@owney/sdk 0.4.6 → 0.5.0

package/dist/index.cjs

@@ -934,6 +934,130 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
   return out;
 }
 
+// src/client.ts
+var import_viem3 = require("viem");
+var import_chains = require("viem/chains");
+
+// src/lib/transfer-auth.ts
+var import_viem2 = require("viem");
+var ERC20_META_ABI = [
+  { type: "function", name: "name", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] },
+  { type: "function", name: "version", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] }
+];
+function buildTransferWithAuthorizationTypedData(input) {
+  return {
+    domain: { name: input.tokenName, version: input.tokenVersion, chainId: input.chainId, verifyingContract: input.token },
+    types: {
+      TransferWithAuthorization: [
+        { name: "from", type: "address" },
+        { name: "to", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "validAfter", type: "uint256" },
+        { name: "validBefore", type: "uint256" },
+        { name: "nonce", type: "bytes32" }
+      ]
+    },
+    primaryType: "TransferWithAuthorization",
+    message: input.message
+  };
+}
+async function readTokenMeta(publicClient, token) {
+  const [tokenName, tokenVersion] = await Promise.all([
+    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "name" }),
+    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "version" }).catch(() => "2")
+  ]);
+  return { tokenName, tokenVersion };
+}
+function randomAuthNonce() {
+  const bytes = new Uint8Array(32);
+  globalThis.crypto.getRandomValues(bytes);
+  return (0, import_viem2.bytesToHex)(bytes);
+}
+
+// src/lib/sponsor-client.ts
+var ROUTING_API_BASE_URL3 = "https://owney-routing-api-243946518160.europe-west4.run.app";
+async function postSponsorTransferAuth(input) {
+  const base2 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  let res;
+  try {
+    res = await fetch(`${base2}/api/v1/sponsor/erc20-transfer-auth`, {
+      method: "POST",
+      headers: { "content-type": "application/json", "x-owney-api-key": input.apiKey },
+      body: JSON.stringify(input.body)
+    });
+  } catch (networkError) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Sponsor API network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
+      { cause: String(networkError) }
+    );
+  }
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+  }
+  if (!res.ok || !parsed?.success || !parsed.data) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Sponsor API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
+      { statusCode: res.status, responseBody: text.slice(0, 500) }
+    );
+  }
+  return parsed.data;
+}
+
+// src/lib/sponsored-deposit.ts
+var AUTH_WINDOW_SECONDS = 15 * 60;
+function makeSponsoredDepositCallback(deps) {
+  const post = deps.httpPost ?? postSponsorTransferAuth;
+  return async (smartWallet, chainId, amount) => {
+    const cid = chainId;
+    const token = deps.tokenAddressByChain[cid];
+    if (!token) {
+      throw new OwneyError(
+        "CHAIN_UNSUPPORTED",
+        `No sponsored token configured for chain ${chainId}`
+      );
+    }
+    const pub = deps.getPublicClient(cid);
+    const wallet = deps.getWalletClient(cid);
+    const { tokenName, tokenVersion } = await readTokenMeta(pub, token);
+    const validAfter = 0n;
+    const validBefore = BigInt(Math.floor(Date.now() / 1e3) + AUTH_WINDOW_SECONDS);
+    const nonce = randomAuthNonce();
+    const typedData = buildTransferWithAuthorizationTypedData({
+      token,
+      chainId: cid,
+      tokenName,
+      tokenVersion,
+      message: { from: deps.ownerAddress, to: smartWallet, value: BigInt(amount), validAfter, validBefore, nonce }
+    });
+    const authSignature = await wallet.signTypedData(
+      { account: deps.ownerAddress, ...typedData }
+    );
+    const result = await post({
+      baseUrl: deps.baseUrl,
+      apiKey: deps.apiKey,
+      body: {
+        chainId: cid,
+        token,
+        from: deps.ownerAddress,
+        to: smartWallet,
+        value: amount,
+        validAfter: validAfter.toString(),
+        validBefore: validBefore.toString(),
+        nonce,
+        authSignature,
+        tokenName,
