@owney/sdk 0.7.25-beta.16 → 0.7.25-beta.18

package/dist/index.js

@@ -1543,6 +1543,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
   earningsRefreshes = /* @__PURE__ */ new Map();
   earningsSnapshot = null;
   earningsGeneration = 0;
+  balanceSnapshots = /* @__PURE__ */ new WeakMap();
   constructor(apiKey, rpcUrls, referralSource) {
     this.rpcUrls = resolveRpcUrls(rpcUrls);
     this.sdk = new ZyfaiSDK({
@@ -1746,7 +1747,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
    * chain/account switch fires the provider's `accountsChanged` →
    * `disconnectAccount` (nulls walletClient + authenticatedUserId) while our
    * own `connectAuth` guard still believes this chain is connected and
-   * early-returns. Without this, authenticated calls (depositFunds,
+   * early-returns. Without this, authenticated calls (sendDeposit,
    * withdrawFunds) fail with "No account connected".
    */
   async ensureConnected(state, chainId) {
@@ -2368,7 +2369,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         return { txHash, smartWallet, amount, evidence: evidence2 };
       }
       await this.ensureWalletDeployed(this.getAddress(), validChainId);
-      const raw2 = await this.sdk.depositFunds(
+      const raw2 = await this.sdk.sendDeposit(
         this.getAddress(),
         validChainId,
         amount,
@@ -2384,7 +2385,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         intendedAmount: amount,
         txHash: raw2.txHash,
         transfer: "unknown",
-        registration: "unknown",
+        registration: raw2.registration ? "confirmed" : "unknown",
         delivery: "not-applicable"
       };
       notifyFunding(onProgress, evidence);
@@ -2692,10 +2693,37 @@ var ZyfaiAgent = class _ZyfaiAgent {
   }
   async getBalances(state, chainId) {
     const requestedAt = Date.now();
+    const generation = this.earningsGeneration;
     const { smartWallet, chainId: validChainId } = await this.resolveSmartWallet(state, chainId);
     const raw2 = await this.sdk.getPortfolio(this.getAddress());
     const balance = mapBalances(raw2, validChainId, smartWallet);
-    return { ...balance, readMetadata: balance.readMetadata?.map((read2) => ({ ...read2, requestedAt })) };
+    const reads = balance.readMetadata?.map((read2) => ({ ...read2, requestedAt })) ?? [];
+    for (const asset of SupportedAssets.filter((item) => item.chainId === chainId)) {
+      if (!reads.some((read2) => read2.chainId === chainId && read2.asset === asset.symbol) && hasEmptyWithdrawalSnapshot(raw2, chainId, asset.symbol)) {
+        reads.push({ chainId, asset: asset.symbol, requestedAt, fetchedAt: Date.now(), positionsStatus: "available" });
+      }
+    }
+    const result = { ...balance, readMetadata: reads };
+    for (const read2 of reads) this.balanceSnapshots.set(read2, { raw: raw2, generation, owner: state.walletAddress.toLowerCase() });
+    return result;
+  }
+  async verifyWithdrawalBalance(state, evidence, balance) {
+    const read2 = balance.readMetadata?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
+    const snapshot = read2 && this.balanceSnapshots.get(read2);
+    const asset = SupportedAssets.find((item) => item.chainId === evidence.chainId && item.symbol === evidence.token);
+    if (!snapshot || snapshot.generation !== this.earningsGeneration || snapshot.owner !== state.walletAddress.toLowerCase() || !read2 || !asset || !evidence.txHash || !evidence.blockNumber || !balance.smartWallet || balance.smartWallet.toLowerCase() !== evidence.agentWallet?.toLowerCase() || !hasEmptyWithdrawalSnapshot(snapshot.raw, evidence.chainId, evidence.token)) return void 0;
+    const client = this.getPublicClient(evidence.chainId);
+    const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
+    if (blockNumber < BigInt(evidence.blockNumber)) return void 0;
+    const idle = await client.readContract({
+      address: asset.address,
+      abi: erc20Abi2,
+      functionName: "balanceOf",
+      args: [balance.smartWallet],
+      blockNumber
+    });
+    if (idle !== 0n || snapshot.generation !== this.earningsGeneration || this.connectedAddress?.toLowerCase() !== snapshot.owner || this.connectedChainId !== evidence.chainId) return void 0;
+    return { ...read2, withdrawalCheck: { txHash: evidence.txHash, blockNumber: blockNumber.toString() } };
   }
   earningsKey(state, chainId, smartWallet) {
     return JSON.stringify([
@@ -2901,10 +2929,11 @@ import {
   decodeEventLog as decodeEventLog2,
   encodeEventTopics,
   encodeFunctionData,
-  erc20Abi as erc20Abi3,
-  erc4626Abi,
-  getAddress as getAddress4,
-  isAddress as isAddress3
+  erc20Abi as erc20Abi4,
+  erc4626Abi as erc4626Abi2,
+  getAddress as getAddress5,
+  isAddress as isAddress3,
+  parseUnits
 } from "viem";
 import { base as base4 } from "viem/chains";
 
@@ -3694,6 +3723,7 @@ function mapYieldseekerBalances(contexts) {
       chainId: context.agent.chainId,
       asset: context.asset,
       fetchedAt: context.fetchedAt,
+      requestedAt: context.requestedAt,
       readVersion: context.readVersion,
       providerUpdatedAt: context.snapshot.updatedDate,
       snapshotId: String(context.snapshot.agentWalletSnapshotId),
@@ -4071,9 +4101,55 @@ function mapYieldseekerAgentApy(options, days) {
   };
 }
 
+// src/lib/remaining-vault-balance.ts
+import { erc20Abi as erc20Abi3, erc4626Abi, getAddress as getAddress2 } from "viem";
+async function remainingVaultBalance(client, wallet, asset, vaults, blockNumber) {
