nym-data-observatory: bump version

.github/workflows/cd-docs.yml

@@ -15,8 +15,10 @@ jobs:
       - uses: actions/checkout@v6
       - name: Install Dependencies (Linux)
         run: sudo apt-get update && sudo apt-get install -y build-essential curl wget libssl-dev libudev-dev squashfs-tools protobuf-compiler git python3 && sudo apt-get update --fix-missing
+      - name: Install pip3
+        run: sudo apt install -y python3-pip
       - name: Install Python3 modules
-        run: sudo apt install -y python3-pandas python3-tabulate
+        run: sudo pip3 install pandas tabulate
       - name: Install rsync
         run: sudo apt-get install -y rsync
       - uses: rlespinasse/github-slug-action@v3.x
@@ -39,8 +41,6 @@ jobs:
 
       - name: Install project dependencies
         run: pnpm i
-      - name: Generate llms-full.txt
-        run: pnpm run generate:llms
       - name: Build project
         run: pnpm run build
       - name: Generate sitemap

.github/workflows/ci-build-upload-binaries.yml

@@ -36,7 +36,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        platform: [ubuntu-22.04]
+        platform: [arc-linux-latest]
 
     runs-on: ${{ matrix.platform }}
     env:

.github/workflows/ci-build.yml

@@ -90,7 +90,7 @@ jobs:
         uses: actions-rs/cargo@v1
         with:
           command: clippy
-          args: --workspace --all-targets --exclude nym-gateway-probe --exclude nym-node-status-api --exclude nym-node-status-agent --exclude nym-node-status-client -- -D warnings
+          args: --workspace --all-targets --exclude nym-gateway-probe --exclude nym-node-status-api -- -D warnings
 
       - name: Clippy (non-macos)
         if: contains(matrix.os, 'linux') || contains(matrix.os, 'windows')
@@ -104,15 +104,14 @@ jobs:
         uses: actions-rs/cargo@v1
         with:
           command: build
-          args: --workspace --exclude nym-gateway-probe --exclude nym-node-status-api --exclude nym-node-status-agent --exclude nym-node-status-client
 
-        # Build Go FFI-dependent crates separately (requires Go, only available on Linux CI)
-      - name: Build nym-node-status-api and nym-node-status-agent (linux only)
+        # only build on linux because of wg FFI bindings of its dependency (network probe)
+      - name: Build nym-node-status-api (linux only)
         if: runner.os == 'Linux'
         uses: actions-rs/cargo@v1
         with:
           command: build
-          args: -p nym-node-status-api -p nym-node-status-agent
+          args: -p nym-node-status-api
 
       - name: Build all examples
         if: contains(matrix.os, 'linux')

.github/workflows/ci-contracts.yml

@@ -35,7 +35,7 @@ jobs:
           components: rustfmt, clippy
 
       - name: Install cosmwasm-check
-        run: cargo install cosmwasm-check --locked
+        run: cargo install cosmwasm-check
 
       - name: Install wasm-opt
         uses: ./.github/actions/install-wasm-opt

.github/workflows/ci-crates-publish-dry-run.yml

@@ -15,9 +15,6 @@ env:
 jobs:
   publish-dry-run:
     runs-on: arc-linux-latest
-    timeout-minutes: 35
-    env:
-      RUSTUP_PERMIT_COPY_RENAME: 1
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6
@@ -62,60 +59,20 @@ jobs:
       - name: Bump versions (local only)
         run: |
           cargo workspaces version custom ${{ inputs.version }} \
+            --allow-branch ${{ github.ref_name }} \
             --no-git-commit \
-            --yes
-
-      - name: Preflight publish checks
-        run: |
-          python3 tools/internal/check_publish_preflight.py
 
       # Dry run may show cascading dependency errors because packages aren't
       # actually uploaded - these are expected and ignored. We check for real
       # errors like packaging failures, missing metadata, or invalid Cargo.toml.
       - name: Publish (dry run)
         run: |
-          set +e
-          publish_status=1
-          max_attempts=2
-          attempt=1
-          rm -f /tmp/publish-dry-run.log
+          output=$(cargo workspaces publish --dry-run --allow-dirty 2>&1) || true
+          echo "$output"
 
-          while [ "$attempt" -le "$max_attempts" ]; do
-            echo "Dry-run publish attempt ${attempt}/${max_attempts}"
-            cargo workspaces publish --dry-run --allow-dirty 2>&1 | tee /tmp/publish-dry-run.log
-            publish_status=${PIPESTATUS[0]}
-
-            if [ "$publish_status" -eq 0 ]; then
-              break
-            fi
-
-            # Retry once for interruption/runner issues.
-            if [ "$attempt" -lt "$max_attempts" ] && \
-              { [ "$publish_status" -eq 130 ] || [ "$publish_status" -eq 137 ]; }; then
-              echo "Publish dry-run interrupted (exit ${publish_status}), retrying in 10s..."
-              sleep 10
-              attempt=$((attempt + 1))
-              continue
-            fi
-
-            break
-          done
-          set -e
-
-          if grep -Eiq \
-            "failed to verify manifest|failed to parse manifest|invalid Cargo.toml|error: package .* has no (description|license|repository)" \
-            /tmp/publish-dry-run.log; then
-            echo "Detected real packaging/manifest errors"
-            exit 1
-          fi
-
-          # In dry-run mode, non-zero publish status is expected due to
-          # dependency-cascade failures against crates.io index.
-          if [ "$publish_status" -ne 0 ]; then
-            echo "Dry-run publish returned non-zero (${publish_status}) but no real manifest blockers were detected."
-          fi
-
-          echo "Only expected dry-run dependency cascade errors detected (if any)."
+          # Check for real errors (not cascading dependency errors)
+          # Cascading errors mention "crates.io index", real errors mention "Cargo.toml"
+          echo "$output" | grep -i "Cargo.toml" && exit 1 || true
 
       # Show the list of packages published
       - name: Show package versions

.github/workflows/ci-crates-publish-resume.yml

@@ -17,8 +17,6 @@ on:
 jobs:
   publish:
     runs-on: arc-linux-latest
-    env:
-      RUSTUP_PERMIT_COPY_RENAME: 1
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6

.github/workflows/ci-crates-publish.yml

@@ -17,8 +17,6 @@ on:
 jobs:
   publish:
     runs-on: arc-linux-latest
-    env:
-      RUSTUP_PERMIT_COPY_RENAME: 1
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6

.github/workflows/ci-crates-version-bump.yml

@@ -15,8 +15,6 @@ env:
 jobs:
   version-bump:
     runs-on: arc-linux-latest
-    env:
-      RUSTUP_PERMIT_COPY_RENAME: 1
     permissions:
       contents: write
     steps:

.github/workflows/ci-docs.yml

@@ -6,8 +6,6 @@ on:
     branches-ignore: [master]
     paths:
       - "documentation/docs/**"
-      - "sdk/typescript/packages/sdk/src/**"
-      - "sdk/typescript/packages/mix-fetch/src/**"
       - ".github/workflows/ci-docs.yml"
 
 jobs:
@@ -22,8 +20,10 @@ jobs:
       - uses: actions/checkout@v6
       - name: Install Dependencies (Linux)
         run: sudo apt-get update && sudo apt-get install -y build-essential curl wget libssl-dev libudev-dev squashfs-tools protobuf-compiler git python3 && sudo apt-get update --fix-missing
+      - name: Install pip3
+        run: sudo apt install -y python3-pip
       - name: Install Python3 modules
-        run: sudo apt install -y python3-pandas python3-tabulate
+        run: sudo pip3 install pandas tabulate
       - name: Install rsync
         run: sudo apt-get install -y rsync
       - uses: rlespinasse/github-slug-action@v3.x
@@ -44,27 +44,8 @@ jobs:
           command: build
           args: --workspace --release
 
-      - name: Check if TypeScript SDK source changed
-        id: check-ts-sdk
-        run: |
-          if git diff --name-only ${{ github.event.before }} ${{ github.sha }} | grep -qE '^sdk/typescript/packages/(sdk|mix-fetch)/src/'; then
-            echo "changed=true" >> $GITHUB_OUTPUT
-          else
-            echo "changed=false" >> $GITHUB_OUTPUT
-          fi
-        working-directory: ${{ github.workspace }}
-
-      - name: Regenerate TypeDoc API reference
-        if: steps.check-ts-sdk.outputs.changed == 'true'
-        run: |
-          npm install -g typedoc@0.25.13 typedoc-plugin-markdown@4.0.3
-          cd ${{ github.workspace }}/sdk/typescript/packages/sdk && typedoc --skipErrorChecking
-          cd ${{ github.workspace }}/sdk/typescript/packages/mix-fetch && typedoc --skipErrorChecking
-
       - name: Install project dependencies
         run: pnpm i
-      - name: Generate llms-full.txt
-        run: pnpm run generate:llms
       - name: Build project
         run: pnpm run build
       - name: Generate sitemap

.github/workflows/ci-sdk-wasm.yml

@@ -54,30 +54,6 @@ jobs:
       - name: "Build"
         run: make sdk-wasm-build
 
-      - name: "Build mix-fetch WASM (debug)"
-        run: |
-          make -C wasm/mix-fetch/go-mix-conn build-debug-dev
-          make -C wasm/mix-fetch build-rust-debug
-
-      - name: "Build mix-fetch internal-dev harness"
-        working-directory: wasm/mix-fetch/internal-dev
-        run: npm install && npm run build
-
-      - name: "Install Playwright browsers"
-        working-directory: wasm/mix-fetch/tests
-        run: npm install && npx playwright install --with-deps # --with-deps assumes Ubuntu/Debian, see note in wasm/mix-fetch/tests/README.md
-
-      - name: "Smoke-test mix-fetch internal-dev (headless)"
-        working-directory: wasm/mix-fetch/tests
-        run: npm run test:smoke
-
-      - name: Upload Playwright traces on failure
-        if: failure()
-        uses: actions/upload-artifact@v4
-        with:
-          name: mix-fetch-playwright-traces
-          path: wasm/mix-fetch/tests/test-results/
-
       - name: "Test"
         run: make sdk-wasm-test
 

.github/workflows/nightly-mix-fetch-stress.yml

@@ -1,61 +0,0 @@
-name: nightly-mix-fetch-stress
-
-on:
-  schedule:
-    - cron: '0 3 * * *'
-  workflow_dispatch:
-
-jobs:
-  stress:
-    runs-on: arc-linux-latest
-    env:
-      CARGO_TERM_COLOR: always
-      RUSTUP_PERMIT_COPY_RENAME: 1
-    steps:
-      - uses: actions/checkout@v6
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 20
-
-      - uses: actions-rs/toolchain@v1
-        with:
-          profile: minimal
-          toolchain: ${{ vars.REQUIRED_RUSTC_VERSION }}
-          target: wasm32-unknown-unknown
-          override: true
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: "1.24.6"
-
-      - name: Install wasm-pack
-        run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
-
-      - name: Install wasm-bindgen-cli
-        run: cargo install wasm-bindgen-cli
-
-      - name: "Build mix-fetch WASM (debug)"
-        run: |
-          make -C wasm/mix-fetch/go-mix-conn build-debug-dev
-          make -C wasm/mix-fetch build-rust-debug
-
-      - name: "Build internal-dev harness"
-        working-directory: wasm/mix-fetch/internal-dev
-        run: npm install && npm run build
-
-      - name: "Install Playwright browsers"
-        working-directory: wasm/mix-fetch/tests
-        run: npm install && npx playwright install --with-deps
-
-      - name: "Stress-test mix-fetch through mainnet"
-        working-directory: wasm/mix-fetch/tests
-        run: npm run test:stress
-
-      - name: Upload Playwright traces on failure
-        if: failure()
-        uses: actions/upload-artifact@v4
-        with:
-          name: mix-fetch-stress-traces
-          path: wasm/mix-fetch/tests/test-results/

.github/workflows/publish-nym-binaries.yml

@@ -21,7 +21,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: ubuntu-22.04
+          - os: arc-linux-latest
             target: x86_64-unknown-linux-gnu
     runs-on:  ${{ matrix.os }}
 

.github/workflows/resume-publish-crates-io.yml

@@ -25,10 +25,6 @@ jobs:
       - name: Install cargo-workspaces
         run: cargo install cargo-workspaces
 
-      - name: Preflight publish checks
-        run: |
-          python3 tools/internal/check_publish_preflight.py
-
       - name: Publish remaining crates
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}

CHANGELOG.md

@@ -4,76 +4,6 @@ Post 1.0.0 release, the changelog format is based on [Keep a Changelog](https://
 
 ## [Unreleased]
 
-## [2026.7-tola] (2026-04-07)
-
-- Simon/ecash contract serde fix ([#6634])
-- Update Fallback IP for Nym API ([#6622])
-- Nym Node spam logging ([#6621])
-- feat: multiple deposit prices ([#6608])
-- move format_debug_bytes in common crate ([#6580])
-- bugfix: make sure client keys are generated before requesting credentials ([#6579])
-- Fix socks5 GW probe regression ([#6576])
-- Max/lp stream framing ([#6573])
-- HTTP domain rotation conditions ([#6570])
-
-[#6634]: https://github.com/nymtech/nym/pull/6634
-[#6622]: https://github.com/nymtech/nym/pull/6622
-[#6621]: https://github.com/nymtech/nym/pull/6621
-[#6608]: https://github.com/nymtech/nym/pull/6608
-[#6580]: https://github.com/nymtech/nym/pull/6580
-[#6579]: https://github.com/nymtech/nym/pull/6579
-[#6576]: https://github.com/nymtech/nym/pull/6576
-[#6573]: https://github.com/nymtech/nym/pull/6573
-[#6570]: https://github.com/nymtech/nym/pull/6570
-
-## [2026.6-stilton] (2026-03-25)
-
-- lp fixes ([#6601])
-- bugfix: allow deserialisation of LP data from either snake_case or lowercase ([#6586])
-- bugfix: make sure to run cargo install cosmwasm-check with --locked flag during CI ([#6568])
-- Add LP to NS UI ([#6562])
-- feat: nyxd watcher ([#6561])
-- Additional ticket for agent ([#6551])
-- bugfix: make sure to use old values from metrics debug config during v12 migration (#6546) ([#6547])
-- typo ([#6543])
-- rng changes for a Send variant ([#6541])
-- Add LP fields ([#6535])
-- enable LP registration in registration client ([#6534])
-- chore: rename LpMessage to LpFrame ([#6530])
-- chore: LP improvements ([#6526])
-- Remove dep leak of strum iterator ([#6522])
-- chore: update ts-rs dep ([#6517])
-- addressing LP PR comments ([#6513])
-- remove redundant LP state machine in favour of in place processing ([#6512])
-- chore: split up lp listener ([#6507])
-- feat: enable mutual KKT exchange ([#6505])
-- feat: introduce /v3/unstable/nym-nodes/semi-skimmed to aggregate LP information ([#6499])
-- Max/asyncread asyncwrite nym client ([#6318])
-- feat: localnet v2 ([#6277])
-
-[#6601]: https://github.com/nymtech/nym/pull/6601
-[#6586]: https://github.com/nymtech/nym/pull/6586
-[#6568]: https://github.com/nymtech/nym/pull/6568
-[#6562]: https://github.com/nymtech/nym/pull/6562
-[#6561]: https://github.com/nymtech/nym/pull/6561
-[#6551]: https://github.com/nymtech/nym/pull/6551
-[#6547]: https://github.com/nymtech/nym/pull/6547
-[#6543]: https://github.com/nymtech/nym/pull/6543
-[#6541]: https://github.com/nymtech/nym/pull/6541
-[#6535]: https://github.com/nymtech/nym/pull/6535
-[#6534]: https://github.com/nymtech/nym/pull/6534
-[#6530]: https://github.com/nymtech/nym/pull/6530
-[#6526]: https://github.com/nymtech/nym/pull/6526
-[#6522]: https://github.com/nymtech/nym/pull/6522
-[#6517]: https://github.com/nymtech/nym/pull/6517
-[#6513]: https://github.com/nymtech/nym/pull/6513
-[#6512]: https://github.com/nymtech/nym/pull/6512
-[#6507]: https://github.com/nymtech/nym/pull/6507
-[#6505]: https://github.com/nymtech/nym/pull/6505
-[#6499]: https://github.com/nymtech/nym/pull/6499
-[#6318]: https://github.com/nymtech/nym/pull/6318
-[#6277]: https://github.com/nymtech/nym/pull/6277
-
 ## [2026.5-raclette] (2026-03-10)
 
