@pafi-dev/issuer 0.32.0 → 0.33.0

package/dist/index.cjs

@@ -2646,6 +2646,45 @@ var PTRedeemHandler = class {
 };
 
 // src/api/statusHandlers.ts
+var DEFAULT_STATUS_CONFIRMATIONS = 3;
+async function isReceiptPastConfirmations(receipt, provider, confirmations, onWarning, handlerName) {
+  if (!provider) {
+    onWarning?.(
+      `${handlerName}: provider missing \u2014 cannot enforce confirmation depth; deferring receipt fallback to on-chain indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  if (!receipt.blockNumber) {
+    onWarning?.(
+      `${handlerName}: receipt has no blockNumber \u2014 cannot enforce confirmation depth; deferring to indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  const requiredConfs = BigInt(confirmations ?? DEFAULT_STATUS_CONFIRMATIONS);
+  let receiptBlock;
+  try {
+    receiptBlock = BigInt(receipt.blockNumber);
+  } catch {
+    onWarning?.(
+      `${handlerName}: malformed receipt blockNumber (${receipt.blockNumber}) \u2014 deferring to indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  let head;
+  try {
+    head = await provider.getBlockNumber();
+  } catch (err) {
+    onWarning?.(
+      `${handlerName}: getBlockNumber failed (${err instanceof Error ? err.message : String(err)}) \u2014 deferring to indexer (audit PACI5-13).`
+    );
+    return false;
+  }
+  const depth = head - receiptBlock;
+  if (depth < requiredConfs) {
+    return false;
+  }
+  return true;
+}
 var LockNotFoundError = class extends import_core.PafiSdkError {
   code = "LOCK_NOT_FOUND";
   httpStatus = "not_found";
@@ -2674,6 +2713,23 @@ async function handleClaimStatus(params) {
         lock.userOpHash
       );
       if (receipt) {
+        const passesConfirmationDepth = await isReceiptPastConfirmations(
+          receipt,
+          params.provider,
+          params.confirmations,
+          params.onWarning,
+          "handleClaimStatus"
+        );
+        if (!passesConfirmationDepth) {
+          return {
+            lockId: lock.lockId,
+            status: "PENDING",
+            txHash: lock.txHash ?? null,
+            amount: lock.amount.toString(),
+            createdAt: new Date(lock.createdAt).toISOString(),
+            expiresAt: new Date(lock.expiresAt).toISOString()
+          };
+        }
         if (receipt.success && receipt.txHash) {
           if (!lock.tokenAddress) {
             params.onWarning?.(
@@ -2748,14 +2804,23 @@ async function handleRedeemStatus(params) {
         credit.userOpHash
       );
       if (receipt && receipt.success) {
-        status = "RESOLVED";
-        txHash = receipt.txHash;
-        if (params.ledger.resolveCreditByBurnTx) {
-          await params.ledger.resolveCreditByBurnTx(credit.lockId, receipt.txHash).catch((err) => {
-            params.onWarning?.(
-              `handleRedeemStatus: resolveCreditByBurnTx failed for lock ${credit.lockId}: ${err}`
-            );
-          });
+        const passesConfirmationDepth = await isReceiptPastConfirmations(
+          receipt,
+          params.provider,
+          params.confirmations,
+          params.onWarning,
+          "handleRedeemStatus"
+        );
+        if (passesConfirmationDepth) {
+          status = "RESOLVED";
+          txHash = receipt.txHash;
+          if (params.ledger.resolveCreditByBurnTx) {
+            await params.ledger.resolveCreditByBurnTx(credit.lockId, receipt.txHash).catch((err) => {
+              params.onWarning?.(
+                `handleRedeemStatus: resolveCreditByBurnTx failed for lock ${credit.lockId}: ${err}`
+              );
+            });
+          }
         }
       }
     } catch (err) {
@@ -3919,6 +3984,9 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
+      // Audit PACI5-13 — pass the same provider the indexers use so
+      // the receipt fallback gates on the same reorg depth.
+      provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
   }
@@ -3928,6 +3996,8 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
+      // Audit PACI5-13 — see claimStatus comment.
+      provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
   }
@@ -4742,9 +4812,6 @@ var SettlementClient = class {
     if (!config.issuerId) throw new Error("SettlementClient: issuerId is required");
     if (!config.apiKey) throw new Error("SettlementClient: apiKey is required");
     this.config = {
-      // Audit PACI5-17 — honor optional baseUrl override wired from
-      // an env var (e.g. PAFI_ISSUER_API_URL). Empty / undefined →
-      // ship-default for chainId.
       baseUrl: (0, import_core17.getPafiServiceUrls)(config.chainId, {
         issuerApi: config.baseUrl
       }).issuerApi.replace(/\/+$/, ""),
@@ -5337,7 +5404,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.32.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.33.0" : "dev";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdapterMisconfiguredError,