@ballkidz/defifa 0.0.21 → 0.0.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ballkidz/defifa",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "license": "MIT",
   "engines": {
     "node": ">=20.0.0"
@@ -13,13 +13,13 @@
     "url": "https://github.com/BallKidz/defifa-collection-deployer"
   },
   "dependencies": {
-    "@bananapus/721-hook-v6": "^0.0.32",
-    "@bananapus/core-v6": "^0.0.32",
-    "@bananapus/permission-ids-v6": "^0.0.15",
-    "@croptop/core-v6": "^0.0.31",
+    "@bananapus/721-hook-v6": "^0.0.35",
+    "@bananapus/core-v6": "^0.0.34",
+    "@bananapus/permission-ids-v6": "^0.0.17",
+    "@croptop/core-v6": "^0.0.33",
     "@openzeppelin/contracts": "^5.6.1",
     "@prb/math": "^4.1.1",
-    "@rev-net/core-v6": "^0.0.29",
+    "@rev-net/core-v6": "^0.0.32",
     "scripty.sol": "^2.1.1"
   },
   "devDependencies": {

package/references/operations.md

@@ -1,9 +1,11 @@
 # Defifa Operations
 
+Use this file when the task is about launch config, phase timing, governance windows, or deciding whether a symptom is operational drift or runtime logic.
+
 ## Deployment Surface
 
 - [`src/DefifaDeployer.sol`](../src/DefifaDeployer.sol) is the first stop for launch-time config, phase queueing, and post-ratification fulfillment.
-- [`script/Deploy.s.sol`](../script/Deploy.s.sol) is the deployment entry point when the task is about current wiring rather than game mechanics.
+- [`script/Deploy.s.sol`](../script/Deploy.s.sol) and [`script/helpers/DefifaDeploymentLib.sol`](../script/helpers/DefifaDeploymentLib.sol) are the deployment entrypoints when the task is about current wiring rather than game mechanics.
 - [`src/structs/`](../src/structs/) and [`src/enums/`](../src/enums/) define launch data, phase types, and other inputs that often drift from remembered assumptions.
 
 ## Change Checklist
@@ -12,6 +14,7 @@
 - If you edit hook settlement logic, re-check fee accounting and mint-cost invariants.
 - If you touch governance thresholds or attestation behavior, inspect the governor tests before assuming the change is local.
 - If you touch token metadata or rendering, verify whether the bug belongs in the resolver instead of settlement code.
+- If you touch anything supply-sensitive, inspect the audit tests around pending reserves and quorum before relying on current intuition.
 
 ## Common Failure Modes
 
@@ -19,9 +22,11 @@
 - Governance behavior looks wrong, but the real issue is stale launch configuration.
 - Settlement changes accidentally affect fee distribution or redemption accounting.
 - Resolver issues get misdiagnosed as hook or governor problems because they surface through NFTs.
+- Audit-style failures around reserve dilution or attestation counting are treated as isolated math issues even though they cross deployer, hook, and governor boundaries.
 
 ## Useful Proof Points
 
 - [`test/Fork.t.sol`](../test/Fork.t.sol) for live-integration assumptions.
 - [`test/TestAuditGaps.sol`](../test/TestAuditGaps.sol) and [`test/TestQALastMile.t.sol`](../test/TestQALastMile.t.sol) for pinned edge cases.
 - [`test/BWAFunctionComparison.t.sol`](../test/BWAFunctionComparison.t.sol) and [`test/DefifaUSDC.t.sol`](../test/DefifaUSDC.t.sol) when currency or accounting context matters.
+- [`test/audit/`](../test/audit/) when a change touches pending reserves, registry alignment, quorum griefing, or double-counting.

package/references/runtime.md

@@ -1,5 +1,7 @@
 # Defifa Runtime
 
+Use this file when `defifa/SKILLS.md` has already routed you here and you need to reason about the game as a state machine rather than as isolated contracts.
+
 ## Contract Roles
 
 - [`src/DefifaDeployer.sol`](../src/DefifaDeployer.sol) launches games, manages phase progression, fulfills commitments, and triggers safety exits such as no-contest.
@@ -12,9 +14,9 @@
 
 1. Countdown before minting opens.
 2. Mint phase where players buy outcome NFTs and can delegate attestation power.
-3. Optional refund phase.
+3. Optional refund phase if the launch configuration allows it.
 4. Scoring phase where scorecards are submitted, attested, and ratified.
-5. Complete or no-contest settlement depending on governance and safety conditions.
+5. Complete or no-contest settlement depending on governance outcome and safety checks.
 
 ## High-Risk Areas
 
@@ -22,11 +24,20 @@
 - No-contest and refund behavior: these paths are economic safety valves, not edge-case garnish.
 - Fee accounting and commitment fulfillment: payout ordering and accounting drift can change final redemption value.
 - Hook/governor/deployer coupling: many bugs come from changing one layer while assuming the others are passive.
+- Pending reserved supply and snapshot assumptions: settlement and quorum logic can drift if supply-sensitive views are taken at the wrong time.
+- Scorecards that miss quorum do not naturally “finish.” New scorecards can still be submitted until no-contest logic takes over, so do not assume a clean defeated terminal state.
+
+## Common Misdiagnoses
+
+- A settlement bug is blamed on [`src/DefifaHook.sol`](../src/DefifaHook.sol) even though the wrong phase or grace-period state was created in [`src/DefifaDeployer.sol`](../src/DefifaDeployer.sol) or [`src/DefifaGovernor.sol`](../src/DefifaGovernor.sol).
+- A governance bug is blamed on the governor even though attestation power or delegation semantics were wrong in the hook layer.
+- An NFT-facing bug is blamed on settlement code even though the problem is resolver output in [`src/DefifaTokenUriResolver.sol`](../src/DefifaTokenUriResolver.sol).
+- A Defifa-specific payout result is patched in this repo when the real bug is shared 721 or core protocol behavior upstream.
 
 ## Tests To Trust First
 
 - [`test/DefifaGovernor.t.sol`](../test/DefifaGovernor.t.sol) for governance flow.
 - [`test/DefifaNoContest.t.sol`](../test/DefifaNoContest.t.sol) for safety exits.
 - [`test/DefifaFeeAccounting.t.sol`](../test/DefifaFeeAccounting.t.sol) and [`test/DefifaMintCostInvariant.t.sol`](../test/DefifaMintCostInvariant.t.sol) for economic correctness.
-- [`test/DefifaHookRegressions.t.sol`](../test/DefifaHookRegressions.t.sol) and [`test/regression/`](../test/regression/) for pinned regressions.
-- [`test/DefifaSecurity.t.sol`](../test/DefifaSecurity.t.sol) and [`test/DefifaGovernanceHardening.t.sol`](../test/DefifaGovernanceHardening.t.sol) for adversarial cases.
+- [`test/DefifaHookRegressions.t.sol`](../test/DefifaHookRegressions.t.sol), [`test/regression/GracePeriodBypass.t.sol`](../test/regression/GracePeriodBypass.t.sol), [`test/regression/FulfillmentBlocksRatification.t.sol`](../test/regression/FulfillmentBlocksRatification.t.sol), and [`test/regression/AttestationDelegateBeneficiary.t.sol`](../test/regression/AttestationDelegateBeneficiary.t.sol) for pinned regressions.
+- [`test/DefifaSecurity.t.sol`](../test/DefifaSecurity.t.sol), [`test/DefifaGovernanceHardening.t.sol`](../test/DefifaGovernanceHardening.t.sol), [`test/DefifaAdversarialQuorum.t.sol`](../test/DefifaAdversarialQuorum.t.sol), and [`test/audit/`](../test/audit/) for adversarial and audit-derived cases.

package/src/DefifaDeployer.sol

@@ -394,6 +394,9 @@ contract DefifaDeployer is IDefifaDeployer, IDefifaGamePhaseReporter, IDefifaGam
                     < block.timestamp + launchProjectData.refundPeriodDuration + launchProjectData.mintPeriodDuration
         ) revert DefifaDeployer_InvalidGameConfiguration();
 
