponsor-relayer) when you want gas-free UX.
+const partial = buildPartialUserOperation({
+  sender: userAddress,
+  nonce: aaNonce,
+  callData,
+  gasLimits: {
+    callGasLimit: 300_000n,
+    verificationGasLimit: 150_000n,
+    preVerificationGas: 50_000n,
+  },
+});
+```
 
-**vs. mobile gg56 flow:** mobile delegate flow goes through gg56's
-`/delegate/{prepare,submit}` + sponsor-relayer for the gas sponsorship.
-`delegateDirect` is the FE-only counterpart that bypasses that
-infrastructure entirely.
+`computeUserOpHash(userOp, chainId)` — EntryPoint v0.8 EIP-712 digest.
+Mobile signs this hash via `eth_signTypedData_v4` (NOT `personal_sign` —
+Pimlico Simple7702Account does raw `ecrecover` without EIP-191 prefix).
 
 ---
 
-## Operator fee quoter
+## EIP-7702 — `delegateDirect`
 
-Two helpers for FE direct-mode usage (no backend round-trip):
+FE one-shot delegation, no AA / no sponsor:
 
 ```ts
-import { quoteOperatorFeeUsdt, quoteOperatorFeePt } from "@pafi-dev/core";
+import { delegateDirect } from "@pafi-dev/core";
+import { useSign7702Authorization, useWallets } from "@privy-io/react-auth";
 
-// USDT-denominated (replaces issuer's GET /gas-fee).
-// Pure RPC + Chainlink read.
-const gasFeeUsdt = await quoteOperatorFeeUsdt({ provider, chainId: 8453 });
+const { signAuthorization } = useSign7702Authorization();
+const wallet = useWallets().find((w) => w.walletClientType === "privy");
 
-// PT-denominated (used by the swap flow as operator gas reimbursement
-// in PT). Needs a subgraph call to read PT spot price.
-const gasFeePt = await quoteOperatorFeePt({
-  provider,
+const result = await delegateDirect({
+  userAddress: wallet.address,
   chainId: 8453,
-  pointTokenAddress: POINT_TOKEN,
+  publicClient,
+  walletClient,
+  signAuthorization,
+  // optional: skipIfAlreadyDelegated (default true), waitForReceipt (default true)
 });
+
+// result.status: "already-delegated" | "broadcasted"
+// result.txHash, result.delegatedTo, result.receipt?
 ```
 
-Both return `bigint` raw units. Sponsor-relayer's `FeeValidator` runs
-the same math server-side with a 5% tolerance window — minor drift
-between client and server is accepted.
+**Privy embedded wallet only** — external wallets (MetaMask) can't sign
+EIP-7702 (no raw `secp256k1_sign` exposed). User pays ~$0.01–0.10 ETH gas.
 
 ---
 
@@ -309,15 +265,64 @@ const sponsorAuth = await buildAndSignSponsorAuth({
   issuerId: ISSUER_ID,
   issuerSignerWallet,        // KMS-backed in prod
 });
+// Pass to sponsor-relayer's POST /paymaster/sponsor as `sponsorAuth` field
+```
+
+Issuer signer must be registered in `IssuerRegistry` (`signerAddress`
+field) and whitelisted via `PointToken.addMinter(signer)`.
+
+---
+
+## Verify on-chain state (debug)
+
+```ts
+import {
+  getIssuer, getTokenCap, getMintFeeBps,
+  getMintRequestNonce, isMinter,
+} from "@pafi-dev/core";
+
+// Issuer registry record (v1.6 — 7 fields)
+const issuer = await getIssuer(provider, registry, issuerAddress);
+// { issuerAddress, signerAddress, name, symbol, active, pointToken, mintingOracle }
+
+// Per-token cap (v1.6 — moved off issuer struct)
+const cap = await getTokenCap(provider, mintingOracle, pointToken);
+// { declaredTotalSupply, capBasisPoints }
+
+// Fee config
+const bps = await getMintFeeBps(provider, wrapper, pointToken);
 
-// Pass to sponsor-relayer's POST /paymaster/sponsor as the `sponsorAuth` field.
+// Mint state
+const nonce = await getMintRequestNonce(provider, pointToken, user);
+const authorized = await isMinter(provider, pointToken, signerAddress);
 ```
 
-The issuer signer must be registered in PAFI's `IssuerRegistry`
-(`signerAddress` field).
