@rev-net/core-v6 0.0.47 → 0.0.48

package/CHANGELOG.md

@@ -9,11 +9,9 @@ This file describes the verified change from `revnet-core-v5` to the current `re
 - `REVDeployer`
 - `REVOwner`
 - `REVLoans`
-- `REVHiddenTokens`
 - `IREVDeployer`
 - `IREVOwner`
 - `IREVLoans`
-- `IREVHiddenTokens`
 
 ## Summary
 
@@ -23,15 +21,12 @@ This file describes the verified change from `revnet-core-v5` to the current `re
 - The v6 test tree is substantially broader than the v5 tree, with dedicated regression, fork, attack, and invariant coverage for loans, cash-outs, split weights, and lifecycle edges.
 - The repo moved from the v5 `0.8.23` baseline to `0.8.28`.
 
-## Operator delegation (permission IDs 35–39)
+## Operator delegation
 
-- Added five new `JBPermissionIds` for operator delegation in `@bananapus/permission-ids-v6`:
-  - `HIDE_TOKENS` (35) — lets an authorized operator allow or disallow holders to hide their own tokens via `REVHiddenTokens`
-  - `OPEN_LOAN` (36) — open a loan on behalf of a token holder via `REVLoans.borrowFrom`
-  - `REALLOCATE_LOAN` (37) — reallocate loan collateral on behalf of a loan owner via `REVLoans.reallocateCollateralFromLoan`
-  - `REPAY_LOAN` (38) — repay a loan on behalf of a loan owner via `REVLoans.repayLoan`
-  - `REVEAL_TOKENS` (39) — legacy permission id; hidden-token reveal no longer depends on it
-- `REVHiddenTokens` now inherits `JBPermissioned` and accepts a `holder` parameter on `hideTokensOf` and `revealTokensOf`. Hiding is available to an operator-managed holder allowlist, and also to the project owner or any operator with `HIDE_TOKENS`. Revealing is holder-only and does not require special permission.
+- Added new `JBPermissionIds` for operator delegation in `@bananapus/permission-ids-v6`:
+  - `OPEN_LOAN` — open a loan on behalf of a token holder via `REVLoans.borrowFrom`
+  - `REALLOCATE_LOAN` — reallocate loan collateral on behalf of a loan owner via `REVLoans.reallocateCollateralFromLoan`
+  - `REPAY_LOAN` — repay a loan on behalf of a loan owner via `REVLoans.repayLoan`
 - `REVLoans.borrowFrom` now accepts a `holder` parameter. The loan NFT is minted to `holder`, and collateral is burned from `holder`. An operator with `OPEN_LOAN` permission can borrow on behalf of a holder.
 - `REVLoans.repayLoan` now allows permissioned operators with `REPAY_LOAN` to repay on behalf of the loan NFT owner. Replacement loans are minted to the original loan owner.
 - `REVLoans.reallocateCollateralFromLoan` now allows permissioned operators with `REALLOCATE_LOAN` to reallocate on behalf of the loan NFT owner. Returned collateral and replacement loans go to the original loan owner.
@@ -39,11 +34,6 @@ This file describes the verified change from `revnet-core-v5` to the current `re
 
 ### Breaking ABI changes from delegation
 
-- `IREVHiddenTokens.hideTokensOf` signature changed: added `address holder` parameter
-- `IREVHiddenTokens.revealTokensOf` signature changed: added `address holder` parameter
-- `IREVHiddenTokens.setTokenHidingAllowedFor` added for operator-managed holder allowlisting
-- `IREVHiddenTokens.HideTokens` event: added `address holder` field
-- `IREVHiddenTokens.RevealTokens` event: added `address holder` field
 - `IREVLoans.borrowFrom` signature changed: added `address holder` as last parameter
 
 ## Verified deltas
@@ -52,8 +42,6 @@ This file describes the verified change from `revnet-core-v5` to the current `re
 - `IREVDeployer.deployFor(...)` now has overloads that return `(uint256, IJB721TiersHook)`.
 - `IREVDeployer.BUYBACK_HOOK()`, `LOANS()`, and `OWNER()` are explicit v6 surface area.
 - `IREVOwner` is a new interface and runtime counterpart to the deployer.
-- `IREVHiddenTokens` is a new interface for temporary token hiding (burn to exclude from live totalSupply, re-mint on reveal).
-- `REVHiddenTokens` is a new standalone contract that lets holders temporarily hide tokens from visible/governance supply while `REVOwner` and `REVLoans` keep hidden balances in economic denominators.
 - The old caller-supplied `REVBuybackHookConfig` path is no longer part of the deployer interface.
 
 ## Breaking ABI changes

package/README.md

@@ -1,6 +1,6 @@
 # Revnet Core
 
-`@rev-net/core-v6` deploys and operates Revnets: Juicebox project shapes with staged economics, optional tiered NFTs, cross-chain support, buyback integration, hidden-token mechanics, and token-collateralized loans.
+`@rev-net/core-v6` deploys and operates Revnets: Juicebox project shapes with staged economics, optional tiered NFTs, cross-chain support, buyback integration, and token-collateralized loans.
 
