@dev.sail.money/sailor 0.0.2-23 → 0.0.2-24

package/examples/permissions/BoundedSupply_AaveV3_Arbitrum.sol

@@ -33,6 +33,7 @@ pragma solidity 0.8.26;
 // ─────────────────────────────────────────────────────────────────────────────
 
 import {IPermission, Context} from "@sail/interfaces/IPermission.sol";
+import {SailCalldata} from "./SailCalldata.sol";
 
 contract BoundedSupply_AaveV3_Arbitrum is IPermission {
     bytes32 private constant DISCRIMINATOR = keccak256("BoundedSupply_AaveV3_Arbitrum");
@@ -63,15 +64,12 @@ contract BoundedSupply_AaveV3_Arbitrum is IPermission {
         if (ctx.target != AAVE_POOL)    return false;
         if (ctx.selector != SEL_SUPPLY) return false;
         // supply(address asset, uint256 amount, address onBehalfOf, uint16 referralCode)
-        // = 4 ABI-encoded 32-byte slots after the 4-byte selector
-        if (txData.length < 4 + 4 * 32) return false;
+        if (!SailCalldata.hasParams(txData, 4)) return false;
 
-        (
-            address asset,
-            uint256 amount,
-            address onBehalfOf,
-            /* uint16 referralCode — not bounded */
-        ) = abi.decode(txData[4:], (address, uint256, address, uint16));
+        address asset      = SailCalldata.asAddress(txData, 0);
+        uint256 amount     = SailCalldata.asUint256(txData, 1);
+        address onBehalfOf = SailCalldata.asAddress(txData, 2);
+        // slot 3 = referralCode (uint16) — informational, not bounded
 
         if (!isAllowedAsset[asset])       return false;
         if (amount > MAX_SUPPLY_AMOUNT)   return false;

package/examples/permissions/SailCalldata.sol

@@ -0,0 +1,118 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.26;
+
+// ─────────────────────────────────────────────────────────────────────────────
+// SailCalldata — safe static-parameter extraction for IPermission.evaluate()
+//
+// PROBLEM
+//   evaluate(bytes calldata txData, Context calldata ctx) receives raw ABI-
+//   encoded calldata. Extracting parameters by hand is the most dangerous part
+//   of permission writing:
+//     • Forgetting the length check before decoding → silent wrong value or
+//       revert instead of clean `return false`.
+//     • Wrong slot index → decoding the wrong parameter (type-checks, still wrong).
+//     • Truncation bugs when casting uint256 slots to address (padding bits).
+//
+// SOLUTION
+//   This library centralises the three operations into named helpers:
+//     1. hasParams()  — explicit length guard (call once, at the top of evaluate)
+//     2. asAddress()  — extract + mask to 20 bytes
+//     3. asUint256(), asInt256(), asBytes32(), asBool(), asUint128() — typed slots
+//
+//   All helpers are view/pure and add zero gas overhead beyond the slice itself.
+//
+// USAGE (replace abi.decode pattern)
+//
+//   // Before:
+//   if (txData.length < 4 + 3 * 32) return false;
+//   (address asset, uint256 amount, address onBehalfOf) =
+//       abi.decode(txData[4:], (address, uint256, address));
+//
+//   // After:
+//   if (!SailCalldata.hasParams(txData, 3)) return false;
+//   address  asset      = SailCalldata.asAddress(txData, 0);
+//   uint256  amount     = SailCalldata.asUint256(txData, 1);
+//   address  onBehalfOf = SailCalldata.asAddress(txData, 2);
+//
+// LIMITATIONS
+//   Only covers static (fixed-size) ABI types. Dynamic types (bytes, string,
+//   arrays) use pointer indirection — decode them with abi.decode(txData[4:], ...)
+//   after the hasParams() guard, or write a dedicated extractor.
+//
+// SLOT INDEXING
+//   Slots are 0-indexed from the first constructor parameter (after the 4-byte
+//   selector). Slot 0 = bytes [4..35], slot 1 = bytes [36..67], etc.
+// ─────────────────────────────────────────────────────────────────────────────
+
+library SailCalldata {
+    // ── Guards ────────────────────────────────────────────────────────────────
+
+    /// @notice Returns true when txData is long enough to hold `params` static
+    ///         32-byte ABI slots after the 4-byte selector.
+    /// @dev    Call this once at the top of evaluate() before any slot access.
+    ///         Returns false (not revert) so evaluate() can return false cleanly.
+    function hasParams(bytes calldata txData, uint256 params) internal pure returns (bool) {
+        return txData.length >= 4 + params * 32;
+    }
+
+    // ── Static-type extractors ────────────────────────────────────────────────
+    // All assume hasParams() has already been checked for the relevant slot.
+    // Accessing an out-of-bounds slot will cause the calldata slice to revert —
+    // always guard with hasParams() first.
+
+    /// @notice Extract an address from ABI slot `i` (0-indexed after selector).
+    ///         Masks to 20 bytes, discarding the ABI zero-padding in the upper 12.
+    function asAddress(bytes calldata txData, uint256 i) internal pure returns (address) {
+        return address(uint160(uint256(bytes32(txData[4 + i * 32 : 4 + (i + 1) * 32]))));
+    }
+
+    /// @notice Extract a uint256 from ABI slot `i`.
+    function asUint256(bytes calldata txData, uint256 i) internal pure returns (uint256) {
+        return uint256(bytes32(txData[4 + i * 32 : 4 + (i + 1) * 32]));
+    }
+
+    /// @notice Extract an int256 from ABI slot `i`.
+    function asInt256(bytes calldata txData, uint256 i) internal pure returns (int256) {
+        return int256(uint256(bytes32(txData[4 + i * 32 : 4 + (i + 1) * 32])));
+    }
+
+    /// @notice Extract a bytes32 from ABI slot `i`.
+    function asBytes32(bytes calldata txData, uint256 i) internal pure returns (bytes32) {
+        return bytes32(txData[4 + i * 32 : 4 + (i + 1) * 32]);
+    }
+
+    /// @notice Extract a bool from ABI slot `i` (true when slot value is non-zero).
+    function asBool(bytes calldata txData, uint256 i) internal pure returns (bool) {
+        return asUint256(txData, i) != 0;
+    }
+
+    /// @notice Extract a uint128 from ABI slot `i` (lower 128 bits of the slot).
+    function asUint128(bytes calldata txData, uint256 i) internal pure returns (uint128) {
+        return uint128(asUint256(txData, i));
+    }
+
+    /// @notice Extract a uint64 from ABI slot `i`.
+    function asUint64(bytes calldata txData, uint256 i) internal pure returns (uint64) {
+        return uint64(asUint256(txData, i));
+    }
+
+    /// @notice Extract a uint32 from ABI slot `i`.
+    function asUint32(bytes calldata txData, uint256 i) internal pure returns (uint32) {
+        return uint32(asUint256(txData, i));
+    }
+
+    /// @notice Extract a uint24 from ABI slot `i` (e.g. Uniswap fee tier).
+    function asUint24(bytes calldata txData, uint256 i) internal pure returns (uint24) {
+        return uint24(asUint256(txData, i));
+    }
+
+    /// @notice Extract a uint16 from ABI slot `i` (e.g. Aave referral code).
+    function asUint16(bytes calldata txData, uint256 i) internal pure returns (uint16) {
+        return uint16(asUint256(txData, i));
+    }
+
+    /// @notice Extract bytes4 (a function selector) from ABI slot `i`.
+    function asBytes4(bytes calldata txData, uint256 i) internal pure returns (bytes4) {
+        return bytes4(asBytes32(txData, i));
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev.sail.money/sailor",
-  "version": "0.0.2-23",
+  "version": "0.0.2-24",
   "description": "Operator toolkit for Sail Protocol",
   "bin": {
     "sailor": "packages/cli/dist/index.cjs"

package/packages/cli/dist/index.cjs

@@ -39907,11 +39907,29 @@ init_esm2();
 async function checkContractExists(pc, address) {
   try {
     const code = await pc.getCode({ address });
-    return { address, hasCode: !!code && code !== "0x" };
+    const hasCode = !!code && code !== "0x";
+    return { address, hasCode, bytecode: hasCode ? code : void 0 };
   } catch (err) {
     return { address, hasCode: false, error: err.message.split("\n")[0] };
   }
 }
+function checkSelectorRoutes(calldata, bytecode) {
+  if (calldata.length < 10) {
+    return { selector: "", routes: null, reason: "calldata shorter than 4 bytes \u2014 no selector" };
+  }
+  const selector = calldata.slice(2, 10).toLowerCase();
+  const body = bytecode.slice(2).toLowerCase();
+  if (body.length < 100) {
+    return { selector, routes: null, reason: "proxy or minimal contract \u2014 routing not determinable from bytecode" };
+  }
+  if (body.includes("360894a13ba1a321")) {
+    return { selector, routes: null, reason: "EIP-1967 proxy detected \u2014 routing is in the implementation contract" };
+  }
+  if (body.includes("a3f0ad74e5423aeb")) {
+    return { selector, routes: null, reason: "EIP-1967 beacon proxy detected \u2014 routing is in the beacon implementation" };
+  }
+  return { selector, routes: body.includes(selector) };
+}
 
