@pafi-dev/issuer 0.3.0-beta.8 → 0.3.0-beta.9

package/dist/index.cjs

@@ -34,7 +34,6 @@ __export(index_exports, {
   PAFI_ISSUER_SDK_VERSION: () => PAFI_ISSUER_SDK_VERSION,
   PTRedeemError: () => PTRedeemError,
   PTRedeemHandler: () => PTRedeemHandler,
-  PafiBackendClient: () => PafiBackendClient,
   PafiBackendError: () => PafiBackendError,
   PointIndexer: () => PointIndexer,
   PrivateKeySigner: () => PrivateKeySigner,
@@ -1842,37 +1841,16 @@ var PafiBackendError = class extends Error {
   code;
   httpStatus;
   details;
-  /**
-   * Seconds to wait before retry. Populated from the server body
-   * (e.g. rate limit returns the number of seconds until UTC midnight).
-   */
   retryAfter;
-  /**
-   * `safeToRetry` as reported by the server body. Prefer this over the
-   * code-based heuristic when available — the server knows more about
-   * whether the same request will succeed on retry.
-   */
   serverSafeToRetry;
-  /**
-   * Whether the caller can safely retry the same request.
-   *
-   * If the server provided `safeToRetry` in the body, trust that.
-   * Otherwise fall back to a code-based heuristic.
-   */
   get safeToRetry() {
     if (this.serverSafeToRetry !== void 0) return this.serverSafeToRetry;
     switch (this.code) {
-      // Transient infra
-      case "PAYMASTER_UNAVAILABLE":
-      case "PAYMASTER_TIMEOUT":
       case "RATE_LIMITER_UNAVAILABLE":
-      case "KMS_UNAVAILABLE":
-      case "SPONSOR_AUTH_SIGNING_FAILED":
       case "INTERNAL_ERROR":
       case "TIMEOUT":
       case "NETWORK_ERROR":
         return true;
-      // Rate-limited — safe to retry after retryAfter window
       case "RATE_LIMIT_EXCEEDED":
       case "RATE_LIMIT_EXCEEDED_DAILY":
       case "RATE_LIMIT_EXCEEDED_PER_USER":
@@ -1884,195 +1862,6 @@ var PafiBackendError = class extends Error {
   }
 };
 