+        // The hook and governor hardcode uint256[128] tier-weight tables, so reject games with more than 128 tiers.
+        if (launchProjectData.tiers.length > 128) revert DefifaDeployer_InvalidGameConfiguration();
+
         // Get the game ID, optimistically knowing it will be one greater than the current count.
         // Note: this prediction can race with other concurrent project deployments. If another project is
         // created between reading count() and launchProjectFor(), the actual ID will differ. This is

package/src/DefifaHook.sol

@@ -249,6 +249,7 @@ contract DefifaHook is JB721Hook, Ownable, IDefifaHook {
     /// @return cashOutTaxRate The cash out tax rate influencing the reclaim amount.
     /// @return cashOutCount The amount of tokens that should be considered cashed out.
     /// @return totalSupply The total amount of tokens that are considered to be existing.
+    /// @return effectiveSurplusValue The effective surplus value to use for the cash out.
     /// @return hookSpecifications The amount and data to send to cash out hooks (this contract) instead of returning to
     /// the beneficiary.
     function beforeCashOutRecordedWith(JBBeforeCashOutRecordedContext calldata context)
@@ -260,6 +261,7 @@ contract DefifaHook is JB721Hook, Ownable, IDefifaHook {
             uint256 cashOutTaxRate,
             uint256 cashOutCount,
             uint256 totalSupply,
+            uint256 effectiveSurplusValue,
             JBCashOutHookSpecification[] memory hookSpecifications
         )
     {
@@ -304,6 +306,9 @@ contract DefifaHook is JB721Hook, Ownable, IDefifaHook {
         // Use the surplus as the total supply.
         totalSupply = context.surplus.value;
 
+        // Use the surplus as the effective surplus value.
+        effectiveSurplusValue = context.surplus.value;
+
         // Use the cash out tax rate from the context.
         cashOutTaxRate = context.cashOutTaxRate;
     }

package/src/structs/DefifaTierParams.sol

@@ -11,7 +11,6 @@ struct DefifaTierParams {
     string name;
     uint16 reservedRate;
     address reservedTokenBeneficiary;
-    // forge-lint: disable-next-line(mixed-case-variable)
     bytes32 encodedIPFSUri;
     bool shouldUseReservedTokenBeneficiaryAsDefault;
 }

package/test/audit/CodexTierCapMismatch.t.sol

@@ -0,0 +1,171 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity 0.8.28;
+
+import {DefifaDeployer} from "../../src/DefifaDeployer.sol";
+import {DefifaGovernor} from "../../src/DefifaGovernor.sol";
+import {DefifaHook} from "../../src/DefifaHook.sol";
+import {DefifaTokenUriResolver} from "../../src/DefifaTokenUriResolver.sol";
+import {DefifaGamePhase} from "../../src/enums/DefifaGamePhase.sol";
+import {DefifaLaunchProjectData} from "../../src/structs/DefifaLaunchProjectData.sol";
+import {DefifaTierCashOutWeight} from "../../src/structs/DefifaTierCashOutWeight.sol";
+import {DefifaTierParams} from "../../src/structs/DefifaTierParams.sol";
+
+import {JB721TiersHookStore} from "@bananapus/721-hook-v6/src/JB721TiersHookStore.sol";
+import {IJB721TokenUriResolver} from "@bananapus/721-hook-v6/src/interfaces/IJB721TokenUriResolver.sol";
+import {JBAddressRegistry} from "@bananapus/address-registry-v6/src/JBAddressRegistry.sol";
+import {JBAccountingContext} from "@bananapus/core-v6/src/structs/JBAccountingContext.sol";
+import {JBConstants} from "@bananapus/core-v6/src/libraries/JBConstants.sol";
+import {JBCurrencyIds} from "@bananapus/core-v6/src/libraries/JBCurrencyIds.sol";
+import {JBFundAccessLimitGroup} from "@bananapus/core-v6/src/structs/JBFundAccessLimitGroup.sol";
+import {JBRuleset} from "@bananapus/core-v6/src/structs/JBRuleset.sol";
+import {JBRulesetConfig} from "@bananapus/core-v6/src/structs/JBRulesetConfig.sol";
+import {JBRulesetMetadataResolver} from "@bananapus/core-v6/src/libraries/JBRulesetMetadataResolver.sol";
+import {JBRulesetMetadata} from "@bananapus/core-v6/src/structs/JBRulesetMetadata.sol";
+import {JBSplit} from "@bananapus/core-v6/src/structs/JBSplit.sol";
+import {JBSplitGroup} from "@bananapus/core-v6/src/structs/JBSplitGroup.sol";
+import {JBTerminalConfig} from "@bananapus/core-v6/src/structs/JBTerminalConfig.sol";
+import {IJBRulesetApprovalHook} from "@bananapus/core-v6/src/interfaces/IJBRulesets.sol";
+import {JBTest} from "@bananapus/core-v6/test/helpers/JBTest.sol";
+import {TestBaseWorkflow} from "@bananapus/core-v6/test/helpers/TestBaseWorkflow.sol";
+
+import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+import {ITypeface} from "lib/typeface/contracts/interfaces/ITypeface.sol";
+
+contract CodexTierCapMismatchTest is JBTest, TestBaseWorkflow {
+    using JBRulesetMetadataResolver for JBRuleset;
+
+    DefifaDeployer internal deployer;
+    DefifaGovernor internal governor;
+    DefifaHook internal hookCodeOrigin;
+
+    function setUp() public virtual override {
+        super.setUp();
+
+        JBAccountingContext[] memory tokens = new JBAccountingContext[](1);
+        tokens[0] = JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH});
+
+        JBTerminalConfig[] memory terminalConfigs = new JBTerminalConfig[](1);
+        terminalConfigs[0] = JBTerminalConfig({terminal: jbMultiTerminal(), accountingContextsToAccept: tokens});
+
+        JBRulesetConfig[] memory rulesetConfigs = new JBRulesetConfig[](1);
+        rulesetConfigs[0] = JBRulesetConfig({
+            mustStartAtOrAfter: 0,
+            duration: 10 days,
+            weight: 1e18,
+            weightCutPercent: 0,
+            approvalHook: IJBRulesetApprovalHook(address(0)),
+            metadata: JBRulesetMetadata({
+                reservedPercent: 0,
+                cashOutTaxRate: 0,
+                baseCurrency: JBCurrencyIds.ETH,
+                pausePay: false,
+                pauseCreditTransfers: false,
+                allowOwnerMinting: false,
+                allowSetCustomToken: false,
+                allowTerminalMigration: false,
+                allowSetTerminals: false,
+                allowSetController: false,
+                allowAddAccountingContext: false,
+                allowAddPriceFeed: false,
+                ownerMustSendPayouts: false,
+                holdFees: false,
+                useTotalSurplusForCashOuts: false,
+                useDataHookForPay: true,
