@owney/sdk 0.7.22-beta.2 → 0.7.22-beta.4

package/dist/{chunk-5W56YOBO.js → chunk-T5YJVIQG.js}

@@ -138,7 +138,7 @@ var VaultNotSponsorableError = class extends Error {
   }
 };
 async function resolveVault(ctx) {
-  const registered = await ctx.api.getVault(ctx.wallet.ownerAddress);
+  const registered = await ctx.api.getVault(ctx.wallet.smartAccountAddress);
   const smartAccount = ctx.wallet.smartAccountAddress;
   if (!registered.userVaultAddress) {
     const salt2 = registered.deploymentSalt ?? (await ctx.api.prepare(SURFLIQUID_CHAIN_ID)).salt;
@@ -253,7 +253,7 @@ async function depositSponsored(input) {
 }
 async function withdrawSponsored(input) {
   const { api, chain, wallet, amount } = input;
-  const registered = await api.getVault(wallet.ownerAddress);
+  const registered = await api.getVault(wallet.smartAccountAddress);
   if (!registered.userVaultAddress) {
     throw new Error("SurfLiquid has no vault registered for this wallet");
   }

package/dist/index.cjs

@@ -388,7 +388,7 @@ function normalizeSupportedAssets(json, chainId) {
 function createSurfBroker(options) {
   const fetchImpl = options.fetchImpl ?? fetch;
   const now = options.now ?? Date.now;
-  const base5 = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
+  const base4 = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
   const wallet = options.walletAddress;
   let session = readSurfSession(options.apiKey, wallet);
   const vaultMemo = /* @__PURE__ */ new Map();
@@ -407,7 +407,7 @@ function createSurfBroker(options) {
     if (options.origin) headers["origin"] = options.origin;
     let response;
     try {
-      response = await fetchImpl(`${base5}${path}`, {
+      response = await fetchImpl(`${base4}${path}`, {
         method,
         headers,
         body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -526,8 +526,8 @@ var init_surfliquid_broker = __esm({
 // src/agents/surfliquid/surfliquid.mapper.ts
 function mapMessage(message) {
   const action = SURFLIQUID_ACTION_MAP[message.transactionType];
-  if (!action) return null;
-  return {
+  if (!action) return [];
+  const base4 = {
     agent: "surfliquid",
     action,
     date: message.timestamp,
@@ -543,9 +543,27 @@ function mapMessage(message) {
     ],
     rebalanceLog: []
   };
+  if (DEPOSIT_TRANSACTION_TYPES.has(message.transactionType) && message.toVault?.name && message.amount != null) {
+    return [
+      base4,
+      {
+        ...base4,
+        action: "Deposit",
+        positions: [
+          {
+            protocol: SURFLIQUID_PROTOCOL,
+            pool: message.toVault.name,
+            tokenSymbol: message.token ?? void 0,
+            amount: String(message.amount)
+          }
+        ]
+      }
+    ];
+  }
+  return [base4];
 }
 function mapHistory(result, _chainId) {
-  const data = result.messages.map(mapMessage).filter((entry) => entry !== null);
+  const data = result.messages.flatMap(mapMessage);
   const hasMore = result.page < result.pages;
   return {
     data,
@@ -620,11 +638,17 @@ function mapUserProfile2(vault, address) {
     protocols: ["SurfLiquid"]
   };
 }
-var APY_WINDOW_KEY;
+var SURFLIQUID_PROTOCOL, DEPOSIT_TRANSACTION_TYPES, APY_WINDOW_KEY;
 var init_surfliquid_mapper = __esm({
   "src/agents/surfliquid/surfliquid.mapper.ts"() {
     "use strict";
     init_surfliquid_constants();
+    SURFLIQUID_PROTOCOL = "Morpho";
+    DEPOSIT_TRANSACTION_TYPES = /* @__PURE__ */ new Set([
+      "INITIAL_DEPOSIT",
+      "DEPOSIT",
+      "USER_DEPOSIT"
+    ]);
     APY_WINDOW_KEY = {
       "7D": "apy7d",
       "14D": "apy14d",
@@ -736,7 +760,7 @@ var init_surfliquid_calls = __esm({
 
