@owney/sdk 0.7.22-beta.3 → 0.7.22-beta.5

package/dist/{chunk-5W56YOBO.js → chunk-T5YJVIQG.js}

@@ -138,7 +138,7 @@ var VaultNotSponsorableError = class extends Error {
   }
 };
 async function resolveVault(ctx) {
-  const registered = await ctx.api.getVault(ctx.wallet.ownerAddress);
+  const registered = await ctx.api.getVault(ctx.wallet.smartAccountAddress);
   const smartAccount = ctx.wallet.smartAccountAddress;
   if (!registered.userVaultAddress) {
     const salt2 = registered.deploymentSalt ?? (await ctx.api.prepare(SURFLIQUID_CHAIN_ID)).salt;
@@ -253,7 +253,7 @@ async function depositSponsored(input) {
 }
 async function withdrawSponsored(input) {
   const { api, chain, wallet, amount } = input;
-  const registered = await api.getVault(wallet.ownerAddress);
+  const registered = await api.getVault(wallet.smartAccountAddress);
   if (!registered.userVaultAddress) {
     throw new Error("SurfLiquid has no vault registered for this wallet");
   }

package/dist/index.cjs

@@ -388,7 +388,7 @@ function normalizeSupportedAssets(json, chainId) {
 function createSurfBroker(options) {
   const fetchImpl = options.fetchImpl ?? fetch;
   const now = options.now ?? Date.now;
-  const base5 = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
+  const base4 = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
   const wallet = options.walletAddress;
   let session = readSurfSession(options.apiKey, wallet);
   const vaultMemo = /* @__PURE__ */ new Map();
@@ -407,7 +407,7 @@ function createSurfBroker(options) {
     if (options.origin) headers["origin"] = options.origin;
     let response;
     try {
-      response = await fetchImpl(`${base5}${path}`, {
+      response = await fetchImpl(`${base4}${path}`, {
         method,
         headers,
         body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -501,7 +501,7 @@ function createSurfBroker(options) {
     )
   };
 }
-var SURF_SESSION_HEADER, SURF_BROKER_TIMEOUT_MS, VAULT_MEMO_TTL_MS, AGENT_ID, DISCOVERY_WALLET, SurfSessionExpiredError, asRecord, unavailable;
+var SURF_SESSION_HEADER, SURF_BROKER_TIMEOUT_MS, VAULT_MEMO_TTL_MS, AGENT_ID, DISCOVERY_WALLET, SurfSessionExpiredError, asRecord, unavailable, emptyVaultInfo;
 var init_surfliquid_broker = __esm({
   "src/agents/surfliquid/surfliquid.broker.ts"() {
     "use strict";
@@ -520,6 +520,7 @@ var init_surfliquid_broker = __esm({
     };
     asRecord = (value) => value && typeof value === "object" ? value : {};
     unavailable = (message, details) => new OwneyError("SURF_UNAVAILABLE", message, details, AGENT_ID);
+    emptyVaultInfo = () => normalizeVault(void 0);
   }
 });
 
@@ -527,7 +528,7 @@ var init_surfliquid_broker = __esm({
 function mapMessage(message) {
   const action = SURFLIQUID_ACTION_MAP[message.transactionType];
   if (!action) return [];
-  const base5 = {
+  const base4 = {
     agent: "surfliquid",
     action,
     date: message.timestamp,
@@ -545,9 +546,9 @@ function mapMessage(message) {
   };
   if (DEPOSIT_TRANSACTION_TYPES.has(message.transactionType) && message.toVault?.name && message.amount != null) {
     return [
-      base5,
+      base4,
       {
-        ...base5,
+        ...base4,
         action: "Deposit",
         positions: [
           {
@@ -560,10 +561,20 @@ function mapMessage(message) {
       }
     ];
   }
-  return [base5];
+  return [base4];
+}
+function dedupeMessages(messages) {
+  const seen = /* @__PURE__ */ new Set();
+  return messages.filter((message) => {
+    if (!message.txHash) return true;
+    const key2 = `${message.transactionType}:${message.txHash}`;
+    if (seen.has(key2)) return false;
+    seen.add(key2);
+    return true;
+  });
 }
 function mapHistory(result, _chainId) {
-  const data = result.messages.flatMap(mapMessage);
+  const data = dedupeMessages(result.messages).flatMap(mapMessage);
   const hasMore = result.page < result.pages;
   return {
     data,
@@ -760,7 +771,7 @@ var init_surfliquid_calls = __esm({
 
