@owney/sdk 0.7.26-beta.3 → 0.7.26-beta.5

package/dist/index.d.cts

@@ -54,6 +54,26 @@ type SwapChainTokens = {
  * the bulk list does, and the extra fields are the ones a picker needs to let
  * someone choose safely between three tokens all called PEPE.
  */
+/**
+ * A token the wallet actually holds, as the Pay with picker needs it.
+ *
+ * The picker used to read a fixed list of (token, chain) pairs, so it could
+ * only ever offer those. This is the other direction — what is really there —
+ * already intersected server-side with what the routing API would quote, so
+ * every row can be acted on. (ROUT-242)
+ */
+type SwapWalletBalance = {
+    readonly symbol: string;
+    readonly address: `0x${string}`;
+    readonly decimals: number;
+    readonly chainId: number;
+    readonly name?: string;
+    readonly logoURI?: string;
+    readonly tags?: readonly string[];
+    readonly isNative?: true;
+    /** Smallest unit, as a decimal string. */
+    readonly balance: string;
+};
 type SwapTokenSearchResult = SwapTokenInfo & {
     readonly chainId: number;
     readonly name?: string;
@@ -127,12 +147,30 @@ type SwapQuote = {
      */
     permitSupported?: boolean;
     /**
-     * True only for a cross-chain swap FROM native ETH, which needs an on-chain
-     * order creation carrying the full amount as msg.value. The user's funds
-     * leave the wallet before any fill, so the UI must say so. ERC-20 sources are
-     * signature-only after their one-time approval.
+     * True only for a cross-chain swap FROM native ETH, which Fusion+ cannot
+     * take as a source: the escrow pulls the maker's funds with `transferFrom`,
+     * and no signature can move native value. Left unread, the order signs
+     * perfectly well and the relayer refuses it with a bare 502 — after the user
+     * has already signed (ROUT-242).
+     *
+     * So the client wraps first and swaps `wrappedNative` instead. ERC-20
+     * sources are signature-only after their one-time approval.
      */
     requiresOnchainOrder: boolean;
+    /**
+     * The ERC-20 the source chain's native asset wraps into. Present only
+     * alongside `requiresOnchainOrder`.
+     *
+     * Comes from the routing API rather than a client-side lookup because the
+     * wrapper cannot be derived from the symbol: "WETH" on Polygon is bridged
+     * Ether, an entirely different asset from wrapped POL. This address receives
+     * the user's whole swap amount as msg.value, so guessing it is not an option.
+     */
+    wrappedNative?: {
+        symbol: string;
+        address: string;
+        decimals: number;
+    };
     /**
      * What the swap costs, as the provider reports it on this quote.
      *
@@ -182,7 +220,7 @@ type SwapOrderStatus = "pending" | "executed" | "expired" | "cancelled" | "refun
  * of the flow and the one place a user would otherwise think nothing is
  * happening.
  */
-type SwapStage = "withdrawing" | "withdrawn" | "quoting" | "approving" | "signing" | "swapping" | "swapped" | "depositing" | "refunding" | "refunded";
+type SwapStage = "withdrawing" | "withdrawn" | "quoting" | "wrapping" | "wrapped" | "approving" | "signing" | "swapping" | "swapped" | "depositing" | "refunding" | "refunded";
 /**
  * Which way the funds travel, which decides what each side may be.
  *
@@ -722,6 +760,68 @@ type AgentApyOptions = {
     chainId?: number;
 };
 
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_BALANCE_UNAVAILABLE" | "DEPOSIT_PARTIAL_FAILURE" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "AGENT_RATE_LIMITED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "SWAP_DISABLED" | "SWAP_RATE_LIMITED" | "SWAP_REQUEST_FAILED" | "SWAP_QUOTE_FAILED" | "SWAP_UNSUPPORTED_PAIR" | "SWAP_APPROVAL_REQUIRED" | "SWAP_BELOW_DEPOSIT_MINIMUM" | "SWAP_DEPOSIT_PENDING" | "SWAP_WALLET_PROMPT_TIMEOUT" | "SWAP_INSUFFICIENT_GAS" | "SWAP_NATIVE_UNSUPPORTED" | "SWAP_ORDER_EXPIRED" | "SWAP_ORDER_REFUNDED" | "SWAP_ORDER_CANCELLED" | "WITHDRAW_ARRIVAL_TIMEOUT" | "WITHDRAW_SWAP_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+declare class OwneyError extends Error {
+    readonly code: OwneyErrorCode;
+    readonly details?: Record<string, unknown>;
+    readonly agentId?: string;
+    constructor(code: OwneyErrorCode, message: string, details?: Record<string, unknown>, agentId?: string);
+}
+declare class AgentNotFoundError extends OwneyError {
+    constructor(agentId: string, available: string[]);
+}
+declare class NotConnectedError extends OwneyError {
+    constructor();
+}
+declare class AgentChainIncompatibleError extends OwneyError {
+    readonly incompatibleAgents: Array<{
+        agentId: string;
+        supportedChainIds: readonly number[];
+    }>;
+    readonly connectedChainId: number;
+    constructor(incompatibleAgents: Array<{
+        agentId: string;
+        supportedChainIds: readonly number[];
+    }>, connectedChainId: number);
+}
+
+/**
+ * Swaps that landed but were never deposited.
+ *
+ * `swapAndDeposit` does two things, and the deposit is the line after the
+ * swap. When the swap works and the deposit does not, the user is left holding
+ * the swapped asset with the form back on screen and nothing to say why
+ * (ROUT-242, comment 15980) — and the error they got said "your funds have not
+ * been moved", which is exactly wrong and makes a retry spend them twice.
+ *
+ * So the outcome is written down. Recovering it needs no order, no secret and
+ * no signature: the money is already in the wallet in the right asset, and
+ * what is missing is an ordinary deposit. Recording it is what lets the reload
+ * the user actually performs pick the job back up.
+ *
+ * Storage failures are swallowed everywhere here. Losing the note is bad;
+ * failing the swap because we could not write the note is worse.
+ */
+type PendingDeposit = {
+    /** Stable id so a retry can clear exactly the one it handled. */
+    id: string;
+    /** What arrived, in the asset's smallest unit. */
+    received: string;
+    /** The deposit asset. */
+    symbol: string;
+    /**
+     * The chain the funds are ON, which for a cross-chain swap is the
+     * DESTINATION — depositing against the source would read an empty wallet.
+     */
+    chainId: number;
+    /** Narrows the deposit to one agent when the caller asked for one. */
+    agentId?: string;
+    /** Epoch ms, for the sweep. */
+    createdAt: number;
+};
+/** Every record, dismissed ones included, newest first. Sweeps as it goes. */
+declare function listPendingDeposits(now?: number): PendingDeposit[];
+
 declare class OwneySDK {
     private agents;
     private activeAgents;
@@ -909,6 +1009,22 @@ declare class OwneySDK {
      * network has actually changed.
      */
     private ensureSwapChain;
+    /**
+     * Turn a native-source cross-chain quote into an ERC-20 one.
+     *
+     * Fusion+ cannot escrow native value, so the quote arrives with
+     * `requiresOnchainOrder` set and the relayer would refuse the order after
+     * the user signed it (ROUT-242). Wrapping first costs one transaction and
+     * puts the swap back on the ERC-20 rail that already works, rather than
+     * adding a second order type that would need its own escrow handling.
+     *
+     * Re-quoted afterwards rather than patched: the amount wrapped may be less
+     * than the amount quoted (gas has to come out of the same balance), and
+     * every executor dep — allowance, permit, balances — is derived from the
+     * quote's source token. A quote naming ETH would have all of them reading
+     * the wrong asset.
+     */
+    private wrapNativeSource;
     /**
      * Binds the executor's abstract deps to this client's wallet.
      *
@@ -916,6 +1032,28 @@ declare class OwneySDK {
      * flow stays testable without a provider — the executor never imports viem.
      */
     private buildSwapDeps;
+    /**
+     * Waits until the WALLET'S OWN node reports at least `amount` of `token`.
+     *
+     * Separate from the swap's arrival measurement on purpose: that one runs on
+     * a pinned HTTP RPC, and what matters here is the view the deposit will
+     * actually use. Returns whether it got there — a courtesy, not a gate, since
+     * the deposit's own check is the authority and refusing to even attempt
+     * would strand funds we might have been able to move.
+     */
+    private walletSeesBalance;
+    /**
+     * Runs a quoted swap. A named seam rather than an inline `executeSwap` call
+     * so the deposit half of `swapAndDeposit` can be exercised on its own.
+     */
+    private runSwap;
+    /**
+     * The half of the swap deps that only ever talks to the routing API.
+     *
+     * Split out because resuming an order needs exactly this and nothing else —
+     * no provider, no wallet client, no chain. See `resumePendingSwaps`.
+     */
+    private swapRunnerDeps;
     /**
      * Assets the user may pay with, and what each chain deposits into.
