@pafi-dev/issuer-postgres 0.3.0 → 0.4.0

package/README.md

@@ -259,16 +259,28 @@ export class LockSweepService {
   @Interval(5 * 60 * 1000)
   async sweep() {
     try {
-      const swept = await this.ledger.markExpiredLocks();
-      if (swept > 0) this.logger.debug(`expired ${swept} mint locks`);
+      const sweptLocks = await this.ledger.markExpiredLocks();
+      const sweptCredits = await this.ledger.markExpiredCredits();
+      if (sweptLocks > 0 || sweptCredits > 0) {
+        this.logger.debug(
+          `expired ${sweptLocks} mint locks, ${sweptCredits} pending credits`,
+        );
+      }
     } catch (err) {
-      this.logger.error("lock sweep failed", err);
+      this.logger.error("ledger sweep failed", err);
     }
   }
 }
 ```
 
-Also wire `markExpiredCredits()` (PendingCredit equivalent) the same way.
+**Audit PACI5-20** — both `markExpiredLocks()` (mint side) and
+`markExpiredCredits()` (burn/credit side) MUST be wired. Without the
+credit-side sweep, abandoned PendingCredit reservations accumulate
+forever and `findPendingCreditLockId` would risk attributing fresh
+on-chain burns to stale (user, amount) rows. As of
+`@pafi-dev/issuer-postgres@0.4.0` the lookup also filters
+`expires_at > now()` and orders newest-first as defense-in-depth in
+case the sweep tick is delayed.
 
 ### 4. Required indexes
 

package/dist/entities/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/entities/index.ts","../../src/entities/locked-mint.entity.ts","../../src/entities/pending-credit.entity.ts","../../src/entities/user-balance.entity.ts","../../src/entities/ledger-journal.entity.ts","../../src/entities/indexer-cursor.entity.ts","../../src/entities/redemption-history.entity.ts"],"sourcesContent":["export { LockedMintEntity } from \"./locked-mint.entity\";\nexport {\n  PendingCreditEntity,\n  type PendingCreditStatus,\n} from \"./pending-credit.entity\";\nexport { UserBalanceEntity } from \"./user-balance.entity\";\nexport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nexport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nexport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\nimport { LockedMintEntity } from \"./locked-mint.entity\";\nimport { PendingCreditEntity } from \"./pending-credit.entity\";\nimport { UserBalanceEntity } from \"./user-balance.entity\";\nimport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nimport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nimport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\n/**\n * All entities in one array — drop into TypeORM's `entities` config or\n * NestJS's `TypeOrmModule.forFeature(PAFI_ENTITIES)`.\n */\nexport const PAFI_ENTITIES = [\n  LockedMintEntity,\n  PendingCreditEntity,\n  UserBalanceEntity,\n  LedgerJournalEntity,\n  IndexerCursorEntity,\n  RedemptionHistoryEntity,\n] as const;\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\nimport type { MintingStatus } from \"@pafi-dev/issuer\";\n\n/**\n * A reservation against a user's off-chain balance.\n *\n * Lifecycle:\n *   PENDING ── PointIndexer matches Mint event ──▶ MINTED\n *      │\n *      ├── deadline elapsed ────────────────────▶ EXPIRED\n *      │\n *      └── tx reverted ─────────────────────────▶ FAILED\n *\n * Index policy — the three composite indexes below mirror the three\n * query shapes the SDK runs against this table. They are the source\n * of truth for the schema; the migrations create indexes with the\n * exact same names so `synchronize: false` deployments do not drift.\n *\n *   IDX_locked_mint_user_token_status_expires\n *     Hot path: `sumPendingLocks` inside `getBalance` + `lockForMinting`.\n *     4-col covering index — `expires_at` in the range scan instead\n *     of post-filtered from the heap.\n *\n *   IDX_locked_mint_user_token_amount_status\n *     Hot path: `PointIndexer.pickMatchingLock` + the lock-resolution\n *     `findOne` inside `deductBalance`. `amount` is the\n *     selectivity-critical predicate.\n *\n *   IDX_locked_mint_pending_expires\n *     Sweep path: `markExpiredLocks` UPDATE. Partial\n *     `WHERE status = 'PENDING'` keeps the index small — only the\n *     rows the sweep can touch live in the index.\n *\n *   IDX_locked_mint_user_op_hash\n *     Bundler-receipt fallback in `statusHandlers` — point lookup\n *     by userOpHash.\n */\n@Entity({ name: \"locked_mint_requests\" })\n@Index(\"IDX_locked_mint_user_token_status_expires\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"status\",\n  \"expiresAt\",\n])\n@Index(\"IDX_locked_mint_user_token_amount_status\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"amount\",\n  \"status\",\n])\n@Index(\"IDX_locked_mint_pending_expires\", [\"expiresAt\"], {\n  where: \"\\\"status\\\" = 'PENDING'\",\n})\n@Index(\"IDX_locked_mint_user_op_hash\", [\"userOpHash\"])\nexport class LockedMintEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: MintingStatus;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /**\n   * ERC-4337 userOpHash returned by the bundler at /claim/submit.\n   * Bound to the lock so `/claim/status` can fall back to the bundler\n   * receipt — required when multiple PENDING locks share the same\n   * `amount` (PointIndexer matches by amount and can pick the wrong\n   * sibling lock).\n   */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\nexport type PendingCreditStatus = \"PENDING\" | \"RESOLVED\" | \"EXPIRED\";\n\n/**\n * Reverse flow — user burns on-chain PT, `BurnIndexer` observes\n * `Transfer(user → 0x0)`, the credit is settled to the off-chain ledger.\n *\n * Lifecycle:\n *   PENDING ── Burn tx observed by indexer ──▶ RESOLVED\n *      │\n *      └── deadline elapsed ────────────────▶ EXPIRED\n *\n * The credit is reserved BEFORE the UserOp is submitted so the\n * indexer can correlate `(user, amount, token)` back to the off-chain\n * row when the burn lands.\n */\n@Entity({ name: \"pending_credits\" })\n@Index([\"userAddress\", \"status\"])\n@Index([\"txHash\"])\nexport class PendingCreditEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: PendingCreditStatus;\n\n  /** On-chain burn tx that settled this credit. Null until indexer resolves. */\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /** ERC-4337 userOpHash bound at /redeem/submit. See `LockedMintEntity`. */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({\n    name: \"resolved_at\",\n    type: \"timestamp with time zone\",\n    nullable: true,\n  })\n  resolvedAt?: Date | null;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Off-chain point balance per `(userAddress, tokenAddress)`.\n *\n * `balance` is the **total** owned; pending reservations live in\n * `LockedMintEntity`. Available balance = total − sum(PENDING locks)\n * — `getBalance` in `PostgresPointLedger` does this subtraction\n * inside a transaction so reads are race-free.\n *\n * All amounts are `numeric(78, 0)` for full bigint precision (uint256\n * fits in 78 decimal digits). TypeORM transforms bigint ↔ string at\n * the boundary; in JS/TS code we always deal with `bigint`.\n */\n@Entity({ name: \"user_balances\" })\nexport class UserBalanceEntity {\n  @PrimaryColumn({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @PrimaryColumn({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"balance\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    default: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  balance!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Append-only audit trail for every balance mutation. Used for\n * reconciliation, customer support, and regulatory reporting.\n *\n * Sign convention:\n *   - positive `delta` — credit (merchant award, refund, manual top-up)\n *   - negative `delta` — debit (mint confirmation against the off-chain\n *     balance; `txHash` references the on-chain Mint event)\n *\n * Idempotency invariant: for any indexer-driven reason (e.g.\n * `MINT_CONFIRMED`, `BURN_FOR_CREDIT`) the tuple\n * `(user_address, token_address, tx_hash, reason)` is unique. Enforced\n * by a partial unique index that only fires when `tx_hash IS NOT NULL`,\n * so off-chain reasons (e.g. `AIRDROP`) without a tx hash are\n * unaffected. Last-line defense against double-deduct / double-credit\n * when the indexer replays an event (reorg, restart, duplicate pod).\n *\n * The `token_address` column is part of the tuple to prevent the\n * audit PACI5-7 collapse: a single transaction that mints two\n * different PointTokens for the same user (batched EIP-7702 claim or\n * Pimlico bundler grouping two single-mint UserOps into one bundle)\n * would otherwise have its second debit silently shadowed by the\n * first token's journal row, while `PointIndexer.finalize` still\n * flipped the second lock to MINTED — silent off-chain debit miss.\n */\n@Entity({ name: \"ledger_journal\" })\n@Index([\"userAddress\", \"createdAt\"])\n@Index(\n  \"UQ_ledger_journal_user_token_tx_reason\",\n  [\"userAddress\", \"tokenAddress\", \"txHash\", \"reason\"],\n  {\n    unique: true,\n    where: '\"tx_hash\" IS NOT NULL',\n  },\n)\nexport class LedgerJournalEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"delta\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  delta!: bigint;\n\n  @Column({ name: \"reason\", type: \"varchar\", length: 128 })\n  reason!: string;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Persistent cursor for `PointIndexer` / `BurnIndexer`. Multiple rows\n * coexist keyed by `id` (e.g. `default` for the mint indexer,\n * `burn:0x...` for each per-token burn indexer).\n *\n * Stores the **next** block to scan, not the last processed one.\n * Indexer reads on startup and resumes from there.\n */\n@Entity({ name: \"indexer_cursors\" })\nexport class IndexerCursorEntity {\n  @PrimaryColumn({ type: \"varchar\", length: 64 })\n  id!: string;\n\n  @Column({\n    name: \"next_block\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  nextBlock!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Per-user redemption history row. One row per successful initiate\n * (call to `RedemptionService.recordSuccessfulInitiate`).