+        tokenVersion
+      }
+    });
+    return result.txHash;
+  };
+}
+
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -955,6 +1079,11 @@ function decodeMultiAgentCursor(token) {
   }
   return parsed;
 }
+var SPONSORED_USDC_BY_CHAIN = {
+  8453: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+  42161: "0xaf88d065e77c8cc2239327c5edb3a432268e5831"
+};
+var VIEM_CHAIN = { 8453: import_chains.base, 42161: import_chains.arbitrum };
 var OwneySDK = class {
   agents = /* @__PURE__ */ new Map();
   activeAgents = /* @__PURE__ */ new Set();
@@ -967,6 +1096,7 @@ var OwneySDK = class {
   state = null;
   apiKey;
   zyfaiRpcUrls;
+  cachedSponsoredCallback = null;
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
@@ -990,6 +1120,7 @@ var OwneySDK = class {
       );
     }
     this.state = { provider, walletAddress, chainId: null };
+    this.cachedSponsoredCallback = null;
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -1002,6 +1133,7 @@ var OwneySDK = class {
     this.activeAgents.clear();
     this.disabledAgents.clear();
     this.state = null;
+    this.cachedSponsoredCallback = null;
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -1035,6 +1167,46 @@ var OwneySDK = class {
     }
     return chainId;
   }
+  requireConnectedProvider() {
+    if (!this.state?.provider) {
+      throw new OwneyError(
+        "NOT_CONNECTED",
+        "connect(provider) must be called before deposit",
+        {}
+      );
+    }
+    return this.state.provider;
+  }
+  /**
+   * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
+   * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
+   * provider with viem `custom(provider)` to read token meta and sign the
+   * `TransferWithAuthorization`, then POSTs to the sponsor API.
+   */
+  getDefaultSponsoredCallback() {
+    if (this.cachedSponsoredCallback)
+      return this.cachedSponsoredCallback;
+    const provider = this.requireConnectedProvider();
+    const owner = this.state.walletAddress;
+    this.cachedSponsoredCallback = makeSponsoredDepositCallback({
+      apiKey: this.apiKey,
+      ownerAddress: owner,
+      tokenAddressByChain: SPONSORED_USDC_BY_CHAIN,
+      // Casts work around viem's chain-narrowed Client vs the generic
+      // PublicClient/WalletClient param types — structurally identical at
+      // runtime, but the two share a name TS treats as unrelated.
+      getPublicClient: (cid) => (0, import_viem3.createPublicClient)({
+        chain: VIEM_CHAIN[cid],
+        transport: (0, import_viem3.custom)(provider)
+      }),
+      getWalletClient: (cid) => (0, import_viem3.createWalletClient)({
+        account: owner,
+        chain: VIEM_CHAIN[cid],
+        transport: (0, import_viem3.custom)(provider)
+      })
+    });
+    return this.cachedSponsoredCallback;
+  }
   getAgent(agentId) {
     const agent = this.agents.get(agentId);
     if (!agent) {
@@ -1188,6 +1360,7 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
+    const effectiveCallback = depositCallback ?? this.getDefaultSponsoredCallback();
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(
@@ -1202,7 +1375,7 @@ var OwneySDK = class {
       return withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, amount, depositCallback)
+        () => agent.deposit(state, chainId, amount, effectiveCallback)
       );
     }
     const totalAmount = BigInt(amount);
@@ -1236,7 +1409,7 @@ var OwneySDK = class {
       agentResults[agent.id] = await withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, agentAmount, depositCallback)
+        () => agent.deposit(state, chainId, agentAmount, effectiveCallback)
       );
     }
     return { agentResults };
@@ -1854,7 +2027,7 @@ var OwneySDK = class {
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem2 = require("viem");
+var import_viem4 = require("viem");
 var import_siwe = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -1936,7 +2109,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe.SiweMessage({
-          address: (0, import_viem2.getAddress)(accountAddress),
+          address: (0, import_viem4.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,

