@bananapus/suckers-v6 1.1.0 → 1.1.2

package/README.md

@@ -67,6 +67,7 @@ That means every bridge path has two trust surfaces:
 - root ordering and message delivery semantics matter as much as proof format
 - token mapping is part of the economic invariant
 - native/native mappings and different-address local/remote token mappings must be approved by the registry owner for the specific `(localToken, remoteChainId, remoteToken)` route before a project can choose them; non-native same-address mappings and disabled mappings do not need owner approval
+- OP Stack and Arbitrum ERC-20 mappings must name the exact bridge-registered counterpart delivered or burned by the native bridge in each direction; canonical token identity, equal addresses, and registry approval do not prove that pairing
 - peer contexts are merged only when they share both currency and decimals; same-currency contexts with different decimals are kept separate and valued independently at read time, never summed across precisions — and this merge applies per source chain, since each chain's record is stored and folded on its own
 - accounting propagates as a gossip bundle: a sucker sends its own chain's record plus every peer-chain record the project knows (gathered through the registry), so one sync round from a hub propagates every chain's data to every spoke without a direct sucker between each pair
 - `syncAccountingData` pays no registry `toRemoteFee`, but bridge-specific transport costs still apply and duplicate bundles can still consume bridge/indexer resources

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bananapus/suckers-v6",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "license": "MIT",
   "repository": {
     "type": "git",

package/references/entrypoints.md

@@ -29,7 +29,7 @@ A sucker bridges a Juicebox project's token economy between two chains. Cashed-o
 |-------|------|---------|
 | `localToken` | `address` | The local token address. |
 | `minGas` | `uint32` | The minimum gas to use when bridging this token. |
-| `remoteToken` | `bytes32` | The remote token address (bytes32 for cross-VM compatibility). |
+| `remoteToken` | `bytes32` | The remote token address (bytes32 for cross-VM compatibility). For OP Stack and Arbitrum ERC-20 lanes, this must be the exact bridge-registered counterpart delivered on the destination, not merely an economically equivalent canonical token. |
 
 ### `JBClaim` (argument to `claim` / `exitThroughEmergencyHatch`)
 
@@ -81,7 +81,7 @@ The same `JBChainAccounting[] accounts` bundle is also carried by the root messa
 | `fromRemoteAccounting(JBAccountingSnapshot calldata snapshot)` | Authenticated receive path for an accounting-only gossip bundle. Stores the freshest record per source chain, without touching any token-local inbox root. |
 | `claim(JBClaim calldata claimData)` | Claim bridged project tokens for the leaf's beneficiary by proving inclusion against the inbox root. |
 | `claim(JBClaim[] calldata claims)` | Claim multiple leaves in one call. Each leaf is routed through an external `this.claim` sub-call, so one failing leaf emits `ClaimFailed` and is reverted in isolation while the rest of the batch proceeds; the failed leaf stays claimable later. |
-| `mapToken(JBTokenMapping calldata map) payable` | Map a single local token to a remote token for bridging. Mappings are immutable once the outbox tree has entries (can only be disabled, not remapped). Requires `MAP_SUCKER_TOKEN` permission (initial mappings are applied at deploy under `DEPLOY_SUCKERS`). Native/native mappings and different-address mappings must also be approved by the registry owner for this sucker's peer chain. |
+| `mapToken(JBTokenMapping calldata map) payable` | Map a single local token to a remote token for bridging. Mappings are immutable once the outbox tree has entries (can only be disabled, not remapped). Requires `MAP_SUCKER_TOKEN` permission (initial mappings are applied at deploy under `DEPLOY_SUCKERS`). Native/native mappings and different-address mappings must also be approved by the registry owner for this sucker's peer chain. Mapping and registry checks do not validate an external native bridge's ERC-20 pair; OP Stack and Arbitrum routes must be verified against the live bridge in both directions before use. |
 | `mapTokens(JBTokenMapping[] calldata maps) payable` | Map multiple local tokens to remote tokens in one call. |
 
 ### JBSucker — deprecation & emergency (`IJBSuckerExtended`)

package/src/interfaces/IGeomeanOracle.sol

@@ -1,21 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity ^0.8.0;
-
-import {PoolKey} from "@uniswap/v4-core/src/types/PoolKey.sol";
-
-/// @notice Minimal interface for a Uniswap V4 TWAP oracle hook (e.g. GeomeanOracle).
-/// @dev Used to attempt TWAP-based quoting on V4 pools whose hook supports it.
-interface IGeomeanOracle {
-    /// @notice Returns cumulative tick and seconds-per-liquidity values for the given observation timestamps.
-    /// @param key The pool key to observe.
-    /// @param secondsAgos An array of seconds-ago offsets (e.g., [30, 0] for a 30-second TWAP).
-    /// @return tickCumulatives The cumulative tick values at each observation point.
-    /// @return secondsPerLiquidityCumulativeX128s The cumulative seconds-per-liquidity values.
-    function observe(
-        PoolKey calldata key,
-        uint32[] calldata secondsAgos
-    )
-        external
-        view
-        returns (int56[] memory tickCumulatives, uint160[] memory secondsPerLiquidityCumulativeX128s);
-}