@owney/sdk 0.5.0-beta.0 → 0.6.0-beta.0

package/dist/index.cjs

@@ -25,7 +25,8 @@ __export(src_exports, {
   InvalidHistoryCursorError: () => InvalidHistoryCursorError,
   NotConnectedError: () => NotConnectedError,
   OwneyError: () => OwneyError,
-  OwneySDK: () => OwneySDK
+  OwneySDK: () => OwneySDK,
+  createOwneySIWX: () => createOwneySIWX
 });
 module.exports = __toCommonJS(src_exports);
 
@@ -933,130 +934,6 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
   return out;
 }
 
-// src/client.ts
-var import_viem3 = require("viem");
-var import_chains = require("viem/chains");
-
-// src/lib/transfer-auth.ts
-var import_viem2 = require("viem");
-var ERC20_META_ABI = [
-  { type: "function", name: "name", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] },
-  { type: "function", name: "version", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] }
-];
-function buildTransferWithAuthorizationTypedData(input) {
-  return {
-    domain: { name: input.tokenName, version: input.tokenVersion, chainId: input.chainId, verifyingContract: input.token },
-    types: {
-      TransferWithAuthorization: [
-        { name: "from", type: "address" },
-        { name: "to", type: "address" },
-        { name: "value", type: "uint256" },
-        { name: "validAfter", type: "uint256" },
-        { name: "validBefore", type: "uint256" },
-        { name: "nonce", type: "bytes32" }
-      ]
-    },
-    primaryType: "TransferWithAuthorization",
-    message: input.message
-  };
-}
-async function readTokenMeta(publicClient, token) {
-  const [tokenName, tokenVersion] = await Promise.all([
-    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "name" }),
-    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "version" }).catch(() => "2")
-  ]);
-  return { tokenName, tokenVersion };
-}
-function randomAuthNonce() {
-  const bytes = new Uint8Array(32);
-  globalThis.crypto.getRandomValues(bytes);
-  return (0, import_viem2.bytesToHex)(bytes);
-}
-
-// src/lib/sponsor-client.ts
-var ROUTING_API_BASE_URL3 = "https://owney-routing-api-243946518160.europe-west4.run.app";
-async function postSponsorTransferAuth(input) {
-  const base2 = input.baseUrl ?? ROUTING_API_BASE_URL3;
-  let res;
-  try {
-    res = await fetch(`${base2}/api/v1/sponsor/erc20-transfer-auth`, {
-      method: "POST",
-      headers: { "content-type": "application/json", "x-owney-api-key": input.apiKey },
-      body: JSON.stringify(input.body)
-    });
-  } catch (networkError) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Sponsor API network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
-      { cause: String(networkError) }
-    );
-  }
-  const text = await res.text();
-  let parsed = null;
-  try {
-    parsed = JSON.parse(text);
-  } catch {
-  }
-  if (!res.ok || !parsed?.success || !parsed.data) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Sponsor API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
-      { statusCode: res.status, responseBody: text.slice(0, 500) }
-    );
-  }
-  return parsed.data;
-}
-
-// src/lib/sponsored-deposit.ts
-var AUTH_WINDOW_SECONDS = 15 * 60;
-function makeSponsoredDepositCallback(deps) {
-  const post = deps.httpPost ?? postSponsorTransferAuth;
-  return async (smartWallet, chainId, amount) => {
-    const cid = chainId;
-    const token = deps.tokenAddressByChain[cid];
-    if (!token) {
-      throw new OwneyError(
-        "CHAIN_UNSUPPORTED",
-        `No sponsored token configured for chain ${chainId}`
-      );
-    }
-    const pub = deps.getPublicClient(cid);
-    const wallet = deps.getWalletClient(cid);
-    const { tokenName, tokenVersion } = await readTokenMeta(pub, token);
-    const validAfter = 0n;
-    const validBefore = BigInt(Math.floor(Date.now() / 1e3) + AUTH_WINDOW_SECONDS);
-    const nonce = randomAuthNonce();
-    const typedData = buildTransferWithAuthorizationTypedData({
-      token,
-      chainId: cid,
-      tokenName,
-      tokenVersion,
-      message: { from: deps.ownerAddress, to: smartWallet, value: BigInt(amount), validAfter, validBefore, nonce }
-    });
-    const authSignature = await wallet.signTypedData(
-      { account: deps.ownerAddress, ...typedData }
-    );
-    const result = await post({
-      baseUrl: deps.baseUrl,
-      apiKey: deps.apiKey,
-      body: {
-        chainId: cid,
-        token,
-        from: deps.ownerAddress,
-        to: smartWallet,
-        value: amount,
