@pafi-dev/issuer 0.31.0 → 0.33.0

package/dist/index.d.cts

@@ -1551,9 +1551,9 @@ interface SettlementClientConfig {
     /**
      * chainId — used to derive the issuer-api base URL via
      * `getPafiServiceUrls(chainId).issuerApi`. SDK ships with the URL
-     * per chainId; bump SDK version to retarget.
      */
     chainId: number;
+    baseUrl?: string;
     /** PAFI-assigned issuer id used in `X-Issuer-Id` header. */
     issuerId: string;
     /** Raw API key sent as `Authorization: Bearer <apiKey>`. */
@@ -1566,6 +1566,8 @@ interface SettlementClientConfig {
 interface PolicyProviderConfig extends SettlementClientConfig {
     /** Cache TTL in milliseconds. Default 5 * 60 * 1000 (5min). */
     cacheTtlMs?: number;
+    onFetchFailure?: "fail-closed" | "permissive-default";
+    onWarning?: (msg: string, ctx: Record<string, unknown>) => void;
     /**
      * Optional clock for testability. Returns unix milliseconds.
      * Defaults to () => Date.now().
@@ -1596,6 +1598,8 @@ declare class PolicyProvider {
     private readonly client;
     private readonly issuerId;
     private readonly cacheTtlMs;
+    private readonly onFetchFailure;
+    private readonly onWarning?;
     private readonly now;
     private cache;
     private inflight;
@@ -1987,7 +1991,7 @@ interface PTRedeemResponse {
     /** The BurnRequest deadline (unix seconds) — FE uses this to surface a countdown. */
     signatureDeadline: bigint;
 }
-type PTRedeemErrorCode = "UNAUTHORIZED" | "INVALID_AMOUNT" | "NONCE_READ_FAILED" | "NONCE_IN_FLIGHT" | "LEDGER_NOT_SUPPORTED" | "SIGNING_FAILED" | "REDEMPTION_POLICY_DENIED" | "UNSUPPORTED_POINT_TOKEN";
+type PTRedeemErrorCode = "UNAUTHORIZED" | "INVALID_AMOUNT" | "NONCE_READ_FAILED" | "NONCE_IN_FLIGHT" | "LEDGER_NOT_SUPPORTED" | "SIGNING_FAILED" | "REDEMPTION_POLICY_DENIED" | "REDEMPTION_POLICY_UNAVAILABLE" | "UNSUPPORTED_POINT_TOKEN";
 declare class PTRedeemError extends PafiSdkError {
     readonly httpStatus: "unprocessable";
     readonly code: PTRedeemErrorCode;
@@ -2039,9 +2043,9 @@ interface PafiBackendConfig {
     /**
      * chainId — used to derive the sponsor-relayer base URL via
      * `getPafiServiceUrls(chainId).sponsorRelayer`. SDK ships with the
-     * URL per chainId; bump SDK version to retarget.
      */
     chainId: number;
+    baseUrl?: string;
     issuerId: string;
     apiKey: string;
     fetchImpl?: typeof fetch;
@@ -2198,12 +2202,32 @@ interface MintStatusParams {
      *   - lock.status === "PENDING"
      *   - lock.userOpHash is bound (set by `/claim/submit`)
      *
-     * If the bundler reports the UserOp confirmed, the handler updates
+     * If the bundler reports the UserOp confirmed AND the receipt block
+     * is past the configured `confirmations` depth, the handler updates
      * the ledger lock + returns `MINTED` immediately, bypassing
      * `PointIndexer`'s amount-based race (multiple PENDING locks with
      * the same amount can be matched to the wrong tx_hash).
      */
     pafiBackendClient?: PafiBackendClient | null;
+    /**
+     * Audit PACI5-13 — required for the confirmation-depth check on the
+     * bundler-receipt fallback. The bundler returns success at zero
+     * confs, but `PointIndexer` enforces a 3-block reorg window;
+     * crediting / debiting off-chain at 0 confs while the indexer waits
+     * for finality leaves an unbacked durable mutation if the tx is
+     * reorged out. Pass the SAME PublicClient that the indexer uses so
+     * both paths see consistent chain head. Optional only for legacy
+     * callers that don't supply `pafiBackendClient`; required whenever
+     * the receipt-fallback path can run.