+---
+
+## v1.5 → v1.6 migration
+
+1. `pnpm add @pafi-dev/core@latest` (≥ 0.9.6)
+2. Replace `signMintRequest({ to, amount, nonce, deadline })` →
+   `signMintRequest({ user, receiver, amount, nonce, deadline })`
+   - Direct mint: `receiver = user`
+   - Wrapper-mediated mint: `receiver = mintFeeWrapper`
+3. Replace `verifyMintCap(client, oracle, issuer, amount)` →
+   `verifyMintCap(client, oracle, pointToken, issuer, amount)`
+4. Remove uses of `Issuer.declaredTotalSupply` / `Issuer.capBasisPoints`
+   — read from `getTokenCap(provider, oracle, pointToken)` instead
+5. Drop any reference to `pafiHook` for swap fees — V4 hook removed in v1.6
+6. Update calldata to call `mintFeeWrapper.mintWithFee(...)` when fee
+   is configured. `@pafi-dev/issuer`'s `RelayService` does this
+   automatically based on `getContractAddresses(chainId).mintFeeWrapper`
 
 ---
 
+## References
+
+- v1.6 deploy block: **45683465** on Base mainnet (2026-05-07)
+- Architecture: [`ARCHITECTURE.md`](../../ARCHITECTURE.md) at SDK root
+- Fee math: [`docs/FEE_FLOW.md`](../../../docs/FEE_FLOW.md)
+
 ## License
 
 Apache-2.0

package/dist/{chunk-5NEAI2BH.cjs → chunk-4NTU7XGP.cjs}

@@ -79,16 +79,6 @@ var burnRequestTypes = {
     { name: "deadline", type: "uint256" }
   ]
 };
-var receiverConsentTypes = {
-  ReceiverConsent: [
-    { name: "onBehalfOf", type: "address" },
-    { name: "originalReceiver", type: "address" },
-    { name: "amount", type: "uint256" },
-    { name: "nonce", type: "uint256" },
-    { name: "deadline", type: "uint256" },
-    { name: "extData", type: "bytes" }
-  ]
-};
 var SUPPORTED_CHAINS = {
   8453: { name: "Base" }
 };
@@ -210,48 +200,6 @@ async function verifyBurnRequest(domain, message, signature, expectedBurner) {
   return { isValid, recoveredAddress };
 }
 
-// src/eip712/receiverConsent.ts
-
-function buildReceiverConsentTypedData(domain, message) {
-  return {
-    domain: buildDomain(domain),
-    types: receiverConsentTypes,
-    primaryType: "ReceiverConsent",
-    message
-  };
-}
-async function signReceiverConsent(walletClient, domain, message) {
-  const serialized = await walletClient.signTypedData({
-    account: walletClient.account,
-    domain: buildDomain(domain),
-    types: receiverConsentTypes,
-    primaryType: "ReceiverConsent",
-    message
-  });
-  const { v, r, s } = _viem.parseSignature.call(void 0, serialized);
-  return {
-    v: Number(v),
-    r,
-    s,
-    serialized
-  };
-}
-async function verifyReceiverConsent(domain, message, signature, expectedReceiver) {
-  const recoveredAddress = await _viem.recoverTypedDataAddress.call(void 0, {
-    domain: buildDomain(domain),
-    types: receiverConsentTypes,
-    primaryType: "ReceiverConsent",
-    message,
-    signature
-  });
-  const isValid = _viem.getAddress.call(void 0, recoveredAddress) === _viem.getAddress.call(void 0, expectedReceiver);
-  return { isValid, recoveredAddress };
-}
-
-
-
-
-
 
 
 
@@ -273,5 +221,5 @@ async function verifyReceiverConsent(domain, message, signature, expectedReceive
 
 
 
-exports.mintRequestTypes = mintRequestTypes; exports.burnRequestTypes = burnRequestTypes; exports.receiverConsentTypes = receiverConsentTypes; exports.SUPPORTED_CHAINS = SUPPORTED_CHAINS; exports.V4_QUOTER_ADDRESSES = V4_QUOTER_ADDRESSES; exports.UNIVERSAL_ROUTER_ADDRESSES = UNIVERSAL_ROUTER_ADDRESSES; exports.COMMON_TOKENS = COMMON_TOKENS; exports.COMMON_POOLS = COMMON_POOLS; exports.POINT_TOKEN_POOLS = POINT_TOKEN_POOLS; exports.ENTRY_POINT_V07 = ENTRY_POINT_V07; exports.ENTRY_POINT_V08 = ENTRY_POINT_V08; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.buildDomain = buildDomain; exports.Eip712DomainMismatchError = Eip712DomainMismatchError; exports.assertDomainMatchesContract = assertDomainMatchesContract; exports.buildMintRequestTypedData = buildMintRequestTypedData; exports.signMintRequest = signMintRequest; exports.verifyMintRequest = verifyMintRequest; exports.buildBurnRequestTypedData = buildBurnRequestTypedData; exports.signBurnRequest = signBurnRequest; exports.verifyBurnRequest = verifyBurnRequest; exports.buildReceiverConsentTypedData = buildReceiverConsentTypedData; exports.signReceiverConsent = signReceiverConsent; exports.verifyReceiverConsent = verifyReceiverConsent;
-//# sourceMappingURL=chunk-5NEAI2BH.cjs.map
+exports.mintRequestTypes = mintRequestTypes; exports.burnRequestTypes = burnRequestTypes; exports.SUPPORTED_CHAINS = SUPPORTED_CHAINS; exports.V4_QUOTER_ADDRESSES = V4_QUOTER_ADDRESSES; exports.UNIVERSAL_ROUTER_ADDRESSES = UNIVERSAL_ROUTER_ADDRESSES; exports.COMMON_TOKENS = COMMON_TOKENS; exports.COMMON_POOLS = COMMON_POOLS; exports.POINT_TOKEN_POOLS = POINT_TOKEN_POOLS; exports.ENTRY_POINT_V07 = ENTRY_POINT_V07; exports.ENTRY_POINT_V08 = ENTRY_POINT_V08; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.buildDomain = buildDomain; exports.Eip712DomainMismatchError = Eip712DomainMismatchError; exports.assertDomainMatchesContract = assertDomainMatchesContract; exports.buildMintRequestTypedData = buildMintRequestTypedData; exports.signMintRequest = signMintRequest; exports.verifyMintRequest = verifyMintRequest; exports.buildBurnRequestTypedData = buildBurnRequestTypedData; exports.signBurnRequest = signBurnRequest; exports.verifyBurnRequest = verifyBurnRequest;
+//# sourceMappingURL=chunk-4NTU7XGP.cjs.map

package/dist/chunk-4NTU7XGP.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/phitran/Pacific-Finance/pafi-backend/pafi-sdk/packages/core/dist/chunk-4NTU7XGP.cjs","../src/eip712/domain.ts","../src/eip712/mintRequest.ts","../src/constants.ts","../src/eip712/burnRequest.ts"],"names":["parseSignature","recoverTypedDataAddress","getAddress"],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACIO,SAAS,WAAA,CAAY,MAAA,EAAgC;AAC1D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA,CAAO,IAAA;AAAA,IACb,OAAA,mBAAS,MAAA,CAAO,OAAA,UAAW,KAAA;AAAA,IAC3B,OAAA,EAAS,MAAA,CAAO,OAAA;AAAA,IAChB,iBAAA,EAAmB,MAAA,CAAO;AAAA,EAC5B,CAAA;AACF;AAKO,IAAM,0BAAA,EAAN,MAAA,QAAwC,MAAM;AAAA,EACnD,WAAA,CACkB,KAAA,EACA,QAAA,EACA,MAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,kCAAA,EAAqC,KAAK,CAAA,YAAA,EAAe,QAAQ,CAAA,MAAA,EAAS,MAAM,CAAA,uKAAA;AAAA,IAGlF,CAAA;AARgB,IAAA,IAAA,CAAA,MAAA,EAAA,KAAA;AACA,IAAA,IAAA,CAAA,SAAA,EAAA,QAAA;AACA,IAAA,IAAA,CAAA,OAAA,EAAA,MAAA;AAOhB,IAAA,IAAA,CAAK,KAAA,EAAO,2BAAA;AAAA,EACd;AAAA,EAVkB;AAAA,EACA;AAAA,EACA;AASpB,CAAA;AA4BA,MAAA,SAAsB,2BAAA,CACpB,MAAA,EACA,QAAA,EACe;AACf,EAAA,MAAM,QAAA,EAAW,MAAM,MAAA,CAAO,YAAA,CAAa;AAAA,IACzC,OAAA,EAAS,QAAA,CAAS,iBAAA;AAAA,IAClB,GAAA,EAAK,+BAAA;AAAA,IACL,YAAA,EAAc;AAAA,EAChB,CAAC,CAAA;AAUD,EAAA,MAAM,CAAC,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,iBAAiB,EAAA,EAAI,OAAA;AAEtD,EAAA,GAAA,CAAI,KAAA,IAAS,QAAA,CAAS,IAAA,EAAM;AAC1B,IAAA,MAAM,IAAI,yBAAA,CAA0B,MAAA,EAAQ,QAAA,CAAS,IAAA,EAAM,IAAI,CAAA;AAAA,EACjE;AACA,EAAA,GAAA,CAAI,QAAA,IAAY,QAAA,CAAS,OAAA,EAAS;AAChC,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,SAAA;AAAA,MACA,QAAA,CAAS,OAAA;AAAA,MACT;AAAA,IACF,CAAA;AAAA,EACF;AACA,EAAA,GAAA,CAAI,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,SAAA;AAAA,MACA,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,MACvB,OAAA,CAAQ,QAAA,CAAS;AAAA,IACnB,CAAA;AAAA,EACF;AACA,EAAA,GAAA,CACE,iBAAA,CAAkB,WAAA,CAAY,EAAA,IAC9B,QAAA,CAAS,iBAAA,CAAkB,WAAA,CAAY,CAAA,EACvC;AACA,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,mBAAA;AAAA,MACA,QAAA,CAAS,iBAAA;AAAA,MACT;AAAA,