@rootzero/contracts 0.9.5 → 0.9.6

package/Events.sol

@@ -6,21 +6,20 @@ pragma solidity ^0.8.33;
 
 import { AccessEvent } from "./events/Access.sol";
 import { AdminEvent } from "./events/Admin.sol";
-import { AssetEvent } from "./events/Asset.sol";
+import { AssetStatusEvent } from "./events/Asset.sol";
 import { BalanceEvent } from "./events/Balance.sol";
 import { CollateralEvent } from "./events/Collateral.sol";
 import { CommandEvent } from "./events/Command.sol";
+import { Contexts } from "./events/Contexts.sol";
 import { DebtEvent } from "./events/Debt.sol";
-import { DepositEvent } from "./events/Deposit.sol";
-import { AssetPositionEvent } from "./events/Position.sol";
+import { PositionEvent } from "./events/Position.sol";
+import { ReceivedEvent } from "./events/Received.sol";
 import { EventEmitter } from "./events/Emitter.sol";
 import { IntroductionEvent } from "./events/Introduction.sol";
-import { ListingEvent } from "./events/Listing.sol";
 import { PeerEvent } from "./events/Peer.sol";
 import { QueryEvent } from "./events/Query.sol";
 import { RootedEvent } from "./events/Rooted.sol";
-import { SwapEvent } from "./events/Swap.sol";
-import { WithdrawalEvent } from "./events/Withdraw.sol";
+import { SpentEvent } from "./events/Spent.sol";
 
 
 

package/Queries.sol

@@ -4,7 +4,7 @@ pragma solidity ^0.8.33;
 // Aggregator: re-exports query abstractions and reusable query bases.
 // Import this file to build rootzero query contracts without managing individual paths.
 
-import { IsAllowedAsset, IsAllowedAssetHook } from "./queries/Assets.sol";
+import { AssetStatus, AssetStatusHook } from "./queries/Assets.sol";
 import { GetPosition, GetPositionHook } from "./queries/Positions.sol";
 import { GetBalances, GetBalancesHook } from "./queries/Balances.sol";
 import { QueryBase, encodeQueryCall } from "./queries/Base.sol";

package/blocks/Cursors.sol

@@ -531,21 +531,19 @@ library Cursors {
         return createBlock(Keys.Context, bytes.concat(account, toBytesBlock(state), toBytesBlock(request)));
     }
 
-    /// @notice Encode a RELAY block.
-    /// @param target Command target identifier.
-    /// @param value Native value assigned to the relay.
+    /// @notice Encode a PIPE block.
+    /// @param value Native value assigned to the pipe.
     /// @param account Command account identifier.
     /// @param state Embedded state block stream.
     /// @param request Embedded request block stream.
-    /// @return Encoded RELAY block bytes.
-    function toRelayBlock(
-        uint target,
+    /// @return Encoded PIPE block bytes.
+    function toPipeBlock(
         uint value,
         bytes32 account,
         bytes memory state,
         bytes memory request
     ) internal pure returns (bytes memory) {
-        return createBlock(Keys.Relay, bytes.concat(bytes32(target), bytes32(value), toContextBlock(account, state, request)));
+        return createBlock(Keys.Pipe, bytes.concat(bytes32(value), toContextBlock(account, state, request)));
     }
 
     // -------------------------------------------------------------------------
@@ -1112,18 +1110,16 @@ library Cursors {
         cur.exit(end);
     }
 
-    /// @notice Consume a RELAY block and return its target, value, and context fields.
+    /// @notice Consume a PIPE block and return its value and context fields.
     /// @param cur Cursor; advanced past the block.
-    /// @return target Destination command/node ID.
-    /// @return value Native value assigned to the relay.
+    /// @return value Native value assigned to the pipe.
     /// @return account Command account identifier.
     /// @return state Embedded state block stream.
     /// @return request Embedded request block stream.
-    function unpackRelay(
+    function unpackPipe(
         Cur memory cur
-    ) internal pure returns (uint target, uint value, bytes32 account, bytes calldata state, bytes calldata request) {
-        uint end = cur.enter(Keys.Relay, 64 + Sizes.Header + 32 + 2 * Sizes.Header, 0);
-        target = uint(cur.read32());
+    ) internal pure returns (uint value, bytes32 account, bytes calldata state, bytes calldata request) {
+        uint end = cur.enter(Keys.Pipe, 32 + Sizes.Header + 32 + 2 * Sizes.Header, 0);
         value = uint(cur.read32());
         (account, state, request) = cur.unpackContext();
         cur.exit(end);

