feat(contracts): add get_depositor_yield() view function to LendingPool

[Sundriveauto]

Closes #458

Problem

The LendingPool contract had no on-chain way for depositors to query their current yield. They had to fetch share price externally and do manual math.

Solution

Added get_depositor_yield(env, provider, token) -> (i128, i128) which returns:

• shares — LP shares held by the provider
• asset_value — current redemption value of those shares (principal + accrued yield)

Net yield = asset_value - original_deposit. Since original deposit amounts are not stored per-depositor, callers compare asset_value against their own recorded cost basis.

The implementation reuses existing private helpers (read_shares, total_shares, read_pool_balance, calc_assets_to_redeem) with no new storage.

Tests

Added 2 tests to test.rs:

• test_get_depositor_yield_no_deposit — returns (0, 0) for a provider with no position
• test_get_depositor_yield_reflects_accrued_interest — verifies asset_value increases when interest is repaid into the pool without new shares being minted

@ogazboiz Pls review Conflict

[ogazboiz]

The get_depositor_yield function looks correct and the tests cover the key cases.

Two things before this can merge:

1. Remove .kiro/settings/lsp.json
This is an IDE settings file from the Kiro editor and should not be in the repo. Add .kiro/ to your .gitignore and remove the file:

git rm -r .kiro/
echo '.kiro/' >> .gitignore
git commit -m 'chore: remove Kiro IDE settings, add to gitignore'

2. CI needs approval
The CI run is showing action_required which means it hasn't started yet. A maintainer will approve the CI run after you push the fix.

[ogazboiz]

The codebase issues on main have been resolved and all CI checks are passing now. Please rebase your branch to pull in the latest changes before continuing. Thanks for your patience.

[Sundriveauto]

@ogazboiz i have done that

[ogazboiz]

This PR includes the entire diff of PR #600 (timeout changes, .kiro file, lockfile noise). The contract code for get_depositor_yield is correct and well tested. Please rebase onto a clean branch without the #600 backend changes. Run cargo fmt.

[Sundriveauto]

@ogazboiz review

[ogazboiz]

All three feedback items addressed. The branch is clean now with just the contract changes. Same as #600 though, CI hasn't run on this branch. Push an empty commit to trigger it: git commit --allow-empty -m 'trigger CI' && git push

[Sundriveauto]

@ogazboiz review

[ogazboiz]

heads up, a few important changes just landed on main that affect your PR:

1. axios pinned to 1.13.5 - there's an active supply chain attack on axios 1.14.1 (pulls in confirmed malware). we added overrides in all package.json files to block it.

2. CI now runs a supply chain audit before backend/frontend jobs. if your lockfile has a compromised package, CI will fail with a clear error.

3. backend test fixes - loanEndpoints tests now use valid Stellar addresses and base64 strings. if your PR was failing backend CI but you didn't touch backend code, this should fix it after rebase.

please rebase on latest main:

git fetch upstream
git rebase upstream/main
git push --force-with-lease

[Sundriveauto]

@ogazboiz rebase done

[ogazboiz]

hey @Sundriveauto, code looks good. the get_depositor_yield view function is clean and the tests cover both the zero-deposit and accrued-interest cases. merging!

if you want to keep contributing or follow up on open issues, join us on Telegram: https://t.me/+DOylgFv1jyJlNzM0