creation_sourcecode: {{
    "language": "Solidity",
    "sources": {
      "contracts/EthenaMinting.sol": {
        "content": "// SPDX-License-Identifier: GPL-3.0\npragma solidity 0.8.20;\n\n/* solhint-disable private-vars-leading-underscore */\n/* solhint-disable var-name-mixedcase */\n\nimport \"./SingleAdminAccessControl.sol\";\nimport \"@openzeppelin/contracts/security/ReentrancyGuard.sol\";\nimport \"@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol\";\nimport \"@openzeppelin/contracts/utils/cryptography/ECDSA.sol\";\nimport \"@openzeppelin/contracts/utils/structs/EnumerableSet.sol\";\nimport \"@openzeppelin/contracts/interfaces/IERC1271.sol\";\n\nimport \"./interfaces/IUSDe.sol\";\nimport \"./interfaces/IEthenaMinting.sol\";\nimport \"./interfaces/IWETH9.sol\";\n\n/**\n * @title Ethena Minting\n * @notice This contract mints and redeems USDe, the first staked Ethereum delta-neutral backed synthetic dollar\n */\ncontract EthenaMinting is IEthenaMinting, SingleAdminAccessControl, ReentrancyGuard {\n  using SafeERC20 for IERC20;\n  using EnumerableSet for EnumerableSet.AddressSet;\n\n  /* --------------- CONSTANTS --------------- */\n\n  /// @notice EIP712 domain\n  bytes32 private constant EIP712_DOMAIN =\n    keccak256(\"EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)\");\n\n  /// @notice route type\n  bytes32 private constant ROUTE_TYPE = keccak256(\"Route(address[] addresses,uint128[] ratios)\");\n\n  /// @notice order type\n  bytes32 private constant ORDER_TYPE = keccak256(\n    \"Order(uint8 order_type,string order_id,uint128 expiry,uint120 nonce,address benefactor,address beneficiary,address collateral_asset,uint128 collateral_amount,uint128 usde_amount)\"\n  );\n\n  /// @notice role enabling to invoke mint\n  bytes32 private constant MINTER_ROLE = keccak256(\"MINTER_ROLE\");\n\n  /// @notice role enabling to invoke redeem\n  bytes32 private constant REDEEMER_ROLE = keccak256(\"REDEEMER_ROLE\");\n\n  /// @notice role enabling to transfer collateral to custody wallets\n  bytes32 private constant COLLATERAL_MANAGER_ROLE = keccak256(\"COLLATERAL_MANAGER_ROLE\");\n\n  /// @notice role enabling to disable mint and redeem and remove minters and redeemers in an emergency\n  bytes32 private constant GATEKEEPER_ROLE = keccak256(\"GATEKEEPER_ROLE\");\n\n  /// @notice EIP712 domain hash\n  bytes32 private constant EIP712_DOMAIN_TYPEHASH = keccak256(abi.encodePacked(EIP712_DOMAIN));\n\n  /// @notice EIP 1271 magic value hash\n  bytes4 private constant EIP1271_MAGICVALUE = bytes4(keccak256(\"isValidSignature(bytes32,bytes)\"));\n\n  /// @notice address denoting native ether\n  address private constant NATIVE_TOKEN = 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE;\n\n  /// @notice EIP712 name\n  bytes32 private constant EIP_712_NAME = keccak256(\"EthenaMinting\");\n\n  /// @notice holds EIP712 revision\n  bytes32 private constant EIP712_REVISION = keccak256(\"1\");\n\n  /// @notice required ratio for route\n  uint128 private constant ROUTE_REQUIRED_RATIO = 10_000;\n\n  /// @notice stablecoin price ratio multiplier\n  uint128 private constant STABLES_RATIO_MULTIPLIER = 10000;\n\n  /// @notice wrapped ethereum\n  IWETH9 private immutable WETH;\n\n  /* --------------- STATE VARIABLES --------------- */\n\n  /// @notice usde stablecoin\n  IUSDe public immutable usde;\n\n  // @notice whitelisted benefactors\n  EnumerableSet.AddressSet private _whitelistedBenefactors;\n\n  // @notice approved beneficiaries for a given benefactor\n  mapping(address => EnumerableSet.AddressSet) private _approvedBeneficiariesPerBenefactor;\n\n  // @notice custodian addresses\n  EnumerableSet.AddressSet private _custodianAddresses;\n\n  /// @notice holds computable chain id\n  uint256 private immutable _chainId;\n\n  /// @notice holds computable domain separator\n  bytes32 private immutable _domainSeparator;\n\n  /// @notice user deduplication\n  mapping(address => mapping(uint256 => uint256)) private _orderBitmaps;\n\n  /// @notice For smart contracts to delegate signing to EOA address\n  mapping(address => mapping(address => DelegatedSignerStatus)) public delegatedSigner;\n\n  // @notice the allowed price delta in bps for stablecoin minting\n  uint128 public stablesDeltaLimit;\n\n  /// @notice global single block totals\n  GlobalConfig public globalConfig;\n\n  /// @notice running total USDe minted/redeemed per single block\n  mapping(uint256 => BlockTotals) public totalPerBlock;\n\n  /// @notice total USDe that can be minted/redeemed across all assets per single block.\n  mapping(uint256 => mapping(address => BlockTotals)) public totalPerBlockPerAsset;\n\n  /// @notice configurations per token asset\n  mapping(address => TokenConfig) public tokenConfig;\n\n  /* --------------- MODIFIERS --------------- */\n\n  /// @notice ensure that the already minted USDe in the actual block plus the amount to be minted is below the maximum mint amount\n  /// @param mintAmount The USDe amount to be minted\n  /// @param asset The asset to be minted\n  modifier belowMaxMintPerBlock(uint128 mintAmount, address asset) {\n    TokenConfig memory _config = tokenConfig[asset];\n    if (!_config.isActive) revert UnsupportedAsset();\n    if (totalPerBlockPerAsset[block.number][asset].mintedPerBlock + mintAmount > _config.maxMintPerBlock) {\n      revert MaxMintPerBlockExceeded();\n    }\n    _;\n  }\n\n  /// @notice ensure that the already redeemed USDe in the actual block plus the amount to be redeemed is below the maximum redeem amount\n  /// @param redeemAmount The USDe amount to be redeemed\n  /// @param asset The asset to be redeemed\n  modifier belowMaxRedeemPerBlock(uint128 redeemAmount, address asset) {\n    TokenConfig memory _config = tokenConfig[asset];\n    if (!_config.isActive) revert UnsupportedAsset();\n    if (totalPerBlockPerAsset[block.number][asset].redeemedPerBlock + redeemAmount > _config.maxRedeemPerBlock) {\n      revert MaxRedeemPerBlockExceeded();\n    }\n    _;\n  }\n\n  /// @notice ensure that the global, overall minted USDe in the actual block\n  /// @notice plus the amount to be minted is below globalMaxMintPerBlock\n  /// @param mintAmount The USDe amount to be minted\n  modifier belowGlobalMaxMintPerBlock(uint128 mintAmount) {\n    uint128 totalMintedThisBlock = totalPerBlock[uint128(block.number)].mintedPerBlock;\n    if (totalMintedThisBlock + mintAmount > globalConfig.globalMaxMintPerBlock) revert GlobalMaxMintPerBlockExceeded();\n    _;\n  }\n\n  /// @notice ensure that the global, overall redeemed USDe in the actual block\n  /// @notice plus the amount to be redeemed is below globalMaxRedeemPerBlock\n  /// @param redeemAmount The USDe amount to be redeemed\n  modifier belowGlobalMaxRedeemPerBlock(uint128 redeemAmount) {\n    uint128 totalRedeemedThisBlock = totalPerBlock[block.number].redeemedPerBlock;\n    if (totalRedeemedThisBlock + redeemAmount > globalConfig.globalMaxRedeemPerBlock) {\n      revert GlobalMaxRedeemPerBlockExceeded();\n    }\n    _;\n  }\n\n  /* --------------- CONSTRUCTOR --------------- */\n\n  constructor(\n    IUSDe _usde,\n    IWETH9 _weth,\n    address[] memory _assets,\n    TokenConfig[] memory _tokenConfig,\n    GlobalConfig memory _globalConfig,\n    address[] memory _custodians,\n    address _admin\n  ) {\n    if (address(_usde) == address(0)) revert InvalidUSDeAddress();\n    if (address(_weth) == address(0)) revert InvalidZeroAddress();\n    if (_tokenConfig.length == 0) revert NoAssetsProvided();\n    if (_assets.length == 0) revert NoAssetsProvided();\n    if (_admin == address(0)) revert InvalidZeroAddress();\n    usde = _usde;\n    WETH = _weth;\n\n    _grantRole(DEFAULT_ADMIN_ROLE, msg.sender);\n\n    // Ensure every token config has an asset key\n    if (_tokenConfig.length != _assets.length) {\n      revert InvalidAssetAddress();\n    }\n\n    for (uint128 j = 0; j < _custodians.length;) {\n      addCustodianAddress(_custodians[j]);\n      unchecked {\n        ++j;\n      }\n    }\n\n    // Set the global max USDe mint/redeem limits\n    globalConfig = _globalConfig;\n\n    // Set the max mint/redeem limits per block for each asset\n    for (uint128 k = 0; k < _tokenConfig.length;) {\n      if (tokenConfig[_assets[k]].isActive || _assets[k] == address(0) || _assets[k] == address(usde)) {\n        revert InvalidAssetAddress();\n      }\n      _setTokenConfig(_assets[k], _tokenConfig[k]);\n      unchecked {\n        ++k;\n      }\n    }\n\n    if (msg.sender != _admin) {\n      _grantRole(DEFAULT_ADMIN_ROLE, _admin);\n    }\n\n    _chainId = block.chainid;\n    _domainSeparator = _computeDomainSeparator();\n\n    emit USDeSet(address(_usde));\n  }\n\n  /* --------------- EXTERNAL --------------- */\n\n  /**\n   * @notice Fallback function to receive ether\n   */\n  receive() external payable {\n    emit Received(msg.sender, msg.value);\n  }\n\n  /**\n   * @notice Mint stablecoins from assets\n   * @param order struct containing order details and confirmation from server\n   * @param signature signature of the taker\n   */\n  function mint(Order calldata order, Route calldata route, Signature calldata signature)\n    external\n    override\n    nonReentrant\n    onlyRole(MINTER_ROLE)\n    belowMaxMintPerBlock(order.usde_amount, order.collateral_asset)\n    belowGlobalMaxMintPerBlock(order.usde_amount)\n  {\n    if (order.order_type != OrderType.MINT) revert InvalidOrder();\n    verifyOrder(order, signature);\n    if (!verifyRoute(route)) revert InvalidRoute();\n    _deduplicateOrder(order.benefactor, order.nonce);\n    // Add to the minted amount in this block\n    totalPerBlockPerAsset[block.number][order.collateral_asset].mintedPerBlock += order.usde_amount;\n    totalPerBlock[block.number].mintedPerBlock += order.usde_amount;\n    _transferCollateral(\n      order.collateral_amount, order.collateral_asset, order.benefactor, route.addresses, route.ratios\n    );\n    usde.mint(order.beneficiary, order.usde_amount);\n    emit Mint(\n      msg.sender,\n      order.order_id,\n      order.benefactor,\n      order.beneficiary,\n      order.collateral_asset,\n      order.collateral_amount,\n      order.usde_amount\n    );\n  }\n\n  /**\n   * @notice Mint stablecoins from assets\n   * @param order struct containing order details and confirmation from server\n   * @param signature signature of the taker\n   */\n  function mintWETH(Order calldata order, Route calldata route, Signature calldata signature)\n    external\n    nonReentrant\n    onlyRole(MINTER_ROLE)\n    belowMaxMintPerBlock(order.usde_amount, order.collateral_asset)\n    belowGlobalMaxMintPerBlock(order.usde_amount)\n  {\n    if (order.order_type != OrderType.MINT) revert InvalidOrder();\n    verifyOrder(order, signature);\n    if (!verifyRoute(route)) revert InvalidRoute();\n    _deduplicateOrder(order.benefactor, order.nonce);\n    // Add to the minted amount in this block\n    totalPerBlockPerAsset[block.number][order.collateral_asset].mintedPerBlock += order.usde_amount;\n    totalPerBlock[block.number].mintedPerBlock += order.usde_amount;\n    // Checks that the collateral asset is WETH also\n    _transferEthCollateral(\n      order.collateral_amount, order.collateral_asset, order.benefactor, route.addresses, route.ratios\n    );\n    usde.mint(order.beneficiary, order.usde_amount);\n    emit Mint(\n      msg.sender,\n      order.order_id,\n      order.benefactor,\n      order.beneficiary,\n      order.collateral_asset,\n      order.collateral_amount,\n      order.usde_amount\n    );\n  }\n\n  /**\n   * @notice Redeem stablecoins for assets\n   * @param order struct containing order details and confirmation from server\n   * @param signature signature of the taker\n   */\n  function redeem(Order calldata order, Signature calldata signature)\n    external\n    override\n    nonReentrant\n    onlyRole(REDEEMER_ROLE)\n    belowMaxRedeemPerBlock(order.usde_amount, order.collateral_asset)\n    belowGlobalMaxRedeemPerBlock(order.usde_amount)\n  {\n    if (order.order_type != OrderType.REDEEM) revert InvalidOrder();\n    verifyOrder(order, signature);\n    _deduplicateOrder(order.benefactor, order.nonce);\n    // Add to the redeemed amount in this block\n    totalPerBlockPerAsset[block.number][order.collateral_asset].redeemedPerBlock += order.usde_amount;\n    totalPerBlock[block.number].redeemedPerBlock += order.usde_amount;\n    usde.burnFrom(order.benefactor, order.usde_amount);\n    _transferToBeneficiary(order.beneficiary, order.collateral_asset, order.collateral_amount);\n    emit Redeem(\n      msg.sender,\n      order.order_id,\n      order.benefactor,\n      order.beneficiary,\n      order.collateral_asset,\n      order.collateral_amount,\n      order.usde_amount\n    );\n  }\n\n  /// @notice Sets the overall, global maximum USDe mint size per block\n  function setGlobalMaxMintPerBlock(uint128 _globalMaxMintPerBlock) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    globalConfig.globalMaxMintPerBlock = _globalMaxMintPerBlock;\n  }\n\n  /// @notice Sets the overall, global maximum USDe redeem size per block\n  function setGlobalMaxRedeemPerBlock(uint128 _globalMaxRedeemPerBlock) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    globalConfig.globalMaxRedeemPerBlock = _globalMaxRedeemPerBlock;\n  }\n\n  /// @notice Disables the mint and redeem\n  function disableMintRedeem() external onlyRole(GATEKEEPER_ROLE) {\n    globalConfig.globalMaxMintPerBlock = 0;\n    globalConfig.globalMaxRedeemPerBlock = 0;\n  }\n\n  /// @notice Enables smart contracts to delegate an address for signing\n  function setDelegatedSigner(address _delegateTo) external {\n    delegatedSigner[_delegateTo][msg.sender] = DelegatedSignerStatus.PENDING;\n    emit DelegatedSignerInitiated(_delegateTo, msg.sender);\n  }\n\n  /// @notice The delegated address to confirm delegation\n  function confirmDelegatedSigner(address _delegatedBy) external {\n    if (delegatedSigner[msg.sender][_delegatedBy] != DelegatedSignerStatus.PENDING) {\n      revert DelegationNotInitiated();\n    }\n    delegatedSigner[msg.sender][_delegatedBy] = DelegatedSignerStatus.ACCEPTED;\n    emit DelegatedSignerAdded(msg.sender, _delegatedBy);\n  }\n\n  /// @notice Enables smart contracts to undelegate an address for signing\n  function removeDelegatedSigner(address _removedSigner) external {\n    delegatedSigner[_removedSigner][msg.sender] = DelegatedSignerStatus.REJECTED;\n    emit DelegatedSignerRemoved(_removedSigner, msg.sender);\n  }\n\n  /// @notice transfers an asset to a custody wallet\n  function transferToCustody(address wallet, address asset, uint128 amount)\n    external\n    nonReentrant\n    onlyRole(COLLATERAL_MANAGER_ROLE)\n  {\n    if (wallet == address(0) || !