\n *\n * `sumRedeemedSince` does a SUM(amount) WHERE created_at >= :since\n * which uses the (user_address, created_at) composite index. We do\n * NOT prune old rows automatically — they're cheap and useful for\n * audit. Issuers can add a periodic VACUUM/partition policy if the\n * table grows past ~100M rows.\n *\n * Amounts are `numeric(78, 0)` for full bigint precision.\n */\n@Entity({ name: \"redemption_history\" })\n@Index(\"idx_redemption_history_user_created\", [\n  \"userAddress\",\n  \"createdAtUnixSec\",\n])\nexport class RedemptionHistoryEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42, nullable: true })\n  tokenAddress!: string | null;\n\n  @Column({\n    name: \"amount_pt\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amountPt!: bigint;\n\n  /**\n   * Caller-controlled timestamp (unix seconds). Stored as integer, not\n   * timestamptz, because the evaluator works in unix seconds and we want\n   * the same time domain on read + write — no surprise tz conversions.\n   */\n  @Column({ name: \"created_at_unix_sec\", type: \"bigint\" })\n  createdAtUnixSec!: string;\n\n  /**\n   * Optional pointer back to the burn-flow reservation (PendingCredit.id).\n   * Lets ops trace a redemption-history row to the underlying lock.\n   */\n  @Column({\n    name: \"reservation_id\",\n    type: \"varchar\",\n    length: 64,\n    nullable: true,\n  })\n  reservationId!: string | null;\n\n  @CreateDateColumn({ name: \"row_created_at\", type: \"timestamptz\" })\n  rowCreatedAt!: Date;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,qBAMO;AAsDA,IAAM,mBAAN,MAAuB;AAAA,EAE5B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AAAA,EAeA;AACF;AAnDE;AAAA,MADC,uCAAuB,MAAM;AAAA,GADnB,iBAEX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,iBAKX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,iBAQX;AAYA;AAAA,MAVC,uBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,iBAoBX;AAQA;AAAA,MANC,uBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,iBA4BX;AAGA;AAAA,MADC,iCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA9B7B,iBA+BX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GAjCrD,iBAkCX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GApC7D,iBAqCX;AAeA;AAAA,MANC,uBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAnDU,iBAoDX;AApDW,mBAAN;AAAA,MAjBN,uBAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,MACvC,sBAAM,6CAA6C;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,MACA,sBAAM,4CAA4C;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,MACA,sBAAM,mCAAmC,CAAC,WAAW,GAAG;AAAA,IACvD,OAAO;AAAA,EACT,CAAC;AAAA,MACA,sBAAM,gCAAgC,CAAC,YAAY,CAAC;AAAA,GACxC;;;AC5Db,IAAAA,kBAMO;AAoBA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAIA;AAAA,EASA;AAAA,EAGA;AAAA,EAGA;AAAA,EAOA;AACF;AArDE;AAAA,MADC,wCAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAQA;AAAA,MANC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,oBA4BX;AAIA;AAAA,MADC,wBAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GA/B7D,oBAgCX;AASA;AAAA,MANC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAxCU,oBAyCX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA3C7B,oBA4CX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GA9CrD,oBA+CX;AAOA;AAAA,MALC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,EACZ,CAAC;AAAA,GArDU,oBAsDX;AAtDW,sBAAN;AAAA,MAHN,wBAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,MAClC,uBAAM,CAAC,eAAe,QAAQ,CAAC;AAAA,MAC/B,uBAAM,CAAC,QAAQ,CAAC;AAAA,GACJ;;;AC1Bb,IAAAC,kBAAgE;AAezD,IAAM,oBAAN,MAAwB;AAAA,EAE7B;AAAA,EAGA;AAAA,EAaA;AAAA,EAGA;AACF;AApBE;AAAA,MADC,+BAAc,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADzD,kBAEX;AAGA;AAAA,MADC,+BAAc,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJ1D,kBAKX;AAaA;AAAA,MAXC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAjBU,kBAkBX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GApB7B,kBAqBX;AArBW,oBAAN;AAAA,MADN,wBAAO,EAAE,MAAM,gBAAgB,CAAC;AAAA,GACpB;;;ACfb,IAAAC,kBAMO;AAqCA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AACF;AA5BE;AAAA,MADC,wCAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,CAAC;AAAA,GAtB7C,oBAuBX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAzB7D,oBA0BX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA5B7B,oBA6BX;AA7BW,sBAAN;AAAA,MAVN,wBAAO,EAAE,MAAM,iBAAiB,CAAC;AAAA,MACjC,uBAAM,CAAC,eAAe,WAAW,CAAC;AAAA,MAClC;AAAA,IACC;AAAA,IACA,CAAC,eAAe,gBAAgB,UAAU,QAAQ;AAAA,IAClD;AAAA,MACE,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,EACF;AAAA,GACa;;;AC3Cb,IAAAC,kBAAgE;AAWzD,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAYA;AAAA,EAGA;AACF;AAhBE;AAAA,MADC,+BAAc,EAAE,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADnC,oBAEX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAbU,oBAcX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GAhB7B,oBAiBX;AAjBW,sBAAN;AAAA,MADN,wBAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,GACtB;;;ACXb,IAAAC,kBAMO;AAmBA,IAAM,0BAAN,MAA8B;AAAA,EAEnC;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAYA;AAAA,EAGA;AACF;AA1CE;AAAA,MADC,wCAAuB,MAAM;AAAA,GADnB,wBAEX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,wBAKX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAPnE,wBAQX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,wBAoBX;AAQA;AAAA,MADC,wBAAO,EAAE,MAAM,uBAAuB,MAAM,SAAS,CAAC;AAAA,GA3B5C,wBA4BX;AAYA;AAAA,MANC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAvCU,wBAwCX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,kBAAkB,MAAM,cAAc,CAAC;AAAA,GA1CtD,wBA2CX;AA3CW,0BAAN;AAAA,MALN,wBAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,MACrC,uBAAM,uCAAuC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF,CAAC;AAAA,GACY;;;ANJN,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":["import_typeorm","import_typeorm","import_typeorm","import_typeorm","import_typeorm"]}
+{"version":3,"sources":["../../src/entities/index.ts","../../src/entities/locked-mint.entity.ts","../../src/entities/pending-credit.entity.ts","../../src/entities/user-balance.entity.ts","../../src/entities/ledger-journal.entity.ts","../../src/entities/indexer-cursor.entity.ts","../../src/entities/redemption-history.entity.ts"],"sourcesContent":["export { LockedMintEntity } from \"./locked-mint.entity\";\nexport {\n  PendingCreditEntity,\n  type PendingCreditStatus,\n} from \"./pending-credit.entity\";\nexport { UserBalanceEntity } from \"./user-balance.entity\";\nexport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nexport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nexport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\nimport { LockedMintEntity } from \"./locked-mint.entity\";\nimport { PendingCreditEntity } from \"./pending-credit.entity\";\nimport { UserBalanceEntity } from \"./user-balance.entity\";\nimport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nimport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nimport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\n/**\n * All entities in one array — drop into TypeORM's `entities` config or\n * NestJS's `TypeOrmModule.forFeature(PAFI_ENTITIES)`.\n */\nexport const PAFI_ENTITIES = [\n  LockedMintEntity,\n  PendingCreditEntity,\n  UserBalanceEntity,\n  LedgerJournalEntity,\n  IndexerCursorEntity,\n  RedemptionHistoryEntity,\n] as const;\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\nimport type { MintingStatus } from \"@pafi-dev/issuer\";\n\n/**\n * A reservation against a user's off-chain balance.\n *\n * Lifecycle:\n *   PENDING ── PointIndexer matches Mint event ──▶ MINTED\n *      │\n *      ├── deadline elapsed ────────────────────▶ EXPIRED\n *      │\n *      └── tx reverted ─────────────────────────▶ FAILED\n *\n * Index policy — the three composite indexes below mirror the three\n * query shapes the SDK runs against this table. They are the source\n * of truth for the schema; the migrations create indexes with the\n * exact same names so `synchronize: false` deployments do not drift.\n *\n *   IDX_locked_mint_user_token_status_expires\n *     Hot path: `sumPendingLocks` inside `getBalance` + `lockForMinting`.\n *     4-col covering index — `expires_at` in the range scan instead\n *     of post-filtered from the heap.\n *\n *   IDX_locked_mint_user_token_amount_status\n *     Hot path: `PointIndexer.pickMatchingLock` + the lock-resolution\n *     `findOne` inside `deductBalance`. `amount` is the\n *     selectivity-critical predicate.\n *\n *   IDX_locked_mint_pending_expires\n *     Sweep path: `markExpiredLocks` UPDATE. Partial\n *     `WHERE status = 'PENDING'` keeps the index small — only the\n *     rows the sweep can touch live in the index.\n *\n *   IDX_locked_mint_user_op_hash\n *     Bundler-receipt fallback in `statusHandlers` — point lookup\n *     by userOpHash.\n */\n@Entity({ name: \"locked_mint_requests\" })\n@Index(\"IDX_locked_mint_user_token_status_expires\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"status\",\n  \"expiresAt\",\n])\n@Index(\"IDX_locked_mint_user_token_amount_status\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"amount\",\n  \"status\",\n])\n@Index(\"IDX_locked_mint_pending_expires\", [\"expiresAt\"], {\n  where: \"\\\"status\\\" = 'PENDING'\",\n})\n@Index(\"IDX_locked_mint_user_op_hash\", [\"userOpHash\"])\nexport class LockedMintEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: MintingStatus;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /**\n   * ERC-4337 userOpHash returned by the bundler at /claim/submit.\n   * Bound to the lock so `/claim/status` can fall back to the bundler\n   * receipt — required when multiple PENDING locks share the same\n   * `amount` (PointIndexer matches by amount and can pick the wrong\n   * sibling lock).\n   */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\nexport type PendingCreditStatus = \"PENDING\" | \"RESOLVED\" | \"EXPIRED\";\n\n/**\n * Reverse flow — user burns on-chain PT, `BurnIndexer` observes\n * `Transfer(user → 0x0)`, the credit is settled to the off-chain ledger.