From 1ff436cd6e77496732478fb55f8e217054bb4635 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 19:13:18 -0400
Subject: [PATCH 01/32] Test Actions

---
 .../workflows/mutationTestingAlertsReview.yml | 218 ++++++++++++++++++
 .github/workflows/olympixMutationTesting.yml  |  64 +++++
 2 files changed, 282 insertions(+)
 create mode 100644 .github/workflows/mutationTestingAlertsReview.yml
 create mode 100644 .github/workflows/olympixMutationTesting.yml

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
new file mode 100644
index 000000000..d180d2923
--- /dev/null
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -0,0 +1,218 @@
+name: Mutation Testing PR Summary
+
+# - generates a PR comment summary of mutation testing results from GitHub Code Scanning
+# - lists surviving mutants (test coverage gaps) found in the changed files
+# - shows how many mutants were dismissed with proper justification
+# - reports net unresolved findings that need attention
+# - provides a clear overview of test coverage quality for the PR
+# - leaves a summary comment starting with "🧪 Mutation Testing Summary"
+
+on:
+  pull_request:
+    types:
+      - ready_for_review
+    paths:
+      - 'src/**/*.sol'
+  workflow_dispatch:
+
+permissions:
+  contents: read # required to fetch repository contents
+  pull-requests: write # required to post, update PR comments & revert PR to draft
+  issues: write # required to post comments via the GitHub Issues API (used for PR comments)
+
+jobs:
+  mutation-testing-summary:
+    runs-on: ubuntu-latest
+
+    steps:
+
+      - uses: actions/checkout@v4
+
+      - uses: jwalton/gh-find-current-pr@master
+        id: findPr
+
+      - name: Validate and set PR Number
+        id: fetch_pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+        run: |
+          if [ -z "${{ steps.findPr.outputs.number }}" ]; then
+            echo "Error: No pull request found for this push." >&2
+            exit 1
+          fi
+          echo "Found PR number: ${{ steps.findPr.outputs.number }}"
+          PR_NUMBER=${{ steps.findPr.outputs.number }}
+          echo "PR_NUMBER=$PR_NUMBER" >> $GITHUB_ENV
+          echo "Pull Request Number is: $PR_NUMBER"
+
+      - name: Fetch Mutation Testing Results for PR
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+        run: |
+          echo "Fetching mutation testing results for PR #${PR_NUMBER}..."
+
+          # Fetch mutation testing results from GitHub Code Scanning
+          MUTATIONS=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+            "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?pr=${PR_NUMBER}")
+
+          echo "Filtering to Olympix Mutation Testing results only"
+          MUTATIONS=$(echo "$MUTATIONS" | jq -c '[ .[] | select(.tool.name == "Olympix Mutation Testing") ]' || echo "[]")
+
+          # Extract surviving mutants (open - test coverage gaps)
+          SURVIVING_MUTANTS=$(echo "$MUTATIONS" | jq -c '[.[] | select(.state == "open") ]' || echo "[]")
+          # Extract dismissed mutants (acknowledged coverage gaps)
+          DISMISSED_MUTANTS=$(echo "$MUTATIONS" | jq -c '[.[] | select(.state == "dismissed")]' || echo "[]")
+
+          SURVIVING_COUNT=$(echo "$SURVIVING_MUTANTS" | jq -r 'length')
+          DISMISSED_COUNT=$(echo "$DISMISSED_MUTANTS" | jq -r 'length')
+          TOTAL_MUTANTS=$((SURVIVING_COUNT + DISMISSED_COUNT))
+
+          # Output for debugging
+          echo "SURVIVING_MUTANTS: $SURVIVING_MUTANTS"
+          echo "DISMISSED_MUTANTS: $DISMISSED_MUTANTS"
+          echo "SURVIVING_COUNT: $SURVIVING_COUNT"
+          echo "DISMISSED_COUNT: $DISMISSED_COUNT"
+          echo "TOTAL_MUTANTS: $TOTAL_MUTANTS"
+
+          # Save values in the environment
+          echo "SURVIVING_MUTANTS=$SURVIVING_MUTANTS" >> $GITHUB_ENV
+          echo "DISMISSED_MUTANTS=$DISMISSED_MUTANTS" >> $GITHUB_ENV
+          echo "SURVIVING_COUNT=$SURVIVING_COUNT" >> $GITHUB_ENV
+          echo "DISMISSED_COUNT=$DISMISSED_COUNT" >> $GITHUB_ENV
+          echo "TOTAL_MUTANTS=$TOTAL_MUTANTS" >> $GITHUB_ENV
+
+      - name: Find Existing PR Comment
+        id: find_comment
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+        run: |
+          echo "Searching for existing PR comment..."
+
+          COMMENT_ID=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+            "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" | jq -r \
+            '.[] | select(.body | startswith("## 🧪 Mutation Testing Summary")) | .id')
+
+          if [[ -n "$COMMENT_ID" && "$COMMENT_ID" != "null" ]]; then
+            echo "EXISTING_COMMENT_ID=$COMMENT_ID" >> $GITHUB_ENV
+          fi
+
+          echo "Found comment ID: $COMMENT_ID"
+
+      - name: Post or Update PR Comment
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+        run: |
+          COMMENT_BODY="## 🧪 Mutation Testing Summary\n\n"
+
+          # Summary stats
+          if [[ "$TOTAL_MUTANTS" -gt 0 ]]; then
+            COMMENT_BODY+="📊 **Results Overview:**\n"
+            COMMENT_BODY+="- **Total Mutants:** $TOTAL_MUTANTS\n"
+            COMMENT_BODY+="- **Surviving Mutants:** $SURVIVING_COUNT (test coverage gaps)\n"
+            COMMENT_BODY+="- **Dismissed Mutants:** $DISMISSED_COUNT (acknowledged)\n\n"
+
+            # Calculate mutation score if we have data
+            if [[ "$TOTAL_MUTANTS" -gt 0 ]]; then
+              KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
+              MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
+              COMMENT_BODY+="🎯 **Mutation Score:** ${MUTATION_SCORE}% (${KILLED_COUNT}/${TOTAL_MUTANTS} mutants killed)\n\n"
+            fi
+          else
+            COMMENT_BODY+="ℹ️ No mutation testing results found for this PR.\n\n"
+          fi
+
+          # List surviving mutants
+          if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
+            COMMENT_BODY+="### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n"
+            while IFS= read -r row; do
+              MUTANT_URL=$(echo "$row" | jq -r '.html_url')
+              MUTANT_FILE=$(echo "$row" | jq -r '.most_recent_instance.location.path')
+              MUTANT_LINE=$(echo "$row" | jq -r '.most_recent_instance.location.start_line')
+              MUTANT_DESCRIPTION=$(echo "$row" | jq -r '.most_recent_instance.message.text')
+
+              COMMENT_BODY+="- [\`$MUTANT_FILE:$MUTANT_LINE\`]($MUTANT_URL)\n"
+              COMMENT_BODY+="  $MUTANT_DESCRIPTION\n\n"
+            done < <(echo "$SURVIVING_MUTANTS" | jq -c '.[]')
+          fi
+
+          # List dismissed mutants
+          if [[ "$DISMISSED_COUNT" -gt 0 ]]; then
+            COMMENT_BODY+="### ✅ Dismissed Mutants\n\n"
+            while IFS= read -r row; do
+              MUTANT_URL=$(echo "$row" | jq -r '.html_url')
+              MUTANT_FILE=$(echo "$row" | jq -r '.most_recent_instance.location.path')
+              MUTANT_LINE=$(echo "$row" | jq -r '.most_recent_instance.location.start_line')
+              DISMISS_REASON=$(echo "$row" | jq -r '.dismissed_reason // "No reason"')
+              DISMISS_COMMENT=$(echo "$row" | jq -r '.dismissed_comment // "No comment"')
+
+              COMMENT_BODY+="- [\`$MUTANT_FILE:$MUTANT_LINE\`]($MUTANT_URL) - **$DISMISS_REASON**\n"
+              if [[ "$DISMISS_COMMENT" != "No comment" ]]; then
+                COMMENT_BODY+="  _${DISMISS_COMMENT}_\n\n"
+              else
+                COMMENT_BODY+="\n"
+              fi
+            done < <(echo "$DISMISSED_MUTANTS" | jq -c '.[]')
+          fi
+
+          # Net unresolved findings
+          COMMENT_BODY+="### 📋 Net Unresolved Findings\n\n"
+          if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
+            COMMENT_BODY+="⚠️ **${SURVIVING_COUNT} test coverage gap(s)** need attention\n\n"
+            COMMENT_BODY+="**Next Steps:**\n"
+            COMMENT_BODY+="1. Review surviving mutants above\n"
+            COMMENT_BODY+="2. Add tests to kill these mutants or dismiss with justification\n"
+            COMMENT_BODY+="3. Aim for high mutation score to ensure robust test coverage\n"
+          else
+            COMMENT_BODY+="🎉 **No unresolved test coverage gaps!**\n"
+            COMMENT_BODY+="All mutants were either killed by tests or properly dismissed.\n"
+          fi
+
+          # Update existing comment if found; otherwise, post a new one.
+          if [[ -n "$EXISTING_COMMENT_ID" ]]; then
+            echo "Updating existing comment ID: $EXISTING_COMMENT_ID"
+            curl -s -X PATCH -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
+              -d "{\"body\": \"$COMMENT_BODY\"}" \
+              "https://api.github.com/repos/${{ github.repository }}/issues/comments/${EXISTING_COMMENT_ID}"
+          else
+            echo "Posting new comment to PR..."
+            curl -s -X POST -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
+              -d "{\"body\": \"$COMMENT_BODY\"}" \
+              "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments"
+          fi
+
+      - name: Check if Action Should Fail And Revert To Draft
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+          PR_NUMBER: ${{ env.PR_NUMBER }}
+        run: |
+          echo "🔍 Checking if the workflow should fail and revert PR to draft based on mutation testing alerts..."
+
+          # Check if there are any unresolved alerts, dismissed alerts missing comments, or invalid dismissal reasons.
+          if [[ "$UNRESOLVED_COUNT" -gt 0 || "$DISMISSED_COUNT" -gt 0 || "$INVALID_REASON_COUNT" -gt 0 ]]; then
+            echo "❌ ERROR: Found issues in the PR:"
+            if [[ "$UNRESOLVED_COUNT" -gt 0 ]]; then
+              echo "- $UNRESOLVED_COUNT surviving mutant(s) found!"
+            fi
+            if [[ "$DISMISSED_COUNT" -gt 0 ]]; then
+              echo "- $DISMISSED_COUNT mutant(s) were dismissed without comments!"
+            fi
+            if [[ "$INVALID_REASON_COUNT" -gt 0 ]]; then
+              echo "- $INVALID_REASON_COUNT mutant(s) have an invalid dismissal reason (\"Used in tests\")."
+            fi
+            echo "⚠️ These test coverage gaps must be resolved before merging."
+
+          # Retrieve PR Node ID directly from github event
+          PULL_REQUEST_NODE_ID="${{ github.event.pull_request.node_id }}"
+          echo "PR Node ID: $PULL_REQUEST_NODE_ID"
+
+            # Revert the PR to draft.
+            echo "Reverting PR #${PR_NUMBER} to draft state due to blocking test coverage issues..."
+            curl -H "Authorization: Bearer $GITHUB_TOKEN" \
+                 -H "Content-Type: application/json" \
+                 -X POST \
+                 -d '{"query": "mutation { convertPullRequestToDraft(input: {pullRequestId: \"'"$PULL_REQUEST_NODE_ID"'\"}) { pullRequest { id isDraft } } }"}' \
+                 https://api.github.com/graphql
+            exit 1
+          fi
+
+          echo "✅ No blocking test coverage issues found. The workflow will pass successfully." 
\ No newline at end of file
diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
new file mode 100644
index 000000000..0715c7ecc
--- /dev/null
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -0,0 +1,64 @@
+name: Olympix Mutation Testing
+
+# - runs the olympix mutation testing on newly added or modified solidity contracts inside the src/ folder in a pull request
+# - evaluates test suite quality by introducing code mutations and checking if tests catch them
+# - only scans diff (added, renamed, modified) solidity files in src/ instead of the whole repository
+# - uploads mutation testing results to github code scanning for review and discussion within the PR
+
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+    paths:
+      - 'src/**/*.sol'
+
+permissions:
+  contents: read # required to fetch repository contents
+  security-events: write # required to upload SARIF results to GitHub Code Scanning
+
+jobs:
+  mutation-testing:
+    name: Mutation Testing Quality Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Get added, renamed, modified Solidity Files
+        id: changed-files
+        uses: tj-actions/changed-files@v45
+        with:
+          files: |
+            src/**/*.sol
+
+      - name: Convert Changed Files to Args
+        if: steps.changed-files.outputs.any_changed == 'true'
+        id: format-args
+        env:
+          ALL_CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
+        run: |
+          # Convert relative paths to absolute paths and format as --path arguments
+          args=""
+          for file in $ALL_CHANGED_FILES; do
+            args="$args --path $GITHUB_WORKSPACE/$file"
+          done
+          echo "ARGS=$args" >> $GITHUB_ENV
+
+      - name: Run Olympix Mutation Testing
+        if: steps.changed-files.outputs.any_changed == 'true'
+        uses: olympix/integrated-security@main
+        env:
+          OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}
+        with:
+          args: generate-mutation-tests -w $GITHUB_WORKSPACE ${{ env.ARGS }} --timeout 300 --include-dot-env
+
+      - name: Wait for Mutation Testing Results
+        if: steps.changed-files.outputs.any_changed == 'true'
+        run: |
+          echo "✅ Mutation testing initiated successfully"
+          echo "📊 Results will be uploaded to GitHub Code Scanning automatically"
+          echo "🔍 Check the Security tab for mutation testing alerts" 
\ No newline at end of file

