@pafi-dev/issuer 0.40.0 → 0.41.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { PafiSdkError, SdkErrorHttpStatus, PointTokenDomainConfig, PartialUserOperation, BurnRequest, PoolKey, RedemptionPolicy, RedemptionPolicySource, RedemptionPreview, RedemptionDecision, RedemptionDenialCode, decodeKernelExecuteCalls, BROKER_HASHES, PafiErrorType, BuiltSponsorAuth, ENTRY_POINT_V08 } from '@pafi-dev/core';
+import { PafiSdkError, SdkErrorHttpStatus, PointTokenDomainConfig, PartialUserOperation, BurnRequest, PoolKey, RedemptionPolicy, RedemptionPolicySource, RedemptionPreview, RedemptionDecision, RedemptionDenialCode, decodeKernelExecuteCalls, BROKER_HASHES, PafiErrorType, ENTRY_POINT_V07 } from '@pafi-dev/core';
 export { PAFI_SUBGRAPH_URL, PafiErrorType, PafiSdkError, SDK_ERROR_HTTP_STATUS_CODE, SdkErrorHttpStatus, ValidationError, defaultErrorTypeForStatus } from '@pafi-dev/core';
 export { GenericHttpExceptionDescriptor, NormalizeContext, PafiErrorEnvelope, PafiErrorPayload, buildErrorEnvelope, payloadFromGenericError, payloadFromHttpException, payloadFromPafiSdkError } from './http/index.cjs';
 import { Address, Hex, PublicClient, WalletClient } from 'viem';
@@ -2749,7 +2749,11 @@ interface HandleMobileSubmitParams {
      */
     bindUserOpHash: (lockId: string, userOpHash: Hex) => Promise<void>;
     pafiBackendClient?: PafiBackendClient | null;
-    /** Defaults to `ENTRY_POINT_V08`. */
+    /**
+     * Defaults to `ENTRY_POINT_V07` — the version ZeroDev Kernel v3.3
+     * validates against and the only one sponsor-relayer's /bundler/relay
+     * accepts. Do NOT pass v0.8 (retired with the Pimlico stack).
+     */
     entryPoint?: string;
 }
 /**
@@ -2788,7 +2792,7 @@ interface IssuerStateValidatorLike {
  *
  * Caller fetches AA + mintRequest nonces (so issuers can plug in their
  * own composer — gg56 uses a timestamp-key 2D nonce). Caller layers
- * paymaster sponsorship + sponsorAuth on top of the returned UserOps.
+ * paymaster sponsorship on top of the returned UserOps.
  */
 type PTClaimErrorCode = "INVALID_AMOUNT" | "VALIDATION_FAILED" | "BUILD_FAILED" | "NONCE_READ_FAILED" | "NONCE_IN_FLIGHT" | "UNSUPPORTED_POINT_TOKEN";
 declare class PTClaimError extends PafiSdkError {
@@ -3245,7 +3249,7 @@ declare function createIssuerService(config: IssuerServiceConfig): Promise<Issue
  * What this absorbs:
  *   - Reading + reshaping IssuerApiHandlers responses into wire DTOs
  *     (bigint → string, etc.)
- *   - Composing handler.handle() output with sponsorAuth + decoded calls
+ *   - Composing handler.handle() output with decoded calls
  *   - Wiring handleMobilePrepare / handleMobileSubmit / handleClaimStatus
  *   - Quoting PT → USDT for the cashout preview
  *
@@ -3263,9 +3267,15 @@ interface IssuerApiAdapterConfig {
     issuerService: IssuerService;
     ledger: IPointLedger;
     provider: PublicClient;
-    /** Issuer signer wallet — used for `buildSponsorAuth` (EIP-712 sign). */
-    issuerSignerWallet: WalletClient;
-    /** Optional issuer id — when omitted, sponsorAuth is skipped (returns `undefined`). */
+    /**
+     * @deprecated No longer used. `sponsorAuth` was removed — nothing
+     * validated it (the sponsor-relayer independently decodes
+     * `UserOp.callData` to validate intent + fee), so signing it burned one
+     * HSM/KMS signature per request for no security benefit. Kept optional
+     * for back-compat; safe to stop passing.
