@rootzero/contracts 0.9.8 → 1.0.0

package/commands/admin/Destroy.sol

@@ -22,14 +22,16 @@ abstract contract Destroy is CommandBase, AdminEvent, DestroyHook {
     uint internal immutable destroyId = commandId(NAME);
 
     constructor(string memory input) {
-        emit Admin(host, destroyId, NAME, "1:0:0", input, Keys.Empty, Keys.Empty, false);
+        emit Admin(host, destroyId, NAME, "1:0:0", input, Keys.Empty, Keys.Empty, false, false);
     }
 
+    /// @notice Run host teardown logic over the full admin request.
+    /// @param c Admin command context; `c.request` is passed through as a cursor.
+    /// @return Empty output state.
     function destroy(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        Cur memory input = cursor(c.request);
-        destroy(input);
+        destroy(Cursors.open(c.request));
         return "";
     }
 }

package/commands/admin/Dismiss.sol

@@ -16,20 +16,23 @@ abstract contract Dismiss is CommandBase, AdminEvent {
     uint internal immutable dismissId = commandId(NAME);
 
     constructor() {
-        emit Admin(host, dismissId, NAME, "1:0:0", Schemas.Account, Keys.Empty, Keys.Empty, false);
+        emit Admin(host, dismissId, NAME, "1:0:0", Schemas.Account, Keys.Empty, Keys.Empty, false, false);
     }
 
+    /// @notice Dismiss each ACCOUNT block in the admin request from guardian status.
+    /// @param c Admin command context; `c.request` must contain ACCOUNT blocks.
+    /// @return Empty output state.
     function dismiss(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, ) = cursor(c.request, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
 
-        while (request.i < request.bound) {
+        while (request.i < request.len) {
             bytes32 account = request.unpackAccount();
             setGuardian(account, false);
         }
 
-        request.close();
+        request.complete();
         return "";
     }
 }

package/commands/admin/Execute.sol

@@ -14,27 +14,30 @@ using Cursors for Cur;
 /// @notice Admin command that forwards raw calldata to one or more target nodes.
 /// Each CALL block specifies a target node ID, native value, and raw calldata payload.
 /// Only callable by the admin account.
+/// Unspent top-level `msg.value` remains on this host.
 abstract contract ExecutePayable is CommandBase, Payable, AdminEvent {
     string private constant NAME = "executePayable";
 
     uint internal immutable executePayableId = commandId(NAME);
 
     constructor() {
-        emit Admin(host, executePayableId, NAME, "1:0:0", Schemas.Call, Keys.Empty, Keys.Empty, true);
+        emit Admin(host, executePayableId, NAME, "1:0:0", Schemas.Call, Keys.Empty, Keys.Empty, false, true);
     }
 
+    /// @notice Execute each CALL block in the admin request.
+    /// @param c Admin command context; `c.request` must contain CALL blocks.
+    /// @return Empty output state.
     function executePayable(CommandContext calldata c) external payable onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, ) = cursor(c.request, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
         Budget memory budget = valueBudget();
 
-        while (request.i < request.bound) {
+        while (request.i < request.len) {
             (uint target, uint value, bytes calldata data) = request.unpackCall();
             address addr = Ids.nodeAddr(target);
             callAddr(addr, useValue(budget, value), data);
         }
 
-        request.close();
-        settleValue(c.account, budget);
+        request.complete();
         return "";
     }
 }

package/commands/admin/Init.sol

@@ -22,14 +22,16 @@ abstract contract Init is CommandBase, AdminEvent, InitHook {
     uint internal immutable initId = commandId(NAME);
 
     constructor(string memory input) {
-        emit Admin(host, initId, NAME, "1:0:0", input, Keys.Empty, Keys.Empty, false);
+        emit Admin(host, initId, NAME, "1:0:0", input, Keys.Empty, Keys.Empty, false, false);
     }
 
+    /// @notice Run host initialization logic over the full admin request.
+    /// @param c Admin command context; `c.request` is passed through as a cursor.
+    /// @return Empty output state.
     function init(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        Cur memory input = cursor(c.request);
-        init(input);
+        init(Cursors.open(c.request));
         return "";
     }
 }

package/commands/admin/Unauthorize.sol

@@ -16,20 +16,23 @@ abstract contract Unauthorize is CommandBase, AdminEvent {
     uint internal immutable unauthorizeId = commandId(NAME);
 
     constructor() {
-        emit Admin(host, unauthorizeId, NAME, "1:0:0", Schemas.Node, Keys.Empty, Keys.Empty, false);
+        emit Admin(host, unauthorizeId, NAME, "1:0:0", Schemas.Node, Keys.Empty, Keys.Empty, false, false);
     }
 
+    /// @notice Unauthorize each NODE block in the admin request.
+    /// @param c Admin command context; `c.request` must contain NODE blocks.
+    /// @return Empty output state.
     function unauthorize(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, ) = cursor(c.request, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
 
-        while (request.i < request.bound) {
+        while (request.i < request.len) {
             uint node = request.unpackNode();
             setNode(node, false);
         }
 
-        request.close();
+        request.complete();
         return "";
     }
 }

package/core/Host.sol

@@ -28,7 +28,16 @@ interface IHostIntroduction {
 /// guardian management, the default guardian revoke action, and
 /// optionally introduces itself to a commander host at deployment.
 /// Accepts native ETH payments via the `receive` function.
-abstract contract Host is Authorize, Unauthorize, Revoke, Appoint, Dismiss, ExecutePayable, IntroductionEvent, IHostIntroduction {
+abstract contract Host is
+    Authorize,
+    Unauthorize,
+    Revoke,
+    Appoint,
+    Dismiss,
+    ExecutePayable,
+    IntroductionEvent,
+    IHostIntroduction
+{
     /// @param cmdr Commander address; passed to `AccessControl`.
     ///        If `cmdr` is a deployed contract, the host calls `introduce`
     ///        on it during construction.

package/core/Pipeline.sol

@@ -10,6 +10,7 @@ using Cursors for Cur;
 /// @title Pipeline
 /// @notice Core pipeline functionality shared by higher-level surfaces.
 abstract contract Pipeline is Payable {
+    /// @dev Thrown when the pipeline finishes with non-empty threaded state.
     error UnexpectedState();
 
     /// @notice Override to dispatch one piped step.
@@ -41,15 +42,15 @@ abstract contract Pipeline is Payable {
         bytes calldata steps,
         Budget memory budget
     ) internal {
-        (Cur memory input, ) = Cursors.init(steps, 1);
+        (Cur memory input, , ) = Cursors.init(steps, 0, 1);
 
-        while (input.i < input.bound) {
+        while (input.i < input.len) {
             (uint target, uint value, bytes calldata request) = input.unpackStep();
             state = dispatch(target, account, state, request, useValue(budget, value));
         }
 
         if (state.length != 0) revert UnexpectedState();
         settleValue(account, budget);
-        input.close();
+        input.complete();
     }
 }

package/core/Runtime.sol

@@ -1,47 +1,14 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import {Cur, Cursors} from "../Cursors.sol";
 import {Assets} from "../utils/Assets.sol";
 import {Ids} from "../utils/Ids.sol";
 
-using Cursors for Cur;
-
 /// @title Runtime
-/// @notice Shared runtime for host identity, native value identity, and block-stream cursors.
+/// @notice Shared runtime for host identity and native asset identity.
 abstract contract Runtime {
     /// @dev This contract's host node ID, set to `Ids.toHost(address(this))` at construction.
     uint public immutable host = Ids.toHost(address(this));
-    /// @dev Asset ID for the native chain value (ETH), bound to the current chain at deployment.
-    bytes32 internal immutable valueAsset = Assets.toValue();
-
-    /// @notice Open a cursor over a calldata block stream.
-    /// @param source Calldata slice to parse.
-    /// @return cur Cursor positioned at the beginning of `source`.
-    function cursor(bytes calldata source) internal pure returns (Cur memory cur) {
-        return Cursors.open(source);
-    }
-
-    /// @notice Open a cursor and prime it for a grouped iteration pass in one call.
-    /// Equivalent to `open(source)` followed by `primeRun(group)`.
-    /// @param source Calldata slice to parse.
-    /// @param group Expected block group size (e.g. 1 for single, 2 for paired).
-    /// @return cur Cursor with `bound` set to the end of the first run.
-    /// @return groups Number of block groups in the run (`prime block count / group`).
-    function cursor(bytes calldata source, uint group) internal pure returns (Cur memory cur, uint groups) {
-        return Cursors.init(source, group);
-    }
-
-    /// @notice Open a cursor, prime it, and assert that its group count matches `expectedGroups`.
-    /// Equivalent to `open(source)` followed by `primeRun(group)` and a direct group-count equality check.
-    /// Reverts with `Cursors.BadRatio` when the group count does not match.
-    /// @param source Calldata slice to parse.
-    /// @param group Expected block group size (e.g. 1 for single, 2 for paired).
-    /// @param expectedGroups Required number of groups in the first run.
-    /// @return cur Cursor with `bound` set to the end of the first run.
-    function cursor(bytes calldata source, uint group, uint expectedGroups) internal pure returns (Cur memory cur) {
-        uint groups;
-        (cur, groups) = Cursors.init(source, group);
-        if (groups != expectedGroups) revert Cursors.BadRatio();
-    }
+    /// @dev Asset ID for the native chain coin/token, bound to the current chain at deployment.
+    bytes32 internal immutable nativeAsset = Assets.toNative();
 }

package/core/Types.sol

@@ -21,7 +21,7 @@ struct AccountAsset {
     bytes32 meta;
 }
 
-/// @notice Account-scoped amount shape used by payout blocks and query responses.
+/// @notice Account-scoped amount shape for requests, responses, and reporting.
 struct AccountAmount {
     /// @dev Account identifier.
     bytes32 account;

package/docs/Schema.md

@@ -185,7 +185,6 @@ Common protocol schemas live in `contracts/blocks/Schema.sol`:
 #amount { bytes32 asset, bytes32 meta, uint amount }
 #balance { bytes32 asset, bytes32 meta, uint amount }
 #custody { uint host, bytes32 asset, bytes32 meta, uint amount }
-#payout { bytes32 account, bytes32 asset, bytes32 meta, uint amount }
 #call { uint target, uint value, #bytes as payload }
 #step { uint target, uint value, #bytes as request }
 #context { bytes32 account, #bytes as state, #bytes as request }

package/events/Admin.sol

@@ -6,18 +6,20 @@ import { EventEmitter } from "./Emitter.sol";
 /// @notice Emitted once per admin command during host deployment to publish its request schema and state keys.
 abstract contract AdminEvent is EventEmitter {
     string private constant ABI =
-        "event Admin(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool acceptsValue)";
+        "event Admin(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool postcheck, bool funded)";
 
     /// @param host Host node ID that owns this admin command.
     /// @param id Command node ID.
     /// @param name Human-readable command name.
-    /// @param shape Per-operation prime block counts encoded as `request:state:output`.
-    /// Blocks outside the prime runs are global batch blocks and are excluded
-    /// from the counts.
-    /// @param request Schema DSL string describing the request shape.
-    /// @param state Block key expected for input state, or `Keys.Empty`.
+    /// @param shape Per-operation block counts encoded as `request:state:output`.
+    /// The request count covers only the input request run. If `postcheck` is true,
+    /// a constraint run follows the input run, or starts the request when `request`
+    /// is empty. State globals may follow the state run and are excluded.
+    /// @param request Schema DSL string describing the input request run, or empty if none.
+    /// @param state Block key expected for input state, `Keys.Empty`, or `Keys.Any`.
     /// @param output Block key produced for output state, or `Keys.Empty`.
-    /// @param acceptsValue Whether the command entrypoint accepts nonzero `msg.value`.
+    /// @param postcheck Whether command output is validated after execution.
+    /// @param funded Whether the command entrypoint accepts nonzero `msg.value`.
     event Admin(
         uint indexed host,
         uint id,
@@ -26,7 +28,8 @@ abstract contract AdminEvent is EventEmitter {
         string request,
         bytes4 state,
         bytes4 output,
-        bool acceptsValue
+        bool postcheck,
+        bool funded
     );
 
     constructor() {

package/events/Chain.sol

@@ -0,0 +1,20 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import {EventEmitter} from "./Emitter.sol";
+
+/// @notice Emitted when a chain/domain node is announced.
+abstract contract ChainEvent is EventEmitter {
+    string private constant ABI = "event Chain(uint indexed chain, bytes32 native, uint commander, bytes32 admin, string name)";
+
+    /// @param chain Chain node ID.
+    /// @param native Native asset ID for the chain.
+    /// @param commander Commander host node ID for the chain.
+    /// @param admin Admin account for the commander host on the chain.
+    /// @param name Chain or domain name.
+    event Chain(uint indexed chain, bytes32 native, uint commander, bytes32 admin, string name);
+
+    constructor() {
+        emit EventAbi(ABI);
+    }
+}

package/events/Command.sol

@@ -6,18 +6,20 @@ import { EventEmitter } from "./Emitter.sol";
 /// @notice Emitted once per command during host deployment to publish its request schema and state keys.
 abstract contract CommandEvent is EventEmitter {
     string private constant ABI =
-        "event Command(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool acceptsValue)";
+        "event Command(uint indexed host, uint id, string name, bytes32 shape, string request, bytes4 state, bytes4 output, bool postcheck, bool funded)";
 