IACF,CAAA;AAAA,EACF;AACF;ADjDA;AACA;AE5DA,4BAAoE;AF8DpE;AACA;AG5CO,IAAM,iBAAA,EAAmB;AAAA,EAC9B,cAAA,EAAgB;AAAA,IACd,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,UAAU,CAAA;AAAA,IAChC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,UAAU,CAAA;AAAA,IACpC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,UAAU,CAAA;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,UAAU;AAAA,EACtC;AACF,CAAA;AAEO,IAAM,iBAAA,EAAmB;AAAA,EAC9B,WAAA,EAAa;AAAA,IACX,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,UAAU,CAAA;AAAA,IAChC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,UAAU,CAAA;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,UAAU;AAAA,EACtC;AACF,CAAA;AAaO,IAAM,iBAAA,EAAgD;AAAA,EAC3D,IAAA,EAAM,EAAE,IAAA,EAAM,OAAO;AACvB,CAAA;AAEO,IAAM,oBAAA,EAA+C;AAAA,EAC1D,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,2BAAA,EAAsD;AAAA,EACjE,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,cAAA,EAAyD;AAAA;AAAA,EAEpE,IAAA,EAAM;AAAA,IACJ,IAAA,EAAM,4CAAA;AAAA,IACN,IAAA,EAAM,4CAAA;AAAA,IACN,IAAA,EAAM;AAAA,EACR;AACF,CAAA;AAEO,IAAM,aAAA,EAA0C;AAAA;AAAA,EAErD,IAAA,EAAM;AAAA;AAAA,IAEJ;AAAA,MACE,SAAA,EAAW,4CAAA;AAAA,MACX,SAAA,EAAW,4CAAA;AAAA,MACX,GAAA,EAAK,GAAA;AAAA,MACL,WAAA,EAAa,EAAA;AAAA,MACb,KAAA,EAAO;AAAA,IACT,CAAA;AAAA;AAAA,IAEA;AAAA,MACE,SAAA,EAAW,4CAAA;AAAA,MACX,SAAA,EAAW,4CAAA;AAAA,MACX,GAAA,EAAK,GAAA;AAAA,MACL,WAAA,EAAa,EAAA;AAAA,MACb,KAAA,EAAO;AAAA,IACT;AAAA,EACF;AACF,CAAA;AAEO,IAAM,kBAAA,EAAgE;AAAA;AAE7E,CAAA;AAOO,IAAM,gBAAA,EAA2B,4CAAA;AAcjC,IAAM,gBAAA,EAA2B,4CAAA;AAGjC,IAAM,gBAAA,EAA2B,4CAAA;AHOxC;AACA;AEnHA,IAAM,aAAA,EAAe,gBAAA;AAOd,SAAS,yBAAA,CACd,MAAA,EACA,OAAA,EACA;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,WAAA,CAAY,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,YAAA;AAAA,IACb;AAAA,EACF,CAAA;AACF;AAUA,MAAA,SAAsB,eAAA,CACpB,YAAA,EACA,MAAA,EACA,OAAA,EAC0B;AAC1B,EAAA,MAAM,WAAA,EAAa,MAAM,YAAA,CAAa,aAAA,CAAc;AAAA,IAClD,OAAA,EAAS,YAAA,CAAa,OAAA;AAAA,IACtB,MAAA,EAAQ,WAAA,CAAY,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,YAAA;AAAA,IACb;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,EAAE,CAAA,EAAG,CAAA,EAAG,EAAE,EAAA,EAAI,kCAAA,UAAyB,CAAA;AAE7C,EAAA,OAAO;AAAA,IACL,CAAA,EAAG,MAAA,CAAO,CAAC,CAAA;AAAA,IACX,CAAA;AAAA,IACA,CAAA;AAAA,IACA;AAAA,EACF,CAAA;AACF;AAEA,MAAA,SAAsB,iBAAA,CACpB,MAAA,EACA,OAAA,EACA,SAAA,EACA,cAAA,EACgC;AAChC,EAAA,MAAM,iBAAA,EAAmB,MAAM,2CAAA;AAAwB,IACrD,MAAA,EAAQ,WAAA,CAAY,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,YAAA;AAAA,IACb,OAAA;AAAA,IACA;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,QAAA,EAAU,8BAAA,gBAA2B,EAAA,IAAM,8BAAA,cAAyB,CAAA;AAE1E,EAAA,OAAO,EAAE,OAAA,EAAS,iBAAiB,CAAA;AACrC;AFqFA;AACA;AIpKA;AAyBO,SAAS,yBAAA,CACd,MAAA,EACA,OAAA,EACA;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,WAAA,CAAY,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,aAAA;AAAA,IACb;AAAA,EACF,CAAA;AACF;AAEA,MAAA,SAAsB,eAAA,CACpB,YAAA,EACA,MAAA,EACA,OAAA,EAC0B;AAC1B,EAAA,MAAM,WAAA,EAAa,MAAM,YAAA,CAAa,aAAA,CAAc;AAAA,IAClD,OAAA,EAAS,YAAA,CAAa,OAAA;AAAA,IACtB,MAAA,EAAQ,WAAA,CAAY,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,aAAA;AAAA,IACb;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,EAAE,CAAA,EAAG,CAAA,EAAG,EAAE,EAAA,EAAIA,kCAAAA,UAAyB,CAAA;AAE7C,EAAA,OAAO;AAAA,IACL,CAAA,EAAG,MAAA,CAAO,CAAC,CAAA;AAAA,IACX,CAAA;AAAA,IACA,CAAA;AAAA,IACA;AAAA,EACF,CAAA;AACF;AAEA,MAAA,SAAsB,iBAAA,CACpB,MAAA,EACA,OAAA,EACA,SAAA,EACA,cAAA,EACgC;AAChC,EAAA,MAAM,iBAAA,EAAmB,MAAMC,2CAAAA;AAAwB,IACrD,MAAA,EAAQ,WAAA,CAAY,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,aAAA;AAAA,IACb,OAAA;AAAA,IACA;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,QAAA,EAAUC,8BAAAA,gBAA2B,EAAA,IAAMA,8BAAAA,cAAyB,CAAA;AAE1E,EAAA,OAAO,EAAE,OAAA,EAAS,iBAAiB,CAAA;AACrC;AJ4HA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,68BAAC","file":"/Users/phitran/Pacific-Finance/pafi-backend/pafi-sdk/packages/core/dist/chunk-4NTU7XGP.cjs","sourcesContent":[null,"import type { Address, PublicClient } from \"viem\";\nimport type { PointTokenDomainConfig } from \"../types\";\nimport { pointTokenAbi } from \"../abi/pointToken\";\n\n/**\n * Build the EIP-712 domain struct from a PointToken config. Uses\n * `config.version` when supplied; defaults to `\"1\"` for back-compat.