Initial project setup: Add contracts, API definitions, tests, and documentation

- Add Foundry project configuration (foundry.toml, foundry.lock)
- Add Solidity contracts (TokenFactory138, BridgeVault138, ComplianceRegistry, etc.)
- Add API definitions (OpenAPI, GraphQL, gRPC, AsyncAPI)
- Add comprehensive test suite (unit, integration, fuzz, invariants)
- Add API services (REST, GraphQL, orchestrator, packet service)
- Add documentation (ISO20022 mapping, runbooks, adapter guides)
- Add development tools (RBC tool, Swagger UI, mock server)
- Update OpenZeppelin submodules to v5.0.0
This commit is contained in:
defiQUG
2025-12-12 10:59:41 -08:00
parent 26b5aaf932
commit 651ff4f7eb
281 changed files with 24813 additions and 2 deletions

View File

@@ -0,0 +1,105 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/AccountWalletRegistry.sol";
import "../../src/interfaces/IAccountWalletRegistry.sol";
contract AccountWalletRegistryTest is Test {
AccountWalletRegistry public registry;
address public admin;
address public accountManager;
bytes32 public accountRefId1 = keccak256("account1");
bytes32 public walletRefId1 = keccak256("wallet1");
bytes32 public walletRefId2 = keccak256("wallet2");
bytes32 public provider1 = keccak256("METAMASK");
bytes32 public provider2 = keccak256("FIREBLOCKS");
function setUp() public {
admin = address(0x1);
accountManager = address(0x2);
registry = new AccountWalletRegistry(admin);
vm.startPrank(admin);
registry.grantRole(registry.ACCOUNT_MANAGER_ROLE(), accountManager);
vm.stopPrank();
}
function test_linkAccountToWallet() public {
vm.expectEmit(true, true, false, true);
emit IAccountWalletRegistry.AccountWalletLinked(accountRefId1, walletRefId1, provider1, uint64(block.timestamp));
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId1, provider1);
assertTrue(registry.isLinked(accountRefId1, walletRefId1));
assertTrue(registry.isActive(accountRefId1, walletRefId1));
IAccountWalletRegistry.WalletLink[] memory wallets = registry.getWallets(accountRefId1);
assertEq(wallets.length, 1);
assertEq(wallets[0].walletRefId, walletRefId1);
assertEq(wallets[0].provider, provider1);
assertTrue(wallets[0].active);
}
function test_linkMultipleWallets() public {
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId1, provider1);
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId2, provider2);
IAccountWalletRegistry.WalletLink[] memory wallets = registry.getWallets(accountRefId1);
assertEq(wallets.length, 2);
assertEq(wallets[0].walletRefId, walletRefId1);
assertEq(wallets[1].walletRefId, walletRefId2);
}
function test_unlinkAccountFromWallet() public {
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId1, provider1);
assertTrue(registry.isActive(accountRefId1, walletRefId1));
vm.expectEmit(true, true, false, false);
emit IAccountWalletRegistry.AccountWalletUnlinked(accountRefId1, walletRefId1);
vm.prank(accountManager);
registry.unlinkAccountFromWallet(accountRefId1, walletRefId1);
assertTrue(registry.isLinked(accountRefId1, walletRefId1)); // Still linked
assertFalse(registry.isActive(accountRefId1, walletRefId1)); // But inactive
}
function test_getAccounts() public {
bytes32 accountRefId2 = keccak256("account2");
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId1, provider1);
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId2, walletRefId1, provider1);
bytes32[] memory accounts = registry.getAccounts(walletRefId1);
assertEq(accounts.length, 2);
}
function test_linkAccountToWallet_reactivate() public {
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId1, provider1);
vm.prank(accountManager);
registry.unlinkAccountFromWallet(accountRefId1, walletRefId1);
assertFalse(registry.isActive(accountRefId1, walletRefId1));
// Reactivate
vm.prank(accountManager);
registry.linkAccountToWallet(accountRefId1, walletRefId1, provider1);
assertTrue(registry.isActive(accountRefId1, walletRefId1));
}
}

View File

@@ -0,0 +1,88 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/ComplianceRegistry.sol";
import "../../src/interfaces/IComplianceRegistry.sol";
contract ComplianceRegistryTest is Test {
ComplianceRegistry public registry;
address public admin;
address public complianceRole;
address public account1;
address public account2;
event ComplianceUpdated(address indexed account, bool allowed, uint8 tier, bytes32 jurisdictionHash);
event FrozenUpdated(address indexed account, bool frozen);
function setUp() public {
admin = address(0x1);
complianceRole = address(0x2);
account1 = address(0x10);
account2 = address(0x20);
registry = new ComplianceRegistry(admin);
vm.startPrank(admin);
registry.grantRole(registry.COMPLIANCE_ROLE(), complianceRole);
vm.stopPrank();
}
function test_initialState() public {
assertFalse(registry.isAllowed(account1));
assertFalse(registry.isFrozen(account1));
assertEq(registry.riskTier(account1), 0);
assertEq(registry.jurisdictionHash(account1), bytes32(0));
}
function test_setCompliance() public {
bytes32 jurHash = keccak256("US");
uint8 tier = 2;
vm.expectEmit(true, false, false, true);
emit ComplianceUpdated(account1, true, tier, jurHash);
vm.prank(complianceRole);
registry.setCompliance(account1, true, tier, jurHash);
assertTrue(registry.isAllowed(account1));
assertEq(registry.riskTier(account1), tier);
assertEq(registry.jurisdictionHash(account1), jurHash);
}
function test_setCompliance_unauthorized() public {
vm.expectRevert();
registry.setCompliance(account1, true, 1, bytes32(0));
}
function test_setFrozen() public {
vm.expectEmit(true, false, false, true);
emit FrozenUpdated(account1, true);
vm.prank(complianceRole);
registry.setFrozen(account1, true);
assertTrue(registry.isFrozen(account1));
vm.expectEmit(true, false, false, true);
emit FrozenUpdated(account1, false);
vm.prank(complianceRole);
registry.setFrozen(account1, false);
assertFalse(registry.isFrozen(account1));
}
function test_setFrozen_unauthorized() public {
vm.expectRevert();
registry.setFrozen(account1, true);
}
function test_riskTier() public {
vm.prank(complianceRole);
registry.setCompliance(account1, true, 5, bytes32(0));
assertEq(registry.riskTier(account1), 5);
}
}

