npm - @dev.sail.money/sailor - Versions diffs - 1.3.0-225 → 1.3.0-227 - Mend

@dev.sail.money/sailor 1.3.0-225 → 1.3.0-227

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (128) hide show

package/packages/ui/dist/index.html CHANGED Viewed

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="theme-color" content="#040b16" />
     <title>Sail - Unlocking Personalized Money</title>
-    <script type="module" crossorigin src="/assets/index-CPrhuDfP.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-CKoOBsKn.css">
+    <script type="module" crossorigin src="/assets/index-D8zwDy7d.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-B07bCKJ8.css">
   </head>
   <body>
     <div id="root"></div>

package/templates/default/.agents/skills/sail-mandates/references/examples-index.md CHANGED Viewed

@@ -29,6 +29,6 @@ Permissions only bound on-chain actions: venues with off-chain order matching (P
 ## Interfaces (vendored in `examples/permissions/interfaces/`)
-- `IPermission.evaluate(bytes txData, Context ctx) → bool`; Context: `account, manager, submitter, target, selector, value, blockTimestamp, blockNumber`.
-- `IBatchPermission.evaluateBatch(Call[] calls, BatchContext ctx) → bool` + `isBatchPermission() → true`; Call: `(target, value, data)`; BatchContext: `account, manager, submitter, permission, batchHash, blockTimestamp, blockNumber`.
+- `IPermission.evaluate(bytes txData, Context ctx) → bool`; Context: `account, manager, submitter, target, selector, value, blockTimestamp, blockNumber, configEpoch`.
+- `IBatchPermission.evaluateBatch(Call[] calls, BatchContext ctx) → bool` + `isBatchPermission() → true`; Call: `(target, value, data)`; BatchContext: `account, manager, submitter, permission, batchHash, blockTimestamp, blockNumber, configEpoch`.
 - `SailCalldata.sol`: bounded slot-indexed calldata readers (`hasParams`, `asAddress`, `asUint256`, …) — use these instead of `abi.decode` to avoid wrong-offset reads.

package/templates/default/.agents/skills/sail-servers/SKILL.md CHANGED Viewed

@@ -20,6 +20,7 @@ sailor ui start --expose tailscale   # also serve it on the tailnet over HTTPS (
 - The server serves the pre-built React app (`SERVE_DIST=1`) and a local `/api` that reads `.sail/` state (`SAIL_DIR` env).
 - `ui start` does not block — no `&` needed.
 - `--expose tailscale` (optional): proxies the dashboard onto the operator's tailnet over HTTPS via `tailscale serve` (tailnet-private, never `funnel`). Requires `tailscale` installed + logged in, and Serve + HTTPS enabled for the tailnet (else the command prints the enable link). `ui stop` tears the proxy down. To allow extra browser origins, set `SAILOR_CORS_ORIGINS` (comma-separated; the local origin is always allowed).
+- Binds `127.0.0.1` by default (local only). To expose without `--expose tailscale` — e.g. behind a reverse proxy on a domain — set `SAILOR_HOST=0.0.0.0`. The `/api` key-management endpoints are **unauthenticated**, so only do this behind your own auth (reverse-proxy basic-auth or a private tailnet), and throttle them with `SAILOR_RATE_LIMIT_PER_MIN` (default 100; or `rateLimitPerMin` in `.sail/config.json`).
 ## Signing station — `sailor station`

package/templates/default/.env.example CHANGED Viewed

@@ -18,3 +18,12 @@ CHAIN_ID=8453
 # Optional: non-interactive passphrase (CI, GitHub Actions, launchd, systemd)
 # SAIL_PASSPHRASE=change-me-to-a-strong-passphrase
+# Advanced — exposing the dashboard/API beyond localhost.
+# The UI server binds 127.0.0.1 (local only) by default. Its key-management
+# endpoints are UNAUTHENTICATED, so only expose them behind your own auth
+# (a reverse proxy with basic-auth, or a private tailnet — never the open internet).
+# SAILOR_HOST=0.0.0.0                                   # bind all interfaces (LAN / behind a domain)
+# SAILOR_TRUST_PROXY=1                                  # hop count (or IP allowlist) when behind a reverse proxy, so the rate limit keys on the real client IP (else it's a single global bucket)
+# SAILOR_CORS_ORIGINS=https://sail.example.ts.net       # extra allowed browser origins (comma-separated)
+# SAILOR_RATE_LIMIT_PER_MIN=100                         # throttle /api/signer + /api/onboard/generate-key (default 100; or set "rateLimitPerMin" in .sail/config.json)

package/templates/default/test/BoundedCallPermission.t.sol CHANGED Viewed

@@ -39,7 +39,8 @@ contract BoundedCallPermissionTest {
             selector: selector,
             value: value,
             blockTimestamp: block.timestamp,
-            blockNumber: block.number
+            blockNumber: block.number,
+            configEpoch: 0 // BoundedCallPermission takes no post-deploy config; value unused
         });
     }

package/packages/ui/dist/assets/arrow-bottom-DpT3R4Rr.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const p=o`<svg fill="none" viewBox="0 0 14 15">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M7 1.99a1 1 0 0 1 1 1v7.58l2.46-2.46a1 1 0 0 1 1.41 1.42L7.7 13.69a1 1 0 0 1-1.41 0L2.12 9.53A1 1 0 0 1 3.54 8.1L6 10.57V3a1 1 0 0 1 1-1Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{p as arrowBottomSvg};

package/packages/ui/dist/assets/arrow-left-3PhiE4SD.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const a=o`<svg fill="none" viewBox="0 0 14 15">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M13 7.99a1 1 0 0 1-1 1H4.4l2.46 2.46a1 1 0 1 1-1.41 1.41L1.29 8.7a1 1 0 0 1 0-1.41L5.46 3.1a1 1 0 0 1 1.41 1.42L4.41 6.99H12a1 1 0 0 1 1 1Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{a as arrowLeftSvg};

package/packages/ui/dist/assets/arrow-right-DUIXJHib.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const p=o`<svg fill="none" viewBox="0 0 14 15">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M1 7.99a1 1 0 0 1 1-1h7.58L7.12 4.53A1 1 0 1 1 8.54 3.1l4.16 4.17a1 1 0 0 1 0 1.41l-4.16 4.17a1 1 0 1 1-1.42-1.41l2.46-2.46H2a1 1 0 0 1-1-1Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{p as arrowRightSvg};

package/packages/ui/dist/assets/arrow-top-Cf--02la.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const t=o`<svg fill="none" viewBox="0 0 14 15">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M7 13.99a1 1 0 0 1-1-1V5.4L3.54 7.86a1 1 0 0 1-1.42-1.41L6.3 2.28a1 1 0 0 1 1.41 0l4.17 4.17a1 1 0 1 1-1.41 1.41L8 5.4v7.59a1 1 0 0 1-1 1Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{t as arrowTopSvg};

package/packages/ui/dist/assets/ccip-BS_rjbk9.js DELETED Viewed

@@ -1 +0,0 @@

- import{B as u,cY as p,fP as k,c0 as x,de as M,dl as S,dk as $,bK as A,bR as T,cd as C,cJ as w,dc as E,a0 as b,dg as G}from"./index-CPrhuDfP.js";class D extends u{constructor({callbackSelector:a,cause:t,data:f,extraData:e,sender:d,urls:i}){var o;super(t.shortMessage||"An error occurred while fetching for an offchain result.",{cause:t,metaMessages:[...t.metaMessages||[],(o=t.metaMessages)!=null&&o.length?"":[],"Offchain Gateway Call:",i&&[" Gateway URL(s):",...i.map(n=>` ${p(n)}`)],` Sender: ${d}`,` Data: ${f}`,` Callback selector: ${a}`,` Extra data: ${e}`].flat(),name:"OffchainLookupError"})}}class P extends u{constructor({result:a,url:t}){super("Offchain gateway response is malformed. Response data must be a hex value.",{metaMessages:[`Gateway URL: ${p(t)}`,`Response: ${k(a)}`],name:"OffchainLookupResponseMalformedError"})}}class B extends u{constructor({sender:a,to:t}){super("Reverted sender address does not match target contract address (`to`).",{metaMessages:[`Contract address: ${t}`,`OffchainLookup sender address: ${a}`],name:"OffchainLookupSenderMismatchError"})}}const H="0x556f1830",U={name:"OffchainLookup",type:"error",inputs:[{name:"sender",type:"address"},{name:"urls",type:"string[]"},{name:"callData",type:"bytes"},{name:"callbackFunction",type:"bytes4"},{name:"extraData",type:"bytes"}]};async function J(c,{blockNumber:a,blockTag:t,data:f,requestOptions:e,to:d}){var s;const{args:i}=x({data:f,abi:[U]}),[o,n,l,g,y]=i,{ccipRead:h}=c,r=h&&typeof(h==null?void 0:h.request)=="function"?h.request:j;try{if(!M(d,o))throw new B({sender:o,to:d});const m=n.includes(S)?await $({data:l,ccipRequest:R=>r({...R,requestOptions:e})}):await r({data:l,requestOptions:e,sender:o,urls:n}),{data:L}=await A(c,{blockNumber:a,blockTag:t,data:T([g,C([{type:"bytes"},{type:"bytes"}],[m,y])]),requestOptions:e,to:d});return L}catch(m){throw(s=e==null?void 0:e.signal)!=null&&s.aborted?w(e.signal):E(m)?m:new D({callbackSelector:g,cause:m,data:f,extraData:y,sender:o,urls:n})}}async function j({data:c,requestOptions:a,sender:t,urls:f}){var d,i,o;let e=new Error("An unknown error occurred.");for(let n=0;n<f.length;n++){if((d=a==null?void 0:a.signal)!=null&&d.aborted)throw w(a.signal);const l=f[n],g=l.includes("{data}")?"GET":"POST",y=g==="POST"?{data:c,sender:t}:void 0,h=g==="POST"?{"Content-Type":"application/json"}:{};try{const r=await fetch(l.replace("{sender}",t.toLowerCase()).replace("{data}",c),{body:JSON.stringify(y),headers:h,method:g,...a!=null&&a.signal?{signal:a.signal}:{}});let s;if((i=r.headers.get("Content-Type"))!=null&&i.startsWith("application/json")?s=(await r.json()).data:s=await r.text(),!r.ok){e=new b({body:y,details:s!=null&&s.error?k(s.error):r.statusText,headers:r.headers,status:r.status,url:l});continue}if(!G(s)){e=new P({result:s,url:l});continue}return s}catch(r){if((o=a==null?void 0:a.signal)!=null&&o.aborted)throw w(a.signal);if(E(r))throw r;e=new b({body:y,details:r.message,url:l})}}throw e}export{j as ccipRequest,J as offchainLookup,U as offchainLookupAbiItem,H as offchainLookupSignature};

package/packages/ui/dist/assets/chevron-bottom-C8mqtkD4.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const p=o`<svg fill="none" viewBox="0 0 16 16">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M1.46 4.96a1 1 0 0 1 1.41 0L8 10.09l5.13-5.13a1 1 0 1 1 1.41 1.41l-5.83 5.84a1 1 0 0 1-1.42 0L1.46 6.37a1 1 0 0 1 0-1.41Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{p as chevronBottomSvg};

package/packages/ui/dist/assets/chevron-left-Dxj-vVDJ.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const p=o`<svg fill="none" viewBox="0 0 16 16">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M11.04 1.46a1 1 0 0 1 0 1.41L5.91 8l5.13 5.13a1 1 0 1 1-1.41 1.41L3.79 8.71a1 1 0 0 1 0-1.42l5.84-5.83a1 1 0 0 1 1.41 0Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{p as chevronLeftSvg};

package/packages/ui/dist/assets/chevron-right-BoIrOTtL.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const p=o`<svg fill="none" viewBox="0 0 16 16">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M4.96 14.54a1 1 0 0 1 0-1.41L10.09 8 4.96 2.87a1 1 0 0 1 1.41-1.41l5.84 5.83a1 1 0 0 1 0 1.42l-5.84 5.83a1 1 0 0 1-1.41 0Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{p as chevronRightSvg};

package/packages/ui/dist/assets/chevron-top-BlgziB_P.js DELETED Viewed

@@ -1,8 +0,0 @@
-import{F as o}from"./core-BMNH6XFj.js";import"./index-CPrhuDfP.js";import"./events-Cdt6abbf.js";import"./index.es-DImsg59a.js";import"./fallback-BSMYROva.js";const t=o`<svg fill="none" viewBox="0 0 16 16">
-  <path
-    fill="currentColor"
-    fill-rule="evenodd"
-    d="M14.54 11.04a1 1 0 0 1-1.41 0L8 5.92l-5.13 5.12a1 1 0 1 1-1.41-1.41l5.83-5.84a1 1 0 0 1 1.42 0l5.83 5.84a1 1 0 0 1 0 1.41Z"
-    clip-rule="evenodd"
-  />
-</svg>`;export{t as chevronTopSvg};