FlowALPModels.cdc

import "FungibleToken"
import "DeFiActions"
import "DeFiActionsUtils"
import "MOET"
import "Burner"
import "FlowALPMath"
import "FlowALPInterestRates"
import "FlowALPEvents"

access(all) contract FlowALPModels {

    /// EImplementation
    ///
    /// Entitlement for internal implementation operations that maintain the pool's state
    /// and process asynchronous updates. This entitlement grants access to low-level state
    /// management functions used by the protocol's internal mechanisms.
    ///
    /// This entitlement is used internally by the protocol to maintain state consistency
    /// and process queued operations. It should not be granted to external users.
    access(all) entitlement EImplementation

    /// EPosition
    ///
    /// Entitlement for managing positions within the pool.
    /// This entitlement grants access to position-specific operations including deposits, withdrawals,
    /// rebalancing, and health parameter management for any position in the pool.
    ///
    /// Note that this entitlement provides access to all positions in the pool,
    /// not just individual position owners' positions.
    access(all) entitlement EPosition

    /// ERebalance
    ///
    /// Entitlement for rebalancing positions.
    access(all) entitlement ERebalance

    /// EGovernance
    ///
    /// Entitlement for governance operations that control pool-wide parameters and configuration.
    /// This entitlement grants access to administrative functions that affect the entire pool,
    /// including liquidation settings, token support, interest rates, and protocol parameters.
    ///
    /// This entitlement should be granted only to trusted governance entities that manage
    /// the protocol's risk parameters and operational settings.
    access(all) entitlement EGovernance

    /// EParticipant
    ///
    /// Entitlement for general participant operations that allow users to interact with the pool
    /// at a basic level. This entitlement grants access to position creation and basic deposit
    /// operations without requiring full position ownership.
    ///
    /// This entitlement is more permissive than EPosition and allows anyone to create positions
    /// and make deposits, enabling public participation in the protocol while maintaining
    /// separation between position creation and position management.
    access(all) entitlement EParticipant

    /// EPositionAdmin
    ///
    /// Grants access to configure drawdown sinks, top-up sources, and other position settings, for the Position resource.
    /// Withdrawal access is provided using FungibleToken.Withdraw.
    access(all) entitlement EPositionAdmin

    /// BalanceDirection
    ///
    /// The direction of a given balance
    access(all) enum BalanceDirection: UInt8 {

        /// Denotes that a balance that is withdrawable from the protocol
        access(all) case Credit

        /// Denotes that a balance that is due to the protocol
        access(all) case Debit
    }

    /// InternalBalance
    ///
    /// A structure used internally to track a position's balance for a particular token
    access(all) struct InternalBalance {

        /// The current direction of the balance - Credit (owed to borrower) or Debit (owed to protocol)
        access(all) var direction: BalanceDirection

        /// Internally, position balances are tracked using a "scaled balance".
        /// The "scaled balance" is the actual balance divided by the current interest index for the associated token.
        /// This means we don't need to update the balance of a position as time passes, even as interest rates change.
        /// We only need to update the scaled balance when the user deposits or withdraws funds.
        /// The interest index is a number relatively close to 1.0,
        /// so the scaled balance will be roughly of the same order of magnitude as the actual balance.
        /// We store the scaled balance as UFix128 to align with UFix128 interest indices
        /// and to reduce rounding during true ↔ scaled conversions.
        access(all) var scaledBalance: UFix128

        // Single initializer that can handle both cases
        init(
            direction: BalanceDirection,
            scaledBalance: UFix128
        ) {
            self.direction = direction
            self.scaledBalance = scaledBalance
        }

        /// Records a deposit of the defined amount, updating the inner scaledBalance as well as relevant values
        /// in the provided TokenState.
        ///
        /// It's assumed the TokenState and InternalBalance relate to the same token Type,
        /// but since neither struct have values defining the associated token,
        /// callers should be sure to make the arguments do in fact relate to the same token Type.
        ///
        /// amount is expressed in UFix128 (true token units) to operate in the internal UFix128 domain;
        /// public deposit APIs accept UFix64 and are converted at the boundary.
        ///
        access(all) fun recordDeposit(amount: UFix128, tokenState: auth(EImplementation) &{TokenState}) {
            switch self.direction {
                case BalanceDirection.Credit:
                    // Depositing into a credit position just increases the balance.
                    //
                    // To maximize precision, we could convert the scaled balance to a true balance,
                    // add the deposit amount, and then convert the result back to a scaled balance.
                    //
                    // However, this will only cause problems for very small deposits (fractions of a cent),
                    // so we save computational cycles by just scaling the deposit amount
                    // and adding it directly to the scaled balance.

                    let scaledDeposit = FlowALPMath.trueBalanceToScaledBalance(
                        amount,
                        interestIndex: tokenState.getCreditInterestIndex()
                    )

                    self.scaledBalance = self.scaledBalance + scaledDeposit

                    // Increase the total credit balance for the token
                    tokenState.increaseCreditBalance(by: amount)

                case BalanceDirection.Debit:
                    // When depositing into a debit position, we first need to compute the true balance
                    // to see if this deposit will flip the position from debit to credit.

                    let trueBalance = FlowALPMath.scaledBalanceToTrueBalance(
                        self.scaledBalance,
                        interestIndex: tokenState.getDebitInterestIndex()
                    )

                    // Harmonize comparison with withdrawal: treat an exact match as "does not flip to credit"
                    if trueBalance >= amount {
                        // The deposit isn't big enough to clear the debt,
                        // so we just decrement the debt.
                        let updatedBalance = trueBalance - amount

                        self.scaledBalance = FlowALPMath.trueBalanceToScaledBalance(
                            updatedBalance,
                            interestIndex: tokenState.getDebitInterestIndex()
                        )

                        // Decrease the total debit balance for the token
                        tokenState.decreaseDebitBalance(by: amount)

                    } else {
                        // The deposit is enough to clear the debt,
                        // so we switch to a credit position.
                        let updatedBalance = amount - trueBalance

                        self.direction = BalanceDirection.Credit
                        self.scaledBalance = FlowALPMath.trueBalanceToScaledBalance(
                            updatedBalance,
                            interestIndex: tokenState.getCreditInterestIndex()
                        )

                        // Increase the credit balance AND decrease the debit balance
                        tokenState.increaseCreditBalance(by: updatedBalance)
                        tokenState.decreaseDebitBalance(by: trueBalance)
                    }
            }
        }

        /// Records a withdrawal of the defined amount, updating the inner scaledBalance
        /// as well as relevant values in the provided TokenState.
        ///
        /// It's assumed the TokenState and InternalBalance relate to the same token Type,
        /// but since neither struct have values defining the associated token,
        /// callers should be sure to make the arguments do in fact relate to the same token Type.
        ///
        /// amount is expressed in UFix128 for the same rationale as deposits;
        /// public withdraw APIs are UFix64 and are converted at the boundary.
        ///
        access(all) fun recordWithdrawal(amount: UFix128, tokenState: auth(EImplementation) &{TokenState}) {
            switch self.direction {
                case BalanceDirection.Debit:
                    // Withdrawing from a debit position just increases the debt amount.
                    //
                    // To maximize precision, we could convert the scaled balance to a true balance,
                    // subtract the withdrawal amount, and then convert the result back to a scaled balance.
                    //
                    // However, this will only cause problems for very small withdrawals (fractions of a cent),
                    // so we save computational cycles by just scaling the withdrawal amount
                    // and subtracting it directly from the scaled balance.

                    let scaledWithdrawal = FlowALPMath.trueBalanceToScaledBalance(
                        amount,
                        interestIndex: tokenState.getDebitInterestIndex()
                    )

                    self.scaledBalance = self.scaledBalance + scaledWithdrawal

                    // Increase the total debit balance for the token
                    tokenState.increaseDebitBalance(by: amount)

                case BalanceDirection.Credit:
                    // When withdrawing from a credit position,
                    // we first need to compute the true balance
                    // to see if this withdrawal will flip the position from credit to debit.
                    let trueBalance = FlowALPMath.scaledBalanceToTrueBalance(
                        self.scaledBalance,
                        interestIndex: tokenState.getCreditInterestIndex()
                    )

                    if trueBalance >= amount {
                        // The withdrawal isn't big enough to push the position into debt,
                        // so we just decrement the credit balance.
                        let updatedBalance = trueBalance - amount

                        self.scaledBalance = FlowALPMath.trueBalanceToScaledBalance(
                            updatedBalance,
                            interestIndex: tokenState.getCreditInterestIndex()
                        )

                        // Decrease the total credit balance for the token
                        tokenState.decreaseCreditBalance(by: amount)
                    } else {
                        // The withdrawal is enough to push the position into debt,
                        // so we switch to a debit position.
                        let updatedBalance = amount - trueBalance

                        self.direction = BalanceDirection.Debit
                        self.scaledBalance = FlowALPMath.trueBalanceToScaledBalance(
                            updatedBalance,
                            interestIndex: tokenState.getDebitInterestIndex()
                        )

                        // Decrease the credit balance AND increase the debit balance
                        tokenState.decreaseCreditBalance(by: trueBalance)
                        tokenState.increaseDebitBalance(by: updatedBalance)
                    }
            }
        }
    }

    /// TokenReserveHandler
    ///
    /// Interface for handling token reserve operations. Different token types may require
    /// different handling for deposits and withdrawals. For MOET: deposits always burn tokens,
    /// withdrawals always mint tokens. For other tokens: standard reserve vault operations.
    access(all) struct interface TokenReserveHandler {
        /// Returns the token type this handler manages
        access(all) view fun getTokenType(): Type

        /// Checks if reserves need to exist for this token type
        /// For MOET: returns false (MOET uses mint/burn, not reserves)
        /// For other tokens: checks if reserves exist in the pool state
        access(all) view fun hasReserve(
            state: &{PoolState}
        ): Bool

        /// Returns the maximum amount that can be withdrawn given the requested amount
        /// For MOET: returns requestedAmount (can mint unlimited)
        /// For other tokens: returns min(requestedAmount, reserveBalance) or 0 if no reserves
        access(all) fun getMaxWithdrawableAmount(
            state: auth(EImplementation) &{PoolState},
            requestedAmount: UFix64
        ): UFix64

        /// Deposits tokens
        /// For MOET: always burns tokens
        /// For other tokens: deposits to reserves
        access(all) fun deposit(
            state: auth(EImplementation) &{PoolState},
            from: @{FungibleToken.Vault}
        ): UFix64

        /// Withdraws tokens
        /// For MOET: always mints new tokens
        /// For other tokens: withdraws from reserves
        access(all) fun withdraw(
            state: auth(EImplementation) &{PoolState},
            amount: UFix64,
            minterRef: &MOET.Minter?
        ): @{FungibleToken.Vault}
    }

