APE Price: $1.15 (+5.72%)

Contract

0xaB5ff7E1772971eC22aB80338C4aC3Fa36eCAaE8

Overview

APE Balance

Apechain LogoApechain LogoApechain Logo0 APE

APE Value

$0.00

Multichain Info

No addresses found
Transaction Hash
Method
Block
From
To
0x60a06040629392024-10-17 15:19:3435 days ago1729178374IN
 Contract Creation
0 APE0.1223642125.42069

Parent Transaction Hash Block From To
View All Internal Transactions

Loading...
Loading

Similar Match Source Code
This contract matches the deployed Bytecode of the Source Code for Contract 0xFA9e3a3b...33da26bEd
The constructor portion of the code might be different and could alter the actual behaviour of the contract

Contract Name:
BonusCash

Compiler Version
v0.8.27+commit.40a35a09

Optimization Enabled:
Yes with 10 runs

Other Settings:
paris EvmVersion
File 1 of 36 : BonusCash.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {UUPSUpgradeable} from "@openzeppelin/contracts-upgradeable/proxy/utils/UUPSUpgradeable.sol";
import {AccessControlDefaultAdminRulesUpgradeable} from "@openzeppelin/contracts-upgradeable/access/extensions/AccessControlDefaultAdminRulesUpgradeable.sol";
import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";

import {PVMath} from "../../libraries/PVMath.sol";
import {IBonusCash, ICredits} from "../bonusCash/IBonusCash.sol";
import {IPlaythroughTracker} from "../../game/playthroughTracker/IPlaythroughTracker.sol";
import {ITokenRegistry} from "../../token/tokenRegistry/ITokenRegistry.sol";
import {ITournamentRegistry} from "../../game/tournament/ITournamentRegistry.sol";
import {SignatureValidator} from "../../utils/SignatureValidator.sol";
import {SemiFungibleSoulboundTokenUpgradeable, ISemiFungibleSoulboundTokenUpgradeable} from "../sfst/SemiFungibleSoulboundTokenUpgradeable.sol";

/**
 * @title BonusCash
 *
 * @author Jack Chuma, Niftydude
 *
 * @notice This contract administers Reboot's Bonus Cash system, a strategic tool for game developers to implement partially backed credit offerings.
 *
 * It introduces capital efficiency by setting a minimum backing threshold, recognizing that not all bonus cash will result in net-positive payouts.
 * When players accept a bonus cash offer, it often includes a playthrough requirement.
 * This condition mandates that tickets, linked to the bonus cash via their underlying collateral type (e.g., USDC), remain locked until the player fulfills a predetermined amount of entry fees.
 * For instance, if a player accepts a bonus with 100 USDC-backed credits, the associated tickets become locked and cannot be liquidated until the player has participated in, and paid entry fees for, a specified number of games.
 */
contract BonusCash is
    UUPSUpgradeable,
    AccessControlDefaultAdminRulesUpgradeable,
    SignatureValidator,
    IBonusCash,
    SemiFungibleSoulboundTokenUpgradeable
{
    using PVMath for uint256;
    using SafeERC20 for IERC20;

    bytes32 public constant BONUS_CASH_ROLE = keccak256("BONUS_CASH_ROLE");
    bytes32 public constant SPENDER_ROLE = keccak256("SPENDER_ROLE");

    // Min ratio of bonus cash collateral / (bonus cash total supply * credit ratio)
    uint256 public minCollateralRatio;

    // Counter to track offering IDs
    uint256 public offeringId;

    ICredits public credits;
    IPlaythroughTracker public playthroughTracker;
    ITokenRegistry public tokenRegistry;
    ITournamentRegistry public tournamentRegistry;

    // Governance controlled max allowed playthrough requirement
    uint256 public maxAllowedPlaythrough;

    // offeringId => BonusCashInfo
    mapping(uint256 => BonusCashInfo) offerings;

    // creditId => gameAddress => offeringId
    mapping(address => mapping(address => uint256)) public creditToGameToOfferingId;

    mapping(address account => uint256) public signatureNonce;

    constructor() {
        _disableInitializers();
    }

    function __BonusCash_init(
        address _governor,
        uint256 _minCollateralRatio,
        IPlaythroughTracker _playthroughTracker,
        ITokenRegistry _tokenRegistry,
        ITournamentRegistry _tournamentRegistry,
        uint256 _maxAllowedPlaythrough
    ) public initializer {
        __AccessControlDefaultAdminRules_init(0, _governor);

        minCollateralRatio = _minCollateralRatio;
        playthroughTracker = _playthroughTracker;
        tokenRegistry = _tokenRegistry;
        tournamentRegistry = _tournamentRegistry;
        maxAllowedPlaythrough = _maxAllowedPlaythrough;
    }

    /**
     * @notice Get offering info
     *
     * @param _offeringId ID of Bonus cash offering
     *
     * @return Offering total supply
     * @return Offering collateral token address
     * @return Offering collateral amount
     * @return Offering admin
     * @return Offering invalidated
     * @return Offering active tournament count
     */
    function getOffering(
        uint256 _offeringId
    ) external view returns (uint256, address, uint256, address, bool, uint256, uint256) {
        BonusCashInfo storage _info = offerings[_offeringId];
        return (
            _info.totalSupply,
            _info.creditId,
            _info.collateral,
            _info.admin,
            _info.invalidated,
            _info.activeCount,
            _info.targetEntryPct
        );
    }

    /**
     * @notice Get bonus cash balance structur of player for a specific offering
     *
     * @param _offeringId ID of bonus cash offering
     * @param _player Player wallet address
     */
    function getFullBalance(address _player, uint256 _offeringId) external view returns (uint256, uint256) {
        return (balanceOf(_player, _offeringId), offerings[_offeringId].startingBalance[_player]);
    }

    /**
     * @notice Returns true if game is allowed to use bonus cash offering
     *
     * @param _offeringId ID of bonus cash offering
     * @param _gameAddress Game contract address
     */
    function getGameIncluded(uint256 _offeringId, address _gameAddress) external view returns (bool) {
        return offerings[_offeringId].included[_gameAddress];
    }

    /**
     * @notice Get target % entry to be paid in bonus cash given game + collateral type
     *
     * @param _game Game contract address
     * @param _creditId Collateral token address
     */
    function gameTargetEntryPct(address _game, address _creditId) public view returns (uint256) {
        uint256 _offeringId = creditToGameToOfferingId[_creditId][_game];
        return offerings[_offeringId].targetEntryPct;
    }

    /**
     * @notice Get bonus cash balance of player for a game + collateral type combination
     *
     * @param _game Game contract address
     * @param _creditId Collateral token address
     * @param _player Player wallet address
     */
    function gameBalanceOf(address _game, address _creditId, address _player) public view returns (uint256) {
        uint256 _offeringId = creditToGameToOfferingId[_creditId][_game];
        return balanceOf(_player, _offeringId);
    }

    /**
     * @notice Returns amount of bonus cash spent on a currently active tournament
     *
     * @param _offeringId ID of bonus cash offering
     * @param _game Game contract address
     * @param _tournamentId ID of game tournament
     */
    function pendingSupply(uint256 _offeringId, address _game, uint256 _tournamentId) external view returns (uint256) {
        return offerings[_offeringId].pendingSupply[_game][_tournamentId];
    }

    /**
     * @notice Returns true if specified tournament is active
     *
     * @param _offeringId ID of bonus cash offering
     * @param _game Game contract address
     * @param _tournamentId ID of game tournament
     */
    function isActive(uint256 _offeringId, address _game, uint256 _tournamentId) external view returns (bool) {
        return offerings[_offeringId].isActive[_game][_tournamentId];
    }

    /**
     * @notice Governance function to set the credits contract
     *
     * @param _credits Credits contract address
     */
    function setCredits(ICredits _credits) external onlyRole(GOVERNOR_ROLE) {
        credits = _credits;
        emit CreditsSet(_credits);
    }

    /**
     * @notice Governance function to set the minimum collateral ratio
     *
     * @param _minCollateralRatio Minimum collateral ratio
     */
    function setMinCollateralRatio(uint256 _minCollateralRatio) external onlyRole(GOVERNOR_ROLE) {
        require(_minCollateralRatio > 0, "BC: InvalidRatio");
        minCollateralRatio = _minCollateralRatio;
        emit MinCollateralRatioSet(_minCollateralRatio);
    }

    /**
     * @notice Governance function to set max allowed playthrough amount
     *
     * @param _playthrough Max allowed playthrough setting
     */
    function setMaxAllowedPlaythrough(uint256 _playthrough) external onlyRole(GOVERNOR_ROLE) {
        require(_playthrough > 0, "BC: InvalidMaxPlaythrough");
        maxAllowedPlaythrough = _playthrough;
        emit MaxAllowedPlaythroughSet(_playthrough);
    }

    /**
     * @notice Create a new bonus cash offering
     *
     * @param _creditId Collateral token address
     * @param _collateral Collateral amount
     * @param _gameAddresses Array of game contract addresses considered valid for offering
     *
     * @return _offeringId ID of new bonus cash offering
     */
    function createOffering(
        address _creditId,
        uint256 _collateral,
        uint256 _targetEntryPct,
        address[] calldata _gameAddresses
    ) external returns (uint256 _offeringId) {
        unchecked {
            _offeringId += ++offeringId;
        }

        BonusCashInfo storage _offering = offerings[_offeringId];

        require(tokenRegistry.isApproved(_creditId), "BC: InvalidCreditId");
        require(_collateral > 0, "BC: InvalidCollateral");
        require(_targetEntryPct <= 1e18, "BC: InvalidTargetEntryPct");

        _offering.creditId = _creditId;
        _offering.collateral = _collateral;
        _offering.targetEntryPct = _targetEntryPct;
        _offering.admin = msg.sender;
        _offering.creditRatio = credits.tokenPerCreditRatio(_creditId);

        for (uint256 i; i < _gameAddresses.length; i++) {
            _addGameToOffering(_offering, _offeringId, _gameAddresses[i]);
        }

        emit OfferingUpdated(
            _offeringId,
            _creditId,
            _collateral,
            _targetEntryPct,
            _gameAddresses,
            new address[](0),
            msg.sender
        );

        IERC20(_creditId).safeTransferFrom(msg.sender, address(this), _collateral);
    }

    /**
     * @notice Update an existing bonus cash offering
     *
     * @param _offeringId ID of bonus cash offering
     * @param _collateral Collateral amount
     * @param _gamesToAdd Array of game contract addresses to add to offering
     * @param _gamesToRemove Array of game contract addresses to remove from offering
     * @param _admin New admin address
     */
    function updateOffering(
        uint256 _offeringId,
        uint256 _collateral,
        uint256 _targetEntryPct,
        address[] calldata _gamesToAdd,
        address[] calldata _gamesToRemove,
        address _admin
    ) external {
        BonusCashInfo storage _offering = _requireIsAdmin(_offeringId);

        require(!_offering.invalidated, "BC: Invalidated");

        if (_targetEntryPct <= 1e18) {
            _offering.targetEntryPct = _targetEntryPct;
        }

        for (uint256 i; i < _gamesToAdd.length; i++) {
            _addGameToOffering(_offering, _offeringId, _gamesToAdd[i]);
        }

        for (uint256 i; i < _gamesToRemove.length; i++) {
            _removeGameFromOffering(_offering, _gamesToRemove[i]);
        }

        if (_admin != address(0)) {
            _offering.admin = _admin;
        }

        _offering.collateral += _collateral;

        emit OfferingUpdated(
            _offeringId,
            _offering.creditId,
            _offering.collateral,
            _offering.targetEntryPct,
            _gamesToAdd,
            _gamesToRemove,
            _admin
        );

        if (_collateral > 0) {
            IERC20(_offering.creditId).safeTransferFrom(msg.sender, address(this), _collateral);
        }
    }

    /**
     * @notice Distribute bonus cash to players
     *
     * @dev _offeringId ID of bonus cash offering
     * @dev _players Array of player wallet addresses
     * @dev _amounts Array of bonus cash amounts to distribute
     * @dev _playthroughRequirements Array of playthrough requirement amounts
     * @dev _sigs Array of player signatures
     *
     * @param _distro Distribution struct containing the above
     */
    function distribute(Distribution calldata _distro) external {
        require(_distro.players.length == _distro.amounts.length, "BC: LengthMismatch");
        require(_distro.players.length == _distro.playthroughRequirements.length, "BC: LengthMismatch");
        BonusCashInfo storage _offering = _distribute(_distro);

        require(
            _offering.collateral / _offering.totalSupply.mul(_offering.creditRatio) >= minCollateralRatio,
            "BC: InsufficientCollateral"
        );

        emit BonusCashDistributed(_distro.offeringId, _distro.players, _distro.amounts);

        playthroughTracker.addRequirements(
            _distro.players,
            _distro.playthroughRequirements,
            _offering.creditId,
            _distro.offeringId
        );
    }

    function spendRequiredAmount(
        address _account,
        address _token,
        uint256 _ticketBalance,
        uint256 _creditBalance,
        uint256 _tournamentId,
        uint256 _fee
    ) external returns (uint256) {
        uint256 _bonusCashRequired = getBonusCashForEntry(_account, _token, _ticketBalance, _creditBalance, _fee);

        if (_bonusCashRequired > 0) {
            spend(_token, msg.sender, _tournamentId, _account, _bonusCashRequired);
        }

        return _fee - _bonusCashRequired;
    }

    function getBonusCashForEntry(
        address _account,
        address _token,
        uint256 _ticketBalance,
        uint256 _creditBalance,
        uint256 _entryFee
    ) public view returns (uint256 _bonusCashToConsume) {
        uint256 _bonusCashBalance = gameBalanceOf(msg.sender, _token, _account);
        uint256 _targetBonusAmt = _entryFee.mul(gameTargetEntryPct(msg.sender, _token));

        // if ticket/credit balance including target amount insufficient, ignore target
        // and consume up to the total bonus cash balance. otherwise only consume up to the target amount
        if (_entryFee > _targetBonusAmt + _ticketBalance + _creditBalance) {
            _bonusCashToConsume = _min(_bonusCashBalance, _entryFee - _ticketBalance - _creditBalance);
        } else {
            _bonusCashToConsume = _min(_bonusCashBalance, _targetBonusAmt);
        }
    }

    /**
     * @notice Spend bonus cash - called on tournament entry
     *
     * @param _creditId Collateral token address
     * @param _tournamentId ID of game tournament
     * @param _player Player wallet address
     * @param _amount Bonus cash amount to spend
     */
    function spend(address _creditId, address _game, uint256 _tournamentId, address _player, uint256 _amount) public {
        require(tournamentRegistry.isApproved(msg.sender) || hasRole(SPENDER_ROLE, msg.sender), "BC: NotApproved");

        uint256 _offeringId = creditToGameToOfferingId[_creditId][_game];
        BonusCashInfo storage _offering = offerings[_offeringId];

        require(balanceOf(_player, _offeringId) >= _amount, "BC: InsufficientFunds");

        unchecked {
            _offering.pendingSupply[_game][_tournamentId] += _amount;
            _burn(_player, _offeringId, _amount);
        }

        if (!_offering.isActive[_game][_tournamentId]) {
            require(!_offering.invalidated, "BC: Invalidated");
            _offering.isActive[_game][_tournamentId] = true;
            unchecked {
                _offering.activeCount++;
            }
        }

        emit BonusCashSpent(_offeringId, _tournamentId, _game, _player, _amount);
    }

    /**
     * @notice Send collateral to game - called when game runs out of liquid collateral for payouts
     *
     * @param _creditId Collateral token address
     * @param _tournamentId ID of game tournament
     * @param _amount Collateral amount to send
     */
    function collateralPayout(address _creditId, uint256 _tournamentId, uint256 _amount) external {
        uint256 _offeringId = creditToGameToOfferingId[_creditId][msg.sender];
        BonusCashInfo storage _offering = offerings[_offeringId];

        uint256 _minBalance = _offering.totalSupply.mul(_offering.creditRatio) * minCollateralRatio;

        require(
            _amount <= _offering.collateral && _offering.collateral - _amount >= _minBalance,
            "BC: InsufficientCollateral"
        );

        unchecked {
            _offering.collateral -= _amount;
        }

        emit CollateralSent(_offeringId, _tournamentId, _amount, msg.sender);

        IERC20(_offering.creditId).safeTransfer(msg.sender, _amount);
    }

    /**
     * @notice End tournament - called after tournament payout is sent
     *
     * @param _creditId Collateral token address
     * @param _tournamentId ID of game tournament
     * @param _collateralToReturn Collateral amount to return
     */
    function endTournament(address _creditId, uint256 _tournamentId, uint256 _collateralToReturn) external {
        uint256 _offeringId = creditToGameToOfferingId[_creditId][msg.sender];
        BonusCashInfo storage _offering = offerings[_offeringId];

        if (_offering.isActive[msg.sender][_tournamentId]) {
            _offering.isActive[msg.sender][_tournamentId] = false;

            uint256 _pending = _offering.pendingSupply[msg.sender][_tournamentId];

            delete _offering.pendingSupply[msg.sender][_tournamentId];

            unchecked {
                _offering.activeCount--;
                _offering.totalSupply -= _pending;
                _offering.collateral += _collateralToReturn;
            }

            emit TournamentEnded(msg.sender, _tournamentId);

            if (_collateralToReturn > 0) {
                IERC20(_offering.creditId).safeTransferFrom(msg.sender, address(this), _collateralToReturn);
            }
        }
    }

    /**
     * @notice Invalidate bonus cash offering
     *
     * @param _offeringId ID of bonus cash offering
     */
    function invalidateOffering(uint256 _offeringId) external {
        BonusCashInfo storage _offering = _requireIsAdmin(_offeringId);
        _offering.invalidated = true;
        emit OfferingInvalidated(_offeringId);
    }

    /**
     * @notice Withdraw all collateral from invalidated offering
     *
     * @param _offeringId ID of bonus cash offering
     * @param _to Address to send collateral to
     */
    function withdrawAllCollateral(uint256 _offeringId, address _to) external {
        BonusCashInfo storage _offering = _requireIsAdmin(_offeringId);

        require(_offering.invalidated, "BC: NotInvalidated");
        require(_offering.activeCount == 0, "BC: ActiveTournaments");
        require(_offering.collateral > 0, "BC: NoCollateral");

        uint256 _amount = _offering.collateral;

        _offering.collateral = 0;
        emit CollateralWithdrawn(_offeringId, _to, _amount);

        IERC20(_offering.creditId).safeTransfer(_to, _amount);
    }

    /**
     * @notice Undo outstanding playthrough requirements on player accounts for an invalidated offering.
     *
     * @param _offeringId ID of bonus cash offering
     * @param _players Array of player wallet addresses
     */
    function undoPlaythrough(uint256 _offeringId, address[] calldata _players) external {
        BonusCashInfo storage _offering = offerings[_offeringId];

        require(_offering.invalidated, "BC: NotInvalidated");
        require(_offering.activeCount == 0, "BC: ActiveTournaments");

        for (uint256 i; i < _players.length; i++) {
            delete _offering.startingBalance[_players[i]];
            _burn(_players[i], _offeringId, balanceOf(_players[i], _offeringId));
        }

        emit PlaythroughUndone(_offeringId, _players);

        playthroughTracker.undoOfferings(_offeringId, _offering.creditId, _players);
    }

    /**
     * @notice Player function to opt out of a bonus cash offering and undo remaining playthrough requirement
     *
     * @dev The contract expects to take full collateral for any bonus cash the player has spent from this offer
     *
     * @param _offeringId BonusCash Offering ID
     * @param _sig Signature from offering admin approving collateral return
     */
    function optOut(uint256 _offeringId, bytes calldata _sig) external {
        BonusCashInfo storage _offering = offerings[_offeringId];
        uint256 _balance = balanceOf(msg.sender, _offeringId);

        require(_balance > 0, "BC: ZeroBalance");

        unchecked {
            _offering.totalSupply -= _balance;
        }

        uint256 _balanceSpent = _offering.startingBalance[msg.sender] - _balance;

        _offering.startingBalance[msg.sender] = 0;
        _burn(msg.sender, _offeringId, _balance);

        emit PlayerOptedOut(msg.sender, _offeringId);

        if (_balanceSpent > 0) {
            unchecked {
                uint256 _nonce = signatureNonce[_offering.admin]++;
                require(verify(msg.sender, _offeringId, _offering.admin, _nonce, _sig), "BC: InvalidSig");
            }
            uint256 _collateralNeeded = _balanceSpent * _offering.creditRatio;
            IERC20(_offering.creditId).safeTransferFrom(msg.sender, address(this), _collateralNeeded);
            _offering.collateral += _collateralNeeded;
        }

        playthroughTracker.undoOffering(_offeringId, _offering.creditId, msg.sender);
    }

    function supportsInterface(
        bytes4 interfaceId
    )
        public
        view
        override(SemiFungibleSoulboundTokenUpgradeable, AccessControlDefaultAdminRulesUpgradeable)
        returns (bool)
    {
        return interfaceId == type(IAccessControl).interfaceId || super.supportsInterface(interfaceId);
    }

    function _addGameToOffering(BonusCashInfo storage _offering, uint256 _offeringId, address _game) private {
        require(IAccessControl(_game).hasRole(BONUS_CASH_ROLE, msg.sender), "BC: NotAuthorized");
        require(creditToGameToOfferingId[_offering.creditId][_game] == 0, "BC: AlreadyAdded");

        _offering.included[_game] = true;
        creditToGameToOfferingId[_offering.creditId][_game] = _offeringId;
    }

    function _removeGameFromOffering(BonusCashInfo storage _offering, address _game) private {
        _offering.included[_game] = false;
        creditToGameToOfferingId[_offering.creditId][_game] = 0;
    }

    function _requireIsAdmin(uint256 _offeringId) private view returns (BonusCashInfo storage _offering) {
        _offering = offerings[_offeringId];
        require(_offering.admin == msg.sender, "BC: NotAuthorized");
    }

    function _distribute(Distribution calldata _distro) private returns (BonusCashInfo storage _offering) {
        _offering = _requireIsAdmin(_distro.offeringId);

        require(!_offering.invalidated, "BC: Invalidated");

        for (uint256 i; i < _distro.players.length; i++) {
            _mint(_distro.players[i], _distro.offeringId, _distro.amounts[i]);
            _offering.startingBalance[_distro.players[i]] += uint128(_distro.amounts[i]);
            _offering.totalSupply += _distro.amounts[i];

            require(_distro.playthroughRequirements[i] < maxAllowedPlaythrough, "BC: InvalidPlaythrough");
            if (_distro.playthroughRequirements[i] > 0) {
                _hasPermission(
                    _distro.players[i],
                    _distro.amounts[i],
                    _distro.playthroughRequirements[i],
                    _offering.creditId,
                    _distro.sigs[i]
                );
            }
        }
    }

    function _hasPermission(
        address _account,
        uint256 _amount,
        uint256 _playthrough,
        address _token,
        bytes calldata _sig
    ) private {
        unchecked {
            uint256 _nonce = signatureNonce[_account]++;
            require(verify(_account, _amount, _playthrough, _token, _nonce, _sig), "BC: InvalidSig");
        }
    }

    function _min(uint256 a, uint256 b) private pure returns (uint256) {
        return a < b ? a : b;
    }

    function _authorizeUpgrade(address newImplementation) internal override onlyRole(GOVERNOR_ROLE) {}
}

File 2 of 36 : AccessControlUpgradeable.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/AccessControl.sol)

pragma solidity ^0.8.20;

import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";
import {ContextUpgradeable} from "../utils/ContextUpgradeable.sol";
import {ERC165Upgradeable} from "../utils/introspection/ERC165Upgradeable.sol";
import {Initializable} from "../proxy/utils/Initializable.sol";

/**
 * @dev Contract module that allows children to implement role-based access
 * control mechanisms. This is a lightweight version that doesn't allow enumerating role
 * members except through off-chain means by accessing the contract event logs. Some
 * applications may benefit from on-chain enumerability, for those cases see
 * {AccessControlEnumerable}.
 *
 * Roles are referred to by their `bytes32` identifier. These should be exposed
 * in the external API and be unique. The best way to achieve this is by
 * using `public constant` hash digests:
 *
 * ```solidity
 * bytes32 public constant MY_ROLE = keccak256("MY_ROLE");
 * ```
 *
 * Roles can be used to represent a set of permissions. To restrict access to a
 * function call, use {hasRole}:
 *
 * ```solidity
 * function foo() public {
 *     require(hasRole(MY_ROLE, msg.sender));
 *     ...
 * }
 * ```
 *
 * Roles can be granted and revoked dynamically via the {grantRole} and
 * {revokeRole} functions. Each role has an associated admin role, and only
 * accounts that have a role's admin role can call {grantRole} and {revokeRole}.
 *
 * By default, the admin role for all roles is `DEFAULT_ADMIN_ROLE`, which means
 * that only accounts with this role will be able to grant or revoke other
 * roles. More complex role relationships can be created by using
 * {_setRoleAdmin}.
 *
 * WARNING: The `DEFAULT_ADMIN_ROLE` is also its own admin: it has permission to
 * grant and revoke this role. Extra precautions should be taken to secure
 * accounts that have been granted it. We recommend using {AccessControlDefaultAdminRules}
 * to enforce additional security measures for this role.
 */
abstract contract AccessControlUpgradeable is Initializable, ContextUpgradeable, IAccessControl, ERC165Upgradeable {
    struct RoleData {
        mapping(address account => bool) hasRole;
        bytes32 adminRole;
    }

    bytes32 public constant DEFAULT_ADMIN_ROLE = 0x00;


