[karagozemin]

Closes #517

Summary

• validate public contract IDs before issuing RPC requests
• resolve deployed Wasm through contract-instance and contract-code ledger entries
• enforce a 1 MiB decode boundary before parsing custom sections
• independently decode contractenvmetav0 and every contractmetav0 key/value entry
• render the no-publisher-metadata case as a successful explicit outcome
• add a 36-file feature slice with deterministic Wasm/XDR fixtures and focused coverage

Verification

• npm run verify:features -- contract-metadata-viewer
• npx eslint features/contract-metadata-viewer (0 errors)
• npx vitest run features/contract-metadata-viewer (17 tests passed)
• npx tsc --noEmit

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.