    /// StandardTokenReserveHandler
    ///
    /// Standard implementation of TokenReserveHandler that interacts with reserve vaults
    /// for both deposit and withdraw operations.
    access(all) struct StandardTokenReserveHandler: TokenReserveHandler {
        access(self) let tokenType: Type

        init(tokenType: Type) {
            self.tokenType = tokenType
        }

        access(all) view fun getTokenType(): Type {
            return self.tokenType
        }

        access(all) view fun hasReserve(
            state: &{PoolState}
        ): Bool {
            return state.hasReserve(self.tokenType)
        }

        access(all) fun getMaxWithdrawableAmount(
            state: auth(EImplementation) &{PoolState},
            requestedAmount: UFix64
        ): UFix64 {
            if let reserveVault = state.borrowReserve(self.tokenType) {
                let balance = reserveVault.balance
                return requestedAmount > balance ? balance : requestedAmount
            }
            return 0.0
        }

        access(all) fun deposit(
            state: auth(EImplementation) &{PoolState},
            from: @{FungibleToken.Vault}
        ): UFix64 {
            let amount = from.balance
            let reserveVault = state.borrowOrCreateReserve(self.tokenType)
            reserveVault.deposit(from: <-from)
            return amount
        }

        access(all) fun withdraw(
            state: auth(EImplementation) &{PoolState},
            amount: UFix64,
            minterRef: &MOET.Minter?
        ): @{FungibleToken.Vault} {
            let reserveVault = state.borrowOrCreateReserve(self.tokenType)
            return <- reserveVault.withdraw(amount: amount)
        }
    }

    /// MoetTokenReserveHandler
    ///
    /// Special implementation of TokenReserveHandler for MOET tokens.
    /// - All deposits BURN tokens (reducing supply, never stored in reserves)
    /// - All withdrawals MINT new tokens (increasing supply, never from reserves)
    access(all) struct MoetTokenReserveHandler: TokenReserveHandler {

        access(all) view fun getTokenType(): Type {
            return Type<@MOET.Vault>()
        }

        access(all) view fun hasReserve(
            state: &{PoolState}
        ): Bool {
            // MOET doesn't use reserves (always mints/burns)
            return true
        }

        access(all) fun getMaxWithdrawableAmount(
            state: auth(EImplementation) &{PoolState},
            requestedAmount: UFix64
        ): UFix64 {
            // MOET can mint unlimited amounts
            return requestedAmount
        }

        access(all) fun deposit(
            state: auth(EImplementation) &{PoolState},
            from: @{FungibleToken.Vault}
        ): UFix64 {
            // Always burn MOET deposits (never store in reserves)
            let amount = from.balance
            Burner.burn(<-from)
            return amount
        }

        access(all) fun withdraw(
            state: auth(EImplementation) &{PoolState},
            amount: UFix64,
            minterRef: &MOET.Minter?
        ): @{FungibleToken.Vault} {
            // Always mint MOET withdrawals (never withdraw from reserves)
            assert(minterRef != nil, message: "MOET Minter reference required for withdrawal")
            return <- minterRef!.mintTokens(amount: amount)
        }
    }

    /// Risk parameters for a token used in effective collateral/debt computations.
    /// The collateral and borrow factors are fractional values which represent a discount to the "true/market" value of the token.
    /// The size of this discount indicates a subjective assessment of risk for the token.
    /// The difference between the effective value and "true" value represents the safety buffer available to prevent loss.
    /// - collateralFactor: the factor used to derive effective collateral
    /// - borrowFactor: the factor used to derive effective debt
    access(all) struct interface RiskParams {
        /// The factor (Fc) used to determine effective collateral, in the range [0, 1]
        /// See FlowALPMath.effectiveCollateral for additional detail.
        access(all) view fun getCollateralFactor(): UFix128
        /// The factor (Fd) used to determine effective debt, in the range [0, 1]
        /// See FlowALPMath.effectiveDebt for additional detail.
        access(all) view fun getBorrowFactor(): UFix128
    }

    /// RiskParamsImplv1 is the concrete implementation of RiskParams.
    access(all) struct RiskParamsImplv1: RiskParams {
        /// The factor (Fc) used to determine effective collateral, in the range [0, 1]
        /// See FlowALPMath.effectiveCollateral for additional detail.
        access(self) let collateralFactor: UFix128
        /// The factor (Fd) used to determine effective debt, in the range [0, 1]
        /// See FlowALPMath.effectiveDebt for additional detail.
        access(self) let borrowFactor: UFix128

        init(
            collateralFactor: UFix128,
            borrowFactor: UFix128,
        ) {
            pre {
                collateralFactor <= 1.0: "collateral factor must be <=1"
                borrowFactor <= 1.0: "borrow factor must be <=1"
            }
            self.collateralFactor = collateralFactor
            self.borrowFactor = borrowFactor
        }

        /// Returns the collateral factor (Fc) used to determine effective collateral.
        access(all) view fun getCollateralFactor(): UFix128 {
            return self.collateralFactor
        }

        /// Returns the borrow factor (Fd) used to determine effective debt.
        access(all) view fun getBorrowFactor(): UFix128 {
            return self.borrowFactor
        }
    }

    /// Immutable snapshot of token-level data required for pure math operations
    access(all) struct TokenSnapshot {
        /// The price of the token denominated in the pool's default token
        access(all) let price: UFix128
        /// The credit interest index at the time the snapshot was taken
        access(all) let creditIndex: UFix128
        /// The debit interest index at the time the snapshot was taken
        access(all) let debitIndex: UFix128
        /// The risk parameters for this token
        access(all) let risk: {RiskParams}

        init(
            price: UFix128,
            credit: UFix128,
            debit: UFix128,
            risk: {RiskParams}
        ) {
            self.price = price
            self.creditIndex = credit
            self.debitIndex = debit
            self.risk = risk
        }

        /// Returns the price of the token denominated in the pool's default token.
        access(all) view fun getPrice(): UFix128 {
            return self.price
        }

        /// Returns the credit interest index at the time the snapshot was taken.
        access(all) view fun getCreditIndex(): UFix128 {
            return self.creditIndex
        }

        /// Returns the debit interest index at the time the snapshot was taken.
        access(all) view fun getDebitIndex(): UFix128 {
            return self.debitIndex
        }

        /// Returns the risk parameters for this token.
        access(all) view fun getRisk(): {RiskParams} {
            return self.risk
        }

        /// Returns the effective debt (denominated in $) for the given debit balance of this snapshot's token.
        /// See FlowALPMath.effectiveDebt for additional details.
        access(all) view fun effectiveDebt(debitBalance: UFix128): UFix128 {
            return FlowALPMath.effectiveDebt(debit: debitBalance, price: self.price, borrowFactor: self.risk.getBorrowFactor())
        }

        /// Returns the effective collateral (denominated in $) for the given credit balance of this snapshot's token.
        /// See FlowALPMath.effectiveCollateral for additional details.
        access(all) view fun effectiveCollateral(creditBalance: UFix128): UFix128 {
            return FlowALPMath.effectiveCollateral(credit: creditBalance, price: self.price, collateralFactor: self.risk.getCollateralFactor())
        }
    }

    /// Copy-only representation of a position used by pure math (no storage refs)
    access(all) struct PositionView {
        /// Set of all non-zero balances in the position.
        /// If the position does not have a balance for a supported token, no entry for that token exists in this map.
        access(all) let balances: {Type: InternalBalance}
        /// Set of all token snapshots for which this position has a non-zero balance.
        /// If the position does not have a balance for a supported token, no entry for that token exists in this map.
        access(all) let snapshots: {Type: TokenSnapshot}
        /// The pool's default token type
        access(all) let defaultToken: Type
        /// The position-specific minimum health threshold for rebalancing eligibility
        access(all) let minHealth: UFix128
        /// The position-specific maximum health threshold for rebalancing eligibility
        access(all) let maxHealth: UFix128

        init(
            balances: {Type: InternalBalance},
            snapshots: {Type: TokenSnapshot},
            defaultToken: Type,
            min: UFix128,
            max: UFix128
        ) {
            self.balances = balances
            self.snapshots = snapshots
            self.defaultToken = defaultToken
            self.minHealth = min
            self.maxHealth = max
        }

        /// Returns the true balance of the given token in this position, accounting for interest.
        /// Returns balance 0.0 if the position has no balance stored for the given token.
        access(all) view fun trueBalance(ofToken: Type): UFix128 {
            if let balance = self.balances[ofToken] {
                if let tokenSnapshot = self.snapshots[ofToken] {
                    switch balance.direction {
                    case BalanceDirection.Debit:
                        return FlowALPMath.scaledBalanceToTrueBalance(
                            balance.scaledBalance, interestIndex: tokenSnapshot.getDebitIndex())
                    case BalanceDirection.Credit:
                        return FlowALPMath.scaledBalanceToTrueBalance(
                            balance.scaledBalance, interestIndex: tokenSnapshot.getCreditIndex())
                    }
                    panic("unreachable")
                }
            }
            // If the token doesn't exist in the position, the balance is 0
            return 0.0
        }
    }

    /// Computes health = totalEffectiveCollateral / totalEffectiveDebt (∞ when debt == 0)
    access(all) view fun healthFactor(view: PositionView): UFix128 {
        var effectiveCollateralTotal: UFix128 = 0.0
        var effectiveDebtTotal: UFix128 = 0.0

        for tokenType in view.balances.keys {
            let balance = view.balances[tokenType]!
            let snap = view.snapshots[tokenType]!

            switch balance.direction {
                case BalanceDirection.Credit:
                    let trueBalance = FlowALPMath.scaledBalanceToTrueBalance(
                        balance.scaledBalance,
                        interestIndex: snap.getCreditIndex()
                    )
                    effectiveCollateralTotal = effectiveCollateralTotal
                        + snap.effectiveCollateral(creditBalance: trueBalance)

                case BalanceDirection.Debit:
                    let trueBalance = FlowALPMath.scaledBalanceToTrueBalance(
                        balance.scaledBalance,
                        interestIndex: snap.getDebitIndex()
                    )
                    effectiveDebtTotal = effectiveDebtTotal
                        + snap.effectiveDebt(debitBalance: trueBalance)
            }
        }
        return FlowALPMath.healthComputation(
            effectiveCollateral: effectiveCollateralTotal,
            effectiveDebt: effectiveDebtTotal
        )
    }

    /// BalanceSheet
    ///
    /// A struct containing a position's overview in terms of its effective collateral and debt
    /// as well as its current health.
    access(all) struct BalanceSheet {

        /// Effective collateral is a normalized valuation of collateral deposited into this position, denominated in $.
        /// In combination with effective debt, this determines how much additional debt can be taken out by this position.
        access(all) let effectiveCollateral: UFix128

        /// Effective debt is a normalized valuation of debt withdrawn against this position, denominated in $.
        /// In combination with effective collateral, this determines how much additional debt can be taken out by this position.
        access(all) let effectiveDebt: UFix128

        /// The health of the related position
        access(all) let health: UFix128

        init(
            effectiveCollateral: UFix128,
            effectiveDebt: UFix128
        ) {
            self.effectiveCollateral = effectiveCollateral
            self.effectiveDebt = effectiveDebt
            self.health = FlowALPMath.healthComputation(
                effectiveCollateral: effectiveCollateral,
                effectiveDebt: effectiveDebt
            )
        }
    }

    /// View of the pool's pause-related parameters.
    access(all) struct PauseParamsView {
        /// Whether the pool is currently paused
        access(all) let paused: Bool
        /// Period (s) following unpause in which liquidations are still not allowed
        access(all) let warmupSec: UInt64
        /// Timestamp when the pool was most recently unpaused, or nil if never unpaused
        access(all) let lastUnpausedAt: UInt64?

        init(
            paused: Bool,
            warmupSec: UInt64,
            lastUnpausedAt: UInt64?,
        ) {
            self.paused = paused
            self.warmupSec = warmupSec
            self.lastUnpausedAt = lastUnpausedAt
        }
    }