+     */
+    provider?: PublicClient;
+    /**
+     * Audit PACI5-13 — confirmation depth required before the receipt
+     * fallback applies the credit / debit. MUST match
+     * `PointIndexer.confirmations` (default 3). Operators who reduce
+     * the indexer depth must set this to the same value.
+     */
+    confirmations?: number;
     /** Optional logger for "ledger update failed" warnings. */
     onWarning?: (msg: string) => void;
 }
@@ -2212,6 +2236,20 @@ interface BurnStatusParams {
     userAddress: Address;
     ledger: IPointLedger;
     pafiBackendClient?: PafiBackendClient | null;
+    /**
+     * Audit PACI5-13 — see `MintStatusParams.provider` for full
+     * rationale. The receipt-fallback path applies a spendable
+     * off-chain credit; without a confirmation-depth gate a reorg
+     * before `BurnIndexer.confirmations` leaves durable unbacked
+     * credit with no reversal mechanism.
+     */
+    provider?: PublicClient;
+    /**
+     * Audit PACI5-13 — confirmation depth required before the receipt
+     * fallback applies the credit. MUST match
+     * `BurnIndexer.confirmations` (default 3).
+     */
+    confirmations?: number;
     onWarning?: (msg: string) => void;
 }
 declare class LockNotFoundError extends PafiSdkError {
@@ -3185,6 +3223,26 @@ interface IssuerServiceConfig {
         issuerId: string;
         apiKey: string;
         historyStore: IRedemptionHistoryStore;
+        /**
+         * Optional override for the PAFI issuer-api base URL. Audit
+         * env var (e.g. `PAFI_ISSUER_API_URL`) so policy fetch hits the
+         * canonical environment for the deploy. Undefined → SDK
+         * ship-default per chainId.
+         */
+        baseUrl?: string;
+        /**
+         * Behavior khi settlement-api fetch fail. Default `'fail-closed'`
+         * Opt in to `'permissive-default'` ONLY when paired with an alert
+         * on the `policy_provider_fallback` event surfaced via
+         * `onPolicyWarning`.
+         */
+        onFetchFailure?: "fail-closed" | "permissive-default";
+        /**
+         * Observability hook for `policy_provider_fallback` events. Wire
+         * to your logger / Sentry / Datadog so the on-call dashboard sees
+         * settlement-api degradation.
+         */
+        onPolicyWarning?: (msg: string, ctx: Record<string, unknown>) => void;
         /** Override fetch (testing). */
         fetchImpl?: typeof fetch;
         /** Per-fetch timeout in ms. Default 1000. */
@@ -3354,12 +3412,6 @@ interface RedeemPrepareDto extends MobilePrepareDto {
      * Lock id reserved for the FALLBACK redeem path (= full `amount`).
      * Mobile FE polls `/redeem/status/:lockIdFallback` when it submits
      * the fallback variant (`variant: 'fallback'` on `/redeem/submit`).
-     *
-     * Audit PACI5-21 — pre-fix the adapter exposed only the sponsored
-     * `lockId` (= `amount - fee`), so the bundler-receipt fallback in
-     * `handleRedeemStatus` resolved the smaller credit against the
-     * on-chain burn of the full amount → user under-credited by exactly
-     * the fee on every fallback redeem.
      */
     lockIdFallback?: string;
 }

package/dist/index.d.ts

@@ -1551,9 +1551,9 @@ interface SettlementClientConfig {
     /**
      * chainId — used to derive the issuer-api base URL via
      * `getPafiServiceUrls(chainId).issuerApi`. SDK ships with the URL
-     * per chainId; bump SDK version to retarget.
      */
     chainId: number;
+    baseUrl?: string;
     /** PAFI-assigned issuer id used in `X-Issuer-Id` header. */
     issuerId: string;
     /** Raw API key sent as `Authorization: Bearer <apiKey>`. */
@@ -1566,6 +1566,8 @@ interface SettlementClientConfig {
 interface PolicyProviderConfig extends SettlementClientConfig {
     /** Cache TTL in milliseconds. Default 5 * 60 * 1000 (5min). */
     cacheTtlMs?: number;
+    onFetchFailure?: "fail-closed" | "permissive-default";
+    onWarning?: (msg: string, ctx: Record<string, unknown>) => void;
     /**
      * Optional clock for testability. Returns unix milliseconds.
