@layerzerolabs/protocol-stellar-v2 0.2.13 → 0.2.15

package/contracts/macro-integration-tests/tests/ui/ownable/pass/namespacing_and_imports.rs

@@ -0,0 +1,22 @@
+// UI (trybuild) test: macro expansion does not rely on downstream imports.
+//
+// Purpose:
+// - Ensures a downstream crate can use the generated `Ownable` trait impl via a fully-qualified path
+//   without importing `utils::ownable::Ownable` into scope.
+// - Catches regressions where the macro-generated code would require extra `use` statements.
+
+use soroban_sdk::{contract, contractimpl, Env};
+
+#[contract]
+#[common_macros::ownable]
+pub struct MyContract;
+
+#[contractimpl]
+impl MyContract {
+    pub fn foo(env: Env) {
+        // Call using the fully-qualified trait path without importing the trait.
+        let _ = <Self as utils::ownable::Ownable>::owner(&env);
+    }
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/ownable/pass/only_owner_env_param_variants.rs

@@ -0,0 +1,46 @@
+// UI (trybuild) test: `#[only_owner]` supports different `Env` parameter placements.
+//
+// Purpose:
+// - Verifies `#[common_macros::only_owner]` can locate an `Env` argument in the function signature,
+//   even when `Env` is not the first parameter.
+// - Uses `&Env` forms to match the most common `require_owner_auth` signature shape.
+
+use soroban_sdk::{contract, Env};
+
+#[contract]
+#[common_macros::ownable]
+pub struct MyContract;
+
+impl MyContract {
+    // `Env` as the first argument, by reference.
+    #[common_macros::only_owner]
+    pub fn f1(env: &Env) {
+        let _ = env;
+    }
+
+    // `Env` not in the first position.
+    #[common_macros::only_owner]
+    pub fn f2(x: u32, env: &Env) {
+        let _ = (x, env);
+    }
+
+    // `Env` using a fully-qualified type path.
+    #[common_macros::only_owner]
+    pub fn f3(env: &soroban_sdk::Env) {
+        let _ = env;
+    }
+
+    // Env by value
+    #[common_macros::only_owner]
+    pub fn f4(env: Env) {
+        let _ = env;
+    }
+
+    // Qualified Env by value, not first param
+    #[common_macros::only_owner]
+    pub fn f5(x: u32, env: soroban_sdk::Env) {
+        let _ = (x, env);
+    }
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/invalid_storage_type_param.rs

@@ -0,0 +1,13 @@
+// UI (trybuild) negative test: invalid storage value type parameter is rejected.
+//
+// Purpose:
+// - Ensures the type parameter must parse as a Rust type (`syn::Type`).
+// - Locks down downstream UX for invalid inputs like string literals.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[persistent("not_a_type")]
+    Bad,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/invalid_storage_type_param.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/invalid_storage_type_param.rs:7:1
+  |
+7 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse storage variant for Bad: storage type must be specified exactly once as '#[instance(Type)]', '#[persistent(Type)]', or '#[temporary(Type)]': got zero elements when exactly one was expected

package/contracts/macro-integration-tests/tests/ui/storage/fail/missing_storage_type_param.rs

@@ -0,0 +1,13 @@
+// UI (trybuild) negative test: missing storage value type parameter is rejected.
+//
+// Purpose:
+// - Ensures storage kind attributes (instance/persistent/temporary) require exactly one type parameter.
+// - Locks down downstream UX for the common mistake: `#[instance]` (missing type).
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance]
+    Counter,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/missing_storage_type_param.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/missing_storage_type_param.rs:7:1
+  |
+7 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse storage variant for Counter: storage type must be specified exactly once as '#[instance(Type)]', '#[persistent(Type)]', or '#[temporary(Type)]': got zero elements when exactly one was expected

package/contracts/macro-integration-tests/tests/ui/storage/fail/multiple_storage_kinds.rs

@@ -0,0 +1,10 @@
+// UI (trybuild) negative test: variant must specify exactly one storage kind.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(u32)]
+    #[persistent(u32)]
+    Counter,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/multiple_storage_kinds.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/multiple_storage_kinds.rs:3:1
+  |
+3 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse storage variant for Counter: storage type must be specified exactly once as '#[instance(Type)]', '#[persistent(Type)]', or '#[temporary(Type)]': got at least 2 elements when exactly one was expected

package/contracts/macro-integration-tests/tests/ui/storage/fail/multiple_type_params.rs

@@ -0,0 +1,12 @@
+// UI (trybuild) negative test: storage type attribute must have exactly one type parameter.
+//
+// Purpose:
+// - Ensures multiple type parameters are rejected (e.g., #[persistent(u32, i32)]).
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[persistent(u32, i32)]
+    A,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/multiple_type_params.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/multiple_type_params.rs:6:1
+  |
+6 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse storage variant for A: storage type must be specified exactly once as '#[instance(Type)]', '#[persistent(Type)]', or '#[temporary(Type)]': got zero elements when exactly one was expected

package/contracts/macro-integration-tests/tests/ui/storage/fail/no_ttl_extension_on_non_persistent.rs

@@ -0,0 +1,10 @@
+// UI (trybuild) negative test: #[no_ttl_extension] is only valid on persistent storage variants.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(u32)]
+    #[no_ttl_extension]
+    Counter,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/no_ttl_extension_on_non_persistent.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/no_ttl_extension_on_non_persistent.rs:3:1
+  |
+3 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse storage variant for Counter: #[no_ttl_extension] can only be used with #[persistent(...)] storage

package/contracts/macro-integration-tests/tests/ui/storage/fail/non_enum_input.rs

@@ -0,0 +1,10 @@
+// UI (trybuild) negative test: `#[storage]` must be applied to an enum.
+//
+// Purpose:
+// - Ensures non-enum input (struct) is rejected at compile time.
+// - Locks down the enum-only contract for downstream users.
+
+#[common_macros::storage]
+pub struct NotAnEnum;
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/non_enum_input.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/non_enum_input.rs:7:1
+  |
+7 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse enum: expected `enum`

package/contracts/macro-integration-tests/tests/ui/storage/fail/storage_attr_rejects_args.rs

@@ -0,0 +1,12 @@
+// UI (trybuild) negative test: `#[storage(...)]` does not accept arguments.
+//
+// Purpose:
+// - Ensures the `#[common_macros::storage]` attribute is argument-less; passing any tokens should fail.
+
+#[common_macros::storage("not_a_path")]
+pub enum StorageKey {
+    #[instance(u32)]
+    A,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/storage_attr_rejects_args.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/storage_attr_rejects_args.rs:6:1
+  |
+6 | #[common_macros::storage("not_a_path")]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: the #[storage] attribute does not accept arguments

package/contracts/macro-integration-tests/tests/ui/storage/fail/tuple_variant_rejected.rs

@@ -0,0 +1,13 @@
+// UI (trybuild) negative test: tuple variants are rejected.
+//
+// Purpose:
+// - Ensures only unit variants or named-fields variants are supported.
+// - Tuple variants (e.g., Foo(u32)) must fail compilation.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(u32)]
+    Tuple(u32),
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/tuple_variant_rejected.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/tuple_variant_rejected.rs:7:1
+  |
+7 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: only unit variants or named fields are supported in storage enums

package/contracts/macro-integration-tests/tests/ui/storage/fail/unknown_variant_attr.rs

@@ -0,0 +1,13 @@
+// UI (trybuild) negative test: unknown attribute on a variant is rejected.
+//
+// Purpose:
+// - Ensures the storage macro rejects unsupported attributes on variants.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(u32)]
+    #[wat]
+    Counter,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/fail/unknown_variant_attr.stderr

@@ -0,0 +1,7 @@
+error: custom attribute panicked
+ --> tests/ui/storage/fail/unknown_variant_attr.rs:6:1
+  |
+6 | #[common_macros::storage]
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^
+  |
+  = help: message: failed to parse storage variant for Counter: unknown attribute 'wat' on variant 'Counter'. Supported attributes are: doc, instance, persistent, temporary, default, name, no_ttl_extension

package/contracts/macro-integration-tests/tests/ui/storage/pass/default_value_on_variant.rs

@@ -0,0 +1,14 @@
+// UI (trybuild) test: default value attribute on a variant compiles.
+//
+// Purpose:
+// - Ensures `#[default(...)]` is accepted and parsed.
+// - Avoids asserting runtime semantics here (handled by runtime tests); this is compile-time contract only.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(u32)]
+    #[default(0)]
+    Counter,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/pass/enum_instance_unit_basic.rs

@@ -0,0 +1,14 @@
+// UI (trybuild) test: basic instance storage on a unit variant compiles.
+//
+// Purpose:
+// - Ensures `#[common_macros::storage]` works on enums (enum-only contract).
+// - Ensures unit variants are supported.
+// - Ensures `#[instance(T)]` accepts exactly one type parameter.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(u32)]
+    Counter,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/pass/enum_persistent_named_fields_keyed.rs