\n *\n * Lifecycle:\n *   PENDING ── Burn tx observed by indexer ──▶ RESOLVED\n *      │\n *      └── deadline elapsed ────────────────▶ EXPIRED\n *\n * The credit is reserved BEFORE the UserOp is submitted so the\n * indexer can correlate `(user, amount, token)` back to the off-chain\n * row when the burn lands.\n */\n@Entity({ name: \"pending_credits\" })\n@Index([\"userAddress\", \"status\"])\n@Index([\"txHash\"])\nexport class PendingCreditEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: PendingCreditStatus;\n\n  /** On-chain burn tx that settled this credit. Null until indexer resolves. */\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /** ERC-4337 userOpHash bound at /redeem/submit. See `LockedMintEntity`. */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({\n    name: \"resolved_at\",\n    type: \"timestamp with time zone\",\n    nullable: true,\n  })\n  resolvedAt?: Date | null;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Off-chain point balance per `(userAddress, tokenAddress)`.\n *\n * `balance` is the **total** owned; pending reservations live in\n * `LockedMintEntity`. Available balance = total − sum(PENDING locks)\n * — `getBalance` in `PostgresPointLedger` does this subtraction\n * inside a transaction so reads are race-free.\n *\n * All amounts are `numeric(78, 0)` for full bigint precision (uint256\n * fits in 78 decimal digits). TypeORM transforms bigint ↔ string at\n * the boundary; in JS/TS code we always deal with `bigint`.\n */\n@Entity({ name: \"user_balances\" })\nexport class UserBalanceEntity {\n  @PrimaryColumn({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @PrimaryColumn({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"balance\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    default: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  balance!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Append-only audit trail for every balance mutation. Used for\n * reconciliation, customer support, and regulatory reporting.\n *\n * Sign convention:\n *   - positive `delta` — credit (merchant award, refund, manual top-up)\n *   - negative `delta` — debit (mint confirmation against the off-chain\n *     balance; `txHash` references the on-chain Mint event)\n *\n * Idempotency invariant: for any indexer-driven reason (e.g.\n * `MINT_CONFIRMED`, `BURN_FOR_CREDIT`) the tuple\n * `(user_address, token_address, tx_hash, reason)` is unique. Enforced\n * by a partial unique index that only fires when `tx_hash IS NOT NULL`,\n * so off-chain reasons (e.g. `AIRDROP`) without a tx hash are\n * unaffected. Last-line defense against double-deduct / double-credit\n * when the indexer replays an event (reorg, restart, duplicate pod).\n *\n */\n@Entity({ name: \"ledger_journal\" })\n@Index([\"userAddress\", \"createdAt\"])\n@Index(\n  \"UQ_ledger_journal_user_token_tx_reason\",\n  [\"userAddress\", \"tokenAddress\", \"txHash\", \"reason\"],\n  {\n    unique: true,\n    where: '\"tx_hash\" IS NOT NULL',\n  },\n)\nexport class LedgerJournalEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"delta\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  delta!: bigint;\n\n  @Column({ name: \"reason\", type: \"varchar\", length: 128 })\n  reason!: string;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Persistent cursor for `PointIndexer` / `BurnIndexer`. Multiple rows\n * coexist keyed by `id` (e.g. `default` for the mint indexer,\n * `burn:0x...` for each per-token burn indexer).\n *\n * Stores the **next** block to scan, not the last processed one.\n * Indexer reads on startup and resumes from there.\n */\n@Entity({ name: \"indexer_cursors\" })\nexport class IndexerCursorEntity {\n  @PrimaryColumn({ type: \"varchar\", length: 64 })\n  id!: string;\n\n  @Column({\n    name: \"next_block\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  nextBlock!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Per-user redemption history row. One row per successful initiate\n * (call to `RedemptionService.recordSuccessfulInitiate`).\n *\n * `sumRedeemedSince` does a SUM(amount) WHERE created_at >= :since\n * which uses the (user_address, created_at) composite index. We do\n * NOT prune old rows automatically — they're cheap and useful for\n * audit. Issuers can add a periodic VACUUM/partition policy if the\n * table grows past ~100M rows.\n *\n * Amounts are `numeric(78, 0)` for full bigint precision.\n */\n@Entity({ name: \"redemption_history\" })\n@Index(\"idx_redemption_history_user_created\", [\n  \"userAddress\",\n  \"createdAtUnixSec\",\n])\nexport class RedemptionHistoryEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42, nullable: true })\n  tokenAddress!: string | null;\n\n  @Column({\n    name: \"amount_pt\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amountPt!: bigint;\n\n  /**\n   * Caller-controlled timestamp (unix seconds). Stored as integer, not\n   * timestamptz, because the evaluator works in unix seconds and we want\n   * the same time domain on read + write — no surprise tz conversions.\n   */\n  @Column({ name: \"created_at_unix_sec\", type: \"bigint\" })\n  createdAtUnixSec!: string;\n\n  /**\n   * Optional pointer back to the burn-flow reservation (PendingCredit.id).\n   * Lets ops trace a redemption-history row to the underlying lock.\n   */\n  @Column({\n    name: \"reservation_id\",\n    type: \"varchar\",\n    length: 64,\n    nullable: true,\n  })\n  reservationId!: string | null;\n\n  @CreateDateColumn({ name: \"row_created_at\", type: \"timestamptz\" })\n  rowCreatedAt!: Date;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,qBAMO;AAsDA,IAAM,mBAAN,MAAuB;AAAA,EAE5B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AAAA,EAeA;AACF;AAnDE;AAAA,MADC,uCAAuB,MAAM;AAAA,GADnB,iBAEX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,iBAKX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,iBAQX;AAYA;AAAA,MAVC,uBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,iBAoBX;AAQA;AAAA,MANC,uBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,iBA4BX;AAGA;AAAA,MADC,iCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA9B7B,iBA+BX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GAjCrD,iBAkCX;AAGA;AAAA,MADC,uBAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GApC7D,iBAqCX;AAeA;AAAA,MANC,uBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAnDU,iBAoDX;AApDW,mBAAN;AAAA,MAjBN,uBAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,MACvC,sBAAM,6CAA6C;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,MACA,sBAAM,4CAA4C;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,MACA,sBAAM,mCAAmC,CAAC,WAAW,GAAG;AAAA,IACvD,OAAO;AAAA,EACT,CAAC;AAAA,MACA,sBAAM,gCAAgC,CAAC,YAAY,CAAC;AAAA,GACxC;;;AC5Db,IAAAA,kBAMO;AAoBA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAIA;AAAA,EASA;AAAA,EAGA;AAAA,EAGA;AAAA,EAOA;AACF;AArDE;AAAA,MADC,wCAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAQA;AAAA,MANC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,oBA4BX;AAIA;AAAA,MADC,wBAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GA/B7D,oBAgCX;AASA;AAAA,MANC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAxCU,oBAyCX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA3C7B,oBA4CX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GA9CrD,oBA+CX;AAOA;AAAA,MALC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,EACZ,CAAC;AAAA,GArDU,oBAsDX;AAtDW,sBAAN;AAAA,MAHN,wBAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,MAClC,uBAAM,CAAC,eAAe,QAAQ,CAAC;AAAA,MAC/B,uBAAM,CAAC,QAAQ,CAAC;AAAA,GACJ;;;AC1Bb,IAAAC,kBAAgE;AAezD,IAAM,oBAAN,MAAwB;AAAA,EAE7B;AAAA,EAGA;AAAA,EAaA;AAAA,EAGA;AACF;AApBE;AAAA,MADC,+BAAc,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADzD,kBAEX;AAGA;AAAA,MADC,+BAAc,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJ1D,kBAKX;AAaA;AAAA,MAXC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAjBU,kBAkBX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GApB7B,kBAqBX;AArBW,oBAAN;AAAA,MADN,wBAAO,EAAE,MAAM,gBAAgB,CAAC;AAAA,GACpB;;;ACfb,IAAAC,kBAMO;AA8BA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AACF;AA5BE;AAAA,MADC,wCAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,CAAC;AAAA,GAtB7C,oBAuBX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAzB7D,oBA0BX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA5B7B,oBA6BX;AA7BW,sBAAN;AAAA,MAVN,wBAAO,EAAE,MAAM,iBAAiB,CAAC;AAAA,MACjC,uBAAM,CAAC,eAAe,WAAW,CAAC;AAAA,MAClC;AAAA,IACC;AAAA,IACA,CAAC,eAAe,gBAAgB,UAAU,QAAQ;AAAA,IAClD;AAAA,MACE,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,EACF;AAAA,GACa;;;ACpCb,IAAAC,kBAAgE;AAWzD,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAYA;AAAA,EAGA;AACF;AAhBE;AAAA,MADC,+BAAc,EAAE,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADnC,oBAEX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAbU,oBAcX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GAhB7B,oBAiBX;AAjBW,sBAAN;AAAA,MADN,wBAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,GACtB;;;ACXb,IAAAC,kBAMO;AAmBA,IAAM,0BAAN,MAA8B;AAAA,EAEnC;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAYA;AAAA,EAGA;AACF;AA1CE;AAAA,MADC,wCAAuB,MAAM;AAAA,GADnB,wBAEX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,wBAKX;AAGA;AAAA,MADC,wBAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAPnE,wBAQX;AAYA;AAAA,MAVC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,wBAoBX;AAQA;AAAA,MADC,wBAAO,EAAE,MAAM,uBAAuB,MAAM,SAAS,CAAC;AAAA,GA3B5C,wBA4BX;AAYA;AAAA,MANC,wBAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAvCU,wBAwCX;AAGA;AAAA,MADC,kCAAiB,EAAE,MAAM,kBAAkB,MAAM,cAAc,CAAC;AAAA,GA1CtD,wBA2CX;AA3CW,0BAAN;AAAA,MALN,wBAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,MACrC,uBAAM,uCAAuC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF,CAAC;AAAA,GACY;;;ANJN,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":["import_typeorm","import_typeorm","import_typeorm","import_typeorm","import_typeorm"]}

package/dist/entities/index.d.cts

@@ -118,13 +118,6 @@ declare class UserBalanceEntity {
  * unaffected. Last-line defense against double-deduct / double-credit
  * when the indexer replays an event (reorg, restart, duplicate pod).