      * Defaults to () => Date.now().
@@ -1596,6 +1598,8 @@ declare class PolicyProvider {
     private readonly client;
     private readonly issuerId;
     private readonly cacheTtlMs;
+    private readonly onFetchFailure;
+    private readonly onWarning?;
     private readonly now;
     private cache;
     private inflight;
@@ -1987,7 +1991,7 @@ interface PTRedeemResponse {
     /** The BurnRequest deadline (unix seconds) — FE uses this to surface a countdown. */
     signatureDeadline: bigint;
 }
-type PTRedeemErrorCode = "UNAUTHORIZED" | "INVALID_AMOUNT" | "NONCE_READ_FAILED" | "NONCE_IN_FLIGHT" | "LEDGER_NOT_SUPPORTED" | "SIGNING_FAILED" | "REDEMPTION_POLICY_DENIED" | "UNSUPPORTED_POINT_TOKEN";
+type PTRedeemErrorCode = "UNAUTHORIZED" | "INVALID_AMOUNT" | "NONCE_READ_FAILED" | "NONCE_IN_FLIGHT" | "LEDGER_NOT_SUPPORTED" | "SIGNING_FAILED" | "REDEMPTION_POLICY_DENIED" | "REDEMPTION_POLICY_UNAVAILABLE" | "UNSUPPORTED_POINT_TOKEN";
 declare class PTRedeemError extends PafiSdkError {
     readonly httpStatus: "unprocessable";
     readonly code: PTRedeemErrorCode;
@@ -2039,9 +2043,9 @@ interface PafiBackendConfig {
     /**
      * chainId — used to derive the sponsor-relayer base URL via
      * `getPafiServiceUrls(chainId).sponsorRelayer`. SDK ships with the
-     * URL per chainId; bump SDK version to retarget.
      */
     chainId: number;
+    baseUrl?: string;
     issuerId: string;
     apiKey: string;
     fetchImpl?: typeof fetch;
@@ -2198,12 +2202,32 @@ interface MintStatusParams {
      *   - lock.status === "PENDING"
      *   - lock.userOpHash is bound (set by `/claim/submit`)
      *
-     * If the bundler reports the UserOp confirmed, the handler updates
+     * If the bundler reports the UserOp confirmed AND the receipt block
+     * is past the configured `confirmations` depth, the handler updates
      * the ledger lock + returns `MINTED` immediately, bypassing
      * `PointIndexer`'s amount-based race (multiple PENDING locks with
      * the same amount can be matched to the wrong tx_hash).
      */
     pafiBackendClient?: PafiBackendClient | null;
+    /**
+     * Audit PACI5-13 — required for the confirmation-depth check on the
+     * bundler-receipt fallback. The bundler returns success at zero
+     * confs, but `PointIndexer` enforces a 3-block reorg window;
+     * crediting / debiting off-chain at 0 confs while the indexer waits
+     * for finality leaves an unbacked durable mutation if the tx is
+     * reorged out. Pass the SAME PublicClient that the indexer uses so
+     * both paths see consistent chain head. Optional only for legacy
+     * callers that don't supply `pafiBackendClient`; required whenever
+     * the receipt-fallback path can run.
+     */
+    provider?: PublicClient;
+    /**
+     * Audit PACI5-13 — confirmation depth required before the receipt
+     * fallback applies the credit / debit. MUST match
+     * `PointIndexer.confirmations` (default 3). Operators who reduce
+     * the indexer depth must set this to the same value.
+     */
+    confirmations?: number;
     /** Optional logger for "ledger update failed" warnings. */
     onWarning?: (msg: string) => void;
 }
@@ -2212,6 +2236,20 @@ interface BurnStatusParams {
     userAddress: Address;
     ledger: IPointLedger;
     pafiBackendClient?: PafiBackendClient | null;
+    /**
+     * Audit PACI5-13 — see `MintStatusParams.provider` for full
+     * rationale. The receipt-fallback path applies a spendable
+     * off-chain credit; without a confirmation-depth gate a reorg
+     * before `BurnIndexer.confirmations` leaves durable unbacked
+     * credit with no reversal mechanism.
