Merge branch 'main' into main

Author: chukwudiikeh

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,26 @@
+---
+name: Bug Report
+about: Report a bug in QuorumCredit
+labels: bug
+---
+
+**Describe the bug**
+A clear description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. 
+2. 
+3. 
+
+**Expected behavior**
+What you expected to happen.
+
+**Environment**
+- OS:
+- Rust version:
+- Stellar CLI version:
+- Network (testnet/mainnet):
+
+**Additional context**
+Add any other context or logs here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,17 @@
+---
+name: Feature Request
+about: Suggest a new feature for QuorumCredit
+labels: enhancement
+---
+
+**Problem / Motivation**
+What problem does this feature solve?
+
+**Proposed Solution**
+Describe the feature you'd like.
+
+**Alternatives Considered**
+Any alternative approaches you've thought about.
+
+**Additional context**
+Add any other context, mockups, or references here.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,18 @@
+## Description
+Brief summary of what this PR does and why.
+
+Closes #
+
+## Type of Change
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Refactor
+- [ ] Documentation
+- [ ] Infrastructure / CI
+
+## Checklist
+- [ ] `cargo check` passes
+- [ ] `cargo clippy` passes with no warnings
+- [ ] `cargo test` passes
+- [ ] New tests added for new functionality
+- [ ] Documentation updated if needed

.github/dependabot.yml

@@ -0,0 +1,9 @@
+version: 2
+
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10

.github/workflows/ci.yml

@@ -62,6 +62,8 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
         with:
           targets: wasm32-unknown-unknown
+          targets: wasm32-unknown-unknown
+          components: rustfmt, clippy
 
       - name: Cache cargo registry
         uses: actions/cache@v4

.github/workflows/coverage.yml

@@ -0,0 +1,28 @@
+name: Coverage
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  coverage:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install cargo-tarpaulin
+        run: cargo install cargo-tarpaulin
+
+      - name: Run coverage
+        run: cargo tarpaulin --out Xml --output-dir coverage
+
+      - name: Upload to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          files: coverage/cobertura.xml
+          token: ${{ secrets.CODECOV_TOKEN }}

Makefile

@@ -0,0 +1,34 @@
+.PHONY: build test deploy-testnet deploy-mainnet
+
+# ── Config ────────────────────────────────────────────────────────────────────
+
+CONTRACT_DIR := QuorumCredit
+WASM_TARGET  := wasm32-unknown-unknown
+
+# ── Targets ───────────────────────────────────────────────────────────────────
+
+## Compile the contract (native + WASM release build)
+build:
+	cd $(CONTRACT_DIR) && cargo build --target $(WASM_TARGET) --release
+
+## Run the full test suite
+test:
+	cd $(CONTRACT_DIR) && cargo test
+
+## Deploy to Stellar testnet
+deploy-testnet:
+	stellar contract deploy \
+		--wasm $(CONTRACT_DIR)/target/$(WASM_TARGET)/release/quorum_credit.wasm \
+		--network testnet \
+		--source $(DEPLOYER_SECRET_KEY)
+
+## Deploy to Stellar mainnet — requires interactive confirmation
+deploy-mainnet:
+	@echo "WARNING: You are about to deploy to MAINNET."
+	@read -p "Are you sure you want to deploy to MAINNET? [y/N]: " confirm && \
+		[ "$${confirm:-N}" = "y" ] || [ "$${confirm:-N}" = "Y" ] || \
+		(echo "Deployment aborted."; exit 1)
+	stellar contract deploy \
+		--wasm $(CONTRACT_DIR)/target/$(WASM_TARGET)/release/quorum_credit.wasm \
+		--network mainnet \
+		--source $(DEPLOYER_SECRET_KEY)

QuorumCredit/src/admin.rs

@@ -1,4 +1,4 @@
-use crate::helpers::{config, require_admin_approval, validate_admin_config};
+use crate::helpers::{config, extend_ttl, require_admin_approval, validate_admin_config};
 use crate::types::{Config, DataKey};
 use soroban_sdk::{symbol_short, Address, BytesN, Env, Vec};
 