 // src/lib/permission-resolver.ts
 var IPERMISSION_ABI = [
@@ -40783,14 +40801,48 @@ var MandateStore = class {
       (m) => m.address.toLowerCase() === needle || m.name === addressOrName
     );
   }
-  /** Append a newly deployed mandate (replacing any prior record at the same address). */
+  /**
+   * Append a newly deployed mandate (replacing any prior record at the same address).
+   * When another mandate with the same name already exists on the same chain, the
+   * incoming mandate's name is suffixed with `[2]`, `[3]`, … to keep names unique.
+   */
   add(mandate2) {
     const data = this.read();
     data.mandates = data.mandates.filter(
       (m) => m.address.toLowerCase() !== mandate2.address.toLowerCase()
     );
+    const baseName = mandate2.name;
+    const sameName = (m) => m.name === mandate2.name && m.chainId === mandate2.chainId;
+    if (data.mandates.some(sameName)) {
+      let n = 2;
+      while (data.mandates.some((m) => m.name === `${baseName}[${n}]` && m.chainId === mandate2.chainId)) {
+        n++;
+      }
+      mandate2 = { ...mandate2, name: `${baseName}[${n}]` };
+    }
     data.mandates.push(mandate2);
     this.write(data);
+    return mandate2;
+  }
+  /** Update mutable metadata fields on a tracked mandate (name, sourcePath, artifactPath). */
+  update(addressOrName, patch) {
+    const data = this.read();
+    const needle = addressOrName.toLowerCase();
+    const mandate2 = data.mandates.find(
+      (m) => m.address.toLowerCase() === needle || m.name === addressOrName
+    );
+    if (!mandate2) throw new Error(`No tracked mandate found for: ${addressOrName}`);
+    if (patch.name !== void 0 && patch.name !== mandate2.name) {
+      const conflict = data.mandates.find(
+        (m) => m.name === patch.name && m.chainId === mandate2.chainId && m.address.toLowerCase() !== mandate2.address.toLowerCase()
+      );
+      if (conflict) throw new Error(`Name "${patch.name}" is already used by ${conflict.address} on chain ${mandate2.chainId}`);
+      mandate2.name = patch.name;
+    }
+    if (patch.sourcePath !== void 0) mandate2.sourcePath = patch.sourcePath;
+    if (patch.artifactPath !== void 0) mandate2.artifactPath = patch.artifactPath;
+    this.write(data);
+    return mandate2;
   }
   /** Record that a tracked mandate was attached to an SMA. */
   recordAttachment(address, attachment) {
@@ -41405,7 +41457,18 @@ async function runDeploy(project, channel, options) {
     );
   }
   const { abi: abi2, bytecode, contractName, artifactPath } = resolveArtifact(options);
-  const args = coerceConstructorArgs(abi2, options.args);
+  let argsJson;
+  if (options.argsFile) {
+    const argsFilePath = (0, import_node_path9.resolve)(options.argsFile);
+    try {
+      argsJson = (0, import_node_fs10.readFileSync)(argsFilePath, "utf8").trim();
+    } catch {
+      throw new Error(`Cannot read --args-file: ${argsFilePath}`);
+    }
+  } else {
+    argsJson = options.args;
+  }
+  const args = coerceConstructorArgs(abi2, argsJson);
   const deployData = encodeDeployData({ abi: abi2, bytecode, args });
   const chainId = project.chainId;
   const publicClient = publicClientFor(project);
@@ -41428,7 +41491,10 @@ async function runDeploy(project, channel, options) {
     data: deployData,
     details: [
       { label: "Contract", value: contractName },
-      { label: "Constructor args", value: options.args ? options.args : "(none)" }
+      {
+        label: options.argsFile ? "Constructor args (from file)" : "Constructor args",
+        value: argsJson ? argsJson : "(none)"
+      }
     ]
   });
   if (response.status === "rejected") {
@@ -41454,13 +41520,13 @@ async function runDeploy(project, channel, options) {
     deployedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   const store = new MandateStore();
-  store.add(record);
-  say(() => console.log("Tracked in .sail/state/mandates.json"));
+  const stored = store.add(record);
+  say(() => console.log("Tracked in .sail/state/mandates.json" + (stored.name !== record.name ? ` as "${stored.name}"` : "")));
   appendActivity({
     ts: nowIso(),
     actor: "owner",
     type: "mandate_deployed",
-    name: record.name,
+    name: stored.name,
     address: deployed,
     txHash: response.txHash,
     chainId
@@ -41474,7 +41540,7 @@ async function runDeploy(project, channel, options) {
       publicClient,
       sma,
       deployed,
-      record.name,
+      stored.name,
       json
     );
     store.recordAttachment(deployed, { sma, txHash: attachTxHash });
@@ -41489,7 +41555,7 @@ Register it later with: sailor mandate attach --address ${deployed} --sma <SMA>`
   emit(json, () => {
   }, {
     status: "ok",