package/blocks/Keys.sol

@@ -43,8 +43,8 @@ library Keys {
     bytes4 constant Call = bytes4(keccak256("#call"));
     /// @dev Command context transport - (bytes32 account, #bytes as state, #bytes as request)
     bytes4 constant Context = bytes4(keccak256("#context"));
-    /// @dev Pipeline relay - (uint target, uint value, #context)
-    bytes4 constant Relay = bytes4(keccak256("#relay"));
+    /// @dev Pipeline invocation - (uint value, #context)
+    bytes4 constant Pipe = bytes4(keccak256("#pipe"));
     /// @dev Authentication proof - (uint cid, uint deadline, #bytes as proof); must appear last in its segment
     bytes4 constant Auth = bytes4(keccak256("#auth"));
     /// @dev Asset descriptor without amount - (bytes32 asset, bytes32 meta)
@@ -54,7 +54,7 @@ library Keys {
     /// @dev Relayer bounty - (uint amount, bytes32 relayer)
     bytes4 constant Bounty = bytes4(keccak256("#bounty"));
 
-    /// @dev Structural status form - (bool ok)
+    /// @dev Structural status form - (uint code)
     bytes4 constant Status = bytes4(keccak256("#status"));
     /// @dev Structural asset amount form - (bytes32 asset, bytes32 meta, uint amount)
     bytes4 constant AssetAmount = bytes4(keccak256("#assetAmount"));

package/blocks/Schema.sol

@@ -60,7 +60,7 @@ library Schemas {
     string constant Allowance = "#allowance { uint host, bytes32 asset, bytes32 meta, uint amount }";
     string constant Transaction = "#transaction { bytes32 from, bytes32 to, bytes32 asset, bytes32 meta, uint amount }";
     string constant Context = "#context { bytes32 account, #bytes as state, #bytes as request }";
-    string constant Relay = "#relay { uint target, uint value, #context { bytes32 account, #bytes as state, #bytes as request } }";
+    string constant Pipe = "#pipe { uint value, #context { bytes32 account, #bytes as state, #bytes as request } }";
     string constant Call = "#call { uint target, uint value, #bytes as payload }";
     string constant Step = "#step { uint target, uint value, #bytes as request }";
     string constant Bounty = "#bounty { uint amount, bytes32 relayer }";
@@ -76,7 +76,7 @@ library Schemas {
 /// @notice Reusable structural block schemas for core tuple shapes.
 /// These describe payload form without assigning command or query semantics.
 library Forms {
-    string constant Status = "#status { bool ok }";
+    string constant Status = "#status { uint code }";
     string constant AssetAmount = "#assetAmount { bytes32 asset, bytes32 meta, uint amount }";
     string constant AccountAsset = "#accountAsset { bytes32 account, bytes32 asset, bytes32 meta }";
     string constant AccountAmount = "#accountAmount { bytes32 account, bytes32 asset, bytes32 meta, uint amount }";
@@ -107,8 +107,8 @@ library Sizes {
     uint constant Proof = 85;
     /// @dev AUTH block: 8 header + 32 cid + 32 deadline + nested BYTES block with 85-byte proof = 165 bytes
     uint constant Auth = B64 + Header + Proof;
-    /// @dev STATUS block: 8 header + 1 bool byte = 9 bytes
-    uint constant Status = Header + 1;
+    /// @dev STATUS block: 8 header + 32 status code = 40 bytes
+    uint constant Status = B32;
     /// @dev AMOUNT block: 8 header + 32 asset + 32 meta + 32 amount = 104 bytes
     uint constant Amount = B96;
     /// @dev BALANCE block: 8 header + 32 asset + 32 meta + 32 amount = 104 bytes

package/blocks/Writers.sol

@@ -27,7 +27,7 @@ library Hints {
     uint constant Step = 256;
     uint constant Call = 256;
     uint constant Context = 512;
-    uint constant Relay = 640;
+    uint constant Pipe = 608;
 }
 
 /// @title Writers
@@ -224,12 +224,12 @@ library Writers {
         return allocFromHint(count, Hints.Context);
     }
 
-    /// @notice Allocate a writer for `count` RELAY blocks using a per-block capacity hint.
-    /// @dev The backing buffer expands automatically if encoded relays exceed the initial hint.
-    /// @param count Number of relay blocks to allocate space for.
+    /// @notice Allocate a writer for `count` PIPE blocks using a per-block capacity hint.
+    /// @dev The backing buffer expands automatically if encoded pipes exceed the initial hint.
+    /// @param count Number of pipe blocks to allocate space for.
     /// @return writer Allocated growable writer.
-    function allocRelays(uint count) internal pure returns (Writer memory writer) {
-        return allocFromHint(count, Hints.Relay);
+    function allocPipes(uint count) internal pure returns (Writer memory writer) {
+        return allocFromHint(count, Hints.Pipe);
     }
 
     // -------------------------------------------------------------------------
@@ -889,40 +889,37 @@ library Writers {
         appendBlock32BytesBytes(writer, Keys.Context, account, state, request);
     }
 
-    /// @notice Append a RELAY block with a nested CONTEXT block.
-    /// @param writer Destination writer; `i` is advanced by the encoded RELAY block length.
-    /// @param target Command target identifier.
-    /// @param value Native value assigned to the relay.
+    /// @notice Append a PIPE block with a nested CONTEXT block.
+    /// @param writer Destination writer; `i` is advanced by the encoded PIPE block length.
+    /// @param value Native value assigned to the pipe.
     /// @param account Command account identifier.
     /// @param state Raw nested state payload.
     /// @param request Raw nested request payload.
-    function appendRelay(
+    function appendPipe(
         Writer memory writer,
-        uint target,
         uint value,
         bytes32 account,
         bytes memory state,
         bytes memory request
     ) internal pure {
         uint i = writer.i;
-        uint len = 96 + 3 * Sizes.Header + state.length + request.length;
+        uint len = 64 + 3 * Sizes.Header + state.length + request.length;
         uint next = i + Sizes.Header + len;
         i = reserve(writer, next, next);
 
-        uint p = writeHeader(writer.dst, i, Keys.Relay, uint32(max32(len)));
+        uint p = writeHeader(writer.dst, i, Keys.Pipe, uint32(max32(len)));
         assembly ("memory-safe") {
-            mstore(add(p, 0x08), target)
-            mstore(add(p, 0x28), value)
+            mstore(add(p, 0x08), value)
         }
 
-        writeBlock32BytesBytes(writer.dst, i + Sizes.Header + 64, Keys.Context, account, state, request);
+        writeBlock32BytesBytes(writer.dst, i + Sizes.Header + 32, Keys.Context, account, state, request);
     }
 
     /// @notice Append a STATUS form block.
     /// @param writer Destination writer; `i` is advanced by `Sizes.Status`.
-    /// @param ok Status value to encode.
-    function appendStatus(Writer memory writer, bool ok) internal pure {
-        appendBlock32(writer, Keys.Status, ok ? bytes32(uint(1) << 248) : bytes32(0), 1);
+    /// @param code Status code to encode.
+    function appendStatus(Writer memory writer, uint code) internal pure {
+        appendBlock32(writer, Keys.Status, bytes32(code), 32);
     }
 
     /// @notice Append a BALANCE block using separate field values.

package/core/Host.sol

@@ -6,6 +6,7 @@ import {Authorize} from "../commands/admin/Authorize.sol";
 import {Unauthorize} from "../commands/admin/Unauthorize.sol";
 import {ExecutePayable} from "../commands/admin/Execute.sol";
 import {IntroductionEvent} from "../events/Introduction.sol";
+import {Ids} from "../utils/Ids.sol";
 
 /// @title IHostIntroduction
 /// @notice Interface implemented by hosts that accept introductions from other hosts.
@@ -35,13 +36,13 @@ abstract contract Host is Authorize, Unauthorize, ExecutePayable, IntroductionEv
     }
 
     /// @notice Record a host introduction claim.
-    /// @dev This event is informational only; it does not authorize or trust the introduced host.
+    /// @dev Validates that `peer` matches `msg.sender`; it does not authorize or trust the introduced host.
     /// @param peer Host node ID being introduced.
     /// @param blocknum Block number at which the host was deployed.
     /// @param version Protocol version the host implements.
     /// @param namespace Human-readable namespace string for the host.
     function introduce(uint peer, uint blocknum, uint16 version, string calldata namespace) external {
-        emit Introduction(peer, blocknum, version, namespace);
+        emit Introduction(Ids.matchHost(peer, msg.sender), blocknum, version, namespace);
     }
 
     /// @notice Accept native ETH transfers (e.g. from command value flows).

package/docs/Schema.md

@@ -58,7 +58,7 @@ Once a child block appears, no more fixed fields may follow.
 ```txt
 #call { uint target, uint value, #bytes as payload }
 #context { bytes32 account, #bytes as state, #bytes as request }
-#relay { uint target, uint value, #context { bytes32 account, #bytes as state, #bytes as request } }
+#pipe { uint value, #context { bytes32 account, #bytes as state, #bytes as request } }
 ```
 
 The tail is embedded directly as child block bytes. There is no wrapper around a
@@ -189,7 +189,7 @@ Common protocol schemas live in `contracts/blocks/Schema.sol`:
 #call { uint target, uint value, #bytes as payload }
 #step { uint target, uint value, #bytes as request }
 #context { bytes32 account, #bytes as state, #bytes as request }
-#relay { uint target, uint value, #context { bytes32 account, #bytes as state, #bytes as request } }
+#pipe { uint value, #context { bytes32 account, #bytes as state, #bytes as request } }
 #auth { uint cid, uint deadline, #bytes as proof }
 ```
 

package/events/Access.sol

@@ -3,10 +3,10 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Access(uint indexed host, uint node, bool trusted)";
-
 /// @notice Emitted when a node's authorization status changes on a host.
 abstract contract AccessEvent is EventEmitter {
+    string private constant ABI = "event Access(uint indexed host, uint node, bool trusted)";
+
     /// @param host Host node ID where the authorization change occurred.
     /// @param node Node ID that was authorized or deauthorized.
     /// @param trusted True if the node was authorized, false if deauthorized.

package/events/Admin.sol

@@ -3,11 +3,11 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI =
-    "event Admin(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool acceptsValue)";
-
 /// @notice Emitted once per admin command during host deployment to publish its request schema and state keys.
 abstract contract AdminEvent is EventEmitter {
+    string private constant ABI =
+        "event Admin(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool acceptsValue)";
+
     /// @param host Host node ID that owns this admin command.
     /// @param id Command node ID.
     /// @param name Human-readable command name.

package/events/Asset.sol

@@ -3,14 +3,15 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Asset(uint indexed host, bytes32 name, uint32 prefix)";
+/// @notice Emitted when an asset support status is updated on a host.
+abstract contract AssetStatusEvent is EventEmitter {
+    string private constant ABI = "event AssetStatus(uint indexed host, bytes32 asset, bytes32 meta, uint status)";
 
-/// @notice Emitted when an asset is registered or updated on a host.
-abstract contract AssetEvent is EventEmitter {
-    /// @param host Host node ID that registered the asset.
-    /// @param name Asset name encoded as a bytes32 string.
-    /// @param prefix 4-byte type prefix of the asset ID.
-    event Asset(uint indexed host, bytes32 name, uint32 prefix);
+    /// @param host Host node ID that manages this listing.
+    /// @param asset Asset identifier.
+    /// @param meta Asset metadata slot.
+    /// @param status Asset support status. Zero means unsupported; nonzero means supported.
+    event AssetStatus(uint indexed host, bytes32 asset, bytes32 meta, uint status);
 
     constructor() {
         emit EventAbi(ABI);

package/events/Balance.sol

@@ -3,10 +3,10 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Balance(bytes32 indexed account, bytes32 asset, bytes32 meta, uint balance, int change, uint access)";
-
 /// @notice Emitted when an account balance changes.
 abstract contract BalanceEvent is EventEmitter {
+    string private constant ABI = "event Balance(bytes32 indexed account, bytes32 asset, bytes32 meta, uint balance, int change, uint access)";
+
     /// @param account Account identifier whose balance changed.
     /// @param asset Asset identifier.
     /// @param meta Asset metadata slot.

package/events/Collateral.sol

@@ -3,11 +3,11 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Collateral(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint access)";
-
 /// @notice Emitted when an account's collateral position changes.
 /// Off-chain indexers should query the access command to retrieve the precise collateral details.
 abstract contract CollateralEvent is EventEmitter {
+    string private constant ABI = "event Collateral(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint access)";
+
     /// @param account Account identifier that holds the collateral.
     /// @param asset Asset identifier of the collateral.
     /// @param meta Asset metadata slot.

package/events/Command.sol

@@ -3,11 +3,11 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI =
-    "event Command(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool acceptsValue)";
-
 /// @notice Emitted once per command during host deployment to publish its request schema and state keys.
 abstract contract CommandEvent is EventEmitter {
+    string private constant ABI =
+        "event Command(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool acceptsValue)";
+
     /// @param host Host node ID that owns this command.
     /// @param id Command node ID.
     /// @param name Human-readable command name.

package/events/Contexts.sol

@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+/// @notice Standard context codes for generic asset activity events.
+library Contexts {
+    uint constant Deposit = 1;
+    uint constant Withdraw = 2;
+    uint constant Fee = 3;
+    uint constant Mint = 4;
+    uint constant Burn = 5;
+    uint constant Swap = 6;
+}

package/events/Debt.sol

@@ -3,11 +3,11 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Debt(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint mode, uint access)";
-
 /// @notice Emitted when an account's debt position changes.
 /// Off-chain indexers should query the access command to retrieve precise debt details.
 abstract contract DebtEvent is EventEmitter {
+    string private constant ABI = "event Debt(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint mode, uint access)";
+
     /// @param account Account identifier that holds the debt.
     /// @param asset Asset identifier of the debt.
     /// @param meta Asset metadata slot.

package/events/Introduction.sol

@@ -3,10 +3,10 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Introduction(uint indexed host, uint blocknum, uint16 version, string namespace)";
-
 /// @notice Emitted when a host introduces itself to another host.
 abstract contract IntroductionEvent is EventEmitter {
+    string private constant ABI = "event Introduction(uint indexed host, uint blocknum, uint16 version, string namespace)";
+
     /// @param host Host node ID of the introducing contract.
     /// @param blocknum Block number at which the host was deployed.
     /// @param version Protocol version the host implements.

package/events/Peer.sol

@@ -1,13 +1,13 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import { EventEmitter } from "./Emitter.sol";
-
-string constant ABI =
-    "event Peer(uint indexed host, uint id, string name, bytes32 shape, string request, string response, bool acceptsValue)";
+import {EventEmitter} from "./Emitter.sol";
 
 /// @notice Emitted once per peer during host deployment to publish its request and response schemas.
 abstract contract PeerEvent is EventEmitter {
+    string private constant ABI =
+        "event Peer(uint indexed host, uint id, string name, bytes32 shape, string request, string response, bool acceptsValue)";
+
     /// @param host Host node ID that owns this peer.
     /// @param id Peer node ID.
     /// @param name Human-readable peer name.
@@ -15,12 +15,17 @@ abstract contract PeerEvent is EventEmitter {
     /// @param request Schema DSL string describing the peer request shape.
     /// @param response Schema DSL string describing the peer response shape.
     /// @param acceptsValue Whether the peer entrypoint accepts nonzero `msg.value`.
-    event Peer(uint indexed host, uint id, string name, bytes32 shape, string request, string response, bool acceptsValue);
+    event Peer(
+        uint indexed host,
+        uint id,
+        string name,
+        bytes32 shape,
+        string request,
+        string response,
+        bool acceptsValue
+    );
 
     constructor() {
         emit EventAbi(ABI);
     }
 }
-
-
-

package/events/Position.sol

@@ -3,17 +3,17 @@ pragma solidity ^0.8.33;
 
 import {EventEmitter} from "./Emitter.sol";
 
-string constant ABI = "event AssetPosition(bytes32 indexed account, bytes32 asset, bytes32 meta, uint value, uint queryId)";
-
 /// @notice Emitted when the reported value of an asset-backed position changes or is observed.
 /// A value of 0 should be interpreted as a closed position.
-abstract contract AssetPositionEvent is EventEmitter {
+abstract contract PositionEvent is EventEmitter {
+    string private constant ABI = "event Position(bytes32 indexed account, bytes32 asset, bytes32 meta, uint value, uint queryId)";
+
     /// @param account Account identifier that owns or is associated with the position.
     /// @param asset Asset identifier for the asset class.
     /// @param meta Asset metadata slot carrying the position context.
     /// @param value Context-specific position value; 0 indicates a closed position.
     /// @param queryId Query ID associated with the position lookup or reporting context.
-    event AssetPosition(bytes32 indexed account, bytes32 asset, bytes32 meta, uint value, uint queryId);
+    event Position(bytes32 indexed account, bytes32 asset, bytes32 meta, uint value, uint queryId);
 
     constructor() {
         emit EventAbi(ABI);

package/events/Query.sol

@@ -3,10 +3,10 @@ pragma solidity ^0.8.33;
 
 import {EventEmitter} from "./Emitter.sol";
 
-string constant ABI = "event Query(uint indexed host, uint id, string name, bytes32 shape, string request, string response)";
-
 /// @notice Emitted once per query during host deployment to publish its request and response schemas.
 abstract contract QueryEvent is EventEmitter {
+    string private constant ABI = "event Query(uint indexed host, uint id, string name, bytes32 shape, string request, string response)";
+
     /// @param host Host node ID that owns this query.
     /// @param id Query node ID.
     /// @param name Human-readable query name.

package/events/Received.sol

@@ -0,0 +1,20 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import { EventEmitter } from "./Emitter.sol";
+
+/// @notice Emitted when an account receives an asset in a protocol operation.
+abstract contract ReceivedEvent is EventEmitter {
+    string private constant ABI = "event Received(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint context)";
+
+    /// @param account Account identifier that received the asset.
+    /// @param asset Asset identifier.
+    /// @param meta Asset metadata slot.
+    /// @param amount Amount received.
+    /// @param context Operation context identifier associated with this receipt.
+    event Received(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint context);
+
+    constructor() {
+        emit EventAbi(ABI);
+    }
+}

package/events/Rooted.sol

@@ -3,10 +3,10 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
-string constant ABI = "event Rooted(bytes32 indexed account, uint deadline, uint value)";
-
 /// @notice Emitted for root-level protocol actions (e.g. governance or protocol-wide operations).
 abstract contract RootedEvent is EventEmitter {
+    string private constant ABI = "event Rooted(bytes32 indexed account, uint deadline, uint value)";
+
     /// @param account Account identifier associated with the action.
     /// @param deadline Expiry timestamp of the action.
     /// @param value Native value associated with the action.

package/events/Spent.sol

@@ -0,0 +1,20 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import { EventEmitter } from "./Emitter.sol";
+
+/// @notice Emitted when an account spends an asset in a protocol operation.
+abstract contract SpentEvent is EventEmitter {
+    string private constant ABI = "event Spent(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint context)";
+
+    /// @param account Account identifier that spent the asset.
+    /// @param asset Asset identifier.
+    /// @param meta Asset metadata slot.
+    /// @param amount Amount spent.
+    /// @param context Operation context identifier associated with this spend.
+    event Spent(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint context);
+
+    constructor() {
+        emit EventAbi(ABI);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rootzero/contracts",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "description": "Solidity contracts and protocol building blocks for rootzero hosts and commands.",
   "private": false,
   "license": "GPL-3.0-only",

package/peer/Pipe.sol

@@ -9,26 +9,26 @@ import {Budget} from "../utils/Value.sol";
 using Cursors for Cur;
 
 /// @title PeerPipePayable
-/// @notice Peer that consumes RELAY blocks and executes each context request as a STEP stream.
-/// Each RELAY block carries a value budget plus a CONTEXT block; the relay target is ignored
-/// and the nested context request is passed to the shared pipeline as the step stream.
+/// @notice Peer that consumes PIPE blocks and executes each context request as a STEP stream.
+/// Each PIPE block carries a value budget plus a CONTEXT block; the nested
+/// context request is passed to the shared pipeline as the step stream.
 abstract contract PeerPipePayable is PeerBase, Pipeline {
     string private constant NAME = "peerPipePayable";
     uint internal immutable peerPipePayableId = peerId(NAME);
 
     constructor() {
-        emit Peer(host, peerPipePayableId, NAME, "1:0", Schemas.Relay, "", true);
+        emit Peer(host, peerPipePayableId, NAME, "1:0", Schemas.Pipe, "", true);
     }
 
-    /// @notice Execute peer-supplied relays through the shared payable pipe.
-    /// @dev Each relay receives its own explicit value sub-budget. Any top-level
-    ///      `msg.value` not assigned to a relay remains on this host.
+    /// @notice Execute peer-supplied pipes through the shared payable pipe.
+    /// @dev Each pipe receives its own explicit value sub-budget. Any top-level
+    ///      `msg.value` not assigned to a pipe remains on this host.
     function peerPipePayable(bytes calldata request) external payable onlyPeer returns (bytes memory) {
         (Cur memory input, ) = cursor(request, 1);
         Budget memory budget = valueBudget();
 
         while (input.i < input.bound) {
-            (, uint value, bytes32 account, bytes calldata state, bytes calldata steps) = input.unpackRelay();
+            (uint value, bytes32 account, bytes calldata state, bytes calldata steps) = input.unpackPipe();
             pipe(account, state, steps, allocateValue(budget, value));
         }
 

package/queries/Assets.sol

@@ -8,38 +8,38 @@ import {QueryBase} from "./Base.sol";
 using Cursors for Cur;
 using Writers for Writer;
 
-abstract contract IsAllowedAssetHook {
-    /// @notice Resolve whether one asset tuple is allowed.
-    /// Concrete implementations define the allowlist policy.
+abstract contract AssetStatusHook {
+    /// @notice Resolve support status for one asset tuple.
+    /// Concrete implementations define the support policy and optional context codes.
     /// @param asset Requested asset identifier.
     /// @param meta Requested asset metadata slot.
-    /// @return allowed Whether the asset tuple is allowed.
-    function isAllowedAsset(bytes32 asset, bytes32 meta) internal view virtual returns (bool allowed);
+    /// @return status Asset support status. Zero means unsupported; nonzero means supported.
+    function assetStatus(bytes32 asset, bytes32 meta) internal view virtual returns (uint status);
 }
 
-/// @title IsAllowedAsset
-/// @notice Rootzero query that checks whether one or more `(asset, meta)` tuples are allowed.
+/// @title AssetStatus
+/// @notice Rootzero query that checks support status for one or more `(asset, meta)` tuples.
 /// The request is a run of `ASSET` blocks.
 /// The response returns one `STATUS` form block per query entry, preserving request order.
-abstract contract IsAllowedAsset is QueryBase, IsAllowedAssetHook {
-    string private constant NAME = "isAllowedAsset";
-    uint public immutable isAllowedAssetId = queryId(NAME);
+abstract contract AssetStatus is QueryBase, AssetStatusHook {
+    string private constant NAME = "assetStatus";
+    uint public immutable assetStatusId = queryId(NAME);
 
     constructor() {
-        emit Query(host, isAllowedAssetId, NAME, "1:1", Schemas.Asset, Forms.Status);
+        emit Query(host, assetStatusId, NAME, "1:1", Schemas.Asset, Forms.Status);
     }
 
-    /// @notice Resolve allowlist status for a run of requested `(asset, meta)` tuples.
+    /// @notice Resolve asset support status for a run of requested `(asset, meta)` tuples.
     /// @param request Block-stream request consisting of `#asset { bytes32 asset, bytes32 meta }` blocks.
-    /// @return Block-stream response containing one `#status { bool ok }` per asset block.
-    function isAllowedAsset(bytes calldata request) external view returns (bytes memory) {
+    /// @return Block-stream response containing one `#status { uint code }` per asset block.
+    function assetStatus(bytes calldata request) external view returns (bytes memory) {
         (Cur memory query, uint groups) = cursor(request, 1);
         Writer memory response = Writers.allocStatuses(groups);
 
         while (query.i < query.bound) {
             (bytes32 asset, bytes32 meta) = query.unpackAsset();
-            bool allowed = isAllowedAsset(asset, meta);
-            response.appendStatus(allowed);
+            uint status = assetStatus(asset, meta);
+            response.appendStatus(status);
         }
 
         query.close();

package/utils/Assets.sol

@@ -17,6 +17,8 @@ import {matchesBase, toLocalBase} from "./Utils.sol";
 library Assets {
     /// @dev Thrown when an asset ID does not match the expected type or chain.
     error InvalidAsset();
+    /// @dev Thrown when an asset is not authorized for the requested operation.
+    error UnauthorizedAsset();
 
     /// @dev Full 4-byte type prefix for the native value asset.
     uint32 constant Value = (uint32(Layout.Evm32) << 16) | (uint32(Layout.Asset) << 8) | uint32(Layout.Value);

package/events/Deposit.sol

@@ -1,22 +0,0 @@
-// SPDX-License-Identifier: GPL-3.0-only
-pragma solidity ^0.8.33;
-
-import { EventEmitter } from "./Emitter.sol";
-
-string constant ABI = "event Deposit(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount)";
-
-/// @notice Emitted when assets are deposited into an account.
-abstract contract DepositEvent is EventEmitter {
-    /// @param account Destination account identifier.
-    /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
-    /// @param amount Amount deposited.
-    event Deposit(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount);
-
-    constructor() {
-        emit EventAbi(ABI);
-    }
-}
-
-
-

package/events/Listing.sol

@@ -1,22 +0,0 @@
-// SPDX-License-Identifier: GPL-3.0-only
-pragma solidity ^0.8.33;
-
-import { EventEmitter } from "./Emitter.sol";
-
-string constant ABI = "event Listing(uint indexed host, bytes32 asset, bytes32 meta, bool active)";
-
-/// @notice Emitted when an asset listing is updated on a host.
-abstract contract ListingEvent is EventEmitter {
-    /// @param host Host node ID that manages this listing.
-    /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
-    /// @param active True if the listing is currently active.
-    event Listing(uint indexed host, bytes32 asset, bytes32 meta, bool active);
-
-    constructor() {
-        emit EventAbi(ABI);
-    }
-}
-
-
-

package/events/Swap.sol

@@ -1,20 +0,0 @@
-// SPDX-License-Identifier: GPL-3.0-only
-pragma solidity ^0.8.33;
-
-import { EventEmitter } from "./Emitter.sol";
-
-string constant ABI = "event Swap(bytes32 indexed account, bytes32 assetIn, uint amountIn, bytes32 assetOut, uint amountOut)";
-
-/// @notice Emitted when an account swaps one asset for another.
-abstract contract SwapEvent is EventEmitter {
-    /// @param account Account identifier performing the swap.
-    /// @param assetIn Input asset identifier.
-    /// @param amountIn Input amount spent.
-    /// @param assetOut Output asset identifier.
-    /// @param amountOut Output amount received.
-    event Swap(bytes32 indexed account, bytes32 assetIn, uint amountIn, bytes32 assetOut, uint amountOut);
-
-    constructor() {
-        emit EventAbi(ABI);
-    }
-}

package/events/Withdraw.sol

@@ -1,22 +0,0 @@
-// SPDX-License-Identifier: GPL-3.0-only
-pragma solidity ^0.8.33;
-
-import { EventEmitter } from "./Emitter.sol";
-
-string constant ABI = "event Withdrawal(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount)";
-
-/// @notice Emitted when assets are withdrawn from an account.
-abstract contract WithdrawalEvent is EventEmitter {
-    /// @param account Source account identifier.
-    /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
-    /// @param amount Amount withdrawn.
-    event Withdrawal(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount);
-
-    constructor() {
-        emit EventAbi(ABI);
-    }
-}
-
-
-