Test that token clawback rejects muxed sources.

Author: fnando

cmd/crates/soroban-test/tests/it/integration/token/clawback.rs

@@ -86,6 +86,27 @@ async fn clawback_fails_when_sac_not_deployed() {
     );
 }
 
+#[tokio::test]
+async fn clawback_rejects_muxed_source_with_clear_error() {
+    let sandbox = &TestEnv::new();
+    let holder = new_account(sandbox, "holder");
+
+    // Muxed (M…) source accounts aren't supported by the invoke pipeline yet
+    // (see #2645). Until then the command must reject them up front with a clear
+    // message rather than a raw strkey decode error deep in the pipeline.
+    let muxed = "MA3D5KRYM6CB7OWQ6TWYRR3Z4T7GNZLKERYNZGGA5SOAOPIFY6YQGAAAAAAAAAPCICBKU";
+    sandbox
+        .new_assert_cmd("token")
+        .args([
+            "clawback", "--id", "native", "--admin", muxed, "--from", &holder, "--amount", "1",
+        ])
+        .assert()
+        .failure()
+        .stderr(predicates::str::contains(
+            "muxed (M…) source accounts are not yet supported",
+        ));
+}
+
 #[tokio::test]
 async fn clawback_rejects_negative_amount_before_any_rpc() {
     let sandbox = &TestEnv::new();