Contract

Contract Source Code (Solidity Standard Json-Input format)

IDE

• Blockscan IDE
• 🤖 Code ReaderBeta
• Remix IDE

More Options

• Similar
• Sol2Uml
• Submit Audit
• Compare

/* -*- c-basic-offset: 4 -*- */
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "./InflationSnapshots.sol";
import "../governance/monetary/CurrencyGovernance.sol";

/**
 * @title An ERC20 token interface to the Eco currency system.
 */
contract ECO is InflationSnapshots {
    //////////////////////////////////////////////
    //////////////////// VARS ////////////////////
    //////////////////////////////////////////////

    /**
     * Mapping storing contracts able to rebase the token
     */
    mapping(address => bool) public rebasers;
    /**
     * Mapping storing contracts able to rebase the token
     */
    mapping(address => bool) public snapshotters;

    //////////////////////////////////////////////
    /////////////////// ERRORS ///////////////////
    //////////////////////////////////////////////

    /**
     * error for when an address tries to rebase without permission
     */
    error OnlyRebasers();

    /**
     * error for when an address tries to snapshot without permission
     */
    error OnlySnapshotters();

    //////////////////////////////////////////////
    /////////////////// EVENTS ///////////////////
    //////////////////////////////////////////////

    /**
     * emits when the rebasers permissions are changed
     * @param actor denotes the new address whose permissions are being updated
     * @param newPermission denotes the new ability of the actor address (true for can rebase, false for cannot)
     */
    event UpdatedRebasers(address actor, bool newPermission);

    /**
     * emits when the snapshotters permissions are changed
     * @param actor denotes the new address whose permissions are being updated
     * @param newPermission denotes the new ability of the actor address (true for can snapshot, false for cannot)
     */
    event UpdatedSnapshotters(address actor, bool newPermission);

    //////////////////////////////////////////////
    ////////////////// MODIFIERS /////////////////
    //////////////////////////////////////////////

    /**
     * Modifier for checking if the sender is a rebaser
     */
    modifier onlyRebaserRole() {
        if (!rebasers[msg.sender]) {
            revert OnlyRebasers();
        }
        _;
    }

    /**
     * Modifier for checking if the sender is a snapshotter
     */
    modifier onlySnapshotterRole() {
        if (!snapshotters[msg.sender]) {
            revert OnlySnapshotters();
        }
        _;
    }

    //////////////////////////////////////////////
    ///////////////// CONSTRUCTOR ////////////////
    //////////////////////////////////////////////

    constructor(
        Policy _policy,
        address _initialPauser
    ) InflationSnapshots(_policy, "ECO", "ECO", _initialPauser) {}

    //////////////////////////////////////////////
    ///////////////// INITIALIZER ////////////////
    //////////////////////////////////////////////

    function initialize(
        address _self
    ) public virtual override onlyConstruction {
        super.initialize(_self);
        pauser = ERC20Pausable(_self).pauser();
    }

    //////////////////////////////////////////////
    ////////////////// FUNCTIONS /////////////////
    //////////////////////////////////////////////

    /**
     * Rebase the currency using an inflation multiplier
     * @param _inflationMultiplier the multipler used to rebase the currency
     */
    function rebase(uint256 _inflationMultiplier) public onlyRebaserRole {
        _rebase(_inflationMultiplier);
    }

    /**
     * Creates a new snapshot
     */
    function snapshot() public onlySnapshotterRole {
        _snapshot();
    }

    /**
     * change the rebasing permissions for an address
     * only callable by tokenRoleAdmin
     * @param _key the address to change permissions for
     * @param _value the new permission. true = can rebase, false = cannot rebase
     */
    function updateRebasers(address _key, bool _value) public onlyPolicy {
        rebasers[_key] = _value;
        emit UpdatedRebasers(_key, _value);
    }

    /**
     * change the rebasing permissions for an address
     * only callable by tokenRoleAdmin
     * @param _key the address to change permissions for
     * @param _value the new permission. true = can snapshot, false = cannot snapshot
     */
    function updateSnapshotters(address _key, bool _value) public onlyPolicy {
        snapshotters[_key] = _value;
        emit UpdatedSnapshotters(_key, _value);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.7.0) (security/Pausable.sol)

pragma solidity ^0.8.0;

import "../utils/Context.sol";

/**
 * @dev Contract module which allows children to implement an emergency stop
 * mechanism that can be triggered by an authorized account.
 *
 * This module is used through inheritance. It will make available the
 * modifiers `whenNotPaused` and `whenPaused`, which can be applied to
 * the functions of your contract. Note that they will not be pausable by
 * simply including this module, only once the modifiers are put in place.
 */
abstract contract Pausable is Context {
    /**
     * @dev Emitted when the pause is triggered by `account`.
     */
    event Paused(address account);

    /**
     * @dev Emitted when the pause is lifted by `account`.
     */
    event Unpaused(address account);

    bool private _paused;

    /**
     * @dev Initializes the contract in unpaused state.
     */
    constructor() {
        _paused = false;
    }

    /**
     * @dev Modifier to make a function callable only when the contract is not paused.
     *
     * Requirements:
     *
     * - The contract must not be paused.
     */
    modifier whenNotPaused() {
        _requireNotPaused();
        _;
    }

    /**
     * @dev Modifier to make a function callable only when the contract is paused.
     *
     * Requirements:
     *
     * - The contract must be paused.
     */
    modifier whenPaused() {
        _requirePaused();
        _;
    }

    /**
     * @dev Returns true if the contract is paused, and false otherwise.
     */
    function paused() public view virtual returns (bool) {
        return _paused;
    }

    /**
     * @dev Throws if the contract is paused.
     */
    function _requireNotPaused() internal view virtual {
        require(!paused(), "Pausable: paused");
    }

    /**
     * @dev Throws if the contract is not paused.
     */
    function _requirePaused() internal view virtual {
        require(paused(), "Pausable: not paused");
    }

    /**
     * @dev Triggers stopped state.
     *
     * Requirements:
     *
     * - The contract must not be paused.
     */
    function _pause() internal virtual whenNotPaused {
        _paused = true;
        emit Paused(_msgSender());
    }

    /**
     * @dev Returns to normal state.
     *
     * Requirements:
     *
     * - The contract must be paused.
     */
    function _unpause() internal virtual whenPaused {
        _paused = false;
        emit Unpaused(_msgSender());
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts v4.4.1 (token/ERC20/extensions/draft-IERC20Permit.sol)

pragma solidity ^0.8.0;

/**
 * @dev Interface of the ERC20 Permit extension allowing approvals to be made via signatures, as defined in
 * https://eips.ethereum.org/EIPS/eip-2612[EIP-2612].
 *
 * Adds the {permit} method, which can be used to change an account's ERC20 allowance (see {IERC20-allowance}) by
 * presenting a message signed by the account. By not relying on {IERC20-approve}, the token holder account doesn't
 * need to send a transaction, and thus is not required to hold Ether at all.
 */
interface IERC20Permit {
    /**
     * @dev Sets `value` as the allowance of `spender` over ``owner``'s tokens,
     * given ``owner``'s signed approval.
     *
     * IMPORTANT: The same issues {IERC20-approve} has related to transaction
     * ordering also apply here.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     * - `deadline` must be a timestamp in the future.
     * - `v`, `r` and `s` must be a valid `secp256k1` signature from `owner`
     * over the EIP712-formatted function arguments.
     * - the signature must use ``owner``'s current nonce (see {nonces}).
     *
     * For more information on the signature format, see the
     * https://eips.ethereum.org/EIPS/eip-2612#specification[relevant EIP
     * section].
     */
    function permit(
        address owner,
        address spender,
        uint256 value,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) external;

    /**
     * @dev Returns the current nonce for `owner`. This value must be
     * included whenever a signature is generated for {permit}.
     *
     * Every successful call to {permit} increases ``owner``'s nonce by one. This
     * prevents a signature from being used multiple times.
     */
    function nonces(address owner) external view returns (uint256);

    /**
     * @dev Returns the domain separator used in the encoding of the signature for {permit}, as defined by {EIP712}.
     */
    // solhint-disable-next-line func-name-mixedcase
    function DOMAIN_SEPARATOR() external view returns (bytes32);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts v4.4.1 (token/ERC20/extensions/IERC20Metadata.sol)

pragma solidity ^0.8.0;

import "../IERC20.sol";

/**
 * @dev Interface for the optional metadata functions from the ERC20 standard.
 *
 * _Available since v4.1._
 */
interface IERC20Metadata is IERC20 {
    /**
     * @dev Returns the name of the token.
     */
    function name() external view returns (string memory);

    /**
     * @dev Returns the symbol of the token.
     */
    function symbol() external view returns (string memory);

    /**
     * @dev Returns the decimals places of the token.
     */
    function decimals() external view returns (uint8);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.6.0) (token/ERC20/IERC20.sol)

pragma solidity ^0.8.0;

/**
 * @dev Interface of the ERC20 standard as defined in the EIP.
 */
interface IERC20 {
    /**
     * @dev Emitted when `value` tokens are moved from one account (`from`) to
     * another (`to`).
     *
     * Note that `value` may be zero.
     */
    event Transfer(address indexed from, address indexed to, uint256 value);

    /**
     * @dev Emitted when the allowance of a `spender` for an `owner` is set by
     * a call to {approve}. `value` is the new allowance.
     */
    event Approval(address indexed owner, address indexed spender, uint256 value);

    /**
     * @dev Returns the amount of tokens in existence.
     */
    function totalSupply() external view returns (uint256);

    /**
     * @dev Returns the amount of tokens owned by `account`.
     */
    function balanceOf(address account) external view returns (uint256);

    /**
     * @dev Moves `amount` tokens from the caller's account to `to`.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transfer(address to, uint256 amount) external returns (bool);

    /**
     * @dev Returns the remaining number of tokens that `spender` will be
     * allowed to spend on behalf of `owner` through {transferFrom}. This is
     * zero by default.
     *
     * This value changes when {approve} or {transferFrom} are called.
     */
    function allowance(address owner, address spender) external view returns (uint256);

    /**
     * @dev Sets `amount` as the allowance of `spender` over the caller's tokens.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * IMPORTANT: Beware that changing an allowance with this method brings the risk
     * that someone may use both the old and the new allowance by unfortunate
     * transaction ordering. One possible solution to mitigate this race
     * condition is to first reduce the spender's allowance to 0 and set the
     * desired value afterwards:
     * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
     *
     * Emits an {Approval} event.
     */
    function approve(address spender, uint256 amount) external returns (bool);

    /**
     * @dev Moves `amount` tokens from `from` to `to` using the
     * allowance mechanism. `amount` is then deducted from the caller's
     * allowance.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transferFrom(
        address from,
        address to,
        uint256 amount
    ) external returns (bool);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts v4.4.1 (utils/Context.sol)

pragma solidity ^0.8.0;

/**
 * @dev Provides information about the current execution context, including the
 * sender of the transaction and its data. While these are generally available
 * via msg.sender and msg.data, they should not be accessed in such a direct
 * manner, since when dealing with meta-transactions the account sending and
 * paying for execution may not be the actual sender (as far as an application
 * is concerned).
 *
 * This contract is only required for intermediate, library-like contracts.
 */
abstract contract Context {
    function _msgSender() internal view virtual returns (address) {
        return msg.sender;
    }

    function _msgData() internal view virtual returns (bytes calldata) {
        return msg.data;
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts v4.4.1 (utils/Counters.sol)

pragma solidity ^0.8.0;

/**
 * @title Counters
 * @author Matt Condon (@shrugs)
 * @dev Provides counters that can only be incremented, decremented or reset. This can be used e.g. to track the number
 * of elements in a mapping, issuing ERC721 ids, or counting request ids.
 *
 * Include with `using Counters for Counters.Counter;`
 */
library Counters {
    struct Counter {
        // This variable should never be directly accessed by users of the library: interactions must be restricted to
        // the library's function. As of Solidity v0.5.2, this cannot be enforced, though there is a proposal to add
        // this feature: see https://github.com/ethereum/solidity/issues/4637
        uint256 _value; // default: 0
    }

    function current(Counter storage counter) internal view returns (uint256) {
        return counter._value;
    }

    function increment(Counter storage counter) internal {
        unchecked {
            counter._value += 1;
        }
    }

    function decrement(Counter storage counter) internal {
        uint256 value = counter._value;
        require(value > 0, "Counter: decrement overflow");
        unchecked {
            counter._value = value - 1;
        }
    }

    function reset(Counter storage counter) internal {
        counter._value = 0;
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.8.0) (utils/cryptography/ECDSA.sol)

pragma solidity ^0.8.0;

import "../Strings.sol";

/**
 * @dev Elliptic Curve Digital Signature Algorithm (ECDSA) operations.
 *
 * These functions can be used to verify that a message was signed by the holder
 * of the private keys of a given address.
 */
library ECDSA {
    enum RecoverError {
        NoError,
        InvalidSignature,
        InvalidSignatureLength,
        InvalidSignatureS,
        InvalidSignatureV // Deprecated in v4.8
    }

    function _throwError(RecoverError error) private pure {
        if (error == RecoverError.NoError) {
            return; // no error: do nothing
        } else if (error == RecoverError.InvalidSignature) {
            revert("ECDSA: invalid signature");
        } else if (error == RecoverError.InvalidSignatureLength) {
            revert("ECDSA: invalid signature length");
        } else if (error == RecoverError.InvalidSignatureS) {
            revert("ECDSA: invalid signature 's' value");
        }
    }

    /**
     * @dev Returns the address that signed a hashed message (`hash`) with
     * `signature` or error string. This address can then be used for verification purposes.
     *
     * The `ecrecover` EVM opcode allows for malleable (non-unique) signatures:
     * this function rejects them by requiring the `s` value to be in the lower
     * half order, and the `v` value to be either 27 or 28.
     *
     * IMPORTANT: `hash` _must_ be the result of a hash operation for the
     * verification to be secure: it is possible to craft signatures that
     * recover to arbitrary addresses for non-hashed data. A safe way to ensure
     * this is by receiving a hash of the original message (which may otherwise
     * be too long), and then calling {toEthSignedMessageHash} on it.
     *
     * Documentation for signature generation:
     * - with https://web3js.readthedocs.io/en/v1.3.4/web3-eth-accounts.html#sign[Web3.js]
     * - with https://docs.ethers.io/v5/api/signer/#Signer-signMessage[ethers]
     *
     * _Available since v4.3._
     */
    function tryRecover(bytes32 hash, bytes memory signature) internal pure returns (address, RecoverError) {
        if (signature.length == 65) {
            bytes32 r;
            bytes32 s;
            uint8 v;
            // ecrecover takes the signature parameters, and the only way to get them
            // currently is to use assembly.
            /// @solidity memory-safe-assembly
            assembly {
                r := mload(add(signature, 0x20))
                s := mload(add(signature, 0x40))
                v := byte(0, mload(add(signature, 0x60)))
            }
            return tryRecover(hash, v, r, s);
        } else {
            return (address(0), RecoverError.InvalidSignatureLength);
        }
    }

    /**
     * @dev Returns the address that signed a hashed message (`hash`) with
     * `signature`. This address can then be used for verification purposes.
     *
     * The `ecrecover` EVM opcode allows for malleable (non-unique) signatures:
     * this function rejects them by requiring the `s` value to be in the lower
     * half order, and the `v` value to be either 27 or 28.
     *
     * IMPORTANT: `hash` _must_ be the result of a hash operation for the
     * verification to be secure: it is possible to craft signatures that
     * recover to arbitrary addresses for non-hashed data. A safe way to ensure
     * this is by receiving a hash of the original message (which may otherwise
     * be too long), and then calling {toEthSignedMessageHash} on it.
     */
    function recover(bytes32 hash, bytes memory signature) internal pure returns (address) {
        (address recovered, RecoverError error) = tryRecover(hash, signature);
        _throwError(error);
        return recovered;
    }

    /**
     * @dev Overload of {ECDSA-tryRecover} that receives the `r` and `vs` short-signature fields separately.
     *
     * See https://eips.ethereum.org/EIPS/eip-2098[EIP-2098 short signatures]
     *
     * _Available since v4.3._
     */
    function tryRecover(
        bytes32 hash,
        bytes32 r,
        bytes32 vs
    ) internal pure returns (address, RecoverError) {
        bytes32 s = vs & bytes32(0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff);
        uint8 v = uint8((uint256(vs) >> 255) + 27);
        return tryRecover(hash, v, r, s);
    }

    /**
     * @dev Overload of {ECDSA-recover} that receives the `r and `vs` short-signature fields separately.
     *
     * _Available since v4.2._
     */
    function recover(
        bytes32 hash,
        bytes32 r,
        bytes32 vs
    ) internal pure returns (address) {
        (address recovered, RecoverError error) = tryRecover(hash, r, vs);
        _throwError(error);
        return recovered;
    }

    /**
     * @dev Overload of {ECDSA-tryRecover} that receives the `v`,
     * `r` and `s` signature fields separately.
     *
     * _Available since v4.3._
     */
    function tryRecover(
        bytes32 hash,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) internal pure returns (address, RecoverError) {
        // EIP-2 still allows signature malleability for ecrecover(). Remove this possibility and make the signature
        // unique. Appendix F in the Ethereum Yellow paper (https://ethereum.github.io/yellowpaper/paper.pdf), defines
        // the valid range for s in (301): 0 < s < secp256k1n ÷ 2 + 1, and for v in (302): v ∈ {27, 28}. Most
        // signatures from current libraries generate a unique signature with an s-value in the lower half order.
        //
        // If your library generates malleable signatures, such as s-values in the upper range, calculate a new s-value
        // with 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 - s1 and flip v from 27 to 28 or
        // vice versa. If your library also generates signatures with 0/1 for v instead 27/28, add 27 to v to accept
        // these malleable signatures as well.
        if (uint256(s) > 0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0) {
            return (address(0), RecoverError.InvalidSignatureS);
        }

        // If the signature is valid (and not malleable), return the signer address
        address signer = ecrecover(hash, v, r, s);
        if (signer == address(0)) {
            return (address(0), RecoverError.InvalidSignature);
        }

        return (signer, RecoverError.NoError);
    }

    /**
     * @dev Overload of {ECDSA-recover} that receives the `v`,
     * `r` and `s` signature fields separately.
     */
    function recover(
        bytes32 hash,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) internal pure returns (address) {
        (address recovered, RecoverError error) = tryRecover(hash, v, r, s);
        _throwError(error);
        return recovered;
    }

    /**
     * @dev Returns an Ethereum Signed Message, created from a `hash`. This
     * produces hash corresponding to the one signed with the
     * https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`]
     * JSON-RPC method as part of EIP-191.
     *
     * See {recover}.
     */
    function toEthSignedMessageHash(bytes32 hash) internal pure returns (bytes32) {
        // 32 is the length in bytes of hash,
        // enforced by the type signature above
        return keccak256(abi.encodePacked("\x19Ethereum Signed Message:\n32", hash));
    }

    /**
     * @dev Returns an Ethereum Signed Message, created from `s`. This
     * produces hash corresponding to the one signed with the
     * https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`]
     * JSON-RPC method as part of EIP-191.
     *
     * See {recover}.
     */
    function toEthSignedMessageHash(bytes memory s) internal pure returns (bytes32) {
        return keccak256(abi.encodePacked("\x19Ethereum Signed Message:\n", Strings.toString(s.length), s));
    }