 // src/agents/surfliquid/surfliquid.sponsorship.ts
 async function resolveVault(ctx) {
-  const registered = await ctx.api.getVault(ctx.wallet.ownerAddress);
+  const registered = await ctx.api.getVault(ctx.wallet.smartAccountAddress);
   const smartAccount = ctx.wallet.smartAccountAddress;
   if (!registered.userVaultAddress) {
     const salt2 = registered.deploymentSalt ?? (await ctx.api.prepare(SURFLIQUID_CHAIN_ID)).salt;
@@ -875,7 +886,7 @@ async function depositSponsored(input) {
 }
 async function withdrawSponsored(input) {
   const { api, chain, wallet, amount } = input;
-  const registered = await api.getVault(wallet.ownerAddress);
+  const registered = await api.getVault(wallet.smartAccountAddress);
   if (!registered.userVaultAddress) {
     throw new Error("SurfLiquid has no vault registered for this wallet");
   }
@@ -1077,10 +1088,11 @@ function pinAccount(provider, address) {
   };
 }
 async function createSponsoredWallet(input) {
-  const entryPoint = { address: import_account_abstraction.entryPoint08Address, version: "0.8" };
-  const account = await (0, import_accounts.toSimpleSmartAccount)({
+  const entryPoint = { address: import_account_abstraction.entryPoint07Address, version: "0.7" };
+  const account = await (0, import_accounts.toSafeSmartAccount)({
     client: publicClientFor(input.rpcUrl),
-    owner: pinAccount(input.provider, input.ownerAddress),
+    owners: [pinAccount(input.provider, input.ownerAddress)],
+    version: "1.4.1",
     entryPoint
   });
   const bundlerTransport = (0, import_viem9.http)(sponsorProxyUrl(input.routingApiBaseUrl), {
@@ -1112,6 +1124,20 @@ async function createSponsoredWallet(input) {
       primaryType: typedData.primaryType,
       message: typedData.message
     }),
+    // The smart account signs (ERC-1271), not the EOA: SurfLiquid's SIWE session must
+    // be the vault owner, which is the smart account. Safe wraps this as a SafeMessage
+    // EIP-712 signature the deployed account verifies via isValidSignature.
+    signMessage: (message) => account.signMessage({ message }),
+    // Deploy-on-connect: the account is counterfactual until its first userOp, but SIWE
+    // (isValidSignature) needs on-chain code. A no-op self-call carries the factory
+    // initCode and deploys it. Idempotency is the caller's (it checks isDeployed first).
+    deployAccount: async () => {
+      const userOpHash = await smartAccountClient.sendUserOperation({
+        calls: [{ to: account.address, value: 0n, data: "0x" }]
+      });
+      const receipt = await smartAccountClient.waitForUserOperationReceipt({ hash: userOpHash });
+      return receipt.receipt.transactionHash;
+    },
     sendCalls: async (calls) => {
       const userOpHash = await smartAccountClient.sendUserOperation({
         calls: calls.map((c) => ({ to: c.to, data: c.data, value: 0n }))
@@ -1166,12 +1192,10 @@ function toOwneyError(error) {
   }
   return new OwneyError("SPONSORSHIP_UNAVAILABLE", message, void 0, AGENT_ID2);
 }
-var import_viem10, import_chains3, AGENT_ID2, WALLET_REJECTED_CODE, DISCOVERY_WALLET2, HISTORY_DEFAULT_LIMIT, APY_WINDOW_KEY2, SurfLiquidAgent;
+var AGENT_ID2, WALLET_REJECTED_CODE, DISCOVERY_WALLET2, HISTORY_DEFAULT_LIMIT, APY_WINDOW_KEY2, SurfLiquidAgent;
 var init_surfliquid_agent = __esm({
   "src/agents/surfliquid/surfliquid.agent.ts"() {
     "use strict";
-    import_viem10 = require("viem");
-    import_chains3 = require("viem/chains");
     init_errors();
     init_surfliquid_constants();
     init_surfliquid_broker();
@@ -1198,6 +1222,9 @@ var init_surfliquid_agent = __esm({
       supportedAssets = SURFLIQUID_SUPPORTED_ASSETS;
       broker = null;
       brokerWallet = null;
+      // The SurfLiquid session and every keyed read run on the smart account (the vault
+      // owner), not the EOA — set by connect(), consumed by the reads below.
+      smartAccountAddress = null;
       // Dedicated instance for the anonymous "0x" asset probe — never shares a slot
       // with the user's broker, so discovery can never evict or overwrite a session.
       discoveryBroker = null;
@@ -1219,17 +1246,22 @@ var init_surfliquid_agent = __esm({
         return this.broker;
       }
       async connect(state, shouldForce = false) {
-        const broker = this.brokerFor(state.walletAddress);
-        if (!shouldForce && broker.hasSession()) return broker;
+        if (!shouldForce && this.broker && this.smartAccountAddress && this.broker.hasSession()) {
+          return this.broker;
+        }