 - bugfix: correctly populate gateway probe LP data ([#6533])

Cargo.lock

@@ -1691,8 +1691,7 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 [[package]]
 name = "core-models"
 version = "0.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "657f625ff361906f779745d08375ae3cc9fef87a35fba5f22874cf773010daf4"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "hax-lib",
  "pastey 0.2.1",
@@ -2351,47 +2350,6 @@ dependencies = [
  "x25519-dalek",
 ]
 
-[[package]]
-name = "defmt"
-version = "0.3.100"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0963443817029b2024136fc4dd07a5107eb8f977eaf18fcd1fdeb11306b64ad"
-dependencies = [
- "defmt 1.0.1",
-]
-
-[[package]]
-name = "defmt"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "548d977b6da32fa1d1fda2876453da1e7df63ad0304c8b3dae4dbe7b96f39b78"
-dependencies = [
- "bitflags 1.3.2",
- "defmt-macros",
-]
-
-[[package]]
-name = "defmt-macros"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d4fc12a85bcf441cfe44344c4b72d58493178ce635338a3f3b78943aceb258e"
-dependencies = [
- "defmt-parser",
- "proc-macro-error2",
- "proc-macro2",
- "quote",
- "syn 2.0.106",
-]
-
-[[package]]
-name = "defmt-parser"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e"
-dependencies = [
- "thiserror 2.0.12",
-]
-
 [[package]]
 name = "delegate-display"
 version = "3.0.0"
@@ -2576,7 +2534,7 @@ dependencies = [
  "libc",
  "option-ext",
  "redox_users",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -3440,15 +3398,6 @@ dependencies = [
  "serde_json",
 ]
 
-[[package]]
-name = "hash32"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47d60b12902ba28e2730cd37e95b8c9223af2808df9e902d4df49588d1470606"
-dependencies = [
- "byteorder",
-]
-
 [[package]]
 name = "hashbrown"
 version = "0.12.3"
@@ -3574,16 +3523,6 @@ dependencies = [
  "http 1.3.1",
 ]
 
-[[package]]
-name = "heapless"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bfb9eb618601c89945a70e254898da93b13be0388091d42117462b265bb3fad"
-dependencies = [
- "hash32",
- "stable_deref_trait",
-]
-
 [[package]]
 name = "heck"
 version = "0.4.1"
@@ -3650,7 +3589,7 @@ dependencies = [
  "once_cell",
  "rand 0.9.2",
  "ring",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "thiserror 2.0.12",
  "tinyvec",
  "tokio",
@@ -3675,7 +3614,7 @@ dependencies = [
  "parking_lot",
  "rand 0.9.2",
  "resolv-conf",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "smallvec",
  "thiserror 2.0.12",
  "tokio",
@@ -3932,7 +3871,7 @@ dependencies = [
  "http 1.3.1",
  "hyper 1.6.0",
  "hyper-util",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "rustls-native-certs 0.8.3",
  "rustls-pki-types",
  "tokio",
@@ -4672,8 +4611,7 @@ checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
 [[package]]
 name = "libcrux-aesgcm"
 version = "0.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "99f2a019dab4097585a7d4f5b9deebe46cd1e628b16a5bc4cb0ce35e1da334e6"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-intrinsics",
  "libcrux-platform",
@@ -4683,9 +4621,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-chacha20poly1305"
-version = "0.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc08d044676af21343b32b988411fa98dbb5cf65a03c9df478ced221bbdfdb1b"
+version = "0.0.6"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4697,8 +4634,7 @@ dependencies = [
 [[package]]
 name = "libcrux-curve25519"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb1e5fd8476a6ed609d24ef42aee5ab6f99f7c65d054f92412da9f499e423299"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4709,8 +4645,7 @@ dependencies = [
 [[package]]
 name = "libcrux-ecdh"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b65f73ce79337c762eb38bbac91e4c9b9e60cf318e8501b812750c640814d45e"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-curve25519",
  "libcrux-p256",
@@ -4720,9 +4655,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-ed25519"
-version = "0.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "835919315b7042fe9e03b6458efe0db94bf2aa7b873934dbee5b5463a8124b43"
+version = "0.0.6"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4734,8 +4668,7 @@ dependencies = [
 [[package]]
 name = "libcrux-hacl-rs"
 version = "0.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2637dc87d158e1f1b550fd9b226443e84153fded4de69028d897b534d16d22e6"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-macros",
 ]
@@ -4743,8 +4676,7 @@ dependencies = [
 [[package]]
 name = "libcrux-hkdf"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8c1a89ca0c89be3a268a921e47105fb7873badf7267f5e3ebf4ea46baedd73ef"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-hmac",
@@ -4754,8 +4686,7 @@ dependencies = [
 [[package]]
 name = "libcrux-hmac"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a7a242707d65960770bd7e14e4f18a92bdf0b967777dd404887db8d087a643b"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4765,8 +4696,7 @@ dependencies = [
 [[package]]
 name = "libcrux-intrinsics"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1b5db005ff8001e026b73a6842ee81bbef8ec5ff0e1915a67ae65fd2a9fafa5"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "core-models",
  "hax-lib",
@@ -4774,9 +4704,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-kem"
-version = "0.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12631592f491d22fd1a176d32b2c6edfb673998fd3987e9d95f8fa79ad2a737b"
+version = "0.0.6"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-curve25519",
  "libcrux-ecdh",
@@ -4791,8 +4720,7 @@ dependencies = [
 [[package]]
 name = "libcrux-macros"
 version = "0.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ffd6aa2dcd5be681662001b81d493f1569c6d49a32361f470b0c955465cd0338"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "quote",
  "syn 2.0.106",
@@ -4800,9 +4728,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-ml-dsa"
-version = "0.0.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a72929ed421cc3bf16a946b3e7d2a58d215b0b5c2a12be26b53629f081bf49b2"
+version = "0.0.7"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "core-models",
  "hax-lib",
@@ -4815,9 +4742,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-ml-kem"
-version = "0.0.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a14ab3e477de9df6ee1273a114018ff62c4996ca9220070c4e5cb1743f94a67d"
+version = "0.0.7"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "hax-lib",
  "libcrux-intrinsics",
@@ -4832,8 +4758,7 @@ dependencies = [
 [[package]]
 name = "libcrux-p256"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f4778ba25cb08bb8a96bd100e19ed9aecf78337198fd176036e21042b2dd99bc"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4845,17 +4770,15 @@ dependencies = [
 [[package]]
 name = "libcrux-platform"
 version = "0.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d9e21d7ed31a92ac539bd69a8c970b183ee883872d2d19ce27036e24cb8ecc4"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libc",
 ]
 
 [[package]]
 name = "libcrux-poly1305"
-version = "0.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02491808ee5b9db8cb65fad64ae0be812db64beef179d945c00c7787dc7dfcf9"
+version = "0.0.4"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4863,9 +4786,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-psq"
-version = "0.0.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "779ade7aa5e1b4b400c716b313cbf69070988dd005f92e961c2da4c3c42fbea4"
+version = "0.0.7"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "classic-mceliece-rust",
  "libcrux-aesgcm",
@@ -4887,8 +4809,7 @@ dependencies = [
 [[package]]
 name = "libcrux-secrets"
 version = "0.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ce650f3041b44ba40d4263852347d007cd2cd9d1cc856a6f6c8b2e10c3fd40b"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "hax-lib",
 ]
@@ -4896,8 +4817,7 @@ dependencies = [
 [[package]]
 name = "libcrux-sha2"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9d253473f259fc74a280c43f29c464f7e374abdf28b4942234dc707f529d4b7"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-hacl-rs",
  "libcrux-macros",
@@ -4906,9 +4826,8 @@ dependencies = [
 
 [[package]]
 name = "libcrux-sha3"
-version = "0.0.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1ae0b7d0e1cc4793a609fd0ff2ca3b3a3fabae523770c619a3d4bc86417b0d7"
+version = "0.0.7"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "hax-lib",
  "libcrux-intrinsics",
@@ -4919,8 +4838,7 @@ dependencies = [
 [[package]]
 name = "libcrux-traits"
 version = "0.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "812e4fa89f3f5e34b47f928b22b1b78395a0d4ec23b1f583db635f128159d65f"
+source = "git+https://github.com/cryspen/libcrux?rev=b17f8687b67cdcfc10b55aeecc998bbbca28f775#b17f8687b67cdcfc10b55aeecc998bbbca28f775"
 dependencies = [
  "libcrux-secrets",
  "rand 0.9.2",
@@ -5129,12 +5047,6 @@ dependencies = [
  "syn 2.0.106",
 ]
 
-[[package]]
-name = "managed"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ca88d725a0a943b096803bd34e73a4437208b6077654cc4ecb2947a5f91618d"
-
 [[package]]
 name = "maplit"
 version = "1.0.2"
@@ -5275,7 +5187,7 @@ dependencies = [
 
 [[package]]
 name = "mix-fetch-wasm"
-version = "1.4.4"
+version = "1.4.3"
 dependencies = [
  "async-trait",
  "futures",
@@ -5536,7 +5448,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -5635,7 +5547,7 @@ dependencies = [
 
 [[package]]
 name = "nym-api"
-version = "1.1.77"
+version = "1.1.75"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5880,7 +5792,7 @@ dependencies = [
 
 [[package]]
 name = "nym-cli"
-version = "1.1.74"
+version = "1.1.72"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -5963,7 +5875,7 @@ dependencies = [
 
 [[package]]
 name = "nym-client"
-version = "1.1.74"
+version = "1.1.72"
 dependencies = [
  "bs58",
  "clap",
@@ -6533,7 +6445,7 @@ dependencies = [
 
 [[package]]
 name = "nym-data-observatory"
-version = "1.0.1"
+version = "1.0.2"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6775,7 +6687,6 @@ version = "1.20.4"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
- "bs58",
  "bytes",
  "clap",
  "futures",
@@ -6800,6 +6711,7 @@ dependencies = [
  "nym-lp",
  "nym-network-defaults",
  "nym-node-requests",
+ "nym-node-status-client",
  "nym-registration-client",
  "nym-registration-common",
  "nym-sdk",
@@ -6937,7 +6849,6 @@ dependencies = [
  "nym-network-defaults",
  "once_cell",
  "reqwest 0.13.1",
- "rustls 0.23.37",
  "serde",
  "serde_json",
  "serde_plain",
@@ -7045,15 +6956,12 @@ dependencies = [
  "nym-crypto",
  "nym-service-provider-requests-common",
  "nym-sphinx",
- "pnet_packet",
  "rand 0.8.5",
- "semver 1.0.27",
  "serde",
  "thiserror 2.0.12",
  "time",
  "tokio",
  "tokio-util",
- "tracing",
 ]
 
 [[package]]
@@ -7076,7 +6984,7 @@ dependencies = [
  "nym-exit-policy",
  "nym-id",
  "nym-ip-packet-requests",
- "nym-lp",
+ "nym-kcp",
  "nym-network-defaults",
  "nym-network-requester",
  "nym-sdk",
@@ -7178,7 +7086,6 @@ dependencies = [
  "criterion",
  "libcrux-psq",
  "num_enum",
- "nym-common",
  "nym-crypto",
  "nym-kkt",
  "nym-kkt-ciphersuite",
@@ -7372,7 +7279,7 @@ dependencies = [
 
 [[package]]
 name = "nym-network-requester"
-version = "1.1.75"
+version = "1.1.73"
 dependencies = [
  "addr",
  "anyhow",
@@ -7422,7 +7329,7 @@ dependencies = [
 
 [[package]]
 name = "nym-node"
-version = "1.29.0"
+version = "1.27.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -7559,16 +7466,14 @@ dependencies = [
 
 [[package]]
 name = "nym-node-status-agent"
-version = "2.0.0"
+version = "1.1.3"
 dependencies = [
  "anyhow",
  "clap",
  "futures",
  "nym-bin-common",
  "nym-crypto",
- "nym-gateway-probe",
  "nym-node-status-client",
- "nym-sdk",
  "rand 0.8.5",
  "regex",
  "serde_json",
@@ -7580,7 +7485,7 @@ dependencies = [
 
 [[package]]
 name = "nym-node-status-api"
-version = "4.6.1"
+version = "4.3.0"
 dependencies = [
  "ammonia",
  "anyhow",
@@ -7645,9 +7550,9 @@ version = "0.3.0"
 dependencies = [
  "anyhow",
  "bincode",
+ "bs58",
  "nym-credentials",
  "nym-crypto",
- "nym-gateway-probe",
  "reqwest 0.13.1",
  "serde",
  "serde_json",
@@ -7885,8 +7790,6 @@ dependencies = [
  "nym-crypto",
  "nym-gateway-requests",
  "nym-http-api-client",
- "nym-ip-packet-requests",
- "nym-lp",
  "nym-network-defaults",
  "nym-ordered-buffer",
  "nym-service-providers-common",
@@ -7899,10 +7802,8 @@ dependencies = [
  "nym-topology",
  "nym-validator-client",
  "parking_lot",
- "pnet_packet",
  "rand 0.8.5",
  "reqwest 0.13.1",
- "semver 1.0.27",
  "serde",
  "tap",
  "tempfile",
@@ -7974,7 +7875,7 @@ dependencies = [
 
 [[package]]
 name = "nym-socks5-client"
-version = "1.1.74"
+version = "1.1.72"
 dependencies = [
  "bs58",
  "clap",
@@ -8767,12 +8668,11 @@ dependencies = [
  "serde",
  "thiserror 2.0.12",
  "x25519-dalek",
- "zeroize",
 ]
 
