@pafi-dev/issuer 0.33.0 → 0.34.0

package/dist/index.d.cts

@@ -2210,8 +2210,7 @@ interface MintStatusParams {
      */
     pafiBackendClient?: PafiBackendClient | null;
     /**
-     * Audit PACI5-13 — required for the confirmation-depth check on the
-     * bundler-receipt fallback. The bundler returns success at zero
+     * Guard for the bundler-receipt fallback. The bundler returns success at zero
      * confs, but `PointIndexer` enforces a 3-block reorg window;
      * crediting / debiting off-chain at 0 confs while the indexer waits
      * for finality leaves an unbacked durable mutation if the tx is
@@ -2222,7 +2221,7 @@ interface MintStatusParams {
      */
     provider?: PublicClient;
     /**
-     * Audit PACI5-13 — confirmation depth required before the receipt
+     * Confirmation depth required before the receipt
      * fallback applies the credit / debit. MUST match
      * `PointIndexer.confirmations` (default 3). Operators who reduce
      * the indexer depth must set this to the same value.
@@ -2237,7 +2236,7 @@ interface BurnStatusParams {
     ledger: IPointLedger;
     pafiBackendClient?: PafiBackendClient | null;
     /**
-     * Audit PACI5-13 — see `MintStatusParams.provider` for full
+     * BurnStatusParams.provider` for full
      * rationale. The receipt-fallback path applies a spendable
      * off-chain credit; without a confirmation-depth gate a reorg
      * before `BurnIndexer.confirmations` leaves durable unbacked
@@ -2245,7 +2244,7 @@ interface BurnStatusParams {
      */
     provider?: PublicClient;
     /**
-     * Audit PACI5-13 — confirmation depth required before the receipt
+     * Confirmation depth required before the receipt
      * fallback applies the credit. MUST match
      * `BurnIndexer.confirmations` (default 3).
      */
@@ -3951,9 +3950,12 @@ declare class IssuerStateError extends PafiSdkError {
  *
  * Caching:
  *   - `PointToken.issuer()` — memoized for the process lifetime (immutable)
- *   - Full state (registry + totalSupply) — 30s TTL per PointToken
+ *   - Full state (registry + totalSupply) — 10s TTL per PointToken
+ *     (was 30s pre-audit PACI5-3; see `ISSUER_RECORD_TTL_MS` comment)
  *   - Burst calls while a fetch is in-flight share the same Promise
  *     (thundering-herd protection)
+ *   - Operators can call `invalidate()` after admin txs land to bust
+ *     the cache immediately instead of waiting up to TTL.
  *
  * Usage in NestJS: wrap this in an `@Injectable()` service; pass
  * `PublicClient` and `registryAddress` from your DI container.
@@ -3972,7 +3974,9 @@ declare class IssuerStateValidator {
     static forChain(provider: PublicClient, chainId: number): IssuerStateValidator;
     /**
      * Invalidate cached state for one PointToken, or everything if omitted.
-     * Call after admin txs that change registry or cap settings.
+     * Call after admin txs that change registry or cap settings — closes
+     * the split-brain window described in audit PACI5-3 ahead of the
+     * passive TTL. Idempotent: safe to call when no entry exists.
      */
     invalidate(pointToken?: Address): void;
     /**

package/dist/index.d.ts

@@ -2210,8 +2210,7 @@ interface MintStatusParams {
      */
     pafiBackendClient?: PafiBackendClient | null;
     /**
-     * Audit PACI5-13 — required for the confirmation-depth check on the
-     * bundler-receipt fallback. The bundler returns success at zero
+     * Guard for the bundler-receipt fallback. The bundler returns success at zero
      * confs, but `PointIndexer` enforces a 3-block reorg window;
      * crediting / debiting off-chain at 0 confs while the indexer waits
      * for finality leaves an unbacked durable mutation if the tx is
@@ -2222,7 +2221,7 @@ interface MintStatusParams {
      */
     provider?: PublicClient;
     /**
-     * Audit PACI5-13 — confirmation depth required before the receipt
+     * Confirmation depth required before the receipt
      * fallback applies the credit / debit. MUST match
      * `PointIndexer.confirmations` (default 3). Operators who reduce
      * the indexer depth must set this to the same value.
@@ -2237,7 +2236,7 @@ interface BurnStatusParams {
     ledger: IPointLedger;
     pafiBackendClient?: PafiBackendClient | null;
     /**
-     * Audit PACI5-13 — see `MintStatusParams.provider` for full
+     * BurnStatusParams.provider` for full
      * rationale. The receipt-fallback path applies a spendable
      * off-chain credit; without a confirmation-depth gate a reorg
      * before `BurnIndexer.confirmations` leaves durable unbacked
@@ -2245,7 +2244,7 @@ interface BurnStatusParams {
      */
     provider?: PublicClient;
     /**
-     * Audit PACI5-13 — confirmation depth required before the receipt
+     * Confirmation depth required before the receipt
      * fallback applies the credit. MUST match
      * `BurnIndexer.confirmations` (default 3).
      */
@@ -3951,9 +3950,12 @@ declare class IssuerStateError extends PafiSdkError {
  *
  * Caching:
  *   - `PointToken.issuer()` — memoized for the process lifetime (immutable)
- *   - Full state (registry + totalSupply) — 30s TTL per PointToken
+ *   - Full state (registry + totalSupply) — 10s TTL per PointToken
+ *     (was 30s pre-audit PACI5-3; see `ISSUER_RECORD_TTL_MS` comment)
  *   - Burst calls while a fetch is in-flight share the same Promise
  *     (thundering-herd protection)
+ *   - Operators can call `invalidate()` after admin txs land to bust
+ *     the cache immediately instead of waiting up to TTL.
  *
  * Usage in NestJS: wrap this in an `@Injectable()` service; pass
  * `PublicClient` and `registryAddress` from your DI container.
@@ -3972,7 +3974,9 @@ declare class IssuerStateValidator {
     static forChain(provider: PublicClient, chainId: number): IssuerStateValidator;
     /**
      * Invalidate cached state for one PointToken, or everything if omitted.
-     * Call after admin txs that change registry or cap settings.
+     * Call after admin txs that change registry or cap settings — closes
+     * the split-brain window described in audit PACI5-3 ahead of the
+     * passive TTL. Idempotent: safe to call when no entry exists.
      */
     invalidate(pointToken?: Address): void;
     /**

