@dev.sail.money/sailor 0.0.2-12

package/packages/sdk/dist/eip712.js

@@ -0,0 +1,255 @@
+import { keccak256 } from "viem";
+import { detectKernelCapabilities } from "./capabilities.js";
+/** EIP-712 domain for the SailKernel on a given chain. */
+export function sailKernelDomain(args) {
+    return {
+        name: "SailKernel",
+        version: "1",
+        chainId: args.chainId,
+        verifyingContract: args.kernel,
+    };
+}
+// ── Dispatch signing ─────────────────────────────────────────────────────────
+/**
+ * EIP-712 Dispatch struct field lists, keyed by dispatch model.
+ *
+ * This is the canonical definition used by BOTH `buildDispatchSignature` (the
+ * public helper) and `SailorClient.dispatch.single()` (the internal path) — a
+ * single source of truth that makes it impossible for the two paths to diverge.
+ * Selective kernels include the `permission` field; conjunctive kernels do not.
+ */
+export const DISPATCH_EIP712_FIELDS = {
+    selective: [
+        { name: "account", type: "address" },
+        { name: "permission", type: "address" },
+        { name: "target", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "dataHash", type: "bytes32" },
+        { name: "nonce", type: "uint256" },
+        { name: "deadline", type: "uint256" },
+    ],
+    conjunctive: [
+        { name: "account", type: "address" },
+        { name: "target", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "dataHash", type: "bytes32" },
+        { name: "nonce", type: "uint256" },
+        { name: "deadline", type: "uint256" },
+    ],
+};
+/** Default dispatch deadline: 10 minutes from now (unix seconds). */
+const DEFAULT_DISPATCH_DEADLINE_SECS = 600;
+/** Minimal ABI for reading the on-chain manager nonce. */
+const MANAGER_NONCES_ABI = [
+    {
+        type: "function",
+        name: "managerNonces",
+        stateMutability: "view",
+        inputs: [{ name: "account", type: "address" }],
+        outputs: [{ type: "uint256" }],
+    },
+];
+/**
+ * Build a signed EIP-712 Dispatch payload for a SailKernel manager dispatch.
+ *
+ * ### Why there is no `model` / `dispatchModel` parameter
+ *
+ * The Phase 1 incident established that the single most dangerous mistake an
+ * operator can make is using the wrong dispatch model. The conjunctive struct
+ * (6 fields, no `permission`) and the selective struct (7 fields, with
+ * `permission`) produce different EIP-712 digests; signing the wrong one
+ * recovers a random address and reverts with `InvalidManagerSignature()`.
+ *
+ * This function reads the on-chain `DISPATCH_TYPEHASH` from the kernel before
+ * signing — the correct struct is selected automatically regardless of what the
+ * caller believes the model to be. Callers cannot supply a model override; if
+ * the on-chain read fails (bad RPC, wrong kernel address), the function throws
+ * a clear error rather than signing blindly against an assumed model.
+ *
+ * @example
+ * ```ts
+ * const { signature, nonce, deadline } = await buildDispatchSignature({
+ *   publicClient,
+ *   kernel: "0x6319d3df...",
+ *   chainId: 8453,
+ *   account: mySafe,
+ *   permission: myPermission,
+ *   call: { target: router, value: 0n, data: swapCalldata },
+ *   manager: myKeyring,
+ * });
+ * // Then submit: kernel.dispatch(account, permission, target, value, data, signature, deadline)
+ * ```
+ */
+export async function buildDispatchSignature(params) {
+    const { publicClient, kernel, chainId, account, permission, call, manager } = params;
+    // 1. Detect model — reads DISPATCH_TYPEHASH from the live kernel; cached
+    //    per (chainId, kernel) so repeated calls within a session are cheap.
+    const caps = await detectKernelCapabilities(publicClient, kernel, {
+        chainId,
+    });
+    // 2. Resolve nonce — use caller-supplied value or read from chain.
+    const nonce = params.nonce ??
+        (await publicClient.readContract({
+            address: kernel,
+            abi: MANAGER_NONCES_ABI,
+            functionName: "managerNonces",
+            args: [account],
+        }));
+    // 3. Set deadline.
+    const deadline = params.deadline ?? BigInt(Math.floor(Date.now() / 1000) + DEFAULT_DISPATCH_DEADLINE_SECS);
+    // 4. Build EIP-712 typed-data message. Selective kernels include `permission`
+    //    in the signed struct; conjunctive kernels do not.
+    const dataHash = keccak256(call.data);
+    const selective = caps.dispatchModel === "selective";
+    const message = selective
+        ? { account, permission, target: call.target, value: call.value, dataHash, nonce, deadline }
+        : { account, target: call.target, value: call.value, dataHash, nonce, deadline };
+    // 5. Sign.
+    const signature = await manager.signTyped(sailKernelDomain({ chainId, kernel }), {
+        primaryType: "Dispatch",
+        types: {
+            Dispatch: DISPATCH_EIP712_FIELDS[caps.dispatchModel],
+        },
+    }, message);
+    return { signature, nonce, deadline, dispatchModel: caps.dispatchModel };
+}
+/**
+ * EIP-712 types for RegisterPermission — selective kernel (withDeadline variant).
+ * Used when detectKernelCapabilities reports registerPermissionHasDeadline = true.
