@dev.sail.money/sailor 0.0.2

package/packages/sdk/dist/lifi.d.ts

@@ -0,0 +1,83 @@
+/**
+ * LiFi aggregator helpers for the swap recipe (`client.strategy.swap`).
+ *
+ * The protocol's swap permissions (e.g. LifiDiamondSwapPermission) restrict
+ * manager swaps to the official LiFi Diamond. We fetch an executable quote from
+ * the LiFi API and hand its calldata to the kernel dispatch path.
+ */
+import { type Address, type Hex } from "viem";
+/** LiFi quote endpoint. */
+export declare const LIFI_QUOTE_URL = "https://li.quest/v1/quote";
+/**
+ * Canonical LiFi Diamond router per chain. LiFi deploys the diamond at the same
+ * address across most mainnets; callers can override via `SwapParams.router`.
+ */
+export declare const LIFI_ROUTERS: Record<number, Address>;
+/**
+ * Default slippage (3%). LiFi's own 0.5% default reverts with
+ * CumulativeSlippageTooHigh on small trades against live price moves.
+ */
+export declare const DEFAULT_SLIPPAGE = 0.03;
+/** ABI for reading an ERC-20 allowance. */
+export declare const ERC20_ALLOWANCE_ABI: readonly [{
+    readonly name: "approve";
+    readonly type: "function";
+    readonly stateMutability: "nonpayable";
+    readonly inputs: readonly [{
+        readonly type: "address";
+        readonly name: "spender";
+    }, {
+        readonly type: "uint256";
+        readonly name: "amount";
+    }];
+    readonly outputs: readonly [];
+}, {
+    readonly name: "allowance";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly type: "address";
+        readonly name: "owner";
+    }, {
+        readonly type: "address";
+        readonly name: "spender";
+    }];
+    readonly outputs: readonly [{
+        readonly type: "uint256";
+    }];
+}];
+/** Encode an ERC-20 `approve(spender, amount)` calldata. */
+export declare function encodeApprove(spender: Address, amount: bigint): Hex;
+/** The pieces of a LiFi quote the dispatch path needs. */
+export type LifiSwapQuote = {
+    /** Call target — the router that executes the swap. */
+    target: Address;
+    /** Swap calldata. */
+    data: Hex;
+    /** msg.value for the call (non-zero only for native-token inputs). */
+    value: bigint;
+    /** Expected output amount in `to`-token base units. */
+    toAmount: bigint;
+    /** Aggregator sub-route / tool name. */
+    tool?: string;
+};
+export type FetchLifiQuoteParams = {
+    chainId: number;
+    fromToken: Address;
+    toToken: Address;
+    /** Input amount in `fromToken` base units. */
+    fromAmount: bigint;
+    /** The account funding and (by default) receiving the swap. */
+    fromAddress: Address;
+    toAddress: Address;
+    /** Slippage as a fraction (0.03 = 3%). */
+    slippage: number;
+    /** Optional fetch implementation (defaults to global fetch). */
+    fetchFn?: typeof fetch;
+};
+/**
+ * Fetch an executable LiFi quote for a same-chain swap. Throws with the API's
+ * error body when the quote is unavailable or malformed.
+ */
+export declare function fetchLifiQuote(params: FetchLifiQuoteParams): Promise<LifiSwapQuote>;
+//# sourceMappingURL=lifi.d.ts.map

package/packages/sdk/dist/lifi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifi.d.ts","sourceRoot":"","sources":["../src/lifi.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAsB,KAAK,GAAG,EAAY,MAAM,MAAM,CAAC;AAE5E,2BAA2B;AAC3B,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAIhD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAOrC,2CAA2C;AAC3C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;EAAY,CAAC;AAE7C,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAEnE;AAED,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG;IAC1B,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB;IACrB,IAAI,EAAE,GAAG,CAAC;IACV,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAoCzF"}

