@owney/sdk 0.7.25-beta.15 → 0.7.25-beta.17

package/dist/index.cjs

@@ -404,20 +404,44 @@ function observeWithdrawalSubmission(sdk, chainId, token) {
         };
         const notify = (outcome) => {
           if (outcome === "rejected" && matching.length !== 1) return;
+          const evidence = matching.length === 1 ? { ...request2 } : {
+            attempted: request2.attempted,
+            method: request2.method,
+            path: request2.path,
+            ...request2.elapsedMs !== void 0 ? { elapsedMs: request2.elapsedMs } : {}
+          };
           for (const observer of matching) {
             try {
-              observer.notify(outcome, { ...request2 });
+              observer.notify(outcome, evidence);
             } catch {
             }
           }
         };
         notify("attempted");
+        let callArgs = args;
+        if (withdrawal && client.client?.defaults) {
+          const configIndex = method === "get" ? 1 : 2;
+          const config = args[configIndex];
+          const transforms = config?.transformResponse !== void 0 ? config.transformResponse : client.client.defaults.transformResponse;
+          const captureStatus = (data, _headers, status) => {
+            if (typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599) request2.httpStatus = status;
+            return data;
+          };
+          callArgs = [...args];
+          callArgs[configIndex] = { ...config, transformResponse: [
+            ...Array.isArray(transforms) ? transforms : typeof transforms === "function" ? [transforms] : [],
+            captureStatus
+          ] };
+        }
         try {
-          return await original.apply(this, args);
+          return await original.apply(this, callArgs);
         } catch (error) {
           const message = error instanceof Error ? error.message : "";
-          request2.failure = message === "Unauthorized: Invalid API key" ? "unauthorized" : message === "Forbidden: Access denied" ? "forbidden" : message === "Rate limit exceeded. Please try again later." ? "rate-limited" : /^Idle balance \d+(?:\.\d+)? (USDC|WETH|ETH|EURC) is below the minimum withdrawal of \d+(?:\.\d+)? \1\.?$/.test(message) ? "insufficient-balance" : /^User doesn't have any active session key\.?$/.test(message) ? "session-key-missing" : message === "Network error: Unable to reach the server" ? "network" : "other";
-          if (["unauthorized", "forbidden", "rate-limited", "insufficient-balance", "session-key-missing"].includes(request2.failure)) notify("rejected");
+          const status = error?.response?.status;
+          if (request2.httpStatus === void 0 && typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599)
+            request2.httpStatus = status;
+          request2.failure = message === "Unauthorized: Invalid API key" ? "unauthorized" : message === "Forbidden: Access denied" ? "forbidden" : message === "Rate limit exceeded. Please try again later." ? "rate-limited" : /^Idle balance \d+(?:\.\d+)? (USDC|WETH|ETH|EURC) is below the minimum withdrawal of \d+(?:\.\d+)? \1\.?$/.test(message) ? "insufficient-balance" : /^User doesn't have any active session key\.?$/.test(message) ? "session-key-missing" : method === "post" && request2.httpStatus === 400 && message === "Partial withdrawal already in progress" ? "withdrawal-in-progress" : message === "Network error: Unable to reach the server" ? "network" : "other";
+          if (["unauthorized", "forbidden", "rate-limited", "insufficient-balance", "session-key-missing", "withdrawal-in-progress"].includes(request2.failure) && (request2.httpStatus === void 0 || request2.httpStatus >= 400 && request2.httpStatus < 500)) notify("rejected");
           throw error;
         } finally {
           request2.elapsedMs = Math.max(0, Date.now() - startedAt);
@@ -1495,6 +1519,7 @@ var VIEM_CHAIN = { 8453: import_chains.base, 42161: import_chains.arbitrum, 1: i
 var SPLITTING_ASSETS = ["USDC", "WETH"];
 var POOL_POLICY_CHAIN_IDS = [8453, 42161, 1];
 var EARNINGS_REFRESH_COOLDOWN_MS = 60 * 60 * 1e3;
+var WITHDRAW_BALANCE_TIMEOUT_MS = 2e3;
 var ZyfaiAgent = class _ZyfaiAgent {
   id = "zyfai";
   supportedChainIds = [8453, 42161, 1];
@@ -1549,6 +1574,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
   earningsRefreshes = /* @__PURE__ */ new Map();
   earningsSnapshot = null;
   earningsGeneration = 0;
+  balanceSnapshots = /* @__PURE__ */ new WeakMap();
   constructor(apiKey, rpcUrls, referralSource) {
     this.rpcUrls = resolveRpcUrls(rpcUrls);
     this.sdk = new import_sdk.ZyfaiSDK({
@@ -1752,7 +1778,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
    * chain/account switch fires the provider's `accountsChanged` →
    * `disconnectAccount` (nulls walletClient + authenticatedUserId) while our
    * own `connectAuth` guard still believes this chain is connected and
-   * early-returns. Without this, authenticated calls (depositFunds,
+   * early-returns. Without this, authenticated calls (sendDeposit,
    * withdrawFunds) fail with "No account connected".
    */
   async ensureConnected(state, chainId) {
@@ -2374,7 +2400,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         return { txHash, smartWallet, amount, evidence: evidence2 };
       }
       await this.ensureWalletDeployed(this.getAddress(), validChainId);
-      const raw2 = await this.sdk.depositFunds(
+      const raw2 = await this.sdk.sendDeposit(
         this.getAddress(),
         validChainId,
         amount,
@@ -2390,7 +2416,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         intendedAmount: amount,
         txHash: raw2.txHash,
         transfer: "unknown",
-        registration: "unknown",
+        registration: raw2.registration ? "confirmed" : "unknown",
         delivery: "not-applicable"
       };
       notifyFunding(onProgress, evidence);
@@ -2409,9 +2435,74 @@ var ZyfaiAgent = class _ZyfaiAgent {
     }
   }
   // --- IAgent: Fund operations ---
+  /** Only after a definitive endpoint rejection, combine a new provider
+   * snapshot with the Safe's exact idle balance. Never parse its rounded error
+   * amount as proof of zero, or use this to skip sending a new MAX request. */
+  async assertNotEmptyRejectedWithdrawal(state, chainId, token, owner) {
+    const internals = this.sdk;
+    const generation = this.earningsGeneration;
+    let expired = false;
+    const unavailable = () => new OwneyError(
+      "WITHDRAW_BALANCE_UNAVAILABLE",
+      "Could not verify Zyfai's balance after its withdrawal rejection.",
+      { chainId, token },
+      this.id
+    );
+    const assertScope = () => {
+      if (expired) throw unavailable();
+      const account = internals.walletClient?.account?.address;
+      if (generation !== this.earningsGeneration || state.chainId !== chainId || state.walletAddress.toLowerCase() !== owner.toLowerCase() || this.connectedAddress?.toLowerCase() !== owner.toLowerCase() || this.connectedChainId !== chainId || account && account.toLowerCase() !== owner.toLowerCase())
+        throw new OwneyError("NOT_CONNECTED", "Wallet changed while preparing Zyfai withdrawal.", void 0, this.id);
+    };
+    const read2 = async () => {
+      assertScope();
+      const [wallet, registered, portfolio] = await Promise.all([
+        this.sdk.getSmartWalletAddress(owner, chainId),
+        this.sdk.getSmartWalletByEOA(owner),
+        this.sdk.getPortfolio(owner).catch(() => void 0)
+      ]);
+      assertScope();
+      if (!(0, import_viem4.isAddress)(wallet.address) || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase())
+        throw new OwneyError(
+          "AGENT_AUTH_FAILED",
+          "Could not verify Zyfai's withdrawal wallet.",
+          { reason: "ZYFAI_SESSION_UNAVAILABLE", phase: "prepare", chainId, token },
+          this.id
+        );
+      if (hasEmptyWithdrawalSnapshot(portfolio, chainId, token)) {
+        const asset = SupportedAssets.find((value) => value.chainId === chainId && value.symbol === token);
+        const idle = asset ? await this.getPublicClient(chainId).readContract({
+          address: asset.address,
+          abi: import_viem4.erc20Abi,
+          functionName: "balanceOf",
+          args: [wallet.address]
+        }).catch(() => void 0) : void 0;
+        assertScope();
+        if (idle === 0n) throw new OwneyError(
+          "WITHDRAW_INSUFFICIENT_BALANCE",
+          "No funds remain in Zyfai for this asset.",
+          { available: "0", chainId, token },
+          this.id
+        );
+      }
+    };
+    let timer;
+    try {
+      await Promise.race([read2(), new Promise((_, reject) => {
+        timer = setTimeout(() => {
+          expired = true;
+          reject(unavailable());
+        }, WITHDRAW_BALANCE_TIMEOUT_MS);
+      })]);
+    } finally {
+      expired = true;
+      if (timer) clearTimeout(timer);
+    }
+  }
   /** Called only after the execution endpoint explicitly rejected a request.
    * A timeout or an accepted request never authorizes repair and resubmission. */
   async recoverWithdrawalSession(state, chainId, token, owner) {
+    await this.assertNotEmptyRejectedWithdrawal(state, chainId, token, owner);
     const internals = this.sdk;
     const assertScope = () => {
       const account = internals.walletClient?.account?.address;
@@ -2419,35 +2510,6 @@ var ZyfaiAgent = class _ZyfaiAgent {
         throw new OwneyError("NOT_CONNECTED", "Wallet changed while preparing Zyfai withdrawal.", void 0, this.id);
     };
     assertScope();
-    const [wallet, registered, portfolio] = await Promise.all([
-      this.sdk.getSmartWalletAddress(owner, chainId),
-      this.sdk.getSmartWalletByEOA(owner),
-      this.sdk.getPortfolio(owner).catch(() => void 0)
-    ]);
-    assertScope();
-    if (!(0, import_viem4.isAddress)(wallet.address) || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase())
-      throw new OwneyError(
-        "AGENT_AUTH_FAILED",
-        "Could not verify Zyfai's withdrawal wallet.",
-        { reason: "ZYFAI_SESSION_UNAVAILABLE", phase: "prepare", chainId, token },
-        this.id
-      );
-    if (hasEmptyWithdrawalSnapshot(portfolio, chainId, token)) {
-      const asset = SupportedAssets.find((value) => value.chainId === chainId && value.symbol === token);
-      const idle = asset ? await this.getPublicClient(chainId).readContract({
-        address: asset.address,
-        abi: import_viem4.erc20Abi,
-        functionName: "balanceOf",
-        args: [wallet.address]
-      }).catch(() => void 0) : void 0;
-      assertScope();
-      if (idle === 0n) throw new OwneyError(
-        "WITHDRAW_INSUFFICIENT_BALANCE",
-        "No funds remain in Zyfai for this asset.",
-        { available: "0", chainId, token },
-        this.id
-      );
-    }
     const walletState = await this.readWalletState(owner);
     assertScope();
     const unavailable = () => new OwneyError(
@@ -2499,6 +2561,13 @@ var ZyfaiAgent = class _ZyfaiAgent {
           raw2 = await this.sdk.withdrawFunds(owner, validChainId, amount, token);
           break;
         } catch (error) {
+          if (!amount && observation.rejected() && observation.request()?.failure === "insufficient-balance") {
+            try {
+              await this.assertNotEmptyRejectedWithdrawal(state, validChainId, token, owner);
+            } catch (proofError) {
+              if (proofError instanceof OwneyError && (proofError.code === "WITHDRAW_INSUFFICIENT_BALANCE" || proofError.code === "NOT_CONNECTED")) throw proofError;
+            }
+          }
           if (!observation.rejected() || observation.request()?.failure !== "session-key-missing") throw error;
           if (attempt === 1)
             throw new OwneyError(
@@ -2592,12 +2661,100 @@ var ZyfaiAgent = class _ZyfaiAgent {
   async getFundingWallet(state, chainId) {
     return (await this.sdk.getSmartWalletAddress(state.walletAddress, isValidChainId(chainId))).address;
   }
+  /** A positive Safe balance is a withdrawal planning floor when the portfolio
+   * index reports zero. Idle zero cannot prove that Zyfai's protocol positions
+   * are empty: its SDK does not expose a complete contract catalog for them. */
+  async getWithdrawableBalance(state, chainId, token) {
+    const validChainId = isValidChainId(chainId);
+    const asset = SupportedAssets.find((value) => value.chainId === validChainId && value.symbol === token);
+    if (!asset) throw new OwneyError("WITHDRAW_NO_PERMITTED_TOKENS", "Asset selected is not supported", void 0, this.id);
+    const owner = state.walletAddress;
+    const generation = this.earningsGeneration;
+    const internals = this.sdk;
+    let expired = false;
+    const unavailable = () => new OwneyError(
+      "WITHDRAW_BALANCE_UNAVAILABLE",
+      "Could not verify Zyfai's withdrawal balance. Its vault positions may still contain funds.",
+      { reason: "ZYFAI_VAULT_BALANCE_UNVERIFIED", chainId, token },
+      this.id
+    );
+    const assertScope = () => {
+      if (expired) throw unavailable();
+      const account = internals.walletClient?.account?.address;
+      if (generation !== this.earningsGeneration || this.connectedAddress?.toLowerCase() !== owner.toLowerCase() || this.connectedChainId !== validChainId || state.walletAddress.toLowerCase() !== owner.toLowerCase() || state.chainId !== validChainId || account && account.toLowerCase() !== owner.toLowerCase())
+        throw new OwneyError("NOT_CONNECTED", "Wallet changed while checking Zyfai's withdrawal balance.", void 0, this.id);
+    };
+    let timer;
+    const read2 = async () => {
+      assertScope();
+      const [wallet, registered] = await Promise.all([