  *
- * The `token_address` column is part of the tuple to prevent the
- * audit PACI5-7 collapse: a single transaction that mints two
- * different PointTokens for the same user (batched EIP-7702 claim or
- * Pimlico bundler grouping two single-mint UserOps into one bundle)
- * would otherwise have its second debit silently shadowed by the
- * first token's journal row, while `PointIndexer.finalize` still
- * flipped the second lock to MINTED — silent off-chain debit miss.
  */
 declare class LedgerJournalEntity {
     id: string;

package/dist/entities/index.d.ts

@@ -118,13 +118,6 @@ declare class UserBalanceEntity {
  * unaffected. Last-line defense against double-deduct / double-credit
  * when the indexer replays an event (reorg, restart, duplicate pod).
  *
- * The `token_address` column is part of the tuple to prevent the
- * audit PACI5-7 collapse: a single transaction that mints two
- * different PointTokens for the same user (batched EIP-7702 claim or
- * Pimlico bundler grouping two single-mint UserOps into one bundle)
- * would otherwise have its second debit silently shadowed by the
- * first token's journal row, while `PointIndexer.finalize` still
- * flipped the second lock to MINTED — silent off-chain debit miss.
  */
 declare class LedgerJournalEntity {
     id: string;

package/dist/entities/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/entities/locked-mint.entity.ts","../../src/entities/pending-credit.entity.ts","../../src/entities/user-balance.entity.ts","../../src/entities/ledger-journal.entity.ts","../../src/entities/indexer-cursor.entity.ts","../../src/entities/redemption-history.entity.ts","../../src/entities/index.ts"],"sourcesContent":["import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\nimport type { MintingStatus } from \"@pafi-dev/issuer\";\n\n/**\n * A reservation against a user's off-chain balance.\n *\n * Lifecycle:\n *   PENDING ── PointIndexer matches Mint event ──▶ MINTED\n *      │\n *      ├── deadline elapsed ────────────────────▶ EXPIRED\n *      │\n *      └── tx reverted ─────────────────────────▶ FAILED\n *\n * Index policy — the three composite indexes below mirror the three\n * query shapes the SDK runs against this table. They are the source\n * of truth for the schema; the migrations create indexes with the\n * exact same names so `synchronize: false` deployments do not drift.\n *\n *   IDX_locked_mint_user_token_status_expires\n *     Hot path: `sumPendingLocks` inside `getBalance` + `lockForMinting`.\n *     4-col covering index — `expires_at` in the range scan instead\n *     of post-filtered from the heap.\n *\n *   IDX_locked_mint_user_token_amount_status\n *     Hot path: `PointIndexer.pickMatchingLock` + the lock-resolution\n *     `findOne` inside `deductBalance`. `amount` is the\n *     selectivity-critical predicate.\n *\n *   IDX_locked_mint_pending_expires\n *     Sweep path: `markExpiredLocks` UPDATE. Partial\n *     `WHERE status = 'PENDING'` keeps the index small — only the\n *     rows the sweep can touch live in the index.\n *\n *   IDX_locked_mint_user_op_hash\n *     Bundler-receipt fallback in `statusHandlers` — point lookup\n *     by userOpHash.\n */\n@Entity({ name: \"locked_mint_requests\" })\n@Index(\"IDX_locked_mint_user_token_status_expires\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"status\",\n  \"expiresAt\",\n])\n@Index(\"IDX_locked_mint_user_token_amount_status\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"amount\",\n  \"status\",\n])\n@Index(\"IDX_locked_mint_pending_expires\", [\"expiresAt\"], {\n  where: \"\\\"status\\\" = 'PENDING'\",\n})\n@Index(\"IDX_locked_mint_user_op_hash\", [\"userOpHash\"])\nexport class LockedMintEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: MintingStatus;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /**\n   * ERC-4337 userOpHash returned by the bundler at /claim/submit.\n   * Bound to the lock so `/claim/status` can fall back to the bundler\n   * receipt — required when multiple PENDING locks share the same\n   * `amount` (PointIndexer matches by amount and can pick the wrong\n   * sibling lock).\n   */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\nexport type PendingCreditStatus = \"PENDING\" | \"RESOLVED\" | \"EXPIRED\";\n\n/**\n * Reverse flow — user burns on-chain PT, `BurnIndexer` observes\n * `Transfer(user → 0x0)`, the credit is settled to the off-chain ledger.\n *\n * Lifecycle:\n *   PENDING ── Burn tx observed by indexer ──▶ RESOLVED\n *      │\n *      └── deadline elapsed ────────────────▶ EXPIRED\n *\n * The credit is reserved BEFORE the UserOp is submitted so the\n * indexer can correlate `(user, amount, token)` back to the off-chain\n * row when the burn lands.\n */\n@Entity({ name: \"pending_credits\" })\n@Index([\"userAddress\", \"status\"])\n@Index([\"txHash\"])\nexport class PendingCreditEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: PendingCreditStatus;\n\n  /** On-chain burn tx that settled this credit. Null until indexer resolves. */\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /** ERC-4337 userOpHash bound at /redeem/submit. See `LockedMintEntity`. */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({\n    name: \"resolved_at\",\n    type: \"timestamp with time zone\",\n    nullable: true,\n  })\n  resolvedAt?: Date | null;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Off-chain point balance per `(userAddress, tokenAddress)`.\n *\n * `balance` is the **total** owned; pending reservations live in\n * `LockedMintEntity`. Available balance = total − sum(PENDING locks)\n * — `getBalance` in `PostgresPointLedger` does this subtraction\n * inside a transaction so reads are race-free.\n *\n * All amounts are `numeric(78, 0)` for full bigint precision (uint256\n * fits in 78 decimal digits). TypeORM transforms bigint ↔ string at\n * the boundary; in JS/TS code we always deal with `bigint`.\n */\n@Entity({ name: \"user_balances\" })\nexport class UserBalanceEntity {\n  @PrimaryColumn({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @PrimaryColumn({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"balance\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    default: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  balance!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Append-only audit trail for every balance mutation. Used for\n * reconciliation, customer support, and regulatory reporting.\n *\n * Sign convention:\n *   - positive `delta` — credit (merchant award, refund, manual top-up)\n *   - negative `delta` — debit (mint confirmation against the off-chain\n *     balance; `txHash` references the on-chain Mint event)\n *\n * Idempotency invariant: for any indexer-driven reason (e.g.\n * `MINT_CONFIRMED`, `BURN_FOR_CREDIT`) the tuple\n * `(user_address, token_address, tx_hash, reason)` is unique. Enforced\n * by a partial unique index that only fires when `tx_hash IS NOT NULL`,\n * so off-chain reasons (e.g. `AIRDROP`) without a tx hash are\n * unaffected. Last-line defense against double-deduct / double-credit\n * when the indexer replays an event (reorg, restart, duplicate pod).\n *\n * The `token_address` column is part of the tuple to prevent the\n * audit PACI5-7 collapse: a single transaction that mints two\n * different PointTokens for the same user (batched EIP-7702 claim or\n * Pimlico bundler grouping two single-mint UserOps into one bundle)\n * would otherwise have its second debit silently shadowed by the\n * first token's journal row, while `PointIndexer.finalize` still\n * flipped the second lock to MINTED — silent off-chain debit miss.\n */\n@Entity({ name: \"ledger_journal\" })\n@Index([\"userAddress\", \"createdAt\"])\n@Index(\n  \"UQ_ledger_journal_user_token_tx_reason\",\n  [\"userAddress\", \"tokenAddress\", \"txHash\", \"reason\"],\n  {\n    unique: true,\n    where: '\"tx_hash\" IS NOT NULL',\n  },\n)\nexport class LedgerJournalEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"delta\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  delta!: bigint;\n\n  @Column({ name: \"reason\", type: \"varchar\", length: 128 })\n  reason!: string;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Persistent cursor for `PointIndexer` / `BurnIndexer`. Multiple rows\n * coexist keyed by `id` (e.g. `default` for the mint indexer,\n * `burn:0x...` for each per-token burn indexer).\n *\n * Stores the **next** block to scan, not the last processed one.\n * Indexer reads on startup and resumes from there.