@dev.sail.money/sailor 1.2.1-90 → 1.2.1-92

package/packages/cli/dist/index.cjs

@@ -35210,7 +35210,7 @@ var {
   Help
 } = import_index.default;
 
-// ../sdk/dist/chains.js
+// ../sdk/src/chains.ts
 var chains = {
   // Ethereum mainnet
   1: {
@@ -35292,15 +35292,17 @@ var chains = {
 function getChain(chainId) {
   const config = chains[chainId];
   if (!config) {
-    throw new Error(`Chain ${chainId} is not supported. Supported chains: 1 (Ethereum), 8453 (Base), 42161 (Arbitrum), 130 (Unichain), 84532 (Base Sepolia), 11155111 (Eth Sepolia).`);
+    throw new Error(
+      `Chain ${chainId} is not supported. Supported chains: 1 (Ethereum), 8453 (Base), 42161 (Arbitrum), 130 (Unichain), 84532 (Base Sepolia), 11155111 (Eth Sepolia).`
+    );
   }
   return config;
 }
 
-// ../sdk/dist/client.js
+// ../sdk/src/client.ts
 init_esm2();
 
-// ../sdk/dist/abis/SailKernel.js
+// ../sdk/src/abis/SailKernel.ts
 var SailKernelAbi = [
   // ── Account instantiation ────────────────────────────────────────────────
   {
@@ -35605,7 +35607,7 @@ var SailKernelAbi = [
   }
 ];
 
-// ../sdk/dist/capabilities.js
+// ../sdk/src/capabilities.ts
 init_esm2();
 var DISPATCH_TYPE_STRINGS = {
   conjunctive: "Dispatch(address account,address target,uint256 value,bytes32 dataHash,uint256 nonce,uint256 deadline)",
@@ -35650,7 +35652,9 @@ function fromDispatchTypehash(kernel, dispatchTypehash, registerPermissionTypeha
   } else if (dispatchTypehash === DISPATCH_TYPEHASHES.selective) {
     dispatchModel = "selective";
   } else {
-    throw new Error(`Unrecognized kernel DISPATCH_TYPEHASH ${dispatchTypehash} for ${kernel}. The SDK cannot safely sign dispatches for this kernel version. Known: conjunctive=${DISPATCH_TYPEHASHES.conjunctive}, selective=${DISPATCH_TYPEHASHES.selective}.`);
+    throw new Error(
+      `Unrecognized kernel DISPATCH_TYPEHASH ${dispatchTypehash} for ${kernel}. The SDK cannot safely sign dispatches for this kernel version. Known: conjunctive=${DISPATCH_TYPEHASHES.conjunctive}, selective=${DISPATCH_TYPEHASHES.selective}.`
+    );
   }
   let registerPermissionHasDeadline = dispatchModel === "selective";
   if (registerPermissionTypehash === REGISTER_PERMISSION_TYPEHASHES.withDeadline) {
@@ -35675,8 +35679,7 @@ async function detectKernelCapabilities(publicClient, kernel, opts) {
   const key = cacheKey2(chainId, kernel);
   if (!opts?.force) {
     const hit = cache.get(key);
-    if (hit)
-      return hit;
+    if (hit) return hit;
   }
   let dispatchTypehash;
   let registerPermissionTypehash;
@@ -35698,17 +35701,29 @@ async function detectKernelCapabilities(publicClient, kernel, opts) {
   }
   let caps;
   if (dispatchTypehash) {
-    caps = fromDispatchTypehash(kernel, dispatchTypehash, registerPermissionTypehash, "onchain-typehash");
+    caps = fromDispatchTypehash(
+      kernel,
+      dispatchTypehash,
+      registerPermissionTypehash,
+      "onchain-typehash"
+    );
   } else if (opts?.staticModel) {
-    caps = fromDispatchTypehash(kernel, DISPATCH_TYPEHASHES[opts.staticModel], void 0, "static-hint");
+    caps = fromDispatchTypehash(
+      kernel,
+      DISPATCH_TYPEHASHES[opts.staticModel],
+      void 0,
+      "static-hint"
+    );
   } else {
-    throw new Error(`Could not read DISPATCH_TYPEHASH from kernel ${kernel}, and no staticModel hint was given. Pass opts.staticModel ('conjunctive' | 'selective') to proceed without on-chain detection.`);
+    throw new Error(
+      `Could not read DISPATCH_TYPEHASH from kernel ${kernel}, and no staticModel hint was given. Pass opts.staticModel ('conjunctive' | 'selective') to proceed without on-chain detection.`
+    );
   }
   cache.set(key, caps);
   return caps;
 }
 
-// ../sdk/dist/deployments.js
+// ../sdk/src/deployments.ts
 var CREATE2_KERNEL = "0x02ABC18B65A328de2e749F56ba79ACF2718a6659";
 var CREATE2_GOVERNANCE = "0x7A478118715791728BDE3bc7A4D7ECfdEB89C6EC";
 var CREATE2_TIMELOCK = "0xE48Ba8DB6d748adafD13155c3590f62e58a77f56";
@@ -35861,7 +35876,7 @@ function getSailDeployment(chainId) {
   return deployment;
 }
 
-// ../sdk/dist/errors.js
+// ../sdk/src/errors.ts
 init_esm2();
 var KERNEL_ERROR_SIGNATURES = [
   "error AccountAlreadyRegistered(address account)",
@@ -35940,14 +35955,12 @@ async function decode2(data) {
   }
 }
 function decodeKernelError(data) {
-  if (!data || data === "0x")
-    return Promise.resolve(null);
+  if (!data || data === "0x") return Promise.resolve(null);
   return decode2(data);
 }
 async function explainKernelRevert(err) {
   const data = extractRevertData(err);
-  if (!data)
-    return null;
+  if (!data) return null;
   return decodeKernelError(data);
 }
 function extractRevertData(err) {
@@ -35977,7 +35990,7 @@ function extractRevertData(err) {
   return null;
 }
 
-// ../sdk/dist/eip712.js
+// ../sdk/src/eip712.ts
 init_esm2();
 function sailKernelDomain(args) {
   return {
@@ -36031,12 +36044,16 @@ async function buildDispatchSignature(params) {
   const dataHash = keccak256(call2.data);
   const selective = caps.dispatchModel === "selective";
   const message = selective ? { account: account2, permission, target: call2.target, value: call2.value, dataHash, nonce, deadline } : { account: account2, target: call2.target, value: call2.value, dataHash, nonce, deadline };
-  const signature = await manager.signTyped(sailKernelDomain({ chainId, kernel }), {
-    primaryType: "Dispatch",
-    types: {
-      Dispatch: DISPATCH_EIP712_FIELDS[caps.dispatchModel]
-    }
-  }, message);
+  const signature = await manager.signTyped(
+    sailKernelDomain({ chainId, kernel }),
+    {
+      primaryType: "Dispatch",
+      types: {
+        Dispatch: DISPATCH_EIP712_FIELDS[caps.dispatchModel]
+      }
+    },
+    message
+  );
   return { signature, nonce, deadline, dispatchModel: caps.dispatchModel };
 }
 var REGISTER_PERMISSION_TYPES = {
@@ -36115,7 +36132,7 @@ function buildRegisterPermissionsBatchTypedData(args) {
   };
 }
 
-// ../sdk/dist/lifi.js
+// ../sdk/src/lifi.ts
 init_esm2();
 var LIFI_QUOTE_URL = "https://li.quest/v1/quote";
 var LIFI_ROUTERS = {
@@ -36154,7 +36171,9 @@ async function fetchLifiQuote(params) {
   const quote = await res.json();
   const tx = quote.transactionRequest;
   if (!tx?.to || !tx?.data) {
-    throw new Error("LiFi quote returned no usable transactionRequest: " + JSON.stringify(quote).slice(0, 400));
+    throw new Error(
+      "LiFi quote returned no usable transactionRequest: " + JSON.stringify(quote).slice(0, 400)
+    );
   }
   return {
     target: tx.to,
@@ -36165,7 +36184,7 @@ async function fetchLifiQuote(params) {
   };
 }
 
