@bloxchain/contracts 1.0.0-alpha.7 → 1.0.0

package/core/security/interface/ISecureOwnable.sol

@@ -1,105 +1,105 @@
-// SPDX-License-Identifier: MPL-2.0
-pragma solidity 0.8.33;
-
-// Contracts imports
-import "../../lib/EngineBlox.sol";
-
-/**
- * @title ISecureOwnable
- * @dev Interface for SecureOwnable functionality
- * @notice This interface defines SecureOwnable-specific operations
- * @notice Note: owner(), getBroadcasters(), and getRecovery() are available through BaseStateMachine
- */
-interface ISecureOwnable {
-    // ============ OWNERSHIP MANAGEMENT ============
-
-    /**
-     * @dev Requests a transfer of ownership
-     * @return txId The transaction ID (use getTransaction(txId) for full record)
-     */
-    function transferOwnershipRequest() external returns (uint256 txId);
-
-    /**
-     * @dev Approves a pending ownership transfer transaction after the release time
-     * @param txId The transaction ID
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function transferOwnershipDelayedApproval(uint256 txId) external returns (uint256);
-
-    /**
-     * @dev Approves a pending ownership transfer transaction using a meta-transaction
-     * @param metaTx The meta-transaction
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function transferOwnershipApprovalWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
-
-    /**
-     * @dev Cancels a pending ownership transfer transaction
-     * @param txId The transaction ID
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function transferOwnershipCancellation(uint256 txId) external returns (uint256);
-
-    /**
-     * @dev Cancels a pending ownership transfer transaction using a meta-transaction
-     * @param metaTx The meta-transaction
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function transferOwnershipCancellationWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
-
-    // ============ BROADCASTER MANAGEMENT ============
-
-    /**
-     * @dev Requests an update to the broadcaster at a specific location (index).
-     * @param newBroadcaster The new broadcaster address (zero address to revoke at location)
-     * @param location The index in the broadcaster role's authorized wallets set
-     * @return txId The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateBroadcasterRequest(address newBroadcaster, uint256 location) external returns (uint256 txId);
-
-    /**
-     * @dev Approves a pending broadcaster update transaction after the release time
-     * @param txId The transaction ID
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateBroadcasterDelayedApproval(uint256 txId) external returns (uint256);
-
-    /**
-     * @dev Approves a pending broadcaster update transaction using a meta-transaction
-     * @param metaTx The meta-transaction
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateBroadcasterApprovalWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
-
-    /**
-     * @dev Cancels a pending broadcaster update transaction
-     * @param txId The transaction ID
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateBroadcasterCancellation(uint256 txId) external returns (uint256);
-
-    /**
-     * @dev Cancels a pending broadcaster update transaction using a meta-transaction
-     * @param metaTx The meta-transaction
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateBroadcasterCancellationWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
-
-    // ============ RECOVERY MANAGEMENT ============
-
-    /**
-     * @dev Requests and approves a recovery address update using a meta-transaction
-     * @param metaTx The meta-transaction
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateRecoveryRequestAndApprove(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
-
-    // ============ TIMELOCK MANAGEMENT ============
-
-    /**
-     * @dev Requests and approves a time lock period update using a meta-transaction
-     * @param metaTx The meta-transaction
-     * @return The transaction ID (use getTransaction(txId) for full record)
-     */
-    function updateTimeLockRequestAndApprove(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
-}
+// SPDX-License-Identifier: MPL-2.0
+pragma solidity 0.8.35;
+
+// Contracts imports
+import "../../lib/EngineBlox.sol";
+
+/**
+ * @title ISecureOwnable
+ * @dev Interface for SecureOwnable functionality
+ * @notice This interface defines SecureOwnable-specific operations
+ * @notice Note: owner(), getBroadcasters(), and getRecovery() are available through BaseStateMachine
+ */
+interface ISecureOwnable {
+    // ============ OWNERSHIP MANAGEMENT ============
+
+    /**
+     * @dev Requests a transfer of ownership
+     * @return txId The transaction ID (use getTransaction(txId) for full record)
+     */
+    function transferOwnershipRequest() external returns (uint256 txId);
+
+    /**
+     * @dev Approves a pending ownership transfer transaction after the release time
+     * @param txId The transaction ID
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function transferOwnershipDelayedApproval(uint256 txId) external returns (uint256);
+
+    /**
+     * @dev Approves a pending ownership transfer transaction using a meta-transaction
+     * @param metaTx The meta-transaction
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function transferOwnershipApprovalWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
+
+    /**
+     * @dev Cancels a pending ownership transfer transaction
+     * @param txId The transaction ID
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function transferOwnershipCancellation(uint256 txId) external returns (uint256);
+
+    /**
+     * @dev Cancels a pending ownership transfer transaction using a meta-transaction
+     * @param metaTx The meta-transaction
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function transferOwnershipCancellationWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
+
+    // ============ BROADCASTER MANAGEMENT ============
+
+    /**
+     * @dev Requests a broadcaster role change identified by addresses.
+     * @param newBroadcaster New broadcaster (zero address to revoke `currentBroadcaster`)
+     * @param currentBroadcaster Existing broadcaster to replace or revoke; zero address to add `newBroadcaster`
+     * @return txId The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateBroadcasterRequest(address newBroadcaster, address currentBroadcaster) external returns (uint256 txId);
+
+    /**
+     * @dev Approves a pending broadcaster update transaction after the release time
+     * @param txId The transaction ID
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateBroadcasterDelayedApproval(uint256 txId) external returns (uint256);
+
+    /**
+     * @dev Approves a pending broadcaster update transaction using a meta-transaction
+     * @param metaTx The meta-transaction
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateBroadcasterApprovalWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
+
+    /**
+     * @dev Cancels a pending broadcaster update transaction
+     * @param txId The transaction ID
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateBroadcasterCancellation(uint256 txId) external returns (uint256);
+
+    /**
+     * @dev Cancels a pending broadcaster update transaction using a meta-transaction
+     * @param metaTx The meta-transaction
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateBroadcasterCancellationWithMetaTx(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
+
+    // ============ RECOVERY MANAGEMENT ============
+
+    /**
+     * @dev Requests and approves a recovery address update using a meta-transaction
+     * @param metaTx The meta-transaction
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateRecoveryRequestAndApprove(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
+
+    // ============ TIMELOCK MANAGEMENT ============
+
+    /**
+     * @dev Requests and approves a time lock period update using a meta-transaction
+     * @param metaTx The meta-transaction
+     * @return The transaction ID (use getTransaction(txId) for full record)
+     */
+    function updateTimeLockRequestAndApprove(EngineBlox.MetaTransaction memory metaTx) external returns (uint256);
+}

package/core/security/lib/definitions/SecureOwnableDefinitions.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MPL-2.0
-pragma solidity 0.8.33;
+pragma solidity 0.8.35;
 
 import "@openzeppelin/contracts/utils/introspection/IERC165.sol";
 import "../../../lib/EngineBlox.sol";
@@ -32,7 +32,7 @@ library SecureOwnableDefinitions {
     
     // Function Selector Constants
     bytes4 public constant TRANSFER_OWNERSHIP_SELECTOR = bytes4(keccak256("executeTransferOwnership(address)"));
-    bytes4 public constant UPDATE_BROADCASTER_SELECTOR = bytes4(keccak256("executeBroadcasterUpdate(address,uint256)"));
+    bytes4 public constant UPDATE_BROADCASTER_SELECTOR = bytes4(keccak256("executeBroadcasterUpdate(address,address)"));
     bytes4 public constant UPDATE_RECOVERY_SELECTOR = bytes4(keccak256("executeRecoveryUpdate(address)"));
     bytes4 public constant UPDATE_TIMELOCK_SELECTOR = bytes4(keccak256("executeTimeLockUpdate(uint256)"));
     
@@ -40,19 +40,19 @@ library SecureOwnableDefinitions {
     bytes4 public constant TRANSFER_OWNERSHIP_REQUEST_SELECTOR = bytes4(keccak256("transferOwnershipRequest()"));
     bytes4 public constant TRANSFER_OWNERSHIP_DELAYED_APPROVAL_SELECTOR = bytes4(keccak256("transferOwnershipDelayedApproval(uint256)"));
     bytes4 public constant TRANSFER_OWNERSHIP_CANCELLATION_SELECTOR = bytes4(keccak256("transferOwnershipCancellation(uint256)"));
-    bytes4 public constant UPDATE_BROADCASTER_REQUEST_SELECTOR = bytes4(keccak256("updateBroadcasterRequest(address,uint256)"));
+    bytes4 public constant UPDATE_BROADCASTER_REQUEST_SELECTOR = bytes4(keccak256("updateBroadcasterRequest(address,address)"));
     bytes4 public constant UPDATE_BROADCASTER_DELAYED_APPROVAL_SELECTOR = bytes4(keccak256("updateBroadcasterDelayedApproval(uint256)"));
     bytes4 public constant UPDATE_BROADCASTER_CANCELLATION_SELECTOR = bytes4(keccak256("updateBroadcasterCancellation(uint256)"));
     
     // Meta-transaction Function Selectors (Handler Functions - checked via msg.sig)
     // Note: Solidity function selector calculation for struct parameters uses 2 opening parentheses: ((tuple))
     // Verified: This format produces selector 0x458102e4 which matches the actual function selector
-    bytes4 public constant TRANSFER_OWNERSHIP_APPROVE_META_SELECTOR = bytes4(keccak256("transferOwnershipApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
-    bytes4 public constant TRANSFER_OWNERSHIP_CANCEL_META_SELECTOR = bytes4(keccak256("transferOwnershipCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
-    bytes4 public constant UPDATE_BROADCASTER_APPROVE_META_SELECTOR = bytes4(keccak256("updateBroadcasterApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
-    bytes4 public constant UPDATE_BROADCASTER_CANCEL_META_SELECTOR = bytes4(keccak256("updateBroadcasterCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
-    bytes4 public constant UPDATE_RECOVERY_META_SELECTOR = bytes4(keccak256("updateRecoveryRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
-    bytes4 public constant UPDATE_TIMELOCK_META_SELECTOR = bytes4(keccak256("updateTimeLockRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
+    bytes4 public constant TRANSFER_OWNERSHIP_APPROVE_META_SELECTOR = bytes4(keccak256("transferOwnershipApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
+    bytes4 public constant TRANSFER_OWNERSHIP_CANCEL_META_SELECTOR = bytes4(keccak256("transferOwnershipCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
+    bytes4 public constant UPDATE_BROADCASTER_APPROVE_META_SELECTOR = bytes4(keccak256("updateBroadcasterApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
+    bytes4 public constant UPDATE_BROADCASTER_CANCEL_META_SELECTOR = bytes4(keccak256("updateBroadcasterCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
+    bytes4 public constant UPDATE_RECOVERY_META_SELECTOR = bytes4(keccak256("updateRecoveryRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
+    bytes4 public constant UPDATE_TIMELOCK_META_SELECTOR = bytes4(keccak256("updateTimeLockRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))"));
     
     /**
      * @dev Returns predefined function schemas
@@ -123,62 +123,74 @@ library SecureOwnableDefinitions {
         
         // Meta-transaction functions
         schemas[0] = EngineBlox.FunctionSchema({
-            functionSignature: "transferOwnershipApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
+            functionSignature: "transferOwnershipApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
             functionSelector: TRANSFER_OWNERSHIP_APPROVE_META_SELECTOR,
             operationType: OWNERSHIP_TRANSFER,
             operationName: "OWNERSHIP_TRANSFER",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(metaApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: transferOwnershipHandlerForSelectors
         });
         
         schemas[1] = EngineBlox.FunctionSchema({
-            functionSignature: "transferOwnershipCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
+            functionSignature: "transferOwnershipCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
             functionSelector: TRANSFER_OWNERSHIP_CANCEL_META_SELECTOR,
             operationType: OWNERSHIP_TRANSFER,
             operationName: "OWNERSHIP_TRANSFER",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(metaCancelActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: transferOwnershipHandlerForSelectors
         });
         
         schemas[2] = EngineBlox.FunctionSchema({
-            functionSignature: "updateBroadcasterApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
+            functionSignature: "updateBroadcasterApprovalWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
             functionSelector: UPDATE_BROADCASTER_APPROVE_META_SELECTOR,
             operationType: BROADCASTER_UPDATE,
             operationName: "BROADCASTER_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(metaApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: broadcasterHandlerForSelectors
         });
         
         schemas[3] = EngineBlox.FunctionSchema({
-            functionSignature: "updateBroadcasterCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
+            functionSignature: "updateBroadcasterCancellationWithMetaTx(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
             functionSelector: UPDATE_BROADCASTER_CANCEL_META_SELECTOR,
             operationType: BROADCASTER_UPDATE,
             operationName: "BROADCASTER_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(metaCancelActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: broadcasterHandlerForSelectors
         });
         
         schemas[4] = EngineBlox.FunctionSchema({
-            functionSignature: "updateRecoveryRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
+            functionSignature: "updateRecoveryRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
             functionSelector: UPDATE_RECOVERY_META_SELECTOR,
             operationType: RECOVERY_UPDATE,
             operationName: "RECOVERY_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(metaRequestApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: recoveryHandlerForSelectors
         });
         
         schemas[5] = EngineBlox.FunctionSchema({
-            functionSignature: "updateTimeLockRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
+            functionSignature: "updateTimeLockRequestAndApprove(((uint256,uint256,uint8,(address,address,uint256,uint256,bytes32,bytes4,bytes),bytes32,bytes32,(address,uint256,address,uint256)),(uint256,uint256,address,bytes4,uint8,uint256,uint256,address),bytes32,bytes,bytes))",
             functionSelector: UPDATE_TIMELOCK_META_SELECTOR,
             operationType: TIMELOCK_UPDATE,
             operationName: "TIMELOCK_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(metaRequestApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: timelockHandlerForSelectors
         });
         
@@ -189,7 +201,9 @@ library SecureOwnableDefinitions {
             operationType: OWNERSHIP_TRANSFER,
             operationName: "OWNERSHIP_TRANSFER",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(timeDelayRequestActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: transferOwnershipHandlerForSelectors
         });
         
@@ -199,7 +213,9 @@ library SecureOwnableDefinitions {
             operationType: OWNERSHIP_TRANSFER,
             operationName: "OWNERSHIP_TRANSFER",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(timeDelayApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: transferOwnershipHandlerForSelectors
         });
         
@@ -209,17 +225,21 @@ library SecureOwnableDefinitions {
             operationType: OWNERSHIP_TRANSFER,
             operationName: "OWNERSHIP_TRANSFER",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(timeDelayCancelActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: transferOwnershipHandlerForSelectors
         });
         
         schemas[9] = EngineBlox.FunctionSchema({
-            functionSignature: "updateBroadcasterRequest(address,uint256)",
+            functionSignature: "updateBroadcasterRequest(address,address)",
             functionSelector: UPDATE_BROADCASTER_REQUEST_SELECTOR,
             operationType: BROADCASTER_UPDATE,
             operationName: "BROADCASTER_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(timeDelayRequestActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: broadcasterHandlerForSelectors
         });
         
@@ -229,7 +249,9 @@ library SecureOwnableDefinitions {
             operationType: BROADCASTER_UPDATE,
             operationName: "BROADCASTER_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(timeDelayApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: broadcasterHandlerForSelectors
         });
         
@@ -239,7 +261,9 @@ library SecureOwnableDefinitions {
             operationType: BROADCASTER_UPDATE,
             operationName: "BROADCASTER_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(timeDelayCancelActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: broadcasterHandlerForSelectors
         });
         
@@ -251,17 +275,21 @@ library SecureOwnableDefinitions {
             operationType: OWNERSHIP_TRANSFER,
             operationName: "OWNERSHIP_TRANSFER",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(executionApproveCancelActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: transferOwnershipExecutionHandlerForSelectors
         });
         
         schemas[13] = EngineBlox.FunctionSchema({
-            functionSignature: "executeBroadcasterUpdate(address,uint256)",
+            functionSignature: "executeBroadcasterUpdate(address,address)",
             functionSelector: UPDATE_BROADCASTER_SELECTOR,
             operationType: BROADCASTER_UPDATE,
             operationName: "BROADCASTER_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(executionApproveCancelActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: broadcasterExecutionHandlerForSelectors
         });
         
@@ -271,7 +299,9 @@ library SecureOwnableDefinitions {
             operationType: RECOVERY_UPDATE,
             operationName: "RECOVERY_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(executionMetaRequestApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: recoveryExecutionHandlerForSelectors
         });
         
@@ -281,7 +311,9 @@ library SecureOwnableDefinitions {
             operationType: TIMELOCK_UPDATE,
             operationName: "TIMELOCK_UPDATE",
             supportedActionsBitmap: EngineBlox.createBitmapFromActions(executionMetaRequestApproveActions),
+            enforceHandlerRelations: true,
             isProtected: true,
+            isGrantRevocable: false,
             handlerForSelectors: timelockExecutionHandlerForSelectors
         });
         

package/package.json

@@ -1,49 +1,51 @@
-{
-  "name": "@bloxchain/contracts",
-  "version": "1.0.0-alpha.7",
-  "description": "Library engine for building enterprise grade decentralized permissioned applications",
-  "files": [
-    "core",
-    "abi",
-    "standards",
-    "components",
-    "README.md"
-  ],
-  "scripts": {
-    "prepublishOnly": "node scripts/prepublish-contracts.cjs",
-    "postpublish": "node scripts/postpublish-contracts.cjs"
-  },
-  "keywords": [
-    "bloxchain",
-    "solidity",
-    "ethereum",
-    "smart-contracts",
-    "state-abstraction",
-    "security",
-    "multi-signature",
-    "rbac",
-    "secure-ownership"
-  ],
-  "author": "Particle Crypto Security",
-  "license": "MPL-2.0",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/PracticalParticle/Bloxchain-Protocol.git",
-    "directory": "package"
-  },
-  "homepage": "https://bloxchain.app/",
-  "bugs": {
-    "url": "https://github.com/PracticalParticle/Bloxchain-Protocol/issues",
-    "email": "security@particlecs.com"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "dependencies": {
-    "@openzeppelin/contracts": "^5.4.0",
-    "@openzeppelin/contracts-upgradeable": "^5.4.0"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  }
-}
+{
+  "name": "@bloxchain/contracts",
+  "version": "1.0.0",
+  "description": "Library engine for building enterprise grade decentralized permissioned applications",
+  "files": [
+    "core",
+    "abi",
+    "standards",
+    "components",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "prepublishOnly": "node scripts/prepublish-contracts.cjs",
+    "postpublish": "node scripts/postpublish-contracts.cjs",
+    "prepare:deps": "npm install"
+  },
+  "keywords": [
+    "bloxchain",
+    "solidity",
+    "ethereum",
+    "smart-contracts",
+    "state-abstraction",
+    "security",
+    "multi-signature",
+    "rbac",
+    "secure-ownership"
+  ],
+  "author": "Particle Crypto Security",
+  "license": "MPL-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/PracticalParticle/Bloxchain-Protocol.git",
+    "directory": "package"
+  },
+  "homepage": "https://bloxchain.app/",
+  "bugs": {
+    "url": "https://github.com/PracticalParticle/Bloxchain-Protocol/issues",
+    "email": "security@particlecs.com"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@openzeppelin/contracts": "5.6.1",
+    "@openzeppelin/contracts-upgradeable": "5.6.1"
+  },
+  "engines": {
+    "node": ">=18.20.5"
+  }
+}

package/standards/behavior/ICopyable.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MPL-2.0
-pragma solidity 0.8.33;
+pragma solidity 0.8.35;
 
 /**
  * @title ICopyable
@@ -7,13 +7,11 @@ pragma solidity 0.8.33;
  *
  * Bloxes implementing this interface can be cloned by factory patterns (e.g. CopyBlox,
  * FactoryBlox) and initialized in one call with owner/broadcaster/recovery/timelock/
- * eventForwarder plus arbitrary init data, or have clone-specific data set via
- * setCloneData.
+ * eventForwarder plus arbitrary init data, or have clone-specific data set
  *
  * Use cases:
  * - Clone and init in one step: factory calls initializeWithData(..., initData).
- * - Clone with standard init then set clone data: factory calls initialize(...)
- *   then the deployer or factory calls setCloneData(initData).
+ * - Clone with standard init then set clone data: factory calls initializeWithData(...)
  */
 interface ICopyable {
     /**
@@ -33,10 +31,4 @@ interface ICopyable {
         address eventForwarder,
         bytes calldata initData
     ) external;
-
-    /**
-     * @dev Initialize or set clone-specific data (e.g. after a minimal proxy is deployed).
-     * @param initData Custom data for this clone; semantics are defined by the implementer
-     */
-    function setCloneData(bytes calldata initData) external;
 }

package/standards/hooks/IOnActionHook.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MPL-2.0
-pragma solidity 0.8.33;
+pragma solidity 0.8.35;
 
 import "../../core/lib/EngineBlox.sol";