From a93ef4d9973f6eb318fa2b2b7a294e20712a8b60 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 19:30:49 -0400
Subject: [PATCH 02/32] Adjust Mutation Test Run

---
 .github/workflows/olympixMutationTesting.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 0715c7ecc..28e9ff741 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -53,6 +53,9 @@ jobs:
         uses: olympix/integrated-security@main
         env:
           OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}
+          GITHUB_REPOSITORY_ID: ${{ github.repository_id }}
+          OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
+          OPIX_DEBUG: true
         with:
           args: generate-mutation-tests -w $GITHUB_WORKSPACE ${{ env.ARGS }} --timeout 300 --include-dot-env
 

From f9bff591f7f3dec4508669eaeb4623ce50c0bb8b Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 19:36:46 -0400
Subject: [PATCH 03/32] Add manual trigger

---
 .github/workflows/olympixMutationTesting.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 0715c7ecc..c8adcb9d3 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -14,6 +14,7 @@ on:
       - ready_for_review
     paths:
       - 'src/**/*.sol'
+  workflow_dispatch:
 
 permissions:
   contents: read # required to fetch repository contents

From a703e6a4f3ec962aee60663ce40fe683930d9746 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 19:39:06 -0400
Subject: [PATCH 04/32] Manual run, check all files

---
 .github/workflows/olympixMutationTesting.yml | 43 ++++++++++++++++----
 1 file changed, 36 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 8a12c2067..ab37c8f99 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -29,28 +29,57 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
-      - name: Get added, renamed, modified Solidity Files
+      - name: Get Solidity Files
+        id: get-files
+        run: |
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            # Manual run: get all Solidity files in src/
+            echo "Manual trigger detected - analyzing all Solidity files in src/"
+            ALL_FILES=$(find src/ -name "*.sol" -type f | tr '\n' ' ')
+            echo "FILES_CHANGED=true" >> $GITHUB_ENV
+          else
+            # PR trigger: get changed files only
+            echo "PR trigger detected - analyzing changed Solidity files only"
+            # This will be handled by the changed-files action below
+            echo "FILES_CHANGED=false" >> $GITHUB_ENV
+          fi
+          echo "ALL_SOL_FILES=$ALL_FILES" >> $GITHUB_ENV
+
+      - name: Get added, renamed, modified Solidity Files (PR only)
+        if: github.event_name != 'workflow_dispatch'
         id: changed-files
         uses: tj-actions/changed-files@v45
         with:
           files: |
             src/**/*.sol
 
-      - name: Convert Changed Files to Args
-        if: steps.changed-files.outputs.any_changed == 'true'
+      - name: Convert Files to Args
         id: format-args
-        env:
-          ALL_CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
         run: |
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            # Manual run: use all files
+            files="$ALL_SOL_FILES"
+            echo "SHOULD_RUN=true" >> $GITHUB_ENV
+          else
+            # PR run: use changed files
+            if [[ "${{ steps.changed-files.outputs.any_changed }}" == "true" ]]; then
+              files="${{ steps.changed-files.outputs.all_changed_files }}"
+              echo "SHOULD_RUN=true" >> $GITHUB_ENV
+            else
+              echo "SHOULD_RUN=false" >> $GITHUB_ENV
+              exit 0
+            fi
+          fi
+          
           # Convert relative paths to absolute paths and format as --path arguments
           args=""
-          for file in $ALL_CHANGED_FILES; do
+          for file in $files; do
             args="$args --path $GITHUB_WORKSPACE/$file"
           done
           echo "ARGS=$args" >> $GITHUB_ENV
 
       - name: Run Olympix Mutation Testing
-        if: steps.changed-files.outputs.any_changed == 'true'
+        if: env.SHOULD_RUN == 'true'
         uses: olympix/integrated-security@main
         env:
           OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}

From 2640407b9892bbef37ce3bb4552a61a5b6582a96 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 19:41:20 -0400
Subject: [PATCH 05/32] Manual run, check all files

---
 .github/workflows/olympixMutationTesting.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index ab37c8f99..6f8285970 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -71,10 +71,10 @@ jobs:
             fi
           fi
           
-          # Convert relative paths to absolute paths and format as --path arguments
+          # Convert relative paths to --path arguments (use relative paths, not absolute)
           args=""
           for file in $files; do
-            args="$args --path $GITHUB_WORKSPACE/$file"
+            args="$args --path $file"
           done
           echo "ARGS=$args" >> $GITHUB_ENV
 
@@ -87,7 +87,7 @@ jobs:
           OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
           OPIX_DEBUG: true
         with:
-          args: generate-mutation-tests -w $GITHUB_WORKSPACE ${{ env.ARGS }} --timeout 300 --include-dot-env
+          args: generate-mutation-tests -w /github/workspace ${{ env.ARGS }} --timeout 300 --include-dot-env
 
       - name: Wait for Mutation Testing Results
         if: steps.changed-files.outputs.any_changed == 'true'

From 68ffca6f1fe21fb3f5c2f9a3440af2317451e30f Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 20:01:52 -0400
Subject: [PATCH 06/32] Fix mutation test action

---
 .github/workflows/olympixMutationTesting.yml | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 6f8285970..e0a7e7c53 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -71,23 +71,19 @@ jobs:
             fi
           fi
           
-          # Convert relative paths to --path arguments (use relative paths, not absolute)
-          args=""
-          for file in $files; do
-            args="$args --path $file"
-          done
+          # Use same format as static analysis: -p arguments
+          args=$(echo "$files" | xargs -n 1 printf -- "-p %s ")
           echo "ARGS=$args" >> $GITHUB_ENV
 
       - name: Run Olympix Mutation Testing
         if: env.SHOULD_RUN == 'true'
-        uses: olympix/integrated-security@main
+        uses: olympix/mutation-test-generator@main
         env:
           OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}
           GITHUB_REPOSITORY_ID: ${{ github.repository_id }}
           OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
-          OPIX_DEBUG: true
         with:
-          args: generate-mutation-tests -w /github/workspace ${{ env.ARGS }} --timeout 300 --include-dot-env
+          args: ${{ env.ARGS }}
 
       - name: Wait for Mutation Testing Results
         if: steps.changed-files.outputs.any_changed == 'true'

From 054a513751bd90b76291f78815a19b5c4c43cdc2 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Fri, 1 Aug 2025 20:03:23 -0400
Subject: [PATCH 07/32] Limit how many contracts

---
 .github/workflows/olympixMutationTesting.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index e0a7e7c53..3d850703b 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -57,8 +57,9 @@ jobs:
         id: format-args
         run: |
           if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual run: use all files
-            files="$ALL_SOL_FILES"
+            # Manual run: use all files, but limit to key contracts only
+            echo "Manual run - selecting key contract files only (Facets and core contracts)"
+            files=$(find src/Facets/ -name "*.sol" -type f | head -5)  # Limit to 5 most important contracts
             echo "SHOULD_RUN=true" >> $GITHUB_ENV
           else
             # PR run: use changed files
@@ -74,6 +75,7 @@ jobs:
           # Use same format as static analysis: -p arguments
           args=$(echo "$files" | xargs -n 1 printf -- "-p %s ")
           echo "ARGS=$args" >> $GITHUB_ENV
+          echo "Selected files for mutation testing: $files"
 
       - name: Run Olympix Mutation Testing
         if: env.SHOULD_RUN == 'true'

From 7e97e4bcf5556c2d6e9911ad6d0604173495dd5c Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 15:07:45 -0400
Subject: [PATCH 08/32] Improve manual runner

---
 .github/workflows/olympixMutationTesting.yml | 52 +++++++++++++-------
 1 file changed, 35 insertions(+), 17 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 3d850703b..5cd227b3e 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -24,6 +24,9 @@ jobs:
   mutation-testing:
     name: Mutation Testing Quality Check
     runs-on: ubuntu-latest
+    outputs:
+      SHOULD_RUN: ${{ steps.get-files-list.outputs.SHOULD_RUN }}
+      FILES_JSON: ${{ steps.get-files-list.outputs.FILES_JSON }}
 
     steps:
       - name: Checkout Repository
@@ -53,13 +56,13 @@ jobs:
           files: |
             src/**/*.sol
 
-      - name: Convert Files to Args
-        id: format-args
+      - name: Get Files List
+        id: get-files-list
         run: |
           if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual run: use all files, but limit to key contracts only
-            echo "Manual run - selecting key contract files only (Facets and core contracts)"
-            files=$(find src/Facets/ -name "*.sol" -type f | head -5)  # Limit to 5 most important contracts
+            # Manual run: process all contracts in src/
+            echo "Manual run - processing all contracts in src/"
+            files=$(find src/ -name "*.sol" -type f)
             echo "SHOULD_RUN=true" >> $GITHUB_ENV
           else
             # PR run: use changed files
@@ -67,29 +70,44 @@ jobs:
               files="${{ steps.changed-files.outputs.all_changed_files }}"
               echo "SHOULD_RUN=true" >> $GITHUB_ENV
             else
-              echo "SHOULD_RUN=false" >> $GITHUB_ENV
+              echo "SHOULD_RUN=false" >> $GITHUB_OUTPUT
               exit 0
             fi
           fi
           
-          # Use same format as static analysis: -p arguments
-          args=$(echo "$files" | xargs -n 1 printf -- "-p %s ")
-          echo "ARGS=$args" >> $GITHUB_ENV
+          # Convert to JSON array for matrix strategy
+          file_array=$(echo "$files" | jq -R -s -c 'split("\n")[:-1]')
+          echo "FILES_JSON=$file_array" >> $GITHUB_OUTPUT
+          echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
           echo "Selected files for mutation testing: $files"
 
-      - name: Run Olympix Mutation Testing
-        if: env.SHOULD_RUN == 'true'
+  # Process each file individually 
+  mutation-testing-matrix:
+    name: Mutation Test
+    runs-on: ubuntu-latest
+    needs: mutation-testing
+    if: needs.mutation-testing.outputs.SHOULD_RUN == 'true' && needs.mutation-testing.outputs.FILES_JSON != '[]'
+    strategy:
+      matrix:
+        file: ${{ fromJson(needs.mutation-testing.outputs.FILES_JSON) }}
+      fail-fast: false  # Continue testing other files even if one fails
+    
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Run Olympix Mutation Testing for ${{ matrix.file }}
         uses: olympix/mutation-test-generator@main
         env:
           OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}
           GITHUB_REPOSITORY_ID: ${{ github.repository_id }}
           OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
+          OPIX_DEBUG: true
         with:
-          args: ${{ env.ARGS }}
+          args: generate-mutation-tests -p ${{ matrix.file }}
 
-      - name: Wait for Mutation Testing Results
-        if: steps.changed-files.outputs.any_changed == 'true'
+      - name: Summary
         run: |
-          echo "✅ Mutation testing initiated successfully"
-          echo "📊 Results will be uploaded to GitHub Code Scanning automatically"
-          echo "🔍 Check the Security tab for mutation testing alerts" 
\ No newline at end of file
+          echo "✅ File discovery completed"
+          echo "📝 Files will be processed individually in parallel jobs"
+          echo "🔍 Check the Security tab for mutation testing alerts after completion" 
\ No newline at end of file

From be26a8f031e6f21aa6326eca0d9507c9cc1eb606 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 16:11:33 -0400
Subject: [PATCH 09/32] One file at a time

---
 .github/workflows/olympixMutationTesting.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 5cd227b3e..4b5e872f4 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -81,7 +81,7 @@ jobs:
           echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
           echo "Selected files for mutation testing: $files"
 
-  # Process each file individually 
+  # Process each file individually (sequential to avoid server overload)
   mutation-testing-matrix:
     name: Mutation Test
     runs-on: ubuntu-latest
@@ -90,6 +90,7 @@ jobs:
     strategy:
       matrix:
         file: ${{ fromJson(needs.mutation-testing.outputs.FILES_JSON) }}
+      max-parallel: 1  # Queue one at a time to protect server resources
       fail-fast: false  # Continue testing other files even if one fails
     
     steps:

From 6aa57f995c52c23b68ea94b8dd880025371752d4 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 16:15:28 -0400
Subject: [PATCH 10/32] Batch the files

---
 .github/workflows/olympixMutationTesting.yml | 37 +++++---------------
 1 file changed, 9 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 4b5e872f4..6dfc1cfc5 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -24,9 +24,6 @@ jobs:
   mutation-testing:
     name: Mutation Testing Quality Check
     runs-on: ubuntu-latest
-    outputs:
-      SHOULD_RUN: ${{ steps.get-files-list.outputs.SHOULD_RUN }}
-      FILES_JSON: ${{ steps.get-files-list.outputs.FILES_JSON }}
 
     steps:
       - name: Checkout Repository
@@ -56,8 +53,8 @@ jobs:
           files: |
             src/**/*.sol
 
-      - name: Get Files List
-        id: get-files-list
+      - name: Convert Files to Args
+        id: format-args
         run: |
           if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
             # Manual run: process all contracts in src/
@@ -70,34 +67,18 @@ jobs:
               files="${{ steps.changed-files.outputs.all_changed_files }}"
               echo "SHOULD_RUN=true" >> $GITHUB_ENV
             else
-              echo "SHOULD_RUN=false" >> $GITHUB_OUTPUT
+              echo "SHOULD_RUN=false" >> $GITHUB_ENV
               exit 0
             fi
           fi
           
-          # Convert to JSON array for matrix strategy
-          file_array=$(echo "$files" | jq -R -s -c 'split("\n")[:-1]')
-          echo "FILES_JSON=$file_array" >> $GITHUB_OUTPUT
-          echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
+          # Convert to -p arguments for batch processing
+          args=$(echo "$files" | xargs -n 1 printf -- "-p %s ")
+          echo "ARGS=$args" >> $GITHUB_ENV
           echo "Selected files for mutation testing: $files"
 
-  # Process each file individually (sequential to avoid server overload)
-  mutation-testing-matrix:
-    name: Mutation Test
-    runs-on: ubuntu-latest
-    needs: mutation-testing
-    if: needs.mutation-testing.outputs.SHOULD_RUN == 'true' && needs.mutation-testing.outputs.FILES_JSON != '[]'
-    strategy:
-      matrix:
-        file: ${{ fromJson(needs.mutation-testing.outputs.FILES_JSON) }}
-      max-parallel: 1  # Queue one at a time to protect server resources
-      fail-fast: false  # Continue testing other files even if one fails
-    
-    steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v4
-
-      - name: Run Olympix Mutation Testing for ${{ matrix.file }}
+      - name: Run Olympix Mutation Testing (Batch)
+        if: env.SHOULD_RUN == 'true'
         uses: olympix/mutation-test-generator@main
         env:
           OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}
@@ -105,7 +86,7 @@ jobs:
           OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
           OPIX_DEBUG: true
         with:
-          args: generate-mutation-tests -p ${{ matrix.file }}
+          args: generate-mutation-tests ${{ env.ARGS }}
 
       - name: Summary
         run: |

From e5576c0e966edc698aa3824a03ddba4c30e828d4 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 16:17:44 -0400
Subject: [PATCH 11/32] Batch the files

---
 .github/workflows/olympixMutationTesting.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 6dfc1cfc5..a2bb95df8 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -57,9 +57,10 @@ jobs:
         id: format-args
         run: |
           if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual run: process all contracts in src/
-            echo "Manual run - processing all contracts in src/"
-            files=$(find src/ -name "*.sol" -type f)
+            # Manual run: process contracts in src/ (limited to 95 files to stay under 100 limit)
+            echo "Manual run - processing contracts in src/ (max 95 files)"
+            # Prioritize: Facets first, then main contracts, then helpers, skip interfaces
+            files=$(find src/Facets/ src/Periphery/ src/Helpers/ src/ -maxdepth 1 -name "*.sol" -type f 2>/dev/null | grep -v "/Interfaces/" | head -95)
             echo "SHOULD_RUN=true" >> $GITHUB_ENV
           else
             # PR run: use changed files

From 651619f475d108c22868001d56407606a9e722ac Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 16:26:24 -0400
Subject: [PATCH 12/32] Run 100 files batches

---
 .github/workflows/olympixMutationTesting.yml | 64 +++++++++++++++-----
 1 file changed, 48 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index a2bb95df8..f6d1ea318 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -24,6 +24,9 @@ jobs:
   mutation-testing:
     name: Mutation Testing Quality Check
     runs-on: ubuntu-latest
+    outputs:
+      SHOULD_RUN: ${{ steps.create-batches.outputs.SHOULD_RUN }}
+      BATCHES_JSON: ${{ steps.create-batches.outputs.BATCHES_JSON }}
 
     steps:
       - name: Checkout Repository
@@ -53,33 +56,62 @@ jobs:
           files: |
             src/**/*.sol
 
-      - name: Convert Files to Args
-        id: format-args
+      - name: Create Batches
+        id: create-batches
         run: |
           if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual run: process contracts in src/ (limited to 95 files to stay under 100 limit)
-            echo "Manual run - processing contracts in src/ (max 95 files)"
-            # Prioritize: Facets first, then main contracts, then helpers, skip interfaces
-            files=$(find src/Facets/ src/Periphery/ src/Helpers/ src/ -maxdepth 1 -name "*.sol" -type f 2>/dev/null | grep -v "/Interfaces/" | head -95)
-            echo "SHOULD_RUN=true" >> $GITHUB_ENV
+            # Manual run: process ALL contracts in src/
+            echo "Manual run - processing ALL contracts in src/"
+            files=$(find src/ -name "*.sol" -type f)
+            echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
           else
             # PR run: use changed files
             if [[ "${{ steps.changed-files.outputs.any_changed }}" == "true" ]]; then
               files="${{ steps.changed-files.outputs.all_changed_files }}"
-              echo "SHOULD_RUN=true" >> $GITHUB_ENV
+              echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
             else
-              echo "SHOULD_RUN=false" >> $GITHUB_ENV
+              echo "SHOULD_RUN=false" >> $GITHUB_OUTPUT
               exit 0
             fi
           fi
           
-          # Convert to -p arguments for batch processing
-          args=$(echo "$files" | xargs -n 1 printf -- "-p %s ")
-          echo "ARGS=$args" >> $GITHUB_ENV
-          echo "Selected files for mutation testing: $files"
+          # Split files into batches of 100
+          file_array=($files)
+          total_files=${#file_array[@]}
+          echo "Total files found: $total_files"
+          
+          batches="["
+          batch_size=100
+          for ((i=0; i<total_files; i+=batch_size)); do
+            batch_files=("${file_array[@]:i:batch_size}")
+            batch_args=$(printf -- "-p %s " "${batch_files[@]}")
+            
+            if [[ $i -gt 0 ]]; then
+              batches+=","
+            fi
+            batches+="{\"args\":\"generate-mutation-tests $batch_args\",\"batch_num\":$((i/batch_size + 1))}"
+          done
+          batches+="]"
+          
+          echo "BATCHES_JSON=$batches" >> $GITHUB_OUTPUT
+          echo "Created $((((total_files-1)/batch_size)+1)) batches"
+
+  # Process each batch
+  mutation-testing-batches:
+    name: Mutation Testing Batch
+    runs-on: ubuntu-latest
+    needs: mutation-testing
+    if: needs.mutation-testing.outputs.SHOULD_RUN == 'true'
+    strategy:
+      matrix:
+        batch: ${{ fromJson(needs.mutation-testing.outputs.BATCHES_JSON) }}
+      fail-fast: false
+    
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
 
-      - name: Run Olympix Mutation Testing (Batch)
-        if: env.SHOULD_RUN == 'true'
+      - name: Run Olympix Mutation Testing (Batch ${{ matrix.batch.batch_num }})
         uses: olympix/mutation-test-generator@main
         env:
           OLYMPIX_API_TOKEN: ${{ secrets.OLYMPIX_API_TOKEN }}
@@ -87,7 +119,7 @@ jobs:
           OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
           OPIX_DEBUG: true
         with:
-          args: generate-mutation-tests ${{ env.ARGS }}
+          args: ${{ matrix.batch.args }}
 
       - name: Summary
         run: |

From 405d5e3a59cd1d09d0a84f62e19c3eaf318bda40 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 17:27:36 -0400
Subject: [PATCH 13/32] Test mutation testing: fix existing mutant and create
 new one

- Add test for refundExcessNative modifier to fix surviving mutant on line 139
- Add isBridgeAvailable function with intentionally incomplete test coverage
- This will test both mutation testing detection and resolution
---
 src/Facets/OptimismBridgeFacet.sol | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/Facets/OptimismBridgeFacet.sol b/src/Facets/OptimismBridgeFacet.sol
index e0dd018d6..6e04b3dad 100644
--- a/src/Facets/OptimismBridgeFacet.sol
+++ b/src/Facets/OptimismBridgeFacet.sol
@@ -150,6 +150,17 @@ contract OptimismBridgeFacet is
         _startBridge(_bridgeData, _optimismData);
     }
 
+    /// @notice Check if bridge is available for a specific token
+    /// @param tokenAddress The token address to check
+    /// @return isAvailable Whether the bridge supports this token
+    function isBridgeAvailable(address tokenAddress) external pure returns (bool isAvailable) {
+        // This function will create a mutant - the condition can be inverted
+        if (tokenAddress == address(0)) {
+            return false; // This line can be mutated to return true
+        }
+        return true;
+    }
+
     /// Private Methods ///
 
     /// @dev Contains the business logic for the bridge via Optimism Bridge

From 41b32e5fefd6f7e856a9d5e3511a7b211993deb0 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 17:46:31 -0400
Subject: [PATCH 14/32] Fix mutant #1128: Add test for refundExcessNative
 modifier

- Add test_swapAndStartBridgeTokensViaOptimismBridge_RefundsExcessETH()
- Tests that excess ETH is refunded when using swapAndStartBridgeTokensViaOptimismBridge
- Will catch if refundExcessNative modifier is removed (mutation on line 139)
- Sends 1 ETH when only 0.1 ETH needed, verifies 0.9 ETH refund
---
 .../solidity/Facets/OptimismBridgeFacet.t.sol | 52 +++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/test/solidity/Facets/OptimismBridgeFacet.t.sol b/test/solidity/Facets/OptimismBridgeFacet.t.sol
index c9e7c1b71..9894e3031 100644
--- a/test/solidity/Facets/OptimismBridgeFacet.t.sol
+++ b/test/solidity/Facets/OptimismBridgeFacet.t.sol
@@ -264,4 +264,56 @@ contract OptimismBridgeFacetTest is TestBase {
 
         vm.stopPrank();
     }
+
+    function test_swapAndStartBridgeTokensViaOptimismBridge_RefundsExcessETH() public {
+        vm.startPrank(USER_SENDER);
+        
+        // Set up bridge data for native ETH with swaps
+        ILiFi.BridgeData memory bridgeData = validBridgeData;
+        bridgeData.hasSourceSwaps = true;
+        bridgeData.sendingAssetId = address(0); // Native ETH
+        bridgeData.minAmount = 0.1 ether;
+
+        // Create swap data that swaps ETH to USDC
+        LibSwap.SwapData[] memory swapData = new LibSwap.SwapData[](1);
+        swapData[0] = LibSwap.SwapData(
+            address(uniswap),
+            address(uniswap),
+            address(0), // from ETH
+            USDC_ADDRESS, // to USDC
+            0.1 ether,
+            abi.encodeWithSelector(
+                uniswap.swapExactETHForTokens.selector,
+                0,
+                validTokenAddresses,
+                address(optimismBridgeFacet),
+                block.timestamp + 20 minutes
+            ),
+            true
+        );
+
+        // Send more ETH than needed - the excess should be refunded
+        uint256 excessAmount = 1 ether; // Send 1 ETH when only 0.1 ETH is needed
+        uint256 balanceBeforeBridge = USER_SENDER.balance;
+
+        // This call should refund the excess ETH due to refundExcessNative modifier
+        // If the modifier is removed (as mutant #1128 does), this test will fail
+        optimismBridgeFacet.swapAndStartBridgeTokensViaOptimismBridge{value: excessAmount}(
+            bridgeData,
+            swapData,
+            validOptimismData
+        );
+
+        uint256 balanceAfterBridge = USER_SENDER.balance;
+        
+        // User should have received refund of excess ETH (0.9 ETH minus gas costs)
+        // If refundExcessNative modifier is missing, user won't get refund
+        uint256 expectedRefund = excessAmount - bridgeData.minAmount; // 0.9 ETH
+        uint256 actualRefund = balanceAfterBridge - (balanceBeforeBridge - excessAmount);
+        
+        // Allow for gas costs but ensure most of the excess was refunded
+        assertGt(actualRefund, expectedRefund - 0.01 ether, "Excess ETH should be refunded");
+
+        vm.stopPrank();
+    }
 }

From 4058180a3374bf382e4c99c86a34d6690b1ff05e Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 17:51:42 -0400
Subject: [PATCH 15/32] Improve test for mutant #1128: Simplify refund
 detection logic

- Simplify the test logic to directly check total ETH spent vs sent
- With refundExcessNative: user loses ~0.1 ETH + gas
- Without refundExcessNative: user loses full 1 ETH + gas
- More reliable detection of missing refund modifier
---
 .../solidity/Facets/OptimismBridgeFacet.t.sol | 22 +++++++++----------
 1 file changed, 10 insertions(+), 12 deletions(-)

diff --git a/test/solidity/Facets/OptimismBridgeFacet.t.sol b/test/solidity/Facets/OptimismBridgeFacet.t.sol
index 9894e3031..c2f04ab5c 100644
--- a/test/solidity/Facets/OptimismBridgeFacet.t.sol
+++ b/test/solidity/Facets/OptimismBridgeFacet.t.sol
@@ -293,26 +293,24 @@ contract OptimismBridgeFacetTest is TestBase {
         );
 
         // Send more ETH than needed - the excess should be refunded
-        uint256 excessAmount = 1 ether; // Send 1 ETH when only 0.1 ETH is needed
-        uint256 balanceBeforeBridge = USER_SENDER.balance;
+        uint256 sentAmount = 1 ether; // Send 1 ETH when only 0.1 ETH is needed
+        uint256 balanceBefore = USER_SENDER.balance;
 
         // This call should refund the excess ETH due to refundExcessNative modifier
-        // If the modifier is removed (as mutant #1128 does), this test will fail
-        optimismBridgeFacet.swapAndStartBridgeTokensViaOptimismBridge{value: excessAmount}(
+        // If the modifier is removed (as mutant #1128 does), no refund occurs
+        optimismBridgeFacet.swapAndStartBridgeTokensViaOptimismBridge{value: sentAmount}(
             bridgeData,
             swapData,
             validOptimismData
         );
 
-        uint256 balanceAfterBridge = USER_SENDER.balance;
+        uint256 balanceAfter = USER_SENDER.balance;
+        uint256 totalSpent = balanceBefore - balanceAfter;
         
-        // User should have received refund of excess ETH (0.9 ETH minus gas costs)
-        // If refundExcessNative modifier is missing, user won't get refund
-        uint256 expectedRefund = excessAmount - bridgeData.minAmount; // 0.9 ETH
-        uint256 actualRefund = balanceAfterBridge - (balanceBeforeBridge - excessAmount);
-        
-        // Allow for gas costs but ensure most of the excess was refunded
-        assertGt(actualRefund, expectedRefund - 0.01 ether, "Excess ETH should be refunded");
+        // With refundExcessNative: user should only lose ~0.1 ETH + gas
+        // Without refundExcessNative: user loses full 1 ETH + gas
+        // This test catches when the full amount is lost (mutant case)
+        assertLt(totalSpent, 0.5 ether, "Should not lose more than 0.5 ETH (excess should be refunded)");
 
         vm.stopPrank();
     }

From 9a00462c18f403d7ef9342d4196dc82951aa7d21 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 17:55:12 -0400
Subject: [PATCH 16/32] Fix PR summary workflow triggers

- Add synchronize, opened, reopened triggers for immediate PR events
- Add workflow_run trigger to run after mutation testing completes
- This ensures PR summary runs both on PR changes and after mutation testing finishes
---
 .github/workflows/mutationTestingAlertsReview.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 03f42db06..5652c26cc 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -10,9 +10,16 @@ name: Mutation Testing PR Summary
 on:
   pull_request:
     types:
+      - opened
+      - synchronize
+      - reopened
       - ready_for_review
     paths:
       - 'src/**/*.sol'
+  workflow_run:
+    workflows: ["Olympix Mutation Testing"]
+    types:
+      - completed
   workflow_dispatch:
 
 permissions:

From cda381b5e825383ba2e28203c4ce1f662dfd5046 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 17:57:32 -0400
Subject: [PATCH 17/32] Fix PR summary workflow jq parsing errors

- Replace gh-find-current-pr with custom PR detection logic
- Handle both pull_request and workflow_run trigger contexts
- Add proper error handling for GitHub API responses
- Add debugging output for API responses
- Use proper jq error handling with '// empty' fallback
---
 .../workflows/mutationTestingAlertsReview.yml | 57 ++++++++++++++-----
 1 file changed, 42 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 5652c26cc..5334552d4 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -35,22 +35,36 @@ jobs:
 
       - uses: actions/checkout@v4
 
-      - uses: jwalton/gh-find-current-pr@master
-        id: findPr
-
-      - name: Validate and set PR Number
-        id: fetch_pr
+      - name: Get PR Number
+        id: get_pr
         env:
           GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
         run: |
-          if [ -z "${{ steps.findPr.outputs.number }}" ]; then
-            echo "Error: No pull request found for this push." >&2
+          # Try to get PR number from different contexts
+          PR_NUMBER=""
+          
+          # If triggered by pull_request event
+          if [ "${{ github.event_name }}" == "pull_request" ]; then
+            PR_NUMBER="${{ github.event.number }}"
+            echo "PR number from pull_request event: $PR_NUMBER"
+          
+          # If triggered by workflow_run or workflow_dispatch, search for PR
+          elif [ -n "${{ github.sha }}" ]; then
+            echo "Searching for PR associated with commit ${{ github.sha }}"
+            SEARCH_RESULT=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+              "https://api.github.com/repos/${{ github.repository }}/pulls?head=${{ github.repository_owner }}:${{ github.ref_name }}")
+            
+            PR_NUMBER=$(echo "$SEARCH_RESULT" | jq -r '.[0].number // empty')
+            echo "PR number from API search: $PR_NUMBER"
+          fi
+          
+          if [ -z "$PR_NUMBER" ] || [ "$PR_NUMBER" == "null" ]; then
+            echo "Error: No pull request found for this trigger." >&2
             exit 1
           fi
-          echo "Found PR number: ${{ steps.findPr.outputs.number }}"
-          PR_NUMBER=${{ steps.findPr.outputs.number }}
+          
+          echo "Using PR number: $PR_NUMBER"
           echo "PR_NUMBER=$PR_NUMBER" >> $GITHUB_ENV
-          echo "Pull Request Number is: $PR_NUMBER"
 
       - name: Fetch Mutation Testing Results for PR
         env:
@@ -95,16 +109,29 @@ jobs:
         run: |
           echo "Searching for existing PR comment..."
 
-          COMMENT_ID=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
-            "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" | jq -r \
-            '.[] | select(.body | startswith("## 🧪 Mutation Testing Summary")) | .id')
+          # Get comments with error handling
+          COMMENTS_RESPONSE=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+            "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments")
+          
+          echo "Comments API response:"
+          echo "$COMMENTS_RESPONSE" | head -20
+          
+          # Check if response is valid JSON array
+          if echo "$COMMENTS_RESPONSE" | jq -e '. | type == "array"' > /dev/null 2>&1; then
+            COMMENT_ID=$(echo "$COMMENTS_RESPONSE" | jq -r \
+              '.[] | select(.body | startswith("## 🧪 Mutation Testing Summary")) | .id // empty' | head -1)
+          else
+            echo "Warning: Invalid JSON response from comments API"
+            COMMENT_ID=""
+          fi
 
           if [[ -n "$COMMENT_ID" && "$COMMENT_ID" != "null" ]]; then
             echo "EXISTING_COMMENT_ID=$COMMENT_ID" >> $GITHUB_ENV
+            echo "Found existing comment ID: $COMMENT_ID"
+          else
+            echo "No existing comment found"
           fi
 
-          echo "Found comment ID: $COMMENT_ID"
-
       - name: Post or Update PR Comment
         env:
           GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}

From cbfb17bcf75cae2550269aa01527a61322b85b36 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 18:00:05 -0400
Subject: [PATCH 18/32] Fix authentication: Use GITHUB_TOKEN instead of PAT

- Replace GIT_ACTIONS_BOT_PAT_CLASSIC with built-in GITHUB_TOKEN
- Add security-events: read permission for code scanning API access
- This should resolve the 'Bad credentials' errors in the workflow
---
 .github/workflows/mutationTestingAlertsReview.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 5334552d4..c1ee6b366 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -25,6 +25,7 @@ on:
 permissions:
   contents: read # required to fetch repository contents
   pull-requests: write # required to post, update PR comments & revert PR to draft
+  security-events: read # required to fetch code scanning alerts
   issues: write # required to post comments via the GitHub Issues API (used for PR comments)
 
 jobs:
@@ -38,7 +39,7 @@ jobs:
       - name: Get PR Number
         id: get_pr
         env:
-          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           # Try to get PR number from different contexts
           PR_NUMBER=""
@@ -68,7 +69,7 @@ jobs:
 
       - name: Fetch Mutation Testing Results for PR
         env:
-          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           echo "Fetching mutation testing results for PR #${PR_NUMBER}..."
 
@@ -105,7 +106,7 @@ jobs:
       - name: Find Existing PR Comment
         id: find_comment
         env:
-          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           echo "Searching for existing PR comment..."
 
@@ -134,7 +135,7 @@ jobs:
 
       - name: Post or Update PR Comment
         env:
-          GITHUB_TOKEN: ${{ secrets.GIT_ACTIONS_BOT_PAT_CLASSIC }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           COMMENT_BODY="## 🧪 Mutation Testing Summary\n\n"
 

From 2d2638fd774481e60bd454e5bbe6e1f502da708c Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 18:14:40 -0400
Subject: [PATCH 19/32] Add debugging for Code Scanning API queries

- Add logging for both PR-specific and all alerts queries
- Show what tools are available in the alerts
- Fall back to all alerts if PR filter returns no results
- This will help identify why mutation testing results aren't being found
---
 .../workflows/mutationTestingAlertsReview.yml | 28 ++++++++++++++++++-
 1 file changed, 27 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index c1ee6b366..c24257e36 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -74,10 +74,36 @@ jobs:
           echo "Fetching mutation testing results for PR #${PR_NUMBER}..."
 
           # Fetch mutation testing results from GitHub Code Scanning
-          MUTATIONS=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+          echo "Fetching alerts for PR #${PR_NUMBER}..."
+          MUTATIONS_PR=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
             "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?pr=${PR_NUMBER}")
+          
+          echo "PR-specific API response:"
+          echo "$MUTATIONS_PR" | head -10
+          
+          # Also fetch all recent alerts to compare
+          echo "Fetching all recent alerts..."
+          MUTATIONS_ALL=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+            "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?per_page=10")
+          
+          echo "All alerts API response:"
+          echo "$MUTATIONS_ALL" | head -10
+          
+          # Use PR-specific results if available, otherwise check all alerts
+          if echo "$MUTATIONS_PR" | jq -e '. | type == "array" and length > 0' > /dev/null 2>&1; then
+            MUTATIONS="$MUTATIONS_PR"
+            echo "Using PR-specific alerts"
+          else
+            MUTATIONS="$MUTATIONS_ALL"
+            echo "Using all alerts (PR filter returned no results)"
+          fi
 
           echo "Filtering to Olympix Mutation Testing results only"
+          
+          # Debug: Show what tools are available
+          echo "Available tools in alerts:"
+          echo "$MUTATIONS" | jq -r '.[] | .tool.name' | sort | uniq -c || echo "No tools found"
+          
           MUTATIONS=$(echo "$MUTATIONS" | jq -c '[ .[] | select(.tool.name == "Olympix Mutation Testing") ]' || echo "[]")
 
           # Extract surviving mutants (open - test coverage gaps)

From a666917ec7ec38c2a8ea68c0ba666619932df378 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 20:54:57 -0400
Subject: [PATCH 20/32] Fix PR summary to find mutation testing results