-// ../sdk/dist/client.js
+// ../sdk/src/client.ts
 function notImplemented() {
   throw new Error("not implemented");
 }
@@ -36209,17 +36228,13 @@ var CONJUNCTIVE_DISPATCH_ABI = [
 async function enrichKernelRevert(err) {
   const decoded = await explainKernelRevert(err);
   const base2 = err instanceof Error ? err : new Error(String(err));
-  if (!decoded)
-    return base2;
+  if (!decoded) return base2;
   const wrapped = new Error(`Kernel reverted: ${decoded.message}`);
   wrapped.cause = base2;
   wrapped.kernelError = decoded;
   return wrapped;
 }
 var KernelNamespace = class {
-  publicClient;
-  config;
-  walletClient;
   constructor(publicClient, config, walletClient) {
     this.publicClient = publicClient;
     this.config = config;
@@ -36228,13 +36243,17 @@ var KernelNamespace = class {
   requireKernel() {
     const kernel = this.config.kernel;
     if (!kernel) {
-      throw new Error("SailKernel address not configured \u2014 set `kernel` in SailorClientConfig.");
+      throw new Error(
+        "SailKernel address not configured \u2014 set `kernel` in SailorClientConfig."
+      );
     }
     return kernel;
   }
   requireSigner() {
     if (!this.walletClient) {
-      throw new Error("No signer attached \u2014 call client.withSigner(walletClient) before write operations.");
+      throw new Error(
+        "No signer attached \u2014 call client.withSigner(walletClient) before write operations."
+      );
     }
     return this.walletClient;
   }
@@ -36257,7 +36276,9 @@ var AccountNamespace = class extends KernelNamespace {
     const kernel = this.requireKernel();
     const signer = this.requireSigner();
     if (!params.safeFactory || !params.safeSingleton || !params.safeInitializer) {
-      throw new Error("createAccount requires safeFactory, safeSingleton, and safeInitializer.");
+      throw new Error(
+        "createAccount requires safeFactory, safeSingleton, and safeInitializer."
+      );
     }
     const txHash = await signer.writeContract({
       address: kernel,
@@ -36318,17 +36339,21 @@ var MandateNamespace = class extends KernelNamespace {
       functionName: "signerNonces",
       args: [safe]
     });
-    const sig = await signer.signTyped(sailKernelDomain({ chainId: this.config.chainId, kernel }), {
-      primaryType: "RegisterPermissions",
-      types: {
-        RegisterPermissions: [
-          { name: "account", type: "address" },
-          { name: "permissions", type: "address[]" },
-          { name: "nonce", type: "uint256" },
-          { name: "deadline", type: "uint256" }
-        ]
-      }
-    }, { account: safe, permissions, nonce, deadline });
+    const sig = await signer.signTyped(
+      sailKernelDomain({ chainId: this.config.chainId, kernel }),
+      {
+        primaryType: "RegisterPermissions",
+        types: {
+          RegisterPermissions: [
+            { name: "account", type: "address" },
+            { name: "permissions", type: "address[]" },
+            { name: "nonce", type: "uint256" },
+            { name: "deadline", type: "uint256" }
+          ]
+        }
+      },
+      { account: safe, permissions, nonce, deadline }
+    );
     await wallet.writeContract({
       address: kernel,
       abi: SailKernelAbi,
@@ -36347,7 +36372,9 @@ var MandateNamespace = class extends KernelNamespace {
     return notImplemented();
   }
   deployAndAttachClone(_safe, _impl, _initData, _salt, _signer) {
-    throw new Error("deployAndAttachClone is not yet implemented in the SDK.\nUse `sailor mandate attach --address <impl>` to attach a clone template via the factory.");
+    throw new Error(
+      "deployAndAttachClone is not yet implemented in the SDK.\nUse `sailor mandate attach --address <impl>` to attach a clone template via the factory."
+    );
   }
   async list(safe) {
     const kernel = this.requireKernel();
@@ -36417,11 +36444,12 @@ var DispatchNamespace = class extends KernelNamespace {
     let latest = 0n;
     for (let i = 0; i < tries; i++) {
       latest = await this.readManagerNonce(kernel, safe);
-      if (latest >= expected)
-        return latest;
+      if (latest >= expected) return latest;
       await delay(1e3);
     }
-    throw new Error(`Manager nonce for ${safe} did not reach ${expected} after ${tries}s (last seen ${latest}). The prior dispatch may not have mined, or the RPC endpoint is lagging. Retry, or pass an explicit nonce via options.nonce.`);
+    throw new Error(
+      `Manager nonce for ${safe} did not reach ${expected} after ${tries}s (last seen ${latest}). The prior dispatch may not have mined, or the RPC endpoint is lagging. Retry, or pass an explicit nonce via options.nonce.`
+    );
   }
   /**
    * Determine the nonce to sign with. Honors an explicit `options.nonce`
@@ -36430,8 +36458,7 @@ var DispatchNamespace = class extends KernelNamespace {
    * dispatch on this account) before reading the live value.
    */
   async resolveNonce(kernel, safe, options) {
-    if (options?.nonce !== void 0)
-      return options.nonce;
+    if (options?.nonce !== void 0) return options.nonce;
     const expected = options?.awaitNonce ?? this.nextNonce.get(this.nonceKey(kernel, safe));
     if (expected !== void 0) {
       return this.waitForManagerNonce(kernel, safe, expected);
@@ -36523,7 +36550,9 @@ var DispatchNamespace = class extends KernelNamespace {
     const deadline = defaultDeadline();
     const caps = await this.capabilities();