      *
@@ -925,6 +1063,67 @@ declare class OwneySDK {
     getSwapTokens(): Promise<{
         chains: SwapChainTokens[];
     }>;
+    /**
+     * Swaps that landed but were never deposited, newest first.
+     *
+     * The money is already in the wallet in the right asset — what is missing is
+     * an ordinary deposit, which is why this needs no order and no signature to
+     * describe. See `completePendingDeposit`.
+     */
+    listPendingDeposits(): ReturnType<typeof listPendingDeposits>;
+    /**
+     * Deposit a swap that already landed.
+     *
+     * Nothing is swapped again: the funds are in the wallet, so this is the
+     * second half of `swapAndDeposit` on its own. Cleared only once the deposit
+     * has actually gone through — a failure here leaves the record in place so it
+     * can be offered again rather than silently dropped.
+     */
+    completePendingDeposit(id: string): Promise<OwneyDepositResult | OwneyMultiDepositResult>;
+    /**
+     * Pick up cross-chain swaps a previous session left in flight.
+     *
+     * A Fusion+ order is only finished when the client publishes a secret for
+     * each fill, once the escrows exist — so a user who closed the tab mid-swap
+     * leaves an order nobody will ever complete, and it expires and refunds
+     * instead of arriving. The preimages are stored for exactly this (24h sweep,
+     * see the secret store); this is the other half.
+     *
+     * Needs NO wallet, deliberately. The signature already happened and the funds
+     * are already escrowed, so finishing is pure API work — demanding a reconnect
+     * first would strand the people it exists for.
+     *
+     * Every order is attempted even if an earlier one throws: they are unrelated
+     * escrows, and one ending badly must not abandon the next one's secrets.
+     * `unfinished` is not a verdict — the order may still settle, so unless the
+     * chain has said refunded or cancelled its preimages are kept.
+     */
+    resumePendingSwaps(options?: {
+        onStage?: (orderHash: string, stage: SwapStage) => void;
+        timeoutMs?: number;
+    }): Promise<{
+        orderHash: string;
+        status: "completed" | "unfinished";
+        error?: OwneyError;
+    }[]>;
+    /**
+     * What the wallet actually holds, across every supported chain, restricted
+     * to tokens a swap could use.
+     *
+     * `getSwapTokens` answers "what may someone pay with in principle" from a
+     * fixed list. This answers "what has this wallet got", which is a different
+     * question and the one a picker needs: a user can hold something routable —
+     * tBTC, say — that no fixed list of ours would ever mention.
+     *
+     * Each chain is asked separately because that is how the balance product is
+     * shaped, and a chain that fails contributes nothing rather than failing the
+     * lot. A picker with two chains in it beats an error. (ROUT-242)
+     */
+    getWalletBalances(chainIds?: readonly number[]): Promise<{
+        tokens: SwapWalletBalance[];
+        /** Chains that could not be read, so the caller can say so or retry. */
+        failedChainIds: number[];
+    }>;
     /**
      * Search the assets a user may pay with, across every supported chain.
      *
@@ -945,6 +1144,13 @@ declare class OwneySDK {
         chainId?: number;
         query: string;
         limit?: number;
+        /**
+         * Which picker is asking. A withdrawal ends in the user's own wallet, so
+         * the "is this something anyone deliberately holds" gate is theirs to
+         * waive; a deposit ends in an agent and stays curated. Omit it for the
+         * curated list.
