Protected ReadonlydbStaticinstanceThe process default: built from each dependency's own instance().
Look up a single request by id, scoped to the calling customer. Returns
null for both "missing" and "owned by a different customer" — never
leaks existence of another customer's row. Controllers map null to 404.
Delegates to search; carrying customerId preserves the hard tenant
scope so a foreign customer's id still resolves to null.
Customer-scoped search. Filter by ids (request external ids) and/or
senderId (requests this identity sent) and/or recipientPhone (requests
addressed to this phone) and/or statuses. Ordered newest-first. The
customer-scope is a hard WHERE so no filter combination can leak rows
across tenants.
Optionalids?: string[]Optionalpage?: numberDefaults to 1
OptionalpageSize?: numberDefaults to 50
OptionalrecipientPhone?: stringOptionalsenderId?: stringOptionalstatuses?: ("CREATED" | "CANCELLED" | "REJECTED" | "SENT")[]
Customer-scoped reads of escrow transfer requests. Every read filters on
customerId(the API caller's customer external id), so one customer can never read another's requests. EscrowTransferRequestService extends it with the writes.