    /// @custom:storage-location erc7201:openzeppelin.storage.AccessControl
    struct AccessControlStorage {
        mapping(bytes32 role => RoleData) _roles;
    }

    // keccak256(abi.encode(uint256(keccak256("openzeppelin.storage.AccessControl")) - 1)) & ~bytes32(uint256(0xff))
    bytes32 private constant AccessControlStorageLocation = 0x02dd7bc7dec4dceedda775e58dd541e08a116c6c53815c0bd028192f7b626800;

    function _getAccessControlStorage() private pure returns (AccessControlStorage storage $) {
        assembly {
            $.slot := AccessControlStorageLocation
        }
    }

    /**
     * @dev Modifier that checks that an account has a specific role. Reverts
     * with an {AccessControlUnauthorizedAccount} error including the required role.
     */
    modifier onlyRole(bytes32 role) {
        _checkRole(role);
        _;
    }

    function __AccessControl_init() internal onlyInitializing {
    }

    function __AccessControl_init_unchained() internal onlyInitializing {
    }
    /**
     * @dev See {IERC165-supportsInterface}.
     */
    function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {
        return interfaceId == type(IAccessControl).interfaceId || super.supportsInterface(interfaceId);
    }

    /**
     * @dev Returns `true` if `account` has been granted `role`.
     */
    function hasRole(bytes32 role, address account) public view virtual returns (bool) {
        AccessControlStorage storage $ = _getAccessControlStorage();
        return $._roles[role].hasRole[account];
    }

    /**
     * @dev Reverts with an {AccessControlUnauthorizedAccount} error if `_msgSender()`
     * is missing `role`. Overriding this function changes the behavior of the {onlyRole} modifier.
     */
    function _checkRole(bytes32 role) internal view virtual {
        _checkRole(role, _msgSender());
    }

    /**
     * @dev Reverts with an {AccessControlUnauthorizedAccount} error if `account`
     * is missing `role`.
     */
    function _checkRole(bytes32 role, address account) internal view virtual {
        if (!hasRole(role, account)) {
            revert AccessControlUnauthorizedAccount(account, role);
        }
    }

    /**
     * @dev Returns the admin role that controls `role`. See {grantRole} and
     * {revokeRole}.
     *
     * To change a role's admin, use {_setRoleAdmin}.
     */
    function getRoleAdmin(bytes32 role) public view virtual returns (bytes32) {
        AccessControlStorage storage $ = _getAccessControlStorage();
        return $._roles[role].adminRole;
    }

    /**
     * @dev Grants `role` to `account`.
     *
     * If `account` had not been already granted `role`, emits a {RoleGranted}
     * event.
     *
     * Requirements:
     *
     * - the caller must have ``role``'s admin role.
     *
     * May emit a {RoleGranted} event.
     */
    function grantRole(bytes32 role, address account) public virtual onlyRole(getRoleAdmin(role)) {
        _grantRole(role, account);
    }

    /**
     * @dev Revokes `role` from `account`.
     *
     * If `account` had been granted `role`, emits a {RoleRevoked} event.
     *
     * Requirements:
     *
     * - the caller must have ``role``'s admin role.
     *
     * May emit a {RoleRevoked} event.
     */
    function revokeRole(bytes32 role, address account) public virtual onlyRole(getRoleAdmin(role)) {
        _revokeRole(role, account);
    }

    /**
     * @dev Revokes `role` from the calling account.
     *
     * Roles are often managed via {grantRole} and {revokeRole}: this function's
     * purpose is to provide a mechanism for accounts to lose their privileges
     * if they are compromised (such as when a trusted device is misplaced).
     *
     * If the calling account had been revoked `role`, emits a {RoleRevoked}
     * event.
     *
     * Requirements:
     *
     * - the caller must be `callerConfirmation`.
     *
     * May emit a {RoleRevoked} event.
     */
    function renounceRole(bytes32 role, address callerConfirmation) public virtual {
        if (callerConfirmation != _msgSender()) {
            revert AccessControlBadConfirmation();
        }

        _revokeRole(role, callerConfirmation);
    }

    /**
     * @dev Sets `adminRole` as ``role``'s admin role.
     *
     * Emits a {RoleAdminChanged} event.
     */
    function _setRoleAdmin(bytes32 role, bytes32 adminRole) internal virtual {
        AccessControlStorage storage $ = _getAccessControlStorage();
        bytes32 previousAdminRole = getRoleAdmin(role);
        $._roles[role].adminRole = adminRole;
        emit RoleAdminChanged(role, previousAdminRole, adminRole);
    }

    /**
     * @dev Attempts to grant `role` to `account` and returns a boolean indicating if `role` was granted.
     *
     * Internal function without access restriction.
     *
     * May emit a {RoleGranted} event.
     */
    function _grantRole(bytes32 role, address account) internal virtual returns (bool) {
        AccessControlStorage storage $ = _getAccessControlStorage();
        if (!hasRole(role, account)) {
            $._roles[role].hasRole[account] = true;
            emit RoleGranted(role, account, _msgSender());
            return true;
        } else {
            return false;
        }
    }

    /**
     * @dev Attempts to revoke `role` to `account` and returns a boolean indicating if `role` was revoked.
     *
     * Internal function without access restriction.
     *
     * May emit a {RoleRevoked} event.
     */
    function _revokeRole(bytes32 role, address account) internal virtual returns (bool) {
        AccessControlStorage storage $ = _getAccessControlStorage();
        if (hasRole(role, account)) {
            $._roles[role].hasRole[account] = false;
            emit RoleRevoked(role, account, _msgSender());
            return true;
        } else {
            return false;
        }
    }
}

File 3 of 36 : AccessControlDefaultAdminRulesUpgradeable.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/extensions/AccessControlDefaultAdminRules.sol)

pragma solidity ^0.8.20;

import {IAccessControlDefaultAdminRules} from "@openzeppelin/contracts/access/extensions/IAccessControlDefaultAdminRules.sol";
import {AccessControlUpgradeable} from "../AccessControlUpgradeable.sol";
import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";
import {SafeCast} from "@openzeppelin/contracts/utils/math/SafeCast.sol";
import {Math} from "@openzeppelin/contracts/utils/math/Math.sol";
import {IERC5313} from "@openzeppelin/contracts/interfaces/IERC5313.sol";
import {Initializable} from "../../proxy/utils/Initializable.sol";

/**
 * @dev Extension of {AccessControl} that allows specifying special rules to manage
 * the `DEFAULT_ADMIN_ROLE` holder, which is a sensitive role with special permissions
 * over other roles that may potentially have privileged rights in the system.
 *
 * If a specific role doesn't have an admin role assigned, the holder of the
 * `DEFAULT_ADMIN_ROLE` will have the ability to grant it and revoke it.
 *
 * This contract implements the following risk mitigations on top of {AccessControl}:
 *
 * * Only one account holds the `DEFAULT_ADMIN_ROLE` since deployment until it's potentially renounced.
 * * Enforces a 2-step process to transfer the `DEFAULT_ADMIN_ROLE` to another account.
 * * Enforces a configurable delay between the two steps, with the ability to cancel before the transfer is accepted.
 * * The delay can be changed by scheduling, see {changeDefaultAdminDelay}.
 * * It is not possible to use another role to manage the `DEFAULT_ADMIN_ROLE`.
 *
 * Example usage:
 *
 * ```solidity
 * contract MyToken is AccessControlDefaultAdminRules {
 *   constructor() AccessControlDefaultAdminRules(
 *     3 days,
 *     msg.sender // Explicit initial `DEFAULT_ADMIN_ROLE` holder
 *    ) {}
 * }
 * ```
 */
abstract contract AccessControlDefaultAdminRulesUpgradeable is Initializable, IAccessControlDefaultAdminRules, IERC5313, AccessControlUpgradeable {
    /// @custom:storage-location erc7201:openzeppelin.storage.AccessControlDefaultAdminRules
    struct AccessControlDefaultAdminRulesStorage {
        // pending admin pair read/written together frequently
        address _pendingDefaultAdmin;
        uint48 _pendingDefaultAdminSchedule; // 0 == unset

        uint48 _currentDelay;
        address _currentDefaultAdmin;

        // pending delay pair read/written together frequently
        uint48 _pendingDelay;
        uint48 _pendingDelaySchedule; // 0 == unset
    }

    // keccak256(abi.encode(uint256(keccak256("openzeppelin.storage.AccessControlDefaultAdminRules")) - 1)) & ~bytes32(uint256(0xff))
    bytes32 private constant AccessControlDefaultAdminRulesStorageLocation = 0xeef3dac4538c82c8ace4063ab0acd2d15cdb5883aa1dff7c2673abb3d8698400;

    function _getAccessControlDefaultAdminRulesStorage() private pure returns (AccessControlDefaultAdminRulesStorage storage $) {
        assembly {
            $.slot := AccessControlDefaultAdminRulesStorageLocation
        }
    }

    /**
     * @dev Sets the initial values for {defaultAdminDelay} and {defaultAdmin} address.
     */
    function __AccessControlDefaultAdminRules_init(uint48 initialDelay, address initialDefaultAdmin) internal onlyInitializing {
        __AccessControlDefaultAdminRules_init_unchained(initialDelay, initialDefaultAdmin);
    }

    function __AccessControlDefaultAdminRules_init_unchained(uint48 initialDelay, address initialDefaultAdmin) internal onlyInitializing {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        if (initialDefaultAdmin == address(0)) {
            revert AccessControlInvalidDefaultAdmin(address(0));
        }
        $._currentDelay = initialDelay;
        _grantRole(DEFAULT_ADMIN_ROLE, initialDefaultAdmin);
    }

    /**
     * @dev See {IERC165-supportsInterface}.
     */
    function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {
        return interfaceId == type(IAccessControlDefaultAdminRules).interfaceId || super.supportsInterface(interfaceId);
    }

    /**
     * @dev See {IERC5313-owner}.
     */
    function owner() public view virtual returns (address) {
        return defaultAdmin();
    }

    ///
    /// Override AccessControl role management
    ///

    /**
     * @dev See {AccessControl-grantRole}. Reverts for `DEFAULT_ADMIN_ROLE`.
     */
    function grantRole(bytes32 role, address account) public virtual override(AccessControlUpgradeable, IAccessControl) {
        if (role == DEFAULT_ADMIN_ROLE) {
            revert AccessControlEnforcedDefaultAdminRules();
        }
        super.grantRole(role, account);
    }

    /**
     * @dev See {AccessControl-revokeRole}. Reverts for `DEFAULT_ADMIN_ROLE`.
     */
    function revokeRole(bytes32 role, address account) public virtual override(AccessControlUpgradeable, IAccessControl) {
        if (role == DEFAULT_ADMIN_ROLE) {
            revert AccessControlEnforcedDefaultAdminRules();
        }
        super.revokeRole(role, account);
    }

    /**
     * @dev See {AccessControl-renounceRole}.
     *
     * For the `DEFAULT_ADMIN_ROLE`, it only allows renouncing in two steps by first calling
     * {beginDefaultAdminTransfer} to the `address(0)`, so it's required that the {pendingDefaultAdmin} schedule
     * has also passed when calling this function.
     *
     * After its execution, it will not be possible to call `onlyRole(DEFAULT_ADMIN_ROLE)` functions.
     *
     * NOTE: Renouncing `DEFAULT_ADMIN_ROLE` will leave the contract without a {defaultAdmin},
     * thereby disabling any functionality that is only available for it, and the possibility of reassigning a
     * non-administrated role.
     */
    function renounceRole(bytes32 role, address account) public virtual override(AccessControlUpgradeable, IAccessControl) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        if (role == DEFAULT_ADMIN_ROLE && account == defaultAdmin()) {
            (address newDefaultAdmin, uint48 schedule) = pendingDefaultAdmin();
            if (newDefaultAdmin != address(0) || !_isScheduleSet(schedule) || !_hasSchedulePassed(schedule)) {
                revert AccessControlEnforcedDefaultAdminDelay(schedule);
            }
            delete $._pendingDefaultAdminSchedule;
        }
        super.renounceRole(role, account);
    }

    /**
     * @dev See {AccessControl-_grantRole}.
     *
     * For `DEFAULT_ADMIN_ROLE`, it only allows granting if there isn't already a {defaultAdmin} or if the
     * role has been previously renounced.
     *
     * NOTE: Exposing this function through another mechanism may make the `DEFAULT_ADMIN_ROLE`
     * assignable again. Make sure to guarantee this is the expected behavior in your implementation.
     */
    function _grantRole(bytes32 role, address account) internal virtual override returns (bool) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        if (role == DEFAULT_ADMIN_ROLE) {
            if (defaultAdmin() != address(0)) {
                revert AccessControlEnforcedDefaultAdminRules();
            }
            $._currentDefaultAdmin = account;
        }
        return super._grantRole(role, account);
    }

    /**
     * @dev See {AccessControl-_revokeRole}.
     */
    function _revokeRole(bytes32 role, address account) internal virtual override returns (bool) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        if (role == DEFAULT_ADMIN_ROLE && account == defaultAdmin()) {
            delete $._currentDefaultAdmin;
        }
        return super._revokeRole(role, account);
    }

    /**
     * @dev See {AccessControl-_setRoleAdmin}. Reverts for `DEFAULT_ADMIN_ROLE`.
     */
    function _setRoleAdmin(bytes32 role, bytes32 adminRole) internal virtual override {
        if (role == DEFAULT_ADMIN_ROLE) {
            revert AccessControlEnforcedDefaultAdminRules();
        }
        super._setRoleAdmin(role, adminRole);
    }

    ///
    /// AccessControlDefaultAdminRules accessors
    ///

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function defaultAdmin() public view virtual returns (address) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        return $._currentDefaultAdmin;
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function pendingDefaultAdmin() public view virtual returns (address newAdmin, uint48 schedule) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        return ($._pendingDefaultAdmin, $._pendingDefaultAdminSchedule);
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function defaultAdminDelay() public view virtual returns (uint48) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        uint48 schedule = $._pendingDelaySchedule;
        return (_isScheduleSet(schedule) && _hasSchedulePassed(schedule)) ? $._pendingDelay : $._currentDelay;
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function pendingDefaultAdminDelay() public view virtual returns (uint48 newDelay, uint48 schedule) {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        schedule = $._pendingDelaySchedule;
        return (_isScheduleSet(schedule) && !_hasSchedulePassed(schedule)) ? ($._pendingDelay, schedule) : (0, 0);
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function defaultAdminDelayIncreaseWait() public view virtual returns (uint48) {
        return 5 days;
    }

    ///
    /// AccessControlDefaultAdminRules public and internal setters for defaultAdmin/pendingDefaultAdmin
    ///

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function beginDefaultAdminTransfer(address newAdmin) public virtual onlyRole(DEFAULT_ADMIN_ROLE) {
        _beginDefaultAdminTransfer(newAdmin);
    }

    /**
     * @dev See {beginDefaultAdminTransfer}.
     *
     * Internal function without access restriction.
     */
    function _beginDefaultAdminTransfer(address newAdmin) internal virtual {
        uint48 newSchedule = SafeCast.toUint48(block.timestamp) + defaultAdminDelay();
        _setPendingDefaultAdmin(newAdmin, newSchedule);
        emit DefaultAdminTransferScheduled(newAdmin, newSchedule);
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function cancelDefaultAdminTransfer() public virtual onlyRole(DEFAULT_ADMIN_ROLE) {
        _cancelDefaultAdminTransfer();
    }

    /**
     * @dev See {cancelDefaultAdminTransfer}.
     *
     * Internal function without access restriction.
     */
    function _cancelDefaultAdminTransfer() internal virtual {
        _setPendingDefaultAdmin(address(0), 0);
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function acceptDefaultAdminTransfer() public virtual {
        (address newDefaultAdmin, ) = pendingDefaultAdmin();
        if (_msgSender() != newDefaultAdmin) {
            // Enforce newDefaultAdmin explicit acceptance.
            revert AccessControlInvalidDefaultAdmin(_msgSender());
        }
        _acceptDefaultAdminTransfer();
    }

    /**
     * @dev See {acceptDefaultAdminTransfer}.
     *
     * Internal function without access restriction.
     */
    function _acceptDefaultAdminTransfer() internal virtual {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        (address newAdmin, uint48 schedule) = pendingDefaultAdmin();
        if (!_isScheduleSet(schedule) || !_hasSchedulePassed(schedule)) {
            revert AccessControlEnforcedDefaultAdminDelay(schedule);
        }
        _revokeRole(DEFAULT_ADMIN_ROLE, defaultAdmin());
        _grantRole(DEFAULT_ADMIN_ROLE, newAdmin);
        delete $._pendingDefaultAdmin;
        delete $._pendingDefaultAdminSchedule;
    }

    ///
    /// AccessControlDefaultAdminRules public and internal setters for defaultAdminDelay/pendingDefaultAdminDelay
    ///

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function changeDefaultAdminDelay(uint48 newDelay) public virtual onlyRole(DEFAULT_ADMIN_ROLE) {
        _changeDefaultAdminDelay(newDelay);
    }

    /**
     * @dev See {changeDefaultAdminDelay}.
     *
     * Internal function without access restriction.
     */
    function _changeDefaultAdminDelay(uint48 newDelay) internal virtual {
        uint48 newSchedule = SafeCast.toUint48(block.timestamp) + _delayChangeWait(newDelay);
        _setPendingDelay(newDelay, newSchedule);
        emit DefaultAdminDelayChangeScheduled(newDelay, newSchedule);
    }

    /**
     * @inheritdoc IAccessControlDefaultAdminRules
     */
    function rollbackDefaultAdminDelay() public virtual onlyRole(DEFAULT_ADMIN_ROLE) {
        _rollbackDefaultAdminDelay();
    }

    /**
     * @dev See {rollbackDefaultAdminDelay}.
     *
     * Internal function without access restriction.
     */
    function _rollbackDefaultAdminDelay() internal virtual {
        _setPendingDelay(0, 0);
    }

    /**
     * @dev Returns the amount of seconds to wait after the `newDelay` will
     * become the new {defaultAdminDelay}.
     *
     * The value returned guarantees that if the delay is reduced, it will go into effect
     * after a wait that honors the previously set delay.
     *
     * See {defaultAdminDelayIncreaseWait}.
     */
    function _delayChangeWait(uint48 newDelay) internal view virtual returns (uint48) {
        uint48 currentDelay = defaultAdminDelay();

        // When increasing the delay, we schedule the delay change to occur after a period of "new delay" has passed, up
        // to a maximum given by defaultAdminDelayIncreaseWait, by default 5 days. For example, if increasing from 1 day
        // to 3 days, the new delay will come into effect after 3 days. If increasing from 1 day to 10 days, the new
        // delay will come into effect after 5 days. The 5 day wait period is intended to be able to fix an error like
        // using milliseconds instead of seconds.
        //
        // When decreasing the delay, we wait the difference between "current delay" and "new delay". This guarantees
        // that an admin transfer cannot be made faster than "current delay" at the time the delay change is scheduled.
        // For example, if decreasing from 10 days to 3 days, the new delay will come into effect after 7 days.
        return
            newDelay > currentDelay
                ? uint48(Math.min(newDelay, defaultAdminDelayIncreaseWait())) // no need to safecast, both inputs are uint48
                : currentDelay - newDelay;
    }

    ///
    /// Private setters
    ///

    /**
     * @dev Setter of the tuple for pending admin and its schedule.
     *
     * May emit a DefaultAdminTransferCanceled event.
     */
    function _setPendingDefaultAdmin(address newAdmin, uint48 newSchedule) private {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        (, uint48 oldSchedule) = pendingDefaultAdmin();

        $._pendingDefaultAdmin = newAdmin;
        $._pendingDefaultAdminSchedule = newSchedule;

        // An `oldSchedule` from `pendingDefaultAdmin()` is only set if it hasn't been accepted.
        if (_isScheduleSet(oldSchedule)) {
            // Emit for implicit cancellations when another default admin was scheduled.
            emit DefaultAdminTransferCanceled();
        }
    }

    /**
     * @dev Setter of the tuple for pending delay and its schedule.
     *
     * May emit a DefaultAdminDelayChangeCanceled event.
     */
    function _setPendingDelay(uint48 newDelay, uint48 newSchedule) private {
        AccessControlDefaultAdminRulesStorage storage $ = _getAccessControlDefaultAdminRulesStorage();
        uint48 oldSchedule = $._pendingDelaySchedule;

        if (_isScheduleSet(oldSchedule)) {
            if (_hasSchedulePassed(oldSchedule)) {
                // Materialize a virtual delay
                $._currentDelay = $._pendingDelay;
            } else {
                // Emit for implicit cancellations when another delay was scheduled.
                emit DefaultAdminDelayChangeCanceled();
            }
        }

        $._pendingDelay = newDelay;
        $._pendingDelaySchedule = newSchedule;
    }

    ///
    /// Private helpers
    ///

    /**
     * @dev Defines if an `schedule` is considered set. For consistency purposes.
     */
    function _isScheduleSet(uint48 schedule) private pure returns (bool) {
        return schedule != 0;
    }

    /**
     * @dev Defines if an `schedule` is considered passed. For consistency purposes.
     */
    function _hasSchedulePassed(uint48 schedule) private view returns (bool) {
        return schedule < block.timestamp;
    }
}

File 4 of 36 : Initializable.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (proxy/utils/Initializable.sol)

pragma solidity ^0.8.20;

/**
 * @dev This is a base contract to aid in writing upgradeable contracts, or any kind of contract that will be deployed
 * behind a proxy. Since proxied contracts do not make use of a constructor, it's common to move constructor logic to an
 * external initializer function, usually called `initialize`. It then becomes necessary to protect this initializer
 * function so it can only be called once. The {initializer} modifier provided by this contract will have this effect.
 *
 * The initialization functions use a version number. Once a version number is used, it is consumed and cannot be
 * reused. This mechanism prevents re-execution of each "step" but allows the creation of new initialization steps in
 * case an upgrade adds a module that needs to be initialized.
 *
 * For example:
 *
 * [.hljs-theme-light.nopadding]
 * ```solidity
 * contract MyToken is ERC20Upgradeable {
 *     function initialize() initializer public {
 *         __ERC20_init("MyToken", "MTK");
 *     }
 * }
 *
 * contract MyTokenV2 is MyToken, ERC20PermitUpgradeable {
 *     function initializeV2() reinitializer(2) public {
 *         __ERC20Permit_init("MyToken");
 *     }
 * }
 * ```
 *
 * TIP: To avoid leaving the proxy in an uninitialized state, the initializer function should be called as early as
 * possible by providing the encoded function call as the `_data` argument to {ERC1967Proxy-constructor}.
 *
 * CAUTION: When used with inheritance, manual care must be taken to not invoke a parent initializer twice, or to ensure
 * that all initializers are idempotent. This is not verified automatically as constructors are by Solidity.
 *
 * [CAUTION]
 * ====
 * Avoid leaving a contract uninitialized.
 *
 * An uninitialized contract can be taken over by an attacker. This applies to both a proxy and its implementation
 * contract, which may impact the proxy. To prevent the implementation contract from being used, you should invoke
 * the {_disableInitializers} function in the constructor to automatically lock it when it is deployed:
 *
 * [.hljs-theme-light.nopadding]
 * ```
 * /// @custom:oz-upgrades-unsafe-allow constructor
 * constructor() {
 *     _disableInitializers();
 * }
 * ```
 * ====
 */
abstract contract Initializable {
    /**
     * @dev Storage of the initializable contract.
     *
     * It's implemented on a custom ERC-7201 namespace to reduce the risk of storage collisions
     * when using with upgradeable contracts.
     *
     * @custom:storage-location erc7201:openzeppelin.storage.Initializable
     */
    struct InitializableStorage {
        /**
         * @dev Indicates that the contract has been initialized.
         */
        uint64 _initialized;
        /**
         * @dev Indicates that the contract is in the process of being initialized.
         */
        bool _initializing;
    }

    // keccak256(abi.encode(uint256(keccak256("openzeppelin.storage.Initializable")) - 1)) & ~bytes32(uint256(0xff))
    bytes32 private constant INITIALIZABLE_STORAGE = 0xf0c57e16840df040f15088dc2f81fe391c3923bec73e23a9662efc9c229c6a00;

    /**
     * @dev The contract is already initialized.
     */
    error InvalidInitialization();

    /**
     * @dev The contract is not initializing.
     */
    error NotInitializing();

    /**
     * @dev Triggered when the contract has been initialized or reinitialized.
     */
    event Initialized(uint64 version);

    /**
     * @dev A modifier that defines a protected initializer function that can be invoked at most once. In its scope,
     * `onlyInitializing` functions can be used to initialize parent contracts.
     *
     * Similar to `reinitializer(1)`, except that in the context of a constructor an `initializer` may be invoked any
     * number of times. This behavior in the constructor can be useful during testing and is not expected to be used in
     * production.
     *
     * Emits an {Initialized} event.
     */
    modifier initializer() {
        // solhint-disable-next-line var-name-mixedcase
        InitializableStorage storage $ = _getInitializableStorage();

        // Cache values to avoid duplicated sloads
        bool isTopLevelCall = !$._initializing;
        uint64 initialized = $._initialized;

        // Allowed calls:
        // - initialSetup: the contract is not in the initializing state and no previous version was
        //                 initialized
        // - construction: the contract is initialized at version 1 (no reininitialization) and the
        //                 current contract is just being deployed
        bool initialSetup = initialized == 0 && isTopLevelCall;
        bool construction = initialized == 1 && address(this).code.length == 0;

        if (!initialSetup && !construction) {
            revert InvalidInitialization();
        }
        $._initialized = 1;
        if (isTopLevelCall) {
            $._initializing = true;
        }
        _;
        if (isTopLevelCall) {
            $._initializing = false;
            emit Initialized(1);
        }
    }

    /**
     * @dev A modifier that defines a protected reinitializer function that can be invoked at most once, and only if the
     * contract hasn't been initialized to a greater version before. In its scope, `onlyInitializing` functions can be
     * used to initialize parent contracts.
     *
     * A reinitializer may be used after the original initialization step. This is essential to configure modules that
     * are added through upgrades and that require initialization.
     *
     * When `version` is 1, this modifier is similar to `initializer`, except that functions marked with `reinitializer`
     * cannot be nested. If one is invoked in the context of another, execution will revert.
     *
     * Note that versions can jump in increments greater than 1; this implies that if multiple reinitializers coexist in
     * a contract, executing them in the right order is up to the developer or operator.
     *
     * WARNING: Setting the version to 2**64 - 1 will prevent any future reinitialization.
     *
     * Emits an {Initialized} event.
     */
    modifier reinitializer(uint64 version) {
        // solhint-disable-next-line var-name-mixedcase
        InitializableStorage storage $ = _getInitializableStorage();

        if ($._initializing || $._initialized >= version) {
            revert InvalidInitialization();
        }
        $._initialized = version;
        $._initializing = true;
        _;
        $._initializing = false;
        emit Initialized(version);
    }

    /**
     * @dev Modifier to protect an initialization function so that it can only be invoked by functions with the
     * {initializer} and {reinitializer} modifiers, directly or indirectly.
     */
    modifier onlyInitializing() {
        _checkInitializing();
        _;
    }

    /**
     * @dev Reverts if the contract is not in an initializing state. See {onlyInitializing}.
     */
    function _checkInitializing() internal view virtual {
        if (!_isInitializing()) {
            revert NotInitializing();
        }
    }

    /**
     * @dev Locks the contract, preventing any future reinitialization. This cannot be part of an initializer call.
     * Calling this in the constructor of a contract will prevent that contract from being initialized or reinitialized
     * to any version. It is recommended to use this to lock implementation contracts that are designed to be called
     * through proxies.
     *
     * Emits an {Initialized} event the first time it is successfully executed.
     */
    function _disableInitializers() internal virtual {
        // solhint-disable-next-line var-name-mixedcase
        InitializableStorage storage $ = _getInitializableStorage();

        if ($._initializing) {
            revert InvalidInitialization();
        }
        if ($._initialized != type(uint64).max) {
            $._initialized = type(uint64).max;
            emit Initialized(type(uint64).max);
        }
    }

    /**
     * @dev Returns the highest version that has been initialized. See {reinitializer}.
     */
    function _getInitializedVersion() internal view returns (uint64) {
        return _getInitializableStorage()._initialized;
    }

    /**
     * @dev Returns `true` if the contract is currently initializing. See {onlyInitializing}.
     */
    function _isInitializing() internal view returns (bool) {
        return _getInitializableStorage()._initializing;
    }

    /**
     * @dev Returns a pointer to the storage namespace.
     */
    // solhint-disable-next-line var-name-mixedcase
    function _getInitializableStorage() private pure returns (InitializableStorage storage $) {
        assembly {
            $.slot := INITIALIZABLE_STORAGE
        }
    }
}

File 5 of 36 : UUPSUpgradeable.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (proxy/utils/UUPSUpgradeable.sol)

pragma solidity ^0.8.20;

import {IERC1822Proxiable} from "@openzeppelin/contracts/interfaces/draft-IERC1822.sol";
import {ERC1967Utils} from "@openzeppelin/contracts/proxy/ERC1967/ERC1967Utils.sol";
import {Initializable} from "./Initializable.sol";

/**
 * @dev An upgradeability mechanism designed for UUPS proxies. The functions included here can perform an upgrade of an
 * {ERC1967Proxy}, when this contract is set as the implementation behind such a proxy.
 *
 * A security mechanism ensures that an upgrade does not turn off upgradeability accidentally, although this risk is
 * reinstated if the upgrade retains upgradeability but removes the security mechanism, e.g. by replacing
 * `UUPSUpgradeable` with a custom implementation of upgrades.
 *
 * The {_authorizeUpgrade} function must be overridden to include access restriction to the upgrade mechanism.
 */
abstract contract UUPSUpgradeable is Initializable, IERC1822Proxiable {
    /// @custom:oz-upgrades-unsafe-allow state-variable-immutable
    address private immutable __self = address(this);

    /**
     * @dev The version of the upgrade interface of the contract. If this getter is missing, both `upgradeTo(address)`
     * and `upgradeToAndCall(address,bytes)` are present, and `upgradeTo` must be used if no function should be called,
     * while `upgradeToAndCall` will invoke the `receive` function if the second argument is the empty byte string.
     * If the getter returns `"5.0.0"`, only `upgradeToAndCall(address,bytes)` is present, and the second argument must
     * be the empty byte string if no function should be called, making it impossible to invoke the `receive` function
     * during an upgrade.
     */
    string public constant UPGRADE_INTERFACE_VERSION = "5.0.0";

    /**
     * @dev The call is from an unauthorized context.
     */
    error UUPSUnauthorizedCallContext();

    /**
     * @dev The storage `slot` is unsupported as a UUID.
     */
    error UUPSUnsupportedProxiableUUID(bytes32 slot);

    /**
     * @dev Check that the execution is being performed through a delegatecall call and that the execution context is
     * a proxy contract with an implementation (as defined in ERC1967) pointing to self. This should only be the case
     * for UUPS and transparent proxies that are using the current contract as their implementation. Execution of a
     * function through ERC1167 minimal proxies (clones) would not normally pass this test, but is not guaranteed to
     * fail.
     */
    modifier onlyProxy() {
        _checkProxy();
        _;
    }

    /**
     * @dev Check that the execution is not being performed through a delegate call. This allows a function to be
     * callable on the implementing contract but not through proxies.
     */
    modifier notDelegated() {
        _checkNotDelegated();
        _;
    }

    function __UUPSUpgradeable_init() internal onlyInitializing {
    }

    function __UUPSUpgradeable_init_unchained() internal onlyInitializing {
    }
    /**
     * @dev Implementation of the ERC1822 {proxiableUUID} function. This returns the storage slot used by the
     * implementation. It is used to validate the implementation's compatibility when performing an upgrade.
     *
     * IMPORTANT: A proxy pointing at a proxiable contract should not be considered proxiable itself, because this risks
     * bricking a proxy that upgrades to it, by delegating to itself until out of gas. Thus it is critical that this
     * function revert if invoked through a proxy. This is guaranteed by the `notDelegated` modifier.
     */
    function proxiableUUID() external view virtual notDelegated returns (bytes32) {
        return ERC1967Utils.IMPLEMENTATION_SLOT;
    }

    /**
     * @dev Upgrade the implementation of the proxy to `newImplementation`, and subsequently execute the function call
     * encoded in `data`.
     *
     * Calls {_authorizeUpgrade}.
     *
     * Emits an {Upgraded} event.
     *
     * @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     */
    function upgradeToAndCall(address newImplementation, bytes memory data) public payable virtual onlyProxy {
        _authorizeUpgrade(newImplementation);
        _upgradeToAndCallUUPS(newImplementation, data);
    }

    /**
     * @dev Reverts if the execution is not performed via delegatecall or the execution
     * context is not of a proxy with an ERC1967-compliant implementation pointing to self.
     * See {_onlyProxy}.
     */
    function _checkProxy() internal view virtual {
        if (
            address(this) == __self || // Must be called through delegatecall
            ERC1967Utils.getImplementation() != __self // Must be called through an active proxy
        ) {
            revert UUPSUnauthorizedCallContext();
        }
    }

    /**
     * @dev Reverts if the execution is performed via delegatecall.
     * See {notDelegated}.
     */
    function _checkNotDelegated() internal view virtual {
        if (address(this) != __self) {
            // Must not be called through delegatecall
            revert UUPSUnauthorizedCallContext();
        }
    }

    /**
     * @dev Function that should revert when `msg.sender` is not authorized to upgrade the contract. Called by
     * {upgradeToAndCall}.
     *
     * Normally, this function will use an xref:access.adoc[access control] modifier such as {Ownable-onlyOwner}.
     *
     * ```solidity
     * function _authorizeUpgrade(address) internal onlyOwner {}
     * ```
     */
    function _authorizeUpgrade(address newImplementation) internal virtual;

    /**
     * @dev Performs an implementation upgrade with a security check for UUPS proxies, and additional setup call.
     *
     * As a security check, {proxiableUUID} is invoked in the new implementation, and the return value
     * is expected to be the implementation slot in ERC1967.
     *
     * Emits an {IERC1967-Upgraded} event.
     */
    function _upgradeToAndCallUUPS(address newImplementation, bytes memory data) private {
        try IERC1822Proxiable(newImplementation).proxiableUUID() returns (bytes32 slot) {
            if (slot != ERC1967Utils.IMPLEMENTATION_SLOT) {
                revert UUPSUnsupportedProxiableUUID(slot);
            }
            ERC1967Utils.upgradeToAndCall(newImplementation, data);
        } catch {
            // The implementation is not UUPS
            revert ERC1967Utils.ERC1967InvalidImplementation(newImplementation);
        }
    }
}

File 6 of 36 : ContextUpgradeable.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)

pragma solidity ^0.8.20;
import {Initializable} from "../proxy/utils/Initializable.sol";

/**
 * @dev Provides information about the current execution context, including the
 * sender of the transaction and its data. While these are generally available
 * via msg.sender and msg.data, they should not be accessed in such a direct
 * manner, since when dealing with meta-transactions the account sending and
 * paying for execution may not be the actual sender (as far as an application
 * is concerned).
 *
 * This contract is only required for intermediate, library-like contracts.
 */
abstract contract ContextUpgradeable is Initializable {
    function __Context_init() internal onlyInitializing {
    }

    function __Context_init_unchained() internal onlyInitializing {
    }
    function _msgSender() internal view virtual returns (address) {
        return msg.sender;
    }

    function _msgData() internal view virtual returns (bytes calldata) {
        return msg.data;
    }

    function _contextSuffixLength() internal view virtual returns (uint256) {
        return 0;
    }
}

File 7 of 36 : ERC165Upgradeable.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/introspection/ERC165.sol)

pragma solidity ^0.8.20;

import {IERC165} from "@openzeppelin/contracts/utils/introspection/IERC165.sol";
import {Initializable} from "../../proxy/utils/Initializable.sol";

/**
 * @dev Implementation of the {IERC165} interface.
 *
 * Contracts that want to implement ERC165 should inherit from this contract and override {supportsInterface} to check
 * for the additional interface id that will be supported. For example:
 *
 * ```solidity
 * function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {
 *     return interfaceId == type(MyInterface).interfaceId || super.supportsInterface(interfaceId);
 * }
 * ```
 */
abstract contract ERC165Upgradeable is Initializable, IERC165 {
    function __ERC165_init() internal onlyInitializing {
    }

    function __ERC165_init_unchained() internal onlyInitializing {
    }
    /**
     * @dev See {IERC165-supportsInterface}.
     */
    function supportsInterface(bytes4 interfaceId) public view virtual returns (bool) {
        return interfaceId == type(IERC165).interfaceId;
    }
}

File 8 of 36 : IAccessControlDefaultAdminRules.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/extensions/IAccessControlDefaultAdminRules.sol)

pragma solidity ^0.8.20;

import {IAccessControl} from "../IAccessControl.sol";

/**
 * @dev External interface of AccessControlDefaultAdminRules declared to support ERC165 detection.
 */
interface IAccessControlDefaultAdminRules is IAccessControl {
    /**
     * @dev The new default admin is not a valid default admin.
     */
    error AccessControlInvalidDefaultAdmin(address defaultAdmin);

    /**
     * @dev At least one of the following rules was violated:
     *
     * - The `DEFAULT_ADMIN_ROLE` must only be managed by itself.
     * - The `DEFAULT_ADMIN_ROLE` must only be held by one account at the time.
     * - Any `DEFAULT_ADMIN_ROLE` transfer must be in two delayed steps.
     */
    error AccessControlEnforcedDefaultAdminRules();

    /**
     * @dev The delay for transferring the default admin delay is enforced and
     * the operation must wait until `schedule`.
     *
     * NOTE: `schedule` can be 0 indicating there's no transfer scheduled.
     */
    error AccessControlEnforcedDefaultAdminDelay(uint48 schedule);

    /**
     * @dev Emitted when a {defaultAdmin} transfer is started, setting `newAdmin` as the next
     * address to become the {defaultAdmin} by calling {acceptDefaultAdminTransfer} only after `acceptSchedule`
     * passes.
     */
    event DefaultAdminTransferScheduled(address indexed newAdmin, uint48 acceptSchedule);

    /**
     * @dev Emitted when a {pendingDefaultAdmin} is reset if it was never accepted, regardless of its schedule.
     */
    event DefaultAdminTransferCanceled();

    /**
     * @dev Emitted when a {defaultAdminDelay} change is started, setting `newDelay` as the next
     * delay to be applied between default admin transfer after `effectSchedule` has passed.
     */
    event DefaultAdminDelayChangeScheduled(uint48 newDelay, uint48 effectSchedule);

    /**
     * @dev Emitted when a {pendingDefaultAdminDelay} is reset if its schedule didn't pass.
     */
    event DefaultAdminDelayChangeCanceled();

    /**
     * @dev Returns the address of the current `DEFAULT_ADMIN_ROLE` holder.
     */
    function defaultAdmin() external view returns (address);

    /**
     * @dev Returns a tuple of a `newAdmin` and an accept schedule.
     *
     * After the `schedule` passes, the `newAdmin` will be able to accept the {defaultAdmin} role
     * by calling {acceptDefaultAdminTransfer}, completing the role transfer.
     *
     * A zero value only in `acceptSchedule` indicates no pending admin transfer.
     *
     * NOTE: A zero address `newAdmin` means that {defaultAdmin} is being renounced.
     */
    function pendingDefaultAdmin() external view returns (address newAdmin, uint48 acceptSchedule);

    /**
     * @dev Returns the delay required to schedule the acceptance of a {defaultAdmin} transfer started.
     *
     * This delay will be added to the current timestamp when calling {beginDefaultAdminTransfer} to set
     * the acceptance schedule.
     *
     * NOTE: If a delay change has been scheduled, it will take effect as soon as the schedule passes, making this
     * function returns the new delay. See {changeDefaultAdminDelay}.
     */
    function defaultAdminDelay() external view returns (uint48);

    /**
     * @dev Returns a tuple of `newDelay` and an effect schedule.
     *
     * After the `schedule` passes, the `newDelay` will get into effect immediately for every
     * new {defaultAdmin} transfer started with {beginDefaultAdminTransfer}.
     *
     * A zero value only in `effectSchedule` indicates no pending delay change.
     *
     * NOTE: A zero value only for `newDelay` means that the next {defaultAdminDelay}
     * will be zero after the effect schedule.
     */
    function pendingDefaultAdminDelay() external view returns (uint48 newDelay, uint48 effectSchedule);

    /**
     * @dev Starts a {defaultAdmin} transfer by setting a {pendingDefaultAdmin} scheduled for acceptance
     * after the current timestamp plus a {defaultAdminDelay}.
     *
     * Requirements:
     *
     * - Only can be called by the current {defaultAdmin}.
     *
     * Emits a DefaultAdminRoleChangeStarted event.
     */
    function beginDefaultAdminTransfer(address newAdmin) external;

    /**
     * @dev Cancels a {defaultAdmin} transfer previously started with {beginDefaultAdminTransfer}.
     *
     * A {pendingDefaultAdmin} not yet accepted can also be cancelled with this function.
     *
     * Requirements:
     *
     * - Only can be called by the current {defaultAdmin}.
     *
     * May emit a DefaultAdminTransferCanceled event.
     */
    function cancelDefaultAdminTransfer() external;

    /**
     * @dev Completes a {defaultAdmin} transfer previously started with {beginDefaultAdminTransfer}.
     *
     * After calling the function:
     *
     * - `DEFAULT_ADMIN_ROLE` should be granted to the caller.
     * - `DEFAULT_ADMIN_ROLE` should be revoked from the previous holder.
     * - {pendingDefaultAdmin} should be reset to zero values.
     *
     * Requirements:
     *
     * - Only can be called by the {pendingDefaultAdmin}'s `newAdmin`.
     * - The {pendingDefaultAdmin}'s `acceptSchedule` should've passed.
     */
    function acceptDefaultAdminTransfer() external;

    /**
     * @dev Initiates a {defaultAdminDelay} update by setting a {pendingDefaultAdminDelay} scheduled for getting
     * into effect after the current timestamp plus a {defaultAdminDelay}.
     *
     * This function guarantees that any call to {beginDefaultAdminTransfer} done between the timestamp this
     * method is called and the {pendingDefaultAdminDelay} effect schedule will use the current {defaultAdminDelay}
     * set before calling.
     *
     * The {pendingDefaultAdminDelay}'s effect schedule is defined in a way that waiting until the schedule and then
     * calling {beginDefaultAdminTransfer} with the new delay will take at least the same as another {defaultAdmin}
     * complete transfer (including acceptance).
     *
     * The schedule is designed for two scenarios:
     *
     * - When the delay is changed for a larger one the schedule is `block.timestamp + newDelay` capped by
     * {defaultAdminDelayIncreaseWait}.
     * - When the delay is changed for a shorter one, the schedule is `block.timestamp + (current delay - new delay)`.
     *
     * A {pendingDefaultAdminDelay} that never got into effect will be canceled in favor of a new scheduled change.
     *
     * Requirements:
     *
     * - Only can be called by the current {defaultAdmin}.
     *
     * Emits a DefaultAdminDelayChangeScheduled event and may emit a DefaultAdminDelayChangeCanceled event.
     */
    function changeDefaultAdminDelay(uint48 newDelay) external;

    /**
     * @dev Cancels a scheduled {defaultAdminDelay} change.
     *
     * Requirements:
     *
     * - Only can be called by the current {defaultAdmin}.
     *
     * May emit a DefaultAdminDelayChangeCanceled event.
     */
    function rollbackDefaultAdminDelay() external;

    /**
     * @dev Maximum time in seconds for an increase to {defaultAdminDelay} (that is scheduled using {changeDefaultAdminDelay})
     * to take effect. Default to 5 days.
     *
     * When the {defaultAdminDelay} is scheduled to be increased, it goes into effect after the new delay has passed with
     * the purpose of giving enough time for reverting any accidental change (i.e. using milliseconds instead of seconds)
     * that may lock the contract. However, to avoid excessive schedules, the wait is capped by this function and it can
     * be overrode for a custom {defaultAdminDelay} increase scheduling.
     *
     * IMPORTANT: Make sure to add a reasonable amount of time while overriding this value, otherwise,
     * there's a risk of setting a high new delay that goes into effect almost immediately without the
     * possibility of human intervention in the case of an input error (eg. set milliseconds instead of seconds).
     */
    function defaultAdminDelayIncreaseWait() external view returns (uint48);
}

File 9 of 36 : IAccessControl.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/IAccessControl.sol)

pragma solidity ^0.8.20;

/**
 * @dev External interface of AccessControl declared to support ERC165 detection.
 */
interface IAccessControl {
    /**
     * @dev The `account` is missing a role.
     */
    error AccessControlUnauthorizedAccount(address account, bytes32 neededRole);

    /**
     * @dev The caller of a function is not the expected one.
     *
     * NOTE: Don't confuse with {AccessControlUnauthorizedAccount}.
     */
    error AccessControlBadConfirmation();

    /**
     * @dev Emitted when `newAdminRole` is set as ``role``'s admin role, replacing `previousAdminRole`
     *
     * `DEFAULT_ADMIN_ROLE` is the starting admin for all roles, despite
     * {RoleAdminChanged} not being emitted signaling this.
     */
    event RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole);

    /**
     * @dev Emitted when `account` is granted `role`.
     *
     * `sender` is the account that originated the contract call, an admin role
     * bearer except when using {AccessControl-_setupRole}.
     */
    event RoleGranted(bytes32 indexed role, address indexed account, address indexed sender);

    /**
     * @dev Emitted when `account` is revoked `role`.
     *
     * `sender` is the account that originated the contract call:
     *   - if using `revokeRole`, it is the admin role bearer
     *   - if using `renounceRole`, it is the role bearer (i.e. `account`)
     */
    event RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender);

    /**
     * @dev Returns `true` if `account` has been granted `role`.
     */
    function hasRole(bytes32 role, address account) external view returns (bool);

    /**
     * @dev Returns the admin role that controls `role`. See {grantRole} and
     * {revokeRole}.
     *
     * To change a role's admin, use {AccessControl-_setRoleAdmin}.
     */
    function getRoleAdmin(bytes32 role) external view returns (bytes32);

    /**
     * @dev Grants `role` to `account`.
     *
     * If `account` had not been already granted `role`, emits a {RoleGranted}
     * event.
     *
     * Requirements:
     *
     * - the caller must have ``role``'s admin role.
     */
    function grantRole(bytes32 role, address account) external;

    /**
     * @dev Revokes `role` from `account`.
     *
     * If `account` had been granted `role`, emits a {RoleRevoked} event.
     *
     * Requirements:
     *
     * - the caller must have ``role``'s admin role.
     */
    function revokeRole(bytes32 role, address account) external;

    /**
     * @dev Revokes `role` from the calling account.
     *
     * Roles are often managed via {grantRole} and {revokeRole}: this function's
     * purpose is to provide a mechanism for accounts to lose their privileges
     * if they are compromised (such as when a trusted device is misplaced).
     *
     * If the calling account had been granted `role`, emits a {RoleRevoked}
     * event.
     *
     * Requirements:
     *
     * - the caller must be `callerConfirmation`.
     */
    function renounceRole(bytes32 role, address callerConfirmation) external;
}

File 10 of 36 : draft-IERC1822.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/draft-IERC1822.sol)

pragma solidity ^0.8.20;

/**
 * @dev ERC1822: Universal Upgradeable Proxy Standard (UUPS) documents a method for upgradeability through a simplified
 * proxy whose upgrades are fully controlled by the current implementation.
 */
interface IERC1822Proxiable {
    /**
     * @dev Returns the storage slot that the proxiable contract assumes is being used to store the implementation
     * address.
     *
     * IMPORTANT: A proxy pointing at a proxiable contract should not be considered proxiable itself, because this risks
     * bricking a proxy that upgrades to it, by delegating to itself until out of gas. Thus it is critical that this
     * function revert if invoked through a proxy.
     */
    function proxiableUUID() external view returns (bytes32);
}

File 11 of 36 : IERC5313.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC5313.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface for the Light Contract Ownership Standard.
 *
 * A standardized minimal interface required to identify an account that controls a contract
 */
interface IERC5313 {
    /**
     * @dev Gets the address of the owner.
     */
    function owner() external view returns (address);
}

File 12 of 36 : IBeacon.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (proxy/beacon/IBeacon.sol)

pragma solidity ^0.8.20;

/**
 * @dev This is the interface that {BeaconProxy} expects of its beacon.
 */
interface IBeacon {
    /**
     * @dev Must return an address that can be used as a delegate call target.
     *
     * {UpgradeableBeacon} will check that this address is a contract.
     */
    function implementation() external view returns (address);
}

File 13 of 36 : ERC1967Utils.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (proxy/ERC1967/ERC1967Utils.sol)

pragma solidity ^0.8.20;

import {IBeacon} from "../beacon/IBeacon.sol";
import {Address} from "../../utils/Address.sol";
import {StorageSlot} from "../../utils/StorageSlot.sol";

/**
 * @dev This abstract contract provides getters and event emitting update functions for
 * https://eips.ethereum.org/EIPS/eip-1967[EIP1967] slots.
 */
library ERC1967Utils {
    // We re-declare ERC-1967 events here because they can't be used directly from IERC1967.
    // This will be fixed in Solidity 0.8.21. At that point we should remove these events.
    /**
     * @dev Emitted when the implementation is upgraded.
     */
    event Upgraded(address indexed implementation);

    /**
     * @dev Emitted when the admin account has changed.
     */
    event AdminChanged(address previousAdmin, address newAdmin);

    /**
     * @dev Emitted when the beacon is changed.
     */
    event BeaconUpgraded(address indexed beacon);

    /**
     * @dev Storage slot with the address of the current implementation.
     * This is the keccak-256 hash of "eip1967.proxy.implementation" subtracted by 1.
     */
    // solhint-disable-next-line private-vars-leading-underscore
    bytes32 internal constant IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;

    /**
     * @dev The `implementation` of the proxy is invalid.
     */
    error ERC1967InvalidImplementation(address implementation);

    /**
     * @dev The `admin` of the proxy is invalid.
     */
    error ERC1967InvalidAdmin(address admin);

    /**
     * @dev The `beacon` of the proxy is invalid.
     */
    error ERC1967InvalidBeacon(address beacon);

    /**
     * @dev An upgrade function sees `msg.value > 0` that may be lost.
     */
    error ERC1967NonPayable();

    /**
     * @dev Returns the current implementation address.
     */
    function getImplementation() internal view returns (address) {
        return StorageSlot.getAddressSlot(IMPLEMENTATION_SLOT).value;
    }

    /**
     * @dev Stores a new address in the EIP1967 implementation slot.
     */
    function _setImplementation(address newImplementation) private {
        if (newImplementation.code.length == 0) {
            revert ERC1967InvalidImplementation(newImplementation);
        }
        StorageSlot.getAddressSlot(IMPLEMENTATION_SLOT).value = newImplementation;
    }

    /**
     * @dev Performs implementation upgrade with additional setup call if data is nonempty.
     * This function is payable only if the setup call is performed, otherwise `msg.value` is rejected
     * to avoid stuck value in the contract.
     *
     * Emits an {IERC1967-Upgraded} event.
     */
    function upgradeToAndCall(address newImplementation, bytes memory data) internal {
        _setImplementation(newImplementation);
        emit Upgraded(newImplementation);

        if (data.length > 0) {
            Address.functionDelegateCall(newImplementation, data);
        } else {
            _checkNonPayable();
        }
    }

    /**
     * @dev Storage slot with the admin of the contract.
     * This is the keccak-256 hash of "eip1967.proxy.admin" subtracted by 1.
     */
    // solhint-disable-next-line private-vars-leading-underscore
    bytes32 internal constant ADMIN_SLOT = 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103;

    /**
     * @dev Returns the current admin.
     *
     * TIP: To get this value clients can read directly from the storage slot shown below (specified by EIP1967) using
     * the https://eth.wiki/json-rpc/API#eth_getstorageat[`eth_getStorageAt`] RPC call.
     * `0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103`
     */
    function getAdmin() internal view returns (address) {
        return StorageSlot.getAddressSlot(ADMIN_SLOT).value;
    }

    /**
     * @dev Stores a new address in the EIP1967 admin slot.
     */
    function _setAdmin(address newAdmin) private {
        if (newAdmin == address(0)) {
            revert ERC1967InvalidAdmin(address(0));
        }
        StorageSlot.getAddressSlot(ADMIN_SLOT).value = newAdmin;
    }

    /**
     * @dev Changes the admin of the proxy.
     *
     * Emits an {IERC1967-AdminChanged} event.
     */
    function changeAdmin(address newAdmin) internal {
        emit AdminChanged(getAdmin(), newAdmin);
        _setAdmin(newAdmin);
    }

    /**
     * @dev The storage slot of the UpgradeableBeacon contract which defines the implementation for this proxy.
     * This is the keccak-256 hash of "eip1967.proxy.beacon" subtracted by 1.
     */
    // solhint-disable-next-line private-vars-leading-underscore
    bytes32 internal constant BEACON_SLOT = 0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50;

    /**
     * @dev Returns the current beacon.
     */
    function getBeacon() internal view returns (address) {
        return StorageSlot.getAddressSlot(BEACON_SLOT).value;
    }

    /**
     * @dev Stores a new beacon in the EIP1967 beacon slot.
     */
    function _setBeacon(address newBeacon) private {
        if (newBeacon.code.length == 0) {
            revert ERC1967InvalidBeacon(newBeacon);
        }

        StorageSlot.getAddressSlot(BEACON_SLOT).value = newBeacon;

        address beaconImplementation = IBeacon(newBeacon).implementation();
        if (beaconImplementation.code.length == 0) {
            revert ERC1967InvalidImplementation(beaconImplementation);
        }
    }

    /**
     * @dev Change the beacon and trigger a setup call if data is nonempty.
     * This function is payable only if the setup call is performed, otherwise `msg.value` is rejected
     * to avoid stuck value in the contract.
     *
     * Emits an {IERC1967-BeaconUpgraded} event.
     *
     * CAUTION: Invoking this function has no effect on an instance of {BeaconProxy} since v5, since
     * it uses an immutable beacon without looking at the value of the ERC-1967 beacon slot for
     * efficiency.
     */
    function upgradeBeaconToAndCall(address newBeacon, bytes memory data) internal {
        _setBeacon(newBeacon);
        emit BeaconUpgraded(newBeacon);

        if (data.length > 0) {
            Address.functionDelegateCall(IBeacon(newBeacon).implementation(), data);
        } else {
            _checkNonPayable();
        }
    }

    /**
     * @dev Reverts if `msg.value` is not zero. It can be used to avoid `msg.value` stuck in the contract
     * if an upgrade doesn't perform an initialization call.
     */
    function _checkNonPayable() private {
        if (msg.value > 0) {
            revert ERC1967NonPayable();
        }
    }
}

File 14 of 36 : IERC20Permit.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/extensions/IERC20Permit.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC20 Permit extension allowing approvals to be made via signatures, as defined in
 * https://eips.ethereum.org/EIPS/eip-2612[EIP-2612].
 *
 * Adds the {permit} method, which can be used to change an account's ERC20 allowance (see {IERC20-allowance}) by
 * presenting a message signed by the account. By not relying on {IERC20-approve}, the token holder account doesn't
 * need to send a transaction, and thus is not required to hold Ether at all.
 *
 * ==== Security Considerations
 *
 * There are two important considerations concerning the use of `permit`. The first is that a valid permit signature
 * expresses an allowance, and it should not be assumed to convey additional meaning. In particular, it should not be
 * considered as an intention to spend the allowance in any specific way. The second is that because permits have
 * built-in replay protection and can be submitted by anyone, they can be frontrun. A protocol that uses permits should
 * take this into consideration and allow a `permit` call to fail. Combining these two aspects, a pattern that may be
 * generally recommended is:
 *
 * ```solidity
 * function doThingWithPermit(..., uint256 value, uint256 deadline, uint8 v, bytes32 r, bytes32 s) public {
 *     try token.permit(msg.sender, address(this), value, deadline, v, r, s) {} catch {}
 *     doThing(..., value);
 * }
 *
 * function doThing(..., uint256 value) public {
 *     token.safeTransferFrom(msg.sender, address(this), value);
 *     ...
 * }
 * ```
 *
 * Observe that: 1) `msg.sender` is used as the owner, leaving no ambiguity as to the signer intent, and 2) the use of
 * `try/catch` allows the permit to fail and makes the code tolerant to frontrunning. (See also
 * {SafeERC20-safeTransferFrom}).
 *
 * Additionally, note that smart contract wallets (such as Argent or Safe) are not able to produce permit signatures, so
 * contracts should have entry points that don't rely on permit.
 */
interface IERC20Permit {
    /**
     * @dev Sets `value` as the allowance of `spender` over ``owner``'s tokens,
     * given ``owner``'s signed approval.
     *
     * IMPORTANT: The same issues {IERC20-approve} has related to transaction
     * ordering also apply here.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     * - `deadline` must be a timestamp in the future.
     * - `v`, `r` and `s` must be a valid `secp256k1` signature from `owner`
     * over the EIP712-formatted function arguments.
     * - the signature must use ``owner``'s current nonce (see {nonces}).
     *
     * For more information on the signature format, see the
     * https://eips.ethereum.org/EIPS/eip-2612#specification[relevant EIP
     * section].
     *
     * CAUTION: See Security Considerations above.
     */
    function permit(
        address owner,
        address spender,
        uint256 value,
        uint256 deadline,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) external;

    /**
     * @dev Returns the current nonce for `owner`. This value must be
     * included whenever a signature is generated for {permit}.
     *
     * Every successful call to {permit} increases ``owner``'s nonce by one. This
     * prevents a signature from being used multiple times.
     */
    function nonces(address owner) external view returns (uint256);

    /**
     * @dev Returns the domain separator used in the encoding of the signature for {permit}, as defined by {EIP712}.
     */
    // solhint-disable-next-line func-name-mixedcase
    function DOMAIN_SEPARATOR() external view returns (bytes32);
}

File 15 of 36 : IERC20.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/IERC20.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC20 standard as defined in the EIP.
 */
interface IERC20 {
    /**
     * @dev Emitted when `value` tokens are moved from one account (`from`) to
     * another (`to`).
     *
     * Note that `value` may be zero.
     */
    event Transfer(address indexed from, address indexed to, uint256 value);

    /**
     * @dev Emitted when the allowance of a `spender` for an `owner` is set by
     * a call to {approve}. `value` is the new allowance.
     */
    event Approval(address indexed owner, address indexed spender, uint256 value);

    /**
     * @dev Returns the value of tokens in existence.
     */
    function totalSupply() external view returns (uint256);

    /**
     * @dev Returns the value of tokens owned by `account`.
     */
    function balanceOf(address account) external view returns (uint256);

    /**
     * @dev Moves a `value` amount of tokens from the caller's account to `to`.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transfer(address to, uint256 value) external returns (bool);

    /**
     * @dev Returns the remaining number of tokens that `spender` will be
     * allowed to spend on behalf of `owner` through {transferFrom}. This is
     * zero by default.
     *
     * This value changes when {approve} or {transferFrom} are called.
     */
    function allowance(address owner, address spender) external view returns (uint256);

    /**
     * @dev Sets a `value` amount of tokens as the allowance of `spender` over the
     * caller's tokens.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * IMPORTANT: Beware that changing an allowance with this method brings the risk
     * that someone may use both the old and the new allowance by unfortunate
     * transaction ordering. One possible solution to mitigate this race
     * condition is to first reduce the spender's allowance to 0 and set the
     * desired value afterwards:
     * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
     *
     * Emits an {Approval} event.
     */
    function approve(address spender, uint256 value) external returns (bool);

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to` using the
     * allowance mechanism. `value` is then deducted from the caller's
     * allowance.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transferFrom(address from, address to, uint256 value) external returns (bool);
}

File 16 of 36 : SafeERC20.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (token/ERC20/utils/SafeERC20.sol)

pragma solidity ^0.8.20;

import {IERC20} from "../IERC20.sol";
import {IERC20Permit} from "../extensions/IERC20Permit.sol";
import {Address} from "../../../utils/Address.sol";

/**
 * @title SafeERC20
 * @dev Wrappers around ERC20 operations that throw on failure (when the token
 * contract returns false). Tokens that return no value (and instead revert or
 * throw on failure) are also supported, non-reverting calls are assumed to be
 * successful.
 * To use this library you can add a `using SafeERC20 for IERC20;` statement to your contract,
 * which allows you to call the safe operations as `token.safeTransfer(...)`, etc.
 */
library SafeERC20 {
    using Address for address;

    /**
     * @dev An operation with an ERC20 token failed.
     */
    error SafeERC20FailedOperation(address token);

    /**
     * @dev Indicates a failed `decreaseAllowance` request.
     */
    error SafeERC20FailedDecreaseAllowance(address spender, uint256 currentAllowance, uint256 requestedDecrease);

    /**
     * @dev Transfer `value` amount of `token` from the calling contract to `to`. If `token` returns no value,
     * non-reverting calls are assumed to be successful.
     */
    function safeTransfer(IERC20 token, address to, uint256 value) internal {
        _callOptionalReturn(token, abi.encodeCall(token.transfer, (to, value)));
    }

    /**
     * @dev Transfer `value` amount of `token` from `from` to `to`, spending the approval given by `from` to the
     * calling contract. If `token` returns no value, non-reverting calls are assumed to be successful.
     */
    function safeTransferFrom(IERC20 token, address from, address to, uint256 value) internal {
        _callOptionalReturn(token, abi.encodeCall(token.transferFrom, (from, to, value)));
    }

    /**
     * @dev Increase the calling contract's allowance toward `spender` by `value`. If `token` returns no value,
     * non-reverting calls are assumed to be successful.
     */
    function safeIncreaseAllowance(IERC20 token, address spender, uint256 value) internal {
        uint256 oldAllowance = token.allowance(address(this), spender);
        forceApprove(token, spender, oldAllowance + value);
    }

    /**
     * @dev Decrease the calling contract's allowance toward `spender` by `requestedDecrease`. If `token` returns no
     * value, non-reverting calls are assumed to be successful.
     */
    function safeDecreaseAllowance(IERC20 token, address spender, uint256 requestedDecrease) internal {
        unchecked {
            uint256 currentAllowance = token.allowance(address(this), spender);
            if (currentAllowance < requestedDecrease) {
                revert SafeERC20FailedDecreaseAllowance(spender, currentAllowance, requestedDecrease);
            }
            forceApprove(token, spender, currentAllowance - requestedDecrease);
        }
    }

    /**
     * @dev Set the calling contract's allowance toward `spender` to `value`. If `token` returns no value,
     * non-reverting calls are assumed to be successful. Meant to be used with tokens that require the approval
     * to be set to zero before setting it to a non-zero value, such as USDT.
     */
    function forceApprove(IERC20 token, address spender, uint256 value) internal {
        bytes memory approvalCall = abi.encodeCall(token.approve, (spender, value));

        if (!_callOptionalReturnBool(token, approvalCall)) {
            _callOptionalReturn(token, abi.encodeCall(token.approve, (spender, 0)));
            _callOptionalReturn(token, approvalCall);
        }
    }

    /**
     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
     * on the return value: the return value is optional (but if data is returned, it must not be false).
     * @param token The token targeted by the call.
     * @param data The call data (encoded using abi.encode or one of its variants).
     */
    function _callOptionalReturn(IERC20 token, bytes memory data) private {
        // We need to perform a low level call here, to bypass Solidity's return data size checking mechanism, since
        // we're implementing it ourselves. We use {Address-functionCall} to perform this call, which verifies that
        // the target address contains contract code and also asserts for success in the low-level call.

        bytes memory returndata = address(token).functionCall(data);
        if (returndata.length != 0 && !abi.decode(returndata, (bool))) {
            revert SafeERC20FailedOperation(address(token));
        }
    }

    /**
     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
     * on the return value: the return value is optional (but if data is returned, it must not be false).
     * @param token The token targeted by the call.
     * @param data The call data (encoded using abi.encode or one of its variants).
     *
     * This is a variant of {_callOptionalReturn} that silents catches all reverts and returns a bool instead.
     */
    function _callOptionalReturnBool(IERC20 token, bytes memory data) private returns (bool) {
        // We need to perform a low level call here, to bypass Solidity's return data size checking mechanism, since
        // we're implementing it ourselves. We cannot use {Address-functionCall} here since this should return false
        // and not revert is the subcall reverts.

        (bool success, bytes memory returndata) = address(token).call(data);
        return success && (returndata.length == 0 || abi.decode(returndata, (bool))) && address(token).code.length > 0;
    }
}

File 17 of 36 : Address.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/Address.sol)

pragma solidity ^0.8.20;

/**
 * @dev Collection of functions related to the address type
 */
library Address {
    /**
     * @dev The ETH balance of the account is not enough to perform the operation.
     */
    error AddressInsufficientBalance(address account);

    /**
     * @dev There's no code at `target` (it is not a contract).
     */
    error AddressEmptyCode(address target);

    /**
     * @dev A call to an address target failed. The target may have reverted.
     */
    error FailedInnerCall();

    /**
     * @dev Replacement for Solidity's `transfer`: sends `amount` wei to
     * `recipient`, forwarding all available gas and reverting on errors.
     *
     * https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost
     * of certain opcodes, possibly making contracts go over the 2300 gas limit
     * imposed by `transfer`, making them unable to receive funds via
     * `transfer`. {sendValue} removes this limitation.
     *
     * https://consensys.net/diligence/blog/2019/09/stop-using-soliditys-transfer-now/[Learn more].
     *
     * IMPORTANT: because control is transferred to `recipient`, care must be
     * taken to not create reentrancy vulnerabilities. Consider using
     * {ReentrancyGuard} or the
     * https://solidity.readthedocs.io/en/v0.8.20/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern].
     */
    function sendValue(address payable recipient, uint256 amount) internal {
        if (address(this).balance < amount) {
            revert AddressInsufficientBalance(address(this));
        }

        (bool success, ) = recipient.call{value: amount}("");
        if (!success) {
            revert FailedInnerCall();
        }
    }

    /**
     * @dev Performs a Solidity function call using a low level `call`. A
     * plain `call` is an unsafe replacement for a function call: use this
     * function instead.
     *
     * If `target` reverts with a revert reason or custom error, it is bubbled
     * up by this function (like regular Solidity function calls). However, if
     * the call reverted with no returned reason, this function reverts with a
     * {FailedInnerCall} error.
     *
     * Returns the raw returned data. To convert to the expected return value,
     * use https://solidity.readthedocs.io/en/latest/units-and-global-variables.html?highlight=abi.decode#abi-encoding-and-decoding-functions[`abi.decode`].
     *
     * Requirements:
     *
     * - `target` must be a contract.
     * - calling `target` with `data` must not revert.
     */
    function functionCall(address target, bytes memory data) internal returns (bytes memory) {
        return functionCallWithValue(target, data, 0);
    }

    /**
     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
     * but also transferring `value` wei to `target`.
     *
     * Requirements:
     *
     * - the calling contract must have an ETH balance of at least `value`.
     * - the called Solidity function must be `payable`.
     */
    function functionCallWithValue(address target, bytes memory data, uint256 value) internal returns (bytes memory) {
        if (address(this).balance < value) {
            revert AddressInsufficientBalance(address(this));
        }
        (bool success, bytes memory returndata) = target.call{value: value}(data);
        return verifyCallResultFromTarget(target, success, returndata);
    }

    /**
     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
     * but performing a static call.
     */
    function functionStaticCall(address target, bytes memory data) internal view returns (bytes memory) {
        (bool success, bytes memory returndata) = target.staticcall(data);
        return verifyCallResultFromTarget(target, success, returndata);
    }

    /**
     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
     * but performing a delegate call.
     */
    function functionDelegateCall(address target, bytes memory data) internal returns (bytes memory) {
        (bool success, bytes memory returndata) = target.delegatecall(data);
        return verifyCallResultFromTarget(target, success, returndata);
    }

    /**
     * @dev Tool to verify that a low level call to smart-contract was successful, and reverts if the target
     * was not a contract or bubbling up the revert reason (falling back to {FailedInnerCall}) in case of an
     * unsuccessful call.
     */
    function verifyCallResultFromTarget(
        address target,
        bool success,
        bytes memory returndata
    ) internal view returns (bytes memory) {
        if (!success) {
            _revert(returndata);
        } else {
            // only check if target is a contract if the call was successful and the return data is empty
            // otherwise we already know that it was a contract
            if (returndata.length == 0 && target.code.length == 0) {
                revert AddressEmptyCode(target);
            }
            return returndata;
        }
    }

    /**
     * @dev Tool to verify that a low level call was successful, and reverts if it wasn't, either by bubbling the
     * revert reason or with a default {FailedInnerCall} error.
     */
    function verifyCallResult(bool success, bytes memory returndata) internal pure returns (bytes memory) {
        if (!success) {
            _revert(returndata);
        } else {
            return returndata;
        }
    }

    /**
     * @dev Reverts with returndata if present. Otherwise reverts with {FailedInnerCall}.
     */
    function _revert(bytes memory returndata) private pure {
        // Look for revert reason and bubble it up if present
        if (returndata.length > 0) {
            // The easiest way to bubble the revert reason is using memory via assembly
            /// @solidity memory-safe-assembly
            assembly {
                let returndata_size := mload(returndata)
                revert(add(32, returndata), returndata_size)
            }
        } else {
            revert FailedInnerCall();
        }
    }
}

File 18 of 36 : Arrays.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/Arrays.sol)

pragma solidity ^0.8.20;

import {StorageSlot} from "./StorageSlot.sol";
import {Math} from "./math/Math.sol";

/**
 * @dev Collection of functions related to array types.
 */
library Arrays {
    using StorageSlot for bytes32;

    /**
     * @dev Searches a sorted `array` and returns the first index that contains
     * a value greater or equal to `element`. If no such index exists (i.e. all
     * values in the array are strictly less than `element`), the array length is
     * returned. Time complexity O(log n).
     *
     * `array` is expected to be sorted in ascending order, and to contain no
     * repeated elements.
     */
    function findUpperBound(uint256[] storage array, uint256 element) internal view returns (uint256) {
        uint256 low = 0;
        uint256 high = array.length;

        if (high == 0) {
            return 0;
        }

        while (low < high) {
            uint256 mid = Math.average(low, high);

            // Note that mid will always be strictly less than high (i.e. it will be a valid array index)
            // because Math.average rounds towards zero (it does integer division with truncation).
            if (unsafeAccess(array, mid).value > element) {
                high = mid;
            } else {
                low = mid + 1;
            }
        }

        // At this point `low` is the exclusive upper bound. We will return the inclusive upper bound.
        if (low > 0 && unsafeAccess(array, low - 1).value == element) {
            return low - 1;
        } else {
            return low;
        }
    }

    /**
     * @dev Access an array in an "unsafe" way. Skips solidity "index-out-of-range" check.
     *
     * WARNING: Only use if you are certain `pos` is lower than the array length.
     */
    function unsafeAccess(address[] storage arr, uint256 pos) internal pure returns (StorageSlot.AddressSlot storage) {
        bytes32 slot;
        // We use assembly to calculate the storage slot of the element at index `pos` of the dynamic array `arr`
        // following https://docs.soliditylang.org/en/v0.8.20/internals/layout_in_storage.html#mappings-and-dynamic-arrays.

        /// @solidity memory-safe-assembly
        assembly {
            mstore(0, arr.slot)
            slot := add(keccak256(0, 0x20), pos)
        }
        return slot.getAddressSlot();
    }

    /**
     * @dev Access an array in an "unsafe" way. Skips solidity "index-out-of-range" check.
     *
     * WARNING: Only use if you are certain `pos` is lower than the array length.
     */
    function unsafeAccess(bytes32[] storage arr, uint256 pos) internal pure returns (StorageSlot.Bytes32Slot storage) {
        bytes32 slot;
        // We use assembly to calculate the storage slot of the element at index `pos` of the dynamic array `arr`
        // following https://docs.soliditylang.org/en/v0.8.20/internals/layout_in_storage.html#mappings-and-dynamic-arrays.

        /// @solidity memory-safe-assembly
        assembly {
            mstore(0, arr.slot)
            slot := add(keccak256(0, 0x20), pos)
        }
        return slot.getBytes32Slot();
    }

    /**
     * @dev Access an array in an "unsafe" way. Skips solidity "index-out-of-range" check.
     *
     * WARNING: Only use if you are certain `pos` is lower than the array length.
     */
    function unsafeAccess(uint256[] storage arr, uint256 pos) internal pure returns (StorageSlot.Uint256Slot storage) {
        bytes32 slot;
        // We use assembly to calculate the storage slot of the element at index `pos` of the dynamic array `arr`
        // following https://docs.soliditylang.org/en/v0.8.20/internals/layout_in_storage.html#mappings-and-dynamic-arrays.

        /// @solidity memory-safe-assembly
        assembly {
            mstore(0, arr.slot)
            slot := add(keccak256(0, 0x20), pos)
        }
        return slot.getUint256Slot();
    }

    /**
     * @dev Access an array in an "unsafe" way. Skips solidity "index-out-of-range" check.
     *
     * WARNING: Only use if you are certain `pos` is lower than the array length.
     */
    function unsafeMemoryAccess(uint256[] memory arr, uint256 pos) internal pure returns (uint256 res) {
        assembly {
            res := mload(add(add(arr, 0x20), mul(pos, 0x20)))
        }
    }

    /**
     * @dev Access an array in an "unsafe" way. Skips solidity "index-out-of-range" check.
     *
     * WARNING: Only use if you are certain `pos` is lower than the array length.
     */
    function unsafeMemoryAccess(address[] memory arr, uint256 pos) internal pure returns (address res) {
        assembly {
            res := mload(add(add(arr, 0x20), mul(pos, 0x20)))
        }
    }
}

File 19 of 36 : ECDSA.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/cryptography/ECDSA.sol)

pragma solidity ^0.8.20;

/**
 * @dev Elliptic Curve Digital Signature Algorithm (ECDSA) operations.
 *
 * These functions can be used to verify that a message was signed by the holder
 * of the private keys of a given address.
 */
library ECDSA {
    enum RecoverError {
        NoError,
        InvalidSignature,
        InvalidSignatureLength,
        InvalidSignatureS
    }

    /**
     * @dev The signature derives the `address(0)`.
     */
    error ECDSAInvalidSignature();

    /**
     * @dev The signature has an invalid length.
     */
    error ECDSAInvalidSignatureLength(uint256 length);

    /**
     * @dev The signature has an S value that is in the upper half order.
     */
    error ECDSAInvalidSignatureS(bytes32 s);

    /**
     * @dev Returns the address that signed a hashed message (`hash`) with `signature` or an error. This will not
     * return address(0) without also returning an error description. Errors are documented using an enum (error type)
     * and a bytes32 providing additional information about the error.
     *
     * If no error is returned, then the address can be used for verification purposes.
     *
     * The `ecrecover` EVM precompile allows for malleable (non-unique) signatures:
     * this function rejects them by requiring the `s` value to be in the lower
     * half order, and the `v` value to be either 27 or 28.
     *
     * IMPORTANT: `hash` _must_ be the result of a hash operation for the
     * verification to be secure: it is possible to craft signatures that
     * recover to arbitrary addresses for non-hashed data. A safe way to ensure
     * this is by receiving a hash of the original message (which may otherwise
     * be too long), and then calling {MessageHashUtils-toEthSignedMessageHash} on it.
     *
     * Documentation for signature generation:
     * - with https://web3js.readthedocs.io/en/v1.3.4/web3-eth-accounts.html#sign[Web3.js]
     * - with https://docs.ethers.io/v5/api/signer/#Signer-signMessage[ethers]
     */
    function tryRecover(bytes32 hash, bytes memory signature) internal pure returns (address, RecoverError, bytes32) {
        if (signature.length == 65) {
            bytes32 r;
            bytes32 s;
            uint8 v;
            // ecrecover takes the signature parameters, and the only way to get them
            // currently is to use assembly.
            /// @solidity memory-safe-assembly
            assembly {
                r := mload(add(signature, 0x20))
                s := mload(add(signature, 0x40))
                v := byte(0, mload(add(signature, 0x60)))
            }
            return tryRecover(hash, v, r, s);
        } else {
            return (address(0), RecoverError.InvalidSignatureLength, bytes32(signature.length));
        }
    }

    /**
     * @dev Returns the address that signed a hashed message (`hash`) with
     * `signature`. This address can then be used for verification purposes.
     *
     * The `ecrecover` EVM precompile allows for malleable (non-unique) signatures:
     * this function rejects them by requiring the `s` value to be in the lower
     * half order, and the `v` value to be either 27 or 28.
     *
     * IMPORTANT: `hash` _must_ be the result of a hash operation for the
     * verification to be secure: it is possible to craft signatures that
     * recover to arbitrary addresses for non-hashed data. A safe way to ensure
     * this is by receiving a hash of the original message (which may otherwise
     * be too long), and then calling {MessageHashUtils-toEthSignedMessageHash} on it.
     */
    function recover(bytes32 hash, bytes memory signature) internal pure returns (address) {
        (address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, signature);
        _throwError(error, errorArg);
        return recovered;
    }

    /**
     * @dev Overload of {ECDSA-tryRecover} that receives the `r` and `vs` short-signature fields separately.
     *
     * See https://eips.ethereum.org/EIPS/eip-2098[EIP-2098 short signatures]
     */
    function tryRecover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address, RecoverError, bytes32) {
        unchecked {
            bytes32 s = vs & bytes32(0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff);
            // We do not check for an overflow here since the shift operation results in 0 or 1.
            uint8 v = uint8((uint256(vs) >> 255) + 27);
            return tryRecover(hash, v, r, s);
        }
    }

    /**
     * @dev Overload of {ECDSA-recover} that receives the `r and `vs` short-signature fields separately.
     */
    function recover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address) {
        (address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, r, vs);
        _throwError(error, errorArg);
        return recovered;
    }

    /**
     * @dev Overload of {ECDSA-tryRecover} that receives the `v`,
     * `r` and `s` signature fields separately.
     */
    function tryRecover(
        bytes32 hash,
        uint8 v,
        bytes32 r,
        bytes32 s
    ) internal pure returns (address, RecoverError, bytes32) {
        // EIP-2 still allows signature malleability for ecrecover(). Remove this possibility and make the signature
        // unique. Appendix F in the Ethereum Yellow paper (https://ethereum.github.io/yellowpaper/paper.pdf), defines
        // the valid range for s in (301): 0 < s < secp256k1n ÷ 2 + 1, and for v in (302): v ∈ {27, 28}. Most
        // signatures from current libraries generate a unique signature with an s-value in the lower half order.
        //
        // If your library generates malleable signatures, such as s-values in the upper range, calculate a new s-value
        // with 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 - s1 and flip v from 27 to 28 or
        // vice versa. If your library also generates signatures with 0/1 for v instead 27/28, add 27 to v to accept
        // these malleable signatures as well.
        if (uint256(s) > 0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0) {
            return (address(0), RecoverError.InvalidSignatureS, s);
        }

        // If the signature is valid (and not malleable), return the signer address
        address signer = ecrecover(hash, v, r, s);
        if (signer == address(0)) {
            return (address(0), RecoverError.InvalidSignature, bytes32(0));
        }

        return (signer, RecoverError.NoError, bytes32(0));
    }

    /**
     * @dev Overload of {ECDSA-recover} that receives the `v`,
     * `r` and `s` signature fields separately.
     */
    function recover(bytes32 hash, uint8 v, bytes32 r, bytes32 s) internal pure returns (address) {
        (address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, v, r, s);
        _throwError(error, errorArg);
        return recovered;
    }

    /**
     * @dev Optionally reverts with the corresponding custom error according to the `error` argument provided.
     */
    function _throwError(RecoverError error, bytes32 errorArg) private pure {
        if (error == RecoverError.NoError) {
            return; // no error: do nothing
        } else if (error == RecoverError.InvalidSignature) {
            revert ECDSAInvalidSignature();
        } else if (error == RecoverError.InvalidSignatureLength) {
            revert ECDSAInvalidSignatureLength(uint256(errorArg));
        } else if (error == RecoverError.InvalidSignatureS) {
            revert ECDSAInvalidSignatureS(errorArg);
        }
    }
}

File 20 of 36 : MessageHashUtils.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/cryptography/MessageHashUtils.sol)

pragma solidity ^0.8.20;

import {Strings} from "../Strings.sol";

/**
 * @dev Signature message hash utilities for producing digests to be consumed by {ECDSA} recovery or signing.
 *
 * The library provides methods for generating a hash of a message that conforms to the
 * https://eips.ethereum.org/EIPS/eip-191[EIP 191] and https://eips.ethereum.org/EIPS/eip-712[EIP 712]
 * specifications.
 */
library MessageHashUtils {
    /**
     * @dev Returns the keccak256 digest of an EIP-191 signed data with version
     * `0x45` (`personal_sign` messages).
     *
     * The digest is calculated by prefixing a bytes32 `messageHash` with
     * `"\x19Ethereum Signed Message:\n32"` and hashing the result. It corresponds with the
     * hash signed when using the https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`] JSON-RPC method.
     *
     * NOTE: The `messageHash` parameter is intended to be the result of hashing a raw message with
     * keccak256, although any bytes32 value can be safely used because the final digest will
     * be re-hashed.
     *
     * See {ECDSA-recover}.
     */
    function toEthSignedMessageHash(bytes32 messageHash) internal pure returns (bytes32 digest) {
        /// @solidity memory-safe-assembly
        assembly {
            mstore(0x00, "\x19Ethereum Signed Message:\n32") // 32 is the bytes-length of messageHash
            mstore(0x1c, messageHash) // 0x1c (28) is the length of the prefix
            digest := keccak256(0x00, 0x3c) // 0x3c is the length of the prefix (0x1c) + messageHash (0x20)
        }
    }

    /**
     * @dev Returns the keccak256 digest of an EIP-191 signed data with version
     * `0x45` (`personal_sign` messages).
     *
     * The digest is calculated by prefixing an arbitrary `message` with
     * `"\x19Ethereum Signed Message:\n" + len(message)` and hashing the result. It corresponds with the
     * hash signed when using the https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`] JSON-RPC method.
     *
     * See {ECDSA-recover}.
     */
    function toEthSignedMessageHash(bytes memory message) internal pure returns (bytes32) {
        return
            keccak256(bytes.concat("\x19Ethereum Signed Message:\n", bytes(Strings.toString(message.length)), message));
    }

    /**
     * @dev Returns the keccak256 digest of an EIP-191 signed data with version
     * `0x00` (data with intended validator).
     *
     * The digest is calculated by prefixing an arbitrary `data` with `"\x19\x00"` and the intended
     * `validator` address. Then hashing the result.
     *
     * See {ECDSA-recover}.
     */
    function toDataWithIntendedValidatorHash(address validator, bytes memory data) internal pure returns (bytes32) {
        return keccak256(abi.encodePacked(hex"19_00", validator, data));
    }

    /**
     * @dev Returns the keccak256 digest of an EIP-712 typed data (EIP-191 version `0x01`).
     *
     * The digest is calculated from a `domainSeparator` and a `structHash`, by prefixing them with
     * `\x19\x01` and hashing the result. It corresponds to the hash signed by the
     * https://eips.ethereum.org/EIPS/eip-712[`eth_signTypedData`] JSON-RPC method as part of EIP-712.
     *
     * See {ECDSA-recover}.
     */
    function toTypedDataHash(bytes32 domainSeparator, bytes32 structHash) internal pure returns (bytes32 digest) {
        /// @solidity memory-safe-assembly
        assembly {
            let ptr := mload(0x40)
            mstore(ptr, hex"19_01")
            mstore(add(ptr, 0x02), domainSeparator)
            mstore(add(ptr, 0x22), structHash)
            digest := keccak256(ptr, 0x42)
        }
    }
}

File 21 of 36 : IERC165.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/introspection/IERC165.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC165 standard, as defined in the
 * https://eips.ethereum.org/EIPS/eip-165[EIP].
 *
 * Implementers can declare support of contract interfaces, which can then be
 * queried by others ({ERC165Checker}).
 *
 * For an implementation, see {ERC165}.
 */
interface IERC165 {
    /**
     * @dev Returns true if this contract implements the interface defined by
     * `interfaceId`. See the corresponding
     * https://eips.ethereum.org/EIPS/eip-165#how-interfaces-are-identified[EIP section]
     * to learn more about how these ids are created.
     *
     * This function call must use less than 30 000 gas.
     */
    function supportsInterface(bytes4 interfaceId) external view returns (bool);
}

File 22 of 36 : Math.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/math/Math.sol)

pragma solidity ^0.8.20;

/**
 * @dev Standard math utilities missing in the Solidity language.
 */
library Math {
    /**
     * @dev Muldiv operation overflow.
     */
    error MathOverflowedMulDiv();

    enum Rounding {
        Floor, // Toward negative infinity
        Ceil, // Toward positive infinity
        Trunc, // Toward zero
        Expand // Away from zero
    }

    /**
     * @dev Returns the addition of two unsigned integers, with an overflow flag.
     */
    function tryAdd(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            uint256 c = a + b;
            if (c < a) return (false, 0);
            return (true, c);
        }
    }

    /**
     * @dev Returns the subtraction of two unsigned integers, with an overflow flag.
     */
    function trySub(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            if (b > a) return (false, 0);
            return (true, a - b);
        }
    }

    /**
     * @dev Returns the multiplication of two unsigned integers, with an overflow flag.
     */
    function tryMul(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            // Gas optimization: this is cheaper than requiring 'a' not being zero, but the
            // benefit is lost if 'b' is also tested.
            // See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522
            if (a == 0) return (true, 0);
            uint256 c = a * b;
            if (c / a != b) return (false, 0);
            return (true, c);
        }
    }

    /**
     * @dev Returns the division of two unsigned integers, with a division by zero flag.
     */
    function tryDiv(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            if (b == 0) return (false, 0);
            return (true, a / b);
        }
    }

    /**
     * @dev Returns the remainder of dividing two unsigned integers, with a division by zero flag.
     */
    function tryMod(uint256 a, uint256 b) internal pure returns (bool, uint256) {
        unchecked {
            if (b == 0) return (false, 0);
            return (true, a % b);
        }
    }

    /**
     * @dev Returns the largest of two numbers.
     */
    function max(uint256 a, uint256 b) internal pure returns (uint256) {
        return a > b ? a : b;
    }

    /**
     * @dev Returns the smallest of two numbers.
     */
    function min(uint256 a, uint256 b) internal pure returns (uint256) {
        return a < b ? a : b;
    }

    /**
     * @dev Returns the average of two numbers. The result is rounded towards
     * zero.
     */
    function average(uint256 a, uint256 b) internal pure returns (uint256) {
        // (a + b) / 2 can overflow.
        return (a & b) + (a ^ b) / 2;
    }

    /**
     * @dev Returns the ceiling of the division of two numbers.
     *
     * This differs from standard division with `/` in that it rounds towards infinity instead
     * of rounding towards zero.
     */
    function ceilDiv(uint256 a, uint256 b) internal pure returns (uint256) {
        if (b == 0) {
            // Guarantee the same behavior as in a regular Solidity division.
            return a / b;
        }

        // (a + b - 1) / b can overflow on addition, so we distribute.
        return a == 0 ? 0 : (a - 1) / b + 1;
    }

    /**
     * @notice Calculates floor(x * y / denominator) with full precision. Throws if result overflows a uint256 or
     * denominator == 0.
     * @dev Original credit to Remco Bloemen under MIT license (https://xn--2-umb.com/21/muldiv) with further edits by
     * Uniswap Labs also under MIT license.
     */
    function mulDiv(uint256 x, uint256 y, uint256 denominator) internal pure returns (uint256 result) {
        unchecked {
            // 512-bit multiply [prod1 prod0] = x * y. Compute the product mod 2^256 and mod 2^256 - 1, then use
            // use the Chinese Remainder Theorem to reconstruct the 512 bit result. The result is stored in two 256
            // variables such that product = prod1 * 2^256 + prod0.
            uint256 prod0 = x * y; // Least significant 256 bits of the product
            uint256 prod1; // Most significant 256 bits of the product
            assembly {
                let mm := mulmod(x, y, not(0))
                prod1 := sub(sub(mm, prod0), lt(mm, prod0))
            }

            // Handle non-overflow cases, 256 by 256 division.
            if (prod1 == 0) {
                // Solidity will revert if denominator == 0, unlike the div opcode on its own.
                // The surrounding unchecked block does not change this fact.
                // See https://docs.soliditylang.org/en/latest/control-structures.html#checked-or-unchecked-arithmetic.
                return prod0 / denominator;
            }

            // Make sure the result is less than 2^256. Also prevents denominator == 0.
            if (denominator <= prod1) {
                revert MathOverflowedMulDiv();
            }

            ///////////////////////////////////////////////
            // 512 by 256 division.
            ///////////////////////////////////////////////

            // Make division exact by subtracting the remainder from [prod1 prod0].
            uint256 remainder;
            assembly {
                // Compute remainder using mulmod.
                remainder := mulmod(x, y, denominator)

                // Subtract 256 bit number from 512 bit number.
                prod1 := sub(prod1, gt(remainder, prod0))
                prod0 := sub(prod0, remainder)
            }

            // Factor powers of two out of denominator and compute largest power of two divisor of denominator.
            // Always >= 1. See https://cs.stackexchange.com/q/138556/92363.

            uint256 twos = denominator & (0 - denominator);
            assembly {
                // Divide denominator by twos.
                denominator := div(denominator, twos)

                // Divide [prod1 prod0] by twos.
                prod0 := div(prod0, twos)

                // Flip twos such that it is 2^256 / twos. If twos is zero, then it becomes one.
                twos := add(div(sub(0, twos), twos), 1)
            }

            // Shift in bits from prod1 into prod0.
            prod0 |= prod1 * twos;

            // Invert denominator mod 2^256. Now that denominator is an odd number, it has an inverse modulo 2^256 such
            // that denominator * inv = 1 mod 2^256. Compute the inverse by starting with a seed that is correct for
            // four bits. That is, denominator * inv = 1 mod 2^4.
            uint256 inverse = (3 * denominator) ^ 2;

            // Use the Newton-Raphson iteration to improve the precision. Thanks to Hensel's lifting lemma, this also
            // works in modular arithmetic, doubling the correct bits in each step.
            inverse *= 2 - denominator * inverse; // inverse mod 2^8
            inverse *= 2 - denominator * inverse; // inverse mod 2^16
            inverse *= 2 - denominator * inverse; // inverse mod 2^32
            inverse *= 2 - denominator * inverse; // inverse mod 2^64
            inverse *= 2 - denominator * inverse; // inverse mod 2^128
            inverse *= 2 - denominator * inverse; // inverse mod 2^256

            // Because the division is now exact we can divide by multiplying with the modular inverse of denominator.
            // This will give us the correct result modulo 2^256. Since the preconditions guarantee that the outcome is
            // less than 2^256, this is the final result. We don't need to compute the high bits of the result and prod1
            // is no longer required.
            result = prod0 * inverse;
            return result;
        }
    }

    /**
     * @notice Calculates x * y / denominator with full precision, following the selected rounding direction.
     */
    function mulDiv(uint256 x, uint256 y, uint256 denominator, Rounding rounding) internal pure returns (uint256) {
        uint256 result = mulDiv(x, y, denominator);
        if (unsignedRoundsUp(rounding) && mulmod(x, y, denominator) > 0) {
            result += 1;
        }
        return result;
    }

    /**
     * @dev Returns the square root of a number. If the number is not a perfect square, the value is rounded
     * towards zero.
     *
     * Inspired by Henry S. Warren, Jr.'s "Hacker's Delight" (Chapter 11).
     */
    function sqrt(uint256 a) internal pure returns (uint256) {
        if (a == 0) {
            return 0;
        }

        // For our first guess, we get the biggest power of 2 which is smaller than the square root of the target.
        //
        // We know that the "msb" (most significant bit) of our target number `a` is a power of 2 such that we have
        // `msb(a) <= a < 2*msb(a)`. This value can be written `msb(a)=2**k` with `k=log2(a)`.
        //
        // This can be rewritten `2**log2(a) <= a < 2**(log2(a) + 1)`
        // → `sqrt(2**k) <= sqrt(a) < sqrt(2**(k+1))`
        // → `2**(k/2) <= sqrt(a) < 2**((k+1)/2) <= 2**(k/2 + 1)`
        //
        // Consequently, `2**(log2(a) / 2)` is a good first approximation of `sqrt(a)` with at least 1 correct bit.
        uint256 result = 1 << (log2(a) >> 1);

        // At this point `result` is an estimation with one bit of precision. We know the true value is a uint128,
        // since it is the square root of a uint256. Newton's method converges quadratically (precision doubles at
        // every iteration). We thus need at most 7 iteration to turn our partial result with one bit of precision
        // into the expected uint128 result.
        unchecked {
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            result = (result + a / result) >> 1;
            return min(result, a / result);
        }
    }

    /**
     * @notice Calculates sqrt(a), following the selected rounding direction.
     */
    function sqrt(uint256 a, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = sqrt(a);
            return result + (unsignedRoundsUp(rounding) && result * result < a ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 2 of a positive value rounded towards zero.
     * Returns 0 if given 0.
     */
    function log2(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >> 128 > 0) {
                value >>= 128;
                result += 128;
            }
            if (value >> 64 > 0) {
                value >>= 64;
                result += 64;
            }
            if (value >> 32 > 0) {
                value >>= 32;
                result += 32;
            }
            if (value >> 16 > 0) {
                value >>= 16;
                result += 16;
            }
            if (value >> 8 > 0) {
                value >>= 8;
                result += 8;
            }
            if (value >> 4 > 0) {
                value >>= 4;
                result += 4;
            }
            if (value >> 2 > 0) {
                value >>= 2;
                result += 2;
            }
            if (value >> 1 > 0) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 2, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log2(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log2(value);
            return result + (unsignedRoundsUp(rounding) && 1 << result < value ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 10 of a positive value rounded towards zero.
     * Returns 0 if given 0.
     */
    function log10(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >= 10 ** 64) {
                value /= 10 ** 64;
                result += 64;
            }
            if (value >= 10 ** 32) {
                value /= 10 ** 32;
                result += 32;
            }
            if (value >= 10 ** 16) {
                value /= 10 ** 16;
                result += 16;
            }
            if (value >= 10 ** 8) {
                value /= 10 ** 8;
                result += 8;
            }
            if (value >= 10 ** 4) {
                value /= 10 ** 4;
                result += 4;
            }
            if (value >= 10 ** 2) {
                value /= 10 ** 2;
                result += 2;
            }
            if (value >= 10 ** 1) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 10, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log10(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log10(value);
            return result + (unsignedRoundsUp(rounding) && 10 ** result < value ? 1 : 0);
        }
    }

    /**
     * @dev Return the log in base 256 of a positive value rounded towards zero.
     * Returns 0 if given 0.
     *
     * Adding one to the result gives the number of pairs of hex symbols needed to represent `value` as a hex string.
     */
    function log256(uint256 value) internal pure returns (uint256) {
        uint256 result = 0;
        unchecked {
            if (value >> 128 > 0) {
                value >>= 128;
                result += 16;
            }
            if (value >> 64 > 0) {
                value >>= 64;
                result += 8;
            }
            if (value >> 32 > 0) {
                value >>= 32;
                result += 4;
            }
            if (value >> 16 > 0) {
                value >>= 16;
                result += 2;
            }
            if (value >> 8 > 0) {
                result += 1;
            }
        }
        return result;
    }

    /**
     * @dev Return the log in base 256, following the selected rounding direction, of a positive value.
     * Returns 0 if given 0.
     */
    function log256(uint256 value, Rounding rounding) internal pure returns (uint256) {
        unchecked {
            uint256 result = log256(value);
            return result + (unsignedRoundsUp(rounding) && 1 << (result << 3) < value ? 1 : 0);
        }
    }

    /**
     * @dev Returns whether a provided rounding mode is considered rounding up for unsigned integers.
     */
    function unsignedRoundsUp(Rounding rounding) internal pure returns (bool) {
        return uint8(rounding) % 2 == 1;
    }
}

File 23 of 36 : SafeCast.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/math/SafeCast.sol)
// This file was procedurally generated from scripts/generate/templates/SafeCast.js.

pragma solidity ^0.8.20;

/**
 * @dev Wrappers over Solidity's uintXX/intXX casting operators with added overflow
 * checks.
 *
 * Downcasting from uint256/int256 in Solidity does not revert on overflow. This can
 * easily result in undesired exploitation or bugs, since developers usually
 * assume that overflows raise errors. `SafeCast` restores this intuition by
 * reverting the transaction when such an operation overflows.
 *
 * Using this library instead of the unchecked operations eliminates an entire
 * class of bugs, so it's recommended to use it always.
 */
library SafeCast {
    /**
     * @dev Value doesn't fit in an uint of `bits` size.
     */
    error SafeCastOverflowedUintDowncast(uint8 bits, uint256 value);

    /**
     * @dev An int value doesn't fit in an uint of `bits` size.
     */
    error SafeCastOverflowedIntToUint(int256 value);

    /**
     * @dev Value doesn't fit in an int of `bits` size.
     */
    error SafeCastOverflowedIntDowncast(uint8 bits, int256 value);

    /**
     * @dev An uint value doesn't fit in an int of `bits` size.
     */
    error SafeCastOverflowedUintToInt(uint256 value);

    /**
     * @dev Returns the downcasted uint248 from uint256, reverting on
     * overflow (when the input is greater than largest uint248).
     *
     * Counterpart to Solidity's `uint248` operator.
     *
     * Requirements:
     *
     * - input must fit into 248 bits
     */
    function toUint248(uint256 value) internal pure returns (uint248) {
        if (value > type(uint248).max) {
            revert SafeCastOverflowedUintDowncast(248, value);
        }
        return uint248(value);
    }

    /**
     * @dev Returns the downcasted uint240 from uint256, reverting on
     * overflow (when the input is greater than largest uint240).
     *
     * Counterpart to Solidity's `uint240` operator.
     *
     * Requirements:
     *
     * - input must fit into 240 bits
     */
    function toUint240(uint256 value) internal pure returns (uint240) {
        if (value > type(uint240).max) {
            revert SafeCastOverflowedUintDowncast(240, value);
        }
        return uint240(value);
    }

    /**
     * @dev Returns the downcasted uint232 from uint256, reverting on
     * overflow (when the input is greater than largest uint232).
     *
     * Counterpart to Solidity's `uint232` operator.
     *
     * Requirements:
     *
     * - input must fit into 232 bits
     */
    function toUint232(uint256 value) internal pure returns (uint232) {
        if (value > type(uint232).max) {
            revert SafeCastOverflowedUintDowncast(232, value);
        }
        return uint232(value);
    }

    /**
     * @dev Returns the downcasted uint224 from uint256, reverting on
     * overflow (when the input is greater than largest uint224).
     *
     * Counterpart to Solidity's `uint224` operator.
     *
     * Requirements:
     *
     * - input must fit into 224 bits
     */
    function toUint224(uint256 value) internal pure returns (uint224) {
        if (value > type(uint224).max) {
            revert SafeCastOverflowedUintDowncast(224, value);
        }
        return uint224(value);
    }

    /**
     * @dev Returns the downcasted uint216 from uint256, reverting on
     * overflow (when the input is greater than largest uint216).
     *
     * Counterpart to Solidity's `uint216` operator.
     *
     * Requirements:
     *
     * - input must fit into 216 bits
     */
    function toUint216(uint256 value) internal pure returns (uint216) {
        if (value > type(uint216).max) {
            revert SafeCastOverflowedUintDowncast(216, value);
        }
        return uint216(value);
    }

    /**
     * @dev Returns the downcasted uint208 from uint256, reverting on
     * overflow (when the input is greater than largest uint208).
     *
     * Counterpart to Solidity's `uint208` operator.
     *
     * Requirements:
     *
     * - input must fit into 208 bits
     */
    function toUint208(uint256 value) internal pure returns (uint208) {
        if (value > type(uint208).max) {
            revert SafeCastOverflowedUintDowncast(208, value);
        }
        return uint208(value);
    }

    /**
     * @dev Returns the downcasted uint200 from uint256, reverting on
     * overflow (when the input is greater than largest uint200).
     *
     * Counterpart to Solidity's `uint200` operator.
     *
     * Requirements:
     *
     * - input must fit into 200 bits
     */
    function toUint200(uint256 value) internal pure returns (uint200) {
        if (value > type(uint200).max) {
            revert SafeCastOverflowedUintDowncast(200, value);
        }
        return uint200(value);
    }

    /**
     * @dev Returns the downcasted uint192 from uint256, reverting on
     * overflow (when the input is greater than largest uint192).
     *
     * Counterpart to Solidity's `uint192` operator.
     *
     * Requirements:
     *
     * - input must fit into 192 bits
     */
    function toUint192(uint256 value) internal pure returns (uint192) {
        if (value > type(uint192).max) {
            revert SafeCastOverflowedUintDowncast(192, value);
        }
        return uint192(value);
    }

    /**
     * @dev Returns the downcasted uint184 from uint256, reverting on
     * overflow (when the input is greater than largest uint184).
     *
     * Counterpart to Solidity's `uint184` operator.
     *
     * Requirements:
     *
     * - input must fit into 184 bits
     */
    function toUint184(uint256 value) internal pure returns (uint184) {
        if (value > type(uint184).max) {
            revert SafeCastOverflowedUintDowncast(184, value);
        }
        return uint184(value);
    }

    /**
     * @dev Returns the downcasted uint176 from uint256, reverting on
     * overflow (when the input is greater than largest uint176).
     *
     * Counterpart to Solidity's `uint176` operator.
     *
     * Requirements:
     *
     * - input must fit into 176 bits
     */
    function toUint176(uint256 value) internal pure returns (uint176) {
        if (value > type(uint176).max) {
            revert SafeCastOverflowedUintDowncast(176, value);
        }
        return uint176(value);
    }

    /**
     * @dev Returns the downcasted uint168 from uint256, reverting on
     * overflow (when the input is greater than largest uint168).
     *
     * Counterpart to Solidity's `uint168` operator.
     *
     * Requirements:
     *
     * - input must fit into 168 bits
     */
    function toUint168(uint256 value) internal pure returns (uint168) {
        if (value > type(uint168).max) {
            revert SafeCastOverflowedUintDowncast(168, value);
        }
        return uint168(value);
    }

    /**
     * @dev Returns the downcasted uint160 from uint256, reverting on
     * overflow (when the input is greater than largest uint160).
     *
     * Counterpart to Solidity's `uint160` operator.
     *
     * Requirements:
     *
     * - input must fit into 160 bits
     */
    function toUint160(uint256 value) internal pure returns (uint160) {
        if (value > type(uint160).max) {
            revert SafeCastOverflowedUintDowncast(160, value);
        }
        return uint160(value);
    }

    /**
     * @dev Returns the downcasted uint152 from uint256, reverting on
     * overflow (when the input is greater than largest uint152).
     *
     * Counterpart to Solidity's `uint152` operator.
     *
     * Requirements:
     *
     * - input must fit into 152 bits
     */
    function toUint152(uint256 value) internal pure returns (uint152) {
        if (value > type(uint152).max) {
            revert SafeCastOverflowedUintDowncast(152, value);
        }
        return uint152(value);
    }

    /**
     * @dev Returns the downcasted uint144 from uint256, reverting on
     * overflow (when the input is greater than largest uint144).
     *
     * Counterpart to Solidity's `uint144` operator.
     *
     * Requirements:
     *
     * - input must fit into 144 bits
     */
    function toUint144(uint256 value) internal pure returns (uint144) {
        if (value > type(uint144).max) {
            revert SafeCastOverflowedUintDowncast(144, value);
        }
        return uint144(value);
    }

    /**
     * @dev Returns the downcasted uint136 from uint256, reverting on
     * overflow (when the input is greater than largest uint136).
     *
     * Counterpart to Solidity's `uint136` operator.
     *
     * Requirements:
     *
     * - input must fit into 136 bits
     */
    function toUint136(uint256 value) internal pure returns (uint136) {
        if (value > type(uint136).max) {
            revert SafeCastOverflowedUintDowncast(136, value);
        }
        return uint136(value);
    }

    /**
     * @dev Returns the downcasted uint128 from uint256, reverting on
     * overflow (when the input is greater than largest uint128).
     *
     * Counterpart to Solidity's `uint128` operator.
     *
     * Requirements:
     *
     * - input must fit into 128 bits
     */
    function toUint128(uint256 value) internal pure returns (uint128) {
        if (value > type(uint128).max) {
            revert SafeCastOverflowedUintDowncast(128, value);
        }
        return uint128(value);
    }

    /**
     * @dev Returns the downcasted uint120 from uint256, reverting on
     * overflow (when the input is greater than largest uint120).
     *
     * Counterpart to Solidity's `uint120` operator.
     *
     * Requirements:
     *
     * - input must fit into 120 bits
     */
    function toUint120(uint256 value) internal pure returns (uint120) {
        if (value > type(uint120).max) {
            revert SafeCastOverflowedUintDowncast(120, value);
        }
        return uint120(value);
    }

    /**
     * @dev Returns the downcasted uint112 from uint256, reverting on
     * overflow (when the input is greater than largest uint112).
     *
     * Counterpart to Solidity's `uint112` operator.
     *
     * Requirements:
     *
     * - input must fit into 112 bits
     */
    function toUint112(uint256 value) internal pure returns (uint112) {
        if (value > type(uint112).max) {
            revert SafeCastOverflowedUintDowncast(112, value);
        }
        return uint112(value);
    }

    /**
     * @dev Returns the downcasted uint104 from uint256, reverting on
     * overflow (when the input is greater than largest uint104).
     *
     * Counterpart to Solidity's `uint104` operator.
     *
     * Requirements:
     *
     * - input must fit into 104 bits
     */
    function toUint104(uint256 value) internal pure returns (uint104) {
        if (value > type(uint104).max) {
            revert SafeCastOverflowedUintDowncast(104, value);
        }
        return uint104(value);
    }

    /**
     * @dev Returns the downcasted uint96 from uint256, reverting on
     * overflow (when the input is greater than largest uint96).
     *
     * Counterpart to Solidity's `uint96` operator.
     *
     * Requirements:
     *
     * - input must fit into 96 bits
     */
    function toUint96(uint256 value) internal pure returns (uint96) {
        if (value > type(uint96).max) {
            revert SafeCastOverflowedUintDowncast(96, value);
        }
        return uint96(value);
    }

    /**
     * @dev Returns the downcasted uint88 from uint256, reverting on
     * overflow (when the input is greater than largest uint88).
     *
     * Counterpart to Solidity's `uint88` operator.
     *
     * Requirements:
     *
     * - input must fit into 88 bits
     */
    function toUint88(uint256 value) internal pure returns (uint88) {
        if (value > type(uint88).max) {
            revert SafeCastOverflowedUintDowncast(88, value);
        }
        return uint88(value);
    }

    /**
     * @dev Returns the downcasted uint80 from uint256, reverting on
     * overflow (when the input is greater than largest uint80).
     *
     * Counterpart to Solidity's `uint80` operator.
     *
     * Requirements:
     *
     * - input must fit into 80 bits
     */
    function toUint80(uint256 value) internal pure returns (uint80) {
        if (value > type(uint80).max) {
            revert SafeCastOverflowedUintDowncast(80, value);
        }
        return uint80(value);
    }

    /**
     * @dev Returns the downcasted uint72 from uint256, reverting on
     * overflow (when the input is greater than largest uint72).
     *
     * Counterpart to Solidity's `uint72` operator.
     *
     * Requirements:
     *
     * - input must fit into 72 bits
     */
    function toUint72(uint256 value) internal pure returns (uint72) {
        if (value > type(uint72).max) {
            revert SafeCastOverflowedUintDowncast(72, value);
        }
        return uint72(value);
    }

    /**
     * @dev Returns the downcasted uint64 from uint256, reverting on
     * overflow (when the input is greater than largest uint64).
     *
     * Counterpart to Solidity's `uint64` operator.
     *
     * Requirements:
     *
     * - input must fit into 64 bits
     */
    function toUint64(uint256 value) internal pure returns (uint64) {
        if (value > type(uint64).max) {
            revert SafeCastOverflowedUintDowncast(64, value);
        }
        return uint64(value);
    }

    /**
     * @dev Returns the downcasted uint56 from uint256, reverting on
     * overflow (when the input is greater than largest uint56).
     *
     * Counterpart to Solidity's `uint56` operator.
     *
     * Requirements:
     *
     * - input must fit into 56 bits
     */
    function toUint56(uint256 value) internal pure returns (uint56) {
        if (value > type(uint56).max) {
            revert SafeCastOverflowedUintDowncast(56, value);
        }
        return uint56(value);
    }

    /**
     * @dev Returns the downcasted uint48 from uint256, reverting on
     * overflow (when the input is greater than largest uint48).
     *
     * Counterpart to Solidity's `uint48` operator.
     *
     * Requirements:
     *
     * - input must fit into 48 bits
     */
    function toUint48(uint256 value) internal pure returns (uint48) {
        if (value > type(uint48).max) {
            revert SafeCastOverflowedUintDowncast(48, value);
        }
        return uint48(value);
    }

    /**
     * @dev Returns the downcasted uint40 from uint256, reverting on
     * overflow (when the input is greater than largest uint40).
     *
     * Counterpart to Solidity's `uint40` operator.
     *
     * Requirements:
     *
     * - input must fit into 40 bits
     */
    function toUint40(uint256 value) internal pure returns (uint40) {
        if (value > type(uint40).max) {
            revert SafeCastOverflowedUintDowncast(40, value);
        }
        return uint40(value);
    }

    /**
     * @dev Returns the downcasted uint32 from uint256, reverting on
     * overflow (when the input is greater than largest uint32).
     *
     * Counterpart to Solidity's `uint32` operator.
     *
     * Requirements:
     *
     * - input must fit into 32 bits
     */
    function toUint32(uint256 value) internal pure returns (uint32) {
        if (value > type(uint32).max) {
            revert SafeCastOverflowedUintDowncast(32, value);
        }
        return uint32(value);
    }

    /**
     * @dev Returns the downcasted uint24 from uint256, reverting on
     * overflow (when the input is greater than largest uint24).
     *
     * Counterpart to Solidity's `uint24` operator.
     *
     * Requirements:
     *
     * - input must fit into 24 bits
     */
    function toUint24(uint256 value) internal pure returns (uint24) {
        if (value > type(uint24).max) {
            revert SafeCastOverflowedUintDowncast(24, value);
        }
        return uint24(value);
    }

    /**
     * @dev Returns the downcasted uint16 from uint256, reverting on
     * overflow (when the input is greater than largest uint16).
     *
     * Counterpart to Solidity's `uint16` operator.
     *
     * Requirements:
     *
     * - input must fit into 16 bits
     */
    function toUint16(uint256 value) internal pure returns (uint16) {
        if (value > type(uint16).max) {
            revert SafeCastOverflowedUintDowncast(16, value);
        }
        return uint16(value);
    }

    /**
     * @dev Returns the downcasted uint8 from uint256, reverting on
     * overflow (when the input is greater than largest uint8).
     *
     * Counterpart to Solidity's `uint8` operator.
     *
     * Requirements:
     *
     * - input must fit into 8 bits
     */
    function toUint8(uint256 value) internal pure returns (uint8) {
        if (value > type(uint8).max) {
            revert SafeCastOverflowedUintDowncast(8, value);
        }
        return uint8(value);
    }

    /**
     * @dev Converts a signed int256 into an unsigned uint256.
     *
     * Requirements:
     *
     * - input must be greater than or equal to 0.
     */
    function toUint256(int256 value) internal pure returns (uint256) {
        if (value < 0) {
            revert SafeCastOverflowedIntToUint(value);
        }
        return uint256(value);
    }

    /**
     * @dev Returns the downcasted int248 from int256, reverting on
     * overflow (when the input is less than smallest int248 or
     * greater than largest int248).
     *
     * Counterpart to Solidity's `int248` operator.
     *
     * Requirements:
     *
     * - input must fit into 248 bits
     */
    function toInt248(int256 value) internal pure returns (int248 downcasted) {
        downcasted = int248(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(248, value);
        }
    }

    /**
     * @dev Returns the downcasted int240 from int256, reverting on
     * overflow (when the input is less than smallest int240 or
     * greater than largest int240).
     *
     * Counterpart to Solidity's `int240` operator.
     *
     * Requirements:
     *
     * - input must fit into 240 bits
     */
    function toInt240(int256 value) internal pure returns (int240 downcasted) {
        downcasted = int240(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(240, value);
        }
    }

    /**
     * @dev Returns the downcasted int232 from int256, reverting on
     * overflow (when the input is less than smallest int232 or
     * greater than largest int232).
     *
     * Counterpart to Solidity's `int232` operator.
     *
     * Requirements:
     *
     * - input must fit into 232 bits
     */
    function toInt232(int256 value) internal pure returns (int232 downcasted) {
        downcasted = int232(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(232, value);
        }
    }

    /**
     * @dev Returns the downcasted int224 from int256, reverting on
     * overflow (when the input is less than smallest int224 or
     * greater than largest int224).
     *
     * Counterpart to Solidity's `int224` operator.
     *
     * Requirements:
     *
     * - input must fit into 224 bits
     */
    function toInt224(int256 value) internal pure returns (int224 downcasted) {
        downcasted = int224(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(224, value);
        }
    }

    /**
     * @dev Returns the downcasted int216 from int256, reverting on
     * overflow (when the input is less than smallest int216 or
     * greater than largest int216).
     *
     * Counterpart to Solidity's `int216` operator.
     *
     * Requirements:
     *
     * - input must fit into 216 bits
     */
    function toInt216(int256 value) internal pure returns (int216 downcasted) {
        downcasted = int216(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(216, value);
        }
    }

    /**
     * @dev Returns the downcasted int208 from int256, reverting on
     * overflow (when the input is less than smallest int208 or
     * greater than largest int208).
     *
     * Counterpart to Solidity's `int208` operator.
     *
     * Requirements:
     *
     * - input must fit into 208 bits
     */
    function toInt208(int256 value) internal pure returns (int208 downcasted) {
        downcasted = int208(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(208, value);
        }
    }

    /**
     * @dev Returns the downcasted int200 from int256, reverting on
     * overflow (when the input is less than smallest int200 or
     * greater than largest int200).
     *
     * Counterpart to Solidity's `int200` operator.
     *
     * Requirements:
     *
     * - input must fit into 200 bits
     */
    function toInt200(int256 value) internal pure returns (int200 downcasted) {
        downcasted = int200(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(200, value);
        }
    }

    /**
     * @dev Returns the downcasted int192 from int256, reverting on
     * overflow (when the input is less than smallest int192 or
     * greater than largest int192).
     *
     * Counterpart to Solidity's `int192` operator.
     *
     * Requirements:
     *
     * - input must fit into 192 bits
     */
    function toInt192(int256 value) internal pure returns (int192 downcasted) {
        downcasted = int192(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(192, value);
        }
    }

    /**
     * @dev Returns the downcasted int184 from int256, reverting on
     * overflow (when the input is less than smallest int184 or
     * greater than largest int184).
     *
     * Counterpart to Solidity's `int184` operator.
     *
     * Requirements:
     *
     * - input must fit into 184 bits
     */
    function toInt184(int256 value) internal pure returns (int184 downcasted) {
        downcasted = int184(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(184, value);
        }
    }

    /**
     * @dev Returns the downcasted int176 from int256, reverting on
     * overflow (when the input is less than smallest int176 or
     * greater than largest int176).
     *
     * Counterpart to Solidity's `int176` operator.
     *
     * Requirements:
     *
     * - input must fit into 176 bits
     */
    function toInt176(int256 value) internal pure returns (int176 downcasted) {
        downcasted = int176(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(176, value);
        }
    }

    /**
     * @dev Returns the downcasted int168 from int256, reverting on
     * overflow (when the input is less than smallest int168 or
     * greater than largest int168).
     *
     * Counterpart to Solidity's `int168` operator.
     *
     * Requirements:
     *
     * - input must fit into 168 bits
     */
    function toInt168(int256 value) internal pure returns (int168 downcasted) {
        downcasted = int168(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(168, value);
        }
    }

    /**
     * @dev Returns the downcasted int160 from int256, reverting on
     * overflow (when the input is less than smallest int160 or
     * greater than largest int160).
     *
     * Counterpart to Solidity's `int160` operator.
     *
     * Requirements:
     *
     * - input must fit into 160 bits
     */
    function toInt160(int256 value) internal pure returns (int160 downcasted) {
        downcasted = int160(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(160, value);
        }
    }

    /**
     * @dev Returns the downcasted int152 from int256, reverting on
     * overflow (when the input is less than smallest int152 or
     * greater than largest int152).
     *
     * Counterpart to Solidity's `int152` operator.
     *
     * Requirements:
     *
     * - input must fit into 152 bits
     */
    function toInt152(int256 value) internal pure returns (int152 downcasted) {
        downcasted = int152(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(152, value);
        }
    }

    /**
     * @dev Returns the downcasted int144 from int256, reverting on
     * overflow (when the input is less than smallest int144 or
     * greater than largest int144).
     *
     * Counterpart to Solidity's `int144` operator.
     *
     * Requirements:
     *
     * - input must fit into 144 bits
     */
    function toInt144(int256 value) internal pure returns (int144 downcasted) {
        downcasted = int144(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(144, value);
        }
    }

    /**
     * @dev Returns the downcasted int136 from int256, reverting on
     * overflow (when the input is less than smallest int136 or
     * greater than largest int136).
     *
     * Counterpart to Solidity's `int136` operator.
     *
     * Requirements:
     *
     * - input must fit into 136 bits
     */
    function toInt136(int256 value) internal pure returns (int136 downcasted) {
        downcasted = int136(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(136, value);
        }
    }

    /**
     * @dev Returns the downcasted int128 from int256, reverting on
     * overflow (when the input is less than smallest int128 or
     * greater than largest int128).
     *
     * Counterpart to Solidity's `int128` operator.
     *
     * Requirements:
     *
     * - input must fit into 128 bits
     */
    function toInt128(int256 value) internal pure returns (int128 downcasted) {
        downcasted = int128(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(128, value);
        }
    }

    /**
     * @dev Returns the downcasted int120 from int256, reverting on
     * overflow (when the input is less than smallest int120 or
     * greater than largest int120).
     *
     * Counterpart to Solidity's `int120` operator.
     *
     * Requirements:
     *
     * - input must fit into 120 bits
     */
    function toInt120(int256 value) internal pure returns (int120 downcasted) {
        downcasted = int120(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(120, value);
        }
    }

    /**
     * @dev Returns the downcasted int112 from int256, reverting on
     * overflow (when the input is less than smallest int112 or
     * greater than largest int112).
     *
     * Counterpart to Solidity's `int112` operator.
     *
     * Requirements:
     *
     * - input must fit into 112 bits
     */
    function toInt112(int256 value) internal pure returns (int112 downcasted) {
        downcasted = int112(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(112, value);
        }
    }

    /**
     * @dev Returns the downcasted int104 from int256, reverting on
     * overflow (when the input is less than smallest int104 or
     * greater than largest int104).
     *
     * Counterpart to Solidity's `int104` operator.
     *
     * Requirements:
     *
     * - input must fit into 104 bits
     */
    function toInt104(int256 value) internal pure returns (int104 downcasted) {
        downcasted = int104(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(104, value);
        }
    }

    /**
     * @dev Returns the downcasted int96 from int256, reverting on
     * overflow (when the input is less than smallest int96 or
     * greater than largest int96).
     *
     * Counterpart to Solidity's `int96` operator.
     *
     * Requirements:
     *
     * - input must fit into 96 bits
     */
    function toInt96(int256 value) internal pure returns (int96 downcasted) {
        downcasted = int96(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(96, value);
        }
    }

    /**
     * @dev Returns the downcasted int88 from int256, reverting on
     * overflow (when the input is less than smallest int88 or
     * greater than largest int88).
     *
     * Counterpart to Solidity's `int88` operator.
     *
     * Requirements:
     *
     * - input must fit into 88 bits
     */
    function toInt88(int256 value) internal pure returns (int88 downcasted) {
        downcasted = int88(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(88, value);
        }
    }

    /**
     * @dev Returns the downcasted int80 from int256, reverting on
     * overflow (when the input is less than smallest int80 or
     * greater than largest int80).
     *
     * Counterpart to Solidity's `int80` operator.
     *
     * Requirements:
     *
     * - input must fit into 80 bits
     */
    function toInt80(int256 value) internal pure returns (int80 downcasted) {
        downcasted = int80(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(80, value);
        }
    }

    /**
     * @dev Returns the downcasted int72 from int256, reverting on
     * overflow (when the input is less than smallest int72 or
     * greater than largest int72).
     *
     * Counterpart to Solidity's `int72` operator.
     *
     * Requirements:
     *
     * - input must fit into 72 bits
     */
    function toInt72(int256 value) internal pure returns (int72 downcasted) {
        downcasted = int72(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(72, value);
        }
    }

    /**
     * @dev Returns the downcasted int64 from int256, reverting on
     * overflow (when the input is less than smallest int64 or
     * greater than largest int64).
     *
     * Counterpart to Solidity's `int64` operator.
     *
     * Requirements:
     *
     * - input must fit into 64 bits
     */
    function toInt64(int256 value) internal pure returns (int64 downcasted) {
        downcasted = int64(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(64, value);
        }
    }

    /**
     * @dev Returns the downcasted int56 from int256, reverting on
     * overflow (when the input is less than smallest int56 or
     * greater than largest int56).
     *
     * Counterpart to Solidity's `int56` operator.
     *
     * Requirements:
     *
     * - input must fit into 56 bits
     */
    function toInt56(int256 value) internal pure returns (int56 downcasted) {
        downcasted = int56(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(56, value);
        }
    }

    /**
     * @dev Returns the downcasted int48 from int256, reverting on
     * overflow (when the input is less than smallest int48 or
     * greater than largest int48).
     *
     * Counterpart to Solidity's `int48` operator.
     *
     * Requirements:
     *
     * - input must fit into 48 bits
     */
    function toInt48(int256 value) internal pure returns (int48 downcasted) {
        downcasted = int48(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(48, value);
        }
    }

    /**
     * @dev Returns the downcasted int40 from int256, reverting on
     * overflow (when the input is less than smallest int40 or
     * greater than largest int40).
     *
     * Counterpart to Solidity's `int40` operator.
     *
     * Requirements:
     *
     * - input must fit into 40 bits
     */
    function toInt40(int256 value) internal pure returns (int40 downcasted) {
        downcasted = int40(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(40, value);
        }
    }

    /**
     * @dev Returns the downcasted int32 from int256, reverting on
     * overflow (when the input is less than smallest int32 or
     * greater than largest int32).
     *
     * Counterpart to Solidity's `int32` operator.
     *
     * Requirements:
     *
     * - input must fit into 32 bits
     */
    function toInt32(int256 value) internal pure returns (int32 downcasted) {
        downcasted = int32(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(32, value);
        }
    }

    /**
     * @dev Returns the downcasted int24 from int256, reverting on
     * overflow (when the input is less than smallest int24 or
     * greater than largest int24).
     *
     * Counterpart to Solidity's `int24` operator.
     *
     * Requirements:
     *
     * - input must fit into 24 bits
     */
    function toInt24(int256 value) internal pure returns (int24 downcasted) {
        downcasted = int24(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(24, value);
        }
    }

    /**
     * @dev Returns the downcasted int16 from int256, reverting on
     * overflow (when the input is less than smallest int16 or
     * greater than largest int16).
     *
     * Counterpart to Solidity's `int16` operator.
     *
     * Requirements:
     *
     * - input must fit into 16 bits
     */
    function toInt16(int256 value) internal pure returns (int16 downcasted) {
        downcasted = int16(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(16, value);
        }
    }

    /**
     * @dev Returns the downcasted int8 from int256, reverting on
     * overflow (when the input is less than smallest int8 or
     * greater than largest int8).
     *
     * Counterpart to Solidity's `int8` operator.
     *
     * Requirements:
     *
     * - input must fit into 8 bits
     */
    function toInt8(int256 value) internal pure returns (int8 downcasted) {
        downcasted = int8(value);
        if (downcasted != value) {
            revert SafeCastOverflowedIntDowncast(8, value);
        }
    }

    /**
     * @dev Converts an unsigned uint256 into a signed int256.
     *
     * Requirements:
     *
     * - input must be less than or equal to maxInt256.
     */
    function toInt256(uint256 value) internal pure returns (int256) {
        // Note: Unsafe cast below is okay because `type(int256).max` is guaranteed to be positive
        if (value > uint256(type(int256).max)) {
            revert SafeCastOverflowedUintToInt(value);
        }
        return int256(value);
    }
}

File 24 of 36 : SignedMath.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/math/SignedMath.sol)

pragma solidity ^0.8.20;

/**
 * @dev Standard signed math utilities missing in the Solidity language.
 */
library SignedMath {
    /**
     * @dev Returns the largest of two signed numbers.
     */
    function max(int256 a, int256 b) internal pure returns (int256) {
        return a > b ? a : b;
    }

    /**
     * @dev Returns the smallest of two signed numbers.
     */
    function min(int256 a, int256 b) internal pure returns (int256) {
        return a < b ? a : b;
    }

    /**
     * @dev Returns the average of two signed numbers without overflow.
     * The result is rounded towards zero.
     */
    function average(int256 a, int256 b) internal pure returns (int256) {
        // Formula from the book "Hacker's Delight"
        int256 x = (a & b) + ((a ^ b) >> 1);
        return x + (int256(uint256(x) >> 255) & (a ^ b));
    }

    /**
     * @dev Returns the absolute unsigned value of a signed value.
     */
    function abs(int256 n) internal pure returns (uint256) {
        unchecked {
            // must be unchecked in order to support `n = type(int256).min`
            return uint256(n >= 0 ? n : -n);
        }
    }
}

File 25 of 36 : StorageSlot.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/StorageSlot.sol)
// This file was procedurally generated from scripts/generate/templates/StorageSlot.js.

pragma solidity ^0.8.20;

/**
 * @dev Library for reading and writing primitive types to specific storage slots.
 *
 * Storage slots are often used to avoid storage conflict when dealing with upgradeable contracts.
 * This library helps with reading and writing to such slots without the need for inline assembly.
 *
 * The functions in this library return Slot structs that contain a `value` member that can be used to read or write.
 *
 * Example usage to set ERC1967 implementation slot:
 * ```solidity
 * contract ERC1967 {
 *     bytes32 internal constant _IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;
 *
 *     function _getImplementation() internal view returns (address) {
 *         return StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value;
 *     }
 *
 *     function _setImplementation(address newImplementation) internal {
 *         require(newImplementation.code.length > 0);
 *         StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value = newImplementation;
 *     }
 * }
 * ```
 */
library StorageSlot {
    struct AddressSlot {
        address value;
    }

    struct BooleanSlot {
        bool value;
    }

    struct Bytes32Slot {
        bytes32 value;
    }

    struct Uint256Slot {
        uint256 value;
    }

    struct StringSlot {
        string value;
    }

    struct BytesSlot {
        bytes value;
    }

    /**
     * @dev Returns an `AddressSlot` with member `value` located at `slot`.
     */
    function getAddressSlot(bytes32 slot) internal pure returns (AddressSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `BooleanSlot` with member `value` located at `slot`.
     */
    function getBooleanSlot(bytes32 slot) internal pure returns (BooleanSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `Bytes32Slot` with member `value` located at `slot`.
     */
    function getBytes32Slot(bytes32 slot) internal pure returns (Bytes32Slot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `Uint256Slot` with member `value` located at `slot`.
     */
    function getUint256Slot(bytes32 slot) internal pure returns (Uint256Slot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `StringSlot` with member `value` located at `slot`.
     */
    function getStringSlot(bytes32 slot) internal pure returns (StringSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `StringSlot` representation of the string storage pointer `store`.
     */
    function getStringSlot(string storage store) internal pure returns (StringSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := store.slot
        }
    }

    /**
     * @dev Returns an `BytesSlot` with member `value` located at `slot`.
     */
    function getBytesSlot(bytes32 slot) internal pure returns (BytesSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := slot
        }
    }

    /**
     * @dev Returns an `BytesSlot` representation of the bytes storage pointer `store`.
     */
    function getBytesSlot(bytes storage store) internal pure returns (BytesSlot storage r) {
        /// @solidity memory-safe-assembly
        assembly {
            r.slot := store.slot
        }
    }
}

File 26 of 36 : Strings.sol
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (utils/Strings.sol)

pragma solidity ^0.8.20;

import {Math} from "./math/Math.sol";
import {SignedMath} from "./math/SignedMath.sol";

/**
 * @dev String operations.
 */
library Strings {
    bytes16 private constant HEX_DIGITS = "0123456789abcdef";
    uint8 private constant ADDRESS_LENGTH = 20;

    /**
     * @dev The `value` string doesn't fit in the specified `length`.
     */
    error StringsInsufficientHexLength(uint256 value, uint256 length);

    /**
     * @dev Converts a `uint256` to its ASCII `string` decimal representation.
     */
    function toString(uint256 value) internal pure returns (string memory) {
        unchecked {
            uint256 length = Math.log10(value) + 1;
            string memory buffer = new string(length);
            uint256 ptr;
            /// @solidity memory-safe-assembly
            assembly {
                ptr := add(buffer, add(32, length))
            }
            while (true) {
                ptr--;
                /// @solidity memory-safe-assembly
                assembly {
                    mstore8(ptr, byte(mod(value, 10), HEX_DIGITS))
                }
                value /= 10;
                if (value == 0) break;
            }
            return buffer;
        }
    }

    /**
     * @dev Converts a `int256` to its ASCII `string` decimal representation.
     */
    function toStringSigned(int256 value) internal pure returns (string memory) {
        return string.concat(value < 0 ? "-" : "", toString(SignedMath.abs(value)));
    }

    /**
     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation.
     */
    function toHexString(uint256 value) internal pure returns (string memory) {
        unchecked {
            return toHexString(value, Math.log256(value) + 1);
        }
    }

    /**
     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation with fixed length.
     */
    function toHexString(uint256 value, uint256 length) internal pure returns (string memory) {
        uint256 localValue = value;
        bytes memory buffer = new bytes(2 * length + 2);
        buffer[0] = "0";
        buffer[1] = "x";
        for (uint256 i = 2 * length + 1; i > 1; --i) {
            buffer[i] = HEX_DIGITS[localValue & 0xf];
            localValue >>= 4;
        }
        if (localValue != 0) {
            revert StringsInsufficientHexLength(value, length);
        }
        return string(buffer);
    }

    /**
     * @dev Converts an `address` with fixed length of 20 bytes to its not checksummed ASCII `string` hexadecimal
     * representation.
     */
    function toHexString(address addr) internal pure returns (string memory) {
        return toHexString(uint256(uint160(addr)), ADDRESS_LENGTH);
    }

    /**
     * @dev Returns true if the two strings are equal.
     */
    function equal(string memory a, string memory b) internal pure returns (bool) {
        return bytes(a).length == bytes(b).length && keccak256(bytes(a)) == keccak256(bytes(b));
    }
}

File 27 of 36 : IPlaythroughTracker.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

interface IPlaythroughTracker {
    struct State {
        uint256 total;
        mapping(uint256 offeringId => uint256) totalPerOffering;
    }

    event RequirementAdded(address account, address creditId, uint256 offeringId, uint256 amount);
    event AccountProgressed(address account, address creditId, uint256 amount);
    event RequirementsAdded(address[] accounts, uint256[] amounts, address creditId, uint256 offeringId);
    event BonusCashSet(address bonusCash);

    function isLocked(address _account, address _creditId) external view returns (bool);

    function addRequirements(
        address[] calldata _accounts,
        uint256[] calldata _amounts,
        address _creditId,
        uint256 _offeringId
    ) external;

    function progressAccount(address _account, address _creditId, address _gameAddress, uint256 _amount) external;

    function progressAccount(uint256 _offeringId, address _creditId, address _account, uint256 _amount) external;

    function progressAccounts(
        uint256 _offeringId,
        address _creditId,
        address[] calldata _accounts,
        uint256[] memory _amounts
    ) external;

    function undoOffering(uint256 _offeringId, address _creditId, address _account) external;

    function undoOfferings(uint256 _offeringId, address _creditId, address[] calldata _accounts) external;
}

File 28 of 36 : ITournamentRegistry.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

interface ITournamentRegistry {
    struct TournamentData {
        bool isApproved;
        bool hasItems;
    }

    event TournamentApprovalUpdated(address tournament, bool approved);
    event TournamentItemsRegistered(address tournament);

    function setApproved(address _tournament, bool _approved) external;

    function registerItems(address _tournament) external;

    function isApproved(address _token) external view returns (bool);

    function getTournamentData(address _tournament) external view returns (TournamentData memory);
}

File 29 of 36 : ISwapExecutor.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

interface ISwapExecutor {
    error ZeroAddress();

    event FeeSet(uint24 fee);

    function executeSwap(
        address _fromToken,
        address _toToken,
        uint256 _amount,
        uint256 _deadline,
        uint256 _amountOutMinimum
    ) external returns (uint256);
}

File 30 of 36 : PVMath.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

library PVMath {
    function mul(uint256 a, uint256 b) internal pure returns (uint256) {
        return (a * b) / 1e18;
    }

    function div(uint256 a, uint256 b) internal pure returns (uint256) {
        return (a * 1e18) / b;
    }
}

File 31 of 36 : IBonusCash.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {ICredits} from "../credits/ICredits.sol";

interface IBonusCash {
    struct BonusCashInfo {
        uint256 totalSupply;
        address creditId;
        uint256 creditRatio;
        uint256 collateral;
        uint256 targetEntryPct;
        uint256 activeCount;
        address admin;
        bool invalidated;
        // gameAddress => isIncluded
        mapping(address => bool) included;
        // playerAddress => startingBalance
        mapping(address => uint256) startingBalance;
        // gameAddress => tournamentId => hasActiveTournament
        mapping(address => mapping(uint256 => bool)) isActive;
        // gameAddress => tournamentId => pendingBonusCashAmount
        mapping(address => mapping(uint256 => uint256)) pendingSupply;
    }
    struct Distribution {
        uint256 offeringId;
        address[] players;
        uint256[] amounts;
        uint256[] playthroughRequirements;
        bytes[] sigs;
    }

    event MinCollateralRatioSet(uint256 minCollateralRatio);
    event OfferingUpdated(
        uint256 offeringId,
        address creditId,
        uint256 collateral,
        uint256 targetEntryPct,
        address[] gamesAdded,
        address[] gamesRemoved,
        address admin
    );
    event PlaythroughUndone(uint256 offeringId, address[] players);
    event BonusCashDistributed(uint256 offeringId, address[] players, uint256[] amounts);
    event BonusCashSpent(uint256 offeringId, uint256 tournamentId, address game, address player, uint256 amount);
    event CollateralSent(uint256 offeringId, uint256 tournamentId, uint256 amount, address game);
    event TournamentEnded(address game, uint256 tournamentId);
    event OfferingInvalidated(uint256 offeringId);
    event CollateralWithdrawn(uint256 offeringId, address to, uint256 amount);
    event CreditsSet(ICredits credits);
    event PlaythroughTrackerSet(address playthroughTracker);
    event MaxAllowedPlaythroughSet(uint256 playthrough);
    event PlayerOptedOut(address player, uint256 offeringId);

    function creditToGameToOfferingId(address creditId, address game) external view returns (uint256);

    function gameBalanceOf(address game, address creditId, address player) external view returns (uint256);

    function gameTargetEntryPct(address game, address creditId) external view returns (uint256);

    function spendRequiredAmount(
        address _account,
        address _token,
        uint256 _amountTickets,
        uint256 _amountCredits,
        uint256 _tournamentId,
        uint256 _fee
    ) external returns (uint256);

    function getBonusCashForEntry(
        address _account,
        address _token,
        uint256 _ticketBalance,
        uint256 _creditBalance,
        uint256 _entryFee
    ) external view returns (uint256 _requiredAmount);

    function collateralPayout(address _creditId, uint256 _tournamentId, uint256 _amount) external;

    function endTournament(address _creditId, uint256 _tournamentId, uint256 _collateralToReturn) external;
}

File 32 of 36 : ICredits.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";

import {ISemiFungibleSoulboundTokenUpgradeable} from "../sfst/ISemiFungibleSoulboundTokenUpgradeable.sol";
import {ISwapExecutor} from "../../interfaces/ISwapExecutor.sol";

interface ICredits is IAccessControl, ISemiFungibleSoulboundTokenUpgradeable {
    error Credits__ZeroAddress();

    event WapeSet(address wape);
    event PlaythroughTrackerSet(address playthroughTracker);
    event AllowanceWithdrawal(address token, address receiver, uint256 amount);
    event CreditsPurchased(address token, address payFrom, address mintTo, uint256 amount);
    event CreditTypeConfigured(address token, uint256 ratio);
    event BonusCashSet(address bonusCash);
    event TicketsSet(address tickets);
    event CreditsReleased(address _from, address _to, address _token, uint256 _amount);
    event FeeReleased(
        address account,
        address token,
        uint256 amount,
        uint256 tournamentId,
        uint256 collateralAmount,
        uint256 amountLiquid,
        uint256 amountIlliquid
    );
    event ExcessTokensWithdrawn(address token, address to, uint256 excessAmount);

    event CreditsSwapped(address fromToken, address toToken, uint256 tokensIn, uint256 creditsOut);
    event SwapImplEnabledChanged(address indexed swapImpl, bool enabled);

    function release(address _from, address _token, uint256 _amount) external returns (uint256 _releasedAmount);

    function purchaseCredits(uint256 _amount, address _mintTo, address _token, address _payFrom) external payable;

    function mintBatch(address _creditId, address[] memory _players, uint256[] memory _amounts) external;

    function tokenPerCreditRatio(address _creditId) external view returns (uint256);

    function purchaseCreditsWithGivenCollateral(
        uint256 _collateralAmount,
        address _mintTo,
        address _tokenAddress,
        address _payFrom
    ) external payable returns (uint256);

    function swap(
        address _fromToken,
        address _toToken,
        address _account,
        uint256 _creditsRequired,
        uint256 _deadline,
        uint256 _maxAmountTokensIn,
        ISwapExecutor _swapImpl
    ) external;

    function swapImplEnabled(address _swapImpl) external view returns (bool);

    function balanceOf(address account, address token) external view returns (uint256);
}

File 33 of 36 : ISemiFungibleSoulboundTokenUpgradeable.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {IERC165} from "@openzeppelin/contracts/utils/introspection/IERC165.sol";

interface ISemiFungibleSoulboundTokenUpgradeable is IERC165 {
    /**
     * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param balance Current balance for the interacting account.
     * @param needed Minimum amount required to perform a transfer.
     * @param tokenId Identifier number of a token.
     */
    error InsufficientBalance(address sender, uint256 balance, uint256 needed, uint256 tokenId);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the token `value`. Used in transfers.
     * @param value value of tokens to transfer.
     */
    error InvalidValue(uint256 value);

    /**
     * @dev Indicates an array length mismatch between ids and values in a safeBatchTransferFrom operation.
     * Used in batch transfers.
     * @param idsLength Length of the array of token identifiers
     * @param valuesLength Length of the array of token amounts
     */
    error InvalidArrayLength(uint256 idsLength, uint256 valuesLength);

    /**
     * @dev Emitted when `value` amount of tokens of type `id` are transferred from `from` to `to` by `operator`.
     */
    event TransferSingle(address indexed operator, address indexed from, address indexed to, uint256 id, uint256 value);

    /**
     * @dev Equivalent to multiple {TransferSingle} events, where `operator`, `from` and `to` are the same for all
     * transfers.
     */
    event TransferBatch(
        address indexed operator,
        address indexed from,
        address indexed to,
        uint256[] ids,
        uint256[] values
    );

    /**
     * @dev Returns the value of tokens of token type `id` owned by `account`.
     *
     * Requirements:
     *
     * - `account` cannot be the zero address.
     */
    function balanceOf(address account, uint256 id) external view returns (uint256);

    /**
     * @dev Batched version of {balanceOf}.
     *
     * Requirements:
     *
     * - `accounts` and `ids` must have the same length.
     */
    function balanceOfBatch(
        address[] calldata accounts,
        uint256[] calldata ids
    ) external view returns (uint256[] memory);

    /**
     * @dev Transfers a `value` amount of tokens of type `id` from `from` to `to`.
     *
     * Emits a {TransferSingle} event.
     *
     * Requirements:
     *
     * - `to` cannot be the zero address.
     * - If the caller is not `from`, it must have been approved to spend ``from``'s tokens via {setApprovalForAll}.
     * - `from` must have a balance of tokens of type `id` of at least `value` amount.
     */
    function transferFrom(address from, address to, uint256 id, uint256 value) external;

    /**
     * Emits either a {TransferSingle} or a {TransferBatch} event, depending on the length of the array arguments.
     *
     * Requirements:
     *
     * - `ids` and `values` must have the same length.
     */
    function batchTransferFrom(address from, address to, uint256[] calldata ids, uint256[] calldata values) external;
}

File 34 of 36 : SemiFungibleSoulboundTokenUpgradeable.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {ContextUpgradeable} from "@openzeppelin/contracts-upgradeable/utils/ContextUpgradeable.sol";
import {IERC165} from "@openzeppelin/contracts/utils/introspection/IERC165.sol";
import {ERC165Upgradeable} from "@openzeppelin/contracts-upgradeable/utils/introspection/ERC165Upgradeable.sol";
import {Arrays} from "@openzeppelin/contracts/utils/Arrays.sol";
import {Initializable} from "@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol";
import {AccessControlDefaultAdminRulesUpgradeable} from "@openzeppelin/contracts-upgradeable/access/extensions/AccessControlDefaultAdminRulesUpgradeable.sol";
import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";

import {ISemiFungibleSoulboundTokenUpgradeable} from "./ISemiFungibleSoulboundTokenUpgradeable.sol";

/**
 * @dev Implementation of a soulbound multi-token.
 * Originally based on code by OpenZeppelin: https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/token/ERC1155/ERC1155.sol
 */
abstract contract SemiFungibleSoulboundTokenUpgradeable is
    Initializable,
    ContextUpgradeable,
    ERC165Upgradeable,
    AccessControlDefaultAdminRulesUpgradeable,
    ISemiFungibleSoulboundTokenUpgradeable
{
    using Arrays for uint256[];
    using Arrays for address[];

    bytes32 public constant GOVERNOR_ROLE = 0x00;
    bytes32 public constant TRANSFER_ROLE = keccak256("TRANSFER_ROLE");

    /// @custom:storage-location erc7201:openzeppelin.storage.Token
    struct TokenStorage {
        mapping(uint256 id => mapping(address account => uint256)) _balances;
        mapping(address account => mapping(address operator => bool)) _operatorApprovals;
    }

    // keccak256(abi.encode(uint256(keccak256("reboot.storage.Token")) - 1)) & ~bytes32(uint256(0xff))
    bytes32 private constant TokenStorageLocation = 0x3487ca777fe86250bb0b5cc12e94513947700c89dfa1fbaf3d5e12571161bd00;

    function _getTokenStorage() private pure returns (TokenStorage storage $) {
        assembly {
            $.slot := TokenStorageLocation
        }
    }

    /**
     * @dev See {IERC165-supportsInterface}.
     */
    function supportsInterface(
        bytes4 interfaceId
    )
        public
        view
        virtual
        override(ERC165Upgradeable, IERC165, AccessControlDefaultAdminRulesUpgradeable)
        returns (bool)
    {
        return
            interfaceId == type(ISemiFungibleSoulboundTokenUpgradeable).interfaceId ||
            interfaceId == type(IAccessControl).interfaceId ||
            super.supportsInterface(interfaceId);
    }

    /**
     * @dev See {ISemiFungibleSoulboundTokenUpgradeable-balanceOf}.
     */
    function balanceOf(address account, uint256 id) public view virtual returns (uint256) {
        TokenStorage storage $ = _getTokenStorage();
        return $._balances[id][account];
    }

    /**
     * @dev See {ISemiFungibleSoulboundTokenUpgradeable-balanceOfBatch}.
     *
     * Requirements:
     *
     * - `accounts` and `ids` must have the same length.
     */
    function balanceOfBatch(
        address[] memory accounts,
        uint256[] memory ids
    ) public view virtual returns (uint256[] memory) {
        if (accounts.length != ids.length) {
            revert InvalidArrayLength(ids.length, accounts.length);
        }

        uint256[] memory batchBalances = new uint256[](accounts.length);

        for (uint256 i = 0; i < accounts.length; ++i) {
            batchBalances[i] = balanceOf(accounts.unsafeMemoryAccess(i), ids.unsafeMemoryAccess(i));
        }

        return batchBalances;
    }

    /**
     * @dev See {ISemiFungibleSoulboundTokenUpgradeable-transferFrom}.
     */
    function transferFrom(address from, address to, uint256 id, uint256 value) public onlyRole(TRANSFER_ROLE) {
        _transferFrom(from, to, id, value);
    }

    /**
     * @dev See {ISemiFungibleSoulboundTokenUpgradeable-batchTransferFrom}.
     */
    function batchTransferFrom(
        address from,
        address to,
        uint256[] memory ids,
        uint256[] memory values
    ) public onlyRole(TRANSFER_ROLE) {
        _batchTransferFrom(from, to, ids, values);
    }

    /**
     * @dev Transfers a `value` amount of tokens of type `id` from `from` to `to`. Will mint (or burn) if `from`
     * (or `to`) is the zero address.
     *
     * Emits a {TransferSingle} event if the arrays contain one element, and {TransferBatch} otherwise.
     *
     */
    function _update(address from, address to, uint256[] memory ids, uint256[] memory values) internal virtual {
        TokenStorage storage $ = _getTokenStorage();
        if (ids.length != values.length) {
            revert InvalidArrayLength(ids.length, values.length);
        }

        address operator = _msgSender();

        for (uint256 i = 0; i < ids.length; ++i) {
            uint256 id = ids.unsafeMemoryAccess(i);
            uint256 value = values.unsafeMemoryAccess(i);

            if (from != address(0)) {
                uint256 fromBalance = $._balances[id][from];
                if (fromBalance < value) {
                    revert InsufficientBalance(from, fromBalance, value, id);
                }
                unchecked {
                    // Overflow not possible: value <= fromBalance
                    $._balances[id][from] = fromBalance - value;
                }
            }

            if (to != address(0)) {
                $._balances[id][to] += value;
            }
        }

        if (ids.length == 1) {
            uint256 id = ids.unsafeMemoryAccess(0);
            uint256 value = values.unsafeMemoryAccess(0);
            emit TransferSingle(operator, from, to, id, value);
        } else {
            emit TransferBatch(operator, from, to, ids, values);
        }
    }