+ */
+export const REGISTER_PERMISSION_TYPES = {
+    RegisterPermission: [
+        { name: "account", type: "address" },
+        { name: "permission", type: "address" },
+        { name: "nonce", type: "uint256" },
+        { name: "deadline", type: "uint256" },
+    ],
+};
+/**
+ * EIP-712 types for RegisterPermission — conjunctive kernel (noDeadline variant).
+ * Used when detectKernelCapabilities reports registerPermissionHasDeadline = false.
+ */
+export const REGISTER_PERMISSION_TYPES_NO_DEADLINE = {
+    RegisterPermission: [
+        { name: "account", type: "address" },
+        { name: "permission", type: "address" },
+        { name: "nonce", type: "uint256" },
+    ],
+};
+/**
+ * Build a JSON-serializable RegisterPermission typed-data payload for the
+ * browser signing station. Bigints are stringified so it survives transport;
+ * the UI re-parses decimal-string fields before signing.
+ *
+ * Pass `hasDeadline` from KernelCapabilities.registerPermissionHasDeadline.
+ * All bundled kernels (Base, Base Sepolia, Arbitrum) are now selective and include
+ * the deadline field. This flag exists for older or custom kernels that predate the
+ * selective model. detectKernelCapabilities resolves this from the on-chain REGISTER_PERMISSION_TYPEHASH.
+ */
+export function buildRegisterPermissionTypedData(args) {
+    const hasDeadline = args.hasDeadline ?? false;
+    const domain = {
+        name: "SailKernel",
+        version: "1",
+        chainId: args.chainId,
+        verifyingContract: args.kernel,
+    };
+    if (hasDeadline) {
+        const deadline = args.deadline ?? BigInt(Math.floor(Date.now() / 1000) + 300);
+        return {
+            domain,
+            types: REGISTER_PERMISSION_TYPES,
+            primaryType: "RegisterPermission",
+            message: {
+                account: args.account,
+                permission: args.permission,
+                nonce: args.nonce.toString(),
+                deadline: deadline.toString(),
+            },
+        };
+    }
+    return {
+        domain,
+        types: REGISTER_PERMISSION_TYPES_NO_DEADLINE,
+        primaryType: "RegisterPermission",
+        message: {
+            account: args.account,
+            permission: args.permission,
+            nonce: args.nonce.toString(),
+        },
+    };
+}
+/**
+ * EIP-712 types for RegisterPermissions (batch) — selective kernel. Mirrors the
+ * shape SailorClient.mandate.attachBatch signs and the on-chain
+ * registerPermissions(account, permissions[], deadline, sig) entry point.
+ */
+export const REGISTER_PERMISSIONS_BATCH_TYPES = {
+    RegisterPermissions: [
+        { name: "account", type: "address" },
+        { name: "permissions", type: "address[]" },
+        { name: "nonce", type: "uint256" },
+        { name: "deadline", type: "uint256" },
+    ],
+};
+/**
+ * Build a JSON-serializable RegisterPermissions (batch) typed-data payload for
+ * the browser signing station — the re-approval step after a manager rotation,
+ * which rebinds every previously-attached mandate to the new delegated signer in
+ * a single owner signature + tx. Bigints are stringified for transport.
+ */
+export function buildRegisterPermissionsBatchTypedData(args) {
+    const deadline = args.deadline ?? BigInt(Math.floor(Date.now() / 1000) + 600);
+    return {
+        domain: {
+            name: "SailKernel",
+            version: "1",
+            chainId: args.chainId,
+            verifyingContract: args.kernel,
+        },
+        types: REGISTER_PERMISSIONS_BATCH_TYPES,
+        primaryType: "RegisterPermissions",
+        message: {
+            account: args.account,
+            permissions: args.permissions,
+            nonce: args.nonce.toString(),
+            deadline: deadline.toString(),
+        },
+    };
+}
+/**
+ * Sign a RegisterPermission message directly with a wallet client. Used by
+ * headless flows (tests / scripts) where the owner's key is local rather than
+ * in a browser. The browser path uses buildRegisterPermissionTypedData instead.
+ *
+ * Pass `hasDeadline` from KernelCapabilities.registerPermissionHasDeadline.
+ */
+export async function signRegisterPermission(args) {
+    const hasDeadline = args.hasDeadline ?? false;
+    const domain = sailKernelDomain({ chainId: args.chainId, kernel: args.kernel });
+    if (hasDeadline) {
+        const deadline = args.deadline ?? BigInt(Math.floor(Date.now() / 1000) + 300);
+        return args.walletClient.signTypedData({
+            domain,
+            types: REGISTER_PERMISSION_TYPES,
+            primaryType: "RegisterPermission",
+            message: {
+                account: args.account,
+                permission: args.permission,
+                nonce: args.nonce,
+                deadline,
+            },
+        });
+    }
+    return args.walletClient.signTypedData({
+        domain,
+        types: REGISTER_PERMISSION_TYPES_NO_DEADLINE,
+        primaryType: "RegisterPermission",
+        message: {
+            account: args.account,
+            permission: args.permission,
+            nonce: args.nonce,
+        },
+    });
+}
+//# sourceMappingURL=eip712.js.map