\n */\nexport function buildDomain(config: PointTokenDomainConfig) {\n  return {\n    name: config.name,\n    version: config.version ?? \"1\",\n    chainId: config.chainId,\n    verifyingContract: config.verifyingContract,\n  };\n}\n\n/**\n * Domain mismatch error thrown by `assertDomainMatchesContract`.\n */\nexport class Eip712DomainMismatchError extends Error {\n  constructor(\n    public readonly field: \"name\" | \"version\" | \"chainId\" | \"verifyingContract\",\n    public readonly expected: string,\n    public readonly actual: string,\n  ) {\n    super(\n      `EIP-712 domain mismatch on field \"${field}\": expected ${expected}, got ${actual}. ` +\n        `Local SDK config is out of sync with deployed PointToken — signatures will be rejected on-chain. ` +\n        `Update SDK config or contract before producing more signatures.`,\n    );\n    this.name = \"Eip712DomainMismatchError\";\n  }\n}\n\n/**\n * One-RPC health check that the local EIP-712 domain config matches\n * what the deployed `PointToken` reports via `eip712Domain()`. If the\n * contract has bumped `version` from `\"1\"` to `\"2\"` (or any field\n * differs), every signature produced with the stale config will be\n * silently rejected on-chain (`ECDSA: invalid signature` — opaque to\n * the user).\n *\n * Recommended: call once at issuer-startup health check, not on every\n * mint. Throws `Eip712DomainMismatchError` describing the diverged\n * field.\n *\n * @example\n * ```ts\n * import { assertDomainMatchesContract, buildDomain } from \"@pafi-dev/core\";\n *\n * const expected = buildDomain({\n *   name: \"PointToken\",\n *   chainId: 8453,\n *   verifyingContract: \"0x855c2046AD49AcF9B3B32557176FfCB1a1A38A22\",\n * });\n *\n * await assertDomainMatchesContract(publicClient, expected);\n * // → throws Eip712DomainMismatchError if version on-chain has bumped\n * ```\n */\nexport async function assertDomainMatchesContract(\n  client: PublicClient,\n  expected: ReturnType<typeof buildDomain>,\n): Promise<void> {\n  const onChain = (await client.readContract({\n    address: expected.verifyingContract as Address,\n    abi: pointTokenAbi,\n    functionName: \"eip712Domain\",\n  })) as readonly [\n    `0x${string}`, // fields (bytes1)\n    string, // name\n    string, // version\n    bigint, // chainId\n    Address, // verifyingContract\n    `0x${string}`, // salt\n    readonly bigint[], // extensions\n  ];\n\n  const [, name, version, chainId, verifyingContract] = onChain;\n\n  if (name !== expected.name) {\n    throw new Eip712DomainMismatchError(\"name\", expected.name, name);\n  }\n  if (version !== expected.version) {\n    throw new Eip712DomainMismatchError(\n      \"version\",\n      expected.version,\n      version,\n    );\n  }\n  if (chainId !== BigInt(expected.chainId)) {\n    throw new Eip712DomainMismatchError(\n      \"chainId\",\n      String(expected.chainId),\n      chainId.toString(),\n    );\n  }\n  if (\n    verifyingContract.toLowerCase() !