+     */
+    issuerSignerWallet?: WalletClient;
+    /** @deprecated No longer used — see {@link IssuerApiAdapterConfig.issuerSignerWallet}. */
     pafiIssuerId?: string;
     /** Sig-gated mint handler. Required for `claim` / `claimPrepare`. */
     ptClaimHandler?: PTClaimHandler | null;
@@ -3309,7 +3319,6 @@ interface ClaimDto {
     feeAmount: string;
     lockId: string;
     signatureDeadline: string;
-    sponsorAuth?: BuiltSponsorAuth;
 }
 interface RedeemDto {
     calls: DecodedCallDto[];
@@ -3321,7 +3330,6 @@ interface RedeemDto {
     netCreditAmountFallback?: string;
     expiresInSeconds: number;
     signatureDeadline: string;
-    sponsorAuth?: BuiltSponsorAuth;
 }
 interface PerpDepositDto {
     calls: DecodedCallDto[];
@@ -3334,7 +3342,6 @@ interface PerpDepositDto {
     brokerHash: Hex;
     usdcAddress: Address;
     relayAddress: Address;
-    sponsorAuth?: BuiltSponsorAuth;
 }
 interface MobilePrepareDto {
     lockId: string;
@@ -3445,11 +3452,6 @@ declare class IssuerApiAdapter {
     }): Promise<MobileSubmitDto>;
     claimStatus(authenticatedAddress: Address, lockId: string): Promise<MintStatusResponse>;
     redeemStatus(authenticatedAddress: Address, lockId: string): Promise<BurnStatusResponse>;
-    /**
-     * Build + sign a SponsorAuth payload. Returns `undefined` when no
-     * issuer id is configured, so the controller can skip the field.
-     */
-    private buildSponsorAuth;
     private runMobilePrepare;
     private assertRedeemHandler;
     /**
@@ -3735,8 +3737,8 @@ interface RequestPaymasterParams {
 declare function requestPaymaster(params: RequestPaymasterParams): Promise<Awaited<ReturnType<PafiBackendClient["requestSponsorship"]>> | undefined>;
 interface RelayUserOpParams {
     client: PafiBackendClient | null | undefined;
-    /** EntryPoint address — typically `ENTRY_POINT_V08` from core. */
-    entryPoint: typeof ENTRY_POINT_V08 | string;
+    /** EntryPoint address — typically `ENTRY_POINT_V07` from core. */
+    entryPoint: typeof ENTRY_POINT_V07 | string;
     userOp: Record<string, string | null>;
     /** EIP-7702 authorization (delegation UserOps only). */
     eip7702Auth?: {

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { PafiSdkError, SdkErrorHttpStatus, PointTokenDomainConfig, PartialUserOperation, BurnRequest, PoolKey, RedemptionPolicy, RedemptionPolicySource, RedemptionPreview, RedemptionDecision, RedemptionDenialCode, decodeKernelExecuteCalls, BROKER_HASHES, PafiErrorType, BuiltSponsorAuth, ENTRY_POINT_V08 } from '@pafi-dev/core';
+import { PafiSdkError, SdkErrorHttpStatus, PointTokenDomainConfig, PartialUserOperation, BurnRequest, PoolKey, RedemptionPolicy, RedemptionPolicySource, RedemptionPreview, RedemptionDecision, RedemptionDenialCode, decodeKernelExecuteCalls, BROKER_HASHES, PafiErrorType, ENTRY_POINT_V07 } from '@pafi-dev/core';
 export { PAFI_SUBGRAPH_URL, PafiErrorType, PafiSdkError, SDK_ERROR_HTTP_STATUS_CODE, SdkErrorHttpStatus, ValidationError, defaultErrorTypeForStatus } from '@pafi-dev/core';
 export { GenericHttpExceptionDescriptor, NormalizeContext, PafiErrorEnvelope, PafiErrorPayload, buildErrorEnvelope, payloadFromGenericError, payloadFromHttpException, payloadFromPafiSdkError } from './http/index.js';
 import { Address, Hex, PublicClient, WalletClient } from 'viem';
@@ -2749,7 +2749,11 @@ interface HandleMobileSubmitParams {
      */
     bindUserOpHash: (lockId: string, userOpHash: Hex) => Promise<void>;
     pafiBackendClient?: PafiBackendClient | null;
-    /** Defaults to `ENTRY_POINT_V08`. */
+    /**
+     * Defaults to `ENTRY_POINT_V07` — the version ZeroDev Kernel v3.3
+     * validates against and the only one sponsor-relayer's /bundler/relay
+     * accepts. Do NOT pass v0.8 (retired with the Pimlico stack).
+     */
     entryPoint?: string;
 }
 /**
@@ -2788,7 +2792,7 @@ interface IssuerStateValidatorLike {
  *
  * Caller fetches AA + mintRequest nonces (so issuers can plug in their
  * own composer — gg56 uses a timestamp-key 2D nonce). Caller layers
- * paymaster sponsorship + sponsorAuth on top of the returned UserOps.
+ * paymaster sponsorship on top of the returned UserOps.
