fix: prevent compressible account funding with 1 epoch

.github/workflows/programs.yml

@@ -0,0 +1,120 @@
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "programs/**"
+      - "program-tests/**"
+      - "program-libs/**"
+      - "prover/client/**"
+      - ".github/workflows/light-system-programs-tests.yml"
+  pull_request:
+    branches:
+      - "*"
+    paths:
+      - "programs/**"
+      - "program-tests/**"
+      - "program-libs/**"
+      - "prover/client/**"
+      - ".github/workflows/light-system-programs-tests.yml"
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+
+name: programs
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  system-programs:
+    name: programs
+    if: github.event.pull_request.draft == false
+    runs-on: warp-ubuntu-latest-x64-4x
+    timeout-minutes: 90
+
+    services:
+      redis:
+        image: redis:8.0.1
+        ports:
+          - 6379:6379
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    env:
+      REDIS_URL: redis://localhost:6379
+
+    strategy:
+      matrix:
+        include:
+          - program: account-compression-and-registry
+            sub-tests: '["cargo-test-sbf -p account-compression-test", "cargo-test-sbf -p registry-test"]'
+          - program: light-system-program-address
+            sub-tests: '["cargo-test-sbf -p system-test -- test_with_address", "cargo-test-sbf -p e2e-test", "cargo-test-sbf -p compressed-token-test --test ctoken"]'
+          - program: light-system-program-compression
+            sub-tests: '["cargo-test-sbf -p system-test -- test_with_compression", "cargo-test-sbf -p system-test --test test_re_init_cpi_account"]'
+          - program: compressed-token-and-e2e
+            sub-tests: '["cargo-test-sbf -p compressed-token-test --test v1", "cargo-test-sbf -p compressed-token-test --test mint"]'
+          - program: compressed-token-batched-tree
+            sub-tests: '["cargo-test-sbf -p compressed-token-test -- test_transfer_with_photon_and_batched_tree"]'
+          - program: system-cpi-test
+            sub-tests:
+              '["cargo-test-sbf -p system-cpi-test", "cargo test -p light-system-program-pinocchio",
+              "cargo-test-sbf -p system-cpi-v2-test -- --skip functional_ --skip event::parse", "cargo-test-sbf -p system-cpi-v2-test -- event::parse",
+              "cargo-test-sbf -p compressed-token-test --test transfer2"
+              ]'
+          - program: system-cpi-test-v2-functional-read-only
+            sub-tests: '["cargo-test-sbf -p system-cpi-v2-test -- functional_read_only"]'
+          - program: system-cpi-test-v2-functional-account-infos
+            sub-tests: '["cargo-test-sbf -p system-cpi-v2-test -- functional_account_infos"]'
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v4
+
+      - name: Setup and build
+        uses: ./.github/actions/setup-and-build
+        with:
+          skip-components: "redis,disk-cleanup"
+          cache-key: "rust"
+
+      - name: Build CLI
+        run: |
+          npx nx build @lightprotocol/zk-compression-cli
+
+      - name: ${{ matrix.program }}
+        run: |
+
+          IFS=',' read -r -a sub_tests <<< "${{ join(fromJSON(matrix['sub-tests']), ', ') }}"
+          for subtest in "${sub_tests[@]}"
+          do
+            echo "$subtest"
+
+            # Retry logic for flaky batched-tree test
+            if [[ "$subtest" == *"test_transfer_with_photon_and_batched_tree"* ]]; then
+              echo "Running flaky test with retry logic (max 3 attempts)..."
+              attempt=1
+              max_attempts=3
+              until RUSTFLAGS="-D warnings" eval "$subtest"; do
+                attempt=$((attempt + 1))
+                if [ $attempt -gt $max_attempts ]; then
+                  echo "Test failed after $max_attempts attempts"
+                  exit 1
+                fi
+                echo "Attempt $attempt/$max_attempts failed, retrying..."
+                sleep 5
+              done
+              echo "Test passed on attempt $attempt"
+            else
+              RUSTFLAGS="-D warnings" eval "$subtest"
+              if [ "$subtest" == "cargo-test-sbf -p e2e-test" ]; then
+                pnpm --filter @lightprotocol/programs run build-compressed-token-small
+                RUSTFLAGS="-D warnings" eval "$subtest -- --test test_10_all"
+              fi
+            fi
+          done

Cargo.toml

@@ -218,8 +218,7 @@ groth16-solana = { version = "0.2.0" }
 bytemuck = { version = "1.19.0" }
 arrayvec = "0.7"
 tinyvec = "1.10.0"
-pinocchio-token-program = { git= "https://github.com/Lightprotocol/token",rev="14bc35d02a994138973f7118a61cd22f08465a98" }
-
+pinocchio-token-program = { git= "https://github.com/Lightprotocol/token", rev="38d8634353e5eeb8c015d364df0eaa39f5c48b05" }
 # Math and crypto
 num-bigint = "0.4.6"
 tabled = "0.20"

program-libs/compressible/CLAUDE.md

@@ -38,8 +38,3 @@
   - FailedBorrowRentSysvar (19001), InvalidState (19002)
   - HasherError propagation from light-hasher (7xxx codes)
   - ProgramError conversions (Anchor, Pinocchio, Solana)
-
-## TODO:
-- try to refactor so that 1 lamport is the minimum rent payment
-- update config, max write fee, max funded epoch
-- update RentConfig at claim

program-libs/compressible/docs/CONFIG_ACCOUNT.md

@@ -70,12 +70,12 @@ let v1_pda = CompressibleConfig::ctoken_v1_config_pda();
 