 [[package]]
 name = "nymvisor"
-version = "0.1.39"
+version = "0.1.37"
 dependencies = [
  "anyhow",
  "bytes",
@@ -9751,7 +9651,7 @@ dependencies = [
  "quinn-proto",
  "quinn-udp",
  "rustc-hash",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "socket2 0.5.10",
  "thiserror 2.0.12",
  "tokio",
@@ -9772,7 +9672,7 @@ dependencies = [
  "rand 0.9.2",
  "ring",
  "rustc-hash",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "rustls-pki-types",
  "slab",
  "thiserror 2.0.12",
@@ -10039,7 +9939,7 @@ dependencies = [
  "percent-encoding",
  "pin-project-lite",
  "quinn",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "rustls-native-certs 0.8.3",
  "rustls-pki-types",
  "serde",
@@ -10080,7 +9980,7 @@ dependencies = [
  "percent-encoding",
  "pin-project-lite",
  "quinn",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "rustls-pki-types",
  "rustls-platform-verifier",
  "serde",
@@ -10340,16 +10240,16 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.37"
+version = "0.23.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "758025cb5fccfd3bc2fd74708fd4682be41d99e5dff73c377c0646c6012c73a4"
+checksum = "2491382039b29b9b11ff08b76ff6c97cf287671dbb74f0be44bda389fffe9bd1"
 dependencies = [
  "aws-lc-rs",
  "log",
  "once_cell",
  "ring",
  "rustls-pki-types",
- "rustls-webpki 0.103.9",
+ "rustls-webpki 0.103.4",
  "subtle 2.6.1",
  "zeroize",
 ]
@@ -10430,14 +10330,14 @@ dependencies = [
  "jni",
  "log",
  "once_cell",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "rustls-native-certs 0.8.3",
  "rustls-platform-verifier-android",
- "rustls-webpki 0.103.9",
+ "rustls-webpki 0.103.4",
  "security-framework 3.6.0",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -10469,9 +10369,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.9"
+version = "0.103.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53"
+checksum = "0a17884ae0c1b773f1ccd2bd4a8c72f16da897310a98b0e84bf349ad5ead92fc"
 dependencies = [
  "aws-lc-rs",
  "ring",
@@ -11162,47 +11062,6 @@ dependencies = [
  "serde_core",
 ]
 
-[[package]]
-name = "smolmix"
-version = "0.0.1"
-dependencies = [
- "futures",
- "hickory-proto",
- "hickory-resolver",
- "http-body-util",
- "hyper 1.6.0",
- "hyper-util",
- "nym-bin-common",
- "nym-ip-packet-requests",
- "nym-sdk",
- "reqwest 0.13.1",
- "rustls 0.23.37",
- "smoltcp",
- "thiserror 2.0.12",
- "tokio",
- "tokio-rustls 0.26.2",
- "tokio-smoltcp",
- "tokio-tungstenite",
- "tracing",
- "webpki-roots 0.26.11",
-]
-
-[[package]]
-name = "smoltcp"
-version = "0.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dad095989c1533c1c266d9b1e8d70a1329dd3723c3edac6d03bbd67e7bf6f4bb"
-dependencies = [
- "bitflags 1.3.2",
- "byteorder",
- "cfg-if",
- "defmt 0.3.100",
- "heapless",
- "libc",
- "log",
- "managed",
-]
-
 [[package]]
 name = "snafu"
 version = "0.7.5"
@@ -11343,7 +11202,7 @@ dependencies = [
  "memchr",
  "once_cell",
  "percent-encoding",
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "serde",
  "serde_json",
  "sha2 0.10.9",
@@ -12165,24 +12024,10 @@ version = "0.26.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e727b36a1a0e8b74c376ac2211e40c2c8af09fb4013c60d910495810f008e9b"
 dependencies = [
- "rustls 0.23.37",
+ "rustls 0.23.29",
  "tokio",
 ]
 
-[[package]]
-name = "tokio-smoltcp"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e5f5d53da1c3095663a8900d86c2abb0ffe02d3f6aa86527b066148fcb33e65e"
-dependencies = [
- "futures",
- "parking_lot",
- "pin-project-lite",
- "smoltcp",
- "tokio",
- "tokio-util",
-]
-
 [[package]]
 name = "tokio-stream"
 version = "0.1.17"
@@ -12997,7 +12842,7 @@ dependencies = [
  "serde",
  "tempfile",
  "textwrap",
- "toml 0.9.12+spec-1.1.0",
+ "toml 0.8.23",
  "uniffi_internal_macros 0.31.0",
  "uniffi_meta 0.31.0",
  "uniffi_pipeline 0.31.0",
@@ -13106,7 +12951,7 @@ dependencies = [
  "quote",
  "serde",
  "syn 2.0.106",
- "toml 0.9.12+spec-1.1.0",
+ "toml 0.8.23",
  "uniffi_meta 0.31.0",
 ]
 

Cargo.toml

@@ -147,7 +147,6 @@ members = [
     "sdk/ffi/go",
     "sdk/ffi/shared",
     "sdk/rust/nym-sdk",
-    "smolmix/core",
     "service-providers/common",
     "service-providers/ip-packet-router",
     "service-providers/network-requester",
@@ -185,6 +184,7 @@ default-members = [
     "nym-api",
     "nym-credential-proxy/nym-credential-proxy",
     "nym-node",
+    "nym-node-status-api/nym-node-status-agent",
     "nym-statistics-api",
     "nym-validator-rewarder",
     "nyx-chain-watcher",
@@ -280,7 +280,6 @@ getrandom03 = { package = "getrandom", version = "=0.3.3" }
 glob = "0.3"
 handlebars = "3.5.5"
 hex = "0.4.3"
-hickory-proto = "0.25.2"
 hickory-resolver = "0.25.2"
 hkdf = "0.12.3"
 hmac = "0.12.1"
@@ -335,7 +334,6 @@ rayon = "1.5.1"
 regex = "1.10.6"
 reqwest = { version = "0.13.1", default-features = false }
 rs_merkle = "1.5.0"
-rustls = { version = "0.23.37", default-features = false }
 schemars = "0.8.22"
 semver = "1.0.26"
 serde = "1.0.219"
@@ -349,8 +347,6 @@ serde_yaml = "0.9.25"
 serde_plain = "1.0.2"
 sha2 = "0.10.3"
 si-scale = "0.2.3"
-smolmix = { version = "0.0.1", path = "smolmix/core" }
-smoltcp = "0.12"
 snow = "0.9.6"
 sphinx-packet = "=0.6.0"
 sqlx = "0.8.6"
@@ -371,8 +367,6 @@ tokio-postgres = "0.7"
 tokio-stream = "0.1.17"
 tokio-test = "0.4.4"
 tokio-tun = "0.11.5"
-tokio-rustls = "0.26"
-tokio-smoltcp = "0.5"
 tokio-tungstenite = { version = "0.20.1" }
 tokio-util = "0.7.15"
 toml = "0.8.22"
@@ -404,14 +398,14 @@ prometheus = { version = "0.14.0" }
 
 
 # libcrux
-libcrux-kem = "0.0.7"
-libcrux-ecdh = "0.0.6"
-libcrux-curve25519 = "0.0.6"
-libcrux-chacha20poly1305 = "0.0.7"
-libcrux-psq = "0.0.8"
-libcrux-ml-kem = "0.0.8"
-libcrux-sha3 = "0.0.8"
-libcrux-traits = "0.0.8"
+libcrux-kem = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-ecdh = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-curve25519 = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-chacha20poly1305 = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-psq = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-ml-kem = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-sha3 = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
+libcrux-traits = { git = "https://github.com/cryspen/libcrux", rev = "b17f8687b67cdcfc10b55aeecc998bbbca28f775" }
 
 # Workspace dep definitions required by crates.io publication - we need a workspace version since `cargo workspaces` doesn't work with path imports from crate manifests
 nym-api-requests = { version = "1.20.4", path = "nym-api/nym-api-requests" }
@@ -565,7 +559,6 @@ wasm-bindgen = "0.2.99"
 wasm-bindgen-futures = "0.4.49"
 wasm-bindgen-test = "0.3.49"
 wasmtimer = "0.4.1"
-webpki-roots = "0.26"
 web-sys = "0.3.76"
 
 # for local development:

ansible/nym-node/playbooks/group_vars/all.yml

@@ -60,8 +60,7 @@ packages:
 ## SYSTEM MAINTENANCE PLAYBOOK KNOBS
 ###############################################################################
 
-# To use particular version instead of Latest, provide in such form: 
-# nym_version: "nym-binaries-v2026.7-tola"
+# nym_version: "v2025.21-mozzarella"
 
 ## NOTE:
 ## if you want to pin Nym to a specific version instead of using the
@@ -118,4 +117,4 @@ packages:
 
 # enable_writeback_tuning: true
 # writeback_dirty_writeback_centisecs: 1500
-# writeback_dirty_expire_centisecs: 6000
+# writeback_dirty_expire_centisecs: 6000

ansible/nym-node/roles/tunnel/tasks/main.yml

@@ -1,30 +1,11 @@
 ---
-- name: Ensure nym binaries directory exists
-  file:
-    path: /root/nym-binaries
-    state: directory
-    mode: "0755"
+- name: Configure tunnel manager
   tags:
-    - tunnel
     - network_tunnel_manager
-    - ntm
-
-- name: Download network tunnel manager
-  get_url:
-    url: "{{ tunnel_manager_url }}"
-    dest: /root/nym-binaries/network-tunnel-manager.sh
-    mode: "0755"
-    force: yes
-  tags:
-    - tunnel
-    - network_tunnel_manager
-    - ntm
-    
-- name: Run network tunnel manager
-  command: "/root/nym-binaries/network-tunnel-manager.sh {{ item }}"
+  become: true
+  command:
+    cmd: "/root/nym-binaries/network-tunnel-manager.sh {{ item }}"
   loop:
     - complete_networking_configuration
-  tags:
-    - tunnel
-    - network_tunnel_manager
-    - ntm
+  register: tunnel_mgr
+  failed_when: false

clients/native/Cargo.toml

@@ -1,11 +1,11 @@
 [package]
 name = "nym-client"
-description = "Implementation of the Nym Client"
-version = "1.1.74"
+version = "1.1.72"
 authors = ["Dave Hrycyszyn <futurechimp@users.noreply.github.com>", "Jędrzej Stuczyński <andrew@nymtech.net>"]
+description = "Implementation of the Nym Client"
 edition = "2021"
-license.workspace = true
 rust-version = "1.85"
+license.workspace = true
 publish = false
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

clients/native/websocket-requests/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-client-websocket-requests"
-description = "Request and response definitions for Nym client websocket connections"
 version.workspace = true
 authors = ["Jędrzej Stuczyński <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
+description = "Request and response definitions for Nym client websocket connections"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

clients/socks5/Cargo.toml

@@ -1,11 +1,11 @@
 [package]
 name = "nym-socks5-client"
-description = "A SOCKS5 localhost proxy that converts incoming messages to Sphinx and sends them to a Nym address"
-version = "1.1.74"
+version = "1.1.72"
 authors = ["Dave Hrycyszyn <futurechimp@users.noreply.github.com>"]
+description = "A SOCKS5 localhost proxy that converts incoming messages to Sphinx and sends them to a Nym address"
 edition = "2021"
-license.workspace = true
 rust-version = "1.85"
+license.workspace = true
 publish = false
 
 [dependencies]

common/async-file-watcher/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-async-file-watcher"
-description = "Simple file watcher that sends a notification whenever there was any change in the watched file"
 version.workspace = true
-authors.workspace = true
 edition.workspace = true
 license.workspace = true
+description = "Simple file watcher that sends a notification whenever there was any change in the watched file"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/authenticator-requests/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-authenticator-requests"
-description = "Crate defining requests and responses for the Nym authenticator client"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Crate defining requests and responses for the Nym authenticator client"
 
 [dependencies]
 base64 = { workspace = true }

common/bandwidth-controller/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-bandwidth-controller"
-description = "Crate for controlling the use of zknym credentials to ensure constant bandwidth availability for NymVPN app"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Crate for controlling the use of zknym credentials to ensure constant bandwidth availability for NymVPN app"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/bandwidth-controller/src/acquire/mod.rs

@@ -34,7 +34,7 @@ where
     let signing_key = ed25519::PrivateKey::new(&mut rng);
     let expiration = expiration.unwrap_or_else(ecash_default_expiration_date);
 
-    let deposit_amount = client.get_default_deposit_amount().await?;
+    let deposit_amount = client.get_required_deposit_amount().await?;
     info!("we'll need to deposit {deposit_amount} to obtain the ticketbook");
     let result = client
         .make_ticketbook_deposit(

common/bin-common/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-bin-common"
-description = "Common code for nym binaries"
 version.workspace = true
-authors = { workspace = true }
+description = "Common code for nym binaries"
 edition = { workspace = true }
+authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
-homepage.workspace = true
-documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 [dependencies]
 clap = { workspace = true, features = ["derive"], optional = true }
@@ -43,7 +38,6 @@ default = []
 openapi = ["utoipa"]
 output_format = ["serde_json", "dep:clap"]
 bin_info_schema = ["schemars"]
-ip_check = []
 basic_tracing = ["dep:tracing", "dep:tracing-subscriber"]
 otel-otlp = [
     "basic_tracing",

common/bin-common/src/lib.rs

@@ -9,6 +9,3 @@ pub mod completions;
 
 #[cfg(feature = "output_format")]
 pub mod output_format;
-
-#[cfg(feature = "ip_check")]
-pub mod ip_check;

common/client-core/Cargo.toml

@@ -1,16 +1,14 @@
 [package]
 name = "nym-client-core"
-description = "Crate containing core client functionality and configs, used by all other Nym client implentations"
 version.workspace = true
 authors = ["Dave Hrycyszyn <futurechimp@users.noreply.github.com>"]
 edition = "2024"
+rust-version = "1.85"
 license.workspace = true
+description = "Crate containing core client functionality and configs, used by all other Nym client implentations"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-core/config-types/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-client-core-config-types"
-description = "Low level configs and constants used by Nym clients and nodes"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Low level configs and constants used by Nym clients and nodes"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-core/gateways-storage/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-client-core-gateways-storage"
-description = "Functionality for Nym clients to store and retrive Gateway connections"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+rust-version.workspace = true
+description = "Functionality for Nym clients to store and retrive Gateway connections"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-core/surb-storage/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-client-core-surb-storage"
-description = "Functionality for Nym clients to generate and use Single Use Reply Blocks (SURBs)"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Functionality for Nym clients to generate and use Single Use Reply Blocks (SURBs)"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-libs/gateway-client/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-gateway-client"
-description = "Functions and types for Nym client <> Gateway connections"
 version.workspace = true
 authors = ["Jędrzej Stuczyński <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
+description = "Functions and types for Nym client <> Gateway connections"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-libs/mixnet-client/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-mixnet-client"
-description = "Client for Mix Node <> Mix Node & Mix Node <> Gateway communication"
 version.workspace = true
 authors = ["Jedrzej Stuczynski <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
+description = "Client for Mix Node <> Mix Node & Mix Node <> Gateway communication"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-libs/mixnet-client/src/client.rs