@@ -0,0 +1,16 @@
+// UI (trybuild) test: persistent storage on a named-fields (keyed) variant compiles.
+//
+// Purpose:
+// - Ensures named-fields variants are supported (keyed patterns).
+// - Ensures `#[persistent(T)]` accepts exactly one type parameter.
+// - Uses a Soroban type as key to reflect realistic usage.
+
+use soroban_sdk::BytesN;
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[persistent(i128)]
+    Balance { key: BytesN<32> },
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/pass/enum_temporary_unit_option.rs

@@ -0,0 +1,15 @@
+// UI (trybuild) test: temporary storage with Option value type compiles.
+//
+// Purpose:
+// - Ensures `#[temporary(T)]` works with `Option<...>` value types.
+// - Covers the "temporary + option value type" parsing path.
+
+use soroban_sdk::Address;
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[temporary(Option<Address>)]
+    MaybeOwner,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/pass/name_override.rs

@@ -0,0 +1,14 @@
+// UI (trybuild) test: name override attribute compiles.
+//
+// Purpose:
+// - Ensures `#[name("...")]` is accepted and parsed.
+// - Locks down compile-time contract for custom key naming.
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[instance(bool)]
+    #[name("custom_flag")]
+    Flag,
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/pass/no_auto_ttl_extension.rs

@@ -0,0 +1,19 @@
+// UI (trybuild) test: `#[no_ttl_extension]` compiles.
+//
+// Purpose:
+// - Ensures `#[no_ttl_extension]` is accepted on variants.
+// - Does NOT assert runtime TTL extension behavior (covered by runtime tests).
+
+use soroban_sdk::BytesN;
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[persistent(i128)]
+    #[no_ttl_extension]
+    Balance { key: BytesN<32> },
+
+    #[persistent(i128)]
+    Balance2 { key: BytesN<32> },
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/storage/pass/ttl_provider_basic.rs

@@ -0,0 +1,15 @@
+// UI (trybuild) test: storage macro compiles.
+//
+// Purpose:
+// - Ensures `#[common_macros::storage]` compiles in a downstream crate.
+// - Does NOT assert runtime TTL extension semantics (covered by runtime tests).
+
+use soroban_sdk::BytesN;
+
+#[common_macros::storage]
+pub enum StorageKey {
+    #[persistent(i128)]
+    Balance { key: BytesN<32> },
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui/ttl_configurable/pass/minimal_contract.rs

@@ -0,0 +1,44 @@
+// UI (trybuild) test: `#[ttl_configurable]` on a minimal contract compiles.
+//
+// Purpose:
+// - Ensures `#[common_macros::ttl_configurable]` can be applied to a contract struct in a downstream crate.
+// - Validates the macro-generated `utils::ttl::TtlConfigurable` trait impl exists and is callable.
+// - Validates `#[ttl_configurable]` also injects `#[ownable]` (so init_owner exists) without requiring
+//   downstream imports or special setup.
+// - Avoids snapshotting token output; compilation success + type-checking is the integration contract.
+
+use common_macros::{ownable, ttl_configurable};
+use soroban_sdk::{contract, contractimpl, Address, Env};
+
+#[contract]
+#[ttl_configurable]
+#[ownable]
+pub struct MyContract;
+
+#[contractimpl]
+impl MyContract {
+    // Provide a small init entry to type-check the injected ownable helper exists.
+    pub fn init(env: Env, owner: Address) {
+        // `init_owner` should exist because `#[ttl_configurable]` injects `#[ownable]`.
+        Self::init_owner(&env, &owner);
+    }
+
+    // Provide a method that type-checks the TtlConfigurable trait impl exists.
+    pub fn smoke(env: Env) {
+        // Read current TTL configs.
+        let _cfg: (Option<TtlConfig>, Option<TtlConfig>) = Self::ttl_configs(&env);
+
+        // Read frozen flag.
+        let _frozen: bool = Self::is_ttl_configs_frozen(&env);
+
+        // Type-check setter and freezer signatures.
+        let none: Option<TtlConfig> = None;
+        Self::set_ttl_configs(&env, &none, &none);
+        Self::freeze_ttl_configs(&env);
+
+        // Type-check the inherent manual instance TTL extender exists.
+        Self::extend_instance_ttl(&env, 1, 2);
+    }
+}
+
+fn main() {}

package/contracts/macro-integration-tests/tests/ui_error.rs

@@ -0,0 +1,11 @@
+#[test]
+fn ui_error() {
+    // Important: set this before trybuild::TestCases::new() so each shard has
+    // its own trybuild project directory + lock + artifacts.
+    let target_dir = std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("target/trybuild-shards/ui_error");
+    std::env::set_var("CARGO_TARGET_DIR", target_dir.as_os_str());
+
+    let t = trybuild::TestCases::new();
+    t.pass("tests/ui/error/**/pass/*.rs");
+    t.compile_fail("tests/ui/error/**/fail/*.rs");
+}