package/packages/sdk/dist/lifi.js

@@ -0,0 +1,69 @@
+/**
+ * LiFi aggregator helpers for the swap recipe (`client.strategy.swap`).
+ *
+ * The protocol's swap permissions (e.g. LifiDiamondSwapPermission) restrict
+ * manager swaps to the official LiFi Diamond. We fetch an executable quote from
+ * the LiFi API and hand its calldata to the kernel dispatch path.
+ */
+import { encodeFunctionData, parseAbi } from "viem";
+/** LiFi quote endpoint. */
+export const LIFI_QUOTE_URL = "https://li.quest/v1/quote";
+/**
+ * Canonical LiFi Diamond router per chain. LiFi deploys the diamond at the same
+ * address across most mainnets; callers can override via `SwapParams.router`.
+ */
+export const LIFI_ROUTERS = {
+    8453: "0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE", // Base
+    42161: "0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE", // Arbitrum
+    130: "0x864b314D4C5a0399368609581d3E8933a63b9232", // Unichain (non-canonical diamond addr)
+};
+/**
+ * Default slippage (3%). LiFi's own 0.5% default reverts with
+ * CumulativeSlippageTooHigh on small trades against live price moves.
+ */
+export const DEFAULT_SLIPPAGE = 0.03;
+const ERC20_ABI = parseAbi([
+    "function approve(address spender, uint256 amount)",
+    "function allowance(address owner, address spender) view returns (uint256)",
+]);
+/** ABI for reading an ERC-20 allowance. */
+export const ERC20_ALLOWANCE_ABI = ERC20_ABI;
+/** Encode an ERC-20 `approve(spender, amount)` calldata. */
+export function encodeApprove(spender, amount) {
+    return encodeFunctionData({ abi: ERC20_ABI, functionName: "approve", args: [spender, amount] });
+}
+/**
+ * Fetch an executable LiFi quote for a same-chain swap. Throws with the API's
+ * error body when the quote is unavailable or malformed.
+ */
+export async function fetchLifiQuote(params) {
+    const doFetch = params.fetchFn ?? fetch;
+    const url = new URL(LIFI_QUOTE_URL);
+    url.searchParams.set("fromChain", String(params.chainId));
+    url.searchParams.set("toChain", String(params.chainId));
+    url.searchParams.set("fromToken", params.fromToken);
+    url.searchParams.set("toToken", params.toToken);
+    url.searchParams.set("fromAmount", params.fromAmount.toString());
+    url.searchParams.set("fromAddress", params.fromAddress);
+    url.searchParams.set("toAddress", params.toAddress);
+    url.searchParams.set("slippage", String(params.slippage));
+    const res = await doFetch(url.toString(), { headers: { Accept: "application/json" } });
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`LiFi quote failed (${res.status}): ${body.slice(0, 400)}`);
+    }
+    const quote = (await res.json());
+    const tx = quote.transactionRequest;
+    if (!tx?.to || !tx?.data) {
+        throw new Error("LiFi quote returned no usable transactionRequest: " +
+            JSON.stringify(quote).slice(0, 400));
+    }
+    return {
+        target: tx.to,
+        data: tx.data,
+        value: BigInt(tx.value ?? "0"),
+        toAmount: BigInt(quote.estimate?.toAmount ?? "0"),
+        tool: quote.tool,
+    };
+}
+//# sourceMappingURL=lifi.js.map

package/packages/sdk/dist/lifi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifi.js","sourceRoot":"","sources":["../src/lifi.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAgB,kBAAkB,EAAY,QAAQ,EAAE,MAAM,MAAM,CAAC;AAE5E,2BAA2B;AAC3B,MAAM,CAAC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAA4B;IACnD,IAAI,EAAE,4CAA4C,EAAE,OAAO;IAC3D,KAAK,EAAE,4CAA4C,EAAE,WAAW;IAChE,GAAG,EAAE,4CAA4C,EAAE,wCAAwC;CAC5F,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,SAAS,GAAG,QAAQ,CAAC;IACzB,mDAAmD;IACnD,2EAA2E;CAC5E,CAAC,CAAC;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAE7C,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,MAAc;IAC5D,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AA+BD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI9B,CAAC;IACF,MAAM,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACpC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oDAAoD;YAClD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACtC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,EAAa;QACxB,IAAI,EAAE,EAAE,CAAC,IAAW;QACpB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,GAAG,CAAC;QACjD,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;AACJ,CAAC"}

package/packages/sdk/dist/safe.d.ts

@@ -0,0 +1,158 @@
+import { type Address, type Hex } from "viem";
+/**
+ * Safe v1.4.1 `execTransaction` — the entry point through which the Safe calls
+ * another contract *as itself* (msg.sender == Safe). Full ABI:
+ * https://github.com/safe-global/safe-deployments/tree/main/src/assets/v1.4.1
+ */
+export declare const gnosisSafeExecAbi: readonly [{
+    readonly type: "function";
+    readonly name: "execTransaction";
+    readonly stateMutability: "payable";
+    readonly inputs: readonly [{
+        readonly name: "to";
+        readonly type: "address";
+    }, {
+        readonly name: "value";
+        readonly type: "uint256";
+    }, {
+        readonly name: "data";
+        readonly type: "bytes";
+    }, {
+        readonly name: "operation";
+        readonly type: "uint8";
+    }, {
+        readonly name: "safeTxGas";
+        readonly type: "uint256";
+    }, {
+        readonly name: "baseGas";
+        readonly type: "uint256";
+    }, {
+        readonly name: "gasPrice";
+        readonly type: "uint256";
+    }, {
+        readonly name: "gasToken";
+        readonly type: "address";
+    }, {
+        readonly name: "refundReceiver";
+        readonly type: "address";
+    }, {
+        readonly name: "signatures";
+        readonly type: "bytes";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "success";
+        readonly type: "bool";
+    }];
+}];
+/**
+ * Minimal Safe contract ABI — only what's needed to encode the setup
+ * initializer. Full ABI: https://github.com/safe-global/safe-deployments
+ */
+export declare const gnosisSafeAbi: readonly [{
+    readonly type: "function";
+    readonly name: "setup";
+    readonly stateMutability: "nonpayable";
+    readonly inputs: readonly [{
+        readonly name: "_owners";
+        readonly type: "address[]";
+    }, {
+        readonly name: "_threshold";
+        readonly type: "uint256";
+    }, {
+        readonly name: "to";
+        readonly type: "address";
+    }, {
+        readonly name: "data";
+        readonly type: "bytes";
+    }, {
+        readonly name: "fallbackHandler";
+        readonly type: "address";
+    }, {
+        readonly name: "paymentToken";
+        readonly type: "address";
+    }, {
+        readonly name: "payment";
+        readonly type: "uint256";
+    }, {
+        readonly name: "paymentReceiver";
+        readonly type: "address";
+    }];
+    readonly outputs: readonly [];
+}];
+/**
+ * SafeModuleEnabler — `enable(module)` is delegatecalled via Safe.setup's
+ * `to`/`data` hook to enable a module on a freshly deployed Safe in the same
+ * transaction. Deployed once per chain (SailDeployment.safeModuleEnabler).
+ */
+export declare const safeModuleEnablerAbi: readonly [{
+    readonly type: "function";
+    readonly name: "enable";
+    readonly stateMutability: "nonpayable";
+    readonly inputs: readonly [{
+        readonly name: "module";
+        readonly type: "address";
+    }];
+    readonly outputs: readonly [];
+}];
+/**
+ * Canonical Safe v1.4.1 deployment addresses (CREATE2 — same on all EVM chains).
+ * https://github.com/safe-global/safe-deployments/tree/main/src/assets/v1.4.1
+ */
+export declare const SAFE_V141: {
+    readonly proxyFactory: "0x4e1DCf7AD4e460CfD30791CCC4F9c8a4f820ec67";
+    readonly singletonL2: "0x29fcB43b46531BcA003ddC8FCB67FFE91900C762";
+    readonly fallbackHandler: "0xfd0732Dc9E303f09fCEf3a7388Ad10A83459Ec99";
+};
+/**
+ * Build the `Safe.setup()` initializer for a Safe that will be registered with
+ * SailKernel via `kernel.createAccount()`.
+ *
+ * Wires the `to`/`data` delegatecall hook to the SafeModuleEnabler so the
+ * kernel is enabled as a Safe module *during* setup. Without this, the kernel's
+ * `createAccount` reverts with `ModuleNotEnabled()` after deploying the Safe.
+ */
+export declare function buildSafeSetupInitializer(params: {
+    owners: Address[];
+    threshold: bigint;
+    kernel: Address;
+    safeModuleEnabler: Address;
+    fallbackHandler?: Address;
+}): Hex;
+/**
+ * Build a Safe "pre-validated" (approved-hash) signature for `owner`.
+ *
+ * Safe's `checkNSignatures` treats a signature with `v == 1` as pre-validated:
+ * it passes when the recovered owner address (`r`, left-padded to 32 bytes) is
+ * either the `msg.sender` or has previously called `approveHash`. So when the
+ * sole owner of a 1-of-1 Safe submits `execTransaction` themselves, this 65-byte
+ * blob authorises the call with NO off-chain Safe-tx EIP-712 signature and no
+ * dependency on the Safe nonce. Layout: r = owner(32) ‖ s = 0(32) ‖ v = 1(1).
+ */
+export declare function buildApprovedHashSignature(owner: Address): Hex;
+/** ABI-encode the kernel's `setManager(newManager)` call. */
+export declare function encodeSetManager(newManager: Address): Hex;
+/**
+ * Build the `Safe.execTransaction` calldata that rotates an SMA's delegated
+ * signer by calling `kernel.setManager(newManager)` *as the Safe*.
+ *
+ * `setManager` is gated by `msg.sender == account`, so it cannot be sent
+ * straight from the owner's EOA (as createAccount/dispatch are) — it must be
+ * wrapped in a Safe transaction. For the 1-of-1 Safes Sailor creates, the owner
+ * submits this tx from their own wallet and authorises it with a pre-validated
+ * signature (see `buildApprovedHashSignature`); no separate Safe-tx signing
+ * round-trip is needed. Returns the tx the owner sends: `{ to: safe, data }`.
+ */
+export declare function buildSetManagerExecTransaction(params: {
+    /** The SMA (Safe) whose manager is being rotated; also the tx `to`. */
+    safe: Address;
+    /** The SailKernel the Safe will call. */
+    kernel: Address;
+    /** The new delegated signer (manager) address. */
+    newManager: Address;
+    /** The sole Safe owner who will submit this tx. */
+    owner: Address;
+}): {
+    to: Address;
+    data: Hex;
+};
+//# sourceMappingURL=safe.d.ts.map