-        validAfter: validAfter.toString(),
-        validBefore: validBefore.toString(),
-        nonce,
-        authSignature,
-        tokenName,
-        tokenVersion
-      }
-    });
-    return result.txHash;
-  };
-}
-
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -1078,11 +955,6 @@ function decodeMultiAgentCursor(token) {
   }
   return parsed;
 }
-var SPONSORED_USDC_BY_CHAIN = {
-  8453: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
-  42161: "0xaf88d065e77c8cc2239327c5edb3a432268e5831"
-};
-var VIEM_CHAIN = { 8453: import_chains.base, 42161: import_chains.arbitrum };
 var OwneySDK = class {
   agents = /* @__PURE__ */ new Map();
   activeAgents = /* @__PURE__ */ new Set();
@@ -1095,7 +967,6 @@ var OwneySDK = class {
   state = null;
   apiKey;
   zyfaiRpcUrls;
-  cachedSponsoredCallback = null;
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
@@ -1119,7 +990,6 @@ var OwneySDK = class {
       );
     }
     this.state = { provider, walletAddress, chainId: null };
-    this.cachedSponsoredCallback = null;
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -1132,7 +1002,6 @@ var OwneySDK = class {
     this.activeAgents.clear();
     this.disabledAgents.clear();
     this.state = null;
-    this.cachedSponsoredCallback = null;
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -1166,46 +1035,6 @@ var OwneySDK = class {
     }
     return chainId;
   }
-  requireConnectedProvider() {
-    if (!this.state?.provider) {
-      throw new OwneyError(
-        "NOT_CONNECTED",
-        "connect(provider) must be called before deposit",
-        {}
-      );
-    }
-    return this.state.provider;
-  }
-  /**
-   * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
-   * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
-   * provider with viem `custom(provider)` to read token meta and sign the
-   * `TransferWithAuthorization`, then POSTs to the sponsor API.
-   */
-  getDefaultSponsoredCallback() {
-    if (this.cachedSponsoredCallback)
-      return this.cachedSponsoredCallback;
-    const provider = this.requireConnectedProvider();
-    const owner = this.state.walletAddress;
-    this.cachedSponsoredCallback = makeSponsoredDepositCallback({
-      apiKey: this.apiKey,
-      ownerAddress: owner,
-      tokenAddressByChain: SPONSORED_USDC_BY_CHAIN,
-      // Casts work around viem's chain-narrowed Client vs the generic
-      // PublicClient/WalletClient param types — structurally identical at
-      // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem3.createPublicClient)({
-        chain: VIEM_CHAIN[cid],
-        transport: (0, import_viem3.custom)(provider)
-      }),
-      getWalletClient: (cid) => (0, import_viem3.createWalletClient)({
-        account: owner,
-        chain: VIEM_CHAIN[cid],
-        transport: (0, import_viem3.custom)(provider)
-      })
-    });
-    return this.cachedSponsoredCallback;
-  }
   getAgent(agentId) {
     const agent = this.agents.get(agentId);
     if (!agent) {
@@ -1359,7 +1188,6 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
-    const effectiveCallback = depositCallback ?? this.getDefaultSponsoredCallback();
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(
@@ -1374,7 +1202,7 @@ var OwneySDK = class {
       return withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, amount, effectiveCallback)
+        () => agent.deposit(state, chainId, amount, depositCallback)
       );
     }
     const totalAmount = BigInt(amount);
@@ -1408,7 +1236,7 @@ var OwneySDK = class {
       agentResults[agent.id] = await withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, agentAmount, effectiveCallback)
+        () => agent.deposit(state, chainId, agentAmount, depositCallback)
       );
     }
     return { agentResults };
@@ -2024,6 +1852,172 @@ var OwneySDK = class {
     };
   }
 };
+
+// src/agents/zyfai/zyfai.siwx.ts
+var import_viem2 = require("viem");
+var import_siwe = require("siwe");
+var import_sdk2 = require("@zyfai/sdk");
+
+// src/agents/zyfai/zyfai.siwx-cache.ts
+var KEY_PREFIX2 = "owney.siwx.session";
+var storage2 = () => {
+  if (typeof window === "undefined")
+    return null;
+  try {
+    return window.localStorage;
+  } catch {
+    return null;
+  }
+};
+var buildKey2 = (address, chainId) => `${KEY_PREFIX2}:${address.toLowerCase()}:${chainId}`;
+var readSiwxSession = (address, chainId) => {
+  const store = storage2();
+  if (!store)
+    return null;