 // src/agents/surfliquid/surfliquid.sponsorship.ts
 async function resolveVault(ctx) {
-  const registered = await ctx.api.getVault(ctx.wallet.ownerAddress);
+  const registered = await ctx.api.getVault(ctx.wallet.smartAccountAddress);
   const smartAccount = ctx.wallet.smartAccountAddress;
   if (!registered.userVaultAddress) {
     const salt2 = registered.deploymentSalt ?? (await ctx.api.prepare(SURFLIQUID_CHAIN_ID)).salt;
@@ -851,7 +875,7 @@ async function depositSponsored(input) {
 }
 async function withdrawSponsored(input) {
   const { api, chain, wallet, amount } = input;
-  const registered = await api.getVault(wallet.ownerAddress);
+  const registered = await api.getVault(wallet.smartAccountAddress);
   if (!registered.userVaultAddress) {
     throw new Error("SurfLiquid has no vault registered for this wallet");
   }
@@ -1053,10 +1077,11 @@ function pinAccount(provider, address) {
   };
 }
 async function createSponsoredWallet(input) {
-  const entryPoint = { address: import_account_abstraction.entryPoint08Address, version: "0.8" };
-  const account = await (0, import_accounts.toSimpleSmartAccount)({
+  const entryPoint = { address: import_account_abstraction.entryPoint07Address, version: "0.7" };
+  const account = await (0, import_accounts.toSafeSmartAccount)({
     client: publicClientFor(input.rpcUrl),
-    owner: pinAccount(input.provider, input.ownerAddress),
+    owners: [pinAccount(input.provider, input.ownerAddress)],
+    version: "1.4.1",
     entryPoint
   });
   const bundlerTransport = (0, import_viem9.http)(sponsorProxyUrl(input.routingApiBaseUrl), {
@@ -1088,6 +1113,20 @@ async function createSponsoredWallet(input) {
       primaryType: typedData.primaryType,
       message: typedData.message
     }),
+    // The smart account signs (ERC-1271), not the EOA: SurfLiquid's SIWE session must
+    // be the vault owner, which is the smart account. Safe wraps this as a SafeMessage
+    // EIP-712 signature the deployed account verifies via isValidSignature.
+    signMessage: (message) => account.signMessage({ message }),
+    // Deploy-on-connect: the account is counterfactual until its first userOp, but SIWE
+    // (isValidSignature) needs on-chain code. A no-op self-call carries the factory
+    // initCode and deploys it. Idempotency is the caller's (it checks isDeployed first).
+    deployAccount: async () => {
+      const userOpHash = await smartAccountClient.sendUserOperation({
+        calls: [{ to: account.address, value: 0n, data: "0x" }]
+      });
+      const receipt = await smartAccountClient.waitForUserOperationReceipt({ hash: userOpHash });
+      return receipt.receipt.transactionHash;
+    },
     sendCalls: async (calls) => {
       const userOpHash = await smartAccountClient.sendUserOperation({
         calls: calls.map((c) => ({ to: c.to, data: c.data, value: 0n }))
@@ -1142,12 +1181,10 @@ function toOwneyError(error) {
   }
   return new OwneyError("SPONSORSHIP_UNAVAILABLE", message, void 0, AGENT_ID2);
 }
-var import_viem10, import_chains3, AGENT_ID2, WALLET_REJECTED_CODE, DISCOVERY_WALLET2, HISTORY_DEFAULT_LIMIT, APY_WINDOW_KEY2, SurfLiquidAgent;
+var AGENT_ID2, WALLET_REJECTED_CODE, DISCOVERY_WALLET2, HISTORY_DEFAULT_LIMIT, APY_WINDOW_KEY2, SurfLiquidAgent;
 var init_surfliquid_agent = __esm({
   "src/agents/surfliquid/surfliquid.agent.ts"() {
     "use strict";
-    import_viem10 = require("viem");
-    import_chains3 = require("viem/chains");
     init_errors();
     init_surfliquid_constants();
     init_surfliquid_broker();
@@ -1174,6 +1211,9 @@ var init_surfliquid_agent = __esm({
       supportedAssets = SURFLIQUID_SUPPORTED_ASSETS;
       broker = null;
       brokerWallet = null;
+      // The SurfLiquid session and every keyed read run on the smart account (the vault