    /**
     * @dev Returns an Ethereum Signed Typed Data, created from a
     * `domainSeparator` and a `structHash`. This produces hash corresponding
     * to the one signed with the
     * https://eips.ethereum.org/EIPS/eip-712[`eth_signTypedData`]
     * JSON-RPC method as part of EIP-712.
     *
     * See {recover}.
     */
    function toTypedDataHash(bytes32 domainSeparator, bytes32 structHash) internal pure returns (bytes32) {
        return keccak256(abi.encodePacked("\x19\x01", domainSeparator, structHash));
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.8.0) (utils/cryptography/EIP712.sol)

pragma solidity ^0.8.0;

import "./ECDSA.sol";

/**
 * @dev https://eips.ethereum.org/EIPS/eip-712[EIP 712] is a standard for hashing and signing of typed structured data.
 *
 * The encoding specified in the EIP is very generic, and such a generic implementation in Solidity is not feasible,
 * thus this contract does not implement the encoding itself. Protocols need to implement the type-specific encoding
 * they need in their contracts using a combination of `abi.encode` and `keccak256`.
 *
 * This contract implements the EIP 712 domain separator ({_domainSeparatorV4}) that is used as part of the encoding
 * scheme, and the final step of the encoding to obtain the message digest that is then signed via ECDSA
 * ({_hashTypedDataV4}).
 *
 * The implementation of the domain separator was designed to be as efficient as possible while still properly updating
 * the chain id to protect against replay attacks on an eventual fork of the chain.
 *
 * NOTE: This contract implements the version of the encoding known as "v4", as implemented by the JSON RPC method
 * https://docs.metamask.io/guide/signing-data.html[`eth_signTypedDataV4` in MetaMask].
 *
 * _Available since v3.4._
 */
abstract contract EIP712 {
    /* solhint-disable var-name-mixedcase */
    // Cache the domain separator as an immutable value, but also store the chain id that it corresponds to, in order to
    // invalidate the cached domain separator if the chain id changes.
    bytes32 private immutable _CACHED_DOMAIN_SEPARATOR;
    uint256 private immutable _CACHED_CHAIN_ID;
    address private immutable _CACHED_THIS;

    bytes32 private immutable _HASHED_NAME;
    bytes32 private immutable _HASHED_VERSION;
    bytes32 private immutable _TYPE_HASH;

    /* solhint-enable var-name-mixedcase */

    /**
     * @dev Initializes the domain separator and parameter caches.
     *
     * The meaning of `name` and `version` is specified in
     * https://eips.ethereum.org/EIPS/eip-712#definition-of-domainseparator[EIP 712]:
     *
     * - `name`: the user readable name of the signing domain, i.e. the name of the DApp or the protocol.
     * - `version`: the current major version of the signing domain.
     *
     * NOTE: These parameters cannot be changed except through a xref:learn::upgrading-smart-contracts.adoc[smart
     * contract upgrade].
     */
    constructor(string memory name, string memory version) {
        bytes32 hashedName = keccak256(bytes(name));
        bytes32 hashedVersion = keccak256(bytes(version));
        bytes32 typeHash = keccak256(
            "EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)"
        );
        _HASHED_NAME = hashedName;
        _HASHED_VERSION = hashedVersion;
        _CACHED_CHAIN_ID = block.chainid;
        _CACHED_DOMAIN_SEPARATOR = _buildDomainSeparator(typeHash, hashedName, hashedVersion);
        _CACHED_THIS = address(this);
        _TYPE_HASH = typeHash;
    }

    /**
     * @dev Returns the domain separator for the current chain.
     */
    function _domainSeparatorV4() internal view returns (bytes32) {
        if (address(this) == _CACHED_THIS && block.chainid == _CACHED_CHAIN_ID) {
            return _CACHED_DOMAIN_SEPARATOR;
        } else {
            return _buildDomainSeparator(_TYPE_HASH, _HASHED_NAME, _HASHED_VERSION);
        }
    }

    function _buildDomainSeparator(
        bytes32 typeHash,
        bytes32 nameHash,
        bytes32 versionHash
    ) private view returns (bytes32) {
        return keccak256(abi.encode(typeHash, nameHash, versionHash, block.chainid, address(this)));
    }

    /**
     * @dev Given an already https://eips.ethereum.org/EIPS/eip-712#definition-of-hashstruct[hashed struct], this
     * function returns the hash of the fully encoded EIP712 message for this domain.
     *
     * This hash can be used together with {ECDSA-recover} to obtain the signer of a message. For example:
     *
     * ```solidity
     * bytes32 digest = _hashTypedDataV4(keccak256(abi.encode(
     *     keccak256("Mail(address to,string contents)"),
     *     mailTo,
     *     keccak256(bytes(mailContents))
     * )));
     * address signer = ECDSA.recover(digest, signature);
     * ```
     */
    function _hashTypedDataV4(bytes32 structHash) internal view virtual returns (bytes32) {
        return ECDSA.toTypedDataHash(_domainSeparatorV4(), structHash);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.8.0) (utils/math/Math.sol)

pragma solidity ^0.8.0;

/**
 * @dev Standard math utilities missing in the Solidity language.
 */
library Math {
    enum Rounding {
        Down, // Toward negative infinity
        Up, // Toward infinity
        Zero // Toward zero
    }

    /**
     * @dev Returns the largest of two numbers.
     */
    function max(uint256 a, uint256 b) internal pure returns (uint256) {
        return a > b ? a : b;
    }

    /**
     * @dev Returns the smallest of two numbers.
     */
    function min(uint256 a, uint256 b) internal pure returns (uint256) {
        return a < b ? a : b;
    }

    /**
     * @dev Returns the average of two numbers. The result is rounded towards
     * zero.
     */
    function average(uint256 a, uint256 b) internal pure returns (uint256) {
        // (a + b) / 2 can overflow.
        return (a & b) + (a ^ b) / 2;
    }

    /**
     * @dev Returns the ceiling of the division of two numbers.
     *
     * This differs from standard division with `/` in that it rounds up instead
     * of rounding down.
     */
    function ceilDiv(uint256 a, uint256 b) internal pure returns (uint256) {
        // (a + b - 1) / b can overflow on addition, so we distribute.
        return a == 0 ? 0 : (a - 1) / b + 1;
    }

    /**
     * @notice Calculates floor(x * y / denominator) with full precision. Throws if result overflows a uint256 or denominator == 0
     * @dev Original credit to Remco Bloemen under MIT license (https://xn--2-umb.com/21/muldiv)
     * with further edits by Uniswap Labs also under MIT license.
     */
    function mulDiv(
        uint256 x,
        uint256 y,
        uint256 denominator
    ) internal pure returns (uint256 result) {
        unchecked {
            // 512-bit multiply [prod1 prod0] = x * y. Compute the product mod 2^256 and mod 2^256 - 1, then use
            // use the Chinese Remainder Theorem to reconstruct the 512 bit result. The result is stored in two 256
            // variables such that product = prod1 * 2^256 + prod0.
            uint256 prod0; // Least significant 256 bits of the product
            uint256 prod1; // Most significant 256 bits of the product
            assembly {
                let mm := mulmod(x, y, not(0))
                prod0 := mul(x, y)
                prod1 := sub(sub(mm, prod0), lt(mm, prod0))
            }

            // Handle non-overflow cases, 256 by 256 division.
            if (prod1 == 0) {
                return prod0 / denominator;
            }

            // Make sure the result is less than 2^256. Also prevents denominator == 0.
            require(denominator > prod1);

            ///////////////////////////////////////////////
            // 512 by 256 division.
            ///////////////////////////////////////////////

            // Make division exact by subtracting the remainder from [prod1 prod0].
            uint256 remainder;
            assembly {
                // Compute remainder using mulmod.
                remainder := mulmod(x, y, denominator)

                // Subtract 256 bit number from 512 bit number.
                prod1 := sub(prod1, gt(remainder, prod0))
                prod0 := sub(prod0, remainder)
            }

            // Factor powers of two out of denominator and compute largest power of two divisor of denominator. Always >= 1.
            // See https://cs.stackexchange.com/q/138556/92363.

            // Does not overflow because the denominator cannot be zero at this stage in the function.
            uint256 twos = denominator & (~denominator + 1);
            assembly {
                // Divide denominator by twos.
                denominator := div(denominator, twos)

                // Divide [prod1 prod0] by twos.
                prod0 := div(prod0, twos)

                // Flip twos such that it is 2^256 / twos. If twos is zero, then it becomes one.
                twos := add(div(sub(0, twos), twos), 1)
            }

            // Shift in bits from prod1 into prod0.
            prod0 |= prod1 * twos;

            // Invert denominator mod 2^256. Now that denominator is an odd number, it has an inverse modulo 2^256 such
            // that denominator * inv = 1 mod 2^256. Compute the inverse by starting with a seed that is correct for
            // four bits. That is, denominator * inv = 1 mod 2^4.
            uint256 inverse = (3 * denominator) ^ 2;

            // Use the Newton-Raphson iteration to improve the precision. Thanks to Hensel's lifting lemma, this also works
            // in modular arithmetic, doubling the correct bits in each step.
            inverse *= 2 - denominator * inverse; // inverse mod 2^8
            inverse *= 2 - denominator * inverse; // inverse mod 2^16
            inverse *= 2 - denominator * inverse; // inverse mod 2^32
            inverse *= 2 - denominator * inverse; // inverse mod 2^64
            inverse *= 2 - denominator * inverse; // inverse mod 2^128
            inverse *= 2 - denominator * inverse; // inverse mod 2^256

            // Because the division is now exact we can divide by multiplying with the modular inverse of denominator.
            // This will give us the correct result modulo 2^256. Since the preconditions guarantee that the outcome is
            // less than 2^256, this is the final result. We don't need to compute the high bits of the result and prod1
            // is no longer required.
            result = prod0 * inverse;
            return result;
        }
    }

    /**
     * @notice Calculates x * y / denominator with full precision, following the selected rounding direction.
     */
    function mulDiv(
        uint256 x,
        uint256 y,
        uint256 denominator,
        Rounding rounding
    ) internal pure returns (uint256) {
        uint256 result = mulDiv(x, y, denominator);
        if (rounding == Rounding.Up && mulmod(x, y, denominator) > 0) {
            result += 1;
        }
        return result;
    }

    /**
     * @dev Returns the square root of a number. If the number is not a perfect square, the value is rounded down.
     *
     * Inspired by Henry S. Warren, Jr.'s "Hacker's Delight" (Chapter 11).
     */
    function sqrt(uint256 a) internal pure returns (uint256) {
        if (a == 0) {
            return 0;
        }

        // For our first guess, we get the biggest power of 2 which is smaller than the square root of the target.
        //
        // We know that the "msb" (most significant bit) of our target number `a` is a power of 2 such that we have
        // `msb(a) <= a < 2*msb(a)`. This value can be written `msb(a)=2**k` with `k=log2(a)`.
        //
        // This can be rewritten `2**log2(a) <= a < 2**(log2(a) + 1)`
        // → `sqrt(2**k) <= sqrt(a) < sqrt(2**(k+1))`
        // → `2**(k/2) <= sqrt(a) < 2**((k+1)/2) <= 2**(k/2 + 1)`
        //
        // Consequently, `2**(log2(a) / 2)` is a good first approximation of `sqrt(a)` with at least 1 correct bit.
        uint256 result = 1 << (log2(a) >> 1);

        // At this point `result` is an estimation with one bit of precision. We know the true value is a uint128,
        // since it is the square root of a uint256. Newton's method converges quadratically (precision doubles at
        // every iteration). We thus need at most 7 iteration to turn our partial result with one bit of precision
        // into the expected uint128 result.
        unchecked {
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            return min(result, a / result);
        }
    }

    /**
     * @notice Calculates sqrt(a), following the selected rounding direction.
     */
    function sqrt(uint256 a, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = sqrt(a);
            return result + (rounding == Rounding.Up && result * result < a ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 2, rounded down, of a positive value.
     * Returns 0 if given 0.
     */
    function log2(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >> 128 > 0) {
                value >>= 128;
                result += 128;
            }
            if (value >> 64 > 0) {
                value >>= 64;
                result += 64;
            }
            if (value >> 32 > 0) {
                value >>= 32;
                result += 32;
            }
            if (value >> 16 > 0) {
                value >>= 16;
                result += 16;
            }
            if (value >> 8 > 0) {
                value >>= 8;
                result += 8;
            }
            if (value >> 4 > 0) {
                value >>= 4;
                result += 4;
            }
            if (value >> 2 > 0) {
                value >>= 2;
                result += 2;
            }
            if (value >> 1 > 0) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 2, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log2(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log2(value);
            return result + (rounding == Rounding.Up && 1 << result < value ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 10, rounded down, of a positive value.
     * Returns 0 if given 0.
     */
    function log10(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >= 10**64) {
                value /= 10**64;
                result += 64;
            }
            if (value >= 10**32) {
                value /= 10**32;
                result += 32;
            }
            if (value >= 10**16) {
                value /= 10**16;
                result += 16;
            }
            if (value >= 10**8) {
                value /= 10**8;
                result += 8;
            }
            if (value >= 10**4) {
                value /= 10**4;
                result += 4;
            }
            if (value >= 10**2) {
                value /= 10**2;
                result += 2;
            }
            if (value >= 10**1) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 10, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log10(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log10(value);
            return result + (rounding == Rounding.Up && 10**result < value ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 256, rounded down, of a positive value.
     * Returns 0 if given 0.
     *
     * Adding one to the result gives the number of pairs of hex symbols needed to represent `value` as a hex string.
     */
    function log256(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >> 128 > 0) {
                value >>= 128;
                result += 16;
            }
            if (value >> 64 > 0) {
                value >>= 64;
                result += 8;
            }
            if (value >> 32 > 0) {
                value >>= 32;
                result += 4;
            }
            if (value >> 16 > 0) {
                value >>= 16;
                result += 2;
            }
            if (value >> 8 > 0) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 10, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log256(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log256(value);
            return result + (rounding == Rounding.Up && 1 << (result * 8) < value ? 1 : 0);
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.8.0) (utils/Strings.sol)

pragma solidity ^0.8.0;

import "./math/Math.sol";

/**
 * @dev String operations.
 */
library Strings {
    bytes16 private constant _SYMBOLS = "0123456789abcdef";
    uint8 private constant _ADDRESS_LENGTH = 20;

    /**
     * @dev Converts a `uint256` to its ASCII `string` decimal representation.
     */
    function toString(uint256 value) internal pure returns (string memory) {
        unchecked {
            uint256 length = Math.log10(value) + 1;
            string memory buffer = new string(length);
            uint256 ptr;
            /// @solidity memory-safe-assembly
            assembly {
                ptr := add(buffer, add(32, length))
            }
            while (true) {
                ptr--;
                /// @solidity memory-safe-assembly
                assembly {
                    mstore8(ptr, byte(mod(value, 10), _SYMBOLS))
                }
                value /= 10;
                if (value == 0) break;
            }
            return buffer;
        }
    }

    /**
     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation.
     */
    function toHexString(uint256 value) internal pure returns (string memory) {
        unchecked {
            return toHexString(value, Math.log256(value) + 1);
        }
    }

    /**
     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation with fixed length.
     */
    function toHexString(uint256 value, uint256 length) internal pure returns (string memory) {
        bytes memory buffer = new bytes(2 * length + 2);
        buffer[0] = "0";
        buffer[1] = "x";
        for (uint256 i = 2 * length + 1; i > 1; --i) {
            buffer[i] = _SYMBOLS[value & 0xf];
            value >>= 4;
        }
        require(value == 0, "Strings: hex length insufficient");
        return string(buffer);
    }

    /**
     * @dev Converts an `address` with fixed length of 20 bytes to its not checksummed ASCII `string` hexadecimal representation.
     */
    function toHexString(address addr) internal pure returns (string memory) {
        return toHexString(uint256(uint160(addr)), _ADDRESS_LENGTH);
    }
}

// SPDX-License-Identifier: MIT
// Heavily inspired by:
// OpenZeppelin Contracts v4.4.1 (token/Delegate/extensions/draft-ERC20Permit.sol)

pragma solidity ^0.8.0;

import "@openzeppelin/contracts/utils/Counters.sol";
import "@openzeppelin/contracts/utils/cryptography/ECDSA.sol";
import "@openzeppelin/contracts/utils/cryptography/EIP712.sol";

/**
 * Abstract contract including helper functions to allow delegation by signature using
 * [EIP-2612](https://eips.ethereum.org/EIPS/eip-2612).
 *
 * Adds the `{_verifyDelegatePermit}` internal method, verifies a signature specifying permission to receive delegation power
 *
 */
abstract contract DelegatePermit is EIP712 {
    using Counters for Counters.Counter;

    mapping(address => Counters.Counter) private _nonces;

    // solhint-disable-next-line var-name-mixedcase
    bytes32 private constant _DELEGATE_TYPEHASH =
        keccak256(
            "Delegate(address delegator,address delegatee,uint256 nonce,uint256 deadline)"
        );

    /**
     * Verify that the given delegate signature is valid, throws if not
     * @param delegator The address delegating
     * @param delegatee The address being delegated to
     * @param deadline The deadling of the delegation after which it will be invalid
     * @param v The v part of the signature
     * @param r The r part of the signature
     * @param s The s part of the signature
     */
    function _verifyDelegatePermit(
        address delegator,
        address delegatee,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) internal {
        require(
            block.timestamp <= deadline,
            "DelegatePermit: expired deadline"
        );
        require(delegator != address(0), "invalid delegator");

        bytes32 structHash = keccak256(
            abi.encode(
                _DELEGATE_TYPEHASH,
                delegator,
                delegatee,
                _useDelegationNonce(delegator),
                deadline
            )
        );

        bytes32 hash = _hashTypedDataV4(structHash);

        address signer = ECDSA.recover(hash, v, r, s);
        require(signer == delegator, "DelegatePermit: invalid signature");
    }

    /**
     * get the current nonce for the given address
     * @param owner The address to get nonce for
     * @return nonce current nonce of `owner`
     */
    function delegationNonce(
        address owner
    ) public view returns (uint256 nonce) {
        nonce = _nonces[owner].current();
        return nonce;
    }

    /**
     * "Consume a nonce": return the current value and increment.
     *
     * Available since v4.1.
     * @param owner The address to consume a nonce for
     * @return current incremented nonce of `owner`
     */
    function _useDelegationNonce(
        address owner
    ) private returns (uint256 current) {
        Counters.Counter storage nonce = _nonces[owner];
        current = nonce.current();
        nonce.increment();
        return current;
    }
}

/* -*- c-basic-offset: 4 -*- */
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;
import "./IECO.sol";
import "./TotalSupplySnapshots.sol";

/**
 * @title An ERC20 token interface for ECOx
 *
 */
contract ECOx is TotalSupplySnapshots {
    //////////////////////////////////////////////
    //////////////////// VARS ////////////////////
    //////////////////////////////////////////////

    /**
     * @dev Mapping storing contracts able to rebase the token
     */
    mapping(address => bool) public snapshotters;