==\n    expected.verifyingContract.toLowerCase()\n  ) {\n    throw new Eip712DomainMismatchError(\n      \"verifyingContract\",\n      expected.verifyingContract,\n      verifyingContract,\n    );\n  }\n}\n","import { getAddress, parseSignature, recoverTypedDataAddress } from \"viem\";\nimport type { Address, Hex, WalletClient } from \"viem\";\nimport { mintRequestTypes } from \"../constants\";\nimport type {\n  EIP712Signature,\n  MintRequest,\n  PointTokenDomainConfig,\n  SignatureVerification,\n} from \"../types\";\nimport { buildDomain } from \"./domain\";\n\nconst PRIMARY_TYPE = \"MintForRequest\" as const;\n\n/**\n * Build the EIP-712 typed data object for a v1.6 MintForRequest.\n * Returns the standard `{ domain, types, primaryType, message }` structure\n * that any EIP-712 signer (viem, ethers, Privy, WalletConnect) can consume.\n */\nexport function buildMintRequestTypedData(\n  domain: PointTokenDomainConfig,\n  message: MintRequest,\n) {\n  return {\n    domain: buildDomain(domain),\n    types: mintRequestTypes,\n    primaryType: PRIMARY_TYPE,\n    message,\n  };\n}\n\n/**\n * Sign a v1.6 MintForRequest. Caller passes the full 5-field message:\n *   - user      = off-chain spender (drives nonce stream)\n *   - receiver  = on-chain caller (= msg.sender of `mint()`; wrapper or user)\n *   - amount    = PT amount\n *   - nonce     = pointToken.mintRequestNonces(user)\n *   - deadline  = unix seconds\n */\nexport async function signMintRequest(\n  walletClient: WalletClient,\n  domain: PointTokenDomainConfig,\n  message: MintRequest,\n): Promise<EIP712Signature> {\n  const serialized = await walletClient.signTypedData({\n    account: walletClient.account!,\n    domain: buildDomain(domain),\n    types: mintRequestTypes,\n    primaryType: PRIMARY_TYPE,\n    message,\n  });\n\n  const { v, r, s } = parseSignature(serialized);\n\n  return {\n    v: Number(v),\n    r,\n    s,\n    serialized,\n  };\n}\n\nexport async function verifyMintRequest(\n  domain: PointTokenDomainConfig,\n  message: MintRequest,\n  signature: Hex,\n  expectedMinter: Address,\n): Promise<SignatureVerification> {\n  const recoveredAddress = await recoverTypedDataAddress({\n    domain: buildDomain(domain),\n    types: mintRequestTypes,\n    primaryType: PRIMARY_TYPE,\n    message,\n    signature,\n  });\n\n  const isValid = getAddress(recoveredAddress) === getAddress(expectedMinter);\n\n  return { isValid, recoveredAddress };\n}\n","import type { Address } from \"viem\";\nimport type { ChainConfig, PoolKey } from \"./types\";\n\n// -------------------------------------------------------------------------\n// EIP-712 type definitions for viem\n// -------------------------------------------------------------------------\n\n/**\n * EIP-712 typed data for the v1.6 sig-gated mint path.\n *\n * Contract enforces:\n *   - msg.sender == receiver (the on-chain caller of `mint`)\n *   - nonce == mintRequestNonces[user] (per-user nonce stream)\n *\n * `user` is the off-chain spender (whose nonce advances), `receiver` is\n * the on-chain mint recipient. For direct mints `user == receiver` (user\n * calls PointToken.mint themselves). For wrapper-mediated mints `user ==\n * end-user`, `receiver == wrapper address`.\n */\nexport const mintRequestTypes = {\n  MintForRequest: [\n    { name: \"user\", type: \"address\" },\n    { name: \"receiver\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"nonce\", type: \"uint256\" },\n    { name: \"deadline\", type: \"uint256\" },\n  ],\n} as const;\n\nexport const burnRequestTypes = {\n  BurnRequest: [\n    { name: \"from\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"nonce\", type: \"uint256\" },\n    { name: \"deadline\", type: \"uint256\" },\n  ],\n} as const;\n\n// `receiverConsentTypes` removed in v0.10 — the deployed PointToken\n// contract never had a `ReceiverConsent` path. What was conceptually\n// a \"sponsored\" mint variant is actually implemented at the relayer\n// layer (sponsor-relayer pays gas for the path-2 `MintForRequest`\n// sig-gated mint); no separate EIP-712 type or on-chain nonce mapping\n// is needed.