@dev.sail.money/sailor 1.3.0-222 → 1.3.0-223

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev.sail.money/sailor",
-  "version": "1.3.0-222",
+  "version": "1.3.0-223",
   "description": "Operator toolkit for Sail Protocol",
   "bin": {
     "sailor": "packages/cli/dist/index.cjs"

package/packages/cli/dist/index.cjs

@@ -35367,6 +35367,10 @@ var SailKernelAbi = [
     ],
     outputs: [{ name: "account", type: "address" }]
   },
+  // Post-#53: two-step registration. Requires msg.sender == the Safe (trusted-proxy
+  // codehash + trusted-singleton pin) and a Safe owner signature over the
+  // RegisterAccount EIP-712 digest (verified via checkSignatures). Must be submitted
+  // through the Safe's execTransaction, not the owner EOA. See buildRegisterAccountTypedData.
   {
     type: "function",
     name: "registerAccount",
@@ -35374,7 +35378,10 @@ var SailKernelAbi = [
     inputs: [
       { name: "permissionSigner", type: "address" },
       { name: "manager", type: "address" },
-      { name: "feePolicy", type: "address" }
+      { name: "feePolicy", type: "address" },
+      { name: "feeAsset", type: "address" },
+      { name: "deadline", type: "uint256" },
+      { name: "ownerSig", type: "bytes" }
     ],
     outputs: []
   },
@@ -35425,6 +35432,32 @@ var SailKernelAbi = [
     ],
     outputs: []
   },
+  // ── Session kill switch ───────────────────────────────────────────────────
+  // Suspend/resume manager dispatch rights. Both are permissionSigner-signed
+  // (RevokeSession/ActivateSession EIP-712, nonce = signerNonces[account]) and
+  // rotate the manager/batch nonce epochs so any pre-signed dispatch is invalidated.
+  {
+    type: "function",
+    name: "revokeSession",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "deadline", type: "uint256" },
+      { name: "sig", type: "bytes" }
+    ],
+    outputs: []
+  },
+  {
+    type: "function",
+    name: "activateSession",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "deadline", type: "uint256" },
+      { name: "sig", type: "bytes" }
+    ],
+    outputs: []
+  },
   // ── Manager dispatch ──────────────────────────────────────────────────────
   {
     type: "function",
@@ -35564,6 +35597,7 @@ var SailKernelAbi = [
       { name: "permissionSigner", type: "address" },
       { name: "manager", type: "address" },
       { name: "feePolicy", type: "address" },
+      { name: "feeAsset", type: "address" },
       { name: "sessionActive", type: "bool" }
     ]
   },
@@ -35903,122 +35937,6 @@ function getSailDeployment(chainId) {
   return deployment;
 }
 
-// ../sdk/dist/errors.js
-init_esm2();
-var KERNEL_ERROR_SIGNATURES = [
-  "error AccountAlreadyRegistered(address account)",
-  "error AccountNotRegistered(address account)",
-  "error AccountSelfTarget()",
-  "error ArrayLengthMismatch()",
-  "error BatchPermissionDenied()",
-  "error BatchSubcallFailed(uint256 index, address target)",
-  "error BatchTooLong(uint256 length)",
-  "error BatchZeroTarget(uint256 index)",
-  "error DeadlineExpired(uint256 deadline, uint256 current)",
-  "error DistributorBpsTooLarge(uint256 bps)",
-  "error EmptyBatch()",
-  "error FeePolicyNotSet()",
-  "error FeeTokenMismatch(address provided, address expected)",
-  "error FeeTooLarge(uint256 requested, uint256 maxAllowed)",
-  "error FeeTransferFailed()",
-  "error InsufficientFee(uint256 required, uint256 provided)",
-  "error InvalidInitializer()",
-  "error InvalidManagerSignature()",
-  "error InvalidSignerSignature()",
-  "error KernelSelfTarget(uint256 index)",
-  // SAIL-405: setManager rejects a no-op rotation (newManager == current).
-  "error ManagerUnchanged()",
-  "error ModuleNotEnabled()",
-  // Present in the deployed conjunctive kernel; dropped in the latest source.
