@owney/sdk 0.7.4 → 0.7.6

package/dist/index.cjs

@@ -825,6 +825,9 @@ function debugLog(scope, message, data) {
 }
 
 // src/agents/zyfai/zyfai.agent.ts
+var ERC7579_IS_MODULE_INSTALLED_ABI = (0, import_viem.parseAbi)([
+  "function isModuleInstalled(uint256 moduleTypeId, address module, bytes additionalContext) view returns (bool)"
+]);
 var DEFAULT_ZYFAI_RPC_URLS = {
   8453: "https://base-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
   42161: "https://arb-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
@@ -1142,7 +1145,12 @@ var ZyfaiAgent = class {
       const validChainId = isValidChainId(chainId);
       await Promise.all([
         this.ensureProtocolsSynced(validChainId, "USDC"),
-        this.ensureProtocolsSynced(validChainId, "WETH")
+        this.ensureProtocolsSynced(validChainId, "WETH"),
+        // Retrofit a session key for old wallets that are already deployed and
+        // funded but never got one — otherwise their balance stays idle until
+        // they happen to deposit again. Only touches Safes that are missing the
+        // validator, so pool-wallet users see no prompt. Non-fatal.
+        this.ensureSessionKeyIfDeployed(validChainId)
       ]);
     } catch (error) {
       throw error;
@@ -1340,6 +1348,65 @@ var ZyfaiAgent = class {
       return false;
     }
   }
+  /**
+   * Ensure Zyfai's automation can actually act on the user's Safe for this
+   * chain, by making sure a session key exists.
+   *
+   * Old wallets (pre-0.2.44) are deployed WITHOUT the smart-sessions validator,
+   * so Zyfai's rebalancer has no authorised path to move funds: deposits land
+   * and then sit as raw tokens forever. Pre-deployed pool wallets ship with the
+   * module already installed, which is why they never needed this.
+   *
+   * The gate is the on-chain module, not the wallet's class: it is the exact
+   * condition that matters, it needs no guessing from API shapes, and it means
+   * pool-wallet users are never prompted for a signature they don't need.
+   *
+   * Non-fatal by design. A failure here must not block a deposit — the funds
+   * still arrive safely in the Safe, they just won't be deployed into a pool
+   * until a session key exists.
+   */
+  /**
+   * Activation-time variant: only acts when the Safe already has code on this
+   * chain. Activation must never deploy anything — that is deposit's job, and it
+   * would mean surprise on-chain work just for opening the app.
+   */
+  async ensureSessionKeyIfDeployed(chainId) {
+    try {
+      const ownerAddress = this.getAddress();
+      const wallet = await this.sdk.getSmartWalletAddress(
+        ownerAddress,
+        chainId
+      );
+      if (!wallet.isDeployed) return;
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+    } catch (error) {
+      console.warn(
+        "[zyfai] session-key check at activation failed (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
+  async ensureSessionKey(ownerAddress, chainId, smartWallet) {
+    try {
+      const installed = await this.getPublicClient(chainId).readContract({
+        address: smartWallet,
+        abi: ERC7579_IS_MODULE_INSTALLED_ABI,
+        functionName: "isModuleInstalled",
+        // moduleTypeId 1 = validator (ERC-7579)
+        args: [1n, import_sdk.SMART_SESSIONS_VALIDATOR, "0x"]
+      });
+      if (installed) return;
+      console.warn(
+        `[zyfai] Safe ${smartWallet} has no smart-sessions validator on chain ${chainId}; creating a session key so the agent can allocate.`
+      );
+      await this.sdk.createSessionKey(ownerAddress, chainId);
+    } catch (error) {
+      console.warn(
+        "[zyfai] createSessionKey skipped (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   /**
    * Guarantee the user's Safe has code on `chainId` before anything transfers
    * funds into it, and return its address.
@@ -1360,17 +1427,21 @@ var ZyfaiAgent = class {
    */
   async ensureWalletDeployed(ownerAddress, chainId) {
     const wallet = await this.sdk.getSmartWalletAddress(ownerAddress, chainId);
-    if (wallet.isDeployed) return wallet.address;
+    if (wallet.isDeployed) {
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+      return wallet.address;
+    }
     const poolFirst = await this.isPredeployedPoolWallet(
       ownerAddress,
       wallet.address
     );
     const deployAsPool = () => this.sdk.deployOnChains([chainId]);
     const deployAsLegacy = () => (
-      // `createSessionKey: false` — session keys are backend-owned since the
-      // predeployed-pool rollout; asking for one here costs a signature prompt
-      // and is rejected anyway.
-      this.sdk.deploySafe(ownerAddress, chainId, "aggressive", false)
+      // `createSessionKey: true` — per Zyfai, the old-wallet flow is
+      // deploySafe(true) -> createSessionKey() -> deposit. Passing false (which
+      // this did originally) deploys a Safe with no smart-sessions validator, so
+      // deposits land and are never allocated into a pool.
+      this.sdk.deploySafe(ownerAddress, chainId, "aggressive", true)
     );
     const [first, second] = poolFirst ? [deployAsPool, deployAsLegacy] : [deployAsLegacy, deployAsPool];
     try {
@@ -1394,6 +1465,7 @@ var ZyfaiAgent = class {
         this.id
       );
     }
+    await this.ensureSessionKey(ownerAddress, chainId, redeployed.address);
     return redeployed.address;
   }
   async deposit(state, chainId, amount, asset, depositCallback) {
@@ -2001,6 +2073,41 @@ async function readErc20Balance(publicClient, token, owner) {
   });
 }
 
+// src/lib/chain-guard.ts
+var CHAIN_NAMES = {
+  1: "Ethereum",
+  8453: "Base",
+  42161: "Arbitrum"
+};
+function chainName(chainId) {
+  return CHAIN_NAMES[chainId] ?? `chain ${chainId}`;
+}
+async function ensureWalletOnChain(pub, wallet, expected) {
+  const actual = await pub.getChainId();
+  if (actual === expected) return;
+  try {
+    await wallet.switchChain({ id: expected });
+  } catch (error) {
+    throw new OwneyError(
+      "CHAIN_MISMATCH",
+      `Your wallet is on ${chainName(actual)}. Switch it to ${chainName(expected)} and try again.`,
+      {
+        expectedChainId: expected,
+        actualChainId: actual,
+        cause: error instanceof Error ? error.message : String(error)
+      }
+    );
+  }
+  const after = await pub.getChainId();
+  if (after !== expected) {
+    throw new OwneyError(
+      "CHAIN_MISMATCH",
+      `Your wallet is still on ${chainName(after)}. Switch it to ${chainName(expected)} and try again.`,
+      { expectedChainId: expected, actualChainId: after }
+    );
+  }
+}
+
 // src/lib/sponsored-deposit.ts
 var AUTH_WINDOW_SECONDS = 15 * 60;
 function makeSponsoredDepositCallback(deps) {
@@ -2016,6 +2123,7 @@ function makeSponsoredDepositCallback(deps) {
     }
     const pub = deps.getPublicClient(cid);
     const wallet = deps.getWalletClient(cid);
+    await ensureWalletOnChain(pub, wallet, cid);
     try {
       const balance = await readErc20Balance(pub, token, deps.ownerAddress);
       if (balance < BigInt(amount)) {
@@ -2027,6 +2135,10 @@ function makeSponsoredDepositCallback(deps) {
       }
     } catch (err) {
       if (err instanceof OwneyError) throw err;
+      console.warn(
+        "[owney-sdk] Deposit balance pre-check failed (non-fatal):",
+        err instanceof Error ? err.message : String(err)
+      );
     }
     const { tokenName, tokenVersion } = await readTokenMeta(pub, token);
     const validAfter = 0n;
@@ -2090,6 +2202,8 @@ function makeSponsoredWethCallback(deps) {
     }
     const amountWei = BigInt(amount);
     const pub = deps.getPublicClient(cid);
+    const wallet = deps.getWalletClient(cid);
+    await ensureWalletOnChain(pub, wallet, cid);
     try {
       const balance = await readErc20Balance(pub, token, deps.ownerAddress);
       if (balance < amountWei) {
@@ -2101,6 +2215,10 @@ function makeSponsoredWethCallback(deps) {
       }
     } catch (err) {
       if (err instanceof OwneyError) throw err;
+      console.warn(
+        "[owney-sdk] WETH balance pre-check failed (non-fatal):",
+        err instanceof Error ? err.message : String(err)
+      );
     }
     const allowance = await readPermit2Allowance(pub, token, deps.ownerAddress);
     if (allowance < amountWei) {
@@ -2128,7 +2246,6 @@ function makeSponsoredWethCallback(deps) {
         deadline
       }
     });
-    const wallet = deps.getWalletClient(cid);
     const signature = await wallet.signTypedData({
       account: deps.ownerAddress,
       ...typedData

package/dist/index.d.cts

@@ -609,7 +609,7 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.d.ts

@@ -609,7 +609,7 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/agents/zyfai/zyfai.agent.ts
-import { ZyfaiSDK } from "@zyfai/sdk";
-import { createPublicClient, http } from "viem";
+import { SMART_SESSIONS_VALIDATOR, ZyfaiSDK } from "@zyfai/sdk";
+import { createPublicClient, http, parseAbi } from "viem";
 import { base, arbitrum, mainnet } from "viem/chains";
 
 // src/types/config.ts
@@ -792,6 +792,9 @@ function debugLog(scope, message, data) {
 }
 
 // src/agents/zyfai/zyfai.agent.ts
+var ERC7579_IS_MODULE_INSTALLED_ABI = parseAbi([
+  "function isModuleInstalled(uint256 moduleTypeId, address module, bytes additionalContext) view returns (bool)"
+]);
 var DEFAULT_ZYFAI_RPC_URLS = {
   8453: "https://base-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
   42161: "https://arb-mainnet.g.alchemy.com/v2/ZWyVU-9XfS3z8Rn-xkq7V",
@@ -1109,7 +1112,12 @@ var ZyfaiAgent = class {
       const validChainId = isValidChainId(chainId);
       await Promise.all([
         this.ensureProtocolsSynced(validChainId, "USDC"),
-        this.ensureProtocolsSynced(validChainId, "WETH")
+        this.ensureProtocolsSynced(validChainId, "WETH"),
+        // Retrofit a session key for old wallets that are already deployed and
+        // funded but never got one — otherwise their balance stays idle until
+        // they happen to deposit again. Only touches Safes that are missing the
+        // validator, so pool-wallet users see no prompt. Non-fatal.
+        this.ensureSessionKeyIfDeployed(validChainId)
       ]);
     } catch (error) {
       throw error;
@@ -1307,6 +1315,65 @@ var ZyfaiAgent = class {
       return false;
     }
   }
+  /**
+   * Ensure Zyfai's automation can actually act on the user's Safe for this
+   * chain, by making sure a session key exists.
+   *
+   * Old wallets (pre-0.2.44) are deployed WITHOUT the smart-sessions validator,
+   * so Zyfai's rebalancer has no authorised path to move funds: deposits land
+   * and then sit as raw tokens forever. Pre-deployed pool wallets ship with the
+   * module already installed, which is why they never needed this.
+   *
+   * The gate is the on-chain module, not the wallet's class: it is the exact
+   * condition that matters, it needs no guessing from API shapes, and it means
+   * pool-wallet users are never prompted for a signature they don't need.
+   *
+   * Non-fatal by design. A failure here must not block a deposit — the funds
+   * still arrive safely in the Safe, they just won't be deployed into a pool
+   * until a session key exists.
+   */
+  /**
+   * Activation-time variant: only acts when the Safe already has code on this
+   * chain. Activation must never deploy anything — that is deposit's job, and it
+   * would mean surprise on-chain work just for opening the app.
+   */
+  async ensureSessionKeyIfDeployed(chainId) {
+    try {
+      const ownerAddress = this.getAddress();
+      const wallet = await this.sdk.getSmartWalletAddress(
+        ownerAddress,
+        chainId
+      );
+      if (!wallet.isDeployed) return;
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+    } catch (error) {
+      console.warn(
+        "[zyfai] session-key check at activation failed (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
+  async ensureSessionKey(ownerAddress, chainId, smartWallet) {
+    try {
+      const installed = await this.getPublicClient(chainId).readContract({
+        address: smartWallet,
+        abi: ERC7579_IS_MODULE_INSTALLED_ABI,
+        functionName: "isModuleInstalled",
+        // moduleTypeId 1 = validator (ERC-7579)
+        args: [1n, SMART_SESSIONS_VALIDATOR, "0x"]
+      });
+      if (installed) return;
+      console.warn(
+        `[zyfai] Safe ${smartWallet} has no smart-sessions validator on chain ${chainId}; creating a session key so the agent can allocate.`
+      );
+      await this.sdk.createSessionKey(ownerAddress, chainId);
+    } catch (error) {
+      console.warn(
+        "[zyfai] createSessionKey skipped (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
   /**
    * Guarantee the user's Safe has code on `chainId` before anything transfers
    * funds into it, and return its address.
@@ -1327,17 +1394,21 @@ var ZyfaiAgent = class {
    */
   async ensureWalletDeployed(ownerAddress, chainId) {
     const wallet = await this.sdk.getSmartWalletAddress(ownerAddress, chainId);
-    if (wallet.isDeployed) return wallet.address;
+    if (wallet.isDeployed) {
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+      return wallet.address;
+    }
     const poolFirst = await this.isPredeployedPoolWallet(
       ownerAddress,
       wallet.address
     );
     const deployAsPool = () => this.sdk.deployOnChains([chainId]);
     const deployAsLegacy = () => (
-      // `createSessionKey: false` — session keys are backend-owned since the
-      // predeployed-pool rollout; asking for one here costs a signature prompt
-      // and is rejected anyway.
-      this.sdk.deploySafe(ownerAddress, chainId, "aggressive", false)
+      // `createSessionKey: true` — per Zyfai, the old-wallet flow is
+      // deploySafe(true) -> createSessionKey() -> deposit. Passing false (which
+      // this did originally) deploys a Safe with no smart-sessions validator, so
+      // deposits land and are never allocated into a pool.
+      this.sdk.deploySafe(ownerAddress, chainId, "aggressive", true)
     );
     const [first, second] = poolFirst ? [deployAsPool, deployAsLegacy] : [deployAsLegacy, deployAsPool];
     try {
@@ -1361,6 +1432,7 @@ var ZyfaiAgent = class {
         this.id
       );
     }
+    await this.ensureSessionKey(ownerAddress, chainId, redeployed.address);
     return redeployed.address;
   }
   async deposit(state, chainId, amount, asset, depositCallback) {
@@ -1972,6 +2044,41 @@ async function readErc20Balance(publicClient, token, owner) {
   });
 }
 
+// src/lib/chain-guard.ts
+var CHAIN_NAMES = {
+  1: "Ethereum",
+  8453: "Base",
+  42161: "Arbitrum"
+};
+function chainName(chainId) {
+  return CHAIN_NAMES[chainId] ?? `chain ${chainId}`;
+}
+async function ensureWalletOnChain(pub, wallet, expected) {
+  const actual = await pub.getChainId();
+  if (actual === expected) return;
+  try {
+    await wallet.switchChain({ id: expected });
+  } catch (error) {
+    throw new OwneyError(
+      "CHAIN_MISMATCH",
+      `Your wallet is on ${chainName(actual)}. Switch it to ${chainName(expected)} and try again.`,
+      {
+        expectedChainId: expected,
+        actualChainId: actual,
+        cause: error instanceof Error ? error.message : String(error)
+      }
+    );
+  }
+  const after = await pub.getChainId();
+  if (after !== expected) {
+    throw new OwneyError(
+      "CHAIN_MISMATCH",
+      `Your wallet is still on ${chainName(after)}. Switch it to ${chainName(expected)} and try again.`,
+      { expectedChainId: expected, actualChainId: after }
+    );
+  }
+}
+
 // src/lib/sponsored-deposit.ts
 var AUTH_WINDOW_SECONDS = 15 * 60;
 function makeSponsoredDepositCallback(deps) {
@@ -1987,6 +2094,7 @@ function makeSponsoredDepositCallback(deps) {
     }
     const pub = deps.getPublicClient(cid);
     const wallet = deps.getWalletClient(cid);
+    await ensureWalletOnChain(pub, wallet, cid);
     try {
       const balance = await readErc20Balance(pub, token, deps.ownerAddress);
       if (balance < BigInt(amount)) {
@@ -1998,6 +2106,10 @@ function makeSponsoredDepositCallback(deps) {
       }
     } catch (err) {
       if (err instanceof OwneyError) throw err;
+      console.warn(
+        "[owney-sdk] Deposit balance pre-check failed (non-fatal):",
+        err instanceof Error ? err.message : String(err)
+      );
     }
     const { tokenName, tokenVersion } = await readTokenMeta(pub, token);
     const validAfter = 0n;
@@ -2061,6 +2173,8 @@ function makeSponsoredWethCallback(deps) {
     }
     const amountWei = BigInt(amount);
     const pub = deps.getPublicClient(cid);
+    const wallet = deps.getWalletClient(cid);
+    await ensureWalletOnChain(pub, wallet, cid);
     try {
       const balance = await readErc20Balance(pub, token, deps.ownerAddress);
       if (balance < amountWei) {
@@ -2072,6 +2186,10 @@ function makeSponsoredWethCallback(deps) {
       }
     } catch (err) {
       if (err instanceof OwneyError) throw err;
+      console.warn(
+        "[owney-sdk] WETH balance pre-check failed (non-fatal):",
+        err instanceof Error ? err.message : String(err)
+      );
     }
     const allowance = await readPermit2Allowance(pub, token, deps.ownerAddress);
     if (allowance < amountWei) {
@@ -2099,7 +2217,6 @@ function makeSponsoredWethCallback(deps) {
         deadline
       }
     });
-    const wallet = deps.getWalletClient(cid);
     const signature = await wallet.signTypedData({
       account: deps.ownerAddress,
       ...typedData

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.7.4",
+  "version": "0.7.6",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",