\n\n// -------------------------------------------------------------------------\n// Chain-indexed constants — add entries here as new chains are supported\n// -------------------------------------------------------------------------\n\nexport const SUPPORTED_CHAINS: Record<number, ChainConfig> = {\n  8453: { name: \"Base\" },\n};\n\nexport const V4_QUOTER_ADDRESSES: Record<number, Address> = {\n  8453: \"0x0d5e0f971ed27fbff6c2837bf31316121532048d\",\n};\n\nexport const UNIVERSAL_ROUTER_ADDRESSES: Record<number, Address> = {\n  8453: \"0x6ff5693b99212da76ad316178a184ab56d299b43\",\n};\n\nexport const COMMON_TOKENS: Record<number, Record<string, Address>> = {\n  // Base\n  8453: {\n    WETH: \"0x4200000000000000000000000000000000000006\",\n    USDC: \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\",\n    USDT: \"0xfde4C96c8593536E31F229EA8f37b2ADa2699bb2\",\n  },\n};\n\nexport const COMMON_POOLS: Record<number, PoolKey[]> = {\n  // Base — existing Uniswap V4 pools\n  8453: [\n    // WETH/USDC 0.3%\n    {\n      currency0: \"0x4200000000000000000000000000000000000006\",\n      currency1: \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\",\n      fee: 3000,\n      tickSpacing: 60,\n      hooks: \"0x0000000000000000000000000000000000000000\",\n    },\n    // WETH/USDC 0.05%\n    {\n      currency0: \"0x4200000000000000000000000000000000000006\",\n      currency1: \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\",\n      fee: 500,\n      tickSpacing: 10,\n      hooks: \"0x0000000000000000000000000000000000000000\",\n    },\n  ],\n};\n\nexport const POINT_TOKEN_POOLS: Record<number, Record<Address, PoolKey[]>> = {\n  // chainId → pointTokenAddress → PoolKey[]\n};\n\n// -------------------------------------------------------------------------\n// Protocol constants — chain-agnostic (same address on every EVM chain)\n// -------------------------------------------------------------------------\n\n/** ERC-4337 v0.7 EntryPoint — deployed deterministically across all EVM chains. */\nexport const ENTRY_POINT_V07: Address = \"0x0000000071727De22E5E9d8BAf0edAc6f37da032\";\n\n/**\n * ERC-4337 v0.8 EntryPoint — used by Pimlico's `Simple7702Account` impl\n * (`0xe6Cae83BdE06E4c305530e199D7217f42808555B`) and by permissionless's\n * `to7702SimpleSmartAccount`. EIP-7702 delegated EOAs in PAFI's flow\n * point at this EntryPoint, NOT v0.7.\n *\n * Why this matters: account.validateUserOp does\n * `require(msg.sender == entryPoint(), \"account: not from EntryPoint\")`.\n * If the bundler/paymaster sim runs against a different EntryPoint than\n * what the account's `entryPoint()` returns, the require fails and you\n * see `AA23 reverted account: not from EntryPoint`.\n */\nexport const ENTRY_POINT_V08: Address = \"0x4337084d9e255ff0702461cf8895ce9e3b5ff108\";\n\n/** Permit2 — Uniswap's universal approval contract, same address on all EVM chains. */\nexport const PERMIT2_ADDRESS: Address = \"0x000000000022D473030F116dDEE9F6B43aC78BA3\";\n","import { getAddress, parseSignature, recoverTypedDataAddress } from \"viem\";\nimport type { Address, Hex, WalletClient } from \"viem\";\nimport { burnRequestTypes } from \"../constants\";\nimport type {\n  BurnRequest,\n  EIP712Signature,\n  PointTokenDomainConfig,\n  SignatureVerification,\n} from \"../types\";\nimport { buildDomain } from \"./domain\";\n\n/**\n * EIP-712 helpers for `BurnRequest` — consumed by the sig-gated burn\n * path on `PointToken`:\n *\n *   burn(address from, uint256 amount, uint256 deadline, bytes burnerSig)\n *\n * Solidity type hash:\n *   BurnRequest(address from,uint256 amount,uint256 nonce,uint256 deadline)\n *\n * Issuer backend signs with its burner signer (HSM/KMS). On-chain\n * `msg.sender` must equal `from`, and the recovered signer must be in\n * `burners[]`. Nonce comes from `burnRequestNonces[from]` and is\n * auto-incremented on success.