+      // owner), not the EOA — set by connect(), consumed by the reads below.
+      smartAccountAddress = null;
       // Dedicated instance for the anonymous "0x" asset probe — never shares a slot
       // with the user's broker, so discovery can never evict or overwrite a session.
       discoveryBroker = null;
@@ -1195,17 +1235,22 @@ var init_surfliquid_agent = __esm({
         return this.broker;
       }
       async connect(state, shouldForce = false) {
-        const broker = this.brokerFor(state.walletAddress);
-        if (!shouldForce && broker.hasSession()) return broker;
+        if (!shouldForce && this.broker && this.smartAccountAddress && this.broker.hasSession()) {
+          return this.broker;
+        }
         if (this.connectPromise) return this.connectPromise;
         this.connectPromise = (async () => {
+          const wallet = await this.sponsoredWallet(state);
+          const smartAccountAddress = wallet.smartAccountAddress;
+          this.smartAccountAddress = smartAccountAddress;
+          const broker = this.brokerFor(smartAccountAddress);
+          if (!shouldForce && broker.hasSession()) return broker;
+          const { createSponsoredChain: createSponsoredChain2 } = await Promise.resolve().then(() => (init_surfliquid_smart_account(), surfliquid_smart_account_exports));
+          if (!await createSponsoredChain2(this.config.rpcUrl).isDeployed(smartAccountAddress)) {
+            await wallet.deployAccount();
+          }
           const message = await broker.nonce();
-          const walletClient = (0, import_viem10.createWalletClient)({
-            account: state.walletAddress,
-            chain: import_chains3.base,
-            transport: (0, import_viem10.custom)(state.provider)
-          });
-          const signature = await walletClient.signMessage({ account: state.walletAddress, message });
+          const signature = await wallet.signMessage(message);
           await broker.login(message, signature);
           return broker;
         })();
@@ -1215,6 +1260,10 @@ var init_surfliquid_agent = __esm({
           this.connectPromise = null;
         }
       }
+      /** The SurfLiquid-facing wallet address: the smart account once connected, else the EOA. */
+      surfWallet(state) {
+        return this.smartAccountAddress ?? state.walletAddress;
+      }
       /** A 401 can only surface before any signature (SurfLiquid is never called between sign and submit). */
       async withSession(state, run) {
         try {
@@ -1245,6 +1294,7 @@ var init_surfliquid_agent = __esm({
         this.broker?.clearSession();
         this.broker = null;
         this.brokerWallet = null;
+        this.smartAccountAddress = null;
       }
       async activateAgent(state, _chainId) {
         await this.connect(state);
@@ -1306,7 +1356,7 @@ var init_surfliquid_agent = __esm({
       // --- IAgent: portfolio reads ---
       async vault(state) {
         const broker = await this.connect(state);
-        return this.withSession(state, () => broker.getVault(state.walletAddress));
+        return this.withSession(state, () => broker.getVault(this.surfWallet(state)));
       }
       async getBalances(state, chainId) {
         const vault = await this.vault(state);
@@ -1327,7 +1377,7 @@ var init_surfliquid_agent = __esm({
         const limit = options?.limit ?? HISTORY_DEFAULT_LIMIT;
         const result = await this.withSession(
           state,
-          () => broker.getAgentMessages(state.walletAddress, page, limit, options?.fromDate, options?.toDate)
+          () => broker.getAgentMessages(this.surfWallet(state), page, limit, options?.fromDate, options?.toDate)
         );
         return mapHistory(result, chainId);
       }
@@ -3566,8 +3616,8 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
 }
 