    /// View of the pool's global liquidation parameters.
    access(all) struct LiquidationParamsView {
        /// The health factor a position should be restored to after liquidation
        access(all) let targetHF: UFix128
        /// The health factor threshold below which a position becomes eligible for liquidation
        access(all) let triggerHF: UFix128

        init(
            targetHF: UFix128,
            triggerHF: UFix128,
        ) {
            self.targetHF = targetHF
            self.triggerHF = triggerHF
        }
    }

    /// PositionBalance
    ///
    /// A structure returned externally to report a position's balance for a particular token.
    /// This structure is NOT used internally.
    access(all) struct PositionBalance {

        /// The token type for which the balance details relate to
        access(all) let vaultType: Type

        /// Whether the balance is a Credit or Debit
        access(all) let direction: BalanceDirection

        /// The balance of the token for the related Position
        access(all) let balance: UFix64

        init(
            vaultType: Type,
            direction: BalanceDirection,
            balance: UFix64
        ) {
            self.vaultType = vaultType
            self.direction = direction
            self.balance = balance
        }
    }

    /// PositionDetails
    ///
    /// A structure returned externally to report all of the details associated with a position.
    /// This structure is NOT used internally.
    access(all) struct PositionDetails {

        /// Balance details about each Vault Type deposited to the related Position
        access(all) let balances: [PositionBalance]

        /// The default token Type of the Pool in which the related position is held
        access(all) let poolDefaultToken: Type

        /// The available balance of the Pool's default token Type
        access(all) let defaultTokenAvailableBalance: UFix64

        /// The current health of the related position
        access(all) let health: UFix128

        init(
            balances: [PositionBalance],
            poolDefaultToken: Type,
            defaultTokenAvailableBalance: UFix64,
            health: UFix128
        ) {
            self.balances = balances
            self.poolDefaultToken = poolDefaultToken
            self.defaultTokenAvailableBalance = defaultTokenAvailableBalance
            self.health = health
        }
    }

    /// PoolConfig defines the interface for pool-level configuration parameters.
    access(all) struct interface PoolConfig {

        // Getters

        /// A price oracle that will return the price of each token in terms of the default token.
        access(all) view fun getPriceOracle(): {DeFiActions.PriceOracle}

        /// Together with borrowFactor, collateralFactor determines borrowing limits for each token.
        ///
        /// When determining the withdrawable loan amount, the value of the token (provided by the PriceOracle)
        /// is multiplied by the collateral factor.
        ///
        /// The total "effective collateral" for a position is the value of each token deposited to the position
        /// multiplied by its collateral factor.
        access(all) view fun getCollateralFactor(tokenType: Type): UFix64

        /// Together with collateralFactor, borrowFactor determines borrowing limits for each token.
        ///
        /// The borrowFactor determines how much of a position's "effective collateral" can be borrowed against as a
        /// percentage between 0.0 and 1.0
        access(all) view fun getBorrowFactor(tokenType: Type): UFix64

        /// The count of positions to update per asynchronous update
        access(all) view fun getPositionsProcessedPerCallback(): UInt64

        /// The target health factor when liquidating a position, which limits how much collateral can be liquidated.
        /// After a liquidation, the position's health factor must be less than or equal to this target value.
        access(all) view fun getLiquidationTargetHF(): UFix128

        /// Period (s) following unpause in which liquidations are still not allowed
        access(all) view fun getWarmupSec(): UInt64

        /// Time this pool most recently was unpaused
        access(all) view fun getLastUnpausedAt(): UInt64?

        /// A trusted DEX (or set of DEXes) used by FlowALPv0 as a pricing oracle and trading counterparty for liquidations.
        /// The SwapperProvider implementation MUST return a Swapper for all possible (ordered) pairs of supported tokens.
        /// If [X1, X2, ..., Xn] is the set of supported tokens, then the SwapperProvider must return a Swapper for all pairs:
        ///   (Xi, Xj) where i∈[1,n], j∈[1,n], i≠j
        ///
        /// FlowALPv0 does not attempt to construct multi-part paths (using multiple Swappers) or compare prices across Swappers.
        /// It relies directly on the Swapper's returned by the configured SwapperProvider.
        access(all) view fun getDex(): {DeFiActions.SwapperProvider}

        /// Max allowed deviation in basis points between DEX-implied price and oracle price.
        access(all) view fun getDexOracleDeviationBps(): UInt16

        /// Whether the pool is currently paused
        access(all) view fun isPaused(): Bool

        /// Enable or disable verbose contract logging for debugging.
        access(all) view fun isDebugLogging(): Bool

        /// Returns the set of supported token types for this pool
        access(all) view fun getSupportedTokens(): [Type]

        /// Returns whether the given token type is supported by this pool
        access(all) view fun isTokenSupported(tokenType: Type): Bool

        /// Gets a swapper from the DEX for the given token pair.
        ///
        /// This function is used during liquidations to compare the liquidator's offer against the DEX price.
        /// It expects that a swapper has been configured for every supported collateral-to-debt token pair.
        ///
        /// Panics if:
        /// - No swapper is configured for the given token pair (seizeType -> debtType)
        ///
        /// @param seizeType: The collateral token type to swap from
        /// @param debtType: The debt token type to swap to
        access(all) fun getSwapperForLiquidation(seizeType: Type, debtType: Type): {DeFiActions.Swapper}

        // Setters

        /// Sets the price oracle. See getPriceOracle for additional details.
        /// The oracle's unit of account must match the pool's default token.
        access(EImplementation) fun setPriceOracle(_ newOracle: {DeFiActions.PriceOracle}, defaultToken: Type)

        /// Sets the collateral factor for a token type. See getCollateralFactor for additional details.
        /// Factor must be between 0 and 1.
        access(EImplementation) fun setCollateralFactor(tokenType: Type, factor: UFix64)

        /// Sets the borrow factor for a token type. See getBorrowFactor for additional details.
        /// Factor must be between 0 and 1.
        access(EImplementation) fun setBorrowFactor(tokenType: Type, factor: UFix64)

        /// Sets the positions processed per callback. See getPositionsProcessedPerCallback for additional details.
        access(EImplementation) fun setPositionsProcessedPerCallback(_ count: UInt64)

        /// Sets the liquidation target health factor. See getLiquidationTargetHF for additional details.
        /// Must be greater than 1.0.
        access(EImplementation) fun setLiquidationTargetHF(_ targetHF: UFix128)

        /// Sets the warmup period. See getWarmupSec for additional details.
        access(EImplementation) fun setWarmupSec(_ warmupSec: UInt64)

        /// Sets the last unpaused timestamp. See getLastUnpausedAt for additional details.
        access(EImplementation) fun setLastUnpausedAt(_ time: UInt64?)

        /// Sets the DEX. See getDex for additional details.
        access(EImplementation) fun setDex(_ dex: {DeFiActions.SwapperProvider})

        /// Sets the DEX oracle deviation. See getDexOracleDeviationBps for additional details.
        access(EImplementation) fun setDexOracleDeviationBps(_ bps: UInt16)

        /// Sets the paused state. See isPaused for additional details.
        access(EImplementation) fun setPaused(_ paused: Bool)

        /// Sets the debug logging state. See isDebugLogging for additional details.
        access(EImplementation) fun setDebugLogging(_ enabled: Bool)
    }

    /// PoolConfigImpl is the concrete implementation of PoolConfig.
    access(all) struct PoolConfigImpl: PoolConfig {

        /// A price oracle that will return the price of each token in terms of the default token.
        access(self) var priceOracle: {DeFiActions.PriceOracle}

        /// Together with borrowFactor, collateralFactor determines borrowing limits for each token.
        ///
        /// When determining the withdrawable loan amount, the value of the token (provided by the PriceOracle)
        /// is multiplied by the collateral factor.
        ///
        /// The total "effective collateral" for a position is the value of each token deposited to the position
        /// multiplied by its collateral factor.
        access(self) var collateralFactor: {Type: UFix64}

        /// Together with collateralFactor, borrowFactor determines borrowing limits for each token.
        ///
        /// The borrowFactor determines how much of a position's "effective collateral" can be borrowed against as a
        /// percentage between 0.0 and 1.0
        access(self) var borrowFactor: {Type: UFix64}

        /// The count of positions to update per asynchronous update
        access(self) var positionsProcessedPerCallback: UInt64

        /// The target health factor when liquidating a position, which limits how much collateral can be liquidated.
        /// After a liquidation, the position's health factor must be less than or equal to this target value.
        access(self) var liquidationTargetHF: UFix128

        /// Period (s) following unpause in which liquidations are still not allowed
        access(self) var warmupSec: UInt64
        /// Time this pool most recently was unpaused
        access(self) var lastUnpausedAt: UInt64?

        /// A trusted DEX (or set of DEXes) used by FlowALPv0 as a pricing oracle and trading counterparty for liquidations.
        /// The SwapperProvider implementation MUST return a Swapper for all possible (ordered) pairs of supported tokens.
        /// If [X1, X2, ..., Xn] is the set of supported tokens, then the SwapperProvider must return a Swapper for all pairs:
        ///   (Xi, Xj) where i∈[1,n], j∈[1,n], i≠j
        ///
        /// FlowALPv0 does not attempt to construct multi-part paths (using multiple Swappers) or compare prices across Swappers.
        /// It relies directly on the Swapper's returned by the configured SwapperProvider.
        access(self) var dex: {DeFiActions.SwapperProvider}

        /// Max allowed deviation in basis points between DEX-implied price and oracle price.
        access(self) var dexOracleDeviationBps: UInt16

        /// Whether the pool is currently paused
        access(self) var paused: Bool

        /// Enable or disable verbose contract logging for debugging.
        access(self) var debugLogging: Bool

        init(
            priceOracle: {DeFiActions.PriceOracle},
            collateralFactor: {Type: UFix64},
            borrowFactor: {Type: UFix64},
            positionsProcessedPerCallback: UInt64,
            liquidationTargetHF: UFix128,
            warmupSec: UInt64,
            lastUnpausedAt: UInt64?,
            dex: {DeFiActions.SwapperProvider},
            dexOracleDeviationBps: UInt16,
            paused: Bool,
            debugLogging: Bool,
        ) {
            self.priceOracle = priceOracle
            self.collateralFactor = collateralFactor
            self.borrowFactor = borrowFactor
            self.positionsProcessedPerCallback = positionsProcessedPerCallback
            self.liquidationTargetHF = liquidationTargetHF
            self.warmupSec = warmupSec
            self.lastUnpausedAt = lastUnpausedAt
            self.dex = dex
            self.dexOracleDeviationBps = dexOracleDeviationBps
            self.paused = paused
            self.debugLogging = debugLogging
        }

        // Getters

        /// Returns the price oracle. See PoolConfig.getPriceOracle.
        access(all) view fun getPriceOracle(): {DeFiActions.PriceOracle} {
            return self.priceOracle
        }

        /// Returns the collateral factor for the given token type. See PoolConfig.getCollateralFactor.
        access(all) view fun getCollateralFactor(tokenType: Type): UFix64 {
            return self.collateralFactor[tokenType]!
        }

        /// Returns the borrow factor for the given token type. See PoolConfig.getBorrowFactor.
        access(all) view fun getBorrowFactor(tokenType: Type): UFix64 {
            return self.borrowFactor[tokenType]!
        }

        /// Returns the count of positions to update per asynchronous update.
        access(all) view fun getPositionsProcessedPerCallback(): UInt64 {
            return self.positionsProcessedPerCallback
        }

        /// Returns the target health factor for liquidations. See PoolConfig.getLiquidationTargetHF.
        access(all) view fun getLiquidationTargetHF(): UFix128 {
            return self.liquidationTargetHF
        }