package/dist/index.d.cts

@@ -101,7 +101,7 @@ type AgentsApyOptions = {
 type DepositOptions = {
     amount: string;
     asset: Asset;
-    depositCallback: DepositCallback;
+    depositCallback?: DepositCallback;
     agentId?: AgentId;
 };
 
@@ -237,6 +237,7 @@ declare class OwneySDK {
     private state;
     private apiKey;
     private zyfaiRpcUrls?;
+    private cachedSponsoredCallback;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -263,6 +264,14 @@ declare class OwneySDK {
     getActiveChainId(): number | null;
     private requireState;
     private requireChainId;
+    private requireConnectedProvider;
+    /**
+     * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
+     * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
+     * provider with viem `custom(provider)` to read token meta and sign the
+     * `TransferWithAuthorization`, then POSTs to the sponsor API.
+     */
+    private getDefaultSponsoredCallback;
     private getAgent;
     private getActiveAgents;
     private ensureAgentsInitialized;
@@ -390,7 +399,7 @@ declare class OwneySDK {
     getAgentAllocation(): Promise<OwneyAgentAllocation>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.d.ts

@@ -101,7 +101,7 @@ type AgentsApyOptions = {
 type DepositOptions = {
     amount: string;
     asset: Asset;
-    depositCallback: DepositCallback;
+    depositCallback?: DepositCallback;
     agentId?: AgentId;
 };
 
@@ -237,6 +237,7 @@ declare class OwneySDK {
     private state;
     private apiKey;
     private zyfaiRpcUrls?;
+    private cachedSponsoredCallback;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -263,6 +264,14 @@ declare class OwneySDK {
     getActiveChainId(): number | null;
     private requireState;
     private requireChainId;
+    private requireConnectedProvider;
+    /**
+     * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
+     * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
+     * provider with viem `custom(provider)` to read token meta and sign the
+     * `TransferWithAuthorization`, then POSTs to the sponsor API.
+     */
+    private getDefaultSponsoredCallback;
     private getAgent;
     private getActiveAgents;
     private ensureAgentsInitialized;
@@ -390,7 +399,7 @@ declare class OwneySDK {
     getAgentAllocation(): Promise<OwneyAgentAllocation>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.js

@@ -902,6 +902,134 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
   return out;
 }
 