package/packages/sdk/dist/eip712.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip712.js","sourceRoot":"","sources":["../src/eip712.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA2C,MAAM,MAAM,CAAC;AAG1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAI7D,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,IAA0C;IACzE,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,iBAAiB,EAAE,IAAI,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE;QACT,EAAE,IAAI,EAAE,SAAS,EAAK,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,QAAQ,EAAM,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,OAAO,EAAO,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,UAAU,EAAI,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,OAAO,EAAO,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,UAAU,EAAI,IAAI,EAAE,SAAS,EAAE;KACxC;IACD,WAAW,EAAE;QACX,EAAE,IAAI,EAAE,SAAS,EAAG,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,QAAQ,EAAI,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAK,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAK,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;CACO,CAAC;AAEX,qEAAqE;AACrE,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,0DAA0D;AAC1D,MAAM,kBAAkB,GAAG;IACzB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KAC/B;CACO,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAgC5C;IAaC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAErF,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,IAAI,GAAuB,MAAM,wBAAwB,CAAC,YAAY,EAAE,MAAM,EAAE;QACpF,OAAO;KACR,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,KAAK,GACT,MAAM,CAAC,KAAK;QACX,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC;YAChC,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,kBAAkB;YACvB,YAAY,EAAE,eAAe;YAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB,CAAC,CAAY,CAAC;IAEjB,mBAAmB;IACnB,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,8BAA8B,CAAC,CAAC;IAE5F,8EAA8E;IAC9E,uDAAuD;IACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,KAAK,WAAW,CAAC;IACrD,MAAM,OAAO,GAA4B,SAAS;QAChD,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC5F,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAEnF,WAAW;IACX,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CACvC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EACrC;QACE,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE;YACL,QAAQ,EAAE,sBAAsB,CAAC,IAAI,CAAC,aAAa,CAGhD;SACJ;KACF,EACD,OAAO,CACR,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,kBAAkB,EAAE;QAClB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,kBAAkB,EAAE;QAClB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAEX;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAehD;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,iBAAiB,EAAE,IAAI,CAAC,MAAM;KAC/B,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9E,OAAO;YACL,MAAM;YACN,KAAK,EAAE,yBAAoE;YAC3E,WAAW,EAAE,oBAAoB;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;aAC9B;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK,EAAE,qCAAgF;QACvF,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;SAC7B;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,mBAAmB,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE;QAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,sCAAsC,CAAC,IAQtD;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IAC9E,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,iBAAiB,EAAE,IAAI,CAAC,MAAM;SAC/B;QACD,KAAK,EAAE,gCAA2E;QAClF,WAAW,EAAE,qBAAqB;QAClC,OAAO,EAAE;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;SAC9B;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAW5C;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YACrC,MAAM;YACN,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,oBAAoB;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ;aACT;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QACrC,MAAM;QACN,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB;KACF,CAAC,CAAC;AACL,CAAC"}

