@owney/sdk 0.7.25-beta.19 → 0.7.25-beta.21

package/dist/index.cjs

@@ -50,6 +50,29 @@ var accountExecutionAbi = (0, import_viem.parseAbi)([
 ]);
 var entryPoint06 = "0x5ff137d4b0fdcd49dca30c7cf57e578a026d2789";
 var entryPoint07 = "0x0000000071727de22e5e9d8baf0edac6f37da032";
+function yieldseekerExecution(receipt, evidence) {
+  const operationEvents = receipt.logs.flatMap((log) => {
+    if (![entryPoint06, entryPoint07].includes(log.address.toLowerCase())) return [];
+    try {
+      const event = (0, import_viem.decodeEventLog)({ abi: import_account_abstraction.entryPoint06Abi, data: log.data, topics: log.topics });
+      return event.eventName === "UserOperationEvent" ? [{ ...event.args, logIndex: log.logIndex }] : [];
+    } catch {
+      return [];
+    }
+  }).sort((a, b) => a.logIndex - b.logIndex);
+  const bundled = !!evidence.userOpHash || !!evidence.callsId || operationEvents.length > 0 || [entryPoint06, entryPoint07].includes(receipt.to?.toLowerCase() ?? "");
+  if (!bundled) return { status: "confirmed", logs: receipt.logs };
+  const senders = evidence.userOperation?.sender ? [evidence.userOperation.sender.toLowerCase()] : evidence.callsId ? [evidence.walletAddress.toLowerCase()] : [evidence.walletAddress.toLowerCase(), evidence.agentWallet?.toLowerCase()];
+  const matches = operationEvents.filter((event) => senders.includes(event.sender.toLowerCase()) && (!evidence.userOpHash || event.userOpHash.toLowerCase() === evidence.userOpHash.toLowerCase()));
+  if (matches.length !== 1) return { status: "unknown", logs: [] };
+  const operation = matches[0];
+  if (!operation.success) return { status: "failed", logs: [] };
+  const previous = operationEvents.filter((event) => event.logIndex < operation.logIndex).at(-1)?.logIndex ?? -1;
+  return {
+    status: "confirmed",
+    logs: receipt.logs.filter((log) => log.logIndex > previous && log.logIndex < operation.logIndex)
+  };
+}
 function isFullYieldseekerWithdrawal(transaction, evidence, tokenAddress, receipt) {
   if (evidence.agentId !== "yieldseeker" || transaction.chainId !== evidence.chainId || transaction.hash.toLowerCase() !== evidence.txHash?.toLowerCase() || !evidence.agentWallet) return false;
   const matchesFullCall = (data) => {
@@ -95,8 +118,27 @@ function isFullYieldseekerWithdrawal(transaction, evidence, tokenAddress, receip
     return false;
   }
 }
-function inspectFundingReceipt(receipt, evidence, tokenAddress, direction) {
+function inspectFundingReceipt(receipt, evidence, tokenAddress, direction, options = {}) {
+  evidence = {
+    ...evidence,
+    confirmedAmount: void 0,
+    amountCompletion: void 0,
+    shortfallAmount: void 0,
+    blockNumber: void 0,
+    logIndexes: void 0,
+    transferLogs: void 0
+  };
+  if (evidence.txHash && receipt.transactionHash && evidence.txHash.toLowerCase() !== receipt.transactionHash.toLowerCase())
+    return { ...evidence, transfer: "unknown", delivery: direction === "withdraw" ? "unknown" : "not-applicable" };
   if (receipt.status !== "success") return { ...evidence, transfer: "failed", delivery: "failed" };
+  const execution = direction === "withdraw" && evidence.agentId === "yieldseeker" ? yieldseekerExecution(receipt, evidence) : { status: "confirmed", logs: receipt.logs };
+  if (execution.status !== "confirmed") return {
+    ...evidence,
+    blockNumber: receipt.blockNumber.toString(),
+    ...execution.status === "failed" ? { confirmedAmount: "0" } : {},
+    transfer: execution.status,
+    delivery: execution.status
+  };
   let amount = 0n;
   const seen = /* @__PURE__ */ new Set();
   const attributed = /* @__PURE__ */ new Map();
@@ -107,7 +149,7 @@ function inspectFundingReceipt(receipt, evidence, tokenAddress, direction) {
   const logIndexes = [];
   const transferLogs = [];
   const zeroTransferLogs = [];
-  for (const log of [...receipt.logs].sort((a, b) => a.logIndex - b.logIndex)) {
+  for (const log of [...execution.logs].sort((a, b) => a.logIndex - b.logIndex)) {
     if (log.address.toLowerCase() !== tokenAddress.toLowerCase()) continue;
     if (seen.has(log.logIndex)) continue;
     seen.add(log.logIndex);
@@ -133,7 +175,7 @@ function inspectFundingReceipt(receipt, evidence, tokenAddress, direction) {
     }
   }
   const expected = /^\d+$/.test(evidence.intendedAmount) ? BigInt(evidence.intendedAmount) : void 0;
-  const emptyPayout = direction === "withdraw" && evidence.agentId === "yieldseeker" && amount === 0n && zeroTransferLogs.length > 0 && receipt.logs.some((log) => {
+  const emptyPayout = direction === "withdraw" && evidence.agentId === "yieldseeker" && amount === 0n && zeroTransferLogs.length > 0 && execution.logs.some((log) => {
     if (log.address.toLowerCase() !== agent) return false;
     try {
       const { args } = (0, import_viem.decodeEventLog)({ abi: withdrawalEventAbi, data: log.data, topics: log.topics });
@@ -151,18 +193,30 @@ function inspectFundingReceipt(receipt, evidence, tokenAddress, direction) {
     transfer: "failed",
     delivery: "failed"
   };
-  const delivered = amount > 0n && (expected === void 0 || amount >= expected);
+  const exactReceipt = !!evidence.txHash && /^0x[\da-f]{64}$/i.test(evidence.txHash) && receipt.transactionHash?.toLowerCase() === evidence.txHash.toLowerCase();
+  const delivered = amount > 0n && (options.requireAmountMatch ? expected === void 0 || amount === expected : direction === "withdraw" && exactReceipt || expected === void 0 || amount >= expected);
   return {
     ...evidence,
     blockNumber: receipt.blockNumber.toString(),
     logIndexes,
     transferLogs,
     ...amount > 0n ? { confirmedAmount: amount.toString() } : {},
+    ...delivered && direction === "withdraw" && expected !== void 0 ? {
+      amountCompletion: amount < expected ? "shortfall" : "complete",
+      shortfallAmount: (amount < expected ? expected - amount : 0n).toString()
+    } : {},
     transfer: delivered ? "confirmed" : "unknown",
     delivery: direction === "withdraw" ? delivered ? "confirmed" : "unknown" : "not-applicable"
   };
 }
 
+// src/lib/helpers/funding-amount.ts
+function isFundingAmount(value, allowZero = false) {
+  if (typeof value !== "string" || !/^\d{1,78}$/.test(value)) return false;
+  const amount = BigInt(value);
+  return (allowZero ? amount >= 0n : amount > 0n) && amount <= (1n << 256n) - 1n;
+}
+
 // src/lib/deposit-batch-callback.ts
 var batchCallbacks = /* @__PURE__ */ new WeakMap();
 var getDepositBatchTransfer = (callback) => callback ? batchCallbacks.get(callback) : void 0;
@@ -232,6 +286,240 @@ var AgentChainIncompatibleError = class extends OwneyError {
   }
 };
 
+// src/lib/transfer-auth.ts
+var import_viem2 = require("viem");
+
+// src/lib/sponsor-client.ts
+var ROUTING_API_BASE_URL = "https://owney-routing-api-243946518160.europe-west4.run.app";
+async function postPaymasterIntent(input) {
+  const base6 = input.baseUrl ?? ROUTING_API_BASE_URL;
+  let res;
+  try {
+    res = await fetch(`${base6}/api/v1/sponsor/paymaster-intent`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        "x-owney-api-key": input.apiKey,
+        Authorization: `Signature ${input.yieldseekerSignature}`
+      },
+      body: JSON.stringify(input.body)
+    });
+  } catch (networkError) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Paymaster intent network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
+      { cause: String(networkError), safeToFallback: true }
+    );
+  }
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+  }
+  if (!res.ok || !parsed?.success || typeof parsed.data?.intent !== "string" || typeof parsed.data.expiresAt !== "number") {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Paymaster intent API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
+      {
+        statusCode: res.status,
+        responseBody: text.slice(0, 500),
+        safeToFallback: true
+      }
+    );
+  }
+  return parsed.data;
+}
+async function getSponsorRelayerAddress(input) {
+  const base6 = input.baseUrl ?? ROUTING_API_BASE_URL;
+  let res;
+  try {
+    res = await fetch(
+      `${base6}/api/v1/sponsor/relayer-address?chainId=${input.chainId}`,
+      {
+        headers: { "x-owney-api-key": input.apiKey }
+      }
+    );
+  } catch (networkError) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Sponsor API network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
+      { cause: String(networkError), safeToFallback: true }
+    );
+  }
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+  }
+  if (!res.ok || !parsed?.success || !parsed.data?.relayer) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      `Sponsor API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
+      {
+        statusCode: res.status,
+        responseBody: text.slice(0, 500),
+        safeToFallback: true
+      }
+    );
+  }
+  return parsed.data.relayer;
+}
+async function postSponsorBatchTransfer(input) {
+  let res;
+  try {
+    res = await fetch(
+      `${input.baseUrl ?? ROUTING_API_BASE_URL}/api/v1/sponsor/permit2-batch`,
+      {
+        method: "POST",
+        headers: {
+          "content-type": "application/json",
+          "x-owney-api-key": input.apiKey
+        },
+        body: JSON.stringify(input.body)
+      }
+    );
+  } catch {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      "Deposit status is unknown. Retry the same amount to check it.",
+      { safeToFallback: false }
+    );
+  }
+  const parsed = await res.json().catch(() => null);
+  if (!res.ok || !parsed?.success || !/^0x[0-9a-fA-F]{64}$/.test(parsed.data?.txHash ?? "")) {
+    throw new OwneyError(
+      "SPONSOR_REQUEST_FAILED",
+      "Deposit could not be confirmed. Retry the same amount to check its status.",
+      {
+        statusCode: res.status,
+        safeToFallback: false,
+        notSubmitted: parsed?.notSubmitted === true || parsed?.error?.notSubmitted === true || parsed?.error?.details?.notSubmitted === true
+      }
+    );
+  }
+  return parsed.data;
+}
+
+// src/lib/permit2.ts
+var import_viem3 = require("viem");
+var PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
+var MAX_UINT256 = 2n ** 256n - 1n;
+function permit2ApprovalAmount(requiredAmount) {
+  if (requiredAmount <= 0n) {
+    throw new Error("Permit2 approval requires a positive deposit amount");
+  }
+  return MAX_UINT256;
+}
+var ERC20_ALLOWANCE_ABI = [
+  {
+    type: "function",
+    name: "allowance",
+    stateMutability: "view",
+    inputs: [
+      { name: "owner", type: "address" },
+      { name: "spender", type: "address" }
+    ],
+    outputs: [{ name: "", type: "uint256" }]
+  },
+  {
+    type: "function",
+    name: "approve",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "spender", type: "address" },
+      { name: "amount", type: "uint256" }
+    ],
+    outputs: [{ name: "", type: "bool" }]
+  },
+  {
+    type: "function",
+    name: "balanceOf",
+    stateMutability: "view",
+    inputs: [{ name: "account", type: "address" }],
+    outputs: [{ name: "", type: "uint256" }]
+  }
+];
+function randomPermit2Nonce() {
+  const bytes = new Uint8Array(32);
+  globalThis.crypto.getRandomValues(bytes);
+  return BigInt((0, import_viem3.bytesToHex)(bytes));
+}
+async function readPermit2Allowance(publicClient, token, owner, blockNumber) {
+  return publicClient.readContract({
+    address: token,
+    abi: ERC20_ALLOWANCE_ABI,
+    functionName: "allowance",
+    args: [owner, PERMIT2_ADDRESS],
+    ...blockNumber === void 0 ? {} : { blockNumber }
+  });
+}
+async function readErc20Balance(publicClient, token, owner) {
+  return publicClient.readContract({
+    address: token,
+    abi: ERC20_ALLOWANCE_ABI,
+    functionName: "balanceOf",
+    args: [owner]
+  });
+}
+
+// src/lib/chain-guard.ts
+var CHAIN_NAMES = {
+  1: "Ethereum",
+  8453: "Base",
+  42161: "Arbitrum"
+};
+function chainName(chainId) {
+  return CHAIN_NAMES[chainId] ?? `chain ${chainId}`;
+}
+async function ensureWalletOnChain(pub, wallet, expected) {
+  const actual = await pub.getChainId();
+  if (actual === expected) return;
+  try {
+    await wallet.switchChain({ id: expected });
+  } catch (error) {
+    throw new OwneyError(
+      "CHAIN_MISMATCH",
+      `Your wallet is on ${chainName(actual)}. Switch it to ${chainName(expected)} and try again.`,
+      {
+        expectedChainId: expected,
+        actualChainId: actual,
+        cause: error instanceof Error ? error.message : String(error)
+      }
+    );
+  }
+  const after = await pub.getChainId();
+  if (after !== expected) {
+    throw new OwneyError(
+      "CHAIN_MISMATCH",
+      `Your wallet is still on ${chainName(after)}. Switch it to ${chainName(expected)} and try again.`,
+      { expectedChainId: expected, actualChainId: after }
+    );
+  }
+}
+
+// src/lib/sponsored-deposit.ts
+var AUTH_WINDOW_SECONDS = 15 * 60;
+var verificationSetter = /* @__PURE__ */ Symbol("owney.depositVerificationSetter");
+function provideDepositVerificationContext(callback, context) {
+  callback[verificationSetter]?.(context);
+}
+function makeVerificationAwareDepositCallback(implementation) {
+  let nextVerification;
+  const callback = async (smartWallet, chainId, amount) => {
+    const verification = nextVerification;
+    nextVerification = void 0;
+    return implementation(smartWallet, chainId, amount, verification);
+  };
+  Object.defineProperty(callback, verificationSetter, {
+    value: (context) => {
+      nextVerification = context;
+    }
+  });
+  return callback;
+}
+
 // src/lib/rate-limit.ts
 function rateLimitDelay(error, now = Date.now()) {
   const seen = /* @__PURE__ */ new Set();
@@ -379,7 +667,7 @@ var AgentReads = class {
 
 // src/agents/zyfai/zyfai.withdraw-submission.ts
 var listenersByClient = /* @__PURE__ */ new WeakMap();
-function observeWithdrawalSubmission(sdk, chainId, token) {
+function observeWithdrawalSubmission(sdk, chainId, token, assertCurrent) {
   const client = sdk.httpClient;
   if (!client || typeof client.get !== "function" || typeof client.post !== "function")
     return { attempted: () => void 0, rejected: () => false, request: () => void 0, stop: () => {
@@ -396,6 +684,7 @@ function observeWithdrawalSubmission(sdk, chainId, token) {
         const withdrawal = method === "get" && url === "/users/withdraw" || method === "post" && url === "/users/partial-withdraw";
         const payload = method === "get" ? options?.params : options;
         const matching = withdrawal ? [...observers].filter((observer) => observer.chainId === payload?.chainId && observer.token === payload?.tokenSymbol) : [];
+        for (const observer of matching) observer.assertCurrent?.();
         const startedAt = Date.now();
         const request2 = {
           attempted: true,
@@ -440,7 +729,7 @@ function observeWithdrawalSubmission(sdk, chainId, token) {
           const status = error?.response?.status;
           if (request2.httpStatus === void 0 && typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599)
             request2.httpStatus = status;
-          request2.failure = message === "Unauthorized: Invalid API key" ? "unauthorized" : message === "Forbidden: Access denied" ? "forbidden" : message === "Rate limit exceeded. Please try again later." ? "rate-limited" : /^Idle balance \d+(?:\.\d+)? (USDC|WETH|ETH|EURC) is below the minimum withdrawal of \d+(?:\.\d+)? \1\.?$/.test(message) ? "insufficient-balance" : /^User doesn't have any active session key\.?$/.test(message) ? "session-key-missing" : method === "post" && request2.httpStatus === 400 && message === "Partial withdrawal already in progress" ? "withdrawal-in-progress" : message === "Network error: Unable to reach the server" ? "network" : "other";
+          request2.failure = message === "Unauthorized: Invalid API key" ? "unauthorized" : message === "Forbidden: Access denied" ? "forbidden" : message === "Rate limit exceeded. Please try again later." ? "rate-limited" : request2.httpStatus === 400 && message === "No balance to withdraw" ? "insufficient-balance" : /^Idle balance \d+(?:\.\d+)? (USDC|WETH|ETH|EURC) is below the minimum withdrawal of \d+(?:\.\d+)? \1\.?$/.test(message) ? "insufficient-balance" : /^User doesn't have any active session key\.?$/.test(message) ? "session-key-missing" : method === "post" && request2.httpStatus === 400 && message === "Partial withdrawal already in progress" ? "withdrawal-in-progress" : message === "Network error: Unable to reach the server" ? "network" : "other";
           if (["unauthorized", "forbidden", "rate-limited", "insufficient-balance", "session-key-missing", "withdrawal-in-progress"].includes(request2.failure) && (request2.httpStatus === void 0 || request2.httpStatus >= 400 && request2.httpStatus < 500)) notify("rejected");
           throw error;
         } finally {
@@ -453,7 +742,7 @@ function observeWithdrawalSubmission(sdk, chainId, token) {
   let submitted = false;
   let rejected = false;
   let request = { attempted: false };
-  const listener = { chainId, token, notify: (outcome, evidence) => {
+  const listener = { chainId, token, assertCurrent, notify: (outcome, evidence) => {
     request = evidence;
     if (outcome === "attempted") submitted = true;
     else if (outcome === "rejected") rejected = true;
@@ -504,10 +793,8 @@ function hasEmptyWithdrawalSnapshot(raw2, chainId, token) {
   return true;
 }
 
-// src/agents/zyfai/zyfai.agent.ts
-var import_sdk = require("@zyfai/sdk");
+// src/agents/zyfai/zyfai.deposit.ts
 var import_viem4 = require("viem");
-var import_chains = require("viem/chains");
 
 // src/types/config.ts
 var P_SUPPORTED_CHAINS = {
@@ -556,12 +843,51 @@ var SupportedAssets = [
   }
 ];
 
-// src/lib/debug.ts
-var configuredDebug = false;
-function setOwneyDebug(enabled) {
-  configuredDebug = enabled;
-}
-function isOwneyDebug() {
+// src/agents/zyfai/zyfai.deposit.ts
+async function submitZyfaiDeposit({ sdk, state, chain, amount, asset, smartWallet, assertCurrent, onBeforeSubmission }) {
+  const owner = state.walletAddress;
+  const provider = state.provider;
+  const token = SupportedAssets.find((value) => value.chainId === chain.id && value.symbol === asset);
+  if (!token || !(0, import_viem4.isAddress)(owner) || !(0, import_viem4.isAddress)(smartWallet) || !/^\d+$/.test(amount) || BigInt(amount) <= 0n)
+    throw new OwneyError("AGENT_INVALID_RESPONSE", "Invalid Zyfai deposit transfer.", { chainId: chain.id, asset }, "zyfai");
+  assertCurrent();
+  const prepared = await sdk.prepareEnterPosition({ userAddress: owner, chainId: chain.id, amount, asset, strategy: "aggressive" });
+  assertCurrent();
+  const expectedData = (0, import_viem4.encodeFunctionData)({ abi: import_viem4.erc20Abi, functionName: "transfer", args: [smartWallet, BigInt(amount)] });
+  const transfer = prepared?.transfer;
+  if (!transfer || transfer.safeAddress?.toLowerCase() !== smartWallet.toLowerCase() || transfer.tokenAddress?.toLowerCase() !== token.address.toLowerCase() || transfer.to?.toLowerCase() !== token.address.toLowerCase() || transfer.data?.toLowerCase() !== expectedData.toLowerCase() || transfer.value !== "0")
+    throw new OwneyError("AGENT_INVALID_RESPONSE", "Zyfai prepared a different deposit transfer.", { chainId: chain.id, asset }, "zyfai");
+  const wallet = (0, import_viem4.createWalletClient)({ account: owner, chain, transport: (0, import_viem4.custom)({
+    request: async (args) => {
+      assertCurrent();
+      if (args.method === "eth_sendTransaction") {
+        const [accounts, chainId] = await Promise.all([
+          provider.request({ method: "eth_accounts" }),
+          provider.request({ method: "eth_chainId" })
+        ]);
+        assertCurrent();
+        if (!Array.isArray(accounts) || typeof accounts[0] !== "string" || accounts[0].toLowerCase() !== owner.toLowerCase() || Number(chainId) !== chain.id)
+          throw new OwneyError("NOT_CONNECTED", "Wallet changed while preparing Zyfai deposit.", void 0, "zyfai");
+        await onBeforeSubmission?.();
+        assertCurrent();
+      }
+      return provider.request(args);
+    }
+  }, { retryCount: 0 }) });
+  return wallet.sendTransaction({ account: owner, chain, to: token.address, data: expectedData, value: 0n });
+}
+
+// src/agents/zyfai/zyfai.agent.ts
+var import_sdk = require("@zyfai/sdk");
+var import_viem7 = require("viem");
+var import_chains = require("viem/chains");
+
+// src/lib/debug.ts
+var configuredDebug = false;
+function setOwneyDebug(enabled) {
+  configuredDebug = enabled;
+}
+function isOwneyDebug() {
   return globalThis.__OWNEY_DEBUG__ === true || configuredDebug;
 }
 function debugLog(scope, message, data) {
@@ -600,8 +926,8 @@ var DayFilterMapping = {
 };
 
 // src/agents/zyfai/zyfai.mapper.ts
-var import_viem2 = require("viem");
-var exactHexAmount = (raw2, decimals) => (0, import_viem2.formatUnits)(BigInt(/^0x/i.test(raw2) ? raw2 : `0x${raw2}`), decimals);
+var import_viem5 = require("viem");
+var exactHexAmount = (raw2, decimals) => (0, import_viem5.formatUnits)(BigInt(/^0x/i.test(raw2) ? raw2 : `0x${raw2}`), decimals);
 var DECIMALS_BY_SYMBOL = {
   usdc: 6,
   weth: 18,
@@ -615,13 +941,6 @@ function tokenDecimals(symbol, explicit) {
     return explicit;
   return DECIMALS_BY_SYMBOL[(symbol ?? "").toLowerCase()] ?? 6;
 }
-function mapDeposit(raw2) {
-  return {
-    txHash: raw2.txHash,
-    smartWallet: raw2.smartWallet,
-    amount: raw2.amount
-  };
-}
 function mapWithdraw(raw2) {
   return {
     txHash: raw2.txHash,
@@ -707,7 +1026,7 @@ function mapBalances(raw2, _chainId, smartWallet) {
     // legacy `amount` fallback is hex. Runtime
     // getBalances payloads often carry one (e.g. 18 for WETH) — prefer that
     // when present, otherwise fall back to the per-symbol lookup.
-    amount: p.underlyingAmountWithFee ?? p.underlyingAmount ? (0, import_viem2.formatUnits)(
+    amount: p.underlyingAmountWithFee ?? p.underlyingAmount ? (0, import_viem5.formatUnits)(
       BigInt(p.underlyingAmountWithFee ?? p.underlyingAmount ?? "0"),
       tokenDecimals(
         p.token_symbol,
@@ -1372,7 +1691,7 @@ function protocolsPolicyNeedsUpdate(current, desiredProtocols, desiredAutoSelect
 }
 
 // src/lib/paid-rpc.ts
-var import_viem3 = require("viem");
+var import_viem6 = require("viem");
 var PAID_RPC_RETRY_COUNT = 3;
 var PAID_RPC_RETRY_DELAY_MS = 1e3;
 function configuredRpcProxyBaseUrl(baseUrl) {
@@ -1408,9 +1727,9 @@ function createPaidRpcClient(chain, rpcUrls) {
     rpcUrls,
     chain.id
   );
-  return (0, import_viem3.createPublicClient)({
+  return (0, import_viem6.createPublicClient)({
     chain,
-    transport: (0, import_viem3.http)(url, {
+    transport: (0, import_viem6.http)(url, {
       retryCount: PAID_RPC_RETRY_COUNT,
       retryDelay: PAID_RPC_RETRY_DELAY_MS
     })
@@ -1507,7 +1826,7 @@ async function withPaidRpcDiagnostics(operation, chainId, rpcMethod, agentId) {
 }
 
 // src/agents/zyfai/zyfai.agent.ts
-var ERC7579_IS_MODULE_INSTALLED_ABI = (0, import_viem4.parseAbi)([
+var ERC7579_IS_MODULE_INSTALLED_ABI = (0, import_viem7.parseAbi)([
   "function isModuleInstalled(uint256 moduleTypeId, address module, bytes additionalContext) view returns (bool)"
 ]);
 var WETH_ADDRESS_BY_CHAIN = {
@@ -1521,6 +1840,14 @@ var POOL_POLICY_CHAIN_IDS = [8453, 42161, 1];
 var EARNINGS_REFRESH_COOLDOWN_MS = 60 * 60 * 1e3;
 var WITHDRAW_BALANCE_TIMEOUT_MS = 2e3;
 var ZyfaiAgent = class _ZyfaiAgent {
+  constructor(apiKey, rpcUrls, referralSource) {
+    this.apiKey = apiKey;
+    this.referralSource = referralSource;
+    this.rpcUrls = resolveRpcUrls(rpcUrls);
+    this.sdk = this.createSdk();
+  }
+  apiKey;
+  referralSource;
   id = "zyfai";
   supportedChainIds = [8453, 42161, 1];
   supportedAssets = [
@@ -1565,6 +1892,9 @@ var ZyfaiAgent = class _ZyfaiAgent {
    */
   sessionKeyAttempts = /* @__PURE__ */ new Set();
   connectAuthPromise = null;
+  connectAuthScope = null;
+  connectionGeneration = 0;
+  sdkHasConnected = false;
   rpcUrls;
   publicClients = /* @__PURE__ */ new Map();
   // Receipt-derived amounts and log identities, scoped to the owner and asset.
@@ -1575,17 +1905,20 @@ var ZyfaiAgent = class _ZyfaiAgent {
   earningsSnapshot = null;
   earningsGeneration = 0;
   balanceSnapshots = /* @__PURE__ */ new WeakMap();
-  constructor(apiKey, rpcUrls, referralSource) {
-    this.rpcUrls = resolveRpcUrls(rpcUrls);
-    this.sdk = new import_sdk.ZyfaiSDK({
-      apiKey,
+  /** A replaced wallet session gets its own vendor client. In-flight calls
+   * keep their original client; authentication must never change owners under
+   * an operation that is waiting for provider reads or an HTTP response. */
+  createSdk() {
+    const sdk = new import_sdk.ZyfaiSDK({
+      apiKey: this.apiKey,
       rpcUrls: this.rpcUrls,
       // Forwarded to /auth/login by the SDK's own SIWE handshake, so
       // attribution survives without the AppKit SIWX config (which carried it
       // via `createOwneySIWX({ referralSource })` when apps used the modal).
-      referralSource
+      referralSource: this.referralSource
     });
-    this.installAuthCache();
+    this.installAuthCache(sdk);
+    return sdk;
   }
   getPublicClient(chainId) {
     const cached = this.publicClients.get(chainId);
@@ -1660,7 +1993,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
           }, asset.address, entry.action === "Withdraw" ? "withdraw" : "deposit");
           if (evidence.transfer === "confirmed" && evidence.confirmedAmount) {
             Object.assign(tx, {
-              amount: (0, import_viem4.formatUnits)(BigInt(evidence.confirmedAmount), asset.decimals),
+              amount: (0, import_viem7.formatUnits)(BigInt(evidence.confirmedAmount), asset.decimals),
               amountRaw: evidence.confirmedAmount,
               blockNumber: evidence.blockNumber,
               logIndexes: evidence.logIndexes,
@@ -1684,9 +2017,9 @@ var ZyfaiAgent = class _ZyfaiAgent {
    * No-op on the server (no `window`) — the SDK is constructed during SSR
    * for some apps and the patch only matters in the browser anyway.
    */
-  installAuthCache() {
+  installAuthCache(sdk = this.sdk) {
     if (typeof window === "undefined") return;
-    const internals = this.sdk;
+    const internals = sdk;
     const original = internals.authenticateUser.bind(internals);
     internals.authenticateUser = async () => {
       if (internals.authenticatedUserId !== null) return;
@@ -1731,25 +2064,41 @@ var ZyfaiAgent = class _ZyfaiAgent {
   /** Light connect: SIWE auth only. Re-auths if chain changed. */
   async connectAuth(state, chainId) {
     const validChainId = isValidChainId(chainId);
-    if (this.connectedAddress && this.connectedChainId === validChainId) {
+    const owner = state.walletAddress.toLowerCase();
+    const scope = `${owner}:${validChainId}`;
+    if (this.connectedAddress?.toLowerCase() === owner && this.connectedChainId === validChainId) {
       return;
     }
-    if (this.connectAuthPromise) {
+    if (this.connectAuthPromise && this.connectAuthScope === scope) {
       await this.connectAuthPromise;
-      return;
+      return this.connectAuth(state, chainId);
     }
-    this.connectAuthPromise = (async () => {
+    if (this.sdkHasConnected || this.connectedAddress) this.sdk = this.createSdk();
+    this.sdkHasConnected = true;
+    const executionSdk = this.sdk;
+    const generation = ++this.connectionGeneration;
+    this.connectedAddress = null;
+    this.connectedChainId = null;
+    const pending = (async () => {
       const address = await this.connectAccountWithRetry(
         state.provider,
-        validChainId
+        validChainId,
+        executionSdk
       );
+      if (generation !== this.connectionGeneration || address.toLowerCase() !== owner)
+        throw new OwneyError("NOT_CONNECTED", "Wallet changed while connecting Zyfai.", void 0, this.id);
       this.connectedAddress = address;
       this.connectedChainId = validChainId;
     })();
+    this.connectAuthPromise = pending;
+    this.connectAuthScope = scope;
     try {
-      await this.connectAuthPromise;
+      await pending;
     } finally {
-      this.connectAuthPromise = null;
+      if (this.connectAuthPromise === pending) {
+        this.connectAuthPromise = null;
+        this.connectAuthScope = null;
+      }
     }
   }
   /**
@@ -1761,16 +2110,16 @@ var ZyfaiAgent = class _ZyfaiAgent {
    * JWT from a misconfigured API key; we retry once either way, and if the
    * second attempt still fails the original error propagates.
    */
-  async connectAccountWithRetry(provider, chainId) {
+  async connectAccountWithRetry(provider, chainId, executionSdk = this.sdk) {
     try {
-      return await this.sdk.connectAccount(provider, chainId);
+      return await executionSdk.connectAccount(provider, chainId);
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
       if (!message.toLowerCase().includes("unauthorized")) throw error;
-      const internals = this.sdk;
+      const internals = executionSdk;
       const address = internals.walletClient?.account?.address;
       if (address) clearSession(address, chainId);
-      return await this.sdk.connectAccount(provider, chainId);
+      return await executionSdk.connectAccount(provider, chainId);
     }
   }
   /**
@@ -1782,11 +2131,17 @@ var ZyfaiAgent = class _ZyfaiAgent {
    * withdrawFunds) fail with "No account connected".
    */
   async ensureConnected(state, chainId) {
+    const assertOwner = () => {
+      if (this.connectedAddress?.toLowerCase() !== state.walletAddress.toLowerCase() || this.connectedChainId !== chainId)
+        throw new OwneyError("NOT_CONNECTED", "Wallet changed while connecting Zyfai.", void 0, this.id);
+    };
     await this.connectAuth(state, chainId);
+    assertOwner();
     const internals = this.sdk;
     if (!internals.walletClient || internals.authenticatedUserId === null) {
       this.connectedChainId = null;
       await this.connectAuth(state, chainId);
+      assertOwner();
     }
   }
   /** A rejected execution session must not be reused by the next foreground attempt. */
@@ -1847,6 +2202,8 @@ var ZyfaiAgent = class _ZyfaiAgent {
   }
   // --- IAgent: Connection lifecycle ---
   async disconnect() {
+    const executionSdk = this.sdk;
+    this.connectionGeneration++;
     this.earningsGeneration++;
     this.earningsReads.clear();
     this.earningsRefreshes.clear();
@@ -1854,10 +2211,14 @@ var ZyfaiAgent = class _ZyfaiAgent {
     if (this.connectedAddress && this.connectedChainId !== null) {
       clearSession(this.connectedAddress, this.connectedChainId);
     }
-    await this.sdk.disconnectAccount();
     this.connectedAddress = null;
     this.connectedChainId = null;
+    this.connectAuthPromise = null;
+    this.connectAuthScope = null;
     this.smartWalletCache.clear();
+    this.sdk = this.createSdk();
+    this.sdkHasConnected = false;
+    await executionSdk.disconnectAccount();
   }
   // --- IAgent: Account lifecycle ---
   async activateAgent(state, chainId) {
@@ -2345,94 +2706,91 @@ var ZyfaiAgent = class _ZyfaiAgent {
     await this.ensureSessionKey(ownerAddress, chainId, redeployed.address);
     return redeployed.address;
   }
-  async deposit(state, chainId, amount, asset, depositCallback, onProgress) {
-    try {
-      const validChainId = isValidChainId(chainId);
-      await this.ensureConnected(state, validChainId);
-      if (depositCallback) {
-        const smartWallet = await this.ensureWalletDeployed(
-          this.getAddress(),
-          validChainId
-        );
-        notifyFunding(onProgress, {
-          agentId: this.id,
-          chainId,
-          token: asset,
-          walletAddress: state.walletAddress,
-          agentWallet: smartWallet,
-          intendedAmount: amount,
-          transfer: "pending",
-          registration: "pending",
-          delivery: "not-applicable"
-        });
-        const txHash = await depositCallback(smartWallet, validChainId, amount);
-        let evidence2 = {
-          agentId: this.id,
-          chainId,
-          token: asset,
-          walletAddress: state.walletAddress,
-          agentWallet: smartWallet,
-          intendedAmount: amount,
-          txHash,
-          transfer: "pending",
-          registration: "pending",
-          delivery: "not-applicable"
-        };
-        notifyFunding(onProgress, evidence2);
-        try {
-          const receipt = await this.getPublicClient(validChainId).getTransactionReceipt({ hash: txHash });
-          const token = SupportedAssets.find((token2) => token2.chainId === chainId && token2.symbol === asset);
-          evidence2 = inspectFundingReceipt(receipt, evidence2, token.address, "deposit");
-        } catch {
-          evidence2 = { ...evidence2, transfer: "unknown" };
-        }
-        notifyFunding(onProgress, evidence2);
-        if (evidence2.transfer === "failed")
-          throw new OwneyError("AGENT_TRANSACTION_REVERTED", "Zyfai deposit transaction reverted.", { txHash }, this.id);
-        try {
-          const tokenAddress = asset === "WETH" ? WETH_ADDRESS_BY_CHAIN[validChainId] : void 0;
-          await (tokenAddress ? this.sdk.logDeposit(validChainId, txHash, amount, tokenAddress) : this.sdk.logDeposit(validChainId, txHash, amount));
-          evidence2 = { ...evidence2, registration: "confirmed" };
-        } catch {
-          evidence2 = { ...evidence2, registration: "unknown" };
-        }
-        notifyFunding(onProgress, evidence2);
-        return { txHash, smartWallet, amount, evidence: evidence2 };
-      }
-      await this.ensureWalletDeployed(this.getAddress(), validChainId);
-      const raw2 = await this.sdk.sendDeposit(
-        this.getAddress(),
-        validChainId,
-        amount,
-        asset,
-        "aggressive"
-      );
-      let evidence = {
+  async deposit(state, chainId, amount, asset, depositCallback, onProgress, onBeforeSubmission) {
+    const validChainId = isValidChainId(chainId);
+    const owner = state.walletAddress;
+    const provider = state.provider;
+    await this.ensureConnected(state, validChainId);
+    const executionSdk = this.sdk;
+    const generation = this.connectionGeneration;
+    const assertCurrent = () => {
+      const account = executionSdk.walletClient?.account?.address;
+      if (generation !== this.connectionGeneration || executionSdk !== this.sdk || this.connectedAddress?.toLowerCase() !== owner.toLowerCase() || this.connectedChainId !== validChainId || state.walletAddress.toLowerCase() !== owner.toLowerCase() || state.provider !== provider || state.chainId !== null && state.chainId !== validChainId || account && account.toLowerCase() !== owner.toLowerCase())
+        throw new OwneyError("NOT_CONNECTED", "Wallet changed while preparing Zyfai deposit.", void 0, this.id);
+    };
+    assertCurrent();
+    const smartWallet = await this.ensureWalletDeployed(owner, validChainId);
+    assertCurrent();
+    notifyFunding(onProgress, {
+      agentId: this.id,
+      chainId,
+      token: asset,
+      walletAddress: owner,
+      agentWallet: smartWallet,
+      intendedAmount: amount,
+      transfer: "pending",
+      registration: "pending",
+      delivery: "not-applicable"
+    });
+    const txHash = depositCallback ? await depositCallback(smartWallet, validChainId, amount) : await submitZyfaiDeposit({
+      sdk: executionSdk,
+      state: { ...state, walletAddress: owner, provider },
+      chain: VIEM_CHAIN[validChainId],
+      amount,
+      asset,
+      smartWallet,
+      assertCurrent,
+      onBeforeSubmission: onBeforeSubmission ? () => onBeforeSubmission({
         agentId: this.id,
         chainId,
         token: asset,
-        walletAddress: state.walletAddress,
-        agentWallet: raw2.smartWallet,
+        walletAddress: owner,
+        agentWallet: smartWallet,
         intendedAmount: amount,
-        txHash: raw2.txHash,
-        transfer: "unknown",
-        registration: raw2.registration ? "confirmed" : "unknown",
+        transfer: "pending",
+        registration: "pending",
         delivery: "not-applicable"
-      };
-      notifyFunding(onProgress, evidence);
-      try {
-        const receipt = await this.getPublicClient(validChainId).getTransactionReceipt({ hash: raw2.txHash });
-        const token = SupportedAssets.find((value) => value.chainId === chainId && value.symbol === asset);
-        evidence = inspectFundingReceipt(receipt, evidence, token.address, "deposit");
-      } catch {
-      }
-      notifyFunding(onProgress, evidence);
-      if (evidence.transfer === "failed")
-        throw new OwneyError("AGENT_TRANSACTION_REVERTED", "Zyfai deposit transaction reverted.", { txHash: raw2.txHash }, this.id);
-      return { ...mapDeposit(raw2), evidence };
-    } catch (error) {
-      throw error;
+      }) : void 0
+    });
+    let evidence = {
+      agentId: this.id,
+      chainId,
+      token: asset,
+      walletAddress: owner,
+      agentWallet: smartWallet,
+      intendedAmount: amount,
+      txHash,
+      transfer: "pending",
+      registration: "pending",
+      delivery: "not-applicable"
+    };
+    notifyFunding(onProgress, evidence);
+    try {
+      const receipt = await this.getPublicClient(validChainId).waitForTransactionReceipt({
+        hash: txHash,
+        confirmations: 1,
+        timeout: 9e4,
+        checkReplacement: false
+      });
+      const token = SupportedAssets.find((value) => value.chainId === chainId && value.symbol === asset);
+      evidence = inspectFundingReceipt(receipt, evidence, token.address, "deposit");
+    } catch {
+      evidence = { ...evidence, transfer: "unknown" };
+    }
+    notifyFunding(onProgress, evidence);
+    if (evidence.transfer === "failed")
+      throw new OwneyError("AGENT_TRANSACTION_REVERTED", "Zyfai deposit transaction reverted.", { txHash }, this.id);
+    if (evidence.transfer !== "confirmed") return { txHash, smartWallet, amount, evidence };
+    try {
+      assertCurrent();
+      const tokenAddress = asset === "WETH" ? WETH_ADDRESS_BY_CHAIN[validChainId] : void 0;
+      await (tokenAddress ? executionSdk.logDeposit(validChainId, txHash, amount, tokenAddress) : executionSdk.logDeposit(validChainId, txHash, amount));
+      evidence = { ...evidence, registration: "confirmed" };
+    } catch {
+      evidence = { ...evidence, registration: "unknown" };
     }
+    notifyFunding(onProgress, evidence);
+    return { txHash, smartWallet, amount, evidence };
   }
   // --- IAgent: Fund operations ---
   /** Only after a definitive endpoint rejection, combine a new provider
@@ -2462,7 +2820,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         this.sdk.getPortfolio(owner).catch(() => void 0)
       ]);
       assertScope();
-      if (!(0, import_viem4.isAddress)(wallet.address) || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase())
+      if (!(0, import_viem7.isAddress)(wallet.address) || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase())
         throw new OwneyError(
           "AGENT_AUTH_FAILED",
           "Could not verify Zyfai's withdrawal wallet.",
@@ -2473,7 +2831,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         const asset = SupportedAssets.find((value) => value.chainId === chainId && value.symbol === token);
         const idle = asset ? await this.getPublicClient(chainId).readContract({
           address: asset.address,
-          abi: import_viem4.erc20Abi,
+          abi: import_viem7.erc20Abi,
           functionName: "balanceOf",
           args: [wallet.address]
         }).catch(() => void 0) : void 0;
@@ -2502,11 +2860,12 @@ var ZyfaiAgent = class _ZyfaiAgent {
   /** Called only after the execution endpoint explicitly rejected a request.
    * A timeout or an accepted request never authorizes repair and resubmission. */
   async recoverWithdrawalSession(state, chainId, token, owner) {
+    const generation = this.connectionGeneration;
     await this.assertNotEmptyRejectedWithdrawal(state, chainId, token, owner);
     const internals = this.sdk;
     const assertScope = () => {
       const account = internals.walletClient?.account?.address;
-      if (state.walletAddress.toLowerCase() !== owner.toLowerCase() || this.connectedAddress?.toLowerCase() !== owner.toLowerCase() || this.connectedChainId !== chainId || account && account.toLowerCase() !== owner.toLowerCase())
+      if (generation !== this.connectionGeneration || state.walletAddress.toLowerCase() !== owner.toLowerCase() || this.connectedAddress?.toLowerCase() !== owner.toLowerCase() || this.connectedChainId !== chainId || account && account.toLowerCase() !== owner.toLowerCase())
         throw new OwneyError("NOT_CONNECTED", "Wallet changed while preparing Zyfai withdrawal.", void 0, this.id);
     };
     assertScope();
@@ -2535,6 +2894,8 @@ var ZyfaiAgent = class _ZyfaiAgent {
     }
   }
   async withdraw(state, chainId, token, amount, onProgress) {
+    if (amount !== void 0 && (typeof amount !== "string" || !/^[0-9]+$/.test(amount) || BigInt(amount) <= 0n))
+      throw new OwneyError("WITHDRAW_INVALID_AMOUNT", "Withdrawal amount must be a positive integer in token base units.", void 0, this.id);
     const validChainId = isValidChainId(chainId);
     try {
       await this.ensureConnected(state, validChainId);
@@ -2551,16 +2912,40 @@ var ZyfaiAgent = class _ZyfaiAgent {
       });
       throw error;
     }
-    let observation = observeWithdrawalSubmission(this.sdk, validChainId, token);
-    const authToken = this.sdk.httpClient?.authToken;
-    const owner = this.getAddress();
+    const executionSdk = this.sdk;
+    const internals = executionSdk;
+    const generation = this.connectionGeneration;
+    const owner = state.walletAddress;
+    let staleSessionError;
+    const assertCurrent = () => {
+      const account = internals.walletClient?.account?.address;
+      if (generation !== this.connectionGeneration || this.connectedAddress?.toLowerCase() !== owner.toLowerCase() || this.connectedChainId !== validChainId || state.chainId !== null && state.chainId !== validChainId || account && account.toLowerCase() !== owner.toLowerCase()) {
+        staleSessionError = new OwneyError(
+          "NOT_CONNECTED",
+          "Wallet changed before Zyfai withdrawal submission.",
+          { phase: "prepare", rejectedBeforeSubmission: true },
+          this.id
+        );
+        throw staleSessionError;
+      }
+    };
+    let observation = observeWithdrawalSubmission(executionSdk, validChainId, token, assertCurrent);
+    const authToken = internals.httpClient?.authToken;
     let raw2;
     try {
       for (let attempt = 0; attempt < 2; attempt++) {
         try {
-          raw2 = await this.sdk.withdrawFunds(owner, validChainId, amount, token);
+          assertCurrent();
+          raw2 = await executionSdk.withdrawFunds(owner, validChainId, amount, token);
           break;
         } catch (error) {
+          if (observation.rejected()) {
+            try {
+              assertCurrent();
+            } catch {
+              throw error;
+            }
+          }
           if (!amount && observation.rejected() && observation.request()?.failure === "insufficient-balance") {
             try {
               await this.assertNotEmptyRejectedWithdrawal(state, validChainId, token, owner);
@@ -2578,7 +2963,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
             );
           await this.recoverWithdrawalSession(state, validChainId, token, owner);
           observation.stop();
-          observation = observeWithdrawalSubmission(this.sdk, validChainId, token);
+          observation = observeWithdrawalSubmission(executionSdk, validChainId, token, assertCurrent);
         }
       }
       if (!raw2) throw new OwneyError(
@@ -2588,6 +2973,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
         this.id
       );
     } catch (error) {
+      if (staleSessionError && observation.attempted() === false) error = staleSessionError;
       this.invalidateRejectedWithdrawalSession(error, state, validChainId, authToken);
       if (observation.attempted() !== void 0) {
         const failed = observation.attempted() === false || observation.rejected();
@@ -2608,7 +2994,6 @@ var ZyfaiAgent = class _ZyfaiAgent {
       observation.stop();
     }
     if (!raw2.success) {
-      const unresolved = !!raw2.txHash || /already|pending|queued|in.progress/i.test(raw2.message ?? "");
       notifyFunding(onProgress, {
         agentId: this.id,
         chainId,
@@ -2616,9 +3001,9 @@ var ZyfaiAgent = class _ZyfaiAgent {
         walletAddress: state.walletAddress,
         intendedAmount: amount ?? "MAX",
         txHash: raw2.txHash,
-        transfer: unresolved ? "unknown" : "failed",
+        transfer: "unknown",
         registration: "not-applicable",
-        delivery: unresolved ? "unknown" : "failed",
+        delivery: "unknown",
         withdrawalRequest: observation.request()
       });
       throw new OwneyError(
@@ -2645,8 +3030,9 @@ var ZyfaiAgent = class _ZyfaiAgent {
   }
   /** Registration recovery never signs, transfers, activates, or refreshes authentication. */
   async retryDepositRegistration(state, evidence) {
-    const internals = this.sdk;
-    if (!internals.httpClient.authToken || internals.authenticatedUserId === null || this.connectedAddress?.toLowerCase() !== state.walletAddress.toLowerCase() || this.connectedChainId !== evidence.chainId) {
+    const executionSdk = this.sdk;
+    const internals = executionSdk;
+    if (evidence.agentId !== this.id || evidence.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || evidence.chainId !== state.chainId || !internals.httpClient.authToken || internals.authenticatedUserId === null || this.connectedAddress?.toLowerCase() !== state.walletAddress.toLowerCase() || this.connectedChainId !== evidence.chainId) {
       throw new OwneyError("NOT_CONNECTED", "Reconnect the wallet before recovering deposit registration.");
     }
     if (evidence.transfer !== "confirmed" || !evidence.txHash) {
@@ -2654,16 +3040,16 @@ var ZyfaiAgent = class _ZyfaiAgent {
     }
     const cid = isValidChainId(evidence.chainId);
     const tokenAddress = evidence.token === "WETH" ? WETH_ADDRESS_BY_CHAIN[cid] : void 0;
-    await this.sdk.logDeposit(cid, evidence.txHash, evidence.intendedAmount, tokenAddress);
+    await executionSdk.logDeposit(cid, evidence.txHash, evidence.intendedAmount, tokenAddress);
     return { ...evidence, registration: "confirmed" };
   }
   // --- IAgent: Portfolio reads ---
   async getFundingWallet(state, chainId) {
     return (await this.sdk.getSmartWalletAddress(state.walletAddress, isValidChainId(chainId))).address;
   }
-  /** A positive Safe balance is a withdrawal planning floor when the portfolio
-   * index reports zero. Idle zero cannot prove that Zyfai's protocol positions
-   * are empty: its SDK does not expose a complete contract catalog for them. */
+  /** A positive deployed Safe balance is a conservative planning floor. Zero
+   * requires both the mapped Safe's exact idle balance and a fresh complete
+   * empty portfolio, including for an undeployed counterfactual Safe. */
   async getWithdrawableBalance(state, chainId, token) {
     const validChainId = isValidChainId(chainId);
     const asset = SupportedAssets.find((value) => value.chainId === validChainId && value.symbol === token);
@@ -2692,20 +3078,27 @@ var ZyfaiAgent = class _ZyfaiAgent {
         this.sdk.getSmartWalletByEOA(owner)
       ]);
       assertScope();
-      if (!(0, import_viem4.isAddress)(wallet.address) || wallet.isDeployed !== true || wallet.isOwner !== true || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase()) throw unavailable();
+      if (!(0, import_viem7.isAddress)(wallet.address) || wallet.isDeployed !== false && (wallet.isDeployed !== true || wallet.isOwner !== true) || !registered.smartWallet || registered.smartWallet.toLowerCase() !== wallet.address.toLowerCase()) throw unavailable();
       const client = this.getPublicClient(validChainId);
       const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
       assertScope();
       const idle = await client.readContract({
         address: asset.address,
-        abi: import_viem4.erc20Abi,
+        abi: import_viem7.erc20Abi,
         functionName: "balanceOf",
         args: [wallet.address],
         blockNumber
       });
       assertScope();
-      if (typeof idle !== "bigint" || idle <= 0n) throw unavailable();
-      return idle;
+      if (typeof idle !== "bigint" || idle < 0n) throw unavailable();
+      if (idle > 0n) {
+        if (wallet.isDeployed !== true || wallet.isOwner !== true) throw unavailable();
+        return idle;
+      }
+      const portfolio = await this.sdk.getPortfolio(owner);
+      assertScope();
+      if (!hasEmptyWithdrawalSnapshot(portfolio, validChainId, token)) throw unavailable();
+      return 0n;
     };
     try {
       return await Promise.race([read2(), new Promise((_, reject) => {
@@ -2748,7 +3141,7 @@ var ZyfaiAgent = class _ZyfaiAgent {
     if (blockNumber < BigInt(evidence.blockNumber)) return void 0;
     const idle = await client.readContract({
       address: asset.address,
-      abi: import_viem4.erc20Abi,
+      abi: import_viem7.erc20Abi,
       functionName: "balanceOf",
       args: [balance.smartWallet],
       blockNumber
@@ -2940,259 +3333,25 @@ var ZyfaiAgent = class _ZyfaiAgent {
     return true;
   }
   // --- IAgent: Discovery (no wallet required) ---
-  async getAgentApy(days, options) {
-    const raw2 = await this.sdk.getAPYPerStrategy(
-      false,
-      DayFilterMapping[days],
-      "aggressive",
-      options?.chainId,
-      options?.tokenSymbol
-    );
-    return mapApyByStrategy(raw2);
-  }
-};
-
-// src/agents/yieldseeker/yieldseeker.agent.ts
-var import_viem12 = require("viem");
-var import_chains4 = require("viem/chains");
-
-// src/lib/chain-guard.ts
-var CHAIN_NAMES = {
-  1: "Ethereum",
-  8453: "Base",
-  42161: "Arbitrum"
-};
-function chainName(chainId) {
-  return CHAIN_NAMES[chainId] ?? `chain ${chainId}`;
-}
-async function ensureWalletOnChain(pub, wallet, expected) {
-  const actual = await pub.getChainId();
-  if (actual === expected) return;
-  try {
-    await wallet.switchChain({ id: expected });
-  } catch (error) {
-    throw new OwneyError(
-      "CHAIN_MISMATCH",
-      `Your wallet is on ${chainName(actual)}. Switch it to ${chainName(expected)} and try again.`,
-      {
-        expectedChainId: expected,
-        actualChainId: actual,
-        cause: error instanceof Error ? error.message : String(error)
-      }
-    );
-  }
-  const after = await pub.getChainId();
-  if (after !== expected) {
-    throw new OwneyError(
-      "CHAIN_MISMATCH",
-      `Your wallet is still on ${chainName(after)}. Switch it to ${chainName(expected)} and try again.`,
-      { expectedChainId: expected, actualChainId: after }
-    );
-  }
-}
-
-// src/lib/transfer-auth.ts
-var import_viem5 = require("viem");
-
-// src/lib/sponsor-client.ts
-var ROUTING_API_BASE_URL = "https://owney-routing-api-243946518160.europe-west4.run.app";
-async function postPaymasterIntent(input) {
-  const base6 = input.baseUrl ?? ROUTING_API_BASE_URL;
-  let res;
-  try {
-    res = await fetch(`${base6}/api/v1/sponsor/paymaster-intent`, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        "x-owney-api-key": input.apiKey,
-        Authorization: `Signature ${input.yieldseekerSignature}`
-      },
-      body: JSON.stringify(input.body)
-    });
-  } catch (networkError) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Paymaster intent network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
-      { cause: String(networkError), safeToFallback: true }
-    );
-  }
-  const text = await res.text();
-  let parsed = null;
-  try {
-    parsed = JSON.parse(text);
-  } catch {
-  }
-  if (!res.ok || !parsed?.success || typeof parsed.data?.intent !== "string" || typeof parsed.data.expiresAt !== "number") {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Paymaster intent API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
-      {
-        statusCode: res.status,
-        responseBody: text.slice(0, 500),
-        safeToFallback: true
-      }
-    );
-  }
-  return parsed.data;
-}
-async function getSponsorRelayerAddress(input) {
-  const base6 = input.baseUrl ?? ROUTING_API_BASE_URL;
-  let res;
-  try {
-    res = await fetch(
-      `${base6}/api/v1/sponsor/relayer-address?chainId=${input.chainId}`,
-      {
-        headers: { "x-owney-api-key": input.apiKey }
-      }
-    );
-  } catch (networkError) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Sponsor API network error: ${networkError instanceof Error ? networkError.message : String(networkError)}`,
-      { cause: String(networkError), safeToFallback: true }
-    );
-  }
-  const text = await res.text();
-  let parsed = null;
-  try {
-    parsed = JSON.parse(text);
-  } catch {
-  }
-  if (!res.ok || !parsed?.success || !parsed.data?.relayer) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      `Sponsor API error ${res.status}: ${parsed?.message ?? text.slice(0, 500)}`,
-      {
-        statusCode: res.status,
-        responseBody: text.slice(0, 500),
-        safeToFallback: true
-      }
-    );
-  }
-  return parsed.data.relayer;
-}
-async function postSponsorBatchTransfer(input) {
-  let res;
-  try {
-    res = await fetch(
-      `${input.baseUrl ?? ROUTING_API_BASE_URL}/api/v1/sponsor/permit2-batch`,
-      {
-        method: "POST",
-        headers: {
-          "content-type": "application/json",
-          "x-owney-api-key": input.apiKey
-        },
-        body: JSON.stringify(input.body)
-      }
-    );
-  } catch {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      "Deposit status is unknown. Retry the same amount to check it.",
-      { safeToFallback: false }
-    );
-  }
-  const parsed = await res.json().catch(() => null);
-  if (!res.ok || !parsed?.success || !/^0x[0-9a-fA-F]{64}$/.test(parsed.data?.txHash ?? "")) {
-    throw new OwneyError(
-      "SPONSOR_REQUEST_FAILED",
-      "Deposit could not be confirmed. Retry the same amount to check its status.",
-      {
-        statusCode: res.status,
-        safeToFallback: false,
-        notSubmitted: parsed?.notSubmitted === true || parsed?.error?.notSubmitted === true || parsed?.error?.details?.notSubmitted === true
-      }
-    );
-  }
-  return parsed.data;
-}
-
-// src/lib/permit2.ts
-var import_viem6 = require("viem");
-var PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
-var MAX_UINT256 = 2n ** 256n - 1n;
-function permit2ApprovalAmount(requiredAmount) {
-  if (requiredAmount <= 0n) {
-    throw new Error("Permit2 approval requires a positive deposit amount");
-  }
-  return MAX_UINT256;
-}
-var ERC20_ALLOWANCE_ABI = [
-  {
-    type: "function",
-    name: "allowance",
-    stateMutability: "view",
-    inputs: [
-      { name: "owner", type: "address" },
-      { name: "spender", type: "address" }
-    ],
-    outputs: [{ name: "", type: "uint256" }]
-  },
-  {
-    type: "function",
-    name: "approve",
-    stateMutability: "nonpayable",
-    inputs: [
-      { name: "spender", type: "address" },
-      { name: "amount", type: "uint256" }
-    ],
-    outputs: [{ name: "", type: "bool" }]
-  },
-  {
-    type: "function",
-    name: "balanceOf",
-    stateMutability: "view",
-    inputs: [{ name: "account", type: "address" }],
-    outputs: [{ name: "", type: "uint256" }]
+  async getAgentApy(days, options) {
+    const raw2 = await this.sdk.getAPYPerStrategy(
+      false,
+      DayFilterMapping[days],
+      "aggressive",
+      options?.chainId,
+      options?.tokenSymbol
+    );
+    return mapApyByStrategy(raw2);
   }
-];
-function randomPermit2Nonce() {
-  const bytes = new Uint8Array(32);
-  globalThis.crypto.getRandomValues(bytes);
-  return BigInt((0, import_viem6.bytesToHex)(bytes));
-}
-async function readPermit2Allowance(publicClient, token, owner, blockNumber) {
-  return publicClient.readContract({
-    address: token,
-    abi: ERC20_ALLOWANCE_ABI,
-    functionName: "allowance",
-    args: [owner, PERMIT2_ADDRESS],
-    ...blockNumber === void 0 ? {} : { blockNumber }
-  });
-}
-async function readErc20Balance(publicClient, token, owner) {
-  return publicClient.readContract({
-    address: token,
-    abi: ERC20_ALLOWANCE_ABI,
-    functionName: "balanceOf",
-    args: [owner]
-  });
-}
+};
 
-// src/lib/sponsored-deposit.ts
-var AUTH_WINDOW_SECONDS = 15 * 60;
-var verificationSetter = /* @__PURE__ */ Symbol("owney.depositVerificationSetter");
-function provideDepositVerificationContext(callback, context) {
-  callback[verificationSetter]?.(context);
-}
-function makeVerificationAwareDepositCallback(implementation) {
-  let nextVerification;
-  const callback = async (smartWallet, chainId, amount) => {
-    const verification = nextVerification;
-    nextVerification = void 0;
-    return implementation(smartWallet, chainId, amount, verification);
-  };
-  Object.defineProperty(callback, verificationSetter, {
-    value: (context) => {
-      nextVerification = context;
-    }
-  });
-  return callback;
-}
+// src/agents/yieldseeker/yieldseeker.agent.ts
+var import_viem13 = require("viem");
+var import_chains4 = require("viem/chains");
 
 // src/agents/yieldseeker/yieldseeker.auth.ts
 var import_siwe = require("siwe");
-var import_viem7 = require("viem");
+var import_viem8 = require("viem");
 var import_chains2 = require("viem/chains");
 
 // src/agents/yieldseeker/yieldseeker.auth-cache.ts
@@ -3305,7 +3464,7 @@ function createYieldseekerSiweMessage(address, chainId, dependencies = {}) {
   return new import_siwe.SiweMessage({
     scheme: url.protocol.slice(0, -1),
     domain: url.host,
-    address: (0, import_viem7.getAddress)(address),
+    address: (0, import_viem8.getAddress)(address),
     uri: url.origin,
     version: "1",
     chainId,
@@ -3391,15 +3550,15 @@ var YieldseekerAuth = class {
     clearYieldseekerSession(state.walletAddress, chainId);
   }
   async sign(state, chainId) {
-    const account = (0, import_viem7.getAddress)(state.walletAddress);
-    const publicClient = (0, import_viem7.createPublicClient)({
+    const account = (0, import_viem8.getAddress)(state.walletAddress);
+    const publicClient = (0, import_viem8.createPublicClient)({
       chain: import_chains2.base,
-      transport: (0, import_viem7.custom)(state.provider)
+      transport: (0, import_viem8.custom)(state.provider)
     });
-    const walletClient = (0, import_viem7.createWalletClient)({
+    const walletClient = (0, import_viem8.createWalletClient)({
       account,
       chain: import_chains2.base,
-      transport: (0, import_viem7.custom)(state.provider)
+      transport: (0, import_viem8.custom)(state.provider)
     });
     await ensureWalletOnChain(
       publicClient,
@@ -3566,7 +3725,7 @@ var YieldseekerApiClient = class {
 };
 
 // src/agents/yieldseeker/yieldseeker.mapper.ts
-var import_viem8 = require("viem");
+var import_viem9 = require("viem");
 
 // src/lib/helpers/snapshot-apy.ts
 var DAY_MS = 864e5;
@@ -3633,10 +3792,18 @@ function raw(value, endpoint) {
   return BigInt(value);
 }
 function decimal(value, decimals, endpoint) {
-  return (0, import_viem8.formatUnits)(raw(value, endpoint), decimals);
+  return (0, import_viem9.formatUnits)(raw(value, endpoint), decimals);
+}
+function balanceRaw(value, endpoint) {
+  const amount = raw(value, endpoint);
+  if (amount < 0n) return invalid(endpoint, "expected a non-negative balance");
+  return amount;
+}
+function balanceDecimal(value, decimals, endpoint) {
+  return (0, import_viem9.formatUnits)(balanceRaw(value, endpoint), decimals);
 }
 function usd(rawAmount, decimals, price) {
-  return Number((0, import_viem8.formatUnits)(rawAmount, decimals)) * price;
+  return Number((0, import_viem9.formatUnits)(rawAmount, decimals)) * price;
 }
 function percent(value) {
   const result = Number(value);
@@ -3662,7 +3829,7 @@ function assetAddressValue(record, address) {
 }
 function position(value, asset, baseAssetDecimals) {
   const option = value?.yieldOption;
-  if (!option || typeof option.provider !== "string" || typeof option.name !== "string" || typeof option.address !== "string" || !(0, import_viem8.isAddress)(option.address)) {
+  if (!option || typeof option.provider !== "string" || typeof option.name !== "string" || typeof option.address !== "string" || !(0, import_viem9.isAddress)(option.address)) {
     return invalid("yield positions", "missing vault metadata");
   }
   return {
@@ -3676,13 +3843,13 @@ function position(value, asset, baseAssetDecimals) {
     // underlying base-asset units in `assetsBase`; pair that value with the
     // snapshot's corresponding `baseAssetDecimals` for display. Keep the raw
     // share quantity separate from the withdrawable underlying asset amount.
-    amount: decimal(
+    amount: balanceDecimal(
       value.assetsBase,
       baseAssetDecimals,
       "yield positions"
     ),
-    amountRaw: String(value.assetsRaw),
-    withdrawableAmountRaw: String(value.withdrawableAssetsRaw),
+    amountRaw: balanceRaw(value.assetsRaw, "yield positions").toString(),
+    withdrawableAmountRaw: balanceRaw(value.withdrawableAssetsRaw, "yield positions").toString(),
     apy: percent(option.riskAdjustedApy),
     tvl: Number(option.totalDepositsUsd),
     liquidity: Number(option.withdrawableDepositsUsd)
@@ -3699,7 +3866,7 @@ function mapYieldseekerBalances(contexts) {
       chain: "BASE",
       chainId: 8453,
       asset: context.asset,
-      amount: decimal(context.snapshot.totalValueBase, context.snapshot.baseAssetDecimals, "snapshot")
+      amount: balanceDecimal(context.snapshot.totalValueBase, context.snapshot.baseAssetDecimals, "snapshot")
     });
     const idle = assetAddressValue(
       context.snapshot.tokenBalances,
@@ -3709,7 +3876,7 @@ function mapYieldseekerBalances(contexts) {
       chain: "BASE",
       chainId: 8453,
       asset: context.asset,
-      amount: decimal(idle, metadata.decimals, "snapshot")
+      amount: balanceDecimal(idle, metadata.decimals, "snapshot")
     });
     positions.push(
       ...context.positions.map(
@@ -3721,7 +3888,7 @@ function mapYieldseekerBalances(contexts) {
       )
     );
     totalUsd += usd(
-      raw(context.snapshot.totalValueBase, "snapshot"),
+      balanceRaw(context.snapshot.totalValueBase, "snapshot"),
       context.snapshot.baseAssetDecimals,
       context.snapshot.baseAssetPriceUsd
     );
@@ -3755,7 +3922,7 @@ function mapYieldseekerEarnings(contexts) {
       chain: "BASE",
       chainId: 8453,
       asset: context.asset,
-      amount: (0, import_viem8.formatUnits)(amount, context.snapshot.baseAssetDecimals)
+      amount: (0, import_viem9.formatUnits)(amount, context.snapshot.baseAssetDecimals)
     });
     lifetimeEarnings += usd(
       amount,
@@ -3913,7 +4080,7 @@ function allocationEntry(action, context) {
     const leg = deposit;
     const symbol = typeof leg.assetSymbol === "string" ? leg.assetSymbol.toUpperCase() : "";
     if (symbol !== context.asset && !(context.asset === "WETH" && symbol === "ETH")) return void 0;
-    if (typeof leg.vaultAddress !== "string" || !(0, import_viem8.isAddress)(leg.vaultAddress)) return void 0;
+    if (typeof leg.vaultAddress !== "string" || !(0, import_viem9.isAddress)(leg.vaultAddress)) return void 0;
     const rawAmount = typeof leg.rawAmount === "string" && /^\d+$/.test(leg.rawAmount) ? BigInt(leg.rawAmount) : typeof leg.rawAmount === "number" && Number.isSafeInteger(leg.rawAmount) ? BigInt(leg.rawAmount) : void 0;
     if (rawAmount === void 0 || rawAmount <= 0n) return void 0;
     const option = context.positions.find((position2) => position2.yieldOption.address.toLowerCase() === leg.vaultAddress.toLowerCase())?.yieldOption;
@@ -3921,7 +4088,7 @@ function allocationEntry(action, context) {
       protocol: typeof leg.vaultProvider === "string" && leg.vaultProvider ? leg.vaultProvider : option?.provider || "Vault",
       pool: typeof leg.vaultName === "string" && leg.vaultName ? leg.vaultName : option?.name,
       tokenSymbol: context.asset,
-      amount: (0, import_viem8.formatUnits)(rawAmount, YIELDSEEKER_ASSET_METADATA[context.asset].decimals)
+      amount: (0, import_viem9.formatUnits)(rawAmount, YIELDSEEKER_ASSET_METADATA[context.asset].decimals)
     });
     amountRaw += rawAmount;
   }
@@ -3940,7 +4107,7 @@ function allocationEntry(action, context) {
       tokenSymbol: context.asset,
       agentWallet: context.wallet.walletAddress,
       amountRaw: String(amountRaw),
-      amount: (0, import_viem8.formatUnits)(amountRaw, YIELDSEEKER_ASSET_METADATA[context.asset].decimals)
+      amount: (0, import_viem9.formatUnits)(amountRaw, YIELDSEEKER_ASSET_METADATA[context.asset].decimals)
     }]
   };
 }
@@ -4064,7 +4231,7 @@ function mapYieldseekerHistory(contexts, options) {
       const known = new Set(target.logIndexes ?? []);
       if (tx.logIndexes?.some((index) => !known.has(index))) {
         target.amountRaw = String(BigInt(target.amountRaw ?? "0") + BigInt(tx.amountRaw));
-        target.amount = (0, import_viem8.formatUnits)(
+        target.amount = (0, import_viem9.formatUnits)(
           BigInt(target.amountRaw),
           YIELDSEEKER_ASSET_METADATA[target.tokenSymbol].decimals
         );
@@ -4145,7 +4312,7 @@ function mapYieldseekerAgentApy(options, days) {
 }
 
 // src/lib/remaining-vault-balance.ts
-var import_viem9 = require("viem");
+var import_viem10 = require("viem");
 async function remainingVaultBalance(client, wallet, asset, vaults, blockNumber) {
   const addresses = [...new Set(vaults.map((value) => value.toLowerCase()))];
   if (addresses.length > 64) return void 0;
@@ -4156,8 +4323,8 @@ async function remainingVaultBalance(client, wallet, asset, vaults, blockNumber)
       blockNumber,
       allowFailure: true,
       contracts: batch.map((address) => ({
-        address: (0, import_viem9.getAddress)(address),
-        abi: import_viem9.erc20Abi,
+        address: (0, import_viem10.getAddress)(address),
+        abi: import_viem10.erc20Abi,
         functionName: "balanceOf",
         args: [wallet]
       }))
@@ -4167,15 +4334,15 @@ async function remainingVaultBalance(client, wallet, asset, vaults, blockNumber)
     for (let index = 0; index < batch.length; index++) {
       const result = balances[index];
       if (result?.status !== "success" || typeof result.result !== "bigint" || result.result < 0n) return void 0;
-      if (result.result > 0n) funded.push({ address: (0, import_viem9.getAddress)(batch[index]), shares: result.result });
+      if (result.result > 0n) funded.push({ address: (0, import_viem10.getAddress)(batch[index]), shares: result.result });
     }
     if (!funded.length) return 0n;
     const valuations = await client.multicall({
       blockNumber,
       allowFailure: true,
       contracts: funded.flatMap(({ address, shares }) => [
-        { address, abi: import_viem9.erc4626Abi, functionName: "asset" },
-        { address, abi: import_viem9.erc4626Abi, functionName: "convertToAssets", args: [shares] }
+        { address, abi: import_viem10.erc4626Abi, functionName: "asset" },
+        { address, abi: import_viem10.erc4626Abi, functionName: "convertToAssets", args: [shares] }
       ])
     });
     if (valuations.length !== funded.length * 2) return void 0;
@@ -4191,12 +4358,12 @@ async function remainingVaultBalance(client, wallet, asset, vaults, blockNumber)
 }
 
 // src/agents/yieldseeker/yieldseeker.wallet-version.ts
-var import_viem10 = require("viem");
+var import_viem11 = require("viem");
 var YIELDSEEKER_FACTORY = "0x9c7410a0faCAC60850C46eE5b58B518daec95130";
 var YIELDSEEKER_V1_IMPLEMENTATION = "0x32403455357589523435dB18b414057D7cE05051";
 var YIELDSEEKER_V2_IMPLEMENTATION = "0x613Db9c924ADB7A7A90c11b02Cce20c913E3Fe50";
 var ERC1967_IMPLEMENTATION_SLOT = "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc";
-var walletAbi = (0, import_viem10.parseAbi)([
+var walletAbi = (0, import_viem11.parseAbi)([
   "function owner() view returns (address)",
   "function ownerAgentIndex() view returns (uint256)",
   "function baseAsset() view returns (address)",
@@ -4204,7 +4371,7 @@ var walletAbi = (0, import_viem10.parseAbi)([
   "function upgradeToLatest()",
   "event Upgraded(address indexed implementation)"
 ]);
-var factoryAbi = (0, import_viem10.parseAbi)([
+var factoryAbi = (0, import_viem11.parseAbi)([
   "function userWallets(address owner, uint256 index) view returns (address)",
   "function agentWalletImplementation() view returns (address)"
 ]);
@@ -4212,9 +4379,9 @@ function yieldseekerOwnerPath(code) {
   return !code || code === "0x" || /^0xef0100[0-9a-f]{40}$/i.test(code) ? "eoa" : "smart";
 }
 async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNumber) {
-  const agentWallet = (0, import_viem10.getAddress)(wallet);
-  const expectedOwner = (0, import_viem10.getAddress)(owner);
-  const expectedAsset = (0, import_viem10.getAddress)(asset);
+  const agentWallet = (0, import_viem11.getAddress)(wallet);
+  const expectedOwner = (0, import_viem11.getAddress)(owner);
+  const expectedAsset = (0, import_viem11.getAddress)(asset);
   const [code, ownerCode, slot, actualOwner, index, actualAsset, actualFactory, latest] = await Promise.all([
     client.getBytecode({ address: agentWallet, blockNumber }),
     client.getBytecode({ address: expectedOwner, blockNumber }),
@@ -4228,7 +4395,7 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
   if (!code || code === "0x" || !slot || /^0x0+$/.test(slot)) {
     throw new Error("Yieldseeker wallet is not a deployed ERC1967 proxy");
   }
-  const implementation = (0, import_viem10.getAddress)(`0x${slot.slice(-40)}`);
+  const implementation = (0, import_viem11.getAddress)(`0x${slot.slice(-40)}`);
   const mapped = await client.readContract({
     address: YIELDSEEKER_FACTORY,
     abi: factoryAbi,
@@ -4236,8 +4403,8 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
     args: [expectedOwner, index],
     blockNumber
   });
-  const verified = (0, import_viem10.isAddressEqual)(actualOwner, expectedOwner) && (0, import_viem10.isAddressEqual)(actualAsset, expectedAsset) && (0, import_viem10.isAddressEqual)(actualFactory, YIELDSEEKER_FACTORY) && (0, import_viem10.isAddressEqual)(mapped, agentWallet);
-  const version = !verified ? "unknown" : (0, import_viem10.isAddressEqual)(implementation, YIELDSEEKER_V2_IMPLEMENTATION) ? "v2" : (0, import_viem10.isAddressEqual)(implementation, YIELDSEEKER_V1_IMPLEMENTATION) ? "v1" : "unknown";
+  const verified = (0, import_viem11.isAddressEqual)(actualOwner, expectedOwner) && (0, import_viem11.isAddressEqual)(actualAsset, expectedAsset) && (0, import_viem11.isAddressEqual)(actualFactory, YIELDSEEKER_FACTORY) && (0, import_viem11.isAddressEqual)(mapped, agentWallet);
+  const version = !verified ? "unknown" : (0, import_viem11.isAddressEqual)(implementation, YIELDSEEKER_V2_IMPLEMENTATION) ? "v2" : (0, import_viem11.isAddressEqual)(implementation, YIELDSEEKER_V1_IMPLEMENTATION) ? "v1" : "unknown";
   return {
     agentWallet,
     owner: actualOwner,
@@ -4246,13 +4413,13 @@ async function readYieldseekerWalletStatus(client, wallet, owner, asset, blockNu
     implementation,
     version,
     verified,
-    upgradeAvailable: version === "v1" && (0, import_viem10.isAddressEqual)(latest, YIELDSEEKER_V2_IMPLEMENTATION)
+    upgradeAvailable: version === "v1" && (0, import_viem11.isAddressEqual)(latest, YIELDSEEKER_V2_IMPLEMENTATION)
   };
 }
 var YIELDSEEKER_UPGRADE_ABI = walletAbi;
 
 // src/agents/yieldseeker/yieldseeker.sponsored-withdraw.ts
-var import_viem11 = require("viem");
+var import_viem12 = require("viem");
 var import_account_abstraction2 = require("viem/account-abstraction");
 var import_accounts = require("viem/accounts");
 var import_chains3 = require("viem/chains");
@@ -4339,7 +4506,7 @@ function rpcDiagnostics(data) {
     details.revertName = data.revertName;
   if (typeof data?.aaCode === "string" && /^AA[0-9]{2}$/.test(data.aaCode)) details.aaCode = data.aaCode;
   if (typeof data?.panicCode === "string" && /^0x[0-9a-fA-F]{1,2}$/.test(data.panicCode)) {
-    const panicCode = (0, import_viem11.toHex)(BigInt(data.panicCode));
+    const panicCode = (0, import_viem12.toHex)(BigInt(data.panicCode));
     if (["0x0", "0x1", "0x11", "0x12", "0x21", "0x22", "0x31", "0x32", "0x41", "0x51"].includes(panicCode))
       details.panicCode = panicCode;
   }
@@ -4559,14 +4726,14 @@ async function submitEoa(input) {
     throw sponsorError("Base did not return EIP-1559 gas fees.", true);
   let operation = {
     sender: input.agentWallet,
-    nonce: (0, import_viem11.toHex)(nonce),
+    nonce: (0, import_viem12.toHex)(nonce),
     initCode: "0x",
     callData: input.callData,
-    callGasLimit: (0, import_viem11.toHex)(3e5),
-    verificationGasLimit: (0, import_viem11.toHex)(3e5),
-    preVerificationGas: (0, import_viem11.toHex)(6e4),
-    maxFeePerGas: (0, import_viem11.toHex)(fees.maxFeePerGas * USER_OP_FEE_HEADROOM),
-    maxPriorityFeePerGas: (0, import_viem11.toHex)(fees.maxPriorityFeePerGas),
+    callGasLimit: (0, import_viem12.toHex)(3e5),
+    verificationGasLimit: (0, import_viem12.toHex)(3e5),
+    preVerificationGas: (0, import_viem12.toHex)(6e4),
+    maxFeePerGas: (0, import_viem12.toHex)(fees.maxFeePerGas * USER_OP_FEE_HEADROOM),
+    maxPriorityFeePerGas: (0, import_viem12.toHex)(fees.maxPriorityFeePerGas),
     paymasterAndData: "0x",
     signature: "0x"
   };
@@ -4574,7 +4741,7 @@ async function submitEoa(input) {
   const stub = await rpc(
     input.rpcUrl,
     "pm_getPaymasterStubData",
-    [operation, ENTRY_POINT_V06, (0, import_viem11.toHex)(8453), {}],
+    [operation, ENTRY_POINT_V06, (0, import_viem12.toHex)(8453), {}],
     "prepare"
   );
   if (!stub.paymasterAndData?.startsWith("0x"))
@@ -4589,7 +4756,7 @@ async function submitEoa(input) {
     const final = await rpc(
       input.rpcUrl,
       "pm_getPaymasterData",
-      [operation, ENTRY_POINT_V06, (0, import_viem11.toHex)(8453), {}],
+      [operation, ENTRY_POINT_V06, (0, import_viem12.toHex)(8453), {}],
       "prepare"
     );
     if (!final.paymasterAndData?.startsWith("0x"))
@@ -4599,10 +4766,10 @@ async function submitEoa(input) {
   const userOpHash = operationHash(operation);
   await assertOwnerSession(input.state, input.owner);
   assertIntentFresh(input.expiresAt);
-  const wallet = (0, import_viem11.createWalletClient)({
+  const wallet = (0, import_viem12.createWalletClient)({
     account: input.owner,
     chain: import_chains3.base,
-    transport: (0, import_viem11.custom)(input.state.provider)
+    transport: (0, import_viem12.custom)(input.state.provider)
   });
   const signature = await wallet.signMessage({ message: { raw: userOpHash } });
   operation = { ...operation, signature };
@@ -4680,13 +4847,13 @@ async function submitSmart(input) {
   } catch {
     throw sponsorError("This account cannot check paymaster support on Base.", true);
   }
-  const supportsPaymaster = capabilities?.[(0, import_viem11.toHex)(8453)]?.paymasterService?.supported ?? capabilities?.["8453"]?.paymasterService?.supported ?? capabilities?.["0x0"]?.paymasterService?.supported;
+  const supportsPaymaster = capabilities?.[(0, import_viem12.toHex)(8453)]?.paymasterService?.supported ?? capabilities?.["8453"]?.paymasterService?.supported ?? capabilities?.["0x0"]?.paymasterService?.supported;
   if (supportsPaymaster !== true)
     throw sponsorError("This account cannot use a paymaster on Base.", true);
   await assertOwnerSession(input.state, input.owner);
   let sent;
   assertIntentFresh(input.expiresAt);
-  const requestedId = (0, import_viem11.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+  const requestedId = (0, import_viem12.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
   savePending(input.onPending, { callsId: requestedId }, true);
   await checkpoint(input.onBeforeSubmission, { callsId: requestedId });
   try {
@@ -4695,7 +4862,7 @@ async function submitSmart(input) {
       params: [{
         version: "2.0.0",
         from: input.owner,
-        chainId: (0, import_viem11.toHex)(8453),
+        chainId: (0, import_viem12.toHex)(8453),
         id: requestedId,
         atomicRequired: false,
         calls: [{ to: input.agentWallet, value: "0x0", data: input.callData }],
@@ -4770,7 +4937,7 @@ async function submitSmart(input) {
   );
 }
 async function submitYieldseekerSponsoredWithdrawal(input) {
-  const owner = (0, import_viem11.getAddress)(input.state.walletAddress);
+  const owner = (0, import_viem12.getAddress)(input.state.walletAddress);
   const { intent, rpcUrl } = await requestIntent({
     apiKey: input.apiKey,
     routingApiBaseUrl: input.routingApiBaseUrl,
@@ -4789,7 +4956,7 @@ async function submitYieldseekerSponsoredWithdrawal(input) {
   return intent.ownerPath === "eoa" ? submitEoa(args) : submitSmart(args);
 }
 async function submitYieldseekerSponsoredUpgrade(input) {
-  const owner = (0, import_viem11.getAddress)(input.state.walletAddress);
+  const owner = (0, import_viem12.getAddress)(input.state.walletAddress);
   const { intent, rpcUrl } = await requestIntent({
     apiKey: input.apiKey,
     routingApiBaseUrl: input.routingApiBaseUrl,
@@ -4904,6 +5071,7 @@ var YieldseekerAgent = class {
   receiptClient;
   // A client preparation hint only; the routing API still checks live identity.
   withdrawalVersionCache = /* @__PURE__ */ new Map();
+  pendingUpgrades = /* @__PURE__ */ new Map();
   transactionExecutor;
   unwindReceiptWaiter;
   agentContexts = /* @__PURE__ */ new Map();
@@ -4954,8 +5122,8 @@ var YieldseekerAgent = class {
     if (useCachedV2 && cached && Date.now() - cached.at < 15 * 6e4) return { ...cached.status };
     const status = await readYieldseekerWalletStatus(
       this.getReceiptClient(),
-      (0, import_viem12.getAddress)(context.wallet.walletAddress),
-      (0, import_viem12.getAddress)(state.walletAddress),
+      (0, import_viem13.getAddress)(context.wallet.walletAddress),
+      (0, import_viem13.getAddress)(state.walletAddress),
       YIELDSEEKER_ASSET_METADATA[asset].address
     );
     this.rememberWalletStatus(key2, status);
@@ -4985,12 +5153,12 @@ var YieldseekerAgent = class {
     const pendingKey2 = `owney.yieldseeker.upgrade:${before.owner.toLowerCase()}:${before.agentWallet.toLowerCase()}`;
     const confirmUpgrade = async (hash, receipt2) => {
       this.withdrawalVersionCache.delete(versionKey);
-      const upgradeTopic = (0, import_viem12.encodeEventTopics)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded" })[0];
+      const upgradeTopic = (0, import_viem13.encodeEventTopics)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded" })[0];
       const lastUpgrade = receipt2?.logs.filter((log) => log.address.toLowerCase() === before.agentWallet.toLowerCase() && log.topics[0] === upgradeTopic).at(-1);
       const expectedUpgrade = (() => {
         if (!lastUpgrade || lastUpgrade.removed) return false;
         try {
-          const event = (0, import_viem12.decodeEventLog)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded", data: lastUpgrade.data, topics: lastUpgrade.topics });
+          const event = (0, import_viem13.decodeEventLog)({ abi: YIELDSEEKER_UPGRADE_ABI, eventName: "Upgraded", data: lastUpgrade.data, topics: lastUpgrade.topics });
           return event.args.implementation.toLowerCase() === YIELDSEEKER_V2_IMPLEMENTATION.toLowerCase();
         } catch {
           return false;
@@ -5019,10 +5187,30 @@ var YieldseekerAgent = class {
     } catch {
       storage5 = void 0;
     }
-    const clearConfirmedUpgrade = () => {
+    const clearRecordedUpgrade = () => {
+      this.pendingUpgrades.delete(pendingKey2);
       try {
         storage5?.removeItem(pendingKey2);
       } catch {
+        this.pendingUpgrades.set(pendingKey2, null);
+      }
+    };
+    const pendingUpgrade = (hash) => new OwneyError(
+      "WITHDRAW_IN_PROGRESS",
+      "Yieldseeker wallet upgrade is awaiting confirmation. Retry to check its status.",
+      { txHash: hash, reason: "UPGRADE_CONFIRMATION_PENDING", phase: "observe", safeToFallback: false },
+      this.id
+    );
+    const terminalUpgradeFailure = (error) => error instanceof OwneyError && (error.code === "AGENT_TRANSACTION_REVERTED" || error.details?.reason === "TRANSACTION_REPLACED_WITH_DIFFERENT_CALL");
+    const readUpgradeReceipt = async (hash) => {
+      try {
+        return await this.waitForReceipt(state, chainId, hash);
+      } catch (error) {
+        if (terminalUpgradeFailure(error)) {
+          clearRecordedUpgrade();
+          throw error;
+        }
+        throw pendingUpgrade(hash);
       }
     };
     if (!storage5 && (gasMode === "sponsored" || before.ownerPath === "smart"))
@@ -5034,7 +5222,7 @@ var YieldseekerAgent = class {
       );
     let prior = null;
     try {
-      const saved = storage5?.getItem(pendingKey2);
+      const saved = this.pendingUpgrades.has(pendingKey2) ? JSON.stringify(this.pendingUpgrades.get(pendingKey2)) : storage5?.getItem(pendingKey2);
       try {
         prior = JSON.parse(saved ?? "null");
       } catch {
@@ -5078,7 +5266,7 @@ var YieldseekerAgent = class {
             this.id
           );
         if (Number(callsStatus?.status) === 400 || Number(callsStatus?.status) === 500) {
-          storage5.removeItem(pendingKey2);
+          clearRecordedUpgrade();
           throw new OwneyError(
             "SPONSOR_REQUEST_FAILED",
             "The earlier sponsored upgrade failed.",
@@ -5090,8 +5278,8 @@ var YieldseekerAgent = class {
         earlierHash = hashes.length === 1 ? hashes[0] : void 0;
       }
       if (earlierHash) {
-        const recovered = await confirmUpgrade(earlierHash, await this.waitForReceipt(state, chainId, earlierHash));
-        clearConfirmedUpgrade();
+        const recovered = await confirmUpgrade(earlierHash, await readUpgradeReceipt(earlierHash));
+        clearRecordedUpgrade();
         return recovered;
       }
       throw new OwneyError(
@@ -5108,7 +5296,7 @@ var YieldseekerAgent = class {
         { version: before.version },
         this.id
       );
-    const data = (0, import_viem12.encodeFunctionData)({ abi: YIELDSEEKER_UPGRADE_ABI, functionName: "upgradeToLatest" });
+    const data = (0, import_viem13.encodeFunctionData)({ abi: YIELDSEEKER_UPGRADE_ABI, functionName: "upgradeToLatest" });
     let txHash;
     let receipt;
     if (gasMode === "sponsored") {
@@ -5135,33 +5323,52 @@ var YieldseekerAgent = class {
           asset: YIELDSEEKER_ASSET_METADATA[asset].address,
           callData: data,
           onPending: (pending) => {
-            const current = storage5.getItem(pendingKey2);
-            storage5.setItem(pendingKey2, JSON.stringify({
-              startedAt: Date.now(),
-              ...current ? JSON.parse(current) : {},
-              ...pending
-            }));
+            const current = this.pendingUpgrades.has(pendingKey2) ? this.pendingUpgrades.get(pendingKey2) : JSON.parse(storage5.getItem(pendingKey2) ?? "null");
+            const next = { startedAt: Date.now(), ...current, ...pending };
+            storage5.setItem(pendingKey2, JSON.stringify(next));
+            this.pendingUpgrades.delete(pendingKey2);
           }
         });
         txHash = upgraded.txHash;
         receipt = upgraded.receipt;
       } catch (error) {
-        if (error?.code === 4001 || error instanceof OwneyError && error.code === "SPONSOR_REQUEST_FAILED" && (error.details?.safeToFallback === true || error.details?.executionFailed === true)) storage5.removeItem(pendingKey2);
+        if (error?.code === 4001 || terminalUpgradeFailure(error) || error instanceof OwneyError && error.code === "SPONSOR_REQUEST_FAILED" && (error.details?.safeToFallback === true || error.details?.executionFailed === true)) clearRecordedUpgrade();
         throw error;
       }
     } else {
-      txHash = await this.submitTransaction(state, chainId, {
-        from: (0, import_viem12.getAddress)(state.walletAddress),
-        to: before.agentWallet,
-        data,
-        value: "0",
-        chainId
-      }, void 0, (value) => {
-        receipt = value;
-      });
+      let submittedHash;
+      try {
+        txHash = await this.submitTransaction(state, chainId, {
+          from: (0, import_viem13.getAddress)(state.walletAddress),
+          to: before.agentWallet,
+          data,
+          value: "0",
+          chainId
+        }, (hash) => {
+          submittedHash = hash;
+          const pending = { txHash: hash };
+          this.pendingUpgrades.set(pendingKey2, pending);
+          try {
+            if (storage5) {
+              storage5.setItem(pendingKey2, JSON.stringify(pending));
+              this.pendingUpgrades.delete(pendingKey2);
+            }
+          } catch {
+          }
+        }, (value) => {
+          receipt = value;
+        });
+      } catch (error) {
+        if (terminalUpgradeFailure(error)) {
+          clearRecordedUpgrade();
+          throw error;
+        }
+        if (submittedHash) throw pendingUpgrade(submittedHash);
+        throw error;
+      }
     }
-    const confirmed = await confirmUpgrade(txHash, receipt ?? await this.waitForReceipt(state, chainId, txHash));
-    if (gasMode === "sponsored") clearConfirmedUpgrade();
+    const confirmed = await confirmUpgrade(txHash, receipt ?? await readUpgradeReceipt(txHash));
+    clearRecordedUpgrade();
     return confirmed;
   }
   async disconnect() {
@@ -5193,7 +5400,7 @@ var YieldseekerAgent = class {
     this.assertAsset(targetAsset);
     await this.ensureAgent(state, chainId, targetAsset);
   }
-  async deposit(state, chainId, amount, asset, depositCallback, onProgress) {
+  async deposit(state, chainId, amount, asset, depositCallback, onProgress, onBeforeSubmission) {
     this.assertChain(chainId);
     this.assertAsset(asset);
     if (BigInt(amount) <= 0n) {
@@ -5238,18 +5445,28 @@ var YieldseekerAgent = class {
     } else {
       try {
         txHash = await this.submitTransaction(state, chainId, {
-          from: (0, import_viem12.getAddress)(state.walletAddress),
+          from: (0, import_viem13.getAddress)(state.walletAddress),
           to: YIELDSEEKER_ASSET_METADATA[asset].address,
-          data: (0, import_viem12.encodeFunctionData)({
-            abi: import_viem12.erc20Abi,
+          data: (0, import_viem13.encodeFunctionData)({
+            abi: import_viem13.erc20Abi,
             functionName: "transfer",
-            args: [(0, import_viem12.getAddress)(context.wallet.walletAddress), BigInt(amount)]
+            args: [(0, import_viem13.getAddress)(context.wallet.walletAddress), BigInt(amount)]
           }),
           value: "0",
           chainId
         }, submitted, (value) => {
           receipt = value;
-        });
+        }, onBeforeSubmission ? () => onBeforeSubmission({
+          agentId: this.id,
+          chainId,
+          token: asset,
+          walletAddress: state.walletAddress,
+          agentWallet: context.wallet.walletAddress,
+          intendedAmount: amount,
+          transfer: "pending",
+          registration: "not-applicable",
+          delivery: "not-applicable"
+        }) : void 0);
       } catch (error) {
         if (error instanceof OwneyError && error.details?.ownerTransferNotExecuted === true && error.details.reason === "TRANSACTION_REPLACED_WITH_DIFFERENT_CALL") {
           notifyFunding(onProgress, {
@@ -5377,7 +5594,7 @@ var YieldseekerAgent = class {
       );
       const positionsRead = this.readWithdrawalPositions(state, chainId, context);
       const metadata = YIELDSEEKER_ASSET_METADATA[asset];
-      const agentWallet = (0, import_viem12.getAddress)(context.wallet.walletAddress);
+      const agentWallet = (0, import_viem13.getAddress)(context.wallet.walletAddress);
       const readOwnerFunds = async (blockNumber) => {
         const feeTracker = await withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
           address: agentWallet,
@@ -5386,18 +5603,18 @@ var YieldseekerAgent = class {
           blockNumber
         }), chainId, "eth_call", this.id);
         this.assertSession(generation, chainId, asset);
-        if (!(0, import_viem12.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker))
+        if (!(0, import_viem13.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker))
           throw this.invalidResponse("wallet fee tracker");
         const [idle2, fees] = await Promise.all([
           withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
             address: metadata.address,
-            abi: import_viem12.erc20Abi,
+            abi: import_viem13.erc20Abi,
             functionName: "balanceOf",
             args: [agentWallet],
             blockNumber
           }), chainId, "eth_call", this.id),
           withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
-            address: (0, import_viem12.getAddress)(feeTracker),
+            address: (0, import_viem13.getAddress)(feeTracker),
             abi: YIELDSEEKER_FEE_TRACKER_ABI,
             functionName: "getFeesOwed",
             args: [agentWallet],
@@ -5439,13 +5656,13 @@ var YieldseekerAgent = class {
         let active = true;
         const checks = this.readVaultLiquidity(values.map((position2) => position2.yieldOption), agentWallet, blockNumber).catch(() => []);
         const reads = values.map(async (position2, index) => {
-          const address = (0, import_viem12.getAddress)(position2.yieldOption.address);
+          const address = (0, import_viem13.getAddress)(position2.yieldOption.address);
           try {
             const group = (await checks).slice(index * 3, index * 3 + 3);
             if (!active || group.length !== 3 || group.some((value) => value.status !== "success")) return null;
             this.assertSession(generation, chainId, asset);
             const [underlying, shares, withdrawable] = group.map((value) => value.result);
-            if (typeof underlying !== "string" || !(0, import_viem12.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n) return null;
+            if (typeof underlying !== "string" || !(0, import_viem13.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n) return null;
             const verified = { ...position2, assetsRaw: shares.toString(), withdrawableAssetsRaw: withdrawable.toString() };
             if (shares > 0n && withdrawable === 0n) {
               let positiveValue = false;
@@ -5453,7 +5670,7 @@ var YieldseekerAgent = class {
                 try {
                   const value = await this.getReceiptClient().readContract({
                     address,
-                    abi: import_viem12.erc4626Abi,
+                    abi: import_viem13.erc4626Abi,
                     functionName,
                     args: [shares],
                     blockNumber
@@ -5543,6 +5760,18 @@ var YieldseekerAgent = class {
         );
       }
       if (requested > totalAvailable) {
+        if (!funds.complete)
+          throw new OwneyError(
+            "WITHDRAW_BALANCE_UNAVAILABLE",
+            "Yieldseeker withdrawal liquidity could not be verified for the requested amount.",
+            {
+              asset,
+              requested: requested.toString(),
+              verifiedAvailable: totalAvailable.toString(),
+              reason: "YIELDSEEKER_LIQUIDITY_UNVERIFIED"
+            },
+            this.id
+          );
         throw new OwneyError(
           "WITHDRAW_INSUFFICIENT_BALANCE",
           `Requested withdrawal "${requested}" exceeds available Yieldseeker balance "${totalAvailable}" for asset "${asset}".`,
@@ -5557,6 +5786,7 @@ var YieldseekerAgent = class {
       const requiredIdle = requested + initialFunds.fees;
       let remaining = requiredIdle > idle ? requiredIdle - idle : 0n;
       let grossUnwound = 0n;
+      let confirmedUnwinds = 0n;
       let latestUnwindBlock;
       const unwind = async (position2, assetsRaw) => {
         this.assertSession(generation, chainId, asset);
@@ -5574,7 +5804,10 @@ var YieldseekerAgent = class {
           if (!this.isTransactionHash(response?.transactionHash)) throw this.invalidResponse("position withdrawal");
           unwindTransactionHash = response.transactionHash;
           const unwindReceipt = await this.waitForReceipt(state, chainId, unwindTransactionHash);
-          if (unwindReceipt) latestUnwindBlock = unwindReceipt.blockNumber;
+          if (unwindReceipt) {
+            latestUnwindBlock = unwindReceipt.blockNumber;
+            confirmedUnwinds++;
+          }
         } catch (error) {
           this.invalidateFundingRead(state, chainId, asset);
           throw new OwneyError(
@@ -5644,7 +5877,7 @@ var YieldseekerAgent = class {
       const feeRate = feeRateBps ?? 0;
       const maxFee = confirmedMovement && Number.isInteger(feeRate) && feeRate >= 0 && feeRate <= 1e3 ? (grossUnwound * BigInt(feeRate) + 9999n) / 10000n : 0n;
       const shortfall = availableForOwner < requested ? requested - availableForOwner : 0n;
-      if (availableForOwner === 0n || amount !== void 0 && shortfall > maxFee) {
+      if (availableForOwner === 0n || amount !== void 0 && shortfall > maxFee + confirmedUnwinds) {
         this.invalidateFundingRead(state, chainId, asset);
         if (amount === void 0 && positionsStatus !== "empty")
           throw new OwneyError(
@@ -5666,14 +5899,15 @@ var YieldseekerAgent = class {
         delta: maxSettlementBasis.delta - payout,
         expectedNetDeposits: maxSettlementBasis.expectedNetDeposits - payout
       } : this.snapshotMovement(state, chainId, context, -payout);
-      const account = (0, import_viem12.getAddress)(state.walletAddress);
+      const account = (0, import_viem13.getAddress)(state.walletAddress);
       let receipt;
-      const base6 = { agentId: this.id, chainId, token: asset, walletAddress: state.walletAddress, agentWallet: context.wallet.walletAddress, intendedAmount: amount === void 0 ? "MAX" : payout.toString(), transfer: "pending", registration: "not-applicable", delivery: "pending" };
-      const data = amount === void 0 ? (0, import_viem12.encodeFunctionData)({
+      const base6 = { agentId: this.id, chainId, token: asset, walletAddress: state.walletAddress, agentWallet: context.wallet.walletAddress, intendedAmount: amount ?? "MAX", transfer: "pending", registration: "not-applicable", delivery: "pending" };
+      let submissionEvidence = base6;
+      const data = amount === void 0 ? (0, import_viem13.encodeFunctionData)({
         abi: YIELDSEEKER_AGENT_WALLET_ABI,
         functionName: "withdrawAllAssetToUser",
         args: [account, metadata.address]
-      }) : (0, import_viem12.encodeFunctionData)({
+      }) : (0, import_viem13.encodeFunctionData)({
         abi: YIELDSEEKER_AGENT_WALLET_ABI,
         functionName: "withdrawAssetToUser",
         args: [account, metadata.address, payout]
@@ -5689,10 +5923,13 @@ var YieldseekerAgent = class {
           refreshYieldseekerSignature: (rejected) => this.auth.refreshToken(state, chainId, rejected),
           userId: context.user.userId,
           agentId: context.agent.agentId,
-          agentWallet: (0, import_viem12.getAddress)(context.wallet.walletAddress),
+          agentWallet: (0, import_viem13.getAddress)(context.wallet.walletAddress),
           asset: metadata.address,
           callData: data,
-          onPending: (pending) => notifyFunding(onProgress, { ...base6, ...pending }),
+          onPending: (pending) => {
+            submissionEvidence = { ...submissionEvidence, ...pending };
+            notifyFunding(onProgress, submissionEvidence);
+          },
           onBeforeSubmission: async (pending) => {
             await onBeforeSubmission?.({ ...base6, ...pending });
             onOwnerTransferAttempted?.();
@@ -5704,7 +5941,7 @@ var YieldseekerAgent = class {
         onOwnerTransferAttempted?.();
         txHash = await this.submitTransaction(state, chainId, {
           from: account,
-          to: (0, import_viem12.getAddress)(context.wallet.walletAddress),
+          to: (0, import_viem13.getAddress)(context.wallet.walletAddress),
           data,
           value: "0",
           chainId
@@ -5712,10 +5949,20 @@ var YieldseekerAgent = class {
           receipt = value;
         });
       }
-      confirmedMovement = true;
-      settlement = plannedMovement;
-      const evidence = receipt ? inspectFundingReceipt(receipt, { ...base6, txHash }, metadata.address, "withdraw") : { ...base6, txHash, confirmedAmount: payout.toString(), transfer: "confirmed", delivery: "confirmed" };
+      const evidence = receipt ? inspectFundingReceipt(receipt, { ...submissionEvidence, txHash }, metadata.address, "withdraw") : { ...submissionEvidence, txHash, transfer: "pending", delivery: "pending" };
       notifyFunding(onProgress, evidence);
+      const explicitEmptyPayout = evidence.transfer === "failed" && evidence.confirmedAmount === "0" && evidence.transferLogs?.some((log) => log.amountRaw === "0");
+      if (evidence.transfer === "failed" && !explicitEmptyPayout)
+        throw new OwneyError(
+          "AGENT_TRANSACTION_REVERTED",
+          "The Yieldseeker withdrawal completed without transferring funds.",
+          { asset, available: "0", txHash },
+          this.id
+        );
+      if (!explicitEmptyPayout && (evidence.transfer !== "confirmed" || evidence.delivery !== "confirmed" || !evidence.confirmedAmount))
+        return { txHash, type: "partial", completion: "unverified", amount: "0", evidence };
+      confirmedMovement = true;
+      settlement = evidence.confirmedAmount === payout.toString() ? plannedMovement : null;
       let completion = maxLiquidity && !maxLiquidity.complete ? "unverified" : void 0;
       if (amount === void 0) {
         const verificationDeadline = Date.now() + YIELDSEEKER_MAX_POSITION_VERIFICATION_MS;
@@ -5736,7 +5983,7 @@ var YieldseekerAgent = class {
         positions = proof.positions;
         positionsStatus = hasPositions(positions) ? "remaining" : proof.verified ? "empty" : "unavailable";
         if (positionsStatus === "remaining") {
-          const result = { txHash, type: "partial", amount: evidence.confirmedAmount ?? payout.toString(), evidence };
+          const result = { txHash, type: "partial", amount: evidence.confirmedAmount ?? "0", evidence };
           throw new OwneyError(
             "WITHDRAW_PARTIAL_FAILURE",
             "Yieldseeker MAX could not confirm that all vault positions were cleared.",
@@ -5756,7 +6003,7 @@ var YieldseekerAgent = class {
         }
         if (!proof.verified) completion = "unverified";
       }
-      if (evidence.transfer === "failed" && evidence.confirmedAmount === "0")
+      if (explicitEmptyPayout)
         throw new OwneyError(
           "WITHDRAW_INSUFFICIENT_BALANCE",
           "The Yieldseeker withdrawal completed without transferring funds.",
@@ -5771,7 +6018,7 @@ var YieldseekerAgent = class {
         type: amount === void 0 && !completion ? "full" : "partial",
         ...completion ? { completion } : {},
         ...feeAdjustment ? { feeAdjustment } : {},
-        amount: evidence.confirmedAmount ?? payout.toString(),
+        amount: evidence.confirmedAmount ?? "0",
         evidence
       };
     } finally {
@@ -5812,17 +6059,17 @@ var YieldseekerAgent = class {
     return proof.available;
   }
   async readVaultLiquidity(options, wallet, blockNumber) {
-    const owner = (0, import_viem12.getAddress)(wallet);
+    const owner = (0, import_viem13.getAddress)(wallet);
     const batches = Array.from({ length: Math.ceil(options.length / YIELDSEEKER_VAULTS_PER_RPC_BATCH) }, (_, index) => options.slice(index * YIELDSEEKER_VAULTS_PER_RPC_BATCH, (index + 1) * YIELDSEEKER_VAULTS_PER_RPC_BATCH));
     const results = await Promise.all(batches.map((batch) => this.getReceiptClient().multicall({
       blockNumber,
       allowFailure: true,
       contracts: batch.flatMap((option) => {
-        const address = (0, import_viem12.getAddress)(option.address);
+        const address = (0, import_viem13.getAddress)(option.address);
         return [
-          { address, abi: import_viem12.erc4626Abi, functionName: "asset" },
-          { address, abi: import_viem12.erc20Abi, functionName: "balanceOf", args: [owner] },
-          { address, abi: import_viem12.erc4626Abi, functionName: "maxWithdraw", args: [owner] }
+          { address, abi: import_viem13.erc4626Abi, functionName: "asset" },
+          { address, abi: import_viem13.erc20Abi, functionName: "balanceOf", args: [owner] },
+          { address, abi: import_viem13.erc4626Abi, functionName: "maxWithdraw", args: [owner] }
         ];
       })
     })));
@@ -5833,7 +6080,7 @@ var YieldseekerAgent = class {
     const seen = /* @__PURE__ */ new Set();
     for (const value of values) {
       const option = value?.yieldOption;
-      if (!option || typeof option.address !== "string" || !(0, import_viem12.isAddress)(option.address) || seen.has(option.address.toLowerCase()) || option.chainId !== void 0 && option.chainId !== chainId || option.assetAddress !== void 0 && (typeof option.assetAddress !== "string" || option.assetAddress.toLowerCase() !== underlying) || typeof value.assetsRaw !== "string" || !/^\d+$/.test(value.assetsRaw) || typeof value.withdrawableAssetsRaw !== "string" || !/^\d+$/.test(value.withdrawableAssetsRaw))
+      if (!option || typeof option.address !== "string" || !(0, import_viem13.isAddress)(option.address) || seen.has(option.address.toLowerCase()) || option.chainId !== void 0 && option.chainId !== chainId || option.assetAddress !== void 0 && (typeof option.assetAddress !== "string" || option.assetAddress.toLowerCase() !== underlying) || typeof value.assetsRaw !== "string" || !/^\d+$/.test(value.assetsRaw) || typeof value.withdrawableAssetsRaw !== "string" || !/^\d+$/.test(value.withdrawableAssetsRaw))
         throw this.invalidResponse("yield positions");
       seen.add(option.address.toLowerCase());
     }
@@ -5846,7 +6093,7 @@ var YieldseekerAgent = class {
     const historic = this.readCache.get(`historic:${key2}`)?.value?.position;
     const receivedAssets = new Set((historic?.movements ?? []).filter((movement) => movement.chainId === chainId && movement.agentWalletId === context.wallet.agentWalletId && movement.toAddress?.toLowerCase() === context.wallet.walletAddress.toLowerCase()).filter((movement) => typeof movement.assetAddress === "string").map((movement) => movement.assetAddress.toLowerCase()));
     for (const option of this.yieldOptions.get(context.asset)?.value ?? []) {
-      if (option.chainId !== chainId || typeof option.assetAddress !== "string" || option.assetAddress.toLowerCase() !== YIELDSEEKER_ASSET_METADATA[context.asset].address.toLowerCase() || !(0, import_viem12.isAddress)(option.address) || !receivedAssets.has(option.address.toLowerCase()) || hints.has(option.address.toLowerCase())) continue;
+      if (option.chainId !== chainId || typeof option.assetAddress !== "string" || option.assetAddress.toLowerCase() !== YIELDSEEKER_ASSET_METADATA[context.asset].address.toLowerCase() || !(0, import_viem13.isAddress)(option.address) || !receivedAssets.has(option.address.toLowerCase()) || hints.has(option.address.toLowerCase())) continue;
       hints.set(option.address.toLowerCase(), {
         yieldOption: option,
         assetsRaw: "0",
@@ -5898,7 +6145,7 @@ var YieldseekerAgent = class {
     const read2 = async () => {
       const client = this.getReceiptClient();
       const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
-      const wallet = (0, import_viem12.getAddress)(context.wallet.walletAddress);
+      const wallet = (0, import_viem13.getAddress)(context.wallet.walletAddress);
       assertReadCurrent();
       if (typeof blockNumber !== "bigint") throw unavailable();
       const indexedPositions = this.validateWithdrawalPositions(positions ?? [], chainId, context.asset);
@@ -5908,11 +6155,11 @@ var YieldseekerAgent = class {
       for (const position2 of indexedPositions) candidates.set(position2.yieldOption.address.toLowerCase(), position2.yieldOption);
       const options = [...candidates.values()];
       if (options.length > YIELDSEEKER_WITHDRAWAL_CANDIDATE_LIMIT) throw unavailable();
-      const [checks, idle, feeTracker] = await Promise.all([
-        this.readVaultLiquidity(options, wallet, blockNumber),
+      const checksRead = this.readVaultLiquidity(options, wallet, blockNumber).then((value) => ({ value }), (error) => ({ error }));
+      const [idle, feeTracker] = await Promise.all([
         client.readContract({
           address: metadata.address,
-          abi: import_viem12.erc20Abi,
+          abi: import_viem13.erc20Abi,
           functionName: "balanceOf",
           args: [wallet],
           blockNumber
@@ -5924,10 +6171,10 @@ var YieldseekerAgent = class {
           blockNumber
         })
       ]);
-      if (typeof idle !== "bigint" || idle < 0n || !(0, import_viem12.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker)) throw unavailable();
+      if (typeof idle !== "bigint" || idle < 0n || !(0, import_viem13.isAddress)(feeTracker) || /^0x0{40}$/i.test(feeTracker)) throw unavailable();
       assertReadCurrent();
       const fees = await client.readContract({
-        address: (0, import_viem12.getAddress)(feeTracker),
+        address: (0, import_viem13.getAddress)(feeTracker),
         abi: YIELDSEEKER_FEE_TRACKER_ABI,
         functionName: "getFeesOwed",
         args: [wallet],
@@ -5937,6 +6184,18 @@ var YieldseekerAgent = class {
       const verified = [];
       const verifiedVaults = [];
       let deployed = 0n;
+      const proof = (complete) => ({
+        blockNumber,
+        idle,
+        fees,
+        available: idle + deployed > fees ? idle + deployed - fees : 0n,
+        positions: [...verified],
+        verifiedVaults: [...verifiedVaults],
+        indexedPositions,
+        complete
+      });
+      assertReadCurrent();
+      knownProof = proof(false);
       const collect = (options2, results) => {
         assertReadCurrent();
         const known = this.balanceVaults.get(contextKey) ?? /* @__PURE__ */ new Set();
@@ -5952,7 +6211,7 @@ var YieldseekerAgent = class {
             return;
           }
           const [underlying, shares, withdrawable] = group.map((value) => value.result);
-          if (typeof underlying !== "string" || !(0, import_viem12.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n || shares === 0n && withdrawable > 0n) {
+          if (typeof underlying !== "string" || !(0, import_viem13.isAddress)(underlying) || underlying.toLowerCase() !== metadata.address.toLowerCase() || typeof shares !== "bigint" || shares < 0n || typeof withdrawable !== "bigint" || withdrawable < 0n || shares === 0n && withdrawable > 0n) {
             valid2 = false;
             return;
           }
@@ -5969,17 +6228,10 @@ var YieldseekerAgent = class {
         });
         return valid2;
       };
-      const allKnownVerified = collect(options, checks);
-      const proof = (complete) => ({
-        blockNumber,
-        idle,
-        fees,
-        available: idle + deployed > fees ? idle + deployed - fees : 0n,
-        positions: [...verified],
-        verifiedVaults: [...verifiedVaults],
-        indexedPositions,
-        complete
-      });
+      const checks = await checksRead;
+      assertReadCurrent();
+      if ("error" in checks) throw checks.error;
+      const allKnownVerified = collect(options, checks.value);
       knownProof = proof(false);
       const indexed = new Map(indexedPositions.map((position2) => [position2.yieldOption.address.toLowerCase(), position2]));
       const discrepancy = verified.some((position2) => {
@@ -5996,7 +6248,7 @@ var YieldseekerAgent = class {
       assertReadCurrent();
       const eligible = /* @__PURE__ */ new Map();
       for (const option of catalog ?? []) {
-        if (option?.chainId === chainId && typeof option.assetAddress === "string" && option.assetAddress.toLowerCase() === metadata.address.toLowerCase() && (0, import_viem12.isAddress)(option.address))
+        if (option?.chainId === chainId && typeof option.assetAddress === "string" && option.assetAddress.toLowerCase() === metadata.address.toLowerCase() && (0, import_viem13.isAddress)(option.address))
           eligible.set(option.address.toLowerCase(), option);
       }
       const extra = [...eligible].filter(([address]) => !candidates.has(address)).map(([, option]) => option);
@@ -6047,7 +6299,7 @@ var YieldseekerAgent = class {
     const key2 = this.contextKey(state, evidence.chainId, evidence.token);
     const generation = this.readGeneration, version = this.portfolioVersion(key2);
     if (read2.readVersion !== version) return void 0;
-    const wallet = (0, import_viem12.getAddress)(context.wallet.walletAddress);
+    const wallet = (0, import_viem13.getAddress)(context.wallet.walletAddress);
     const asset = YIELDSEEKER_ASSET_METADATA[evidence.token];
     const client = this.getReceiptClient();
     const blockNumber = await client.getBlockNumber({ cacheTime: 0 });
@@ -6055,10 +6307,10 @@ var YieldseekerAgent = class {
     const vaults = [...this.balanceVaults.get(key2) ?? []];
     const [invested, idle, tracker] = await Promise.all([
       remainingVaultBalance(client, wallet, asset.address, vaults, blockNumber),
-      client.readContract({ address: asset.address, abi: import_viem12.erc20Abi, functionName: "balanceOf", args: [wallet], blockNumber }),
+      client.readContract({ address: asset.address, abi: import_viem13.erc20Abi, functionName: "balanceOf", args: [wallet], blockNumber }),
       client.readContract({ address: wallet, abi: YIELDSEEKER_AGENT_WALLET_ABI, functionName: "feeTracker", blockNumber })
     ]);
-    if (invested === void 0 || typeof idle !== "bigint" || idle < 0n || !(0, import_viem12.isAddress)(tracker) || /^0x0{40}$/i.test(tracker)) return void 0;
+    if (invested === void 0 || typeof idle !== "bigint" || idle < 0n || !(0, import_viem13.isAddress)(tracker) || /^0x0{40}$/i.test(tracker)) return void 0;
     const fees = await client.readContract({
       address: tracker,
       abi: YIELDSEEKER_FEE_TRACKER_ABI,
@@ -6071,7 +6323,7 @@ var YieldseekerAgent = class {
     const total = idle + invested > fees ? idle + invested - fees : 0n;
     const displayed = balance.assetBalances?.find((item) => item.chainId === evidence.chainId && item.asset === evidence.token);
     if (!displayed || !evidence.confirmedAmount || !/^\d+$/.test(evidence.confirmedAmount)) return void 0;
-    const amount = (0, import_viem12.parseUnits)(displayed.amount, asset.decimals);
+    const amount = (0, import_viem13.parseUnits)(displayed.amount, asset.decimals);
     if (amount < 0n) return void 0;
     const displayUnit = evidence.token === "USDC" ? 5000n : 500000000000n;
     const movementUnit = BigInt(evidence.confirmedAmount) / 1000n;
@@ -6117,9 +6369,9 @@ var YieldseekerAgent = class {
     if (!context) return void 0;
     const idle = await withPaidRpcDiagnostics(() => this.getReceiptClient().readContract({
       address: YIELDSEEKER_ASSET_METADATA[asset].address,
-      abi: import_viem12.erc20Abi,
+      abi: import_viem13.erc20Abi,
       functionName: "balanceOf",
-      args: [(0, import_viem12.getAddress)(context.wallet.walletAddress)]
+      args: [(0, import_viem13.getAddress)(context.wallet.walletAddress)]
     }), chainId, "eth_call", this.id);
     this.assertSession(generation, chainId, asset);
     if (typeof idle !== "bigint" || idle < 0n) throw this.invalidResponse("wallet deposit balance");
@@ -6127,7 +6379,7 @@ var YieldseekerAgent = class {
   }
   async getEarnings(state, chainId) {
     this.assertChain(chainId);
-    return mapYieldseekerEarnings(await this.loadPortfolio(state, chainId, {}));
+    return mapYieldseekerEarnings(await this.loadPortfolio(state, chainId, { includePositions: false }));
   }
   async getAccountApy(state, chainId, days, tokenSymbol) {
     this.assertChain(chainId);
@@ -6166,7 +6418,7 @@ var YieldseekerAgent = class {
     );
     const vaultAddresses = new Set(
       catalog.flat().filter(
-        (yieldOption) => yieldOption.chainId === chainId && (0, import_viem12.isAddress)(yieldOption.address)
+        (yieldOption) => yieldOption.chainId === chainId && (0, import_viem13.isAddress)(yieldOption.address)
       ).map((yieldOption) => yieldOption.address.toLowerCase())
     );
     return mapYieldseekerHistory(contexts, {
@@ -6295,7 +6547,7 @@ var YieldseekerAgent = class {
       `/users/${user.userId}/agents/${agent.agentId}/wallet`
     ).then((walletResponse) => {
       this.assertSession(generation, chainId, asset);
-      if (!walletResponse?.agentWallet || !(0, import_viem12.isAddress)(walletResponse.agentWallet.walletAddress)) {
+      if (!walletResponse?.agentWallet || !(0, import_viem13.isAddress)(walletResponse.agentWallet.walletAddress)) {
         throw this.invalidResponse("agent wallet");
       }
       const context = {
@@ -6325,7 +6577,7 @@ var YieldseekerAgent = class {
       this.users.set(key2, persisted);
       return persisted;
     }
-    const walletAddress = (0, import_viem12.getAddress)(state.walletAddress);
+    const walletAddress = (0, import_viem13.getAddress)(state.walletAddress);
     const generation = this.readGeneration;
     let user = null;
     try {
@@ -6709,7 +6961,7 @@ var YieldseekerAgent = class {
       this.agentPath(context, "deploy"),
       { method: "POST", body: {} }
     );
-    if (!deployed?.agentWallet || !(0, import_viem12.isAddress)(deployed.agentWallet.walletAddress) || deployed.agentWallet.walletAddress.toLowerCase() !== walletAddress) {
+    if (!deployed?.agentWallet || !(0, import_viem13.isAddress)(deployed.agentWallet.walletAddress) || deployed.agentWallet.walletAddress.toLowerCase() !== walletAddress) {
       throw this.invalidResponse("agent deployment", {
         reason: "Deploy did not return the expected Agent Wallet."
       });
@@ -6810,22 +7062,26 @@ var YieldseekerAgent = class {
       this.id
     );
   }
-  async submitTransaction(state, chainId, transaction, onSubmitted, onReceipt) {
+  async submitTransaction(state, chainId, transaction, onSubmitted, onReceipt, onBeforeSubmission) {
     if (this.transactionExecutor) {
-      const hash2 = await this.transactionExecutor(state, chainId, transaction);
+      await onBeforeSubmission?.();
+      const hash2 = await this.transactionExecutor(state, chainId, transaction, onReceipt);
       onSubmitted?.(hash2);
       return hash2;
     }
     this.assertTransaction(transaction, state, chainId);
-    const account = (0, import_viem12.getAddress)(state.walletAddress);
-    const walletClient = (0, import_viem12.createWalletClient)({
+    const account = (0, import_viem13.getAddress)(state.walletAddress);
+    const walletClient = (0, import_viem13.createWalletClient)({
       account,
       chain: import_chains4.base,
-      transport: (0, import_viem12.custom)(state.provider)
+      transport: onBeforeSubmission ? (0, import_viem13.custom)({ request: async (args) => {
+        if (args.method === "eth_sendTransaction") await onBeforeSubmission();
+        return state.provider.request(args);
+      } }, { retryCount: 0 }) : (0, import_viem13.custom)(state.provider)
     });
-    const walletChainClient = (0, import_viem12.createPublicClient)({
+    const walletChainClient = (0, import_viem13.createPublicClient)({
       chain: import_chains4.base,
-      transport: (0, import_viem12.custom)(state.provider)
+      transport: (0, import_viem13.custom)(state.provider)
     });
     await ensureWalletOnChain(
       walletChainClient,
@@ -6835,7 +7091,7 @@ var YieldseekerAgent = class {
     const hash = await walletClient.sendTransaction({
       account,
       chain: import_chains4.base,
-      to: (0, import_viem12.getAddress)(transaction.to),
+      to: (0, import_viem13.getAddress)(transaction.to),
       data: transaction.data,
       value: BigInt(transaction.value)
     });
@@ -6939,12 +7195,12 @@ var YieldseekerAgent = class {
     return receipt;
   }
   assertTransaction(transaction, state, chainId) {
-    if (!transaction || typeof transaction.from !== "string" || !(0, import_viem12.isAddress)(transaction.from) || typeof transaction.to !== "string" || !(0, import_viem12.isAddress)(transaction.to) || typeof transaction.data !== "string" || !/^0x[a-fA-F0-9]*$/.test(transaction.data) || typeof transaction.value !== "string" || !/^[0-9]+$/.test(transaction.value) || transaction.chainId !== chainId || (0, import_viem12.getAddress)(transaction.from) !== (0, import_viem12.getAddress)(state.walletAddress)) {
+    if (!transaction || typeof transaction.from !== "string" || !(0, import_viem13.isAddress)(transaction.from) || typeof transaction.to !== "string" || !(0, import_viem13.isAddress)(transaction.to) || typeof transaction.data !== "string" || !/^0x[a-fA-F0-9]*$/.test(transaction.data) || typeof transaction.value !== "string" || !/^[0-9]+$/.test(transaction.value) || transaction.chainId !== chainId || (0, import_viem13.getAddress)(transaction.from) !== (0, import_viem13.getAddress)(state.walletAddress)) {
       throw this.invalidResponse("transaction");
     }
   }
   assertAgent(agent) {
-    if (typeof agent.agentId !== "string" || typeof agent.assetAddress !== "string" || !(0, import_viem12.isAddress)(agent.assetAddress) || agent.chainId !== 8453) {
+    if (typeof agent.agentId !== "string" || typeof agent.assetAddress !== "string" || !(0, import_viem13.isAddress)(agent.assetAddress) || agent.chainId !== 8453) {
       throw this.invalidResponse("agent");
     }
   }
@@ -7098,15 +7354,24 @@ async function withFailureReporting(apiKey, agentType, fn, baseUrl) {
 }
 
 // src/lib/helpers/withdraw-helper.ts
-var import_viem13 = require("viem");
+var import_viem14 = require("viem");
 function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decimals) {
   const target = asset.toUpperCase();
   return agents.map((agent) => {
+    let invalidBalance = false;
+    const readAmount = (value, raw2 = false) => {
+      if (typeof value !== "string" || !(raw2 ? /^\d+$/ : /^\d+(?:\.\d+)?$/).test(value)) {
+        invalidBalance = true;
+        return 0n;
+      }
+      const [whole, fraction] = value.split(".");
+      return raw2 ? BigInt(value) : (0, import_viem14.parseUnits)(fraction === void 0 ? whole : `${whole}.${fraction.slice(0, decimals)}`, decimals);
+    };
     const agentBalance = aggregated[agent.id];
     const tokenBalance = agentBalance?.tokens.find(
       (t) => t.chainId === chainId && t.asset.toUpperCase() === target
     );
-    let balance = tokenBalance ? (0, import_viem13.parseUnits)(tokenBalance.amount, decimals) : 0n;
+    let balance = tokenBalance ? readAmount(tokenBalance.amount) : 0n;
     if (agent.balanceComposition === "tokens-plus-positions") {
       const chainNameById = {
         1: "ETHEREUM",
@@ -7118,20 +7383,22 @@ function projectAgentBalancesForAsset(agents, aggregated, chainId, asset, decima
         const positionChain = position2.chain.trim().toUpperCase();
         const matchesChain = positionChain === String(chainId) || targetChain !== void 0 && positionChain === targetChain;
         if (!matchesChain || position2.asset.toUpperCase() !== target) continue;
-        balance += position2.withdrawableAmountRaw !== void 0 ? BigInt(position2.withdrawableAmountRaw) : (0, import_viem13.parseUnits)(position2.amount, decimals);
+        balance += position2.withdrawableAmountRaw !== void 0 ? readAmount(position2.withdrawableAmountRaw, true) : readAmount(position2.amount);
       }
     }
     const assetTotal = agentBalance?.assetBalances?.find(
       (t) => t.chainId === chainId && t.asset.toUpperCase() === target
     );
     if (assetTotal) {
-      const total = (0, import_viem13.parseUnits)(assetTotal.amount, decimals);
+      const total = readAmount(assetTotal.amount);
       if (total < balance) balance = total > 0n ? total : 0n;
     }
-    return { agent, balance };
+    return invalidBalance ? { agent, balance: 0n, invalidBalance: true } : { agent, balance };
   });
 }
 function planProportionalShares(balances, requested, totalAvailable) {
+  if (requested < 0n || totalAvailable < 0n || balances.some((entry) => entry.balance < 0n) || balances.reduce((sum, entry) => sum + entry.balance, 0n) !== totalAvailable || requested > totalAvailable)
+    throw new Error("Invalid withdrawal planning amounts.");
   const plans = balances.map(({ agent, balance }) => ({
     agent,
     balance,
@@ -7154,6 +7421,8 @@ function planProportionalShares(balances, requested, totalAvailable) {
   return plans;
 }
 function planDisabledDrain(disabled, requested) {
+  if (requested < 0n || disabled.some((entry) => entry.balance < 0n))
+    throw new Error("Invalid withdrawal planning amounts.");
   const sorted = [...disabled].filter((d) => d.balance > 0n).sort(
     (a, b) => b.balance > a.balance ? 1 : b.balance < a.balance ? -1 : 0
   );
@@ -7171,6 +7440,7 @@ function planDisabledDrain(disabled, requested) {
   return { plans, remaining };
 }
 function redistributeShare(plans, fromIndex, amount, candidatePool) {
+  if (amount <= 0n) return;
   const pool = candidatePool ?? plans.slice(fromIndex + 1);
   const candidates = pool.filter((c) => c.balance - c.planned > 0n);
   const totalHeadroom = candidates.reduce(
@@ -7197,7 +7467,13 @@ function redistributeShare(plans, fromIndex, amount, candidatePool) {
   }
 }
 function sumWithdrawnAmount(results) {
-  return Object.values(results).reduce((sum, r) => sum + BigInt(r.amount), 0n);
+  return Object.values(results).reduce((sum, result) => sum + (confirmedWithdrawalAmount(result) ?? 0n), 0n);
+}
+function confirmedWithdrawalAmount(result) {
+  const evidence = result.evidence;
+  if (evidence && (evidence.transfer !== "confirmed" || evidence.delivery !== "confirmed")) return void 0;
+  const value = evidence ? evidence.confirmedAmount : result.amount;
+  return typeof value === "string" && /^\d+$/.test(value) ? BigInt(value) : void 0;
 }
 
 // src/lib/helpers/account-apy-helper.ts
@@ -7321,14 +7597,14 @@ function aggregateDailyEarnings(series, tokenSymbol) {
 }
 
 // src/client.ts
-var import_viem17 = require("viem");
+var import_viem18 = require("viem");
 var import_chains5 = require("viem/chains");
 
 // src/lib/sponsored-token-batch.ts
-var import_viem15 = require("viem");
+var import_viem16 = require("viem");
 
 // src/lib/permit2-batch.ts
-var import_viem14 = require("viem");
+var import_viem15 = require("viem");
 var BATCH_PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
 var BASE_USDC_ADDRESS = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
 var ERC2612_PERMIT_TYPES = {
@@ -7340,7 +7616,7 @@ var ERC2612_PERMIT_TYPES = {
     { name: "deadline", type: "uint256" }
   ]
 };
-var ERC2612_READ_ABI = (0, import_viem14.parseAbi)([
+var ERC2612_READ_ABI = (0, import_viem15.parseAbi)([
   "function name() view returns (string)",
   "function version() view returns (string)",
   "function nonces(address owner) view returns (uint256)"
@@ -7378,7 +7654,7 @@ var PERMIT_BATCH_TYPES = {
     { name: "amount", type: "uint256" }
   ]
 };
-var PERMIT2_BATCH_ABI = (0, import_viem14.parseAbi)([
+var PERMIT2_BATCH_ABI = (0, import_viem15.parseAbi)([
   "struct TokenPermissions { address token; uint256 amount; }",
   "struct PermitBatchTransferFrom { TokenPermissions[] permitted; uint256 nonce; uint256 deadline; }",
   "struct SignatureTransferDetails { address to; uint256 requestedAmount; }",
@@ -7411,9 +7687,29 @@ function batchTypedData(b, spender) {
     }
   };
 }
+var BATCH_WITNESS_TYPE = "Deposit witness)Deposit(address[] recipients)TokenPermissions(address token,uint256 amount)";
+function batchWitness(b) {
+  return (0, import_viem15.hashStruct)({
+    types: PERMIT_BATCH_TYPES,
+    primaryType: "Deposit",
+    data: { recipients: b.transfers.map((t) => t.to) }
+  });
+}
+function batchArgs(b) {
+  return [
+    batchPermit(b),
+    b.transfers.map((t) => ({ to: t.to, requestedAmount: BigInt(t.amount) })),
+    b.from,
+    batchWitness(b),
+    BATCH_WITNESS_TYPE,
+    b.signature
+  ];
+}
 
 // src/lib/sponsored-token-batch.ts
 var memory = /* @__PURE__ */ new Map();
+var settledRecords = /* @__PURE__ */ new Map();
+var expiredRecords = /* @__PURE__ */ new Map();
 var inflight = /* @__PURE__ */ new Map();
 var planOf = (transfers) => JSON.stringify(
   transfers.map((t) => ({
@@ -7421,32 +7717,109 @@ var planOf = (transfers) => JSON.stringify(
     amount: BigInt(t.amount).toString()
   }))
 );
-var pendingKey = (i) => `owney.token-batch.v1:${(0, import_viem15.keccak256)((0, import_viem15.toBytes)(i.apiKey))}:${i.baseUrl ?? "default"}:${i.chainId}:${i.owner.toLowerCase()}:${i.token.toLowerCase()}`;
+var pendingKey = (i) => `owney.token-batch.v1:${(0, import_viem16.keccak256)((0, import_viem16.toBytes)(i.apiKey))}:${i.baseUrl ?? "default"}:${i.chainId}:${i.owner.toLowerCase()}:${i.token.toLowerCase()}`;
 function pendingTokenBatch(i) {
   try {
     const saved = read(pendingKey(i));
     if (!saved) return;
     const body = JSON.parse(saved);
-    if (!body.serializedTransaction || body.chainId !== i.chainId || !(0, import_viem15.isAddressEqual)(body.from, i.owner) || !(0, import_viem15.isAddressEqual)(body.token, i.token) || !body.transfers?.length) return;
-    return { txHash: (0, import_viem15.keccak256)(body.serializedTransaction), transfers: body.transfers.map(({ to, amount }) => ({ to, amount })) };
+    if (!body.serializedTransaction || body.chainId !== i.chainId || !(0, import_viem16.isAddressEqual)(body.from, i.owner) || !(0, import_viem16.isAddressEqual)(body.token, i.token) || !body.transfers?.length) return;
+    return { txHash: (0, import_viem16.keccak256)(body.serializedTransaction), transfers: body.transfers.map(({ to, amount }) => ({ to, amount })) };
+  } catch {
+    return;
+  }
+}
+async function releaseExpiredTokenBatch(i) {
+  const key2 = pendingKey(i);
+  let timer;
+  let expired = false;
+  const check = async () => {
+    let active = read(key2);
+    if (active && i.expectedTxHash) {
+      const current = JSON.parse(active);
+      if (!current.serializedTransaction || (0, import_viem16.keccak256)(current.serializedTransaction).toLowerCase() !== i.expectedTxHash.toLowerCase())
+        active = void 0;
+    }
+    const archiveKey = i.expectedTxHash ? `${key2}:expired:${i.expectedTxHash.toLowerCase()}` : void 0;
+    const saved = active ?? (archiveKey && (expiredRecords.get(archiveKey) ?? (typeof window === "undefined" ? void 0 : window.localStorage.getItem(archiveKey))));
+    if (!saved) return;
+    const body = JSON.parse(saved);
+    if (!body.serializedTransaction || body.chainId !== i.chainId || !(0, import_viem16.isAddressEqual)(body.from, i.owner) || !(0, import_viem16.isAddressEqual)(body.token, i.token) || !body.transfers?.length) return;
+    const txHash = (0, import_viem16.keccak256)(body.serializedTransaction);
+    if (i.expectedTxHash && txHash.toLowerCase() !== i.expectedTxHash.toLowerCase()) return;
+    const transaction = (0, import_viem16.parseTransaction)(body.serializedTransaction);
+    if (transaction.chainId !== i.chainId || !transaction.to || !(0, import_viem16.isAddressEqual)(transaction.to, BATCH_PERMIT2_ADDRESS) || (transaction.value ?? 0n) !== 0n || transaction.data !== (0, import_viem16.encodeFunctionData)({
+      abi: PERMIT2_BATCH_ABI,
+      functionName: "permitWitnessTransferFrom",
+      args: batchArgs(body)
+    })) return;
+    const nonce = BigInt(body.nonce);
+    const deadline = BigInt(body.deadline);
+    if (nonce < 0n || nonce > MAX_UINT256 || deadline < 0n) return;
+    const block = await i.pub.getBlock({ blockTag: "finalized" });
+    if (expired || typeof block.number !== "bigint" || typeof block.timestamp !== "bigint" || block.timestamp <= deadline) return;
+    const bitmap = await i.pub.readContract({
+      address: BATCH_PERMIT2_ADDRESS,
+      abi: PERMIT2_BATCH_ABI,
+      functionName: "nonceBitmap",
+      args: [i.owner, nonce >> 8n],
+      blockNumber: block.number
+    });
+    if (expired || typeof bitmap !== "bigint" || bitmap < 0n || bitmap > MAX_UINT256 || (bitmap & 1n << (nonce & 255n)) !== 0n || active && read(key2) !== active) return;
+    if (active) {
+      const terminalKey = `${key2}:expired:${txHash.toLowerCase()}`;
+      expiredRecords.set(terminalKey, saved);
+      let persisted = typeof window === "undefined";
+      try {
+        if (typeof window !== "undefined") {
+          window.localStorage.setItem(terminalKey, saved);
+          persisted = window.localStorage.getItem(terminalKey) === saved;
+        }
+      } catch {
+      }
+      if (!persisted) settledRecords.set(key2, saved);
+      else clear(key2, body);
+    }
+    return { txHash, transfers: body.transfers.map(({ to, amount }) => ({ to, amount })), blockNumber: block.number };
+  };
+  try {
+    return await Promise.race([check(), new Promise((resolve) => {
+      timer = setTimeout(() => {
+        expired = true;
+        resolve(void 0);
+      }, 8e3);
+    })]);
   } catch {
     return;
+  } finally {
+    expired = true;
+    if (timer) clearTimeout(timer);
   }
 }
 function read(key2) {
-  return typeof window === "undefined" ? memory.get(key2) : window.localStorage.getItem(key2);
+  const value = typeof window === "undefined" ? memory.get(key2) : window.localStorage.getItem(key2);
+  return value && settledRecords.get(key2) === value ? void 0 : value;
 }
-function save(key2, body) {
-  const value = JSON.stringify({
+function storedBody(body) {
+  return JSON.stringify({
     ...body,
     transfers: body.transfers.map(({ to, amount }) => ({ to, amount }))
   });
+}
+function save(key2, body) {
+  const value = storedBody(body);
   if (typeof window === "undefined") memory.set(key2, value);
   else window.localStorage.setItem(key2, value);
+  settledRecords.delete(key2);
 }
-function clear(key2) {
-  if (typeof window === "undefined") memory.delete(key2);
-  else window.localStorage.removeItem(key2);
+function clear(key2, body) {
+  try {
+    if (typeof window === "undefined") memory.delete(key2);
+    else window.localStorage.removeItem(key2);
+    settledRecords.delete(key2);
+  } catch {
+    settledRecords.set(key2, storedBody(body));
+  }
 }
 function sponsorTokenBatch(i) {
   const key2 = pendingKey(i);
@@ -7513,7 +7886,7 @@ async function execute(i, key2, plan) {
           baseUrl: i.baseUrl,
           body
         });
-        if (!preparedPermit.serializedPermitTransaction || !preparedPermit.permitTxHash || (0, import_viem15.keccak256)(preparedPermit.serializedPermitTransaction) !== preparedPermit.permitTxHash)
+        if (!preparedPermit.serializedPermitTransaction || !preparedPermit.permitTxHash || (0, import_viem16.keccak256)(preparedPermit.serializedPermitTransaction) !== preparedPermit.permitTxHash)
           throw new Error(
             "Sponsorship API did not return a valid prepared permit transaction."
           );
@@ -7524,7 +7897,7 @@ async function execute(i, key2, plan) {
         save(key2, body);
       }
       if (!body.serializedTransaction) {
-        const permitHash = body.serializedPermitTransaction ? (0, import_viem15.keccak256)(body.serializedPermitTransaction) : void 0;
+        const permitHash = body.serializedPermitTransaction ? (0, import_viem16.keccak256)(body.serializedPermitTransaction) : void 0;
         let prepared = permitHash ? await postSigned("approval", permitHash) : await post();
         if (prepared?.status === "pending") {
           if (!permitHash || prepared.phase !== "approval" || prepared.txHash !== permitHash)
@@ -7535,7 +7908,7 @@ async function execute(i, key2, plan) {
         if (!prepared) prepared = await post();
         if (prepared.status === "pending" && permitHash && prepared.phase === "approval" && prepared.txHash === permitHash)
           throw pendingError("approval", permitHash);
-        if (!prepared.serializedTransaction || (0, import_viem15.keccak256)(prepared.serializedTransaction) !== prepared.txHash)
+        if (!prepared.serializedTransaction || (0, import_viem16.keccak256)(prepared.serializedTransaction) !== prepared.txHash)
           throw new Error(
             "Sponsorship API did not return a valid prepared transaction."
           );
@@ -7545,23 +7918,24 @@ async function execute(i, key2, plan) {
         };
         save(key2, body);
       }
+      await i.onBeforeSubmission?.((0, import_viem16.keccak256)(body.serializedTransaction));
       try {
-        i.onSubmitted?.((0, import_viem15.keccak256)(body.serializedTransaction));
+        i.onSubmitted?.((0, import_viem16.keccak256)(body.serializedTransaction));
       } catch {
       }
-      const hash = (0, import_viem15.keccak256)(body.serializedTransaction);
+      const hash = (0, import_viem16.keccak256)(body.serializedTransaction);
       const existing = await i.pub.getTransactionReceipt({ hash }).catch(() => void 0);
       if (existing) {
         assertReceipt(existing, "deposit");
         void post().catch(() => void 0);
-        clear(key2);
+        clear(key2, body);
         return hash;
       }
       let result = await postSigned("deposit", hash);
-      if (result?.status === "pending" && result.phase === "approval" && body.serializedPermitTransaction && result.txHash === (0, import_viem15.keccak256)(body.serializedPermitTransaction)) {
+      if (result?.status === "pending" && result.phase === "approval" && body.serializedPermitTransaction && result.txHash === (0, import_viem16.keccak256)(body.serializedPermitTransaction)) {
         await waitForConfirmation("approval", result.txHash);
         result = await postSigned("deposit", hash);
-        if (result?.status === "pending" && result.phase === "approval" && result.txHash === (0, import_viem15.keccak256)(body.serializedPermitTransaction)) throw pendingError("approval", result.txHash);
+        if (result?.status === "pending" && result.phase === "approval" && result.txHash === (0, import_viem16.keccak256)(body.serializedPermitTransaction)) throw pendingError("approval", result.txHash);
       }
       if (result) {
         if (result.txHash !== hash || result.status === "pending" && result.phase !== "deposit")
@@ -7569,11 +7943,18 @@ async function execute(i, key2, plan) {
         if (result.status === "pending") await waitForConfirmation("deposit", hash);
       }
       if (!result || result.status === "pending") void post().catch(() => void 0);
-      clear(key2);
+      clear(key2, body);
       return hash;
     } catch (error) {
+      if (initial.serializedTransaction && error instanceof OwneyError && error.code === "DEPOSIT_CHECKPOINT_FAILED") {
+        throw new OwneyError(
+          error.code,
+          "Could not save recovery of the existing deposit.",
+          { ...error.details, notSubmitted: false, safeToFallback: false }
+        );
+      }
       if (!body.serializedTransaction && !body.serializedPermitTransaction || rejectedPreparation(error) || error instanceof OwneyError && error.details?.notSubmitted === true)
-        clear(key2);
+        clear(key2, body);
       throw error;
     }
   };
@@ -7582,10 +7963,16 @@ async function execute(i, key2, plan) {
     throw new OwneyError("DEPOSIT_IN_PROGRESS", "The saved deposit changed. Check its status before depositing again.");
   if (saved) {
     const previous = JSON.parse(saved);
-    if (previous.chainId !== i.chainId || !(0, import_viem15.isAddressEqual)(previous.from, i.owner) || !(0, import_viem15.isAddressEqual)(previous.token, i.token) || planOf(previous.transfers) !== plan)
+    if (previous.chainId !== i.chainId || !(0, import_viem16.isAddressEqual)(previous.from, i.owner) || !(0, import_viem16.isAddressEqual)(previous.token, i.token) || planOf(previous.transfers) !== plan)
       throw new Error(
         "Retry the previous token deposit and agent split first to reconcile its status."
       );
+    if (await releaseExpiredTokenBatch({ ...i, expectedTxHash: previous.serializedTransaction ? (0, import_viem16.keccak256)(previous.serializedTransaction) : void 0 }))
+      throw new OwneyError(
+        "SPONSOR_REQUEST_FAILED",
+        "The deposit authorization expired without transferring funds. Start a new deposit.",
+        { notSubmitted: true, safeToFallback: false }
+      );
     i.onApproved?.();
     return send({ ...previous, transfers: i.transfers });
   }
@@ -7599,7 +7986,7 @@ async function execute(i, key2, plan) {
       "DEPOSIT_INSUFFICIENT_BALANCE",
       "Insufficient token balance for this deposit."
     );
-  if (allowance < total && (i.chainId !== 8453 || !(0, import_viem15.isAddressEqual)(i.token, BASE_USDC_ADDRESS)))
+  if (allowance < total && (i.chainId !== 8453 || !(0, import_viem16.isAddressEqual)(i.token, BASE_USDC_ADDRESS)))
     throw new OwneyError(
       "PERMIT2_APPROVAL_REQUIRED",
       "token deposits need a one-time Permit2 approval."
@@ -7692,6 +8079,7 @@ function makeSponsoredTokenCallback(deps) {
       wallet,
       onApproved: deps.onApproved,
       onSubmitted: (hash) => deps.onSubmitted?.(hash, transfers),
+      onBeforeSubmission: (hash) => deps.onBeforeSubmission?.(hash, transfers),
       resumeTxHash: deps.resumeTxHash
     });
   };
@@ -7778,7 +8166,7 @@ async function runAgentDepositBatch(chainId, legs, transfer) {
 }
 
