@owney/sdk 0.6.7 → 0.6.8-beta.1

package/dist/index.cjs

@@ -535,7 +535,8 @@ var storage = () => {
     return null;
   }
 };
-var buildKey = (address, chainId) => `${KEY_PREFIX}:${address.toLowerCase()}:${chainId}`;
+var buildKey = (address) => `${KEY_PREFIX}:${address.toLowerCase()}`;
+var legacyKeyPrefix = (address) => `${KEY_PREFIX}:${address.toLowerCase()}:`;
 var isJwtExpired = (token) => {
   const parts = token.split(".");
   if (parts.length !== 3) return false;
@@ -552,9 +553,37 @@ var isJwtExpired = (token) => {
 };
 var memorySessions = /* @__PURE__ */ new Map();
 var isFreshSession = (session) => !!session && !!session.token && !isJwtExpired(session.token);
-var readSession = (address, chainId) => {
+var readLegacySession = (store, address) => {
+  if (!store) return null;
+  const prefix = legacyKeyPrefix(address);
+  const legacyKeys = [];
+  try {
+    for (let i = 0; i < store.length; i++) {
+      const key = store.key(i);
+      if (key?.startsWith(prefix)) legacyKeys.push(key);
+    }
+  } catch {
+    return null;
+  }
+  let adopted = null;
+  for (const key of legacyKeys) {
+    if (!adopted) {
+      try {
+        const parsed = JSON.parse(store.getItem(key) ?? "");
+        if (isFreshSession(parsed)) adopted = parsed;
+      } catch {
+      }
+    }
+    try {
+      store.removeItem(key);
+    } catch {
+    }
+  }
+  return adopted;
+};
+var readSession = (address, _chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey(address, chainId);
+  const key = buildKey(address);
   const store = storage();
   let raw = null;
   try {
@@ -575,14 +604,19 @@ var readSession = (address, chainId) => {
     }
     return null;
   }
+  const legacy = readLegacySession(store, address);
+  if (legacy) {
+    writeSession(address, _chainId, legacy);
+    return legacy;
+  }
   const cached = memorySessions.get(key);
   if (isFreshSession(cached)) return cached;
   if (cached) memorySessions.delete(key);
   return null;
 };
-var writeSession = (address, chainId, session) => {
+var writeSession = (address, _chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey(address, chainId);
+  const key = buildKey(address);
   memorySessions.set(key, session);
   const store = storage();
   try {
@@ -590,14 +624,15 @@ var writeSession = (address, chainId, session) => {
   } catch {
   }
 };
-var clearSession = (address, chainId) => {
-  const key = buildKey(address, chainId);
+var clearSession = (address, _chainId) => {
+  const key = buildKey(address);
   memorySessions.delete(key);
   const store = storage();
   try {
     store?.removeItem(key);
   } catch {
   }
+  readLegacySession(store, address);
 };
 