package/packages/sdk/dist/errors.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Kernel revert decoding.
+ *
+ * The deployed SailKernel reverts with custom errors (4-byte selectors). viem
+ * cannot name them unless the error fragments are present in the ABI it was
+ * given, so by default a dispatch failure surfaces as an opaque selector like
+ * `0xeb6942f1`. This module ships the full set of kernel error fragments (the
+ * UNION of the currently-deployed and latest-source versions) plus a decoder
+ * that turns a raw revert into a named, human-readable diagnosis with a hint at
+ * the likely cause and fix.
+ */
+import { type Abi, type Hex } from "viem";
+/**
+ * Human-readable signatures for every custom error the SailKernel can revert
+ * with, across deployed and latest-source versions. Used purely for decoding —
+ * unknown selectors simply fail to match and fall through to `null`.
+ */
+export declare const KERNEL_ERROR_SIGNATURES: readonly ["error AccountAlreadyRegistered(address account)", "error AccountNotRegistered(address account)", "error AccountSelfTarget()", "error ArrayLengthMismatch()", "error BatchPermissionDenied()", "error BatchSubcallFailed(uint256 index, address target)", "error BatchTooLong(uint256 length)", "error BatchZeroTarget(uint256 index)", "error DeadlineExpired(uint256 deadline, uint256 current)", "error DistributorBpsTooLarge(uint256 bps)", "error EmptyBatch()", "error FeePolicyNotSet()", "error FeeTokenMismatch(address provided, address expected)", "error FeeTooLarge(uint256 requested, uint256 maxAllowed)", "error FeeTransferFailed()", "error InsufficientFee(uint256 required, uint256 provided)", "error InvalidInitializer()", "error InvalidManagerSignature()", "error InvalidSignerSignature()", "error KernelSelfTarget(uint256 index)", "error ManagerUnchanged()", "error ModuleNotEnabled()", "error NoPermissionsRegistered(address account)", "error NotAContract(address addr)", "error NotGovernance()", "error NotManager(address caller, address expected)", "error NotPermissionSigner()", "error NotTimelock()", "error PermissionAlreadyRegistered(address permission)", "error PermissionDenied(address permission)", "error PermissionNotBatchAware(address permission)", "error PermissionNotRegistered(address permission)", "error ProtocolPaused()", "error SafeExecutionFailed()", "error SessionInactive(address account)", "error TooManyPermissions(address account, uint256 limit)", "error UntrustedFactory(address factory)", "error UntrustedFeePolicy(address policy)", "error UntrustedModuleSetup(address setup)", "error UntrustedProxyCodehash(bytes32 codehash)", "error UntrustedSingleton(address singleton)", "error ZeroAddress()", "error ZeroFee()"];
+/** The kernel error fragments as a viem ABI, ready for `decodeErrorResult`. */
+export declare const KERNEL_ERROR_ABI: Abi;
+/** A decoded kernel custom error. */
+export type KernelError = {
+    /** Solidity error name, e.g. "InvalidManagerSignature". */
+    name: string;
+    /** Decoded arguments, in declaration order (empty for zero-arg errors). */
+    args: readonly unknown[];
+    /** The 4-byte selector that was matched, e.g. "0xeb6942f1". */
+    selector: Hex;
+    /** Operator-facing hint at the likely cause and fix, when one is known. */
+    hint?: string;
+    /** A one-line, log-friendly summary combining name, args, and hint. */
+    message: string;
+};
+/**
+ * Decode a raw revert data hex string (`0x` + selector + abi-encoded args) into
+ * a named kernel error. Returns null if the data does not match any known kernel
+ * error fragment.
+ */
+export declare function decodeKernelError(data: Hex): Promise<KernelError | null>;
+/**
+ * Walk a thrown viem error to find embedded revert data, then decode it as a
+ * kernel error. Handles ContractFunctionExecutionError / ContractFunctionReverted
+ * / RawContractError shapes by scanning `.cause` chains and common data fields.
+ * Returns null when no kernel error can be recovered.
+ */
+export declare function explainKernelRevert(err: unknown): Promise<KernelError | null>;
+//# sourceMappingURL=errors.d.ts.map

package/packages/sdk/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,GAAG,EAAY,MAAM,MAAM,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,+tDA8C1B,CAAC;AAEX,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,GAAuC,CAAC;AA2CvE,qCAAqC;AACrC,MAAM,MAAM,WAAW,GAAG;IACxB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,EAAE,GAAG,CAAC;IACd,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAqBF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAGxE;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAInF"}