+     */
+    provider?: PublicClient;
+    /**
+     * Audit PACI5-13 — confirmation depth required before the receipt
+     * fallback applies the credit. MUST match
+     * `BurnIndexer.confirmations` (default 3).
+     */
+    confirmations?: number;
     onWarning?: (msg: string) => void;
 }
 declare class LockNotFoundError extends PafiSdkError {
@@ -3185,6 +3223,26 @@ interface IssuerServiceConfig {
         issuerId: string;
         apiKey: string;
         historyStore: IRedemptionHistoryStore;
+        /**
+         * Optional override for the PAFI issuer-api base URL. Audit
+         * env var (e.g. `PAFI_ISSUER_API_URL`) so policy fetch hits the
+         * canonical environment for the deploy. Undefined → SDK
+         * ship-default per chainId.
+         */
+        baseUrl?: string;
+        /**
+         * Behavior khi settlement-api fetch fail. Default `'fail-closed'`
+         * Opt in to `'permissive-default'` ONLY when paired with an alert
+         * on the `policy_provider_fallback` event surfaced via
+         * `onPolicyWarning`.
+         */
+        onFetchFailure?: "fail-closed" | "permissive-default";
+        /**
+         * Observability hook for `policy_provider_fallback` events. Wire
+         * to your logger / Sentry / Datadog so the on-call dashboard sees
+         * settlement-api degradation.
+         */
+        onPolicyWarning?: (msg: string, ctx: Record<string, unknown>) => void;
         /** Override fetch (testing). */
         fetchImpl?: typeof fetch;
         /** Per-fetch timeout in ms. Default 1000. */
@@ -3354,12 +3412,6 @@ interface RedeemPrepareDto extends MobilePrepareDto {
      * Lock id reserved for the FALLBACK redeem path (= full `amount`).
      * Mobile FE polls `/redeem/status/:lockIdFallback` when it submits
      * the fallback variant (`variant: 'fallback'` on `/redeem/submit`).
-     *
-     * Audit PACI5-21 — pre-fix the adapter exposed only the sponsored
-     * `lockId` (= `amount - fee`), so the bundler-receipt fallback in
-     * `handleRedeemStatus` resolved the smaller credit against the
-     * on-chain burn of the full amount → user under-credited by exactly
-     * the fee on every fallback redeem.
      */
     lockIdFallback?: string;
 }

package/dist/index.js

@@ -2190,11 +2190,23 @@ var PTRedeemHandler = class {
       );
     }
     if (this.redemptionService) {
-      const decision = await this.redemptionService.evaluate(
-        request.userAddress,
-        request.amount,
-        pointTokenAddress
-      );
+      let decision;
+      try {
+        decision = await this.redemptionService.evaluate(
+          request.userAddress,
+          request.amount,
+          pointTokenAddress
+        );
+      } catch (err) {
+        const code = err && typeof err === "object" && "code" in err ? err.code : void 0;
+        if (code === "POLICY_PROVIDER_UNAVAILABLE") {
+          throw new PTRedeemError(
+            "REDEMPTION_POLICY_UNAVAILABLE",
+            "Redemption policy temporarily unavailable \u2014 please try again shortly."