-    mandate: { name: record.name, address: deployed, txHash: response.txHash, chainId },
+    mandate: { name: stored.name, address: deployed, txHash: response.txHash, chainId },
     attached: options.attach ? { sma: getAddress(options.sma), txHash: attachTxHash } : null
   });
 }
@@ -41751,7 +41817,7 @@ Connect the owner wallet (mandate signer) in the browser \u2014 the agent wallet
   }
   say(() => console.log("\u2713", `Deployed + registered ${spec.label} at ${clone}`));
   const store = new MandateStore();
-  store.add({
+  const storedClone = store.add({
     name: label,
     address: clone,
     txHash,
@@ -41764,7 +41830,7 @@ Connect the owner wallet (mandate signer) in the browser \u2014 the agent wallet
     actor: "agent",
     type: "permission_registered",
     permission: clone,
-    name: label,
+    name: storedClone.name,
     sma,
     txHash,
     chainId: project.chainId
@@ -42085,6 +42151,21 @@ function mandateContractsList() {
     }
   }
 }
+function mandateUpdate(options) {
+  const { address, name, sourcePath, artifactPath, json } = options;
+  if (!name && !sourcePath && !artifactPath) {
+    throw new Error("Provide at least one of --name, --source-path, or --artifact-path");
+  }
+  const store = new MandateStore();
+  const updated = store.update(address, { name, sourcePath, artifactPath });
+  emit(!!json, () => {
+    const changes = [];
+    if (name) changes.push(`name \u2192 ${updated.name}`);
+    if (sourcePath) changes.push(`sourcePath \u2192 ${updated.sourcePath}`);
+    if (artifactPath) changes.push(`artifactPath \u2192 ${updated.artifactPath}`);
+    console.log(`Updated ${updated.address}: ${changes.join(", ")}`);
+  }, { status: "ok", mandate: updated });
+}
 function resolveArtifact(options) {
   let artifactPath = options.artifact;
   let contractName = options.contract ?? options.name ?? "";
@@ -42094,7 +42175,7 @@ function resolveArtifact(options) {
   }
   const resolved = (0, import_node_path9.resolve)(artifactPath);
   const projectRoot = (0, import_node_path9.resolve)(process.cwd());
-  if (!resolved.startsWith(projectRoot + "/") && resolved !== projectRoot) {
+  if (!resolved.startsWith(projectRoot + import_node_path9.sep) && resolved !== projectRoot) {
     throw new Error(
       `Artifact path must be inside the project directory.
 Resolved: ${resolved}`
@@ -42539,6 +42620,7 @@ async function mandateSimulate(options) {
         checkContractExists(pc, c.target)
       ]);
       const result = probe.accepted ? "pass" : "fail";
+      const selectorCheck = codeCheck.hasCode && codeCheck.bytecode ? checkSelectorRoutes(c.data, codeCheck.bytecode) : { selector: "", routes: null, reason: codeCheck.hasCode ? "bytecode unavailable" : void 0 };
       return {
         index: i,
         label: c.label,
@@ -42550,7 +42632,10 @@ async function mandateSimulate(options) {
         expect: c.expect ?? null,
         match: c.expect ? c.expect === result : null,
         targetHasCode: codeCheck.hasCode,
-        targetCheckError: codeCheck.error
+        targetCheckError: codeCheck.error,
+        selectorRoutes: selectorCheck.routes,
+        selector: selectorCheck.selector,
+        selectorRoutesReason: selectorCheck.reason
       };
     })
   );
@@ -42581,7 +42666,10 @@ async function mandateSimulate(options) {
         expect: r.expect,
         match: r.match,
         targetHasCode: r.targetHasCode,
-        targetCheckError: r.targetCheckError
+        targetCheckError: r.targetCheckError,
+        selector: r.selector,
+        selectorRoutes: r.selectorRoutes,
+        selectorRoutesReason: r.selectorRoutesReason
       })),
       mismatches: mismatches.length,
       noCodeTargets: noCodeTargets.map((r) => r.target),
@@ -42607,7 +42695,9 @@ async function mandateSimulate(options) {
     const expectStr = r.expect === null ? "" : r.match ? `  expected ${r.expect}  \u2713 MATCH` : `  expected ${r.expect}  \u2717 MISMATCH`;
     console.log(`[${r.index + 1}] ${verdict}  ${r.label}${expectStr}`);
     const codeNote = r.targetCheckError ? `\u26A0 could not verify contract code (${r.targetCheckError})` : r.targetHasCode ? "\u2713 contract present" : `\u26A0 NO contract code on chain ${chainId} \u2014 this call would fail on-chain regardless of the permission`;
+    const selectorNote = r.selectorRoutes === true ? `\u2713 selector 0x${r.selector} routes` : r.selectorRoutes === false ? `\u26A0 selector 0x${r.selector} NOT found in bytecode \u2014 call would likely revert with unknown selector` : r.selectorRoutesReason ? `~ selector check skipped (${r.selectorRoutesReason})` : null;
     console.log(`     target ${r.target}   ${codeNote}`);
+    if (selectorNote) console.log(`     ${selectorNote}`);