package/packages/sdk/dist/errors.js

@@ -0,0 +1,168 @@
+/**
+ * Kernel revert decoding.
+ *
+ * The deployed SailKernel reverts with custom errors (4-byte selectors). viem
+ * cannot name them unless the error fragments are present in the ABI it was
+ * given, so by default a dispatch failure surfaces as an opaque selector like
+ * `0xeb6942f1`. This module ships the full set of kernel error fragments (the
+ * UNION of the currently-deployed and latest-source versions) plus a decoder
+ * that turns a raw revert into a named, human-readable diagnosis with a hint at
+ * the likely cause and fix.
+ */
+import { parseAbi } from "viem";
+/**
+ * Human-readable signatures for every custom error the SailKernel can revert
+ * with, across deployed and latest-source versions. Used purely for decoding —
+ * unknown selectors simply fail to match and fall through to `null`.
+ */
+export const KERNEL_ERROR_SIGNATURES = [
+    "error AccountAlreadyRegistered(address account)",
+    "error AccountNotRegistered(address account)",
+    "error AccountSelfTarget()",
+    "error ArrayLengthMismatch()",
+    "error BatchPermissionDenied()",
+    "error BatchSubcallFailed(uint256 index, address target)",
+    "error BatchTooLong(uint256 length)",
+    "error BatchZeroTarget(uint256 index)",
+    "error DeadlineExpired(uint256 deadline, uint256 current)",
+    "error DistributorBpsTooLarge(uint256 bps)",
+    "error EmptyBatch()",
+    "error FeePolicyNotSet()",
+    "error FeeTokenMismatch(address provided, address expected)",
+    "error FeeTooLarge(uint256 requested, uint256 maxAllowed)",
+    "error FeeTransferFailed()",
+    "error InsufficientFee(uint256 required, uint256 provided)",
+    "error InvalidInitializer()",
+    "error InvalidManagerSignature()",
+    "error InvalidSignerSignature()",
+    "error KernelSelfTarget(uint256 index)",
+    // SAIL-405: setManager rejects a no-op rotation (newManager == current).
+    "error ManagerUnchanged()",
+    "error ModuleNotEnabled()",
+    // Present in the deployed conjunctive kernel; dropped in the latest source.
+    "error NoPermissionsRegistered(address account)",
+    "error NotAContract(address addr)",
+    "error NotGovernance()",
+    "error NotManager(address caller, address expected)",
+    "error NotPermissionSigner()",
+    "error NotTimelock()",
+    "error PermissionAlreadyRegistered(address permission)",
+    "error PermissionDenied(address permission)",
+    "error PermissionNotBatchAware(address permission)",
+    "error PermissionNotRegistered(address permission)",
+    "error ProtocolPaused()",
+    "error SafeExecutionFailed()",
+    "error SessionInactive(address account)",
+    "error TooManyPermissions(address account, uint256 limit)",
+    "error UntrustedFactory(address factory)",
+    "error UntrustedFeePolicy(address policy)",
+    "error UntrustedModuleSetup(address setup)",
+    "error UntrustedProxyCodehash(bytes32 codehash)",
+    "error UntrustedSingleton(address singleton)",
+    "error ZeroAddress()",
+    "error ZeroFee()",
+];
+/** The kernel error fragments as a viem ABI, ready for `decodeErrorResult`. */
+export const KERNEL_ERROR_ABI = parseAbi(KERNEL_ERROR_SIGNATURES);
+/**
+ * Operator-facing hints for the errors most likely to be hit at dispatch time.
+ * Keyed by error name. These translate a raw revert into "what went wrong and
+ * what to do about it" — the bulk of the value of this module.
+ */
+const ERROR_HINTS = {
+    InvalidManagerSignature: "The manager's EIP-712 Dispatch signature did not recover to the registered manager. " +
+        "Most common cause: a stale manager nonce (the kernel's managerNonces advanced between " +
+        "signing and submission — e.g. a load-balanced RPC returned a lagging value, or two " +
+        "dispatches were signed against the same nonce). Re-read managerNonces and re-sign, or " +
+        "track the nonce locally and increment it across sequential dispatches. Can also mean the " +
+        "wrong EIP-712 Dispatch type was used for this kernel version — see detectKernelCapabilities.",
+    PermissionDenied: "A registered permission's evaluate() returned false (or reverted / ran out of gas) for this call. " +
+        "In a conjunctive kernel EVERY registered permission must approve EVERY call, so a permission " +
+        "that does not pass through calls outside its own domain will block unrelated dispatches. " +
+        "Check that each permission either matches this call or returns true for calls it doesn't govern.",
+    NoPermissionsRegistered: "The account has zero registered permissions, so the kernel denies by default. Register at least " +
+        "one permission (kernel.registerPermission / registerPermissions) before dispatching.",
+    PermissionNotRegistered: "The named permission is not registered for this account. Register it first, or (on a conjunctive " +
+        "kernel) drop the permission argument — that kernel checks all registered permissions automatically.",
+    SessionInactive: "The manager's session is revoked. Re-activate it (session.activate) before dispatching.",
+    DeadlineExpired: "The signature deadline is in the past. Use a deadline comfortably ahead of block.timestamp.",
+    SafeExecutionFailed: "The underlying Safe module call reverted. The permission passed, but the target call itself failed " +
+        "(e.g. slippage too tight, insufficient allowance/balance, or a failing swap route).",
+    ModuleNotEnabled: "The Sail module is not enabled on the Safe. Complete account onboarding (enable the module) first.",
+    ProtocolPaused: "The protocol is paused by governance. Dispatches are blocked until it is unpaused.",
+    NotManager: "The submitting address is not the registered manager for this account.",
+    TooManyPermissions: "Registering this permission would exceed the kernel's per-account permission cap. Revoke an unused " +
+        "permission first.",
+};
+/** Lazily decode an error selector against the kernel error ABI. */
+async function decode(data) {
+    // decodeErrorResult is imported lazily so this module has no eager viem cost
+    // beyond parseAbi; it also keeps the import surface obvious.
+    const { decodeErrorResult } = await import("viem");
+    try {
+        const decoded = decodeErrorResult({ abi: KERNEL_ERROR_ABI, data });
+        const name = decoded.errorName;
+        const args = (decoded.args ?? []);
+        const selector = data.slice(0, 10);
+        const hint = ERROR_HINTS[name];
+        const argStr = args.length ? `(${args.map(String).join(", ")})` : "()";
+        const message = hint ? `${name}${argStr} — ${hint}` : `${name}${argStr}`;
+        return { name, args, selector, hint, message };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Decode a raw revert data hex string (`0x` + selector + abi-encoded args) into
+ * a named kernel error. Returns null if the data does not match any known kernel
+ * error fragment.
+ */
+export function decodeKernelError(data) {
+    if (!data || data === "0x")
+        return Promise.resolve(null);
+    return decode(data);
+}
+/**
+ * Walk a thrown viem error to find embedded revert data, then decode it as a
+ * kernel error. Handles ContractFunctionExecutionError / ContractFunctionReverted
+ * / RawContractError shapes by scanning `.cause` chains and common data fields.
+ * Returns null when no kernel error can be recovered.
+ */
+export async function explainKernelRevert(err) {
+    const data = extractRevertData(err);
+    if (!data)
+        return null;
+    return decodeKernelError(data);
+}
+/** Best-effort extraction of `0x…`-encoded revert data from an unknown thrown value. */
+function extractRevertData(err) {
+    const seen = new Set();
+    let cursor = err;
+    let depth = 0;
+    while (cursor && typeof cursor === "object" && !seen.has(cursor) && depth < 12) {
+        seen.add(cursor);
+        depth++;
+        const obj = cursor;
+        // viem ContractFunctionRevertedError carries `.data` as a decoded object OR
+        // the raw error may carry a `.data` hex string; RawContractError uses `.data`.
+        const data = obj["data"];
+        if (typeof data === "string" && data.startsWith("0x") && data.length >= 10) {
+            return data;
+        }
+        if (data && typeof data === "object") {
+            const inner = data["data"];
+            if (typeof inner === "string" && inner.startsWith("0x") && inner.length >= 10) {
+                return inner;
+            }
+        }
+        // Some shapes stash it on `.raw` or `.signature`.
+        const raw = obj["raw"];
+        if (typeof raw === "string" && raw.startsWith("0x") && raw.length >= 10) {
+            return raw;
+        }
+        cursor = obj["cause"];
+    }
+    return null;
+}
+//# sourceMappingURL=errors.js.map