\n */\n@Entity({ name: \"indexer_cursors\" })\nexport class IndexerCursorEntity {\n  @PrimaryColumn({ type: \"varchar\", length: 64 })\n  id!: string;\n\n  @Column({\n    name: \"next_block\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  nextBlock!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Per-user redemption history row. One row per successful initiate\n * (call to `RedemptionService.recordSuccessfulInitiate`).\n *\n * `sumRedeemedSince` does a SUM(amount) WHERE created_at >= :since\n * which uses the (user_address, created_at) composite index. We do\n * NOT prune old rows automatically — they're cheap and useful for\n * audit. Issuers can add a periodic VACUUM/partition policy if the\n * table grows past ~100M rows.\n *\n * Amounts are `numeric(78, 0)` for full bigint precision.\n */\n@Entity({ name: \"redemption_history\" })\n@Index(\"idx_redemption_history_user_created\", [\n  \"userAddress\",\n  \"createdAtUnixSec\",\n])\nexport class RedemptionHistoryEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42, nullable: true })\n  tokenAddress!: string | null;\n\n  @Column({\n    name: \"amount_pt\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amountPt!: bigint;\n\n  /**\n   * Caller-controlled timestamp (unix seconds). Stored as integer, not\n   * timestamptz, because the evaluator works in unix seconds and we want\n   * the same time domain on read + write — no surprise tz conversions.\n   */\n  @Column({ name: \"created_at_unix_sec\", type: \"bigint\" })\n  createdAtUnixSec!: string;\n\n  /**\n   * Optional pointer back to the burn-flow reservation (PendingCredit.id).\n   * Lets ops trace a redemption-history row to the underlying lock.\n   */\n  @Column({\n    name: \"reservation_id\",\n    type: \"varchar\",\n    length: 64,\n    nullable: true,\n  })\n  reservationId!: string | null;\n\n  @CreateDateColumn({ name: \"row_created_at\", type: \"timestamptz\" })\n  rowCreatedAt!: Date;\n}\n","export { LockedMintEntity } from \"./locked-mint.entity\";\nexport {\n  PendingCreditEntity,\n  type PendingCreditStatus,\n} from \"./pending-credit.entity\";\nexport { UserBalanceEntity } from \"./user-balance.entity\";\nexport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nexport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nexport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\nimport { LockedMintEntity } from \"./locked-mint.entity\";\nimport { PendingCreditEntity } from \"./pending-credit.entity\";\nimport { UserBalanceEntity } from \"./user-balance.entity\";\nimport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nimport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nimport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\n/**\n * All entities in one array — drop into TypeORM's `entities` config or\n * NestJS's `TypeOrmModule.forFeature(PAFI_ENTITIES)`.\n */\nexport const PAFI_ENTITIES = [\n  LockedMintEntity,\n  PendingCreditEntity,\n  UserBalanceEntity,\n  LedgerJournalEntity,\n  IndexerCursorEntity,\n  RedemptionHistoryEntity,\n] as const;\n"],"mappings":";;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAsDA,IAAM,mBAAN,MAAuB;AAAA,EAE5B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AAAA,EAeA;AACF;AAnDE;AAAA,EADC,uBAAuB,MAAM;AAAA,GADnB,iBAEX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,iBAKX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,iBAQX;AAYA;AAAA,EAVC,OAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,iBAoBX;AAQA;AAAA,EANC,OAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,iBA4BX;AAGA;AAAA,EADC,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA9B7B,iBA+BX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GAjCrD,iBAkCX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GApC7D,iBAqCX;AAeA;AAAA,EANC,OAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAnDU,iBAoDX;AApDW,mBAAN;AAAA,EAjBN,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,EACvC,MAAM,6CAA6C;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACA,MAAM,4CAA4C;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACA,MAAM,mCAAmC,CAAC,WAAW,GAAG;AAAA,IACvD,OAAO;AAAA,EACT,CAAC;AAAA,EACA,MAAM,gCAAgC,CAAC,YAAY,CAAC;AAAA,GACxC;;;AC5Db;AAAA,EACE,UAAAA;AAAA,EACA,oBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,SAAAC;AAAA,EACA,0BAAAC;AAAA,OACK;AAoBA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAIA;AAAA,EASA;AAAA,EAGA;AAAA,EAGA;AAAA,EAOA;AACF;AArDE;AAAA,EADCC,wBAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,EADCC,QAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,EAVCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAQA;AAAA,EANCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,oBA4BX;AAIA;AAAA,EADCA,QAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GA/B7D,oBAgCX;AASA;AAAA,EANCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAxCU,oBAyCX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA3C7B,oBA4CX;AAGA;AAAA,EADCD,QAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GA9CrD,oBA+CX;AAOA;AAAA,EALCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,EACZ,CAAC;AAAA,GArDU,oBAsDX;AAtDW,sBAAN;AAAA,EAHNE,QAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,EAClCC,OAAM,CAAC,eAAe,QAAQ,CAAC;AAAA,EAC/BA,OAAM,CAAC,QAAQ,CAAC;AAAA,GACJ;;;AC1Bb,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,eAAe,wBAAwB;AAezD,IAAM,oBAAN,MAAwB;AAAA,EAE7B;AAAA,EAGA;AAAA,EAaA;AAAA,EAGA;AACF;AApBE;AAAA,EADC,cAAc,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADzD,kBAEX;AAGA;AAAA,EADC,cAAc,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJ1D,kBAKX;AAaA;AAAA,EAXCC,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAjBU,kBAkBX;AAGA;AAAA,EADC,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GApB7B,kBAqBX;AArBW,oBAAN;AAAA,EADNC,QAAO,EAAE,MAAM,gBAAgB,CAAC;AAAA,GACpB;;;ACfb;AAAA,EACE,UAAAC;AAAA,EACA,oBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,SAAAC;AAAA,EACA,0BAAAC;AAAA,OACK;AAqCA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AACF;AA5BE;AAAA,EADCC,wBAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,EADCC,QAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,EAVCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,CAAC;AAAA,GAtB7C,oBAuBX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAzB7D,oBA0BX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA5B7B,oBA6BX;AA7BW,sBAAN;AAAA,EAVNC,QAAO,EAAE,MAAM,iBAAiB,CAAC;AAAA,EACjCC,OAAM,CAAC,eAAe,WAAW,CAAC;AAAA,EAClCA;AAAA,IACC;AAAA,IACA,CAAC,eAAe,gBAAgB,UAAU,QAAQ;AAAA,IAClD;AAAA,MACE,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,EACF;AAAA,GACa;;;AC3Cb,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,iBAAAC,gBAAe,oBAAAC,yBAAwB;AAWzD,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAYA;AAAA,EAGA;AACF;AAhBE;AAAA,EADCC,eAAc,EAAE,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADnC,oBAEX;AAYA;AAAA,EAVCC,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAbU,oBAcX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GAhB7B,oBAiBX;AAjBW,sBAAN;AAAA,EADNC,QAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,GACtB;;;ACXb;AAAA,EACE,UAAAC;AAAA,EACA,oBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,SAAAC;AAAA,EACA,0BAAAC;AAAA,OACK;AAmBA,IAAM,0BAAN,MAA8B;AAAA,EAEnC;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAYA;AAAA,EAGA;AACF;AA1CE;AAAA,EADCC,wBAAuB,MAAM;AAAA,GADnB,wBAEX;AAGA;AAAA,EADCC,QAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,wBAKX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAPnE,wBAQX;AAYA;AAAA,EAVCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,wBAoBX;AAQA;AAAA,EADCA,QAAO,EAAE,MAAM,uBAAuB,MAAM,SAAS,CAAC;AAAA,GA3B5C,wBA4BX;AAYA;AAAA,EANCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAvCU,wBAwCX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,kBAAkB,MAAM,cAAc,CAAC;AAAA,GA1CtD,wBA2CX;AA3CW,0BAAN;AAAA,EALNC,QAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,EACrCC,OAAM,uCAAuC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF,CAAC;AAAA,GACY;;;ACJN,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":["Column","CreateDateColumn","Entity","Index","PrimaryGeneratedColumn","PrimaryGeneratedColumn","Column","CreateDateColumn","Entity","Index","Column","Entity","Column","Entity","Column","CreateDateColumn","Entity","Index","PrimaryGeneratedColumn","PrimaryGeneratedColumn","Column","CreateDateColumn","Entity","Index","Column","Entity","PrimaryColumn","UpdateDateColumn","PrimaryColumn","Column","UpdateDateColumn","Entity","Column","CreateDateColumn","Entity","Index","PrimaryGeneratedColumn","PrimaryGeneratedColumn","Column","CreateDateColumn","Entity","Index"]}
