@owney/sdk 0.6.8 → 0.6.9-beta.1

package/dist/index.cjs

@@ -660,6 +660,39 @@ function buildProtocolMergeUpdate(available, current, asset) {
   };
 }
 
+// src/agents/zyfai/splitting.ts
+var MAX_MIN_SPLITS = 4;
+var MIN_FORCE_SPLITS = 2;
+var AUTOMATIC_MIN_SPLITS = 1;
+function toZyfaiSplitting(policy) {
+  switch (policy.splittingMode) {
+    case "none":
+      return { splitting: false };
+    case "automatic":
+      return { splitting: true, minSplits: AUTOMATIC_MIN_SPLITS };
+    case "force":
+      return {
+        splitting: true,
+        minSplits: clampForceSplits(policy.minSplits)
+      };
+  }
+}
+function clampForceSplits(minSplits) {
+  if (typeof minSplits !== "number" || !Number.isFinite(minSplits)) {
+    return MIN_FORCE_SPLITS;
+  }
+  const rounded = Math.round(minSplits);
+  if (rounded < MIN_FORCE_SPLITS) return MIN_FORCE_SPLITS;
+  if (rounded > MAX_MIN_SPLITS) return MAX_MIN_SPLITS;
+  return rounded;
+}
+function splittingNeedsUpdate(current, desired) {
+  if (!current) return true;
+  if (current.splitting !== desired.splitting) return true;
+  if (desired.minSplits === void 0) return false;
+  return current.minSplits !== desired.minSplits;
+}
+
 // src/agents/zyfai/zyfai.agent.ts
 var DEFAULT_ZYFAI_RPC_URLS = {
   8453: "https://base-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
@@ -672,6 +705,7 @@ var WETH_ADDRESS_BY_CHAIN = {
   1: "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2"
 };
 var VIEM_CHAIN = { 8453: import_chains.base, 42161: import_chains.arbitrum, 1: import_chains.mainnet };
+var SPLITTING_ASSETS = ["USDC", "WETH"];
 function isAlreadyActiveSessionKeyError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return /already has an active session key/i.test(message);
@@ -1036,6 +1070,35 @@ var ZyfaiAgent = class {
       throw error;
     }
   }
+  /**
+   * Apply the org's capital splitting policy to this user's Zyfai profile.
+   *
+   * Per ASSET, not per chain: Zyfai stores splitting under
+   * `assetTypeSettings[asset]`, so one call would only configure USDC and leave a
+   * WETH holder's real setting untouched.
+   *
+   * Non-fatal throughout. This is a side effect of connecting, so a Zyfai hiccup
+   * must leave the user connected with their profile unchanged, never fail
+   * activation.
+   */
+  async applyOrgPolicy(_state, _chainId, policy) {
+    await Promise.all(
+      SPLITTING_ASSETS.map((asset) => this.applySplitting(asset, policy))
+    );
+  }
+  async applySplitting(asset, policy) {
+    try {
+      const desired = toZyfaiSplitting(policy);
+      const current = await this.sdk.getUserDetails(asset);
+      if (!splittingNeedsUpdate(current, desired)) return;
+      await this.sdk.updateUserProfile({ asset, ...desired });
+    } catch (error) {
+      console.warn(
+        `[zyfai] applyOrgPolicy(${asset}) failed (non-fatal):`,
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   async deposit(state, chainId, amount, asset, depositCallback) {
     try {
       await this.connectFull(state, chainId);
@@ -1189,6 +1252,34 @@ var ZyfaiAgent = class {
 