 // src/agents/zyfai/autoSelect.ts
@@ -686,11 +721,15 @@ var ZyfaiAgent = class {
   // successful decode is cached forever; failures are NOT cached so a transient
   // RPC error retries on the next fetch.
   withdrawAmountCache = /* @__PURE__ */ new Map();
-  constructor(apiKey, rpcUrls) {
+  constructor(apiKey, rpcUrls, referralSource) {
     this.rpcUrls = rpcUrls ?? DEFAULT_ZYFAI_RPC_URLS;
     this.sdk = new import_sdk.ZyfaiSDK({
       apiKey,
-      rpcUrls: this.rpcUrls
+      rpcUrls: this.rpcUrls,
+      // Forwarded to /auth/login by the SDK's own SIWE handshake, so
+      // attribution survives without the AppKit SIWX config (which carried it
+      // via `createOwneySIWX({ referralSource })` when apps used the modal).
+      referralSource
     });
     this.installAuthCache();
   }
@@ -1687,6 +1726,7 @@ var OwneySDK = class {
   apiKey;
   zyfaiRpcUrls;
   routingApiBaseUrl;
+  referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
   initializingAgentsPromise = null;
@@ -1694,6 +1734,7 @@ var OwneySDK = class {
     this.apiKey = config.apiKey;
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
+    this.referralSource = config.referralSource;
   }
   /**
    * Establish connection state for all subsequent SDK calls.
@@ -1877,7 +1918,7 @@ var OwneySDK = class {
   }
   createAgent(agentId, key) {
     if (agentId === "zyfai") {
-      return new ZyfaiAgent(key, this.zyfaiRpcUrls);
+      return new ZyfaiAgent(key, this.zyfaiRpcUrls, this.referralSource);
     }
     return null;
   }
@@ -2763,11 +2804,39 @@ var storage2 = () => {
     return null;
   }
 };
-var buildKey2 = (address, chainId) => `${KEY_PREFIX2}:${address.toLowerCase()}:${chainId}`;
+var buildKey2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}`;
+var legacyKeyPrefix2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}:`;
 var memorySiwxSessions = /* @__PURE__ */ new Map();
+var readLegacySiwxSession = (store, address) => {
+  if (!store) return null;
+  const prefix = legacyKeyPrefix2(address);
+  const legacyKeys = [];
+  try {
+    for (let i = 0; i < store.length; i++) {
+      const key = store.key(i);
+      if (key?.startsWith(prefix)) legacyKeys.push(key);
+    }
+  } catch {
+    return null;
+  }
+  let adopted = null;
+  for (const key of legacyKeys) {
+    if (!adopted) {
+      try {
+        adopted = JSON.parse(store.getItem(key) ?? "");
+      } catch {
+      }
+    }
+    try {
+      store.removeItem(key);
+    } catch {
+    }
+  }
+  return adopted;
+};
 var readSiwxSession = (address, chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey2(address, chainId);
+  const key = buildKey2(address);
   const store = storage2();
   let raw = null;
   try {
@@ -2787,11 +2856,16 @@ var readSiwxSession = (address, chainId) => {
       return null;
     }
   }
+  const legacy = readLegacySiwxSession(store, address);
+  if (legacy) {
+    writeSiwxSession(address, chainId, legacy);
+    return legacy;
+  }
   return memorySiwxSessions.get(key) ?? null;
 };
-var writeSiwxSession = (address, chainId, session) => {
+var writeSiwxSession = (address, _chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey2(address, chainId);
+  const key = buildKey2(address);
   memorySiwxSessions.set(key, session);
   const store = storage2();
   try {
@@ -2799,14 +2873,15 @@ var writeSiwxSession = (address, chainId, session) => {
   } catch {
   }
 };
-var clearSiwxSession = (address, chainId) => {
-  const key = buildKey2(address, chainId);
+var clearSiwxSession = (address, _chainId) => {
+  const key = buildKey2(address);
   memorySiwxSessions.delete(key);
   const store = storage2();
   try {
     store?.removeItem(key);
   } catch {
   }
+  readLegacySiwxSession(store, address);
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
@@ -2870,9 +2945,12 @@ function buildSIWXConfig(deps) {
     }
     if (!stored) return [];
     const session = {
-      // `stored.data.chainId` is a plain string in the cache (kept AppKit-free);
-      // it always holds a valid CaipNetworkId here, so narrow at the boundary.
-      data: stored.data,
+      // `stored.data` is kept AppKit-free in the cache, so narrow at the
+      // boundary. Echo the REQUESTED chain rather than the one originally
+      // signed: the Zyfai JWT is account-scoped (no chain claim), so one
+      // signature is valid for every chain, and AppKit would otherwise treat
+      // the session as not covering the active network and re-prompt.
+      data: { ...stored.data, chainId },
       message: stored.message,
       signature: stored.signature
     };

package/dist/index.d.cts

@@ -15,6 +15,12 @@ interface OwneySDKConfig {
      * e.g. "http://localhost:3000", when testing sponsor changes.
      */
     routingApiBaseUrl?: string;
+    /**
+     * Optional attribution tag forwarded to Zyfai's /auth/login when the SDK
+     * authenticates (e.g. "delos"). Replaces the equivalent option on
+     * `createOwneySIWX` for apps that don't use the AppKit SIWX modal.
+     */
+    referralSource?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -313,6 +319,7 @@ declare class OwneySDK {
     private apiKey;
     private zyfaiRpcUrls?;
     private routingApiBaseUrl?;
+    private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
     private initializingAgentsPromise;

