@dev.sail.money/sailor 1.3.0-227 → 1.3.0-228

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev.sail.money/sailor",
-  "version": "1.3.0-227",
+  "version": "1.3.0-228",
   "description": "Operator toolkit for Sail Protocol",
   "bin": {
     "sailor": "packages/cli/dist/index.cjs"
@@ -17,9 +17,6 @@
     "packages/sdk/package.json",
     "packages/ui/dist",
     "templates",
-    "examples",
-    "docs",
-    "scripts",
     "README.md",
     "AGENTS.md"
   ],
@@ -33,7 +30,6 @@
     "docs:check": "node scripts/check-docs.mjs",
     "init:check": "node scripts/check-init.mjs",
     "update:check": "node scripts/check-update.mjs",
-    "eval": "node evals/run.mjs",
     "lint": "biome check ."
   },
   "devDependencies": {

package/packages/cli/dist/index.cjs

@@ -41333,20 +41333,6 @@ Pass --force to scaffold into it anyway (existing files with the same name are o
     }
   })() : null;
   copyDirSync(templateSrc, dest);
-  const pkgRoot = packageRoot();
-  const examplesPermSrc = import_node_path8.default.join(pkgRoot, "examples", "permissions");
-  if (import_node_fs10.default.existsSync(examplesPermSrc)) {
-    copyDirSync(examplesPermSrc, import_node_path8.default.join(dest, "examples", "permissions"));
-  }
-  const customMandateSrc = import_node_path8.default.join(pkgRoot, "examples", "custom-mandate");
-  if (import_node_fs10.default.existsSync(customMandateSrc)) {
-    copyDirSync(customMandateSrc, import_node_path8.default.join(dest, "examples", "custom-mandate"));
-  }
-  const permModelSrc = import_node_path8.default.join(pkgRoot, "docs", "PERMISSION_MODEL.md");
-  if (import_node_fs10.default.existsSync(permModelSrc)) {
-    import_node_fs10.default.mkdirSync(import_node_path8.default.join(dest, "docs"), { recursive: true });
-    writeIfMissing2(import_node_path8.default.join(dest, "docs", "PERMISSION_MODEL.md"), import_node_fs10.default.readFileSync(permModelSrc, "utf-8"));
-  }
   const pkgPath = import_node_path8.default.join(dest, "package.json");
   if (import_node_fs10.default.existsSync(pkgPath)) {
     const pkg = JSON.parse(import_node_fs10.default.readFileSync(pkgPath, "utf-8"));

package/packages/sdk/dist/fees.d.ts

@@ -7,7 +7,8 @@ import { type Address, type PublicClient } from "viem";
  *
  * This is THE single source of truth for the registration fee. The kernel
  * charges `fee × N` for N permissions, bounded by MAX_PERMISSION_FEE_WEI
- * (0.001 ETH) and refunding any excess; there is NO bytecode/size-based
+ * (0.01 ETH — the constitutional cap in SailGovernance; the seeded launch
+ * default fee is 0.001 ETH) and refunding any excess; there is NO bytecode/size-based
  * component in the live contracts (that "variable" formula existed only in
  * stale protocol docs describing an abandoned design). Underpaying reverts with
  * InsufficientFee(required, provided).

package/packages/sdk/dist/fees.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fees.d.ts","sourceRoot":"","sources":["../src/fees.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,MAAM,CAAC;AAGpE;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,OAAO,GAClB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,aAAa,EAAE,aAAa,EAAE,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,OAAO,EACnB,WAAW,EAAE,OAAO,EAAE,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAMvE;AAED;iFACiF;AACjF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,gCAAgC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAMrE;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CASjF"}
+{"version":3,"file":"fees.d.ts","sourceRoot":"","sources":["../src/fees.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,MAAM,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,OAAO,GAClB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,aAAa,EAAE,aAAa,EAAE,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,OAAO,EACnB,WAAW,EAAE,OAAO,EAAE,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAMvE;AAED;iFACiF;AACjF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,gCAAgC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAMrE;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CASjF"}

package/packages/sdk/dist/fees.js

@@ -8,7 +8,8 @@ import { SailGovernanceAbi } from "./abis/SailGovernance.js";
  *
  * This is THE single source of truth for the registration fee. The kernel
  * charges `fee × N` for N permissions, bounded by MAX_PERMISSION_FEE_WEI
- * (0.001 ETH) and refunding any excess; there is NO bytecode/size-based
+ * (0.01 ETH — the constitutional cap in SailGovernance; the seeded launch
+ * default fee is 0.001 ETH) and refunding any excess; there is NO bytecode/size-based
  * component in the live contracts (that "variable" formula existed only in
  * stale protocol docs describing an abandoned design). Underpaying reverts with
  * InsufficientFee(required, provided).

package/packages/sdk/dist/fees.js.map

@@ -1 +1 @@
-{"version":3,"file":"fees.js","sourceRoot":"","sources":["../src/fees.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,WAAW,EAAE,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAA0B,EAC1B,UAAmB;IAEnB,OAAO,YAAY,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,UAAU;QACnB,GAAG,EAAE,iBAAiB;QACtB,YAAY,EAAE,2BAA2B;KAC1C,CAAoB,CAAC;AACxB,CAAC;AAgBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,YAA0B,EAC1B,UAAmB,EACnB,WAAsB;IAEtB,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA4B;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,0DAA0D,CAAC;IACnF,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,wCAAwC;IAC5F,OAAO,qBAAqB,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC;AACtH,CAAC;AAED;iFACiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,gCAAgC;IACvB,WAAW,CAAS;IAC7B,sCAAsC;IAC7B,UAAU,CAAS;IAC5B,YAAY,OAAe,EAAE,WAAmB,EAAE,UAAkB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,WAAmB;IAClE,OAAO,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,WAAmB;IACzE,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,oBAAoB,CAC5B,4BAA4B,WAAW,CAAC,WAAW,CAAC,yBAAyB;YAC3E,qBAAqB,WAAW,CAAC,UAAU,CAAC,OAAO,EACrD,WAAW,EACX,UAAU,CACX,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"fees.js","sourceRoot":"","sources":["../src/fees.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,WAAW,EAAE,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAA0B,EAC1B,UAAmB;IAEnB,OAAO,YAAY,CAAC,YAAY,CAAC;QAC/B,OAAO,EAAE,UAAU;QACnB,GAAG,EAAE,iBAAiB;QACtB,YAAY,EAAE,2BAA2B;KAC1C,CAAoB,CAAC;AACxB,CAAC;AAgBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,YAA0B,EAC1B,UAAmB,EACnB,WAAsB;IAEtB,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA4B;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,0DAA0D,CAAC;IACnF,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,wCAAwC;IAC5F,OAAO,qBAAqB,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC;AACtH,CAAC;AAED;iFACiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,gCAAgC;IACvB,WAAW,CAAS;IAC7B,sCAAsC;IAC7B,UAAU,CAAS;IAC5B,YAAY,OAAe,EAAE,WAAmB,EAAE,UAAkB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,WAAmB;IAClE,OAAO,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,WAAmB;IACzE,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,oBAAoB,CAC5B,4BAA4B,WAAW,CAAC,WAAW,CAAC,yBAAyB;YAC3E,qBAAqB,WAAW,CAAC,UAAU,CAAC,OAAO,EACrD,WAAW,EACX,UAAU,CACX,CAAC;IACJ,CAAC;AACH,CAAC"}

package/packages/sdk/dist/intelligence.d.ts

@@ -5,7 +5,7 @@
  * Do not edit manually — run `pnpm build` to regenerate.
  *
  * Spec version : 1.2.1
- * Generated at : 2026-07-02T16:26:37.498Z
+ * Generated at : 2026-07-02T17:23:23.707Z
  */
 export declare const SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 export declare const SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";

package/packages/sdk/dist/intelligence.js

@@ -5,7 +5,7 @@
  * Do not edit manually — run `pnpm build` to regenerate.
  *
  * Spec version : 1.2.1
- * Generated at : 2026-07-02T16:26:37.498Z
+ * Generated at : 2026-07-02T17:23:23.707Z
  */
 export const SAIL_INTELLIGENCE_BASE_URL = "https://api.sail.money";
 export const SAIL_INTELLIGENCE_DOCS_URL = "https://api.sail.money/docs";

package/packages/sdk/package.json

@@ -52,12 +52,12 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/SailAgent/Sailor.git",
+    "url": "https://github.com/sail-money/Sailor.git",
     "directory": "packages/sdk"
   },
   "homepage": "https://sail.money",
   "bugs": {
-    "url": "https://github.com/SailAgent/Sailor/issues"
+    "url": "https://github.com/sail-money/Sailor/issues"
   },
   "engines": {
     "node": ">=18.0.0"

package/templates/default/.agents/skills/sail-mandates/references/examples-index.md

@@ -15,7 +15,7 @@ Permissions only bound on-chain actions: venues with off-chain order matching (P
 | `BoundedStake_Venice_Base.sol` | Venice (VVV) staking · Base | Recipient binding on stake; claim() structurally routes rewards to caller (the SMA) | `0xadc9772e` stake(address,uint256), `0x4e71d92d` claim() |
 | `BoundedTransfer_ERC20_Ethereum.sol` | ERC-20 · any EVM | Token allowlist + recipient allowlist + per-transfer cap; caps are per-token base units (USDC 6 decimals, WETH 18) — one permission per token if amounts differ | `0xa9059cbb` transfer(address,uint256) |
 | `BoundedPerp_GMXv2_Arbitrum.sol` | GMX v2 ExchangeRouter · Arbitrum | Market allowlist + collateral cap + size cap (USD is 1e30-scaled) + long/short flags on a struct-typed call | `0x212234c3` createOrder(CreateOrderParams) — MUST re-verify, see below |
-| `BoundedBet_Limitless_Base.sol` | Limitless CTF exchange · Base | Condition allowlist + stake cap + outcome allowlist on a prediction market | buy(bytes32,uint256,uint256) — **ABI UNVERIFIED**, see below |
+| `BoundedLimitless_Base.sol` | Limitless CTF exchange · Base | Condition allowlist + stake cap + outcome allowlist on a prediction market | buy(bytes32,uint256,uint256) — **ABI UNVERIFIED**, see below |
 | `BoundedApproveAndCallBatch.sol` | Sail batch dispatch · any selective kernel | `IBatchPermission`: atomic approve → consume → reset-to-0 in exactly 3 calls; single-call evaluate() deliberately returns false | `0x095ea7b3` approve (calls 0 and 2) |
 
 ## Lessons the examples encode

package/templates/default/.agents/skills/sail-template-swap/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: sail-template-swap
-description: Gate an SMA's DEX swaps by REUSING the shared SwapPermission singleton (Protocol/contracts/templates/SwapPermission.sol) — register + configure, no per-SMA deploy. Use for a bounded swap / DCA mandate on Uniswap V3, V3-02, or V2 with router + token-in/out allowlists, a per-tx cap, and a MANDATORY oracle slippage band (priceOracle is required — for no-oracle tokens use sail-template-swap-no-oracle). For the LI.FI aggregator use sail-lifi-swap; for Pendle use sail-pendle. NOTE: `sailor mandate attach` only registers — you must also configure per-account (see steps).
+description: Gate an SMA's DEX swaps by REUSING the shared SwapPermission singleton (Protocol/contracts/templates/SwapPermission.sol) — register + configure, no per-SMA deploy. Use for a bounded swap / DCA mandate on Uniswap V3, V3-02, or V2 with router + token-in/out allowlists, a per-tx cap, and a MANDATORY oracle slippage band (priceOracle is required — for no-oracle tokens use sail-template-swap-no-oracle). For the LI.FI aggregator or Pendle, author a bespoke permission via sail-mandates. NOTE: `sailor mandate attach` only registers — you must also configure per-account (see steps).
 compatibility: A Sailor project (`@sail/sdk`, `sailor` CLI). Requires SwapPermission deployed on the target chain (recorded in sail-templates/deployed.json); run sail-templates first.
 metadata:
   workspace: sailor-harness
@@ -192,7 +192,7 @@ it is below `amountIn`.
   (live-pool hallucination band — catches honest mistakes, NOT MEV/flash-loan attacks) or author a
   bespoke permission. There is no oracle-off mode on `SwapPermission`.
 - **Aggregator (LI.FI) or opaque calldata** → the mandate can't inspect the route; use
-  [`sail-lifi-swap`](../sail-lifi-swap/SKILL.md) or [`sail-mandates`](../sail-mandates/SKILL.md).
+  [`sail-mandates`](../sail-mandates/SKILL.md).
 - **`SwapPermission` not deployed on your chain** → check `deployed.json` first (it's live on all
   11 Sailor-bundled chains as of the current deploy); for anything outside that set, author your
   own via [`sail-mandates`](../sail-mandates/SKILL.md).

package/templates/default/.agents/skills/sail-template-swap-no-oracle/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: sail-template-swap-no-oracle
-description: Gate an SMA's DEX swaps for tokens that have NO oracle by REUSING the shared SwapPermissionNoOracle singleton (Protocol/contracts/templates/SwapPermissionNoOracle.sol) — register + configure, no per-SMA deploy. Use for a bounded swap mandate on Uniswap V3/V3-02/V2 (and forks) where no manipulation-resistant price feed exists: router + token-in/out allowlists, a per-tx cap, recipient pinned to the SMA, and a per-pair live-pool "hallucination band". NOT manipulation-resistant — if the token HAS an oracle use sail-template-swap instead; for the LI.FI aggregator use sail-lifi-swap. Deployed on all 11 Sailor-bundled chains (recorded in sail-templates/deployed.json).
+description: Gate an SMA's DEX swaps for tokens that have NO oracle by REUSING the shared SwapPermissionNoOracle singleton (Protocol/contracts/templates/SwapPermissionNoOracle.sol) — register + configure, no per-SMA deploy. Use for a bounded swap mandate on Uniswap V3/V3-02/V2 (and forks) where no manipulation-resistant price feed exists: router + token-in/out allowlists, a per-tx cap, recipient pinned to the SMA, and a per-pair live-pool "hallucination band". NOT manipulation-resistant — if the token HAS an oracle use sail-template-swap instead; for the LI.FI aggregator author a bespoke permission via sail-mandates. Deployed on all 11 Sailor-bundled chains (recorded in sail-templates/deployed.json).
 compatibility: A Sailor project (`@sail/sdk`, `sailor` CLI). Requires SwapPermissionNoOracle deployed on the target chain (recorded in sail-templates/deployed.json); run sail-templates first.
 metadata:
   workspace: sailor-harness
@@ -97,4 +97,4 @@ Template-specific bits:
   [`sail-template-swap`](../sail-template-swap/SKILL.md) wherever an oracle exists.
 - `toleranceBps` is capped at 50% in source; a wider band is meaningless and rejected at configure.
 - Unaudited example — step 4 is mandatory.
-- Aggregator routing (opaque calldata) → [`sail-lifi-swap`](../sail-lifi-swap/SKILL.md).
+- Aggregator routing (opaque calldata) → author a bespoke permission via [`sail-mandates`](../sail-mandates/SKILL.md).

package/templates/default/.agents/skills/sail-templates/SKILL.md

@@ -124,8 +124,8 @@ Full mechanics (EIP-712 sigs, `configure`/`configureDirect`, `attachBatch`, `rep
 
 No shared template covers: **perps** (GMX, Gains, Synthetix), **prediction markets** (Azuro,
 Limitless), or the **LI.FI aggregator**. For those, author a bespoke `IPermission` via
-`sailor mandate deploy` — see [`sail-lifi-swap`](../sail-lifi-swap/SKILL.md) for the
-custody-bound aggregator pattern and [`sail-pendle`](../sail-pendle/SKILL.md) for Pendle.
+`sailor mandate deploy` — see [`sail-mandates`](../sail-mandates/SKILL.md) for the
+authoring flow and `examples/permissions/` for worked per-protocol patterns.
 
 ## Notes
 

package/templates/default/docs/PERMISSION_MODEL.md

@@ -89,5 +89,5 @@ Run `sailor doctor` (read-only, no gas, no keys):
 - on a conjunctive kernel, **probes each permission for pass-through** and flags any
   that would brick dispatch.
 
-See [AGENT_PLAYBOOK.md](../AGENT_PLAYBOOK.md) for the operational decision tree and the
-revert failure-mode catalog.
+See [AGENTS.md](../AGENTS.md) (and the skills it routes to under `.agents/skills/`)
+for the operational decision tree and the revert failure-mode catalog.

package/docs/PERMISSION_MODEL.md

@@ -1,93 +0,0 @@
-# Sail permission model: conjunctive vs selective
-
-The deployed SailKernel ships in **two incompatible dispatch models**. Which one a
-chain runs changes how dispatches are signed *and* how permissions must be written.
-Get this wrong and every dispatch reverts with an opaque selector. This is the single
-most important thing to understand before operating an SMA.
-
-## TL;DR
-
-| | **Conjunctive** (older) | **Selective** (newer) |
-|---|---|---|
-| Chains today (bundled kernels) | None — all bundled kernels moved to selective | Base (8453), Base Sepolia (84532), Arbitrum (42161), Unichain (130) |
-| `dispatch(...)` | `(account, target, value, data, sig, deadline)` — **no `permission`** | `(account, permission, target, value, data, sig, deadline)` |
-| Which permissions are checked | **ALL** registered permissions; **all must return true** | only the **one** permission named in the call |
-| EIP-712 `Dispatch` struct | no `permission` field | includes `permission` |
-| Batch (`dispatchBatch`/`previewBatch`) | **not available** | available |
-| **Permission design rule** | **MUST pass through calls outside its domain** | may return false freely |
-
-Don't guess from a version string — **detect it on-chain** (see below).
-
-## The conjunctive pass-through rule (the big footgun)
-
-On a conjunctive kernel the kernel calls `evaluate(txData, ctx)` on **every**
-registered permission and ANDs the results. A single `false` blocks the whole
-dispatch (`PermissionDenied`).
-
-So a permission that only cares about, say, approvals **must still return `true` for
-every call it doesn't govern**:
-
-```solidity
-function evaluate(bytes calldata txData, Context calldata ctx) external view returns (bool) {
-    // Pass through calls outside this permission's domain (conjunctive model).
-    if (ctx.selector != APPROVE) return true;   // <-- without this line, this
-                                                 //     permission bricks swaps,
-                                                 //     transfers, everything.
-    // ...domain-specific checks for approve...
-}
-```
-
-A permission that returns `false` (or reverts, or runs out of gas — both treated as
-`false`) on unrelated calls **bricks the entire account**: no dispatch of any kind
-can pass. We hit exactly this during bring-up with permissions that "blocked each
-other." The fix was to redeploy every permission with pass-through semantics.
-
-Corollary: on a conjunctive kernel you **cannot** have two permissions that each
-enforce a different token's approve — each would reject the other's token. To support
-approving both DAI and USDC you need **one** approve permission that allows both (see
-`examples/lifi-permissions/`), not two narrow ones.
-
-Selective kernels don't have this problem: each dispatch names one permission and
-only that one is consulted.
-
-## Detect the model on-chain
-
-The SDK reads each kernel's public `DISPATCH_TYPEHASH` constant and matches it
-against the canonical hashes for each model. Never assume.
-
-```ts
-const caps = await client.capabilities();
-// caps.dispatchModel: "conjunctive" | "selective"
-// caps.dispatchTypehash, caps.source ("onchain-typehash" | "static-hint")
-```
-
-Verified typehashes:
-
-- conjunctive `DISPATCH_TYPEHASH` = `0x7510c80e…`
-  `Dispatch(address account,address target,uint256 value,bytes32 dataHash,uint256 nonce,uint256 deadline)`
-- selective `DISPATCH_TYPEHASH` =
-  `Dispatch(address account,address permission,address target,uint256 value,bytes32 dataHash,uint256 nonce,uint256 deadline)`
-
-`client.dispatch.single(...)` already signs the correct struct and uses the correct
-ABI for the detected model — you don't sign by hand. `client.dispatch.batch` /
-`preview` throw a clear error on conjunctive kernels (no `dispatchBatch`).
-
-## Roles (unchanged across models)
-
-| Role | Authority |
-|------|-----------|
-| **Owner** | Holds the Safe; custody anchor. |
-| **Permission Signer** | Authorizes which `IPermission` contracts apply (EIP-712 `RegisterPermissions` / `RevokePermissions`). Signed in the browser signing station — the agent never holds this key. |
-| **Manager** | Executes dispatches within the registered permissions (ECDSA / ERC-1271). The agent's hot key. |
-
-## Preflight before spending gas
-
-Run `sailor doctor` (read-only, no gas, no keys):
-
-- detects the dispatch model,
-- lists registered permissions,
-- on a conjunctive kernel, **probes each permission for pass-through** and flags any
-  that would brick dispatch.
-
-See [AGENTS.md](../AGENTS.md) for the operational decision tree and the
-revert failure-mode catalog.

package/examples/README.md

@@ -1,24 +0,0 @@
-# examples/
-
-Reference material for building Sail permission contracts. Nothing here is part of
-Sail Protocol and nothing here is audited.
-
-## What's in here
-
-### `permissions/`
-
-Protocol-specific permission examples (Uniswap, Aave, GMX, Vault, Pendle, and others).
-These are copied into your project by `sailor init` so you have local starting points to
-adapt. They are not a supported or exhaustive library — review them before using.
-
-### `custom-mandate/`
-
-A standalone Foundry workspace scaffold for authoring your own `IPermission` contract as a
-separate project. Fork it, rename it, and build from `BoundedCallPermission.sol`.
-
-### `lifi-permissions/`
-
-Reference-only source for the deployed LiFi EIP-1167 clone implementations
-(`LifiBoundedApprovePermissionCloneable`, `LifiDiamondSwapPermissionCloneable`).
-These document live deployed contracts — do not adapt them directly for new projects.
-See the `README.md` inside for deployment addresses and the conjunctive-kernel caveat.

package/examples/lifi-permissions/LifiBoundedApprovePermissionCloneable.sol

@@ -1,84 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity 0.8.26;
-
-import {IPermission, Context} from "../../.sail/contracts/interfaces/IPermission.sol";
-import {CloneInitializable} from "../../.sail/contracts/templates/base/CloneInitializable.sol";
-
-/// @title  LifiBoundedApprovePermissionCloneable
-/// @notice EIP-1167 clone-template approval permission with PER-TOKEN caps. The
-///         logic contract is deployed once and registered in the SDK's
-///         standaloneTemplates; each account clones it via
-///         PermissionFactory.deployAndAttach and configures via initialize().
-///
-///         The manager may ONLY approve the LiFi Diamond, and only on tokens that
-///         have a configured cap, up to that token's cap. Passes through any
-///         non-approve call (conjunctive model).
-///
-///         Caps are PER TOKEN (not one global cap) because token value and decimals
-///         differ — e.g. 1 DAI = 1e18 base units vs 1 USDC = 1e6. A single cap can't
-///         bound both sensibly.
-contract LifiBoundedApprovePermissionCloneable is IPermission, CloneInitializable {
-    bytes4 private constant APPROVE = 0x095ea7b3;
-    address public constant LIFI_DIAMOND = 0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE;
-
-    // Per-token approve cap, in the token's base units. 0 = token not allowed.
-    // A mapping occupies its own slot pointer and does not pack with the
-    // CloneInitializable `_initialized` bool at slot 0.
-    mapping(address token => uint256 cap) public maxApprovePerToken;
-    address public permissionSigner;
-
-    error NotPermissionSigner();
-    error ZeroAddress();
-    error LengthMismatch();
-
-    modifier onlyPermissionSigner() {
-        if (msg.sender != permissionSigner) revert NotPermissionSigner();
-        _;
-    }
-
-    /// @dev Lock the logic contract; only clones (fresh storage) can be initialized.
-    constructor() {
-        _disableInitializers();
-    }
-
-    /// @notice One-time per-clone configuration.
-    /// @param tokens            Tokens the manager may approve to the LiFi Diamond.
-    /// @param caps              Per-token cap (token base units); index-aligned with `tokens`.
-    /// @param _permissionSigner Owner wallet; sole authority for post-init updates.
-    function initialize(
-        address[] memory tokens,
-        uint256[] memory caps,
-        address _permissionSigner
-    ) external initializer {
-        if (_permissionSigner == address(0)) revert ZeroAddress();
-        if (tokens.length != caps.length) revert LengthMismatch();
-        permissionSigner = _permissionSigner;
-        for (uint256 i; i < tokens.length; i++) {
-            maxApprovePerToken[tokens[i]] = caps[i];
-        }
-    }
-
-    /// @notice Set (cap > 0) or clear (cap == 0) a token's per-tx approve cap.
-    function setTokenCap(address token, uint256 cap) external onlyPermissionSigner {
-        maxApprovePerToken[token] = cap;
-    }
-
-    function evaluate(bytes calldata txData, Context calldata ctx) external view returns (bool) {
-        // Pass through calls outside this permission's domain (conjunctive model).
-        if (ctx.selector != APPROVE) return true;
-        if (ctx.target == address(0)) return false; // token is ctx.target
-        if (txData.length < 68) return false;
-
-        (address spender, uint256 amount) = abi.decode(txData[4:], (address, uint256));
-        if (spender != LIFI_DIAMOND) return false;
-
-        uint256 cap = maxApprovePerToken[ctx.target];
-        if (cap == 0) return false; // token not allowed
-        if (amount > cap) return false; // over the per-token cap
-        return true;
-    }
-
-    function discriminator() external pure returns (bytes32) {
-        return keccak256("LifiBoundedApprovePermissionCloneable.v1");
-    }
-}