     if (caps.dispatchModel === "conjunctive") {
-      throw new Error(`Batch dispatch is not supported by the conjunctive kernel at ${kernel} (it has no dispatchBatch). Submit calls individually via dispatch.single, ensuring the manager nonce advances between them.`);
+      throw new Error(
+        `Batch dispatch is not supported by the conjunctive kernel at ${kernel} (it has no dispatchBatch). Submit calls individually via dispatch.single, ensuring the manager nonce advances between them.`
+      );
     }
     const nonce = await this.publicClient.readContract({
       address: kernel,
@@ -36531,19 +36560,25 @@ var DispatchNamespace = class extends KernelNamespace {
       functionName: "batchNonces",
       args: [safe]
     });
-    const callsHash = keccak256(encodeAbiParameters([{ type: "tuple[]", components: CALL_COMPONENTS }], [calls]));
-    const managerSig = await manager.signTyped(sailKernelDomain({ chainId: this.config.chainId, kernel }), {
-      primaryType: "DispatchBatch",
-      types: {
-        DispatchBatch: [
-          { name: "account", type: "address" },
-          { name: "permission", type: "address" },
-          { name: "callsHash", type: "bytes32" },
-          { name: "nonce", type: "uint256" },
-          { name: "deadline", type: "uint256" }
-        ]
-      }
-    }, { account: safe, permission, callsHash, nonce, deadline });
+    const callsHash = keccak256(
+      encodeAbiParameters([{ type: "tuple[]", components: CALL_COMPONENTS }], [calls])
+    );
+    const managerSig = await manager.signTyped(
+      sailKernelDomain({ chainId: this.config.chainId, kernel }),
+      {
+        primaryType: "DispatchBatch",
+        types: {
+          DispatchBatch: [
+            { name: "account", type: "address" },
+            { name: "permission", type: "address" },
+            { name: "callsHash", type: "bytes32" },
+            { name: "nonce", type: "uint256" },
+            { name: "deadline", type: "uint256" }
+          ]
+        }
+      },
+      { account: safe, permission, callsHash, nonce, deadline }
+    );
     let txHash;
     try {
       txHash = await wallet.writeContract({
@@ -36568,7 +36603,9 @@ var DispatchNamespace = class extends KernelNamespace {
     const kernel = this.requireKernel();
     const caps = await this.capabilities();
     if (caps.dispatchModel === "conjunctive") {
-      throw new Error(`Dry-run preview is not supported by the conjunctive kernel at ${kernel} (it has no previewBatch view). Validate calls off-chain against each registered permission's evaluate() logic, or simulate the dispatch.single tx instead.`);
+      throw new Error(
+        `Dry-run preview is not supported by the conjunctive kernel at ${kernel} (it has no previewBatch view). Validate calls off-chain against each registered permission's evaluate() logic, or simulate the dispatch.single tx instead.`
+      );
     }
     const [approved, reason] = await this.publicClient.readContract({
       address: kernel,
@@ -36580,7 +36617,6 @@ var DispatchNamespace = class extends KernelNamespace {
   }
 };
 var StrategyNamespace = class extends KernelNamespace {
-  dispatch;
   constructor(publicClient, config, dispatch, walletClient) {
     super(publicClient, config, walletClient);
     this.dispatch = dispatch;
@@ -36598,13 +36634,17 @@ var StrategyNamespace = class extends KernelNamespace {
     const slippage = params.slippage ?? DEFAULT_SLIPPAGE;
     const router = params.router ?? LIFI_ROUTERS[this.config.chainId];
     if (!router) {
-      throw new Error(`No LiFi router known for chain ${this.config.chainId}. Pass params.router explicitly.`);
+      throw new Error(
+        `No LiFi router known for chain ${this.config.chainId}. Pass params.router explicitly.`
+      );
     }
     const caps = await this.capabilities();
     const swapPermission = params.swapPermission ?? router;
     const approvePermission = params.approvePermission ?? params.swapPermission ?? router;
     if (caps.dispatchModel === "selective" && !params.swapPermission) {
-      throw new Error("This kernel uses the selective dispatch model \u2014 params.swapPermission is required (the permission that authorizes the swap).");
+      throw new Error(
+        "This kernel uses the selective dispatch model \u2014 params.swapPermission is required (the permission that authorizes the swap)."
+      );
     }
     const quote = await fetchLifiQuote({
       chainId: this.config.chainId,
@@ -36624,9 +36664,19 @@ var StrategyNamespace = class extends KernelNamespace {
     let approve;
     if (allowance < params.amount) {
       const approveAmount = params.approveAmount ?? params.amount;
-      approve = await this.dispatch.single(safe, approvePermission, { target: params.from, value: 0n, data: encodeApprove(router, approveAmount) }, manager);
+      approve = await this.dispatch.single(
+        safe,
+        approvePermission,
+        { target: params.from, value: 0n, data: encodeApprove(router, approveAmount) },
+        manager
+      );
     }
-    const swap = await this.dispatch.single(safe, swapPermission, { target: quote.target, value: quote.value, data: quote.data }, manager);
+    const swap = await this.dispatch.single(
+      safe,
+      swapPermission,
+      { target: quote.target, value: quote.value, data: quote.data },
+      manager
+    );
     return {
       swap,
       approve,
@@ -36746,7 +36796,7 @@ var SailorClient = class _SailorClient {
   }
 };
 
-// ../sdk/dist/keyring.js
+// ../sdk/src/keyring.ts
 var import_node_crypto = require("node:crypto");
 var import_node_fs = require("node:fs");
 init_esm2();
@@ -37428,7 +37478,7 @@ function mnemonicToAccount(mnemonic, { passphrase, ...hdKeyOpts } = {}) {
   return hdKeyToAccount(HDKey.fromMasterSeed(seed), hdKeyOpts);
 }
 
-// ../sdk/dist/keyring.js
+// ../sdk/src/keyring.ts
 var SCRYPT_N = 1 << 18;
 var SCRYPT_R = 8;
 var SCRYPT_P = 1;
@@ -37446,11 +37496,16 @@ var LocalKeyring = class _LocalKeyring {
       this.address = account2.address;
       this.privateKey = options.privateKey;
     } else if (options.type === "mnemonic") {
-      const account2 = mnemonicToAccount(options.mnemonic, options.derivationPath ? { path: options.derivationPath } : void 0);
+      const account2 = mnemonicToAccount(
+        options.mnemonic,
+        options.derivationPath ? { path: options.derivationPath } : void 0
+      );
       this.account = account2;
       this.address = account2.address;
     } else {
-      throw new Error("keystore decryption not implemented \u2014 use type: 'privateKey' or type: 'mnemonic' instead");
+      throw new Error(
+        "keystore decryption not implemented \u2014 use type: 'privateKey' or type: 'mnemonic' instead"
+      );
     }
   }
   /** Returns a lightweight signer stub for read-only contexts where the key is not available. */
@@ -37480,7 +37535,9 @@ var LocalKeyring = class _LocalKeyring {
     }
     const { n, r, p, dklen, salt } = crypto3.kdfparams;
     if (n < 1 << 14) {
-      throw new Error(`Keystore scrypt N=${n} is below the minimum accepted value (16384). Refusing to decrypt.`);
+      throw new Error(
+        `Keystore scrypt N=${n} is below the minimum accepted value (16384). Refusing to decrypt.`
+      );
     }
     if (r < 8) {
       throw new Error(`Keystore scrypt r=${r} is below the minimum accepted value (8).`);
@@ -37498,7 +37555,11 @@ var LocalKeyring = class _LocalKeyring {
     if (computedMac.length !== storedMac.length || !(0, import_node_crypto.timingSafeEqual)(computedMac, storedMac)) {
       throw new Error("Invalid password or corrupt keystore");
     }
-    const decipher = (0, import_node_crypto.createDecipheriv)("aes-128-ctr", derived.subarray(0, 16), Buffer.from(crypto3.cipherparams.iv, "hex"));
+    const decipher = (0, import_node_crypto.createDecipheriv)(
+      "aes-128-ctr",
+      derived.subarray(0, 16),
+      Buffer.from(crypto3.cipherparams.iv, "hex")
+    );
     const pkBytes = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
     return _LocalKeyring.fromPrivateKey(`0x${pkBytes.toString("hex")}`);
   }
@@ -37536,7 +37597,9 @@ var LocalKeyring = class _LocalKeyring {
   /** Exports the private key as an encrypted keystore JSON (scrypt + aes-128-ctr, geth v3). */
   async exportKeystore(password) {
     if (!this.privateKey) {
-      throw new Error("Private key unavailable \u2014 only privateKey/generated keyrings can be exported");
+      throw new Error(
+        "Private key unavailable \u2014 only privateKey/generated keyrings can be exported"
+      );
     }
     const salt = (0, import_node_crypto.randomBytes)(32);
     const derived = (0, import_node_crypto.scryptSync)(password, salt, SCRYPT_DKLEN, {
@@ -37573,7 +37636,7 @@ var LocalKeyring = class _LocalKeyring {
   }
 };
 
-// ../sdk/dist/abis/SailGovernance.js
+// ../sdk/src/abis/SailGovernance.ts
 var SailGovernanceAbi = [
   {
     type: "function",
@@ -37619,7 +37682,7 @@ var SailGovernanceAbi = [
   }
 ];
 
-// ../sdk/dist/safe.js
+// ../sdk/src/safe.ts
 init_esm2();
 var setManagerAbi = [
   {
@@ -37709,7 +37772,10 @@ function buildSafeSetupInitializer(params) {
   });
 }
 function buildApprovedHashSignature(owner2) {
-  return encodePacked(["bytes32", "bytes32", "uint8"], [pad(owner2, { size: 32 }), pad("0x", { size: 32 }), 1]);
+  return encodePacked(
+    ["bytes32", "bytes32", "uint8"],
+    [pad(owner2, { size: 32 }), pad("0x", { size: 32 }), 1]
+  );
 }
 var safeProxyFactoryAbi = [
   {
@@ -37722,11 +37788,15 @@ var safeProxyFactoryAbi = [
 ];
 function computeSafeProxyAddress(params) {
   const { initializer, saltNonce, proxyCreationCode } = params;
-  const initCodeHash = keccak256(concat([
-    proxyCreationCode,
-    encodeAbiParameters([{ type: "address" }], [SAFE_V141.singletonL2])
-  ]));
-  const salt = keccak256(encodePacked(["bytes32", "uint256"], [keccak256(initializer), saltNonce]));
+  const initCodeHash = keccak256(
+    concat([
+      proxyCreationCode,
+      encodeAbiParameters([{ type: "address" }], [SAFE_V141.singletonL2])
+    ])
+  );
+  const salt = keccak256(
+    encodePacked(["bytes32", "uint256"], [keccak256(initializer), saltNonce])
+  );
   return getCreate2Address({
     from: SAFE_V141.proxyFactory,
     salt,
@@ -37735,13 +37805,20 @@ function computeSafeProxyAddress(params) {
 }
 function computeKernelBoundSalt(params) {
   const { saltNonce, deployer, permissionSigner, manager, feePolicy } = params;
-  return BigInt(keccak256(encodeAbiParameters([
-    { type: "uint256" },
-    { type: "address" },
-    { type: "address" },
-    { type: "address" },
-    { type: "address" }
-  ], [saltNonce, deployer, permissionSigner, manager, feePolicy])));
+  return BigInt(
+    keccak256(
+      encodeAbiParameters(
+        [
+          { type: "uint256" },
+          { type: "address" },
+          { type: "address" },
+          { type: "address" },
+          { type: "address" }
+        ],
+        [saltNonce, deployer, permissionSigner, manager, feePolicy]
+      )
+    )
+  );
 }
 function computeSailSmaAddress(params) {
   const boundSalt = computeKernelBoundSalt(params);
@@ -37788,7 +37865,7 @@ function buildSetManagerExecTransaction(params) {
   return { to: params.safe, data };
 }
 
-// ../sdk/dist/discovery.js
+// ../sdk/src/discovery.ts
 var SAFE_TX_SERVICE_SLUGS = {
   1: "eth",
   100: "gno",
@@ -37816,7 +37893,7 @@ async function discoverSafesForOwner(owner2, chainId) {
   return data.safes ?? [];
 }
 
-// ../sdk/dist/fees.js
+// ../sdk/src/fees.ts
 function min(a, b) {
   return a < b ? a : b;
 }
@@ -37852,7 +37929,7 @@ async function estimatePermissionFee(publicClient, governance, permission) {
   }
 }
 
-// ../sdk/dist/intelligence.js
+// ../sdk/src/intelligence.ts
 var SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 var SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";
 
@@ -38519,7 +38596,7 @@ var import_websocket2 = __toESM(require_websocket2(), 1);
 var import_websocket_server2 = __toESM(require_websocket_server2(), 1);
 
 // src/signing/server.ts
-var DEFAULT_SIGNING_PORT = 3141;
+var DEFAULT_SIGNING_PORT = Number(process.env.SAILOR_STATION_PORT ?? 3141);
 var RUNTIME_SUBDIR = (0, import_node_path4.join)(".sail", "runtime");
 var SERVER_STATE_FILE = "server.json";
 var REQUEST_SECRET_HEADER = "x-sailor-secret";
@@ -40693,6 +40770,8 @@ function scaffoldProjectWorkspace(dest, name, options) {
   import_node_fs9.default.mkdirSync(import_node_path8.default.join(sailDir2, "keys"), { recursive: true });
   import_node_fs9.default.mkdirSync(import_node_path8.default.join(sailDir2, "runtime"), { recursive: true });
   import_node_fs9.default.mkdirSync(import_node_path8.default.join(sailDir2, "state"), { recursive: true });
+  const installMode = process.env.SAILOR_INSTALL_MODE === "docker" ? "docker" : "local";
+  const containerName = process.env.SAILOR_CONTAINER_NAME ?? "agent";
   import_node_fs9.default.writeFileSync(
     import_node_path8.default.join(sailDir2, "config.json"),
     `${JSON.stringify(
@@ -40703,6 +40782,8 @@ function scaffoldProjectWorkspace(dest, name, options) {
         // null = chain not yet chosen; Stage 1 will set this
         stateDir: ".sail/state",
         createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+        installMode,
+        ...installMode === "docker" ? { containerName } : {},
         contracts: {
           kernel: "",
           mandateFactory: ""
@@ -40794,6 +40875,14 @@ Pass --force to scaffold into it anyway (existing files with the same name are o
       "This project is already initialized.\nRun `sailor update` to re-sync template files, or `sailor init --force` to re-initialize (overwrites scaffold files; your .sail/keys/ and .sail/state/ are left in place)."
     );
   }
+  const existingConfigPath = import_node_path8.default.join(dest, ".sail", "config.json");
+  const previousConfig = import_node_fs9.default.existsSync(existingConfigPath) ? (() => {
+    try {
+      return JSON.parse(import_node_fs9.default.readFileSync(existingConfigPath, "utf-8"));
+    } catch {
+      return null;
+    }
+  })() : null;
   copyDirSync(templateSrc, dest);
   const pkgRoot = packageRoot();
   const examplesPermSrc = import_node_path8.default.join(pkgRoot, "examples", "permissions");
@@ -40833,6 +40922,18 @@ Pass --force to scaffold into it anyway (existing files with the same name are o
   }
   scaffoldProjectWorkspace(dest, name, options);
   scaffoldFoundryWorkspace(dest);
+  const newMode = process.env.SAILOR_INSTALL_MODE === "docker" ? "docker" : "local";
+  if (previousConfig?.installMode === "docker" && newMode === "local") {
+    const prev = previousConfig.containerName ?? "agent";
+    console.log(`
+Switched to local install. If the Docker container is still running:`);
+    console.log(`  docker stop ${prev}`);
+    console.log(`You can restart it anytime with the standard docker run command.`);
+  } else if (previousConfig?.installMode === "local" && newMode === "docker") {
+    const containerName = process.env.SAILOR_CONTAINER_NAME ?? "agent";
+    console.log(`
+Switched to Docker install (container: ${containerName}).`);
+  }
   printWelcome(
     dest,
     name,
@@ -40943,6 +41044,12 @@ Created ${name}/`);
     "\u2551  If you skip this step, setup WILL break and you will have to        \u2551",
     "\u2551  restart. There are no shortcuts.                                    \u2551",
     "\u2551                                                                      \u2551",
+    "\u2551  IF SAILOR IS RUNNING IN DOCKER:                                     \u2551",
+    "\u2551    \u2022 Read project files from your local filesystem \u2014 they are        \u2551",
+    "\u2551      shared via volume mount, do NOT use docker exec to read them.   \u2551",
+    "\u2551    \u2022 Prefix every sailor command with:                               \u2551",
+    "\u2551      docker exec <containerName> sailor <command>                    \u2551",
+    "\u2551                                                                      \u2551",
     "\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D",
     ""
   ].join("\n"));
@@ -40996,6 +41103,39 @@ async function updateCommand() {
   }
   const added = [];
   copyDirSyncIfMissing(templateSrc, dest, added);
+  const configPath = import_node_path9.default.join(dest, ".sail", "config.json");
+  try {
+    const config = JSON.parse(import_node_fs10.default.readFileSync(configPath, "utf-8"));
+    const newMode = process.env.SAILOR_INSTALL_MODE === "docker" ? "docker" : "local";
+    const containerName = process.env.SAILOR_CONTAINER_NAME ?? "agent";
+    if (config.installMode !== newMode) {
+      const previousMode = config.installMode;
+      const previousContainer = config.containerName;
+      config.installMode = newMode;
+      if (newMode === "docker") {
+        config.containerName = containerName;
+      } else {
+        delete config.containerName;
+      }
+      import_node_fs10.default.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}
+`, "utf-8");
+      if (previousMode === "docker" && newMode === "local") {
+        const prev = previousContainer ?? "agent";
+        console.log(`
+Switched to local install. If the Docker container is still running:`);
+        console.log(`  docker stop ${prev}`);
+        console.log(`You can restart it anytime with the standard docker run command.`);
+      } else if (newMode === "docker") {
+        console.log(`
+Switched to Docker install (container: ${containerName}).`);
+      }
+    } else if (newMode === "docker" && config.containerName !== containerName) {
+      config.containerName = containerName;
+      import_node_fs10.default.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}
+`, "utf-8");
+    }
+  } catch {
+  }
   if (removed.length === 0 && updated.length === 0 && added.length === 0) {
     console.log("Nothing to update.");
     return;
@@ -45148,7 +45288,7 @@ async function uiCommand() {
   const serverBundle = import_node_path16.default.resolve(distDir, "server.cjs");
   const projectRoot = process.cwd();
   const sailDir2 = import_node_path16.default.join(projectRoot, ".sail");
-  const port = await findFreePort(projectPort(projectRoot));
+  const port = await findFreePort(process.env.PORT ? Number(process.env.PORT) : projectPort(projectRoot));
   if (!import_node_fs20.default.existsSync(serverBundle)) {
     throw new Error(`Server bundle not found at ${serverBundle}. Re-run the sailor build.`);
   }