     if (r.reverted && r.revertReason) {
       console.log(`     evaluate() reverted: ${r.revertReason}`);
     }
@@ -43225,13 +43315,30 @@ function isProcessAlive(pid) {
 // src/commands/run.ts
 var DEFAULT_INTERVAL_SEC = 60;
 var sleep2 = (ms) => new Promise((resolve3) => setTimeout(resolve3, ms));
-var ERC20_BALANCE_ABI = [
+var ERC20_READ_ABI = [
   {
     type: "function",
     name: "balanceOf",
     stateMutability: "view",
     inputs: [{ name: "account", type: "address" }],
     outputs: [{ name: "", type: "uint256" }]
+  },
+  {
+    type: "function",
+    name: "allowance",
+    stateMutability: "view",
+    inputs: [
+      { name: "owner", type: "address" },
+      { name: "spender", type: "address" }
+    ],
+    outputs: [{ name: "", type: "uint256" }]
+  },
+  {
+    type: "function",
+    name: "decimals",
+    stateMutability: "view",
+    inputs: [],
+    outputs: [{ name: "", type: "uint8" }]
   }
 ];
 function loadAgentData(filePath) {
@@ -43251,7 +43358,8 @@ async function loadAgent() {
     let mod2;
     if (abs.endsWith(".ts")) {
       const { tsImport } = await import("tsx/esm/api");
-      mod2 = await tsImport(abs, (0, import_node_url.pathToFileURL)(abs).href);
+      const absUrl = (0, import_node_url.pathToFileURL)(abs).href;
+      mod2 = await tsImport(absUrl, absUrl);
     } else {
       mod2 = await import((0, import_node_url.pathToFileURL)(abs).href);
     }
@@ -43378,11 +43486,30 @@ Configure the chain in @sail/chains or set KERNEL_ADDRESS in .sail/.env.local.`
     }
     return publicClient.readContract({
       address: token,
-      abi: ERC20_BALANCE_ABI,
+      abi: ERC20_READ_ABI,
       functionName: "balanceOf",
       args: [accountAddr]
     });
   };
+  const readAllowance = (token, owner2, spender) => publicClient.readContract({
+    address: token,
+    abi: ERC20_READ_ABI,
+    functionName: "allowance",
+    args: [owner2, spender]
+  });
+  const decimalsCache = /* @__PURE__ */ new Map();
+  const readDecimals = async (token) => {
+    const key = getAddress(token);
+    const cached = decimalsCache.get(key);
+    if (cached !== void 0) return cached;
+    const d = await publicClient.readContract({
+      address: token,
+      abi: ERC20_READ_ABI,
+      functionName: "decimals"
+    });
+    decimalsCache.set(key, d);
+    return d;
+  };
   async function runTick() {
     appendActivity({ ts: nowIso(), actor: "agent", type: "tick_start" });
     let blockInfo = { number: 0n, timestamp: 0n };
@@ -43412,10 +43539,15 @@ Configure the chain in @sail/chains or set KERNEL_ADDRESS in .sail/.env.local.`
         dispatch: execClient.dispatch,
         strategy: execClient.strategy
       }),
+      publicClient,
       manager: agentManager,
       log,
       data: agentData,
-      read: { balance: readBalance }
+      read: {
+        balance: readBalance,
+        allowance: readAllowance,
+        decimals: readDecimals
+      }
     };
     let dispatches;
     try {
@@ -44040,7 +44172,7 @@ account.command("rotate-signer").description("Rotate the SMA's delegated signer
 var mandate = program2.command("mandate").description("Manage mandates");
 mandate.command("prepare").description("Prepare a mandate draft for review and signing in the UI (MetaMask)").action(action(mandatePrepare));
 mandate.command("sign").description("Review and confirm the permissions authorized for your SMA").option("--yes", "Skip the confirmation prompt (for non-interactive / CI use)").action(actionWith(mandateSign));
-mandate.command("deploy").description("Deploy a Foundry-compiled permission contract via the browser signing UI").option("--artifact <path>", "Path to the Foundry artifact JSON (out/<Name>.sol/<Name>.json)").option("--contract <name>", "Contract name; resolves to <out>/<name>.sol/<name>.json").option("--out <dir>", "Foundry output directory", "out").option("--name <label>", "Label to track this permission under (defaults to contract name)").option("--args <json>", `Constructor args as a JSON array, e.g. '[["0x.."],"1000"]'`).option("--build", "Run `forge build` before deploying").option("--attach", "After deploy, register the permission on --sma").option("--sma <address>", "SMA to register on (required with --attach)").option("--json", "Emit machine-readable JSON").action(actionWith(mandateDeploy));