+// src/client.ts
+import {
+  createPublicClient,
+  createWalletClient,
+  custom
+} from "viem";
+import { base, arbitrum } from "viem/chains";
+
+// src/lib/transfer-auth.ts
+import { bytesToHex } from "viem";
+var ERC20_META_ABI = [
+  { type: "function", name: "name", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] },
+  { type: "function", name: "version", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] }
+];
+function buildTransferWithAuthorizationTypedData(input) {
+  return {
+    domain: { name: input.tokenName, version: input.tokenVersion, chainId: input.chainId, verifyingContract: input.token },
+    types: {
+      TransferWithAuthorization: [
+        { name: "from", type: "address" },
+        { name: "to", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "validAfter", type: "uint256" },
+        { name: "validBefore", type: "uint256" },
+        { name: "nonce", type: "bytes32" }
+      ]
+    },
+    primaryType: "TransferWithAuthorization",
+    message: input.message
+  };
+}
+async function readTokenMeta(publicClient, token) {
+  const [tokenName, tokenVersion] = await Promise.all([
+    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "name" }),
+    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "version" }).catch(() => "2")
+  ]);
+  return { tokenName, tokenVersion };
+}
+function randomAuthNonce() {
+  const bytes = new Uint8Array(32);
+  globalThis.crypto.getRandomValues(bytes);
+  return bytesToHex(bytes);
+}
+
+// src/lib/sponsor-client.ts
+var ROUTING_API_BASE_URL3 = "https://owney-routing-api-243946518160.europe-west4.run.app";
+async function postSponsorTransferAuth(input) {
+  const base2 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  let res;
+  try {
+    res = await fetch(`${base2}/api/v1/sponsor/erc20-transfer-auth`, {
+      method: "POST",
+      headers: { "content-type": "application/json", "x-owney-api-key": input.apiKey },
+      body: JSON.stringify(input.body)
+    });
+  } catch (networkError) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Sponsor API network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
+      { cause: String(networkError) }
+    );
+  }
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+  }
+  if (!res.ok || !parsed?.success || !parsed.data) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Sponsor API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
+      { statusCode: res.status, responseBody: text.slice(0, 500) }
+    );
+  }
+  return parsed.data;
+}
+
+// src/lib/sponsored-deposit.ts
+var AUTH_WINDOW_SECONDS = 15 * 60;
+function makeSponsoredDepositCallback(deps) {
+  const post = deps.httpPost ?? postSponsorTransferAuth;
+  return async (smartWallet, chainId, amount) => {
+    const cid = chainId;
+    const token = deps.tokenAddressByChain[cid];
+    if (!token) {
+      throw new OwneyError(
+        "CHAIN_UNSUPPORTED",
+        `No sponsored token configured for chain ${chainId}`
+      );
+    }
+    const pub = deps.getPublicClient(cid);
+    const wallet = deps.getWalletClient(cid);
+    const { tokenName, tokenVersion } = await readTokenMeta(pub, token);
+    const validAfter = 0n;
+    const validBefore = BigInt(Math.floor(Date.now() / 1e3) + AUTH_WINDOW_SECONDS);
+    const nonce = randomAuthNonce();
+    const typedData = buildTransferWithAuthorizationTypedData({
+      token,
+      chainId: cid,
+      tokenName,
+      tokenVersion,
+      message: { from: deps.ownerAddress, to: smartWallet, value: BigInt(amount), validAfter, validBefore, nonce }
+    });
+    const authSignature = await wallet.signTypedData(
+      { account: deps.ownerAddress, ...typedData }
+    );
+    const result = await post({
+      baseUrl: deps.baseUrl,
+      apiKey: deps.apiKey,
+      body: {
+        chainId: cid,
+        token,
+        from: deps.ownerAddress,
+        to: smartWallet,
+        value: amount,
+        validAfter: validAfter.toString(),
+        validBefore: validBefore.toString(),
+        nonce,
+        authSignature,
+        tokenName,
+        tokenVersion
+      }
+    });
+    return result.txHash;
+  };
+}
+
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -923,6 +1051,11 @@ function decodeMultiAgentCursor(token) {
   }
   return parsed;
 }
+var SPONSORED_USDC_BY_CHAIN = {
+  8453: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+  42161: "0xaf88d065e77c8cc2239327c5edb3a432268e5831"
+};
+var VIEM_CHAIN = { 8453: base, 42161: arbitrum };
 var OwneySDK = class {
   agents = /* @__PURE__ */ new Map();
   activeAgents = /* @__PURE__ */ new Set();
@@ -935,6 +1068,7 @@ var OwneySDK = class {
   state = null;
   apiKey;
   zyfaiRpcUrls;
+  cachedSponsoredCallback = null;
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
@@ -958,6 +1092,7 @@ var OwneySDK = class {
       );
     }
     this.state = { provider, walletAddress, chainId: null };
+    this.cachedSponsoredCallback = null;
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -970,6 +1105,7 @@ var OwneySDK = class {
     this.activeAgents.clear();
     this.disabledAgents.clear();
     this.state = null;
+    this.cachedSponsoredCallback = null;
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -1003,6 +1139,46 @@ var OwneySDK = class {
     }
     return chainId;
   }
+  requireConnectedProvider() {
+    if (!this.state?.provider) {
+      throw new OwneyError(
+        "NOT_CONNECTED",
+        "connect(provider) must be called before deposit",
+        {}
+      );
+    }
+    return this.state.provider;
+  }
+  /**
+   * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
+   * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
+   * provider with viem `custom(provider)` to read token meta and sign the
+   * `TransferWithAuthorization`, then POSTs to the sponsor API.
+   */
+  getDefaultSponsoredCallback() {
+    if (this.cachedSponsoredCallback)
+      return this.cachedSponsoredCallback;
+    const provider = this.requireConnectedProvider();
+    const owner = this.state.walletAddress;
+    this.cachedSponsoredCallback = makeSponsoredDepositCallback({
+      apiKey: this.apiKey,
+      ownerAddress: owner,
+      tokenAddressByChain: SPONSORED_USDC_BY_CHAIN,
+      // Casts work around viem's chain-narrowed Client vs the generic
+      // PublicClient/WalletClient param types — structurally identical at
+      // runtime, but the two share a name TS treats as unrelated.
+      getPublicClient: (cid) => createPublicClient({
+        chain: VIEM_CHAIN[cid],
+        transport: custom(provider)
+      }),
+      getWalletClient: (cid) => createWalletClient({
+        account: owner,
+        chain: VIEM_CHAIN[cid],
+        transport: custom(provider)
+      })
+    });
+    return this.cachedSponsoredCallback;
+  }
   getAgent(agentId) {
     const agent = this.agents.get(agentId);
     if (!agent) {
@@ -1156,6 +1332,7 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
+    const effectiveCallback = depositCallback ?? this.getDefaultSponsoredCallback();
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(
@@ -1170,7 +1347,7 @@ var OwneySDK = class {
       return withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, amount, depositCallback)
+        () => agent.deposit(state, chainId, amount, effectiveCallback)
       );
     }
     const totalAmount = BigInt(amount);
@@ -1204,7 +1381,7 @@ var OwneySDK = class {
       agentResults[agent.id] = await withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, agentAmount, depositCallback)
+        () => agent.deposit(state, chainId, agentAmount, effectiveCallback)
       );
     }
     return { agentResults };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.4.6",
+  "version": "0.5.0",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",