@pafi-dev/issuer 0.30.0 → 0.32.0

package/dist/index.cjs

@@ -2414,11 +2414,23 @@ var PTRedeemHandler = class {
       );
     }
     if (this.redemptionService) {
-      const decision = await this.redemptionService.evaluate(
-        request.userAddress,
-        request.amount,
-        pointTokenAddress
-      );
+      let decision;
+      try {
+        decision = await this.redemptionService.evaluate(
+          request.userAddress,
+          request.amount,
+          pointTokenAddress
+        );
+      } catch (err) {
+        const code = err && typeof err === "object" && "code" in err ? err.code : void 0;
+        if (code === "POLICY_PROVIDER_UNAVAILABLE") {
+          throw new PTRedeemError(
+            "REDEMPTION_POLICY_UNAVAILABLE",
+            "Redemption policy temporarily unavailable \u2014 please try again shortly."
+          );
+        }
+        throw err;
+      }
       if (!decision.allowed) {
         const denial = decision.denial;
         throw new PTRedeemError(
@@ -2903,7 +2915,10 @@ async function prepareMobileUserOp(params) {
       callGasLimit: fallback.userOp.callGasLimit.toString(),
       verificationGasLimit: fallback.userOp.verificationGasLimit.toString(),
       preVerificationGas: fallback.userOp.preVerificationGas.toString(),
-      userOpHash: fallback.userOpHash
+      userOpHash: fallback.userOpHash,
+      // Audit PACI5-21 — carry the fallback-specific lockId so submit
+      // can bind the fallback userOpHash to the correct ledger row.
+      lockId: params.lockIdFallback
     };
   }
   const entry = {
@@ -3096,6 +3111,7 @@ async function handleMobilePrepare(params) {
     lockId: params.lockId,
     partialUserOp: sponsoredOp,
     partialUserOpFallback: params.partialUserOpFallback,
+    lockIdFallback: params.lockIdFallback,
     paymasterFields,
     chainId: params.chainId,
     store: params.store,
@@ -3124,7 +3140,8 @@ async function handleMobileSubmit(params) {
     entryPoint: params.entryPoint ?? import_core10.ENTRY_POINT_V08,
     eip7702Auth: entry.eip7702Auth
   });
-  await params.bindUserOpHash(params.lockId, result.userOpHash);
+  const targetLockId = variant === "fallback" && entry.fallback?.lockId ? entry.fallback.lockId : params.lockId;
+  await params.bindUserOpHash(targetLockId, result.userOpHash);
   await params.store.delete(params.lockId);
   return { userOpHash: result.userOpHash };
 }
@@ -3866,10 +3883,12 @@ var IssuerApiAdapter = class {
       "burn",
       pointTokenAddress,
       redeemResponse.expiresInSeconds,
-      input.eip7702Auth
+      input.eip7702Auth,
+      redeemResponse.fallback?.lockId
     );
     return {
       lockId: redeemResponse.lockId,
+      lockIdFallback: redeemResponse.fallback?.lockId,
       userOpHash: prepared.sponsored.userOpHash,
       typedData: prepared.sponsored.typedData,
       userOpHashFallback: prepared.fallback?.userOpHash,
@@ -4000,13 +4019,14 @@ var IssuerApiAdapter = class {
       issuerSignerWallet: this.cfg.issuerSignerWallet
     });
   }
-  async runMobilePrepare(authenticatedAddress, chainId, lockId, partialUserOp, partialUserOpFallback, scenario, pointTokenAddress, ttlSeconds, eip7702Auth) {
+  async runMobilePrepare(authenticatedAddress, chainId, lockId, partialUserOp, partialUserOpFallback, scenario, pointTokenAddress, ttlSeconds, eip7702Auth, lockIdFallback) {
     return await handleMobilePrepare({
       userAddress: authenticatedAddress,
       chainId,
       lockId,
       partialUserOp,
       partialUserOpFallback,
+      lockIdFallback,
       scenario,
       pointTokenAddress,
       ttlSeconds,
@@ -4442,7 +4462,9 @@ var PafiBackendClient = class {
     if (!config.issuerId) throw new Error("PafiBackendClient: issuerId is required");
     if (!config.apiKey) throw new Error("PafiBackendClient: apiKey is required");
     this.config = config;
-    this.baseUrl = (0, import_core16.getPafiServiceUrls)(config.chainId).sponsorRelayer;
+    this.baseUrl = (0, import_core16.getPafiServiceUrls)(config.chainId, {
+      sponsorRelayer: config.baseUrl
+    }).sponsorRelayer;
   }
   async requestSponsorship(request) {
     const maxAttempts = this.config.retry?.maxAttempts ?? 1;
@@ -4603,7 +4625,7 @@ var PafiBackendClient = class {
 