+         */
+        direction?: SwapDirection;
     }): Promise<{
         tokens: SwapTokenSearchResult[];
     }>;
@@ -1164,31 +1370,6 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_BALANCE_UNAVAILABLE" | "DEPOSIT_PARTIAL_FAILURE" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "AGENT_RATE_LIMITED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "SWAP_DISABLED" | "SWAP_RATE_LIMITED" | "SWAP_REQUEST_FAILED" | "SWAP_QUOTE_FAILED" | "SWAP_UNSUPPORTED_PAIR" | "SWAP_APPROVAL_REQUIRED" | "SWAP_BELOW_DEPOSIT_MINIMUM" | "SWAP_ORDER_EXPIRED" | "SWAP_ORDER_REFUNDED" | "SWAP_ORDER_CANCELLED" | "WITHDRAW_ARRIVAL_TIMEOUT" | "WITHDRAW_SWAP_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
-declare class OwneyError extends Error {
-    readonly code: OwneyErrorCode;
-    readonly details?: Record<string, unknown>;
-    readonly agentId?: string;
-    constructor(code: OwneyErrorCode, message: string, details?: Record<string, unknown>, agentId?: string);
-}
-declare class AgentNotFoundError extends OwneyError {
-    constructor(agentId: string, available: string[]);
-}
-declare class NotConnectedError extends OwneyError {
-    constructor();
-}
-declare class AgentChainIncompatibleError extends OwneyError {
-    readonly incompatibleAgents: Array<{
-        agentId: string;
-        supportedChainIds: readonly number[];
-    }>;
-    readonly connectedChainId: number;
-    constructor(incompatibleAgents: Array<{
-        agentId: string;
-        supportedChainIds: readonly number[];
-    }>, connectedChainId: number);
-}
-
 declare class InvalidHistoryCursorError extends Error {
     readonly code: "invalid_cursor";
     constructor(message: string);
@@ -1266,4 +1447,4 @@ type StoredOrder = {
  */
 declare function listOrders(now?: number): StoredOrder[];
 
-export { type AccountAgentApy, type AccountApyOptions, type AccountDailyEarnings, type AgentApy, type AgentApyDetails, type AgentBalance, AgentChainIncompatibleError, type AgentEarnings, type AgentHistoryEntry, type AgentHistoryPosition, type AgentId, AgentNotFoundError, type AgentSupportedAsset, type AgentSupportedAssets, type AgentUserProfile, type AgentWithdrawResult, type AgentsApyOptions, type AllocationAgentApy, type AllocationApyOptions, type ApyByChainAndAsset, type ApyHistoryPoint, type Asset, type AssetDailyEarnings, type AvailableAgent, type AvailableAgentsOptions, type ConnectionState, type DailyApyDays, type DailyEarningsOptions, type DailyEarningsPoint, type DepositCallback, type DepositOptions, type HistoryAction, type HistoryFilters, type HistoryOptions, type HistoryTransaction, type IAgent, InvalidHistoryCursorError, type LookbackDays, NotConnectedError, type OwneyAccountApy, type OwneyAgentApy, type OwneyAgentHistory, type OwneyAllocationApy, type OwneyBalances, type OwneyDepositResult, type OwneyEarnings, OwneyError, type OwneyErrorCode, type OwneyMultiDepositResult, type OwneyPosition, OwneySDK, type OwneySDKConfig, type OwneySIWXConfig, type OwneySupportedChainId, type OwneySupportedChains, type OwneySupportedTokens, type OwneyToken, type OwneyUserProfile, type OwneyWithdrawResult, type RebalanceLog, type SwapChainTokens, type SwapDirection, type SwapOrderStatus, type SwapQuote, type SwapQuoteParams, type SwapRail, type SwapStage, type SwapTokenInfo, type SwapTokenSearchResult, type WithdrawOptions, createOwneySIWX, listOrders as listPendingSwaps, setOwneyDebug };
+export { type AccountAgentApy, type AccountApyOptions, type AccountDailyEarnings, type AgentApy, type AgentApyDetails, type AgentBalance, AgentChainIncompatibleError, type AgentEarnings, type AgentHistoryEntry, type AgentHistoryPosition, type AgentId, AgentNotFoundError, type AgentSupportedAsset, type AgentSupportedAssets, type AgentUserProfile, type AgentWithdrawResult, type AgentsApyOptions, type AllocationAgentApy, type AllocationApyOptions, type ApyByChainAndAsset, type ApyHistoryPoint, type Asset, type AssetDailyEarnings, type AvailableAgent, type AvailableAgentsOptions, type ConnectionState, type DailyApyDays, type DailyEarningsOptions, type DailyEarningsPoint, type DepositCallback, type DepositOptions, type HistoryAction, type HistoryFilters, type HistoryOptions, type HistoryTransaction, type IAgent, InvalidHistoryCursorError, type LookbackDays, NotConnectedError, type OwneyAccountApy, type OwneyAgentApy, type OwneyAgentHistory, type OwneyAllocationApy, type OwneyBalances, type OwneyDepositResult, type OwneyEarnings, OwneyError, type OwneyErrorCode, type OwneyMultiDepositResult, type OwneyPosition, OwneySDK, type OwneySDKConfig, type OwneySIWXConfig, type OwneySupportedChainId, type OwneySupportedChains, type OwneySupportedTokens, type OwneyToken, type OwneyUserProfile, type OwneyWithdrawResult, type PendingDeposit, type RebalanceLog, type SwapChainTokens, type SwapDirection, type SwapOrderStatus, type SwapQuote, type SwapQuoteParams, type SwapRail, type SwapStage, type SwapTokenInfo, type SwapTokenSearchResult, type WithdrawOptions, createOwneySIWX, listPendingDeposits, listOrders as listPendingSwaps, setOwneyDebug };

package/dist/index.d.ts

@@ -54,6 +54,26 @@ type SwapChainTokens = {
  * the bulk list does, and the extra fields are the ones a picker needs to let
  * someone choose safely between three tokens all called PEPE.
  */
+/**
+ * A token the wallet actually holds, as the Pay with picker needs it.
+ *
+ * The picker used to read a fixed list of (token, chain) pairs, so it could
+ * only ever offer those. This is the other direction — what is really there —
+ * already intersected server-side with what the routing API would quote, so
+ * every row can be acted on. (ROUT-242)
+ */
+type SwapWalletBalance = {
+    readonly symbol: string;
+    readonly address: `0x${string}`;
+    readonly decimals: number;
+    readonly chainId: number;
+    readonly name?: string;
+    readonly logoURI?: string;
+    readonly tags?: readonly string[];
+    readonly isNative?: true;
+    /** Smallest unit, as a decimal string. */
+    readonly balance: string;
+};
 type SwapTokenSearchResult = SwapTokenInfo & {
     readonly chainId: number;
     readonly name?: string;
@@ -127,12 +147,30 @@ type SwapQuote = {
      */
     permitSupported?: boolean;
     /**
-     * True only for a cross-chain swap FROM native ETH, which needs an on-chain
-     * order creation carrying the full amount as msg.value. The user's funds
-     * leave the wallet before any fill, so the UI must say so. ERC-20 sources are
-     * signature-only after their one-time approval.
+     * True only for a cross-chain swap FROM native ETH, which Fusion+ cannot
+     * take as a source: the escrow pulls the maker's funds with `transferFrom`,
+     * and no signature can move native value. Left unread, the order signs
+     * perfectly well and the relayer refuses it with a bare 502 — after the user
+     * has already signed (ROUT-242).
+     *
+     * So the client wraps first and swaps `wrappedNative` instead. ERC-20
+     * sources are signature-only after their one-time approval.
      */
     requiresOnchainOrder: boolean;
+    /**
+     * The ERC-20 the source chain's native asset wraps into. Present only
+     * alongside `requiresOnchainOrder`.
+     *
+     * Comes from the routing API rather than a client-side lookup because the
+     * wrapper cannot be derived from the symbol: "WETH" on Polygon is bridged
+     * Ether, an entirely different asset from wrapped POL. This address receives
+     * the user's whole swap amount as msg.value, so guessing it is not an option.
+     */
+    wrappedNative?: {
+        symbol: string;
+        address: string;
+        decimals: number;
+    };
     /**
      * What the swap costs, as the provider reports it on this quote.
      *
@@ -182,7 +220,7 @@ type SwapOrderStatus = "pending" | "executed" | "expired" | "cancelled" | "refun
  * of the flow and the one place a user would otherwise think nothing is
  * happening.
  */
-type SwapStage = "withdrawing" | "withdrawn" | "quoting" | "approving" | "signing" | "swapping" | "swapped" | "depositing" | "refunding" | "refunded";
+type SwapStage = "withdrawing" | "withdrawn" | "quoting" | "wrapping" | "wrapped" | "approving" | "signing" | "swapping" | "swapped" | "depositing" | "refunding" | "refunded";
 /**
  * Which way the funds travel, which decides what each side may be.
  *
@@ -722,6 +760,68 @@ type AgentApyOptions = {
     chainId?: number;
 };
 
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_BALANCE_UNAVAILABLE" | "DEPOSIT_PARTIAL_FAILURE" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "AGENT_RATE_LIMITED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "SWAP_DISABLED" | "SWAP_RATE_LIMITED" | "SWAP_REQUEST_FAILED" | "SWAP_QUOTE_FAILED" | "SWAP_UNSUPPORTED_PAIR" | "SWAP_APPROVAL_REQUIRED" | "SWAP_BELOW_DEPOSIT_MINIMUM" | "SWAP_DEPOSIT_PENDING" | "SWAP_WALLET_PROMPT_TIMEOUT" | "SWAP_INSUFFICIENT_GAS" | "SWAP_NATIVE_UNSUPPORTED" | "SWAP_ORDER_EXPIRED" | "SWAP_ORDER_REFUNDED" | "SWAP_ORDER_CANCELLED" | "WITHDRAW_ARRIVAL_TIMEOUT" | "WITHDRAW_SWAP_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+declare class OwneyError extends Error {
+    readonly code: OwneyErrorCode;
+    readonly details?: Record<string, unknown>;
+    readonly agentId?: string;
+    constructor(code: OwneyErrorCode, message: string, details?: Record<string, unknown>, agentId?: string);
+}
+declare class AgentNotFoundError extends OwneyError {
+    constructor(agentId: string, available: string[]);
+}
+declare class NotConnectedError extends OwneyError {
+    constructor();
+}
+declare class AgentChainIncompatibleError extends OwneyError {
+    readonly incompatibleAgents: Array<{
+        agentId: string;
+        supportedChainIds: readonly number[];
+    }>;
+    readonly connectedChainId: number;
+    constructor(incompatibleAgents: Array<{
+        agentId: string;
+        supportedChainIds: readonly number[];
+    }>, connectedChainId: number);
+}
+
+/**
+ * Swaps that landed but were never deposited.
+ *
+ * `swapAndDeposit` does two things, and the deposit is the line after the
+ * swap. When the swap works and the deposit does not, the user is left holding
+ * the swapped asset with the form back on screen and nothing to say why
+ * (ROUT-242, comment 15980) — and the error they got said "your funds have not
+ * been moved", which is exactly wrong and makes a retry spend them twice.
+ *
+ * So the outcome is written down. Recovering it needs no order, no secret and
+ * no signature: the money is already in the wallet in the right asset, and
+ * what is missing is an ordinary deposit. Recording it is what lets the reload
+ * the user actually performs pick the job back up.
+ *
+ * Storage failures are swallowed everywhere here. Losing the note is bad;
+ * failing the swap because we could not write the note is worse.
+ */
+type PendingDeposit = {
+    /** Stable id so a retry can clear exactly the one it handled. */
+    id: string;
+    /** What arrived, in the asset's smallest unit. */
+    received: string;
+    /** The deposit asset. */
+    symbol: string;
+    /**
+     * The chain the funds are ON, which for a cross-chain swap is the
+     * DESTINATION — depositing against the source would read an empty wallet.
+     */
+    chainId: number;
+    /** Narrows the deposit to one agent when the caller asked for one. */
+    agentId?: string;
+    /** Epoch ms, for the sweep. */
+    createdAt: number;
+};
+/** Every record, dismissed ones included, newest first. Sweeps as it goes. */
+declare function listPendingDeposits(now?: number): PendingDeposit[];
+
 declare class OwneySDK {
     private agents;
     private activeAgents;
@@ -909,6 +1009,22 @@ declare class OwneySDK {
      * network has actually changed.
      */
     private ensureSwapChain;
+    /**
+     * Turn a native-source cross-chain quote into an ERC-20 one.
+     *
+     * Fusion+ cannot escrow native value, so the quote arrives with
+     * `requiresOnchainOrder` set and the relayer would refuse the order after
+     * the user signed it (ROUT-242). Wrapping first costs one transaction and
+     * puts the swap back on the ERC-20 rail that already works, rather than
+     * adding a second order type that would need its own escrow handling.
+     *
+     * Re-quoted afterwards rather than patched: the amount wrapped may be less
+     * than the amount quoted (gas has to come out of the same balance), and
+     * every executor dep — allowance, permit, balances — is derived from the
+     * quote's source token. A quote naming ETH would have all of them reading
+     * the wrong asset.
+     */
+    private wrapNativeSource;
     /**
      * Binds the executor's abstract deps to this client's wallet.
      *
@@ -916,6 +1032,28 @@ declare class OwneySDK {
      * flow stays testable without a provider — the executor never imports viem.
      */
     private buildSwapDeps;
+    /**
+     * Waits until the WALLET'S OWN node reports at least `amount` of `token`.
+     *
+     * Separate from the swap's arrival measurement on purpose: that one runs on
+     * a pinned HTTP RPC, and what matters here is the view the deposit will
+     * actually use. Returns whether it got there — a courtesy, not a gate, since
+     * the deposit's own check is the authority and refusing to even attempt
+     * would strand funds we might have been able to move.
+     */
+    private walletSeesBalance;
+    /**
+     * Runs a quoted swap. A named seam rather than an inline `executeSwap` call
+     * so the deposit half of `swapAndDeposit` can be exercised on its own.
+     */
+    private runSwap;
+    /**
+     * The half of the swap deps that only ever talks to the routing API.
+     *
+     * Split out because resuming an order needs exactly this and nothing else —
+     * no provider, no wallet client, no chain. See `resumePendingSwaps`.
+     */
+    private swapRunnerDeps;
     /**
      * Assets the user may pay with, and what each chain deposits into.
      *
@@ -925,6 +1063,67 @@ declare class OwneySDK {
     getSwapTokens(): Promise<{
         chains: SwapChainTokens[];
     }>;
+    /**
+     * Swaps that landed but were never deposited, newest first.
+     *
+     * The money is already in the wallet in the right asset — what is missing is
+     * an ordinary deposit, which is why this needs no order and no signature to
+     * describe. See `completePendingDeposit`.
+     */
+    listPendingDeposits(): ReturnType<typeof listPendingDeposits>;
+    /**
+     * Deposit a swap that already landed.
+     *
+     * Nothing is swapped again: the funds are in the wallet, so this is the
+     * second half of `swapAndDeposit` on its own. Cleared only once the deposit
+     * has actually gone through — a failure here leaves the record in place so it
+     * can be offered again rather than silently dropped.
+     */
+    completePendingDeposit(id: string): Promise<OwneyDepositResult | OwneyMultiDepositResult>;
+    /**
+     * Pick up cross-chain swaps a previous session left in flight.
+     *
+     * A Fusion+ order is only finished when the client publishes a secret for
+     * each fill, once the escrows exist — so a user who closed the tab mid-swap
+     * leaves an order nobody will ever complete, and it expires and refunds
+     * instead of arriving. The preimages are stored for exactly this (24h sweep,
+     * see the secret store); this is the other half.
+     *
+     * Needs NO wallet, deliberately. The signature already happened and the funds
+     * are already escrowed, so finishing is pure API work — demanding a reconnect
+     * first would strand the people it exists for.
+     *
+     * Every order is attempted even if an earlier one throws: they are unrelated
+     * escrows, and one ending badly must not abandon the next one's secrets.
+     * `unfinished` is not a verdict — the order may still settle, so unless the
+     * chain has said refunded or cancelled its preimages are kept.
+     */
+    resumePendingSwaps(options?: {
+        onStage?: (orderHash: string, stage: SwapStage) => void;
+        timeoutMs?: number;
+    }): Promise<{
+        orderHash: string;
+        status: "completed" | "unfinished";
+        error?: OwneyError;
+    }[]>;
+    /**
+     * What the wallet actually holds, across every supported chain, restricted
+     * to tokens a swap could use.
+     *
+     * `getSwapTokens` answers "what may someone pay with in principle" from a
+     * fixed list. This answers "what has this wallet got", which is a different
+     * question and the one a picker needs: a user can hold something routable —
+     * tBTC, say — that no fixed list of ours would ever mention.
+     *
+     * Each chain is asked separately because that is how the balance product is
+     * shaped, and a chain that fails contributes nothing rather than failing the
+     * lot. A picker with two chains in it beats an error. (ROUT-242)
+     */
+    getWalletBalances(chainIds?: readonly number[]): Promise<{
+        tokens: SwapWalletBalance[];
+        /** Chains that could not be read, so the caller can say so or retry. */
+        failedChainIds: number[];
+    }>;
     /**
      * Search the assets a user may pay with, across every supported chain.
      *
@@ -945,6 +1144,13 @@ declare class OwneySDK {
         chainId?: number;
         query: string;
         limit?: number;
+        /**
+         * Which picker is asking. A withdrawal ends in the user's own wallet, so
+         * the "is this something anyone deliberately holds" gate is theirs to
+         * waive; a deposit ends in an agent and stays curated. Omit it for the
+         * curated list.
+         */
+        direction?: SwapDirection;
     }): Promise<{
         tokens: SwapTokenSearchResult[];
     }>;
@@ -1164,31 +1370,6 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_BALANCE_UNAVAILABLE" | "DEPOSIT_PARTIAL_FAILURE" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "AGENT_RATE_LIMITED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "SWAP_DISABLED" | "SWAP_RATE_LIMITED" | "SWAP_REQUEST_FAILED" | "SWAP_QUOTE_FAILED" | "SWAP_UNSUPPORTED_PAIR" | "SWAP_APPROVAL_REQUIRED" | "SWAP_BELOW_DEPOSIT_MINIMUM" | "SWAP_ORDER_EXPIRED" | "SWAP_ORDER_REFUNDED" | "SWAP_ORDER_CANCELLED" | "WITHDRAW_ARRIVAL_TIMEOUT" | "WITHDRAW_SWAP_FAILED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
-declare class OwneyError extends Error {
-    readonly code: OwneyErrorCode;
-    readonly details?: Record<string, unknown>;
-    readonly agentId?: string;
-    constructor(code: OwneyErrorCode, message: string, details?: Record<string, unknown>, agentId?: string);
-}
-declare class AgentNotFoundError extends OwneyError {
-    constructor(agentId: string, available: string[]);
-}
-declare class NotConnectedError extends OwneyError {
-    constructor();
-}
-declare class AgentChainIncompatibleError extends OwneyError {
-    readonly incompatibleAgents: Array<{
-        agentId: string;
-        supportedChainIds: readonly number[];
-    }>;
-    readonly connectedChainId: number;
-    constructor(incompatibleAgents: Array<{
-        agentId: string;
-        supportedChainIds: readonly number[];
-    }>, connectedChainId: number);
-}
-
 declare class InvalidHistoryCursorError extends Error {
     readonly code: "invalid_cursor";
     constructor(message: string);
@@ -1266,4 +1447,4 @@ type StoredOrder = {
  */
 declare function listOrders(now?: number): StoredOrder[];
 
-export { type AccountAgentApy, type AccountApyOptions, type AccountDailyEarnings, type AgentApy, type AgentApyDetails, type AgentBalance, AgentChainIncompatibleError, type AgentEarnings, type AgentHistoryEntry, type AgentHistoryPosition, type AgentId, AgentNotFoundError, type AgentSupportedAsset, type AgentSupportedAssets, type AgentUserProfile, type AgentWithdrawResult, type AgentsApyOptions, type AllocationAgentApy, type AllocationApyOptions, type ApyByChainAndAsset, type ApyHistoryPoint, type Asset, type AssetDailyEarnings, type AvailableAgent, type AvailableAgentsOptions, type ConnectionState, type DailyApyDays, type DailyEarningsOptions, type DailyEarningsPoint, type DepositCallback, type DepositOptions, type HistoryAction, type HistoryFilters, type HistoryOptions, type HistoryTransaction, type IAgent, InvalidHistoryCursorError, type LookbackDays, NotConnectedError, type OwneyAccountApy, type OwneyAgentApy, type OwneyAgentHistory, type OwneyAllocationApy, type OwneyBalances, type OwneyDepositResult, type OwneyEarnings, OwneyError, type OwneyErrorCode, type OwneyMultiDepositResult, type OwneyPosition, OwneySDK, type OwneySDKConfig, type OwneySIWXConfig, type OwneySupportedChainId, type OwneySupportedChains, type OwneySupportedTokens, type OwneyToken, type OwneyUserProfile, type OwneyWithdrawResult, type RebalanceLog, type SwapChainTokens, type SwapDirection, type SwapOrderStatus, type SwapQuote, type SwapQuoteParams, type SwapRail, type SwapStage, type SwapTokenInfo, type SwapTokenSearchResult, type WithdrawOptions, createOwneySIWX, listOrders as listPendingSwaps, setOwneyDebug };
+export { type AccountAgentApy, type AccountApyOptions, type AccountDailyEarnings, type AgentApy, type AgentApyDetails, type AgentBalance, AgentChainIncompatibleError, type AgentEarnings, type AgentHistoryEntry, type AgentHistoryPosition, type AgentId, AgentNotFoundError, type AgentSupportedAsset, type AgentSupportedAssets, type AgentUserProfile, type AgentWithdrawResult, type AgentsApyOptions, type AllocationAgentApy, type AllocationApyOptions, type ApyByChainAndAsset, type ApyHistoryPoint, type Asset, type AssetDailyEarnings, type AvailableAgent, type AvailableAgentsOptions, type ConnectionState, type DailyApyDays, type DailyEarningsOptions, type DailyEarningsPoint, type DepositCallback, type DepositOptions, type HistoryAction, type HistoryFilters, type HistoryOptions, type HistoryTransaction, type IAgent, InvalidHistoryCursorError, type LookbackDays, NotConnectedError, type OwneyAccountApy, type OwneyAgentApy, type OwneyAgentHistory, type OwneyAllocationApy, type OwneyBalances, type OwneyDepositResult, type OwneyEarnings, OwneyError, type OwneyErrorCode, type OwneyMultiDepositResult, type OwneyPosition, OwneySDK, type OwneySDKConfig, type OwneySIWXConfig, type OwneySupportedChainId, type OwneySupportedChains, type OwneySupportedTokens, type OwneyToken, type OwneyUserProfile, type OwneyWithdrawResult, type PendingDeposit, type RebalanceLog, type SwapChainTokens, type SwapDirection, type SwapOrderStatus, type SwapQuote, type SwapQuoteParams, type SwapRail, type SwapStage, type SwapTokenInfo, type SwapTokenSearchResult, type WithdrawOptions, createOwneySIWX, listPendingDeposits, listOrders as listPendingSwaps, setOwneyDebug };