    //////////////////////////////////////////////
    /////////////////// ERRORS ///////////////////
    //////////////////////////////////////////////

    /**
     * error for when transfer returns false
     * used by contracts that import this contract
     */
    error TransferFailed();

    /**
     * error for when an address tries to snapshot without permission
     */
    error OnlySnapshotters();

    //////////////////////////////////////////////
    /////////////////// EVENTS ///////////////////
    //////////////////////////////////////////////

    /**
     * emits when the snapshotters permissions are changed
     * @param actor denotes the new address whose permissions are being updated
     * @param newPermission denotes the new ability of the actor address (true for can snapshot, false for cannot)
     */
    event UpdatedSnapshotters(address actor, bool newPermission);

    //////////////////////////////////////////////
    ////////////////// MODIFIERS /////////////////
    //////////////////////////////////////////////

    /**
     * @dev Modifier for checking if the sender is a snapshotter
     */
    modifier onlySnapshotterRole() {
        if (!snapshotters[msg.sender]) {
            revert OnlySnapshotters();
        }
        _;
    }

    constructor(
        Policy _policy,
        address _pauser
    ) TotalSupplySnapshots(_policy, "ECOx", "ECOx", _pauser) {}

    function initialize(
        address _self
    ) public virtual override onlyConstruction {
        super.initialize(_self);
        pauser = ERC20Pausable(_self).pauser();
    }

    function snapshot() public onlySnapshotterRole {
        _snapshot();
    }

    /**
     * @dev change the rebasing permissions for an address
     * only callable by tokenRoleAdmin
     * @param _key the address to change permissions for
     * @param _value the new permission. true = can snapshot, false = cannot snapshot
     */
    function updateSnapshotters(address _key, bool _value) public onlyPolicy {
        snapshotters[_key] = _value;
        emit UpdatedSnapshotters(_key, _value);
    }
}

// SPDX-License-Identifier: MIT

pragma solidity ^0.8.0;

import "../utils/StringPacker.sol";
import "@openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol";
import "./ERC20Permit.sol";

/**
 * Implementation of the {IERC20} interface.
 *
 * This comment taken from the openzeppelin source contract.
 *
 * This implementation is agnostic to the way tokens are created. This means
 * that a supply mechanism has to be added in a derived contract using {_mint}.
 * For a generic mechanism see {ERC20PresetMinterPauser}.
 *
 * TIP: For a detailed writeup see open zeppelin guide
 * [How to implement supply mechanisms](https://forum.zeppelin.solutions/t/how-to-implement-erc20-supply-mechanisms/226).
 *
 * We have followed general OpenZeppelin Contracts guidelines: functions revert
 * instead returning `false` on failure. This behavior is nonetheless
 * conventional and does not conflict with the expectations of ERC20
 * applications.
 *
 * Additionally, an {Approval} event is emitted on calls to {transferFrom}.
 * This allows applications to reconstruct the allowance for all accounts just
 * by listening to said events. Other implementations of the EIP may not emit
 * these events, as it isn't required by the specification.
 *
 * Finally, the non-standard {decreaseAllowance} and {increaseAllowance}
 * functions have been added to mitigate the well-known issues around setting
 * allowances. See {IERC20-approve}.
 */
// internal _name and _symbol are stored immutable as bytes32 and unpacked via StringPacker
contract ERC20 is ERC20Permit {
    mapping(address => uint256) internal _balances;

    mapping(address => mapping(address => uint256)) private _allowances;

    uint256 internal _totalSupply;

    bytes32 internal immutable _name;
    bytes32 internal immutable _symbol;

    /**
     * Emitted when `value` tokens are moved from one account (`from`) to
     * another (`to`).
     *
     * Note that `value` may be zero.
     */
    event Transfer(address indexed from, address indexed to, uint256 value);

    /**
     * Emitted when the allowance of a `spender` for an `owner` is set by
     * a call to {approve}. `value` is the new allowance.
     */
    event Approval(
        address indexed owner,
        address indexed spender,
        uint256 value
    );

    /**
     * Sets the values for {name} and {symbol}.
     *
     * The default value of {decimals} is 18. To select a different value for
     * {decimals} you should overload it.
     *
     * All two of these values are immutable: they can only be set once during
     * construction.
     */
    constructor(string memory name_, string memory symbol_) ERC20Permit(name_) {
        _name = StringPacker.pack(name_);
        _symbol = StringPacker.pack(symbol_);
    }

    /**
     * Returns the name of the token.
     */
    function name() public view virtual returns (string memory) {
        return StringPacker.unpack(_name);
    }

    /**
     * Returns the symbol of the token, usually a shorter version of the
     * name.
     */
    function symbol() public view virtual returns (string memory) {
        return StringPacker.unpack(_symbol);
    }

    /**
     * Returns the number of decimals used to get its user representation.
     * For example, if `decimals` equals `2`, a balance of `505` tokens should
     * be displayed to a user as `5.05` (`505 / 10 ** 2`).
     *
     * Tokens usually opt for a value of 18, imitating the relationship between
     * Ether and Wei. This is the value {ERC20} uses, unless this function is
     * overridden;
     *
     * NOTE: This information is only used for _display_ purposes: it in
     * no way affects any of the arithmetic of the contract, including
     * {IERC20-balanceOf} and {IERC20-transfer}.
     */
    function decimals() public view virtual returns (uint8) {
        return 18;
    }

    /**
     * See {IERC20-totalSupply}.
     */
    function totalSupply() public view virtual returns (uint256) {
        return _totalSupply;
    }

    /**
     * See {IERC20-balanceOf}.
     */
    function balanceOf(address account) public view virtual returns (uint256) {
        return _balances[account];
    }

    /**
     * See {IERC20-transfer}.
     *
     * Requirements:
     *
     * - `recipient` cannot be the zero address.
     * - the caller must have a balance of at least `amount`.
     */
    function transfer(
        address recipient,
        uint256 amount
    ) public virtual returns (bool) {
        _transfer(msg.sender, recipient, amount);
        return true;
    }

    /**
     * See {IERC20-allowance}.
     */
    function allowance(
        address owner,
        address spender
    ) public view virtual returns (uint256) {
        return _allowances[owner][spender];
    }

    /**
     * See {IERC20-approve}.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     */
    function approve(
        address spender,
        uint256 amount
    ) public virtual returns (bool) {
        _approve(msg.sender, spender, amount);
        return true;
    }

    /**
     * See {IERC20-transferFrom}.
     *
     * Emits an {Approval} event indicating the updated allowance. This is not
     * required by the EIP. See the note at the beginning of {ERC20}.
     *
     * Requirements:
     *
     * - `sender` and `recipient` cannot be the zero address.
     * - `sender` must have a balance of at least `amount`.
     * - the caller must have allowance for ``sender``'s tokens of at least
     * `amount`.
     */
    function transferFrom(
        address sender,
        address recipient,
        uint256 amount
    ) public virtual returns (bool) {
        _transfer(sender, recipient, amount);

        uint256 currentAllowance = _allowances[sender][msg.sender];
        require(
            currentAllowance >= amount,
            "ERC20: transfer amount exceeds allowance"
        );
        unchecked {
            _approve(sender, msg.sender, currentAllowance - amount);
        }

        return true;
    }

    /**
     * Atomically increases the allowance granted to `spender` by the caller.
     *
     * This is an alternative to {approve} that can be used as a mitigation for
     * problems described in {IERC20-approve}.
     *
     * Emits an {Approval} event indicating the updated allowance.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     */
    function increaseAllowance(
        address spender,
        uint256 addedValue
    ) public virtual returns (bool) {
        _approve(
            msg.sender,
            spender,
            _allowances[msg.sender][spender] + addedValue
        );
        return true;
    }

    /**
     * Atomically decreases the allowance granted to `spender` by the caller.
     *
     * This is an alternative to {approve} that can be used as a mitigation for
     * problems described in {IERC20-approve}.
     *
     * Emits an {Approval} event indicating the updated allowance.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     * - `spender` must have allowance for the caller of at least
     * `subtractedValue`.
     */
    function decreaseAllowance(
        address spender,
        uint256 subtractedValue
    ) public virtual returns (bool) {
        uint256 currentAllowance = _allowances[msg.sender][spender];
        require(
            currentAllowance >= subtractedValue,
            "ERC20: decreased allowance below zero"
        );
        unchecked {
            _approve(msg.sender, spender, currentAllowance - subtractedValue);
        }

        return true;
    }

    /**
     * Moves `amount` of tokens from `sender` to `recipient`.
     *
     * This internal function is equivalent to {transfer}, and can be used to
     * e.g. implement automatic token fees, slashing mechanisms, etc.
     *
     * Emits a {Transfer} event.
     *
     * Requirements:
     *
     * - `sender` cannot be the zero address.
     * - `recipient` cannot be the zero address.
     * - `sender` must have a balance of at least `amount`.
     */
    function _transfer(
        address sender,
        address recipient,
        uint256 originalAmount
    ) internal virtual {
        require(recipient != address(0), "ERC20: transfer to the zero address");

        uint256 amount = _beforeTokenTransfer(
            sender,
            recipient,
            originalAmount
        );

        uint256 senderBalance = _balances[sender];
        require(
            senderBalance >= amount,
            "ERC20: transfer amount exceeds balance"
        );
        unchecked {
            _balances[sender] = senderBalance - amount;
        }
        _balances[recipient] += amount;

        emit Transfer(sender, recipient, originalAmount);

        _afterTokenTransfer(sender, recipient, amount);
    }

    /** Creates `amount` tokens and assigns them to `account`, increasing
     * the total supply.
     *
     * Emits a {Transfer} event with `from` set to the zero address.
     *
     * Requirements:
     *
     * - `account` cannot be the zero address.
     */
    function _mint(
        address account,
        uint256 originalAmount
    ) internal virtual returns (uint256) {
        require(account != address(0), "ERC20: mint to the zero address");

        uint256 amount = _beforeTokenTransfer(
            address(0),
            account,
            originalAmount
        );

        _totalSupply += amount;
        _balances[account] += amount;
        emit Transfer(address(0), account, originalAmount);

        _afterTokenTransfer(address(0), account, amount);

        return amount;
    }

    /**
     * Destroys `amount` tokens from `account`, reducing the
     * total supply.
     *
     * Emits a {Transfer} event with `to` set to the zero address.
     *
     * Requirements:
     *
     * - `account` cannot be the zero address.
     * - `account` must have at least `amount` tokens.
     */
    function _burn(
        address account,
        uint256 originalAmount
    ) internal virtual returns (uint256) {
        uint256 amount = _beforeTokenTransfer(
            account,
            address(0),
            originalAmount
        );

        uint256 accountBalance = _balances[account];
        require(accountBalance >= amount, "ERC20: burn amount exceeds balance");
        unchecked {
            _balances[account] = accountBalance - amount;
        }
        _totalSupply -= amount;

        emit Transfer(account, address(0), originalAmount);

        _afterTokenTransfer(account, address(0), amount);

        return amount;
    }

    /**
     * Sets `amount` as the allowance of `spender` over the `owner` s tokens.
     *
     * This internal function is equivalent to `approve`, and can be used to
     * e.g. set automatic allowances for certain subsystems, etc.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `owner` cannot be the zero address.
     * - `spender` cannot be the zero address.
     */
    function _approve(
        address owner,
        address spender,
        uint256 amount
    ) internal virtual override {
        require(spender != address(0), "ERC20: approve to the zero address");

        _allowances[owner][spender] = amount;
        emit Approval(owner, spender, amount);
    }

    /**
     * Hook that is called before any transfer of tokens. This includes
     * minting and burning.
     *
     * Calling conditions:
     *
     * - when `from` and `to` are both non-zero, `amount` of ``from``'s tokens
     * will be transferred to `to`.
     * - when `from` is zero, `amount` tokens will be minted for `to`.
     * - when `to` is zero, `amount` of ``from``'s tokens will be burned.
     * - `from` and `to` are never both zero.
     *
     * To learn more about hooks, head to xref:ROOT:extending-contracts.adoc#using-hooks[Using Hooks].
     */
    function _beforeTokenTransfer(
        address, // from
        address, // to
        uint256 amount
    ) internal virtual returns (uint256) {
        return amount;
    }

    /**
     * Hook that is called after any transfer of tokens. This includes
     * minting and burning.
     *
     * Calling conditions:
     *
     * - when `from` and `to` are both non-zero, `amount` of ``from``'s tokens
     * has been transferred to `to`.
     * - when `from` is zero, `amount` tokens have been minted for `to`.
     * - when `to` is zero, `amount` of ``from``'s tokens have been burned.
     * - `from` and `to` are never both zero.
     *
     * To learn more about hooks, head to xref:ROOT:extending-contracts.adoc#using-hooks[Using Hooks].
     */
    function _afterTokenTransfer(
        address from,
        address to,
        uint256 amount
    ) internal virtual {}
}

// SPDX-License-Identifier: MIT

pragma solidity ^0.8.0;

import "./ERC20Pausable.sol";
import "./DelegatePermit.sol";
import "./TotalSupplySnapshots.sol";

/**
 * This contract tracks delegations of an ERC20 token by tokenizing the delegations
 * It assumes a companion token that is transferred to denote changes in votes brought
 * on by both transfers (via _afterTokenTransfer hooks) and delegations.
 * The secondary token creates allowances whenever it delegates to allow for reclaiming the voting power later
 *
 * Voting power can be queried through the public accessor {voteBalanceOf}. Vote power can be delegated either
 * by calling the {delegate} function directly, or by providing a signature to be used with {delegateBySig}.
 * Delegates need to disable their own ability to delegate to enable others to delegate to them.
 *
 * Raw delegations can be done in partial amounts via {delegateAmount}. This is intended for contracts which can run
 * their own internal ledger of delegations and will prevent you from transferring the delegated funds until you undelegate.
 */
abstract contract ERC20Delegated is TotalSupplySnapshots, DelegatePermit {
    // this checks who has opted in to voting
    mapping(address => bool) public voter;

    // this balance tracks the amount of votes an address has for snapshot purposes
    mapping(address => uint256) internal _voteBalances;

    // allowances are created to allow for undelegation and to track delegated amounts
    mapping(address => mapping(address => uint256)) private _voteAllowances;

    // total allowances helps track if an account is delegated
    // its value is equivalent to agregating across the middle value of the previous mapping
    mapping(address => uint256) private _totalVoteAllowances;

    /** a mapping that tracks the primaryDelegates of each user
     *
     * Primary delegates can only be chosen using delegate() which sends the full balance
     * The exist to maintain the functionality that recieving tokens gives those votes to the delegate
     */
    mapping(address => address) internal _primaryDelegates;

    // mapping that tracks if an address is willing to be delegated to
    mapping(address => bool) public delegationToAddressEnabled;

    // mapping that tracks if an address is unable to delegate
    mapping(address => bool) public delegationFromAddressDisabled;

    /**
     * Emitted when a delegatee is delegated new votes.
     */
    event DelegatedVotes(
        address indexed delegator,
        address indexed delegatee,
        uint256 amount
    );

    /**
     * Emitted when a token transfer or delegate change results a transfer of voting power.
     */
    event VoteTransfer(
        address indexed sendingVoter,
        address indexed recievingVoter,
        uint256 votes
    );

    /**
     * Emitted when an account denotes a primary delegate.
     */
    event NewPrimaryDelegate(
        address indexed delegator,
        address indexed primaryDelegate
    );

    constructor(
        Policy _policy,
        string memory _name,
        string memory _symbol,
        address _initialPauser
    ) TotalSupplySnapshots(_policy, _name, _symbol, _initialPauser) {
        // call to super constructor
    }

    function enableVoting() public {
        require(!voter[msg.sender], "ERC20Delegated: voting already enabled");

        voter[msg.sender] = true; // this must be set before the mint to make sure voting power is given
        _voteMint(msg.sender, _balances[msg.sender]);
    }

    /**
     * Set yourself as willing to recieve delegates.
     */
    function enableDelegationTo() public {
        require(
            isOwnDelegate(msg.sender),
            "ERC20Delegated: cannot enable delegation if you have outstanding delegation"
        );

        require(
            voter[msg.sender],
            "ERC20Delegated: enable voting before enabling being a delegate"
        );

        delegationToAddressEnabled[msg.sender] = true;
        delegationFromAddressDisabled[msg.sender] = true;
    }

    /**
     * Set yourself as no longer recieving delegates.
     */
    function disableDelegationTo() public {
        delegationToAddressEnabled[msg.sender] = false;
    }

    /**
     * Set yourself as being able to delegate again.
     * also disables delegating to you
     */
    function reenableDelegating() public {
        delegationToAddressEnabled[msg.sender] = false;

        require(
            _balances[msg.sender] == _voteBalances[msg.sender] &&
                isOwnDelegate(msg.sender),
            "ERC20Delegated: cannot re-enable delegating if you have outstanding delegations"
        );

        delegationFromAddressDisabled[msg.sender] = false;
    }

    /**
     * Returns true if the user has no amount of their balance delegated, otherwise false.
     */
    function isOwnDelegate(address account) public view returns (bool) {
        return
            _totalVoteAllowances[account] == 0 &&
            _primaryDelegates[account] == address(0);
    }

    /**
     * Get the primary address `account` is currently delegating to. Defaults to the account address itself if none specified.
     * The primary delegate is the one that is delegated any new funds the address recieves.
     * @param account the address whose primary delegate is being fetched
     */
    function getPrimaryDelegate(
        address account
    ) public view virtual returns (address) {
        address _voter = _primaryDelegates[account];
        return _voter == address(0) ? account : _voter;
    }

    /**
     * sets the primaryDelegate and emits an event to track it
     */
    function _setPrimaryDelegate(
        address delegator,
        address delegatee
    ) internal {
        _primaryDelegates[delegator] = delegatee;

        emit NewPrimaryDelegate(
            delegator,
            delegatee == address(0) ? delegator : delegatee
        );
    }

    /**
     * Delegate all votes from the sender to `delegatee`.
     * NOTE: This function assumes that you do not have partial delegations
     * It will revert with "ERC20Delegated: must have an undelegated amount available to cover delegation" if you do
     * @param delegatee the address being delegated to
     */
    function delegate(address delegatee) public {
        require(
            delegatee != msg.sender,
            "ERC20Delegated: use undelegate instead of delegating to yourself"
        );

        require(
            delegationToAddressEnabled[delegatee],
            "ERC20Delegated: a primary delegate must enable delegation"
        );

        if (!isOwnDelegate(msg.sender)) {
            undelegateFromAddress(getPrimaryDelegate(msg.sender));
        }

        uint256 _amount = _balances[msg.sender];
        _delegate(msg.sender, delegatee, _amount);
        _setPrimaryDelegate(msg.sender, delegatee);
    }

    /**
     * Delegate all votes from the sender to `delegatee`.
     * NOTE: This function assumes that you do not have partial delegations
     * It will revert with "ERC20Delegated: must have an undelegated amount available to cover delegation" if you do
     * @param delegator the address delegating votes
     * @param delegatee the address being delegated to
     * @param deadline the time at which the signature expires
     * @param v signature value
     * @param r signature value
     * @param s signature value
     */
    function delegateBySig(
        address delegator,
        address delegatee,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) public {
        require(
            delegator != delegatee,
            "ERC20Delegated: use undelegate instead of delegating to yourself"
        );
        require(
            delegationToAddressEnabled[delegatee],
            "ERC20Delegated: a primary delegate must enable delegation"
        );

        if (!isOwnDelegate(delegator)) {
            _undelegateFromAddress(delegator, getPrimaryDelegate(delegator));
        }

        _verifyDelegatePermit(delegator, delegatee, deadline, v, r, s);

        uint256 _amount = _balances[delegator];
        _delegate(delegator, delegatee, _amount);
        _setPrimaryDelegate(delegator, delegatee);
    }

    /**
     * Delegate an `amount` of votes from the sender to `delegatee`.
     */
    function delegateAmount(address delegatee, uint256 amount) public {
        require(
            delegatee != msg.sender,
            "ERC20Delegated: use undelegate instead of delegating to yourself"
        );
        require(
            delegatee != address(0),
            "ERC20Delegated: cannot delegate to the zero address"
        );

        _delegate(msg.sender, delegatee, amount);
    }

    /**
     * Change delegation for `delegator` to `delegatee`.
     *
     * Emits events {NewDelegatedAmount} and {VoteTransfer}.
     */
    function _delegate(
        address delegator,
        address delegatee,
        uint256 amount
    ) internal virtual {
        require(
            voter[delegator],
            "ERC20Delegated: must be a voter to delegate"
        );

        // more strict that the transfer requirement
        require(
            amount <= _balances[delegator] - _totalVoteAllowances[delegator],
            "ERC20Delegated: must have an undelegated amount available to cover delegation"
        );

        require(
            !delegationFromAddressDisabled[delegator],
            "ERC20Delegated: cannot delegate if you have enabled primary delegation to yourself and/or have outstanding delegates"
        );

        emit DelegatedVotes(delegator, delegatee, amount);

        _voteTransfer(delegator, delegatee, amount);
        // create allowance to reclaim token
        _increaseVoteAllowance(delegatee, delegator, amount);
        // track owed votes
        _totalVoteAllowances[delegator] += amount;
    }

    /**
     * Undelegate all votes from the sender's primary delegate.
     */
    function undelegate() public {
        address _primaryDelegate = getPrimaryDelegate(msg.sender);
        require(
            _primaryDelegate != msg.sender,
            "ERC20Delegated: must specifiy undelegate address when not using a Primary Delegate"
        );
        undelegateFromAddress(_primaryDelegate);
    }

    /**
     * Undelegate votes from the `delegatee` back to the sender.
     */
    function undelegateFromAddress(address delegatee) public {
        _undelegateFromAddress(msg.sender, delegatee);
    }

    /**
     * A primary delegated individual can revoke delegations of unwanted delegators
     * Useful for allowing yourself to call reenableDelegating after calling disableDelegationTo
     * @param delegator the address whose delegation is being revoked
     */
    function revokeDelegation(address delegator) public {
        address _primaryDelegate = getPrimaryDelegate(delegator);
        require(
            (delegator != msg.sender) && (_primaryDelegate == msg.sender),
            "ERC20Delegated: can only revoke delegations to yourself"
        );
        _undelegateFromAddress(delegator, msg.sender);
    }

    /**
     * Undelegate votes from the `delegatee` back to the delegator.
     */
    function _undelegateFromAddress(
        address delegator,
        address delegatee
    ) internal {
        uint256 _amount = voteAllowance(delegatee, delegator);
        _undelegate(delegator, delegatee, _amount);
        if (delegatee == getPrimaryDelegate(delegator)) {
            _setPrimaryDelegate(delegator, address(0));
        }
    }

    /**
     * Undelegate a specific amount of votes from the `delegatee` back to the sender.
     * @param delegatee the address being undelegated to
     * @param amount the amount of tokens being undelegated
     */
    function undelegateAmountFromAddress(
        address delegatee,
        uint256 amount
    ) public {
        require(
            voteAllowance(delegatee, msg.sender) >= amount,
            "ERC20Delegated: amount not available to undelegate"
        );
        require(
            msg.sender == getPrimaryDelegate(msg.sender),
            "ERC20Delegated: undelegating amounts is only available for partial delegators"
        );
        _undelegate(msg.sender, delegatee, amount);
    }

    function _undelegate(
        address delegator,
        address delegatee,
        uint256 amount
    ) internal virtual {
        _totalVoteAllowances[delegator] -= amount;
        _voteTransferFrom(delegatee, delegator, amount);
    }

    /**
     * Move voting power when tokens are transferred.
     *
     * Emits a {VoteTransfer} event.
     */
    function _afterTokenTransfer(
        address from,
        address to,
        uint256 amount
    ) internal virtual override {
        if (from == to) {
            // self transfers require no change in delegation and can be the source of exploits
            return;
        }

        bool fromVoter = voter[from];

        // if the address has delegated, they might be transfering tokens allotted to someone else
        if (fromVoter && !isOwnDelegate(from)) {
            address _sourcePrimaryDelegate = _primaryDelegates[from]; // cheaper than getPrimaryDelegate because we do the check to own delegate already
            if (_sourcePrimaryDelegate == address(0)) {
                // this combined with !isOwnDelegate(from) guarantees a partial delegate situation
                uint256 _undelegatedAmount = _balances[from] + // need to check if the transfer can be covered
                    amount -
                    _totalVoteAllowances[from];
                require(
                    _undelegatedAmount >= amount, // can't undelegate in a partial delegate situation
                    "ERC20Delegated: delegation too complicated to transfer. Undelegate and simplify before trying again"
                );
            } else {
                // the combination of !isOwnDelegate(from) and _sourcePrimaryDelegate != address(0) means that we're in a primary delegate situation where all funds are delegated
                // this means that we already know that amount < _sourcePrimaryDelegatement since _sourcePrimaryDelegatement == senderBalance
                _undelegate(from, _sourcePrimaryDelegate, amount);
            }
        }

        if (voter[to]) {
            address _voteDestination = to;
            address _destPrimaryDelegate = _primaryDelegates[to];
            // saving gas by manually doing a form of isOwnDelegate since this function already needs to read the data for this conditional
            if (_destPrimaryDelegate != address(0)) {
                _increaseVoteAllowance(_destPrimaryDelegate, to, amount);
                _totalVoteAllowances[to] += amount;
                _voteDestination = _destPrimaryDelegate;
            }

            if (fromVoter) {
                _voteTransfer(from, _voteDestination, amount);
            } else {
                _voteMint(_voteDestination, amount);
            }
        } else {
            if (fromVoter) {
                _voteBurn(from, amount);
            }
        }
    }

    /**
     * See {IERC20-balanceOf}.
     * @param account the address whose vote balance is being checked
     */
    function voteBalanceOf(
        address account
    ) public view virtual returns (uint256) {
        return _voteBalances[account];
    }

    /**
     * See {IERC20-transfer}.
     *
     * Requirements:
     *
     * - `recipient` cannot be the zero address.
     * - the caller must have a balance of at least `amount`.
     */
    function voteTransfer(
        address recipient,
        uint256 amount
    ) internal virtual returns (bool) {
        _voteTransfer(msg.sender, recipient, amount);
        return true;
    }

    /**
     * See {IERC20-allowance}.
     */
    function voteAllowance(
        address owner,
        address spender
    ) internal view virtual returns (uint256) {
        return _voteAllowances[owner][spender];
    }

    /**
     * See {IERC20-approve}.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     */
    function voteApprove(
        address spender,
        uint256 amount
    ) internal virtual returns (bool) {
        _voteApprove(msg.sender, spender, amount);
        return true;
    }

    /**
     * not the same as ERC20 transferFrom
     * is instead more restrictive, only allows for transfers where the recipient owns the allowance
     */
    function _voteTransferFrom(
        address sender,
        address recipient,
        uint256 amount
    ) internal virtual returns (bool) {
        _voteTransfer(sender, recipient, amount);

        uint256 currentAllowance = _voteAllowances[sender][recipient];
        require(
            currentAllowance >= amount,
            "ERC20Delegated: vote transfer amount exceeds allowance"
        );
        unchecked {
            _voteApprove(sender, recipient, currentAllowance - amount);
        }

        return true;
    }

    /**
     * Moves `amount` of tokens from `sender` to `recipient`.
     *
     * This internal function is equivalent to {transfer}, and can be used to
     * e.g. implement automatic token fees, slashing mechanisms, etc.
     *
     * Emits a {Transfer} event.
     *
     * Requirements:
     *
     * - `sender` cannot be the zero address.
     * - `recipient` cannot be the zero address.
     * - `sender` must have a balance of at least `amount`.
     */
    function _voteTransfer(
        address sender,
        address recipient,
        uint256 amount
    ) internal virtual {
        _beforeVoteTokenTransfer(sender, recipient, amount);

        if (sender != address(0)) {
            uint256 senderBalance = _voteBalances[sender];
            require(
                senderBalance >= amount,
                "ERC20Delegated: vote transfer amount exceeds balance"
            );
            unchecked {
                _voteBalances[sender] = senderBalance - amount;
            }
        }

        if (recipient != address(0)) {
            _voteBalances[recipient] += amount;
        }

        emit VoteTransfer(sender, recipient, amount);

        _afterVoteTokenTransfer(sender, recipient, amount);
    }

    /** Creates `amount` tokens and assigns them to `account`, increasing
     * the total supply.
     *
     * Emits a {Transfer} event with `from` set to the zero address.
     *
     * Requirements:
     *
     * - `account` cannot be the zero address.
     */
    function _voteMint(
        address account,
        uint256 amount
    ) internal virtual returns (uint256) {
        require(
            account != address(0),
            "ERC20Delegated: vote mint to the zero address"
        );

        _beforeVoteTokenTransfer(address(0), account, amount);

        _voteBalances[account] += amount;
        emit VoteTransfer(address(0), account, amount);

        _afterVoteTokenTransfer(address(0), account, amount);

        return amount;
    }

    /**
     * Destroys `amount` tokens from `account`, reducing the
     * total supply.
     *
     * Emits a {Transfer} event with `to` set to the zero address.
     *
     * Requirements:
     *
     * - `account` cannot be the zero address.
     * - `account` must have at least `amount` tokens.
     */
    function _voteBurn(
        address account,
        uint256 amount
    ) internal virtual returns (uint256) {
        _beforeVoteTokenTransfer(account, address(0), amount);

        uint256 accountBalance = _voteBalances[account];
        require(
            accountBalance >= amount,
            "ERC20Delegated: vote burn amount exceeds balance"
        );
        unchecked {
            _voteBalances[account] = accountBalance - amount;
        }

        emit VoteTransfer(account, address(0), amount);

        _afterVoteTokenTransfer(account, address(0), amount);

        return amount;
    }

    /**
     * Sets `amount` as the allowance of `spender` over the `owner` s tokens.
     *
     * This internal function is equivalent to `approve`, and can be used to
     * e.g. set automatic allowances for certain subsystems, etc.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `owner` cannot be the zero address.
     * - `spender` cannot be the zero address.
     */
    function _voteApprove(
        address owner,
        address spender,
        uint256 amount
    ) internal virtual {
        require(
            spender != address(0),
            "ERC20Delegate: approve votes to the zero address"
        );

        _voteAllowances[owner][spender] = amount;
    }

    /**
     * Atomically increases the allowance granted to `spender` by the caller.
     *
     * This is an alternative to {approve} that can be used as a mitigation for
     * problems described in {IERC20-approve}.
     *
     * Emits an {Approval} event indicating the updated allowance.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     */
    function _increaseVoteAllowance(
        address owner,
        address spender,
        uint256 addedValue
    ) internal virtual returns (bool) {
        _voteApprove(
            owner,
            spender,
            _voteAllowances[owner][spender] + addedValue
        );
        return true;
    }

    /**
     * Atomically decreases the allowance granted to `spender` by the caller.
     *
     * This is an alternative to {approve} that can be used as a mitigation for
     * problems described in {IERC20-approve}.
     *
     * Emits an {Approval} event indicating the updated allowance.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     * - `spender` must have allowance for the caller of at least
     * `subtractedValue`.
     */
    function _decreaseVoteAllowance(
        address owner,
        address spender,
        uint256 subtractedValue
    ) internal virtual returns (bool) {
        uint256 currentAllowance = _voteAllowances[owner][spender];
        require(
            currentAllowance >= subtractedValue,
            "ERC20Delegated: decreased vote allowance below zero"
        );
        unchecked {
            _voteApprove(owner, spender, currentAllowance - subtractedValue);
        }

        return true;
    }

    /**
     * Hook that is called before any transfer of tokens. This includes
     * minting and burning.
     *
     * Calling conditions:
     *
     * - when `from` and `to` are both non-zero, `amount` of ``from``'s tokens
     * will be transferred to `to`.
     * - when `from` is zero, `amount` tokens will be minted for `to`.
     * - when `to` is zero, `amount` of ``from``'s tokens will be burned.
     * - `from` and `to` are never both zero.
     */
    function _beforeVoteTokenTransfer(
        address, // from
        address, // to
        uint256 amount
    ) internal virtual {}

    /**
     * Hook that is called after any transfer of tokens. This includes
     * minting and burning.
     *
     * Calling conditions:
     *
     * - when `from` and `to` are both non-zero, `amount` of ``from``'s tokens
     * has been transferred to `to`.
     * - when `from` is zero, `amount` tokens have been minted for `to`.
     * - when `to` is zero, `amount` of ``from``'s tokens have been burned.
     * - `from` and `to` are never both zero.
     */
    function _afterVoteTokenTransfer(
        address, // from
        address, // to
        uint256 amount
    ) internal virtual {}

    // protecting future upgradeability
    uint256[50] private __gapERC20Delegated;
}

/* -*- c-basic-offset: 4 -*- */
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;
import "../policy/PolicedUpgradeable.sol";
import "./ERC20Pausable.sol";

/**
 * @title An ERC20 token interface for ECOx
 *
 */
contract ERC20MintAndBurn is ERC20Pausable, PolicedUpgradeable {
    // storage gap covers all of ECO contract's old delegation functionality (no ECOx storage to be gapped)
    uint256[10] private __gapMintAndBurn;
    // additional useable gap for future upgradeability
    uint256[50] private __gapMintAndBurn2;
    //////////////////////////////////////////////
    //////////////////// VARS ////////////////////
    //////////////////////////////////////////////
    /**
     * Mapping storing contracts able to mint tokens
     */
    mapping(address => bool) public minters;

    /**
     * Mapping storing contracts able to burn tokens
     */
    mapping(address => bool) public burners;

    //////////////////////////////////////////////
    /////////////////// ERRORS ///////////////////
    //////////////////////////////////////////////

    /**
     * error for when an address tries to mint tokens without permission
     */
    error OnlyMinters();

    /**
     * error for when an address tries to burn tokens without permission
     */
    error OnlyBurners();

    //////////////////////////////////////////////
    /////////////////// EVENTS ///////////////////
    //////////////////////////////////////////////

    /**
     * emits when the minters permissions are changed
     * @param actor denotes the new address whose permissions are being updated
     * @param newPermission denotes the new ability of the actor address (true for can mint, false for cannot)
     */
    event UpdatedMinters(address actor, bool newPermission);

    /**
     * emits when the burners permissions are changed
     * @param actor denotes the new address whose permissions are being updated
     * @param newPermission denotes the new ability of the actor address (true for can burn, false for cannot)
     */
    event UpdatedBurners(address actor, bool newPermission);

    //////////////////////////////////////////////
    ////////////////// MODIFIERS /////////////////
    //////////////////////////////////////////////

    /**
     * Modifier for checking if the sender is a minter
     */
    modifier onlyMinterRole() {
        if (!minters[msg.sender]) {
            revert OnlyMinters();
        }
        _;
    }

    /**
     * Modifier for checking if the sender is allowed to burn
     * both burners and the message sender can burn
     * @param _from the address burning tokens
     */
    modifier onlyBurnerRoleOrSelf(address _from) {
        if (_from != msg.sender && !burners[msg.sender]) {
            revert OnlyBurners();
        }
        _;
    }

    constructor(
        Policy policy,
        string memory name,
        string memory ticker,
        address pauser
    ) Policed(policy) ERC20Pausable(name, ticker, address(policy), pauser) {}

    /**
     * change the minting permissions for an address
     * only callable by tokenRoleAdmin
     * @param _key the address to change permissions for
     * @param _value the new permission. true = can mint, false = cannot mint
     */
    function updateMinters(address _key, bool _value) public onlyPolicy {
        minters[_key] = _value;
        emit UpdatedMinters(_key, _value);
    }

    /**
     * change the burning permissions for an address
     * only callable by tokenRoleAdmin
     * @param _key the address to change permissions for
     * @param _value the new permission. true = can burn, false = cannot burn
     */
    function updateBurners(address _key, bool _value) public onlyPolicy {
        burners[_key] = _value;
        emit UpdatedBurners(_key, _value);
    }

    /**
     * mints tokens to a given address
     * @param _to the address receiving tokens
     * @param _value the amount of tokens being minted
     */
    function mint(address _to, uint256 _value) external onlyMinterRole {
        _mint(_to, _value);
    }

    /**
     * burns tokens to a given address
     * @param _from the address whose tokens are being burned
     * @param _value the amount of tokens being burned
     */
    function burn(
        address _from,
        uint256 _value
    ) external onlyBurnerRoleOrSelf(_from) {
        _burn(_from, _value);
    }

    // protecting future upgradeability
    uint256[50] private __gapMintAndBurn3;
}

// SPDX-License-Identifier: MIT

pragma solidity ^0.8.0;

import "@openzeppelin/contracts/security/Pausable.sol";
import "./ERC20.sol";

/**
 * Implementation of the {IERC20} interface with pausability
 * When paused by the pauser admin, transfers revert.
 */
contract ERC20Pausable is ERC20, Pausable {
    address public immutable roleAdmin;

    // initially no-one should have the pauser role
    // it can be granted and revoked by the admin policy
    address public pauser;

    /**
     * @notice event indicating the pauser was updated
     * @param pauser The new pauser
     */
    event PauserAssignment(address indexed pauser);

    constructor(
        string memory name,
        string memory symbol,
        address _roleAdmin,
        address _initialPauser
    ) ERC20(name, symbol) {
        require(
            address(_roleAdmin) != address(0),
            "Unrecoverable: do not set the _roleAdmin as the zero address"
        );
        roleAdmin = _roleAdmin;
        pauser = _initialPauser;
        emit PauserAssignment(_initialPauser);
    }

    modifier onlyAdmin() {
        require(msg.sender == roleAdmin, "ERC20Pausable: not admin");
        _;
    }

    modifier onlyPauser() {
        require(msg.sender == pauser, "ERC20Pausable: not pauser");
        _;
    }

    /**
     * Hook that is called before any transfer of tokens. This includes
     * minting and burning.
     *
     * If the token is not paused, it will pass through the amount
     */
    function _beforeTokenTransfer(
        address from,
        address to,
        uint256 amount
    ) internal virtual override whenNotPaused returns (uint256) {
        return amount;
    }

    /**
     * @notice pauses transfers of this token
     *
     * Security Notes
     *
     * - only callable by the pause
     * - reverts if already paused
     */
    function pause() external onlyPauser {
        _pause();
    }

    /**
     * @notice unpauses transfers of this token
     * only callable by the pauser
     *
     * Security Notes
     *
     * - only callable by the pause
     * - reverts if already unpaused
     */
    function unpause() external onlyPauser {
        _unpause();
    }

    /**
     * @notice set the given address as the pauser
     * @param _pauser The address that can pause this token
     * only the roleAdmin can call this function
     */
    function setPauser(address _pauser) public onlyAdmin {
        require(_pauser != pauser, "ERC20Pausable: must change pauser");
        pauser = _pauser;
        emit PauserAssignment(_pauser);
    }
}

// SPDX-License-Identifier: MIT
// Heavily inspired by:
// OpenZeppelin Contracts v4.4.1 (token/ERC20/extensions/draft-ERC20Permit.sol)

pragma solidity ^0.8.0;

import "@openzeppelin/contracts/token/ERC20/extensions/draft-IERC20Permit.sol";
import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import "@openzeppelin/contracts/utils/Counters.sol";
import "@openzeppelin/contracts/utils/cryptography/ECDSA.sol";
import "@openzeppelin/contracts/utils/cryptography/EIP712.sol";

/**
 * Implementation of the ERC20 Permit extension allowing approvals to be made via signatures, as defined in
 * [EIP-2612](https://eips.ethereum.org/EIPS/eip-2612).
 *
 * Adds the {permit} method, which can be used to change an account's ERC20 allowance (see {IERC20-allowance}) by
 * presenting a message signed by the account. By not relying on `{IERC20-approve}`, the token holder account doesn't
 * need to send a transaction, and thus is not required to hold Ether at all.
 *
 * _Available since v3.4._
 */
abstract contract ERC20Permit is IERC20Permit, EIP712 {
    using Counters for Counters.Counter;

    mapping(address => Counters.Counter) private _nonces;

    // solhint-disable-next-line var-name-mixedcase
    bytes32 private immutable _PERMIT_TYPEHASH =
        keccak256(
            "Permit(address owner,address spender,uint256 value,uint256 nonce,uint256 deadline)"
        );

    /**
     * Initializes the {EIP712} domain separator using the `name` parameter, and setting `version` to `"2"`.
     *
     * version number 1 was used already in a previous implementation
     */
    constructor(string memory name) EIP712(name, "2") {
        //empty block in order to pass parameters to the parent EIP712 constructor
    }

    /**
     * See {IERC20Permit-permit}.
     */
    function permit(
        address owner,
        address spender,
        uint256 value,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) public virtual override {
        require(block.timestamp <= deadline, "ERC20Permit: expired deadline");

        bytes32 structHash = keccak256(
            abi.encode(
                _PERMIT_TYPEHASH,
                owner,
                spender,
                value,
                _useNonce(owner),
                deadline
            )
        );

        bytes32 hash = _hashTypedDataV4(structHash);

        address signer = ECDSA.recover(hash, v, r, s);
        require(signer == owner, "ERC20Permit: invalid signature");

        _approve(owner, spender, value);
    }

    /**
     * See {IERC20Permit-nonces}.
     */
    function nonces(
        address owner
    ) public view virtual override returns (uint256) {
        return _nonces[owner].current();
    }

    /**
     * See {IERC20Permit-DOMAIN_SEPARATOR}.
     */
    // solhint-disable-next-line func-name-mixedcase
    function DOMAIN_SEPARATOR() external view override returns (bytes32) {
        return _domainSeparatorV4();
    }

    /**
     * "Consume a nonce": return the current value and increment.
     *
     * _Available since v4.1._
     */
    function _useNonce(
        address owner
    ) internal virtual returns (uint256 current) {
        Counters.Counter storage nonce = _nonces[owner];
        current = nonce.current();
        nonce.increment();
    }

    /**
     * Sets `amount` as the allowance of `spender` over the `owner` s tokens.
     *
     * This internal function is equivalent to `approve`, and can be used to
     * e.g. set automatic allowances for certain subsystems, etc.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `owner` cannot be the zero address.
     * - `spender` cannot be the zero address.
     */
    function _approve(
        address owner,
        address spender,
        uint256 amount
    ) internal virtual;
}

/* -*- c-basic-offset: 4 -*- */
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "@openzeppelin/contracts/token/ERC20/IERC20.sol";

interface IECO is IERC20 {
    /**
     * Only available to minters
     * @param to the address to mint to
     * @param amount the amount to mint
     */
    function mint(address to, uint256 amount) external;

    /**
     * Only available to token holders for their own tokens and burners
     * @param from the address to burn from
     * @param amount the amount to burn
     */
    function burn(address from, uint256 amount) external;

    /**
     * Returns the votes for the current snapshot
     * @param account the address whose vote balance to check
     * @return balance the balance of the account at the time of the Snapshot
     */
    function voteBalanceSnapshot(
        address account
    ) external view returns (uint256 balance);

    /**
     * Returns the inflation multiplier value for the current snapshot
     * @return multiplier inflation multipler value
     */
    function inflationMultiplierSnapshot()
        external
        view
        returns (uint256 multiplier);

    /**
     *  Returns the total supply for the current snapshot
     * @return total total supply of the current snapshot
     */
    function totalSupplySnapshot() external view returns (uint256 total);

    /**
     * Enables voting with your ECO balance, but will transaction cost
     */
    function enableVoting() external;

    /**
     * Allows others to delegate voting power to you
     * Disallows you from delegating your voting power to others
     */
    function enableDelegationTo() external;

    /**
     * Disallows others from delegating to you
     * Does not change your ability to delegate to others
     */
    function disableDelegationTo() external;

    /**
     * Allows others to delegate to you
     * Disallows you from delegating to others
     */
    function reenableDelegating() external;

    /**
     * Returns true if the address has no amount of their balance delegated, otherwise false
     * @param account the address whose delegation status is being checked
     */
    function isOwnDelegate(address account) external returns (bool);

    /**
     * Fetches the primary address `account` is currently delegating to. Defaults to the account address itself if none specified.
     * The primary delegate is the one that is delegated any new funds the address recieves
     * @param account the address whose primary delegate is being fetched
     */
    function getPrimaryDelegate(
        address account
    ) external view returns (address);

    /**
     * Delegates all votes from the sender to `delegatee`
     * This function assumes that you do not have partial delegations
     * It will revert with "ERC20Delegated: must have an undelegated amount available to cover delegation" if you do
     * @param delegatee the address being delegated to
     */
    function delegate(address delegatee) external;

    /**
     * Delegates all votes from the sender to `delegatee`
     * This function assumes that you do not have partial delegations
     * It will revert with "ERC20Delegated: must have an undelegated amount available to cover delegation" if you do
     * @param delegator the address delegating votes
     * @param delegatee the address being delegated to
     * @param deadline the time at which the signature expires
     * @param v signature value
     * @param r signature value
     * @param s signature value
     */
    function delegateBySig(
        address delegator,
        address delegatee,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) external;

    /**
     * Delegate an `amount` of votes from the sender to `delegatee`
     * @param delegatee the address being delegated to
     * @param amount the amount of tokens being allocated
     */
    function delegateAmount(address delegatee, uint256 amount) external;

    /**
     * Undelegate all votes from the sender's primary delegate
     */
    function undelegate() external;

    /**
     * Allows a primary delegated individual to revoke delegations of unwanted delegators
     * Useful for allowing yourself to call reenableDelegating after calling disableDelegationTo
     * @param delegator the address whose delegation is being revoked
     */
    function revokeDelegation(address delegator) external;

    /**
     * Undelegate a specific amount of votes from the `delegatee` back to the sender
     * @param delegatee the address being undelegated to
     * @param amount the amount of tokens being undelegated
     */
    function undelegateAmountFromAddress(
        address delegatee,
        uint256 amount
    ) external;

    /**
     * See {IERC20-balanceOf}.
     * @param account the address whose vote balance is being checked
     */
    function voteBalanceOf(address account) external view returns (uint256);
}

/* -*- c-basic-offset: 4 -*- */
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;
import "./VoteSnapshots.sol";

/**
 * @title InflationSnapshots
 * @notice This implements a scaling inflation multiplier on all balances and votes.
 * Changing this value (via implementing _rebase)
 */
abstract contract InflationSnapshots is VoteSnapshots {
    uint256 public constant INITIAL_INFLATION_MULTIPLIER = 1e18;

    Snapshot internal _inflationMultiplierSnapshot;

    uint256 public inflationMultiplier;

    /**
     * error for when a rebase attempts to rebase incorrectly
     */
    error BadRebaseValue();

    /**
     * Fired when a proposal with a new inflation multiplier is selected and passed.
     * Used to calculate new values for the rebased token.
     * @param adjustinginflationMultiplier the multiplier that has just been applied to the tokens
     * @param cumulativeInflationMultiplier the total multiplier that is used to convert to and from gons
     */
    event NewInflationMultiplier(
        uint256 adjustinginflationMultiplier,
        uint256 cumulativeInflationMultiplier
    );

    /**
     * to be used to record the transfer amounts after _beforeTokenTransfer
     * these values are the base (unchanging) values the currency is stored in
     * @param from address transferring from
     * @param to address transferring to
     * @param value the base value being transferred
     */
    event BaseValueTransfer(
        address indexed from,
        address indexed to,
        uint256 value
    );

    /** Construct a new instance.
     * Note that it is always necessary to call reAuthorize on the balance store
     * after it is first constructed to populate the authorized interface
     * contracts cache. These calls are separated to allow the authorized
     * contracts to be configured/deployed after the balance store contract.
     * @param _policy the Policy
     * @param _name the token name
     * @param _symbol the token symbol
     * @param _initialPauser the initial Pauser
     */
    constructor(
        Policy _policy,
        string memory _name,
        string memory _symbol,
        address _initialPauser
    ) VoteSnapshots(_policy, _name, _symbol, _initialPauser) {
        inflationMultiplier = INITIAL_INFLATION_MULTIPLIER;
        _updateInflationSnapshot();
    }

    /**
     * Initialize
     * @param _self the address to initialize
     */
    function initialize(
        address _self
    ) public virtual override onlyConstruction {
        super.initialize(_self);
        inflationMultiplier = INITIAL_INFLATION_MULTIPLIER;
        _updateInflationSnapshot();
    }

    function _rebase(uint256 _inflationMultiplier) internal virtual {
        if (_inflationMultiplier == 0) {
            revert BadRebaseValue();
        }

        // update snapshot with old value
        _updateInflationSnapshot();

        uint256 newInflationMult = (_inflationMultiplier *
            inflationMultiplier) / INITIAL_INFLATION_MULTIPLIER;

        inflationMultiplier = newInflationMult;

        emit NewInflationMultiplier(_inflationMultiplier, newInflationMult);
    }

    function _beforeTokenTransfer(
        address from,
        address to,
        uint256 amount
    ) internal virtual override returns (uint256) {
        amount = super._beforeTokenTransfer(from, to, amount);
        uint256 gonsAmount = amount * inflationMultiplier;

        emit BaseValueTransfer(from, to, gonsAmount);

        return gonsAmount;
    }

    /**
     * Inflation Multiplier Snapshot
     * @return inflationValueMultiplier Inflation Value Muliplier at time of the Snapshot
     */
    function inflationMultiplierSnapshot()
        public
        view
        returns (uint256 inflationValueMultiplier)
    {
        if (
            currentSnapshotBlock != block.number &&
            _inflationMultiplierSnapshot.snapshotBlock < currentSnapshotBlock
        ) {
            return inflationMultiplier;
        } else {
            return _inflationMultiplierSnapshot.value;
        }
    }

    /**
     * wrapper for inflationMultiplierSnapshot to maintain compatability with older interfaces
     * no requires even though return value might be misleading given inability to query old snapshots just to maintain maximum compatability
     * @return pastLinearInflationMultiplier Inflation Value Muliplier at time of the Snapshot
     */
    function getPastLinearInflation(
        uint256
    ) public view returns (uint256 pastLinearInflationMultiplier) {
        return inflationMultiplier;
    }

    /**
     * Access function to determine the token balance held by some address.
     * @param _owner address of the owner of the voting balance
     * @return inflationBalance value of the owner divided by the inflation multiplier
     */
    function balanceOf(
        address _owner
    ) public view override returns (uint256 inflationBalance) {
        return _balances[_owner] / inflationMultiplier;
    }

    /**
     * Access function to determine the voting balance (includes delegation) of some address.
     * @param _owner the address of the account to get the balance for
     * @return votingBalance The vote balance fo the owner divided by the inflation multiplier
     */
    function voteBalanceOf(
        address _owner
    ) public view override returns (uint256 votingBalance) {
        return _voteBalances[_owner] / inflationMultiplier;
    }

    /**
     * Returns the total (inflation corrected) token supply
     * @return totalInflatedSupply The total supply divided by the inflation multiplier
     */
    function totalSupply()
        public
        view
        override
        returns (uint256 totalInflatedSupply)
    {
        return _totalSupply / inflationMultiplier;
    }

    /**
     * Returns the total (inflation corrected) token supply for the current snapshot
     * @return totalInflatedSupply The total supply snapshot divided by the inflation multiplier
     */
    function totalSupplySnapshot()
        public
        view
        override
        returns (uint256 totalInflatedSupply)
    {
        return super.totalSupplySnapshot() / inflationMultiplierSnapshot();
    }

    /**
     * Return snapshotted voting balance (includes delegation) for the current snapshot.
     * @param account The account to check the votes of.
     * @return snapshotted voting balance (includes delegation) for the current snapshot.
     */
    function voteBalanceSnapshot(
        address account
    ) public view override returns (uint256) {
        uint256 _inflationMultiplier = inflationMultiplierSnapshot();

        if (_inflationMultiplier == 0) {
            return 0;
        }

        return super.voteBalanceSnapshot(account) / _inflationMultiplier;
    }

    function _updateInflationSnapshot() private {
        uint32 _currentSnapshotBlock = currentSnapshotBlock;
        // take no action during the snapshot block, only after it
        if (_currentSnapshotBlock == block.number) {
            return;
        }

        if (
            _inflationMultiplierSnapshot.snapshotBlock < _currentSnapshotBlock
        ) {
            uint256 currentValue = inflationMultiplier;
            require(
                currentValue <= type(uint224).max,
                "InflationSnapshots: new snapshot cannot be casted safely"
            );
            _inflationMultiplierSnapshot.snapshotBlock = _currentSnapshotBlock;
            _inflationMultiplierSnapshot.value = uint224(currentValue);
        }
    }

    // protecting future upgradeability
    uint256[50] private __gapInflationSnapshots;
}

// SPDX-License-Identifier: MIT

pragma solidity ^0.8.0;

import "./ERC20MintAndBurn.sol";

/**
 * @dev Basic snapshotting just for total supply.
 *
 * This extension maintains a snapshot the total supply which updates on mint or burn after a new snapshot is taken.
 */
abstract contract TotalSupplySnapshots is ERC20MintAndBurn {
    // structure for saving snapshotted values
    struct Snapshot {
        uint32 snapshotBlock;
        uint224 value;
    }

    // the reference snapshotBlock that the update function checks against
    uint32 public currentSnapshotBlock;

    // the snapshot to track the token total supply
    Snapshot internal _totalSupplySnapshot;

    /**
     * @dev Emitted by {_snapshot} when a new snapshot is created.
     *
     * @param block the new value of currentSnapshotBlock
     */
    event NewSnapshotBlock(uint256 block);

    constructor(
        Policy _policy,
        string memory _name,
        string memory _symbol,
        address _initialPauser
    ) ERC20MintAndBurn(_policy, _name, _symbol, _initialPauser) {
        // snapshot on creation to make it clear that everyone's balances should be updated
        _snapshot();
    }

    function initialize(
        address _self
    ) public virtual override onlyConstruction {
        super.initialize(_self);
        // snapshot on initialization to make it clear that everyone's balances should be updated after upgrade
        _snapshot();
    }

    /**
     * @dev Retrieve the `totalSupply` for the snapshot
     */
    function totalSupplySnapshot() public view virtual returns (uint256) {
        if (
            currentSnapshotBlock != block.number &&
            _totalSupplySnapshot.snapshotBlock < currentSnapshotBlock
        ) {
            return _totalSupply;
        } else {
            return _totalSupplySnapshot.value;
        }
    }

    /**
     * Update total supply snapshots before the values are modified. This is implemented
     * in the _beforeTokenTransfer hook, which is executed for _mint, _burn, and _transfer operations.
     */
    function _beforeTokenTransfer(
        address from,
        address to,
        uint256 amount
    ) internal virtual override returns (uint256) {
        if (from == address(0)) {
            // mint
            _updateTotalSupplySnapshot();
        } else if (to == address(0)) {
            // burn
            _updateTotalSupplySnapshot();
        }

        return super._beforeTokenTransfer(from, to, amount);
    }

    /**
     * @dev Creates a new snapshot and returns its snapshot id.
     *
     * Emits a {NewSnapshotBlock} event that contains the same id.
     */
    function _snapshot() internal virtual {
        // the math will error if the snapshot overflows
        currentSnapshotBlock = uint32(block.number);

        emit NewSnapshotBlock(block.number);
    }

    function _updateTotalSupplySnapshot() private {
        uint32 _currentSnapshotBlock = currentSnapshotBlock;
        // take no action during the snapshot block, only after it
        if (_currentSnapshotBlock == block.number) {
            return;
        }

        if (_totalSupplySnapshot.snapshotBlock < _currentSnapshotBlock) {
            uint256 currentValue = _totalSupply;
            require(
                currentValue <= type(uint224).max,
                "VoteSnapshots: new snapshot cannot be casted safely"
            );
            _totalSupplySnapshot.snapshotBlock = _currentSnapshotBlock;
            _totalSupplySnapshot.value = uint224(currentValue);
        }
    }

    // protecting future upgradeability
    uint256[50] private __gapTotalSupplySnapshots;
}

// SPDX-License-Identifier: MIT

pragma solidity ^0.8.0;

import "./ERC20Delegated.sol";

/**
 * Extension of ERC20Delegated to support snapshotting.
 *
 * This extension maintains a snapshot of each addresses's votes which updates on the transfer after a new snapshot is taken.
 * Only addresses that have opted into voting are snapshotted.
 */
abstract contract VoteSnapshots is ERC20Delegated {
    /// mapping of each address to it's latest snapshot of votes
    mapping(address => Snapshot) private _voteSnapshots;

    /** Construct a new instance.
     *
     * the root _policy needs to be passed down through to service ERC20BurnAndMint
     */
    constructor(
        Policy _policy,
        string memory _name,
        string memory _symbol,
        address _initialPauser
    ) ERC20Delegated(_policy, _name, _symbol, _initialPauser) {
        // call to super constructor
    }

    /**
     * Retrieve the balance for the snapshot
     *
     * @param account the address to check vote balances for
     * @return balance the balance for the acccount for the snapshot
     */
    function voteBalanceSnapshot(
        address account
    ) public view virtual returns (uint256 balance) {
        Snapshot memory _accountSnapshot = _voteSnapshots[account];

        if (
            currentSnapshotBlock != block.number &&
            _accountSnapshot.snapshotBlock < currentSnapshotBlock
        ) {
            return _voteBalances[account];
        } else {
            balance = _accountSnapshot.value;
        }
        return balance;
    }

