[liamscroxx-svg]

Fixes the frontend Soroban transaction path: invocations are now encoded correctly, target the right contract, expire after a bounded window, and create markets with the arguments the factory contract declares. Each issue is its own commit.

Commits

• d138dab2 fix: F-83: buildSorobanInvocation builds an invalid host function and ignores contractId #1421 build invocations with Contract.call against the given contract
• f0f570cc fix: F-84: Use a bounded transaction timeout instead of Timeout.INFINITE #1422 bound transaction validity to 120s and map expired txs
• 77a942e5 fix: F-82: Place-bet, claim and dispute hooks pass market_id as the contract address #1420 target the market's contract address for bet and claim calls
• a958f4d3 fix: F-81: useCreateMarket sends a placeholder contract id and the wrong create_market arguments #1419 call create_market with the configured factory and typed args

Behaviour changes

• buildSorobanInvocation uses new Contract(contractId).call(method, ...args) and validates contractId is a C... address before touching the network.
• Arguments that are already ScVals pass through unchanged; toU64ScVal encodes u64 timestamps.
• The build used Timeout.INFINITE from an export the SDK does not have, so every build threw a TypeError. It now uses a 120 s window (TX_TIMEOUT_SECONDS).
• The all-zero placeholder signature was rejected by the SDK as invalid. It is removed; the wallet signs the returned XDR.
• A txTooLate rejection surfaces as TX_EXPIRED_MESSAGE ("please try again").
• usePlaceBet takes the market's contractAddress as a second argument. useClaimWinnings, useClaimRefund and DisputeModal use market.contractAddress.
• useCreateMarket reads NEXT_PUBLIC_MARKET_FACTORY_CONTRACT_ID from validated config and sends (caller, fighter_a, fighter_b, oracle, lock_time, end_time). Fighter metadata goes to POST /api/markets with the tx hash after confirmation.
• zod is declared in frontend/package.json; lib/config.ts already imported it.

Testing

• New: __tests__/lib/stellar.invocation.test.ts decodes the built XDR and asserts the contract id, function name, argument types, maxTime, and the expiry mapping.
• New: __tests__/useClaimRefund.test.ts.
• Updated: usePlaceBet, useClaimWinnings, useCreateMarket, DisputeModal tests assert the target contract and encoded arguments. Hook tests mock useWallet with a factory, because hooks/useWallet.ts contains JSX under a .ts extension and cannot be automocked.
• npx jest: 5 suites that were failing on main now pass (useCreateMarket, usePlaceBet, useClaimWinnings, useClaimRefund, stellar.invocation). No suite that passed on main fails.

Not done here

• Testnet verification (F-83: buildSorobanInvocation builds an invalid host function and ignores contractId #1421 AC): not run; no network access from the build environment. Steps: deploy or use the factory, run buildSorobanInvocation against Testnet simulation, submit, check getTransaction.
• npm ci is broken on main: package-lock.json is out of sync with package.json (see Frontend CI broken on main: package-lock.json out of sync with package.json #1333). This PR does not regenerate the lockfile.
• DisputeModal snapshot is time-dependent (renders a clock), so it can fail between runs.
• hooks/useWallet.ts contains JSX in a .ts file, which breaks any test that loads it. Not changed here.
• Bet side encoding: place_bet receives the side as a string. The contract's BetSide enum encoding is not verified here.

Closes #1419
Closes #1420
Closes #1421
Closes #1422