@rootzero/contracts 1.4.0 → 1.6.0

package/commands/admin/Base.sol

@@ -0,0 +1,9 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import {CommandBase, CommandContext, Keys} from "../Base.sol";
+import {AdminEvent} from "../../events/Admin.sol";
+
+/// @title AdminBase
+/// @notice Shared base for admin commands.
+abstract contract AdminBase is CommandBase, AdminEvent {}

package/commands/admin/DenyAssets.sol

@@ -1,23 +1,21 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import { CommandBase, CommandContext, Keys } from "../Base.sol";
+import { AdminBase, CommandContext, Keys } from "./Base.sol";
 import { Cursors, Cur, Schemas } from "../../Cursors.sol";
-import { AdminEvent } from "../../events/Admin.sol";
 using Cursors for Cur;
 
 abstract contract DenyAssetsHook {
-    /// @dev Override to deny a single asset/meta pair.
+    /// @dev Override to deny a single asset.
     /// Called once per ASSET block in the request.
     /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
-    function denyAsset(bytes32 asset, bytes32 meta) internal virtual;
+    function denyAsset(bytes32 asset) internal virtual;
 }
 
 /// @title DenyAssets
-/// @notice Admin command that blocks a list of (asset, meta) pairs via a virtual hook.
+/// @notice Admin command that blocks a list of assets via a virtual hook.
 /// Each ASSET block in the request calls `denyAsset`. Only callable by the admin account.
-abstract contract DenyAssets is CommandBase, AdminEvent, DenyAssetsHook {
+abstract contract DenyAssets is AdminBase, DenyAssetsHook {
     uint internal immutable denyAssetsId = commandId(this.denyAssets.selector);
 
     constructor() {
@@ -34,8 +32,8 @@ abstract contract DenyAssets is CommandBase, AdminEvent, DenyAssetsHook {
         (Cur memory request, , ) = Cursors.init(c.request, 1);
 
         while (request.i < request.len) {
-            (bytes32 asset, bytes32 meta) = request.unpackAsset();
-            denyAsset(asset, meta);
+            bytes32 asset = request.unpackAsset();
+            denyAsset(asset);
         }
 
         request.complete();

package/commands/admin/Destroy.sol

@@ -1,9 +1,8 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import { CommandBase, CommandContext, Keys } from "../Base.sol";
+import { AdminBase, CommandContext, Keys } from "./Base.sol";
 import { Cursors, Cur } from "../../Cursors.sol";
-import { AdminEvent } from "../../events/Admin.sol";
 
 using Cursors for Cur;
 
@@ -16,7 +15,7 @@ abstract contract DestroyHook {
 /// @title Destroy
 /// @notice Admin command that runs host teardown logic via a virtual hook.
 /// The full request is passed to `destroy` as a cursor. Only callable by the admin account.
-abstract contract Destroy is CommandBase, AdminEvent, DestroyHook {
+abstract contract Destroy is AdminBase, DestroyHook {
     uint internal immutable destroyId = commandId(this.destroy.selector);
 
     constructor(string memory input) {

package/commands/admin/Dismiss.sol

@@ -1,16 +1,15 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import { CommandBase, CommandContext, Keys } from "../Base.sol";
+import { AdminBase, CommandContext, Keys } from "./Base.sol";
 import { Cursors, Cur, Schemas } from "../../Cursors.sol";
-import { AdminEvent } from "../../events/Admin.sol";
 using Cursors for Cur;
 