 // src/client.ts
-var import_viem11 = require("viem");
-var import_chains4 = require("viem/chains");
+var import_viem10 = require("viem");
+var import_chains3 = require("viem/chains");
 
 // src/lib/sponsored-deposit.ts
 init_errors();
@@ -3577,10 +3627,10 @@ init_transfer_auth();
 init_errors();
 var ROUTING_API_BASE_URL3 = "https://owney-routing-api-243946518160.europe-west4.run.app";
 async function postSponsorTransferAuth(input) {
-  const base5 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  const base4 = input.baseUrl ?? ROUTING_API_BASE_URL3;
   let res;
   try {
-    res = await fetch(`${base5}/api/v1/sponsor/erc20-transfer-auth`, {
+    res = await fetch(`${base4}/api/v1/sponsor/erc20-transfer-auth`, {
       method: "POST",
       headers: {
         "content-type": "application/json",
@@ -3617,10 +3667,10 @@ async function postSponsorTransferAuth(input) {
   return parsed.data;
 }
 async function postSponsorPermit2Transfer(input) {
-  const base5 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  const base4 = input.baseUrl ?? ROUTING_API_BASE_URL3;
   let res;
   try {
-    res = await fetch(`${base5}/api/v1/sponsor/permit2-transfer`, {
+    res = await fetch(`${base4}/api/v1/sponsor/permit2-transfer`, {
       method: "POST",
       headers: {
         "content-type": "application/json",
@@ -3655,11 +3705,11 @@ async function postSponsorPermit2Transfer(input) {
   return parsed.data;
 }
 async function getSponsorRelayerAddress(input) {
-  const base5 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  const base4 = input.baseUrl ?? ROUTING_API_BASE_URL3;
   let res;
   try {
     res = await fetch(
-      `${base5}/api/v1/sponsor/relayer-address?chainId=${input.chainId}`,
+      `${base4}/api/v1/sponsor/relayer-address?chainId=${input.chainId}`,
       {
         headers: { "x-owney-api-key": input.apiKey }
       }
@@ -4086,9 +4136,9 @@ var SPONSORED_USDC_BY_CHAIN = {
   1: "0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48"
 };
 var VIEM_CHAIN2 = {
-  8453: import_chains4.base,
-  42161: import_chains4.arbitrum,
-  1: import_chains4.mainnet
+  8453: import_chains3.base,
+  42161: import_chains3.arbitrum,
+  1: import_chains3.mainnet
 };
 var SPONSORED_WETH_BY_CHAIN = {
   8453: "0x4200000000000000000000000000000000000006",
@@ -4245,14 +4295,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem11.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem10.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem11.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem10.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       })
     });
     if (!onApproved) this.cachedSponsoredCallback = callback;
@@ -4298,14 +4348,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem11.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem10.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem11.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem10.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       })
     });
     if (!onApproved) this.cachedWethSponsoredCallback = callback;
@@ -5424,10 +5474,10 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
-    const wallet = (0, import_viem11.createWalletClient)({
+    const wallet = (0, import_viem10.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem11.custom)(provider)
+      transport: (0, import_viem10.custom)(provider)
     });
     const hash = await wallet.writeContract({
       address: token,
@@ -5437,9 +5487,9 @@ var OwneySDK = class {
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId]
     });
-    const publicClient = (0, import_viem11.createPublicClient)({
+    const publicClient = (0, import_viem10.createPublicClient)({
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem11.custom)(provider)
+      transport: (0, import_viem10.custom)(provider)
     });
     const receipt = await publicClient.waitForTransactionReceipt({
       hash,
@@ -5555,7 +5605,7 @@ init_errors();
 init_debug();
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem12 = require("viem");
+var import_viem11 = require("viem");
 var import_siwe = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -5682,7 +5732,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe.SiweMessage({
-          address: (0, import_viem12.getAddress)(accountAddress),
+          address: (0, import_viem11.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,