package/dist/index.d.ts

@@ -15,6 +15,12 @@ interface OwneySDKConfig {
      * e.g. "http://localhost:3000", when testing sponsor changes.
      */
     routingApiBaseUrl?: string;
+    /**
+     * Optional attribution tag forwarded to Zyfai's /auth/login when the SDK
+     * authenticates (e.g. "delos"). Replaces the equivalent option on
+     * `createOwneySIWX` for apps that don't use the AppKit SIWX modal.
+     */
+    referralSource?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -313,6 +319,7 @@ declare class OwneySDK {
     private apiKey;
     private zyfaiRpcUrls?;
     private routingApiBaseUrl?;
+    private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
     private initializingAgentsPromise;

package/dist/index.js

@@ -503,7 +503,8 @@ var storage = () => {
     return null;
   }
 };
-var buildKey = (address, chainId) => `${KEY_PREFIX}:${address.toLowerCase()}:${chainId}`;
+var buildKey = (address) => `${KEY_PREFIX}:${address.toLowerCase()}`;
+var legacyKeyPrefix = (address) => `${KEY_PREFIX}:${address.toLowerCase()}:`;
 var isJwtExpired = (token) => {
   const parts = token.split(".");
   if (parts.length !== 3) return false;
@@ -520,9 +521,37 @@ var isJwtExpired = (token) => {
 };
 var memorySessions = /* @__PURE__ */ new Map();
 var isFreshSession = (session) => !!session && !!session.token && !isJwtExpired(session.token);
-var readSession = (address, chainId) => {
+var readLegacySession = (store, address) => {
+  if (!store) return null;
+  const prefix = legacyKeyPrefix(address);
+  const legacyKeys = [];
+  try {
+    for (let i = 0; i < store.length; i++) {
+      const key = store.key(i);
+      if (key?.startsWith(prefix)) legacyKeys.push(key);
+    }
+  } catch {
+    return null;
+  }
+  let adopted = null;
+  for (const key of legacyKeys) {
+    if (!adopted) {
+      try {
+        const parsed = JSON.parse(store.getItem(key) ?? "");
+        if (isFreshSession(parsed)) adopted = parsed;
+      } catch {
+      }
+    }
+    try {
+      store.removeItem(key);
+    } catch {
+    }
+  }
+  return adopted;
+};
+var readSession = (address, _chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey(address, chainId);
+  const key = buildKey(address);
   const store = storage();
   let raw = null;
   try {
@@ -543,14 +572,19 @@ var readSession = (address, chainId) => {
     }
     return null;
   }
+  const legacy = readLegacySession(store, address);
+  if (legacy) {
+    writeSession(address, _chainId, legacy);
+    return legacy;
+  }
   const cached = memorySessions.get(key);
   if (isFreshSession(cached)) return cached;
   if (cached) memorySessions.delete(key);
   return null;
 };
-var writeSession = (address, chainId, session) => {
+var writeSession = (address, _chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey(address, chainId);
+  const key = buildKey(address);
   memorySessions.set(key, session);
   const store = storage();
   try {
@@ -558,14 +592,15 @@ var writeSession = (address, chainId, session) => {
   } catch {
   }
 };
-var clearSession = (address, chainId) => {
-  const key = buildKey(address, chainId);
+var clearSession = (address, _chainId) => {
+  const key = buildKey(address);
   memorySessions.delete(key);
   const store = storage();
   try {
     store?.removeItem(key);
   } catch {
   }
+  readLegacySession(store, address);
 };
 
