create-kozalak-l1 0.1.0

package/templates/ictt-bridge/script/DeployTokenHome.s.sol

@@ -0,0 +1,139 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.25;
+
+import {Script} from "forge-std/Script.sol";
+import {console2} from "forge-std/console2.sol";
+import {KozaTokenHome} from "../src/KozaTokenHome.sol";
+
+/**
+ * @title DeployTokenHome
+ * @notice Foundry deployment script for KozaTokenHome (Phase 1, Sprint 3, v0.3.0).
+ *         Kaynak zincirde (default: Fuji) ERC-20 lock contract'ını yayar.
+ *
+ *         Kullanım (Fuji testnet, .env doluyken):
+ *
+ *             forge script script/deploy/DeployTokenHome.s.sol \
+ *                 --rpc-url fuji \
+ *                 --broadcast \
+ *                 --verify
+ *
+ *         Zorunlu env (.env):
+ *           - PRIVATE_KEY                       — deployer (testnet only!)
+ *
+ *         Opsiyonel env (default'lar Phase 1 senaryosu — Fuji'de KGAS bridge):
+ *           - HOME_TELEPORTER_REGISTRY  (0xF86Cb19Ad8405AEFa7d09C778215D2Cb6eBfB228 — Fuji resmi)
+ *           - HOME_TELEPORTER_MANAGER   (broadcaster)         — production: multisig
+ *           - HOME_MIN_TELEPORTER_VERSION (1)
+ *           - HOME_TOKEN_ADDRESS        (KozaGasToken v0.1.0 — 0x06451...2eB0)
+ *           - HOME_TOKEN_DECIMALS       (18)
+ *
+ *         Production checklist:
+ *           - HOME_TELEPORTER_MANAGER MUTLAKA multisig olmalı (mainnet öncesi)
+ *           - HOME_TOKEN_ADDRESS denetlenmiş, immutable bir ERC-20'ye işaret etmeli
+ *           - Snowtrace/Routescan API key SNOWTRACE_API_KEY env'inde set'li olmalı
+ */
+contract DeployTokenHome is Script {
+    /*//////////////////////////////////////////////////////////////
+                                DEFAULTS
+    //////////////////////////////////////////////////////////////*/
+
+    /// @dev Fuji Teleporter Registry — Avalanche resmi sürüm (chain ID 43113).
+    address internal constant DEFAULT_TELEPORTER_REGISTRY = 0xF86Cb19Ad8405AEFa7d09C778215D2Cb6eBfB228;
+
+    /// @dev KozaGasToken v0.1.0 — Fuji'de canlı, Phase 1'in default bridge token'ı.
+    address internal constant DEFAULT_TOKEN_ADDRESS = 0x06451DD4Fb8ebFC19870DacC9568f4364D2A2eB0;
+
+    uint256 internal constant DEFAULT_MIN_TELEPORTER_VERSION = 1;
+    uint8 internal constant DEFAULT_TOKEN_DECIMALS = 18;
+
+    /*//////////////////////////////////////////////////////////////
+                                  RUN
+    //////////////////////////////////////////////////////////////*/
+
+    function run() external returns (KozaTokenHome home, address deployer) {
+        address teleporterRegistry = vm.envOr("HOME_TELEPORTER_REGISTRY", DEFAULT_TELEPORTER_REGISTRY);
+        uint256 minTeleporterVersion = vm.envOr("HOME_MIN_TELEPORTER_VERSION", DEFAULT_MIN_TELEPORTER_VERSION);
+        address tokenAddress = vm.envOr("HOME_TOKEN_ADDRESS", DEFAULT_TOKEN_ADDRESS);
+        uint256 tokenDecimalsRaw = vm.envOr("HOME_TOKEN_DECIMALS", uint256(DEFAULT_TOKEN_DECIMALS));
+        uint8 tokenDecimals = uint8(tokenDecimalsRaw);
+
+        address broadcaster = _resolveBroadcaster();
+        address teleporterManager = vm.envOr("HOME_TELEPORTER_MANAGER", broadcaster);
+
+        return
+            deploy(
+                teleporterRegistry, teleporterManager, minTeleporterVersion, tokenAddress, tokenDecimals, broadcaster
+            );
+    }
+
+    /// @notice Test-friendly entry point. Parametrik, env'e dokunmaz.
+    function deploy(
+        address teleporterRegistry,
+        address teleporterManager,
+        uint256 minTeleporterVersion,
+        address tokenAddress,
+        uint8 tokenDecimals,
+        address broadcaster
+    )
+        public
+        returns (KozaTokenHome home, address deployer)
+    {
+        _logPreDeploy(
+            teleporterRegistry, teleporterManager, minTeleporterVersion, tokenAddress, tokenDecimals, broadcaster
+        );
+
+        vm.startBroadcast();
+        home =
+            new KozaTokenHome(teleporterRegistry, teleporterManager, minTeleporterVersion, tokenAddress, tokenDecimals);
+        vm.stopBroadcast();
+
+        deployer = broadcaster;
+
+        _logPostDeploy(home);
+    }
+
+    /*//////////////////////////////////////////////////////////////
+                              INTERNALS
+    //////////////////////////////////////////////////////////////*/
+
+    function _resolveBroadcaster() internal view returns (address) {
+        address explicitDeployer = vm.envOr("DEPLOYER_ADDRESS", address(0));
+        if (explicitDeployer != address(0)) return explicitDeployer;
+
+        uint256 pk = vm.envOr("PRIVATE_KEY", uint256(0));
+        if (pk != 0) return vm.addr(pk);
+
+        return tx.origin;
+    }
+
+    function _logPreDeploy(
+        address teleporterRegistry,
+        address teleporterManager,
+        uint256 minTeleporterVersion,
+        address tokenAddress,
+        uint8 tokenDecimals,
+        address broadcaster
+    )
+        internal
+        pure
+    {
+        console2.log("=== Deploying KozaTokenHome ===");
+        console2.log("  Broadcaster:           ", broadcaster);
+        console2.log("  Teleporter Registry:   ", teleporterRegistry);
+        console2.log("  Teleporter Manager:    ", teleporterManager);
+        console2.log("  Min Teleporter Version:", minTeleporterVersion);
+        console2.log("  Token Address (KGAS):  ", tokenAddress);
+        console2.log("  Token Decimals:        ", tokenDecimals);
+    }
+
+    function _logPostDeploy(KozaTokenHome home) internal pure {
+        console2.log("=== Deployed ===");
+        console2.log("  KozaTokenHome at: ", address(home));
+        console2.log("");
+        console2.log("Next steps:");
+        console2.log("  1) Hedef zincire (kozaTestL1) KozaTokenRemote'u deploy et:");
+        console2.log("     - REMOTE_TOKEN_HOME_ADDRESS = <yukaridaki adres>");
+        console2.log("  2) Remote tarafta registerWithHome() cagrisini gonder.");
+        console2.log("  3) End-to-end bridge demosu icin Sprint 3G rehberini takip et.");
+    }
+}

package/templates/ictt-bridge/src/KozaTokenHome.sol

@@ -0,0 +1,57 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.25;
+
+import {ERC20TokenHome} from "@ictt/TokenHome/ERC20TokenHome.sol";
+
+/**
+ * @title KozaTokenHome
+ * @notice kozalak-l1 Sprint 3 ICTT TokenHome boilerplate (Phase 1, v0.3.0).
+ *
+ *         Source-chain ERC-20 lock contract. ava-labs/icm-contracts'tan
+ *         denetlenmiş `ERC20TokenHome`'u doğrudan miras alır; üzerine
+ *         custom logic eklemez. Audit-grade prensibi: minimum custom
+ *         layer on top of audited primitives.
+ *
+ *         Yayın senaryosu (Phase 1 default):
+ *           - Kaynak zincir: Avalanche Fuji testnet (chain ID 43113)
+ *           - Bridge edilen token: KozaGasToken (KGAS) v0.1.0 — Fuji'de
+ *             zaten canlı: 0x06451DD4Fb8ebFC19870DacC9568f4364D2A2eB0
+ *           - Hedef zincir: kozaTestL1 (chain ID 9999) — Avalanche CLI
+ *             tarafından local'de ayağa kaldırılmış Subnet-EVM tabanlı L1
+ *           - Hedef contract: `KozaTokenRemote` (ayrı deploy)
+ *
+ *         Parent `ERC20TokenHome`'un sağladıkları:
+ *           - Reentrancy guard (SendReentrancyGuardUpgradeable)
+ *           - Teleporter registry üzerinden version pinning ve migration
+ *             (TeleporterRegistryOwnableAppUpgradeable)
+ *           - Multi-hop transfer desteği (Home -> Remote A -> Remote B)
+ *           - sendAndCall pattern: token transfer + uzak zincirde
+ *             fonksiyon çağrısı (atomik)
+ *           - ERC-20 lock/unlock (deposit/withdraw) muhasebesi
+ *
+ *         Production hazırlık checklist'i:
+ *           - `teleporterManager` MUTLAKA Safe (Gnosis) multisig olmalı.
+ *             Bu adres Teleporter version migration'ları yönetir; tek
+ *             nokta güven (single point of trust). EOA mainnet'e konmaz.
+ *           - `tokenAddress` immutable bir ERC-20'ye işaret etmeli
+ *             (KozaGasToken zaten Ownable2Step + cap'li, uygun).
+ *           - `minTeleporterVersion` her iki zincirin desteklediği en
+ *             düşük versiyon olmalı; Avalanche resmi Teleporter
+ *             release notes'a bakılarak güncellenir.
+ *           - Constructor argümanları deterministic — aynı Bridge
+ *             birden fazla L1 çiftine deploy edilirse her seferinde
+ *             aynı bytecode + adres üretmek için CreateX/CREATE2 kullan.
+ *
+ * @custom:security-contact security@bekirerdem.dev
+ */
+contract KozaTokenHome is ERC20TokenHome {
+    constructor(
+        address teleporterRegistryAddress,
+        address teleporterManager,
+        uint256 minTeleporterVersion,
+        address tokenAddress,
+        uint8 tokenDecimals
+    )
+        ERC20TokenHome(teleporterRegistryAddress, teleporterManager, minTeleporterVersion, tokenAddress, tokenDecimals)
+    {}
+}

package/templates/ictt-bridge/src/KozaTokenRemote.sol

@@ -0,0 +1,65 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.25;
+
+import {ERC20TokenRemote} from "@ictt/TokenRemote/ERC20TokenRemote.sol";
+import {TokenRemoteSettings} from "@ictt/TokenRemote/interfaces/ITokenRemote.sol";
+
+/**
+ * @title KozaTokenRemote
+ * @notice kozalak-l1 Sprint 3 ICTT TokenRemote boilerplate (Phase 1, v0.3.0).
+ *
+ *         Hedef-zincir mint/burn ERC-20 representation. ava-labs/icm-contracts'tan
+ *         denetlenmiş `ERC20TokenRemote`'u doğrudan miras alır; üzerine custom
+ *         logic eklemez. Audit-grade prensibi: minimum custom layer.
+ *
+ *         Yayın senaryosu (Phase 1 default):
+ *           - Hedef zincir: kozaTestL1 (chain ID 9999) — Subnet-EVM,
+ *             Avalanche CLI ile yerel deploy
+ *           - Bu kontrat üretir: wKGAS (Wrapped Koza Gas), 18 decimals
+ *           - Kaynak zincir TokenHome: Fuji'deki `KozaTokenHome`
+ *             instance'ı (Sprint 3'ün diğer yarısı)
+ *
+ *         Akış (Senaryo B):
+ *           1. Kullanıcı Fuji'de KGAS (`KozaGasToken`) approve eder.
+ *           2. `KozaTokenHome.send(...)` çağırır → KGAS lock'lanır,
+ *              Teleporter messenger üzerinden kozaTestL1'e mesaj gider.
+ *           3. kozaTestL1'de `KozaTokenRemote` mesajı alır → kullanıcının
+ *              cüzdanına wKGAS mint eder.
+ *           4. Geri yönde: kullanıcı wKGAS'ı burn eder, Fuji'deki KGAS'ı
+ *              unlock olur.
+ *
+ *         Parent `ERC20TokenRemote`'un sağladıkları:
+ *           - ERC-20 standardı (mint/burn dahil)
+ *           - Reentrancy guard (SendReentrancyGuardUpgradeable)
+ *           - Teleporter registry üzerinden version pinning + migration
+ *           - TokenHome ile decimals scaling (farklı decimals ise oranlar)
+ *           - Multi-hop transfer ve sendAndCall desteği
+ *           - `registerWithHome()` ilk deploy sonrası çağrılarak
+ *             TokenHome ile eşleşmeyi tamamlar
+ *
+ *         Production hazırlık checklist'i:
+ *           - `settings.teleporterManager` MUTLAKA Safe (Gnosis) multisig
+ *             olmalı (Home tarafıyla aynı kural).
+ *           - `settings.tokenHomeBlockchainID` Fuji blockchain ID'si:
+ *             `0x` prefix'li 32-byte (Avalanche CLI veya P-Chain query
+ *             ile öğrenilir).
+ *           - `settings.tokenHomeAddress` deploy edilmiş `KozaTokenHome`
+ *             contract adresi.
+ *           - `tokenName`/`tokenSymbol`: hedef L1'de "wKGAS" / "Wrapped
+ *             Koza Gas" gibi anlamlı değerler (kullanıcı UX'i için).
+ *           - Deploy sonrası ilk işlem: `registerWithHome(feeInfo)` ile
+ *             Home tarafına bildirim gönder; bu olmadan transfer'ler
+ *             reverte uğrar.
+ *
+ * @custom:security-contact security@bekirerdem.dev
+ */
+contract KozaTokenRemote is ERC20TokenRemote {
+    constructor(
+        TokenRemoteSettings memory settings,
+        string memory tokenName,
+        string memory tokenSymbol,
+        uint8 tokenDecimals
+    )
+        ERC20TokenRemote(settings, tokenName, tokenSymbol, tokenDecimals)
+    {}
+}