@@ -342,7 +342,7 @@ impl SendWithoutResponse for Client {
         sending_res.map_err(|err| {
             match err {
                 TrySendError::Full(_) => {
-                    trace!(
+                    warn!(
                         event = "mixclient.try_send",
                         peer = %address,
                         result = "full_dropped",

common/client-libs/validator-client/Cargo.toml

@@ -1,16 +1,14 @@
 [package]
 name = "nym-validator-client"
-description = "Client for interacting with Nyx Cosmos SDK blockchain"
 version.workspace = true
 authors = ["Jędrzej Stuczyński <andrew@nymtech.net>"]
 edition = "2021"
+rust-version = "1.85"
 license.workspace = true
+description = "Client for interacting with Nyx Cosmos SDK blockchain"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/client-libs/validator-client/src/nyxd/contract_traits/ecash_query_client.rs

@@ -8,7 +8,6 @@ use crate::nyxd::CosmWasmClient;
 use async_trait::async_trait;
 use cosmwasm_std::Coin;
 use nym_ecash_contract_common::deposit::LatestDepositResponse;
-use nym_ecash_contract_common::deposit_statistics::DepositsStatistics;
 use nym_ecash_contract_common::msg::QueryMsg as EcashQueryMsg;
 use serde::Deserialize;
 
@@ -18,9 +17,6 @@ pub use nym_ecash_contract_common::blacklist::{
 pub use nym_ecash_contract_common::deposit::{
     Deposit, DepositData, DepositId, DepositResponse, PagedDepositsResponse,
 };
-pub use nym_ecash_contract_common::reduced_deposit::{
-    WhitelistedAccount, WhitelistedAccountsResponse,
-};
 
 #[cfg_attr(target_arch = "wasm32", async_trait(?Send))]
 #[cfg_attr(not(target_arch = "wasm32"), async_trait)]
@@ -46,18 +42,8 @@ pub trait EcashQueryClient {
             .await
     }
 
-    async fn get_default_deposit_amount(&self) -> Result<Coin, NyxdError> {
-        self.query_ecash_contract(EcashQueryMsg::GetDefaultDepositAmount {})
-            .await
-    }
-
-    async fn get_reduced_deposit_amount(&self, address: String) -> Result<Option<Coin>, NyxdError> {
-        self.query_ecash_contract(EcashQueryMsg::GetReducedDepositAmount { address })
-            .await
-    }
-
-    async fn get_all_whitelisted_accounts(&self) -> Result<WhitelistedAccountsResponse, NyxdError> {
-        self.query_ecash_contract(EcashQueryMsg::GetAllWhitelistedAccounts {})
+    async fn get_required_deposit_amount(&self) -> Result<Coin, NyxdError> {
+        self.query_ecash_contract(EcashQueryMsg::GetRequiredDepositAmount {})
             .await
     }
 
@@ -79,11 +65,6 @@ pub trait EcashQueryClient {
         self.query_ecash_contract(EcashQueryMsg::GetDepositsPaged { start_after, limit })
             .await
     }
-
-    async fn get_deposits_statistics(&self) -> Result<DepositsStatistics, NyxdError> {
-        self.query_ecash_contract(EcashQueryMsg::GetDepositsStatistics {})
-            .await
-    }
 }
 
 #[cfg_attr(target_arch = "wasm32", async_trait(?Send))]
@@ -141,17 +122,10 @@ mod tests {
             EcashQueryMsg::GetDepositsPaged { limit, start_after } => {
                 client.get_deposits_paged(start_after, limit).ignore()
             }
-            EcashQueryMsg::GetDefaultDepositAmount {} => {
-                client.get_default_deposit_amount().ignore()
-            }
-            EcashQueryMsg::GetReducedDepositAmount { address } => {
-                client.get_reduced_deposit_amount(address).ignore()
-            }
-            EcashQueryMsg::GetAllWhitelistedAccounts {} => {
-                client.get_all_whitelisted_accounts().ignore()
+            EcashQueryMsg::GetRequiredDepositAmount {} => {
+                client.get_required_deposit_amount().ignore()
             }
             EcashQueryMsg::GetLatestDeposit {} => client.get_latest_deposit().ignore(),
-            EcashQueryMsg::GetDepositsStatistics {} => client.get_deposits_statistics().ignore(),
         };
     }
 }

common/client-libs/validator-client/src/nyxd/contract_traits/ecash_signing_client.rs

@@ -62,47 +62,13 @@ pub trait EcashSigningClient {
         new_deposit: Coin,
         fee: Option<Fee>,
     ) -> Result<ExecuteResult, NyxdError> {
-        let req = EcashExecuteMsg::UpdateDefaultDepositValue {
+        let req = EcashExecuteMsg::UpdateDepositValue {
             new_deposit: new_deposit.into(),
         };
         self.execute_ecash_contract(fee, req, "Ecash::UpdateDepositValue".to_string(), vec![])
             .await
     }
 
-    async fn set_reduced_deposit_price(
-        &self,
-        address: String,
-        deposit: Coin,
-        fee: Option<Fee>,
-    ) -> Result<ExecuteResult, NyxdError> {
-        let req = EcashExecuteMsg::SetReducedDepositPrice {
-            address,
-            deposit: deposit.into(),
-        };
-        self.execute_ecash_contract(
-            fee,
-            req,
-            "Ecash::SetReducedDepositPrice".to_string(),
-            vec![],
-        )
-        .await
-    }
-
-    async fn remove_reduced_deposit_price(
-        &self,
-        address: String,
-        fee: Option<Fee>,
-    ) -> Result<ExecuteResult, NyxdError> {
-        let req = EcashExecuteMsg::RemoveReducedDepositPrice { address };
-        self.execute_ecash_contract(
-            fee,
-            req,
-            "Ecash::RemoveReducedDepositPrice".to_string(),
-            vec![],
-        )
-        .await
-    }
-
     async fn propose_for_blacklist(
         &self,
         public_key: String,
@@ -175,15 +141,9 @@ mod tests {
                 .ignore(),
             ExecuteMsg::RedeemTickets { .. } => unimplemented!(), // no redeem tickets method for the client
             ExecuteMsg::UpdateAdmin { admin } => client.update_admin(admin, None).ignore(),
-            ExecuteMsg::UpdateDefaultDepositValue { new_deposit } => client
+            ExecuteMsg::UpdateDepositValue { new_deposit } => client
                 .update_deposit_value(new_deposit.into(), None)
                 .ignore(),
-            ExecuteMsg::SetReducedDepositPrice { address, deposit } => client
-                .set_reduced_deposit_price(address, deposit.into(), None)
-                .ignore(),
-            ExecuteMsg::RemoveReducedDepositPrice { address } => {
-                client.remove_reduced_deposit_price(address, None).ignore()
-            }
         };
     }
 }

common/commands/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-cli-commands"
-description = "Common commands crate used by the nym-cli tool for interacting with the Nyx Cosmos SDK blockchain and Mixnet endpoints"
 version.workspace = true
 authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Common commands crate used by the nym-cli tool for interacting with the Nyx Cosmos SDK blockchain and Mixnet endpoints"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 [dependencies]
 anyhow = { workspace = true }

common/config/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-config"
-description = "Config related helpers and functions"
 version.workspace = true
 authors = ["Jedrzej Stuczynski <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
-repository.workspace = true
 homepage.workspace = true
-documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+description = "Config related helpers and functions"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/cosmwasm-smart-contracts/coconut-dkg/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-coconut-dkg-common"
-description = "Common crate for Nym's DKG cosmwasm contract"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Common crate for Nym's DKG cosmwasm contract"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/cosmwasm-smart-contracts/contracts-common-testing/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-contracts-common-testing"
-description = "Common crate for cosmwasm contract tests"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Common crate for cosmwasm contract tests"
 
 [dependencies]
 anyhow = { workspace = true }

common/cosmwasm-smart-contracts/contracts-common/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-contracts-common"
-description = "Common library for Nym cosmwasm contracts"
 version.workspace = true
-authors = { workspace = true }
+description = "Common library for Nym cosmwasm contracts"
 edition = { workspace = true }
+authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
-homepage.workspace = true
-documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 [dependencies]
 bs58 = { workspace = true }

common/cosmwasm-smart-contracts/easy_addr/Cargo.toml

@@ -2,8 +2,8 @@
 name = "easy-addr"
 version.workspace = true
 edition = "2021"
-license.workspace = true
 publish = false
+license.workspace = true
 
 [lib]
 proc-macro = true

common/cosmwasm-smart-contracts/ecash-contract/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-ecash-contract-common"
-description = "Common crate for Nym's ecash/zknym cosmwasm contract"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Common crate for Nym's ecash/zknym cosmwasm contract"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/cosmwasm-smart-contracts/ecash-contract/src/counters.rs

@@ -6,14 +6,6 @@ use cosmwasm_std::Coin;
 
 #[cw_serde]
 pub struct PoolCounters {
-    /// Represents the total amount of funds deposited into the contract.
     pub total_deposited: Coin,
-
-    /// Represents the total amount of funds redeemed from the contract that got transferred into the holding account.
     pub total_redeemed: Coin,
-
-    /// Represents the total amount of tickets requested to be redeemed from the contract and get moved into the holding account,
-    /// after that functionality got disabled.
-    #[serde(default)]
-    pub tickets_requested_and_not_redeemed: u64,
 }

common/cosmwasm-smart-contracts/ecash-contract/src/deposit_statistics.rs

@@ -1,38 +0,0 @@
-// Copyright 2026 - Nym Technologies SA <contact@nymtech.net>
-// SPDX-License-Identifier: Apache-2.0
-
-use cosmwasm_schema::cw_serde;
-use cosmwasm_std::Coin;
-use std::collections::HashMap;
-
-/// Aggregate statistics about all deposits made through the ecash contract.
-#[cw_serde]
-pub struct DepositsStatistics {
-    /// Total number of deposits ever made (at any price tier),
-    /// derived from the deposit id counter.
-    pub total_deposits_made: u32,
-
-    /// Total value of all deposits ever made (at any price tier),
-    /// sourced from `PoolCounters::total_deposited`.
-    pub total_deposited: Coin,
-
-    /// Number of deposits made at the default (non-reduced) price.
-    pub total_deposits_made_with_default_price: u32,
-
-    /// Total value deposited at the default price.
-    pub total_deposited_with_default_price: Coin,
-
-    /// Number of deposits made at any custom (reduced) price, summed across all whitelisted accounts.
-    pub total_deposits_made_with_custom_price: u32,
-
-    /// Total value deposited at custom prices, summed across all whitelisted accounts.
-    pub total_deposited_with_custom_price: Coin,
-
-    /// Per-account breakdown of deposit counts for whitelisted addresses.
-    // note: we use String for addressing due to serialisation incompatibility
-    pub deposits_made_with_custom_price: HashMap<String, u32>,
-
-    /// Per-account breakdown of deposited amounts for whitelisted addresses.
-    // note: we use String for addressing due to serialisation incompatibility
-    pub deposited_with_custom_price: HashMap<String, Coin>,
-}

common/cosmwasm-smart-contracts/ecash-contract/src/error.rs

@@ -65,26 +65,4 @@ pub enum EcashContractError {
 
     #[error("the account blacklisting hasn't been fully implemented yet")]
     UnimplementedBlacklisting,
-
-    #[error("reduced deposit must use the same denom as the default deposit (expected '{expected}', got '{got}')")]
-    InvalidReducedDepositDenom { expected: String, got: String },
-
-    #[error(
-        "reduced deposit amount ({reduced}) must be strictly less than the default ({default})"
-    )]
-    ReducedDepositNotReduced {
-        reduced: cosmwasm_std::Uint128,
-        default: cosmwasm_std::Uint128,
-    },
-
-    #[error("address '{address}' does not have a custom reduced deposit price set")]
-    NoReducedDepositPrice { address: String },
-
-    #[error(
-        "deposit amount ({amount}) must be at least the ticket book size ({ticket_book_size})"
-    )]
-    DepositBelowTicketBookSize {
-        amount: cosmwasm_std::Uint128,
-        ticket_book_size: u64,
-    },
 }

common/cosmwasm-smart-contracts/ecash-contract/src/lib.rs

@@ -4,12 +4,10 @@
 pub mod blacklist;
 pub mod counters;
 pub mod deposit;
-pub mod deposit_statistics;
 pub mod error;
 pub mod event_attributes;
 pub mod events;
 pub mod msg;
 pub mod redeem_credential;
-pub mod reduced_deposit;
 
 pub use error::EcashContractError;

common/cosmwasm-smart-contracts/ecash-contract/src/msg.rs

@@ -9,10 +9,6 @@ use crate::blacklist::{BlacklistedAccountResponse, PagedBlacklistedAccountRespon
 #[cfg(feature = "schema")]
 use crate::deposit::{DepositResponse, LatestDepositResponse, PagedDepositsResponse};
 #[cfg(feature = "schema")]
-use crate::deposit_statistics::DepositsStatistics;
-#[cfg(feature = "schema")]
-use crate::reduced_deposit::WhitelistedAccountsResponse;
-#[cfg(feature = "schema")]
 use cosmwasm_schema::QueryResponses;
 
 #[cw_serde]
@@ -46,25 +42,10 @@ pub enum ExecuteMsg {
         admin: String,
     },
 
-    #[serde(alias = "update_deposit_value")]
-    UpdateDefaultDepositValue {
+    UpdateDepositValue {
         new_deposit: Coin,
     },
 
-    /// Set (or overwrite) a reduced deposit price for a specific address.
-    /// Only callable by the contract admin.
-    SetReducedDepositPrice {
-        address: String,
-        deposit: Coin,
-    },
-
-    /// Remove the reduced deposit price for a specific address, reverting them to
-    /// the default price. Returns an error if the address has no custom price set.
-    /// Only callable by the contract admin.
-    RemoveReducedDepositPrice {
-        address: String,
-    },
-
     // TODO: properly implement
     ProposeToBlacklist {
         public_key: String,
@@ -87,15 +68,7 @@ pub enum QueryMsg {
     },
 
     #[cfg_attr(feature = "schema", returns(Coin))]
-    #[serde(alias = "get_required_deposit_amount")]
-    #[serde(alias = "GetRequiredDepositAmount")]
-    GetDefaultDepositAmount {},
-
-    #[cfg_attr(feature = "schema", returns(Option<Coin>))]
-    GetReducedDepositAmount { address: String },
-
-    #[cfg_attr(feature = "schema", returns(WhitelistedAccountsResponse))]
-    GetAllWhitelistedAccounts {},
+    GetRequiredDepositAmount {},
 
     #[cfg_attr(feature = "schema", returns(DepositResponse))]
     GetDeposit { deposit_id: u32 },
@@ -108,22 +81,7 @@ pub enum QueryMsg {
         limit: Option<u32>,
         start_after: Option<u32>,
     },
-
-    #[cfg_attr(feature = "schema", returns(DepositsStatistics))]
-    GetDepositsStatistics {},
 }
 