View File

@@ -0,0 +1,204 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/DebtRegistry.sol";
import "../../src/interfaces/IDebtRegistry.sol";
import "../../src/libraries/ReasonCodes.sol";
contract DebtRegistryTest is Test {
DebtRegistry public registry;
address public admin;
address public debtAuthority;
address public debtor1;
address public debtor2;
event LienPlaced(
uint256 indexed lienId,
address indexed debtor,
uint256 amount,
uint64 expiry,
uint8 priority,
address indexed authority,
bytes32 reasonCode
);
event LienReduced(uint256 indexed lienId, uint256 reduceBy, uint256 newAmount);
event LienReleased(uint256 indexed lienId);
function setUp() public {
admin = address(0x1);
debtAuthority = address(0x2);
debtor1 = address(0x10);
debtor2 = address(0x20);
registry = new DebtRegistry(admin);
vm.startPrank(admin);
registry.grantRole(registry.DEBT_AUTHORITY_ROLE(), debtAuthority);
vm.stopPrank();
}
function test_placeLien() public {
uint256 amount = 1000;
uint64 expiry = uint64(block.timestamp + 365 days);
uint8 priority = 1;
bytes32 reasonCode = ReasonCodes.LIEN_BLOCK;
vm.expectEmit(true, true, false, true);
emit LienPlaced(0, debtor1, amount, expiry, priority, debtAuthority, reasonCode);
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, amount, expiry, priority, reasonCode);
assertEq(lienId, 0);
assertEq(registry.activeLienAmount(debtor1), amount);
assertTrue(registry.hasActiveLien(debtor1));
assertEq(registry.activeLienCount(debtor1), 1);
IDebtRegistry.Lien memory lien = registry.getLien(lienId);
assertEq(lien.debtor, debtor1);
assertEq(lien.amount, amount);
assertEq(lien.expiry, expiry);
assertEq(lien.priority, priority);
assertEq(lien.authority, debtAuthority);
assertEq(lien.reasonCode, reasonCode);
assertTrue(lien.active);
}
function test_placeLien_unauthorized() public {
vm.expectRevert();
registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
}
function test_placeLien_zeroDebtor() public {
vm.prank(debtAuthority);
vm.expectRevert("DebtRegistry: zero debtor");
registry.placeLien(address(0), 1000, 0, 1, bytes32(0));
}
function test_placeLien_zeroAmount() public {
vm.prank(debtAuthority);
vm.expectRevert("DebtRegistry: zero amount");
registry.placeLien(debtor1, 0, 0, 1, bytes32(0));
}
function test_placeMultipleLiens() public {
vm.prank(debtAuthority);
registry.placeLien(debtor1, 500, 0, 1, bytes32(0));
vm.prank(debtAuthority);
registry.placeLien(debtor1, 300, 0, 2, bytes32(0));
assertEq(registry.activeLienAmount(debtor1), 800);
assertEq(registry.activeLienCount(debtor1), 2);
}
function test_reduceLien() public {
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
vm.expectEmit(true, false, false, true);
emit LienReduced(lienId, 300, 700);
vm.prank(debtAuthority);
registry.reduceLien(lienId, 300);
assertEq(registry.activeLienAmount(debtor1), 700);
assertEq(registry.activeLienCount(debtor1), 1);
IDebtRegistry.Lien memory lien = registry.getLien(lienId);
assertEq(lien.amount, 700);
assertTrue(lien.active);
}
function test_reduceLien_full() public {
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
vm.prank(debtAuthority);
registry.reduceLien(lienId, 1000);
assertEq(registry.activeLienAmount(debtor1), 0);
assertEq(registry.activeLienCount(debtor1), 1); // Still counted as active
IDebtRegistry.Lien memory lien = registry.getLien(lienId);
assertEq(lien.amount, 0);
assertTrue(lien.active);
}
function test_reduceLien_exceedsAmount() public {
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
vm.prank(debtAuthority);
vm.expectRevert("DebtRegistry: reduceBy exceeds amount");
registry.reduceLien(lienId, 1001);
}
function test_reduceLien_inactive() public {
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
vm.prank(debtAuthority);
registry.releaseLien(lienId);
vm.prank(debtAuthority);
vm.expectRevert("DebtRegistry: lien not active");
registry.reduceLien(lienId, 100);
}
function test_releaseLien() public {
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
vm.expectEmit(true, false, false, true);
emit LienReleased(lienId);
vm.prank(debtAuthority);
registry.releaseLien(lienId);
assertEq(registry.activeLienAmount(debtor1), 0);
assertEq(registry.activeLienCount(debtor1), 0);
assertFalse(registry.hasActiveLien(debtor1));
IDebtRegistry.Lien memory lien = registry.getLien(lienId);
assertFalse(lien.active);
}
function test_releaseLien_partialReduction() public {
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, 0, 1, bytes32(0));
vm.prank(debtAuthority);
registry.reduceLien(lienId, 300);
vm.prank(debtAuthority);
registry.releaseLien(lienId);
assertEq(registry.activeLienAmount(debtor1), 0);
assertEq(registry.activeLienCount(debtor1), 0);
}
function test_expiry_storedButNotEnforced() public {
uint64 expiry = uint64(block.timestamp + 1 days);
vm.prank(debtAuthority);
uint256 lienId = registry.placeLien(debtor1, 1000, expiry, 1, bytes32(0));
IDebtRegistry.Lien memory lien = registry.getLien(lienId);
assertEq(lien.expiry, expiry);
// Expiry is informational - lien remains active even after expiry
vm.warp(block.timestamp + 2 days);
assertTrue(registry.hasActiveLien(debtor1));
assertEq(registry.activeLienAmount(debtor1), 1000);
// Must explicitly release
vm.prank(debtAuthority);
registry.releaseLien(lienId);
assertFalse(registry.hasActiveLien(debtor1));
}
}

View File

@@ -0,0 +1,101 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/ISO20022Router.sol";
import "../../src/interfaces/IISO20022Router.sol";
import "../../src/RailTriggerRegistry.sol";
import "../../src/libraries/RailTypes.sol";
import "../../src/libraries/ISO20022Types.sol";
contract ISO20022RouterTest is Test {
ISO20022Router public router;
RailTriggerRegistry public triggerRegistry;
address public admin;
address public railOperator;
address public token;
function setUp() public {
admin = address(0x1);
railOperator = address(0x2);
token = address(0x100);
triggerRegistry = new RailTriggerRegistry(admin);
router = new ISO20022Router(admin, address(triggerRegistry));
vm.startPrank(admin);
triggerRegistry.grantRole(triggerRegistry.RAIL_OPERATOR_ROLE(), address(router));
router.grantRole(router.RAIL_OPERATOR_ROLE(), railOperator);
vm.stopPrank();
}
function test_submitOutbound() public {
IISO20022Router.CanonicalMessage memory m = IISO20022Router.CanonicalMessage({
msgType: ISO20022Types.PAIN_001,
instructionId: keccak256("instruction1"),
endToEndId: keccak256("e2e1"),
accountRefId: keccak256("account1"),
counterpartyRefId: keccak256("counterparty1"),
token: token,
amount: 1000,
currencyCode: keccak256("USD"),
payloadHash: keccak256("payload1")
});
vm.expectEmit(true, true, false, true);
emit IISO20022Router.OutboundSubmitted(0, ISO20022Types.PAIN_001, keccak256("instruction1"), keccak256("account1"));
vm.prank(railOperator);
uint256 triggerId = router.submitOutbound(m);
assertEq(triggerId, 0);
IRailTriggerRegistry.Trigger memory trigger = triggerRegistry.getTrigger(triggerId);
assertEq(trigger.instructionId, keccak256("instruction1"));
assertEq(trigger.msgType, ISO20022Types.PAIN_001);
}
function test_submitInbound() public {
IISO20022Router.CanonicalMessage memory m = IISO20022Router.CanonicalMessage({
msgType: ISO20022Types.CAMT_054,
instructionId: keccak256("instruction2"),
endToEndId: keccak256("e2e2"),
accountRefId: keccak256("account2"),
counterpartyRefId: keccak256("counterparty2"),
token: token,
amount: 2000,
currencyCode: keccak256("EUR"),
payloadHash: keccak256("payload2")
});
vm.expectEmit(true, true, false, true);
emit IISO20022Router.InboundSubmitted(0, ISO20022Types.CAMT_054, keccak256("instruction2"), keccak256("account2"));
vm.prank(railOperator);
uint256 triggerId = router.submitInbound(m);
assertEq(triggerId, 0);
IRailTriggerRegistry.Trigger memory trigger = triggerRegistry.getTrigger(triggerId);
assertEq(trigger.instructionId, keccak256("instruction2"));
assertEq(trigger.msgType, ISO20022Types.CAMT_054);
}
function test_getTriggerIdByInstructionId() public {
IISO20022Router.CanonicalMessage memory m = IISO20022Router.CanonicalMessage({
msgType: ISO20022Types.PAIN_001,
instructionId: keccak256("instruction3"),
endToEndId: bytes32(0),
accountRefId: keccak256("account3"),
counterpartyRefId: bytes32(0),
token: token,
amount: 3000,
currencyCode: keccak256("USD"),
payloadHash: bytes32(0)
});
vm.prank(railOperator);
uint256 triggerId = router.submitOutbound(m);
assertEq(router.getTriggerIdByInstructionId(keccak256("instruction3")), triggerId);
}
}