        /// Returns the warmup period (s) following unpause during which liquidations are blocked.
        access(all) view fun getWarmupSec(): UInt64 {
            return self.warmupSec
        }

        /// Returns the timestamp when the pool was most recently unpaused, or nil if never unpaused.
        access(all) view fun getLastUnpausedAt(): UInt64? {
            return self.lastUnpausedAt
        }

        /// Returns the configured DEX SwapperProvider. See PoolConfig.getDex.
        access(all) view fun getDex(): {DeFiActions.SwapperProvider} {
            return self.dex
        }

        /// Returns the max allowed deviation in bps between DEX-implied price and oracle price.
        access(all) view fun getDexOracleDeviationBps(): UInt16 {
            return self.dexOracleDeviationBps
        }

        /// Returns whether the pool is currently paused.
        access(all) view fun isPaused(): Bool {
            return self.paused
        }

        /// Returns whether verbose contract debug logging is enabled.
        access(all) view fun isDebugLogging(): Bool {
            return self.debugLogging
        }

        /// Returns the set of supported token types for this pool.
        access(all) view fun getSupportedTokens(): [Type] {
            return self.collateralFactor.keys
        }

        /// Returns whether the given token type is supported by this pool.
        access(all) view fun isTokenSupported(tokenType: Type): Bool {
            return self.collateralFactor[tokenType] != nil
        }

        /// Gets a swapper from the DEX for the given token pair. See PoolConfig.getSwapperForLiquidation.
        access(all) fun getSwapperForLiquidation(seizeType: Type, debtType: Type): {DeFiActions.Swapper} {
            return self.dex.getSwapper(inType: seizeType, outType: debtType)
                ?? panic("No DEX swapper configured for liquidation pair: ".concat(seizeType.identifier).concat(" -> ").concat(debtType.identifier))
        }

        // Setters

        /// Sets the price oracle. See PoolConfig.setPriceOracle.
        access(EImplementation) fun setPriceOracle(_ newOracle: {DeFiActions.PriceOracle}, defaultToken: Type) {
            pre {
                newOracle.unitOfAccount() == defaultToken:
                    "Price oracle must return prices in terms of the pool's default token"
            }
            self.priceOracle = newOracle
        }

        /// Sets the collateral factor for a token type. See PoolConfig.setCollateralFactor.
        access(EImplementation) fun setCollateralFactor(tokenType: Type, factor: UFix64) {
            pre {
                factor > 0.0 && factor <= 1.0:
                    "Collateral factor must be between 0 and 1"
            }
            self.collateralFactor[tokenType] = factor
        }

        /// Sets the borrow factor for a token type. See PoolConfig.setBorrowFactor.
        access(EImplementation) fun setBorrowFactor(tokenType: Type, factor: UFix64) {
            pre {
                factor > 0.0 && factor <= 1.0:
                    "Borrow factor must be between 0 and 1"
            }
            self.borrowFactor[tokenType] = factor
        }

        /// Sets the positions processed per callback. See PoolConfig.setPositionsProcessedPerCallback.
        access(EImplementation) fun setPositionsProcessedPerCallback(_ count: UInt64) {
            self.positionsProcessedPerCallback = count
        }

        /// Sets the liquidation target health factor. Must be greater than 1.0.
        access(EImplementation) fun setLiquidationTargetHF(_ targetHF: UFix128) {
            pre {
                targetHF > 1.0:
                    "targetHF must be > 1.0"
            }
            self.liquidationTargetHF = targetHF
        }

        /// Sets the warmup period. See PoolConfig.setWarmupSec.
        access(EImplementation) fun setWarmupSec(_ warmupSec: UInt64) {
            self.warmupSec = warmupSec
        }

        /// Sets the last unpaused timestamp. See PoolConfig.setLastUnpausedAt.
        access(EImplementation) fun setLastUnpausedAt(_ time: UInt64?) {
            self.lastUnpausedAt = time
        }

        /// Sets the DEX SwapperProvider. See PoolConfig.setDex.
        access(EImplementation) fun setDex(_ dex: {DeFiActions.SwapperProvider}) {
            self.dex = dex
        }

        /// Sets the DEX oracle deviation in basis points. See PoolConfig.setDexOracleDeviationBps.
        access(EImplementation) fun setDexOracleDeviationBps(_ bps: UInt16) {
            self.dexOracleDeviationBps = bps
        }

        /// Sets the paused state. See PoolConfig.setPaused.
        access(EImplementation) fun setPaused(_ paused: Bool) {
            self.paused = paused
        }

        /// Sets the debug logging state. See PoolConfig.setDebugLogging.
        access(EImplementation) fun setDebugLogging(_ enabled: Bool) {
            self.debugLogging = enabled
        }
    }

    /* --- TOKEN STATE --- */

    /// TokenState
    ///
    /// The TokenState interface defines the contract for accessing and mutating state
    /// related to a single token Type within the Pool.
    /// All state is accessed via getter/setter functions (no field declarations),
    /// enabling future implementation upgrades (e.g. TokenStateImplv2).
    access(all) struct interface TokenState {

        // --- Getters ---

        /// The token type this state tracks
        access(all) view fun getTokenType(): Type

        /// The timestamp at which the TokenState was last updated
        access(all) view fun getLastUpdate(): UFix64

        /// The total credit balance for this token, in a specific Pool.
        /// The total credit balance is the sum of balances of all positions with a credit balance (ie. they have lent this token).
        /// In other words, it is the the sum of net deposits among positions which are net creditors in this token.
        access(all) view fun getTotalCreditBalance(): UFix128

        /// The total debit balance for this token, in a specific Pool.
        /// The total debit balance is the sum of balances of all positions with a debit balance (ie. they have borrowed this token).
        /// In other words, it is the the sum of net withdrawals among positions which are net debtors in this token.
        access(all) view fun getTotalDebitBalance(): UFix128

        /// The index of the credit interest for the related token.
        ///
        /// Interest indices are 18-decimal fixed-point values (see FlowALPMath) and are stored as UFix128
        /// to maintain precision when converting between scaled and true balances and when compounding.
        access(all) view fun getCreditInterestIndex(): UFix128

        /// The index of the debit interest for the related token.
        ///
        /// Interest indices are 18-decimal fixed-point values (see FlowALPMath) and are stored as UFix128
        /// to maintain precision when converting between scaled and true balances and when compounding.
        access(all) view fun getDebitInterestIndex(): UFix128

        /// The per-second interest rate for credit of the associated token.
        ///
        /// For example, if the per-second rate is 1%, this value is 0.01.
        /// Stored as UFix128 to match index precision and avoid cumulative rounding during compounding.
        access(all) view fun getCurrentCreditRate(): UFix128

        /// The per-second interest rate for debit of the associated token.
        ///
        /// For example, if the per-second rate is 1%, this value is 0.01.
        /// Stored as UFix128 for consistency with indices/rates math.
        access(all) view fun getCurrentDebitRate(): UFix128

        /// The interest curve implementation used to calculate interest rate
        access(all) view fun getInterestCurve(): {FlowALPInterestRates.InterestCurve}

        /// The annual insurance rate applied to total debit when computing credit interest (default 0.1%)
        access(all) view fun getInsuranceRate(): UFix64

        /// Timestamp of the last insurance collection for this token.
        access(all) view fun getLastInsuranceCollectionTime(): UFix64

        /// Swapper used to convert this token to MOET for insurance collection.
        access(all) view fun getInsuranceSwapper(): {DeFiActions.Swapper}?

        /// The stability fee rate to calculate stability (default 0.05, 5%).
        access(all) view fun getStabilityFeeRate(): UFix64

        /// Timestamp of the last stability collection for this token.
        access(all) view fun getLastStabilityFeeCollectionTime(): UFix64

        /// Per-position limit fraction of capacity (default 0.05 i.e., 5%)
        access(all) view fun getDepositLimitFraction(): UFix64

        /// The rate at which depositCapacity can increase over time. This is a tokens per hour rate,
        /// and should be applied to the depositCapacityCap once an hour.
        access(all) view fun getDepositRate(): UFix64

        /// The timestamp of the last deposit capacity update
        access(all) view fun getLastDepositCapacityUpdate(): UFix64

        /// The limit on deposits of the related token
        access(all) view fun getDepositCapacity(): UFix64

        /// The upper bound on total deposits of the related token,
        /// limiting how much depositCapacity can reach
        access(all) view fun getDepositCapacityCap(): UFix64

        /// Returns the deposit usage for a specific position ID.
        /// Returns 0.0 if no usage has been recorded for the position.
        access(all) view fun getDepositUsageForPosition(_ pid: UInt64): UFix64

        /// The minimum balance size for the related token T per position.
        /// This minimum balance is denominated in units of token T.
        /// Let this minimum balance be M. Then each position must have either:
        /// - A balance of 0
        /// - A credit balance greater than or equal to M
        /// - A debit balance greater than or equal to M
        access(all) view fun getMinimumTokenBalancePerPosition(): UFix64

        // --- Setters ---

        /// Sets the insurance rate. See getInsuranceRate for additional details.
        access(EImplementation) fun setInsuranceRate(_ rate: UFix64)

        /// Sets the last insurance collection timestamp. See getLastInsuranceCollectionTime for additional details.
        access(EImplementation) fun setLastInsuranceCollectionTime(_ lastInsuranceCollectionTime: UFix64)

        /// Sets the insurance swapper. See getInsuranceSwapper for additional details.
        /// If non-nil, the swapper must accept this token type as input and output MOET.
        access(EImplementation) fun setInsuranceSwapper(_ swapper: {DeFiActions.Swapper}?)

        /// Sets the deposit limit fraction. See getDepositLimitFraction for additional details.
        access(EImplementation) fun setDepositLimitFraction(_ frac: UFix64)

        /// Sets the deposit rate. See getDepositRate for additional details.
        /// Settles any pending capacity regeneration using the old rate before applying the new rate.
        /// Argument expressed as tokens per hour.
        access(EImplementation) fun setDepositRate(_ hourlyRate: UFix64)

        /// Sets the deposit capacity cap. See getDepositCapacityCap for additional details.
        /// If current capacity exceeds the new cap, it is clamped to the cap.
        access(EImplementation) fun setDepositCapacityCap(_ cap: UFix64)

        /// Sets the minimum token balance per position. See getMinimumTokenBalancePerPosition for additional details.
        access(EImplementation) fun setMinimumTokenBalancePerPosition(_ minimum: UFix64)

        /// Sets the stability fee rate. See getStabilityFeeRate for additional details.
        access(EImplementation) fun setStabilityFeeRate(_ rate: UFix64)

        /// Sets the last stability fee collection timestamp. See getLastStabilityFeeCollectionTime for additional details.
        access(EImplementation) fun setLastStabilityFeeCollectionTime(_ lastStabilityFeeCollectionTime: UFix64)

        /// Sets the deposit capacity. See getDepositCapacity for additional details.
        access(EImplementation) fun setDepositCapacity(_ capacity: UFix64)

        /// Sets the interest curve. See getInterestCurve for additional details.
        /// After updating the curve, interest rates are recalculated to reflect the new curve.
        access(EImplementation) fun setInterestCurve(_ curve: {FlowALPInterestRates.InterestCurve})

        // --- Operational Methods ---

        /// Calculates the per-user deposit limit cap based on depositLimitFraction * depositCapacityCap
        access(all) view fun getUserDepositLimitCap(): UFix64

        /// Decreases deposit capacity by the specified amount and tracks per-user deposit usage
        /// (used when deposits are made)
        access(EImplementation) fun consumeDepositCapacity(_ amount: UFix64, pid: UInt64)

        /// Returns the per-deposit limit based on depositCapacity * depositLimitFraction
        /// Rationale: cap per-deposit size to a fraction of the time-based
        /// depositCapacity so a single large deposit cannot monopolize capacity.
        /// Excess is queued and drained in chunks (see asyncUpdatePosition),
        /// enabling fair throughput across many deposits in a block. The 5%
        /// fraction is conservative and can be tuned by protocol parameters.
        access(EImplementation) view fun depositLimit(): UFix64

        /// Updates interest indices and regenerates deposit capacity for elapsed time
        access(EImplementation) fun updateForTimeChange()

        /// Called after any action that changes utilization (deposits, withdrawals, borrows, repays).
        /// Recalculates interest rates based on the new credit/debit balance ratio.
        access(EImplementation) fun updateForUtilizationChange()

        /// Recalculates interest rates based on the current credit/debit balance ratio and interest curve
        access(EImplementation) fun updateInterestRates()

        /// Updates the credit and debit interest index for this token, accounting for time since the last update.
        access(EImplementation) fun updateInterestIndices()

        /// Regenerates deposit capacity over time based on depositRate
        /// When capacity regenerates, all user deposit usage is reset for this token type
        access(EImplementation) fun regenerateDepositCapacity()

        /// Increases total credit balance and recalculates interest rates.
        access(EImplementation) fun increaseCreditBalance(by amount: UFix128)
        /// Decreases total credit balance (floored at 0) and recalculates interest rates.
        access(EImplementation) fun decreaseCreditBalance(by amount: UFix128)
        /// Increases total debit balance and recalculates interest rates.
        access(EImplementation) fun increaseDebitBalance(by amount: UFix128)
        /// Decreases total debit balance (floored at 0) and recalculates interest rates.
        access(EImplementation) fun decreaseDebitBalance(by amount: UFix128)

        /// Returns the reserve operations handler for this token type.
        /// Different tokens may have different reserve behaviors (e.g., MOET burns on repayment, others use reserves).
        access(all) view fun getReserveOperations(): {TokenReserveHandler}
    }

    /// TokenStateImplv1 is the concrete implementation of TokenState.
    /// Fields are private (access(self)) and accessed only via getter/setter functions.
    access(all) struct TokenStateImplv1: TokenState {

        /// The token type this state tracks
        access(self) var tokenType: Type
        /// The timestamp at which the TokenState was last updated
        access(self) var lastUpdate: UFix64
        /// The total credit balance for this token, in a specific Pool.
        /// The total credit balance is the sum of balances of all positions with a credit balance (ie. they have lent this token).
        /// In other words, it is the the sum of net deposits among positions which are net creditors in this token.
        access(self) var totalCreditBalance: UFix128
        /// The total debit balance for this token, in a specific Pool.
        /// The total debit balance is the sum of balances of all positions with a debit balance (ie. they have borrowed this token).
        /// In other words, it is the the sum of net withdrawals among positions which are net debtors in this token.
        access(self) var totalDebitBalance: UFix128
        /// The index of the credit interest for the related token.
        ///
        /// Interest indices are 18-decimal fixed-point values (see FlowALPMath) and are stored as UFix128
        /// to maintain precision when converting between scaled and true balances and when compounding.
        access(self) var creditInterestIndex: UFix128
        /// The index of the debit interest for the related token.
        ///
        /// Interest indices are 18-decimal fixed-point values (see FlowALPMath) and are stored as UFix128
        /// to maintain precision when converting between scaled and true balances and when compounding.
        access(self) var debitInterestIndex: UFix128
        /// The per-second interest rate for credit of the associated token.
        ///
        /// For example, if the per-second rate is 1%, this value is 0.01.
        /// Stored as UFix128 to match index precision and avoid cumulative rounding during compounding.
        access(self) var currentCreditRate: UFix128
        /// The per-second interest rate for debit of the associated token.
        ///
        /// For example, if the per-second rate is 1%, this value is 0.01.
        /// Stored as UFix128 for consistency with indices/rates math.
        access(self) var currentDebitRate: UFix128
        /// The interest curve implementation used to calculate interest rate
        access(self) var interestCurve: {FlowALPInterestRates.InterestCurve}
        /// The annual insurance rate applied to total debit when computing credit interest (default 0.1%)
        access(self) var insuranceRate: UFix64
        /// Timestamp of the last insurance collection for this token.
        access(self) var lastInsuranceCollectionTime: UFix64
        /// Swapper used to convert this token to MOET for insurance collection.
        access(self) var insuranceSwapper: {DeFiActions.Swapper}?
        /// The stability fee rate to calculate stability (default 0.05, 5%).
        access(self) var stabilityFeeRate: UFix64
        /// Timestamp of the last stability collection for this token.
        access(self) var lastStabilityFeeCollectionTime: UFix64
        /// Per-position limit fraction of capacity (default 0.05 i.e., 5%)
        access(self) var depositLimitFraction: UFix64
        /// The rate at which depositCapacity can increase over time. This is a tokens per hour rate,
        /// and should be applied to the depositCapacityCap once an hour.
        access(self) var depositRate: UFix64
        /// The timestamp of the last deposit capacity update
        access(self) var lastDepositCapacityUpdate: UFix64
        /// The limit on deposits of the related token
        access(self) var depositCapacity: UFix64
        /// The upper bound on total deposits of the related token,
        /// limiting how much depositCapacity can reach
        access(self) var depositCapacityCap: UFix64
        /// Per-position deposit usage tracking, keyed by position ID
        access(self) var depositUsage: {UInt64: UFix64}
        /// The minimum balance size for the related token T per position.
        /// This minimum balance is denominated in units of token T.
        /// Let this minimum balance be M. Then each position must have either:
        /// - A balance of 0
        /// - A credit balance greater than or equal to M
        /// - A debit balance greater than or equal to M
        access(self) var minimumTokenBalancePerPosition: UFix64
        /// The reserve operations handler for this token type
        access(self) let reserveHandler: {TokenReserveHandler}

        init(
            tokenType: Type,
            interestCurve: {FlowALPInterestRates.InterestCurve},
            depositRate: UFix64,
            depositCapacityCap: UFix64
        ) {
            self.tokenType = tokenType
            self.lastUpdate = getCurrentBlock().timestamp
            self.totalCreditBalance = 0.0
            self.totalDebitBalance = 0.0
            self.creditInterestIndex = 1.0
            self.debitInterestIndex = 1.0
            self.currentCreditRate = 1.0
            self.currentDebitRate = 1.0
            self.interestCurve = interestCurve
            self.insuranceRate = 0.0
            self.lastInsuranceCollectionTime = getCurrentBlock().timestamp
            self.insuranceSwapper = nil
            self.stabilityFeeRate = 0.05
            self.lastStabilityFeeCollectionTime = getCurrentBlock().timestamp
            self.depositLimitFraction = 0.05
            self.depositRate = depositRate
            self.depositCapacity = depositCapacityCap
            self.depositCapacityCap = depositCapacityCap
            self.depositUsage = {}
            self.lastDepositCapacityUpdate = getCurrentBlock().timestamp
            self.minimumTokenBalancePerPosition = 1.0
            // Initialize reserve handler based on token type
            if tokenType == Type<@MOET.Vault>() {
                self.reserveHandler = MoetTokenReserveHandler()
            } else {
                self.reserveHandler = StandardTokenReserveHandler(tokenType: tokenType)
            }
        }

        // --- Getters ---

        /// Returns the token type this state tracks.
        access(all) view fun getTokenType(): Type {
            return self.tokenType
        }

        /// Returns the reserve operations handler for this token type.
        access(all) view fun getReserveOperations(): {TokenReserveHandler} {
            return self.reserveHandler
        }

        /// Returns the timestamp at which the TokenState was last updated.
        access(all) view fun getLastUpdate(): UFix64 {
            return self.lastUpdate
        }

        /// Returns the total credit balance for this token. See TokenState.getTotalCreditBalance.
        access(all) view fun getTotalCreditBalance(): UFix128 {
            return self.totalCreditBalance
        }

        /// Returns the total debit balance for this token. See TokenState.getTotalDebitBalance.
        access(all) view fun getTotalDebitBalance(): UFix128 {
            return self.totalDebitBalance
        }

        /// Returns the credit interest index. See TokenState.getCreditInterestIndex.
        access(all) view fun getCreditInterestIndex(): UFix128 {
            return self.creditInterestIndex
        }

        /// Returns the debit interest index. See TokenState.getDebitInterestIndex.
        access(all) view fun getDebitInterestIndex(): UFix128 {
            return self.debitInterestIndex
        }

        /// Returns the per-second credit interest rate. See TokenState.getCurrentCreditRate.
        access(all) view fun getCurrentCreditRate(): UFix128 {
            return self.currentCreditRate
        }

        /// Returns the per-second debit interest rate. See TokenState.getCurrentDebitRate.
        access(all) view fun getCurrentDebitRate(): UFix128 {
            return self.currentDebitRate
        }

        /// Returns the interest curve used to calculate interest rates.
        access(all) view fun getInterestCurve(): {FlowALPInterestRates.InterestCurve} {
            return self.interestCurve
        }

        /// Returns the annual insurance rate applied to total debit when computing credit interest.
        access(all) view fun getInsuranceRate(): UFix64 {
            return self.insuranceRate
        }

        /// Returns the timestamp of the last insurance collection for this token.
        access(all) view fun getLastInsuranceCollectionTime(): UFix64 {
            return self.lastInsuranceCollectionTime
        }

        /// Returns the swapper used to convert this token to MOET for insurance collection.
        access(all) view fun getInsuranceSwapper(): {DeFiActions.Swapper}? {
            return self.insuranceSwapper
        }

        /// Returns the stability fee rate (default 0.05, 5%).
        access(all) view fun getStabilityFeeRate(): UFix64 {
            return self.stabilityFeeRate
        }

        /// Returns the timestamp of the last stability fee collection for this token.
        access(all) view fun getLastStabilityFeeCollectionTime(): UFix64 {
            return self.lastStabilityFeeCollectionTime
        }

        /// Returns the per-position limit fraction of capacity (default 0.05 i.e., 5%).
        access(all) view fun getDepositLimitFraction(): UFix64 {
            return self.depositLimitFraction
        }

        /// Returns the rate at which depositCapacity increases (tokens per hour).
        access(all) view fun getDepositRate(): UFix64 {
            return self.depositRate
        }

        /// Returns the timestamp of the last deposit capacity update.
        access(all) view fun getLastDepositCapacityUpdate(): UFix64 {
            return self.lastDepositCapacityUpdate
        }

        /// Returns the current deposit capacity for the related token.
        access(all) view fun getDepositCapacity(): UFix64 {
            return self.depositCapacity
        }

        /// Returns the upper bound on deposit capacity for the related token.
        access(all) view fun getDepositCapacityCap(): UFix64 {
            return self.depositCapacityCap
        }

        /// Returns the deposit usage for a specific position ID, or 0.0 if none recorded.
        access(all) view fun getDepositUsageForPosition(_ pid: UInt64): UFix64 {
            return self.depositUsage[pid] ?? 0.0
        }