+  const addresses = [...new Set(vaults.map((value) => value.toLowerCase()))];
+  if (addresses.length > 64) return void 0;
+  const batches = [];
+  for (let index = 0; index < addresses.length; index += 10) batches.push(addresses.slice(index, index + 10));
+  const values = await Promise.all(batches.map(async (batch) => {
+    const balances = await client.multicall({
+      blockNumber,
+      allowFailure: true,
+      contracts: batch.map((address) => ({
+        address: getAddress2(address),
+        abi: erc20Abi3,
+        functionName: "balanceOf",
+        args: [wallet]
+      }))
+    });
+    if (balances.length !== batch.length) return void 0;
+    const funded = [];
+    for (let index = 0; index < batch.length; index++) {
+      const result = balances[index];
+      if (result?.status !== "success" || typeof result.result !== "bigint" || result.result < 0n) return void 0;
+      if (result.result > 0n) funded.push({ address: getAddress2(batch[index]), shares: result.result });
+    }
+    if (!funded.length) return 0n;
+    const valuations = await client.multicall({
+      blockNumber,
+      allowFailure: true,
+      contracts: funded.flatMap(({ address, shares }) => [
+        { address, abi: erc4626Abi, functionName: "asset" },
+        { address, abi: erc4626Abi, functionName: "convertToAssets", args: [shares] }
+      ])
+    });
+    if (valuations.length !== funded.length * 2) return void 0;
+    let total = 0n;
+    for (let index = 0; index < funded.length; index++) {
+      const underlying = valuations[index * 2], value = valuations[index * 2 + 1];
+      if (underlying?.status !== "success" || typeof underlying.result !== "string" || underlying.result.toLowerCase() !== asset.toLowerCase() || value?.status !== "success" || typeof value.result !== "bigint" || value.result < 0n) return void 0;
+      total += value.result;
+    }
+    return total;
+  }));
+  return values.some((value) => value === void 0) ? void 0 : values.reduce((sum, value) => sum + value, 0n);
+}
+
 // src/agents/yieldseeker/yieldseeker.wallet-version.ts
 import {
-  getAddress as getAddress2,
+  getAddress as getAddress3,
   isAddressEqual,
   parseAbi as parseAbi3
 } from "viem";
@@ -4097,9 +4173,9 @@ function yieldseekerOwnerPath(code) {
   return !code || code === "0x" || /^0xef0100[0-9a-f]{40}$/i.test(code) ? "eoa" : "smart";
 }
 async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNumber) {
-  const agentWallet = getAddress2(wallet);
-  const expectedOwner = getAddress2(owner);
-  const expectedAsset = getAddress2(asset);
+  const agentWallet = getAddress3(wallet);
+  const expectedOwner = getAddress3(owner);
+  const expectedAsset = getAddress3(asset);
   const [code, ownerCode, slot, actualOwner, index, actualAsset, actualFactory, latest] = await Promise.all([
     client.getBytecode({ address: agentWallet, blockNumber }),
     client.getBytecode({ address: expectedOwner, blockNumber }),
@@ -4113,7 +4189,7 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
   if (!code || code === "0x" || !slot || /^0x0+$/.test(slot)) {
     throw new Error("Yieldseeker wallet is not a deployed ERC1967 proxy");
   }
-  const implementation = getAddress2(`0x${slot.slice(-40)}`);
+  const implementation = getAddress3(`0x${slot.slice(-40)}`);
   const mapped = await client.readContract({
     address: YIELDSEEKER_FACTORY,
     abi: factoryAbi,
@@ -4140,7 +4216,7 @@ var YIELDSEEKER_UPGRADE_ABI = walletAbi;
 import {
   createWalletClient as createWalletClient2,
   custom as custom2,
-  getAddress as getAddress3,
+  getAddress as getAddress4,
   toHex
 } from "viem";
 import { getUserOperationHash as getUserOperationHash2 } from "viem/account-abstraction";
@@ -4192,6 +4268,14 @@ function sponsorError(message, safeToFallback, details = {}) {
     "yieldseeker"
   );
 }
+function assertIntentFresh(expiresAt) {
+  if (!Number.isFinite(expiresAt) || Date.now() + 5e3 >= expiresAt * 1e3)
+    throw sponsorError(
+      "The withdrawal sponsorship request expired. Please try again.",
+      true,
+      { failureCode: "SPONSOR_INTENT_EXPIRED" }
+    );
+}
 function providerReason(value) {
   if (typeof value !== "string") return void 0;
   return value.replace(/https?:\/\/\S+/gi, "[url]").replace(/0x[0-9a-fA-F]{40,}/g, "[hex]").replace(/[A-Za-z0-9_+=\/-]{48,}/g, "[token]").slice(0, 300);
@@ -4480,6 +4564,7 @@ async function submitEoa(input) {
   }
   const userOpHash = operationHash(operation);
   await assertOwnerSession(input.state, input.owner);
+  assertIntentFresh(input.expiresAt);
   const wallet = createWalletClient2({
     account: input.owner,
     chain: base3,
@@ -4488,6 +4573,7 @@ async function submitEoa(input) {
   const signature = await wallet.signMessage({ message: { raw: userOpHash } });
   operation = { ...operation, signature };
   await assertOwnerSession(input.state, input.owner);
+  assertIntentFresh(input.expiresAt);
   const userOperation = {
     sender: operation.sender,
     nonce: operation.nonce,
@@ -4565,6 +4651,7 @@ async function submitSmart(input) {
     throw sponsorError("This account cannot use a paymaster on Base.", true);
   await assertOwnerSession(input.state, input.owner);
   let sent;
+  assertIntentFresh(input.expiresAt);
   const requestedId = toHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));
   savePending(input.onPending, { callsId: requestedId }, true);
   await checkpoint(input.onBeforeSubmission, { callsId: requestedId });