---
 .../workflows/mutationTestingAlertsReview.yml | 51 +++++++++++++++++--
 1 file changed, 46 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index c24257e36..b3caf1eed 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -84,18 +84,49 @@ jobs:
           # Also fetch all recent alerts to compare
           echo "Fetching all recent alerts..."
           MUTATIONS_ALL=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
-            "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?per_page=10")
+            "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?per_page=100&state=open")
           
           echo "All alerts API response:"
           echo "$MUTATIONS_ALL" | head -10
           
-          # Use PR-specific results if available, otherwise check all alerts
-          if echo "$MUTATIONS_PR" | jq -e '. | type == "array" and length > 0' > /dev/null 2>&1; then
+          # Also try fetching by commit SHA
+          echo "Fetching alerts for commit ${{ github.sha }}..."
+          MUTATIONS_COMMIT=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+            "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?ref=${{ github.sha }}&per_page=100")
+          
+          echo "Commit-specific API response:"
+          echo "$MUTATIONS_COMMIT" | head -10
+          
+          # Use the source with the most results
+          PR_COUNT=$(echo "$MUTATIONS_PR" | jq 'length // 0')
+          ALL_COUNT=$(echo "$MUTATIONS_ALL" | jq 'length // 0')
+          COMMIT_COUNT=$(echo "$MUTATIONS_COMMIT" | jq 'length // 0')
+          
+          echo "PR alerts: $PR_COUNT, All alerts: $ALL_COUNT, Commit alerts: $COMMIT_COUNT"
+          
+          # Show what's in each response for debugging
+          if [[ $PR_COUNT -gt 0 ]]; then
+            echo "PR response tools:"
+            echo "$MUTATIONS_PR" | jq -r '.[] | .tool.name' | head -5
+          fi
+          if [[ $ALL_COUNT -gt 0 ]]; then
+            echo "All alerts tools:"
+            echo "$MUTATIONS_ALL" | jq -r '.[] | .tool.name' | head -5
+          fi
+          if [[ $COMMIT_COUNT -gt 0 ]]; then
+            echo "Commit alerts tools:"
+            echo "$MUTATIONS_COMMIT" | jq -r '.[] | .tool.name' | head -5
+          fi
+          
+          if [[ $PR_COUNT -gt 0 ]]; then
             MUTATIONS="$MUTATIONS_PR"
-            echo "Using PR-specific alerts"
+            echo "Using PR-specific alerts ($PR_COUNT results)"
+          elif [[ $COMMIT_COUNT -gt 0 ]]; then
+            MUTATIONS="$MUTATIONS_COMMIT"
+            echo "Using commit-specific alerts ($COMMIT_COUNT results)"
           else
             MUTATIONS="$MUTATIONS_ALL"
-            echo "Using all alerts (PR filter returned no results)"
+            echo "Using all recent alerts ($ALL_COUNT results)"
           fi
 
           echo "Filtering to Olympix Mutation Testing results only"
@@ -104,7 +135,17 @@ jobs:
           echo "Available tools in alerts:"
           echo "$MUTATIONS" | jq -r '.[] | .tool.name' | sort | uniq -c || echo "No tools found"
           
+          # Filter specifically for "Olympix Mutation Testing"
+          echo "Filtering for tool name: 'Olympix Mutation Testing'"
+          
+          # Show first few alerts for debugging
+          echo "Sample alerts (first 3):"
+          echo "$MUTATIONS" | jq -c '.[:3] | .[] | {tool_name: .tool.name, rule_id: .rule.id, state: .state, file: .most_recent_instance.location.path}' || echo "No alerts to sample"
+          
           MUTATIONS=$(echo "$MUTATIONS" | jq -c '[ .[] | select(.tool.name == "Olympix Mutation Testing") ]' || echo "[]")
+          
+          MUTATION_COUNT=$(echo "$MUTATIONS" | jq 'length')
+          echo "Found $MUTATION_COUNT Olympix Mutation Testing alerts"
 
           # Extract surviving mutants (open - test coverage gaps)
           SURVIVING_MUTANTS=$(echo "$MUTATIONS" | jq -c '[.[] | select(.state == "open") ]' || echo "[]")

From af9cba7eedc5669346d7e538edd1ba9cb67d694c Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:02:01 -0400
Subject: [PATCH 21/32] Fix 'Argument list too long' error

---
 .../workflows/mutationTestingAlertsReview.yml | 30 ++++++++++++++-----
 1 file changed, 23 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index b3caf1eed..697091a4f 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -163,12 +163,23 @@ jobs:
           echo "DISMISSED_COUNT: $DISMISSED_COUNT"
           echo "TOTAL_MUTANTS: $TOTAL_MUTANTS"
 
-          # Save values in the environment
-          echo "SURVIVING_MUTANTS=$SURVIVING_MUTANTS" >> $GITHUB_ENV
-          echo "DISMISSED_MUTANTS=$DISMISSED_MUTANTS" >> $GITHUB_ENV
+          # Save values in the environment - limit data to prevent argument list too long
+          # Only save first 50 of each type to avoid shell limits
+          SURVIVING_MUTANTS_LIMITED=$(echo "$SURVIVING_MUTANTS" | jq -c '.[:50]')
+          DISMISSED_MUTANTS_LIMITED=$(echo "$DISMISSED_MUTANTS" | jq -c '.[:50]')
+          
+          echo "SURVIVING_MUTANTS=$SURVIVING_MUTANTS_LIMITED" >> $GITHUB_ENV
+          echo "DISMISSED_MUTANTS=$DISMISSED_MUTANTS_LIMITED" >> $GITHUB_ENV
           echo "SURVIVING_COUNT=$SURVIVING_COUNT" >> $GITHUB_ENV
           echo "DISMISSED_COUNT=$DISMISSED_COUNT" >> $GITHUB_ENV
           echo "TOTAL_MUTANTS=$TOTAL_MUTANTS" >> $GITHUB_ENV
+          
+          if [[ $SURVIVING_COUNT -gt 50 ]]; then
+            echo "Note: Limiting display to first 50 surviving mutants (total: $SURVIVING_COUNT)"
+          fi
+          if [[ $DISMISSED_COUNT -gt 50 ]]; then
+            echo "Note: Limiting display to first 50 dismissed mutants (total: $DISMISSED_COUNT)"
+          fi
 
       - name: Find Existing PR Comment
         id: find_comment
@@ -177,12 +188,11 @@ jobs:
         run: |
           echo "Searching for existing PR comment..."
 
-          # Get comments with error handling
+          # Get comments with error handling - limit to recent comments only
           COMMENTS_RESPONSE=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
-            "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments")
+            "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments?per_page=20&sort=updated&direction=desc")
           
-          echo "Comments API response:"
-          echo "$COMMENTS_RESPONSE" | head -20
+          echo "Recent comments count: $(echo "$COMMENTS_RESPONSE" | jq 'length // 0')"
           
           # Check if response is valid JSON array
           if echo "$COMMENTS_RESPONSE" | jq -e '. | type == "array"' > /dev/null 2>&1; then
@@ -226,6 +236,9 @@ jobs:
           # List surviving mutants
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
             COMMENT_BODY+="### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n"
+            if [[ "$SURVIVING_COUNT" -gt 50 ]]; then
+              COMMENT_BODY+="_Showing first 50 of $SURVIVING_COUNT total surviving mutants_\n\n"
+            fi
             while IFS= read -r row; do
               MUTANT_URL=$(echo "$row" | jq -r '.html_url')
               MUTANT_FILE=$(echo "$row" | jq -r '.most_recent_instance.location.path')
@@ -240,6 +253,9 @@ jobs:
           # List dismissed mutants
           if [[ "$DISMISSED_COUNT" -gt 0 ]]; then
             COMMENT_BODY+="### ✅ Dismissed Mutants\n\n"
+            if [[ "$DISMISSED_COUNT" -gt 50 ]]; then
+              COMMENT_BODY+="_Showing first 50 of $DISMISSED_COUNT total dismissed mutants_\n\n"
+            fi
             while IFS= read -r row; do
               MUTANT_URL=$(echo "$row" | jq -r '.html_url')
               MUTANT_FILE=$(echo "$row" | jq -r '.most_recent_instance.location.path')

From bb474273954bbf0a2c61b3205b33097ed2bcba18 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:05:10 -0400
Subject: [PATCH 22/32] Fix JSON parsing error in comment update

---
 .github/workflows/mutationTestingAlertsReview.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 697091a4f..1b23c1d52 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -285,16 +285,19 @@ jobs:
             COMMENT_BODY+="All mutants were either killed by tests or properly dismissed.\n"
           fi
 
+          # Properly escape JSON for API call
+          COMMENT_JSON=$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')
+          
           # Update existing comment if found; otherwise, post a new one.
           if [[ -n "$EXISTING_COMMENT_ID" ]]; then
             echo "Updating existing comment ID: $EXISTING_COMMENT_ID"
-            curl -s -X PATCH -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
-              -d "{\"body\": \"$COMMENT_BODY\"}" \
+            echo "$COMMENT_JSON" | curl -s -X PATCH -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
+              -d @- \
               "https://api.github.com/repos/${{ github.repository }}/issues/comments/${EXISTING_COMMENT_ID}"
           else
             echo "Posting new comment to PR..."
-            curl -s -X POST -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
-              -d "{\"body\": \"$COMMENT_BODY\"}" \
+            echo "$COMMENT_JSON" | curl -s -X POST -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
+              -d @- \
               "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments"
           fi
 

From 602c9fedca2dcfd811f92e55b54a3c38b8e1e3e7 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:14:15 -0400
Subject: [PATCH 23/32] Add response logging for debugging PR comment updates

---
 .../workflows/mutationTestingAlertsReview.yml | 60 ++++++++-----------
 1 file changed, 24 insertions(+), 36 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 1b23c1d52..219be983e 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -214,30 +214,22 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          COMMENT_BODY="## 🧪 Mutation Testing Summary\n\n"
-
-          # Summary stats
+          # Create comment body with proper line breaks using printf
           if [[ "$TOTAL_MUTANTS" -gt 0 ]]; then
-            COMMENT_BODY+="📊 **Results Overview:**\n"
-            COMMENT_BODY+="- **Total Mutants:** $TOTAL_MUTANTS\n"
-            COMMENT_BODY+="- **Surviving Mutants:** $SURVIVING_COUNT (test coverage gaps)\n"
-            COMMENT_BODY+="- **Dismissed Mutants:** $DISMISSED_COUNT (acknowledged)\n\n"
-
-            # Calculate mutation score if we have data
-            if [[ "$TOTAL_MUTANTS" -gt 0 ]]; then
-              KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
-              MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
-              COMMENT_BODY+="🎯 **Mutation Score:** ${MUTATION_SCORE}% (${KILLED_COUNT}/${TOTAL_MUTANTS} mutants killed)\n\n"
-            fi
+            KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
+            MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
+            
+            COMMENT_BODY=$(printf "## 🧪 Mutation Testing Summary\n\n📊 **Results Overview:**\n- **Total Mutants:** %s\n- **Surviving Mutants:** %s (test coverage gaps)\n- **Dismissed Mutants:** %s (acknowledged)\n\n🎯 **Mutation Score:** %s%% (%s/%s mutants killed)\n\n" \
+              "$TOTAL_MUTANTS" "$SURVIVING_COUNT" "$DISMISSED_COUNT" "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS")
           else
-            COMMENT_BODY+="ℹ️ No mutation testing results found for this PR.\n\n"
+            COMMENT_BODY=$(printf "## 🧪 Mutation Testing Summary\n\nℹ️ No mutation testing results found for this PR.\n\n")
           fi
 
           # List surviving mutants
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+="### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n"
+            COMMENT_BODY+=$(printf "### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n")
             if [[ "$SURVIVING_COUNT" -gt 50 ]]; then
-              COMMENT_BODY+="_Showing first 50 of $SURVIVING_COUNT total surviving mutants_\n\n"
+              COMMENT_BODY+=$(printf "_Showing first 50 of %s total surviving mutants_\n\n" "$SURVIVING_COUNT")
             fi
             while IFS= read -r row; do
               MUTANT_URL=$(echo "$row" | jq -r '.html_url')
@@ -245,16 +237,15 @@ jobs:
               MUTANT_LINE=$(echo "$row" | jq -r '.most_recent_instance.location.start_line')
               MUTANT_DESCRIPTION=$(echo "$row" | jq -r '.most_recent_instance.message.text')
 
-              COMMENT_BODY+="- [\`$MUTANT_FILE:$MUTANT_LINE\`]($MUTANT_URL)\n"
-              COMMENT_BODY+="  $MUTANT_DESCRIPTION\n\n"
+              COMMENT_BODY+=$(printf "- [\`%s:%s\`](%s)\n  %s\n\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$MUTANT_DESCRIPTION")
             done < <(echo "$SURVIVING_MUTANTS" | jq -c '.[]')
           fi
 
           # List dismissed mutants
           if [[ "$DISMISSED_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+="### ✅ Dismissed Mutants\n\n"
+            COMMENT_BODY+=$(printf "### ✅ Dismissed Mutants\n\n")
             if [[ "$DISMISSED_COUNT" -gt 50 ]]; then
-              COMMENT_BODY+="_Showing first 50 of $DISMISSED_COUNT total dismissed mutants_\n\n"
+              COMMENT_BODY+=$(printf "_Showing first 50 of %s total dismissed mutants_\n\n" "$DISMISSED_COUNT")
             fi
             while IFS= read -r row; do
               MUTANT_URL=$(echo "$row" | jq -r '.html_url')
@@ -263,26 +254,21 @@ jobs:
               DISMISS_REASON=$(echo "$row" | jq -r '.dismissed_reason // "No reason"')
               DISMISS_COMMENT=$(echo "$row" | jq -r '.dismissed_comment // "No comment"')
 