package/packages/sdk/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAsB,QAAQ,EAAE,MAAM,MAAM,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,iDAAiD;IACjD,6CAA6C;IAC7C,2BAA2B;IAC3B,6BAA6B;IAC7B,+BAA+B;IAC/B,yDAAyD;IACzD,oCAAoC;IACpC,sCAAsC;IACtC,0DAA0D;IAC1D,2CAA2C;IAC3C,oBAAoB;IACpB,yBAAyB;IACzB,4DAA4D;IAC5D,0DAA0D;IAC1D,2BAA2B;IAC3B,2DAA2D;IAC3D,4BAA4B;IAC5B,iCAAiC;IACjC,gCAAgC;IAChC,uCAAuC;IACvC,yEAAyE;IACzE,0BAA0B;IAC1B,0BAA0B;IAC1B,4EAA4E;IAC5E,gDAAgD;IAChD,kCAAkC;IAClC,uBAAuB;IACvB,oDAAoD;IACpD,6BAA6B;IAC7B,qBAAqB;IACrB,uDAAuD;IACvD,4CAA4C;IAC5C,mDAAmD;IACnD,mDAAmD;IACnD,wBAAwB;IACxB,6BAA6B;IAC7B,wCAAwC;IACxC,0DAA0D;IAC1D,yCAAyC;IACzC,0CAA0C;IAC1C,2CAA2C;IAC3C,gDAAgD;IAChD,6CAA6C;IAC7C,qBAAqB;IACrB,iBAAiB;CACT,CAAC;AAEX,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAQ,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,GAA2B;IAC1C,uBAAuB,EACrB,sFAAsF;QACtF,wFAAwF;QACxF,qFAAqF;QACrF,wFAAwF;QACxF,2FAA2F;QAC3F,8FAA8F;IAChG,gBAAgB,EACd,oGAAoG;QACpG,+FAA+F;QAC/F,2FAA2F;QAC3F,kGAAkG;IACpG,uBAAuB,EACrB,kGAAkG;QAClG,sFAAsF;IACxF,uBAAuB,EACrB,mGAAmG;QACnG,qGAAqG;IACvG,eAAe,EACb,yFAAyF;IAC3F,eAAe,EACb,6FAA6F;IAC/F,mBAAmB,EACjB,qGAAqG;QACrG,qFAAqF;IACvF,gBAAgB,EACd,oGAAoG;IACtG,cAAc,EAAE,oFAAoF;IACpG,UAAU,EACR,wEAAwE;IAC1E,kBAAkB,EAChB,qGAAqG;QACrG,mBAAmB;CACtB,CAAC;AAgBF,oEAAoE;AACpE,KAAK,UAAU,MAAM,CAAC,IAAS;IAC7B,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAuB,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAQ,CAAC;QAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAS;IACzC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAY;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,GAAY;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,IAAI,MAAM,GAAY,GAAG,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC/E,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,KAAK,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,MAAiC,CAAC;QAE9C,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC3E,OAAO,IAAW,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,KAAK,GAAI,IAAgC,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBAC9E,OAAO,KAAY,CAAC;YACtB,CAAC;QACH,CAAC;QACD,kDAAkD;QAClD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACxE,OAAO,GAAU,CAAC;QACpB,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/packages/sdk/dist/fees.d.ts