 /// @title Dismiss
 /// @notice Admin command that revokes guardian status from a list of account IDs.
 /// Each ACCOUNT block in the request is disabled as a guardian on the host.
 /// Only callable by the admin account.
-abstract contract Dismiss is CommandBase, AdminEvent {
+abstract contract Dismiss is AdminBase {
     uint internal immutable dismissId = commandId(this.dismiss.selector);
 
     constructor() {

package/commands/admin/Execute.sol

@@ -1,12 +1,11 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import {CommandBase, CommandContext, Keys} from "../Base.sol";
+import {AdminBase, CommandContext, Keys} from "./Base.sol";
 import {Payable} from "../../core/Payable.sol";
 import {Cursors, Cur, Schemas} from "../../Cursors.sol";
-import {AdminEvent} from "../../events/Admin.sol";
 import {Budget} from "../../utils/Value.sol";
-import {Ids} from "../../utils/Ids.sol";
+import {Nodes} from "../../utils/Nodes.sol";
 
 using Cursors for Cur;
 
@@ -15,7 +14,7 @@ using Cursors for Cur;
 /// Each CALL block specifies a target node ID, chain resources, and raw calldata payload.
 /// Only callable by the admin account.
 /// Unspent top-level `msg.value` remains on this host.
-abstract contract ExecutePayable is CommandBase, Payable, AdminEvent {
+abstract contract ExecutePayable is AdminBase, Payable {
     uint internal immutable executePayableId = commandId(this.executePayable.selector);
 
     constructor() {
@@ -32,7 +31,7 @@ abstract contract ExecutePayable is CommandBase, Payable, AdminEvent {
 
         while (request.i < request.len) {
             (uint target, uint resources, bytes calldata data) = request.unpackCall();
-            address addr = Ids.nodeAddr(target);
+            address addr = Nodes.addr(target);
             callAddr(addr, useValue(budget, resources), data);
         }
 

package/commands/admin/Init.sol

@@ -1,9 +1,8 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import { CommandBase, CommandContext, Keys } from "../Base.sol";
+import { AdminBase, CommandContext, Keys } from "./Base.sol";
 import { Cursors, Cur } from "../../Cursors.sol";
-import { AdminEvent } from "../../events/Admin.sol";
 
 using Cursors for Cur;
 
@@ -16,7 +15,7 @@ abstract contract InitHook {
 /// @title Init
 /// @notice Admin command that runs host initialization logic via a virtual hook.
 /// The full request is passed to `init` as a cursor. Only callable by the admin account.
-abstract contract Init is CommandBase, AdminEvent, InitHook {
+abstract contract Init is AdminBase, InitHook {
     uint internal immutable initId = commandId(this.init.selector);
 
     constructor(string memory input) {

package/commands/admin/Label.sol

@@ -1,16 +1,15 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import {CommandBase, CommandContext, Keys} from "../Base.sol";
+import {AdminBase, CommandContext, Keys} from "./Base.sol";
 import {Cursors, Cur, Schemas} from "../../Cursors.sol";
-import {AdminEvent} from "../../events/Admin.sol";
 using Cursors for Cur;
 
 /// @title Label
 /// @notice Admin command that publishes namespaced labels for node IDs.
 /// Each LABEL block in the request emits one `Labeled` event. Only callable by
 /// the admin account.
-abstract contract Label is CommandBase, AdminEvent {
+abstract contract Label is AdminBase {
     uint internal immutable labelId = commandId(this.label.selector);
 
     constructor() {

package/commands/admin/Unauthorize.sol

@@ -1,16 +1,15 @@
 // SPDX-License-Identifier: GPL-3.0-only
 pragma solidity ^0.8.33;
 
-import { CommandBase, CommandContext, Keys } from "../Base.sol";
+import { AdminBase, CommandContext, Keys } from "./Base.sol";
 import { Cursors, Cur, Schemas } from "../../Cursors.sol";
-import { AdminEvent } from "../../events/Admin.sol";
 using Cursors for Cur;
 