package/packages/sdk/dist/safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe.d.ts","sourceRoot":"","sources":["../src/safe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAsD,MAAM,MAAM,CAAC;AAalG;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBpB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBhB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;EAQvB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;CAIZ,CAAC;AAEX;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,GAAG,CAqBN;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAK9D;AAED,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,GAAG,CAMzD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,uEAAuE;IACvE,IAAI,EAAE,OAAO,CAAC;IACd,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,UAAU,EAAE,OAAO,CAAC;IACpB,mDAAmD;IACnD,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE,CAmB7B"}

package/packages/sdk/dist/safe.js

@@ -0,0 +1,163 @@
+import { encodeFunctionData, encodePacked, pad, zeroAddress } from "viem";
+/** Minimal SailKernel ABI fragment for the manager-rotation call. */
+const setManagerAbi = [
+    {
+        type: "function",
+        name: "setManager",
+        stateMutability: "nonpayable",
+        inputs: [{ name: "newManager", type: "address" }],
+        outputs: [],
+    },
+];
+/**
+ * Safe v1.4.1 `execTransaction` — the entry point through which the Safe calls
+ * another contract *as itself* (msg.sender == Safe). Full ABI:
+ * https://github.com/safe-global/safe-deployments/tree/main/src/assets/v1.4.1
+ */
+export const gnosisSafeExecAbi = [
+    {
+        type: "function",
+        name: "execTransaction",
+        stateMutability: "payable",
+        inputs: [
+            { name: "to", type: "address" },
+            { name: "value", type: "uint256" },
+            { name: "data", type: "bytes" },
+            { name: "operation", type: "uint8" },
+            { name: "safeTxGas", type: "uint256" },
+            { name: "baseGas", type: "uint256" },
+            { name: "gasPrice", type: "uint256" },
+            { name: "gasToken", type: "address" },
+            { name: "refundReceiver", type: "address" },
+            { name: "signatures", type: "bytes" },
+        ],
+        outputs: [{ name: "success", type: "bool" }],
+    },
+];
+/**
+ * Minimal Safe contract ABI — only what's needed to encode the setup
+ * initializer. Full ABI: https://github.com/safe-global/safe-deployments
+ */
+export const gnosisSafeAbi = [
+    {
+        type: "function",
+        name: "setup",
+        stateMutability: "nonpayable",
+        inputs: [
+            { name: "_owners", type: "address[]" },
+            { name: "_threshold", type: "uint256" },
+            { name: "to", type: "address" },
+            { name: "data", type: "bytes" },
+            { name: "fallbackHandler", type: "address" },
+            { name: "paymentToken", type: "address" },
+            { name: "payment", type: "uint256" },
+            { name: "paymentReceiver", type: "address" },
+        ],
+        outputs: [],
+    },
+];
+/**
+ * SafeModuleEnabler — `enable(module)` is delegatecalled via Safe.setup's
+ * `to`/`data` hook to enable a module on a freshly deployed Safe in the same
+ * transaction. Deployed once per chain (SailDeployment.safeModuleEnabler).
+ */
+export const safeModuleEnablerAbi = [
+    {
+        type: "function",
+        name: "enable",
+        stateMutability: "nonpayable",
+        inputs: [{ name: "module", type: "address" }],
+        outputs: [],
+    },
+];
+/**
+ * Canonical Safe v1.4.1 deployment addresses (CREATE2 — same on all EVM chains).
+ * https://github.com/safe-global/safe-deployments/tree/main/src/assets/v1.4.1