+  const raw = store.getItem(buildKey2(address, chainId));
+  if (!raw)
+    return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    store.removeItem(buildKey2(address, chainId));
+    return null;
+  }
+};
+var writeSiwxSession = (address, chainId, session) => {
+  const store = storage2();
+  if (!store)
+    return;
+  try {
+    store.setItem(buildKey2(address, chainId), JSON.stringify(session));
+  } catch {
+  }
+};
+var clearSiwxSession = (address, chainId) => {
+  const store = storage2();
+  if (!store)
+    return;
+  try {
+    store.removeItem(buildKey2(address, chainId));
+  } catch {
+  }
+};
+
+// src/agents/zyfai/zyfai.siwx.ts
+var STATEMENT = "Sign in with Ethereum";
+var VERSION = "1";
+var numericChainId = (caip) => {
+  const segment = caip.split(":").pop();
+  const id = Number(segment);
+  if (!segment || !Number.isFinite(id) || id <= 0) {
+    throw new Error(`Invalid CAIP chain id: "${caip}"`);
+  }
+  return id;
+};
+var browserDomain = () => typeof window !== "undefined" ? window.location.host : "";
+var browserUri = () => typeof window !== "undefined" ? window.location.origin : "";
+function buildSIWXConfig(deps) {
+  const { post, referralSource } = deps;
+  const createMessage = async (input) => {
+    const { nonce } = await post("/auth/challenge", {});
+    const domain = browserDomain();
+    const uri = browserUri();
+    const issuedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const chainId = input.chainId;
+    const accountAddress = input.accountAddress;
+    const message = {
+      accountAddress,
+      chainId,
+      domain,
+      uri,
+      version: VERSION,
+      nonce,
+      statement: STATEMENT,
+      issuedAt,
+      toString() {
+        return new import_siwe.SiweMessage({
+          address: (0, import_viem2.getAddress)(accountAddress),
+          chainId: numericChainId(chainId),
+          domain,
+          uri,
+          statement: STATEMENT,
+          nonce,
+          version: VERSION,
+          issuedAt
+        }).prepareMessage();
+      }
+    };
+    return message;
+  };
+  const getSessions = async (chainId, address) => {
+    let id;
+    try {
+      id = numericChainId(chainId);
+    } catch {
+      return [];
+    }
+    const jwt = readSession(address, id);
+    const stored = readSiwxSession(address, id);
+    if (!jwt) {
+      if (stored)
+        clearSiwxSession(address, id);
+      return [];
+    }
+    if (!stored)
+      return [];
+    const session = {
+      // `stored.data.chainId` is a plain string in the cache (kept AppKit-free);
+      // it always holds a valid CaipNetworkId here, so narrow at the boundary.
+      data: stored.data,
+      message: stored.message,
+      signature: stored.signature
+    };
+    return [session];
+  };
+  const persistSession = async (session) => {
+    const address = session.data.accountAddress;
+    const id = numericChainId(session.data.chainId);
+    const message = new import_siwe.SiweMessage(session.message);
+    const login = await post("/auth/login", {
+      message,
+      signature: session.signature,
+      referralSource
+    });
+    writeSession(address, id, {
+      token: login.accessToken,
+      userId: login.userId ?? null,
+      hasActiveSessionKey: Boolean(login.hasActiveSessionKey)
+    });
+    const stored = {
+      data: session.data,
+      message: session.message,
+      signature: session.signature
+    };
+    writeSiwxSession(address, id, stored);
+  };
+  const addSession = async (session) => {
+    await persistSession(session);
+  };
+  const setSessions = async (sessions) => {
+    for (const session of sessions) {
+      await persistSession(session);
+    }
+  };
+  const revokeSession = async (chainId, address) => {
+    const id = numericChainId(chainId);
+    clearSession(address, id);
+    clearSiwxSession(address, id);
+  };
+  return { createMessage, getSessions, addSession, setSessions, revokeSession };
+}
+function createOwneySIWX(config) {
+  const zyfai = new import_sdk2.ZyfaiSDK({ apiKey: config.apiKey });
+  const http = zyfai.httpClient;
+  return buildSIWXConfig({
+    post: (url, data) => http.post(url, data),
+    referralSource: config.referralSource
+  });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AgentChainIncompatibleError,
@@ -2031,5 +2025,6 @@ var OwneySDK = class {
   InvalidHistoryCursorError,
   NotConnectedError,
   OwneyError,
-  OwneySDK
+  OwneySDK,
+  createOwneySIWX
 });

