Cross-Chain Buying
via CCTP

// Emitted on successful purchase + NFT delivery
event PurchaseExecuted(
    address indexed buyer,
    address indexed nftContract,
    uint256 indexed tokenId,
    uint256 usdcAmount
);

// Emitted when buyNFT or NFT forward fails — USDC refunded to treasury
event PurchaseFailed(
    address indexed buyer,
    address nftContract,
    uint256 tokenId,
    uint256 refunded,
    string  reason
);

// Reset a failed purchase so the relay can retry it
await fetch("/api/admin/cctp", {
  method: "POST",
  body: JSON.stringify({
    action: "reset_for_retry",
    purchaseId: "uuid-here",
  }),
});

// Recover an NFT stuck inside CCTPReceiver
// (use when buyNFT succeeded but safeTransferFrom to buyer failed)
await fetch("/api/admin/cctp", {
  method: "POST",
  body: JSON.stringify({
    action: "recover_nft",
    purchaseId: "uuid-here",
    recipientAddress: "0xBuyerWalletHere",
  }),
});

// List all failed purchases
const { purchases } = await fetch("/api/admin/cctp?status=failed").then(r => r.json());

create table cctp_purchases (
  id                uuid        primary key default gen_random_uuid(),
  buyer_wallet      text        not null,   -- source chain wallet
  arc_wallet        text        not null,   -- recipient on Arc
  source_chain_id   integer     not null,
  source_chain_name text        not null,
  source_tx_hash    text,                   -- burn tx hash
  arc_tx_hash       text,                   -- mint+buy tx hash on Arc
  nft_contract      text        not null,
  token_id          integer     not null,
  price_usdc        numeric     not null,   -- exact listing price
  bridge_amount     numeric     not null,   -- price × 1.01 (what buyer burns)
  message_hash      text,                   -- for Circle iris-api polling
  message_bytes     text,                   -- raw CCTP message hex
  attestation_bytes text,                   -- Circle's notary signature
  status            text        not null default 'initiated'
                    check (status in (
                      'initiated','attesting','relaying',
                      'complete','failed','expired'
                    )),
  locked_until      timestamptz,            -- listing lock (~90s)
  failure_reason    text,
  created_at        timestamptz not null default now(),
  updated_at        timestamptz not null default now(),
  completed_at      timestamptz
);