 #[cw_serde]
-pub struct MigrateMsg {
-    /// Initial set of whitelisted accounts with their reduced deposit prices.
-    /// Each entry is validated and stored during migration.
-    pub initial_whitelist: Vec<WhitelistedDeposit>,
-}
-
-/// An address and its reduced deposit price, used when seeding the whitelist
-/// via migration.
-#[cw_serde]
-pub struct WhitelistedDeposit {
-    pub address: String,
-    pub deposit: Coin,
-}
+pub struct MigrateMsg {}

common/cosmwasm-smart-contracts/ecash-contract/src/reduced_deposit.rs

@@ -1,16 +0,0 @@
-// Copyright 2026 - Nym Technologies SA <contact@nymtech.net>
-// SPDX-License-Identifier: Apache-2.0
-
-use cosmwasm_schema::cw_serde;
-use cosmwasm_std::{Addr, Coin};
-
-#[cw_serde]
-pub struct WhitelistedAccount {
-    pub address: Addr,
-    pub deposit: Coin,
-}
-
-#[cw_serde]
-pub struct WhitelistedAccountsResponse {
-    pub whitelisted_accounts: Vec<WhitelistedAccount>,
-}

common/cosmwasm-smart-contracts/group-contract/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-group-contract-common"
-description = "Common crate for Nym's group cosmwasm contract"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Common crate for Nym's group cosmwasm contract"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 [dependencies]
 cosmwasm-schema = { workspace = true }

common/cosmwasm-smart-contracts/mixnet-contract/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-mixnet-contract-common"
-description = "Common library for the Nym mixnet contract"
 version.workspace = true
-authors = { workspace = true }
+description = "Common library for the Nym mixnet contract"
+rust-version = "1.85"
 edition = { workspace = true }
+authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
-homepage.workspace = true
-documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 [dependencies]
 bs58 = { workspace = true }

common/cosmwasm-smart-contracts/multisig-contract/Cargo.toml

@@ -1,16 +1,10 @@
 [package]
 name = "nym-multisig-contract-common"
-description = "Common code for the Nym multisig CosmWasm smart contract"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
-repository.workspace = true
+description = "Common code for the Nym multisig CosmWasm smart contract"
 homepage.workspace = true
-documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 [dependencies]
 cosmwasm-schema = { workspace = true }

common/cosmwasm-smart-contracts/nym-performance-contract/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-performance-contract-common"
-description = "Common crate for Nym's group performance contract"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Common crate for Nym's group performance contract"
 
 [dependencies]
 thiserror = { workspace = true }

common/cosmwasm-smart-contracts/nym-pool-contract/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-pool-contract-common"
-description = "Common library for the Nym Pool contract"
 version.workspace = true
+description = "Common library for the Nym Pool contract"
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version = "1.85"
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
 readme.workspace = true
-publish = true
 
 [dependencies]
 thiserror = { workspace = true }

common/cosmwasm-smart-contracts/vesting-contract/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-vesting-contract-common"
-description = "Common library for the Nym vesting contract"
 version.workspace = true
-authors = { workspace = true }
+description = "Common library for the Nym vesting contract"
 edition = { workspace = true }
+authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
-homepage.workspace = true
-documentation.workspace = true
-rust-version = "1.85"
-readme.workspace = true
-publish = true
 
 [dependencies]
 cosmwasm-std = { workspace = true }

common/credential-proxy/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-credential-proxy-lib"
-description = "Build script and core functionality of the Nym Credential Proxy"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Build script and core functionality of the Nym Credential Proxy"
 
 [dependencies]
 anyhow = { workspace = true }

common/credential-proxy/src/shared_state/nyxd_client.rs

@@ -6,7 +6,7 @@ use crate::helpers::LockTimer;
 use nym_ecash_contract_common::msg::ExecuteMsg;
 use nym_validator_client::nyxd::contract_traits::NymContractsProvider;
 use nym_validator_client::nyxd::cosmwasm_client::types::ExecuteResult;
-use nym_validator_client::nyxd::{AccountId, Coin, Config, CosmWasmClient, NyxdClient};
+use nym_validator_client::nyxd::{Coin, Config, CosmWasmClient, NyxdClient};
 use nym_validator_client::{DirectSigningHttpRpcNyxdClient, nyxd};
 use std::ops::Deref;
 use std::sync::Arc;
@@ -50,10 +50,6 @@ impl ChainClient {
         Ok(ChainClient(Arc::new(RwLock::new(client))))
     }
 
-    pub async fn address(&self) -> AccountId {
-        self.0.read().await.address()
-    }
-
     pub async fn query_chain(&self) -> ChainReadPermit<'_> {
         let _acquire_timer = LockTimer::new("acquire chain query permit");
         self.0.read().await

common/credential-proxy/src/shared_state/required_deposit_cache.rs

@@ -8,7 +8,6 @@ use nym_validator_client::nyxd::contract_traits::EcashQueryClient;
 use std::sync::Arc;
 use time::OffsetDateTime;
 use tokio::sync::RwLock;
-use tracing::{info, warn};
 
 pub struct CachedDeposit {
     valid_until: OffsetDateTime,
@@ -57,29 +56,13 @@ impl RequiredDepositCache {
 
         // update cache
         drop(read_guard);
-
-        let address = chain_client.address().await;
-        info!("checking deposit required by {address}");
         let mut write_guard = self.inner.write().await;
-
-        let read_permit = chain_client.query_chain().await;
-        let reduced = read_permit
-            .get_reduced_deposit_amount(address.to_string())
+        let deposit_amount = chain_client
+            .query_chain()
+            .await
+            .get_required_deposit_amount()
             .await?;
 
-        let deposit_amount = match reduced {
-            Some(reduced) => {
-                info!("we're permitted to use reduced price");
-                reduced
-            }
-            None => {
-                warn!(
-                    "using default deposit value {address} is not whitelisted for price reduction"
-                );
-                read_permit.get_default_deposit_amount().await?
-            }
-        };
-
         let nym_coin: Coin = deposit_amount.into();
 
         write_guard.update(nym_coin.clone());

common/credential-storage/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-credential-storage"
-description = "Crate for handling and storing spent and unspent zknym ticketbooks"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+rust-version.workspace = true
+description = "Crate for handling and storing spent and unspent zknym ticketbooks"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/credential-utils/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-credential-utils"
-description = "Utils crate for dealing with zknym credentials"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Utils crate for dealing with zknym credentials"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]

common/credential-verification/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-credential-verification"
-description = "Store and verify zknym credentials"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Store and verify zknym credentials"
 
 [dependencies]
 async-trait = { workspace = true }

common/credential-verification/src/ecash/credential_sender.rs

@@ -3,19 +3,25 @@
 
 use crate::Error;
 use crate::ecash::error::EcashTicketError;
+use crate::ecash::helpers::for_each_api_concurrent;
 use crate::ecash::state::SharedState;
 use cosmwasm_std::Fraction;
 use cw_utils::ThresholdResponse;
 use futures::channel::mpsc::UnboundedReceiver;
 use futures::{Stream, StreamExt};
-use nym_api_requests::ecash::models::VerifyEcashTicketBody;
+use nym_api_requests::constants::MIN_BATCH_REDEMPTION_DELAY;
+use nym_api_requests::ecash::models::{BatchRedeemTicketsBody, VerifyEcashTicketBody};
 use nym_credentials_interface::Bandwidth;
 use nym_credentials_interface::{ClientTicket, TicketType};
 use nym_validator_client::EcashApiClient;
 use nym_validator_client::coconut::EcashApiError;
-use nym_validator_client::nym_api::NymApiClientExt;
+use nym_validator_client::nym_api::{EpochId, NymApiClientExt};
 use nym_validator_client::nyxd::AccountId;
-use nym_validator_client::nyxd::contract_traits::MultisigQueryClient;
+use nym_validator_client::nyxd::contract_traits::{
+    EcashSigningClient, MultisigQueryClient, MultisigSigningClient, PagedMultisigQueryClient,
+};
+use nym_validator_client::nyxd::cosmwasm_client::ContractResponseData;
+use nym_validator_client::nyxd::cw3::Status;
 use si_scale::helpers::bibytes2;
 use std::collections::{HashMap, HashSet};
 use std::ops::Deref;
@@ -25,6 +31,22 @@ use tokio::sync::{Mutex, RwLockReadGuard};
 use tokio::time::{Duration, Instant, interval_at};
 use tracing::{debug, error, info, instrument, trace, warn};
 
+enum ProposalResult {
+    Executed,
+    Rejected,
+    Pending,
+}
+
+impl ProposalResult {
+    fn is_pending(&self) -> bool {
+        matches!(self, ProposalResult::Pending)
+    }
+
+    fn is_rejected(&self) -> bool {
+        matches!(self, ProposalResult::Rejected)
+    }
+}
+
 struct PendingVerification {
     ticket: ClientTicket,
 
@@ -46,6 +68,43 @@ impl PendingVerification {
     }
 }
 
+struct PendingRedemptionVote {
+    proposal_id: u64,
+    digest: Vec<u8>,
+    included_serial_numbers: Vec<Vec<u8>>,
+    epoch_id: EpochId,
+
+    // vec of node ids of apis that haven't sent a valid response
+    pending: Vec<u64>,
+}
+
+impl PendingRedemptionVote {
+    fn new(
+        proposal_id: u64,
+        digest: Vec<u8>,
+        included_serial_numbers: Vec<Vec<u8>>,
+        epoch_id: EpochId,
+        pending: Vec<u64>,
+    ) -> Self {
+        PendingRedemptionVote {
+            proposal_id,
+            digest,
+            included_serial_numbers,
+            epoch_id,
+            pending,
+        }
+    }
+
+    fn to_request_body(&self, gateway_cosmos_addr: AccountId) -> BatchRedeemTicketsBody {
+        BatchRedeemTicketsBody::new(
+            self.digest.clone(),
+            self.proposal_id,
+            self.included_serial_numbers.clone(),
+            gateway_cosmos_addr,
+        )
+    }
+}
+
 pub struct CredentialHandlerConfig {
     /// Specifies the multiplier for revoking a malformed/double-spent ticket
     /// (if it has to go all the way to the nym-api for verification)
@@ -73,6 +132,7 @@ pub struct CredentialHandler {
     ticket_receiver: UnboundedReceiver<ClientTicket>,
     shared_state: SharedState,
     pending_tickets: Vec<PendingVerification>,
+    pending_redemptions: Vec<PendingRedemptionVote>,
 }
 
 impl CredentialHandler {
@@ -124,6 +184,75 @@ impl CredentialHandler {
         Ok(pending)
     }
 
+    async fn rebuild_pending_votes(
+        shared_state: &SharedState,
+    ) -> Result<Vec<PendingRedemptionVote>, EcashTicketError> {
+        // 1. get all tickets that were not fully verified
+        let unverified = shared_state.storage.get_all_unresolved_proposals().await?;
+        let mut pending = Vec::with_capacity(unverified.len());
+
+        let epoch_id = shared_state.current_epoch_id().await?;
+        let apis = shared_state
+            .api_clients(epoch_id)
+            .await?
+            .iter()
+            .map(|s| (s.cosmos_address.to_string(), s.node_id))
+            .collect::<Vec<_>>();
+
+        for proposal_id in unverified {
+            // get all of the votes
+            let votes = shared_state
+                .start_query()
+                .await
+                .get_all_votes(proposal_id as u64)
+                .await
+                .map_err(EcashTicketError::chain_query_failure)?
+                .into_iter()
+                .map(|v| v.voter)
+                .collect::<HashSet<_>>();
+
+            let mut missing_votes = Vec::new();
+
+            // see who hasn't voted
+            for (api_address, api_id) in &apis {
+                // for each signer, check if they have actually voted; if not, that's the missing guy
+                if !votes.contains(api_address) {
+                    missing_votes.push(*api_id)
+                }
+            }
+
+            // attempt to rebuild SN and digest from the proposal info + storage data
+            let proposal_info = shared_state
+                .start_query()
+                .await
+                .query_proposal(proposal_id as u64)
+                .await
+                .map_err(EcashTicketError::chain_query_failure)?;
+
+            let tickets = shared_state
+                .storage
+                .get_all_proposed_tickets_with_sn(proposal_id as u32)
+                .await?;
+            let digest =
+                BatchRedeemTicketsBody::make_digest(tickets.iter().map(|t| &t.serial_number));
+            let encoded_digest = bs58::encode(&digest).into_string();
+            if encoded_digest != proposal_info.description {
+                error!("the lost proposal {proposal_id} does not have a matching digest!");
+                continue;
+            }
+
+            pending.push(PendingRedemptionVote {
+                proposal_id: proposal_id as u64,
+                digest,
+                included_serial_numbers: tickets.into_iter().map(|t| t.serial_number).collect(),
+                epoch_id,
+                pending: missing_votes,
+            })
+        }
+
+        Ok(pending)
+    }
+
     pub(crate) async fn new(
         config: CredentialHandlerConfig,
         ticket_receiver: UnboundedReceiver<ClientTicket>,
@@ -147,15 +276,51 @@ impl CredentialHandler {
         // on startup read pending credentials and api responses from the storage
         let pending_tickets = Self::rebuild_pending_tickets(&shared_state).await?;
 
+        // on startup read pending proposals from the storage
+        // then reconstruct the votes by querying the multisig contract for votes on those proposals
+        // digest from the description and count from the message
+        let pending_redemptions = Self::rebuild_pending_votes(&shared_state).await?;
+
         Ok(CredentialHandler {
             config,
             multisig_threshold,
             ticket_receiver,
             shared_state,
             pending_tickets,
+            pending_redemptions,
         })
     }
 
+    // the argument is temporary as we'll be reading from the storage
+    async fn create_redemption_proposal(
+        &self,
+        commitment: &[u8],
+        number_of_tickets: u16,
+    ) -> Result<u64, EcashTicketError> {
+        let res = self
+            .shared_state
+            .start_tx()
+            .await
+            .request_ticket_redemption(
+                bs58::encode(commitment).into_string(),
+                number_of_tickets,
+                None,
+            )
+            .await
+            .map_err(|source| EcashTicketError::RedemptionProposalCreationFailure { source })?;
+
+        // that one is quite tricky because proposal exists on chain, but we didn't get the id...
+        // but it should be quite impossible to ever reach this unless we make breaking changes
+        let proposal_id = res
+            .parse_singleton_u64_contract_data()
+            .inspect_err(|err| error!("reached seemingly impossible error! could not recover the redemption proposal id: {err}"))
+            .map_err(|source| EcashTicketError::ProposalIdParsingFailure { source })?;
+
+        info!("created redemption proposal {proposal_id} to redeem {number_of_tickets} tickets");
+
+        Ok(proposal_id)
+    }
+
     /// Attempt to send ticket verification request to the provided ecash verifier.
     async fn verify_ticket(
         &self,
@@ -357,7 +522,42 @@ impl CredentialHandler {
     async fn resolve_pending(&mut self) -> Result<(), EcashTicketError> {
         let mut still_failing = Vec::new();
 