    /**
     * @dev Transfers a `value` tokens of token type `id` from `from` to `to`.
     *
     * Emits a {TransferSingle} event.
     *
     * Requirements:
     *
     * - `to` cannot be the zero address.
     * - `from` must have a balance of tokens of type `id` of at least `value` amount.
     */
    function _transferFrom(address from, address to, uint256 id, uint256 value) internal {
        if (to == address(0)) {
            revert InvalidReceiver(address(0));
        }
        if (from == address(0)) {
            revert InvalidSender(address(0));
        }
        (uint256[] memory ids, uint256[] memory values) = _asSingletonArrays(id, value);
        _update(from, to, ids, values);
    }

    /**
     * @dev Batched version of {_transferFrom}.
     *
     * Emits a {TransferBatch} event.
     *
     * Requirements:
     *
     * - `ids` and `values` must have the same length.
     */
    function _batchTransferFrom(address from, address to, uint256[] memory ids, uint256[] memory values) internal {
        if (to == address(0)) {
            revert InvalidReceiver(address(0));
        }
        if (from == address(0)) {
            revert InvalidSender(address(0));
        }
        _update(from, to, ids, values);
    }

    /**
     * @dev Creates a `value` amount of tokens of type `id`, and assigns them to `to`.
     *
     * Emits a {TransferSingle} event.
     *
     * Requirements:
     *
     * - `to` cannot be the zero address.
     */
    function _mint(address to, uint256 id, uint256 value) internal {
        if (to == address(0)) {
            revert InvalidReceiver(address(0));
        }
        if (value == 0) {
            revert InvalidValue(value);
        }
        (uint256[] memory ids, uint256[] memory values) = _asSingletonArrays(id, value);
        _update(address(0), to, ids, values);
    }

    /**
     * @dev Batched version of {_mint}.
     *
     * Emits a {TransferBatch} event.
     *
     * Requirements:
     *
     * - `ids` and `values` must have the same length.
     * - `to` cannot be the zero address.
     */
    function _mintBatch(address to, uint256[] memory ids, uint256[] memory values) internal {
        if (to == address(0)) {
            revert InvalidReceiver(address(0));
        }
        _update(address(0), to, ids, values);
    }

    /**
     * @dev Destroys a `value` amount of tokens of type `id` from `from`
     *
     * Emits a {TransferSingle} event.
     *
     * Requirements:
     *
     * - `from` cannot be the zero address.
     * - `from` must have at least `value` amount of tokens of type `id`.
     */
    function _burn(address from, uint256 id, uint256 value) internal {
        if (from == address(0)) {
            revert InvalidSender(address(0));
        }
        (uint256[] memory ids, uint256[] memory values) = _asSingletonArrays(id, value);
        _update(from, address(0), ids, values);
    }

    /**
     * @dev Batched version of {_burn}.
     *
     * Emits a {TransferBatch} event.
     *
     * Requirements:
     *
     * - `from` cannot be the zero address.
     * - `from` must have at least `value` amount of tokens of type `id`.
     * - `ids` and `values` must have the same length.
     */
    function _burnBatch(address from, uint256[] memory ids, uint256[] memory values) internal {
        if (from == address(0)) {
            revert InvalidSender(address(0));
        }
        _update(from, address(0), ids, values);
    }

    /**
     * @dev Creates an array in memory with only one value for each of the elements provided.
     */
    function _asSingletonArrays(
        uint256 element1,
        uint256 element2
    ) private pure returns (uint256[] memory array1, uint256[] memory array2) {
        /// @solidity memory-safe-assembly
        assembly {
            // Load the free memory pointer
            array1 := mload(0x40)
            // Set array length to 1
            mstore(array1, 1)
            // Store the single element at the next word after the length (where content starts)
            mstore(add(array1, 0x20), element1)

            // Repeat for next array locating it right after the first array
            array2 := add(array1, 0x40)
            mstore(array2, 1)
            mstore(add(array2, 0x20), element2)

            // Update the free memory pointer by pointing after the second array
            mstore(0x40, add(array2, 0x40))
        }
    }
}

File 35 of 36 : ITokenRegistry.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";

interface ITokenRegistry is IAccessControl {
    event TokenUpdated(address token, bool approved);

    function isApproved(address _token) external view returns (bool);
}

File 36 of 36 : SignatureValidator.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;

import {ECDSA} from "@openzeppelin/contracts/utils/cryptography/ECDSA.sol";
import {MessageHashUtils} from "@openzeppelin/contracts/utils/cryptography/MessageHashUtils.sol";
import {Strings} from "@openzeppelin/contracts/utils/Strings.sol";

contract SignatureValidator {
    using ECDSA for bytes32;
    using Strings for uint256;
    using MessageHashUtils for bytes;

    function verify(
        address _account,
        uint256 _amount,
        uint256 _playthrough,
        address _token,
        uint256 _nonce,
        bytes calldata signature
    ) public pure returns (bool) {
        bytes memory _message = _recreateMessage(_account, _amount, _playthrough, _token, _nonce);
        return _message.toEthSignedMessageHash().recover(signature) == _account;
    }

    function getMessageHash(address _player, uint256 _offeringId, uint256 _nonce) public pure returns (bytes32) {
        return keccak256(abi.encodePacked(_player, _offeringId, _nonce));
    }

    function verify(
        address _player,
        uint256 _offeringId,
        address _admin,
        uint256 _nonce,
        bytes calldata signature
    ) public pure returns (bool) {
        bytes32 messageHash = getMessageHash(_player, _offeringId, _nonce);
        bytes32 ethSignedMessageHash = _getEthSignedMessageHash(messageHash);

        return _recoverSigner(ethSignedMessageHash, signature) == _admin;
    }

    function _getEthSignedMessageHash(bytes32 _messageHash) private pure returns (bytes32) {
        /*
        Signature is produced by signing a keccak256 hash with the following format:
        "\x19Ethereum Signed Message\n" + len(msg) + msg
        */
        return keccak256(abi.encodePacked("\x19Ethereum Signed Message:\n32", _messageHash));
    }

    function _recoverSigner(bytes32 _ethSignedMessageHash, bytes calldata _signature) private pure returns (address) {
        (bytes32 r, bytes32 s, uint8 v) = _splitSignature(_signature);

        return ecrecover(_ethSignedMessageHash, v, r, s);
    }

    function _splitSignature(bytes memory sig) private pure returns (bytes32 r, bytes32 s, uint8 v) {
        require(sig.length == 65, "invalid signature length");

        assembly {
            /*
            First 32 bytes stores the length of the signature

            add(sig, 32) = pointer of sig + 32
            effectively, skips first 32 bytes of signature

            mload(p) loads next 32 bytes starting at the memory address p into memory
            */

            // first 32 bytes, after the length prefix
            r := mload(add(sig, 32))
            // second 32 bytes
            s := mload(add(sig, 64))
            // final byte (first byte of the next 32 bytes)
            v := byte(0, mload(add(sig, 96)))
        }

        // implicitly return (r, s, v)
    }

    function _recreateMessage(
        address _account,
        uint256 _amount,
        uint256 _playthrough,
        address _token,
        uint256 _nonce
    ) private pure returns (bytes memory) {
        return
            abi.encodePacked(
                "I, the owner of wallet ",
                Strings.toHexString(uint160(_account), 20),
                " accept this offer of ",
                _amount.toString(),
                " bonus cash credits with a playthrough requirement of ",
                _playthrough.toString(),
                ", and acknowledge it will prevent withdrawing my tickets backed by the ERC20 token at address ",
                Strings.toHexString(uint160(_token), 20),
                " until the playthrough requirement is met. Signature nonce: ",
                _nonce.toString(),
                "."
            );
    }
}

Settings
{
  "viaIR": false,
  "optimizer": {
    "enabled": true,
    "runs": 10
  },
  "evmVersion": "paris",
  "outputSelection": {
    "*": {
      "*": [
        "evm.bytecode",
        "evm.deployedBytecode",
        "devdoc",
        "userdoc",
        "metadata",
        "abi"
      ]
    }
  },
  "libraries": {}
}

Contract Security Audit

Contract ABI

[{"inputs":[],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[],"name":"AccessControlBadConfirmation","type":"error"},{"inputs":[{"internalType":"uint48","name":"schedule","type":"uint48"}],"name":"AccessControlEnforcedDefaultAdminDelay","type":"error"},{"inputs":[],"name":"AccessControlEnforcedDefaultAdminRules","type":"error"},{"inputs":[{"internalType":"address","name":"defaultAdmin","type":"address"}],"name":"AccessControlInvalidDefaultAdmin","type":"error"},{"inputs":[{"internalType":"address","name":"account","type":"address"},{"internalType":"bytes32","name":"neededRole","type":"bytes32"}],"name":"AccessControlUnauthorizedAccount","type":"error"},{"inputs":[{"internalType":"address","name":"target","type":"address"}],"name":"AddressEmptyCode","type":"error"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"AddressInsufficientBalance","type":"error"},{"inputs":[],"name":"ECDSAInvalidSignature","type":"error"},{"inputs":[{"internalType":"uint256","name":"length","type":"uint256"}],"name":"ECDSAInvalidSignatureLength","type":"error"},{"inputs":[{"internalType":"bytes32","name":"s","type":"bytes32"}],"name":"ECDSAInvalidSignatureS","type":"error"},{"inputs":[{"internalType":"address","name":"implementation","type":"address"}],"name":"ERC1967InvalidImplementation","type":"error"},{"inputs":[],"name":"ERC1967NonPayable","type":"error"},{"inputs":[],"name":"FailedInnerCall","type":"error"},{"inputs":[{"internalType":"address","name":"sender","type":"address"},{"internalType":"uint256","name":"balance","type":"uint256"},{"internalType":"uint256","name":"needed","type":"uint256"},{"internalType":"uint256","name":"tokenId","type":"uint256"}],"name":"InsufficientBalance","type":"error"},{"inputs":[{"internalType":"uint256","name":"idsLength","type":"uint256"},{"internalType":"uint256","name":"valuesLength","type":"uint256"}],"name":"InvalidArrayLength","type":"error"},{"inputs":[],"name":"InvalidInitialization","type":"error"},{"inputs":[{"internalType":"address","name":"receiver","type":"address"}],"name":"InvalidReceiver","type":"error"},{"inputs":[{"internalType":"address","name":"sender","type":"address"}],"name":"InvalidSender","type":"error"},{"inputs":[{"internalType":"uint256","name":"value","type":"uint256"}],"name":"InvalidValue","type":"error"},{"inputs":[],"name":"NotInitializing","type":"error"},{"inputs":[{"internalType":"uint8","name":"bits","type":"uint8"},{"internalType":"uint256","name":"value","type":"uint256"}],"name":"SafeCastOverflowedUintDowncast","type":"error"},{"inputs":[{"internalType":"address","name":"token","type":"address"}],"name":"SafeERC20FailedOperation","type":"error"},{"inputs":[{"internalType":"uint256","name":"value","type":"uint256"},{"internalType":"uint256","name":"length","type":"uint256"}],"name":"StringsInsufficientHexLength","type":"error"},{"inputs":[],"name":"UUPSUnauthorizedCallContext","type":"error"},{"inputs":[{"internalType":"bytes32","name":"slot","type":"bytes32"}],"name":"UUPSUnsupportedProxiableUUID","type":"error"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"},{"indexed":false,"internalType":"address[]","name":"players","type":"address[]"},{"indexed":false,"internalType":"uint256[]","name":"amounts","type":"uint256[]"}],"name":"BonusCashDistributed","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"tournamentId","type":"uint256"},{"indexed":false,"internalType":"address","name":"game","type":"address"},{"indexed":false,"internalType":"address","name":"player","type":"address"},{"indexed":false,"internalType":"uint256","name":"amount","type":"uint256"}],"name":"BonusCashSpent","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"tournamentId","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"amount","type":"uint256"},{"indexed":false,"internalType":"address","name":"game","type":"address"}],"name":"CollateralSent","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"},{"indexed":false,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256","name":"amount","type":"uint256"}],"name":"CollateralWithdrawn","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"contract ICredits","name":"credits","type":"address"}],"name":"CreditsSet","type":"event"},{"anonymous":false,"inputs":[],"name":"DefaultAdminDelayChangeCanceled","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint48","name":"newDelay","type":"uint48"},{"indexed":false,"internalType":"uint48","name":"effectSchedule","type":"uint48"}],"name":"DefaultAdminDelayChangeScheduled","type":"event"},{"anonymous":false,"inputs":[],"name":"DefaultAdminTransferCanceled","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"newAdmin","type":"address"},{"indexed":false,"internalType":"uint48","name":"acceptSchedule","type":"uint48"}],"name":"DefaultAdminTransferScheduled","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint64","name":"version","type":"uint64"}],"name":"Initialized","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"playthrough","type":"uint256"}],"name":"MaxAllowedPlaythroughSet","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"minCollateralRatio","type":"uint256"}],"name":"MinCollateralRatioSet","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"}],"name":"OfferingInvalidated","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"},{"indexed":false,"internalType":"address","name":"creditId","type":"address"},{"indexed":false,"internalType":"uint256","name":"collateral","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"targetEntryPct","type":"uint256"},{"indexed":false,"internalType":"address[]","name":"gamesAdded","type":"address[]"},{"indexed":false,"internalType":"address[]","name":"gamesRemoved","type":"address[]"},{"indexed":false,"internalType":"address","name":"admin","type":"address"}],"name":"OfferingUpdated","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"player","type":"address"},{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"}],"name":"PlayerOptedOut","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"playthroughTracker","type":"address"}],"name":"PlaythroughTrackerSet","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"offeringId","type":"uint256"},{"indexed":false,"internalType":"address[]","name":"players","type":"address[]"}],"name":"PlaythroughUndone","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"bytes32","name":"role","type":"bytes32"},{"indexed":true,"internalType":"bytes32","name":"previousAdminRole","type":"bytes32"},{"indexed":true,"internalType":"bytes32","name":"newAdminRole","type":"bytes32"}],"name":"RoleAdminChanged","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"bytes32","name":"role","type":"bytes32"},{"indexed":true,"internalType":"address","name":"account","type":"address"},{"indexed":true,"internalType":"address","name":"sender","type":"address"}],"name":"RoleGranted","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"bytes32","name":"role","type":"bytes32"},{"indexed":true,"internalType":"address","name":"account","type":"address"},{"indexed":true,"internalType":"address","name":"sender","type":"address"}],"name":"RoleRevoked","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"game","type":"address"},{"indexed":false,"internalType":"uint256","name":"tournamentId","type":"uint256"}],"name":"TournamentEnded","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"operator","type":"address"},{"indexed":true,"internalType":"address","name":"from","type":"address"},{"indexed":true,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256[]","name":"ids","type":"uint256[]"},{"indexed":false,"internalType":"uint256[]","name":"values","type":"uint256[]"}],"name":"TransferBatch","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"operator","type":"address"},{"indexed":true,"internalType":"address","name":"from","type":"address"},{"indexed":true,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256","name":"id","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"TransferSingle","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"implementation","type":"address"}],"name":"Upgraded","type":"event"},{"inputs":[],"name":"BONUS_CASH_ROLE","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"DEFAULT_ADMIN_ROLE","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"GOVERNOR_ROLE","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"SPENDER_ROLE","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"TRANSFER_ROLE","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"UPGRADE_INTERFACE_VERSION","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_governor","type":"address"},{"internalType":"uint256","name":"_minCollateralRatio","type":"uint256"},{"internalType":"contract IPlaythroughTracker","name":"_playthroughTracker","type":"address"},{"internalType":"contract ITokenRegistry","name":"_tokenRegistry","type":"address"},{"internalType":"contract ITournamentRegistry","name":"_tournamentRegistry","type":"address"},{"internalType":"uint256","name":"_maxAllowedPlaythrough","type":"uint256"}],"name":"__BonusCash_init","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"acceptDefaultAdminTransfer","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"},{"internalType":"uint256","name":"id","type":"uint256"}],"name":"balanceOf","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address[]","name":"accounts","type":"address[]"},{"internalType":"uint256[]","name":"ids","type":"uint256[]"}],"name":"balanceOfBatch","outputs":[{"internalType":"uint256[]","name":"","type":"uint256[]"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"from","type":"address"},{"internalType":"address","name":"to","type":"address"},{"internalType":"uint256[]","name":"ids","type":"uint256[]"},{"internalType":"uint256[]","name":"values","type":"uint256[]"}],"name":"batchTransferFrom","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"newAdmin","type":"address"}],"name":"beginDefaultAdminTransfer","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"cancelDefaultAdminTransfer","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint48","name":"newDelay","type":"uint48"}],"name":"changeDefaultAdminDelay","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_creditId","type":"address"},{"internalType":"uint256","name":"_tournamentId","type":"uint256"},{"internalType":"uint256","name":"_amount","type":"uint256"}],"name":"collateralPayout","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_creditId","type":"address"},{"internalType":"uint256","name":"_collateral","type":"uint256"},{"internalType":"uint256","name":"_targetEntryPct","type":"uint256"},{"internalType":"address[]","name":"_gameAddresses","type":"address[]"}],"name":"createOffering","outputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"","type":"address"},{"internalType":"address","name":"","type":"address"}],"name":"creditToGameToOfferingId","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"credits","outputs":[{"internalType":"contract ICredits","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"defaultAdmin","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"defaultAdminDelay","outputs":[{"internalType":"uint48","name":"","type":"uint48"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"defaultAdminDelayIncreaseWait","outputs":[{"internalType":"uint48","name":"","type":"uint48"}],"stateMutability":"view","type":"function"},{"inputs":[{"components":[{"internalType":"uint256","name":"offeringId","type":"uint256"},{"internalType":"address[]","name":"players","type":"address[]"},{"internalType":"uint256[]","name":"amounts","type":"uint256[]"},{"internalType":"uint256[]","name":"playthroughRequirements","type":"uint256[]"},{"internalType":"bytes[]","name":"sigs","type":"bytes[]"}],"internalType":"struct IBonusCash.Distribution","name":"_distro","type":"tuple"}],"name":"distribute","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_creditId","type":"address"},{"internalType":"uint256","name":"_tournamentId","type":"uint256"},{"internalType":"uint256","name":"_collateralToReturn","type":"uint256"}],"name":"endTournament","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_game","type":"address"},{"internalType":"address","name":"_creditId","type":"address"},{"internalType":"address","name":"_player","type":"address"}],"name":"gameBalanceOf","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_game","type":"address"},{"internalType":"address","name":"_creditId","type":"address"}],"name":"gameTargetEntryPct","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_account","type":"address"},{"internalType":"address","name":"_token","type":"address"},{"internalType":"uint256","name":"_ticketBalance","type":"uint256"},{"internalType":"uint256","name":"_creditBalance","type":"uint256"},{"internalType":"uint256","name":"_entryFee","type":"uint256"}],"name":"getBonusCashForEntry","outputs":[{"internalType":"uint256","name":"_bonusCashToConsume","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_player","type":"address"},{"internalType":"uint256","name":"_offeringId","type":"uint256"}],"name":"getFullBalance","outputs":[{"internalType":"uint256","name":"","type":"uint256"},{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"address","name":"_gameAddress","type":"address"}],"name":"getGameIncluded","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_player","type":"address"},{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"uint256","name":"_nonce","type":"uint256"}],"name":"getMessageHash","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"pure","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"}],"name":"getOffering","outputs":[{"internalType":"uint256","name":"","type":"uint256"},{"internalType":"address","name":"","type":"address"},{"internalType":"uint256","name":"","type":"uint256"},{"internalType":"address","name":"","type":"address"},{"internalType":"bool","name":"","type":"bool"},{"internalType":"uint256","name":"","type":"uint256"},{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"bytes32","name":"role","type":"bytes32"}],"name":"getRoleAdmin","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"bytes32","name":"role","type":"bytes32"},{"internalType":"address","name":"account","type":"address"}],"name":"grantRole","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes32","name":"role","type":"bytes32"},{"internalType":"address","name":"account","type":"address"}],"name":"hasRole","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"}],"name":"invalidateOffering","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"address","name":"_game","type":"address"},{"internalType":"uint256","name":"_tournamentId","type":"uint256"}],"name":"isActive","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"maxAllowedPlaythrough","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"minCollateralRatio","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"offeringId","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"bytes","name":"_sig","type":"bytes"}],"name":"optOut","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"owner","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"pendingDefaultAdmin","outputs":[{"internalType":"address","name":"newAdmin","type":"address"},{"internalType":"uint48","name":"schedule","type":"uint48"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"pendingDefaultAdminDelay","outputs":[{"internalType":"uint48","name":"newDelay","type":"uint48"},{"internalType":"uint48","name":"schedule","type":"uint48"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"address","name":"_game","type":"address"},{"internalType":"uint256","name":"_tournamentId","type":"uint256"}],"name":"pendingSupply","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"playthroughTracker","outputs":[{"internalType":"contract IPlaythroughTracker","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"proxiableUUID","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"bytes32","name":"role","type":"bytes32"},{"internalType":"address","name":"account","type":"address"}],"name":"renounceRole","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes32","name":"role","type":"bytes32"},{"internalType":"address","name":"account","type":"address"}],"name":"revokeRole","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"rollbackDefaultAdminDelay","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"contract ICredits","name":"_credits","type":"address"}],"name":"setCredits","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"_playthrough","type":"uint256"}],"name":"setMaxAllowedPlaythrough","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"_minCollateralRatio","type":"uint256"}],"name":"setMinCollateralRatio","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"signatureNonce","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"_creditId","type":"address"},{"internalType":"address","name":"_game","type":"address"},{"internalType":"uint256","name":"_tournamentId","type":"uint256"},{"internalType":"address","name":"_player","type":"address"},{"internalType":"uint256","name":"_amount","type":"uint256"}],"name":"spend","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"_account","type":"address"},{"internalType":"address","name":"_token","type":"address"},{"internalType":"uint256","name":"_ticketBalance","type":"uint256"},{"internalType":"uint256","name":"_creditBalance","type":"uint256"},{"internalType":"uint256","name":"_tournamentId","type":"uint256"},{"internalType":"uint256","name":"_fee","type":"uint256"}],"name":"spendRequiredAmount","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes4","name":"interfaceId","type":"bytes4"}],"name":"supportsInterface","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"tokenRegistry","outputs":[{"internalType":"contract ITokenRegistry","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"tournamentRegistry","outputs":[{"internalType":"contract ITournamentRegistry","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"from","type":"address"},{"internalType":"address","name":"to","type":"address"},{"internalType":"uint256","name":"id","type":"uint256"},{"internalType":"uint256","name":"value","type":"uint256"}],"name":"transferFrom","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"address[]","name":"_players","type":"address[]"}],"name":"undoPlaythrough","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"uint256","name":"_collateral","type":"uint256"},{"internalType":"uint256","name":"_targetEntryPct","type":"uint256"},{"internalType":"address[]","name":"_gamesToAdd","type":"address[]"},{"internalType":"address[]","name":"_gamesToRemove","type":"address[]"},{"internalType":"address","name":"_admin","type":"address"}],"name":"updateOffering","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"newImplementation","type":"address"},{"internalType":"bytes","name":"data","type":"bytes"}],"name":"upgradeToAndCall","outputs":[],"stateMutability":"payable","type":"function"},{"inputs":[{"internalType":"address","name":"_account","type":"address"},{"internalType":"uint256","name":"_amount","type":"uint256"},{"internalType":"uint256","name":"_playthrough","type":"uint256"},{"internalType":"address","name":"_token","type":"address"},{"internalType":"uint256","name":"_nonce","type":"uint256"},{"internalType":"bytes","name":"signature","type":"bytes"}],"name":"verify","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"pure","type":"function"},{"inputs":[{"internalType":"address","name":"_player","type":"address"},{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"address","name":"_admin","type":"address"},{"internalType":"uint256","name":"_nonce","type":"uint256"},{"internalType":"bytes","name":"signature","type":"bytes"}],"name":"verify","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"pure","type":"function"},{"inputs":[{"internalType":"uint256","name":"_offeringId","type":"uint256"},{"internalType":"address","name":"_to","type":"address"}],"name":"withdrawAllCollateral","outputs":[],"stateMutability":"nonpayable","type":"function"}]

Deployed Bytecode

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

Block Transaction Difficulty Gas Used Reward
View All Blocks Produced

Block Uncle Number Difficulty Gas Used Reward
View All Uncles
Loading...
Loading
Loading...
Loading

Validator Index Block Amount
View All Withdrawals

Transaction Hash Block Value Eth2 PubKey Valid
View All Deposits
[ Download: CSV Export  ]

A contract address hosts a smart contract, which is a set of code stored on the blockchain that runs when predetermined conditions are met. Learn more about addresses in our Knowledge Base.