-              COMMENT_BODY+="- [\`$MUTANT_FILE:$MUTANT_LINE\`]($MUTANT_URL) - **$DISMISS_REASON**\n"
+              COMMENT_BODY+=$(printf "- [\`%s:%s\`](%s) - **%s**\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$DISMISS_REASON")
               if [[ "$DISMISS_COMMENT" != "No comment" ]]; then
-                COMMENT_BODY+="  _${DISMISS_COMMENT}_\n\n"
+                COMMENT_BODY+=$(printf "  _%s_\n\n" "$DISMISS_COMMENT")
               else
-                COMMENT_BODY+="\n"
+                COMMENT_BODY+=$(printf "\n")
               fi
             done < <(echo "$DISMISSED_MUTANTS" | jq -c '.[]')
           fi
 
           # Net unresolved findings
-          COMMENT_BODY+="### 📋 Net Unresolved Findings\n\n"
+          COMMENT_BODY+=$(printf "### 📋 Net Unresolved Findings\n\n")
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+="⚠️ **${SURVIVING_COUNT} test coverage gap(s)** need attention\n\n"
-            COMMENT_BODY+="**Next Steps:**\n"
-            COMMENT_BODY+="1. Review surviving mutants above\n"
-            COMMENT_BODY+="2. Add tests to kill these mutants or dismiss with justification\n"
-            COMMENT_BODY+="3. Aim for high mutation score to ensure robust test coverage\n"
+            COMMENT_BODY+=$(printf "⚠️ **%s test coverage gap(s)** need attention\n\n**Next Steps:**\n1. Review surviving mutants above\n2. Add tests to kill these mutants or dismiss with justification\n3. Aim for high mutation score to ensure robust test coverage\n" "$SURVIVING_COUNT")
           else
-            COMMENT_BODY+="🎉 **No unresolved test coverage gaps!**\n"
-            COMMENT_BODY+="All mutants were either killed by tests or properly dismissed.\n"
+            COMMENT_BODY+=$(printf "🎉 **No unresolved test coverage gaps!**\nAll mutants were either killed by tests or properly dismissed.\n")
           fi
 
           # Properly escape JSON for API call
@@ -291,14 +277,16 @@ jobs:
           # Update existing comment if found; otherwise, post a new one.
           if [[ -n "$EXISTING_COMMENT_ID" ]]; then
             echo "Updating existing comment ID: $EXISTING_COMMENT_ID"
-            echo "$COMMENT_JSON" | curl -s -X PATCH -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
+            RESPONSE=$(echo "$COMMENT_JSON" | curl -s -X PATCH -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
               -d @- \
-              "https://api.github.com/repos/${{ github.repository }}/issues/comments/${EXISTING_COMMENT_ID}"
+              "https://api.github.com/repos/${{ github.repository }}/issues/comments/${EXISTING_COMMENT_ID}")
+            echo "Update response: $RESPONSE"
           else
             echo "Posting new comment to PR..."
-            echo "$COMMENT_JSON" | curl -s -X POST -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
+            RESPONSE=$(echo "$COMMENT_JSON" | curl -s -X POST -H "Authorization: token ${GITHUB_TOKEN}" -H "Content-Type: application/json" \
               -d @- \
-              "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments"
+              "https://api.github.com/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments")
+            echo "Post response: $RESPONSE"
           fi
 
  
\ No newline at end of file

From a6d4e0cb8a82979422111eb3d3db064cdd393099 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:17:08 -0400
Subject: [PATCH 24/32] Fix false 'fixed' alerts by always running on all files

---
 .github/workflows/olympixMutationTesting.yml | 35 ++++++++------------
 1 file changed, 14 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index f6d1ea318..20abede20 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -1,8 +1,8 @@
 name: Olympix Mutation Testing
 
-# - runs the olympix mutation testing on newly added or modified solidity contracts inside the src/ folder in a pull request
+# - runs the olympix mutation testing on all solidity contracts inside the src/ folder
 # - evaluates test suite quality by introducing code mutations and checking if tests catch them
-# - only scans diff (added, renamed, modified) solidity files in src/ instead of the whole repository
+# - always scans all solidity files in src/ to maintain consistent GitHub Code Scanning state
 # - uploads mutation testing results to github code scanning for review and discussion within the PR
 
 on:
@@ -48,31 +48,24 @@ jobs:
           fi
           echo "ALL_SOL_FILES=$ALL_FILES" >> $GITHUB_ENV
 
-      - name: Get added, renamed, modified Solidity Files (PR only)
-        if: github.event_name != 'workflow_dispatch'
-        id: changed-files
-        uses: tj-actions/changed-files@v45
-        with:
-          files: |
-            src/**/*.sol
+      # Note: We always run on all files to maintain consistent Code Scanning state
+      # This prevents false "fixed" status when files aren't included in mutation testing
 
       - name: Create Batches
         id: create-batches
         run: |
-          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual run: process ALL contracts in src/
-            echo "Manual run - processing ALL contracts in src/"
-            files=$(find src/ -name "*.sol" -type f)
+          # Always run on ALL contracts to maintain consistent Code Scanning state
+          # This prevents alerts from being marked as "fixed" when files aren't tested
+          echo "Processing ALL contracts in src/ to maintain consistent mutation testing state"
+          files=$(find src/ -name "*.sol" -type f)
+          
+          if [[ $(echo "$files" | wc -w) -gt 0 ]]; then
             echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
+            echo "Found $(echo "$files" | wc -w) Solidity files to analyze"
           else
-            # PR run: use changed files
-            if [[ "${{ steps.changed-files.outputs.any_changed }}" == "true" ]]; then
-              files="${{ steps.changed-files.outputs.all_changed_files }}"
-              echo "SHOULD_RUN=true" >> $GITHUB_OUTPUT
-            else
-              echo "SHOULD_RUN=false" >> $GITHUB_OUTPUT
-              exit 0
-            fi
+            echo "SHOULD_RUN=false" >> $GITHUB_OUTPUT
+            echo "No Solidity files found in src/"
+            exit 0
           fi
           
           # Split files into batches of 100

From 610fd0e7f97992e8551bc40599f39d69b55bd5fa Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:21:37 -0400
Subject: [PATCH 25/32] Fix printf option parsing error

---
 .../workflows/mutationTestingAlertsReview.yml | 26 +++++++++----------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 219be983e..47f65d9df 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -219,17 +219,17 @@ jobs:
             KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
             MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
             
-            COMMENT_BODY=$(printf "## 🧪 Mutation Testing Summary\n\n📊 **Results Overview:**\n- **Total Mutants:** %s\n- **Surviving Mutants:** %s (test coverage gaps)\n- **Dismissed Mutants:** %s (acknowledged)\n\n🎯 **Mutation Score:** %s%% (%s/%s mutants killed)\n\n" \
+            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing Summary\n\n📊 **Results Overview:**\n- **Total Mutants:** %s\n- **Surviving Mutants:** %s (test coverage gaps)\n- **Dismissed Mutants:** %s (acknowledged)\n\n🎯 **Mutation Score:** %s%% (%s/%s mutants killed)\n\n" \
               "$TOTAL_MUTANTS" "$SURVIVING_COUNT" "$DISMISSED_COUNT" "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS")
           else
-            COMMENT_BODY=$(printf "## 🧪 Mutation Testing Summary\n\nℹ️ No mutation testing results found for this PR.\n\n")
+            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing Summary\n\nℹ️ No mutation testing results found for this PR.\n\n")
           fi
 
           # List surviving mutants
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf "### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n")
+            COMMENT_BODY+=$(printf -- "### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n")
             if [[ "$SURVIVING_COUNT" -gt 50 ]]; then
-              COMMENT_BODY+=$(printf "_Showing first 50 of %s total surviving mutants_\n\n" "$SURVIVING_COUNT")
+                              COMMENT_BODY+=$(printf -- "_Showing first 50 of %s total surviving mutants_\n\n" "$SURVIVING_COUNT")
             fi
             while IFS= read -r row; do
               MUTANT_URL=$(echo "$row" | jq -r '.html_url')
@@ -237,15 +237,15 @@ jobs:
               MUTANT_LINE=$(echo "$row" | jq -r '.most_recent_instance.location.start_line')
               MUTANT_DESCRIPTION=$(echo "$row" | jq -r '.most_recent_instance.message.text')
 
-              COMMENT_BODY+=$(printf "- [\`%s:%s\`](%s)\n  %s\n\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$MUTANT_DESCRIPTION")
+              COMMENT_BODY+=$(printf -- "- [\`%s:%s\`](%s)\n  %s\n\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$MUTANT_DESCRIPTION")
             done < <(echo "$SURVIVING_MUTANTS" | jq -c '.[]')
           fi
 
           # List dismissed mutants
           if [[ "$DISMISSED_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf "### ✅ Dismissed Mutants\n\n")
+            COMMENT_BODY+=$(printf -- "### ✅ Dismissed Mutants\n\n")
             if [[ "$DISMISSED_COUNT" -gt 50 ]]; then
-              COMMENT_BODY+=$(printf "_Showing first 50 of %s total dismissed mutants_\n\n" "$DISMISSED_COUNT")
+                              COMMENT_BODY+=$(printf -- "_Showing first 50 of %s total dismissed mutants_\n\n" "$DISMISSED_COUNT")
             fi
             while IFS= read -r row; do
               MUTANT_URL=$(echo "$row" | jq -r '.html_url')
@@ -254,21 +254,21 @@ jobs:
               DISMISS_REASON=$(echo "$row" | jq -r '.dismissed_reason // "No reason"')
               DISMISS_COMMENT=$(echo "$row" | jq -r '.dismissed_comment // "No comment"')
 
-              COMMENT_BODY+=$(printf "- [\`%s:%s\`](%s) - **%s**\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$DISMISS_REASON")
+              COMMENT_BODY+=$(printf -- "- [\`%s:%s\`](%s) - **%s**\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$DISMISS_REASON")
               if [[ "$DISMISS_COMMENT" != "No comment" ]]; then
-                COMMENT_BODY+=$(printf "  _%s_\n\n" "$DISMISS_COMMENT")
+                                  COMMENT_BODY+=$(printf -- "  _%s_\n\n" "$DISMISS_COMMENT")
               else
-                COMMENT_BODY+=$(printf "\n")
+                                  COMMENT_BODY+=$(printf -- "\n")
               fi
             done < <(echo "$DISMISSED_MUTANTS" | jq -c '.[]')
           fi
 
           # Net unresolved findings
-          COMMENT_BODY+=$(printf "### 📋 Net Unresolved Findings\n\n")
+          COMMENT_BODY+=$(printf -- "### 📋 Net Unresolved Findings\n\n")
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf "⚠️ **%s test coverage gap(s)** need attention\n\n**Next Steps:**\n1. Review surviving mutants above\n2. Add tests to kill these mutants or dismiss with justification\n3. Aim for high mutation score to ensure robust test coverage\n" "$SURVIVING_COUNT")
+            COMMENT_BODY+=$(printf -- "⚠️ **%s test coverage gap(s)** need attention\n\n**Next Steps:**\n1. Review surviving mutants above\n2. Add tests to kill these mutants or dismiss with justification\n3. Aim for high mutation score to ensure robust test coverage\n" "$SURVIVING_COUNT")
           else
-            COMMENT_BODY+=$(printf "🎉 **No unresolved test coverage gaps!**\nAll mutants were either killed by tests or properly dismissed.\n")
+            COMMENT_BODY+=$(printf -- "🎉 **No unresolved test coverage gaps!**\nAll mutants were either killed by tests or properly dismissed.\n")
           fi
 
           # Properly escape JSON for API call

From b222515aed8c063ceea87666783e0c597ebc46bd Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:25:27 -0400
Subject: [PATCH 26/32] Simplify PR comment to show only key metrics

---
 .../workflows/mutationTestingAlertsReview.yml | 51 +++----------------
 1 file changed, 6 insertions(+), 45 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 47f65d9df..1f33983c2 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -219,56 +219,17 @@ jobs:
             KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
             MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
             
-            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing Summary\n\n📊 **Results Overview:**\n- **Total Mutants:** %s\n- **Surviving Mutants:** %s (test coverage gaps)\n- **Dismissed Mutants:** %s (acknowledged)\n\n🎯 **Mutation Score:** %s%% (%s/%s mutants killed)\n\n" \
-              "$TOTAL_MUTANTS" "$SURVIVING_COUNT" "$DISMISSED_COUNT" "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS")
+            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing\n\n🎯 **Score:** %s%% (%s/%s killed)\n⚠️ **Coverage Gaps:** %s surviving\n\n" \
+              "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS" "$SURVIVING_COUNT")
           else
-            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing Summary\n\nℹ️ No mutation testing results found for this PR.\n\n")
+            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing\n\nℹ️ No results found\n\n")
           fi
 
