@rootzero/contracts 1.2.0 → 1.3.0

package/commands/Deposit.sol

@@ -40,7 +40,7 @@ abstract contract Deposit is CommandBase, DepositHook {
     uint internal immutable depositId = commandId(this.deposit.selector);
 
     constructor() {
-        emit Command(host, depositId, "1:0:1", Schemas.Amount, Keys.Empty, Keys.Balance, false, false);
+        emit Command(host, depositId, "1:0:1", Schemas.Amount, Keys.Empty, Keys.Balance, false);
         emit Labeled(depositId, bytes32(0), "deposit");
     }
 
@@ -50,7 +50,7 @@ abstract contract Deposit is CommandBase, DepositHook {
     function deposit(
         CommandContext calldata c
     ) external onlyCommand returns (bytes memory) {
-        (Cur memory request, uint groups, ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, uint groups, ) = Cursors.init(c.request, 1);
         Writer memory writer = Writers.allocBalances(groups);
 
         while (request.i < request.len) {
@@ -71,7 +71,7 @@ abstract contract DepositPayable is CommandBase, Payable, DepositPayableHook {
     uint internal immutable depositPayableId = commandId(this.depositPayable.selector);
 
     constructor() {
-        emit Command(host, depositPayableId, "1:0:1", Schemas.Amount, Keys.Empty, Keys.Balance, false, true);
+        emit Command(host, depositPayableId, "1:0:1", Schemas.Amount, Keys.Empty, Keys.Balance, true);
         emit Labeled(depositPayableId, bytes32(0), "depositPayable");
     }
 
@@ -81,7 +81,7 @@ abstract contract DepositPayable is CommandBase, Payable, DepositPayableHook {
     function depositPayable(
         CommandContext calldata c
     ) external payable onlyCommand returns (bytes memory) {
-        (Cur memory request, uint groups, ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, uint groups, ) = Cursors.init(c.request, 1);
         Writer memory writer = Writers.allocBalances(groups);
         Budget memory budget = valueBudget();
 

package/commands/Payout.sol

@@ -25,7 +25,7 @@ abstract contract Payout is CommandBase, PayoutHook {
     uint internal immutable payoutId = commandId(this.payout.selector);
 
     constructor() {
-        emit Command(host, payoutId, "1:1:0", Schemas.Account, Keys.Balance, Keys.Empty, false, false);
+        emit Command(host, payoutId, "1:1:0", Schemas.Account, Keys.Balance, Keys.Empty, false);
         emit Labeled(payoutId, bytes32(0), "payout");
     }
 
@@ -33,8 +33,8 @@ abstract contract Payout is CommandBase, PayoutHook {
     /// @param c Command context; `c.state` must contain BALANCE blocks and `c.request` matching ACCOUNT blocks.
     /// @return Empty output state.
     function payout(CommandContext calldata c) external onlyCommand returns (bytes memory) {
-        (Cur memory state, uint groups, ) = Cursors.init(c.state, 0, 1);
-        (Cur memory request, ) = Cursors.init(c.request, 0, 1, groups);
+        (Cur memory state, uint groups, ) = Cursors.init(c.state, 1);
+        (Cur memory request, ) = Cursors.init(c.request, 1, groups);
 
         while (state.i < state.len) {
             (bytes32 asset, bytes32 meta, uint amount) = state.unpackBalance();

package/commands/Provision.sol

@@ -36,7 +36,7 @@ abstract contract Provision is CommandBase, ProvisionHook {
     uint internal immutable provisionId = commandId(this.provision.selector);
 
     constructor() {
-        emit Command(host, provisionId, "1:0:1", Schemas.Allocation, Keys.Empty, Keys.Custody, false, false);
+        emit Command(host, provisionId, "1:0:1", Schemas.Allocation, Keys.Empty, Keys.Custody, false);
         emit Labeled(provisionId, bytes32(0), "provision");
     }
 
@@ -44,7 +44,7 @@ abstract contract Provision is CommandBase, ProvisionHook {
     /// @param c Command context; `c.request` must contain ALLOCATION blocks.
     /// @return CUSTODY block stream matching the provisioned allocations.
     function provision(CommandContext calldata c) external onlyCommand returns (bytes memory) {
-        (Cur memory request, uint groups, ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, uint groups, ) = Cursors.init(c.request, 1);
         Writer memory writer = Writers.allocCustodies(groups);
 
         while (request.i < request.len) {
@@ -66,7 +66,7 @@ abstract contract ProvisionPayable is CommandBase, Payable, ProvisionPayableHook
     uint internal immutable provisionPayableId = commandId(this.provisionPayable.selector);
 
     constructor() {
-        emit Command(host, provisionPayableId, "1:0:1", Schemas.Allocation, Keys.Empty, Keys.Custody, false, true);
+        emit Command(host, provisionPayableId, "1:0:1", Schemas.Allocation, Keys.Empty, Keys.Custody, true);
         emit Labeled(provisionPayableId, bytes32(0), "provisionPayable");
     }
 
@@ -76,7 +76,7 @@ abstract contract ProvisionPayable is CommandBase, Payable, ProvisionPayableHook
     function provisionPayable(
         CommandContext calldata c
     ) external payable onlyCommand returns (bytes memory) {
-        (Cur memory request, uint groups, ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, uint groups, ) = Cursors.init(c.request, 1);
         Writer memory writer = Writers.allocCustodies(groups);
         Budget memory budget = valueBudget();
 

package/commands/Relay.sol

@@ -28,7 +28,7 @@ abstract contract RelayPayable is CommandBase, Payable, DispatchPayableHook {
     uint internal immutable relayPayableId = commandId(this.relayPayable.selector);
 
     constructor() {
-        emit Command(host, relayPayableId, "1:0:0", Schemas.Relay, Keys.Any, Keys.Empty, false, true);
+        emit Command(host, relayPayableId, "1:0:0", Schemas.Relay, Keys.Any, Keys.Empty, true);
         emit Labeled(relayPayableId, bytes32(0), "relayPayable");
     }
 
@@ -36,7 +36,7 @@ abstract contract RelayPayable is CommandBase, Payable, DispatchPayableHook {
     /// @param c Command context; `c.request` must contain exactly one RELAY block.
     /// @return output Empty output state.
     function relayPayable(CommandContext calldata c) external payable onlyCommand returns (bytes memory output) {
-        (Cur memory request, ) = Cursors.init(c.request, 0, 1, 1);
+        (Cur memory request, ) = Cursors.init(c.request, 1, 1);
         Budget memory budget = valueBudget();
 
         (uint chain, uint resources, bytes memory pipe) = request.relayToPipe(c.account, c.state);

package/commands/Withdraw.sol

@@ -23,7 +23,7 @@ abstract contract Withdraw is CommandBase, WithdrawHook {
     uint internal immutable withdrawId = commandId(this.withdraw.selector);
 
     constructor() {
-        emit Command(host, withdrawId, "0:1:0", "", Keys.Balance, Keys.Empty, false, false);
+        emit Command(host, withdrawId, "0:1:0", "", Keys.Balance, Keys.Empty, false);
         emit Labeled(withdrawId, bytes32(0), "withdraw");
     }
 
@@ -33,7 +33,7 @@ abstract contract Withdraw is CommandBase, WithdrawHook {
     function withdraw(
         CommandContext calldata c
     ) external onlyCommand returns (bytes memory) {
-        (Cur memory state, , ) = Cursors.init(c.state, 0, 1);
+        (Cur memory state, , ) = Cursors.init(c.state, 1);
 
         while (state.i < state.len) {
             (bytes32 asset, bytes32 meta, uint amount) = state.unpackBalance();

package/commands/admin/AllowAssets.sol

@@ -21,7 +21,7 @@ abstract contract AllowAssets is CommandBase, AdminEvent, AllowAssetsHook {
     uint internal immutable allowAssetsId = commandId(this.allowAssets.selector);
 
     constructor() {
-        emit Admin(host, allowAssetsId, "1:0:0", Schemas.Asset, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, allowAssetsId, "1:0:0", Schemas.Asset, Keys.Empty, Keys.Empty, false);
         emit Labeled(allowAssetsId, bytes32(0), "allowAssets");
     }
 