package/contracts/macro-integration-tests/tests/ui_ownable.rs

@@ -0,0 +1,11 @@
+#[test]
+fn ui_ownable() {
+    // Important: set this before trybuild::TestCases::new() so each shard has
+    // its own trybuild project directory + lock + artifacts.
+    let target_dir = std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("target/trybuild-shards/ui_ownable");
+    std::env::set_var("CARGO_TARGET_DIR", target_dir.as_os_str());
+
+    let t = trybuild::TestCases::new();
+    t.pass("tests/ui/ownable/**/pass/*.rs");
+    t.compile_fail("tests/ui/ownable/**/fail/*.rs");
+}

package/contracts/macro-integration-tests/tests/ui_storage.rs

@@ -0,0 +1,11 @@
+#[test]
+fn ui_storage() {
+    // Important: set this before trybuild::TestCases::new() so each shard has
+    // its own trybuild project directory + lock + artifacts.
+    let target_dir = std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("target/trybuild-shards/ui_storage");
+    std::env::set_var("CARGO_TARGET_DIR", target_dir.as_os_str());
+
+    let t = trybuild::TestCases::new();
+    t.pass("tests/ui/storage/**/pass/*.rs");
+    t.compile_fail("tests/ui/storage/**/fail/*.rs");
+}

package/contracts/macro-integration-tests/tests/ui_ttl_configurable.rs

@@ -0,0 +1,12 @@
+#[test]
+fn ui_ttl_configurable() {
+    // Important: set this before trybuild::TestCases::new() so each shard has
+    // its own trybuild project directory + lock + artifacts.
+    let target_dir =
+        std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("target/trybuild-shards/ui_ttl_configurable");
+    std::env::set_var("CARGO_TARGET_DIR", target_dir.as_os_str());
+
+    let t = trybuild::TestCases::new();
+    t.pass("tests/ui/ttl_configurable/**/pass/*.rs");
+    t.compile_fail("tests/ui/ttl_configurable/**/fail/*.rs");
+}

package/contracts/message-libs/blocked-message-lib/src/lib.rs

@@ -20,19 +20,24 @@ use endpoint_v2::{
 use soroban_sdk::{contract, panic_with_error, Address, Bytes, Env, Vec};
 
 #[contract_error]
-enum BlockMessageLibError {
+enum BlockedMessageLibError {
     NotImplemented,
 }
 
 /// Block Message Library contract that rejects all messaging operations.
 #[contract]
-pub struct BlockMessageLib; // TODO: rename to BlockedMessageLib
+pub struct BlockedMessageLib;
 
 #[contract_impl]
-impl IMessageLib for BlockMessageLib {
+impl IMessageLib for BlockedMessageLib {
+    /// Always panics - config modification is not supported.
+    fn set_config(env: &Env, _oapp: &Address, _param: &Vec<SetConfigParam>) {
+        panic_with_error!(&env, BlockedMessageLibError::NotImplemented);
+    }
+
     /// Always panics - config retrieval is not supported.
     fn get_config(env: &Env, _eid: u32, _oapp: &Address, _config_type: u32) -> Bytes {
-        panic_with_error!(&env, BlockMessageLibError::NotImplemented);
+        panic_with_error!(&env, BlockedMessageLibError::NotImplemented);
     }
 
     /// Returns true for all EIDs to allow assignment as a blocking library.
@@ -40,31 +45,26 @@ impl IMessageLib for BlockMessageLib {
         true
     }
 
-    /// Returns SendAndReceive to indicate it can block both directions.
-    fn message_lib_type(_env: &Env) -> MessageLibType {
-        MessageLibType::SendAndReceive
-    }
-
-    /// Always panics - config modification is not supported.
-    fn set_config(env: &Env, _oapp: &Address, _param: &Vec<SetConfigParam>) {
-        panic_with_error!(&env, BlockMessageLibError::NotImplemented);
-    }
-
     /// Returns max version to ensure it's recognized as a valid library.
     fn version(_env: &Env) -> MessageLibVersion {
         MessageLibVersion { major: u64::MAX, minor: u8::MAX as u32, endpoint_version: 2 }
     }
+
+    /// Returns SendAndReceive to indicate it can block both directions.
+    fn message_lib_type(_env: &Env) -> MessageLibType {
+        MessageLibType::SendAndReceive
+    }
 }
 