 /// @title Unauthorize
 /// @notice Admin command that revokes authorization from a list of node IDs.
 /// Each NODE block in the request is deauthorized on the host.
 /// Only callable by the admin account.
-abstract contract Unauthorize is CommandBase, AdminEvent {
+abstract contract Unauthorize is AdminBase {
     uint internal immutable unauthorizeId = commandId(this.unauthorize.selector);
 
     constructor() {

package/core/Access.sol

@@ -5,7 +5,7 @@ import {NodeEvent} from "../events/Node.sol";
 import {GuardianEvent} from "../events/Guardian.sol";
 import {Runtime} from "./Runtime.sol";
 import {Accounts} from "../utils/Accounts.sol";
-import {Ids} from "../utils/Ids.sol";
+import {Nodes} from "../utils/Nodes.sol";
 import {addrOr} from "../utils/Utils.sol";
 
 /// @title AccessControl
@@ -63,7 +63,7 @@ abstract contract AccessControl is Runtime, NodeEvent, GuardianEvent {
     /// whose host ID has been explicitly authorized.
     /// @param caller Address to check.
     function isTrusted(address caller) internal view returns (bool) {
-        return caller == commander || caller == address(this) || nodes[Ids.toHost(caller)];
+        return caller == commander || caller == address(this) || nodes[Nodes.toHost(caller)];
     }
 
     /// @notice Assert that `node` is in the trusted set and return it.

package/core/Balances.sol

@@ -7,33 +7,32 @@ import {BalanceEvent} from "../events/Balance.sol";
 error InsufficientFunds();
 
 /// @title Balances
-/// @notice On-chain ledger for per-account, per-slot balances.
-/// Higher-level modules decide how slots are derived and validated.
+/// @notice On-chain ledger for per-account, per-asset balances.
 abstract contract Balances is BalanceEvent {
-    /// @dev account -> slot -> balance.
-    mapping(bytes32 account => mapping(bytes32 slot => uint amount)) internal balances;
+    /// @dev account -> asset -> balance.
+    mapping(bytes32 account => mapping(bytes32 asset => uint amount)) internal balances;
 
     /// @notice Add `amount` to an account balance and return the new balance.
     /// @param account Account identifier.
-    /// @param slot Storage slot for the position being credited.
+    /// @param asset Unique asset identifier for the position being credited.
     /// @param amount Amount to credit.
     /// @return balance New balance after the credit.
-    function creditTo(bytes32 account, bytes32 slot, uint amount) internal returns (uint balance) {
-        balance = balances[account][slot] += amount;
+    function creditTo(bytes32 account, bytes32 asset, uint amount) internal returns (uint balance) {
+        balance = balances[account][asset] += amount;
     }
 
     /// @notice Deduct `amount` from an account balance and return the new balance.
     /// Reverts with `InsufficientFunds` if the current balance is less than `amount`.
     /// @param account Account identifier.
-    /// @param slot Storage slot for the position being debited.
+    /// @param asset Unique asset identifier for the position being debited.
     /// @param amount Amount to deduct.
     /// @return balance New balance after the debit.
-    function debitFrom(bytes32 account, bytes32 slot, uint amount) internal returns (uint balance) {
-        balance = balances[account][slot];
+    function debitFrom(bytes32 account, bytes32 asset, uint amount) internal returns (uint balance) {
+        balance = balances[account][asset];
         if (balance < amount) revert InsufficientFunds();
         unchecked {
             balance -= amount;
         }
-        balances[account][slot] = balance;
+        balances[account][asset] = balance;
     }
 }

package/core/Calls.sol

@@ -3,7 +3,7 @@ pragma solidity ^0.8.33;
 
 import {AccessControl} from "./Access.sol";
 import {CommandContext} from "../commands/Base.sol";
-import {Ids} from "../utils/Ids.sol";
+import {Nodes} from "../utils/Nodes.sol";
 
 /// @dev Emitted when a trusted inter-node call fails.
 /// @param addr Contract address that was called.
@@ -18,7 +18,7 @@ abstract contract NodeCalls is AccessControl {
     /// @dev Encodes `msg.sender` as a host ID using the local-chain host layout.
     /// @return Host node ID for `msg.sender`.
     function caller() internal view returns (uint) {
-        return Ids.toHost(msg.sender);
+        return Nodes.toHost(msg.sender);
     }
 
     /// @notice Make a low-level call to an address.
@@ -47,7 +47,7 @@ abstract contract NodeCalls is AccessControl {
     }
 
     /// @notice Make a trusted call to another node in the network.
-    /// Looks up the node's contract address via `ensureTrusted` + `Ids.nodeAddr`,
+    /// Looks up the node's contract address via `ensureTrusted` + `Nodes.addr`,
     /// then issues a low-level call forwarding `value` ETH and `data`.
     /// @param node Node ID of the callee (must be in the authorized set).
     /// @param value Native value to forward in wei.
@@ -55,19 +55,19 @@ abstract contract NodeCalls is AccessControl {
     /// @return out Return data from the successful call.
     function callTo(uint node, uint128 value, bytes memory data) internal returns (bytes memory out) {
         ensureTrusted(node);
-        address addr = Ids.nodeAddr(node);
+        address addr = Nodes.addr(node);
         return callAddr(addr, value, data);
     }
 
     /// @notice Make a trusted query to another node in the network.
-    /// Looks up the node's contract address via `ensureTrusted` + `Ids.nodeAddr`,
+    /// Looks up the node's contract address via `ensureTrusted` + `Nodes.addr`,
     /// then issues a low-level `staticcall` with `data`.
     /// @param node Node ID of the callee (must be in the authorized set).
     /// @param data Encoded calldata to send.
     /// @return out Return data from the successful query.
     function queryTo(uint node, bytes memory data) internal view returns (bytes memory out) {
         ensureTrusted(node);
-        address addr = Ids.nodeAddr(node);
+        address addr = Nodes.addr(node);
         return queryAddr(addr, data);
     }
 
@@ -77,7 +77,7 @@ abstract contract NodeCalls is AccessControl {
     /// @param ctx Command execution context.
     /// @return Decoded command output block stream.
     function callCommand(uint id, uint128 value, CommandContext memory ctx) internal returns (bytes memory) {
-        bytes4 selector = Ids.commandSelector(id);
+        bytes4 selector = Nodes.commandSelector(id);
         bytes memory data = abi.encodeWithSelector(selector, ctx);
         return abi.decode(callTo(id, value, data), (bytes));
     }

package/core/Commitments.sol

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import {CommitmentEvent} from "../events/Commitment.sol";
+
+/// @title Commitments
+/// @notice On-chain registry for account-scoped digest commitments.
+abstract contract Commitments is CommitmentEvent {
+    /// @dev key -> committed digest.
+    mapping(bytes32 key => bytes32 digest) internal commitments;
+
+    /// @notice Clear the commitment under `key` and return the removed digest.
+    /// @param key Commitment lookup key.
+    /// @return digest Removed digest.
+    function uncommit(bytes32 key) internal returns (bytes32 digest) {
+        digest = commitments[key];
+        delete commitments[key];
+    }
+}

package/core/Escrows.sol

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+/// @dev Thrown when a debit would reduce an escrow below zero.
+error InsufficientEscrow();
+
+/// @title Escrows
+/// @notice On-chain ledger for amounts reserved outside normal spendable balances.
+abstract contract Escrows {
+    /// @dev key -> escrowed amount.
+    mapping(bytes32 key => uint amount) internal escrows;
+
+    /// @notice Add `amount` to an escrow and return the new balance.
+    /// @param key Escrow key derived by the caller.
+    /// @param amount Amount to reserve.
+    /// @return balance New escrow balance after the credit.
+    function creditEscrow(bytes32 key, uint amount) internal returns (uint balance) {
+        balance = escrows[key] += amount;
+    }
+
+    /// @notice Deduct `amount` from an escrow and return the new balance.
+    /// Reverts with `InsufficientEscrow` if the current balance is less than `amount`.
+    /// @param key Escrow key derived by the caller.
+    /// @param amount Amount to release.
+    /// @return balance New escrow balance after the debit.
+    function debitEscrow(bytes32 key, uint amount) internal returns (uint balance) {
+        balance = escrows[key];
+        if (balance < amount) revert InsufficientEscrow();
+        unchecked {
+            balance -= amount;
+        }
+        escrows[key] = balance;
+    }
+}

package/core/Host.sol

@@ -10,7 +10,7 @@ import {ExecutePayable} from "../commands/admin/Execute.sol";
 import {Label} from "../commands/admin/Label.sol";
 import {Revoke} from "../guards/Revoke.sol";
 import {IntroductionEvent} from "../events/Introduction.sol";
-import {Ids} from "../utils/Ids.sol";
+import {Nodes} from "../utils/Nodes.sol";
 
 /// @title IHostIntroduction
 /// @notice Interface implemented by hosts that accept introductions from other hosts.
@@ -51,7 +51,7 @@ abstract contract Host is
     /// @param peer Host node ID being introduced.
     /// @param blocknum Block number at which the host was deployed.
     function introduce(uint peer, uint blocknum) external {
-        emit Introduction(Ids.matchHost(peer, msg.sender), blocknum);
+        emit Introduction(Nodes.matchHost(peer, msg.sender), blocknum);
     }
 
     /// @notice Accept native ETH transfers (e.g. from command value flows).

package/core/Runtime.sol

@@ -2,13 +2,18 @@
 pragma solidity ^0.8.33;
 
 import {Assets} from "../utils/Assets.sol";
-import {Ids} from "../utils/Ids.sol";
+import {Nodes} from "../utils/Nodes.sol";
 
-/// @title Runtime
-/// @notice Shared runtime for host identity and native asset identity.
-abstract contract Runtime {
-    /// @dev This contract's host node ID, set to `Ids.toHost(address(this))` at construction.
-    uint public immutable host = Ids.toHost(address(this));
+/// @title NativeAsset
+/// @notice Shared native asset identity for host helpers.
+abstract contract NativeAsset {
     /// @dev Asset ID for the native chain coin/token, bound to the current chain at deployment.
     bytes32 internal immutable nativeAsset = Assets.toNative();
 }
+
+/// @title Runtime
+/// @notice Shared runtime for host identity and native asset identity.
+abstract contract Runtime is NativeAsset {
+    /// @dev This contract's host node ID, set to `Nodes.toHost(address(this))` at construction.
+    uint public immutable host = Nodes.toHost(address(this));
+}

package/core/Types.sol

@@ -5,8 +5,6 @@ pragma solidity ^0.8.33;
 struct AssetAmount {
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
     /// @dev Token amount in the asset's native units.
     uint amount;
 }
@@ -17,8 +15,6 @@ struct AccountAsset {
     bytes32 account;
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
 }
 
 /// @notice Account-scoped amount shape for requests, responses, and reporting.
@@ -27,8 +23,6 @@ struct AccountAmount {
     bytes32 account;
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
     /// @dev Token amount in the asset's native units.
     uint amount;
 }
@@ -39,8 +33,6 @@ struct HostAmount {
     uint host;
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
     /// @dev Token amount in the asset's native units.
     uint amount;
 }
@@ -53,8 +45,6 @@ struct HostAccountAsset {
     bytes32 account;
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
 }
 
 /// @notice Host-scoped account amount shape.
@@ -65,8 +55,6 @@ struct HostAccountAmount {
     bytes32 account;
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
     /// @dev Token amount in the asset's native units.
     uint amount;
 }
@@ -79,8 +67,6 @@ struct Tx {
     bytes32 to;
     /// @dev Asset identifier.
     bytes32 asset;
-    /// @dev Asset metadata slot.
-    bytes32 meta;
     /// @dev Transfer amount in the asset's native units.
     uint amount;
 }

package/docs/Schema.md

@@ -21,7 +21,7 @@ The block key is:
 bytes4(keccak256("#name"))
 ```
 
-For example, `#amount { bytes32 asset, bytes32 meta, uint amount }` uses the key
+For example, `#amount { bytes32 asset, uint amount }` uses the key
 derived from `#amount`. Blocks must not be overloaded: one block name should have
 one protocol meaning.
 
@@ -30,7 +30,7 @@ one protocol meaning.
 A block starts with `#`. Fixed fields are written in braces:
 
 ```txt
-#amount { bytes32 asset, bytes32 meta, uint amount }
+#amount { bytes32 asset, uint amount }
 #account { bytes32 account }
 ```
 
@@ -46,7 +46,7 @@ Empty braces are invalid. A zero-payload block must omit braces.
 A schema is a comma-separated list of items. Order is significant.
 
 ```txt
-#amount { bytes32 asset, bytes32 meta, uint amount },
+#amount { bytes32 asset, uint amount },
 maybe #account { bytes32 account }
 ```
 
@@ -76,10 +76,10 @@ alias to give those bytes a presentation name:
 Cardinality is expressed with prefix keywords:
 
 ```txt
-#balance { bytes32 asset, bytes32 meta, uint amount }
-maybe #balance { bytes32 asset, bytes32 meta, uint amount }
-many #balance { bytes32 asset, bytes32 meta, uint amount }
-maybe many #balance { bytes32 asset, bytes32 meta, uint amount }
+#balance { bytes32 asset, uint amount }
+maybe #balance { bytes32 asset, uint amount }
+many #balance { bytes32 asset, uint amount }
+maybe many #balance { bytes32 asset, uint amount }
 ```
 
 - no prefix: one required item
@@ -190,6 +190,25 @@ types may pack these words differently, but a given chain type must use one
 stable format everywhere. For EVM chains, the low 128 bits are native value /
 endowment in wei; higher bits are reserved for execution resources such as gas.
 
+## Protocol IDs
+
+Account, asset, and node ID fields use one 32-byte convention:
+
+- first byte `0x00`: opaque ID, encoded as `0x00 || bytes31(hash)`. The full
+  preimage must come from a lookup table or witness data when native metadata is
+  needed.
+- first byte nonzero: structured ID. The value may be deconstructed according
+  to its chain/runtime layout.
+
+Opaque preimages must start with a one-byte format/hash tag; `0x01` means
+keccak256. The remaining bytes are host/domain-specific until the protocol
+standardizes a fuller preimage payload format.
+
+The field name supplies the protocol role for opaque IDs. For example, a
+`bytes32 asset` whose first byte is zero is still an asset in that block; it
+just cannot be decoded without external context. Runtime helpers that inspect
+the layout of an ID only apply to structured IDs.
+
 ## Identifiers
 
 Block names use lower camelCase ASCII identifiers. Field names and aliases use
@@ -246,9 +265,9 @@ expands to:
 Common protocol schemas live in `contracts/blocks/Schema.sol`:
 
 ```txt
-#amount { bytes32 asset, bytes32 meta, uint amount }
-#balance { bytes32 asset, bytes32 meta, uint amount }
-#custody { uint host, bytes32 asset, bytes32 meta, uint amount }
+#amount { bytes32 asset, uint amount }
+#balance { bytes32 asset, uint amount }
+#custody { uint host, bytes32 asset, uint amount }
 #call { uint target, uint resources, #bytes as payload }
 #step { uint target, uint resources, #bytes as request }
 #context { bytes32 account, #bytes as state, #bytes as request }

package/events/Asset.sol

@@ -3,15 +3,29 @@ pragma solidity ^0.8.33;
 
 import { EventEmitter } from "./Emitter.sol";
 