 **Light Registry Program:**
 - `update_compressible_config` - Updates config state and parameters
-- `withdraw_funding_pool` (discriminator: 108) - Withdraws from rent_sponsor pool
+- `withdraw_funding_pool` (discriminator: 105) - Withdraws from rent_sponsor pool
 
 **Compressed Token Program (uses config):**
 - `CreateTokenAccount` (discriminator: 18) - Creates ctoken with compressible extension
-- `CreateAssociatedTokenAccount` (discriminator: 103) - Creates ATA with compressible
-- `Claim` (discriminator: 107) - Claims rent using config parameters
+- `CreateAssociatedTokenAccount` (discriminator: 100) - Creates ATA with compressible
+- `Claim` (discriminator: 104) - Claims rent using config parameters
 - `CompressAndClose` (via Transfer2) - Uses compression_authority from config
 
 **Registry Program (via wrapper):**

program-libs/compressible/docs/RENT.md

@@ -211,7 +211,7 @@ Determines the last epoch covered by rent payments.
 ### Check if account is compressible
 ```rust
 let (is_compressible, deficit) = calculate_rent_and_balance(
-    261,        // account size
+    260,        // account size
     1000000,    // current slot
     5000000,    // current lamports
     0,          // last claimed slot
@@ -225,14 +225,14 @@ let (is_compressible, deficit) = calculate_rent_and_balance(
 ### Calculate claimable rent
 ```rust
 let claimable = claimable_lamports(
-    261, 1000000, 5000000, 0, 2000000, 1220, 10, 11000
+    260, 1000000, 5000000, 0, 2000000, 1220, 10, 11000
 );
 // Returns Some(amount) if claimable, None if compressible
 ```
 
 ### Split lamports on close
 ```rust
 let (to_rent_sponsor, to_user) = calculate_close_lamports(
-    261, 1000000, 5000000, 0, 2000000, 1220, 10, 11000
+    260, 1000000, 5000000, 0, 2000000, 1220, 10, 11000
 );
 ```

program-libs/compressible/src/compression_info.rs

@@ -110,16 +110,13 @@ macro_rules! impl_is_compressible {
                 if let Some(rent_deficit) = is_compressible {
                     Ok(lamports_per_write as u64 + rent_deficit)
                 } else {
-                    let unused_lamports =
-                        state.get_unused_lamports(&self.rent_config, rent_exemption_lamports);
-                    // Account is not compressible, check if we should still top up
-                    let epochs_funded_ahead =
-                        unused_lamports / self.rent_config.rent_curve_per_epoch(num_bytes);
-                    solana_msg::msg!(
-                        "Top-up check: unused_lamports {}, epochs_funded_ahead {}",
-                        unused_lamports,
-                        epochs_funded_ahead
+                    // Calculate epochs funded ahead using available balance
+                    let available_balance = state.get_available_rent_balance(
+                        rent_exemption_lamports,
+                        self.rent_config.compression_cost(),
                     );
+                    let rent_per_epoch = self.rent_config.rent_curve_per_epoch(num_bytes);
+                    let epochs_funded_ahead = available_balance / rent_per_epoch;
                     // Skip top-up if already funded for max_funded_epochs or more
                     if epochs_funded_ahead >= self.rent_config.max_funded_epochs as u64 {
                         Ok(0)

program-libs/compressible/src/rent/account_rent.rs

@@ -78,7 +78,8 @@ impl AccountRentState {
             self.get_available_rent_balance(rent_exemption_lamports, config.compression_cost());
         let required_epochs = self.get_required_epochs::<true>(); // include next epoch for compressibility check
         let rent_per_epoch = config.rent_curve_per_epoch(self.num_bytes);
-        let lamports_due = rent_per_epoch * required_epochs;
+        // Use saturating_mul to prevent overflow - cheaper than checked_mul (no branching)
+        let lamports_due = rent_per_epoch.saturating_mul(required_epochs);
 
         if available_balance < lamports_due {
             // Include compression cost in deficit so forester can execute
@@ -111,7 +112,8 @@ impl AccountRentState {
             return None; // Should compress, not claim
         }
         let rent_per_epoch = config.rent_curve_per_epoch(self.num_bytes);
-        Some(self.get_completed_epochs() * rent_per_epoch)
+        // Use saturating_mul to prevent overflow - cheaper than checked_mul (no branching)
+        Some(self.get_completed_epochs().saturating_mul(rent_per_epoch))
     }
 
     /// Calculate how lamports are distributed when closing an account.
@@ -151,7 +153,8 @@ impl AccountRentState {
             self.get_available_rent_balance(rent_exemption_lamports, config.compression_cost());
         let required_epochs = self.get_required_epochs::<true>();
         let rent_per_epoch = config.rent_curve_per_epoch(self.num_bytes);
-        let lamports_due = rent_per_epoch * required_epochs;
+        // Use saturating_mul to prevent overflow - cheaper than checked_mul (no branching)
+        let lamports_due = rent_per_epoch.saturating_mul(required_epochs);
 
         available_balance.saturating_sub(lamports_due)
     }