@coti-io/coti-contracts 1.3.0 → 1.3.1

package/contracts/mocks/utils/mpc/MpcOperationsTestContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 
@@ -234,7 +234,7 @@ contract MpcOperationsTestContract {
         gtUint256 gtB = MpcCore.validateCiphertext(b);
         
         gtBool result = MpcCore.eq(gtA, gtB);
-        gtUint256 resultAsUint = MpcCore.mux(result, MpcCore.setPublic256(1), MpcCore.setPublic256(0));
+        gtUint256 resultAsUint = MpcCore.mux(result, MpcCore.setPublic256(uint256(1)), MpcCore.setPublic256(uint256(0)));
         
         ctUint256 memory ctResult = MpcCore.offBoardToUser(resultAsUint, user);
         
@@ -256,7 +256,7 @@ contract MpcOperationsTestContract {
         gtUint256 gtB = MpcCore.validateCiphertext(b);
         
         gtBool result = MpcCore.gt(gtA, gtB);
-        gtUint256 resultAsUint = MpcCore.mux(result, MpcCore.setPublic256(1), MpcCore.setPublic256(0));
+        gtUint256 resultAsUint = MpcCore.mux(result, MpcCore.setPublic256(uint256(1)), MpcCore.setPublic256(uint256(0)));
         
         ctUint256 memory ctResult = MpcCore.offBoardToUser(resultAsUint, user);
         
@@ -278,7 +278,7 @@ contract MpcOperationsTestContract {
         gtUint256 gtB = MpcCore.validateCiphertext(b);
         
         gtBool result = MpcCore.lt(gtA, gtB);
-        gtUint256 resultAsUint = MpcCore.mux(result, MpcCore.setPublic256(1), MpcCore.setPublic256(0));
+        gtUint256 resultAsUint = MpcCore.mux(result, MpcCore.setPublic256(uint256(1)), MpcCore.setPublic256(uint256(0)));
         
         ctUint256 memory ctResult = MpcCore.offBoardToUser(resultAsUint, user);
         

package/contracts/mocks/utils/mpc/Mux128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/Mux256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/OffboardToUserKeyTestContract.sol

@@ -1,6 +1,6 @@
 
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/OnBoard128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/OnBoard256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/PrivacyImplementationV1.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/PrivacyImplementationV2.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/PrivacyProxy.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 /**
  * @title PrivacyProxy

package/contracts/mocks/utils/mpc/Random128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/Random256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/Shift128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/Shift256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/ShiftTestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/StringTestsContract.sol

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: MIT
 
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/Transfer128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/Transfer256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferScalarTestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferTestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowance128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowance256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowance64_16TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowance64_32TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowance64_64TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowance64_8TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowanceScalarTestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/TransferWithAllowanceTestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/ValidateCiphertext128TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/utils/mpc/ValidateCiphertext256TestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 
@@ -51,7 +51,7 @@ contract ValidateCiphertext256TestsContract {
         gtUint256 validatedValue = MpcCore.validateCiphertext(input);
         
         // Add 1 to the value
-        gtUint256 one = MpcCore.setPublic256(1);
+        gtUint256 one = MpcCore.setPublic256(uint256(1));
         gtUint256 result = MpcCore.add(validatedValue, one);
         
         // Decrypt and return

package/contracts/mocks/utils/mpc/ValidateCiphertextTestsContract.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../utils/mpc/MpcCore.sol";
 

package/contracts/mocks/wallet/PrivateERC20Wallet/PrivateERC20WalletMock.sol

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: MIT
 
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../../../token/PrivateERC20/IPrivateERC20.sol";
 import "../../../utils/mpc/MpcCore.sol";

package/contracts/node/CotiNodeRewards.sol

@@ -1,8 +1,8 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";
-import {ReentrancyGuard} from "@openzeppelin/contracts/security/ReentrancyGuard.sol";
+import {ReentrancyGuard} from "@openzeppelin/contracts/utils/ReentrancyGuard.sol";
 
 /**
  * @title CotiNodeRewards
@@ -59,7 +59,7 @@ contract CotiNodeRewards is Ownable, ReentrancyGuard {
     error AlreadyRewardedInEpoch(address wallet, uint256 epoch);
     error InvalidEpoch(uint256 epoch);
 
-    constructor() Ownable() {
+    constructor() Ownable(msg.sender) {
         eligibilityRules[RULE_PLATFORM_COTI_AMOUNT] = 100_000 * 10**DECIMALS_COTI;   // 100k COTI
         eligibilityRules[RULE_PLATFORM_USDC_AMOUNT] = 50_000 * 10**DECIMALS_USDC;    // 50k USDC
         eligibilityRules[RULE_FULL_NODE_UPTIME_PERCENTAGE_THRESHOLD] = 98;          // 98%

package/contracts/node/SoulboundNodeNFT.sol

@@ -121,8 +121,7 @@ contract SoulboundNodeNFT is ERC721, Ownable, IERC5192 {
         string memory name_,
         string memory symbol_,
         address initialOwner
-    ) ERC721(name_, symbol_) {
-        _transferOwnership(initialOwner);
+    ) ERC721(name_, symbol_) Ownable(initialOwner) {
         mintPaused = false;
     }
 

package/contracts/onboard/AccountOnboard.sol

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: MIT
 
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 import "../utils/mpc/MpcCore.sol";
 

package/contracts/oracle/ICotiPriceConsumer.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-pragma solidity ^0.8.19;
+pragma solidity ^0.8.20;
 
 /**
  * @title ICotiPriceConsumer

package/contracts/pod/IInbox.sol

@@ -0,0 +1,231 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity ^0.8.20;
+
+/// @title IInbox
+/// @notice Cross-chain request/response inbox: send messages to remote chains, execute incoming calls, and query state.
+/// @dev Fee-related fields on {Request} are **gas unit** budgets, not wei. See {InboxFeeManager}.
+interface IInbox {
+    // --- Types ---
+
+    /// @notice Classification of the current inbox execution when delivering an error callback.
+    /// @dev Used by source `errorSelector` handlers: ignore {NotErrorContext}; branch on {SystemError} vs {Exception}.
+    ///      Call only from `errorSelector` entrypoints — linked success `respond` legs can also report {Exception}.
+    enum InboxErrorType {
+        /// @notice No active message, or the active call is not a linked error/system delivery.
+        NotErrorContext,
+        /// @notice Inbox system-error return leg (`originalSender` is {SYSTEM_SENDER}).
+        SystemError,
+        /// @notice Linked return leg for a request that registered an `errorSelector` (app `raise`).
+        Exception
+    }
+
+    /// @notice Minimal payload for Inbox system-error callbacks (`errorSelector(bytes data)`).
+    /// @dev App `raise` payloads are dApp-defined; decode them only when {inboxErrorType()} is {Exception}.
+    ///      System encode failure uses `errorCode = 2`. Attribution is via {SYSTEM_SENDER} on the return leg.
+    struct ErrorData {
+        uint64 errorCode;
+        bytes message;
+    }
+
+    /// @notice Encoded method call and optional MPC ABI metadata.
+    struct MpcMethodCall {
+        /// @notice Function selector to re-encode with MPC GTs; zero means `data` is raw calldata.
+        bytes4 selector;
+        /// @notice ABI-encoded arguments or raw calldata.
+        bytes data;
+        /// @notice MPC datatype descriptors used by {MpcAbiCodec}.
+        bytes8[] datatypes;
+        /// @notice MPC ciphertext length descriptors used by {MpcAbiCodec}.
+        bytes32[] datalens;
+    }
+
+    /// @notice Stored outbound or incoming cross-chain request.
+    struct Request {
+        /// @notice Packed request id containing source chain id and nonce.
+        bytes32 requestId;
+        /// @notice Destination chain id for outbound requests, or source chain id for incoming requests.
+        uint256 targetChainId;
+        /// @notice Contract invoked on the destination/current chain.
+        address targetContract;
+        /// @notice Method call executed on the target.
+        MpcMethodCall methodCall;
+        /// @notice Immediate caller that submitted the request.
+        address callerContract;
+        /// @notice Application contract that should receive responses/errors.
+        address originalSender;
+        /// @notice Request creation or ingestion timestamp.
+        uint64 timestamp;
+        /// @notice Callback selector used for two-way success responses.
+        bytes4 callbackSelector;
+        /// @notice Error selector invoked with `errorSelector(bytes data)` for app `raise` **or** Inbox system errors.
+        /// @dev Same delivery path. Distinguish with {inboxErrorType()}: {SystemError} ({ErrorData} payload,
+        ///      {SYSTEM_SENDER}) vs {Exception} (dApp-defined `raise` bytes). System errors are not eligible for
+        ///      `retryFailedRequest`. Auth: `onlyInbox` + non-zero {inboxSourceRequestId}.
+        bytes4 errorSelector;
+        /// @notice True when a success response is expected.
+        bool isTwoWay;
+        /// @notice True after an incoming request or linked response has been processed.
+        bool executed;
+        /// @dev If this request is a one-way response or error delivery, links to the original two-way request ID.
+        bytes32 sourceRequestId;
+        /// @dev Gas unit budget for the remote execution leg (`call{gas: ...}` cap). Not wei.
+        uint256 targetFee;
+        /// @dev Gas unit budget for the callback leg on the source chain. Not wei.
+        uint256 callerFee;
+    }
+
+    /// @notice Response metadata for an incoming request.
+    struct Response {
+        /// @notice Outbound request id that delivered the response.
+        bytes32 responseRequestId;
+        /// @notice Response payload returned by the target contract.
+        bytes response;
+    }
+
+    /// @notice Stored execution or encoding error for a request.
+    struct Error {
+        /// @notice Request id that failed.
+        bytes32 requestId;
+        /// @notice Protocol-defined error code.
+        uint64 errorCode;
+        /// @notice Revert data or encoded error message.
+        bytes errorMessage;
+    }
+
+    /// @notice Active incoming execution context exposed to target contracts.
+    struct ExecutionContext {
+        /// @notice Remote chain that sent the current request.
+        uint256 remoteChainId;
+        /// @notice Remote contract that sent the current request.
+        address remoteContract;
+        /// @notice Current incoming request id.
+        bytes32 requestId;
+    }
+
+    // --- External: sends (payable) ---
+
+    /// @notice Send a two-way message with callback and error handlers on the remote chain.
+    /// @param targetChainId Destination chain ID.
+    /// @param targetContract Contract to call on the destination chain.
+    /// @param methodCall Calldata and MPC metadata.
+    /// @param callbackSelector Selector invoked on the source chain when the remote call succeeds.
+    /// @param errorSelector Selector invoked on the source chain when the remote call fails.
+    /// @param callbackFeeLocalWei Wei from `msg.value` reserved for the callback leg (converted to gas units in fee logic).
+    /// @return requestId The new outbound request ID.
+    function sendTwoWayMessage(
+        uint256 targetChainId,
+        address targetContract,
+        MpcMethodCall calldata methodCall,
+        bytes4 callbackSelector,
+        bytes4 errorSelector,
+        uint256 callbackFeeLocalWei
+    ) external payable returns (bytes32);
+
+    /// @notice Send a one-way message with an error handler only (no callback).
+    /// @param targetChainId Destination chain ID.
+    /// @param targetContract Contract to call on the destination chain.
+    /// @param methodCall Calldata and MPC metadata.
+    /// @param errorSelector Selector invoked on error.
+    /// @return requestId The new outbound request ID.
+    function sendOneWayMessage(
+        uint256 targetChainId,
+        address targetContract,
+        MpcMethodCall calldata methodCall,
+        bytes4 errorSelector
+    ) external payable returns (bytes32);
+
+    // --- External: execution (non-payable) ---
+
+    /// @notice Respond to the current incoming message (two-way flow).
+    /// @dev Gas for the return leg is **not** charged again: it uses the `callerFee` budget from the original two-way request.
+    /// @param data Payload routed to the original sender via `callbackSelector`.
+    function respond(bytes memory data) external;
+
+    /// @notice Signal an application error for the current incoming two-way message (same routing constraints as {respond}).
+    /// @dev Gas for the return leg is **not** charged again: it uses the `callerFee` budget from the original two-way request.
+    /// @param data ABI-encoded argument for the remote `errorSelector(bytes)`.
+    function raise(bytes memory data) external;
+
+    // --- External: views ---
+
+    /// @notice Return error details for a failed outgoing request.
+    /// @param requestId Outbound request ID.
+    /// @return code Error code.
+    /// @return message Error message or revert data.
+    function getOutboxError(bytes32 requestId) external view returns (uint256 code, string memory message);
+
+    /// @notice Return stored response bytes for a completed incoming flow.
+    /// @param requestId Incoming request ID.
+    /// @return response Response payload.
+    function getInboxResponse(bytes32 requestId) external view returns (bytes memory);
+
+    /// @notice Return a slice of outbound requests sent to `targetChainId`, in per-target nonce order.
+    /// @param targetChainId Destination chain whose outbound requests to read.
+    /// @param from Start index (0-based) within that target's sequence.
+    /// @param len Maximum number of requests to return.
+    /// @return requestsList Request structs.
+    function getRequests(uint256 targetChainId, uint256 from, uint256 len)
+        external
+        view
+        returns (Request[] memory);
+
+    /// @notice Total count of outbound requests issued from this inbox to `targetChainId`.
+    /// @param targetChainId Destination chain.
+    /// @return count Number of requests to that target.
+    function getRequestsLen(uint256 targetChainId) external view returns (uint256);
+
+    /// @notice Look up a stored outbound request by its id (id encodes source+target+nonce).
+    /// @param requestId Outbound request id.
+    /// @return request The stored request (zeroed if unknown).
+    function getRequest(bytes32 requestId) external view returns (Request memory);
+
+    /// @notice Look up a stored incoming request by its id (id encodes the source chain).
+    /// @param requestId Incoming request id.
+    /// @return request The stored incoming request (zeroed if unknown).
+    function getIncomingRequest(bytes32 requestId) external view returns (Request memory);
+
+    /// @notice Remote chain ID and contract for the currently executing incoming message.
+    /// @dev For system-error return legs, `contractAddress` is {SYSTEM_SENDER}. Success callbacks still
+    ///      come from the real remote peer; error callbacks should not require peer equality.
+    /// @return chainId Remote chain ID.
+    /// @return contractAddress Remote caller contract (or {SYSTEM_SENDER} for Inbox system errors).
+    function inboxMsgSender() external view returns (uint256 chainId, address contractAddress);
+
+    /// @notice Request ID for the currently executing incoming message.
+    /// @return requestId Active request ID.
+    function inboxRequestId() external view returns (bytes32);
+
+    /// @notice Source request ID linked from the current incoming message (if any).
+    /// @dev Non-zero only for reply/error legs created by {respond}, {raise}, or system-error delivery.
+    ///      Public {sendOneWayMessage}/{sendTwoWayMessage} always use `sourceRequestId = 0`.
+    /// @return sourceRequestId Linked request ID.
+    function inboxSourceRequestId() external view returns (bytes32);
+
+    /// @notice Whether the current execution is delivering a system error, an app `raise`, or neither.
+    /// @dev Safe to call outside an active message (returns {InboxErrorType.NotErrorContext}). Prefer this over
+    ///      requiring `inboxMsgSender()` peer equality in error handlers.
+    /// @return errorType {InboxErrorType} for the active context.
+    function inboxErrorType() external view returns (InboxErrorType errorType);
+
+    // --- External: pure ---
+
+    /// @notice Pack source chain id (64 bits), target chain id (64 bits) and nonce (128 bits) into a request id.
+    /// @param sourceChainId Originating chain id.
+    /// @param targetChainId Destination chain id.
+    /// @param nonce Per-target nonce.
+    /// @return requestId 256-bit packed id.
+    function getRequestId(uint256 sourceChainId, uint256 targetChainId, uint256 nonce)
+        external
+        pure
+        returns (bytes32);
+
+    /// @notice Split a packed request id into source chain id, target chain id and nonce.
+    /// @param requestId Packed id.
+    /// @return sourceChainId Source chain id.
+    /// @return targetChainId Target chain id.
+    /// @return nonce Per-target nonce.
+    function unpackRequestId(bytes32 requestId)
+        external
+        pure
+        returns (uint256 sourceChainId, uint256 targetChainId, uint256 nonce);
+}

package/contracts/pod/IInboxMiner.sol

@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity ^0.8.20;
+
+import "./IInbox.sol";
+
+/// @title IInboxMiner
+/// @notice Miner API: apply mined cross-chain payloads to this chain's inbox and withdraw fees.
+interface IInboxMiner {
+    error RetryFailedRequestNotAFailedRequest();
+    error RequestIdRequired();
+    error RetryFailedRequestExecutionFailed(bytes returnData);
+    /// @notice The `sourceChainId` passed to {batchProcessRequests} is this chain's own id.
+    error SourceChainIsThisChain(uint256 chainId);
+    /// @notice A mined request's encoded source chain does not match the batch `sourceChainId`.
+    error RequestSourceChainMismatch(bytes32 requestId, uint256 expectedSourceChainId, uint256 actualSourceChainId);
+    /// @notice A mined request's encoded target chain is not this chain.
+    error RequestTargetChainMismatch(bytes32 requestId, uint256 expectedTargetChainId, uint256 actualTargetChainId);
+    /// @notice Inbound message processing is paused (circuit breaker).
+    error MessageProcessingPaused();
+
+    /// @notice Emitted when {retryFailedRequest} successfully re-executes a previously failed incoming request.
+    event RetryFailedRequestSuccess(bytes32 indexed requestId);
+    /// @notice Emitted when the owner toggles the message-processing circuit breaker.
+    event MessageProcessingPausedUpdated(bool paused);
+
+    /// @notice Mined inbound request. `targetFee` and `callerFee` are gas unit budgets (see {IInbox.Request}).
+    struct MinedRequest {
+        bytes32 requestId;
+        address sourceContract;
+        address targetContract;
+        IInbox.MpcMethodCall methodCall;
+        bytes4 callbackSelector;
+        bytes4 errorSelector;
+        bool isTwoWay;
+        bytes32 sourceRequestId;
+        uint256 targetFee;
+        uint256 callerFee;
+    }
+
+    /// @notice Validate and execute a batch of mined requests from `sourceChainId`.
+    /// @param sourceChainId Chain that produced the mined data.
+    /// @param mined Ordered requests to apply.
+    function batchProcessRequests(uint256 sourceChainId, MinedRequest[] memory mined) external;
+
+    /// @notice Withdraw accumulated native token fees to `to` (owner-only in concrete implementations).
+    function collectFees(address payable to) external;
+
+    /// @notice Pause or unpause inbound message processing (owner-only circuit breaker).
+    function setMessageProcessingPaused(bool paused) external;
+
+    /// @notice Re-execute a mined incoming request whose target call failed (e.g. OOG). Open to any payer for gas.
+    function retryFailedRequest(bytes32 requestId) external;
+}