@layerzerolabs/protocol-stellar-v2 0.2.121 → 0.2.123

package/contracts/oapps/oft/src/extensions/oft_fee.rs

@@ -1,281 +0,0 @@
-use common_macros::{contract_error, contract_trait, only_role, storage};
-use soroban_sdk::{assert_with_error, contractevent, token::TokenClient, Address, Env};
-use utils::{
-    option_ext::OptionExt,
-    rbac::{RoleBasedAccessControl, AUTHORIZER},
-};
-
-/// Role for fee configuration (set_default_fee_bps, set_fee_bps).
-pub const FEE_CONFIG_MANAGER_ROLE: &str = "FEE_CONFIG_MANAGER_ROLE";
-
-/// Base fee in basis points (10,000 BPS = 100%)
-/// Used as denominator in fee calculations
-const BASE_FEE_BPS: u32 = 10_000;
-
-// =========================================================================
-// Storage
-// =========================================================================
-
-#[storage]
-pub enum OFTFeeStorage {
-    /// Default fee rate in basis points (1-10,000, where 10,000 = 100%)
-    /// Applied to destinations without specific fee configuration
-    /// Not set by default (effective rate is 0 when unset)
-    #[instance(u32)]
-    DefaultFeeBps,
-
-    /// Destination-specific fee rates mapped by endpoint ID (eid)
-    #[persistent(u32)]
-    FeeBps { eid: u32 },
-
-    /// Address where collected fees will be deposited
-    #[instance(Address)]
-    FeeDepositAddress,
-}
-
-// =========================================================================
-// Errors
-// =========================================================================
-
-#[contract_error]
-pub enum OFTFeeError {
-    InvalidFeeBps = 3100,
-    InvalidFeeDepositAddress,
-    SameValue,
-}
-
-// =========================================================================
-// Events
-// =========================================================================
-
-#[contractevent]
-#[derive(Clone, Debug, Eq, PartialEq)]
-pub struct DefaultFeeBpsSet {
-    /// The default fee rate in basis points, or None if the default fee is removed
-    pub fee_bps: Option<u32>,
-}
-
-#[contractevent]
-#[derive(Clone, Debug, Eq, PartialEq)]
-pub struct FeeBpsSet {
-    pub dst_eid: u32,
-    /// The fee rate in basis points, or None if the fee is removed
-    pub fee_bps: Option<u32>,
-}
-
-#[contractevent]
-#[derive(Clone, Debug, Eq, PartialEq)]
-pub struct FeeDepositAddressSet {
-    /// The address to deposit fees to, or None to remove the fee deposit address
-    pub fee_deposit_address: Option<Address>,
-}
-
-// =========================================================================
-// Trait With Default Implementations
-// =========================================================================
-
-#[contract_trait]
-pub trait OFTFee: OFTFeeInternal + RoleBasedAccessControl {
-    // =========================================================================
-    // Management Functions
-    // =========================================================================
-
-    /// Sets or removes the default fee rate in basis points.
-    ///
-    /// - `Some(n)`: sets the default fee to `n` basis points (must be >0 and <=10,000).
-    /// - `Some(0)`: rejected — use `None` to remove the default fee instead.
-    /// - `None`: removes the default fee (effective rate becomes 0).
-    /// * `operator` - The address that must have FEE_CONFIG_MANAGER_ROLE
-    #[only_role(operator, FEE_CONFIG_MANAGER_ROLE)]
-    fn set_default_fee_bps(env: &soroban_sdk::Env, default_fee_bps: &Option<u32>, operator: &soroban_sdk::Address) {
-        Self::__set_default_fee_bps(env, default_fee_bps);
-    }
-
-    /// Sets or removes the fee rate for a specific destination endpoint.
-    ///
-    /// - `Some(0)`: explicitly sets zero fee for this destination, overriding the default fee.
-    /// - `None`: removes the per-destination override; falls back to the default fee.