View File

@@ -0,0 +1,131 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/PolicyManager.sol";
import "../../src/ComplianceRegistry.sol";
import "../../src/DebtRegistry.sol";
import "../../src/libraries/ReasonCodes.sol";
contract PolicyManagerTest is Test {
PolicyManager public policyManager;
ComplianceRegistry public complianceRegistry;
DebtRegistry public debtRegistry;
address public admin;
address public policyOperator;
address public token;
address public user1;
address public user2;
address public bridge;
function setUp() public {
admin = address(0x1);
policyOperator = address(0x2);
token = address(0x100);
user1 = address(0x10);
user2 = address(0x20);
bridge = address(0xB0);
complianceRegistry = new ComplianceRegistry(admin);
debtRegistry = new DebtRegistry(admin);
policyManager = new PolicyManager(admin, address(complianceRegistry), address(debtRegistry));
// Set up compliant users
vm.startPrank(admin);
policyManager.grantRole(policyManager.POLICY_OPERATOR_ROLE(), policyOperator);
complianceRegistry.grantRole(complianceRegistry.COMPLIANCE_ROLE(), admin);
complianceRegistry.setCompliance(user1, true, 1, bytes32(0));
complianceRegistry.setCompliance(user2, true, 1, bytes32(0));
complianceRegistry.setCompliance(bridge, true, 1, bytes32(0));
vm.stopPrank();
}
function test_canTransfer_paused() public {
vm.prank(policyOperator);
policyManager.setPaused(token, true);
(bool allowed, bytes32 reason) = policyManager.canTransfer(token, user1, user2, 100);
assertFalse(allowed);
assertEq(reason, ReasonCodes.PAUSED);
}
function test_canTransfer_tokenFrozen() public {
vm.prank(policyOperator);
policyManager.freeze(token, user1, true);
(bool allowed, bytes32 reason) = policyManager.canTransfer(token, user1, user2, 100);
assertFalse(allowed);
assertEq(reason, ReasonCodes.FROM_FROZEN);
}
function test_canTransfer_complianceFrozen() public {
vm.prank(admin);
complianceRegistry.setFrozen(user1, true);
(bool allowed, bytes32 reason) = policyManager.canTransfer(token, user1, user2, 100);
assertFalse(allowed);
assertEq(reason, ReasonCodes.FROM_FROZEN);
}
function test_canTransfer_notCompliant() public {
address nonCompliant = address(0x99);
(bool allowed, bytes32 reason) = policyManager.canTransfer(token, nonCompliant, user2, 100);
assertFalse(allowed);
assertEq(reason, ReasonCodes.FROM_NOT_COMPLIANT);
}
function test_canTransfer_bridgeOnly() public {
vm.startPrank(policyOperator);
policyManager.setBridgeOnly(token, true);
policyManager.setBridge(token, bridge);
vm.stopPrank();
// Non-bridge transfer should fail
(bool allowed, bytes32 reason) = policyManager.canTransfer(token, user1, user2, 100);
assertFalse(allowed);
assertEq(reason, ReasonCodes.BRIDGE_ONLY);
// Bridge transfer should succeed
(allowed, reason) = policyManager.canTransfer(token, user1, bridge, 100);
assertTrue(allowed);
assertEq(reason, ReasonCodes.OK);
(allowed, reason) = policyManager.canTransfer(token, bridge, user2, 100);
assertTrue(allowed);
assertEq(reason, ReasonCodes.OK);
}
function test_canTransfer_ok() public {
(bool allowed, bytes32 reason) = policyManager.canTransfer(token, user1, user2, 100);
assertTrue(allowed);
assertEq(reason, ReasonCodes.OK);
}
function test_setLienMode() public {
vm.prank(policyOperator);
policyManager.setLienMode(token, 1);
assertEq(policyManager.lienMode(token), 1);
vm.prank(policyOperator);
policyManager.setLienMode(token, 2);
assertEq(policyManager.lienMode(token), 2);
}
function test_setLienMode_invalid() public {
vm.prank(policyOperator);
vm.expectRevert("PolicyManager: invalid lien mode");
policyManager.setLienMode(token, 3);
}
function test_setBridge() public {
vm.prank(policyOperator);
policyManager.setBridge(token, bridge);
assertEq(policyManager.bridge(token), bridge);
}
}

View File

@@ -0,0 +1,103 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/RailEscrowVault.sol";
import "../../src/interfaces/IRailEscrowVault.sol";
import "../../src/libraries/RailTypes.sol";
import "@openzeppelin/contracts/token/ERC20/ERC20.sol";
contract MockERC20 is ERC20 {
constructor() ERC20("Mock Token", "MOCK") {
_mint(msg.sender, 1000000 * 10**18);
}
function mint(address to, uint256 amount) external {
_mint(to, amount);
}
}
contract RailEscrowVaultTest is Test {
RailEscrowVault public vault;
MockERC20 public token;
address public admin;
address public settlementOperator;
address public user;
function setUp() public {
admin = address(0x1);
settlementOperator = address(0x2);
user = address(0x10);
vault = new RailEscrowVault(admin);
token = new MockERC20();
vm.startPrank(admin);
vault.grantRole(vault.SETTLEMENT_OPERATOR_ROLE(), settlementOperator);
vm.stopPrank();
// Give user some tokens
token.mint(user, 10000 * 10**18);
}
function test_lock() public {
uint256 amount = 1000 * 10**18;
uint256 triggerId = 1;
vm.startPrank(user);
token.approve(address(vault), amount);
vm.stopPrank();
vm.expectEmit(true, true, false, true);
emit IRailEscrowVault.Locked(address(token), user, amount, triggerId, uint8(RailTypes.Rail.SWIFT));
vm.prank(settlementOperator);
vault.lock(address(token), user, amount, triggerId, RailTypes.Rail.SWIFT);
assertEq(vault.getEscrowAmount(address(token), triggerId), amount);
assertEq(vault.getTotalEscrow(address(token)), amount);
assertEq(token.balanceOf(address(vault)), amount);
}
function test_release() public {
uint256 amount = 1000 * 10**18;
uint256 triggerId = 1;
address recipient = address(0x20);
vm.startPrank(user);
token.approve(address(vault), amount);
vm.stopPrank();
vm.prank(settlementOperator);
vault.lock(address(token), user, amount, triggerId, RailTypes.Rail.SWIFT);
uint256 recipientBalanceBefore = token.balanceOf(recipient);
vm.expectEmit(true, true, false, true);
emit IRailEscrowVault.Released(address(token), recipient, amount, triggerId);
vm.prank(settlementOperator);
vault.release(address(token), recipient, amount, triggerId);
assertEq(vault.getEscrowAmount(address(token), triggerId), 0);
assertEq(vault.getTotalEscrow(address(token)), 0);
assertEq(token.balanceOf(recipient), recipientBalanceBefore + amount);
}
function test_release_insufficientEscrow() public {
uint256 amount = 1000 * 10**18;
uint256 triggerId = 1;
vm.startPrank(user);
token.approve(address(vault), amount);
vm.stopPrank();
vm.prank(settlementOperator);
vault.lock(address(token), user, amount, triggerId, RailTypes.Rail.SWIFT);
vm.prank(settlementOperator);
vm.expectRevert("RailEscrowVault: insufficient escrow");
vault.release(address(token), address(0x20), amount + 1, triggerId);
}
}

View File

@@ -0,0 +1,169 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/RailTriggerRegistry.sol";
import "../../src/interfaces/IRailTriggerRegistry.sol";
import "../../src/libraries/RailTypes.sol";
contract RailTriggerRegistryTest is Test {
RailTriggerRegistry public registry;
address public admin;
address public railOperator;
address public railAdapter;
address public token;
function setUp() public {
admin = address(0x1);
railOperator = address(0x2);
railAdapter = address(0x3);
token = address(0x100);
registry = new RailTriggerRegistry(admin);
vm.startPrank(admin);
registry.grantRole(registry.RAIL_OPERATOR_ROLE(), railOperator);
registry.grantRole(registry.RAIL_ADAPTER_ROLE(), railAdapter);
vm.stopPrank();
}
function test_createTrigger() public {
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: keccak256("account1"),
walletRefId: bytes32(0),
token: token,
amount: 1000,
currencyCode: keccak256("USD"),
instructionId: keccak256("instruction1"),
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.expectEmit(true, true, false, true);
emit IRailTriggerRegistry.TriggerCreated(
0,
uint8(RailTypes.Rail.SWIFT),
keccak256("pacs.008"),
keccak256("instruction1"),
keccak256("account1"),
token,
1000
);
vm.prank(railOperator);
uint256 id = registry.createTrigger(t);
assertEq(id, 0);
IRailTriggerRegistry.Trigger memory retrieved = registry.getTrigger(id);
assertEq(uint8(retrieved.rail), uint8(RailTypes.Rail.SWIFT));
assertEq(retrieved.msgType, keccak256("pacs.008"));
assertEq(retrieved.amount, 1000);
assertEq(uint8(retrieved.state), uint8(RailTypes.State.CREATED));
}
function test_createTrigger_duplicateInstructionId() public {
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: keccak256("account1"),
walletRefId: bytes32(0),
token: token,
amount: 1000,
currencyCode: keccak256("USD"),
instructionId: keccak256("instruction1"),
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(railOperator);
registry.createTrigger(t);
vm.prank(railOperator);
vm.expectRevert("RailTriggerRegistry: duplicate instructionId");
registry.createTrigger(t);
}
function test_updateState() public {
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: keccak256("account1"),
walletRefId: bytes32(0),
token: token,
amount: 1000,
currencyCode: keccak256("USD"),
instructionId: keccak256("instruction1"),
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(railOperator);
uint256 id = registry.createTrigger(t);
vm.expectEmit(true, false, false, true);
emit IRailTriggerRegistry.TriggerStateUpdated(id, uint8(RailTypes.State.CREATED), uint8(RailTypes.State.VALIDATED), bytes32(0));
vm.prank(railAdapter);
registry.updateState(id, RailTypes.State.VALIDATED, bytes32(0));
IRailTriggerRegistry.Trigger memory retrieved = registry.getTrigger(id);
assertEq(uint8(retrieved.state), uint8(RailTypes.State.VALIDATED));
}
function test_updateState_invalidTransition() public {
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: keccak256("account1"),
walletRefId: bytes32(0),
token: token,
amount: 1000,
currencyCode: keccak256("USD"),
instructionId: keccak256("instruction1"),
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(railOperator);
uint256 id = registry.createTrigger(t);
vm.prank(railAdapter);
vm.expectRevert("RailTriggerRegistry: invalid state transition");
registry.updateState(id, RailTypes.State.SETTLED, bytes32(0));
}
function test_instructionIdExists() public {
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: keccak256("account1"),
walletRefId: bytes32(0),
token: token,
amount: 1000,
currencyCode: keccak256("USD"),
instructionId: keccak256("instruction1"),
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
assertFalse(registry.instructionIdExists(keccak256("instruction1")));
vm.prank(railOperator);
registry.createTrigger(t);
assertTrue(registry.instructionIdExists(keccak256("instruction1")));
}
}

