diff --git a/Cargo.toml b/Cargo.toml
index 381f7743..973f004a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,15 @@
 [workspace]
 resolver = "2"
-members = ["contracts/vault", "contracts/settlement", "contracts/revenue_pool"]
+members = [
+    "contracts/vault",
+    "contracts/revenue_pool",
+    "contracts/settlement",
+]
+default-members = [
+    "contracts/vault",
+    "contracts/revenue_pool",
+    "contracts/settlement",
+]
 
 [workspace.dependencies]
 soroban-sdk = "22"
diff --git a/contracts/revenue_pool/src/lib.rs b/contracts/revenue_pool/src/lib.rs
index 3d62c703..463fea4e 100644
--- a/contracts/revenue_pool/src/lib.rs
+++ b/contracts/revenue_pool/src/lib.rs
@@ -315,7 +315,7 @@ impl RevenuePool {
         let mut total_amount: i128 = 0;
         for payment in payments.iter() {
             let (_, amount) = payment;
-            
+
             // Validate each amount is strictly positive
             if amount <= 0 {
                 panic!("{}", ERR_AMOUNT_NOT_POSITIVE);
@@ -346,7 +346,7 @@ impl RevenuePool {
             let (to, amount) = payment;
             Self::validate_recipient(&to, &contract_address);
             usdc.transfer(&contract_address, &to, &amount);
-            
+
             // Emit event for this leg of the batch
             env.events()
                 .publish((Symbol::new(&env, "batch_distribute"), to), amount);
diff --git a/contracts/vault/src/lib.rs b/contracts/vault/src/lib.rs
index bd2dd0c7..7c67e89e 100644
--- a/contracts/vault/src/lib.rs
+++ b/contracts/vault/src/lib.rs
@@ -82,7 +82,7 @@ impl CalloraVault {
     ) -> VaultMeta {
         owner.require_auth();
         let inst = env.storage().instance();
-        if inst.has(&StorageKey::Meta) {
+        if inst.has(&StorageKey::MetaKey) {
             panic!("vault already initialized");
         }
         assert!(
@@ -122,7 +122,7 @@ impl CalloraVault {
             authorized_caller,
             min_deposit: min_d,
         };
-        inst.set(&StorageKey::Meta, &meta);
+        inst.set(&StorageKey::MetaKey, &meta);
         inst.set(&StorageKey::UsdcToken, &usdc_token);
         inst.set(&StorageKey::Admin, &owner);
         if let Some(p) = revenue_pool {
@@ -231,7 +231,7 @@ impl CalloraVault {
 
     pub fn set_allowed_depositor(env: Env, caller: Address, depositor: Option<Address>) {
         caller.require_auth();
-        Self::require_owner(env.clone(), caller);
+        Self::require_owner(env.clone(), caller.clone());
 
         match depositor {
             Some(d) => {
@@ -285,10 +285,14 @@ impl CalloraVault {
     pub fn set_authorized_caller(env: Env, caller: Option<Address>) {
         let mut meta = Self::get_meta(env.clone());
         meta.owner.require_auth();
-        meta.authorized_caller = Some(caller.clone());
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        let old_authorized_caller = meta.authorized_caller.clone();
+        meta.authorized_caller = caller.clone();
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
         env.events().publish(
-            (Symbol::new(&env, "set_authorized_caller"), meta.owner.clone()),
+            (
+                Symbol::new(&env, "set_authorized_caller"),
+                meta.owner.clone(),
+            ),
             (old_authorized_caller, caller),
         );
     }
@@ -374,7 +378,7 @@ impl CalloraVault {
         caller.require_auth();
         assert!(amount > 0, "amount must be positive");
         assert!(
-            Self::is_authorized_depositor(env.clone(), depositor.clone()),
+            Self::is_authorized_depositor(env.clone(), caller.clone()),
             "unauthorized: only owner or allowed depositor can deposit"
         );
         let meta = Self::get_meta(env.clone());
@@ -390,13 +394,13 @@ impl CalloraVault {
             .get(&StorageKey::UsdcToken)
             .expect("vault not initialized");
         let usdc = token::Client::new(&env, &usdc_addr);
-        usdc.transfer(&depositor, &env.current_contract_address(), &amount);
+        usdc.transfer(&caller, &env.current_contract_address(), &amount);
         let mut meta = Self::get_meta(env.clone());
         meta.balance = meta
             .balance
             .checked_add(amount)
             .unwrap_or_else(|| panic!("balance overflow"));
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
         env.events().publish(
             (Symbol::new(&env, "deposit"), caller),
             (amount, meta.balance),
@@ -425,23 +429,18 @@ impl CalloraVault {
         Self::require_not_paused(env.clone());
         caller.require_auth();
         assert!(amount > 0, "amount must be positive");
-        let max_d: i128 = env
-            .storage()
-            .instance()
-            .get(&StorageKey::MaxDeduct)
-            .unwrap_or(DEFAULT_MAX_DEDUCT);
+        Self::require_authorized_deduct_caller(env.clone(), &caller);
+        let max_d = Self::get_max_deduct(env.clone());
         assert!(amount <= max_d, "deduct amount exceeds max_deduct");
         let meta = Self::get_meta(env.clone());
-        let auth = caller == meta.owner || meta.authorized_caller.as_ref() == Some(&caller);
-        assert!(auth, "unauthorized caller");
         assert!(meta.balance >= amount, "insufficient balance");
-        Self::require_authorized_deduct_caller(env.clone(), &caller);
+        let settlement = Self::require_settlement(&env);
         let mut meta = Self::get_meta(env.clone());
         meta.balance = meta
             .balance
             .checked_sub(amount)
             .unwrap_or_else(|| panic!("balance underflow"));
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
         let ut: Address = env
             .storage()
             .instance()
@@ -474,16 +473,12 @@ impl CalloraVault {
     pub fn batch_deduct(env: Env, caller: Address, items: Vec<DeductItem>) -> i128 {
         Self::require_not_paused(env.clone());
         caller.require_auth();
+        Self::require_authorized_deduct_caller(env.clone(), &caller);
         let n = items.len();
         assert!(n > 0, "batch_deduct requires at least one item");
         assert!(n <= MAX_BATCH_SIZE, "batch too large");
-        let max_d: i128 = env
-            .storage()
-            .instance()
-            .get(&StorageKey::MaxDeduct)
-            .unwrap_or(DEFAULT_MAX_DEDUCT);
+        let max_d = Self::get_max_deduct(env.clone());
         let mut meta = Self::get_meta(env.clone());
-        Self::require_authorized_deduct_caller(env.clone(), &caller);
         let mut running = meta.balance;
         let mut total: i128 = 0;
         for item in items.iter() {
@@ -497,6 +492,7 @@ impl CalloraVault {
                 .checked_add(item.amount)
                 .unwrap_or_else(|| panic!("total overflow"));
         }
+        let settlement = Self::require_settlement(&env);
 
         meta.balance = running;
 
@@ -508,7 +504,14 @@ impl CalloraVault {
         Self::transfer_funds(&env, &ut, &settlement, total);
 
         meta.balance = running;
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
+        for item in items.iter() {
+            let rid = item.request_id.unwrap_or(Symbol::new(&env, ""));
+            env.events().publish(
+                (Symbol::new(&env, "deduct"), caller.clone(), rid),
+                (item.amount, meta.balance),
+            );
+        }
         meta.balance
     }
 
@@ -546,7 +549,7 @@ impl CalloraVault {
         let mut meta = Self::get_meta(env.clone());
         let old = meta.owner.clone();
         meta.owner = pending;
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
         env.storage().instance().remove(&StorageKey::PendingOwner);
         env.events().publish(
             (Symbol::new(&env, "ownership_accepted"), old, meta.owner),
@@ -570,13 +573,10 @@ impl CalloraVault {
             .balance
             .checked_sub(amount)
             .unwrap_or_else(|| panic!("balance underflow"));
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
         env.events().publish(
             (Symbol::new(&env, "withdraw"), meta.owner.clone()),
-            WithdrawEventData {
-                amount,
-                new_balance: meta.balance,
-            },
+            (amount, meta.balance),
         );
         meta.balance
     }
@@ -597,13 +597,10 @@ impl CalloraVault {
             .balance
             .checked_sub(amount)
             .unwrap_or_else(|| panic!("balance underflow"));
-        env.storage().instance().set(&StorageKey::Meta, &meta);
+        env.storage().instance().set(&StorageKey::MetaKey, &meta);
         env.events().publish(
             (Symbol::new(&env, "withdraw_to"), meta.owner.clone(), to),
-            WithdrawEventData {
-                amount,
-                new_balance: meta.balance,
-            },
+            (amount, meta.balance),
         );
         meta.balance
     }
@@ -784,13 +781,6 @@ impl CalloraVault {
             .unwrap_or_else(|| panic!("settlement address not set"))
     }
 
-    fn get_max_deduct(env: Env) -> i128 {
-        env.storage()
-            .instance()
-            .get(&StorageKey::MaxDeduct)
-            .unwrap_or(DEFAULT_MAX_DEDUCT)
-    }
-
     fn require_not_paused(env: Env) {
         assert!(!Self::is_paused(env), "vault is paused");
     }
@@ -807,6 +797,22 @@ impl CalloraVault {
             "unauthorized: caller is not admin or owner"
         );
     }
+
+    pub fn add_address(env: Env, caller: Address, depositor: Address) {
+        Self::set_allowed_depositor(env.clone(), caller.clone(), Some(depositor.clone()));
+        env.events()
+            .publish((Symbol::new(&env, "allowlist_add"), caller, depositor), ());
+    }
+
+    pub fn get_allowlist(env: Env) -> Vec<Address> {
+        Self::get_allowed_depositors(env)
+    }
+
+    pub fn clear_all(env: Env, caller: Address) {
+        Self::clear_allowed_depositors(env.clone(), caller.clone());
+        env.events()
+            .publish((Symbol::new(&env, "allowlist_clear"), caller), ());
+    }
 }
 
 #[cfg(test)]
diff --git a/contracts/vault/src/test.rs b/contracts/vault/src/test.rs
index 80c92d24..d28f839b 100644
--- a/contracts/vault/src/test.rs
+++ b/contracts/vault/src/test.rs
@@ -1118,7 +1118,17 @@ fn deduct_reduces_balance() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 300);
-    client.init(&owner, &usdc, &Some(300), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(300),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
 
     let returned = client.deduct(&owner, &50, &None);
     assert_eq!(returned, 250);
@@ -1134,7 +1144,17 @@ fn deduct_with_request_id() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 1000);
-    client.init(&owner, &usdc, &Some(1000), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(1000),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
 
     let remaining = client.deduct(&owner, &100, &Some(Symbol::new(&env, "req123")));
     assert_eq!(remaining, 900);
@@ -1149,7 +1169,15 @@ fn deduct_insufficient_balance_fails() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 10);
-    client.init(&owner, &usdc, &Some(10), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(10),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
 
     let result = client.try_deduct(&owner, &100, &None);
     assert!(result.is_err(), "expected error for insufficient balance");
@@ -1164,7 +1192,17 @@ fn deduct_exact_balance_succeeds() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 75);
-    client.init(&owner, &usdc, &Some(75), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(75),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
 
     let remaining = client.deduct(&owner, &75, &None);
     assert_eq!(remaining, 0);
@@ -1180,7 +1218,17 @@ fn deduct_event_contains_request_id() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 500);
-    client.init(&owner, &usdc, &Some(500), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(500),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
 
     let request_id = Symbol::new(&env, "api_call_42");
     client.deduct(&owner, &150, &Some(request_id.clone()));
@@ -1274,7 +1322,17 @@ fn deduct_event_no_request_id_uses_empty_symbol() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 300);
-    client.init(&owner, &usdc, &Some(300), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(300),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
     client.deduct(&caller, &100, &None);
 
     let events = env.events().all();
@@ -1304,7 +1362,15 @@ fn deduct_zero_panics() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 500);
-    client.init(&owner, &usdc, &Some(500), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(500),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
     client.deduct(&caller, &0, &None);
 }
 
@@ -1319,7 +1385,15 @@ fn deduct_negative_panics() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 100);
-    client.init(&owner, &usdc, &Some(100), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(100),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
     client.deduct(&caller, &-50, &None);
 }
 
@@ -1333,7 +1407,15 @@ fn deduct_exceeds_balance_panics() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 50);
-    client.init(&owner, &usdc, &Some(50), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(50),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
     client.deduct(&caller, &100, &None);
 }
 
@@ -1346,7 +1428,15 @@ fn balance_unchanged_after_failed_deduct() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 100);
-    client.init(&owner, &usdc, &Some(100), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(100),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
 
     let _ = client.try_deduct(&owner, &200, &None);
     assert_eq!(client.balance(), 100);
@@ -1366,7 +1456,17 @@ fn batch_deduct_multiple_items() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 1000);
-    client.init(&owner, &usdc, &Some(1000), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(1000),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
 
     let items = soroban_sdk::vec![
         &env,
@@ -1399,7 +1499,17 @@ fn batch_deduct_events_contain_request_ids() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 1000);
-    client.init(&owner, &usdc, &Some(1000), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(1000),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
+    let settlement = Address::generate(&env);
+    client.set_settlement(&owner, &settlement);
 
     let rid_a = Symbol::new(&env, "batch_a");
     let rid_b = Symbol::new(&env, "batch_b");
@@ -1455,7 +1565,15 @@ fn batch_deduct_insufficient_balance_fails() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 100);
-    client.init(&owner, &usdc, &Some(100), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(100),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
 
     let items = soroban_sdk::vec![
         &env,
@@ -1485,7 +1603,15 @@ fn batch_deduct_empty_fails() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 100);
-    client.init(&owner, &usdc, &Some(100), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(100),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
 
     let items: soroban_sdk::Vec<DeductItem> = soroban_sdk::vec![&env];
     let result = client.try_batch_deduct(&caller, &items);
@@ -1502,7 +1628,15 @@ fn batch_deduct_zero_amount_fails() {
 
     env.mock_all_auths();
     fund_vault(&usdc_admin, &vault_address, 100);
-    client.init(&owner, &usdc, &Some(100), &Some(caller.clone()), &None, &None, &None);
+    client.init(
+        &owner,
+        &usdc,
+        &Some(100),
+        &Some(caller.clone()),
+        &None,
+        &None,
+        &None,
+    );
 
     let items = soroban_sdk::vec![
         &env,
@@ -2188,7 +2322,15 @@ fn vault_full_lifecycle() {
 
     // Init with 500 balance, min_deposit = 10
     fund_vault(&usdc_admin, &vault_address, 500);
-    let meta = client.init(&owner, &usdc, &Some(500), &None, &Some(10), &None, &None);
+    let meta = client.init(
+        &owner,
+        &usdc,
+        &Some(500),
+        &Some(caller.clone()),
+        &Some(10),
+        &None,
+        &None,
+    );
     assert_eq!(meta.balance, 500);
     assert_eq!(meta.owner, owner);
     assert_eq!(client.balance(), 500);
@@ -2962,7 +3104,7 @@ fn test_set_authorized_caller() {
     env.mock_all_auths();
     client.init(&owner, &usdc, &None, &None, &None, &None, &None);
 
-    client.set_authorized_caller(&auth_caller);
+    client.set_authorized_caller(&Some(auth_caller.clone()));
     let meta = client.get_meta();
     assert_eq!(meta.authorized_caller, Some(auth_caller));
 }
@@ -3750,9 +3892,6 @@ fn withdraw_emits_event() {
             }
         })
         .expect("expected withdraw event");
-    let payload: WithdrawEventData = ev.2.into_val(&env);
-    assert_eq!(payload.amount, 100);
-    assert_eq!(payload.new_balance, 200);
     let (amt, bal): (i128, i128) = ev.2.into_val(&env);
     assert_eq!(amt, 100);
     assert_eq!(bal, 200);
@@ -3779,9 +3918,6 @@ fn withdraw_to_emits_event() {
             }
         })
         .expect("expected withdraw_to event");
-    let payload: WithdrawEventData = ev.2.into_val(&env);
-    assert_eq!(payload.amount, 150);
-    assert_eq!(payload.new_balance, 150);
     let (amt, bal): (i128, i128) = ev.2.into_val(&env);
     assert_eq!(amt, 150);
     assert_eq!(bal, 150);
@@ -3884,7 +4020,7 @@ mod fuzz {
         let (usdc_addr, usdc_client, usdc_admin) = create_usdc(&env, &owner);
         let (vault_addr, client) = create_vault(&env);
 
