@owney/sdk 0.6.7-beta.3 → 0.6.7

package/dist/index.cjs

@@ -535,8 +535,7 @@ var storage = () => {
     return null;
   }
 };
-var buildKey = (address) => `${KEY_PREFIX}:${address.toLowerCase()}`;
-var legacyKeyPrefix = (address) => `${KEY_PREFIX}:${address.toLowerCase()}:`;
+var buildKey = (address, chainId) => `${KEY_PREFIX}:${address.toLowerCase()}:${chainId}`;
 var isJwtExpired = (token) => {
   const parts = token.split(".");
   if (parts.length !== 3) return false;
@@ -553,37 +552,9 @@ var isJwtExpired = (token) => {
 };
 var memorySessions = /* @__PURE__ */ new Map();
 var isFreshSession = (session) => !!session && !!session.token && !isJwtExpired(session.token);
-var readLegacySession = (store, address) => {
-  if (!store) return null;
-  const prefix = legacyKeyPrefix(address);
-  const legacyKeys = [];
-  try {
-    for (let i = 0; i < store.length; i++) {
-      const key = store.key(i);
-      if (key?.startsWith(prefix)) legacyKeys.push(key);
-    }
-  } catch {
-    return null;
-  }
-  let adopted = null;
-  for (const key of legacyKeys) {
-    if (!adopted) {
-      try {
-        const parsed = JSON.parse(store.getItem(key) ?? "");
-        if (isFreshSession(parsed)) adopted = parsed;
-      } catch {
-      }
-    }
-    try {
-      store.removeItem(key);
-    } catch {
-    }
-  }
-  return adopted;
-};
-var readSession = (address, _chainId) => {
+var readSession = (address, chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey(address);
+  const key = buildKey(address, chainId);
   const store = storage();
   let raw = null;
   try {
@@ -604,19 +575,14 @@ var readSession = (address, _chainId) => {
     }
     return null;
   }
-  const legacy = readLegacySession(store, address);
-  if (legacy) {
-    writeSession(address, _chainId, legacy);
-    return legacy;
-  }
   const cached = memorySessions.get(key);
   if (isFreshSession(cached)) return cached;
   if (cached) memorySessions.delete(key);
   return null;
 };
-var writeSession = (address, _chainId, session) => {
+var writeSession = (address, chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey(address);
+  const key = buildKey(address, chainId);
   memorySessions.set(key, session);
   const store = storage();
   try {
@@ -624,15 +590,14 @@ var writeSession = (address, _chainId, session) => {
   } catch {
   }
 };
-var clearSession = (address, _chainId) => {
-  const key = buildKey(address);
+var clearSession = (address, chainId) => {
+  const key = buildKey(address, chainId);
   memorySessions.delete(key);
   const store = storage();
   try {
     store?.removeItem(key);
   } catch {
   }
-  readLegacySession(store, address);
 };
 
 // src/agents/zyfai/autoSelect.ts
@@ -648,6 +613,18 @@ function buildAutoSelectUpdate(current, asset, chainId) {
   };
 }
 
+// src/agents/zyfai/protocol-merge.ts
+function buildProtocolMergeUpdate(available, current, asset) {
+  const enabled = current.protocols ?? [];
+  const enabledSet = new Set(enabled);
+  const missing = available.filter((p) => !enabledSet.has(p.id));
+  if (missing.length === 0) return null;
+  return {
+    asset,
+    protocols: [.../* @__PURE__ */ new Set([...enabled, ...missing.map((p) => p.id)])]
+  };
+}
+
 // src/agents/zyfai/zyfai.agent.ts
 var DEFAULT_ZYFAI_RPC_URLS = {
   8453: "https://base-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
@@ -709,15 +686,11 @@ var ZyfaiAgent = class {
   // successful decode is cached forever; failures are NOT cached so a transient
   // RPC error retries on the next fetch.
   withdrawAmountCache = /* @__PURE__ */ new Map();
-  constructor(apiKey, rpcUrls, referralSource) {
+  constructor(apiKey, rpcUrls) {
     this.rpcUrls = rpcUrls ?? DEFAULT_ZYFAI_RPC_URLS;
     this.sdk = new import_sdk.ZyfaiSDK({
       apiKey,
-      rpcUrls: this.rpcUrls,
-      // Forwarded to /auth/login by the SDK's own SIWE handshake, so
-      // attribution survives without the AppKit SIWX config (which carried it
-      // via `createOwneySIWX({ referralSource })` when apps used the modal).
-      referralSource
+      rpcUrls: this.rpcUrls
     });
     this.installAuthCache();
   }
@@ -956,6 +929,34 @@ var ZyfaiAgent = class {
       }
     }
   }
+  /**
+   * Sync newly-available protocols onto an existing user's profile at wallet
+   * connection. Zyfai's own protocol sync (`updateUserProtocols`) runs only when
+   * a session key is created, so existing users — who already have one — never
+   * pick up protocols Zyfai adds later. This closes that gap idempotently:
+   * it diffs available-vs-enabled by protocol id and writes the full union
+   * back, or does nothing when none are missing.
+   *
+   * Non-fatal: a sync failure must never block activation. Only "USDC" / "WETH"
+   * are modeled per-asset by the Zyfai profile API, so other assets are skipped.
+   */
+  async ensureProtocolsSynced(chainId, asset) {
+    if (asset !== "USDC" && asset !== "WETH") return;
+    try {
+      const [current, { protocols: available }] = await Promise.all([
+        this.sdk.getUserDetails(asset),
+        this.sdk.getAvailableProtocols(chainId)
+      ]);
+      const update = buildProtocolMergeUpdate(available, current, asset);
+      if (!update) return;
+      await this.sdk.updateUserProfile(update);
+    } catch (error) {
+      console.warn(
+        "[zyfai] ensureProtocolsSynced failed (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   /** Connect + resolve smart wallet address for read operations. */
   async resolveSmartWallet(state, chainId) {
     await this.connectAuth(state, chainId);
@@ -987,6 +988,11 @@ var ZyfaiAgent = class {
   async activateAgent(state, chainId) {
     try {
       await this.connectAuth(state, chainId);
+      const validChainId = isValidChainId(chainId);
+      await Promise.all([
+        this.ensureProtocolsSynced(validChainId, "USDC"),
+        this.ensureProtocolsSynced(validChainId, "WETH")
+      ]);
     } catch (error) {
       throw error;
     }
@@ -1681,7 +1687,6 @@ var OwneySDK = class {
   apiKey;
   zyfaiRpcUrls;
   routingApiBaseUrl;
-  referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
   initializingAgentsPromise = null;
@@ -1689,7 +1694,6 @@ var OwneySDK = class {
     this.apiKey = config.apiKey;
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
-    this.referralSource = config.referralSource;
   }
   /**
    * Establish connection state for all subsequent SDK calls.
@@ -1873,7 +1877,7 @@ var OwneySDK = class {
   }
   createAgent(agentId, key) {
     if (agentId === "zyfai") {
-      return new ZyfaiAgent(key, this.zyfaiRpcUrls, this.referralSource);
+      return new ZyfaiAgent(key, this.zyfaiRpcUrls);
     }
     return null;
   }
@@ -2759,39 +2763,11 @@ var storage2 = () => {
     return null;
   }
 };
-var buildKey2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}`;
-var legacyKeyPrefix2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}:`;
+var buildKey2 = (address, chainId) => `${KEY_PREFIX2}:${address.toLowerCase()}:${chainId}`;
 var memorySiwxSessions = /* @__PURE__ */ new Map();
-var readLegacySiwxSession = (store, address) => {
-  if (!store) return null;
-  const prefix = legacyKeyPrefix2(address);
-  const legacyKeys = [];
-  try {
-    for (let i = 0; i < store.length; i++) {
-      const key = store.key(i);
-      if (key?.startsWith(prefix)) legacyKeys.push(key);
-    }
-  } catch {
-    return null;
-  }
-  let adopted = null;
-  for (const key of legacyKeys) {
-    if (!adopted) {
-      try {
-        adopted = JSON.parse(store.getItem(key) ?? "");
-      } catch {
-      }
-    }
-    try {
-      store.removeItem(key);
-    } catch {
-    }
-  }
-  return adopted;
-};
 var readSiwxSession = (address, chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey2(address);
+  const key = buildKey2(address, chainId);
   const store = storage2();
   let raw = null;
   try {
@@ -2811,16 +2787,11 @@ var readSiwxSession = (address, chainId) => {
       return null;
     }
   }
-  const legacy = readLegacySiwxSession(store, address);
-  if (legacy) {
-    writeSiwxSession(address, chainId, legacy);
-    return legacy;
-  }
   return memorySiwxSessions.get(key) ?? null;
 };
-var writeSiwxSession = (address, _chainId, session) => {
+var writeSiwxSession = (address, chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey2(address);
+  const key = buildKey2(address, chainId);
   memorySiwxSessions.set(key, session);
   const store = storage2();
   try {
@@ -2828,15 +2799,14 @@ var writeSiwxSession = (address, _chainId, session) => {
   } catch {
   }
 };
-var clearSiwxSession = (address, _chainId) => {
-  const key = buildKey2(address);
+var clearSiwxSession = (address, chainId) => {
+  const key = buildKey2(address, chainId);
   memorySiwxSessions.delete(key);
   const store = storage2();
   try {
     store?.removeItem(key);
   } catch {
   }
-  readLegacySiwxSession(store, address);
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
@@ -2900,12 +2870,9 @@ function buildSIWXConfig(deps) {
     }
     if (!stored) return [];
     const session = {
-      // `stored.data` is kept AppKit-free in the cache, so narrow at the
-      // boundary. Echo the REQUESTED chain rather than the one originally
-      // signed: the Zyfai JWT is account-scoped (no chain claim), so one
-      // signature is valid for every chain, and AppKit would otherwise treat
-      // the session as not covering the active network and re-prompt.
-      data: { ...stored.data, chainId },
+      // `stored.data.chainId` is a plain string in the cache (kept AppKit-free);
+      // it always holds a valid CaipNetworkId here, so narrow at the boundary.
+      data: stored.data,
       message: stored.message,
       signature: stored.signature
     };

package/dist/index.d.cts

@@ -15,12 +15,6 @@ interface OwneySDKConfig {
      * e.g. "http://localhost:3000", when testing sponsor changes.
      */
     routingApiBaseUrl?: string;
-    /**
-     * Optional attribution tag forwarded to Zyfai's /auth/login when the SDK
-     * authenticates (e.g. "delos"). Replaces the equivalent option on
-     * `createOwneySIWX` for apps that don't use the AppKit SIWX modal.
-     */
-    referralSource?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -319,7 +313,6 @@ declare class OwneySDK {
     private apiKey;
     private zyfaiRpcUrls?;
     private routingApiBaseUrl?;
-    private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
     private initializingAgentsPromise;

package/dist/index.d.ts

@@ -15,12 +15,6 @@ interface OwneySDKConfig {
      * e.g. "http://localhost:3000", when testing sponsor changes.
      */
     routingApiBaseUrl?: string;
-    /**
-     * Optional attribution tag forwarded to Zyfai's /auth/login when the SDK
-     * authenticates (e.g. "delos"). Replaces the equivalent option on
-     * `createOwneySIWX` for apps that don't use the AppKit SIWX modal.
-     */
-    referralSource?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -319,7 +313,6 @@ declare class OwneySDK {
     private apiKey;
     private zyfaiRpcUrls?;
     private routingApiBaseUrl?;
-    private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
     private initializingAgentsPromise;

package/dist/index.js

@@ -503,8 +503,7 @@ var storage = () => {
     return null;
   }
 };
-var buildKey = (address) => `${KEY_PREFIX}:${address.toLowerCase()}`;
-var legacyKeyPrefix = (address) => `${KEY_PREFIX}:${address.toLowerCase()}:`;
+var buildKey = (address, chainId) => `${KEY_PREFIX}:${address.toLowerCase()}:${chainId}`;
 var isJwtExpired = (token) => {
   const parts = token.split(".");
   if (parts.length !== 3) return false;
@@ -521,37 +520,9 @@ var isJwtExpired = (token) => {
 };
 var memorySessions = /* @__PURE__ */ new Map();
 var isFreshSession = (session) => !!session && !!session.token && !isJwtExpired(session.token);
-var readLegacySession = (store, address) => {
-  if (!store) return null;
-  const prefix = legacyKeyPrefix(address);
-  const legacyKeys = [];
-  try {
-    for (let i = 0; i < store.length; i++) {
-      const key = store.key(i);
-      if (key?.startsWith(prefix)) legacyKeys.push(key);
-    }
-  } catch {
-    return null;
-  }
-  let adopted = null;
-  for (const key of legacyKeys) {
-    if (!adopted) {
-      try {
-        const parsed = JSON.parse(store.getItem(key) ?? "");
-        if (isFreshSession(parsed)) adopted = parsed;
-      } catch {
-      }
-    }
-    try {
-      store.removeItem(key);
-    } catch {
-    }
-  }
-  return adopted;
-};
-var readSession = (address, _chainId) => {
+var readSession = (address, chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey(address);
+  const key = buildKey(address, chainId);
   const store = storage();
   let raw = null;
   try {
@@ -572,19 +543,14 @@ var readSession = (address, _chainId) => {
     }
     return null;
   }
-  const legacy = readLegacySession(store, address);
-  if (legacy) {
-    writeSession(address, _chainId, legacy);
-    return legacy;
-  }
   const cached = memorySessions.get(key);
   if (isFreshSession(cached)) return cached;
   if (cached) memorySessions.delete(key);
   return null;
 };
-var writeSession = (address, _chainId, session) => {
+var writeSession = (address, chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey(address);
+  const key = buildKey(address, chainId);
   memorySessions.set(key, session);
   const store = storage();
   try {
@@ -592,15 +558,14 @@ var writeSession = (address, _chainId, session) => {
   } catch {
   }
 };
-var clearSession = (address, _chainId) => {
-  const key = buildKey(address);
+var clearSession = (address, chainId) => {
+  const key = buildKey(address, chainId);
   memorySessions.delete(key);
   const store = storage();
   try {
     store?.removeItem(key);
   } catch {
   }
-  readLegacySession(store, address);
 };
 
