@pafi-dev/issuer 0.28.1 → 0.30.0

package/dist/index.cjs

@@ -2332,6 +2332,7 @@ var PTRedeemHandler = class {
   chainId;
   domainResolver;
   burnerSignerWallet;
+  supportedTokens;
   redeemLockDurationMs;
   signatureDeadlineSeconds;
   now;
@@ -2371,6 +2372,13 @@ var PTRedeemHandler = class {
     this.chainId = config.chainId;
     this.domainResolver = config.domainResolver;
     this.burnerSignerWallet = config.burnerSignerWallet;
+    if (!config.supportedTokens) {
+      throw new PTRedeemError(
+        "UNSUPPORTED_POINT_TOKEN",
+        "PTRedeemHandler requires `supportedTokens` (issuer's allow-listed PointToken contracts). See audit PACI5-18."
+      );
+    }
+    this.supportedTokens = config.supportedTokens;
     if (this.burnerSignerWallet?.account?.type === "local") {
       console.warn("[PAFI] PTRedeemHandler: burnerSignerWallet uses a local (private key) account. Use a KMS-backed signer in production.");
     }
@@ -2399,6 +2407,12 @@ var PTRedeemHandler = class {
       throw new PTRedeemError("INVALID_AMOUNT", "redeem amount must be positive");
     }
     const pointTokenAddress = (0, import_viem8.getAddress)(request.pointTokenAddress);
+    if (!this.supportedTokens.has(pointTokenAddress)) {
+      throw new PTRedeemError(
+        "UNSUPPORTED_POINT_TOKEN",
+        `redeem: pointTokenAddress ${pointTokenAddress} is not in the issuer's supported-token allowlist. Check IssuerApiHandlers.supportedTokens and PTRedeemHandler.config.supportedTokens point at the same set.`
+      );
+    }
     if (this.redemptionService) {
       const decision = await this.redemptionService.evaluate(
         request.userAddress,
@@ -2648,13 +2662,43 @@ async function handleClaimStatus(params) {
         lock.userOpHash
       );
       if (receipt) {
-        status = receipt.success ? "MINTED" : "FAILED";
-        txHash = receipt.txHash;
-        await params.ledger.updateMintStatus(lock.lockId, status, receipt.txHash).catch((err) => {
-          params.onWarning?.(
-            `handleClaimStatus: ledger updateMintStatus failed for lock ${lock.lockId}: ${err}`
-          );
-        });
+        if (receipt.success && receipt.txHash) {
+          if (!lock.tokenAddress) {
+            params.onWarning?.(
+              `handleClaimStatus: lock ${lock.lockId} has no tokenAddress; falling back to status-only flip (PACI5-24 defence degraded). Migrate the ledger to the multi-token schema.`
+            );
+            await params.ledger.updateMintStatus(lock.lockId, "MINTED", receipt.txHash).catch((err) => {
+              params.onWarning?.(
+                `handleClaimStatus: ledger updateMintStatus failed for lock ${lock.lockId}: ${err}`
+              );
+            });
+            status = "MINTED";
+            txHash = receipt.txHash;
+          } else {
+            try {
+              await params.ledger.deductBalance(
+                lock.userAddress,
+                lock.amount,
+                receipt.txHash,
+                lock.tokenAddress
+              );
+              status = "MINTED";
+              txHash = receipt.txHash;
+            } catch (deductErr) {
+              params.onWarning?.(
+                `handleClaimStatus: deductBalance failed for lock ${lock.lockId}: ${deductErr}`
+              );
+            }
+          }
+        } else {
+          await params.ledger.updateMintStatus(lock.lockId, "FAILED", receipt.txHash).catch((err) => {
+            params.onWarning?.(
+              `handleClaimStatus: ledger updateMintStatus failed for lock ${lock.lockId}: ${err}`
+            );
+          });
+          status = "FAILED";
+          txHash = receipt.txHash;
+        }
       }
     } catch (err) {
       params.onWarning?.(
@@ -3126,6 +3170,12 @@ var PTClaimHandler = class {
   cfg;
   inFlightNonces = /* @__PURE__ */ new Map();
   constructor(config) {
+    if (!config.supportedTokens) {
+      throw new PTClaimError(
+        "UNSUPPORTED_POINT_TOKEN",
+        "PTClaimHandler requires `supportedTokens` (issuer's allow-listed PointToken contracts). See audit PACI5-18."
+      );
+    }
     const lockDurationMs = config.lockDurationMs ?? DEFAULT_LOCK_MS;
     const signatureDeadlineSeconds = config.signatureDeadlineSeconds ?? DEFAULT_SIG_DEADLINE_SEC2;
     const maxAllowedSignatureMs = lockDurationMs - M11_SAFETY_MARGIN_MS2;
@@ -3157,6 +3207,14 @@ var PTClaimHandler = class {
     if (request.amount <= 0n) {
       throw new PTClaimError("INVALID_AMOUNT", "claim amount must be positive");
     }
+    const pointTokenAddress = (0, import_viem10.getAddress)(request.pointTokenAddress);
+    if (!this.cfg.supportedTokens.has(pointTokenAddress)) {
+      throw new PTClaimError(
+        "UNSUPPORTED_POINT_TOKEN",
+        `claim: pointTokenAddress ${pointTokenAddress} is not in the issuer's supported-token allowlist. Check IssuerApiHandlers.supportedTokens and PTClaimHandler.config.supportedTokens point at the same set.`,
+        { requested: pointTokenAddress }
+      );
+    }
     if (this.cfg.issuerStateValidator) {
       try {
         await this.cfg.issuerStateValidator.preValidateMint(
@@ -5213,7 +5271,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.28.1" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.30.0" : "dev";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdapterMisconfiguredError,