@dev.sail.money/sailor 0.0.2 → 0.1.0-local

package/packages/sdk/README.md

@@ -1,65 +1,65 @@
-# @sail.money/sdk
-
-> **Pre-1.0 — unstable.** The Sail Protocol trusted core is under an ongoing
-> external audit by [Octane Security](https://octane.security). The API may
-> change between releases while the protocol is in audit. Do not use staging
-> deployments with funds you are not prepared to lose.
-
-TypeScript SDK for Sail Protocol — the on-chain SMA (Separately Managed
-Account) infrastructure. Peer-depends on `viem ^2`.
-
-## Install
-
-```sh
-npm install @sail.money/sdk viem
-```
-
-## Key exports
-
-| Export | What it does |
-|---|---|
-| `SailorClient` | Full client: account, mandate, dispatch, session, fees |
-| `buildDispatchSignature` | Self-detecting EIP-712 Dispatch signer (reads on-chain model; no footguns) |
-| `detectKernelCapabilities` | Reads `DISPATCH_TYPEHASH` on-chain; identifies conjunctive vs selective kernel |
-| `sailKernelDomain` | EIP-712 domain for any SailKernel |
-| `DISPATCH_EIP712_FIELDS` | Typed struct field lists keyed by dispatch model |
-| `LocalKeyring` | Encrypted manager key (geth keystore v3) |
-| `sailDeployments` | Live staging addresses (Base, Base Sepolia, Arbitrum, Unichain) |
-| `SailIntelligence` | Typed client for the Sail Intelligence API |
-
-## Dispatch signing
-
-```ts
-import { buildDispatchSignature, LocalKeyring } from "@sail.money/sdk";
-import { createPublicClient, http } from "viem";
-
-const publicClient = createPublicClient({ chain: base, transport: http(rpcUrl) });
-const manager = await LocalKeyring.load("path/to/manager.json", passphrase);
-
-const { signature, nonce, deadline, dispatchModel } = await buildDispatchSignature({
-  publicClient,
-  kernel: "0x6319d3dfDDe3804ba93D65752b00c52bFb05a1ab", // Base
-  chainId: 8453,
-  account: mySafe,
-  permission: myPermission,
-  call: { target: router, value: 0n, data: swapCalldata },
-  manager,
-});
-// Submit: kernel.dispatch(account, permission, target, value, data, signature, deadline)
-```
-
-`buildDispatchSignature` reads the kernel's on-chain `DISPATCH_TYPEHASH` to
-select the correct struct automatically — you cannot pass the wrong model.
-
-## Full client
-
-```ts
-import { SailorClient } from "@sail.money/sdk";
-
-const client = new SailorClient({ rpcUrl: "https://...", chainId: 8453 });
-// Read-only operations (no signer required):
-const caps = await client.capabilities();
-// State-changing operations require a signer:
-const exec = client.withSigner(walletClient);
-await exec.dispatch.single(safe, permission, call, manager);
-```
+# @sail.money/sdk
+
+> **Pre-1.0 — unstable.** The Sail Protocol trusted core is under an ongoing
+> external audit by [Octane Security](https://octane.security). The API may
+> change between releases while the protocol is in audit. Do not use staging
+> deployments with funds you are not prepared to lose.
+
+TypeScript SDK for Sail Protocol — the on-chain SMA (Separately Managed
+Account) infrastructure. Peer-depends on `viem ^2`.
+
+## Install
+
+```sh
+npm install @sail.money/sdk viem
+```
+
+## Key exports
+
+| Export | What it does |
+|---|---|
+| `SailorClient` | Full client: account, mandate, dispatch, session, fees |
+| `buildDispatchSignature` | Self-detecting EIP-712 Dispatch signer (reads on-chain model; no footguns) |
+| `detectKernelCapabilities` | Reads `DISPATCH_TYPEHASH` on-chain; identifies conjunctive vs selective kernel |
+| `sailKernelDomain` | EIP-712 domain for any SailKernel |
+| `DISPATCH_EIP712_FIELDS` | Typed struct field lists keyed by dispatch model |
+| `LocalKeyring` | Encrypted manager key (geth keystore v3) |
+| `sailDeployments` | Live staging addresses (Base, Base Sepolia, Arbitrum, Unichain) |
+| `SailIntelligence` | Typed client for the Sail Intelligence API |
+
+## Dispatch signing
+
+```ts
+import { buildDispatchSignature, LocalKeyring } from "@sail.money/sdk";
+import { createPublicClient, http } from "viem";
+
+const publicClient = createPublicClient({ chain: base, transport: http(rpcUrl) });
+const manager = await LocalKeyring.load("path/to/manager.json", passphrase);
+
+const { signature, nonce, deadline, dispatchModel } = await buildDispatchSignature({
+  publicClient,
+  kernel: "0x6319d3dfDDe3804ba93D65752b00c52bFb05a1ab", // Base
+  chainId: 8453,
+  account: mySafe,
+  permission: myPermission,
+  call: { target: router, value: 0n, data: swapCalldata },
+  manager,
+});
+// Submit: kernel.dispatch(account, permission, target, value, data, signature, deadline)
+```
+
+`buildDispatchSignature` reads the kernel's on-chain `DISPATCH_TYPEHASH` to
+select the correct struct automatically — you cannot pass the wrong model.
+
+## Full client
+
+```ts
+import { SailorClient } from "@sail.money/sdk";
+
+const client = new SailorClient({ rpcUrl: "https://...", chainId: 8453 });
+// Read-only operations (no signer required):
+const caps = await client.capabilities();
+// State-changing operations require a signer:
+const exec = client.withSigner(walletClient);
+await exec.dispatch.single(safe, permission, call, manager);
+```

package/packages/sdk/dist/chains.d.ts

@@ -0,0 +1,12 @@
+import type { ChainConfig } from "./types.js";
+/**
+ * Registry of live SailKernel deployments, keyed by EVM chainId.
+ *
+ * All entries were updated to the CREATE2-deterministic deployment (gitCommit
+ * 1199b33) in which every core contract lands at the same address on every chain.
+ * Add new chains here as SailKernel is deployed on additional networks.
+ */
+export declare const chains: Record<number, ChainConfig>;
+/** Returns the ChainConfig for a given chainId, or throws if unsupported. */
+export declare function getChain(chainId: number): ChainConfig;
+//# sourceMappingURL=chains.d.ts.map

package/packages/sdk/dist/chains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chains.d.ts","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CA6E9C,CAAC;AAEF,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAQrD"}

package/packages/sdk/dist/chains.js

@@ -0,0 +1,94 @@
+/**
+ * Registry of live SailKernel deployments, keyed by EVM chainId.
+ *
+ * All entries were updated to the CREATE2-deterministic deployment (gitCommit
+ * 1199b33) in which every core contract lands at the same address on every chain.
+ * Add new chains here as SailKernel is deployed on additional networks.
+ */
+export const chains = {
+    // Ethereum mainnet
+    1: {
+        chainId: 1,
+        name: "Ethereum",
+        rpcEnvVar: "ETH_MAINNET_RPC_URL",
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        kernel: "0x02ABC18B65A328de2e749F56ba79ACF2718a6659",
+        mandateFactory: "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2",
+        governance: "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC",
+        dispatchModel: "selective",
+        protocols: {},
+    },
+    // Base mainnet
+    8453: {
+        chainId: 8453,
+        name: "Base",
+        rpcEnvVar: "BASE_RPC_URL",
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        // Supersedes 0x6319d3dfDDe3804ba93D65752b00c52bFb05a1ab (SAIL-405).
+        kernel: "0x02ABC18B65A328de2e749F56ba79ACF2718a6659",
+        mandateFactory: "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2",
+        governance: "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC",
+        dispatchModel: "selective",
+        protocols: {},
+    },
+    // Arbitrum mainnet
+    42161: {
+        chainId: 42161,
+        name: "Arbitrum",
+        rpcEnvVar: "ARBITRUM_RPC_URL",
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        // Supersedes 0x2716B12832DED0EF5688519c5Fe069EFc0374E02 (SAIL-405).
+        kernel: "0x02ABC18B65A328de2e749F56ba79ACF2718a6659",
+        mandateFactory: "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2",
+        governance: "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC",
+        dispatchModel: "selective",
+        protocols: {},
+    },
+    // Unichain mainnet
+    130: {
+        chainId: 130,
+        name: "Unichain",
+        rpcEnvVar: "UNICHAIN_RPC_URL",
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        // Supersedes 0xD985029960a9B7C2E7E38e102C448b8b8539B156 (SAIL-406).
+        kernel: "0x02ABC18B65A328de2e749F56ba79ACF2718a6659",
+        mandateFactory: "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2",
+        governance: "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC",
+        dispatchModel: "selective",
+        protocols: {},
+    },
+    // Base Sepolia (testnet)
+    84532: {
+        chainId: 84532,
+        name: "Base Sepolia",
+        rpcEnvVar: "BASE_SEPOLIA_RPC_URL",
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        // Supersedes 0xf1D0F4C9893612627409948BAa9d82a01a373799 (SAIL-405).
+        kernel: "0x02ABC18B65A328de2e749F56ba79ACF2718a6659",
+        mandateFactory: "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2",
+        governance: "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC",
+        dispatchModel: "selective",
+        protocols: {},
+    },
+    // Eth Sepolia (testnet)
+    11155111: {
+        chainId: 11155111,
+        name: "Eth Sepolia",
+        rpcEnvVar: "SEPOLIA_RPC_URL",
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        kernel: "0x02ABC18B65A328de2e749F56ba79ACF2718a6659",
+        mandateFactory: "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2",
+        governance: "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC",
+        dispatchModel: "selective",
+        protocols: {},
+    },
+};
+/** Returns the ChainConfig for a given chainId, or throws if unsupported. */
+export function getChain(chainId) {
+    const config = chains[chainId];
+    if (!config) {
+        throw new Error(`Chain ${chainId} is not supported. Supported chains: 1 (Ethereum), 8453 (Base), 42161 (Arbitrum), 130 (Unichain), 84532 (Base Sepolia), 11155111 (Eth Sepolia).`);
+    }
+    return config;
+}
+//# sourceMappingURL=chains.js.map

package/packages/sdk/dist/chains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chains.js","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAgC;IACjD,mBAAmB;IACnB,CAAC,EAAE;QACD,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,qBAAqB;QAChC,gEAAgE;QAChE,MAAM,EAAE,4CAA4C;QACpD,cAAc,EAAE,4CAA4C;QAC5D,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,EAAE;KACd;IACD,eAAe;IACf,IAAI,EAAE;QACJ,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,cAAc;QACzB,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,EAAE,4CAA4C;QACpD,cAAc,EAAE,4CAA4C;QAC5D,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,EAAE;KACd;IACD,mBAAmB;IACnB,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,kBAAkB;QAC7B,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,EAAE,4CAA4C;QACpD,cAAc,EAAE,4CAA4C;QAC5D,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,EAAE;KACd;IACD,mBAAmB;IACnB,GAAG,EAAE;QACH,OAAO,EAAE,GAAG;QACZ,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,kBAAkB;QAC7B,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,EAAE,4CAA4C;QACpD,cAAc,EAAE,4CAA4C;QAC5D,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,EAAE;KACd;IACD,yBAAyB;IACzB,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,sBAAsB;QACjC,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,EAAE,4CAA4C;QACpD,cAAc,EAAE,4CAA4C;QAC5D,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,EAAE;KACd;IACD,wBAAwB;IACxB,QAAQ,EAAE;QACR,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,iBAAiB;QAC5B,gEAAgE;QAChE,MAAM,EAAE,4CAA4C;QACpD,cAAc,EAAE,4CAA4C;QAC5D,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,SAAS,OAAO,iJAAiJ,CAClK,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/packages/sdk/dist/deployments.d.ts

@@ -1,7 +1,14 @@
 import type { Address } from "viem";
 import type { DispatchModel } from "./capabilities.js";
-/** Chains with a bundled Sail Protocol deployment: Base, Base Sepolia, Arbitrum, Unichain. */
-export type SailChainId = 8453 | 84532 | 42161 | 130;
+/**
+ * Chains with a bundled Sail Protocol deployment.
+ * Mainnets: Ethereum (1), Base (8453), Arbitrum (42161), Unichain (130).
+ * Testnets: Base Sepolia (84532), Eth Sepolia (11155111).
+ *
+ * All six chains were redeployed via CREATE2 (global salt, gitCommit 1199b33)
+ * so every core contract lands at the same address on every chain.
+ */
+export type SailChainId = 1 | 8453 | 42161 | 130 | 84532 | 11155111;
 /** A pre-audited mandate template available on a chain. */
 export type KnownTemplate = {
     kind: string;
@@ -21,7 +28,7 @@ export type CloneTemplateParam = {
  * Rich, self-describing metadata for an EIP-1167 clone permission template — the
  * wizard-/tooling-facing companion to the bare `standaloneTemplates` address map.
  * `address` mirrors `standaloneTemplates[key]` (the clone LOGIC). A clone is created
- * per account via `PermissionFactory.deployAndAttach(account, address, salt,
+ * per account via `MandateFactory.deployAndAttach(account, address, salt,
  * initData)`, where `initData` ABI-encodes a call to `initialize(initParams…)`.
  */
 export type CloneTemplateInfo = {
@@ -46,7 +53,7 @@ export type SailDeployment = {
     governance: Address;
     timelock: Address;
     kernel: Address;
-    permissionFactory: Address;
+    mandateFactory: Address;
     standardFeePolicy: Address;
     safeModuleEnabler: Address;
     treasury: Address;
@@ -57,15 +64,15 @@ export type SailDeployment = {
      * Dispatch model this kernel implements, as a static hint. Verified on-chain
      * against each kernel's DISPATCH_TYPEHASH. The SDK still prefers live detection
      * (detectKernelCapabilities) and uses this only as a fallback when the on-chain
-     * read is unavailable. All three bundled chains (Base, Base Sepolia, Arbitrum)
-     * run the "selective" model, verified on-chain against each kernel's DISPATCH_TYPEHASH.
+     * read is unavailable. All deployed chains run the "selective" model, verified
+     * on-chain against each kernel's DISPATCH_TYPEHASH.
      */
     dispatchModel?: DispatchModel;
     /** Pre-audited shared mandate templates available on this chain. */
     knownTemplates?: KnownTemplate[];
     /**
      * Standalone (EIP-1167 clone) permission template LOGIC addresses, keyed by a
-     * short name. These are the `impl` argument to PermissionFactory.deployAndAttach.
+     * short name. These are the `impl` argument to MandateFactory.deployAndAttach.
      */
     standaloneTemplates?: Record<string, Address>;
     /**

package/packages/sdk/dist/deployments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployments.d.ts","sourceRoot":"","sources":["../src/deployments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,8FAA8F;AAC9F,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC;AAErD,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oEAAoE;IACpE,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C;;;;;OAKG;IACH,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACtC,CAAC;AAIF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,CA4K/D,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAMjE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAiBlF"}
+{"version":3,"file":"deployments.d.ts","sourceRoot":"","sources":["../src/deployments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEpE,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oEAAoE;IACpE,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C;;;;;OAKG;IACH,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACtC,CAAC;AAoBF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,CAwI/D,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAMjE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CA4BlF"}

package/packages/sdk/dist/deployments.js

@@ -1,172 +1,154 @@
 const zero = "0x0000000000000000000000000000000000000000";
+/**
+ * CREATE2-deterministic core addresses — identical on every chain (gitCommit 1199b33,
+ * deployment mode: create2-global-salt, factory: 0x4e59b44847b379578588920cA78FbF26c0B4956C).
+ *
+ * Because kernel, safeModuleEnabler, and standardFeePolicy are the same on every chain,
+ * SailKernel.createAccount produces the same SMA address with the same owner/manager/salt
+ * on every supported chain — enabling true cross-chain deterministic SMA deployment.
+ */
+const CREATE2_KERNEL = "0x02ABC18B65A328de2e749F56ba79ACF2718a6659";
+const CREATE2_GOVERNANCE = "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC";
+const CREATE2_TIMELOCK = "0xE48Ba8DB6d748adafD13155c3590f62e58a77f56";
+const CREATE2_SAFE_MODULE_ENABLER = "0x7897Cb53a4be4a2eaAf46D60573C4Fd83b33fE1F";
+const CREATE2_MANDATE_FACTORY = "0x14EDd6c2a56EfC0d71E215ab13094B9AF90543d2";
+const CREATE2_STANDARD_FEE_POLICY = "0xe7B5901b839cFFDEd9D4108A22712C8BfdA1D80D";
+const CREATE2_TREASURY = "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6";
 export const sailDeployments = {
-    84532: {
-        // SAIL-405 redeploy (2026-06-04, gitCommit 6d872e6): adds owner-gated
-        // setManager(newManager) to rotate the SMA's delegated signer (clears the
-        // permission set + bumps the nonce epoch). Genesis allowlist bootstrap +
-        // local CREATE2 proxy prediction carried over; allowlistBootstrapped=true,
-        // createAccount verified working, zero fees, onboarding live. Supersedes
-        // 0xcC50009115DAaBCB40513e03a1a0Cc2Fdf6Be558. Only `core` was redeployed;
-        // shared/standalone permission templates are NOT yet deployed against this
-        // kernel (run the templates targets + refill the template maps before clones).
-        chainId: 84532,
-        blockNumber: 42400417,
-        deployer: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
-        governance: "0xEaD44bC6999E7b00b9b2E11c1660248DC2a30993",
-        timelock: "0x97B863e392C9859336788D5Ec454527d33C95B74",
-        kernel: "0xf1D0F4C9893612627409948BAa9d82a01a373799",
-        permissionFactory: "0xdfF6a2272F667cDf78Af4681b9c88A219998db95",
-        standardFeePolicy: "0x05570F7973b46Eb9Ed4518422891EFC26BD58b97",
-        safeModuleEnabler: "0xB2C2B52d94412e3472C9fb2B52186eA12a935869",
-        treasury: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
+    // ── Ethereum mainnet ─────────────────────────────────────────────────────────
+    1: {
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        // allowlistBootstrapped=true (genesis bootstrap), zero fees, 48h timelock.
+        chainId: 1,
+        blockNumber: 25280925,
+        deployer: CREATE2_TREASURY,
+        governance: CREATE2_GOVERNANCE,
+        timelock: CREATE2_TIMELOCK,
+        kernel: CREATE2_KERNEL,
+        mandateFactory: CREATE2_MANDATE_FACTORY,
+        standardFeePolicy: CREATE2_STANDARD_FEE_POLICY,
+        safeModuleEnabler: CREATE2_SAFE_MODULE_ENABLER,
+        treasury: CREATE2_TREASURY,
         maxPermissionFeeWei: 1000000000000000n,
         initialBaseFee: 0n,
         initialComplexityRate: 0n,
-        dispatchModel: "selective", // selective: verified on-chain DISPATCH_TYPEHASH 0xbe50c5391dcf9e08d11d2c30dbee822c14ad07af2ceb503c778d265801fb0e5c
+        dispatchModel: "selective",
         knownTemplates: [],
         standaloneTemplates: {},
     },
+    // ── Base mainnet ─────────────────────────────────────────────────────────────
     8453: {
-        // SAIL-405 redeploy (2026-06-04, gitCommit 0ed0561): adds owner-gated
-        // setManager(newManager) to rotate the SMA's delegated signer (clears the
-        // permission set + bumps the nonce epoch). Genesis allowlist bootstrap +
-        // local CREATE2 proxy prediction carried over; allowlistBootstrapped=true,
-        // zero fees, onboarding live. Supersedes 0x20eff0DbE752e22655A6dAA5A94521FA06CDdE06.
-        // Only `core` was redeployed; shared/standalone permission templates are NOT yet
-        // deployed against this kernel (run the templates targets + refill the maps first).
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33). Supersedes
+        // 0x6319d3dfDDe3804ba93D65752b00c52bFb05a1ab (SAIL-405 redeploy).
+        // allowlistBootstrapped=true, zero fees, 48h timelock.
         chainId: 8453,
-        blockNumber: 46898030,
-        deployer: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
-        governance: "0x7E897D919872b1587577617ffFC42113679d0C50",
-        timelock: "0x8eC3Ca951E193C6E3713A70022454d7A1f083281",
-        kernel: "0x6319d3dfDDe3804ba93D65752b00c52bFb05a1ab",
-        permissionFactory: "0x7724EACd97C8601d5AC244Aadbf76ad87353Ff31",
-        standardFeePolicy: "0x65850a8D5050aeAade68289ff96c4F119a24B82e",
-        safeModuleEnabler: "0xC84EdE78f93291A1fab19F51c4c7e938AB302Edf",
-        treasury: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
+        blockNumber: 47115338,
+        deployer: CREATE2_TREASURY,
+        governance: CREATE2_GOVERNANCE,
+        timelock: CREATE2_TIMELOCK,
+        kernel: CREATE2_KERNEL,
+        mandateFactory: CREATE2_MANDATE_FACTORY,
+        standardFeePolicy: CREATE2_STANDARD_FEE_POLICY,
+        safeModuleEnabler: CREATE2_SAFE_MODULE_ENABLER,
+        treasury: CREATE2_TREASURY,
         maxPermissionFeeWei: 1000000000000000n,
         initialBaseFee: 0n,
         initialComplexityRate: 0n,
-        dispatchModel: "selective", // selective: verified on-chain DISPATCH_TYPEHASH 0xbe50c5391dcf9e08d11d2c30dbee822c14ad07af2ceb503c778d265801fb0e5c
+        dispatchModel: "selective",
         knownTemplates: [],
         standaloneTemplates: {},
     },
+    // ── Arbitrum mainnet ─────────────────────────────────────────────────────────
     42161: {
-        // SAIL-405 redeploy (2026-06-04, gitCommit 0ed0561): adds owner-gated
-        // setManager(newManager) to rotate the SMA's delegated signer (clears the
-        // permission set + bumps the nonce epoch). Genesis allowlist bootstrap +
-        // local CREATE2 proxy prediction carried over; allowlistBootstrapped=true,
-        // zero fees, onboarding live. Supersedes 0x9AF32E0C395fb31f5cA28994351F8fAE3003e125.
