feat(BOP-495): ERC-8056 interface-review follow-ups (renames + Conversion extension) - #192

The Cobalt conformance leg patched current base/base (this PR's renamed/added
ERC-8056 surface) into base-anvil but ran the previously-pinned base-std
reference, which still expects the pre-rename symbols — a guaranteed mismatch.
Point the Cobalt base_std_ref at the paired base-std commit (base/base-std#192)
so the two repos are cross-validated in lockstep. Beryl (v1.0.0) is unchanged;
V1 is frozen and untouched by this PR.

Co-authored-by: Cursor <cursoragent@cursor.com>

Follow the base-std PR head after dropping review comments (base/base-std#192);
keeps the conformance pair in lockstep.

Co-authored-by: Cursor <cursoragent@cursor.com>

…sion extension) (base#4285)

* refactor(BOP-495): adopt UI-multiplier vocabulary for Cobalt-only errors/events

Per the Aug 4 2026 B20 interface review, rename the Cobalt-only ERC-8056
scheduled-multiplier symbols to the "UI Multiplier" vocabulary:

  error ScheduleOverlap        -> PendingUpdateExists
  error NoScheduledMultiplier  -> NoScheduledUIMultiplier
  event MultiplierUpdateCancelled -> UIMultiplierUpdateCancelled

These symbols were introduced at Cobalt (AssetV2) and are not yet activated on
any network (Cobalt is unscheduled on mainnet/sepolia), so a pure rename of the
wire surface is consensus-safe. The frozen Beryl (V1) surface is untouched.
Regenerates V2_ABI_FINGERPRINT (V1 fingerprint and the shared-signature pins are
unchanged).

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(BOP-495): add updateUIMultiplier alias; deprecate updateMultiplier

Add the canonical ERC-8056-vocabulary instant-failsafe selector
`updateUIMultiplier(uint256)` at Cobalt (AssetV2), routing to the same
`Asset::update_multiplier` logic (identical behavior and events).

The Beryl-live `updateMultiplier` selector is FROZEN, so this is add-alias +
deprecate (not rename): the legacy selector stays dialable in the precompile
(the V2 selector set is intentionally, permanently larger) and only base-std's
advertised interface drops it. Regenerates V2_ABI_FINGERPRINT and the frozen
selector set (20 -> 21); the v1-subset delta grows 8 -> 9. V1 fingerprint and
the frozen Beryl surface are untouched.

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(BOP-495): adopt IScaledUIAmountConversion (toUIAmount/fromUIAmount)

Reverse the prior opt-out and claim the ERC-8056 Conversion extension
(0x57854fc3) at Cobalt. Add `toUIAmount(uint256)` (raw->UI) and
`fromUIAmount(uint256)` (UI->raw) selectors routing to the existing
`to_scaled_balance` / `to_raw_balance` logic (identical behavior, effective
multiplier). Advertise 0x57854fc3 in ERC8056_INTERFACE_IDS (supports_interface
already returns any advertised id), add the XOR pin, and invert the
"conversion extension not claimed" test.

Names/id cross-checked against the live ERC-8056 spec; the XOR pin confirms
0x57854fc3 == toUIAmount ^ fromUIAmount. The Beryl-live toScaledBalance /
toRawBalance selectors are frozen, so this is add-alias + deprecate: they stay
dialable in the precompile and only base-std de-advertises them. Regenerates
V2_ABI_FINGERPRINT and the frozen selector set (21 -> 23); v1-subset delta 9 -> 11.
Rationale for the reversal: maximize ERC-8056 conformance and explorer/builder
DevX; legacy names remain dialable so nothing on-chain breaks.

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(BOP-495): expose MAX_UI_MULTIPLIER() view

Add a Cobalt-only MAX_UI_MULTIPLIER() getter returning type(uint128).max, the
overflow guard the multiplier setters enforce. Previously callers had to trigger
the InvalidMultiplier revert path to learn the bound. Introduce the constant on
AssetV2 as the single source of truth and have set_ui_multiplier /
update_multiplier reference it; expose it via a version-gated Asset trait read
(reject_frozen_selector! default, V2 override), matching the other V2-only reads.

Regenerates V2_ABI_FINGERPRINT and the frozen selector set (23 -> 24); v1-subset
delta 11 -> 12. WAD_PRECISION() already satisfied the "multiplier precision
getter" review ask and is unchanged.

Co-authored-by: Cursor <cursoragent@cursor.com>

* test(BOP-495): update Asset V2 golden suite for the interface-review surface

Merged origin/main brought in the Asset V2 golden suite (base#4270), which predated
this branch. Reconcile it with the BOP-495 renames/additions:

- Rename the Cobalt-only symbol references (PendingUpdateExists,
  NoScheduledUIMultiplier, UIMultiplierUpdateCancelled).
- Add golden tests for the new selectors: updateUIMultiplier (aliases
  updateMultiplier), toUIAmount/fromUIAmount (Conversion aliases), and
  MAX_UI_MULTIPLIER; wire them into the exhaustive op-coverage match.
- Flip supportsInterface(0x57854fc3) to advertised (Conversion extension now
  claimed).
- Re-bless ROOT_CANCEL_SCHEDULED_MULTIPLIER and
  ROOT_UPDATE_MULTIPLIER_CLEARS_PENDING: hash_token_state hashes emitted log
  topics, so renaming the cancel event's topic0 shifts those two roots. Storage
  behavior is unchanged; all other roots are identical.

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci(BOP-495): pin Cobalt fork-test base-std to the paired BOP-495 commit

The Cobalt conformance leg patched current base/base (this PR's renamed/added
ERC-8056 surface) into base-anvil but ran the previously-pinned base-std
reference, which still expects the pre-rename symbols — a guaranteed mismatch.
Point the Cobalt base_std_ref at the paired base-std commit (base/base-std#192)
so the two repos are cross-validated in lockstep. Beryl (v1.0.0) is unchanged;
V1 is frozen and untouched by this PR.

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci(BOP-495): re-pin Cobalt fork-test base-std to latest paired commit

Follow the base-std PR head after dropping review comments (base/base-std#192);
keeps the conformance pair in lockstep.

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(BOP-495): instant setter emits deprecated MultiplierUpdated + UIMultiplierUpdated

Per reviewer intent, AssetV2's instant setter (update_multiplier, dialed via
updateMultiplier / updateUIMultiplier) now emits the deprecated V1
MultiplierUpdated(newMultiplier) alongside the ERC-8056 UIMultiplierUpdated, for
backward compatibility with indexers on the legacy topic. The scheduled
set_ui_multiplier is unchanged (only UIMultiplierUpdated).

Event order on an instant override of a live schedule:
UIMultiplierUpdateCancelled -> MultiplierUpdated -> UIMultiplierUpdated. Updates
the abi doc + unit tests, and re-blesses the V2 golden roots for update_multiplier,
update_multiplier_clears_pending, and announce_v2 (the extra log topic shifts
those hashes; no storage-behavior change). Re-pins the Cobalt fork-test base_std_ref
to the paired base-std commit.

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci(BOP-495): re-pin Cobalt base-std; sync abi docs to deprecation-in-interface

Point the Cobalt fork-test base_std_ref at the paired base-std commit (which now
retains the deprecated methods in IB20Asset rather than removing them). Update the
abi/v2.rs doc comments to say the legacy updateMultiplier / toScaledBalance /
toRawBalance are kept in base-std's interface as deprecated aliases (not removed),
and that updateMultiplier now emits both MultiplierUpdated and UIMultiplierUpdated.
Comment-only; V2_ABI_FINGERPRINT unchanged.