package/dist/index.d.cts

@@ -1,3 +1,5 @@
+import { SIWXConfig } from '@reown/appkit-controllers';
+
 type ZyfaiRpcUrlsConfig = Partial<Record<(typeof SUPPORTED_CHAIN_IDS)[number], string>>;
 interface OwneySDKConfig {
     apiKey: string;
@@ -99,7 +101,7 @@ type AgentsApyOptions = {
 type DepositOptions = {
     amount: string;
     asset: Asset;
-    depositCallback?: DepositCallback;
+    depositCallback: DepositCallback;
     agentId?: AgentId;
 };
 
@@ -235,7 +237,6 @@ declare class OwneySDK {
     private state;
     private apiKey;
     private zyfaiRpcUrls?;
-    private cachedSponsoredCallback;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -262,14 +263,6 @@ declare class OwneySDK {
     getActiveChainId(): number | null;
     private requireState;
     private requireChainId;
-    private requireConnectedProvider;
-    /**
-     * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
-     * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
-     * provider with viem `custom(provider)` to read token meta and sign the
-     * `TransferWithAuthorization`, then POSTs to the sponsor API.
-     */
-    private getDefaultSponsoredCallback;
     private getAgent;
     private getActiveAgents;
     private ensureAgentsInitialized;
@@ -397,7 +390,7 @@ declare class OwneySDK {
     getAgentAllocation(): Promise<OwneyAgentAllocation>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;
@@ -427,4 +420,17 @@ declare class InvalidHistoryCursorError extends Error {
     constructor(message: string);
 }
 
-export { AccountAgentApy, AccountApyOptions, AgentApy, AgentApyDetails, AgentBalance, AgentChainIncompatibleError, AgentEarnings, AgentHistoryEntry, AgentHistoryPosition, AgentId, AgentNotFoundError, AgentSupportedAsset, AgentSupportedAssets, AgentUserProfile, AgentWithdrawResult, AgentsApyOptions, ApyByChainAndAsset, Asset, ConnectionState, DailyApyDays, DepositCallback, DepositOptions, HistoryAction, HistoryFilters, HistoryOptions, HistoryTransaction, IAgent, InvalidHistoryCursorError, NotConnectedError, OwneyAccountApy, OwneyAgentAllocation, OwneyAgentApy, OwneyAgentHistory, OwneyAgentStatus, OwneyBalances, OwneyDepositResult, OwneyEarnings, OwneyError, OwneyErrorCode, OwneyMultiDepositResult, OwneySDK, OwneySDKConfig, OwneySupportedChainId, OwneySupportedChains, OwneySupportedTokens, OwneyToken, OwneyUserProfile, OwneyWithdrawResult, RebalanceLog, WithdrawOptions };
+type OwneySIWXConfig = {
+    /** Owney/Zyfai API key — same value passed to `new OwneySDK({ apiKey })`. */
+    apiKey: string;
+    /** Optional attribution forwarded to /auth/login. */
+    referralSource?: string;
+};
+/**
+ * Public factory. Construct ONCE at `createAppKit` time and pass to
+ * `createAppKit({ siwx })`. Reuses Zyfai's internal httpClient so the API base
+ * URL and `X-API-Key` header stay a single source of truth.
+ */
+declare function createOwneySIWX(config: OwneySIWXConfig): SIWXConfig;
+
+export { AccountAgentApy, AccountApyOptions, AgentApy, AgentApyDetails, AgentBalance, AgentChainIncompatibleError, AgentEarnings, AgentHistoryEntry, AgentHistoryPosition, AgentId, AgentNotFoundError, AgentSupportedAsset, AgentSupportedAssets, AgentUserProfile, AgentWithdrawResult, AgentsApyOptions, ApyByChainAndAsset, Asset, ConnectionState, DailyApyDays, DepositCallback, DepositOptions, HistoryAction, HistoryFilters, HistoryOptions, HistoryTransaction, IAgent, InvalidHistoryCursorError, NotConnectedError, OwneyAccountApy, OwneyAgentAllocation, OwneyAgentApy, OwneyAgentHistory, OwneyAgentStatus, OwneyBalances, OwneyDepositResult, OwneyEarnings, OwneyError, OwneyErrorCode, OwneyMultiDepositResult, OwneySDK, OwneySDKConfig, OwneySIWXConfig, OwneySupportedChainId, OwneySupportedChains, OwneySupportedTokens, OwneyToken, OwneyUserProfile, OwneyWithdrawResult, RebalanceLog, WithdrawOptions, createOwneySIWX };

package/dist/index.d.ts

@@ -1,3 +1,5 @@
+import { SIWXConfig } from '@reown/appkit-controllers';
+
 type ZyfaiRpcUrlsConfig = Partial<Record<(typeof SUPPORTED_CHAIN_IDS)[number], string>>;
 interface OwneySDKConfig {
     apiKey: string;
@@ -99,7 +101,7 @@ type AgentsApyOptions = {
 type DepositOptions = {
     amount: string;
     asset: Asset;
-    depositCallback?: DepositCallback;
+    depositCallback: DepositCallback;
     agentId?: AgentId;
 };
 