+                useDataHookForCashOut: true,
+                dataHook: address(0),
+                metadata: 0
+            }),
+            splitGroups: new JBSplitGroup[](0),
+            fundAccessLimitGroups: new JBFundAccessLimitGroup[](0)
+        });
+
+        address projectOwner = address(bytes20(keccak256("projectOwner")));
+        uint256 protocolFeeProjectId =
+            jbController().launchProjectFor(projectOwner, "", rulesetConfigs, terminalConfigs, "");
+        vm.prank(projectOwner);
+        address nanaToken =
+            address(jbController().deployERC20For(protocolFeeProjectId, "Bananapus", "NANA", bytes32(0)));
+
+        uint256 defifaProjectId = jbController().launchProjectFor(projectOwner, "", rulesetConfigs, terminalConfigs, "");
+        vm.prank(projectOwner);
+        address defifaToken = address(jbController().deployERC20For(defifaProjectId, "Defifa", "DEFIFA", bytes32(0)));
+
+        hookCodeOrigin = new DefifaHook(jbDirectory(), IERC20(defifaToken), IERC20(nanaToken));
+        governor = new DefifaGovernor(jbController(), address(this));
+        deployer = new DefifaDeployer(
+            address(hookCodeOrigin),
+            new DefifaTokenUriResolver(ITypeface(address(0))),
+            governor,
+            jbController(),
+            new JBAddressRegistry(),
+            defifaProjectId,
+            protocolFeeProjectId
+        );
+
+        hookCodeOrigin.transferOwnership(address(deployer));
+        governor.transferOwnership(address(deployer));
+    }
+
+    function test_launchRevertsFor129Tiers() external {
+        DefifaLaunchProjectData memory data = _launchData(129);
+
+        // H-5 fix: the deployer now caps tiers at 128, so launching with 129 reverts.
+        vm.expectRevert(DefifaDeployer.DefifaDeployer_InvalidGameConfiguration.selector);
+        deployer.launchGameWith(data);
+    }
+
+    function _launchData(uint256 tierCount) internal returns (DefifaLaunchProjectData memory) {
+        DefifaTierParams[] memory tiers = new DefifaTierParams[](tierCount);
+        for (uint256 i; i < tierCount; i++) {
+            tiers[i] = DefifaTierParams({
+                name: "TEAM",
+                reservedRate: 0,
+                reservedTokenBeneficiary: address(0),
+                encodedIPFSUri: bytes32(0),
+                shouldUseReservedTokenBeneficiaryAsDefault: false
+            });
+        }
+
+        return DefifaLaunchProjectData({
+            name: "DEFIFA",
+            projectUri: "",
+            contractUri: "",
+            baseUri: "",
+            tiers: tiers,
+            tierPrice: 1 ether,
+            token: JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH}),
+            mintPeriodDuration: 1 days,
+            refundPeriodDuration: 1 days,
+            start: uint48(block.timestamp + 3 days),
+            splits: new JBSplit[](0),
+            attestationStartTime: 0,
+            attestationGracePeriod: 100_381,
+            defaultAttestationDelegate: address(0),
+            defaultTokenUriResolver: IJB721TokenUriResolver(address(0)),
+            terminal: jbMultiTerminal(),
+            store: new JB721TiersHookStore(),
+            minParticipation: 0,
+            scorecardTimeout: 7 days,
+            timelockDuration: 0
+        });
+    }
+
+    function _mintTier(uint256 gameId, uint16 tierId, uint256 amount) internal {
+        address buyer = address(bytes20(keccak256(abi.encodePacked("buyer", tierId))));
+        vm.deal(buyer, amount);
+
+        uint16[] memory tierIds = new uint16[](1);
+        tierIds[0] = tierId;
+
+        bytes[] memory payloads = new bytes[](1);
+        payloads[0] = abi.encode(address(0), tierIds);
+
+        bytes4[] memory ids = new bytes4[](1);
+        ids[0] = metadataHelper().getId("pay", address(hookCodeOrigin));
+
+        bytes memory metadata = metadataHelper().createMetadata(ids, payloads);
+
+        vm.prank(buyer);
+        jbMultiTerminal().pay{value: amount}(gameId, JBConstants.NATIVE_TOKEN, amount, buyer, 0, "", metadata);
+    }
+}

package/test/audit/H5TierCapValidation.t.sol

@@ -0,0 +1,184 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity 0.8.28;
+
+import {DefifaDeployer} from "../../src/DefifaDeployer.sol";
+import {DefifaGovernor} from "../../src/DefifaGovernor.sol";
+import {DefifaHook} from "../../src/DefifaHook.sol";
+import {DefifaTokenUriResolver} from "../../src/DefifaTokenUriResolver.sol";
+import {DefifaLaunchProjectData} from "../../src/structs/DefifaLaunchProjectData.sol";
+import {DefifaTierParams} from "../../src/structs/DefifaTierParams.sol";
+
+import {JB721TiersHookStore} from "@bananapus/721-hook-v6/src/JB721TiersHookStore.sol";
+import {IJB721TokenUriResolver} from "@bananapus/721-hook-v6/src/interfaces/IJB721TokenUriResolver.sol";
+import {JBAddressRegistry} from "@bananapus/address-registry-v6/src/JBAddressRegistry.sol";
+import {JBAccountingContext} from "@bananapus/core-v6/src/structs/JBAccountingContext.sol";
+import {JBConstants} from "@bananapus/core-v6/src/libraries/JBConstants.sol";
+import {JBCurrencyIds} from "@bananapus/core-v6/src/libraries/JBCurrencyIds.sol";
+import {JBFundAccessLimitGroup} from "@bananapus/core-v6/src/structs/JBFundAccessLimitGroup.sol";
+import {JBRulesetConfig, JBTerminalConfig} from "@bananapus/core-v6/src/interfaces/IJBController.sol";
+import {JBRulesetMetadata} from "@bananapus/core-v6/src/structs/JBRulesetMetadata.sol";
+import {JBSplit} from "@bananapus/core-v6/src/structs/JBSplit.sol";
+import {JBSplitGroup} from "@bananapus/core-v6/src/structs/JBSplitGroup.sol";
+import {IJBRulesetApprovalHook} from "@bananapus/core-v6/src/interfaces/IJBRulesets.sol";
+import {JBTest} from "@bananapus/core-v6/test/helpers/JBTest.sol";
+import {TestBaseWorkflow} from "@bananapus/core-v6/test/helpers/TestBaseWorkflow.sol";
+
+import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+import {ITypeface} from "lib/typeface/contracts/interfaces/ITypeface.sol";
+
+/// @notice Tests for H-5 audit fix: tier cap of 128 enforced in launchGameWith().
+contract H5TierCapValidationTest is JBTest, TestBaseWorkflow {
+    DefifaDeployer internal deployer;
+    DefifaGovernor internal governor;
+    DefifaHook internal hookCodeOrigin;
+
+    function setUp() public virtual override {
+        super.setUp();
+
+        JBAccountingContext[] memory tokens = new JBAccountingContext[](1);
+        tokens[0] = JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH});
+
+        JBTerminalConfig[] memory terminalConfigs = new JBTerminalConfig[](1);
+        terminalConfigs[0] = JBTerminalConfig({terminal: jbMultiTerminal(), accountingContextsToAccept: tokens});
+
+        JBRulesetConfig[] memory rulesetConfigs = new JBRulesetConfig[](1);
+        rulesetConfigs[0] = JBRulesetConfig({
+            mustStartAtOrAfter: 0,
+            duration: 10 days,
+            weight: 1e18,
+            weightCutPercent: 0,
+            approvalHook: IJBRulesetApprovalHook(address(0)),
+            metadata: JBRulesetMetadata({
+                reservedPercent: 0,
+                cashOutTaxRate: 0,
+                baseCurrency: JBCurrencyIds.ETH,
+                pausePay: false,
+                pauseCreditTransfers: false,
+                allowOwnerMinting: false,
+                allowSetCustomToken: false,
+                allowTerminalMigration: false,
+                allowSetTerminals: false,
+                allowSetController: false,
+                allowAddAccountingContext: false,
+                allowAddPriceFeed: false,
+                ownerMustSendPayouts: false,
+                holdFees: false,
+                useTotalSurplusForCashOuts: false,
+                useDataHookForPay: true,
+                useDataHookForCashOut: true,
+                dataHook: address(0),
+                metadata: 0
+            }),
+            splitGroups: new JBSplitGroup[](0),
+            fundAccessLimitGroups: new JBFundAccessLimitGroup[](0)
+        });
+
+        address projectOwner = address(bytes20(keccak256("projectOwner")));
+        uint256 protocolFeeProjectId =
+            jbController().launchProjectFor(projectOwner, "", rulesetConfigs, terminalConfigs, "");
+        vm.prank(projectOwner);
+        address nanaToken =
+            address(jbController().deployERC20For(protocolFeeProjectId, "Bananapus", "NANA", bytes32(0)));
+
+        uint256 defifaProjectId = jbController().launchProjectFor(projectOwner, "", rulesetConfigs, terminalConfigs, "");