\n */\nexport function buildBurnRequestTypedData(\n  domain: PointTokenDomainConfig,\n  message: BurnRequest,\n) {\n  return {\n    domain: buildDomain(domain),\n    types: burnRequestTypes,\n    primaryType: \"BurnRequest\" as const,\n    message,\n  };\n}\n\nexport async function signBurnRequest(\n  walletClient: WalletClient,\n  domain: PointTokenDomainConfig,\n  message: BurnRequest,\n): Promise<EIP712Signature> {\n  const serialized = await walletClient.signTypedData({\n    account: walletClient.account!,\n    domain: buildDomain(domain),\n    types: burnRequestTypes,\n    primaryType: \"BurnRequest\",\n    message,\n  });\n\n  const { v, r, s } = parseSignature(serialized);\n\n  return {\n    v: Number(v),\n    r,\n    s,\n    serialized,\n  };\n}\n\nexport async function verifyBurnRequest(\n  domain: PointTokenDomainConfig,\n  message: BurnRequest,\n  signature: Hex,\n  expectedBurner: Address,\n): Promise<SignatureVerification> {\n  const recoveredAddress = await recoverTypedDataAddress({\n    domain: buildDomain(domain),\n    types: burnRequestTypes,\n    primaryType: \"BurnRequest\",\n    message,\n    signature,\n  });\n\n  const isValid = getAddress(recoveredAddress) === getAddress(expectedBurner);\n\n  return { isValid, recoveredAddress };\n}\n"]}

package/dist/{chunk-BNO5SM25.cjs → chunk-BBQLGBOD.cjs}

@@ -16,14 +16,6 @@ async function getMintRequestNonce(client, pointToken, receiver) {
     args: [receiver]
   });
 }
-async function getReceiverConsentNonce(client, pointToken, receiver) {
-  return client.readContract({
-    address: pointToken,
-    abi: _chunkKRHGFUDIcjs.pointTokenAbi,
-    functionName: "nonces",
-    args: [receiver]
-  });
-}
 async function isMinter(client, pointToken, account) {
   return client.readContract({
     address: pointToken,
@@ -176,6 +168,5 @@ async function getMintFeeRecipients(client, wrapperAddress, pointToken) {
 
 
 
-
-exports.getMintRequestNonce = getMintRequestNonce; exports.getReceiverConsentNonce = getReceiverConsentNonce; exports.isMinter = isMinter; exports.getTokenName = getTokenName; exports.getIssuer = getIssuer; exports.getPointTokenBalance = getPointTokenBalance; exports.getBurnRequestNonce = getBurnRequestNonce; exports.getIssuer2 = getIssuer2; exports.issuerRegistryGetIssuerFlatAbi = issuerRegistryGetIssuerFlatAbi; exports.isActiveIssuer = isActiveIssuer; exports.verifyMintCap = verifyMintCap; exports.getPointTokenIssuer = getPointTokenIssuer; exports.getTokenCap = getTokenCap; exports.getMintFeeBps = getMintFeeBps; exports.getMintFeeRecipients = getMintFeeRecipients;
-//# sourceMappingURL=chunk-BNO5SM25.cjs.map
+exports.getMintRequestNonce = getMintRequestNonce; exports.isMinter = isMinter; exports.getTokenName = getTokenName; exports.getIssuer = getIssuer; exports.getPointTokenBalance = getPointTokenBalance; exports.getBurnRequestNonce = getBurnRequestNonce; exports.getIssuer2 = getIssuer2; exports.issuerRegistryGetIssuerFlatAbi = issuerRegistryGetIssuerFlatAbi; exports.isActiveIssuer = isActiveIssuer; exports.verifyMintCap = verifyMintCap; exports.getPointTokenIssuer = getPointTokenIssuer; exports.getTokenCap = getTokenCap; exports.getMintFeeBps = getMintFeeBps; exports.getMintFeeRecipients = getMintFeeRecipients;
+//# sourceMappingURL=chunk-BBQLGBOD.cjs.map