@totemsdk/omnia-host 0.9.0 → 0.11.0

package/LICENSE

@@ -1,21 +1,202 @@
-MIT License
-
-Copyright (c) 2024-2026 Totem SDK Contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,60 @@
+Totem SDK
+Copyright 2024-2026 Totem SDK Contributors
+
+This product includes software and material derived from the projects listed
+below. The notices are provided for attribution and do not modify the Apache
+License, Version 2.0.
+
+Minima
+------
+Minima protocol and application
+https://github.com/minima-global/Minima
+Licensed under the Apache License, Version 2.0.
+
+Portions of the Totem SDK core, KISSVM, serialization, transaction and wallet
+surfaces are translated or adapted from Minima's Java implementation. Those
+portions remain subject to the Apache License, Version 2.0 and retain the
+applicable copyright and attribution notices.
+
+Bouncy Castle
+-------------
+Legion of the Bouncy Castle Inc.
+https://www.bouncycastle.org/
+Licensed under the Bouncy Castle License (MIT-style).
+
+The Winternitz/GMSS-compatible WOTS implementation follows the algorithms and
+behaviour of Bouncy Castle's WinternitzOTSignature, WinternitzOTSVerify and
+GMSSRandom classes.
+
+QVAC
+----
+QVAC SDK
+https://www.npmjs.com/package/@qvac/sdk
+Licensed under the Apache License, Version 2.0.
+
+The vendored type surface in packages/qvac/src/vendor/qvac-sdk.d.ts is
+reconstructed from the @qvac/sdk type declarations for build-time use.
+
+Protocol Buffers
+----------------
+Protocol Buffers - Google's data interchange format
+Copyright 2008 Google Inc. All rights reserved.
+https://developers.google.com/protocol-buffers/
+Licensed under the BSD 3-Clause License.
+
+The generated file packages/agent-policy/src/generated/google/protobuf/struct.ts
+retains its original BSD 3-Clause header.
+
+BIP39
+-----
+BIP39 English word list
+https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt
+Licensed under the MIT License.
+
+Contributor Covenant
+--------------------
+Contributor Covenant, version 2.1
+https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
+Licensed under the Creative Commons Attribution 4.0 International License.
+
+The Totem SDK Code of Conduct is adapted from Contributor Covenant 2.1.

package/README.md

@@ -23,6 +23,10 @@ The daemon configuration is read from environment variables:
 | `OMNIA_CHAIN_RPC` | `http://127.0.0.1:9005` | Totem node RPC endpoint |
 | `OMNIA_CHAIN_RPC_PASSWORD` | unset | Totem node RPC password |
 | `OMNIA_ANALYTICS_DB` | unset | Optional DuckDB analytics path |
+| `OMNIA_OBSERVE` | on | `0`/`false` disables the durable observation feed |
+| `OMNIA_OBSERVE_DB` | `<OMNIA_HOST_DB dir>/observe.sqlite` | Observation journal (via `@totemsdk/storage`) |
+| `OMNIA_NETWORK_ID` | `omnia` | Observation network id |
+| `OMNIA_SOURCE_NODE_ID` | `OMNIA_LOCAL_PARTY_ID` or `omnia-host` | Stable observation source id |
 | `OMNIA_RELAY` | native swarm | Optional relay URL |
 | `OMNIA_LOCAL_PUBKEY` | unset | Local Omnia identity |
 | `OMNIA_LOCAL_PARTY_ID` | unset | Local channel party ID required for mutations |
@@ -35,9 +39,49 @@ The daemon configuration is read from environment variables:
 | `OMNIA_HOST_READ_ONLY` | unset | `1` forces read-only mode even with keys present |
 | `OMNIA_HOST_IDENTITY_FILE` | unset | Optional delegated identity claim JSON (operator root → service delegate) |
 | `OMNIA_HOST_SERVICE_TYPE` | `omnia-router` | EdgeServiceManifest serviceType |
+| `OMNIA_P2P_HUB_PORT` | unset | Enable the RFC-062 loopback P2P hub on this port |
+| `OMNIA_P2P_HUB_HOST` | `127.0.0.1` | Hub bind address; keep loopback unless explicitly remote |
+| `OMNIA_P2P_HUB_TOKEN` | unset | Hub bearer token (use a per-client credential in production) |
+| `OMNIA_P2P_HUB_ORIGINS` | unset | Comma-separated browser Origin allowlist |
+| `OMNIA_P2P_HUB_TOPICS` | unset | Comma-separated topic prefixes (e.g. `omnia,dex.v1`) |
+
+### Observation feed (read-only)
+
+Every host runs a durable, replayable observation journal (RFC-0011 Amendment A)
+built on `@totemsdk/storage` (`createJournal` + `SqliteStore`) — **not** a direct
+SQLite/DuckDB write. It records domain transitions (channel open/update/HTLC/
+settle/close, factory/VC, splice, VTXO, pool, operation, transport) with identity,
+correlation, exact amounts, chain/evidence refs and a compact before/after diff.
+
+```text
+GET /observe/snapshot                 → current state + journal cursor
+GET /observe/events?after=<cursor>    → SSE replay + live tail (Last-Event-ID)
+```
+
+Both endpoints use the control-plane origin allowlist and `OMNIA_CONTROL_TOKEN`
+bearer auth. Events never include seeds, private keys, preimages or raw
+signatures (only hashes/indices). The emitter persists asynchronously and never
+blocks a mutation.
+
+**Persistence.** All host persistence — the channel store, the operation journal
+and the observation events — goes through `@totemsdk/storage`. The channel and
+operation stores use the synchronous `@totemsdk/storage/sqlite-sync` adapter
+(same codec/envelope as `SqliteStore`); legacy `omnia_channels` /
+`omnia_operations` tables are migrated automatically on open. `omnia-host` does
+not import `better-sqlite3` directly.
 
 ### Signing model
 
+Pairing a local node with the extension (RFC-062):
+
+```bash
+OMNIA_HOST_DB=~/.totem/omnia/omnia.sqlite OMNIA_P2P_HUB_PORT=7788 omnia-host pair
+```
+
+The command prints a one-time code, node fingerprint and endpoint. Open Totem →
+Settings → **PAIR NODE**, paste them, verify the fingerprint and confirm. The
+pairing service listens on `127.0.0.1:${OMNIA_PAIR_PORT:-7789}` by default.
+
 `OMNIA_HOST_SEED` (or the keyfile) is the base seed. The host derives the unified
 child TreeKey (`createUnifiedChildTreeKey(baseSeed, localAddressIndex)`) and signs
 every channel state (and the boot manifest) with serialized TreeSignatures; the

package/dist/api/jsonrpc.d.ts

@@ -1,5 +1,8 @@
 import type { AddressInfo } from 'node:net';
 import { type WebSocket } from 'ws';
+import type { ObservationBus } from '../observe/bus.js';
+import type { ObservationStore } from '../observe/types.js';
+import type { ObserveSnapshot } from '../observe/types.js';
 export interface JsonRpcRequest {
     jsonrpc?: '2.0';
     id?: string | number | null;
@@ -36,6 +39,15 @@ export interface ControlServerOptions {
      * over the WebSocket handshake.
      */
     authToken?: string;
+    /**
+     * Read-only observation feed (RFC-0011 Amendment A). Snapshot and SSE are
+     * guarded by the same origin allowlist + bearer token as the RPC surface.
+     */
+    observe?: {
+        store: ObservationStore;
+        bus: ObservationBus;
+        snapshot: () => ObserveSnapshot | Promise<ObserveSnapshot>;
+    };
 }
 export interface ControlServer {
     listen(): Promise<void>;