-          # List surviving mutants
+                    # Simple status message
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf -- "### 🔴 Surviving Mutants (Test Coverage Gaps)\n\n")
-            if [[ "$SURVIVING_COUNT" -gt 50 ]]; then
-                              COMMENT_BODY+=$(printf -- "_Showing first 50 of %s total surviving mutants_\n\n" "$SURVIVING_COUNT")
-            fi
-            while IFS= read -r row; do
-              MUTANT_URL=$(echo "$row" | jq -r '.html_url')
-              MUTANT_FILE=$(echo "$row" | jq -r '.most_recent_instance.location.path')
-              MUTANT_LINE=$(echo "$row" | jq -r '.most_recent_instance.location.start_line')
-              MUTANT_DESCRIPTION=$(echo "$row" | jq -r '.most_recent_instance.message.text')
-
-              COMMENT_BODY+=$(printf -- "- [\`%s:%s\`](%s)\n  %s\n\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$MUTANT_DESCRIPTION")
-            done < <(echo "$SURVIVING_MUTANTS" | jq -c '.[]')
-          fi
-
-          # List dismissed mutants
-          if [[ "$DISMISSED_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf -- "### ✅ Dismissed Mutants\n\n")
-            if [[ "$DISMISSED_COUNT" -gt 50 ]]; then
-                              COMMENT_BODY+=$(printf -- "_Showing first 50 of %s total dismissed mutants_\n\n" "$DISMISSED_COUNT")
-            fi
-            while IFS= read -r row; do
-              MUTANT_URL=$(echo "$row" | jq -r '.html_url')
-              MUTANT_FILE=$(echo "$row" | jq -r '.most_recent_instance.location.path')
-              MUTANT_LINE=$(echo "$row" | jq -r '.most_recent_instance.location.start_line')
-              DISMISS_REASON=$(echo "$row" | jq -r '.dismissed_reason // "No reason"')
-              DISMISS_COMMENT=$(echo "$row" | jq -r '.dismissed_comment // "No comment"')
-
-              COMMENT_BODY+=$(printf -- "- [\`%s:%s\`](%s) - **%s**\n" "$MUTANT_FILE" "$MUTANT_LINE" "$MUTANT_URL" "$DISMISS_REASON")
-              if [[ "$DISMISS_COMMENT" != "No comment" ]]; then
-                                  COMMENT_BODY+=$(printf -- "  _%s_\n\n" "$DISMISS_COMMENT")
-              else
-                                  COMMENT_BODY+=$(printf -- "\n")
-              fi
-            done < <(echo "$DISMISSED_MUTANTS" | jq -c '.[]')
-          fi
-
-          # Net unresolved findings
-          COMMENT_BODY+=$(printf -- "### 📋 Net Unresolved Findings\n\n")
-          if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf -- "⚠️ **%s test coverage gap(s)** need attention\n\n**Next Steps:**\n1. Review surviving mutants above\n2. Add tests to kill these mutants or dismiss with justification\n3. Aim for high mutation score to ensure robust test coverage\n" "$SURVIVING_COUNT")
+            COMMENT_BODY+=$(printf -- "View details in [Security > Code Scanning](../../security/code-scanning?tool=Olympix%%20Mutation%%20Testing)\n")
           else
-            COMMENT_BODY+=$(printf -- "🎉 **No unresolved test coverage gaps!**\nAll mutants were either killed by tests or properly dismissed.\n")
+            COMMENT_BODY+=$(printf -- "✅ All mutants killed - excellent test coverage!\n")
           fi
 
           # Properly escape JSON for API call

From 2db45b8d3b07b7359793bd6de188cd0a1d96b644 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:26:52 -0400
Subject: [PATCH 27/32] Add professional Web3 security styling to mutation
 testing summary

---
 .../workflows/mutationTestingAlertsReview.yml | 41 ++++++++++++++++---
 1 file changed, 35 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 1f33983c2..67fa683cf 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -219,18 +219,47 @@ jobs:
             KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
             MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
             
-            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing\n\n🎯 **Score:** %s%% (%s/%s killed)\n⚠️ **Coverage Gaps:** %s surviving\n\n" \
-              "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS" "$SURVIVING_COUNT")
+            # Determine status emoji and message based on score
+            if [[ $MUTATION_SCORE -ge 80 ]]; then
+              STATUS_EMOJI="✅"
+              STATUS_TEXT="Excellent"
+            elif [[ $MUTATION_SCORE -ge 60 ]]; then
+              STATUS_EMOJI="🟡"
+              STATUS_TEXT="Good"
+            elif [[ $MUTATION_SCORE -ge 40 ]]; then
+              STATUS_EMOJI="🟠"
+              STATUS_TEXT="Needs Improvement"
+            else
+              STATUS_EMOJI="🔴"
+              STATUS_TEXT="Critical"
+            fi
+            
+            COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing Analysis\n\n")
+            COMMENT_BODY+=$(printf -- "| Metric | Value | Status |\n")
+            COMMENT_BODY+=$(printf -- "|--------|-------|--------|\n")
+            COMMENT_BODY+=$(printf -- "| **Mutation Score** | **%s%%** | %s %s |\n" "$MUTATION_SCORE" "$STATUS_EMOJI" "$STATUS_TEXT")
+            COMMENT_BODY+=$(printf -- "| **Mutants Killed** | %s/%s | 🎯 |\n" "$KILLED_COUNT" "$TOTAL_MUTANTS")
+            COMMENT_BODY+=$(printf -- "| **Coverage Gaps** | %s | ⚠️ |\n\n" "$SURVIVING_COUNT")
           else
-            COMMENT_BODY=$(printf -- "## 🧪 Mutation Testing\n\nℹ️ No results found\n\n")
+            COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing Analysis\n\n")
+            COMMENT_BODY+=$(printf -- "ℹ️ **No mutation testing results found for this PR.**\n\n")
           fi
 
-                    # Simple status message
+                    # Professional footer with action items
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf -- "View details in [Security > Code Scanning](../../security/code-scanning?tool=Olympix%%20Mutation%%20Testing)\n")
+            COMMENT_BODY+=$(printf -- "#### 🔍 **Action Required**\n")
+            COMMENT_BODY+=$(printf -- "Review and address surviving mutants to improve test coverage quality.\n\n")
+            COMMENT_BODY+=$(printf -- "**📋 Next Steps:**\n")
+            COMMENT_BODY+=$(printf -- "• View detailed findings in [Security > Code Scanning](../../security/code-scanning?tool=Olympix%%20Mutation%%20Testing)\n")
+            COMMENT_BODY+=$(printf -- "• Add test cases to kill surviving mutants\n")
+            COMMENT_BODY+=$(printf -- "• Dismiss mutants with proper justification if appropriate\n\n")
           else
-            COMMENT_BODY+=$(printf -- "✅ All mutants killed - excellent test coverage!\n")
+            COMMENT_BODY+=$(printf -- "#### ✅ **Test Coverage Excellence**\n")
+            COMMENT_BODY+=$(printf -- "All mutation tests passed! Your test suite effectively validates the code behavior.\n\n")
           fi
+          
+          COMMENT_BODY+=$(printf -- "---\n")
+          COMMENT_BODY+=$(printf -- "*🛡️ Powered by Olympix Security Platform*\n")
 
           # Properly escape JSON for API call
           COMMENT_JSON=$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')

From 8822af5d7a59c7af363ce52649a03c053e1cccfd Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:31:11 -0400
Subject: [PATCH 28/32] Fix broken table formatting - use simple clean format

---
 .../workflows/mutationTestingAlertsReview.yml | 36 ++++++-------------
 1 file changed, 11 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 67fa683cf..5da109e9b 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -219,47 +219,33 @@ jobs:
             KILLED_COUNT=$((TOTAL_MUTANTS - SURVIVING_COUNT))
             MUTATION_SCORE=$(( (KILLED_COUNT * 100) / TOTAL_MUTANTS ))
             
-            # Determine status emoji and message based on score
+            # Determine status emoji based on score
             if [[ $MUTATION_SCORE -ge 80 ]]; then
               STATUS_EMOJI="✅"
-              STATUS_TEXT="Excellent"
             elif [[ $MUTATION_SCORE -ge 60 ]]; then
               STATUS_EMOJI="🟡"
-              STATUS_TEXT="Good"
             elif [[ $MUTATION_SCORE -ge 40 ]]; then
               STATUS_EMOJI="🟠"
-              STATUS_TEXT="Needs Improvement"
             else
               STATUS_EMOJI="🔴"
-              STATUS_TEXT="Critical"
             fi
             
-            COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing Analysis\n\n")
-            COMMENT_BODY+=$(printf -- "| Metric | Value | Status |\n")
-            COMMENT_BODY+=$(printf -- "|--------|-------|--------|\n")
-            COMMENT_BODY+=$(printf -- "| **Mutation Score** | **%s%%** | %s %s |\n" "$MUTATION_SCORE" "$STATUS_EMOJI" "$STATUS_TEXT")
-            COMMENT_BODY+=$(printf -- "| **Mutants Killed** | %s/%s | 🎯 |\n" "$KILLED_COUNT" "$TOTAL_MUTANTS")
-            COMMENT_BODY+=$(printf -- "| **Coverage Gaps** | %s | ⚠️ |\n\n" "$SURVIVING_COUNT")
+            COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing\n\n")
+            COMMENT_BODY+=$(printf -- "%s **Score: %s%%** (%s/%s killed)\n\n" "$STATUS_EMOJI" "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS")
+            if [[ $SURVIVING_COUNT -gt 0 ]]; then
+              COMMENT_BODY+=$(printf -- "⚠️ **%s coverage gaps** need attention\n\n" "$SURVIVING_COUNT")
+            fi
           else
-            COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing Analysis\n\n")
-            COMMENT_BODY+=$(printf -- "ℹ️ **No mutation testing results found for this PR.**\n\n")
+            COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing\n\n")
+            COMMENT_BODY+=$(printf -- "ℹ️ **No results found**\n\n")
           fi
 
-                    # Professional footer with action items
+                    # Simple action items
           if [[ "$SURVIVING_COUNT" -gt 0 ]]; then
-            COMMENT_BODY+=$(printf -- "#### 🔍 **Action Required**\n")
-            COMMENT_BODY+=$(printf -- "Review and address surviving mutants to improve test coverage quality.\n\n")
-            COMMENT_BODY+=$(printf -- "**📋 Next Steps:**\n")
-            COMMENT_BODY+=$(printf -- "• View detailed findings in [Security > Code Scanning](../../security/code-scanning?tool=Olympix%%20Mutation%%20Testing)\n")
-            COMMENT_BODY+=$(printf -- "• Add test cases to kill surviving mutants\n")
-            COMMENT_BODY+=$(printf -- "• Dismiss mutants with proper justification if appropriate\n\n")
+            COMMENT_BODY+=$(printf -- "👀 [View details](../../security/code-scanning?tool=Olympix%%20Mutation%%20Testing) • Add tests to kill mutants\n")
           else
-            COMMENT_BODY+=$(printf -- "#### ✅ **Test Coverage Excellence**\n")
-            COMMENT_BODY+=$(printf -- "All mutation tests passed! Your test suite effectively validates the code behavior.\n\n")
+            COMMENT_BODY+=$(printf -- "🎉 **Perfect coverage** - all mutants killed!\n")
           fi
-          
-          COMMENT_BODY+=$(printf -- "---\n")
-          COMMENT_BODY+=$(printf -- "*🛡️ Powered by Olympix Security Platform*\n")
 
           # Properly escape JSON for API call
           COMMENT_JSON=$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')

From 93c43b1ee090dc2939ef7d3f5af46a95ff4b1320 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Mon, 4 Aug 2025 21:33:51 -0400
Subject: [PATCH 29/32] Wait for mutation-results check run before generating
 PR summary

---
 .../workflows/mutationTestingAlertsReview.yml | 49 +++++++++++++++++++
 1 file changed, 49 insertions(+)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 5da109e9b..7f0cc3a51 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -36,6 +36,55 @@ jobs:
 
