Fix fee waivers and tooling verification

.githooks/pre-commit

@@ -0,0 +1,11 @@
+#!/usr/bin/env sh
+# Run cargo fmt --check across the workspace before each commit.
+# To skip (not recommended): git commit --no-verify
+set -e
+
+if ! cargo fmt --check 2>&1; then
+  echo ""
+  echo "pre-commit: cargo fmt check failed."
+  echo "Run 'cargo fmt' to fix formatting, then re-stage and commit."
+  exit 1
+fi

.github/workflows/ci.yml

@@ -13,29 +13,265 @@ jobs:
   ci:
     name: Build and Test
     runs-on: ubuntu-latest
-    
+
     steps:
       - uses: actions/checkout@v4
-      
+
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
           targets: wasm32-unknown-unknown
-      
+
       - name: Cache dependencies
         uses: Swatinem/rust-cache@v2
         with:
-          workspaces: contracts/market
-
+          workspaces: . -> target
+
+      # Format check enforces the committed rustfmt configuration in
+      # contracts/market/rustfmt.toml. The file defines edition-aware settings
+      # used both locally and in CI, so contributors can reproduce the same
+      # formatting with `cd contracts/market && cargo fmt --check`.
+      # Cross-crate workspace compile check (#503): runs `cargo check` across
+      # every crate in the workspace (market, treasury, resolution,
+      # outcome-token) in one pass so a break in one crate can't slip through
+      # while another crate's individually-scoped steps stay green.
+      - name: Workspace compile check
+        run: cargo check --workspace --all-targets
+
       - name: Format check
         run: cd contracts/market && cargo fmt --check
-
+
+      # Clippy enforces lint hygiene across all contracts. Project-specific deny
+      # attributes are declared at the crate root (`lib.rs`) in each contract:
+      #
+      #   #![deny(clippy::all)]  – all default Clippy lints are hard errors
+      #
+      # The `-D warnings` flag here ensures any lint not covered by the crate
+      # attributes also fails the build. Use `#[allow(clippy::lint_name)]` at
+      # the call-site for any lint that is intentionally acceptable.
       - name: Clippy
         run: cd contracts/market && cargo clippy -- -D warnings
-
-      - name: Tests
+
+      # Runs all unit and integration tests for the market contract via `cargo test`.
+      # Tests are defined alongside the contract source under `contracts/market/src/`
+      # using Soroban SDK test utilities. A new test should be added for every
+      # public contract function to maintain coverage.
+      - name: Tests (market)
         run: cd contracts/market && cargo test
-
-      - name: Build
-        run: cd contracts/market && cargo build --target wasm32-unknown-unknown
+
+      # Runs the workspace-level integration tests located in tests/.
+      # These tests exercise cross-contract behaviour (Market <-> Treasury) and the
+      # full prediction-market lifecycle (create -> deposit -> trade -> resolve -> settle)
+      # using live Soroban testutils environments — no storage mocking.
+      # They are compiled as integration test binaries (not inline unit tests), so
+      # `--tests` targets only files under tests/ and avoids re-running the unit
+      # tests already covered by the step above.
+      - name: Workspace integration tests
+        run: cargo test --workspace --tests
+
+      # Restore saved proptest regression cases from previous CI runs so that
+      # any previously-found failing inputs are always re-checked.
+      - name: Restore proptest regression corpus
+        uses: actions/cache@v4
+        with:
+          path: contracts/market/src/.proptest-regressions
+          key: proptest-regressions-${{ runner.os }}-${{ hashFiles('contracts/market/src/positions.rs') }}
+          restore-keys: proptest-regressions-${{ runner.os }}-
+
+      # Run the proptest fuzz suite with 2 000 cases per property in CI.
+      # Increase PROPTEST_CASES for deeper coverage in scheduled / nightly runs.
+      # Failing inputs are persisted to .proptest-regressions/ and cached above.
+      - name: Proptest fuzz (share and collateral math)
+        run: cd contracts/market && PROPTEST_CASES=2000 cargo test prop_ -- --nocapture
+
+      # Upload any new regression seeds discovered in this run so they are
+      # available to future runs even when the cache key changes.
+      - name: Upload proptest regressions
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: proptest-regressions
+          path: contracts/market/src/.proptest-regressions
+          if-no-files-found: ignore
+
+      # Build and test the Treasury contract.
+      - name: Tests (treasury)
+        run: |
+          cd contracts/treasury && cargo test
+          cargo test -p vatix-treasury-contract
+
+      # Build and test the Outcome Token contract.
+      - name: Tests (outcome-token)
+        run: |
+          cd contracts/outcome-token && cargo test
+          cargo test -p vatix-outcome-token-contract
+
+      # Build and test the Resolution contract.
+      - name: Tests (resolution)
+        run: |
+          cd contracts/resolution && cargo test
+          cargo test -p vatix-resolution-contract
+
+      # Compiles all contracts to WASM (wasm32-unknown-unknown) — the binary format
+      # required by the Stellar Soroban runtime.
+      - name: Build market contract
+        run: cd contracts/market && stellar contract build
+
+      # Build Treasury contract WASM.
+      - name: Build treasury contract
+        run: cd contracts/treasury && stellar contract build
+
+      # Build Outcome Token contract WASM.
+      - name: Build outcome-token contract
+        run: cd contracts/outcome-token && stellar contract build
+
+      # Build Resolution contract WASM.
+      - name: Build resolution contract
+        run: cd contracts/resolution && stellar contract build
+
+      # Verify all WASM artifacts were created at the expected paths
+      - name: Verify WASM artifacts
+        run: |
+          ls -lh target/wasm32v1-none/release/*.wasm
+          echo "WASM artifact size:"
+          du -h target/wasm32v1-none/release/*.wasm
+
+      # deploy.sh is a guard script that echoes deployment intent without
+      # performing a real on-chain deployment. Running it in CI verifies the
+      # script is executable and reachable, and serves as a placeholder for
+      # the full Soroban CLI deployment step once testnet credentials are
+      # available as repository secrets. When the real implementation lands,
+      # this step will build the WASM artefact, invoke `soroban contract deploy`,
+      # and capture the returned contract ID for downstream use.
+      #
+      # Purpose: This CI step ensures deploy.sh remains executable and reachable
+      # in the repository, preventing drift as new contributors join. Future
+      # maintainers can reference this step to understand the deployment flow
+      # and add the real implementation when credentials become available.
+      #
+      # To run locally: bash scripts/deploy.sh
+      # Real deployment requires SOROBAN_NETWORK and SOROBAN_ACCOUNT env vars.
+      - name: Deploy (dry-run guard)
+        run: bash scripts/deploy.sh
+
+      # deploy-testnet.sh builds the contract via `stellar contract build` and
+      # deploys it to the Stellar testnet. The WASM artefact is always located
+      # at the canonical output path: target/wasm32v1-none/release/*.wasm
+      #
+      # In CI (no TESTNET_SECRET_KEY): runs in guard mode — builds the contract,
+      # verifies the canonical artefact path, then exits 0 without deploying.
+      # When TESTNET_SECRET_KEY is set: performs a full build + deploy and
+      # exports the contract ID via $GITHUB_OUTPUT for downstream steps.
+      - name: Deploy testnet (guard)
+        run: bash scripts/deploy-testnet.sh
+
+      # Echo guard: this step runs invoke-example.sh, which currently only echoes
+      # the invocation intent without calling a live contract.
+      # What the real implementation should do:
+      #   - Replace the echo with `stellar contract invoke` (or `soroban contract invoke`)
+      #     pointed at a contract deployed in the Deploy testnet step above.