-        // 1. attempt to verify the remaining tickets
+        // 1. attempt to resolve all pending proposals
+        while let Some(mut pending) = self.pending_redemptions.pop() {
+            match self.try_resolve_pending_proposal(&mut pending, None).await {
+                Ok(resolution) => {
+                    if resolution.is_pending() {
+                        warn!(
+                            "still failed to reach quorum for proposal {}. apis: {:?} haven't responded. we'll retry later",
+                            pending.proposal_id, pending.pending
+                        );
+                        still_failing.push(pending);
+                    } else {
+                        self.shared_state
+                            .storage
+                            .clear_post_proposal_data(
+                                pending.proposal_id as u32,
+                                OffsetDateTime::now_utc(),
+                                resolution.is_rejected(),
+                            )
+                            .await?;
+                    }
+                }
+                Err(err) => {
+                    error!(
+                        "experienced internal error when attempting to resolve pending proposal: {err}"
+                    );
+                    // make sure to update internal state to not lose any data
+                    self.pending_redemptions.push(pending);
+                    self.pending_redemptions.append(&mut still_failing);
+                    return Err(err);
+                }
+            }
+        }
+
+        let mut still_failing = Vec::new();
+
+        // 2. attempt to verify the remaining tickets
         while let Some(mut pending) = self.pending_tickets.pop() {
             // possible optimisation: if there's a lot of pending tickets, pre-emptively grab locks for api_clients
             match self
@@ -395,14 +595,362 @@ impl CredentialHandler {
         Ok(())
     }
 
-    async fn periodic_operations(&mut self) -> Result<(), EcashTicketError> {
-        trace!(
-            "attempting to resolve all pending operations -> tickets that are waiting for verification"
+    /// Attempt to send batch redemption request to the provided ecash verifier.
+    async fn redeem_tickets(
+        &self,
+        proposal_id: u64,
+        request: &BatchRedeemTicketsBody,
+        client: &EcashApiClient,
+    ) -> Result<bool, EcashTicketError> {
+        match client.api_client.batch_redeem_ecash_tickets(request).await {
+            Ok(res) => {
+                let accepted = if res.proposal_accepted {
+                    trace!("{client} has accepted proposal {proposal_id}");
+                    true
+                } else {
+                    warn!("{client} has rejected proposal {proposal_id}");
+                    false
+                };
+
+                Ok(accepted)
+            }
+            Err(err) => {
+                error!(
+                    "failed to send proposal {proposal_id} for redemption vote to ecash signer '{client}': {err}. if we don't reach quorum, we'll retry later"
+                );
+                Ok(false)
+            }
+        }
+    }
+
+    async fn try_execute_proposal(&self, proposal_id: u64) -> Result<(), EcashTicketError> {
+        self.shared_state
+            .start_tx()
+            .await
+            .execute_proposal(proposal_id, None)
+            .await
+            .map_err(
+                |source| EcashTicketError::RedemptionProposalExecutionFailure {
+                    proposal_id,
+                    source,
+                },
+            )?;
+        Ok(())
+    }
+
+    async fn get_proposal_status(&self, proposal_id: u64) -> Result<Status, EcashTicketError> {
+        Ok(self
+            .shared_state
+            .start_query()
+            .await
+            .query_proposal(proposal_id)
+            .await
+            .map_err(EcashTicketError::chain_query_failure)?
+            .status)
+    }
+
+    async fn try_finalize_proposal(
+        &self,
+        proposal_id: u64,
+    ) -> Result<ProposalResult, EcashTicketError> {
+        match self.get_proposal_status(proposal_id).await? {
+            Status::Pending => {
+                // the voting hasn't even begun!
+                error!("impossible case! the proposal {proposal_id} is still pending");
+                Ok(ProposalResult::Pending)
+            }
+            Status::Open => {
+                debug!("proposal {proposal_id} is still open and needs more votes");
+                Ok(ProposalResult::Pending)
+            }
+            Status::Rejected => {
+                warn!("proposal {proposal_id} has been rejected");
+                Ok(ProposalResult::Rejected)
+            }
+            Status::Passed => {
+                info!(
+                    "proposal {proposal_id} has already been passed - we just need to execute it"
+                );
+                self.try_execute_proposal(proposal_id).await?;
+                info!("executed proposal {proposal_id}");
+                Ok(ProposalResult::Executed)
+            }
+            Status::Executed => {
+                info!("proposal {proposal_id} has already been executed - nothing to do!");
+                Ok(ProposalResult::Executed)
+            }
+        }
+    }
+
+    async fn try_resolve_pending_proposal(
+        &self,
+        pending: &mut PendingRedemptionVote,
+        api_clients: Option<RwLockReadGuard<'_, Vec<EcashApiClient>>>,
+    ) -> Result<ProposalResult, EcashTicketError> {
+        let proposal_id = pending.proposal_id;
+
+        info!(
+            "attempting to resolve pending redemption proposal {proposal_id} to redeem {} tickets",
+            pending.included_serial_numbers.len()
         );
 
-        // retry the pending verification requests that have failed before
+        // check if the proposal still needs more votes from the apis
+        let result = self.try_finalize_proposal(proposal_id).await?;
+        if !result.is_pending() {
+            return Ok(result);
+        }
+
+        let api_clients = match api_clients {
+            Some(clients) => clients,
+            None => self.shared_state.api_clients(pending.epoch_id).await?,
+        };
+
+        let redemption_request = pending.to_request_body(self.shared_state.address.clone());
+
+        // TODO: optimisation: tell other apis they can purge our tickets even if they haven't voted
+
+        let total = api_clients.len();
+        let api_failures = Mutex::new(Vec::new());
+        let rejected = AtomicUsize::new(0);
+
+        for_each_api_concurrent(&api_clients, &pending.pending, |ecash_client| async {
+            // errors are only returned on hard, storage, failures
+            match self
+                .redeem_tickets(pending.proposal_id, &redemption_request, ecash_client)
+                .await
+            {
+                Err(err) => {
+                    error!("internal failure. could not proceed with ticket redemption: {err}");
+                    api_failures.lock().await.push(ecash_client.node_id);
+                }
+                Ok(false) => {
+                    rejected.fetch_add(1, Ordering::SeqCst);
+                }
+                _ => {}
+            }
+        })
+        .await;
+
+        let api_failures = api_failures.into_inner();
+        let num_failures = api_failures.len();
+        pending.pending = api_failures;
+
+        let rejected = rejected.into_inner();
+        let rejected_ratio = rejected as f32 / total as f32;
+        let rejected_perc = rejected_ratio * 100.;
+        if rejected_ratio >= (1. - self.multisig_threshold) {
+            error!(
+                "{rejected_perc:.2}% of signers rejected proposal {proposal_id}. we won't be able to execute it"
+            );
+            // no need to query the chain as with so many rejections it's impossible it has passed.
+            return Ok(ProposalResult::Rejected);
+        }
+
+        let accepted_ratio = (total - rejected - num_failures) as f32 / total as f32;
+        let accepted_perc = accepted_ratio * 100.;
+        match accepted_ratio {
+            n if n < self.multisig_threshold => {
+                error!(
+                    "less than 2/3 of signers ({accepted_perc:.2}%) accepted proposal {proposal_id}. we're not yet be able to execute it to get funds out"
+                );
+                return Ok(ProposalResult::Pending);
+            }
+            n if n < self.config.minimum_api_quorum => {
+                warn!(
+                    "the system seems to be a bit unstable: less than 80%, but more than 67% of signers ({accepted_perc:.2}%) accepted proposal {proposal_id}"
+                );
+            }
+            _ => {
+                trace!("{accepted_perc:.2}% of signers accepted proposal {proposal_id}");
+            }
+        }
+
+        // attempt to execute the proposal if it reached the required threshold
+        self.try_finalize_proposal(proposal_id).await
+    }
+
+    async fn maybe_redeem_tickets(&mut self) -> Result<(), EcashTicketError> {
+        if !self.pending_tickets.is_empty() {
+            return Err(EcashTicketError::PendingTickets);
+        }
+
+        let latest_stored = self.shared_state.storage.latest_proposal().await?;
+
+        // check if we have already created the proposal but crashed before persisting it in the db
+        //
+        // if we have some persisted proposals in storage, try to see if there's anything more recent on chain
+        // (i.e. the missing proposal)
+        // if not (i.e. this would have been our first) check the latest page of proposals.
+        // while this is not ideal, realistically speaking we probably crashed few minutes ago
+        // and worst case scenario we'll just recreate the proposal instead
+        //
+        // LIMITATION: if MULTIPLE proposals got created in between, well. though luck.
+        let latest_on_chain = if let Some(latest_stored) = &latest_stored {
+            // those are sorted in ASCENDING way
+            self.shared_state
+                .proposals_since(latest_stored.proposal_id as u64)
+                .await?
+                .pop()
+        } else {
+            // but those are DESCENDING
+            self.shared_state
+                .last_proposal_page()
+                .await?
+                .first()
+                .cloned()
+        };
+
+        let now = OffsetDateTime::now_utc();
+
+        let prior_proposal = match (&latest_stored, latest_on_chain) {
+            (None, None) => {
+                // we haven't created any proposals before
+                trace!("this could be our first redemption proposal");
+                None
+            }
+            (Some(stored), None) => {
+                if stored.created_at + MIN_BATCH_REDEMPTION_DELAY > now {
+                    trace!("too soon to create new redemption proposal");
+                    return Ok(());
+                }
+                None
+            }
+            (_, Some(on_chain)) => {
+                warn!(
+                    "we seem to have crashed after creating proposal, but before persisting it onto disk!"
+                );
+
+                Some(on_chain)
+            }
+        };
+
+        // technically we could have been just caching all of those serial numbers as we verify tickets,
+        // but given how infrequently we call this, there's no point in wasting this memory
+        let verified_tickets = self
+            .shared_state
+            .storage
+            .get_all_verified_tickets_with_sn()
+            .await?;
+
+        // TODO: somehow simplify that nasty nested if
+        if verified_tickets.len() < self.config.minimum_redemption_tickets {
+            // bypass the number of tickets check if we're about to lose our rewards due to expiration
+            if let Some(latest_stored) = latest_stored {
+                if latest_stored.created_at + self.config.maximum_time_between_redemption < now {
+                    {}
+                } else {
+                    debug!(
+                        "we only have {} verified tickets. there's no point in creating a redemption request yet. (we need at least {} (configurable))",
+                        verified_tickets.len(),
+                        self.config.minimum_redemption_tickets
+                    );
+                    return Ok(());
+                }
+            } else {
+                // first proposal
+                debug!(
+                    "we only have {} verified tickets. there's no point in creating a redemption request yet. (we need at least {} (configurable))",
+                    verified_tickets.len(),
+                    self.config.minimum_redemption_tickets
+                );
+                return Ok(());
+            }
+        }
+
+        // this should have been ensured when querying
+        assert!(verified_tickets.len() <= u16::MAX as usize);
+
+        let digest =
+            BatchRedeemTicketsBody::make_digest(verified_tickets.iter().map(|t| &t.serial_number));
+        let encoded_digest = bs58::encode(&digest).into_string();
+
+        let prior_proposal_id = if let Some(prior_proposal) = prior_proposal {
+            if prior_proposal.description == encoded_digest {
+                info!("we have already created proposal for those tickets");
+                Some(prior_proposal.id)
+            } else {
+                warn!(
+                    "our missed proposal seem to have been for different tickets - abandoning it"
+                );
+                None
+            }
+        } else {
+            None
+        };
+
+        // if the proposal has already existed on chain, do use it. otherwise create a new one
+        let proposal_id = if let Some(prior) = prior_proposal_id {
+            prior
+        } else {
+            self.create_redemption_proposal(&digest, verified_tickets.len() as u16)
+                .await?
+        };
+
+        if proposal_id > u32::MAX as u64 {
+            // realistically will we ever reach it? no.
+            panic!(
+                "we have created more than {} proposals. we can't handle that.",
+                u32::MAX
+            )
+        }
+
+        self.shared_state
+            .storage
+            .insert_redemption_proposal(
+                &verified_tickets,
+                proposal_id as u32,
+                OffsetDateTime::now_utc(),
+            )
+            .await?;
+
+        let current_epoch = self.shared_state.current_epoch_id().await?;
+        let api_clients = self.shared_state.api_clients(current_epoch).await?;
+        let ids = api_clients.iter().map(|c| c.node_id).collect();
+        let mut pending = PendingRedemptionVote::new(
+            proposal_id,
+            digest,
+            verified_tickets
+                .into_iter()
+                .map(|t| t.serial_number)
+                .collect(),
+            current_epoch,
+            ids,
+        );
+
+        let resolution = self
+            .try_resolve_pending_proposal(&mut pending, Some(api_clients))
+            .await?;
+        if resolution.is_pending() {
+            warn!(
+                "failed to reach quorum for proposal {proposal_id}. apis: {:?} haven't responded. we'll retry later",
+                pending.pending
+            );
+            self.pending_redemptions.push(pending);
+        } else {
+            self.shared_state
+                .storage
+                .clear_post_proposal_data(
+                    proposal_id as u32,
+                    OffsetDateTime::now_utc(),
+                    resolution.is_rejected(),
+                )
+                .await?;
+        }
+
+        Ok(())
+    }
+
+    async fn periodic_operations(&mut self) -> Result<(), EcashTicketError> {
+        trace!(
+            "attempting to resolve all pending operations -> tickets that are waiting for verification and possibly redemption"
+        );
+
+        // 1. retry all operations that have failed in the past: verification requests and pending redemption
         self.resolve_pending().await?;
 
+        // 2. if applicable, attempt to redeem all newly verified tickets
+        self.maybe_redeem_tickets().await?;
+
         Ok(())
     }
 

common/credential-verification/src/ecash/helpers.rs

@@ -7,7 +7,7 @@ use std::future::Future;
 use std::ops::Deref;
 use tokio::sync::RwLockReadGuard;
 
-pub fn apis_stream<'a>(
+pub(crate) fn apis_stream<'a>(
     // if needed we could make this argument more generic to accept either locks or iterators, etc.
     all_clients: &'a RwLockReadGuard<'a, Vec<EcashApiClient>>,
     filter_by_id: &'a [u64],
@@ -22,7 +22,7 @@ pub fn apis_stream<'a>(
     )
 }
 
-pub async fn for_each_api_concurrent<'a, F, Fut>(
+pub(crate) async fn for_each_api_concurrent<'a, F, Fut>(
     all_clients: &'a RwLockReadGuard<'a, Vec<EcashApiClient>>,
     filter_by_id: &'a [u64],
     f: F,

common/credential-verification/src/ecash/mod.rs

@@ -20,7 +20,7 @@ use tracing::error;
 
 pub mod credential_sender;
 pub mod error;
-pub mod helpers;
+mod helpers;
 mod state;
 pub mod traits;
 

common/credential-verification/src/ecash/state.rs

@@ -3,12 +3,17 @@
 
 use crate::Error;
 use crate::ecash::error::EcashTicketError;
+use cosmwasm_std::{CosmosMsg, WasmMsg, from_json};
 use nym_credentials_interface::VerificationKeyAuth;
+use nym_ecash_contract_common::msg::ExecuteMsg;
 use nym_gateway_storage::traits::BandwidthGatewayStorage;
 use nym_validator_client::coconut::all_ecash_api_clients;
 use nym_validator_client::nym_api::EpochId;
 use nym_validator_client::nyxd::AccountId;
-use nym_validator_client::nyxd::contract_traits::{DkgQueryClient, NymContractsProvider};
+use nym_validator_client::nyxd::contract_traits::{
+    DkgQueryClient, MultisigQueryClient, NymContractsProvider,
+};
+use nym_validator_client::nyxd::cw3::ProposalResponse;
 use nym_validator_client::{DirectSigningHttpRpcNyxdClient, EcashApiClient};
 use std::collections::BTreeMap;
 use std::ops::Deref;
@@ -72,6 +77,53 @@ impl SharedState {
         Ok(this)
     }
 