         if (this.connectPromise) return this.connectPromise;
         this.connectPromise = (async () => {
+          const wallet = await this.sponsoredWallet(state);
+          const smartAccountAddress = wallet.smartAccountAddress;
+          this.smartAccountAddress = smartAccountAddress;
+          const broker = this.brokerFor(smartAccountAddress);
+          if (!shouldForce && broker.hasSession()) return broker;
+          const { createSponsoredChain: createSponsoredChain2 } = await Promise.resolve().then(() => (init_surfliquid_smart_account(), surfliquid_smart_account_exports));
+          if (!await createSponsoredChain2(this.config.rpcUrl).isDeployed(smartAccountAddress)) {
+            await wallet.deployAccount();
+          }
           const message = await broker.nonce();
-          const walletClient = (0, import_viem10.createWalletClient)({
-            account: state.walletAddress,
-            chain: import_chains3.base,
-            transport: (0, import_viem10.custom)(state.provider)
-          });
-          const signature = await walletClient.signMessage({ account: state.walletAddress, message });
+          const signature = await wallet.signMessage(message);
           await broker.login(message, signature);
           return broker;
         })();
@@ -1239,6 +1271,10 @@ var init_surfliquid_agent = __esm({
           this.connectPromise = null;
         }
       }
+      /** The SurfLiquid-facing wallet address: the smart account once connected, else the EOA. */
+      surfWallet(state) {
+        return this.smartAccountAddress ?? state.walletAddress;
+      }
       /** A 401 can only surface before any signature (SurfLiquid is never called between sign and submit). */
       async withSession(state, run) {
         try {
@@ -1269,9 +1305,22 @@ var init_surfliquid_agent = __esm({
         this.broker?.clearSession();
         this.broker = null;
         this.brokerWallet = null;
+        this.smartAccountAddress = null;
       }
-      async activateAgent(state, _chainId) {
-        await this.connect(state);
+      // The SDK orchestrator already marks the agent active and sets the chain. SurfLiquid
+      // establishes its session lazily — on the first read of a deployed account, or on
+      // deposit — so merely connecting a wallet never prompts for a signature.
+      async activateAgent(_state, _chainId) {
+      }
+      /** A counterfactual account owns no vault and can't be a SIWE signer yet — reads answer empty. */
+      async isSmartAccountDeployed(state) {
+        if (this.broker?.hasSession()) return true;
+        const wallet = await this.sponsoredWallet(state);
+        this.smartAccountAddress = wallet.smartAccountAddress;
+        const { createSponsoredChain: createSponsoredChain2 } = await Promise.resolve().then(() => (init_surfliquid_smart_account(), surfliquid_smart_account_exports));
+        return createSponsoredChain2(this.config.rpcUrl).isDeployed(
+          wallet.smartAccountAddress
+        );
       }
       // --- IAgent: funds (gasless only) ---
       async deposit(state, _chainId, amount, _asset, _depositCallback) {
@@ -1329,8 +1378,9 @@ var init_surfliquid_agent = __esm({
       }
       // --- IAgent: portfolio reads ---
       async vault(state) {
+        if (!await this.isSmartAccountDeployed(state)) return emptyVaultInfo();
         const broker = await this.connect(state);
-        return this.withSession(state, () => broker.getVault(state.walletAddress));
+        return this.withSession(state, () => broker.getVault(this.surfWallet(state)));
       }
       async getBalances(state, chainId) {
         const vault = await this.vault(state);
@@ -1346,12 +1396,13 @@ var init_surfliquid_agent = __esm({
         return mapAccountApy(await this.vault(state), days);
       }
       async getHistory(state, chainId, options) {
+        if (!await this.isSmartAccountDeployed(state)) return { data: [], hasMore: false };
         const broker = await this.connect(state);
         const page = options?.cursor ? Number(options.cursor) : 1;
         const limit = options?.limit ?? HISTORY_DEFAULT_LIMIT;
         const result = await this.withSession(
           state,
-          () => broker.getAgentMessages(state.walletAddress, page, limit, options?.fromDate, options?.toDate)
+          () => broker.getAgentMessages(this.surfWallet(state), page, limit, options?.fromDate, options?.toDate)
         );
         return mapHistory(result, chainId);
       }
@@ -3590,8 +3641,8 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
 }
 
 // src/client.ts
-var import_viem11 = require("viem");
-var import_chains4 = require("viem/chains");
+var import_viem10 = require("viem");
+var import_chains3 = require("viem/chains");
 
 // src/lib/sponsored-deposit.ts
 init_errors();
@@ -3601,10 +3652,10 @@ init_transfer_auth();
 init_errors();
 var ROUTING_API_BASE_URL3 = "https://owney-routing-api-243946518160.europe-west4.run.app";
 async function postSponsorTransferAuth(input) {
-  const base5 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  const base4 = input.baseUrl ?? ROUTING_API_BASE_URL3;
   let res;
   try {
-    res = await fetch(`${base5}/api/v1/sponsor/erc20-transfer-auth`, {
+    res = await fetch(`${base4}/api/v1/sponsor/erc20-transfer-auth`, {
       method: "POST",
       headers: {
         "content-type": "application/json",
@@ -3641,10 +3692,10 @@ async function postSponsorTransferAuth(input) {
   return parsed.data;
 }
 async function postSponsorPermit2Transfer(input) {
-  const base5 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  const base4 = input.baseUrl ?? ROUTING_API_BASE_URL3;
   let res;
   try {
-    res = await fetch(`${base5}/api/v1/sponsor/permit2-transfer`, {
+    res = await fetch(`${base4}/api/v1/sponsor/permit2-transfer`, {
       method: "POST",
       headers: {
         "content-type": "application/json",
@@ -3679,11 +3730,11 @@ async function postSponsorPermit2Transfer(input) {
   return parsed.data;
 }
 async function getSponsorRelayerAddress(input) {
-  const base5 = input.baseUrl ?? ROUTING_API_BASE_URL3;
+  const base4 = input.baseUrl ?? ROUTING_API_BASE_URL3;
   let res;
   try {
     res = await fetch(
-      `${base5}/api/v1/sponsor/relayer-address?chainId=${input.chainId}`,
+      `${base4}/api/v1/sponsor/relayer-address?chainId=${input.chainId}`,
       {
         headers: { "x-owney-api-key": input.apiKey }
       }
@@ -4110,9 +4161,9 @@ var SPONSORED_USDC_BY_CHAIN = {
   1: "0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48"
 };
 var VIEM_CHAIN2 = {
-  8453: import_chains4.base,
-  42161: import_chains4.arbitrum,
-  1: import_chains4.mainnet
+  8453: import_chains3.base,
+  42161: import_chains3.arbitrum,
+  1: import_chains3.mainnet
 };
 var SPONSORED_WETH_BY_CHAIN = {
   8453: "0x4200000000000000000000000000000000000006",
@@ -4269,14 +4320,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem11.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem10.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem11.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem10.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       })
     });
     if (!onApproved) this.cachedSponsoredCallback = callback;
@@ -4322,14 +4373,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem11.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem10.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem11.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem10.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem11.custom)(provider)
+        transport: (0, import_viem10.custom)(provider)
       })
     });
     if (!onApproved) this.cachedWethSponsoredCallback = callback;
@@ -5448,10 +5499,10 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
-    const wallet = (0, import_viem11.createWalletClient)({
+    const wallet = (0, import_viem10.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem11.custom)(provider)
+      transport: (0, import_viem10.custom)(provider)
     });
     const hash = await wallet.writeContract({
       address: token,
@@ -5461,9 +5512,9 @@ var OwneySDK = class {
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId]
     });
-    const publicClient = (0, import_viem11.createPublicClient)({
+    const publicClient = (0, import_viem10.createPublicClient)({
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem11.custom)(provider)
+      transport: (0, import_viem10.custom)(provider)
     });
     const receipt = await publicClient.waitForTransactionReceipt({
       hash,
@@ -5579,7 +5630,7 @@ init_errors();
 init_debug();
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem12 = require("viem");
+var import_viem11 = require("viem");
 var import_siwe = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -5706,7 +5757,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe.SiweMessage({
-          address: (0, import_viem12.getAddress)(accountAddress),
+          address: (0, import_viem11.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,

package/dist/index.js

@@ -3036,7 +3036,7 @@ var OwneySDK = class {
     }
     if (agentId === "surfliquid") {
       if (!key2) return null;
-      const { SurfLiquidAgent } = await import("./surfliquid.agent-BFBNEQQI.js");
+      const { SurfLiquidAgent } = await import("./surfliquid.agent-YC4VDPPF.js");
       return new SurfLiquidAgent({
         apiKey: this.apiKey,
         routingApiBaseUrl: this.routingApiBaseUrl

package/dist/{surfliquid.agent-BFBNEQQI.js → surfliquid.agent-YC4VDPPF.js}

@@ -13,13 +13,9 @@ import {
   readStuckBalance,
   sweepStuckBalance,
   withdrawSponsored
-} from "./chunk-5W56YOBO.js";
+} from "./chunk-T5YJVIQG.js";
 import "./chunk-AURO3C3R.js";
 
-// src/agents/surfliquid/surfliquid.agent.ts
-import { createWalletClient, custom } from "viem";
-import { base } from "viem/chains";
-
 // src/agents/surfliquid/surfliquid.session-store.ts
 var KEY_PREFIX = "owney.surfliquid.session";
 var EXPIRY_SKEW_MS = 3e4;
@@ -100,6 +96,7 @@ function parseJson(text) {
     return void 0;
   }
 }
+var emptyVaultInfo = () => normalizeVault(void 0);
 function normalizeVault(json) {
   const root = asRecord(json);
   const data = asRecord(root.data);
@@ -146,7 +143,7 @@ function normalizeSupportedAssets(json, chainId) {
 function createSurfBroker(options) {
   const fetchImpl = options.fetchImpl ?? fetch;
   const now = options.now ?? Date.now;
-  const base2 = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
+  const base = `${options.routingApiBaseUrl.replace(/\/$/, "")}/api/v1/surf`;
   const wallet = options.walletAddress;
   let session = readSurfSession(options.apiKey, wallet);
   const vaultMemo = /* @__PURE__ */ new Map();
@@ -165,7 +162,7 @@ function createSurfBroker(options) {
     if (options.origin) headers["origin"] = options.origin;
     let response;
     try {
-      response = await fetchImpl(`${base2}${path}`, {
+      response = await fetchImpl(`${base}${path}`, {
         method,
         headers,
         body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -270,7 +267,7 @@ var DEPOSIT_TRANSACTION_TYPES = /* @__PURE__ */ new Set([
 function mapMessage(message) {
   const action = SURFLIQUID_ACTION_MAP[message.transactionType];
   if (!action) return [];
-  const base2 = {
+  const base = {
     agent: "surfliquid",
     action,
     date: message.timestamp,
@@ -288,9 +285,9 @@ function mapMessage(message) {
   };
   if (DEPOSIT_TRANSACTION_TYPES.has(message.transactionType) && message.toVault?.name && message.amount != null) {
     return [
-      base2,
+      base,
       {
-        ...base2,
+        ...base,
         action: "Deposit",
         positions: [
           {
@@ -303,10 +300,20 @@ function mapMessage(message) {
       }
     ];
   }
-  return [base2];
+  return [base];
+}
+function dedupeMessages(messages) {
+  const seen = /* @__PURE__ */ new Set();
+  return messages.filter((message) => {
+    if (!message.txHash) return true;
+    const key = `${message.transactionType}:${message.txHash}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
 }
 function mapHistory(result, _chainId) {
-  const data = result.messages.flatMap(mapMessage);
+  const data = dedupeMessages(result.messages).flatMap(mapMessage);
   const hasMore = result.page < result.pages;
   return {
     data,
@@ -502,6 +509,9 @@ var SurfLiquidAgent = class {
   supportedAssets = SURFLIQUID_SUPPORTED_ASSETS;
   broker = null;
   brokerWallet = null;
+  // The SurfLiquid session and every keyed read run on the smart account (the vault
+  // owner), not the EOA — set by connect(), consumed by the reads below.
+  smartAccountAddress = null;
   // Dedicated instance for the anonymous "0x" asset probe — never shares a slot
   // with the user's broker, so discovery can never evict or overwrite a session.
   discoveryBroker = null;
@@ -523,17 +533,22 @@ var SurfLiquidAgent = class {
     return this.broker;
   }
   async connect(state, shouldForce = false) {
-    const broker = this.brokerFor(state.walletAddress);
-    if (!shouldForce && broker.hasSession()) return broker;
+    if (!shouldForce && this.broker && this.smartAccountAddress && this.broker.hasSession()) {
+      return this.broker;
+    }
     if (this.connectPromise) return this.connectPromise;
     this.connectPromise = (async () => {
+      const wallet = await this.sponsoredWallet(state);
+      const smartAccountAddress = wallet.smartAccountAddress;
+      this.smartAccountAddress = smartAccountAddress;
+      const broker = this.brokerFor(smartAccountAddress);
+      if (!shouldForce && broker.hasSession()) return broker;
+      const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
+      if (!await createSponsoredChain(this.config.rpcUrl).isDeployed(smartAccountAddress)) {
+        await wallet.deployAccount();
+      }
       const message = await broker.nonce();
-      const walletClient = createWalletClient({
-        account: state.walletAddress,
-        chain: base,
-        transport: custom(state.provider)
-      });
-      const signature = await walletClient.signMessage({ account: state.walletAddress, message });
+      const signature = await wallet.signMessage(message);
       await broker.login(message, signature);
       return broker;
     })();
@@ -543,6 +558,10 @@ var SurfLiquidAgent = class {
       this.connectPromise = null;
     }
   }
+  /** The SurfLiquid-facing wallet address: the smart account once connected, else the EOA. */
+  surfWallet(state) {
+    return this.smartAccountAddress ?? state.walletAddress;
+  }
   /** A 401 can only surface before any signature (SurfLiquid is never called between sign and submit). */
   async withSession(state, run) {
     try {
@@ -559,7 +578,7 @@ var SurfLiquidAgent = class {
     }
   }
   async sponsoredWallet(state) {
-    const { createSponsoredWallet } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredWallet } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     return createSponsoredWallet({
       provider: state.provider,
       ownerAddress: state.walletAddress,
@@ -573,15 +592,28 @@ var SurfLiquidAgent = class {
     this.broker?.clearSession();
     this.broker = null;
     this.brokerWallet = null;
+    this.smartAccountAddress = null;
+  }
+  // The SDK orchestrator already marks the agent active and sets the chain. SurfLiquid
+  // establishes its session lazily — on the first read of a deployed account, or on
+  // deposit — so merely connecting a wallet never prompts for a signature.
+  async activateAgent(_state, _chainId) {
   }
-  async activateAgent(state, _chainId) {
-    await this.connect(state);
+  /** A counterfactual account owns no vault and can't be a SIWE signer yet — reads answer empty. */
+  async isSmartAccountDeployed(state) {
+    if (this.broker?.hasSession()) return true;
+    const wallet = await this.sponsoredWallet(state);
+    this.smartAccountAddress = wallet.smartAccountAddress;
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
+    return createSponsoredChain(this.config.rpcUrl).isDeployed(
+      wallet.smartAccountAddress
+    );
   }
   // --- IAgent: funds (gasless only) ---
   async deposit(state, _chainId, amount, _asset, _depositCallback) {
     const broker = await this.connect(state);
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     try {
       const { txHash, vault } = await this.withSession(
         state,
@@ -596,7 +628,7 @@ var SurfLiquidAgent = class {
   async withdraw(state, _chainId, _token, amount) {
     const broker = await this.connect(state);
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     try {
       const result = await this.withSession(
         state,
@@ -616,14 +648,14 @@ var SurfLiquidAgent = class {
   /** Funds a prior withdrawal's sweep left in the smart account (never reached the EOA). No session needed — pure read. */
   async getStuckBalance(state) {
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     const amount = await readStuckBalance({ chain: createSponsoredChain(this.config.rpcUrl), wallet });
     return { amount: amount.toString(), smartAccountAddress: wallet.smartAccountAddress };
   }
   /** Sweep the stranded balance to the owner's EOA — one sponsored userOp, one signature. */
   async recoverStuckBalance(state) {
     const wallet = await this.sponsoredWallet(state);
-    const { createSponsoredChain } = await import("./surfliquid.smart-account-O6YPCQT3.js");
+    const { createSponsoredChain } = await import("./surfliquid.smart-account-YV3PLZ72.js");
     try {
       const { txHash, amount } = await sweepStuckBalance({ chain: createSponsoredChain(this.config.rpcUrl), wallet });
       return { txHash, type: "full", amount: amount.toString() };
@@ -633,8 +665,9 @@ var SurfLiquidAgent = class {
   }
   // --- IAgent: portfolio reads ---
   async vault(state) {
+    if (!await this.isSmartAccountDeployed(state)) return emptyVaultInfo();
     const broker = await this.connect(state);
-    return this.withSession(state, () => broker.getVault(state.walletAddress));
+    return this.withSession(state, () => broker.getVault(this.surfWallet(state)));
   }
   async getBalances(state, chainId) {
     const vault = await this.vault(state);
@@ -650,12 +683,13 @@ var SurfLiquidAgent = class {
     return mapAccountApy(await this.vault(state), days);
   }
   async getHistory(state, chainId, options) {
+    if (!await this.isSmartAccountDeployed(state)) return { data: [], hasMore: false };
     const broker = await this.connect(state);
     const page = options?.cursor ? Number(options.cursor) : 1;
     const limit = options?.limit ?? HISTORY_DEFAULT_LIMIT;
     const result = await this.withSession(
       state,
-      () => broker.getAgentMessages(state.walletAddress, page, limit, options?.fromDate, options?.toDate)
+      () => broker.getAgentMessages(this.surfWallet(state), page, limit, options?.fromDate, options?.toDate)
     );
     return mapHistory(result, chainId);
   }