_custodianAddresses.contains(wallet)) revert InvalidAddress();\n    if (asset == NATIVE_TOKEN) {\n      (bool success,) = wallet.call{value: amount}(\"\");\n      if (!success) revert TransferFailed();\n    } else {\n      IERC20(asset).safeTransfer(wallet, amount);\n    }\n    emit CustodyTransfer(wallet, asset, amount);\n  }\n\n  /// @notice Removes an asset from the supported assets list\n  function removeSupportedAsset(address asset) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (!tokenConfig[asset].isActive) revert InvalidAssetAddress();\n    delete tokenConfig[asset];\n    emit AssetRemoved(asset);\n  }\n\n  /// @notice Checks if an asset is supported.\n  function isSupportedAsset(address asset) external view returns (bool) {\n    return tokenConfig[asset].isActive;\n  }\n\n  /// @notice Removes an custodian from the custodian address list\n  function removeCustodianAddress(address custodian) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (!_custodianAddresses.remove(custodian)) revert InvalidCustodianAddress();\n    emit CustodianAddressRemoved(custodian);\n  }\n\n  /// @notice Removes the minter role from an account, this can ONLY be executed by the gatekeeper role\n  /// @param minter The address to remove the minter role from\n  function removeMinterRole(address minter) external onlyRole(GATEKEEPER_ROLE) {\n    _revokeRole(MINTER_ROLE, minter);\n  }\n\n  /// @notice Removes the redeemer role from an account, this can ONLY be executed by the gatekeeper role\n  /// @param redeemer The address to remove the redeemer role from\n  function removeRedeemerRole(address redeemer) external onlyRole(GATEKEEPER_ROLE) {\n    _revokeRole(REDEEMER_ROLE, redeemer);\n  }\n\n  /// @notice Removes the collateral manager role from an account, this can ONLY be executed by the gatekeeper role\n  /// @param collateralManager The address to remove the collateralManager role from\n  function removeCollateralManagerRole(address collateralManager) external onlyRole(GATEKEEPER_ROLE) {\n    _revokeRole(COLLATERAL_MANAGER_ROLE, collateralManager);\n  }\n\n  /// @notice Removes the benefactor address from the benefactor whitelist\n  function removeWhitelistedBenefactor(address benefactor) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (!_whitelistedBenefactors.remove(benefactor)) revert InvalidAddress();\n    emit BenefactorRemoved(benefactor);\n  }\n\n  /* --------------- PUBLIC --------------- */\n\n  /// @notice Adds an custodian to the supported custodians list.\n  function addCustodianAddress(address custodian) public onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (custodian == address(0) || custodian == address(usde) || !_custodianAddresses.add(custodian)) {\n      revert InvalidCustodianAddress();\n    }\n    emit CustodianAddressAdded(custodian);\n  }\n\n  /// @notice Adds a benefactor address to the benefactor whitelist\n  function addWhitelistedBenefactor(address benefactor) public onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (benefactor == address(0) || !_whitelistedBenefactors.add(benefactor)) {\n      revert InvalidBenefactorAddress();\n    }\n    emit BenefactorAdded(benefactor);\n  }\n\n  /// @notice Adds a beneficiary address to the approved beneficiaries list.\n  /// @notice Only the benefactor can add or remove corresponding beneficiaries\n  /// @param beneficiary The beneficiary address\n  /// @param status The status of the beneficiary, true to be added, false to be removed.\n  function setApprovedBeneficiary(address beneficiary, bool status) public {\n    if (status) {\n      if (!_approvedBeneficiariesPerBenefactor[msg.sender].add(beneficiary)) {\n        revert InvalidBeneficiaryAddress();\n      }\n      else {\n        emit BeneficiaryAdded(msg.sender, beneficiary);\n      }\n    } else {\n      if (!_approvedBeneficiariesPerBenefactor[msg.sender].remove(beneficiary)) {\n        revert InvalidBeneficiaryAddress();\n      } else {\n        emit BeneficiaryRemoved(msg.sender, beneficiary);\n      }\n    }\n  }\n\n  /// @notice Get the domain separator for the token\n  /// @dev Return cached value if chainId matches cache, otherwise recomputes separator, to prevent replay attack across forks\n  /// @return The domain separator of the token at current chain\n  function getDomainSeparator() public view returns (bytes32) {\n    if (block.chainid == _chainId) {\n      return _domainSeparator;\n    }\n    return _computeDomainSeparator();\n  }\n\n  /// @notice hash an Order struct\n  function hashOrder(Order calldata order) public view override returns (bytes32) {\n    return ECDSA.toTypedDataHash(getDomainSeparator(), keccak256(encodeOrder(order)));\n  }\n\n  function encodeOrder(Order calldata order) public pure returns (bytes memory) {\n    return abi.encode(\n      ORDER_TYPE,\n      order.order_type,\n      keccak256(bytes(order.order_id)),\n      order.expiry,\n      order.nonce,\n      order.benefactor,\n      order.beneficiary,\n      order.collateral_asset,\n      order.collateral_amount,\n      order.usde_amount\n    );\n  }\n\n  /// @notice assert validity of signed order\n  function verifyOrder(Order calldata order, Signature calldata signature)\n    public\n    view\n    override\n    returns (bytes32 taker_order_hash)\n  {\n    taker_order_hash = hashOrder(order);\n    if (signature.signature_type == SignatureType.EIP712) {\n      address signer = ECDSA.recover(taker_order_hash, signature.signature_bytes);\n      if (!(signer == order.benefactor || delegatedSigner[signer][order.benefactor] == DelegatedSignerStatus.ACCEPTED))\n      {\n        revert InvalidEIP712Signature();\n      }\n    } else if (signature.signature_type == SignatureType.EIP1271) {\n      if (\n        IERC1271(order.benefactor).isValidSignature(taker_order_hash, signature.signature_bytes) != EIP1271_MAGICVALUE\n      ) {\n        revert InvalidEIP1271Signature();\n      }\n    } else {\n      revert UnknownSignatureType();\n    }\n    if (!_whitelistedBenefactors.contains(order.benefactor)) {\n      revert BenefactorNotWhitelisted();\n    }\n    if (!_approvedBeneficiariesPerBenefactor[order.benefactor].contains(order.beneficiary)) {\n      revert BeneficiaryNotApproved();\n    }\n    TokenType typeOfToken = tokenConfig[order.collateral_asset].tokenType;\n    if (typeOfToken == TokenType.STABLE) {\n      if (!verifyStablesLimit(order.collateral_amount, order.usde_amount, order.collateral_asset, order.order_type)) {\n        revert InvalidStablePrice();\n      }\n    }\n    if (order.beneficiary == address(0)) revert InvalidAddress();\n    if (order.collateral_amount == 0 || order.usde_amount == 0) revert InvalidAmount();\n    if (block.timestamp > order.expiry) revert SignatureExpired();\n  }\n\n  /// @notice assert validity of route object per type\n  function verifyRoute(Route calldata route) public view override returns (bool) {\n    uint128 totalRatio = 0;\n    if (route.addresses.length != route.ratios.length) {\n      return false;\n    }\n    if (route.addresses.length == 0) {\n      return false;\n    }\n    for (uint128 i = 0; i < route.addresses.length;) {\n      if (!_custodianAddresses.contains(route.addresses[i]) || route.addresses[i] == address(0) || route.ratios[i] == 0)\n      {\n        return false;\n      }\n      totalRatio += route.ratios[i];\n      unchecked {\n        ++i;\n      }\n    }\n    return (totalRatio == ROUTE_REQUIRED_RATIO);\n  }\n\n  /// @notice verify validity of nonce by checking its presence\n  function verifyNonce(address sender, uint128 nonce) public view override returns (uint128, uint256, uint256) {\n    if (nonce == 0) revert InvalidNonce();\n    uint128 invalidatorSlot = uint64(nonce) >> 8;\n    uint256 invalidatorBit = 1 << uint8(nonce);\n    uint256 invalidator = _orderBitmaps[sender][invalidatorSlot];\n    if (invalidator & invalidatorBit != 0) revert InvalidNonce();\n\n    return (invalidatorSlot, invalidator, invalidatorBit);\n  }\n\n  function verifyStablesLimit(\n    uint128 collateralAmount,\n    uint128 usdeAmount,\n    address collateralAsset,\n    OrderType orderType\n  ) public view returns (bool) {\n    uint128 usdeDecimals = _getDecimals(address(usde));\n    uint128 collateralDecimals = _getDecimals(collateralAsset);\n\n    uint128 normalizedCollateralAmount;\n    uint128 scale = uint128(\n      usdeDecimals > collateralDecimals\n        ? 10 ** (usdeDecimals - collateralDecimals)\n        : 10 ** (collateralDecimals - usdeDecimals)\n    );\n\n    normalizedCollateralAmount = usdeDecimals > collateralDecimals ? collateralAmount * scale : collateralAmount / scale;\n\n    uint128 difference = normalizedCollateralAmount > usdeAmount\n      ? normalizedCollateralAmount - usdeAmount\n      : usdeAmount - normalizedCollateralAmount;\n\n    uint128 differenceInBps = (difference * STABLES_RATIO_MULTIPLIER) / usdeAmount;\n\n    if (orderType == OrderType.MINT) {\n      return usdeAmount > normalizedCollateralAmount ? differenceInBps <= stablesDeltaLimit : true;\n    } else {\n      return normalizedCollateralAmount > usdeAmount ? differenceInBps <= stablesDeltaLimit : true;\n    }\n  }\n\n  /* --------------- PRIVATE --------------- */\n\n  /// @notice deduplication of taker order\n  function _deduplicateOrder(address sender, uint128 nonce) private {\n    (uint128 invalidatorSlot, uint256 invalidator, uint256 invalidatorBit) = verifyNonce(sender, nonce);\n    _orderBitmaps[sender][invalidatorSlot] = invalidator | invalidatorBit;\n  }\n\n  /* --------------- INTERNAL --------------- */\n\n  /// @notice transfer supported asset to beneficiary address_deduplicateOrder\n  function _transferToBeneficiary(address beneficiary, address asset, uint128 amount) internal {\n    if (asset == NATIVE_TOKEN) {\n      if (address(this).balance < amount) revert InvalidAmount();\n      (bool success,) = (beneficiary).call{value: amount}(\"\");\n      if (!success) revert TransferFailed();\n    } else {\n      if (!tokenConfig[asset].isActive) revert UnsupportedAsset();\n      IERC20(asset).safeTransfer(beneficiary, amount);\n    }\n  }\n\n  /// @notice transfer supported asset to array of custody addresses per defined ratio\n  function _transferCollateral(\n    uint128 amount,\n    address asset,\n    address benefactor,\n    address[] calldata addresses,\n    uint128[] calldata ratios\n  ) internal {\n    // cannot mint using unsupported asset or native ETH even if it is supported for redemptions\n    if (!tokenConfig[asset].isActive || asset == NATIVE_TOKEN) revert UnsupportedAsset();\n    IERC20 token = IERC20(asset);\n    uint128 totalTransferred = 0;\n    for (uint128 i = 0; i < addresses.length;) {\n      uint128 amountToTransfer = (amount * ratios[i]) / ROUTE_REQUIRED_RATIO;\n      token.safeTransferFrom(benefactor, addresses[i], amountToTransfer);\n      totalTransferred += amountToTransfer;\n      unchecked {\n        ++i;\n      }\n    }\n    uint128 remainingBalance = amount - totalTransferred;\n    if (remainingBalance > 0) {\n      token.safeTransferFrom(benefactor, addresses[addresses.length - 1], remainingBalance);\n    }\n  }\n\n  /// @notice transfer supported asset to array of custody addresses per defined ratio\n  function _transferEthCollateral(\n    uint128 amount,\n    address asset,\n    address benefactor,\n    address[] calldata addresses,\n    uint128[] calldata ratios\n  ) internal {\n    if (!tokenConfig[asset].isActive || asset == NATIVE_TOKEN || asset != address(WETH)) revert UnsupportedAsset();\n    IERC20 token = IERC20(asset);\n    token.safeTransferFrom(benefactor, address(this), amount);\n\n    WETH.withdraw(amount);\n\n    uint128 totalTransferred = 0;\n    for (uint128 i = 0; i < addresses.length;) {\n      uint128 amountToTransfer = (amount * ratios[i]) / ROUTE_REQUIRED_RATIO;\n      (bool success,) = addresses[i].call{value: amountToTransfer}(\"\");\n      if (!success) revert TransferFailed();\n      totalTransferred += amountToTransfer;\n      unchecked {\n        ++i;\n      }\n    }\n    uint128 remainingBalance = amount - totalTransferred;\n    if (remainingBalance > 0) {\n      (bool success,) = addresses[addresses.length - 1].call{value: remainingBalance}(\"\");\n      if (!success) revert TransferFailed();\n    }\n  }\n\n  function _setTokenConfig(address asset, TokenConfig memory _tokenConfig) internal {\n    if (_tokenConfig.maxMintPerBlock == 0 || _tokenConfig.maxRedeemPerBlock == 0) {\n      revert InvalidAmount();\n    }\n    _tokenConfig.isActive = true;\n    tokenConfig[asset] = _tokenConfig;\n  }\n\n  function addSupportedAsset(address asset, TokenConfig memory _tokenConfig) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (tokenConfig[asset].isActive || asset == address(0) || asset == address(usde)) {\n      revert InvalidAssetAddress();\n    }\n    _setTokenConfig(asset, _tokenConfig);\n    emit AssetAdded(asset);\n  }\n\n  function setMaxMintPerBlock(uint128 _maxMintPerBlock, address asset) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    _setMaxMintPerBlock(_maxMintPerBlock, asset);\n  }\n\n  function _setMaxMintPerBlock(uint128 _maxMintPerBlock, address asset) internal {\n    uint128 oldMaxMintPerBlock = tokenConfig[asset].maxMintPerBlock;\n    tokenConfig[asset].maxMintPerBlock = _maxMintPerBlock;\n    emit MaxMintPerBlockChanged(oldMaxMintPerBlock, _maxMintPerBlock, asset);\n  }\n\n  function setMaxRedeemPerBlock(uint128 _maxRedeemPerBlock, address asset) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    _setMaxRedeemPerBlock(_maxRedeemPerBlock, asset);\n  }\n\n  /// @notice Sets the max redeemPerBlock limit for a given asset\n  function _setMaxRedeemPerBlock(uint128 _maxRedeemPerBlock, address asset) internal {\n    uint128 oldMaxRedeemPerBlock = tokenConfig[asset].maxRedeemPerBlock;\n    tokenConfig[asset].maxRedeemPerBlock = _maxRedeemPerBlock;\n    emit MaxRedeemPerBlockChanged(oldMaxRedeemPerBlock, _maxRedeemPerBlock, asset);\n  }\n\n  /// @notice Compute the current domain separator\n  /// @return The domain separator for the token\n  function _computeDomainSeparator() internal view returns (bytes32) {\n    return keccak256(abi.encode(EIP712_DOMAIN, EIP_712_NAME, EIP712_REVISION, block.chainid, address(this)));\n  }\n\n  // @notice Set the token type for a given token\n  function setTokenType(address asset, TokenType tokenType) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (!tokenConfig[asset].isActive) revert UnsupportedAsset();\n    tokenConfig[asset].tokenType = tokenType;\n    emit TokenTypeSet(asset, uint(tokenType));\n  }\n\n  /// @notice set the allowed price delta in bps for stablecoin minting\n  function setStablesDeltaLimit(uint128 _stablesDeltaLimit) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    stablesDeltaLimit = _stablesDeltaLimit;\n  }\n\n  /// @notice get the decimals of a token\n  function _getDecimals(address token) internal view returns (uint128) {\n    uint8 decimals = IERC20Metadata(token).decimals();\n    return uint128(decimals);\n  }\n\n  /* --------------- GETTERS --------------- */\n\n  /// @notice returns whether an address is a custodian\n  function isCustodianAddress(address custodian) public view returns (bool) {\n    return _custodianAddresses.contains(custodian);\n  }\n\n  /// @notice returns whether an address is a whitelisted benefactor\n  function isWhitelistedBenefactor(address benefactor) public view returns (bool) {\n    return _whitelistedBenefactors.contains(benefactor);\n  }\n\n  /// @notice returns whether an address is a approved beneficiary per benefactor\n  function isApprovedBeneficiary(address benefactor, address beneficiary) public view returns (bool) {\n    return _approvedBeneficiariesPerBenefactor[benefactor].contains(beneficiary);\n  }\n}\n"
      },
      "contracts/SingleAdminAccessControl.sol": {
        "content": "// SPDX-License-Identifier: GPL-3.0\npragma solidity 0.8.20;\n\nimport \"@openzeppelin/contracts/access/AccessControl.sol\";\nimport \"@openzeppelin/contracts/interfaces/IERC5313.sol\";\nimport \"./interfaces/ISingleAdminAccessControl.sol\";\n\n/**\n * @title SingleAdminAccessControl\n * @notice SingleAdminAccessControl is a contract that provides a single admin role\n * @notice This contract is a simplified alternative to OpenZeppelin's AccessControlDefaultAdminRules\n */\nabstract contract SingleAdminAccessControl is IERC5313, ISingleAdminAccessControl, AccessControl {\n  address private _currentDefaultAdmin;\n  address private _pendingDefaultAdmin;\n\n  modifier notAdmin(bytes32 role) {\n    if (role == DEFAULT_ADMIN_ROLE) revert InvalidAdminChange();\n    _;\n  }\n\n  /// @notice Transfer the admin role to a new address\n  /// @notice This can ONLY be executed by the current admin\n  /// @param newAdmin address\n  function transferAdmin(address newAdmin) external onlyRole(DEFAULT_ADMIN_ROLE) {\n    if (newAdmin == msg.sender) revert InvalidAdminChange();\n    _pendingDefaultAdmin = newAdmin;\n    emit AdminTransferRequested(_currentDefaultAdmin, newAdmin);\n  }\n\n  function acceptAdmin() external {\n    if (msg.sender != _pendingDefaultAdmin) revert NotPendingAdmin();\n    _grantRole(DEFAULT_ADMIN_ROLE, msg.sender);\n  }\n\n  /// @notice grant a role\n  /// @notice can only be executed by the current single admin\n  /// @notice admin role cannot be granted externally\n  /// @param role bytes32\n  /// @param account address\n  function grantRole(bytes32 role, address account) public override onlyRole(DEFAULT_ADMIN_ROLE) notAdmin(role) {\n    _grantRole(role, account);\n  }\n\n  /// @notice revoke a role\n  /// @notice can only be executed by the current admin\n  /// @notice admin role cannot be revoked\n  /// @param role bytes32\n  /// @param account address\n  function revokeRole(bytes32 role, address account) public override onlyRole(DEFAULT_ADMIN_ROLE) notAdmin(role) {\n    _revokeRole(role, account);\n  }\n\n  /// @notice renounce the role of msg.sender\n  /// @notice admin role cannot be renounced\n  /// @param role bytes32\n  /// @param account address\n  function renounceRole(bytes32 role, address account) public virtual override notAdmin(role) {\n    super.renounceRole(role, account);\n  }\n\n  /**\n   * @dev See {IERC5313-owner}.\n   */\n  function owner() public view virtual returns (address) {\n    return _currentDefaultAdmin;\n  }\n\n  /**\n   * @notice no way to change admin without removing old admin first\n   */\n  function _grantRole(bytes32 role, address account) internal override {\n    if (role == DEFAULT_ADMIN_ROLE) {\n      emit AdminTransferred(_currentDefaultAdmin, account);\n      _revokeRole(DEFAULT_ADMIN_ROLE, _currentDefaultAdmin);\n      _currentDefaultAdmin = account;\n      delete _pendingDefaultAdmin;\n    }\n    super._grantRole(role, account);\n  }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/security/ReentrancyGuard.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (security/ReentrancyGuard.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Contract module that helps prevent reentrant calls to a function.\n *\n * Inheriting from `ReentrancyGuard` will make the {nonReentrant} modifier\n * available, which can be applied to functions to make sure there are no nested\n * (reentrant) calls to them.\n *\n * Note that because there is a single `nonReentrant` guard, functions marked as\n * `nonReentrant` may not call one another. This can be worked around by making\n * those functions `private`, and then adding `external` `nonReentrant` entry\n * points to them.\n *\n * TIP: If you would like to learn more about reentrancy and alternative ways\n * to protect against it, check out our blog post\n * https://blog.openzeppelin.com/reentrancy-after-istanbul/[Reentrancy After Istanbul].\n */\nabstract contract ReentrancyGuard {\n    // Booleans are more expensive than uint256 or any type that takes up a full\n    // word because each write operation emits an extra SLOAD to first read the\n    // slot's contents, replace the bits taken up by the boolean, and then write\n    // back. This is the compiler's defense against contract upgrades and\n    // pointer aliasing, and it cannot be disabled.\n\n    // The values being non-zero value makes deployment a bit more expensive,\n    // but in exchange the refund on every call to nonReentrant will be lower in\n    // amount. Since refunds are capped to a percentage of the total\n    // transaction's gas, it is best to keep them low in cases like this one, to\n    // increase the likelihood of the full refund coming into effect.\n    uint256 private constant _NOT_ENTERED = 1;\n    uint256 private constant _ENTERED = 2;\n\n    uint256 private _status;\n\n    constructor() {\n        _status = _NOT_ENTERED;\n    }\n\n    /**\n     * @dev Prevents a contract from calling itself, directly or indirectly.\n     * Calling a `nonReentrant` function from another `nonReentrant`\n     * function is not supported. It is possible to prevent this from happening\n     * by making the `nonReentrant` function external, and making it call a\n     * `private` function that does the actual work.\n     */\n    modifier nonReentrant() {\n        _nonReentrantBefore();\n        _;\n        _nonReentrantAfter();\n    }\n\n    function _nonReentrantBefore() private {\n        // On the first call to nonReentrant, _status will be _NOT_ENTERED\n        require(_status != _ENTERED, \"ReentrancyGuard: reentrant call\");\n\n        // Any calls to nonReentrant after this point will fail\n        _status = _ENTERED;\n    }\n\n    function _nonReentrantAfter() private {\n        // By storing the original value once again, a refund is triggered (see\n        // https://eips.ethereum.org/EIPS/eip-2200)\n        _status = _NOT_ENTERED;\n    }\n\n    /**\n     * @dev Returns true if the reentrancy guard is currently set to \"entered\", which indicates there is a\n     * `nonReentrant` function in the call stack.\n     */\n    function _reentrancyGuardEntered() internal view returns (bool) {\n        return _status == _ENTERED;\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/token/ERC20/utils/SafeERC20.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.3) (token/ERC20/utils/SafeERC20.sol)\n\npragma solidity ^0.8.0;\n\nimport \"../IERC20.sol\";\nimport \"../extensions/IERC20Permit.sol\";\nimport \"../../../utils/Address.sol\";\n\n/**\n * @title SafeERC20\n * @dev Wrappers around ERC20 operations that throw on failure (when the token\n * contract returns false). Tokens that return no value (and instead revert or\n * throw on failure) are also supported, non-reverting calls are assumed to be\n * successful.\n * To use this library you can add a `using SafeERC20 for IERC20;` statement to your contract,\n * which allows you to call the safe operations as `token.safeTransfer(...)`, etc.\n */\nlibrary SafeERC20 {\n    using Address for address;\n\n    /**\n     * @dev Transfer `value` amount of `token` from the calling contract to `to`. If `token` returns no value,\n     * non-reverting calls are assumed to be successful.\n     */\n    function safeTransfer(IERC20 token, address to, uint256 value) internal {\n        _callOptionalReturn(token, abi.encodeWithSelector(token.transfer.selector, to, value));\n    }\n\n    /**\n     * @dev Transfer `value` amount of `token` from `from` to `to`, spending the approval given by `from` to the\n     * calling contract. If `token` returns no value, non-reverting calls are assumed to be successful.\n     */\n    function safeTransferFrom(IERC20 token, address from, address to, uint256 value) internal {\n        _callOptionalReturn(token, abi.encodeWithSelector(token.transferFrom.selector, from, to, value));\n    }\n\n    /**\n     * @dev Deprecated. This function has issues similar to the ones found in\n     * {IERC20-approve}, and its usage is discouraged.\n     *\n     * Whenever possible, use {safeIncreaseAllowance} and\n     * {safeDecreaseAllowance} instead.\n     */\n    function safeApprove(IERC20 token, address spender, uint256 value) internal {\n        // safeApprove should only be called when setting an initial allowance,\n        // or when resetting it to zero. To increase and decrease it, use\n        // 'safeIncreaseAllowance' and 'safeDecreaseAllowance'\n        require(\n            (value == 0) || (token.allowance(address(this), spender) == 0),\n            \"SafeERC20: approve from non-zero to non-zero allowance\"\n        );\n        _callOptionalReturn(token, abi.encodeWithSelector(token.approve.selector, spender, value));\n    }\n\n    /**\n     * @dev Increase the calling contract's allowance toward `spender` by `value`. If `token` returns no value,\n     * non-reverting calls are assumed to be successful.\n     */\n    function safeIncreaseAllowance(IERC20 token, address spender, uint256 value) internal {\n        uint256 oldAllowance = token.allowance(address(this), spender);\n        _callOptionalReturn(token, abi.encodeWithSelector(token.approve.selector, spender, oldAllowance + value));\n    }\n\n    /**\n     * @dev Decrease the calling contract's allowance toward `spender` by `value`. If `token` returns no value,\n     * non-reverting calls are assumed to be successful.