@dev.sail.money/sailor 1.3.0-226 → 1.3.0-228

package/examples/lifi-permissions/LifiDiamondSwapPermissionCloneable.sol

@@ -1,97 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity 0.8.26;
-
-import {IPermission, Context} from "../../.sail/contracts/interfaces/IPermission.sol";
-import {CloneInitializable} from "../../.sail/contracts/templates/base/CloneInitializable.sol";
-
-/// @title  LifiDiamondSwapPermissionCloneable
-/// @notice EIP-1167 clone-template version of LifiDiamondSwapPermission. The logic
-///         contract is deployed once and registered in the SDK's standaloneTemplates;
-///         each account gets its own clone via PermissionFactory.deployAndAttach,
-///         configured through initialize() (NOT the constructor).
-///
-///         Restricts manager-initiated swaps to the official LiFi Diamond on Base:
-///          - target must be the LiFi Diamond,
-///          - selector must be allowlisted,
-///          - receiver embedded in the calldata must equal ctx.account (the SMA),
-///          - the minAmount field must not exceed the configured cap.
-///         Passes through any call whose target is not the diamond (conjunctive model).
-///
-///         Calldata layout (validated against live Base quotes):
-///          selector(4) + word0(32) + word1(32) + word2(32) + receiver(32) + minAmount(32)
-///          → receiver at offset 100, minAmount at offset 132.
-contract LifiDiamondSwapPermissionCloneable is IPermission, CloneInitializable {
-    // Official LiFi Diamond on Base Mainnet.
-    address public constant LIFI_DIAMOND = 0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE;
-
-    // Storage starts after CloneInitializable's `_initialized` bool (slot 0). A
-    // mapping occupies its own slot pointer and does not pack with the bool.
-    mapping(bytes4 selector => bool) public isAllowedSelector;
-    uint256 public maxMinAmountPerTx;
-    address public permissionSigner;
-
-    error NotPermissionSigner();
-    error ZeroAddress();
-
-    modifier onlyPermissionSigner() {
-        if (msg.sender != permissionSigner) revert NotPermissionSigner();
-        _;
-    }
-
-    /// @dev Lock the logic contract; only clones (fresh storage) can be initialized.
-    constructor() {
-        _disableInitializers();
-    }
-
-    /// @notice One-time per-clone configuration.
-    /// @param allowedSelectors   LiFi Diamond selectors to allowlist on init.
-    /// @param _maxMinAmountPerTx Cap on the minAmount field (type(uint256).max = uncapped).
-    /// @param _permissionSigner  Owner wallet; sole authority for post-init updates.
-    function initialize(
-        bytes4[] memory allowedSelectors,
-        uint256 _maxMinAmountPerTx,
-        address _permissionSigner
-    ) external initializer {
-        if (_permissionSigner == address(0)) revert ZeroAddress();
-        maxMinAmountPerTx = _maxMinAmountPerTx;
-        permissionSigner = _permissionSigner;
-        for (uint256 i; i < allowedSelectors.length; i++) {
-            isAllowedSelector[allowedSelectors[i]] = true;
-        }
-    }
-
-    function setMaxMinAmountPerTx(uint256 newMax) external onlyPermissionSigner {
-        maxMinAmountPerTx = newMax;
-    }
-
-    /// @notice Add a LiFi selector. Only after verifying its calldata places
-    ///         `receiver` at offset 100 and `minAmount` at offset 132.
-    function addSelector(bytes4 selector) external onlyPermissionSigner {
-        isAllowedSelector[selector] = true;
-    }
-
-    function removeSelector(bytes4 selector) external onlyPermissionSigner {
-        isAllowedSelector[selector] = false;
-    }
-
-    uint256 private constant RECEIVER_OFFSET = 100;
-    uint256 private constant MIN_DATA_LEN = 164;
-
-    function evaluate(bytes calldata txData, Context calldata ctx) external view returns (bool) {
-        // Pass through calls outside this permission's domain (conjunctive model).
-        if (ctx.target != LIFI_DIAMOND) return true;
-        if (!isAllowedSelector[ctx.selector]) return false;
-        if (txData.length < MIN_DATA_LEN) return false;
-
-        address receiver = abi.decode(txData[RECEIVER_OFFSET:RECEIVER_OFFSET + 32], (address));
-        uint256 minAmount = abi.decode(txData[RECEIVER_OFFSET + 32:RECEIVER_OFFSET + 64], (uint256));
-
-        if (receiver != ctx.account) return false;
-        if (minAmount > maxMinAmountPerTx) return false;
-        return true;
-    }
-
-    function discriminator() external pure returns (bytes32) {
-        return keccak256("LifiDiamondSwapPermissionCloneable.v1");
-    }
-}

package/examples/lifi-permissions/README.md

@@ -1,53 +0,0 @@
-# LiFi clone-permission templates
-
-Canonical source (for reference) of the EIP-1167 **clone** permission templates
-used for LiFi-based swaps/DCA. The logic contracts are deployed once per chain and
-registered in the SDK deployment registry
-(`packages/sdk/src/deployments.ts` → `standaloneTemplates` / `cloneTemplates`).
-Each account gets its own clone via `PermissionFactory.deployAndAttach`, configured
-through `initialize()` (never the constructor).
-
-These follow the `CloneInitializable` pattern: the constructor calls
-`_disableInitializers()` to permanently lock the logic contract, and a one-time
-`initialize()` (guarded by the `initializer` modifier) configures each clone.
-
-> The `import` paths reference `../../.sail/contracts/{interfaces,templates/base}`
-> from the Foundry project they were built in
-> (`tests/base-mainnet-agent-01/`). This folder is **reference source** — sailor has
-> no Foundry build. Build/deploy happens in that project via
-> `scripts/deploy-clone-templates.ts`.
-
-> **Note:** The kernels bundled in `@sail.money/sailor/sdk` (Base, Base Sepolia, Arbitrum, Unichain) now all run the **selective** dispatch model — verified on-chain against each kernel's `DISPATCH_TYPEHASH`. These templates were written for the older conjunctive model and include pass-through logic (`return true` for calls outside their domain) that is not required on selective kernels. Review before deploying against a selective kernel; the pass-through logic is harmless but unnecessary.
-
-## Contracts
-
-### LifiDiamondSwapPermissionCloneable → `boundedLiFi`
-Restricts manager swaps to the official LiFi Diamond:
-target == diamond, selector allowlisted, embedded receiver == `ctx.account`,
-`minAmount <= maxMinAmountPerTx`. Passes through any call whose target is not the
-diamond (conjunctive-kernel rule).
-
-`initialize(bytes4[] allowedSelectors, uint256 maxMinAmountPerTx, address permissionSigner)`
-
-### LifiBoundedApprovePermissionCloneable → `boundedApprove`
-Approve only the LiFi Diamond, only on tokens with a configured cap, up to that
-cap. **Per-token caps** (`mapping(token => cap)`) because token value/decimals
-differ (1 DAI = 1e18 vs 1 USDC = 1e6). Passes through non-approve calls.
-
-`initialize(address[] tokens, uint256[] caps, address permissionSigner)`
-
-## Deployed logic addresses
-
-| Template | Chain | Address |
-|---|---|---|
-| boundedLiFi | Base mainnet (8453) | `0xF1abcF774250fD1A8147B56DA07Bf9021064650A` |
-| boundedApprove | Base mainnet (8453) | `0x9c0b86daf9e75d759a5D165aD7366e52b3353fD8` |
-
-Both verified `initialized() == true` (logic locked) post-deploy.
-
-## Conjunctive-kernel note
-
-Both Base kernels use the **conjunctive** dispatch model: every registered
-permission is evaluated and ALL must return true. So a permission MUST pass through
-calls outside its own domain (return `true`), or it bricks unrelated dispatches.
-Both templates above do this.

package/scripts/check-docs.mjs

@@ -1,309 +0,0 @@
-#!/usr/bin/env node
-/**
- * Doc-drift gate.
- *
- * The agent-facing docs (CLAUDE.md, AGENTS.md, AGENT_PLAYBOOK.md, the scaffolded
- * template, package READMEs) tell an LLM agent which `sailor` commands and which
- * `client.<ns>.<method>(...)` SDK calls to use. If a doc names a command or method
- * that no longer exists, the agent confidently does the wrong thing. This script
- * is the regression net: it derives the *real* surface from source and fails if a
- * doc references something that isn't there.
- *
- *   - CLI commands  ← parsed from packages/cli/src/index.ts (commander tree)
- *   - SDK methods   ← parsed from packages/sdk/src/client.ts (namespace classes)
- *
- * Only `sailor …` is validated, never the SailFramework `sail …` binary that some
- * docs reference. Only references inside `inline code` or ```fenced``` blocks are
- * checked, so prose ("the sailor CLI") never trips it.
- *
- * Run: `node scripts/check-docs.mjs` (or `pnpm docs:check`). Exit 1 on any miss.
- */
-
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { dirname, join, relative } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
-const rel = (p) => relative(ROOT, p);
-
-// ── 1. Derive the real CLI command surface ──────────────────────────────────
-
-/**
- * Parse the commander tree from index.ts into:
- *   leaves  — Set of full top-level invocations ("init", "doctor", "dispatch preview")
- *   groups  — Map<groupName, Set<subcommand>>  (e.g. "mandate" → {prepare, sign, …})
- */
-function parseCliSurface() {
-  const src = readFileSync(join(ROOT, "packages/cli/src/index.ts"), "utf-8");
-  const leaves = new Set();
-  const groups = new Map();
-  const varToGroup = new Map(); // commander variable name → group command name
-
-  // `const ui = program.command("ui")` — a group declared on a variable.
-  for (const m of src.matchAll(/const\s+(\w+)\s*=\s*program\s*\.command\(\s*"([^"]+)"/g)) {
-    const groupName = m[2].split(/\s+/)[0];
-    varToGroup.set(m[1], groupName);
-    if (!groups.has(groupName)) groups.set(groupName, new Set());
-  }
-
-  // `program.command("init [dir]")` — a top-level leaf (not assigned to a var).
-  for (const m of src.matchAll(/program\s*\.command\(\s*"([^"]+)"/g)) {
-    const name = m[1].split(/\s+/)[0];
-    // Multi-word leaf names (e.g. the "dispatch preview" stub) keep their full form too.
-    const full = m[1]
-      .replace(/\s*\[.*$/, "")
-      .replace(/\s*<.*$/, "")
-      .trim();
-    if (!groups.has(name)) {
-      leaves.add(name);
-      if (full.includes(" ")) leaves.add(full);
-    }
-  }
-
-  // `stub("setup", …)` / `stub("dispatch preview", …)` — registered top-level commands.
-  for (const m of src.matchAll(/\bstub\(\s*"([^"]+)"/g)) {
-    leaves.add(m[1]);
-    leaves.add(m[1].split(/\s+/)[0]);
-  }
-
-  // `ui.command("start")` / `mandate.command("prepare")` — subcommands of a group.
-  for (const m of src.matchAll(/(\w+)\s*\.command\(\s*"([^"]+)"/g)) {
-    const groupName = varToGroup.get(m[1]);
-    if (!groupName) continue; // not a known group variable (e.g. program.command handled above)
-    const sub = m[2].split(/\s+/)[0];
-    groups.get(groupName).add(sub);
-  }
-
-  return { leaves, groups };
-}
-
-// ── 2. Derive the real SDK surface ───────────────────────────────────────────
-
-/**
- * Parse client.ts into:
- *   namespaces  — Map<propertyName, Set<methodName>>  (account → {create, get, …})
- *   clientMethods — Set of direct SailorClient methods (capabilities, withSigner, …)
- */
-function parseSdkSurface() {
-  const src = readFileSync(join(ROOT, "packages/sdk/src/client.ts"), "utf-8");
-  const lines = src.split("\n");
-
-  // Map namespace *class* → set of method names, by slicing each class body.
-  const classMethods = new Map();
-  let current = null;
-  let depth = 0;
-  const reserved = new Set([
-    "if",
-    "for",
-    "while",
-    "switch",
-    "catch",
-    "return",
-    "super",
-    "constructor",
-    "function",
-    "await",
-    "typeof",
-    "new",
-  ]);
-  for (const line of lines) {
-    const classMatch = line.match(/^\s*(?:export\s+)?(?:abstract\s+)?class\s+(\w+)/);
-    if (classMatch) {
-      current = classMatch[1];
-      classMethods.set(current, new Set());
-      depth = 0;
-    }
-    if (current) {
-      // Method declarations live at class-body depth 1.
-      const methodMatch = line.match(
-        /^\s{2}(?:public\s+|private\s+|protected\s+)?(?:async\s+)?(?:get\s+)?(\w+)\s*[(<]/,
-      );
-      if (methodMatch && !reserved.has(methodMatch[1])) {
-        classMethods.get(current).add(methodMatch[1]);
-      }
-      depth += (line.match(/{/g)?.length ?? 0) - (line.match(/}/g)?.length ?? 0);
-      if (depth <= 0 && line.includes("}")) current = null;
-    }
-  }
-
-  // Map runtime property name → class: `this.account = new AccountNamespace(`
-  const namespaces = new Map();
-  for (const m of src.matchAll(/this\.(\w+)\s*=\s*new\s+(\w+)\s*\(/g)) {
-    const [, prop, cls] = m;
-    if (classMethods.has(cls)) namespaces.set(prop, classMethods.get(cls));
-  }
-  // `this.dispatch = dispatch;` — assigned from a local built earlier in the ctor.
-  for (const m of src.matchAll(/this\.(\w+)\s*=\s*(\w+);/g)) {
-    const [, prop, localVar] = m;
-    if (namespaces.has(prop)) continue;
-    // Resolve the local: `const dispatch = new DispatchNamespace(`
-    const localDecl = new RegExp(`(?:const|let)\\s+${localVar}\\s*=\\s*new\\s+(\\w+)\\s*\\(`);
-    const lm = src.match(localDecl);
-    if (lm && classMethods.has(lm[1])) namespaces.set(prop, classMethods.get(lm[1]));
-  }
-
-  // Direct methods on the SailorClient class itself.
-  const clientMethods = classMethods.get("SailorClient") ?? new Set();
-
-  return { namespaces, clientMethods };
-}
-
-// ── 3. Collect doc files + extract code references ───────────────────────────
-
-const DOC_GLOBS = [
-  "CLAUDE.md",
-  "AGENTS.md",
-  "AGENT_PLAYBOOK.md",
-  "README.md",
-  "docs",
-  "templates",
-  "packages/cli/README.md",
-  "packages/sdk/README.md",
-];
-
-function collectDocs() {
-  const files = [];
-  const walk = (p) => {
-    const st = statSync(p, { throwIfNoEntry: false });
-    if (!st) return;
-    if (st.isDirectory()) {
-      for (const e of readdirSync(p)) {
-        if (e === "node_modules" || e === "dist" || e.startsWith(".git")) continue;
-        walk(join(p, e));
-      }
-    } else if (p.endsWith(".md")) {
-      files.push(p);
-    }
-  };
-  for (const g of DOC_GLOBS) walk(join(ROOT, g));
-  return [...new Set(files)];
-}
-
-/** Pull the text of every `inline` and ```fenced``` code region from markdown. */
-function codeRegions(md) {
-  const regions = [];
-  // Fenced blocks first, then strip them so inline matching doesn't double-count.
-  const rest = md.replace(/```[\s\S]*?```/g, (block) => {
-    regions.push(block.replace(/```/g, ""));
-    return "\n";
-  });
-  for (const m of rest.matchAll(/`([^`\n]+)`/g)) regions.push(m[1]);
-  return regions;
-}
-
-// ── 4. Skills consistency ─────────────────────────────────────────────────────
-//
-// The scaffolded template ships agent skills under .agents/skills/. AGENTS.md is
-// the routing layer: it must point at every skill that exists, and every skill it
-// points at must exist with valid frontmatter — otherwise an agent either never
-// discovers a workflow or follows a dangling pointer.
-
-function checkSkills(errors) {
-  const skillsRoot = join(ROOT, "templates/default/.agents/skills");
-  const agentsPath = join(ROOT, "templates/default/AGENTS.md");
-  if (!existsSync(skillsRoot)) {
-    errors.push("templates/default/.agents/skills: directory missing");
-    return;
-  }
-  const agentsMd = readFileSync(agentsPath, "utf-8");
-  const dirs = readdirSync(skillsRoot).filter((d) =>
-    statSync(join(skillsRoot, d)).isDirectory(),
-  );
-  if (dirs.length === 0) errors.push("templates/default/.agents/skills: no skills found");
-
-  for (const d of dirs) {
-    const skillFile = join(skillsRoot, d, "SKILL.md");
-    if (!existsSync(skillFile)) {
-      errors.push(`templates/default/.agents/skills/${d}: missing SKILL.md`);
-      continue;
-    }
-    const fm = readFileSync(skillFile, "utf-8").match(/^---\r?\n([\s\S]*?)\r?\n---/);
-    if (!fm) {
-      errors.push(`${rel(skillFile)}: missing YAML frontmatter`);
-      continue;
-    }
-    const name = fm[1].match(/^name:\s*(\S+)\s*$/m)?.[1];
-    const description = fm[1].match(/^description:\s*(.+)$/m)?.[1]?.trim();
-    if (name !== d) errors.push(`${rel(skillFile)}: frontmatter name "${name}" ≠ directory "${d}"`);
-    if (!description) errors.push(`${rel(skillFile)}: frontmatter description missing or empty`);
-    if (!agentsMd.includes(`.agents/skills/${d}/SKILL.md`)) {
-      errors.push(`templates/default/AGENTS.md: routing table does not reference .agents/skills/${d}/SKILL.md`);
-    }
-  }
-
-  for (const m of agentsMd.matchAll(/\.agents\/skills\/([\w-]+)\/SKILL\.md/g)) {
-    if (!dirs.includes(m[1])) {
-      errors.push(`templates/default/AGENTS.md: references .agents/skills/${m[1]}/SKILL.md which does not exist`);
-    }
-  }
-}
-
-// ── 5. Validate ──────────────────────────────────────────────────────────────
-
-function main() {
-  const cli = parseCliSurface();
-  const sdk = parseSdkSurface();
-  const docs = collectDocs();
-  const errors = [];
-
-  for (const file of docs) {
-    const md = readFileSync(file, "utf-8");
-    for (const code of codeRegions(md)) {
-      for (const lineRaw of code.split("\n")) {
-        const line = lineRaw.trim();
-
-        // ── CLI: `sailor <word1> [<word2>]` ──────────────────────────────────
-        for (const m of line.matchAll(/\bsailor\s+([a-z][\w-]*)(?:\s+([a-z][\w-]*))?/g)) {
-          const [, w1, w2] = m;
-          const two = w2 ? `${w1} ${w2}` : null;
-          if (cli.leaves.has(w1) || (two && cli.leaves.has(two))) continue; // top-level leaf
-          if (cli.groups.has(w1)) {
-            // Group: if a subcommand word follows (and isn't a flag), it must exist.
-            if (!w2 || w2.startsWith("-")) continue; // bare group invocation, or a flag
-            if (cli.groups.get(w1).has(w2)) continue;
-            errors.push(
-              `${rel(file)}: \`sailor ${w1} ${w2}\` — "${w2}" is not a subcommand of "${w1}" (have: ${[...cli.groups.get(w1)].join(", ")})`,
-            );
-            continue;
-          }
-          errors.push(`${rel(file)}: \`sailor ${w1}\` — unknown command`);
-        }
-
-        // ── SDK: `client.<ns>[.<method>]` ────────────────────────────────────
-        for (const m of line.matchAll(/\bclient\.(\w+)(?:\.(\w+))?/g)) {
-          const [, ns, method] = m;
-          if (sdk.namespaces.has(ns)) {
-            if (!method) continue;
-            if (sdk.namespaces.get(ns).has(method)) continue;
-            errors.push(
-              `${rel(file)}: \`client.${ns}.${method}\` — "${method}" is not a method of the "${ns}" namespace (have: ${[...sdk.namespaces.get(ns)].join(", ")})`,
-            );
-            continue;
-          }
-          if (sdk.clientMethods.has(ns)) continue; // direct client method, e.g. capabilities/withSigner
-          errors.push(`${rel(file)}: \`client.${ns}\` — unknown SDK namespace or method`);
-        }
-      }
-    }
-  }
-
-  checkSkills(errors);
-
-  // ── Report ───────────────────────────────────────────────────────────────
-  const cliCount = cli.leaves.size + [...cli.groups.values()].reduce((n, s) => n + s.size, 0);
-  const sdkCount =
-    [...sdk.namespaces.values()].reduce((n, s) => n + s.size, 0) + sdk.clientMethods.size;
-  console.log(
-    `Doc-drift check: ${docs.length} docs vs ${cliCount} CLI commands, ${sdkCount} SDK methods`,
-  );
-
-  if (errors.length > 0) {
-    console.error(`\n✗ ${errors.length} stale reference(s):\n`);
-    for (const e of [...new Set(errors)].sort()) console.error(`  ${e}`);
-    console.error("\nFix the doc, or update the CLI/SDK so the referenced surface exists.");
-    process.exit(1);
-  }
-  console.log("✓ Every sailor command and client.* method referenced in docs exists.");
-}
-
-main();

package/scripts/check-init.mjs

@@ -1,123 +0,0 @@
-#!/usr/bin/env node
-/**
- * `sailor init` smoke test.
- *
- * PASS 1 — fresh init: scaffolds a new project and asserts expected files exist.
- *
- * Template files are read live from disk (not bundled), so no rebuild is needed
- * between runs — the in-tree templates/default/ IS the "latest version".
- *
- * Run:  node scripts/check-init.mjs   (CI builds the CLI first)
- * Exit: 0 = all passes OK, 1 = failure (prints what went wrong).
- */
-
-import { execFileSync } from "node:child_process";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), "..");
-const BUNDLE = path.join(ROOT, "packages/cli/dist/index.cjs");
-const PROJECT = "smoke-agent";
-
-function fail(msg) {
-  console.error(`✗ init smoke test FAILED: ${msg}`);
-  process.exit(1);
-}
-
-if (!fs.existsSync(BUNDLE)) {
-  fail(`CLI bundle not found at ${BUNDLE}.\n  Build it first: pnpm --filter sailor build`);
-}
-
-// Scaffold into a temp dir. `init` requires the destination to live inside the
-// process cwd, so we run the bundle with cwd set to a fresh temp root.
-const tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), "sailor-init-smoke-"));
-const dest = path.join(tmpRoot, PROJECT);
-
-try {
-  let stdout = "";
-  try {
-    stdout = execFileSync(process.execPath, [BUNDLE, "init", PROJECT], {
-      cwd: tmpRoot,
-      encoding: "utf-8",
-      stdio: ["ignore", "pipe", "pipe"],
-    });
-  } catch (err) {
-    const out = `${err.stdout ?? ""}${err.stderr ?? ""}`.trim();
-    fail(`\`sailor init ${PROJECT}\` exited non-zero.\n  ${out || err.message}`);
-  }
-
-  // A successful fresh init prints the AGENTS.md onboarding banner.
-  if (!/AGENTS\.md/i.test(stdout)) {
-    fail(`init did not report success.\n  stdout: ${stdout.trim()}`);
-  }
-
-  // Assert the scaffold landed.
-  const mustExist = [
-    ".sail/config.json",
-    "package.json",
-    "foundry.toml",
-    "mandates",
-    "AGENTS.md",
-    "CLAUDE.md",
-    "Dockerfile",
-    ".dockerignore",
-    ".sail/contracts/interfaces/IPermission.sol",
-    ".sail/contracts/interfaces/IBatchPermission.sol",
-    "test/BoundedCallPermission.t.sol",
-    "examples/custom-mandate/README.md",
-    ".agents/skills/sail-onboarding/SKILL.md",
-    ".agents/skills/sail-project-info/SKILL.md",
-    ".agents/skills/sail-servers/SKILL.md",
-    ".agents/skills/sail-transactions/SKILL.md",
-    ".agents/skills/sail-mandates/SKILL.md",
-    ".agents/skills/sail-mandates/references/approvals.md",
-    ".agents/skills/sail-automation/SKILL.md",
-    ".agents/skills/sail-automation/references/docker-vm.md",
-    ".agents/skills/sail-automation/references/github-actions.md",
-    ".agents/skills/sail-automation/references/local-daemon.md",
-    ".agents/skills/sail-automation/references/self-hosted-runner.md",
-    ".agents/skills/sail-extend/SKILL.md",
-  ];
-  for (const rel of mustExist) {
-    if (!fs.existsSync(path.join(dest, rel))) fail(`expected scaffolded "${rel}" — not found`);
-  }
-
-  // config.json is valid JSON named after the project.
-  const config = JSON.parse(fs.readFileSync(path.join(dest, ".sail/config.json"), "utf-8"));
-  if (config.name !== PROJECT) fail(`config.json name is "${config.name}", expected "${PROJECT}"`);
-
-  // package.json is valid, renamed, and the workspace protocol was resolved away
-  // (a leftover "workspace:*" would make the scaffold un-installable for users).
-  const pkg = JSON.parse(fs.readFileSync(path.join(dest, "package.json"), "utf-8"));
-  if (pkg.name !== PROJECT) fail(`package.json name is "${pkg.name}", expected "${PROJECT}"`);
-  if (pkg.dependencies?.["@sail/sdk"] === "workspace:*") {
-    fail(`package.json still has "@sail/sdk": "workspace:*" — init did not resolve it`);
-  }
-
-  // ── Regression guard: absolute path outside cwd ───────────────────────────
-  // An absolute path outside the cwd must be REJECTED, not silently nested into
-  // `<cwd>/<abs path>`. (Pre-fix, `path.join` swallowed the leading slash and
-  // scaffolded a bogus nested tree while printing success.)
-  const outside = path.join(os.tmpdir(), "sailor-init-outside", "agent");
-  let rejected = false;
-  try {
-    execFileSync(process.execPath, [BUNDLE, "init", outside], {
-      cwd: tmpRoot,
-      stdio: ["ignore", "pipe", "pipe"],
-    });
-  } catch {
-    rejected = true; // non-zero exit = correctly refused
-  }
-  if (!rejected) fail(`an absolute path outside cwd ("${outside}") was accepted — should be rejected`);
-  if (fs.existsSync(path.join(outside, ".sail/config.json"))) {
-    fail(`init scaffolded into an out-of-cwd absolute path "${outside}"`);
-  }
-
-  console.log(`✓ init smoke test passed — scaffolded ${PROJECT}/ from the in-tree bundle`);
-  console.log("✓ init guard passed — absolute path outside cwd rejected, not silently nested");
-} finally {
-  fs.rmSync(path.join(os.tmpdir(), "sailor-init-outside"), { recursive: true, force: true });
-  fs.rmSync(tmpRoot, { recursive: true, force: true });
-}