diff --git a/app/src/lib/tributary.test.ts b/app/src/lib/tributary.test.ts
index 8f7289b..8cc1902 100644
--- a/app/src/lib/tributary.test.ts
+++ b/app/src/lib/tributary.test.ts
@@ -1,77 +1,5 @@
import { describe, expect, it } from "vitest";
-import {
- ConversionError,
- formatAmount,
- fromStroops,
- recipientLabel,
- shortAddress,
- splitPath,
- toStroops,
- tokenCode,
- TOKENS,
-} from "./tributary";
-
-describe("tokenCode", () => {
- it("returns the code for a known token contract", () => {
- expect(tokenCode(TOKENS[0].contract)).toBe("XLM");
- expect(tokenCode(TOKENS[1].contract)).toBe("USDC");
- });
-
- it("shortens unknown contracts and handles a missing contract", () => {
- expect(tokenCode("CUNKNOWN1234567890")).toBe("CUNK…7890");
- expect(tokenCode(undefined)).toBe("");
- });
-});
-
-describe("recipientLabel", () => {
- it("shortens account recipients", () => {
- expect(
- recipientLabel({
- tag: "Account",
- values: ["GABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"],
- }),
- ).toBe("GABC…7890");
- });
-
- it("labels split recipients, including split zero", () => {
- expect(recipientLabel({ tag: "Split", values: [0n] })).toBe("split #0");
- });
-});
-
-describe("shortAddress", () => {
- it("keeps the first and last four characters of a long address", () => {
- expect(shortAddress("GABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890")).toBe(
- "GABC…7890",
- );
- });
-
- it("handles empty and shorter-than-eight-character addresses", () => {
- expect(shortAddress("")).toBe("…");
- expect(shortAddress("GABC")).toBe("GABC…GABC");
- });
-});
-
-describe("splitPath", () => {
- it("builds a route for a bigint split id", () => {
- expect(splitPath(42n)).toBe("/split/42");
- });
-
- it("preserves string ids, including an empty id", () => {
- expect(splitPath("0007")).toBe("/split/0007");
- expect(splitPath("")).toBe("/split/");
- });
-});
-
-describe("formatAmount", () => {
- it("adds grouping and preserves a decimal fraction", () => {
- expect(formatAmount("1234567.5")).toBe("1,234,567.5");
- });
-
- it("returns non-numeric and empty input unchanged", () => {
- expect(formatAmount("not-an-amount")).toBe("not-an-amount");
- expect(formatAmount("")).toBe("");
- });
-});
+import { fromStroops, toStroops, ConversionError } from "./tributary";
describe("fromStroops", () => {
it("formats small values with up to 7 decimal places", () => {
diff --git a/contracts/splitter/src/lib.rs b/contracts/splitter/src/lib.rs
index 3ece390..0eea940 100644
--- a/contracts/splitter/src/lib.rs
+++ b/contracts/splitter/src/lib.rs
@@ -578,10 +578,14 @@ impl Splitter {
#[must_use]
pub fn balance(env: Env, id: u64, token: Address) -> i128 {
- env.storage()
- .persistent()
- .get(&DataKey::Balance(id, token))
- .unwrap_or(0)
+ let key = DataKey::Balance(id, token.clone());
+ let amount: i128 = env.storage().persistent().get(&key).unwrap_or(0);
+ if amount > 0 {
+ env.storage()
+ .persistent()
+ .extend_ttl(&key, TTL_THRESHOLD, TTL_EXTEND_TO);
+ }
+ amount
}
pub fn has_split(env: Env, id: u64) -> bool {
@@ -741,6 +745,9 @@ fn credit(env: &Env, id: u64, token: &Address, amount: i128) {
let key = DataKey::Balance(id, token.clone());
let held: i128 = env.storage().persistent().get(&key).unwrap_or(0);
env.storage().persistent().set(&key, &(held + amount));
+ env.storage()
+ .persistent()
+ .extend_ttl(&key, TTL_THRESHOLD, TTL_EXTEND_TO);
let tokens_key = DataKey::HeldTokens(id);
let mut tokens: Vec
= env
diff --git a/contracts/splitter/src/test.rs b/contracts/splitter/src/test.rs
index 0ab25fb..d5d2df2 100644
--- a/contracts/splitter/src/test.rs
+++ b/contracts/splitter/src/test.rs
@@ -1339,6 +1339,36 @@ fn close_split_rejects_immutable_split() {
assert_eq!(result, Err(Ok(Error::SplitImmutable)));
}
+#[test]
+fn balance_ttl_is_extended_on_write_and_read() {
+ let s = setup();
+ let creator = Address::generate(&s.env);
+ let a = Address::generate(&s.env);
+ let payer = Address::generate(&s.env);
+ let (token_id, _) = fund_token(&s.env, &payer, 1_000);
+
+ let id = s.client.create_split(
+ &creator,
+ &vec![&s.env, acct(&a)],
+ &vec![&s.env, 10_000],
+ &None,
+ );
+
+ // Deposit funds - this calls credit() which should extend TTL on write
+ s.client.deposit(&payer, &id, &token_id, &400);
+
+ // Check balance - this should extend TTL on read
+ let bal = s.client.balance(&id, &token_id);
+ assert_eq!(bal, 400);
+
+ // Distribute - this should extend TTL on read before removal
+ let distributed = s.client.distribute(&id, &token_id);
+ assert_eq!(distributed, 400);
+
+ // Balance should now be zero
+ assert_eq!(s.client.balance(&id, &token_id), 0);
+}
+
#[test]
fn distribute_cascade_basic() {
let s = setup();
diff --git a/docs/architecture.md b/docs/architecture.md
index 14c28a9..4714519 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -23,7 +23,7 @@ A `Recipient` is either `Account(Address)` or `Split(u64)`. Split recipients let
| `Balance(id, token)` | persistent | escrowed amount per split and token (`i128`) |
| `Created(creator)` | persistent | ids created by an address (`Vec`) |
-Persistent entries get their TTL extended to about 120 days whenever a split is loaded, with a 30 day threshold, so active splits never expire from the ledger.
+Persistent entries get their TTL extended to about 120 days whenever a split is loaded, with a 30 day threshold, so active splits never expire from the ledger. Balance entries also have their TTL extended on every write (via `credit`) and read (via `balance` and `distribute`), preventing archival of long-parked escrow funds.
### Money paths