@@ -113,7 +113,8 @@ pub fn whitelist_voucher(env: Env, admin_signers: Vec<Address>, voucher: Address
     require_admin_approval(&env, &admin_signers);
     env.storage()
         .persistent()
-        .set(&DataKey::VoucherWhitelist(voucher), &true);
+        .set(&DataKey::VoucherWhitelist(voucher.clone()), &true);
+    extend_ttl(&env, &DataKey::VoucherWhitelist(voucher));
 }
 
 pub fn set_fee_treasury(env: Env, admin_signers: Vec<Address>, treasury: Address) {
@@ -153,7 +154,8 @@ pub fn blacklist(env: Env, admin_signers: Vec<Address>, borrower: Address) {
     require_admin_approval(&env, &admin_signers);
     env.storage()
         .persistent()
-        .set(&DataKey::Blacklisted(borrower), &true);
+        .set(&DataKey::Blacklisted(borrower.clone()), &true);
+    extend_ttl(&env, &DataKey::Blacklisted(borrower));
 }
 
 pub fn set_config(env: Env, admin_signers: Vec<Address>, config: Config) {

QuorumCredit/src/governance.rs

@@ -1,6 +1,8 @@
 use crate::errors::ContractError;
-use crate::helpers::{add_slash_balance, config, get_active_loan_record, require_not_paused, validate_loan_active};
-use crate::types::{DataKey, SlashVoteRecord, VouchRecord, TimelockProposal, TimelockAction};
+use crate::helpers::{
+    add_slash_balance, config, get_active_loan_record, require_not_paused, validate_loan_active,
+};
+use crate::types::{DataKey, SlashVoteRecord, TimelockAction, TimelockProposal, VouchRecord};
 use soroban_sdk::{symbol_short, Address, Env, Vec};
 
 /// Default quorum: 50% of total vouched stake must approve.
@@ -192,7 +194,7 @@ fn execute_slash(env: &Env, borrower: &Address) -> Result<(), ContractError> {
 }
 
 /// ── Issue 109: Slash Proposal Confirmation Window ──
-/// 
+///
 /// Implements a two-step slash with timelock pattern:
 /// 1. propose_slash: Admin creates a proposal, sets execution time (eta)
 /// 2. execute_slash_proposal: After delay, anyone can execute
@@ -313,10 +315,7 @@ pub fn cancel_slash_proposal(
         .ok_or(ContractError::NoActiveLoan)?;
 
     // Only proposer can cancel
-    assert!(
-        caller == proposal.proposer,
-        "only proposer can cancel"
-    );
+    assert!(caller == proposal.proposer, "only proposer can cancel");
 
     if proposal.executed || proposal.cancelled {
         return Err(ContractError::SlashAlreadyExecuted);

QuorumCredit/src/helpers.rs

@@ -2,6 +2,17 @@ use crate::errors::ContractError;
 use crate::types::{Config, DataKey, LoanRecord};
 use soroban_sdk::{token, Address, Env, String, Vec};
 
+/// Ledgers to live for persistent storage entries (~1 year at ~5s/ledger).
+const PERSISTENT_TTL_LEDGERS: u32 = 6_307_200;
+
+/// Extend the TTL of a persistent storage entry after every write.
+/// Call this immediately after `env.storage().persistent().set(key, ...)`.
+pub fn extend_ttl(env: &Env, key: &DataKey) {
+    env.storage()
+        .persistent()
+        .extend_ttl(key, PERSISTENT_TTL_LEDGERS, PERSISTENT_TTL_LEDGERS);
+}
+
 /// Returns true if the address is the all-zeros account or contract address.
 pub fn is_zero_address(env: &Env, addr: &Address) -> bool {
     // Stellar zero account: all-zero 32-byte ed25519 key
@@ -223,3 +234,34 @@ pub fn validate_admin_config(
 
     Ok(())
 }
+
+#[cfg(test)]
+mod ttl_tests {
+    use super::*;
+    use crate::{QuorumCreditContract, QuorumCreditContractClient};
+    use soroban_sdk::{testutils::Address as _, Address, Env, Vec};
+
+    /// Verify extend_ttl does not panic when called on an existing persistent key.
+    #[test]
+    fn test_extend_ttl_does_not_panic() {
+        let env = Env::default();
+        env.mock_all_auths();
+
+        let contract_id = env.register_contract(None, QuorumCreditContract);
+        let client = QuorumCreditContractClient::new(&env, &contract_id);
+
+        let deployer = Address::generate(&env);
+        let admin = Address::generate(&env);
+        let admins = Vec::from_array(&env, [admin.clone()]);
+        let token = Address::generate(&env);
+
+        client.initialize(&deployer, &admins, &1, &token);
+
+        // Write a persistent key then call extend_ttl — must not panic.
+        env.as_contract(&contract_id, || {
+            let key = DataKey::LoanCount(deployer.clone());
+            env.storage().persistent().set(&key, &42u32);
+            extend_ttl(&env, &key);
+        });
+    }
+}