@pafi-dev/issuer 0.7.2 → 0.7.3

package/dist/index.d.cts

@@ -469,18 +469,6 @@ declare class AuthError extends PafiSdkError {
     constructor(code: AuthErrorCode, message: string);
 }
 
-/**
- * Errors raised by RelayService carry a `code` so callers (handlers /
- * gateway-less HTTP wrappers) can decide how to map them to HTTP status.
- *
- * v1.4 trimmed the error space to just encoding failures — the service
- * no longer broadcasts transactions, so `SUBMIT_FAILED`, `TX_REVERTED`,
- * `SIMULATION_FAILED`, and `TIMEOUT` all went away with the operator
- * wallet. Paymaster/Bundler errors surface out-of-band on the FE.
- *
- * v0.7.1 — extends `PafiSdkError` so `createSdkErrorMapper` routes it
- * to 422 instead of leaking as a 500. See SDK_ISSUER_AUDIT.md C2.
- */
 type RelayErrorCode = "ENCODE_FAILED";
 declare class RelayError extends PafiSdkError {
     readonly httpStatus: "unprocessable";
@@ -2002,14 +1990,19 @@ declare class PerpDepositHandler {
 
 /**
  * Pure mechanics for the EIP-7702 delegation submit flow. Builds the
- * empty-batch UserOp, attaches paymaster sponsorship, splits the user's
- * authorization signature into the JSON-RPC tuple, and relays via the
- * PAFI sponsor-relayer.
+ * delegation-anchor UserOp via `buildDelegationUserOp` (self-call EOA
+ * with empty calldata), attaches paymaster sponsorship, splits the
+ * user's authorization signature into the JSON-RPC tuple, and relays
+ * via the PAFI sponsor-relayer.
+ *
+ * The UserOp itself is a no-op — a self-call to the user's EOA with
+ * `data: "0x"`. The work is in the `eip7702Auth` object: the bundler
+ * picks it up, runs the EIP-7702 path, and installs the delegation on
+ * the user's EOA atomically with the (no-op) UserOp.
  *
- * The UserOp itself is a no-op — `BatchExecutor.execute([])` does
- * nothing. The work is in the `eip7702Auth` object: the bundler picks
- * it up, runs the EIP-7702 path, and installs the delegation on the
- * user's EOA atomically with the (empty) UserOp.
+ * v0.7.1 — switched from `encodeBatchExecute([])` (which throws
+ * "operations array must not be empty") to `buildDelegationUserOp`
+ * (self-call pattern). See SDK_CORE_TRADING_AUDIT.md C1.
  *
  * Throws the same `BundlerNotConfiguredError` / `BundlerRejectedError`
  * as other relay paths so issuer controllers can use one error mapper.
@@ -2343,14 +2336,6 @@ interface DelegatePrepareDto {
     batchExecutorAddress: Address;
     chainId: number;
 }
-/**
- * Thrown by `IssuerApiAdapter` constructor when the wired ledger does
- * not implement the optional methods required by the configured
- * handlers. Surfaces at boot, not at first request — issuer can't
- * silently ship a partial ledger and discover the gap in production.
- *
- * v0.7.1 — added per SDK_ISSUER_AUDIT.md C4.
- */
 declare class AdapterMisconfiguredError extends Error {
     readonly code: "ADAPTER_MISCONFIGURED";
     constructor(message: string);
@@ -2424,11 +2409,6 @@ declare class IssuerApiAdapter {
     /**
      * Build + sign a SponsorAuth payload. Returns `undefined` when no
      * issuer id is configured, so the controller can skip the field.
-     *
-     * v0.7.1 — `scenario` typed as `SponsorshipScenario` (was `string`).
-     * Previously a typo (`"perp_deposit"` vs `"perp-deposit"`) compiled
-     * fine but rejected at L1 by sponsor-relayer's IntentValidator. See
-     * SDK_ISSUER_AUDIT.md N5.
      */
     private buildSponsorAuth;
     private runMobilePrepare;

package/dist/index.d.ts

@@ -469,18 +469,6 @@ declare class AuthError extends PafiSdkError {
     constructor(code: AuthErrorCode, message: string);
 }
 