package/dist/index.js

@@ -3036,7 +3036,7 @@ var OwneySDK = class {
     }
     if (agentId === "surfliquid") {
       if (!key2) return null;
-      const { SurfLiquidAgent } = await import("./surfliquid.agent-E54CPWXF.js");
+      const { SurfLiquidAgent } = await import("./surfliquid.agent-ZTIK54MW.js");
       return new SurfLiquidAgent({
         apiKey: this.apiKey,
         routingApiBaseUrl: this.routingApiBaseUrl

package/dist/{surfliquid.agent-E54CPWXF.js → surfliquid.agent-ZTIK54MW.js}

@@ -13,13 +13,9 @@ import {
   readStuckBalance,
   sweepStuckBalance,
   withdrawSponsored
-} from "./chunk-5W56YOBO.js";
+} from "./chunk-T5YJVIQG.js";
 import "./chunk-AURO3C3R.js";
 
-// src/agents/surfliquid/surfliquid.agent.ts
-import { createWalletClient, custom } from "viem";
-import { base } from "viem/chains";
-
 // src/agents/surfliquid/surfliquid.session-store.ts
 var KEY_PREFIX = "owney.surfliquid.session";
 var EXPIRY_SKEW_MS = 3e4;
@@ -146,7 +142,7 @@ function normalizeSupportedAssets(json, chainId) {
 function createSurfBroker(options) {
   const fetchImpl = options.fetchImpl ?? fetch;
   const now = options.now ?? Date.now;
-  const base2 = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
+  const base = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
   const wallet = options.walletAddress;
   let session = readSurfSession(options.apiKey, wallet);
   const vaultMemo = /* @__PURE__ */ new Map();
@@ -165,7 +161,7 @@ function createSurfBroker(options) {
     if (options.origin) headers["origin"] = options.origin;
     let response;
     try {
-      response = await fetchImpl(`${base2}${path}`, {
+      response = await fetchImpl(`${base}${path}`, {
         method,
         headers,
         body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -261,10 +257,16 @@ function createSurfBroker(options) {
 }
 