package/dist/index.js

@@ -2426,13 +2426,13 @@ var DEFAULT_STATUS_CONFIRMATIONS = 3;
 async function isReceiptPastConfirmations(receipt, provider, confirmations, onWarning, handlerName) {
   if (!provider) {
     onWarning?.(
-      `${handlerName}: provider missing \u2014 cannot enforce confirmation depth; deferring receipt fallback to on-chain indexer (audit PACI5-13).`
+      `${handlerName}: provider missing \u2014 cannot enforce confirmation depth; deferring receipt fallback to on-chain indexer.`
     );
     return false;
   }
   if (!receipt.blockNumber) {
     onWarning?.(
-      `${handlerName}: receipt has no blockNumber \u2014 cannot enforce confirmation depth; deferring to indexer (audit PACI5-13).`
+      `${handlerName}: receipt has no blockNumber \u2014 cannot enforce confirmation depth; deferring to indexer.`
     );
     return false;
   }
@@ -2442,7 +2442,7 @@ async function isReceiptPastConfirmations(receipt, provider, confirmations, onWa
     receiptBlock = BigInt(receipt.blockNumber);
   } catch {
     onWarning?.(
-      `${handlerName}: malformed receipt blockNumber (${receipt.blockNumber}) \u2014 deferring to indexer (audit PACI5-13).`
+      `${handlerName}: malformed receipt blockNumber (${receipt.blockNumber}) \u2014 deferring to indexer.`
     );
     return false;
   }
@@ -2451,7 +2451,7 @@ async function isReceiptPastConfirmations(receipt, provider, confirmations, onWa
     head = await provider.getBlockNumber();
   } catch (err) {
     onWarning?.(
-      `${handlerName}: getBlockNumber failed (${err instanceof Error ? err.message : String(err)}) \u2014 deferring to indexer (audit PACI5-13).`
+      `${handlerName}: getBlockNumber failed (${err instanceof Error ? err.message : String(err)}) \u2014 deferring to indexer.`
     );
     return false;
   }
@@ -3794,8 +3794,6 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
-      // Audit PACI5-13 — pass the same provider the indexers use so
-      // the receipt fallback gates on the same reorg depth.
       provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
@@ -3806,7 +3804,6 @@ var IssuerApiAdapter = class {
       userAddress: authenticatedAddress,
       ledger: this.cfg.ledger,
       pafiBackendClient: this.cfg.pafiBackendClient,
-      // Audit PACI5-13 — see claimStatus comment.
       provider: this.cfg.provider,
       onWarning: this.cfg.onWarning
     });
@@ -5026,7 +5023,7 @@ import {
   issuerRegistryAbi,
   getContractAddresses as getContractAddresses8
 } from "@pafi-dev/core";
-var ISSUER_RECORD_TTL_MS = 3e4;
+var ISSUER_RECORD_TTL_MS = 1e4;
 var IssuerStateValidator = class _IssuerStateValidator {
   constructor(provider, registryAddress) {
     this.provider = provider;
@@ -5047,7 +5044,9 @@ var IssuerStateValidator = class _IssuerStateValidator {
   }
   /**
    * Invalidate cached state for one PointToken, or everything if omitted.
-   * Call after admin txs that change registry or cap settings.
+   * Call after admin txs that change registry or cap settings — closes
+   * the split-brain window described in audit PACI5-3 ahead of the
+   * passive TTL. Idempotent: safe to call when no entry exists.
    */
   invalidate(pointToken) {
     if (pointToken) {
@@ -5220,7 +5219,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.33.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.34.0" : "dev";
 export {
   AdapterMisconfiguredError,
   AuthError,