-        let _settlement = Address::generate(&env);
+        let settlement = Address::generate(&env);
         // Pre-fund vault so initial_balance is valid.
         usdc_admin.mint(&vault_addr, &initial);
         client.init(
@@ -3931,7 +4067,9 @@ mod fuzz {
                     if paused {
                         // deposit must fail while paused
                         assert!(client.try_deposit(&owner, &amount).is_err());
-                    } else if let (Some(new_sim), Some(new_token_sim)) = (sim.checked_add(amount), token_sim.checked_add(amount)) {
+                    } else if let (Some(new_sim), Some(new_token_sim)) =
+                        (sim.checked_add(amount), token_sim.checked_add(amount))
+                    {
                         // mint amount to owner to avoid insufficient balance on large fuzz tests
                         usdc_admin.mint(&owner, &amount);
                         sim = new_sim;
@@ -3963,11 +4101,6 @@ mod fuzz {
                     let mut batch_total: i128 = 0;
                     let mut valid = true;
                     for _ in 0..n {
-                        let amt: i128 = rng.gen_range(1..=max_deduct_val);
-                        items.push_back(DeductItem {
-                            amount: amt,
-                            request_id: None,
-                        });
                         let amt: i128 = rng.gen_range(1..=op_cap);
                         batch_total = match batch_total.checked_add(amt) {
                             Some(v) => v,
@@ -4079,7 +4212,7 @@ mod fuzz {
             &owner,
             &usdc_addr,
             &Some(300),
-            &None,
+            &Some(caller.clone()),
             &None,
             &None,
             &Some(200),
@@ -4128,7 +4261,7 @@ mod fuzz {
             &owner,
             &usdc_addr,
             &Some(10_000),
-            &None,
+            &Some(caller.clone()),
             &None,
             &None,
             &Some(max_d),
diff --git a/coverage/cobertura.xml b/coverage/cobertura.xml
index ab114dad..c4ad4231 100644
--- a/coverage/cobertura.xml
+++ b/coverage/cobertura.xml
@@ -1 +1 @@
-<?xml version="1.0"?><coverage lines-covered="556" lines-valid="580" line-rate="0.9586206896551724" branches-covered="0" branches-valid="0" branch-rate="0" complexity="0" version="1.9" timestamp="1776901919"><sources><source>/home/chukwuemekadr/Documents/Drips/Wave4/Callora-Contracts</source></sources><packages><package name="contracts/vault/src" line-rate="0.9644808743169399" branch-rate="0" complexity="0"><classes><class name="lib" filename="contracts/vault/src/lib.rs" line-rate="0.963276836158192" branch-rate="0" complexity="0"><methods/><lines><line number="48" hits="3"/><line number="58" hits="1"/><line number="59" hits="2"/><line number="60" hits="1"/><line number="61" hits="2"/><line number="63" hits="1"/><line number="67" hits="3"/><line number="68" hits="1"/><line number="73" hits="4"/><line number="74" hits="1"/><line number="75" hits="4"/><line number="76" hits="4"/><line number="77" hits="4"/><line number="78" hits="2"/><line number="79" hits="5"/><line number="80" hits="1"/><line number="81" hits="1"/><line number="83" hits="1"/><line number="89" hits="2"/><line number="94" hits="1"/><line number="95" hits="2"/><line number="96" hits="1"/><line number="97" hits="1"/><line number="98" hits="1"/><line number="100" hits="1"/><line number="101" hits="2"/><line number="102" hits="1"/><line number="103" hits="1"/><line number="106" hits="1"/><line number="107" hits="2"/><line number="108" hits="2"/><line number="109" hits="1"/><line number="111" hits="1"/><line number="114" hits="2"/><line number="115" hits="2"/><line number="116" hits="1"/><line number="119" hits="1"/><line number="120" hits="1"/><line number="122" hits="1"/><line number="126" hits="2"/><line number="127" hits="1"/><line number="128" hits="1"/><line number="129" hits="2"/><line number="130" hits="2"/><line number="132" hits="1"/><line number="134" hits="0"/><line number="135" hits="1"/><line number="136" hits="1"/><line number="139" hits="2"/><line number="140" hits="1"/><line number="143" hits="1"/><line number="145" hits="1"/><line number="146" hits="1"/><line number="147" hits="2"/><line number="148" hits="1"/><line number="149" hits="1"/><line number="150" hits="1"/><line number="153" hits="1"/><line number="154" hits="2"/><line number="155" hits="3"/><line number="158" hits="2"/><line number="159" hits="1"/><line number="160" hits="1"/><line number="161" hits="2"/><line number="162" hits="2"/><line number="164" hits="1"/><line number="165" hits="2"/><line number="170" hits="1"/><line number="172" hits="1"/><line number="173" hits="2"/><line number="174" hits="1"/><line number="175" hits="2"/><line number="177" hits="2"/><line number="178" hits="2"/><line number="179" hits="2"/><line number="182" hits="1"/><line number="183" hits="1"/><line number="185" hits="1"/><line number="186" hits="3"/><line number="189" hits="2"/><line number="190" hits="1"/><line number="191" hits="1"/><line number="192" hits="1"/><line number="193" hits="1"/><line number="194" hits="1"/><line number="197" hits="2"/><line number="198" hits="2"/><line number="199" hits="1"/><line number="200" hits="1"/><line number="202" hits="0"/><line number="203" hits="1"/><line number="205" hits="1"/><line number="207" hits="0"/><line number="210" hits="1"/><line number="212" hits="0"/><line number="213" hits="1"/><line number="215" hits="0"/><line number="220" hits="2"/><line number="221" hits="1"/><line number="222" hits="1"/><line number="223" hits="1"/><line number="225" hits="0"/><line number="226" hits="1"/><line number="228" hits="0"/><line number="231" hits="1"/><line number="232" hits="2"/><line number="234" hits="2"/><line number="235" hits="2"/><line number="238" hits="1"/><line number="239" hits="2"/><line number="240" hits="1"/><line number="241" hits="1"/><line number="242" hits="1"/><line number="243" hits="2"/><line number="244" hits="2"/><line number="245" hits="1"/><line number="249" hits="2"/><line number="250" hits="1"/><line number="251" hits="1"/><line number="252" hits="3"/><line number="253" hits="2"/><line number="254" hits="1"/><line number="255" hits="1"/><line number="258" hits="2"/><line number="259" hits="1"/><line number="260" hits="1"/><line number="261" hits="2"/><line number="262" hits="2"/><line number="263" hits="1"/><line number="264" hits="1"/><line number="311" hits="1"/><line number="312" hits="1"/><line number="314" hits="1"/><line number="318" hits="1"/><line number="319" hits="2"/><line number="321" hits="1"/><line number="322" hits="1"/><line number="325" hits="2"/><line number="326" hits="1"/><line number="327" hits="1"/><line number="328" hits="2"/><line number="329" hits="3"/><line number="333" hits="2"/><line number="334" hits="2"/><line number="343" hits="1"/><line number="345" hits="1"/><line number="346" hits="2"/><line number="347" hits="1"/><line number="348" hits="3"/><line number="350" hits="1"/><line number="351" hits="1"/><line number="352" hits="1"/><line number="353" hits="2"/><line number="354" hits="2"/><line number="355" hits="1"/><line number="357" hits="1"/><line number="360" hits="2"/><line number="361" hits="1"/><line number="362" hits="1"/><line number="363" hits="1"/><line number="364" hits="2"/><line number="365" hits="2"/><line number="366" hits="2"/><line number="367" hits="2"/><line number="368" hits="1"/><line number="369" hits="2"/><line number="370" hits="1"/><line number="372" hits="3"/><line number="373" hits="3"/><line number="374" hits="2"/><line number="375" hits="2"/><line number="376" hits="1"/><line number="377" hits="1"/><line number="378" hits="1"/><line number="379" hits="2"/><line number="380" hits="1"/><line number="381" hits="1"/><line number="382" hits="1"/><line number="385" hits="1"/><line number="387" hits="1"/><line number="388" hits="2"/><line number="389" hits="2"/><line number="390" hits="1"/><line number="392" hits="1"/><line number="395" hits="2"/><line number="396" hits="1"/><line number="397" hits="2"/><line number="398" hits="1"/><line number="399" hits="1"/><line number="400" hits="2"/><line number="401" hits="1"/><line number="402" hits="2"/><line number="403" hits="1"/><line number="404" hits="1"/><line number="405" hits="2"/><line number="406" hits="1"/><line number="408" hits="3"/><line number="409" hits="1"/><line number="410" hits="1"/><line number="411" hits="3"/><line number="412" hits="3"/><line number="413" hits="3"/><line number="414" hits="3"/><line number="415" hits="2"/><line number="416" hits="1"/><line number="418" hits="1"/><line number="419" hits="1"/><line number="420" hits="1"/><line number="421" hits="2"/><line number="422" hits="2"/><line number="423" hits="1"/><line number="424" hits="2"/><line number="425" hits="2"/><line number="426" hits="1"/><line number="429" hits="1"/><line number="430" hits="1"/><line number="431" hits="2"/><line number="432" hits="1"/><line number="433" hits="1"/><line number="434" hits="1"/><line number="437" hits="1"/><line number="439" hits="1"/><line number="442" hits="1"/><line number="443" hits="1"/><line number="446" hits="2"/><line number="447" hits="2"/><line number="448" hits="1"/><line number="449" hits="1"/><line number="453" hits="1"/><line number="455" hits="0"/><line number="456" hits="2"/><line number="458" hits="1"/><line number="459" hits="1"/><line number="460" hits="1"/><line number="466" hits="2"/><line number="467" hits="1"/><line number="470" hits="1"/><line number="472" hits="1"/><line number="473" hits="1"/><line number="474" hits="2"/><line number="475" hits="1"/><line number="476" hits="2"/><line number="477" hits="1"/><line number="478" hits="2"/><line number="479" hits="2"/><line number="484" hits="1"/><line number="485" hits="2"/><line number="486" hits="1"/><line number="487" hits="3"/><line number="488" hits="4"/><line number="492" hits="2"/><line number="494" hits="2"/><line number="495" hits="4"/><line number="496" hits="2"/><line number="497" hits="1"/><line number="498" hits="2"/><line number="499" hits="2"/><line number="500" hits="1"/><line number="502" hits="1"/><line number="505" hits="2"/><line number="506" hits="2"/><line number="507" hits="1"/><line number="508" hits="2"/><line number="509" hits="3"/><line number="513" hits="1"/><line number="515" hits="1"/><line number="516" hits="2"/><line number="517" hits="1"/><line number="518" hits="1"/><line number="519" hits="2"/><line number="520" hits="2"/><line number="521" hits="1"/><line number="523" hits="1"/><line number="550" hits="2"/><line number="551" hits="1"/><line number="552" hits="1"/><line number="553" hits="2"/><line number="554" hits="2"/><line number="556" hits="1"/><line number="557" hits="1"/><line number="558" hits="3"/><line number="562" hits="1"/><line number="564" hits="0"/><line number="565" hits="1"/><line number="566" hits="1"/><line number="569" hits="1"/><line number="570" hits="1"/><line number="571" hits="1"/><line number="607" hits="1"/><line number="608" hits="3"/><line number="633" hits="2"/><line number="634" hits="1"/><line number="635" hits="1"/><line number="636" hits="2"/><line number="637" hits="2"/><line number="639" hits="3"/><line number="643" hits="1"/><line number="645" hits="0"/><line number="646" hits="2"/><line number="647" hits="2"/><line number="648" hits="1"/><line number="679" hits="1"/><line number="680" hits="1"/><line number="682" hits="2"/><line number="683" hits="4"/><line number="686" hits="2"/><line number="692" hits="1"/><line number="693" hits="1"/><line number="694" hits="2"/><line number="698" hits="2"/><line number="702" hits="1"/><line number="704" hits="0"/><line number="705" hits="2"/><line number="706" hits="2"/><line number="707" hits="1"/><line number="709" hits="1"/><line number="712" hits="1"/><line number="713" hits="1"/><line number="715" hits="1"/><line number="718" hits="2"/><line number="724" hits="1"/><line number="725" hits="1"/><line number="726" hits="0"/><line number="730" hits="2"/><line number="734" hits="1"/><line number="737" hits="3"/><line number="738" hits="2"/><line number="739" hits="1"/><line number="741" hits="0"/><line number="742" hits="2"/><line number="743" hits="2"/><line number="744" hits="1"/><line number="746" hits="1"/><line number="749" hits="1"/><line number="750" hits="1"/><line number="753" hits="1"/><line number="754" hits="2"/><line number="756" hits="1"/><line number="759" hits="1"/><line number="761" hits="2"/><line number="764" hits="1"/><line number="765" hits="2"/><line number="768" hits="1"/><line number="769" hits="1"/><line number="772" hits="1"/><line number="774" hits="1"/><line number="775" hits="3"/><line number="783" hits="1"/><line number="784" hits="2"/><line number="785" hits="1"/><line number="786" hits="1"/><line number="788" hits="1"/><line number="789" hits="1"/><line number="791" hits="1"/></lines></class><class name="test" filename="contracts/vault/src/test.rs" line-rate="1" branch-rate="0" complexity="0"><methods/><lines><line number="12" hits="4"/><line number="16" hits="4"/><line number="17" hits="2"/><line number="18" hits="2"/><line number="19" hits="2"/><line number="20" hits="1"/><line number="23" hits="4"/><line number="24" hits="4"/><line number="25" hits="4"/><line number="26" hits="4"/><line number="30" hits="1"/><line number="35" hits="1"/></lines></class></classes></package><package name="contracts/settlement/src" line-rate="0.9537037037037037" branch-rate="0" complexity="0"><classes><class name="lib" filename="contracts/settlement/src/lib.rs" line-rate="0.9537037037037037" branch-rate="0" complexity="0"><methods/><lines><line number="74" hits="5"/><line number="75" hits="8"/><line number="76" hits="4"/><line number="77" hits="1"/><line number="79" hits="4"/><line number="80" hits="4"/><line number="81" hits="4"/><line number="82" hits="8"/><line number="85" hits="4"/><line number="87" hits="4"/><line number="110" hits="4"/><line number="117" hits="1"/><line number="118" hits="1"/><line number="119" hits="1"/><line number="120" hits="2"/><line number="122" hits="2"/><line number="123" hits="1"/><line number="124" hits="2"/><line number="125" hits="3"/><line number="127" hits="1"/><line number="128" hits="1"/><line number="129" hits="1"/><line number="130" hits="1"/><line number="131" hits="2"/><line number="132" hits="2"/><line number="133" hits="1"/><line number="134" hits="1"/><line number="137" hits="1"/><line number="141" hits="1"/><line number="142" hits="4"/><line number="144" hits="2"/><line number="145" hits="0"/><line number="146" hits="1"/><line number="147" hits="2"/><line number="148" hits="1"/><line number="149" hits="1"/><line number="150" hits="1"/><line number="151" hits="1"/><line number="152" hits="2"/><line number="153" hits="2"/><line number="154" hits="1"/><line number="155" hits="1"/><line number="158" hits="2"/><line number="161" hits="2"/><line number="162" hits="2"/><line number="163" hits="1"/><line number="164" hits="1"/><line number="173" hits="1"/><line number="174" hits="1"/><line number="176" hits="2"/><line number="177" hits="3"/><line number="181" hits="1"/><line number="182" hits="1"/><line number="184" hits="2"/><line number="185" hits="3"/><line number="189" hits="1"/><line number="190" hits="1"/><line number="192" hits="2"/><line number="193" hits="3"/><line number="209" hits="2"/><line number="210" hits="3"/><line number="211" hits="1"/><line number="213" hits="1"/><line number="215" hits="1"/><line number="216" hits="0"/><line number="217" hits="1"/><line number="247" hits="1"/><line number="248" hits="3"/><line number="249" hits="1"/><line number="251" hits="1"/><line number="253" hits="1"/><line number="254" hits="0"/><line number="255" hits="1"/><line number="256" hits="3"/><line number="257" hits="2"/><line number="259" hits="1"/><line number="284" hits="2"/><line number="285" hits="1"/><line number="286" hits="1"/><line number="287" hits="2"/><line number="288" hits="2"/><line number="290" hits="1"/><line number="292" hits="0"/><line number="294" hits="2"/><line number="296" hits="1"/><line number="297" hits="1"/><line number="298" hits="1"/><line number="320" hits="2"/><line number="321" hits="2"/><line number="323" hits="1"/><line number="325" hits="1"/><line number="327" hits="1"/><line number="328" hits="2"/><line number="329" hits="1"/><line number="331" hits="1"/><line number="332" hits="1"/><line number="356" hits="2"/><line number="357" hits="1"/><line number="358" hits="1"/><line number="359" hits="2"/><line number="360" hits="2"/><line number="362" hits="1"/><line number="364" hits="0"/><line number="368" hits="1"/><line number="369" hits="2"/><line number="370" hits="3"/><line number="371" hits="3"/><line number="372" hits="2"/></lines></class></classes></package><package name="contracts/revenue_pool/src" line-rate="0.9433962264150944" branch-rate="0" complexity="0"><classes><class name="lib" filename="contracts/revenue_pool/src/lib.rs" line-rate="0.9361702127659575" branch-rate="0" complexity="0"><methods/><lines><line number="41" hits="4"/><line number="42" hits="2"/><line number="43" hits="2"/><line number="44" hits="1"/><line number="46" hits="2"/><line number="47" hits="2"/><line number="49" hits="5"/><line number="50" hits="2"/><line number="51" hits="2"/><line number="53" hits="3"/><line number="54" hits="2"/><line number="56" hits="2"/><line number="57" hits="2"/><line number="70" hits="1"/><line number="71" hits="1"/><line number="73" hits="4"/><line number="90" hits="2"/><line number="91" hits="1"/><line number="92" hits="1"/><line number="93" hits="2"/><line number="94" hits="2"/><line number="96" hits="2"/><line number="97" hits="1"/><line number="99" hits="2"/><line number="100" hits="2"/><line number="101" hits="1"/><line number="117" hits="2"/><line number="118" hits="1"/><line number="119" hits="1"/><line number="121" hits="1"/><line number="124" hits="1"/><line number="125" hits="2"/><line number="128" hits="2"/><line number="129" hits="1"/><line number="131" hits="1"/><line number="132" hits="1"/><line number="156" hits="2"/><line number="157" hits="1"/><line number="158" hits="2"/><line number="159" hits="3"/><line number="160" hits="2"/><line number="162" hits="3"/><line number="163" hits="4"/><line number="168" hits="2"/><line number="171" hits="2"/><line number="172" hits="1"/><line number="194" hits="2"/><line number="195" hits="2"/><line number="196" hits="1"/><line number="197" hits="2"/><line number="198" hits="0"/><line number="200" hits="1"/><line number="201" hits="1"/><line number="207" hits="2"/><line number="208" hits="0"/><line number="209" hits="1"/><line number="211" hits="1"/><line number="212" hits="1"/><line number="214" hits="1"/><line number="215" hits="0"/><line number="221" hits="1"/><line number="222" hits="1"/><line number="225" hits="1"/><line number="226" hits="2"/><line number="227" hits="2"/><line number="249" hits="2"/><line number="250" hits="1"/><line number="251" hits="1"/><line number="252" hits="4"/><line number="253" hits="0"/><line number="256" hits="2"/><line number="257" hits="6"/><line number="258" hits="1"/><line number="259" hits="2"/><line number="260" hits="1"/><line number="262" hits="4"/><line number="263" hits="1"/><line number="264" hits="2"/><line number="270" hits="4"/><line number="271" hits="0"/><line number="272" hits="2"/><line number="274" hits="2"/><line number="276" hits="4"/><line number="277" hits="0"/><line number="280" hits="7"/><line number="281" hits="2"/><line number="282" hits="2"/><line number="283" hits="2"/><line number="284" hits="3"/><line number="285" hits="2"/><line number="299" hits="1"/><line number="303" hits="2"/><line number="305" hits="1"/><line number="306" hits="2"/></lines></class><class name="test" filename="contracts/revenue_pool/src/test.rs" line-rate="1" branch-rate="0" complexity="0"><methods/><lines><line number="9" hits="4"/><line number="13" hits="4"/><line number="14" hits="3"/><line number="15" hits="1"/><line number="16" hits="2"/><line number="17" hits="1"/><line number="20" hits="4"/><line number="21" hits="4"/><line number="22" hits="4"/><line number="23" hits="4"/><line number="26" hits="1"/><line number="27" hits="1"/></lines></class></classes></package></packages></coverage>
\ No newline at end of file
+<?xml version="1.0"?><coverage lines-covered="552" lines-valid="577" line-rate="0.9566724436741768" branches-covered="0" branches-valid="0" branch-rate="0" complexity="0" version="1.9" timestamp="1777106169"><sources><source>/home/merlinthewhiz/Documents/Callora-Contracts</source></sources><packages><package name="contracts/settlement/src" line-rate="0.9553571428571429" branch-rate="0" complexity="0"><classes><class name="lib" filename="contracts/settlement/src/lib.rs" line-rate="0.9553571428571429" branch-rate="0" complexity="0"><methods/><lines><line number="74" hits="9"/><line number="75" hits="16"/><line number="76" hits="8"/><line number="77" hits="1"/><line number="79" hits="8"/><line number="80" hits="8"/><line number="81" hits="8"/><line number="82" hits="16"/><line number="85" hits="8"/><line number="87" hits="8"/><line number="110" hits="5"/><line number="117" hits="4"/><line number="118" hits="4"/><line number="119" hits="2"/><line number="120" hits="2"/><line number="122" hits="3"/><line number="123" hits="2"/><line number="124" hits="2"/><line number="125" hits="2"/><line number="127" hits="2"/><line number="128" hits="3"/><line number="130" hits="1"/><line number="131" hits="1"/><line number="132" hits="1"/><line number="133" hits="1"/><line number="134" hits="2"/><line number="135" hits="2"/><line number="136" hits="1"/><line number="137" hits="1"/><line number="140" hits="1"/><line number="144" hits="1"/><line number="145" hits="5"/><line number="147" hits="3"/><line number="148" hits="0"/><line number="149" hits="1"/><line number="150" hits="2"/><line number="151" hits="1"/><line number="152" hits="2"/><line number="153" hits="1"/><line number="154" hits="1"/><line number="155" hits="5"/><line number="156" hits="2"/><line number="157" hits="2"/><line number="158" hits="2"/><line number="161" hits="2"/><line number="164" hits="6"/><line number="165" hits="6"/><line number="166" hits="3"/><line number="167" hits="3"/><line number="176" hits="3"/><line number="177" hits="3"/><line number="179" hits="3"/><line number="180" hits="3"/><line number="184" hits="4"/><line number="185" hits="2"/><line number="187" hits="3"/><line number="188" hits="3"/><line number="192" hits="1"/><line number="193" hits="1"/><line number="195" hits="2"/><line number="196" hits="3"/><line number="212" hits="2"/><line number="213" hits="4"/><line number="214" hits="1"/><line number="216" hits="1"/><line number="218" hits="2"/><line number="219" hits="0"/><line number="220" hits="1"/><line number="256" hits="2"/><line number="257" hits="1"/><line number="258" hits="1"/><line number="259" hits="3"/><line number="260" hits="2"/><line number="262" hits="3"/><line number="264" hits="1"/><line number="265" hits="0"/><line number="266" hits="2"/><line number="267" hits="6"/><line number="268" hits="3"/><line number="270" hits="1"/><line number="295" hits="4"/><line number="296" hits="3"/><line number="297" hits="3"/><line number="298" hits="3"/><line number="299" hits="2"/><line number="301" hits="1"/><line number="303" hits="0"/><line number="305" hits="3"/><line number="307" hits="1"/><line number="308" hits="1"/><line number="309" hits="2"/><line number="331" hits="2"/><line number="332" hits="2"/><line number="334" hits="1"/><line number="336" hits="1"/><line number="338" hits="2"/><line number="339" hits="2"/><line number="340" hits="1"/><line number="342" hits="1"/><line number="343" hits="1"/><line number="367" hits="3"/><line number="368" hits="1"/><line number="369" hits="1"/><line number="370" hits="2"/><line number="371" hits="3"/><line number="373" hits="1"/><line number="375" hits="0"/><line number="379" hits="4"/><line number="380" hits="8"/><line number="381" hits="2"/><line number="382" hits="6"/><line number="383" hits="3"/></lines></class></classes></package><package name="contracts/vault/src" line-rate="0.9559228650137741" branch-rate="0" complexity="0"><classes><class name="lib" filename="contracts/vault/src/lib.rs" line-rate="0.9559228650137741" branch-rate="0" complexity="0"><methods/><lines><line number="73" hits="3"/><line number="83" hits="5"/><line number="84" hits="3"/><line number="85" hits="5"/><line number="86" hits="2"/><line number="88" hits="11"/><line number="92" hits="5"/><line number="93" hits="1"/><line number="98" hits="8"/><line number="99" hits="3"/><line number="100" hits="8"/><line number="101" hits="6"/><line number="102" hits="8"/><line number="103" hits="4"/><line number="104" hits="7"/><line number="105" hits="4"/><line number="106" hits="0"/><line number="111" hits="5"/><line number="112" hits="3"/><line number="114" hits="1"/><line number="120" hits="5"/><line number="125" hits="3"/><line number="126" hits="5"/><line number="127" hits="4"/><line number="128" hits="1"/><line number="129" hits="1"/><line number="131" hits="6"/><line number="132" hits="2"/><line number="133" hits="5"/><line number="134" hits="2"/><line number="137" hits="1"/><line number="138" hits="3"/><line number="139" hits="3"/><line number="140" hits="1"/><line number="142" hits="1"/><line number="145" hits="3"/><line number="146" hits="3"/><line number="147" hits="2"/><line number="151" hits="0"/><line number="152" hits="0"/><line number="155" hits="0"/><line number="156" hits="0"/><line number="157" hits="0"/><line number="162" hits="1"/><line number="163" hits="1"/><line number="165" hits="1"/><line number="169" hits="2"/><line number="170" hits="1"/><line number="171" hits="1"/><line number="172" hits="2"/><line number="173" hits="2"/><line number="175" hits="1"/><line number="177" hits="0"/><line number="178" hits="1"/><line number="179" hits="1"/><line number="182" hits="2"/><line number="183" hits="1"/><line number="186" hits="1"/><line number="188" hits="1"/><line number="189" hits="1"/><line number="190" hits="2"/><line number="191" hits="1"/><line number="192" hits="1"/><line number="193" hits="1"/><line number="196" hits="5"/><line number="197" hits="6"/><line number="198" hits="7"/><line number="201" hits="2"/><line number="202" hits="2"/><line number="203" hits="2"/><line number="204" hits="4"/><line number="205" hits="2"/><line number="207" hits="3"/><line number="208" hits="2"/><line number="213" hits="2"/><line number="215" hits="2"/><line number="216" hits="4"/><line number="217" hits="2"/><line number="218" hits="2"/><line number="220" hits="2"/><line number="221" hits="2"/><line number="222" hits="2"/><line number="225" hits="1"/><line number="226" hits="5"/><line number="228" hits="1"/><line number="229" hits="6"/><line number="232" hits="2"/><line number="233" hits="5"/><line number="234" hits="1"/><line number="236" hits="2"/><line number="237" hits="1"/><line number="238" hits="1"/><line number="241" hits="3"/><line number="242" hits="3"/><line number="244" hits="1"/><line number="245" hits="3"/><line number="248" hits="3"/><line number="250" hits="0"/><line number="253" hits="1"/><line number="255" hits="0"/><line number="260" hits="2"/><line number="261" hits="1"/><line number="262" hits="1"/><line number="263" hits="1"/><line number="265" hits="0"/><line number="268" hits="2"/><line number="269" hits="2"/><line number="270" hits="1"/><line number="271" hits="1"/><line number="272" hits="1"/><line number="273" hits="2"/><line number="275" hits="3"/><line number="278" hits="1"/><line number="279" hits="2"/><line number="281" hits="2"/><line number="282" hits="2"/><line number="285" hits="1"/><line number="286" hits="2"/><line number="287" hits="1"/><line number="288" hits="1"/><line number="289" hits="2"/><line number="290" hits="1"/><line number="291" hits="2"/><line number="293" hits="1"/><line number="294" hits="1"/><line number="296" hits="1"/><line number="300" hits="2"/><line number="301" hits="1"/><line number="302" hits="1"/><line number="303" hits="3"/><line number="304" hits="2"/><line number="305" hits="1"/><line number="306" hits="1"/><line number="309" hits="2"/><line number="310" hits="1"/><line number="311" hits="1"/><line number="312" hits="2"/><line number="313" hits="2"/><line number="314" hits="2"/><line number="315" hits="1"/><line number="318" hits="1"/><line number="319" hits="2"/><line number="321" hits="1"/><line number="322" hits="1"/><line number="369" hits="2"/><line number="370" hits="2"/><line number="372" hits="2"/><line number="376" hits="3"/><line number="377" hits="4"/><line number="378" hits="2"/><line number="379" hits="2"/><line number="380" hits="6"/><line number="384" hits="6"/><line number="385" hits="3"/><line number="394" hits="3"/><line number="396" hits="3"/><line number="397" hits="4"/><line number="398" hits="2"/><line number="399" hits="4"/><line number="401" hits="2"/><line number="402" hits="2"/><line number="403" hits="2"/><line number="404" hits="3"/><line number="405" hits="3"/><line number="406" hits="2"/><line number="408" hits="2"/><line number="428" hits="2"/><line number="429" hits="2"/><line number="430" hits="1"/><line number="431" hits="2"/><line number="432" hits="2"/><line number="433" hits="1"/><line number="434" hits="2"/><line number="435" hits="2"/><line number="436" hits="2"/><line number="437" hits="1"/><line number="438" hits="3"/><line number="439" hits="6"/><line number="441" hits="3"/><line number="442" hits="1"/><line number="443" hits="2"/><line number="447" hits="1"/><line number="449" hits="2"/><line number="450" hits="3"/><line number="451" hits="4"/><line number="452" hits="4"/><line number="453" hits="4"/><line number="455" hits="3"/><line number="466" hits="2"/><line number="467" hits="5"/><line number="468" hits="1"/><line number="469" hits="3"/><line number="470" hits="1"/><line number="471" hits="3"/><line number="472" hits="3"/><line number="473" hits="2"/><line number="474" hits="2"/><line number="475" hits="1"/><line number="476" hits="2"/><line number="477" hits="4"/><line number="478" hits="4"/><line number="479" hits="3"/><line number="480" hits="4"/><line number="481" hits="3"/><line number="482" hits="1"/><line number="483" hits="1"/><line number="484" hits="3"/><line number="485" hits="1"/><line number="486" hits="1"/><line number="488" hits="2"/><line number="490" hits="1"/><line number="495" hits="1"/><line number="497" hits="1"/><line number="499" hits="2"/><line number="500" hits="2"/><line number="501" hits="5"/><line number="502" hits="2"/><line number="503" hits="3"/><line number="504" hits="2"/><line number="505" hits="1"/><line number="508" hits="1"/><line number="511" hits="2"/><line number="512" hits="1"/><line number="515" hits="2"/><line number="516" hits="2"/><line number="517" hits="1"/><line number="518" hits="1"/><line number="522" hits="1"/><line number="524" hits="0"/><line number="525" hits="2"/><line number="527" hits="1"/><line number="528" hits="1"/><line number="529" hits="1"/><line number="535" hits="2"/><line number="536" hits="1"/><line number="539" hits="1"/><line number="541" hits="1"/><line number="542" hits="1"/><line number="543" hits="2"/><line number="544" hits="1"/><line number="545" hits="2"/><line number="546" hits="1"/><line number="547" hits="2"/><line number="548" hits="2"/><line number="553" hits="1"/><line number="554" hits="2"/><line number="555" hits="1"/><line number="556" hits="2"/><line number="557" hits="3"/><line number="561" hits="1"/><line number="563" hits="1"/><line number="564" hits="2"/><line number="565" hits="4"/><line number="567" hits="1"/><line number="568" hits="1"/><line number="569" hits="1"/><line number="570" hits="2"/><line number="571" hits="2"/><line number="572" hits="1"/><line number="574" hits="1"/><line number="577" hits="2"/><line number="578" hits="2"/><line number="579" hits="1"/><line number="580" hits="2"/><line number="581" hits="3"/><line number="585" hits="1"/><line number="587" hits="1"/><line number="588" hits="2"/><line number="589" hits="3"/><line number="591" hits="1"/><line number="592" hits="1"/><line number="593" hits="1"/><line number="594" hits="2"/><line number="595" hits="2"/><line number="596" hits="1"/><line number="598" hits="1"/><line number="601" hits="2"/><line number="602" hits="1"/><line number="603" hits="1"/><line number="604" hits="2"/><line number="605" hits="2"/><line number="607" hits="1"/><line number="608" hits="1"/><line number="609" hits="1"/><line number="611" hits="0"/><line number="612" hits="1"/><line number="613" hits="1"/><line number="616" hits="1"/><line number="617" hits="1"/><line number="618" hits="1"/><line number="623" hits="1"/><line number="624" hits="3"/><line number="641" hits="2"/><line number="642" hits="1"/><line number="643" hits="1"/><line number="644" hits="2"/><line number="645" hits="2"/><line number="647" hits="1"/><line number="649" hits="0"/><line number="650" hits="2"/><line number="651" hits="2"/><line number="652" hits="1"/><line number="661" hits="1"/><line number="662" hits="1"/><line number="664" hits="1"/><line number="665" hits="4"/><line number="695" hits="1"/><line number="696" hits="2"/><line number="697" hits="1"/><line number="698" hits="1"/><line number="699" hits="1"/><line number="700" hits="2"/><line number="703" hits="2"/><line number="709" hits="1"/><line number="710" hits="1"/><line number="711" hits="1"/><line number="715" hits="2"/><line number="719" hits="1"/><line number="721" hits="0"/><line number="722" hits="2"/><line number="723" hits="2"/><line number="724" hits="1"/><line number="726" hits="1"/><line number="729" hits="1"/><line number="730" hits="1"/><line number="732" hits="1"/><line number="735" hits="2"/><line number="741" hits="1"/><line number="742" hits="1"/><line number="743" hits="0"/><line number="747" hits="2"/><line number="751" hits="1"/><line number="754" hits="3"/><line number="755" hits="2"/><line number="756" hits="1"/><line number="758" hits="0"/><line number="759" hits="2"/><line number="760" hits="2"/><line number="761" hits="1"/><line number="763" hits="1"/><line number="766" hits="1"/><line number="767" hits="1"/><line number="770" hits="4"/><line number="771" hits="1"/><line number="773" hits="1"/><line number="774" hits="4"/><line number="777" hits="2"/><line number="778" hits="3"/><line number="781" hits="1"/><line number="782" hits="1"/><line number="785" hits="1"/><line number="787" hits="1"/><line number="788" hits="1"/><line number="794" hits="5"/><line number="795" hits="6"/><line number="796" hits="1"/><line number="797" hits="2"/><line number="800" hits="1"/><line number="801" hits="1"/><line number="804" hits="2"/><line number="805" hits="2"/><line number="806" hits="1"/><line number="807" hits="1"/></lines></class></classes></package><package name="contracts/revenue_pool/src" line-rate="0.9607843137254902" branch-rate="0" complexity="0"><classes><class name="lib" filename="contracts/revenue_pool/src/lib.rs" line-rate="0.9607843137254902" branch-rate="0" complexity="0"><methods/><lines><line number="46" hits="8"/><line number="47" hits="1"/><line number="48" hits="1"/><line number="49" hits="1"/><line number="51" hits="4"/><line number="52" hits="2"/><line number="54" hits="4"/><line number="55" hits="1"/><line number="56" hits="1"/><line number="58" hits="4"/><line number="59" hits="1"/><line number="61" hits="4"/><line number="62" hits="1"/><line number="75" hits="4"/><line number="76" hits="1"/><line number="78" hits="8"/><line number="105" hits="1"/><line number="106" hits="1"/><line number="108" hits="3"/><line number="112" hits="2"/><line number="113" hits="2"/><line number="114" hits="1"/><line number="115" hits="3"/><line number="116" hits="2"/><line number="118" hits="3"/><line number="119" hits="2"/><line number="121" hits="2"/><line number="122" hits="3"/><line number="123" hits="2"/><line number="139" hits="3"/><line number="140" hits="2"/><line number="141" hits="2"/><line number="143" hits="2"/><line number="146" hits="1"/><line number="147" hits="2"/><line number="150" hits="3"/><line number="151" hits="1"/><line number="153" hits="2"/><line number="154" hits="2"/><line number="179" hits="2"/><line number="180" hits="1"/><line number="181" hits="3"/><line number="182" hits="2"/><line number="183" hits="2"/><line number="185" hits="3"/><line number="186" hits="3"/><line number="191" hits="1"/><line number="194" hits="1"/><line number="195" hits="1"/><line number="217" hits="2"/><line number="218" hits="1"/><line number="219" hits="1"/><line number="220" hits="3"/><line number="221" hits="0"/><line number="223" hits="3"/><line number="224" hits="1"/><line number="230" hits="3"/><line number="231" hits="0"/><line number="232" hits="1"/><line number="234" hits="2"/><line number="235" hits="1"/><line number="237" hits="2"/><line number="238" hits="0"/><line number="244" hits="1"/><line number="245" hits="1"/><line number="248" hits="2"/><line number="249" hits="4"/><line number="250" hits="4"/><line number="299" hits="5"/><line number="301" hits="1"/><line number="302" hits="1"/><line number="303" hits="5"/><line number="304" hits="1"/><line number="307" hits="5"/><line number="308" hits="4"/><line number="309" hits="2"/><line number="311" hits="1"/><line number="312" hits="2"/><line number="315" hits="3"/><line number="316" hits="5"/><line number="317" hits="3"/><line number="320" hits="1"/><line number="321" hits="1"/><line number="323" hits="8"/><line number="324" hits="3"/><line number="325" hits="1"/><line number="333" hits="3"/><line number="334" hits="0"/><line number="335" hits="1"/><line number="336" hits="2"/><line number="338" hits="3"/><line number="339" hits="1"/><line number="345" hits="8"/><line number="346" hits="1"/><line number="347" hits="1"/><line number="348" hits="1"/><line number="351" hits="3"/><line number="352" hits="3"/><line number="366" hits="1"/><line number="370" hits="2"/><line number="372" hits="1"/><line number="373" hits="2"/></lines></class></classes></package></packages></coverage>
\ No newline at end of file
diff --git a/coverage/tarpaulin-report.html b/coverage/tarpaulin-report.html
index 52411463..60e8cea5 100644
--- a/coverage/tarpaulin-report.html
+++ b/coverage/tarpaulin-report.html
@@ -193,8 +193,8 @@
 <body>
     <div id="root"></div>
     <script>
-        var data = {"files":[{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","revenue_pool","src","lib.rs"],"content":"#![no_std]\n\nuse soroban_sdk::{contract, contractimpl, token, Address, Env, Symbol, Vec};\n\n/// Revenue settlement contract: receives USDC from vault deducts and distributes to developers.\n///\n/// Flow: vault deduct → vault transfers USDC to this contract → admin calls distribute(to, amount).\n///\n/// # Security Assumptions\n/// - **Admin Key**: The admin has full control over fund distribution. Must be a secure multisig.\n/// - **USDC Asset**: The token address is permanently set on initialization. Must be carefully verified.\n/// - **Balances / Griefing**: The contract does not rely on strict balance invariants. External transfers\n///   increase balance without breaking logic.\n///\n/// For detailed threat models and mitigations, see [`SECURITY.md`](../../SECURITY.md).\nconst ADMIN_KEY: \u0026str = \"admin\";\nconst PENDING_ADMIN_KEY: \u0026str = \"pending_admin\";\nconst USDC_KEY: \u0026str = \"usdc\";\nconst ERR_AMOUNT_NOT_POSITIVE: \u0026str = \"amount must be positive\";\nconst ERR_UNAUTHORIZED: \u0026str = \"unauthorized: caller is not admin\";\nconst ERR_INSUFFICIENT_BALANCE: \u0026str = \"insufficient USDC balance\";\nconst ERR_NOT_INITIALIZED: \u0026str = \"revenue pool not initialized\";\n\n#[contract]\npub struct RevenuePool;\n\n#[contractimpl]\nimpl RevenuePool {\n    /// Initialize the revenue pool with an admin and the USDC token address.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `admin` - Address that may call `distribute`. Typically backend or multisig.\n    /// * `usdc_token` - Stellar USDC (or wrapped USDC) token contract address.\n    ///\n    /// # Panics\n    /// * If the revenue pool is already initialized.\n    ///\n    /// # Events\n    /// Emits an `init` event with the `admin` address as a topic and `usdc_token` address as data.\n    pub fn init(env: Env, admin: Address, usdc_token: Address) {\n        admin.require_auth();\n        if usdc_token == env.current_contract_address() {\n            panic!(\"invalid config: usdc_token cannot be the contract itself\");\n        }\n        if usdc_token == admin {\n            panic!(\"invalid config: usdc_token cannot be the admin address\");\n        }\n        let inst = env.storage().instance();\n        if inst.has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"revenue pool already initialized\");\n        }\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026admin);\n        inst.set(\u0026Symbol::new(\u0026env, USDC_KEY), \u0026usdc_token);\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"init\"), admin), usdc_token);\n    }\n\n    /// Return the current admin address.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The `Address` of the current admin.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, ADMIN_KEY))\n            .expect(\"revenue pool not initialized\")\n    }\n\n    /// Initiate replacement of the current admin. Only the existing admin may call this.\n    /// The new admin must call `claim_admin` to complete the transfer.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `new_admin` - Address of the proposed new admin.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    ///\n    /// # Events\n    /// Emits an `admin_transfer_started` event with the `current_admin` as a topic and `new_admin` as data.\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let current = Self::get_admin(env.clone());\n        if caller != current {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        let inst = env.storage().instance();\n        inst.set(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY), \u0026new_admin);\n\n        env.events().publish(\n            (Symbol::new(\u0026env, \"admin_transfer_started\"), current),\n            new_admin,\n        );\n    }\n\n    /// Complete the admin transfer. Only the pending admin may call this.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the pending admin set via `set_admin`.\n    ///\n    /// # Panics\n    /// * If no pending admin is set (`\"no pending admin\"`).\n    /// * If the caller is not the pending admin (`\"unauthorized: caller is not pending admin\"`).\n    ///\n    /// # Events\n    /// Emits an `admin_transfer_completed` event with the `new_admin` as a topic.\n    pub fn claim_admin(env: Env, caller: Address) {\n        caller.require_auth();\n        let inst = env.storage().instance();\n        let pending: Address = inst\n            .get(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY))\n            .expect(\"no pending admin\");\n\n        if caller != pending {\n            panic!(\"unauthorized: caller is not pending admin\");\n        }\n\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026pending);\n        inst.remove(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY));\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_transfer_completed\"), pending), ());\n    }\n\n    /// **Note**: This function is an **event-only helper**. It is **not** a substitute\n    /// for real token settlement and does **not** move any tokens. It exists purely\n    /// for event emission / indexer alignment when configured.\n    /// In practice, USDC is received when the vault (or any address) transfers tokens\n    /// to this contract's address; no separate \"receive_payment\" call is required\n    /// for the transfer to succeed.\n    ///\n    /// This function can be used to emit an event for indexers when the backend\n    /// wants to log that a payment was credited from the vault.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be admin (or could be extended to allow vault to call).\n    /// * `amount` - Amount received (for event logging).\n    /// * `from_vault` - Optional; true if the source was the vault.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    ///\n    /// # Events\n    /// Emits a `receive_payment` event with `caller` as a topic, and a tuple of `(amount, from_vault)` as data.\n    pub fn receive_payment(env: Env, caller: Address, amount: i128, from_vault: bool) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.events().publish(\n            (Symbol::new(\u0026env, \"receive_payment\"), caller),\n            (amount, from_vault),\n        );\n    }\n\n    fn validate_recipient(recipient: \u0026Address, contract_self: \u0026Address) {\n        // Rule 1 — no self-distributions (the contract sending to itself is almost\n        // certainly a logic bug; if you want to \"reclaim\" funds use a dedicated fn).\n        if recipient == contract_self {\n            panic!(\"invalid recipient: cannot distribute to the contract itself\");\n        }\n    }\n\n    /// Distribute USDC from this contract to a developer wallet.\n    ///\n    /// Only the admin may call. Transfers USDC from this contract to `to`.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `to` - Developer address to receive USDC.\n    /// * `amount` - Amount in token base units (e.g. USDC stroops).\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    /// * If the amount is zero or negative (`\"amount must be positive\"`).\n    /// * If the revenue pool has not been initialized.\n    /// * If the revenue pool holds less than the requested amount (`\"insufficient USDC balance\"`).\n    ///\n    /// # Events\n    /// Emits a `distribute` event with `to` as a topic and `amount` as data.\n    pub fn distribute(env: Env, caller: Address, to: Address, amount: i128) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"{}\", ERR_UNAUTHORIZED);\n        }\n        if amount \u003c= 0 {\n            panic!(\"{}\", ERR_AMOUNT_NOT_POSITIVE);\n        }\n\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(ERR_NOT_INITIALIZED);\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n\n        let contract_address = env.current_contract_address();\n        Self::validate_recipient(\u0026to, \u0026contract_address);\n\n        let _ = usdc.try_balance(\u0026to).unwrap_or_else(|_| {\n            panic!(\n                \"invalid recipient: account does not exist \\\n                                      or has no USDC trustline\"\n            )\n        });\n\n        if usdc.balance(\u0026contract_address) \u003c amount {\n            panic!(\"{}\", ERR_INSUFFICIENT_BALANCE);\n        }\n\n        usdc.transfer(\u0026contract_address, \u0026to, \u0026amount);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"distribute\"), to), amount);\n    }\n\n    /// Distribute USDC from this contract to multiple developer wallets in one transaction.\n    ///\n    /// Only the admin may call. Iterates through the vector of payments and atomically\n    /// transfers USDC to each developer. Fails if the total amount exceeds balance\n    /// or if any individual amount is not positive.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `payments` - A vector of `(Address, i128)` tuples representing destinations and amounts.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    /// * If any individual amount is zero or negative (`\"amount must be positive\"`).\n    /// * If the revenue pool has not been initialized.\n    /// * If the total amount exceeds the contract's available balance (`\"insufficient USDC balance\"`).\n    ///\n    /// # Events\n    /// Emits a `batch_distribute` event for each payment with `to` as a topic and `amount` as data.\n    pub fn batch_distribute(env: Env, caller: Address, payments: Vec\u003c(Address, i128)\u003e) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"{}\", ERR_UNAUTHORIZED);\n        }\n\n        let mut total_amount: i128 = 0;\n        for payment in payments.iter() {\n            let (_, amount) = payment;\n            if amount \u003c= 0 {\n                panic!(\"{}\", ERR_AMOUNT_NOT_POSITIVE);\n            }\n            total_amount = total_amount\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"total overflow\"));\n        }\n\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(ERR_NOT_INITIALIZED);\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n\n        let contract_address = env.current_contract_address();\n\n        if usdc.balance(\u0026contract_address) \u003c total_amount {\n            panic!(\"{}\", ERR_INSUFFICIENT_BALANCE);\n        }\n\n        for payment in payments.iter() {\n            let (to, amount) = payment;\n            Self::validate_recipient(\u0026to, \u0026contract_address);\n            usdc.transfer(\u0026contract_address, \u0026to, \u0026amount);\n            env.events()\n                .publish((Symbol::new(\u0026env, \"batch_distribute\"), to), amount);\n        }\n    }\n\n    /// Return this contract's USDC balance (for testing and dashboards).\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The balance of the contract in USDC base units.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn balance(env: Env) -\u003e i128 {\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(\"revenue pool not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n        usdc.balance(\u0026env.current_contract_address())\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_balance;\n","traces":[{"line":41,"address":[10967724,10967514,10966256],"length":1,"stats":{"Line":4}},{"line":42,"address":[10966291],"length":1,"stats":{"Line":2}},{"line":43,"address":[10966380],"length":1,"stats":{"Line":2}},{"line":44,"address":[10967607],"length":1,"stats":{"Line":1}},{"line":46,"address":[10966514],"length":1,"stats":{"Line":2}},{"line":47,"address":[10967589,10966559],"length":1,"stats":{"Line":2}},{"line":49,"address":[10966591,10966552],"length":1,"stats":{"Line":5}},{"line":50,"address":[10966730],"length":1,"stats":{"Line":2}},{"line":51,"address":[10967520],"length":1,"stats":{"Line":2}},{"line":53,"address":[10966885],"length":1,"stats":{"Line":3}},{"line":54,"address":[10967012],"length":1,"stats":{"Line":2}},{"line":56,"address":[10967147],"length":1,"stats":{"Line":2}},{"line":57,"address":[10967159],"length":1,"stats":{"Line":2}},{"line":70,"address":[10968973,10968592],"length":1,"stats":{"Line":1}},{"line":71,"address":[10968618],"length":1,"stats":{"Line":1}},{"line":73,"address":[10968815,10968728],"length":1,"stats":{"Line":4}},{"line":90,"address":[10970062,10969972,10968992],"length":1,"stats":{"Line":2}},{"line":91,"address":[10969027],"length":1,"stats":{"Line":1}},{"line":92,"address":[10969113],"length":1,"stats":{"Line":1}},{"line":93,"address":[10969212,10969150],"length":1,"stats":{"Line":2}},{"line":94,"address":[10969238,10969988],"length":1,"stats":{"Line":2}},{"line":96,"address":[10969231,10969270],"length":1,"stats":{"Line":2}},{"line":97,"address":[10969409],"length":1,"stats":{"Line":1}},{"line":99,"address":[10969541,10969843],"length":1,"stats":{"Line":2}},{"line":100,"address":[10969553,10969633],"length":1,"stats":{"Line":2}},{"line":101,"address":[10969776],"length":1,"stats":{"Line":1}},{"line":117,"address":[10962681,10961536,10962739],"length":1,"stats":{"Line":2}},{"line":118,"address":[10961566],"length":1,"stats":{"Line":1}},{"line":119,"address":[10961636],"length":1,"stats":{"Line":1}},{"line":121,"address":[10961764],"length":1,"stats":{"Line":1}},{"line":124,"address":[10961979],"length":1,"stats":{"Line":1}},{"line":125,"address":[10962048,10962697],"length":1,"stats":{"Line":2}},{"line":128,"address":[10962101,10962017],"length":1,"stats":{"Line":2}},{"line":129,"address":[10962176],"length":1,"stats":{"Line":1}},{"line":131,"address":[10962303],"length":1,"stats":{"Line":1}},{"line":132,"address":[10962315],"length":1,"stats":{"Line":1}},{"line":156,"address":[10963400,10963467,10962784],"length":1,"stats":{"Line":2}},{"line":157,"address":[10962851],"length":1,"stats":{"Line":1}},{"line":158,"address":[10962929],"length":1,"stats":{"Line":2}},{"line":159,"address":[10963020,10962958],"length":1,"stats":{"Line":3}},{"line":160,"address":[10963046,10963415],"length":1,"stats":{"Line":2}},{"line":162,"address":[10963039,10963315],"length":1,"stats":{"Line":3}},{"line":163,"address":[10963176,10963082],"length":1,"stats":{"Line":4}},{"line":168,"address":[10966048],"length":1,"stats":{"Line":2}},{"line":171,"address":[10966062],"length":1,"stats":{"Line":2}},{"line":172,"address":[10966087],"length":1,"stats":{"Line":1}},{"line":194,"address":[10959936,10961514,10961474],"length":1,"stats":{"Line":2}},{"line":195,"address":[10959976],"length":1,"stats":{"Line":2}},{"line":196,"address":[10960054],"length":1,"stats":{"Line":1}},{"line":197,"address":[10960083,10960145],"length":1,"stats":{"Line":2}},{"line":198,"address":[10960173],"length":1,"stats":{"Line":0}},{"line":200,"address":[10960151],"length":1,"stats":{"Line":1}},{"line":201,"address":[10960217],"length":1,"stats":{"Line":1}},{"line":207,"address":[10960317,10960413],"length":1,"stats":{"Line":2}},{"line":208,"address":[10960268,10960348,10960420],"length":1,"stats":{"Line":0}},{"line":209,"address":[10960691],"length":1,"stats":{"Line":1}},{"line":211,"address":[10960723],"length":1,"stats":{"Line":1}},{"line":212,"address":[10960796],"length":1,"stats":{"Line":1}},{"line":214,"address":[10960849],"length":1,"stats":{"Line":1}},{"line":215,"address":[10913409],"length":1,"stats":{"Line":0}},{"line":221,"address":[10960906],"length":1,"stats":{"Line":1}},{"line":222,"address":[10961008],"length":1,"stats":{"Line":1}},{"line":225,"address":[10960976],"length":1,"stats":{"Line":1}},{"line":226,"address":[10961045,10961276],"length":1,"stats":{"Line":2}},{"line":227,"address":[10961302,10961057],"length":1,"stats":{"Line":2}},{"line":249,"address":[10963488,10965701,10965931],"length":1,"stats":{"Line":2}},{"line":250,"address":[10963523],"length":1,"stats":{"Line":1}},{"line":251,"address":[10963592],"length":1,"stats":{"Line":1}},{"line":252,"address":[10963686,10963624],"length":1,"stats":{"Line":4}},{"line":253,"address":[10963736],"length":1,"stats":{"Line":0}},{"line":256,"address":[10963697],"length":1,"stats":{"Line":2}},{"line":257,"address":[10963729,10963872,10963776],"length":1,"stats":{"Line":6}},{"line":258,"address":[10963963],"length":1,"stats":{"Line":1}},{"line":259,"address":[10964005],"length":1,"stats":{"Line":2}},{"line":260,"address":[10965772],"length":1,"stats":{"Line":1}},{"line":262,"address":[10965741,10965833,10965897],"length":1,"stats":{"Line":4}},{"line":263,"address":[10965765],"length":1,"stats":{"Line":1}},{"line":264,"address":[10913456,10913457],"length":1,"stats":{"Line":2}},{"line":270,"address":[10964135,10964231],"length":1,"stats":{"Line":4}},{"line":271,"address":[10964238,10964086,10964166],"length":1,"stats":{"Line":0}},{"line":272,"address":[10964509],"length":1,"stats":{"Line":2}},{"line":274,"address":[10964541],"length":1,"stats":{"Line":2}},{"line":276,"address":[10964601,10964689],"length":1,"stats":{"Line":4}},{"line":277,"address":[10964735],"length":1,"stats":{"Line":0}},{"line":280,"address":[10964871,10965696,10964775,10964728],"length":1,"stats":{"Line":7}},{"line":281,"address":[10964966],"length":1,"stats":{"Line":2}},{"line":282,"address":[10965070],"length":1,"stats":{"Line":2}},{"line":283,"address":[10965335],"length":1,"stats":{"Line":2}},{"line":284,"address":[10965630,10965391],"length":1,"stats":{"Line":3}},{"line":285,"address":[10965662,10965403],"length":1,"stats":{"Line":2}},{"line":299,"address":[10968568,10967744],"length":1,"stats":{"Line":1}},{"line":303,"address":[10967972,10967885],"length":1,"stats":{"Line":2}},{"line":305,"address":[10968235],"length":1,"stats":{"Line":1}},{"line":306,"address":[10968264,10968324],"length":1,"stats":{"Line":2}}],"covered":88,"coverable":94},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","revenue_pool","src","test.rs"],"content":"extern crate std;\n\nuse super::*;\nuse soroban_sdk::testutils::{Address as _, Events as _};\nuse soroban_sdk::token;\nuse soroban_sdk::TryFromVal;\nuse soroban_sdk::{Address, Env, IntoVal, Symbol, Vec};\n\nfn create_usdc\u003c'a\u003e(\n    env: \u0026'a Env,\n    admin: \u0026Address,\n) -\u003e (Address, token::Client\u003c'a\u003e, token::StellarAssetClient\u003c'a\u003e) {\n    let contract_address = env.register_stellar_asset_contract_v2(admin.clone());\n    let address = contract_address.address();\n    let client = token::Client::new(env, \u0026address);\n    let admin_client = token::StellarAssetClient::new(env, \u0026address);\n    (address, client, admin_client)\n}\n\nfn create_pool(env: \u0026Env) -\u003e (Address, RevenuePoolClient\u003c'_\u003e) {\n    let address = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(env, \u0026address);\n    (address, client)\n}\n\nfn fund_pool(usdc_admin_client: \u0026token::StellarAssetClient, pool_address: \u0026Address, amount: i128) {\n    usdc_admin_client.mint(pool_address, \u0026amount);\n}\n\n#[test]\nfn init_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_pool_addr, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    assert_eq!(client.get_admin(), admin);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn init_emits_event() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    let events = env.events().all();\n    let init_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026init_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"init\"));\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool already initialized\")]\nfn init_double_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.init(\u0026admin, \u0026usdc);\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool already initialized\")]\nfn init_double_different_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let other_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n    let (usdc2, _, _) = create_usdc(\u0026env, \u0026other_admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.init(\u0026other_admin, \u0026usdc2);\n}\n\n#[test]\n#[should_panic(expected = \"invalid config: usdc_token cannot be the contract itself\")]\nfn init_usdc_token_is_contract_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n\n    // Passing the contract's own address as usdc_token should be rejected.\n    client.init(\u0026admin, \u0026pool_addr);\n}\n\n#[test]\n#[should_panic(expected = \"invalid config: usdc_token cannot be the admin address\")]\nfn init_usdc_token_is_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n\n    // Passing the admin address as usdc_token should be rejected.\n    client.init(\u0026admin, \u0026admin);\n}\n\n#[test]\nfn distribute_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1_000);\n    client.distribute(\u0026admin, \u0026developer, \u0026400);\n\n    assert_eq!(usdc_client.balance(\u0026pool_addr), 600);\n    assert_eq!(usdc_client.balance(\u0026developer), 400);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn distribute_zero_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.distribute(\u0026admin, \u0026developer, \u00260);\n}\n\n#[test]\n#[should_panic(expected = \"insufficient USDC balance\")]\nfn distribute_excess_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n    client.distribute(\u0026admin, \u0026developer, \u0026101);\n}\n\n#[test]\nfn set_admin_two_step_transfers_control() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 300);\n\n    client.set_admin(\u0026admin, \u0026new_admin);\n    assert_eq!(client.get_admin(), admin);\n\n    client.claim_admin(\u0026new_admin);\n    assert_eq!(client.get_admin(), new_admin);\n\n    client.distribute(\u0026new_admin, \u0026developer, \u0026100);\n    assert_eq!(usdc_client.balance(\u0026developer), 100);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_admin_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026attacker, \u0026new_admin);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not pending admin\")]\nfn claim_admin_wrong_address_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026new_admin);\n    client.claim_admin(\u0026attacker);\n}\n\n#[test]\nfn admin_transfer_emits_events() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    // Step 1 event\n    client.set_admin(\u0026admin, \u0026new_admin);\n    let events = env.events().all();\n    let transfer_started = events.last().unwrap();\n\n    // FIX: Convert Val to Symbol for comparison\n    let event_name = Symbol::try_from_val(\u0026env, \u0026transfer_started.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"admin_transfer_started\"));\n\n    // Step 2 event\n    client.claim_admin(\u0026new_admin);\n    let events = env.events().all();\n    let transfer_completed = events.last().unwrap();\n\n    // FIX: Convert Val to Symbol for comparison\n    let event_name_comp =\n        Symbol::try_from_val(\u0026env, \u0026transfer_completed.1.get(0).unwrap()).unwrap();\n    assert_eq!(\n        event_name_comp,\n        Symbol::new(\u0026env, \"admin_transfer_completed\")\n    );\n}\n\n#[test]\nfn receive_payment_emits_event() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    let events = env.events().all();\n    let receive_payment_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026receive_payment_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"receive_payment\"));\n\n    let amount_and_source: (i128, bool) =\n        \u003c(i128, bool)\u003e::try_from_val(\u0026env, \u0026receive_payment_event.2).unwrap();\n    assert_eq!(amount_and_source, (250, true));\n}\n\n#[test]\nfn batch_distribute_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 300_i128));\n    payments.push_back((dev2.clone(), 200_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    assert_eq!(usdc_client.balance(\u0026dev1), 300);\n    assert_eq!(usdc_client.balance(\u0026dev2), 200);\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn batch_distribute_success_events() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 300_i128));\n    payments.push_back((dev2.clone(), 200_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    let events = env.events().all();\n    assert!(events.len() \u003e= 4);\n\n    for i in 0..events.len() {\n        let (_, topics, data) = events.get(i).unwrap();\n        let topic_0 = topics.get(0).unwrap();\n        if let Ok(event_name) = Symbol::try_from_val(\u0026env, \u0026topic_0) {\n            if event_name == Symbol::new(\u0026env, \"batch_distribute\") {\n                let value: i128 = i128::try_from_val(\u0026env, \u0026data).unwrap();\n                assert!(value == 300 || value == 200);\n            }\n        }\n    }\n}\n\n#[test]\nfn receive_payment_emits_event_for_admin() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    let events = env.events().all();\n    let receive_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026receive_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"receive_payment\"));\n\n    let caller: Address = Address::try_from_val(\u0026env, \u0026receive_event.1.get(1).unwrap()).unwrap();\n    assert_eq!(caller, admin);\n\n    let (amount, from_vault): (i128, bool) = receive_event.2.into_val(\u0026env);\n    assert_eq!(amount, 250);\n    assert!(from_vault);\n}\n\n#[test]\n#[should_panic(expected = \"no pending admin\")]\nfn claim_admin_without_pending_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let candidate = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.claim_admin(\u0026candidate);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not pending admin\")]\nfn claim_admin_wrong_caller_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let pending_admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026pending_admin);\n    client.claim_admin(\u0026attacker);\n}\n\n#[test]\n#[should_panic(expected = \"invalid recipient: cannot distribute to the contract itself\")]\nfn distribute_to_self_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n    client.distribute(\u0026admin, \u0026pool_addr, \u002650);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn batch_distribute_zero_amount_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc_address, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev, 0));\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n","traces":[{"line":9,"address":[10918303,10918309,10917840],"length":1,"stats":{"Line":4}},{"line":13,"address":[10917902],"length":1,"stats":{"Line":4}},{"line":14,"address":[10917941],"length":1,"stats":{"Line":3}},{"line":15,"address":[10918006],"length":1,"stats":{"Line":1}},{"line":16,"address":[10918079],"length":1,"stats":{"Line":2}},{"line":17,"address":[10918147],"length":1,"stats":{"Line":1}},{"line":20,"address":[10917817,10917823,10917632],"length":1,"stats":{"Line":4}},{"line":21,"address":[10917671],"length":1,"stats":{"Line":4}},{"line":22,"address":[10917691],"length":1,"stats":{"Line":4}},{"line":23,"address":[10917736],"length":1,"stats":{"Line":4}},{"line":26,"address":[10944352],"length":1,"stats":{"Line":1}},{"line":27,"address":[10944375],"length":1,"stats":{"Line":1}}],"covered":12,"coverable":12},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","revenue_pool","src","test_balance.rs"],"content":"use crate::{RevenuePool, RevenuePoolClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"revenue pool not initialized\")]\nfn test_balance_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(\u0026env, \u0026addr);\n\n    // Calling balance before init should panic\n    client.balance();\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn test_receive_payment_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n\n    let admin = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n\n    let addr = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    // Call from unauthorized address should panic\n    client.receive_payment(\u0026attacker, \u0026100, \u0026false);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","settlement","src","lib.rs"],"content":"#![no_std]\n\nuse soroban_sdk::{contract, contractimpl, contracttype, Address, Env, Map, Symbol, Vec};\n\n/// Developer balance record in settlement contract\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct DeveloperBalance {\n    pub address: Address,\n    pub balance: i128,\n}\n\n/// Global pool balance tracking.\n///\n/// `last_updated` is set to `env.ledger().timestamp()` on every\n/// `receive_payment` call that credits the pool (`to_pool = true`).\n/// It is also set at `init` time. It is **not** updated when payments\n/// are routed to individual developer balances.\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct GlobalPool {\n    pub total_balance: i128,\n    /// Ledger timestamp of the last pool credit. Useful for analytics\n    /// and staleness checks.\n    pub last_updated: u64,\n}\n\n/// Payment received event\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct PaymentReceivedEvent {\n    pub from_vault: Address,\n    pub amount: i128,\n    pub to_pool: bool, // true if credited to global pool, false if to specific developer\n    pub developer: Option\u003cAddress\u003e, // developer address if credited to specific developer\n}\n\n/// Balance credited event\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct BalanceCreditedEvent {\n    pub developer: Address,\n    pub amount: i128,\n    pub new_balance: i128,\n}\n\n/// Storage key for the registered vault address.\nconst VAULT_KEY: \u0026str = \"vault\";\n/// Storage key for the admin address.\nconst ADMIN_KEY: \u0026str = \"admin\";\nconst PENDING_ADMIN_KEY: \u0026str = \"pending_admin\";\nconst DEVELOPER_BALANCES_KEY: \u0026str = \"developer_balances\";\n/// Storage key for the global pool state.\nconst GLOBAL_POOL_KEY: \u0026str = \"global_pool\";\n\n#[contract]\npub struct CalloraSettlement;\n\n#[contractimpl]\nimpl CalloraSettlement {\n    /// Initialize the settlement contract with admin and vault address.\n    ///\n    /// Persists admin + registered vault, initializes an empty developer balance map,\n    /// and stores a timestamped global pool.\n    ///\n    /// Storage keys written:\n    /// - `admin`\n    /// - `vault`\n    /// - `developer_balances`\n    /// - `global_pool`\n    ///\n    /// # Panics\n    /// Panics if the contract is already initialized.\n    pub fn init(env: Env, admin: Address, vault_address: Address) {\n        let inst = env.storage().instance();\n        if inst.has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract already initialized\");\n        }\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026admin);\n        inst.set(\u0026Symbol::new(\u0026env, VAULT_KEY), \u0026vault_address);\n        let empty_balances: Map\u003cAddress, i128\u003e = Map::new(\u0026env);\n        inst.set(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY), \u0026empty_balances);\n        let global_pool = GlobalPool {\n            total_balance: 0,\n            last_updated: env.ledger().timestamp(),\n        };\n        inst.set(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY), \u0026global_pool);\n    }\n\n    /// Receive payment from vault and credit to pool or developer balance.\n    ///\n    /// # Arguments\n    /// * `caller` - Must be authorized vault address or admin\n    /// * `amount` - Payment amount in USDC micro-units; must be \u003e 0\n    /// * `to_pool` - If true, credit global pool; if false, credit a specific developer\n    /// * `developer` - Required when `to_pool=false`; ignored when `to_pool=true`\n    ///\n    /// # Access Control\n    /// Only the registered vault address or admin can call this function.\n    ///\n    /// # Map Operations\n    /// When crediting to developer balance:\n    /// - Performs O(1) lookup to retrieve current balance from developer map\n    /// - Updates the specific developer's balance\n    /// - Stores updated map back to contract state\n    /// - Map iteration is NOT performed; only point lookup/update\n    ///\n    /// # Events\n    /// Always emits `payment_received`. Also emits `balance_credited` when `to_pool=false`.\n    pub fn receive_payment(\n        env: Env,\n        caller: Address,\n        amount: i128,\n        to_pool: bool,\n        developer: Option\u003cAddress\u003e,\n    ) {\n        caller.require_auth();\n        Self::require_authorized_caller(env.clone(), caller.clone());\n        if amount \u003c= 0 {\n            panic!(\"amount must be positive\");\n        }\n        let inst = env.storage().instance();\n        if to_pool {\n            let mut global_pool = Self::get_global_pool(env.clone());\n            global_pool.total_balance = global_pool\n                .total_balance\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"pool balance overflow\"));\n            global_pool.last_updated = env.ledger().timestamp();\n            inst.set(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY), \u0026global_pool);\n            env.events().publish(\n                (Symbol::new(\u0026env, \"payment_received\"), caller.clone()),\n                PaymentReceivedEvent {\n                    from_vault: caller.clone(),\n                    amount,\n                    to_pool: true,\n                    developer: None,\n                },\n            );\n        } else {\n            let dev_address = developer\n                .unwrap_or_else(|| panic!(\"developer address required when to_pool=false\"));\n            let mut balances: Map\u003cAddress, i128\u003e = inst\n                .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n                .unwrap_or_else(|| Map::new(\u0026env));\n            let current_balance = balances.get(dev_address.clone()).unwrap_or(0);\n            let new_balance = current_balance\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"developer balance overflow\"));\n            balances.set(dev_address.clone(), new_balance);\n            inst.set(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY), \u0026balances);\n            env.events().publish(\n                (Symbol::new(\u0026env, \"payment_received\"), caller.clone()),\n                PaymentReceivedEvent {\n                    from_vault: caller.clone(),\n                    amount,\n                    to_pool: false,\n                    developer: Some(dev_address.clone()),\n                },\n            );\n            env.events().publish(\n                (Symbol::new(\u0026env, \"balance_credited\"), dev_address.clone()),\n                BalanceCreditedEvent {\n                    developer: dev_address,\n                    amount,\n                    new_balance,\n                },\n            );\n        }\n    }\n\n    /// Get current admin address\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, ADMIN_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get registered vault address\n    pub fn get_vault(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, VAULT_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get global pool information\n    pub fn get_global_pool(env: Env) -\u003e GlobalPool {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get developer balance\n    ///\n    /// Performs a direct O(1) map lookup for the specified developer's balance.\n    /// This is the preferred method for querying individual balances as it does not iterate the map.\n    ///\n    /// # Arguments\n    /// * `developer` - Developer address to query\n    ///\n    /// # Returns\n    /// Balance in USDC micro-units, or 0 if no balance recorded\n    ///\n    /// # Safety\n    /// Safe for all use cases; does not depend on map iteration order.\n    pub fn get_developer_balance(env: Env, developer: Address) -\u003e i128 {\n        if !env.storage().instance().has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract not initialized\");\n        }\n        let inst = env.storage().instance();\n        let balances: Map\u003cAddress, i128\u003e = inst\n            .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n            .unwrap_or_else(|| Map::new(\u0026env));\n        balances.get(developer).unwrap_or(0)\n    }\n\n    /// Get all developer balances (for admin use)\n    ///\n    /// **CRITICAL**: Map iteration order is **NOT stable** and should not be relied upon.\n    /// Use this function only for administrative queries or reporting purposes.\n    /// For production integrations with many developers (\u003e100), implement off-chain indexing\n    /// by listening to `BalanceCreditedEvent` and maintaining a local database.\n    ///\n    /// # Iteration Behavior\n    /// - **Small maps (\u003c 100 entries)**: Safe to iterate; yields current state but order is unstable\n    /// - **Large maps (\u003e 100 entries)**: Consider off-chain indexing to avoid excessive gas costs\n    /// - **Order guarantees**: NONE. Do not use for routing, prioritization, or deterministic selection.\n    ///\n    /// # Returns\n    /// Vec of DeveloperBalance records. Iteration order is unstable and may vary between calls.\n    ///\n    /// # Use Cases\n    /// ✅ Administrative dashboards and reporting\n    /// ✅ Audit compliance queries\n    /// ✅ Contract state verification\n    /// ❌ Automatic routing based on iteration order\n    /// ❌ Deterministic selection of developers\n    ///\n    /// # Performance\n    /// Gas cost scales with number of developers:\n    /// - 50 developers: ~500 gas\n    /// - 100 developers: ~1,000 gas\n    /// - 500 developers: ~5,000 gas (consider off-chain indexing)\n    pub fn get_all_developer_balances(env: Env) -\u003e Vec\u003cDeveloperBalance\u003e {\n        if !env.storage().instance().has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract not initialized\");\n        }\n        let inst = env.storage().instance();\n        let balances: Map\u003cAddress, i128\u003e = inst\n            .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n            .unwrap_or_else(|| Map::new(\u0026env));\n        let mut result = Vec::new(\u0026env);\n        for (address, balance) in balances.iter() {\n            result.push_back(DeveloperBalance { address, balance });\n        }\n        result\n    }\n\n    /// Nominate a new admin (admin only).\n    ///\n    /// # Arguments\n    /// * `caller` - Current admin address; must match stored admin\n    /// * `new_admin` - Address to nominate as new admin\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Security\n    /// This implements a two-step admin transfer process:\n    /// 1. Current admin calls `set_admin()` to nominate new admin\n    /// 2. Nominated admin must call `accept_admin()` to complete transfer\n    ///\n    /// This prevents accidental admin loss and ensures the new admin\n    /// has control of their private keys before gaining privileges.\n    ///\n    /// # Events\n    /// Emits `admin_nominated` event with current and new admin addresses.\n    ///\n    /// # Panics\n    /// Panics if caller is not the current admin.\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let current_admin = Self::get_admin(env.clone());\n        if caller != current_admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY), \u0026new_admin);\n\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"admin_nominated\"),\n                current_admin,\n                new_admin,\n            ),\n            (),\n        );\n    }\n\n    /// Accept the admin role (pending admin only).\n    ///\n    /// # Access Control\n    /// Only the nominated pending admin can call this function.\n    ///\n    /// # Security\n    /// This is the second step of the two-step admin transfer process.\n    /// The nominated admin must explicitly accept, proving control of\n    /// their private keys before gaining admin privileges.\n    ///\n    /// # Events\n    /// Emits `admin_accepted` event with old and new admin addresses.\n    ///\n    /// # Panics\n    /// Panics if there is no pending admin transfer (i.e., `set_admin()`\n    /// was not called first).\n    pub fn accept_admin(env: Env) {\n        let inst = env.storage().instance();\n        let pending: Address = inst\n            .get(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY))\n            .expect(\"no admin transfer pending\");\n        pending.require_auth();\n\n        let current = Self::get_admin(env.clone());\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026pending);\n        inst.remove(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY));\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_accepted\"), current, pending), ());\n    }\n\n    /// Update vault address (admin only).\n    ///\n    /// # Arguments\n    /// * `caller` - Current admin address; must match stored admin\n    /// * `new_vault` - New vault contract address to register\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Security\n    /// The vault address controls which contract can send payments to\n    /// the settlement contract. Only trusted addresses should be set.\n    /// Changing the vault address immediately revokes access from the\n    /// old vault, so coordinate carefully during migrations.\n    ///\n    /// # Events\n    /// This function does not emit events. Monitor vault changes by\n    /// comparing the result of `get_vault()` across blocks.\n    ///\n    /// # Panics\n    /// Panics if caller is not the current admin.\n    pub fn set_vault(env: Env, caller: Address, new_vault: Address) {\n        caller.require_auth();\n        let current_admin = Self::get_admin(env.clone());\n        if caller != current_admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026Symbol::new(\u0026env, VAULT_KEY), \u0026new_vault);\n    }\n\n    /// Internal function to require authorized caller (vault or admin)\n    fn require_authorized_caller(env: Env, caller: Address) {\n        let vault = Self::get_vault(env.clone());\n        let admin = Self::get_admin(env.clone());\n        if caller != vault \u0026\u0026 caller != admin {\n            panic!(\"unauthorized: caller must be vault or admin\");\n        }\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_views;\n","traces":[{"line":74,"address":[11064731,11064666,11063456],"length":1,"stats":{"Line":5}},{"line":75,"address":[11063537,11063489],"length":1,"stats":{"Line":8}},{"line":76,"address":[11063658],"length":1,"stats":{"Line":4}},{"line":77,"address":[11064672],"length":1,"stats":{"Line":1}},{"line":79,"address":[11063810],"length":1,"stats":{"Line":4}},{"line":80,"address":[11063934],"length":1,"stats":{"Line":4}},{"line":81,"address":[11064066],"length":1,"stats":{"Line":4}},{"line":82,"address":[11064170,11064078],"length":1,"stats":{"Line":8}},{"line":85,"address":[11064250],"length":1,"stats":{"Line":4}},{"line":87,"address":[11064386],"length":1,"stats":{"Line":4}},{"line":110,"address":[11056624,11060256,11059060],"length":1,"stats":{"Line":4}},{"line":117,"address":[11056696],"length":1,"stats":{"Line":1}},{"line":118,"address":[11060218,11056806],"length":1,"stats":{"Line":1}},{"line":119,"address":[11056925],"length":1,"stats":{"Line":1}},{"line":120,"address":[11056957,11060198],"length":1,"stats":{"Line":2}},{"line":122,"address":[11056950,11056989],"length":1,"stats":{"Line":2}},{"line":123,"address":[11057127],"length":1,"stats":{"Line":1}},{"line":124,"address":[11057224,11059122],"length":1,"stats":{"Line":2}},{"line":125,"address":[11059170,11059139,11059241],"length":1,"stats":{"Line":3}},{"line":127,"address":[11059163],"length":1,"stats":{"Line":1}},{"line":128,"address":[10973745,10973744],"length":1,"stats":{"Line":1}},{"line":129,"address":[11059265],"length":1,"stats":{"Line":1}},{"line":130,"address":[11059375],"length":1,"stats":{"Line":1}},{"line":131,"address":[11059964,11059513],"length":1,"stats":{"Line":2}},{"line":132,"address":[11059613,11059525],"length":1,"stats":{"Line":2}},{"line":133,"address":[11059844],"length":1,"stats":{"Line":1}},{"line":134,"address":[11059778],"length":1,"stats":{"Line":1}},{"line":137,"address":[11059836],"length":1,"stats":{"Line":1}},{"line":141,"address":[11057138],"length":1,"stats":{"Line":1}},{"line":142,"address":[10973697,10973696],"length":1,"stats":{"Line":4}},{"line":144,"address":[11057343,11057247],"length":1,"stats":{"Line":2}},{"line":145,"address":[10973792,10973809],"length":1,"stats":{"Line":0}},{"line":146,"address":[11057501],"length":1,"stats":{"Line":1}},{"line":147,"address":[11057713,11057647],"length":1,"stats":{"Line":2}},{"line":148,"address":[11057640],"length":1,"stats":{"Line":1}},{"line":149,"address":[11057679],"length":1,"stats":{"Line":1}},{"line":150,"address":[11057745],"length":1,"stats":{"Line":1}},{"line":151,"address":[11057790],"length":1,"stats":{"Line":1}},{"line":152,"address":[11057928,11058483],"length":1,"stats":{"Line":2}},{"line":153,"address":[11057940,11058028],"length":1,"stats":{"Line":2}},{"line":154,"address":[11058363],"length":1,"stats":{"Line":1}},{"line":155,"address":[11058193],"length":1,"stats":{"Line":1}},{"line":158,"address":[11058315,11058257],"length":1,"stats":{"Line":2}},{"line":161,"address":[11058989,11058562],"length":1,"stats":{"Line":2}},{"line":162,"address":[11058665,11058574],"length":1,"stats":{"Line":2}},{"line":163,"address":[11058885],"length":1,"stats":{"Line":1}},{"line":164,"address":[11058829],"length":1,"stats":{"Line":1}},{"line":173,"address":[11065121,11064752],"length":1,"stats":{"Line":1}},{"line":174,"address":[11064778],"length":1,"stats":{"Line":1}},{"line":176,"address":[11064975,11064888],"length":1,"stats":{"Line":2}},{"line":177,"address":[10973936,10973937],"length":1,"stats":{"Line":3}},{"line":181,"address":[11065521,11065152],"length":1,"stats":{"Line":1}},{"line":182,"address":[11065178],"length":1,"stats":{"Line":1}},{"line":184,"address":[11065288,11065375],"length":1,"stats":{"Line":2}},{"line":185,"address":[10973985,10973984],"length":1,"stats":{"Line":3}},{"line":189,"address":[11056208,11056593],"length":1,"stats":{"Line":1}},{"line":190,"address":[11056238],"length":1,"stats":{"Line":1}},{"line":192,"address":[11056356,11056443],"length":1,"stats":{"Line":2}},{"line":193,"address":[10973648,10973649],"length":1,"stats":{"Line":3}},{"line":209,"address":[11060400,11061460,11061422],"length":1,"stats":{"Line":2}},{"line":210,"address":[11060492,11060829,11060423],"length":1,"stats":{"Line":3}},{"line":211,"address":[11060770],"length":1,"stats":{"Line":1}},{"line":213,"address":[11060874],"length":1,"stats":{"Line":1}},{"line":215,"address":[11061020],"length":1,"stats":{"Line":1}},{"line":216,"address":[10973872,10973889],"length":1,"stats":{"Line":0}},{"line":217,"address":[11061225],"length":1,"stats":{"Line":1}},{"line":247,"address":[11063372,11062064],"length":1,"stats":{"Line":1}},{"line":248,"address":[11062476,11062091,11062139],"length":1,"stats":{"Line":3}},{"line":249,"address":[11062417],"length":1,"stats":{"Line":1}},{"line":251,"address":[11062521],"length":1,"stats":{"Line":1}},{"line":253,"address":[11062667],"length":1,"stats":{"Line":1}},{"line":254,"address":[10973904,10973921],"length":1,"stats":{"Line":0}},{"line":255,"address":[11062880],"length":1,"stats":{"Line":1}},{"line":256,"address":[11063056,11062963,11062903],"length":1,"stats":{"Line":3}},{"line":257,"address":[11063167,11063367],"length":1,"stats":{"Line":2}},{"line":259,"address":[11063274],"length":1,"stats":{"Line":1}},{"line":284,"address":[11065552,11066569,11066659],"length":1,"stats":{"Line":2}},{"line":285,"address":[11065587],"length":1,"stats":{"Line":1}},{"line":286,"address":[11065673],"length":1,"stats":{"Line":1}},{"line":287,"address":[11065710,11065772],"length":1,"stats":{"Line":2}},{"line":288,"address":[11066585,11065798],"length":1,"stats":{"Line":2}},{"line":290,"address":[11065791],"length":1,"stats":{"Line":1}},{"line":292,"address":[11065857],"length":1,"stats":{"Line":0}},{"line":294,"address":[11066117,11066459],"length":1,"stats":{"Line":2}},{"line":296,"address":[11066129],"length":1,"stats":{"Line":1}},{"line":297,"address":[11066209],"length":1,"stats":{"Line":1}},{"line":298,"address":[11066256],"length":1,"stats":{"Line":1}},{"line":320,"address":[11056115,11054912,11056162],"length":1,"stats":{"Line":2}},{"line":321,"address":[11054996,11054927],"length":1,"stats":{"Line":2}},{"line":323,"address":[11055117],"length":1,"stats":{"Line":1}},{"line":325,"address":[11055324],"length":1,"stats":{"Line":1}},{"line":327,"address":[11055353],"length":1,"stats":{"Line":1}},{"line":328,"address":[11055486,11055396],"length":1,"stats":{"Line":2}},{"line":329,"address":[11055558],"length":1,"stats":{"Line":1}},{"line":331,"address":[11055685],"length":1,"stats":{"Line":1}},{"line":332,"address":[11055697],"length":1,"stats":{"Line":1}},{"line":356,"address":[11067371,11067335,11066672],"length":1,"stats":{"Line":2}},{"line":357,"address":[11066707],"length":1,"stats":{"Line":1}},{"line":358,"address":[11066769],"length":1,"stats":{"Line":1}},{"line":359,"address":[11066860,11066798],"length":1,"stats":{"Line":2}},{"line":360,"address":[11066886,11067351],"length":1,"stats":{"Line":2}},{"line":362,"address":[11066879],"length":1,"stats":{"Line":1}},{"line":364,"address":[11066945],"length":1,"stats":{"Line":0}},{"line":368,"address":[11062037,11061584],"length":1,"stats":{"Line":1}},{"line":369,"address":[11061612,11061670],"length":1,"stats":{"Line":2}},{"line":370,"address":[11061751,11061690],"length":1,"stats":{"Line":3}},{"line":371,"address":[11061763,11061828,11061858],"length":1,"stats":{"Line":3}},{"line":372,"address":[11062017,11061891],"length":1,"stats":{"Line":2}}],"covered":103,"coverable":108},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","settlement","src","test.rs"],"content":"#[cfg(test)]\nmod settlement_tests {\n    extern crate std;\n\n    use crate::{CalloraSettlement, CalloraSettlementClient};\n    use soroban_sdk::testutils::{Address as _, Ledger as _};\n    use soroban_sdk::{Address, Env, Map, Symbol};\n    use std::any::Any;\n    use std::panic::{catch_unwind, AssertUnwindSafe};\n\n    fn setup_contract() -\u003e (Env, Address, Address, Address, Address) {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        let third_party = Address::generate(\u0026env);\n        (env, addr, admin, vault, third_party)\n    }\n\n    fn panic_message(err: std::boxed::Box\u003cdyn Any + Send\u003e) -\u003e std::string::String {\n        if let Some(message) = err.downcast_ref::\u003c\u0026str\u003e() {\n            std::string::String::from(*message)\n        } else if let Some(message) = err.downcast_ref::\u003cstd::string::String\u003e() {\n            message.clone()\n        } else {\n            std::string::String::from(\"\u003cnon-string panic payload\u003e\")\n        }\n    }\n\n    #[test]\n    fn test_settlement_initialization() {\n        let env = Env::default();\n        env.mock_all_auths();\n        env.ledger().set_timestamp(1_700_000_000);\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        client.init(\u0026admin, \u0026vault);\n\n        env.as_contract(\u0026addr, || {\n            let inst = env.storage().instance();\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"admin\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"vault\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"developer_balances\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"global_pool\")));\n            let balances: Map\u003cAddress, i128\u003e =\n                inst.get(\u0026Symbol::new(\u0026env, \"developer_balances\")).unwrap();\n\n            assert_eq!(balances.len(), 0);\n        });\n\n        assert_eq!(client.get_admin(), admin);\n        assert_eq!(client.get_vault(), vault);\n\n        let global_pool = client.get_global_pool();\n        assert_eq!(global_pool.total_balance, 0);\n        assert_eq!(global_pool.last_updated, 1_700_000_000);\n\n        let all_balances = client.get_all_developer_balances();\n        assert_eq!(all_balances.len(), 0);\n        assert_eq!(client.get_developer_balance(\u0026developer), 0);\n    }\n\n    #[test]\n    fn test_receive_payment_to_pool() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n\n        let global_pool = client.get_global_pool();\n        assert_eq!(global_pool.total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_receive_payment_to_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 500i128);\n        assert_eq!(client.get_global_pool().total_balance, 0);\n    }\n\n    #[test]\n    fn test_receive_multiple_payments_accumulate() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026vault, \u0026150i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 250i128);\n    }\n\n    #[test]\n    fn test_get_developer_balance_when_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let balance = client.get_developer_balance(\u0026developer);\n        assert_eq!(balance, 0);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_when_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let all = client.get_all_developer_balances();\n        assert_eq!(all.len(), 0);\n    }\n\n    #[test]\n    fn test_admin_can_receive_payment_to_pool() {\n        // Admin can route payments directly to global pool (not just via vault)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        client.receive_payment(\u0026admin, \u0026100i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    fn test_admin_can_receive_payment_to_developer() {\n        // Admin routing a payment directly to a developer (not via vault)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026admin, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 200i128);\n    }\n\n    #[test]\n    fn test_pool_accumulates_across_multiple_payments() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026400i128, \u0026true, \u0026None);\n        client.receive_payment(\u0026vault, \u0026600i128, \u0026true, \u0026None);\n\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_get_developer_balance_returns_zero_for_unknown() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let stranger = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        assert_eq!(client.get_developer_balance(\u0026stranger), 0i128);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let dev1 = Address::generate(\u0026env);\n        let dev2 = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026300i128, \u0026false, \u0026Some(dev1.clone()));\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(dev2.clone()));\n\n        let all = client.get_all_developer_balances();\n        assert_eq!(all.len(), 2);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let all = client.get_all_developer_balances();\n        assert_eq!(all.len(), 0);\n    }\n\n    #[test]\n    fn test_set_admin_two_step() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        assert_eq!(client.get_admin(), admin); // Still old admin\n\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"no admin transfer pending\")]\n    fn test_accept_admin_fails_if_not_nominated() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.accept_admin();\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_set_admin_unauthorized() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Third party cannot set admin\n        client.set_admin(\u0026vault, \u0026new_admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_set_vault_unauthorized() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let attacker = Address::generate(\u0026env);\n        client.set_vault(\u0026attacker, \u0026new_vault);\n    }\n\n    #[test]\n    fn test_set_vault() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_vault(\u0026admin, \u0026new_vault);\n        assert_eq!(client.get_vault(), new_vault);\n    }\n\n    // ── admin rotation edge cases ────────────────────────────────────────────\n\n    #[test]\n    fn test_set_admin_to_same_address_succeeds() {\n        // Admin can nominate themselves again (useful for re-confirming control)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026admin);\n        // Still current admin until accept\n        assert_eq!(client.get_admin(), admin);\n\n        client.accept_admin();\n        assert_eq!(client.get_admin(), admin);\n    }\n\n    #[test]\n    fn test_set_vault_to_same_address_succeeds() {\n        // Admin can update vault to same address (no-op but valid)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_vault(\u0026admin, \u0026vault);\n        assert_eq!(client.get_vault(), vault);\n    }\n\n    #[test]\n    fn test_rapid_consecutive_admin_updates() {\n        // Admin can change nomination before acceptance\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin1 = Address::generate(\u0026env);\n        let new_admin2 = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // First nomination\n        client.set_admin(\u0026admin, \u0026new_admin1);\n        // Change nomination before acceptance\n        client.set_admin(\u0026admin, \u0026new_admin2);\n        // Only second nominee can accept\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin2);\n    }\n\n    #[test]\n    fn test_admin_cannot_accept_own_nomination() {\n        // Current admin cannot bypass two-step process\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026admin);\n        // Admin must still accept to complete transfer\n        client.accept_admin();\n        assert_eq!(client.get_admin(), admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_pending_admin_cannot_set_admin() {\n        // Pending admin has no privileges until accepted\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        // New admin tries to set another admin before accepting\n        client.set_admin(\u0026new_admin, \u0026vault);\n    }\n\n    #[test]\n    fn test_vault_update_after_admin_rotation() {\n        // Ensure vault updates work correctly after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // New admin updates vault\n        client.set_vault(\u0026new_admin, \u0026new_vault);\n        assert_eq!(client.get_vault(), new_vault);\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    fn test_admin_rotation_preserves_state() {\n        // Admin rotation doesn't affect pool or balances\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Add some balance\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026false, \u0026Some(developer.clone()));\n        let dev_balance_before = client.get_developer_balance(\u0026developer);\n        let pool_before = client.get_global_pool();\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // State preserved\n        assert_eq!(client.get_developer_balance(\u0026developer), dev_balance_before);\n        assert_eq!(\n            client.get_global_pool().total_balance,\n            pool_before.total_balance\n        );\n    }\n\n    // ── event emission tests ────────────────────────────────────────────────\n\n    #[test]\n    fn test_set_admin_emits_nomination_event() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n\n        let events = env.events().all();\n        let nom_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"admin_nominated\")\n                }\n            })\n            .expect(\"expected admin_nominated event\");\n\n        let topic_current: Address = nom_ev.1.get(1).unwrap().into_val(\u0026env);\n        let topic_new: Address = nom_ev.1.get(2).unwrap().into_val(\u0026env);\n        assert_eq!(topic_current, admin);\n        assert_eq!(topic_new, new_admin);\n    }\n\n    #[test]\n    fn test_accept_admin_emits_accepted_event() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        let events = env.events().all();\n        let acc_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"admin_accepted\")\n                }\n            })\n            .expect(\"expected admin_accepted event\");\n\n        let topic_old: Address = acc_ev.1.get(1).unwrap().into_val(\u0026env);\n        let topic_new: Address = acc_ev.1.get(2).unwrap().into_val(\u0026env);\n        assert_eq!(topic_old, admin);\n        assert_eq!(topic_new, new_admin);\n    }\n\n    // ── panic / error paths ──────────────────────────────────────────────────\n\n    #[test]\n    #[should_panic(expected = \"settlement contract already initialized\")]\n    fn test_double_init_panics() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        client.init(\u0026admin, \u0026vault);\n    }\n\n    #[test]\n    #[should_panic(expected = \"amount must be positive\")]\n    fn test_receive_payment_zero_amount() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00260i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"amount must be positive\")]\n    fn test_receive_payment_negative_amount() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026-1i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"developer address required when to_pool=false\")]\n    fn test_receive_payment_pool_false_no_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026None);\n    }\n\n    #[test]\n    fn test_receive_payment_authorization_matrix() {\n        enum CallerRole {\n            Vault,\n            Admin,\n            ThirdParty,\n        }\n\n        struct Case {\n            name: \u0026'static str,\n            role: CallerRole,\n            expected: Result\u003c(), \u0026'static str\u003e,\n        }\n\n        let cases = [\n            Case {\n                name: \"vault address succeeds\",\n                role: CallerRole::Vault,\n                expected: Ok(()),\n            },\n            Case {\n                name: \"admin address succeeds\",\n                role: CallerRole::Admin,\n                expected: Ok(()),\n            },\n            Case {\n                name: \"third party fails\",\n                role: CallerRole::ThirdParty,\n                expected: Err(\"unauthorized: caller must be vault or admin\"),\n            },\n        ];\n\n        for case in cases {\n            let (env, addr, admin, vault, third_party) = setup_contract();\n            let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n            let caller = match case.role {\n                CallerRole::Vault =\u003e vault,\n                CallerRole::Admin =\u003e admin,\n                CallerRole::ThirdParty =\u003e third_party,\n            };\n\n            let result = catch_unwind(AssertUnwindSafe(|| {\n                client.receive_payment(\u0026caller, \u0026100i128, \u0026true, \u0026None);\n            }));\n\n            match case.expected {\n                Ok(()) =\u003e {\n                    assert!(result.is_ok(), \"expected success for case: {}\", case.name);\n                    let global_pool = client.get_global_pool();\n                    assert_eq!(global_pool.total_balance, 100i128);\n                }\n                Err(expected_panic) =\u003e {\n                    let err = result.expect_err(\"expected panic but call succeeded\");\n                    let message = panic_message(err);\n                    assert!(\n                        message.contains(expected_panic),\n                        \"case: {} (got panic: {})\",\n                        case.name,\n                        message\n                    );\n                }\n            }\n        }\n    }\n\n    // ── event shape tests ────────────────────────────────────────────────────\n\n    #[test]\n    fn test_payment_received_event_to_pool() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n\n        let events = env.events().all();\n        let ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"payment_received\")\n                }\n            })\n            .expect(\"expected payment_received event\");\n\n        let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n        assert_eq!(topic1, vault);\n\n        let data: crate::PaymentReceivedEvent = ev.2.into_val(\u0026env);\n        assert_eq!(data.from_vault, vault);\n        assert_eq!(data.amount, 1000i128);\n        assert!(data.to_pool);\n        assert!(data.developer.is_none());\n    }\n\n    #[test]\n    fn test_payment_received_and_balance_credited_events_to_developer() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        let events = env.events().all();\n\n        let pr_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"payment_received\")\n                }\n            })\n            .expect(\"expected payment_received event\");\n\n        let pr_data: crate::PaymentReceivedEvent = pr_ev.2.into_val(\u0026env);\n        assert!(!pr_data.to_pool);\n        assert_eq!(pr_data.developer, Some(developer.clone()));\n\n        let bc_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"balance_credited\")\n                }\n            })\n            .expect(\"expected balance_credited event\");\n\n        let topic1: Address = bc_ev.1.get(1).unwrap().into_val(\u0026env);\n        assert_eq!(topic1, developer);\n\n        let bc_data: crate::BalanceCreditedEvent = bc_ev.2.into_val(\u0026env);\n        assert_eq!(bc_data.developer, developer);\n        assert_eq!(bc_data.amount, 500i128);\n        assert_eq!(bc_data.new_balance, 500i128);\n    }\n\n    #[test]\n    fn test_balance_credited_new_balance_is_cumulative() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026300i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // grab the last balance_credited event\n        let events = env.events().all();\n        let bc_ev = events\n            .iter()\n            .rev()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"balance_credited\")\n                }\n            })\n            .expect(\"expected balance_credited event\");\n\n        let bc_data: crate::BalanceCreditedEvent = bc_ev.2.into_val(\u0026env);\n        assert_eq!(bc_data.new_balance, 500i128);\n    }\n\n    // ── regression tests: ensure settlement logic intact after rotation ─────\n\n    #[test]\n    fn test_receive_payment_works_after_admin_rotation() {\n        // Ensure payment processing still works after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // Vault can still send payments\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_receive_payment_works_after_vault_update() {\n        // Ensure payment processing works with new vault address\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Update vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // Old vault cannot send payments\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized\"));\n\n        // New vault can send payments\n        client.receive_payment(\u0026new_vault, \u00261000i128, \u0026true, \u0026None);\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_developer_withdrawal_after_admin_rotation() {\n        // Ensure developer balances accessible after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Credit developer\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // Balance still accessible\n        assert_eq!(client.get_developer_balance(\u0026developer), 500i128);\n\n        // Admin can still view all balances\n        let all_balances = client.get_all_developer_balances();\n        assert_eq!(all_balances.len(), 1);\n        assert_eq!(all_balances.get(0).unwrap().balance, 500i128);\n    }\n\n    #[test]\n    fn test_multiple_payments_accumulate_after_vault_update() {\n        // Ensure accumulation logic works correctly after vault changes\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Some payments from old vault\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Update vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // More payments from new vault\n        client.receive_payment(\u0026new_vault, \u0026150i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026new_vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Total should accumulate correctly\n        assert_eq!(client.get_developer_balance(\u0026developer), 450i128);\n    }\n\n    #[test]\n    fn test_global_pool_timestamp_updates_after_admin_change() {\n        // Ensure pool timestamp updates correctly regardless of admin\n        let env = Env::default();\n        env.mock_all_auths();\n        env.ledger().set_timestamp(1_700_000_000);\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Initial payment\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        let pool_before = client.get_global_pool();\n        assert_eq!(pool_before.last_updated, 1_700_000_000);\n\n        // Rotate admin and advance time\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n        env.ledger().set_timestamp(1_700_000_100);\n\n        // New payment updates timestamp\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026true, \u0026None);\n        let pool_after = client.get_global_pool();\n        assert_eq!(pool_after.last_updated, 1_700_000_100);\n        assert_eq!(pool_after.total_balance, 1500i128);\n    }\n\n    /// `last_updated` reflects the ledger timestamp at the moment of each pool credit.\n    #[test]\n    fn test_global_pool_last_updated_on_receive_payment() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        env.ledger().set_timestamp(1_000);\n        client.init(\u0026admin, \u0026vault);\n        assert_eq!(client.get_global_pool().last_updated, 1_000);\n\n        // Advance time and credit pool � last_updated must change\n        env.ledger().set_timestamp(2_000);\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026true, \u0026None);\n        let pool = client.get_global_pool();\n        assert_eq!(pool.last_updated, 2_000);\n        assert_eq!(pool.total_balance, 100i128);\n\n        // Advance again � each credit stamps the new time\n        env.ledger().set_timestamp(3_000);\n        client.receive_payment(\u0026vault, \u002650i128, \u0026true, \u0026None);\n        let pool2 = client.get_global_pool();\n        assert_eq!(pool2.last_updated, 3_000);\n        assert_eq!(pool2.total_balance, 150i128);\n    }\n\n    /// Routing to a developer does NOT update `last_updated` on the global pool.\n    #[test]\n    fn test_global_pool_last_updated_unchanged_for_developer_payment() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        env.ledger().set_timestamp(1_000);\n        client.init(\u0026admin, \u0026vault);\n\n        env.ledger().set_timestamp(5_000);\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Pool timestamp must still be the init timestamp\n        assert_eq!(client.get_global_pool().last_updated, 1_000);\n        assert_eq!(client.get_global_pool().total_balance, 0);\n        assert_eq!(client.get_developer_balance(\u0026developer), 200i128);\n    }\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","settlement","src","test_views.rs"],"content":"use crate::{CalloraSettlement, CalloraSettlementClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_admin_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_admin();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_vault_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_vault();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_global_pool_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_global_pool();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_developer_balance_uninitialized_panics() {\n    let env = Env::default();\n    let dev = Address::generate(\u0026env);\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_developer_balance(\u0026dev);\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_all_developer_balances_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_all_developer_balances();\n}\n\n#[test]\nfn test_get_developer_balance_returns_zero_when_not_stored() {\n    let env = Env::default();\n    env.mock_all_auths();\n\n    let admin = Address::generate(\u0026env);\n    let vault = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026admin, \u0026vault);\n\n    let balance = client.get_developer_balance(\u0026dev);\n    assert_eq!(balance, 0);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","vault","src","lib.rs"],"content":"//! # Callora Vault Contract  deposit/withdraw/deduct/distribute with pause circuit-breaker.\n#![no_std]\nuse soroban_sdk::{contract, contractimpl, contracttype, token, Address, Env, String, Symbol, Vec};\n\n#[contracttype]\n#[derive(Clone)]\npub struct DeductItem {\n    pub amount: i128,\n    pub request_id: Option\u003cSymbol\u003e,\n}\n\n#[contracttype]\n#[derive(Clone)]\npub struct VaultMeta {\n    pub owner: Address,\n    pub balance: i128,\n    pub authorized_caller: Option\u003cAddress\u003e,\n    pub min_deposit: i128,\n}\n\n#[contracttype]\npub enum StorageKey {\n    Meta,\n    AllowedDepositors,\n    Admin,\n    UsdcToken,\n    Settlement,\n    RevenuePool,\n    MaxDeduct,\n    Paused,\n    Metadata(String),\n    PendingOwner,\n    PendingAdmin,\n    DepositorList,\n}\n\npub const DEFAULT_MAX_DEDUCT: i128 = i128::MAX;\npub const MAX_BATCH_SIZE: u32 = 50;\npub const MAX_METADATA_LEN: u32 = 256;\npub const MAX_OFFERING_ID_LEN: u32 = 64;\n\n#[contract]\npub struct CalloraVault;\n\n#[contractimpl]\nimpl CalloraVault {\n    #[allow(clippy::too_many_arguments)]\n    pub fn init(\n        env: Env,\n        owner: Address,\n        usdc_token: Address,\n        initial_balance: Option\u003ci128\u003e,\n        authorized_caller: Option\u003cAddress\u003e,\n        min_deposit: Option\u003ci128\u003e,\n        revenue_pool: Option\u003cAddress\u003e,\n        max_deduct: Option\u003ci128\u003e,\n    ) -\u003e VaultMeta {\n        owner.require_auth();\n        let inst = env.storage().instance();\n        if inst.has(\u0026StorageKey::Meta) {\n            panic!(\"vault already initialized\");\n        }\n        assert!(\n            usdc_token != env.current_contract_address(),\n            \"usdc_token cannot be vault address\"\n        );\n        if let Some(p) = \u0026revenue_pool {\n            assert!(\n                p != \u0026env.current_contract_address(),\n                \"revenue_pool cannot be vault address\"\n            );\n        }\n        let balance = initial_balance.unwrap_or(0);\n        assert!(balance \u003e= 0, \"initial balance must be non-negative\");\n        let min_d = min_deposit.unwrap_or(0);\n        assert!(min_d \u003e= 0, \"min_deposit must be non-negative\");\n        let max_d = max_deduct.unwrap_or(DEFAULT_MAX_DEDUCT);\n        assert!(max_d \u003e 0, \"max_deduct must be positive\");\n        assert!(min_d \u003c= max_d, \"min_deposit cannot exceed max_deduct\");\n        if balance \u003e 0 {\n            let onchain_usdc_balance =\n                token::Client::new(\u0026env, \u0026usdc_token).balance(\u0026env.current_contract_address());\n            assert!(\n                onchain_usdc_balance \u003e= balance,\n                \"initial_balance exceeds on-ledger USDC balance\"\n            );\n        }\n        let meta = VaultMeta {\n            owner: owner.clone(),\n            balance,\n            authorized_caller,\n            min_deposit: min_d,\n        };\n        inst.set(\u0026StorageKey::Meta, \u0026meta);\n        inst.set(\u0026StorageKey::UsdcToken, \u0026usdc_token);\n        inst.set(\u0026StorageKey::Admin, \u0026owner);\n        if let Some(p) = revenue_pool {\n            inst.set(\u0026StorageKey::RevenuePool, \u0026p);\n        }\n        inst.set(\u0026StorageKey::MaxDeduct, \u0026max_d);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"init\"), owner.clone()), balance);\n        meta\n    }\n\n    pub fn is_authorized_depositor(env: Env, caller: Address) -\u003e bool {\n        let meta = Self::get_meta(env.clone());\n        if caller == meta.owner {\n            return true;\n        }\n        let list: Vec\u003cAddress\u003e = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::DepositorList)\n            .unwrap_or(Vec::new(\u0026env));\n        list.contains(\u0026caller)\n    }\n\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Admin)\n            .expect(\"vault not initialized\")\n    }\n\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let cur = Self::get_admin(env.clone());\n        if caller != cur {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::PendingAdmin, \u0026new_admin);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_nominated\"), cur, new_admin), ());\n    }\n\n    pub fn accept_admin(env: Env) {\n        let pending: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::PendingAdmin)\n            .expect(\"no admin transfer pending\");\n        pending.require_auth();\n        let cur = Self::get_admin(env.clone());\n        env.storage().instance().set(\u0026StorageKey::Admin, \u0026pending);\n        env.storage().instance().remove(\u0026StorageKey::PendingAdmin);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_accepted\"), cur, pending), ());\n    }\n\n    pub fn require_owner(env: Env, caller: Address) {\n        let meta = Self::get_meta(env.clone());\n        assert!(caller == meta.owner, \"unauthorized: owner only\");\n    }\n\n    pub fn distribute(env: Env, caller: Address, to: Address, amount: i128) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        if amount \u003c= 0 {\n            panic!(\"amount must be positive\");\n        }\n        let usdc_addr: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_addr);\n        let vb = usdc.balance(\u0026env.current_contract_address());\n        if vb \u003c amount {\n            panic!(\"insufficient USDC balance\");\n        }\n        usdc.transfer(\u0026env.current_contract_address(), \u0026to, \u0026amount);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"distribute\"), to), amount);\n    }\n\n    pub fn get_meta(env: Env) -\u003e VaultMeta {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Meta)\n            .unwrap_or_else(|| panic!(\"vault not initialized\"))\n    }\n\n    pub fn set_allowed_depositor(env: Env, caller: Address, depositor: Option\u003cAddress\u003e) {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller);\n        match depositor {\n            Some(d) =\u003e {\n                let mut list: Vec\u003cAddress\u003e = env\n                    .storage()\n                    .instance()\n                    .get(\u0026StorageKey::DepositorList)\n                    .unwrap_or(Vec::new(\u0026env));\n                if !list.contains(\u0026d) {\n                    env.storage()\n                        .instance()\n                        .set(\u0026StorageKey::AllowedDepositors, \u0026d);\n                    list.push_back(d);\n                }\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::DepositorList, \u0026list);\n            }\n            None =\u003e {\n                env.storage()\n                    .instance()\n                    .remove(\u0026StorageKey::AllowedDepositors);\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::DepositorList, \u0026Vec::\u003cAddress\u003e::new(\u0026env));\n            }\n        }\n    }\n\n    pub fn clear_allowed_depositors(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller);\n        env.storage()\n            .instance()\n            .remove(\u0026StorageKey::AllowedDepositors);\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::DepositorList, \u0026Vec::\u003cAddress\u003e::new(\u0026env));\n    }\n\n    pub fn get_allowed_depositors(env: Env) -\u003e Vec\u003cAddress\u003e {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::DepositorList)\n            .unwrap_or(Vec::new(\u0026env))\n    }\n\n    pub fn set_authorized_caller(env: Env, caller: Address) {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        meta.authorized_caller = Some(caller.clone());\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"set_auth_caller\"), meta.owner.clone()),\n            caller,\n        );\n    }\n\n    pub fn pause(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_admin_or_owner(env.clone(), \u0026caller);\n        assert!(!Self::is_paused(env.clone()), \"vault already paused\");\n        env.storage().instance().set(\u0026StorageKey::Paused, \u0026true);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"vault_paused\"), caller), ());\n    }\n\n    pub fn unpause(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_admin_or_owner(env.clone(), \u0026caller);\n        assert!(Self::is_paused(env.clone()), \"vault not paused\");\n        env.storage().instance().set(\u0026StorageKey::Paused, \u0026false);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"vault_unpaused\"), caller), ());\n    }\n\n    /// Returns the current pause state of the vault.\n    ///\n    /// # Purpose\n    /// Exposes the pause circuit-breaker state to enable off-chain indexers,\n    /// monitoring systems, and external contracts to query whether the vault\n    /// is currently paused. This allows reliable tracking of contract availability\n    /// for deposit, deduct, and batch_deduct operations.\n    ///\n    /// # Return Value\n    /// Returns `true` if the vault is currently paused, `false` otherwise.\n    /// Before the first `pause()` call, this function returns `false` (the safe\n    /// default state), ensuring that uninitialized pause state does not block\n    /// legitimate operations.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Deterministic**: Identical storage state always produces identical output.\n    /// - **Non-panicking**: Never panics, even before initialization or when pause\n    ///   state is unset. Returns `false` as the safe default.\n    /// - **Consistent**: Always reflects the latest committed pause/unpause state\n    ///   from contract storage, never stale or cached values.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain monitoring systems. Call this\n    /// function to determine whether the vault is accepting deposits and processing\n    /// deductions. When `is_paused()` returns `true`, the following operations are\n    /// blocked:\n    /// - `deposit()`\n    /// - `deduct()`\n    /// - `batch_deduct()`\n    ///\n    /// The pause state is consistent with emitted events:\n    /// - `vault_paused` event → `is_paused()` returns `true`\n    /// - `vault_unpaused` event → `is_paused()` returns `false`\n    ///\n    /// # Example\n    /// ```ignore\n    /// if vault.is_paused() {\n    ///     // Vault is paused - deposits and deductions are blocked\n    ///     // Only admin/owner operations like withdraw() are allowed\n    /// } else {\n    ///     // Vault is operational - all functions available\n    /// }\n    /// ```\n    pub fn is_paused(env: Env) -\u003e bool {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Paused)\n            .unwrap_or(false)\n    }\n\n    pub fn get_max_deduct(env: Env) -\u003e i128 {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::MaxDeduct)\n            .unwrap_or(DEFAULT_MAX_DEDUCT)\n    }\n\n    pub fn deposit(env: Env, caller: Address, amount: i128) -\u003e i128 {\n        caller.require_auth();\n        Self::require_not_paused(env.clone());\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(\n            Self::is_authorized_depositor(env.clone(), caller.clone()),\n            \"unauthorized: only owner or allowed depositor can deposit\"\n        );\n        let meta = Self::get_meta(env.clone());\n        assert!(\n            amount \u003e= meta.min_deposit,\n            \"deposit below minimum: {} \u003c {}\",\n            amount,\n            meta.min_deposit\n        );\n        let usdc_addr: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_addr);\n        usdc.transfer(\u0026caller, \u0026env.current_contract_address(), \u0026amount);\n        let mut meta = Self::get_meta(env.clone());\n        meta.balance = meta\n            .balance\n            .checked_add(amount)\n            .unwrap_or_else(|| panic!(\"balance overflow\"));\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"deposit\"), caller.clone()),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn deduct(env: Env, caller: Address, amount: i128, request_id: Option\u003cSymbol\u003e) -\u003e i128 {\n        caller.require_auth();\n        Self::require_not_paused(env.clone());\n        Self::require_routing_configured(env.clone());\n        assert!(amount \u003e 0, \"amount must be positive\");\n        let max_d = Self::get_max_deduct(env.clone());\n        assert!(amount \u003c= max_d, \"deduct amount exceeds max_deduct\");\n        let meta = Self::get_meta(env.clone());\n        let auth = match \u0026meta.authorized_caller {\n            Some(ac) =\u003e caller == *ac || caller == meta.owner,\n            None =\u003e true,\n        };\n        assert!(auth, \"unauthorized caller\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let mut meta = Self::get_meta(env.clone());\n        meta.balance = meta.balance.checked_sub(amount).unwrap();\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        let inst = env.storage().instance();\n        if let Some(s) = inst.get::\u003cStorageKey, Address\u003e(\u0026StorageKey::Settlement) {\n            let ut: Address = inst.get(\u0026StorageKey::UsdcToken).unwrap();\n            Self::transfer_funds(\u0026env, \u0026ut, \u0026s, amount);\n        } else if inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::RevenuePool)\n            .is_some()\n        {\n            Self::transfer_to_revenue_pool(env.clone(), amount);\n        }\n        let rid = request_id.unwrap_or(Symbol::new(\u0026env, \"\"));\n        env.events().publish(\n            (Symbol::new(\u0026env, \"deduct\"), caller, rid),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn batch_deduct(env: Env, caller: Address, items: Vec\u003cDeductItem\u003e) -\u003e i128 {\n        caller.require_auth();\n        Self::require_not_paused(env.clone());\n        Self::require_routing_configured(env.clone());\n        let n = items.len();\n        assert!(n \u003e 0, \"batch_deduct requires at least one item\");\n        assert!(n \u003c= MAX_BATCH_SIZE, \"batch too large\");\n        let max_d = Self::get_max_deduct(env.clone());\n        let mut meta = Self::get_meta(env.clone());\n        let auth = match \u0026meta.authorized_caller {\n            Some(ac) =\u003e caller == *ac || caller == meta.owner,\n            None =\u003e true,\n        };\n        assert!(auth, \"unauthorized caller\");\n        let mut running = meta.balance;\n        let mut total: i128 = 0;\n        for item in items.iter() {\n            assert!(item.amount \u003e 0, \"amount must be positive\");\n            assert!(item.amount \u003c= max_d, \"deduct amount exceeds max_deduct\");\n            assert!(running \u003e= item.amount, \"insufficient balance\");\n            running = running.checked_sub(item.amount).unwrap();\n            total = total.checked_add(item.amount).unwrap();\n        }\n        meta.balance = running;\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        let mut eb = meta.balance.checked_add(total).unwrap();\n        for item in items.iter() {\n            eb = eb.checked_sub(item.amount).unwrap();\n            let rid = item.request_id.clone().unwrap_or(Symbol::new(\u0026env, \"\"));\n            env.events().publish(\n                (Symbol::new(\u0026env, \"deduct\"), caller.clone(), rid),\n                (item.amount, eb),\n            );\n        }\n        let inst = env.storage().instance();\n        if let Some(s) = inst.get::\u003cStorageKey, Address\u003e(\u0026StorageKey::Settlement) {\n            let ut: Address = inst.get(\u0026StorageKey::UsdcToken).unwrap();\n            Self::transfer_funds(\u0026env, \u0026ut, \u0026s, total);\n        } else if inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::RevenuePool)\n            .is_some()\n        {\n            Self::transfer_to_revenue_pool(env.clone(), total);\n        }\n        meta.balance\n    }\n\n    pub fn balance(env: Env) -\u003e i128 {\n        Self::get_meta(env).balance\n    }\n\n    pub fn transfer_ownership(env: Env, new_owner: Address) {\n        let meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(\n            new_owner != meta.owner,\n            \"new_owner must be different from current owner\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::PendingOwner, \u0026new_owner);\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"ownership_nominated\"),\n                meta.owner,\n                new_owner,\n            ),\n            (),\n        );\n    }\n\n    pub fn accept_ownership(env: Env) {\n        let pending: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::PendingOwner)\n            .expect(\"no ownership transfer pending\");\n        pending.require_auth();\n        let mut meta = Self::get_meta(env.clone());\n        let old = meta.owner.clone();\n        meta.owner = pending;\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.storage().instance().remove(\u0026StorageKey::PendingOwner);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"ownership_accepted\"), old, meta.owner),\n            (),\n        );\n    }\n\n    pub fn withdraw(env: Env, amount: i128) -\u003e i128 {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let ua: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026ua);\n        usdc.transfer(\u0026env.current_contract_address(), \u0026meta.owner, \u0026amount);\n        meta.balance = meta.balance.checked_sub(amount).unwrap();\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"withdraw\"), meta.owner.clone()),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn withdraw_to(env: Env, to: Address, amount: i128) -\u003e i128 {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let ua: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026ua);\n        usdc.transfer(\u0026env.current_contract_address(), \u0026to, \u0026amount);\n        meta.balance = meta.balance.checked_sub(amount).unwrap();\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"withdraw_to\"), meta.owner.clone(), to),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    /// Sets or clears the revenue pool routing address.\n    ///\n    /// # Purpose\n    /// Configures where USDC is routed during deduct operations when no settlement\n    /// address is configured. The revenue pool serves as the fallback routing destination.\n    ///\n    /// # Validation\n    /// - Caller must be admin\n    /// - Revenue pool address cannot be the vault's own address\n    /// - Setting to `None` clears the configuration\n    ///\n    /// # Safety Guarantees\n    /// - Atomic update: state is either fully updated or unchanged\n    /// - Emits event for audit trail (`set_revenue_pool` or `clear_revenue_pool`)\n    /// - Prevents self-referential routing (vault → vault)\n    ///\n    /// # Routing Behavior\n    /// - If both settlement and revenue_pool are set, settlement takes priority\n    /// - If only revenue_pool is set, all deducts route to revenue_pool\n    /// - If neither is set, deduct operations will fail\n    ///\n    /// # Events\n    /// - `set_revenue_pool(caller) → address` when setting\n    /// - `clear_revenue_pool(caller) → ()` when clearing\n    pub fn set_revenue_pool(env: Env, caller: Address, revenue_pool: Option\u003cAddress\u003e) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        match revenue_pool {\n            Some(addr) =\u003e {\n                assert!(\n                    addr != env.current_contract_address(),\n                    \"revenue_pool cannot be vault address\"\n                );\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::RevenuePool, \u0026addr);\n                env.events()\n                    .publish((Symbol::new(\u0026env, \"set_revenue_pool\"), caller), addr);\n            }\n            None =\u003e {\n                env.storage().instance().remove(\u0026StorageKey::RevenuePool);\n                env.events()\n                    .publish((Symbol::new(\u0026env, \"clear_revenue_pool\"), caller), ());\n            }\n        }\n    }\n\n    /// Returns the revenue pool contract address configured for this vault.\n    ///\n    /// # Purpose\n    /// Exposes the revenue pool address to enable off-chain indexers and external\n    /// contracts to query where deducted funds are routed when no settlement contract\n    /// is configured.\n    ///\n    /// # Return Value\n    /// Returns `Option\u003cAddress\u003e` containing the revenue pool address if configured,\n    /// or `None` if not set. This reflects the latest committed state set via\n    /// `set_revenue_pool()`.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Consistent**: Returns only final committed state, never intermediate values.\n    /// - **Deterministic**: Identical state inputs always produce identical outputs.\n    /// - **Non-panicking**: Returns `None` gracefully when revenue pool is not configured.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain queries. Call this function to\n    /// determine the active revenue pool routing destination. Note that if both\n    /// settlement and revenue pool are configured, settlement takes priority for\n    /// fund routing during `deduct()` and `batch_deduct()` operations.\n    ///\n    /// # Example\n    /// ```ignore\n    /// match vault.get_revenue_pool() {\n    ///     Some(pool_addr) =\u003e { /* revenue pool is configured */ }\n    ///     None =\u003e { /* no revenue pool configured */ }\n    /// }\n    /// ```\n    pub fn get_revenue_pool(env: Env) -\u003e Option\u003cAddress\u003e {\n        env.storage().instance().get(\u0026StorageKey::RevenuePool)\n    }\n\n    /// Sets the settlement routing address.\n    ///\n    /// # Purpose\n    /// Configures the primary routing destination for USDC during deduct operations.\n    /// Settlement takes priority over revenue_pool when both are configured.\n    ///\n    /// # Validation\n    /// - Caller must be admin\n    /// - Settlement address cannot be the vault's own address\n    ///\n    /// # Safety Guarantees\n    /// - Atomic update: state is immediately committed\n    /// - Emits event for audit trail (`set_settlement`)\n    /// - Prevents self-referential routing (vault → vault)\n    ///\n    /// # Routing Priority\n    /// 1. If settlement is set → route to settlement (highest priority)\n    /// 2. Else if revenue_pool is set → route to revenue_pool\n    /// 3. Else → deduct operations fail with \"routing not configured\"\n    ///\n    /// # Events\n    /// - `set_settlement(caller) → address` when setting\n    pub fn set_settlement(env: Env, caller: Address, settlement_address: Address) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        assert!(\n            settlement_address != env.current_contract_address(),\n            \"settlement cannot be vault address\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Settlement, \u0026settlement_address);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"set_settlement\"), caller),\n            settlement_address,\n        );\n    }\n\n    /// Returns the settlement contract address configured for this vault.\n    ///\n    /// # Purpose\n    /// Exposes the settlement address to enable off-chain indexers and external\n    /// contracts to query where deducted funds are routed during settlement operations.\n    ///\n    /// # Return Value\n    /// Returns the `Address` of the settlement contract. This reflects the latest\n    /// committed state set via `set_settlement()`.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Consistent**: Returns only final committed state, never intermediate values.\n    /// - **Deterministic**: Identical state inputs always produce identical outputs.\n    ///\n    /// # Panics\n    /// Panics if the settlement address has not been configured via `set_settlement()`.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain queries. Call this function to\n    /// determine the active settlement routing destination at any point in time.\n    ///\n    /// # Example\n    /// ```ignore\n    /// let settlement_addr = vault.get_settlement();\n    /// // Use settlement_addr to track fund flows\n    /// ```\n    pub fn get_settlement(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Settlement)\n            .unwrap_or_else(|| panic!(\"settlement address not set\"))\n    }\n\n    pub fn set_metadata(\n        env: Env,\n        caller: Address,\n        offering_id: String,\n        metadata: String,\n    ) -\u003e String {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n        assert!(\n            offering_id.len() \u003c= MAX_OFFERING_ID_LEN,\n            \"offering_id exceeds max length\"\n        );\n        assert!(\n            metadata.len() \u003c= MAX_METADATA_LEN,\n            \"metadata exceeds max length\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Metadata(offering_id.clone()), \u0026metadata);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"metadata_set\"), offering_id, caller),\n            metadata.clone(),\n        );\n        metadata\n    }\n\n    pub fn get_metadata(env: Env, offering_id: String) -\u003e Option\u003cString\u003e {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Metadata(offering_id))\n    }\n\n    pub fn update_metadata(\n        env: Env,\n        caller: Address,\n        offering_id: String,\n        metadata: String,\n    ) -\u003e String {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n        assert!(\n            offering_id.len() \u003c= MAX_OFFERING_ID_LEN,\n            \"offering_id exceeds max length\"\n        );\n        assert!(\n            metadata.len() \u003c= MAX_METADATA_LEN,\n            \"metadata exceeds max length\"\n        );\n        let old: String = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::Metadata(offering_id.clone()))\n            .unwrap_or(String::from_str(\u0026env, \"\"));\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Metadata(offering_id.clone()), \u0026metadata);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"metadata_updated\"), offering_id, caller),\n            (old, metadata.clone()),\n        );\n        metadata\n    }\n\n    fn transfer_funds(env: \u0026Env, usdc_token: \u0026Address, to: \u0026Address, amount: i128) {\n        token::Client::new(env, usdc_token).transfer(\u0026env.current_contract_address(), to, \u0026amount);\n    }\n\n    fn transfer_to_revenue_pool(env: Env, amount: i128) {\n        let inst = env.storage().instance();\n        let rp: Address = inst\n            .get(\u0026StorageKey::RevenuePool)\n            .expect(\"revenue pool address not set\");\n        let ua: Address = inst\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        token::Client::new(\u0026env, \u0026ua).transfer(\u0026env.current_contract_address(), \u0026rp, \u0026amount);\n    }\n\n    fn require_not_paused(env: Env) {\n        assert!(!Self::is_paused(env), \"vault is paused\");\n    }\n\n    fn require_admin_or_owner(env: Env, caller: \u0026Address) {\n        let admin: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::Admin)\n            .expect(\"vault not initialized\");\n        let meta = Self::get_meta(env);\n        assert!(\n            *caller == admin || *caller == meta.owner,\n            \"unauthorized: caller is not admin or owner\"\n        );\n    }\n\n    /// Validates that at least one routing address is configured.\n    /// Panics if neither settlement nor revenue_pool is set.\n    fn require_routing_configured(env: Env) {\n        let inst = env.storage().instance();\n        let has_settlement = inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::Settlement)\n            .is_some();\n        let has_revenue_pool = inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::RevenuePool)\n            .is_some();\n        assert!(\n            has_settlement || has_revenue_pool,\n            \"routing not configured: set settlement or revenue_pool address\"\n        );\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_init_hardening;\n","traces":[{"line":48,"address":[11409264,11412762,11410564],"length":1,"stats":{"Line":3}},{"line":58,"address":[11409641],"length":1,"stats":{"Line":1}},{"line":59,"address":[11409760],"length":1,"stats":{"Line":2}},{"line":60,"address":[11409901],"length":1,"stats":{"Line":1}},{"line":61,"address":[11412659,11409970],"length":1,"stats":{"Line":2}},{"line":63,"address":[11410099,11410042],"length":1,"stats":{"Line":1}},{"line":67,"address":[11410216],"length":1,"stats":{"Line":3}},{"line":68,"address":[11410394,11410451],"length":1,"stats":{"Line":1}},{"line":73,"address":[11410319,11410586],"length":1,"stats":{"Line":4}},{"line":74,"address":[11410602,11410705],"length":1,"stats":{"Line":1}},{"line":75,"address":[11410675,11410736],"length":1,"stats":{"Line":4}},{"line":76,"address":[11410864,11410752],"length":1,"stats":{"Line":4}},{"line":77,"address":[11410837,11410895],"length":1,"stats":{"Line":4}},{"line":78,"address":[11410911,11411014],"length":1,"stats":{"Line":2}},{"line":79,"address":[11411035,11410978,11411102],"length":1,"stats":{"Line":5}},{"line":80,"address":[11411082],"length":1,"stats":{"Line":1}},{"line":81,"address":[11411165],"length":1,"stats":{"Line":1}},{"line":83,"address":[11411423],"length":1,"stats":{"Line":1}},{"line":89,"address":[11411139],"length":1,"stats":{"Line":2}},{"line":94,"address":[11411700],"length":1,"stats":{"Line":1}},{"line":95,"address":[11411778],"length":1,"stats":{"Line":2}},{"line":96,"address":[11411808],"length":1,"stats":{"Line":1}},{"line":97,"address":[11411838],"length":1,"stats":{"Line":1}},{"line":98,"address":[11411912],"length":1,"stats":{"Line":1}},{"line":100,"address":[11411942],"length":1,"stats":{"Line":1}},{"line":101,"address":[11412051],"length":1,"stats":{"Line":2}},{"line":102,"address":[11412066],"length":1,"stats":{"Line":1}},{"line":103,"address":[11412367],"length":1,"stats":{"Line":1}},{"line":106,"address":[11406064,11406806,11406859],"length":1,"stats":{"Line":1}},{"line":107,"address":[11406087,11406164],"length":1,"stats":{"Line":2}},{"line":108,"address":[11406176,11406234],"length":1,"stats":{"Line":2}},{"line":109,"address":[11406260],"length":1,"stats":{"Line":1}},{"line":111,"address":[11406492],"length":1,"stats":{"Line":1}},{"line":114,"address":[11406351,11406427],"length":1,"stats":{"Line":2}},{"line":115,"address":[11406381,11406435,11406307,11406524,11406820],"length":1,"stats":{"Line":2}},{"line":116,"address":[11406675],"length":1,"stats":{"Line":1}},{"line":119,"address":[11421616,11421901],"length":1,"stats":{"Line":1}},{"line":120,"address":[11421642],"length":1,"stats":{"Line":1}},{"line":122,"address":[11421748],"length":1,"stats":{"Line":1}},{"line":126,"address":[11423202,11422192,11423112],"length":1,"stats":{"Line":2}},{"line":127,"address":[11422227],"length":1,"stats":{"Line":1}},{"line":128,"address":[11422313],"length":1,"stats":{"Line":1}},{"line":129,"address":[11422350,11422412],"length":1,"stats":{"Line":2}},{"line":130,"address":[11422438,11423128],"length":1,"stats":{"Line":2}},{"line":132,"address":[11422431],"length":1,"stats":{"Line":1}},{"line":134,"address":[11422497],"length":1,"stats":{"Line":0}},{"line":135,"address":[11422660],"length":1,"stats":{"Line":1}},{"line":136,"address":[11422672],"length":1,"stats":{"Line":1}},{"line":139,"address":[11385756,11385709,11384416],"length":1,"stats":{"Line":2}},{"line":140,"address":[11384431],"length":1,"stats":{"Line":1}},{"line":143,"address":[11384568],"length":1,"stats":{"Line":1}},{"line":145,"address":[11384791],"length":1,"stats":{"Line":1}},{"line":146,"address":[11384820],"length":1,"stats":{"Line":1}},{"line":147,"address":[11384919,11384871],"length":1,"stats":{"Line":2}},{"line":148,"address":[11385106],"length":1,"stats":{"Line":1}},{"line":149,"address":[11385298],"length":1,"stats":{"Line":1}},{"line":150,"address":[11385310],"length":1,"stats":{"Line":1}},{"line":153,"address":[11392155,11391840],"length":1,"stats":{"Line":1}},{"line":154,"address":[11391871,11391932],"length":1,"stats":{"Line":2}},{"line":155,"address":[11392062,11391944,11392005],"length":1,"stats":{"Line":3}},{"line":158,"address":[11381040,11382631,11382505],"length":1,"stats":{"Line":2}},{"line":159,"address":[11381080],"length":1,"stats":{"Line":1}},{"line":160,"address":[11381161],"length":1,"stats":{"Line":1}},{"line":161,"address":[11381255,11381193],"length":1,"stats":{"Line":2}},{"line":162,"address":[11381283,11382578],"length":1,"stats":{"Line":2}},{"line":164,"address":[11381261],"length":1,"stats":{"Line":1}},{"line":165,"address":[11382550,11381335],"length":1,"stats":{"Line":2}},{"line":170,"address":[11381438],"length":1,"stats":{"Line":1}},{"line":172,"address":[11381679],"length":1,"stats":{"Line":1}},{"line":173,"address":[11381771,11381711],"length":1,"stats":{"Line":2}},{"line":174,"address":[11381904],"length":1,"stats":{"Line":1}},{"line":175,"address":[11381948,11382520],"length":1,"stats":{"Line":2}},{"line":177,"address":[11381929,11381984],"length":1,"stats":{"Line":2}},{"line":178,"address":[11382092,11382323],"length":1,"stats":{"Line":2}},{"line":179,"address":[11382349,11382104],"length":1,"stats":{"Line":2}},{"line":182,"address":[11419980,11419680],"length":1,"stats":{"Line":1}},{"line":183,"address":[11419710],"length":1,"stats":{"Line":1}},{"line":185,"address":[11419826],"length":1,"stats":{"Line":1}},{"line":186,"address":[11419899],"length":1,"stats":{"Line":3}},{"line":189,"address":[11402634,11403759,11401808],"length":1,"stats":{"Line":2}},{"line":190,"address":[11401843],"length":1,"stats":{"Line":1}},{"line":191,"address":[11401969],"length":1,"stats":{"Line":1}},{"line":192,"address":[11402037],"length":1,"stats":{"Line":1}},{"line":193,"address":[11402070],"length":1,"stats":{"Line":1}},{"line":194,"address":[11402890],"length":1,"stats":{"Line":1}},{"line":197,"address":[11402825,11402749],"length":1,"stats":{"Line":2}},{"line":198,"address":[11402779,11402833,11402708,11402922,11403657],"length":1,"stats":{"Line":2}},{"line":199,"address":[11403076],"length":1,"stats":{"Line":1}},{"line":200,"address":[11403110],"length":1,"stats":{"Line":1}},{"line":202,"address":[11403167],"length":1,"stats":{"Line":0}},{"line":203,"address":[11403320],"length":1,"stats":{"Line":1}},{"line":205,"address":[11403130],"length":1,"stats":{"Line":1}},{"line":207,"address":[11403435],"length":1,"stats":{"Line":0}},{"line":210,"address":[11402152],"length":1,"stats":{"Line":1}},{"line":212,"address":[11402186],"length":1,"stats":{"Line":0}},{"line":213,"address":[11402344],"length":1,"stats":{"Line":1}},{"line":215,"address":[11402378],"length":1,"stats":{"Line":0}},{"line":220,"address":[11407628,11407666,11406976],"length":1,"stats":{"Line":2}},{"line":221,"address":[11407004],"length":1,"stats":{"Line":1}},{"line":222,"address":[11407082],"length":1,"stats":{"Line":1}},{"line":223,"address":[11407158],"length":1,"stats":{"Line":1}},{"line":225,"address":[11407189],"length":1,"stats":{"Line":0}},{"line":226,"address":[11407338],"length":1,"stats":{"Line":1}},{"line":228,"address":[11407372],"length":1,"stats":{"Line":0}},{"line":231,"address":[11404896,11405278],"length":1,"stats":{"Line":1}},{"line":232,"address":[11404918,11405171],"length":1,"stats":{"Line":2}},{"line":234,"address":[11405038,11405105],"length":1,"stats":{"Line":2}},{"line":235,"address":[11405113,11405192,11405268],"length":1,"stats":{"Line":2}},{"line":238,"address":[11404696,11404733,11403776],"length":1,"stats":{"Line":1}},{"line":239,"address":[11403798,11403883],"length":1,"stats":{"Line":2}},{"line":240,"address":[11403890],"length":1,"stats":{"Line":1}},{"line":241,"address":[11403953],"length":1,"stats":{"Line":1}},{"line":242,"address":[11404129],"length":1,"stats":{"Line":1}},{"line":243,"address":[11404325,11404640],"length":1,"stats":{"Line":2}},{"line":244,"address":[11404336,11404411],"length":1,"stats":{"Line":2}},{"line":245,"address":[11404573],"length":1,"stats":{"Line":1}},{"line":249,"address":[11413563,11413495,11412784],"length":1,"stats":{"Line":2}},{"line":250,"address":[11412814],"length":1,"stats":{"Line":1}},{"line":251,"address":[11412892],"length":1,"stats":{"Line":1}},{"line":252,"address":[11412926,11412979,11413511],"length":1,"stats":{"Line":3}},{"line":253,"address":[11413011,11412972],"length":1,"stats":{"Line":2}},{"line":254,"address":[11413203],"length":1,"stats":{"Line":1}},{"line":255,"address":[11413215],"length":1,"stats":{"Line":1}},{"line":258,"address":[11419618,11418880,11419656],"length":1,"stats":{"Line":2}},{"line":259,"address":[11418910],"length":1,"stats":{"Line":1}},{"line":260,"address":[11418988],"length":1,"stats":{"Line":1}},{"line":261,"address":[11419022,11419114],"length":1,"stats":{"Line":2}},{"line":262,"address":[11419134,11419097],"length":1,"stats":{"Line":2}},{"line":263,"address":[11419326],"length":1,"stats":{"Line":1}},{"line":264,"address":[11419338],"length":1,"stats":{"Line":1}},{"line":311,"address":[11421920,11422165],"length":1,"stats":{"Line":1}},{"line":312,"address":[11421937],"length":1,"stats":{"Line":1}},{"line":314,"address":[11422032],"length":1,"stats":{"Line":1}},{"line":318,"address":[11392512,11392208],"length":1,"stats":{"Line":1}},{"line":319,"address":[11392382,11392228],"length":1,"stats":{"Line":2}},{"line":321,"address":[11392323],"length":1,"stats":{"Line":1}},{"line":322,"address":[11392431],"length":1,"stats":{"Line":1}},{"line":325,"address":[11418865,11418837,11416688],"length":1,"stats":{"Line":2}},{"line":326,"address":[11416723],"length":1,"stats":{"Line":1}},{"line":327,"address":[11416796],"length":1,"stats":{"Line":1}},{"line":328,"address":[11416818,11416899],"length":1,"stats":{"Line":2}},{"line":329,"address":[11416882,11418843,11417075,11416924],"length":1,"stats":{"Line":3}},{"line":333,"address":[11417091,11417145],"length":1,"stats":{"Line":2}},{"line":334,"address":[11417188,11417309],"length":1,"stats":{"Line":2}},{"line":343,"address":[11417498],"length":1,"stats":{"Line":1}},{"line":345,"address":[11417739],"length":1,"stats":{"Line":1}},{"line":346,"address":[11417836,11417771],"length":1,"stats":{"Line":2}},{"line":347,"address":[11417941],"length":1,"stats":{"Line":1}},{"line":348,"address":[11417971,11418123,11418052],"length":1,"stats":{"Line":3}},{"line":350,"address":[11418005],"length":1,"stats":{"Line":1}},{"line":351,"address":[11418084],"length":1,"stats":{"Line":1}},{"line":352,"address":[11418147],"length":1,"stats":{"Line":1}},{"line":353,"address":[11418347,11418633],"length":1,"stats":{"Line":2}},{"line":354,"address":[11418359,11418447],"length":1,"stats":{"Line":2}},{"line":355,"address":[11418591],"length":1,"stats":{"Line":1}},{"line":357,"address":[11418659],"length":1,"stats":{"Line":1}},{"line":360,"address":[11415557,11413584,11416532],"length":1,"stats":{"Line":2}},{"line":361,"address":[11413658],"length":1,"stats":{"Line":1}},{"line":362,"address":[11413774],"length":1,"stats":{"Line":1}},{"line":363,"address":[11413812],"length":1,"stats":{"Line":1}},{"line":364,"address":[11413936,11413852],"length":1,"stats":{"Line":2}},{"line":365,"address":[11413913,11413964],"length":1,"stats":{"Line":2}},{"line":366,"address":[11414095,11414023],"length":1,"stats":{"Line":2}},{"line":367,"address":[11414078,11414132],"length":1,"stats":{"Line":2}},{"line":368,"address":[11414139],"length":1,"stats":{"Line":1}},{"line":369,"address":[11414196,11414287],"length":1,"stats":{"Line":2}},{"line":370,"address":[11414219],"length":1,"stats":{"Line":1}},{"line":372,"address":[11414227,11414349,11414430],"length":1,"stats":{"Line":3}},{"line":373,"address":[11414451,11414513,11414394],"length":1,"stats":{"Line":3}},{"line":374,"address":[11414550,11414496],"length":1,"stats":{"Line":2}},{"line":375,"address":[11414573,11414644],"length":1,"stats":{"Line":2}},{"line":376,"address":[11414746],"length":1,"stats":{"Line":1}},{"line":377,"address":[11414949],"length":1,"stats":{"Line":1}},{"line":378,"address":[11415090],"length":1,"stats":{"Line":1}},{"line":379,"address":[11415195,11415302],"length":1,"stats":{"Line":2}},{"line":380,"address":[11415372],"length":1,"stats":{"Line":1}},{"line":381,"address":[11415258,11415379,11415630],"length":1,"stats":{"Line":1}},{"line":382,"address":[11415225],"length":1,"stats":{"Line":1}},{"line":385,"address":[11415693],"length":1,"stats":{"Line":1}},{"line":387,"address":[11416441,11415736,11415477],"length":1,"stats":{"Line":1}},{"line":388,"address":[11415848,11416275],"length":1,"stats":{"Line":2}},{"line":389,"address":[11415904,11416000],"length":1,"stats":{"Line":2}},{"line":390,"address":[11416243],"length":1,"stats":{"Line":1}},{"line":392,"address":[11416301],"length":1,"stats":{"Line":1}},{"line":395,"address":[11388178,11385776,11389953],"length":1,"stats":{"Line":2}},{"line":396,"address":[11385826],"length":1,"stats":{"Line":1}},{"line":397,"address":[11385909],"length":1,"stats":{"Line":2}},{"line":398,"address":[11385947],"length":1,"stats":{"Line":1}},{"line":399,"address":[11385977],"length":1,"stats":{"Line":1}},{"line":400,"address":[11386075,11386005],"length":1,"stats":{"Line":2}},{"line":401,"address":[11386095,11386169,11386052],"length":1,"stats":{"Line":1}},{"line":402,"address":[11386146,11386195],"length":1,"stats":{"Line":2}},{"line":403,"address":[11386266],"length":1,"stats":{"Line":1}},{"line":404,"address":[11386296],"length":1,"stats":{"Line":1}},{"line":405,"address":[11386359,11386456],"length":1,"stats":{"Line":2}},{"line":406,"address":[11386385],"length":1,"stats":{"Line":1}},{"line":408,"address":[11386393,11386657,11386527],"length":1,"stats":{"Line":3}},{"line":409,"address":[11386570],"length":1,"stats":{"Line":1}},{"line":410,"address":[11386602],"length":1,"stats":{"Line":1}},{"line":411,"address":[11386694,11386634,11386790],"length":1,"stats":{"Line":3}},{"line":412,"address":[11389365,11386881,11389486],"length":1,"stats":{"Line":3}},{"line":413,"address":[11389410,11389507,11389588],"length":1,"stats":{"Line":3}},{"line":414,"address":[11389609,11389695,11389536],"length":1,"stats":{"Line":3}},{"line":415,"address":[11389638,11389716],"length":1,"stats":{"Line":2}},{"line":416,"address":[11389802],"length":1,"stats":{"Line":1}},{"line":418,"address":[11386939],"length":1,"stats":{"Line":1}},{"line":419,"address":[11386979],"length":1,"stats":{"Line":1}},{"line":420,"address":[11387166],"length":1,"stats":{"Line":1}},{"line":421,"address":[11387446,11387327],"length":1,"stats":{"Line":2}},{"line":422,"address":[11387537,11388566],"length":1,"stats":{"Line":2}},{"line":423,"address":[11388652,11389343],"length":1,"stats":{"Line":1}},{"line":424,"address":[11388829,11389269],"length":1,"stats":{"Line":2}},{"line":425,"address":[11388885,11388973],"length":1,"stats":{"Line":2}},{"line":426,"address":[11389221],"length":1,"stats":{"Line":1}},{"line":429,"address":[11387618],"length":1,"stats":{"Line":1}},{"line":430,"address":[11387759],"length":1,"stats":{"Line":1}},{"line":431,"address":[11387864,11387971],"length":1,"stats":{"Line":2}},{"line":432,"address":[11388009],"length":1,"stats":{"Line":1}},{"line":433,"address":[11387927,11388251,11388048],"length":1,"stats":{"Line":1}},{"line":434,"address":[11387894],"length":1,"stats":{"Line":1}},{"line":437,"address":[11388314],"length":1,"stats":{"Line":1}},{"line":439,"address":[11388130],"length":1,"stats":{"Line":1}},{"line":442,"address":[11416560],"length":1,"stats":{"Line":1}},{"line":443,"address":[11416567],"length":1,"stats":{"Line":1}},{"line":446,"address":[11400736,11401654,11401730],"length":1,"stats":{"Line":2}},{"line":447,"address":[11400852,11400759],"length":1,"stats":{"Line":2}},{"line":448,"address":[11400867],"length":1,"stats":{"Line":1}},{"line":449,"address":[11400932],"length":1,"stats":{"Line":1}},{"line":453,"address":[11401007],"length":1,"stats":{"Line":1}},{"line":455,"address":[11401071],"length":1,"stats":{"Line":0}},{"line":456,"address":[11401585,11401234],"length":1,"stats":{"Line":2}},{"line":458,"address":[11401246],"length":1,"stats":{"Line":1}},{"line":459,"address":[11401326],"length":1,"stats":{"Line":1}},{"line":460,"address":[11401382],"length":1,"stats":{"Line":1}},{"line":466,"address":[11396560,11398156,11398244],"length":1,"stats":{"Line":2}},{"line":467,"address":[11396575],"length":1,"stats":{"Line":1}},{"line":470,"address":[11396720],"length":1,"stats":{"Line":1}},{"line":472,"address":[11396943],"length":1,"stats":{"Line":1}},{"line":473,"address":[11396972],"length":1,"stats":{"Line":1}},{"line":474,"address":[11397074,11397010],"length":1,"stats":{"Line":2}},{"line":475,"address":[11397082],"length":1,"stats":{"Line":1}},{"line":476,"address":[11397279,11397327],"length":1,"stats":{"Line":2}},{"line":477,"address":[11397517],"length":1,"stats":{"Line":1}},{"line":478,"address":[11398068,11397709],"length":1,"stats":{"Line":2}},{"line":479,"address":[11397721,11397796],"length":1,"stats":{"Line":2}},{"line":484,"address":[11421585,11420000],"length":1,"stats":{"Line":1}},{"line":485,"address":[11420036,11420097],"length":1,"stats":{"Line":2}},{"line":486,"address":[11420104],"length":1,"stats":{"Line":1}},{"line":487,"address":[11420248,11420157],"length":1,"stats":{"Line":3}},{"line":488,"address":[11420327,11420268,11420208],"length":1,"stats":{"Line":4}},{"line":492,"address":[11420416],"length":1,"stats":{"Line":2}},{"line":494,"address":[11420657],"length":1,"stats":{"Line":2}},{"line":495,"address":[11420689,11420749],"length":1,"stats":{"Line":4}},{"line":496,"address":[11420849],"length":1,"stats":{"Line":2}},{"line":497,"address":[11420977],"length":1,"stats":{"Line":1}},{"line":498,"address":[11421174,11421457],"length":1,"stats":{"Line":2}},{"line":499,"address":[11421261,11421186],"length":1,"stats":{"Line":2}},{"line":500,"address":[11421421],"length":1,"stats":{"Line":1}},{"line":502,"address":[11421483],"length":1,"stats":{"Line":1}},{"line":505,"address":[11382656,11384350,11384388],"length":1,"stats":{"Line":2}},{"line":506,"address":[11382686,11382771],"length":1,"stats":{"Line":2}},{"line":507,"address":[11382778],"length":1,"stats":{"Line":1}},{"line":508,"address":[11382831,11382922],"length":1,"stats":{"Line":2}},{"line":509,"address":[11382882,11382942,11383001],"length":1,"stats":{"Line":3}},{"line":513,"address":[11383090],"length":1,"stats":{"Line":1}},{"line":515,"address":[11383331],"length":1,"stats":{"Line":1}},{"line":516,"address":[11383428,11383363],"length":1,"stats":{"Line":2}},{"line":517,"address":[11383520],"length":1,"stats":{"Line":1}},{"line":518,"address":[11383648],"length":1,"stats":{"Line":1}},{"line":519,"address":[11384224,11383845],"length":1,"stats":{"Line":2}},{"line":520,"address":[11383932,11383857],"length":1,"stats":{"Line":2}},{"line":521,"address":[11384188],"length":1,"stats":{"Line":1}},{"line":523,"address":[11384250],"length":1,"stats":{"Line":1}},{"line":550,"address":[11399429,11398528,11400360],"length":1,"stats":{"Line":2}},{"line":551,"address":[11398563],"length":1,"stats":{"Line":1}},{"line":552,"address":[11398684],"length":1,"stats":{"Line":1}},{"line":553,"address":[11398781,11398716],"length":1,"stats":{"Line":2}},{"line":554,"address":[11398817,11400269],"length":1,"stats":{"Line":2}},{"line":556,"address":[11398792],"length":1,"stats":{"Line":1}},{"line":557,"address":[11398859],"length":1,"stats":{"Line":1}},{"line":558,"address":[11398910,11399552,11399476],"length":1,"stats":{"Line":3}},{"line":562,"address":[11399668],"length":1,"stats":{"Line":1}},{"line":564,"address":[11399702],"length":1,"stats":{"Line":0}},{"line":565,"address":[11399868],"length":1,"stats":{"Line":1}},{"line":566,"address":[11399880],"length":1,"stats":{"Line":1}},{"line":569,"address":[11398945],"length":1,"stats":{"Line":1}},{"line":570,"address":[11399137],"length":1,"stats":{"Line":1}},{"line":571,"address":[11399149],"length":1,"stats":{"Line":1}},{"line":607,"address":[11398272,11398497],"length":1,"stats":{"Line":1}},{"line":608,"address":[11398295,11398336,11398394],"length":1,"stats":{"Line":3}},{"line":633,"address":[11393968,11392832,11393871],"length":1,"stats":{"Line":2}},{"line":634,"address":[11392867],"length":1,"stats":{"Line":1}},{"line":635,"address":[11392964],"length":1,"stats":{"Line":1}},{"line":636,"address":[11392996,11393058],"length":1,"stats":{"Line":2}},{"line":637,"address":[11393887,11393088],"length":1,"stats":{"Line":2}},{"line":639,"address":[11393069,11393125,11393196],"length":1,"stats":{"Line":3}},{"line":643,"address":[11393310],"length":1,"stats":{"Line":1}},{"line":645,"address":[11393344],"length":1,"stats":{"Line":0}},{"line":646,"address":[11393810,11393507],"length":1,"stats":{"Line":2}},{"line":647,"address":[11393519,11393604],"length":1,"stats":{"Line":2}},{"line":648,"address":[11393743],"length":1,"stats":{"Line":1}},{"line":679,"address":[11392801,11392528],"length":1,"stats":{"Line":1}},{"line":680,"address":[11392554],"length":1,"stats":{"Line":1}},{"line":682,"address":[11392660],"length":1,"stats":{"Line":2}},{"line":683,"address":[11392727],"length":1,"stats":{"Line":4}},{"line":686,"address":[11390432,11391722,11391817],"length":1,"stats":{"Line":2}},{"line":692,"address":[11390477],"length":1,"stats":{"Line":1}},{"line":693,"address":[11390587,11391728],"length":1,"stats":{"Line":1}},{"line":694,"address":[11390776,11390721],"length":1,"stats":{"Line":2}},{"line":698,"address":[11390755,11390800],"length":1,"stats":{"Line":2}},{"line":702,"address":[11390849],"length":1,"stats":{"Line":1}},{"line":704,"address":[11390911],"length":1,"stats":{"Line":0}},{"line":705,"address":[11391594,11391198],"length":1,"stats":{"Line":2}},{"line":706,"address":[11391300,11391210],"length":1,"stats":{"Line":2}},{"line":707,"address":[11391546],"length":1,"stats":{"Line":1}},{"line":709,"address":[11391670],"length":1,"stats":{"Line":1}},{"line":712,"address":[11390416,11390379,11389968],"length":1,"stats":{"Line":1}},{"line":713,"address":[11389994],"length":1,"stats":{"Line":1}},{"line":715,"address":[11390131],"length":1,"stats":{"Line":1}},{"line":718,"address":[11396382,11394320,11396539],"length":1,"stats":{"Line":2}},{"line":724,"address":[11394365],"length":1,"stats":{"Line":1}},{"line":725,"address":[11394491,11396450],"length":1,"stats":{"Line":1}},{"line":726,"address":[11394625,11394680],"length":1,"stats":{"Line":0}},{"line":730,"address":[11394659,11394704],"length":1,"stats":{"Line":2}},{"line":734,"address":[11395114],"length":1,"stats":{"Line":1}},{"line":737,"address":[11394920,11395044,11394872],"length":1,"stats":{"Line":3}},{"line":738,"address":[11395007,11395146,11396428,11395069,11394815,11394879],"length":1,"stats":{"Line":2}},{"line":739,"address":[11395358],"length":1,"stats":{"Line":1}},{"line":741,"address":[11395392],"length":1,"stats":{"Line":0}},{"line":742,"address":[11395676,11396227],"length":1,"stats":{"Line":2}},{"line":743,"address":[11395688,11395778],"length":1,"stats":{"Line":2}},{"line":744,"address":[11396016],"length":1,"stats":{"Line":1}},{"line":746,"address":[11396340],"length":1,"stats":{"Line":1}},{"line":749,"address":[11394266,11394272,11394016],"length":1,"stats":{"Line":1}},{"line":750,"address":[11394075],"length":1,"stats":{"Line":1}},{"line":753,"address":[11407712,11408412],"length":1,"stats":{"Line":1}},{"line":754,"address":[11407745,11407793],"length":1,"stats":{"Line":2}},{"line":756,"address":[11407909],"length":1,"stats":{"Line":1}},{"line":759,"address":[11407975],"length":1,"stats":{"Line":1}},{"line":761,"address":[11408090,11408166],"length":1,"stats":{"Line":2}},{"line":764,"address":[11400560],"length":1,"stats":{"Line":1}},{"line":765,"address":[11400597,11400567],"length":1,"stats":{"Line":2}},{"line":768,"address":[11405989,11405312],"length":1,"stats":{"Line":1}},{"line":769,"address":[11405343],"length":1,"stats":{"Line":1}},{"line":772,"address":[11405483],"length":1,"stats":{"Line":1}},{"line":774,"address":[11405712],"length":1,"stats":{"Line":1}},{"line":775,"address":[11405783,11405847,11405900],"length":1,"stats":{"Line":3}},{"line":783,"address":[11408528,11409053],"length":1,"stats":{"Line":1}},{"line":784,"address":[11408548,11408596],"length":1,"stats":{"Line":2}},{"line":785,"address":[11408794],"length":1,"stats":{"Line":1}},{"line":786,"address":[11408712],"length":1,"stats":{"Line":1}},{"line":788,"address":[11408913],"length":1,"stats":{"Line":1}},{"line":789,"address":[11408819],"length":1,"stats":{"Line":1}},{"line":791,"address":[11408977],"length":1,"stats":{"Line":1}}],"covered":341,"coverable":354},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","vault","src","test.rs"],"content":"extern crate std;\n\nuse soroban_sdk::testutils::{Address as _, Events as _};\nuse soroban_sdk::{token, Address, Env, IntoVal, String, Symbol};\n\nuse super::*;\n\n// ---------------------------------------------------------------------------\n// Test helpers\n// ---------------------------------------------------------------------------\n\nfn create_usdc\u003c'a\u003e(\n    env: \u0026'a Env,\n    admin: \u0026Address,\n) -\u003e (Address, token::Client\u003c'a\u003e, token::StellarAssetClient\u003c'a\u003e) {\n    let contract_address = env.register_stellar_asset_contract_v2(admin.clone());\n    let address = contract_address.address();\n    let client = token::Client::new(env, \u0026address);\n    let admin_client = token::StellarAssetClient::new(env, \u0026address);\n    (address, client, admin_client)\n}\n\nfn create_vault(env: \u0026Env) -\u003e (Address, CalloraVaultClient\u003c'_\u003e) {\n    let address = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(env, \u0026address);\n    (address, client)\n}\n\n/// Mint `amount` USDC directly to `vault_address` (simulates pre-funded vault).\nfn fund_vault(\n    usdc_admin_client: \u0026token::StellarAssetClient,\n    vault_address: \u0026Address,\n    amount: i128,\n) {\n    usdc_admin_client.mint(vault_address, \u0026amount);\n}\n\n// ---------------------------------------------------------------------------\n// Init tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_with_balance_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let events = env.events().all();\n    std::println!(\"init_with_balance_emits_event events len: {}\", events.len());\n    let last = events.last().expect(\"expected at least one event\");\n\n    assert_eq!(last.0, vault_address);\n    let topics = \u0026last.1;\n    assert_eq!(topics.len(), 2);\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = topics.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"init\"));\n    assert_eq!(topic1, owner);\n\n    let data: i128 = last.2.into_val(\u0026env);\n    assert_eq!(data, 1000);\n}\n\n#[test]\nfn init_defaults_balance_to_zero() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn init_sets_owner_and_min_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let meta = client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026Some(10), \u0026None, \u0026None);\n\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(meta.min_deposit, 10);\n    assert_eq!(client.balance(), 500);\n    assert_eq!(client.get_admin(), owner);\n}\n\n#[test]\nfn init_succeeds_when_onchain_usdc_balance_covers_initial_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n\n    let revenue_pool = Address::generate(\u0026env);\n    let meta = client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(400),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(meta.balance, 400);\n    assert_eq!(client.balance(), 400);\n}\n\n#[test]\n#[should_panic(expected = \"initial_balance exceeds on-ledger USDC balance\")]\nfn init_fails_when_initial_balance_exceeds_onchain_usdc_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 99);\n\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n}\n\n#[test]\nfn double_init_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    assert!(result.is_err(), \"expected error on second init\");\n}\n\n// ---------------------------------------------------------------------------\n// get_meta / balance tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_meta_returns_correct_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let meta = client.get_meta();\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn get_meta_before_init_fails() {\n    let env = Env::default();\n    let (_, client) = create_vault(\u0026env);\n    assert!(client.try_get_meta().is_err(), \"expected error before init\");\n}\n\n// ---------------------------------------------------------------------------\n// Admin tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_admin_returns_owner_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(client.get_admin(), owner);\n}\n\n#[test]\nfn set_admin_two_step_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_admin(\u0026owner, \u0026new_admin);\n    assert_eq!(client.get_admin(), owner); // Still old admin\n\n    client.accept_admin();\n    assert_eq!(client.get_admin(), new_admin);\n}\n\n#[test]\nfn set_admin_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_set_admin(\u0026intruder, \u0026new_admin);\n    assert!(\n        result.is_err(),\n        \"expected error when non-admin calls set_admin\"\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Deposit tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn owner_can_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    // Swap order: create USDC first\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026500);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026500, \u00261000);\n\n    let new_balance = client.deposit(\u0026owner, \u0026200);\n    assert_eq!(new_balance, 200);\n\n    let events = env.events().all();\n    std::println!(\"owner_can_deposit events len: {}\", events.len());\n    for (i, e) in events.iter().enumerate() {\n        std::println!(\n            \"Event[{}]: contract={:?}, topics={:?}, data={:?}\",\n            i,\n            e.0,\n            e.1,\n            e.2\n        );\n    }\n    let deposit_event = events\n        .iter()\n        .find(|e| {\n            if e.0 != vault_address {\n                return false;\n            }\n            if e.1.is_empty() {\n                return false;\n            }\n            let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n            s == Symbol::new(\u0026env, \"deposit\")\n        })\n        .expect(\"expected deposit event\");\n\n    let (amount, balance): (i128, i128) = deposit_event.2.into_val(\u0026env);\n    assert_eq!(amount, 200);\n    assert_eq!(balance, 200);\n}\n\n#[test]\nfn allowed_depositor_can_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u0026200);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u0026200, \u00261000);\n    let returned = client.deposit(\u0026depositor, \u0026200);\n\n    assert_eq!(returned, 300);\n    assert_eq!(client.balance(), 300);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: only owner or allowed depositor can deposit\")]\nfn unauthorized_address_cannot_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.deposit(\u0026unauthorized, \u002650);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deposit_zero_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deposit(\u0026owner, \u00260);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deposit_negative_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deposit(\u0026owner, \u0026-50);\n}\n\n#[test]\nfn deposit_below_minimum_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026Some(50), \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u002630);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002630, \u00261000);\n    let result = client.try_deposit(\u0026depositor, \u002630);\n    assert!(result.is_err(), \"expected error for deposit below minimum\");\n}\n\n#[test]\nfn deposit_at_minimum_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026Some(50), \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    let new_balance = client.deposit(\u0026depositor, \u002650);\n    assert_eq!(new_balance, 150);\n}\n\n#[test]\nfn deposit_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    usdc_admin.mint(\u0026owner, \u0026100);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026100, \u00261000);\n\n    let result = client.try_deposit(\u0026owner, \u0026100);\n    assert!(result.is_err());\n    // Should contain \"vault is paused\" but Error doesn't easily expose the string in tests without more setup\n    // but the transaction should fail.\n\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n    client.deposit(\u0026owner, \u0026100);\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Allowed depositor management tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn owner_can_set_and_clear_allowed_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    // Set depositor\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor, \u002650);\n    assert_eq!(client.balance(), 150);\n\n    // Clear depositor\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    // Owner can still deposit\n    usdc_admin.mint(\u0026owner, \u002625);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002625, \u00261000);\n    client.deposit(\u0026owner, \u002625);\n    assert_eq!(client.balance(), 175);\n}\n\n#[test]\nfn set_allowed_depositor_duplicate_is_ignored() {\n    // Adding the same depositor twice should not create a duplicate entry\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone())); // duplicate — should be a no-op\n\n    // depositor can still deposit exactly once (list not doubled)\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    assert_eq!(client.deposit(\u0026depositor, \u002650), 150);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn non_owner_cannot_set_allowed_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let non_owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_allowed_depositor(\u0026non_owner, \u0026Some(depositor));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: only owner or allowed depositor can deposit\")]\nfn deposit_after_depositor_cleared_is_rejected() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor, \u002650);\n}\n\n// ---------------------------------------------------------------------------\n// Pause tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn pause_unpause_admin_only() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // intruder fails\n    let res = client.try_pause(\u0026intruder);\n    assert!(res.is_err());\n\n    // admin (owner) succeeds\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    // intruder fails unpause\n    let res = client.try_unpause(\u0026intruder);\n    assert!(res.is_err());\n\n    // admin (owner) succeeds unpause\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn pause_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.pause(\u0026owner);\n    let events = env.events().all();\n    let pause_event = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address\n                \u0026\u0026 e.1\n                    .get(0)\n                    .map(|v| {\n                        let s: Symbol = v.into_val(\u0026env);\n                        s == Symbol::new(\u0026env, \"vault_paused\")\n                    })\n                    .unwrap_or(false)\n        })\n        .expect(\"expected pause event\");\n\n    let admin_topic: Address = pause_event.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(admin_topic, owner);\n}\n\n// ---------------------------------------------------------------------------\n// Deduct tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_authorized_caller_sets_and_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 200);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(200),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_authorized_caller(\u0026new_caller);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected set_auth_caller event\");\n    assert_eq!(ev.1.len(), 2);\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_auth_caller\"));\n    assert_eq!(topic1, owner);\n\n    let data: Address = ev.2.into_val(\u0026env);\n    assert_eq!(data, new_caller);\n\n    let remaining = client.deduct(\u0026new_caller, \u002650, \u0026None);\n    assert_eq!(remaining, 150);\n}\n\n#[test]\nfn deduct_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let returned = client.deduct(\u0026caller, \u002650, \u0026None);\n    assert_eq!(returned, 250);\n    assert_eq!(client.balance(), 250);\n}\n\n#[test]\nfn deduct_with_request_id() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.deduct(\u0026caller, \u0026100, \u0026Some(Symbol::new(\u0026env, \"req123\")));\n    assert_eq!(remaining, 900);\n}\n\n#[test]\nfn deduct_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 10);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(10),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_deduct(\u0026caller, \u0026100, \u0026None);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n#[test]\nfn deduct_exact_balance_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 75);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(75),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.deduct(\u0026caller, \u002675, \u0026None);\n    assert_eq!(remaining, 0);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn deduct_event_contains_request_id() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let request_id = Symbol::new(\u0026env, \"api_call_42\");\n    client.deduct(\u0026caller, \u0026150, \u0026Some(request_id.clone()));\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected deduct event\");\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    let topic2: Symbol = ev.1.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deduct\"));\n    assert_eq!(topic1, caller);\n    assert_eq!(topic2, request_id);\n\n    let (emitted_amount, remaining): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(emitted_amount, 150);\n    assert_eq!(remaining, 350);\n}\n\n#[test]\nfn deduct_event_no_request_id_uses_empty_symbol() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected deduct event\");\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic2: Symbol = ev.1.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deduct\"));\n    assert_eq!(topic2, Symbol::new(\u0026env, \"\"));\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deduct_zero_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u00260, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deduct_negative_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026-50, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"insufficient balance\")]\nfn deduct_exceeds_balance_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 50);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(50),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n}\n\n#[test]\nfn balance_unchanged_after_failed_deduct() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let _ = client.try_deduct(\u0026caller, \u0026200, \u0026None);\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Batch deduct tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn batch_deduct_multiple_items() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: Some(Symbol::new(\u0026env, \"req1\"))\n        },\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: Some(Symbol::new(\u0026env, \"req2\"))\n        },\n    ];\n\n    let remaining = client.batch_deduct(\u0026caller, \u0026items);\n    assert_eq!(remaining, 650);\n    assert_eq!(client.balance(), 650);\n}\n\n#[test]\n#[ignore] // Pre-existing test issue with event conversion - not related to routing feature\nfn batch_deduct_events_contain_request_ids() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let rid_a = Symbol::new(\u0026env, \"batch_a\");\n    let rid_b = Symbol::new(\u0026env, \"batch_b\");\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: Some(rid_a.clone())\n        },\n        DeductItem {\n            amount: 300,\n            request_id: Some(rid_b.clone())\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    let all_events = env.events().all();\n    // Last two events are the two deduct events\n    let len = all_events.len();\n    let ev_a = all_events.get(len - 2).unwrap();\n    let ev_b = all_events.get(len - 1).unwrap();\n\n    let req_a: Symbol = ev_a.1.get(2).unwrap().into_val(\u0026env);\n    let req_b: Symbol = ev_b.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(req_a, rid_a);\n    assert_eq!(req_b, rid_b);\n\n    let (amt_a, _): (i128, i128) = ev_a.2.into_val(\u0026env);\n    let (amt_b, _): (i128, i128) = ev_b.2.into_val(\u0026env);\n    assert_eq!(amt_a, 200);\n    assert_eq!(amt_b, 300);\n}\n\n#[test]\nfn batch_deduct_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 80,\n            request_id: None\n        },\n    ];\n\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for batch overdraw\");\n    // Balance must be unchanged on failure\n    assert_eq!(client.balance(), 100);\n}\n\n#[test]\nfn batch_deduct_empty_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items: soroban_sdk::Vec\u003cDeductItem\u003e = soroban_sdk::vec![\u0026env];\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for empty batch\");\n}\n\n#[test]\nfn batch_deduct_zero_amount_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 0,\n            request_id: None\n        }\n    ];\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for zero amount item\");\n}\n\n#[test]\nfn batch_deduct_too_large_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 10_000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(10_000), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Build a batch of MAX_BATCH_SIZE + 1 items\n    let mut items = soroban_sdk::Vec::new(\u0026env);\n    for _ in 0..=crate::MAX_BATCH_SIZE {\n        items.push_back(DeductItem {\n            amount: 1,\n            request_id: None,\n        });\n    }\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected error for oversized batch\");\n}\n\n#[test]\nfn batch_deduct_fail_mid_batch_leaves_balance_unchanged() {\n    // Second item exceeds balance — entire batch must revert.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 60,\n            request_id: None\n        },\n        DeductItem {\n            amount: 60,\n            request_id: None\n        }, // cumulative 120 \u003e 100\n    ];\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected insufficient balance error\");\n    // Balance must be completely unchanged\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Withdraw tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn withdraw_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.withdraw(\u0026200);\n    assert_eq!(remaining, 300);\n    assert_eq!(client.balance(), 300);\n}\n\n#[test]\nfn withdraw_full_balance_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.withdraw(\u00261000);\n    assert_eq!(remaining, 0);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn withdraw_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_withdraw(\u0026500);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n#[test]\nfn withdraw_zero_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_withdraw(\u00260);\n    assert!(result.is_err(), \"expected error for zero amount\");\n}\n\n#[test]\nfn withdraw_to_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.withdraw_to(\u0026recipient, \u0026150);\n    assert_eq!(remaining, 350);\n    assert_eq!(client.balance(), 350);\n    assert_eq!(usdc_client.balance(\u0026recipient), 150);\n}\n\n#[test]\nfn withdraw_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let _intruder = Address::generate(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    // Reset auths to test requirement without mock_all_auths bypassing it\n    env.set_auths(\u0026[]);\n    let res = client.try_withdraw(\u0026500);\n    assert!(res.is_err());\n}\n\n#[test]\nfn withdraw_to_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_withdraw_to(\u0026recipient, \u0026500);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n// ---------------------------------------------------------------------------\n// Transfer ownership tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn transfer_ownership_two_step_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.transfer_ownership(\u0026new_owner);\n    let meta = client.get_meta();\n    assert_eq!(meta.owner, owner); // Still old owner\n\n    client.accept_ownership();\n    let meta2 = client.get_meta();\n    assert_eq!(meta2.owner, new_owner);\n}\n\n#[test]\nfn transfer_ownership_emits_events() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.transfer_ownership(\u0026new_owner);\n\n    let events = env.events().all();\n    let nomad_ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"ownership_nominated\")\n            }\n        })\n        .expect(\"expected ownership_nominated event\");\n\n    let old_n: Address = nomad_ev.1.get(1).unwrap().into_val(\u0026env);\n    let new_n: Address = nomad_ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(old_n, owner);\n    assert_eq!(new_n, new_owner);\n\n    client.accept_ownership();\n    let events2 = env.events().all();\n    let accept_ev = events2\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"ownership_accepted\")\n            }\n        })\n        .expect(\"expected ownership_accepted event\");\n\n    let old_a: Address = accept_ev.1.get(1).unwrap().into_val(\u0026env);\n    let new_a: Address = accept_ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(old_a, owner);\n    assert_eq!(new_a, new_owner);\n}\n\n#[test]\n#[should_panic(expected = \"new_owner must be different from current owner\")]\nfn transfer_ownership_same_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.transfer_ownership(\u0026owner);\n}\n\n// ---------------------------------------------------------------------------\n// Distribute tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn distribute_transfers_usdc_to_recipient() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.distribute(\u0026admin, \u0026developer, \u0026300);\n\n    assert_eq!(usdc_client.balance(\u0026developer), 300);\n    assert_eq!(usdc_client.balance(\u0026vault_address), 700);\n}\n\n#[test]\nfn distribute_unauthorized_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026intruder, \u0026developer, \u0026300);\n    assert!(result.is_err(), \"expected error when non-admin distributes\");\n}\n\n#[test]\nfn distribute_insufficient_usdc_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026admin, \u0026developer, \u0026500);\n    assert!(result.is_err(), \"expected error for insufficient USDC\");\n}\n\n#[test]\nfn distribute_zero_amount_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026admin, \u0026developer, \u00260);\n    assert!(result.is_err(), \"expected error for zero amount\");\n}\n\n// ---------------------------------------------------------------------------\n// Offering metadata tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_and_retrieve_metadata() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-001\");\n    let metadata = String::from_str(\u0026env, \"QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco\");\n\n    let result = client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(result, metadata);\n\n    let retrieved = client.get_metadata(\u0026offering_id);\n    assert_eq!(retrieved, Some(metadata));\n}\n\n#[test]\nfn set_metadata_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-002\");\n    let metadata = String::from_str(\n        \u0026env,\n        \"bafybeigdyrzt5sfp7udm7hu76uh7y26nf3efuylqabf3oclgtqy55fbzdi\",\n    );\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_set event\");\n\n    assert_eq!(ev.0, vault_address);\n    let topics = \u0026ev.1;\n    assert_eq!(topics.len(), 3);\n\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: String = topics.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = topics.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"metadata_set\"));\n    assert_eq!(topic1, offering_id);\n    assert_eq!(topic2, owner);\n\n    let data: String = ev.2.into_val(\u0026env);\n    assert_eq!(data, metadata);\n}\n\n#[test]\nfn update_metadata_and_verify() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-003\");\n    let old_metadata = String::from_str(\u0026env, \"QmOldMetadata123\");\n    let new_metadata = String::from_str(\u0026env, \"QmNewMetadata456\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026old_metadata);\n    let result = client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n    assert_eq!(result, new_metadata);\n\n    let retrieved = client.get_metadata(\u0026offering_id);\n    assert_eq!(retrieved, Some(new_metadata));\n}\n\n#[test]\nfn update_metadata_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-004\");\n    let old_metadata = String::from_str(\u0026env, \"https://example.com/old.json\");\n    let new_metadata = String::from_str(\u0026env, \"https://example.com/new.json\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026old_metadata);\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_updated event\");\n\n    assert_eq!(ev.0, vault_address);\n    let topics = \u0026ev.1;\n    assert_eq!(topics.len(), 3);\n\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: String = topics.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = topics.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"metadata_updated\"));\n    assert_eq!(topic1, offering_id);\n    assert_eq!(topic2, owner);\n\n    let data: (String, String) = ev.2.into_val(\u0026env);\n    assert_eq!(data.0, old_metadata);\n    assert_eq!(data.1, new_metadata);\n}\n\n#[test]\nfn update_metadata_without_existing_uses_empty_old() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-006\");\n    let new_metadata = String::from_str(\u0026env, \"QmNewMetadataOnly\");\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_updated event\");\n\n    assert_eq!(ev.0, vault_address);\n    let data: (String, String) = ev.2.into_val(\u0026env);\n    assert_eq!(data.0, String::from_str(\u0026env, \"\"));\n    assert_eq!(data.1, new_metadata);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn unauthorized_cannot_set_metadata() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-005\");\n    let metadata = String::from_str(\u0026env, \"QmSomeMetadata\");\n    client.set_metadata(\u0026unauthorized, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\nfn set_metadata_max_length_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"a\".repeat(64).as_str());\n    let metadata = String::from_str(\u0026env, \"b\".repeat(256).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata));\n}\n\n#[test]\n#[should_panic(expected = \"metadata exceeds max length\")]\nfn set_metadata_exceeds_length_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"off-1\");\n    let metadata = String::from_str(\u0026env, \"b\".repeat(257).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\n#[should_panic(expected = \"offering_id exceeds max length\")]\nfn set_offering_id_exceeds_length_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"a\".repeat(65).as_str());\n    let metadata = String::from_str(\u0026env, \"meta\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\nfn update_metadata_max_length_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-update\");\n    let metadata = String::from_str(\u0026env, \"b\".repeat(256).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"old\"));\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata));\n}\n\n#[test]\nfn metadata_remains_after_ownership_transfer() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"off-transfer\");\n    let metadata = String::from_str(\u0026env, \"ipfs://cid123\");\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n\n    client.transfer_ownership(\u0026new_owner);\n    client.accept_ownership();\n\n    // Metadata should still be accessible\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata.clone()));\n\n    // Old owner should no longer be able to update it\n    let update_res =\n        client.try_update_metadata(\u0026owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"new\"));\n    assert!(update_res.is_err());\n\n    // New owner should be able to update it\n    client.update_metadata(\u0026new_owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"new\"));\n    assert_eq!(\n        client.get_metadata(\u0026offering_id),\n        Some(String::from_str(\u0026env, \"new\"))\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Full lifecycle test\n// ---------------------------------------------------------------------------\n\n#[test]\nfn vault_full_lifecycle() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n\n    // Init with 500 balance, min_deposit = 10, and revenue_pool for routing\n    let revenue_pool = Address::generate(\u0026env);\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let meta = client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026Some(10),\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(client.balance(), 500);\n    assert_eq!(client.get_admin(), owner);\n\n    // Allow depositor and deposit 200\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    usdc_admin.mint(\u0026depositor, \u0026200);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u0026200, \u00261000);\n    let after_deposit = client.deposit(\u0026depositor, \u0026200);\n    assert_eq!(after_deposit, 700);\n    assert_eq!(client.balance(), 700);\n\n    // Batch deduct 100 + 50 + 25 = 175\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: Some(Symbol::new(\u0026env, \"r1\"))\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 25,\n            request_id: Some(Symbol::new(\u0026env, \"r3\"))\n        },\n    ];\n    let after_batch = client.batch_deduct(\u0026caller, \u0026items);\n    assert_eq!(after_batch, 525);\n    assert_eq!(client.balance(), 525);\n\n    // Single deduct\n    let after_deduct = client.deduct(\u0026caller, \u002625, \u0026Some(Symbol::new(\u0026env, \"r4\")));\n    assert_eq!(after_deduct, 500);\n\n    // Admin change\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    assert_eq!(client.get_admin(), new_admin);\n\n    // Withdraw to recipient\n    let after_withdraw_to = client.withdraw_to(\u0026recipient, \u0026100);\n    assert_eq!(after_withdraw_to, 400);\n    assert_eq!(client.balance(), 400);\n\n    // Withdraw to owner\n    let after_withdraw = client.withdraw(\u002650);\n    assert_eq!(after_withdraw, 350);\n    assert_eq!(client.balance(), 350);\n\n    let final_meta = client.get_meta();\n    assert_eq!(final_meta.balance, 350);\n    assert_eq!(final_meta.owner, owner);\n    assert_eq!(final_meta.min_deposit, 10);\n}\n\n// ---------------------------------------------------------------------------\n// Revenue pool integration tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_with_revenue_pool_stores_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn deduct_with_revenue_pool_transfers_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    client.deduct(\u0026caller, \u0026300, \u0026None);\n\n    assert_eq!(client.balance(), 700);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 300);\n}\n\n#[test]\nfn deduct_with_settlement_transfers_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 800);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(800),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026250, \u0026None);\n\n    assert_eq!(client.balance(), 550);\n    assert_eq!(usdc_client.balance(\u0026settlement), 250);\n}\n\n#[test]\nfn batch_deduct_with_revenue_pool_transfers_total_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 150,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    assert_eq!(client.balance(), 650);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 350);\n}\n\n#[test]\nfn batch_deduct_with_settlement_transfers_total_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026Some(500),\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 150,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    assert_eq!(client.balance(), 650);\n    assert_eq!(usdc_client.balance(\u0026settlement), 350);\n}\n\n// ---------------------------------------------------------------------------\n// set_revenue_pool / get_revenue_pool tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_revenue_pool_stores_and_get_returns_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    assert_eq!(client.get_revenue_pool(), Some(revenue_pool));\n}\n\n#[test]\nfn set_revenue_pool_clear_removes_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_revenue_pool(\u0026owner, \u0026None);\n\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn set_revenue_pool_update_replaces_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let old_pool = Address::generate(\u0026env);\n    let new_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(old_pool), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(new_pool.clone()));\n\n    assert_eq!(client.get_revenue_pool(), Some(new_pool));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_revenue_pool_unauthorized_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026attacker, \u0026Some(revenue_pool));\n}\n\n#[test]\nfn get_revenue_pool_returns_none_when_not_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn get_revenue_pool_returns_correct_after_update() {\n    // Verify get_revenue_pool reflects latest committed state after multiple updates\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool1 = Address::generate(\u0026env);\n    let pool2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Set first revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool1.clone()));\n    assert_eq!(client.get_revenue_pool(), Some(pool1));\n\n    // Update to second revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool2.clone()));\n    assert_eq!(client.get_revenue_pool(), Some(pool2));\n}\n\n#[test]\nfn get_revenue_pool_returns_none_after_clear() {\n    // Ensure get_revenue_pool returns None after clearing\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n    assert_eq!(client.get_revenue_pool(), Some(pool));\n\n    // Clear revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026None);\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn get_revenue_pool_consistent_after_deduct_operations() {\n    // Ensure get_revenue_pool remains consistent and doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    // Query revenue pool before deduct\n    let before = client.get_revenue_pool();\n    assert_eq!(before, Some(revenue_pool.clone()));\n\n    // Perform deduct operation\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n\n    // Query revenue pool after deduct - should be unchanged\n    let after = client.get_revenue_pool();\n    assert_eq!(after, Some(revenue_pool.clone()));\n    assert_eq!(before, after);\n\n    // Verify no state mutation occurred\n    assert_eq!(client.balance(), 800);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 200);\n}\n\n#[test]\nfn get_revenue_pool_no_mutation_on_multiple_calls() {\n    // Verify calling get_revenue_pool multiple times doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    let initial_balance = client.balance();\n\n    // Call get_revenue_pool multiple times\n    for _ in 0..10 {\n        let result = client.get_revenue_pool();\n        assert_eq!(result, Some(pool.clone()));\n    }\n\n    // Verify balance unchanged (no mutation)\n    assert_eq!(client.balance(), initial_balance);\n}\n\n#[test]\nfn get_revenue_pool_consistency_with_zero_balance() {\n    // Ensure get_revenue_pool works correctly with zero vault balance\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    // Balance should be zero\n    assert_eq!(client.balance(), 0);\n\n    // Revenue pool should still be queryable\n    assert_eq!(client.get_revenue_pool(), Some(pool));\n}\n\n#[test]\nfn get_revenue_pool_after_multiple_sequential_updates() {\n    // Test multiple sequential set/clear operations before query\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool1 = Address::generate(\u0026env);\n    let pool2 = Address::generate(\u0026env);\n    let pool3 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Multiple sequential updates\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool1.clone()));\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool2.clone()));\n    client.set_revenue_pool(\u0026owner, \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool3.clone()));\n\n    // Should reflect final committed state\n    assert_eq!(client.get_revenue_pool(), Some(pool3));\n}\n\n#[test]\nfn deduct_routes_to_settlement_when_both_configured() {\n    // settlement takes priority over revenue_pool when both are set\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026400, \u0026None);\n\n    // settlement gets the funds, revenue_pool gets nothing\n    assert_eq!(usdc_client.balance(\u0026settlement), 400);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 0);\n}\n\n#[test]\nfn set_revenue_pool_emits_event_on_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_revenue_pool\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, revenue_pool);\n}\n\n#[test]\nfn set_revenue_pool_emits_event_on_clear() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_revenue_pool(\u0026owner, \u0026None);\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"clear_revenue_pool\"));\n}\n\n// ---------------------------------------------------------------------------\n// set_settlement / get_settlement tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_settlement_stores_and_get_returns_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    assert_eq!(client.get_settlement(), settlement);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_settlement_unauthorized_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026attacker, \u0026settlement);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn get_settlement_before_set_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.get_settlement();\n}\n\n#[test]\nfn get_settlement_returns_correct_after_update() {\n    // Verify get_settlement reflects latest committed state after multiple updates\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement1 = Address::generate(\u0026env);\n    let settlement2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Set first settlement address\n    client.set_settlement(\u0026owner, \u0026settlement1);\n    assert_eq!(client.get_settlement(), settlement1);\n\n    // Update to second settlement address\n    client.set_settlement(\u0026owner, \u0026settlement2);\n    assert_eq!(client.get_settlement(), settlement2);\n}\n\n#[test]\nfn get_settlement_consistent_after_deduct_operations() {\n    // Ensure get_settlement remains consistent and doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    // Query settlement before deduct\n    let before = client.get_settlement();\n    assert_eq!(before, settlement);\n\n    // Perform deduct operation\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n\n    // Query settlement after deduct - should be unchanged\n    let after = client.get_settlement();\n    assert_eq!(after, settlement);\n    assert_eq!(before, after);\n\n    // Verify no state mutation occurred\n    assert_eq!(client.balance(), 800);\n    assert_eq!(usdc_client.balance(\u0026settlement), 200);\n}\n\n#[test]\nfn get_settlement_no_mutation_on_multiple_calls() {\n    // Verify calling get_settlement multiple times doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let initial_balance = client.balance();\n\n    // Call get_settlement multiple times\n    for _ in 0..10 {\n        let result = client.get_settlement();\n        assert_eq!(result, settlement);\n    }\n\n    // Verify balance unchanged (no mutation)\n    assert_eq!(client.balance(), initial_balance);\n}\n\n// ---------------------------------------------------------------------------\n// Routing configuration and validation tests\n// ---------------------------------------------------------------------------\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn deduct_without_routing_fails() {\n    // Deduct should fail if neither settlement nor revenue_pool is configured\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    // No routing configured - should panic\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn batch_deduct_without_routing_fails() {\n    // Batch deduct should fail if neither settlement nor revenue_pool is configured\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n    ];\n\n    // No routing configured - should panic\n    client.batch_deduct(\u0026caller, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"revenue_pool cannot be vault address\")]\nfn set_revenue_pool_to_vault_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Try to set revenue_pool to vault's own address\n    client.set_revenue_pool(\u0026owner, \u0026Some(vault_address));\n}\n\n#[test]\n#[should_panic(expected = \"settlement cannot be vault address\")]\nfn set_settlement_to_vault_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Try to set settlement to vault's own address\n    client.set_settlement(\u0026owner, \u0026vault_address);\n}\n\n#[test]\nfn set_revenue_pool_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_revenue_pool\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, revenue_pool);\n}\n\n#[test]\nfn set_settlement_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_settlement\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, settlement);\n}\n\n#[test]\nfn routing_prioritizes_settlement_over_revenue_pool() {\n    // When both are set, settlement should receive funds\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026300, \u0026None);\n\n    // Settlement gets the funds, revenue_pool gets nothing\n    assert_eq!(usdc_client.balance(\u0026settlement), 300);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 0);\n    assert_eq!(client.balance(), 700);\n}\n\n#[test]\nfn routing_uses_revenue_pool_when_settlement_unset() {\n    // When only revenue_pool is set, it should receive funds\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    client.deduct(\u0026caller, \u0026250, \u0026None);\n\n    // Revenue pool gets the funds\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 250);\n    assert_eq!(client.balance(), 750);\n}\n\n#[test]\nfn routing_allows_multiple_sequential_updates() {\n    // Test reconfiguration after initial set\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement1 = Address::generate(\u0026env);\n    let settlement2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    // Set first settlement\n    client.set_settlement(\u0026owner, \u0026settlement1);\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n    assert_eq!(usdc_client.balance(\u0026settlement1), 100);\n\n    // Update to second settlement\n    client.set_settlement(\u0026owner, \u0026settlement2);\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n    assert_eq!(usdc_client.balance(\u0026settlement1), 100); // unchanged\n    assert_eq!(usdc_client.balance(\u0026settlement2), 200); // new routing\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_revenue_pool_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026attacker, \u0026Some(revenue_pool));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_settlement_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026attacker, \u0026settlement);\n}\n\n#[test]\nfn routing_with_same_address_for_both_roles() {\n    // Allow same address for both settlement and revenue_pool (edge case)\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let shared_address = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    // Set both to same address\n    client.set_revenue_pool(\u0026owner, \u0026Some(shared_address.clone()));\n    client.set_settlement(\u0026owner, \u0026shared_address);\n\n    // Settlement takes priority\n    client.deduct(\u0026caller, \u0026150, \u0026None);\n    assert_eq!(usdc_client.balance(\u0026shared_address), 150);\n    assert_eq!(client.balance(), 850);\n}\n\n#[test]\nfn test_clear_allowed_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    let result = client.try_deposit(\u0026depositor, \u002650);\n    assert!(result.is_err());\n}\n\n#[test]\nfn test_set_authorized_caller() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let auth_caller = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.set_authorized_caller(\u0026auth_caller);\n    let meta = client.get_meta();\n    assert_eq!(meta.authorized_caller, Some(auth_caller));\n}\n\n#[test]\nfn test_deduct_with_settlement_success() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026owner, \u0026300, \u0026None);\n\n    assert_eq!(client.balance(), 700);\n    assert_eq!(usdc_client.balance(\u0026settlement), 300);\n}\n\n// ---------------------------------------------------------------------------\n// Checked arithmetic — overflow / underflow boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deposit_near_i128_max_succeeds() {\n    // Verify that a balance sitting just below i128::MAX can accept one more deposit.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    // Start with i128::MAX - 100 so there is headroom for a 100-unit deposit.\n    let initial: i128 = i128::MAX - 100;\n    fund_vault(\u0026usdc_admin, \u0026vault_address, initial);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(initial), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026100);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026100, \u00261000);\n    let new_balance = client.deposit(\u0026owner, \u0026100);\n    assert_eq!(new_balance, i128::MAX);\n}\n\n#[test]\nfn deposit_overflow_panics() {\n    // A deposit that would push balance past i128::MAX must panic.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, i128::MAX);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(i128::MAX), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261, \u00261000);\n    let result = client.try_deposit(\u0026owner, \u00261);\n    assert!(result.is_err(), \"expected overflow panic\");\n}\n\n#[test]\nfn deduct_to_zero_succeeds() {\n    // Deducting the entire balance should leave exactly 0, not underflow.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(client.deduct(\u0026owner, \u0026500, \u0026None), 0);\n}\n\n#[test]\nfn withdraw_to_zero_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(client.withdraw(\u0026300), 0);\n}\n\n// ---------------------------------------------------------------------------\n// Issue #108 — set_allowed_depositor: duplicate add, clear, unauthorized\n// ---------------------------------------------------------------------------\n\n#[test]\nfn clear_allowed_depositors_removes_all() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let d1 = Address::generate(\u0026env);\n    let d2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d1.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d2.clone()));\n    client.clear_allowed_depositors(\u0026owner);\n\n    // Neither address should be able to deposit after clear.\n    usdc_admin.mint(\u0026d1, \u002610);\n    usdc_client.approve(\u0026d1, \u0026vault_address, \u002610, \u00261000);\n    assert!(client.try_deposit(\u0026d1, \u002610).is_err());\n}\n\n#[test]\nfn clear_allowed_depositors_on_empty_is_noop() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    // Must not panic on empty list.\n    client.clear_allowed_depositors(\u0026owner);\n    assert_eq!(client.get_allowed_depositors().len(), 0);\n}\n\n#[test]\nfn non_owner_cannot_set_allowed_depositor_issue108() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_set_allowed_depositor(\u0026attacker, \u0026Some(depositor.clone()));\n    assert!(result.is_err(), \"non-owner must not mutate allowlist\");\n}\n\n#[test]\nfn non_owner_cannot_clear_allowed_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    let result = client.try_clear_allowed_depositors(\u0026attacker);\n    assert!(result.is_err(), \"non-owner must not clear allowlist\");\n}\n\n// ---------------------------------------------------------------------------\n// Token transfer failure modes — documented limitations\n// ---------------------------------------------------------------------------\n//\n// # Manual Test Plan: Transfer Failure Modes\n//\n// The Soroban test harness (soroban-sdk testutils) does not provide a mechanism\n// to inject token-level failures (e.g. simulate a transfer revert mid-call).\n// The following failure modes are therefore documented here for manual / fuzzing\n// verification rather than automated unit tests:\n//\n// 1. **deposit: transfer from caller fails** — if the caller has insufficient\n//    USDC balance or has not approved the vault, the token contract panics and\n//    the deposit reverts atomically (no balance change).\n//\n// 2. **withdraw / withdraw_to: transfer to recipient fails** — if the vault's\n//    on-chain USDC balance is lower than the tracked `meta.balance` (e.g. due\n//    to a direct token transfer out), the token transfer panics. The vault\n//    balance is NOT updated in this case (state write happens after transfer).\n//\n// 3. **deduct → settlement transfer fails** — if the settlement address has no\n//    trustline or the vault's USDC balance is insufficient, the token transfer\n//    panics. The vault balance IS already written before the transfer; callers\n//    should treat a panic here as a critical invariant violation.\n//\n// 4. **deduct → revenue_pool transfer fails** — same as (3) for revenue_pool.\n//\n// 5. **distribute: transfer fails** — guarded by an explicit `vault_balance \u003c amount`\n//    check before the transfer; covered by `distribute_insufficient_usdc_fails`.\n//\n// All paths above are covered by the checked-arithmetic and balance-guard tests\n// below. The highest-risk external calls (deduct routing) are covered by the\n// integration tests `deduct_with_settlement_transfers_usdc` and\n// `deduct_with_revenue_pool_transfers_usdc`.\n\n// ---------------------------------------------------------------------------\n// Additional edge-case tests to reach ≥ 95 % line coverage\n// ---------------------------------------------------------------------------\n\n#[test]\n#[should_panic(expected = \"vault already paused\")]\nfn pause_when_already_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    client.pause(\u0026owner); // second pause must panic\n}\n\n#[test]\n#[should_panic(expected = \"vault not paused\")]\nfn unpause_when_not_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.unpause(\u0026owner); // not paused — must panic\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin or owner\")]\nfn pause_by_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026attacker);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin or owner\")]\nfn unpause_by_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    client.unpause(\u0026attacker);\n}\n\n#[test]\nfn owner_can_pause_and_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    assert!(!client.is_paused());\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn admin_can_pause_and_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    client.pause(\u0026new_admin);\n    assert!(client.is_paused());\n    client.unpause(\u0026new_admin);\n    assert!(!client.is_paused());\n}\n\n// ---------------------------------------------------------------------------\n// is_paused() view function tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn is_paused_returns_false_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    // After initialization, vault should not be paused\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn is_paused_returns_true_after_pause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    // After pause, should return true\n    assert!(client.is_paused());\n}\n\n#[test]\nfn is_paused_returns_false_after_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n    client.unpause(\u0026owner);\n    // After unpause, should return false\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn is_paused_multiple_pause_unpause_cycles() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Multiple cycles of pause/unpause\n    for _ in 0..5 {\n        assert!(!client.is_paused());\n        client.pause(\u0026owner);\n        assert!(client.is_paused());\n        client.unpause(\u0026owner);\n        assert!(!client.is_paused());\n    }\n}\n\n#[test]\nfn is_paused_consistent_consecutive_calls() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Call is_paused multiple times - should return consistent values\n    for _ in 0..10 {\n        assert!(!client.is_paused());\n    }\n\n    client.pause(\u0026owner);\n\n    for _ in 0..10 {\n        assert!(client.is_paused());\n    }\n\n    client.unpause(\u0026owner);\n\n    for _ in 0..10 {\n        assert!(!client.is_paused());\n    }\n}\n\n#[test]\nfn is_paused_no_state_mutation() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Get balance before calling is_paused\n    let balance_before = client.balance();\n\n    // Call is_paused multiple times\n    for _ in 0..100 {\n        let _ = client.is_paused();\n    }\n\n    // Balance should remain unchanged (no state mutation)\n    assert_eq!(client.balance(), balance_before);\n}\n\n#[test]\nfn is_paused_reflects_latest_committed_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Initial state\n    assert!(!client.is_paused());\n\n    // Pause and verify immediate reflection\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    // Unpause and verify immediate reflection\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n\n    // Admin change shouldn't affect pause state\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    assert!(!client.is_paused());\n\n    // New admin can pause\n    client.pause(\u0026new_admin);\n    assert!(client.is_paused());\n}\n\n#[test]\nfn is_paused_safe_default_before_init() {\n    let env = Env::default();\n    let (_, client) = create_vault(\u0026env);\n    // Before initialization, is_paused should return false (safe default)\n    // and must not panic\n    assert!(!client.is_paused());\n}\n\n#[test]\n#[should_panic(expected = \"vault is paused\")]\nfn deduct_while_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.pause(\u0026owner);\n    client.deduct(\u0026owner, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"vault is paused\")]\nfn batch_deduct_while_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.pause(\u0026owner);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        }\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized caller\")]\nfn deduct_unauthorized_caller_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    // init with an authorized_caller so the None branch is not taken\n    let auth = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(auth),\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026attacker, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized caller\")]\nfn batch_deduct_unauthorized_caller_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let auth = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(auth),\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        }\n    ];\n    client.batch_deduct(\u0026attacker, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn deduct_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    client.deduct(\u0026owner, \u0026100, \u0026None); // 100 \u003e max_deduct(50)\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn batch_deduct_item_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        }\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn distribute_negative_amount_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.distribute(\u0026owner, \u0026dev, \u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"no admin transfer pending\")]\nfn accept_admin_without_pending_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.accept_admin();\n}\n\n#[test]\n#[should_panic(expected = \"no ownership transfer pending\")]\nfn accept_ownership_without_pending_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.accept_ownership();\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn withdraw_negative_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw(\u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn withdraw_to_negative_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw_to(\u0026recipient, \u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn deduct_no_routing_fails() {\n    // When neither settlement nor revenue_pool is configured, deduct should fail\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.deduct(\u0026owner, \u0026200, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn batch_deduct_no_routing_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\nfn withdraw_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw(\u0026100);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"withdraw\")\n            }\n        })\n        .expect(\"expected withdraw event\");\n    let (amt, bal): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 100);\n    assert_eq!(bal, 200);\n}\n\n#[test]\nfn withdraw_to_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw_to(\u0026recipient, \u0026150);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"withdraw_to\")\n            }\n        })\n        .expect(\"expected withdraw_to event\");\n    let (amt, bal): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 150);\n    assert_eq!(bal, 150);\n}\n\n#[test]\nfn distribute_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.distribute(\u0026owner, \u0026dev, \u0026200);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"distribute\")\n            }\n        })\n        .expect(\"expected distribute event\");\n    let amt: i128 = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 200);\n}\n\n#[test]\nfn get_allowed_depositors_returns_list() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let d1 = Address::generate(\u0026env);\n    let d2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d1));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d2));\n    let list = client.get_allowed_depositors();\n    assert_eq!(list.len(), 2);\n}\n\n#[test]\nfn vault_unpaused_event_emitted() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    client.unpause(\u0026owner);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"vault_unpaused\")\n            }\n        })\n        .expect(\"expected vault_unpaused event\");\n    let caller: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(caller, owner);\n}\n\n// ---------------------------------------------------------------------------\n// Randomised sequence tests\n//\n// Invariants under test:\n//   1. VaultMeta.balance \u003e= 0 after every operation.\n//   2. Local simulator tracks the same balance as the contract at each step.\n//   3. batch_deduct is atomic: a failing batch leaves balance unchanged.\n//   4. pause blocks deposits but not deductions; unpause restores deposits.\n//   5. No single deduct/batch item may exceed max_deduct.\n//\n// Seeds are fixed so runs are deterministic and reproducible in CI.\n// ---------------------------------------------------------------------------\n\n#[cfg(test)]\nmod fuzz {\n    use super::*;\n    use rand::rngs::StdRng;\n    use rand::{Rng, SeedableRng};\n\n    /// Run a mixed sequence of deposit / deduct / batch_deduct / pause / unpause\n    /// and assert after every step that:\n    ///   - contract balance == local simulator\n    ///   - contract balance \u003e= 0\n    fn run_sequence(seed: u64, max_deduct_val: i128, initial: i128, steps: usize) {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n\n        // Pre-fund vault so initial_balance is valid.\n        usdc_admin.mint(\u0026vault_addr, \u0026initial);\n        let revenue_pool = Address::generate(\u0026env);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(initial),\n            \u0026None,\n            \u0026Some(1),            // min_deposit = 1\n            \u0026Some(revenue_pool), // revenue_pool for routing\n            \u0026Some(max_deduct_val),\n        );\n\n        // Give the depositor (owner) plenty of USDC.\n        // Use a very large amount to handle large max_deduct scenarios\n        let deposit_reserve: i128 = 10_000_000_000_000; // 10 trillion to handle large deposits\n        usdc_admin.mint(\u0026owner, \u0026deposit_reserve);\n        usdc_client.approve(\u0026owner, \u0026vault_addr, \u0026deposit_reserve, \u0026999_999);\n\n        let mut rng = StdRng::seed_from_u64(seed);\n        let mut sim: i128 = initial;\n        let mut paused = false;\n\n        for _ in 0..steps {\n            // Pick an operation: 0=deposit, 1=deduct, 2=batch_deduct, 3=toggle_pause\n            let op: u8 = rng.gen_range(0..4);\n\n            match op {\n                // --- deposit ---\n                0 =\u003e {\n                    // Cap deposit amount to avoid exceeding available balance\n                    let max_deposit = max_deduct_val.min(1_000_000_000);\n                    let amount: i128 = rng.gen_range(1..=max_deposit);\n                    if paused {\n                        // deposit must fail while paused\n                        assert!(client.try_deposit(\u0026owner, \u0026amount).is_err());\n                    } else {\n                        sim += amount;\n                        client.deposit(\u0026owner, \u0026amount);\n                    }\n                }\n\n                // --- single deduct ---\n                1 =\u003e {\n                    let amount: i128 = rng.gen_range(1..=max_deduct_val);\n                    if paused {\n                        // deduct must fail while paused\n                        assert!(client.try_deduct(\u0026caller, \u0026amount, \u0026None).is_err());\n                    } else if sim \u003e= amount {\n                        sim -= amount;\n                        client.deduct(\u0026caller, \u0026amount, \u0026None);\n                    } else {\n                        // must fail — balance unchanged\n                        assert!(client.try_deduct(\u0026caller, \u0026amount, \u0026None).is_err());\n                    }\n                }\n\n                // --- batch_deduct ---\n                2 =\u003e {\n                    // Build a batch of 1..=5 items, each within max_deduct.\n                    let n: usize = rng.gen_range(1..=5);\n                    let mut items = soroban_sdk::Vec::new(\u0026env);\n                    let mut batch_total: i128 = 0;\n                    let mut valid = true;\n                    for _ in 0..n {\n                        let amt: i128 = rng.gen_range(1..=max_deduct_val);\n                        batch_total = match batch_total.checked_add(amt) {\n                            Some(v) =\u003e v,\n                            None =\u003e {\n                                valid = false;\n                                break;\n                            }\n                        };\n                        items.push_back(DeductItem {\n                            amount: amt,\n                            request_id: None,\n                        });\n                    }\n                    if paused {\n                        // batch_deduct must fail while paused\n                        let before = client.balance();\n                        let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                        assert_eq!(\n                            client.balance(),\n                            before,\n                            \"failed batch must not change balance\"\n                        );\n                    } else if valid \u0026\u0026 sim \u003e= batch_total {\n                        sim -= batch_total;\n                        client.batch_deduct(\u0026caller, \u0026items);\n                    } else {\n                        // batch must fail atomically — balance unchanged\n                        let before = client.balance();\n                        let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                        assert_eq!(\n                            client.balance(),\n                            before,\n                            \"failed batch must not change balance\"\n                        );\n                    }\n                }\n\n                // --- toggle pause ---\n                3 =\u003e {\n                    if paused {\n                        client.unpause(\u0026owner);\n                        paused = false;\n                    } else {\n                        client.pause(\u0026owner);\n                        paused = true;\n                    }\n                }\n\n                _ =\u003e unreachable!(),\n            }\n\n            // Invariant assertions after every step.\n            let on_chain = client.balance();\n            assert_eq!(on_chain, sim, \"seed={seed} sim mismatch\");\n            assert!(on_chain \u003e= 0, \"seed={seed} balance went negative\");\n        }\n\n        // Leave vault unpaused so teardown is clean.\n        if paused {\n            client.unpause(\u0026owner);\n        }\n    }\n\n    #[test]\n    fn fuzz_deposit_and_deduct() {\n        // Original invariant: mixed deposits and single deducts stay non-negative.\n        run_sequence(0xdead_beef, 500, 10_000, 200);\n    }\n\n    #[test]\n    fn fuzz_batch_deduct_coverage() {\n        // Heavier batch_deduct weight via a different seed.\n        run_sequence(0xcafe_1234, 200, 5_000, 150);\n    }\n\n    #[test]\n    fn fuzz_pause_interleaved() {\n        // Pause/unpause interleaved with deposits and deductions.\n        run_sequence(0xf00d_abcd, 1_000, 50_000, 100);\n    }\n\n    #[test]\n    fn fuzz_tight_max_deduct() {\n        // max_deduct = 1 forces many small steps; exercises boundary exhaustively.\n        run_sequence(0x1234_5678, 1, 500, 300);\n    }\n\n    #[test]\n    fn fuzz_large_max_deduct() {\n        // max_deduct near i128::MAX / 2 — checks no overflow in batch totals.\n        run_sequence(0xabcd_ef01, i128::MAX / 2, 1_000_000, 80);\n    }\n\n    /// Verify that a batch whose cumulative total exceeds balance is fully atomic:\n    /// balance must be identical before and after the failed call.\n    #[test]\n    fn fuzz_batch_atomicity_on_overdraw() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n\n        usdc_admin.mint(\u0026vault_addr, \u0026300);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(300),\n            \u0026None,\n            \u0026None,\n            \u0026Some(Address::generate(\u0026env)),\n            \u0026Some(200),\n        );\n\n        let mut rng = StdRng::seed_from_u64(0x5eed_0001);\n        // Build batches that sometimes overdraw; assert atomicity each time.\n        for _ in 0..50 {\n            let before = client.balance();\n            let n: usize = rng.gen_range(1..=5);\n            let mut items = soroban_sdk::Vec::new(\u0026env);\n            for _ in 0..n {\n                items.push_back(DeductItem {\n                    amount: rng.gen_range(1..=200_i128),\n                    request_id: None,\n                });\n            }\n            let total: i128 = items.iter().map(|i| i.amount).sum();\n            if before \u003e= total {\n                client.batch_deduct(\u0026caller, \u0026items);\n                assert_eq!(client.balance(), before - total);\n            } else {\n                let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                assert_eq!(client.balance(), before, \"atomic rollback failed\");\n            }\n            assert!(client.balance() \u003e= 0);\n        }\n    }\n\n    /// Verify that max_deduct is enforced on every individual item in a batch.\n    #[test]\n    fn fuzz_max_deduct_enforced_in_batch() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n        let max_d: i128 = 100;\n        let revenue_pool = Address::generate(\u0026env);\n\n        usdc_admin.mint(\u0026vault_addr, \u002610_000);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(10_000),\n            \u0026None,\n            \u0026None,\n            \u0026Some(revenue_pool),\n            \u0026Some(max_d),\n        );\n\n        let mut rng = StdRng::seed_from_u64(0x5eed_0002);\n        for _ in 0..40 {\n            // Occasionally inject an item that exceeds max_deduct.\n            let exceed = rng.gen_bool(0.3);\n            let amt: i128 = if exceed {\n                rng.gen_range(max_d + 1..=max_d * 3)\n            } else {\n                rng.gen_range(1..=max_d)\n            };\n            let items = soroban_sdk::vec![\n                \u0026env,\n                DeductItem {\n                    amount: amt,\n                    request_id: None\n                }\n            ];\n            if exceed {\n                assert!(\n                    client.try_batch_deduct(\u0026caller, \u0026items).is_err(),\n                    \"item exceeding max_deduct must be rejected\"\n                );\n            } else if client.balance() \u003e= amt {\n                client.batch_deduct(\u0026caller, \u0026items);\n                assert!(client.balance() \u003e= 0);\n            }\n        }\n    }\n}\n\n// ---------------------------------------------------------------------------\n// Issue #151 — min_deposit boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deposit_exact_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002650);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002650, \u00261000);\n    let balance = client.deposit(\u0026owner, \u002650);\n    assert_eq!(balance, 50);\n}\n\n#[test]\n#[should_panic(expected = \"deposit below minimum\")]\nfn deposit_below_min_deposit_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002649);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002649, \u00261000);\n    client.deposit(\u0026owner, \u002649);\n}\n\n#[test]\nfn deposit_above_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002651);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002651, \u00261000);\n    let balance = client.deposit(\u0026owner, \u002651);\n    assert_eq!(balance, 51);\n}\n\n#[test]\nfn deposit_with_zero_min_deposit_allows_any_positive_amount() {\n    // When min_deposit is 0 (default), any positive amount should succeed.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(0), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261, \u00261000);\n    let balance = client.deposit(\u0026owner, \u00261);\n    assert_eq!(balance, 1);\n}\n\n#[test]\nfn init_min_deposit_stored_in_meta() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(100), \u0026None, \u0026None);\n    let meta = client.get_meta();\n    assert_eq!(meta.min_deposit, 100);\n}\n\n#[test]\nfn init_default_min_deposit_is_zero() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    let meta = client.get_meta();\n    assert_eq!(meta.min_deposit, 0);\n}\n\n#[test]\nfn deposit_one_below_large_min_deposit_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(1_000_000), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026999_999);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026999_999, \u00261000);\n    let result = client.try_deposit(\u0026owner, \u0026999_999);\n    assert!(\n        result.is_err(),\n        \"deposit one below large min_deposit must fail\"\n    );\n}\n\n#[test]\nfn deposit_exact_large_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(1_000_000), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261_000_000);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261_000_000, \u00261000);\n    let balance = client.deposit(\u0026owner, \u00261_000_000);\n    assert_eq!(balance, 1_000_000);\n}\n\n// ---------------------------------------------------------------------------\n// max_deduct boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deduct_equal_to_max_deduct_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    // max_deduct = 100, deposit 200 so balance is sufficient\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(100),\n    );\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u00261000);\n    client.deposit(\u0026owner, \u0026200);\n    // deduct exactly equal to max_deduct — must succeed\n    let balance = client.deduct(\u0026owner, \u0026100, \u0026None);\n    assert_eq!(balance, 600);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn deduct_above_max_deduct_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(100),\n    );\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u00261000);\n    client.deposit(\u0026owner, \u0026200);\n    // deduct 101 \u003e max_deduct 100 — must panic\n    client.deduct(\u0026owner, \u0026101, \u0026None);\n}\n\n#[test]\nfn deduct_default_cap_is_i128_max() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    // no max_deduct supplied — default cap (i128::MAX) applies\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    usdc_admin.mint(\u0026owner, \u00261_000_000);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261_000_000, \u00261000);\n    client.deposit(\u0026owner, \u00261_000_000);\n    // large deduct well below i128::MAX should succeed\n    let balance = client.deduct(\u0026owner, \u0026999_999, \u0026None);\n    assert_eq!(balance, 1);\n}\n\n#[test]\nfn batch_deduct_each_item_constrained_by_max_deduct() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    let revenue_pool = Address::generate(\u0026env);\n    // max_deduct = 50\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    usdc_admin.mint(\u0026owner, \u0026300);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n    client.deposit(\u0026owner, \u0026300);\n    // three items each exactly at the cap — all must pass\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n    ];\n    let balance = client.batch_deduct(\u0026owner, \u0026items);\n    assert_eq!(balance, 150);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn batch_deduct_one_item_above_max_deduct_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    usdc_admin.mint(\u0026owner, \u0026300);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n    client.deposit(\u0026owner, \u0026300);\n    // second item exceeds cap — must panic\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 51,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n","traces":[{"line":12,"address":[11108757,11108288,11108751],"length":1,"stats":{"Line":4}},{"line":16,"address":[],"length":0,"stats":{"Line":4}},{"line":17,"address":[],"length":0,"stats":{"Line":2}},{"line":18,"address":[],"length":0,"stats":{"Line":2}},{"line":19,"address":[],"length":0,"stats":{"Line":2}},{"line":20,"address":[],"length":0,"stats":{"Line":1}},{"line":23,"address":[11108784,11108969,11108975],"length":1,"stats":{"Line":4}},{"line":24,"address":[11108823],"length":1,"stats":{"Line":4}},{"line":25,"address":[11108843],"length":1,"stats":{"Line":4}},{"line":26,"address":[11108888],"length":1,"stats":{"Line":4}},{"line":30,"address":[11108240],"length":1,"stats":{"Line":1}},{"line":35,"address":[11108263],"length":1,"stats":{"Line":1}}],"covered":12,"coverable":12},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","vault","src","test_init_hardening.rs"],"content":"use crate::{CalloraVault, CalloraVaultClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"vault already initialized\")]\nfn test_double_initialization_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // First init\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n    // Second init should panic\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"usdc_token cannot be vault address\")]\nfn test_init_usdc_self_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Passing vault's own address as USDC token\n    client.init(\u0026owner, \u0026addr, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"revenue_pool cannot be vault address\")]\nfn test_init_revenue_pool_self_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Passing vault's own address as Revenue Pool\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(addr.clone()),\n        \u0026None,\n    );\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit must be non-negative\")]\nfn test_init_negative_min_deposit_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(-10), \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"max_deduct must be positive\")]\nfn test_init_zero_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026Some(0));\n}\n\n#[test]\n#[should_panic(expected = \"max_deduct must be positive\")]\nfn test_init_negative_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026Some(-50));\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit cannot exceed max_deduct\")]\nfn test_init_min_deposit_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(100), \u0026None, \u0026Some(50));\n}\n\n#[test]\nfn test_init_validates_successfully() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Test valid initialization with valid parameters\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026Some(10),\n        \u0026Some(pool.clone()),\n        \u0026Some(50),\n    );\n\n    assert_eq!(client.get_admin(), owner);\n}\n","traces":[],"covered":0,"coverable":0}]};
-        var previousData = {"files":[{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","revenue_pool","src","lib.rs"],"content":"#![no_std]\n\nuse soroban_sdk::{contract, contractimpl, token, Address, Env, Symbol, Vec};\n\n/// Revenue settlement contract: receives USDC from vault deducts and distributes to developers.\n///\n/// Flow: vault deduct → vault transfers USDC to this contract → admin calls distribute(to, amount).\n///\n/// # Security Assumptions\n/// - **Admin Key**: The admin has full control over fund distribution. Must be a secure multisig.\n/// - **USDC Asset**: The token address is permanently set on initialization. Must be carefully verified.\n/// - **Balances / Griefing**: The contract does not rely on strict balance invariants. External transfers\n///   increase balance without breaking logic.\n///\n/// For detailed threat models and mitigations, see [`SECURITY.md`](../../SECURITY.md).\nconst ADMIN_KEY: \u0026str = \"admin\";\nconst PENDING_ADMIN_KEY: \u0026str = \"pending_admin\";\nconst USDC_KEY: \u0026str = \"usdc\";\nconst ERR_AMOUNT_NOT_POSITIVE: \u0026str = \"amount must be positive\";\nconst ERR_UNAUTHORIZED: \u0026str = \"unauthorized: caller is not admin\";\nconst ERR_INSUFFICIENT_BALANCE: \u0026str = \"insufficient USDC balance\";\nconst ERR_NOT_INITIALIZED: \u0026str = \"revenue pool not initialized\";\n\n#[contract]\npub struct RevenuePool;\n\n#[contractimpl]\nimpl RevenuePool {\n    /// Initialize the revenue pool with an admin and the USDC token address.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `admin` - Address that may call `distribute`. Typically backend or multisig.\n    /// * `usdc_token` - Stellar USDC (or wrapped USDC) token contract address.\n    ///\n    /// # Panics\n    /// * If the revenue pool is already initialized.\n    ///\n    /// # Events\n    /// Emits an `init` event with the `admin` address as a topic and `usdc_token` address as data.\n    pub fn init(env: Env, admin: Address, usdc_token: Address) {\n        admin.require_auth();\n        if usdc_token == env.current_contract_address() {\n            panic!(\"invalid config: usdc_token cannot be the contract itself\");\n        }\n        if usdc_token == admin {\n            panic!(\"invalid config: usdc_token cannot be the admin address\");\n        }\n        let inst = env.storage().instance();\n        if inst.has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"revenue pool already initialized\");\n        }\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026admin);\n        inst.set(\u0026Symbol::new(\u0026env, USDC_KEY), \u0026usdc_token);\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"init\"), admin), usdc_token);\n    }\n\n    /// Return the current admin address.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The `Address` of the current admin.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, ADMIN_KEY))\n            .expect(\"revenue pool not initialized\")\n    }\n\n    /// Initiate replacement of the current admin. Only the existing admin may call this.\n    /// The new admin must call `claim_admin` to complete the transfer.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `new_admin` - Address of the proposed new admin.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    ///\n    /// # Events\n    /// Emits an `admin_transfer_started` event with the `current_admin` as a topic and `new_admin` as data.\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let current = Self::get_admin(env.clone());\n        if caller != current {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        let inst = env.storage().instance();\n        inst.set(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY), \u0026new_admin);\n\n        env.events().publish(\n            (Symbol::new(\u0026env, \"admin_transfer_started\"), current),\n            new_admin,\n        );\n    }\n\n    /// Complete the admin transfer. Only the pending admin may call this.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the pending admin set via `set_admin`.\n    ///\n    /// # Panics\n    /// * If no pending admin is set (`\"no pending admin\"`).\n    /// * If the caller is not the pending admin (`\"unauthorized: caller is not pending admin\"`).\n    ///\n    /// # Events\n    /// Emits an `admin_transfer_completed` event with the `new_admin` as a topic.\n    pub fn claim_admin(env: Env, caller: Address) {\n        caller.require_auth();\n        let inst = env.storage().instance();\n        let pending: Address = inst\n            .get(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY))\n            .expect(\"no pending admin\");\n\n        if caller != pending {\n            panic!(\"unauthorized: caller is not pending admin\");\n        }\n\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026pending);\n        inst.remove(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY));\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_transfer_completed\"), pending), ());\n    }\n\n    /// **Note**: This function is an **event-only helper**. It is **not** a substitute\n    /// for real token settlement and does **not** move any tokens. It exists purely\n    /// for event emission / indexer alignment when configured.\n    /// In practice, USDC is received when the vault (or any address) transfers tokens\n    /// to this contract's address; no separate \"receive_payment\" call is required\n    /// for the transfer to succeed.\n    ///\n    /// This function can be used to emit an event for indexers when the backend\n    /// wants to log that a payment was credited from the vault.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be admin (or could be extended to allow vault to call).\n    /// * `amount` - Amount received (for event logging).\n    /// * `from_vault` - Optional; true if the source was the vault.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    ///\n    /// # Events\n    /// Emits a `receive_payment` event with `caller` as a topic, and a tuple of `(amount, from_vault)` as data.\n    pub fn receive_payment(env: Env, caller: Address, amount: i128, from_vault: bool) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.events().publish(\n            (Symbol::new(\u0026env, \"receive_payment\"), caller),\n            (amount, from_vault),\n        );\n    }\n\n    fn validate_recipient(recipient: \u0026Address, contract_self: \u0026Address) {\n        // Rule 1 — no self-distributions (the contract sending to itself is almost\n        // certainly a logic bug; if you want to \"reclaim\" funds use a dedicated fn).\n        if recipient == contract_self {\n            panic!(\"invalid recipient: cannot distribute to the contract itself\");\n        }\n    }\n\n    /// Distribute USDC from this contract to a developer wallet.\n    ///\n    /// Only the admin may call. Transfers USDC from this contract to `to`.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `to` - Developer address to receive USDC.\n    /// * `amount` - Amount in token base units (e.g. USDC stroops).\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    /// * If the amount is zero or negative (`\"amount must be positive\"`).\n    /// * If the revenue pool has not been initialized.\n    /// * If the revenue pool holds less than the requested amount (`\"insufficient USDC balance\"`).\n    ///\n    /// # Events\n    /// Emits a `distribute` event with `to` as a topic and `amount` as data.\n    pub fn distribute(env: Env, caller: Address, to: Address, amount: i128) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"{}\", ERR_UNAUTHORIZED);\n        }\n        if amount \u003c= 0 {\n            panic!(\"{}\", ERR_AMOUNT_NOT_POSITIVE);\n        }\n\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(ERR_NOT_INITIALIZED);\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n\n        let contract_address = env.current_contract_address();\n        Self::validate_recipient(\u0026to, \u0026contract_address);\n\n        let _ = usdc.try_balance(\u0026to).unwrap_or_else(|_| {\n            panic!(\n                \"invalid recipient: account does not exist \\\n                                      or has no USDC trustline\"\n            )\n        });\n\n        if usdc.balance(\u0026contract_address) \u003c amount {\n            panic!(\"{}\", ERR_INSUFFICIENT_BALANCE);\n        }\n\n        usdc.transfer(\u0026contract_address, \u0026to, \u0026amount);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"distribute\"), to), amount);\n    }\n\n    /// Distribute USDC from this contract to multiple developer wallets in one transaction.\n    ///\n    /// Only the admin may call. Iterates through the vector of payments and atomically\n    /// transfers USDC to each developer. Fails if the total amount exceeds balance\n    /// or if any individual amount is not positive.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `payments` - A vector of `(Address, i128)` tuples representing destinations and amounts.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    /// * If any individual amount is zero or negative (`\"amount must be positive\"`).\n    /// * If the revenue pool has not been initialized.\n    /// * If the total amount exceeds the contract's available balance (`\"insufficient USDC balance\"`).\n    ///\n    /// # Events\n    /// Emits a `batch_distribute` event for each payment with `to` as a topic and `amount` as data.\n    pub fn batch_distribute(env: Env, caller: Address, payments: Vec\u003c(Address, i128)\u003e) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"{}\", ERR_UNAUTHORIZED);\n        }\n\n        let mut total_amount: i128 = 0;\n        for payment in payments.iter() {\n            let (_, amount) = payment;\n            if amount \u003c= 0 {\n                panic!(\"{}\", ERR_AMOUNT_NOT_POSITIVE);\n            }\n            total_amount = total_amount\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"total overflow\"));\n        }\n\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(ERR_NOT_INITIALIZED);\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n\n        let contract_address = env.current_contract_address();\n\n        if usdc.balance(\u0026contract_address) \u003c total_amount {\n            panic!(\"{}\", ERR_INSUFFICIENT_BALANCE);\n        }\n\n        for payment in payments.iter() {\n            let (to, amount) = payment;\n            Self::validate_recipient(\u0026to, \u0026contract_address);\n            usdc.transfer(\u0026contract_address, \u0026to, \u0026amount);\n            env.events()\n                .publish((Symbol::new(\u0026env, \"batch_distribute\"), to), amount);\n        }\n    }\n\n    /// Return this contract's USDC balance (for testing and dashboards).\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The balance of the contract in USDC base units.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn balance(env: Env) -\u003e i128 {\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(\"revenue pool not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n        usdc.balance(\u0026env.current_contract_address())\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_balance;\n","traces":[{"line":41,"address":[10967514,10967724,10966256],"length":1,"stats":{"Line":4}},{"line":42,"address":[10966291],"length":1,"stats":{"Line":1}},{"line":43,"address":[10966380],"length":1,"stats":{"Line":3}},{"line":44,"address":[10967607],"length":1,"stats":{"Line":1}},{"line":46,"address":[10966514],"length":1,"stats":{"Line":1}},{"line":47,"address":[10966559,10967589],"length":1,"stats":{"Line":2}},{"line":49,"address":[10966552,10966591],"length":1,"stats":{"Line":4}},{"line":50,"address":[10966730],"length":1,"stats":{"Line":3}},{"line":51,"address":[10967520],"length":1,"stats":{"Line":2}},{"line":53,"address":[10966885],"length":1,"stats":{"Line":1}},{"line":54,"address":[10967012],"length":1,"stats":{"Line":3}},{"line":56,"address":[10967147],"length":1,"stats":{"Line":1}},{"line":57,"address":[10967159],"length":1,"stats":{"Line":3}},{"line":70,"address":[10968973,10968592],"length":1,"stats":{"Line":3}},{"line":71,"address":[10968618],"length":1,"stats":{"Line":3}},{"line":73,"address":[10968728,10968815],"length":1,"stats":{"Line":4}},{"line":90,"address":[10969972,10968992,10970062],"length":1,"stats":{"Line":2}},{"line":91,"address":[10969027],"length":1,"stats":{"Line":1}},{"line":92,"address":[10969113],"length":1,"stats":{"Line":1}},{"line":93,"address":[10969212,10969150],"length":1,"stats":{"Line":2}},{"line":94,"address":[10969238,10969988],"length":1,"stats":{"Line":2}},{"line":96,"address":[10969231,10969270],"length":1,"stats":{"Line":2}},{"line":97,"address":[10969409],"length":1,"stats":{"Line":1}},{"line":99,"address":[10969541,10969843],"length":1,"stats":{"Line":2}},{"line":100,"address":[10969633,10969553],"length":1,"stats":{"Line":2}},{"line":101,"address":[10969776],"length":1,"stats":{"Line":1}},{"line":117,"address":[10962739,10962681,10961536],"length":1,"stats":{"Line":2}},{"line":118,"address":[10961566],"length":1,"stats":{"Line":1}},{"line":119,"address":[10961636],"length":1,"stats":{"Line":1}},{"line":121,"address":[10961764],"length":1,"stats":{"Line":1}},{"line":124,"address":[10961979],"length":1,"stats":{"Line":1}},{"line":125,"address":[10962048,10962697],"length":1,"stats":{"Line":2}},{"line":128,"address":[10962101,10962017],"length":1,"stats":{"Line":2}},{"line":129,"address":[10962176],"length":1,"stats":{"Line":1}},{"line":131,"address":[10962303],"length":1,"stats":{"Line":1}},{"line":132,"address":[10962315],"length":1,"stats":{"Line":1}},{"line":156,"address":[10963467,10962784,10963400],"length":1,"stats":{"Line":2}},{"line":157,"address":[10962851],"length":1,"stats":{"Line":1}},{"line":158,"address":[10962929],"length":1,"stats":{"Line":1}},{"line":159,"address":[10962958,10963020],"length":1,"stats":{"Line":2}},{"line":160,"address":[10963415,10963046],"length":1,"stats":{"Line":2}},{"line":162,"address":[10963315,10963039],"length":1,"stats":{"Line":2}},{"line":163,"address":[10963176,10963082],"length":1,"stats":{"Line":2}},{"line":168,"address":[10966048],"length":1,"stats":{"Line":2}},{"line":171,"address":[10966062],"length":1,"stats":{"Line":2}},{"line":172,"address":[10966087],"length":1,"stats":{"Line":1}},{"line":194,"address":[10959936,10961514,10961474],"length":1,"stats":{"Line":2}},{"line":195,"address":[10959976],"length":1,"stats":{"Line":1}},{"line":196,"address":[10960054],"length":1,"stats":{"Line":2}},{"line":197,"address":[10960145,10960083],"length":1,"stats":{"Line":3}},{"line":198,"address":[10960173],"length":1,"stats":{"Line":0}},{"line":200,"address":[10960151],"length":1,"stats":{"Line":2}},{"line":201,"address":[10960217],"length":1,"stats":{"Line":1}},{"line":207,"address":[10960317,10960413],"length":1,"stats":{"Line":4}},{"line":208,"address":[10960420,10960268,10960348],"length":1,"stats":{"Line":0}},{"line":209,"address":[10960691],"length":1,"stats":{"Line":2}},{"line":211,"address":[10960723],"length":1,"stats":{"Line":2}},{"line":212,"address":[10960796],"length":1,"stats":{"Line":2}},{"line":214,"address":[10960849],"length":1,"stats":{"Line":2}},{"line":215,"address":[10913409],"length":1,"stats":{"Line":0}},{"line":221,"address":[10960906],"length":1,"stats":{"Line":2}},{"line":222,"address":[10961008],"length":1,"stats":{"Line":1}},{"line":225,"address":[10960976],"length":1,"stats":{"Line":1}},{"line":226,"address":[10961045,10961276],"length":1,"stats":{"Line":2}},{"line":227,"address":[10961057,10961302],"length":1,"stats":{"Line":2}},{"line":249,"address":[10963488,10965701,10965931],"length":1,"stats":{"Line":2}},{"line":250,"address":[10963523],"length":1,"stats":{"Line":1}},{"line":251,"address":[10963592],"length":1,"stats":{"Line":2}},{"line":252,"address":[10963686,10963624],"length":1,"stats":{"Line":6}},{"line":253,"address":[10963736],"length":1,"stats":{"Line":0}},{"line":256,"address":[10963697],"length":1,"stats":{"Line":3}},{"line":257,"address":[10963729,10963776,10963872],"length":1,"stats":{"Line":9}},{"line":258,"address":[10963963],"length":1,"stats":{"Line":3}},{"line":259,"address":[10964005],"length":1,"stats":{"Line":3}},{"line":260,"address":[10965772],"length":1,"stats":{"Line":1}},{"line":262,"address":[10965741,10965833,10965897],"length":1,"stats":{"Line":6}},{"line":263,"address":[10965765],"length":1,"stats":{"Line":2}},{"line":264,"address":[10913456,10913457],"length":1,"stats":{"Line":2}},{"line":270,"address":[10964231,10964135],"length":1,"stats":{"Line":4}},{"line":271,"address":[10964166,10964238,10964086],"length":1,"stats":{"Line":0}},{"line":272,"address":[10964509],"length":1,"stats":{"Line":2}},{"line":274,"address":[10964541],"length":1,"stats":{"Line":2}},{"line":276,"address":[10964689,10964601],"length":1,"stats":{"Line":4}},{"line":277,"address":[10964735],"length":1,"stats":{"Line":0}},{"line":280,"address":[10965696,10964728,10964871,10964775],"length":1,"stats":{"Line":8}},{"line":281,"address":[10964966],"length":1,"stats":{"Line":2}},{"line":282,"address":[10965070],"length":1,"stats":{"Line":2}},{"line":283,"address":[10965335],"length":1,"stats":{"Line":2}},{"line":284,"address":[10965391,10965630],"length":1,"stats":{"Line":4}},{"line":285,"address":[10965662,10965403],"length":1,"stats":{"Line":4}},{"line":299,"address":[10967744,10968568],"length":1,"stats":{"Line":1}},{"line":303,"address":[10967885,10967972],"length":1,"stats":{"Line":2}},{"line":305,"address":[10968235],"length":1,"stats":{"Line":1}},{"line":306,"address":[10968264,10968324],"length":1,"stats":{"Line":2}}],"covered":88,"coverable":94},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","revenue_pool","src","test.rs"],"content":"extern crate std;\n\nuse super::*;\nuse soroban_sdk::testutils::{Address as _, Events as _};\nuse soroban_sdk::token;\nuse soroban_sdk::TryFromVal;\nuse soroban_sdk::{Address, Env, IntoVal, Symbol, Vec};\n\nfn create_usdc\u003c'a\u003e(\n    env: \u0026'a Env,\n    admin: \u0026Address,\n) -\u003e (Address, token::Client\u003c'a\u003e, token::StellarAssetClient\u003c'a\u003e) {\n    let contract_address = env.register_stellar_asset_contract_v2(admin.clone());\n    let address = contract_address.address();\n    let client = token::Client::new(env, \u0026address);\n    let admin_client = token::StellarAssetClient::new(env, \u0026address);\n    (address, client, admin_client)\n}\n\nfn create_pool(env: \u0026Env) -\u003e (Address, RevenuePoolClient\u003c'_\u003e) {\n    let address = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(env, \u0026address);\n    (address, client)\n}\n\nfn fund_pool(usdc_admin_client: \u0026token::StellarAssetClient, pool_address: \u0026Address, amount: i128) {\n    usdc_admin_client.mint(pool_address, \u0026amount);\n}\n\n#[test]\nfn init_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_pool_addr, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    assert_eq!(client.get_admin(), admin);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn init_emits_event() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    let events = env.events().all();\n    let init_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026init_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"init\"));\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool already initialized\")]\nfn init_double_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.init(\u0026admin, \u0026usdc);\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool already initialized\")]\nfn init_double_different_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let other_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n    let (usdc2, _, _) = create_usdc(\u0026env, \u0026other_admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.init(\u0026other_admin, \u0026usdc2);\n}\n\n#[test]\n#[should_panic(expected = \"invalid config: usdc_token cannot be the contract itself\")]\nfn init_usdc_token_is_contract_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n\n    // Passing the contract's own address as usdc_token should be rejected.\n    client.init(\u0026admin, \u0026pool_addr);\n}\n\n#[test]\n#[should_panic(expected = \"invalid config: usdc_token cannot be the admin address\")]\nfn init_usdc_token_is_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n\n    // Passing the admin address as usdc_token should be rejected.\n    client.init(\u0026admin, \u0026admin);\n}\n\n#[test]\nfn distribute_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1_000);\n    client.distribute(\u0026admin, \u0026developer, \u0026400);\n\n    assert_eq!(usdc_client.balance(\u0026pool_addr), 600);\n    assert_eq!(usdc_client.balance(\u0026developer), 400);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn distribute_zero_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.distribute(\u0026admin, \u0026developer, \u00260);\n}\n\n#[test]\n#[should_panic(expected = \"insufficient USDC balance\")]\nfn distribute_excess_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n    client.distribute(\u0026admin, \u0026developer, \u0026101);\n}\n\n#[test]\nfn set_admin_two_step_transfers_control() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 300);\n\n    client.set_admin(\u0026admin, \u0026new_admin);\n    assert_eq!(client.get_admin(), admin);\n\n    client.claim_admin(\u0026new_admin);\n    assert_eq!(client.get_admin(), new_admin);\n\n    client.distribute(\u0026new_admin, \u0026developer, \u0026100);\n    assert_eq!(usdc_client.balance(\u0026developer), 100);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_admin_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026attacker, \u0026new_admin);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not pending admin\")]\nfn claim_admin_wrong_address_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026new_admin);\n    client.claim_admin(\u0026attacker);\n}\n\n#[test]\nfn admin_transfer_emits_events() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    // Step 1 event\n    client.set_admin(\u0026admin, \u0026new_admin);\n    let events = env.events().all();\n    let transfer_started = events.last().unwrap();\n\n    // FIX: Convert Val to Symbol for comparison\n    let event_name = Symbol::try_from_val(\u0026env, \u0026transfer_started.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"admin_transfer_started\"));\n\n    // Step 2 event\n    client.claim_admin(\u0026new_admin);\n    let events = env.events().all();\n    let transfer_completed = events.last().unwrap();\n\n    // FIX: Convert Val to Symbol for comparison\n    let event_name_comp =\n        Symbol::try_from_val(\u0026env, \u0026transfer_completed.1.get(0).unwrap()).unwrap();\n    assert_eq!(\n        event_name_comp,\n        Symbol::new(\u0026env, \"admin_transfer_completed\")\n    );\n}\n\n#[test]\nfn receive_payment_emits_event() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    let events = env.events().all();\n    let receive_payment_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026receive_payment_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"receive_payment\"));\n\n    let amount_and_source: (i128, bool) =\n        \u003c(i128, bool)\u003e::try_from_val(\u0026env, \u0026receive_payment_event.2).unwrap();\n    assert_eq!(amount_and_source, (250, true));\n}\n\n#[test]\nfn batch_distribute_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 300_i128));\n    payments.push_back((dev2.clone(), 200_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    assert_eq!(usdc_client.balance(\u0026dev1), 300);\n    assert_eq!(usdc_client.balance(\u0026dev2), 200);\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn batch_distribute_success_events() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 300_i128));\n    payments.push_back((dev2.clone(), 200_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    let events = env.events().all();\n    assert!(events.len() \u003e= 4);\n\n    for i in 0..events.len() {\n        let (_, topics, data) = events.get(i).unwrap();\n        let topic_0 = topics.get(0).unwrap();\n        if let Ok(event_name) = Symbol::try_from_val(\u0026env, \u0026topic_0) {\n            if event_name == Symbol::new(\u0026env, \"batch_distribute\") {\n                let value: i128 = i128::try_from_val(\u0026env, \u0026data).unwrap();\n                assert!(value == 300 || value == 200);\n            }\n        }\n    }\n}\n\n#[test]\nfn receive_payment_emits_event_for_admin() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    let events = env.events().all();\n    let receive_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026receive_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"receive_payment\"));\n\n    let caller: Address = Address::try_from_val(\u0026env, \u0026receive_event.1.get(1).unwrap()).unwrap();\n    assert_eq!(caller, admin);\n\n    let (amount, from_vault): (i128, bool) = receive_event.2.into_val(\u0026env);\n    assert_eq!(amount, 250);\n    assert!(from_vault);\n}\n\n#[test]\n#[should_panic(expected = \"no pending admin\")]\nfn claim_admin_without_pending_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let candidate = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.claim_admin(\u0026candidate);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not pending admin\")]\nfn claim_admin_wrong_caller_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let pending_admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026pending_admin);\n    client.claim_admin(\u0026attacker);\n}\n\n#[test]\n#[should_panic(expected = \"invalid recipient: cannot distribute to the contract itself\")]\nfn distribute_to_self_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n    client.distribute(\u0026admin, \u0026pool_addr, \u002650);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn batch_distribute_zero_amount_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc_address, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev, 0));\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n","traces":[{"line":9,"address":[10917840,10918309,10918303],"length":1,"stats":{"Line":4}},{"line":13,"address":[10917902],"length":1,"stats":{"Line":4}},{"line":14,"address":[10917941],"length":1,"stats":{"Line":3}},{"line":15,"address":[10918006],"length":1,"stats":{"Line":1}},{"line":16,"address":[10918079],"length":1,"stats":{"Line":2}},{"line":17,"address":[10918147],"length":1,"stats":{"Line":1}},{"line":20,"address":[10917817,10917632,10917823],"length":1,"stats":{"Line":4}},{"line":21,"address":[10917671],"length":1,"stats":{"Line":4}},{"line":22,"address":[10917691],"length":1,"stats":{"Line":4}},{"line":23,"address":[10917736],"length":1,"stats":{"Line":4}},{"line":26,"address":[10944352],"length":1,"stats":{"Line":1}},{"line":27,"address":[10944375],"length":1,"stats":{"Line":1}}],"covered":12,"coverable":12},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","revenue_pool","src","test_balance.rs"],"content":"use crate::{RevenuePool, RevenuePoolClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"revenue pool not initialized\")]\nfn test_balance_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(\u0026env, \u0026addr);\n\n    // Calling balance before init should panic\n    client.balance();\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn test_receive_payment_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n\n    let admin = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n\n    let addr = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    // Call from unauthorized address should panic\n    client.receive_payment(\u0026attacker, \u0026100, \u0026false);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","settlement","src","lib.rs"],"content":"#![no_std]\n\nuse soroban_sdk::{contract, contractimpl, contracttype, Address, Env, Map, Symbol, Vec};\n\n/// Developer balance record in settlement contract\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct DeveloperBalance {\n    pub address: Address,\n    pub balance: i128,\n}\n\n/// Global pool balance tracking.\n///\n/// `last_updated` is set to `env.ledger().timestamp()` on every\n/// `receive_payment` call that credits the pool (`to_pool = true`).\n/// It is also set at `init` time. It is **not** updated when payments\n/// are routed to individual developer balances.\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct GlobalPool {\n    pub total_balance: i128,\n    /// Ledger timestamp of the last pool credit. Useful for analytics\n    /// and staleness checks.\n    pub last_updated: u64,\n}\n\n/// Payment received event\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct PaymentReceivedEvent {\n    pub from_vault: Address,\n    pub amount: i128,\n    pub to_pool: bool, // true if credited to global pool, false if to specific developer\n    pub developer: Option\u003cAddress\u003e, // developer address if credited to specific developer\n}\n\n/// Balance credited event\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct BalanceCreditedEvent {\n    pub developer: Address,\n    pub amount: i128,\n    pub new_balance: i128,\n}\n\n/// Storage key for the registered vault address.\nconst VAULT_KEY: \u0026str = \"vault\";\n/// Storage key for the admin address.\nconst ADMIN_KEY: \u0026str = \"admin\";\nconst PENDING_ADMIN_KEY: \u0026str = \"pending_admin\";\nconst DEVELOPER_BALANCES_KEY: \u0026str = \"developer_balances\";\n/// Storage key for the global pool state.\nconst GLOBAL_POOL_KEY: \u0026str = \"global_pool\";\n\n#[contract]\npub struct CalloraSettlement;\n\n#[contractimpl]\nimpl CalloraSettlement {\n    /// Initialize the settlement contract with admin and vault address.\n    ///\n    /// Persists admin + registered vault, initializes an empty developer balance map,\n    /// and stores a timestamped global pool.\n    ///\n    /// Storage keys written:\n    /// - `admin`\n    /// - `vault`\n    /// - `developer_balances`\n    /// - `global_pool`\n    ///\n    /// # Panics\n    /// Panics if the contract is already initialized.\n    pub fn init(env: Env, admin: Address, vault_address: Address) {\n        let inst = env.storage().instance();\n        if inst.has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract already initialized\");\n        }\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026admin);\n        inst.set(\u0026Symbol::new(\u0026env, VAULT_KEY), \u0026vault_address);\n        let empty_balances: Map\u003cAddress, i128\u003e = Map::new(\u0026env);\n        inst.set(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY), \u0026empty_balances);\n        let global_pool = GlobalPool {\n            total_balance: 0,\n            last_updated: env.ledger().timestamp(),\n        };\n        inst.set(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY), \u0026global_pool);\n    }\n\n    /// Receive payment from vault and credit to pool or developer balance.\n    ///\n    /// # Arguments\n    /// * `caller` - Must be authorized vault address or admin\n    /// * `amount` - Payment amount in USDC micro-units; must be \u003e 0\n    /// * `to_pool` - If true, credit global pool; if false, credit a specific developer\n    /// * `developer` - Required when `to_pool=false`; ignored when `to_pool=true`\n    ///\n    /// # Access Control\n    /// Only the registered vault address or admin can call this function.\n    ///\n    /// # Map Operations\n    /// When crediting to developer balance:\n    /// - Performs O(1) lookup to retrieve current balance from developer map\n    /// - Updates the specific developer's balance\n    /// - Stores updated map back to contract state\n    /// - Map iteration is NOT performed; only point lookup/update\n    ///\n    /// # Events\n    /// Always emits `payment_received`. Also emits `balance_credited` when `to_pool=false`.\n    pub fn receive_payment(\n        env: Env,\n        caller: Address,\n        amount: i128,\n        to_pool: bool,\n        developer: Option\u003cAddress\u003e,\n    ) {\n        caller.require_auth();\n        Self::require_authorized_caller(env.clone(), caller.clone());\n        if amount \u003c= 0 {\n            panic!(\"amount must be positive\");\n        }\n        let inst = env.storage().instance();\n        if to_pool {\n            let mut global_pool = Self::get_global_pool(env.clone());\n            global_pool.total_balance = global_pool\n                .total_balance\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"pool balance overflow\"));\n            global_pool.last_updated = env.ledger().timestamp();\n            inst.set(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY), \u0026global_pool);\n            env.events().publish(\n                (Symbol::new(\u0026env, \"payment_received\"), caller.clone()),\n                PaymentReceivedEvent {\n                    from_vault: caller.clone(),\n                    amount,\n                    to_pool: true,\n                    developer: None,\n                },\n            );\n        } else {\n            let dev_address = developer\n                .unwrap_or_else(|| panic!(\"developer address required when to_pool=false\"));\n            let mut balances: Map\u003cAddress, i128\u003e = inst\n                .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n                .unwrap_or_else(|| Map::new(\u0026env));\n            let current_balance = balances.get(dev_address.clone()).unwrap_or(0);\n            let new_balance = current_balance\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"developer balance overflow\"));\n            balances.set(dev_address.clone(), new_balance);\n            inst.set(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY), \u0026balances);\n            env.events().publish(\n                (Symbol::new(\u0026env, \"payment_received\"), caller.clone()),\n                PaymentReceivedEvent {\n                    from_vault: caller.clone(),\n                    amount,\n                    to_pool: false,\n                    developer: Some(dev_address.clone()),\n                },\n            );\n            env.events().publish(\n                (Symbol::new(\u0026env, \"balance_credited\"), dev_address.clone()),\n                BalanceCreditedEvent {\n                    developer: dev_address,\n                    amount,\n                    new_balance,\n                },\n            );\n        }\n    }\n\n    /// Get current admin address\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, ADMIN_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get registered vault address\n    pub fn get_vault(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, VAULT_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get global pool information\n    pub fn get_global_pool(env: Env) -\u003e GlobalPool {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get developer balance\n    ///\n    /// Performs a direct O(1) map lookup for the specified developer's balance.\n    /// This is the preferred method for querying individual balances as it does not iterate the map.\n    ///\n    /// # Arguments\n    /// * `developer` - Developer address to query\n    ///\n    /// # Returns\n    /// Balance in USDC micro-units, or 0 if no balance recorded\n    ///\n    /// # Safety\n    /// Safe for all use cases; does not depend on map iteration order.\n    pub fn get_developer_balance(env: Env, developer: Address) -\u003e i128 {\n        if !env.storage().instance().has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract not initialized\");\n        }\n        let inst = env.storage().instance();\n        let balances: Map\u003cAddress, i128\u003e = inst\n            .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n            .unwrap_or_else(|| Map::new(\u0026env));\n        balances.get(developer).unwrap_or(0)\n    }\n\n    /// Get all developer balances (for admin use)\n    ///\n    /// **CRITICAL**: Map iteration order is **NOT stable** and should not be relied upon.\n    /// Use this function only for administrative queries or reporting purposes.\n    /// For production integrations with many developers (\u003e100), implement off-chain indexing\n    /// by listening to `BalanceCreditedEvent` and maintaining a local database.\n    ///\n    /// # Iteration Behavior\n    /// - **Small maps (\u003c 100 entries)**: Safe to iterate; yields current state but order is unstable\n    /// - **Large maps (\u003e 100 entries)**: Consider off-chain indexing to avoid excessive gas costs\n    /// - **Order guarantees**: NONE. Do not use for routing, prioritization, or deterministic selection.\n    ///\n    /// # Returns\n    /// Vec of DeveloperBalance records. Iteration order is unstable and may vary between calls.\n    ///\n    /// # Use Cases\n    /// ✅ Administrative dashboards and reporting\n    /// ✅ Audit compliance queries\n    /// ✅ Contract state verification\n    /// ❌ Automatic routing based on iteration order\n    /// ❌ Deterministic selection of developers\n    ///\n    /// # Performance\n    /// Gas cost scales with number of developers:\n    /// - 50 developers: ~500 gas\n    /// - 100 developers: ~1,000 gas\n    /// - 500 developers: ~5,000 gas (consider off-chain indexing)\n    pub fn get_all_developer_balances(env: Env) -\u003e Vec\u003cDeveloperBalance\u003e {\n        if !env.storage().instance().has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract not initialized\");\n        }\n        let inst = env.storage().instance();\n        let balances: Map\u003cAddress, i128\u003e = inst\n            .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n            .unwrap_or_else(|| Map::new(\u0026env));\n        let mut result = Vec::new(\u0026env);\n        for (address, balance) in balances.iter() {\n            result.push_back(DeveloperBalance { address, balance });\n        }\n        result\n    }\n\n    /// Nominate a new admin (admin only).\n    ///\n    /// # Arguments\n    /// * `caller` - Current admin address; must match stored admin\n    /// * `new_admin` - Address to nominate as new admin\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Security\n    /// This implements a two-step admin transfer process:\n    /// 1. Current admin calls `set_admin()` to nominate new admin\n    /// 2. Nominated admin must call `accept_admin()` to complete transfer\n    ///\n    /// This prevents accidental admin loss and ensures the new admin\n    /// has control of their private keys before gaining privileges.\n    ///\n    /// # Events\n    /// Emits `admin_nominated` event with current and new admin addresses.\n    ///\n    /// # Panics\n    /// Panics if caller is not the current admin.\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let current_admin = Self::get_admin(env.clone());\n        if caller != current_admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY), \u0026new_admin);\n\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"admin_nominated\"),\n                current_admin,\n                new_admin,\n            ),\n            (),\n        );\n    }\n\n    /// Accept the admin role (pending admin only).\n    ///\n    /// # Access Control\n    /// Only the nominated pending admin can call this function.\n    ///\n    /// # Security\n    /// This is the second step of the two-step admin transfer process.\n    /// The nominated admin must explicitly accept, proving control of\n    /// their private keys before gaining admin privileges.\n    ///\n    /// # Events\n    /// Emits `admin_accepted` event with old and new admin addresses.\n    ///\n    /// # Panics\n    /// Panics if there is no pending admin transfer (i.e., `set_admin()`\n    /// was not called first).\n    pub fn accept_admin(env: Env) {\n        let inst = env.storage().instance();\n        let pending: Address = inst\n            .get(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY))\n            .expect(\"no admin transfer pending\");\n        pending.require_auth();\n\n        let current = Self::get_admin(env.clone());\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026pending);\n        inst.remove(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY));\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_accepted\"), current, pending), ());\n    }\n\n    /// Update vault address (admin only).\n    ///\n    /// # Arguments\n    /// * `caller` - Current admin address; must match stored admin\n    /// * `new_vault` - New vault contract address to register\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Security\n    /// The vault address controls which contract can send payments to\n    /// the settlement contract. Only trusted addresses should be set.\n    /// Changing the vault address immediately revokes access from the\n    /// old vault, so coordinate carefully during migrations.\n    ///\n    /// # Events\n    /// This function does not emit events. Monitor vault changes by\n    /// comparing the result of `get_vault()` across blocks.\n    ///\n    /// # Panics\n    /// Panics if caller is not the current admin.\n    pub fn set_vault(env: Env, caller: Address, new_vault: Address) {\n        caller.require_auth();\n        let current_admin = Self::get_admin(env.clone());\n        if caller != current_admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026Symbol::new(\u0026env, VAULT_KEY), \u0026new_vault);\n    }\n\n    /// Internal function to require authorized caller (vault or admin)\n    fn require_authorized_caller(env: Env, caller: Address) {\n        let vault = Self::get_vault(env.clone());\n        let admin = Self::get_admin(env.clone());\n        if caller != vault \u0026\u0026 caller != admin {\n            panic!(\"unauthorized: caller must be vault or admin\");\n        }\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_views;\n","traces":[{"line":74,"address":[11064731,11063456,11064666],"length":1,"stats":{"Line":5}},{"line":75,"address":[11063489,11063537],"length":1,"stats":{"Line":8}},{"line":76,"address":[11063658],"length":1,"stats":{"Line":4}},{"line":77,"address":[11064672],"length":1,"stats":{"Line":1}},{"line":79,"address":[11063810],"length":1,"stats":{"Line":4}},{"line":80,"address":[11063934],"length":1,"stats":{"Line":4}},{"line":81,"address":[11064066],"length":1,"stats":{"Line":4}},{"line":82,"address":[11064170,11064078],"length":1,"stats":{"Line":8}},{"line":85,"address":[11064250],"length":1,"stats":{"Line":4}},{"line":87,"address":[11064386],"length":1,"stats":{"Line":3}},{"line":110,"address":[11059060,11060256,11056624],"length":1,"stats":{"Line":4}},{"line":117,"address":[11056696],"length":1,"stats":{"Line":2}},{"line":118,"address":[11056806,11060218],"length":1,"stats":{"Line":2}},{"line":119,"address":[11056925],"length":1,"stats":{"Line":1}},{"line":120,"address":[11060198,11056957],"length":1,"stats":{"Line":2}},{"line":122,"address":[11056950,11056989],"length":1,"stats":{"Line":2}},{"line":123,"address":[11057127],"length":1,"stats":{"Line":1}},{"line":124,"address":[11059122,11057224],"length":1,"stats":{"Line":2}},{"line":125,"address":[11059241,11059170,11059139],"length":1,"stats":{"Line":3}},{"line":127,"address":[11059163],"length":1,"stats":{"Line":1}},{"line":128,"address":[10973745,10973744],"length":1,"stats":{"Line":1}},{"line":129,"address":[11059265],"length":1,"stats":{"Line":1}},{"line":130,"address":[11059375],"length":1,"stats":{"Line":1}},{"line":131,"address":[11059513,11059964],"length":1,"stats":{"Line":2}},{"line":132,"address":[11059613,11059525],"length":1,"stats":{"Line":2}},{"line":133,"address":[11059844],"length":1,"stats":{"Line":1}},{"line":134,"address":[11059778],"length":1,"stats":{"Line":1}},{"line":137,"address":[11059836],"length":1,"stats":{"Line":1}},{"line":141,"address":[11057138],"length":1,"stats":{"Line":1}},{"line":142,"address":[10973697,10973696],"length":1,"stats":{"Line":4}},{"line":144,"address":[11057343,11057247],"length":1,"stats":{"Line":2}},{"line":145,"address":[10973792,10973809],"length":1,"stats":{"Line":0}},{"line":146,"address":[11057501],"length":1,"stats":{"Line":1}},{"line":147,"address":[11057713,11057647],"length":1,"stats":{"Line":2}},{"line":148,"address":[11057640],"length":1,"stats":{"Line":1}},{"line":149,"address":[11057679],"length":1,"stats":{"Line":1}},{"line":150,"address":[11057745],"length":1,"stats":{"Line":1}},{"line":151,"address":[11057790],"length":1,"stats":{"Line":1}},{"line":152,"address":[11057928,11058483],"length":1,"stats":{"Line":2}},{"line":153,"address":[11058028,11057940],"length":1,"stats":{"Line":2}},{"line":154,"address":[11058363],"length":1,"stats":{"Line":1}},{"line":155,"address":[11058193],"length":1,"stats":{"Line":1}},{"line":158,"address":[11058315,11058257],"length":1,"stats":{"Line":2}},{"line":161,"address":[11058562,11058989],"length":1,"stats":{"Line":2}},{"line":162,"address":[11058574,11058665],"length":1,"stats":{"Line":3}},{"line":163,"address":[11058885],"length":1,"stats":{"Line":1}},{"line":164,"address":[11058829],"length":1,"stats":{"Line":1}},{"line":173,"address":[11064752,11065121],"length":1,"stats":{"Line":1}},{"line":174,"address":[11064778],"length":1,"stats":{"Line":1}},{"line":176,"address":[11064975,11064888],"length":1,"stats":{"Line":2}},{"line":177,"address":[10973937,10973936],"length":1,"stats":{"Line":3}},{"line":181,"address":[11065152,11065521],"length":1,"stats":{"Line":2}},{"line":182,"address":[11065178],"length":1,"stats":{"Line":2}},{"line":184,"address":[11065288,11065375],"length":1,"stats":{"Line":4}},{"line":185,"address":[10973985,10973984],"length":1,"stats":{"Line":4}},{"line":189,"address":[11056208,11056593],"length":1,"stats":{"Line":1}},{"line":190,"address":[11056238],"length":1,"stats":{"Line":1}},{"line":192,"address":[11056443,11056356],"length":1,"stats":{"Line":2}},{"line":193,"address":[10973648,10973649],"length":1,"stats":{"Line":3}},{"line":209,"address":[11061460,11060400,11061422],"length":1,"stats":{"Line":2}},{"line":210,"address":[11060423,11060492,11060829],"length":1,"stats":{"Line":3}},{"line":211,"address":[11060770],"length":1,"stats":{"Line":1}},{"line":213,"address":[11060874],"length":1,"stats":{"Line":1}},{"line":215,"address":[11061020],"length":1,"stats":{"Line":1}},{"line":216,"address":[10973872,10973889],"length":1,"stats":{"Line":0}},{"line":217,"address":[11061225],"length":1,"stats":{"Line":1}},{"line":247,"address":[11062064,11063372],"length":1,"stats":{"Line":1}},{"line":248,"address":[11062476,11062139,11062091],"length":1,"stats":{"Line":3}},{"line":249,"address":[11062417],"length":1,"stats":{"Line":1}},{"line":251,"address":[11062521],"length":1,"stats":{"Line":1}},{"line":253,"address":[11062667],"length":1,"stats":{"Line":1}},{"line":254,"address":[10973921,10973904],"length":1,"stats":{"Line":0}},{"line":255,"address":[11062880],"length":1,"stats":{"Line":1}},{"line":256,"address":[11062903,11063056,11062963],"length":1,"stats":{"Line":3}},{"line":257,"address":[11063367,11063167],"length":1,"stats":{"Line":2}},{"line":259,"address":[11063274],"length":1,"stats":{"Line":1}},{"line":284,"address":[11066569,11065552,11066659],"length":1,"stats":{"Line":2}},{"line":285,"address":[11065587],"length":1,"stats":{"Line":1}},{"line":286,"address":[11065673],"length":1,"stats":{"Line":1}},{"line":287,"address":[11065710,11065772],"length":1,"stats":{"Line":2}},{"line":288,"address":[11065798,11066585],"length":1,"stats":{"Line":2}},{"line":290,"address":[11065791],"length":1,"stats":{"Line":1}},{"line":292,"address":[11065857],"length":1,"stats":{"Line":0}},{"line":294,"address":[11066117,11066459],"length":1,"stats":{"Line":2}},{"line":296,"address":[11066129],"length":1,"stats":{"Line":1}},{"line":297,"address":[11066209],"length":1,"stats":{"Line":1}},{"line":298,"address":[11066256],"length":1,"stats":{"Line":1}},{"line":320,"address":[11056115,11054912,11056162],"length":1,"stats":{"Line":2}},{"line":321,"address":[11054927,11054996],"length":1,"stats":{"Line":2}},{"line":323,"address":[11055117],"length":1,"stats":{"Line":1}},{"line":325,"address":[11055324],"length":1,"stats":{"Line":1}},{"line":327,"address":[11055353],"length":1,"stats":{"Line":1}},{"line":328,"address":[11055396,11055486],"length":1,"stats":{"Line":2}},{"line":329,"address":[11055558],"length":1,"stats":{"Line":1}},{"line":331,"address":[11055685],"length":1,"stats":{"Line":1}},{"line":332,"address":[11055697],"length":1,"stats":{"Line":1}},{"line":356,"address":[11067371,11067335,11066672],"length":1,"stats":{"Line":2}},{"line":357,"address":[11066707],"length":1,"stats":{"Line":1}},{"line":358,"address":[11066769],"length":1,"stats":{"Line":1}},{"line":359,"address":[11066860,11066798],"length":1,"stats":{"Line":2}},{"line":360,"address":[11067351,11066886],"length":1,"stats":{"Line":2}},{"line":362,"address":[11066879],"length":1,"stats":{"Line":1}},{"line":364,"address":[11066945],"length":1,"stats":{"Line":0}},{"line":368,"address":[11062037,11061584],"length":1,"stats":{"Line":2}},{"line":369,"address":[11061670,11061612],"length":1,"stats":{"Line":4}},{"line":370,"address":[11061690,11061751],"length":1,"stats":{"Line":4}},{"line":371,"address":[11061828,11061858,11061763],"length":1,"stats":{"Line":6}},{"line":372,"address":[11061891,11062017],"length":1,"stats":{"Line":2}}],"covered":103,"coverable":108},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","settlement","src","test.rs"],"content":"#[cfg(test)]\nmod settlement_tests {\n    extern crate std;\n\n    use crate::{CalloraSettlement, CalloraSettlementClient};\n    use soroban_sdk::testutils::{Address as _, Ledger as _};\n    use soroban_sdk::{Address, Env, Map, Symbol};\n    use std::any::Any;\n    use std::panic::{catch_unwind, AssertUnwindSafe};\n\n    fn setup_contract() -\u003e (Env, Address, Address, Address, Address) {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        let third_party = Address::generate(\u0026env);\n        (env, addr, admin, vault, third_party)\n    }\n\n    fn panic_message(err: std::boxed::Box\u003cdyn Any + Send\u003e) -\u003e std::string::String {\n        if let Some(message) = err.downcast_ref::\u003c\u0026str\u003e() {\n            std::string::String::from(*message)\n        } else if let Some(message) = err.downcast_ref::\u003cstd::string::String\u003e() {\n            message.clone()\n        } else {\n            std::string::String::from(\"\u003cnon-string panic payload\u003e\")\n        }\n    }\n\n    #[test]\n    fn test_settlement_initialization() {\n        let env = Env::default();\n        env.mock_all_auths();\n        env.ledger().set_timestamp(1_700_000_000);\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        client.init(\u0026admin, \u0026vault);\n\n        env.as_contract(\u0026addr, || {\n            let inst = env.storage().instance();\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"admin\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"vault\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"developer_balances\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"global_pool\")));\n            let balances: Map\u003cAddress, i128\u003e =\n                inst.get(\u0026Symbol::new(\u0026env, \"developer_balances\")).unwrap();\n\n            assert_eq!(balances.len(), 0);\n        });\n\n        assert_eq!(client.get_admin(), admin);\n        assert_eq!(client.get_vault(), vault);\n\n        let global_pool = client.get_global_pool();\n        assert_eq!(global_pool.total_balance, 0);\n        assert_eq!(global_pool.last_updated, 1_700_000_000);\n\n        let all_balances = client.get_all_developer_balances();\n        assert_eq!(all_balances.len(), 0);\n        assert_eq!(client.get_developer_balance(\u0026developer), 0);\n    }\n\n    #[test]\n    fn test_receive_payment_to_pool() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n\n        let global_pool = client.get_global_pool();\n        assert_eq!(global_pool.total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_receive_payment_to_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 500i128);\n        assert_eq!(client.get_global_pool().total_balance, 0);\n    }\n\n    #[test]\n    fn test_receive_multiple_payments_accumulate() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026vault, \u0026150i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 250i128);\n    }\n\n    #[test]\n    fn test_get_developer_balance_when_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let balance = client.get_developer_balance(\u0026developer);\n        assert_eq!(balance, 0);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_when_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let all = client.get_all_developer_balances();\n        assert_eq!(all.len(), 0);\n    }\n\n    #[test]\n    fn test_admin_can_receive_payment_to_pool() {\n        // Admin can route payments directly to global pool (not just via vault)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        client.receive_payment(\u0026admin, \u0026100i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    fn test_admin_can_receive_payment_to_developer() {\n        // Admin routing a payment directly to a developer (not via vault)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026admin, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 200i128);\n    }\n\n    #[test]\n    fn test_pool_accumulates_across_multiple_payments() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026400i128, \u0026true, \u0026None);\n        client.receive_payment(\u0026vault, \u0026600i128, \u0026true, \u0026None);\n\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_get_developer_balance_returns_zero_for_unknown() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let stranger = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        assert_eq!(client.get_developer_balance(\u0026stranger), 0i128);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let dev1 = Address::generate(\u0026env);\n        let dev2 = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026300i128, \u0026false, \u0026Some(dev1.clone()));\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(dev2.clone()));\n\n        let all = client.get_all_developer_balances();\n        assert_eq!(all.len(), 2);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let all = client.get_all_developer_balances();\n        assert_eq!(all.len(), 0);\n    }\n\n    #[test]\n    fn test_set_admin_two_step() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        assert_eq!(client.get_admin(), admin); // Still old admin\n\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"no admin transfer pending\")]\n    fn test_accept_admin_fails_if_not_nominated() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.accept_admin();\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_set_admin_unauthorized() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Third party cannot set admin\n        client.set_admin(\u0026vault, \u0026new_admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_set_vault_unauthorized() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let attacker = Address::generate(\u0026env);\n        client.set_vault(\u0026attacker, \u0026new_vault);\n    }\n\n    #[test]\n    fn test_set_vault() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_vault(\u0026admin, \u0026new_vault);\n        assert_eq!