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci(BOP-495): re-pin Cobalt base-std to 399ee93 (doc-only fix on the pair)

Co-authored-by: Cursor <cursoragent@cursor.com>

* refactor(BOP-495): make updateUIMultiplier the scheduled setter; UI-multiplier vocabulary for cancel + errors

Addresses ilikesymmetry's review on base-std base#192, applied to the Cobalt (AssetV2) wire
surface (Cobalt is not live, so these Cobalt-only selectors are free to rename):

- setUIMultiplier(newMultiplier, effectiveAt) -> updateUIMultiplier(newMultiplier, effectiveAt)
  (the canonical scheduled setter); the redundant instant updateUIMultiplier(uint256) alias is
  dropped. The instant path remains as the deprecated updateMultiplier(uint256).
- cancelScheduledMultiplier -> cancelUIMultiplierUpdate
- PendingUpdateExists(effectiveAt) -> UIMultiplierUpdateExists(effectiveAt)
- NoScheduledUIMultiplier -> UIMultiplierUpdateDoesNotExist

Selector set 24 -> 23; V2 ABI fingerprint and V1-subset delta (12 -> 11) regenerated. Golden
coverage, dispatch, labels and unit tests updated; storage/event roots are unchanged (renames
don't alter storage or emitted topics). Re-pins the Cobalt conformance gate to the paired
base-std commit 22d67a4.

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci(BOP-495): re-pin Cobalt base-std to d0a3c16 (base-std in lockstep with main); tidy v1 golden doc

Bumps the Cobalt conformance pin to the base-std commit that merged base-std main, so the
paired SEIZE_RECEIVER_POLICY / seizeWithMemo changes (base-std base#188/base#193, base/base base#4252)
line up with the seize behavior this branch inherited from base/base main. Fixes the 4
seizeWithMemo Cobalt fork-test failures, which were a cross-repo skew, not a rename regression.

Also reflows one doc comment in the V1 golden negative test (no behavior change).

Co-authored-by: Cursor <cursoragent@cursor.com>

* test(BOP-495): assert all 11 V2-only selectors are excluded from the frozen V1 surface

The v1<>v2 freeze-guard only iterated the 8 scheduled-multiplier selectors; extend it to the
full 11-selector Cobalt delta by adding toUIAmount / fromUIAmount / MAX_UI_MULTIPLIER, matching
the delta pinned by v1_selectors_are_a_subset_of_v2 and golden_v2_selectors_unknown_at_v1.
Renamed asset_surface_excludes_scheduled_selectors -> asset_surface_excludes_v2_only_selectors.
Addresses the review-bot consistency finding. Test-only; no V1 behavior/wire change.

Co-authored-by: Cursor <cursoragent@cursor.com>

* test(BOP-495): assert MultiplierUpdated in matured-pending instant-setter test

update_multiplier_clears_matured_pending_without_cancel_event documented the dual-event
emission but only asserted UIMultiplierUpdated. Assert MultiplierUpdated at events[len-2] too,
mirroring update_multiplier_clears_live_pending_with_cancel_event, making the dual-event
contract explicit. Addresses the review-bot finding. Test-only.

Co-authored-by: Cursor <cursoragent@cursor.com>

* style(BOP-495): apply nightly rustfmt line-wrapping after the error/param renames

The UIMultiplierUpdateDoesNotExist / UIMultiplierUpdateExists { effectiveAt } renames shifted two
assert_eq! lines across the width boundary; nightly rustfmt (the CI toolchain, which applies the
unstable rustfmt.toml rules) rewraps them. No behavior change.

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci(BOP-495): repin Cobalt base_std_ref to base-std main (base#192 merged)

base#192 squash-merged to base-std main as 04d645a. Move the Cobalt conformance pin off the
(now-orphaned) PR-branch commit d0a3c16 onto the stable base-std main SHA, per the immutable
(base-anvil SHA, base-std SHA) pair convention. Same paired ERC-8056 surface; the gate now
validates this base/base PR against base-std main.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>