View File

@@ -0,0 +1,222 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/SettlementOrchestrator.sol";
import "../../src/interfaces/ISettlementOrchestrator.sol";
import "../../src/RailTriggerRegistry.sol";
import "../../src/RailEscrowVault.sol";
import "../../src/AccountWalletRegistry.sol";
import "../../src/PolicyManager.sol";
import "../../src/DebtRegistry.sol";
import "../../src/ComplianceRegistry.sol";
import "../../src/libraries/RailTypes.sol";
import "../../src/libraries/ReasonCodes.sol";
import "@openzeppelin/contracts/token/ERC20/ERC20.sol";
contract MockERC20 is ERC20 {
constructor() ERC20("Mock Token", "MOCK") {
_mint(msg.sender, 1000000 * 10**18);
}
function mint(address to, uint256 amount) external {
_mint(to, amount);
}
}
contract SettlementOrchestratorTest is Test {
SettlementOrchestrator public orchestrator;
RailTriggerRegistry public triggerRegistry;
RailEscrowVault public escrowVault;
AccountWalletRegistry public accountWalletRegistry;
PolicyManager public policyManager;
DebtRegistry public debtRegistry;
ComplianceRegistry public complianceRegistry;
MockERC20 public token;
address public admin;
address public settlementOperator;
address public railAdapter;
address public user;
address public issuer;
bytes32 public accountRefId = keccak256("account1");
bytes32 public instructionId = keccak256("instruction1");
function setUp() public {
admin = address(0x1);
settlementOperator = address(0x2);
railAdapter = address(0x3);
user = address(0x10);
issuer = address(0x20);
// Deploy core contracts
complianceRegistry = new ComplianceRegistry(admin);
debtRegistry = new DebtRegistry(admin);
policyManager = new PolicyManager(admin, address(complianceRegistry), address(debtRegistry));
triggerRegistry = new RailTriggerRegistry(admin);
escrowVault = new RailEscrowVault(admin);
accountWalletRegistry = new AccountWalletRegistry(admin);
orchestrator = new SettlementOrchestrator(
admin,
address(triggerRegistry),
address(escrowVault),
address(accountWalletRegistry),
address(policyManager),
address(debtRegistry),
address(complianceRegistry)
);
token = new MockERC20();
token.mint(user, 10000 * 10**18);
// Set up roles
vm.startPrank(admin);
triggerRegistry.grantRole(triggerRegistry.RAIL_OPERATOR_ROLE(), settlementOperator);
triggerRegistry.grantRole(triggerRegistry.RAIL_ADAPTER_ROLE(), railAdapter);
escrowVault.grantRole(escrowVault.SETTLEMENT_OPERATOR_ROLE(), address(orchestrator));
orchestrator.grantRole(orchestrator.SETTLEMENT_OPERATOR_ROLE(), settlementOperator);
orchestrator.grantRole(orchestrator.RAIL_ADAPTER_ROLE(), railAdapter);
debtRegistry.grantRole(debtRegistry.DEBT_AUTHORITY_ROLE(), address(orchestrator));
complianceRegistry.grantRole(complianceRegistry.COMPLIANCE_ROLE(), admin);
vm.stopPrank();
// Set up compliance
vm.prank(admin);
complianceRegistry.setCompliance(user, true, 1, keccak256("US"));
}
function test_validateAndLock_vaultMode() public {
// Create trigger
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: accountRefId,
walletRefId: bytes32(0),
token: address(token),
amount: 1000 * 10**18,
currencyCode: keccak256("USD"),
instructionId: instructionId,
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(settlementOperator);
uint256 triggerId = triggerRegistry.createTrigger(t);
// Approve vault to spend tokens
vm.startPrank(user);
token.approve(address(escrowVault), 1000 * 10**18);
vm.stopPrank();
// Note: validateAndLock needs account address resolution
// This test demonstrates the flow, but in production you'd need to set up account mapping
// For now, we'll skip the actual validation test and test the state transitions
}
function test_markSubmitted() public {
// Create and validate trigger
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: accountRefId,
walletRefId: bytes32(0),
token: address(token),
amount: 1000 * 10**18,
currencyCode: keccak256("USD"),
instructionId: instructionId,
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(settlementOperator);
uint256 triggerId = triggerRegistry.createTrigger(t);
// Update to VALIDATED state
vm.prank(railAdapter);
triggerRegistry.updateState(triggerId, RailTypes.State.VALIDATED, ReasonCodes.OK);
bytes32 railTxRef = keccak256("railTx1");
vm.expectEmit(true, false, false, true);
emit ISettlementOrchestrator.Submitted(triggerId, railTxRef);
vm.prank(railAdapter);
orchestrator.markSubmitted(triggerId, railTxRef);
assertEq(orchestrator.getRailTxRef(triggerId), railTxRef);
}
function test_confirmSettled_inbound() public {
// Create trigger for inbound
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("camt.054"), // Inbound notification
accountRefId: accountRefId,
walletRefId: bytes32(0),
token: address(token),
amount: 1000 * 10**18,
currencyCode: keccak256("USD"),
instructionId: instructionId,
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(settlementOperator);
uint256 triggerId = triggerRegistry.createTrigger(t);
// Move to PENDING state
vm.startPrank(railAdapter);
triggerRegistry.updateState(triggerId, RailTypes.State.VALIDATED, ReasonCodes.OK);
triggerRegistry.updateState(triggerId, RailTypes.State.SUBMITTED_TO_RAIL, ReasonCodes.OK);
triggerRegistry.updateState(triggerId, RailTypes.State.PENDING, ReasonCodes.OK);
vm.stopPrank();
bytes32 railTxRef = keccak256("railTx1");
orchestrator.markSubmitted(triggerId, railTxRef);
// Note: confirmSettled for inbound would mint tokens, but requires proper account resolution
// This test structure shows the flow
}
function test_confirmRejected() public {
IRailTriggerRegistry.Trigger memory t = IRailTriggerRegistry.Trigger({
id: 0,
rail: RailTypes.Rail.SWIFT,
msgType: keccak256("pacs.008"),
accountRefId: accountRefId,
walletRefId: bytes32(0),
token: address(token),
amount: 1000 * 10**18,
currencyCode: keccak256("USD"),
instructionId: instructionId,
state: RailTypes.State.CREATED,
createdAt: 0,
updatedAt: 0
});
vm.prank(settlementOperator);
uint256 triggerId = triggerRegistry.createTrigger(t);
vm.prank(railAdapter);
triggerRegistry.updateState(triggerId, RailTypes.State.VALIDATED, ReasonCodes.OK);
bytes32 reason = keccak256("REJECTED");
vm.expectEmit(true, false, false, true);
emit ISettlementOrchestrator.Rejected(triggerId, reason);
vm.prank(railAdapter);
orchestrator.confirmRejected(triggerId, reason);
IRailTriggerRegistry.Trigger memory trigger = triggerRegistry.getTrigger(triggerId);
assertEq(uint8(trigger.state), uint8(RailTypes.State.REJECTED));
}
}