+          );
+        }
+        throw err;
+      }
       if (!decision.allowed) {
         const denial = decision.denial;
         throw new PTRedeemError(
@@ -2410,6 +2422,45 @@ var PTRedeemHandler = class {
 };
 
 // src/api/statusHandlers.ts
+var DEFAULT_STATUS_CONFIRMATIONS = 3;
+async function isReceiptPastConfirmations(receipt, provider, confirmations, onWarning, handlerName) {
+  if (!provider) {
+    onWarning?.(
+      `${handlerName}: provider missing \u2014 cannot enforce confirmation depth; deferring receipt fallback to on-chain indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  if (!receipt.blockNumber) {
+    onWarning?.(
+      `${handlerName}: receipt has no blockNumber \u2014 cannot enforce confirmation depth; deferring to indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  const requiredConfs = BigInt(confirmations ?? DEFAULT_STATUS_CONFIRMATIONS);
+  let receiptBlock;
+  try {
+    receiptBlock = BigInt(receipt.blockNumber);
+  } catch {
+    onWarning?.(
+      `${handlerName}: malformed receipt blockNumber (${receipt.blockNumber}) \u2014 deferring to indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  let head;
+  try {
+    head = await provider.getBlockNumber();
+  } catch (err) {
+    onWarning?.(
+      `${handlerName}: getBlockNumber failed (${err instanceof Error ? err.message : String(err)}) \u2014 deferring to indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  const depth = head - receiptBlock;
+  if (depth < requiredConfs) {
+    return false;
+  }
+  return true;
+}
 var LockNotFoundError = class extends PafiSdkError {
   code = "LOCK_NOT_FOUND";
   httpStatus = "not_found";
@@ -2438,6 +2489,23 @@ async function handleClaimStatus(params) {
         lock.userOpHash
       );
       if (receipt) {
+        const passesConfirmationDepth = await isReceiptPastConfirmations(
+          receipt,
+          params.provider,
+          params.confirmations,
+          params.onWarning,
+          "handleClaimStatus"
+        );
+        if (!passesConfirmationDepth) {
+          return {
+            lockId: lock.lockId,
+            status: "PENDING",
+            txHash: lock.txHash ?? null,
+            amount: lock.amount.toString(),
+            createdAt: new Date(lock.createdAt).toISOString(),
+            expiresAt: new Date(lock.expiresAt).toISOString()
+          };
+        }
         if (receipt.success && receipt.txHash) {
           if (!lock.tokenAddress) {
             params.onWarning?.(
@@ -2512,14 +2580,23 @@ async function handleRedeemStatus(params) {
         credit.userOpHash
       );
       if (receipt && receipt.success) {
-        status = "RESOLVED";
-        txHash = receipt.txHash;
-        if (params.ledger.resolveCreditByBurnTx) {
-          await params.ledger.resolveCreditByBurnTx(credit.lockId, receipt.txHash).catch((err) => {
-            params.onWarning?.(
-              `handleRedeemStatus: resolveCreditByBurnTx failed for lock ${credit.lockId}: ${err}`
-            );
-          });
+        const passesConfirmationDepth = await isReceiptPastConfirmations(
+          receipt,
+          params.provider,
+          params.confirmations,
+          params.onWarning,
+          "handleRedeemStatus"
+        );
+        if (passesConfirmationDepth) {
+          status = "RESOLVED";
+          txHash = receipt.txHash;
+          if (params.ledger.resolveCreditByBurnTx) {
+            await params.ledger.resolveCreditByBurnTx(credit.lockId, receipt.txHash).catch((err) => {
+              params.onWarning?.(
+                `handleRedeemStatus: resolveCreditByBurnTx failed for lock ${credit.lockId}: ${err}`
+              );
+            });
+          }
         }
       }
     } catch (err) {
@@ -3682,10 +3759,6 @@ var IssuerApiAdapter = class {
       pointTokenAddress,
       redeemResponse.expiresInSeconds,
       input.eip7702Auth,
-      // Audit PACI5-21 — fallback path reserves a separate
-      // PendingCredit row for the full `amount`. Surface its lockId so
-      // mobile FE can poll the correct row + `handleMobileSubmit`
-      // routes the userOpHash bind to it on fallback submit.
       redeemResponse.fallback?.lockId
     );
     return {
@@ -3721,6 +3794,9 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
+      // Audit PACI5-13 — pass the same provider the indexers use so
+      // the receipt fallback gates on the same reorg depth.
+      provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
   }
@@ -3730,6 +3806,8 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
+      // Audit PACI5-13 — see claimStatus comment.
