@pafi-dev/issuer 0.5.5 → 0.5.7

package/dist/index.cjs

@@ -31,7 +31,7 @@ __export(index_exports, {
   MemorySessionStore: () => MemorySessionStore,
   NonceManager: () => NonceManager,
   PAFI_ISSUER_SDK_VERSION: () => PAFI_ISSUER_SDK_VERSION,
-  PAFI_SUBGRAPH_URL: () => PAFI_SUBGRAPH_URL,
+  PAFI_SUBGRAPH_URL: () => import_core6.PAFI_SUBGRAPH_URL,
   PTRedeemError: () => PTRedeemError,
   PTRedeemHandler: () => PTRedeemHandler,
   PafiBackendClient: () => PafiBackendClient,
@@ -1300,6 +1300,20 @@ var PTRedeemHandler = class {
   redeemLockDurationMs;
   signatureDeadlineSeconds;
   now;
+  /**
+   * Per-user in-flight nonce guard (single-process only).
+   *
+   * Prevents two concurrent requests from reading the same on-chain
+   * burnRequestNonce before either has completed, which would produce two
+   * signed UserOps with the same nonce — only one succeeds on-chain; the
+   * other leaves an orphaned pending credit and a wasted signer call.
+   *
+   * NOTE: This guard is effective only within a single Node.js process. For
+   * multi-instance deployments (k8s, PM2 cluster), enforce mutual exclusion
+   * via a distributed lock (Redis SETNX / Postgres advisory lock) keyed on
+   * `(userAddress, pointTokenAddress)` BEFORE calling `handle()`.
+   */
+  inFlightNonces = /* @__PURE__ */ new Map();
   constructor(config) {
     if (!config.ledger.reservePendingCredit) {
       throw new PTRedeemError(
@@ -1352,6 +1366,27 @@ var PTRedeemHandler = class {
         `failed to read burnRequestNonces(${request.userAddress}): ${err instanceof Error ? err.message : String(err)}`
       );
     }
+    const userKey = (0, import_viem7.getAddress)(request.userAddress).toLowerCase();
+    let userNonces = this.inFlightNonces.get(userKey);
+    if (!userNonces) {
+      userNonces = /* @__PURE__ */ new Set();
+      this.inFlightNonces.set(userKey, userNonces);
+    }
+    if (userNonces.has(burnNonce)) {
+      throw new PTRedeemError(
+        "NONCE_IN_FLIGHT",
+        `A burn request for nonce ${burnNonce} is already in progress for ${request.userAddress}. Retry after the current request completes.`
+      );
+    }
+    userNonces.add(burnNonce);
+    try {
+      return await this._handleAfterNonceLock(request, burnNonce);
+    } finally {
+      userNonces.delete(burnNonce);
+      if (userNonces.size === 0) this.inFlightNonces.delete(userKey);
+    }
+  }
+  async _handleAfterNonceLock(request, burnNonce) {
     const onChainBalance = await (0, import_core4.getPointTokenBalance)(
       this.provider,
       this.pointTokenAddress,
@@ -1481,7 +1516,7 @@ var TopUpRedemptionHandler = class {
 
 // src/pools/subgraphPoolsProvider.ts
 var import_viem9 = require("viem");
-var PAFI_SUBGRAPH_URL = "https://graph-base-mainnet.pacificfinance.org/subgraphs/name/pafi-subgraph-v2";
+var import_core6 = require("@pafi-dev/core");
 var DEFAULT_CACHE_TTL_MS = 3e4;
 var POOL_QUERY = `
   query GetPoolForPointToken($id: ID!) {
@@ -1499,7 +1534,7 @@ var POOL_QUERY = `
   }
 `;
 function createSubgraphPoolsProvider(config = {}) {
-  const subgraphUrl = config.subgraphUrl ?? PAFI_SUBGRAPH_URL;
+  const subgraphUrl = config.subgraphUrl ?? import_core6.PAFI_SUBGRAPH_URL;
   try {
     const parsed = new URL(subgraphUrl);
     if (process.env.NODE_ENV === "production" && parsed.protocol !== "https:") {
@@ -1631,7 +1666,7 @@ var PRICE_QUERY = `
   }
 `;
 function createSubgraphNativeUsdtQuoter(config = {}) {
-  const subgraphUrl = config.subgraphUrl ?? PAFI_SUBGRAPH_URL;
+  const subgraphUrl = config.subgraphUrl ?? import_core6.PAFI_SUBGRAPH_URL;
   try {
     const parsed = new URL(subgraphUrl);
     if (process.env.NODE_ENV === "production" && parsed.protocol !== "https:") {
@@ -1739,7 +1774,7 @@ function toUsdtPerNative(priceFloat, usdtDecimals) {
 }
 
 // src/balance/balanceAggregator.ts
-var import_core6 = require("@pafi-dev/core");
+var import_core7 = require("@pafi-dev/core");
 var BalanceAggregator = class {
   provider;
   ledger;
@@ -1760,7 +1795,7 @@ var BalanceAggregator = class {
   async getCombinedBalance(user, pointToken) {
     const [offChain, onChain] = await Promise.all([
       this.ledger.getBalance(user, pointToken),
-      (0, import_core6.getPointTokenBalance)(this.provider, pointToken, user)
+      (0, import_core7.getPointTokenBalance)(this.provider, pointToken, user)
     ]);
     return {
       offChain,
@@ -1858,6 +1893,40 @@ var PafiBackendClient = class {
     }
     throw lastError;
   }
+  async relayUserOperation(request) {
+    const fetchFn = this.config.fetchImpl ?? fetch;
+    const url = `${this.config.url}/bundler/relay`;
+    let response;
+    try {
+      response = await fetchFn(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${this.config.apiKey}`,
+          "X-Issuer-Id": this.config.issuerId
+        },
+        body: JSON.stringify(request)
+      });
+    } catch (err) {
+      throw new PafiBackendError(
+        "NETWORK_ERROR",
+        `Network error: ${err instanceof Error ? err.message : String(err)}`,
+        0
+      );
+    }
+    const text = await response.text();
+    let json = {};
+    try {
+      json = JSON.parse(text);
+    } catch {
+    }
+    if (!response.ok) {
+      const code = json.code ?? "INTERNAL_ERROR";
+      const message = json.message ?? `HTTP ${response.status}`;
+      throw new PafiBackendError(code, message, response.status, json);
+    }
+    return { userOpHash: json.userOpHash };
+  }
   async _doRequest(request) {
     const fetchFn = this.config.fetchImpl ?? fetch;
     const url = `${this.config.url}/paymaster/sponsor`;
@@ -1910,7 +1979,7 @@ var PafiBackendClient = class {
 
 // src/config.ts
 var import_viem10 = require("viem");
-var import_core7 = require("@pafi-dev/core");
+var import_core8 = require("@pafi-dev/core");
 function createIssuerService(config) {
   if (!config.provider) {
     throw new Error("createIssuerService: provider is required");
@@ -1977,7 +2046,7 @@ function createIssuerService(config) {
     indexers.set(tokenAddress, new PointIndexer(indexerConfig));
   }
   const firstIndexer = indexers.get(tokenAddresses[0]);
-  const chainAddresses = (0, import_core7.getContractAddresses)(config.chainId);
+  const chainAddresses = (0, import_core8.getContractAddresses)(config.chainId);
   const resolvedContracts = {
     batchExecutor: chainAddresses.batchExecutor,
     usdt: chainAddresses.usdt,