@dev.sail.money/sailor 1.3.0-225 → 1.3.0-227

package/README.md

@@ -295,6 +295,22 @@ the station), set a comma-separated list — the local origin is always allowed:
 SAILOR_CORS_ORIGINS=https://hermes.example.ts.net,https://another.host
 ```
 
+By default the UI server binds `127.0.0.1` (local only). To reach it from another
+device **without** Tailscale — e.g. behind your own reverse proxy on a domain — bind
+all interfaces and throttle the key-management endpoints:
+
+```bash
+SAILOR_HOST=0.0.0.0             # bind all interfaces (default 127.0.0.1)
+SAILOR_TRUST_PROXY=1            # hops to your proxy (or an IP allowlist), so rate limits key on the real client IP
+SAILOR_RATE_LIMIT_PER_MIN=100   # cap /api/signer + /api/onboard/generate-key (default 100)
+```
+
+Behind a reverse proxy, set `SAILOR_TRUST_PROXY` (usually `1`) — otherwise the rate
+limiter sees only the proxy's IP and applies one shared bucket to all clients.
+
+The key-management endpoints are **unauthenticated** — only expose them behind your
+own auth (reverse-proxy basic-auth, or a private tailnet), never the open internet.
+
 ---
 
 ## Agent-driven onboarding & custom mandates

package/examples/custom-mandate/.sail/contracts/interfaces/IPermission.sol

@@ -10,6 +10,10 @@ struct Context {
     uint256 value;
     uint256 blockTimestamp;
     uint256 blockNumber;
+    /// @dev Kernel registrationEpoch(account, permission) at dispatch. Configurable
+    ///      permissions fail closed on a mismatch with the epoch stamped at configure()
+    ///      time; permissions without post-deploy configuration can ignore it.
+    uint256 configEpoch;
 }
 
 interface IPermission {

package/examples/custom-mandate/README.md

@@ -36,11 +36,14 @@ struct Context {
     uint256 value;          // msg.value (native asset) sent with the call
     uint256 blockTimestamp; // block.timestamp at evaluation
     uint256 blockNumber;    // block.number at evaluation
+    uint256 configEpoch;    // kernel registrationEpoch(account, permission) at dispatch;
+                            // ignore it unless your permission takes post-deploy configuration
 }
 ```
 
 - `evaluate` — your policy. Return `true` to permit the call, `false` to block it. Runs under a
-  100k-gas `staticcall`; a revert or gas overage is treated as `false`.
+  150,000-gas `staticcall` (`SailKernel.PERMISSION_GAS_CAP`); a revert or gas overage is treated
+  as `false`.
 - `discriminator` — a stable `bytes32` name for your permission (e.g. `keccak256("MyMandate")`).
 
 Keep all policy parameters constructor-configured so each deployment is a complete, reviewable

package/examples/permissions/interfaces/IBatchPermission.sol

@@ -26,6 +26,8 @@ struct BatchContext {
     bytes32 batchHash;      // keccak256(abi.encode(calls)) — stable id for the exact sequence
     uint256 blockTimestamp; // block.timestamp at dispatch
     uint256 blockNumber;    // block.number at dispatch
+    uint256 configEpoch;    // kernel registrationEpoch(account, permission) at dispatch —
+                            // same fail-closed freshness check as Context.configEpoch
 }
 
 interface IBatchPermission {

package/examples/permissions/interfaces/IPermission.sol

@@ -10,6 +10,10 @@ struct Context {
     uint256 value;
     uint256 blockTimestamp;
     uint256 blockNumber;
+    /// @dev Kernel registrationEpoch(account, permission) at dispatch. Configurable
+    ///      permissions fail closed on a mismatch with the epoch stamped at configure()
+    ///      time; permissions without post-deploy configuration can ignore it.
+    uint256 configEpoch;
 }
 
 interface IPermission {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev.sail.money/sailor",
-  "version": "1.3.0-225",
+  "version": "1.3.0-227",
   "description": "Operator toolkit for Sail Protocol",
   "bin": {
     "sailor": "packages/cli/dist/index.cjs"
@@ -42,5 +42,11 @@
   },
   "dependencies": {
     "tsx": "^4.22.4"
+  },
+  "pnpm": {
+    "overrides": {
+      "form-data@<4.0.6": ">=4.0.6",
+      "hono@<4.12.25": ">=4.12.25"
+    }
   }
 }