@@ -235,7 +237,6 @@ declare class OwneySDK {
     private state;
     private apiKey;
     private zyfaiRpcUrls?;
-    private cachedSponsoredCallback;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -262,14 +263,6 @@ declare class OwneySDK {
     getActiveChainId(): number | null;
     private requireState;
     private requireChainId;
-    private requireConnectedProvider;
-    /**
-     * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
-     * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
-     * provider with viem `custom(provider)` to read token meta and sign the
-     * `TransferWithAuthorization`, then POSTs to the sponsor API.
-     */
-    private getDefaultSponsoredCallback;
     private getAgent;
     private getActiveAgents;
     private ensureAgentsInitialized;
@@ -397,7 +390,7 @@ declare class OwneySDK {
     getAgentAllocation(): Promise<OwneyAgentAllocation>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;
@@ -427,4 +420,17 @@ declare class InvalidHistoryCursorError extends Error {
     constructor(message: string);
 }
 
-export { AccountAgentApy, AccountApyOptions, AgentApy, AgentApyDetails, AgentBalance, AgentChainIncompatibleError, AgentEarnings, AgentHistoryEntry, AgentHistoryPosition, AgentId, AgentNotFoundError, AgentSupportedAsset, AgentSupportedAssets, AgentUserProfile, AgentWithdrawResult, AgentsApyOptions, ApyByChainAndAsset, Asset, ConnectionState, DailyApyDays, DepositCallback, DepositOptions, HistoryAction, HistoryFilters, HistoryOptions, HistoryTransaction, IAgent, InvalidHistoryCursorError, NotConnectedError, OwneyAccountApy, OwneyAgentAllocation, OwneyAgentApy, OwneyAgentHistory, OwneyAgentStatus, OwneyBalances, OwneyDepositResult, OwneyEarnings, OwneyError, OwneyErrorCode, OwneyMultiDepositResult, OwneySDK, OwneySDKConfig, OwneySupportedChainId, OwneySupportedChains, OwneySupportedTokens, OwneyToken, OwneyUserProfile, OwneyWithdrawResult, RebalanceLog, WithdrawOptions };
+type OwneySIWXConfig = {
+    /** Owney/Zyfai API key — same value passed to `new OwneySDK({ apiKey })`. */
+    apiKey: string;
+    /** Optional attribution forwarded to /auth/login. */
+    referralSource?: string;
+};
+/**
+ * Public factory. Construct ONCE at `createAppKit` time and pass to
+ * `createAppKit({ siwx })`. Reuses Zyfai's internal httpClient so the API base
+ * URL and `X-API-Key` header stay a single source of truth.
+ */
+declare function createOwneySIWX(config: OwneySIWXConfig): SIWXConfig;
+
+export { AccountAgentApy, AccountApyOptions, AgentApy, AgentApyDetails, AgentBalance, AgentChainIncompatibleError, AgentEarnings, AgentHistoryEntry, AgentHistoryPosition, AgentId, AgentNotFoundError, AgentSupportedAsset, AgentSupportedAssets, AgentUserProfile, AgentWithdrawResult, AgentsApyOptions, ApyByChainAndAsset, Asset, ConnectionState, DailyApyDays, DepositCallback, DepositOptions, HistoryAction, HistoryFilters, HistoryOptions, HistoryTransaction, IAgent, InvalidHistoryCursorError, NotConnectedError, OwneyAccountApy, OwneyAgentAllocation, OwneyAgentApy, OwneyAgentHistory, OwneyAgentStatus, OwneyBalances, OwneyDepositResult, OwneyEarnings, OwneyError, OwneyErrorCode, OwneyMultiDepositResult, OwneySDK, OwneySDKConfig, OwneySIWXConfig, OwneySupportedChainId, OwneySupportedChains, OwneySupportedTokens, OwneyToken, OwneyUserProfile, OwneyWithdrawResult, RebalanceLog, WithdrawOptions, createOwneySIWX };

package/dist/index.js

@@ -902,134 +902,6 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
   return out;
 }
 