-    ///
-    /// # Arguments
-    /// * `dst_eid` - The destination endpoint ID
-    /// * `fee_bps` - The fee rate (0-10,000), or None to remove the fee configuration
-    /// * `operator` - The address that must have FEE_CONFIG_MANAGER_ROLE
-    #[only_role(operator, FEE_CONFIG_MANAGER_ROLE)]
-    fn set_fee_bps(env: &soroban_sdk::Env, dst_eid: u32, fee_bps: &Option<u32>, operator: &soroban_sdk::Address) {
-        Self::__set_fee_bps(env, dst_eid, fee_bps);
-    }
-
-    /// Sets or removes the address where collected fees will be deposited.
-    ///
-    /// # Arguments
-    /// * `fee_deposit_address` - The address to deposit fees to, or None to remove the fee deposit address
-    /// * `operator` - The authorizer address
-    #[only_role(operator, AUTHORIZER)]
-    fn set_fee_deposit_address(
-        env: &soroban_sdk::Env,
-        fee_deposit_address: &Option<soroban_sdk::Address>,
-        operator: &soroban_sdk::Address,
-    ) {
-        Self::__set_fee_deposit_address(env, fee_deposit_address);
-    }
-
-    // =========================================================================
-    // View Functions
-    // =========================================================================
-
-    /// Returns the default fee rate in basis points, if set.
-    fn default_fee_bps(env: &soroban_sdk::Env) -> Option<u32> {
-        Self::__default_fee_bps(env)
-    }
-
-    /// Returns the fee rate for a specific destination, if set.
-    fn fee_bps(env: &soroban_sdk::Env, dst_eid: u32) -> Option<u32> {
-        Self::__fee_bps(env, dst_eid)
-    }
-
-    /// Returns the effective fee rate for a destination (destination-specific or default).
-    fn effective_fee_bps(env: &soroban_sdk::Env, dst_eid: u32) -> u32 {
-        Self::__effective_fee_bps(env, dst_eid)
-    }
-
-    /// Returns true if the OFT has a fee rate greater than 0 for the specified destination
-    fn has_oft_fee(env: &soroban_sdk::Env, dst_eid: u32) -> bool {
-        Self::__effective_fee_bps(env, dst_eid) > 0
-    }
-
-    /// Returns the fee deposit address.
-    fn fee_deposit_address(env: &soroban_sdk::Env) -> Option<soroban_sdk::Address> {
-        Self::__fee_deposit_address(env)
-    }
-}
-
-/// Internal trait for OFT fee operations used by OFT hooks.
-/// Contains only truly internal methods that are called from OFTFee implementations.
-pub trait OFTFeeInternal {
-    // =========================================================================
-    // OFT Hooks
-    // =========================================================================
-
-    /// Calculates the fee amount for a given transfer (read-only).
-    /// Used internally by `__debit_view` to calculate the fee.
-    ///
-    /// # Arguments
-    /// * `dst_eid` - Destination endpoint ID to determine which fee rate to apply
-    /// * `amount_ld` - The original amount in local decimals
-    ///
-    /// # Returns
-    /// The fee amount to be deducted
-    fn __fee_view(env: &Env, dst_eid: u32, amount_ld: i128) -> i128 {
-        let fee_bps = Self::__effective_fee_bps(env, dst_eid);
-        if fee_bps == 0 {
-            return 0;
-        }
-
-        // Check that fee deposit address is set (required for fee collection)
-        assert_with_error!(env, OFTFeeStorage::has_fee_deposit_address(env), OFTFeeError::InvalidFeeDepositAddress);
-
-        (amount_ld * fee_bps as i128) / BASE_FEE_BPS as i128
-    }
-
-    /// Charges the fee by transferring the fee amount from the sender to the fee deposit address.
-    /// Used internally by `__debit` to collect the fee.
-    ///
-    /// # Arguments
-    /// * `token` - The token address to transfer
-    /// * `from` - The address to transfer fee from
-    /// * `fee_amount` - The fee amount to transfer
-    fn __charge_fee(env: &Env, token: &Address, from: &Address, fee_amount: i128) {
-        if fee_amount != 0 {
-            let fee_deposit =
-                Self::__fee_deposit_address(env).unwrap_or_panic(env, OFTFeeError::InvalidFeeDepositAddress);
-            TokenClient::new(env, token).transfer(from, &fee_deposit, &fee_amount);
-        }
-    }
-
-    // =========================================================================
-    // Management Functions
-    // =========================================================================
-
-    /// Sets or removes the default fee rate in basis points.