        /// Returns the minimum balance per position for this token. See TokenState.getMinimumTokenBalancePerPosition.
        access(all) view fun getMinimumTokenBalancePerPosition(): UFix64 {
            return self.minimumTokenBalancePerPosition
        }

        // --- Setters ---

        /// Sets the insurance rate. See TokenState.setInsuranceRate.
        access(EImplementation) fun setInsuranceRate(_ rate: UFix64) {
            self.insuranceRate = rate
        }

        /// Sets the last insurance collection timestamp. See TokenState.setLastInsuranceCollectionTime.
        access(EImplementation) fun setLastInsuranceCollectionTime(_ lastInsuranceCollectionTime: UFix64) {
            self.lastInsuranceCollectionTime = lastInsuranceCollectionTime
        }

        /// Sets the insurance swapper. See TokenState.setInsuranceSwapper.
        access(EImplementation) fun setInsuranceSwapper(_ swapper: {DeFiActions.Swapper}?) {
            if let swapper = swapper {
                assert(swapper.inType() == self.tokenType, message: "Insurance swapper must accept \(self.tokenType.identifier), not \(swapper.inType().identifier)")
                assert(swapper.outType() == Type<@MOET.Vault>(), message: "Insurance swapper must output MOET")
            }
            self.insuranceSwapper = swapper
        }

        /// Sets the deposit limit fraction. See TokenState.setDepositLimitFraction.
        access(EImplementation) fun setDepositLimitFraction(_ frac: UFix64) {
            self.depositLimitFraction = frac
        }

        /// Sets the deposit rate. Settles pending capacity regeneration before applying.
        access(EImplementation) fun setDepositRate(_ hourlyRate: UFix64) {
            // settle using old rate if for some reason too much time has passed without regeneration
            self.regenerateDepositCapacity()
            self.depositRate = hourlyRate
        }

        /// Sets the deposit capacity cap. Clamps current capacity if it exceeds the new cap.
        access(EImplementation) fun setDepositCapacityCap(_ cap: UFix64) {
            self.depositCapacityCap = cap
            // If current capacity exceeds the new cap, clamp it to the cap
            if self.depositCapacity > cap {
                self.depositCapacity = cap
            }
            // Reset the last update timestamp to prevent regeneration based on old timestamp
            self.lastDepositCapacityUpdate = getCurrentBlock().timestamp
        }

        /// Sets the minimum token balance per position. See TokenState.setMinimumTokenBalancePerPosition.
        access(EImplementation) fun setMinimumTokenBalancePerPosition(_ minimum: UFix64) {
            self.minimumTokenBalancePerPosition = minimum
        }

        /// Sets the stability fee rate. See TokenState.setStabilityFeeRate.
        access(EImplementation) fun setStabilityFeeRate(_ rate: UFix64) {
            self.stabilityFeeRate = rate
        }

        /// Sets the last stability fee collection timestamp. See TokenState.setLastStabilityFeeCollectionTime.
        access(EImplementation) fun setLastStabilityFeeCollectionTime(_ lastStabilityFeeCollectionTime: UFix64) {
            self.lastStabilityFeeCollectionTime = lastStabilityFeeCollectionTime
        }

        /// Sets the deposit capacity. See TokenState.setDepositCapacity.
        access(EImplementation) fun setDepositCapacity(_ capacity: UFix64) {
            self.depositCapacity = capacity
        }

        /// Sets the interest curve. Recalculates interest rates immediately. See TokenState.setInterestCurve.
        access(EImplementation) fun setInterestCurve(_ curve: {FlowALPInterestRates.InterestCurve}) {
            self.interestCurve = curve
            // Update rates immediately to reflect the new curve
            self.updateInterestRates()
        }

        // --- Operational Methods ---

        /// Calculates the per-user deposit limit cap based on depositLimitFraction * depositCapacityCap.
        access(all) view fun getUserDepositLimitCap(): UFix64 {
            return self.depositLimitFraction * self.depositCapacityCap
        }

        /// Decreases deposit capacity by the specified amount and tracks per-user deposit usage.
        access(EImplementation) fun consumeDepositCapacity(_ amount: UFix64, pid: UInt64) {
            assert(
                amount <= self.depositCapacity,
                message: "cannot consume more than available deposit capacity"
            )
            self.depositCapacity = self.depositCapacity - amount

            // Track per-user deposit usage for the accepted amount
            let currentUserUsage = self.depositUsage[pid] ?? 0.0
            self.depositUsage[pid] = currentUserUsage + amount

            FlowALPEvents.emitDepositCapacityConsumed(
                tokenType: self.tokenType,
                pid: pid,
                amount: amount,
                remainingCapacity: self.depositCapacity
            )
        }

        /// Returns the per-deposit limit based on depositCapacity * depositLimitFraction.
        access(EImplementation) view fun depositLimit(): UFix64 {
            return self.depositCapacity * self.depositLimitFraction
        }

        /// Updates interest indices and regenerates deposit capacity for elapsed time.
        access(EImplementation) fun updateForTimeChange() {
            self.updateInterestIndices()
            self.regenerateDepositCapacity()
        }

        /// Recalculates interest rates based on the current utilization ratio.
        access(EImplementation) fun updateForUtilizationChange() {
            self.updateInterestRates()
        }

        /// Recalculates credit and debit interest rates from the current balance ratio and interest curve.
        access(EImplementation) fun updateInterestRates() {
            let debitRate = self.interestCurve.interestRate(
                creditBalance: self.totalCreditBalance,
                debitBalance: self.totalDebitBalance
            )
            let insuranceRate = UFix128(self.insuranceRate)
            let stabilityFeeRate = UFix128(self.stabilityFeeRate)

            var creditRate: UFix128 = 0.0
            // Total protocol cut as a percentage of debit interest income
            let protocolFeeRate = insuranceRate + stabilityFeeRate

            // Two calculation paths based on curve type:
            // 1. FixedCurve: simple spread model (creditRate = debitRate * (1 - protocolFeeRate))
            //    Used for stable assets like MOET where rates are governance-controlled
            // 2. KinkCurve (and others): reserve factor model
            //    Insurance and stability are percentages of interest income, not a fixed spread
            if self.interestCurve.getType() == Type<FlowALPInterestRates.FixedCurve>() {
                // FixedRate path: creditRate = debitRate * (1 - protocolFeeRate))
                // This provides a fixed, predictable spread between borrower and lender rates
                creditRate = debitRate * (1.0 - protocolFeeRate)
            } else {
                // KinkCurve path (and any other curves): reserve factor model
                // protocolFeeAmount = debitIncome * protocolFeeRate (percentage of income)
                // creditRate = (debitIncome - protocolFeeAmount) / totalCreditBalance
                let debitIncome = self.totalDebitBalance * debitRate
                let protocolFeeAmount = debitIncome * protocolFeeRate

                if self.totalCreditBalance > 0.0 {
                    creditRate = (debitIncome - protocolFeeAmount) / self.totalCreditBalance
                }
            }

            self.currentCreditRate = FlowALPMath.perSecondInterestRate(yearlyRate: creditRate)
            self.currentDebitRate = FlowALPMath.perSecondInterestRate(yearlyRate: debitRate)
        }

        /// Updates the credit and debit interest indices for elapsed time since last update.
        access(EImplementation) fun updateInterestIndices() {
            let currentTime = getCurrentBlock().timestamp
            let dt = currentTime - self.lastUpdate

            // No time elapsed or already at cap → nothing to do
            if dt <= 0.0 {
                return
            }

            // Update interest indices (dt > 0 ensures sensible compounding)
            self.creditInterestIndex = FlowALPMath.compoundInterestIndex(
                oldIndex: self.creditInterestIndex,
                perSecondRate: self.currentCreditRate,
                elapsedSeconds: dt
            )
            self.debitInterestIndex = FlowALPMath.compoundInterestIndex(
                oldIndex: self.debitInterestIndex,
                perSecondRate: self.currentDebitRate,
                elapsedSeconds: dt
            )

            // Record the moment we accounted for
            self.lastUpdate = currentTime
        }

        /// Regenerates deposit capacity over time based on depositRate. Resets per-user usage on regeneration.
        access(EImplementation) fun regenerateDepositCapacity() {
            let currentTime = getCurrentBlock().timestamp
            let dt = currentTime - self.lastDepositCapacityUpdate
            let hourInSeconds = 3600.0
            if dt >= hourInSeconds { // 1 hour
                let multiplier = dt / hourInSeconds
                let oldCap = self.depositCapacityCap
                let newDepositCapacityCap = self.depositRate * multiplier + self.depositCapacityCap

                self.depositCapacityCap = newDepositCapacityCap

                // Set the deposit capacity to the new deposit capacity cap, i.e. regenerate the capacity
                self.setDepositCapacity(newDepositCapacityCap)

                // Regenerate user usage for this token type as well
                self.depositUsage = {}

                self.lastDepositCapacityUpdate = currentTime

                FlowALPEvents.emitDepositCapacityRegenerated(
                    tokenType: self.tokenType,
                    oldCapacityCap: oldCap,
                    newCapacityCap: newDepositCapacityCap
                )
            }
        }

        /// Increases total credit balance by the given amount and recalculates interest rates.
        access(EImplementation) fun increaseCreditBalance(by amount: UFix128) {
            self.totalCreditBalance = self.totalCreditBalance + amount
            self.updateForUtilizationChange()
        }

        /// Decreases total credit balance by the given amount (floored at 0) and recalculates interest rates.
        access(EImplementation) fun decreaseCreditBalance(by amount: UFix128) {
            if amount >= self.totalCreditBalance {
                self.totalCreditBalance = 0.0
            } else {
                self.totalCreditBalance = self.totalCreditBalance - amount
            }
            self.updateForUtilizationChange()
        }

        /// Increases total debit balance by the given amount and recalculates interest rates.
        access(EImplementation) fun increaseDebitBalance(by amount: UFix128) {
            self.totalDebitBalance = self.totalDebitBalance + amount
            self.updateForUtilizationChange()
        }

        /// Decreases total debit balance by the given amount (floored at 0) and recalculates interest rates.
        access(EImplementation) fun decreaseDebitBalance(by amount: UFix128) {
            if amount >= self.totalDebitBalance {
                self.totalDebitBalance = 0.0
            } else {
                self.totalDebitBalance = self.totalDebitBalance - amount
            }
            self.updateForUtilizationChange()
        }
    }

    /* --- POOL STATE --- */

    /// PoolState defines the interface for pool-level state fields.
    /// Pool references its state via this interface to allow future upgrades.
    /// All state is accessed via getter/setter functions (no field declarations).
    access(all) resource interface PoolState {

        // --- Global Ledger (TokenState per token type) ---

        /// Returns a mutable reference to the TokenState for the given token type, or nil if not present
        access(EImplementation) fun borrowTokenState(_ type: Type): auth(EImplementation) &{TokenState}?

        /// Returns a copy of the TokenState for the given token type, or nil if not present
        access(all) view fun getTokenState(_ type: Type): {TokenState}?

        /// Sets the TokenState for the given token type. See getTokenState for additional details.
        access(EImplementation) fun setTokenState(_ type: Type, _ state: {TokenState})

        /// Returns the set of token types tracked in the global ledger
        access(all) view fun getGlobalLedgerKeys(): [Type]

        // --- Reserves ---

        /// Returns a reference to the reserve vault for the given type, if the token type is supported.
        /// If no reserve vault exists yet, and the token type is supported, the reserve vault is created.
        access(EImplementation) fun borrowOrCreateReserve(_ type: Type): auth(FungibleToken.Withdraw) &{FungibleToken.Vault}

        /// Returns a reference to the reserve vault for the given type, if the token type is supported.
        access(EImplementation) fun borrowReserve(_ type: Type): auth(FungibleToken.Withdraw) &{FungibleToken.Vault}?