 // src/lib/routing-api.ts
 var ROUTING_API_BASE_URL = "https://owney-routing-api-243946518160.europe-west4.run.app";
+async function fetchOrgAgentConfig(apiKey) {
+  const url = `${ROUTING_API_BASE_URL}/api/v1/agent/org-config`;
+  try {
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        "x-owney-api-key": `${apiKey}`
+      }
+    });
+    if (!res.ok) {
+      if (res.status !== 404) {
+        console.warn(
+          `[owney-sdk] Could not read org agent config (${res.status}); leaving user profiles unchanged.`
+        );
+      }
+      return null;
+    }
+    const json = await res.json();
+    return json.success ? json.data ?? null : null;
+  } catch (error) {
+    console.warn(
+      "[owney-sdk] Could not read org agent config (non-fatal):",
+      error instanceof Error ? error.message : String(error)
+    );
+    return null;
+  }
+}
 async function fetchAgentKeys(apiKey) {
   const url = `${ROUTING_API_BASE_URL}/api/v1/agent/keys`;
   const res = await fetch(url, {
@@ -1802,6 +1893,12 @@ var OwneySDK = class {
   disabledAgents = /* @__PURE__ */ new Set();
   state = null;
   apiKey;
+  // The org's agent policy, fetched once per client. Applied to each agent on
+  // activation (ROUT-229). `undefined` means "not fetched yet", `null` means
+  // "fetched, and the partner has no policy" — which is a real answer meaning
+  // leave every user's agent profile alone.
+  orgAgentConfig;
+  orgAgentConfigPromise = null;
   zyfaiRpcUrls;
   routingApiBaseUrl;
   referralSource;
@@ -1971,6 +2068,43 @@ var OwneySDK = class {
     }
     return active;
   }
+  /**
+   * Read the org's agent policy once and reuse it. fetchOrgAgentConfig never
+   * throws — it degrades to null — so this cannot break activation.
+   */
+  async getOrgAgentConfig() {
+    if (this.orgAgentConfig !== void 0) return this.orgAgentConfig;
+    if (!this.orgAgentConfigPromise) {
+      this.orgAgentConfigPromise = fetchOrgAgentConfig(this.apiKey).then(
+        (config) => {
+          this.orgAgentConfig = config;
+          return config;
+        }
+      );
+    }
+    return this.orgAgentConfigPromise;
+  }
+  /**
+   * Apply the org policy to one agent, after it has activated.
+   *
+   * Sequenced after activation rather than alongside it because applying the
+   * policy needs the authenticated session activation establishes. Every failure
+   * mode is swallowed: a partner's splitting preference is not worth failing a
+   * user's connect over.
+   */
+  async applyOrgPolicyTo(agent, state, chainId) {
+    if (!agent.applyOrgPolicy) return;
+    try {
+      const policy = await this.getOrgAgentConfig();
+      if (!policy) return;
+      await agent.applyOrgPolicy(state, chainId, policy);
+    } catch (error) {
+      console.warn(
+        `[owney-sdk] applyOrgPolicy(${agent.id}) failed (non-fatal):`,
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   async ensureAgentsInitialized() {
     if (this.agents.size > 0) return;
     if (!this.initializingAgentsPromise) {
@@ -2055,6 +2189,7 @@ var OwneySDK = class {
       Promise.all(
         agents.map(async (agent) => {
           await agent.activateAgent(state, chainId);
+          await this.applyOrgPolicyTo(agent, state, chainId);
         })
       ).catch((error) => {
         console.error("activateAgent background init failed:", error);
@@ -2082,6 +2217,7 @@ var OwneySDK = class {
     Promise.all(
       enabledCompatible.map(async (agent) => {
         await agent.activateAgent(state, chainId);
+        await this.applyOrgPolicyTo(agent, state, chainId);
       })
     ).catch((error) => {
       console.error("activateAgent background init failed:", error);

package/dist/index.d.cts

@@ -101,6 +101,16 @@ type DepositOptions = {
     onApproved?: () => void;
 };
 