-    ///
-    /// # Arguments
-    /// * `default_fee_bps` - The default fee rate (>0 and <=10,000, where 10,000 = 100%) or None to remove the default fee rate
-    fn __set_default_fee_bps(env: &Env, default_fee_bps: &Option<u32>) {
-        let current = Self::__default_fee_bps(env);
-        assert_with_error!(env, current != *default_fee_bps, OFTFeeError::SameValue);
-        assert_with_error!(
-            env,
-            default_fee_bps.is_none_or(|bps| bps > 0 && bps <= BASE_FEE_BPS),
-            OFTFeeError::InvalidFeeBps
-        );
-
-        OFTFeeStorage::set_or_remove_default_fee_bps(env, default_fee_bps);
-        DefaultFeeBpsSet { fee_bps: *default_fee_bps }.publish(env);
-    }
-
-    /// Sets or removes the fee rate for a specific destination endpoint.
-    ///
-    /// - `Some(0)`: explicitly sets zero fee for this destination, overriding the default fee.
-    /// - `None`: removes the per-destination override; falls back to the default fee.
-    ///
-    /// # Arguments
-    /// * `dst_eid` - The destination endpoint ID
-    /// * `fee_bps` - The fee rate (0-10,000), or None to remove the fee configuration
-    fn __set_fee_bps(env: &Env, dst_eid: u32, fee_bps: &Option<u32>) {
-        let current_fee_bps = Self::__fee_bps(env, dst_eid);
-        assert_with_error!(env, current_fee_bps != *fee_bps, OFTFeeError::SameValue);
-        assert_with_error!(env, fee_bps.is_none_or(|bps| bps <= BASE_FEE_BPS), OFTFeeError::InvalidFeeBps);
-
-        OFTFeeStorage::set_or_remove_fee_bps(env, dst_eid, fee_bps);
-
-        FeeBpsSet { dst_eid, fee_bps: *fee_bps }.publish(env);
-    }
-
-    /// Sets or removes the address where collected fees will be deposited.
-    ///
-    /// # Arguments
-    /// * `fee_deposit_address` - The address to deposit fees to, or None to remove the fee deposit address
-    fn __set_fee_deposit_address(env: &Env, fee_deposit_address: &Option<Address>) {
-        let current = Self::__fee_deposit_address(env);
-        assert_with_error!(env, current != *fee_deposit_address, OFTFeeError::SameValue);
-        OFTFeeStorage::set_or_remove_fee_deposit_address(env, fee_deposit_address);
-        FeeDepositAddressSet { fee_deposit_address: fee_deposit_address.clone() }.publish(env);
-    }
-
-    // =========================================================================
-    // View Functions
-    // =========================================================================
-
-    /// Returns the effective fee rate for a destination (destination-specific or default, 0 if neither).
-    fn __effective_fee_bps(env: &Env, dst_eid: u32) -> u32 {
-        Self::__fee_bps(env, dst_eid).or_else(|| Self::__default_fee_bps(env)).unwrap_or(0)
-    }
-
-    /// Returns the default fee rate in basis points, if set.
-    fn __default_fee_bps(env: &Env) -> Option<u32> {
-        OFTFeeStorage::default_fee_bps(env)
-    }
-
-    /// Returns the fee rate for a specific destination, if set.
-    fn __fee_bps(env: &Env, dst_eid: u32) -> Option<u32> {
-        OFTFeeStorage::fee_bps(env, dst_eid)
-    }
-
-    /// Returns the fee deposit address.
-    fn __fee_deposit_address(env: &Env) -> Option<Address> {
-        OFTFeeStorage::fee_deposit_address(env)
-    }
-
-    /// Back-calculates the pre-fee amount given a post-fee amount.
-    /// Returns the smallest `x` such that `x - fee(x) >= amount_after_fee`.
-    fn __amount_before_fee(env: &Env, dst_eid: u32, amount_after_fee: i128) -> i128 {
-        let fee_bps = Self::__effective_fee_bps(env, dst_eid);
-        if fee_bps == 0 {
-            return amount_after_fee;
-        }
-        if fee_bps == BASE_FEE_BPS {
-            return 0;
-        }
-        (amount_after_fee * BASE_FEE_BPS as i128) / (BASE_FEE_BPS - fee_bps) as i128
-    }
-}

package/contracts/oapps/oft/src/extensions/pausable.rs

@@ -1,119 +0,0 @@
-use common_macros::{contract_error, contract_trait, only_role, storage};
-use soroban_sdk::{assert_with_error, contractevent, Env};
-use utils::rbac::RoleBasedAccessControl;
-
-/// Role for pausing the contract.
-pub const PAUSER_ROLE: &str = "PAUSER_ROLE";
-
-/// Role for unpausing the contract.
-pub const UNPAUSER_ROLE: &str = "UNPAUSER_ROLE";
-
-// =========================================================================
-// Storage
-// =========================================================================
-
-#[storage]
-pub enum OFTPausableStorage {
-    #[instance(bool)]
-    Paused,
-}
-
-// =========================================================================
-// Errors
-// =========================================================================
-
-#[contract_error]
-pub enum OFTPausableError {
-    Paused = 3110,
-    PauseStatusUnchanged,
-}
-
-// =========================================================================
-// Events
-// =========================================================================
-
-#[contractevent]
-#[derive(Clone, Debug, Eq, PartialEq)]
-pub struct PausedSet {
-    pub paused: bool,
-}
-
-// =========================================================================
-// Trait With Default Implementations
-// =========================================================================
-
-#[contract_trait]
-pub trait OFTPausable: OFTPausableInternal + RoleBasedAccessControl {
-    // =========================================================================
-    // Management Functions
-    // =========================================================================
-
-    /// Pauses the OFT. When paused, the OFT will reject new send/receive/quote_send/quote_oft operations.
-    ///
-    /// # Arguments
-    /// * `operator` - The address that must have PAUSER_ROLE
-    #[only_role(operator, PAUSER_ROLE)]
-    fn pause(env: &soroban_sdk::Env, operator: &soroban_sdk::Address) {
-        Self::__set_paused(env, true);
-    }
-
-    /// Unpauses the OFT.
-    ///
-    /// # Arguments
-    /// * `operator` - The address that must have UNPAUSER_ROLE
-    #[only_role(operator, UNPAUSER_ROLE)]
-    fn unpause(env: &soroban_sdk::Env, operator: &soroban_sdk::Address) {
-        Self::__set_paused(env, false);
-    }
-
-    // =========================================================================
-    // View Functions
-    // =========================================================================
-
-    /// Returns the paused state of the OFT.
-    fn is_paused(env: &soroban_sdk::Env) -> bool {
-        Self::__is_paused(env)
-    }
-}
-
-/// Internal trait for pausable operations used by OFT hooks.
-/// Contains only truly internal methods that are called from OFTPausable implementations.
-pub trait OFTPausableInternal {
-    // =========================================================================
-    // OFT Hooks
-    // =========================================================================
-
-    /// Asserts that the OFT is not paused, panics otherwise.
-    /// Used internally by `send`, `quote_send`, `quote_oft`, and `__lz_receive` to enforce pause state.
-    ///
-    /// # Errors
-    /// * `Paused` - If the OFT is currently paused.
-    fn __assert_not_paused(env: &Env) {
-        assert_with_error!(env, !Self::__is_paused(env), OFTPausableError::Paused);
-    }
-
-    // =========================================================================
-    // Management Functions
-    // =========================================================================
-
-    /// Sets the paused state of the OFT.
-    ///
-    /// When paused, the OFT will reject new send/receive/quote_send/quote_oft operations.