+mandate.command("deploy").description("Deploy a Foundry-compiled permission contract via the browser signing UI").option("--artifact <path>", "Path to the Foundry artifact JSON (out/<Name>.sol/<Name>.json)").option("--contract <name>", "Contract name; resolves to <out>/<name>.sol/<name>.json").option("--out <dir>", "Foundry output directory", "out").option("--name <label>", "Label to track this permission under (defaults to contract name)").option("--args <json>", `Constructor args as JSON array. Bash: '["0x..","1"]'. PowerShell: '[\\"0x..\\",\\"1\\"]'. Use --args-file to avoid quoting.`).option("--args-file <path>", "Path to a JSON file containing constructor args array (recommended on PowerShell)").option("--build", "Run `forge build` before deploying").option("--attach", "After deploy, register the permission on --sma").option("--sma <address>", "SMA to register on (required with --attach)").option("--json", "Emit machine-readable JSON").action(actionWith(mandateDeploy));
 mandate.command("attach").description("Register an already-deployed permission on an SMA (EIP-712 RegisterPermission)").requiredOption("--address <mandateOrName>", "Permission address, or a name tracked locally").requiredOption("--sma <address>", "SMA to register the permission on").option("--label <label>", "Human-readable label shown in the signing UI").option("--json", "Emit machine-readable JSON").action(actionWith(mandateAttach));
 mandate.command("deploy-clone").description("Deploy + register a standalone clone permission (e.g. boundedApprove) via the signing UI").requiredOption("--template <key>", "Standalone clone template key (e.g. boundedApprove)").requiredOption("--sma <address>", "SMA to deploy the clone for and register it on").option("--tokens <csv>", "Comma-separated allowed token addresses").option("--spenders <csv>", "Comma-separated allowed spender addresses").option("--max <amount>", "Max amount per tx in base units (default: uint256 max)").option("--label <label>", "Human-readable label to track this permission under").option("--json", "Emit machine-readable JSON").action(actionWith(mandateDeployClone));
 mandate.command("revoke").description("Revoke permission(s) from an SMA (EIP-712 RevokePermissions, owner-authorized)").option("--address <permissionOrName>", "Permission address, or a name tracked locally").requiredOption("--sma <address>", "Safe (SMA) to revoke the permission(s) from").option("--all", "Revoke every permission currently registered on the SMA").option("--json", "Output JSON").action(actionWith(mandateRevoke));
@@ -44048,6 +44180,7 @@ mandate.command("templates").description("Show how to author your own permission
 mandate.command("simulate").description(
   "Probe a permission against sample calls off-chain (eth_call, NO gas) \u2014 prove it accepts the calls you want and rejects the ones you don't, before authorizing on-chain"
 ).requiredOption("--address <permissionOrName>", "Permission to probe (address or tracked name)").option("--sma <address>", "SMA to probe as (ctx.account; defaults to .sail/account.json)").option("--target <address>", "Inline single call: target contract address").option("--calldata <hex>", "Inline single call: 0x-prefixed calldata").option("--value <wei>", "Inline single call: ETH value in wei (default 0)").option("--expect <pass|fail>", "Inline single call: expected outcome (sets non-zero exit on mismatch)").option("--label <text>", "Inline single call: human-readable label").option("--calls <file>", "Batch: JSON array of { target, calldata, value?, expect?, label? }").option("--json", "Emit machine-readable JSON").action(actionWith(mandateSimulate));
+mandate.command("update").description("Update metadata for a tracked permission contract (rename, source path, artifact path)").requiredOption("--address <mandateOrName>", "Permission address or tracked name to update").option("--name <label>", "New tracking label (must be unique within the same chain)").option("--source-path <path>", "Update the relative path to the Solidity source file").option("--artifact-path <path>", "Update the relative path to the Foundry artifact JSON").option("--json", "Emit machine-readable JSON").action(actionWith(mandateUpdate));
 mandate.command("list").description("List permission contracts deployed from this project").action(action(async () => mandateContractsList()));
 program2.command("onboard").description("Set up an SMA, register a permission, confirm the agent is operational").option("--sma <address>", "Use a specific SMA address instead of prompting").option("--new-sma", "Create a new SMA via SailKernel").option("--salt <n>", "CREATE2 salt for deterministic Safe address (default: 0; use 0 for first SMA, increment for subsequent)").option("--template <kindOrAddress>", "Register this permission contract (kind, label, or address)").option("--skip-mandate", "Skip the permission registration step").option("--json", "Emit machine-readable JSON (implies non-interactive)").action(actionWith(onboard));
 var station = program2.command("station").description("Manage the persistent signing station (browser signing daemon)");