-  "error NoPermissionsRegistered(address account)",
-  "error NotAContract(address addr)",
-  "error NotGovernance()",
-  "error NotManager(address caller, address expected)",
-  "error NotPermissionSigner()",
-  "error NotTimelock()",
-  "error PermissionAlreadyRegistered(address permission)",
-  "error PermissionDenied(address permission)",
-  "error PermissionNotBatchAware(address permission)",
-  "error PermissionNotRegistered(address permission)",
-  "error ProtocolPaused()",
-  "error SafeExecutionFailed()",
-  "error SessionInactive(address account)",
-  "error TooManyPermissions(address account, uint256 limit)",
-  "error UntrustedFactory(address factory)",
-  "error UntrustedFeePolicy(address policy)",
-  "error UntrustedModuleSetup(address setup)",
-  "error UntrustedProxyCodehash(bytes32 codehash)",
-  "error UntrustedSingleton(address singleton)",
-  "error ZeroAddress()",
-  "error ZeroFee()"
-];
-var KERNEL_ERROR_ABI = parseAbi(KERNEL_ERROR_SIGNATURES);
-var ERROR_HINTS = {
-  InvalidManagerSignature: "The manager's EIP-712 Dispatch signature did not recover to the registered manager. Most common cause: a stale manager nonce (the kernel's managerNonces advanced between signing and submission \u2014 e.g. a load-balanced RPC returned a lagging value, or two dispatches were signed against the same nonce). Re-read managerNonces and re-sign, or track the nonce locally and increment it across sequential dispatches. Can also mean the wrong EIP-712 Dispatch type was used for this kernel version \u2014 see detectKernelCapabilities.",
-  PermissionDenied: "A registered permission's evaluate() returned false (or reverted / ran out of gas) for this call. In a conjunctive kernel EVERY registered permission must approve EVERY call, so a permission that does not pass through calls outside its own domain will block unrelated dispatches. Check that each permission either matches this call or returns true for calls it doesn't govern.",
-  NoPermissionsRegistered: "The account has zero registered permissions, so the kernel denies by default. Register at least one permission (kernel.registerPermission / registerPermissions) before dispatching.",
-  PermissionNotRegistered: "The named permission is not registered for this account. Register it first, or (on a conjunctive kernel) drop the permission argument \u2014 that kernel checks all registered permissions automatically.",
-  SessionInactive: "The manager's session is revoked. Re-activate it (session.activate) before dispatching.",
-  DeadlineExpired: "The signature deadline is in the past. Use a deadline comfortably ahead of block.timestamp.",
-  SafeExecutionFailed: "The underlying Safe module call reverted. The permission passed, but the target call itself failed (e.g. slippage too tight, insufficient allowance/balance, or a failing swap route).",
-  ModuleNotEnabled: "The Sail module is not enabled on the Safe. Complete account onboarding (enable the module) first.",
-  ProtocolPaused: "The protocol is paused by governance. Dispatches are blocked until it is unpaused.",
-  NotManager: "The submitting address is not the registered manager for this account.",
-  TooManyPermissions: "Registering this permission would exceed the kernel's per-account permission cap. Revoke an unused permission first."