+/// @notice Emitted when a host declares the preimage for an opaque asset ID.
+abstract contract AssetEvent is EventEmitter {
+    string private constant ABI = "event Asset(uint indexed host, bytes32 asset, bytes preimage)";
+
+    /// @param host Host node ID that manages this asset declaration.
+    /// @param asset Asset identifier, typically `0x00 || bytes31(hash(preimage))`.
+    /// @param preimage Canonical preimage used to derive or resolve the opaque asset ID.
+    /// The first byte is a format/hash tag; `0x01` means keccak256.
+    event Asset(uint indexed host, bytes32 asset, bytes preimage);
+
+    constructor() {
+        emit EventAbi(ABI);
+    }
+}
+
 /// @notice Emitted when an asset support status is updated on a host.
 abstract contract AssetStatusEvent is EventEmitter {
-    string private constant ABI = "event AssetStatus(uint indexed host, bytes32 asset, bytes32 meta, uint status)";
+    string private constant ABI = "event AssetStatus(uint indexed host, bytes32 asset, uint status)";
 
     /// @param host Host node ID that manages this listing.
     /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
     /// @param status Asset support status. Zero means unsupported; nonzero means supported.
-    event AssetStatus(uint indexed host, bytes32 asset, bytes32 meta, uint status);
+    event AssetStatus(uint indexed host, bytes32 asset, uint status);
 
     constructor() {
         emit EventAbi(ABI);

package/events/Balance.sol

@@ -5,15 +5,14 @@ import { EventEmitter } from "./Emitter.sol";
 
 /// @notice Emitted when an account balance changes.
 abstract contract BalanceEvent is EventEmitter {
-    string private constant ABI = "event Balance(bytes32 indexed account, bytes32 asset, bytes32 meta, uint balance, int change, uint access)";
+    string private constant ABI = "event Balance(bytes32 indexed account, bytes32 asset, uint balance, int change, uint access)";
 
     /// @param account Account identifier whose balance changed.
     /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
     /// @param balance New balance after the change.
     /// @param change Signed delta applied to the balance (positive = credit, negative = debit).
     /// @param access Command ID or context identifier associated with this change.
-    event Balance(bytes32 indexed account, bytes32 asset, bytes32 meta, uint balance, int change, uint access);
+    event Balance(bytes32 indexed account, bytes32 asset, uint balance, int change, uint access);
 
     constructor() {
         emit EventAbi(ABI);

package/events/Commitment.sol

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: GPL-3.0-only
+pragma solidity ^0.8.33;
+
+import { EventEmitter } from "./Emitter.sol";
+
+/// @notice Emitted when an account-scoped commitment is updated.
+abstract contract CommitmentEvent is EventEmitter {
+    string private constant ABI = "event Commitment(bytes32 indexed account, bytes32 key, bytes32 digest, uint status)";
+
+    /// @param account Account associated with the commitment.
+    /// @param key Commitment lookup key.
+    /// @param digest Committed digest. Zero may be used when clearing without revealing the previous digest.
+    /// @param status Commitment status. Zero means cleared; nonzero means committed or application-defined.
+    event Commitment(bytes32 indexed account, bytes32 key, bytes32 digest, uint status);
+
+    constructor() {
+        emit EventAbi(ABI);
+    }
+}

package/events/Locked.sol

@@ -5,15 +5,14 @@ import { EventEmitter } from "./Emitter.sol";
 
 /// @notice Emitted when an account locks an asset in a protocol operation.
 abstract contract LockedEvent is EventEmitter {
-    string private constant ABI = "event Locked(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint32 action, uint context)";
+    string private constant ABI = "event Locked(bytes32 indexed account, bytes32 asset, uint amount, uint32 action, uint context)";
 
     /// @param account Account identifier that locked the asset.
     /// @param asset Asset identifier.
-    /// @param meta Asset metadata slot.
     /// @param amount Amount locked.
     /// @param action Primary operation hint from `Actions`.
     /// @param context Reserved context value for future use.
-    event Locked(bytes32 indexed account, bytes32 asset, bytes32 meta, uint amount, uint32 action, uint context);
+    event Locked(bytes32 indexed account, bytes32 asset, uint amount, uint32 action, uint context);
 
     constructor() {
         emit EventAbi(ABI);