@pafi-dev/issuer 0.30.0 → 0.31.0

package/dist/index.cjs

@@ -2903,7 +2903,10 @@ async function prepareMobileUserOp(params) {
       callGasLimit: fallback.userOp.callGasLimit.toString(),
       verificationGasLimit: fallback.userOp.verificationGasLimit.toString(),
       preVerificationGas: fallback.userOp.preVerificationGas.toString(),
-      userOpHash: fallback.userOpHash
+      userOpHash: fallback.userOpHash,
+      // Audit PACI5-21 — carry the fallback-specific lockId so submit
+      // can bind the fallback userOpHash to the correct ledger row.
+      lockId: params.lockIdFallback
     };
   }
   const entry = {
@@ -3096,6 +3099,7 @@ async function handleMobilePrepare(params) {
     lockId: params.lockId,
     partialUserOp: sponsoredOp,
     partialUserOpFallback: params.partialUserOpFallback,
+    lockIdFallback: params.lockIdFallback,
     paymasterFields,
     chainId: params.chainId,
     store: params.store,
@@ -3124,7 +3128,8 @@ async function handleMobileSubmit(params) {
     entryPoint: params.entryPoint ?? import_core10.ENTRY_POINT_V08,
     eip7702Auth: entry.eip7702Auth
   });
-  await params.bindUserOpHash(params.lockId, result.userOpHash);
+  const targetLockId = variant === "fallback" && entry.fallback?.lockId ? entry.fallback.lockId : params.lockId;
+  await params.bindUserOpHash(targetLockId, result.userOpHash);
   await params.store.delete(params.lockId);
   return { userOpHash: result.userOpHash };
 }
@@ -3866,10 +3871,16 @@ var IssuerApiAdapter = class {
       "burn",
       pointTokenAddress,
       redeemResponse.expiresInSeconds,
-      input.eip7702Auth
+      input.eip7702Auth,
+      // Audit PACI5-21 — fallback path reserves a separate
+      // PendingCredit row for the full `amount`. Surface its lockId so
+      // mobile FE can poll the correct row + `handleMobileSubmit`
+      // routes the userOpHash bind to it on fallback submit.
+      redeemResponse.fallback?.lockId
     );
     return {
       lockId: redeemResponse.lockId,
+      lockIdFallback: redeemResponse.fallback?.lockId,
       userOpHash: prepared.sponsored.userOpHash,
       typedData: prepared.sponsored.typedData,
       userOpHashFallback: prepared.fallback?.userOpHash,
@@ -4000,13 +4011,14 @@ var IssuerApiAdapter = class {
       issuerSignerWallet: this.cfg.issuerSignerWallet
     });
   }
-  async runMobilePrepare(authenticatedAddress, chainId, lockId, partialUserOp, partialUserOpFallback, scenario, pointTokenAddress, ttlSeconds, eip7702Auth) {
+  async runMobilePrepare(authenticatedAddress, chainId, lockId, partialUserOp, partialUserOpFallback, scenario, pointTokenAddress, ttlSeconds, eip7702Auth, lockIdFallback) {
     return await handleMobilePrepare({
       userAddress: authenticatedAddress,
       chainId,
       lockId,
       partialUserOp,
       partialUserOpFallback,
+      lockIdFallback,
       scenario,
       pointTokenAddress,
       ttlSeconds,
@@ -5271,7 +5283,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.30.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.31.0" : "dev";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdapterMisconfiguredError,