@owney/sdk 0.7.7-beta.4 → 0.7.7-beta.5

package/dist/index.cjs

@@ -217,32 +217,6 @@ function resolveChainId(chain) {
   if (Number.isFinite(asNum) && asNum > 0) return asNum;
   return NAME_TO_CHAIN_ID[chain.trim().toLowerCase()] ?? NaN;
 }
-function mapPendingAllocations(raw) {
-  if (!Array.isArray(raw)) return void 0;
-  const pending = [];
-  for (const entry of raw) {
-    if (typeof entry !== "object" || entry === null) continue;
-    const e = entry;
-    if (e.isPending !== true) continue;
-    if (typeof e.chainId !== "number" || !Number.isFinite(e.chainId)) continue;
-    if (typeof e.tokenSymbol !== "string" || e.tokenSymbol === "") continue;
-    if (typeof e.balance !== "string") continue;
-    let amount;
-    try {
-      amount = hexToDecimal(e.balance, tokenDecimals(e.tokenSymbol));
-    } catch {
-      continue;
-    }
-    if (!Number.isFinite(amount) || amount <= 0) continue;
-    pending.push({
-      chainId: e.chainId,
-      asset: e.tokenSymbol,
-      amount: String(amount),
-      ...typeof e.updatedAt === "string" && e.updatedAt !== "" ? { since: e.updatedAt } : {}
-    });
-  }
-  return pending.length > 0 ? pending : void 0;
-}
 function mapBalances(raw, _chainId, smartWallet) {
   const portfolio = raw.portfolio;
   const portfolioByChain = portfolio.portfolioByChain ?? {};
@@ -294,16 +268,12 @@ function mapBalances(raw, _chainId, smartWallet) {
     // structural read keeps it undefined today and auto-populates later.
     liquidity: p.liquidity
   }));
-  const pendingAllocations = mapPendingAllocations(
-    portfolio.staleBalances
-  );
   return {
     smartWallet,
     totalBalance: String(totalBalance),
     totalBalanceAsset: "usdc",
     tokens,
-    positions,
-    ...pendingAllocations ? { pendingAllocations } : {}
+    positions
   };
 }
 function sumTokenValues(tokens) {
@@ -909,12 +879,6 @@ var ZyfaiAgent = class {
   connectedAddress = null;
   connectedChainId = null;
   smartWalletCache = /* @__PURE__ */ new Map();
-  /**
-   * `${eoa}:${chainId}` keys we have already tried createSessionKey for. Guards
-   * against re-running it on every activation/deposit when Zyfai's
-   * `hasActiveSessionKey` does not flip to true — see ensureSessionKey.
-   */
-  sessionKeyAttempts = /* @__PURE__ */ new Set();
   connectAuthPromise = null;
   rpcUrls;
   publicClients = /* @__PURE__ */ new Map();
@@ -1372,74 +1336,10 @@ var ZyfaiAgent = class {
    * recoverable (ensureWalletDeployed tries the other deploy call), but
    * failing the deposit outright is not.
    */
-  /**
-   * Zyfai's own answer to "what kind of wallet is this, and can the agent act on
-   * it", read from the positions payload (`GET /data/position`, which
-   * `getPositions` wraps).
-   *
-   * `predeployed` and `hasActiveSessionKey` are both returned at runtime but
-   * declared on neither `Portfolio` nor their docs, hence the cast. Verified
-   * live: an old wallet reports `{predeployed: false, hasActiveSessionKey:
-   * false}` while a pool wallet reports `{true, true}`.
-   *
-   * Preferred over the SDK's private `isPredeployed`, which is cached from the
-   * login response and can go stale mid-session. Returns an empty object on any
-   * failure so every caller degrades to its own fallback.
-   */
-  async readWalletState(ownerAddress) {
-    try {
-      const { portfolio } = await this.sdk.getPositions(ownerAddress);
-      const raw = portfolio;
-      debugLog("zyfai:onboard", "wallet state from getPositions", {
-        predeployed: raw?.predeployed,
-        hasActiveSessionKey: raw?.hasActiveSessionKey
-      });
-      return {
-        predeployed: raw?.predeployed,
-        hasActiveSessionKey: raw?.hasActiveSessionKey
-      };
-    } catch (error) {
-      console.warn(
-        "[zyfai] getPositions wallet-state read failed (non-fatal):",
-        error instanceof Error ? error.message : String(error)
-      );
-      return {};
-    }
-  }
   async isPredeployedPoolWallet(ownerAddress, smartWallet) {
-    const { predeployed } = await this.readWalletState(ownerAddress);
-    if (typeof predeployed === "boolean") {
-      debugLog(
-        "zyfai:onboard",
-        `wallet class: ${predeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
-        { source: "getPositions.predeployed", predeployed }
-      );
-      return predeployed;
-    }
-    const internals = this.sdk;
-    if (typeof internals.isPredeployed === "boolean") {
-      debugLog(
-        "zyfai:onboard",
-        `wallet class: ${internals.isPredeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
-        {
-          source: "login response (cached)",
-          predeployed: internals.isPredeployed
-        }
-      );
-      return internals.isPredeployed;
-    }
     try {
       const byEoa = await this.sdk.getSmartWalletByEOA(ownerAddress);
-      const isPool = typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
-      debugLog(
-        "zyfai:onboard",
-        `wallet class: ${isPool ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
-        {
-          source: "getSmartWalletByEOA fallback",
-          poolRecord: byEoa?.smartWallet
-        }
-      );
-      return isPool;
+      return typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
     } catch (error) {
       console.warn(
         "[zyfai] getSmartWalletByEOA failed; assuming a legacy wallet:",
@@ -1477,24 +1377,8 @@ var ZyfaiAgent = class {
         ownerAddress,
         chainId
       );
-      debugLog("zyfai:onboard", `activation check on chain ${chainId}`, {
-        smartWallet: wallet.address,
-        isDeployed: wallet.isDeployed
-      });
-      if (!wallet.isDeployed) {
-        debugLog(
-          "zyfai:onboard",
-          "Safe not deployed on this chain; activation does nothing (deposit owns deploys)"
-        );
-        return;
-      }
-      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
-      await this.ensureSessionKey(
-        ownerAddress,
-        chainId,
-        wallet.address,
-        hasActiveSessionKey
-      );
+      if (!wallet.isDeployed) return;
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
     } catch (error) {
       console.warn(
         "[zyfai] session-key check at activation failed (non-fatal):",
@@ -1502,51 +1386,20 @@ var ZyfaiAgent = class {
       );
     }
   }
-  async ensureSessionKey(ownerAddress, chainId, smartWallet, hasActiveSessionKey) {
-    const attemptKey = `${ownerAddress.toLowerCase()}:${chainId}`;
-    if (this.sessionKeyAttempts.has(attemptKey)) {
-      debugLog(
-        "zyfai:onboard",
-        "session key: already attempted this session, skipping",
-        { chainId }
-      );
-      return;
-    }
+  async ensureSessionKey(ownerAddress, chainId, smartWallet) {
     try {
-      if (hasActiveSessionKey === true) {
-        debugLog(
-          "zyfai:onboard",
-          "session key: already on record -> nothing to do",
-          { chainId }
-        );
-        return;
-      }
-      if (hasActiveSessionKey === void 0) {
-        const installed = await this.readSmartSessionsInstalled(
-          chainId,
-          smartWallet
-        );
-        debugLog(
-          "zyfai:onboard",
-          `session key: Zyfai state unavailable; on-chain validator ${installed ? "INSTALLED" : "MISSING"}`,
-          { smartWallet, chainId }
-        );
-        if (installed) return;
-      }
-      this.sessionKeyAttempts.add(attemptKey);
+      const installed = await this.getPublicClient(chainId).readContract({
+        address: smartWallet,
+        abi: ERC7579_IS_MODULE_INSTALLED_ABI,
+        functionName: "isModuleInstalled",
+        // moduleTypeId 1 = validator (ERC-7579)
+        args: [1n, import_sdk.SMART_SESSIONS_VALIDATOR, "0x"]
+      });
+      if (installed) return;
       console.warn(
-        `[zyfai] no session key for ${smartWallet} on chain ${chainId}; creating one so the agent can allocate.`
+        `[zyfai] Safe ${smartWallet} has no smart-sessions validator on chain ${chainId}; creating a session key so the agent can allocate.`
       );
-      debugLog("zyfai:onboard", "session key: calling createSessionKey", {
-        chainId,
-        smartWallet,
-        hasActiveSessionKey
-      });
       await this.sdk.createSessionKey(ownerAddress, chainId);
-      debugLog("zyfai:onboard", "session key: createSessionKey succeeded", {
-        chainId,
-        smartWallet
-      });
     } catch (error) {
       console.warn(
         "[zyfai] createSessionKey skipped (non-fatal):",
@@ -1554,16 +1407,6 @@ var ZyfaiAgent = class {
       );
     }
   }
-  /** Ground truth for "can Zyfai's automation act on this Safe, on this chain". */
-  async readSmartSessionsInstalled(chainId, smartWallet) {
-    return this.getPublicClient(chainId).readContract({
-      address: smartWallet,
-      abi: ERC7579_IS_MODULE_INSTALLED_ABI,
-      functionName: "isModuleInstalled",
-      // moduleTypeId 1 = validator (ERC-7579)
-      args: [1n, import_sdk.SMART_SESSIONS_VALIDATOR, "0x"]
-    });
-  }
   /**
    * Guarantee the user's Safe has code on `chainId` before anything transfers
    * funds into it, and return its address.
@@ -1584,24 +1427,8 @@ var ZyfaiAgent = class {
    */
   async ensureWalletDeployed(ownerAddress, chainId) {
     const wallet = await this.sdk.getSmartWalletAddress(ownerAddress, chainId);
-    debugLog("zyfai:onboard", `--- deposit onboarding, chain ${chainId} ---`, {
-      eoa: ownerAddress,
-      smartWallet: wallet.address,
-      isDeployed: wallet.isDeployed,
-      isOwner: wallet.isOwner
-    });
     if (wallet.isDeployed) {
-      debugLog(
-        "zyfai:onboard",
-        "Safe already has code -> no deploy needed, checking the session key"
-      );
-      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
-      await this.ensureSessionKey(
-        ownerAddress,
-        chainId,
-        wallet.address,
-        hasActiveSessionKey
-      );
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
       return wallet.address;
     }
     const poolFirst = await this.isPredeployedPoolWallet(
@@ -1617,27 +1444,14 @@ var ZyfaiAgent = class {
       this.sdk.deploySafe(ownerAddress, chainId, "aggressive", true)
     );
     const [first, second] = poolFirst ? [deployAsPool, deployAsLegacy] : [deployAsLegacy, deployAsPool];
-    debugLog(
-      "zyfai:onboard",
-      `Safe has no code on chain ${chainId} -> deploying via ${poolFirst ? "deployOnChains (pool path)" : "deploySafe(createSessionKey=true) (legacy path)"}`
-    );
     try {
       await first();
-      debugLog(
-        "zyfai:onboard",
-        `${poolFirst ? "deployOnChains" : "deploySafe"} succeeded`
-      );
     } catch (error) {
       console.warn(
         `[zyfai] ${poolFirst ? "deployOnChains" : "deploySafe"} failed on chain ${chainId}; trying the other deploy path:`,
         error instanceof Error ? error.message : String(error)
       );
-      debugLog(
-        "zyfai:onboard",
-        `falling back to ${poolFirst ? "deploySafe (legacy path)" : "deployOnChains (pool path)"}`
-      );
       await second();
-      debugLog("zyfai:onboard", "fallback deploy path succeeded");
     }
     const redeployed = await this.sdk.getSmartWalletAddress(
       ownerAddress,
@@ -2025,7 +1839,7 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
 }
 
 // src/client.ts
-var import_viem5 = require("viem");
+var import_viem6 = require("viem");
 var import_chains2 = require("viem/chains");
 
 // src/lib/transfer-auth.ts
@@ -2455,6 +2269,97 @@ function makeSponsoredWethCallback(deps) {
   };
 }
 
+// src/lib/sponsored-calls-deposit.ts
+var import_viem5 = require("viem");
+var DEFAULT_POLL_INTERVAL_MS = 1500;
+var DEFAULT_MAX_POLLS = 30;
+async function paymasterSupported(provider, owner, chainId) {
+  const caps = await provider.request({
+    method: "wallet_getCapabilities",
+    params: [owner]
+  });
+  const forChain = caps?.[(0, import_viem5.toHex)(chainId)] ?? caps?.[String(chainId)];
+  return Boolean(forChain?.paymasterService?.supported);
+}
+function makeSponsoredCallsCallback(deps) {
+  const pollIntervalMs = deps.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const maxPolls = deps.maxPolls ?? DEFAULT_MAX_POLLS;
+  const absolutePaymasterUrl = () => {
+    const configured = deps.paymasterServiceUrl;
+    if (/^https?:\/\//i.test(configured)) return configured;
+    const origin = globalThis.location?.origin;
+    if (!origin) {
+      throw new OwneyError(
+        "SPONSORED_CALLS_UNSUPPORTED",
+        `paymasterServiceUrl "${configured}" is relative and no page origin is available to resolve it.`
+      );
+    }
+    return new URL(configured, origin).toString();
+  };
+  return async (smartWallet, chainId, amount) => {
+    const cid = chainId;
+    const token = deps.tokenAddressByChain[cid];
+    if (!token) {
+      throw new OwneyError(
+        "CHAIN_UNSUPPORTED",
+        `No sponsored token configured for chain ${chainId}`
+      );
+    }
+    if (!await paymasterSupported(deps.provider, deps.ownerAddress, chainId)) {
+      throw new OwneyError(
+        "SPONSORED_CALLS_UNSUPPORTED",
+        `Wallet does not advertise paymasterService on chain ${chainId}.`,
+        { chainId }
+      );
+    }
+    const data = (0, import_viem5.encodeFunctionData)({
+      abi: import_viem5.erc20Abi,
+      functionName: "transfer",
+      args: [smartWallet, BigInt(amount)]
+    });
+    const sendResult = await deps.provider.request({
+      method: "wallet_sendCalls",
+      params: [
+        {
+          version: "2.0.0",
+          from: deps.ownerAddress,
+          chainId: (0, import_viem5.toHex)(chainId),
+          atomicRequired: false,
+          calls: [{ to: token, value: "0x0", data }],
+          capabilities: {
+            paymasterService: { url: absolutePaymasterUrl() }
+          }
+        }
+      ]
+    });
+    deps.onApproved?.();
+    const callsId = typeof sendResult === "string" ? sendResult : sendResult?.id;
+    if (!callsId) {
+      throw new OwneyError(
+        "SPONSORED_CALLS_NO_ID",
+        "Wallet accepted wallet_sendCalls but returned no calls id.",
+        { chainId }
+      );
+    }
+    for (let attempt = 0; attempt < maxPolls; attempt += 1) {
+      const status = await deps.provider.request({
+        method: "wallet_getCallsStatus",
+        params: [callsId]
+      });
+      const txHash = status?.receipts?.[0]?.transactionHash;
+      if (txHash) return txHash;
+      if (pollIntervalMs > 0) {
+        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+      }
+    }
+    throw new OwneyError(
+      "SPONSORED_CALLS_NO_RECEIPT",
+      `No receipt for calls ${callsId} after ${maxPolls} polls; the deposit may still settle.`,
+      { chainId, callsId }
+    );
+  };
+}
+
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -2516,12 +2421,15 @@ var OwneySDK = class {
   referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
+  paymasterServiceUrl;
+  cachedSponsoredCallsCallbacks = /* @__PURE__ */ new Map();
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
     if (config.debug) setOwneyDebug(true);
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
+    this.paymasterServiceUrl = config.paymasterServiceUrl;
     this.referralSource = config.referralSource;
   }
   /**
@@ -2544,6 +2452,7 @@ var OwneySDK = class {
     this.state = { provider, walletAddress, chainId: null };
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
+    this.cachedSponsoredCallsCallbacks.clear();
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -2558,6 +2467,7 @@ var OwneySDK = class {
     this.state = null;
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
+    this.cachedSponsoredCallsCallbacks.clear();
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -2620,14 +2530,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem5.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem6.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem5.custom)(provider)
+        transport: (0, import_viem6.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem5.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem6.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem5.custom)(provider)
+        transport: (0, import_viem6.custom)(provider)
       })
     });
     if (!onApproved) this.cachedSponsoredCallback = callback;
@@ -2639,6 +2549,26 @@ var OwneySDK = class {
    * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
    * `PermitTransferFrom` instead of an EIP-3009 authorization.