+    fn created_redemption_proposal(&self, proposal: &ProposalResponse) -> bool {
+        let Some(msg) = proposal.msgs.first() else {
+            return false;
+        };
+        let CosmosMsg::Wasm(WasmMsg::Execute { msg, .. }) = msg else {
+            return false;
+        };
+        let Ok(ExecuteMsg::RedeemTickets { gw, .. }) = from_json(msg) else {
+            return false;
+        };
+
+        gw == self.address.as_ref()
+    }
+
+    /// retrieve all redemption proposals made by this gateway since, but excluding, the provided id
+    pub(crate) async fn proposals_since(
+        &self,
+        proposal_id: u64,
+    ) -> Result<Vec<ProposalResponse>, EcashTicketError> {
+        Ok(self
+            .start_query()
+            .await
+            .list_proposals(Some(proposal_id), None)
+            .await
+            .map_err(EcashTicketError::chain_query_failure)?
+            .proposals
+            .into_iter()
+            .filter(|p| self.created_redemption_proposal(p))
+            .collect())
+    }
+
+    /// retrieve all redemption proposals made by this gateway that are available on the last page of the query
+    pub(crate) async fn last_proposal_page(
+        &self,
+    ) -> Result<Vec<ProposalResponse>, EcashTicketError> {
+        Ok(self
+            .start_query()
+            .await
+            .reverse_proposals(None, None)
+            .await
+            .map_err(EcashTicketError::chain_query_failure)?
+            .proposals
+            .into_iter()
+            .filter(|p| self.created_redemption_proposal(p))
+            .collect())
+    }
+
     async fn set_epoch_data(
         &self,
         epoch_id: EpochId,
@@ -188,6 +240,24 @@ impl SharedState {
             data.get(&epoch_id).map(|d| &d.master_key).unwrap()
         }))
     }
+
+    pub(crate) async fn start_tx(&self) -> RwLockWriteGuard<'_, DirectSigningHttpRpcNyxdClient> {
+        self.nyxd_client.write().await
+    }
+
+    pub(crate) async fn start_query(&self) -> RwLockReadGuard<'_, DirectSigningHttpRpcNyxdClient> {
+        self.nyxd_client.read().await
+    }
+
+    pub(crate) async fn current_epoch_id(&self) -> Result<EpochId, EcashTicketError> {
+        Ok(self
+            .start_query()
+            .await
+            .get_current_epoch()
+            .await
+            .map_err(EcashTicketError::chain_query_failure)?
+            .epoch_id)
+    }
 }
 
 pub(crate) struct EpochState {

common/credentials-interface/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-credentials-interface"
-description = "Interface for Nym's compact eacash / zknym credential scheme"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Interface for Nym's compact eacash / zknym credential scheme"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/credentials/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-credentials"
-description = "Crate for using Nym's zknym credentials"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Crate for using Nym's zknym credentials"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/crypto/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-crypto"
-description = "Crypto library for the nym mixnet"
 version.workspace = true
-authors = { workspace = true }
+description = "Crypto library for the nym mixnet"
 edition = { workspace = true }
+authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
-homepage.workspace = true
-documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 [dependencies]
 aes-gcm-siv = { workspace = true, optional = true }

common/dkg/Cargo.toml

@@ -1,17 +1,13 @@
 [package]
 name = "nym-dkg"
-description = "Nym's Distributed Key Generation functionality"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
+resolver = "2"
 license.workspace = true
+description = "Nym's Distributed Key Generation functionality"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
-resolver = "2"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/ecash-signer-check-types/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-ecash-signer-check-types"
-description = "Crate containing types for the `ecash-signer-check` crate used to check if zknym signers are up and running properly"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Crate containing types for the `ecash-signer-check` crate used to check if zknym signers are up and running properly"
 
 [dependencies]
 semver = { workspace = true }

common/ecash-signer-check/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-ecash-signer-check"
-description = "Functions to interact with zknym signers, checking their status and health"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Functions to interact with zknym signers, checking their status and health"
 
 [dependencies]
 futures = { workspace = true }

common/ecash-time/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-ecash-time"
-description = "Time-related helper functions for Nym's zknym scheme"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Time-related helper functions for Nym's zknym scheme"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/exit-policy/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-exit-policy"
-description = "Get and set the Nym Exit Policy, used by Exit Gateways"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Get and set the Nym Exit Policy, used by Exit Gateways"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/gateway-requests/Cargo.toml

@@ -3,17 +3,14 @@
 
 [package]
 name = "nym-gateway-requests"
-description = "Request and response definitions for Nym Gateway <> client communication"
 version.workspace = true
 authors = ["Jedrzej Stuczynski <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
+description = "Request and response definitions for Nym Gateway <> client communication"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/gateway-stats-storage/Cargo.toml

@@ -1,16 +1,14 @@
 [package]
 name = "nym-gateway-stats-storage"
-description = "Functionality Nym Gateway statistics storage"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
-readme.workspace = true
-publish = true
+description = "Functionality Nym Gateway statistics storage"
 
 [dependencies]
 sqlx = { workspace = true, features = [

common/gateway-storage/Cargo.toml

@@ -1,16 +1,14 @@
 [package]
 name = "nym-gateway-storage"
-description = "Crate handling db setup and use for Nym Gateways, used for credentials, packets, connections"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
-readme.workspace = true
-publish = true
+description = "Crate handling db setup and use for Nym Gateways, used for credentials, packets, connections"
 
 [dependencies]
 async-trait = { workspace = true }

common/http-api-client-macro/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-http-api-client-macro"
-description = "Proc-macros for configuring HTTP clients globally via the `inventory` crate"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Proc-macros for configuring HTTP clients globally via the `inventory` crate"
 
 [lib]
 proc-macro = true

common/http-api-client/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-http-api-client"
-description = "Nym's HTTP API client, examples, and tests"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Nym's HTTP API client, examples, and tests"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
@@ -37,7 +34,6 @@ tracing = { workspace = true }
 itertools = { workspace = true }
 inventory = { workspace = true }
 tokio = { workspace = true, features = ["rt", "macros", "time"] }
-rustls = { workspace=true }
 # used for decoding text responses (they were already implicitly included)
 bytes = { workspace = true }
 encoding_rs = { workspace = true }

common/http-api-client/src/dns/constants.rs

@@ -4,7 +4,7 @@ use std::collections::HashMap;
 use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
 
 pub const NYM_API_DOMAIN: &str = "validator.nymtech.net";
-pub const NYM_API_IPS: &[IpAddr] = &[IpAddr::V4(Ipv4Addr::new(92, 39, 63, 14))];
+pub const NYM_API_IPS: &[IpAddr] = &[IpAddr::V4(Ipv4Addr::new(212, 71, 233, 232))];
 
 pub const NYM_VPN_API_DOMAIN: &str = "nymvpn.com";
 pub const NYM_VPN_API_IPS: &[IpAddr] = &[IpAddr::V4(Ipv4Addr::new(76, 76, 21, 21))];

common/http-api-client/src/lib.rs

@@ -161,8 +161,6 @@ use reqwest::{RequestBuilder, Response};
 use serde::de::DeserializeOwned;
 use serde::{Deserialize, Serialize};
 use std::fmt::Display;
-#[cfg(not(target_arch = "wasm32"))]
-use std::io::ErrorKind;
 use std::sync::atomic::{AtomicUsize, Ordering};
 use std::time::Duration;
 use thiserror::Error;
@@ -1169,10 +1167,14 @@ impl ApiClientCore for Client {
             match response {
                 Ok(resp) => return Ok(resp),
                 Err(err) => {
+                    // only if there was a network issue should we consider updating the host info
+                    //
+                    // note: for now this includes DNS resolution failure, I am not sure how I would go about
+                    // segregating that based on the interface provided by request for errors.
                     #[cfg(target_arch = "wasm32")]
                     let is_network_err = err.is_timeout();
                     #[cfg(not(target_arch = "wasm32"))]
-                    let is_network_err = might_be_network_interference(&err);
+                    let is_network_err = err.is_timeout() || err.is_connect();
 
                     if is_network_err {
                         // if we have multiple urls, update to the next
@@ -1220,68 +1222,6 @@ impl ApiClientCore for Client {
     }
 }
 
-#[cfg(not(target_arch = "wasm32"))]
-const MAX_ERR_SOURCE_ITERATIONS: usize = 4;
-
-/// This functions attempts to check the error returned by reqwest to see if
-/// rotating host informtion (for clients with mutliple hosts defined) could be
-/// helpful. This looks for situations where the error could plausibly be caused
-/// by a network adversary, or where rotating to an equival hostname might help.
-///
-/// For example --> NetworkUnreachable will not be helped by rotating domains,
-/// but ConnectionReset might be caused by a network adversary blocking by SNI
-/// which could possibly benefit from rotating domains.
-#[cfg(not(target_arch = "wasm32"))]
-pub(crate) fn might_be_network_interference(err: &reqwest::Error) -> bool {
-    if err.is_timeout() {
-        return true;
-    }
-
-    if !(err.is_connect() || err.is_request()) {
-        return false;
-    }
-
-    // The io::Error source is several layers deep, for clarity this is done as a loop
-    // * reqwest::Error -> hyper_util::Error
-    // * hyper_util::Error -> hyper_util::ClientError
-    // * hyper_util::ClientError -> io::Error
-    let mut inner = err.source();
-    for _ in 0..MAX_ERR_SOURCE_ITERATIONS {
-        if let Some(e) = inner {
-            if let Some(io_err) = e.downcast_ref::<std::io::Error>() {
-                // try downcast to io::Error from <dyn std::error:Error>
-                match io_err.kind() {
-                    // device not connected to the internet
-                    ErrorKind::NetworkUnreachable | ErrorKind::NetworkDown => return false,
-                    // connection errors can indicate connection interference
-                    ErrorKind::ConnectionReset
-                    | ErrorKind::HostUnreachable
-                    | ErrorKind::ConnectionRefused => return true,
-                    // TLS errors get wrapped in custom io::Errors
-                    ErrorKind::Other | ErrorKind::InvalidData => {
-                        // io::Error get_ref works while source doesn't here -_-
-                        //   if you don't like it take it up with the rust devs https://users.rust-lang.org/t/question-about-implementation-of-std-source/121117
-                        inner = io_err.get_ref().map(|e| e as &dyn std::error::Error);
-                    }
-                    _ => return false,
-                }
-            } else if let Some(_tls_err) = e.downcast_ref::<rustls::Error>() {
-                // try downcast to TLS error
-                return true;
-            } else if let Some(resolve_err) = e.downcast_ref::<hickory_resolver::ResolveError>() {
-                // try downcast to DNS error
-                return resolve_err.is_nx_domain();
-            } else {
-                inner = e.source();
-            }
-        } else {
-            break;
-        }
-    }
-
-    false
-}
-
 /// Common usage functionality for the http client.
 ///
 /// These functions allow for cleaner downstream usage free of type parameters and unneeded imports.

common/http-api-common/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-http-api-common"
-description = "Common crate for Nym-related HTTP API interaction"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Common crate for Nym-related HTTP API interaction"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/inclusion-probability/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-inclusion-probability"
-description = "Nym active set probability simulator"
 version.workspace = true
-authors.workspace = true
+description = "Nym active set probability simulator"
 edition.workspace = true
+authors.workspace = true
 license.workspace = true
 repository.workspace = true
-homepage.workspace = true
-documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 [dependencies]
 log = { workspace = true }

common/ip-packet-requests/Cargo.toml

@@ -1,23 +1,16 @@
 [package]
 name = "nym-ip-packet-requests"
-description = "Codec, signing functionality, and different version definitions for IP packet request and responses"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Codec, signing functionality, and different version definitions for IP packet request and responses"
 
 
-[features]
-test-utils = ["pnet_packet"]
-
 [dependencies]
-pnet_packet = { workspace = true, optional = true }
 bincode = { workspace = true }
 bytes = { workspace = true }
 nym-bin-common = { workspace = true }
@@ -25,10 +18,8 @@ nym-crypto = { workspace = true }
 nym-service-provider-requests-common = { workspace = true }
 nym-sphinx = { workspace = true }
 rand = { workspace = true }
-semver = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 thiserror = { workspace = true }
 time = { workspace = true }
 tokio = { workspace = true, features = ["time"] }
 tokio-util = { workspace = true, features = ["codec"] }
-tracing = { workspace = true }