+      provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
   }
@@ -4264,7 +4342,9 @@ var PafiBackendClient = class {
     if (!config.issuerId) throw new Error("PafiBackendClient: issuerId is required");
     if (!config.apiKey) throw new Error("PafiBackendClient: apiKey is required");
     this.config = config;
-    this.baseUrl = getPafiServiceUrls(config.chainId).sponsorRelayer;
+    this.baseUrl = getPafiServiceUrls(config.chainId, {
+      sponsorRelayer: config.baseUrl
+    }).sponsorRelayer;
   }
   async requestSponsorship(request) {
     const maxAttempts = this.config.retry?.maxAttempts ?? 1;
@@ -4529,6 +4609,9 @@ function nextBlackoutEndAfter(windows, nowUnixSec) {
 }
 var REDEMPTION_HISTORY_WINDOW_SEC = SECONDS_PER_DAY;
 
+// src/redemption/policyProvider.ts
+import { PafiSdkError as PafiSdkError2 } from "@pafi-dev/core";
+
 // src/redemption/settlementClient.ts
 import {
   getPafiServiceUrls as getPafiServiceUrls2
@@ -4541,7 +4624,9 @@ var SettlementClient = class {
     if (!config.issuerId) throw new Error("SettlementClient: issuerId is required");
     if (!config.apiKey) throw new Error("SettlementClient: apiKey is required");
     this.config = {
-      baseUrl: getPafiServiceUrls2(config.chainId).issuerApi.replace(/\/+$/, ""),
+      baseUrl: getPafiServiceUrls2(config.chainId, {
+        issuerApi: config.baseUrl
+      }).issuerApi.replace(/\/+$/, ""),
       issuerId: config.issuerId,
       apiKey: config.apiKey,
       fetchTimeoutMs: config.fetchTimeoutMs ?? DEFAULT_TIMEOUT_MS,
@@ -4645,10 +4730,23 @@ function defaultPolicyFor(issuerId) {
 
 // src/redemption/policyProvider.ts
 var DEFAULT_CACHE_TTL_MS3 = 5 * 60 * 1e3;
+var PolicyProviderUnavailableError = class extends PafiSdkError2 {
+  code = "POLICY_PROVIDER_UNAVAILABLE";
+  httpStatus = "service_unavailable";
+  details;
+  constructor(issuerId, reason) {
+    super(
+      `Redemption policy provider unavailable for issuer ${issuerId}: ${reason}. Pre-flight redeem limit cannot be enforced \u2014 refusing to sign BurnRequest. Mobile FE: surface "try again shortly" and retry with backoff.`
+    );
+    this.details = { issuerId, reason };
+  }
+};
 var PolicyProvider = class {
   client;
   issuerId;
   cacheTtlMs;
+  onFetchFailure;
+  onWarning;
   now;
   cache = null;
   inflight = null;
@@ -4656,6 +4754,8 @@ var PolicyProvider = class {
     this.client = new SettlementClient(config);
     this.issuerId = config.issuerId;
     this.cacheTtlMs = config.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS3;
+    this.onFetchFailure = config.onFetchFailure ?? "fail-closed";
+    this.onWarning = config.onWarning;
     this.now = config.now ?? (() => Date.now());
   }
   async getPolicy() {
@@ -4688,7 +4788,19 @@ var PolicyProvider = class {
       };
       return { policy: result.policy, source: "settlement" };
     }
-    return { policy: defaultPolicyFor(this.issuerId), source: "default" };
+    const reason = "reason" in result && typeof result.reason === "string" ? result.reason : "unknown";
+    if (this.onFetchFailure === "permissive-default") {
+      this.onWarning?.(
+        "PolicyProvider: settlement-api unreachable, falling back to permissive default. Pre-flight redeem limit is DEGRADED until settlement-api recovers.",
+        {
+          event: "policy_provider_fallback",
+          issuerId: this.issuerId,
+          reason
+        }
+      );
+      return { policy: defaultPolicyFor(this.issuerId), source: "default" };
+    }
+    throw new PolicyProviderUnavailableError(this.issuerId, reason);
   }
 };
 
@@ -4835,6 +4947,15 @@ async function createIssuerService(config) {
       issuerId: config.redemption.issuerId,
       apiKey: config.redemption.apiKey
     };
+    if (config.redemption.baseUrl) {
+      policyConfig.baseUrl = config.redemption.baseUrl;
+    }
+    if (config.redemption.onFetchFailure) {
+      policyConfig.onFetchFailure = config.redemption.onFetchFailure;
+    }
+    if (config.redemption.onPolicyWarning) {
+      policyConfig.onWarning = config.redemption.onPolicyWarning;
+    }
     if (config.redemption.fetchImpl) policyConfig.fetchImpl = config.redemption.fetchImpl;
     if (config.redemption.fetchTimeoutMs !== void 0) {
       policyConfig.fetchTimeoutMs = config.redemption.fetchTimeoutMs;
@@ -5099,7 +5220,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.31.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.33.0" : "dev";
 export {
   AdapterMisconfiguredError,
   AuthError,