package/templates/ictt-bridge/test/ICTTBridge.t.sol

@@ -0,0 +1,157 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.25;
+
+import {Test} from "forge-std/Test.sol";
+import {KozaTokenHome} from "../src/KozaTokenHome.sol";
+import {KozaTokenRemote} from "../src/KozaTokenRemote.sol";
+import {TokenRemoteSettings} from "@ictt/TokenRemote/interfaces/ITokenRemote.sol";
+import {ITeleporterMessenger} from "@teleporter/ITeleporterMessenger.sol";
+
+/**
+ * @title MockTeleporterRegistry
+ * @notice Smoke test setup için minimal TeleporterRegistry stub. Sadece
+ *         `__TeleporterRegistryApp_init`'in zero-check + version-compare
+ *         adımlarını geçirebilmek için yeterli yüzeye sahip. send/receive
+ *         flow burada test edilmez (Sprint 3G fork test'leri o iş için).
+ */
+contract MockTeleporterRegistry {
+    address public messenger;
+    uint256 public latestVersion = 1;
+
+    constructor(address messenger_) {
+        messenger = messenger_;
+    }
+
+    function getAddressFromVersion(uint256) external view returns (address) {
+        return messenger;
+    }
+
+    function getLatestTeleporter() external view returns (ITeleporterMessenger) {
+        return ITeleporterMessenger(messenger);
+    }
+
+    function getVersionFromAddress(address) external pure returns (uint256) {
+        return 1;
+    }
+}
+
+/**
+ * @title MockERC20
+ * @notice Sadece `decimals()` döndürmek için ihtiyaç var (Home init bunu çekmez,
+ *         ama deploy sırasında ERC-20 referansı tutulur). Boş bir kontrat yeterli.
+ */
+contract MockERC20 {
+    function decimals() external pure returns (uint8) {
+        return 18;
+    }
+}
+
+contract ICTTBridgeSmokeTest is Test {
+    MockTeleporterRegistry internal registry;
+    MockERC20 internal mockToken;
+    address internal mockMessenger;
+    address internal teleporterManager;
+
+    bytes32 internal constant SAMPLE_HOME_BLOCKCHAIN_ID =
+        bytes32(hex"abcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcd");
+    address internal constant SAMPLE_HOME_ADDRESS = address(0xC0FFEE);
+
+    /// @dev Warp Messenger precompile address (Avalanche Subnet-EVM yerleşik). Foundry
+    ///      test EVM'inde mevcut değil; vm.etch + vm.mockCall ile sahte bir kontrat
+    ///      koyup `getBlockchainID()` çağrısını yakalıyoruz. ICTT init için yeterli.
+    address internal constant WARP_MESSENGER = 0x0200000000000000000000000000000000000005;
+
+    function setUp() public {
+        mockMessenger = makeAddr("messenger");
+        teleporterManager = makeAddr("teleporterManager");
+        registry = new MockTeleporterRegistry(mockMessenger);
+        mockToken = new MockERC20();
+
+        // Warp precompile mock: EVM call'unun "call to non-contract" hatası vermemesi için
+        // bytecode etch et, sonra getBlockchainID()'yi mock'la.
+        vm.etch(WARP_MESSENGER, hex"01");
+        vm.mockCall(
+            WARP_MESSENGER,
+            abi.encodeWithSignature("getBlockchainID()"),
+            abi.encode(bytes32(uint256(43_113))) // sembolik — Fuji chain ID
+        );
+    }
+
+    /*//////////////////////////////////////////////////////////////
+                        KOZA TOKEN HOME — SMOKE
+    //////////////////////////////////////////////////////////////*/
+
+    function test_KozaTokenHome_DeploysWithValidParams() public {
+        KozaTokenHome home = new KozaTokenHome({
+            teleporterRegistryAddress: address(registry),
+            teleporterManager: teleporterManager,
+            minTeleporterVersion: 1,
+            tokenAddress: address(mockToken),
+            tokenDecimals: 18
+        });
+
+        assertTrue(address(home) != address(0));
+    }
+
+    function test_KozaTokenHome_RevertsOnZeroRegistry() public {
+        vm.expectRevert();
+        new KozaTokenHome({
+            teleporterRegistryAddress: address(0),
+            teleporterManager: teleporterManager,
+            minTeleporterVersion: 1,
+            tokenAddress: address(mockToken),
+            tokenDecimals: 18
+        });
+    }
+
+    function test_KozaTokenHome_RevertsOnZeroMinVersion() public {
+        vm.expectRevert();
+        new KozaTokenHome({
+            teleporterRegistryAddress: address(registry),
+            teleporterManager: teleporterManager,
+            minTeleporterVersion: 0,
+            tokenAddress: address(mockToken),
+            tokenDecimals: 18
+        });
+    }
+
+    /*//////////////////////////////////////////////////////////////
+                       KOZA TOKEN REMOTE — SMOKE
+    //////////////////////////////////////////////////////////////*/
+
+    function _defaultRemoteSettings() internal view returns (TokenRemoteSettings memory) {
+        return TokenRemoteSettings({
+            teleporterRegistryAddress: address(registry),
+            teleporterManager: teleporterManager,
+            minTeleporterVersion: 1,
+            tokenHomeBlockchainID: SAMPLE_HOME_BLOCKCHAIN_ID,
+            tokenHomeAddress: SAMPLE_HOME_ADDRESS,
+            tokenHomeDecimals: 18
+        });
+    }
+
+    function test_KozaTokenRemote_DeploysWithValidParams() public {
+        KozaTokenRemote remote = new KozaTokenRemote(_defaultRemoteSettings(), "Wrapped Koza Gas", "wKGAS", 18);
+
+        assertEq(remote.name(), "Wrapped Koza Gas");
+        assertEq(remote.symbol(), "wKGAS");
+        assertEq(remote.decimals(), 18);
+        assertEq(remote.totalSupply(), 0);
+    }
+
+    function test_KozaTokenRemote_RevertsOnZeroHomeAddress() public {
+        TokenRemoteSettings memory settings = _defaultRemoteSettings();
+        settings.tokenHomeAddress = address(0);
+
+        vm.expectRevert();
+        new KozaTokenRemote(settings, "Wrapped Koza Gas", "wKGAS", 18);
+    }
+
+    function test_KozaTokenRemote_RevertsOnZeroHomeBlockchainID() public {
+        TokenRemoteSettings memory settings = _defaultRemoteSettings();
+        settings.tokenHomeBlockchainID = bytes32(0);
+
+        vm.expectRevert();
+        new KozaTokenRemote(settings, "Wrapped Koza Gas", "wKGAS", 18);
+    }
+}