    */
+  getDefaultSponsoredCallsCallback(asset, onApproved) {
+    const cached = this.cachedSponsoredCallsCallbacks.get(asset);
+    if (!onApproved && cached) return cached;
+    const provider = this.requireConnectedProvider();
+    const callback = makeSponsoredCallsCallback({
+      provider,
+      ownerAddress: this.state.walletAddress,
+      paymasterServiceUrl: this.paymasterServiceUrl,
+      onApproved,
+      tokenAddressByChain: asset === "WETH" ? SPONSORED_WETH_BY_CHAIN : SPONSORED_USDC_BY_CHAIN
+    });
+    if (!onApproved) this.cachedSponsoredCallsCallbacks.set(asset, callback);
+    return callback;
+  }
+  /**
+   * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
+   * callback used when the caller omits `depositCallback` for a WETH deposit.
+   * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
+   * `PermitTransferFrom` instead of an EIP-3009 authorization.
+   */
   getDefaultWethSponsoredCallback(onApproved) {
     if (!onApproved && this.cachedWethSponsoredCallback)
       return this.cachedWethSponsoredCallback;
@@ -2653,14 +2583,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem5.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem6.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem5.custom)(provider)
+        transport: (0, import_viem6.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem5.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem6.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem5.custom)(provider)
+        transport: (0, import_viem6.custom)(provider)
       })
     });
     if (!onApproved) this.cachedWethSponsoredCallback = callback;
@@ -2861,7 +2791,7 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
-    const effectiveCallback = depositCallback ?? (asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
+    const effectiveCallback = depositCallback ?? (this.paymasterServiceUrl ? this.getDefaultSponsoredCallsCallback(asset, onApproved) : asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(
@@ -3504,10 +3434,10 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
-    const wallet = (0, import_viem5.createWalletClient)({
+    const wallet = (0, import_viem6.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem5.custom)(provider)
+      transport: (0, import_viem6.custom)(provider)
     });
     const hash = await wallet.writeContract({
       address: token,
@@ -3517,9 +3447,9 @@ var OwneySDK = class {
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId]
     });
-    const publicClient = (0, import_viem5.createPublicClient)({
+    const publicClient = (0, import_viem6.createPublicClient)({
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem5.custom)(provider)
+      transport: (0, import_viem6.custom)(provider)
     });
     const receipt = await publicClient.waitForTransactionReceipt({
       hash,
@@ -3628,7 +3558,7 @@ var OwneySDK = class {
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem6 = require("viem");
+var import_viem7 = require("viem");
 var import_siwe = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -3755,7 +3685,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe.SiweMessage({
-          address: (0, import_viem6.getAddress)(accountAddress),
+          address: (0, import_viem7.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,

package/dist/index.d.cts

@@ -30,6 +30,17 @@ interface OwneySDKConfig {
      * already-deployed app: set `globalThis.__OWNEY_DEBUG__ = true` in devtools.
      */
     debug?: boolean;
+    /**
+     * Absolute URL of an ERC-7677 paymaster service. When set, deposits go out as
+     * an EIP-5792 `wallet_sendCalls` with `capabilities.paymasterService`, so a
+     * wallet that advertises sponsorship pays no native gas — the case EIP-3009
+     * cannot serve, because USDC verifies it with `ecrecover` and a smart account
+     * signs via ERC-1271.
+     *
+     * MUST be absolute: the wallet fetches this URL itself, so a relative path is
+     * unresolvable. Omit it and every rail behaves exactly as before.
+     */
+    paymasterServiceUrl?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -180,21 +191,6 @@ interface OwneyPosition {
      *  response later; undefined until then. */
     liquidity?: number;
 }
-/**
- * Funds that have landed in the agent's wallet but are not yet deployed into a
- * protocol. Sourced from Zyfai `staleBalances[].isPending`. Absent when nothing
- * is pending, and for agents that do not report it (sail).
- */
-interface OwneyPendingAllocation {
-    /** Deliberately loose (not OwneySupportedChainId) because Zyfai reports balances on unsupported chains. */
-    chainId: number;
-    /** Raw agent symbol, not normalized to OwneySupportedTokens; carries Zyfai's casing and "eth" alias for WETH. */
-    asset: string;
-    /** Decimal string, consistent with `OwneyToken.amount`. */
-    amount: string;
-    /** ISO timestamp from Zyfai's `updatedAt`, when the payload carries one. */
-    since?: string;
-}
 interface AgentBalance {
     smartWallet?: `0x${string}`;
     totalBalance: string;
@@ -206,8 +202,6 @@ interface AgentBalance {
      * them (zyfai). Omitted for agents that don't expose positions (sail).
      */
     positions?: OwneyPosition[];
-    /** Funds received but not yet deployed. Omitted when nothing is pending. */
-    pendingAllocations?: OwneyPendingAllocation[];
 }
 interface OwneyBalances {
     totalBalance: string;
@@ -410,6 +404,8 @@ declare class OwneySDK {
     private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
+    private paymasterServiceUrl?;
+    private cachedSponsoredCallsCallbacks;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -450,6 +446,13 @@ declare class OwneySDK {
      * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
      * `PermitTransferFrom` instead of an EIP-3009 authorization.
      */
+    private getDefaultSponsoredCallsCallback;
+    /**
+     * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
+     * callback used when the caller omits `depositCallback` for a WETH deposit.
+     * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
+     * `PermitTransferFrom` instead of an EIP-3009 authorization.
+     */
     private getDefaultWethSponsoredCallback;
     private getAgent;
     private getActiveAgents;
@@ -626,7 +629,7 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.d.ts

@@ -30,6 +30,17 @@ interface OwneySDKConfig {
      * already-deployed app: set `globalThis.__OWNEY_DEBUG__ = true` in devtools.
      */
     debug?: boolean;
+    /**
+     * Absolute URL of an ERC-7677 paymaster service. When set, deposits go out as
+     * an EIP-5792 `wallet_sendCalls` with `capabilities.paymasterService`, so a
+     * wallet that advertises sponsorship pays no native gas — the case EIP-3009
+     * cannot serve, because USDC verifies it with `ecrecover` and a smart account
+     * signs via ERC-1271.
+     *
+     * MUST be absolute: the wallet fetches this URL itself, so a relative path is
+     * unresolvable. Omit it and every rail behaves exactly as before.
+     */
+    paymasterServiceUrl?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -180,21 +191,6 @@ interface OwneyPosition {
      *  response later; undefined until then. */
     liquidity?: number;
 }
-/**
- * Funds that have landed in the agent's wallet but are not yet deployed into a
- * protocol. Sourced from Zyfai `staleBalances[].isPending`. Absent when nothing
- * is pending, and for agents that do not report it (sail).
- */
-interface OwneyPendingAllocation {
-    /** Deliberately loose (not OwneySupportedChainId) because Zyfai reports balances on unsupported chains. */
-    chainId: number;
-    /** Raw agent symbol, not normalized to OwneySupportedTokens; carries Zyfai's casing and "eth" alias for WETH. */
-    asset: string;
-    /** Decimal string, consistent with `OwneyToken.amount`. */
-    amount: string;
-    /** ISO timestamp from Zyfai's `updatedAt`, when the payload carries one. */
-    since?: string;
-}
 interface AgentBalance {
     smartWallet?: `0x${string}`;
     totalBalance: string;
@@ -206,8 +202,6 @@ interface AgentBalance {
      * them (zyfai). Omitted for agents that don't expose positions (sail).
      */
     positions?: OwneyPosition[];
-    /** Funds received but not yet deployed. Omitted when nothing is pending. */
-    pendingAllocations?: OwneyPendingAllocation[];
 }
 interface OwneyBalances {
     totalBalance: string;
@@ -410,6 +404,8 @@ declare class OwneySDK {
     private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
+    private paymasterServiceUrl?;
+    private cachedSponsoredCallsCallbacks;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -450,6 +446,13 @@ declare class OwneySDK {
      * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
      * `PermitTransferFrom` instead of an EIP-3009 authorization.
      */
+    private getDefaultSponsoredCallsCallback;
+    /**
+     * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
+     * callback used when the caller omits `depositCallback` for a WETH deposit.
+     * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
+     * `PermitTransferFrom` instead of an EIP-3009 authorization.
+     */
     private getDefaultWethSponsoredCallback;
     private getAgent;
     private getActiveAgents;
@@ -626,7 +629,7 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.js

@@ -184,32 +184,6 @@ function resolveChainId(chain) {
   if (Number.isFinite(asNum) && asNum > 0) return asNum;
   return NAME_TO_CHAIN_ID[chain.trim().toLowerCase()] ?? NaN;
 }
-function mapPendingAllocations(raw) {
-  if (!Array.isArray(raw)) return void 0;
-  const pending = [];
-  for (const entry of raw) {
-    if (typeof entry !== "object" || entry === null) continue;
-    const e = entry;
-    if (e.isPending !== true) continue;
-    if (typeof e.chainId !== "number" || !Number.isFinite(e.chainId)) continue;
-    if (typeof e.tokenSymbol !== "string" || e.tokenSymbol === "") continue;
-    if (typeof e.balance !== "string") continue;
-    let amount;
-    try {
-      amount = hexToDecimal(e.balance, tokenDecimals(e.tokenSymbol));
-    } catch {
-      continue;
-    }
-    if (!Number.isFinite(amount) || amount <= 0) continue;
-    pending.push({
-      chainId: e.chainId,
-      asset: e.tokenSymbol,
-      amount: String(amount),
-      ...typeof e.updatedAt === "string" && e.updatedAt !== "" ? { since: e.updatedAt } : {}
-    });
-  }
-  return pending.length > 0 ? pending : void 0;
-}
 function mapBalances(raw, _chainId, smartWallet) {
   const portfolio = raw.portfolio;
   const portfolioByChain = portfolio.portfolioByChain ?? {};
@@ -261,16 +235,12 @@ function mapBalances(raw, _chainId, smartWallet) {
     // structural read keeps it undefined today and auto-populates later.
     liquidity: p.liquidity
   }));
-  const pendingAllocations = mapPendingAllocations(
-    portfolio.staleBalances
-  );
   return {
     smartWallet,
     totalBalance: String(totalBalance),
     totalBalanceAsset: "usdc",
     tokens,
-    positions,
-    ...pendingAllocations ? { pendingAllocations } : {}
+    positions
   };
 }
 function sumTokenValues(tokens) {
@@ -876,12 +846,6 @@ var ZyfaiAgent = class {
   connectedAddress = null;
   connectedChainId = null;
   smartWalletCache = /* @__PURE__ */ new Map();
-  /**
-   * `${eoa}:${chainId}` keys we have already tried createSessionKey for. Guards
-   * against re-running it on every activation/deposit when Zyfai's
-   * `hasActiveSessionKey` does not flip to true — see ensureSessionKey.
-   */
-  sessionKeyAttempts = /* @__PURE__ */ new Set();
   connectAuthPromise = null;
   rpcUrls;
   publicClients = /* @__PURE__ */ new Map();
@@ -1339,74 +1303,10 @@ var ZyfaiAgent = class {
    * recoverable (ensureWalletDeployed tries the other deploy call), but
    * failing the deposit outright is not.
    */
-  /**
-   * Zyfai's own answer to "what kind of wallet is this, and can the agent act on
-   * it", read from the positions payload (`GET /data/position`, which
-   * `getPositions` wraps).
-   *
-   * `predeployed` and `hasActiveSessionKey` are both returned at runtime but
-   * declared on neither `Portfolio` nor their docs, hence the cast. Verified
-   * live: an old wallet reports `{predeployed: false, hasActiveSessionKey:
-   * false}` while a pool wallet reports `{true, true}`.
-   *
-   * Preferred over the SDK's private `isPredeployed`, which is cached from the
-   * login response and can go stale mid-session. Returns an empty object on any
-   * failure so every caller degrades to its own fallback.
-   */
-  async readWalletState(ownerAddress) {
-    try {
-      const { portfolio } = await this.sdk.getPositions(ownerAddress);
-      const raw = portfolio;
-      debugLog("zyfai:onboard", "wallet state from getPositions", {
-        predeployed: raw?.predeployed,
-        hasActiveSessionKey: raw?.hasActiveSessionKey
-      });
-      return {
-        predeployed: raw?.predeployed,
-        hasActiveSessionKey: raw?.hasActiveSessionKey
-      };
-    } catch (error) {
-      console.warn(
-        "[zyfai] getPositions wallet-state read failed (non-fatal):",
-        error instanceof Error ? error.message : String(error)
-      );
-      return {};
-    }
-  }
   async isPredeployedPoolWallet(ownerAddress, smartWallet) {
-    const { predeployed } = await this.readWalletState(ownerAddress);
-    if (typeof predeployed === "boolean") {
-      debugLog(
-        "zyfai:onboard",
-        `wallet class: ${predeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
-        { source: "getPositions.predeployed", predeployed }
-      );
-      return predeployed;
-    }
-    const internals = this.sdk;
-    if (typeof internals.isPredeployed === "boolean") {
-      debugLog(
-        "zyfai:onboard",
-        `wallet class: ${internals.isPredeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
-        {
-          source: "login response (cached)",
-          predeployed: internals.isPredeployed
-        }
-      );
-      return internals.isPredeployed;
-    }
     try {
       const byEoa = await this.sdk.getSmartWalletByEOA(ownerAddress);
-      const isPool = typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
-      debugLog(
-        "zyfai:onboard",
-        `wallet class: ${isPool ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
-        {
-          source: "getSmartWalletByEOA fallback",
-          poolRecord: byEoa?.smartWallet
-        }
-      );
-      return isPool;
+      return typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
     } catch (error) {
       console.warn(
         "[zyfai] getSmartWalletByEOA failed; assuming a legacy wallet:",
@@ -1444,24 +1344,8 @@ var ZyfaiAgent = class {
         ownerAddress,
         chainId
       );
-      debugLog("zyfai:onboard", `activation check on chain ${chainId}`, {
-        smartWallet: wallet.address,
-        isDeployed: wallet.isDeployed
-      });
-      if (!wallet.isDeployed) {
-        debugLog(
-          "zyfai:onboard",
-          "Safe not deployed on this chain; activation does nothing (deposit owns deploys)"
-        );
-        return;
-      }
-      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
-      await this.ensureSessionKey(
-        ownerAddress,
-        chainId,
-        wallet.address,
-        hasActiveSessionKey
-      );
+      if (!wallet.isDeployed) return;
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
     } catch (error) {
       console.warn(
         "[zyfai] session-key check at activation failed (non-fatal):",
@@ -1469,51 +1353,20 @@ var ZyfaiAgent = class {
       );
     }
   }
-  async ensureSessionKey(ownerAddress, chainId, smartWallet, hasActiveSessionKey) {
-    const attemptKey = `${ownerAddress.toLowerCase()}:${chainId}`;
-    if (this.sessionKeyAttempts.has(attemptKey)) {
-      debugLog(
-        "zyfai:onboard",
-        "session key: already attempted this session, skipping",
-        { chainId }
-      );
-      return;
-    }
+  async ensureSessionKey(ownerAddress, chainId, smartWallet) {
     try {
-      if (hasActiveSessionKey === true) {
-        debugLog(
-          "zyfai:onboard",
-          "session key: already on record -> nothing to do",
-          { chainId }
-        );
-        return;
-      }
-      if (hasActiveSessionKey === void 0) {
-        const installed = await this.readSmartSessionsInstalled(
-          chainId,
-          smartWallet
-        );
-        debugLog(
-          "zyfai:onboard",
-          `session key: Zyfai state unavailable; on-chain validator ${installed ? "INSTALLED" : "MISSING"}`,
-          { smartWallet, chainId }
-        );
-        if (installed) return;
-      }
-      this.sessionKeyAttempts.add(attemptKey);
+      const installed = await this.getPublicClient(chainId).readContract({
+        address: smartWallet,
+        abi: ERC7579_IS_MODULE_INSTALLED_ABI,
+        functionName: "isModuleInstalled",
+        // moduleTypeId 1 = validator (ERC-7579)
+        args: [1n, SMART_SESSIONS_VALIDATOR, "0x"]
+      });
+      if (installed) return;
       console.warn(
-        `[zyfai] no session key for ${smartWallet} on chain ${chainId}; creating one so the agent can allocate.`
+        `[zyfai] Safe ${smartWallet} has no smart-sessions validator on chain ${chainId}; creating a session key so the agent can allocate.`
       );
-      debugLog("zyfai:onboard", "session key: calling createSessionKey", {
-        chainId,
-        smartWallet,
-        hasActiveSessionKey
-      });
       await this.sdk.createSessionKey(ownerAddress, chainId);
-      debugLog("zyfai:onboard", "session key: createSessionKey succeeded", {
-        chainId,
-        smartWallet
-      });
     } catch (error) {
       console.warn(
         "[zyfai] createSessionKey skipped (non-fatal):",
@@ -1521,16 +1374,6 @@ var ZyfaiAgent = class {
       );
     }
   }
-  /** Ground truth for "can Zyfai's automation act on this Safe, on this chain". */
-  async readSmartSessionsInstalled(chainId, smartWallet) {
-    return this.getPublicClient(chainId).readContract({
-      address: smartWallet,
-      abi: ERC7579_IS_MODULE_INSTALLED_ABI,
-      functionName: "isModuleInstalled",
-      // moduleTypeId 1 = validator (ERC-7579)
-      args: [1n, SMART_SESSIONS_VALIDATOR, "0x"]
-    });
-  }
   /**
    * Guarantee the user's Safe has code on `chainId` before anything transfers
    * funds into it, and return its address.
@@ -1551,24 +1394,8 @@ var ZyfaiAgent = class {
    */
   async ensureWalletDeployed(ownerAddress, chainId) {
     const wallet = await this.sdk.getSmartWalletAddress(ownerAddress, chainId);
-    debugLog("zyfai:onboard", `--- deposit onboarding, chain ${chainId} ---`, {
-      eoa: ownerAddress,
-      smartWallet: wallet.address,
-      isDeployed: wallet.isDeployed,
-      isOwner: wallet.isOwner
-    });
     if (wallet.isDeployed) {
-      debugLog(
-        "zyfai:onboard",
-        "Safe already has code -> no deploy needed, checking the session key"
-      );
-      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
-      await this.ensureSessionKey(
-        ownerAddress,
-        chainId,
-        wallet.address,
-        hasActiveSessionKey
-      );
+      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
       return wallet.address;
     }
     const poolFirst = await this.isPredeployedPoolWallet(
@@ -1584,27 +1411,14 @@ var ZyfaiAgent = class {
       this.sdk.deploySafe(ownerAddress, chainId, "aggressive", true)
     );
     const [first, second] = poolFirst ? [deployAsPool, deployAsLegacy] : [deployAsLegacy, deployAsPool];
-    debugLog(
-      "zyfai:onboard",
-      `Safe has no code on chain ${chainId} -> deploying via ${poolFirst ? "deployOnChains (pool path)" : "deploySafe(createSessionKey=true) (legacy path)"}`
-    );
     try {
       await first();
-      debugLog(
-        "zyfai:onboard",
-        `${poolFirst ? "deployOnChains" : "deploySafe"} succeeded`
-      );
     } catch (error) {
       console.warn(
         `[zyfai] ${poolFirst ? "deployOnChains" : "deploySafe"} failed on chain ${chainId}; trying the other deploy path:`,
         error instanceof Error ? error.message : String(error)
       );
-      debugLog(
-        "zyfai:onboard",
-        `falling back to ${poolFirst ? "deploySafe (legacy path)" : "deployOnChains (pool path)"}`
-      );
       await second();
-      debugLog("zyfai:onboard", "fallback deploy path succeeded");
     }
     const redeployed = await this.sdk.getSmartWalletAddress(
       ownerAddress,
@@ -2426,6 +2240,97 @@ function makeSponsoredWethCallback(deps) {
   };
 }
 
+// src/lib/sponsored-calls-deposit.ts
+import { encodeFunctionData, erc20Abi, toHex } from "viem";
+var DEFAULT_POLL_INTERVAL_MS = 1500;
+var DEFAULT_MAX_POLLS = 30;
+async function paymasterSupported(provider, owner, chainId) {
+  const caps = await provider.request({
+    method: "wallet_getCapabilities",
+    params: [owner]
+  });
+  const forChain = caps?.[toHex(chainId)] ?? caps?.[String(chainId)];
+  return Boolean(forChain?.paymasterService?.supported);
+}
+function makeSponsoredCallsCallback(deps) {
+  const pollIntervalMs = deps.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const maxPolls = deps.maxPolls ?? DEFAULT_MAX_POLLS;
+  const absolutePaymasterUrl = () => {
+    const configured = deps.paymasterServiceUrl;
+    if (/^https?:\/\//i.test(configured)) return configured;
+    const origin = globalThis.location?.origin;
+    if (!origin) {
+      throw new OwneyError(
+        "SPONSORED_CALLS_UNSUPPORTED",
+        `paymasterServiceUrl "${configured}" is relative and no page origin is available to resolve it.`
+      );
+    }
+    return new URL(configured, origin).toString();
+  };
+  return async (smartWallet, chainId, amount) => {
+    const cid = chainId;
+    const token = deps.tokenAddressByChain[cid];
+    if (!token) {
+      throw new OwneyError(
+        "CHAIN_UNSUPPORTED",
+        `No sponsored token configured for chain ${chainId}`
+      );
+    }
+    if (!await paymasterSupported(deps.provider, deps.ownerAddress, chainId)) {
+      throw new OwneyError(
+        "SPONSORED_CALLS_UNSUPPORTED",
+        `Wallet does not advertise paymasterService on chain ${chainId}.`,
+        { chainId }
+      );
+    }
+    const data = encodeFunctionData({
+      abi: erc20Abi,
+      functionName: "transfer",
+      args: [smartWallet, BigInt(amount)]
+    });
+    const sendResult = await deps.provider.request({
+      method: "wallet_sendCalls",
+      params: [
+        {
+          version: "2.0.0",
+          from: deps.ownerAddress,
+          chainId: toHex(chainId),
+          atomicRequired: false,
+          calls: [{ to: token, value: "0x0", data }],
+          capabilities: {
+            paymasterService: { url: absolutePaymasterUrl() }
+          }
+        }
+      ]
+    });
+    deps.onApproved?.();
+    const callsId = typeof sendResult === "string" ? sendResult : sendResult?.id;
+    if (!callsId) {
+      throw new OwneyError(
+        "SPONSORED_CALLS_NO_ID",
+        "Wallet accepted wallet_sendCalls but returned no calls id.",
+        { chainId }
+      );
+    }
+    for (let attempt = 0; attempt < maxPolls; attempt += 1) {
+      const status = await deps.provider.request({
+        method: "wallet_getCallsStatus",
+        params: [callsId]
+      });
+      const txHash = status?.receipts?.[0]?.transactionHash;
+      if (txHash) return txHash;
+      if (pollIntervalMs > 0) {
+        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+      }
+    }
+    throw new OwneyError(
+      "SPONSORED_CALLS_NO_RECEIPT",
+      `No receipt for calls ${callsId} after ${maxPolls} polls; the deposit may still settle.`,
+      { chainId, callsId }
+    );
+  };
+}
+
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -2487,12 +2392,15 @@ var OwneySDK = class {
   referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
+  paymasterServiceUrl;
+  cachedSponsoredCallsCallbacks = /* @__PURE__ */ new Map();
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
     if (config.debug) setOwneyDebug(true);
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
+    this.paymasterServiceUrl = config.paymasterServiceUrl;
     this.referralSource = config.referralSource;
   }
   /**
@@ -2515,6 +2423,7 @@ var OwneySDK = class {
     this.state = { provider, walletAddress, chainId: null };
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
+    this.cachedSponsoredCallsCallbacks.clear();
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -2529,6 +2438,7 @@ var OwneySDK = class {
     this.state = null;
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
+    this.cachedSponsoredCallsCallbacks.clear();
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -2610,6 +2520,26 @@ var OwneySDK = class {
    * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
    * `PermitTransferFrom` instead of an EIP-3009 authorization.
    */
+  getDefaultSponsoredCallsCallback(asset, onApproved) {
+    const cached = this.cachedSponsoredCallsCallbacks.get(asset);
+    if (!onApproved && cached) return cached;
+    const provider = this.requireConnectedProvider();
+    const callback = makeSponsoredCallsCallback({
+      provider,
+      ownerAddress: this.state.walletAddress,
+      paymasterServiceUrl: this.paymasterServiceUrl,
+      onApproved,
+      tokenAddressByChain: asset === "WETH" ? SPONSORED_WETH_BY_CHAIN : SPONSORED_USDC_BY_CHAIN
+    });
+    if (!onApproved) this.cachedSponsoredCallsCallbacks.set(asset, callback);
+    return callback;
+  }
+  /**
+   * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
+   * callback used when the caller omits `depositCallback` for a WETH deposit.
+   * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
+   * `PermitTransferFrom` instead of an EIP-3009 authorization.
+   */
   getDefaultWethSponsoredCallback(onApproved) {
     if (!onApproved && this.cachedWethSponsoredCallback)
       return this.cachedWethSponsoredCallback;
@@ -2832,7 +2762,7 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
-    const effectiveCallback = depositCallback ?? (asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
+    const effectiveCallback = depositCallback ?? (this.paymasterServiceUrl ? this.getDefaultSponsoredCallsCallback(asset, onApproved) : asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.7.7-beta.4",
+  "version": "0.7.7-beta.5",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",