+      #   - Pass CONTRACT_ID (captured from the deploy step) via an environment variable.
+      #   - Assert the response matches the expected value to act as a smoke test.
+      # See scripts/README.md for the full tooling reference.
+      # The scripts README documents the intent of these "echo guard" scripts
+      # and provides guidance for maintainers on how to replace guards with
+      # real CI actions (credentials, expected outputs, and invocation examples).
+      - name: Invoke example (echo guard)
+        run: bash scripts/invoke-example.sh
+
+  build-contracts:
+    name: Build all contract crates
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-unknown-unknown
+
+      - name: Cache dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: . -> target
+
+      # Focused compile check for every contract crate, run on every PR.
+      # Unlike the `ci` job's `stellar contract build` steps (which build
+      # release WASM artifacts as part of a longer pipeline), these steps
+      # are a fast, dedicated `cargo build -p <crate>` per crate so a
+      # compile error in any one contract fails CI red on its own, without
+      # depending on the rest of the test/lint pipeline succeeding first.
+      - name: Build market contract crate
+        run: cargo build -p vatix-market-contract
+
+      - name: Build treasury contract crate
+        run: cargo build -p vatix-treasury-contract
+
+      - name: Build resolution contract crate
+        run: cargo build -p vatix-resolution-contract
+
+      - name: Build outcome-token contract crate
+        run: cargo build -p vatix-outcome-token-contract
+
+  frontend:
+    name: Frontend (Next.js)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: "pnpm"
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-unknown-unknown,wasm32v1-none
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: . -> target
+
+      - name: Install Stellar CLI
+        run: |
+          curl -L https://github.com/stellar/stellar-cli/releases/download/v21.4.0/stellar-cli-21.4.0-x86_64-unknown-linux-gnu.tar.gz | tar xz
+          sudo mv stellar /usr/local/bin/
+          stellar --version
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Generate TypeScript bindings
+        run: pnpm build:bindings
+
+      - name: Verify bindings output
+        run: |
+          test -f apps/web/lib/contracts/index.ts || (echo "ERROR: contracts/index.ts missing" && exit 1)
+          echo "Bindings output:"
+          ls -lh apps/web/lib/contracts/
+
+      # Fails the build if the bindings just generated above differ from what
+      # is committed in git. This catches drift where a contributor changed a
+      # contract's public interface (or the generator itself) without
+      # regenerating and committing the bindings under apps/web/lib/contracts/.
+      - name: Fail on stale committed bindings
+        run: |
+          if ! git diff --exit-code -- apps/web/lib/contracts; then
+            echo ""
+            echo "ERROR: Generated TypeScript bindings differ from what is committed."
+            echo "Run 'pnpm build:bindings' locally and commit the resulting changes"
+            echo "under apps/web/lib/contracts/."
+            exit 1
+          fi
+
+      - name: Lint web app
+        run: pnpm --filter web lint
+
+      - name: Build web app
+        run: pnpm --filter web build

.gitignore

@@ -1,25 +1,43 @@
-# Local settings
-.soroban
-.stellar
-
-# Rust
-target/
-Cargo.lock
-**/*.rs.bk
-
-# IDE
-.vscode/
-.idea/
-*.swp
-*.swo
-
-# OS
-.DS_Store
-Thumbs.db
-
-# Build artifacts
-*.so
-*.dylib
-*.dll
-
-contracts/*/test_snapshots
+# Local settings
+.soroban
+.stellar
+
+# Rust
+target/
+Cargo.lock
+**/*.rs.bk
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Build artifacts
+*.so
+*.dylib
+*.dll
+
+contracts/*/test_snapshots
+/test_snapshots/
+
+# Node / Next.js
+node_modules/
+.pnpm-store/
+apps/web/.next/
+apps/web/out/
+dist/
+apps/web/tsconfig.tsbuildinfo
+
+# Generated issue exports (regenerate with pnpm issues:generate)
+scripts/issues/generated/
+
+# Personal notes
+vrickish.md
+
+# Somzilla issues tracking
+somzilla.md