  */
 type PTClaimErrorCode = "INVALID_AMOUNT" | "VALIDATION_FAILED" | "BUILD_FAILED" | "NONCE_READ_FAILED" | "NONCE_IN_FLIGHT" | "UNSUPPORTED_POINT_TOKEN";
 declare class PTClaimError extends PafiSdkError {
@@ -3245,7 +3249,7 @@ declare function createIssuerService(config: IssuerServiceConfig): Promise<Issue
  * What this absorbs:
  *   - Reading + reshaping IssuerApiHandlers responses into wire DTOs
  *     (bigint → string, etc.)
- *   - Composing handler.handle() output with sponsorAuth + decoded calls
+ *   - Composing handler.handle() output with decoded calls
  *   - Wiring handleMobilePrepare / handleMobileSubmit / handleClaimStatus
  *   - Quoting PT → USDT for the cashout preview
  *
@@ -3263,9 +3267,15 @@ interface IssuerApiAdapterConfig {
     issuerService: IssuerService;
     ledger: IPointLedger;
     provider: PublicClient;
-    /** Issuer signer wallet — used for `buildSponsorAuth` (EIP-712 sign). */
-    issuerSignerWallet: WalletClient;
-    /** Optional issuer id — when omitted, sponsorAuth is skipped (returns `undefined`). */
+    /**
+     * @deprecated No longer used. `sponsorAuth` was removed — nothing
+     * validated it (the sponsor-relayer independently decodes
+     * `UserOp.callData` to validate intent + fee), so signing it burned one
+     * HSM/KMS signature per request for no security benefit. Kept optional
+     * for back-compat; safe to stop passing.
+     */
+    issuerSignerWallet?: WalletClient;
+    /** @deprecated No longer used — see {@link IssuerApiAdapterConfig.issuerSignerWallet}. */
     pafiIssuerId?: string;
     /** Sig-gated mint handler. Required for `claim` / `claimPrepare`. */
     ptClaimHandler?: PTClaimHandler | null;
@@ -3309,7 +3319,6 @@ interface ClaimDto {
     feeAmount: string;
     lockId: string;
     signatureDeadline: string;
-    sponsorAuth?: BuiltSponsorAuth;
 }
 interface RedeemDto {
     calls: DecodedCallDto[];
@@ -3321,7 +3330,6 @@ interface RedeemDto {
     netCreditAmountFallback?: string;
     expiresInSeconds: number;
     signatureDeadline: string;
-    sponsorAuth?: BuiltSponsorAuth;
 }
 interface PerpDepositDto {
     calls: DecodedCallDto[];
@@ -3334,7 +3342,6 @@ interface PerpDepositDto {
     brokerHash: Hex;
     usdcAddress: Address;
     relayAddress: Address;
-    sponsorAuth?: BuiltSponsorAuth;
 }
 interface MobilePrepareDto {
     lockId: string;
@@ -3445,11 +3452,6 @@ declare class IssuerApiAdapter {
     }): Promise<MobileSubmitDto>;
     claimStatus(authenticatedAddress: Address, lockId: string): Promise<MintStatusResponse>;
     redeemStatus(authenticatedAddress: Address, lockId: string): Promise<BurnStatusResponse>;
-    /**
-     * Build + sign a SponsorAuth payload. Returns `undefined` when no
-     * issuer id is configured, so the controller can skip the field.
-     */
-    private buildSponsorAuth;
     private runMobilePrepare;
     private assertRedeemHandler;
     /**
@@ -3735,8 +3737,8 @@ interface RequestPaymasterParams {
 declare function requestPaymaster(params: RequestPaymasterParams): Promise<Awaited<ReturnType<PafiBackendClient["requestSponsorship"]>> | undefined>;
 interface RelayUserOpParams {
     client: PafiBackendClient | null | undefined;
-    /** EntryPoint address — typically `ENTRY_POINT_V08` from core. */
-    entryPoint: typeof ENTRY_POINT_V08 | string;
+    /** EntryPoint address — typically `ENTRY_POINT_V07` from core. */
+    entryPoint: typeof ENTRY_POINT_V07 | string;
     userOp: Record<string, string | null>;
     /** EIP-7702 authorization (delegation UserOps only). */
     eip7702Auth?: {

package/dist/index.js

@@ -2440,7 +2440,7 @@ __name(handleRedeemStatus, "handleRedeemStatus");
 
 // src/api/mobileHandlers.ts
 import { getAddress as getAddress8 } from "viem";
-import { ENTRY_POINT_V08, parseEip7702DelegatedAddress } from "@pafi-dev/core";
+import { ENTRY_POINT_V07, parseEip7702DelegatedAddress } from "@pafi-dev/core";
 
 // src/userop-store/serialize.ts
 import { serializeUserOpToJsonRpc } from "@pafi-dev/core";
@@ -2784,7 +2784,7 @@ async function handleMobileSubmit(params) {
   const result = await relayUserOp({
     client: params.pafiBackendClient,
     userOp: userOpJson,