-// src/client.ts
-import {
-  createPublicClient,
-  createWalletClient,
-  custom
-} from "viem";
-import { base, arbitrum } from "viem/chains";
-
-// src/lib/transfer-auth.ts
-import { bytesToHex } from "viem";
-var ERC20_META_ABI = [
-  { type: "function", name: "name", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] },
-  { type: "function", name: "version", stateMutability: "view", inputs: [], outputs: [{ name: "", type: "string" }] }
-];
-function buildTransferWithAuthorizationTypedData(input) {
-  return {
-    domain: { name: input.tokenName, version: input.tokenVersion, chainId: input.chainId, verifyingContract: input.token },
-    types: {
-      TransferWithAuthorization: [
-        { name: "from", type: "address" },
-        { name: "to", type: "address" },
-        { name: "value", type: "uint256" },
-        { name: "validAfter", type: "uint256" },
-        { name: "validBefore", type: "uint256" },
-        { name: "nonce", type: "bytes32" }
-      ]
-    },
-    primaryType: "TransferWithAuthorization",
-    message: input.message
-  };
-}
-async function readTokenMeta(publicClient, token) {
-  const [tokenName, tokenVersion] = await Promise.all([
-    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "name" }),
-    publicClient.readContract({ address: token, abi: ERC20_META_ABI, functionName: "version" }).catch(() => "2")
-  ]);
-  return { tokenName, tokenVersion };
-}
-function randomAuthNonce() {
-  const bytes = new Uint8Array(32);
-  globalThis.crypto.getRandomValues(bytes);
-  return bytesToHex(bytes);
-}
-
-// src/lib/sponsor-client.ts
-var ROUTING_API_BASE_URL3 = "https://owney-routing-api-243946518160.europe-west4.run.app";
-async function postSponsorTransferAuth(input) {
-  const base2 = input.baseUrl ?? ROUTING_API_BASE_URL3;
-  let res;
-  try {
-    res = await fetch(`${base2}/api/v1/sponsor/erc20-transfer-auth`, {
-      method: "POST",
-      headers: { "content-type": "application/json", "x-owney-api-key": input.apiKey },
-      body: JSON.stringify(input.body)
-    });
-  } catch (networkError) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Sponsor API network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
-      { cause: String(networkError) }
-    );
-  }
-  const text = await res.text();
-  let parsed = null;
-  try {
-    parsed = JSON.parse(text);
-  } catch {
-  }
-  if (!res.ok || !parsed?.success || !parsed.data) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Sponsor API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
-      { statusCode: res.status, responseBody: text.slice(0, 500) }
-    );
-  }
-  return parsed.data;
-}
-
-// src/lib/sponsored-deposit.ts
-var AUTH_WINDOW_SECONDS = 15 * 60;
-function makeSponsoredDepositCallback(deps) {
-  const post = deps.httpPost ?? postSponsorTransferAuth;
-  return async (smartWallet, chainId, amount) => {
-    const cid = chainId;
-    const token = deps.tokenAddressByChain[cid];
-    if (!token) {
-      throw new OwneyError(
-        "CHAIN_UNSUPPORTED",
-        `No sponsored token configured for chain ${chainId}`
-      );
-    }
-    const pub = deps.getPublicClient(cid);
-    const wallet = deps.getWalletClient(cid);
-    const { tokenName, tokenVersion } = await readTokenMeta(pub, token);
-    const validAfter = 0n;
-    const validBefore = BigInt(Math.floor(Date.now() / 1e3) + AUTH_WINDOW_SECONDS);
-    const nonce = randomAuthNonce();
-    const typedData = buildTransferWithAuthorizationTypedData({
-      token,
-      chainId: cid,
-      tokenName,
-      tokenVersion,
-      message: { from: deps.ownerAddress, to: smartWallet, value: BigInt(amount), validAfter, validBefore, nonce }
-    });
-    const authSignature = await wallet.signTypedData(
-      { account: deps.ownerAddress, ...typedData }
-    );
-    const result = await post({
-      baseUrl: deps.baseUrl,
-      apiKey: deps.apiKey,
-      body: {
-        chainId: cid,
-        token,
-        from: deps.ownerAddress,
-        to: smartWallet,
-        value: amount,
-        validAfter: validAfter.toString(),
-        validBefore: validBefore.toString(),
-        nonce,
-        authSignature,
-        tokenName,
-        tokenVersion
-      }
-    });
-    return result.txHash;
-  };
-}
-
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -1051,11 +923,6 @@ function decodeMultiAgentCursor(token) {
   }
   return parsed;
 }
-var SPONSORED_USDC_BY_CHAIN = {