    /**
     * Update balance snapshots for votes before the values are modified. This is implemented
     * in the _beforeVoteTokenTransfer hook, which is executed for _mint, _burn, and _transfer operations.
     * @param from the from address for the transfer
     * @param to the to address for the transfer
     * @param amount the amount of the transfer
     */
    function _beforeVoteTokenTransfer(
        address from,
        address to,
        uint256 amount
    ) internal virtual override {
        super._beforeVoteTokenTransfer(from, to, amount);

        if (from != address(0) && voter[from]) {
            _updateAccountSnapshot(from);
        }
        if (to != address(0) && voter[to]) {
            _updateAccountSnapshot(to);
        }
    }

    function _updateAccountSnapshot(address account) private {
        uint32 _currentSnapshotBlock = currentSnapshotBlock;
        // take no action during the snapshot block, only after it
        if (_currentSnapshotBlock == block.number) {
            return;
        }

        Snapshot storage snapshot = _voteSnapshots[account];
        uint256 currentValue = _voteBalances[account];

        if (snapshot.snapshotBlock < _currentSnapshotBlock) {
            require(
                currentValue <= type(uint224).max,
                "VoteSnapshots: new snapshot cannot be casted safely"
            );

            snapshot.snapshotBlock = _currentSnapshotBlock;
            snapshot.value = uint224(currentValue);
        }
    }

    // protecting future upgradeability
    uint256[50] private __gapVoteSnapshots;
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "./TrustedNodes.sol";
import "./MonetaryPolicyAdapter.sol";
import "../../utils/TimeUtils.sol";
import "../../policy/Policed.sol";

/**
 * @title Trustee monetary policy decision process
 * @notice This contract oversees the voting on the currency monetary levers.
 * Trustees vote on a policy that is implemented at the conclusion of the cycle
 */
contract CurrencyGovernance is Policed, TimeUtils {
    //////////////////////////////////////////////
    /////////////////// TYPES ////////////////////
    //////////////////////////////////////////////

    // data structure for monetary policy proposals
    struct MonetaryPolicy {
        // the cycle that the proposal was submitted during
        uint256 cycle;
        // addresses to call if the proposal succeeds
        address[] targets;
        // the function signatures to call
        bytes4[] signatures;
        // the abi encoded data to call
        bytes[] calldatas;
        // the number of trustees supporting the proposal
        uint256 support;
        // the mapping of who is supporting (note, this persists past deletion)
        // this is to avoid double supporting and to confirm and record unspports
        mapping(address => bool) supporters;
        // to store a link to more information
        string description;
    }

    // struct for the array of submitted votes
    struct Vote {
        // the address of the trustee who submitted the proposal being voted for
        // proposals must be scored in ascending order of address to be accepted
        bytes32 proposalId;
        // the score of this proposal within the ballot, min recorded score is one
        // to get a score of zero, an item must be unscored
        uint256 score;
    }

    // struct for the getCurrentStage() return data type
    struct TimingData {
        // the cycle index
        // calculated by looking at how many CYCLE_LENGTHs have elapsed since the governanceStartTime
        uint256 currentCycle;
        // the governance stage
        // calculated by looking at how much time has progressed during the current cycle
        Stage currentStage;
    }

    // enum for denoting the current stage in getCurrentStage()
    enum Stage {
        Propose,
        Commit,
        Reveal
    }

    //////////////////////////////////////////////
    //////////////////// VARS ////////////////////
    //////////////////////////////////////////////

    /// this var stores the current contract that holds the trusted nodes role
    TrustedNodes public trustedNodes;

    /** this var stores the current contract that holds the enacter role */
    MonetaryPolicyAdapter public enacter;

    /** this variable tracks the start of governance
     * it is used to track the voting cycle and stage
     */
    uint256 public immutable governanceStartTime;

    // timescales
    uint256 public constant PROPOSAL_TIME = 10 days;
    uint256 public constant VOTING_TIME = 3 days;
    uint256 public constant REVEAL_TIME = 1 days;
    uint256 public constant CYCLE_LENGTH =
        PROPOSAL_TIME + VOTING_TIME + REVEAL_TIME;

    /**  start with cycle 1000 to avoid underflow and initial value issues */
    uint256 public constant START_CYCLE = 1000;

    uint256 public constant IDEMPOTENT_INFLATION_MULTIPLIER = 1e18;

    /**  max length of description field */
    uint256 public constant MAX_DESCRIPTION_DATA = 160;

    /**  max length of the targets array
     */
    uint256 public constant MAX_TARGETS = 10;

    /** mapping of proposal IDs to submitted proposals
     * proposalId hashes include the _cycle as a parameter
     */
    mapping(bytes32 => MonetaryPolicy) public proposals;
    /**  mapping of trustee addresses to cycle number to track if they have supported (and can therefore not support again) */
    mapping(address => uint256) public trusteeSupports;
    /**  mapping of trustee addresses to their most recent hash commits for voting */
    mapping(address => bytes32) public commitments;
    /**  mapping proposalIds to their voting score, accumulated during reveal */
    mapping(bytes32 => uint256) public scores;

    /**
     * @notice minimum number participating trustees required for a policy to be enacted in any given cycle
     */
    uint256 public quorum;

    /**
     * @notice number of trustees that participated this cycle
     */
    uint256 public participation;

    /** used to track the leading proposalId during the vote totalling
     * tracks the winner between reveal phases
     * is deleted on enact to ensure it can only be enacted once
     */
    bytes32 public leader;

    //////////////////////////////////////////////
    /////////////////// ERRORS ///////////////////
    //////////////////////////////////////////////

    /** setting the enacter address to the zero address stops governance */
    error NonZeroEnacterAddr();

    /**
     * setting the quorum greater than the number of trustees stops governance
     * inherently prevents the trustedNodes address from being set to the zero address
     * something to keep in mind for the case in which trustees are removed via community governance
     */
    error BadQuorum();

    /** For if a non-trustee address tries to access trustee role gated functionality */
    error TrusteeOnlyFunction();

    /** For when governance calls are made before or after their time windows for their stage */
    error WrongStage();

    /** Early finalization error
     * for when a cycle is attempted to be finalized before it finishes
     * @param requestedCycle the cycle submitted by the end user to access
     * @param currentCycle the current cycle as calculated by the contract
     */
    error CycleIncomplete(uint256 requestedCycle, uint256 currentCycle);

    /** Description length error
     * for when a proposal is submitted with too long of a description
     * @param submittedLength the length of the submitted description, to be compared against MAX_DESCRIPTION_DATA
     */
    error ExceedsMaxDescriptionSize(uint256 submittedLength);

    /** Targets length error
     * for when a proposal is submitted with too many actions or zero actions
     * @param submittedLength the length of the submitted targets array, to be compared against MAX_TARGETS and 0
     */
    error BadNumTargets(uint256 submittedLength);

    /** error for when the 3 arrays submitted for the proposal don't all have the same number of elements */
    error ProposalActionsArrayMismatch();

    /** error for when a trustee is already supporting a policy and tries to propose or support another policy */
    error SupportAlreadyGiven();

    /** error for when a trustee is not supporting a policy and tries unsupport */
    error SupportNotGiven();

    /** error for when a trustee tries unsupporting a proposal from a past cycle */
    error ProposalNotCurrent();

    /** error for when a proposal is submitted that's a total duplicate of an existing one */
    error DuplicateProposal();

    /** error for when a proposal is supported that hasn't actually been proposed */
    error NoSuchProposal();

    /** error for when a reveal is submitted with no votes */
    error CannotVoteEmpty();

    /** error for when a trustee with a commmitment tries to abstain */
    error NoAbstainWithCommit();

    /** error for when a reveal is submitted for an empty commitment, usually the sign of no commit being submitted */
    error NoCommitFound();

    /** error for when the submitted vote doesn't match the stored commit */
    error CommitMismatch();

    /** error for when a proposalId in a trustee's vote is not one from the current cycle or is completely invalid
     * @param vote the vote containing the invalid proposalId
     */
    error InvalidVoteBadProposalId(Vote vote);

    /** error for when the proposalIds in a trustee's vote are not strictly increasing
     * @param prevVote the vote before the invalid vote
     * @param vote the vote with the non-increasing proposalId
     */
    error InvalidVoteBadProposalOrder(Vote prevVote, Vote vote);

    /** error for when a score in a trustee's vote is either duplicate or doesn't respect support weightings
     * @param vote the vote containing the invalid score
     */
    error InvalidVoteBadScore(Vote vote);

    /** error for when the scores for proposals are not monotonically increasing, accounting for support weighting */
    error InvalidVotesOutOfBounds();

    /** error for when the leader's score is less than the quorum */
    error QuorumNotMet();

    /** error for when enact is called, but the cycle it's called for does not match the proposal that's the current leader  */
    error EnactCycleNotCurrent();

    //////////////////////////////////////////////
    /////////////////// EVENTS ///////////////////
    //////////////////////////////////////////////

    /**
     * emits when the trustedNodes contract is changed
     * @param newTrustedNodes denotes the new trustedNodes contract address
     * @param oldTrustedNodes denotes the old trustedNodes contract address
     */
    event NewTrustedNodes(
        TrustedNodes newTrustedNodes,
        TrustedNodes oldTrustedNodes
    );

    /**
     * @notice emits when the enacter contract is changed
     * @param newEnacter denotes the new enacter contract address
     * @param oldEnacter denotes the old enacter contract address
     */
    event NewEnacter(
        MonetaryPolicyAdapter newEnacter,
        MonetaryPolicyAdapter oldEnacter
    );

    /**
     * @notice emits when setQuorum is called successfully
     * @param newQuorum the new quorum
     * @param oldQuorum the old quorum
     */
    event NewQuorum(uint256 newQuorum, uint256 oldQuorum);

    /** Tracking for proposal creation
     * emitted when a proposal is submitted to track the values
     * @param _trusteeAddress the address of the trustee that submitted the proposal
     * @param _cycle the cycle during which the proposal was submitted
     * @param id the lookup id for the proposal in the proposals mapping
     * is created via a hash of _cycle, _targets, _signatures, and _calldatas; see getProposalHash for more details
     * @param _description a string allowing the trustee to describe the proposal or link to discussions on the proposal
     */
    event ProposalCreation(
        address indexed _trusteeAddress,
        uint256 indexed _cycle,
        bytes32 id,
        string _description
    );

    /** Tracking for support actions
     * emitted when a trustee adds their support for a proposal
     * @param trustee the address of the trustee supporting
     * @param proposalId the lookup for the proposal being supported
     * @param cycle the cycle during which the support action happened
     */
    event Support(
        address indexed trustee,
        bytes32 indexed proposalId,
        uint256 indexed cycle
    );

    /** Tracking for unsupport actions
     * emitted when a trustee retracts their support for a proposal
     * @param trustee the address of the trustee unsupporting
     * @param proposalId the lookup for the proposal being unsupported
     * @param cycle the cycle during which the support action happened
     */
    event Unsupport(
        address indexed trustee,
        bytes32 indexed proposalId,
        uint256 indexed cycle
    );

    /** Tracking for removed proposals
     * emitted when the last trustee retracts their support for a proposal
     * @param proposalId the lookup for the proposal being deleted
     * @param cycle the cycle during which the unsupport deletion action happened
     */
    event ProposalDeleted(bytes32 indexed proposalId, uint256 indexed cycle);

    /** Fired when a trustee commits their vote.
     * @param trustee the trustee that committed the vote
     * @param cycle the cycle for the commitment
     */
    event VoteCommit(address indexed trustee, uint256 indexed cycle);

    /** Fired when a vote is revealed, to create a voting history for all participants.
     * Records the voter, as well as all of the parameters of the vote cast.
     * @param voter the trustee who revealed their vote
     * @param cycle the cycle when the vote was cast and counted
     * @param votes the array of Vote structs that composed the trustee's ballot
     */
    event VoteReveal(
        address indexed voter,
        uint256 indexed cycle,
        Vote[] votes
    );

    // fired when cycle participation is high enough to enact monetary policy
    event QuorumReached();

    /** Fired when an address choses to abstain
     * @param voter the address of the voter
     * @param cycle the cycle for which the voter abstained
     */
    event Abstain(address indexed voter, uint256 indexed cycle);

    /** Fired when vote results are computed, creating a permanent record of vote outcomes.
     * @param cycle the cycle for which this is the vote result
     * @param winner the proposalId for the proposal that won
     */
    event VoteResult(uint256 cycle, bytes32 winner);

    //////////////////////////////////////////////
    ////////////////// MODIFIERS /////////////////
    //////////////////////////////////////////////

    /** Restrict access to trusted nodes only.
     */
    modifier onlyTrusted() {
        if (!trustedNodes.isTrusted(msg.sender)) {
            revert TrusteeOnlyFunction();
        }
        _;
    }

    /**  for functions related to proposing monetary policy */
    modifier duringProposePhase() {
        if ((getTime() - governanceStartTime) % CYCLE_LENGTH >= PROPOSAL_TIME) {
            revert WrongStage();
        }
        _;
    }

    /** for functions related to committing votes */
    modifier duringVotePhase() {
        uint256 governanceTime = (getTime() - governanceStartTime) %
            CYCLE_LENGTH;

        if (
            governanceTime < PROPOSAL_TIME ||
            governanceTime >= PROPOSAL_TIME + VOTING_TIME
        ) {
            revert WrongStage();
        }
        _;
    }

    /** for functions related to revealing votes */
    modifier duringRevealPhase() {
        if (
            (getTime() - governanceStartTime) % CYCLE_LENGTH <
            PROPOSAL_TIME + VOTING_TIME
        ) {
            revert WrongStage();
        }
        _;
    }

    //////////////////////////////////////////////
    ///////////////// CONSTRUCTOR ////////////////
    //////////////////////////////////////////////

    /** constructor
     * @param _policy the owning policy address for the contract
     * @param _enacter the monetary policy adapter
     * @param _quorum the required quorum for enactment of monetary policy
     * @param _termStart the time the current CurrencyGovernance term starts
     */
    constructor(
        Policy _policy,
        MonetaryPolicyAdapter _enacter,
        uint256 _quorum,
        uint256 _termStart
    ) Policed(_policy) {
        _setEnacter(_enacter);
        quorum = _quorum; // can't use _setQuorum as it's not linked to trustedNodes until after initial deploy
        governanceStartTime = _termStart;
    }

    //////////////////////////////////////////////
    ////////////////// FUNCTIONS /////////////////
    //////////////////////////////////////////////

    /** setter function for trustedNodes var
     * This function is very disruptive to the currency governance process and the timing of calling it should be VERY INTENTIONAL
     * The proposal that does so should have a timing restriction on its enaction, don't just let it be enacted as soon as it passes!
     *
     * only available to the owning policy contract
     * @param _trustedNodes the value to set the new trustedNodes address to, must have enough trustees to be able to hit quorum
     */
    function setTrustedNodes(TrustedNodes _trustedNodes) external onlyPolicy {
        emit NewTrustedNodes(_trustedNodes, trustedNodes);
        _setTrustedNodes(_trustedNodes);
    }

    function _setTrustedNodes(TrustedNodes _trustedNodes) internal {
        // don't allow a new trusted nodes contract without enough trustees to hit quorum
        // also makes sure you cannot set the trusted nodes contract to an address which doesn't have a `numTrustees()` function
        if (quorum > _trustedNodes.numTrustees()) {
            revert BadQuorum();
        }
        trustedNodes = _trustedNodes;
    }

    /** setter function for enacter var
     * only available to the owning policy contract
     * @param _enacter the value to set the new enacter address to, cannot be zero
     */
    function setEnacter(MonetaryPolicyAdapter _enacter) external onlyPolicy {
        emit NewEnacter(_enacter, enacter);
        _setEnacter(_enacter);
    }

    function _setEnacter(MonetaryPolicyAdapter _enacter) internal {
        if (address(_enacter) == address(0)) {
            revert NonZeroEnacterAddr();
        }
        enacter = _enacter;
    }

    function setQuorum(uint256 _quorum) external onlyPolicy {
        emit NewQuorum(_quorum, quorum);
        _setQuorum(_quorum);
    }

    function _setQuorum(uint256 _quorum) internal {
        if (_quorum > trustedNodes.numTrustees() || _quorum == 0) {
            revert BadQuorum();
        }
        quorum = _quorum;
    }

    /** getter for timing data
     * calculates and returns the current cycle and the current stage
     * @return timingData Timin Data type of { uint256 cycle, Stage stage }
     */
    function getCurrentStage()
        public
        view
        returns (TimingData memory timingData)
    {
        uint256 timeDifference = getTime() - governanceStartTime;
        uint256 completedCycles = START_CYCLE + timeDifference / CYCLE_LENGTH;
        uint256 governanceTime = timeDifference % CYCLE_LENGTH;

        if (governanceTime < PROPOSAL_TIME) {
            return TimingData(completedCycles, Stage.Propose);
        } else if (governanceTime < PROPOSAL_TIME + VOTING_TIME) {
            return TimingData(completedCycles, Stage.Commit);
        } else {
            return TimingData(completedCycles, Stage.Reveal);
        }
    }

    /** getter for just the current cycle
     * calculates and returns, used internally
     * @return cycle the index for the currently used governance recording mappings
     */
    function getCurrentCycle() public view returns (uint256 cycle) {
        return START_CYCLE + (getTime() - governanceStartTime) / CYCLE_LENGTH;
    }

    /** propose a monetary policy
     * this function allows trustees to submit a potential monetary policy
     * if there is already a proposed monetary policy by the trustee, this overwrites it
     * @param targets array of target addresses
     * @param signatures array of signatures
     * @param calldatas array of calldata
     * @param description descrption of the monetary policy
     */
    function propose(
        address[] calldata targets,
        bytes4[] calldata signatures,
        bytes[] memory calldatas,
        string calldata description
    ) external onlyTrusted duringProposePhase {
        uint256 cycle = getCurrentCycle();
        if (!canSupport(msg.sender)) {
            revert SupportAlreadyGiven();
        }

        trusteeSupports[msg.sender] = cycle;

        uint256 descriptionLength = bytes(description).length;
        if (descriptionLength > MAX_DESCRIPTION_DATA) {
            revert ExceedsMaxDescriptionSize(descriptionLength);
        }

        uint256 numTargets = targets.length;
        if (numTargets > MAX_TARGETS || numTargets <= 0) {
            revert BadNumTargets(numTargets);
        }
        if (numTargets != signatures.length || numTargets != calldatas.length) {
            revert ProposalActionsArrayMismatch();
        }

        bytes32 proposalId = getProposalId(
            cycle,
            targets,
            signatures,
            calldatas
        );

        MonetaryPolicy storage p = proposals[proposalId];

        // THIS IS NOT A GUARANTEE FOR DUPLICATE PROPOSALS JUST A SAFEGUARD FOR OVERWRITING
        if (p.support != 0) {
            revert DuplicateProposal();
        }
        p.support = 1;
        p.supporters[msg.sender] = true;

        p.cycle = cycle;
        p.targets = targets;
        p.signatures = signatures;
        p.calldatas = calldatas;
        p.description = description;

        emit ProposalCreation(msg.sender, cycle, proposalId, description);
        emit Support(msg.sender, proposalId, cycle);
    }