 // src/config.ts
 var import_viem15 = require("viem");
-var import_core18 = require("@pafi-dev/core");
+var import_core19 = require("@pafi-dev/core");
 
 // src/redemption/evaluator.ts
 var SECONDS_PER_DAY = 24 * 60 * 60;
@@ -4707,6 +4729,9 @@ function nextBlackoutEndAfter(windows, nowUnixSec) {
 }
 var REDEMPTION_HISTORY_WINDOW_SEC = SECONDS_PER_DAY;
 
+// src/redemption/policyProvider.ts
+var import_core18 = require("@pafi-dev/core");
+
 // src/redemption/settlementClient.ts
 var import_core17 = require("@pafi-dev/core");
 var DEFAULT_TIMEOUT_MS = 1e3;
@@ -4717,7 +4742,12 @@ var SettlementClient = class {
     if (!config.issuerId) throw new Error("SettlementClient: issuerId is required");
     if (!config.apiKey) throw new Error("SettlementClient: apiKey is required");
     this.config = {
-      baseUrl: (0, import_core17.getPafiServiceUrls)(config.chainId).issuerApi.replace(/\/+$/, ""),
+      // Audit PACI5-17 — honor optional baseUrl override wired from
+      // an env var (e.g. PAFI_ISSUER_API_URL). Empty / undefined →
+      // ship-default for chainId.
+      baseUrl: (0, import_core17.getPafiServiceUrls)(config.chainId, {
+        issuerApi: config.baseUrl
+      }).issuerApi.replace(/\/+$/, ""),
       issuerId: config.issuerId,
       apiKey: config.apiKey,
       fetchTimeoutMs: config.fetchTimeoutMs ?? DEFAULT_TIMEOUT_MS,
@@ -4821,10 +4851,23 @@ function defaultPolicyFor(issuerId) {
 
 // src/redemption/policyProvider.ts
 var DEFAULT_CACHE_TTL_MS3 = 5 * 60 * 1e3;
+var PolicyProviderUnavailableError = class extends import_core18.PafiSdkError {
+  code = "POLICY_PROVIDER_UNAVAILABLE";
+  httpStatus = "service_unavailable";
+  details;
+  constructor(issuerId, reason) {
+    super(
+      `Redemption policy provider unavailable for issuer ${issuerId}: ${reason}. Pre-flight redeem limit cannot be enforced \u2014 refusing to sign BurnRequest. Mobile FE: surface "try again shortly" and retry with backoff.`
+    );
+    this.details = { issuerId, reason };
+  }
+};
 var PolicyProvider = class {
   client;
   issuerId;
   cacheTtlMs;
+  onFetchFailure;
+  onWarning;
   now;
   cache = null;
   inflight = null;
@@ -4832,6 +4875,8 @@ var PolicyProvider = class {
     this.client = new SettlementClient(config);
     this.issuerId = config.issuerId;
     this.cacheTtlMs = config.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS3;
+    this.onFetchFailure = config.onFetchFailure ?? "fail-closed";
+    this.onWarning = config.onWarning;
     this.now = config.now ?? (() => Date.now());
   }
   async getPolicy() {
@@ -4864,7 +4909,19 @@ var PolicyProvider = class {
       };
       return { policy: result.policy, source: "settlement" };
     }
-    return { policy: defaultPolicyFor(this.issuerId), source: "default" };
+    const reason = "reason" in result && typeof result.reason === "string" ? result.reason : "unknown";
+    if (this.onFetchFailure === "permissive-default") {
+      this.onWarning?.(
+        "PolicyProvider: settlement-api unreachable, falling back to permissive default. Pre-flight redeem limit is DEGRADED until settlement-api recovers.",
+        {
+          event: "policy_provider_fallback",
+          issuerId: this.issuerId,
+          reason
+        }
+      );
+      return { policy: defaultPolicyFor(this.issuerId), source: "default" };
+    }
+    throw new PolicyProviderUnavailableError(this.issuerId, reason);
   }
 };
 