common/ip-packet-requests/src/icmp_utils.rs

@@ -1,117 +0,0 @@
-// Copyright 2025 - Nym Technologies SA <contact@nymtech.net>
-// SPDX-License-Identifier: Apache-2.0
-
-// Extracted from sdk/rust/nym-sdk/examples/ipr_tunnel.rs
-
-//! ICMP/ICMPv6 packet construction and reply detection helpers for testing
-//! IPR connectivity. Gated behind the `test-utils` feature.
-
-use std::net::{Ipv4Addr, Ipv6Addr};
-
-use pnet_packet::Packet;
-use pnet_packet::icmp::echo_reply::EchoReplyPacket;
-use pnet_packet::icmp::echo_request::MutableEchoRequestPacket;
-use pnet_packet::icmp::{IcmpPacket, IcmpTypes};
-use pnet_packet::icmpv6::Icmpv6Types;
-use pnet_packet::ipv4::{Ipv4Flags, MutableIpv4Packet};
-use pnet_packet::ipv6::MutableIpv6Packet;
-
-/// Build a complete IPv4 ICMP echo request packet.
-pub fn build_icmp_ping(src: Ipv4Addr, dst: Ipv4Addr, seq: u16) -> Option<Vec<u8>> {
-    let mut echo = MutableEchoRequestPacket::owned(vec![0u8; 64])?;
-    echo.set_icmp_type(IcmpTypes::EchoRequest);
-    echo.set_icmp_code(pnet_packet::icmp::IcmpCode::new(0));
-    echo.set_sequence_number(seq);
-    let cksum = pnet_packet::icmp::checksum(&IcmpPacket::new(echo.packet())?);
-    echo.set_checksum(cksum);
-
-    let total_len = 20 + echo.packet().len();
-    let mut ip = MutableIpv4Packet::owned(vec![0u8; total_len])?;
-    ip.set_version(4);
-    ip.set_header_length(5);
-    ip.set_total_length(total_len as u16);
-    ip.set_ttl(64);
-    ip.set_next_level_protocol(pnet_packet::ip::IpNextHeaderProtocols::Icmp);
-    ip.set_source(src);
-    ip.set_destination(dst);
-    ip.set_flags(Ipv4Flags::DontFragment);
-    ip.set_payload(echo.packet());
-
-    let mut buf = ip.consume_to_immutable().packet().to_vec();
-    let cksum = ipv4_checksum(&buf);
-    buf[10] = (cksum >> 8) as u8;
-    buf[11] = cksum as u8;
-    Some(buf)
-}
-
-/// Build a complete IPv6 ICMPv6 echo request packet.
-pub fn build_icmpv6_ping(src: Ipv6Addr, dst: Ipv6Addr, seq: u16) -> Option<Vec<u8>> {
-    let mut echo =
-        pnet_packet::icmpv6::echo_request::MutableEchoRequestPacket::owned(vec![0u8; 64])?;
-    echo.set_icmpv6_type(Icmpv6Types::EchoRequest);
-    echo.set_icmpv6_code(pnet_packet::icmpv6::Icmpv6Code::new(0));
-    echo.set_sequence_number(seq);
-    let cksum = pnet_packet::icmpv6::checksum(
-        &pnet_packet::icmpv6::Icmpv6Packet::new(echo.packet())?,
-        &src,
-        &dst,
-    );
-    echo.set_checksum(cksum);
-
-    let payload_len = echo.packet().len();
-    let mut ip = MutableIpv6Packet::owned(vec![0u8; 40 + payload_len])?;
-    ip.set_version(6);
-    ip.set_payload_length(payload_len as u16);
-    ip.set_next_header(pnet_packet::ip::IpNextHeaderProtocols::Icmpv6);
-    ip.set_hop_limit(64);
-    ip.set_source(src);
-    ip.set_destination(dst);
-    ip.set_payload(echo.packet());
-
-    Some(ip.consume_to_immutable().packet().to_vec())
-}
-
-/// Check if a raw packet is an IPv4 ICMP echo reply destined to `expected_dst`.
-pub fn is_echo_reply_v4(data: &[u8], expected_dst: Ipv4Addr) -> bool {
-    let Some(ip) = pnet_packet::ipv4::Ipv4Packet::new(data) else {
-        return false;
-    };
-    if ip.get_destination() != expected_dst {
-        return false;
-    }
-    if ip.get_next_level_protocol() != pnet_packet::ip::IpNextHeaderProtocols::Icmp {
-        return false;
-    }
-    let Some(reply) = EchoReplyPacket::new(ip.payload()) else {
-        return false;
-    };
-    reply.get_icmp_type() == IcmpTypes::EchoReply
-}
-
-/// Check if a raw packet is an IPv6 ICMPv6 echo reply destined to `expected_dst`.
-pub fn is_echo_reply_v6(data: &[u8], expected_dst: Ipv6Addr) -> bool {
-    let Some(ip) = pnet_packet::ipv6::Ipv6Packet::new(data) else {
-        return false;
-    };
-    if ip.get_destination() != expected_dst {
-        return false;
-    }
-    if ip.get_next_header() != pnet_packet::ip::IpNextHeaderProtocols::Icmpv6 {
-        return false;
-    }
-    let Some(reply) = pnet_packet::icmpv6::echo_reply::EchoReplyPacket::new(ip.payload()) else {
-        return false;
-    };
-    reply.get_icmpv6_type() == Icmpv6Types::EchoReply
-}
-
-fn ipv4_checksum(header: &[u8]) -> u16 {
-    let mut sum = 0u32;
-    for i in (0..20).step_by(2) {
-        sum += ((header[i] as u32) << 8) | header[i + 1] as u32;
-    }
-    while (sum >> 16) > 0 {
-        sum = (sum & 0xFFFF) + (sum >> 16);
-    }
-    !sum as u16
-}

common/ip-packet-requests/src/lib.rs

@@ -3,14 +3,10 @@ use std::fmt::{Display, Formatter};
 use std::net::{Ipv4Addr, Ipv6Addr};
 
 pub mod codec;
-#[cfg(feature = "test-utils")]
-pub mod icmp_utils;
-pub mod response_helpers;
 pub mod sign;
 pub mod v6;
 pub mod v7;
 pub mod v8;
-pub mod v9;
 
 // version 3: initial version
 // version 4: IPv6 support
@@ -18,8 +14,6 @@ pub mod v9;
 // version 6: Increase the available IPs
 // version 7: Add signature support (for the future)
 // version 8: Anonymous sends
-// version 9: LP-framed transport (SphinxStream)
-// response_helpers: shared IPR response parsing (nym-ip-packet-client + nym-sdk)
 
 #[derive(Copy, Clone, Debug, PartialEq, Eq, Hash, Serialize, Deserialize)]
 pub struct IpPair {

common/ip-packet-requests/src/response_helpers.rs

@@ -1,134 +0,0 @@
-// Copyright 2025 - Nym Technologies SA <contact@nymtech.net>
-// SPDX-License-Identifier: Apache-2.0
-
-use bytes::{Bytes, BytesMut};
-use tokio_util::codec::Decoder;
-use tracing::{error, info, warn};
-
-use crate::{
-    IpPair,
-    codec::MultiIpPacketCodec,
-    v8::response::{
-        ConnectResponseReply, ControlResponse, InfoLevel, IpPacketResponse, IpPacketResponseData,
-    },
-};
-
-#[derive(Debug, thiserror::Error)]
-pub enum IprResponseError {
-    #[error("no version byte in message")]
-    NoVersionByte,
-
-    #[error("version mismatch: received v{received}, expected v{expected}")]
-    VersionMismatch { expected: u8, received: u8 },
-
-    #[error("expected control response, got {0:?}")]
-    UnexpectedResponse(IpPacketResponseData),
-
-    #[error("connect denied: {0:?}")]
-    ConnectDenied(crate::v8::response::ConnectFailureReason),
-}
-
-pub enum MixnetMessageOutcome {
-    IpPackets(Vec<Bytes>),
-    Disconnect,
-}
-
-// Extracted from:
-//   nym-ip-packet-client/src/helpers.rs — check_ipr_message_version()
-//   sdk/rust/nym-sdk/src/ip_packet_client/listener.rs — check_ipr_message_version()
-/// Check that the first byte of an IPR message matches the expected protocol version.
-pub fn check_ipr_message_version(data: &[u8], expected: u8) -> Result<(), IprResponseError> {
-    let version = data.first().ok_or(IprResponseError::NoVersionByte)?;
-    if *version != expected {
-        return Err(IprResponseError::VersionMismatch {
-            expected,
-            received: *version,
-        });
-    }
-    Ok(())
-}
-
-// Extracted from:
-//   nym-ip-packet-client/src/connect.rs — handle_connect_response() + handle_ip_packet_router_response()
-//   sdk/rust/nym-sdk/src/ip_packet_client/discovery.rs — parse_connect_response()
-/// Parse an IPR connect response, returning allocated IPs on success.
-pub fn parse_connect_response(response: IpPacketResponse) -> Result<IpPair, IprResponseError> {
-    let control_response = match response.data {
-        IpPacketResponseData::Control(c) => c,
-        other => return Err(IprResponseError::UnexpectedResponse(other)),
-    };
-
-    match *control_response {
-        ControlResponse::Connect(connect_resp) => match connect_resp.reply {
-            ConnectResponseReply::Success(success) => Ok(success.ips),
-            ConnectResponseReply::Failure(reason) => Err(IprResponseError::ConnectDenied(reason)),
-        },
-        _ => Err(IprResponseError::UnexpectedResponse(
-            IpPacketResponseData::Control(control_response),
-        )),
-    }
-}
-
-// Extracted from:
-//   nym-ip-packet-client/src/listener.rs — IprListener::handle_reconstructed_message()
-//   sdk/rust/nym-sdk/src/ip_packet_client/listener.rs — handle_ipr_response()
-/// Parse raw IPR response bytes into an outcome.
-///
-/// Logs non-fatal conditions (unknown control messages, deserialization
-/// failures) and returns `None` for them.
-pub fn handle_ipr_response(data: &[u8]) -> Option<MixnetMessageOutcome> {
-    match IpPacketResponse::from_bytes(data) {
-        Ok(response) => match response.data {
-            IpPacketResponseData::Data(data_response) => {
-                let mut codec = MultiIpPacketCodec::new();
-                let mut buf = BytesMut::from(data_response.ip_packet.as_ref());
-                let mut packets = Vec::new();
-                loop {
-                    match codec.decode(&mut buf) {
-                        Ok(Some(packet)) => packets.push(packet.into_bytes()),
-                        Ok(None) => break,
-                        Err(e) => {
-                            warn!("Failed to decode bundled IP packet: {e}");
-                            break;
-                        }
-                    }
-                }
-                Some(MixnetMessageOutcome::IpPackets(packets))
-            }
-            IpPacketResponseData::Control(control_response) => match *control_response {
-                ControlResponse::Connect(_) => {
-                    info!("Received connect response when already connected - ignoring");
-                    None
-                }
-                ControlResponse::Disconnect(_) | ControlResponse::UnrequestedDisconnect(_) => {
-                    info!("Received disconnect from IPR");
-                    Some(MixnetMessageOutcome::Disconnect)
-                }
-                ControlResponse::Pong(_) => {
-                    info!("Received pong response");
-                    None
-                }
-                ControlResponse::Health(_) => {
-                    info!("Received health response");
-                    None
-                }
-                ControlResponse::Info(info_resp) => {
-                    let msg = format!(
-                        "Received info response from the mixnet: {}",
-                        info_resp.reply
-                    );
-                    match info_resp.level {
-                        InfoLevel::Info => info!("{msg}"),
-                        InfoLevel::Warn => warn!("{msg}"),
-                        InfoLevel::Error => error!("{msg}"),
-                    }
-                    None
-                }
-            },
-        },
-        Err(err) => {
-            warn!("Failed to deserialize IPR response: {err}");
-            None
-        }
-    }
-}

common/ip-packet-requests/src/v8/response.rs

@@ -179,15 +179,11 @@ impl IpPacketResponse {
         make_bincode_serializer().serialize(self)
     }
 
-    pub fn from_bytes(data: &[u8]) -> Result<Self, bincode::Error> {
-        use bincode::Options;
-        make_bincode_serializer().deserialize(data)
-    }
-
     pub fn from_reconstructed_message(
         message: &nym_sphinx::receiver::ReconstructedMessage,
     ) -> Result<Self, bincode::Error> {
-        Self::from_bytes(&message.message)
+        use bincode::Options;
+        make_bincode_serializer().deserialize(&message.message)
     }
 }
 

common/ip-packet-requests/src/v9/mod.rs

@@ -1,34 +0,0 @@
-pub const VERSION: u8 = 9;
-
-/// Minimum nym-node release version that supports v9 (LP Stream framing).
-/// Nodes running older versions will not understand LP-wrapped packets.
-pub const MIN_RELEASE_VERSION: semver::Version = semver::Version::new(1, 30, 0);
-
-// v9 uses the same wire format as v8. The version bump indicates
-// the message was sent with LP framing (SphinxStream).
-//
-// Types are re-exported for deserialization/matching. Use the wrapper
-// constructors below to create correctly-versioned packets — never
-// manually set `protocol.version` or `response.version`.
-pub use super::v8::{request, response};
-
-/// Create a v9 connect request (version byte set to 9).
-pub fn new_connect_request(buffer_timeout: Option<u64>) -> (request::IpPacketRequest, u64) {
-    let (mut req, id) = request::IpPacketRequest::new_connect_request(buffer_timeout);
-    req.protocol.version = VERSION;
-    (req, id)
-}
-
-/// Create a v9 data request (version byte set to 9).
-pub fn new_data_request(data: bytes::Bytes) -> request::IpPacketRequest {
-    let mut req = request::IpPacketRequest::new_data_request(data);
-    req.protocol.version = VERSION;
-    req
-}
-
-/// Create a v9 IP packet response (version byte set to 9).
-pub fn new_ip_packet_response(ip_packet: bytes::Bytes) -> response::IpPacketResponse {
-    let mut resp = response::IpPacketResponse::new_ip_packet(ip_packet);
-    resp.version = VERSION;
-    resp
-}

common/mixnode-common/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-mixnode-common"
-description = "Common crate for Nym Mix Nodes"
 version.workspace = true
 authors = ["Jędrzej Stuczyński <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
+description = "Common crate for Nym Mix Nodes"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/network-defaults/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-network-defaults"
-description = "Nym network defaults"
 version.workspace = true
-authors.workspace = true
+description = "Nym network defaults"
 edition.workspace = true
+authors.workspace = true
 license.workspace = true
 repository.workspace = true
-homepage.workspace = true
-documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 # Exclude build.rs from published crate - it's only used for dev-time sync
 # of env files and requires workspace context
 exclude = ["build.rs"]

common/node-tester-utils/Cargo.toml

@@ -1,16 +1,12 @@
 [package]
 name = "nym-node-tester-utils"
-description = "Utils for the Nym Node Tester"
 version.workspace = true
-authors.workspace = true
 edition = "2021"
 license.workspace = true
+description = "Utils for the Nym Node Tester"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/nonexhaustive-delayqueue/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-nonexhaustive-delayqueue"
-description = "A copy of tokio-util delay_queue with `Sleep` and `Instant` being replaced with`wasm_timer` equivalents"
 version.workspace = true
 authors = ["Jędrzej Stuczyński <andrew@nymtech.net>"]
 edition = "2021"
 license.workspace = true
+description = "A copy of tokio-util delay_queue with `Sleep` and `Instant` being replaced with`wasm_timer` equivalents"
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/nym-cache/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-cache"
-description = "Helper functions around a RwLock for writing to local cache of items"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+description = "Helper functions around a RwLock for writing to local cache of items"
 
 [dependencies]
 tokio = { workspace = true, features = ["sync"] }

common/nym-common/Cargo.toml

@@ -1,16 +1,11 @@
 [package]
 name = "nym-common"
-description = "Runtime diagnostics for high frequency logging, debugging and error handling utilities"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
-homepage.workspace = true
-documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+license.workspace = true
+edition.workspace = true
+description = "Runtime diagnostics for high frequency logging, debugging and error handling utilities"
 
 [lints]
 workspace = true

common/nym-common/src/lib.rs

@@ -2,7 +2,6 @@
 // Copyright 2024 Nym Technologies SA <contact@nymtech.net>
 // SPDX-License-Identifier: GPL-3.0-only
 
-pub mod debug;
 mod error;
 pub mod flood;
 

common/nym-connection-monitor/Cargo.toml

@@ -2,11 +2,11 @@
 name = "nym-connection-monitor"
 version = "1.18.0"
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 publish = false
 
 [lints]

common/nym-id/Cargo.toml

@@ -1,16 +1,13 @@
 [package]
 name = "nym-id"
-description = "Functionality for importing and storing credentials and cryptographic keys"
 version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
-rust-version.workspace = true
-readme.workspace = true
-publish = true
+edition.workspace = true
+license.workspace = true
+description = "Functionality for importing and storing credentials and cryptographic keys"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

common/nym-kcp/Cargo.toml

@@ -1,9 +1,9 @@
 [package]
 name = "nym-kcp"
-description = "KCP protocol implementation for Nym"
 version = "0.1.0"
-authors = { workspace = true }
+description = "KCP protocol implementation for Nym"
 edition = { workspace = true }
+authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
 publish = false

common/nym-kkt-ciphersuite/Cargo.toml

@@ -1,16 +1,15 @@
 [package]
 name = "nym-kkt-ciphersuite"
-description = "Nym KKT ciphersuite"
-version.workspace = true
 authors.workspace = true
-edition.workspace = true
-license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 documentation.workspace = true
+edition.workspace = true
+license.workspace = true
 rust-version.workspace = true
 readme.workspace = true
-publish = true
+version.workspace = true
+publish = false
 
 [dependencies]
 thiserror = { workspace = true }