feat(contracts): support relayer-assisted claims with secure authorization by Olasunkanmi975 · Pull Request #797 · Pulsefy/Soter

Olasunkanmi975 · 2026-07-23T20:20:07Z

##closes #722

Summary

This PR introduces contract-side support for relayer-assisted claim execution, allowing approved relayers to submit claim transactions on behalf of recipients while preserving secure authorization guarantees.

The implementation distinguishes relayed claims from direct claims through dedicated events and includes safeguards against replay attacks and unauthorized relayer submissions.

Changes

Relayer-Aware Claim Flow

Added a relayer-aware claim execution path.
Allowed relayers to submit claim transactions on behalf of recipients under explicit authorization rules.
Preserved existing direct claim behavior and compatibility.
Ensured recipients remain the source of authorization while relayers only facilitate transaction submission.

Authorization & Security

Added validation to ensure only authorized relayed claims are accepted.
Implemented replay protection for relayed claim requests.
Rejected unauthorized relayer attempts with appropriate contract errors.
Preserved existing authorization checks for direct claim execution.

Events

Added dedicated events for relayed claim execution.
Distinguished relayed claims from direct claims in emitted contract events.
Included sufficient metadata to support indexing and off-chain monitoring.

Testing

Added and updated contract tests covering:

Successful relayer-assisted claims
Standard direct claims
Replay attack prevention
Unauthorized relayer attempts
Authorization validation
Event emission for relayed claims
Backward compatibility with existing claim flow

Why

Relayer-assisted claims improve user experience by allowing recipients to receive assets without always paying transaction fees directly.

This implementation provides the required contract hooks while maintaining strong authorization guarantees and replay protection.

Testing

Added unit tests for relayer-assisted claim execution.
Verified replay attempts are rejected.
Verified unauthorized relayers cannot submit claims.
Verified relayed claims emit the correct events.
Ran the full contract test suite.

Checklist

Relayer-aware claim path implemented
Secure authorization rules enforced
Replay protection implemented and tested
Separate events emitted for relayed claims
Unauthorized relayer attempts rejected
Existing direct claim flow preserved
All contract tests passing

…points

drips-wave · 2026-07-23T20:20:16Z

@Olasunkanmi975 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Olasunkanmi975 · 2026-07-23T20:22:22Z

@Cedarich kindly review

Cedarich · 2026-07-23T21:40:30Z

@Olasunkanmi975

Olasunkanmi975 · 2026-07-23T22:06:43Z

@Cedarich review boss

Cedarich · 2026-07-23T22:11:00Z

@Olasunkanmi975

Olasunkanmi975 · 2026-07-23T22:15:29Z

@Cedarich

Cedarich · 2026-07-23T22:20:00Z

@Olasunkanmi975

Olasunkanmi975 · 2026-07-23T22:30:28Z

@Cedarich

Cedarich · 2026-07-24T15:41:58Z

@Olasunkanmi975

…ind cfg(test) for clippy

Olasunkanmi975 · 2026-07-26T07:15:22Z

@Cedarich

Cedarich · 2026-07-26T08:59:41Z

@Olasunkanmi975

Olasunkanmi975 · 2026-07-26T13:33:56Z

@Cedarich

Cedarich · 2026-07-26T16:06:10Z

@Olasunkanmi975

Olasunkanmi975 · 2026-07-26T16:33:14Z

@Cedarich

Cedarich · 2026-07-26T16:52:29Z

@Olasunkanmi975

…oved address, unused env

… Soroban v20+

Olasunkanmi975 · 2026-07-27T19:07:54Z

@Cedarich

- record_delegate_change_system's reason parameter and all call sites now consistently use soroban_sdk::String instead of mixing Symbol, String, and &str - Fixes 11 compile errors from type mismatches across delegate.rs

Olasunkanmi975 · 2026-07-30T06:30:46Z

@Cedarich pleease review and merge boss

…_delegates, fix stale remove_delegate test reference

Olasunkanmi975 · 2026-07-30T11:34:33Z

@Cedarich Noticed while verifying this fix: 7 tests in tests/delegate_tests.rs fail
with HostError(Contract, #9) — all panicking inside create_package with
a token balance of 0, before delegate logic is even reached. Confirmed
this predates today's changes by checking out ba3481d (before this
session's work) — same failures present there. Looks like a stale/
broken token-funding fixture in this test file, unrelated to the
clippy CI job I was fixing. Flagging separately since it's pre-existing.