@@ -0,0 +1,16 @@
+import type { Address, PublicClient } from "viem";
+/**
+ * Estimate the exact fee (in wei) the kernel charges to register a permission.
+ *
+ * The deployed Base / Base-Sepolia governance uses the LEGACY model:
+ *
+ *   fee = min(baseFee, cap) + min(byteLength * complexityRate, cap), capped at cap
+ *
+ * where byteLength is the deployed permission's runtime bytecode length and
+ * cap = MAX_PERMISSION_FEE_WEI. Newer governance may instead expose a flat
+ * permissionRegistrationFee(); if the legacy views are missing we fall back to
+ * that. The fee must be sent exactly: underpaying reverts with InsufficientFee,
+ * and overpaying (e.g. sending the cap) needlessly ties up the agent's balance.
+ */
+export declare function estimatePermissionFee(publicClient: PublicClient, governance: Address, permission: Address): Promise<bigint>;
+//# sourceMappingURL=fees.d.ts.map

package/packages/sdk/dist/fees.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fees.d.ts","sourceRoot":"","sources":["../src/fees.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAOlD;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,OAAO,EACnB,UAAU,EAAE,OAAO,GAClB,OAAO,CAAC,MAAM,CAAC,CA+BjB"}

package/packages/sdk/dist/fees.js

@@ -0,0 +1,51 @@
+import { SailGovernanceAbi } from "./abis/SailGovernance.js";
+function min(a, b) {
+    return a < b ? a : b;
+}
+/**
+ * Estimate the exact fee (in wei) the kernel charges to register a permission.
+ *
+ * The deployed Base / Base-Sepolia governance uses the LEGACY model:
+ *
+ *   fee = min(baseFee, cap) + min(byteLength * complexityRate, cap), capped at cap
+ *
+ * where byteLength is the deployed permission's runtime bytecode length and
+ * cap = MAX_PERMISSION_FEE_WEI. Newer governance may instead expose a flat
+ * permissionRegistrationFee(); if the legacy views are missing we fall back to
+ * that. The fee must be sent exactly: underpaying reverts with InsufficientFee,
+ * and overpaying (e.g. sending the cap) needlessly ties up the agent's balance.
+ */
+export async function estimatePermissionFee(publicClient, governance, permission) {
+    try {
+        const [baseFee, complexityRate, cap, code] = await Promise.all([
+            publicClient.readContract({
+                address: governance,
+                abi: SailGovernanceAbi,
+                functionName: "baseFee",
+            }),
+            publicClient.readContract({
+                address: governance,
+                abi: SailGovernanceAbi,
+                functionName: "complexityRate",
+            }),
+            publicClient.readContract({
+                address: governance,
+                abi: SailGovernanceAbi,
+                functionName: "MAX_PERMISSION_FEE_WEI",
+            }),
+            publicClient.getBytecode({ address: permission }),
+        ]);
+        const byteLength = code ? BigInt((code.length - 2) / 2) : 0n;
+        const fee = min(baseFee, cap) + min(byteLength * complexityRate, cap);
+        return min(fee, cap);
+    }
+    catch {
+        // Newer governance: flat fee.
+        return publicClient.readContract({
+            address: governance,
+            abi: SailGovernanceAbi,
+            functionName: "permissionRegistrationFee",
+        });
+    }
+}
+//# sourceMappingURL=fees.js.map

package/packages/sdk/dist/fees.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fees.js","sourceRoot":"","sources":["../src/fees.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAA0B,EAC1B,UAAmB,EACnB,UAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7D,YAAY,CAAC,YAAY,CAAC;gBACxB,OAAO,EAAE,UAAU;gBACnB,GAAG,EAAE,iBAAiB;gBACtB,YAAY,EAAE,SAAS;aACxB,CAAoB;YACrB,YAAY,CAAC,YAAY,CAAC;gBACxB,OAAO,EAAE,UAAU;gBACnB,GAAG,EAAE,iBAAiB;gBACtB,YAAY,EAAE,gBAAgB;aAC/B,CAAoB;YACrB,YAAY,CAAC,YAAY,CAAC;gBACxB,OAAO,EAAE,UAAU;gBACnB,GAAG,EAAE,iBAAiB;gBACtB,YAAY,EAAE,wBAAwB;aACvC,CAAoB;YACrB,YAAY,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,GAAG,cAAc,EAAE,GAAG,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;QAC9B,OAAO,YAAY,CAAC,YAAY,CAAC;YAC/B,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,iBAAiB;YACtB,YAAY,EAAE,2BAA2B;SAC1C,CAAoB,CAAC;IACxB,CAAC;AACH,CAAC"}