package/dist/{surfliquid.smart-account-O6YPCQT3.js → surfliquid.smart-account-YV3PLZ72.js}

@@ -6,14 +6,14 @@ import {
   SURFLIQUID_VAULT_ABI,
   SubmittedError,
   USDC_ABI
-} from "./chunk-5W56YOBO.js";
+} from "./chunk-T5YJVIQG.js";
 import {
   readTokenMeta
 } from "./chunk-AURO3C3R.js";
 
 // src/agents/surfliquid/surfliquid.smart-account.ts
 import { createSmartAccountClient } from "permissionless";
-import { toSimpleSmartAccount } from "permissionless/accounts";
+import { toSafeSmartAccount } from "permissionless/accounts";
 import { createPimlicoClient } from "permissionless/clients/pimlico";
 import {
   createPublicClient,
@@ -21,7 +21,7 @@ import {
   custom,
   http
 } from "viem";
-import { entryPoint08Address } from "viem/account-abstraction";
+import { entryPoint07Address } from "viem/account-abstraction";
 import { base } from "viem/chains";
 var sponsorProxyUrl = (routingApiBaseUrl) => `${routingApiBaseUrl.replace(/\/$/, "")}/api/v1/sponsor/pimlico-rpc/${SURFLIQUID_CHAIN_ID}`;
 function publicClientFor(rpcUrl) {
@@ -77,10 +77,11 @@ function pinAccount(provider, address) {
   };
 }
 async function createSponsoredWallet(input) {
-  const entryPoint = { address: entryPoint08Address, version: "0.8" };
-  const account = await toSimpleSmartAccount({
+  const entryPoint = { address: entryPoint07Address, version: "0.7" };
+  const account = await toSafeSmartAccount({
     client: publicClientFor(input.rpcUrl),
-    owner: pinAccount(input.provider, input.ownerAddress),
+    owners: [pinAccount(input.provider, input.ownerAddress)],
+    version: "1.4.1",
     entryPoint
   });
   const bundlerTransport = http(sponsorProxyUrl(input.routingApiBaseUrl), {
@@ -112,6 +113,20 @@ async function createSponsoredWallet(input) {
       primaryType: typedData.primaryType,
       message: typedData.message
     }),
+    // The smart account signs (ERC-1271), not the EOA: SurfLiquid's SIWE session must
+    // be the vault owner, which is the smart account. Safe wraps this as a SafeMessage
+    // EIP-712 signature the deployed account verifies via isValidSignature.
+    signMessage: (message) => account.signMessage({ message }),
+    // Deploy-on-connect: the account is counterfactual until its first userOp, but SIWE
+    // (isValidSignature) needs on-chain code. A no-op self-call carries the factory
+    // initCode and deploys it. Idempotency is the caller's (it checks isDeployed first).
+    deployAccount: async () => {
+      const userOpHash = await smartAccountClient.sendUserOperation({
+        calls: [{ to: account.address, value: 0n, data: "0x" }]
+      });
+      const receipt = await smartAccountClient.waitForUserOperationReceipt({ hash: userOpHash });
+      return receipt.receipt.transactionHash;
+    },
     sendCalls: async (calls) => {
       const userOpHash = await smartAccountClient.sendUserOperation({
         calls: calls.map((c) => ({ to: c.to, data: c.data, value: 0n }))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.7.22-beta.3",
+  "version": "0.7.22-beta.5",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",