package/packages/cli/dist/index.cjs

@@ -39629,8 +39629,9 @@ var SigningServer = class {
       }
     }
     if (!(0, import_node_fs6.existsSync)(this.runtimeDir)) (0, import_node_fs6.mkdirSync)(this.runtimeDir, { recursive: true });
+    const serverStatePath = (0, import_node_path4.join)(this.runtimeDir, SERVER_STATE_FILE);
     (0, import_node_fs6.writeFileSync)(
-      (0, import_node_path4.join)(this.runtimeDir, SERVER_STATE_FILE),
+      serverStatePath,
       JSON.stringify(
         {
           url: this._url,
@@ -39642,8 +39643,10 @@ var SigningServer = class {
         },
         null,
         2
-      )
+      ),
+      { mode: 384 }
     );
+    (0, import_node_fs6.chmodSync)(serverStatePath, 384);
   }
   removeRuntimeState() {
     const path11 = (0, import_node_path4.join)(this.runtimeDir, SERVER_STATE_FILE);
@@ -40542,15 +40545,36 @@ var IPERMISSION_ABI = [
           { name: "selector", type: "bytes4" },
           { name: "value", type: "uint256" },
           { name: "blockTimestamp", type: "uint256" },
-          { name: "blockNumber", type: "uint256" }
+          { name: "blockNumber", type: "uint256" },
+          { name: "configEpoch", type: "uint256" }
         ]
       }
     ],
     outputs: [{ type: "bool" }]
   }
 ];
+var REGISTRATION_EPOCH_ABI2 = [
+  {
+    type: "function",
+    name: "registrationEpoch",
+    stateMutability: "view",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "permission", type: "address" }
+    ],
+    outputs: [{ type: "uint256" }]
+  }
+];
+async function readRegistrationEpoch(publicClient, kernel, account2, permission) {
+  return await publicClient.readContract({
+    address: kernel,
+    abi: REGISTRATION_EPOCH_ABI2,
+    functionName: "registrationEpoch",
+    args: [account2, permission]
+  });
+}
 function buildPermissionContext(params) {
-  const { account: account2, manager, call: call2, blockInfo } = params;
+  const { account: account2, manager, call: call2, blockInfo, configEpoch } = params;
   const selector = call2.data.length >= 10 ? call2.data.slice(0, 10) : "0x00000000";
   return {
     account: account2,
@@ -40561,12 +40585,23 @@ function buildPermissionContext(params) {
     selector,
     value: call2.value,
     blockTimestamp: blockInfo.timestamp,
-    blockNumber: blockInfo.number
+    blockNumber: blockInfo.number,
+    configEpoch
   };
 }
 async function probePermissionForCall(params) {
-  const { publicClient, permission, account: account2, manager, call: call2, blockInfo } = params;
-  const ctx = buildPermissionContext({ account: account2, manager, call: call2, blockInfo });
+  const { publicClient, kernel, permission, account: account2, manager, call: call2, blockInfo } = params;
+  let configEpoch;
+  try {
+    configEpoch = await readRegistrationEpoch(publicClient, kernel, account2, permission);
+  } catch (err) {
+    return {
+      accepted: false,
+      reverted: true,
+      error: `could not read registrationEpoch from kernel ${kernel} (${err.message.split("\n")[0]})`
+    };
+  }
+  const ctx = buildPermissionContext({ account: account2, manager, call: call2, blockInfo, configEpoch });
   try {
     const accepted = await publicClient.readContract({
       address: permission,
@@ -40580,10 +40615,11 @@ async function probePermissionForCall(params) {
   }
 }
 async function resolvePermissionForCall(params) {
-  const { publicClient, account: account2, manager, call: call2, registeredPermissions, blockInfo } = params;
-  const ctx = buildPermissionContext({ account: account2, manager, call: call2, blockInfo });
+  const { publicClient, kernel, account: account2, manager, call: call2, registeredPermissions, blockInfo } = params;
   for (const permission of registeredPermissions) {
     try {
+      const configEpoch = await readRegistrationEpoch(publicClient, kernel, account2, permission);
+      const ctx = buildPermissionContext({ account: account2, manager, call: call2, blockInfo, configEpoch });
       const accepted = await publicClient.readContract({
         address: permission,
         abi: IPERMISSION_ABI,
@@ -40653,7 +40689,10 @@ async function probePassThrough(pc, permission, account2) {
           selector: PROBE_SELECTOR,
           value: 0n,
           blockTimestamp: 0n,
-          blockNumber: 0n
+          blockNumber: 0n,
+          // Pass-through probes only run on conjunctive kernels, which predate
+          // registrationEpoch — there is no live epoch to read, so probe with 0.
+          configEpoch: 0n
         }
       ]
     });
@@ -40949,6 +40988,10 @@ struct Context {
     uint256 value;          // native ETH forwarded (wei)
     uint256 blockTimestamp; // block.timestamp at dispatch
     uint256 blockNumber;    // block.number at dispatch
+    uint256 configEpoch;    // kernel registrationEpoch(account, permission) at dispatch;
+                            // configurable permissions fail closed on a mismatch with the
+                            // epoch stamped at configure() time. Custom permissions that
+                            // take no post-deploy configuration can ignore it.
 }
 
 /// @title  IPermission
@@ -40984,6 +41027,8 @@ struct BatchContext {
     bytes32 batchHash;      // keccak256(abi.encode(calls)) \u2014 stable id for the exact sequence
     uint256 blockTimestamp; // block.timestamp at dispatch
     uint256 blockNumber;    // block.number at dispatch
+    uint256 configEpoch;    // kernel registrationEpoch(account, permission) at dispatch \u2014
+                            // same fail-closed freshness check as Context.configEpoch
 }
 
 /// @title  IBatchPermission
@@ -44361,6 +44406,7 @@ async function mandateSimulate(options) {
       const [probe, codeCheck] = await Promise.all([
         probePermissionForCall({
           publicClient: pc,
+          kernel: project.contracts.kernel,
           permission,
           account: account2,
           manager,
@@ -45320,6 +45366,8 @@ Configure the chain in the SDK chain registry or set KERNEL_ADDRESS in .sail/.en
         } else {
           permission = await resolvePermissionForCall({
             publicClient,
+            kernel,
+            // narrowed: runCommand validates kernel before runTick runs
             account: accountAddr,
             manager: agentManager.address,
             call: firstCall,

package/packages/cli/dist/server.cjs

@@ -46377,6 +46377,8 @@ var init_esm = __esm({
 // ../ui/server.js
 var server_exports = {};
 __export(server_exports, {
+  isHttpUrl: () => isHttpUrl,
+  isSafeEnvValue: () => isSafeEnvValue,
   startServer: () => startServer
 });
 module.exports = __toCommonJS(server_exports);
@@ -47879,6 +47881,41 @@ function persistPassphrase(envPath, passphrase) {
   import_node_fs2.default.writeFileSync(envPath, content, { mode: 384 });
   import_node_fs2.default.chmodSync(envPath, 384);
 }
+function isSafeEnvValue(v) {
+  return typeof v === "string" && !/[\n\r]/.test(v);
+}
+function isHttpUrl(v) {
+  try {
+    const u = new URL(v);
+    return u.protocol === "http:" || u.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function serverError(res, err) {
+  console.error(err);
+  res.status(500).json({ error: "internal server error" });
+}
+function rateLimit({ windowMs, max }) {
+  const hits = /* @__PURE__ */ new Map();
+  let lastSweep = 0;
+  return (req, res, next) => {
+    const now = Date.now();
+    if (now - lastSweep > windowMs) {
+      for (const [k, v] of hits) if (now > v.resetAt) hits.delete(k);
+      lastSweep = now;
+    }
+    const ip = req.ip || req.socket?.remoteAddress || "local";
+    const rec = hits.get(ip);
+    if (!rec || now > rec.resetAt) {
+      hits.set(ip, { count: 1, resetAt: now + windowMs });
+      return next();
+    }
+    if (rec.count >= max) return res.status(429).json({ error: "too many requests" });
+    rec.count += 1;
+    next();
+  };
+}
 var CHAIN_NAMES = {
   1: "ethereum",
   8453: "base",
@@ -47983,8 +48020,27 @@ function addManagerToList(existing, current, next) {
 var OVERVIEW_TTL_MS = 1e4;
 function startServer(sailDir, { port = PORT } = {}) {
   const app = (0, import_express.default)();
+  const trustProxy = process.env.SAILOR_TRUST_PROXY;
+  if (trustProxy && trustProxy !== "false" && trustProxy !== "0") {
+    const hops = Number(trustProxy);
+    app.set("trust proxy", Number.isFinite(hops) ? hops : trustProxy === "true" ? true : trustProxy);
+  }
   app.use((0, import_cors.default)({ origin: CORS_ORIGINS }));
   app.use(import_express.default.json());
+  const rateLimitPerMin = (() => {
+    const fromEnv = Number(process.env.SAILOR_RATE_LIMIT_PER_MIN);
+    if (Number.isFinite(fromEnv) && fromEnv > 0) return fromEnv;
+    try {
+      const cfg = JSON.parse(import_node_fs2.default.readFileSync(import_node_path.default.join(sailDir, "config.json"), "utf-8"));
+      const fromCfg = Number(cfg?.rateLimitPerMin);
+      if (Number.isFinite(fromCfg) && fromCfg > 0) return fromCfg;
+    } catch {
+    }
+    return 100;
+  })();
+  const keyEndpointLimiter = rateLimit({ windowMs: 6e4, max: rateLimitPerMin });
+  app.use("/api/signer", keyEndpointLimiter);
+  app.use("/api/onboard/generate-key", keyEndpointLimiter);
   const at = (name) => import_node_path.default.join(sailDir, name);
   const syncConfigChainId = (chainId) => {
     if (chainId == null) return;
@@ -48113,7 +48169,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       overviewCacheByAccount.clear();
       res.json({ ok: true });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/account", async (req, res) => {
@@ -48156,7 +48212,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       syncConfigChainId(chainId);
       res.json({ ok: true });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.get("/api/accounts", (_req, res) => {
@@ -48195,7 +48251,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       syncConfigChainId(target.chainId);
       res.json({ ok: true, active: target });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/account/rename", (req, res) => {
@@ -48204,6 +48260,11 @@ function startServer(sailDir, { port = PORT } = {}) {
       res.status(400).json({ error: "safe and name are required" });
       return;
     }
+    const cleanName = typeof name === "string" ? name.replace(/\p{Cc}/gu, "").trim() : "";
+    if (!cleanName || cleanName.length > 100) {
+      res.status(400).json({ error: "name must be 1\u2013100 characters" });
+      return;
+    }
     try {
       const accountsPath = at("state/accounts.json");
       const accounts = JSON.parse(import_node_fs2.default.readFileSync(accountsPath, "utf-8"));
@@ -48212,12 +48273,12 @@ function startServer(sailDir, { port = PORT } = {}) {
         res.status(404).json({ error: "SMA not found" });
         return;
       }
-      accounts[idx] = { ...accounts[idx], name };
+      accounts[idx] = { ...accounts[idx], name: cleanName };
       import_node_fs2.default.writeFileSync(accountsPath, `${JSON.stringify(accounts, null, 2)}
 `);
       res.json({ ok: true });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   const readActiveSafe = () => {
@@ -48286,7 +48347,7 @@ function startServer(sailDir, { port = PORT } = {}) {
 `);
       res.json({ ok: true, event });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   const managerKeyPath = (safe) => at(`keys/manager-${safe.toLowerCase()}.json`);
@@ -48345,7 +48406,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       invalidateOverviewCache(safe);
       res.json({ ok: true, address: keyring.address, revealed });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/manager/complete", (req, res) => {
@@ -48392,7 +48453,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       invalidateOverviewCache(safe);
       res.json({ ok: true, manager });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   const isManagerKeyFile = (file) => file === "manager.json" || file.startsWith("manager-") && file.endsWith(".json") || file.startsWith("managers/") && file.endsWith(".json");
@@ -48445,7 +48506,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       }
       res.json({ signers: [...byAddress.values()] });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/signer/activate", (req, res) => {
@@ -48476,7 +48537,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       invalidateOverviewCache(safe);
       res.json({ ok: true, address: getAddress(address), file: match });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.get("/api/mandate", (_req, res) => {
@@ -48575,7 +48636,7 @@ function startServer(sailDir, { port = PORT } = {}) {
         }
       }
     } catch (err) {
-      res.status(500).json({ error: `On-chain registration failed: ${err?.message ?? String(err)}` });
+      res.status(500).json({ error: `On-chain registration failed: ${(err?.message ?? String(err)).split("\n")[0]}` });
       return;
     }
     const mandate = {
@@ -48606,7 +48667,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       }
       res.json(mandate);
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   const readPidFile = (filePath) => {
@@ -48822,6 +48883,19 @@ function startServer(sailDir, { port = PORT } = {}) {
   });
   app.post("/api/onboard/save-config", (req, res) => {
     const { rpcUrl, sailApiKey, chainId } = req.body ?? {};
+    const cid = Number(chainId);
+    if (chainId !== void 0 && !CHAIN_RPC_ENV_KEYS[cid]) {
+      res.status(400).json({ error: "unsupported chainId" });
+      return;
+    }
+    if (rpcUrl !== void 0 && (!isSafeEnvValue(rpcUrl) || !isHttpUrl(rpcUrl))) {
+      res.status(400).json({ error: "invalid rpcUrl" });
+      return;
+    }
+    if (sailApiKey !== void 0 && !isSafeEnvValue(sailApiKey)) {
+      res.status(400).json({ error: "invalid sailApiKey" });
+      return;
+    }
     try {
       const config = (() => {
         try {
@@ -48834,20 +48908,20 @@ function startServer(sailDir, { port = PORT } = {}) {
       const envPath = at(".env.local");
       const existing = parseEnvFile(envPath);
       if (rpcUrl && chainId) {
-        existing[`RPC_URL_${chainId}`] = rpcUrl;
-        if (Number(chainId) === Number(activeChainId)) existing.RPC_URL = rpcUrl;
+        existing[`RPC_URL_${cid}`] = rpcUrl;
+        if (cid === Number(activeChainId)) existing.RPC_URL = rpcUrl;
       } else if (rpcUrl) {
         existing.RPC_URL = rpcUrl;
       }
       if (sailApiKey) existing.SAIL_API_KEY = sailApiKey;
-      if (chainId) existing.CHAIN_ID = String(chainId);
+      if (chainId) existing.CHAIN_ID = String(cid);
       const content = Object.entries(existing).map(([k, v]) => `${k}=${v}`).join("\n") + "\n";
       import_node_fs2.default.mkdirSync(sailDir, { recursive: true });
       import_node_fs2.default.writeFileSync(envPath, content, { mode: 384 });
       import_node_fs2.default.chmodSync(envPath, 384);
       res.json({ ok: true });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/onboard/generate-key", async (req, res) => {
@@ -48876,7 +48950,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       persistPassphrase(at(".env.local"), passphrase);
       res.json({ address: keyring.address, existed: false });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/onboard/build-create-tx", (req, res) => {
@@ -48928,7 +49002,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       });
       res.json({ to: kernel, data, chainId, saltNonce: saltNonce.toString() });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/onboard/build-register-path", (req, res) => {
@@ -48982,7 +49056,7 @@ function startServer(sailDir, { port = PORT } = {}) {
         saltNonce: saltNonce.toString()
       });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.post("/api/onboard/complete", async (req, res) => {
@@ -49050,7 +49124,7 @@ function startServer(sailDir, { port = PORT } = {}) {
       syncConfigChainId(chainId);
       res.json({ ok: true, account: record });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.get("/api/wizard-state", (_req, res) => {
@@ -49062,13 +49136,18 @@ function startServer(sailDir, { port = PORT } = {}) {
     }
   });
   app.post("/api/wizard-state", (req, res) => {
+    const body = req.body;
+    if (body === null || typeof body !== "object" || Array.isArray(body)) {
+      res.status(400).json({ error: "wizard state must be an object" });
+      return;
+    }
     try {
       import_node_fs2.default.mkdirSync(sailDir, { recursive: true });
-      import_node_fs2.default.writeFileSync(at(".wizard-state.json"), `${JSON.stringify(req.body, null, 2)}
+      import_node_fs2.default.writeFileSync(at(".wizard-state.json"), `${JSON.stringify(body, null, 2)}
 `);
       res.json({ ok: true });
     } catch (err) {
-      res.status(500).json({ error: String(err) });
+      serverError(res, err);
     }
   });
   app.get("/api/positions", (_req, res) => {
@@ -49348,7 +49427,8 @@ function startServer(sailDir, { port = PORT } = {}) {
       res.sendFile(import_node_path.default.join(distDir, "index.html"));
     });
   }
-  const httpServer = app.listen(port, () => {
+  const bindHost = process.env.SAILOR_HOST ?? "127.0.0.1";
+  const httpServer = app.listen(port, bindHost, () => {
     console.log(`Sailor UI running at http://localhost:${port} (reading ${sailDir})`);
   });
   const wss = new import_websocket_server.default({ noServer: true });
@@ -49427,6 +49507,8 @@ if (isMain) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  isHttpUrl,
+  isSafeEnvValue,
   startServer
 });
 /*! Bundled license information:

package/packages/sdk/dist/intelligence.d.ts

@@ -5,7 +5,7 @@
  * Do not edit manually — run `pnpm build` to regenerate.
  *
  * Spec version : 1.2.1
- * Generated at : 2026-07-02T13:00:44.579Z
+ * Generated at : 2026-07-02T16:26:37.498Z
  */
 export declare const SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 export declare const SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";

package/packages/sdk/dist/intelligence.js

@@ -5,7 +5,7 @@
  * Do not edit manually — run `pnpm build` to regenerate.
  *
  * Spec version : 1.2.1
- * Generated at : 2026-07-02T13:00:44.579Z
+ * Generated at : 2026-07-02T16:26:37.498Z
  */
 export const SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 export const SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";

package/packages/ui/dist/assets/{add-QIu9SGBU.js → add-DoHGZfJI.js}

@@ -1,4 +1,4 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const d=o`<svg
+import{F as o}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const e=o`<svg
   width="14"
   height="14"
   viewBox="0 0 14 14"
@@ -12,4 +12,4 @@ import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./even
     d="M7.0023 0.875C7.48571 0.875 7.8776 1.26675 7.8776 1.75V6.125H12.2541C12.7375 6.125 13.1294 6.51675 13.1294 7C13.1294 7.48325 12.7375 7.875 12.2541 7.875H7.8776V12.25C7.8776 12.7332 7.48571 13.125 7.0023 13.125C6.51889 13.125 6.12701 12.7332 6.12701 12.25V7.875H1.75054C1.26713 7.875 0.875244 7.48325 0.875244 7C0.875244 6.51675 1.26713 6.125 1.75054 6.125H6.12701V1.75C6.12701 1.26675 6.51889 0.875 7.0023 0.875Z"
     fill="#667dff"
   /></svg
->`;export{d as addSvg};
+>`;export{e as addSvg};

package/packages/ui/dist/assets/{all-wallets-2auxp9E5.js → all-wallets-CUKVFyT3.js}

@@ -1,6 +1,6 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const p=o`<svg fill="none" viewBox="0 0 24 24">
+import{F as o}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const r=o`<svg fill="none" viewBox="0 0 24 24">
   <path
     style="fill: var(--wui-color-accent-100);"
     d="M10.2 6.6a3.6 3.6 0 1 1-7.2 0 3.6 3.6 0 0 1 7.2 0ZM21 6.6a3.6 3.6 0 1 1-7.2 0 3.6 3.6 0 0 1 7.2 0ZM10.2 17.4a3.6 3.6 0 1 1-7.2 0 3.6 3.6 0 0 1 7.2 0ZM21 17.4a3.6 3.6 0 1 1-7.2 0 3.6 3.6 0 0 1 7.2 0Z"
   />
-</svg>`;export{p as allWalletsSvg};
+</svg>`;export{r as allWalletsSvg};

package/packages/ui/dist/assets/{app-store-BVtVvk-F.js → app-store-DyQ4PZOs.js}

@@ -1,4 +1,4 @@
-import{F as t}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const e=t`
+import{F as t}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const e=t`
 <svg width="36" height="36">
   <path
     d="M28.724 0H7.271A7.269 7.269 0 0 0 0 7.272v21.46A7.268 7.268 0 0 0 7.271 36H28.73A7.272 7.272 0 0 0 36 28.728V7.272A7.275 7.275 0 0 0 28.724 0Z"

package/packages/ui/dist/assets/{apple-Dq7Ppvqv.js → apple-Dc-GOiDW.js}

@@ -1,4 +1,4 @@
-import{F as i}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const h=i`<svg fill="none" viewBox="0 0 40 40">
+import{F as i}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const c=i`<svg fill="none" viewBox="0 0 40 40">
   <g clip-path="url(#a)">
     <g clip-path="url(#b)">
       <circle cx="20" cy="19.89" r="20" fill="#000" />
@@ -15,4 +15,4 @@ import{F as i}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./even
     <clipPath id="b"><path fill="#fff" d="M0 0h40v40H0z" /></clipPath>
     <clipPath id="c"><path fill="#fff" d="M8 7.89h24v24H8z" /></clipPath>
   </defs>
-</svg>`;export{h as appleSvg};
+</svg>`;export{c as appleSvg};

package/packages/ui/dist/assets/arrow-bottom-C-dI8Oh_.js

@@ -0,0 +1,8 @@
+import{F as o}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const i=o`<svg fill="none" viewBox="0 0 14 15">
+  <path
+    fill="currentColor"
+    fill-rule="evenodd"
+    d="M7 1.99a1 1 0 0 1 1 1v7.58l2.46-2.46a1 1 0 0 1 1.41 1.42L7.7 13.69a1 1 0 0 1-1.41 0L2.12 9.53A1 1 0 0 1 3.54 8.1L6 10.57V3a1 1 0 0 1 1-1Z"
+    clip-rule="evenodd"
+  />
+</svg>`;export{i as arrowBottomSvg};

package/packages/ui/dist/assets/{arrow-bottom-circle-hkf9bWhW.js → arrow-bottom-circle-BH2LebvP.js}

@@ -1,4 +1,4 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const t=o`<svg
+import{F as C}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const i=C`<svg
   fill="none"
   viewBox="0 0 21 20"
 >
@@ -8,4 +8,4 @@ import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./even
     d="M10.5 2.42908C6.31875 2.42908 2.92859 5.81989 2.92859 10.0034C2.92859 14.1869 6.31875 17.5777 10.5 17.5777C14.6813 17.5777 18.0714 14.1869 18.0714 10.0034C18.0714 5.81989 14.6813 2.42908 10.5 2.42908ZM0.928589 10.0034C0.928589 4.71596 5.21355 0.429077 10.5 0.429077C15.7865 0.429077 20.0714 4.71596 20.0714 10.0034C20.0714 15.2908 15.7865 19.5777 10.5 19.5777C5.21355 19.5777 0.928589 15.2908 0.928589 10.0034ZM10.5 5.75003C11.0523 5.75003 11.5 6.19774 11.5 6.75003L11.5 10.8343L12.7929 9.54137C13.1834 9.15085 13.8166 9.15085 14.2071 9.54137C14.5976 9.9319 14.5976 10.5651 14.2071 10.9556L11.2071 13.9556C10.8166 14.3461 10.1834 14.3461 9.79291 13.9556L6.79291 10.9556C6.40239 10.5651 6.40239 9.9319 6.79291 9.54137C7.18343 9.15085 7.8166 9.15085 8.20712 9.54137L9.50002 10.8343L9.50002 6.75003C9.50002 6.19774 9.94773 5.75003 10.5 5.75003Z"
     clip-rule="evenodd"
   /></svg
->`;export{t as arrowBottomCircleSvg};
+>`;export{i as arrowBottomCircleSvg};

package/packages/ui/dist/assets/arrow-left-CUIn5NsD.js

@@ -0,0 +1,8 @@
+import{F as o}from"./core-BLOM5s8O.js";import"./index-D8zwDy7d.js";import"./index.es-Hqwz_Ukd.js";import"./events-DQ172AOg.js";const t=o`<svg fill="none" viewBox="0 0 14 15">
+  <path
+    fill="currentColor"
+    fill-rule="evenodd"
+    d="M13 7.99a1 1 0 0 1-1 1H4.4l2.46 2.46a1 1 0 1 1-1.41 1.41L1.29 8.7a1 1 0 0 1 0-1.41L5.46 3.1a1 1 0 0 1 1.41 1.42L4.41 6.99H12a1 1 0 0 1 1 1Z"
+    clip-rule="evenodd"
+  />
+</svg>`;export{t as arrowLeftSvg};