-/**
- * Errors raised by RelayService carry a `code` so callers (handlers /
- * gateway-less HTTP wrappers) can decide how to map them to HTTP status.
- *
- * v1.4 trimmed the error space to just encoding failures — the service
- * no longer broadcasts transactions, so `SUBMIT_FAILED`, `TX_REVERTED`,
- * `SIMULATION_FAILED`, and `TIMEOUT` all went away with the operator
- * wallet. Paymaster/Bundler errors surface out-of-band on the FE.
- *
- * v0.7.1 — extends `PafiSdkError` so `createSdkErrorMapper` routes it
- * to 422 instead of leaking as a 500. See SDK_ISSUER_AUDIT.md C2.
- */
 type RelayErrorCode = "ENCODE_FAILED";
 declare class RelayError extends PafiSdkError {
     readonly httpStatus: "unprocessable";
@@ -2002,14 +1990,19 @@ declare class PerpDepositHandler {
 
 /**
  * Pure mechanics for the EIP-7702 delegation submit flow. Builds the
- * empty-batch UserOp, attaches paymaster sponsorship, splits the user's
- * authorization signature into the JSON-RPC tuple, and relays via the
- * PAFI sponsor-relayer.
+ * delegation-anchor UserOp via `buildDelegationUserOp` (self-call EOA
+ * with empty calldata), attaches paymaster sponsorship, splits the
+ * user's authorization signature into the JSON-RPC tuple, and relays
+ * via the PAFI sponsor-relayer.
+ *
+ * The UserOp itself is a no-op — a self-call to the user's EOA with
+ * `data: "0x"`. The work is in the `eip7702Auth` object: the bundler
+ * picks it up, runs the EIP-7702 path, and installs the delegation on
+ * the user's EOA atomically with the (no-op) UserOp.
  *
- * The UserOp itself is a no-op — `BatchExecutor.execute([])` does
- * nothing. The work is in the `eip7702Auth` object: the bundler picks
- * it up, runs the EIP-7702 path, and installs the delegation on the
- * user's EOA atomically with the (empty) UserOp.
+ * v0.7.1 — switched from `encodeBatchExecute([])` (which throws
+ * "operations array must not be empty") to `buildDelegationUserOp`
+ * (self-call pattern). See SDK_CORE_TRADING_AUDIT.md C1.
  *
  * Throws the same `BundlerNotConfiguredError` / `BundlerRejectedError`
  * as other relay paths so issuer controllers can use one error mapper.
@@ -2343,14 +2336,6 @@ interface DelegatePrepareDto {
     batchExecutorAddress: Address;
     chainId: number;
 }
-/**
- * Thrown by `IssuerApiAdapter` constructor when the wired ledger does
- * not implement the optional methods required by the configured
- * handlers. Surfaces at boot, not at first request — issuer can't
- * silently ship a partial ledger and discover the gap in production.
- *
- * v0.7.1 — added per SDK_ISSUER_AUDIT.md C4.
- */
 declare class AdapterMisconfiguredError extends Error {
     readonly code: "ADAPTER_MISCONFIGURED";
     constructor(message: string);
@@ -2424,11 +2409,6 @@ declare class IssuerApiAdapter {
     /**
      * Build + sign a SponsorAuth payload. Returns `undefined` when no
      * issuer id is configured, so the controller can skip the field.
-     *
-     * v0.7.1 — `scenario` typed as `SponsorshipScenario` (was `string`).
-     * Previously a typo (`"perp_deposit"` vs `"perp-deposit"`) compiled
-     * fine but rejected at L1 by sponsor-relayer's IntentValidator. See
-     * SDK_ISSUER_AUDIT.md N5.
      */
     private buildSponsorAuth;
     private runMobilePrepare;