 Docs: <https://docs.juicebox.money>
 Architecture: [ARCHITECTURE.md](./ARCHITECTURE.md)  
@@ -19,8 +19,6 @@ This package provides:
 - a deployer that launches Revnets and stores their long-lived configuration
 - a runtime hook that mediates pay, cash-out, mint-permission, and delayed-cash-out behavior
 - a loan system that burns token collateral on borrow and remints on repayment
-- a hidden-token system that temporarily removes tokens from visible supply while preserving economic claim
-  denominators
 
 It also composes with the 721 hook stack, buyback hook, router terminal, Croptop, and suckers where needed.
 
@@ -33,14 +31,12 @@ Use this repo when the product is a treasury-backed network with encoded stage t
 | `REVDeployer` | Launches and configures Revnets, stages, split operators, and optional auxiliary features. |
 | `REVOwner` | Runtime data-hook and cash-out-hook surface used by active Revnets. |
 | `REVLoans` | Loan surface that lets users borrow against Revnet tokens with burned collateral and NFT loan positions. |
-| `REVHiddenTokens` | Lets token holders temporarily hide tokens from visible/governance supply until reveal, while cash-out and loan denominators still count hidden supply. |
-
 ## Mental Model
 
 Read the package in two halves:
 
 1. deployment-time shape: `REVDeployer` decides what the network will be allowed to do
-2. runtime enforcement: `REVOwner`, `REVLoans`, and `REVHiddenTokens` decide how that shape behaves over time
+2. runtime enforcement: `REVOwner` and `REVLoans` decide how that shape behaves over time
 
 Most mistakes come from assuming a deploy-time parameter can be changed later or that a runtime hook is only advisory.
 
@@ -49,8 +45,7 @@ Most mistakes come from assuming a deploy-time parameter can be changed later or
 1. `src/REVDeployer.sol`
 2. `src/REVOwner.sol`
 3. `src/REVLoans.sol`
-4. `src/REVHiddenTokens.sol`
-5. the integrated hook or bridge repo used by the deployment
+4. the integrated hook or bridge repo used by the deployment
 
 ## Integration Traps
 
@@ -64,8 +59,6 @@ Most mistakes come from assuming a deploy-time parameter can be changed later or
 - deployment-time configuration and operator envelope live in `REVDeployer`
 - runtime pay and cash-out behavior live in `REVOwner`
 - loan positions and loan-specific state live in `REVLoans`
-- hidden-token state lives in `REVHiddenTokens`
-
 ## High-Signal Tests
 
 1. `test/REVLifecycle.t.sol`
@@ -104,7 +97,6 @@ src/
   REVDeployer.sol
   REVOwner.sol
   REVLoans.sol
-  REVHiddenTokens.sol
   interfaces/
   structs/
 test/
@@ -124,5 +116,5 @@ script/
 ## For AI Agents
 
 - Describe Revnets as treasury-backed Juicebox project shapes with encoded stage transitions, not as simple presets.
-- Read `REVDeployer`, `REVOwner`, `REVLoans`, and `REVHiddenTokens` together before answering economic or admin-surface questions.
+- Read `REVDeployer`, `REVOwner`, and `REVLoans` together before answering economic or admin-surface questions.
 - If a deployment enables buybacks, 721 hooks, or suckers, inspect those sibling repos before making definitive claims.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rev-net/core-v6",
-  "version": "0.0.47",
+  "version": "0.0.48",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -30,7 +30,7 @@
     "@bananapus/buyback-hook-v6": "^0.0.39",
     "@bananapus/core-v6": "^0.0.44",
     "@bananapus/ownable-v6": "^0.0.24",
-    "@bananapus/permission-ids-v6": "^0.0.23",
+    "@bananapus/permission-ids-v6": "^0.0.24",
     "@bananapus/router-terminal-v6": "^0.0.37",
     "@bananapus/suckers-v6": "^0.0.37",
     "@croptop/core-v6": "^0.0.42",

package/references/operations.md

@@ -143,8 +143,6 @@ Use this file when you need revnet-specific risks, state reads, constants, or ex
 19. **39.16% cash-out tax crossover.** Below ~39% cash-out tax, cashing out is more capital-efficient than borrowing. Above ~39%, loans become more efficient because they preserve upside while providing liquidity. Based on CryptoEconLab academic research. Design implication: revnets intended for active token trading should consider this threshold when setting `cashOutTaxRate`.
 20. **REVDeployer always deploys a 721 hook** via `HOOK_DEPLOYER.deployHookFor` — even if `baseline721HookConfiguration` has empty tiers. This is correct by design: it lets the split operator add and sell NFTs later without migration. Non-revnet projects should follow the same pattern by using `JB721TiersHookProjectDeployer.launchProjectFor` (or `JBOmnichainDeployer.launchProjectFor`) instead of bare `launchProjectFor`.
 21. **REVOwner deployer binding is precomputed.** REVOwner records the account that created it as an internal one-time binder. That account must call `setDeployer(precomputedRevDeployerAddress)` exactly once before the canonical REVDeployer is deployed. This avoids an ambient public initializer while keeping the circular dependency manageable. If `setDeployer(...)` is never called, all DEPLOYER-gated runtime configuration breaks.
-22. **Hidden tokens are economic, not cosmetic.** Hiding burns visible tokens and lowers visible/governance supply until reveal. Cash-out and loan denominators still include hidden balances because they are recoverable claims.
-
 ### NATIVE_TOKEN Accounting on Non-ETH Chains
 
