TP deposit & async flow auth (deposit/withdraw accounts + CCT) by krebernisak · Pull Request #814 · smartcontractkit/chainlink-ton

krebernisak · 2026-07-31T09:10:45Z

Summary

Eliminates queryId-keyed pending storage (pendingBurns, pendingMints, pendingReleases, pendingLocks) from all token pool variants, enabling concurrent cross-chain operations without storage collision or circuit breaker limits. The design evolved through two phases within this PR:

ContextExecutor — introduced as a deterministic proxy contract per operation to receive and forward completion messages without local storage
OffRampAccount + CCT forwardPayload — the final design replaces ContextExecutor entirely: OffRampAccount handles release/lock continuations, while the CCT burn path carries context directly through jetton forwardPayload

What Changed

OffRampAccount (new):

Deterministic account contract for async operation continuation
Receives forwarded jetton notifications and relays them to the pool with context
No per-operation proxy storage needed

CCT Burn Flow:

CCT jetton minter/wallet now accept forwardPayload on burn messages
CCT_AskToBurn, CCT_BurnNotificationForMinter, CCT_ReturnExcessesBack all carry forwardPayload
BurnMintTokenPool sends CCT_AskToBurn with context embedded, finalizing the burn directly — no proxy contract

Token Pools (3 files):

BurnMintTokenPool: Burn path uses direct CCT forwardPayload flow
LockReleaseTokenPool: Release flow uses OffRampAccount for async continuation
LockReleaseLockboxTokenPool: Both lock and release flows use OffRampAccount

Token Pool Entrypoint entrypoint.tolk:

Comprehensive error handling for onLockOrBurnTransfer with try/catch around forward payload decoding
bestEffortReturnTransfer: Returns custody to sender on recoverable failures
notifyLockOrBurnFailure / reserveLockOrBurnFailureValue: Pool balance protection

Other:

Composed consumeInboundRateLimit / consumeOutboundRateLimit functions shared across pools
JettonLockBox tests updated to use auto-generated error bindings

github-actions · 2026-07-31T09:11:05Z

👋 krebernisak, thanks for creating this pull request!

To help reviewers, please consider creating future PRs as drafts first. This allows you to self-review and make any final changes before notifying the team.

Once you're ready, you can mark it as "Ready for review" to request feedback. Thanks!

…ll on mint

duck-types · 2026-08-11T11:50:05Z

+    notificationTarget: address;
+    /// Only messages from this jetton wallet are forwarded (prevents spam from other jettons).
+    /// Set on init — OAA address is derived from (code, owner, notificationTarget) only.
+    allowedJettonWallet: address?;


If this gets deployed with Deploable, there's no need for this to be optional

duck-types · 2026-08-11T11:55:03Z

+            forwardPayload: msg.forwardPayload,
+        },
+    });
+    reply.send(SEND_MODE_CARRY_ALL_REMAINING_MESSAGE_VALUE);


We want to reserve some balance, either here or through Deployable's Deployable_InitializeAndSend

duck-types · 2026-08-11T23:41:20Z

+
+/// Sent by the pool after successful initialization, confirming the account is ready.
+/// The pool identifies which OffRampAccount replied from `in.senderAddress`.
+struct (0xb2e46750) OffRampAccount_Reply {


nit: The message name is not very descriptive. OffRampAccount_Initialized may be a better option

duck-types · 2026-08-11T23:43:34Z

+        bounce: BounceMode.RichBounce,
+        value: 0,
+        dest: getJettonWalletOf(data),
+        body: AskToTransfer {


followup: pontentially, we could just send CCIPSend to the router instead

writing it here so we don't forget

duck-types · 2026-08-11T23:47:00Z

+///      `OffRampAccount`. The token pool (which knows the Deployables setup) is responsible for
+///      deriving the account via Deployables to authenticate deposits. See
+///      `TokenPool_DynamicConfig.allowedDepositNamespaces` / `TokenPool_AdminConfig.deployableCode`.
+fun calcAddressOfOnRampAccount(


Is this outdated? I think this is unused and has been replace by deriveDepositAccount. We shouldn't be using the OnRampAccount_Data to derive the address if the contract gets deployed with Deployable

duck-types · 2026-08-11T23:56:07Z

+    val context = lazy BurnMintTokenPool_BurnContext.fromCell(msg.forwardPayload!);
+    val operation = context.forwardPayload.load();
+    // TODO: is this check necessary?
+    assert(context.wallet == pool.data.jettonClient().walletAddress(), BurnMintTokenPool_Error.UnexpectedBurnBounce);


I don't see the point. What are you protecting from? The forwardPayload is arbitrary data. You've already check that sender is your own wallet address and that the initiator was you.

duck-types · 2026-08-12T00:16:19Z

+    mutate self,
+    sender: address,
+    queryId: uint64,
+    allowedDepositNamespaces: map<uint32, bool>,


You can use void type. See doc here

Suggested change

allowedDepositNamespaces: map<uint32, bool>,

allowedDepositNamespaces: map<uint32, ()>,

krebernisak added 5 commits July 30, 2026 11:36

Add TP <> ContextExecutor integration to support async flow continuation

4eba166

Stash current behaviour - throw on error in transfer continuation

ebd58f4

Lock or burn transfer error handling and return

57e1f96

LockReleaseLockboxTokenPool use ContextExecutor vs. local st

6609721

yarn fmt

983976a

krebernisak requested a review from a team as a code owner July 31, 2026 09:10

krebernisak added 14 commits July 31, 2026 11:47

Fix lint

f55fcce

Update Go bindings

f2c3b99

Share code in TP lib + docs

542c047

CE - wait for deploy confirmation before continuation

7a74975

Merge branch 'main' into feat/tp-ctx-executor

5e311fc

Fix golangci-lint

20d7012

Remove local review

fe72522

Add TODOs for forwardTonAmount

1fd8dec

Migrate CE to OffRampAccount to support async flow

a7ddd88

Fix lock_release & lockbox flow

be605f4

Embed AskToTransfer in oa withdraw, check msg.transferInitiator == nu…

649181a

…ll on mint

Document OffRampAccount contract

081b30d

TP compose consumeIn/OutboundRateLimit functions

f658fdc

Replace CE on burn_mint burn path with CCT burn flow fwdPayload

821d44a

krebernisak changed the title ~~Add TP <> ContextExecutor integration + Jetton transfer error handling~~ Replace ContextExecutor with OffRampAccount + CCT burn forwardPayload flow Aug 7, 2026

Fix oplint

42b38b5

krebernisak changed the title ~~Replace ContextExecutor with OffRampAccount + CCT burn forwardPayload flow~~ Replace per-pool pending maps with OffRampAccount & CCT burn forwardPayload Aug 7, 2026

rm tests/debug_cells.test.ts

4e054d7

krebernisak changed the title ~~Replace per-pool pending maps with OffRampAccount & CCT burn forwardPayload~~ TP continuation - OffRampAccount contract & CCT burn flow forwardPayload Aug 7, 2026

duck-types reviewed Aug 11, 2026

View reviewed changes

Add OnRampAccount + handle TP deposit auth

c0d7e48

krebernisak changed the title ~~TP continuation - OffRampAccount contract & CCT burn flow forwardPayload~~ OnRampAccount (deposit auth) + TP continuation using OffRampAccount contract and CCT burn flow fwdPayload Aug 11, 2026

krebernisak changed the title ~~OnRampAccount (deposit auth) + TP continuation using OffRampAccount contract and CCT burn flow fwdPayload~~ TP deposit and continuation flow using deposit/withdraw accounts + CCT (for burn/mint) Aug 11, 2026

krebernisak changed the title ~~TP deposit and continuation flow using deposit/withdraw accounts + CCT (for burn/mint)~~ TP deposit and continuation flow (deposit/withdraw accounts + CCT) Aug 11, 2026

krebernisak changed the title ~~TP deposit and continuation flow (deposit/withdraw accounts + CCT)~~ TP deposit and async flow auth (deposit/withdraw accounts + CCT) Aug 11, 2026

krebernisak changed the title ~~TP deposit and async flow auth (deposit/withdraw accounts + CCT)~~ TP deposit/async flow auth (deposit/withdraw accounts + CCT) Aug 11, 2026

krebernisak changed the title ~~TP deposit/async flow auth (deposit/withdraw accounts + CCT)~~ TP deposit & async flow auth (deposit/withdraw accounts + CCT) Aug 11, 2026

duck-types reviewed Aug 11, 2026

View reviewed changes

duck-types reviewed Aug 12, 2026

View reviewed changes

Comment thread contracts/contracts/ccip/pools/burn_mint/contract.tolk Outdated

duck-types reviewed Aug 12, 2026

View reviewed changes

Comment thread contracts/contracts/ccip/pools/lib/token_pool/entrypoint.tolk Outdated

krebernisak added 2 commits August 12, 2026 11:48

Improve TP error handling - return transfer

0e79a88

PR feedback - missing lazy

f8f3aa9

Navigation Menu

Uh oh!

TP deposit & async flow auth (deposit/withdraw accounts + CCT) - #814

TP deposit & async flow auth (deposit/withdraw accounts + CCT)#814
krebernisak wants to merge 24 commits into
mainfrom
feat/tp-ctx-executor

krebernisak commented Jul 31, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 31, 2026

Uh oh!

duck-types Aug 11, 2026

Uh oh!

duck-types Aug 11, 2026

Uh oh!

duck-types Aug 11, 2026

Uh oh!

duck-types Aug 11, 2026

Uh oh!

duck-types Aug 11, 2026

Uh oh!

duck-types Aug 11, 2026

Uh oh!

Uh oh!

duck-types Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	allowedDepositNamespaces: map<uint32, bool>,
	allowedDepositNamespaces: map<uint32, ()>,

Uh oh!

Conversation

krebernisak commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What Changed

Uh oh!

github-actions Bot commented Jul 31, 2026

Uh oh!

duck-types Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

duck-types Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

duck-types Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

duck-types Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

duck-types Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

duck-types Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

duck-types Aug 12, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

krebernisak commented Jul 31, 2026 •

edited

Loading