-  8453: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
-  42161: "0xaf88d065e77c8cc2239327c5edb3a432268e5831"
-};
-var VIEM_CHAIN = { 8453: base, 42161: arbitrum };
 var OwneySDK = class {
   agents = /* @__PURE__ */ new Map();
   activeAgents = /* @__PURE__ */ new Set();
@@ -1068,7 +935,6 @@ var OwneySDK = class {
   state = null;
   apiKey;
   zyfaiRpcUrls;
-  cachedSponsoredCallback = null;
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
@@ -1092,7 +958,6 @@ var OwneySDK = class {
       );
     }
     this.state = { provider, walletAddress, chainId: null };
-    this.cachedSponsoredCallback = null;
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -1105,7 +970,6 @@ var OwneySDK = class {
     this.activeAgents.clear();
     this.disabledAgents.clear();
     this.state = null;
-    this.cachedSponsoredCallback = null;
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -1139,46 +1003,6 @@ var OwneySDK = class {
     }
     return chainId;
   }
-  requireConnectedProvider() {
-    if (!this.state?.provider) {
-      throw new OwneyError(
-        "NOT_CONNECTED",
-        "connect(provider) must be called before deposit",
-        {}
-      );
-    }
-    return this.state.provider;
-  }
-  /**
-   * Lazily builds (and caches) the default EIP-3009 sponsored deposit callback
-   * used when the caller omits `depositCallback`. Wraps the connected EIP-1193
-   * provider with viem `custom(provider)` to read token meta and sign the
-   * `TransferWithAuthorization`, then POSTs to the sponsor API.
-   */
-  getDefaultSponsoredCallback() {
-    if (this.cachedSponsoredCallback)
-      return this.cachedSponsoredCallback;
-    const provider = this.requireConnectedProvider();
-    const owner = this.state.walletAddress;
-    this.cachedSponsoredCallback = makeSponsoredDepositCallback({
-      apiKey: this.apiKey,
-      ownerAddress: owner,
-      tokenAddressByChain: SPONSORED_USDC_BY_CHAIN,
-      // Casts work around viem's chain-narrowed Client vs the generic
-      // PublicClient/WalletClient param types — structurally identical at
-      // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => createPublicClient({
-        chain: VIEM_CHAIN[cid],
-        transport: custom(provider)
-      }),
-      getWalletClient: (cid) => createWalletClient({
-        account: owner,
-        chain: VIEM_CHAIN[cid],
-        transport: custom(provider)
-      })
-    });
-    return this.cachedSponsoredCallback;
-  }
   getAgent(agentId) {
     const agent = this.agents.get(agentId);
     if (!agent) {
@@ -1332,7 +1156,6 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
-    const effectiveCallback = depositCallback ?? this.getDefaultSponsoredCallback();
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(
@@ -1347,7 +1170,7 @@ var OwneySDK = class {
       return withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, amount, effectiveCallback)
+        () => agent.deposit(state, chainId, amount, depositCallback)
       );
     }
     const totalAmount = BigInt(amount);
@@ -1381,7 +1204,7 @@ var OwneySDK = class {
       agentResults[agent.id] = await withFailureReporting(
         this.apiKey,
         agent.id,
-        () => agent.deposit(state, chainId, agentAmount, effectiveCallback)
+        () => agent.deposit(state, chainId, agentAmount, depositCallback)
       );
     }
     return { agentResults };
@@ -1997,11 +1820,178 @@ var OwneySDK = class {
     };
   }
 };
+
+// src/agents/zyfai/zyfai.siwx.ts
+import { getAddress } from "viem";
+import { SiweMessage } from "siwe";
+import { ZyfaiSDK as ZyfaiSDK2 } from "@zyfai/sdk";
+
+// src/agents/zyfai/zyfai.siwx-cache.ts
+var KEY_PREFIX2 = "owney.siwx.session";
+var storage2 = () => {
+  if (typeof window === "undefined")
+    return null;
+  try {
+    return window.localStorage;
+  } catch {
+    return null;
+  }
+};
+var buildKey2 = (address, chainId) => `${KEY_PREFIX2}:${address.toLowerCase()}:${chainId}`;
+var readSiwxSession = (address, chainId) => {
+  const store = storage2();
+  if (!store)
+    return null;
+  const raw = store.getItem(buildKey2(address, chainId));
+  if (!raw)
+    return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    store.removeItem(buildKey2(address, chainId));
+    return null;
+  }
+};
+var writeSiwxSession = (address, chainId, session) => {
+  const store = storage2();
+  if (!store)
+    return;
+  try {