 // src/agents/zyfai/autoSelect.ts
@@ -616,6 +581,18 @@ function buildAutoSelectUpdate(current, asset, chainId) {
   };
 }
 
+// src/agents/zyfai/protocol-merge.ts
+function buildProtocolMergeUpdate(available, current, asset) {
+  const enabled = current.protocols ?? [];
+  const enabledSet = new Set(enabled);
+  const missing = available.filter((p) => !enabledSet.has(p.id));
+  if (missing.length === 0) return null;
+  return {
+    asset,
+    protocols: [.../* @__PURE__ */ new Set([...enabled, ...missing.map((p) => p.id)])]
+  };
+}
+
 // src/agents/zyfai/zyfai.agent.ts
 var DEFAULT_ZYFAI_RPC_URLS = {
   8453: "https://base-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
@@ -677,15 +654,11 @@ var ZyfaiAgent = class {
   // successful decode is cached forever; failures are NOT cached so a transient
   // RPC error retries on the next fetch.
   withdrawAmountCache = /* @__PURE__ */ new Map();
-  constructor(apiKey, rpcUrls, referralSource) {
+  constructor(apiKey, rpcUrls) {
     this.rpcUrls = rpcUrls ?? DEFAULT_ZYFAI_RPC_URLS;
     this.sdk = new ZyfaiSDK({
       apiKey,
-      rpcUrls: this.rpcUrls,
-      // Forwarded to /auth/login by the SDK's own SIWE handshake, so
-      // attribution survives without the AppKit SIWX config (which carried it
-      // via `createOwneySIWX({ referralSource })` when apps used the modal).
-      referralSource
+      rpcUrls: this.rpcUrls
     });
     this.installAuthCache();
   }
@@ -924,6 +897,34 @@ var ZyfaiAgent = class {
       }
     }
   }
+  /**
+   * Sync newly-available protocols onto an existing user's profile at wallet
+   * connection. Zyfai's own protocol sync (`updateUserProtocols`) runs only when
+   * a session key is created, so existing users — who already have one — never
+   * pick up protocols Zyfai adds later. This closes that gap idempotently:
+   * it diffs available-vs-enabled by protocol id and writes the full union
+   * back, or does nothing when none are missing.
+   *
+   * Non-fatal: a sync failure must never block activation. Only "USDC" / "WETH"
+   * are modeled per-asset by the Zyfai profile API, so other assets are skipped.
+   */
+  async ensureProtocolsSynced(chainId, asset) {
+    if (asset !== "USDC" && asset !== "WETH") return;
+    try {
+      const [current, { protocols: available }] = await Promise.all([
+        this.sdk.getUserDetails(asset),
+        this.sdk.getAvailableProtocols(chainId)
+      ]);
+      const update = buildProtocolMergeUpdate(available, current, asset);
+      if (!update) return;
+      await this.sdk.updateUserProfile(update);
+    } catch (error) {
+      console.warn(
+        "[zyfai] ensureProtocolsSynced failed (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   /** Connect + resolve smart wallet address for read operations. */
   async resolveSmartWallet(state, chainId) {
     await this.connectAuth(state, chainId);
@@ -955,6 +956,11 @@ var ZyfaiAgent = class {
   async activateAgent(state, chainId) {
     try {
       await this.connectAuth(state, chainId);
+      const validChainId = isValidChainId(chainId);
+      await Promise.all([
+        this.ensureProtocolsSynced(validChainId, "USDC"),
+        this.ensureProtocolsSynced(validChainId, "WETH")
+      ]);
     } catch (error) {
       throw error;
     }
@@ -1653,7 +1659,6 @@ var OwneySDK = class {
   apiKey;
   zyfaiRpcUrls;
   routingApiBaseUrl;
-  referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
   initializingAgentsPromise = null;
@@ -1661,7 +1666,6 @@ var OwneySDK = class {
     this.apiKey = config.apiKey;
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
-    this.referralSource = config.referralSource;
   }
   /**