-    ///
-    /// # Arguments
-    /// * `paused` - `true` to pause, `false` to unpause
-    fn __set_paused(env: &Env, paused: bool) {
-        assert_with_error!(env, Self::__is_paused(env) != paused, OFTPausableError::PauseStatusUnchanged);
-        OFTPausableStorage::set_or_remove_paused(env, if paused { &Some(true) } else { &None });
-        PausedSet { paused }.publish(env);
-    }
-
-    // =========================================================================
-    // View Functions
-    // =========================================================================
-
-    /// Returns the paused state of the OFT.
-    fn __is_paused(env: &Env) -> bool {
-        OFTPausableStorage::has_paused(env)
-    }
-}

package/contracts/oapps/oft/src/extensions/rate_limiter.rs

@@ -1,286 +0,0 @@
-use crate as oft;
-use common_macros::{contract_error, contract_trait, only_role, storage};
-use soroban_sdk::{assert_with_error, contractevent, contracttype, Env};
-use utils::rbac::RoleBasedAccessControl;
-
-/// Role for rate limiter configuration (set_rate_limit).
-pub const RATE_LIMITER_MANAGER_ROLE: &str = "RATE_LIMITER_MANAGER_ROLE";
-
-// =========================================================================
-// Types
-// =========================================================================
-
-#[contracttype]
-#[derive(Clone, Debug, Eq, PartialEq)]
-#[repr(u8)]
-pub enum Direction {
-    Inbound,
-    Outbound,
-}
-
-#[contracttype]
-#[derive(Clone, Debug, Eq, PartialEq)]
-#[repr(u8)]
-pub enum Mode {
-    /// Net rate limit: releases decrement in-flight amount
-    Net,
-    /// Gross rate limit: releases do not affect in-flight amount
-    Gross,
-}
-
-/// Configuration for rate limiting, used as input parameter.
-#[contracttype]
-#[derive(Clone, Debug, Eq, PartialEq)]
-pub struct RateLimitConfig {
-    pub limit: i128,
-    pub window_seconds: u64,
-    pub mode: Mode,
-}
-
-/// Internal storage struct for rate limit state.
-///
-/// The rate limiter uses a "leaky bucket" algorithm where:
-/// - `config.limit` defines the maximum tokens that can be "in flight" at any time
-/// - `config.window_seconds` defines how long it takes for the bucket to fully drain
-/// - Tokens decay linearly over time: `decay = elapsed_time * limit / window_seconds`
-/// - Current in-flight = `in_flight_on_last_update - decay` (clamped to 0)
-/// - `config.mode` determines whether releases affect in-flight (Net) or not (Gross)
-#[contracttype]
-#[derive(Clone, Debug, Eq, PartialEq)]
-struct RateLimitState {
-    /// The rate limit configuration (limit and window_seconds)
-    config: RateLimitConfig,
-    /// The in-flight amount at the time of `last_update` (before decay is applied)
-    in_flight_on_last_update: i128,
-    /// Timestamp of the last update (used to calculate decay)
-    last_update: u64,
-}
-
-// =========================================================================
-// Storage
-// =========================================================================
-
-#[storage]
-enum RateLimitStorage {
-    #[persistent(RateLimitState)]
-    RateLimit { direction: Direction, eid: u32 },
-}
-
-// =========================================================================
-// Errors
-// =========================================================================
-
-#[contract_error]
-pub enum RateLimitError {
-    ExceededRateLimit = 3120,
-    InvalidAmount,
-    InvalidTimestamp,
-    InvalidConfig,
-    SameValue,
-}
-
-// =========================================================================
-// Events
-// =========================================================================
-
-#[contractevent]
-#[derive(Clone, Debug, Eq, PartialEq)]
-pub struct RateLimitSet {
-    pub direction: Direction,
-    pub eid: u32,
-    /// The rate limit configuration, or None if the rate limit is removed
-    pub config: Option<RateLimitConfig>,
-}
-
-// =========================================================================
-// Trait With Default Implementations
-// =========================================================================
-
-#[contract_trait]
-pub trait RateLimiter: RateLimiterInternal + RoleBasedAccessControl {
-    // =========================================================================
-    // Management Functions
-    // =========================================================================
-
-    /// Sets or removes a rate limit for a specific direction and endpoint.