@@ -4649,7 +4736,7 @@ async function submitSmart(input) {
   );
 }
 async function submitYieldseekerSponsoredWithdrawal(input) {
-  const owner = getAddress3(input.state.walletAddress);
+  const owner = getAddress4(input.state.walletAddress);
   const { intent, rpcUrl } = await requestIntent({
     apiKey: input.apiKey,
     routingApiBaseUrl: input.routingApiBaseUrl,
@@ -4663,11 +4750,12 @@ async function submitYieldseekerSponsoredWithdrawal(input) {
     action: "withdraw",
     refreshYieldseekerSignature: input.refreshYieldseekerSignature
   });
-  const args = { ...input, owner, rpcUrl };
+  assertIntentFresh(intent.expiresAt);
+  const args = { ...input, owner, rpcUrl, expiresAt: intent.expiresAt };
   return intent.ownerPath === "eoa" ? submitEoa(args) : submitSmart(args);
 }
 async function submitYieldseekerSponsoredUpgrade(input) {
-  const owner = getAddress3(input.state.walletAddress);
+  const owner = getAddress4(input.state.walletAddress);
   const { intent, rpcUrl } = await requestIntent({
     apiKey: input.apiKey,
     routingApiBaseUrl: input.routingApiBaseUrl,
@@ -4683,7 +4771,8 @@ async function submitYieldseekerSponsoredUpgrade(input) {
   });
   if (intent.ownerPath !== "smart")
     throw sponsorError("V1 upgrade sponsorship requires a Base Account owner.", true);
-  return submitSmart({ ...input, owner, rpcUrl });
+  assertIntentFresh(intent.expiresAt);
+  return submitSmart({ ...input, owner, rpcUrl, expiresAt: intent.expiresAt });
 }
 
 // src/agents/yieldseeker/yieldseeker.agent.ts
@@ -4784,6 +4873,8 @@ var YieldseekerAgent = class {
   transactionExecutor;
   unwindReceiptWaiter;
   agentContexts = /* @__PURE__ */ new Map();
+  balanceContexts = /* @__PURE__ */ new WeakMap();
+  balanceVaults = /* @__PURE__ */ new Map();
   users = /* @__PURE__ */ new Map();
   pendingAgents = /* @__PURE__ */ new Map();
   pendingWalletContexts = /* @__PURE__ */ new Map();
@@ -4829,8 +4920,8 @@ var YieldseekerAgent = class {
     if (useCachedV2 && cached && Date.now() - cached.at < 15 * 6e4) return { ...cached.status };
     const status = await readYieldseekerWalletStatus(
       this.getReceiptClient(),
-      getAddress4(context.wallet.walletAddress),
-      getAddress4(state.walletAddress),
+      getAddress5(context.wallet.walletAddress),
+      getAddress5(state.walletAddress),
       YIELDSEEKER_ASSET_METADATA[asset].address
     );
     this.rememberWalletStatus(key2, status);
@@ -5026,7 +5117,7 @@ var YieldseekerAgent = class {
       }
     } else {
       txHash = await this.submitTransaction(state, chainId, {
-        from: getAddress4(state.walletAddress),
+        from: getAddress5(state.walletAddress),
         to: before.agentWallet,
         data,
         value: "0",
@@ -5049,6 +5140,7 @@ var YieldseekerAgent = class {
     }
     this.users.clear();
     this.agentContexts.clear();
+    this.balanceVaults.clear();
     this.pendingAgents.clear();
     this.pendingWalletContexts.clear();
     this.readCache.clear();
@@ -5112,12 +5204,12 @@ var YieldseekerAgent = class {
     } else {
       try {
         txHash = await this.submitTransaction(state, chainId, {
-          from: getAddress4(state.walletAddress),
+          from: getAddress5(state.walletAddress),
           to: YIELDSEEKER_ASSET_METADATA[asset].address,
           data: encodeFunctionData({
-            abi: erc20Abi3,
+            abi: erc20Abi4,
             functionName: "transfer",
-            args: [getAddress4(context.wallet.walletAddress), BigInt(amount)]
+            args: [getAddress5(context.wallet.walletAddress), BigInt(amount)]
           }),
           value: "0",
           chainId
@@ -5251,7 +5343,7 @@ var YieldseekerAgent = class {
       );
       const positionsRead = this.readWithdrawalPositions(state, chainId, context);
       const metadata = YIELDSEEKER_ASSET_METADATA[asset];
-      const agentWallet = getAddress4(context.wallet.walletAddress);
+      const agentWallet = getAddress5(context.wallet.walletAddress);
       const readOwnerFunds = async (blockNumber) => {
         const feeTracker = await withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
           address: agentWallet,
@@ -5265,13 +5357,13 @@ var YieldseekerAgent = class {
         const [idle2, fees] = await Promise.all([
           withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
             address: metadata.address,
-            abi: erc20Abi3,
+            abi: erc20Abi4,
             functionName: "balanceOf",
             args: [agentWallet],
             blockNumber
           }), chainId, "eth_call", this.id),
           withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
-            address: getAddress4(feeTracker),
+            address: getAddress5(feeTracker),
             abi: YIELDSEEKER_FEE_TRACKER_ABI,
             functionName: "getFeesOwed",
             args: [agentWallet],
@@ -5313,7 +5405,7 @@ var YieldseekerAgent = class {
         let active = true;
         const checks = this.readVaultLiquidity(values.map((position2) => position2.yieldOption), agentWallet, blockNumber).catch(() => []);
         const reads = values.map(async (position2, index) => {
-          const address = getAddress4(position2.yieldOption.address);
+          const address = getAddress5(position2.yieldOption.address);
           try {
             const group = (await checks).slice(index * 3, index * 3 + 3);
             if (!active || group.length !== 3 || group.some((value) => value.status !== "success")) return null;