package/dist/api/jsonrpc.js

@@ -98,6 +98,83 @@ function safeTokenEqual(provided, expected) {
         return false;
     return node_crypto_1.default.timingSafeEqual(a, b);
 }
+function authorizeControlPlane(req, allowedOrigins, authToken) {
+    if (!isOriginAllowed(req, allowedOrigins))
+        return false;
+    if (authToken !== undefined && !safeTokenEqual(bearerToken(req), authToken))
+        return false;
+    return true;
+}
+function parseObserveCursor(req) {
+    const url = new URL(req.url ?? '/', 'http://localhost');
+    const after = Number(url.searchParams.get('after') ?? NaN);
+    if (Number.isFinite(after) && after >= 0)
+        return Math.floor(after);
+    const lastEventId = req.headers['last-event-id'];
+    const raw = Array.isArray(lastEventId) ? lastEventId[0] : lastEventId;
+    const parsed = Number(raw ?? NaN);
+    return Number.isFinite(parsed) && parsed >= 0 ? Math.floor(parsed) : 0;
+}
+async function streamObservations(req, res, observe) {
+    res.writeHead(200, {
+        'content-type': 'text/event-stream',
+        'cache-control': 'no-cache',
+        connection: 'keep-alive',
+        'x-accel-buffering': 'no',
+    });
+    let last = parseObserveCursor(req);
+    let closed = false;
+    let live = false;
+    const pending = new Map();
+    const write = (obs) => {
+        if (closed || obs.sourceSequence <= last)
+            return;
+        last = obs.sourceSequence;
+        res.write(`id: ${obs.sourceSequence}\nevent: observation\ndata: ${JSON.stringify(obs)}\n\n`);
+    };
+    const unsubscribe = observe.bus.subscribe((obs) => {
+        if (obs.sourceSequence <= last)
+            return;
+        if (live)
+            write(obs);
+        else
+            pending.set(obs.sourceSequence, obs);
+    });
+    const heartbeat = setInterval(() => {
+        if (!closed)
+            res.write(': keep-alive\n\n');
+    }, 15_000);
+    heartbeat.unref?.();
+    const cleanup = () => {
+        if (closed)
+            return;
+        closed = true;
+        clearInterval(heartbeat);
+        unsubscribe();
+        res.end();
+    };
+    req.on('close', cleanup);
+    req.on('error', cleanup);
+    try {
+        const cursor = await observe.store.head();
+        res.write(`event: cursor\ndata: ${JSON.stringify({ cursor })}\n\n`);
+        // Replay the durable journal, then flush anything the bus delivered while
+        // replaying. The journal is the source of truth; no gap, no duplication.
+        for (const obs of await observe.store.readSince(last))
+            write(obs);
+        live = true;
+        for (const seq of Array.from(pending.keys()).sort((a, b) => a - b)) {
+            const obs = pending.get(seq);
+            if (obs)
+                write(obs);
+        }
+        pending.clear();
+    }
+    catch (error) {
+        console.error('[observe] stream failed:', error instanceof Error ? error.message : String(error));
+        cleanup();
+    }
+}
 function createControlServer(options) {
     // RFC-020 H1: a non-loopback bind must be authenticated. Refuse to start a
     // network-exposed control plane without a token.
@@ -119,7 +196,29 @@ function createControlServer(options) {
             sendJson(res, ready ? 200 : 503, { ok: ready });
             return;
         }
-        if (req.method !== 'POST' || pathname(req.url) !== wsPath) {
+        const route = pathname(req.url);
+        if (req.method === 'GET' && (route === '/observe/snapshot' || route === '/observe/events')) {
+            if (!options.observe) {
+                sendJson(res, 404, { error: 'Observation feed not enabled' });
+                return;
+            }
+            if (!authorizeControlPlane(req, allowedOrigins, authToken)) {
+                sendJson(res, 403, { error: 'Forbidden' });
+                return;
+            }
+            if (route === '/observe/snapshot') {
+                try {
+                    sendJson(res, 200, await options.observe.snapshot());
+                }
+                catch (error) {
+                    sendJson(res, 500, { error: error instanceof Error ? error.message : String(error) });
+                }
+                return;
+            }
+            await streamObservations(req, res, options.observe);
+            return;
+        }
+        if (req.method !== 'POST' || route !== wsPath) {
             sendJson(res, 404, { error: 'Not found' });
             return;
         }

package/dist/api/methods.d.ts

@@ -1,22 +1,32 @@
-import type { ChannelParticipant, ChannelSigner, OmniaChannel, OmniaSwarm } from '@totemsdk/omnia';
+import { buildSettlementSigningRequest } from '@totemsdk/omnia';
+import type { ChannelParticipant, ChannelSigner, CustodyMode, OmniaChannel, OmniaPeer, OmniaSwarm, SignRequest, SignerPort, UnsignedStateUpdate, ChannelOpeningPlan } from '@totemsdk/omnia';
+import { type OmniaVtxo, type OmniaVtxoPool, type VtxoOperatorReceipt } from '@totemsdk/omnia-vtxo';
+import { type LiquidityAllocation, type LiquidityBondRegistryState, type LiquidityPoolManifest, type LiquidityPosition, type WithdrawalIntent } from '@totemsdk/liquidity-bond';
 import type { ChainStateProvider } from '@totemsdk/chain-provider';
 import type { WotsLeaseProvider } from '@totemsdk/wots-lease';
-import { type ChannelFactory, type WotsLeaseBundle } from '@totemsdk/omnia-factory';
-import { type SpliceAcceptance, type SpliceLeaseProvider, type SpliceProposal } from '@totemsdk/omnia-splice';
+import { type ChannelFactory, type FactoryOpeningPlan, type WotsLeaseBundle } from '@totemsdk/omnia-factory';
+import { type QuiescedChannel, type SpliceAcceptance, type SpliceLeaseProvider, type SpliceProposal, type UnsignedSpliceProposal } from '@totemsdk/omnia-splice';
 import type { JsonRpcHandler } from './jsonrpc.js';
 import type { RoutingProvider } from '../router/routing-provider.js';
 import type { OperationStore } from '../stores/operations.js';
+import type { ObservationEmitter } from '../observe/emitter.js';
 export type OperationStoreLike = Pick<OperationStore, 'get' | 'create' | 'transition' | 'listByStatus'>;
 export interface HostApiContext {
     channels: Map<string, OmniaChannel>;
     routing: RoutingProvider;
     refreshRouting?: () => void;
     operations?: OperationStoreLike;
+    /** Durable observation emitter (optional; behind OMNIA_OBSERVE). */
+    observe?: ObservationEmitter;
     signer?: ChannelSigner;
     leaseProvider?: WotsLeaseProvider;
     chainProvider?: ChainStateProvider;
     swarm?: OmniaSwarm;
+    /** Last authenticated peer seen for each channel; reply over it directly. */
+    channelPeers?: Map<string, OmniaPeer>;
     localParticipant?: ChannelParticipant;
+    /** Native transport identity, published in the signed manifest. */
+    transportPubkey?: string;
     /**
      * Signs the funding-transaction digest with the funding coin's key, so
      * openChannel can assemble the funding witness without the caller reproducing
@@ -30,6 +40,38 @@ export interface HostApiContext {
     spliceLeaseProvider?: SpliceLeaseProvider;
     /** When true, only read-only methods are registered (no signer material). */
     readOnly?: boolean;
+    /** Deployment custody mode (RFC-058); defaults to self. */
+    custodyMode?: CustodyMode;
+    /** RFC-058 signer port; when absent the local signer path is used. */
+    signerPort?: SignerPort;
+    /** Coordinator-mode prepared channel updates awaiting wallet signatures. */
+    preparedPay?: Map<string, PreparedPayEntry>;
+    /** Coordinator-mode cooperative settlements awaiting the local signature. */
+    preparedSettle?: Map<string, PreparedSettleEntry>;
+    /** Coordinator-mode channel openings awaiting the funding signature. */
+    preparedOpen?: Map<string, PreparedOpenEntry>;
+    /** Coordinator-mode splices awaiting wallet signatures. */
+    preparedSplice?: Map<string, PreparedSpliceEntry>;
+    /** Coordinator-mode factory openings awaiting the creator signature. */
+    preparedFactory?: Map<string, PreparedFactoryEntry>;
+    /** VTXO pools, live claims and unsigned/signed receipts. */
+    vtxoPools?: Map<string, OmniaVtxoPool>;
+    vtxos?: Map<string, OmniaVtxo>;
+    vtxoReceipts?: Map<string, VtxoOperatorReceipt>;
+    preparedVtxoReceipts?: Map<string, PreparedVtxoReceiptEntry>;
+    /** Liquidity pools and their live registry state. */
+    pools?: Map<string, {
+        manifest: LiquidityPoolManifest;
+        registry: LiquidityBondRegistryState;
+    }>;
+    poolPositions?: Map<string, {
+        position: LiquidityPosition;
+        registry: LiquidityBondRegistryState;
+        allocation?: LiquidityAllocation;
+        intent?: WithdrawalIntent;
+    }>;
+    /** True when the host has no signer and exposes prepare/submit only. */
+    coordinator?: boolean;
     /** Opt-in host identity (address, publicKeyDigest, optional delegation). */
     identity?: {
         address: string;
@@ -39,10 +81,100 @@ export interface HostApiContext {
     };
     /** Boot-time signed EdgeServiceManifest. */
     manifest?: unknown;
+    /** RFC-062 loopback P2P hub endpoint, when enabled. */
+    p2pHubUrl?: string;
 }
 /**
  * CAN-006: a fully serializable channel-state view so RPC/HTTP consumers can
  * read everything they need without reaching into `getStore()`/`getMethods()`.
  */
 export declare function channelStateView(channel: OmniaChannel): Record<string, unknown>;
+/**
+ * Wait for the counterparty to acknowledge a channel proposal. A channel is not
+ * usable on both sides until the peer has accepted it; without this, an
+ * immediate `pay()` can race ahead of the peer's accept and its STATE_UPDATE is
+ * dropped ("Unknown channel"). Resolves true on ACK, false on ERROR/timeout.
+ */
+interface PeerReply {
+    type: string;
+    channelId?: string;
+    nonce?: number;
+    payload?: unknown;
+}
+interface ReplyPeer {
+    sendMessage(msg: PeerReply & {
+        channelId: string;
+    }): Promise<void>;
+    onMessage(cb: (msg: PeerReply) => void): () => void;
+    onReconnected?(cb: () => void): () => void;
+}
+/**
+ * Send a proposal and wait for its ACK/ERROR reply.
+ *
+ * The message is resent with the SAME nonce when the peer reconnects (a
+ * proposal or its reply may have been lost when the old stream closed) and
+ * once mid-flight in case the reply was lost without the stream closing.
+ * Receivers are expected to deduplicate by `(type, channelId, nonce)` so a
+ * resend never consumes another WOTS leaf or yields a different signature.
+ */
+export declare function requestPeerReply(peer: ReplyPeer, msg: PeerReply & {
+    channelId: string;
+}, channelId: string, timeoutMs: number, types?: string[]): Promise<PeerReply | null>;
+export interface PreparedPayEntry {
+    channelId: string;
+    unsigned: UnsignedStateUpdate;
+    intent: import('@totemsdk/omnia').SignRequest;
+    update: import('@totemsdk/omnia').SignRequest;
+    settlement: import('@totemsdk/omnia').SignRequest;
+    expiresAt: number;
+}
+export interface PreparedOpenEntry {
+    plan: ChannelOpeningPlan;
+    fundingScript?: string;
+    intent: import('@totemsdk/omnia').SignRequest;
+    funding: import('@totemsdk/omnia').SignRequest;
+    expiresAt: number;
+}
+export interface PreparedVtxoReceiptEntry {
+    receipt: VtxoOperatorReceipt;
+    payload: Uint8Array;
+    request: SignRequest;
+    expiresAt: number;
+}
+export interface PreparedFactoryEntry {
+    plan: FactoryOpeningPlan;
+    remotePartyId?: string;
+    remoteFundingSignature?: Uint8Array;
+    intent: import('@totemsdk/omnia').SignRequest;
+    commitment: import('@totemsdk/omnia').SignRequest;
+    expiresAt: number;
+}
+export interface PreparedSpliceEntry {
+    channelId: string;
+    quiescedChannel: QuiescedChannel;
+    quiesce: {
+        unsigned: UnsignedStateUpdate;
+        intent: import('@totemsdk/omnia').SignRequest;
+        update: import('@totemsdk/omnia').SignRequest;
+        settlement: import('@totemsdk/omnia').SignRequest;
+    };
+    unsigned: UnsignedSpliceProposal;
+    acceptance: SpliceAcceptance;
+    intent: import('@totemsdk/omnia').SignRequest;
+    splice: import('@totemsdk/omnia').SignRequest;
+    expiresAt: number;
+}
+export interface PreparedSettleEntry {
+    channelId: string;
+    closing: OmniaChannel;
+    request: ReturnType<typeof buildSettlementSigningRequest>;
+    counterpartySignature: {
+        partyId: string;
+        signature: Uint8Array;
+    };
+    intent: import('@totemsdk/omnia').SignRequest;
+    settlement: import('@totemsdk/omnia').SignRequest;
+    expiresAt: number;
+}
 export declare function createHostMethods(context: HostApiContext): Map<string, JsonRpcHandler>;
+export {};