-    ///
-    /// # Arguments
-    /// * `direction` - The direction (Inbound or Outbound)
-    /// * `eid` - The endpoint ID
-    /// * `config` - The rate limit configuration, or None to remove the rate limit
-    /// * `operator` - The address that must have RATE_LIMITER_MANAGER_ROLE
-    #[only_role(operator, RATE_LIMITER_MANAGER_ROLE)]
-    fn set_rate_limit(
-        env: &soroban_sdk::Env,
-        direction: &oft::rate_limiter::Direction,
-        eid: u32,
-        config: &Option<oft::rate_limiter::RateLimitConfig>,
-        operator: &soroban_sdk::Address,
-    ) {
-        Self::__set_rate_limit(env, direction, eid, config);
-    }
-
-    // =========================================================================
-    // View Functions
-    // =========================================================================
-
-    /// Returns the rate limit configuration for a direction and endpoint.
-    /// Returns None if no rate limit is configured.
-    fn rate_limit_config(
-        env: &soroban_sdk::Env,
-        direction: &oft::rate_limiter::Direction,
-        eid: u32,
-    ) -> Option<oft::rate_limiter::RateLimitConfig> {
-        Self::__rate_limit_config(env, direction, eid)
-    }
-
-    /// Returns the current in-flight amount for a direction and endpoint.
-    fn rate_limit_in_flight(env: &soroban_sdk::Env, direction: &oft::rate_limiter::Direction, eid: u32) -> i128 {
-        Self::__rate_limit_in_flight(env, direction, eid)
-    }
-
-    /// Returns the available capacity for a direction and endpoint.
-    /// Returns i128::MAX if no rate limit is configured.
-    fn rate_limit_capacity(env: &soroban_sdk::Env, direction: &oft::rate_limiter::Direction, eid: u32) -> i128 {
-        Self::__rate_limit_capacity(env, direction, eid)
-    }
-}
-
-/// Internal trait for rate limiter operations used by OFT hooks.
-/// Contains only truly internal methods that are called from OFTInternal implementations.
-pub trait RateLimiterInternal {
-    // =========================================================================
-    // OFT Hooks
-    // =========================================================================
-
-    /// Consumes the specified amount from the rate limit capacity.
-    /// Used internally by `__debit` and `__credit` to enforce rate limits.
-    ///
-    /// # Errors
-    /// * `ExceededRateLimit` - If the amount exceeds the available capacity.
-    fn __consume_rate_limit_capacity(env: &Env, direction: &Direction, eid: u32, amount: i128) {
-        assert_with_error!(env, amount >= 0, RateLimitError::InvalidAmount);
-
-        let Some(mut state) = RateLimitStorage::rate_limit(env, direction, eid) else {
-            return;
-        };
-
-        // Apply decay and update timestamp
-        let in_flight = calculate_decayed_in_flight(env, &state);
-        state.in_flight_on_last_update = in_flight;
-        state.last_update = env.ledger().timestamp();
-
-        // Check capacity and consume
-        let capacity = (state.config.limit - in_flight).max(0);
-        assert_with_error!(env, amount <= capacity, RateLimitError::ExceededRateLimit);
-        state.in_flight_on_last_update += amount;
-
-        RateLimitStorage::set_rate_limit(env, direction, eid, &state);
-    }
-
-    /// Releases the specified amount back to the rate limit capacity.
-    /// Used internally by `__credit` to release outbound capacity on inbound messages.
-    /// Only releases for Net mode; Gross mode ignores releases.