     /// @param host Host node ID that owns this command.
     /// @param id Command node ID.
     /// @param name Human-readable command name.
-    /// @param shape Per-operation prime block counts encoded as `request:state:output`.
-    /// Blocks outside the prime runs are global batch blocks and are excluded
-    /// from the counts.
-    /// @param request Schema string describing the request shape.
-    /// @param state Block key expected for input state, or `Keys.Empty`.
+    /// @param shape Per-operation block counts encoded as `request:state:output`.
+    /// The request count covers only the input request run. If `postcheck` is true,
+    /// a constraint run follows the input run, or starts the request when `request`
+    /// is empty. State globals may follow the state run and are excluded.
+    /// @param request Schema string describing the input request run, or empty if none.
+    /// @param state Block key expected for input state, `Keys.Empty`, or `Keys.Any`.
     /// @param output Block key produced for output state, or `Keys.Empty`.
-    /// @param acceptsValue Whether the command entrypoint accepts nonzero `msg.value`.
+    /// @param postcheck Whether command output is validated after execution.
+    /// @param funded Whether the command entrypoint accepts nonzero `msg.value`.
     event Command(
         uint indexed host,
         uint id,
@@ -26,7 +28,8 @@ abstract contract CommandEvent is EventEmitter {
         string request,
         bytes4 state,
         bytes4 output,
-        bool acceptsValue
+        bool postcheck,
+        bool funded
     );
 
     constructor() {

package/events/Peer.sol

@@ -6,15 +6,15 @@ import {EventEmitter} from "./Emitter.sol";
 /// @notice Emitted once per peer during host deployment to publish its request and response schemas.
 abstract contract PeerEvent is EventEmitter {
     string private constant ABI =
-        "event Peer(uint indexed host, uint id, string name, bytes32 shape, string request, string response, bool acceptsValue)";
+        "event Peer(uint indexed host, uint id, string name, bytes32 shape, string request, string response, bool funded)";
 
     /// @param host Host node ID that owns this peer.
     /// @param id Peer node ID.
     /// @param name Human-readable peer name.
-    /// @param shape Prime block counts as `request:response`; global blocks are excluded.
-    /// @param request Schema DSL string describing the peer request shape.
+    /// @param shape Per-operation block counts encoded as `request:response`.
+    /// @param request Schema DSL string describing the input request run, or empty if none.
     /// @param response Schema DSL string describing the peer response shape.
-    /// @param acceptsValue Whether the peer entrypoint accepts nonzero `msg.value`.
+    /// @param funded Whether the peer entrypoint accepts nonzero `msg.value`.
     event Peer(
         uint indexed host,
         uint id,
@@ -22,7 +22,7 @@ abstract contract PeerEvent is EventEmitter {
         bytes32 shape,
         string request,
         string response,
-        bool acceptsValue
+        bool funded
     );
 
     constructor() {

package/events/Query.sol

@@ -10,10 +10,8 @@ abstract contract QueryEvent is EventEmitter {
     /// @param host Host node ID that owns this query.
     /// @param id Query node ID.
     /// @param name Human-readable query name.
-    /// @param shape Per-operation prime block counts encoded as `request:response`.
-    /// Blocks outside the prime runs are global batch blocks and are excluded
-    /// from the counts.
-    /// @param request Schema DSL string describing the query request shape.
+    /// @param shape Per-operation block counts encoded as `request:response`.
+    /// @param request Schema DSL string describing the input request run, or empty if none.
     /// @param response Schema DSL string describing the query response shape.
     event Query(uint indexed host, uint id, string name, bytes32 shape, string request, string response);
 

package/events/Transfer.sol

@@ -0,0 +1,22 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import { EventEmitter } from "./Emitter.sol";
+
+/// @notice Emitted when an asset moves from one account to another.
+abstract contract TransferEvent is EventEmitter {
+    string private constant ABI = "event Transfer(bytes32 indexed from, bytes32 to, bytes32 asset, bytes32 meta, uint amount, uint32 action, uint context)";
+
+    /// @param account Source account identifier.
+    /// @param to Destination account identifier.
+    /// @param asset Asset identifier.
+    /// @param meta Asset metadata slot.
+    /// @param amount Amount transferred.
+    /// @param action Primary operation hint from `Actions`.
+    /// @param context Reserved context value for future use.
+    event Transfer(bytes32 indexed account, bytes32 to, bytes32 asset, bytes32 meta, uint amount, uint32 action, uint context);
+
+    constructor() {
+        emit EventAbi(ABI);
+    }
+}

package/guards/Revoke.sol

@@ -19,13 +19,13 @@ abstract contract Revoke is GuardBase {
     }
 
     function revoke(bytes calldata request) external onlyGuardian {
-        (Cur memory input, ) = cursor(request, 1);
+        (Cur memory input, , ) = Cursors.init(request, 0, 1);
 
-        while (input.i < input.bound) {
+        while (input.i < input.len) {
             uint node = input.unpackNode();
             setNode(node, false);
         }
 
-        input.close();
+        input.complete();
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rootzero/contracts",
-  "version": "0.9.8",
+  "version": "1.0.0",
   "description": "Solidity contracts and protocol building blocks for rootzero hosts and commands.",
   "private": false,
   "license": "GPL-3.0-only",

package/peer/AllowAssets.sol

@@ -19,15 +19,17 @@ abstract contract PeerAllowAssets is PeerBase, AllowAssetsHook {
     }
 
     /// @notice Execute the allow-assets peer call.
+    /// @param request ASSET block stream supplied by the trusted peer.
+    /// @return Empty response bytes.
     function peerAllowAssets(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory assets, ) = cursor(request, 1);
+        (Cur memory assets, , ) = Cursors.init(request, 0, 1);
 
-        while (assets.i < assets.bound) {
+        while (assets.i < assets.len) {
             (bytes32 asset, bytes32 meta) = assets.unpackAsset();
             allowAsset(asset, meta);
         }
 
-        assets.close();
+        assets.complete();
         return "";
     }
 }

package/peer/Allowance.sol

@@ -20,16 +20,18 @@ abstract contract PeerAllowance is PeerBase, AllowanceHook {
     }
 
     /// @notice Execute the allowance peer call.
+    /// @param request AMOUNT block stream requested by the trusted peer.
+    /// @return Empty response bytes.
     function peerAllowance(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory amounts, ) = cursor(request, 1);
+        (Cur memory amounts, , ) = Cursors.init(request, 0, 1);
         uint peer = caller();
 
-        while (amounts.i < amounts.bound) {
+        while (amounts.i < amounts.len) {
             (bytes32 asset, bytes32 meta, uint amount) = amounts.unpackAmount();
             allowance(peer, asset, meta, amount);
         }
 
-        amounts.close();
+        amounts.complete();
         return "";
     }
 }

package/peer/BalancePull.sol

@@ -28,16 +28,18 @@ abstract contract PeerBalancePull is PeerBase, BalancePullHook {
     }
 
     /// @notice Execute the balance-pull peer call.
+    /// @param request BALANCE block stream requested by the trusted peer.
+    /// @return Empty response bytes.
     function peerBalancePull(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory input, ) = cursor(request, 1);
+        (Cur memory input, , ) = Cursors.init(request, 0, 1);
         uint peer = caller();
 
-        while (input.i < input.bound) {
+        while (input.i < input.len) {
             (bytes32 asset, bytes32 meta, uint amount) = input.unpackBalance();
             balancePull(peer, asset, meta, amount);
         }
 
-        input.close();
+        input.complete();
         return "";
     }
 }

package/peer/DenyAssets.sol

@@ -19,15 +19,17 @@ abstract contract PeerDenyAssets is PeerBase, DenyAssetsHook {
     }
 
     /// @notice Execute the deny-assets peer call.
+    /// @param request ASSET block stream supplied by the trusted peer.
+    /// @return Empty response bytes.
     function peerDenyAssets(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory assets, ) = cursor(request, 1);
+        (Cur memory assets, , ) = Cursors.init(request, 0, 1);
 
-        while (assets.i < assets.bound) {
+        while (assets.i < assets.len) {
             (bytes32 asset, bytes32 meta) = assets.unpackAsset();
             denyAsset(asset, meta);
         }
 
-        assets.close();
+        assets.complete();
         return "";
     }
 }

package/peer/Dispatch.sol

@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import { PeerBase } from "./Base.sol";
+import { Payable } from "../core/Payable.sol";
+import { Cursors, Cur, Schemas } from "../Cursors.sol";
+import { Budget } from "../utils/Value.sol";
+
+using Cursors for Cur;
+
+abstract contract PeerDispatchPayableHook {
+    /// @notice Override to dispatch an already encoded payload to `chain`.
+    /// @param chain Destination chain node ID.
+    /// @param endowment Native value requested for the destination dispatch. The
+    /// hook decides how much source-chain budget must be spent to fund this
+    /// value on the destination chain.
+    /// @param payload Encoded payload ready for the transport layer.
+    /// @param budget Source-chain native-value budget available for transport
+    /// fees and destination endowment funding.
+    function dispatch(uint chain, uint endowment, bytes calldata payload, Budget memory budget) internal virtual;
+}
+
+/// @title PeerDispatchPayable
+/// @notice Peer endpoint that forwards DISPATCH blocks to a host-defined dispatch hook.
+abstract contract PeerDispatchPayable is PeerBase, Payable, PeerDispatchPayableHook {
+    string private constant NAME = "peerDispatchPayable";
+    uint internal immutable peerDispatchPayableId = peerId(NAME);
+
+    constructor() {
+        emit Peer(host, peerDispatchPayableId, NAME, "1:0", Schemas.Dispatch, "", true);
+    }
+
+    /// @notice Forward peer-supplied dispatches to the host-defined dispatch hook.
+    /// @dev Dispatch hooks receive the shared top-level source-chain value
+    ///      budget. Any `msg.value` not spent by the hook remains on this host.
+    /// @param request DISPATCH block stream supplied by the trusted peer.
+    /// @return output Empty response bytes.
+    function peerDispatchPayable(bytes calldata request) external payable onlyPeer returns (bytes memory output) {
+        (Cur memory input, , ) = Cursors.init(request, 0, 1);
+        Budget memory budget = valueBudget();
+
+        while (input.i < input.len) {
+            (uint chain, uint endowment, bytes calldata payload) = input.unpackDispatch();
+            dispatch(chain, endowment, payload, budget);
+        }
+
+        input.complete();
+        return "";
+    }
+
+}

package/peer/Pipe.sol

@@ -9,9 +9,9 @@ import {Budget} from "../utils/Value.sol";
 using Cursors for Cur;
 
 /// @title PeerPipePayable
-/// @notice Peer that consumes PIPE blocks and executes each context request as a STEP stream.
+/// @notice Peer that consumes PIPE blocks and executes each context step stream.
 /// Each PIPE block carries a value budget plus a CONTEXT block; the nested
-/// context request is passed to the shared pipeline as the step stream.
+/// context steps are passed to the shared pipeline as the step stream.
 abstract contract PeerPipePayable is PeerBase, Pipeline {
     string private constant NAME = "peerPipePayable";
     uint internal immutable peerPipePayableId = peerId(NAME);
@@ -23,16 +23,18 @@ abstract contract PeerPipePayable is PeerBase, Pipeline {
     /// @notice Execute peer-supplied pipes through the shared payable pipe.
     /// @dev Each pipe receives its own explicit value sub-budget. Any top-level
     ///      `msg.value` not assigned to a pipe remains on this host.
+    /// @param request PIPE block stream supplied by the trusted peer.
+    /// @return Empty response bytes.
     function peerPipePayable(bytes calldata request) external payable onlyPeer returns (bytes memory) {
-        (Cur memory input, ) = cursor(request, 1);
+        (Cur memory input, , ) = Cursors.init(request, 0, 1);
         Budget memory budget = valueBudget();
 
-        while (input.i < input.bound) {
+        while (input.i < input.len) {
             (uint value, bytes32 account, bytes calldata state, bytes calldata steps) = input.unpackPipe();
             pipe(account, state, steps, allocateValue(budget, value));
         }
 
-        input.close();
+        input.complete();
         return "";
     }
 }