 #[contract_impl]
-impl ISendLib for BlockMessageLib {
+impl ISendLib for BlockedMessageLib {
     /// Always panics - quoting is blocked.
     fn quote(env: &Env, _packet: &OutboundPacket, _options: &Bytes, _pay_in_zro: bool) -> MessagingFee {
-        panic_with_error!(&env, BlockMessageLibError::NotImplemented);
+        panic_with_error!(&env, BlockedMessageLibError::NotImplemented);
     }
 
     /// Always panics - sending is blocked.
     fn send(env: &Env, _packet: &OutboundPacket, _options: &Bytes, _pay_in_zro: bool) -> FeesAndPacket {
-        panic_with_error!(&env, BlockMessageLibError::NotImplemented);
+        panic_with_error!(&env, BlockedMessageLibError::NotImplemented);
     }
 }

package/contracts/message-libs/message-lib-common/src/tests/packet_codec_v1/decode_packet_header.rs

@@ -0,0 +1,64 @@
+use super::test_helper::*;
+use crate::packet_codec_v1::{decode_packet_header, HEADER_LENGTH, PACKET_VERSION};
+use soroban_sdk::{Bytes, BytesN, Env};
+
+#[test]
+#[should_panic(expected = "Error(Contract, #1001)")] // PacketCodecV1Error::InvalidPacketHeader
+fn test_decode_packet_header_rejects_invalid_length() {
+    let env = Env::default();
+    // Only 3 bytes instead of HEADER_LENGTH.
+    let invalid_header = Bytes::from_array(&env, &[0x01, 0x02, 0x03]);
+    decode_packet_header(&env, &invalid_header);
+}
+
+#[test]
+#[should_panic(expected = "Error(Contract, #1002)")] // PacketCodecV1Error::InvalidPacketVersion
+fn test_decode_packet_header_rejects_invalid_version() {
+    let env = Env::default();
+    // Correct length, wrong version.
+    let mut invalid_header_bytes: [u8; HEADER_LENGTH as usize] = [0u8; HEADER_LENGTH as usize];
+    invalid_header_bytes[0] = 2; // Wrong version (should be 1)
+    let invalid_header = Bytes::from_array(&env, &invalid_header_bytes);
+    decode_packet_header(&env, &invalid_header);
+}
+
+#[test]
+#[should_panic(expected = "Error(Contract, #1001)")] // PacketCodecV1Error::InvalidPacketHeader
+fn test_decode_packet_header_rejects_too_long_length() {
+    let env = Env::default();
+    // HEADER_LENGTH + 1 bytes should still be rejected (length must be exactly HEADER_LENGTH).
+    let too_long_header = Bytes::from_array(&env, &[0u8; (HEADER_LENGTH as usize) + 1]);
+    decode_packet_header(&env, &too_long_header);
+}
+
+#[test]
+fn test_decode_packet_header_parses_expected_offsets_and_big_endian() {
+    let env = Env::default();
+
+    // Construct raw header bytes directly (do not depend on encode_packet_header).
+    // Layout:
+    // [0] version
+    // [1..9] nonce (u64 BE)
+    // [9..13] src_eid (u32 BE)
+    // [13..45] sender (32)
+    // [45..49] dst_eid (u32 BE)
+    // [49..81] receiver (32)
+    let mut raw: [u8; HEADER_LENGTH as usize] = [0u8; HEADER_LENGTH as usize];
+    raw[0] = PACKET_VERSION;
+
+    raw[1..9].copy_from_slice(&TEST_NONCE.to_be_bytes());
+    raw[9..13].copy_from_slice(&TEST_SRC_EID.to_be_bytes());
+    raw[13..45].copy_from_slice(&TEST_SENDER_BYTES);
+    raw[45..49].copy_from_slice(&TEST_DST_EID.to_be_bytes());
+    raw[49..81].copy_from_slice(&TEST_RECEIVER_BYTES);
+
+    let encoded_header = Bytes::from_array(&env, &raw);
+    let decoded = decode_packet_header(&env, &encoded_header);
+
+    assert_eq!(decoded.version, PACKET_VERSION);
+    assert_eq!(decoded.nonce, TEST_NONCE);
+    assert_eq!(decoded.src_eid, TEST_SRC_EID);
+    assert_eq!(decoded.dst_eid, TEST_DST_EID);
+    assert_eq!(decoded.sender, BytesN::from_array(&env, &TEST_SENDER_BYTES));
+    assert_eq!(decoded.receiver, BytesN::from_array(&env, &TEST_RECEIVER_BYTES));
+}