package/dist/index.js

@@ -2299,8 +2299,8 @@ var PerpDepositHandler = class {
 // src/api/delegateHandler.ts
 import {
   ENTRY_POINT_V08 as ENTRY_POINT_V082,
+  buildDelegationUserOp,
   buildEip7702Authorization,
-  encodeBatchExecute,
   getContractAddresses as getContractAddresses5,
   serializeUserOpToJsonRpc as serializeUserOpToJsonRpc2
 } from "@pafi-dev/core";
@@ -2311,14 +2311,22 @@ var DEFAULT_DELEGATE_GAS = {
 };
 async function handleDelegateSubmit(params) {
   const { batchExecutor } = getContractAddresses5(params.chainId);
-  const callData = encodeBatchExecute([]);
+  const partial = buildDelegationUserOp({
+    userAddress: params.userAddress,
+    aaNonce: params.aaNonce,
+    gasLimits: {
+      callGasLimit: params.gasLimits?.callGasLimit ?? DEFAULT_DELEGATE_GAS.callGasLimit,
+      verificationGasLimit: params.gasLimits?.verificationGasLimit ?? DEFAULT_DELEGATE_GAS.verificationGasLimit,
+      preVerificationGas: params.gasLimits?.preVerificationGas ?? DEFAULT_DELEGATE_GAS.preVerificationGas
+    }
+  });
   const userOp = {
-    sender: params.userAddress,
-    nonce: params.aaNonce,
-    callData,
-    callGasLimit: params.gasLimits?.callGasLimit ?? DEFAULT_DELEGATE_GAS.callGasLimit,
-    verificationGasLimit: params.gasLimits?.verificationGasLimit ?? DEFAULT_DELEGATE_GAS.verificationGasLimit,
-    preVerificationGas: params.gasLimits?.preVerificationGas ?? DEFAULT_DELEGATE_GAS.preVerificationGas,
+    sender: partial.sender,
+    nonce: partial.nonce,
+    callData: partial.callData,
+    callGasLimit: partial.callGasLimit,
+    verificationGasLimit: partial.verificationGasLimit,
+    preVerificationGas: partial.preVerificationGas,
     maxFeePerGas: params.fees.maxFeePerGas ?? 0n,
     maxPriorityFeePerGas: params.fees.maxPriorityFeePerGas ?? 0n
   };
@@ -2403,7 +2411,7 @@ import {
   buildAndSignSponsorAuth,
   computeAuthorizationHash,
   decodeBatchExecuteCalls as decodeBatchExecuteCalls3,
-  encodeBatchExecute as encodeBatchExecute2,
+  encodeBatchExecute,
   ENTRY_POINT_V08 as ENTRY_POINT_V083,
   getContractAddresses as getContractAddresses6,
   parseEip7702DelegatedAddress as parseEip7702DelegatedAddress2
@@ -2747,11 +2755,6 @@ var IssuerApiAdapter = class {
   /**
    * Build + sign a SponsorAuth payload. Returns `undefined` when no
    * issuer id is configured, so the controller can skip the field.
-   *
-   * v0.7.1 — `scenario` typed as `SponsorshipScenario` (was `string`).
-   * Previously a typo (`"perp_deposit"` vs `"perp-deposit"`) compiled
-   * fine but rejected at L1 by sponsor-relayer's IntentValidator. See
-   * SDK_ISSUER_AUDIT.md N5.
    */
   async buildSponsorAuth(authenticatedAddress, callData, chainId, scenario) {
     if (!this.cfg.pafiIssuerId) return void 0;
@@ -3656,7 +3659,7 @@ var IssuerStateValidator = class _IssuerStateValidator {
 };
 
 // src/index.ts
-var PAFI_ISSUER_SDK_VERSION = true ? "0.7.1" : "dev";
+var PAFI_ISSUER_SDK_VERSION = true ? "0.7.3" : "dev";
 export {
   AdapterMisconfiguredError,
   AuthError,