        /// Returns whether a reserve vault exists for the given token type
        access(all) view fun hasReserve(_ type: Type): Bool

        /// Returns the balance of the reserve vault for the given token type, or 0.0 if no reserve exists
        access(all) view fun getReserveBalance(_ type: Type): UFix64

        /// Initializes a reserve vault for the given token type
        access(EImplementation) fun initReserve(_ type: Type, _ vault: @{FungibleToken.Vault})

        // --- Insurance Fund ---

        /// Returns the balance of the MOET insurance fund
        access(all) view fun getInsuranceFundBalance(): UFix64

        /// Deposits MOET into the insurance fund
        access(EImplementation) fun depositToInsuranceFund(from: @MOET.Vault)

        // --- Next Position ID ---

        /// Returns the next position ID to be assigned
        access(all) view fun getNextPositionID(): UInt64

        /// Increments the next position ID counter
        access(EImplementation) fun incrementNextPositionID()

        // --- Default Token ---

        /// Returns the pool's default token type
        access(all) view fun getDefaultToken(): Type

        // --- Stability Funds ---

        /// Returns a reference to the stability fund vault for the given token type, or nil if not present
        access(EImplementation) fun borrowStabilityFund(_ type: Type): auth(FungibleToken.Withdraw) &{FungibleToken.Vault}?

        /// Returns whether a stability fund vault exists for the given token type
        access(all) view fun hasStabilityFund(_ type: Type): Bool

        /// Returns the balance of the stability fund for the given token type, or 0.0 if none exists
        access(all) view fun getStabilityFundBalance(_ type: Type): UFix64

        /// Initializes a stability fund vault for the given token type
        access(EImplementation) fun initStabilityFund(_ type: Type, _ vault: @{FungibleToken.Vault})

        // --- Position Update Queue ---

        /// Returns the number of positions queued for asynchronous update
        access(all) view fun getPositionsNeedingUpdatesLength(): Int

        /// Removes and returns the first position ID from the update queue
        access(EImplementation) fun removeFirstPositionNeedingUpdate(): UInt64

        /// Returns whether the given position ID is in the update queue
        access(all) view fun positionsNeedingUpdatesContains(_ pid: UInt64): Bool

        /// Appends a position ID to the update queue
        access(EImplementation) fun appendPositionNeedingUpdate(_ pid: UInt64)

        /// Replaces the entire update queue. See getPositionsNeedingUpdatesLength for additional details.
        access(EImplementation) fun setPositionsNeedingUpdates(_ positions: [UInt64])

        // --- Position Lock ---

        /// Returns whether the given position is currently locked
        access(all) view fun isPositionLocked(_ pid: UInt64): Bool

        /// Sets the lock state for a position. See isPositionLocked for additional details.
        access(EImplementation) fun setPositionLock(_ pid: UInt64, _ locked: Bool)
    }

    /// PoolStateImpl is the concrete implementation of PoolState.
    /// This extraction enables future upgrades and testing of state management in isolation.
    access(all) resource PoolStateImpl: PoolState {

        /// TokenState for each supported token type in the pool
        access(self) var globalLedger: {Type: {TokenState}}
        /// Reserve vaults holding protocol-owned liquidity for each token type
        access(self) var reserves: @{Type: {FungibleToken.Vault}}
        /// MOET insurance fund vault
        access(self) var insuranceFund: @MOET.Vault
        /// Counter for assigning unique position IDs
        access(self) var nextPositionID: UInt64
        /// The pool's default token type
        access(self) let defaultToken: Type
        /// Stability fund vaults for each token type
        access(self) var stabilityFunds: @{Type: {FungibleToken.Vault}}
        /// Queue of position IDs pending asynchronous update
        access(self) var positionsNeedingUpdates: [UInt64]
        /// Lock state for positions currently being processed
        access(self) var positionLock: {UInt64: Bool}

        init(
            globalLedger: {Type: {TokenState}},
            reserves: @{Type: {FungibleToken.Vault}},
            insuranceFund: @MOET.Vault,
            nextPositionID: UInt64,
            defaultToken: Type,
            stabilityFunds: @{Type: {FungibleToken.Vault}},
            positionsNeedingUpdates: [UInt64],
            positionLock: {UInt64: Bool}
        ) {
            self.globalLedger = globalLedger
            self.reserves <- reserves
            self.insuranceFund <- insuranceFund
            self.nextPositionID = nextPositionID
            self.defaultToken = defaultToken
            self.stabilityFunds <- stabilityFunds
            self.positionsNeedingUpdates = positionsNeedingUpdates
            self.positionLock = positionLock
        }

        // --- Global Ledger ---

        /// Returns a mutable reference to the TokenState for the given token type, or nil if not present.
        access(EImplementation) fun borrowTokenState(_ type: Type): auth(EImplementation) &{TokenState}? {
            return &self.globalLedger[type]
        }

        /// Returns a copy of the TokenState for the given token type, or nil if not present.
        access(all) view fun getTokenState(_ type: Type): {TokenState}? {
            return self.globalLedger[type]
        }

        /// Sets the TokenState for the given token type.
        access(EImplementation) fun setTokenState(_ type: Type, _ state: {TokenState}) {
            self.globalLedger[type] = state
        }

        /// Returns the set of token types tracked in the global ledger.
        access(all) view fun getGlobalLedgerKeys(): [Type] {
            return self.globalLedger.keys
        }

        // --- Reserves ---

        /// Returns a reference to the reserve vault for the given type, creating one if needed.
        access(EImplementation) fun borrowOrCreateReserve(_ type: Type): auth(FungibleToken.Withdraw) &{FungibleToken.Vault} {
            if self.reserves[type] == nil {
                self.reserves[type] <-! DeFiActionsUtils.getEmptyVault(type)
            }
            return (&self.reserves[type])!
        }

        /// Returns a reference to the reserve vault for the given type, or nil if none exists.
        access(EImplementation) fun borrowReserve(_ type: Type): auth(FungibleToken.Withdraw) &{FungibleToken.Vault}? {
            return &self.reserves[type]
        }

        /// Returns whether a reserve vault exists for the given token type.
        access(all) view fun hasReserve(_ type: Type): Bool {
            return self.reserves[type] != nil
        }

        /// Returns the balance of the reserve vault for the given token type, or 0.0 if no reserve exists.
        access(all) view fun getReserveBalance(_ type: Type): UFix64 {
            if let ref = &self.reserves[type] as &{FungibleToken.Vault}? {
                return ref.balance
            }
            return 0.0
        }

        /// Initializes a reserve vault for the given token type.
        access(EImplementation) fun initReserve(_ type: Type, _ vault: @{FungibleToken.Vault}) {
            self.reserves[type] <-! vault
        }

        // --- Insurance Fund ---

        /// Returns the balance of the MOET insurance fund.
        access(all) view fun getInsuranceFundBalance(): UFix64 {
            return self.insuranceFund.balance
        }

        /// Deposits MOET into the insurance fund.
        access(EImplementation) fun depositToInsuranceFund(from: @MOET.Vault) {
            self.insuranceFund.deposit(from: <-from)
        }

        // --- Next Position ID ---

        /// Returns the next position ID to be assigned.
        access(all) view fun getNextPositionID(): UInt64 {
            return self.nextPositionID
        }

        /// Increments the next position ID counter.
        access(EImplementation) fun incrementNextPositionID() {
            self.nextPositionID = self.nextPositionID + 1
        }

        // --- Default Token ---

        /// Returns the pool's default token type.
        access(all) view fun getDefaultToken(): Type {
            return self.defaultToken
        }

        // --- Stability Funds ---

        /// Returns a reference to the stability fund vault for the given token type, or nil if not present.
        access(EImplementation) fun borrowStabilityFund(_ type: Type): auth(FungibleToken.Withdraw) &{FungibleToken.Vault}? {
            return &self.stabilityFunds[type]
        }

        /// Returns whether a stability fund vault exists for the given token type.
        access(all) view fun hasStabilityFund(_ type: Type): Bool {
            return self.stabilityFunds[type] != nil
        }

        /// Returns the balance of the stability fund for the given token type, or 0.0 if none exists.
        access(all) view fun getStabilityFundBalance(_ type: Type): UFix64 {
            if let ref = &self.stabilityFunds[type] as &{FungibleToken.Vault}? {
                return ref.balance
            }
            return 0.0
        }

        /// Initializes a stability fund vault for the given token type.
        access(EImplementation) fun initStabilityFund(_ type: Type, _ vault: @{FungibleToken.Vault}) {
            self.stabilityFunds[type] <-! vault
        }

        // --- Position Update Queue ---

        /// Returns the number of positions queued for asynchronous update.
        access(all) view fun getPositionsNeedingUpdatesLength(): Int {
            return self.positionsNeedingUpdates.length
        }

        /// Removes and returns the first position ID from the update queue.
        access(EImplementation) fun removeFirstPositionNeedingUpdate(): UInt64 {
            return self.positionsNeedingUpdates.removeFirst()
        }

        /// Returns whether the given position ID is in the update queue.
        access(all) view fun positionsNeedingUpdatesContains(_ pid: UInt64): Bool {
            return self.positionsNeedingUpdates.contains(pid)
        }

        /// Appends a position ID to the update queue.
        access(EImplementation) fun appendPositionNeedingUpdate(_ pid: UInt64) {
            self.positionsNeedingUpdates.append(pid)
        }

        /// Replaces the entire update queue.
        access(EImplementation) fun setPositionsNeedingUpdates(_ positions: [UInt64]) {
            self.positionsNeedingUpdates = positions
        }

        // --- Position Lock ---

        /// Returns whether the given position is currently locked.
        access(all) view fun isPositionLocked(_ pid: UInt64): Bool {
            return self.positionLock[pid] ?? false
        }

        /// Sets the lock state for a position.
        access(EImplementation) fun setPositionLock(_ pid: UInt64, _ locked: Bool) {
            self.positionLock[pid] = locked
        }
    }

    /* --- INTERNAL POSITION --- */

    /// InternalPosition
    ///
    /// The InternalPosition interface defines the contract for accessing and mutating state
    /// related to a single position within the Pool.
    /// All state is accessed via getter/setter/borrow functions (no field declarations),
    /// enabling future implementation upgrades (e.g. InternalPositionImplv2).
    access(all) resource interface InternalPosition {

        // --- Health Parameters ---

        /// The position-specific target health, for auto-balancing purposes.
        /// When the position health moves outside the range [minHealth, maxHealth], the balancing operation
        /// should result in a position health of targetHealth.
        access(all) view fun getTargetHealth(): UFix128

        /// The position-specific minimum health threshold, below which a position is considered undercollateralized.
        /// When a position is under-collateralized, it is eligible for rebalancing.
        /// NOTE: An under-collateralized position is distinct from an unhealthy position, and cannot be liquidated
        access(all) view fun getMinHealth(): UFix128

        /// The position-specific maximum health threshold, above which a position is considered overcollateralized.
        /// When a position is over-collateralized, it is eligible for rebalancing.
        access(all) view fun getMaxHealth(): UFix128

        /// Sets the target health. See getTargetHealth for additional details.
        /// Target health must be greater than minHealth and less than maxHealth.
        access(EImplementation) fun setTargetHealth(_ targetHealth: UFix128)

        /// Sets the minimum health. See getMinHealth for additional details.
        /// Minimum health must be greater than 1.0 and less than targetHealth.
        access(EImplementation) fun setMinHealth(_ minHealth: UFix128)

        /// Sets the maximum health. See getMaxHealth for additional details.
        /// Maximum health must be greater than targetHealth.
        access(EImplementation) fun setMaxHealth(_ maxHealth: UFix128)

        // --- Balances ---

        /// Returns the balance for a given token type, or nil if no balance exists
        access(all) view fun getBalance(_ type: Type): InternalBalance?