(client.get_vault(), new_vault);\n    }\n\n    // ── admin rotation edge cases ────────────────────────────────────────────\n\n    #[test]\n    fn test_set_admin_to_same_address_succeeds() {\n        // Admin can nominate themselves again (useful for re-confirming control)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026admin);\n        // Still current admin until accept\n        assert_eq!(client.get_admin(), admin);\n\n        client.accept_admin();\n        assert_eq!(client.get_admin(), admin);\n    }\n\n    #[test]\n    fn test_set_vault_to_same_address_succeeds() {\n        // Admin can update vault to same address (no-op but valid)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_vault(\u0026admin, \u0026vault);\n        assert_eq!(client.get_vault(), vault);\n    }\n\n    #[test]\n    fn test_rapid_consecutive_admin_updates() {\n        // Admin can change nomination before acceptance\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin1 = Address::generate(\u0026env);\n        let new_admin2 = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // First nomination\n        client.set_admin(\u0026admin, \u0026new_admin1);\n        // Change nomination before acceptance\n        client.set_admin(\u0026admin, \u0026new_admin2);\n        // Only second nominee can accept\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin2);\n    }\n\n    #[test]\n    fn test_admin_cannot_accept_own_nomination() {\n        // Current admin cannot bypass two-step process\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026admin);\n        // Admin must still accept to complete transfer\n        client.accept_admin();\n        assert_eq!(client.get_admin(), admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_pending_admin_cannot_set_admin() {\n        // Pending admin has no privileges until accepted\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        // New admin tries to set another admin before accepting\n        client.set_admin(\u0026new_admin, \u0026vault);\n    }\n\n    #[test]\n    fn test_vault_update_after_admin_rotation() {\n        // Ensure vault updates work correctly after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // New admin updates vault\n        client.set_vault(\u0026new_admin, \u0026new_vault);\n        assert_eq!(client.get_vault(), new_vault);\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    fn test_admin_rotation_preserves_state() {\n        // Admin rotation doesn't affect pool or balances\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Add some balance\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026false, \u0026Some(developer.clone()));\n        let dev_balance_before = client.get_developer_balance(\u0026developer);\n        let pool_before = client.get_global_pool();\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // State preserved\n        assert_eq!(client.get_developer_balance(\u0026developer), dev_balance_before);\n        assert_eq!(\n            client.get_global_pool().total_balance,\n            pool_before.total_balance\n        );\n    }\n\n    // ── event emission tests ────────────────────────────────────────────────\n\n    #[test]\n    fn test_set_admin_emits_nomination_event() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n\n        let events = env.events().all();\n        let nom_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"admin_nominated\")\n                }\n            })\n            .expect(\"expected admin_nominated event\");\n\n        let topic_current: Address = nom_ev.1.get(1).unwrap().into_val(\u0026env);\n        let topic_new: Address = nom_ev.1.get(2).unwrap().into_val(\u0026env);\n        assert_eq!(topic_current, admin);\n        assert_eq!(topic_new, new_admin);\n    }\n\n    #[test]\n    fn test_accept_admin_emits_accepted_event() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        let events = env.events().all();\n        let acc_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"admin_accepted\")\n                }\n            })\n            .expect(\"expected admin_accepted event\");\n\n        let topic_old: Address = acc_ev.1.get(1).unwrap().into_val(\u0026env);\n        let topic_new: Address = acc_ev.1.get(2).unwrap().into_val(\u0026env);\n        assert_eq!(topic_old, admin);\n        assert_eq!(topic_new, new_admin);\n    }\n\n    // ── panic / error paths ──────────────────────────────────────────────────\n\n    #[test]\n    #[should_panic(expected = \"settlement contract already initialized\")]\n    fn test_double_init_panics() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        client.init(\u0026admin, \u0026vault);\n    }\n\n    #[test]\n    #[should_panic(expected = \"amount must be positive\")]\n    fn test_receive_payment_zero_amount() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00260i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"amount must be positive\")]\n    fn test_receive_payment_negative_amount() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026-1i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"developer address required when to_pool=false\")]\n    fn test_receive_payment_pool_false_no_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026None);\n    }\n\n    #[test]\n    fn test_receive_payment_authorization_matrix() {\n        enum CallerRole {\n            Vault,\n            Admin,\n            ThirdParty,\n        }\n\n        struct Case {\n            name: \u0026'static str,\n            role: CallerRole,\n            expected: Result\u003c(), \u0026'static str\u003e,\n        }\n\n        let cases = [\n            Case {\n                name: \"vault address succeeds\",\n                role: CallerRole::Vault,\n                expected: Ok(()),\n            },\n            Case {\n                name: \"admin address succeeds\",\n                role: CallerRole::Admin,\n                expected: Ok(()),\n            },\n            Case {\n                name: \"third party fails\",\n                role: CallerRole::ThirdParty,\n                expected: Err(\"unauthorized: caller must be vault or admin\"),\n            },\n        ];\n\n        for case in cases {\n            let (env, addr, admin, vault, third_party) = setup_contract();\n            let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n            let caller = match case.role {\n                CallerRole::Vault =\u003e vault,\n                CallerRole::Admin =\u003e admin,\n                CallerRole::ThirdParty =\u003e third_party,\n            };\n\n            let result = catch_unwind(AssertUnwindSafe(|| {\n                client.receive_payment(\u0026caller, \u0026100i128, \u0026true, \u0026None);\n            }));\n\n            match case.expected {\n                Ok(()) =\u003e {\n                    assert!(result.is_ok(), \"expected success for case: {}\", case.name);\n                    let global_pool = client.get_global_pool();\n                    assert_eq!(global_pool.total_balance, 100i128);\n                }\n                Err(expected_panic) =\u003e {\n                    let err = result.expect_err(\"expected panic but call succeeded\");\n                    let message = panic_message(err);\n                    assert!(\n                        message.contains(expected_panic),\n                        \"case: {} (got panic: {})\",\n                        case.name,\n                        message\n                    );\n                }\n            }\n        }\n    }\n\n    // ── event shape tests ────────────────────────────────────────────────────\n\n    #[test]\n    fn test_payment_received_event_to_pool() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n\n        let events = env.events().all();\n        let ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"payment_received\")\n                }\n            })\n            .expect(\"expected payment_received event\");\n\n        let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n        assert_eq!(topic1, vault);\n\n        let data: crate::PaymentReceivedEvent = ev.2.into_val(\u0026env);\n        assert_eq!(data.from_vault, vault);\n        assert_eq!(data.amount, 1000i128);\n        assert!(data.to_pool);\n        assert!(data.developer.is_none());\n    }\n\n    #[test]\n    fn test_payment_received_and_balance_credited_events_to_developer() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        let events = env.events().all();\n\n        let pr_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"payment_received\")\n                }\n            })\n            .expect(\"expected payment_received event\");\n\n        let pr_data: crate::PaymentReceivedEvent = pr_ev.2.into_val(\u0026env);\n        assert!(!pr_data.to_pool);\n        assert_eq!(pr_data.developer, Some(developer.clone()));\n\n        let bc_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"balance_credited\")\n                }\n            })\n            .expect(\"expected balance_credited event\");\n\n        let topic1: Address = bc_ev.1.get(1).unwrap().into_val(\u0026env);\n        assert_eq!(topic1, developer);\n\n        let bc_data: crate::BalanceCreditedEvent = bc_ev.2.into_val(\u0026env);\n        assert_eq!(bc_data.developer, developer);\n        assert_eq!(bc_data.amount, 500i128);\n        assert_eq!(bc_data.new_balance, 500i128);\n    }\n\n    #[test]\n    fn test_balance_credited_new_balance_is_cumulative() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026300i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // grab the last balance_credited event\n        let events = env.events().all();\n        let bc_ev = events\n            .iter()\n            .rev()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"balance_credited\")\n                }\n            })\n            .expect(\"expected balance_credited event\");\n\n        let bc_data: crate::BalanceCreditedEvent = bc_ev.2.into_val(\u0026env);\n        assert_eq!(bc_data.new_balance, 500i128);\n    }\n\n    // ── regression tests: ensure settlement logic intact after rotation ─────\n\n    #[test]\n    fn test_receive_payment_works_after_admin_rotation() {\n        // Ensure payment processing still works after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // Vault can still send payments\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_receive_payment_works_after_vault_update() {\n        // Ensure payment processing works with new vault address\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Update vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // Old vault cannot send payments\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized\"));\n\n        // New vault can send payments\n        client.receive_payment(\u0026new_vault, \u00261000i128, \u0026true, \u0026None);\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_developer_withdrawal_after_admin_rotation() {\n        // Ensure developer balances accessible after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Credit developer\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // Balance still accessible\n        assert_eq!(client.get_developer_balance(\u0026developer), 500i128);\n\n        // Admin can still view all balances\n        let all_balances = client.get_all_developer_balances();\n        assert_eq!(all_balances.len(), 1);\n        assert_eq!(all_balances.get(0).unwrap().balance, 500i128);\n    }\n\n    #[test]\n    fn test_multiple_payments_accumulate_after_vault_update() {\n        // Ensure accumulation logic works correctly after vault changes\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Some payments from old vault\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Update vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // More payments from new vault\n        client.receive_payment(\u0026new_vault, \u0026150i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026new_vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Total should accumulate correctly\n        assert_eq!(client.get_developer_balance(\u0026developer), 450i128);\n    }\n\n    #[test]\n    fn test_global_pool_timestamp_updates_after_admin_change() {\n        // Ensure pool timestamp updates correctly regardless of admin\n        let env = Env::default();\n        env.mock_all_auths();\n        env.ledger().set_timestamp(1_700_000_000);\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Initial payment\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        let pool_before = client.get_global_pool();\n        assert_eq!(pool_before.last_updated, 1_700_000_000);\n\n        // Rotate admin and advance time\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n        env.ledger().set_timestamp(1_700_000_100);\n\n        // New payment updates timestamp\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026true, \u0026None);\n        let pool_after = client.get_global_pool();\n        assert_eq!(pool_after.last_updated, 1_700_000_100);\n        assert_eq!(pool_after.total_balance, 1500i128);\n    }\n\n    /// `last_updated` reflects the ledger timestamp at the moment of each pool credit.\n    #[test]\n    fn test_global_pool_last_updated_on_receive_payment() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        env.ledger().set_timestamp(1_000);\n        client.init(\u0026admin, \u0026vault);\n        assert_eq!(client.get_global_pool().last_updated, 1_000);\n\n        // Advance time and credit pool � last_updated must change\n        env.ledger().set_timestamp(2_000);\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026true, \u0026None);\n        let pool = client.get_global_pool();\n        assert_eq!(pool.last_updated, 2_000);\n        assert_eq!(pool.total_balance, 100i128);\n\n        // Advance again � each credit stamps the new time\n        env.ledger().set_timestamp(3_000);\n        client.receive_payment(\u0026vault, \u002650i128, \u0026true, \u0026None);\n        let pool2 = client.get_global_pool();\n        assert_eq!(pool2.last_updated, 3_000);\n        assert_eq!(pool2.total_balance, 150i128);\n    }\n\n    /// Routing to a developer does NOT update `last_updated` on the global pool.\n    #[test]\n    fn test_global_pool_last_updated_unchanged_for_developer_payment() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        env.ledger().set_timestamp(1_000);\n        client.init(\u0026admin, \u0026vault);\n\n        env.ledger().set_timestamp(5_000);\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Pool timestamp must still be the init timestamp\n        assert_eq!(client.get_global_pool().last_updated, 1_000);\n        assert_eq!(client.get_global_pool().total_balance, 0);\n        assert_eq!(client.get_developer_balance(\u0026developer), 200i128);\n    }\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","settlement","src","test_views.rs"],"content":"use crate::{CalloraSettlement, CalloraSettlementClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_admin_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_admin();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_vault_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_vault();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_global_pool_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_global_pool();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_developer_balance_uninitialized_panics() {\n    let env = Env::default();\n    let dev = Address::generate(\u0026env);\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_developer_balance(\u0026dev);\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_all_developer_balances_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_all_developer_balances();\n}\n\n#[test]\nfn test_get_developer_balance_returns_zero_when_not_stored() {\n    let env = Env::default();\n    env.mock_all_auths();\n\n    let admin = Address::generate(\u0026env);\n    let vault = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026admin, \u0026vault);\n\n    let balance = client.get_developer_balance(\u0026dev);\n    assert_eq!(balance, 0);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","vault","src","lib.rs"],"content":"//! # Callora Vault Contract  deposit/withdraw/deduct/distribute with pause circuit-breaker.\n#![no_std]\nuse soroban_sdk::{contract, contractimpl, contracttype, token, Address, Env, String, Symbol, Vec};\n\n#[contracttype]\n#[derive(Clone)]\npub struct DeductItem {\n    pub amount: i128,\n    pub request_id: Option\u003cSymbol\u003e,\n}\n\n#[contracttype]\n#[derive(Clone)]\npub struct VaultMeta {\n    pub owner: Address,\n    pub balance: i128,\n    pub authorized_caller: Option\u003cAddress\u003e,\n    pub min_deposit: i128,\n}\n\n#[contracttype]\npub enum StorageKey {\n    Meta,\n    AllowedDepositors,\n    Admin,\n    UsdcToken,\n    Settlement,\n    RevenuePool,\n    MaxDeduct,\n    Paused,\n    Metadata(String),\n    PendingOwner,\n    PendingAdmin,\n    DepositorList,\n}\n\npub const DEFAULT_MAX_DEDUCT: i128 = i128::MAX;\npub const MAX_BATCH_SIZE: u32 = 50;\npub const MAX_METADATA_LEN: u32 = 256;\npub const MAX_OFFERING_ID_LEN: u32 = 64;\n\n#[contract]\npub struct CalloraVault;\n\n#[contractimpl]\nimpl CalloraVault {\n    #[allow(clippy::too_many_arguments)]\n    pub fn init(\n        env: Env,\n        owner: Address,\n        usdc_token: Address,\n        initial_balance: Option\u003ci128\u003e,\n        authorized_caller: Option\u003cAddress\u003e,\n        min_deposit: Option\u003ci128\u003e,\n        revenue_pool: Option\u003cAddress\u003e,\n        max_deduct: Option\u003ci128\u003e,\n    ) -\u003e VaultMeta {\n        owner.require_auth();\n        let inst = env.storage().instance();\n        if inst.has(\u0026StorageKey::Meta) {\n            panic!(\"vault already initialized\");\n        }\n        assert!(\n            usdc_token != env.current_contract_address(),\n            \"usdc_token cannot be vault address\"\n        );\n        if let Some(p) = \u0026revenue_pool {\n            assert!(\n                p != \u0026env.current_contract_address(),\n                \"revenue_pool cannot be vault address\"\n            );\n        }\n        let balance = initial_balance.unwrap_or(0);\n        assert!(balance \u003e= 0, \"initial balance must be non-negative\");\n        let min_d = min_deposit.unwrap_or(0);\n        assert!(min_d \u003e= 0, \"min_deposit must be non-negative\");\n        let max_d = max_deduct.unwrap_or(DEFAULT_MAX_DEDUCT);\n        assert!(max_d \u003e 0, \"max_deduct must be positive\");\n        assert!(min_d \u003c= max_d, \"min_deposit cannot exceed max_deduct\");\n        if balance \u003e 0 {\n            let onchain_usdc_balance =\n                token::Client::new(\u0026env, \u0026usdc_token).balance(\u0026env.current_contract_address());\n            assert!(\n                onchain_usdc_balance \u003e= balance,\n                \"initial_balance exceeds on-ledger USDC balance\"\n            );\n        }\n        let meta = VaultMeta {\n            owner: owner.clone(),\n            balance,\n            authorized_caller,\n            min_deposit: min_d,\n        };\n        inst.set(\u0026StorageKey::Meta, \u0026meta);\n        inst.set(\u0026StorageKey::UsdcToken, \u0026usdc_token);\n        inst.set(\u0026StorageKey::Admin, \u0026owner);\n        if let Some(p) = revenue_pool {\n            inst.set(\u0026StorageKey::RevenuePool, \u0026p);\n        }\n        inst.set(\u0026StorageKey::MaxDeduct, \u0026max_d);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"init\"), owner.clone()), balance);\n        meta\n    }\n\n    pub fn is_authorized_depositor(env: Env, caller: Address) -\u003e bool {\n        let meta = Self::get_meta(env.clone());\n        if caller == meta.owner {\n            return true;\n        }\n        let list: Vec\u003cAddress\u003e = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::DepositorList)\n            .unwrap_or(Vec::new(\u0026env));\n        list.contains(\u0026caller)\n    }\n\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Admin)\n            .expect(\"vault not initialized\")\n    }\n\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let cur = Self::get_admin(env.clone());\n        if caller != cur {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::PendingAdmin, \u0026new_admin);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_nominated\"), cur, new_admin), ());\n    }\n\n    pub fn accept_admin(env: Env) {\n        let pending: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::PendingAdmin)\n            .expect(\"no admin transfer pending\");\n        pending.require_auth();\n        let cur = Self::get_admin(env.clone());\n        env.storage().instance().set(\u0026StorageKey::Admin, \u0026pending);\n        env.storage().instance().remove(\u0026StorageKey::PendingAdmin);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_accepted\"), cur, pending), ());\n    }\n\n    pub fn require_owner(env: Env, caller: Address) {\n        let meta = Self::get_meta(env.clone());\n        assert!(caller == meta.owner, \"unauthorized: owner only\");\n    }\n\n    pub fn distribute(env: Env, caller: Address, to: Address, amount: i128) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        if amount \u003c= 0 {\n            panic!(\"amount must be positive\");\n        }\n        let usdc_addr: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_addr);\n        let vb = usdc.balance(\u0026env.current_contract_address());\n        if vb \u003c amount {\n            panic!(\"insufficient USDC balance\");\n        }\n        usdc.transfer(\u0026env.current_contract_address(), \u0026to, \u0026amount);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"distribute\"), to), amount);\n    }\n\n    pub fn get_meta(env: Env) -\u003e VaultMeta {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Meta)\n            .unwrap_or_else(|| panic!(\"vault not initialized\"))\n    }\n\n    pub fn set_allowed_depositor(env: Env, caller: Address, depositor: Option\u003cAddress\u003e) {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller);\n        match depositor {\n            Some(d) =\u003e {\n                let mut list: Vec\u003cAddress\u003e = env\n                    .storage()\n                    .instance()\n                    .get(\u0026StorageKey::DepositorList)\n                    .unwrap_or(Vec::new(\u0026env));\n                if !list.contains(\u0026d) {\n                    env.storage()\n                        .instance()\n                        .set(\u0026StorageKey::AllowedDepositors, \u0026d);\n                    list.push_back(d);\n                }\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::DepositorList, \u0026list);\n            }\n            None =\u003e {\n                env.storage()\n                    .instance()\n                    .remove(\u0026StorageKey::AllowedDepositors);\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::DepositorList, \u0026Vec::\u003cAddress\u003e::new(\u0026env));\n            }\n        }\n    }\n\n    pub fn clear_allowed_depositors(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller);\n        env.storage()\n            .instance()\n            .remove(\u0026StorageKey::AllowedDepositors);\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::DepositorList, \u0026Vec::\u003cAddress\u003e::new(\u0026env));\n    }\n\n    pub fn get_allowed_depositors(env: Env) -\u003e Vec\u003cAddress\u003e {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::DepositorList)\n            .unwrap_or(Vec::new(\u0026env))\n    }\n\n    pub fn set_authorized_caller(env: Env, caller: Address) {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        meta.authorized_caller = Some(caller.clone());\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"set_auth_caller\"), meta.owner.clone()),\n            caller,\n        );\n    }\n\n    pub fn pause(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_admin_or_owner(env.clone(), \u0026caller);\n        assert!(!Self::is_paused(env.clone()), \"vault already paused\");\n        env.storage().instance().set(\u0026StorageKey::Paused, \u0026true);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"vault_paused\"), caller), ());\n    }\n\n    pub fn unpause(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_admin_or_owner(env.clone(), \u0026caller);\n        assert!(Self::is_paused(env.clone()), \"vault not paused\");\n        env.storage().instance().set(\u0026StorageKey::Paused, \u0026false);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"vault_unpaused\"), caller), ());\n    }\n\n    /// Returns the current pause state of the vault.\n    ///\n    /// # Purpose\n    /// Exposes the pause circuit-breaker state to enable off-chain indexers,\n    /// monitoring systems, and external contracts to query whether the vault\n    /// is currently paused. This allows reliable tracking of contract availability\n    /// for deposit, deduct, and batch_deduct operations.\n    ///\n    /// # Return Value\n    /// Returns `true` if the vault is currently paused, `false` otherwise.\n    /// Before the first `pause()` call, this function returns `false` (the safe\n    /// default state), ensuring that uninitialized pause state does not block\n    /// legitimate operations.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Deterministic**: Identical storage state always produces identical output.\n    /// - **Non-panicking**: Never panics, even before initialization or when pause\n    ///   state is unset. Returns `false` as the safe default.\n    /// - **Consistent**: Always reflects the latest committed pause/unpause state\n    ///   from contract storage, never stale or cached values.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain monitoring systems. Call this\n    /// function to determine whether the vault is accepting deposits and processing\n    /// deductions. When `is_paused()` returns `true`, the following operations are\n    /// blocked:\n    /// - `deposit()`\n    /// - `deduct()`\n    /// - `batch_deduct()`\n    ///\n    /// The pause state is consistent with emitted events:\n    /// - `vault_paused` event → `is_paused()` returns `true`\n    /// - `vault_unpaused` event → `is_paused()` returns `false`\n    ///\n    /// # Example\n    /// ```ignore\n    /// if vault.is_paused() {\n    ///     // Vault is paused - deposits and deductions are blocked\n    ///     // Only admin/owner operations like withdraw() are allowed\n    /// } else {\n    ///     // Vault is operational - all functions available\n    /// }\n    /// ```\n    pub fn is_paused(env: Env) -\u003e bool {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Paused)\n            .unwrap_or(false)\n    }\n\n    pub fn get_max_deduct(env: Env) -\u003e i128 {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::MaxDeduct)\n            .unwrap_or(DEFAULT_MAX_DEDUCT)\n    }\n\n    pub fn deposit(env: Env, caller: Address, amount: i128) -\u003e i128 {\n        caller.require_auth();\n        Self::require_not_paused(env.clone());\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(\n            Self::is_authorized_depositor(env.clone(), caller.clone()),\n            \"unauthorized: only owner or allowed depositor can deposit\"\n        );\n        let meta = Self::get_meta(env.clone());\n        assert!(\n            amount \u003e= meta.min_deposit,\n            \"deposit below minimum: {} \u003c {}\",\n            amount,\n            meta.min_deposit\n        );\n        let usdc_addr: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_addr);\n        usdc.transfer(\u0026caller, \u0026env.current_contract_address(), \u0026amount);\n        let mut meta = Self::get_meta(env.clone());\n        meta.balance = meta\n            .balance\n            .checked_add(amount)\n            .unwrap_or_else(|| panic!(\"balance overflow\"));\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"deposit\"), caller.clone()),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn deduct(env: Env, caller: Address, amount: i128, request_id: Option\u003cSymbol\u003e) -\u003e i128 {\n        caller.require_auth();\n        Self::require_not_paused(env.clone());\n        Self::require_routing_configured(env.clone());\n        assert!(amount \u003e 0, \"amount must be positive\");\n        let max_d = Self::get_max_deduct(env.clone());\n        assert!(amount \u003c= max_d, \"deduct amount exceeds max_deduct\");\n        let meta = Self::get_meta(env.clone());\n        let auth = match \u0026meta.authorized_caller {\n            Some(ac) =\u003e caller == *ac || caller == meta.owner,\n            None =\u003e true,\n        };\n        assert!(auth, \"unauthorized caller\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let mut meta = Self::get_meta(env.clone());\n        meta.balance = meta.balance.checked_sub(amount).unwrap();\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        let inst = env.storage().instance();\n        if let Some(s) = inst.get::\u003cStorageKey, Address\u003e(\u0026StorageKey::Settlement) {\n            let ut: Address = inst.get(\u0026StorageKey::UsdcToken).unwrap();\n            Self::transfer_funds(\u0026env, \u0026ut, \u0026s, amount);\n        } else if inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::RevenuePool)\n            .is_some()\n        {\n            Self::transfer_to_revenue_pool(env.clone(), amount);\n        }\n        let rid = request_id.unwrap_or(Symbol::new(\u0026env, \"\"));\n        env.events().publish(\n            (Symbol::new(\u0026env, \"deduct\"), caller, rid),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn batch_deduct(env: Env, caller: Address, items: Vec\u003cDeductItem\u003e) -\u003e i128 {\n        caller.require_auth();\n        Self::require_not_paused(env.clone());\n        Self::require_routing_configured(env.clone());\n        let n = items.len();\n        assert!(n \u003e 0, \"batch_deduct requires at least one item\");\n        assert!(n \u003c= MAX_BATCH_SIZE, \"batch too large\");\n        let max_d = Self::get_max_deduct(env.clone());\n        let mut meta = Self::get_meta(env.clone());\n        let auth = match \u0026meta.authorized_caller {\n            Some(ac) =\u003e caller == *ac || caller == meta.owner,\n            None =\u003e true,\n        };\n        assert!(auth, \"unauthorized caller\");\n        let mut running = meta.balance;\n        let mut total: i128 = 0;\n        for item in items.iter() {\n            assert!(item.amount \u003e 0, \"amount must be positive\");\n            assert!(item.amount \u003c= max_d, \"deduct amount exceeds max_deduct\");\n            assert!(running \u003e= item.amount, \"insufficient balance\");\n            running = running.checked_sub(item.amount).unwrap();\n            total = total.checked_add(item.amount).unwrap();\n        }\n        meta.balance = running;\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        let mut eb = meta.balance.checked_add(total).unwrap();\n        for item in items.iter() {\n            eb = eb.checked_sub(item.amount).unwrap();\n            let rid = item.request_id.clone().unwrap_or(Symbol::new(\u0026env, \"\"));\n            env.events().publish(\n                (Symbol::new(\u0026env, \"deduct\"), caller.clone(), rid),\n                (item.amount, eb),\n            );\n        }\n        let inst = env.storage().instance();\n        if let Some(s) = inst.get::\u003cStorageKey, Address\u003e(\u0026StorageKey::Settlement) {\n            let ut: Address = inst.get(\u0026StorageKey::UsdcToken).unwrap();\n            Self::transfer_funds(\u0026env, \u0026ut, \u0026s, total);\n        } else if inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::RevenuePool)\n            .is_some()\n        {\n            Self::transfer_to_revenue_pool(env.clone(), total);\n        }\n        meta.balance\n    }\n\n    pub fn balance(env: Env) -\u003e i128 {\n        Self::get_meta(env).balance\n    }\n\n    pub fn transfer_ownership(env: Env, new_owner: Address) {\n        let meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(\n            new_owner != meta.owner,\n            \"new_owner must be different from current owner\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::PendingOwner, \u0026new_owner);\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"ownership_nominated\"),\n                meta.owner,\n                new_owner,\n            ),\n            (),\n        );\n    }\n\n    pub fn accept_ownership(env: Env) {\n        let pending: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::PendingOwner)\n            .expect(\"no ownership transfer pending\");\n        pending.require_auth();\n        let mut meta = Self::get_meta(env.clone());\n        let old = meta.owner.clone();\n        meta.owner = pending;\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.storage().instance().remove(\u0026StorageKey::PendingOwner);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"ownership_accepted\"), old, meta.owner),\n            (),\n        );\n    }\n\n    pub fn withdraw(env: Env, amount: i128) -\u003e i128 {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let ua: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026ua);\n        usdc.transfer(\u0026env.current_contract_address(), \u0026meta.owner, \u0026amount);\n        meta.balance = meta.balance.checked_sub(amount).unwrap();\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"withdraw\"), meta.owner.clone()),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn withdraw_to(env: Env, to: Address, amount: i128) -\u003e i128 {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let ua: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026ua);\n        usdc.transfer(\u0026env.current_contract_address(), \u0026to, \u0026amount);\n        meta.balance = meta.balance.checked_sub(amount).unwrap();\n        env.storage().instance().set(\u0026StorageKey::Meta, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"withdraw_to\"), meta.owner.clone(), to),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    /// Sets or clears the revenue pool routing address.\n    ///\n    /// # Purpose\n    /// Configures where USDC is routed during deduct operations when no settlement\n    /// address is configured. The revenue pool serves as the fallback routing destination.\n    ///\n    /// # Validation\n    /// - Caller must be admin\n    /// - Revenue pool address cannot be the vault's own address\n    /// - Setting to `None` clears the configuration\n    ///\n    /// # Safety Guarantees\n    /// - Atomic update: state is either fully updated or unchanged\n    /// - Emits event for audit trail (`set_revenue_pool` or `clear_revenue_pool`)\n    /// - Prevents self-referential routing (vault → vault)\n    ///\n    /// # Routing Behavior\n    /// - If both settlement and revenue_pool are set, settlement takes priority\n    /// - If only revenue_pool is set, all deducts route to revenue_pool\n    /// - If neither is set, deduct operations will fail\n    ///\n    /// # Events\n    /// - `set_revenue_pool(caller) → address` when setting\n    /// - `clear_revenue_pool(caller) → ()` when clearing\n    pub fn set_revenue_pool(env: Env, caller: Address, revenue_pool: Option\u003cAddress\u003e) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        match revenue_pool {\n            Some(addr) =\u003e {\n                assert!(\n                    addr != env.current_contract_address(),\n                    \"revenue_pool cannot be vault address\"\n                );\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::RevenuePool, \u0026addr);\n                env.events()\n                    .publish((Symbol::new(\u0026env, \"set_revenue_pool\"), caller), addr);\n            }\n            None =\u003e {\n                env.storage().instance().remove(\u0026StorageKey::RevenuePool);\n                env.events()\n                    .publish((Symbol::new(\u0026env, \"clear_revenue_pool\"), caller), ());\n            }\n        }\n    }\n\n    /// Returns the revenue pool contract address configured for this vault.\n    ///\n    /// # Purpose\n    /// Exposes the revenue pool address to enable off-chain indexers and external\n    /// contracts to query where deducted funds are routed when no settlement contract\n    /// is configured.\n    ///\n    /// # Return Value\n    /// Returns `Option\u003cAddress\u003e` containing the revenue pool address if configured,\n    /// or `None` if not set. This reflects the latest committed state set via\n    /// `set_revenue_pool()`.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Consistent**: Returns only final committed state, never intermediate values.\n    /// - **Deterministic**: Identical state inputs always produce identical outputs.\n    /// - **Non-panicking**: Returns `None` gracefully when revenue pool is not configured.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain queries. Call this function to\n    /// determine the active revenue pool routing destination. Note that if both\n    /// settlement and revenue pool are configured, settlement takes priority for\n    /// fund routing during `deduct()` and `batch_deduct()` operations.\n    ///\n    /// # Example\n    /// ```ignore\n    /// match vault.get_revenue_pool() {\n    ///     Some(pool_addr) =\u003e { /* revenue pool is configured */ }\n    ///     None =\u003e { /* no revenue pool configured */ }\n    /// }\n    /// ```\n    pub fn get_revenue_pool(env: Env) -\u003e Option\u003cAddress\u003e {\n        env.storage().instance().get(\u0026StorageKey::RevenuePool)\n    }\n\n    /// Sets the settlement routing address.\n    ///\n    /// # Purpose\n    /// Configures the primary routing destination for USDC during deduct operations.\n    /// Settlement takes priority over revenue_pool when both are configured.\n    ///\n    /// # Validation\n    /// - Caller must be admin\n    /// - Settlement address cannot be the vault's own address\n    ///\n    /// # Safety Guarantees\n    /// - Atomic update: state is immediately committed\n    /// - Emits event for audit trail (`set_settlement`)\n    /// - Prevents self-referential routing (vault → vault)\n    ///\n    /// # Routing Priority\n    /// 1. If settlement is set → route to settlement (highest priority)\n    /// 2. Else if revenue_pool is set → route to revenue_pool\n    /// 3. Else → deduct operations fail with \"routing not configured\"\n    ///\n    /// # Events\n    /// - `set_settlement(caller) → address` when setting\n    pub fn set_settlement(env: Env, caller: Address, settlement_address: Address) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        assert!(\n            settlement_address != env.current_contract_address(),\n            \"settlement cannot be vault address\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Settlement, \u0026settlement_address);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"set_settlement\"), caller),\n            settlement_address,\n        );\n    }\n\n    /// Returns the settlement contract address configured for this vault.\n    ///\n    /// # Purpose\n    /// Exposes the settlement address to enable off-chain indexers and external\n    /// contracts to query where deducted funds are routed during settlement operations.\n    ///\n    /// # Return Value\n    /// Returns the `Address` of the settlement contract. This reflects the latest\n    /// committed state set via `set_settlement()`.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Consistent**: Returns only final committed state, never intermediate values.\n    /// - **Deterministic**: Identical state inputs always produce identical outputs.\n    ///\n    /// # Panics\n    /// Panics if the settlement address has not been configured via `set_settlement()`.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain queries. Call this function to\n    /// determine the active settlement routing destination at any point in time.\n    ///\n    /// # Example\n    /// ```ignore\n    /// let settlement_addr = vault.get_settlement();\n    /// // Use settlement_addr to track fund flows\n    /// ```\n    pub fn get_settlement(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Settlement)\n            .unwrap_or_else(|| panic!(\"settlement address not set\"))\n    }\n\n    pub fn set_metadata(\n        env: Env,\n        caller: Address,\n        offering_id: String,\n        metadata: String,\n    ) -\u003e String {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n        assert!(\n            offering_id.len() \u003c= MAX_OFFERING_ID_LEN,\n            \"offering_id exceeds max length\"\n        );\n        assert!(\n            metadata.len() \u003c= MAX_METADATA_LEN,\n            \"metadata exceeds max length\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Metadata(offering_id.clone()), \u0026metadata);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"metadata_set\"), offering_id, caller),\n            metadata.clone(),\n        );\n        metadata\n    }\n\n    pub fn get_metadata(env: Env, offering_id: String) -\u003e Option\u003cString\u003e {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Metadata(offering_id))\n    }\n\n    pub fn update_metadata(\n        env: Env,\n        caller: Address,\n        offering_id: String,\n        metadata: String,\n    ) -\u003e String {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n        assert!(\n            offering_id.len() \u003c= MAX_OFFERING_ID_LEN,\n            \"offering_id exceeds max length\"\n        );\n        assert!(\n            metadata.len() \u003c= MAX_METADATA_LEN,\n            \"metadata exceeds max length\"\n        );\n        let old: String = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::Metadata(offering_id.clone()))\n            .unwrap_or(String::from_str(\u0026env, \"\"));\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Metadata(offering_id.clone()), \u0026metadata);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"metadata_updated\"), offering_id, caller),\n            (old, metadata.clone()),\n        );\n        metadata\n    }\n\n    fn transfer_funds(env: \u0026Env, usdc_token: \u0026Address, to: \u0026Address, amount: i128) {\n        token::Client::new(env, usdc_token).transfer(\u0026env.current_contract_address(), to, \u0026amount);\n    }\n\n    fn transfer_to_revenue_pool(env: Env, amount: i128) {\n        let inst = env.storage().instance();\n        let rp: Address = inst\n            .get(\u0026StorageKey::RevenuePool)\n            .expect(\"revenue pool address not set\");\n        let ua: Address = inst\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        token::Client::new(\u0026env, \u0026ua).transfer(\u0026env.current_contract_address(), \u0026rp, \u0026amount);\n    }\n\n    fn require_not_paused(env: Env) {\n        assert!(!Self::is_paused(env), \"vault is paused\");\n    }\n\n    fn require_admin_or_owner(env: Env, caller: \u0026Address) {\n        let admin: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::Admin)\n            .expect(\"vault not initialized\");\n        let meta = Self::get_meta(env);\n        assert!(\n            *caller == admin || *caller == meta.owner,\n            \"unauthorized: caller is not admin or owner\"\n        );\n    }\n\n    /// Validates that at least one routing address is configured.\n    /// Panics if neither settlement nor revenue_pool is set.\n    fn require_routing_configured(env: Env) {\n        let inst = env.storage().instance();\n        let has_settlement = inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::Settlement)\n            .is_some();\n        let has_revenue_pool = inst\n            .get::\u003cStorageKey, Address\u003e(\u0026StorageKey::RevenuePool)\n            .is_some();\n        assert!(\n            has_settlement || has_revenue_pool,\n            \"routing not configured: set settlement or revenue_pool address\"\n        );\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_init_hardening;\n","traces":[{"line":48,"address":[11396660,11398858,11395360],"length":1,"stats":{"Line":2}},{"line":58,"address":[11395737],"length":1,"stats":{"Line":1}},{"line":59,"address":[11395856],"length":1,"stats":{"Line":2}},{"line":60,"address":[11395997],"length":1,"stats":{"Line":1}},{"line":61,"address":[11396066,11398755],"length":1,"stats":{"Line":2}},{"line":63,"address":[11396195,11396138],"length":1,"stats":{"Line":1}},{"line":67,"address":[11396312],"length":1,"stats":{"Line":2}},{"line":68,"address":[11396452,11396359,11396541],"length":1,"stats":{"Line":6}},{"line":73,"address":[11396682,11396415],"length":1,"stats":{"Line":3}},{"line":74,"address":[11396698,11396801],"length":1,"stats":{"Line":1}},{"line":75,"address":[11396832,11396771],"length":1,"stats":{"Line":3}},{"line":76,"address":[11396848,11396960],"length":1,"stats":{"Line":3}},{"line":77,"address":[11396933,11396991],"length":1,"stats":{"Line":3}},{"line":78,"address":[11397007,11397110],"length":1,"stats":{"Line":2}},{"line":79,"address":[11397074,11397198,11397131],"length":1,"stats":{"Line":4}},{"line":80,"address":[11397178],"length":1,"stats":{"Line":1}},{"line":81,"address":[11397261],"length":1,"stats":{"Line":1}},{"line":83,"address":[11397519],"length":1,"stats":{"Line":1}},{"line":89,"address":[11397235],"length":1,"stats":{"Line":2}},{"line":94,"address":[11397796],"length":1,"stats":{"Line":1}},{"line":95,"address":[11397874],"length":1,"stats":{"Line":2}},{"line":96,"address":[11397904],"length":1,"stats":{"Line":1}},{"line":97,"address":[11397934],"length":1,"stats":{"Line":2}},{"line":98,"address":[11398008],"length":1,"stats":{"Line":1}},{"line":100,"address":[11398038],"length":1,"stats":{"Line":2}},{"line":101,"address":[11398147],"length":1,"stats":{"Line":1}},{"line":102,"address":[11398162],"length":1,"stats":{"Line":1}},{"line":103,"address":[11398463],"length":1,"stats":{"Line":2}},{"line":106,"address":[11392160,11392955,11392902],"length":1,"stats":{"Line":1}},{"line":107,"address":[11392260,11392183],"length":1,"stats":{"Line":2}},{"line":108,"address":[11392272,11392330],"length":1,"stats":{"Line":2}},{"line":109,"address":[11392356],"length":1,"stats":{"Line":1}},{"line":111,"address":[11392588],"length":1,"stats":{"Line":1}},{"line":114,"address":[11392523,11392447],"length":1,"stats":{"Line":2}},{"line":115,"address":[11392477,11392403,11392916,11392620,11392531],"length":1,"stats":{"Line":2}},{"line":116,"address":[11392771],"length":1,"stats":{"Line":1}},{"line":119,"address":[11407997,11407712],"length":1,"stats":{"Line":1}},{"line":120,"address":[11407738],"length":1,"stats":{"Line":1}},{"line":122,"address":[11407844],"length":1,"stats":{"Line":1}},{"line":126,"address":[11409298,11408288,11409208],"length":1,"stats":{"Line":2}},{"line":127,"address":[11408323],"length":1,"stats":{"Line":1}},{"line":128,"address":[11408409],"length":1,"stats":{"Line":1}},{"line":129,"address":[11408446,11408508],"length":1,"stats":{"Line":2}},{"line":130,"address":[11408534,11409224],"length":1,"stats":{"Line":2}},{"line":132,"address":[11408527],"length":1,"stats":{"Line":1}},{"line":134,"address":[11408593],"length":1,"stats":{"Line":0}},{"line":135,"address":[11408756],"length":1,"stats":{"Line":1}},{"line":136,"address":[11408768],"length":1,"stats":{"Line":1}},{"line":139,"address":[11371852,11371805,11370512],"length":1,"stats":{"Line":2}},{"line":140,"address":[11370527],"length":1,"stats":{"Line":1}},{"line":143,"address":[11370664],"length":1,"stats":{"Line":1}},{"line":145,"address":[11370887],"length":1,"stats":{"Line":1}},{"line":146,"address":[11370916],"length":1,"stats":{"Line":1}},{"line":147,"address":[11371015,11370967],"length":1,"stats":{"Line":2}},{"line":148,"address":[11371202],"length":1,"stats":{"Line":1}},{"line":149,"address":[11371394],"length":1,"stats":{"Line":1}},{"line":150,"address":[11371406],"length":1,"stats":{"Line":1}},{"line":153,"address":[11378251,11377936],"length":1,"stats":{"Line":1}},{"line":154,"address":[11377967,11378028],"length":1,"stats":{"Line":2}},{"line":155,"address":[11378158,11378040,11378101],"length":1,"stats":{"Line":3}},{"line":158,"address":[11367136,11368601,11368727],"length":1,"stats":{"Line":2}},{"line":159,"address":[11367176],"length":1,"stats":{"Line":2}},{"line":160,"address":[11367257],"length":1,"stats":{"Line":1}},{"line":161,"address":[11367351,11367289],"length":1,"stats":{"Line":2}},{"line":162,"address":[11367379,11368674],"length":1,"stats":{"Line":2}},{"line":164,"address":[11367357],"length":1,"stats":{"Line":1}},{"line":165,"address":[11367431,11368646],"length":1,"stats":{"Line":2}},{"line":170,"address":[11367534],"length":1,"stats":{"Line":1}},{"line":172,"address":[11367775],"length":1,"stats":{"Line":1}},{"line":173,"address":[11367867,11367807],"length":1,"stats":{"Line":2}},{"line":174,"address":[11368000],"length":1,"stats":{"Line":1}},{"line":175,"address":[11368616,11368044],"length":1,"stats":{"Line":2}},{"line":177,"address":[11368025,11368080],"length":1,"stats":{"Line":2}},{"line":178,"address":[11368188,11368419],"length":1,"stats":{"Line":2}},{"line":179,"address":[11368200,11368445],"length":1,"stats":{"Line":2}},{"line":182,"address":[11405776,11406076],"length":1,"stats":{"Line":1}},{"line":183,"address":[11405806],"length":1,"stats":{"Line":1}},{"line":185,"address":[11405922],"length":1,"stats":{"Line":1}},{"line":186,"address":[11405995],"length":1,"stats":{"Line":3}},{"line":189,"address":[11387904,11388730,11389855],"length":1,"stats":{"Line":3}},{"line":190,"address":[11387939],"length":1,"stats":{"Line":1}},{"line":191,"address":[11388065],"length":1,"stats":{"Line":1}},{"line":192,"address":[11388133],"length":1,"stats":{"Line":1}},{"line":193,"address":[11388166],"length":1,"stats":{"Line":1}},{"line":194,"address":[11388986],"length":1,"stats":{"Line":1}},{"line":197,"address":[11388845,11388921],"length":1,"stats":{"Line":2}},{"line":198,"address":[11388875,11388929,11389753,11389018,11388804],"length":1,"stats":{"Line":2}},{"line":199,"address":[11389172],"length":1,"stats":{"Line":1}},{"line":200,"address":[11389206],"length":1,"stats":{"Line":1}},{"line":202,"address":[11389263],"length":1,"stats":{"Line":0}},{"line":203,"address":[11389416],"length":1,"stats":{"Line":1}},{"line":205,"address":[11389226],"length":1,"stats":{"Line":1}},{"line":207,"address":[11389531],"length":1,"stats":{"Line":0}},{"line":210,"address":[11388248],"length":1,"stats":{"Line":1}},{"line":212,"address":[11388282],"length":1,"stats":{"Line":0}},{"line":213,"address":[11388440],"length":1,"stats":{"Line":1}},{"line":215,"address":[11388474],"length":1,"stats":{"Line":0}},{"line":220,"address":[11393762,11393072,11393724],"length":1,"stats":{"Line":2}},{"line":221,"address":[11393100],"length":1,"stats":{"Line":1}},{"line":222,"address":[11393178],"length":1,"stats":{"Line":1}},{"line":223,"address":[11393254],"length":1,"stats":{"Line":1}},{"line":225,"address":[11393285],"length":1,"stats":{"Line":0}},{"line":226,"address":[11393434],"length":1,"stats":{"Line":1}},{"line":228,"address":[11393468],"length":1,"stats":{"Line":0}},{"line":231,"address":[11391374,11390992],"length":1,"stats":{"Line":1}},{"line":232,"address":[11391267,11391014],"length":1,"stats":{"Line":2}},{"line":234,"address":[11391134,11391201],"length":1,"stats":{"Line":2}},{"line":235,"address":[11391288,11391209,11391364],"length":1,"stats":{"Line":2}},{"line":238,"address":[11389872,11390829,11390792],"length":1,"stats":{"Line":1}},{"line":239,"address":[11389979,11389894],"length":1,"stats":{"Line":2}},{"line":240,"address":[11389986],"length":1,"stats":{"Line":1}},{"line":241,"address":[11390049],"length":1,"stats":{"Line":1}},{"line":242,"address":[11390225],"length":1,"stats":{"Line":1}},{"line":243,"address":[11390736,11390421],"length":1,"stats":{"Line":2}},{"line":244,"address":[11390507,11390432],"length":1,"stats":{"Line":2}},{"line":245,"address":[11390669],"length":1,"stats":{"Line":1}},{"line":249,"address":[11399591,11398880,11399659],"length":1,"stats":{"Line":2}},{"line":250,"address":[11398910],"length":1,"stats":{"Line":1}},{"line":251,"address":[11398988],"length":1,"stats":{"Line":1}},{"line":252,"address":[11399075,11399022,11399607],"length":1,"stats":{"Line":3}},{"line":253,"address":[11399107,11399068],"length":1,"stats":{"Line":2}},{"line":254,"address":[11399299],"length":1,"stats":{"Line":1}},{"line":255,"address":[11399311],"length":1,"stats":{"Line":1}},{"line":258,"address":[11405752,11404976,11405714],"length":1,"stats":{"Line":2}},{"line":259,"address":[11405006],"length":1,"stats":{"Line":1}},{"line":260,"address":[11405084],"length":1,"stats":{"Line":1}},{"line":261,"address":[11405118,11405210],"length":1,"stats":{"Line":2}},{"line":262,"address":[11405230,11405193],"length":1,"stats":{"Line":2}},{"line":263,"address":[11405422],"length":1,"stats":{"Line":1}},{"line":264,"address":[11405434],"length":1,"stats":{"Line":1}},{"line":267,"address":[11408016,11408261],"length":1,"stats":{"Line":1}},{"line":268,"address":[11408033],"length":1,"stats":{"Line":1}},{"line":270,"address":[11408128],"length":1,"stats":{"Line":1}},{"line":274,"address":[11378304,11378608],"length":1,"stats":{"Line":1}},{"line":275,"address":[11378478,11378324],"length":1,"stats":{"Line":2}},{"line":277,"address":[11378419],"length":1,"stats":{"Line":1}},{"line":278,"address":[11378527],"length":1,"stats":{"Line":1}},{"line":281,"address":[11404961,11404933,11402784],"length":1,"stats":{"Line":2}},{"line":282,"address":[11402819],"length":1,"stats":{"Line":1}},{"line":283,"address":[11402892],"length":1,"stats":{"Line":1}},{"line":284,"address":[11402914,11402995],"length":1,"stats":{"Line":2}},{"line":285,"address":[11403137,11403204],"length":1,"stats":{"Line":2}},{"line":289,"address":[11403187,11403241],"length":1,"stats":{"Line":2}},{"line":290,"address":[11403405,11403284],"length":1,"stats":{"Line":2}},{"line":299,"address":[11403594],"length":1,"stats":{"Line":1}},{"line":301,"address":[11403835],"length":1,"stats":{"Line":1}},{"line":302,"address":[11403932,11403867],"length":1,"stats":{"Line":2}},{"line":303,"address":[11404037],"length":1,"stats":{"Line":1}},{"line":304,"address":[11404148,11404067,11404219],"length":1,"stats":{"Line":3}},{"line":306,"address":[11404101],"length":1,"stats":{"Line":1}},{"line":307,"address":[11404180],"length":1,"stats":{"Line":1}},{"line":308,"address":[11404243],"length":1,"stats":{"Line":1}},{"line":309,"address":[11404729,11404443],"length":1,"stats":{"Line":2}},{"line":310,"address":[11404455,11404543],"length":1,"stats":{"Line":2}},{"line":311,"address":[11404687],"length":1,"stats":{"Line":1}},{"line":313,"address":[11404755],"length":1,"stats":{"Line":1}},{"line":316,"address":[11401653,11399680,11402628],"length":1,"stats":{"Line":2}},{"line":317,"address":[11399754],"length":1,"stats":{"Line":1}},{"line":318,"address":[11399870],"length":1,"stats":{"Line":1}},{"line":319,"address":[11399908],"length":1,"stats":{"Line":1}},{"line":320,"address":[11400032,11399948],"length":1,"stats":{"Line":2}},{"line":321,"address":[11400060,11400009],"length":1,"stats":{"Line":2}},{"line":322,"address":[11400119,11400191],"length":1,"stats":{"Line":2}},{"line":323,"address":[11400228,11400174],"length":1,"stats":{"Line":2}},{"line":324,"address":[11400235],"length":1,"stats":{"Line":1}},{"line":325,"address":[11400292,11400383],"length":1,"stats":{"Line":2}},{"line":326,"address":[11400315],"length":1,"stats":{"Line":1}},{"line":328,"address":[11400526,11400445,11400323],"length":1,"stats":{"Line":3}},{"line":329,"address":[11400609,11400490,11400547],"length":1,"stats":{"Line":3}},{"line":330,"address":[11400592,11400646],"length":1,"stats":{"Line":2}},{"line":331,"address":[11400669,11400740],"length":1,"stats":{"Line":2}},{"line":332,"address":[11400842],"length":1,"stats":{"Line":1}},{"line":333,"address":[11401045],"length":1,"stats":{"Line":1}},{"line":334,"address":[11401186],"length":1,"stats":{"Line":1}},{"line":335,"address":[11401398,11401291],"length":1,"stats":{"Line":2}},{"line":336,"address":[11401468],"length":1,"stats":{"Line":1}},{"line":337,"address":[11401726,11401354,11401475],"length":1,"stats":{"Line":1}},{"line":338,"address":[11401321],"length":1,"stats":{"Line":1}},{"line":341,"address":[11401789],"length":1,"stats":{"Line":1}},{"line":343,"address":[11401573,11402537,11401832],"length":1,"stats":{"Line":1}},{"line":344,"address":[11402371,11401944],"length":1,"stats":{"Line":2}},{"line":345,"address":[11402000,11402096],"length":1,"stats":{"Line":3}},{"line":346,"address":[11402339],"length":1,"stats":{"Line":1}},{"line":348,"address":[11402397],"length":1,"stats":{"Line":1}},{"line":351,"address":[11374274,11376049,11371872],"length":1,"stats":{"Line":2}},{"line":352,"address":[11371922],"length":1,"stats":{"Line":1}},{"line":353,"address":[11372005],"length":1,"stats":{"Line":1}},{"line":354,"address":[11372043],"length":1,"stats":{"Line":1}},{"line":355,"address":[11372073],"length":1,"stats":{"Line":1}},{"line":356,"address":[11372171,11372101],"length":1,"stats":{"Line":2}},{"line":357,"address":[11372191,11372148,11372265],"length":1,"stats":{"Line":1}},{"line":358,"address":[11372242,11372291],"length":1,"stats":{"Line":2}},{"line":359,"address":[11372362],"length":1,"stats":{"Line":1}},{"line":360,"address":[11372392],"length":1,"stats":{"Line":1}},{"line":361,"address":[11372455,11372552],"length":1,"stats":{"Line":2}},{"line":362,"address":[11372481],"length":1,"stats":{"Line":1}},{"line":364,"address":[11372489,11372623,11372753],"length":1,"stats":{"Line":3}},{"line":365,"address":[11372666],"length":1,"stats":{"Line":1}},{"line":366,"address":[11372698],"length":1,"stats":{"Line":1}},{"line":367,"address":[11372730,11372886,11372790],"length":1,"stats":{"Line":3}},{"line":368,"address":[11372977,11375461,11375582],"length":1,"stats":{"Line":3}},{"line":369,"address":[11375603,11375684,11375506],"length":1,"stats":{"Line":3}},{"line":370,"address":[11375705,11375791,11375632],"length":1,"stats":{"Line":3}},{"line":371,"address":[11375734,11375812],"length":1,"stats":{"Line":2}},{"line":372,"address":[11375898],"length":1,"stats":{"Line":1}},{"line":374,"address":[11373035],"length":1,"stats":{"Line":1}},{"line":375,"address":[11373075],"length":1,"stats":{"Line":1}},{"line":376,"address":[11373262],"length":1,"stats":{"Line":1}},{"line":377,"address":[11373542,11373423],"length":1,"stats":{"Line":2}},{"line":378,"address":[11374662,11373633],"length":1,"stats":{"Line":2}},{"line":379,"address":[11375439,11374748],"length":1,"stats":{"Line":1}},{"line":380,"address":[11374925,11375365],"length":1,"stats":{"Line":2}},{"line":381,"address":[11374981,11375069],"length":1,"stats":{"Line":2}},{"line":382,"address":[11375317],"length":1,"stats":{"Line":1}},{"line":385,"address":[11373714],"length":1,"stats":{"Line":1}},{"line":386,"address":[11373855],"length":1,"stats":{"Line":1}},{"line":387,"address":[11374067,11373960],"length":1,"stats":{"Line":2}},{"line":388,"address":[11374105],"length":1,"stats":{"Line":1}},{"line":389,"address":[11374347,11374144,11374023],"length":1,"stats":{"Line":1}},{"line":390,"address":[11373990],"length":1,"stats":{"Line":1}},{"line":393,"address":[11374410],"length":1,"stats":{"Line":1}},{"line":395,"address":[11374226],"length":1,"stats":{"Line":1}},{"line":398,"address":[11402656],"length":1,"stats":{"Line":1}},{"line":399,"address":[11402663],"length":1,"stats":{"Line":1}},{"line":402,"address":[11387750,11386832,11387826],"length":1,"stats":{"Line":2}},{"line":403,"address":[11386948,11386855],"length":1,"stats":{"Line":2}},{"line":404,"address":[11386963],"length":1,"stats":{"Line":1}},{"line":405,"address":[11387028],"length":1,"stats":{"Line":1}},{"line":409,"address":[11387103],"length":1,"stats":{"Line":1}},{"line":411,"address":[11387167],"length":1,"stats":{"Line":0}},{"line":412,"address":[11387681,11387330],"length":1,"stats":{"Line":2}},{"line":414,"address":[11387342],"length":1,"stats":{"Line":1}},{"line":415,"address":[11387422],"length":1,"stats":{"Line":1}},{"line":416,"address":[11387478],"length":1,"stats":{"Line":1}},{"line":422,"address":[11384252,11384340,11382656],"length":1,"stats":{"Line":2}},{"line":423,"address":[11382671],"length":1,"stats":{"Line":1}},{"line":426,"address":[11382816],"length":1,"stats":{"Line":1}},{"line":428,"address":[11383039],"length":1,"stats":{"Line":1}},{"line":429,"address":[11383068],"length":1,"stats":{"Line":1}},{"line":430,"address":[11383106,11383170],"length":1,"stats":{"Line":2}},{"line":431,"address":[11383178],"length":1,"stats":{"Line":1}},{"line":432,"address":[11383375,11383423],"length":1,"stats":{"Line":2}},{"line":433,"address":[11383613],"length":1,"stats":{"Line":1}},{"line":434,"address":[11384164,11383805],"length":1,"stats":{"Line":2}},{"line":435,"address":[11383892,11383817],"length":1,"stats":{"Line":2}},{"line":440,"address":[11407681,11406096],"length":1,"stats":{"Line":1}},{"line":441,"address":[11406132,11406193],"length":1,"stats":{"Line":5}},{"line":442,"address":[11406200],"length":1,"stats":{"Line":3}},{"line":443,"address":[11406344,11406253],"length":1,"stats":{"Line":4}},{"line":444,"address":[11406364,11406423,11406304],"length":1,"stats":{"Line":5}},{"line":448,"address":[11406512],"length":1,"stats":{"Line":2}},{"line":450,"address":[11406753],"length":1,"stats":{"Line":2}},{"line":451,"address":[11406785,11406845],"length":1,"stats":{"Line":2}},{"line":452,"address":[11406945],"length":1,"stats":{"Line":1}},{"line":453,"address":[11407073],"length":1,"stats":{"Line":1}},{"line":454,"address":[11407553,11407270],"length":1,"stats":{"Line":2}},{"line":455,"address":[11407282,11407357],"length":1,"stats":{"Line":2}},{"line":456,"address":[11407517],"length":1,"stats":{"Line":1}},{"line":458,"address":[11407579],"length":1,"stats":{"Line":1}},{"line":461,"address":[11370484,11368752,11370446],"length":1,"stats":{"Line":2}},{"line":462,"address":[11368782,11368867],"length":1,"stats":{"Line":2}},{"line":463,"address":[11368874],"length":1,"stats":{"Line":1}},{"line":464,"address":[11369018,11368927],"length":1,"stats":{"Line":2}},{"line":465,"address":[11369038,11369097,11368978],"length":1,"stats":{"Line":3}},{"line":469,"address":[11369186],"length":1,"stats":{"Line":1}},{"line":471,"address":[11369427],"length":1,"stats":{"Line":1}},{"line":472,"address":[11369459,11369524],"length":1,"stats":{"Line":2}},{"line":473,"address":[11369616],"length":1,"stats":{"Line":1}},{"line":474,"address":[11369744],"length":1,"stats":{"Line":1}},{"line":475,"address":[11369941,11370320],"length":1,"stats":{"Line":2}},{"line":476,"address":[11369953,11370028],"length":1,"stats":{"Line":2}},{"line":477,"address":[11370284],"length":1,"stats":{"Line":1}},{"line":479,"address":[11370346],"length":1,"stats":{"Line":1}},{"line":506,"address":[11385525,11384624,11386456],"length":1,"stats":{"Line":2}},{"line":507,"address":[11384659],"length":1,"stats":{"Line":1}},{"line":508,"address":[11384780],"length":1,"stats":{"Line":1}},{"line":509,"address":[11384877,11384812],"length":1,"stats":{"Line":2}},{"line":510,"address":[11386365,11384913],"length":1,"stats":{"Line":4}},{"line":512,"address":[11384888],"length":1,"stats":{"Line":1}},{"line":513,"address":[11384955],"length":1,"stats":{"Line":1}},{"line":514,"address":[11385648,11385006,11385572],"length":1,"stats":{"Line":3}},{"line":518,"address":[11385764],"length":1,"stats":{"Line":1}},{"line":520,"address":[11385798],"length":1,"stats":{"Line":0}},{"line":521,"address":[11385964],"length":1,"stats":{"Line":1}},{"line":522,"address":[11385976],"length":1,"stats":{"Line":1}},{"line":525,"address":[11385041],"length":1,"stats":{"Line":1}},{"line":526,"address":[11385233],"length":1,"stats":{"Line":1}},{"line":527,"address":[11385245],"length":1,"stats":{"Line":1}},{"line":563,"address":[11384593,11384368],"length":1,"stats":{"Line":1}},{"line":564,"address":[11384432,11384391,11384490],"length":1,"stats":{"Line":3}},{"line":589,"address":[11380064,11378928,11379967],"length":1,"stats":{"Line":2}},{"line":590,"address":[11378963],"length":1,"stats":{"Line":1}},{"line":591,"address":[11379060],"length":1,"stats":{"Line":1}},{"line":592,"address":[11379154,11379092],"length":1,"stats":{"Line":2}},{"line":593,"address":[11379184,11379983],"length":1,"stats":{"Line":3}},{"line":595,"address":[11379298,11379244],"length":1,"stats":{"Line":1}},{"line":599,"address":[11379406],"length":1,"stats":{"Line":1}},{"line":601,"address":[11379440],"length":1,"stats":{"Line":0}},{"line":602,"address":[11379603,11379906],"length":1,"stats":{"Line":2}},{"line":603,"address":[11379615,11379700],"length":1,"stats":{"Line":2}},{"line":604,"address":[11379839],"length":1,"stats":{"Line":1}},{"line":635,"address":[11378897,11378624],"length":1,"stats":{"Line":1}},{"line":636,"address":[11378650],"length":1,"stats":{"Line":1}},{"line":638,"address":[11378756],"length":1,"stats":{"Line":1}},{"line":639,"address":[11378823],"length":1,"stats":{"Line":4}},{"line":642,"address":[11376528,11377913,11377818],"length":1,"stats":{"Line":2}},{"line":648,"address":[11376573],"length":1,"stats":{"Line":1}},{"line":649,"address":[11376683,11377824],"length":1,"stats":{"Line":1}},{"line":650,"address":[11376797],"length":1,"stats":{"Line":1}},{"line":654,"address":[11376962,11376903],"length":1,"stats":{"Line":2}},{"line":658,"address":[11376945],"length":1,"stats":{"Line":1}},{"line":660,"address":[11377007],"length":1,"stats":{"Line":0}},{"line":661,"address":[11377294,11377690],"length":1,"stats":{"Line":2}},{"line":662,"address":[11377306,11377396],"length":1,"stats":{"Line":2}},{"line":663,"address":[11377642],"length":1,"stats":{"Line":1}},{"line":665,"address":[11377766],"length":1,"stats":{"Line":1}},{"line":668,"address":[11376512,11376064,11376475],"length":1,"stats":{"Line":1}},{"line":669,"address":[11376090],"length":1,"stats":{"Line":1}},{"line":671,"address":[11376227],"length":1,"stats":{"Line":1}},{"line":674,"address":[11382478,11380416,11382635],"length":1,"stats":{"Line":2}},{"line":680,"address":[11380461],"length":1,"stats":{"Line":1}},{"line":681,"address":[11380587,11382546],"length":1,"stats":{"Line":1}},{"line":682,"address":[11380701],"length":1,"stats":{"Line":1}},{"line":686,"address":[11380755,11380800],"length":1,"stats":{"Line":2}},{"line":690,"address":[11381210],"length":1,"stats":{"Line":1}},{"line":693,"address":[11381016,11381140,11380968],"length":1,"stats":{"Line":3}},{"line":694,"address":[11381242,11382524,11380975,11381103,11380911,11381165],"length":1,"stats":{"Line":2}},{"line":695,"address":[11381454],"length":1,"stats":{"Line":1}},{"line":697,"address":[11381488],"length":1,"stats":{"Line":0}},{"line":698,"address":[11382323,11381772],"length":1,"stats":{"Line":2}},{"line":699,"address":[11381784,11381874],"length":1,"stats":{"Line":2}},{"line":700,"address":[11382112],"length":1,"stats":{"Line":1}},{"line":702,"address":[11382436],"length":1,"stats":{"Line":1}},{"line":705,"address":[11380368,11380112,11380362],"length":1,"stats":{"Line":1}},{"line":706,"address":[11380171],"length":1,"stats":{"Line":1}},{"line":709,"address":[11394508,11393808],"length":1,"stats":{"Line":1}},{"line":710,"address":[11393889,11393841],"length":1,"stats":{"Line":2}},{"line":712,"address":[11394005],"length":1,"stats":{"Line":1}},{"line":715,"address":[11394071],"length":1,"stats":{"Line":1}},{"line":717,"address":[11394186,11394262],"length":1,"stats":{"Line":2}},{"line":720,"address":[11386656],"length":1,"stats":{"Line":1}},{"line":721,"address":[11386663,11386693],"length":1,"stats":{"Line":2}},{"line":724,"address":[11392085,11391408],"length":1,"stats":{"Line":1}},{"line":725,"address":[11391439],"length":1,"stats":{"Line":1}},{"line":728,"address":[11391579],"length":1,"stats":{"Line":1}},{"line":730,"address":[11391808],"length":1,"stats":{"Line":1}},{"line":731,"address":[11391879,11391996,11391943],"length":1,"stats":{"Line":3}},{"line":739,"address":[11395149,11394624],"length":1,"stats":{"Line":1}},{"line":740,"address":[11394692,11394644],"length":1,"stats":{"Line":2}},{"line":741,"address":[11394890],"length":1,"stats":{"Line":1}},{"line":742,"address":[11394808],"length":1,"stats":{"Line":1}},{"line":744,"address":[11395009],"length":1,"stats":{"Line":1}},{"line":745,"address":[11394915],"length":1,"stats":{"Line":1}},{"line":747,"address":[11395041],"length":1,"stats":{"Line":1}}],"covered":342,"coverable":354},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","vault","src","test.rs"],"content":"extern crate std;\n\nuse soroban_sdk::testutils::{Address as _, Events as _};\nuse soroban_sdk::{token, Address, Env, IntoVal, String, Symbol};\n\nuse super::*;\n\n// ---------------------------------------------------------------------------\n// Test helpers\n// ---------------------------------------------------------------------------\n\nfn create_usdc\u003c'a\u003e(\n    env: \u0026'a Env,\n    admin: \u0026Address,\n) -\u003e (Address, token::Client\u003c'a\u003e, token::StellarAssetClient\u003c'a\u003e) {\n    let contract_address = env.register_stellar_asset_contract_v2(admin.clone());\n    let address = contract_address.address();\n    let client = token::Client::new(env, \u0026address);\n    let admin_client = token::StellarAssetClient::new(env, \u0026address);\n    (address, client, admin_client)\n}\n\nfn create_vault(env: \u0026Env) -\u003e (Address, CalloraVaultClient\u003c'_\u003e) {\n    let address = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(env, \u0026address);\n    (address, client)\n}\n\n/// Mint `amount` USDC directly to `vault_address` (simulates pre-funded vault).\nfn fund_vault(\n    usdc_admin_client: \u0026token::StellarAssetClient,\n    vault_address: \u0026Address,\n    amount: i128,\n) {\n    usdc_admin_client.mint(vault_address, \u0026amount);\n}\n\n// ---------------------------------------------------------------------------\n// Init tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_with_balance_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let events = env.events().all();\n    std::println!(\"init_with_balance_emits_event events len: {}\", events.len());\n    let last = events.last().expect(\"expected at least one event\");\n\n    assert_eq!(last.0, vault_address);\n    let topics = \u0026last.1;\n    assert_eq!(topics.len(), 2);\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = topics.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"init\"));\n    assert_eq!(topic1, owner);\n\n    let data: i128 = last.2.into_val(\u0026env);\n    assert_eq!(data, 1000);\n}\n\n#[test]\nfn init_defaults_balance_to_zero() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn init_sets_owner_and_min_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let meta = client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026Some(10), \u0026None, \u0026None);\n\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(meta.min_deposit, 10);\n    assert_eq!(client.balance(), 500);\n    assert_eq!(client.get_admin(), owner);\n}\n\n#[test]\nfn init_succeeds_when_onchain_usdc_balance_covers_initial_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n\n    let revenue_pool = Address::generate(\u0026env);\n    let meta = client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(400),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(meta.balance, 400);\n    assert_eq!(client.balance(), 400);\n}\n\n#[test]\n#[should_panic(expected = \"initial_balance exceeds on-ledger USDC balance\")]\nfn init_fails_when_initial_balance_exceeds_onchain_usdc_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 99);\n\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n}\n\n#[test]\nfn double_init_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    assert!(result.is_err(), \"expected error on second init\");\n}\n\n// ---------------------------------------------------------------------------\n// get_meta / balance tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_meta_returns_correct_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let meta = client.get_meta();\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn get_meta_before_init_fails() {\n    let env = Env::default();\n    let (_, client) = create_vault(\u0026env);\n    assert!(client.try_get_meta().is_err(), \"expected error before init\");\n}\n\n// ---------------------------------------------------------------------------\n// Admin tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_admin_returns_owner_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(client.get_admin(), owner);\n}\n\n#[test]\nfn set_admin_two_step_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_admin(\u0026owner, \u0026new_admin);\n    assert_eq!(client.get_admin(), owner); // Still old admin\n\n    client.accept_admin();\n    assert_eq!(client.get_admin(), new_admin);\n}\n\n#[test]\nfn set_admin_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_set_admin(\u0026intruder, \u0026new_admin);\n    assert!(\n        result.is_err(),\n        \"expected error when non-admin calls set_admin\"\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Deposit tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn owner_can_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    // Swap order: create USDC first\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026500);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026500, \u00261000);\n\n    let new_balance = client.deposit(\u0026owner, \u0026200);\n    assert_eq!(new_balance, 200);\n\n    let events = env.events().all();\n    std::println!(\"owner_can_deposit events len: {}\", events.len());\n    for (i, e) in events.iter().enumerate() {\n        std::println!(\n            \"Event[{}]: contract={:?}, topics={:?}, data={:?}\",\n            i,\n            e.0,\n            e.1,\n            e.2\n        );\n    }\n    let deposit_event = events\n        .iter()\n        .find(|e| {\n            if e.0 != vault_address {\n                return false;\n            }\n            if e.1.is_empty() {\n                return false;\n            }\n            let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n            s == Symbol::new(\u0026env, \"deposit\")\n        })\n        .expect(\"expected deposit event\");\n\n    let (amount, balance): (i128, i128) = deposit_event.2.into_val(\u0026env);\n    assert_eq!(amount, 200);\n    assert_eq!(balance, 200);\n}\n\n#[test]\nfn allowed_depositor_can_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u0026200);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u0026200, \u00261000);\n    let returned = client.deposit(\u0026depositor, \u0026200);\n\n    assert_eq!(returned, 300);\n    assert_eq!(client.balance(), 300);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: only owner or allowed depositor can deposit\")]\nfn unauthorized_address_cannot_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.deposit(\u0026unauthorized, \u002650);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deposit_zero_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deposit(\u0026owner, \u00260);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deposit_negative_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deposit(\u0026owner, \u0026-50);\n}\n\n#[test]\nfn deposit_below_minimum_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026Some(50), \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u002630);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002630, \u00261000);\n    let result = client.try_deposit(\u0026depositor, \u002630);\n    assert!(result.is_err(), \"expected error for deposit below minimum\");\n}\n\n#[test]\nfn deposit_at_minimum_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026Some(50), \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    let new_balance = client.deposit(\u0026depositor, \u002650);\n    assert_eq!(new_balance, 150);\n}\n\n#[test]\nfn deposit_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    usdc_admin.mint(\u0026owner, \u0026100);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026100, \u00261000);\n\n    let result = client.try_deposit(\u0026owner, \u0026100);\n    assert!(result.is_err());\n    // Should contain \"vault is paused\" but Error doesn't easily expose the string in tests without more setup\n    // but the transaction should fail.\n\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n    client.deposit(\u0026owner, \u0026100);\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Allowed depositor management tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn owner_can_set_and_clear_allowed_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    // Set depositor\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor, \u002650);\n    assert_eq!(client.balance(), 150);\n\n    // Clear depositor\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    // Owner can still deposit\n    usdc_admin.mint(\u0026owner, \u002625);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002625, \u00261000);\n    client.deposit(\u0026owner, \u002625);\n    assert_eq!(client.balance(), 175);\n}\n\n#[test]\nfn set_allowed_depositor_duplicate_is_ignored() {\n    // Adding the same depositor twice should not create a duplicate entry\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone())); // duplicate — should be a no-op\n\n    // depositor can still deposit exactly once (list not doubled)\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    assert_eq!(client.deposit(\u0026depositor, \u002650), 150);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn non_owner_cannot_set_allowed_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let non_owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_allowed_depositor(\u0026non_owner, \u0026Some(depositor));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: only owner or allowed depositor can deposit\")]\nfn deposit_after_depositor_cleared_is_rejected() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor, \u002650);\n}\n\n// ---------------------------------------------------------------------------\n// Pause tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn pause_unpause_admin_only() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // intruder fails\n    let res = client.try_pause(\u0026intruder);\n    assert!(res.is_err());\n\n    // admin (owner) succeeds\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    // intruder fails unpause\n    let res = client.try_unpause(\u0026intruder);\n    assert!(res.is_err());\n\n    // admin (owner) succeeds unpause\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn pause_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.pause(\u0026owner);\n    let events = env.events().all();\n    let pause_event = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address\n                \u0026\u0026 e.1\n                    .get(0)\n                    .map(|v| {\n                        let s: Symbol = v.into_val(\u0026env);\n                        s == Symbol::new(\u0026env, \"vault_paused\")\n                    })\n                    .unwrap_or(false)\n        })\n        .expect(\"expected pause event\");\n\n    let admin_topic: Address = pause_event.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(admin_topic, owner);\n}\n\n// ---------------------------------------------------------------------------\n// Deduct tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_authorized_caller_sets_and_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 200);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(200),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_authorized_caller(\u0026new_caller);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected set_auth_caller event\");\n    assert_eq!(ev.1.len(), 2);\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_auth_caller\"));\n    assert_eq!(topic1, owner);\n\n    let data: Address = ev.2.into_val(\u0026env);\n    assert_eq!(data, new_caller);\n\n    let remaining = client.deduct(\u0026new_caller, \u002650, \u0026None);\n    assert_eq!(remaining, 150);\n}\n\n#[test]\nfn deduct_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let returned = client.deduct(\u0026caller, \u002650, \u0026None);\n    assert_eq!(returned, 250);\n    assert_eq!(client.balance(), 250);\n}\n\n#[test]\nfn deduct_with_request_id() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.deduct(\u0026caller, \u0026100, \u0026Some(Symbol::new(\u0026env, \"req123\")));\n    assert_eq!(remaining, 900);\n}\n\n#[test]\nfn deduct_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 10);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(10),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_deduct(\u0026caller, \u0026100, \u0026None);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n#[test]\nfn deduct_exact_balance_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 75);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(75),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.deduct(\u0026caller, \u002675, \u0026None);\n    assert_eq!(remaining, 0);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn deduct_event_contains_request_id() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let request_id = Symbol::new(\u0026env, \"api_call_42\");\n    client.deduct(\u0026caller, \u0026150, \u0026Some(request_id.clone()));\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected deduct event\");\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    let topic2: Symbol = ev.1.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deduct\"));\n    assert_eq!(topic1, caller);\n    assert_eq!(topic2, request_id);\n\n    let (emitted_amount, remaining): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(emitted_amount, 150);\n    assert_eq!(remaining, 350);\n}\n\n#[test]\nfn deduct_event_no_request_id_uses_empty_symbol() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected deduct event\");\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic2: Symbol = ev.1.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deduct\"));\n    assert_eq!(topic2, Symbol::new(\u0026env, \"\"));\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deduct_zero_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u00260, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deduct_negative_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026-50, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"insufficient balance\")]\nfn deduct_exceeds_balance_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 50);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(50),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n}\n\n#[test]\nfn balance_unchanged_after_failed_deduct() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let _ = client.try_deduct(\u0026caller, \u0026200, \u0026None);\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Batch deduct tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn batch_deduct_multiple_items() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: Some(Symbol::new(\u0026env, \"req1\"))\n        },\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: Some(Symbol::new(\u0026env, \"req2\"))\n        },\n    ];\n\n    let remaining = client.batch_deduct(\u0026caller, \u0026items);\n    assert_eq!(remaining, 650);\n    assert_eq!(client.balance(), 650);\n}\n\n#[test]\n#[ignore] // Pre-existing test issue with event conversion - not related to routing feature\nfn batch_deduct_events_contain_request_ids() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let rid_a = Symbol::new(\u0026env, \"batch_a\");\n    let rid_b = Symbol::new(\u0026env, \"batch_b\");\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: Some(rid_a.clone())\n        },\n        DeductItem {\n            amount: 300,\n            request_id: Some(rid_b.clone())\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    let all_events = env.events().all();\n    // Last two events are the two deduct events\n    let len = all_events.len();\n    let ev_a = all_events.get(len - 2).unwrap();\n    let ev_b = all_events.get(len - 1).unwrap();\n\n    let req_a: Symbol = ev_a.1.get(2).unwrap().into_val(\u0026env);\n    let req_b: Symbol = ev_b.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(req_a, rid_a);\n    assert_eq!(req_b, rid_b);\n\n    let (amt_a, _): (i128, i128) = ev_a.2.into_val(\u0026env);\n    let (amt_b, _): (i128, i128) = ev_b.2.into_val(\u0026env);\n    assert_eq!(amt_a, 200);\n    assert_eq!(amt_b, 300);\n}\n\n#[test]\nfn batch_deduct_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 80,\n            request_id: None\n        },\n    ];\n\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for batch overdraw\");\n    // Balance must be unchanged on failure\n    assert_eq!(client.balance(), 100);\n}\n\n#[test]\nfn batch_deduct_empty_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items: soroban_sdk::Vec\u003cDeductItem\u003e = soroban_sdk::vec![\u0026env];\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for empty batch\");\n}\n\n#[test]\nfn batch_deduct_zero_amount_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 0,\n            request_id: None\n        }\n    ];\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for zero amount item\");\n}\n\n#[test]\nfn batch_deduct_too_large_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 10_000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(10_000), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Build a batch of MAX_BATCH_SIZE + 1 items\n    let mut items = soroban_sdk::Vec::new(\u0026env);\n    for _ in 0..=crate::MAX_BATCH_SIZE {\n        items.push_back(DeductItem {\n            amount: 1,\n            request_id: None,\n        });\n    }\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected error for oversized batch\");\n}\n\n#[test]\nfn batch_deduct_fail_mid_batch_leaves_balance_unchanged() {\n    // Second item exceeds balance — entire batch must revert.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 60,\n            request_id: None\n        },\n        DeductItem {\n            amount: 60,\n            request_id: None\n        }, // cumulative 120 \u003e 100\n    ];\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected insufficient balance error\");\n    // Balance must be completely unchanged\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Withdraw tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn withdraw_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.withdraw(\u0026200);\n    assert_eq!(remaining, 300);\n    assert_eq!(client.balance(), 300);\n}\n\n#[test]\nfn withdraw_full_balance_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.withdraw(\u00261000);\n    assert_eq!(remaining, 0);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn withdraw_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_withdraw(\u0026500);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n#[test]\nfn withdraw_zero_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_withdraw(\u00260);\n    assert!(result.is_err(), \"expected error for zero amount\");\n}\n\n#[test]\nfn withdraw_to_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let remaining = client.withdraw_to(\u0026recipient, \u0026150);\n    assert_eq!(remaining, 350);\n    assert_eq!(client.balance(), 350);\n    assert_eq!(usdc_client.balance(\u0026recipient), 150);\n}\n\n#[test]\nfn withdraw_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let _intruder = Address::generate(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    // Reset auths to test requirement without mock_all_auths bypassing it\n    env.set_auths(\u0026[]);\n    let res = client.try_withdraw(\u0026500);\n    assert!(res.is_err());\n}\n\n#[test]\nfn withdraw_to_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_withdraw_to(\u0026recipient, \u0026500);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n// ---------------------------------------------------------------------------\n// Transfer ownership tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn transfer_ownership_two_step_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.transfer_ownership(\u0026new_owner);\n    let meta = client.get_meta();\n    assert_eq!(meta.owner, owner); // Still old owner\n\n    client.accept_ownership();\n    let meta2 = client.get_meta();\n    assert_eq!(meta2.owner, new_owner);\n}\n\n#[test]\nfn transfer_ownership_emits_events() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.transfer_ownership(\u0026new_owner);\n\n    let events = env.events().all();\n    let nomad_ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"ownership_nominated\")\n            }\n        })\n        .expect(\"expected ownership_nominated event\");\n\n    let old_n: Address = nomad_ev.1.get(1).unwrap().into_val(\u0026env);\n    let new_n: Address = nomad_ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(old_n, owner);\n    assert_eq!(new_n, new_owner);\n\n    client.accept_ownership();\n    let events2 = env.events().all();\n    let accept_ev = events2\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"ownership_accepted\")\n            }\n        })\n        .expect(\"expected ownership_accepted event\");\n\n    let old_a: Address = accept_ev.1.get(1).unwrap().into_val(\u0026env);\n    let new_a: Address = accept_ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(old_a, owner);\n    assert_eq!(new_a, new_owner);\n}\n\n#[test]\n#[should_panic(expected = \"new_owner must be different from current owner\")]\nfn transfer_ownership_same_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.transfer_ownership(\u0026owner);\n}\n\n// ---------------------------------------------------------------------------\n// Distribute tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn distribute_transfers_usdc_to_recipient() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.distribute(\u0026admin, \u0026developer, \u0026300);\n\n    assert_eq!(usdc_client.balance(\u0026developer), 300);\n    assert_eq!(usdc_client.balance(\u0026vault_address), 700);\n}\n\n#[test]\nfn distribute_unauthorized_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026intruder, \u0026developer, \u0026300);\n    assert!(result.is_err(), \"expected error when non-admin distributes\");\n}\n\n#[test]\nfn distribute_insufficient_usdc_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026admin, \u0026developer, \u0026500);\n    assert!(result.is_err(), \"expected error for insufficient USDC\");\n}\n\n#[test]\nfn distribute_zero_amount_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026admin, \u0026developer, \u00260);\n    assert!(result.is_err(), \"expected error for zero amount\");\n}\n\n// ---------------------------------------------------------------------------\n// Offering metadata tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_and_retrieve_metadata() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-001\");\n    let metadata = String::from_str(\u0026env, \"QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco\");\n\n    let result = client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(result, metadata);\n\n    let retrieved = client.get_metadata(\u0026offering_id);\n    assert_eq!(retrieved, Some(metadata));\n}\n\n#[test]\nfn set_metadata_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-002\");\n    let metadata = String::from_str(\n        \u0026env,\n        \"bafybeigdyrzt5sfp7udm7hu76uh7y26nf3efuylqabf3oclgtqy55fbzdi\",\n    );\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_set event\");\n\n    assert_eq!(ev.0, vault_address);\n    let topics = \u0026ev.1;\n    assert_eq!(topics.len(), 3);\n\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: String = topics.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = topics.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"metadata_set\"));\n    assert_eq!(topic1, offering_id);\n    assert_eq!(topic2, owner);\n\n    let data: String = ev.2.into_val(\u0026env);\n    assert_eq!(data, metadata);\n}\n\n#[test]\nfn update_metadata_and_verify() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-003\");\n    let old_metadata = String::from_str(\u0026env, \"QmOldMetadata123\");\n    let new_metadata = String::from_str(\u0026env, \"QmNewMetadata456\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026old_metadata);\n    let result = client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n    assert_eq!(result, new_metadata);\n\n    let retrieved = client.get_metadata(\u0026offering_id);\n    assert_eq!(retrieved, Some(new_metadata));\n}\n\n#[test]\nfn update_metadata_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-004\");\n    let old_metadata = String::from_str(\u0026env, \"https://example.com/old.json\");\n    let new_metadata = String::from_str(\u0026env, \"https://example.com/new.json\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026old_metadata);\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_updated event\");\n\n    assert_eq!(ev.0, vault_address);\n    let topics = \u0026ev.1;\n    assert_eq!(topics.len(), 3);\n\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: String = topics.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = topics.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"metadata_updated\"));\n    assert_eq!(topic1, offering_id);\n    assert_eq!(topic2, owner);\n\n    let data: (String, String) = ev.2.into_val(\u0026env);\n    assert_eq!(data.0, old_metadata);\n    assert_eq!(data.1, new_metadata);\n}\n\n#[test]\nfn update_metadata_without_existing_uses_empty_old() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-006\");\n    let new_metadata = String::from_str(\u0026env, \"QmNewMetadataOnly\");\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_updated event\");\n\n    assert_eq!(ev.0, vault_address);\n    let data: (String, String) = ev.2.into_val(\u0026env);\n    assert_eq!(data.0, String::from_str(\u0026env, \"\"));\n    assert_eq!(data.1, new_metadata);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn unauthorized_cannot_set_metadata() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-005\");\n    let metadata = String::from_str(\u0026env, \"QmSomeMetadata\");\n    client.set_metadata(\u0026unauthorized, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\nfn set_metadata_max_length_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"a\".repeat(64).as_str());\n    let metadata = String::from_str(\u0026env, \"b\".repeat(256).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata));\n}\n\n#[test]\n#[should_panic(expected = \"metadata exceeds max length\")]\nfn set_metadata_exceeds_length_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"off-1\");\n    let metadata = String::from_str(\u0026env, \"b\".repeat(257).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\n#[should_panic(expected = \"offering_id exceeds max length\")]\nfn set_offering_id_exceeds_length_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"a\".repeat(65).as_str());\n    let metadata = String::from_str(\u0026env, \"meta\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\nfn update_metadata_max_length_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-update\");\n    let metadata = String::from_str(\u0026env, \"b\".repeat(256).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"old\"));\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata));\n}\n\n#[test]\nfn metadata_remains_after_ownership_transfer() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"off-transfer\");\n    let metadata = String::from_str(\u0026env, \"ipfs://cid123\");\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n\n    client.transfer_ownership(\u0026new_owner);\n    client.accept_ownership();\n\n    // Metadata should still be accessible\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata.clone()));\n\n    // Old owner should no longer be able to update it\n    let update_res =\n        client.try_update_metadata(\u0026owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"new\"));\n    assert!(update_res.is_err());\n\n    // New owner should be able to update it\n    client.update_metadata(\u0026new_owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"new\"));\n    assert_eq!(\n        client.get_metadata(\u0026offering_id),\n        Some(String::from_str(\u0026env, \"new\"))\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Full lifecycle test\n// ---------------------------------------------------------------------------\n\n#[test]\nfn vault_full_lifecycle() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n\n    // Init with 500 balance, min_deposit = 10, and revenue_pool for routing\n    let revenue_pool = Address::generate(\u0026env);\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let meta = client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026Some(10),\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(client.balance(), 500);\n    assert_eq!(client.get_admin(), owner);\n\n    // Allow depositor and deposit 200\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    usdc_admin.mint(\u0026depositor, \u0026200);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u0026200, \u00261000);\n    let after_deposit = client.deposit(\u0026depositor, \u0026200);\n    assert_eq!(after_deposit, 700);\n    assert_eq!(client.balance(), 700);\n\n    // Batch deduct 100 + 50 + 25 = 175\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: Some(Symbol::new(\u0026env, \"r1\"))\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 25,\n            request_id: Some(Symbol::new(\u0026env, \"r3\"))\n        },\n    ];\n    let after_batch = client.batch_deduct(\u0026caller, \u0026items);\n    assert_eq!(after_batch, 525);\n    assert_eq!(client.balance(), 525);\n\n    // Single deduct\n    let after_deduct = client.deduct(\u0026caller, \u002625, \u0026Some(Symbol::new(\u0026env, \"r4\")));\n    assert_eq!(after_deduct, 500);\n\n    // Admin change\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    assert_eq!(client.get_admin(), new_admin);\n\n    // Withdraw to recipient\n    let after_withdraw_to = client.withdraw_to(\u0026recipient, \u0026100);\n    assert_eq!(after_withdraw_to, 400);\n    assert_eq!(client.balance(), 400);\n\n    // Withdraw to owner\n    let after_withdraw = client.withdraw(\u002650);\n    assert_eq!(after_withdraw, 350);\n    assert_eq!(client.balance(), 350);\n\n    let final_meta = client.get_meta();\n    assert_eq!(final_meta.balance, 350);\n    assert_eq!(final_meta.owner, owner);\n    assert_eq!(final_meta.min_deposit, 10);\n}\n\n// ---------------------------------------------------------------------------\n// Revenue pool integration tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_with_revenue_pool_stores_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn deduct_with_revenue_pool_transfers_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    client.deduct(\u0026caller, \u0026300, \u0026None);\n\n    assert_eq!(client.balance(), 700);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 300);\n}\n\n#[test]\nfn deduct_with_settlement_transfers_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 800);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(800),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026250, \u0026None);\n\n    assert_eq!(client.balance(), 550);\n    assert_eq!(usdc_client.balance(\u0026settlement), 250);\n}\n\n#[test]\nfn batch_deduct_with_revenue_pool_transfers_total_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 150,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    assert_eq!(client.balance(), 650);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 350);\n}\n\n#[test]\nfn batch_deduct_with_settlement_transfers_total_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026Some(500),\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 150,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    assert_eq!(client.balance(), 650);\n    assert_eq!(usdc_client.balance(\u0026settlement), 350);\n}\n\n// ---------------------------------------------------------------------------\n// set_revenue_pool / get_revenue_pool tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_revenue_pool_stores_and_get_returns_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    assert_eq!(client.get_revenue_pool(), Some(revenue_pool));\n}\n\n#[test]\nfn set_revenue_pool_clear_removes_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_revenue_pool(\u0026owner, \u0026None);\n\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn set_revenue_pool_update_replaces_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let old_pool = Address::generate(\u0026env);\n    let new_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(old_pool), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(new_pool.clone()));\n\n    assert_eq!(client.get_revenue_pool(), Some(new_pool));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_revenue_pool_unauthorized_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026attacker, \u0026Some(revenue_pool));\n}\n\n#[test]\nfn get_revenue_pool_returns_none_when_not_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn get_revenue_pool_returns_correct_after_update() {\n    // Verify get_revenue_pool reflects latest committed state after multiple updates\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool1 = Address::generate(\u0026env);\n    let pool2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Set first revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool1.clone()));\n    assert_eq!(client.get_revenue_pool(), Some(pool1));\n\n    // Update to second revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool2.clone()));\n    assert_eq!(client.get_revenue_pool(), Some(pool2));\n}\n\n#[test]\nfn get_revenue_pool_returns_none_after_clear() {\n    // Ensure get_revenue_pool returns None after clearing\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n    assert_eq!(client.get_revenue_pool(), Some(pool));\n\n    // Clear revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026None);\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn get_revenue_pool_consistent_after_deduct_operations() {\n    // Ensure get_revenue_pool remains consistent and doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    // Query revenue pool before deduct\n    let before = client.get_revenue_pool();\n    assert_eq!(before, Some(revenue_pool.clone()));\n\n    // Perform deduct operation\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n\n    // Query revenue pool after deduct - should be unchanged\n    let after = client.get_revenue_pool();\n    assert_eq!(after, Some(revenue_pool.clone()));\n    assert_eq!(before, after);\n\n    // Verify no state mutation occurred\n    assert_eq!(client.balance(), 800);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 200);\n}\n\n#[test]\nfn get_revenue_pool_no_mutation_on_multiple_calls() {\n    // Verify calling get_revenue_pool multiple times doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    let initial_balance = client.balance();\n\n    // Call get_revenue_pool multiple times\n    for _ in 0..10 {\n        let result = client.get_revenue_pool();\n        assert_eq!(result, Some(pool.clone()));\n    }\n\n    // Verify balance unchanged (no mutation)\n    assert_eq!(client.balance(), initial_balance);\n}\n\n#[test]\nfn get_revenue_pool_consistency_with_zero_balance() {\n    // Ensure get_revenue_pool works correctly with zero vault balance\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    // Balance should be zero\n    assert_eq!(client.balance(), 0);\n\n    // Revenue pool should still be queryable\n    assert_eq!(client.get_revenue_pool(), Some(pool));\n}\n\n#[test]\nfn get_revenue_pool_after_multiple_sequential_updates() {\n    // Test multiple sequential set/clear operations before query\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool1 = Address::generate(\u0026env);\n    let pool2 = Address::generate(\u0026env);\n    let pool3 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Multiple sequential updates\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool1.clone()));\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool2.clone()));\n    client.set_revenue_pool(\u0026owner, \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool3.clone()));\n\n    // Should reflect final committed state\n    assert_eq!(client.get_revenue_pool(), Some(pool3));\n}\n\n#[test]\nfn deduct_routes_to_settlement_when_both_configured() {\n    // settlement takes priority over revenue_pool when both are set\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026400, \u0026None);\n\n    // settlement gets the funds, revenue_pool gets nothing\n    assert_eq!(usdc_client.balance(\u0026settlement), 400);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 0);\n}\n\n#[test]\nfn set_revenue_pool_emits_event_on_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_revenue_pool\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, revenue_pool);\n}\n\n#[test]\nfn set_revenue_pool_emits_event_on_clear() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_revenue_pool(\u0026owner, \u0026None);\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"clear_revenue_pool\"));\n}\n\n// ---------------------------------------------------------------------------\n// set_settlement / get_settlement tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_settlement_stores_and_get_returns_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    assert_eq!(client.get_settlement(), settlement);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_settlement_unauthorized_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026attacker, \u0026settlement);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn get_settlement_before_set_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.get_settlement();\n}\n\n#[test]\nfn get_settlement_returns_correct_after_update() {\n    // Verify get_settlement reflects latest committed state after multiple updates\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement1 = Address::generate(\u0026env);\n    let settlement2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Set first settlement address\n    client.set_settlement(\u0026owner, \u0026settlement1);\n    assert_eq!(client.get_settlement(), settlement1);\n\n    // Update to second settlement address\n    client.set_settlement(\u0026owner, \u0026settlement2);\n    assert_eq!(client.get_settlement(), settlement2);\n}\n\n#[test]\nfn get_settlement_consistent_after_deduct_operations() {\n    // Ensure get_settlement remains consistent and doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    // Query settlement before deduct\n    let before = client.get_settlement();\n    assert_eq!(before, settlement);\n\n    // Perform deduct operation\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n\n    // Query settlement after deduct - should be unchanged\n    let after = client.get_settlement();\n    assert_eq!(after, settlement);\n    assert_eq!(before, after);\n\n    // Verify no state mutation occurred\n    assert_eq!(client.balance(), 800);\n    assert_eq!(usdc_client.balance(\u0026settlement), 200);\n}\n\n#[test]\nfn get_settlement_no_mutation_on_multiple_calls() {\n    // Verify calling get_settlement multiple times doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let initial_balance = client.balance();\n\n    // Call get_settlement multiple times\n    for _ in 0..10 {\n        let result = client.get_settlement();\n        assert_eq!(result, settlement);\n    }\n\n    // Verify balance unchanged (no mutation)\n    assert_eq!(client.balance(), initial_balance);\n}\n\n// ---------------------------------------------------------------------------\n// Routing configuration and validation tests\n// ---------------------------------------------------------------------------\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn deduct_without_routing_fails() {\n    // Deduct should fail if neither settlement nor revenue_pool is configured\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    // No routing configured - should panic\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn batch_deduct_without_routing_fails() {\n    // Batch deduct should fail if neither settlement nor revenue_pool is configured\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n    ];\n\n    // No routing configured - should panic\n    client.batch_deduct(\u0026caller, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"revenue_pool cannot be vault address\")]\nfn set_revenue_pool_to_vault_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Try to set revenue_pool to vault's own address\n    client.set_revenue_pool(\u0026owner, \u0026Some(vault_address));\n}\n\n#[test]\n#[should_panic(expected = \"settlement cannot be vault address\")]\nfn set_settlement_to_vault_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Try to set settlement to vault's own address\n    client.set_settlement(\u0026owner, \u0026vault_address);\n}\n\n#[test]\nfn set_revenue_pool_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_revenue_pool\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, revenue_pool);\n}\n\n#[test]\nfn set_settlement_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_settlement\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, settlement);\n}\n\n#[test]\nfn routing_prioritizes_settlement_over_revenue_pool() {\n    // When both are set, settlement should receive funds\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026300, \u0026None);\n\n    // Settlement gets the funds, revenue_pool gets nothing\n    assert_eq!(usdc_client.balance(\u0026settlement), 300);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 0);\n    assert_eq!(client.balance(), 700);\n}\n\n#[test]\nfn routing_uses_revenue_pool_when_settlement_unset() {\n    // When only revenue_pool is set, it should receive funds\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    client.deduct(\u0026caller, \u0026250, \u0026None);\n\n    // Revenue pool gets the funds\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 250);\n    assert_eq!(client.balance(), 750);\n}\n\n#[test]\nfn routing_allows_multiple_sequential_updates() {\n    // Test reconfiguration after initial set\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement1 = Address::generate(\u0026env);\n    let settlement2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    // Set first settlement\n    client.set_settlement(\u0026owner, \u0026settlement1);\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n    assert_eq!(usdc_client.balance(\u0026settlement1), 100);\n\n    // Update to second settlement\n    client.set_settlement(\u0026owner, \u0026settlement2);\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n    assert_eq!(usdc_client.balance(\u0026settlement1), 100); // unchanged\n    assert_eq!(usdc_client.balance(\u0026settlement2), 200); // new routing\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_revenue_pool_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_revenue_pool(\u0026attacker, \u0026Some(revenue_pool));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_settlement_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_settlement(\u0026attacker, \u0026settlement);\n}\n\n#[test]\nfn routing_with_same_address_for_both_roles() {\n    // Allow same address for both settlement and revenue_pool (edge case)\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let shared_address = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    // Set both to same address\n    client.set_revenue_pool(\u0026owner, \u0026Some(shared_address.clone()));\n    client.set_settlement(\u0026owner, \u0026shared_address);\n\n    // Settlement takes priority\n    client.deduct(\u0026caller, \u0026150, \u0026None);\n    assert_eq!(usdc_client.balance(\u0026shared_address), 150);\n    assert_eq!(client.balance(), 850);\n}\n\n#[test]\nfn test_clear_allowed_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    let result = client.try_deposit(\u0026depositor, \u002650);\n    assert!(result.is_err());\n}\n\n#[test]\nfn test_set_authorized_caller() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let auth_caller = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    client.set_authorized_caller(\u0026auth_caller);\n    let meta = client.get_meta();\n    assert_eq!(meta.authorized_caller, Some(auth_caller));\n}\n\n#[test]\nfn test_deduct_with_settlement_success() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026owner, \u0026300, \u0026None);\n\n    assert_eq!(client.balance(), 700);\n    assert_eq!(usdc_client.balance(\u0026settlement), 300);\n}\n\n// ---------------------------------------------------------------------------\n// Checked arithmetic — overflow / underflow boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deposit_near_i128_max_succeeds() {\n    // Verify that a balance sitting just below i128::MAX can accept one more deposit.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    // Start with i128::MAX - 100 so there is headroom for a 100-unit deposit.\n    let initial: i128 = i128::MAX - 100;\n    fund_vault(\u0026usdc_admin, \u0026vault_address, initial);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(initial), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026100);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026100, \u00261000);\n    let new_balance = client.deposit(\u0026owner, \u0026100);\n    assert_eq!(new_balance, i128::MAX);\n}\n\n#[test]\nfn deposit_overflow_panics() {\n    // A deposit that would push balance past i128::MAX must panic.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, i128::MAX);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(i128::MAX), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261, \u00261000);\n    let result = client.try_deposit(\u0026owner, \u00261);\n    assert!(result.is_err(), \"expected overflow panic\");\n}\n\n#[test]\nfn deduct_to_zero_succeeds() {\n    // Deducting the entire balance should leave exactly 0, not underflow.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(client.deduct(\u0026owner, \u0026500, \u0026None), 0);\n}\n\n#[test]\nfn withdraw_to_zero_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    assert_eq!(client.withdraw(\u0026300), 0);\n}\n\n// ---------------------------------------------------------------------------\n// Issue #108 — set_allowed_depositor: duplicate add, clear, unauthorized\n// ---------------------------------------------------------------------------\n\n#[test]\nfn clear_allowed_depositors_removes_all() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let d1 = Address::generate(\u0026env);\n    let d2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d1.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d2.clone()));\n    client.clear_allowed_depositors(\u0026owner);\n\n    // Neither address should be able to deposit after clear.\n    usdc_admin.mint(\u0026d1, \u002610);\n    usdc_client.approve(\u0026d1, \u0026vault_address, \u002610, \u00261000);\n    assert!(client.try_deposit(\u0026d1, \u002610).is_err());\n}\n\n#[test]\nfn clear_allowed_depositors_on_empty_is_noop() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    // Must not panic on empty list.\n    client.clear_allowed_depositors(\u0026owner);\n    assert_eq!(client.get_allowed_depositors().len(), 0);\n}\n\n#[test]\nfn non_owner_cannot_set_allowed_depositor_issue108() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let result = client.try_set_allowed_depositor(\u0026attacker, \u0026Some(depositor.clone()));\n    assert!(result.is_err(), \"non-owner must not mutate allowlist\");\n}\n\n#[test]\nfn non_owner_cannot_clear_allowed_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    let result = client.try_clear_allowed_depositors(\u0026attacker);\n    assert!(result.is_err(), \"non-owner must not clear allowlist\");\n}\n\n// ---------------------------------------------------------------------------\n// Token transfer failure modes — documented limitations\n// ---------------------------------------------------------------------------\n//\n// # Manual Test Plan: Transfer Failure Modes\n//\n// The Soroban test harness (soroban-sdk testutils) does not provide a mechanism\n// to inject token-level failures (e.g. simulate a transfer revert mid-call).\n// The following failure modes are therefore documented here for manual / fuzzing\n// verification rather than automated unit tests:\n//\n// 1. **deposit: transfer from caller fails** — if the caller has insufficient\n//    USDC balance or has not approved the vault, the token contract panics and\n//    the deposit reverts atomically (no balance change).\n//\n// 2. **withdraw / withdraw_to: transfer to recipient fails** — if the vault's\n//    on-chain USDC balance is lower than the tracked `meta.balance` (e.g. due\n//    to a direct token transfer out), the token transfer panics. The vault\n//    balance is NOT updated in this case (state write happens after transfer).\n//\n// 3. **deduct → settlement transfer fails** — if the settlement address has no\n//    trustline or the vault's USDC balance is insufficient, the token transfer\n//    panics. The vault balance IS already written before the transfer; callers\n//    should treat a panic here as a critical invariant violation.\n//\n// 4. **deduct → revenue_pool transfer fails** — same as (3) for revenue_pool.\n//\n// 5. **distribute: transfer fails** — guarded by an explicit `vault_balance \u003c amount`\n//    check before the transfer; covered by `distribute_insufficient_usdc_fails`.\n//\n// All paths above are covered by the checked-arithmetic and balance-guard tests\n// below. The highest-risk external calls (deduct routing) are covered by the\n// integration tests `deduct_with_settlement_transfers_usdc` and\n// `deduct_with_revenue_pool_transfers_usdc`.\n\n// ---------------------------------------------------------------------------\n// Additional edge-case tests to reach ≥ 95 % line coverage\n// ---------------------------------------------------------------------------\n\n#[test]\n#[should_panic(expected = \"vault already paused\")]\nfn pause_when_already_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    client.pause(\u0026owner); // second pause must panic\n}\n\n#[test]\n#[should_panic(expected = \"vault not paused\")]\nfn unpause_when_not_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.unpause(\u0026owner); // not paused — must panic\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin or owner\")]\nfn pause_by_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026attacker);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin or owner\")]\nfn unpause_by_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    client.unpause(\u0026attacker);\n}\n\n#[test]\nfn owner_can_pause_and_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    assert!(!client.is_paused());\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn admin_can_pause_and_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    client.pause(\u0026new_admin);\n    assert!(client.is_paused());\n    client.unpause(\u0026new_admin);\n    assert!(!client.is_paused());\n}\n\n// ---------------------------------------------------------------------------\n// is_paused() view function tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn is_paused_returns_false_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    // After initialization, vault should not be paused\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn is_paused_returns_true_after_pause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    // After pause, should return true\n    assert!(client.is_paused());\n}\n\n#[test]\nfn is_paused_returns_false_after_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n    client.unpause(\u0026owner);\n    // After unpause, should return false\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn is_paused_multiple_pause_unpause_cycles() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Multiple cycles of pause/unpause\n    for _ in 0..5 {\n        assert!(!client.is_paused());\n        client.pause(\u0026owner);\n        assert!(client.is_paused());\n        client.unpause(\u0026owner);\n        assert!(!client.is_paused());\n    }\n}\n\n#[test]\nfn is_paused_consistent_consecutive_calls() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Call is_paused multiple times - should return consistent values\n    for _ in 0..10 {\n        assert!(!client.is_paused());\n    }\n\n    client.pause(\u0026owner);\n\n    for _ in 0..10 {\n        assert!(client.is_paused());\n    }\n\n    client.unpause(\u0026owner);\n\n    for _ in 0..10 {\n        assert!(!client.is_paused());\n    }\n}\n\n#[test]\nfn is_paused_no_state_mutation() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Get balance before calling is_paused\n    let balance_before = client.balance();\n\n    // Call is_paused multiple times\n    for _ in 0..100 {\n        let _ = client.is_paused();\n    }\n\n    // Balance should remain unchanged (no state mutation)\n    assert_eq!(client.balance(), balance_before);\n}\n\n#[test]\nfn is_paused_reflects_latest_committed_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Initial state\n    assert!(!client.is_paused());\n\n    // Pause and verify immediate reflection\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    // Unpause and verify immediate reflection\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n\n    // Admin change shouldn't affect pause state\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    assert!(!client.is_paused());\n\n    // New admin can pause\n    client.pause(\u0026new_admin);\n    assert!(client.is_paused());\n}\n\n#[test]\nfn is_paused_safe_default_before_init() {\n    let env = Env::default();\n    let (_, client) = create_vault(\u0026env);\n    // Before initialization, is_paused should return false (safe default)\n    // and must not panic\n    assert!(!client.is_paused());\n}\n\n#[test]\n#[should_panic(expected = \"vault is paused\")]\nfn deduct_while_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.pause(\u0026owner);\n    client.deduct(\u0026owner, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"vault is paused\")]\nfn batch_deduct_while_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.pause(\u0026owner);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        }\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized caller\")]\nfn deduct_unauthorized_caller_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    // init with an authorized_caller so the None branch is not taken\n    let auth = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(auth),\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.deduct(\u0026attacker, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized caller\")]\nfn batch_deduct_unauthorized_caller_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let auth = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(auth),\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        }\n    ];\n    client.batch_deduct(\u0026attacker, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn deduct_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    client.deduct(\u0026owner, \u0026100, \u0026None); // 100 \u003e max_deduct(50)\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn batch_deduct_item_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        }\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn distribute_negative_amount_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.distribute(\u0026owner, \u0026dev, \u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"no admin transfer pending\")]\nfn accept_admin_without_pending_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.accept_admin();\n}\n\n#[test]\n#[should_panic(expected = \"no ownership transfer pending\")]\nfn accept_ownership_without_pending_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.accept_ownership();\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn withdraw_negative_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw(\u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn withdraw_to_negative_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw_to(\u0026recipient, \u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn deduct_no_routing_fails() {\n    // When neither settlement nor revenue_pool is configured, deduct should fail\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.deduct(\u0026owner, \u0026200, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"routing not configured\")]\nfn batch_deduct_no_routing_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\nfn withdraw_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw(\u0026100);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"withdraw\")\n            }\n        })\n        .expect(\"expected withdraw event\");\n    let (amt, bal): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 100);\n    assert_eq!(bal, 200);\n}\n\n#[test]\nfn withdraw_to_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.withdraw_to(\u0026recipient, \u0026150);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"withdraw_to\")\n            }\n        })\n        .expect(\"expected withdraw_to event\");\n    let (amt, bal): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 150);\n    assert_eq!(bal, 150);\n}\n\n#[test]\nfn distribute_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.distribute(\u0026owner, \u0026dev, \u0026200);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"distribute\")\n            }\n        })\n        .expect(\"expected distribute event\");\n    let amt: i128 = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 200);\n}\n\n#[test]\nfn get_allowed_depositors_returns_list() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let d1 = Address::generate(\u0026env);\n    let d2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d1));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d2));\n    let list = client.get_allowed_depositors();\n    assert_eq!(list.len(), 2);\n}\n\n#[test]\nfn vault_unpaused_event_emitted() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    client.unpause(\u0026owner);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"vault_unpaused\")\n            }\n        })\n        .expect(\"expected vault_unpaused event\");\n    let caller: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(caller, owner);\n}\n\n// ---------------------------------------------------------------------------\n// Randomised sequence tests\n//\n// Invariants under test:\n//   1. VaultMeta.balance \u003e= 0 after every operation.\n//   2. Local simulator tracks the same balance as the contract at each step.\n//   3. batch_deduct is atomic: a failing batch leaves balance unchanged.\n//   4. pause blocks deposits but not deductions; unpause restores deposits.\n//   5. No single deduct/batch item may exceed max_deduct.\n//\n// Seeds are fixed so runs are deterministic and reproducible in CI.\n// ---------------------------------------------------------------------------\n\n#[cfg(test)]\nmod fuzz {\n    use super::*;\n    use rand::rngs::StdRng;\n    use rand::{Rng, SeedableRng};\n\n    /// Run a mixed sequence of deposit / deduct / batch_deduct / pause / unpause\n    /// and assert after every step that:\n    ///   - contract balance == local simulator\n    ///   - contract balance \u003e= 0\n    fn run_sequence(seed: u64, max_deduct_val: i128, initial: i128, steps: usize) {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n\n        // Pre-fund vault so initial_balance is valid.\n        usdc_admin.mint(\u0026vault_addr, \u0026initial);\n        let revenue_pool = Address::generate(\u0026env);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(initial),\n            \u0026None,\n            \u0026Some(1),            // min_deposit = 1\n            \u0026Some(revenue_pool), // revenue_pool for routing\n            \u0026Some(max_deduct_val),\n        );\n\n        // Give the depositor (owner) plenty of USDC.\n        // Use a very large amount to handle large max_deduct scenarios\n        let deposit_reserve: i128 = 10_000_000_000_000; // 10 trillion to handle large deposits\n        usdc_admin.mint(\u0026owner, \u0026deposit_reserve);\n        usdc_client.approve(\u0026owner, \u0026vault_addr, \u0026deposit_reserve, \u0026999_999);\n\n        let mut rng = StdRng::seed_from_u64(seed);\n        let mut sim: i128 = initial;\n        let mut paused = false;\n\n        for _ in 0..steps {\n            // Pick an operation: 0=deposit, 1=deduct, 2=batch_deduct, 3=toggle_pause\n            let op: u8 = rng.gen_range(0..4);\n\n            match op {\n                // --- deposit ---\n                0 =\u003e {\n                    // Cap deposit amount to avoid exceeding available balance\n                    let max_deposit = max_deduct_val.min(1_000_000_000);\n                    let amount: i128 = rng.gen_range(1..=max_deposit);\n                    if paused {\n                        // deposit must fail while paused\n                        assert!(client.try_deposit(\u0026owner, \u0026amount).is_err());\n                    } else {\n                        sim += amount;\n                        client.deposit(\u0026owner, \u0026amount);\n                    }\n                }\n\n                // --- single deduct ---\n                1 =\u003e {\n                    let amount: i128 = rng.gen_range(1..=max_deduct_val);\n                    if paused {\n                        // deduct must fail while paused\n                        assert!(client.try_deduct(\u0026caller, \u0026amount, \u0026None).is_err());\n                    } else if sim \u003e= amount {\n                        sim -= amount;\n                        client.deduct(\u0026caller, \u0026amount, \u0026None);\n                    } else {\n                        // must fail — balance unchanged\n                        assert!(client.try_deduct(\u0026caller, \u0026amount, \u0026None).is_err());\n                    }\n                }\n\n                // --- batch_deduct ---\n                2 =\u003e {\n                    // Build a batch of 1..=5 items, each within max_deduct.\n                    let n: usize = rng.gen_range(1..=5);\n                    let mut items = soroban_sdk::Vec::new(\u0026env);\n                    let mut batch_total: i128 = 0;\n                    let mut valid = true;\n                    for _ in 0..n {\n                        let amt: i128 = rng.gen_range(1..=max_deduct_val);\n                        batch_total = match batch_total.checked_add(amt) {\n                            Some(v) =\u003e v,\n                            None =\u003e {\n                                valid = false;\n                                break;\n                            }\n                        };\n                        items.push_back(DeductItem {\n                            amount: amt,\n                            request_id: None,\n                        });\n                    }\n                    if paused {\n                        // batch_deduct must fail while paused\n                        let before = client.balance();\n                        let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                        assert_eq!(\n                            client.balance(),\n                            before,\n                            \"failed batch must not change balance\"\n                        );\n                    } else if valid \u0026\u0026 sim \u003e= batch_total {\n                        sim -= batch_total;\n                        client.batch_deduct(\u0026caller, \u0026items);\n                    } else {\n                        // batch must fail atomically — balance unchanged\n                        let before = client.balance();\n                        let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                        assert_eq!(\n                            client.balance(),\n                            before,\n                            \"failed batch must not change balance\"\n                        );\n                    }\n                }\n\n                // --- toggle pause ---\n                3 =\u003e {\n                    if paused {\n                        client.unpause(\u0026owner);\n                        paused = false;\n                    } else {\n                        client.pause(\u0026owner);\n                        paused = true;\n                    }\n                }\n\n                _ =\u003e unreachable!(),\n            }\n\n            // Invariant assertions after every step.\n            let on_chain = client.balance();\n            assert_eq!(on_chain, sim, \"seed={seed} sim mismatch\");\n            assert!(on_chain \u003e= 0, \"seed={seed} balance went negative\");\n        }\n\n        // Leave vault unpaused so teardown is clean.\n        if paused {\n            client.unpause(\u0026owner);\n        }\n    }\n\n    #[test]\n    fn fuzz_deposit_and_deduct() {\n        // Original invariant: mixed deposits and single deducts stay non-negative.\n        run_sequence(0xdead_beef, 500, 10_000, 200);\n    }\n\n    #[test]\n    fn fuzz_batch_deduct_coverage() {\n        // Heavier batch_deduct weight via a different seed.\n        run_sequence(0xcafe_1234, 200, 5_000, 150);\n    }\n\n    #[test]\n    fn fuzz_pause_interleaved() {\n        // Pause/unpause interleaved with deposits and deductions.\n        run_sequence(0xf00d_abcd, 1_000, 50_000, 100);\n    }\n\n    #[test]\n    fn fuzz_tight_max_deduct() {\n        // max_deduct = 1 forces many small steps; exercises boundary exhaustively.\n        run_sequence(0x1234_5678, 1, 500, 300);\n    }\n\n    #[test]\n    fn fuzz_large_max_deduct() {\n        // max_deduct near i128::MAX / 2 — checks no overflow in batch totals.\n        run_sequence(0xabcd_ef01, i128::MAX / 2, 1_000_000, 80);\n    }\n\n    /// Verify that a batch whose cumulative total exceeds balance is fully atomic:\n    /// balance must be identical before and after the failed call.\n    #[test]\n    fn fuzz_batch_atomicity_on_overdraw() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n\n        usdc_admin.mint(\u0026vault_addr, \u0026300);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(300),\n            \u0026None,\n            \u0026None,\n            \u0026Some(Address::generate(\u0026env)),\n            \u0026Some(200),\n        );\n\n        let mut rng = StdRng::seed_from_u64(0x5eed_0001);\n        // Build batches that sometimes overdraw; assert atomicity each time.\n        for _ in 0..50 {\n            let before = client.balance();\n            let n: usize = rng.gen_range(1..=5);\n            let mut items = soroban_sdk::Vec::new(\u0026env);\n            for _ in 0..n {\n                items.push_back(DeductItem {\n                    amount: rng.gen_range(1..=200_i128),\n                    request_id: None,\n                });\n            }\n            let total: i128 = items.iter().map(|i| i.amount).sum();\n            if before \u003e= total {\n                client.batch_deduct(\u0026caller, \u0026items);\n                assert_eq!(client.balance(), before - total);\n            } else {\n                let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                assert_eq!(client.balance(), before, \"atomic rollback failed\");\n            }\n            assert!(client.balance() \u003e= 0);\n        }\n    }\n\n    /// Verify that max_deduct is enforced on every individual item in a batch.\n    #[test]\n    fn fuzz_max_deduct_enforced_in_batch() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n        let max_d: i128 = 100;\n        let revenue_pool = Address::generate(\u0026env);\n\n        usdc_admin.mint(\u0026vault_addr, \u002610_000);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(10_000),\n            \u0026None,\n            \u0026None,\n            \u0026Some(revenue_pool),\n            \u0026Some(max_d),\n        );\n\n        let mut rng = StdRng::seed_from_u64(0x5eed_0002);\n        for _ in 0..40 {\n            // Occasionally inject an item that exceeds max_deduct.\n            let exceed = rng.gen_bool(0.3);\n            let amt: i128 = if exceed {\n                rng.gen_range(max_d + 1..=max_d * 3)\n            } else {\n                rng.gen_range(1..=max_d)\n            };\n            let items = soroban_sdk::vec![\n                \u0026env,\n                DeductItem {\n                    amount: amt,\n                    request_id: None\n                }\n            ];\n            if exceed {\n                assert!(\n                    client.try_batch_deduct(\u0026caller, \u0026items).is_err(),\n                    \"item exceeding max_deduct must be rejected\"\n                );\n            } else if client.balance() \u003e= amt {\n                client.batch_deduct(\u0026caller, \u0026items);\n                assert!(client.balance() \u003e= 0);\n            }\n        }\n    }\n}\n\n// ---------------------------------------------------------------------------\n// Issue #151 — min_deposit boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deposit_exact_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002650);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002650, \u00261000);\n    let balance = client.deposit(\u0026owner, \u002650);\n    assert_eq!(balance, 50);\n}\n\n#[test]\n#[should_panic(expected = \"deposit below minimum\")]\nfn deposit_below_min_deposit_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002649);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002649, \u00261000);\n    client.deposit(\u0026owner, \u002649);\n}\n\n#[test]\nfn deposit_above_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002651);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002651, \u00261000);\n    let balance = client.deposit(\u0026owner, \u002651);\n    assert_eq!(balance, 51);\n}\n\n#[test]\nfn deposit_with_zero_min_deposit_allows_any_positive_amount() {\n    // When min_deposit is 0 (default), any positive amount should succeed.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(0), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261, \u00261000);\n    let balance = client.deposit(\u0026owner, \u00261);\n    assert_eq!(balance, 1);\n}\n\n#[test]\nfn init_min_deposit_stored_in_meta() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(100), \u0026None, \u0026None);\n    let meta = client.get_meta();\n    assert_eq!(meta.min_deposit, 100);\n}\n\n#[test]\nfn init_default_min_deposit_is_zero() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    let meta = client.get_meta();\n    assert_eq!(meta.min_deposit, 0);\n}\n\n#[test]\nfn deposit_one_below_large_min_deposit_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(1_000_000), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026999_999);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026999_999, \u00261000);\n    let result = client.try_deposit(\u0026owner, \u0026999_999);\n    assert!(\n        result.is_err(),\n        \"deposit one below large min_deposit must fail\"\n    );\n}\n\n#[test]\nfn deposit_exact_large_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(1_000_000), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261_000_000);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261_000_000, \u00261000);\n    let balance = client.deposit(\u0026owner, \u00261_000_000);\n    assert_eq!(balance, 1_000_000);\n}\n\n// ---------------------------------------------------------------------------\n// max_deduct boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deduct_equal_to_max_deduct_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    // max_deduct = 100, deposit 200 so balance is sufficient\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(100),\n    );\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u00261000);\n    client.deposit(\u0026owner, \u0026200);\n    // deduct exactly equal to max_deduct — must succeed\n    let balance = client.deduct(\u0026owner, \u0026100, \u0026None);\n    assert_eq!(balance, 600);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn deduct_above_max_deduct_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(100),\n    );\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u00261000);\n    client.deposit(\u0026owner, \u0026200);\n    // deduct 101 \u003e max_deduct 100 — must panic\n    client.deduct(\u0026owner, \u0026101, \u0026None);\n}\n\n#[test]\nfn deduct_default_cap_is_i128_max() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    // no max_deduct supplied — default cap (i128::MAX) applies\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    usdc_admin.mint(\u0026owner, \u00261_000_000);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261_000_000, \u00261000);\n    client.deposit(\u0026owner, \u00261_000_000);\n    // large deduct well below i128::MAX should succeed\n    let balance = client.deduct(\u0026owner, \u0026999_999, \u0026None);\n    assert_eq!(balance, 1);\n}\n\n#[test]\nfn batch_deduct_each_item_constrained_by_max_deduct() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    let revenue_pool = Address::generate(\u0026env);\n    // max_deduct = 50\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    usdc_admin.mint(\u0026owner, \u0026300);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n    client.deposit(\u0026owner, \u0026300);\n    // three items each exactly at the cap — all must pass\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n    ];\n    let balance = client.batch_deduct(\u0026owner, \u0026items);\n    assert_eq!(balance, 150);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn batch_deduct_one_item_above_max_deduct_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    let revenue_pool = Address::generate(\u0026env);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026Some(50),\n    );\n    usdc_admin.mint(\u0026owner, \u0026300);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n    client.deposit(\u0026owner, \u0026300);\n    // second item exceeds cap — must panic\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 51,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n","traces":[{"line":12,"address":[11102752,11103215,11103221],"length":1,"stats":{"Line":1}},{"line":16,"address":[],"length":0,"stats":{"Line":3}},{"line":17,"address":[],"length":0,"stats":{"Line":1}},{"line":18,"address":[],"length":0,"stats":{"Line":2}},{"line":19,"address":[],"length":0,"stats":{"Line":1}},{"line":20,"address":[],"length":0,"stats":{"Line":1}},{"line":23,"address":[11103248,11103433,11103439],"length":1,"stats":{"Line":1}},{"line":24,"address":[11103287],"length":1,"stats":{"Line":3}},{"line":25,"address":[11103307],"length":1,"stats":{"Line":1}},{"line":26,"address":[11103352],"length":1,"stats":{"Line":3}},{"line":30,"address":[11102704],"length":1,"stats":{"Line":1}},{"line":35,"address":[11102727],"length":1,"stats":{"Line":1}}],"covered":12,"coverable":12},{"path":["/","home","chukwuemekadr","Documents","Drips","Wave4","Callora-Contracts","contracts","vault","src","test_init_hardening.rs"],"content":"use crate::{CalloraVault, CalloraVaultClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"vault already initialized\")]\nfn test_double_initialization_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // First init\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n    // Second init should panic\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"usdc_token cannot be vault address\")]\nfn test_init_usdc_self_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Passing vault's own address as USDC token\n    client.init(\u0026owner, \u0026addr, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"revenue_pool cannot be vault address\")]\nfn test_init_revenue_pool_self_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Passing vault's own address as Revenue Pool\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(addr.clone()),\n        \u0026None,\n    );\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit must be non-negative\")]\nfn test_init_negative_min_deposit_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(-10), \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"max_deduct must be positive\")]\nfn test_init_zero_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026Some(0));\n}\n\n#[test]\n#[should_panic(expected = \"max_deduct must be positive\")]\nfn test_init_negative_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026Some(-50));\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit cannot exceed max_deduct\")]\nfn test_init_min_deposit_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(100), \u0026None, \u0026Some(50));\n}\n\n#[test]\nfn test_init_validates_successfully() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Test valid initialization with valid parameters\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026Some(10),\n        \u0026Some(pool.clone()),\n        \u0026Some(50),\n    );\n\n    assert_eq!(client.get_admin(), owner);\n}\n","traces":[],"covered":0,"coverable":0}]};
+        var data = {"files":[{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","revenue_pool","src","lib.rs"],"content":"#![no_std]\n\nuse soroban_sdk::{contract, contractimpl, token, Address, Env, Symbol, Vec};\n\n/// Revenue settlement contract: receives USDC from vault deducts and distributes to developers.\n///\n/// Flow: vault deduct → vault transfers USDC to this contract → admin calls distribute(to, amount).\n///\n/// # Security Assumptions\n/// - **Admin Key**: The admin has full control over fund distribution. Must be a secure multisig.\n/// - **USDC Asset**: The token address is permanently set on initialization. Must be carefully verified.\n/// - **Balances / Griefing**: The contract does not rely on strict balance invariants. External transfers\n///   increase balance without breaking logic.\n///\n/// For detailed threat models and mitigations, see [`SECURITY.md`](../../SECURITY.md).\nconst ADMIN_KEY: \u0026str = \"admin\";\nconst PENDING_ADMIN_KEY: \u0026str = \"pending_admin\";\nconst USDC_KEY: \u0026str = \"usdc\";\nconst ERR_AMOUNT_NOT_POSITIVE: \u0026str = \"amount must be positive\";\nconst ERR_UNAUTHORIZED: \u0026str = \"unauthorized: caller is not admin\";\nconst ERR_INSUFFICIENT_BALANCE: \u0026str = \"insufficient USDC balance\";\nconst ERR_NOT_INITIALIZED: \u0026str = \"revenue pool not initialized\";\n\n/// Maximum number of payments allowed in a single `batch_distribute` call.\n/// Caps CPU/memory usage well within Soroban resource limits and aligns with\n/// the vault's `MAX_BATCH_SIZE` for `batch_deduct`.\npub const MAX_BATCH_SIZE: u32 = 50;\n\n#[contract]\npub struct RevenuePool;\n\n#[contractimpl]\nimpl RevenuePool {\n    /// Initialize the revenue pool with an admin and the USDC token address.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `admin` - Address that may call `distribute`. Typically backend or multisig.\n    /// * `usdc_token` - Stellar USDC (or wrapped USDC) token contract address.\n    ///\n    /// # Panics\n    /// * If the revenue pool is already initialized.\n    ///\n    /// # Events\n    /// Emits an `init` event with the `admin` address as a topic and `usdc_token` address as data.\n    pub fn init(env: Env, admin: Address, usdc_token: Address) {\n        admin.require_auth();\n        if usdc_token == env.current_contract_address() {\n            panic!(\"invalid config: usdc_token cannot be the contract itself\");\n        }\n        if usdc_token == admin {\n            panic!(\"invalid config: usdc_token cannot be the admin address\");\n        }\n        let inst = env.storage().instance();\n        if inst.has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"revenue pool already initialized\");\n        }\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026admin);\n        inst.set(\u0026Symbol::new(\u0026env, USDC_KEY), \u0026usdc_token);\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"init\"), admin), usdc_token);\n    }\n\n    /// Return the current admin address.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The `Address` of the current admin.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, ADMIN_KEY))\n            .expect(\"revenue pool not initialized\")\n    }\n\n    /// Initiate replacement of the current admin. Only the existing admin may call this.\n    /// The new admin must call `claim_admin` to complete the transfer.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `new_admin` - Address of the proposed new admin.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    ///\n    /// # Events\n    /// Emits an `admin_transfer_started` event with the `current_admin` as a topic and `new_admin` as data.\n    /// Return the USDC token address configured for this pool.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The `Address` of the USDC token contract.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn get_usdc_token(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(\"revenue pool not initialized\")\n    }\n\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let current = Self::get_admin(env.clone());\n        if caller != current {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        let inst = env.storage().instance();\n        inst.set(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY), \u0026new_admin);\n\n        env.events().publish(\n            (Symbol::new(\u0026env, \"admin_transfer_started\"), current),\n            new_admin,\n        );\n    }\n\n    /// Complete the admin transfer. Only the pending admin may call this.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the pending admin set via `set_admin`.\n    ///\n    /// # Panics\n    /// * If no pending admin is set (`\"no pending admin\"`).\n    /// * If the caller is not the pending admin (`\"unauthorized: caller is not pending admin\"`).\n    ///\n    /// # Events\n    /// Emits an `admin_transfer_completed` event with the `new_admin` as a topic.\n    pub fn claim_admin(env: Env, caller: Address) {\n        caller.require_auth();\n        let inst = env.storage().instance();\n        let pending: Address = inst\n            .get(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY))\n            .expect(\"no pending admin\");\n\n        if caller != pending {\n            panic!(\"unauthorized: caller is not pending admin\");\n        }\n\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026pending);\n        inst.remove(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY));\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_transfer_completed\"), pending), ());\n    }\n\n    /// **Note**: This function is an **event-only helper**. It is **not** a substitute\n    /// for real token settlement and does **not** move any tokens. It exists purely\n    /// for event emission / indexer alignment when configured.\n    /// In practice, USDC is received when the vault (or any address) transfers tokens\n    /// to this contract's address; no separate \"receive_payment\" call is required\n    /// for the transfer to succeed.\n    ///\n    /// This function can be used to emit an event for indexers when the backend\n    /// wants to log that a payment was credited from the vault.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `amount` - Amount received (for event logging).\n    /// * `from_vault` - Optional; true if the source was the vault.\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    ///\n    /// # Events\n    /// Emits a `receive_payment` event with `caller` as a topic, and a tuple of\n    /// `(amount, from_vault)` as data.\n    pub fn receive_payment(env: Env, caller: Address, amount: i128, from_vault: bool) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.events().publish(\n            (Symbol::new(\u0026env, \"receive_payment\"), caller),\n            (amount, from_vault),\n        );\n    }\n\n    fn validate_recipient(recipient: \u0026Address, contract_self: \u0026Address) {\n        // Rule 1 — no self-distributions (the contract sending to itself is almost\n        // certainly a logic bug; if you want to \"reclaim\" funds use a dedicated fn).\n        if recipient == contract_self {\n            panic!(\"invalid recipient: cannot distribute to the contract itself\");\n        }\n    }\n\n    /// Distribute USDC from this contract to a developer wallet.\n    ///\n    /// Only the admin may call. Transfers USDC from this contract to `to`.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `to` - Developer address to receive USDC.\n    /// * `amount` - Amount in token base units (e.g. USDC stroops).\n    ///\n    /// # Panics\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    /// * If the amount is zero or negative (`\"amount must be positive\"`).\n    /// * If the revenue pool has not been initialized.\n    /// * If the revenue pool holds less than the requested amount (`\"insufficient USDC balance\"`).\n    ///\n    /// # Events\n    /// Emits a `distribute` event with `to` as a topic and `amount` as data.\n    pub fn distribute(env: Env, caller: Address, to: Address, amount: i128) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"{}\", ERR_UNAUTHORIZED);\n        }\n        if amount \u003c= 0 {\n            panic!(\"{}\", ERR_AMOUNT_NOT_POSITIVE);\n        }\n\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(ERR_NOT_INITIALIZED);\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n\n        let contract_address = env.current_contract_address();\n        Self::validate_recipient(\u0026to, \u0026contract_address);\n\n        let _ = usdc.try_balance(\u0026to).unwrap_or_else(|_| {\n            panic!(\n                \"invalid recipient: account does not exist \\\n                                      or has no USDC trustline\"\n            )\n        });\n\n        if usdc.balance(\u0026contract_address) \u003c amount {\n            panic!(\"{}\", ERR_INSUFFICIENT_BALANCE);\n        }\n\n        usdc.transfer(\u0026contract_address, \u0026to, \u0026amount);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"distribute\"), to), amount);\n    }\n\n    /// Distribute USDC from this contract to multiple developer wallets in one atomic transaction.\n    ///\n    /// This function implements a three-phase atomic batch transfer:\n    /// 1. **Precomputation \u0026 Validation**: Validates all amounts are positive and calculates total.\n    /// 2. **Balance Check**: Ensures contract has sufficient USDC before any transfers.\n    /// 3. **Execution**: Performs all transfers and emits events for each leg.\n    ///\n    /// The implementation guarantees atomicity: either all transfers succeed or none do.\n    /// No partial transfers occur if a later leg would fail.\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    /// * `caller` - Must be the current admin.\n    /// * `payments` - A vector of `(Address, i128)` tuples representing destinations and amounts.\n    ///   Must contain between 1 and [`MAX_BATCH_SIZE`] entries (inclusive).\n    ///\n    /// # Panics\n    /// * If `payments` is empty (`\"batch_distribute requires at least one payment\"`).\n    /// * If `payments` exceeds [`MAX_BATCH_SIZE`] entries (`\"batch too large\"`).\n    /// * If the caller is not the current admin (`\"unauthorized: caller is not admin\"`).\n    /// * If any individual amount is zero or negative (`\"amount must be positive\"`).\n    /// * If the revenue pool has not been initialized (`\"revenue pool not initialized\"`).\n    /// * If the total amount exceeds the contract's available balance (`\"insufficient USDC balance\"`).\n    /// * If the payments vector is empty (`\"payments vector cannot be empty\"`).\n    ///\n    /// # Events\n    /// Emits a `batch_distribute` event for each payment with `to` as a topic and `amount` as data.\n    ///\n    /// # Atomicity Guarantee\n    /// All validation is performed before any external calls to the USDC token contract.\n    /// This ensures that if any validation fails, no state changes or transfers occur.\n    ///\n    /// # Vector Size Policy\n    /// The maximum number of payments in a single batch is limited by Soroban's\n    /// transaction budget and footprint limits. Recommended maximum: 100 payments per batch.\n    /// For larger distributions, split into multiple transactions.\n    ///\n    /// # Examples\n    /// ```ignore\n    /// let payments = vec![\n    ///     (developer1, 1000),\n    ///     (developer2, 2000),\n    ///     (developer3, 1500),\n    /// ];\n    /// pool.batch_distribute(\u0026admin, \u0026payments);\n    /// ```\n    pub fn batch_distribute(env: Env, caller: Address, payments: Vec\u003c(Address, i128)\u003e) {\n        // Phase 0: Authorization\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"{}\", ERR_UNAUTHORIZED);\n        }\n\n        let n = payments.len();\n        if n == 0 {\n            panic!(\"batch_distribute requires at least one payment\");\n        }\n        if n \u003e MAX_BATCH_SIZE {\n            panic!(\"batch too large\");\n        }\n\n        let mut total_amount: i128 = 0;\n        for payment in payments.iter() {\n            let (_, amount) = payment;\n\n            // Validate each amount is strictly positive\n            if amount \u003c= 0 {\n                panic!(\"{}\", ERR_AMOUNT_NOT_POSITIVE);\n            }\n            total_amount = total_amount\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"total overflow\"));\n        }\n\n        // Phase 2: Balance Check\n        // Query the USDC token contract for current balance\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(ERR_NOT_INITIALIZED);\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n        let contract_address = env.current_contract_address();\n\n        if usdc.balance(\u0026contract_address) \u003c total_amount {\n            panic!(\"{}\", ERR_INSUFFICIENT_BALANCE);\n        }\n\n        // Phase 3: Execution\n        // All validation passed - now perform the transfers\n        // Each transfer is atomic; if any fails, the entire transaction reverts\n        for payment in payments.iter() {\n            let (to, amount) = payment;\n            Self::validate_recipient(\u0026to, \u0026contract_address);\n            usdc.transfer(\u0026contract_address, \u0026to, \u0026amount);\n\n            // Emit event for this leg of the batch\n            env.events()\n                .publish((Symbol::new(\u0026env, \"batch_distribute\"), to), amount);\n        }\n    }\n\n    /// Return this contract's USDC balance (for testing and dashboards).\n    ///\n    /// # Arguments\n    /// * `env` - The environment running the contract.\n    ///\n    /// # Returns\n    /// The balance of the contract in USDC base units.\n    ///\n    /// # Panics\n    /// * If the revenue pool has not been initialized.\n    pub fn balance(env: Env) -\u003e i128 {\n        let usdc_address: Address = env\n            .storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, USDC_KEY))\n            .expect(\"revenue pool not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_address);\n        usdc.balance(\u0026env.current_contract_address())\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_balance;\n","traces":[{"line":46,"address":[10920988,10919520,10920778],"length":1,"stats":{"Line":8}},{"line":47,"address":[10919555],"length":1,"stats":{"Line":1}},{"line":48,"address":[10919644],"length":1,"stats":{"Line":1}},{"line":49,"address":[10920871],"length":1,"stats":{"Line":1}},{"line":51,"address":[10919778],"length":1,"stats":{"Line":4}},{"line":52,"address":[10920853,10919823],"length":1,"stats":{"Line":2}},{"line":54,"address":[10919816,10919855],"length":1,"stats":{"Line":4}},{"line":55,"address":[10919994],"length":1,"stats":{"Line":1}},{"line":56,"address":[10920784],"length":1,"stats":{"Line":1}},{"line":58,"address":[10920149],"length":1,"stats":{"Line":4}},{"line":59,"address":[10920276],"length":1,"stats":{"Line":1}},{"line":61,"address":[10920411],"length":1,"stats":{"Line":4}},{"line":62,"address":[10920423],"length":1,"stats":{"Line":1}},{"line":75,"address":[10922237,10921856],"length":1,"stats":{"Line":4}},{"line":76,"address":[10921882],"length":1,"stats":{"Line":1}},{"line":78,"address":[10922079,10921992],"length":1,"stats":{"Line":8}},{"line":105,"address":[10915821,10915440],"length":1,"stats":{"Line":1}},{"line":106,"address":[10915466],"length":1,"stats":{"Line":1}},{"line":108,"address":[10915576,10915663],"length":1,"stats":{"Line":3}},{"line":112,"address":[10923326,10923236,10922256],"length":1,"stats":{"Line":2}},{"line":113,"address":[10922291],"length":1,"stats":{"Line":2}},{"line":114,"address":[10922377],"length":1,"stats":{"Line":1}},{"line":115,"address":[10922476,10922414],"length":1,"stats":{"Line":3}},{"line":116,"address":[10923252,10922502],"length":1,"stats":{"Line":2}},{"line":118,"address":[10922495,10922534],"length":1,"stats":{"Line":3}},{"line":119,"address":[10922673],"length":1,"stats":{"Line":2}},{"line":121,"address":[10923107,10922805],"length":1,"stats":{"Line":2}},{"line":122,"address":[10922817,10922897],"length":1,"stats":{"Line":3}},{"line":123,"address":[10923040],"length":1,"stats":{"Line":2}},{"line":139,"address":[10915337,10915395,10914192],"length":1,"stats":{"Line":3}},{"line":140,"address":[10914222],"length":1,"stats":{"Line":2}},{"line":141,"address":[10914292],"length":1,"stats":{"Line":2}},{"line":143,"address":[10914420],"length":1,"stats":{"Line":2}},{"line":146,"address":[10914635],"length":1,"stats":{"Line":1}},{"line":147,"address":[10915353,10914704],"length":1,"stats":{"Line":2}},{"line":150,"address":[10914673,10914757],"length":1,"stats":{"Line":3}},{"line":151,"address":[10914832],"length":1,"stats":{"Line":1}},{"line":153,"address":[10914959],"length":1,"stats":{"Line":2}},{"line":154,"address":[10914971],"length":1,"stats":{"Line":2}},{"line":179,"address":[10916456,10916523,10915840],"length":1,"stats":{"Line":2}},{"line":180,"address":[10915907],"length":1,"stats":{"Line":1}},{"line":181,"address":[10915985],"length":1,"stats":{"Line":3}},{"line":182,"address":[10916076,10916014],"length":1,"stats":{"Line":2}},{"line":183,"address":[10916471,10916102],"length":1,"stats":{"Line":2}},{"line":185,"address":[10916095,10916371],"length":1,"stats":{"Line":3}},{"line":186,"address":[10916138,10916232],"length":1,"stats":{"Line":3}},{"line":191,"address":[10919280],"length":1,"stats":{"Line":1}},{"line":194,"address":[10919294],"length":1,"stats":{"Line":1}},{"line":195,"address":[10919319],"length":1,"stats":{"Line":1}},{"line":217,"address":[10914130,10912592,10914170],"length":1,"stats":{"Line":2}},{"line":218,"address":[10912632],"length":1,"stats":{"Line":1}},{"line":219,"address":[10912710],"length":1,"stats":{"Line":1}},{"line":220,"address":[10912739,10912801],"length":1,"stats":{"Line":3}},{"line":221,"address":[10912829],"length":1,"stats":{"Line":0}},{"line":223,"address":[10912807],"length":1,"stats":{"Line":3}},{"line":224,"address":[10912873],"length":1,"stats":{"Line":1}},{"line":230,"address":[10912973,10913069],"length":1,"stats":{"Line":3}},{"line":231,"address":[10913076,10913004,10912924],"length":1,"stats":{"Line":0}},{"line":232,"address":[10913347],"length":1,"stats":{"Line":1}},{"line":234,"address":[10913379],"length":1,"stats":{"Line":2}},{"line":235,"address":[10913452],"length":1,"stats":{"Line":1}},{"line":237,"address":[10913505],"length":1,"stats":{"Line":2}},{"line":238,"address":[10962945],"length":1,"stats":{"Line":0}},{"line":244,"address":[10913562],"length":1,"stats":{"Line":1}},{"line":245,"address":[10913664],"length":1,"stats":{"Line":1}},{"line":248,"address":[10913632],"length":1,"stats":{"Line":2}},{"line":249,"address":[10913701,10913932],"length":1,"stats":{"Line":4}},{"line":250,"address":[10913713,10913958],"length":1,"stats":{"Line":4}},{"line":299,"address":[10916544,10918864,10919156],"length":1,"stats":{"Line":5}},{"line":301,"address":[10916579],"length":1,"stats":{"Line":1}},{"line":302,"address":[10916648],"length":1,"stats":{"Line":1}},{"line":303,"address":[10916742,10916680],"length":1,"stats":{"Line":5}},{"line":304,"address":[10916764],"length":1,"stats":{"Line":1}},{"line":307,"address":[10916792,10916753],"length":1,"stats":{"Line":5}},{"line":308,"address":[10916799],"length":1,"stats":{"Line":4}},{"line":309,"address":[10916815,10919135],"length":1,"stats":{"Line":2}},{"line":311,"address":[10916808],"length":1,"stats":{"Line":1}},{"line":312,"address":[10919104,10916891],"length":1,"stats":{"Line":2}},{"line":315,"address":[10916852],"length":1,"stats":{"Line":3}},{"line":316,"address":[10916939,10917035,10916884],"length":1,"stats":{"Line":5}},{"line":317,"address":[10917126],"length":1,"stats":{"Line":3}},{"line":320,"address":[10917168],"length":1,"stats":{"Line":1}},{"line":321,"address":[10918935],"length":1,"stats":{"Line":1}},{"line":323,"address":[10918996,10918904,10919060],"length":1,"stats":{"Line":8}},{"line":324,"address":[10918928],"length":1,"stats":{"Line":3}},{"line":325,"address":[10919028],"length":1,"stats":{"Line":1}},{"line":333,"address":[10917298,10917394],"length":1,"stats":{"Line":3}},{"line":334,"address":[10917249,10917401,10917329],"length":1,"stats":{"Line":0}},{"line":335,"address":[10917672],"length":1,"stats":{"Line":1}},{"line":336,"address":[10917704],"length":1,"stats":{"Line":2}},{"line":338,"address":[10917764,10917852],"length":1,"stats":{"Line":3}},{"line":339,"address":[10917898],"length":1,"stats":{"Line":1}},{"line":345,"address":[10918034,10917891,10918859,10917938],"length":1,"stats":{"Line":8}},{"line":346,"address":[10918129],"length":1,"stats":{"Line":1}},{"line":347,"address":[10918233],"length":1,"stats":{"Line":1}},{"line":348,"address":[10918498],"length":1,"stats":{"Line":1}},{"line":351,"address":[10918554,10918793],"length":1,"stats":{"Line":3}},{"line":352,"address":[10918566,10918825],"length":1,"stats":{"Line":3}},{"line":366,"address":[10921832,10921008],"length":1,"stats":{"Line":1}},{"line":370,"address":[10921236,10921149],"length":1,"stats":{"Line":2}},{"line":372,"address":[10921499],"length":1,"stats":{"Line":1}},{"line":373,"address":[10921528,10921588],"length":1,"stats":{"Line":2}}],"covered":98,"coverable":102},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","revenue_pool","src","test.rs"],"content":"extern crate std;\n\nuse super::*;\nuse soroban_sdk::testutils::{Address as _, Events as _};\nuse soroban_sdk::token;\nuse soroban_sdk::TryFromVal;\nuse soroban_sdk::{Address, Env, IntoVal, Symbol, Vec};\n\nfn create_usdc\u003c'a\u003e(\n    env: \u0026'a Env,\n    admin: \u0026Address,\n) -\u003e (Address, token::Client\u003c'a\u003e, token::StellarAssetClient\u003c'a\u003e) {\n    let contract_address = env.register_stellar_asset_contract_v2(admin.clone());\n    let address = contract_address.address();\n    let client = token::Client::new(env, \u0026address);\n    let admin_client = token::StellarAssetClient::new(env, \u0026address);\n    (address, client, admin_client)\n}\n\nfn create_pool(env: \u0026Env) -\u003e (Address, RevenuePoolClient\u003c'_\u003e) {\n    let address = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(env, \u0026address);\n    (address, client)\n}\n\nfn fund_pool(usdc_admin_client: \u0026token::StellarAssetClient, pool_address: \u0026Address, amount: i128) {\n    usdc_admin_client.mint(pool_address, \u0026amount);\n}\n\n#[test]\nfn init_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_pool_addr, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    assert_eq!(client.get_admin(), admin);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn init_emits_event() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    let events = env.events().all();\n    let init_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026init_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"init\"));\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool already initialized\")]\nfn init_double_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.init(\u0026admin, \u0026usdc);\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool already initialized\")]\nfn init_double_different_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let other_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n    let (usdc2, _, _) = create_usdc(\u0026env, \u0026other_admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.init(\u0026other_admin, \u0026usdc2);\n}\n\n#[test]\n#[should_panic(expected = \"invalid config: usdc_token cannot be the contract itself\")]\nfn init_usdc_token_is_contract_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n\n    // Passing the contract's own address as usdc_token should be rejected.\n    client.init(\u0026admin, \u0026pool_addr);\n}\n\n#[test]\n#[should_panic(expected = \"invalid config: usdc_token cannot be the admin address\")]\nfn init_usdc_token_is_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n\n    // Passing the admin address as usdc_token should be rejected.\n    client.init(\u0026admin, \u0026admin);\n}\n\n#[test]\nfn distribute_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1_000);\n    client.distribute(\u0026admin, \u0026developer, \u0026400);\n\n    assert_eq!(usdc_client.balance(\u0026pool_addr), 600);\n    assert_eq!(usdc_client.balance(\u0026developer), 400);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn distribute_zero_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.distribute(\u0026admin, \u0026developer, \u00260);\n}\n\n#[test]\n#[should_panic(expected = \"insufficient USDC balance\")]\nfn distribute_excess_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n    client.distribute(\u0026admin, \u0026developer, \u0026101);\n}\n\n#[test]\nfn set_admin_two_step_transfers_control() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 300);\n\n    client.set_admin(\u0026admin, \u0026new_admin);\n    assert_eq!(client.get_admin(), admin);\n\n    client.claim_admin(\u0026new_admin);\n    assert_eq!(client.get_admin(), new_admin);\n\n    client.distribute(\u0026new_admin, \u0026developer, \u0026100);\n    assert_eq!(usdc_client.balance(\u0026developer), 100);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_admin_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026attacker, \u0026new_admin);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not pending admin\")]\nfn claim_admin_wrong_address_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026new_admin);\n    client.claim_admin(\u0026attacker);\n}\n\n#[test]\nfn admin_transfer_emits_events() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    // Step 1 event\n    client.set_admin(\u0026admin, \u0026new_admin);\n    let events = env.events().all();\n    let transfer_started = events.last().unwrap();\n\n    // FIX: Convert Val to Symbol for comparison\n    let event_name = Symbol::try_from_val(\u0026env, \u0026transfer_started.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"admin_transfer_started\"));\n\n    // Step 2 event\n    client.claim_admin(\u0026new_admin);\n    let events = env.events().all();\n    let transfer_completed = events.last().unwrap();\n\n    // FIX: Convert Val to Symbol for comparison\n    let event_name_comp =\n        Symbol::try_from_val(\u0026env, \u0026transfer_completed.1.get(0).unwrap()).unwrap();\n    assert_eq!(\n        event_name_comp,\n        Symbol::new(\u0026env, \"admin_transfer_completed\")\n    );\n}\n\n#[test]\nfn receive_payment_emits_event() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    let events = env.events().all();\n    let receive_payment_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026receive_payment_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"receive_payment\"));\n\n    let amount_and_source: (i128, bool) =\n        \u003c(i128, bool)\u003e::try_from_val(\u0026env, \u0026receive_payment_event.2).unwrap();\n    assert_eq!(amount_and_source, (250, true));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn receive_payment_non_admin_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026attacker, \u0026250, \u0026true);\n}\n\n#[test]\nfn receive_payment_is_event_only_and_does_not_move_tokens() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 500);\n\n    let before_pool = usdc_client.balance(\u0026pool_addr);\n    let before_developer = usdc_client.balance(\u0026developer);\n\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    assert_eq!(usdc_client.balance(\u0026pool_addr), before_pool);\n    assert_eq!(usdc_client.balance(\u0026developer), before_developer);\n}\n\n// ---------------------------------------------------------------------------\n// Batch distribute tests - Comprehensive coverage\n// ---------------------------------------------------------------------------\n\n#[test]\nfn batch_distribute_success() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 300_i128));\n    payments.push_back((dev2.clone(), 200_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    assert_eq!(usdc_client.balance(\u0026dev1), 300);\n    assert_eq!(usdc_client.balance(\u0026dev2), 200);\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn batch_distribute_success_events() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 300_i128));\n    payments.push_back((dev2.clone(), 200_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    let events = env.events().all();\n    assert!(events.len() \u003e= 4);\n\n    for i in 0..events.len() {\n        let (_, topics, data) = events.get(i).unwrap();\n        let topic_0 = topics.get(0).unwrap();\n        if let Ok(event_name) = Symbol::try_from_val(\u0026env, \u0026topic_0) {\n            if event_name == Symbol::new(\u0026env, \"batch_distribute\") {\n                let value: i128 = i128::try_from_val(\u0026env, \u0026data).unwrap();\n                assert!(value == 300 || value == 200);\n            }\n        }\n    }\n}\n\n#[test]\nfn receive_payment_emits_event_for_admin() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u0026250, \u0026true);\n\n    let events = env.events().all();\n    let receive_event = events.last().unwrap();\n    let event_name = Symbol::try_from_val(\u0026env, \u0026receive_event.1.get(0).unwrap()).unwrap();\n    assert_eq!(event_name, Symbol::new(\u0026env, \"receive_payment\"));\n\n    let caller: Address = Address::try_from_val(\u0026env, \u0026receive_event.1.get(1).unwrap()).unwrap();\n    assert_eq!(caller, admin);\n\n    let (amount, from_vault): (i128, bool) = receive_event.2.into_val(\u0026env);\n    assert_eq!(amount, 250);\n    assert!(from_vault);\n}\n\n#[test]\n#[should_panic(expected = \"no pending admin\")]\nfn claim_admin_without_pending_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let candidate = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.claim_admin(\u0026candidate);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not pending admin\")]\nfn claim_admin_wrong_caller_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let pending_admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026pending_admin);\n    client.claim_admin(\u0026attacker);\n}\n\n#[test]\n#[should_panic(expected = \"invalid recipient: cannot distribute to the contract itself\")]\nfn distribute_to_self_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n    client.distribute(\u0026admin, \u0026pool_addr, \u002650);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn batch_distribute_zero_amount_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc_address, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev, 0));\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n\n// ---------------------------------------------------------------------------\n// Event schema tests (Issue #256)\n// Each test below pins the exact topic/data layout documented in EVENT_SCHEMA.md\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_event_topics_and_data() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    let events = env.events().all();\n    let ev = events.last().unwrap();\n\n    // topic 0 = \"init\"\n    let t0 = Symbol::try_from_val(\u0026env, \u0026ev.1.get(0).unwrap()).unwrap();\n    assert_eq!(t0, Symbol::new(\u0026env, \"init\"));\n\n    // topic 1 = admin address\n    let t1 = Address::try_from_val(\u0026env, \u0026ev.1.get(1).unwrap()).unwrap();\n    assert_eq!(t1, admin);\n\n    // data = usdc_token address\n    let data = Address::try_from_val(\u0026env, \u0026ev.2).unwrap();\n    assert_eq!(data, usdc);\n}\n\n#[test]\nfn admin_transfer_started_event_topics_and_data() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026new_admin);\n\n    let events = env.events().all();\n    let ev = events.last().unwrap();\n\n    // topic 0 = \"admin_transfer_started\"\n    let t0 = Symbol::try_from_val(\u0026env, \u0026ev.1.get(0).unwrap()).unwrap();\n    assert_eq!(t0, Symbol::new(\u0026env, \"admin_transfer_started\"));\n\n    // topic 1 = current admin\n    let t1 = Address::try_from_val(\u0026env, \u0026ev.1.get(1).unwrap()).unwrap();\n    assert_eq!(t1, admin);\n\n    // data = pending admin\n    let data = Address::try_from_val(\u0026env, \u0026ev.2).unwrap();\n    assert_eq!(data, new_admin);\n}\n\n#[test]\nfn admin_transfer_completed_event_topics_and_data() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.set_admin(\u0026admin, \u0026new_admin);\n    client.claim_admin(\u0026new_admin);\n\n    let events = env.events().all();\n    let ev = events.last().unwrap();\n\n    // topic 0 = \"admin_transfer_completed\"\n    let t0 = Symbol::try_from_val(\u0026env, \u0026ev.1.get(0).unwrap()).unwrap();\n    assert_eq!(t0, Symbol::new(\u0026env, \"admin_transfer_completed\"));\n\n    // topic 1 = new admin\n    let t1 = Address::try_from_val(\u0026env, \u0026ev.1.get(1).unwrap()).unwrap();\n    assert_eq!(t1, new_admin);\n\n    // data = () empty\n    let _: () = ev.2.into_val(\u0026env);\n}\n\n#[test]\nfn receive_payment_event_from_vault_true() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u00265_000_000, \u0026true);\n\n    let events = env.events().all();\n    let ev = events.last().unwrap();\n\n    // topic 0 = \"receive_payment\"\n    let t0 = Symbol::try_from_val(\u0026env, \u0026ev.1.get(0).unwrap()).unwrap();\n    assert_eq!(t0, Symbol::new(\u0026env, \"receive_payment\"));\n\n    // topic 1 = caller (admin)\n    let t1 = Address::try_from_val(\u0026env, \u0026ev.1.get(1).unwrap()).unwrap();\n    assert_eq!(t1, admin);\n\n    // data = (amount, from_vault)\n    let (amount, from_vault): (i128, bool) = ev.2.into_val(\u0026env);\n    assert_eq!(amount, 5_000_000);\n    assert!(from_vault);\n}\n\n#[test]\nfn receive_payment_event_from_vault_false() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    client.receive_payment(\u0026admin, \u00261_000_000, \u0026false);\n\n    let events = env.events().all();\n    let ev = events.last().unwrap();\n\n    let (amount, from_vault): (i128, bool) = ev.2.into_val(\u0026env);\n    assert_eq!(amount, 1_000_000);\n    assert!(!from_vault);\n}\n\n#[test]\nfn distribute_event_topics_and_data() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1_000_000);\n    client.distribute(\u0026admin, \u0026developer, \u00261_000_000);\n\n    let events = env.events().all();\n    let ev = events.last().unwrap();\n\n    // topic 0 = \"distribute\"\n    let t0 = Symbol::try_from_val(\u0026env, \u0026ev.1.get(0).unwrap()).unwrap();\n    assert_eq!(t0, Symbol::new(\u0026env, \"distribute\"));\n\n    // topic 1 = recipient\n    let t1 = Address::try_from_val(\u0026env, \u0026ev.1.get(1).unwrap()).unwrap();\n    assert_eq!(t1, developer);\n\n    // data = amount\n    let amount: i128 = ev.2.into_val(\u0026env);\n    assert_eq!(amount, 1_000_000);\n}\n\n#[test]\nfn batch_distribute_event_topics_and_data() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let dev3 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 3_500_000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 1_000_000_i128));\n    payments.push_back((dev2.clone(), 2_000_000_i128));\n    payments.push_back((dev3.clone(), 500_000_i128));\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    let all_events = env.events().all();\n    let batch_events: std::vec::Vec\u003c_\u003e = all_events\n        .iter()\n        .filter(|e| {\n            e.1.get(0)\n                .and_then(|v| Symbol::try_from_val(\u0026env, \u0026v).ok())\n                .map(|s| s == Symbol::new(\u0026env, \"batch_distribute\"))\n                .unwrap_or(false)\n        })\n        .collect();\n\n    // 3 payments → 3 batch_distribute events\n    assert_eq!(batch_events.len(), 3);\n\n    // verify each event has correct topic 0 and a positive amount\n    for ev in batch_events.iter() {\n        let t0 = Symbol::try_from_val(\u0026env, \u0026ev.1.get(0).unwrap()).unwrap();\n        assert_eq!(t0, Symbol::new(\u0026env, \"batch_distribute\"));\n        let amount: i128 = ev.2.into_val(\u0026env);\n        assert!(amount \u003e 0);\n    }\n}\n\n#[test]\nfn batch_distribute_is_atomic_all_or_nothing() {\n    // If any payment fails the entire batch reverts — no events emitted.\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev1 = Address::generate(\u0026env);\n    let dev2 = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev1.clone(), 60_i128));\n    payments.push_back((dev2.clone(), 60_i128)); // total 120 \u003e balance 100\n\n    let result = client.try_batch_distribute(\u0026admin, \u0026payments);\n    assert!(result.is_err());\n\n    // balance unchanged\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// get_admin() and get_usdc_token() getter tests  (Issue #265)\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_admin_returns_correct_address() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    assert_eq!(client.get_admin(), admin);\n}\n\n#[test]\nfn get_admin_reflects_updated_admin_after_transfer() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    assert_eq!(client.get_admin(), admin);\n\n    // Pending phase: get_admin() still returns old admin\n    client.set_admin(\u0026admin, \u0026new_admin);\n    assert_eq!(client.get_admin(), admin);\n\n    // After claim: admin updated\n    client.claim_admin(\u0026new_admin);\n    assert_eq!(client.get_admin(), new_admin);\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool not initialized\")]\nfn get_admin_before_init_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let (_, client) = create_pool(\u0026env);\n\n    client.get_admin();\n}\n\n#[test]\nfn get_usdc_token_returns_correct_address() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    assert_eq!(client.get_usdc_token(), usdc);\n}\n\n#[test]\nfn get_usdc_token_is_immutable_after_init() {\n    // The USDC token address must never change after initialization —\n    // this test guards against accidental mutation.\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc);\n    let token_before = client.get_usdc_token();\n\n    // Admin transfer must not affect the token address\n    client.set_admin(\u0026admin, \u0026new_admin);\n    client.claim_admin(\u0026new_admin);\n\n    assert_eq!(client.get_usdc_token(), token_before);\n}\n\n#[test]\n#[should_panic(expected = \"revenue pool not initialized\")]\nfn get_usdc_token_before_init_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let (_, client) = create_pool(\u0026env);\n\n    client.get_usdc_token();\n}\n\n// ---------------------------------------------------------------------------\n// batch_distribute length-cap tests (resource exhaustion prevention)\n// ---------------------------------------------------------------------------\n\n#[test]\n#[should_panic(expected = \"batch_distribute requires at least one payment\")]\nfn batch_distribute_empty_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc_address, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n\n    let payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n\n#[test]\n#[should_panic(expected = \"batch too large\")]\nfn batch_distribute_too_large_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 100_000);\n\n    // Build a batch of MAX_BATCH_SIZE + 1 entries\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    for _ in 0..=crate::MAX_BATCH_SIZE {\n        payments.push_back((Address::generate(\u0026env), 1_i128));\n    }\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n\n#[test]\nfn batch_distribute_at_max_size_succeeds() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    let amount_per = 10_i128;\n    let total = amount_per * (crate::MAX_BATCH_SIZE as i128);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, total);\n\n    // Build a batch of exactly MAX_BATCH_SIZE entries\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    for _ in 0..crate::MAX_BATCH_SIZE {\n        payments.push_back((Address::generate(\u0026env), amount_per));\n    }\n    client.batch_distribute(\u0026admin, \u0026payments);\n\n    // Pool should be drained\n    assert_eq!(usdc_client.balance(\u0026pool_addr), 0);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn batch_distribute_negative_amount_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (_, client) = create_pool(\u0026env);\n    let (usdc_address, _, _) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev, -100));\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn batch_distribute_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((dev, 100));\n    client.batch_distribute(\u0026attacker, \u0026payments);\n}\n\n#[test]\n#[should_panic(expected = \"invalid recipient: cannot distribute to the contract itself\")]\nfn batch_distribute_self_recipient_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let admin = Address::generate(\u0026env);\n    let (pool_addr, client) = create_pool(\u0026env);\n    let (usdc_address, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    client.init(\u0026admin, \u0026usdc_address);\n    fund_pool(\u0026usdc_admin, \u0026pool_addr, 1000);\n\n    let mut payments: Vec\u003c(Address, i128)\u003e = Vec::new(\u0026env);\n    payments.push_back((pool_addr, 100));\n    client.batch_distribute(\u0026admin, \u0026payments);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","revenue_pool","src","test_balance.rs"],"content":"use crate::{RevenuePool, RevenuePoolClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"revenue pool not initialized\")]\nfn test_balance_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(\u0026env, \u0026addr);\n\n    // Calling balance before init should panic\n    client.balance();\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn test_receive_payment_unauthorized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n\n    let admin = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n\n    let addr = env.register(RevenuePool, ());\n    let client = RevenuePoolClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026admin, \u0026usdc);\n\n    // Call from unauthorized address should panic\n    client.receive_payment(\u0026attacker, \u0026100, \u0026false);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","settlement","src","lib.rs"],"content":"#![no_std]\n\nuse soroban_sdk::{contract, contractimpl, contracttype, Address, Env, Map, Symbol, Vec};\n\n/// Developer balance record in settlement contract\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct DeveloperBalance {\n    pub address: Address,\n    pub balance: i128,\n}\n\n/// Global pool balance tracking.\n///\n/// `last_updated` is set to `env.ledger().timestamp()` on every\n/// `receive_payment` call that credits the pool (`to_pool = true`).\n/// It is also set at `init` time. It is **not** updated when payments\n/// are routed to individual developer balances.\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct GlobalPool {\n    pub total_balance: i128,\n    /// Ledger timestamp of the last pool credit. Useful for analytics\n    /// and staleness checks.\n    pub last_updated: u64,\n}\n\n/// Payment received event\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct PaymentReceivedEvent {\n    pub from_vault: Address,\n    pub amount: i128,\n    pub to_pool: bool, // true if credited to global pool, false if to specific developer\n    pub developer: Option\u003cAddress\u003e, // developer address if credited to specific developer\n}\n\n/// Balance credited event\n#[contracttype]\n#[derive(Clone, Debug, PartialEq)]\npub struct BalanceCreditedEvent {\n    pub developer: Address,\n    pub amount: i128,\n    pub new_balance: i128,\n}\n\n/// Storage key for the registered vault address.\nconst VAULT_KEY: \u0026str = \"vault\";\n/// Storage key for the admin address.\nconst ADMIN_KEY: \u0026str = \"admin\";\nconst PENDING_ADMIN_KEY: \u0026str = \"pending_admin\";\nconst DEVELOPER_BALANCES_KEY: \u0026str = \"developer_balances\";\n/// Storage key for the global pool state.\nconst GLOBAL_POOL_KEY: \u0026str = \"global_pool\";\n\n#[contract]\npub struct CalloraSettlement;\n\n#[contractimpl]\nimpl CalloraSettlement {\n    /// Initialize the settlement contract with admin and vault address.\n    ///\n    /// Persists admin + registered vault, initializes an empty developer balance map,\n    /// and stores a timestamped global pool.\n    ///\n    /// Storage keys written:\n    /// - `admin`\n    /// - `vault`\n    /// - `developer_balances`\n    /// - `global_pool`\n    ///\n    /// # Panics\n    /// Panics if the contract is already initialized.\n    pub fn init(env: Env, admin: Address, vault_address: Address) {\n        let inst = env.storage().instance();\n        if inst.has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract already initialized\");\n        }\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026admin);\n        inst.set(\u0026Symbol::new(\u0026env, VAULT_KEY), \u0026vault_address);\n        let empty_balances: Map\u003cAddress, i128\u003e = Map::new(\u0026env);\n        inst.set(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY), \u0026empty_balances);\n        let global_pool = GlobalPool {\n            total_balance: 0,\n            last_updated: env.ledger().timestamp(),\n        };\n        inst.set(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY), \u0026global_pool);\n    }\n\n    /// Receive payment from vault and credit to pool or developer balance.\n    ///\n    /// # Arguments\n    /// * `caller` - Must be authorized vault address or admin\n    /// * `amount` - Payment amount in USDC micro-units; must be \u003e 0\n    /// * `to_pool` - If true, credit global pool; if false, credit a specific developer\n    /// * `developer` - Required when `to_pool=false`; ignored when `to_pool=true`\n    ///\n    /// # Access Control\n    /// Only the registered vault address or admin can call this function.\n    ///\n    /// # Map Operations\n    /// When crediting to developer balance:\n    /// - Performs O(1) lookup to retrieve current balance from developer map\n    /// - Updates the specific developer's balance\n    /// - Stores updated map back to contract state\n    /// - Map iteration is NOT performed; only point lookup/update\n    ///\n    /// # Events\n    /// Always emits `payment_received`. Also emits `balance_credited` when `to_pool=false`.\n    pub fn receive_payment(\n        env: Env,\n        caller: Address,\n        amount: i128,\n        to_pool: bool,\n        developer: Option\u003cAddress\u003e,\n    ) {\n        caller.require_auth();\n        Self::require_authorized_caller(env.clone(), caller.clone());\n        if amount \u003c= 0 {\n            panic!(\"amount must be positive\");\n        }\n        let inst = env.storage().instance();\n        if to_pool {\n            if developer.is_some() {\n                panic!(\"developer address must be None when to_pool=true\");\n            }\n            let mut global_pool = Self::get_global_pool(env.clone());\n            global_pool.total_balance = global_pool\n                .total_balance\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"pool balance overflow\"));\n            global_pool.last_updated = env.ledger().timestamp();\n            inst.set(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY), \u0026global_pool);\n            env.events().publish(\n                (Symbol::new(\u0026env, \"payment_received\"), caller.clone()),\n                PaymentReceivedEvent {\n                    from_vault: caller.clone(),\n                    amount,\n                    to_pool: true,\n                    developer: None,\n                },\n            );\n        } else {\n            let dev_address = developer\n                .unwrap_or_else(|| panic!(\"developer address required when to_pool=false\"));\n            let mut balances: Map\u003cAddress, i128\u003e = inst\n                .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n                .unwrap_or_else(|| Map::new(\u0026env));\n            let current_balance = balances.get(dev_address.clone()).unwrap_or(0);\n            let new_balance = current_balance\n                .checked_add(amount)\n                .unwrap_or_else(|| panic!(\"developer balance overflow\"));\n            balances.set(dev_address.clone(), new_balance);\n            inst.set(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY), \u0026balances);\n            env.events().publish(\n                (Symbol::new(\u0026env, \"payment_received\"), caller.clone()),\n                PaymentReceivedEvent {\n                    from_vault: caller.clone(),\n                    amount,\n                    to_pool: false,\n                    developer: Some(dev_address.clone()),\n                },\n            );\n            env.events().publish(\n                (Symbol::new(\u0026env, \"balance_credited\"), dev_address.clone()),\n                BalanceCreditedEvent {\n                    developer: dev_address,\n                    amount,\n                    new_balance,\n                },\n            );\n        }\n    }\n\n    /// Get current admin address\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, ADMIN_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get registered vault address\n    pub fn get_vault(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, VAULT_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get global pool information\n    pub fn get_global_pool(env: Env) -\u003e GlobalPool {\n        env.storage()\n            .instance()\n            .get(\u0026Symbol::new(\u0026env, GLOBAL_POOL_KEY))\n            .unwrap_or_else(|| panic!(\"settlement contract not initialized\"))\n    }\n\n    /// Get developer balance\n    ///\n    /// Performs a direct O(1) map lookup for the specified developer's balance.\n    /// This is the preferred method for querying individual balances as it does not iterate the map.\n    ///\n    /// # Arguments\n    /// * `developer` - Developer address to query\n    ///\n    /// # Returns\n    /// Balance in USDC micro-units, or 0 if no balance recorded\n    ///\n    /// # Safety\n    /// Safe for all use cases; does not depend on map iteration order.\n    pub fn get_developer_balance(env: Env, developer: Address) -\u003e i128 {\n        if !env.storage().instance().has(\u0026Symbol::new(\u0026env, ADMIN_KEY)) {\n            panic!