-};
-async function decode2(data) {
-  const { decodeErrorResult: decodeErrorResult2 } = await Promise.resolve().then(() => (init_esm2(), esm_exports2));
-  try {
-    const decoded = decodeErrorResult2({ abi: KERNEL_ERROR_ABI, data });
-    const name = decoded.errorName;
-    const args = decoded.args ?? [];
-    const selector = data.slice(0, 10);
-    const hint = ERROR_HINTS[name];
-    const argStr = args.length ? `(${args.map(String).join(", ")})` : "()";
-    const message = hint ? `${name}${argStr} \u2014 ${hint}` : `${name}${argStr}`;
-    return { name, args, selector, hint, message };
-  } catch {
-    return null;
-  }
-}
-function decodeKernelError(data) {
-  if (!data || data === "0x")
-    return Promise.resolve(null);
-  return decode2(data);
-}
-async function explainKernelRevert(err) {
-  const data = extractRevertData(err);
-  if (!data)
-    return null;
-  return decodeKernelError(data);
-}
-function extractRevertData(err) {
-  const seen = /* @__PURE__ */ new Set();
-  let cursor = err;
-  let depth = 0;
-  while (cursor && typeof cursor === "object" && !seen.has(cursor) && depth < 12) {
-    seen.add(cursor);
-    depth++;
-    const obj = cursor;
-    const data = obj["data"];
-    if (typeof data === "string" && data.startsWith("0x") && data.length >= 10) {
-      return data;
-    }
-    if (data && typeof data === "object") {
-      const inner = data["data"];
-      if (typeof inner === "string" && inner.startsWith("0x") && inner.length >= 10) {
-        return inner;
-      }
-    }
-    const raw = obj["raw"];
-    if (typeof raw === "string" && raw.startsWith("0x") && raw.length >= 10) {
-      return raw;
-    }
-    cursor = obj["cause"];
-  }
-  return null;
-}
-
 // ../sdk/dist/eip712.js
 init_esm2();
 function sailKernelDomain(args) {
@@ -36156,6 +36074,197 @@ function buildRegisterPermissionsBatchTypedData(args) {
     }
   };
 }
+var TEMPLATE_EIP712_DOMAIN_ABI = [
+  {
+    type: "function",
+    name: "eip712Domain",
+    stateMutability: "view",
+    inputs: [],
+    outputs: [
+      { name: "fields", type: "bytes1" },
+      { name: "name", type: "string" },
+      { name: "version", type: "string" },
+      { name: "chainId", type: "uint256" },
+      { name: "verifyingContract", type: "address" },
+      { name: "salt", type: "bytes32" },
+      { name: "extensions", type: "uint256[]" }
+    ]
+  }
+];
+var REGISTRATION_EPOCH_ABI = [
+  {
+    type: "function",
+    name: "registrationEpoch",
+    stateMutability: "view",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "permission", type: "address" }
+    ],
+    outputs: [{ type: "uint256" }]
+  }
+];
+var CONFIGURE_FIELDS_V1 = [
+  { name: "account", type: "address" },
+  { name: "paramsHash", type: "bytes32" },
+  { name: "nonce", type: "uint256" },
+  { name: "deadline", type: "uint256" }
+];
+var CONFIGURE_FIELDS_V2 = [...CONFIGURE_FIELDS_V1, { name: "epoch", type: "uint256" }];
+async function buildConfigureTypedData(args) {
+  const [, name, version4, chainId] = await args.publicClient.readContract({
+    address: args.template,
+    abi: TEMPLATE_EIP712_DOMAIN_ABI,
+    functionName: "eip712Domain"
+  });
+  if (version4 !== "1" && version4 !== "2") {
+    throw new Error(`Unsupported template EIP-712 domain version "${version4}" for ${args.template}. This SDK signs Configure schema v1 or v2; upgrade the SDK for newer templates.`);
+  }
+  const isV2 = version4 === "2";
+  const message = {
+    account: args.account,
+    paramsHash: keccak256(args.params),
+    nonce: args.nonce.toString(),
+    deadline: args.deadline.toString()
+  };
+  if (isV2) {
+    const epoch = await args.publicClient.readContract({
+      address: args.kernel,
+      abi: REGISTRATION_EPOCH_ABI,
+      functionName: "registrationEpoch",
+      args: [args.account, args.template]
+    });
+    message.epoch = epoch.toString();
+  }
+  return {
+    domain: {
+      name,
+      version: version4,
+      chainId: Number(chainId),
+      verifyingContract: args.template
+    },
+    types: {
+      Configure: isV2 ? CONFIGURE_FIELDS_V2 : CONFIGURE_FIELDS_V1
+    },
+    primaryType: "Configure",
+    message
+  };
+}
+
+// ../sdk/dist/errors.js
+init_esm2();
+var KERNEL_ERROR_SIGNATURES = [
+  "error AccountAlreadyRegistered(address account)",
+  "error AccountNotRegistered(address account)",
+  "error AccountSelfTarget()",
+  "error ArrayLengthMismatch()",
+  "error BatchPermissionDenied()",
+  "error BatchSubcallFailed(uint256 index, address target)",
+  "error BatchTooLong(uint256 length)",
+  "error BatchZeroTarget(uint256 index)",
+  "error DeadlineExpired(uint256 deadline, uint256 current)",
+  "error DistributorBpsTooLarge(uint256 bps)",
+  "error EmptyBatch()",
+  "error FeePolicyNotSet()",
+  "error FeeTokenMismatch(address provided, address expected)",
+  "error FeeTooLarge(uint256 requested, uint256 maxAllowed)",
+  "error FeeTransferFailed()",
+  "error InsufficientFee(uint256 required, uint256 provided)",
+  "error InvalidInitializer()",
+  "error InvalidManagerSignature()",
+  "error InvalidSignerSignature()",
+  "error KernelSelfTarget(uint256 index)",
+  // SAIL-405: setManager rejects a no-op rotation (newManager == current).
+  "error ManagerUnchanged()",
+  "error ModuleNotEnabled()",
+  // Present in the deployed conjunctive kernel; dropped in the latest source.
+  "error NoPermissionsRegistered(address account)",
+  "error NotAContract(address addr)",
+  "error NotGovernance()",
+  "error NotManager(address caller, address expected)",
+  "error NotPermissionSigner()",
+  "error NotTimelock()",
+  "error PermissionAlreadyRegistered(address permission)",
+  "error PermissionDenied(address permission)",
+  "error PermissionNotBatchAware(address permission)",
+  "error PermissionNotRegistered(address permission)",
+  "error ProtocolPaused()",
+  "error SafeExecutionFailed()",
+  "error SessionInactive(address account)",
+  "error TooManyPermissions(address account, uint256 limit)",
+  "error UntrustedFactory(address factory)",
+  "error UntrustedFeePolicy(address policy)",
+  "error UntrustedModuleSetup(address setup)",
+  "error UntrustedProxyCodehash(bytes32 codehash)",
+  "error UntrustedSingleton(address singleton)",
+  "error ZeroAddress()",
+  "error ZeroFee()"
+];
+var KERNEL_ERROR_ABI = parseAbi(KERNEL_ERROR_SIGNATURES);
+var ERROR_HINTS = {
+  InvalidManagerSignature: "The manager's EIP-712 Dispatch signature did not recover to the registered manager. Most common cause: a stale manager nonce (the kernel's managerNonces advanced between signing and submission \u2014 e.g. a load-balanced RPC returned a lagging value, or two dispatches were signed against the same nonce). Re-read managerNonces and re-sign, or track the nonce locally and increment it across sequential dispatches. Can also mean the wrong EIP-712 Dispatch type was used for this kernel version \u2014 see detectKernelCapabilities.",
+  PermissionDenied: "A registered permission's evaluate() returned false (or reverted / ran out of gas) for this call. In a conjunctive kernel EVERY registered permission must approve EVERY call, so a permission that does not pass through calls outside its own domain will block unrelated dispatches. Check that each permission either matches this call or returns true for calls it doesn't govern.",
+  NoPermissionsRegistered: "The account has zero registered permissions, so the kernel denies by default. Register at least one permission (kernel.registerPermission / registerPermissions) before dispatching.",
+  PermissionNotRegistered: "The named permission is not registered for this account. Register it first, or (on a conjunctive kernel) drop the permission argument \u2014 that kernel checks all registered permissions automatically.",
+  SessionInactive: "The manager's session is revoked. Re-activate it (session.activate) before dispatching.",
+  DeadlineExpired: "The signature deadline is in the past. Use a deadline comfortably ahead of block.timestamp.",
+  SafeExecutionFailed: "The underlying Safe module call reverted. The permission passed, but the target call itself failed (e.g. slippage too tight, insufficient allowance/balance, or a failing swap route).",
+  ModuleNotEnabled: "The Sail module is not enabled on the Safe. Complete account onboarding (enable the module) first.",
+  ProtocolPaused: "The protocol is paused by governance. Dispatches are blocked until it is unpaused.",
+  NotManager: "The submitting address is not the registered manager for this account.",
+  TooManyPermissions: "Registering this permission would exceed the kernel's per-account permission cap. Revoke an unused permission first."
+};
+async function decode2(data) {
+  const { decodeErrorResult: decodeErrorResult2 } = await Promise.resolve().then(() => (init_esm2(), esm_exports2));
+  try {
+    const decoded = decodeErrorResult2({ abi: KERNEL_ERROR_ABI, data });
+    const name = decoded.errorName;
+    const args = decoded.args ?? [];
+    const selector = data.slice(0, 10);
+    const hint = ERROR_HINTS[name];
+    const argStr = args.length ? `(${args.map(String).join(", ")})` : "()";
+    const message = hint ? `${name}${argStr} \u2014 ${hint}` : `${name}${argStr}`;
+    return { name, args, selector, hint, message };
+  } catch {
+    return null;
+  }
+}
+function decodeKernelError(data) {
+  if (!data || data === "0x")
+    return Promise.resolve(null);
+  return decode2(data);
+}
+async function explainKernelRevert(err) {
+  const data = extractRevertData(err);
+  if (!data)
+    return null;
+  return decodeKernelError(data);
+}
+function extractRevertData(err) {
+  const seen = /* @__PURE__ */ new Set();
+  let cursor = err;
+  let depth = 0;
+  while (cursor && typeof cursor === "object" && !seen.has(cursor) && depth < 12) {
+    seen.add(cursor);
+    depth++;
+    const obj = cursor;
+    const data = obj["data"];
+    if (typeof data === "string" && data.startsWith("0x") && data.length >= 10) {
+      return data;
+    }
+    if (data && typeof data === "object") {
+      const inner = data["data"];
+      if (typeof inner === "string" && inner.startsWith("0x") && inner.length >= 10) {
+        return inner;
+      }
+    }
+    const raw = obj["raw"];
+    if (typeof raw === "string" && raw.startsWith("0x") && raw.length >= 10) {
+      return raw;
+    }
+    cursor = obj["cause"];
+  }
+  return null;
+}
 
 // ../sdk/dist/lifi.js
 init_esm2();
@@ -36223,6 +36332,27 @@ function buildPublicClient(config) {
 function defaultDeadline() {
   return BigInt(Math.floor(Date.now() / 1e3) + 300);
 }
+var CONFIGURABLE_PERMISSION_ABI = [
+  {
+    type: "function",
+    name: "configNonces",
+    stateMutability: "view",
+    inputs: [{ name: "account", type: "address" }],
+    outputs: [{ type: "uint256" }]
+  },
+  {
+    type: "function",
+    name: "configure",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "params", type: "bytes" },
+      { name: "deadline", type: "uint256" },
+      { name: "sig", type: "bytes" }
+    ],
+    outputs: []
+  }
+];
 var DEFAULT_DISPATCH_GAS = 2000000n;
 function delay(ms) {
   return new Promise((resolve3) => setTimeout(resolve3, ms));
@@ -36379,8 +36509,47 @@ var MandateNamespace = class extends KernelNamespace {
       value: 0n
     });
   }
-  reconfigure(_safe, _template, _params, _signer) {
-    return notImplemented();
+  /**
+   * Re-configure the per-account bounds of an already-registered shared template.
+   * The permission signer signs the template's `Configure` EIP-712 struct — built by
+   * `buildConfigureTypedData`, which reads the template's live ERC-5267 domain and emits
+   * the v1 or v2 (epoch-bound) schema to match whatever is deployed — and the attached
+   * wallet submits `configure(account, params, deadline, sig)`.
+   *
+   * The config nonce is read fresh on-chain immediately before signing (the template
+   * increments it only after a successful verify), so a re-config never reuses a stale nonce.
+   */
+  async reconfigure(safe, template, params, signer) {
+    const kernel = this.requireKernel();
+    const wallet = this.requireSigner();
+    const encoded = template.encoder.encode(params);
+    const deadline = defaultDeadline();
+    const nonce = await this.publicClient.readContract({
+      address: template.address,
+      abi: CONFIGURABLE_PERMISSION_ABI,
+      functionName: "configNonces",
+      args: [safe]
+    });
+    const td = await buildConfigureTypedData({
+      publicClient: this.publicClient,
+      kernel,
+      template: template.address,
+      account: safe,
+      params: encoded,
+      nonce,
+      deadline
+    });
+    const sig = await signer.signTyped(td.domain, { primaryType: td.primaryType, types: td.types }, td.message);
+    const txHash = await wallet.writeContract({
+      address: template.address,
+      abi: CONFIGURABLE_PERMISSION_ABI,
+      functionName: "configure",
+      args: [safe, encoded, deadline, sig]
+    });
+    const receipt = await this.publicClient.waitForTransactionReceipt({ hash: txHash });
+    if (receipt.status !== "success") {
+      throw new Error(`configure reverted (tx ${txHash})`);
+    }
   }
   replace(_safe, _oldTemplate, _newTemplate, _params, _signer) {
     return notImplemented();
@@ -36679,14 +36848,67 @@ var StrategyNamespace = class extends KernelNamespace {
   }
 };
 var SessionNamespace = class extends KernelNamespace {
-  revoke(_safe, _signer) {
-    return notImplemented();
+  /**
+   * Suspend (`revokeSession`) or resume (`activateSession`) the manager's dispatch rights.
+   * Both are permissionSigner-signed over the RevokeSession/ActivateSession EIP-712 struct,
+   * with `nonce` read fresh from `signerNonces[account]` immediately before signing — the
+   * kernel bumps that nonce by a full epoch on revoke (#70), so it must never be cached. The
+   * kernel also rotates the manager/batch nonce epochs, invalidating any pre-signed dispatch.
+   */
+  async revoke(safe, signer) {
+    await this.#submitSessionOp(safe, signer, "RevokeSession", "revokeSession");
   }
-  activate(_safe, _signer) {
-    return notImplemented();
+  async activate(safe, signer) {
+    await this.#submitSessionOp(safe, signer, "ActivateSession", "activateSession");
   }
-  status(_safe) {
-    return notImplemented();
+  async #submitSessionOp(safe, signer, primaryType, fn) {
+    const kernel = this.requireKernel();
+    const wallet = this.requireSigner();
+    const deadline = defaultDeadline();
+    const nonce = await this.publicClient.readContract({
+      address: kernel,
+      abi: SailKernelAbi,
+      functionName: "signerNonces",
+      args: [safe]
+    });
+    const sig = await signer.signTyped(sailKernelDomain({ chainId: this.config.chainId, kernel }), {
+      primaryType,
+      types: {
+        [primaryType]: [
+          { name: "account", type: "address" },
+          { name: "nonce", type: "uint256" },
+          { name: "deadline", type: "uint256" }
+        ]
+      }
+    }, { account: safe, nonce, deadline });
+    const txHash = await wallet.writeContract({
+      address: kernel,
+      abi: SailKernelAbi,
+      functionName: fn,
+      args: [safe, deadline, sig]
+    });
+    const receipt = await this.publicClient.waitForTransactionReceipt({ hash: txHash });
+    if (receipt.status !== "success") {
+      throw new Error(`${fn} reverted (tx ${txHash})`);
+    }
+  }
+  async status(safe) {
+    const kernel = this.requireKernel();
+    const cfg = await this.publicClient.readContract({
+      address: kernel,
+      abi: SailKernelAbi,
+      functionName: "configs",
+      args: [safe]
+    });
+    return {
+      safe,
+      active: cfg[4],
+      manager: cfg[1],
+      // Block-level markers require an event scan; expose live active/manager state and
+      // leave the historical timestamps null.
+      activatedAtBlock: null,
+      revokedAtBlock: null
+    };
   }
 };
 var FeesNamespace = class extends KernelNamespace {
@@ -44715,7 +44937,7 @@ async function scan(options) {
           args: [address]
         })
       ]);
-      const [permissionSigner, manager, , sessionActive] = config;
+      const [permissionSigner, manager, , , sessionActive] = config;
       smas.push({ address, registered: true, manager, permissionSigner, sessionActive, mandates });
     } catch (err) {
       smas.push({

package/packages/cli/dist/server.cjs

@@ -39440,6 +39440,10 @@ var SailKernelAbi = [
     ],
     outputs: [{ name: "account", type: "address" }]
   },
+  // Post-#53: two-step registration. Requires msg.sender == the Safe (trusted-proxy
+  // codehash + trusted-singleton pin) and a Safe owner signature over the
+  // RegisterAccount EIP-712 digest (verified via checkSignatures). Must be submitted
+  // through the Safe's execTransaction, not the owner EOA. See buildRegisterAccountTypedData.
   {
     type: "function",
     name: "registerAccount",
@@ -39447,7 +39451,10 @@ var SailKernelAbi = [
     inputs: [
       { name: "permissionSigner", type: "address" },
       { name: "manager", type: "address" },
-      { name: "feePolicy", type: "address" }
+      { name: "feePolicy", type: "address" },
+      { name: "feeAsset", type: "address" },
+      { name: "deadline", type: "uint256" },
+      { name: "ownerSig", type: "bytes" }
     ],
     outputs: []
   },
@@ -39498,6 +39505,32 @@ var SailKernelAbi = [
     ],
     outputs: []
   },
+  // ── Session kill switch ───────────────────────────────────────────────────
+  // Suspend/resume manager dispatch rights. Both are permissionSigner-signed
+  // (RevokeSession/ActivateSession EIP-712, nonce = signerNonces[account]) and
+  // rotate the manager/batch nonce epochs so any pre-signed dispatch is invalidated.
+  {
+    type: "function",
+    name: "revokeSession",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "deadline", type: "uint256" },
+      { name: "sig", type: "bytes" }
+    ],
+    outputs: []
+  },
+  {
+    type: "function",
+    name: "activateSession",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "deadline", type: "uint256" },
+      { name: "sig", type: "bytes" }
+    ],
+    outputs: []
+  },
   // ── Manager dispatch ──────────────────────────────────────────────────────
   {
     type: "function",
@@ -39637,6 +39670,7 @@ var SailKernelAbi = [
       { name: "permissionSigner", type: "address" },
       { name: "manager", type: "address" },
       { name: "feePolicy", type: "address" },
+      { name: "feeAsset", type: "address" },
       { name: "sessionActive", type: "bool" }
     ]
   },
@@ -51266,7 +51300,7 @@ function startServer(sailDir, { port = PORT } = {}) {
           client.readContract({ address: kernel, abi: SailKernelAbi, functionName: "getPermissions", args: [safe] }),
           client.getBalance({ address: safe })
         ]);
-        const [permissionSigner, manager, , sessionActive] = configs;
+        const [permissionSigner, manager, , , sessionActive] = configs;
         const managerSet = Boolean(manager) && getAddress(manager) !== zeroAddress2;
         const managerAddr = managerSet ? getAddress(manager) : localSigner;
         const knownManagerAddrs = (account.managers ?? []).map((a) => getAddress(a));

package/packages/sdk/dist/abis/SailKernel.d.ts

@@ -51,6 +51,15 @@ export declare const SailKernelAbi: readonly [{
     }, {
         readonly name: "feePolicy";
         readonly type: "address";
+    }, {
+        readonly name: "feeAsset";
+        readonly type: "address";
+    }, {
+        readonly name: "deadline";
+        readonly type: "uint256";
+    }, {
+        readonly name: "ownerSig";
+        readonly type: "bytes";
     }];
     readonly outputs: readonly [];
 }, {
@@ -107,6 +116,36 @@ export declare const SailKernelAbi: readonly [{
         readonly type: "bytes";
     }];
     readonly outputs: readonly [];
+}, {
+    readonly type: "function";
+    readonly name: "revokeSession";
+    readonly stateMutability: "nonpayable";
+    readonly inputs: readonly [{
+        readonly name: "account";
+        readonly type: "address";
+    }, {
+        readonly name: "deadline";
+        readonly type: "uint256";
+    }, {
+        readonly name: "sig";
+        readonly type: "bytes";
+    }];
+    readonly outputs: readonly [];
+}, {
+    readonly type: "function";
+    readonly name: "activateSession";
+    readonly stateMutability: "nonpayable";
+    readonly inputs: readonly [{
+        readonly name: "account";
+        readonly type: "address";
+    }, {
+        readonly name: "deadline";
+        readonly type: "uint256";
+    }, {
+        readonly name: "sig";
+        readonly type: "bytes";
+    }];
+    readonly outputs: readonly [];
 }, {
     readonly type: "function";
     readonly name: "dispatch";
@@ -310,6 +349,9 @@ export declare const SailKernelAbi: readonly [{
     }, {
         readonly name: "feePolicy";
         readonly type: "address";
+    }, {
+        readonly name: "feeAsset";
+        readonly type: "address";
     }, {
         readonly name: "sessionActive";
         readonly type: "bool";