@@ -5327,7 +5419,7 @@ var YieldseekerAgent = class {
                 try {
                   const value = await this.getReceiptClient().readContract({
                     address,
-                    abi: erc4626Abi,
+                    abi: erc4626Abi2,
                     functionName,
                     args: [shares],
                     blockNumber
@@ -5540,7 +5632,7 @@ var YieldseekerAgent = class {
         delta: maxSettlementBasis.delta - payout,
         expectedNetDeposits: maxSettlementBasis.expectedNetDeposits - payout
       } : this.snapshotMovement(state, chainId, context, -payout);
-      const account = getAddress4(state.walletAddress);
+      const account = getAddress5(state.walletAddress);
       let receipt;
       const base6 = { agentId: this.id, chainId, token: asset, walletAddress: state.walletAddress, agentWallet: context.wallet.walletAddress, intendedAmount: amount === void 0 ? "MAX" : payout.toString(), transfer: "pending", registration: "not-applicable", delivery: "pending" };
       const data = amount === void 0 ? encodeFunctionData({
@@ -5563,7 +5655,7 @@ var YieldseekerAgent = class {
           refreshYieldseekerSignature: (rejected) => this.auth.refreshToken(state, chainId, rejected),
           userId: context.user.userId,
           agentId: context.agent.agentId,
-          agentWallet: getAddress4(context.wallet.walletAddress),
+          agentWallet: getAddress5(context.wallet.walletAddress),
           asset: metadata.address,
           callData: data,
           onPending: (pending) => notifyFunding(onProgress, { ...base6, ...pending }),
@@ -5578,7 +5670,7 @@ var YieldseekerAgent = class {
         onOwnerTransferAttempted?.();
         txHash = await this.submitTransaction(state, chainId, {
           from: account,
-          to: getAddress4(context.wallet.walletAddress),
+          to: getAddress5(context.wallet.walletAddress),
           data,
           value: "0",
           chainId
@@ -5686,17 +5778,17 @@ var YieldseekerAgent = class {
     return proof.available;
   }
   async readVaultLiquidity(options, wallet, blockNumber) {
-    const owner = getAddress4(wallet);
+    const owner = getAddress5(wallet);
     const batches = Array.from({ length: Math.ceil(options.length / YIELDSEEKER_VAULTS_PER_RPC_BATCH) }, (_, index) => options.slice(index * YIELDSEEKER_VAULTS_PER_RPC_BATCH, (index + 1) * YIELDSEEKER_VAULTS_PER_RPC_BATCH));
     const results = await Promise.all(batches.map((batch) => this.getReceiptClient().multicall({
       blockNumber,
       allowFailure: true,
       contracts: batch.flatMap((option) => {
-        const address = getAddress4(option.address);
+        const address = getAddress5(option.address);
         return [
-          { address, abi: erc4626Abi, functionName: "asset" },
-          { address, abi: erc20Abi3, functionName: "balanceOf", args: [owner] },
-          { address, abi: erc4626Abi, functionName: "maxWithdraw", args: [owner] }
+          { address, abi: erc4626Abi2, functionName: "asset" },
+          { address, abi: erc20Abi4, functionName: "balanceOf", args: [owner] },
+          { address, abi: erc4626Abi2, functionName: "maxWithdraw", args: [owner] }
         ];
       })
     })));
@@ -5772,7 +5864,7 @@ var YieldseekerAgent = class {
     const read2 = async () => {
       const client = this.getReceiptClient();
       const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
-      const wallet = getAddress4(context.wallet.walletAddress);
+      const wallet = getAddress5(context.wallet.walletAddress);
       assertReadCurrent();
       if (typeof blockNumber !== "bigint") throw unavailable();
       const indexedPositions = this.validateWithdrawalPositions(positions ?? [], chainId, context.asset);
@@ -5786,7 +5878,7 @@ var YieldseekerAgent = class {
         this.readVaultLiquidity(options, wallet, blockNumber),
         client.readContract({
           address: metadata.address,
-          abi: erc20Abi3,
+          abi: erc20Abi4,
           functionName: "balanceOf",
           args: [wallet],
           blockNumber
@@ -5801,7 +5893,7 @@ var YieldseekerAgent = class {
       if (typeof idle !== "bigint" || idle < 0n || !isAddress3(feeTracker) || /^0x0{40}$/i.test(feeTracker)) throw unavailable();
       assertReadCurrent();
       const fees = await client.readContract({
-        address: getAddress4(feeTracker),
+        address: getAddress5(feeTracker),
         abi: YIELDSEEKER_FEE_TRACKER_ABI,
         functionName: "getFeesOwed",
         args: [wallet],
@@ -5812,9 +5904,15 @@ var YieldseekerAgent = class {
       const verifiedVaults = [];
       let deployed = 0n;
       const collect = (options2, results) => {
+        assertReadCurrent();
+        const known = this.balanceVaults.get(contextKey) ?? /* @__PURE__ */ new Set();
+        this.balanceVaults.set(contextKey, known);
         let valid2 = true;
         options2.forEach((option, index) => {
           const group = results.slice(index * 3, index * 3 + 3);
+          const shareProbe = group[1];
+          if (shareProbe?.status === "success" && typeof shareProbe.result === "bigint" && shareProbe.result > 0n)
+            known.add(option.address.toLowerCase());
           if (group.length !== 3 || group.some((value) => value.status !== "success")) {
             valid2 = false;
             return;
@@ -5893,7 +5991,59 @@ var YieldseekerAgent = class {