+        vm.prank(projectOwner);
+        address defifaToken = address(jbController().deployERC20For(defifaProjectId, "Defifa", "DEFIFA", bytes32(0)));
+
+        hookCodeOrigin = new DefifaHook(jbDirectory(), IERC20(defifaToken), IERC20(nanaToken));
+        governor = new DefifaGovernor(jbController(), address(this));
+        deployer = new DefifaDeployer(
+            address(hookCodeOrigin),
+            new DefifaTokenUriResolver(ITypeface(address(0))),
+            governor,
+            jbController(),
+            new JBAddressRegistry(),
+            defifaProjectId,
+            protocolFeeProjectId
+        );
+
+        hookCodeOrigin.transferOwnership(address(deployer));
+        governor.transferOwnership(address(deployer));
+    }
+
+    /// @notice Launching with exactly 128 tiers should succeed (boundary).
+    function test_launch128TiersSucceeds() external {
+        DefifaLaunchProjectData memory data = _launchData(128);
+        uint256 gameId = deployer.launchGameWith(data);
+        assertGt(gameId, 0, "game should be created with 128 tiers");
+    }
+
+    /// @notice Launching with 129 tiers must revert with DefifaDeployer_InvalidGameConfiguration.
+    function test_launch129TiersReverts() external {
+        DefifaLaunchProjectData memory data = _launchData(129);
+        vm.expectRevert(DefifaDeployer.DefifaDeployer_InvalidGameConfiguration.selector);
+        deployer.launchGameWith(data);
+    }
+
+    /// @notice Launching with 1 tier should succeed (minimum valid).
+    function test_launch1TierSucceeds() external {
+        DefifaLaunchProjectData memory data = _launchData(1);
+        uint256 gameId = deployer.launchGameWith(data);
+        assertGt(gameId, 0, "game should be created with 1 tier");
+    }
+
+    /// @notice Launching with 0 tiers does not revert at the tier cap check (no lower-bound validation exists).
+    /// @dev This documents current behavior: the deployer only enforces the upper cap of 128.
+    function test_launch0TiersDoesNotRevertAtTierCap() external {
+        DefifaLaunchProjectData memory data = _launchData(0);
+        uint256 gameId = deployer.launchGameWith(data);
+        assertGt(gameId, 0, "0-tier game created (no lower-bound check)");
+    }
+
+    /// @notice Fuzz: any tier count above 128 reverts, any from 1-128 succeeds.
+    function test_fuzz_tierCapBoundary(uint256 tierCount) external {
+        tierCount = bound(tierCount, 1, 256);
+        DefifaLaunchProjectData memory data = _launchData(tierCount);
+
+        if (tierCount > 128) {
+            vm.expectRevert(DefifaDeployer.DefifaDeployer_InvalidGameConfiguration.selector);
+            deployer.launchGameWith(data);
+        } else {
+            uint256 gameId = deployer.launchGameWith(data);
+            assertGt(gameId, 0, "game should be created within tier cap");
+        }
+    }
+
+    // ─── Helpers
+    // ─────────────────────────────────────────────────────────────────
+
+    function _launchData(uint256 tierCount) internal returns (DefifaLaunchProjectData memory) {
+        DefifaTierParams[] memory tiers = new DefifaTierParams[](tierCount);
+        for (uint256 i; i < tierCount; i++) {
+            tiers[i] = DefifaTierParams({
+                name: "TEAM",
+                reservedRate: 0,
+                reservedTokenBeneficiary: address(0),
+                encodedIPFSUri: bytes32(0),
+                shouldUseReservedTokenBeneficiaryAsDefault: false
+            });
+        }
+
+        return DefifaLaunchProjectData({
+            name: "DEFIFA",
+            projectUri: "",
+            contractUri: "",
+            baseUri: "",
+            tiers: tiers,
+            tierPrice: 1 ether,
+            token: JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH}),
+            mintPeriodDuration: 1 days,
+            refundPeriodDuration: 1 days,
+            start: uint48(block.timestamp + 3 days),
+            splits: new JBSplit[](0),
+            attestationStartTime: 0,
+            attestationGracePeriod: 100_381,
+            defaultAttestationDelegate: address(0),
+            defaultTokenUriResolver: IJB721TokenUriResolver(address(0)),
+            terminal: jbMultiTerminal(),
+            store: new JB721TiersHookStore(),
+            minParticipation: 0,
+            scorecardTimeout: 7 days,
+            timelockDuration: 0
+        });
+    }
+}