+/**
+ * The organization's agent execution policy, or null when the partner has never
+ * configured one — in which case the agents leave the user's profile alone.
+ * Currently capital splitting only (ROUT-229).
+ */
+type OrgAgentConfig = {
+    splittingMode: "none" | "automatic" | "force";
+    minSplits: number | null;
+};
+
 interface OwneyDepositResult {
     txHash: string;
     smartWallet: string;
@@ -275,6 +285,19 @@ interface IAgent {
     readonly supportedAssets: readonly AgentSupportedAssets[];
     disconnect(): Promise<void>;
     activateAgent(state: ConnectionState, chainId: number): Promise<void>;
+    /**
+     * Apply the organization's agent policy to this user's account.
+     *
+     * Optional: an agent that has no equivalent knob simply omits it, which is why
+     * this is not part of `activateAgent`'s signature. Declared on the interface
+     * rather than only on ZyfaiAgent so the contract stays agent-neutral — the
+     * ticket asks for a design that can also cover Surf, which has no adapter yet.
+     *
+     * Implementations must be **non-fatal**: this runs during activation as a side
+     * effect, so a failure has to leave the user connected and their profile
+     * unchanged rather than break the connect.
+     */
+    applyOrgPolicy?(state: ConnectionState, chainId: number, policy: OrgAgentConfig): Promise<void>;
     deposit(state: ConnectionState, chainId: number, amount: string, asset: OwneySupportedTokens, depositCallback?: DepositCallback): Promise<OwneyDepositResult>;
     withdraw(state: ConnectionState, chainId: number, token: OwneySupportedTokens, amount?: string): Promise<AgentWithdrawResult>;
     getBalances(state: ConnectionState, chainId: number): Promise<AgentBalance>;
@@ -318,6 +341,8 @@ declare class OwneySDK {
     private disabledAgents;
     private state;
     private apiKey;
+    private orgAgentConfig;
+    private orgAgentConfigPromise;
     private zyfaiRpcUrls?;
     private routingApiBaseUrl?;
     private referralSource?;
@@ -366,6 +391,20 @@ declare class OwneySDK {
     private getDefaultWethSponsoredCallback;
     private getAgent;
     private getActiveAgents;
+    /**
+     * Read the org's agent policy once and reuse it. fetchOrgAgentConfig never
+     * throws — it degrades to null — so this cannot break activation.
+     */
+    private getOrgAgentConfig;
+    /**
+     * Apply the org policy to one agent, after it has activated.
+     *
+     * Sequenced after activation rather than alongside it because applying the
+     * policy needs the authenticated session activation establishes. Every failure
+     * mode is swallowed: a partner's splitting preference is not worth failing a
+     * user's connect over.
+     */
+    private applyOrgPolicyTo;
     private ensureAgentsInitialized;
     private createAgent;
     /**

package/dist/index.d.ts

@@ -101,6 +101,16 @@ type DepositOptions = {
     onApproved?: () => void;
 };
 
+/**
+ * The organization's agent execution policy, or null when the partner has never
+ * configured one — in which case the agents leave the user's profile alone.
+ * Currently capital splitting only (ROUT-229).
+ */
+type OrgAgentConfig = {
+    splittingMode: "none" | "automatic" | "force";
+    minSplits: number | null;
+};
+
 interface OwneyDepositResult {
     txHash: string;
     smartWallet: string;
@@ -275,6 +285,19 @@ interface IAgent {
     readonly supportedAssets: readonly AgentSupportedAssets[];
     disconnect(): Promise<void>;
     activateAgent(state: ConnectionState, chainId: number): Promise<void>;
+    /**
+     * Apply the organization's agent policy to this user's account.
+     *
+     * Optional: an agent that has no equivalent knob simply omits it, which is why
+     * this is not part of `activateAgent`'s signature. Declared on the interface
+     * rather than only on ZyfaiAgent so the contract stays agent-neutral — the
+     * ticket asks for a design that can also cover Surf, which has no adapter yet.
+     *
+     * Implementations must be **non-fatal**: this runs during activation as a side
+     * effect, so a failure has to leave the user connected and their profile
+     * unchanged rather than break the connect.
+     */
+    applyOrgPolicy?(state: ConnectionState, chainId: number, policy: OrgAgentConfig): Promise<void>;
     deposit(state: ConnectionState, chainId: number, amount: string, asset: OwneySupportedTokens, depositCallback?: DepositCallback): Promise<OwneyDepositResult>;
     withdraw(state: ConnectionState, chainId: number, token: OwneySupportedTokens, amount?: string): Promise<AgentWithdrawResult>;
     getBalances(state: ConnectionState, chainId: number): Promise<AgentBalance>;
@@ -318,6 +341,8 @@ declare class OwneySDK {
     private disabledAgents;
     private state;
     private apiKey;
+    private orgAgentConfig;
+    private orgAgentConfigPromise;
     private zyfaiRpcUrls?;
     private routingApiBaseUrl?;
     private referralSource?;
@@ -366,6 +391,20 @@ declare class OwneySDK {
     private getDefaultWethSponsoredCallback;
     private getAgent;
     private getActiveAgents;
+    /**
+     * Read the org's agent policy once and reuse it. fetchOrgAgentConfig never
+     * throws — it degrades to null — so this cannot break activation.
+     */
+    private getOrgAgentConfig;
+    /**
+     * Apply the org policy to one agent, after it has activated.
+     *
+     * Sequenced after activation rather than alongside it because applying the
+     * policy needs the authenticated session activation establishes. Every failure
+     * mode is swallowed: a partner's splitting preference is not worth failing a
+     * user's connect over.
+     */
+    private applyOrgPolicyTo;
     private ensureAgentsInitialized;
     private createAgent;
     /**

package/dist/index.js

@@ -628,6 +628,39 @@ function buildProtocolMergeUpdate(available, current, asset) {
   };
 }
 
+// src/agents/zyfai/splitting.ts
+var MAX_MIN_SPLITS = 4;
+var MIN_FORCE_SPLITS = 2;
+var AUTOMATIC_MIN_SPLITS = 1;
+function toZyfaiSplitting(policy) {
+  switch (policy.splittingMode) {
+    case "none":
+      return { splitting: false };
+    case "automatic":
+      return { splitting: true, minSplits: AUTOMATIC_MIN_SPLITS };
+    case "force":
+      return {
+        splitting: true,
+        minSplits: clampForceSplits(policy.minSplits)
+      };
+  }
+}
+function clampForceSplits(minSplits) {
+  if (typeof minSplits !== "number" || !Number.isFinite(minSplits)) {
+    return MIN_FORCE_SPLITS;
+  }
+  const rounded = Math.round(minSplits);
+  if (rounded < MIN_FORCE_SPLITS) return MIN_FORCE_SPLITS;
+  if (rounded > MAX_MIN_SPLITS) return MAX_MIN_SPLITS;
+  return rounded;
+}
+function splittingNeedsUpdate(current, desired) {
+  if (!current) return true;
+  if (current.splitting !== desired.splitting) return true;
+  if (desired.minSplits === void 0) return false;
+  return current.minSplits !== desired.minSplits;
+}
+
 // src/agents/zyfai/zyfai.agent.ts
 var DEFAULT_ZYFAI_RPC_URLS = {
   8453: "https://base-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
@@ -640,6 +673,7 @@ var WETH_ADDRESS_BY_CHAIN = {
   1: "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2"
 };
 var VIEM_CHAIN = { 8453: base, 42161: arbitrum, 1: mainnet };
+var SPLITTING_ASSETS = ["USDC", "WETH"];
 function isAlreadyActiveSessionKeyError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return /already has an active session key/i.test(message);
@@ -1004,6 +1038,35 @@ var ZyfaiAgent = class {
       throw error;
     }
   }
+  /**
+   * Apply the org's capital splitting policy to this user's Zyfai profile.
+   *
+   * Per ASSET, not per chain: Zyfai stores splitting under
+   * `assetTypeSettings[asset]`, so one call would only configure USDC and leave a
+   * WETH holder's real setting untouched.
+   *
+   * Non-fatal throughout. This is a side effect of connecting, so a Zyfai hiccup
+   * must leave the user connected with their profile unchanged, never fail
+   * activation.
+   */
+  async applyOrgPolicy(_state, _chainId, policy) {
+    await Promise.all(
+      SPLITTING_ASSETS.map((asset) => this.applySplitting(asset, policy))
+    );
+  }
+  async applySplitting(asset, policy) {
+    try {
+      const desired = toZyfaiSplitting(policy);
+      const current = await this.sdk.getUserDetails(asset);
+      if (!splittingNeedsUpdate(current, desired)) return;
+      await this.sdk.updateUserProfile({ asset, ...desired });
+    } catch (error) {
+      console.warn(
+        `[zyfai] applyOrgPolicy(${asset}) failed (non-fatal):`,
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   async deposit(state, chainId, amount, asset, depositCallback) {
     try {
       await this.connectFull(state, chainId);
@@ -1157,6 +1220,34 @@ var ZyfaiAgent = class {
 
 // src/lib/routing-api.ts
 var ROUTING_API_BASE_URL = "https://owney-routing-api-243946518160.europe-west4.run.app";
+async function fetchOrgAgentConfig(apiKey) {
+  const url = `${ROUTING_API_BASE_URL}/api/v1/agent/org-config`;
+  try {
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        "x-owney-api-key": `${apiKey}`
+      }
+    });
+    if (!res.ok) {
+      if (res.status !== 404) {
+        console.warn(
+          `[owney-sdk] Could not read org agent config (${res.status}); leaving user profiles unchanged.`
+        );
+      }
+      return null;
+    }
+    const json = await res.json();
+    return json.success ? json.data ?? null : null;
+  } catch (error) {
+    console.warn(
+      "[owney-sdk] Could not read org agent config (non-fatal):",
+      error instanceof Error ? error.message : String(error)
+    );
+    return null;
+  }
+}
 async function fetchAgentKeys(apiKey) {
   const url = `${ROUTING_API_BASE_URL}/api/v1/agent/keys`;
   const res = await fetch(url, {
@@ -1774,6 +1865,12 @@ var OwneySDK = class {
   disabledAgents = /* @__PURE__ */ new Set();
   state = null;
   apiKey;
+  // The org's agent policy, fetched once per client. Applied to each agent on
+  // activation (ROUT-229). `undefined` means "not fetched yet", `null` means
+  // "fetched, and the partner has no policy" — which is a real answer meaning
+  // leave every user's agent profile alone.
+  orgAgentConfig;
+  orgAgentConfigPromise = null;
   zyfaiRpcUrls;
   routingApiBaseUrl;
   referralSource;
@@ -1943,6 +2040,43 @@ var OwneySDK = class {
     }
     return active;
   }
+  /**
+   * Read the org's agent policy once and reuse it. fetchOrgAgentConfig never
+   * throws — it degrades to null — so this cannot break activation.
+   */
+  async getOrgAgentConfig() {
+    if (this.orgAgentConfig !== void 0) return this.orgAgentConfig;
+    if (!this.orgAgentConfigPromise) {
+      this.orgAgentConfigPromise = fetchOrgAgentConfig(this.apiKey).then(
+        (config) => {
+          this.orgAgentConfig = config;
+          return config;
+        }
+      );
+    }
+    return this.orgAgentConfigPromise;
+  }
+  /**
+   * Apply the org policy to one agent, after it has activated.
+   *
+   * Sequenced after activation rather than alongside it because applying the
+   * policy needs the authenticated session activation establishes. Every failure
+   * mode is swallowed: a partner's splitting preference is not worth failing a
+   * user's connect over.
+   */
+  async applyOrgPolicyTo(agent, state, chainId) {
+    if (!agent.applyOrgPolicy) return;
+    try {
+      const policy = await this.getOrgAgentConfig();
+      if (!policy) return;
+      await agent.applyOrgPolicy(state, chainId, policy);
+    } catch (error) {
+      console.warn(
+        `[owney-sdk] applyOrgPolicy(${agent.id}) failed (non-fatal):`,
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   async ensureAgentsInitialized() {
     if (this.agents.size > 0) return;
     if (!this.initializingAgentsPromise) {
@@ -2027,6 +2161,7 @@ var OwneySDK = class {
       Promise.all(
         agents.map(async (agent) => {
           await agent.activateAgent(state, chainId);
+          await this.applyOrgPolicyTo(agent, state, chainId);
         })
       ).catch((error) => {
         console.error("activateAgent background init failed:", error);
@@ -2054,6 +2189,7 @@ var OwneySDK = class {
     Promise.all(
       enabledCompatible.map(async (agent) => {
         await agent.activateAgent(state, chainId);
+        await this.applyOrgPolicyTo(agent, state, chainId);
       })
     ).catch((error) => {
       console.error("activateAgent background init failed:", error);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.6.8",
+  "version": "0.6.9-beta.1",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",