-    entryPoint: params.entryPoint ?? ENTRY_POINT_V08,
+    entryPoint: params.entryPoint ?? ENTRY_POINT_V07,
     eip7702Auth: entry.eip7702Auth
   });
   const targetLockId = variant === "fallback" && entry.fallback?.lockId ? entry.fallback.lockId : params.lockId;
@@ -3157,7 +3157,7 @@ var PerpDepositHandler = class {
 
 // src/api/issuerApiAdapter.ts
 import { getAddress as getAddress10 } from "viem";
-import { buildAndSignSponsorAuth, decodeKernelExecuteCalls as decodeKernelExecuteCalls3 } from "@pafi-dev/core";
+import { decodeKernelExecuteCalls as decodeKernelExecuteCalls3 } from "@pafi-dev/core";
 var AdapterMisconfiguredError = class extends Error {
   static {
     __name(this, "AdapterMisconfiguredError");
@@ -3246,14 +3246,12 @@ var IssuerApiAdapter = class {
       chainId: input.chainId,
       aaNonce: input.aaNonce
     });
-    const sponsorAuth = await this.buildSponsorAuth(input.authenticatedAddress, result.userOp.callData, input.chainId, "mint");
     return {
       calls: result.calls,
       callsFallback: result.callsFallback,
       feeAmount: result.feeAmount.toString(),
       lockId: result.lockId,
-      signatureDeadline: result.signatureDeadline.toString(),
-      sponsorAuth
+      signatureDeadline: result.signatureDeadline.toString()
     };
   }
   async redeem(input) {
@@ -3267,7 +3265,6 @@ var IssuerApiAdapter = class {
       aaNonce: input.aaNonce,
       chainId: input.chainId
     });
-    const sponsorAuth = await this.buildSponsorAuth(input.authenticatedAddress, response.userOp.callData, input.chainId, "burn");
     return {
       calls: decodeKernelExecuteCalls3(response.userOp.callData),
       callsFallback: response.fallback ? decodeKernelExecuteCalls3(response.fallback.userOp.callData) : void 0,
@@ -3277,8 +3274,7 @@ var IssuerApiAdapter = class {
       netCreditAmount: response.netCreditAmount.toString(),
       netCreditAmountFallback: response.fallback?.netCreditAmount.toString(),
       expiresInSeconds: response.expiresInSeconds,
-      signatureDeadline: response.signatureDeadline.toString(),
-      sponsorAuth
+      signatureDeadline: response.signatureDeadline.toString()
     };
   }
   // swap() removed (2026-04-27) — moved to @pafi-dev/trading.
@@ -3292,7 +3288,6 @@ var IssuerApiAdapter = class {
       brokerId: input.brokerId,
       aaNonce: input.aaNonce
     });
-    const sponsorAuth = await this.buildSponsorAuth(input.authenticatedAddress, result.userOp.callData, input.chainId, "perp-deposit");
     return {
       calls: result.calls,
       callsFallback: result.callsFallback,
@@ -3303,8 +3298,7 @@ var IssuerApiAdapter = class {
       accountId: result.accountId,
       brokerHash: result.brokerHash,
       usdcAddress: result.usdcAddress,
-      relayAddress: result.relayAddress,
-      sponsorAuth
+      relayAddress: result.relayAddress
     };
   }
   // ------------------------------ Mobile endpoints -------------------------
@@ -3404,21 +3398,6 @@ var IssuerApiAdapter = class {
   // bundler applies SetCode + handleOps in one tx, so there is no
   // separate `/delegate/*` flow. See `handleMobilePrepare`.
   // ------------------------------ Internal helpers -------------------------
-  /**
-  * Build + sign a SponsorAuth payload. Returns `undefined` when no
-  * issuer id is configured, so the controller can skip the field.
-  */
-  async buildSponsorAuth(authenticatedAddress, callData, chainId, scenario) {
-    if (!this.cfg.pafiIssuerId) return void 0;
-    return buildAndSignSponsorAuth({
-      userAddress: authenticatedAddress,
-      callData,
-      chainId,
-      scenario,
-      issuerId: this.cfg.pafiIssuerId,
-      issuerSignerWallet: this.cfg.issuerSignerWallet
-    });
-  }
   async runMobilePrepare(authenticatedAddress, chainId, lockId, partialUserOp, partialUserOpFallback, scenario, pointTokenAddress, ttlSeconds, eip7702Auth, lockIdFallback) {
     return await handleMobilePrepare({
       userAddress: authenticatedAddress,
@@ -4775,7 +4754,7 @@ var MemoryRedemptionHistoryStore = class {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.40.0" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.41.0" : "dev";
 export {
   AdapterMisconfiguredError,
   AuthError,