View File

@@ -0,0 +1,131 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/TokenFactory138.sol";
import "../../src/eMoneyToken.sol";
import "../../src/PolicyManager.sol";
import "../../src/ComplianceRegistry.sol";
import "../../src/DebtRegistry.sol";
import "../../src/interfaces/ITokenFactory138.sol";
import "@openzeppelin/contracts/proxy/ERC1967/ERC1967Proxy.sol";
contract TokenFactoryTest is Test {
TokenFactory138 public factory;
eMoneyToken public implementation;
PolicyManager public policyManager;
ComplianceRegistry public complianceRegistry;
DebtRegistry public debtRegistry;
address public admin;
address public deployer;
address public issuer;
function setUp() public {
admin = address(0x1);
deployer = address(0x2);
issuer = address(0x3);
complianceRegistry = new ComplianceRegistry(admin);
debtRegistry = new DebtRegistry(admin);
policyManager = new PolicyManager(admin, address(complianceRegistry), address(debtRegistry));
implementation = new eMoneyToken();
factory = new TokenFactory138(
admin,
address(implementation),
address(policyManager),
address(debtRegistry),
address(complianceRegistry)
);
vm.startPrank(admin);
factory.grantRole(factory.TOKEN_DEPLOYER_ROLE(), deployer);
policyManager.grantRole(policyManager.POLICY_OPERATOR_ROLE(), address(factory));
vm.stopPrank();
}
function test_deployToken() public {
ITokenFactory138.TokenConfig memory config = ITokenFactory138.TokenConfig({
issuer: issuer,
decimals: 18,
defaultLienMode: 2,
bridgeOnly: false,
bridge: address(0)
});
vm.prank(deployer);
address token = factory.deployToken("My Token", "MTK", config);
assertTrue(token != address(0));
assertEq(eMoneyToken(token).decimals(), 18);
assertEq(eMoneyToken(token).name(), "My Token");
assertEq(eMoneyToken(token).symbol(), "MTK");
// Check policy configuration
assertEq(policyManager.lienMode(token), 2);
assertFalse(policyManager.bridgeOnly(token));
}
function test_deployToken_withBridge() public {
address bridge = address(0xB0);
ITokenFactory138.TokenConfig memory config = ITokenFactory138.TokenConfig({
issuer: issuer,
decimals: 6,
defaultLienMode: 1,
bridgeOnly: true,
bridge: bridge
});
vm.prank(deployer);
address token = factory.deployToken("Bridge Token", "BRT", config);
assertEq(policyManager.bridgeOnly(token), true);
assertEq(policyManager.bridge(token), bridge);
assertEq(policyManager.lienMode(token), 1);
}
function test_deployToken_unauthorized() public {
ITokenFactory138.TokenConfig memory config = ITokenFactory138.TokenConfig({
issuer: issuer,
decimals: 18,
defaultLienMode: 2,
bridgeOnly: false,
bridge: address(0)
});
vm.expectRevert();
factory.deployToken("Token", "TKN", config);
}
function test_deployToken_zeroIssuer() public {
ITokenFactory138.TokenConfig memory config = ITokenFactory138.TokenConfig({
issuer: address(0),
decimals: 18,
defaultLienMode: 2,
bridgeOnly: false,
bridge: address(0)
});
vm.prank(deployer);
vm.expectRevert("TokenFactory138: zero issuer");
factory.deployToken("Token", "TKN", config);
}
function test_deployToken_invalidLienMode() public {
ITokenFactory138.TokenConfig memory config = ITokenFactory138.TokenConfig({
issuer: issuer,
decimals: 18,
defaultLienMode: 0, // Invalid
bridgeOnly: false,
bridge: address(0)
});
vm.prank(deployer);
vm.expectRevert("TokenFactory138: invalid lien mode");
factory.deployToken("Token", "TKN", config);
}
}