\n     */\n    function safeDecreaseAllowance(IERC20 token, address spender, uint256 value) internal {\n        unchecked {\n            uint256 oldAllowance = token.allowance(address(this), spender);\n            require(oldAllowance >= value, \"SafeERC20: decreased allowance below zero\");\n            _callOptionalReturn(token, abi.encodeWithSelector(token.approve.selector, spender, oldAllowance - value));\n        }\n    }\n\n    /**\n     * @dev Set the calling contract's allowance toward `spender` to `value`. If `token` returns no value,\n     * non-reverting calls are assumed to be successful. Meant to be used with tokens that require the approval\n     * to be set to zero before setting it to a non-zero value, such as USDT.\n     */\n    function forceApprove(IERC20 token, address spender, uint256 value) internal {\n        bytes memory approvalCall = abi.encodeWithSelector(token.approve.selector, spender, value);\n\n        if (!_callOptionalReturnBool(token, approvalCall)) {\n            _callOptionalReturn(token, abi.encodeWithSelector(token.approve.selector, spender, 0));\n            _callOptionalReturn(token, approvalCall);\n        }\n    }\n\n    /**\n     * @dev Use a ERC-2612 signature to set the `owner` approval toward `spender` on `token`.\n     * Revert on invalid signature.\n     */\n    function safePermit(\n        IERC20Permit token,\n        address owner,\n        address spender,\n        uint256 value,\n        uint256 deadline,\n        uint8 v,\n        bytes32 r,\n        bytes32 s\n    ) internal {\n        uint256 nonceBefore = token.nonces(owner);\n        token.permit(owner, spender, value, deadline, v, r, s);\n        uint256 nonceAfter = token.nonces(owner);\n        require(nonceAfter == nonceBefore + 1, \"SafeERC20: permit did not succeed\");\n    }\n\n    /**\n     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement\n     * on the return value: the return value is optional (but if data is returned, it must not be false).\n     * @param token The token targeted by the call.\n     * @param data The call data (encoded using abi.encode or one of its variants).\n     */\n    function _callOptionalReturn(IERC20 token, bytes memory data) private {\n        // We need to perform a low level call here, to bypass Solidity's return data size checking mechanism, since\n        // we're implementing it ourselves. We use {Address-functionCall} to perform this call, which verifies that\n        // the target address contains contract code and also asserts for success in the low-level call.\n\n        bytes memory returndata = address(token).functionCall(data, \"SafeERC20: low-level call failed\");\n        require(returndata.length == 0 || abi.decode(returndata, (bool)), \"SafeERC20: ERC20 operation did not succeed\");\n    }\n\n    /**\n     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement\n     * on the return value: the return value is optional (but if data is returned, it must not be false).\n     * @param token The token targeted by the call.\n     * @param data The call data (encoded using abi.encode or one of its variants).\n     *\n     * This is a variant of {_callOptionalReturn} that silents catches all reverts and returns a bool instead.\n     */\n    function _callOptionalReturnBool(IERC20 token, bytes memory data) private returns (bool) {\n        // We need to perform a low level call here, to bypass Solidity's return data size checking mechanism, since\n        // we're implementing it ourselves. We cannot use {Address-functionCall} here since this should return false\n        // and not revert is the subcall reverts.\n\n        (bool success, bytes memory returndata) = address(token).call(data);\n        return\n            success && (returndata.length == 0 || abi.decode(returndata, (bool))) && Address.isContract(address(token));\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/cryptography/ECDSA.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (utils/cryptography/ECDSA.sol)\n\npragma solidity ^0.8.0;\n\nimport \"../Strings.sol\";\n\n/**\n * @dev Elliptic Curve Digital Signature Algorithm (ECDSA) operations.\n *\n * These functions can be used to verify that a message was signed by the holder\n * of the private keys of a given address.\n */\nlibrary ECDSA {\n    enum RecoverError {\n        NoError,\n        InvalidSignature,\n        InvalidSignatureLength,\n        InvalidSignatureS,\n        InvalidSignatureV // Deprecated in v4.8\n    }\n\n    function _throwError(RecoverError error) private pure {\n        if (error == RecoverError.NoError) {\n            return; // no error: do nothing\n        } else if (error == RecoverError.InvalidSignature) {\n            revert(\"ECDSA: invalid signature\");\n        } else if (error == RecoverError.InvalidSignatureLength) {\n            revert(\"ECDSA: invalid signature length\");\n        } else if (error == RecoverError.InvalidSignatureS) {\n            revert(\"ECDSA: invalid signature 's' value\");\n        }\n    }\n\n    /**\n     * @dev Returns the address that signed a hashed message (`hash`) with\n     * `signature` or error string. This address can then be used for verification purposes.\n     *\n     * The `ecrecover` EVM opcode allows for malleable (non-unique) signatures:\n     * this function rejects them by requiring the `s` value to be in the lower\n     * half order, and the `v` value to be either 27 or 28.\n     *\n     * IMPORTANT: `hash` _must_ be the result of a hash operation for the\n     * verification to be secure: it is possible to craft signatures that\n     * recover to arbitrary addresses for non-hashed data. A safe way to ensure\n     * this is by receiving a hash of the original message (which may otherwise\n     * be too long), and then calling {toEthSignedMessageHash} on it.\n     *\n     * Documentation for signature generation:\n     * - with https://web3js.readthedocs.io/en/v1.3.4/web3-eth-accounts.html#sign[Web3.js]\n     * - with https://docs.ethers.io/v5/api/signer/#Signer-signMessage[ethers]\n     *\n     * _Available since v4.3._\n     */\n    function tryRecover(bytes32 hash, bytes memory signature) internal pure returns (address, RecoverError) {\n        if (signature.length == 65) {\n            bytes32 r;\n            bytes32 s;\n            uint8 v;\n            // ecrecover takes the signature parameters, and the only way to get them\n            // currently is to use assembly.\n            /// @solidity memory-safe-assembly\n            assembly {\n                r := mload(add(signature, 0x20))\n                s := mload(add(signature, 0x40))\n                v := byte(0, mload(add(signature, 0x60)))\n            }\n            return tryRecover(hash, v, r, s);\n        } else {\n            return (address(0), RecoverError.InvalidSignatureLength);\n        }\n    }\n\n    /**\n     * @dev Returns the address that signed a hashed message (`hash`) with\n     * `signature`. This address can then be used for verification purposes.\n     *\n     * The `ecrecover` EVM opcode allows for malleable (non-unique) signatures:\n     * this function rejects them by requiring the `s` value to be in the lower\n     * half order, and the `v` value to be either 27 or 28.\n     *\n     * IMPORTANT: `hash` _must_ be the result of a hash operation for the\n     * verification to be secure: it is possible to craft signatures that\n     * recover to arbitrary addresses for non-hashed data. A safe way to ensure\n     * this is by receiving a hash of the original message (which may otherwise\n     * be too long), and then calling {toEthSignedMessageHash} on it.\n     */\n    function recover(bytes32 hash, bytes memory signature) internal pure returns (address) {\n        (address recovered, RecoverError error) = tryRecover(hash, signature);\n        _throwError(error);\n        return recovered;\n    }\n\n    /**\n     * @dev Overload of {ECDSA-tryRecover} that receives the `r` and `vs` short-signature fields separately.\n     *\n     * See https://eips.ethereum.org/EIPS/eip-2098[EIP-2098 short signatures]\n     *\n     * _Available since v4.3._\n     */\n    function tryRecover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address, RecoverError) {\n        bytes32 s = vs & bytes32(0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff);\n        uint8 v = uint8((uint256(vs) >> 255) + 27);\n        return tryRecover(hash, v, r, s);\n    }\n\n    /**\n     * @dev Overload of {ECDSA-recover} that receives the `r and `vs` short-signature fields separately.\n     *\n     * _Available since v4.2._\n     */\n    function recover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address) {\n        (address recovered, RecoverError error) = tryRecover(hash, r, vs);\n        _throwError(error);\n        return recovered;\n    }\n\n    /**\n     * @dev Overload of {ECDSA-tryRecover} that receives the `v`,\n     * `r` and `s` signature fields separately.\n     *\n     * _Available since v4.3._\n     */\n    function tryRecover(bytes32 hash, uint8 v, bytes32 r, bytes32 s) internal pure returns (address, RecoverError) {\n        // EIP-2 still allows signature malleability for ecrecover(). Remove this possibility and make the signature\n        // unique. Appendix F in the Ethereum Yellow paper (https://ethereum.github.io/yellowpaper/paper.pdf), defines\n        // the valid range for s in (301): 0 < s < secp256k1n ÷ 2 + 1, and for v in (302): v ∈ {27, 28}. Most\n        // signatures from current libraries generate a unique signature with an s-value in the lower half order.\n        //\n        // If your library generates malleable signatures, such as s-values in the upper range, calculate a new s-value\n        // with 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 - s1 and flip v from 27 to 28 or\n        // vice versa. If your library also generates signatures with 0/1 for v instead 27/28, add 27 to v to accept\n        // these malleable signatures as well.\n        if (uint256(s) > 0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0) {\n            return (address(0), RecoverError.InvalidSignatureS);\n        }\n\n        // If the signature is valid (and not malleable), return the signer address\n        address signer = ecrecover(hash, v, r, s);\n        if (signer == address(0)) {\n            return (address(0), RecoverError.InvalidSignature);\n        }\n\n        return (signer, RecoverError.NoError);\n    }\n\n    /**\n     * @dev Overload of {ECDSA-recover} that receives the `v`,\n     * `r` and `s` signature fields separately.\n     */\n    function recover(bytes32 hash, uint8 v, bytes32 r, bytes32 s) internal pure returns (address) {\n        (address recovered, RecoverError error) = tryRecover(hash, v, r, s);\n        _throwError(error);\n        return recovered;\n    }\n\n    /**\n     * @dev Returns an Ethereum Signed Message, created from a `hash`. This\n     * produces hash corresponding to the one signed with the\n     * https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`]\n     * JSON-RPC method as part of EIP-191.\n     *\n     * See {recover}.\n     */\n    function toEthSignedMessageHash(bytes32 hash) internal pure returns (bytes32 message) {\n        // 32 is the length in bytes of hash,\n        // enforced by the type signature above\n        /// @solidity memory-safe-assembly\n        assembly {\n            mstore(0x00, \"\\x19Ethereum Signed Message:\\n32\")\n            mstore(0x1c, hash)\n            message := keccak256(0x00, 0x3c)\n        }\n    }\n\n    /**\n     * @dev Returns an Ethereum Signed Message, created from `s`. This\n     * produces hash corresponding to the one signed with the\n     * https://eth.wiki/json-rpc/API#eth_sign[`eth_sign`]\n     * JSON-RPC method as part of EIP-191.\n     *\n     * See {recover}.\n     */\n    function toEthSignedMessageHash(bytes memory s) internal pure returns (bytes32) {\n        return keccak256(abi.encodePacked(\"\\x19Ethereum Signed Message:\\n\", Strings.toString(s.length), s));\n    }\n\n    /**\n     * @dev Returns an Ethereum Signed Typed Data, created from a\n     * `domainSeparator` and a `structHash`. This produces hash corresponding\n     * to the one signed with the\n     * https://eips.ethereum.org/EIPS/eip-712[`eth_signTypedData`]\n     * JSON-RPC method as part of EIP-712.\n     *\n     * See {recover}.\n     */\n    function toTypedDataHash(bytes32 domainSeparator, bytes32 structHash) internal pure returns (bytes32 data) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            let ptr := mload(0x40)\n            mstore(ptr, \"\\x19\\x01\")\n            mstore(add(ptr, 0x02), domainSeparator)\n            mstore(add(ptr, 0x22), structHash)\n            data := keccak256(ptr, 0x42)\n        }\n    }\n\n    /**\n     * @dev Returns an Ethereum Signed Data with intended validator, created from a\n     * `validator` and `data` according to the version 0 of EIP-191.\n     *\n     * See {recover}.\n     */\n    function toDataWithIntendedValidatorHash(address validator, bytes memory data) internal pure returns (bytes32) {\n        return keccak256(abi.encodePacked(\"\\x19\\x00\", validator, data));\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/structs/EnumerableSet.