package/examples/lifi-permissions/LifiDiamondSwapPermissionCloneable.sol

@@ -1,97 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity 0.8.26;
-
-import {IPermission, Context} from "../../.sail/contracts/interfaces/IPermission.sol";
-import {CloneInitializable} from "../../.sail/contracts/templates/base/CloneInitializable.sol";
-
-/// @title  LifiDiamondSwapPermissionCloneable
-/// @notice EIP-1167 clone-template version of LifiDiamondSwapPermission. The logic
-///         contract is deployed once and registered in the SDK's standaloneTemplates;
-///         each account gets its own clone via PermissionFactory.deployAndAttach,
-///         configured through initialize() (NOT the constructor).
-///
-///         Restricts manager-initiated swaps to the official LiFi Diamond on Base:
-///          - target must be the LiFi Diamond,
-///          - selector must be allowlisted,
-///          - receiver embedded in the calldata must equal ctx.account (the SMA),
-///          - the minAmount field must not exceed the configured cap.
-///         Passes through any call whose target is not the diamond (conjunctive model).
-///
-///         Calldata layout (validated against live Base quotes):
-///          selector(4) + word0(32) + word1(32) + word2(32) + receiver(32) + minAmount(32)
-///          → receiver at offset 100, minAmount at offset 132.
-contract LifiDiamondSwapPermissionCloneable is IPermission, CloneInitializable {
-    // Official LiFi Diamond on Base Mainnet.
-    address public constant LIFI_DIAMOND = 0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE;
-
-    // Storage starts after CloneInitializable's `_initialized` bool (slot 0). A
-    // mapping occupies its own slot pointer and does not pack with the bool.
-    mapping(bytes4 selector => bool) public isAllowedSelector;
-    uint256 public maxMinAmountPerTx;
-    address public permissionSigner;
-
-    error NotPermissionSigner();
-    error ZeroAddress();
-
-    modifier onlyPermissionSigner() {
-        if (msg.sender != permissionSigner) revert NotPermissionSigner();
-        _;
-    }
-
-    /// @dev Lock the logic contract; only clones (fresh storage) can be initialized.
-    constructor() {
-        _disableInitializers();
-    }
-
-    /// @notice One-time per-clone configuration.
-    /// @param allowedSelectors   LiFi Diamond selectors to allowlist on init.
-    /// @param _maxMinAmountPerTx Cap on the minAmount field (type(uint256).max = uncapped).
-    /// @param _permissionSigner  Owner wallet; sole authority for post-init updates.
-    function initialize(
-        bytes4[] memory allowedSelectors,
-        uint256 _maxMinAmountPerTx,
-        address _permissionSigner
-    ) external initializer {
-        if (_permissionSigner == address(0)) revert ZeroAddress();
-        maxMinAmountPerTx = _maxMinAmountPerTx;
-        permissionSigner = _permissionSigner;
-        for (uint256 i; i < allowedSelectors.length; i++) {
-            isAllowedSelector[allowedSelectors[i]] = true;
-        }
-    }
-
-    function setMaxMinAmountPerTx(uint256 newMax) external onlyPermissionSigner {
-        maxMinAmountPerTx = newMax;
-    }
-
-    /// @notice Add a LiFi selector. Only after verifying its calldata places
-    ///         `receiver` at offset 100 and `minAmount` at offset 132.
-    function addSelector(bytes4 selector) external onlyPermissionSigner {
-        isAllowedSelector[selector] = true;
-    }
-
-    function removeSelector(bytes4 selector) external onlyPermissionSigner {
-        isAllowedSelector[selector] = false;
-    }
-
-    uint256 private constant RECEIVER_OFFSET = 100;
-    uint256 private constant MIN_DATA_LEN = 164;
-
-    function evaluate(bytes calldata txData, Context calldata ctx) external view returns (bool) {
-        // Pass through calls outside this permission's domain (conjunctive model).
-        if (ctx.target != LIFI_DIAMOND) return true;
-        if (!isAllowedSelector[ctx.selector]) return false;
-        if (txData.length < MIN_DATA_LEN) return false;
-
-        address receiver = abi.decode(txData[RECEIVER_OFFSET:RECEIVER_OFFSET + 32], (address));
-        uint256 minAmount = abi.decode(txData[RECEIVER_OFFSET + 32:RECEIVER_OFFSET + 64], (uint256));
-
-        if (receiver != ctx.account) return false;
-        if (minAmount > maxMinAmountPerTx) return false;
-        return true;
-    }
-
-    function discriminator() external pure returns (bytes32) {
-        return keccak256("LifiDiamondSwapPermissionCloneable.v1");
-    }
-}

package/examples/lifi-permissions/README.md

@@ -1,53 +0,0 @@
-# LiFi clone-permission templates
-
-Canonical source (for reference) of the EIP-1167 **clone** permission templates
-used for LiFi-based swaps/DCA. The logic contracts are deployed once per chain and
-registered in the SDK deployment registry
-(`packages/sdk/src/deployments.ts` → `standaloneTemplates` / `cloneTemplates`).
-Each account gets its own clone via `PermissionFactory.deployAndAttach`, configured
-through `initialize()` (never the constructor).
-
-These follow the `CloneInitializable` pattern: the constructor calls
-`_disableInitializers()` to permanently lock the logic contract, and a one-time
-`initialize()` (guarded by the `initializer` modifier) configures each clone.
-
-> The `import` paths reference `../../.sail/contracts/{interfaces,templates/base}`
-> from the Foundry project they were built in
-> (`tests/base-mainnet-agent-01/`). This folder is **reference source** — sailor has
-> no Foundry build. Build/deploy happens in that project via
-> `scripts/deploy-clone-templates.ts`.
-
-> **Note:** The kernels bundled in `@sail.money/sailor/sdk` (Base, Base Sepolia, Arbitrum, Unichain) now all run the **selective** dispatch model — verified on-chain against each kernel's `DISPATCH_TYPEHASH`. These templates were written for the older conjunctive model and include pass-through logic (`return true` for calls outside their domain) that is not required on selective kernels. Review before deploying against a selective kernel; the pass-through logic is harmless but unnecessary.
-
-## Contracts
-
-### LifiDiamondSwapPermissionCloneable → `boundedLiFi`
-Restricts manager swaps to the official LiFi Diamond:
-target == diamond, selector allowlisted, embedded receiver == `ctx.account`,
-`minAmount <= maxMinAmountPerTx`. Passes through any call whose target is not the
-diamond (conjunctive-kernel rule).
-
-`initialize(bytes4[] allowedSelectors, uint256 maxMinAmountPerTx, address permissionSigner)`
-
-### LifiBoundedApprovePermissionCloneable → `boundedApprove`
-Approve only the LiFi Diamond, only on tokens with a configured cap, up to that
-cap. **Per-token caps** (`mapping(token => cap)`) because token value/decimals
-differ (1 DAI = 1e18 vs 1 USDC = 1e6). Passes through non-approve calls.
-
-`initialize(address[] tokens, uint256[] caps, address permissionSigner)`
-
-## Deployed logic addresses
-
-| Template | Chain | Address |
-|---|---|---|
-| boundedLiFi | Base mainnet (8453) | `0xF1abcF774250fD1A8147B56DA07Bf9021064650A` |
-| boundedApprove | Base mainnet (8453) | `0x9c0b86daf9e75d759a5D165aD7366e52b3353fD8` |
-
-Both verified `initialized() == true` (logic locked) post-deploy.
-
-## Conjunctive-kernel note
-
-Both Base kernels use the **conjunctive** dispatch model: every registered
-permission is evaluated and ALL must return true. So a permission MUST pass through
-calls outside its own domain (return `true`), or it bricks unrelated dispatches.
-Both templates above do this.