+        this.sdk.getSmartWalletAddress(owner, validChainId),
+        this.sdk.getSmartWalletByEOA(owner)
+      ]);
+      assertScope();
+      if (!(0, import_viem4.isAddress)(wallet.address) || wallet.isDeployed !== true || wallet.isOwner !== true || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase()) throw unavailable();
+      const client = this.getPublicClient(validChainId);
+      const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
+      assertScope();
+      const idle = await client.readContract({
+        address: asset.address,
+        abi: import_viem4.erc20Abi,
+        functionName: "balanceOf",
+        args: [wallet.address],
+        blockNumber
+      });
+      assertScope();
+      if (typeof idle !== "bigint" || idle <= 0n) throw unavailable();
+      return idle;
+    };
+    try {
+      return await Promise.race([read2(), new Promise((_, reject) => {
+        timer = setTimeout(() => {
+          expired = true;
+          reject(unavailable());
+        }, WITHDRAW_BALANCE_TIMEOUT_MS);
+      })]);
+    } catch (error) {
+      if (error instanceof OwneyError) throw error;
+      throw unavailable();
+    } finally {
+      expired = true;
+      if (timer) clearTimeout(timer);
+    }
+  }
   async getBalances(state, chainId) {
     const requestedAt = Date.now();
+    const generation = this.earningsGeneration;
     const { smartWallet, chainId: validChainId } = await this.resolveSmartWallet(state, chainId);
     const raw2 = await this.sdk.getPortfolio(this.getAddress());
     const balance = mapBalances(raw2, validChainId, smartWallet);
-    return { ...balance, readMetadata: balance.readMetadata?.map((read2) => ({ ...read2, requestedAt })) };
+    const reads = balance.readMetadata?.map((read2) => ({ ...read2, requestedAt })) ?? [];
+    for (const asset of SupportedAssets.filter((item) => item.chainId === chainId)) {
+      if (!reads.some((read2) => read2.chainId === chainId && read2.asset === asset.symbol) && hasEmptyWithdrawalSnapshot(raw2, chainId, asset.symbol)) {
+        reads.push({ chainId, asset: asset.symbol, requestedAt, fetchedAt: Date.now(), positionsStatus: "available" });
+      }
+    }
+    const result = { ...balance, readMetadata: reads };
+    for (const read2 of reads) this.balanceSnapshots.set(read2, { raw: raw2, generation, owner: state.walletAddress.toLowerCase() });
+    return result;
+  }
+  async verifyWithdrawalBalance(state, evidence, balance) {
+    const read2 = balance.readMetadata?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
+    const snapshot = read2 && this.balanceSnapshots.get(read2);
+    const asset = SupportedAssets.find((item) => item.chainId === evidence.chainId && item.symbol === evidence.token);
+    if (!snapshot || snapshot.generation !== this.earningsGeneration || snapshot.owner !== state.walletAddress.toLowerCase() || !read2 || !asset || !evidence.txHash || !evidence.blockNumber || !balance.smartWallet || balance.smartWallet.toLowerCase() !== evidence.agentWallet?.toLowerCase() || !hasEmptyWithdrawalSnapshot(snapshot.raw, evidence.chainId, evidence.token)) return void 0;
+    const client = this.getPublicClient(evidence.chainId);
+    const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
+    if (blockNumber < BigInt(evidence.blockNumber)) return void 0;
+    const idle = await client.readContract({
+      address: asset.address,
+      abi: import_viem4.erc20Abi,
+      functionName: "balanceOf",
+      args: [balance.smartWallet],
+      blockNumber
+    });
+    if (idle !== 0n || snapshot.generation !== this.earningsGeneration || this.connectedAddress?.toLowerCase() !== snapshot.owner || this.connectedChainId !== evidence.chainId) return void 0;
+    return { ...read2, withdrawalCheck: { txHash: evidence.txHash, blockNumber: blockNumber.toString() } };
   }
   earningsKey(state, chainId, smartWallet) {
     return JSON.stringify([
@@ -2796,7 +2953,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
 };
 
 // src/agents/yieldseeker/yieldseeker.agent.ts
-var import_viem11 = require("viem");
+var import_viem12 = require("viem");
 var import_chains4 = require("viem/chains");
 
 // src/lib/chain-guard.ts
@@ -3580,6 +3737,7 @@ function mapYieldseekerBalances(contexts) {
       chainId: context.agent.chainId,
       asset: context.asset,
       fetchedAt: context.fetchedAt,
+      requestedAt: context.requestedAt,
       readVersion: context.readVersion,
       providerUpdatedAt: context.snapshot.updatedDate,
       snapshotId: String(context.snapshot.agentWalletSnapshotId),
@@ -3957,13 +4115,59 @@ function mapYieldseekerAgentApy(options, days) {
   };
 }
 
-// src/agents/yieldseeker/yieldseeker.wallet-version.ts
+// src/lib/remaining-vault-balance.ts
 var import_viem9 = require("viem");
+async function remainingVaultBalance(client, wallet, asset, vaults, blockNumber) {
+  const addresses = [...new Set(vaults.map((value) => value.toLowerCase()))];
+  if (addresses.length > 64) return void 0;
+  const batches = [];
+  for (let index = 0; index < addresses.length; index += 10) batches.push(addresses.slice(index, index + 10));
+  const values = await Promise.all(batches.map(async (batch) => {
+    const balances = await client.multicall({
+      blockNumber,
+      allowFailure: true,
+      contracts: batch.map((address) => ({
+        address: (0, import_viem9.getAddress)(address),
+        abi: import_viem9.erc20Abi,
+        functionName: "balanceOf",
+        args: [wallet]
+      }))
+    });
+    if (balances.length !== batch.length) return void 0;
+    const funded = [];
+    for (let index = 0; index < batch.length; index++) {
+      const result = balances[index];
+      if (result?.status !== "success" || typeof result.result !== "bigint" || result.result < 0n) return void 0;
+      if (result.result > 0n) funded.push({ address: (0, import_viem9.getAddress)(batch[index]), shares: result.result });
+    }
+    if (!funded.length) return 0n;
+    const valuations = await client.multicall({
+      blockNumber,
+      allowFailure: true,
+      contracts: funded.flatMap(({ address, shares }) => [
+        { address, abi: import_viem9.erc4626Abi, functionName: "asset" },
+        { address, abi: import_viem9.erc4626Abi, functionName: "convertToAssets", args: [shares] }
+      ])
+    });
+    if (valuations.length !== funded.length * 2) return void 0;
+    let total = 0n;
+    for (let index = 0; index < funded.length; index++) {
+      const underlying = valuations[index * 2], value = valuations[index * 2 + 1];
+      if (underlying?.status !== "success" || typeof underlying.result !== "string" || underlying.result.toLowerCase() !== asset.toLowerCase() || value?.status !== "success" || typeof value.result !== "bigint" || value.result < 0n) return void 0;
+      total += value.result;
+    }
+    return total;
+  }));
+  return values.some((value) => value === void 0) ? void 0 : values.reduce((sum, value) => sum + value, 0n);
+}
+
+// src/agents/yieldseeker/yieldseeker.wallet-version.ts
+var import_viem10 = require("viem");
 var YIELDSEEKER_FACTORY = "0x9c7410a0faCAC60850C46eE5b58B518daec95130";
 var YIELDSEEKER_V1_IMPLEMENTATION = "0x32403455357589523435dB18b414057D7cE05051";
 var YIELDSEEKER_V2_IMPLEMENTATION = "0x613Db9c924ADB7A7A90c11b02Cce20c913E3Fe50";
 var ERC1967_IMPLEMENTATION_SLOT = "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc";
-var walletAbi = (0, import_viem9.parseAbi)([
+var walletAbi = (0, import_viem10.parseAbi)([
   "function owner() view returns (address)",
   "function ownerAgentIndex() view returns (uint256)",
   "function baseAsset() view returns (address)",
@@ -3971,7 +4175,7 @@ var walletAbi = (0, import_viem9.parseAbi)([
   "function upgradeToLatest()",
   "event Upgraded(address indexed implementation)"
 ]);
-var factoryAbi = (0, import_viem9.parseAbi)([
+var factoryAbi = (0, import_viem10.parseAbi)([
   "function userWallets(address owner, uint256 index) view returns (address)",
   "function agentWalletImplementation() view returns (address)"
 ]);
@@ -3979,9 +4183,9 @@ function yieldseekerOwnerPath(code) {
   return !code || code === "0x" || /^0xef0100[0-9a-f]{40}$/i.test(code) ? "eoa" : "smart";
 }
 async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNumber) {
-  const agentWallet = (0, import_viem9.getAddress)(wallet);
-  const expectedOwner = (0, import_viem9.getAddress)(owner);
-  const expectedAsset = (0, import_viem9.getAddress)(asset);
+  const agentWallet = (0, import_viem10.getAddress)(wallet);
+  const expectedOwner = (0, import_viem10.getAddress)(owner);
+  const expectedAsset = (0, import_viem10.getAddress)(asset);
   const [code, ownerCode, slot, actualOwner, index, actualAsset, actualFactory, latest] = await Promise.all([
     client.getBytecode({ address: agentWallet, blockNumber }),
     client.getBytecode({ address: expectedOwner, blockNumber }),
@@ -3995,7 +4199,7 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
   if (!code || code === "0x" || !slot || /^0x0+$/.test(slot)) {
     throw new Error("Yieldseeker wallet is not a deployed ERC1967 proxy");
   }
-  const implementation = (0, import_viem9.getAddress)(`0x${slot.slice(-40)}`);
+  const implementation = (0, import_viem10.getAddress)(`0x${slot.slice(-40)}`);
   const mapped = await client.readContract({
     address: YIELDSEEKER_FACTORY,
     abi: factoryAbi,
@@ -4003,8 +4207,8 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
     args: [expectedOwner, index],
     blockNumber
   });
-  const verified = (0, import_viem9.isAddressEqual)(actualOwner, expectedOwner) && (0, import_viem9.isAddressEqual)(actualAsset, expectedAsset) && (0, import_viem9.isAddressEqual)(actualFactory, YIELDSEEKER_FACTORY) && (0, import_viem9.isAddressEqual)(mapped, agentWallet);
-  const version = !verified ? "unknown" : (0, import_viem9.isAddressEqual)(implementation, YIELDSEEKER_V2_IMPLEMENTATION) ? "v2" : (0, import_viem9.isAddressEqual)(implementation, YIELDSEEKER_V1_IMPLEMENTATION) ? "v1" : "unknown";
+  const verified = (0, import_viem10.isAddressEqual)(actualOwner, expectedOwner) && (0, import_viem10.isAddressEqual)(actualAsset, expectedAsset) && (0, import_viem10.isAddressEqual)(actualFactory, YIELDSEEKER_FACTORY) && (0, import_viem10.isAddressEqual)(mapped, agentWallet);
+  const version = !verified ? "unknown" : (0, import_viem10.isAddressEqual)(implementation, YIELDSEEKER_V2_IMPLEMENTATION) ? "v2" : (0, import_viem10.isAddressEqual)(implementation, YIELDSEEKER_V1_IMPLEMENTATION) ? "v1" : "unknown";
   return {
     agentWallet,
     owner: actualOwner,
@@ -4013,13 +4217,13 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
     implementation,
     version,
     verified,
-    upgradeAvailable: version === "v1" && (0, import_viem9.isAddressEqual)(latest, YIELDSEEKER_V2_IMPLEMENTATION)
+    upgradeAvailable: version === "v1" && (0, import_viem10.isAddressEqual)(latest, YIELDSEEKER_V2_IMPLEMENTATION)
   };
 }
 var YIELDSEEKER_UPGRADE_ABI = walletAbi;
 
 // src/agents/yieldseeker/yieldseeker.sponsored-withdraw.ts
-var import_viem10 = require("viem");
+var import_viem11 = require("viem");
 var import_account_abstraction2 = require("viem/account-abstraction");
 var import_accounts = require("viem/accounts");
 var import_chains3 = require("viem/chains");
@@ -4098,7 +4302,7 @@ function rpcDiagnostics(data) {
     details.revertName = data.revertName;
   if (typeof data?.aaCode === "string" && /^AA[0-9]{2}$/.test(data.aaCode)) details.aaCode = data.aaCode;
   if (typeof data?.panicCode === "string" && /^0x[0-9a-fA-F]{1,2}$/.test(data.panicCode)) {
-    const panicCode = (0, import_viem10.toHex)(BigInt(data.panicCode));
+    const panicCode = (0, import_viem11.toHex)(BigInt(data.panicCode));
     if (["0x0", "0x1", "0x11", "0x12", "0x21", "0x22", "0x31", "0x32", "0x41", "0x51"].includes(panicCode))
       details.panicCode = panicCode;
   }
@@ -4318,14 +4522,14 @@ async function submitEoa(input) {
     throw sponsorError("Base did not return EIP-1559 gas fees.", true);
   let operation = {
     sender: input.agentWallet,
-    nonce: (0, import_viem10.toHex)(nonce),
+    nonce: (0, import_viem11.toHex)(nonce),
     initCode: "0x",
     callData: input.callData,
-    callGasLimit: (0, import_viem10.toHex)(3e5),
-    verificationGasLimit: (0, import_viem10.toHex)(3e5),
-    preVerificationGas: (0, import_viem10.toHex)(6e4),
-    maxFeePerGas: (0, import_viem10.toHex)(fees.maxFeePerGas * USER_OP_FEE_HEADROOM),
-    maxPriorityFeePerGas: (0, import_viem10.toHex)(fees.maxPriorityFeePerGas),
+    callGasLimit: (0, import_viem11.toHex)(3e5),
+    verificationGasLimit: (0, import_viem11.toHex)(3e5),
+    preVerificationGas: (0, import_viem11.toHex)(6e4),
+    maxFeePerGas: (0, import_viem11.toHex)(fees.maxFeePerGas * USER_OP_FEE_HEADROOM),
+    maxPriorityFeePerGas: (0, import_viem11.toHex)(fees.maxPriorityFeePerGas),
     paymasterAndData: "0x",
     signature: "0x"
   };
@@ -4333,7 +4537,7 @@ async function submitEoa(input) {
   const stub = await rpc(
     input.rpcUrl,
     "pm_getPaymasterStubData",
-    [operation, ENTRY_POINT_V06, (0, import_viem10.toHex)(8453), {}],
+    [operation, ENTRY_POINT_V06, (0, import_viem11.toHex)(8453), {}],
     "prepare"
   );
   if (!stub.paymasterAndData?.startsWith("0x"))
@@ -4348,7 +4552,7 @@ async function submitEoa(input) {
     const final = await rpc(
       input.rpcUrl,
       "pm_getPaymasterData",
-      [operation, ENTRY_POINT_V06, (0, import_viem10.toHex)(8453), {}],
+      [operation, ENTRY_POINT_V06, (0, import_viem11.toHex)(8453), {}],
       "prepare"
     );
     if (!final.paymasterAndData?.startsWith("0x"))
@@ -4357,10 +4561,10 @@ async function submitEoa(input) {
   }
   const userOpHash = operationHash(operation);
   await assertOwnerSession(input.state, input.owner);
-  const wallet = (0, import_viem10.createWalletClient)({
+  const wallet = (0, import_viem11.createWalletClient)({
     account: input.owner,
     chain: import_chains3.base,
-    transport: (0, import_viem10.custom)(input.state.provider)
+    transport: (0, import_viem11.custom)(input.state.provider)
   });
   const signature = await wallet.signMessage({ message: { raw: userOpHash } });
   operation = { ...operation, signature };
@@ -4437,12 +4641,12 @@ async function submitSmart(input) {
   } catch {
     throw sponsorError("This account cannot check paymaster support on Base.", true);
   }
-  const supportsPaymaster = capabilities?.[(0, import_viem10.toHex)(8453)]?.paymasterService?.supported ?? capabilities?.["8453"]?.paymasterService?.supported ?? capabilities?.["0x0"]?.paymasterService?.supported;
+  const supportsPaymaster = capabilities?.[(0, import_viem11.toHex)(8453)]?.paymasterService?.supported ?? capabilities?.["8453"]?.paymasterService?.supported ?? capabilities?.["0x0"]?.paymasterService?.supported;
   if (supportsPaymaster !== true)
     throw sponsorError("This account cannot use a paymaster on Base.", true);
   await assertOwnerSession(input.state, input.owner);
   let sent;
-  const requestedId = (0, import_viem10.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+  const requestedId = (0, import_viem11.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
   savePending(input.onPending, { callsId: requestedId }, true);
   await checkpoint(input.onBeforeSubmission, { callsId: requestedId });
   try {
@@ -4451,7 +4655,7 @@ async function submitSmart(input) {
       params: [{
         version: "2.0.0",
         from: input.owner,
-        chainId: (0, import_viem10.toHex)(8453),
+        chainId: (0, import_viem11.toHex)(8453),
         id: requestedId,
         atomicRequired: false,
         calls: [{ to: input.agentWallet, value: "0x0", data: input.callData }],
@@ -4526,7 +4730,7 @@ async function submitSmart(input) {
   );
 }
 async function submitYieldseekerSponsoredWithdrawal(input) {
-  const owner = (0, import_viem10.getAddress)(input.state.walletAddress);
+  const owner = (0, import_viem11.getAddress)(input.state.walletAddress);
   const { intent, rpcUrl } = await requestIntent({
     apiKey: input.apiKey,
     routingApiBaseUrl: input.routingApiBaseUrl,
@@ -4544,7 +4748,7 @@ async function submitYieldseekerSponsoredWithdrawal(input) {
   return intent.ownerPath === "eoa" ? submitEoa(args) : submitSmart(args);
 }
 async function submitYieldseekerSponsoredUpgrade(input) {
-  const owner = (0, import_viem10.getAddress)(input.state.walletAddress);
+  const owner = (0, import_viem11.getAddress)(input.state.walletAddress);
   const { intent, rpcUrl } = await requestIntent({
     apiKey: input.apiKey,
     routingApiBaseUrl: input.routingApiBaseUrl,
@@ -4579,6 +4783,8 @@ var YIELDSEEKER_SETTLEMENT_WINDOW_MS = 5 * 6e4;
 var YIELDSEEKER_ACTIVITY_CACHE_MS = 6e4;
 var YIELDSEEKER_MAX_WITHDRAW_SWEEPS = 3;
 var YIELDSEEKER_MAX_POSITION_VERIFICATION_MS = 2e3;
+var YIELDSEEKER_WITHDRAWAL_CANDIDATE_LIMIT = 64;
+var YIELDSEEKER_VAULTS_PER_RPC_BATCH = 10;
 function generateYieldseekerUsername() {
   const suffix = globalThis.crypto.randomUUID().replaceAll("-", "").slice(0, YIELDSEEKER_USERNAME_RANDOM_LENGTH).toLowerCase();
   return `${YIELDSEEKER_USERNAME_PREFIX}${suffix}`;
@@ -4659,6 +4865,8 @@ var YieldseekerAgent = class {
   transactionExecutor;
   unwindReceiptWaiter;
   agentContexts = /* @__PURE__ */ new Map();
+  balanceContexts = /* @__PURE__ */ new WeakMap();
+  balanceVaults = /* @__PURE__ */ new Map();
   users = /* @__PURE__ */ new Map();
   pendingAgents = /* @__PURE__ */ new Map();
   pendingWalletContexts = /* @__PURE__ */ new Map();
@@ -4704,8 +4912,8 @@ var YieldseekerAgent = class {
     if (useCachedV2 && cached && Date.now() - cached.at < 15 * 6e4) return { ...cached.status };
     const status = await readYieldseekerWalletStatus(
       this.getReceiptClient(),
-      (0, import_viem11.getAddress)(context.wallet.walletAddress),
-      (0, import_viem11.getAddress)(state.walletAddress),
+      (0, import_viem12.getAddress)(context.wallet.walletAddress),
+      (0, import_viem12.getAddress)(state.walletAddress),
       YIELDSEEKER_ASSET_METADATA[asset].address
     );
     this.rememberWalletStatus(key2, status);
@@ -4735,12 +4943,12 @@ var YieldseekerAgent = class {
     const pendingKey2 = `owney.yieldseeker.upgrade:${before.owner.toLowerCase()}:${before.agentWallet.toLowerCase()}`;
     const confirmUpgrade = async (hash, receipt2) => {
       this.withdrawalVersionCache.delete(versionKey);
-      const upgradeTopic = (0, import_viem11.encodeEventTopics)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded" })[0];
+      const upgradeTopic = (0, import_viem12.encodeEventTopics)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded" })[0];
       const lastUpgrade = receipt2?.logs.filter((log) => log.address.toLowerCase() === before.agentWallet.toLowerCase() && log.topics[0] === upgradeTopic).at(-1);
       const expectedUpgrade = (() => {
         if (!lastUpgrade || lastUpgrade.removed) return false;
         try {
-          const event = (0, import_viem11.decodeEventLog)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded", data: lastUpgrade.data, topics: lastUpgrade.topics });
+          const event = (0, import_viem12.decodeEventLog)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded", data: lastUpgrade.data, topics: lastUpgrade.topics });
           return event.args.implementation.toLowerCase() === YIELDSEEKER_V2_IMPLEMENTATION.toLowerCase();
         } catch {
           return false;
@@ -4858,7 +5066,7 @@ var YieldseekerAgent = class {
         { version: before.version },
         this.id
       );
-    const data = (0, import_viem11.encodeFunctionData)({ abi: YIELDSEEKER_UPGRADE_ABI, functionName: "upgradeToLatest" });
+    const data = (0, import_viem12.encodeFunctionData)({ abi: YIELDSEEKER_UPGRADE_ABI, functionName: "upgradeToLatest" });
     let txHash;
     let receipt;
     if (gasMode === "sponsored") {
@@ -4901,7 +5109,7 @@ var YieldseekerAgent = class {
       }
     } else {
       txHash = await this.submitTransaction(state, chainId, {
-        from: (0, import_viem11.getAddress)(state.walletAddress),
+        from: (0, import_viem12.getAddress)(state.walletAddress),
         to: before.agentWallet,
         data,
         value: "0",
@@ -4924,6 +5132,7 @@ var YieldseekerAgent = class {
     }
     this.users.clear();
     this.agentContexts.clear();
+    this.balanceVaults.clear();
     this.pendingAgents.clear();
     this.pendingWalletContexts.clear();
     this.readCache.clear();
@@ -4987,12 +5196,12 @@ var YieldseekerAgent = class {
     } else {
       try {
         txHash = await this.submitTransaction(state, chainId, {
-          from: (0, import_viem11.getAddress)(state.walletAddress),
+          from: (0, import_viem12.getAddress)(state.walletAddress),
           to: YIELDSEEKER_ASSET_METADATA[asset].address,
-          data: (0, import_viem11.encodeFunctionData)({
-            abi: import_viem11.erc20Abi,
+          data: (0, import_viem12.encodeFunctionData)({
+            abi: import_viem12.erc20Abi,
             functionName: "transfer",
-            args: [(0, import_viem11.getAddress)(context.wallet.walletAddress), BigInt(amount)]
+            args: [(0, import_viem12.getAddress)(context.wallet.walletAddress), BigInt(amount)]
           }),
           value: "0",
           chainId
@@ -5102,81 +5311,99 @@ var YieldseekerAgent = class {
     let settlement = null;
     try {
       const maxSettlementBasis = amount === void 0 ? this.snapshotMovement(state, chainId, context, 0n) : null;
-      this.advancePortfolioVersion(this.contextKey(state, chainId, asset));
-      const portfolioRead = amount === void 0 ? this.loadActivityContext(state, chainId, context, {}).then((value) => ({ positions: value.positions, feeRateBps: 0 })) : this.loadPortfolioContext(state, chainId, context).then((value) => ({ positions: value.positions, feeRateBps: value.snapshot.feeRateBps }));
+      const contextKey = this.contextKey(state, chainId, asset);
+      const priorPositions = this.withdrawalVaultHints(state, chainId, context);
+      this.advancePortfolioVersion(contextKey);
+      const boundedVerification = async (read2, timeoutMs = YIELDSEEKER_MAX_POSITION_VERIFICATION_MS) => {
+        let timer;
+        try {
+          return await Promise.race([read2, new Promise((resolve) => {
+            timer = setTimeout(() => resolve(void 0), Math.max(0, timeoutMs));
+          })]);
+        } finally {
+          if (timer) clearTimeout(timer);
+        }
+      };
+      const feeRateRead = amount === void 0 ? Promise.resolve(0) : boundedVerification(
+        (() => {
+          try {
+            return this.portfolioSnapshot(state, chainId, context, contextKey).read.then((value) => value.agentSnapshot.feeRateBps);
+          } catch (error) {
+            return Promise.reject(error);
+          }
+        })().catch(() => void 0)
+      );
+      const positionsRead = this.readWithdrawalPositions(state, chainId, context);
       const metadata = YIELDSEEKER_ASSET_METADATA[asset];
-      const agentWallet = (0, import_viem11.getAddress)(context.wallet.walletAddress);
-      const feeTrackerRead = withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
-        address: agentWallet,
-        abi: YIELDSEEKER_AGENT_WALLET_ABI,
-        functionName: "feeTracker"
-      }), chainId, "eth_call", this.id);
-      const readOwnerFunds = async () => {
-        const feeTracker = await feeTrackerRead;
+      const agentWallet = (0, import_viem12.getAddress)(context.wallet.walletAddress);
+      const readOwnerFunds = async (blockNumber) => {
+        const feeTracker = await withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
+          address: agentWallet,
+          abi: YIELDSEEKER_AGENT_WALLET_ABI,
+          functionName: "feeTracker",
+          blockNumber
+        }), chainId, "eth_call", this.id);
         this.assertSession(generation, chainId, asset);
-        if (!(0, import_viem11.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker))
+        if (!(0, import_viem12.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker))
           throw this.invalidResponse("wallet fee tracker");
         const [idle2, fees] = await Promise.all([
           withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
             address: metadata.address,
-            abi: import_viem11.erc20Abi,
+            abi: import_viem12.erc20Abi,
             functionName: "balanceOf",
-            args: [agentWallet]
+            args: [agentWallet],
+            blockNumber
           }), chainId, "eth_call", this.id),
           withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
-            address: (0, import_viem11.getAddress)(feeTracker),
+            address: (0, import_viem12.getAddress)(feeTracker),
             abi: YIELDSEEKER_FEE_TRACKER_ABI,
             functionName: "getFeesOwed",
-            args: [agentWallet]
+            args: [agentWallet],
+            blockNumber
           }), chainId, "eth_call", this.id)
         ]);
         this.assertSession(generation, chainId, asset);
         if (typeof idle2 !== "bigint" || idle2 < 0n || typeof fees !== "bigint" || fees < 0n)
           throw this.invalidResponse("wallet withdrawal balance");
-        return { idle: idle2, fees, available: idle2 > fees ? idle2 - fees : 0n };
+        return { blockNumber, idle: idle2, fees, available: idle2 > fees ? idle2 - fees : 0n };
       };
-      const [portfolio, initialFunds] = await Promise.all([portfolioRead, readOwnerFunds()]);
+      const [funds, feeRateBps] = await Promise.all([
+        positionsRead.then((positions2) => this.resolveWithdrawalLiquidity(
+          state,
+          chainId,
+          context,
+          positions2,
+          priorPositions,
+          amount === void 0 ? void 0 : BigInt(amount)
+        )),
+        feeRateRead
+      ]);
+      const initialFunds = funds;
       const idle = initialFunds.idle;
-      let positions = portfolio.positions;
+      const maxLiquidity = amount === void 0 ? funds : void 0;
+      let positions = [...funds.positions, ...funds.indexedPositions.filter((position2) => !funds.verifiedVaults.includes(position2.yieldOption.address.toLowerCase()))];
       let positionsStatus = "empty";
-      const validatePositions = (values) => {
-        const seen = /* @__PURE__ */ new Set();
-        for (const value of values) {
-          const address = value?.yieldOption?.address;
-          if (typeof address !== "string" || !(0, import_viem11.isAddress)(address) || seen.has(address.toLowerCase()) || typeof value.assetsRaw !== "string" || !/^\d+$/.test(value.assetsRaw) || typeof value.withdrawableAssetsRaw !== "string" || !/^\d+$/.test(value.withdrawableAssetsRaw))
-            throw this.invalidResponse("yield positions");
-          seen.add(address.toLowerCase());
-        }
-        return values;
-      };
+      const validatePositions = (values) => this.validateWithdrawalPositions(values, chainId, asset);
+      validatePositions(positions);
       const zeroValuePositions = /* @__PURE__ */ new WeakSet();
       const hasPositions = (values) => values.some((position2) => !zeroValuePositions.has(position2) && (BigInt(position2.assetsRaw) > 0n || BigInt(position2.withdrawableAssetsRaw) > 0n));
       const knownPositions = /* @__PURE__ */ new Map();
       const rememberPositions = (values) => {
         for (const position2 of values) knownPositions.set(position2.yieldOption.address.toLowerCase(), position2);
       };
-      const boundedVerification = async (read2, timeoutMs = YIELDSEEKER_MAX_POSITION_VERIFICATION_MS) => {
-        let timer;
-        try {
-          return await Promise.race([read2, new Promise((resolve) => {
-            timer = setTimeout(() => resolve(void 0), Math.max(0, timeoutMs));
-          })]);
-        } finally {
-          if (timer) clearTimeout(timer);
-        }
-      };
       const verifyKnownPositions = async (blockNumber, values = [...knownPositions.values()], timeoutMs = YIELDSEEKER_MAX_POSITION_VERIFICATION_MS) => {
         const verifiedPositions = [];
         if (timeoutMs <= 0) return { verified: false, positions: verifiedPositions };
-        const reads = values.map(async (position2) => {
-          const address = (0, import_viem11.getAddress)(position2.yieldOption.address);
+        let active = true;
+        const checks = this.readVaultLiquidity(values.map((position2) => position2.yieldOption), agentWallet, blockNumber).catch(() => []);
+        const reads = values.map(async (position2, index) => {
+          const address = (0, import_viem12.getAddress)(position2.yieldOption.address);
           try {
-            const [underlying, shares, withdrawable] = await Promise.all([
-              this.getReceiptClient().readContract({ address, abi: import_viem11.erc4626Abi, functionName: "asset", blockNumber }),
-              this.getReceiptClient().readContract({ address, abi: import_viem11.erc20Abi, functionName: "balanceOf", args: [agentWallet], blockNumber }),
-              this.getReceiptClient().readContract({ address, abi: import_viem11.erc4626Abi, functionName: "maxWithdraw", args: [agentWallet], blockNumber })
-            ]);
-            if (typeof underlying !== "string" || !(0, import_viem11.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n) return null;
+            const group = (await checks).slice(index * 3, index * 3 + 3);
+            if (!active || group.length !== 3 || group.some((value) => value.status !== "success")) return null;
+            this.assertSession(generation, chainId, asset);
+            const [underlying, shares, withdrawable] = group.map((value) => value.result);
+            if (typeof underlying !== "string" || !(0, import_viem12.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n) return null;
             const verified = { ...position2, assetsRaw: shares.toString(), withdrawableAssetsRaw: withdrawable.toString() };
             if (shares > 0n && withdrawable === 0n) {
               let positiveValue = false;
@@ -5184,7 +5411,7 @@ var YieldseekerAgent = class {
                 try {
                   const value = await this.getReceiptClient().readContract({
                     address,
-                    abi: import_viem11.erc4626Abi,
+                    abi: import_viem12.erc4626Abi,
                     functionName,
                     args: [shares],
                     blockNumber
@@ -5210,6 +5437,7 @@ var YieldseekerAgent = class {
           }
         });
         const result = await boundedVerification(Promise.all(reads), timeoutMs);
+        active = false;
         this.assertSession(generation, chainId, asset);
         return {
           verified: result !== void 0 && result.every((position2) => position2 !== null),
@@ -5228,7 +5456,7 @@ var YieldseekerAgent = class {
         return validatePositions(response.yieldPositions);
       };
       if (amount === void 0) {
-        validatePositions(positions);
+        rememberPositions(funds.indexedPositions);
         rememberPositions(positions);
         positionsStatus = hasPositions(positions) ? "remaining" : "empty";
       }
@@ -5244,8 +5472,8 @@ var YieldseekerAgent = class {
         const zeroPayoutCandidates = positions.filter((position2) => BigInt(position2.assetsRaw) > 0n || BigInt(position2.withdrawableAssetsRaw) > 0n);
         if (amount === void 0 && zeroPayoutCandidates.length) {
           const deadline = Date.now() + YIELDSEEKER_MAX_POSITION_VERIFICATION_MS;
-          const blockNumber = await boundedVerification(
-            Promise.resolve().then(() => this.getReceiptClient().getBlockNumber()).catch(() => void 0)
+          const blockNumber = initialFunds.blockNumber ?? await boundedVerification(
+            Promise.resolve().then(() => this.getReceiptClient().getBlockNumber({ cacheTime: 0 })).catch(() => void 0)
           );
           const proof = typeof blockNumber === "bigint" ? await verifyKnownPositions(blockNumber, zeroPayoutCandidates, deadline - Date.now()) : { verified: false, positions: [] };
           positions = proof.positions;
@@ -5369,8 +5597,9 @@ var YieldseekerAgent = class {
           remaining: remaining.toString()
         });
       }
-      const availableForOwner = confirmedMovement ? (await readOwnerFunds()).available : initialFunds.available;
-      const feeRate = portfolio.feeRateBps;
+      const ownerFunds = confirmedMovement ? await readOwnerFunds(latestUnwindBlock) : initialFunds;
+      const availableForOwner = ownerFunds.available;
+      const feeRate = feeRateBps ?? 0;
       const maxFee = confirmedMovement && Number.isInteger(feeRate) && feeRate >= 0 && feeRate <= 1e3 ? (grossUnwound * BigInt(feeRate) + 9999n) / 10000n : 0n;
       const shortfall = availableForOwner < requested ? requested - availableForOwner : 0n;
       if (availableForOwner === 0n || amount !== void 0 && shortfall > maxFee) {
@@ -5395,14 +5624,14 @@ var YieldseekerAgent = class {
         delta: maxSettlementBasis.delta - payout,
         expectedNetDeposits: maxSettlementBasis.expectedNetDeposits - payout
       } : this.snapshotMovement(state, chainId, context, -payout);
-      const account = (0, import_viem11.getAddress)(state.walletAddress);
+      const account = (0, import_viem12.getAddress)(state.walletAddress);
       let receipt;
       const base6 = { agentId: this.id, chainId, token: asset, walletAddress: state.walletAddress, agentWallet: context.wallet.walletAddress, intendedAmount: amount === void 0 ? "MAX" : payout.toString(), transfer: "pending", registration: "not-applicable", delivery: "pending" };
-      const data = amount === void 0 ? (0, import_viem11.encodeFunctionData)({
+      const data = amount === void 0 ? (0, import_viem12.encodeFunctionData)({
         abi: YIELDSEEKER_AGENT_WALLET_ABI,
         functionName: "withdrawAllAssetToUser",
         args: [account, metadata.address]
-      }) : (0, import_viem11.encodeFunctionData)({
+      }) : (0, import_viem12.encodeFunctionData)({
         abi: YIELDSEEKER_AGENT_WALLET_ABI,
         functionName: "withdrawAssetToUser",
         args: [account, metadata.address, payout]
@@ -5418,7 +5647,7 @@ var YieldseekerAgent = class {
           refreshYieldseekerSignature: (rejected) => this.auth.refreshToken(state, chainId, rejected),
           userId: context.user.userId,
           agentId: context.agent.agentId,
-          agentWallet: (0, import_viem11.getAddress)(context.wallet.walletAddress),
+          agentWallet: (0, import_viem12.getAddress)(context.wallet.walletAddress),
           asset: metadata.address,
           callData: data,
           onPending: (pending) => notifyFunding(onProgress, { ...base6, ...pending }),
@@ -5433,7 +5662,7 @@ var YieldseekerAgent = class {
         onOwnerTransferAttempted?.();
         txHash = await this.submitTransaction(state, chainId, {
           from: account,
-          to: (0, import_viem11.getAddress)(context.wallet.walletAddress),
+          to: (0, import_viem12.getAddress)(context.wallet.walletAddress),
           data,
           value: "0",
           chainId
@@ -5445,7 +5674,7 @@ var YieldseekerAgent = class {
       settlement = plannedMovement;
       const evidence = receipt ? inspectFundingReceipt(receipt, { ...base6, txHash }, metadata.address, "withdraw") : { ...base6, txHash, confirmedAmount: payout.toString(), transfer: "confirmed", delivery: "confirmed" };
       notifyFunding(onProgress, evidence);
-      let completion;
+      let completion = maxLiquidity && !maxLiquidity.complete ? "unverified" : void 0;
       if (amount === void 0) {
         const verificationDeadline = Date.now() + YIELDSEEKER_MAX_POSITION_VERIFICATION_MS;
         const knownAtPayout = new Set(knownPositions.keys());
@@ -5492,10 +5721,14 @@ var YieldseekerAgent = class {
           { asset, available: "0", txHash },
           this.id
         );
+      const confirmedAmount = evidence.confirmedAmount && /^\d+$/.test(evidence.confirmedAmount) ? BigInt(evidence.confirmedAmount) : void 0;
+      const feeIncrease = ownerFunds.fees - initialFunds.fees;
+      const feeAdjustment = amount !== void 0 && receipt && initialFunds.blockNumber !== void 0 && latestUnwindBlock !== void 0 && initialFunds.blockNumber <= latestUnwindBlock && receipt.blockNumber >= latestUnwindBlock && evidence.transfer === "confirmed" && evidence.delivery === "confirmed" && confirmedAmount === payout && feeIncrease > 0n && feeIncrease <= maxFee && requested - payout === feeIncrease ? { grossAmount: requested.toString(), feeAmount: feeIncrease.toString() } : void 0;
       return {
         txHash,
         type: amount === void 0 && !completion ? "full" : "partial",
         ...completion ? { completion } : {},
+        ...feeAdjustment ? { feeAdjustment } : {},
         amount: evidence.confirmedAmount ?? payout.toString(),
         evidence
       };
@@ -5511,10 +5744,298 @@ var YieldseekerAgent = class {
       }
     }
   }
+  /** A withdrawal-only liquidity floor; display snapshots never authorize it. */
+  async getWithdrawableBalance(state, chainId, asset, minimumAmount) {
+    this.assertChain(chainId);
+    this.assertAsset(asset);
+    const generation = this.readGeneration;
+    const context = await this.findAgent(state, chainId, asset);
+    this.assertSession(generation, chainId, asset);
+    if (!context) throw new OwneyError(
+      "WITHDRAW_BALANCE_UNAVAILABLE",
+      "The Yieldseeker withdrawal wallet could not be verified.",
+      { asset },
+      this.id
+    );
+    const hints = this.withdrawalVaultHints(state, chainId, context);
+    const positions = await this.readWithdrawalPositions(state, chainId, context);
+    const proof = await this.resolveWithdrawalLiquidity(state, chainId, context, positions, hints, minimumAmount);
+    this.assertSession(generation, chainId, asset);
+    if (proof.available === 0n && !proof.complete) throw new OwneyError(
+      "WITHDRAW_BALANCE_UNAVAILABLE",
+      "Yieldseeker withdrawal liquidity could not be verified yet.",
+      { asset },
+      this.id
+    );
+    return proof.available;
+  }
+  async readVaultLiquidity(options, wallet, blockNumber) {
+    const owner = (0, import_viem12.getAddress)(wallet);
+    const batches = Array.from({ length: Math.ceil(options.length / YIELDSEEKER_VAULTS_PER_RPC_BATCH) }, (_, index) => options.slice(index * YIELDSEEKER_VAULTS_PER_RPC_BATCH, (index + 1) * YIELDSEEKER_VAULTS_PER_RPC_BATCH));
+    const results = await Promise.all(batches.map((batch) => this.getReceiptClient().multicall({
+      blockNumber,
+      allowFailure: true,
+      contracts: batch.flatMap((option) => {
+        const address = (0, import_viem12.getAddress)(option.address);
+        return [
+          { address, abi: import_viem12.erc4626Abi, functionName: "asset" },
+          { address, abi: import_viem12.erc20Abi, functionName: "balanceOf", args: [owner] },
+          { address, abi: import_viem12.erc4626Abi, functionName: "maxWithdraw", args: [owner] }
+        ];
+      })
+    })));
+    return results.flat();
+  }
+  validateWithdrawalPositions(values, chainId, asset) {
+    const underlying = YIELDSEEKER_ASSET_METADATA[asset].address.toLowerCase();
+    const seen = /* @__PURE__ */ new Set();
+    for (const value of values) {
+      const option = value?.yieldOption;
+      if (!option || typeof option.address !== "string" || !(0, import_viem12.isAddress)(option.address) || seen.has(option.address.toLowerCase()) || option.chainId !== void 0 && option.chainId !== chainId || option.assetAddress !== void 0 && (typeof option.assetAddress !== "string" || option.assetAddress.toLowerCase() !== underlying) || typeof value.assetsRaw !== "string" || !/^\d+$/.test(value.assetsRaw) || typeof value.withdrawableAssetsRaw !== "string" || !/^\d+$/.test(value.withdrawableAssetsRaw))
+        throw this.invalidResponse("yield positions");
+      seen.add(option.address.toLowerCase());
+    }
+    return values;
+  }
+  withdrawalVaultHints(state, chainId, context) {
+    const key2 = this.contextKey(state, chainId, context.asset);
+    const positions = this.readCache.get(`positions:${key2}`)?.value?.yieldPositions ?? [];
+    const hints = new Map(this.validateWithdrawalPositions(positions, chainId, context.asset).map((position2) => [position2.yieldOption.address.toLowerCase(), position2]));
+    const historic = this.readCache.get(`historic:${key2}`)?.value?.position;
+    const receivedAssets = new Set((historic?.movements ?? []).filter((movement) => movement.chainId === chainId && movement.agentWalletId === context.wallet.agentWalletId && movement.toAddress?.toLowerCase() === context.wallet.walletAddress.toLowerCase()).filter((movement) => typeof movement.assetAddress === "string").map((movement) => movement.assetAddress.toLowerCase()));
+    for (const option of this.yieldOptions.get(context.asset)?.value ?? []) {
+      if (option.chainId !== chainId || typeof option.assetAddress !== "string" || option.assetAddress.toLowerCase() !== YIELDSEEKER_ASSET_METADATA[context.asset].address.toLowerCase() || !(0, import_viem12.isAddress)(option.address) || !receivedAssets.has(option.address.toLowerCase()) || hints.has(option.address.toLowerCase())) continue;
+      hints.set(option.address.toLowerCase(), {
+        yieldOption: option,
+        assetsRaw: "0",
+        assetsBase: "0",
+        assetsUsd: 0,
+        withdrawableAssetsRaw: "0",
+        withdrawableAssetsBase: "0"
+      });
+    }
+    return [...hints.values()];
+  }
+  async readWithdrawalPositions(state, chainId, context) {
+    const generation = this.readGeneration;
+    let timer;
+    try {
+      const positions = await Promise.race([
+        this.loadActivityContext(state, chainId, context, {}).then((value) => value.positions).catch((error) => {
+          if (!(error instanceof OwneyError) || !["AGENT_API_ERROR", "AGENT_TIMEOUT"].includes(error.code)) throw error;
+          return void 0;
+        }),
+        new Promise((resolve) => {
+          timer = setTimeout(() => resolve(void 0), YIELDSEEKER_MAX_POSITION_VERIFICATION_MS);
+        })
+      ]);
+      this.assertSession(generation, chainId, context.asset);
+      return positions === void 0 ? void 0 : this.validateWithdrawalPositions(positions, chainId, context.asset);
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
+  async resolveWithdrawalLiquidity(state, chainId, context, positions, previousPositions = [], requested) {
+    const generation = this.readGeneration;
+    const contextKey = this.contextKey(state, chainId, context.asset);
+    const version = this.portfolioVersion(contextKey);
+    const metadata = YIELDSEEKER_ASSET_METADATA[context.asset];
+    const unavailable = () => new OwneyError(
+      "WITHDRAW_BALANCE_UNAVAILABLE",
+      "Yieldseeker withdrawal liquidity could not be verified yet.",
+      { asset: context.asset, reason: "YIELDSEEKER_LIQUIDITY_UNVERIFIED" },
+      this.id
+    );
+    let active = true;
+    let knownProof;
+    const hasUnverifiedIndexedFunds = (proof) => proof.indexedPositions.some((position2) => !proof.verifiedVaults.includes(position2.yieldOption.address.toLowerCase()) && BigInt(position2.withdrawableAssetsRaw) > 0n);
+    const assertReadCurrent = () => {
+      this.assertSession(generation, chainId, context.asset);
+      if (!active || this.portfolioVersion(contextKey) !== version) throw unavailable();
+    };
+    const read2 = async () => {
+      const client = this.getReceiptClient();
+      const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
+      const wallet = (0, import_viem12.getAddress)(context.wallet.walletAddress);
+      assertReadCurrent();
+      if (typeof blockNumber !== "bigint") throw unavailable();
+      const indexedPositions = this.validateWithdrawalPositions(positions ?? [], chainId, context.asset);
+      const candidates = /* @__PURE__ */ new Map();
+      for (const position2 of this.validateWithdrawalPositions([...previousPositions], chainId, context.asset))
+        candidates.set(position2.yieldOption.address.toLowerCase(), position2.yieldOption);
+      for (const position2 of indexedPositions) candidates.set(position2.yieldOption.address.toLowerCase(), position2.yieldOption);
+      const options = [...candidates.values()];
+      if (options.length > YIELDSEEKER_WITHDRAWAL_CANDIDATE_LIMIT) throw unavailable();
+      const [checks, idle, feeTracker] = await Promise.all([
+        this.readVaultLiquidity(options, wallet, blockNumber),
+        client.readContract({
+          address: metadata.address,
+          abi: import_viem12.erc20Abi,
+          functionName: "balanceOf",
+          args: [wallet],
+          blockNumber
+        }),
+        client.readContract({
+          address: wallet,
+          abi: YIELDSEEKER_AGENT_WALLET_ABI,
+          functionName: "feeTracker",
+          blockNumber
+        })
+      ]);
+      if (typeof idle !== "bigint" || idle < 0n || !(0, import_viem12.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker)) throw unavailable();
+      assertReadCurrent();
+      const fees = await client.readContract({
+        address: (0, import_viem12.getAddress)(feeTracker),
+        abi: YIELDSEEKER_FEE_TRACKER_ABI,
+        functionName: "getFeesOwed",
+        args: [wallet],
+        blockNumber
+      });
+      if (typeof fees !== "bigint" || fees < 0n) throw unavailable();
+      const verified = [];
+      const verifiedVaults = [];
+      let deployed = 0n;
+      const collect = (options2, results) => {
+        assertReadCurrent();
+        const known = this.balanceVaults.get(contextKey) ?? /* @__PURE__ */ new Set();
+        this.balanceVaults.set(contextKey, known);
+        let valid2 = true;
+        options2.forEach((option, index) => {
+          const group = results.slice(index * 3, index * 3 + 3);
+          const shareProbe = group[1];
+          if (shareProbe?.status === "success" && typeof shareProbe.result === "bigint" && shareProbe.result > 0n)
+            known.add(option.address.toLowerCase());
+          if (group.length !== 3 || group.some((value) => value.status !== "success")) {
+            valid2 = false;
+            return;
+          }
+          const [underlying, shares, withdrawable] = group.map((value) => value.result);
+          if (typeof underlying !== "string" || !(0, import_viem12.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n || shares === 0n && withdrawable > 0n) {
+            valid2 = false;
+            return;
+          }
+          verifiedVaults.push(option.address.toLowerCase());
+          deployed += withdrawable;
+          verified.push({
+            yieldOption: option,
+            assetsRaw: shares.toString(),
+            assetsBase: "0",
+            assetsUsd: 0,
+            withdrawableAssetsRaw: withdrawable.toString(),
+            withdrawableAssetsBase: withdrawable.toString()
+          });
+        });
+        return valid2;
+      };
+      const allKnownVerified = collect(options, checks);
+      const proof = (complete) => ({
+        blockNumber,
+        idle,
+        fees,
+        available: idle + deployed > fees ? idle + deployed - fees : 0n,
+        positions: [...verified],
+        verifiedVaults: [...verifiedVaults],
+        indexedPositions,
+        complete
+      });
+      knownProof = proof(false);
+      const indexed = new Map(indexedPositions.map((position2) => [position2.yieldOption.address.toLowerCase(), position2]));
+      const discrepancy = verified.some((position2) => {
+        const row = indexed.get(position2.yieldOption.address.toLowerCase());
+        return row ? BigInt(position2.withdrawableAssetsRaw) < BigInt(row.withdrawableAssetsRaw) : BigInt(position2.assetsRaw) > 0n;
+      });
+      const typedCoveredByIdle = requested !== void 0 && idle >= requested + fees;
+      const expand = positions === void 0 || indexedPositions.length === 0 && !typedCoveredByIdle || !allKnownVerified || discrepancy || knownProof.available === 0n || requested !== void 0 && requested > knownProof.available;
+      if (!expand) {
+        assertReadCurrent();
+        return proof(true);
+      }
+      const catalog = await this.loadYieldOptions(context.asset).catch(() => void 0);
+      assertReadCurrent();
+      const eligible = /* @__PURE__ */ new Map();
+      for (const option of catalog ?? []) {
+        if (option?.chainId === chainId && typeof option.assetAddress === "string" && option.assetAddress.toLowerCase() === metadata.address.toLowerCase() && (0, import_viem12.isAddress)(option.address))
+          eligible.set(option.address.toLowerCase(), option);
+      }
+      const extra = [...eligible].filter(([address]) => !candidates.has(address)).map(([, option]) => option);
+      if (options.length + extra.length > YIELDSEEKER_WITHDRAWAL_CANDIDATE_LIMIT) throw unavailable();
+      const allExtraVerified = collect(extra, await this.readVaultLiquidity(extra, wallet, blockNumber));
+      assertReadCurrent();
+      const result = proof(eligible.size > 0 && allKnownVerified && allExtraVerified);
+      if (result.available === 0n && !result.complete && !hasUnverifiedIndexedFunds(result)) throw unavailable();
+      return result;
+    };
+    let timer;
+    try {
+      return await Promise.race([read2(), new Promise((_, reject) => {
+        timer = setTimeout(() => reject(unavailable()), YIELDSEEKER_MAX_POSITION_VERIFICATION_MS);
+      })]);
+    } catch (error) {
+      assertReadCurrent();
+      if (knownProof && (knownProof.available > 0n || hasUnverifiedIndexedFunds(knownProof)) && (!(error instanceof OwneyError) || error.code === "WITHDRAW_BALANCE_UNAVAILABLE")) return knownProof;
+      if (error instanceof OwneyError) throw error;
+      throw unavailable();
+    } finally {
+      active = false;
+      if (timer) clearTimeout(timer);
+    }
+  }
   async getBalances(state, chainId, asset) {
     this.assertChain(chainId);
     if (asset !== void 0) this.assertAsset(asset);
-    return mapYieldseekerBalances(await this.loadPortfolio(state, chainId, { asset, allowMissingPositions: true }));
+    const contexts = await this.loadPortfolio(state, chainId, { asset, allowMissingPositions: true });
+    const balance = mapYieldseekerBalances(contexts);
+    for (const context of contexts) {
+      const read2 = balance.readMetadata.find((item) => item.asset === context.asset);
+      this.balanceContexts.set(read2, { context, generation: this.readGeneration });
+      const key2 = this.contextKey(state, chainId, context.asset);
+      const known = this.balanceVaults.get(key2) ?? /* @__PURE__ */ new Set();
+      for (const position2 of context.positions) known.add(position2.yieldOption.address.toLowerCase());
+      this.balanceVaults.set(key2, known);
+    }
+    return balance;
+  }
+  async verifyWithdrawalBalance(state, evidence, balance) {
+    this.assertAsset(evidence.token);
+    this.assertChain(evidence.chainId);
+    const read2 = balance.readMetadata?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
+    const cached = read2 && this.balanceContexts.get(read2);
+    const context = cached?.generation === this.readGeneration ? cached.context : void 0;
+    if (!context || context.positionsUnavailable || !read2 || !evidence.blockNumber || !evidence.txHash || context.wallet.walletAddress.toLowerCase() !== evidence.agentWallet?.toLowerCase()) return void 0;
+    const key2 = this.contextKey(state, evidence.chainId, evidence.token);
+    const generation = this.readGeneration, version = this.portfolioVersion(key2);
+    if (read2.readVersion !== version) return void 0;
+    const wallet = (0, import_viem12.getAddress)(context.wallet.walletAddress);
+    const asset = YIELDSEEKER_ASSET_METADATA[evidence.token];
+    const client = this.getReceiptClient();
+    const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
+    if (blockNumber < BigInt(evidence.blockNumber)) return void 0;
+    const vaults = [...this.balanceVaults.get(key2) ?? []];
+    const [invested, idle, tracker] = await Promise.all([
+      remainingVaultBalance(client, wallet, asset.address, vaults, blockNumber),
+      client.readContract({ address: asset.address, abi: import_viem12.erc20Abi, functionName: "balanceOf", args: [wallet], blockNumber }),
+      client.readContract({ address: wallet, abi: YIELDSEEKER_AGENT_WALLET_ABI, functionName: "feeTracker", blockNumber })
+    ]);
+    if (invested === void 0 || typeof idle !== "bigint" || idle < 0n || !(0, import_viem12.isAddress)(tracker) || /^0x0{40}$/i.test(tracker)) return void 0;
+    const fees = await client.readContract({
+      address: tracker,
+      abi: YIELDSEEKER_FEE_TRACKER_ABI,
+      functionName: "getFeesOwed",
+      args: [wallet],
+      blockNumber
+    });
+    this.assertSession(generation, evidence.chainId, evidence.token);
+    if (version !== this.portfolioVersion(key2) || typeof fees !== "bigint" || fees < 0n) return void 0;
+    const total = idle + invested > fees ? idle + invested - fees : 0n;
+    const displayed = balance.assetBalances?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
+    if (!displayed || !evidence.confirmedAmount || !/^\d+$/.test(evidence.confirmedAmount)) return void 0;
+    const amount = (0, import_viem12.parseUnits)(displayed.amount, asset.decimals);
+    if (amount < 0n) return void 0;
+    const displayUnit = evidence.token === "USDC" ? 5000n : 500000000000n;
+    const movementUnit = BigInt(evidence.confirmedAmount) / 1000n;
+    const tolerance = movementUnit < displayUnit ? movementUnit : displayUnit;
+    if ((total > amount ? total - amount : amount - total) > tolerance) return void 0;
+    return { ...read2, withdrawalCheck: { txHash: evidence.txHash, blockNumber: blockNumber.toString() } };
   }
   invalidateFundingRead(state, chainId, asset, refreshUntil = Date.now() + YIELDSEEKER_SETTLEMENT_WINDOW_MS) {
     this.assertAsset(asset);
@@ -5554,9 +6075,9 @@ var YieldseekerAgent = class {
     if (!context) return void 0;
     const idle = await withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
       address: YIELDSEEKER_ASSET_METADATA[asset].address,
-      abi: import_viem11.erc20Abi,
+      abi: import_viem12.erc20Abi,
       functionName: "balanceOf",
-      args: [(0, import_viem11.getAddress)(context.wallet.walletAddress)]
+      args: [(0, import_viem12.getAddress)(context.wallet.walletAddress)]
     }), chainId, "eth_call", this.id);
     this.assertSession(generation, chainId, asset);
     if (typeof idle !== "bigint" || idle < 0n) throw this.invalidResponse("wallet deposit balance");
@@ -5592,7 +6113,7 @@ var YieldseekerAgent = class {
     );
     const vaultAddresses = new Set(
       catalog.flat().filter(
-        (yieldOption) => yieldOption.chainId === chainId && (0, import_viem11.isAddress)(yieldOption.address)
+        (yieldOption) => yieldOption.chainId === chainId && (0, import_viem12.isAddress)(yieldOption.address)
       ).map((yieldOption) => yieldOption.address.toLowerCase())
     );
     return mapYieldseekerHistory(contexts, {
@@ -5668,11 +6189,13 @@ var YieldseekerAgent = class {
     const pending = this.pendingReads.get(key2);
     if (pending) return pending;
     const generation = this.readGeneration;
+    const requestedAt = Date.now();
     const request = Promise.resolve().then(read2).then((value) => {
       if (this.readGeneration === generation && this.pendingReads.get(key2) === request) {
         this.readCache.set(key2, {
           expiresAt: Date.now() + ttlMs,
           fetchedAt: Date.now(),
+          requestedAt,
           value
         });
       }
@@ -5719,7 +6242,7 @@ var YieldseekerAgent = class {
       `/users/${user.userId}/agents/${agent.agentId}/wallet`
     ).then((walletResponse) => {
       this.assertSession(generation, chainId, asset);
-      if (!walletResponse?.agentWallet || !(0, import_viem11.isAddress)(walletResponse.agentWallet.walletAddress)) {
+      if (!walletResponse?.agentWallet || !(0, import_viem12.isAddress)(walletResponse.agentWallet.walletAddress)) {
         throw this.invalidResponse("agent wallet");
       }
       const context = {
@@ -5749,7 +6272,7 @@ var YieldseekerAgent = class {
       this.users.set(key2, persisted);
       return persisted;
     }
-    const walletAddress = (0, import_viem11.getAddress)(state.walletAddress);
+    const walletAddress = (0, import_viem12.getAddress)(state.walletAddress);
     const generation = this.readGeneration;
     let user = null;
     try {
@@ -6041,6 +6564,7 @@ var YieldseekerAgent = class {
           ...context,
           snapshot: snapshot.agentSnapshot,
           fetchedAt: this.readCache.get(`snapshot:${contextKey}`)?.fetchedAt,
+          requestedAt: this.readCache.get(`snapshot:${contextKey}`)?.requestedAt,
           readVersion: version,
           positionsUnavailable,
           ...portfolioParts
@@ -6132,7 +6656,7 @@ var YieldseekerAgent = class {
       this.agentPath(context, "deploy"),
       { method: "POST", body: {} }
     );
-    if (!deployed?.agentWallet || !(0, import_viem11.isAddress)(deployed.agentWallet.walletAddress) || deployed.agentWallet.walletAddress.toLowerCase() !== walletAddress) {
+    if (!deployed?.agentWallet || !(0, import_viem12.isAddress)(deployed.agentWallet.walletAddress) || deployed.agentWallet.walletAddress.toLowerCase() !== walletAddress) {
       throw this.invalidResponse("agent deployment", {
         reason: "Deploy did not return the expected Agent Wallet."
       });
@@ -6240,15 +6764,15 @@ var YieldseekerAgent = class {
       return hash2;
     }
     this.assertTransaction(transaction, state, chainId);
-    const account = (0, import_viem11.getAddress)(state.walletAddress);
-    const walletClient = (0, import_viem11.createWalletClient)({
+    const account = (0, import_viem12.getAddress)(state.walletAddress);
+    const walletClient = (0, import_viem12.createWalletClient)({
       account,
       chain: import_chains4.base,
-      transport: (0, import_viem11.custom)(state.provider)
+      transport: (0, import_viem12.custom)(state.provider)
     });
-    const walletChainClient = (0, import_viem11.createPublicClient)({
+    const walletChainClient = (0, import_viem12.createPublicClient)({
       chain: import_chains4.base,
-      transport: (0, import_viem11.custom)(state.provider)
+      transport: (0, import_viem12.custom)(state.provider)
     });
     await ensureWalletOnChain(
       walletChainClient,
@@ -6258,7 +6782,7 @@ var YieldseekerAgent = class {
     const hash = await walletClient.sendTransaction({
       account,
       chain: import_chains4.base,
-      to: (0, import_viem11.getAddress)(transaction.to),
+      to: (0, import_viem12.getAddress)(transaction.to),
       data: transaction.data,
       value: BigInt(transaction.value)
     });
@@ -6362,12 +6886,12 @@ var YieldseekerAgent = class {
     return receipt;
   }
   assertTransaction(transaction, state, chainId) {
-    if (!transaction || typeof transaction.from !== "string" || !(0, import_viem11.isAddress)(transaction.from) || typeof transaction.to !== "string" || !(0, import_viem11.isAddress)(transaction.to) || typeof transaction.data !== "string" || !/^0x[a-fA-F0-9]*$/.test(transaction.data) || typeof transaction.value !== "string" || !/^[0-9]+$/.test(transaction.value) || transaction.chainId !== chainId || (0, import_viem11.getAddress)(transaction.from) !== (0, import_viem11.getAddress)(state.walletAddress)) {
+    if (!transaction || typeof transaction.from !== "string" || !(0, import_viem12.isAddress)(transaction.from) || typeof transaction.to !== "string" || !(0, import_viem12.isAddress)(transaction.to) || typeof transaction.data !== "string" || !/^0x[a-fA-F0-9]*$/.test(transaction.data) || typeof transaction.value !== "string" || !/^[0-9]+$/.test(transaction.value) || transaction.chainId !== chainId || (0, import_viem12.getAddress)(transaction.from) !== (0, import_viem12.getAddress)(state.walletAddress)) {
       throw this.invalidResponse("transaction");
     }
   }
   assertAgent(agent) {
-    if (typeof agent.agentId !== "string" || typeof agent.assetAddress !== "string" || !(0, import_viem11.isAddress)(agent.assetAddress) || agent.chainId !== 8453) {
+    if (typeof agent.agentId !== "string" || typeof agent.assetAddress !== "string" || !(0, import_viem12.isAddress)(agent.assetAddress) || agent.chainId !== 8453) {
       throw this.invalidResponse("agent");
     }
   }
@@ -6521,7 +7045,7 @@ async function withFailureReporting(apiKey, agentType, fn, baseUrl) {
 }
 
 // src/lib/helpers/withdraw-helper.ts
-var import_viem12 = require("viem");
+var import_viem13 = require("viem");
 function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decimals) {
   const target = asset.toUpperCase();
   return agents.map((agent) => {
@@ -6529,7 +7053,7 @@ function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decima
     const tokenBalance = agentBalance?.tokens.find(
       (t) => t.chainId === chainId && t.asset.toUpperCase() === target
     );
-    let balance = tokenBalance ? (0, import_viem12.parseUnits)(tokenBalance.amount, decimals) : 0n;
+    let balance = tokenBalance ? (0, import_viem13.parseUnits)(tokenBalance.amount, decimals) : 0n;
     if (agent.balanceComposition === "tokens-plus-positions") {
       const chainNameById = {
         1: "ETHEREUM",
@@ -6541,14 +7065,14 @@ function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decima
         const positionChain = position2.chain.trim().toUpperCase();
         const matchesChain = positionChain === String(chainId) || targetChain !== void 0 && positionChain === targetChain;
         if (!matchesChain || position2.asset.toUpperCase() !== target) continue;
-        balance += position2.withdrawableAmountRaw !== void 0 ? BigInt(position2.withdrawableAmountRaw) : (0, import_viem12.parseUnits)(position2.amount, decimals);
+        balance += position2.withdrawableAmountRaw !== void 0 ? BigInt(position2.withdrawableAmountRaw) : (0, import_viem13.parseUnits)(position2.amount, decimals);
       }
     }
     const assetTotal = agentBalance?.assetBalances?.find(
       (t) => t.chainId === chainId && t.asset.toUpperCase() === target
     );
     if (assetTotal) {
-      const total = (0, import_viem12.parseUnits)(assetTotal.amount, decimals);
+      const total = (0, import_viem13.parseUnits)(assetTotal.amount, decimals);
       if (total < balance) balance = total > 0n ? total : 0n;
     }
     return { agent, balance };
@@ -6707,14 +7231,14 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
 }
 
 // src/client.ts
-var import_viem16 = require("viem");
+var import_viem17 = require("viem");
 var import_chains5 = require("viem/chains");
 
 // src/lib/sponsored-token-batch.ts
-var import_viem14 = require("viem");
+var import_viem15 = require("viem");
 
 // src/lib/permit2-batch.ts
-var import_viem13 = require("viem");
+var import_viem14 = require("viem");
 var BATCH_PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
 var BASE_USDC_ADDRESS = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
 var ERC2612_PERMIT_TYPES = {
@@ -6726,7 +7250,7 @@ var ERC2612_PERMIT_TYPES = {
     { name: "deadline", type: "uint256" }
   ]
 };
-var ERC2612_READ_ABI = (0, import_viem13.parseAbi)([
+var ERC2612_READ_ABI = (0, import_viem14.parseAbi)([
   "function name() view returns (string)",
   "function version() view returns (string)",
   "function nonces(address owner) view returns (uint256)"
@@ -6764,7 +7288,7 @@ var PERMIT_BATCH_TYPES = {
     { name: "amount", type: "uint256" }
   ]
 };
-var PERMIT2_BATCH_ABI = (0, import_viem13.parseAbi)([
+var PERMIT2_BATCH_ABI = (0, import_viem14.parseAbi)([
   "struct TokenPermissions { address token; uint256 amount; }",
   "struct PermitBatchTransferFrom { TokenPermissions[] permitted; uint256 nonce; uint256 deadline; }",
   "struct SignatureTransferDetails { address to; uint256 requestedAmount; }",
@@ -6807,14 +7331,14 @@ var planOf = (transfers) => JSON.stringify(
     amount: BigInt(t.amount).toString()
   }))
 );
-var pendingKey = (i) => `owney.token-batch.v1:${(0, import_viem14.keccak256)((0, import_viem14.toBytes)(i.apiKey))}:${i.baseUrl ?? "default"}:${i.chainId}:${i.owner.toLowerCase()}:${i.token.toLowerCase()}`;
+var pendingKey = (i) => `owney.token-batch.v1:${(0, import_viem15.keccak256)((0, import_viem15.toBytes)(i.apiKey))}:${i.baseUrl ?? "default"}:${i.chainId}:${i.owner.toLowerCase()}:${i.token.toLowerCase()}`;
 function pendingTokenBatch(i) {
   try {
     const saved = read(pendingKey(i));
     if (!saved) return;
     const body = JSON.parse(saved);
-    if (!body.serializedTransaction || body.chainId !== i.chainId || !(0, import_viem14.isAddressEqual)(body.from, i.owner) || !(0, import_viem14.isAddressEqual)(body.token, i.token) || !body.transfers?.length) return;
-    return { txHash: (0, import_viem14.keccak256)(body.serializedTransaction), transfers: body.transfers.map(({ to, amount }) => ({ to, amount })) };
+    if (!body.serializedTransaction || body.chainId !== i.chainId || !(0, import_viem15.isAddressEqual)(body.from, i.owner) || !(0, import_viem15.isAddressEqual)(body.token, i.token) || !body.transfers?.length) return;
+    return { txHash: (0, import_viem15.keccak256)(body.serializedTransaction), transfers: body.transfers.map(({ to, amount }) => ({ to, amount })) };
   } catch {
     return;
   }
@@ -6859,14 +7383,47 @@ async function execute(i, key2, plan) {
   const send = async (initial) => {
     let body = initial;
     save(key2, body);
+    const rejectedPreparation = (error) => !body.serializedTransaction && error instanceof OwneyError && typeof error.details?.statusCode === "number" && error.details.statusCode >= 400 && error.details.statusCode < 500 && ![408, 429].includes(error.details.statusCode);
     try {
+      const post = () => postSponsorBatchTransfer({ apiKey: i.apiKey, baseUrl: i.baseUrl, body });
+      const pendingError = (phase, txHash) => new OwneyError(
+        "DEPOSIT_IN_PROGRESS",
+        phase === "approval" ? "Deposit approval is awaiting confirmation. Retry the same amount to continue it." : "Deposit is awaiting confirmation. Its transaction is still being checked.",
+        { sponsorPending: true, phase, txHash, safeToFallback: false }
+      );
+      const assertReceipt = (receipt, phase) => {
+        if (receipt.status !== "success") throw new OwneyError(
+          "SPONSOR_REQUEST_FAILED",
+          `Sponsored ${phase} transaction reverted. Please retry.`,
+          { notSubmitted: true, safeToFallback: false }
+        );
+      };
+      const waitForConfirmation = async (phase, hash2) => {
+        let receipt;
+        try {
+          receipt = await i.pub.waitForTransactionReceipt({ hash: hash2, confirmations: 1, timeout: 9e4, checkReplacement: false });
+        } catch {
+          receipt = await i.pub.getTransactionReceipt({ hash: hash2 }).catch(() => void 0);
+        }
+        if (!receipt) throw pendingError(phase, hash2);
+        assertReceipt(receipt, phase);
+      };
+      const postSigned = async (phase, hash2) => {
+        try {
+          return await post();
+        } catch (error) {
+          if (rejectedPreparation(error) || error instanceof OwneyError && error.details?.notSubmitted === true) throw error;
+          await waitForConfirmation(phase, hash2);
+          return void 0;
+        }
+      };
       if (body.erc2612Permit && !body.serializedPermitTransaction) {
         const preparedPermit = await postSponsorBatchTransfer({
           apiKey: i.apiKey,
           baseUrl: i.baseUrl,
           body
         });
-        if (!preparedPermit.serializedPermitTransaction || !preparedPermit.permitTxHash || (0, import_viem14.keccak256)(preparedPermit.serializedPermitTransaction) !== preparedPermit.permitTxHash)
+        if (!preparedPermit.serializedPermitTransaction || !preparedPermit.permitTxHash || (0, import_viem15.keccak256)(preparedPermit.serializedPermitTransaction) !== preparedPermit.permitTxHash)
           throw new Error(
             "Sponsorship API did not return a valid prepared permit transaction."
           );
@@ -6877,12 +7434,18 @@ async function execute(i, key2, plan) {
         save(key2, body);
       }
       if (!body.serializedTransaction) {
-        const prepared = await postSponsorBatchTransfer({
-          apiKey: i.apiKey,
-          baseUrl: i.baseUrl,
-          body
-        });
-        if (!prepared.serializedTransaction || (0, import_viem14.keccak256)(prepared.serializedTransaction) !== prepared.txHash)
+        const permitHash = body.serializedPermitTransaction ? (0, import_viem15.keccak256)(body.serializedPermitTransaction) : void 0;
+        let prepared = permitHash ? await postSigned("approval", permitHash) : await post();
+        if (prepared?.status === "pending") {
+          if (!permitHash || prepared.phase !== "approval" || prepared.txHash !== permitHash)
+            throw new Error("Sponsorship approval does not match the pending transaction.");
+          await waitForConfirmation("approval", permitHash);
+          prepared = void 0;
+        }
+        if (!prepared) prepared = await post();
+        if (prepared.status === "pending" && permitHash && prepared.phase === "approval" && prepared.txHash === permitHash)
+          throw pendingError("approval", permitHash);
+        if (!prepared.serializedTransaction || (0, import_viem15.keccak256)(prepared.serializedTransaction) !== prepared.txHash)
           throw new Error(
             "Sponsorship API did not return a valid prepared transaction."
           );
@@ -6893,22 +7456,33 @@ async function execute(i, key2, plan) {
         save(key2, body);
       }
       try {
-        i.onSubmitted?.((0, import_viem14.keccak256)(body.serializedTransaction));
+        i.onSubmitted?.((0, import_viem15.keccak256)(body.serializedTransaction));
       } catch {
       }
-      const result = await postSponsorBatchTransfer({
-        apiKey: i.apiKey,
-        baseUrl: i.baseUrl,
-        body
-      });
-      if (result.txHash !== (0, import_viem14.keccak256)(body.serializedTransaction))
-        throw new Error(
-          "Sponsorship receipt does not match the pending transaction."
-        );
+      const hash = (0, import_viem15.keccak256)(body.serializedTransaction);
+      const existing = await i.pub.getTransactionReceipt({ hash }).catch(() => void 0);
+      if (existing) {
+        assertReceipt(existing, "deposit");
+        void post().catch(() => void 0);
+        clear(key2);
+        return hash;
+      }
+      let result = await postSigned("deposit", hash);
+      if (result?.status === "pending" && result.phase === "approval" && body.serializedPermitTransaction && result.txHash === (0, import_viem15.keccak256)(body.serializedPermitTransaction)) {
+        await waitForConfirmation("approval", result.txHash);
+        result = await postSigned("deposit", hash);
+        if (result?.status === "pending" && result.phase === "approval" && result.txHash === (0, import_viem15.keccak256)(body.serializedPermitTransaction)) throw pendingError("approval", result.txHash);
+      }
+      if (result) {
+        if (result.txHash !== hash || result.status === "pending" && result.phase !== "deposit")
+          throw new Error("Sponsorship receipt does not match the pending transaction.");
+        if (result.status === "pending") await waitForConfirmation("deposit", hash);
+      }
+      if (!result || result.status === "pending") void post().catch(() => void 0);
       clear(key2);
-      return result.txHash;
+      return hash;
     } catch (error) {
-      if (!body.serializedTransaction || error instanceof OwneyError && error.details?.notSubmitted === true)
+      if (!body.serializedTransaction && !body.serializedPermitTransaction || rejectedPreparation(error) || error instanceof OwneyError && error.details?.notSubmitted === true)
         clear(key2);
       throw error;
     }
@@ -6918,7 +7492,7 @@ async function execute(i, key2, plan) {
     throw new OwneyError("DEPOSIT_IN_PROGRESS", "The saved deposit changed. Check its status before depositing again.");
   if (saved) {
     const previous = JSON.parse(saved);
-    if (previous.chainId !== i.chainId || !(0, import_viem14.isAddressEqual)(previous.from, i.owner) || !(0, import_viem14.isAddressEqual)(previous.token, i.token) || planOf(previous.transfers) !== plan)
+    if (previous.chainId !== i.chainId || !(0, import_viem15.isAddressEqual)(previous.from, i.owner) || !(0, import_viem15.isAddressEqual)(previous.token, i.token) || planOf(previous.transfers) !== plan)
       throw new Error(
         "Retry the previous token deposit and agent split first to reconcile its status."
       );
@@ -6935,7 +7509,7 @@ async function execute(i, key2, plan) {
       "DEPOSIT_INSUFFICIENT_BALANCE",
       "Insufficient token balance for this deposit."
     );
-  if (allowance < total && (i.chainId !== 8453 || !(0, import_viem14.isAddressEqual)(i.token, BASE_USDC_ADDRESS)))
+  if (allowance < total && (i.chainId !== 8453 || !(0, import_viem15.isAddressEqual)(i.token, BASE_USDC_ADDRESS)))
     throw new OwneyError(
       "PERMIT2_APPROVAL_REQUIRED",
       "token deposits need a one-time Permit2 approval."
@@ -7114,7 +7688,7 @@ async function runAgentDepositBatch(chainId, legs, transfer) {
 }
 
 // src/lib/sponsored-calls-deposit.ts
-var import_viem15 = require("viem");
+var import_viem16 = require("viem");
 var DEFAULT_POLL_INTERVAL_MS = 1500;
 var DEFAULT_MAX_POLLS = 30;
 async function paymasterSupported(provider, owner, chainId) {
@@ -7122,7 +7696,7 @@ async function paymasterSupported(provider, owner, chainId) {
     method: "wallet_getCapabilities",
     params: [owner]
   });
-  const forChain = caps?.[(0, import_viem15.toHex)(chainId)] ?? caps?.[String(chainId)];
+  const forChain = caps?.[(0, import_viem16.toHex)(chainId)] ?? caps?.[String(chainId)];
   return Boolean(forChain?.paymasterService?.supported);
 }
 function makeSponsoredCallsCallback(deps) {
@@ -7159,8 +7733,8 @@ function makeSponsoredCallsCallback(deps) {
     const calls = transfers.map((transfer) => ({
       to: token,
       value: "0x0",
-      data: (0, import_viem15.encodeFunctionData)({
-        abi: import_viem15.erc20Abi,
+      data: (0, import_viem16.encodeFunctionData)({
+        abi: import_viem16.erc20Abi,
         functionName: "transfer",
         args: [transfer.to, BigInt(transfer.amount)]
       })
@@ -7192,7 +7766,7 @@ function makeSponsoredCallsCallback(deps) {
       url.searchParams.append("owneyIntent", intent);
       paymasterUrl = url.toString();
     }
-    const requestedId = (0, import_viem15.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+    const requestedId = (0, import_viem16.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
     const progress = (id, transfer) => {
       try {
         deps.onCallsProgress?.(id, transfers, transfer);
@@ -7209,7 +7783,7 @@ function makeSponsoredCallsCallback(deps) {
             version: "2.0.0",
             id: requestedId,
             from: deps.ownerAddress,
-            chainId: (0, import_viem15.toHex)(chainId),
+            chainId: (0, import_viem16.toHex)(chainId),
             atomicRequired: transfers.length > 1,
             calls,
             capabilities: {
@@ -7361,6 +7935,7 @@ var OwneySDK = class {
   cachedSponsoredCallsCallbacks = /* @__PURE__ */ new Map();
   agentReads = new AgentReads();
   recoveredFundingReads = /* @__PURE__ */ new Set();
+  fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
   activationChecks = /* @__PURE__ */ new Map();
   readAgent(agent, method, fetch2, params = null) {
     const key2 = JSON.stringify([
@@ -7406,6 +7981,7 @@ var OwneySDK = class {
     }
     this.agentReads.clearInFlight();
     this.activationChecks.clear();
+    this.fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
     this.state = { provider, walletAddress, chainId: null };
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
@@ -7417,6 +7993,7 @@ var OwneySDK = class {
    */
   async disconnect() {
     this.state = null;
+    this.fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
     for (const agent of this.agents.values()) {
       await agent.disconnect();
     }
@@ -7491,14 +8068,14 @@ var OwneySDK = class {
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
       getPublicClient: (cid) => this.getPaidRpcClient(cid),
-      getWalletChainClient: (cid) => (0, import_viem16.createPublicClient)({
+      getWalletChainClient: (cid) => (0, import_viem17.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem16.custom)(provider)
+        transport: (0, import_viem17.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem16.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem17.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem16.custom)(provider)
+        transport: (0, import_viem17.custom)(provider)
       })
     });
     if (!onApproved && !onSubmitted && !resumeTxHash) this.cachedSponsoredCallback = callback;
@@ -7546,14 +8123,14 @@ var OwneySDK = class {
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
       getPublicClient: (cid) => this.getPaidRpcClient(cid),
-      getWalletChainClient: (cid) => (0, import_viem16.createPublicClient)({
+      getWalletChainClient: (cid) => (0, import_viem17.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem16.custom)(provider)
+        transport: (0, import_viem17.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem16.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem17.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem16.custom)(provider)
+        transport: (0, import_viem17.custom)(provider)
       })
     });
     if (!onApproved && !onSubmitted && !resumeTxHash) this.cachedWethSponsoredCallback = callback;
@@ -8317,9 +8894,8 @@ var OwneySDK = class {
         verified = inspectFundingReceipt(receipt, { ...evidence, agentWallet, intendedAmount: "MAX" }, token.address, direction);
     }
     const key2 = `${state.walletAddress.toLowerCase()}:${chainId}:${evidence.agentId}:${evidence.token}:${evidence.txHash}`;
-    if ((verified.transfer === "confirmed" || verified.transfer === "failed" && verified.confirmedAmount === "0") && !this.recoveredFundingReads.has(key2)) {
-      if (options.refreshBalance !== false)
-        agent.invalidateFundingRead?.(state, chainId, evidence.token, options.balanceRefreshUntil);
+    if (options.refreshBalance !== false && (verified.transfer === "confirmed" || verified.transfer === "failed" && verified.confirmedAmount === "0") && !this.recoveredFundingReads.has(key2)) {
+      agent.invalidateFundingRead?.(state, chainId, evidence.token, options.balanceRefreshUntil);
       this.recoveredFundingReads.add(key2);
       if (this.recoveredFundingReads.size > 256) this.recoveredFundingReads.delete(this.recoveredFundingReads.values().next().value);
     }
@@ -8427,6 +9003,44 @@ var OwneySDK = class {
     assertCurrent();
     return true;
   }
+  /** Optional post-payout display proof; receipt verification and the provider
+   * adapter must agree before attaching it to this exact balance object. */
+  async verifyWithdrawalBalance(evidence, balance) {
+    const { state, chainId, assertCurrent } = this.captureReadScope(evidence.chainId);
+    const agent = this.getAgent(evidence.agentId);
+    if (!agent.verifyWithdrawalBalance || !evidence.txHash || state.walletAddress.toLowerCase() !== evidence.walletAddress.toLowerCase()) return balance;
+    const key2 = `${state.walletAddress.toLowerCase()}:${chainId}:${evidence.agentId}:${evidence.token}:${evidence.txHash}:${evidence.intendedAmount}`;
+    const checks = this.fundingBalanceChecks.get(balance) ?? /* @__PURE__ */ new Map();
+    this.fundingBalanceChecks.set(balance, checks);
+    const previous = checks.get(key2);
+    if (previous) {
+      const result2 = await previous;
+      assertCurrent();
+      return result2;
+    }
+    let timer;
+    const read2 = async () => {
+      const verified = await this.inspectFunding(evidence, "withdraw", { refreshBalance: false });
+      assertCurrent();
+      if (verified.transfer !== "confirmed" || verified.delivery !== "confirmed" || !verified.blockNumber) return balance;
+      const metadata = await agent.verifyWithdrawalBalance(state, verified, balance);
+      assertCurrent();
+      if (!metadata || metadata.chainId !== chainId || metadata.asset.toUpperCase() !== evidence.token || !metadata.withdrawalCheck || metadata.withdrawalCheck.txHash.toLowerCase() !== verified.txHash?.toLowerCase() || BigInt(metadata.withdrawalCheck.blockNumber) < BigInt(verified.blockNumber)) return balance;
+      return { ...balance, readMetadata: [
+        ...(balance.readMetadata ?? []).filter((item) => !(item.chainId === chainId && item.asset.toUpperCase() === evidence.token)),
+        metadata
+      ] };
+    };
+    const pending = Promise.race([read2(), new Promise((resolve) => {
+      timer = setTimeout(() => resolve(balance), 2e3);
+    })]).catch(() => balance).finally(() => {
+      if (timer) clearTimeout(timer);
+    });
+    checks.set(key2, pending);
+    const result = await pending;
+    assertCurrent();
+    return result;
+  }
   /** A display acknowledgement controls polling only; it never confirms a financial outcome. */
   endFundingBalanceRefresh(evidence, read2) {
     const { state, chainId } = this.captureReadScope(evidence.chainId);
@@ -8672,11 +9286,10 @@ var OwneySDK = class {
       };
     }
     const requested = BigInt(amount);
-    const aggregated = await this.getBalances(void 0, { chainId, asset: token });
+    const { balances: aggregated, failures: balanceFailures } = await this.readAggregatedBalances({ chainId, asset: token });
     const unavailableAgents = eligibleAgents.filter(
       (agent) => !(agent.id in aggregated.agentBalances)
     );
-    const unavailableAgentIds = unavailableAgents.map((agent) => agent.id);
     const balances = projectAgentBalancesForAsset(
       eligibleAgents,
       aggregated.agentBalances,
@@ -8684,6 +9297,44 @@ var OwneySDK = class {
       asset,
       assetInfo.decimals
     );
+    const indexedAvailable = balances.reduce((sum, entry) => sum + entry.balance, 0n);
+    await Promise.all(balances.map(async (entry) => {
+      if (entry.balance !== 0n && indexedAvailable >= requested || !entry.agent.getWithdrawableBalance) return;
+      const originalFailure = balanceFailures.get(entry.agent.id);
+      if (originalFailure instanceof OwneyError && ![
+        "AGENT_API_ERROR",
+        "AGENT_TIMEOUT",
+        "AGENT_RATE_LIMITED"
+      ].includes(originalFailure.code)) return;
+      if (this.isUserRejectedWithdrawal(originalFailure)) throw originalFailure;
+      if (entry.balance !== 0n && entry.agent.id !== "yieldseeker") {
+        const total = aggregated.agentBalances[entry.agent.id]?.assetBalances?.find((value) => value.chainId === chainId && value.asset.toUpperCase() === token);
+        if (!total || (0, import_viem17.parseUnits)(total.amount, assetInfo.decimals) <= entry.balance) return;
+      }
+      try {
+        const otherAvailable = indexedAvailable - entry.balance;
+        const minimumAmount = requested > otherAvailable ? requested - otherAvailable : void 0;
+        const verified = await entry.agent.getWithdrawableBalance(state, chainId, token, minimumAmount);
+        if (typeof verified !== "bigint" || verified < 0n)
+          throw new OwneyError("WITHDRAW_BALANCE_UNAVAILABLE", "Invalid withdrawal balance proof.", {}, entry.agent.id);
+        if (this.state !== state || this.state.walletAddress !== state.walletAddress || this.state.chainId !== chainId)
+          throw new OwneyError("NOT_CONNECTED", "Account changed while planning withdrawal.");
+        entry.balance = verified;
+        const unavailableIndex = unavailableAgents.indexOf(entry.agent);
+        if (unavailableIndex !== -1) unavailableAgents.splice(unavailableIndex, 1);
+        if (aggregated.agentErrors) delete aggregated.agentErrors[entry.agent.id];
+      } catch (error) {
+        entry.balance = 0n;
+        if (!unavailableAgents.includes(entry.agent)) unavailableAgents.push(entry.agent);
+        aggregated.agentErrors = {
+          ...aggregated.agentErrors,
+          [entry.agent.id]: error instanceof Error ? error.message : String(error)
+        };
+      }
+    }));
+    if (this.state !== state || this.state.chainId !== chainId)
+      throw new OwneyError("NOT_CONNECTED", "Account changed while planning withdrawal.");
+    const unavailableAgentIds = unavailableAgents.map((agent) => agent.id);
     const totalAvailable = balances.reduce((sum, x) => sum + x.balance, 0n);
     if (totalAvailable === 0n && unavailableAgents.length > 0) {
       throw new OwneyError(
@@ -8768,7 +9419,18 @@ var OwneySDK = class {
       );
     }
     const withdrawn = sumWithdrawnAmount(results);
-    if (withdrawn < requested) {
+    const verifiedFeeDeductions = orderedPlans.reduce((total, plan) => {
+      const result = results[plan.agent.id];
+      const adjustment = result?.feeAdjustment;
+      const evidence = result?.evidence;
+      const submitted = submissionEvidence.get(plan.agent.id);
+      if (plan.agent.id !== "yieldseeker" || !adjustment || !evidence || !submitted || typeof result.amount !== "string" || !/^\d+$/.test(result.amount) || typeof adjustment.grossAmount !== "string" || !/^\d+$/.test(adjustment.grossAmount) || typeof adjustment.feeAmount !== "string" || !/^\d+$/.test(adjustment.feeAmount) || evidence.agentId !== plan.agent.id || evidence.chainId !== chainId || evidence.token !== token || typeof evidence.walletAddress !== "string" || evidence.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || typeof evidence.agentWallet !== "string" || !/^0x[\da-f]{40}$/i.test(evidence.agentWallet) || typeof result.txHash !== "string" || !/^0x[\da-f]{64}$/i.test(result.txHash) || typeof evidence.txHash !== "string" || typeof submitted.txHash !== "string" || evidence.txHash?.toLowerCase() !== result.txHash.toLowerCase() || submitted.txHash?.toLowerCase() !== result.txHash.toLowerCase() || submitted.agentId !== evidence.agentId || submitted.chainId !== chainId || submitted.token !== token || typeof submitted.walletAddress !== "string" || typeof submitted.agentWallet !== "string" || submitted.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || submitted.agentWallet?.toLowerCase() !== evidence.agentWallet.toLowerCase() || evidence.transfer !== "confirmed" || evidence.delivery !== "confirmed" || submitted.transfer !== "confirmed" || submitted.delivery !== "confirmed" || evidence.confirmedAmount !== result.amount || submitted.confirmedAmount !== result.amount || evidence.intendedAmount !== result.amount || submitted.intendedAmount !== result.amount) return total;
+      const fee = BigInt(adjustment.feeAmount);
+      const net = BigInt(result.amount);
+      const gross = BigInt(adjustment.grossAmount);
+      return fee > 0n && net > 0n && gross === plan.planned && net + fee === gross ? total + fee : total;
+    }, 0n);
+    if (withdrawn + verifiedFeeDeductions < requested) {
       throw new OwneyError(
         "WITHDRAW_PARTIAL_FAILURE",
         `Withdrew "${withdrawn.toString()}" of requested "${amount}" of "${asset}". One or more agents failed; remaining balance could not cover the shortfall.`,
@@ -8792,23 +9454,42 @@ var OwneySDK = class {
    * @returns {AgentBalance} for a single agent, or {OwneyBalances} with totalBalance and per-agent breakdown
    */
   async getBalances(agentId, options) {
-    const { state, chainId, assertCurrent } = this.captureReadScope(options?.chainId);
-    const asset = options?.asset;
-    const readBalance = (agent) => this.readAgent(
-      agent,
-      "balances",
-      () => asset ? agent.getBalances(state, chainId, asset) : agent.getBalances(state, chainId),
-      asset ? { asset } : null
-    );
     if (agentId) {
+      const { state, chainId, assertCurrent } = this.captureReadScope(options?.chainId);
+      const asset = options?.asset;
       const agent = this.getAgent(agentId);
-      const result = await readBalance(agent);
+      const result = await this.readAgent(
+        agent,
+        "balances",
+        () => asset ? agent.getBalances(state, chainId, asset) : agent.getBalances(state, chainId),
+        asset ? { asset } : null
+      );
       assertCurrent();
       return {
         ...result,
         balanceComposition: agent.balanceComposition ?? "tokens-include-positions"
       };
     }
+    const { balances, failures } = await this.readAggregatedBalances(options);
+    if (Object.keys(balances.agentBalances).length === 0) {
+      throw new OwneyError(
+        "BALANCE_ALL_FAILED",
+        "Failed to fetch balances for all active agents.",
+        { agentErrors: balances.agentErrors ?? {}, failures: [...failures.values()] }
+      );
+    }
+    return balances;
+  }
+  /** Preserve failure objects for withdrawal recovery without changing public balance results. */
+  async readAggregatedBalances(options) {
+    const { state, chainId, assertCurrent } = this.captureReadScope(options?.chainId);
+    const asset = options?.asset;
+    const readBalance = (agent) => this.readAgent(
+      agent,
+      "balances",
+      () => asset ? agent.getBalances(state, chainId, asset) : agent.getBalances(state, chainId),
+      asset ? { asset } : null
+    );
     let totalBalance = 0;
     const results = {};
     const entries = [...this.getActiveAgents().entries()];
@@ -8825,39 +9506,33 @@ var OwneySDK = class {
       })
     );
     assertCurrent();
-    let successCount = 0;
     const agentErrors = {};
     const agentRetryAt = {};
-    const agentFailures = [];
+    const agentFailures = /* @__PURE__ */ new Map();
     for (let i = 0; i < balanceResults.length; i++) {
       const settledResult = balanceResults[i];
-      const [agentId2] = entries[i];
+      const [agentId] = entries[i];
       if (settledResult.status === "fulfilled") {
         const [id, b] = settledResult.value;
         results[id] = b;
         totalBalance += Number(b.totalBalance);
-        successCount += 1;
         continue;
       }
       const reason = settledResult.reason;
-      agentFailures.push(reason);
+      agentFailures.set(agentId, reason);
       const retryDelay = rateLimitDelay(reason);
-      if (retryDelay !== void 0) agentRetryAt[agentId2] = Date.now() + retryDelay;
-      agentErrors[agentId2] = reason instanceof Error ? reason.message : String(reason);
-      console.error(`[owney-sdk] Balance fetch failed for agent "${agentId2}":`, reason);
-    }
-    if (successCount === 0) {
-      throw new OwneyError(
-        "BALANCE_ALL_FAILED",
-        "Failed to fetch balances for all active agents.",
-        { agentErrors, failures: agentFailures }
-      );
+      if (retryDelay !== void 0) agentRetryAt[agentId] = Date.now() + retryDelay;
+      agentErrors[agentId] = reason instanceof Error ? reason.message : String(reason);
+      console.error(`[owney-sdk] Balance fetch failed for agent "${agentId}":`, reason);
     }
     return {
-      totalBalance: String(totalBalance),
-      totalBalanceAsset: "usdc",
-      agentBalances: results,
-      ...Object.keys(agentErrors).length > 0 ? { agentErrors, agentRetryAt } : {}
+      balances: {
+        totalBalance: String(totalBalance),
+        totalBalanceAsset: "usdc",
+        agentBalances: results,
+        ...Object.keys(agentErrors).length > 0 ? { agentErrors, agentRetryAt } : {}
+      },
+      failures: agentFailures
     };
   }
   /**
@@ -9238,16 +9913,16 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
-    const walletChainClient = (0, import_viem16.createPublicClient)({
+    const walletChainClient = (0, import_viem17.createPublicClient)({
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem16.custom)(provider)
+      transport: (0, import_viem17.custom)(provider)
     });
     const publicClient = this.getPaidRpcClient(chainId);
     const approvalAmount = permit2ApprovalAmount(requiredAmount);
-    const wallet = (0, import_viem16.createWalletClient)({
+    const wallet = (0, import_viem17.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem16.custom)(provider)
+      transport: (0, import_viem17.custom)(provider)
     });
     await ensureWalletOnChain(walletChainClient, wallet, chainId);
     const hash = await wallet.writeContract({
@@ -9409,7 +10084,7 @@ var OwneySDK = class {
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem17 = require("viem");
+var import_viem18 = require("viem");
 var import_siwe2 = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -9536,7 +10211,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe2.SiweMessage({
-          address: (0, import_viem17.getAddress)(accountAddress),
+          address: (0, import_viem18.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,