 // src/agents/surfliquid/surfliquid.mapper.ts
+var SURFLIQUID_PROTOCOL = "Morpho";
+var DEPOSIT_TRANSACTION_TYPES = /* @__PURE__ */ new Set([
+  "INITIAL_DEPOSIT",
+  "DEPOSIT",
+  "USER_DEPOSIT"
+]);
 function mapMessage(message) {
   const action = SURFLIQUID_ACTION_MAP[message.transactionType];
-  if (!action) return null;
-  return {
+  if (!action) return [];
+  const base = {
     agent: "surfliquid",
     action,
     date: message.timestamp,
@@ -280,9 +282,27 @@ function mapMessage(message) {
     ],
     rebalanceLog: []
   };
+  if (DEPOSIT_TRANSACTION_TYPES.has(message.transactionType) && message.toVault?.name && message.amount != null) {
+    return [
+      base,
+      {
+        ...base,
+        action: "Deposit",
+        positions: [
+          {
+            protocol: SURFLIQUID_PROTOCOL,
+            pool: message.toVault.name,
+            tokenSymbol: message.token ?? void 0,
+            amount: String(message.amount)
+          }
+        ]
+      }
+    ];
+  }
+  return [base];
 }
 function mapHistory(result, _chainId) {
-  const data = result.messages.map(mapMessage).filter((entry) => entry !== null);
+  const data = result.messages.flatMap(mapMessage);
   const hasMore = result.page < result.pages;
   return {
     data,
@@ -478,6 +498,9 @@ var SurfLiquidAgent = class {
   supportedAssets = SURFLIQUID_SUPPORTED_ASSETS;
   broker = null;
   brokerWallet = null;
+  // The SurfLiquid session and every keyed read run on the smart account (the vault
+  // owner), not the EOA — set by connect(), consumed by the reads below.
+  smartAccountAddress = null;
   // Dedicated instance for the anonymous "0x" asset probe — never shares a slot
   // with the user's broker, so discovery can never evict or overwrite a session.
   discoveryBroker = null;
@@ -499,17 +522,22 @@ var SurfLiquidAgent = class {
     return this.broker;
   }
   async connect(state, shouldForce = false) {
-    const broker = this.brokerFor(state.walletAddress);
-    if (!shouldForce && broker.hasSession()) return broker;
+    if (!shouldForce && this.broker && this.smartAccountAddress && this.broker.hasSession()) {
+      return this.broker;
+    }
     if (this.connectPromise) return this.connectPromise;
     this.connectPromise = (async () => {
+      const wallet = await this.sponsoredWallet(state);
+      const smartAccountAddress = wallet.smartAccountAddress;
+      this.smartAccountAddress = smartAccountAddress;
+      const broker = this.brokerFor(smartAccountAddress);
+      if (!shouldForce && broker.hasSession()) return broker;
+      const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
+      if (!await createSponsoredChain(this.config.rpcUrl).isDeployed(smartAccountAddress)) {
+        await wallet.deployAccount();
+      }
       const message = await broker.nonce();
-      const walletClient = createWalletClient({
-        account: state.walletAddress,
-        chain: base,
-        transport: custom(state.provider)
-      });
-      const signature = await walletClient.signMessage({ account: state.walletAddress, message });
+      const signature = await wallet.signMessage(message);
       await broker.login(message, signature);
       return broker;
     })();
@@ -519,6 +547,10 @@ var SurfLiquidAgent = class {
       this.connectPromise = null;
     }
   }
+  /** The SurfLiquid-facing wallet address: the smart account once connected, else the EOA. */
+  surfWallet(state) {
+    return this.smartAccountAddress ?? state.walletAddress;
+  }
   /** A 401 can only surface before any signature (SurfLiquid is never called between sign and submit). */
   async withSession(state, run) {
     try {
@@ -535,7 +567,7 @@ var SurfLiquidAgent = class {
     }
   }
   async sponsoredWallet(state) {
-    const { createSponsoredWallet } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredWallet } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     return createSponsoredWallet({
       provider: state.provider,
       ownerAddress: state.walletAddress,
@@ -549,6 +581,7 @@ var SurfLiquidAgent = class {
     this.broker?.clearSession();
     this.broker = null;
     this.brokerWallet = null;
+    this.smartAccountAddress = null;
   }
   async activateAgent(state, _chainId) {
     await this.connect(state);
@@ -557,7 +590,7 @@ var SurfLiquidAgent = class {
   async deposit(state, _chainId, amount, _asset, _depositCallback) {
     const broker = await this.connect(state);
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     try {
       const { txHash, vault } = await this.withSession(
         state,
@@ -572,7 +605,7 @@ var SurfLiquidAgent = class {
   async withdraw(state, _chainId, _token, amount) {
     const broker = await this.connect(state);
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     try {
       const result = await this.withSession(
         state,
@@ -592,14 +625,14 @@ var SurfLiquidAgent = class {
   /** Funds a prior withdrawal's sweep left in the smart account (never reached the EOA). No session needed — pure read. */
   async getStuckBalance(state) {
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     const amount = await readStuckBalance({ chain: createSponsoredChain(this.config.rpcUrl), wallet });
     return { amount: amount.toString(), smartAccountAddress: wallet.smartAccountAddress };
   }
   /** Sweep the stranded balance to the owner's EOA — one sponsored userOp, one signature. */
   async recoverStuckBalance(state) {
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     try {
       const { txHash, amount } = await sweepStuckBalance({ chain: createSponsoredChain(this.config.rpcUrl), wallet });
       return { txHash, type: "full", amount: amount.toString() };
@@ -610,7 +643,7 @@ var SurfLiquidAgent = class {
   // --- IAgent: portfolio reads ---
   async vault(state) {
     const broker = await this.connect(state);
-    return this.withSession(state, () => broker.getVault(state.walletAddress));
+    return this.withSession(state, () => broker.getVault(this.surfWallet(state)));
   }
   async getBalances(state, chainId) {
     const vault = await this.vault(state);
@@ -631,7 +664,7 @@ var SurfLiquidAgent = class {
     const limit = options?.limit ?? HISTORY_DEFAULT_LIMIT;
     const result = await this.withSession(
       state,
-      () => broker.getAgentMessages(state.walletAddress, page, limit, options?.fromDate, options?.toDate)
+      () => broker.getAgentMessages(this.surfWallet(state), page, limit, options?.fromDate, options?.toDate)
     );
     return mapHistory(result, chainId);
   }