package/templates/soulbound-credential/.env.example

@@ -0,0 +1,19 @@
+# ============================================
+# Bu dosyayı kopyalayıp `.env` olarak adlandırın. `.env` ASLA commit edilmez.
+# ============================================
+
+# ---- Deploy Wallet (Fuji testnet) ----
+# UYARI: Mainnet private key'i ASLA buraya koyma. Sadece testnet için.
+# Production'da Foundry Cast Wallet (encrypted keystore) veya hardware wallet kullan.
+PRIVATE_KEY=
+
+# Deployer adres (sanity check, opsiyonel)
+DEPLOYER_ADDRESS=
+
+# ---- Block Explorer (Routescan) ----
+# routescan.io'dan ücretsiz `rs_` prefix'li API key al. `--verify` için gerekir.
+SNOWTRACE_API_KEY=
+
+# ---- ICM / Teleporter ----
+# Avalanche Teleporter messenger — tüm L1'lerde deterministic adres.
+TELEPORTER_MESSENGER_ADDRESS=0x253b2784c75e510dD0fF1da844684a1aC0aa5fcf

package/templates/soulbound-credential/.gitmodules

@@ -0,0 +1,6 @@
+[submodule "lib/forge-std"]
+	path = lib/forge-std
+	url = https://github.com/foundry-rs/forge-std
+[submodule "lib/openzeppelin-contracts"]
+	path = lib/openzeppelin-contracts
+	url = https://github.com/OpenZeppelin/openzeppelin-contracts

package/templates/soulbound-credential/README.md

@@ -0,0 +1,48 @@
+# Soulbound Credential
+
+Devredilemez (soulbound), role-bazlı sertifika NFT'si (KozaCredential).
+
+Bu, kozalak-l1 deposundan üretilmiş **standalone** bir Foundry projesidir;
+kendi başına derlenir ve test edilir.
+
+## Kurulum
+
+```bash
+forge install foundry-rs/forge-std@8987040ede9553cea20c95ad40d0455930f9c8e0 OpenZeppelin/openzeppelin-contracts@e4f70216d759d8e6a64144a9e1f7bbeed78e7079
+forge build
+forge test
+```
+
+> `forge install ...@<commit>` bağımlılıkları repo ile birebir aynı commit'lere
+> pinler (aşağıdaki tabloya bakın). `.gitmodules` ve `remappings.txt`
+> bu pinlerle uyumludur.
+
+## Deploy (Fuji testnet)
+
+```bash
+cp .env.example .env      # PRIVATE_KEY + SNOWTRACE_API_KEY doldur
+forge script script/DeployCredential.s.sol \
+    --rpc-url fuji \
+    --broadcast \
+    --verify
+```
+
+> Production: `PRIVATE_KEY` yalnızca testnet olmalı; sahiplik/yönetici
+> adreslerini bir multisig'e (Safe) yönlendir, EOA bırakma.
+
+## Yeniden adlandırma
+
+Contract'ı kendi adınla yeniden adlandırmak istersen `src/`, `test/` ve
+`script/` altındaki dosyalarda contract/dosya adını birlikte güncelle
+(import'lar tek-seviye relative olduğu için tutarlı kalmalı).
+
+## Bağımlılık pinleri
+
+| Bağımlılık | Tag | Commit (pin) |
+| --- | --- | --- |
+| `forge-std` | v1.16.0 | `8987040ede9553cea20c95ad40d0455930f9c8e0` |
+| `openzeppelin-contracts` | v5.3.0 | `e4f70216d759d8e6a64144a9e1f7bbeed78e7079` |
+
+---
+
+_Bu proje `create-kozalak-l1` tarafından üretildi. Kaynak: kozalak-l1 mono-repo._