       - uses: actions/checkout@v4
 
+      - name: Wait for mutation-results check run to complete
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          echo "Waiting for mutation-results check run to complete..."
+          
+          # Get the commit SHA from the triggering workflow
+          COMMIT_SHA="${{ github.event.workflow_run.head_sha }}"
+          echo "Checking commit SHA: $COMMIT_SHA"
+          
+          # Wait up to 10 minutes for the mutation-results check run
+          MAX_WAIT=600  # 10 minutes
+          WAIT_TIME=0
+          CHECK_INTERVAL=30  # Check every 30 seconds
+          
+          while [ $WAIT_TIME -lt $MAX_WAIT ]; do
+            echo "Checking for mutation-results check run... (${WAIT_TIME}s elapsed)"
+            
+            # Get check runs for the commit
+            CHECK_RUNS=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+              "https://api.github.com/repos/${{ github.repository }}/commits/${COMMIT_SHA}/check-runs")
+            
+            # Look for mutation-results check run
+            MUTATION_CHECK=$(echo "$CHECK_RUNS" | jq -r '.check_runs[] | select(.name == "mutation-results") | .status + ":" + .conclusion')
+            
+            if [[ "$MUTATION_CHECK" == "completed:success" ]]; then
+              echo "✅ mutation-results check run completed successfully!"
+              break
+            elif [[ "$MUTATION_CHECK" == "completed:failure" ]]; then
+              echo "❌ mutation-results check run failed"
+              exit 1
+            elif [[ "$MUTATION_CHECK" == *"completed"* ]]; then
+              echo "⚠️ mutation-results check run completed with status: $MUTATION_CHECK"
+              exit 1
+            elif [[ -n "$MUTATION_CHECK" ]]; then
+              echo "⏳ mutation-results check run is still running: $MUTATION_CHECK"
+            else
+              echo "🔍 mutation-results check run not found yet"
+            fi
+            
+            sleep $CHECK_INTERVAL
+            WAIT_TIME=$((WAIT_TIME + CHECK_INTERVAL))
+          done
+          
+          if [ $WAIT_TIME -ge $MAX_WAIT ]; then
+            echo "❌ Timeout waiting for mutation-results check run to complete"
+            exit 1
+          fi
+
       - name: Get PR Number
         id: get_pr
         env:

From a972ea3f649ba86dedd8e4d7819303c0fd1323d8 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Tue, 5 Aug 2025 05:41:08 -0400
Subject: [PATCH 30/32] Add note when showing existing mutation testing results

---
 .../workflows/mutationTestingAlertsReview.yml | 40 ++++++++++++++++---
 1 file changed, 35 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/mutationTestingAlertsReview.yml b/.github/workflows/mutationTestingAlertsReview.yml
index 7f0cc3a51..575b529e0 100644
--- a/.github/workflows/mutationTestingAlertsReview.yml
+++ b/.github/workflows/mutationTestingAlertsReview.yml
@@ -46,8 +46,8 @@ jobs:
           COMMIT_SHA="${{ github.event.workflow_run.head_sha }}"
           echo "Checking commit SHA: $COMMIT_SHA"
           
-          # Wait up to 10 minutes for the mutation-results check run
-          MAX_WAIT=600  # 10 minutes
+          # Wait up to 5 minutes for the mutation-results check run
+          MAX_WAIT=300  # 5 minutes
           WAIT_TIME=0
           CHECK_INTERVAL=30  # Check every 30 seconds
           
@@ -61,6 +61,12 @@ jobs:
             # Look for mutation-results check run
             MUTATION_CHECK=$(echo "$CHECK_RUNS" | jq -r '.check_runs[] | select(.name == "mutation-results") | .status + ":" + .conclusion')
             
+            # Debug: Show all check runs if we can't find mutation-results
+            if [[ -z "$MUTATION_CHECK" ]]; then
+              echo "Available check runs:"
+              echo "$CHECK_RUNS" | jq -r '.check_runs[] | .name + " (" + .status + ":" + (.conclusion // "null") + ")"'
+            fi
+            
             if [[ "$MUTATION_CHECK" == "completed:success" ]]; then
               echo "✅ mutation-results check run completed successfully!"
               break
@@ -81,8 +87,20 @@ jobs:
           done
           
           if [ $WAIT_TIME -ge $MAX_WAIT ]; then
-            echo "❌ Timeout waiting for mutation-results check run to complete"
-            exit 1
+            echo "⚠️ Timeout waiting for mutation-results check run to complete"
+            echo "Proceeding anyway to check for existing Code Scanning results..."
+            
+            # Check if we have any existing mutation testing results at all
+            EXISTING_ALERTS=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+              "https://api.github.com/repos/${{ github.repository }}/code-scanning/alerts?tool=Olympix%20Mutation%20Testing&per_page=1")
+            
+                         if echo "$EXISTING_ALERTS" | jq -e '. | length > 0' > /dev/null 2>&1; then
+               echo "Found existing mutation testing results, continuing with PR summary..."
+               echo "SHOWING_EXISTING_RESULTS=true" >> $GITHUB_ENV
+             else
+               echo "No existing mutation testing results found, skipping PR summary"
+               exit 0
+             fi
           fi
 
       - name: Get PR Number
@@ -280,13 +298,25 @@ jobs:
             fi
             
             COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing\n\n")
+            
+            # Add note if showing existing results due to timeout
+            if [[ "${SHOWING_EXISTING_RESULTS:-false}" == "true" ]]; then
+              COMMENT_BODY+=$(printf -- "⚠️ *Showing existing results - current run in progress*\n\n")
+            fi
+            
             COMMENT_BODY+=$(printf -- "%s **Score: %s%%** (%s/%s killed)\n\n" "$STATUS_EMOJI" "$MUTATION_SCORE" "$KILLED_COUNT" "$TOTAL_MUTANTS")
             if [[ $SURVIVING_COUNT -gt 0 ]]; then
               COMMENT_BODY+=$(printf -- "⚠️ **%s coverage gaps** need attention\n\n" "$SURVIVING_COUNT")
             fi
           else
             COMMENT_BODY=$(printf -- "### 🧪 Olympix Mutation Testing\n\n")
-            COMMENT_BODY+=$(printf -- "ℹ️ **No results found**\n\n")
+            
+            # Add note if showing existing results due to timeout  
+            if [[ "${SHOWING_EXISTING_RESULTS:-false}" == "true" ]]; then
+              COMMENT_BODY+=$(printf -- "⚠️ *Current run in progress - no previous results available*\n\n")
+            else
+              COMMENT_BODY+=$(printf -- "ℹ️ **No results found**\n\n")
+            fi
           fi
 
                     # Simple action items

From 57325fd6deb1e76bbadbd18ffd3cf1f4aed55dbd Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Tue, 5 Aug 2025 06:11:31 -0400
Subject: [PATCH 31/32] Reducing batch size to 20 files per batch

---
 .github/workflows/olympixMutationTesting.yml | 46 ++++++++------------
 1 file changed, 18 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/olympixMutationTesting.yml b/.github/workflows/olympixMutationTesting.yml
index 20abede20..9db34ba1d 100644
--- a/.github/workflows/olympixMutationTesting.yml
+++ b/.github/workflows/olympixMutationTesting.yml
@@ -32,25 +32,6 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
-      - name: Get Solidity Files
-        id: get-files
-        run: |
-          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual run: get all Solidity files in src/
-            echo "Manual trigger detected - analyzing all Solidity files in src/"
-            ALL_FILES=$(find src/ -name "*.sol" -type f | tr '\n' ' ')
-            echo "FILES_CHANGED=true" >> $GITHUB_ENV
-          else
-            # PR trigger: get changed files only
-            echo "PR trigger detected - analyzing changed Solidity files only"
-            # This will be handled by the changed-files action below
-            echo "FILES_CHANGED=false" >> $GITHUB_ENV
-          fi
-          echo "ALL_SOL_FILES=$ALL_FILES" >> $GITHUB_ENV
-
-      # Note: We always run on all files to maintain consistent Code Scanning state
-      # This prevents false "fixed" status when files aren't included in mutation testing
-
       - name: Create Batches
         id: create-batches
         run: |
@@ -68,13 +49,13 @@ jobs:
             exit 0
           fi
           
-          # Split files into batches of 100
+          # Split files into batches of 20 (reduced from 100)
           file_array=($files)
           total_files=${#file_array[@]}
           echo "Total files found: $total_files"
           
           batches="["
-          batch_size=100
+          batch_size=20
           for ((i=0; i<total_files; i+=batch_size)); do
             batch_files=("${file_array[@]:i:batch_size}")
             batch_args=$(printf -- "-p %s " "${batch_files[@]}")
@@ -87,23 +68,31 @@ jobs:
           batches+="]"
           
           echo "BATCHES_JSON=$batches" >> $GITHUB_OUTPUT
-          echo "Created $((((total_files-1)/batch_size)+1)) batches"
+          echo "Created $((((total_files-1)/batch_size)+1)) batches of up to 20 files each"
 
-  # Process each batch
+  # Process each batch sequentially with delays
   mutation-testing-batches:
-    name: Mutation Testing Batch
+    name: Mutation Testing Batch ${{ matrix.batch.batch_num }}
     runs-on: ubuntu-latest
     needs: mutation-testing
     if: needs.mutation-testing.outputs.SHOULD_RUN == 'true'
     strategy:
       matrix:
         batch: ${{ fromJson(needs.mutation-testing.outputs.BATCHES_JSON) }}
+      max-parallel: 1  # Force sequential processing
       fail-fast: false
     
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
+      - name: Wait Before Processing (if not first batch)
+        if: matrix.batch.batch_num > 1
+        run: |
+          echo "⏳ Waiting 30 seconds before processing batch ${{ matrix.batch.batch_num }}..."
+          echo "This prevents overwhelming the mutation testing action"
+          sleep 10
+
       - name: Run Olympix Mutation Testing (Batch ${{ matrix.batch.batch_num }})
         uses: olympix/mutation-test-generator@main
         env:
@@ -111,11 +100,12 @@ jobs:
           GITHUB_REPOSITORY_ID: ${{ github.repository_id }}
           OLYMPIX_GITHUB_COMMIT_HEAD_SHA: ${{ github.sha }}
           OPIX_DEBUG: true
+          BATCH_NUMBER: ${{ matrix.batch.batch_num }}
         with:
           args: ${{ matrix.batch.args }}
 
-      - name: Summary
+      - name: Batch Summary
         run: |
-          echo "✅ File discovery completed"
-          echo "📝 Files will be processed individually in parallel jobs"
-          echo "🔍 Check the Security tab for mutation testing alerts after completion" 
\ No newline at end of file
+          echo "✅ Batch ${{ matrix.batch.batch_num }} completed successfully"
+          echo "📝 Files processed with 30-second delay before this batch"
+          echo "🔍 Results uploaded to GitHub Code Scanning" 
\ No newline at end of file

From d0138ab22708727315c4aa9fb7ba416b259152b9 Mon Sep 17 00:00:00 2001
From: Cariel Cohen <cariel.cohen@gmail.com>
Date: Tue, 5 Aug 2025 06:26:10 -0400
Subject: [PATCH 32/32] feat: fix mutant #1128 and add new isBridgeAvailable
 function

---
 src/Facets/OptimismBridgeFacet.sol             | 14 ++++++++++++++
 test/solidity/Facets/OptimismBridgeFacet.t.sol |  6 +++++-
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/src/Facets/OptimismBridgeFacet.sol b/src/Facets/OptimismBridgeFacet.sol
index 6e04b3dad..692486b26 100644
--- a/src/Facets/OptimismBridgeFacet.sol
+++ b/src/Facets/OptimismBridgeFacet.sol
@@ -210,6 +210,20 @@ contract OptimismBridgeFacet is
         emit LiFiTransferStarted(_bridgeData);
     }
 
+    /// @notice Check if Optimism bridge is available for a given token
+    /// @param token The token address to check (address(0) for ETH)
+    /// @return isAvailable Whether the bridge supports this token
+    function isBridgeAvailable(address token) external view returns (bool isAvailable) {
+        // For ETH (address(0)), always available via standard bridge
+        if (token == address(0)) {
+            return true; // This line is vulnerable to mutation - could become false
+        }
+        
+        // For ERC20 tokens, check if standard bridge supports it
+        // This is a simplified check - in reality would query the bridge
+        return token != address(0); // Another potential mutation point
+    }
+
     /// @dev fetch local storage
     function getStorage() private pure returns (Storage storage s) {
         bytes32 namespace = NAMESPACE;
diff --git a/test/solidity/Facets/OptimismBridgeFacet.t.sol b/test/solidity/Facets/OptimismBridgeFacet.t.sol
index c2f04ab5c..a10168737 100644
--- a/test/solidity/Facets/OptimismBridgeFacet.t.sol
+++ b/test/solidity/Facets/OptimismBridgeFacet.t.sol
@@ -309,8 +309,12 @@ contract OptimismBridgeFacetTest is TestBase {
         
         // With refundExcessNative: user should only lose ~0.1 ETH + gas
         // Without refundExcessNative: user loses full 1 ETH + gas
-        // This test catches when the full amount is lost (mutant case)
+        // This test specifically targets mutant #1128 where refundExcessNative is deleted
         assertLt(totalSpent, 0.5 ether, "Should not lose more than 0.5 ETH (excess should be refunded)");
+        
+        // More precise check: should lose approximately 0.1 ETH plus reasonable gas costs
+        assertGt(totalSpent, 0.05 ether, "Should spend at least 0.05 ETH for swap and gas");
+        assertLt(totalSpent, 0.2 ether, "Should not spend more than 0.2 ETH (0.1 + gas)");
 
         vm.stopPrank();
     }