+{"version":3,"sources":["../../src/entities/locked-mint.entity.ts","../../src/entities/pending-credit.entity.ts","../../src/entities/user-balance.entity.ts","../../src/entities/ledger-journal.entity.ts","../../src/entities/indexer-cursor.entity.ts","../../src/entities/redemption-history.entity.ts","../../src/entities/index.ts"],"sourcesContent":["import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\nimport type { MintingStatus } from \"@pafi-dev/issuer\";\n\n/**\n * A reservation against a user's off-chain balance.\n *\n * Lifecycle:\n *   PENDING ── PointIndexer matches Mint event ──▶ MINTED\n *      │\n *      ├── deadline elapsed ────────────────────▶ EXPIRED\n *      │\n *      └── tx reverted ─────────────────────────▶ FAILED\n *\n * Index policy — the three composite indexes below mirror the three\n * query shapes the SDK runs against this table. They are the source\n * of truth for the schema; the migrations create indexes with the\n * exact same names so `synchronize: false` deployments do not drift.\n *\n *   IDX_locked_mint_user_token_status_expires\n *     Hot path: `sumPendingLocks` inside `getBalance` + `lockForMinting`.\n *     4-col covering index — `expires_at` in the range scan instead\n *     of post-filtered from the heap.\n *\n *   IDX_locked_mint_user_token_amount_status\n *     Hot path: `PointIndexer.pickMatchingLock` + the lock-resolution\n *     `findOne` inside `deductBalance`. `amount` is the\n *     selectivity-critical predicate.\n *\n *   IDX_locked_mint_pending_expires\n *     Sweep path: `markExpiredLocks` UPDATE. Partial\n *     `WHERE status = 'PENDING'` keeps the index small — only the\n *     rows the sweep can touch live in the index.\n *\n *   IDX_locked_mint_user_op_hash\n *     Bundler-receipt fallback in `statusHandlers` — point lookup\n *     by userOpHash.\n */\n@Entity({ name: \"locked_mint_requests\" })\n@Index(\"IDX_locked_mint_user_token_status_expires\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"status\",\n  \"expiresAt\",\n])\n@Index(\"IDX_locked_mint_user_token_amount_status\", [\n  \"userAddress\",\n  \"tokenAddress\",\n  \"amount\",\n  \"status\",\n])\n@Index(\"IDX_locked_mint_pending_expires\", [\"expiresAt\"], {\n  where: \"\\\"status\\\" = 'PENDING'\",\n})\n@Index(\"IDX_locked_mint_user_op_hash\", [\"userOpHash\"])\nexport class LockedMintEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: MintingStatus;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /**\n   * ERC-4337 userOpHash returned by the bundler at /claim/submit.\n   * Bound to the lock so `/claim/status` can fall back to the bundler\n   * receipt — required when multiple PENDING locks share the same\n   * `amount` (PointIndexer matches by amount and can pick the wrong\n   * sibling lock).\n   */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\nexport type PendingCreditStatus = \"PENDING\" | \"RESOLVED\" | \"EXPIRED\";\n\n/**\n * Reverse flow — user burns on-chain PT, `BurnIndexer` observes\n * `Transfer(user → 0x0)`, the credit is settled to the off-chain ledger.\n *\n * Lifecycle:\n *   PENDING ── Burn tx observed by indexer ──▶ RESOLVED\n *      │\n *      └── deadline elapsed ────────────────▶ EXPIRED\n *\n * The credit is reserved BEFORE the UserOp is submitted so the\n * indexer can correlate `(user, amount, token)` back to the off-chain\n * row when the burn lands.\n */\n@Entity({ name: \"pending_credits\" })\n@Index([\"userAddress\", \"status\"])\n@Index([\"txHash\"])\nexport class PendingCreditEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"amount\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amount!: bigint;\n\n  @Column({\n    name: \"status\",\n    type: \"varchar\",\n    length: 16,\n    default: \"PENDING\",\n  })\n  status!: PendingCreditStatus;\n\n  /** On-chain burn tx that settled this credit. Null until indexer resolves. */\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  /** ERC-4337 userOpHash bound at /redeem/submit. See `LockedMintEntity`. */\n  @Column({\n    name: \"user_op_hash\",\n    type: \"varchar\",\n    length: 66,\n    nullable: true,\n  })\n  userOpHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n\n  @Column({ name: \"expires_at\", type: \"timestamp with time zone\" })\n  expiresAt!: Date;\n\n  @Column({\n    name: \"resolved_at\",\n    type: \"timestamp with time zone\",\n    nullable: true,\n  })\n  resolvedAt?: Date | null;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Off-chain point balance per `(userAddress, tokenAddress)`.\n *\n * `balance` is the **total** owned; pending reservations live in\n * `LockedMintEntity`. Available balance = total − sum(PENDING locks)\n * — `getBalance` in `PostgresPointLedger` does this subtraction\n * inside a transaction so reads are race-free.\n *\n * All amounts are `numeric(78, 0)` for full bigint precision (uint256\n * fits in 78 decimal digits). TypeORM transforms bigint ↔ string at\n * the boundary; in JS/TS code we always deal with `bigint`.\n */\n@Entity({ name: \"user_balances\" })\nexport class UserBalanceEntity {\n  @PrimaryColumn({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @PrimaryColumn({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"balance\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    default: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  balance!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Append-only audit trail for every balance mutation. Used for\n * reconciliation, customer support, and regulatory reporting.\n *\n * Sign convention:\n *   - positive `delta` — credit (merchant award, refund, manual top-up)\n *   - negative `delta` — debit (mint confirmation against the off-chain\n *     balance; `txHash` references the on-chain Mint event)\n *\n * Idempotency invariant: for any indexer-driven reason (e.g.\n * `MINT_CONFIRMED`, `BURN_FOR_CREDIT`) the tuple\n * `(user_address, token_address, tx_hash, reason)` is unique. Enforced\n * by a partial unique index that only fires when `tx_hash IS NOT NULL`,\n * so off-chain reasons (e.g. `AIRDROP`) without a tx hash are\n * unaffected. Last-line defense against double-deduct / double-credit\n * when the indexer replays an event (reorg, restart, duplicate pod).\n *\n */\n@Entity({ name: \"ledger_journal\" })\n@Index([\"userAddress\", \"createdAt\"])\n@Index(\n  \"UQ_ledger_journal_user_token_tx_reason\",\n  [\"userAddress\", \"tokenAddress\", \"txHash\", \"reason\"],\n  {\n    unique: true,\n    where: '\"tx_hash\" IS NOT NULL',\n  },\n)\nexport class LedgerJournalEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42 })\n  tokenAddress!: string;\n\n  @Column({\n    name: \"delta\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  delta!: bigint;\n\n  @Column({ name: \"reason\", type: \"varchar\", length: 128 })\n  reason!: string;\n\n  @Column({ name: \"tx_hash\", type: \"varchar\", length: 66, nullable: true })\n  txHash?: string | null;\n\n  @CreateDateColumn({ name: \"created_at\" })\n  createdAt!: Date;\n}\n","import { Column, Entity, PrimaryColumn, UpdateDateColumn } from \"typeorm\";\n\n/**\n * Persistent cursor for `PointIndexer` / `BurnIndexer`. Multiple rows\n * coexist keyed by `id` (e.g. `default` for the mint indexer,\n * `burn:0x...` for each per-token burn indexer).\n *\n * Stores the **next** block to scan, not the last processed one.\n * Indexer reads on startup and resumes from there.\n */\n@Entity({ name: \"indexer_cursors\" })\nexport class IndexerCursorEntity {\n  @PrimaryColumn({ type: \"varchar\", length: 64 })\n  id!: string;\n\n  @Column({\n    name: \"next_block\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  nextBlock!: bigint;\n\n  @UpdateDateColumn({ name: \"updated_at\" })\n  updatedAt!: Date;\n}\n","import {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  PrimaryGeneratedColumn,\n} from \"typeorm\";\n\n/**\n * Per-user redemption history row. One row per successful initiate\n * (call to `RedemptionService.recordSuccessfulInitiate`).\n *\n * `sumRedeemedSince` does a SUM(amount) WHERE created_at >= :since\n * which uses the (user_address, created_at) composite index. We do\n * NOT prune old rows automatically — they're cheap and useful for\n * audit. Issuers can add a periodic VACUUM/partition policy if the\n * table grows past ~100M rows.\n *\n * Amounts are `numeric(78, 0)` for full bigint precision.