+ */
+export const SAFE_V141 = {
+    proxyFactory: "0x4e1DCf7AD4e460CfD30791CCC4F9c8a4f820ec67",
+    singletonL2: "0x29fcB43b46531BcA003ddC8FCB67FFE91900C762",
+    fallbackHandler: "0xfd0732Dc9E303f09fCEf3a7388Ad10A83459Ec99",
+};
+/**
+ * Build the `Safe.setup()` initializer for a Safe that will be registered with
+ * SailKernel via `kernel.createAccount()`.
+ *
+ * Wires the `to`/`data` delegatecall hook to the SafeModuleEnabler so the
+ * kernel is enabled as a Safe module *during* setup. Without this, the kernel's
+ * `createAccount` reverts with `ModuleNotEnabled()` after deploying the Safe.
+ */
+export function buildSafeSetupInitializer(params) {
+    const enableModuleData = encodeFunctionData({
+        abi: safeModuleEnablerAbi,
+        functionName: "enable",
+        args: [params.kernel],
+    });
+    return encodeFunctionData({
+        abi: gnosisSafeAbi,
+        functionName: "setup",
+        args: [
+            params.owners,
+            params.threshold,
+            params.safeModuleEnabler, // to: delegatecall target
+            enableModuleData, // data: enable(kernel)
+            (params.fallbackHandler ?? SAFE_V141.fallbackHandler),
+            zeroAddress, // paymentToken
+            0n, // payment
+            zeroAddress, // paymentReceiver
+        ],
+    });
+}
+/**
+ * Build a Safe "pre-validated" (approved-hash) signature for `owner`.
+ *
+ * Safe's `checkNSignatures` treats a signature with `v == 1` as pre-validated:
+ * it passes when the recovered owner address (`r`, left-padded to 32 bytes) is
+ * either the `msg.sender` or has previously called `approveHash`. So when the
+ * sole owner of a 1-of-1 Safe submits `execTransaction` themselves, this 65-byte
+ * blob authorises the call with NO off-chain Safe-tx EIP-712 signature and no
+ * dependency on the Safe nonce. Layout: r = owner(32) ‖ s = 0(32) ‖ v = 1(1).
+ */
+export function buildApprovedHashSignature(owner) {
+    return encodePacked(["bytes32", "bytes32", "uint8"], [pad(owner, { size: 32 }), pad("0x", { size: 32 }), 1]);
+}
+/** ABI-encode the kernel's `setManager(newManager)` call. */
+export function encodeSetManager(newManager) {
+    return encodeFunctionData({
+        abi: setManagerAbi,
+        functionName: "setManager",
+        args: [newManager],
+    });
+}
+/**
+ * Build the `Safe.execTransaction` calldata that rotates an SMA's delegated
+ * signer by calling `kernel.setManager(newManager)` *as the Safe*.
+ *
+ * `setManager` is gated by `msg.sender == account`, so it cannot be sent
+ * straight from the owner's EOA (as createAccount/dispatch are) — it must be
+ * wrapped in a Safe transaction. For the 1-of-1 Safes Sailor creates, the owner
+ * submits this tx from their own wallet and authorises it with a pre-validated
+ * signature (see `buildApprovedHashSignature`); no separate Safe-tx signing
+ * round-trip is needed. Returns the tx the owner sends: `{ to: safe, data }`.
+ */
+export function buildSetManagerExecTransaction(params) {
+    const innerData = encodeSetManager(params.newManager);
+    const data = encodeFunctionData({
+        abi: gnosisSafeExecAbi,
+        functionName: "execTransaction",
+        args: [
+            params.kernel, // to
+            0n, // value
+            innerData, // data: setManager(newManager)
+            0, // operation: Call
+            0n, // safeTxGas
+            0n, // baseGas
+            0n, // gasPrice
+            zeroAddress, // gasToken
+            zeroAddress, // refundReceiver
+            buildApprovedHashSignature(params.owner),
+        ],
+    });
+    return { to: params.safe, data };
+}
+//# sourceMappingURL=safe.js.map

package/packages/sdk/dist/safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe.js","sourceRoot":"","sources":["../src/safe.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,kBAAkB,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAElG,qEAAqE;AACrE,MAAM,aAAa,GAAG;IACpB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY;QAClB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,iBAAiB;QACvB,eAAe,EAAE,SAAS;QAC1B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;YACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;YACtC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;YACpC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;YACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;YACrC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3C,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;SACtC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC7C;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,OAAO;QACb,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;YACtC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;YACvC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/B,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;YACzC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;YACpC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;SAC7C;QACD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,YAAY,EAAE,4CAA4C;IAC1D,WAAW,EAAE,4CAA4C;IACzD,eAAe,EAAE,4CAA4C;CACrD,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAMzC;IACC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;QAC1C,GAAG,EAAE,oBAAoB;QACzB,YAAY,EAAE,QAAQ;QACtB,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;KACtB,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC;QACxB,GAAG,EAAE,aAAa;QAClB,YAAY,EAAE,OAAO;QACrB,IAAI,EAAE;YACJ,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,iBAAiB,EAAE,0BAA0B;YACpD,gBAAgB,EAAE,uBAAuB;YACzC,CAAC,MAAM,CAAC,eAAe,IAAI,SAAS,CAAC,eAAe,CAAY;YAChE,WAAW,EAAE,eAAe;YAC5B,EAAE,EAAE,UAAU;YACd,WAAW,EAAE,kBAAkB;SAChC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,YAAY,CACjB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAC/B,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,OAAO,kBAAkB,CAAC;QACxB,GAAG,EAAE,aAAa;QAClB,YAAY,EAAE,YAAY;QAC1B,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAS9C;IACC,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,GAAG,EAAE,iBAAiB;QACtB,YAAY,EAAE,iBAAiB;QAC/B,IAAI,EAAE;YACJ,MAAM,CAAC,MAAM,EAAE,KAAK;YACpB,EAAE,EAAE,QAAQ;YACZ,SAAS,EAAE,+BAA+B;YAC1C,CAAC,EAAE,kBAAkB;YACrB,EAAE,EAAE,YAAY;YAChB,EAAE,EAAE,UAAU;YACd,EAAE,EAAE,WAAW;YACf,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,iBAAiB;YAC9B,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC;SACzC;KACF,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/packages/sdk/dist/signing.d.ts

@@ -0,0 +1,106 @@
+import type { Address, Hex } from "viem";
+export type SigningRequestKind = "create-sma" | "deploy-mandate" | "register-permission" | "attach-mandate" | "revoke-permissions" | "set-delegate" | "arbitrary-tx";
+/** Fields shared by all signing request variants. */
+export type SigningRequestBase = {
+    id: string;
+    kind: SigningRequestKind;
+    /** Short title shown in the UI approval card. */
+    title: string;
+    /** Plain-English description of what will happen. */
+    description: string;
+    chainId: number;
+    /** Human-readable breakdown rendered in the card. */
+    details: Array<{
+        label: string;
+        value: string;
+    }>;
+    createdAt: number;
+};
+/**
+ * The user submits an on-chain transaction from their connected wallet.
+ * The UI uses useSendTransaction; the response carries the txHash.
+ */
+export type SigningTxRequest = SigningRequestBase & {
+    type: "transaction";
+    /**
+     * Target contract. Omitted for contract-creation transactions (e.g.
+     * deploying a new mandate), where `data` is the creation bytecode and the
+     * wallet must send the tx with no `to`.
+     */
+    to?: Address;
+    /** ETH value in wei, stringified (JSON-safe bigint). */
+    value?: string;
+    data: Hex;
+};
+/**
+ * JSON-serializable EIP-712 typed data (bigints stringified).
+ * The UI uses useSignTypedData; the response carries the signature.
+ */
+export type SerializedTypedData = {
+    domain: {
+        name?: string;
+        version?: string;
+        chainId?: number;
+        verifyingContract?: string;
+    };
+    types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>;
+    primaryType: string;
+    /** All bigint values must be serialized as decimal strings. */
+    message: Record<string, string | number | boolean | string[]>;
+};
+/**
+ * The user signs an EIP-712 message (off-chain).
+ * The agent collects the signature and submits the actual transaction.
+ */
+export type SigningTypedDataRequest = SigningRequestBase & {
+    type: "typed-data";
+    typedData: SerializedTypedData;
+};
+export type SigningRequest = SigningTxRequest | SigningTypedDataRequest;
+export type SigningResponse = {
+    status: "signed";
+    requestId: string;
+    txHash: Hex;
+} | {
+    status: "signature";
+    requestId: string;
+    signature: Hex;
+} | {
+    status: "rejected";
+    requestId: string;
+    reason?: string;
+};
+/** WebSocket messages: server → UI. */
+export type ServerMessage = {
+    type: "pending";
+    requests: SigningRequest[];
+} | {
+    type: "request";
+    request: SigningRequest;
+} | {
+    type: "request-resolved";
+    requestId: string;
+};
+/** WebSocket messages: UI → server. */
+export type ClientMessage = {
+    type: "signed";
+    requestId: string;
+    txHash: Hex;
+} | {
+    type: "signature";
+    requestId: string;
+    signature: Hex;
+} | {
+    type: "rejected";
+    requestId: string;
+    reason?: string;
+} | {
+    type: "wallet-connected";
+    address: Address;
+} | {
+    type: "wallet-disconnected";
+};
+//# sourceMappingURL=signing.d.ts.map

package/packages/sdk/dist/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAgBzC,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,gBAAgB,GAChB,qBAAqB,GACrB,gBAAgB,GAChB,oBAAoB,GACpB,cAAc,GACd,cAAc,CAAC;AAEnB,qDAAqD;AACrD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,kBAAkB,CAAC;IACzB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG;IAClD,IAAI,EAAE,aAAa,CAAC;IACpB;;;;OAIG;IACH,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,GAAG,CAAC;CACX,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;CAC/D,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,GAAG;IACzD,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,mBAAmB,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,uBAAuB,CAAC;AAExE,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,GAAG,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,uCAAuC;AACvC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,uCAAuC;AACvC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,GAAG,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,qBAAqB,CAAA;CAAE,CAAC"}

package/packages/sdk/dist/signing.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signing.js.map

package/packages/sdk/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":""}

package/packages/sdk/dist/templates/ammLiquidity.d.ts

@@ -0,0 +1,16 @@
+import type { Address, PermissionTemplate } from "../types.js";
+/** Params for SharedAmmLiquidityPermission. */
+export type AmmLiquidityParams = {
+    /** Maximum total liquidity value in USD-equivalent (18-decimal WAD). */
+    maxLiquidityValueUsd: number;
+    /** Pool addresses the agent may LP into. */
+    allowedPools: Address[];
+    /** Protocol identifiers allowed (e.g. ["uniswapV3", "curveV2", "balancer"]). */
+    allowedProtocols: string[];
+    /** Whether single-sided deposits are permitted. */
+    allowSingleSided: boolean;
+    /** Maximum price range width in basis points (Uni V3 only). */
+    maxRangeBps?: number;
+};
+export declare const ammLiquidityTemplate: PermissionTemplate<AmmLiquidityParams>;
+//# sourceMappingURL=ammLiquidity.d.ts.map

package/packages/sdk/dist/templates/ammLiquidity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ammLiquidity.d.ts","sourceRoot":"","sources":["../../src/templates/ammLiquidity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAA2B,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAExF,+CAA+C;AAC/C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wEAAwE;IACxE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4CAA4C;IAC5C,YAAY,EAAE,OAAO,EAAE,CAAC;IACxB,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mDAAmD;IACnD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAUF,eAAO,MAAM,oBAAoB,EAAE,kBAAkB,CAAC,kBAAkB,CAuDvE,CAAC"}