 // src/agents/zyfai/autoSelect.ts
@@ -654,11 +689,15 @@ var ZyfaiAgent = class {
   // successful decode is cached forever; failures are NOT cached so a transient
   // RPC error retries on the next fetch.
   withdrawAmountCache = /* @__PURE__ */ new Map();
-  constructor(apiKey, rpcUrls) {
+  constructor(apiKey, rpcUrls, referralSource) {
     this.rpcUrls = rpcUrls ?? DEFAULT_ZYFAI_RPC_URLS;
     this.sdk = new ZyfaiSDK({
       apiKey,
-      rpcUrls: this.rpcUrls
+      rpcUrls: this.rpcUrls,
+      // Forwarded to /auth/login by the SDK's own SIWE handshake, so
+      // attribution survives without the AppKit SIWX config (which carried it
+      // via `createOwneySIWX({ referralSource })` when apps used the modal).
+      referralSource
     });
     this.installAuthCache();
   }
@@ -1659,6 +1698,7 @@ var OwneySDK = class {
   apiKey;
   zyfaiRpcUrls;
   routingApiBaseUrl;
+  referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
   initializingAgentsPromise = null;
@@ -1666,6 +1706,7 @@ var OwneySDK = class {
     this.apiKey = config.apiKey;
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
+    this.referralSource = config.referralSource;
   }
   /**
    * Establish connection state for all subsequent SDK calls.
@@ -1849,7 +1890,7 @@ var OwneySDK = class {
   }
   createAgent(agentId, key) {
     if (agentId === "zyfai") {
-      return new ZyfaiAgent(key, this.zyfaiRpcUrls);
+      return new ZyfaiAgent(key, this.zyfaiRpcUrls, this.referralSource);
     }
     return null;
   }
@@ -2735,11 +2776,39 @@ var storage2 = () => {
     return null;
   }
 };
-var buildKey2 = (address, chainId) => `${KEY_PREFIX2}:${address.toLowerCase()}:${chainId}`;
+var buildKey2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}`;
+var legacyKeyPrefix2 = (address) => `${KEY_PREFIX2}:${address.toLowerCase()}:`;
 var memorySiwxSessions = /* @__PURE__ */ new Map();
+var readLegacySiwxSession = (store, address) => {
+  if (!store) return null;
+  const prefix = legacyKeyPrefix2(address);
+  const legacyKeys = [];
+  try {
+    for (let i = 0; i < store.length; i++) {
+      const key = store.key(i);
+      if (key?.startsWith(prefix)) legacyKeys.push(key);
+    }
+  } catch {
+    return null;
+  }
+  let adopted = null;
+  for (const key of legacyKeys) {
+    if (!adopted) {
+      try {
+        adopted = JSON.parse(store.getItem(key) ?? "");
+      } catch {
+      }
+    }
+    try {
+      store.removeItem(key);
+    } catch {
+    }
+  }
+  return adopted;
+};
 var readSiwxSession = (address, chainId) => {
   if (typeof window === "undefined") return null;
-  const key = buildKey2(address, chainId);
+  const key = buildKey2(address);
   const store = storage2();
   let raw = null;
   try {
@@ -2759,11 +2828,16 @@ var readSiwxSession = (address, chainId) => {
       return null;
     }
   }
+  const legacy = readLegacySiwxSession(store, address);
+  if (legacy) {
+    writeSiwxSession(address, chainId, legacy);
+    return legacy;
+  }
   return memorySiwxSessions.get(key) ?? null;
 };
-var writeSiwxSession = (address, chainId, session) => {
+var writeSiwxSession = (address, _chainId, session) => {
   if (typeof window === "undefined") return;
-  const key = buildKey2(address, chainId);
+  const key = buildKey2(address);
   memorySiwxSessions.set(key, session);
   const store = storage2();
   try {
@@ -2771,14 +2845,15 @@ var writeSiwxSession = (address, chainId, session) => {
   } catch {
   }
 };
-var clearSiwxSession = (address, chainId) => {
-  const key = buildKey2(address, chainId);
+var clearSiwxSession = (address, _chainId) => {
+  const key = buildKey2(address);
   memorySiwxSessions.delete(key);
   const store = storage2();
   try {
     store?.removeItem(key);
   } catch {
   }
+  readLegacySiwxSession(store, address);
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
@@ -2842,9 +2917,12 @@ function buildSIWXConfig(deps) {
     }
     if (!stored) return [];
     const session = {
-      // `stored.data.chainId` is a plain string in the cache (kept AppKit-free);
-      // it always holds a valid CaipNetworkId here, so narrow at the boundary.
-      data: stored.data,
+      // `stored.data` is kept AppKit-free in the cache, so narrow at the
+      // boundary. Echo the REQUESTED chain rather than the one originally
+      // signed: the Zyfai JWT is account-scoped (no chain claim), so one
+      // signature is valid for every chain, and AppKit would otherwise treat
+      // the session as not covering the active network and re-prompt.
+      data: { ...stored.data, chainId },
       message: stored.message,
       signature: stored.signature
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.6.7",
+  "version": "0.6.8-beta.1",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",