+    store.setItem(buildKey2(address, chainId), JSON.stringify(session));
+  } catch {
+  }
+};
+var clearSiwxSession = (address, chainId) => {
+  const store = storage2();
+  if (!store)
+    return;
+  try {
+    store.removeItem(buildKey2(address, chainId));
+  } catch {
+  }
+};
+
+// src/agents/zyfai/zyfai.siwx.ts
+var STATEMENT = "Sign in with Ethereum";
+var VERSION = "1";
+var numericChainId = (caip) => {
+  const segment = caip.split(":").pop();
+  const id = Number(segment);
+  if (!segment || !Number.isFinite(id) || id <= 0) {
+    throw new Error(`Invalid CAIP chain id: "${caip}"`);
+  }
+  return id;
+};
+var browserDomain = () => typeof window !== "undefined" ? window.location.host : "";
+var browserUri = () => typeof window !== "undefined" ? window.location.origin : "";
+function buildSIWXConfig(deps) {
+  const { post, referralSource } = deps;
+  const createMessage = async (input) => {
+    const { nonce } = await post("/auth/challenge", {});
+    const domain = browserDomain();
+    const uri = browserUri();
+    const issuedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const chainId = input.chainId;
+    const accountAddress = input.accountAddress;
+    const message = {
+      accountAddress,
+      chainId,
+      domain,
+      uri,
+      version: VERSION,
+      nonce,
+      statement: STATEMENT,
+      issuedAt,
+      toString() {
+        return new SiweMessage({
+          address: getAddress(accountAddress),
+          chainId: numericChainId(chainId),
+          domain,
+          uri,
+          statement: STATEMENT,
+          nonce,
+          version: VERSION,
+          issuedAt
+        }).prepareMessage();
+      }
+    };
+    return message;
+  };
+  const getSessions = async (chainId, address) => {
+    let id;
+    try {
+      id = numericChainId(chainId);
+    } catch {
+      return [];
+    }
+    const jwt = readSession(address, id);
+    const stored = readSiwxSession(address, id);
+    if (!jwt) {
+      if (stored)
+        clearSiwxSession(address, id);
+      return [];
+    }
+    if (!stored)
+      return [];
+    const session = {
+      // `stored.data.chainId` is a plain string in the cache (kept AppKit-free);
+      // it always holds a valid CaipNetworkId here, so narrow at the boundary.
+      data: stored.data,
+      message: stored.message,
+      signature: stored.signature
+    };
+    return [session];
+  };
+  const persistSession = async (session) => {
+    const address = session.data.accountAddress;
+    const id = numericChainId(session.data.chainId);
+    const message = new SiweMessage(session.message);
+    const login = await post("/auth/login", {
+      message,
+      signature: session.signature,
+      referralSource
+    });
+    writeSession(address, id, {
+      token: login.accessToken,
+      userId: login.userId ?? null,
+      hasActiveSessionKey: Boolean(login.hasActiveSessionKey)
+    });
+    const stored = {
+      data: session.data,
+      message: session.message,
+      signature: session.signature
+    };
+    writeSiwxSession(address, id, stored);
+  };
+  const addSession = async (session) => {
+    await persistSession(session);
+  };
+  const setSessions = async (sessions) => {
+    for (const session of sessions) {
+      await persistSession(session);
+    }
+  };
+  const revokeSession = async (chainId, address) => {
+    const id = numericChainId(chainId);
+    clearSession(address, id);
+    clearSiwxSession(address, id);
+  };
+  return { createMessage, getSessions, addSession, setSessions, revokeSession };
+}
+function createOwneySIWX(config) {
+  const zyfai = new ZyfaiSDK2({ apiKey: config.apiKey });
+  const http = zyfai.httpClient;
+  return buildSIWXConfig({
+    post: (url, data) => http.post(url, data),
+    referralSource: config.referralSource
+  });
+}
 export {
   AgentChainIncompatibleError,
   AgentNotFoundError,
   InvalidHistoryCursorError,
   NotConnectedError,
   OwneyError,
-  OwneySDK
+  OwneySDK,
+  createOwneySIWX
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.5.0-beta.0",
+  "version": "0.6.0-beta.0",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
@@ -24,9 +24,11 @@
   },
   "dependencies": {
     "@zyfai/sdk": "^0.2.36",
+    "siwe": "^3.0.0",
     "viem": "^2.48.1"
   },
   "devDependencies": {
+    "@reown/appkit-controllers": "^1.8.20",
     "dotenv": "^17.3.1",
     "tsup": "^7.0.0",
     "typescript": "^5.0.0",