package/packages/sdk/dist/index.d.ts

@@ -0,0 +1,23 @@
+export * from "./types.js";
+export { SailorClient } from "./client.js";
+export { LocalKeyring } from "./keyring.js";
+export type { EncryptedKeystore, LocalKeyringOptions } from "./keyring.js";
+export { SailKernelAbi } from "./abis/SailKernel.js";
+export { MandateFactoryAbi } from "./abis/MandateFactory.js";
+export { SailGovernanceAbi } from "./abis/SailGovernance.js";
+export type { ClientMessage, ServerMessage, SerializedTypedData, SigningRequest, SigningRequestBase, SigningRequestKind, SigningResponse, SigningTxRequest, SigningTypedDataRequest, } from "./signing.js";
+export { SAFE_V141, buildApprovedHashSignature, buildSafeSetupInitializer, buildSetManagerExecTransaction, encodeSetManager, gnosisSafeAbi, gnosisSafeExecAbi, safeModuleEnablerAbi, } from "./safe.js";
+export { discoverSafesForOwner, getSafeTransactionServiceUrl } from "./discovery.js";
+export type { CloneTemplateInfo, CloneTemplateParam, KnownTemplate, SailChainId, SailDeployment, } from "./deployments.js";
+export { getSailDeployment, normalizeDeployment, sailDeployments, } from "./deployments.js";
+export type { DispatchModel, KernelCapabilities } from "./capabilities.js";
+export { DISPATCH_TYPE_STRINGS, DISPATCH_TYPEHASHES, REGISTER_PERMISSION_TYPE_STRINGS, REGISTER_PERMISSION_TYPEHASHES, clearCapabilityCache, detectKernelCapabilities, } from "./capabilities.js";
+export type { KernelError } from "./errors.js";
+export { KERNEL_ERROR_ABI, KERNEL_ERROR_SIGNATURES, decodeKernelError, explainKernelRevert, } from "./errors.js";
+export { DISPATCH_EIP712_FIELDS, REGISTER_PERMISSION_TYPES, REGISTER_PERMISSION_TYPES_NO_DEADLINE, REGISTER_PERMISSIONS_BATCH_TYPES, buildDispatchSignature, buildRegisterPermissionTypedData, buildRegisterPermissionsBatchTypedData, sailKernelDomain, signRegisterPermission, } from "./eip712.js";
+export { estimatePermissionFee } from "./fees.js";
+export type { FetchLifiQuoteParams, LifiSwapQuote } from "./lifi.js";
+export { DEFAULT_SLIPPAGE, LIFI_QUOTE_URL, LIFI_ROUTERS, encodeApprove, fetchLifiQuote, } from "./lifi.js";
+export type { AllocationItem, AllocationRequest, AllocationResponse, BenchmarkResponse, ComparePosition, CompareRequest, CompareResponse, ExplainRequest, ExplainResponse, InstitutionalRequest, InstitutionalResponse, OpportunitiesResponse, PortfolioCheckResponse, RebalanceRequest, RebalanceResponse, RisksSummaryResponse, SafeCheckResponse, SailIntelligenceOptions, ScreenRequest, ScreenResponse, ValidateRequest, ValidateResponse, VaultRiskResponse, VaultScreenResult, YieldOpportunity, YieldSourceItem, YieldSourcesResponse, } from "./intelligence.js";
+export { SAIL_INTELLIGENCE_BASE_URL, SAIL_INTELLIGENCE_DOCS_URL, SailIntelligence, } from "./intelligence.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/sdk/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,YAAY,EACV,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AACrF,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qCAAqC,EACrC,gCAAgC,EAChC,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AAGnB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}

package/packages/sdk/dist/index.js

@@ -0,0 +1,16 @@
+export * from "./types.js";
+export { SailorClient } from "./client.js";
+export { LocalKeyring } from "./keyring.js";
+export { SailKernelAbi } from "./abis/SailKernel.js";
+export { MandateFactoryAbi } from "./abis/MandateFactory.js";
+export { SailGovernanceAbi } from "./abis/SailGovernance.js";
+export { SAFE_V141, buildApprovedHashSignature, buildSafeSetupInitializer, buildSetManagerExecTransaction, encodeSetManager, gnosisSafeAbi, gnosisSafeExecAbi, safeModuleEnablerAbi, } from "./safe.js";
+export { discoverSafesForOwner, getSafeTransactionServiceUrl } from "./discovery.js";
+export { getSailDeployment, normalizeDeployment, sailDeployments, } from "./deployments.js";
+export { DISPATCH_TYPE_STRINGS, DISPATCH_TYPEHASHES, REGISTER_PERMISSION_TYPE_STRINGS, REGISTER_PERMISSION_TYPEHASHES, clearCapabilityCache, detectKernelCapabilities, } from "./capabilities.js";
+export { KERNEL_ERROR_ABI, KERNEL_ERROR_SIGNATURES, decodeKernelError, explainKernelRevert, } from "./errors.js";
+export { DISPATCH_EIP712_FIELDS, REGISTER_PERMISSION_TYPES, REGISTER_PERMISSION_TYPES_NO_DEADLINE, REGISTER_PERMISSIONS_BATCH_TYPES, buildDispatchSignature, buildRegisterPermissionTypedData, buildRegisterPermissionsBatchTypedData, sailKernelDomain, signRegisterPermission, } from "./eip712.js";
+export { estimatePermissionFee } from "./fees.js";
+export { DEFAULT_SLIPPAGE, LIFI_QUOTE_URL, LIFI_ROUTERS, encodeApprove, fetchLifiQuote, } from "./lifi.js";
+export { SAIL_INTELLIGENCE_BASE_URL, SAIL_INTELLIGENCE_DOCS_URL, SailIntelligence, } from "./intelligence.js";
+//# sourceMappingURL=index.js.map

package/packages/sdk/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAc7D,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAQrF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qCAAqC,EACrC,gCAAgC,EAChC,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AAgCnB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}