package/templates/soulbound-credential/foundry.toml

@@ -0,0 +1,35 @@
+[profile.default]
+src = "src"
+out = "out"
+libs = ["lib"]
+test = "test"
+script = "script"
+# Bu şablon solc 0.8.34 pragma'sı kullanır. auto_detect_solc dosya
+# pragma'sına göre doğru derleyiciyi otomatik indirir/seçer.
+auto_detect_solc = true
+optimizer = true
+optimizer_runs = 200
+via_ir = true
+bytecode_hash = "none"
+cbor_metadata = false
+remappings = [
+    "@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/",
+    "forge-std/=lib/forge-std/src/"
+]
+
+[fmt]
+line_length = 120
+tab_width = 4
+bracket_spacing = false
+int_types = "long"
+multiline_func_header = "all"
+quote_style = "double"
+number_underscore = "thousands"
+
+[rpc_endpoints]
+fuji = "https://api.avax-test.network/ext/bc/C/rpc"
+avalanche = "https://api.avax.network/ext/bc/C/rpc"
+
+[etherscan]
+fuji = { key = "${SNOWTRACE_API_KEY}", url = "https://api.routescan.io/v2/network/testnet/evm/43113/etherscan", chain = 43113 }
+avalanche = { key = "${SNOWTRACE_API_KEY}", url = "https://api.routescan.io/v2/network/mainnet/evm/43114/etherscan", chain = 43114 }

package/templates/soulbound-credential/gitignore

@@ -0,0 +1,5 @@
+.env
+out/
+cache/
+broadcast/
+lib/

package/templates/soulbound-credential/remappings.txt

@@ -0,0 +1,2 @@
+@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/
+forge-std/=lib/forge-std/src/