-// src/pafi-backend/pafiBackendClient.ts
-var DEFAULT_TIMEOUT_MS = 1e4;
-var RETRY_DEFAULTS = {
-  maxAttempts: 1,
-  initialDelayMs: 500,
-  maxDelayMs: 1e4,
-  maxRetryAfterMs: 3e4
-};
-var PafiBackendClient = class {
-  url;
-  issuerId;
-  apiKey;
-  fetchImpl;
-  timeoutMs;
-  retry;
-  constructor(config) {
-    if (!config.url) {
-      throw new Error("PafiBackendClient: url is required");
-    }
-    if (!config.issuerId) {
-      throw new Error("PafiBackendClient: issuerId is required");
-    }
-    if (!config.apiKey) {
-      throw new Error("PafiBackendClient: apiKey is required");
-    }
-    this.url = config.url.replace(/\/+$/, "");
-    this.issuerId = config.issuerId;
-    this.apiKey = config.apiKey;
-    this.fetchImpl = config.fetchImpl ?? globalThis.fetch;
-    this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    this.retry = { ...RETRY_DEFAULTS, ...config.retry ?? {} };
-    if (!this.fetchImpl) {
-      throw new Error(
-        "PafiBackendClient: no fetch implementation available \u2014 pass `fetchImpl` or run on Node 18+"
-      );
-    }
-    if (this.retry.maxAttempts < 1) {
-      throw new Error("PafiBackendClient: retry.maxAttempts must be >= 1");
-    }
-  }
-  /**
-   * Request a SponsorAuth signature from PAFI sponsor-relayer (beta.8+).
-   *
-   * The relayer:
-   *   1. Authenticates user (JWT) + issuer (API key)
-   *   2. Per-(user, scenario) rate limit + per-issuer daily budget
-   *   3. Scenario-specific intent validation (mint cap, KYC, etc.)
-   *   4. Allocates nonce + signs SponsorAuth payload via KMS PAFI key
-   *   5. Returns `{ sponsorAuth, payload }` for the FE to forward to
-   *      Privy's `signUserOperation({ sponsorAuth, payload })`.
-   *
-   * Retries on transient failures (5xx, timeouts, KMS unavailable,
-   * rate-limit-with-retryAfter). 4xx that are not `safeToRetry` fail fast.
-   *
-   * See `pafi-backend/docs/SPONSOR_AUTH_DESIGN.md` for the full spec.
-   *
-   * @throws PafiBackendError on final failure after exhausting retries
-   */
-  async requestSponsorAuth(req) {
-    return this.postWithRetry(
-      "/sponsor-auth",
-      req
-    );
-  }
-  /**
-   * @deprecated Coinbase paymaster path — replaced by `requestSponsorAuth`
-   * in beta.8. Will be removed in 1.0. Migrate by:
-   *   1. Switch to `requestSponsorAuth` returning `{ sponsorAuth, payload }`
-   *   2. Pass both to Privy `signUserOperation` instead of merging
-   *      paymasterData into the UserOp callData
-   */
-  async requestSponsorship(req) {
-    return this.postWithRetry(
-      "/paymaster/sponsor",
-      req
-    );
-  }
-  // -------------------------------------------------------------------------
-  // Internals
-  // -------------------------------------------------------------------------
-  async postWithRetry(path, body) {
-    let lastError;
-    for (let attempt = 1; attempt <= this.retry.maxAttempts; attempt++) {
-      try {
-        return await this.post(path, body);
-      } catch (err) {
-        if (!(err instanceof PafiBackendError)) throw err;
-        lastError = err;
-        const isLastAttempt = attempt >= this.retry.maxAttempts;
-        if (isLastAttempt || !err.safeToRetry) throw err;
-        const delay = this.computeBackoff(attempt, err.retryAfter);
-        if (delay === null) throw err;
-        await this.sleep(delay);
-      }
-    }
-    throw lastError;
-  }
-  /**
-   * Pick the delay before the next retry.
-   * - If the server sent `retryAfter` (seconds), honor it (capped by
-   *   `maxRetryAfterMs`) — returns null if the server wait exceeds the
-   *   cap, signalling the caller should give up.
-   * - Otherwise: exponential backoff with ±20% jitter, capped at
-   *   `maxDelayMs`.
-   */
-  computeBackoff(attempt, retryAfter) {
-    if (retryAfter !== void 0) {
-      const serverMs = retryAfter * 1e3;
-      if (serverMs > this.retry.maxRetryAfterMs) return null;
-      return serverMs;
-    }
-    const exp = this.retry.initialDelayMs * 2 ** (attempt - 1);
-    const capped = Math.min(exp, this.retry.maxDelayMs);
-    const jitter = capped * (0.8 + Math.random() * 0.4);
-    return Math.round(jitter);
-  }
-  sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-  }
-  async post(path, body) {
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeoutMs);
-    let response;
-    try {
-      response = await this.fetchImpl(`${this.url}${path}`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "Authorization": `Bearer ${this.apiKey}`,
-          "X-Issuer-Id": this.issuerId
-        },
-        body: JSON.stringify(body, this.bigintReplacer),
-        signal: controller.signal
-      });
-    } catch (err) {
-      if (err.name === "AbortError") {
-        throw new PafiBackendError(
-          "TIMEOUT",
-          `PAFI Backend request timed out after ${this.timeoutMs}ms`,
-          0
-        );
-      }
-      throw new PafiBackendError(
-        "NETWORK_ERROR",
-        `PAFI Backend unreachable: ${err.message}`,
-        0
-      );
-    } finally {
-      clearTimeout(timeoutId);
-    }
-    const text = await response.text();
-    if (!response.ok) {
-      let code = "INTERNAL_ERROR";
-      let message = text || response.statusText;
-      let details;
-      let retryAfter;
-      let serverSafeToRetry;
-      try {
-        const parsed = JSON.parse(text);
-        code = parsed.code ?? code;
-        message = parsed.message ?? message;
-        details = parsed.details;
-        if (typeof parsed.retryAfter === "number") retryAfter = parsed.retryAfter;
-        if (typeof parsed.safeToRetry === "boolean") serverSafeToRetry = parsed.safeToRetry;
-      } catch {
-      }
-      throw new PafiBackendError(code, message, response.status, details, {
-        ...retryAfter !== void 0 ? { retryAfter } : {},
-        ...serverSafeToRetry !== void 0 ? { safeToRetry: serverSafeToRetry } : {}
-      });
-    }
-    return JSON.parse(text, this.bigintReviver);
-  }
-  /** JSON replacer that stringifies bigints. Paired with bigintReviver. */
-  bigintReplacer = (_key, value) => {
-    return typeof value === "bigint" ? value.toString() : value;
-  };
-  /**
-   * JSON reviver that coerces specific numeric-string fields back to
-   * bigint. The server must send these fields as decimal strings.
-   */
-  bigintReviver = (key, value) => {
-    if (typeof value === "string" && (key.endsWith("GasLimit") || key === "nonce" || key === "callGasLimit" || key === "verificationGasLimit" || key === "preVerificationGas" || key === "maxFeePerGas" || key === "maxPriorityFeePerGas" || key === "paymasterVerificationGasLimit" || key === "paymasterPostOpGasLimit") && /^\d+$/.test(value)) {
-      return BigInt(value);
-    }
-    return value;
-  };
-};
-
 // src/config.ts
 var import_viem11 = require("viem");
 function createIssuerService(config) {
@@ -2185,7 +1974,6 @@ var PAFI_ISSUER_SDK_VERSION = "0.1.0";
   PAFI_ISSUER_SDK_VERSION,
   PTRedeemError,
   PTRedeemHandler,
-  PafiBackendClient,
   PafiBackendError,
   PointIndexer,
   PrivateKeySigner,