-        // Bootstrap was sent as a standalone tx post-core-deploy; identical end state to Base.
-        // Only `core` was redeployed; shared/standalone permission templates are NOT yet
-        // deployed against this kernel (run the templates targets + refill the maps first).
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33). Supersedes
+        // 0x2716B12832DED0EF5688519c5Fe069EFc0374E02 (SAIL-405 redeploy).
+        // allowlistBootstrapped=true, zero fees, 48h timelock.
         chainId: 42161,
-        blockNumber: 25244824,
-        deployer: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
-        governance: "0xd6AbB7A1036ADc7958Abffec9Da03450c5a2Ec8e",
-        timelock: "0x114CB7110C780f7E3a6093AfE0B52463a569857C",
-        kernel: "0x2716B12832DED0EF5688519c5Fe069EFc0374E02",
-        permissionFactory: "0x23681A8A4C9819D8EaB37E46B858da6F3c85E683",
-        standardFeePolicy: "0xAdfB986D48480bC67a7cF3751d30599161632e0D",
-        safeModuleEnabler: "0xabe2a6D03F592BC602cA1dBDCD885ba2493274f9",
-        treasury: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
+        blockNumber: 471736462,
+        deployer: CREATE2_TREASURY,
+        governance: CREATE2_GOVERNANCE,
+        timelock: CREATE2_TIMELOCK,
+        kernel: CREATE2_KERNEL,
+        mandateFactory: CREATE2_MANDATE_FACTORY,
+        standardFeePolicy: CREATE2_STANDARD_FEE_POLICY,
+        safeModuleEnabler: CREATE2_SAFE_MODULE_ENABLER,
+        treasury: CREATE2_TREASURY,
         maxPermissionFeeWei: 1000000000000000n,
         initialBaseFee: 0n,
         initialComplexityRate: 0n,
-        dispatchModel: "selective", // selective: verified on-chain DISPATCH_TYPEHASH 0xbe50c5391dcf9e08d11d2c30dbee822c14ad07af2ceb503c778d265801fb0e5c
+        dispatchModel: "selective",
         knownTemplates: [],
         standaloneTemplates: {},
     },
+    // ── Unichain mainnet ─────────────────────────────────────────────────────────
     130: {
-        // SAIL-406 deploy (2026-06-05, gitCommit 2c9e325): full protocol deploy on
-        // Unichain mainnet — core + the complete template suite (7 shared + 12
-        // standalone), all source-verified on uniscan.xyz. Genesis allowlist
-        // bootstrap (allowlistBootstrapped=true: Safe v1.4.1 factory, both
-        // singletons, SafeModuleEnabler, StandardFeePolicy, SafeProxy codehash
-        // 0xd7d408eb…fb4c), zero fees, onboarding live without the 48h timelock.
-        // First chain to ship permission templates against the kernel.
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33). Supersedes
+        // 0xD985029960a9B7C2E7E38e102C448b8b8539B156 (SAIL-406 deploy).
+        // NOTE: knownTemplates and standaloneTemplates from SAIL-406 were deployed
+        // against the old kernel 0xD985029... and are now invalid. They must be
+        // redeployed against the new kernel 0x02ABC1... and re-populated here.