-    fn __release_rate_limit_capacity(env: &Env, direction: &Direction, eid: u32, amount: i128) {
-        assert_with_error!(env, amount >= 0, RateLimitError::InvalidAmount);
-
-        let Some(mut state) = RateLimitStorage::rate_limit(env, direction, eid) else {
-            return;
-        };
-
-        // Gross mode does not release capacity
-        if state.config.mode == Mode::Gross {
-            return;
-        }
-
-        // Apply decay and update timestamp
-        let in_flight = calculate_decayed_in_flight(env, &state);
-        state.in_flight_on_last_update = (in_flight - amount).max(0);
-        state.last_update = env.ledger().timestamp();
-
-        RateLimitStorage::set_rate_limit(env, direction, eid, &state);
-    }
-
-    // =========================================================================
-    // Management Functions
-    // =========================================================================
-
-    /// Sets or removes a rate limit for a specific direction and endpoint.
-    ///
-    /// # Arguments
-    /// * `direction` - The direction (Inbound or Outbound)
-    /// * `eid` - The endpoint ID
-    /// * `config` - The rate limit configuration, or None to remove the rate limit
-    fn __set_rate_limit(env: &Env, direction: &Direction, eid: u32, config: &Option<RateLimitConfig>) {
-        let current_state = RateLimitStorage::rate_limit(env, direction, eid);
-        let current_config = current_state.as_ref().map(|s| s.config.clone());
-        assert_with_error!(env, current_config != *config, RateLimitError::SameValue);
-
-        match config {
-            Some(cfg) => {
-                assert_with_error!(env, cfg.limit >= 0 && cfg.window_seconds > 0, RateLimitError::InvalidConfig);
-
-                let state = if let Some(mut existing) = current_state {
-                    // Update existing: checkpoint in-flight before changing config
-                    existing.in_flight_on_last_update = calculate_decayed_in_flight(env, &existing);
-                    existing.last_update = env.ledger().timestamp();
-                    existing.config = cfg.clone();
-                    existing
-                } else {
-                    // Create new
-                    RateLimitState {
-                        config: cfg.clone(),
-                        in_flight_on_last_update: 0,
-                        last_update: env.ledger().timestamp(),
-                    }
-                };
-
-                RateLimitStorage::set_rate_limit(env, direction, eid, &state);
-            }
-            None => {
-                RateLimitStorage::remove_rate_limit(env, direction, eid);
-            }
-        }
-        RateLimitSet { direction: direction.clone(), eid, config: config.clone() }.publish(env);
-    }
-
-    // =========================================================================
-    // View Functions
-    // =========================================================================
-
-    /// Returns the rate limit configuration for a direction and endpoint.
-    /// Returns None if no rate limit is configured.
-    fn __rate_limit_config(env: &Env, direction: &Direction, eid: u32) -> Option<RateLimitConfig> {
-        RateLimitStorage::rate_limit(env, direction, eid).map(|s| s.config)
-    }
-
-    /// Returns the current in-flight amount for a direction and endpoint.
-    fn __rate_limit_in_flight(env: &Env, direction: &Direction, eid: u32) -> i128 {
-        RateLimitStorage::rate_limit(env, direction, eid).map(|s| calculate_decayed_in_flight(env, &s)).unwrap_or(0)
-    }
-
-    /// Returns the available capacity for a direction and endpoint.
-    /// Returns i128::MAX if no rate limit is configured.
-    fn __rate_limit_capacity(env: &Env, direction: &Direction, eid: u32) -> i128 {
-        RateLimitStorage::rate_limit(env, direction, eid)
-            .map(|s| (s.config.limit - calculate_decayed_in_flight(env, &s)).max(0))
-            .unwrap_or(i128::MAX)
-    }
-}
-
-// =========================================================================
-// Helper Functions
-// =========================================================================
-
-/// Calculates the current in-flight amount with decay applied.
-/// This is a pure function that doesn't access storage.
-fn calculate_decayed_in_flight(env: &Env, state: &RateLimitState) -> i128 {
-    let timestamp = env.ledger().timestamp();
-    assert_with_error!(env, timestamp >= state.last_update, RateLimitError::InvalidTimestamp);
-
-    let elapsed = timestamp - state.last_update;
-    let decay = (elapsed as i128).saturating_mul(state.config.limit) / (state.config.window_seconds as i128);
-
-    // Ensure the decayed in-flight amount is not negative
-    (state.in_flight_on_last_update - decay).max(0)
-}