\n */\n@Entity({ name: \"redemption_history\" })\n@Index(\"idx_redemption_history_user_created\", [\n  \"userAddress\",\n  \"createdAtUnixSec\",\n])\nexport class RedemptionHistoryEntity {\n  @PrimaryGeneratedColumn(\"uuid\")\n  id!: string;\n\n  @Column({ name: \"user_address\", type: \"varchar\", length: 42 })\n  userAddress!: string;\n\n  @Column({ name: \"token_address\", type: \"varchar\", length: 42, nullable: true })\n  tokenAddress!: string | null;\n\n  @Column({\n    name: \"amount_pt\",\n    type: \"numeric\",\n    precision: 78,\n    scale: 0,\n    transformer: {\n      to: (value: bigint) => value.toString(),\n      from: (value: string) => BigInt(value),\n    },\n  })\n  amountPt!: bigint;\n\n  /**\n   * Caller-controlled timestamp (unix seconds). Stored as integer, not\n   * timestamptz, because the evaluator works in unix seconds and we want\n   * the same time domain on read + write — no surprise tz conversions.\n   */\n  @Column({ name: \"created_at_unix_sec\", type: \"bigint\" })\n  createdAtUnixSec!: string;\n\n  /**\n   * Optional pointer back to the burn-flow reservation (PendingCredit.id).\n   * Lets ops trace a redemption-history row to the underlying lock.\n   */\n  @Column({\n    name: \"reservation_id\",\n    type: \"varchar\",\n    length: 64,\n    nullable: true,\n  })\n  reservationId!: string | null;\n\n  @CreateDateColumn({ name: \"row_created_at\", type: \"timestamptz\" })\n  rowCreatedAt!: Date;\n}\n","export { LockedMintEntity } from \"./locked-mint.entity\";\nexport {\n  PendingCreditEntity,\n  type PendingCreditStatus,\n} from \"./pending-credit.entity\";\nexport { UserBalanceEntity } from \"./user-balance.entity\";\nexport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nexport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nexport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\nimport { LockedMintEntity } from \"./locked-mint.entity\";\nimport { PendingCreditEntity } from \"./pending-credit.entity\";\nimport { UserBalanceEntity } from \"./user-balance.entity\";\nimport { LedgerJournalEntity } from \"./ledger-journal.entity\";\nimport { IndexerCursorEntity } from \"./indexer-cursor.entity\";\nimport { RedemptionHistoryEntity } from \"./redemption-history.entity\";\n\n/**\n * All entities in one array — drop into TypeORM's `entities` config or\n * NestJS's `TypeOrmModule.forFeature(PAFI_ENTITIES)`.\n */\nexport const PAFI_ENTITIES = [\n  LockedMintEntity,\n  PendingCreditEntity,\n  UserBalanceEntity,\n  LedgerJournalEntity,\n  IndexerCursorEntity,\n  RedemptionHistoryEntity,\n] as const;\n"],"mappings":";;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAsDA,IAAM,mBAAN,MAAuB;AAAA,EAE5B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AAAA,EAeA;AACF;AAnDE;AAAA,EADC,uBAAuB,MAAM;AAAA,GADnB,iBAEX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,iBAKX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,iBAQX;AAYA;AAAA,EAVC,OAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,iBAoBX;AAQA;AAAA,EANC,OAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,iBA4BX;AAGA;AAAA,EADC,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA9B7B,iBA+BX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GAjCrD,iBAkCX;AAGA;AAAA,EADC,OAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GApC7D,iBAqCX;AAeA;AAAA,EANC,OAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAnDU,iBAoDX;AApDW,mBAAN;AAAA,EAjBN,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,EACvC,MAAM,6CAA6C;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACA,MAAM,4CAA4C;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACA,MAAM,mCAAmC,CAAC,WAAW,GAAG;AAAA,IACvD,OAAO;AAAA,EACT,CAAC;AAAA,EACA,MAAM,gCAAgC,CAAC,YAAY,CAAC;AAAA,GACxC;;;AC5Db;AAAA,EACE,UAAAA;AAAA,EACA,oBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,SAAAC;AAAA,EACA,0BAAAC;AAAA,OACK;AAoBA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAIA;AAAA,EASA;AAAA,EAGA;AAAA,EAGA;AAAA,EAOA;AACF;AArDE;AAAA,EADCC,wBAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,EADCC,QAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,EAVCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAQA;AAAA,EANCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,EACX,CAAC;AAAA,GA3BU,oBA4BX;AAIA;AAAA,EADCA,QAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GA/B7D,oBAgCX;AASA;AAAA,EANCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAxCU,oBAyCX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA3C7B,oBA4CX;AAGA;AAAA,EADCD,QAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,CAAC;AAAA,GA9CrD,oBA+CX;AAOA;AAAA,EALCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,EACZ,CAAC;AAAA,GArDU,oBAsDX;AAtDW,sBAAN;AAAA,EAHNE,QAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,EAClCC,OAAM,CAAC,eAAe,QAAQ,CAAC;AAAA,EAC/BA,OAAM,CAAC,QAAQ,CAAC;AAAA,GACJ;;;AC1Bb,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,eAAe,wBAAwB;AAezD,IAAM,oBAAN,MAAwB;AAAA,EAE7B;AAAA,EAGA;AAAA,EAaA;AAAA,EAGA;AACF;AApBE;AAAA,EADC,cAAc,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADzD,kBAEX;AAGA;AAAA,EADC,cAAc,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJ1D,kBAKX;AAaA;AAAA,EAXCC,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAjBU,kBAkBX;AAGA;AAAA,EADC,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GApB7B,kBAqBX;AArBW,oBAAN;AAAA,EADNC,QAAO,EAAE,MAAM,gBAAgB,CAAC;AAAA,GACpB;;;ACfb;AAAA,EACE,UAAAC;AAAA,EACA,oBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,SAAAC;AAAA,EACA,0BAAAC;AAAA,OACK;AA8BA,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AACF;AA5BE;AAAA,EADCC,wBAAuB,MAAM;AAAA,GADnB,oBAEX;AAGA;AAAA,EADCC,QAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,oBAKX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAPnD,oBAQX;AAYA;AAAA,EAVCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,oBAoBX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,CAAC;AAAA,GAtB7C,oBAuBX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,WAAW,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAzB7D,oBA0BX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GA5B7B,oBA6BX;AA7BW,sBAAN;AAAA,EAVNC,QAAO,EAAE,MAAM,iBAAiB,CAAC;AAAA,EACjCC,OAAM,CAAC,eAAe,WAAW,CAAC;AAAA,EAClCA;AAAA,IACC;AAAA,IACA,CAAC,eAAe,gBAAgB,UAAU,QAAQ;AAAA,IAClD;AAAA,MACE,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,EACF;AAAA,GACa;;;ACpCb,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,iBAAAC,gBAAe,oBAAAC,yBAAwB;AAWzD,IAAM,sBAAN,MAA0B;AAAA,EAE/B;AAAA,EAYA;AAAA,EAGA;AACF;AAhBE;AAAA,EADCC,eAAc,EAAE,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GADnC,oBAEX;AAYA;AAAA,EAVCC,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAbU,oBAcX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,aAAa,CAAC;AAAA,GAhB7B,oBAiBX;AAjBW,sBAAN;AAAA,EADNC,QAAO,EAAE,MAAM,kBAAkB,CAAC;AAAA,GACtB;;;ACXb;AAAA,EACE,UAAAC;AAAA,EACA,oBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,SAAAC;AAAA,EACA,0BAAAC;AAAA,OACK;AAmBA,IAAM,0BAAN,MAA8B;AAAA,EAEnC;AAAA,EAGA;AAAA,EAGA;AAAA,EAYA;AAAA,EAQA;AAAA,EAYA;AAAA,EAGA;AACF;AA1CE;AAAA,EADCC,wBAAuB,MAAM;AAAA,GADnB,wBAEX;AAGA;AAAA,EADCC,QAAO,EAAE,MAAM,gBAAgB,MAAM,WAAW,QAAQ,GAAG,CAAC;AAAA,GAJlD,wBAKX;AAGA;AAAA,EADCA,QAAO,EAAE,MAAM,iBAAiB,MAAM,WAAW,QAAQ,IAAI,UAAU,KAAK,CAAC;AAAA,GAPnE,wBAQX;AAYA;AAAA,EAVCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,aAAa;AAAA,MACX,IAAI,CAAC,UAAkB,MAAM,SAAS;AAAA,MACtC,MAAM,CAAC,UAAkB,OAAO,KAAK;AAAA,IACvC;AAAA,EACF,CAAC;AAAA,GAnBU,wBAoBX;AAQA;AAAA,EADCA,QAAO,EAAE,MAAM,uBAAuB,MAAM,SAAS,CAAC;AAAA,GA3B5C,wBA4BX;AAYA;AAAA,EANCA,QAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,GAvCU,wBAwCX;AAGA;AAAA,EADCC,kBAAiB,EAAE,MAAM,kBAAkB,MAAM,cAAc,CAAC;AAAA,GA1CtD,wBA2CX;AA3CW,0BAAN;AAAA,EALNC,QAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,EACrCC,OAAM,uCAAuC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF,CAAC;AAAA,GACY;;;ACJN,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":["Column","CreateDateColumn","Entity","Index","PrimaryGeneratedColumn","PrimaryGeneratedColumn","Column","CreateDateColumn","Entity","Index","Column","Entity","Column","Entity","Column","CreateDateColumn","Entity","Index","PrimaryGeneratedColumn","PrimaryGeneratedColumn","Column","CreateDateColumn","Entity","Index","Column","Entity","PrimaryColumn","UpdateDateColumn","PrimaryColumn","Column","UpdateDateColumn","Entity","Column","CreateDateColumn","Entity","Index","PrimaryGeneratedColumn","PrimaryGeneratedColumn","Column","CreateDateColumn","Entity","Index"]}

package/dist/index.cjs

@@ -45,6 +45,7 @@ __export(src_exports, {
 module.exports = __toCommonJS(src_exports);
 
 // src/postgresPointLedger.ts
+var import_typeorm5 = require("typeorm");
 var import_viem = require("viem");
 
 // src/entities/locked-mint.entity.ts
@@ -384,6 +385,40 @@ var PostgresPointLedger = class {
     }
     return swept;
   }
+  /**
+   * Audit PACI5-20 — symmetric counterpart of `markExpiredLocks` for
+   * the redeem/burn (PendingCredit) side. Marks all expired PENDING
+   * pending_credits as EXPIRED so abandoned reservations can no
+   * longer hijack later burns' attribution in `findPendingCreditLockId`.