    /** getter for duplicate support checks
     * the function just pulls to see if the address has supported this generation
     * doesn't check to see if the address is a trustee
     * @param _address the address to check. not msg.sender for dapp related purposes
     */
    function canSupport(address _address) public view returns (bool) {
        return trusteeSupports[_address] < getCurrentCycle();
    }

    function getProposalId(
        uint256 _cycle,
        address[] calldata _targets,
        bytes4[] calldata _signatures,
        bytes[] memory _calldatas
    ) public pure returns (bytes32) {
        return
            keccak256(
                abi.encodePacked(
                    _cycle,
                    keccak256(abi.encode(_targets, _signatures, _calldatas))
                )
            );
    }

    function getProposalTargets(
        bytes32 proposalId
    ) external view returns (address[] memory) {
        return proposals[proposalId].targets;
    }

    function getProposalSignatures(
        bytes32 proposalId
    ) external view returns (bytes4[] memory) {
        return proposals[proposalId].signatures;
    }

    function getProposalCalldatas(
        bytes32 proposalId
    ) external view returns (bytes[] memory) {
        return proposals[proposalId].calldatas;
    }

    function getProposalSupporter(
        bytes32 proposalId,
        address supporter
    ) external view returns (bool) {
        return proposals[proposalId].supporters[supporter];
    }

    /** add your support to a monetary policy
     * this function allows you to increase the support weight to an already submitted proposal
     * the submitter of a proposal default supports it
     * support for a proposal is close to equivalent of submitting a duplicate proposal to pad the ranking
     * @param proposalId the lookup ID for the proposal that's being supported
     */
    function supportProposal(
        bytes32 proposalId
    ) external onlyTrusted duringProposePhase {
        if (!canSupport(msg.sender)) {
            revert SupportAlreadyGiven();
        }

        uint256 cycle = getCurrentCycle();

        MonetaryPolicy storage p = proposals[proposalId];

        // can support the default proposal even though is doesn't get initialized
        // the support parameter is bumped by 1 for the default proposal when its vote is counted
        // cannot support future cycle default proposals
        if (proposalId != bytes32(cycle)) {
            if (p.support == 0) {
                revert NoSuchProposal();
            }
            if (p.cycle != cycle) {
                revert ProposalNotCurrent();
            }
        }

        trusteeSupports[msg.sender] = cycle;

        ++p.support;
        p.supporters[msg.sender] = true;
        emit Support(msg.sender, proposalId, getCurrentCycle());
    }

    /** removes your support to a monetary policy
     * this function allows you to reduce the support weight to an already submitted proposal
     * you must unsupport first if you currently have supported if you want to support or propose another proposal
     * the last person who unsupports the proposal deletes the proposal
     * @param proposalId the lookup ID for the proposal that's being unsupported
     */
    function unsupportProposal(
        bytes32 proposalId
    ) external onlyTrusted duringProposePhase {
        uint256 cycle = getCurrentCycle();

        MonetaryPolicy storage p = proposals[proposalId];
        uint256 support = p.support;

        if (support == 0) {
            revert NoSuchProposal();
        }
        if (!p.supporters[msg.sender]) {
            revert SupportNotGiven();
        }
        if (p.cycle != cycle && proposalId != bytes32(cycle)) {
            revert ProposalNotCurrent();
        }

        p.supporters[msg.sender] = false;

        // deleting the default proposal doesn't do anything, but you don't want to emit the event
        if (support == 1 && proposalId != bytes32(cycle)) {
            delete proposals[proposalId];
            emit ProposalDeleted(proposalId, cycle);
        } else {
            --p.support;
        }

        trusteeSupports[msg.sender] = 0;
        emit Unsupport(msg.sender, proposalId, cycle);
    }

    /** submit a vote commitment
     * this function allows trustees to submit a commit hash of their vote
     * commitment is salted so that it is a blind vote process
     * calling additional times overwrites previous commitments
     * @param _commitment the hash commit to check against when revealing
     * the structure of the commit is keccak256(abi.encode(salt, cycleIndex, msg.sender, votes)) where votes is an array of Vote structs
     */
    function commit(bytes32 _commitment) external onlyTrusted duringVotePhase {
        commitments[msg.sender] = _commitment;
        emit VoteCommit(msg.sender, getCurrentCycle());
    }

    /** signal abstainment to the protocol
     * does not count as a vote (cannot be revealed to record positive participation for a reward)
     * signals the abstainment with an event
     * due to a small quirk, forgetting to reveal your vote in the previous round requires you to first call commit with zero data
     */
    function abstain() external onlyTrusted duringVotePhase {
        if (commitments[msg.sender] != bytes32(0)) {
            revert NoAbstainWithCommit();
        }
        emit Abstain(msg.sender, getCurrentCycle());
    }

    /** reveal a committed vote
     * this function allows trustees to reveal their previously committed votes once the reveal phase is entered
     * in revealing the vote, votes are tallied, a running tally of each proposal's votes is kept in storage during this phase
     * @param _trustee the trustee's commit to try and reveal
     * trustees can obviously reveal their own commits, but this allows for a delegated reveal
     * the commit structure means that only the correct committed vote can ever be revealed, no matter who reveals it
     * reveals are attributed to this trustee
     * @param _salt the salt for the commit hash to make the vote secret
     * @param _votes the array of Vote objects { bytes32 proposal, uint256 ranking } that follows our modified Borda scheme. The votes need to be arranged in ascending order of address and ranked via the integers 1 to the number of proposals ranked.
     */
    function reveal(
        address _trustee,
        bytes32 _salt,
        Vote[] calldata _votes
    ) external duringRevealPhase {
        uint256 _cycle = getCurrentCycle();
        uint256 numVotes = _votes.length;
        if (numVotes == 0) {
            revert CannotVoteEmpty();
        }
        if (
            keccak256(abi.encode(_salt, _cycle, _trustee, _votes)) !=
            commitments[_trustee]
        ) {
            revert CommitMismatch();
        }

        // an easy way to prevent double counting votes
        delete commitments[_trustee];

        // use memory vars to store and track the changes of the leader
        bytes32 priorLeader = leader;
        if (priorLeader != 0) {
            // Check if this is a leader from a past cycle that was never enacted
            if (
                priorLeader != bytes32(_cycle) &&
                proposals[priorLeader].cycle != _cycle
            ) {
                delete participation;
                delete leader;
                priorLeader = 0;
            }
        }

        bytes32 leaderTracker = priorLeader;
        uint256 leaderRankTracker = 0;

        participation += 1;
        if (participation == quorum) {
            emit QuorumReached();
        }

        /**
         * this variable is a bitmap to check that the scores in the ballot are correct
         */
        uint256 scoreDuplicateCheck = 0;

        uint256 i = 0;
        Vote calldata firstV = _votes[0];
        bytes32 firstProposalId = firstV.proposalId;
        // the default proposal will be first every time as its identifier has so many leading zeros that the likelyhood of a proposalId having more leading zeros is astronomically small
        if (firstProposalId == bytes32(_cycle)) {
            uint256 firstScore = firstV.score;
            uint256 _support = proposals[firstProposalId].support + 1; // default proposal has one more support than recorded in storage
            if (_support > firstScore) {
                revert InvalidVoteBadScore(firstV);
            }
            // the only bad score for the duplicate check is out of bounds
            if (firstScore > 255) {
                revert InvalidVoteBadScore(firstV);
            }
            scoreDuplicateCheck +=
                (2 ** _support - 1) <<
                (firstScore - _support);
            scores[firstProposalId] += firstScore;
            // can simplify the leader rank tracker check because we know it's the first element
            if (scores[firstProposalId] >= scores[leaderTracker]) {
                leaderTracker = firstProposalId;
                leaderRankTracker = firstScore;
            }

            // make sure to skip the first element in the following loop as it has already been handled
            ++i;
        }

        for (; i < numVotes; ++i) {
            Vote calldata v = _votes[i];
            bytes32 _proposalId = v.proposalId;
            uint256 _score = v.score;
            MonetaryPolicy storage p = proposals[_proposalId];

            if (p.cycle != _cycle) {
                revert InvalidVoteBadProposalId(v);
            }
            if (i != 0 && _votes[i - 1].proposalId >= _proposalId) {
                revert InvalidVoteBadProposalOrder(_votes[i - 1], v);
            }

            uint256 _support = p.support;
            if (_support > _score) {
                revert InvalidVoteBadScore(v);
            }
            if (_score > 255) {
                revert InvalidVoteBadScore(v);
            }
            uint256 duplicateCompare = (2 ** _support - 1) <<
                (_score - _support);

            if (scoreDuplicateCheck & duplicateCompare > 0) {
                revert InvalidVoteBadScore(v);
            }

            scoreDuplicateCheck += duplicateCompare;

            // now that the scores have been ensured to respect supporting, the previous leader calculation method is still valid
            scores[_proposalId] += _score;
            if (scores[_proposalId] > scores[leaderTracker]) {
                leaderTracker = _proposalId;
                leaderRankTracker = _score;
            } else if (scores[_proposalId] == scores[leaderTracker]) {
                if (_score > leaderRankTracker) {
                    leaderTracker = _proposalId;
                    leaderRankTracker = _score;
                }
            }
        }

        // this check afterward is very important to understand
        // it makes sure that the votes have been sequentially increasing and have been respecting the support values of each proposal
        // the only way this check succeeds is if scoreDuplicate check is of the form 1111111111etc in its binary representation after all the votes from the ballot are in
        if (scoreDuplicateCheck & (scoreDuplicateCheck + 1) > 0) {
            revert InvalidVotesOutOfBounds();
        }

        // only changes the leader if the new leader is of greater score
        if (
            leaderTracker != priorLeader &&
            scores[leaderTracker] > scores[priorLeader]
        ) {
            leader = leaderTracker;
        }

        // record the trustee's vote for compensation purposes
        trustedNodes.recordVote(_trustee);

        emit VoteReveal(_trustee, _cycle, _votes);
    }

    /** send the results to the adapter for enaction
     */
    function enact() external duringProposePhase {
        uint256 _cycle = getCurrentCycle() - 1;
        uint256 _participation = participation;
        if (
            _participation < quorum &&
            _participation < trustedNodes.numTrustees()
        ) {
            revert QuorumNotMet();
        }
        bytes32 _leader = leader;

        // this ensures that this function can only be called maximum once per winning MP
        delete leader;
        // clear this variable to reset for next cycle
        delete participation;

        // the default proposal doesn't do anything
        if (_leader == bytes32(_cycle)) {
            emit VoteResult(_cycle, _leader); // included for completionist's sake, will likely never be called
            return;
        }

        MonetaryPolicy storage _winner = proposals[_leader];

        if (_winner.cycle != _cycle) {
            revert EnactCycleNotCurrent();
        }

        enacter.enact(
            _leader,
            _winner.targets,
            _winner.signatures,
            _winner.calldatas
        );

        emit VoteResult(_cycle, _leader); // will not be emittable if enact cannot be called without reverting (downstream error)
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "../../policy/Policed.sol";
import "../../policy/Policy.sol";
import "./CurrencyGovernance.sol";

/**
 * @title Contract for managing permissions between currency governance and monetary policy levers
 * @notice This contract enacts the results of the currency governance
 * Its goal is to act as a long term address to pemission to allow execution of trustee governance and as a long term reference for event indexing of the results
 * This module can be replaced, but it eases the difficulty of the potentially more frequent changes to the CurrencyGovernance contract
 */
contract MonetaryPolicyAdapter is Policed {
    CurrencyGovernance public currencyGovernance;

    // If the currencyGovernance address is set to zero, the contract is unrecoverably ungovernable
    error NonZeroCurrencyGovernanceAddr();

    // For if a non-currencyGovernance address tries to access currencyGovernance role gated functionality
    error CurrencyGovernanceOnlyFunction();

    /**
     * error for when a part of enacting a policy reverts
     */
    error FailedPolicy();

    /**
     * emits when the currencyGovernance contract is changed
     * @param newCurrencyGovernance denotes the new currencyGovernance contract address
     * @param oldCurrencyGovernance denotes the old currencyGovernance contract address
     */
    event NewCurrencyGovernance(
        CurrencyGovernance newCurrencyGovernance,
        CurrencyGovernance oldCurrencyGovernance
    );

    /**
     * emits when enaction happens to keep record of enaction
     * @param proposalId the proposal lookup that got successfully enacted
     * @param currencyGovernance the CurrencyGovernance contract where you can look up the proposal calldata
     */
    event EnactedMonetaryPolicy(
        bytes32 proposalId,
        CurrencyGovernance currencyGovernance
    );

    /** Restrict method access to the root policy instance only.
     */
    modifier onlyCurrencyGovernance() {
        if (msg.sender != address(currencyGovernance)) {
            revert CurrencyGovernanceOnlyFunction();
        }
        _;
    }

    constructor(Policy _policy) Policed(_policy) {}

    /** setter function for currencyGovernance var
     * only available to the owning policy contract
     * @param _currencyGovernance the value to set the new currencyGovernance address to, cannot be zero
     */
    function setCurrencyGovernance(
        CurrencyGovernance _currencyGovernance
    ) public onlyPolicy {
        emit NewCurrencyGovernance(_currencyGovernance, currencyGovernance);
        _setCurrencyGovernance(_currencyGovernance);
    }

    function _setCurrencyGovernance(
        CurrencyGovernance _currencyGovernance
    ) internal {
        if (address(_currencyGovernance) == address(0)) {
            revert NonZeroCurrencyGovernanceAddr();
        }
        currencyGovernance = _currencyGovernance;
    }

    function enact(
        bytes32 proposalId,
        address[] calldata targets,
        bytes4[] calldata signatures,
        bytes[] memory calldatas
    ) external virtual onlyCurrencyGovernance {
        // the array lengths have all been vetted already by the proposal-making process
        // upstream is just trusted
        for (uint256 i = 0; i < targets.length; ++i) {
            (bool success, bytes memory returnData) = targets[i].call(
                abi.encodePacked(signatures[i], calldatas[i])
            );

            // we might not actually need to fail gracefully, lets consider if reverting here is just fine
            if (!success) {
                revert FailedPolicy();
            }
        }

        emit EnactedMonetaryPolicy(proposalId, currencyGovernance);
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "../../policy/Policed.sol";
import "../../currency/ECOx.sol";
import "../../utils/TimeUtils.sol";
import "./CurrencyGovernance.sol";

/**
 * @title TrustedNodes
 * @notice A registry of trusted nodes. Trusted nodes (trustees) are able to vote
 * on monetary policy and can only be added or removed using community
 * governance.
 *
 */
contract TrustedNodes is Policed, TimeUtils {
    uint256 public constant GENERATION_TIME = 14 days;

    uint256 public immutable termStart;

    uint256 public immutable termEnd;

    /** address with the currencyGovernance role */
    CurrencyGovernance public currencyGovernance;

    ECOx public immutable ecoX;

    mapping(address => uint256) public trusteeNumbers;

    address[] public trustees;

    /** voting record of each trustee
     */
    mapping(address => uint256) public votingRecord;

    /** timestamp of last withdrawal
     */
    mapping(address => uint256) private lastWithdrawals;

    /** reward earned per completed and revealed vote
     */
    uint256 public immutable voteReward;

    // error for functions gated only to the currency governance contract
    error GovernanceOnlyFunction();

    /** Redundant node trusting error
     * error for when an already trusted node tries to be trusted again
     * @param trusteeNumber the existing trustee number for the address
     */
    error NodeAlreadyTrusted(uint256 trusteeNumber);

    // error for when distrust is called but the address is already not trusted
    error DistrustNotTrusted();

    // error for when action is taken outside of the trustee term
    error InactiveTerm();

    // error for when withdraw is called but no tokens have been earned to withdraw
    error WithdrawNoTokens();

    /** Event emitted when a node added to a list of trusted nodes.
     * @param trustee the trustee being added
     */
    event TrustedNodeAddition(address indexed trustee);

    /** Event emitted when a node removed from a list of trusted nodes
     * @param trustee the trustee being removed
     */
    event TrustedNodeRemoval(address indexed trustee);

    /** Event emitted when a node removed from a list of trusted nodes
     * @param trustee the trustee whose vote was recorded
     * @param newVotingRecord the new voting record for the trustee
     */
    event VoteRecorded(address indexed trustee, uint256 newVotingRecord);

    /** Event emitted when voting rewards are redeemed
     * @param recipient the address redeeming the rewards
     * @param amount the amount being redeemed
     */
    event VotingRewardRedemption(address indexed recipient, uint256 amount);

    /** Event emitted when the currencyGovernance role changes
     * @param newRoleHolder the new holder of the currencyGovernance role
     */
    event CurrencyGovernanceChanged(address newRoleHolder);

    modifier onlyCurrencyGovernance() {
        if (msg.sender != address(currencyGovernance)) {
            revert GovernanceOnlyFunction();
        }
        _;
    }

    /** Creates a new trusted node registry, populated with some initial nodes
     * @param _policy the address of the root policy contract
     * @param _currencyGovernance the address of the currencyGovernance contract
     * @param _ecoX the address of the EcoX contract
     * @param _termStart the start time of the trustee term
     * @param _termLength the length of the trustee term
     * @param _voteReward the reward awarded to a trustee for each successfully revealed vote
     * @param _initialTrustees the initial cohort of trustees
     */
    constructor(
        Policy _policy,
        CurrencyGovernance _currencyGovernance,
        ECOx _ecoX,
        uint256 _termStart,
        uint256 _termLength,
        uint256 _voteReward,
        address[] memory _initialTrustees
    ) Policed(_policy) {
        currencyGovernance = _currencyGovernance;
        ecoX = _ecoX;
        termStart = _termStart;
        termEnd = termStart + _termLength;
        voteReward = _voteReward;
        uint256 _numTrustees = _initialTrustees.length;
        for (uint256 i = 0; i < _numTrustees; ++i) {
            _trust(_initialTrustees[i]);
        }
    }

    function getTrustees() public view returns (address[] memory _trustees) {
        return trustees;
    }

    /** Fetches the date of a trustee's last withdrawal
     * @param trustee the trustee whose last withdrawal date is being fetched
     * @return time the date of a trustee's last withdrawal
     */
    function getLastWithdrawal(
        address trustee
    ) internal view returns (uint256 time) {
        return termEnd + lastWithdrawals[trustee];
    }

    /** Changes the holder currencyGovernance role
     * @param _currencyGovernance the new currencyGovernance role holder
     */
    function updateCurrencyGovernance(
        CurrencyGovernance _currencyGovernance
    ) public onlyPolicy {
        currencyGovernance = _currencyGovernance;
        emit CurrencyGovernanceChanged(address(_currencyGovernance));
    }

    /** Grant trust to a node.
     *
     * The node is pushed to trustedNodes array.
     *
     * @param _node The node to start trusting.
     */
    function trust(address _node) external onlyPolicy {
        _trust(_node);
    }

    /** Helper for trust
     * @param _node The node to start trusting
     */
    function _trust(address _node) internal {
        if (isTrusted(_node)) {
            revert NodeAlreadyTrusted(trusteeNumbers[_node]);
        }
        trustees.push(_node);
        trusteeNumbers[_node] = trustees.length;
        emit TrustedNodeAddition(_node);
    }

    /** Removes a trustee from the set
     * THIS FUNCTION CAN AND WILL DISRUPT THE CURRENCY GOVERNANCE CYCLE IF CALLED DURING THE WRONG TIME
     * Try not to call this function during the commit or reveal part of the cycle in a way that interrupts the distrusted trustee
     *
     * Node to distrust swaped to be a last element in the trustedNodes, then deleted
     * @param _node The trustee to be removed
     */
    function distrust(address _node) external onlyPolicy {
        if (!isTrusted(_node)) {
            revert DistrustNotTrusted();
        }

        uint256 lastIndex = trustees.length - 1;
        uint256 trusteeIndex = trusteeNumbers[_node] - 1;
        if (trusteeIndex != lastIndex) {
            address lastNode = trustees[lastIndex];
            trustees[trusteeIndex] = lastNode;
            trusteeNumbers[lastNode] = trusteeIndex + 1;
        }
        delete trusteeNumbers[_node];
        trustees.pop();
        emit TrustedNodeRemoval(_node);
    }

    /** Incements the counter when the trustee reveals their vote
     * @param _who address whose vote is being recorded
     */
    function recordVote(address _who) external onlyCurrencyGovernance {
        uint256 time = getTime();
        if (time > termStart) {
            ++votingRecord[_who];
            emit VoteRecorded(_who, votingRecord[_who]);
        } else {
            revert InactiveTerm();
        }
    }

    /** Return the number of entries in trustedNodes array.
     */
    function numTrustees() external view returns (uint256) {
        return trustees.length;
    }

    /** Checks if a node address is trusted in the current cohort
     * @param _node the address whose trustee status we want to check
     */
    function isTrusted(address _node) public view returns (bool) {
        return trusteeNumbers[_node] > 0;
    }

    /** withdraws everything that can be withdrawn
     */
    function withdraw() public {
        uint256 numWithdrawals = calculateWithdrawal(msg.sender);
        if (numWithdrawals == 0) {
            revert WithdrawNoTokens();
        }
        uint256 toWithdraw = numWithdrawals * voteReward;
        lastWithdrawals[msg.sender] += numWithdrawals * GENERATION_TIME;
        votingRecord[msg.sender] -= numWithdrawals;

        if (!ecoX.transfer(msg.sender, toWithdraw)) {
            revert ECOx.TransferFailed();
        }
        emit VotingRewardRedemption(msg.sender, toWithdraw);
    }

    /** returns the amount of tokens that are currently withdrawable
     * @return amount  the amount of tokens that are currently withdrawable
     */
    function currentlyWithdrawable() public view returns (uint256 amount) {
        return voteReward * calculateWithdrawal(msg.sender);
    }

    /** helper for withdraw
     * @param withdrawer the addres fo the withdrawer
     * @return amount the amount of withdrawals for the withdrawer
     */
    function calculateWithdrawal(
        address withdrawer
    ) internal view returns (uint256 amount) {
        uint256 timeNow = getTime();
        if (timeNow < termEnd) {
            return 0;
        }

        uint256 lastWithdrawal = getLastWithdrawal(withdrawer);
        uint256 limit = (timeNow - lastWithdrawal) / GENERATION_TIME;
        uint256 numWithdrawals = limit > votingRecord[withdrawer]
            ? votingRecord[withdrawer]
            : limit;
        return numWithdrawals;
    }

    /** returns the number of tokens the sender is currently entitled to
     * which they will be able to withdraw upon vesting
     * @return amount the amount of tokens the message sender will be entitled to when fully vested
     * @return timestamp the timestamp when the message sender will be fully vested
     */
    function fullyVested()
        public
        view
        returns (uint256 amount, uint256 timestamp)
    {
        uint256 record = votingRecord[msg.sender];
        return (record * voteReward, termEnd + record * GENERATION_TIME);
    }

    /** drains all the ECOx in TrustedNodes to a recipient address
     * @param recipient the address to receive the ECOx
     */
    function sweep(address recipient, uint256 amount) public onlyPolicy {
        if (!ecoX.transfer(recipient, amount)) {
            revert ECOx.TransferFailed();
        }
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "./Policy.sol";

/**
 * @title Policed Contracts
 * @notice A policed contract is any contract managed by a policy.
 */
abstract contract Policed {
    /** The address of the root policy instance overseeing this instance.
     */
    Policy public immutable policy;

    /** If the policy address is set to zero, the contract is unrecoverably ungovernable
     */
    error NonZeroPolicyAddr();

    /**
     * If this address is set to zero the contract is an unusable state
     * @param contractName the name of the contract that was given as the zero address
     */
    error NonZeroContractAddr(string contractName);

    /** For if a non-policy address tries to access policy role gated functionality
     */
    error PolicyOnlyFunction();

    /** Restrict method access to the root policy instance only.
     */
    modifier onlyPolicy() {
        if (msg.sender != address(policy)) {
            revert PolicyOnlyFunction();
        }
        _;
    }

    /** constructor
     * @param _policy the address of the owning policy contract
     */
    constructor(Policy _policy) {
        // _setPolicy(_policy);
        if (address(_policy) == address(0)) {
            revert NonZeroPolicyAddr();
        }
        policy = _policy;
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "./Policed.sol";

/** @title Policed Proxy Contracts
 *
 * A PolicedUpgradeable contract is any proxied contract managed by a policy.
 */
abstract contract PolicedUpgradeable is Policed, ForwardTarget {
    // storage gap covers PolicedUtils.expectedInterfaceSet
    // relevant for ECOxStaking
    uint256 private __gapPolicedUpgradeable;

    function setImplementation(address _impl) public onlyPolicy {
        _setImplementation(_impl);
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

import "../proxy/ForwardTarget.sol";

/**
 * @title The policy contract that oversees other contracts
 * @notice Policy contracts provide a mechanism for building pluggable (after deploy)
 * governance systems for other contracts.
 */
contract Policy is ForwardTarget {
    uint256 private __gapPolicy; // to cover setters mapping

    /**
     * the contract allowed enact proposals
     */
    address public governor;

    /**
     * error for when an address tries submit proposal actions without permission
     */
    error OnlyGovernor();

    /**
     * error for when an address tries to call a pseudo-internal function
     */
    error OnlySelf();

    /**
     * for when a part of enacting a proposal reverts without a readable error
     * @param proposal the proposal address that got reverted during enaction
     */
    error FailedProposal(address proposal);

    /**
     * emits when the governor permissions are changed
     * @param oldGovernor denotes the old address whose permissions are being removed
     * @param newGovernor denotes the new address whose permissions are being added
     */
    event UpdatedGovernor(address oldGovernor, address newGovernor);

    /**
     * emits when enaction happens to keep record of enaction
     * @param proposal the proposal address that got successfully enacted
     * @param governor the contract which was the source of the proposal, source for looking up the calldata
     */
    event EnactedGovernanceProposal(address proposal, address governor);

    /**
     * Modifier for checking if the sender is a governor
     */
    modifier onlyGovernorRole() {
        if (msg.sender != governor) {
            revert OnlyGovernor();
        }
        _;
    }

    /**
     * Modifier for faux internal calls
     * needed for function to be called only during delegate call
     */
    modifier onlySelf() {
        if (msg.sender != address(this)) {
            revert OnlySelf();
        }
        _;
    }

    constructor(address _governor) {
        governor = _governor;
    }

    /**
     * initializes the governor
     */
    function initialize(
        address _self
    ) public virtual override onlyConstruction {
        super.initialize(_self);

        governor = Policy(_self).governor();
    }

    /**
     * pass the governance permissions to another address
     * @param _newGovernor the address to make the new governor
     */
    function updateGovernor(address _newGovernor) public onlySelf {
        emit UpdatedGovernor(governor, _newGovernor);
        governor = _newGovernor;
    }

    function enact(address proposal) external virtual onlyGovernorRole {
        // solhint-disable-next-line avoid-low-level-calls
        (bool _success, bytes memory returndata) = proposal.delegatecall(
            abi.encodeWithSignature("enacted(address)", proposal)
        );
        if (!_success) {
            if (returndata.length == 0) revert FailedProposal(proposal);
            assembly {
                revert(add(32, returndata), mload(returndata))
            }
        }

        emit EnactedGovernanceProposal(proposal, msg.sender);
    }

    // function required for backwards compatability of the contract interface to allow for the old governance execution call to complete
    function removeSelf(bytes32) external {}
}

/* -*- c-basic-offset: 4 -*- */
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

/* solhint-disable no-inline-assembly */

/**
 * @title Target for ForwardProxy and EcoInitializable
 */
abstract contract ForwardTarget {
    // Must match definition in ForwardProxy
    // keccak256("com.eco.ForwardProxy.target")
    uint256 private constant IMPLEMENTATION_SLOT =
        0xf86c915dad5894faca0dfa067c58fdf4307406d255ed0a65db394f82b77f53d4;

    modifier onlyConstruction() {
        require(
            implementation() == address(0),
            "Can only be called during initialization"
        );
        _;
    }

    constructor() {
        _setImplementation(address(this));
    }

    /** Storage initialization of cloned contract
     *
     * This is used to initialize the storage of the forwarded contract, and
     * should (typically) copy or repeat any work that would normally be
     * done in the constructor of the proxied contract.
     *
     * Implementations of ForwardTarget should override this function,
     * and chain to super.initialize(_self).
     *
     * @param _self The address of the original contract instance (the one being
     *              forwarded to).
     */
    function initialize(address _self) public virtual onlyConstruction {
        address _implAddress = address(ForwardTarget(_self).implementation());
        require(
            _implAddress != address(0),
            "initialization failure: nothing to implement"
        );
        _setImplementation(_implAddress);
    }

    /** Get the address of the proxy target contract.
     */
    function implementation() public view returns (address _impl) {
        assembly {
            _impl := sload(IMPLEMENTATION_SLOT)
        }
    }

    /** Set new implementation */
    function _setImplementation(address _impl) internal {
        require(implementation() != _impl, "Implementation already matching");
        assembly {
            sstore(IMPLEMENTATION_SLOT, _impl)
        }
    }
}

// SPDX-License-Identifier: MIT

pragma solidity ^0.8.0;

// might not need this

library StringPacker {
    // takes a string of 31 or less characters and converts it to bytes32
    function pack(
        string memory unpacked
    ) internal pure returns (bytes32 packed) {
        // do not use this function in a lossy way, it will not work
        // only strings with 31 or less characters are stored in memory packed with their length value
        require(bytes(unpacked).length < 32);
        // shift the memory pointer to pack the length of the string into the high byte
        // by assigning this to the return value, the type of bytes32 means that, when returning,
        // the pointer continues to read into the string data
        assembly {
            packed := mload(add(unpacked, 31))
        }
    }

    // takes a bytes32 packed in the format above and unpacks it into a string
    function unpack(
        bytes32 packed
    ) internal pure returns (string memory unpacked) {
        // get the high byte which stores the length of the string when unpacked
        uint256 len = uint256(packed >> 248);
        // ensure that the length of the unpacked string doesn't read beyond the input value
        require(len < 32);
        // initialize the return value with the length
        unpacked = string(new bytes(len));
        // shift the pointer so that the length will be at the bottom of the word to match string encoding
        // then store the packed value
        assembly {
            // Potentially writes into unallocated memory as the length in the packed form will trail off the end
            // This is fine as there are no other relevant memory values to overwrite
            mstore(add(unpacked, 31), packed)
        }
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

/**
 * @title TimeUtils
 * @notice Utility class for time, allowing easy unit testing.
 */
abstract contract TimeUtils {
    /** Determine the current time as perceived by the policy timing contract.
     *
     * Used extensively in testing, but also useful in production for
     * determining what processes can currently be run.
     * @return blockTimeStamp The current block timestamp
     */
    function getTime() internal view returns (uint256 blockTimeStamp) {
        // solhint-disable-next-line not-rely-on-time
        return block.timestamp;
    }
}

{
  "optimizer": {
    "enabled": true,
    "runs": 200
  },
  "outputSelection": {
    "*": {
      "*": [
        "evm.bytecode",
        "evm.deployedBytecode",
        "devdoc",
        "userdoc",
        "metadata",
        "abi"
      ]
    }
  },
  "libraries": {}
}

• No Contract Security Audit Submitted- Submit Audit Here

[{"inputs":[{"internalType":"contract Policy","name":"_policy","type":"address"},{"internalType":"address","name":"_initialPauser","type":"address"}],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[],"name":"BadRebaseValue","type":"error"},{"inputs":[{"internalType":"string","name":"contractName","type":"string"}],"name":"NonZeroContractAddr","type":"error"},{"inputs":[],"name":"NonZeroPolicyAddr","type":"error"},{"inputs":[],"name":"OnlyBurners","type":"error"},{"inputs":[],"name":"OnlyMinters","type":"error"},{"inputs":[],"name":"OnlyRebasers","type":"error"},{"inputs":[],"name":"OnlySnapshotters","type":"error"},{"inputs":[],"name":"PolicyOnlyFunction","type":"error"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"owner","type":"address"},{"indexed":true,"internalType":"address","name":"spender","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"Approval","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"from","type":"address"},{"indexed":true,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"BaseValueTransfer","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"delegator","type":"address"},{"indexed":true,"internalType":"address","name":"delegatee","type":"address"},{"indexed":false,"internalType":"uint256","name":"amount","type":"uint256"}],"name":"DelegatedVotes","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"adjustinginflationMultiplier","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"cumulativeInflationMultiplier","type":"uint256"}],"name":"NewInflationMultiplier","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"delegator","type":"address"},{"indexed":true,"internalType":"address","name":"primaryDelegate","type":"address"}],"name":"NewPrimaryDelegate","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"block","type":"uint256"}],"name":"NewSnapshotBlock","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"account","type":"address"}],"name":"Paused","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"pauser","type":"address"}],"name":"PauserAssignment","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"from","type":"address"},{"indexed":true,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"Transfer","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"account","type":"address"}],"name":"Unpaused","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"actor","type":"address"},{"indexed":false,"internalType":"bool","name":"newPermission","type":"bool"}],"name":"UpdatedBurners","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"actor","type":"address"},{"indexed":false,"internalType":"bool","name":"newPermission","type":"bool"}],"name":"UpdatedMinters","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"actor","type":"address"},{"indexed":false,"internalType":"bool","name":"newPermission","type":"bool"}],"name":"UpdatedRebasers","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"actor","type":"address"},{"indexed":false,"internalType":"bool","name":"newPermission","type":"bool"}],"name":"UpdatedSnapshotters","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"sendingVoter","type":"address"},{"indexed":true,"internalType":"address","name":"recievingVoter","type":"address"},{"indexed":false,"internalType":"uint256","name":"votes","type":"uint256"}],"name":"VoteTransfer","type":"event"},{"inputs":[],"name":"DOMAIN_SEPARATOR","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"INITIAL_INFLATION_MULTIPLIER","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"address","name":"spender","type":"address"}],"name":"allowance","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"approve","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_owner","type":"address"}],"name":"balanceOf","outputs":[{"internalType":"uint256","name":"inflationBalance","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_from","type":"address"},{"internalType":"uint256","name":"_value","type":"uint256"}],"name":"burn","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"burners","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"currentSnapshotBlock","outputs":[{"internalType":"uint32","name":"","type":"uint32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"decimals","outputs":[{"internalType":"uint8","name":"","type":"uint8"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"subtractedValue","type":"uint256"}],"name":"decreaseAllowance","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"delegatee","type":"address"}],"name":"delegate","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"delegatee","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"delegateAmount","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"delegator","type":"address"},{"internalType":"address","name":"delegatee","type":"address"},{"internalType":"uint256","name":"deadline","type":"uint256"},{"internalType":"uint8","name":"v","type":"uint8"},{"internalType":"bytes32","name":"r","type":"bytes32"},{"internalType":"bytes32","name":"s","type":"bytes32"}],"name":"delegateBySig","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"delegationFromAddressDisabled","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"}],"name":"delegationNonce","outputs":[{"internalType":"uint256","name":"nonce","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"delegationToAddressEnabled","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"disableDelegationTo","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"enableDelegationTo","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"enableVoting","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"","type":"uint256"}],"name":"getPastLinearInflation","outputs":[{"internalType":"uint256","name":"pastLinearInflationMultiplier","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"getPrimaryDelegate","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"implementation","outputs":[{"internalType":"address","name":"_impl","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"addedValue","type":"uint256"}],"name":"increaseAllowance","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"inflationMultiplier","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"inflationMultiplierSnapshot","outputs":[{"internalType":"uint256","name":"inflationValueMultiplier","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_self","type":"address"}],"name":"initialize","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"isOwnDelegate","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_to","type":"address"},{"internalType":"uint256","name":"_value","type":"uint256"}],"name":"mint","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"minters","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"name","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"}],"name":"nonces","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"pause","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"paused","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"pauser","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"},{"internalType":"uint256","name":"deadline","type":"uint256"},{"internalType":"uint8","name":"v","type":"uint8"},{"internalType":"bytes32","name":"r","type":"bytes32"},{"internalType":"bytes32","name":"s","type":"bytes32"}],"name":"permit","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"policy","outputs":[{"internalType":"contract Policy","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"_inflationMultiplier","type":"uint256"}],"name":"rebase","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"rebasers","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"reenableDelegating","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"delegator","type":"address"}],"name":"revokeDelegation","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"roleAdmin","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_impl","type":"address"}],"name":"setImplementation","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_pauser","type":"address"}],"name":"setPauser","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"snapshot","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"snapshotters","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"symbol","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"totalSupply","outputs":[{"internalType":"uint256","name":"totalInflatedSupply","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"totalSupplySnapshot","outputs":[{"internalType":"uint256","name":"totalInflatedSupply","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"transfer","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"sender","type":"address"},{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"transferFrom","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"undelegate","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"delegatee","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"undelegateAmountFromAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"delegatee","type":"address"}],"name":"undelegateFromAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"unpause","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_key","type":"address"},{"internalType":"bool","name":"_value","type":"bool"}],"name":"updateBurners","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_key","type":"address"},{"internalType":"bool","name":"_value","type":"bool"}],"name":"updateMinters","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_key","type":"address"},{"internalType":"bool","name":"_value","type":"bool"}],"name":"updateRebasers","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_key","type":"address"},{"internalType":"bool","name":"_value","type":"bool"}],"name":"updateSnapshotters","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_owner","type":"address"}],"name":"voteBalanceOf","outputs":[{"internalType":"uint256","name":"votingBalance","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"voteBalanceSnapshot","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"voter","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"}]

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

0000000000000000000000008c02d4cc62f79aceb652321a9f8988c0f6e71e680000000000000000000000000000000000000000000000000000000000000000

-----Decoded View---------------
Arg [0] : _policy (address): 0x8c02D4cc62F79AcEB652321a9f8988c0f6E71E68
Arg [1] : _initialPauser (address): 0x0000000000000000000000000000000000000000

-----Encoded View---------------
2 Constructor Arguments found :
Arg [0] : 0000000000000000000000008c02d4cc62f79aceb652321a9f8988c0f6e71e68
Arg [1] : 0000000000000000000000000000000000000000000000000000000000000000