package/packages/sdk/dist/index.d.ts

@@ -17,7 +17,7 @@ export { KERNEL_ERROR_ABI, KERNEL_ERROR_SIGNATURES, decodeKernelError, explainKe
 export { DISPATCH_EIP712_FIELDS, REGISTER_PERMISSION_TYPES, REGISTER_PERMISSION_TYPES_NO_DEADLINE, REGISTER_PERMISSIONS_BATCH_TYPES, buildDispatchSignature, buildRegisterPermissionTypedData, buildRegisterPermissionsBatchTypedData, sailKernelDomain, signRegisterPermission, } from "./eip712.js";
 export { estimatePermissionFee } from "./fees.js";
 export type { FetchLifiQuoteParams, LifiSwapQuote } from "./lifi.js";
-export { DEFAULT_SLIPPAGE, LIFI_QUOTE_URL, LIFI_ROUTERS, encodeApprove, fetchLifiQuote, } from "./lifi.js";
+export { DEFAULT_SLIPPAGE, LIFI_QUOTE_URL, LIFI_ROUTERS, encodeApprove, fetchLifiQuote, minTokenOut, } from "./lifi.js";
 export type { AllocationItem, AllocationRequest, AllocationResponse, BenchmarkResponse, ComparePosition, CompareRequest, CompareResponse, ExplainRequest, ExplainResponse, InstitutionalRequest, InstitutionalResponse, OpportunitiesResponse, PortfolioCheckResponse, RebalanceRequest, RebalanceResponse, RisksSummaryResponse, SafeCheckResponse, SailIntelligenceOptions, ScreenRequest, ScreenResponse, ValidateRequest, ValidateResponse, VaultRiskResponse, VaultScreenResult, YieldOpportunity, YieldSourceItem, YieldSourcesResponse, } from "./intelligence.js";
 export { SAIL_INTELLIGENCE_BASE_URL, SAIL_INTELLIGENCE_DOCS_URL, SailIntelligence, } from "./intelligence.js";
 //# sourceMappingURL=index.d.ts.map

package/packages/sdk/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,YAAY,EACV,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AACrF,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qCAAqC,EACrC,gCAAgC,EAChC,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AAGnB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,YAAY,EACV,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AACrF,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qCAAqC,EACrC,gCAAgC,EAChC,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,WAAW,CAAC;AAGnB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}

package/packages/sdk/dist/index.js

@@ -11,6 +11,6 @@ export { DISPATCH_TYPE_STRINGS, DISPATCH_TYPEHASHES, REGISTER_PERMISSION_TYPE_ST
 export { KERNEL_ERROR_ABI, KERNEL_ERROR_SIGNATURES, decodeKernelError, explainKernelRevert, } from "./errors.js";
 export { DISPATCH_EIP712_FIELDS, REGISTER_PERMISSION_TYPES, REGISTER_PERMISSION_TYPES_NO_DEADLINE, REGISTER_PERMISSIONS_BATCH_TYPES, buildDispatchSignature, buildRegisterPermissionTypedData, buildRegisterPermissionsBatchTypedData, sailKernelDomain, signRegisterPermission, } from "./eip712.js";
 export { estimatePermissionFee } from "./fees.js";
-export { DEFAULT_SLIPPAGE, LIFI_QUOTE_URL, LIFI_ROUTERS, encodeApprove, fetchLifiQuote, } from "./lifi.js";
+export { DEFAULT_SLIPPAGE, LIFI_QUOTE_URL, LIFI_ROUTERS, encodeApprove, fetchLifiQuote, minTokenOut, } from "./lifi.js";
 export { SAIL_INTELLIGENCE_BASE_URL, SAIL_INTELLIGENCE_DOCS_URL, SailIntelligence, } from "./intelligence.js";
 //# sourceMappingURL=index.js.map

package/packages/sdk/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAc7D,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAQrF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qCAAqC,EACrC,gCAAgC,EAChC,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AAgCnB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAc7D,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAQrF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qCAAqC,EACrC,gCAAgC,EAChC,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,WAAW,CAAC;AAgCnB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}

package/packages/sdk/dist/intelligence.d.ts

@@ -5,7 +5,7 @@
  * Do not edit manually — run `pnpm build` to regenerate.
  *
  * Spec version : 1.2.0
- * Generated at : 2026-06-10T08:02:39.276Z
+ * Generated at : 2026-06-10T16:18:17.533Z
  */
 export declare const SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 export declare const SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";

package/packages/sdk/dist/intelligence.js

@@ -5,7 +5,7 @@
  * Do not edit manually — run `pnpm build` to regenerate.
  *
  * Spec version : 1.2.0
- * Generated at : 2026-06-10T08:02:39.276Z
+ * Generated at : 2026-06-10T16:18:17.533Z
  */
 export const SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 export const SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";

package/packages/sdk/dist/lifi.d.ts

@@ -75,6 +75,23 @@ export type FetchLifiQuoteParams = {
     /** Optional fetch implementation (defaults to global fetch). */
     fetchFn?: typeof fetch;
 };
+/**
+ * Compute the minimum acceptable output amount for a swap, given a quoted
+ * `toAmount` and a slippage tolerance.
+ *
+ * Use this to enforce slippage protection when building dispatch calldata —
+ * pass the result as `amountOutMinimum` (Uniswap) or `minAmount` (LiFi).
+ *
+ * @param toAmount  Expected output in the destination token's base units
+ *                  (from `LifiSwapQuote.toAmount` or a Quoter call).
+ * @param slippage  Maximum acceptable price movement as a fraction (0.03 = 3%).
+ *                  Defaults to `DEFAULT_SLIPPAGE` (3%).
+ *
+ * @example
+ * const quote = await fetchLifiQuote({ ... });
+ * const minOut = minTokenOut(quote.toAmount, 0.005); // 0.5% slippage
+ */
+export declare function minTokenOut(toAmount: bigint, slippage?: number): bigint;
 /**
  * Fetch an executable LiFi quote for a same-chain swap. Throws with the API's
  * error body when the quote is unavailable or malformed.

package/packages/sdk/dist/lifi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifi.d.ts","sourceRoot":"","sources":["../src/lifi.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAsB,KAAK,GAAG,EAAY,MAAM,MAAM,CAAC;AAE5E,2BAA2B;AAC3B,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAIhD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAOrC,2CAA2C;AAC3C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;EAAY,CAAC;AAE7C,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAEnE;AAED,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG;IAC1B,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB;IACrB,IAAI,EAAE,GAAG,CAAC;IACV,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAoCzF"}
+{"version":3,"file":"lifi.d.ts","sourceRoot":"","sources":["../src/lifi.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAsB,KAAK,GAAG,EAAY,MAAM,MAAM,CAAC;AAE5E,2BAA2B;AAC3B,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAIhD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAOrC,2CAA2C;AAC3C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;EAAY,CAAC;AAE7C,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAEnE;AAED,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG;IAC1B,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB;IACrB,IAAI,EAAE,GAAG,CAAC;IACV,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAyB,GAAG,MAAM,CAMzF;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAoCzF"}

package/packages/sdk/dist/lifi.js

@@ -32,6 +32,30 @@ export const ERC20_ALLOWANCE_ABI = ERC20_ABI;
 export function encodeApprove(spender, amount) {
     return encodeFunctionData({ abi: ERC20_ABI, functionName: "approve", args: [spender, amount] });
 }
+/**
+ * Compute the minimum acceptable output amount for a swap, given a quoted
+ * `toAmount` and a slippage tolerance.
+ *
+ * Use this to enforce slippage protection when building dispatch calldata —
+ * pass the result as `amountOutMinimum` (Uniswap) or `minAmount` (LiFi).
+ *
+ * @param toAmount  Expected output in the destination token's base units
+ *                  (from `LifiSwapQuote.toAmount` or a Quoter call).
+ * @param slippage  Maximum acceptable price movement as a fraction (0.03 = 3%).
+ *                  Defaults to `DEFAULT_SLIPPAGE` (3%).
+ *
+ * @example
+ * const quote = await fetchLifiQuote({ ... });
+ * const minOut = minTokenOut(quote.toAmount, 0.005); // 0.5% slippage
+ */
+export function minTokenOut(toAmount, slippage = DEFAULT_SLIPPAGE) {
+    if (slippage < 0 || slippage >= 1)
+        throw new Error(`slippage must be in [0, 1) — got ${slippage}`);
+    // Scale to 1e6 precision to avoid floating-point truncation on small amounts.
+    const scale = 1000000n;
+    const keepFraction = BigInt(Math.round((1 - slippage) * 1_000_000));
+    return (toAmount * keepFraction) / scale;
+}
 /**
  * Fetch an executable LiFi quote for a same-chain swap. Throws with the API's
  * error body when the quote is unavailable or malformed.