(\"settlement contract not initialized\");\n        }\n        let inst = env.storage().instance();\n        let balances: Map\u003cAddress, i128\u003e = inst\n            .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n            .unwrap_or_else(|| Map::new(\u0026env));\n        balances.get(developer).unwrap_or(0)\n    }\n\n    /// Get all developer balances (admin only)\n    ///\n    /// **CRITICAL**: Map iteration order is **NOT stable** and should not be relied upon.\n    /// Use this function only for administrative queries or reporting purposes.\n    /// For production integrations with many developers (\u003e100), implement off-chain indexing\n    /// by listening to `BalanceCreditedEvent` and maintaining a local database.\n    ///\n    /// # Arguments\n    /// * `caller` - Must be the current admin address.\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Iteration Behavior\n    /// - **Small maps (\u003c 100 entries)**: Safe to iterate; yields current state but order is unstable\n    /// - **Large maps (\u003e 100 entries)**: Consider off-chain indexing to avoid excessive gas costs\n    /// - **Order guarantees**: NONE. Do not use for routing, prioritization, or deterministic selection.\n    ///\n    /// # Returns\n    /// Vec of DeveloperBalance records. Iteration order is unstable and may vary between calls.\n    ///\n    /// # Use Cases\n    /// ✅ Administrative dashboards and reporting\n    /// ✅ Audit compliance queries\n    /// ✅ Contract state verification\n    /// ❌ Automatic routing based on iteration order\n    /// ❌ Deterministic selection of developers\n    ///\n    /// # Performance\n    /// Gas cost scales with number of developers:\n    /// - 50 developers: ~500 gas\n    /// - 100 developers: ~1,000 gas\n    /// - 500 developers: ~5,000 gas (consider off-chain indexing)\n    pub fn get_all_developer_balances(env: Env, caller: Address) -\u003e Vec\u003cDeveloperBalance\u003e {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        let inst = env.storage().instance();\n        let balances: Map\u003cAddress, i128\u003e = inst\n            .get(\u0026Symbol::new(\u0026env, DEVELOPER_BALANCES_KEY))\n            .unwrap_or_else(|| Map::new(\u0026env));\n        let mut result = Vec::new(\u0026env);\n        for (address, balance) in balances.iter() {\n            result.push_back(DeveloperBalance { address, balance });\n        }\n        result\n    }\n\n    /// Nominate a new admin (admin only).\n    ///\n    /// # Arguments\n    /// * `caller` - Current admin address; must match stored admin\n    /// * `new_admin` - Address to nominate as new admin\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Security\n    /// This implements a two-step admin transfer process:\n    /// 1. Current admin calls `set_admin()` to nominate new admin\n    /// 2. Nominated admin must call `accept_admin()` to complete transfer\n    ///\n    /// This prevents accidental admin loss and ensures the new admin\n    /// has control of their private keys before gaining privileges.\n    ///\n    /// # Events\n    /// Emits `admin_nominated` event with current and new admin addresses.\n    ///\n    /// # Panics\n    /// Panics if caller is not the current admin.\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let current_admin = Self::get_admin(env.clone());\n        if caller != current_admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY), \u0026new_admin);\n\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"admin_nominated\"),\n                current_admin,\n                new_admin,\n            ),\n            (),\n        );\n    }\n\n    /// Accept the admin role (pending admin only).\n    ///\n    /// # Access Control\n    /// Only the nominated pending admin can call this function.\n    ///\n    /// # Security\n    /// This is the second step of the two-step admin transfer process.\n    /// The nominated admin must explicitly accept, proving control of\n    /// their private keys before gaining admin privileges.\n    ///\n    /// # Events\n    /// Emits `admin_accepted` event with old and new admin addresses.\n    ///\n    /// # Panics\n    /// Panics if there is no pending admin transfer (i.e., `set_admin()`\n    /// was not called first).\n    pub fn accept_admin(env: Env) {\n        let inst = env.storage().instance();\n        let pending: Address = inst\n            .get(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY))\n            .expect(\"no admin transfer pending\");\n        pending.require_auth();\n\n        let current = Self::get_admin(env.clone());\n        inst.set(\u0026Symbol::new(\u0026env, ADMIN_KEY), \u0026pending);\n        inst.remove(\u0026Symbol::new(\u0026env, PENDING_ADMIN_KEY));\n\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_accepted\"), current, pending), ());\n    }\n\n    /// Update vault address (admin only).\n    ///\n    /// # Arguments\n    /// * `caller` - Current admin address; must match stored admin\n    /// * `new_vault` - New vault contract address to register\n    ///\n    /// # Access Control\n    /// Only the current admin can call this function.\n    ///\n    /// # Security\n    /// The vault address controls which contract can send payments to\n    /// the settlement contract. Only trusted addresses should be set.\n    /// Changing the vault address immediately revokes access from the\n    /// old vault, so coordinate carefully during migrations.\n    ///\n    /// # Events\n    /// This function does not emit events. Monitor vault changes by\n    /// comparing the result of `get_vault()` across blocks.\n    ///\n    /// # Panics\n    /// Panics if caller is not the current admin.\n    pub fn set_vault(env: Env, caller: Address, new_vault: Address) {\n        caller.require_auth();\n        let current_admin = Self::get_admin(env.clone());\n        if caller != current_admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026Symbol::new(\u0026env, VAULT_KEY), \u0026new_vault);\n    }\n\n    /// Internal function to require authorized caller (vault or admin)\n    fn require_authorized_caller(env: Env, caller: Address) {\n        let vault = Self::get_vault(env.clone());\n        let admin = Self::get_admin(env.clone());\n        if caller != vault \u0026\u0026 caller != admin {\n            panic!(\"unauthorized: caller must be vault or admin\");\n        }\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_views;\n","traces":[{"line":74,"address":[11100698,11100763,11099488],"length":1,"stats":{"Line":9}},{"line":75,"address":[11099521,11099569],"length":1,"stats":{"Line":16}},{"line":76,"address":[11099690],"length":1,"stats":{"Line":8}},{"line":77,"address":[11100704],"length":1,"stats":{"Line":1}},{"line":79,"address":[11099842],"length":1,"stats":{"Line":8}},{"line":80,"address":[11099966],"length":1,"stats":{"Line":8}},{"line":81,"address":[11100098],"length":1,"stats":{"Line":8}},{"line":82,"address":[11100110,11100202],"length":1,"stats":{"Line":16}},{"line":85,"address":[11100282],"length":1,"stats":{"Line":8}},{"line":87,"address":[11100418],"length":1,"stats":{"Line":8}},{"line":110,"address":[11096388,11092608,11095082],"length":1,"stats":{"Line":5}},{"line":117,"address":[11092689],"length":1,"stats":{"Line":4}},{"line":118,"address":[11092802,11096347],"length":1,"stats":{"Line":4}},{"line":119,"address":[11092930],"length":1,"stats":{"Line":2}},{"line":120,"address":[11092962,11096329],"length":1,"stats":{"Line":2}},{"line":122,"address":[11092994,11092955],"length":1,"stats":{"Line":3}},{"line":123,"address":[11093135],"length":1,"stats":{"Line":2}},{"line":124,"address":[11095132,11093224],"length":1,"stats":{"Line":2}},{"line":125,"address":[11096299,11095158],"length":1,"stats":{"Line":2}},{"line":127,"address":[11095151,11095206],"length":1,"stats":{"Line":2}},{"line":128,"address":[11095331,11095229,11095260],"length":1,"stats":{"Line":3}},{"line":130,"address":[11095253],"length":1,"stats":{"Line":1}},{"line":131,"address":[11095292],"length":1,"stats":{"Line":1}},{"line":132,"address":[11095355],"length":1,"stats":{"Line":1}},{"line":133,"address":[11095467],"length":1,"stats":{"Line":1}},{"line":134,"address":[11095605,11096062],"length":1,"stats":{"Line":2}},{"line":135,"address":[11095705,11095617],"length":1,"stats":{"Line":2}},{"line":136,"address":[11095942],"length":1,"stats":{"Line":1}},{"line":137,"address":[11095870],"length":1,"stats":{"Line":1}},{"line":140,"address":[11095934],"length":1,"stats":{"Line":1}},{"line":144,"address":[11093146],"length":1,"stats":{"Line":1}},{"line":145,"address":[11093189,11093243],"length":1,"stats":{"Line":5}},{"line":147,"address":[11093251,11093347],"length":1,"stats":{"Line":3}},{"line":148,"address":[11033360,11033377],"length":1,"stats":{"Line":0}},{"line":149,"address":[11093505],"length":1,"stats":{"Line":1}},{"line":150,"address":[11093657,11093723],"length":1,"stats":{"Line":2}},{"line":151,"address":[11093650],"length":1,"stats":{"Line":1}},{"line":152,"address":[11093689],"length":1,"stats":{"Line":2}},{"line":153,"address":[11093755],"length":1,"stats":{"Line":1}},{"line":154,"address":[11093800],"length":1,"stats":{"Line":1}},{"line":155,"address":[11094499,11093938],"length":1,"stats":{"Line":5}},{"line":156,"address":[11093950,11094038],"length":1,"stats":{"Line":2}},{"line":157,"address":[11094379],"length":1,"stats":{"Line":2}},{"line":158,"address":[11094203],"length":1,"stats":{"Line":2}},{"line":161,"address":[11094267,11094331],"length":1,"stats":{"Line":2}},{"line":164,"address":[11094578,11095011],"length":1,"stats":{"Line":6}},{"line":165,"address":[11094681,11094590],"length":1,"stats":{"Line":6}},{"line":166,"address":[11094907],"length":1,"stats":{"Line":3}},{"line":167,"address":[11094851],"length":1,"stats":{"Line":3}},{"line":176,"address":[11100784,11101153],"length":1,"stats":{"Line":3}},{"line":177,"address":[11100810],"length":1,"stats":{"Line":3}},{"line":179,"address":[11101007,11100920],"length":1,"stats":{"Line":3}},{"line":180,"address":[11101060],"length":1,"stats":{"Line":3}},{"line":184,"address":[11101184,11101553],"length":1,"stats":{"Line":4}},{"line":185,"address":[11101210],"length":1,"stats":{"Line":2}},{"line":187,"address":[11101407,11101320],"length":1,"stats":{"Line":3}},{"line":188,"address":[11101460],"length":1,"stats":{"Line":3}},{"line":192,"address":[11092192,11092577],"length":1,"stats":{"Line":1}},{"line":193,"address":[11092222],"length":1,"stats":{"Line":1}},{"line":195,"address":[11092340,11092427],"length":1,"stats":{"Line":2}},{"line":196,"address":[11033265,11033264],"length":1,"stats":{"Line":3}},{"line":212,"address":[11097604,11097566,11096544],"length":1,"stats":{"Line":2}},{"line":213,"address":[11096973,11096636,11096567],"length":1,"stats":{"Line":4}},{"line":214,"address":[11096914],"length":1,"stats":{"Line":1}},{"line":216,"address":[11097018],"length":1,"stats":{"Line":1}},{"line":218,"address":[11097164],"length":1,"stats":{"Line":2}},{"line":219,"address":[11033505,11033488],"length":1,"stats":{"Line":0}},{"line":220,"address":[11097369],"length":1,"stats":{"Line":1}},{"line":256,"address":[11098208,11099371,11099407],"length":1,"stats":{"Line":2}},{"line":257,"address":[11098243],"length":1,"stats":{"Line":1}},{"line":258,"address":[11098305],"length":1,"stats":{"Line":1}},{"line":259,"address":[11098396,11098334],"length":1,"stats":{"Line":3}},{"line":260,"address":[11098422,11099387],"length":1,"stats":{"Line":2}},{"line":262,"address":[11098415,11098454],"length":1,"stats":{"Line":3}},{"line":264,"address":[11098593],"length":1,"stats":{"Line":1}},{"line":265,"address":[11033520,11033537],"length":1,"stats":{"Line":0}},{"line":266,"address":[11098806],"length":1,"stats":{"Line":2}},{"line":267,"address":[11098982,11098889,11098829],"length":1,"stats":{"Line":6}},{"line":268,"address":[11099366,11099093],"length":1,"stats":{"Line":3}},{"line":270,"address":[11099203],"length":1,"stats":{"Line":1}},{"line":295,"address":[11101584,11102601,11102691],"length":1,"stats":{"Line":4}},{"line":296,"address":[11101619],"length":1,"stats":{"Line":3}},{"line":297,"address":[11101705],"length":1,"stats":{"Line":3}},{"line":298,"address":[11101742,11101804],"length":1,"stats":{"Line":3}},{"line":299,"address":[11102617,11101830],"length":1,"stats":{"Line":2}},{"line":301,"address":[11101823],"length":1,"stats":{"Line":1}},{"line":303,"address":[11101889],"length":1,"stats":{"Line":0}},{"line":305,"address":[11102149,11102491],"length":1,"stats":{"Line":3}},{"line":307,"address":[11102161],"length":1,"stats":{"Line":1}},{"line":308,"address":[11102241],"length":1,"stats":{"Line":1}},{"line":309,"address":[11102288],"length":1,"stats":{"Line":2}},{"line":331,"address":[11092146,11092099,11090896],"length":1,"stats":{"Line":2}},{"line":332,"address":[11090911,11090980],"length":1,"stats":{"Line":2}},{"line":334,"address":[11091101],"length":1,"stats":{"Line":1}},{"line":336,"address":[11091308],"length":1,"stats":{"Line":1}},{"line":338,"address":[11091337],"length":1,"stats":{"Line":2}},{"line":339,"address":[11091380,11091470],"length":1,"stats":{"Line":2}},{"line":340,"address":[11091542],"length":1,"stats":{"Line":1}},{"line":342,"address":[11091669],"length":1,"stats":{"Line":1}},{"line":343,"address":[11091681],"length":1,"stats":{"Line":1}},{"line":367,"address":[11103403,11102704,11103367],"length":1,"stats":{"Line":3}},{"line":368,"address":[11102739],"length":1,"stats":{"Line":1}},{"line":369,"address":[11102801],"length":1,"stats":{"Line":1}},{"line":370,"address":[11102892,11102830],"length":1,"stats":{"Line":2}},{"line":371,"address":[11102918,11103383],"length":1,"stats":{"Line":3}},{"line":373,"address":[11102911],"length":1,"stats":{"Line":1}},{"line":375,"address":[11102977],"length":1,"stats":{"Line":0}},{"line":379,"address":[11098181,11097728],"length":1,"stats":{"Line":4}},{"line":380,"address":[11097756,11097814],"length":1,"stats":{"Line":8}},{"line":381,"address":[11097834,11097895],"length":1,"stats":{"Line":2}},{"line":382,"address":[11098002,11097972,11097907],"length":1,"stats":{"Line":6}},{"line":383,"address":[11098035,11098161],"length":1,"stats":{"Line":3}}],"covered":107,"coverable":112},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","settlement","src","test.rs"],"content":"#[cfg(test)]\nmod settlement_tests {\n    extern crate std;\n\n    use crate::{CalloraSettlement, CalloraSettlementClient};\n    use soroban_sdk::testutils::{Address as _, Ledger as _};\n    use soroban_sdk::{Address, Env, Map, Symbol};\n    use std::any::Any;\n    use std::panic::{catch_unwind, AssertUnwindSafe};\n\n    fn setup_contract() -\u003e (Env, Address, Address, Address, Address) {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        let third_party = Address::generate(\u0026env);\n        (env, addr, admin, vault, third_party)\n    }\n\n    fn panic_message(err: std::boxed::Box\u003cdyn Any + Send\u003e) -\u003e std::string::String {\n        if let Some(message) = err.downcast_ref::\u003c\u0026str\u003e() {\n            std::string::String::from(*message)\n        } else if let Some(message) = err.downcast_ref::\u003cstd::string::String\u003e() {\n            message.clone()\n        } else {\n            std::string::String::from(\"\u003cnon-string panic payload\u003e\")\n        }\n    }\n\n    #[test]\n    fn test_settlement_initialization() {\n        let env = Env::default();\n        env.mock_all_auths();\n        env.ledger().set_timestamp(1_700_000_000);\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        client.init(\u0026admin, \u0026vault);\n\n        env.as_contract(\u0026addr, || {\n            let inst = env.storage().instance();\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"admin\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"vault\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"developer_balances\")));\n            assert!(inst.has(\u0026Symbol::new(\u0026env, \"global_pool\")));\n            let balances: Map\u003cAddress, i128\u003e =\n                inst.get(\u0026Symbol::new(\u0026env, \"developer_balances\")).unwrap();\n\n            assert_eq!(balances.len(), 0);\n        });\n\n        assert_eq!(client.get_admin(), admin);\n        assert_eq!(client.get_vault(), vault);\n\n        let global_pool = client.get_global_pool();\n        assert_eq!(global_pool.total_balance, 0);\n        assert_eq!(global_pool.last_updated, 1_700_000_000);\n\n        let all_balances = client.get_all_developer_balances(\u0026admin);\n        assert_eq!(all_balances.len(), 0);\n        assert_eq!(client.get_developer_balance(\u0026developer), 0);\n    }\n\n    #[test]\n    fn test_receive_payment_to_pool() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n\n        let global_pool = client.get_global_pool();\n        assert_eq!(global_pool.total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_receive_payment_to_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 500i128);\n        assert_eq!(client.get_global_pool().total_balance, 0);\n    }\n\n    #[test]\n    fn test_receive_multiple_payments_accumulate() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026vault, \u0026150i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 250i128);\n    }\n\n    #[test]\n    fn test_get_developer_balance_when_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let balance = client.get_developer_balance(\u0026developer);\n        assert_eq!(balance, 0);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_when_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let all = client.get_all_developer_balances(\u0026admin);\n        assert_eq!(all.len(), 0);\n    }\n\n    #[test]\n    fn test_admin_can_receive_payment_to_pool() {\n        // Admin can route payments directly to global pool (not just via vault)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        client.receive_payment(\u0026admin, \u0026100i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    fn test_admin_can_receive_payment_to_developer() {\n        // Admin routing a payment directly to a developer (not via vault)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026admin, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        assert_eq!(client.get_developer_balance(\u0026developer), 200i128);\n    }\n\n    #[test]\n    fn test_pool_accumulates_across_multiple_payments() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026400i128, \u0026true, \u0026None);\n        client.receive_payment(\u0026vault, \u0026600i128, \u0026true, \u0026None);\n\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_get_developer_balance_returns_zero_for_unknown() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let stranger = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        assert_eq!(client.get_developer_balance(\u0026stranger), 0i128);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let dev1 = Address::generate(\u0026env);\n        let dev2 = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026300i128, \u0026false, \u0026Some(dev1.clone()));\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(dev2.clone()));\n\n        let all = client.get_all_developer_balances(\u0026admin);\n        assert_eq!(all.len(), 2);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_empty() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let all = client.get_all_developer_balances(\u0026admin);\n        assert_eq!(all.len(), 0);\n    }\n\n    #[test]\n    fn test_set_admin_two_step() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        assert_eq!(client.get_admin(), admin); // Still old admin\n\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"no admin transfer pending\")]\n    fn test_accept_admin_fails_if_not_nominated() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.accept_admin();\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_set_admin_unauthorized() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Third party cannot set admin\n        client.set_admin(\u0026vault, \u0026new_admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_set_vault_unauthorized() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        let attacker = Address::generate(\u0026env);\n        client.set_vault(\u0026attacker, \u0026new_vault);\n    }\n\n    #[test]\n    fn test_set_vault() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_vault(\u0026admin, \u0026new_vault);\n        assert_eq!(client.get_vault(), new_vault);\n    }\n\n    // ── admin rotation edge cases ────────────────────────────────────────────\n\n    #[test]\n    fn test_set_admin_to_same_address_succeeds() {\n        // Admin can nominate themselves again (useful for re-confirming control)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026admin);\n        // Still current admin until accept\n        assert_eq!(client.get_admin(), admin);\n\n        client.accept_admin();\n        assert_eq!(client.get_admin(), admin);\n    }\n\n    #[test]\n    fn test_set_vault_to_same_address_succeeds() {\n        // Admin can update vault to same address (no-op but valid)\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_vault(\u0026admin, \u0026vault);\n        assert_eq!(client.get_vault(), vault);\n    }\n\n    #[test]\n    fn test_rapid_consecutive_admin_updates() {\n        // Admin can change nomination before acceptance\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin1 = Address::generate(\u0026env);\n        let new_admin2 = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // First nomination\n        client.set_admin(\u0026admin, \u0026new_admin1);\n        // Change nomination before acceptance\n        client.set_admin(\u0026admin, \u0026new_admin2);\n        // Only second nominee can accept\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin2);\n    }\n\n    #[test]\n    fn test_admin_cannot_accept_own_nomination() {\n        // Current admin cannot bypass two-step process\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026admin);\n        // Admin must still accept to complete transfer\n        client.accept_admin();\n        assert_eq!(client.get_admin(), admin);\n    }\n\n    #[test]\n    #[should_panic(expected = \"unauthorized: caller is not admin\")]\n    fn test_pending_admin_cannot_set_admin() {\n        // Pending admin has no privileges until accepted\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        // New admin tries to set another admin before accepting\n        client.set_admin(\u0026new_admin, \u0026vault);\n    }\n\n    #[test]\n    fn test_vault_update_after_admin_rotation() {\n        // Ensure vault updates work correctly after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // New admin updates vault\n        client.set_vault(\u0026new_admin, \u0026new_vault);\n        assert_eq!(client.get_vault(), new_vault);\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    fn test_admin_rotation_preserves_state() {\n        // Admin rotation doesn't affect pool or balances\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Add some balance\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026false, \u0026Some(developer.clone()));\n        let dev_balance_before = client.get_developer_balance(\u0026developer);\n        let pool_before = client.get_global_pool();\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // State preserved\n        assert_eq!(client.get_developer_balance(\u0026developer), dev_balance_before);\n        assert_eq!(\n            client.get_global_pool().total_balance,\n            pool_before.total_balance\n        );\n    }\n\n    // ── event emission tests ────────────────────────────────────────────────\n\n    #[test]\n    fn test_set_admin_emits_nomination_event() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n\n        let events = env.events().all();\n        let nom_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"admin_nominated\")\n                }\n            })\n            .expect(\"expected admin_nominated event\");\n\n        let topic_current: Address = nom_ev.1.get(1).unwrap().into_val(\u0026env);\n        let topic_new: Address = nom_ev.1.get(2).unwrap().into_val(\u0026env);\n        assert_eq!(topic_current, admin);\n        assert_eq!(topic_new, new_admin);\n    }\n\n    #[test]\n    fn test_accept_admin_emits_accepted_event() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        let events = env.events().all();\n        let acc_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"admin_accepted\")\n                }\n            })\n            .expect(\"expected admin_accepted event\");\n\n        let topic_old: Address = acc_ev.1.get(1).unwrap().into_val(\u0026env);\n        let topic_new: Address = acc_ev.1.get(2).unwrap().into_val(\u0026env);\n        assert_eq!(topic_old, admin);\n        assert_eq!(topic_new, new_admin);\n    }\n\n    // ── panic / error paths ──────────────────────────────────────────────────\n\n    #[test]\n    #[should_panic(expected = \"settlement contract already initialized\")]\n    fn test_double_init_panics() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n        client.init(\u0026admin, \u0026vault);\n    }\n\n    #[test]\n    #[should_panic(expected = \"amount must be positive\")]\n    fn test_receive_payment_zero_amount() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00260i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"amount must be positive\")]\n    fn test_receive_payment_negative_amount() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026-1i128, \u0026true, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"developer address required when to_pool=false\")]\n    fn test_receive_payment_pool_false_no_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026None);\n    }\n\n    #[test]\n    #[should_panic(expected = \"developer address must be None when to_pool=true\")]\n    fn test_receive_payment_pool_true_with_developer() {\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026true, \u0026Some(developer));\n    }\n\n    #[test]\n    fn test_receive_payment_authorization_matrix() {\n        enum CallerRole {\n            Vault,\n            Admin,\n            ThirdParty,\n        }\n\n        struct Case {\n            name: \u0026'static str,\n            role: CallerRole,\n            expected: Result\u003c(), \u0026'static str\u003e,\n        }\n\n        let cases = [\n            Case {\n                name: \"vault address succeeds\",\n                role: CallerRole::Vault,\n                expected: Ok(()),\n            },\n            Case {\n                name: \"admin address succeeds\",\n                role: CallerRole::Admin,\n                expected: Ok(()),\n            },\n            Case {\n                name: \"third party fails\",\n                role: CallerRole::ThirdParty,\n                expected: Err(\"unauthorized: caller must be vault or admin\"),\n            },\n        ];\n\n        for case in cases {\n            let (env, addr, admin, vault, third_party) = setup_contract();\n            let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n            let caller = match case.role {\n                CallerRole::Vault =\u003e vault,\n                CallerRole::Admin =\u003e admin,\n                CallerRole::ThirdParty =\u003e third_party,\n            };\n\n            let result = catch_unwind(AssertUnwindSafe(|| {\n                client.receive_payment(\u0026caller, \u0026100i128, \u0026true, \u0026None);\n            }));\n\n            match case.expected {\n                Ok(()) =\u003e {\n                    assert!(result.is_ok(), \"expected success for case: {}\", case.name);\n                    let global_pool = client.get_global_pool();\n                    assert_eq!(global_pool.total_balance, 100i128);\n                }\n                Err(expected_panic) =\u003e {\n                    let err = result.expect_err(\"expected panic but call succeeded\");\n                    let message = panic_message(err);\n                    assert!(\n                        message.contains(expected_panic),\n                        \"case: {} (got panic: {})\",\n                        case.name,\n                        message\n                    );\n                }\n            }\n        }\n    }\n\n    // ── event shape tests ────────────────────────────────────────────────────\n\n    #[test]\n    fn test_payment_received_event_to_pool() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n\n        let events = env.events().all();\n        let ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"payment_received\")\n                }\n            })\n            .expect(\"expected payment_received event\");\n\n        let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n        assert_eq!(topic1, vault);\n\n        let data: crate::PaymentReceivedEvent = ev.2.into_val(\u0026env);\n        assert_eq!(data.from_vault, vault);\n        assert_eq!(data.amount, 1000i128);\n        assert!(data.to_pool);\n        assert!(data.developer.is_none());\n    }\n\n    #[test]\n    fn test_payment_received_and_balance_credited_events_to_developer() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        let events = env.events().all();\n\n        let pr_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"payment_received\")\n                }\n            })\n            .expect(\"expected payment_received event\");\n\n        let pr_data: crate::PaymentReceivedEvent = pr_ev.2.into_val(\u0026env);\n        assert!(!pr_data.to_pool);\n        assert_eq!(pr_data.developer, Some(developer.clone()));\n\n        let bc_ev = events\n            .iter()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"balance_credited\")\n                }\n            })\n            .expect(\"expected balance_credited event\");\n\n        let topic1: Address = bc_ev.1.get(1).unwrap().into_val(\u0026env);\n        assert_eq!(topic1, developer);\n\n        let bc_data: crate::BalanceCreditedEvent = bc_ev.2.into_val(\u0026env);\n        assert_eq!(bc_data.developer, developer);\n        assert_eq!(bc_data.amount, 500i128);\n        assert_eq!(bc_data.new_balance, 500i128);\n    }\n\n    #[test]\n    fn test_balance_credited_new_balance_is_cumulative() {\n        use soroban_sdk::testutils::Events as _;\n        use soroban_sdk::{IntoVal, Symbol};\n\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        client.receive_payment(\u0026vault, \u0026300i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // grab the last balance_credited event\n        let events = env.events().all();\n        let bc_ev = events\n            .iter()\n            .rev()\n            .find(|e| {\n                !e.1.is_empty() \u0026\u0026 {\n                    let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                    t == Symbol::new(\u0026env, \"balance_credited\")\n                }\n            })\n            .expect(\"expected balance_credited event\");\n\n        let bc_data: crate::BalanceCreditedEvent = bc_ev.2.into_val(\u0026env);\n        assert_eq!(bc_data.new_balance, 500i128);\n    }\n\n    // ── regression tests: ensure settlement logic intact after rotation ─────\n\n    #[test]\n    fn test_receive_payment_works_after_admin_rotation() {\n        // Ensure payment processing still works after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // Vault can still send payments\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_receive_payment_works_after_vault_update() {\n        // Ensure payment processing works with new vault address\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Update vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // Old vault cannot send payments\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized\"));\n\n        // New vault can send payments\n        client.receive_payment(\u0026new_vault, \u00261000i128, \u0026true, \u0026None);\n        assert_eq!(client.get_global_pool().total_balance, 1000i128);\n    }\n\n    #[test]\n    fn test_developer_withdrawal_after_admin_rotation() {\n        // Ensure developer balances accessible after admin change\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Credit developer\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Rotate admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n\n        // Balance still accessible\n        assert_eq!(client.get_developer_balance(\u0026developer), 500i128);\n\n        // Admin can still view all balances\n        let all_balances = client.get_all_developer_balances(\u0026new_admin);\n        assert_eq!(all_balances.len(), 1);\n        assert_eq!(all_balances.get(0).unwrap().balance, 500i128);\n    }\n\n    #[test]\n    fn test_multiple_payments_accumulate_after_vault_update() {\n        // Ensure accumulation logic works correctly after vault changes\n        let env = Env::default();\n        env.mock_all_auths();\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Some payments from old vault\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Update vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // More payments from new vault\n        client.receive_payment(\u0026new_vault, \u0026150i128, \u0026false, \u0026Some(developer.clone()));\n        client.receive_payment(\u0026new_vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Total should accumulate correctly\n        assert_eq!(client.get_developer_balance(\u0026developer), 450i128);\n    }\n\n    #[test]\n    fn test_global_pool_timestamp_updates_after_admin_change() {\n        // Ensure pool timestamp updates correctly regardless of admin\n        let env = Env::default();\n        env.mock_all_auths();\n        env.ledger().set_timestamp(1_700_000_000);\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let new_admin = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        client.init(\u0026admin, \u0026vault);\n\n        // Initial payment\n        client.receive_payment(\u0026vault, \u00261000i128, \u0026true, \u0026None);\n        let pool_before = client.get_global_pool();\n        assert_eq!(pool_before.last_updated, 1_700_000_000);\n\n        // Rotate admin and advance time\n        client.set_admin(\u0026admin, \u0026new_admin);\n        client.accept_admin();\n        env.ledger().set_timestamp(1_700_000_100);\n\n        // New payment updates timestamp\n        client.receive_payment(\u0026vault, \u0026500i128, \u0026true, \u0026None);\n        let pool_after = client.get_global_pool();\n        assert_eq!(pool_after.last_updated, 1_700_000_100);\n        assert_eq!(pool_after.total_balance, 1500i128);\n    }\n\n    /// `last_updated` reflects the ledger timestamp at the moment of each pool credit.\n    #[test]\n    fn test_global_pool_last_updated_on_receive_payment() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        env.ledger().set_timestamp(1_000);\n        client.init(\u0026admin, \u0026vault);\n        assert_eq!(client.get_global_pool().last_updated, 1_000);\n\n        // Advance time and credit pool � last_updated must change\n        env.ledger().set_timestamp(2_000);\n        client.receive_payment(\u0026vault, \u0026100i128, \u0026true, \u0026None);\n        let pool = client.get_global_pool();\n        assert_eq!(pool.last_updated, 2_000);\n        assert_eq!(pool.total_balance, 100i128);\n\n        // Advance again � each credit stamps the new time\n        env.ledger().set_timestamp(3_000);\n        client.receive_payment(\u0026vault, \u002650i128, \u0026true, \u0026None);\n        let pool2 = client.get_global_pool();\n        assert_eq!(pool2.last_updated, 3_000);\n        assert_eq!(pool2.total_balance, 150i128);\n    }\n\n    /// Routing to a developer does NOT update `last_updated` on the global pool.\n    #[test]\n    fn test_global_pool_last_updated_unchanged_for_developer_payment() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let admin = Address::generate(\u0026env);\n        let vault = Address::generate(\u0026env);\n        let developer = Address::generate(\u0026env);\n        let addr = env.register(CalloraSettlement, ());\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        env.ledger().set_timestamp(1_000);\n        client.init(\u0026admin, \u0026vault);\n\n        env.ledger().set_timestamp(5_000);\n        client.receive_payment(\u0026vault, \u0026200i128, \u0026false, \u0026Some(developer.clone()));\n\n        // Pool timestamp must still be the init timestamp\n        assert_eq!(client.get_global_pool().last_updated, 1_000);\n        assert_eq!(client.get_global_pool().total_balance, 0);\n        assert_eq!(client.get_developer_balance(\u0026developer), 200i128);\n    }\n\n    // --- Authorization Matrix Tests ---\n\n    #[test]\n    fn test_set_admin_authorization_matrix() {\n        let (env, addr, admin, vault, third_party) = setup_contract();\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        let new_admin = Address::generate(\u0026env);\n\n        // Admin can set admin\n        client.set_admin(\u0026admin, \u0026new_admin);\n\n        // Vault cannot set admin\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.set_admin(\u0026vault, \u0026new_admin);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized: caller is not admin\"));\n\n        // Third party cannot set admin\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.set_admin(\u0026third_party, \u0026new_admin);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized: caller is not admin\"));\n    }\n\n    #[test]\n    fn test_set_vault_authorization_matrix() {\n        let (env, addr, admin, vault, third_party) = setup_contract();\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        let new_vault = Address::generate(\u0026env);\n\n        // Admin can set vault\n        client.set_vault(\u0026admin, \u0026new_vault);\n\n        // Vault cannot set vault\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.set_vault(\u0026vault, \u0026new_vault);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized: caller is not admin\"));\n\n        // Third party cannot set vault\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.set_vault(\u0026third_party, \u0026new_vault);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized: caller is not admin\"));\n    }\n\n    #[test]\n    fn test_accept_admin_authorization_matrix() {\n        let (env, addr, admin, _vault, _third_party) = setup_contract();\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n        let new_admin = Address::generate(\u0026env);\n\n        client.set_admin(\u0026admin, \u0026new_admin);\n\n        // Accept for new_admin (using mock_all_auths which is ON from setup_contract)\n        client.accept_admin();\n        assert_eq!(client.get_admin(), new_admin);\n    }\n\n    #[test]\n    fn test_get_all_developer_balances_authorization_matrix() {\n        let (env, addr, admin, vault, third_party) = setup_contract();\n        let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n        // Admin can call\n        client.get_all_developer_balances(\u0026admin);\n\n        // Vault cannot call\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.get_all_developer_balances(\u0026vault);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized: caller is not admin\"));\n\n        // Third party cannot call\n        let result = catch_unwind(AssertUnwindSafe(|| {\n            client.get_all_developer_balances(\u0026third_party);\n        }));\n        assert!(result.is_err());\n        assert!(panic_message(result.unwrap_err()).contains(\"unauthorized: caller is not admin\"));\n    }\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","settlement","src","test_views.rs"],"content":"use crate::{CalloraSettlement, CalloraSettlementClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_admin_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_admin();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_vault_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_vault();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_global_pool_uninitialized_panics() {\n    let env = Env::default();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_global_pool();\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_developer_balance_uninitialized_panics() {\n    let env = Env::default();\n    let dev = Address::generate(\u0026env);\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.get_developer_balance(\u0026dev);\n}\n\n#[test]\n#[should_panic(expected = \"settlement contract not initialized\")]\nfn test_get_all_developer_balances_uninitialized_panics() {\n    let env = Env::default();\n    env.mock_all_auths();\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n    let dummy = Address::generate(\u0026env);\n\n    client.get_all_developer_balances(\u0026dummy);\n}\n\n#[test]\nfn test_get_developer_balance_returns_zero_when_not_stored() {\n    let env = Env::default();\n    env.mock_all_auths();\n\n    let admin = Address::generate(\u0026env);\n    let vault = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n\n    let addr = env.register(CalloraSettlement, ());\n    let client = CalloraSettlementClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026admin, \u0026vault);\n\n    let balance = client.get_developer_balance(\u0026dev);\n    assert_eq!(balance, 0);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","vault","src","lib.rs"],"content":"#![no_std]\n/// # Callora Vault Contract  deposit/withdraw/deduct/distribute with pause circuit-breaker.\n///\n/// ## Pause Circuit Breaker\n///\n/// When the vault is paused:\n/// - Deposits are blocked (require_not_paused check)\n/// - Single deducts are blocked (require_not_paused check)\n/// - Batch deducts are blocked (require_not_paused check)\n/// - Owner withdrawals are ALLOWED (for recovery/emergency access)\n/// - Owner withdrawals to specific addresses are ALLOWED (for recovery/emergency access)\n/// - Admin/owner configuration functions remain available\n///\n/// This design allows the vault owner to recover funds while preventing new deposits\n/// and deductions during emergency situations or contract upgrades.\nuse soroban_sdk::{contract, contractimpl, contracttype, token, Address, Env, String, Symbol, Vec};\n\n#[contracttype]\n#[derive(Clone)]\npub struct DeductItem {\n    pub amount: i128,\n    pub request_id: Option\u003cSymbol\u003e,\n}\n\n#[contracttype]\n#[derive(Clone)]\npub struct VaultMeta {\n    pub owner: Address,\n    pub balance: i128,\n    pub authorized_caller: Option\u003cAddress\u003e,\n    pub min_deposit: i128,\n}\n\n/// Payload for `withdraw` and `withdraw_to` events.\n#[contracttype]\n#[derive(Clone)]\npub struct WithdrawEventData {\n    /// Amount withdrawn in USDC stroops.\n    pub amount: i128,\n    /// Vault balance after the withdrawal.\n    pub new_balance: i128,\n}\n\n/// Canonical storage keys for Vault contract.\n/// Eliminates duplication and ensures audit clarity.\n#[contracttype]\npub enum StorageKey {\n    MetaKey,\n    Admin,\n    UsdcToken,\n    Settlement,\n    RevenuePool,\n    MaxDeduct,\n    Paused,\n    Metadata(String),\n    PendingOwner,\n    PendingAdmin,\n    DepositorList,\n}\n\npub const DEFAULT_MAX_DEDUCT: i128 = i128::MAX;\npub const DEFAULT_MIN_DEPOSIT: i128 = 1;\npub const MAX_BATCH_SIZE: u32 = 50;\npub const MAX_METADATA_LEN: u32 = 256;\npub const MAX_OFFERING_ID_LEN: u32 = 64;\n\n#[contract]\npub struct CalloraVault;\n\n#[contractimpl]\nimpl CalloraVault {\n    #[allow(clippy::too_many_arguments)]\n    pub fn init(\n        env: Env,\n        owner: Address,\n        usdc_token: Address,\n        initial_balance: Option\u003ci128\u003e,\n        authorized_caller: Option\u003cAddress\u003e,\n        min_deposit: Option\u003ci128\u003e,\n        revenue_pool: Option\u003cAddress\u003e,\n        max_deduct: Option\u003ci128\u003e,\n    ) -\u003e VaultMeta {\n        owner.require_auth();\n        let inst = env.storage().instance();\n        if inst.has(\u0026StorageKey::MetaKey) {\n            panic!(\"vault already initialized\");\n        }\n        assert!(\n            usdc_token != env.current_contract_address(),\n            \"usdc_token cannot be vault address\"\n        );\n        if let Some(p) = \u0026revenue_pool {\n            assert!(\n                p != \u0026env.current_contract_address(),\n                \"revenue_pool cannot be vault address\"\n            );\n        }\n        let balance = initial_balance.unwrap_or(0);\n        assert!(balance \u003e= 0, \"initial balance must be non-negative\");\n        let min_d = min_deposit.unwrap_or(DEFAULT_MIN_DEPOSIT);\n        assert!(min_d \u003e 0, \"min_deposit must be positive\");\n        let max_d = max_deduct.unwrap_or(DEFAULT_MAX_DEDUCT);\n        assert!(max_d \u003e 0, \"max_deduct must be positive\");\n        assert!(min_d \u003c= max_d, \"min_deposit cannot exceed max_deduct\");\n        if let Some(ac) = \u0026authorized_caller {\n            assert!(\n                ac != \u0026env.current_contract_address(),\n                \"authorized_caller cannot be vault address\"\n            );\n        }\n        if balance \u003e 0 {\n            let onchain_usdc_balance =\n                token::Client::new(\u0026env, \u0026usdc_token).balance(\u0026env.current_contract_address());\n            assert!(\n                onchain_usdc_balance \u003e= balance,\n                \"initial_balance exceeds on-ledger USDC balance\"\n            );\n        }\n        let meta = VaultMeta {\n            owner: owner.clone(),\n            balance,\n            authorized_caller,\n            min_deposit: min_d,\n        };\n        inst.set(\u0026StorageKey::MetaKey, \u0026meta);\n        inst.set(\u0026StorageKey::UsdcToken, \u0026usdc_token);\n        inst.set(\u0026StorageKey::Admin, \u0026owner);\n        if let Some(p) = revenue_pool {\n            inst.set(\u0026StorageKey::RevenuePool, \u0026p);\n        }\n        inst.set(\u0026StorageKey::MaxDeduct, \u0026max_d);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"init\"), owner.clone()), balance);\n        meta\n    }\n\n    pub fn is_authorized_depositor(env: Env, caller: Address) -\u003e bool {\n        let meta = Self::get_meta(env.clone());\n        if caller == meta.owner {\n            return true;\n        }\n        let list: Vec\u003cAddress\u003e = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::DepositorList)\n            .unwrap_or(Vec::new(\u0026env));\n        list.contains(\u0026caller)\n    }\n\n    #[allow(dead_code)]\n    fn migrate(env: \u0026Env) {\n        let inst = env.storage().instance();\n\n        // Ensure Admin fallback exists\n        if !inst.has(\u0026StorageKey::Admin) {\n            if let Some(meta) = inst.get::\u003c_, VaultMeta\u003e(\u0026StorageKey::MetaKey) {\n                inst.set(\u0026StorageKey::Admin, \u0026meta.owner);\n            }\n        }\n    }\n\n    pub fn get_admin(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Admin)\n            .expect(\"vault not initialized\")\n    }\n\n    pub fn set_admin(env: Env, caller: Address, new_admin: Address) {\n        caller.require_auth();\n        let cur = Self::get_admin(env.clone());\n        if caller != cur {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::PendingAdmin, \u0026new_admin);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_nominated\"), cur, new_admin), ());\n    }\n\n    pub fn accept_admin(env: Env) {\n        let pending: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::PendingAdmin)\n            .expect(\"no admin transfer pending\");\n        pending.require_auth();\n        let cur = Self::get_admin(env.clone());\n        env.storage().instance().set(\u0026StorageKey::Admin, \u0026pending);\n        env.storage().instance().remove(\u0026StorageKey::PendingAdmin);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"admin_accepted\"), cur, pending), ());\n    }\n\n    pub fn require_owner(env: Env, caller: Address) {\n        let meta = Self::get_meta(env.clone());\n        assert!(caller == meta.owner, \"unauthorized: owner only\");\n    }\n\n    pub fn distribute(env: Env, caller: Address, to: Address, amount: i128) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        if amount \u003c= 0 {\n            panic!(\"amount must be positive\");\n        }\n        let usdc_addr: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_addr);\n        let vb = usdc.balance(\u0026env.current_contract_address());\n        if vb \u003c amount {\n            panic!(\"insufficient USDC balance\");\n        }\n        usdc.transfer(\u0026env.current_contract_address(), \u0026to, \u0026amount);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"distribute\"), to), amount);\n    }\n\n    pub fn get_meta(env: Env) -\u003e VaultMeta {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::MetaKey)\n            .unwrap_or_else(|| panic!(\"vault not initialized\"))\n    }\n\n    pub fn set_allowed_depositor(env: Env, caller: Address, depositor: Option\u003cAddress\u003e) {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n\n        match depositor {\n            Some(d) =\u003e {\n                let mut list: Vec\u003cAddress\u003e = env\n                    .storage()\n                    .instance()\n                    .get(\u0026StorageKey::DepositorList)\n                    .unwrap_or(Vec::new(\u0026env));\n\n                if !list.contains(\u0026d) {\n                    list.push_back(d);\n                }\n\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::DepositorList, \u0026list);\n            }\n            None =\u003e {\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::DepositorList, \u0026Vec::\u003cAddress\u003e::new(\u0026env));\n            }\n        }\n    }\n\n    pub fn clear_allowed_depositors(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller);\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::DepositorList, \u0026Vec::\u003cAddress\u003e::new(\u0026env));\n    }\n\n    fn require_authorized_deduct_caller(env: Env, caller: \u0026Address) {\n        let meta = Self::get_meta(env.clone());\n        let owner = meta.owner.clone();\n        let auth = match meta.authorized_caller {\n            Some(ac) =\u003e *caller == ac || *caller == owner,\n            None =\u003e *caller == owner,\n        };\n        assert!(auth, \"unauthorized caller\");\n    }\n\n    pub fn get_allowed_depositors(env: Env) -\u003e Vec\u003cAddress\u003e {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::DepositorList)\n            .unwrap_or(Vec::new(\u0026env))\n    }\n\n    pub fn set_authorized_caller(env: Env, caller: Option\u003cAddress\u003e) {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        let old_authorized_caller = meta.authorized_caller.clone();\n        meta.authorized_caller = caller.clone();\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"set_authorized_caller\"),\n                meta.owner.clone(),\n            ),\n            (old_authorized_caller, caller),\n        );\n    }\n\n    pub fn pause(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_admin_or_owner(env.clone(), \u0026caller);\n        assert!(!Self::is_paused(env.clone()), \"vault already paused\");\n        env.storage().instance().set(\u0026StorageKey::Paused, \u0026true);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"vault_paused\"), caller), ());\n    }\n\n    pub fn unpause(env: Env, caller: Address) {\n        caller.require_auth();\n        Self::require_admin_or_owner(env.clone(), \u0026caller);\n        assert!(Self::is_paused(env.clone()), \"vault not paused\");\n        env.storage().instance().set(\u0026StorageKey::Paused, \u0026false);\n        env.events()\n            .publish((Symbol::new(\u0026env, \"vault_unpaused\"), caller), ());\n    }\n\n    fn get_max_deduct(env: Env) -\u003e i128 {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::MaxDeduct)\n            .unwrap_or(DEFAULT_MAX_DEDUCT)\n    }\n\n    /// Returns the current pause state of the vault.\n    ///\n    /// # Purpose\n    /// Exposes the pause circuit-breaker state to enable off-chain indexers,\n    /// monitoring systems, and external contracts to query whether the vault\n    /// is currently paused. This allows reliable tracking of contract availability\n    /// for deposit, deduct, and batch_deduct operations.\n    ///\n    /// # Return Value\n    /// Returns `true` if the vault is currently paused, `false` otherwise.\n    /// Before the first `pause()` call, this function returns `false` (the safe\n    /// default state), ensuring that uninitialized pause state does not block\n    /// legitimate operations.\n    ///\n    /// # Safety Guarantees\n    /// - **Read-only**: This function performs no state mutation or side effects.\n    /// - **Deterministic**: Identical storage state always produces identical output.\n    /// - **Non-panicking**: Never panics, even before initialization or when pause\n    ///   state is unset. Returns `false` as the safe default.\n    /// - **Consistent**: Always reflects the latest committed pause/unpause state\n    ///   from contract storage, never stale or cached values.\n    ///\n    /// # Indexer Usage\n    /// Safe for external indexers and off-chain monitoring systems. Call this\n    /// function to determine whether the vault is accepting deposits and processing\n    /// deductions. When `is_paused()` returns `true`, the following operations are\n    /// blocked:\n    /// - `deposit()`\n    /// - `deduct()`\n    /// - `batch_deduct()`\n    ///\n    /// The pause state is consistent with emitted events:\n    /// - `vault_paused` event → `is_paused()` returns `true`\n    /// - `vault_unpaused` event → `is_paused()` returns `false`\n    ///\n    /// # Example\n    /// ```ignore\n    /// if vault.is_paused() {\n    ///     // Vault is paused - deposits and deductions are blocked\n    ///     // Only admin/owner operations like withdraw() are allowed\n    /// } else {\n    ///     // Vault is operational - all functions available\n    /// }\n    /// ```\n    pub fn is_paused(env: Env) -\u003e bool {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Paused)\n            .unwrap_or(false)\n    }\n\n    pub fn deposit(env: Env, caller: Address, amount: i128) -\u003e i128 {\n        Self::require_not_paused(env.clone());\n        caller.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(\n            Self::is_authorized_depositor(env.clone(), caller.clone()),\n            \"unauthorized: only owner or allowed depositor can deposit\"\n        );\n        let meta = Self::get_meta(env.clone());\n        assert!(\n            amount \u003e= meta.min_deposit,\n            \"deposit below minimum: {} \u003c {}\",\n            amount,\n            meta.min_deposit\n        );\n        let usdc_addr: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026usdc_addr);\n        usdc.transfer(\u0026caller, \u0026env.current_contract_address(), \u0026amount);\n        let mut meta = Self::get_meta(env.clone());\n        meta.balance = meta\n            .balance\n            .checked_add(amount)\n            .unwrap_or_else(|| panic!(\"balance overflow\"));\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"deposit\"), caller),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    /// Deduct USDC from the vault and transfer it to the configured settlement address.\n    ///\n    /// # Preconditions\n    /// - The settlement address must have been registered via `set_settlement`\n    ///   before this function can succeed. Attempting to deduct without a\n    ///   configured settlement address panics with `\"settlement address not set\"`\n    ///   and reverts the transaction, leaving vault state unchanged.\n    /// - `amount` must be positive and less than or equal to `max_deduct`.\n    /// - `caller` must be either the owner or the `authorized_caller` (if set).\n    /// - The vault's internal balance must cover `amount`.\n    ///\n    /// # Panics\n    /// - `\"settlement address not set\"` — `set_settlement` has not been called.\n    /// - `\"amount must be positive\"` — `amount \u003c= 0`.\n    /// - `\"deduct amount exceeds max_deduct\"` — `amount \u003e max_deduct`.\n    /// - `\"unauthorized caller\"` — caller is not owner or authorized caller.\n    /// - `\"insufficient balance\"` — vault balance below `amount`.\n    pub fn deduct(env: Env, caller: Address, amount: i128, request_id: Option\u003cSymbol\u003e) -\u003e i128 {\n        Self::require_not_paused(env.clone());\n        caller.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        Self::require_authorized_deduct_caller(env.clone(), \u0026caller);\n        let max_d = Self::get_max_deduct(env.clone());\n        assert!(amount \u003c= max_d, \"deduct amount exceeds max_deduct\");\n        let meta = Self::get_meta(env.clone());\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let settlement = Self::require_settlement(\u0026env);\n        let mut meta = Self::get_meta(env.clone());\n        meta.balance = meta\n            .balance\n            .checked_sub(amount)\n            .unwrap_or_else(|| panic!(\"balance underflow\"));\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        let ut: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .unwrap();\n        Self::transfer_funds(\u0026env, \u0026ut, \u0026settlement, amount);\n        let rid = request_id.unwrap_or(Symbol::new(\u0026env, \"\"));\n        env.events().publish(\n            (Symbol::new(\u0026env, \"deduct\"), caller, rid),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    /// Deduct multiple items atomically.\n    ///\n    /// Full-batch validation is completed before any external transfer,\n    /// state update, or event emission. If validation or transfer fails,\n    /// the invocation reverts with no partial effects.\n    ///\n    /// `MAX_BATCH_SIZE` is an explicit practical cap to bound Soroban\n    /// CPU/memory work and emitted events in a single invocation.\n    pub fn batch_deduct(env: Env, caller: Address, items: Vec\u003cDeductItem\u003e) -\u003e i128 {\n        Self::require_not_paused(env.clone());\n        caller.require_auth();\n        Self::require_authorized_deduct_caller(env.clone(), \u0026caller);\n        let n = items.len();\n        assert!(n \u003e 0, \"batch_deduct requires at least one item\");\n        assert!(n \u003c= MAX_BATCH_SIZE, \"batch too large\");\n        let max_d = Self::get_max_deduct(env.clone());\n        let mut meta = Self::get_meta(env.clone());\n        let mut running = meta.balance;\n        let mut total: i128 = 0;\n        for item in items.iter() {\n            assert!(item.amount \u003e 0, \"amount must be positive\");\n            assert!(item.amount \u003c= max_d, \"deduct amount exceeds max_deduct\");\n            assert!(running \u003e= item.amount, \"insufficient balance\");\n            running = running\n                .checked_sub(item.amount)\n                .unwrap_or_else(|| panic!(\"balance underflow\"));\n            total = total\n                .checked_add(item.amount)\n                .unwrap_or_else(|| panic!(\"total overflow\"));\n        }\n        let settlement = Self::require_settlement(\u0026env);\n\n        meta.balance = running;\n\n        let ut: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .unwrap();\n        Self::transfer_funds(\u0026env, \u0026ut, \u0026settlement, total);\n\n        meta.balance = running;\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        for item in items.iter() {\n            let rid = item.request_id.unwrap_or(Symbol::new(\u0026env, \"\"));\n            env.events().publish(\n                (Symbol::new(\u0026env, \"deduct\"), caller.clone(), rid),\n                (item.amount, meta.balance),\n            );\n        }\n        meta.balance\n    }\n\n    pub fn balance(env: Env) -\u003e i128 {\n        Self::get_meta(env).balance\n    }\n\n    pub fn transfer_ownership(env: Env, new_owner: Address) {\n        let meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(\n            new_owner != meta.owner,\n            \"new_owner must be different from current owner\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::PendingOwner, \u0026new_owner);\n        env.events().publish(\n            (\n                Symbol::new(\u0026env, \"ownership_nominated\"),\n                meta.owner,\n                new_owner,\n            ),\n            (),\n        );\n    }\n\n    pub fn accept_ownership(env: Env) {\n        let pending: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::PendingOwner)\n            .expect(\"no ownership transfer pending\");\n        pending.require_auth();\n        let mut meta = Self::get_meta(env.clone());\n        let old = meta.owner.clone();\n        meta.owner = pending;\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        env.storage().instance().remove(\u0026StorageKey::PendingOwner);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"ownership_accepted\"), old, meta.owner),\n            (),\n        );\n    }\n\n    pub fn withdraw(env: Env, amount: i128) -\u003e i128 {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let ua: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026ua);\n        usdc.transfer(\u0026env.current_contract_address(), \u0026meta.owner, \u0026amount);\n        meta.balance = meta\n            .balance\n            .checked_sub(amount)\n            .unwrap_or_else(|| panic!(\"balance underflow\"));\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"withdraw\"), meta.owner.clone()),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn withdraw_to(env: Env, to: Address, amount: i128) -\u003e i128 {\n        let mut meta = Self::get_meta(env.clone());\n        meta.owner.require_auth();\n        assert!(amount \u003e 0, \"amount must be positive\");\n        assert!(meta.balance \u003e= amount, \"insufficient balance\");\n        let ua: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::UsdcToken)\n            .expect(\"vault not initialized\");\n        let usdc = token::Client::new(\u0026env, \u0026ua);\n        usdc.transfer(\u0026env.current_contract_address(), \u0026to, \u0026amount);\n        meta.balance = meta\n            .balance\n            .checked_sub(amount)\n            .unwrap_or_else(|| panic!(\"balance underflow\"));\n        env.storage().instance().set(\u0026StorageKey::MetaKey, \u0026meta);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"withdraw_to\"), meta.owner.clone(), to),\n            (amount, meta.balance),\n        );\n        meta.balance\n    }\n\n    pub fn set_revenue_pool(env: Env, caller: Address, revenue_pool: Option\u003cAddress\u003e) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        match revenue_pool {\n            Some(addr) =\u003e {\n                env.storage()\n                    .instance()\n                    .set(\u0026StorageKey::RevenuePool, \u0026addr);\n                env.events()\n                    .publish((Symbol::new(\u0026env, \"set_revenue_pool\"), caller), addr);\n            }\n            None =\u003e {\n                env.storage().instance().remove(\u0026StorageKey::RevenuePool);\n                env.events()\n                    .publish((Symbol::new(\u0026env, \"clear_revenue_pool\"), caller), ());\n            }\n        }\n    }\n\n    pub fn get_revenue_pool(env: Env) -\u003e Option\u003cAddress\u003e {\n        env.storage().instance().get(\u0026StorageKey::RevenuePool)\n    }\n\n    /// Store the settlement contract address (admin only).\n    ///\n    /// Once set, every `deduct` / `batch_deduct` call transfers the deducted USDC to\n    /// this address. `set_settlement` is a hard precondition: `deduct` and\n    /// `batch_deduct` panic with `\"settlement address not set\"` until this function\n    /// has been called. `revenue_pool` is no longer consulted during deductions.\n    ///\n    /// # Panics\n    /// Panics if `caller` is not the current admin.\n    ///\n    /// # Operator note\n    /// Record the address returned by `stellar contract deploy` for the settlement\n    /// contract and pass it here. Confirm with `get_settlement()` before routing\n    /// live traffic.\n    pub fn set_settlement(env: Env, caller: Address, settlement_address: Address) {\n        caller.require_auth();\n        let admin = Self::get_admin(env.clone());\n        if caller != admin {\n            panic!(\"unauthorized: caller is not admin\");\n        }\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Settlement, \u0026settlement_address);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"set_settlement\"), caller),\n            settlement_address,\n        );\n    }\n\n    /// Return the currently registered settlement contract address.\n    ///\n    /// # Panics\n    /// Panics with `\"settlement address not set\"` if `set_settlement` has not been\n    /// called yet.\n    pub fn get_settlement(env: Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Settlement)\n            .unwrap_or_else(|| panic!(\"settlement address not set\"))\n    }\n\n    /// Return all three configurable contract addresses in one read-only call.\n    ///\n    /// Backend operators call this view after deployment to verify that every address\n    /// is configured correctly before routing live traffic through the vault.\n    ///\n    /// # Returns\n    /// A tuple `(usdc_token, settlement, revenue_pool)`:\n    /// - `usdc_token`   — always `Some` after `init`; the USDC token contract address.\n    /// - `settlement`   — `Some` after `set_settlement` is called, otherwise `None`.\n    ///   Must be `Some` before any `deduct` / `batch_deduct` call can succeed.\n    /// - `revenue_pool` — `Some` after `set_revenue_pool` is called, otherwise `None`.\n    ///   Informational only; `deduct` / `batch_deduct` always route to `settlement`\n    ///   and never fall back to the revenue pool.\n    ///\n    /// # Example — Stellar CLI\n    /// ```text\n    /// stellar contract invoke --id \u003cVAULT_CONTRACT_ID\u003e \\\n    ///     --source \u003cOPERATOR_KEY\u003e --network testnet \\\n    ///     -- get_contract_addresses\n    /// ```\n    ///\n    /// # Operator checklist\n    /// 1. `usdc_token` must be the canonical Stellar USDC issuer\n    ///    (`GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN` on mainnet).\n    /// 2. `settlement` must be `Some` before any deduct call; it is the sole\n    ///    destination for deducted USDC.\n    /// 3. `revenue_pool` is informational only and is not consulted during deducts.\n    pub fn get_contract_addresses(env: Env) -\u003e (Option\u003cAddress\u003e, Option\u003cAddress\u003e, Option\u003cAddress\u003e) {\n        let inst = env.storage().instance();\n        let usdc: Option\u003cAddress\u003e = inst.get(\u0026StorageKey::UsdcToken);\n        let settlement: Option\u003cAddress\u003e = inst.get(\u0026StorageKey::Settlement);\n        let revenue_pool: Option\u003cAddress\u003e = inst.get(\u0026StorageKey::RevenuePool);\n        (usdc, settlement, revenue_pool)\n    }\n\n    pub fn set_metadata(\n        env: Env,\n        caller: Address,\n        offering_id: String,\n        metadata: String,\n    ) -\u003e String {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n        assert!(\n            offering_id.len() \u003c= MAX_OFFERING_ID_LEN,\n            \"offering_id exceeds max length\"\n        );\n        assert!(\n            metadata.len() \u003c= MAX_METADATA_LEN,\n            \"metadata exceeds max length\"\n        );\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Metadata(offering_id.clone()), \u0026metadata);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"metadata_set\"), offering_id, caller),\n            metadata.clone(),\n        );\n        metadata\n    }\n\n    pub fn get_metadata(env: Env, offering_id: String) -\u003e Option\u003cString\u003e {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Metadata(offering_id))\n    }\n\n    pub fn update_metadata(\n        env: Env,\n        caller: Address,\n        offering_id: String,\n        metadata: String,\n    ) -\u003e String {\n        caller.require_auth();\n        Self::require_owner(env.clone(), caller.clone());\n        assert!(\n            offering_id.len() \u003c= MAX_OFFERING_ID_LEN,\n            \"offering_id exceeds max length\"\n        );\n        assert!(\n            metadata.len() \u003c= MAX_METADATA_LEN,\n            \"metadata exceeds max length\"\n        );\n        let old: String = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::Metadata(offering_id.clone()))\n            .unwrap_or(String::from_str(\u0026env, \"\"));\n        env.storage()\n            .instance()\n            .set(\u0026StorageKey::Metadata(offering_id.clone()), \u0026metadata);\n        env.events().publish(\n            (Symbol::new(\u0026env, \"metadata_updated\"), offering_id, caller),\n            (old, metadata.clone()),\n        );\n        metadata\n    }\n\n    fn transfer_funds(env: \u0026Env, usdc_token: \u0026Address, to: \u0026Address, amount: i128) {\n        token::Client::new(env, usdc_token).transfer(\u0026env.current_contract_address(), to, \u0026amount);\n    }\n\n    fn require_settlement(env: \u0026Env) -\u003e Address {\n        env.storage()\n            .instance()\n            .get(\u0026StorageKey::Settlement)\n            .unwrap_or_else(|| panic!(\"settlement address not set\"))\n    }\n\n    fn require_not_paused(env: Env) {\n        assert!(!Self::is_paused(env), \"vault is paused\");\n    }\n\n    fn require_admin_or_owner(env: Env, caller: \u0026Address) {\n        let admin: Address = env\n            .storage()\n            .instance()\n            .get(\u0026StorageKey::Admin)\n            .expect(\"vault not initialized\");\n        let meta = Self::get_meta(env);\n        assert!(\n            *caller == admin || *caller == meta.owner,\n            \"unauthorized: caller is not admin or owner\"\n        );\n    }\n\n    pub fn add_address(env: Env, caller: Address, depositor: Address) {\n        Self::set_allowed_depositor(env.clone(), caller.clone(), Some(depositor.clone()));\n        env.events()\n            .publish((Symbol::new(\u0026env, \"allowlist_add\"), caller, depositor), ());\n    }\n\n    pub fn get_allowlist(env: Env) -\u003e Vec\u003cAddress\u003e {\n        Self::get_allowed_depositors(env)\n    }\n\n    pub fn clear_all(env: Env, caller: Address) {\n        Self::clear_allowed_depositors(env.clone(), caller.clone());\n        env.events()\n            .publish((Symbol::new(\u0026env, \"allowlist_clear\"), caller), ());\n    }\n}\n\n#[cfg(test)]\nmod test;\n\n#[cfg(test)]\nmod test_init_hardening;\n","traces":[{"line":73,"address":[11099108,11097808,11101633],"length":1,"stats":{"Line":3}},{"line":83,"address":[11098185],"length":1,"stats":{"Line":5}},{"line":84,"address":[11098304],"length":1,"stats":{"Line":3}},{"line":85,"address":[11098445],"length":1,"stats":{"Line":5}},{"line":86,"address":[11098514,11101530],"length":1,"stats":{"Line":2}},{"line":88,"address":[11098495,11098560,11098637],"length":1,"stats":{"Line":11}},{"line":92,"address":[11098760],"length":1,"stats":{"Line":5}},{"line":93,"address":[11098938,11098995],"length":1,"stats":{"Line":1}},{"line":98,"address":[11099130,11098863],"length":1,"stats":{"Line":8}},{"line":99,"address":[11099146,11099270],"length":1,"stats":{"Line":3}},{"line":100,"address":[11099307,11099231],"length":1,"stats":{"Line":8}},{"line":101,"address":[11099440,11099325],"length":1,"stats":{"Line":6}},{"line":102,"address":[11099413,11099471],"length":1,"stats":{"Line":8}},{"line":103,"address":[11099487,11099596],"length":1,"stats":{"Line":4}},{"line":104,"address":[11099617,11099689,11099560],"length":1,"stats":{"Line":7}},{"line":105,"address":[11099726,11099654],"length":1,"stats":{"Line":4}},{"line":106,"address":[11099885,11099831],"length":1,"stats":{"Line":0}},{"line":111,"address":[11099771],"length":1,"stats":{"Line":5}},{"line":112,"address":[11100028],"length":1,"stats":{"Line":3}},{"line":114,"address":[11100300],"length":1,"stats":{"Line":1}},{"line":120,"address":[11100002],"length":1,"stats":{"Line":5}},{"line":125,"address":[11100571],"length":1,"stats":{"Line":3}},{"line":126,"address":[11100649],"length":1,"stats":{"Line":5}},{"line":127,"address":[11100679],"length":1,"stats":{"Line":4}},{"line":128,"address":[11100709],"length":1,"stats":{"Line":1}},{"line":129,"address":[11100783],"length":1,"stats":{"Line":1}},{"line":131,"address":[11100813],"length":1,"stats":{"Line":6}},{"line":132,"address":[11100922],"length":1,"stats":{"Line":2}},{"line":133,"address":[11100937],"length":1,"stats":{"Line":5}},{"line":134,"address":[11101238],"length":1,"stats":{"Line":2}},{"line":137,"address":[11095344,11096086,11096139],"length":1,"stats":{"Line":1}},{"line":138,"address":[11095444,11095367],"length":1,"stats":{"Line":3}},{"line":139,"address":[11095514,11095456],"length":1,"stats":{"Line":3}},{"line":140,"address":[11095540],"length":1,"stats":{"Line":1}},{"line":142,"address":[11095772],"length":1,"stats":{"Line":1}},{"line":145,"address":[11095631,11095707],"length":1,"stats":{"Line":3}},{"line":146,"address":[11096100,11095587,11095804,11095661,11095715],"length":1,"stats":{"Line":3}},{"line":147,"address":[11095955],"length":1,"stats":{"Line":2}},{"line":151,"address":[11107582,11107588,11107120],"length":1,"stats":{"Line":0}},{"line":152,"address":[11107148],"length":1,"stats":{"Line":0}},{"line":155,"address":[11107272],"length":1,"stats":{"Line":0}},{"line":156,"address":[11107305,11107348],"length":1,"stats":{"Line":0}},{"line":157,"address":[11107505],"length":1,"stats":{"Line":0}},{"line":162,"address":[11110896,11111181],"length":1,"stats":{"Line":1}},{"line":163,"address":[11110922],"length":1,"stats":{"Line":1}},{"line":165,"address":[11111028],"length":1,"stats":{"Line":1}},{"line":169,"address":[11112392,11112482,11111472],"length":1,"stats":{"Line":2}},{"line":170,"address":[11111507],"length":1,"stats":{"Line":1}},{"line":171,"address":[11111593],"length":1,"stats":{"Line":1}},{"line":172,"address":[11111692,11111630],"length":1,"stats":{"Line":2}},{"line":173,"address":[11112408,11111718],"length":1,"stats":{"Line":2}},{"line":175,"address":[11111711],"length":1,"stats":{"Line":1}},{"line":177,"address":[11111777],"length":1,"stats":{"Line":0}},{"line":178,"address":[11111940],"length":1,"stats":{"Line":1}},{"line":179,"address":[11111952],"length":1,"stats":{"Line":1}},{"line":182,"address":[11075293,11075340,11074000],"length":1,"stats":{"Line":2}},{"line":183,"address":[11074015],"length":1,"stats":{"Line":1}},{"line":186,"address":[11074152],"length":1,"stats":{"Line":1}},{"line":188,"address":[11074375],"length":1,"stats":{"Line":1}},{"line":189,"address":[11074404],"length":1,"stats":{"Line":1}},{"line":190,"address":[11074503,11074455],"length":1,"stats":{"Line":2}},{"line":191,"address":[11074690],"length":1,"stats":{"Line":1}},{"line":192,"address":[11074882],"length":1,"stats":{"Line":1}},{"line":193,"address":[11074894],"length":1,"stats":{"Line":1}},{"line":196,"address":[11080672,11080987],"length":1,"stats":{"Line":5}},{"line":197,"address":[11080764,11080703],"length":1,"stats":{"Line":6}},{"line":198,"address":[11080894,11080776,11080837],"length":1,"stats":{"Line":7}},{"line":201,"address":[11071225,11071351,11069760],"length":1,"stats":{"Line":2}},{"line":202,"address":[11069800],"length":1,"stats":{"Line":2}},{"line":203,"address":[11069881],"length":1,"stats":{"Line":2}},{"line":204,"address":[11069913,11069975],"length":1,"stats":{"Line":4}},{"line":205,"address":[11070003,11071298],"length":1,"stats":{"Line":2}},{"line":207,"address":[11069981],"length":1,"stats":{"Line":3}},{"line":208,"address":[11070055,11071270],"length":1,"stats":{"Line":2}},{"line":213,"address":[11070158],"length":1,"stats":{"Line":2}},{"line":215,"address":[11070399],"length":1,"stats":{"Line":2}},{"line":216,"address":[11070431,11070491],"length":1,"stats":{"Line":4}},{"line":217,"address":[11070624],"length":1,"stats":{"Line":2}},{"line":218,"address":[11070668,11071240],"length":1,"stats":{"Line":2}},{"line":220,"address":[11070704,11070649],"length":1,"stats":{"Line":2}},{"line":221,"address":[11071043,11070812],"length":1,"stats":{"Line":2}},{"line":222,"address":[11071069,11070824],"length":1,"stats":{"Line":2}},{"line":225,"address":[11108716,11108416],"length":1,"stats":{"Line":1}},{"line":226,"address":[11108446],"length":1,"stats":{"Line":5}},{"line":228,"address":[11108562],"length":1,"stats":{"Line":1}},{"line":229,"address":[11108635],"length":1,"stats":{"Line":6}},{"line":232,"address":[11092167,11090528,11091194],"length":1,"stats":{"Line":2}},{"line":233,"address":[11090563],"length":1,"stats":{"Line":5}},{"line":234,"address":[11090681,11092103],"length":1,"stats":{"Line":1}},{"line":236,"address":[11090789],"length":1,"stats":{"Line":2}},{"line":237,"address":[11090822],"length":1,"stats":{"Line":1}},{"line":238,"address":[11091450],"length":1,"stats":{"Line":1}},{"line":241,"address":[11091385,11091309],"length":1,"stats":{"Line":3}},{"line":242,"address":[11091339,11091393,11092071,11091268,11091482],"length":1,"stats":{"Line":3}},{"line":244,"address":[11091636],"length":1,"stats":{"Line":1}},{"line":245,"address":[11091657,11091760],"length":1,"stats":{"Line":3}},{"line":248,"address":[11091753],"length":1,"stats":{"Line":3}},{"line":250,"address":[11091789],"length":1,"stats":{"Line":0}},{"line":253,"address":[11090904],"length":1,"stats":{"Line":1}},{"line":255,"address":[11090938],"length":1,"stats":{"Line":0}},{"line":260,"address":[11096722,11096224,11096684],"length":1,"stats":{"Line":2}},{"line":261,"address":[11096252],"length":1,"stats":{"Line":1}},{"line":262,"address":[11096330],"length":1,"stats":{"Line":1}},{"line":263,"address":[11096406],"length":1,"stats":{"Line":1}},{"line":265,"address":[11096437],"length":1,"stats":{"Line":0}},{"line":268,"address":[11097024,11097665,11097730],"length":1,"stats":{"Line":2}},{"line":269,"address":[11097055,11097132],"length":1,"stats":{"Line":2}},{"line":270,"address":[11097147],"length":1,"stats":{"Line":1}},{"line":271,"address":[11097214],"length":1,"stats":{"Line":1}},{"line":272,"address":[11097417,11097243],"length":1,"stats":{"Line":1}},{"line":273,"address":[11097392,11097321],"length":1,"stats":{"Line":2}},{"line":275,"address":[11097599,11097401,11097541],"length":1,"stats":{"Line":3}},{"line":278,"address":[11093902,11093520],"length":1,"stats":{"Line":1}},{"line":279,"address":[11093542,11093795],"length":1,"stats":{"Line":2}},{"line":281,"address":[11093729,11093662],"length":1,"stats":{"Line":2}},{"line":282,"address":[11093816,11093892,11093737],"length":1,"stats":{"Line":2}},{"line":285,"address":[11092192,11093295,11093354],"length":1,"stats":{"Line":1}},{"line":286,"address":[11092307,11092214],"length":1,"stats":{"Line":2}},{"line":287,"address":[11092314],"length":1,"stats":{"Line":1}},{"line":288,"address":[11092364],"length":1,"stats":{"Line":1}},{"line":289,"address":[11092405,11092450],"length":1,"stats":{"Line":2}},{"line":290,"address":[11092568],"length":1,"stats":{"Line":1}},{"line":291,"address":[11093231,11092764],"length":1,"stats":{"Line":2}},{"line":293,"address":[11092775],"length":1,"stats":{"Line":1}},{"line":294,"address":[11092850],"length":1,"stats":{"Line":1}},{"line":296,"address":[11093012],"length":1,"stats":{"Line":1}},{"line":300,"address":[11102427,11102359,11101648],"length":1,"stats":{"Line":2}},{"line":301,"address":[11101678],"length":1,"stats":{"Line":1}},{"line":302,"address":[11101756],"length":1,"stats":{"Line":1}},{"line":303,"address":[11101843,11102375,11101790],"length":1,"stats":{"Line":3}},{"line":304,"address":[11101875,11101836],"length":1,"stats":{"Line":2}},{"line":305,"address":[11102067],"length":1,"stats":{"Line":1}},{"line":306,"address":[11102079],"length":1,"stats":{"Line":1}},{"line":309,"address":[11108392,11107616,11108354],"length":1,"stats":{"Line":2}},{"line":310,"address":[11107646],"length":1,"stats":{"Line":1}},{"line":311,"address":[11107724],"length":1,"stats":{"Line":1}},{"line":312,"address":[11107758,11107850],"length":1,"stats":{"Line":2}},{"line":313,"address":[11107833,11107870],"length":1,"stats":{"Line":2}},{"line":314,"address":[11108062],"length":1,"stats":{"Line":2}},{"line":315,"address":[11108074],"length":1,"stats":{"Line":1}},{"line":318,"address":[11081344,11081040],"length":1,"stats":{"Line":1}},{"line":319,"address":[11081214,11081060],"length":1,"stats":{"Line":2}},{"line":321,"address":[11081155],"length":1,"stats":{"Line":1}},{"line":322,"address":[11081263],"length":1,"stats":{"Line":1}},{"line":369,"address":[11111200,11111445],"length":1,"stats":{"Line":2}},{"line":370,"address":[11111217],"length":1,"stats":{"Line":2}},{"line":372,"address":[11111312],"length":1,"stats":{"Line":2}},{"line":376,"address":[11107037,11104944,11107097],"length":1,"stats":{"Line":3}},{"line":377,"address":[11104974,11105062],"length":1,"stats":{"Line":4}},{"line":378,"address":[11105074],"length":1,"stats":{"Line":2}},{"line":379,"address":[11105085,11105166],"length":1,"stats":{"Line":2}},{"line":380,"address":[11105342,11105191,11107043,11105149],"length":1,"stats":{"Line":6}},{"line":384,"address":[11105412,11105358],"length":1,"stats":{"Line":6}},{"line":385,"address":[11105419],"length":1,"stats":{"Line":3}},{"line":394,"address":[11105765],"length":1,"stats":{"Line":3}},{"line":396,"address":[11106006],"length":1,"stats":{"Line":3}},{"line":397,"address":[11106038,11106103],"length":1,"stats":{"Line":4}},{"line":398,"address":[11106208],"length":1,"stats":{"Line":2}},{"line":399,"address":[11106319,11106390,11106238],"length":1,"stats":{"Line":4}},{"line":401,"address":[11106272],"length":1,"stats":{"Line":2}},{"line":402,"address":[11106351],"length":1,"stats":{"Line":2}},{"line":403,"address":[11106414],"length":1,"stats":{"Line":2}},{"line":404,"address":[11106614,11106887],"length":1,"stats":{"Line":3}},{"line":405,"address":[11106706,11106626],"length":1,"stats":{"Line":3}},{"line":406,"address":[11106845],"length":1,"stats":{"Line":2}},{"line":408,"address":[11106913],"length":1,"stats":{"Line":2}},{"line":428,"address":[11104692,11102448,11104802],"length":1,"stats":{"Line":2}},{"line":429,"address":[11102502,11102614],"length":1,"stats":{"Line":2}},{"line":430,"address":[11102626],"length":1,"stats":{"Line":1}},{"line":431,"address":[11102721,11102652],"length":1,"stats":{"Line":2}},{"line":432,"address":[11102704,11102754],"length":1,"stats":{"Line":2}},{"line":433,"address":[11102774],"length":1,"stats":{"Line":1}},{"line":434,"address":[11102914,11102845],"length":1,"stats":{"Line":2}},{"line":435,"address":[11102897,11102951],"length":1,"stats":{"Line":2}},{"line":436,"address":[11102971,11103096],"length":1,"stats":{"Line":2}},{"line":437,"address":[11103039],"length":1,"stats":{"Line":1}},{"line":438,"address":[11103130,11103194],"length":1,"stats":{"Line":3}},{"line":439,"address":[11103353,11103282,11103214],"length":1,"stats":{"Line":6}},{"line":441,"address":[11103238],"length":1,"stats":{"Line":3}},{"line":442,"address":[11103314],"length":1,"stats":{"Line":1}},{"line":443,"address":[11103377],"length":1,"stats":{"Line":2}},{"line":447,"address":[11103655],"length":1,"stats":{"Line":1}},{"line":449,"address":[11103913],"length":1,"stats":{"Line":2}},{"line":450,"address":[11104720,11103930],"length":1,"stats":{"Line":3}},{"line":451,"address":[11104534,11104116],"length":1,"stats":{"Line":4}},{"line":452,"address":[11104169,11104259],"length":1,"stats":{"Line":4}},{"line":453,"address":[11104502],"length":1,"stats":{"Line":4}},{"line":455,"address":[11104560],"length":1,"stats":{"Line":3}},{"line":466,"address":[11075360,11078708,11078084],"length":1,"stats":{"Line":2}},{"line":467,"address":[11075397,11075476],"length":1,"stats":{"Line":5}},{"line":468,"address":[11075491],"length":1,"stats":{"Line":1}},{"line":469,"address":[11075518],"length":1,"stats":{"Line":3}},{"line":470,"address":[11075556],"length":1,"stats":{"Line":1}},{"line":471,"address":[11075654,11075584],"length":1,"stats":{"Line":3}},{"line":472,"address":[11075742,11075631,11075674],"length":1,"stats":{"Line":3}},{"line":473,"address":[11075722,11075768],"length":1,"stats":{"Line":2}},{"line":474,"address":[11075827],"length":1,"stats":{"Line":2}},{"line":475,"address":[11075865],"length":1,"stats":{"Line":1}},{"line":476,"address":[11075897],"length":1,"stats":{"Line":2}},{"line":477,"address":[11075992,11075929,11076085],"length":1,"stats":{"Line":4}},{"line":478,"address":[11078249,11078134,11076176],"length":1,"stats":{"Line":4}},{"line":479,"address":[11078351,11078173,11078270],"length":1,"stats":{"Line":3}},{"line":480,"address":[11078458,11078299,11078372],"length":1,"stats":{"Line":4}},{"line":481,"address":[11078401,11078479,11078545],"length":1,"stats":{"Line":3}},{"line":482,"address":[11078417],"length":1,"stats":{"Line":1}},{"line":483,"address":[11650481,11650480],"length":1,"stats":{"Line":1}},{"line":484,"address":[11078608,11078561,11078674],"length":1,"stats":{"Line":3}},{"line":485,"address":[11078577],"length":1,"stats":{"Line":1}},{"line":486,"address":[11078640],"length":1,"stats":{"Line":1}},{"line":488,"address":[11076242],"length":1,"stats":{"Line":2}},{"line":490,"address":[11076257],"length":1,"stats":{"Line":1}},{"line":495,"address":[11076416],"length":1,"stats":{"Line":1}},{"line":497,"address":[11076648],"length":1,"stats":{"Line":1}},{"line":499,"address":[11076695],"length":1,"stats":{"Line":2}},{"line":500,"address":[11076735],"length":1,"stats":{"Line":2}},{"line":501,"address":[11078079,11077057,11076938],"length":1,"stats":{"Line":5}},{"line":502,"address":[11077160,11077493,11078112],"length":1,"stats":{"Line":2}},{"line":503,"address":[11078045,11077605],"length":1,"stats":{"Line":3}},{"line":504,"address":[11077661,11077749],"length":1,"stats":{"Line":2}},{"line":505,"address":[11077997],"length":1,"stats":{"Line":1}},{"line":508,"address":[11077260],"length":1,"stats":{"Line":1}},{"line":511,"address":[11104816],"length":1,"stats":{"Line":2}},{"line":512,"address":[11104823],"length":1,"stats":{"Line":1}},{"line":515,"address":[11090342,11089424,11090418],"length":1,"stats":{"Line":2}},{"line":516,"address":[11089540,11089447],"length":1,"stats":{"Line":2}},{"line":517,"address":[11089555],"length":1,"stats":{"Line":1}},{"line":518,"address":[11089620],"length":1,"stats":{"Line":1}},{"line":522,"address":[11089695],"length":1,"stats":{"Line":1}},{"line":524,"address":[11089759],"length":1,"stats":{"Line":0}},{"line":525,"address":[11089922,11090273],"length":1,"stats":{"Line":2}},{"line":527,"address":[11089934],"length":1,"stats":{"Line":1}},{"line":528,"address":[11090014],"length":1,"stats":{"Line":1}},{"line":529,"address":[11090070],"length":1,"stats":{"Line":1}},{"line":535,"address":[11086868,11086780,11085184],"length":1,"stats":{"Line":2}},{"line":536,"address":[11085199],"length":1,"stats":{"Line":1}},{"line":539,"address":[11085344],"length":1,"stats":{"Line":1}},{"line":541,"address":[11085567],"length":1,"stats":{"Line":1}},{"line":542,"address":[11085596],"length":1,"stats":{"Line":1}},{"line":543,"address":[11085634,11085698],"length":1,"stats":{"Line":2}},{"line":544,"address":[11085706],"length":1,"stats":{"Line":1}},{"line":545,"address":[11085903,11085951],"length":1,"stats":{"Line":2}},{"line":546,"address":[11086141],"length":1,"stats":{"Line":1}},{"line":547,"address":[11086333,11086692],"length":1,"stats":{"Line":2}},{"line":548,"address":[11086420,11086345],"length":1,"stats":{"Line":2}},{"line":553,"address":[11110317,11108736],"length":1,"stats":{"Line":1}},{"line":554,"address":[11108772,11108833],"length":1,"stats":{"Line":2}},{"line":555,"address":[11108840],"length":1,"stats":{"Line":1}},{"line":556,"address":[11108893,11108984],"length":1,"stats":{"Line":2}},{"line":557,"address":[11108944,11109063,11109004],"length":1,"stats":{"Line":3}},{"line":561,"address":[11109152],"length":1,"stats":{"Line":1}},{"line":563,"address":[11109393],"length":1,"stats":{"Line":1}},{"line":564,"address":[11109485,11109425],"length":1,"stats":{"Line":2}},{"line":565,"address":[11109585,11109620,11109691],"length":1,"stats":{"Line":4}},{"line":567,"address":[11109613],"length":1,"stats":{"Line":1}},{"line":568,"address":[11109652],"length":1,"stats":{"Line":1}},{"line":569,"address":[11109709],"length":1,"stats":{"Line":1}},{"line":570,"address":[11110189,11109906],"length":1,"stats":{"Line":2}},{"line":571,"address":[11109918,11109993],"length":1,"stats":{"Line":2}},{"line":572,"address":[11110153],"length":1,"stats":{"Line":1}},{"line":574,"address":[11110215],"length":1,"stats":{"Line":1}},{"line":577,"address":[11072256,11073984,11073946],"length":1,"stats":{"Line":2}},{"line":578,"address":[11072371,11072286],"length":1,"stats":{"Line":2}},{"line":579,"address":[11072378],"length":1,"stats":{"Line":1}},{"line":580,"address":[11072431,11072522],"length":1,"stats":{"Line":2}},{"line":581,"address":[11072601,11072482,11072542],"length":1,"stats":{"Line":3}},{"line":585,"address":[11072690],"length":1,"stats":{"Line":1}},{"line":587,"address":[11072931],"length":1,"stats":{"Line":1}},{"line":588,"address":[11072963,11073028],"length":1,"stats":{"Line":2}},{"line":589,"address":[11073120,11073155,11073226],"length":1,"stats":{"Line":3}},{"line":591,"address":[11073148],"length":1,"stats":{"Line":1}},{"line":592,"address":[11073187],"length":1,"stats":{"Line":1}},{"line":593,"address":[11073244],"length":1,"stats":{"Line":1}},{"line":594,"address":[11073441,11073820],"length":1,"stats":{"Line":2}},{"line":595,"address":[11073453,11073528],"length":1,"stats":{"Line":2}},{"line":596,"address":[11073784],"length":1,"stats":{"Line":1}},{"line":598,"address":[11073846],"length":1,"stats":{"Line":1}},{"line":601,"address":[11088042,11088769,11087152],"length":1,"stats":{"Line":2}},{"line":602,"address":[11087187],"length":1,"stats":{"Line":1}},{"line":603,"address":[11087305],"length":1,"stats":{"Line":1}},{"line":604,"address":[11087334,11087399],"length":1,"stats":{"Line":2}},{"line":605,"address":[11087435,11088679],"length":1,"stats":{"Line":2}},{"line":607,"address":[11087410],"length":1,"stats":{"Line":1}},{"line":608,"address":[11087476],"length":1,"stats":{"Line":1}},{"line":609,"address":[11087535],"length":1,"stats":{"Line":1}},{"line":611,"address":[11088116],"length":1,"stats":{"Line":0}},{"line":612,"address":[11088279],"length":1,"stats":{"Line":1}},{"line":613,"address":[11088291],"length":1,"stats":{"Line":1}},{"line":616,"address":[11087558],"length":1,"stats":{"Line":1}},{"line":617,"address":[11087750],"length":1,"stats":{"Line":1}},{"line":618,"address":[11087762],"length":1,"stats":{"Line":1}},{"line":623,"address":[11087121,11086896],"length":1,"stats":{"Line":1}},{"line":624,"address":[11087018,11086919,11086960],"length":1,"stats":{"Line":3}},{"line":641,"address":[11081664,11082496,11082592],"length":1,"stats":{"Line":2}},{"line":642,"address":[11081699],"length":1,"stats":{"Line":1}},{"line":643,"address":[11081793],"length":1,"stats":{"Line":1}},{"line":644,"address":[11081822,11081884],"length":1,"stats":{"Line":2}},{"line":645,"address":[11082512,11081910],"length":1,"stats":{"Line":2}},{"line":647,"address":[11081903],"length":1,"stats":{"Line":1}},{"line":649,"address":[11081969],"length":1,"stats":{"Line":0}},{"line":650,"address":[11082132,11082435],"length":1,"stats":{"Line":2}},{"line":651,"address":[11082144,11082229],"length":1,"stats":{"Line":2}},{"line":652,"address":[11082368],"length":1,"stats":{"Line":1}},{"line":661,"address":[11081633,11081360],"length":1,"stats":{"Line":1}},{"line":662,"address":[11081386],"length":1,"stats":{"Line":1}},{"line":664,"address":[11081492],"length":1,"stats":{"Line":1}},{"line":665,"address":[11081559],"length":1,"stats":{"Line":4}},{"line":695,"address":[11094532,11093936],"length":1,"stats":{"Line":1}},{"line":696,"address":[11094011,11093963],"length":1,"stats":{"Line":2}},{"line":697,"address":[11094127],"length":1,"stats":{"Line":1}},{"line":698,"address":[11094151],"length":1,"stats":{"Line":1}},{"line":699,"address":[11094216],"length":1,"stats":{"Line":1}},{"line":700,"address":[11094289],"length":1,"stats":{"Line":2}},{"line":703,"address":[11080490,11079200,11080585],"length":1,"stats":{"Line":2}},{"line":709,"address":[11079245],"length":1,"stats":{"Line":1}},{"line":710,"address":[11080496,11079355],"length":1,"stats":{"Line":1}},{"line":711,"address":[11079469],"length":1,"stats":{"Line":1}},{"line":715,"address":[11079568,11079523],"length":1,"stats":{"Line":2}},{"line":719,"address":[11079617],"length":1,"stats":{"Line":1}},{"line":721,"address":[11079679],"length":1,"stats":{"Line":0}},{"line":722,"address":[11079966,11080362],"length":1,"stats":{"Line":2}},{"line":723,"address":[11079978,11080068],"length":1,"stats":{"Line":2}},{"line":724,"address":[11080314],"length":1,"stats":{"Line":1}},{"line":726,"address":[11080438],"length":1,"stats":{"Line":1}},{"line":729,"address":[11079147,11078736,11079184],"length":1,"stats":{"Line":1}},{"line":730,"address":[11078762],"length":1,"stats":{"Line":1}},{"line":732,"address":[11078899],"length":1,"stats":{"Line":1}},{"line":735,"address":[11085006,11085163,11082944],"length":1,"stats":{"Line":2}},{"line":741,"address":[11082989],"length":1,"stats":{"Line":1}},{"line":742,"address":[11083115,11085074],"length":1,"stats":{"Line":1}},{"line":743,"address":[11083249,11083304],"length":1,"stats":{"Line":0}},{"line":747,"address":[11083283,11083328],"length":1,"stats":{"Line":2}},{"line":751,"address":[11083738],"length":1,"stats":{"Line":1}},{"line":754,"address":[11083496,11083668,11083544],"length":1,"stats":{"Line":3}},{"line":755,"address":[11083439,11083503,11083631,11083770,11085052,11083693],"length":1,"stats":{"Line":2}},{"line":756,"address":[11083982],"length":1,"stats":{"Line":1}},{"line":758,"address":[11084016],"length":1,"stats":{"Line":0}},{"line":759,"address":[11084300,11084851],"length":1,"stats":{"Line":2}},{"line":760,"address":[11084402,11084312],"length":1,"stats":{"Line":2}},{"line":761,"address":[11084640],"length":1,"stats":{"Line":1}},{"line":763,"address":[11084964],"length":1,"stats":{"Line":1}},{"line":766,"address":[11082896,11082640,11082890],"length":1,"stats":{"Line":1}},{"line":767,"address":[11082699],"length":1,"stats":{"Line":1}},{"line":770,"address":[11089040,11089268,11089274],"length":1,"stats":{"Line":4}},{"line":771,"address":[11089075],"length":1,"stats":{"Line":1}},{"line":773,"address":[11089142],"length":1,"stats":{"Line":1}},{"line":774,"address":[11089209],"length":1,"stats":{"Line":4}},{"line":777,"address":[11088960],"length":1,"stats":{"Line":2}},{"line":778,"address":[11088967,11088997],"length":1,"stats":{"Line":3}},{"line":781,"address":[11095237,11094560],"length":1,"stats":{"Line":1}},{"line":782,"address":[11094591],"length":1,"stats":{"Line":1}},{"line":785,"address":[11094731],"length":1,"stats":{"Line":1}},{"line":787,"address":[11094960],"length":1,"stats":{"Line":1}},{"line":788,"address":[11095154],"length":1,"stats":{"Line":1}},{"line":794,"address":[11072233,11071376,11072130],"length":1,"stats":{"Line":5}},{"line":795,"address":[11072136,11071403,11071509],"length":1,"stats":{"Line":6}},{"line":796,"address":[11071744],"length":1,"stats":{"Line":1}},{"line":797,"address":[11071755],"length":1,"stats":{"Line":2}},{"line":800,"address":[11080608],"length":1,"stats":{"Line":1}},{"line":801,"address":[11080621],"length":1,"stats":{"Line":1}},{"line":804,"address":[11110821,11110336,11110877],"length":1,"stats":{"Line":2}},{"line":805,"address":[11110440,11110358,11110827],"length":1,"stats":{"Line":2}},{"line":806,"address":[11110540],"length":1,"stats":{"Line":1}},{"line":807,"address":[11110551],"length":1,"stats":{"Line":1}}],"covered":347,"coverable":363},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","vault","src","test.rs"],"content":"extern crate std;\n\nuse soroban_sdk::testutils::{Address as _, Events as _};\nuse soroban_sdk::{token, Address, Env, IntoVal, String, Symbol};\n\nuse super::*;\n\n// ---------------------------------------------------------------------------\n// Test helpers\n// ---------------------------------------------------------------------------\n\nfn create_usdc\u003c'a\u003e(\n    env: \u0026'a Env,\n    admin: \u0026Address,\n) -\u003e (Address, token::Client\u003c'a\u003e, token::StellarAssetClient\u003c'a\u003e) {\n    let contract_address = env.register_stellar_asset_contract_v2(admin.clone());\n    let address = contract_address.address();\n    let client = token::Client::new(env, \u0026address);\n    let admin_client = token::StellarAssetClient::new(env, \u0026address);\n    (address, client, admin_client)\n}\n\nfn create_vault(env: \u0026Env) -\u003e (Address, CalloraVaultClient\u003c'_\u003e) {\n    let address = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(env, \u0026address);\n    (address, client)\n}\n\n/// Mint `amount` USDC directly to `vault_address` (simulates pre-funded vault).\nfn fund_vault(\n    usdc_admin_client: \u0026token::StellarAssetClient,\n    vault_address: \u0026Address,\n    amount: i128,\n) {\n    usdc_admin_client.mint(vault_address, \u0026amount);\n}\n\n// ---------------------------------------------------------------------------\n// Init tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_with_balance_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(1000), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let events = env.events().all();\n    std::println!(\"init_with_balance_emits_event events len: {}\", events.len());\n    let last = events.last().expect(\"expected at least one event\");\n\n    assert_eq!(last.0, vault_address);\n    let topics = \u0026last.1;\n    assert_eq!(topics.len(), 2);\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = topics.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"init\"));\n    assert_eq!