View File

@@ -0,0 +1,222 @@
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "forge-std/Test.sol";
import "../../src/eMoneyToken.sol";
import "../../src/PolicyManager.sol";
import "../../src/ComplianceRegistry.sol";
import "../../src/DebtRegistry.sol";
import "../../src/errors/TokenErrors.sol";
import "../../src/libraries/ReasonCodes.sol";
import "@openzeppelin/contracts/proxy/ERC1967/ERC1967Proxy.sol";
contract eMoneyTokenTest is Test {
eMoneyToken public token;
PolicyManager public policyManager;
ComplianceRegistry public complianceRegistry;
DebtRegistry public debtRegistry;
address public admin;
address public issuer;
address public enforcement;
address public user1;
address public user2;
function setUp() public {
admin = address(0x1);
issuer = address(0x2);
enforcement = address(0x3);
user1 = address(0x10);
user2 = address(0x20);
complianceRegistry = new ComplianceRegistry(admin);
debtRegistry = new DebtRegistry(admin);
policyManager = new PolicyManager(admin, address(complianceRegistry), address(debtRegistry));
// Deploy implementation
eMoneyToken implementation = new eMoneyToken();
// Deploy proxy
bytes memory initData = abi.encodeWithSelector(
eMoneyToken.initialize.selector,
"Test Token",
"TEST",
18,
issuer,
address(policyManager),
address(debtRegistry),
address(complianceRegistry)
);
ERC1967Proxy proxy = new ERC1967Proxy(address(implementation), initData);
token = eMoneyToken(address(proxy));
// Set up roles
vm.startPrank(issuer);
token.grantRole(token.ENFORCEMENT_ROLE(), enforcement);
vm.stopPrank();
// Set up compliance
vm.startPrank(admin);
complianceRegistry.grantRole(complianceRegistry.COMPLIANCE_ROLE(), admin);
complianceRegistry.setCompliance(user1, true, 1, bytes32(0));
complianceRegistry.setCompliance(user2, true, 1, bytes32(0));
complianceRegistry.setCompliance(issuer, true, 1, bytes32(0));
policyManager.grantRole(policyManager.POLICY_OPERATOR_ROLE(), admin);
policyManager.setLienMode(address(token), 2);
vm.stopPrank();
}
function test_mint() public {
bytes32 reasonCode = ReasonCodes.OK;
vm.prank(issuer);
token.mint(user1, 1000, reasonCode);
assertEq(token.balanceOf(user1), 1000);
}
function test_mint_unauthorized() public {
vm.expectRevert();
token.mint(user1, 1000, bytes32(0));
}
function test_burn() public {
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.prank(issuer);
token.burn(user1, 500, ReasonCodes.OK);
assertEq(token.balanceOf(user1), 500);
}
function test_transfer_normal() public {
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.prank(user1);
token.transfer(user2, 500);
assertEq(token.balanceOf(user1), 500);
assertEq(token.balanceOf(user2), 500);
}
function test_transfer_paused() public {
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.prank(admin);
policyManager.setPaused(address(token), true);
vm.expectRevert(
abi.encodeWithSelector(TransferBlocked.selector, ReasonCodes.PAUSED, user1, user2, 500)
);
vm.prank(user1);
token.transfer(user2, 500);
}
function test_transfer_hardFreezeMode() public {
vm.startPrank(admin);
policyManager.setLienMode(address(token), 1); // Hard freeze
debtRegistry.grantRole(debtRegistry.DEBT_AUTHORITY_ROLE(), admin);
debtRegistry.placeLien(user1, 100, 0, 1, ReasonCodes.LIEN_BLOCK);
vm.stopPrank();
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.expectRevert(
abi.encodeWithSelector(TransferBlocked.selector, ReasonCodes.LIEN_BLOCK, user1, user2, 1)
);
vm.prank(user1);
token.transfer(user2, 1);
}
function test_transfer_encumberedMode() public {
vm.startPrank(admin);
debtRegistry.grantRole(debtRegistry.DEBT_AUTHORITY_ROLE(), admin);
debtRegistry.placeLien(user1, 300, 0, 1, ReasonCodes.LIEN_BLOCK);
vm.stopPrank();
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
// freeBalance = 1000 - 300 = 700
assertEq(token.freeBalanceOf(user1), 700);
// Transfer 700 should succeed
vm.prank(user1);
token.transfer(user2, 700);
assertEq(token.balanceOf(user1), 300);
assertEq(token.balanceOf(user2), 700);
// Transfer 1 more should fail
vm.expectRevert(
abi.encodeWithSelector(TransferBlocked.selector, ReasonCodes.INSUFF_FREE_BAL, user1, user2, 1)
);
vm.prank(user1);
token.transfer(user2, 1);
}
function test_freeBalanceOf() public {
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
assertEq(token.freeBalanceOf(user1), 1000);
vm.startPrank(admin);
debtRegistry.grantRole(debtRegistry.DEBT_AUTHORITY_ROLE(), admin);
debtRegistry.placeLien(user1, 300, 0, 1, ReasonCodes.LIEN_BLOCK);
vm.stopPrank();
assertEq(token.freeBalanceOf(user1), 700);
}
function test_clawback() public {
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.startPrank(admin);
debtRegistry.grantRole(debtRegistry.DEBT_AUTHORITY_ROLE(), admin);
debtRegistry.placeLien(user1, 500, 0, 1, ReasonCodes.LIEN_BLOCK);
vm.stopPrank();
// Clawback should bypass liens
vm.prank(enforcement);
token.clawback(user1, user2, 600, ReasonCodes.UNAUTHORIZED);
assertEq(token.balanceOf(user1), 400);
assertEq(token.balanceOf(user2), 600);
}
function test_forceTransfer() public {
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.startPrank(admin);
debtRegistry.grantRole(debtRegistry.DEBT_AUTHORITY_ROLE(), admin);
debtRegistry.placeLien(user1, 500, 0, 1, ReasonCodes.LIEN_BLOCK);
vm.stopPrank();
// ForceTransfer bypasses liens but checks compliance
vm.prank(enforcement);
token.forceTransfer(user1, user2, 600, ReasonCodes.UNAUTHORIZED);
assertEq(token.balanceOf(user1), 400);
assertEq(token.balanceOf(user2), 600);
}
function test_forceTransfer_nonCompliant() public {
address nonCompliant = address(0x99);
vm.prank(issuer);
token.mint(user1, 1000, bytes32(0));
vm.prank(enforcement);
vm.expectRevert("eMoneyToken: to not compliant");
token.forceTransfer(user1, nonCompliant, 100, bytes32(0));
}
}