Cedarich · 2026-07-30T12:14:00Z

@Olasunkanmi975

…oint Fixes CI failure where delegate_tests.rs:363 fails because AidEscrowClient has no cleanup_expired_delegates method. The cleanup_expired_delegates function already exists in the delegate module but was not exported as a contract entry point in impl AidEscrow. This adds it following the same pattern as the other delegate operations (get_delegate, get_delegate_info, get_delegate_history, revoke_delegate). Co-authored-by: akamarud <kamarudeenabubakar87@gmail.com>

Olasunkanmi975 · 2026-07-30T14:24:13Z

@Cedarich

Olasunkanmi975 · 2026-07-31T07:14:20Z

@Cedarich please merge already broski

Olasunkanmi975 added 2 commits July 23, 2026 21:02

feat(contracts): expose delegate management and delegated claim entry…

246f65a

…points

feat(contracts): add relayer-assisted claim execution

9fcab42

fix: cargo fmt compliance

22e71fb

fix: bump ethnum to 1.5.3 for wasm32 compat

c862115

fix: replace std types with Soroban no_std equivalents in delegate.rs

5b5c669

fix: remove unused DelegateRecord and gate get_authorization_info beh…

a58e287

…ind cfg(test) for clippy

fix: import Ledger testutils trait for set_timestamp in delegate tests

bc106bf

fix(aid_escrow): remove unused Vec import in relayer_tests

913a2b1

Olasunkanmi975 added 3 commits July 26, 2026 18:42

fix(aid_escrow): fix delegate_tests - unused Vec<String>, borrow of m…

67af9fb

…oved address, unused env

fix(aid_escrow): wrap delegate.rs unit tests in env.as_contract() for…

b216e42

… Soroban v20+

Merge branch 'main' into feat/relayer-assisted-claims

688e0f0

Olasunkanmi975 added 2 commits July 30, 2026 06:19

fmt and clippy cleanup for aid_escrow contract

6b54a60

fix(aid_escrow): remove redundant String wrap, expose cleanup_expired…

fd69c9e

…_delegates, fix stale remove_delegate test reference

Merge branch 'main' into feat/relayer-assisted-claims

ca3c8a7

akamarud and others added 2 commits July 30, 2026 15:25

fix(ci): expose cleanup_expired_delegates entrypoint on AidEscrow

49b9fa1

style(aid_escrow): reformat lib.rs to satisfy rustfmt

047d6cd

Uh oh!

Conversation

Olasunkanmi975 commented Jul 23, 2026

Summary

Changes

Relayer-Aware Claim Flow

Authorization & Security

Events

Testing

Why

Testing

Checklist

Uh oh!

drips-wave Bot commented Jul 23, 2026

Uh oh!

Olasunkanmi975 commented Jul 23, 2026

Uh oh!

Cedarich commented Jul 23, 2026

Uh oh!

Olasunkanmi975 commented Jul 23, 2026

Uh oh!

Cedarich commented Jul 23, 2026

Uh oh!

Olasunkanmi975 commented Jul 23, 2026

Uh oh!

Cedarich commented Jul 23, 2026

Uh oh!

Olasunkanmi975 commented Jul 23, 2026

Uh oh!

Cedarich commented Jul 24, 2026

Uh oh!

Olasunkanmi975 commented Jul 26, 2026

Uh oh!

Cedarich commented Jul 26, 2026

Uh oh!

Olasunkanmi975 commented Jul 26, 2026

Uh oh!

Cedarich commented Jul 26, 2026

Uh oh!

Olasunkanmi975 commented Jul 26, 2026

Uh oh!

Cedarich commented Jul 26, 2026

Uh oh!

Olasunkanmi975 commented Jul 27, 2026

Uh oh!

Olasunkanmi975 commented Jul 30, 2026

Uh oh!

Olasunkanmi975 commented Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Cedarich commented Jul 30, 2026

Uh oh!

Olasunkanmi975 commented Jul 30, 2026

Uh oh!

Olasunkanmi975 commented Jul 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Olasunkanmi975 commented Jul 30, 2026 •

edited

Loading