+   *
+   * The README has always promised this sweep; the pre-fix code only
+   * shipped the mint-side `markExpiredLocks`, leaving credits to
+   * accumulate forever (storage bloat) and stay matchable past their
+   * deadline (attribution corruption). Wire it into the BurnIndexer
+   * tick the same way `markExpiredLocks` is wired into the
+   * MintIndexer tick — typically every 1-5 minutes.
+   *
+   * Defense-in-depth: `findPendingCreditLockId` also filters
+   * `expires_at > now()` so a missed-tick window can't reintroduce
+   * the hijack.
+   *
+   * @example
+   * ```ts
+   * @Interval(60_000)
+   * async sweep() {
+   *   await this.ledger.markExpiredLocks();
+   *   await this.ledger.markExpiredCredits();
+   * }
+   * ```
+   */
+  async markExpiredCredits() {
+    const result = await this.dataSource.getRepository(PendingCreditEntity).createQueryBuilder().update().set({ status: "EXPIRED" }).where("status = :pending", { pending: "PENDING" }).andWhere("expires_at <= :now", { now: /* @__PURE__ */ new Date() }).execute();
+    const swept = result.affected ?? 0;
+    if (swept > 0) {
+      this.logger?.debug?.(`markExpiredCredits: swept ${swept} pending credits`);
+    }
+    return swept;
+  }
   async getLockedRequests(userAddress, tokenAddress) {
     const { user, token } = normalize(userAddress, tokenAddress);
     const rows = await this.dataSource.getRepository(LockedMintEntity).find({
@@ -674,9 +709,30 @@ var PostgresPointLedger = class {
   }
   /**
    * Used by `BurnIndexer.matchLockId` to resolve an on-chain burn
-   * event back to a pending credit row. Returns the oldest matching
-   * `(user, token, amount, status: PENDING)` lockId, or undefined
-   * when no match exists (unsolicited burn — indexer skips).
+   * event back to a pending credit row. Returns the **newest**
+   * matching `(user, token, amount, status: PENDING, expires_at > now)`
+   * lockId, or undefined when no match exists (unsolicited burn —
+   * indexer skips).
+   *
+   * Audit PACI5-20 — two filters narrowed since the pre-fix shipped:
+   *
+   *   1. `expires_at > now()` — abandoned PENDING reservations past
+   *      their deadline no longer hijack a fresh burn's attribution.
+   *      This is defense-in-depth in case `markExpiredCredits` hasn't
+   *      run recently (missed-tick window).
+   *
+   *   2. `ORDER BY createdAt DESC` (was ASC) — when multiple PENDING
+   *      reservations match the same (user, token, amount) within
+   *      the validity window, prefer the most recent one. Matches
+   *      user mental model: "I just submitted /redeem, my recent
+   *      reservation should win" rather than resurrecting a stale
+   *      one. With the sweep + filter the typical steady state has
+   *      at most one matching row, so this only affects edge cases
+   *      (very fast re-submit, or concurrent flows).
+   *
+   * Combined with the partial UNIQUE index on `(txHash, status =
+   * RESOLVED)` from PACI5-7, the attribution can no longer drift
+   * across sessions even under adversarial conditions.
    */
   async findPendingCreditLockId(userAddress, amount, tokenAddress) {
     const { user, token } = normalize(userAddress, tokenAddress);
@@ -685,9 +741,10 @@ var PostgresPointLedger = class {
         userAddress: user,
         tokenAddress: token,
         amount,
-        status: "PENDING"
+        status: "PENDING",
+        expiresAt: (0, import_typeorm5.MoreThan)(/* @__PURE__ */ new Date())
       },
-      order: { createdAt: "ASC" }
+      order: { createdAt: "DESC" }
     });
     return row?.id;
   }
@@ -726,17 +783,17 @@ function normalize(userAddress, tokenAddress) {
 }
 
 // src/entities/indexer-cursor.entity.ts
-var import_typeorm5 = require("typeorm");
+var import_typeorm6 = require("typeorm");
 var IndexerCursorEntity = class {
   id;
   nextBlock;
   updatedAt;
 };
 __decorateClass([
-  (0, import_typeorm5.PrimaryColumn)({ type: "varchar", length: 64 })
+  (0, import_typeorm6.PrimaryColumn)({ type: "varchar", length: 64 })
 ], IndexerCursorEntity.prototype, "id", 2);
 __decorateClass([
-  (0, import_typeorm5.Column)({
+  (0, import_typeorm6.Column)({
     name: "next_block",
     type: "numeric",
     precision: 78,
@@ -748,10 +805,10 @@ __decorateClass([
   })
 ], IndexerCursorEntity.prototype, "nextBlock", 2);
 __decorateClass([
-  (0, import_typeorm5.UpdateDateColumn)({ name: "updated_at" })
+  (0, import_typeorm6.UpdateDateColumn)({ name: "updated_at" })
 ], IndexerCursorEntity.prototype, "updatedAt", 2);
 IndexerCursorEntity = __decorateClass([
-  (0, import_typeorm5.Entity)({ name: "indexer_cursors" })
+  (0, import_typeorm6.Entity)({ name: "indexer_cursors" })
 ], IndexerCursorEntity);
 
 // src/postgresCursorStore.ts
@@ -782,7 +839,7 @@ var PostgresCursorStore = class _PostgresCursorStore {
 var import_viem2 = require("viem");
 
 // src/entities/redemption-history.entity.ts
-var import_typeorm6 = require("typeorm");
+var import_typeorm7 = require("typeorm");
 var RedemptionHistoryEntity = class {
   id;
   userAddress;
@@ -793,16 +850,16 @@ var RedemptionHistoryEntity = class {
   rowCreatedAt;
 };
 __decorateClass([
-  (0, import_typeorm6.PrimaryGeneratedColumn)("uuid")
+  (0, import_typeorm7.PrimaryGeneratedColumn)("uuid")
 ], RedemptionHistoryEntity.prototype, "id", 2);
 __decorateClass([
-  (0, import_typeorm6.Column)({ name: "user_address", type: "varchar", length: 42 })
+  (0, import_typeorm7.Column)({ name: "user_address", type: "varchar", length: 42 })
 ], RedemptionHistoryEntity.prototype, "userAddress", 2);
 __decorateClass([
-  (0, import_typeorm6.Column)({ name: "token_address", type: "varchar", length: 42, nullable: true })
+  (0, import_typeorm7.Column)({ name: "token_address", type: "varchar", length: 42, nullable: true })
 ], RedemptionHistoryEntity.prototype, "tokenAddress", 2);
 __decorateClass([
-  (0, import_typeorm6.Column)({
+  (0, import_typeorm7.Column)({
     name: "amount_pt",
     type: "numeric",
     precision: 78,
@@ -814,10 +871,10 @@ __decorateClass([
   })
 ], RedemptionHistoryEntity.prototype, "amountPt", 2);
 __decorateClass([
-  (0, import_typeorm6.Column)({ name: "created_at_unix_sec", type: "bigint" })
+  (0, import_typeorm7.Column)({ name: "created_at_unix_sec", type: "bigint" })
 ], RedemptionHistoryEntity.prototype, "createdAtUnixSec", 2);
 __decorateClass([
-  (0, import_typeorm6.Column)({
+  (0, import_typeorm7.Column)({
     name: "reservation_id",
     type: "varchar",
     length: 64,
@@ -825,11 +882,11 @@ __decorateClass([
   })
 ], RedemptionHistoryEntity.prototype, "reservationId", 2);
 __decorateClass([
-  (0, import_typeorm6.CreateDateColumn)({ name: "row_created_at", type: "timestamptz" })
+  (0, import_typeorm7.CreateDateColumn)({ name: "row_created_at", type: "timestamptz" })
 ], RedemptionHistoryEntity.prototype, "rowCreatedAt", 2);
 RedemptionHistoryEntity = __decorateClass([
-  (0, import_typeorm6.Entity)({ name: "redemption_history" }),
-  (0, import_typeorm6.Index)("idx_redemption_history_user_created", [
+  (0, import_typeorm7.Entity)({ name: "redemption_history" }),
+  (0, import_typeorm7.Index)("idx_redemption_history_user_created", [
     "userAddress",
     "createdAtUnixSec"
   ])