 // src/lib/sponsored-calls-deposit.ts
-var import_viem16 = require("viem");
+var import_viem17 = require("viem");
 var DEFAULT_POLL_INTERVAL_MS = 1500;
 var DEFAULT_MAX_POLLS = 30;
 async function paymasterSupported(provider, owner, chainId) {
@@ -7786,7 +8174,7 @@ async function paymasterSupported(provider, owner, chainId) {
     method: "wallet_getCapabilities",
     params: [owner]
   });
-  const forChain = caps?.[(0, import_viem16.toHex)(chainId)] ?? caps?.[String(chainId)];
+  const forChain = caps?.[(0, import_viem17.toHex)(chainId)] ?? caps?.[String(chainId)];
   return Boolean(forChain?.paymasterService?.supported);
 }
 function makeSponsoredCallsCallback(deps) {
@@ -7823,8 +8211,8 @@ function makeSponsoredCallsCallback(deps) {
     const calls = transfers.map((transfer) => ({
       to: token,
       value: "0x0",
-      data: (0, import_viem16.encodeFunctionData)({
-        abi: import_viem16.erc20Abi,
+      data: (0, import_viem17.encodeFunctionData)({
+        abi: import_viem17.erc20Abi,
         functionName: "transfer",
         args: [transfer.to, BigInt(transfer.amount)]
       })
@@ -7856,13 +8244,14 @@ function makeSponsoredCallsCallback(deps) {
       url.searchParams.append("owneyIntent", intent);
       paymasterUrl = url.toString();
     }
-    const requestedId = (0, import_viem16.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+    const requestedId = (0, import_viem17.toHex)(globalThis.crypto.getRandomValues(new Uint8Array(32)));
     const progress = (id, transfer) => {
       try {
         deps.onCallsProgress?.(id, transfers, transfer);
       } catch {
       }
     };
+    await deps.onBeforeSubmission?.(requestedId, transfers);
     progress(requestedId, "pending");
     let sendResult;
     try {
@@ -7873,7 +8262,7 @@ function makeSponsoredCallsCallback(deps) {
             version: "2.0.0",
             id: requestedId,
             from: deps.ownerAddress,
-            chainId: (0, import_viem16.toHex)(chainId),
+            chainId: (0, import_viem17.toHex)(chainId),
             atomicRequired: transfers.length > 1,
             calls,
             capabilities: {
@@ -8006,6 +8395,8 @@ var OwneySDK = class {
    */
   disabledAgents = /* @__PURE__ */ new Set();
   state = null;
+  connectionRevision = 0;
+  disconnectingAgents = null;
   apiKey;
   // The org's agent policy, fetched once per client. Applied to each agent on
   // activation (ROUT-229). `undefined` means "not fetched yet", `null` means
@@ -8027,6 +8418,9 @@ var OwneySDK = class {
   recoveredFundingReads = /* @__PURE__ */ new Set();
   fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
   activationChecks = /* @__PURE__ */ new Map();
+  // Protect the SDK entry point as well as the mini-app hook. This owns only
+  // a running call, never a saved/pending provider outcome or a later retry.
+  withdrawalSubmissions = /* @__PURE__ */ new Set();
   readAgent(agent, method, fetch2, params = null) {
     const key2 = JSON.stringify([
       this.state?.walletAddress.toLowerCase() ?? null,
@@ -8059,9 +8453,10 @@ var OwneySDK = class {
    */
   // TODO: replace with a proper EIP-1193 Provider type
   async connect(provider) {
-    const accounts = await provider.request({
-      method: "eth_accounts"
-    });
+    const revision = ++this.connectionRevision;
+    const accounts = await provider.request({ method: "eth_accounts" });
+    if (revision !== this.connectionRevision)
+      throw new OwneyError("NOT_CONNECTED", "Wallet connection changed while connecting.");
     const walletAddress = accounts[0];
     if (!walletAddress) {
       throw new OwneyError(
@@ -8069,33 +8464,46 @@ var OwneySDK = class {
         "No accounts found. Ensure the wallet is unlocked and connected."
       );
     }
-    this.agentReads.clearInFlight();
-    this.activationChecks.clear();
-    this.fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
+    const replacingOwner = this.state !== null && this.state.walletAddress.toLowerCase() !== walletAddress.toLowerCase();
+    this.clearConnectionState();
+    await (replacingOwner ? this.disconnectAgents() : this.disconnectingAgents);
+    if (revision !== this.connectionRevision)
+      throw new OwneyError("NOT_CONNECTED", "Wallet connection changed while connecting.");
     this.state = { provider, walletAddress, chainId: null };
-    this.cachedSponsoredCallback = null;
-    this.cachedWethSponsoredCallback = null;
-    this.cachedSponsoredCallsCallbacks.clear();
   }
   /**
    * Disconnect from all agents and clear connection state.
    * After calling this, `connect()` must be called again before using agent methods.
    */
   async disconnect() {
+    ++this.connectionRevision;
+    this.clearConnectionState();
+    await this.disconnectAgents();
+  }
+  clearConnectionState() {
     this.state = null;
     this.fundingBalanceChecks = /* @__PURE__ */ new WeakMap();
-    for (const agent of this.agents.values()) {
-      await agent.disconnect();
-    }
     this.activeAgents.clear();
-    this.disabledAgents.clear();
     this.agentReads.clearInFlight();
     this.activationChecks.clear();
-    this.state = null;
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
     this.cachedSponsoredCallsCallbacks.clear();
   }
+  disconnectAgents() {
+    if (this.disconnectingAgents) return this.disconnectingAgents;
+    const pending = Promise.allSettled([...this.agents.values()].map(async (agent) => agent.disconnect())).then((results) => {
+      const failure = results.find((result) => result.status === "rejected");
+      if (failure?.status === "rejected") throw failure.reason;
+    });
+    this.disconnectingAgents = pending;
+    void pending.then(() => {
+      if (this.disconnectingAgents === pending) this.disconnectingAgents = null;
+    }, () => {
+      if (this.disconnectingAgents === pending) this.disconnectingAgents = null;
+    });
+    return pending;
+  }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
   }
@@ -8141,8 +8549,8 @@ var OwneySDK = class {
     return createPaidRpcClient(VIEM_CHAIN2[chainId], this.rpcUrls);
   }
   /** Builds the default USDC batch callback for the connected wallet. */
-  getDefaultSponsoredCallback(onApproved, onSubmitted, resumeTxHash) {
-    if (!onApproved && !onSubmitted && !resumeTxHash && this.cachedSponsoredCallback)
+  getDefaultSponsoredCallback(onApproved, onSubmitted, resumeTxHash, onBeforeSubmission) {
+    if (!onApproved && !onSubmitted && !resumeTxHash && !onBeforeSubmission && this.cachedSponsoredCallback)
       return this.cachedSponsoredCallback;
     const provider = this.requireConnectedProvider();
     const owner = this.state.walletAddress;
@@ -8152,29 +8560,30 @@ var OwneySDK = class {
       ownerAddress: owner,
       onApproved,
       onSubmitted,
+      onBeforeSubmission,
       resumeTxHash,
       tokenAddressByChain: SPONSORED_USDC_BY_CHAIN,
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
       getPublicClient: (cid) => this.getPaidRpcClient(cid),
-      getWalletChainClient: (cid) => (0, import_viem17.createPublicClient)({
+      getWalletChainClient: (cid) => (0, import_viem18.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem17.custom)(provider)
+        transport: (0, import_viem18.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem17.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem18.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem17.custom)(provider)
+        transport: (0, import_viem18.custom)(provider)
       })
     });
-    if (!onApproved && !onSubmitted && !resumeTxHash) this.cachedSponsoredCallback = callback;
+    if (!onApproved && !onSubmitted && !resumeTxHash && !onBeforeSubmission) this.cachedSponsoredCallback = callback;
     return callback;
   }
   /** Builds the wallet-native sponsored calls callback for compatible paymasters. */
-  getDefaultSponsoredCallsCallback(asset, onApproved, onSubmitted, onCallsProgress) {
+  getDefaultSponsoredCallsCallback(asset, onApproved, onSubmitted, onCallsProgress, onBeforeSubmission) {
     const cached = this.cachedSponsoredCallsCallbacks.get(asset);
-    if (!onApproved && !onSubmitted && !onCallsProgress && cached) return cached;
+    if (!onApproved && !onSubmitted && !onCallsProgress && !onBeforeSubmission && cached) return cached;
     const provider = this.requireConnectedProvider();
     const callback = makeSponsoredCallsCallback({
       apiKey: this.apiKey,
@@ -8185,9 +8594,10 @@ var OwneySDK = class {
       onApproved,
       onSubmitted,
       onCallsProgress,
+      onBeforeSubmission,
       tokenAddressByChain: sponsoredTokensFor(asset)
     });
-    if (!onApproved && !onSubmitted && !onCallsProgress) this.cachedSponsoredCallsCallbacks.set(asset, callback);
+    if (!onApproved && !onSubmitted && !onCallsProgress && !onBeforeSubmission) this.cachedSponsoredCallsCallbacks.set(asset, callback);
     return callback;
   }
   /**
@@ -8196,8 +8606,8 @@ var OwneySDK = class {
    * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
    * single-use batch authorization instead of an EIP-3009 authorization.
    */
-  getDefaultWethSponsoredCallback(onApproved, onSubmitted, resumeTxHash) {
-    if (!onApproved && !onSubmitted && !resumeTxHash && this.cachedWethSponsoredCallback)
+  getDefaultWethSponsoredCallback(onApproved, onSubmitted, resumeTxHash, onBeforeSubmission) {
+    if (!onApproved && !onSubmitted && !resumeTxHash && !onBeforeSubmission && this.cachedWethSponsoredCallback)
       return this.cachedWethSponsoredCallback;
     const provider = this.requireConnectedProvider();
     const owner = this.state.walletAddress;
@@ -8207,23 +8617,24 @@ var OwneySDK = class {
       ownerAddress: owner,
       onApproved,
       onSubmitted,
+      onBeforeSubmission,
       resumeTxHash,
       tokenAddressByChain: SPONSORED_WETH_BY_CHAIN,
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
       getPublicClient: (cid) => this.getPaidRpcClient(cid),
-      getWalletChainClient: (cid) => (0, import_viem17.createPublicClient)({
+      getWalletChainClient: (cid) => (0, import_viem18.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem17.custom)(provider)
+        transport: (0, import_viem18.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem17.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem18.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem17.custom)(provider)
+        transport: (0, import_viem18.custom)(provider)
       })
     });
-    if (!onApproved && !onSubmitted && !resumeTxHash) this.cachedWethSponsoredCallback = callback;
+    if (!onApproved && !onSubmitted && !resumeTxHash && !onBeforeSubmission) this.cachedWethSponsoredCallback = callback;
     return callback;
   }
   getAgent(agentId) {
@@ -8531,10 +8942,20 @@ var OwneySDK = class {
    */
   async deposit(options) {
     const { amount, asset, depositCallback, agentId, onApproved } = options;
+    if (!isFundingAmount(amount, true))
+      throw new OwneyError(
+        "DEPOSIT_INVALID_AMOUNT",
+        "Deposit amount must be an unsigned base-unit integer.",
+        { phase: "prepare", rejectedBeforeSubmission: true }
+      );
     const prepared = /* @__PURE__ */ new Map();
     const paidFallbackAgents = /* @__PURE__ */ new Set();
-    const onProgress = options.onProgress ? (evidence) => {
-      if (evidence.agentWallet) prepared.set(evidence.agentWallet.toLowerCase(), evidence);
+    const onProgress = options.onProgress || options.onBeforeSubmission ? (evidence) => {
+      if (evidence.agentWallet) {
+        const wallet = evidence.agentWallet.toLowerCase();
+        evidence = { ...prepared.get(wallet), ...evidence };
+        prepared.set(wallet, evidence);
+      }
       notifyFunding(options.onProgress, evidence);
     } : void 0;
     const onSubmitted = onProgress ? (hash, destinations) => {
@@ -8554,10 +8975,87 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
+    let checkpointFailure;
+    let checkpointFailedEvidence = [];
+    const checkpoint2 = options.onBeforeSubmission ? async (evidence) => {
+      try {
+        if (this.state !== state || state.chainId !== chainId) throw new Error("Wallet changed before deposit submission.");
+        const submitting = evidence.map((leg) => ({ ...leg, depositSubmission: "started" }));
+        await options.onBeforeSubmission(submitting);
+        if (this.state !== state || state.chainId !== chainId) throw new Error("Wallet changed before deposit submission.");
+        submitting.forEach((leg) => notifyFunding(onProgress, leg));
+      } catch (cause) {
+        checkpointFailedEvidence = evidence;
+        checkpointFailure = new OwneyError(
+          "DEPOSIT_CHECKPOINT_FAILED",
+          "Could not safely save this deposit before submission.",
+          { notSubmitted: !options.resumeTxHash, safeToFallback: false, cause }
+        );
+        throw checkpointFailure;
+      }
+    } : void 0;
+    const checkpointDestinations = checkpoint2 ? async (destinations, identifier) => {
+      const evidence = destinations.map((destination) => {
+        const leg = prepared.get(destination.to.toLowerCase());
+        if (!leg || leg.intendedAmount !== destination.amount)
+          throw new OwneyError("DEPOSIT_CHECKPOINT_FAILED", "Missing prepared deposit destination.", { notSubmitted: true, safeToFallback: false });
+        return { ...leg, ...identifier, transfer: "pending" };
+      });
+      await checkpoint2(evidence);
+    } : void 0;
+    const checkpointHash = checkpointDestinations ? (hash, destinations) => checkpointDestinations(destinations, { txHash: hash }) : void 0;
+    const checkpointCalls = checkpointDestinations ? (id, destinations) => checkpointDestinations(destinations, { callsId: id }) : void 0;
+    const checkpointPaid = checkpoint2 ? (evidence) => checkpoint2([evidence]) : void 0;
+    const customCallback = depositCallback && checkpointDestinations ? makeVerificationAwareDepositCallback(async (to, cid, value, verification) => {
+      if (verification) provideDepositVerificationContext(depositCallback, verification);
+      await checkpointDestinations([{ to, amount: value }], {});
+      return depositCallback(to, cid, value);
+    }) : depositCallback;
     if (options.resumeTxHash && (depositCallback || this.paymasterServiceUrl || !/^0x[\da-f]{64}$/i.test(options.resumeTxHash)))
       throw new OwneyError("DEPOSIT_IN_PROGRESS", "This deposit cannot resume the saved relayer transaction.");
-    const effectiveCallback = depositCallback ?? (this.paymasterServiceUrl ? this.getDefaultSponsoredCallsCallback(asset, onApproved, onSubmitted, onCallsProgress) : asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved, onSubmitted, options.resumeTxHash) : this.getDefaultSponsoredCallback(onApproved, onSubmitted, options.resumeTxHash));
+    const effectiveCallback = customCallback ?? (this.paymasterServiceUrl ? this.getDefaultSponsoredCallsCallback(asset, onApproved, onSubmitted, onCallsProgress, checkpointCalls) : asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved, onSubmitted, options.resumeTxHash, checkpointHash) : this.getDefaultSponsoredCallback(onApproved, onSubmitted, options.resumeTxHash, checkpointHash));
     try {
+      if (options.resumeTxHash) {
+        const token = SupportedAssets.find((value) => value.chainId === chainId && value.symbol === asset);
+        const pending = token && pendingTokenBatch({
+          apiKey: this.apiKey,
+          baseUrl: this.routingApiBaseUrl,
+          owner: state.walletAddress,
+          chainId,
+          token: token.address
+        });
+        const invalid2 = () => new OwneyError("DEPOSIT_IN_PROGRESS", "The saved deposit does not match this request. Check its status before depositing again.");
+        if (!pending || pending.txHash.toLowerCase() !== options.resumeTxHash.toLowerCase() || pending.transfers.some((transfer) => !/^\d+$/.test(transfer.amount) || BigInt(transfer.amount) <= 0n) || pending.transfers.reduce((sum, transfer) => sum + BigInt(transfer.amount), 0n) !== BigInt(amount)) throw invalid2();
+        const candidates = agentId ? [this.getAgent(agentId)] : this.getEligibleAgents(chainId, asset);
+        const wallets = await Promise.all(candidates.map(async (agent) => {
+          this.validateAssetSupport(agent, chainId, asset);
+          const wallet = await (agent.getFundingWallet ? agent.getFundingWallet(state, chainId, asset) : agent.getUserProfile(state, chainId).then((profile) => profile.smartWallet)).catch(() => void 0);
+          return { agent, wallet };
+        }));
+        if (this.state !== state || this.state.chainId !== chainId)
+          throw new OwneyError("NOT_CONNECTED", "Wallet changed while recovering the deposit.");
+        const usedAgents = /* @__PURE__ */ new Set();
+        const legs = pending.transfers.map((transfer) => {
+          const matches = wallets.filter((value) => value.wallet?.toLowerCase() === transfer.to.toLowerCase());
+          if (matches.length !== 1 || usedAgents.has(matches[0].agent.id)) throw invalid2();
+          const { agent } = matches[0];
+          usedAgents.add(agent.id);
+          return {
+            id: agent.id,
+            amount: transfer.amount,
+            run: (callback) => withFailureReporting(
+              this.apiKey,
+              agent.id,
+              () => agent.deposit(state, chainId, transfer.amount, asset, callback, onProgress),
+              this.routingApiBaseUrl
+            )
+          };
+        });
+        const batchTransfer2 = getDepositBatchTransfer(effectiveCallback);
+        if (!batchTransfer2) throw invalid2();
+        const result = await runAgentDepositBatch(chainId, legs, batchTransfer2);
+        return agentId ? result.agentResults[agentId] : result;
+      }
       if (agentId) {
         if (this.isAgentDisabled(agentId)) {
           throw new OwneyError(
@@ -8579,7 +9077,8 @@ var OwneySDK = class {
           depositCallback,
           onProgress,
           () => paidFallbackAgents.add(agent.id),
-          !!options.resumeTxHash
+          !!options.resumeTxHash,
+          checkpointPaid
         );
       }
       const totalAmount = BigInt(amount);
@@ -8681,7 +9180,8 @@ var OwneySDK = class {
             depositCallback,
             onProgress,
             () => paidFallbackAgents.add(agent.id),
-            !!options.resumeTxHash
+            !!options.resumeTxHash,
+            checkpointPaid
           );
         } catch (error) {
           if (Object.keys(agentResults).length === 0) throw error;
@@ -8701,12 +9201,22 @@ var OwneySDK = class {
       }
       return { agentResults };
     } catch (error) {
+      if (checkpointFailure && !(error instanceof OwneyError && error.details?.notSubmitted === false)) {
+        error = error instanceof OwneyError && error.code === "DEPOSIT_PARTIAL_FAILURE" ? new OwneyError(
+          error.code,
+          "Some deposits completed before another agent could be submitted.",
+          { ...error.details, cause: checkpointFailure },
+          error.agentId
+        ) : checkpointFailure;
+        if (!options.resumeTxHash) for (const evidence of checkpointFailedEvidence)
+          notifyFunding(onProgress, { ...evidence, transfer: "failed" });
+      }
       if (!depositCallback && onProgress && !options.resumeTxHash) {
         const ids = agentId ? [agentId] : this.getEligibleAgents(chainId, asset).map((agent) => agent.id);
         for (const id of ids) {
           const evidence = [...prepared.values()].find((value) => value.agentId === id);
-          if (paidFallbackAgents.has(id) || evidence?.transfer === "confirmed" || evidence?.transfer === "failed") continue;
           const rejected = error instanceof OwneyError && error.details?.notSubmitted === true;
+          if (!rejected && paidFallbackAgents.has(id) || evidence?.transfer === "confirmed" || evidence?.transfer === "failed") continue;
           if (!rejected && (evidence?.txHash || evidence?.userOpHash || evidence?.callsId)) continue;
           notifyFunding(onProgress, { ...evidence ?? {
             agentId: id,
@@ -8749,11 +9259,11 @@ var OwneySDK = class {
    * propagates unchanged. Scoped per agent invocation so one agent's failure
    * doesn't force a retry of sibling agents in a multi-agent split.
    */
-  async depositWithFallback(agent, state, chainId, amount, asset, effectiveCallback, appCallback, onProgress, onPaidFallback, resumeOnly = false) {
+  async depositWithFallback(agent, state, chainId, amount, asset, effectiveCallback, appCallback, onProgress, onPaidFallback, resumeOnly = false, onBeforeSubmission) {
     const attempt = (callback) => withFailureReporting(
       this.apiKey,
       agent.id,
-      () => onProgress ? agent.deposit(state, chainId, amount, asset, callback, onProgress) : agent.deposit(state, chainId, amount, asset, callback),
+      () => onBeforeSubmission ? agent.deposit(state, chainId, amount, asset, callback, onProgress, onBeforeSubmission) : onProgress ? agent.deposit(state, chainId, amount, asset, callback, onProgress) : agent.deposit(state, chainId, amount, asset, callback),
       this.routingApiBaseUrl
     );
     let approvalAttempted = false;
@@ -8974,9 +9484,36 @@ var OwneySDK = class {
     const token = SupportedAssets.find((t) => t.chainId === chainId && t.symbol === evidence.token);
     if (!token) throw new OwneyError("CHAIN_UNSUPPORTED", "Unsupported funding asset.");
     const rpc2 = this.getPaidRpcClient(chainId);
-    const receipt = await rpc2.getTransactionReceipt({ hash: evidence.txHash });
+    let receipt;
+    try {
+      receipt = await rpc2.getTransactionReceipt({ hash: evidence.txHash });
+    } catch (error) {
+      if (direction === "deposit") {
+        const expired = await releaseExpiredTokenBatch({
+          apiKey: this.apiKey,
+          baseUrl: this.routingApiBaseUrl,
+          owner: state.walletAddress,
+          chainId,
+          token: token.address,
+          pub: rpc2,
+          expectedTxHash: evidence.txHash
+        });
+        assertCurrent();
+        if (expired?.transfers.some((transfer) => transfer.to.toLowerCase() === agentWallet.toLowerCase() && transfer.amount === evidence.intendedAmount))
+          return {
+            ...evidence,
+            agentWallet,
+            transfer: "failed",
+            delivery: "not-applicable",
+            registration: "not-applicable",
+            confirmedAmount: "0",
+            blockNumber: expired.blockNumber.toString()
+          };
+      }
+      throw error;
+    }
     assertCurrent();
-    let verified = inspectFundingReceipt(receipt, { ...evidence, agentWallet }, token.address, direction);
+    let verified = inspectFundingReceipt(receipt, { ...evidence, agentWallet }, token.address, direction, options);
     if (direction === "withdraw" && evidence.agentId === "yieldseeker" && verified.transfer === "unknown" && verified.confirmedAmount && BigInt(verified.confirmedAmount) > 0n) {
       const transaction = await rpc2.getTransaction({ hash: evidence.txHash });
       assertCurrent();
@@ -9150,9 +9687,11 @@ var OwneySDK = class {
     return page;
   }
   async recoverDepositRegistration(evidence) {
+    const { state, assertCurrent } = this.captureReadScope(evidence.chainId);
     const verified = await this.inspectFunding(evidence, "deposit");
+    assertCurrent();
     if (verified.agentId !== "zyfai") return verified;
-    return this.getAgent("zyfai").retryDepositRegistration(this.requireState(), verified);
+    return this.getAgent("zyfai").retryDepositRegistration(state, verified);
   }
   // --- Fund operations ---
   /** On-chain version and ownership status for this owner's Yieldseeker agent. */
@@ -9198,10 +9737,24 @@ var OwneySDK = class {
    * @returns {AgentWithdrawResult} for a single agent, or {OwneyWithdrawResult} with per-agent results
    */
   async withdraw(options) {
+    if (options.amount !== void 0 && !isFundingAmount(options.amount))
+      throw new OwneyError(
+        "WITHDRAW_INVALID_AMOUNT",
+        "Withdrawal amount must be a positive base-unit integer.",
+        { phase: "prepare", rejectedBeforeSubmission: true }
+      );
     const state = this.requireState();
     const chainId = this.requireChainId();
+    const submissionKey = `${state.walletAddress.toLowerCase()}:${chainId}:${options.asset.toUpperCase()}`;
+    if (this.withdrawalSubmissions.has(submissionKey))
+      throw new OwneyError(
+        "WITHDRAW_IN_PROGRESS",
+        "A withdrawal request is already running.",
+        { chainId, asset: options.asset, phase: "prepare", rejectedBeforeSubmission: true }
+      );
     const ids = options.agentId ? [options.agentId] : this.getActiveAgentIds().filter((id) => !options.excludeAgentIds?.includes(id));
     const attempted = /* @__PURE__ */ new Set();
+    this.withdrawalSubmissions.add(submissionKey);
     try {
       return await this.withdrawFromAgents(options, state, chainId, attempted);
     } catch (error) {
@@ -9218,6 +9771,8 @@ var OwneySDK = class {
         });
       }
       throw error;
+    } finally {
+      this.withdrawalSubmissions.delete(submissionKey);
     }
   }
   async withdrawFromAgents(options, state, chainId, attempted) {
@@ -9256,7 +9811,19 @@ var OwneySDK = class {
       };
     };
     const submissionEvidence = /* @__PURE__ */ new Map();
+    const pendingSubmissions = () => Object.fromEntries([...submissionEvidence].filter(([id, evidence]) => evidence.agentId === id && evidence.chainId === chainId && evidence.token === token && evidence.walletAddress.toLowerCase() === state.walletAddress.toLowerCase() && evidence.transfer !== "failed" && evidence.delivery !== "failed" && (evidence.transfer === "unknown" || evidence.txHash || evidence.userOpHash || evidence.callsId)));
+    const throwUnconfirmed = (agentErrors2) => {
+      const pending = pendingSubmissions();
+      if (Object.keys(pending).length)
+        throw new OwneyError(
+          "WITHDRAW_UNCONFIRMED",
+          "The withdrawal was submitted, but its outcome could not be confirmed yet.",
+          { asset, amount, agentErrors: agentErrors2, agentFailures, pendingSubmissions: pending }
+        );
+    };
     const submit = async (agent, requested2) => {
+      if (this.state !== state || this.state.chainId !== chainId)
+        throw new OwneyError("NOT_CONNECTED", "Wallet connection changed before withdrawal submission.");
       attempted.add(agent.id);
       let evidence = {
         agentId: agent.id,
@@ -9268,12 +9835,16 @@ var OwneySDK = class {
         registration: "not-applicable",
         delivery: "pending"
       };
+      let adapterReported = false;
       const progress = (next) => {
+        if (next.agentId !== agent.id || next.chainId !== chainId || next.token !== token || next.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase()) return;
+        adapterReported = true;
         evidence = { ...evidence, ...next };
         submissionEvidence.set(agent.id, evidence);
         notifyFunding(options.onProgress, evidence);
       };
       progress(evidence);
+      adapterReported = false;
       try {
         if (options.onBeforeSubmission)
           return await agent.withdraw(
@@ -9287,7 +9858,7 @@ var OwneySDK = class {
           );
         return await (options.gasMode === void 0 ? agent.withdraw(state, chainId, token, requested2, progress) : agent.withdraw(state, chainId, token, requested2, progress, options.gasMode));
       } catch (error) {
-        if (!evidence.txHash && !evidence.userOpHash && !evidence.callsId && (this.isUserRejectedWithdrawal(error) || /insufficient (balance|funds)/i.test(error instanceof Error ? error.message : "")))
+        if (!adapterReported && !evidence.txHash && !evidence.userOpHash && !evidence.callsId && (this.isUserRejectedWithdrawal(error) || /insufficient (balance|funds)/i.test(error instanceof Error ? error.message : "")))
           progress({ ...evidence, transfer: "failed", delivery: "failed" });
         throw error;
       }
@@ -9348,6 +9919,7 @@ var OwneySDK = class {
         }
       }
       if (Object.keys(results2).length === 0) {
+        throwUnconfirmed(agentErrors2);
         if (Object.keys(agentErrors2).length === 0)
           throw new OwneyError(
             "WITHDRAW_INSUFFICIENT_BALANCE",
@@ -9368,7 +9940,7 @@ var OwneySDK = class {
         );
       }
       const amountsKnown = Object.values(results2).every(
-        (result) => typeof result.amount === "string" && /^\d+$/.test(result.amount)
+        (result) => confirmedWithdrawalAmount(result) !== void 0
       );
       return {
         agentResult: results2,
@@ -9387,6 +9959,13 @@ var OwneySDK = class {
       asset,
       assetInfo.decimals
     );
+    for (const entry of balances) if (entry.invalidBalance) {
+      if (!unavailableAgents.includes(entry.agent)) unavailableAgents.push(entry.agent);
+      aggregated.agentErrors = {
+        ...aggregated.agentErrors,
+        [entry.agent.id]: "Provider returned an invalid withdrawal balance."
+      };
+    }
     const indexedAvailable = balances.reduce((sum, entry) => sum + entry.balance, 0n);
     await Promise.all(balances.map(async (entry) => {
       if (entry.balance !== 0n && indexedAvailable >= requested || !entry.agent.getWithdrawableBalance) return;
@@ -9399,7 +9978,7 @@ var OwneySDK = class {
       if (this.isUserRejectedWithdrawal(originalFailure)) throw originalFailure;
       if (entry.balance !== 0n && entry.agent.id !== "yieldseeker") {
         const total = aggregated.agentBalances[entry.agent.id]?.assetBalances?.find((value) => value.chainId === chainId && value.asset.toUpperCase() === token);
-        if (!total || (0, import_viem17.parseUnits)(total.amount, assetInfo.decimals) <= entry.balance) return;
+        if (!total || (0, import_viem18.parseUnits)(total.amount, assetInfo.decimals) <= entry.balance) return;
       }
       try {
         const otherAvailable = indexedAvailable - entry.balance;
@@ -9426,12 +10005,15 @@ var OwneySDK = class {
       throw new OwneyError("NOT_CONNECTED", "Account changed while planning withdrawal.");
     const unavailableAgentIds = unavailableAgents.map((agent) => agent.id);
     const totalAvailable = balances.reduce((sum, x) => sum + x.balance, 0n);
-    if (totalAvailable === 0n && unavailableAgents.length > 0) {
+    if (totalAvailable < requested && unavailableAgents.length > 0) {
       throw new OwneyError(
         "WITHDRAW_BALANCE_UNAVAILABLE",
-        `Cannot safely plan the withdrawal because balance data is unavailable for: ${unavailableAgentIds.join(", ")}.`,
+        `Cannot cover the requested withdrawal with verified available balances: ${unavailableAgentIds.join(", ")}.`,
         {
           asset,
+          requested: amount,
+          available: totalAvailable.toString(),
+          rejectedBeforeSubmission: true,
           unavailableAgents: unavailableAgentIds,
           agentErrors: aggregated.agentErrors
         }
@@ -9448,7 +10030,7 @@ var OwneySDK = class {
         }
       );
     }
-    const plannedTarget = totalAvailable < requested ? totalAvailable : requested;
+    const plannedTarget = requested;
     const disabledBalances = balances.filter(
       (b) => this.isAgentDisabled(b.agent.id)
     );
@@ -9467,13 +10049,23 @@ var OwneySDK = class {
     }));
     const plans = [...disabledPlans, ...enabledPlans];
     const orderedPlans = this.orderAgentsForWithdrawal(plans.map((p) => p.agent)).map((agent) => plans.find((plan) => plan.agent === agent));
+    const assertPlan = () => {
+      if (orderedPlans.some((plan) => plan.planned < 0n || plan.planned > plan.balance) || orderedPlans.reduce((sum, plan) => sum + plan.planned, 0n) > plannedTarget)
+        throw new OwneyError(
+          "WITHDRAW_BALANCE_UNAVAILABLE",
+          "Withdrawal plan failed amount validation.",
+          { asset, rejectedBeforeSubmission: true }
+        );
+    };
+    assertPlan();
     const results = {};
     const agentErrors = {
       ...aggregated.agentErrors ?? {}
     };
     for (let i = 0; i < orderedPlans.length; i++) {
       const p = orderedPlans[i];
-      if (p.planned === 0n) continue;
+      assertPlan();
+      if (p.planned <= 0n) continue;
       try {
         results[p.agent.id] = await submit(p.agent, p.planned.toString());
         notifyAgentResult(p.agent.id, results[p.agent.id]);
@@ -9497,6 +10089,7 @@ var OwneySDK = class {
       }
     }
     if (Object.keys(results).length === 0) {
+      throwUnconfirmed(agentErrors);
       throw new OwneyError(
         "WITHDRAW_ALL_FAILED",
         `Failed to withdraw "${amount}" of "${asset}" from all eligible agents.`,
@@ -9514,13 +10107,17 @@ var OwneySDK = class {
       const adjustment = result?.feeAdjustment;
       const evidence = result?.evidence;
       const submitted = submissionEvidence.get(plan.agent.id);
-      if (plan.agent.id !== "yieldseeker" || !adjustment || !evidence || !submitted || typeof result.amount !== "string" || !/^\d+$/.test(result.amount) || typeof adjustment.grossAmount !== "string" || !/^\d+$/.test(adjustment.grossAmount) || typeof adjustment.feeAmount !== "string" || !/^\d+$/.test(adjustment.feeAmount) || evidence.agentId !== plan.agent.id || evidence.chainId !== chainId || evidence.token !== token || typeof evidence.walletAddress !== "string" || evidence.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || typeof evidence.agentWallet !== "string" || !/^0x[\da-f]{40}$/i.test(evidence.agentWallet) || typeof result.txHash !== "string" || !/^0x[\da-f]{64}$/i.test(result.txHash) || typeof evidence.txHash !== "string" || typeof submitted.txHash !== "string" || evidence.txHash?.toLowerCase() !== result.txHash.toLowerCase() || submitted.txHash?.toLowerCase() !== result.txHash.toLowerCase() || submitted.agentId !== evidence.agentId || submitted.chainId !== chainId || submitted.token !== token || typeof submitted.walletAddress !== "string" || typeof submitted.agentWallet !== "string" || submitted.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || submitted.agentWallet?.toLowerCase() !== evidence.agentWallet.toLowerCase() || evidence.transfer !== "confirmed" || evidence.delivery !== "confirmed" || submitted.transfer !== "confirmed" || submitted.delivery !== "confirmed" || evidence.confirmedAmount !== result.amount || submitted.confirmedAmount !== result.amount || evidence.intendedAmount !== result.amount || submitted.intendedAmount !== result.amount) return total;
+      if (plan.agent.id !== "yieldseeker" || !adjustment || !evidence || !submitted || typeof result.amount !== "string" || !/^\d+$/.test(result.amount) || typeof adjustment.grossAmount !== "string" || !/^\d+$/.test(adjustment.grossAmount) || typeof adjustment.feeAmount !== "string" || !/^\d+$/.test(adjustment.feeAmount) || evidence.agentId !== plan.agent.id || evidence.chainId !== chainId || evidence.token !== token || typeof evidence.walletAddress !== "string" || evidence.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || typeof evidence.agentWallet !== "string" || !/^0x[\da-f]{40}$/i.test(evidence.agentWallet) || typeof result.txHash !== "string" || !/^0x[\da-f]{64}$/i.test(result.txHash) || typeof evidence.txHash !== "string" || typeof submitted.txHash !== "string" || evidence.txHash?.toLowerCase() !== result.txHash.toLowerCase() || submitted.txHash?.toLowerCase() !== result.txHash.toLowerCase() || submitted.agentId !== evidence.agentId || submitted.chainId !== chainId || submitted.token !== token || typeof submitted.walletAddress !== "string" || typeof submitted.agentWallet !== "string" || submitted.walletAddress.toLowerCase() !== state.walletAddress.toLowerCase() || submitted.agentWallet?.toLowerCase() !== evidence.agentWallet.toLowerCase() || evidence.transfer !== "confirmed" || evidence.delivery !== "confirmed" || submitted.transfer !== "confirmed" || submitted.delivery !== "confirmed" || evidence.confirmedAmount !== result.amount || submitted.confirmedAmount !== result.amount || ![result.amount, adjustment.grossAmount].includes(evidence.intendedAmount) || ![result.amount, adjustment.grossAmount].includes(submitted.intendedAmount)) return total;
       const fee = BigInt(adjustment.feeAmount);
       const net = BigInt(result.amount);
       const gross = BigInt(adjustment.grossAmount);
       return fee > 0n && net > 0n && gross === plan.planned && net + fee === gross ? total + fee : total;
     }, 0n);
-    if (withdrawn + verifiedFeeDeductions < requested) {
+    const pendingAmount = orderedPlans.reduce((sum, plan) => {
+      const evidence = results[plan.agent.id]?.evidence;
+      return evidence && (evidence.transfer === "pending" || evidence.transfer === "unknown") && evidence.delivery !== "failed" ? sum + plan.planned : sum;
+    }, 0n);
+    if (withdrawn + verifiedFeeDeductions + pendingAmount < requested) {
       throw new OwneyError(
         "WITHDRAW_PARTIAL_FAILURE",
         `Withdrew "${withdrawn.toString()}" of requested "${amount}" of "${asset}". One or more agents failed; remaining balance could not cover the shortfall.`,
@@ -9528,6 +10125,7 @@ var OwneySDK = class {
           asset,
           requested: amount,
           withdrawn: withdrawn.toString(),
+          pendingAmount: pendingAmount.toString(),
           partialResults: results,
           agentErrors,
           agentFailures,
@@ -9535,7 +10133,7 @@ var OwneySDK = class {
         }
       );
     }
-    return { agentResult: results, totalWithdrawn: withdrawn.toString() };
+    return { agentResult: results, totalWithdrawn: Object.values(results).every((result) => confirmedWithdrawalAmount(result) !== void 0) ? withdrawn.toString() : null };
   }
   // --- Portfolio reads ---
   /**
@@ -9993,16 +10591,16 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
-    const walletChainClient = (0, import_viem17.createPublicClient)({
+    const walletChainClient = (0, import_viem18.createPublicClient)({
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem17.custom)(provider)
+      transport: (0, import_viem18.custom)(provider)
     });
     const publicClient = this.getPaidRpcClient(chainId);
     const approvalAmount = permit2ApprovalAmount(requiredAmount);
-    const wallet = (0, import_viem17.createWalletClient)({
+    const wallet = (0, import_viem18.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem17.custom)(provider)
+      transport: (0, import_viem18.custom)(provider)
     });
     await ensureWalletOnChain(walletChainClient, wallet, chainId);
     const hash = await wallet.writeContract({
@@ -10164,7 +10762,7 @@ var OwneySDK = class {
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem18 = require("viem");
+var import_viem19 = require("viem");
 var import_siwe2 = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -10291,7 +10889,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe2.SiweMessage({
-          address: (0, import_viem18.getAddress)(accountAddress),
+          address: (0, import_viem19.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,