 When deploying to a chain where the native token is NOT ETH (Celo, Polygon), the terminal must NOT use `JBConstants.NATIVE_TOKEN` as its accounting context. `NATIVE_TOKEN` represents whatever is native on that chain, but `baseCurrency=1` (ETH) assumes ETH-denominated value.
@@ -199,12 +197,6 @@ Quick-reference for common read operations. All functions are `view`/`pure` and
 |------|------|---------|
 | Remaining auto-issuance for beneficiary | `REVDeployer.amountToAutoIssue(revnetId, stageId, beneficiary)` | `uint256` (0 if already claimed) |
 
-### Hidden Tokens
-
-| What | Call | Returns |
-|------|------|---------|
-| Hidden balance for holder | `REVHiddenTokens.hiddenBalanceOf(holder, revnetId)` | `uint256` |
-
 ### Loans
 
 | What | Call | Returns |

package/references/runtime.md

@@ -13,7 +13,6 @@ Deploy and manage Revnets -- autonomous, unowned Juicebox projects with staged i
 | `REVDeployer` | Deploys revnets, permanently owns the project NFT. Manages stages, splits, auto-issuance, buyback hooks, suckers, split operators, and configuration state storage. Exposes `OWNER()` view returning the REVOwner address. Calls DEPLOYER-restricted setters on REVOwner during deployment to store `cashOutDelayOf` and `tiered721HookOf`. |
 | `REVOwner` | Runtime hook contract for all revnets. Implements `IJBRulesetDataHook` + `IJBCashOutHook`. Set as the `dataHook` in each revnet's ruleset metadata. Handles pay hooks, cash-out hooks, mint permissions, and sucker verification. Stores `cashOutDelayOf` and `tiered721HookOf` mappings (set by REVDeployer via DEPLOYER-restricted setters `setCashOutDelayOf()` and `setTiered721HookOf()`). |
 | `REVLoans` | Issues token-collateralized loans from revnet treasuries. Each loan is an ERC-721 NFT. Burns collateral on borrow, re-mints on repay. Charges tiered fees (REV protocol fee + source fee + prepaid fee). |
-| `REVHiddenTokens` | Burns tokens into a hidden balance and can later re-mint them. This is a supply-management primitive, not just a wallet convenience feature. |
 
 ## Key Functions
 
@@ -67,8 +66,6 @@ Deploy and manage Revnets -- autonomous, unowned Juicebox projects with staged i
 | `REVLoans.loanOf(loanId)` | Returns the full `REVLoan` struct for a loan. |
 | `REVLoans.loanSourcesOf(revnetId)` | Returns all `(terminal, token)` pairs used for loans by a revnet. |
 | `REVLoans.revnetIdOfLoanWith(loanId)` | Decode the revnet ID from a loan ID (`loanId / 1_000_000_000_000`). |
-| `REVHiddenTokens.hiddenBalanceOf(holder, revnetId)` | Returns how many tokens a holder has hidden from visible supply. |
-
 ## Integration Points
 
 | Dependency | Import | Used For |
@@ -98,10 +95,3 @@ Deploy and manage Revnets -- autonomous, unowned Juicebox projects with staged i
 | `REV721TiersHookFlags` | `noNewTiersWithReserves`, `noNewTiersWithVotes`, `noNewTiersWithOwnerMinting`, `preventOverspending` | Same as `JB721TiersHookFlags` minus `issueTokensForSplits`. Revnets do their own weight adjustment for splits. |
 | `REVCroptopAllowedPost` | `category` (uint24), `minimumPrice` (uint104), `minimumTotalSupply` (uint32), `maximumTotalSupply` (uint32), `allowedAddresses[]` | Croptop posting criteria |
 | `REVSuckerDeploymentConfig` | `deployerConfigurations[]`, `salt` | Cross-chain sucker deployment |
-### Hidden Tokens
-
-| Function | Permissions | What it does |
-|----------|------------|-------------|
-| `REVHiddenTokens.hideTokensOf(revnetId, tokenCount, holder)` | Holder only. The holder must either be allowlisted or personally hold `HIDE_TOKENS`. | Burns visible tokens, increases hidden balance, and lowers visible supply. Cash-out and loan denominators still include the hidden balance while it is revealable. |
-| `REVHiddenTokens.revealTokensOf(revnetId, tokenCount, holder)` | Holder only | Re-mints previously hidden tokens back to the holder and reduces hidden balance. |
-| `REVHiddenTokens.setTokenHidingAllowedFor(revnetId, holder, isAllowed)` | Operator with `HIDE_TOKENS` | Allows or revokes a holder's ability to hide their own tokens. |

package/script/Deploy.s.sol

@@ -37,7 +37,6 @@ import {REVConfig} from "../src/structs/REVConfig.sol";
 import {REVDescription} from "../src/structs/REVDescription.sol";
 import {REVStageConfig} from "../src/structs/REVStageConfig.sol";
 import {REVSuckerDeploymentConfig} from "../src/structs/REVSuckerDeploymentConfig.sol";
-import {REVHiddenTokens} from "./../src/REVHiddenTokens.sol";
 import {REVLoans} from "./../src/REVLoans.sol";
 import {REVDeploy721TiersHookConfig} from "../src/structs/REVDeploy721TiersHookConfig.sol";
 import {REVCroptopAllowedPost} from "../src/structs/REVCroptopAllowedPost.sol";
@@ -94,8 +93,6 @@ contract DeployScript is Script, Sphinx {
     // forge-lint: disable-next-line(mixed-case-variable)
     bytes32 REVLOANS_SALT = "_REV_LOANS_SALT_V6_";
     // forge-lint: disable-next-line(mixed-case-variable)
-    bytes32 REVHIDDENTOKENS_SALT = "_REV_HIDDEN_TOKENS_SALT_V6_";
-    // forge-lint: disable-next-line(mixed-case-variable)
     bytes32 REVOWNER_SALT = "_REV_OWNER_SALT_V6_";
     // forge-lint: disable-next-line(mixed-case-variable)
     address LOANS_OWNER;
@@ -376,13 +373,10 @@ contract DeployScript is Script, Sphinx {
 
         // Try to find an existing deployment by checking all project IDs that have already been created.
         bool _revloansExists;
-        bool _revHiddenTokensExists;
         bool _revOwnerExists;
         bool _revDeployerExists;
         // The address of the previously deployed REVLoans, if found.
         address _existingRevloansAddr;
-        // The address of the previously deployed REVHiddenTokens, if found.
-        address _existingHiddenTokensAddr;
         // The address of the previously deployed REVOwner, if found.
         address _existingOwnerAddr;
         // The address of the previously deployed REVDeployer, if found.
@@ -407,13 +401,6 @@ contract DeployScript is Script, Sphinx {
                     _existingRevloansAddr = _candidateRevloansAddr;
                     _revloansExists = true;
 
-                    // Also predict and verify the hidden tokens contract.
-                    (_existingHiddenTokensAddr, _revHiddenTokensExists) = _isDeployed({
-                        salt: REVHIDDENTOKENS_SALT,
-                        creationCode: type(REVHiddenTokens).creationCode,
-                        arguments: abi.encode(core.controller, TRUSTED_FORWARDER)
-                    });
-
                     // Also predict and verify the owner.
                     (_existingOwnerAddr, _revOwnerExists) = _isDeployed({
                         salt: REVOWNER_SALT,
@@ -424,7 +411,6 @@ contract DeployScript is Script, Sphinx {
                             _candidateId,
                             suckers.registry,
                             _candidateRevloansAddr,
-                            _existingHiddenTokensAddr,
                             msg.sender
                         )
                     });
@@ -483,13 +469,6 @@ contract DeployScript is Script, Sphinx {
                 trustedForwarder: TRUSTED_FORWARDER
             });
 
-        // Deploy REVHiddenTokens — allows revnet holders to temporarily hide tokens from totalSupply.
-        REVHiddenTokens revHiddenTokens = _revHiddenTokensExists
-            ? REVHiddenTokens(_existingHiddenTokensAddr)
-            : new REVHiddenTokens{salt: REVHIDDENTOKENS_SALT}({
-                controller: core.controller, trustedForwarder: TRUSTED_FORWARDER
-            });
-
         // Deploy REVOwner — the runtime data hook that handles pay and cash out callbacks.
         REVOwner revOwner = _revOwnerExists
             ? REVOwner(_existingOwnerAddr)
@@ -499,7 +478,6 @@ contract DeployScript is Script, Sphinx {
                 feeRevnetId: FEE_PROJECT_ID,
                 suckerRegistry: suckers.registry,
                 loans: revloans,
-                hiddenTokens: revHiddenTokens,
                 deployerBinder: msg.sender
             });
 

package/src/REVDeployer.sol

@@ -372,7 +372,7 @@ contract REVDeployer is ERC2771Context, IREVDeployer, IERC721Receiver {
         uint256[] memory customSplitOperatorPermissionIndexes = _extraOperatorPermissions[revnetId];
 
         // Make the array that merges the default and custom operator permissions.
-        allOperatorPermissions = new uint256[](10 + customSplitOperatorPermissionIndexes.length);
+        allOperatorPermissions = new uint256[](9 + customSplitOperatorPermissionIndexes.length);
         allOperatorPermissions[0] = JBPermissionIds.SET_SPLIT_GROUPS;
         allOperatorPermissions[1] = JBPermissionIds.SET_BUYBACK_POOL;
         allOperatorPermissions[2] = JBPermissionIds.SET_BUYBACK_TWAP;
@@ -382,11 +382,10 @@ contract REVDeployer is ERC2771Context, IREVDeployer, IERC721Receiver {
         allOperatorPermissions[6] = JBPermissionIds.SET_ROUTER_TERMINAL;
         allOperatorPermissions[7] = JBPermissionIds.SET_TOKEN_METADATA;
         allOperatorPermissions[8] = JBPermissionIds.SIGN_FOR_ERC20;
-        allOperatorPermissions[9] = JBPermissionIds.HIDE_TOKENS;
 
         // Copy the custom permissions into the array.
         for (uint256 i; i < customSplitOperatorPermissionIndexes.length;) {
-            allOperatorPermissions[10 + i] = customSplitOperatorPermissionIndexes[i];
+            allOperatorPermissions[9 + i] = customSplitOperatorPermissionIndexes[i];
             unchecked {
                 ++i;
             }

package/src/REVOwner.sol

@@ -24,7 +24,6 @@ import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol
 import {mulDiv} from "@prb/math/src/Common.sol";
 
 import {IREVDeployer} from "./interfaces/IREVDeployer.sol";
-import {IREVHiddenTokens} from "./interfaces/IREVHiddenTokens.sol";
 import {IREVLoans} from "./interfaces/IREVLoans.sol";
 import {REVLoanSource} from "./structs/REVLoanSource.sol";
 
@@ -69,9 +68,6 @@ contract REVOwner is IJBRulesetDataHook, IJBCashOutHook, IJBPeerChainAdjustedAcc
     /// @notice The Juicebox project ID of the revnet that receives cash out fees.
     uint256 public immutable FEE_REVNET_ID;
 
-    /// @notice The hidden tokens contract used by all revnets.
-    IREVHiddenTokens public immutable HIDDEN_TOKENS;
-
     /// @notice The loan contract used by all revnets.
     IREVLoans public immutable LOANS;
 
@@ -111,7 +107,6 @@ contract REVOwner is IJBRulesetDataHook, IJBCashOutHook, IJBPeerChainAdjustedAcc
     /// @param feeRevnetId The Juicebox project ID of the fee revnet.
     /// @param suckerRegistry The sucker registry.
     /// @param loans The loan contract.
-    /// @param hiddenTokens The hidden tokens contract.
     /// @param deployerBinder The account allowed to bind the canonical deployer via `setDeployer`. Passed explicitly
     /// because CREATE2 deployments set `msg.sender` to the factory, not the intended operator.
     constructor(
@@ -120,7 +115,6 @@ contract REVOwner is IJBRulesetDataHook, IJBCashOutHook, IJBPeerChainAdjustedAcc
         uint256 feeRevnetId,
         IJBSuckerRegistry suckerRegistry,
         IREVLoans loans,
-        IREVHiddenTokens hiddenTokens,
         address deployerBinder
     ) {
         BUYBACK_HOOK = buybackHook;
@@ -128,7 +122,6 @@ contract REVOwner is IJBRulesetDataHook, IJBCashOutHook, IJBPeerChainAdjustedAcc
         FEE_REVNET_ID = feeRevnetId;
         SUCKER_REGISTRY = suckerRegistry;
         LOANS = loans;
-        HIDDEN_TOKENS = hiddenTokens;
         _DEPLOYER_BINDER = deployerBinder;
     }
 
@@ -359,8 +352,8 @@ contract REVOwner is IJBRulesetDataHook, IJBCashOutHook, IJBPeerChainAdjustedAcc
     }
 
     /// @notice Returns whether an address may mint a revnet's tokens on-demand. Grants permission to: the loans
-    /// contract (re-mints collateral on repayment), hidden tokens contract (re-mints on reveal), buyback hook and its
-    /// delegates (mints tokens from pool swaps), and suckers (mints bridged tokens on the destination chain).
+    /// contract (re-mints collateral on repayment), buyback hook and its delegates (mints tokens from pool swaps),
+    /// and suckers (mints bridged tokens on the destination chain).
     /// @dev Part of `IJBRulesetDataHook`.
     /// @param revnetId The ID of the revnet to check.
     /// @param ruleset The ruleset to check against.
@@ -376,16 +369,14 @@ contract REVOwner is IJBRulesetDataHook, IJBCashOutHook, IJBPeerChainAdjustedAcc
         override
         returns (bool)
     {
-        // The loans contract, hidden tokens contract, buyback hook (and its delegates), and suckers are allowed to mint
-        // the revnet's tokens.
-        return addr == address(LOANS) || addr == address(HIDDEN_TOKENS) || addr == address(BUYBACK_HOOK)
+        // The loans contract, buyback hook (and its delegates), and suckers are allowed to mint the revnet's tokens.
+        return addr == address(LOANS) || addr == address(BUYBACK_HOOK)
             || BUYBACK_HOOK.hasMintPermissionFor({projectId: revnetId, ruleset: ruleset, addr: addr})
             || _isSuckerOf({revnetId: revnetId, addr: addr});
     }
 
     /// @notice Additional revnet accounts that peer-chain snapshots should include.
-    /// @dev Hidden tokens are intentionally excluded. Revnet operators can hide tokens as a security handle without
-    /// changing loan or cash-out math for other holders. Outstanding loan debt is counted as both surplus and balance:
+    /// @dev Outstanding loan debt is counted as both surplus and balance:
     /// it is value owed back to this chain's revnet and should travel to peer snapshots with the collateral supply.
     /// @param revnetId The ID of the revnet to snapshot.
     /// @param decimals The decimals to use for the returned surplus.

package/src/interfaces/IREVOwner.sol

@@ -2,14 +2,9 @@
 pragma solidity ^0.8.0;
 
 import {IREVDeployer} from "./IREVDeployer.sol";
-import {IREVHiddenTokens} from "./IREVHiddenTokens.sol";
 
 /// @notice Interface for the REVOwner contract that handles runtime data hook and cash out hook behavior for revnets.
 interface IREVOwner {
-    /// @notice The hidden tokens contract used by the revnet owner hook.
-    /// @return The hidden tokens contract.
-    function HIDDEN_TOKENS() external view returns (IREVHiddenTokens);
-
     /// @notice The timestamp of when cashouts will become available to a specific revnet's participants.
     /// @param revnetId The ID of the revnet.
     /// @return The cash out delay timestamp.

package/src/REVHiddenTokens.sol

@@ -1,169 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity 0.8.28;
-
-import {IJBController} from "@bananapus/core-v6/src/interfaces/IJBController.sol";
-import {IJBPermissioned} from "@bananapus/core-v6/src/interfaces/IJBPermissioned.sol";
-import {IJBPermissions} from "@bananapus/core-v6/src/interfaces/IJBPermissions.sol";
-import {IJBProjects} from "@bananapus/core-v6/src/interfaces/IJBProjects.sol";
-import {JBPermissioned} from "@bananapus/core-v6/src/abstract/JBPermissioned.sol";
-import {JBPermissionIds} from "@bananapus/permission-ids-v6/src/JBPermissionIds.sol";
-import {ERC2771Context} from "@openzeppelin/contracts/metatx/ERC2771Context.sol";
-import {Context} from "@openzeppelin/contracts/utils/Context.sol";
-
-import {IREVHiddenTokens} from "./interfaces/IREVHiddenTokens.sol";
-
-/// @notice Allows authorized operators to hide (burn) revnet tokens on behalf of holders, excluding them from
-/// governance weight. Hidden tokens are burned from live circulating supply, but `REVOwner` and `REVLoans` add the
-/// hidden supply back into their economic denominators while those tokens remain revealable.
-/// Hidden tokens can be revealed (re-minted) at any time.
-contract REVHiddenTokens is ERC2771Context, JBPermissioned, IREVHiddenTokens {
-    //*********************************************************************//
-    // --------------------------- custom errors ------------------------- //
-    //*********************************************************************//
-
-    error REVHiddenTokens_InsufficientHiddenBalance(uint256 hiddenBalance, uint256 requested);
-    error REVHiddenTokens_Unauthorized(uint256 revnetId, address caller);
-
-    //*********************************************************************//
-    // --------------- public immutable stored properties ---------------- //
-    //*********************************************************************//
-
-    /// @notice The controller that manages revnets using this contract.
-    IJBController public immutable override CONTROLLER;
-
-    /// @notice The projects contract used to resolve revnet owners.
-    IJBProjects public immutable PROJECTS;
-
-    //*********************************************************************//
-    // --------------------- public stored properties -------------------- //
-    //*********************************************************************//
-
-    /// @notice The number of tokens a holder has hidden for a given revnet.
-    /// @custom:param holder The address of the token holder.
-    /// @custom:param revnetId The ID of the revnet.
-    mapping(address holder => mapping(uint256 revnetId => uint256 count)) public override hiddenBalanceOf;
-
-    /// @notice The total number of hidden tokens for a revnet.
-    /// @custom:param revnetId The ID of the revnet.
-    mapping(uint256 revnetId => uint256 count) public override totalHiddenOf;
-
-    /// @notice Whether a holder is allowed to hide their own tokens.
-    /// @custom:param holder The holder to check.
-    /// @custom:param revnetId The ID of the revnet.
-    mapping(address holder => mapping(uint256 revnetId => bool isAllowed)) public override tokenHidingIsAllowedFor;
-
-    //*********************************************************************//
-    // -------------------------- constructor ---------------------------- //
-    //*********************************************************************//
-
-    /// @param controller The controller that manages revnets.
-    /// @param trustedForwarder The trusted forwarder for ERC-2771 meta-transactions.
-    constructor(
-        IJBController controller,
-        address trustedForwarder
-    )
-        ERC2771Context(trustedForwarder)
-        JBPermissioned(IJBPermissioned(address(controller)).PERMISSIONS())
-    {
-        CONTROLLER = controller;
-        PROJECTS = controller.PROJECTS();
-    }
-
-    /// @notice Hide tokens by burning them and tracking them for later reveal.
-    /// @dev The caller must be the holder. Hiding is allowed for holders on the operator-managed allowlist,
-    /// and also for holders who are themselves the project owner or an operator with `HIDE_TOKENS`.
-    /// @dev The holder must have granted BURN_TOKENS permission to this contract.
-    /// @param revnetId The ID of the revnet whose tokens to hide.
-    /// @param tokenCount The number of tokens to hide.
-    /// @param holder The address whose tokens to hide.
-    function hideTokensOf(uint256 revnetId, uint256 tokenCount, address holder) external override {
-        address caller = _msgSender();
-        if (caller != holder) revert REVHiddenTokens_Unauthorized(revnetId, caller);
-
-        bool isAllowlistedHolder = tokenHidingIsAllowedFor[holder][revnetId];
-        bool isPermissionedOperator =
-            _hasPermissionFrom(caller, PROJECTS.ownerOf(revnetId), revnetId, JBPermissionIds.HIDE_TOKENS);
-
-        if (!isAllowlistedHolder && !isPermissionedOperator) {
-            revert REVHiddenTokens_Unauthorized({revnetId: revnetId, caller: caller});
-        }
-
-        // Increment the holder's hidden balance.
-        hiddenBalanceOf[holder][revnetId] += tokenCount;
-
-        // Increment the revnet's total hidden count.
-        totalHiddenOf[revnetId] += tokenCount;
-
-        // Burn the tokens from the holder. The holder must have granted BURN_TOKENS permission.
-        CONTROLLER.burnTokensOf({holder: holder, projectId: revnetId, tokenCount: tokenCount, memo: ""});
-
-        emit HideTokens({revnetId: revnetId, tokenCount: tokenCount, holder: holder, caller: _msgSender()});
-    }
-
-    /// @notice Reveal previously hidden tokens by re-minting them.
-    /// @dev Any holder can reveal their own hidden tokens without special permissions.
-    /// Revealed tokens always return to the holder.
-    /// @param revnetId The ID of the revnet whose tokens to reveal.
-    /// @param tokenCount The number of tokens to reveal.
-    /// @param holder The address whose hidden balance to decrement.
-    function revealTokensOf(uint256 revnetId, uint256 tokenCount, address holder) external override {
-        address caller = _msgSender();
-        if (caller != holder) revert REVHiddenTokens_Unauthorized(revnetId, caller);
-
-        uint256 hidden = hiddenBalanceOf[holder][revnetId];
-
-        // Make sure the holder has enough hidden tokens.
-        if (hidden < tokenCount) {
-            revert REVHiddenTokens_InsufficientHiddenBalance({hiddenBalance: hidden, requested: tokenCount});
-        }
-
-        // Decrement the holder's hidden balance.
-        hiddenBalanceOf[holder][revnetId] = hidden - tokenCount;
-
-        // Decrement the revnet's total hidden count.
-        totalHiddenOf[revnetId] -= tokenCount;
-
-        // Mint the tokens to the beneficiary without applying the reserved percent.
-        CONTROLLER.mintTokensOf({
-            projectId: revnetId, tokenCount: tokenCount, beneficiary: holder, memo: "", useReservedPercent: false
-        });
-
-        emit RevealTokens({revnetId: revnetId, tokenCount: tokenCount, holder: holder, caller: _msgSender()});
-    }
-
-    /// @notice Allow or disallow a holder to hide their own tokens.
-    /// @dev The caller must have `HIDE_TOKENS` permission for the revnet.
-    /// @param revnetId The ID of the revnet.
-    /// @param holder The holder to update.
-    /// @param isAllowed Whether the holder should be allowed.
-    function setTokenHidingAllowedFor(uint256 revnetId, address holder, bool isAllowed) external override {
-        _requirePermissionFrom({
-            account: PROJECTS.ownerOf(revnetId), projectId: revnetId, permissionId: JBPermissionIds.HIDE_TOKENS
-        });
-
-        tokenHidingIsAllowedFor[holder][revnetId] = isAllowed;
-
-        emit SetTokenHidingAllowed({revnetId: revnetId, holder: holder, isAllowed: isAllowed});
-    }
-
-    //*********************************************************************//
-    // ------------------------ internal overrides ----------------------- //
-    //*********************************************************************//
-
-    /// @dev Resolve the `_msgSender` conflict between `ERC2771Context` and `Context` (from `JBPermissioned`).
-    /// Prefer the ERC2771 version.
-    function _msgSender() internal view override(ERC2771Context, Context) returns (address) {
-        return ERC2771Context._msgSender();
-    }
-
-    /// @dev Resolve the `_msgData` conflict between `ERC2771Context` and `Context` (from `JBPermissioned`).
-    /// Prefer the ERC2771 version.
-    function _msgData() internal view override(ERC2771Context, Context) returns (bytes calldata) {
-        return ERC2771Context._msgData();
-    }
-
-    /// @dev Resolve the `_contextSuffixLength` conflict between `ERC2771Context` and `Context`.
-    function _contextSuffixLength() internal view override(ERC2771Context, Context) returns (uint256) {
-        return ERC2771Context._contextSuffixLength();
-    }
-}

package/src/interfaces/IREVHiddenTokens.sol

@@ -1,71 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity ^0.8.0;
-
-import {IJBController} from "@bananapus/core-v6/src/interfaces/IJBController.sol";
-
-/// @notice Manages hiding (burning) and revealing (re-minting) revnet tokens to exclude them from live totalSupply.
-/// @dev Hidden balances are an operator-controlled security handle. They remain revealable, but cash-out and loan
-/// accounting intentionally excludes `totalHiddenOf` so hidden inventory cannot dilute other holders' access to
-/// revnet capital.
-interface IREVHiddenTokens {
-    /// @notice Emitted when a holder is allowed or disallowed to hide their own tokens.
-    /// @param revnetId The ID of the revnet.
-    /// @param holder The holder to allow or disallow.
-    /// @param isAllowed Whether the holder is allowed.
-    event SetTokenHidingAllowed(uint256 indexed revnetId, address indexed holder, bool isAllowed);
-
-    /// @notice Emitted when tokens are hidden (burned and tracked for later reveal).
-    /// @param revnetId The ID of the revnet whose tokens were hidden.
-    /// @param tokenCount The number of tokens hidden.
-    /// @param holder The address whose tokens were hidden.
-    /// @param caller The address that hid the tokens.
-    event HideTokens(uint256 indexed revnetId, uint256 tokenCount, address holder, address caller);
-
-    /// @notice Emitted when previously hidden tokens are revealed (re-minted).
-    /// @param revnetId The ID of the revnet whose tokens are revealed.
-    /// @param tokenCount The number of tokens revealed.
-    /// @param holder The address whose hidden balance is decremented.
-    /// @param caller The address that revealed the tokens.
-    event RevealTokens(uint256 indexed revnetId, uint256 tokenCount, address holder, address caller);
-
-    /// @notice The controller that manages revnets using this contract.
-    /// @return The controller contract.
-    function CONTROLLER() external view returns (IJBController);
-
-    /// @notice The number of tokens a holder has hidden for a given revnet.
-    /// @param holder The address of the token holder.
-    /// @param revnetId The ID of the revnet.
-    /// @return The number of hidden tokens.
-    function hiddenBalanceOf(address holder, uint256 revnetId) external view returns (uint256);
-
-    /// @notice The total number of hidden tokens for a revnet.
-    /// @param revnetId The ID of the revnet.
-    /// @return The total hidden token count.
-    function totalHiddenOf(uint256 revnetId) external view returns (uint256);
-
-    /// @notice Whether a holder is allowed to hide their own tokens.
-    /// @param holder The holder to check.
-    /// @param revnetId The ID of the revnet.
-    /// @return Whether the holder is allowed.
-    function tokenHidingIsAllowedFor(address holder, uint256 revnetId) external view returns (bool);
-
-    /// @notice Hide tokens by burning them and tracking them for later reveal.
-    /// @dev The holder must have granted BURN_TOKENS permission to this contract.
-    /// @param revnetId The ID of the revnet whose tokens to hide.
-    /// @param tokenCount The number of tokens to hide.
-    /// @param holder The address whose tokens to hide.
-    function hideTokensOf(uint256 revnetId, uint256 tokenCount, address holder) external;
-
-    /// @notice Reveal previously hidden tokens by re-minting them.
-    /// @param revnetId The ID of the revnet whose tokens to reveal.
-    /// @param tokenCount The number of tokens to reveal.
-    /// @param holder The address whose hidden balance to decrement.
-    function revealTokensOf(uint256 revnetId, uint256 tokenCount, address holder) external;
-
-    /// @notice Allow or disallow a holder to hide their own tokens.
-    /// @dev The caller must have `HIDE_TOKENS` permission for the revnet.
-    /// @param revnetId The ID of the revnet.
-    /// @param holder The holder to update.
-    /// @param isAllowed Whether the holder should be allowed.
-    function setTokenHidingAllowedFor(uint256 revnetId, address holder, bool isAllowed) external;
-}