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (utils/structs/EnumerableSet.sol)\n// This file was procedurally generated from scripts/generate/templates/EnumerableSet.js.\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Library for managing\n * https://en.wikipedia.org/wiki/Set_(abstract_data_type)[sets] of primitive\n * types.\n *\n * Sets have the following properties:\n *\n * - Elements are added, removed, and checked for existence in constant time\n * (O(1)).\n * - Elements are enumerated in O(n). No guarantees are made on the ordering.\n *\n * ```solidity\n * contract Example {\n *     // Add the library methods\n *     using EnumerableSet for EnumerableSet.AddressSet;\n *\n *     // Declare a set state variable\n *     EnumerableSet.AddressSet private mySet;\n * }\n * ```\n *\n * As of v3.3.0, sets of type `bytes32` (`Bytes32Set`), `address` (`AddressSet`)\n * and `uint256` (`UintSet`) are supported.\n *\n * [WARNING]\n * ====\n * Trying to delete such a structure from storage will likely result in data corruption, rendering the structure\n * unusable.\n * See https://github.com/ethereum/solidity/pull/11843[ethereum/solidity#11843] for more info.\n *\n * In order to clean an EnumerableSet, you can either remove all elements one by one or create a fresh instance using an\n * array of EnumerableSet.\n * ====\n */\nlibrary EnumerableSet {\n    // To implement this library for multiple types with as little code\n    // repetition as possible, we write it in terms of a generic Set type with\n    // bytes32 values.\n    // The Set implementation uses private functions, and user-facing\n    // implementations (such as AddressSet) are just wrappers around the\n    // underlying Set.\n    // This means that we can only create new EnumerableSets for types that fit\n    // in bytes32.\n\n    struct Set {\n        // Storage of set values\n        bytes32[] _values;\n        // Position of the value in the `values` array, plus 1 because index 0\n        // means a value is not in the set.\n        mapping(bytes32 => uint256) _indexes;\n    }\n\n    /**\n     * @dev Add a value to a set. O(1).\n     *\n     * Returns true if the value was added to the set, that is if it was not\n     * already present.\n     */\n    function _add(Set storage set, bytes32 value) private returns (bool) {\n        if (!_contains(set, value)) {\n            set._values.push(value);\n            // The value is stored at length-1, but we add 1 to all indexes\n            // and use 0 as a sentinel value\n            set._indexes[value] = set._values.length;\n            return true;\n        } else {\n            return false;\n        }\n    }\n\n    /**\n     * @dev Removes a value from a set. O(1).\n     *\n     * Returns true if the value was removed from the set, that is if it was\n     * present.\n     */\n    function _remove(Set storage set, bytes32 value) private returns (bool) {\n        // We read and store the value's index to prevent multiple reads from the same storage slot\n        uint256 valueIndex = set._indexes[value];\n\n        if (valueIndex != 0) {\n            // Equivalent to contains(set, value)\n            // To delete an element from the _values array in O(1), we swap the element to delete with the last one in\n            // the array, and then remove the last element (sometimes called as 'swap and pop').\n            // This modifies the order of the array, as noted in {at}.\n\n            uint256 toDeleteIndex = valueIndex - 1;\n            uint256 lastIndex = set._values.length - 1;\n\n            if (lastIndex != toDeleteIndex) {\n                bytes32 lastValue = set._values[lastIndex];\n\n                // Move the last value to the index where the value to delete is\n                set._values[toDeleteIndex] = lastValue;\n                // Update the index for the moved value\n                set._indexes[lastValue] = valueIndex; // Replace lastValue's index to valueIndex\n            }\n\n            // Delete the slot where the moved value was stored\n            set._values.pop();\n\n            // Delete the index for the deleted slot\n            delete set._indexes[value];\n\n            return true;\n        } else {\n            return false;\n        }\n    }\n\n    /**\n     * @dev Returns true if the value is in the set. O(1).\n     */\n    function _contains(Set storage set, bytes32 value) private view returns (bool) {\n        return set._indexes[value] != 0;\n    }\n\n    /**\n     * @dev Returns the number of values on the set. O(1).\n     */\n    function _length(Set storage set) private view returns (uint256) {\n        return set._values.length;\n    }\n\n    /**\n     * @dev Returns the value stored at position `index` in the set. O(1).\n     *\n     * Note that there are no guarantees on the ordering of values inside the\n     * array, and it may change when more values are added or removed.\n     *\n     * Requirements:\n     *\n     * - `index` must be strictly less than {length}.\n     */\n    function _at(Set storage set, uint256 index) private view returns (bytes32) {\n        return set._values[index];\n    }\n\n    /**\n     * @dev Return the entire set in an array\n     *\n     * WARNING: This operation will copy the entire storage to memory, which can be quite expensive. This is designed\n     * to mostly be used by view accessors that are queried without any gas fees. Developers should keep in mind that\n     * this function has an unbounded cost, and using it as part of a state-changing function may render the function\n     * uncallable if the set grows to a point where copying to memory consumes too much gas to fit in a block.\n     */\n    function _values(Set storage set) private view returns (bytes32[] memory) {\n        return set._values;\n    }\n\n    // Bytes32Set\n\n    struct Bytes32Set {\n        Set _inner;\n    }\n\n    /**\n     * @dev Add a value to a set. O(1).\n     *\n     * Returns true if the value was added to the set, that is if it was not\n     * already present.\n     */\n    function add(Bytes32Set storage set, bytes32 value) internal returns (bool) {\n        return _add(set._inner, value);\n    }\n\n    /**\n     * @dev Removes a value from a set. O(1).\n     *\n     * Returns true if the value was removed from the set, that is if it was\n     * present.\n     */\n    function remove(Bytes32Set storage set, bytes32 value) internal returns (bool) {\n        return _remove(set._inner, value);\n    }\n\n    /**\n     * @dev Returns true if the value is in the set. O(1).\n     */\n    function contains(Bytes32Set storage set, bytes32 value) internal view returns (bool) {\n        return _contains(set._inner, value);\n    }\n\n    /**\n     * @dev Returns the number of values in the set. O(1).\n     */\n    function length(Bytes32Set storage set) internal view returns (uint256) {\n        return _length(set._inner);\n    }\n\n    /**\n     * @dev Returns the value stored at position `index` in the set. O(1).\n     *\n     * Note that there are no guarantees on the ordering of values inside the\n     * array, and it may change when more values are added or removed.\n     *\n     * Requirements:\n     *\n     * - `index` must be strictly less than {length}.\n     */\n    function at(Bytes32Set storage set, uint256 index) internal view returns (bytes32) {\n        return _at(set._inner, index);\n    }\n\n    /**\n     * @dev Return the entire set in an array\n     *\n     * WARNING: This operation will copy the entire storage to memory, which can be quite expensive. This is designed\n     * to mostly be used by view accessors that are queried without any gas fees. Developers should keep in mind that\n     * this function has an unbounded cost, and using it as part of a state-changing function may render the function\n     * uncallable if the set grows to a point where copying to memory consumes too much gas to fit in a block.\n     */\n    function values(Bytes32Set storage set) internal view returns (bytes32[] memory) {\n        bytes32[] memory store = _values(set._inner);\n        bytes32[] memory result;\n\n        /// @solidity memory-safe-assembly\n        assembly {\n            result := store\n        }\n\n        return result;\n    }\n\n    // AddressSet\n\n    struct AddressSet {\n        Set _inner;\n    }\n\n    /**\n     * @dev Add a value to a set. O(1).\n     *\n     * Returns true if the value was added to the set, that is if it was not\n     * already present.\n     */\n    function add(AddressSet storage set, address value) internal returns (bool) {\n        return _add(set._inner, bytes32(uint256(uint160(value))));\n    }\n\n    /**\n     * @dev Removes a value from a set. O(1).\n     *\n     * Returns true if the value was removed from the set, that is if it was\n     * present.\n     */\n    function remove(AddressSet storage set, address value) internal returns (bool) {\n        return _remove(set._inner, bytes32(uint256(uint160(value))));\n    }\n\n    /**\n     * @dev Returns true if the value is in the set. O(1).\n     */\n    function contains(AddressSet storage set, address value) internal view returns (bool) {\n        return _contains(set._inner, bytes32(uint256(uint160(value))));\n    }\n\n    /**\n     * @dev Returns the number of values in the set. O(1).\n     */\n    function length(AddressSet storage set) internal view returns (uint256) {\n        return _length(set._inner);\n    }\n\n    /**\n     * @dev Returns the value stored at position `index` in the set. O(1).\n     *\n     * Note that there are no guarantees on the ordering of values inside the\n     * array, and it may change when more values are added or removed.\n     *\n     * Requirements:\n     *\n     * - `index` must be strictly less than {length}.\n     */\n    function at(AddressSet storage set, uint256 index) internal view returns (address) {\n        return address(uint160(uint256(_at(set._inner, index))));\n    }\n\n    /**\n     * @dev Return the entire set in an array\n     *\n     * WARNING: This operation will copy the entire storage to memory, which can be quite expensive. This is designed\n     * to mostly be used by view accessors that are queried without any gas fees. Developers should keep in mind that\n     * this function has an unbounded cost, and using it as part of a state-changing function may render the function\n     * uncallable if the set grows to a point where copying to memory consumes too much gas to fit in a block.\n     */\n    function values(AddressSet storage set) internal view returns (address[] memory) {\n        bytes32[] memory store = _values(set._inner);\n        address[] memory result;\n\n        /// @solidity memory-safe-assembly\n        assembly {\n            result := store\n        }\n\n        return result;\n    }\n\n    // UintSet\n\n    struct UintSet {\n        Set _inner;\n    }\n\n    /**\n     * @dev Add a value to a set. O(1).\n     *\n     * Returns true if the value was added to the set, that is if it was not\n     * already present.\n     */\n    function add(UintSet storage set, uint256 value) internal returns (bool) {\n        return _add(set._inner, bytes32(value));\n    }\n\n    /**\n     * @dev Removes a value from a set. O(1).\n     *\n     * Returns true if the value was removed from the set, that is if it was\n     * present.\n     */\n    function remove(UintSet storage set, uint256 value) internal returns (bool) {\n        return _remove(set._inner, bytes32(value));\n    }\n\n    /**\n     * @dev Returns true if the value is in the set. O(1).\n     */\n    function contains(UintSet storage set, uint256 value) internal view returns (bool) {\n        return _contains(set._inner, bytes32(value));\n    }\n\n    /**\n     * @dev Returns the number of values in the set. O(1).\n     */\n    function length(UintSet storage set) internal view returns (uint256) {\n        return _length(set._inner);\n    }\n\n    /**\n     * @dev Returns the value stored at position `index` in the set. O(1).\n     *\n     * Note that there are no guarantees on the ordering of values inside the\n     * array, and it may change when more values are added or removed.\n     *\n     * Requirements:\n     *\n     * - `index` must be strictly less than {length}.\n     */\n    function at(UintSet storage set, uint256 index) internal view returns (uint256) {\n        return uint256(_at(set._inner, index));\n    }\n\n    /**\n     * @dev Return the entire set in an array\n     *\n     * WARNING: This operation will copy the entire storage to memory, which can be quite expensive. This is designed\n     * to mostly be used by view accessors that are queried without any gas fees. Developers should keep in mind that\n     * this function has an unbounded cost, and using it as part of a state-changing function may render the function\n     * uncallable if the set grows to a point where copying to memory consumes too much gas to fit in a block.\n     */\n    function values(UintSet storage set) internal view returns (uint256[] memory) {\n        bytes32[] memory store = _values(set._inner);\n        uint256[] memory result;\n\n        /// @solidity memory-safe-assembly\n        assembly {\n            result := store\n        }\n\n        return result;\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/interfaces/IERC1271.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts v4.4.1 (interfaces/IERC1271.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Interface of the ERC1271 standard signature validation method for\n * contracts as defined in https://eips.ethereum.org/EIPS/eip-1271[ERC-1271].\n *\n * _Available since v4.1._\n */\ninterface IERC1271 {\n    /**\n     * @dev Should return whether the signature provided is valid for the provided data\n     * @param hash      Hash of the data to be signed\n     * @param signature Signature byte array associated with _data\n     */\n    function isValidSignature(bytes32 hash, bytes memory signature) external view returns (bytes4 magicValue);\n}\n"
      },
      "contracts/interfaces/IUSDe.sol": {
        "content": "// SPDX-License-Identifier: GPL-3.0\npragma solidity 0.8.20;\n\nimport \"@openzeppelin/contracts/token/ERC20/IERC20.sol\";\nimport \"@openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol\";\nimport \"@openzeppelin/contracts/token/ERC20/extensions/IERC20Permit.sol\";\n\ninterface IUSDe is IERC20, IERC20Permit, IERC20Metadata {\n  function mint(address _to, uint256 _amount) external;\n\n  function burn(uint256 _amount) external;\n\n  function burnFrom(address account, uint256 amount) external;\n\n  function grantRole(bytes32 role, address account) external;\n\n  function setMinter(address newMinter) external;\n}\n"
      },
      "contracts/interfaces/IEthenaMinting.sol": {
        "content": "// SPDX-License-Identifier: MIT\npragma solidity 0.8.20;\n\n/* solhint-disable var-name-mixedcase  */\n\nimport \"./IEthenaMintingEvents.sol\";\n\ninterface IEthenaMinting is IEthenaMintingEvents {\n  enum Role {\n    Minter,\n    Redeemer\n  }\n\n  enum OrderType {\n    MINT,\n    REDEEM\n  }\n\n  enum TokenType {\n    STABLE,\n    ASSET\n  }\n\n  enum SignatureType {\n    EIP712,\n    EIP1271\n  }\n\n  enum DelegatedSignerStatus {\n    REJECTED,\n    PENDING,\n    ACCEPTED\n  }\n\n  struct Signature {\n    SignatureType signature_type;\n    bytes signature_bytes;\n  }\n\n  struct Route {\n    address[] addresses;\n    uint128[] ratios;\n  }\n\n  struct Order {\n    string order_id;\n    OrderType order_type;\n    uint120 expiry;\n    uint128 nonce;\n    address benefactor;\n    address beneficiary;\n    address collateral_asset;\n    uint128 collateral_amount;\n    uint128 usde_amount;\n  }\n\n  struct TokenConfig {\n    /// @notice tracks asset type (STABLE or ASSET)\n    TokenType tokenType;\n    /// @notice tracks if the asset is active\n    bool isActive;\n    /// @notice max mint per block this given asset\n    uint128 maxMintPerBlock;\n    /// @notice max redeem per block this given asset\n    uint128 maxRedeemPerBlock;\n  }\n\n  struct BlockTotals {\n    /// @notice USDe minted per block / per asset per block\n    uint128 mintedPerBlock;\n    /// @notice USDe redeemed per block / per asset per block\n    uint128 redeemedPerBlock;\n  }\n\n  struct GlobalConfig {\n    /// @notice max USDe that can be minted across all assets within a single block.\n    uint128 globalMaxMintPerBlock;\n    /// @notice max USDe that can be redeemed across all assets within a single block.\n    uint128 globalMaxRedeemPerBlock;\n  }\n\n  error InvalidAddress();\n  error InvalidUSDeAddress();\n  error InvalidZeroAddress();\n  error InvalidAssetAddress();\n  error InvalidBenefactorAddress();\n  error InvalidBeneficiaryAddress();\n  error InvalidCustodianAddress();\n  error InvalidOrder();\n  error InvalidAmount();\n  error InvalidRoute();\n  error InvalidStablePrice();\n  error UnknownSignatureType();\n  error UnsupportedAsset();\n  error NoAssetsProvided();\n  error BenefactorNotWhitelisted();\n  error BeneficiaryNotApproved();\n  error InvalidEIP712Signature();\n  error InvalidEIP1271Signature();\n  error InvalidNonce();\n  error SignatureExpired();\n  error TransferFailed();\n  error DelegationNotInitiated();\n  error MaxMintPerBlockExceeded();\n  error MaxRedeemPerBlockExceeded();\n  error GlobalMaxMintPerBlockExceeded();\n  error GlobalMaxRedeemPerBlockExceeded();\n\n\n  function hashOrder(Order calldata order) external view returns (bytes32);\n\n  function verifyOrder(Order calldata order, Signature calldata signature) external view returns (bytes32);\n\n  function verifyRoute(Route calldata route) external view returns (bool);\n\n  function verifyNonce(address sender, uint128 nonce) external view returns (uint128, uint256, uint256);\n\n  function verifyStablesLimit(uint128 collateralAmount, uint128 usdeAmount, address collateralAsset, OrderType orderType) external view returns (bool);\n\n  function mint(Order calldata order, Route calldata route, Signature calldata signature) external;\n\n  function mintWETH(Order calldata order, Route calldata route, Signature calldata signature) external;\n\n  function redeem(Order calldata order, Signature calldata signature) external;\n}\n"
      },
      "contracts/interfaces/IWETH9.sol": {
        "content": "// SPDX-License-Identifier: GPL-3.0\npragma solidity 0.8.20;\n\ninterface IWETH9 {\n  function deposit() external payable;\n  function withdraw(uint256 wad) external payable;\n  function totalSupply() external returns (uint256);\n  function approve(address guy, uint256 wad) external returns (bool);\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/access/AccessControl.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (access/AccessControl.sol)\n\npragma solidity ^0.8.0;\n\nimport \"./IAccessControl.sol\";\nimport \"../utils/Context.sol\";\nimport \"../utils/Strings.sol\";\nimport \"../utils/introspection/ERC165.sol\";\n\n/**\n * @dev Contract module that allows children to implement role-based access\n * control mechanisms. This is a lightweight version that doesn't allow enumerating role\n * members except through off-chain means by accessing the contract event logs. Some\n * applications may benefit from on-chain enumerability, for those cases see\n * {AccessControlEnumerable}.\n *\n * Roles are referred to by their `bytes32` identifier. These should be exposed\n * in the external API and be unique. The best way to achieve this is by\n * using `public constant` hash digests:\n *\n * ```solidity\n * bytes32 public constant MY_ROLE = keccak256(\"MY_ROLE\");\n * ```\n *\n * Roles can be used to represent a set of permissions. To restrict access to a\n * function call, use {hasRole}:\n *\n * ```solidity\n * function foo() public {\n *     require(hasRole(MY_ROLE, msg.sender));\n *     ...\n * }\n * ```\n *\n * Roles can be granted and revoked dynamically via the {grantRole} and\n * {revokeRole} functions. Each role has an associated admin role, and only\n * accounts that have a role's admin role can call {grantRole} and {revokeRole}.\n *\n * By default, the admin role for all roles is `DEFAULT_ADMIN_ROLE`, which means\n * that only accounts with this role will be able to grant or revoke other\n * roles. More complex role relationships can be created by using\n * {_setRoleAdmin}.\n *\n * WARNING: The `DEFAULT_ADMIN_ROLE` is also its own admin: it has permission to\n * grant and revoke this role. Extra precautions should be taken to secure\n * accounts that have been granted it. We recommend using {AccessControlDefaultAdminRules}\n * to enforce additional security measures for this role.\n */\nabstract contract AccessControl is Context, IAccessControl, ERC165 {\n    struct RoleData {\n        mapping(address => bool) members;\n        bytes32 adminRole;\n    }\n\n    mapping(bytes32 => RoleData) private _roles;\n\n    bytes32 public constant DEFAULT_ADMIN_ROLE = 0x00;\n\n    /**\n     * @dev Modifier that checks that an account has a specific role. Reverts\n     * with a standardized message including the required role.\n     *\n     * The format of the revert reason is given by the following regular expression:\n     *\n     *  /^AccessControl: account (0x[0-9a-f]{40}) is missing role (0x[0-9a-f]{64})$/\n     *\n     * _Available since v4.1._\n     */\n    modifier onlyRole(bytes32 role) {\n        _checkRole(role);\n        _;\n    }\n\n    /**\n     * @dev See {IERC165-supportsInterface}.\n     */\n    function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {\n        return interfaceId == type(IAccessControl).interfaceId || super.supportsInterface(interfaceId);\n    }\n\n    /**\n     * @dev Returns `true` if `account` has been granted `role`.\n     */\n    function hasRole(bytes32 role, address account) public view virtual override returns (bool) {\n        return _roles[role].members[account];\n    }\n\n    /**\n     * @dev Revert with a standard message if `_msgSender()` is missing `role`.\n     * Overriding this function changes the behavior of the {onlyRole} modifier.\n     *\n     * Format of the revert message is described in {_checkRole}.\n     *\n     * _Available since v4.6._\n     */\n    function _checkRole(bytes32 role) internal view virtual {\n        _checkRole(role, _msgSender());\n    }\n\n    /**\n     * @dev Revert with a standard message if `account` is missing `role`.\n     *\n     * The format of the revert reason is given by the following regular expression:\n     *\n     *  /^AccessControl: account (0x[0-9a-f]{40}) is missing role (0x[0-9a-f]{64})$/\n     */\n    function _checkRole(bytes32 role, address account) internal view virtual {\n        if (!hasRole(role, account)) {\n            revert(\n                string(\n                    abi.encodePacked(\n                        \"AccessControl: account \",\n                        Strings.toHexString(account),\n                        \" is missing role \",\n                        Strings.toHexString(uint256(role), 32)\n                    )\n                )\n            );\n        }\n    }\n\n    /**\n     * @dev Returns the admin role that controls `role`. See {grantRole} and\n     * {revokeRole}.\n     *\n     * To change a role's admin, use {_setRoleAdmin}.\n     */\n    function getRoleAdmin(bytes32 role) public view virtual override returns (bytes32) {\n        return _roles[role].adminRole;\n    }\n\n    /**\n     * @dev Grants `role` to `account`.\n     *\n     * If `account` had not been already granted `role`, emits a {RoleGranted}\n     * event.\n     *\n     * Requirements:\n     *\n     * - the caller must have ``role``'s admin role.\n     *\n     * May emit a {RoleGranted} event.\n     */\n    function grantRole(bytes32 role, address account) public virtual override onlyRole(getRoleAdmin(role)) {\n        _grantRole(role, account);\n    }\n\n    /**\n     * @dev Revokes `role` from `account`.\n     *\n     * If `account` had been granted `role`, emits a {RoleRevoked} event.\n     *\n     * Requirements:\n     *\n     * - the caller must have ``role``'s admin role.\n     *\n     * May emit a {RoleRevoked} event.\n     */\n    function revokeRole(bytes32 role, address account) public virtual override onlyRole(getRoleAdmin(role)) {\n        _revokeRole(role, account);\n    }\n\n    /**\n     * @dev Revokes `role` from the calling account.\n     *\n     * Roles are often managed via {grantRole} and {revokeRole}: this function's\n     * purpose is to provide a mechanism for accounts to lose their privileges\n     * if they are compromised (such as when a trusted device is misplaced).\n     *\n     * If the calling account had been revoked `role`, emits a {RoleRevoked}\n     * event.\n     *\n     * Requirements:\n     *\n     * - the caller must be `account`.\n     *\n     * May emit a {RoleRevoked} event.\n     */\n    function renounceRole(bytes32 role, address account) public virtual override {\n        require(account == _msgSender(), \"AccessControl: can only renounce roles for self\");\n\n        _revokeRole(role, account);\n    }\n\n    /**\n     * @dev Grants `role` to `account`.\n     *\n     * If `account` had not been already granted `role`, emits a {RoleGranted}\n     * event. Note that unlike {grantRole}, this function doesn't perform any\n     * checks on the calling account.\n     *\n     * May emit a {RoleGranted} event.\n     *\n     * [WARNING]\n     * ====\n     * This function should only be called from the constructor when setting\n     * up the initial roles for the system.\n     *\n     * Using this function in any other way is effectively circumventing the admin\n     * system imposed by {AccessControl}.\n     * ====\n     *\n     * NOTE: This function is deprecated in favor of {_grantRole}.\n     */\n    function _setupRole(bytes32 role, address account) internal virtual {\n        _grantRole(role, account);\n    }\n\n    /**\n     * @dev Sets `adminRole` as ``role``'s admin role.\n     *\n     * Emits a {RoleAdminChanged} event.\n     */\n    function _setRoleAdmin(bytes32 role, bytes32 adminRole) internal virtual {\n        bytes32 previousAdminRole = getRoleAdmin(role);\n        _roles[role].adminRole = adminRole;\n        emit RoleAdminChanged(role, previousAdminRole, adminRole);\n    }\n\n    /**\n     * @dev Grants `role` to `account`.\n     *\n     * Internal function without access restriction.\n     *\n     * May emit a {RoleGranted} event.\n     */\n    function _grantRole(bytes32 role, address account) internal virtual {\n        if (!hasRole(role, account)) {\n            _roles[role].members[account] = true;\n            emit RoleGranted(role, account, _msgSender());\n        }\n    }\n\n    /**\n     * @dev Revokes `role` from `account`.\n     *\n     * Internal function without access restriction.\n     *\n     * May emit a {RoleRevoked} event.\n     */\n    function _revokeRole(bytes32 role, address account) internal virtual {\n        if (hasRole(role, account)) {\n            _roles[role].members[account] = false;\n            emit RoleRevoked(role, account, _msgSender());\n        }\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/interfaces/IERC5313.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (interfaces/IERC5313.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Interface for the Light Contract Ownership Standard.\n *\n * A standardized minimal interface required to identify an account that controls a contract\n *\n * _Available since v4.9._\n */\ninterface IERC5313 {\n    /**\n     * @dev Gets the address of the owner.\n     */\n    function owner() external view returns (address);\n}\n"
      },
      "contracts/interfaces/ISingleAdminAccessControl.sol": {
        "content": "// SPDX-License-Identifier: MIT\npragma solidity 0.8.20;\n\ninterface ISingleAdminAccessControl {\n  error InvalidAdminChange();\n  error NotPendingAdmin();\n\n  event AdminTransferred(address indexed oldAdmin, address indexed newAdmin);\n  event AdminTransferRequested(address indexed oldAdmin, address indexed newAdmin);\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/token/ERC20/IERC20.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (token/ERC20/IERC20.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Interface of the ERC20 standard as defined in the EIP.\n */\ninterface IERC20 {\n    /**\n     * @dev Emitted when `value` tokens are moved from one account (`from`) to\n     * another (`to`).\n     *\n     * Note that `value` may be zero.\n     */\n    event Transfer(address indexed from, address indexed to, uint256 value);\n\n    /**\n     * @dev Emitted when the allowance of a `spender` for an `owner` is set by\n     * a call to {approve}. `value` is the new allowance.\n     */\n    event Approval(address indexed owner, address indexed spender, uint256 value);\n\n    /**\n     * @dev Returns the amount of tokens in existence.\n     */\n    function totalSupply() external view returns (uint256);\n\n    /**\n     * @dev Returns the amount of tokens owned by `account`.\n     */\n    function balanceOf(address account) external view returns (uint256);\n\n    /**\n     * @dev Moves `amount` tokens from the caller's account to `to`.\n     *\n     * Returns a boolean value indicating whether the operation succeeded.\n     *\n     * Emits a {Transfer} event.\n     */\n    function transfer(address to, uint256 amount) external returns (bool);\n\n    /**\n     * @dev Returns the remaining number of tokens that `spender` will be\n     * allowed to spend on behalf of `owner` through {transferFrom}. This is\n     * zero by default.\n     *\n     * This value changes when {approve} or {transferFrom} are called.\n     */\n    function allowance(address owner, address spender) external view returns (uint256);\n\n    /**\n     * @dev Sets `amount` as the allowance of `spender` over the caller's tokens.\n     *\n     * Returns a boolean value indicating whether the operation succeeded.\n     *\n     * IMPORTANT: Beware that changing an allowance with this method brings the risk\n     * that someone may use both the old and the new allowance by unfortunate\n     * transaction ordering. One possible solution to mitigate this race\n     * condition is to first reduce the spender's allowance to 0 and set the\n     * desired value afterwards:\n     * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729\n     *\n     * Emits an {Approval} event.\n     */\n    function approve(address spender, uint256 amount) external returns (bool);\n\n    /**\n     * @dev Moves `amount` tokens from `from` to `to` using the\n     * allowance mechanism. `amount` is then deducted from the caller's\n     * allowance.\n     *\n     * Returns a boolean value indicating whether the operation succeeded.\n     *\n     * Emits a {Transfer} event.\n     */\n    function transferFrom(address from, address to, uint256 amount) external returns (bool);\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/token/ERC20/extensions/IERC20Permit.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.4) (token/ERC20/extensions/IERC20Permit.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Interface of the ERC20 Permit extension allowing approvals to be made via signatures, as defined in\n * https://eips.ethereum.org/EIPS/eip-2612[EIP-2612].\n *\n * Adds the {permit} method, which can be used to change an account's ERC20 allowance (see {IERC20-allowance}) by\n * presenting a message signed by the account. By not relying on {IERC20-approve}, the token holder account doesn't\n * need to send a transaction, and thus is not required to hold Ether at all.\n *\n * ==== Security Considerations\n *\n * There are two important considerations concerning the use of `permit`. The first is that a valid permit signature\n * expresses an allowance, and it should not be assumed to convey additional meaning. In particular, it should not be\n * considered as an intention to spend the allowance in any specific way. The second is that because permits have\n * built-in replay protection and can be submitted by anyone, they can be frontrun. A protocol that uses permits should\n * take this into consideration and allow a `permit` call to fail. Combining these two aspects, a pattern that may be\n * generally recommended is:\n *\n * ```solidity\n * function doThingWithPermit(..., uint256 value, uint256 deadline, uint8 v, bytes32 r, bytes32 s) public {\n *     try token.permit(msg.sender, address(this), value, deadline, v, r, s) {} catch {}\n *     doThing(..., value);\n * }\n *\n * function doThing(..., uint256 value) public {\n *     token.safeTransferFrom(msg.sender, address(this), value);\n *     ...\n * }\n * ```\n *\n * Observe that: 1) `msg.sender` is used as the owner, leaving no ambiguity as to the signer intent, and 2) the use of\n * `try/catch` allows the permit to fail and makes the code tolerant to frontrunning. (See also\n * {SafeERC20-safeTransferFrom}).\n *\n * Additionally, note that smart contract wallets (such as Argent or Safe) are not able to produce permit signatures, so\n * contracts should have entry points that don't rely on permit.\n */\ninterface IERC20Permit {\n    /**\n     * @dev Sets `value` as the allowance of `spender` over ``owner``'s tokens,\n     * given ``owner``'s signed approval.\n     *\n     * IMPORTANT: The same issues {IERC20-approve} has related to transaction\n     * ordering also apply here.\n     *\n     * Emits an {Approval} event.\n     *\n     * Requirements:\n     *\n     * - `spender` cannot be the zero address.\n     * - `deadline` must be a timestamp in the future.\n     * - `v`, `r` and `s` must be a valid `secp256k1` signature from `owner`\n     * over the EIP712-formatted function arguments.\n     * - the signature must use ``owner``'s current nonce (see {nonces}).\n     *\n     * For more information on the signature format, see the\n     * https://eips.ethereum.org/EIPS/eip-2612#specification[relevant EIP\n     * section].\n     *\n     * CAUTION: See Security Considerations above.\n     */\n    function permit(\n        address owner,\n        address spender,\n        uint256 value,\n        uint256 deadline,\n        uint8 v,\n        bytes32 r,\n        bytes32 s\n    ) external;\n\n    /**\n     * @dev Returns the current nonce for `owner`. This value must be\n     * included whenever a signature is generated for {permit}.\n     *\n     * Every successful call to {permit} increases ``owner``'s nonce by one. This\n     * prevents a signature from being used multiple times.\n     */\n    function nonces(address owner) external view returns (uint256);\n\n    /**\n     * @dev Returns the domain separator used in the encoding of the signature for {permit}, as defined by {EIP712}.\n     */\n    // solhint-disable-next-line func-name-mixedcase\n    function DOMAIN_SEPARATOR() external view returns (bytes32);\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/Address.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (utils/Address.sol)\n\npragma solidity ^0.8.1;\n\n/**\n * @dev Collection of functions related to the address type\n */\nlibrary Address {\n    /**\n     * @dev Returns true if `account` is a contract.\n     *\n     * [IMPORTANT]\n     * ====\n     * It is unsafe to assume that an address for which this function returns\n     * false is an externally-owned account (EOA) and not a contract.\n     *\n     * Among others, `isContract` will return false for the following\n     * types of addresses:\n     *\n     *  - an externally-owned account\n     *  - a contract in construction\n     *  - an address where a contract will be created\n     *  - an address where a contract lived, but was destroyed\n     *\n     * Furthermore, `isContract` will also return true if the target contract within\n     * the same transaction is already scheduled for destruction by `SELFDESTRUCT`,\n     * which only has an effect at the end of a transaction.\n     * ====\n     *\n     * [IMPORTANT]\n     * ====\n     * You shouldn't rely on `isContract` to protect against flash loan attacks!\n     *\n     * Preventing calls from contracts is highly discouraged. It breaks composability, breaks support for smart wallets\n     * like Gnosis Safe, and does not provide security since it can be circumvented by calling from a contract\n     * constructor.\n     * ====\n     */\n    function isContract(address account) internal view returns (bool) {\n        // This method relies on extcodesize/address.code.length, which returns 0\n        // for contracts in construction, since the code is only stored at the end\n        // of the constructor execution.\n\n        return account.code.length > 0;\n    }\n\n    /**\n     * @dev Replacement for Solidity's `transfer`: sends `amount` wei to\n     * `recipient`, forwarding all available gas and reverting on errors.\n     *\n     * https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost\n     * of certain opcodes, possibly making contracts go over the 2300 gas limit\n     * imposed by `transfer`, making them unable to receive funds via\n     * `transfer`. {sendValue} removes this limitation.\n     *\n     * https://consensys.net/diligence/blog/2019/09/stop-using-soliditys-transfer-now/[Learn more].\n     *\n     * IMPORTANT: because control is transferred to `recipient`, care must be\n     * taken to not create reentrancy vulnerabilities. Consider using\n     * {ReentrancyGuard} or the\n     * https://solidity.readthedocs.io/en/v0.8.0/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern].\n     */\n    function sendValue(address payable recipient, uint256 amount) internal {\n        require(address(this).balance >= amount, \"Address: insufficient balance\");\n\n        (bool success, ) = recipient.call{value: amount}(\"\");\n        require(success, \"Address: unable to send value, recipient may have reverted\");\n    }\n\n    /**\n     * @dev Performs a Solidity function call using a low level `call`. A\n     * plain `call` is an unsafe replacement for a function call: use this\n     * function instead.\n     *\n     * If `target` reverts with a revert reason, it is bubbled up by this\n     * function (like regular Solidity function calls).\n     *\n     * Returns the raw returned data. To convert to the expected return value,\n     * use https://solidity.readthedocs.io/en/latest/units-and-global-variables.html?highlight=abi.decode#abi-encoding-and-decoding-functions[`abi.decode`].\n     *\n     * Requirements:\n     *\n     * - `target` must be a contract.\n     * - calling `target` with `data` must not revert.\n     *\n     * _Available since v3.1._\n     */\n    function functionCall(address target, bytes memory data) internal returns (bytes memory) {\n        return functionCallWithValue(target, data, 0, \"Address: low-level call failed\");\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`], but with\n     * `errorMessage` as a fallback revert reason when `target` reverts.\n     *\n     * _Available since v3.1._\n     */\n    function functionCall(\n        address target,\n        bytes memory data,\n        string memory errorMessage\n    ) internal returns (bytes memory) {\n        return functionCallWithValue(target, data, 0, errorMessage);\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],\n     * but also transferring `value` wei to `target`.\n     *\n     * Requirements:\n     *\n     * - the calling contract must have an ETH balance of at least `value`.\n     * - the called Solidity function must be `payable`.