package/dist/{surfliquid.smart-account-O6YPCQT3.js → surfliquid.smart-account-YV3PLZ72.js}

@@ -6,14 +6,14 @@ import {
   SURFLIQUID_VAULT_ABI,
   SubmittedError,
   USDC_ABI
-} from "./chunk-5W56YOBO.js";
+} from "./chunk-T5YJVIQG.js";
 import {
   readTokenMeta
 } from "./chunk-AURO3C3R.js";
 
 // src/agents/surfliquid/surfliquid.smart-account.ts
 import { createSmartAccountClient } from "permissionless";
-import { toSimpleSmartAccount } from "permissionless/accounts";
+import { toSafeSmartAccount } from "permissionless/accounts";
 import { createPimlicoClient } from "permissionless/clients/pimlico";
 import {
   createPublicClient,
@@ -21,7 +21,7 @@ import {
   custom,
   http
 } from "viem";
-import { entryPoint08Address } from "viem/account-abstraction";
+import { entryPoint07Address } from "viem/account-abstraction";
 import { base } from "viem/chains";
 var sponsorProxyUrl = (routingApiBaseUrl) => `${routingApiBaseUrl.replace(/\/$/, "")}/api/v1/sponsor/pimlico-rpc/${SURFLIQUID_CHAIN_ID}`;
 function publicClientFor(rpcUrl) {
@@ -77,10 +77,11 @@ function pinAccount(provider, address) {
   };
 }
 async function createSponsoredWallet(input) {
-  const entryPoint = { address: entryPoint08Address, version: "0.8" };
-  const account = await toSimpleSmartAccount({
+  const entryPoint = { address: entryPoint07Address, version: "0.7" };
+  const account = await toSafeSmartAccount({
     client: publicClientFor(input.rpcUrl),
-    owner: pinAccount(input.provider, input.ownerAddress),
+    owners: [pinAccount(input.provider, input.ownerAddress)],
+    version: "1.4.1",
     entryPoint
   });
   const bundlerTransport = http(sponsorProxyUrl(input.routingApiBaseUrl), {
@@ -112,6 +113,20 @@ async function createSponsoredWallet(input) {
       primaryType: typedData.primaryType,
       message: typedData.message
     }),
+    // The smart account signs (ERC-1271), not the EOA: SurfLiquid's SIWE session must
+    // be the vault owner, which is the smart account. Safe wraps this as a SafeMessage
+    // EIP-712 signature the deployed account verifies via isValidSignature.
+    signMessage: (message) => account.signMessage({ message }),
+    // Deploy-on-connect: the account is counterfactual until its first userOp, but SIWE
+    // (isValidSignature) needs on-chain code. A no-op self-call carries the factory
+    // initCode and deploys it. Idempotency is the caller's (it checks isDeployed first).
+    deployAccount: async () => {
+      const userOpHash = await smartAccountClient.sendUserOperation({
+        calls: [{ to: account.address, value: 0n, data: "0x" }]
+      });
+      const receipt = await smartAccountClient.waitForUserOperationReceipt({ hash: userOpHash });
+      return receipt.receipt.transactionHash;
+    },
     sendCalls: async (calls) => {
       const userOpHash = await smartAccountClient.sendUserOperation({
         calls: calls.map((c) => ({ to: c.to, data: c.data, value: 0n }))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.7.22-beta.2",
+  "version": "0.7.22-beta.4",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",