Contract Source Code (Solidity Standard Json-Input format)

IDE

• Blockscan IDE
• 🤖 Code ReaderBeta
• Remix IDE

More Options

• Similar
• Sol2Uml
• Submit Audit
• Compare

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.26;

import {ERC20, ERC20Permit} from "@openzeppelin/contracts/token/ERC20/extensions/ERC20Permit.sol";
import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";
import {StakingBridge} from "./StakingBridge.sol";

/// @title Nebula Token
contract NebulaToken is ERC20, ERC20Permit, Ownable {
    /// @notice Event emitted when minting is enabled or disabled
    /// @param enabled Whether minting is enabled as of the event
    event MintEnabled(bool enabled);
    /// @notice Event emitted when minting is completed for a given year
    /// @param year The year that minting was completed for relative to the initial mint
    /// @param amount The amount of tokens minted
    event MintCompleted(uint256 year, uint256 amount);
    /// @notice Event emitted when the rate of decay of inflation is changed
    /// @param newRate The new rate of decay of inflation
    event InflationDecayRateChanged(uint256 newRate);
    /// @notice Event emitted when NEB is issued to a recipient
    /// @param recipient The address that NEB was issued to
    /// @param amount The amount of NEB issued
    event IssueNeb(address indexed recipient, uint256 amount);
    /// @notice Event emitted when transfers are enabled for all accounts
    event TransfersEnabled();
    /// @notice Event emitted when the staking bridge address is set
    event StakingBridgeSet(address indexed stakingBridge);
    /// @notice Event emitted when an account is unlocked for transfers, effective before transfers are enabled
    /// @param addr The address that is unlocked
    /// @param unlocked Whether the address is unlocked as of the event
    event UnlockAddress(address indexed addr, bool unlocked);
    /// @notice Event emitted when a Nebula public key is registered with an Ethereum address
    /// @param ethKey The Ethereum address that the Nebula public key is registered with
    /// @param nebulaPublicKey The Nebula public key that is registered
    event RegisterNebulaKey(address indexed ethKey, bytes32 indexed nebulaPublicKey);

    /// @notice Error when transfers between locked accounts is disabled
    error TransfersDisabled();
    /// @notice Error when minting according to the inflation schedule is disabled
    error MintDisabled();
    /// @notice Error when minting is attempted before the mint start year
    error MintInPast();
    /// @notice Error when minting is attempted in a future year
    error MintInFuture();
    /// @notice Error when minting has already been completed for a given year
    error MintAlreadyCompleted();
    /// @notice Error when attempting to mint for a year that has not been completed
    /// @param year The year that has not been minted relative to the initial mint
    error MintMissing(uint256 year);
    /// @notice Error when the rate of decay of inflation is set too low. Minimum value is 2
    error InflationDecayRateTooLow();
    /// @notice Error when the staking bridge has already been set
    error StakingBridgeAlreadySet();
    /// @notice Error when the staking rate is exceeded
    /// @param amountStaked The amount of Nebula currently staked
    /// @param maxStake The maximum amount of Nebula that can be staked
    error StakingRateExceeded(uint256 amountStaked, uint256 maxStake);

    /// @notice Nebula staking bridge contract address. Initially unset until deployed and updated by the contract owner
    StakingBridge public stakingBridge;
    /// @notice Amount of NEB that is staked internally from the Nebula treasury
    uint256 public internalStakedNeb;

    /// @notice Whether transfers are enabled for all accounts
    bool public transfersEnabled;
    /// @notice Mapping of addresses that are unlocked for transfers before transfers are enabled
    mapping(address => bool) public isAddressUnlocked;

    /// @notice Timestamp of the initial mint
    uint256 public immutable initialMintTimestamp;
    /// @notice Whether minting is enabled in accordance to the inflation schedule
    bool public mintEnabled;
    /// @notice Year in which minting can start relative to the initial mint
    uint256 public immutable mintStartYear;
    /// @notice Initial rate of inflation expressed as basis points
    uint256 public immutable initialInflationRate;
    /// @notice Rate of decay of inflation, eg. 2 = 50%, 3 = 33%, etc
    uint256 public inflationRateDecay;
    /// @notice Mapping of years to the amount of tokens minted in that year. Years are relative to the initial mint
    mapping(uint256 year => uint256 amount) public completedMints;

    /// @notice Mapping of Ethereum addresses to Nebula public keys
    mapping(address account => bytes32 nebulaPublicKey) public nebulaKeys;

    /// @notice Create Nebula token with predetermined initial supply
    /// @param name Token name
    /// @param symbol Token symbol
    /// @param initialSupply Initial supply of tokens
    /// @param mintStartYear_ Year in which minting can start
    /// @param initialInflationRate_ Initial rate of inflation expressed as basis points
    /// @param inflationRateDecay_ Rate of decay of inflation, eg. 2 = 50%, 3 = 33%, etc
    constructor(
        string memory name,
        string memory symbol,
        uint256 initialSupply,
        uint256 mintStartYear_,
        uint256 initialInflationRate_,
        uint256 inflationRateDecay_
    ) ERC20(name, symbol) ERC20Permit(name) Ownable(msg.sender) {
        initialMintTimestamp = block.timestamp;
        _mintInitialSupply(initialSupply);

        transfersEnabled = false;

        mintEnabled = false;
        mintStartYear = mintStartYear_;
        initialInflationRate = initialInflationRate_;
        inflationRateDecay = inflationRateDecay_;

        completedMints[0] = initialSupply;
    }

    /// @notice Check if transfers are permitted. Special cases that are always allowed are: the contract itself, minting and the staking bridge
    /// @param from The sending wallet
    /// @param to The receiving wallet
    modifier checkTransferPermitted(address from, address to) {
        if (!(from == address(this) || from == address(0) || transfersEnabled || to == address(stakingBridge))) {
            require(isAddressUnlocked[from], TransfersDisabled());
        }

        _;
    }

    /// @notice Get years since initial mint
    function getYearsSinceInitialMint() public view returns (uint256) {
        return (block.timestamp - initialMintTimestamp) / (86400 * 365);
    }

    /// @notice Mint new tokens in a given year. Years must be minted in order starting from the first year allowed
    /// @param year The year to mint tokens for relative to the initial mint
    function mintNewTokens(uint256 year) public onlyOwner {
        require(mintEnabled, MintDisabled());
        require(year >= mintStartYear, MintInPast());
        require(getYearsSinceInitialMint() >= year, MintInFuture());
        require(completedMints[year] == 0, MintAlreadyCompleted());

        uint256 mintAmount;

        if (year == mintStartYear) {
            mintAmount = completedMints[0] * initialInflationRate / 10000;
        } else {
            require(completedMints[year - 1] > 0, MintMissing(year - 1));
            mintAmount = (completedMints[year - 1] * (inflationRateDecay - 1)) / inflationRateDecay;
        }

        _mint(address(this), mintAmount);
        completedMints[year] = mintAmount;
        emit MintCompleted(year, mintAmount);
    }

    /// @notice Change the rate of decay of inflation
    /// @param inflationRateDecay_ Integer determining the rate of decay of inflation (2 = 50%, 3 = 33%, etc)
    function setInflationRateDecay(uint256 inflationRateDecay_) public onlyOwner {
        require(inflationRateDecay_ > 1, InflationDecayRateTooLow());
        inflationRateDecay = inflationRateDecay_;
        emit InflationDecayRateChanged(inflationRateDecay_);
    }

    /// @notice Enable minting of new tokens
    function enableMint() public onlyOwner {
        mintEnabled = true;
        emit MintEnabled(true);
    }

    /// @notice Disable minting of new tokens
    function disableMint() public onlyOwner {
        mintEnabled = false;
        emit MintEnabled(false);
    }

    /// @notice Set the staking bridge contract address
    /// @param stakingBridgeAddr staking bridge contract address
    function setStakingBridge(address stakingBridgeAddr) public onlyOwner {
        require(address(stakingBridge) == address(0), StakingBridgeAlreadySet());
        stakingBridge = StakingBridge(stakingBridgeAddr);
        isAddressUnlocked[stakingBridgeAddr] = true; // Allow unstaking
        emit StakingBridgeSet(stakingBridgeAddr);
    }

    /// @notice Issue tokens to recipient
    /// @param recipient Recipient of issued tokens
    /// @param amount Amount of tokens to issue
    function issueTokens(address recipient, uint256 amount) public onlyOwner {
        _update(address(this), recipient, amount);
        emit IssueNeb(recipient, amount);
    }

    /// @notice Whitelist an address that can send tokens while the token is locked
    /// @param addr Permitted sender address
    function addUnlockedAddress(address addr) public onlyOwner {
        isAddressUnlocked[addr] = true;
        emit UnlockAddress(addr, true);
    }

    /// @notice Remove an address from the whitelist of addresses that can send tokens while the token is locked
    /// @param addr Permitted sender address
    function removeUnlockedAddress(address addr) public onlyOwner {
        isAddressUnlocked[addr] = false;
        emit UnlockAddress(addr, false);
    }

    /// @notice Enabled transfersd
    function enableTransfers() public onlyOwner {
        transfersEnabled = true;
        emit TransfersEnabled();
    }

    /// @notice Proxy function to allow unissued NEB to be staked
    /// @param pubKey Nebula public key
    /// @param amount Amount of tokens to stake
    function stake(bytes32 pubKey, uint256 amount) public onlyOwner {
        uint256 maxStake = (totalSupply() * 67000) / 100000;
        require(internalStakedNeb + amount < maxStake, StakingRateExceeded(internalStakedNeb, maxStake));
        stakingBridge.stake(amount, pubKey);
        internalStakedNeb += amount;
    }

    /// @notice Allow the staking bridge to transfer NEB held in the NEB contract
    function approveStakingBridge() public onlyOwner {
        _approve(address(this), address(stakingBridge), type(uint256).max);
    }

    /// @notice Revoke staking bridge ability to transfer NEB held in NEB contract
    function revokeStakingBridgeAllowance() public onlyOwner {
        _approve(address(this), address(stakingBridge), 0);
    }

    /// @notice Proxy function to allow unissued NEB to be unstaked
    /// @param pubKey Nebula public key
    /// @param amount Amount of tokens to unstake
    function removeStake(bytes32 pubKey, uint256 amount) public onlyOwner {
        stakingBridge.removeStake(amount, pubKey);
        internalStakedNeb -= amount;
    }

    /// @notice Register Nebula pub key with Ethereum address
    /// @param nebulaPublicKey Nebula public key
    function registerNebulaKey(bytes32 nebulaPublicKey) public {
        nebulaKeys[msg.sender] = nebulaPublicKey;
        emit RegisterNebulaKey(msg.sender, nebulaPublicKey);
    }

    /// @notice Mint initial supply and assign to token contract
    /// @param initialSupply Initial supply of tokens
    function _mintInitialSupply(uint256 initialSupply) internal {
        super._mint(address(this), initialSupply);
    }

    /// @notice Custom locking for transfer function
    /// @param from Sending address
    /// @param to Recipient address
    /// @param value Transfer amount
    function _update(address from, address to, uint256 value)
        internal
        virtual
        override(ERC20)
        checkTransferPermitted(from, to)
    {
        super._update(from, to, value);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/extensions/ERC20Permit.sol)

pragma solidity ^0.8.20;

import {IERC20Permit} from "./IERC20Permit.sol";
import {ERC20} from "../ERC20.sol";
import {ECDSA} from "../../../utils/cryptography/ECDSA.sol";
import {EIP712} from "../../../utils/cryptography/EIP712.sol";
import {Nonces} from "../../../utils/Nonces.sol";

/**
 * @dev Implementation of the ERC20 Permit extension allowing approvals to be made via signatures, as defined in
 * https://eips.ethereum.org/EIPS/eip-2612[EIP-2612].
 *
 * Adds the {permit} method, which can be used to change an account's ERC20 allowance (see {IERC20-allowance}) by
 * presenting a message signed by the account. By not relying on `{IERC20-approve}`, the token holder account doesn't
 * need to send a transaction, and thus is not required to hold Ether at all.
 */
abstract contract ERC20Permit is ERC20, IERC20Permit, EIP712, Nonces {
    bytes32 private constant PERMIT_TYPEHASH =
        keccak256("Permit(address owner,address spender,uint256 value,uint256 nonce,uint256 deadline)");

    /**
     * @dev Permit deadline has expired.
     */
    error ERC2612ExpiredSignature(uint256 deadline);

    /**
     * @dev Mismatched signature.
     */
    error ERC2612InvalidSigner(address signer, address owner);

    /**
     * @dev Initializes the {EIP712} domain separator using the `name` parameter, and setting `version` to `"1"`.
     *
     * It's a good idea to use the same `name` that is defined as the ERC20 token name.
     */
    constructor(string memory name) EIP712(name, "1") {}

    /**
     * @inheritdoc IERC20Permit
     */
    function permit(
        address owner,
        address spender,
        uint256 value,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) public virtual {
        if (block.timestamp > deadline) {
            revert ERC2612ExpiredSignature(deadline);
        }

        bytes32 structHash = keccak256(abi.encode(PERMIT_TYPEHASH, owner, spender, value, _useNonce(owner), deadline));

        bytes32 hash = _hashTypedDataV4(structHash);

        address signer = ECDSA.recover(hash, v, r, s);
        if (signer != owner) {
            revert ERC2612InvalidSigner(signer, owner);
        }

        _approve(owner, spender, value);
    }

    /**
     * @inheritdoc IERC20Permit
     */
    function nonces(address owner) public view virtual override(IERC20Permit, Nonces) returns (uint256) {
        return super.nonces(owner);
    }

    /**
     * @inheritdoc IERC20Permit
     */
    // solhint-disable-next-line func-name-mixedcase
    function DOMAIN_SEPARATOR() external view virtual returns (bytes32) {
        return _domainSeparatorV4();
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/Ownable.sol)

pragma solidity ^0.8.20;

import {Context} from "../utils/Context.sol";

/**
 * @dev Contract module which provides a basic access control mechanism, where
 * there is an account (an owner) that can be granted exclusive access to
 * specific functions.
 *
 * The initial owner is set to the address provided by the deployer. This can
 * later be changed with {transferOwnership}.
 *
 * This module is used through inheritance. It will make available the modifier
 * `onlyOwner`, which can be applied to your functions to restrict their use to
 * the owner.
 */
abstract contract Ownable is Context {
    address private _owner;

    /**
     * @dev The caller account is not authorized to perform an operation.
     */
    error OwnableUnauthorizedAccount(address account);

    /**
     * @dev The owner is not a valid owner account. (eg. `address(0)`)
     */
    error OwnableInvalidOwner(address owner);

    event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);

    /**
     * @dev Initializes the contract setting the address provided by the deployer as the initial owner.
     */
    constructor(address initialOwner) {
        if (initialOwner == address(0)) {
            revert OwnableInvalidOwner(address(0));
        }
        _transferOwnership(initialOwner);
    }

    /**
     * @dev Throws if called by any account other than the owner.
     */
    modifier onlyOwner() {
        _checkOwner();
        _;
    }

    /**
     * @dev Returns the address of the current owner.
     */
    function owner() public view virtual returns (address) {
        return _owner;
    }

    /**
     * @dev Throws if the sender is not the owner.
     */
    function _checkOwner() internal view virtual {
        if (owner() != _msgSender()) {
            revert OwnableUnauthorizedAccount(_msgSender());
        }
    }

    /**
     * @dev Leaves the contract without owner. It will not be possible to call
     * `onlyOwner` functions. Can only be called by the current owner.
     *
     * NOTE: Renouncing ownership will leave the contract without an owner,
     * thereby disabling any functionality that is only available to the owner.
     */
    function renounceOwnership() public virtual onlyOwner {
        _transferOwnership(address(0));
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`).
     * Can only be called by the current owner.
     */
    function transferOwnership(address newOwner) public virtual onlyOwner {
        if (newOwner == address(0)) {
            revert OwnableInvalidOwner(address(0));
        }
        _transferOwnership(newOwner);
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`).
     * Internal function without access restriction.
     */
    function _transferOwnership(address newOwner) internal virtual {
        address oldOwner = _owner;
        _owner = newOwner;
        emit OwnershipTransferred(oldOwner, newOwner);
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.13;

import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";


/**
 * @dev IStake contains all of the events necessary for staking Vega token
 */
interface IStake {
    event StakeDeposited(address indexed user, uint256 amount, bytes32 indexed vegaPublicKey);
    event StakeRemoved(address indexed user, uint256 amount, bytes32 indexed vegaPublicKey);
    event StakeTransferred(address indexed from, uint256 amount, address indexed to, bytes32 indexed vegaPublicKey);

    /// @return the address of the token that is able to be staked
    function stakingToken() external view returns (address);

    /// @param target Target address to check
    /// @param vegaPublicKey Target vega public key to check
    /// @return the number of tokens staked for that address->vegaPublicKey pair
    function stakeBalance(address target, bytes32 vegaPublicKey) external view returns (uint256);

    /// @return total tokens staked on contract
    function totalStaked() external view returns (uint256);
}


/// @title ERC20 Staking Bridge
/// @author Vega Protocol
/// @notice This contract manages the vesting of the Vega V2 ERC20 token
contract StakingBridge is IStake, Ownable {
    using SafeERC20 for IERC20;

    error InsufficientBalance(address user, bytes32 vegaPublicKey, uint256 stakeBalance, uint256 needed);
    error TransferStakeDisabled();

    IERC20 public immutable token;
    bool public transferStakeEnabled;

    constructor(address tokenAddress) Ownable(msg.sender) {
        token = IERC20(tokenAddress);
	transferStakeEnabled = false;
    }

    /// @dev user => amount staked
    mapping(address user => mapping(bytes32 vegaPublicKey => uint256 stakingBalance)) stakes;


    function enableTransferStake() public onlyOwner {
	transferStakeEnabled = true;
    }

    /// @notice This stakes the given amount of tokens and credits them to the provided Vega public key
    /// @param amount Token amount to stake
    /// @param vegaPublicKey Target Vega public key to be credited with the stake
    /// @dev Emits StakeDeposited event
    /// @dev User MUST run "approve" on token prior to running Stake
    function stake(uint256 amount, bytes32 vegaPublicKey) public {
        token.transferFrom(msg.sender, address(this), amount);
        stakes[msg.sender][vegaPublicKey] += amount;
        emit StakeDeposited(msg.sender, amount, vegaPublicKey);
    }

    function stake(uint256 amount, bytes32 vegaPublicKey, address owner) public {
	if (!transferStakeEnabled) {
	    revert TransferStakeDisabled();
	}
        token.transferFrom(msg.sender, address(this), amount);
        stakes[owner][vegaPublicKey] += amount;
        emit StakeDeposited(msg.sender, amount, vegaPublicKey);
        emit StakeTransferred(msg.sender, amount, owner, vegaPublicKey);
    }

    /// @notice This removes specified amount of stake of available to user
    /// @dev Emits StakeRemoved event if successful
    /// @param amount Amount of tokens to remove from staking
    /// @param vegaPublicKey Target Vega public key from which to deduct stake
    function removeStake(uint256 amount, bytes32 vegaPublicKey) public {
        uint256 currentStake = stakes[msg.sender][vegaPublicKey];
	if (amount > currentStake) {
            revert InsufficientBalance(msg.sender, vegaPublicKey, currentStake, amount - currentStake);
        }
        stakes[msg.sender][vegaPublicKey] -= amount;
        token.transfer(msg.sender, amount);
        emit StakeRemoved(msg.sender, amount, vegaPublicKey);
    }

    /// @notice This transfers all stake from the sender's address to the "newAddress"
    /// @dev Emits Stake_Transfered event if successful
    /// @param amount Stake amount to transfer
    /// @param newAddress Target ETH address to recieve the stake
    /// @param vegaPublicKey Target Vega public key to be credited with the transfer
    function transferStake(uint256 amount, address newAddress, bytes32 vegaPublicKey) public {
	if (!transferStakeEnabled) {
	    revert TransferStakeDisabled();
	}
	uint256 currentStake = stakes[msg.sender][vegaPublicKey];
        if (amount > currentStake) {
            revert InsufficientBalance(msg.sender, vegaPublicKey, currentStake, amount - currentStake);
        }
        stakes[msg.sender][vegaPublicKey] -= amount;
        stakes[newAddress][vegaPublicKey] += amount;
        emit StakeTransferred(msg.sender, amount, newAddress, vegaPublicKey);
    }

    /// @dev This is IStake.stakeBalance
    /// @param target Target address to check
    /// @param vegaPublicKey Target vega public key to check
    /// @return the number of tokens staked for that address->vegaPublicKey pair
    function stakeBalance(address target, bytes32 vegaPublicKey) external view override returns (uint256) {
        return stakes[target][vegaPublicKey];
    }

    /// @dev This is IStake.totalStaked
    /// @return total tokens staked on contract
    function totalStaked() external view override returns (uint256) {
        return token.balanceOf(address(this));
    }

    /// @dev This is IStake.stakingToken
    /// @return total tokens staked on contract
    function stakingToken() external view returns (address) {
        return address(token);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/extensions/IERC20Permit.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC20 Permit extension allowing approvals to be made via signatures, as defined in
 * https://eips.ethereum.org/EIPS/eip-2612[EIP-2612].
 *
 * Adds the {permit} method, which can be used to change an account's ERC20 allowance (see {IERC20-allowance}) by
 * presenting a message signed by the account. By not relying on {IERC20-approve}, the token holder account doesn't
 * need to send a transaction, and thus is not required to hold Ether at all.
 *
 * ==== Security Considerations
 *
 * There are two important considerations concerning the use of `permit`. The first is that a valid permit signature
 * expresses an allowance, and it should not be assumed to convey additional meaning. In particular, it should not be
 * considered as an intention to spend the allowance in any specific way. The second is that because permits have
 * built-in replay protection and can be submitted by anyone, they can be frontrun. A protocol that uses permits should
 * take this into consideration and allow a `permit` call to fail. Combining these two aspects, a pattern that may be
 * generally recommended is:
 *
 * ```solidity
 * function doThingWithPermit(..., uint256 value, uint256 deadline, uint8 v, bytes32 r, bytes32 s) public {
 *     try token.permit(msg.sender, address(this), value, deadline, v, r, s) {} catch {}
 *     doThing(..., value);
 * }
 *
 * function doThing(..., uint256 value) public {
 *     token.safeTransferFrom(msg.sender, address(this), value);
 *     ...
 * }
 * ```
 *
 * Observe that: 1) `msg.sender` is used as the owner, leaving no ambiguity as to the signer intent, and 2) the use of
 * `try/catch` allows the permit to fail and makes the code tolerant to frontrunning. (See also
 * {SafeERC20-safeTransferFrom}).
 *
 * Additionally, note that smart contract wallets (such as Argent or Safe) are not able to produce permit signatures, so
 * contracts should have entry points that don't rely on permit.
 */
interface IERC20Permit {
    /**
     * @dev Sets `value` as the allowance of `spender` over ``owner``'s tokens,
     * given ``owner``'s signed approval.
     *
     * IMPORTANT: The same issues {IERC20-approve} has related to transaction
     * ordering also apply here.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     * - `deadline` must be a timestamp in the future.
     * - `v`, `r` and `s` must be a valid `secp256k1` signature from `owner`
     * over the EIP712-formatted function arguments.
     * - the signature must use ``owner``'s current nonce (see {nonces}).
     *
     * For more information on the signature format, see the
     * https://eips.ethereum.org/EIPS/eip-2612#specification[relevant EIP
     * section].
     *
     * CAUTION: See Security Considerations above.
     */
    function permit(
        address owner,
        address spender,
        uint256 value,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) external;

    /**
     * @dev Returns the current nonce for `owner`. This value must be
     * included whenever a signature is generated for {permit}.
     *
     * Every successful call to {permit} increases ``owner``'s nonce by one. This
     * prevents a signature from being used multiple times.
     */
    function nonces(address owner) external view returns (uint256);

    /**
     * @dev Returns the domain separator used in the encoding of the signature for {permit}, as defined by {EIP712}.
     */
    // solhint-disable-next-line func-name-mixedcase
    function DOMAIN_SEPARATOR() external view returns (bytes32);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/ERC20.sol)

pragma solidity ^0.8.20;

import {IERC20} from "./IERC20.sol";
import {IERC20Metadata} from "./extensions/IERC20Metadata.sol";
import {Context} from "../../utils/Context.sol";
import {IERC20Errors} from "../../interfaces/draft-IERC6093.sol";

/**
 * @dev Implementation of the {IERC20} interface.
 *
 * This implementation is agnostic to the way tokens are created. This means
 * that a supply mechanism has to be added in a derived contract using {_mint}.
 *
 * TIP: For a detailed writeup see our guide
 * https://forum.openzeppelin.com/t/how-to-implement-erc20-supply-mechanisms/226[How
 * to implement supply mechanisms].
 *
 * The default value of {decimals} is 18. To change this, you should override
 * this function so it returns a different value.
 *
 * We have followed general OpenZeppelin Contracts guidelines: functions revert
 * instead returning `false` on failure. This behavior is nonetheless
 * conventional and does not conflict with the expectations of ERC20
 * applications.
 *
 * Additionally, an {Approval} event is emitted on calls to {transferFrom}.
 * This allows applications to reconstruct the allowance for all accounts just
 * by listening to said events. Other implementations of the EIP may not emit
 * these events, as it isn't required by the specification.
 */
abstract contract ERC20 is Context, IERC20, IERC20Metadata, IERC20Errors {
    mapping(address account => uint256) private _balances;

    mapping(address account => mapping(address spender => uint256)) private _allowances;

    uint256 private _totalSupply;

    string private _name;
    string private _symbol;

    /**
     * @dev Sets the values for {name} and {symbol}.
     *
     * All two of these values are immutable: they can only be set once during
     * construction.
     */
    constructor(string memory name_, string memory symbol_) {
        _name = name_;
        _symbol = symbol_;
    }

    /**
     * @dev Returns the name of the token.
     */
    function name() public view virtual returns (string memory) {
        return _name;
    }

    /**
     * @dev Returns the symbol of the token, usually a shorter version of the
     * name.
     */
    function symbol() public view virtual returns (string memory) {
        return _symbol;
    }

    /**
     * @dev Returns the number of decimals used to get its user representation.
     * For example, if `decimals` equals `2`, a balance of `505` tokens should
     * be displayed to a user as `5.05` (`505 / 10 ** 2`).
     *
     * Tokens usually opt for a value of 18, imitating the relationship between
     * Ether and Wei. This is the default value returned by this function, unless
     * it's overridden.
     *
     * NOTE: This information is only used for _display_ purposes: it in
     * no way affects any of the arithmetic of the contract, including
     * {IERC20-balanceOf} and {IERC20-transfer}.
     */
    function decimals() public view virtual returns (uint8) {
        return 18;
    }

    /**
     * @dev See {IERC20-totalSupply}.
     */
    function totalSupply() public view virtual returns (uint256) {
        return _totalSupply;
    }

    /**
     * @dev See {IERC20-balanceOf}.
     */
    function balanceOf(address account) public view virtual returns (uint256) {
        return _balances[account];
    }

    /**
     * @dev See {IERC20-transfer}.
     *
     * Requirements:
     *
     * - `to` cannot be the zero address.
     * - the caller must have a balance of at least `value`.
     */
    function transfer(address to, uint256 value) public virtual returns (bool) {
        address owner = _msgSender();
        _transfer(owner, to, value);
        return true;
    }

    /**
     * @dev See {IERC20-allowance}.
     */
    function allowance(address owner, address spender) public view virtual returns (uint256) {
        return _allowances[owner][spender];
    }

    /**
     * @dev See {IERC20-approve}.
     *
     * NOTE: If `value` is the maximum `uint256`, the allowance is not updated on
     * `transferFrom`. This is semantically equivalent to an infinite approval.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     */
    function approve(address spender, uint256 value) public virtual returns (bool) {
        address owner = _msgSender();
        _approve(owner, spender, value);
        return true;
    }

    /**
     * @dev See {IERC20-transferFrom}.
     *
     * Emits an {Approval} event indicating the updated allowance. This is not
     * required by the EIP. See the note at the beginning of {ERC20}.
     *
     * NOTE: Does not update the allowance if the current allowance
     * is the maximum `uint256`.
     *
     * Requirements:
     *
     * - `from` and `to` cannot be the zero address.
     * - `from` must have a balance of at least `value`.
     * - the caller must have allowance for ``from``'s tokens of at least
     * `value`.
     */
    function transferFrom(address from, address to, uint256 value) public virtual returns (bool) {
        address spender = _msgSender();
        _spendAllowance(from, spender, value);
        _transfer(from, to, value);
        return true;
    }

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to`.
     *
     * This internal function is equivalent to {transfer}, and can be used to
     * e.g. implement automatic token fees, slashing mechanisms, etc.
     *
     * Emits a {Transfer} event.
     *
     * NOTE: This function is not virtual, {_update} should be overridden instead.
     */
    function _transfer(address from, address to, uint256 value) internal {
        if (from == address(0)) {
            revert ERC20InvalidSender(address(0));
        }
        if (to == address(0)) {
            revert ERC20InvalidReceiver(address(0));
        }
        _update(from, to, value);
    }

    /**
     * @dev Transfers a `value` amount of tokens from `from` to `to`, or alternatively mints (or burns) if `from`
     * (or `to`) is the zero address. All customizations to transfers, mints, and burns should be done by overriding
     * this function.
     *
     * Emits a {Transfer} event.
     */
    function _update(address from, address to, uint256 value) internal virtual {
        if (from == address(0)) {
            // Overflow check required: The rest of the code assumes that totalSupply never overflows
            _totalSupply += value;
        } else {
            uint256 fromBalance = _balances[from];
            if (fromBalance < value) {
                revert ERC20InsufficientBalance(from, fromBalance, value);
            }
            unchecked {
                // Overflow not possible: value <= fromBalance <= totalSupply.
                _balances[from] = fromBalance - value;
            }
        }

        if (to == address(0)) {
            unchecked {
                // Overflow not possible: value <= totalSupply or value <= fromBalance <= totalSupply.
                _totalSupply -= value;
            }
        } else {
            unchecked {
                // Overflow not possible: balance + value is at most totalSupply, which we know fits into a uint256.
                _balances[to] += value;
            }
        }

        emit Transfer(from, to, value);
    }

    /**
     * @dev Creates a `value` amount of tokens and assigns them to `account`, by transferring it from address(0).
     * Relies on the `_update` mechanism
     *
     * Emits a {Transfer} event with `from` set to the zero address.
     *
     * NOTE: This function is not virtual, {_update} should be overridden instead.
     */
    function _mint(address account, uint256 value) internal {
        if (account == address(0)) {
            revert ERC20InvalidReceiver(address(0));
        }
        _update(address(0), account, value);
    }

    /**
     * @dev Destroys a `value` amount of tokens from `account`, lowering the total supply.
     * Relies on the `_update` mechanism.
     *
     * Emits a {Transfer} event with `to` set to the zero address.
     *
     * NOTE: This function is not virtual, {_update} should be overridden instead
     */
    function _burn(address account, uint256 value) internal {
        if (account == address(0)) {
            revert ERC20InvalidSender(address(0));
        }
        _update(account, address(0), value);
    }

    /**
     * @dev Sets `value` as the allowance of `spender` over the `owner` s tokens.
     *
     * This internal function is equivalent to `approve`, and can be used to
     * e.g. set automatic allowances for certain subsystems, etc.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `owner` cannot be the zero address.
     * - `spender` cannot be the zero address.
     *
     * Overrides to this logic should be done to the variant with an additional `bool emitEvent` argument.
     */
    function _approve(address owner, address spender, uint256 value) internal {
        _approve(owner, spender, value, true);
    }

    /**
     * @dev Variant of {_approve} with an optional flag to enable or disable the {Approval} event.
     *
     * By default (when calling {_approve}) the flag is set to true. On the other hand, approval changes made by
     * `_spendAllowance` during the `transferFrom` operation set the flag to false. This saves gas by not emitting any
     * `Approval` event during `transferFrom` operations.
     *
     * Anyone who wishes to continue emitting `Approval` events on the`transferFrom` operation can force the flag to
     * true using the following override:
     * ```
     * function _approve(address owner, address spender, uint256 value, bool) internal virtual override {
     *     super._approve(owner, spender, value, true);
     * }
     * ```
     *
     * Requirements are the same as {_approve}.
     */
    function _approve(address owner, address spender, uint256 value, bool emitEvent) internal virtual {
        if (owner == address(0)) {
            revert ERC20InvalidApprover(address(0));
        }
        if (spender == address(0)) {
            revert ERC20InvalidSpender(address(0));
        }
        _allowances[owner][spender] = value;
        if (emitEvent) {
            emit Approval(owner, spender, value);
        }
    }

    /**
     * @dev Updates `owner` s allowance for `spender` based on spent `value`.
     *
     * Does not update the allowance value in case of infinite allowance.
     * Revert if not enough allowance is available.
     *
     * Does not emit an {Approval} event.
     */
    function _spendAllowance(address owner, address spender, uint256 value) internal virtual {
        uint256 currentAllowance = allowance(owner, spender);
        if (currentAllowance != type(uint256).max) {
            if (currentAllowance < value) {
                revert ERC20InsufficientAllowance(spender, currentAllowance, value);
            }
            unchecked {
                _approve(owner, spender, currentAllowance - value, false);
            }
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/cryptography/ECDSA.sol)

pragma solidity ^0.8.20;

/**
 * @dev Elliptic Curve Digital Signature Algorithm (ECDSA) operations.
 *
 * These functions can be used to verify that a message was signed by the holder
 * of the private keys of a given address.
 */
library ECDSA {
    enum RecoverError {
        NoError,
        InvalidSignature,
        InvalidSignatureLength,
        InvalidSignatureS
    }

    /**
     * @dev The signature derives the `address(0)`.
     */
    error ECDSAInvalidSignature();

    /**
     * @dev The signature has an invalid length.
     */
    error ECDSAInvalidSignatureLength(uint256 length);

    /**
     * @dev The signature has an S value that is in the upper half order.
     */
    error ECDSAInvalidSignatureS(bytes32 s);

    /**
     * @dev Returns the address that signed a hashed message (`hash`) with `signature` or an error. This will not
     * return address(0) without also returning an error description. Errors are documented using an enum (error type)
     * and a bytes32 providing additional information about the error.
     *
     * If no error is returned, then the address can be used for verification purposes.
     *
     * The `ecrecover` EVM precompile allows for malleable (non-unique) signatures:
     * this function rejects them by requiring the `s` value to be in the lower
     * half order, and the `v` value to be either 27 or 28.
     *
     * IMPORTANT: `hash` _must_ be the result of a hash operation for the
     * verification to be secure: it is possible to craft signatures that
     * recover to arbitrary addresses for non-hashed data. A safe way to ensure
     * this is by receiving a hash of the original message (which may otherwise
     * be too long), and then calling {MessageHashUtils-toEthSignedMessageHash} on it.
     *
     * Documentation for signature generation:
     * - with https://web3js.readthedocs.io/en/v1.3.4/web3-eth-accounts.html#sign[Web3.js]
     * - with https://docs.ethers.io/v5/api/signer/#Signer-signMessage[ethers]
     */
    function tryRecover(bytes32 hash, bytes memory signature) internal pure returns (address, RecoverError, bytes32) {
        if (signature.length == 65) {
            bytes32 r;
            bytes32 s;
            uint8 v;
            // ecrecover takes the signature parameters, and the only way to get them
            // currently is to use assembly.
            /// @solidity memory-safe-assembly
            assembly {
                r := mload(add(signature, 0x20))
                s := mload(add(signature, 0x40))
                v := byte(0, mload(add(signature, 0x60)))
            }
            return tryRecover(hash, v, r, s);
        } else {
            return (address(0), RecoverError.InvalidSignatureLength, bytes32(signature.length));
        }
    }

    /**
     * @dev Returns the address that signed a hashed message (`hash`) with
     * `signature`. This address can then be used for verification purposes.
     *
     * The `ecrecover` EVM precompile allows for malleable (non-unique) signatures:
     * this function rejects them by requiring the `s` value to be in the lower
     * half order, and the `v` value to be either 27 or 28.
     *
     * IMPORTANT: `hash` _must_ be the result of a hash operation for the
     * verification to be secure: it is possible to craft signatures that
     * recover to arbitrary addresses for non-hashed data. A safe way to ensure
     * this is by receiving a hash of the original message (which may otherwise
     * be too long), and then calling {MessageHashUtils-toEthSignedMessageHash} on it.
     */
    function recover(bytes32 hash, bytes memory signature) internal pure returns (address) {
        (address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, signature);
        _throwError(error, errorArg);
        return recovered;
    }

    /**
     * @dev Overload of {ECDSA-tryRecover} that receives the `r` and `vs` short-signature fields separately.
     *
     * See https://eips.ethereum.org/EIPS/eip-2098[EIP-2098 short signatures]
     */
    function tryRecover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address, RecoverError, bytes32) {
        unchecked {
            bytes32 s = vs & bytes32(0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff);
            // We do not check for an overflow here since the shift operation results in 0 or 1.
            uint8 v = uint8((uint256(vs) >> 255) + 27);
            return tryRecover(hash, v, r, s);
        }
    }

    /**
     * @dev Overload of {ECDSA-recover} that receives the `r and `vs` short-signature fields separately.
     */
    function recover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address) {
        (address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, r, vs);
        _throwError(error, errorArg);
        return recovered;
    }

    /**
     * @dev Overload of {ECDSA-tryRecover} that receives the `v`,
     * `r` and `s` signature fields separately.
     */
    function tryRecover(
        bytes32 hash,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) internal pure returns (address, RecoverError, bytes32) {
        // EIP-2 still allows signature malleability for ecrecover(). Remove this possibility and make the signature
        // unique. Appendix F in the Ethereum Yellow paper (https://ethereum.github.io/yellowpaper/paper.pdf), defines
        // the valid range for s in (301): 0 < s < secp256k1n ÷ 2 + 1, and for v in (302): v ∈ {27, 28}. Most
        // signatures from current libraries generate a unique signature with an s-value in the lower half order.
        //
        // If your library generates malleable signatures, such as s-values in the upper range, calculate a new s-value
        // with 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 - s1 and flip v from 27 to 28 or
        // vice versa. If your library also generates signatures with 0/1 for v instead 27/28, add 27 to v to accept
        // these malleable signatures as well.
        if (uint256(s) > 0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0) {
            return (address(0), RecoverError.InvalidSignatureS, s);
        }

        // If the signature is valid (and not malleable), return the signer address
        address signer = ecrecover(hash, v, r, s);
        if (signer == address(0)) {
            return (address(0), RecoverError.InvalidSignature, bytes32(0));
        }

        return (signer, RecoverError.NoError, bytes32(0));
    }

    /**
     * @dev Overload of {ECDSA-recover} that receives the `v`,
     * `r` and `s` signature fields separately.
     */
    function recover(bytes32 hash, uint8 v, bytes32 r, bytes32 s) internal pure returns (address) {
        (address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, v, r, s);
        _throwError(error, errorArg);
        return recovered;
    }

    /**
     * @dev Optionally reverts with the corresponding custom error according to the `error` argument provided.
     */
    function _throwError(RecoverError error, bytes32 errorArg) private pure {
        if (error == RecoverError.NoError) {
            return; // no error: do nothing
        } else if (error == RecoverError.InvalidSignature) {
            revert ECDSAInvalidSignature();
        } else if (error == RecoverError.InvalidSignatureLength) {
            revert ECDSAInvalidSignatureLength(uint256(errorArg));
        } else if (error == RecoverError.InvalidSignatureS) {
            revert ECDSAInvalidSignatureS(errorArg);
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/cryptography/EIP712.sol)

pragma solidity ^0.8.20;

import {MessageHashUtils} from "./MessageHashUtils.sol";
import {ShortStrings, ShortString} from "../ShortStrings.sol";
import {IERC5267} from "../../interfaces/IERC5267.sol";

/**
 * @dev https://eips.ethereum.org/EIPS/eip-712[EIP 712] is a standard for hashing and signing of typed structured data.
 *
 * The encoding scheme specified in the EIP requires a domain separator and a hash of the typed structured data, whose
 * encoding is very generic and therefore its implementation in Solidity is not feasible, thus this contract
 * does not implement the encoding itself. Protocols need to implement the type-specific encoding they need in order to
 * produce the hash of their typed data using a combination of `abi.encode` and `keccak256`.
 *
 * This contract implements the EIP 712 domain separator ({_domainSeparatorV4}) that is used as part of the encoding
 * scheme, and the final step of the encoding to obtain the message digest that is then signed via ECDSA
 * ({_hashTypedDataV4}).
 *
 * The implementation of the domain separator was designed to be as efficient as possible while still properly updating
 * the chain id to protect against replay attacks on an eventual fork of the chain.
 *
 * NOTE: This contract implements the version of the encoding known as "v4", as implemented by the JSON RPC method
 * https://docs.metamask.io/guide/signing-data.html[`eth_signTypedDataV4` in MetaMask].
 *
 * NOTE: In the upgradeable version of this contract, the cached values will correspond to the address, and the domain
 * separator of the implementation contract. This will cause the {_domainSeparatorV4} function to always rebuild the
 * separator from the immutable values, which is cheaper than accessing a cached version in cold storage.
 *
 * @custom:oz-upgrades-unsafe-allow state-variable-immutable
 */
abstract contract EIP712 is IERC5267 {
    using ShortStrings for *;

    bytes32 private constant TYPE_HASH =
        keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)");

    // Cache the domain separator as an immutable value, but also store the chain id that it corresponds to, in order to
    // invalidate the cached domain separator if the chain id changes.
    bytes32 private immutable _cachedDomainSeparator;
    uint256 private immutable _cachedChainId;
    address private immutable _cachedThis;

    bytes32 private immutable _hashedName;
    bytes32 private immutable _hashedVersion;

    ShortString private immutable _name;
    ShortString private immutable _version;
    string private _nameFallback;
    string private _versionFallback;

    /**
     * @dev Initializes the domain separator and parameter caches.
     *
     * The meaning of `name` and `version` is specified in
     * https://eips.ethereum.org/EIPS/eip-712#definition-of-domainseparator[EIP 712]:
     *
     * - `name`: the user readable name of the signing domain, i.e. the name of the DApp or the protocol.
     * - `version`: the current major version of the signing domain.
     *
     * NOTE: These parameters cannot be changed except through a xref:learn::upgrading-smart-contracts.adoc[smart
     * contract upgrade].
     */
    constructor(string memory name, string memory version) {
        _name = name.toShortStringWithFallback(_nameFallback);
        _version = version.toShortStringWithFallback(_versionFallback);
        _hashedName = keccak256(bytes(name));
        _hashedVersion = keccak256(bytes(version));

        _cachedChainId = block.chainid;
        _cachedDomainSeparator = _buildDomainSeparator();
        _cachedThis = address(this);
    }

    /**
     * @dev Returns the domain separator for the current chain.
     */
    function _domainSeparatorV4() internal view returns (bytes32) {
        if (address(this) == _cachedThis && block.chainid == _cachedChainId) {
            return _cachedDomainSeparator;
        } else {
            return _buildDomainSeparator();
        }
    }

    function _buildDomainSeparator() private view returns (bytes32) {
        return keccak256(abi.encode(TYPE_HASH, _hashedName, _hashedVersion, block.chainid, address(this)));
    }

    /**
     * @dev Given an already https://eips.ethereum.org/EIPS/eip-712#definition-of-hashstruct[hashed struct], this
     * function returns the hash of the fully encoded EIP712 message for this domain.
     *
     * This hash can be used together with {ECDSA-recover} to obtain the signer of a message. For example:
     *
     * ```solidity
     * bytes32 digest = _hashTypedDataV4(keccak256(abi.encode(
     *     keccak256("Mail(address to,string contents)"),
     *     mailTo,
     *     keccak256(bytes(mailContents))
     * )));
     * address signer = ECDSA.recover(digest, signature);
     * ```
     */
    function _hashTypedDataV4(bytes32 structHash) internal view virtual returns (bytes32) {
        return MessageHashUtils.toTypedDataHash(_domainSeparatorV4(), structHash);
    }

    /**
     * @dev See {IERC-5267}.
     */
    function eip712Domain()
        public
        view
        virtual
        returns (
            bytes1 fields,
            string memory name,
            string memory version,
            uint256 chainId,
            address verifyingContract,
            bytes32 salt,
            uint256[] memory extensions
        )
    {
        return (
            hex"0f", // 01111
            _EIP712Name(),
            _EIP712Version(),
            block.chainid,
            address(this),
            bytes32(0),
            new uint256[](0)
        );
    }

    /**
     * @dev The name parameter for the EIP712 domain.
     *
     * NOTE: By default this function reads _name which is an immutable value.
     * It only reads from storage if necessary (in case the value is too large to fit in a ShortString).
     */
    // solhint-disable-next-line func-name-mixedcase
    function _EIP712Name() internal view returns (string memory) {
        return _name.toStringWithFallback(_nameFallback);
    }

    /**
     * @dev The version parameter for the EIP712 domain.
     *
     * NOTE: By default this function reads _version which is an immutable value.
     * It only reads from storage if necessary (in case the value is too large to fit in a ShortString).
     */
    // solhint-disable-next-line func-name-mixedcase
    function _EIP712Version() internal view returns (string memory) {
        return _version.toStringWithFallback(_versionFallback);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/Nonces.sol)
pragma solidity ^0.8.20;

/**
 * @dev Provides tracking nonces for addresses. Nonces will only increment.
 */
abstract contract Nonces {
    /**
     * @dev The nonce used for an `account` is not the expected current nonce.
     */
    error InvalidAccountNonce(address account, uint256 currentNonce);

    mapping(address account => uint256) private _nonces;

    /**
     * @dev Returns the next unused nonce for an address.
     */
    function nonces(address owner) public view virtual returns (uint256) {
        return _nonces[owner];
    }

    /**
     * @dev Consumes a nonce.
     *
     * Returns the current value and increments nonce.
     */
    function _useNonce(address owner) internal virtual returns (uint256) {
        // For each account, the nonce has an initial value of 0, can only be incremented by one, and cannot be
        // decremented or reset. This guarantees that the nonce never overflows.
        unchecked {
            // It is important to do x++ and not ++x here.
            return _nonces[owner]++;
        }
    }

    /**
     * @dev Same as {_useNonce} but checking that `nonce` is the next valid for `owner`.
     */
    function _useCheckedNonce(address owner, uint256 nonce) internal virtual {
        uint256 current = _useNonce(owner);
        if (nonce != current) {
            revert InvalidAccountNonce(owner, current);
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)

pragma solidity ^0.8.20;

/**
 * @dev Provides information about the current execution context, including the
 * sender of the transaction and its data. While these are generally available
 * via msg.sender and msg.data, they should not be accessed in such a direct
 * manner, since when dealing with meta-transactions the account sending and
 * paying for execution may not be the actual sender (as far as an application
 * is concerned).
 *
 * This contract is only required for intermediate, library-like contracts.
 */
abstract contract Context {
    function _msgSender() internal view virtual returns (address) {
        return msg.sender;
    }

    function _msgData() internal view virtual returns (bytes calldata) {
        return msg.data;
    }

    function _contextSuffixLength() internal view virtual returns (uint256) {
        return 0;
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/IERC20.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC20 standard as defined in the EIP.
 */
interface IERC20 {
    /**
     * @dev Emitted when `value` tokens are moved from one account (`from`) to
     * another (`to`).
     *
     * Note that `value` may be zero.
     */
    event Transfer(address indexed from, address indexed to, uint256 value);

    /**
     * @dev Emitted when the allowance of a `spender` for an `owner` is set by
     * a call to {approve}. `value` is the new allowance.
     */
    event Approval(address indexed owner, address indexed spender, uint256 value);

    /**
     * @dev Returns the value of tokens in existence.
     */
    function totalSupply() external view returns (uint256);

    /**
     * @dev Returns the value of tokens owned by `account`.
     */
    function balanceOf(address account) external view returns (uint256);

    /**
     * @dev Moves a `value` amount of tokens from the caller's account to `to`.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transfer(address to, uint256 value) external returns (bool);

    /**
     * @dev Returns the remaining number of tokens that `spender` will be
     * allowed to spend on behalf of `owner` through {transferFrom}. This is
     * zero by default.
     *
     * This value changes when {approve} or {transferFrom} are called.
     */
    function allowance(address owner, address spender) external view returns (uint256);

    /**
     * @dev Sets a `value` amount of tokens as the allowance of `spender` over the
     * caller's tokens.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * IMPORTANT: Beware that changing an allowance with this method brings the risk
     * that someone may use both the old and the new allowance by unfortunate
     * transaction ordering. One possible solution to mitigate this race
     * condition is to first reduce the spender's allowance to 0 and set the
     * desired value afterwards:
     * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
     *
     * Emits an {Approval} event.
     */
    function approve(address spender, uint256 value) external returns (bool);

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to` using the
     * allowance mechanism. `value` is then deducted from the caller's
     * allowance.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transferFrom(address from, address to, uint256 value) external returns (bool);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/utils/SafeERC20.sol)

pragma solidity ^0.8.20;

import {IERC20} from "../IERC20.sol";
import {IERC20Permit} from "../extensions/IERC20Permit.sol";
import {Address} from "../../../utils/Address.sol";

/**
 * @title SafeERC20
 * @dev Wrappers around ERC20 operations that throw on failure (when the token
 * contract returns false). Tokens that return no value (and instead revert or
 * throw on failure) are also supported, non-reverting calls are assumed to be
 * successful.
 * To use this library you can add a `using SafeERC20 for IERC20;` statement to your contract,
 * which allows you to call the safe operations as `token.safeTransfer(...)`, etc.
 */
library SafeERC20 {
    using Address for address;

    /**
     * @dev An operation with an ERC20 token failed.
     */
    error SafeERC20FailedOperation(address token);

    /**
     * @dev Indicates a failed `decreaseAllowance` request.
     */
    error SafeERC20FailedDecreaseAllowance(address spender, uint256 currentAllowance, uint256 requestedDecrease);

    /**
     * @dev Transfer `value` amount of `token` from the calling contract to `to`. If `token` returns no value,
     * non-reverting calls are assumed to be successful.
     */
    function safeTransfer(IERC20 token, address to, uint256 value) internal {
        _callOptionalReturn(token, abi.encodeCall(token.transfer, (to, value)));
    }

    /**
     * @dev Transfer `value` amount of `token` from `from` to `to`, spending the approval given by `from` to the
     * calling contract. If `token` returns no value, non-reverting calls are assumed to be successful.
     */
    function safeTransferFrom(IERC20 token, address from, address to, uint256 value) internal {
        _callOptionalReturn(token, abi.encodeCall(token.transferFrom, (from, to, value)));
    }

    /**
     * @dev Increase the calling contract's allowance toward `spender` by `value`. If `token` returns no value,
     * non-reverting calls are assumed to be successful.
     */
    function safeIncreaseAllowance(IERC20 token, address spender, uint256 value) internal {
        uint256 oldAllowance = token.allowance(address(this), spender);
        forceApprove(token, spender, oldAllowance + value);
    }

    /**
     * @dev Decrease the calling contract's allowance toward `spender` by `requestedDecrease`. If `token` returns no
     * value, non-reverting calls are assumed to be successful.
     */
    function safeDecreaseAllowance(IERC20 token, address spender, uint256 requestedDecrease) internal {
        unchecked {
            uint256 currentAllowance = token.allowance(address(this), spender);
            if (currentAllowance < requestedDecrease) {
                revert SafeERC20FailedDecreaseAllowance(spender, currentAllowance, requestedDecrease);
            }
            forceApprove(token, spender, currentAllowance - requestedDecrease);
        }
    }

    /**
     * @dev Set the calling contract's allowance toward `spender` to `value`. If `token` returns no value,
     * non-reverting calls are assumed to be successful. Meant to be used with tokens that require the approval
     * to be set to zero before setting it to a non-zero value, such as USDT.
     */
    function forceApprove(IERC20 token, address spender, uint256 value) internal {
        bytes memory approvalCall = abi.encodeCall(token.approve, (spender, value));

        if (!_callOptionalReturnBool(token, approvalCall)) {
            _callOptionalReturn(token, abi.encodeCall(token.approve, (spender, 0)));
            _callOptionalReturn(token, approvalCall);
        }
    }

    /**
     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
     * on the return value: the return value is optional (but if data is returned, it must not be false).
     * @param token The token targeted by the call.
     * @param data The call data (encoded using abi.encode or one of its variants).
     */
    function _callOptionalReturn(IERC20 token, bytes memory data) private {
        // We need to perform a low level call here, to bypass Solidity's return data size checking mechanism, since
        // we're implementing it ourselves. We use {Address-functionCall} to perform this call, which verifies that
        // the target address contains contract code and also asserts for success in the low-level call.

        bytes memory returndata = address(token).functionCall(data);
        if (returndata.length != 0 && !abi.decode(returndata, (bool))) {
            revert SafeERC20FailedOperation(address(token));
        }
    }

    /**
     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
     * on the return value: the return value is optional (but if data is returned, it must not be false).
     * @param token The token targeted by the call.
     * @param data The call data (encoded using abi.encode or one of its variants).
     *
     * This is a variant of {_callOptionalReturn} that silents catches all reverts and returns a bool instead.
     */
    function _callOptionalReturnBool(IERC20 token, bytes memory data) private returns (bool) {
        // We need to perform a low level call here, to bypass Solidity's return data size checking mechanism, since
        // we're implementing it ourselves. We cannot use {Address-functionCall} here since this should return false
        // and not revert is the subcall reverts.

        (bool success, bytes memory returndata) = address(token).call(data);
        return success && (returndata.length == 0 || abi.decode(returndata, (bool))) && address(token).code.length > 0;
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/extensions/IERC20Metadata.sol)

pragma solidity ^0.8.20;

import {IERC20} from "../IERC20.sol";

/**
 * @dev Interface for the optional metadata functions from the ERC20 standard.
 */
interface IERC20Metadata is IERC20 {
    /**
     * @dev Returns the name of the token.
     */
    function name() external view returns (string memory);

    /**
     * @dev Returns the symbol of the token.
     */
    function symbol() external view returns (string memory);

    /**
     * @dev Returns the decimals places of the token.
     */
    function decimals() external view returns (uint8);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/draft-IERC6093.sol)
pragma solidity ^0.8.20;

/**
 * @dev Standard ERC20 Errors
 * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC20 tokens.
 */
interface IERC20Errors {
    /**
     * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param balance Current balance for the interacting account.
     * @param needed Minimum amount required to perform a transfer.
     */
    error ERC20InsufficientBalance(address sender, uint256 balance, uint256 needed);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error ERC20InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error ERC20InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the `spender`’s `allowance`. Used in transfers.
     * @param spender Address that may be allowed to operate on tokens without being their owner.
     * @param allowance Amount of tokens a `spender` is allowed to operate with.
     * @param needed Minimum amount required to perform a transfer.
     */
    error ERC20InsufficientAllowance(address spender, uint256 allowance, uint256 needed);

    /**
     * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
     * @param approver Address initiating an approval operation.
     */
    error ERC20InvalidApprover(address approver);

    /**
     * @dev Indicates a failure with the `spender` to be approved. Used in approvals.
     * @param spender Address that may be allowed to operate on tokens without being their owner.
     */
    error ERC20InvalidSpender(address spender);
}

/**
 * @dev Standard ERC721 Errors
 * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC721 tokens.
 */
interface IERC721Errors {
    /**
     * @dev Indicates that an address can't be an owner. For example, `address(0)` is a forbidden owner in EIP-20.
     * Used in balance queries.
     * @param owner Address of the current owner of a token.
     */
    error ERC721InvalidOwner(address owner);

    /**
     * @dev Indicates a `tokenId` whose `owner` is the zero address.
     * @param tokenId Identifier number of a token.
     */
    error ERC721NonexistentToken(uint256 tokenId);

    /**
     * @dev Indicates an error related to the ownership over a particular token. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param tokenId Identifier number of a token.
     * @param owner Address of the current owner of a token.
     */
    error ERC721IncorrectOwner(address sender, uint256 tokenId, address owner);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error ERC721InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error ERC721InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the `operator`’s approval. Used in transfers.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     * @param tokenId Identifier number of a token.
     */
    error ERC721InsufficientApproval(address operator, uint256 tokenId);

    /**
     * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
     * @param approver Address initiating an approval operation.
     */
    error ERC721InvalidApprover(address approver);

    /**
     * @dev Indicates a failure with the `operator` to be approved. Used in approvals.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     */
    error ERC721InvalidOperator(address operator);
}

/**
 * @dev Standard ERC1155 Errors
 * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC1155 tokens.
 */
interface IERC1155Errors {
    /**
     * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param balance Current balance for the interacting account.
     * @param needed Minimum amount required to perform a transfer.
     * @param tokenId Identifier number of a token.
     */
    error ERC1155InsufficientBalance(address sender, uint256 balance, uint256 needed, uint256 tokenId);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error ERC1155InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error ERC1155InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the `operator`’s approval. Used in transfers.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     * @param owner Address of the current owner of a token.
     */
    error ERC1155MissingApprovalForAll(address operator, address owner);

    /**
     * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
     * @param approver Address initiating an approval operation.
     */
    error ERC1155InvalidApprover(address approver);

    /**
     * @dev Indicates a failure with the `operator` to be approved. Used in approvals.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     */
    error ERC1155InvalidOperator(address operator);

    /**
     * @dev Indicates an array length mismatch between ids and values in a safeBatchTransferFrom operation.
     * Used in batch transfers.
     * @param idsLength Length of the array of token identifiers
     * @param valuesLength Length of the array of token amounts
     */
    error ERC1155InvalidArrayLength(uint256 idsLength, uint256 valuesLength);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/cryptography/MessageHashUtils.sol)

pragma solidity ^0.8.20;

import {Strings} from "../Strings.sol";

/**
 * @dev Signature message hash utilities for producing digests to be consumed by {ECDSA} recovery or signing.
 *
 * The library provides methods for generating a hash of a message that conforms to the
 * https://eips.ethereum.org/EIPS/eip-191[EIP 191] and https://eips.ethereum.org/EIPS/eip-712[EIP 712]
 * specifications.
 */
library MessageHashUtils {
    /**
     * @dev Returns the keccak256 digest of an EIP-191 signed data with version
     * `0x45` (`personal_sign` messages).
     *
     * The digest is calculated by prefixing a bytes32 `messageHash` with
     * `"\x19Ethereum Signed Message:\n32"` and hashing the result. It corresponds with the
     * hash signed when using the https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`] JSON-RPC method.
     *
     * NOTE: The `messageHash` parameter is intended to be the result of hashing a raw message with
     * keccak256, although any bytes32 value can be safely used because the final digest will
     * be re-hashed.
     *
     * See {ECDSA-recover}.
     */
    function toEthSignedMessageHash(bytes32 messageHash) internal pure returns (bytes32 digest) {
        /// @solidity memory-safe-assembly
        assembly {
            mstore(0x00, "\x19Ethereum Signed Message:\n32") // 32 is the bytes-length of messageHash
            mstore(0x1c, messageHash) // 0x1c (28) is the length of the prefix
            digest := keccak256(0x00, 0x3c) // 0x3c is the length of the prefix (0x1c) + messageHash (0x20)
        }
    }

    /**
     * @dev Returns the keccak256 digest of an EIP-191 signed data with version
     * `0x45` (`personal_sign` messages).
     *
     * The digest is calculated by prefixing an arbitrary `message` with
     * `"\x19Ethereum Signed Message:\n" + len(message)` and hashing the result. It corresponds with the
     * hash signed when using the https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`] JSON-RPC method.
     *
     * See {ECDSA-recover}.
     */
    function toEthSignedMessageHash(bytes memory message) internal pure returns (bytes32) {
        return
            keccak256(bytes.concat("\x19Ethereum Signed Message:\n", bytes(Strings.toString(message.length)), message));
    }

    /**
     * @dev Returns the keccak256 digest of an EIP-191 signed data with version
     * `0x00` (data with intended validator).
     *
     * The digest is calculated by prefixing an arbitrary `data` with `"\x19\x00"` and the intended
     * `validator` address. Then hashing the result.
     *
     * See {ECDSA-recover}.
     */
    function toDataWithIntendedValidatorHash(address validator, bytes memory data) internal pure returns (bytes32) {
        return keccak256(abi.encodePacked(hex"19_00", validator, data));
    }

    /**
     * @dev Returns the keccak256 digest of an EIP-712 typed data (EIP-191 version `0x01`).
     *
     * The digest is calculated from a `domainSeparator` and a `structHash`, by prefixing them with
     * `\x19\x01` and hashing the result. It corresponds to the hash signed by the
     * https://eips.ethereum.org/EIPS/eip-712[`eth_signTypedData`] JSON-RPC method as part of EIP-712.
     *
     * See {ECDSA-recover}.
     */
    function toTypedDataHash(bytes32 domainSeparator, bytes32 structHash) internal pure returns (bytes32 digest) {
        /// @solidity memory-safe-assembly
        assembly {
            let ptr := mload(0x40)
            mstore(ptr, hex"19_01")
            mstore(add(ptr, 0x02), domainSeparator)
            mstore(add(ptr, 0x22), structHash)
            digest := keccak256(ptr, 0x42)
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/ShortStrings.sol)

pragma solidity ^0.8.20;

import {StorageSlot} from "./StorageSlot.sol";

// | string  | 0xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA   |
// | length  | 0x                                                              BB |
type ShortString is bytes32;

/**
 * @dev This library provides functions to convert short memory strings
 * into a `ShortString` type that can be used as an immutable variable.
 *
 * Strings of arbitrary length can be optimized using this library if
 * they are short enough (up to 31 bytes) by packing them with their
 * length (1 byte) in a single EVM word (32 bytes). Additionally, a
 * fallback mechanism can be used for every other case.
 *
 * Usage example:
 *
 * ```solidity
 * contract Named {
 *     using ShortStrings for *;
 *
 *     ShortString private immutable _name;
 *     string private _nameFallback;
 *
 *     constructor(string memory contractName) {
 *         _name = contractName.toShortStringWithFallback(_nameFallback);
 *     }
 *
 *     function name() external view returns (string memory) {
 *         return _name.toStringWithFallback(_nameFallback);
 *     }
 * }
 * ```
 */
library ShortStrings {
    // Used as an identifier for strings longer than 31 bytes.
    bytes32 private constant FALLBACK_SENTINEL = 0x00000000000000000000000000000000000000000000000000000000000000FF;

    error StringTooLong(string str);
    error InvalidShortString();

    /**
     * @dev Encode a string of at most 31 chars into a `ShortString`.
     *
     * This will trigger a `StringTooLong` error is the input string is too long.
     */
    function toShortString(string memory str) internal pure returns (ShortString) {
        bytes memory bstr = bytes(str);
        if (bstr.length > 31) {
            revert StringTooLong(str);
        }
        return ShortString.wrap(bytes32(uint256(bytes32(bstr)) | bstr.length));
    }

    /**
     * @dev Decode a `ShortString` back to a "normal" string.
     */
    function toString(ShortString sstr) internal pure returns (string memory) {
        uint256 len = byteLength(sstr);
        // using `new string(len)` would work locally but is not memory safe.
        string memory str = new string(32);
        /// @solidity memory-safe-assembly
        assembly {
            mstore(str, len)
            mstore(add(str, 0x20), sstr)
        }
        return str;
    }

    /**
     * @dev Return the length of a `ShortString`.
     */
    function byteLength(ShortString sstr) internal pure returns (uint256) {
        uint256 result = uint256(ShortString.unwrap(sstr)) & 0xFF;
        if (result > 31) {
            revert InvalidShortString();
        }
        return result;
    }

    /**
     * @dev Encode a string into a `ShortString`, or write it to storage if it is too long.
     */
    function toShortStringWithFallback(string memory value, string storage store) internal returns (ShortString) {
        if (bytes(value).length < 32) {
            return toShortString(value);
        } else {
            StorageSlot.getStringSlot(store).value = value;
            return ShortString.wrap(FALLBACK_SENTINEL);
        }
    }

    /**
     * @dev Decode a string that was encoded to `ShortString` or written to storage using {setWithFallback}.
     */
    function toStringWithFallback(ShortString value, string storage store) internal pure returns (string memory) {
        if (ShortString.unwrap(value) != FALLBACK_SENTINEL) {
            return toString(value);
        } else {
            return store;
        }
    }

    /**
     * @dev Return the length of a string that was encoded to `ShortString` or written to storage using
     * {setWithFallback}.
     *
     * WARNING: This will return the "byte length" of the string. This may not reflect the actual length in terms of
     * actual characters as the UTF-8 encoding of a single character can span over multiple bytes.
     */
    function byteLengthWithFallback(ShortString value, string storage store) internal view returns (uint256) {
        if (ShortString.unwrap(value) != FALLBACK_SENTINEL) {
            return byteLength(value);
        } else {
            return bytes(store).length;
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC5267.sol)

pragma solidity ^0.8.20;

interface IERC5267 {
    /**
     * @dev MAY be emitted to signal that the domain could have changed.
     */
    event EIP712DomainChanged();

    /**
     * @dev returns the fields and values that describe the domain separator used by this contract for EIP-712
     * signature.
     */
    function eip712Domain()
        external
        view
        returns (
            bytes1 fields,
            string memory name,
            string memory version,
            uint256 chainId,
            address verifyingContract,
            bytes32 salt,
            uint256[] memory extensions
        );
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/Address.sol)

pragma solidity ^0.8.20;

/**
 * @dev Collection of functions related to the address type
 */
library Address {
    /**
     * @dev The ETH balance of the account is not enough to perform the operation.
     */
    error AddressInsufficientBalance(address account);

    /**
     * @dev There's no code at `target` (it is not a contract).
     */
    error AddressEmptyCode(address target);

    /**
     * @dev A call to an address target failed. The target may have reverted.
     */
    error FailedInnerCall();

    /**
     * @dev Replacement for Solidity's `transfer`: sends `amount` wei to
     * `recipient`, forwarding all available gas and reverting on errors.
     *
     * https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost
     * of certain opcodes, possibly making contracts go over the 2300 gas limit
     * imposed by `transfer`, making them unable to receive funds via
     * `transfer`. {sendValue} removes this limitation.
     *
     * https://consensys.net/diligence/blog/2019/09/stop-using-soliditys-transfer-now/[Learn more].
     *
     * IMPORTANT: because control is transferred to `recipient`, care must be
     * taken to not create reentrancy vulnerabilities. Consider using
     * {ReentrancyGuard} or the
     * https://solidity.readthedocs.io/en/v0.8.20/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern].
     */
    function sendValue(address payable recipient, uint256 amount) internal {
        if (address(this).balance < amount) {
            revert AddressInsufficientBalance(address(this));
        }

        (bool success, ) = recipient.call{value: amount}("");
        if (!success) {
            revert FailedInnerCall();
        }
    }

    /**
     * @dev Performs a Solidity function call using a low level `call`. A
     * plain `call` is an unsafe replacement for a function call: use this
     * function instead.
     *
     * If `target` reverts with a revert reason or custom error, it is bubbled
     * up by this function (like regular Solidity function calls). However, if
     * the call reverted with no returned reason, this function reverts with a
     * {FailedInnerCall} error.
     *
     * Returns the raw returned data. To convert to the expected return value,
     * use https://solidity.readthedocs.io/en/latest/units-and-global-variables.html?highlight=abi.decode#abi-encoding-and-decoding-functions[`abi.decode`].
     *
     * Requirements:
     *
     * - `target` must be a contract.
     * - calling `target` with `data` must not revert.
     */
    function functionCall(address target, bytes memory data) internal returns (bytes memory) {
        return functionCallWithValue(target, data, 0);
    }

    /**
     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
     * but also transferring `value` wei to `target`.
     *
     * Requirements:
     *
     * - the calling contract must have an ETH balance of at least `value`.
     * - the called Solidity function must be `payable`.
     */
    function functionCallWithValue(address target, bytes memory data, uint256 value) internal returns (bytes memory) {
        if (address(this).balance < value) {
            revert AddressInsufficientBalance(address(this));
        }
        (bool success, bytes memory returndata) = target.call{value: value}(data);
        return verifyCallResultFromTarget(target, success, returndata);
    }

    /**
     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
     * but performing a static call.
     */
    function functionStaticCall(address target, bytes memory data) internal view returns (bytes memory) {
        (bool success, bytes memory returndata) = target.staticcall(data);
        return verifyCallResultFromTarget(target, success, returndata);
    }

    /**
     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
     * but performing a delegate call.
     */
    function functionDelegateCall(address target, bytes memory data) internal returns (bytes memory) {
        (bool success, bytes memory returndata) = target.delegatecall(data);
        return verifyCallResultFromTarget(target, success, returndata);
    }

    /**
     * @dev Tool to verify that a low level call to smart-contract was successful, and reverts if the target
     * was not a contract or bubbling up the revert reason (falling back to {FailedInnerCall}) in case of an
     * unsuccessful call.
     */
    function verifyCallResultFromTarget(
        address target,
        bool success,
        bytes memory returndata
    ) internal view returns (bytes memory) {
        if (!success) {
            _revert(returndata);
        } else {
            // only check if target is a contract if the call was successful and the return data is empty
            // otherwise we already know that it was a contract
            if (returndata.length == 0 && target.code.length == 0) {
                revert AddressEmptyCode(target);
            }
            return returndata;
        }
    }

    /**
     * @dev Tool to verify that a low level call was successful, and reverts if it wasn't, either by bubbling the
     * revert reason or with a default {FailedInnerCall} error.
     */
    function verifyCallResult(bool success, bytes memory returndata) internal pure returns (bytes memory) {
        if (!success) {
            _revert(returndata);
        } else {
            return returndata;
        }
    }

    /**
     * @dev Reverts with returndata if present. Otherwise reverts with {FailedInnerCall}.
     */
    function _revert(bytes memory returndata) private pure {
        // Look for revert reason and bubble it up if present
        if (returndata.length > 0) {
            // The easiest way to bubble the revert reason is using memory via assembly
            /// @solidity memory-safe-assembly
            assembly {
                let returndata_size := mload(returndata)
                revert(add(32, returndata), returndata_size)
            }
        } else {
            revert FailedInnerCall();
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/Strings.sol)

pragma solidity ^0.8.20;

import {Math} from "./math/Math.sol";
import {SignedMath} from "./math/SignedMath.sol";

/**
 * @dev String operations.
 */
library Strings {
    bytes16 private constant HEX_DIGITS = "0123456789abcdef";
    uint8 private constant ADDRESS_LENGTH = 20;

    /**
     * @dev The `value` string doesn't fit in the specified `length`.
     */
    error StringsInsufficientHexLength(uint256 value, uint256 length);

    /**
     * @dev Converts a `uint256` to its ASCII `string` decimal representation.
     */
    function toString(uint256 value) internal pure returns (string memory) {
        unchecked {
            uint256 length = Math.log10(value) + 1;
            string memory buffer = new string(length);
            uint256 ptr;
            /// @solidity memory-safe-assembly
            assembly {
                ptr := add(buffer, add(32, length))
            }
            while (true) {
                ptr--;
                /// @solidity memory-safe-assembly
                assembly {
                    mstore8(ptr, byte(mod(value, 10), HEX_DIGITS))
                }
                value /= 10;
                if (value == 0) break;
            }
            return buffer;
        }
    }

    /**
     * @dev Converts a `int256` to its ASCII `string` decimal representation.
     */
    function toStringSigned(int256 value) internal pure returns (string memory) {
        return string.concat(value < 0 ? "-" : "", toString(SignedMath.abs(value)));
    }

    /**
     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation.
     */
    function toHexString(uint256 value) internal pure returns (string memory) {
        unchecked {
            return toHexString(value, Math.log256(value) + 1);
        }
    }

    /**
     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation with fixed length.
     */
    function toHexString(uint256 value, uint256 length) internal pure returns (string memory) {
        uint256 localValue = value;
        bytes memory buffer = new bytes(2 * length + 2);
        buffer[0] = "0";
        buffer[1] = "x";
        for (uint256 i = 2 * length + 1; i > 1; --i) {
            buffer[i] = HEX_DIGITS[localValue & 0xf];
            localValue >>= 4;
        }
        if (localValue != 0) {
            revert StringsInsufficientHexLength(value, length);
        }
        return string(buffer);
    }

    /**
     * @dev Converts an `address` with fixed length of 20 bytes to its not checksummed ASCII `string` hexadecimal
     * representation.
     */
    function toHexString(address addr) internal pure returns (string memory) {
        return toHexString(uint256(uint160(addr)), ADDRESS_LENGTH);
    }

    /**
     * @dev Returns true if the two strings are equal.
     */
    function equal(string memory a, string memory b) internal pure returns (bool) {
        return bytes(a).length == bytes(b).length && keccak256(bytes(a)) == keccak256(bytes(b));
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/StorageSlot.sol)
// This file was procedurally generated from scripts/generate/templates/StorageSlot.js.

pragma solidity ^0.8.20;

/**
 * @dev Library for reading and writing primitive types to specific storage slots.
 *
 * Storage slots are often used to avoid storage conflict when dealing with upgradeable contracts.
 * This library helps with reading and writing to such slots without the need for inline assembly.
 *
 * The functions in this library return Slot structs that contain a `value` member that can be used to read or write.
 *
 * Example usage to set ERC1967 implementation slot:
 * ```solidity
 * contract ERC1967 {
 *     bytes32 internal constant _IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;
 *
 *     function _getImplementation() internal view returns (address) {
 *         return StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value;
 *     }
 *
 *     function _setImplementation(address newImplementation) internal {
 *         require(newImplementation.code.length > 0);
 *         StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value = newImplementation;
 *     }
 * }
 * ```
 */
library StorageSlot {
    struct AddressSlot {
        address value;
    }

    struct BooleanSlot {
        bool value;
    }

    struct Bytes32Slot {
        bytes32 value;
    }

    struct Uint256Slot {
        uint256 value;
    }

    struct StringSlot {
        string value;
    }

    struct BytesSlot {
        bytes value;
    }

    /**
     * @dev Returns an `AddressSlot` with member `value` located at `slot`.
     */
    function getAddressSlot(bytes32 slot) internal pure returns (AddressSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `BooleanSlot` with member `value` located at `slot`.
     */
    function getBooleanSlot(bytes32 slot) internal pure returns (BooleanSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `Bytes32Slot` with member `value` located at `slot`.
     */
    function getBytes32Slot(bytes32 slot) internal pure returns (Bytes32Slot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `Uint256Slot` with member `value` located at `slot`.
     */
    function getUint256Slot(bytes32 slot) internal pure returns (Uint256Slot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `StringSlot` with member `value` located at `slot`.
     */
    function getStringSlot(bytes32 slot) internal pure returns (StringSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `StringSlot` representation of the string storage pointer `store`.
     */
    function getStringSlot(string storage store) internal pure returns (StringSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := store.slot
        }
    }

    /**
     * @dev Returns an `BytesSlot` with member `value` located at `slot`.
     */
    function getBytesSlot(bytes32 slot) internal pure returns (BytesSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `BytesSlot` representation of the bytes storage pointer `store`.
     */
    function getBytesSlot(bytes storage store) internal pure returns (BytesSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := store.slot
        }
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/math/Math.sol)

pragma solidity ^0.8.20;

/**
 * @dev Standard math utilities missing in the Solidity language.
 */
library Math {
    /**
     * @dev Muldiv operation overflow.
     */
    error MathOverflowedMulDiv();

    enum Rounding {
        Floor, // Toward negative infinity
        Ceil, // Toward positive infinity
        Trunc, // Toward zero
        Expand // Away from zero
    }

    /**
     * @dev Returns the addition of two unsigned integers, with an overflow flag.
     */
    function tryAdd(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            uint256 c = a + b;
            if (c < a) return (false, 0);
            return (true, c);
        }
    }

    /**
     * @dev Returns the subtraction of two unsigned integers, with an overflow flag.
     */
    function trySub(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            if (b > a) return (false, 0);
            return (true, a - b);
        }
    }

    /**
     * @dev Returns the multiplication of two unsigned integers, with an overflow flag.
     */
    function tryMul(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            // Gas optimization: this is cheaper than requiring 'a' not being zero, but the
            // benefit is lost if 'b' is also tested.
            // See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522
            if (a == 0) return (true, 0);
            uint256 c = a * b;
            if (c / a != b) return (false, 0);
            return (true, c);
        }
    }

    /**
     * @dev Returns the division of two unsigned integers, with a division by zero flag.
     */
    function tryDiv(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            if (b == 0) return (false, 0);
            return (true, a / b);
        }
    }

    /**
     * @dev Returns the remainder of dividing two unsigned integers, with a division by zero flag.
     */
    function tryMod(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            if (b == 0) return (false, 0);
            return (true, a % b);
        }
    }

    /**
     * @dev Returns the largest of two numbers.
     */
    function max(uint256 a, uint256 b) internal pure returns (uint256) {
        return a > b ? a : b;
    }

    /**
     * @dev Returns the smallest of two numbers.
     */
    function min(uint256 a, uint256 b) internal pure returns (uint256) {
        return a < b ? a : b;
    }

    /**
     * @dev Returns the average of two numbers. The result is rounded towards
     * zero.
     */
    function average(uint256 a, uint256 b) internal pure returns (uint256) {
        // (a + b) / 2 can overflow.
        return (a & b) + (a ^ b) / 2;
    }

    /**
     * @dev Returns the ceiling of the division of two numbers.
     *
     * This differs from standard division with `/` in that it rounds towards infinity instead
     * of rounding towards zero.
     */
    function ceilDiv(uint256 a, uint256 b) internal pure returns (uint256) {
        if (b == 0) {
            // Guarantee the same behavior as in a regular Solidity division.
            return a / b;
        }

        // (a + b - 1) / b can overflow on addition, so we distribute.
        return a == 0 ? 0 : (a - 1) / b + 1;
    }

    /**
     * @notice Calculates floor(x * y / denominator) with full precision. Throws if result overflows a uint256 or
     * denominator == 0.
     * @dev Original credit to Remco Bloemen under MIT license (https://xn--2-umb.com/21/muldiv) with further edits by
     * Uniswap Labs also under MIT license.
     */
    function mulDiv(uint256 x, uint256 y, uint256 denominator) internal pure returns (uint256 result) {
        unchecked {
            // 512-bit multiply [prod1 prod0] = x * y. Compute the product mod 2^256 and mod 2^256 - 1, then use
            // use the Chinese Remainder Theorem to reconstruct the 512 bit result. The result is stored in two 256
            // variables such that product = prod1 * 2^256 + prod0.
            uint256 prod0 = x * y; // Least significant 256 bits of the product
            uint256 prod1; // Most significant 256 bits of the product
            assembly {
                let mm := mulmod(x, y, not(0))
                prod1 := sub(sub(mm, prod0), lt(mm, prod0))
            }

            // Handle non-overflow cases, 256 by 256 division.
            if (prod1 == 0) {
                // Solidity will revert if denominator == 0, unlike the div opcode on its own.
                // The surrounding unchecked block does not change this fact.
                // See https://docs.soliditylang.org/en/latest/control-structures.html#checked-or-unchecked-arithmetic.
                return prod0 / denominator;
            }

            // Make sure the result is less than 2^256. Also prevents denominator == 0.
            if (denominator <= prod1) {
                revert MathOverflowedMulDiv();
            }

            ///////////////////////////////////////////////
            // 512 by 256 division.
            ///////////////////////////////////////////////

            // Make division exact by subtracting the remainder from [prod1 prod0].
            uint256 remainder;
            assembly {
                // Compute remainder using mulmod.
                remainder := mulmod(x, y, denominator)

                // Subtract 256 bit number from 512 bit number.
                prod1 := sub(prod1, gt(remainder, prod0))
                prod0 := sub(prod0, remainder)
            }

            // Factor powers of two out of denominator and compute largest power of two divisor of denominator.
            // Always >= 1. See https://cs.stackexchange.com/q/138556/92363.

            uint256 twos = denominator & (0 - denominator);
            assembly {
                // Divide denominator by twos.
                denominator := div(denominator, twos)

                // Divide [prod1 prod0] by twos.
                prod0 := div(prod0, twos)

                // Flip twos such that it is 2^256 / twos. If twos is zero, then it becomes one.
                twos := add(div(sub(0, twos), twos), 1)
            }

            // Shift in bits from prod1 into prod0.
            prod0 |= prod1 * twos;

            // Invert denominator mod 2^256. Now that denominator is an odd number, it has an inverse modulo 2^256 such
            // that denominator * inv = 1 mod 2^256. Compute the inverse by starting with a seed that is correct for
            // four bits. That is, denominator * inv = 1 mod 2^4.
            uint256 inverse = (3 * denominator) ^ 2;

            // Use the Newton-Raphson iteration to improve the precision. Thanks to Hensel's lifting lemma, this also
            // works in modular arithmetic, doubling the correct bits in each step.
            inverse *= 2 - denominator * inverse; // inverse mod 2^8
            inverse *= 2 - denominator * inverse; // inverse mod 2^16
            inverse *= 2 - denominator * inverse; // inverse mod 2^32
            inverse *= 2 - denominator * inverse; // inverse mod 2^64
            inverse *= 2 - denominator * inverse; // inverse mod 2^128
            inverse *= 2 - denominator * inverse; // inverse mod 2^256

            // Because the division is now exact we can divide by multiplying with the modular inverse of denominator.
            // This will give us the correct result modulo 2^256. Since the preconditions guarantee that the outcome is
            // less than 2^256, this is the final result. We don't need to compute the high bits of the result and prod1
            // is no longer required.
            result = prod0 * inverse;
            return result;
        }
    }

    /**
     * @notice Calculates x * y / denominator with full precision, following the selected rounding direction.
     */
    function mulDiv(uint256 x, uint256 y, uint256 denominator, Rounding rounding) internal pure returns (uint256) {
        uint256 result = mulDiv(x, y, denominator);
        if (unsignedRoundsUp(rounding) && mulmod(x, y, denominator) > 0) {
            result += 1;
        }
        return result;
    }

    /**
     * @dev Returns the square root of a number. If the number is not a perfect square, the value is rounded
     * towards zero.
     *
     * Inspired by Henry S. Warren, Jr.'s "Hacker's Delight" (Chapter 11).
     */
    function sqrt(uint256 a) internal pure returns (uint256) {
        if (a == 0) {
            return 0;
        }

        // For our first guess, we get the biggest power of 2 which is smaller than the square root of the target.
        //
        // We know that the "msb" (most significant bit) of our target number `a` is a power of 2 such that we have
        // `msb(a) <= a < 2*msb(a)`. This value can be written `msb(a)=2**k` with `k=log2(a)`.
        //
        // This can be rewritten `2**log2(a) <= a < 2**(log2(a) + 1)`
        // → `sqrt(2**k) <= sqrt(a) < sqrt(2**(k+1))`
        // → `2**(k/2) <= sqrt(a) < 2**((k+1)/2) <= 2**(k/2 + 1)`
        //
        // Consequently, `2**(log2(a) / 2)` is a good first approximation of `sqrt(a)` with at least 1 correct bit.
        uint256 result = 1 << (log2(a) >> 1);

        // At this point `result` is an estimation with one bit of precision. We know the true value is a uint128,
        // since it is the square root of a uint256. Newton's method converges quadratically (precision doubles at
        // every iteration). We thus need at most 7 iteration to turn our partial result with one bit of precision
        // into the expected uint128 result.
        unchecked {
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            return min(result, a / result);
        }
    }

    /**
     * @notice Calculates sqrt(a), following the selected rounding direction.
     */
    function sqrt(uint256 a, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = sqrt(a);
            return result + (unsignedRoundsUp(rounding) && result * result < a ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 2 of a positive value rounded towards zero.
     * Returns 0 if given 0.
     */
    function log2(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >> 128 > 0) {
                value >>= 128;
                result += 128;
            }
            if (value >> 64 > 0) {
                value >>= 64;
                result += 64;
            }
            if (value >> 32 > 0) {
                value >>= 32;
                result += 32;
            }
            if (value >> 16 > 0) {
                value >>= 16;
                result += 16;
            }
            if (value >> 8 > 0) {
                value >>= 8;
                result += 8;
            }
            if (value >> 4 > 0) {
                value >>= 4;
                result += 4;
            }
            if (value >> 2 > 0) {
                value >>= 2;
                result += 2;
            }
            if (value >> 1 > 0) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 2, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log2(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log2(value);
            return result + (unsignedRoundsUp(rounding) && 1 << result < value ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 10 of a positive value rounded towards zero.
     * Returns 0 if given 0.
     */
    function log10(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >= 10 ** 64) {
                value /= 10 ** 64;
                result += 64;
            }
            if (value >= 10 ** 32) {
                value /= 10 ** 32;
                result += 32;
            }
            if (value >= 10 ** 16) {
                value /= 10 ** 16;
                result += 16;
            }
            if (value >= 10 ** 8) {
                value /= 10 ** 8;
                result += 8;
            }
            if (value >= 10 ** 4) {
                value /= 10 ** 4;
                result += 4;
            }
            if (value >= 10 ** 2) {
                value /= 10 ** 2;
                result += 2;
            }
            if (value >= 10 ** 1) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 10, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log10(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log10(value);
            return result + (unsignedRoundsUp(rounding) && 10 ** result < value ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 256 of a positive value rounded towards zero.
     * Returns 0 if given 0.
     *
     * Adding one to the result gives the number of pairs of hex symbols needed to represent `value` as a hex string.
     */
    function log256(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >> 128 > 0) {
                value >>= 128;
                result += 16;
            }
            if (value >> 64 > 0) {
                value >>= 64;
                result += 8;
            }
            if (value >> 32 > 0) {
                value >>= 32;
                result += 4;
            }
            if (value >> 16 > 0) {
                value >>= 16;
                result += 2;
            }
            if (value >> 8 > 0) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 256, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log256(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log256(value);
            return result + (unsignedRoundsUp(rounding) && 1 << (result << 3) < value ? 1 : 0);
        }
    }

    /**
     * @dev Returns whether a provided rounding mode is considered rounding up for unsigned integers.
     */
    function unsignedRoundsUp(Rounding rounding) internal pure returns (bool) {
        return uint8(rounding) % 2 == 1;
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/math/SignedMath.sol)

pragma solidity ^0.8.20;

/**
 * @dev Standard signed math utilities missing in the Solidity language.
 */
library SignedMath {
    /**
     * @dev Returns the largest of two signed numbers.
     */
    function max(int256 a, int256 b) internal pure returns (int256) {
        return a > b ? a : b;
    }

    /**
     * @dev Returns the smallest of two signed numbers.
     */
    function min(int256 a, int256 b) internal pure returns (int256) {
        return a < b ? a : b;
    }

    /**
     * @dev Returns the average of two signed numbers without overflow.
     * The result is rounded towards zero.
     */
    function average(int256 a, int256 b) internal pure returns (int256) {
        // Formula from the book "Hacker's Delight"
        int256 x = (a & b) + ((a ^ b) >> 1);
        return x + (int256(uint256(x) >> 255) & (a ^ b));
    }

    /**
     * @dev Returns the absolute unsigned value of a signed value.
     */
    function abs(int256 n) internal pure returns (uint256) {
        unchecked {
            // must be unchecked in order to support `n = type(int256).min`
            return uint256(n >= 0 ? n : -n);
        }
    }
}

{
  "remappings": [
    "@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/",
    "ds-test/=lib/openzeppelin-contracts/lib/forge-std/lib/ds-test/src/",
    "erc4626-tests/=lib/openzeppelin-contracts/lib/erc4626-tests/",
    "forge-std/=lib/forge-std/src/",
    "openzeppelin-contracts/=lib/openzeppelin-contracts/"
  ],
  "optimizer": {
    "enabled": true,
    "runs": 10000
  },
  "metadata": {
    "useLiteralContent": false,
    "bytecodeHash": "ipfs",
    "appendCBOR": true
  },
  "outputSelection": {
    "*": {
      "*": [
        "evm.bytecode",
        "evm.deployedBytecode",
        "devdoc",
        "userdoc",
        "metadata",
        "abi"
      ]
    }
  },
  "evmVersion": "paris",
  "viaIR": true,
  "libraries": {}
}

• No Contract Security Audit Submitted- Submit Audit Here

[{"inputs":[{"internalType":"string","name":"name","type":"string"},{"internalType":"string","name":"symbol","type":"string"},{"internalType":"uint256","name":"initialSupply","type":"uint256"},{"internalType":"uint256","name":"mintStartYear_","type":"uint256"},{"internalType":"uint256","name":"initialInflationRate_","type":"uint256"},{"internalType":"uint256","name":"inflationRateDecay_","type":"uint256"}],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[],"name":"ECDSAInvalidSignature","type":"error"},{"inputs":[{"internalType":"uint256","name":"length","type":"uint256"}],"name":"ECDSAInvalidSignatureLength","type":"error"},{"inputs":[{"internalType":"bytes32","name":"s","type":"bytes32"}],"name":"ECDSAInvalidSignatureS","type":"error"},{"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"allowance","type":"uint256"},{"internalType":"uint256","name":"needed","type":"uint256"}],"name":"ERC20InsufficientAllowance","type":"error"},{"inputs":[{"internalType":"address","name":"sender","type":"address"},{"internalType":"uint256","name":"balance","type":"uint256"},{"internalType":"uint256","name":"needed","type":"uint256"}],"name":"ERC20InsufficientBalance","type":"error"},{"inputs":[{"internalType":"address","name":"approver","type":"address"}],"name":"ERC20InvalidApprover","type":"error"},{"inputs":[{"internalType":"address","name":"receiver","type":"address"}],"name":"ERC20InvalidReceiver","type":"error"},{"inputs":[{"internalType":"address","name":"sender","type":"address"}],"name":"ERC20InvalidSender","type":"error"},{"inputs":[{"internalType":"address","name":"spender","type":"address"}],"name":"ERC20InvalidSpender","type":"error"},{"inputs":[{"internalType":"uint256","name":"deadline","type":"uint256"}],"name":"ERC2612ExpiredSignature","type":"error"},{"inputs":[{"internalType":"address","name":"signer","type":"address"},{"internalType":"address","name":"owner","type":"address"}],"name":"ERC2612InvalidSigner","type":"error"},{"inputs":[],"name":"InflationDecayRateTooLow","type":"error"},{"inputs":[{"internalType":"address","name":"account","type":"address"},{"internalType":"uint256","name":"currentNonce","type":"uint256"}],"name":"InvalidAccountNonce","type":"error"},{"inputs":[],"name":"InvalidShortString","type":"error"},{"inputs":[],"name":"MintAlreadyCompleted","type":"error"},{"inputs":[],"name":"MintDisabled","type":"error"},{"inputs":[],"name":"MintInFuture","type":"error"},{"inputs":[],"name":"MintInPast","type":"error"},{"inputs":[{"internalType":"uint256","name":"year","type":"uint256"}],"name":"MintMissing","type":"error"},{"inputs":[{"internalType":"address","name":"owner","type":"address"}],"name":"OwnableInvalidOwner","type":"error"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"OwnableUnauthorizedAccount","type":"error"},{"inputs":[],"name":"StakingBridgeAlreadySet","type":"error"},{"inputs":[{"internalType":"uint256","name":"amountStaked","type":"uint256"},{"internalType":"uint256","name":"maxStake","type":"uint256"}],"name":"StakingRateExceeded","type":"error"},{"inputs":[{"internalType":"string","name":"str","type":"string"}],"name":"StringTooLong","type":"error"},{"inputs":[],"name":"TransfersDisabled","type":"error"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"owner","type":"address"},{"indexed":true,"internalType":"address","name":"spender","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"Approval","type":"event"},{"anonymous":false,"inputs":[],"name":"EIP712DomainChanged","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"newRate","type":"uint256"}],"name":"InflationDecayRateChanged","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"recipient","type":"address"},{"indexed":false,"internalType":"uint256","name":"amount","type":"uint256"}],"name":"IssueNeb","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"year","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"amount","type":"uint256"}],"name":"MintCompleted","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"bool","name":"enabled","type":"bool"}],"name":"MintEnabled","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"previousOwner","type":"address"},{"indexed":true,"internalType":"address","name":"newOwner","type":"address"}],"name":"OwnershipTransferred","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"ethKey","type":"address"},{"indexed":true,"internalType":"bytes32","name":"nebulaPublicKey","type":"bytes32"}],"name":"RegisterNebulaKey","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"stakingBridge","type":"address"}],"name":"StakingBridgeSet","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"from","type":"address"},{"indexed":true,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"Transfer","type":"event"},{"anonymous":false,"inputs":[],"name":"TransfersEnabled","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"addr","type":"address"},{"indexed":false,"internalType":"bool","name":"unlocked","type":"bool"}],"name":"UnlockAddress","type":"event"},{"inputs":[],"name":"DOMAIN_SEPARATOR","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"addr","type":"address"}],"name":"addUnlockedAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"address","name":"spender","type":"address"}],"name":"allowance","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"}],"name":"approve","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"approveStakingBridge","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"balanceOf","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"year","type":"uint256"}],"name":"completedMints","outputs":[{"internalType":"uint256","name":"amount","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"decimals","outputs":[{"internalType":"uint8","name":"","type":"uint8"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"disableMint","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"eip712Domain","outputs":[{"internalType":"bytes1","name":"fields","type":"bytes1"},{"internalType":"string","name":"name","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"uint256","name":"chainId","type":"uint256"},{"internalType":"address","name":"verifyingContract","type":"address"},{"internalType":"bytes32","name":"salt","type":"bytes32"},{"internalType":"uint256[]","name":"extensions","type":"uint256[]"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"enableMint","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"enableTransfers","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"getYearsSinceInitialMint","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"inflationRateDecay","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"initialInflationRate","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"initialMintTimestamp","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"internalStakedNeb","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"isAddressUnlocked","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"issueTokens","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"mintEnabled","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"year","type":"uint256"}],"name":"mintNewTokens","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"mintStartYear","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"name","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"nebulaKeys","outputs":[{"internalType":"bytes32","name":"nebulaPublicKey","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"}],"name":"nonces","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"owner","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"},{"internalType":"uint256","name":"deadline","type":"uint256"},{"internalType":"uint8","name":"v","type":"uint8"},{"internalType":"bytes32","name":"r","type":"bytes32"},{"internalType":"bytes32","name":"s","type":"bytes32"}],"name":"permit","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes32","name":"nebulaPublicKey","type":"bytes32"}],"name":"registerNebulaKey","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes32","name":"pubKey","type":"bytes32"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"removeStake","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"addr","type":"address"}],"name":"removeUnlockedAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"renounceOwnership","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"revokeStakingBridgeAllowance","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"inflationRateDecay_","type":"uint256"}],"name":"setInflationRateDecay","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"stakingBridgeAddr","type":"address"}],"name":"setStakingBridge","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes32","name":"pubKey","type":"bytes32"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"stake","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"stakingBridge","outputs":[{"internalType":"contract StakingBridge","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"symbol","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"totalSupply","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"to","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"}],"name":"transfer","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"from","type":"address"},{"internalType":"address","name":"to","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"}],"name":"transferFrom","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"newOwner","type":"address"}],"name":"transferOwnership","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"transfersEnabled","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"}]

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

00000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000204fce5e3e25026110000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000001f40000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000c4e6562756c6120546f6b656e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034e45420000000000000000000000000000000000000000000000000000000000

-----Decoded View---------------
Arg [0] : name (string): Nebula Token
Arg [1] : symbol (string): NEB
Arg [2] : initialSupply (uint256): 10000000000000000000000000000
Arg [3] : mintStartYear_ (uint256): 2
Arg [4] : initialInflationRate_ (uint256): 500
Arg [5] : inflationRateDecay_ (uint256): 4

-----Encoded View---------------
10 Constructor Arguments found :
Arg [0] : 00000000000000000000000000000000000000000000000000000000000000c0
Arg [1] : 0000000000000000000000000000000000000000000000000000000000000100
Arg [2] : 0000000000000000000000000000000000000000204fce5e3e25026110000000
Arg [3] : 0000000000000000000000000000000000000000000000000000000000000002
Arg [4] : 00000000000000000000000000000000000000000000000000000000000001f4
Arg [5] : 0000000000000000000000000000000000000000000000000000000000000004
Arg [6] : 000000000000000000000000000000000000000000000000000000000000000c
Arg [7] : 4e6562756c6120546f6b656e0000000000000000000000000000000000000000
Arg [8] : 0000000000000000000000000000000000000000000000000000000000000003
Arg [9] : 4e45420000000000000000000000000000000000000000000000000000000000