@pafi-dev/issuer 0.32.0 → 0.34.0

package/dist/index.cjs

@@ -2646,6 +2646,45 @@ var PTRedeemHandler = class {
 };
 
 // src/api/statusHandlers.ts
+var DEFAULT_STATUS_CONFIRMATIONS = 3;
+async function isReceiptPastConfirmations(receipt, provider, confirmations, onWarning, handlerName) {
+  if (!provider) {
+    onWarning?.(
+      `${handlerName}: provider missing \u2014 cannot enforce confirmation depth; deferring receipt fallback to on-chain indexer.`
+    );
+    return false;
+  }
+  if (!receipt.blockNumber) {
+    onWarning?.(
+      `${handlerName}: receipt has no blockNumber \u2014 cannot enforce confirmation depth; deferring to indexer.`
+    );
+    return false;
+  }
+  const requiredConfs = BigInt(confirmations ?? DEFAULT_STATUS_CONFIRMATIONS);
+  let receiptBlock;
+  try {
+    receiptBlock = BigInt(receipt.blockNumber);
+  } catch {
+    onWarning?.(
+      `${handlerName}: malformed receipt blockNumber (${receipt.blockNumber}) \u2014 deferring to indexer.`
+    );
+    return false;
+  }
+  let head;
+  try {
+    head = await provider.getBlockNumber();
+  } catch (err) {
+    onWarning?.(
+      `${handlerName}: getBlockNumber failed (${err instanceof Error ? err.message : String(err)}) \u2014 deferring to indexer.`
+    );
+    return false;
+  }
+  const depth = head - receiptBlock;
+  if (depth < requiredConfs) {
+    return false;
+  }
+  return true;
+}
 var LockNotFoundError = class extends import_core.PafiSdkError {
   code = "LOCK_NOT_FOUND";
   httpStatus = "not_found";
@@ -2674,6 +2713,23 @@ async function handleClaimStatus(params) {
         lock.userOpHash
       );
       if (receipt) {
+        const passesConfirmationDepth = await isReceiptPastConfirmations(
+          receipt,
+          params.provider,
+          params.confirmations,
+          params.onWarning,
+          "handleClaimStatus"
+        );
+        if (!passesConfirmationDepth) {
+          return {
+            lockId: lock.lockId,
+            status: "PENDING",
+            txHash: lock.txHash ?? null,
+            amount: lock.amount.toString(),
+            createdAt: new Date(lock.createdAt).toISOString(),
+            expiresAt: new Date(lock.expiresAt).toISOString()
+          };
+        }
         if (receipt.success && receipt.txHash) {
           if (!lock.tokenAddress) {
             params.onWarning?.(
@@ -2748,14 +2804,23 @@ async function handleRedeemStatus(params) {
         credit.userOpHash
       );
       if (receipt && receipt.success) {
-        status = "RESOLVED";
-        txHash = receipt.txHash;
-        if (params.ledger.resolveCreditByBurnTx) {
-          await params.ledger.resolveCreditByBurnTx(credit.lockId, receipt.txHash).catch((err) => {
-            params.onWarning?.(
-              `handleRedeemStatus: resolveCreditByBurnTx failed for lock ${credit.lockId}: ${err}`
-            );
-          });
+        const passesConfirmationDepth = await isReceiptPastConfirmations(
+          receipt,
+          params.provider,
+          params.confirmations,
+          params.onWarning,
+          "handleRedeemStatus"
+        );
+        if (passesConfirmationDepth) {
+          status = "RESOLVED";
+          txHash = receipt.txHash;
+          if (params.ledger.resolveCreditByBurnTx) {
+            await params.ledger.resolveCreditByBurnTx(credit.lockId, receipt.txHash).catch((err) => {
+              params.onWarning?.(
+                `handleRedeemStatus: resolveCreditByBurnTx failed for lock ${credit.lockId}: ${err}`
+              );
+            });
+          }
         }
       }
     } catch (err) {
@@ -3919,6 +3984,7 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
+      provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
   }
@@ -3928,6 +3994,7 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
+      provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
   }
@@ -4742,9 +4809,6 @@ var SettlementClient = class {
     if (!config.issuerId) throw new Error("SettlementClient: issuerId is required");
     if (!config.apiKey) throw new Error("SettlementClient: apiKey is required");
     this.config = {
-      // Audit PACI5-17 — honor optional baseUrl override wired from
-      // an env var (e.g. PAFI_ISSUER_API_URL). Empty / undefined →
-      // ship-default for chainId.
       baseUrl: (0, import_core17.getPafiServiceUrls)(config.chainId, {
         issuerApi: config.baseUrl
       }).issuerApi.replace(/\/+$/, ""),
@@ -5143,7 +5207,7 @@ async function createIssuerService(config) {
 // src/issuer-state/validator.ts
 var import_viem16 = require("viem");
 var import_core20 = require("@pafi-dev/core");
-var ISSUER_RECORD_TTL_MS = 3e4;
+var ISSUER_RECORD_TTL_MS = 1e4;
 var IssuerStateValidator = class _IssuerStateValidator {
   constructor(provider, registryAddress) {
     this.provider = provider;
@@ -5164,7 +5228,9 @@ var IssuerStateValidator = class _IssuerStateValidator {
   }
   /**
    * Invalidate cached state for one PointToken, or everything if omitted.
-   * Call after admin txs that change registry or cap settings.
+   * Call after admin txs that change registry or cap settings — closes
+   * the split-brain window described in audit PACI5-3 ahead of the
+   * passive TTL. Idempotent: safe to call when no entry exists.
    */
   invalidate(pointToken) {
     if (pointToken) {
@@ -5337,7 +5403,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.32.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.34.0" : "dev";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdapterMisconfiguredError,