@owney/sdk 0.7.21-beta.5 → 0.7.21-beta.6

package/README.md

@@ -19,7 +19,7 @@ const sdk = new OwneySDK({ apiKey: "your-owney-api-key" });
 // Connect with an EIP-1193 wallet provider
 await sdk.connect(provider);
 
-// Activate agents on Base (fetches agent keys on first call)
+// Activate agents on Base (creates and initializes provider wallets as needed)
 await sdk.activateAgent(8453);
 
 // Get balances across all agents
@@ -32,10 +32,10 @@ const balances = await sdk.getBalances();
 
 Create a new SDK instance.
 
-| Param                 | Type                                           | Description                                                                                 |
-| --------------------- | ---------------------------------------------- | ------------------------------------------------------------------------------------------- |
-| `config.apiKey`       | `string`                                       | Your Owney API key, used to authenticate with the routing API and fetch agent-specific keys |
-| `config.zyfaiRpcUrls` | `{ 8453?: string; 42161?: string }` (optional) | Per-chain RPC URL overrides used by Zyfai SDK network calls                                 |
+| Param                                   | Type                                                        | Description                                                                                       |
+| --------------------------------------- | ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------- |
+| `config.apiKey`                         | `string`                                                    | Your Owney API key, used to authenticate with the routing API and fetch agent-specific keys       |
+| `config.zyfaiRpcUrls`                   | `{ 8453?: string; 42161?: string }` (optional)              | Per-chain RPC URL overrides used by Zyfai SDK network calls                                       |
 
 ```typescript
 import { OwneySDK } from "@owney/sdk";
@@ -108,7 +108,7 @@ if (chainId) {
 
 ### `activateAgent(chainId, agentId?)`
 
-Activate the user's smart wallet for the specified agents, or all chain-compatible agents if omitted. Smart wallets are pre-deployed by the underlying providers, so activation only performs authentication and profile syncing — no deploy or session-key signatures. Saves the chainId for use by all subsequent SDK calls.
+Activate the user's smart wallet for the specified agents, or all chain-compatible agents if omitted. Activation performs each provider's required setup before deposits are allowed. For Yieldseeker, this creates the user and agent when needed and calls the agent `/deploy` endpoint before any funding transfer. Saves the chainId for use by all subsequent SDK calls.
 
 | Param     | Type                   | Description                                                                   |
 | --------- | ---------------------- | ----------------------------------------------------------------------------- |
@@ -125,7 +125,7 @@ await sdk.activateAgent(42161);
 
 ### `deposit(options)`
 
-Deposit funds into a specific agent, or split equally across all agents if `agentId` is omitted. Validates that the asset is supported by the target agent(s) on the active chain, and per-agent minimum deposit amounts (defined per chain+asset on `agent.supportedAssets[].assets[].minDepositAmount`) are taken into account. When splitting across agents, `depositCallback` is invoked once per final valid agent with that agent's split amount and smart wallet address — expect multiple wallet prompts.
+Deposit funds into a specific agent, or split equally across all agents if `agentId` is omitted. Validates that the asset is supported by the target agent(s) on the active chain, and per-agent minimum deposit amounts (defined per chain+asset on `agent.supportedAssets[].assets[].minDepositAmount`) are taken into account. Custom `depositCallback` implementations run once per final valid agent. The default Permit2 flow signs one recipient-bound batch authorization for every agent share.
 
 | Param                     | Type                 | Description                                                     |
 | ------------------------- | -------------------- | --------------------------------------------------------------- |

package/dist/index.cjs

@@ -2235,7 +2235,12 @@ async function postSponsorBatchTransfer(input) {
 // src/lib/permit2.ts
 var import_viem3 = require("viem");
 var PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
-var MAX_UINT256 = 2n ** 256n - 1n;
+function permit2ApprovalAmount(requiredAmount) {
+  if (requiredAmount <= 0n) {
+    throw new Error("Permit2 approval requires a positive deposit amount");
+  }
+  return requiredAmount;
+}
 var ERC20_ALLOWANCE_ABI = [
   {
     type: "function",
@@ -2985,7 +2990,7 @@ function depositDestination(context, movement) {
   if (receipt && minted) return { protocol: "Vault", pool: receipt.name || receipt.symbol, tokenSymbol: context.asset };
   return void 0;
 }
-function movementEntry(movement, wallet, agent, asset, ownerAddress, destination) {
+function movementEntry(movement, wallet, agent, asset, ownerAddress, vaultAddresses, destination) {
   const from = movement.fromAddress.toLowerCase();
   const to = movement.toAddress.toLowerCase();
   const owner = ownerAddress.toLowerCase();
@@ -2995,7 +3000,7 @@ function movementEntry(movement, wallet, agent, asset, ownerAddress, destination
     return void 0;
   }
   let action;
-  if (from === owner && to === agentWallet) {
+  if (to === agentWallet && !vaultAddresses.has(from)) {
     action = "Top up";
   } else if (from === agentWallet && to === owner) {
     action = "Withdraw";
@@ -3045,6 +3050,7 @@ function mapYieldseekerHistory(contexts, options) {
           context.agent,
           context.asset,
           options.ownerAddress,
+          options.vaultAddresses,
           depositDestination(context, movement)
         )
       ),
@@ -3125,6 +3131,7 @@ var OWNEY_AGENT_NAME = "owney";
 var YIELDSEEKER_USERNAME_PREFIX = "owney_";
 var YIELDSEEKER_USERNAME_RANDOM_LENGTH = 14;
 var YIELDSEEKER_USERNAME_CREATE_ATTEMPTS = 3;
+var YIELDSEEKER_YIELD_OPTIONS_CACHE_MS = 6e4;
 function generateYieldseekerUsername() {
   const suffix = globalThis.crypto.randomUUID().replaceAll("-", "").slice(0, YIELDSEEKER_USERNAME_RANDOM_LENGTH).toLowerCase();
   return `${YIELDSEEKER_USERNAME_PREFIX}${suffix}`;
@@ -3186,6 +3193,8 @@ var YieldseekerAgent = class {
   agentContexts = /* @__PURE__ */ new Map();
   users = /* @__PURE__ */ new Map();
   pendingAgents = /* @__PURE__ */ new Map();
+  yieldOptions = /* @__PURE__ */ new Map();
+  pendingYieldOptions = /* @__PURE__ */ new Map();
   constructor(owneyApiKey, options = {}) {
     this.api = new YieldseekerApiClient(
       owneyApiKey,
@@ -3252,7 +3261,6 @@ var YieldseekerAgent = class {
           chainId
         });
       }
-      await this.deployAfterFunding(state, chainId, context);
     } finally {
       await this.refreshSnapshotAfterMovement(
         state,
@@ -3404,9 +3412,20 @@ var YieldseekerAgent = class {
       historic: true,
       actions: true
     });
+    const catalog = await Promise.all(
+      [...new Set(contexts.map((context) => context.asset))].map(
+        (contextAsset) => this.loadYieldOptions(contextAsset)
+      )
+    );
+    const vaultAddresses = new Set(
+      catalog.flat().filter(
+        (yieldOption) => yieldOption.chainId === chainId && (0, import_viem6.isAddress)(yieldOption.address)
+      ).map((yieldOption) => yieldOption.address.toLowerCase())
+    );
     return mapYieldseekerHistory(contexts, {
       limit: options?.limit ?? 10,
       ownerAddress: state.walletAddress,
+      vaultAddresses,
       ...options?.fromDate ? { fromDate: options.fromDate } : {},
       ...options?.toDate ? { toDate: options.toDate } : {}
     });
@@ -3425,18 +3444,32 @@ var YieldseekerAgent = class {
     const assets = requested ? [requested] : ["USDC", "WETH"];
     const values = await Promise.all(
       assets.map(async (asset) => {
-        const metadata = YIELDSEEKER_ASSET_METADATA[asset];
-        const response = await this.api.request(
-          `/chains/8453/assets/${metadata.address}/yield-options`
-        );
-        if (!Array.isArray(response?.yieldOptions)) {
-          throw this.invalidResponse("yield options");
-        }
-        return { asset, yieldOptions: response.yieldOptions };
+        return { asset, yieldOptions: await this.loadYieldOptions(asset) };
       })
     );
     return mapYieldseekerAgentApy(values, days);
   }
+  async loadYieldOptions(asset) {
+    const cached = this.yieldOptions.get(asset);
+    if (cached && cached.expiresAt > Date.now()) return cached.value;
+    const pending = this.pendingYieldOptions.get(asset);
+    if (pending) return pending;
+    const metadata = YIELDSEEKER_ASSET_METADATA[asset];
+    const request = this.api.request(
+      `/chains/8453/assets/${metadata.address}/yield-options`
+    ).then((response) => {
+      if (!Array.isArray(response?.yieldOptions)) {
+        throw this.invalidResponse("yield options");
+      }
+      this.yieldOptions.set(asset, {
+        expiresAt: Date.now() + YIELDSEEKER_YIELD_OPTIONS_CACHE_MS,
+        value: response.yieldOptions
+      });
+      return response.yieldOptions;
+    }).finally(() => this.pendingYieldOptions.delete(asset));
+    this.pendingYieldOptions.set(asset, request);
+    return request;
+  }
   userKey(state, chainId) {
     return `${state.walletAddress.toLowerCase()}:${chainId}`;
   }
@@ -3515,8 +3548,9 @@ var YieldseekerAgent = class {
     const pending = this.pendingAgents.get(key2);
     if (pending) return pending;
     const request = this.resolveAgent(state, chainId, asset, true).then(
-      (context) => {
+      async (context) => {
         if (!context) throw this.invalidResponse("agent creation");
+        await this.deployAgent(state, chainId, context);
         this.agentContexts.set(key2, context);
         return context;
       }
@@ -3661,24 +3695,21 @@ var YieldseekerAgent = class {
       ...actions?.actions ? { actions: actions.actions } : {}
     };
   }
-  async deployAfterFunding(state, chainId, context) {
+  async deployAgent(state, chainId, context) {
     if (context.wallet.initializedDate != null) return;
-    try {
-      const deployed = await this.walletRequest(
-        state,
-        chainId,
-        this.agentPath(context, "deploy"),
-        { method: "POST", body: {} }
-      );
-      if (deployed?.agentWallet) {
-        context.wallet = deployed.agentWallet;
-      }
-    } catch (error) {
-      console.warn(
-        "[owney-sdk] Yieldseeker deposit is funded but not deployable yet:",
-        error
-      );
+    const walletAddress = context.wallet.walletAddress.toLowerCase();
+    const deployed = await this.walletRequest(
+      state,
+      chainId,
+      this.agentPath(context, "deploy"),
+      { method: "POST", body: {} }
+    );
+    if (!deployed?.agentWallet || !(0, import_viem6.isAddress)(deployed.agentWallet.walletAddress) || deployed.agentWallet.walletAddress.toLowerCase() !== walletAddress) {
+      throw this.invalidResponse("agent deployment", {
+        reason: "Deploy did not return the expected Agent Wallet."
+      });
     }
+    context.wallet = deployed.agentWallet;
   }
   async refreshSnapshotAfterMovement(state, chainId, context, movement) {
     try {
@@ -5246,7 +5277,14 @@ var OwneySDK = class {
           } catch (error) {
             if (!(error instanceof OwneyError) || error.code !== "PERMIT2_APPROVAL_REQUIRED")
               throw error;
-            await this.approvePermit2(asset);
+            const requiredAmount = transfers.reduce(
+              (sum, transfer) => sum + BigInt(transfer.amount),
+              0n
+            );
+            await this.approvePermit2(
+              asset,
+              requiredAmount
+            );
             return batchTransfer(cid, transfers);
           }
         }
@@ -5333,7 +5371,10 @@ var OwneySDK = class {
           console.warn(
             "[owney-sdk] First token deposit: sending one-time Permit2 approval..."
           );
-          await this.approvePermit2(asset);
+          await this.approvePermit2(
+            asset,
+            BigInt(amount)
+          );
           continue;
         }
         if (!shouldFallbackToUserPaid(error, asset, appCallback)) throw error;
@@ -5986,14 +6027,15 @@ var OwneySDK = class {
     return pending;
   }
   /**
-   * One-time, user-paid approval of Permit2 on the selected token for
-   * the active chain. Required once per wallet, token and chain before sponsored
-   * deposits; afterwards deposit() is signature-only. Resolves only after the
-   * approval transaction is mined (1 confirmation), so a subsequent deposit()
-   * will see the new allowance; throws if the transaction reverted.
+   * User-paid approval of Permit2 on the selected token for the active chain.
+   * Approves exactly the pending deposit amount. Another approval is required
+   * for a later deposit once this allowance has been consumed. Resolves after
+   * one confirmation so the subsequent deposit attempt sees the new allowance.
+   *
+   * @param requiredAmount Raw base-unit amount the pending deposit must cover.
    * @returns the approval transaction hash.
    */
-  async approvePermit2(asset = "WETH") {
+  async approvePermit2(asset = "WETH", requiredAmount = 0n) {
     const state = this.requireState();
     const chainId = this.requireChainId();
     this.getEligibleAgents(chainId, asset, { excludeDisabled: true });
@@ -6005,6 +6047,11 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
+    const publicClient = (0, import_viem11.createPublicClient)({
+      chain: VIEM_CHAIN2[chainId],
+      transport: (0, import_viem11.custom)(provider)
+    });
+    const approvalAmount = permit2ApprovalAmount(requiredAmount);
     const wallet = (0, import_viem11.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
@@ -6014,14 +6061,10 @@ var OwneySDK = class {
       address: token,
       abi: ERC20_ALLOWANCE_ABI,
       functionName: "approve",
-      args: [PERMIT2_ADDRESS, MAX_UINT256],
+      args: [PERMIT2_ADDRESS, approvalAmount],
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId]
     });
-    const publicClient = (0, import_viem11.createPublicClient)({
-      chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem11.custom)(provider)
-    });
     const receipt = await publicClient.waitForTransactionReceipt({
       hash,
       confirmations: 1

package/dist/index.d.cts

@@ -719,14 +719,15 @@ declare class OwneySDK {
      */
     ensureAutoSelectProtocols(asset: "USDC" | "WETH", agentId?: AgentId): Promise<boolean>;
     /**
-     * One-time, user-paid approval of Permit2 on the selected token for
-     * the active chain. Required once per wallet, token and chain before sponsored
-     * deposits; afterwards deposit() is signature-only. Resolves only after the
-     * approval transaction is mined (1 confirmation), so a subsequent deposit()
-     * will see the new allowance; throws if the transaction reverted.
+     * User-paid approval of Permit2 on the selected token for the active chain.
+     * Approves exactly the pending deposit amount. Another approval is required
+     * for a later deposit once this allowance has been consumed. Resolves after
+     * one confirmation so the subsequent deposit attempt sees the new allowance.
+     *
+     * @param requiredAmount Raw base-unit amount the pending deposit must cover.
      * @returns the approval transaction hash.
      */
-    approvePermit2(asset?: OwneySupportedTokens): Promise<`0x${string}`>;
+    approvePermit2(asset?: OwneySupportedTokens, requiredAmount?: bigint): Promise<`0x${string}`>;
     /**
      * Get the agent's average APY performance over a time period. Does not require a wallet connection.
      * @param options - Contains agentId (optional) and days ("7D", "14D", or "30D")
@@ -797,6 +798,8 @@ declare class YieldseekerAgent implements IAgent {
     private readonly agentContexts;
     private readonly users;
     private readonly pendingAgents;
+    private readonly yieldOptions;
+    private readonly pendingYieldOptions;
     constructor(owneyApiKey: string, options?: YieldseekerAgentOptions);
     disconnect(): Promise<void>;
     activateAgent(state: ConnectionState, chainId: number, asset?: OwneySupportedTokens): Promise<void>;
@@ -808,6 +811,7 @@ declare class YieldseekerAgent implements IAgent {
     getHistory(state: ConnectionState, chainId: number, options?: HistoryFilters): Promise<OwneyAgentHistory>;
     getUserProfile(state: ConnectionState, chainId: number): Promise<AgentUserProfile>;
     getAgentApy(days: DailyApyDays, options?: AgentApyOptions): Promise<AgentApy>;
+    private loadYieldOptions;
     private userKey;
     private contextKey;
     private resolveUser;
@@ -817,7 +821,7 @@ declare class YieldseekerAgent implements IAgent {
     private resolveAgent;
     private loadPortfolio;
     private loadPortfolioContext;
-    private deployAfterFunding;
+    private deployAgent;
     private refreshSnapshotAfterMovement;
     private agentPath;
     private walletRequest;

package/dist/index.d.ts

@@ -719,14 +719,15 @@ declare class OwneySDK {
      */
     ensureAutoSelectProtocols(asset: "USDC" | "WETH", agentId?: AgentId): Promise<boolean>;
     /**
-     * One-time, user-paid approval of Permit2 on the selected token for
-     * the active chain. Required once per wallet, token and chain before sponsored
-     * deposits; afterwards deposit() is signature-only. Resolves only after the
-     * approval transaction is mined (1 confirmation), so a subsequent deposit()
-     * will see the new allowance; throws if the transaction reverted.
+     * User-paid approval of Permit2 on the selected token for the active chain.
+     * Approves exactly the pending deposit amount. Another approval is required
+     * for a later deposit once this allowance has been consumed. Resolves after
+     * one confirmation so the subsequent deposit attempt sees the new allowance.
+     *
+     * @param requiredAmount Raw base-unit amount the pending deposit must cover.
      * @returns the approval transaction hash.
      */
-    approvePermit2(asset?: OwneySupportedTokens): Promise<`0x${string}`>;
+    approvePermit2(asset?: OwneySupportedTokens, requiredAmount?: bigint): Promise<`0x${string}`>;
     /**
      * Get the agent's average APY performance over a time period. Does not require a wallet connection.
      * @param options - Contains agentId (optional) and days ("7D", "14D", or "30D")
@@ -797,6 +798,8 @@ declare class YieldseekerAgent implements IAgent {
     private readonly agentContexts;
     private readonly users;
     private readonly pendingAgents;
+    private readonly yieldOptions;
+    private readonly pendingYieldOptions;
     constructor(owneyApiKey: string, options?: YieldseekerAgentOptions);
     disconnect(): Promise<void>;
     activateAgent(state: ConnectionState, chainId: number, asset?: OwneySupportedTokens): Promise<void>;
@@ -808,6 +811,7 @@ declare class YieldseekerAgent implements IAgent {
     getHistory(state: ConnectionState, chainId: number, options?: HistoryFilters): Promise<OwneyAgentHistory>;
     getUserProfile(state: ConnectionState, chainId: number): Promise<AgentUserProfile>;
     getAgentApy(days: DailyApyDays, options?: AgentApyOptions): Promise<AgentApy>;
+    private loadYieldOptions;
     private userKey;
     private contextKey;
     private resolveUser;
@@ -817,7 +821,7 @@ declare class YieldseekerAgent implements IAgent {
     private resolveAgent;
     private loadPortfolio;
     private loadPortfolioContext;
-    private deployAfterFunding;
+    private deployAgent;
     private refreshSnapshotAfterMovement;
     private agentPath;
     private walletRequest;

package/dist/index.js

@@ -2209,7 +2209,12 @@ async function postSponsorBatchTransfer(input) {
 // src/lib/permit2.ts
 import { bytesToHex as bytesToHex2 } from "viem";
 var PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
-var MAX_UINT256 = 2n ** 256n - 1n;
+function permit2ApprovalAmount(requiredAmount) {
+  if (requiredAmount <= 0n) {
+    throw new Error("Permit2 approval requires a positive deposit amount");
+  }
+  return requiredAmount;
+}
 var ERC20_ALLOWANCE_ABI = [
   {
     type: "function",
@@ -2964,7 +2969,7 @@ function depositDestination(context, movement) {
   if (receipt && minted) return { protocol: "Vault", pool: receipt.name || receipt.symbol, tokenSymbol: context.asset };
   return void 0;
 }
-function movementEntry(movement, wallet, agent, asset, ownerAddress, destination) {
+function movementEntry(movement, wallet, agent, asset, ownerAddress, vaultAddresses, destination) {
   const from = movement.fromAddress.toLowerCase();
   const to = movement.toAddress.toLowerCase();
   const owner = ownerAddress.toLowerCase();
@@ -2974,7 +2979,7 @@ function movementEntry(movement, wallet, agent, asset, ownerAddress, destination
     return void 0;
   }
   let action;
-  if (from === owner && to === agentWallet) {
+  if (to === agentWallet && !vaultAddresses.has(from)) {
     action = "Top up";
   } else if (from === agentWallet && to === owner) {
     action = "Withdraw";
@@ -3024,6 +3029,7 @@ function mapYieldseekerHistory(contexts, options) {
           context.agent,
           context.asset,
           options.ownerAddress,
+          options.vaultAddresses,
           depositDestination(context, movement)
         )
       ),
@@ -3104,6 +3110,7 @@ var OWNEY_AGENT_NAME = "owney";
 var YIELDSEEKER_USERNAME_PREFIX = "owney_";
 var YIELDSEEKER_USERNAME_RANDOM_LENGTH = 14;
 var YIELDSEEKER_USERNAME_CREATE_ATTEMPTS = 3;
+var YIELDSEEKER_YIELD_OPTIONS_CACHE_MS = 6e4;
 function generateYieldseekerUsername() {
   const suffix = globalThis.crypto.randomUUID().replaceAll("-", "").slice(0, YIELDSEEKER_USERNAME_RANDOM_LENGTH).toLowerCase();
   return `${YIELDSEEKER_USERNAME_PREFIX}${suffix}`;
@@ -3165,6 +3172,8 @@ var YieldseekerAgent = class {
   agentContexts = /* @__PURE__ */ new Map();
   users = /* @__PURE__ */ new Map();
   pendingAgents = /* @__PURE__ */ new Map();
+  yieldOptions = /* @__PURE__ */ new Map();
+  pendingYieldOptions = /* @__PURE__ */ new Map();
   constructor(owneyApiKey, options = {}) {
     this.api = new YieldseekerApiClient(
       owneyApiKey,
@@ -3231,7 +3240,6 @@ var YieldseekerAgent = class {
           chainId
         });
       }
-      await this.deployAfterFunding(state, chainId, context);
     } finally {
       await this.refreshSnapshotAfterMovement(
         state,
@@ -3383,9 +3391,20 @@ var YieldseekerAgent = class {
       historic: true,
       actions: true
     });
+    const catalog = await Promise.all(
+      [...new Set(contexts.map((context) => context.asset))].map(
+        (contextAsset) => this.loadYieldOptions(contextAsset)
+      )
+    );
+    const vaultAddresses = new Set(
+      catalog.flat().filter(
+        (yieldOption) => yieldOption.chainId === chainId && isAddress2(yieldOption.address)
+      ).map((yieldOption) => yieldOption.address.toLowerCase())
+    );
     return mapYieldseekerHistory(contexts, {
       limit: options?.limit ?? 10,
       ownerAddress: state.walletAddress,
+      vaultAddresses,
       ...options?.fromDate ? { fromDate: options.fromDate } : {},
       ...options?.toDate ? { toDate: options.toDate } : {}
     });
@@ -3404,18 +3423,32 @@ var YieldseekerAgent = class {
     const assets = requested ? [requested] : ["USDC", "WETH"];
     const values = await Promise.all(
       assets.map(async (asset) => {
-        const metadata = YIELDSEEKER_ASSET_METADATA[asset];
-        const response = await this.api.request(
-          `/chains/8453/assets/${metadata.address}/yield-options`
-        );
-        if (!Array.isArray(response?.yieldOptions)) {
-          throw this.invalidResponse("yield options");
-        }
-        return { asset, yieldOptions: response.yieldOptions };
+        return { asset, yieldOptions: await this.loadYieldOptions(asset) };
       })
     );
     return mapYieldseekerAgentApy(values, days);
   }
+  async loadYieldOptions(asset) {
+    const cached = this.yieldOptions.get(asset);
+    if (cached && cached.expiresAt > Date.now()) return cached.value;
+    const pending = this.pendingYieldOptions.get(asset);
+    if (pending) return pending;
+    const metadata = YIELDSEEKER_ASSET_METADATA[asset];
+    const request = this.api.request(
+      `/chains/8453/assets/${metadata.address}/yield-options`
+    ).then((response) => {
+      if (!Array.isArray(response?.yieldOptions)) {
+        throw this.invalidResponse("yield options");
+      }
+      this.yieldOptions.set(asset, {
+        expiresAt: Date.now() + YIELDSEEKER_YIELD_OPTIONS_CACHE_MS,
+        value: response.yieldOptions
+      });
+      return response.yieldOptions;
+    }).finally(() => this.pendingYieldOptions.delete(asset));
+    this.pendingYieldOptions.set(asset, request);
+    return request;
+  }
   userKey(state, chainId) {
     return `${state.walletAddress.toLowerCase()}:${chainId}`;
   }
@@ -3494,8 +3527,9 @@ var YieldseekerAgent = class {
     const pending = this.pendingAgents.get(key2);
     if (pending) return pending;
     const request = this.resolveAgent(state, chainId, asset, true).then(
-      (context) => {
+      async (context) => {
         if (!context) throw this.invalidResponse("agent creation");
+        await this.deployAgent(state, chainId, context);
         this.agentContexts.set(key2, context);
         return context;
       }
@@ -3640,24 +3674,21 @@ var YieldseekerAgent = class {
       ...actions?.actions ? { actions: actions.actions } : {}
     };
   }
-  async deployAfterFunding(state, chainId, context) {
+  async deployAgent(state, chainId, context) {
     if (context.wallet.initializedDate != null) return;
-    try {
-      const deployed = await this.walletRequest(
-        state,
-        chainId,
-        this.agentPath(context, "deploy"),
-        { method: "POST", body: {} }
-      );
-      if (deployed?.agentWallet) {
-        context.wallet = deployed.agentWallet;
-      }
-    } catch (error) {
-      console.warn(
-        "[owney-sdk] Yieldseeker deposit is funded but not deployable yet:",
-        error
-      );
+    const walletAddress = context.wallet.walletAddress.toLowerCase();
+    const deployed = await this.walletRequest(
+      state,
+      chainId,
+      this.agentPath(context, "deploy"),
+      { method: "POST", body: {} }
+    );
+    if (!deployed?.agentWallet || !isAddress2(deployed.agentWallet.walletAddress) || deployed.agentWallet.walletAddress.toLowerCase() !== walletAddress) {
+      throw this.invalidResponse("agent deployment", {
+        reason: "Deploy did not return the expected Agent Wallet."
+      });
     }
+    context.wallet = deployed.agentWallet;
   }
   async refreshSnapshotAfterMovement(state, chainId, context, movement) {
     try {
@@ -5233,7 +5264,14 @@ var OwneySDK = class {
           } catch (error) {
             if (!(error instanceof OwneyError) || error.code !== "PERMIT2_APPROVAL_REQUIRED")
               throw error;
-            await this.approvePermit2(asset);
+            const requiredAmount = transfers.reduce(
+              (sum, transfer) => sum + BigInt(transfer.amount),
+              0n
+            );
+            await this.approvePermit2(
+              asset,
+              requiredAmount
+            );
             return batchTransfer(cid, transfers);
           }
         }
@@ -5320,7 +5358,10 @@ var OwneySDK = class {
           console.warn(
             "[owney-sdk] First token deposit: sending one-time Permit2 approval..."
           );
-          await this.approvePermit2(asset);
+          await this.approvePermit2(
+            asset,
+            BigInt(amount)
+          );
           continue;
         }
         if (!shouldFallbackToUserPaid(error, asset, appCallback)) throw error;
@@ -5973,14 +6014,15 @@ var OwneySDK = class {
     return pending;
   }
   /**
-   * One-time, user-paid approval of Permit2 on the selected token for
-   * the active chain. Required once per wallet, token and chain before sponsored
-   * deposits; afterwards deposit() is signature-only. Resolves only after the
-   * approval transaction is mined (1 confirmation), so a subsequent deposit()
-   * will see the new allowance; throws if the transaction reverted.
+   * User-paid approval of Permit2 on the selected token for the active chain.
+   * Approves exactly the pending deposit amount. Another approval is required
+   * for a later deposit once this allowance has been consumed. Resolves after
+   * one confirmation so the subsequent deposit attempt sees the new allowance.
+   *
+   * @param requiredAmount Raw base-unit amount the pending deposit must cover.
    * @returns the approval transaction hash.
    */
-  async approvePermit2(asset = "WETH") {
+  async approvePermit2(asset = "WETH", requiredAmount = 0n) {
     const state = this.requireState();
     const chainId = this.requireChainId();
     this.getEligibleAgents(chainId, asset, { excludeDisabled: true });
@@ -5992,6 +6034,11 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
+    const publicClient = createPublicClient4({
+      chain: VIEM_CHAIN2[chainId],
+      transport: custom3(provider)
+    });
+    const approvalAmount = permit2ApprovalAmount(requiredAmount);
     const wallet = createWalletClient3({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
@@ -6001,14 +6048,10 @@ var OwneySDK = class {
       address: token,
       abi: ERC20_ALLOWANCE_ABI,
       functionName: "approve",
-      args: [PERMIT2_ADDRESS, MAX_UINT256],
+      args: [PERMIT2_ADDRESS, approvalAmount],
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId]
     });
-    const publicClient = createPublicClient4({
-      chain: VIEM_CHAIN2[chainId],
-      transport: custom3(provider)
-    });
     const receipt = await publicClient.waitForTransactionReceipt({
       hash,
       confirmations: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.7.21-beta.5",
+  "version": "0.7.21-beta.6",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",