@@ -31,7 +31,7 @@ abstract contract AllowAssets is CommandBase, AdminEvent, AllowAssetsHook {
     function allowAssets(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             (bytes32 asset, bytes32 meta) = request.unpackAsset();

package/commands/admin/Allowance.sol

@@ -25,7 +25,7 @@ abstract contract Allowance is CommandBase, AdminEvent, AllowanceHook {
     uint internal immutable allowanceId = commandId(this.allowance.selector);
 
     constructor() {
-        emit Admin(host, allowanceId, "1:0:0", Schemas.Allowance, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, allowanceId, "1:0:0", Schemas.Allowance, Keys.Empty, Keys.Empty, false);
         emit Labeled(allowanceId, bytes32(0), "allowance");
     }
 
@@ -33,7 +33,7 @@ abstract contract Allowance is CommandBase, AdminEvent, AllowanceHook {
     /// @param c Admin command context; `c.request` must contain ALLOWANCE blocks.
     /// @return Empty output state.
     function allowance(CommandContext calldata c) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             (uint peer, bytes32 asset, bytes32 meta, uint amount) = request.unpackAllowance();

package/commands/admin/Appoint.sol

@@ -14,7 +14,7 @@ abstract contract Appoint is CommandBase, AdminEvent {
     uint internal immutable appointId = commandId(this.appoint.selector);
 
     constructor() {
-        emit Admin(host, appointId, "1:0:0", Schemas.Account, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, appointId, "1:0:0", Schemas.Account, Keys.Empty, Keys.Empty, false);
         emit Labeled(appointId, bytes32(0), "appoint");
     }
 
@@ -24,7 +24,7 @@ abstract contract Appoint is CommandBase, AdminEvent {
     function appoint(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             bytes32 account = request.unpackAccount();

package/commands/admin/Authorize.sol

@@ -14,7 +14,7 @@ abstract contract Authorize is CommandBase, AdminEvent {
     uint internal immutable authorizeId = commandId(this.authorize.selector);
 
     constructor() {
-        emit Admin(host, authorizeId, "1:0:0", Schemas.Node, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, authorizeId, "1:0:0", Schemas.Node, Keys.Empty, Keys.Empty, false);
         emit Labeled(authorizeId, bytes32(0), "authorize");
     }
 
@@ -24,7 +24,7 @@ abstract contract Authorize is CommandBase, AdminEvent {
     function authorize(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             uint node = request.unpackNode();

package/commands/admin/DenyAssets.sol

@@ -21,7 +21,7 @@ abstract contract DenyAssets is CommandBase, AdminEvent, DenyAssetsHook {
     uint internal immutable denyAssetsId = commandId(this.denyAssets.selector);
 
     constructor() {
-        emit Admin(host, denyAssetsId, "1:0:0", Schemas.Asset, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, denyAssetsId, "1:0:0", Schemas.Asset, Keys.Empty, Keys.Empty, false);
         emit Labeled(denyAssetsId, bytes32(0), "denyAssets");
     }
 
@@ -31,7 +31,7 @@ abstract contract DenyAssets is CommandBase, AdminEvent, DenyAssetsHook {
     function denyAssets(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             (bytes32 asset, bytes32 meta) = request.unpackAsset();

package/commands/admin/Destroy.sol

@@ -20,7 +20,7 @@ abstract contract Destroy is CommandBase, AdminEvent, DestroyHook {
     uint internal immutable destroyId = commandId(this.destroy.selector);
 
     constructor(string memory input) {
-        emit Admin(host, destroyId, "1:0:0", input, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, destroyId, "1:0:0", input, Keys.Empty, Keys.Empty, false);
         emit Labeled(destroyId, bytes32(0), "destroy");
     }
 

package/commands/admin/Dismiss.sol

@@ -14,7 +14,7 @@ abstract contract Dismiss is CommandBase, AdminEvent {
     uint internal immutable dismissId = commandId(this.dismiss.selector);
 
     constructor() {
-        emit Admin(host, dismissId, "1:0:0", Schemas.Account, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, dismissId, "1:0:0", Schemas.Account, Keys.Empty, Keys.Empty, false);
         emit Labeled(dismissId, bytes32(0), "dismiss");
     }
 
@@ -24,7 +24,7 @@ abstract contract Dismiss is CommandBase, AdminEvent {
     function dismiss(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             bytes32 account = request.unpackAccount();

package/commands/admin/Execute.sol

@@ -19,7 +19,7 @@ abstract contract ExecutePayable is CommandBase, Payable, AdminEvent {
     uint internal immutable executePayableId = commandId(this.executePayable.selector);
 
     constructor() {
-        emit Admin(host, executePayableId, "1:0:0", Schemas.Call, Keys.Empty, Keys.Empty, false, true);
+        emit Admin(host, executePayableId, "1:0:0", Schemas.Call, Keys.Empty, Keys.Empty, true);
         emit Labeled(executePayableId, bytes32(0), "executePayable");
     }
 
@@ -27,7 +27,7 @@ abstract contract ExecutePayable is CommandBase, Payable, AdminEvent {
     /// @param c Admin command context; `c.request` must contain CALL blocks.
     /// @return Empty output state.
     function executePayable(CommandContext calldata c) external payable onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
         Budget memory budget = valueBudget();
 
         while (request.i < request.len) {

package/commands/admin/Init.sol

@@ -20,7 +20,7 @@ abstract contract Init is CommandBase, AdminEvent, InitHook {
     uint internal immutable initId = commandId(this.init.selector);
 
     constructor(string memory input) {
-        emit Admin(host, initId, "1:0:0", input, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, initId, "1:0:0", input, Keys.Empty, Keys.Empty, false);
         emit Labeled(initId, bytes32(0), "init");
     }
 

package/commands/admin/Label.sol

@@ -14,7 +14,7 @@ abstract contract Label is CommandBase, AdminEvent {
     uint internal immutable labelId = commandId(this.label.selector);
 
     constructor() {
-        emit Admin(host, labelId, "1:0:0", Schemas.Label, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, labelId, "1:0:0", Schemas.Label, Keys.Empty, Keys.Empty, false);
         emit Labeled(labelId, bytes32(0), "label");
     }
 
@@ -22,7 +22,7 @@ abstract contract Label is CommandBase, AdminEvent {
     /// @param c Admin command context; `c.request` must contain LABEL blocks.
     /// @return Empty output state.
     function label(CommandContext calldata c) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             (uint id, bytes32 namespace, string memory name) = request.unpackLabel();

package/commands/admin/Unauthorize.sol

@@ -14,7 +14,7 @@ abstract contract Unauthorize is CommandBase, AdminEvent {
     uint internal immutable unauthorizeId = commandId(this.unauthorize.selector);
 
     constructor() {
-        emit Admin(host, unauthorizeId, "1:0:0", Schemas.Node, Keys.Empty, Keys.Empty, false, false);
+        emit Admin(host, unauthorizeId, "1:0:0", Schemas.Node, Keys.Empty, Keys.Empty, false);
         emit Labeled(unauthorizeId, bytes32(0), "unauthorize");
     }
 
@@ -24,7 +24,7 @@ abstract contract Unauthorize is CommandBase, AdminEvent {
     function unauthorize(
         CommandContext calldata c
     ) external onlyAdmin(c.account) returns (bytes memory) {
-        (Cur memory request, , ) = Cursors.init(c.request, 0, 1);
+        (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
             uint node = request.unpackNode();

package/core/Pipeline.sol

@@ -42,7 +42,7 @@ abstract contract Pipeline is Payable {
         bytes calldata steps,
         Budget memory budget
     ) internal {
-        (Cur memory input, , ) = Cursors.init(steps, 0, 1);
+        (Cur memory input, , ) = Cursors.init(steps, 1);
 
         while (input.i < input.len) {
             (uint target, uint resources, bytes calldata request) = input.unpackStep();

package/docs/Schema.md

@@ -101,6 +101,11 @@ the whole batch and are not counted as per-operation prime blocks.
 The prime item cannot be optional. If a command needs a per-operation marker with
 no payload, use a zero-payload block such as `#unit`.
 
+Command request and state streams currently use a narrower convention than the
+full block grammar: each is a single run of blocks, without additional global
+items. Future protocol surfaces may use the more flexible top-level structure,
+but command discovery metadata should describe only that one-run shape.
+
 ## Aliases
 
 Aliases are presentation metadata for tooling. They do not change payload layout
@@ -113,6 +118,53 @@ maybe #account { bytes32 account } as recipient
 
 Aliases may be used on any block item, including child blocks and prime items.
 
+## Field Paths
+
+Field names and aliases may use dotted paths for offchain projection. A dotted
+path does not change the block key, payload bytes, payload length, cursor
+behavior, or any onchain validation. It is metadata only.
+
+```txt
+#dispatch { uint dst.chain, uint dst.resources, #bytes as dst.payload }
+```
+
+This has the same runtime layout as:
+
+```txt
+#dispatch { uint chain, uint resources, #bytes as payload }
+```
+
+Offchain tooling may decode the dotted form into a nested object:
+
+```ts
+{
+  dst: {
+    chain,
+    resources,
+    payload
+  }
+}
+```
+
+Encoding and decoding must still follow schema declaration order, not object
+property order. Fields with the same path prefix do not need to be contiguous,
+although contiguous fields are easier to read when they represent one logical
+object.
+
+Tooling should reject duplicate full paths and prefix/value collisions:
+
+```txt
+uint dst.chain, uint dst.chain      // duplicate path
+uint dst, uint dst.chain            // prefix/value collision
+```
+
+The same rule applies to block aliases:
+
+```txt
+#call { uint target, uint resources, #bytes as calldata.payload }
+maybe #account { bytes32 account } as recipient.account
+```
+
 ## Field Types
 
 Supported field types are chain-neutral:
@@ -140,10 +192,12 @@ endowment in wei; higher bits are reserved for execution resources such as gas.
 
 ## Identifiers
 
-Block names, field names, and aliases use lower camelCase ASCII identifiers:
+Block names use lower camelCase ASCII identifiers. Field names and aliases use
+one or more lower camelCase path segments separated by dots:
 
 ```txt
 [a-z][a-zA-Z0-9]*
+[a-z][a-zA-Z0-9]*(\.[a-z][a-zA-Z0-9]*)*
 ```
 
 Invalid examples:
@@ -153,10 +207,13 @@ Amount
 asset_meta
 asset-meta
 0account
+asset.
+.asset
 ```
 
 Reserved words include `maybe`, `many`, `as`, all field type names, and the
-reserved block names `bytes`, `data`, and `list`.
+reserved block names `bytes`, `data`, and `list`. For dotted paths, reserved
+words are invalid in any path segment.
 
 ## Reserved Blocks
 

package/events/Admin.sol

@@ -6,18 +6,15 @@ import {EventEmitter} from "./Emitter.sol";
 /// @notice Emitted once per admin command during host deployment to publish its request schema and state keys.
 abstract contract AdminEvent is EventEmitter {
     string private constant ABI =
-        "event Admin(uint indexed host, uint id, bytes32 shape, string request, bytes4 state, bytes4 output, bool postcheck, bool funded)";
+        "event Admin(uint indexed host, uint id, bytes32 shape, string request, bytes4 state, bytes4 output, bool funded)";
 
     /// @param host Host node ID that owns this admin command.
     /// @param id Command node ID.
     /// @param shape Per-operation block counts encoded as `request:state:output`.
-    /// The request count covers only the input request run. If `postcheck` is true,
-    /// a constraint run follows the input run, or starts the request when `request`
-    /// is empty. State globals may follow the state run and are excluded.
+    /// Request and state are each a single run of blocks under the current command convention.
     /// @param request Schema DSL string describing the input request run, or empty if none.
     /// @param state Block key expected for input state, `Keys.Empty`, or `Keys.Any`.
     /// @param output Block key produced for output state, or `Keys.Empty`.
-    /// @param postcheck Whether command output is validated after execution.
     /// @param funded Whether the command entrypoint accepts nonzero `msg.value`.
     event Admin(
         uint indexed host,
@@ -26,7 +23,6 @@ abstract contract AdminEvent is EventEmitter {
         string request,
         bytes4 state,
         bytes4 output,
-        bool postcheck,
         bool funded
     );
 

package/events/Command.sol

@@ -6,18 +6,15 @@ import {EventEmitter} from "./Emitter.sol";
 /// @notice Emitted once per command during host deployment to publish its request schema and state keys.
 abstract contract CommandEvent is EventEmitter {
     string private constant ABI =
-        "event Command(uint indexed host, uint id, bytes32 shape, string request, bytes4 state, bytes4 output, bool postcheck, bool funded)";
+        "event Command(uint indexed host, uint id, bytes32 shape, string request, bytes4 state, bytes4 output, bool funded)";
 
     /// @param host Host node ID that owns this command.
     /// @param id Command node ID.
     /// @param shape Per-operation block counts encoded as `request:state:output`.
-    /// The request count covers only the input request run. If `postcheck` is true,
-    /// a constraint run follows the input run, or starts the request when `request`
-    /// is empty. State globals may follow the state run and are excluded.
+    /// Request and state are each a single run of blocks under the current command convention.
     /// @param request Schema string describing the input request run, or empty if none.
     /// @param state Block key expected for input state, `Keys.Empty`, or `Keys.Any`.
     /// @param output Block key produced for output state, or `Keys.Empty`.
-    /// @param postcheck Whether command output is validated after execution.
     /// @param funded Whether the command entrypoint accepts nonzero `msg.value`.
     event Command(
         uint indexed host,
@@ -26,7 +23,6 @@ abstract contract CommandEvent is EventEmitter {
         string request,
         bytes4 state,
         bytes4 output,
-        bool postcheck,
         bool funded
     );
 

package/events/Labeled.sol

@@ -4,6 +4,9 @@ pragma solidity ^0.8.33;
 import {EventEmitter} from "./Emitter.sol";
 
 /// @notice Emitted to attach a human-readable namespaced label to a node ID.
+/// @dev Labels are claims by the emitting contract. Any contract may emit a
+/// label for any ID, so off-chain indexers must decide which emitters are
+/// trusted for each labeled ID or namespace.
 abstract contract LabeledEvent is EventEmitter {
     string private constant ABI = "event Labeled(uint indexed id, bytes32 namespace, string name)";
 

package/events/Transfer.sol

@@ -5,7 +5,7 @@ import { EventEmitter } from "./Emitter.sol";
 
 /// @notice Emitted when an asset moves from one account to another.
 abstract contract TransferEvent is EventEmitter {
-    string private constant ABI = "event Transfer(bytes32 indexed from, bytes32 to, bytes32 asset, bytes32 meta, uint amount, uint32 action, uint context)";
+    string private constant ABI = "event Transfer(bytes32 indexed account, bytes32 to, bytes32 asset, bytes32 meta, uint amount, uint32 action, uint context)";
 
     /// @param account Source account identifier.
     /// @param to Destination account identifier.

package/guards/Revoke.sol

@@ -18,7 +18,7 @@ abstract contract Revoke is GuardBase {
     }
 
     function revoke(bytes calldata request) external onlyGuardian {
-        (Cur memory input, , ) = Cursors.init(request, 0, 1);
+        (Cur memory input, , ) = Cursors.init(request, 1);
 
         while (input.i < input.len) {
             uint node = input.unpackNode();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rootzero/contracts",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Solidity contracts and protocol building blocks for rootzero hosts and commands.",
   "private": false,
   "license": "GPL-3.0-only",

package/peer/AllowAssets.sol

@@ -7,10 +7,14 @@ import { Cursors, Cur, Schemas } from "../Cursors.sol";
 
 using Cursors for Cur;
 
+interface IPeerAllowAssets {
+    function peerAllowAssets(bytes calldata request) external returns (bytes memory);
+}
+
 /// @title PeerAllowAssets
 /// @notice Peer that permits a list of (asset, meta) pairs on behalf of a peer host.
 /// Each ASSET block in the request calls `allowAsset`. Restricted to trusted peers.
-abstract contract PeerAllowAssets is PeerBase, AllowAssetsHook {
+abstract contract PeerAllowAssets is PeerBase, AllowAssetsHook, IPeerAllowAssets {
     uint internal immutable peerAllowAssetsId = peerId(this.peerAllowAssets.selector);
 
     constructor() {
@@ -22,7 +26,7 @@ abstract contract PeerAllowAssets is PeerBase, AllowAssetsHook {
     /// @param request ASSET block stream supplied by the trusted peer.
     /// @return Empty response bytes.
     function peerAllowAssets(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory assets, , ) = Cursors.init(request, 0, 1);
+        (Cur memory assets, , ) = Cursors.init(request, 1);
 
         while (assets.i < assets.len) {
             (bytes32 asset, bytes32 meta) = assets.unpackAsset();

package/peer/Allowance.sol

@@ -7,11 +7,15 @@ import {Cursors, Cur, Schemas} from "../Cursors.sol";
 
 using Cursors for Cur;
 
+interface IPeerAllowance {
+    function peerAllowance(bytes calldata request) external returns (bytes memory);
+}
+
 /// @title PeerAllowance
 /// @notice Peer that lets a trusted peer host request or refresh its own allowance.
 /// Each AMOUNT block in the request is scoped to the peer host and passed to the
 /// shared allowance hook as a host-scoped allowance. Restricted to trusted peers.
-abstract contract PeerAllowance is PeerBase, AllowanceHook {
+abstract contract PeerAllowance is PeerBase, AllowanceHook, IPeerAllowance {
     uint internal immutable peerAllowanceId = peerId(this.peerAllowance.selector);
 
     constructor() {
@@ -23,7 +27,7 @@ abstract contract PeerAllowance is PeerBase, AllowanceHook {
     /// @param request AMOUNT block stream requested by the trusted peer.
     /// @return Empty response bytes.
     function peerAllowance(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory amounts, , ) = Cursors.init(request, 0, 1);
+        (Cur memory amounts, , ) = Cursors.init(request, 1);
         uint peer = caller();
 
         while (amounts.i < amounts.len) {

package/peer/BalancePull.sol

@@ -6,6 +6,10 @@ import {Cursors, Cur, Schemas} from "../Cursors.sol";
 
 using Cursors for Cur;
 
+interface IPeerBalancePull {
+    function peerBalancePull(bytes calldata request) external returns (bytes memory);
+}
+
 abstract contract BalancePullHook {
     /// @notice Override to process one incoming balance-based pull request from a peer host.
     /// @param peer Peer host node ID for this request.
@@ -19,7 +23,7 @@ abstract contract BalancePullHook {
 /// @notice Peer that pulls requested balances from a peer host into this one.
 /// Each BALANCE block in the request calls `balancePull(peer, asset, meta, amount)`.
 /// Restricted to trusted peers.
-abstract contract PeerBalancePull is PeerBase, BalancePullHook {
+abstract contract PeerBalancePull is PeerBase, BalancePullHook, IPeerBalancePull {
     uint internal immutable peerBalancePullId = peerId(this.peerBalancePull.selector);
 
     constructor() {
@@ -31,7 +35,7 @@ abstract contract PeerBalancePull is PeerBase, BalancePullHook {
     /// @param request BALANCE block stream requested by the trusted peer.
     /// @return Empty response bytes.
     function peerBalancePull(bytes calldata request) external onlyPeer returns (bytes memory) {
-        (Cur memory input, , ) = Cursors.init(request, 0, 1);
+        (Cur memory input, , ) = Cursors.init(request, 1);
         uint peer = caller();
 
         while (input.i < input.len) {

package/peer/Credit.sol

@@ -0,0 +1,39 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import { PeerBase } from "./Base.sol";
+import { CreditAccountHook } from "../commands/Credit.sol";
+import { Cursors, Cur, Forms } from "../Cursors.sol";
+
+using Cursors for Cur;
+
+interface IPeerCreditTo {
+    function peerCreditTo(bytes calldata request) external returns (bytes memory);
+}
+
+/// @title PeerCreditTo
+/// @notice Peer that lets a trusted peer credit supplied accounts directly.
+/// Each ACCOUNT_AMOUNT block calls `creditAccount` for its account.
+abstract contract PeerCreditTo is PeerBase, CreditAccountHook, IPeerCreditTo {
+    uint internal immutable peerCreditToId = peerId(this.peerCreditTo.selector);
+
+    constructor() {
+        emit Peer(host, peerCreditToId, "1:0", Forms.AccountAmount, "", false);
+        emit Labeled(peerCreditToId, bytes32(0), "peerCreditTo");
+    }
+
+    /// @notice Execute the peer-credit call.
+    /// @param request ACCOUNT_AMOUNT block stream supplied by the trusted peer.
+    /// @return Empty response bytes.
+    function peerCreditTo(bytes calldata request) external onlyPeer returns (bytes memory) {
+        (Cur memory amounts, , ) = Cursors.init(request, 1);
+
+        while (amounts.i < amounts.len) {
+            (bytes32 account, bytes32 asset, bytes32 meta, uint amount) = amounts.unpackAccountAmount();
+            creditAccount(account, asset, meta, amount);
+        }
+
+        amounts.complete();
+        return "";
+    }
+}