   async getBalances(state, chainId, asset) {
     this.assertChain(chainId);
     if (asset !== void 0) this.assertAsset(asset);
-    return mapYieldseekerBalances(await this.loadPortfolio(state, chainId, { asset, allowMissingPositions: true }));
+    const contexts = await this.loadPortfolio(state, chainId, { asset, allowMissingPositions: true });
+    const balance = mapYieldseekerBalances(contexts);
+    for (const context of contexts) {
+      const read2 = balance.readMetadata.find((item) => item.asset === context.asset);
+      this.balanceContexts.set(read2, { context, generation: this.readGeneration });
+      const key2 = this.contextKey(state, chainId, context.asset);
+      const known = this.balanceVaults.get(key2) ?? /* @__PURE__ */ new Set();
+      for (const position2 of context.positions) known.add(position2.yieldOption.address.toLowerCase());
+      this.balanceVaults.set(key2, known);
+    }
+    return balance;
+  }
+  async verifyWithdrawalBalance(state, evidence, balance) {
+    this.assertAsset(evidence.token);
+    this.assertChain(evidence.chainId);
+    const read2 = balance.readMetadata?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
+    const cached = read2 && this.balanceContexts.get(read2);
+    const context = cached?.generation === this.readGeneration ? cached.context : void 0;
+    if (!context || context.positionsUnavailable || !read2 || !evidence.blockNumber || !evidence.txHash || context.wallet.walletAddress.toLowerCase() !== evidence.agentWallet?.toLowerCase()) return void 0;
+    const key2 = this.contextKey(state, evidence.chainId, evidence.token);
+    const generation = this.readGeneration, version = this.portfolioVersion(key2);
+    if (read2.readVersion !== version) return void 0;
+    const wallet = getAddress5(context.wallet.walletAddress);
+    const asset = YIELDSEEKER_ASSET_METADATA[evidence.token];
+    const client = this.getReceiptClient();
+    const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
+    if (blockNumber < BigInt(evidence.blockNumber)) return void 0;
+    const vaults = [...this.balanceVaults.get(key2) ?? []];
+    const [invested, idle, tracker] = await Promise.all([
+      remainingVaultBalance(client, wallet, asset.address, vaults, blockNumber),
+      client.readContract({ address: asset.address, abi: erc20Abi4, functionName: "balanceOf", args: [wallet], blockNumber }),
+      client.readContract({ address: wallet, abi: YIELDSEEKER_AGENT_WALLET_ABI, functionName: "feeTracker", blockNumber })
+    ]);
+    if (invested === void 0 || typeof idle !== "bigint" || idle < 0n || !isAddress3(tracker) || /^0x0{40}$/i.test(tracker)) return void 0;
+    const fees = await client.readContract({
+      address: tracker,
+      abi: YIELDSEEKER_FEE_TRACKER_ABI,
+      functionName: "getFeesOwed",
+      args: [wallet],
+      blockNumber
+    });
+    this.assertSession(generation, evidence.chainId, evidence.token);
+    if (version !== this.portfolioVersion(key2) || typeof fees !== "bigint" || fees < 0n) return void 0;
+    const total = idle + invested > fees ? idle + invested - fees : 0n;
+    const displayed = balance.assetBalances?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
+    if (!displayed || !evidence.confirmedAmount || !/^\d+$/.test(evidence.confirmedAmount)) return void 0;
+    const amount = parseUnits(displayed.amount, asset.decimals);
+    if (amount < 0n) return void 0;
+    const displayUnit = evidence.token === "USDC" ? 5000n : 500000000000n;
+    const movementUnit = BigInt(evidence.confirmedAmount) / 1000n;
+    const tolerance = movementUnit < displayUnit ? movementUnit : displayUnit;
+    if ((total > amount ? total - amount : amount - total) > tolerance) return void 0;
+    return { ...read2, withdrawalCheck: { txHash: evidence.txHash, blockNumber: blockNumber.toString() } };
   }
   invalidateFundingRead(state, chainId, asset, refreshUntil = Date.now() + YIELDSEEKER_SETTLEMENT_WINDOW_MS) {
     this.assertAsset(asset);
@@ -5933,9 +6083,9 @@ var YieldseekerAgent = class {
     if (!context) return void 0;
     const idle = await withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
       address: YIELDSEEKER_ASSET_METADATA[asset].address,
-      abi: erc20Abi3,
+      abi: erc20Abi4,
       functionName: "balanceOf",
-      args: [getAddress4(context.wallet.walletAddress)]
+      args: [getAddress5(context.wallet.walletAddress)]
     }), chainId, "eth_call", this.id);
     this.assertSession(generation, chainId, asset);
     if (typeof idle !== "bigint" || idle < 0n) throw this.invalidResponse("wallet deposit balance");
@@ -6047,11 +6197,13 @@ var YieldseekerAgent = class {
     const pending = this.pendingReads.get(key2);
     if (pending) return pending;
     const generation = this.readGeneration;
+    const requestedAt = Date.now();
     const request = Promise.resolve().then(read2).then((value) => {
       if (this.readGeneration === generation && this.pendingReads.get(key2) === request) {
         this.readCache.set(key2, {
           expiresAt: Date.now() + ttlMs,
           fetchedAt: Date.now(),
+          requestedAt,
           value
         });
       }
@@ -6128,7 +6280,7 @@ var YieldseekerAgent = class {
       this.users.set(key2, persisted);
       return persisted;
     }
-    const walletAddress = getAddress4(state.walletAddress);
+    const walletAddress = getAddress5(state.walletAddress);
     const generation = this.readGeneration;
     let user = null;
     try {
@@ -6420,6 +6572,7 @@ var YieldseekerAgent = class {
           ...context,
           snapshot: snapshot.agentSnapshot,
           fetchedAt: this.readCache.get(`snapshot:${contextKey}`)?.fetchedAt,
+          requestedAt: this.readCache.get(`snapshot:${contextKey}`)?.requestedAt,
           readVersion: version,
           positionsUnavailable,
           ...portfolioParts
@@ -6619,7 +6772,7 @@ var YieldseekerAgent = class {
       return hash2;
     }
     this.assertTransaction(transaction, state, chainId);
-    const account = getAddress4(state.walletAddress);
+    const account = getAddress5(state.walletAddress);
     const walletClient = createWalletClient3({
       account,
       chain: base4,
@@ -6637,7 +6790,7 @@ var YieldseekerAgent = class {
     const hash = await walletClient.sendTransaction({
       account,
       chain: base4,
-      to: getAddress4(transaction.to),
+      to: getAddress5(transaction.to),
       data: transaction.data,
       value: BigInt(transaction.value)
     });
@@ -6741,7 +6894,7 @@ var YieldseekerAgent = class {
     return receipt;
   }
   assertTransaction(transaction, state, chainId) {
-    if (!transaction || typeof transaction.from !== "string" || !isAddress3(transaction.from) || typeof transaction.to !== "string" || !isAddress3(transaction.to) || typeof transaction.data !== "string" || !/^0x[a-fA-F0-9]*$/.test(transaction.data) || typeof transaction.value !== "string" || !/^[0-9]+$/.test(transaction.value) || transaction.chainId !== chainId || getAddress4(transaction.from) !== getAddress4(state.walletAddress)) {
+    if (!transaction || typeof transaction.from !== "string" || !isAddress3(transaction.from) || typeof transaction.to !== "string" || !isAddress3(transaction.to) || typeof transaction.data !== "string" || !/^0x[a-fA-F0-9]*$/.test(transaction.data) || typeof transaction.value !== "string" || !/^[0-9]+$/.test(transaction.value) || transaction.chainId !== chainId || getAddress5(transaction.from) !== getAddress5(state.walletAddress)) {
       throw this.invalidResponse("transaction");
     }
   }
@@ -6900,7 +7053,7 @@ async function withFailureReporting(apiKey, agentType, fn, baseUrl) {
 }
 
 // src/lib/helpers/withdraw-helper.ts
-import { parseUnits } from "viem";
+import { parseUnits as parseUnits2 } from "viem";
 function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decimals) {
   const target = asset.toUpperCase();
   return agents.map((agent) => {
@@ -6908,7 +7061,7 @@ function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decima
     const tokenBalance = agentBalance?.tokens.find(
       (t) => t.chainId === chainId && t.asset.toUpperCase() === target
     );
-    let balance = tokenBalance ? parseUnits(tokenBalance.amount, decimals) : 0n;
+    let balance = tokenBalance ? parseUnits2(tokenBalance.amount, decimals) : 0n;
     if (agent.balanceComposition === "tokens-plus-positions") {
       const chainNameById = {
         1: "ETHEREUM",
@@ -6920,14 +7073,14 @@ function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decima
         const positionChain = position2.chain.trim().toUpperCase();
         const matchesChain = positionChain === String(chainId) || targetChain !== void 0 && positionChain === targetChain;
         if (!matchesChain || position2.asset.toUpperCase() !== target) continue;
-        balance += position2.withdrawableAmountRaw !== void 0 ? BigInt(position2.withdrawableAmountRaw) : parseUnits(position2.amount, decimals);
+        balance += position2.withdrawableAmountRaw !== void 0 ? BigInt(position2.withdrawableAmountRaw) : parseUnits2(position2.amount, decimals);
       }
     }
     const assetTotal = agentBalance?.assetBalances?.find(
       (t) => t.chainId === chainId && t.asset.toUpperCase() === target
     );
     if (assetTotal) {
-      const total = parseUnits(assetTotal.amount, decimals);
+      const total = parseUnits2(assetTotal.amount, decimals);
       if (total < balance) balance = total > 0n ? total : 0n;
     }
     return { agent, balance };
@@ -7087,7 +7240,7 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
 
 // src/client.ts
 import {
-  parseUnits as parseUnits2,
+  parseUnits as parseUnits3,
   createPublicClient as createPublicClient4,
   createWalletClient as createWalletClient4,
   custom as custom4
@@ -7247,7 +7400,40 @@ async function execute(i, key2, plan) {
   const send = async (initial) => {
     let body = initial;
     save(key2, body);
+    const rejectedPreparation = (error) => !body.serializedTransaction && error instanceof OwneyError && typeof error.details?.statusCode === "number" && error.details.statusCode >= 400 && error.details.statusCode < 500 && ![408, 429].includes(error.details.statusCode);
     try {
+      const post = () => postSponsorBatchTransfer({ apiKey: i.apiKey, baseUrl: i.baseUrl, body });
+      const pendingError = (phase, txHash) => new OwneyError(
+        "DEPOSIT_IN_PROGRESS",
+        phase === "approval" ? "Deposit approval is awaiting confirmation. Retry the same amount to continue it." : "Deposit is awaiting confirmation. Its transaction is still being checked.",
+        { sponsorPending: true, phase, txHash, safeToFallback: false }
+      );
+      const assertReceipt = (receipt, phase) => {
+        if (receipt.status !== "success") throw new OwneyError(
+          "SPONSOR_REQUEST_FAILED",
+          `Sponsored ${phase} transaction reverted. Please retry.`,
+          { notSubmitted: true, safeToFallback: false }
+        );
+      };
+      const waitForConfirmation = async (phase, hash2) => {
+        let receipt;
+        try {
+          receipt = await i.pub.waitForTransactionReceipt({ hash: hash2, confirmations: 1, timeout: 9e4, checkReplacement: false });
+        } catch {
+          receipt = await i.pub.getTransactionReceipt({ hash: hash2 }).catch(() => void 0);
+        }
+        if (!receipt) throw pendingError(phase, hash2);
+        assertReceipt(receipt, phase);
+      };
+      const postSigned = async (phase, hash2) => {
+        try {
+          return await post();
+        } catch (error) {
+          if (rejectedPreparation(error) || error instanceof OwneyError && error.details?.notSubmitted === true) throw error;
+          await waitForConfirmation(phase, hash2);
+          return void 0;
+        }
+      };
       if (body.erc2612Permit && !body.serializedPermitTransaction) {
         const preparedPermit = await postSponsorBatchTransfer({
           apiKey: i.apiKey,
@@ -7265,11 +7451,17 @@ async function execute(i, key2, plan) {
         save(key2, body);
       }
       if (!body.serializedTransaction) {
-        const prepared = await postSponsorBatchTransfer({
-          apiKey: i.apiKey,
-          baseUrl: i.baseUrl,
-          body
-        });
+        const permitHash = body.serializedPermitTransaction ? keccak256(body.serializedPermitTransaction) : void 0;
+        let prepared = permitHash ? await postSigned("approval", permitHash) : await post();
+        if (prepared?.status === "pending") {
+          if (!permitHash || prepared.phase !== "approval" || prepared.txHash !== permitHash)
+            throw new Error("Sponsorship approval does not match the pending transaction.");
+          await waitForConfirmation("approval", permitHash);
+          prepared = void 0;
+        }
+        if (!prepared) prepared = await post();
+        if (prepared.status === "pending" && permitHash && prepared.phase === "approval" && prepared.txHash === permitHash)
+          throw pendingError("approval", permitHash);
         if (!prepared.serializedTransaction || keccak256(prepared.serializedTransaction) !== prepared.txHash)
           throw new Error(
             "Sponsorship API did not return a valid prepared transaction."
@@ -7284,19 +7476,30 @@ async function execute(i, key2, plan) {
         i.onSubmitted?.(keccak256(body.serializedTransaction));
       } catch {
       }
-      const result = await postSponsorBatchTransfer({
-        apiKey: i.apiKey,
-        baseUrl: i.baseUrl,
-        body
-      });
-      if (result.txHash !== keccak256(body.serializedTransaction))
-        throw new Error(
-          "Sponsorship receipt does not match the pending transaction."
-        );
+      const hash = keccak256(body.serializedTransaction);
+      const existing = await i.pub.getTransactionReceipt({ hash }).catch(() => void 0);
+      if (existing) {
+        assertReceipt(existing, "deposit");
+        void post().catch(() => void 0);
+        clear(key2);
+        return hash;
+      }
+      let result = await postSigned("deposit", hash);
+      if (result?.status === "pending" && result.phase === "approval" && body.serializedPermitTransaction && result.txHash === keccak256(body.serializedPermitTransaction)) {
+        await waitForConfirmation("approval", result.txHash);
+        result = await postSigned("deposit", hash);
+        if (result?.status === "pending" && result.phase === "approval" && result.txHash === keccak256(body.serializedPermitTransaction)) throw pendingError("approval", result.txHash);
+      }
+      if (result) {
+        if (result.txHash !== hash || result.status === "pending" && result.phase !== "deposit")
+          throw new Error("Sponsorship receipt does not match the pending transaction.");
+        if (result.status === "pending") await waitForConfirmation("deposit", hash);
+      }
+      if (!result || result.status === "pending") void post().catch(() => void 0);
       clear(key2);
-      return result.txHash;
+      return hash;
     } catch (error) {
-      if (!body.serializedTransaction || error instanceof OwneyError && error.details?.notSubmitted === true)
+      if (!body.serializedTransaction && !body.serializedPermitTransaction || rejectedPreparation(error) || error instanceof OwneyError && error.details?.notSubmitted === true)
         clear(key2);
       throw error;
     }
@@ -7502,7 +7705,7 @@ async function runAgentDepositBatch(chainId, legs, transfer) {
 }
 
 // src/lib/sponsored-calls-deposit.ts
-import { encodeFunctionData as encodeFunctionData2, erc20Abi as erc20Abi4, toHex as toHex2 } from "viem";
+import { encodeFunctionData as encodeFunctionData2, erc20Abi as erc20Abi5, toHex as toHex2 } from "viem";
 var DEFAULT_POLL_INTERVAL_MS = 1500;
 var DEFAULT_MAX_POLLS = 30;
 async function paymasterSupported(provider, owner, chainId) {
@@ -7548,7 +7751,7 @@ function makeSponsoredCallsCallback(deps) {
       to: token,
       value: "0x0",
       data: encodeFunctionData2({
-        abi: erc20Abi4,
+        abi: erc20Abi5,
         functionName: "transfer",
         args: [transfer.to, BigInt(transfer.amount)]
       })
@@ -7749,6 +7952,7 @@ var OwneySDK = class {
   cachedSponsoredCallsCallbacks = /* @__PURE__ */ new Map();
   agentReads = new AgentReads();
   recoveredFundingReads = /* @__PURE__ */ new Set();
+  fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
   activationChecks = /* @__PURE__ */ new Map();
   readAgent(agent, method, fetch2, params = null) {
     const key2 = JSON.stringify([
@@ -7794,6 +7998,7 @@ var OwneySDK = class {
     }
     this.agentReads.clearInFlight();
     this.activationChecks.clear();
+    this.fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
     this.state = { provider, walletAddress, chainId: null };
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
@@ -7805,6 +8010,7 @@ var OwneySDK = class {
    */
   async disconnect() {
     this.state = null;
+    this.fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
     for (const agent of this.agents.values()) {
       await agent.disconnect();
     }
@@ -8705,9 +8911,8 @@ var OwneySDK = class {
         verified = inspectFundingReceipt(receipt, { ...evidence, agentWallet, intendedAmount: "MAX" }, token.address, direction);
     }
     const key2 = `${state.walletAddress.toLowerCase()}:${chainId}:${evidence.agentId}:${evidence.token}:${evidence.txHash}`;
-    if ((verified.transfer === "confirmed" || verified.transfer === "failed" && verified.confirmedAmount === "0") && !this.recoveredFundingReads.has(key2)) {
-      if (options.refreshBalance !== false)
-        agent.invalidateFundingRead?.(state, chainId, evidence.token, options.balanceRefreshUntil);
+    if (options.refreshBalance !== false && (verified.transfer === "confirmed" || verified.transfer === "failed" && verified.confirmedAmount === "0") && !this.recoveredFundingReads.has(key2)) {
+      agent.invalidateFundingRead?.(state, chainId, evidence.token, options.balanceRefreshUntil);
       this.recoveredFundingReads.add(key2);
       if (this.recoveredFundingReads.size > 256) this.recoveredFundingReads.delete(this.recoveredFundingReads.values().next().value);
     }
@@ -8815,6 +9020,44 @@ var OwneySDK = class {
     assertCurrent();
     return true;
   }
+  /** Optional post-payout display proof; receipt verification and the provider
+   * adapter must agree before attaching it to this exact balance object. */
+  async verifyWithdrawalBalance(evidence, balance) {
+    const { state, chainId, assertCurrent } = this.captureReadScope(evidence.chainId);
+    const agent = this.getAgent(evidence.agentId);
+    if (!agent.verifyWithdrawalBalance || !evidence.txHash || state.walletAddress.toLowerCase() !== evidence.walletAddress.toLowerCase()) return balance;
+    const key2 = `${state.walletAddress.toLowerCase()}:${chainId}:${evidence.agentId}:${evidence.token}:${evidence.txHash}:${evidence.intendedAmount}`;
+    const checks = this.fundingBalanceChecks.get(balance) ?? /* @__PURE__ */ new Map();
+    this.fundingBalanceChecks.set(balance, checks);
+    const previous = checks.get(key2);
+    if (previous) {
+      const result2 = await previous;
+      assertCurrent();
+      return result2;
+    }
+    let timer;
+    const read2 = async () => {
+      const verified = await this.inspectFunding(evidence, "withdraw", { refreshBalance: false });
+      assertCurrent();
+      if (verified.transfer !== "confirmed" || verified.delivery !== "confirmed" || !verified.blockNumber) return balance;
+      const metadata = await agent.verifyWithdrawalBalance(state, verified, balance);
+      assertCurrent();
+      if (!metadata || metadata.chainId !== chainId || metadata.asset.toUpperCase() !== evidence.token || !metadata.withdrawalCheck || metadata.withdrawalCheck.txHash.toLowerCase() !== verified.txHash?.toLowerCase() || BigInt(metadata.withdrawalCheck.blockNumber) < BigInt(verified.blockNumber)) return balance;
+      return { ...balance, readMetadata: [
+        ...(balance.readMetadata ?? []).filter((item) => !(item.chainId === chainId && item.asset.toUpperCase() === evidence.token)),
+        metadata
+      ] };
+    };
+    const pending = Promise.race([read2(), new Promise((resolve) => {
+      timer = setTimeout(() => resolve(balance), 2e3);
+    })]).catch(() => balance).finally(() => {
+      if (timer) clearTimeout(timer);
+    });
+    checks.set(key2, pending);
+    const result = await pending;
+    assertCurrent();
+    return result;
+  }
   /** A display acknowledgement controls polling only; it never confirms a financial outcome. */
   endFundingBalanceRefresh(evidence, read2) {
     const { state, chainId } = this.captureReadScope(evidence.chainId);
@@ -9083,7 +9326,7 @@ var OwneySDK = class {
       if (this.isUserRejectedWithdrawal(originalFailure)) throw originalFailure;
       if (entry.balance !== 0n && entry.agent.id !== "yieldseeker") {
         const total = aggregated.agentBalances[entry.agent.id]?.assetBalances?.find((value) => value.chainId === chainId && value.asset.toUpperCase() === token);
-        if (!total || parseUnits2(total.amount, assetInfo.decimals) <= entry.balance) return;
+        if (!total || parseUnits3(total.amount, assetInfo.decimals) <= entry.balance) return;
       }
       try {
         const otherAvailable = indexedAvailable - entry.balance;
@@ -9858,7 +10101,7 @@ var OwneySDK = class {
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
-import { getAddress as getAddress5 } from "viem";
+import { getAddress as getAddress6 } from "viem";
 import { SiweMessage as SiweMessage2 } from "siwe";
 import { ZyfaiSDK as ZyfaiSDK2 } from "@zyfai/sdk";
 
@@ -9985,7 +10228,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new SiweMessage2({
-          address: getAddress5(accountAddress),
+          address: getAddress6(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,