package/templates/soulbound-credential/script/DeployCredential.s.sol

@@ -0,0 +1,126 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.34;
+
+import {Script} from "forge-std/Script.sol";
+import {console2} from "forge-std/console2.sol";
+import {KozaCredential} from "../src/KozaCredential.sol";
+
+/**
+ * @title DeployCredential
+ * @notice Foundry deployment script for KozaCredential (Phase 1, Template 4).
+ *
+ *         Usage (Fuji testnet, with .env populated):
+ *
+ *             forge script script/deploy/DeployCredential.s.sol \
+ *                 --rpc-url fuji \
+ *                 --broadcast \
+ *                 --verify
+ *
+ *         Required env (loaded by `forge` from .env):
+ *           - PRIVATE_KEY              — deployer private key (testnet only!)
+ *
+ *         Optional env (defaults below if unset):
+ *           - CREDENTIAL_NAME          ("ARIA Hub Credential")
+ *           - CREDENTIAL_SYMBOL        ("ARIA")
+ *           - CREDENTIAL_ADMIN         (broadcaster)  — production: multisig
+ *           - CREDENTIAL_ISSUER        (broadcaster)  — sertifika veren/iptal eden
+ *
+ *         Production checklist:
+ *           - PRIVATE_KEY testnet-only veya cast-wallet/keystore ile değiştirilmeli
+ *           - CREDENTIAL_ADMIN bir Safe (Gnosis) multisig olmalı (rol yönetimi)
+ *           - CREDENTIAL_ISSUER kurum/eğitmen cüzdanı; çoklu issuer admin tarafından
+ *             `grantRole(ISSUER_ROLE, ...)` ile eklenir
+ *           - SNOWTRACE_API_KEY `.env`'de set'li olmalı (Routescan verify)
+ */
+contract DeployCredential is Script {
+    /*//////////////////////////////////////////////////////////////
+                                DEFAULTS
+    //////////////////////////////////////////////////////////////*/
+
+    string internal constant DEFAULT_NAME = "ARIA Hub Credential";
+    string internal constant DEFAULT_SYMBOL = "ARIA";
+
+    /*//////////////////////////////////////////////////////////////
+                                  RUN
+    //////////////////////////////////////////////////////////////*/
+
+    /// @notice Entry point invoked by `forge script`. Reads parameters from env.
+    function run() external returns (KozaCredential cred, address deployer) {
+        string memory name = vm.envOr("CREDENTIAL_NAME", DEFAULT_NAME);
+        string memory symbol = vm.envOr("CREDENTIAL_SYMBOL", DEFAULT_SYMBOL);
+
+        address broadcaster = _resolveBroadcaster();
+        address admin = vm.envOr("CREDENTIAL_ADMIN", broadcaster);
+        address issuer = vm.envOr("CREDENTIAL_ISSUER", broadcaster);
+
+        return deploy(name, symbol, admin, issuer, broadcaster);
+    }
+
+    /// @notice Test-friendly entry point. Takes explicit parameters instead of env.
+    /// @dev Prefer this from Foundry tests so env state does not leak between cases.
+    function deploy(
+        string memory name,
+        string memory symbol,
+        address admin,
+        address issuer,
+        address broadcaster
+    )
+        public
+        returns (KozaCredential cred, address deployer)
+    {
+        _logPreDeploy(name, symbol, admin, issuer, broadcaster);
+
+        vm.startBroadcast();
+        cred = new KozaCredential(name, symbol, admin, issuer);
+        vm.stopBroadcast();
+
+        deployer = broadcaster;
+
+        _logPostDeploy(cred, admin, issuer);
+    }
+
+    /*//////////////////////////////////////////////////////////////
+                              INTERNALS
+    //////////////////////////////////////////////////////////////*/
+
+    /// @dev Order: explicit DEPLOYER_ADDRESS > derived from PRIVATE_KEY > tx.origin.
+    function _resolveBroadcaster() internal view returns (address) {
+        address explicitDeployer = vm.envOr("DEPLOYER_ADDRESS", address(0));
+        if (explicitDeployer != address(0)) return explicitDeployer;
+
+        uint256 pk = vm.envOr("PRIVATE_KEY", uint256(0));
+        if (pk != 0) return vm.addr(pk);
+
+        return tx.origin;
+    }
+
+    function _logPreDeploy(
+        string memory name,
+        string memory symbol,
+        address admin,
+        address issuer,
+        address broadcaster
+    )
+        internal
+        pure
+    {
+        console2.log("=== Deploying KozaCredential ===");
+        console2.log("  Broadcaster: ", broadcaster);
+        console2.log("  Name:        ", name);
+        console2.log("  Symbol:      ", symbol);
+        console2.log("  Admin:       ", admin);
+        console2.log("  Issuer:      ", issuer);
+    }
+
+    function _logPostDeploy(KozaCredential cred, address admin, address issuer) internal view {
+        console2.log("=== Deployed ===");
+        console2.log("  Address:     ", address(cred));
+        console2.log("  Admin set:   ", cred.hasRole(cred.DEFAULT_ADMIN_ROLE(), admin));
+        console2.log("  Issuer set:  ", cred.hasRole(cred.ISSUER_ROLE(), issuer));
+        console2.log("");
+        console2.log("Next steps:");
+        console2.log("  1) cast send <addr> 'issue(address,string)' <to> 'Course Name' --rpc-url fuji ...");
+        console2.log("  2) cast call <addr> 'isValid(uint256)' 1 --rpc-url fuji");
+        console2.log("  3) admin: cast send <addr> 'grantRole(bytes32,address)' <ISSUER_ROLE> <newIssuer>");
+    }
+}