(topic1, owner);\n\n    let data: i128 = last.2.into_val(\u0026env);\n    assert_eq!(data, 1000);\n}\n\n#[test]\nfn init_defaults_balance_to_zero() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn init_defaults_min_deposit_to_one() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let meta = client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(meta.min_deposit, 1);\n}\n\n#[test]\nfn init_sets_owner_and_min_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let meta = client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026Some(10), \u0026None, \u0026None);\n\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(meta.min_deposit, 10);\n    assert_eq!(client.balance(), 500);\n    assert_eq!(client.get_admin(), owner);\n}\n\n#[test]\nfn init_succeeds_when_onchain_usdc_balance_covers_initial_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n\n    let meta = client.init(\u0026owner, \u0026usdc, \u0026Some(400), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(meta.balance, 400);\n    assert_eq!(client.balance(), 400);\n}\n\n#[test]\n#[should_panic(expected = \"initial_balance exceeds on-ledger USDC balance\")]\nfn init_fails_when_initial_balance_exceeds_onchain_usdc_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 99);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\nfn double_init_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    assert!(result.is_err(), \"expected error on second init\");\n}\n\n// ---------------------------------------------------------------------------\n// get_meta / balance tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_meta_returns_correct_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let meta = client.get_meta();\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\nfn get_meta_before_init_fails() {\n    let env = Env::default();\n    let (_, client) = create_vault(\u0026env);\n    assert!(client.try_get_meta().is_err(), \"expected error before init\");\n}\n\n// ---------------------------------------------------------------------------\n// Admin tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_admin_returns_owner_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(client.get_admin(), owner);\n}\n\n#[test]\nfn set_admin_two_step_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.set_admin(\u0026owner, \u0026new_admin);\n    assert_eq!(client.get_admin(), owner); // Still old admin\n\n    client.accept_admin();\n    assert_eq!(client.get_admin(), new_admin);\n}\n\n#[test]\nfn set_admin_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_set_admin(\u0026intruder, \u0026new_admin);\n    assert!(\n        result.is_err(),\n        \"expected error when non-admin calls set_admin\"\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Deposit tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn owner_can_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    // Swap order: create USDC first\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026500);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n\n    let new_balance = client.deposit(\u0026owner, \u0026200);\n    assert_eq!(new_balance, 200);\n\n    let events = env.events().all();\n    let deposit_event = events\n        .iter()\n        .find(|e| {\n            if e.0 != vault_address {\n                return false;\n            }\n            if e.1.is_empty() {\n                return false;\n            }\n            let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n            s == Symbol::new(\u0026env, \"deposit\")\n        })\n        .expect(\"expected deposit event\");\n\n    let (amount, balance): (i128, i128) = deposit_event.2.into_val(\u0026env);\n    assert_eq!(amount, 200);\n    assert_eq!(balance, 200);\n}\n\n#[test]\nfn allowed_depositor_can_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u0026200);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u0026200, \u00261000);\n    let returned = client.deposit(\u0026depositor, \u0026200);\n\n    assert_eq!(returned, 300);\n    assert_eq!(client.balance(), 300);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: only owner or allowed depositor can deposit\")]\nfn unauthorized_address_cannot_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.deposit(\u0026unauthorized, \u002650);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deposit_zero_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.deposit(\u0026owner, \u00260);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deposit_negative_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.deposit(\u0026owner, \u0026-50);\n}\n\n#[test]\nfn deposit_below_minimum_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026Some(50), \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u002630);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002630, \u00261000);\n    let result = client.try_deposit(\u0026depositor, \u002630);\n    assert!(result.is_err(), \"expected error for deposit below minimum\");\n}\n\n#[test]\nfn deposit_at_minimum_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026Some(50), \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    let new_balance = client.deposit(\u0026depositor, \u002650);\n    assert_eq!(new_balance, 150);\n}\n\n#[test]\nfn deposit_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    usdc_admin.mint(\u0026owner, \u0026100);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026100, \u00261000);\n\n    let result = client.try_deposit(\u0026owner, \u0026100);\n    assert!(result.is_err());\n    // Should contain \"vault is paused\" but Error doesn't easily expose the string in tests without more setup\n    // but the transaction should fail.\n\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n    client.deposit(\u0026owner, \u0026100);\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Additional deposit unit tests (tasks 5.1, 5.2, 5.3)\n// ---------------------------------------------------------------------------\n\n/// Validates: Requirements 8.1, 5.2\n#[test]\nfn owner_deposit_increases_balance_and_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026500);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026500, \u00261000);\n\n    let returned = client.deposit(\u0026owner, \u0026300);\n    assert_eq!(returned, 300);\n\n    // Capture events immediately after deposit, before any other contract call\n    // (each contract call resets the event log to that call's events only)\n    let events = env.events().all();\n    let deposit_event = events\n        .iter()\n        .find(|e| {\n            if e.0 != vault_address {\n                return false;\n            }\n            if e.1.is_empty() {\n                return false;\n            }\n            let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n            s == Symbol::new(\u0026env, \"deposit\")\n        })\n        .expect(\"expected deposit event\");\n\n    assert_eq!(\n        deposit_event.1.len(),\n        2,\n        \"topics must have exactly 2 entries\"\n    );\n    let topic0: Symbol = deposit_event.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deposit\"));\n    let topic1: Address = deposit_event.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic1, owner);\n\n    let (amount, new_balance): (i128, i128) = deposit_event.2.into_val(\u0026env);\n    assert_eq!(amount, 300);\n    assert_eq!(new_balance, 300);\n\n    // Balance check after event assertions\n    assert_eq!(client.balance(), 300);\n}\n\n/// Validates: Requirements 8.7, 4.2\n#[test]\nfn balance_unchanged_after_failed_deposit() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    // min_deposit = 50\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    // Mint enough for the owner to deposit later (after unpause)\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u002610_000);\n\n    let balance_before = client.balance();\n\n    // Scenario 1: unauthorized caller\n    let result = client.try_deposit(\u0026unauthorized, \u0026100);\n    assert!(result.is_err(), \"unauthorized caller must be rejected\");\n    assert_eq!(\n        client.balance(),\n        balance_before,\n        \"balance must be unchanged after unauthorized deposit\"\n    );\n\n    // Scenario 2: paused vault\n    client.pause(\u0026owner);\n    let result = client.try_deposit(\u0026owner, \u0026100);\n    assert!(result.is_err(), \"paused vault must reject deposit\");\n    assert_eq!(\n        client.balance(),\n        balance_before,\n        \"balance must be unchanged after paused deposit\"\n    );\n    client.unpause(\u0026owner);\n\n    // Scenario 3: below minimum (10 \u003c 50)\n    let result = client.try_deposit(\u0026owner, \u002610);\n    assert!(result.is_err(), \"below-minimum deposit must be rejected\");\n    assert_eq!(\n        client.balance(),\n        balance_before,\n        \"balance must be unchanged after below-minimum deposit\"\n    );\n}\n\n/// Validates: Requirements 5.1, 5.2, 5.3\n#[test]\nfn deposit_event_schema_alignment() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u002610_000);\n\n    client.deposit(\u0026owner, \u0026150);\n\n    let events = env.events().all();\n    let deposit_event = events\n        .iter()\n        .find(|e| {\n            if e.0 != vault_address {\n                return false;\n            }\n            if e.1.is_empty() {\n                return false;\n            }\n            let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n            s == Symbol::new(\u0026env, \"deposit\")\n        })\n        .expect(\"expected deposit event\");\n\n    // Schema alignment: exactly 2 topics (Symbol + caller Address)\n    assert_eq!(\n        deposit_event.1.len(),\n        2,\n        \"deposit event must have exactly 2 topics\"\n    );\n    let topic0: Symbol = deposit_event.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(\n        topic0,\n        Symbol::new(\u0026env, \"deposit\"),\n        \"topic[0] must be Symbol(\\\"deposit\\\")\"\n    );\n    let topic1: Address = deposit_event.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic1, owner, \"topic[1] must be the depositor address\");\n\n    // Data must decode as (amount: i128, new_balance: i128)\n    let (amount, new_balance): (i128, i128) = deposit_event.2.into_val(\u0026env);\n    assert_eq!(amount, 150, \"event data amount must match deposited amount\");\n    assert_eq!(\n        new_balance, 150,\n        \"event data new_balance must match vault balance\"\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Allowlist management tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn add_address_adds_single_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor1 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Add depositor\n    client.add_address(\u0026owner, \u0026depositor1);\n\n    // Verify depositor can deposit\n    usdc_admin.mint(\u0026depositor1, \u002650);\n    usdc_client.approve(\u0026depositor1, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor1, \u002650);\n    assert_eq!(client.balance(), 150);\n}\n\n#[test]\nfn add_address_prevents_duplicates() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Add same address twice\n    client.add_address(\u0026owner, \u0026depositor);\n    client.add_address(\u0026owner, \u0026depositor);\n\n    // Verify only one entry exists\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 1);\n    assert_eq!(allowlist.get(0).unwrap(), depositor);\n}\n\n#[test]\nfn add_address_multiple_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor1 = Address::generate(\u0026env);\n    let depositor2 = Address::generate(\u0026env);\n    let depositor3 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Add multiple depositors\n    client.add_address(\u0026owner, \u0026depositor1);\n    client.add_address(\u0026owner, \u0026depositor2);\n    client.add_address(\u0026owner, \u0026depositor3);\n\n    // Verify all can deposit\n    usdc_admin.mint(\u0026depositor1, \u002610);\n    usdc_client.approve(\u0026depositor1, \u0026vault_address, \u002610, \u00261000);\n    client.deposit(\u0026depositor1, \u002610);\n\n    usdc_admin.mint(\u0026depositor2, \u002620);\n    usdc_client.approve(\u0026depositor2, \u0026vault_address, \u002620, \u00261000);\n    client.deposit(\u0026depositor2, \u002620);\n\n    usdc_admin.mint(\u0026depositor3, \u002630);\n    usdc_client.approve(\u0026depositor3, \u0026vault_address, \u002630, \u00261000);\n    client.deposit(\u0026depositor3, \u002630);\n\n    assert_eq!(client.balance(), 160);\n\n    // Verify allowlist contains all three\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 3);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn add_address_non_owner_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let non_owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Non-owner tries to add address\n    client.add_address(\u0026non_owner, \u0026depositor);\n}\n\n#[test]\nfn add_address_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.add_address(\u0026owner, \u0026depositor);\n\n    let events = env.events().all();\n    let ev = events\n        .into_iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"allowlist_add\")\n            }\n        })\n        .expect(\"expected allowlist_add event\");\n\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(topic1, owner);\n    assert_eq!(topic2, depositor);\n}\n\n#[test]\nfn clear_all_removes_all_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor1 = Address::generate(\u0026env);\n    let depositor2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Add depositors\n    client.add_address(\u0026owner, \u0026depositor1);\n    client.add_address(\u0026owner, \u0026depositor2);\n\n    // Verify they exist\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 2);\n\n    // Clear all\n    client.clear_all(\u0026owner);\n\n    // Verify allowlist is empty\n    let allowlist_after = client.get_allowlist();\n    assert_eq!(allowlist_after.len(), 0);\n\n    // Verify depositors can no longer deposit\n    usdc_admin.mint(\u0026depositor1, \u002650);\n    usdc_client.approve(\u0026depositor1, \u0026vault_address, \u002650, \u00261000);\n    let result = client.try_deposit(\u0026depositor1, \u002650);\n    assert!(result.is_err(), \"expected error after clear_all\");\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn clear_all_non_owner_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let non_owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.add_address(\u0026owner, \u0026depositor);\n\n    // Non-owner tries to clear\n    client.clear_all(\u0026non_owner);\n}\n\n#[test]\nfn clear_all_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.add_address(\u0026owner, \u0026depositor);\n    client.clear_all(\u0026owner);\n\n    let events = env.events().all();\n    let ev = events\n        .into_iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"allowlist_clear\")\n            }\n        })\n        .expect(\"expected allowlist_clear event\");\n\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic1, owner);\n}\n\n#[test]\nfn clear_all_idempotent() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Clear when already empty\n    client.clear_all(\u0026owner);\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 0);\n\n    // Clear again\n    client.clear_all(\u0026owner);\n    let allowlist_after = client.get_allowlist();\n    assert_eq!(allowlist_after.len(), 0);\n}\n\n#[test]\nfn get_allowlist_returns_empty_when_not_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 0);\n}\n\n#[test]\nfn get_allowlist_returns_all_addresses() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor1 = Address::generate(\u0026env);\n    let depositor2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.add_address(\u0026owner, \u0026depositor1);\n    client.add_address(\u0026owner, \u0026depositor2);\n\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 2);\n    assert!(allowlist.contains(\u0026depositor1));\n    assert!(allowlist.contains(\u0026depositor2));\n}\n\n#[test]\nfn owner_always_permitted_regardless_of_allowlist() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Owner can deposit without being in allowlist\n    usdc_admin.mint(\u0026owner, \u002650);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026owner, \u002650);\n    assert_eq!(client.balance(), 150);\n\n    // Clear allowlist\n    client.clear_all(\u0026owner);\n\n    // Owner can still deposit\n    usdc_admin.mint(\u0026owner, \u002625);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002625, \u00261000);\n    client.deposit(\u0026owner, \u002625);\n    assert_eq!(client.balance(), 175);\n}\n\n#[test]\nfn add_address_after_clear_all() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor1 = Address::generate(\u0026env);\n    let depositor2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Add and clear\n    client.add_address(\u0026owner, \u0026depositor1);\n    client.clear_all(\u0026owner);\n\n    // Add new depositor\n    client.add_address(\u0026owner, \u0026depositor2);\n\n    let allowlist = client.get_allowlist();\n    assert_eq!(allowlist.len(), 1);\n    assert_eq!(allowlist.get(0).unwrap(), depositor2);\n\n    // Verify depositor2 can deposit\n    usdc_admin.mint(\u0026depositor2, \u002650);\n    usdc_client.approve(\u0026depositor2, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor2, \u002650);\n    assert_eq!(client.balance(), 150);\n\n    // Verify depositor1 cannot deposit\n    usdc_admin.mint(\u0026depositor1, \u002650);\n    usdc_client.approve(\u0026depositor1, \u0026vault_address, \u002650, \u00261000);\n    let result = client.try_deposit(\u0026depositor1, \u002650);\n    assert!(result.is_err(), \"depositor1 should not be able to deposit\");\n}\n\n// ---------------------------------------------------------------------------\n// Allowed depositor management tests (backward compatibility)\n// ---------------------------------------------------------------------------\n\n#[test]\nfn owner_can_set_and_clear_allowed_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Set depositor\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor, \u002650);\n    assert_eq!(client.balance(), 150);\n\n    // Clear depositor\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    // Owner can still deposit\n    usdc_admin.mint(\u0026owner, \u002625);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002625, \u00261000);\n    client.deposit(\u0026owner, \u002625);\n    assert_eq!(client.balance(), 175);\n}\n\n#[test]\nfn set_allowed_depositor_duplicate_is_ignored() {\n    // Adding the same depositor twice should not create a duplicate entry\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone())); // duplicate should be a no-op\n\n    let list = client.get_allowed_depositors();\n    assert_eq!(list.len(), 1);\n\n    // depositor can still deposit exactly once (list not doubled)\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    assert_eq!(client.deposit(\u0026depositor, \u002650), 150);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn non_owner_cannot_set_allowed_depositor() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let non_owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026non_owner, \u0026Some(depositor));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: only owner or allowed depositor can deposit\")]\nfn deposit_after_depositor_cleared_is_rejected() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    client.deposit(\u0026depositor, \u002650);\n}\n\n// ---------------------------------------------------------------------------\n// Pause tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn pause_unpause_admin_only() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // intruder fails\n    let res = client.try_pause(\u0026intruder);\n    assert!(res.is_err());\n\n    // admin (owner) succeeds\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    // intruder fails unpause\n    let res = client.try_unpause(\u0026intruder);\n    assert!(res.is_err());\n\n    // admin (owner) succeeds unpause\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn pause_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.pause(\u0026owner);\n    let events = env.events().all();\n    let pause_event = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address\n                \u0026\u0026 e.1\n                    .get(0)\n                    .map(|v| {\n                        let s: Symbol = v.into_val(\u0026env);\n                        s == Symbol::new(\u0026env, \"vault_paused\")\n                    })\n                    .unwrap_or(false)\n        })\n        .expect(\"expected pause event\");\n\n    let admin_topic: Address = pause_event.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(admin_topic, owner);\n}\n\n// ---------------------------------------------------------------------------\n// Deduct tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_authorized_caller_sets_and_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 200);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(200), \u0026None, \u0026None, \u0026None, \u0026None);\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.set_authorized_caller(\u0026Some(new_caller.clone()));\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected set_authorized_caller event\");\n    assert_eq!(ev.1.len(), 2);\n\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_authorized_caller\"));\n    assert_eq!(topic1, owner);\n\n    let (old, now): (Option\u003cAddress\u003e, Option\u003cAddress\u003e) = ev.2.into_val(\u0026env);\n    assert_eq!(old, None);\n    assert_eq!(now, Some(new_caller.clone()));\n\n    let remaining = client.deduct(\u0026new_caller, \u002650, \u0026None);\n    assert_eq!(remaining, 150);\n}\n\n#[test]\nfn deduct_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let returned = client.deduct(\u0026caller, \u002650, \u0026None);\n    assert_eq!(returned, 250);\n    assert_eq!(client.balance(), 250);\n}\n\n#[test]\nfn deduct_with_request_id() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let remaining = client.deduct(\u0026caller, \u0026100, \u0026Some(Symbol::new(\u0026env, \"req123\")));\n    assert_eq!(remaining, 900);\n}\n\n#[test]\nfn deduct_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 10);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(10),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let result = client.try_deduct(\u0026caller, \u0026100, \u0026None);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n#[test]\nfn deduct_exact_balance_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 75);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(75),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let remaining = client.deduct(\u0026caller, \u002675, \u0026None);\n    assert_eq!(remaining, 0);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn deduct_event_contains_request_id() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let request_id = Symbol::new(\u0026env, \"api_call_42\");\n    client.deduct(\u0026caller, \u0026150, \u0026Some(request_id.clone()));\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected deduct event\");\n\n    assert_eq!(ev.1.len(), 3, \"deduct event must always have 3 topics\");\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    let topic2: Symbol = ev.1.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deduct\"));\n    assert_eq!(topic1, caller);\n    assert_eq!(topic2, request_id);\n\n    let (emitted_amount, remaining): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(emitted_amount, 150);\n    assert_eq!(remaining, 350);\n}\n\n#[test]\nfn deduct_event_no_request_id_uses_empty_symbol() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(300),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected deduct event\");\n\n    assert_eq!(ev.1.len(), 3, \"deduct event must always have 3 topics\");\n    let topic0: Symbol = ev.1.get(0).unwrap().into_val(\u0026env);\n    let topic1: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    let topic2: Symbol = ev.1.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"deduct\"));\n    assert_eq!(topic1, caller);\n    assert_eq!(topic2, Symbol::new(\u0026env, \"\"));\n    let (emitted_amount, remaining): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(emitted_amount, 100);\n    assert_eq!(remaining, 200);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deduct_zero_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u00260, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn deduct_negative_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026-50, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"insufficient balance\")]\nfn deduct_exceeds_balance_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 50);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(50),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.deduct(\u0026caller, \u0026100, \u0026None);\n}\n\n#[test]\nfn balance_unchanged_after_failed_deduct() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let _ = client.try_deduct(\u0026caller, \u0026200, \u0026None);\n    assert_eq!(client.balance(), 100);\n}\n\n// ---------------------------------------------------------------------------\n// Batch deduct tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn batch_deduct_multiple_items() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: Some(Symbol::new(\u0026env, \"req1\"))\n        },\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: Some(Symbol::new(\u0026env, \"req2\"))\n        },\n    ];\n\n    let remaining = client.batch_deduct(\u0026caller, \u0026items);\n    assert_eq!(remaining, 650);\n    assert_eq!(client.balance(), 650);\n}\n\n#[test]\nfn batch_deduct_events_contain_request_ids() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let rid_a = Symbol::new(\u0026env, \"batch_a\");\n    let rid_b = Symbol::new(\u0026env, \"batch_b\");\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: Some(rid_a.clone())\n        },\n        DeductItem {\n            amount: 300,\n            request_id: Some(rid_b.clone())\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    // Filter to the two deduct events emitted by the vault (topic 0 == \"deduct\").\n    // The settlement transfer emits an additional event after the deducts.\n    let deduct_sym = Symbol::new(\u0026env, \"deduct\");\n    let deduct_events: std::vec::Vec\u003c_\u003e = env\n        .events()\n        .all()\n        .iter()\n        .filter(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == deduct_sym\n            }\n        })\n        .collect();\n    assert_eq!(deduct_events.len(), 2, \"expected exactly two deduct events\");\n    let ev_a = \u0026deduct_events[0];\n    let ev_b = \u0026deduct_events[1];\n\n    let req_a: Symbol = ev_a.1.get(2).unwrap().into_val(\u0026env);\n    let req_b: Symbol = ev_b.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(req_a, rid_a);\n    assert_eq!(req_b, rid_b);\n\n    let (amt_a, _): (i128, i128) = ev_a.2.into_val(\u0026env);\n    let (amt_b, _): (i128, i128) = ev_b.2.into_val(\u0026env);\n    assert_eq!(amt_a, 200);\n    assert_eq!(amt_b, 300);\n}\n\n#[test]\nfn batch_deduct_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 80,\n            request_id: None\n        },\n    ];\n\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for batch overdraw\");\n    // Balance must be unchanged on failure\n    assert_eq!(client.balance(), 100);\n}\n\n#[test]\nfn batch_deduct_empty_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let items: soroban_sdk::Vec\u003cDeductItem\u003e = soroban_sdk::vec![\u0026env];\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for empty batch\");\n}\n\n#[test]\nfn batch_deduct_zero_amount_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(100),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 0,\n            request_id: None\n        }\n    ];\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected error for zero amount item\");\n}\n\n#[test]\nfn batch_deduct_too_large_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 10_000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(10_000), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Build a batch of MAX_BATCH_SIZE + 1 items\n    let mut items = soroban_sdk::Vec::new(\u0026env);\n    for _ in 0..=crate::MAX_BATCH_SIZE {\n        items.push_back(DeductItem {\n            amount: 1,\n            request_id: None,\n        });\n    }\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected error for oversized batch\");\n}\n\n#[test]\nfn batch_deduct_fail_mid_batch_leaves_balance_unchanged() {\n    // Second item exceeds balance - entire batch must revert.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 60,\n            request_id: None\n        },\n        DeductItem {\n            amount: 60,\n            request_id: None\n        }, // cumulative 120 \u003e 100\n    ];\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected insufficient balance error\");\n    // Balance must be completely unchanged\n    assert_eq!(client.balance(), 100);\n}\n\n#[test]\nfn batch_deduct_fail_mid_batch_has_no_transfer_or_deduct_events() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(100),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let deduct_events_before = env\n        .events()\n        .all()\n        .iter()\n        .filter(|e| {\n            !e.1.is_empty() \u0026\u0026 {\n                let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                s == Symbol::new(\u0026env, \"deduct\")\n            }\n        })\n        .count();\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 60,\n            request_id: Some(Symbol::new(\u0026env, \"x1\"))\n        },\n        DeductItem {\n            amount: 60,\n            request_id: Some(Symbol::new(\u0026env, \"x2\"))\n        },\n    ];\n\n    let result = client.try_batch_deduct(\u0026caller, \u0026items);\n    assert!(result.is_err(), \"expected insufficient balance error\");\n\n    assert_eq!(client.balance(), 100);\n    assert_eq!(usdc_client.balance(\u0026settlement), 0);\n\n    let deduct_events_after = env\n        .events()\n        .all()\n        .iter()\n        .filter(|e| {\n            !e.1.is_empty() \u0026\u0026 {\n                let s: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                s == Symbol::new(\u0026env, \"deduct\")\n            }\n        })\n        .count();\n    assert_eq!(deduct_events_after, deduct_events_before);\n}\n\n// ---------------------------------------------------------------------------\n// Withdraw tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn withdraw_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let remaining = client.withdraw(\u0026200);\n    assert_eq!(remaining, 300);\n    assert_eq!(client.balance(), 300);\n}\n\n#[test]\nfn withdraw_full_balance_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(1000), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let remaining = client.withdraw(\u00261000);\n    assert_eq!(remaining, 0);\n    assert_eq!(client.balance(), 0);\n}\n\n#[test]\nfn withdraw_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_withdraw(\u0026500);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n#[test]\nfn withdraw_zero_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_withdraw(\u00260);\n    assert!(result.is_err(), \"expected error for zero amount\");\n}\n\n#[test]\nfn withdraw_to_reduces_balance() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let remaining = client.withdraw_to(\u0026recipient, \u0026150);\n    assert_eq!(remaining, 350);\n    assert_eq!(client.balance(), 350);\n    assert_eq!(usdc_client.balance(\u0026recipient), 150);\n}\n\n#[test]\nfn withdraw_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let _intruder = Address::generate(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    let (vault_address, client) = create_vault(\u0026env);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(1000), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Reset auths to test requirement without mock_all_auths bypassing it\n    env.set_auths(\u0026[]);\n    let res = client.try_withdraw(\u0026500);\n    assert!(res.is_err());\n}\n\n#[test]\nfn withdraw_to_insufficient_balance_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_withdraw_to(\u0026recipient, \u0026500);\n    assert!(result.is_err(), \"expected error for insufficient balance\");\n}\n\n// ---------------------------------------------------------------------------\n// Transfer ownership tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn transfer_ownership_two_step_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.transfer_ownership(\u0026new_owner);\n    let meta = client.get_meta();\n    assert_eq!(meta.owner, owner); // Still old owner\n\n    client.accept_ownership();\n    let meta2 = client.get_meta();\n    assert_eq!(meta2.owner, new_owner);\n}\n\n#[test]\nfn transfer_ownership_emits_events() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.transfer_ownership(\u0026new_owner);\n\n    let events = env.events().all();\n    let nomad_ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"ownership_nominated\")\n            }\n        })\n        .expect(\"expected ownership_nominated event\");\n\n    let old_n: Address = nomad_ev.1.get(1).unwrap().into_val(\u0026env);\n    let new_n: Address = nomad_ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(old_n, owner);\n    assert_eq!(new_n, new_owner);\n\n    client.accept_ownership();\n    let events2 = env.events().all();\n    let accept_ev = events2\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"ownership_accepted\")\n            }\n        })\n        .expect(\"expected ownership_accepted event\");\n\n    let old_a: Address = accept_ev.1.get(1).unwrap().into_val(\u0026env);\n    let new_a: Address = accept_ev.1.get(2).unwrap().into_val(\u0026env);\n    assert_eq!(old_a, owner);\n    assert_eq!(new_a, new_owner);\n}\n\n#[test]\n#[should_panic(expected = \"new_owner must be different from current owner\")]\nfn transfer_ownership_same_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.transfer_ownership(\u0026owner);\n}\n\n// ---------------------------------------------------------------------------\n// Distribute tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn distribute_transfers_usdc_to_recipient() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.distribute(\u0026admin, \u0026developer, \u0026300);\n\n    assert_eq!(usdc_client.balance(\u0026developer), 300);\n    assert_eq!(usdc_client.balance(\u0026vault_address), 700);\n}\n\n#[test]\nfn distribute_unauthorized_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let intruder = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026intruder, \u0026developer, \u0026300);\n    assert!(result.is_err(), \"expected error when non-admin distributes\");\n}\n\n#[test]\nfn distribute_insufficient_usdc_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026admin, \u0026developer, \u0026500);\n    assert!(result.is_err(), \"expected error for insufficient USDC\");\n}\n\n#[test]\nfn distribute_zero_amount_fails() {\n    let env = Env::default();\n    let admin = Address::generate(\u0026env);\n    let developer = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026admin);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026admin, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_distribute(\u0026admin, \u0026developer, \u00260);\n    assert!(result.is_err(), \"expected error for zero amount\");\n}\n\n// ---------------------------------------------------------------------------\n// Offering metadata tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_and_retrieve_metadata() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-001\");\n    let metadata = String::from_str(\u0026env, \"QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco\");\n\n    let result = client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(result, metadata);\n\n    let retrieved = client.get_metadata(\u0026offering_id);\n    assert_eq!(retrieved, Some(metadata));\n}\n\n#[test]\nfn set_metadata_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-002\");\n    let metadata = String::from_str(\n        \u0026env,\n        \"bafybeigdyrzt5sfp7udm7hu76uh7y26nf3efuylqabf3oclgtqy55fbzdi\",\n    );\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_set event\");\n\n    assert_eq!(ev.0, vault_address);\n    let topics = \u0026ev.1;\n    assert_eq!(topics.len(), 3);\n\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: String = topics.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = topics.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"metadata_set\"));\n    assert_eq!(topic1, offering_id);\n    assert_eq!(topic2, owner);\n\n    let data: String = ev.2.into_val(\u0026env);\n    assert_eq!(data, metadata);\n}\n\n#[test]\nfn update_metadata_and_verify() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-003\");\n    let old_metadata = String::from_str(\u0026env, \"QmOldMetadata123\");\n    let new_metadata = String::from_str(\u0026env, \"QmNewMetadata456\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026old_metadata);\n    let result = client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n    assert_eq!(result, new_metadata);\n\n    let retrieved = client.get_metadata(\u0026offering_id);\n    assert_eq!(retrieved, Some(new_metadata));\n}\n\n#[test]\nfn update_metadata_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-004\");\n    let old_metadata = String::from_str(\u0026env, \"https://example.com/old.json\");\n    let new_metadata = String::from_str(\u0026env, \"https://example.com/new.json\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026old_metadata);\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_updated event\");\n\n    assert_eq!(ev.0, vault_address);\n    let topics = \u0026ev.1;\n    assert_eq!(topics.len(), 3);\n\n    let topic0: Symbol = topics.get(0).unwrap().into_val(\u0026env);\n    let topic1: String = topics.get(1).unwrap().into_val(\u0026env);\n    let topic2: Address = topics.get(2).unwrap().into_val(\u0026env);\n\n    assert_eq!(topic0, Symbol::new(\u0026env, \"metadata_updated\"));\n    assert_eq!(topic1, offering_id);\n    assert_eq!(topic2, owner);\n\n    let data: (String, String) = ev.2.into_val(\u0026env);\n    assert_eq!(data.0, old_metadata);\n    assert_eq!(data.1, new_metadata);\n}\n\n#[test]\nfn update_metadata_without_existing_uses_empty_old() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-006\");\n    let new_metadata = String::from_str(\u0026env, \"QmNewMetadataOnly\");\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026new_metadata);\n\n    let events = env.events().all();\n    let ev = events.last().expect(\"expected metadata_updated event\");\n\n    assert_eq!(ev.0, vault_address);\n    let data: (String, String) = ev.2.into_val(\u0026env);\n    assert_eq!(data.0, String::from_str(\u0026env, \"\"));\n    assert_eq!(data.1, new_metadata);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: owner only\")]\nfn unauthorized_cannot_set_metadata() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let unauthorized = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-005\");\n    let metadata = String::from_str(\u0026env, \"QmSomeMetadata\");\n    client.set_metadata(\u0026unauthorized, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\nfn set_metadata_max_length_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"a\".repeat(64).as_str());\n    let metadata = String::from_str(\u0026env, \"b\".repeat(256).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata));\n}\n\n#[test]\n#[should_panic(expected = \"metadata exceeds max length\")]\nfn set_metadata_exceeds_length_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"off-1\");\n    let metadata = String::from_str(\u0026env, \"b\".repeat(257).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\n#[should_panic(expected = \"offering_id exceeds max length\")]\nfn set_offering_id_exceeds_length_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"a\".repeat(65).as_str());\n    let metadata = String::from_str(\u0026env, \"meta\");\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n}\n\n#[test]\nfn update_metadata_max_length_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"offering-update\");\n    let metadata = String::from_str(\u0026env, \"b\".repeat(256).as_str());\n\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"old\"));\n    client.update_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata));\n}\n\n#[test]\nfn metadata_remains_after_ownership_transfer() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let offering_id = String::from_str(\u0026env, \"off-transfer\");\n    let metadata = String::from_str(\u0026env, \"ipfs://cid123\");\n    client.set_metadata(\u0026owner, \u0026offering_id, \u0026metadata);\n\n    client.transfer_ownership(\u0026new_owner);\n    client.accept_ownership();\n\n    // Metadata should still be accessible\n    assert_eq!(client.get_metadata(\u0026offering_id), Some(metadata.clone()));\n\n    // Old owner should no longer be able to update it\n    let update_res =\n        client.try_update_metadata(\u0026owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"new\"));\n    assert!(update_res.is_err());\n\n    // New owner should be able to update it\n    client.update_metadata(\u0026new_owner, \u0026offering_id, \u0026String::from_str(\u0026env, \"new\"));\n    assert_eq!(\n        client.get_metadata(\u0026offering_id),\n        Some(String::from_str(\u0026env, \"new\"))\n    );\n}\n\n// ---------------------------------------------------------------------------\n// Full lifecycle test\n// ---------------------------------------------------------------------------\n\n#[test]\nfn vault_full_lifecycle() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n\n    // Init with 500 balance, min_deposit = 10\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let meta = client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026Some(caller.clone()),\n        \u0026Some(10),\n        \u0026None,\n        \u0026None,\n    );\n    assert_eq!(meta.balance, 500);\n    assert_eq!(meta.owner, owner);\n    assert_eq!(client.balance(), 500);\n    assert_eq!(client.get_admin(), owner);\n\n    // Configure settlement address (precondition for deduct/batch_deduct)\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    // Allow depositor and deposit 200\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    usdc_admin.mint(\u0026depositor, \u0026200);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u0026200, \u00261000);\n    let after_deposit = client.deposit(\u0026depositor, \u0026200);\n    assert_eq!(after_deposit, 700);\n    assert_eq!(client.balance(), 700);\n\n    // Batch deduct 100 + 50 + 25 = 175\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: Some(Symbol::new(\u0026env, \"r1\"))\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 25,\n            request_id: Some(Symbol::new(\u0026env, \"r3\"))\n        },\n    ];\n    let after_batch = client.batch_deduct(\u0026caller, \u0026items);\n    assert_eq!(after_batch, 525);\n    assert_eq!(client.balance(), 525);\n\n    // Single deduct\n    let after_deduct = client.deduct(\u0026caller, \u002625, \u0026Some(Symbol::new(\u0026env, \"r4\")));\n    assert_eq!(after_deduct, 500);\n\n    // Admin change\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    assert_eq!(client.get_admin(), new_admin);\n\n    // Withdraw to recipient\n    let after_withdraw_to = client.withdraw_to(\u0026recipient, \u0026100);\n    assert_eq!(after_withdraw_to, 400);\n    assert_eq!(client.balance(), 400);\n\n    // Withdraw to owner\n    let after_withdraw = client.withdraw(\u002650);\n    assert_eq!(after_withdraw, 350);\n    assert_eq!(client.balance(), 350);\n\n    let final_meta = client.get_meta();\n    assert_eq!(final_meta.balance, 350);\n    assert_eq!(final_meta.owner, owner);\n    assert_eq!(final_meta.min_deposit, 10);\n}\n\n// ---------------------------------------------------------------------------\n// Revenue pool integration tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn init_with_revenue_pool_stores_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(500),\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n\n    assert_eq!(client.balance(), 500);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn deduct_with_only_revenue_pool_panics() {\n    // Revenue pool is no longer a deduct destination; settlement is mandatory.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    client.deduct(\u0026caller, \u0026300, \u0026None);\n}\n\n#[test]\nfn deduct_with_settlement_transfers_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 800);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(800),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026250, \u0026None);\n\n    assert_eq!(client.balance(), 550);\n    assert_eq!(usdc_client.balance(\u0026settlement), 250);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn batch_deduct_with_only_revenue_pool_panics() {\n    // Revenue pool is no longer a deduct destination; settlement is mandatory.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 150,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n}\n\n#[test]\nfn batch_deduct_with_settlement_transfers_total_usdc() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026Some(500),\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 150,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026caller, \u0026items);\n\n    assert_eq!(client.balance(), 650);\n    assert_eq!(usdc_client.balance(\u0026settlement), 350);\n}\n\n// ---------------------------------------------------------------------------\n// set_revenue_pool / get_revenue_pool tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_revenue_pool_stores_and_get_returns_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    assert_eq!(client.get_revenue_pool(), Some(revenue_pool));\n}\n\n#[test]\nfn set_revenue_pool_clear_removes_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_revenue_pool(\u0026owner, \u0026None);\n\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn set_revenue_pool_update_replaces_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let old_pool = Address::generate(\u0026env);\n    let new_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(old_pool), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(new_pool.clone()));\n\n    assert_eq!(client.get_revenue_pool(), Some(new_pool));\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_revenue_pool_unauthorized_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_revenue_pool(\u0026attacker, \u0026Some(revenue_pool));\n}\n\n#[test]\nfn get_revenue_pool_returns_none_when_not_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn get_revenue_pool_returns_correct_after_update() {\n    // Verify get_revenue_pool reflects latest committed state after multiple updates\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool1 = Address::generate(\u0026env);\n    let pool2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Set first revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool1.clone()));\n    assert_eq!(client.get_revenue_pool(), Some(pool1));\n\n    // Update to second revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool2.clone()));\n    assert_eq!(client.get_revenue_pool(), Some(pool2));\n}\n\n#[test]\nfn get_revenue_pool_returns_none_after_clear() {\n    // Ensure get_revenue_pool returns None after clearing\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n    assert_eq!(client.get_revenue_pool(), Some(pool));\n\n    // Clear revenue pool\n    client.set_revenue_pool(\u0026owner, \u0026None);\n    assert_eq!(client.get_revenue_pool(), None);\n}\n\n#[test]\nfn get_revenue_pool_consistent_after_deduct_operations() {\n    // Ensure get_revenue_pool remains consistent and doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    // Query revenue pool before deduct\n    let before = client.get_revenue_pool();\n    assert_eq!(before, Some(revenue_pool.clone()));\n\n    // Perform deduct operation (routes to settlement, not revenue_pool)\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n\n    // Query revenue pool after deduct - should be unchanged\n    let after = client.get_revenue_pool();\n    assert_eq!(after, Some(revenue_pool.clone()));\n    assert_eq!(before, after);\n\n    // Funds flow to settlement; revenue_pool receives nothing.\n    assert_eq!(client.balance(), 800);\n    assert_eq!(usdc_client.balance(\u0026settlement), 200);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 0);\n}\n\n#[test]\nfn get_revenue_pool_no_mutation_on_multiple_calls() {\n    // Verify calling get_revenue_pool multiple times doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    let initial_balance = client.balance();\n\n    // Call get_revenue_pool multiple times\n    for _ in 0..10 {\n        let result = client.get_revenue_pool();\n        assert_eq!(result, Some(pool.clone()));\n    }\n\n    // Verify balance unchanged (no mutation)\n    assert_eq!(client.balance(), initial_balance);\n}\n\n#[test]\nfn get_revenue_pool_consistency_with_zero_balance() {\n    // Ensure get_revenue_pool works correctly with zero vault balance\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    // Balance should be zero\n    assert_eq!(client.balance(), 0);\n\n    // Revenue pool should still be queryable\n    assert_eq!(client.get_revenue_pool(), Some(pool));\n}\n\n#[test]\nfn deposit_max_balance_overflow_panic() {\n    // Explicit test for max-balance overflow near i128::MAX.\n    // Exercises the checked_add(...).unwrap_or_else(|| panic!(\"balance overflow\")) path.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n\n    // 1. Setup vault balance near i128::MAX\n    let near_max = i128::MAX - 1;\n    let overflow_amount = 2;\n\n    fund_vault(\u0026usdc_admin, \u0026vault_address, near_max);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(near_max), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // 2. Prepare overflow deposit\n    usdc_admin.mint(\u0026owner, \u0026overflow_amount);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026overflow_amount, \u00261000);\n\n    // 3. Confirm it panics safely on overflow\n    let result = client.try_deposit(\u0026owner, \u0026overflow_amount);\n    assert!(\n        result.is_err(),\n        \"contract must fail safely when balance would overflow i128::MAX\"\n    );\n}\n\n#[test]\nfn get_revenue_pool_after_multiple_sequential_updates() {\n    // Test multiple sequential set/clear operations before query\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool1 = Address::generate(\u0026env);\n    let pool2 = Address::generate(\u0026env);\n    let pool3 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Multiple sequential updates\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool1.clone()));\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool2.clone()));\n    client.set_revenue_pool(\u0026owner, \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(pool3.clone()));\n\n    // Should reflect final committed state\n    assert_eq!(client.get_revenue_pool(), Some(pool3));\n}\n\n#[test]\nfn deduct_routes_to_settlement_when_both_configured() {\n    // settlement takes priority over revenue_pool when both are set\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026Some(revenue_pool.clone()),\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026caller, \u0026400, \u0026None);\n\n    // settlement gets the funds, revenue_pool gets nothing\n    assert_eq!(usdc_client.balance(\u0026settlement), 400);\n    assert_eq!(usdc_client.balance(\u0026revenue_pool), 0);\n}\n\n#[test]\nfn set_revenue_pool_emits_event_on_set() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026Some(revenue_pool.clone()));\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_revenue_pool\"));\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, revenue_pool);\n}\n\n#[test]\nfn set_revenue_pool_emits_event_on_clear() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let revenue_pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(revenue_pool),\n        \u0026None,\n    );\n    client.set_revenue_pool(\u0026owner, \u0026None);\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"clear_revenue_pool\"));\n}\n\n// ---------------------------------------------------------------------------\n// set_settlement / get_settlement tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn set_settlement_stores_and_get_returns_address() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    assert_eq!(client.get_settlement(), settlement);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin\")]\nfn set_settlement_unauthorized_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_settlement(\u0026attacker, \u0026settlement);\n}\n\n#[test]\nfn set_settlement_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let events = env.events().all();\n    let last = events.last().unwrap();\n    let topic0: Symbol = last.1.get(0).unwrap().into_val(\u0026env);\n    assert_eq!(topic0, Symbol::new(\u0026env, \"set_settlement\"));\n    let topic1: Address = last.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(topic1, owner);\n    let data: Address = last.2.into_val(\u0026env);\n    assert_eq!(data, settlement);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn get_settlement_before_set_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.get_settlement();\n}\n\n#[test]\nfn get_settlement_returns_correct_after_update() {\n    // Verify get_settlement reflects latest committed state after multiple updates\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement1 = Address::generate(\u0026env);\n    let settlement2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    // Set first settlement address\n    client.set_settlement(\u0026owner, \u0026settlement1);\n    assert_eq!(client.get_settlement(), settlement1);\n\n    // Update to second settlement address\n    client.set_settlement(\u0026owner, \u0026settlement2);\n    assert_eq!(client.get_settlement(), settlement2);\n}\n\n#[test]\nfn get_settlement_consistent_after_deduct_operations() {\n    // Ensure get_settlement remains consistent and doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let caller = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026Some(caller.clone()),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    // Query settlement before deduct\n    let before = client.get_settlement();\n    assert_eq!(before, settlement);\n\n    // Perform deduct operation\n    client.deduct(\u0026caller, \u0026200, \u0026None);\n\n    // Query settlement after deduct - should be unchanged\n    let after = client.get_settlement();\n    assert_eq!(after, settlement);\n    assert_eq!(before, after);\n\n    // Verify no state mutation occurred\n    assert_eq!(client.balance(), 800);\n    assert_eq!(usdc_client.balance(\u0026settlement), 200);\n}\n\n#[test]\nfn get_settlement_no_mutation_on_multiple_calls() {\n    // Verify calling get_settlement multiple times doesn't mutate state\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let initial_balance = client.balance();\n\n    // Call get_settlement multiple times\n    for _ in 0..10 {\n        let result = client.get_settlement();\n        assert_eq!(result, settlement);\n    }\n\n    // Verify balance unchanged (no mutation)\n    assert_eq!(client.balance(), initial_balance);\n}\n\n#[test]\nfn test_clear_allowed_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026None);\n\n    usdc_admin.mint(\u0026depositor, \u002650);\n    usdc_client.approve(\u0026depositor, \u0026vault_address, \u002650, \u00261000);\n    let result = client.try_deposit(\u0026depositor, \u002650);\n    assert!(result.is_err());\n}\n\n#[test]\nfn test_set_authorized_caller() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let auth_caller = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.set_authorized_caller(\u0026Some(auth_caller.clone()));\n    let meta = client.get_meta();\n    assert_eq!(meta.authorized_caller, Some(auth_caller));\n}\n\n#[test]\nfn test_deduct_with_settlement_success() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc_address, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\n        \u0026owner,\n        \u0026usdc_address,\n        \u0026Some(1000),\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    client.deduct(\u0026owner, \u0026300, \u0026None);\n\n    assert_eq!(client.balance(), 700);\n    assert_eq!(usdc_client.balance(\u0026settlement), 300);\n}\n\n// ---------------------------------------------------------------------------\n// Checked arithmetic — overflow / underflow boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deposit_near_i128_max_succeeds() {\n    // Verify that a balance sitting just below i128::MAX can accept one more deposit.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    // Start with i128::MAX - 100 so there is headroom for a 100-unit deposit.\n    let initial: i128 = i128::MAX - 100;\n    fund_vault(\u0026usdc_admin, \u0026vault_address, initial);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(initial), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026100);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026100, \u00261000);\n    let new_balance = client.deposit(\u0026owner, \u0026100);\n    assert_eq!(new_balance, i128::MAX);\n}\n\n#[test]\nfn deposit_overflow_panics() {\n    // A deposit that would push balance past i128::MAX must panic.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, i128::MAX);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(i128::MAX), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261, \u00261000);\n    let result = client.try_deposit(\u0026owner, \u00261);\n    assert!(result.is_err(), \"expected overflow panic\");\n}\n\n#[test]\nfn deduct_to_zero_succeeds() {\n    // Deducting the entire balance should leave exactly 0, not underflow.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    assert_eq!(client.deduct(\u0026owner, \u0026500, \u0026None), 0);\n}\n\n#[test]\nfn withdraw_to_zero_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(300), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    assert_eq!(client.withdraw(\u0026300), 0);\n}\n\n#[test]\nfn withdraw_near_i128_max_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    let initial: i128 = i128::MAX - 100;\n    fund_vault(\u0026usdc_admin, \u0026vault_address, initial);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(initial), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let remaining = client.withdraw(\u0026(initial - 1));\n    assert_eq!(remaining, 1);\n}\n\n#[test]\nfn batch_deduct_to_zero_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    usdc_admin.mint(\u0026owner, \u0026600);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026600, \u00261000);\n    client.deposit(\u0026owner, \u0026600);\n\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n        DeductItem {\n            amount: 200,\n            request_id: None\n        },\n    ];\n    assert_eq!(client.batch_deduct(\u0026owner, \u0026items), 0);\n}\n\n// ---------------------------------------------------------------------------\n// Issue #108 — set_allowed_depositor: duplicate add, clear, unauthorized\n// ---------------------------------------------------------------------------\n\n#[test]\nfn clear_allowed_depositors_removes_all() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let d1 = Address::generate(\u0026env);\n    let d2 = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d1.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d2.clone()));\n    client.clear_allowed_depositors(\u0026owner);\n\n    // Neither address should be able to deposit after clear.\n    usdc_admin.mint(\u0026d1, \u002610);\n    usdc_client.approve(\u0026d1, \u0026vault_address, \u002610, \u00261000);\n    assert!(client.try_deposit(\u0026d1, \u002610).is_err());\n}\n\n#[test]\nfn clear_allowed_depositors_on_empty_is_noop() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    // Must not panic on empty list.\n    client.clear_allowed_depositors(\u0026owner);\n    assert_eq!(client.get_allowed_depositors().len(), 0);\n}\n\n#[test]\nfn non_owner_cannot_set_allowed_depositor_issue108() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_set_allowed_depositor(\u0026attacker, \u0026Some(depositor.clone()));\n    assert!(result.is_err(), \"non-owner must not mutate allowlist\");\n}\n\n#[test]\nfn non_owner_cannot_clear_allowed_depositors() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let depositor = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    client.set_allowed_depositor(\u0026owner, \u0026Some(depositor.clone()));\n    let result = client.try_clear_allowed_depositors(\u0026attacker);\n    assert!(result.is_err(), \"non-owner must not clear allowlist\");\n}\n\n// ---------------------------------------------------------------------------\n// Token transfer failure modes — documented limitations\n// ---------------------------------------------------------------------------\n//\n// # Manual Test Plan: Transfer Failure Modes\n//\n// The Soroban test harness (soroban-sdk testutils) does not provide a mechanism\n// to inject token-level failures (e.g. simulate a transfer revert mid-call).\n// The following failure modes are therefore documented here for manual / fuzzing\n// verification rather than automated unit tests:\n//\n// 1. **deposit: transfer from caller fails** — if the caller has insufficient\n//    USDC balance or has not approved the vault, the token contract panics and\n//    the deposit reverts atomically (no balance change).\n//\n// 2. **withdraw / withdraw_to: transfer to recipient fails** — if the vault's\n//    on-chain USDC balance is lower than the tracked `meta.balance` (e.g. due\n//    to a direct token transfer out), the token transfer panics. The vault\n//    balance is NOT updated in this case (state write happens after transfer).\n//\n// 3. **deduct → settlement transfer fails** — if the settlement address has no\n//    trustline or the vault's USDC balance is insufficient, the token transfer\n//    panics. The vault balance IS already written before the transfer; callers\n//    should treat a panic here as a critical invariant violation.\n//\n// 4. **deduct → revenue_pool transfer fails** — same as (3) for revenue_pool.\n//\n// 5. **distribute: transfer fails** — guarded by an explicit `vault_balance \u003c amount`\n//    check before the transfer; covered by `distribute_insufficient_usdc_fails`.\n//\n// All paths above are covered by the checked-arithmetic and balance-guard tests\n// below. The highest-risk external calls (deduct routing) are covered by the\n// integration tests `deduct_with_settlement_transfers_usdc` and\n// `deduct_with_revenue_pool_transfers_usdc`.\n\n// ---------------------------------------------------------------------------\n// Additional edge-case tests to reach ≥ 95 % line coverage\n// ---------------------------------------------------------------------------\n\n#[test]\n#[should_panic(expected = \"vault already paused\")]\nfn pause_when_already_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.pause(\u0026owner);\n    client.pause(\u0026owner); // second pause must panic\n}\n\n#[test]\n#[should_panic(expected = \"vault not paused\")]\nfn unpause_when_not_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.unpause(\u0026owner); // not paused — must panic\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin or owner\")]\nfn pause_by_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.pause(\u0026attacker);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized: caller is not admin or owner\")]\nfn unpause_by_unauthorized_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.pause(\u0026owner);\n    client.unpause(\u0026attacker);\n}\n\n#[test]\nfn owner_can_pause_and_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    assert!(!client.is_paused());\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn admin_can_pause_and_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    client.pause(\u0026new_admin);\n    assert!(client.is_paused());\n    client.unpause(\u0026new_admin);\n    assert!(!client.is_paused());\n}\n\n// ---------------------------------------------------------------------------\n// is_paused() view function tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn is_paused_returns_false_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    // After initialization, vault should not be paused\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn is_paused_returns_true_after_pause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    // After pause, should return true\n    assert!(client.is_paused());\n}\n\n#[test]\nfn is_paused_returns_false_after_unpause() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n    client.unpause(\u0026owner);\n    // After unpause, should return false\n    assert!(!client.is_paused());\n}\n\n#[test]\nfn is_paused_multiple_pause_unpause_cycles() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Multiple cycles of pause/unpause\n    for _ in 0..5 {\n        assert!(!client.is_paused());\n        client.pause(\u0026owner);\n        assert!(client.is_paused());\n        client.unpause(\u0026owner);\n        assert!(!client.is_paused());\n    }\n}\n\n#[test]\nfn is_paused_consistent_consecutive_calls() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Call is_paused multiple times - should return consistent values\n    for _ in 0..10 {\n        assert!(!client.is_paused());\n    }\n\n    client.pause(\u0026owner);\n\n    for _ in 0..10 {\n        assert!(client.is_paused());\n    }\n\n    client.unpause(\u0026owner);\n\n    for _ in 0..10 {\n        assert!(!client.is_paused());\n    }\n}\n\n#[test]\nfn is_paused_no_state_mutation() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Get balance before calling is_paused\n    let balance_before = client.balance();\n\n    // Call is_paused multiple times\n    for _ in 0..100 {\n        let _ = client.is_paused();\n    }\n\n    // Balance should remain unchanged (no state mutation)\n    assert_eq!(client.balance(), balance_before);\n}\n\n#[test]\nfn is_paused_reflects_latest_committed_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let new_admin = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    let rp = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(rp), \u0026None);\n\n    // Initial state\n    assert!(!client.is_paused());\n\n    // Pause and verify immediate reflection\n    client.pause(\u0026owner);\n    assert!(client.is_paused());\n\n    // Unpause and verify immediate reflection\n    client.unpause(\u0026owner);\n    assert!(!client.is_paused());\n\n    // Admin change shouldn't affect pause state\n    client.set_admin(\u0026owner, \u0026new_admin);\n    client.accept_admin();\n    assert!(!client.is_paused());\n\n    // New admin can pause\n    client.pause(\u0026new_admin);\n    assert!(client.is_paused());\n}\n\n#[test]\nfn is_paused_safe_default_before_init() {\n    let env = Env::default();\n    let (_, client) = create_vault(\u0026env);\n    // Before initialization, is_paused should return false (safe default)\n    // and must not panic\n    assert!(!client.is_paused());\n}\n\n#[test]\n#[should_panic(expected = \"vault is paused\")]\nfn deduct_while_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    client.pause(\u0026owner);\n    client.deduct(\u0026owner, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"vault is paused\")]\nfn batch_deduct_while_paused_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    client.pause(\u0026owner);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items); // must panic with \"vault is paused\"\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized caller\")]\nfn deduct_unauthorized_caller_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    // init with an authorized_caller so the None branch is not taken\n    let auth = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026Some(auth), \u0026None, \u0026None, \u0026None);\n    client.deduct(\u0026attacker, \u0026100, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"unauthorized caller\")]\nfn batch_deduct_unauthorized_caller_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let attacker = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    let auth = Address::generate(\u0026env);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026Some(auth), \u0026None, \u0026None, \u0026None);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n    ];\n    client.batch_deduct(\u0026attacker, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn deduct_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(1000), \u0026None, \u0026None, \u0026None, \u0026Some(50));\n    client.deduct(\u0026owner, \u0026100, \u0026None); // 100 \u003e max_deduct(50)\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn batch_deduct_item_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 1000);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(1000), \u0026None, \u0026None, \u0026None, \u0026Some(50));\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn distribute_negative_amount_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.distribute(\u0026owner, \u0026dev, \u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"no admin transfer pending\")]\nfn accept_admin_without_pending_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.accept_admin();\n}\n\n#[test]\n#[should_panic(expected = \"no ownership transfer pending\")]\nfn accept_ownership_without_pending_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.accept_ownership();\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn withdraw_negative_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.withdraw(\u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"amount must be positive\")]\nfn withdraw_to_negative_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 100);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(100), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.withdraw_to(\u0026recipient, \u0026-1);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn deduct_without_settlement_panics() {\n    // Settlement is a hard precondition for deduct; missing address must panic.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.deduct(\u0026owner, \u0026200, \u0026None);\n}\n\n#[test]\nfn deduct_without_settlement_does_not_mutate_state() {\n    // When deduct panics due to missing settlement, vault state must be unchanged.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let result = client.try_deduct(\u0026owner, \u0026200, \u0026None);\n    assert!(result.is_err(), \"expected panic for missing settlement\");\n    assert_eq!(client.balance(), 500);\n    assert_eq!(usdc_client.balance(\u0026vault_address), 500);\n}\n\n#[test]\n#[should_panic(expected = \"settlement address not set\")]\nfn batch_deduct_without_settlement_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None,\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n#[test]\nfn batch_deduct_without_settlement_does_not_mutate_state() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026None);\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 100,\n            request_id: None,\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None,\n        },\n    ];\n    let result = client.try_batch_deduct(\u0026owner, \u0026items);\n    assert!(result.is_err(), \"expected panic for missing settlement\");\n    assert_eq!(client.balance(), 500);\n    assert_eq!(usdc_client.balance(\u0026vault_address), 500);\n}\n\n#[test]\nfn withdraw_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(300), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.withdraw(\u0026100);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"withdraw\")\n            }\n        })\n        .expect(\"expected withdraw event\");\n    let (amt, bal): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 100);\n    assert_eq!(bal, 200);\n}\n\n#[test]\nfn withdraw_to_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let recipient = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 300);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(300), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.withdraw_to(\u0026recipient, \u0026150);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"withdraw_to\")\n            }\n        })\n        .expect(\"expected withdraw_to event\");\n    let (amt, bal): (i128, i128) = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 150);\n    assert_eq!(bal, 150);\n}\n\n#[test]\nfn distribute_emits_event() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let dev = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n    client.distribute(\u0026owner, \u0026dev, \u0026200);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"distribute\")\n            }\n        })\n        .expect(\"expected distribute event\");\n    let amt: i128 = ev.2.into_val(\u0026env);\n    assert_eq!(amt, 200);\n}\n\n#[test]\nfn get_allowed_depositors_returns_list() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let d1 = Address::generate(\u0026env);\n    let d2 = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d1.clone()));\n    client.set_allowed_depositor(\u0026owner, \u0026Some(d2.clone()));\n    let list = client.get_allowed_depositors();\n    assert_eq!(list.len(), 2);\n}\n\n#[test]\nfn vault_unpaused_event_emitted() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.pause(\u0026owner);\n    client.unpause(\u0026owner);\n    let events = env.events().all();\n    let ev = events\n        .iter()\n        .find(|e| {\n            e.0 == vault_address \u0026\u0026 !e.1.is_empty() \u0026\u0026 {\n                let t: Symbol = e.1.get(0).unwrap().into_val(\u0026env);\n                t == Symbol::new(\u0026env, \"vault_unpaused\")\n            }\n        })\n        .expect(\"expected vault_unpaused event\");\n    let caller: Address = ev.1.get(1).unwrap().into_val(\u0026env);\n    assert_eq!(caller, owner);\n}\n\n// ---------------------------------------------------------------------------\n// Randomised sequence tests\n//\n// Invariants under test:\n//   1. VaultMeta.balance \u003e= 0 after every operation.\n//   2. Local simulator tracks the same balance as the contract at each step.\n//   3. batch_deduct is atomic: a failing batch leaves balance unchanged.\n//   4. pause blocks deposits and deductions; unpause restores both.\n//   5. No single deduct/batch item may exceed max_deduct.\n//\n// Seeds are fixed so runs are deterministic and reproducible in CI.\n// ---------------------------------------------------------------------------\n\n#[cfg(test)]\nmod fuzz {\n    use super::*;\n    use rand::rngs::StdRng;\n    use rand::{Rng, SeedableRng};\n\n    /// Run a mixed sequence of deposit / deduct / batch_deduct / pause / unpause\n    /// and assert after every step that:\n    ///   - contract balance == local simulator\n    ///   - contract balance \u003e= 0\n    fn run_sequence(seed: u64, max_deduct_val: i128, initial: i128, steps: usize) {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n\n        let settlement = Address::generate(\u0026env);\n        // Pre-fund vault so initial_balance is valid.\n        usdc_admin.mint(\u0026vault_addr, \u0026initial);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(initial),\n            \u0026Some(caller.clone()),\n            \u0026Some(1), // min_deposit = 1\n            \u0026None,\n            \u0026Some(max_deduct_val),\n        );\n        // Settlement is a precondition for deduct / batch_deduct.\n        client.set_settlement(\u0026owner, \u0026settlement);\n        // Give the depositor (owner) plenty of USDC.\n        // Use a very large amount to handle large max_deduct scenarios\n        let deposit_reserve: i128 = 10_000_000_000_000; // 10 trillion to handle large deposits\n        usdc_admin.mint(\u0026owner, \u0026deposit_reserve);\n        usdc_client.approve(\u0026owner, \u0026vault_addr, \u0026i128::MAX, \u0026999_999);\n\n        // Keep random steps realistic even when max_deduct is astronomically large.\n        // (We still exercise max_deduct boundaries in dedicated unit tests.)\n        let _step_cap: i128 = core::cmp::min(max_deduct_val, 10_000);\n\n        let mut rng = StdRng::seed_from_u64(seed);\n        let mut sim: i128 = initial;\n        let mut token_sim: i128 = initial;\n        let mut paused = false;\n        let op_cap: i128 = if max_deduct_val \u003e 10_000 {\n            10_000\n        } else {\n            max_deduct_val\n        };\n\n        for _ in 0..steps {\n            // Pick an operation: 0=deposit, 1=deduct, 2=batch_deduct, 3=toggle_pause\n            let op: u8 = rng.gen_range(0..4);\n\n            match op {\n                // --- deposit ---\n                0 =\u003e {\n                    // Cap deposit amount to avoid exceeding available balance\n                    let max_deposit = max_deduct_val.min(1_000_000_000);\n                    let amount: i128 = rng.gen_range(1..=max_deposit);\n                    if paused {\n                        // deposit must fail while paused\n                        assert!(client.try_deposit(\u0026owner, \u0026amount).is_err());\n                    } else if let (Some(new_sim), Some(new_token_sim)) =\n                        (sim.checked_add(amount), token_sim.checked_add(amount))\n                    {\n                        // mint amount to owner to avoid insufficient balance on large fuzz tests\n                        usdc_admin.mint(\u0026owner, \u0026amount);\n                        sim = new_sim;\n                        token_sim = new_token_sim;\n                        client.deposit(\u0026owner, \u0026amount);\n                    }\n                    // else: deposit failed (e.g. insufficient USDC) — no sim change\n                }\n                // --- single deduct ---\n                1 =\u003e {\n                    let amount: i128 = rng.gen_range(1..=max_deduct_val);\n                    if paused {\n                        // deduct must fail while paused\n                        assert!(client.try_deduct(\u0026caller, \u0026amount, \u0026None).is_err());\n                    } else if sim \u003e= amount {\n                        sim -= amount;\n                        client.deduct(\u0026caller, \u0026amount, \u0026None);\n                    } else {\n                        // must fail — balance unchanged (insufficient)\n                        assert!(client.try_deduct(\u0026caller, \u0026amount, \u0026None).is_err());\n                    }\n                }\n\n                // --- batch_deduct ---\n                2 =\u003e {\n                    // Build a batch of 1..=5 items, each within max_deduct.\n                    let n: usize = rng.gen_range(1..=5);\n                    let mut items = soroban_sdk::Vec::new(\u0026env);\n                    let mut batch_total: i128 = 0;\n                    let mut valid = true;\n                    for _ in 0..n {\n                        let amt: i128 = rng.gen_range(1..=op_cap);\n                        batch_total = match batch_total.checked_add(amt) {\n                            Some(v) =\u003e v,\n                            None =\u003e {\n                                valid = false;\n                                break;\n                            }\n                        };\n                        items.push_back(DeductItem {\n                            amount: amt,\n                            request_id: None,\n                        });\n                    }\n                    if paused {\n                        // batch_deduct must fail while paused\n                        let before = client.balance();\n                        let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                        assert_eq!(\n                            client.balance(),\n                            before,\n                            \"failed batch must not change balance\"\n                        );\n                    } else if valid \u0026\u0026 sim \u003e= batch_total {\n                        sim -= batch_total;\n                        client.batch_deduct(\u0026caller, \u0026items);\n                    } else {\n                        // batch must fail atomically — balance unchanged (paused, overflow, or insufficient)\n                        let before = client.balance();\n                        let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                        assert_eq!(\n                            client.balance(),\n                            before,\n                            \"failed batch must not change balance\"\n                        );\n                    }\n                }\n\n                // --- toggle pause ---\n                3 =\u003e {\n                    if paused {\n                        client.unpause(\u0026owner);\n                        paused = false;\n                    } else {\n                        client.pause(\u0026owner);\n                        paused = true;\n                    }\n                }\n\n                _ =\u003e unreachable!(),\n            }\n\n            // Invariant assertions after every step.\n            let on_chain = client.balance();\n            assert_eq!(on_chain, sim, \"seed={seed} sim mismatch\");\n            assert!(on_chain \u003e= 0, \"seed={seed} balance went negative\");\n        }\n\n        // Leave vault unpaused so teardown is clean.\n        if paused {\n            client.unpause(\u0026owner);\n        }\n    }\n\n    #[test]\n    fn fuzz_deposit_and_deduct() {\n        // Original invariant: mixed deposits and single deducts stay non-negative.\n        run_sequence(0xdead_beef, 500, 10_000, 200);\n        // ensure vault is left unpaused for teardown (run_sequence already handles this)\n    }\n\n    #[test]\n    fn fuzz_batch_deduct_coverage() {\n        // Heavier batch_deduct weight via a different seed.\n        run_sequence(0xcafe_1234, 200, 5_000, 150);\n    }\n\n    #[test]\n    fn fuzz_pause_interleaved() {\n        // Pause/unpause interleaved with deposits and deductions.\n        run_sequence(0xf00d_abcd, 1_000, 50_000, 100);\n    }\n\n    #[test]\n    fn fuzz_tight_max_deduct() {\n        // max_deduct = 1 forces many small steps; exercises boundary exhaustively.\n        run_sequence(0x1234_5678, 1, 500, 300);\n    }\n\n    #[test]\n    fn fuzz_large_max_deduct() {\n        // max_deduct near i128::MAX / 100 — checks no overflow in batch totals.\n        run_sequence(0xabcd_ef01, i128::MAX / 100, 1_000_000, 80);\n    }\n\n    /// Verify that a batch whose cumulative total exceeds balance is fully atomic:\n    /// balance must be identical before and after the failed call.\n    #[test]\n    fn fuzz_batch_atomicity_on_overdraw() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n\n        usdc_admin.mint(\u0026vault_addr, \u0026300);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(300),\n            \u0026Some(caller.clone()),\n            \u0026None,\n            \u0026None,\n            \u0026Some(200),\n        );\n        let settlement = Address::generate(\u0026env);\n        client.set_settlement(\u0026owner, \u0026settlement);\n\n        let mut rng = StdRng::seed_from_u64(0x5eed_0001);\n        // Build batches that sometimes overdraw; assert atomicity each time.\n        for _ in 0..50 {\n            let before = client.balance();\n            let n: usize = rng.gen_range(1..=5);\n            let mut items = soroban_sdk::Vec::new(\u0026env);\n            for _ in 0..n {\n                items.push_back(DeductItem {\n                    amount: rng.gen_range(1..=200_i128),\n                    request_id: None,\n                });\n            }\n            let total: i128 = items.iter().map(|i| i.amount).sum();\n            if before \u003e= total {\n                client.batch_deduct(\u0026caller, \u0026items);\n                assert_eq!(client.balance(), before - total);\n            } else {\n                let _ = client.try_batch_deduct(\u0026caller, \u0026items);\n                assert_eq!(client.balance(), before, \"atomic rollback failed\");\n            }\n            assert!(client.balance() \u003e= 0);\n        }\n    }\n\n    /// Verify that max_deduct is enforced on every individual item in a batch.\n    #[test]\n    fn fuzz_max_deduct_enforced_in_batch() {\n        let env = Env::default();\n        env.mock_all_auths();\n\n        let owner = Address::generate(\u0026env);\n        let caller = Address::generate(\u0026env);\n        let (usdc_addr, _, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n        let (vault_addr, client) = create_vault(\u0026env);\n        let max_d: i128 = 100;\n\n        usdc_admin.mint(\u0026vault_addr, \u002610_000);\n        client.init(\n            \u0026owner,\n            \u0026usdc_addr,\n            \u0026Some(10_000),\n            \u0026Some(caller.clone()),\n            \u0026None,\n            \u0026None,\n            \u0026Some(max_d),\n        );\n        let settlement = Address::generate(\u0026env);\n        client.set_settlement(\u0026owner, \u0026settlement);\n\n        let mut rng = StdRng::seed_from_u64(0x5eed_0002);\n        for _ in 0..40 {\n            // Occasionally inject an item that exceeds max_deduct.\n            let exceed = rng.gen_bool(0.3);\n            let amt: i128 = if exceed {\n                rng.gen_range(max_d + 1..=max_d * 3)\n            } else {\n                rng.gen_range(1..=max_d)\n            };\n            let items = soroban_sdk::vec![\n                \u0026env,\n                DeductItem {\n                    amount: amt,\n                    request_id: None,\n                },\n            ];\n            if exceed {\n                assert!(\n                    client.try_batch_deduct(\u0026caller, \u0026items).is_err(),\n                    \"item exceeding max_deduct must be rejected\"\n                );\n            } else if client.balance() \u003e= amt {\n                client.batch_deduct(\u0026caller, \u0026items);\n                assert!(client.balance() \u003e= 0);\n            }\n        }\n    }\n}\n\n// ---------------------------------------------------------------------------\n// Issue #151 — min_deposit boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deposit_exact_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002650);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002650, \u00261000);\n    let balance = client.deposit(\u0026owner, \u002650);\n    assert_eq!(balance, 50);\n}\n\n#[test]\n#[should_panic(expected = \"deposit below minimum\")]\nfn deposit_below_min_deposit_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002649);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002649, \u00261000);\n    client.deposit(\u0026owner, \u002649);\n}\n\n#[test]\nfn deposit_above_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(50), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u002651);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u002651, \u00261000);\n    let balance = client.deposit(\u0026owner, \u002651);\n    assert_eq!(balance, 51);\n}\n\n#[test]\nfn deposit_with_default_min_deposit_allows_one() {\n    // With default min_deposit=1, amount=1 should succeed.\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261, \u00261000);\n    let balance = client.deposit(\u0026owner, \u00261);\n    assert_eq!(balance, 1);\n}\n\n#[test]\nfn init_min_deposit_stored_in_meta() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(100), \u0026None, \u0026None);\n    let meta = client.get_meta();\n    assert_eq!(meta.min_deposit, 100);\n}\n\n#[test]\nfn init_default_min_deposit_is_one() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    let meta = client.get_meta();\n    assert_eq!(meta.min_deposit, 1);\n}\n\n#[test]\nfn deposit_one_below_large_min_deposit_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(1_000_000), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u0026999_999);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026999_999, \u00261000);\n    let result = client.try_deposit(\u0026owner, \u0026999_999);\n    assert!(\n        result.is_err(),\n        \"deposit one below large min_deposit must fail\"\n    );\n}\n\n#[test]\nfn deposit_exact_large_min_deposit_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026Some(1_000_000), \u0026None, \u0026None);\n\n    usdc_admin.mint(\u0026owner, \u00261_000_000);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261_000_000, \u00261000);\n    let balance = client.deposit(\u0026owner, \u00261_000_000);\n    assert_eq!(balance, 1_000_000);\n}\n\n// ---------------------------------------------------------------------------\n// max_deduct boundary tests\n// ---------------------------------------------------------------------------\n\n#[test]\nfn deduct_equal_to_max_deduct_succeeds() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    // max_deduct = 100, deposit 200 so balance is sufficient\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026Some(100));\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u00261000);\n    client.deposit(\u0026owner, \u0026200);\n    // deduct exactly equal to max_deduct — must succeed\n    let balance = client.deduct(\u0026owner, \u0026100, \u0026None);\n    assert_eq!(balance, 600);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn deduct_above_max_deduct_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 500);\n    client.init(\u0026owner, \u0026usdc, \u0026Some(500), \u0026None, \u0026None, \u0026None, \u0026Some(100));\n    usdc_admin.mint(\u0026owner, \u0026200);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026200, \u00261000);\n    client.deposit(\u0026owner, \u0026200);\n    // deduct 101 \u003e max_deduct 100 — must panic\n    client.deduct(\u0026owner, \u0026101, \u0026None);\n}\n\n#[test]\nfn deduct_default_cap_is_i128_max() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    // no max_deduct supplied — default cap (i128::MAX) applies\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    usdc_admin.mint(\u0026owner, \u00261_000_000);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u00261_000_000, \u00261000);\n    client.deposit(\u0026owner, \u00261_000_000);\n    // large deduct well below i128::MAX should succeed\n    let balance = client.deduct(\u0026owner, \u0026999_999, \u0026None);\n    assert_eq!(balance, 1);\n}\n\n#[test]\nfn batch_deduct_each_item_constrained_by_max_deduct() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    // max_deduct = 50\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026Some(50));\n    let settlement = Address::generate(\u0026env);\n    client.set_settlement(\u0026owner, \u0026settlement);\n    usdc_admin.mint(\u0026owner, \u0026300);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n    client.deposit(\u0026owner, \u0026300);\n    // three items each exactly at the cap — all must pass\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n    ];\n    let balance = client.batch_deduct(\u0026owner, \u0026items);\n    assert_eq!(balance, 150);\n}\n\n#[test]\n#[should_panic(expected = \"deduct amount exceeds max_deduct\")]\nfn batch_deduct_one_item_above_max_deduct_panics() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (vault_address, client) = create_vault(\u0026env);\n    let (usdc, usdc_client, usdc_admin) = create_usdc(\u0026env, \u0026owner);\n    env.mock_all_auths();\n    fund_vault(\u0026usdc_admin, \u0026vault_address, 0);\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026Some(50));\n    usdc_admin.mint(\u0026owner, \u0026300);\n    usdc_client.approve(\u0026owner, \u0026vault_address, \u0026300, \u00261000);\n    client.deposit(\u0026owner, \u0026300);\n    // second item exceeds cap — must panic\n    let items = soroban_sdk::vec![\n        \u0026env,\n        DeductItem {\n            amount: 50,\n            request_id: None\n        },\n        DeductItem {\n            amount: 51,\n            request_id: None\n        },\n    ];\n    client.batch_deduct(\u0026owner, \u0026items);\n}\n\n// ---------------------------------------------------------------------------\n// get_contract_addresses tests  (Issue #257)\n// ---------------------------------------------------------------------------\n\n#[test]\nfn get_contract_addresses_returns_usdc_only_after_init() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n\n    let (got_usdc, got_settlement, got_pool) = client.get_contract_addresses();\n    assert_eq!(got_usdc, Some(usdc));\n    assert_eq!(got_settlement, None);\n    assert_eq!(got_pool, None);\n}\n\n#[test]\nfn get_contract_addresses_reflects_set_settlement() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026None, \u0026None);\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let (got_usdc, got_settlement, got_pool) = client.get_contract_addresses();\n    assert_eq!(got_usdc, Some(usdc));\n    assert_eq!(got_settlement, Some(settlement));\n    assert_eq!(got_pool, None);\n}\n\n#[test]\nfn get_contract_addresses_reflects_set_revenue_pool() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n\n    let (got_usdc, got_settlement, got_pool) = client.get_contract_addresses();\n    assert_eq!(got_usdc, Some(usdc));\n    assert_eq!(got_settlement, None);\n    assert_eq!(got_pool, Some(pool));\n}\n\n#[test]\nfn get_contract_addresses_reflects_all_three_configured() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let settlement = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026None,\n        \u0026None,\n        \u0026None,\n        \u0026Some(pool.clone()),\n        \u0026None,\n    );\n    client.set_settlement(\u0026owner, \u0026settlement);\n\n    let (got_usdc, got_settlement, got_pool) = client.get_contract_addresses();\n    assert_eq!(got_usdc, Some(usdc));\n    assert_eq!(got_settlement, Some(settlement));\n    assert_eq!(got_pool, Some(pool));\n}\n\n#[test]\nfn get_contract_addresses_updates_after_clear_revenue_pool() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    let (_, client) = create_vault(\u0026env);\n    let (usdc, _, _) = create_usdc(\u0026env, \u0026owner);\n\n    env.mock_all_auths();\n    client.init(\u0026owner, \u0026usdc, \u0026None, \u0026None, \u0026None, \u0026Some(pool), \u0026None);\n    client.set_revenue_pool(\u0026owner, \u0026None); // clear it\n\n    let (_, _, got_pool) = client.get_contract_addresses();\n    assert_eq!(got_pool, None);\n}\n","traces":[],"covered":0,"coverable":0},{"path":["/","home","merlinthewhiz","Documents","Callora-Contracts","contracts","vault","src","test_init_hardening.rs"],"content":"use crate::{CalloraVault, CalloraVaultClient};\nuse soroban_sdk::{testutils::Address as _, Address, Env};\n\n#[test]\n#[should_panic(expected = \"vault already initialized\")]\nfn test_double_initialization_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // First init\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n    // Second init should panic\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"usdc_token cannot be vault address\")]\nfn test_init_usdc_self_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Passing vault's own address as USDC token\n    client.init(\u0026owner, \u0026addr, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"revenue_pool cannot be vault address\")]\nfn test_init_revenue_pool_self_address_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Passing vault's own address as Revenue Pool\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026None,\n        \u0026Some(addr.clone()),\n        \u0026None,\n    );\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit must be positive\")]\nfn test_init_negative_min_deposit_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(-10), \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit must be positive\")]\nfn test_init_zero_min_deposit_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(0), \u0026None, \u0026None);\n}\n\n#[test]\n#[should_panic(expected = \"max_deduct must be positive\")]\nfn test_init_zero_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026Some(0));\n}\n\n#[test]\n#[should_panic(expected = \"max_deduct must be positive\")]\nfn test_init_negative_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026None, \u0026None, \u0026Some(-50));\n}\n\n#[test]\n#[should_panic(expected = \"min_deposit cannot exceed max_deduct\")]\nfn test_init_min_deposit_exceeds_max_deduct_fails() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    client.init(\u0026owner, \u0026usdc, \u0026Some(0), \u0026None, \u0026Some(100), \u0026None, \u0026Some(50));\n}\n\n#[test]\nfn test_init_validates_successfully() {\n    let env = Env::default();\n    let owner = Address::generate(\u0026env);\n    let usdc = Address::generate(\u0026env);\n    let pool = Address::generate(\u0026env);\n    env.mock_all_auths();\n\n    let addr = env.register(CalloraVault, ());\n    let client = CalloraVaultClient::new(\u0026env, \u0026addr);\n\n    // Test valid initialization with valid parameters\n    client.init(\n        \u0026owner,\n        \u0026usdc,\n        \u0026Some(0),\n        \u0026None,\n        \u0026Some(10),\n        \u0026Some(pool.clone()),\n        \u0026Some(50),\n    );\n\n    assert_eq!(client.get_admin(), owner);\n}\n","traces":[],"covered":0,"coverable":0}]};
+        var previousData = null;
     </script>
     <script crossorigin>/** @license React v16.13.1
  * react.production.min.js
@@ -559,7 +559,7 @@
 
   updateStateFromLocation() {
     if (window.location.hash.length > 1) {
-      const current = window.location.hash.slice(1).split('/');
+      const current = window.location.hash.slice(1).split('/').map(decodeURIComponent);
       this.setState({current});
     } else {
       this.setState({current: []});