        /// Sets the balance for a given token type. See getBalance for additional details.
        access(EImplementation) fun setBalance(_ type: Type, _ balance: InternalBalance)

        /// Returns a mutable reference to the balance for a given token type, or nil if no balance exists.
        /// Used for in-place mutations like recordDeposit/recordWithdrawal.
        access(EImplementation) fun borrowBalance(_ type: Type): &InternalBalance?

        /// Returns the set of token types for which the position has balances
        access(all) view fun getBalanceKeys(): [Type]

        /// Returns a value-copy of all balances, suitable for constructing a PositionView
        access(EImplementation) fun copyBalances(): {Type: InternalBalance}

        // --- Queued Deposits ---

        /// Deposits a vault into the queue for the given token type.
        /// If a queued deposit already exists for this type, the vault's balance is added to it.
        access(EImplementation) fun depositToQueue(_ type: Type, vault: @{FungibleToken.Vault})

        /// Removes and returns the queued deposit vault for the given token type, or nil if none exists
        access(EImplementation) fun removeQueuedDeposit(_ type: Type): @{FungibleToken.Vault}?

        /// Returns the token types that have queued deposits
        access(all) view fun getQueuedDepositKeys(): [Type]

        /// Returns the number of queued deposit entries
        access(all) view fun getQueuedDepositsLength(): Int

        /// Returns whether a queued deposit exists for the given token type
        access(all) view fun hasQueuedDeposit(_ type: Type): Bool

        // --- Draw Down Sink ---

        /// Returns an authorized reference to the draw-down sink, or nil if none is configured.
        /// The draw-down sink receives excess collateral when the position exceeds its maximum health.
        access(EImplementation) fun borrowDrawDownSink(): auth(FungibleToken.Withdraw) &{DeFiActions.Sink}?

        /// Sets the draw-down sink. See borrowDrawDownSink for additional details.
        /// If nil, the Pool will not push overflown value.
        /// If a non-nil value is provided, the Sink MUST accept MOET deposits or the operation will revert.
        access(EImplementation) fun setDrawDownSink(_ sink: {DeFiActions.Sink}?)

        // --- Top Up Source ---

        /// Returns an authorized reference to the top-up source, or nil if none is configured.
        /// The top-up source provides additional collateral when the position falls below its minimum health.
        access(EImplementation) fun borrowTopUpSource(): auth(FungibleToken.Withdraw) &{DeFiActions.Source}?

        /// Sets the top-up source. See borrowTopUpSource for additional details.
        /// If nil, the Pool will not pull underflown value, and liquidation may occur.
        access(EImplementation) fun setTopUpSource(_ source: {DeFiActions.Source}?)
    }

    /// InternalPositionImplv1 is the concrete implementation of InternalPosition.
    /// Fields are private (access(self)) and accessed only via getter/setter/borrow functions.
    access(all) resource InternalPositionImplv1: InternalPosition {

        /// The position-specific target health, for auto-balancing purposes.
        /// When the position health moves outside the range [minHealth, maxHealth], the balancing operation
        /// should result in a position health of targetHealth.
        access(self) var targetHealth: UFix128
        /// The position-specific minimum health threshold, below which a position is considered undercollateralized.
        /// When a position is under-collateralized, it is eligible for rebalancing.
        /// NOTE: An under-collateralized position is distinct from an unhealthy position, and cannot be liquidated
        access(self) var minHealth: UFix128
        /// The position-specific maximum health threshold, above which a position is considered overcollateralized.
        /// When a position is over-collateralized, it is eligible for rebalancing.
        access(self) var maxHealth: UFix128
        /// Per-token balances for this position, tracking credit and debit amounts
        access(self) var balances: {Type: InternalBalance}
        /// Queued deposit vaults waiting to be processed during asynchronous updates
        access(self) var queuedDeposits: @{Type: {FungibleToken.Vault}}
        /// The draw-down sink receives excess collateral when the position exceeds its maximum health.
        access(self) var drawDownSink: {DeFiActions.Sink}?
        /// The top-up source provides additional collateral when the position falls below its minimum health.
        access(self) var topUpSource: {DeFiActions.Source}?

        init() {
            self.balances = {}
            self.queuedDeposits <- {}
            self.targetHealth = 1.3
            self.minHealth = 1.1
            self.maxHealth = 1.5
            self.drawDownSink = nil
            self.topUpSource = nil
        }

        // --- Health Parameters ---

        /// Returns the position-specific target health for auto-balancing. See InternalPosition.getTargetHealth.
        access(all) view fun getTargetHealth(): UFix128 {
            return self.targetHealth
        }

        /// Returns the position-specific minimum health threshold. See InternalPosition.getMinHealth.
        access(all) view fun getMinHealth(): UFix128 {
            return self.minHealth
        }

        /// Returns the position-specific maximum health threshold. See InternalPosition.getMaxHealth.
        access(all) view fun getMaxHealth(): UFix128 {
            return self.maxHealth
        }

        /// Sets the target health. Must be between minHealth and maxHealth.
        access(EImplementation) fun setTargetHealth(_ targetHealth: UFix128) {
            pre {
                targetHealth > self.minHealth: "Target health (\(targetHealth)) must be greater than min health (\(self.minHealth))"
                targetHealth < self.maxHealth: "Target health (\(targetHealth)) must be less than max health (\(self.maxHealth))"
            }
            self.targetHealth = targetHealth
        }

        /// Sets the minimum health. Must be greater than 1.0 and less than targetHealth.
        access(EImplementation) fun setMinHealth(_ minHealth: UFix128) {
            pre {
                minHealth > 1.0: "Min health (\(minHealth)) must be >1"
                minHealth < self.targetHealth: "Min health (\(minHealth)) must be greater than target health (\(self.targetHealth))"
            }
            self.minHealth = minHealth
        }

        /// Sets the maximum health. Must be greater than targetHealth.
        access(EImplementation) fun setMaxHealth(_ maxHealth: UFix128) {
            pre {
                maxHealth > self.targetHealth: "Max health (\(maxHealth)) must be greater than target health (\(self.targetHealth))"
            }
            self.maxHealth = maxHealth
        }

        // --- Balances ---

        /// Returns the balance for a given token type, or nil if no balance exists.
        access(all) view fun getBalance(_ type: Type): InternalBalance? {
            return self.balances[type]
        }

        /// Sets the balance for a given token type.
        access(EImplementation) fun setBalance(_ type: Type, _ balance: InternalBalance) {
            self.balances[type] = balance
        }

        /// Returns a mutable reference to the balance for a given token type, or nil if no balance exists.
        access(EImplementation) fun borrowBalance(_ type: Type): &InternalBalance? {
            return &self.balances[type]
        }

        /// Returns the set of token types for which the position has balances.
        access(all) view fun getBalanceKeys(): [Type] {
            return self.balances.keys
        }

        /// Returns a value-copy of all balances, suitable for constructing a PositionView.
        access(EImplementation) fun copyBalances(): {Type: InternalBalance} {
            return self.balances
        }

        // --- Queued Deposits ---

        /// Deposits a vault into the queue for the given token type. Merges with existing queued deposit if present.
        access(EImplementation) fun depositToQueue(_ type: Type, vault: @{FungibleToken.Vault}) {
            if self.queuedDeposits[type] == nil {
                self.queuedDeposits[type] <-! vault
            } else {
                let ref = &self.queuedDeposits[type] as &{FungibleToken.Vault}?
                    ?? panic("Expected queued deposit for type")
                ref.deposit(from: <-vault)
            }
        }

        /// Removes and returns the queued deposit vault for the given token type, or nil if none exists.
        access(EImplementation) fun removeQueuedDeposit(_ type: Type): @{FungibleToken.Vault}? {
            return <- self.queuedDeposits.remove(key: type)
        }

        /// Returns the token types that have queued deposits.
        access(all) view fun getQueuedDepositKeys(): [Type] {
            return self.queuedDeposits.keys
        }

        /// Returns the number of queued deposit entries.
        access(all) view fun getQueuedDepositsLength(): Int {
            return self.queuedDeposits.length
        }

        /// Returns whether a queued deposit exists for the given token type.
        access(all) view fun hasQueuedDeposit(_ type: Type): Bool {
            return self.queuedDeposits[type] != nil
        }

        // --- Draw Down Sink ---

        /// Returns an authorized reference to the draw-down sink, or nil if none is configured.
        access(EImplementation) fun borrowDrawDownSink(): auth(FungibleToken.Withdraw) &{DeFiActions.Sink}? {
            return &self.drawDownSink as auth(FungibleToken.Withdraw) &{DeFiActions.Sink}?
        }

        /// Sets the draw-down sink. Sink must accept MOET deposits, or be nil.
        access(EImplementation) fun setDrawDownSink(_ sink: {DeFiActions.Sink}?) {
            pre {
                sink == nil || sink!.getSinkType() == Type<@MOET.Vault>():
                    "Invalid Sink provided - Sink must accept MOET"
            }
            self.drawDownSink = sink
        }

        // --- Top Up Source ---

        /// Returns an authorized reference to the top-up source, or nil if none is configured.
        access(EImplementation) fun borrowTopUpSource(): auth(FungibleToken.Withdraw) &{DeFiActions.Source}? {
            return &self.topUpSource as auth(FungibleToken.Withdraw) &{DeFiActions.Source}?
        }

        /// Sets the top-up source. See InternalPosition.setTopUpSource.
        /// TODO(jord): User can provide top-up source containing unsupported token type. Then later rebalances will revert.
        /// Possibly an attack vector on automated rebalancing, if multiple positions are rebalanced in the same transaction.
        access(EImplementation) fun setTopUpSource(_ source: {DeFiActions.Source}?) {
            self.topUpSource = source
        }
    }

    /// Factory function to create a new InternalPositionImplv1 resource.
    /// Required because Cadence resources can only be created within their containing contract.
    access(all) fun createInternalPosition(): @{InternalPosition} {
        return <- create InternalPositionImplv1()
    }

    /// Factory function to create a new PoolStateImpl resource.
    /// Required because Cadence resources can only be created within their containing contract.
    access(all) fun createPoolState(
        globalLedger: {Type: {TokenState}},
        reserves: @{Type: {FungibleToken.Vault}},
        insuranceFund: @MOET.Vault,
        nextPositionID: UInt64,
        defaultToken: Type,
        stabilityFunds: @{Type: {FungibleToken.Vault}},
        positionsNeedingUpdates: [UInt64],
        positionLock: {UInt64: Bool}
    ): @{PoolState} {
        return <- create PoolStateImpl(
            globalLedger: globalLedger,
            reserves: <-reserves,
            insuranceFund: <-insuranceFund,
            nextPositionID: nextPositionID,
            defaultToken: defaultToken,
            stabilityFunds: <-stabilityFunds,
            positionsNeedingUpdates: positionsNeedingUpdates,
            positionLock: positionLock
        )
    }
}