    * Establish connection state for all subsequent SDK calls.
@@ -1845,7 +1849,7 @@ var OwneySDK = class {
   }
   createAgent(agentId, key) {
     if (agentId === "zyfai") {
-      return new ZyfaiAgent(key, this.zyfaiRpcUrls, this.referralSource);
+      return new ZyfaiAgent(key, this.zyfaiRpcUrls);
     }
     return null;
   }
@@ -2731,39 +2735,11 @@ var storage2 = () => {
     return null;
   }
 };
-var buildKey2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}`;
-var legacyKeyPrefix2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}:`;
+var buildKey2 = (address, chainId) => `${KEY_PREFIX2}:${address.toLowerCase()}:${chainId}`;
 var memorySiwxSessions = /* @__PURE__ */ new Map();
-var readLegacySiwxSession = (store, address) => {
-  if (!store) return null;
-  const prefix = legacyKeyPrefix2(address);
-  const legacyKeys = [];
-  try {
-    for (let i = 0; i < store.length; i++) {
-      const key = store.key(i);
-      if (key?.startsWith(prefix)) legacyKeys.push(key);
-    }
-  } catch {
-    return null;
-  }
-  let adopted = null;
-  for (const key of legacyKeys) {
-    if (!adopted) {
-      try {
-        adopted = JSON.parse(store.getItem(key) ?? "");
-      } catch {
-      }
-    }
-    try {
-      store.removeItem(key);
-    } catch {
-    }
-  }
-  return adopted;
-};
 var readSiwxSession = (address, chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey2(address);
+  const key = buildKey2(address, chainId);
   const store = storage2();
   let raw = null;
   try {
@@ -2783,16 +2759,11 @@ var readSiwxSession = (address, chainId) => {
       return null;
     }
   }
-  const legacy = readLegacySiwxSession(store, address);
-  if (legacy) {
-    writeSiwxSession(address, chainId, legacy);
-    return legacy;
-  }
   return memorySiwxSessions.get(key) ?? null;
 };
-var writeSiwxSession = (address, _chainId, session) => {
+var writeSiwxSession = (address, chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey2(address);
+  const key = buildKey2(address, chainId);
   memorySiwxSessions.set(key, session);
   const store = storage2();
   try {
@@ -2800,15 +2771,14 @@ var writeSiwxSession = (address, _chainId, session) => {
   } catch {
   }
 };
-var clearSiwxSession = (address, _chainId) => {
-  const key = buildKey2(address);
+var clearSiwxSession = (address, chainId) => {
+  const key = buildKey2(address, chainId);
   memorySiwxSessions.delete(key);
   const store = storage2();
   try {
     store?.removeItem(key);
   } catch {
   }
-  readLegacySiwxSession(store, address);
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
@@ -2872,12 +2842,9 @@ function buildSIWXConfig(deps) {
     }
     if (!stored) return [];
     const session = {
-      // `stored.data` is kept AppKit-free in the cache, so narrow at the
-      // boundary. Echo the REQUESTED chain rather than the one originally
-      // signed: the Zyfai JWT is account-scoped (no chain claim), so one
-      // signature is valid for every chain, and AppKit would otherwise treat
-      // the session as not covering the active network and re-prompt.
-      data: { ...stored.data, chainId },
+      // `stored.data.chainId` is a plain string in the cache (kept AppKit-free);
+      // it always holds a valid CaipNetworkId here, so narrow at the boundary.
+      data: stored.data,
       message: stored.message,
       signature: stored.signature
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.6.7-beta.3",
+  "version": "0.6.7",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
@@ -23,7 +23,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@zyfai/sdk": "0.2.40",
+    "@zyfai/sdk": "^0.2.41",
     "siwe": "^3.0.0",
     "viem": "^2.48.1"
   },