@@ -4954,7 +5011,7 @@ async function createIssuerService(config) {
       provider: config.provider
     });
   }
-  const sdkWrapperAddress = (0, import_core18.getContractAddresses)(config.chainId).mintFeeWrapper;
+  const sdkWrapperAddress = (0, import_core19.getContractAddresses)(config.chainId).mintFeeWrapper;
   const wrapperOverride = config.indexer?.mintFeeWrapperAddress;
   const resolvedWrapperAddress = wrapperOverride !== void 0 ? wrapperOverride : sdkWrapperAddress;
   const baseCursorStore = config.indexer?.cursorStore;
@@ -4993,7 +5050,7 @@ async function createIssuerService(config) {
     }
     indexers.set(tokenAddress, new PointIndexer(indexerConfig));
   }
-  const chainAddresses = (0, import_core18.getContractAddresses)(config.chainId);
+  const chainAddresses = (0, import_core19.getContractAddresses)(config.chainId);
   const resolvedContracts = {
     batchExecutor: chainAddresses.batchExecutor,
     usdt: chainAddresses.usdt,
@@ -5011,6 +5068,15 @@ async function createIssuerService(config) {
       issuerId: config.redemption.issuerId,
       apiKey: config.redemption.apiKey
     };
+    if (config.redemption.baseUrl) {
+      policyConfig.baseUrl = config.redemption.baseUrl;
+    }
+    if (config.redemption.onFetchFailure) {
+      policyConfig.onFetchFailure = config.redemption.onFetchFailure;
+    }
+    if (config.redemption.onPolicyWarning) {
+      policyConfig.onWarning = config.redemption.onPolicyWarning;
+    }
     if (config.redemption.fetchImpl) policyConfig.fetchImpl = config.redemption.fetchImpl;
     if (config.redemption.fetchTimeoutMs !== void 0) {
       policyConfig.fetchTimeoutMs = config.redemption.fetchTimeoutMs;
@@ -5076,7 +5142,7 @@ async function createIssuerService(config) {
 
 // src/issuer-state/validator.ts
 var import_viem16 = require("viem");
-var import_core19 = require("@pafi-dev/core");
+var import_core20 = require("@pafi-dev/core");
 var ISSUER_RECORD_TTL_MS = 3e4;
 var IssuerStateValidator = class _IssuerStateValidator {
   constructor(provider, registryAddress) {
@@ -5093,7 +5159,7 @@ var IssuerStateValidator = class _IssuerStateValidator {
    * `CONTRACT_ADDRESSES` map for the given chain.
    */
   static forChain(provider, chainId) {
-    const { issuerRegistry } = (0, import_core19.getContractAddresses)(chainId);
+    const { issuerRegistry } = (0, import_core20.getContractAddresses)(chainId);
     return new _IssuerStateValidator(provider, issuerRegistry);
   }
   /**
@@ -5122,7 +5188,7 @@ var IssuerStateValidator = class _IssuerStateValidator {
     if (cached) return cached;
     const issuer = await this.provider.readContract({
       address: key,
-      abi: import_core19.POINT_TOKEN_ABI,
+      abi: import_core20.POINT_TOKEN_ABI,
       functionName: "issuer"
     });
     this.pointTokenIssuerCache.set(key, (0, import_viem16.getAddress)(issuer));
@@ -5202,7 +5268,7 @@ var IssuerStateValidator = class _IssuerStateValidator {
     const issuerAddr = await this.getIssuerAddressForPointToken(tokenAddr);
     const issuerStruct = await this.provider.readContract({
       address: this.registryAddress,
-      abi: import_core19.issuerRegistryAbi,
+      abi: import_core20.issuerRegistryAbi,
       functionName: "getIssuer",
       args: [issuerAddr]
     });
@@ -5215,7 +5281,7 @@ var IssuerStateValidator = class _IssuerStateValidator {
     };
     const equitySupply = await this.provider.readContract({
       address: tokenAddr,
-      abi: import_core19.POINT_TOKEN_ABI,
+      abi: import_core20.POINT_TOKEN_ABI,
       functionName: "equitySupply"
     });
     const hardCap = issuer.capitalBase * BigInt(issuer.basisPoints) / 10000n;
@@ -5271,7 +5337,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.30.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.32.0" : "dev";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdapterMisconfiguredError,