@owney/sdk 0.7.7-beta.5 → 0.7.7-beta.6

package/dist/index.cjs

@@ -217,6 +217,32 @@ function resolveChainId(chain) {
   if (Number.isFinite(asNum) && asNum > 0) return asNum;
   return NAME_TO_CHAIN_ID[chain.trim().toLowerCase()] ?? NaN;
 }
+function mapPendingAllocations(raw) {
+  if (!Array.isArray(raw)) return void 0;
+  const pending = [];
+  for (const entry of raw) {
+    if (typeof entry !== "object" || entry === null) continue;
+    const e = entry;
+    if (typeof e.chainId !== "number" || !Number.isFinite(e.chainId)) continue;
+    if (typeof e.tokenSymbol !== "string" || e.tokenSymbol === "") continue;
+    if (typeof e.balance !== "string") continue;
+    let amount;
+    try {
+      amount = hexToDecimal(e.balance, tokenDecimals(e.tokenSymbol));
+    } catch {
+      continue;
+    }
+    if (!Number.isFinite(amount) || amount <= 0) continue;
+    pending.push({
+      chainId: e.chainId,
+      asset: e.tokenSymbol,
+      amount: String(amount),
+      isPending: e.isPending === true,
+      ...typeof e.updatedAt === "string" && e.updatedAt !== "" ? { since: e.updatedAt } : {}
+    });
+  }
+  return pending.length > 0 ? pending : void 0;
+}
 function mapBalances(raw, _chainId, smartWallet) {
   const portfolio = raw.portfolio;
   const portfolioByChain = portfolio.portfolioByChain ?? {};
@@ -268,12 +294,16 @@ function mapBalances(raw, _chainId, smartWallet) {
     // structural read keeps it undefined today and auto-populates later.
     liquidity: p.liquidity
   }));
+  const pendingAllocations = mapPendingAllocations(
+    portfolio.staleBalances
+  );
   return {
     smartWallet,
     totalBalance: String(totalBalance),
     totalBalanceAsset: "usdc",
     tokens,
-    positions
+    positions,
+    ...pendingAllocations ? { pendingAllocations } : {}
   };
 }
 function sumTokenValues(tokens) {
@@ -879,6 +909,12 @@ var ZyfaiAgent = class {
   connectedAddress = null;
   connectedChainId = null;
   smartWalletCache = /* @__PURE__ */ new Map();
+  /**
+   * `${eoa}:${chainId}` keys we have already tried createSessionKey for. Guards
+   * against re-running it on every activation/deposit when Zyfai's
+   * `hasActiveSessionKey` does not flip to true — see ensureSessionKey.
+   */
+  sessionKeyAttempts = /* @__PURE__ */ new Set();
   connectAuthPromise = null;
   rpcUrls;
   publicClients = /* @__PURE__ */ new Map();
@@ -1336,10 +1372,74 @@ var ZyfaiAgent = class {
    * recoverable (ensureWalletDeployed tries the other deploy call), but
    * failing the deposit outright is not.
    */
+  /**
+   * Zyfai's own answer to "what kind of wallet is this, and can the agent act on
+   * it", read from the positions payload (`GET /data/position`, which
+   * `getPositions` wraps).
+   *
+   * `predeployed` and `hasActiveSessionKey` are both returned at runtime but
+   * declared on neither `Portfolio` nor their docs, hence the cast. Verified
+   * live: an old wallet reports `{predeployed: false, hasActiveSessionKey:
+   * false}` while a pool wallet reports `{true, true}`.
+   *
+   * Preferred over the SDK's private `isPredeployed`, which is cached from the
+   * login response and can go stale mid-session. Returns an empty object on any
+   * failure so every caller degrades to its own fallback.
+   */
+  async readWalletState(ownerAddress) {
+    try {
+      const { portfolio } = await this.sdk.getPositions(ownerAddress);
+      const raw = portfolio;
+      debugLog("zyfai:onboard", "wallet state from getPositions", {
+        predeployed: raw?.predeployed,
+        hasActiveSessionKey: raw?.hasActiveSessionKey
+      });
+      return {
+        predeployed: raw?.predeployed,
+        hasActiveSessionKey: raw?.hasActiveSessionKey
+      };
+    } catch (error) {
+      console.warn(
+        "[zyfai] getPositions wallet-state read failed (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+      return {};
+    }
+  }
   async isPredeployedPoolWallet(ownerAddress, smartWallet) {
+    const { predeployed } = await this.readWalletState(ownerAddress);
+    if (typeof predeployed === "boolean") {
+      debugLog(
+        "zyfai:onboard",
+        `wallet class: ${predeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
+        { source: "getPositions.predeployed", predeployed }
+      );
+      return predeployed;
+    }
+    const internals = this.sdk;
+    if (typeof internals.isPredeployed === "boolean") {
+      debugLog(
+        "zyfai:onboard",
+        `wallet class: ${internals.isPredeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
+        {
+          source: "login response (cached)",
+          predeployed: internals.isPredeployed
+        }
+      );
+      return internals.isPredeployed;
+    }
     try {
       const byEoa = await this.sdk.getSmartWalletByEOA(ownerAddress);
-      return typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
+      const isPool = typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
+      debugLog(
+        "zyfai:onboard",
+        `wallet class: ${isPool ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
+        {
+          source: "getSmartWalletByEOA fallback",
+          poolRecord: byEoa?.smartWallet
+        }
+      );
+      return isPool;
     } catch (error) {
       console.warn(
         "[zyfai] getSmartWalletByEOA failed; assuming a legacy wallet:",
@@ -1377,8 +1477,24 @@ var ZyfaiAgent = class {
         ownerAddress,
         chainId
       );
-      if (!wallet.isDeployed) return;
-      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+      debugLog("zyfai:onboard", `activation check on chain ${chainId}`, {
+        smartWallet: wallet.address,
+        isDeployed: wallet.isDeployed
+      });
+      if (!wallet.isDeployed) {
+        debugLog(
+          "zyfai:onboard",
+          "Safe not deployed on this chain; activation does nothing (deposit owns deploys)"
+        );
+        return;
+      }
+      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
+      await this.ensureSessionKey(
+        ownerAddress,
+        chainId,
+        wallet.address,
+        hasActiveSessionKey
+      );
     } catch (error) {
       console.warn(
         "[zyfai] session-key check at activation failed (non-fatal):",
@@ -1386,20 +1502,51 @@ var ZyfaiAgent = class {
       );
     }
   }
-  async ensureSessionKey(ownerAddress, chainId, smartWallet) {
+  async ensureSessionKey(ownerAddress, chainId, smartWallet, hasActiveSessionKey) {
+    const attemptKey = `${ownerAddress.toLowerCase()}:${chainId}`;
+    if (this.sessionKeyAttempts.has(attemptKey)) {
+      debugLog(
+        "zyfai:onboard",
+        "session key: already attempted this session, skipping",
+        { chainId }
+      );
+      return;
+    }
     try {
-      const installed = await this.getPublicClient(chainId).readContract({
-        address: smartWallet,
-        abi: ERC7579_IS_MODULE_INSTALLED_ABI,
-        functionName: "isModuleInstalled",
-        // moduleTypeId 1 = validator (ERC-7579)
-        args: [1n, import_sdk.SMART_SESSIONS_VALIDATOR, "0x"]
-      });
-      if (installed) return;
+      if (hasActiveSessionKey === true) {
+        debugLog(
+          "zyfai:onboard",
+          "session key: already on record -> nothing to do",
+          { chainId }
+        );
+        return;
+      }
+      if (hasActiveSessionKey === void 0) {
+        const installed = await this.readSmartSessionsInstalled(
+          chainId,
+          smartWallet
+        );
+        debugLog(
+          "zyfai:onboard",
+          `session key: Zyfai state unavailable; on-chain validator ${installed ? "INSTALLED" : "MISSING"}`,
+          { smartWallet, chainId }
+        );
+        if (installed) return;
+      }
+      this.sessionKeyAttempts.add(attemptKey);
       console.warn(
-        `[zyfai] Safe ${smartWallet} has no smart-sessions validator on chain ${chainId}; creating a session key so the agent can allocate.`
+        `[zyfai] no session key for ${smartWallet} on chain ${chainId}; creating one so the agent can allocate.`
       );
+      debugLog("zyfai:onboard", "session key: calling createSessionKey", {
+        chainId,
+        smartWallet,
+        hasActiveSessionKey
+      });
       await this.sdk.createSessionKey(ownerAddress, chainId);
+      debugLog("zyfai:onboard", "session key: createSessionKey succeeded", {
+        chainId,
+        smartWallet
+      });
     } catch (error) {
       console.warn(
         "[zyfai] createSessionKey skipped (non-fatal):",
@@ -1407,6 +1554,16 @@ var ZyfaiAgent = class {
       );
     }
   }
+  /** Ground truth for "can Zyfai's automation act on this Safe, on this chain". */
+  async readSmartSessionsInstalled(chainId, smartWallet) {
+    return this.getPublicClient(chainId).readContract({
+      address: smartWallet,
+      abi: ERC7579_IS_MODULE_INSTALLED_ABI,
+      functionName: "isModuleInstalled",
+      // moduleTypeId 1 = validator (ERC-7579)
+      args: [1n, import_sdk.SMART_SESSIONS_VALIDATOR, "0x"]
+    });
+  }
   /**
    * Guarantee the user's Safe has code on `chainId` before anything transfers
    * funds into it, and return its address.
@@ -1427,8 +1584,24 @@ var ZyfaiAgent = class {
    */
   async ensureWalletDeployed(ownerAddress, chainId) {
     const wallet = await this.sdk.getSmartWalletAddress(ownerAddress, chainId);
+    debugLog("zyfai:onboard", `--- deposit onboarding, chain ${chainId} ---`, {
+      eoa: ownerAddress,
+      smartWallet: wallet.address,
+      isDeployed: wallet.isDeployed,
+      isOwner: wallet.isOwner
+    });
     if (wallet.isDeployed) {
-      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+      debugLog(
+        "zyfai:onboard",
+        "Safe already has code -> no deploy needed, checking the session key"
+      );
+      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
+      await this.ensureSessionKey(
+        ownerAddress,
+        chainId,
+        wallet.address,
+        hasActiveSessionKey
+      );
       return wallet.address;
     }
     const poolFirst = await this.isPredeployedPoolWallet(
@@ -1444,14 +1617,27 @@ var ZyfaiAgent = class {
       this.sdk.deploySafe(ownerAddress, chainId, "aggressive", true)
     );
     const [first, second] = poolFirst ? [deployAsPool, deployAsLegacy] : [deployAsLegacy, deployAsPool];
+    debugLog(
+      "zyfai:onboard",
+      `Safe has no code on chain ${chainId} -> deploying via ${poolFirst ? "deployOnChains (pool path)" : "deploySafe(createSessionKey=true) (legacy path)"}`
+    );
     try {
       await first();
+      debugLog(
+        "zyfai:onboard",
+        `${poolFirst ? "deployOnChains" : "deploySafe"} succeeded`
+      );
     } catch (error) {
       console.warn(
         `[zyfai] ${poolFirst ? "deployOnChains" : "deploySafe"} failed on chain ${chainId}; trying the other deploy path:`,
         error instanceof Error ? error.message : String(error)
       );
+      debugLog(
+        "zyfai:onboard",
+        `falling back to ${poolFirst ? "deploySafe (legacy path)" : "deployOnChains (pool path)"}`
+      );
       await second();
+      debugLog("zyfai:onboard", "fallback deploy path succeeded");
     }
     const redeployed = await this.sdk.getSmartWalletAddress(
       ownerAddress,
@@ -1839,7 +2025,7 @@ function aggregateApyByChainAndAsset(agentApys, agentBalances) {
 }
 
 // src/client.ts
-var import_viem6 = require("viem");
+var import_viem5 = require("viem");
 var import_chains2 = require("viem/chains");
 
 // src/lib/transfer-auth.ts
@@ -2269,97 +2455,6 @@ function makeSponsoredWethCallback(deps) {
   };
 }
 
-// src/lib/sponsored-calls-deposit.ts
-var import_viem5 = require("viem");
-var DEFAULT_POLL_INTERVAL_MS = 1500;
-var DEFAULT_MAX_POLLS = 30;
-async function paymasterSupported(provider, owner, chainId) {
-  const caps = await provider.request({
-    method: "wallet_getCapabilities",
-    params: [owner]
-  });
-  const forChain = caps?.[(0, import_viem5.toHex)(chainId)] ?? caps?.[String(chainId)];
-  return Boolean(forChain?.paymasterService?.supported);
-}
-function makeSponsoredCallsCallback(deps) {
-  const pollIntervalMs = deps.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const maxPolls = deps.maxPolls ?? DEFAULT_MAX_POLLS;
-  const absolutePaymasterUrl = () => {
-    const configured = deps.paymasterServiceUrl;
-    if (/^https?:\/\//i.test(configured)) return configured;
-    const origin = globalThis.location?.origin;
-    if (!origin) {
-      throw new OwneyError(
-        "SPONSORED_CALLS_UNSUPPORTED",
-        `paymasterServiceUrl "${configured}" is relative and no page origin is available to resolve it.`
-      );
-    }
-    return new URL(configured, origin).toString();
-  };
-  return async (smartWallet, chainId, amount) => {
-    const cid = chainId;
-    const token = deps.tokenAddressByChain[cid];
-    if (!token) {
-      throw new OwneyError(
-        "CHAIN_UNSUPPORTED",
-        `No sponsored token configured for chain ${chainId}`
-      );
-    }
-    if (!await paymasterSupported(deps.provider, deps.ownerAddress, chainId)) {
-      throw new OwneyError(
-        "SPONSORED_CALLS_UNSUPPORTED",
-        `Wallet does not advertise paymasterService on chain ${chainId}.`,
-        { chainId }
-      );
-    }
-    const data = (0, import_viem5.encodeFunctionData)({
-      abi: import_viem5.erc20Abi,
-      functionName: "transfer",
-      args: [smartWallet, BigInt(amount)]
-    });
-    const sendResult = await deps.provider.request({
-      method: "wallet_sendCalls",
-      params: [
-        {
-          version: "2.0.0",
-          from: deps.ownerAddress,
-          chainId: (0, import_viem5.toHex)(chainId),
-          atomicRequired: false,
-          calls: [{ to: token, value: "0x0", data }],
-          capabilities: {
-            paymasterService: { url: absolutePaymasterUrl() }
-          }
-        }
-      ]
-    });
-    deps.onApproved?.();
-    const callsId = typeof sendResult === "string" ? sendResult : sendResult?.id;
-    if (!callsId) {
-      throw new OwneyError(
-        "SPONSORED_CALLS_NO_ID",
-        "Wallet accepted wallet_sendCalls but returned no calls id.",
-        { chainId }
-      );
-    }
-    for (let attempt = 0; attempt < maxPolls; attempt += 1) {
-      const status = await deps.provider.request({
-        method: "wallet_getCallsStatus",
-        params: [callsId]
-      });
-      const txHash = status?.receipts?.[0]?.transactionHash;
-      if (txHash) return txHash;
-      if (pollIntervalMs > 0) {
-        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-      }
-    }
-    throw new OwneyError(
-      "SPONSORED_CALLS_NO_RECEIPT",
-      `No receipt for calls ${callsId} after ${maxPolls} polls; the deposit may still settle.`,
-      { chainId, callsId }
-    );
-  };
-}
-
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -2421,15 +2516,12 @@ var OwneySDK = class {
   referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
-  paymasterServiceUrl;
-  cachedSponsoredCallsCallbacks = /* @__PURE__ */ new Map();
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
     if (config.debug) setOwneyDebug(true);
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
-    this.paymasterServiceUrl = config.paymasterServiceUrl;
     this.referralSource = config.referralSource;
   }
   /**
@@ -2452,7 +2544,6 @@ var OwneySDK = class {
     this.state = { provider, walletAddress, chainId: null };
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
-    this.cachedSponsoredCallsCallbacks.clear();
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -2467,7 +2558,6 @@ var OwneySDK = class {
     this.state = null;
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
-    this.cachedSponsoredCallsCallbacks.clear();
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -2530,14 +2620,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem6.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem5.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem6.custom)(provider)
+        transport: (0, import_viem5.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem6.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem5.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem6.custom)(provider)
+        transport: (0, import_viem5.custom)(provider)
       })
     });
     if (!onApproved) this.cachedSponsoredCallback = callback;
@@ -2549,26 +2639,6 @@ var OwneySDK = class {
    * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
    * `PermitTransferFrom` instead of an EIP-3009 authorization.
    */
-  getDefaultSponsoredCallsCallback(asset, onApproved) {
-    const cached = this.cachedSponsoredCallsCallbacks.get(asset);
-    if (!onApproved && cached) return cached;
-    const provider = this.requireConnectedProvider();
-    const callback = makeSponsoredCallsCallback({
-      provider,
-      ownerAddress: this.state.walletAddress,
-      paymasterServiceUrl: this.paymasterServiceUrl,
-      onApproved,
-      tokenAddressByChain: asset === "WETH" ? SPONSORED_WETH_BY_CHAIN : SPONSORED_USDC_BY_CHAIN
-    });
-    if (!onApproved) this.cachedSponsoredCallsCallbacks.set(asset, callback);
-    return callback;
-  }
-  /**
-   * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
-   * callback used when the caller omits `depositCallback` for a WETH deposit.
-   * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
-   * `PermitTransferFrom` instead of an EIP-3009 authorization.
-   */
   getDefaultWethSponsoredCallback(onApproved) {
     if (!onApproved && this.cachedWethSponsoredCallback)
       return this.cachedWethSponsoredCallback;
@@ -2583,14 +2653,14 @@ var OwneySDK = class {
       // Casts work around viem's chain-narrowed Client vs the generic
       // PublicClient/WalletClient param types — structurally identical at
       // runtime, but the two share a name TS treats as unrelated.
-      getPublicClient: (cid) => (0, import_viem6.createPublicClient)({
+      getPublicClient: (cid) => (0, import_viem5.createPublicClient)({
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem6.custom)(provider)
+        transport: (0, import_viem5.custom)(provider)
       }),
-      getWalletClient: (cid) => (0, import_viem6.createWalletClient)({
+      getWalletClient: (cid) => (0, import_viem5.createWalletClient)({
         account: owner,
         chain: VIEM_CHAIN2[cid],
-        transport: (0, import_viem6.custom)(provider)
+        transport: (0, import_viem5.custom)(provider)
       })
     });
     if (!onApproved) this.cachedWethSponsoredCallback = callback;
@@ -2791,7 +2861,7 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
-    const effectiveCallback = depositCallback ?? (this.paymasterServiceUrl ? this.getDefaultSponsoredCallsCallback(asset, onApproved) : asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
+    const effectiveCallback = depositCallback ?? (asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(
@@ -3434,10 +3504,10 @@ var OwneySDK = class {
       );
     }
     const provider = this.requireConnectedProvider();
-    const wallet = (0, import_viem6.createWalletClient)({
+    const wallet = (0, import_viem5.createWalletClient)({
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem6.custom)(provider)
+      transport: (0, import_viem5.custom)(provider)
     });
     const hash = await wallet.writeContract({
       address: token,
@@ -3447,9 +3517,9 @@ var OwneySDK = class {
       account: state.walletAddress,
       chain: VIEM_CHAIN2[chainId]
     });
-    const publicClient = (0, import_viem6.createPublicClient)({
+    const publicClient = (0, import_viem5.createPublicClient)({
       chain: VIEM_CHAIN2[chainId],
-      transport: (0, import_viem6.custom)(provider)
+      transport: (0, import_viem5.custom)(provider)
     });
     const receipt = await publicClient.waitForTransactionReceipt({
       hash,
@@ -3558,7 +3628,7 @@ var OwneySDK = class {
 };
 
 // src/agents/zyfai/zyfai.siwx.ts
-var import_viem7 = require("viem");
+var import_viem6 = require("viem");
 var import_siwe = require("siwe");
 var import_sdk2 = require("@zyfai/sdk");
 
@@ -3685,7 +3755,7 @@ function buildSIWXConfig(deps) {
       issuedAt,
       toString() {
         return new import_siwe.SiweMessage({
-          address: (0, import_viem7.getAddress)(accountAddress),
+          address: (0, import_viem6.getAddress)(accountAddress),
           chainId: numericChainId(chainId),
           domain,
           uri,

package/dist/index.d.cts

@@ -30,17 +30,6 @@ interface OwneySDKConfig {
      * already-deployed app: set `globalThis.__OWNEY_DEBUG__ = true` in devtools.
      */
     debug?: boolean;
-    /**
-     * Absolute URL of an ERC-7677 paymaster service. When set, deposits go out as
-     * an EIP-5792 `wallet_sendCalls` with `capabilities.paymasterService`, so a
-     * wallet that advertises sponsorship pays no native gas — the case EIP-3009
-     * cannot serve, because USDC verifies it with `ecrecover` and a smart account
-     * signs via ERC-1271.
-     *
-     * MUST be absolute: the wallet fetches this URL itself, so a relative path is
-     * unresolvable. Omit it and every rail behaves exactly as before.
-     */
-    paymasterServiceUrl?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -191,6 +180,29 @@ interface OwneyPosition {
      *  response later; undefined until then. */
     liquidity?: number;
 }
+/**
+ * Funds that have landed in the agent's wallet but are not yet deployed into a
+ * protocol. Sourced from Zyfai `staleBalances[].isPending`. Absent when nothing
+ * is pending, and for agents that do not report it (sail).
+ */
+interface OwneyPendingAllocation {
+    /** Deliberately loose (not OwneySupportedChainId) because Zyfai reports balances on unsupported chains. */
+    chainId: number;
+    /** Raw agent symbol, not normalized to OwneySupportedTokens; carries Zyfai's casing and "eth" alias for WETH. */
+    asset: string;
+    /** Decimal string, consistent with `OwneyToken.amount`. */
+    amount: string;
+    /**
+     * Zyfai's own `isPending` flag. TRUE means it is actively allocating. FALSE
+     * does NOT mean the entry is stale or safe to ignore: Zyfai flips it within
+     * minutes but leaves funds listed here indefinitely when it has not indexed
+     * the pool they landed in. Entries are surfaced regardless of this flag; use
+     * it only to decide wording, never to decide whether the money counts.
+     */
+    isPending: boolean;
+    /** ISO timestamp from Zyfai's `updatedAt`, when the payload carries one. */
+    since?: string;
+}
 interface AgentBalance {
     smartWallet?: `0x${string}`;
     totalBalance: string;
@@ -202,6 +214,8 @@ interface AgentBalance {
      * them (zyfai). Omitted for agents that don't expose positions (sail).
      */
     positions?: OwneyPosition[];
+    /** Funds received but not yet deployed. Omitted when nothing is pending. */
+    pendingAllocations?: OwneyPendingAllocation[];
 }
 interface OwneyBalances {
     totalBalance: string;
@@ -404,8 +418,6 @@ declare class OwneySDK {
     private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
-    private paymasterServiceUrl?;
-    private cachedSponsoredCallsCallbacks;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -446,13 +458,6 @@ declare class OwneySDK {
      * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
      * `PermitTransferFrom` instead of an EIP-3009 authorization.
      */
-    private getDefaultSponsoredCallsCallback;
-    /**
-     * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
-     * callback used when the caller omits `depositCallback` for a WETH deposit.
-     * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
-     * `PermitTransferFrom` instead of an EIP-3009 authorization.
-     */
     private getDefaultWethSponsoredCallback;
     private getAgent;
     private getActiveAgents;
@@ -629,7 +634,7 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.d.ts

@@ -30,17 +30,6 @@ interface OwneySDKConfig {
      * already-deployed app: set `globalThis.__OWNEY_DEBUG__ = true` in devtools.
      */
     debug?: boolean;
-    /**
-     * Absolute URL of an ERC-7677 paymaster service. When set, deposits go out as
-     * an EIP-5792 `wallet_sendCalls` with `capabilities.paymasterService`, so a
-     * wallet that advertises sponsorship pays no native gas — the case EIP-3009
-     * cannot serve, because USDC verifies it with `ecrecover` and a smart account
-     * signs via ERC-1271.
-     *
-     * MUST be absolute: the wallet fetches this URL itself, so a relative path is
-     * unresolvable. Omit it and every rail behaves exactly as before.
-     */
-    paymasterServiceUrl?: string;
 }
 interface ConnectionState {
     provider: any;
@@ -191,6 +180,29 @@ interface OwneyPosition {
      *  response later; undefined until then. */
     liquidity?: number;
 }
+/**
+ * Funds that have landed in the agent's wallet but are not yet deployed into a
+ * protocol. Sourced from Zyfai `staleBalances[].isPending`. Absent when nothing
+ * is pending, and for agents that do not report it (sail).
+ */
+interface OwneyPendingAllocation {
+    /** Deliberately loose (not OwneySupportedChainId) because Zyfai reports balances on unsupported chains. */
+    chainId: number;
+    /** Raw agent symbol, not normalized to OwneySupportedTokens; carries Zyfai's casing and "eth" alias for WETH. */
+    asset: string;
+    /** Decimal string, consistent with `OwneyToken.amount`. */
+    amount: string;
+    /**
+     * Zyfai's own `isPending` flag. TRUE means it is actively allocating. FALSE
+     * does NOT mean the entry is stale or safe to ignore: Zyfai flips it within
+     * minutes but leaves funds listed here indefinitely when it has not indexed
+     * the pool they landed in. Entries are surfaced regardless of this flag; use
+     * it only to decide wording, never to decide whether the money counts.
+     */
+    isPending: boolean;
+    /** ISO timestamp from Zyfai's `updatedAt`, when the payload carries one. */
+    since?: string;
+}
 interface AgentBalance {
     smartWallet?: `0x${string}`;
     totalBalance: string;
@@ -202,6 +214,8 @@ interface AgentBalance {
      * them (zyfai). Omitted for agents that don't expose positions (sail).
      */
     positions?: OwneyPosition[];
+    /** Funds received but not yet deployed. Omitted when nothing is pending. */
+    pendingAllocations?: OwneyPendingAllocation[];
 }
 interface OwneyBalances {
     totalBalance: string;
@@ -404,8 +418,6 @@ declare class OwneySDK {
     private referralSource?;
     private cachedSponsoredCallback;
     private cachedWethSponsoredCallback;
-    private paymasterServiceUrl?;
-    private cachedSponsoredCallsCallbacks;
     private initializingAgentsPromise;
     constructor(config: OwneySDKConfig);
     /**
@@ -446,13 +458,6 @@ declare class OwneySDK {
      * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
      * `PermitTransferFrom` instead of an EIP-3009 authorization.
      */
-    private getDefaultSponsoredCallsCallback;
-    /**
-     * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
-     * callback used when the caller omits `depositCallback` for a WETH deposit.
-     * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
-     * `PermitTransferFrom` instead of an EIP-3009 authorization.
-     */
     private getDefaultWethSponsoredCallback;
     private getAgent;
     private getActiveAgents;
@@ -629,7 +634,7 @@ declare class OwneySDK {
     getAllocationApy({ agentId, }?: AllocationApyOptions): Promise<OwneyAllocationApy>;
 }
 
-type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "SPONSORED_CALLS_UNSUPPORTED" | "SPONSORED_CALLS_NO_ID" | "SPONSORED_CALLS_NO_RECEIPT" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
+type OwneyErrorCode = "NOT_CONNECTED" | "NO_ACTIVE_CHAIN" | "WALLET_NO_ACCOUNTS" | "WALLET_ADDRESS_REQUIRED" | "WALLET_NOT_DEPLOYED" | "AGENT_NOT_FOUND" | "AGENT_CHAIN_INCOMPATIBLE" | "AGENT_EMPTY_LIST" | "AGENT_DISABLED" | "CHAIN_UNSUPPORTED" | "CHAIN_NO_COMPATIBLE_AGENTS" | "CHAIN_MISMATCH" | "ASSET_UNSUPPORTED" | "ASSET_NO_COMPATIBLE_AGENTS" | "DEPOSIT_AMOUNT_BELOW_MINIMUM" | "DEPOSIT_CALLBACK_REQUIRED" | "DEPOSIT_CALLBACK_INVALID" | "DEPOSIT_NO_PERMITTED_TOKENS" | "DEPOSIT_INSUFFICIENT_BALANCE" | "WITHDRAW_NO_PERMITTED_TOKENS" | "WITHDRAW_INSUFFICIENT_BALANCE" | "WITHDRAW_ALL_FAILED" | "WITHDRAW_PARTIAL_FAILURE" | "WITHDRAW_FAILED" | "API_ROUTING_ERROR" | "API_ROUTING_FAILED" | "API_SAIL_ERROR" | "API_SAIL_TIMEOUT" | "API_NO_AGENTS" | "SPONSOR_REQUEST_FAILED" | "PERMIT2_APPROVAL_REQUIRED" | "BALANCE_ALL_FAILED" | "ALLOCATION_ALL_FAILED" | "VALIDATION_INVALID_DAYS";
 declare class OwneyError extends Error {
     readonly code: OwneyErrorCode;
     readonly details?: Record<string, unknown>;

package/dist/index.js

@@ -184,6 +184,32 @@ function resolveChainId(chain) {
   if (Number.isFinite(asNum) && asNum > 0) return asNum;
   return NAME_TO_CHAIN_ID[chain.trim().toLowerCase()] ?? NaN;
 }
+function mapPendingAllocations(raw) {
+  if (!Array.isArray(raw)) return void 0;
+  const pending = [];
+  for (const entry of raw) {
+    if (typeof entry !== "object" || entry === null) continue;
+    const e = entry;
+    if (typeof e.chainId !== "number" || !Number.isFinite(e.chainId)) continue;
+    if (typeof e.tokenSymbol !== "string" || e.tokenSymbol === "") continue;
+    if (typeof e.balance !== "string") continue;
+    let amount;
+    try {
+      amount = hexToDecimal(e.balance, tokenDecimals(e.tokenSymbol));
+    } catch {
+      continue;
+    }
+    if (!Number.isFinite(amount) || amount <= 0) continue;
+    pending.push({
+      chainId: e.chainId,
+      asset: e.tokenSymbol,
+      amount: String(amount),
+      isPending: e.isPending === true,
+      ...typeof e.updatedAt === "string" && e.updatedAt !== "" ? { since: e.updatedAt } : {}
+    });
+  }
+  return pending.length > 0 ? pending : void 0;
+}
 function mapBalances(raw, _chainId, smartWallet) {
   const portfolio = raw.portfolio;
   const portfolioByChain = portfolio.portfolioByChain ?? {};
@@ -235,12 +261,16 @@ function mapBalances(raw, _chainId, smartWallet) {
     // structural read keeps it undefined today and auto-populates later.
     liquidity: p.liquidity
   }));
+  const pendingAllocations = mapPendingAllocations(
+    portfolio.staleBalances
+  );
   return {
     smartWallet,
     totalBalance: String(totalBalance),
     totalBalanceAsset: "usdc",
     tokens,
-    positions
+    positions,
+    ...pendingAllocations ? { pendingAllocations } : {}
   };
 }
 function sumTokenValues(tokens) {
@@ -846,6 +876,12 @@ var ZyfaiAgent = class {
   connectedAddress = null;
   connectedChainId = null;
   smartWalletCache = /* @__PURE__ */ new Map();
+  /**
+   * `${eoa}:${chainId}` keys we have already tried createSessionKey for. Guards
+   * against re-running it on every activation/deposit when Zyfai's
+   * `hasActiveSessionKey` does not flip to true — see ensureSessionKey.
+   */
+  sessionKeyAttempts = /* @__PURE__ */ new Set();
   connectAuthPromise = null;
   rpcUrls;
   publicClients = /* @__PURE__ */ new Map();
@@ -1303,10 +1339,74 @@ var ZyfaiAgent = class {
    * recoverable (ensureWalletDeployed tries the other deploy call), but
    * failing the deposit outright is not.
    */
+  /**
+   * Zyfai's own answer to "what kind of wallet is this, and can the agent act on
+   * it", read from the positions payload (`GET /data/position`, which
+   * `getPositions` wraps).
+   *
+   * `predeployed` and `hasActiveSessionKey` are both returned at runtime but
+   * declared on neither `Portfolio` nor their docs, hence the cast. Verified
+   * live: an old wallet reports `{predeployed: false, hasActiveSessionKey:
+   * false}` while a pool wallet reports `{true, true}`.
+   *
+   * Preferred over the SDK's private `isPredeployed`, which is cached from the
+   * login response and can go stale mid-session. Returns an empty object on any
+   * failure so every caller degrades to its own fallback.
+   */
+  async readWalletState(ownerAddress) {
+    try {
+      const { portfolio } = await this.sdk.getPositions(ownerAddress);
+      const raw = portfolio;
+      debugLog("zyfai:onboard", "wallet state from getPositions", {
+        predeployed: raw?.predeployed,
+        hasActiveSessionKey: raw?.hasActiveSessionKey
+      });
+      return {
+        predeployed: raw?.predeployed,
+        hasActiveSessionKey: raw?.hasActiveSessionKey
+      };
+    } catch (error) {
+      console.warn(
+        "[zyfai] getPositions wallet-state read failed (non-fatal):",
+        error instanceof Error ? error.message : String(error)
+      );
+      return {};
+    }
+  }
   async isPredeployedPoolWallet(ownerAddress, smartWallet) {
+    const { predeployed } = await this.readWalletState(ownerAddress);
+    if (typeof predeployed === "boolean") {
+      debugLog(
+        "zyfai:onboard",
+        `wallet class: ${predeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
+        { source: "getPositions.predeployed", predeployed }
+      );
+      return predeployed;
+    }
+    const internals = this.sdk;
+    if (typeof internals.isPredeployed === "boolean") {
+      debugLog(
+        "zyfai:onboard",
+        `wallet class: ${internals.isPredeployed ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
+        {
+          source: "login response (cached)",
+          predeployed: internals.isPredeployed
+        }
+      );
+      return internals.isPredeployed;
+    }
     try {
       const byEoa = await this.sdk.getSmartWalletByEOA(ownerAddress);
-      return typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
+      const isPool = typeof byEoa?.smartWallet === "string" && byEoa.smartWallet.toLowerCase() === smartWallet.toLowerCase();
+      debugLog(
+        "zyfai:onboard",
+        `wallet class: ${isPool ? "PREDEPLOYED (new flow)" : "OLD (legacy flow)"}`,
+        {
+          source: "getSmartWalletByEOA fallback",
+          poolRecord: byEoa?.smartWallet
+        }
+      );
+      return isPool;
     } catch (error) {
       console.warn(
         "[zyfai] getSmartWalletByEOA failed; assuming a legacy wallet:",
@@ -1344,8 +1444,24 @@ var ZyfaiAgent = class {
         ownerAddress,
         chainId
       );
-      if (!wallet.isDeployed) return;
-      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+      debugLog("zyfai:onboard", `activation check on chain ${chainId}`, {
+        smartWallet: wallet.address,
+        isDeployed: wallet.isDeployed
+      });
+      if (!wallet.isDeployed) {
+        debugLog(
+          "zyfai:onboard",
+          "Safe not deployed on this chain; activation does nothing (deposit owns deploys)"
+        );
+        return;
+      }
+      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
+      await this.ensureSessionKey(
+        ownerAddress,
+        chainId,
+        wallet.address,
+        hasActiveSessionKey
+      );
     } catch (error) {
       console.warn(
         "[zyfai] session-key check at activation failed (non-fatal):",
@@ -1353,20 +1469,51 @@ var ZyfaiAgent = class {
       );
     }
   }
-  async ensureSessionKey(ownerAddress, chainId, smartWallet) {
+  async ensureSessionKey(ownerAddress, chainId, smartWallet, hasActiveSessionKey) {
+    const attemptKey = `${ownerAddress.toLowerCase()}:${chainId}`;
+    if (this.sessionKeyAttempts.has(attemptKey)) {
+      debugLog(
+        "zyfai:onboard",
+        "session key: already attempted this session, skipping",
+        { chainId }
+      );
+      return;
+    }
     try {
-      const installed = await this.getPublicClient(chainId).readContract({
-        address: smartWallet,
-        abi: ERC7579_IS_MODULE_INSTALLED_ABI,
-        functionName: "isModuleInstalled",
-        // moduleTypeId 1 = validator (ERC-7579)
-        args: [1n, SMART_SESSIONS_VALIDATOR, "0x"]
-      });
-      if (installed) return;
+      if (hasActiveSessionKey === true) {
+        debugLog(
+          "zyfai:onboard",
+          "session key: already on record -> nothing to do",
+          { chainId }
+        );
+        return;
+      }
+      if (hasActiveSessionKey === void 0) {
+        const installed = await this.readSmartSessionsInstalled(
+          chainId,
+          smartWallet
+        );
+        debugLog(
+          "zyfai:onboard",
+          `session key: Zyfai state unavailable; on-chain validator ${installed ? "INSTALLED" : "MISSING"}`,
+          { smartWallet, chainId }
+        );
+        if (installed) return;
+      }
+      this.sessionKeyAttempts.add(attemptKey);
       console.warn(
-        `[zyfai] Safe ${smartWallet} has no smart-sessions validator on chain ${chainId}; creating a session key so the agent can allocate.`
+        `[zyfai] no session key for ${smartWallet} on chain ${chainId}; creating one so the agent can allocate.`
       );
+      debugLog("zyfai:onboard", "session key: calling createSessionKey", {
+        chainId,
+        smartWallet,
+        hasActiveSessionKey
+      });
       await this.sdk.createSessionKey(ownerAddress, chainId);
+      debugLog("zyfai:onboard", "session key: createSessionKey succeeded", {
+        chainId,
+        smartWallet
+      });
     } catch (error) {
       console.warn(
         "[zyfai] createSessionKey skipped (non-fatal):",
@@ -1374,6 +1521,16 @@ var ZyfaiAgent = class {
       );
     }
   }
+  /** Ground truth for "can Zyfai's automation act on this Safe, on this chain". */
+  async readSmartSessionsInstalled(chainId, smartWallet) {
+    return this.getPublicClient(chainId).readContract({
+      address: smartWallet,
+      abi: ERC7579_IS_MODULE_INSTALLED_ABI,
+      functionName: "isModuleInstalled",
+      // moduleTypeId 1 = validator (ERC-7579)
+      args: [1n, SMART_SESSIONS_VALIDATOR, "0x"]
+    });
+  }
   /**
    * Guarantee the user's Safe has code on `chainId` before anything transfers
    * funds into it, and return its address.
@@ -1394,8 +1551,24 @@ var ZyfaiAgent = class {
    */
   async ensureWalletDeployed(ownerAddress, chainId) {
     const wallet = await this.sdk.getSmartWalletAddress(ownerAddress, chainId);
+    debugLog("zyfai:onboard", `--- deposit onboarding, chain ${chainId} ---`, {
+      eoa: ownerAddress,
+      smartWallet: wallet.address,
+      isDeployed: wallet.isDeployed,
+      isOwner: wallet.isOwner
+    });
     if (wallet.isDeployed) {
-      await this.ensureSessionKey(ownerAddress, chainId, wallet.address);
+      debugLog(
+        "zyfai:onboard",
+        "Safe already has code -> no deploy needed, checking the session key"
+      );
+      const { hasActiveSessionKey } = await this.readWalletState(ownerAddress);
+      await this.ensureSessionKey(
+        ownerAddress,
+        chainId,
+        wallet.address,
+        hasActiveSessionKey
+      );
       return wallet.address;
     }
     const poolFirst = await this.isPredeployedPoolWallet(
@@ -1411,14 +1584,27 @@ var ZyfaiAgent = class {
       this.sdk.deploySafe(ownerAddress, chainId, "aggressive", true)
     );
     const [first, second] = poolFirst ? [deployAsPool, deployAsLegacy] : [deployAsLegacy, deployAsPool];
+    debugLog(
+      "zyfai:onboard",
+      `Safe has no code on chain ${chainId} -> deploying via ${poolFirst ? "deployOnChains (pool path)" : "deploySafe(createSessionKey=true) (legacy path)"}`
+    );
     try {
       await first();
+      debugLog(
+        "zyfai:onboard",
+        `${poolFirst ? "deployOnChains" : "deploySafe"} succeeded`
+      );
     } catch (error) {
       console.warn(
         `[zyfai] ${poolFirst ? "deployOnChains" : "deploySafe"} failed on chain ${chainId}; trying the other deploy path:`,
         error instanceof Error ? error.message : String(error)
       );
+      debugLog(
+        "zyfai:onboard",
+        `falling back to ${poolFirst ? "deploySafe (legacy path)" : "deployOnChains (pool path)"}`
+      );
       await second();
+      debugLog("zyfai:onboard", "fallback deploy path succeeded");
     }
     const redeployed = await this.sdk.getSmartWalletAddress(
       ownerAddress,
@@ -2240,97 +2426,6 @@ function makeSponsoredWethCallback(deps) {
   };
 }
 
-// src/lib/sponsored-calls-deposit.ts
-import { encodeFunctionData, erc20Abi, toHex } from "viem";
-var DEFAULT_POLL_INTERVAL_MS = 1500;
-var DEFAULT_MAX_POLLS = 30;
-async function paymasterSupported(provider, owner, chainId) {
-  const caps = await provider.request({
-    method: "wallet_getCapabilities",
-    params: [owner]
-  });
-  const forChain = caps?.[toHex(chainId)] ?? caps?.[String(chainId)];
-  return Boolean(forChain?.paymasterService?.supported);
-}
-function makeSponsoredCallsCallback(deps) {
-  const pollIntervalMs = deps.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const maxPolls = deps.maxPolls ?? DEFAULT_MAX_POLLS;
-  const absolutePaymasterUrl = () => {
-    const configured = deps.paymasterServiceUrl;
-    if (/^https?:\/\//i.test(configured)) return configured;
-    const origin = globalThis.location?.origin;
-    if (!origin) {
-      throw new OwneyError(
-        "SPONSORED_CALLS_UNSUPPORTED",
-        `paymasterServiceUrl "${configured}" is relative and no page origin is available to resolve it.`
-      );
-    }
-    return new URL(configured, origin).toString();
-  };
-  return async (smartWallet, chainId, amount) => {
-    const cid = chainId;
-    const token = deps.tokenAddressByChain[cid];
-    if (!token) {
-      throw new OwneyError(
-        "CHAIN_UNSUPPORTED",
-        `No sponsored token configured for chain ${chainId}`
-      );
-    }
-    if (!await paymasterSupported(deps.provider, deps.ownerAddress, chainId)) {
-      throw new OwneyError(
-        "SPONSORED_CALLS_UNSUPPORTED",
-        `Wallet does not advertise paymasterService on chain ${chainId}.`,
-        { chainId }
-      );
-    }
-    const data = encodeFunctionData({
-      abi: erc20Abi,
-      functionName: "transfer",
-      args: [smartWallet, BigInt(amount)]
-    });
-    const sendResult = await deps.provider.request({
-      method: "wallet_sendCalls",
-      params: [
-        {
-          version: "2.0.0",
-          from: deps.ownerAddress,
-          chainId: toHex(chainId),
-          atomicRequired: false,
-          calls: [{ to: token, value: "0x0", data }],
-          capabilities: {
-            paymasterService: { url: absolutePaymasterUrl() }
-          }
-        }
-      ]
-    });
-    deps.onApproved?.();
-    const callsId = typeof sendResult === "string" ? sendResult : sendResult?.id;
-    if (!callsId) {
-      throw new OwneyError(
-        "SPONSORED_CALLS_NO_ID",
-        "Wallet accepted wallet_sendCalls but returned no calls id.",
-        { chainId }
-      );
-    }
-    for (let attempt = 0; attempt < maxPolls; attempt += 1) {
-      const status = await deps.provider.request({
-        method: "wallet_getCallsStatus",
-        params: [callsId]
-      });
-      const txHash = status?.receipts?.[0]?.transactionHash;
-      if (txHash) return txHash;
-      if (pollIntervalMs > 0) {
-        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-      }
-    }
-    throw new OwneyError(
-      "SPONSORED_CALLS_NO_RECEIPT",
-      `No receipt for calls ${callsId} after ${maxPolls} polls; the deposit may still settle.`,
-      { chainId, callsId }
-    );
-  };
-}
-
 // src/client.ts
 function encodeMultiAgentCursor(map) {
   return Buffer.from(JSON.stringify(map), "utf8").toString("base64");
@@ -2392,15 +2487,12 @@ var OwneySDK = class {
   referralSource;
   cachedSponsoredCallback = null;
   cachedWethSponsoredCallback = null;
-  paymasterServiceUrl;
-  cachedSponsoredCallsCallbacks = /* @__PURE__ */ new Map();
   initializingAgentsPromise = null;
   constructor(config) {
     this.apiKey = config.apiKey;
     if (config.debug) setOwneyDebug(true);
     this.zyfaiRpcUrls = config.zyfaiRpcUrls;
     this.routingApiBaseUrl = config.routingApiBaseUrl;
-    this.paymasterServiceUrl = config.paymasterServiceUrl;
     this.referralSource = config.referralSource;
   }
   /**
@@ -2423,7 +2515,6 @@ var OwneySDK = class {
     this.state = { provider, walletAddress, chainId: null };
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
-    this.cachedSponsoredCallsCallbacks.clear();
   }
   /**
    * Disconnect from all agents and clear connection state.
@@ -2438,7 +2529,6 @@ var OwneySDK = class {
     this.state = null;
     this.cachedSponsoredCallback = null;
     this.cachedWethSponsoredCallback = null;
-    this.cachedSponsoredCallsCallbacks.clear();
   }
   isAgentDisabled(agentId) {
     return this.disabledAgents.has(agentId);
@@ -2520,26 +2610,6 @@ var OwneySDK = class {
    * deposit. Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
    * `PermitTransferFrom` instead of an EIP-3009 authorization.
    */
-  getDefaultSponsoredCallsCallback(asset, onApproved) {
-    const cached = this.cachedSponsoredCallsCallbacks.get(asset);
-    if (!onApproved && cached) return cached;
-    const provider = this.requireConnectedProvider();
-    const callback = makeSponsoredCallsCallback({
-      provider,
-      ownerAddress: this.state.walletAddress,
-      paymasterServiceUrl: this.paymasterServiceUrl,
-      onApproved,
-      tokenAddressByChain: asset === "WETH" ? SPONSORED_WETH_BY_CHAIN : SPONSORED_USDC_BY_CHAIN
-    });
-    if (!onApproved) this.cachedSponsoredCallsCallbacks.set(asset, callback);
-    return callback;
-  }
-  /**
-   * Lazily builds (and caches) the default Permit2 sponsored WETH deposit
-   * callback used when the caller omits `depositCallback` for a WETH deposit.
-   * Mirrors `getDefaultSponsoredCallback()` but signs a Permit2
-   * `PermitTransferFrom` instead of an EIP-3009 authorization.
-   */
   getDefaultWethSponsoredCallback(onApproved) {
     if (!onApproved && this.cachedWethSponsoredCallback)
       return this.cachedWethSponsoredCallback;
@@ -2762,7 +2832,7 @@ var OwneySDK = class {
     }
     const state = this.requireState();
     const chainId = this.requireChainId();
-    const effectiveCallback = depositCallback ?? (this.paymasterServiceUrl ? this.getDefaultSponsoredCallsCallback(asset, onApproved) : asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
+    const effectiveCallback = depositCallback ?? (asset === "WETH" ? this.getDefaultWethSponsoredCallback(onApproved) : this.getDefaultSponsoredCallback(onApproved));
     if (agentId) {
       if (this.isAgentDisabled(agentId)) {
         throw new OwneyError(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owney/sdk",
-  "version": "0.7.7-beta.5",
+  "version": "0.7.7-beta.6",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",