         chainId: 130,
-        blockNumber: 49897206,
-        deployer: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
-        governance: "0xAb5C90ECfF2763f6f20f8E553E3b8778dD9C349A",
-        timelock: "0xd44FbBB37f01e235E0EE5386948F216d36D0CEf2",
-        kernel: "0xD985029960a9B7C2E7E38e102C448b8b8539B156",
-        permissionFactory: "0x8edDb62Aa49CeB837abf2653be2d93Ad9Fe6777D",
-        standardFeePolicy: "0x7bBA8BE3c01c972757aA4a230A00D58aB600A1F1",
-        safeModuleEnabler: "0xFE9227A9F2baf704060c604466df354a5A137b9B",
-        treasury: "0xB01dCE443d052e44b7D13726c0EC9fFB7f5815B6",
+        blockNumber: 50271704,
+        deployer: CREATE2_TREASURY,
+        governance: CREATE2_GOVERNANCE,
+        timelock: CREATE2_TIMELOCK,
+        kernel: CREATE2_KERNEL,
+        mandateFactory: CREATE2_MANDATE_FACTORY,
+        standardFeePolicy: CREATE2_STANDARD_FEE_POLICY,
+        safeModuleEnabler: CREATE2_SAFE_MODULE_ENABLER,
+        treasury: CREATE2_TREASURY,
         maxPermissionFeeWei: 1000000000000000n,
         initialBaseFee: 0n,
         initialComplexityRate: 0n,
-        dispatchModel: "selective", // selective: verified on-chain DISPATCH_TYPEHASH 0xbe50c5391dcf9e08d11d2c30dbee822c14ad07af2ceb503c778d265801fb0e5c
-        knownTemplates: [
-            {
-                address: "0xbD624eC67e2685872A60c0aF8F020727e20D096e",
-                kind: "SharedAMMLiquidityPermission",
-                chainId: 130,
-                label: "Shared AMM Liquidity",
-                description: "Bounded AMM liquidity provision/removal — enforces allowed pools and bounds.",
-            },
-            {
-                address: "0x9d386605518FA81ff536b351ff055d26203229A9",
-                kind: "SharedApproveAndCallBatchPermission",
-                chainId: 130,
-                label: "Shared Approve-and-Call Batch",
-                description: "Bounded approve-then-call batch — enforces token, spender, and selector allowlists.",
-            },
-            {
-                address: "0x948a9F9a6f2828E50f7e71bd569ba75A69da2BEb",
-                kind: "SharedBoundedBorrowPermission",
-                chainId: 130,
-                label: "Shared Bounded Borrow",
-                description: "Bounded borrow — enforces allowed markets and max borrow size.",
-            },
-            {
-                address: "0xfD19fad56Ca3d6FaCd4279a2F84f09bef8967f6a",
-                kind: "SharedBoundedSwapPermission",
-                chainId: 130,
-                label: "Shared Uniswap V3 Swap",
-                description: "Bounded swap via Uniswap V3 — enforces allowed tokens, max trade size, and slippage.",
-            },
-            {
-                address: "0x900cd03ee15e629bC4e94F6344d5529F4862071c",
-                kind: "SharedDeFiBundlePermission",
-                chainId: 130,
-                label: "Shared DeFi Bundle",
-                description: "Bounded multi-step DeFi bundle within a single permission.",
-            },
-            {
-                address: "0x1dF90a2484bCF3c6Da2FB035aa0C9f523e77Cd62",
-                kind: "SharedPendlePermission",
-                chainId: 130,
-                label: "Shared Pendle",
-                description: "Bounded Pendle interactions — enforces allowed markets and bounds.",
-            },
-            {
-                address: "0x851Ad196b7DC6c05eaf0B9420f2a72dc336D7739",
-                kind: "SharedTransferTargetPermission",
-                chainId: 130,
-                label: "Shared Transfer Target",
-                description: "Allows transfers only to a pre-approved target address.",
-            },
-        ],
-        standaloneTemplates: {
-            // EIP-1167 clone LOGIC addresses — the `impl` argument to
-            // PermissionFactory.deployAndAttach(account, impl, salt, initData). A clone
-            // is created and configured per account via its initialize(...).
-            azuroPrediction: "0xd48cdBB25bF0A214dEffECac3c9431650834b046",
-            boundedApprove: "0xbF7089A905081054c9dA628707f2e1EF70A7F300",
-            boundedBorrow: "0x17D466309C7E0237960f68126Cc4A109D194ac28",
-            boundedDeposit: "0xf49E304EDf806AF46E8f17740e56C1CBFad5d264",
-            boundedLiFi: "0x6a0171013FeD6B2Eda16A4dd4DB33Fa34b7F3e3f",
-            boundedSwap: "0x06696F9dd4bD0994f55b075600627Dc6E54635c9",
-            boundedWithdraw: "0xE207CfC8c2204b15ee5fD22B79472929706c7E4b",
-            gmxPerp: "0xB1bb967aC11D61C0599c8458D9B950461db5D4E9",
-            gainsNetworkPerp: "0x1297673f71A9be02bc876Dbd0ceaB3c96D268bE3",
-            limitlessPrediction: "0x2bE4280d8816626e1dea4E94A83d9334A971AF90",
-            synthetixPerp: "0x711a70B16D013a9B96Bd6733F4b3097e5787f860",
-            transferTarget: "0x8428155b6b9eea4E78b9a52c2312752eD04Baf16",
-        },
+        dispatchModel: "selective",
+        // Templates cleared: the SAIL-406 shared + standalone templates were deployed
+        // against the old kernel (0xD985029...) and are invalid against the new one.
+        // Re-populate after redeploying templates against 0x02ABC1...
+        knownTemplates: [],
+        standaloneTemplates: {},
+    },
+    // ── Base Sepolia (testnet) ───────────────────────────────────────────────────
+    84532: {
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33). Supersedes
+        // 0xf1D0F4C9893612627409948BAa9d82a01a373799 (SAIL-405 redeploy).
+        // allowlistBootstrapped=true, zero fees, 48h timelock.
+        chainId: 84532,
+        blockNumber: 42625843,
+        deployer: CREATE2_TREASURY,
+        governance: CREATE2_GOVERNANCE,
+        timelock: CREATE2_TIMELOCK,
+        kernel: CREATE2_KERNEL,
+        mandateFactory: CREATE2_MANDATE_FACTORY,
+        standardFeePolicy: CREATE2_STANDARD_FEE_POLICY,
+        safeModuleEnabler: CREATE2_SAFE_MODULE_ENABLER,
+        treasury: CREATE2_TREASURY,
+        maxPermissionFeeWei: 1000000000000000n,
+        initialBaseFee: 0n,
+        initialComplexityRate: 0n,
+        dispatchModel: "selective",
+        knownTemplates: [],
+        standaloneTemplates: {},
+    },
+    // ── Eth Sepolia (testnet) ────────────────────────────────────────────────────
+    11155111: {
+        // CREATE2 deterministic deploy (2026-06-09, gitCommit 1199b33).
+        // allowlistBootstrapped=true, zero fees, 48h timelock.
+        chainId: 11155111,
+        blockNumber: 11023571,
+        deployer: CREATE2_TREASURY,
+        governance: CREATE2_GOVERNANCE,
+        timelock: CREATE2_TIMELOCK,
+        kernel: CREATE2_KERNEL,
+        mandateFactory: CREATE2_MANDATE_FACTORY,
+        standardFeePolicy: CREATE2_STANDARD_FEE_POLICY,
+        safeModuleEnabler: CREATE2_SAFE_MODULE_ENABLER,
+        treasury: CREATE2_TREASURY,
+        maxPermissionFeeWei: 1000000000000000n,
+        initialBaseFee: 0n,
+        initialComplexityRate: 0n,
+        dispatchModel: "selective",
+        knownTemplates: [],
+        standaloneTemplates: {},
     },
 };
 export function getSailDeployment(chainId) {
@@ -177,6 +159,14 @@ export function getSailDeployment(chainId) {
     return deployment;
 }
 export function normalizeDeployment(input) {
+    // Guard: mandateFactory is required. Accept the legacy permissionFactory alias too,
+    // but if both are absent the config is malformed — cast-to-Address would silently
+    // produce undefined and cause a confusing runtime error far from the source.
+    if (!input.mandateFactory && !input.permissionFactory) {
+        throw new Error('normalizeDeployment: deployment config is missing "mandateFactory" ' +
+            '(and the legacy "permissionFactory" alias). ' +
+            "Add a mandateFactory address to the deployment configuration.");
+    }
     return {
         chainId: Number(input.chainId),
         blockNumber: Number(input.blockNumber),
@@ -184,7 +174,8 @@ export function normalizeDeployment(input) {
         governance: input.governance,
         timelock: input.timelock,
         kernel: input.kernel,
-        permissionFactory: input.permissionFactory,
+        // Accept both names: new manifests use mandateFactory; old ones used permissionFactory.
+        mandateFactory: (input.mandateFactory ?? input.permissionFactory),
         standardFeePolicy: input.standardFeePolicy,
         safeModuleEnabler: input.safeModuleEnabler,
         treasury: input.treasury,