\n     *\n     * _Available since v3.1._\n     */\n    function functionCallWithValue(address target, bytes memory data, uint256 value) internal returns (bytes memory) {\n        return functionCallWithValue(target, data, value, \"Address: low-level call with value failed\");\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCallWithValue-address-bytes-uint256-}[`functionCallWithValue`], but\n     * with `errorMessage` as a fallback revert reason when `target` reverts.\n     *\n     * _Available since v3.1._\n     */\n    function functionCallWithValue(\n        address target,\n        bytes memory data,\n        uint256 value,\n        string memory errorMessage\n    ) internal returns (bytes memory) {\n        require(address(this).balance >= value, \"Address: insufficient balance for call\");\n        (bool success, bytes memory returndata) = target.call{value: value}(data);\n        return verifyCallResultFromTarget(target, success, returndata, errorMessage);\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],\n     * but performing a static call.\n     *\n     * _Available since v3.3._\n     */\n    function functionStaticCall(address target, bytes memory data) internal view returns (bytes memory) {\n        return functionStaticCall(target, data, \"Address: low-level static call failed\");\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-string-}[`functionCall`],\n     * but performing a static call.\n     *\n     * _Available since v3.3._\n     */\n    function functionStaticCall(\n        address target,\n        bytes memory data,\n        string memory errorMessage\n    ) internal view returns (bytes memory) {\n        (bool success, bytes memory returndata) = target.staticcall(data);\n        return verifyCallResultFromTarget(target, success, returndata, errorMessage);\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],\n     * but performing a delegate call.\n     *\n     * _Available since v3.4._\n     */\n    function functionDelegateCall(address target, bytes memory data) internal returns (bytes memory) {\n        return functionDelegateCall(target, data, \"Address: low-level delegate call failed\");\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-string-}[`functionCall`],\n     * but performing a delegate call.\n     *\n     * _Available since v3.4._\n     */\n    function functionDelegateCall(\n        address target,\n        bytes memory data,\n        string memory errorMessage\n    ) internal returns (bytes memory) {\n        (bool success, bytes memory returndata) = target.delegatecall(data);\n        return verifyCallResultFromTarget(target, success, returndata, errorMessage);\n    }\n\n    /**\n     * @dev Tool to verify that a low level call to smart-contract was successful, and revert (either by bubbling\n     * the revert reason or using the provided one) in case of unsuccessful call or if target was not a contract.\n     *\n     * _Available since v4.8._\n     */\n    function verifyCallResultFromTarget(\n        address target,\n        bool success,\n        bytes memory returndata,\n        string memory errorMessage\n    ) internal view returns (bytes memory) {\n        if (success) {\n            if (returndata.length == 0) {\n                // only check isContract if the call was successful and the return data is empty\n                // otherwise we already know that it was a contract\n                require(isContract(target), \"Address: call to non-contract\");\n            }\n            return returndata;\n        } else {\n            _revert(returndata, errorMessage);\n        }\n    }\n\n    /**\n     * @dev Tool to verify that a low level call was successful, and revert if it wasn't, either by bubbling the\n     * revert reason or using the provided one.\n     *\n     * _Available since v4.3._\n     */\n    function verifyCallResult(\n        bool success,\n        bytes memory returndata,\n        string memory errorMessage\n    ) internal pure returns (bytes memory) {\n        if (success) {\n            return returndata;\n        } else {\n            _revert(returndata, errorMessage);\n        }\n    }\n\n    function _revert(bytes memory returndata, string memory errorMessage) private pure {\n        // Look for revert reason and bubble it up if present\n        if (returndata.length > 0) {\n            // The easiest way to bubble the revert reason is using memory via assembly\n            /// @solidity memory-safe-assembly\n            assembly {\n                let returndata_size := mload(returndata)\n                revert(add(32, returndata), returndata_size)\n            }\n        } else {\n            revert(errorMessage);\n        }\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/Strings.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (utils/Strings.sol)\n\npragma solidity ^0.8.0;\n\nimport \"./math/Math.sol\";\nimport \"./math/SignedMath.sol\";\n\n/**\n * @dev String operations.\n */\nlibrary Strings {\n    bytes16 private constant _SYMBOLS = \"0123456789abcdef\";\n    uint8 private constant _ADDRESS_LENGTH = 20;\n\n    /**\n     * @dev Converts a `uint256` to its ASCII `string` decimal representation.\n     */\n    function toString(uint256 value) internal pure returns (string memory) {\n        unchecked {\n            uint256 length = Math.log10(value) + 1;\n            string memory buffer = new string(length);\n            uint256 ptr;\n            /// @solidity memory-safe-assembly\n            assembly {\n                ptr := add(buffer, add(32, length))\n            }\n            while (true) {\n                ptr--;\n                /// @solidity memory-safe-assembly\n                assembly {\n                    mstore8(ptr, byte(mod(value, 10), _SYMBOLS))\n                }\n                value /= 10;\n                if (value == 0) break;\n            }\n            return buffer;\n        }\n    }\n\n    /**\n     * @dev Converts a `int256` to its ASCII `string` decimal representation.\n     */\n    function toString(int256 value) internal pure returns (string memory) {\n        return string(abi.encodePacked(value < 0 ? \"-\" : \"\", toString(SignedMath.abs(value))));\n    }\n\n    /**\n     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation.\n     */\n    function toHexString(uint256 value) internal pure returns (string memory) {\n        unchecked {\n            return toHexString(value, Math.log256(value) + 1);\n        }\n    }\n\n    /**\n     * @dev Converts a `uint256` to its ASCII `string` hexadecimal representation with fixed length.\n     */\n    function toHexString(uint256 value, uint256 length) internal pure returns (string memory) {\n        bytes memory buffer = new bytes(2 * length + 2);\n        buffer[0] = \"0\";\n        buffer[1] = \"x\";\n        for (uint256 i = 2 * length + 1; i > 1; --i) {\n            buffer[i] = _SYMBOLS[value & 0xf];\n            value >>= 4;\n        }\n        require(value == 0, \"Strings: hex length insufficient\");\n        return string(buffer);\n    }\n\n    /**\n     * @dev Converts an `address` with fixed length of 20 bytes to its not checksummed ASCII `string` hexadecimal representation.\n     */\n    function toHexString(address addr) internal pure returns (string memory) {\n        return toHexString(uint256(uint160(addr)), _ADDRESS_LENGTH);\n    }\n\n    /**\n     * @dev Returns true if the two strings are equal.\n     */\n    function equal(string memory a, string memory b) internal pure returns (bool) {\n        return keccak256(bytes(a)) == keccak256(bytes(b));\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/token/ERC20/extensions/IERC20Metadata.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts v4.4.1 (token/ERC20/extensions/IERC20Metadata.sol)\n\npragma solidity ^0.8.0;\n\nimport \"../IERC20.sol\";\n\n/**\n * @dev Interface for the optional metadata functions from the ERC20 standard.\n *\n * _Available since v4.1._\n */\ninterface IERC20Metadata is IERC20 {\n    /**\n     * @dev Returns the name of the token.\n     */\n    function name() external view returns (string memory);\n\n    /**\n     * @dev Returns the symbol of the token.\n     */\n    function symbol() external view returns (string memory);\n\n    /**\n     * @dev Returns the decimals places of the token.\n     */\n    function decimals() external view returns (uint8);\n}\n"
      },
      "contracts/interfaces/IEthenaMintingEvents.sol": {
        "content": "// SPDX-License-Identifier: MIT\npragma solidity 0.8.20;\n\n/* solhint-disable var-name-mixedcase  */\n\ninterface IEthenaMintingEvents {\n  /// @notice Event emitted when contract receives ETH\n  event Received(address, uint256);\n\n  /// @notice Event emitted when USDe is minted\n  event Mint(\n    address minter,\n    string indexed order_id,\n    address indexed benefactor,\n    address indexed beneficiary,\n    address collateral_asset,\n    uint256 collateral_amount,\n    uint256 usde_amount\n  );\n\n  /// @notice Event emitted when funds are redeemed\n  event Redeem(\n    address redeemer,\n    string indexed order_id,\n    address indexed benefactor,\n    address indexed beneficiary,\n    address collateral_asset,\n    uint256 collateral_amount,\n    uint256 usde_amount\n  );\n\n  /// @notice Event emitted when a supported asset is added\n  event AssetAdded(address indexed asset);\n\n  /// @notice Event emitted when a supported asset is removed\n  event AssetRemoved(address indexed asset);\n\n  /// @notice Event emitted when a benefactor address is added\n  event BenefactorAdded(address indexed benefactor);\n\n  /// @notice Event emitted when a beneficiary address is added or updated\n  event BeneficiaryAdded(address indexed benefactor, address indexed beneficiary);\n\n  /// @notice Event emitted when a benefactor address is removed\n  event BenefactorRemoved(address indexed benefactor);\n\n  /// @notice Event emitted when a beneficiary address is removed\n  event BeneficiaryRemoved(address indexed benefactor, address indexed beneficiary);\n\n  // @notice Event emitted when a custodian address is added\n  event CustodianAddressAdded(address indexed custodian);\n\n  // @notice Event emitted when a custodian address is removed\n  event CustodianAddressRemoved(address indexed custodian);\n\n  /// @notice Event emitted when assets are moved to custody provider wallet\n  event CustodyTransfer(address indexed wallet, address indexed asset, uint256 amount);\n\n  /// @notice Event emitted when USDe is set\n  event USDeSet(address indexed USDe);\n\n  /// @notice Event emitted when the max mint per block is changed\n  event MaxMintPerBlockChanged(uint256 oldMaxMintPerBlock, uint256 newMaxMintPerBlock, address indexed asset);\n\n  /// @notice Event emitted when the max redeem per block is changed\n  event MaxRedeemPerBlockChanged(uint256 oldMaxRedeemPerBlock, uint256 newMaxRedeemPerBlock, address indexed asset);\n\n  /// @notice Event emitted when a delegated signer is added, enabling it to sign orders on behalf of another address\n  event DelegatedSignerAdded(address indexed signer, address indexed delegator);\n\n  /// @notice Event emitted when a delegated signer is removed\n  event DelegatedSignerRemoved(address indexed signer, address indexed delegator);\n\n  /// @notice Event emitted when a delegated signer is initiated\n  event DelegatedSignerInitiated(address indexed signer, address indexed delegator);\n\n  /// @notice Event emitted when the token type for a token is set.\n  event TokenTypeSet(address indexed token, uint tokenType);\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/access/IAccessControl.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts v4.4.1 (access/IAccessControl.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev External interface of AccessControl declared to support ERC165 detection.\n */\ninterface IAccessControl {\n    /**\n     * @dev Emitted when `newAdminRole` is set as ``role``'s admin role, replacing `previousAdminRole`\n     *\n     * `DEFAULT_ADMIN_ROLE` is the starting admin for all roles, despite\n     * {RoleAdminChanged} not being emitted signaling this.\n     *\n     * _Available since v3.1._\n     */\n    event RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole);\n\n    /**\n     * @dev Emitted when `account` is granted `role`.\n     *\n     * `sender` is the account that originated the contract call, an admin role\n     * bearer except when using {AccessControl-_setupRole}.\n     */\n    event RoleGranted(bytes32 indexed role, address indexed account, address indexed sender);\n\n    /**\n     * @dev Emitted when `account` is revoked `role`.\n     *\n     * `sender` is the account that originated the contract call:\n     *   - if using `revokeRole`, it is the admin role bearer\n     *   - if using `renounceRole`, it is the role bearer (i.e. `account`)\n     */\n    event RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender);\n\n    /**\n     * @dev Returns `true` if `account` has been granted `role`.\n     */\n    function hasRole(bytes32 role, address account) external view returns (bool);\n\n    /**\n     * @dev Returns the admin role that controls `role`. See {grantRole} and\n     * {revokeRole}.\n     *\n     * To change a role's admin, use {AccessControl-_setRoleAdmin}.\n     */\n    function getRoleAdmin(bytes32 role) external view returns (bytes32);\n\n    /**\n     * @dev Grants `role` to `account`.\n     *\n     * If `account` had not been already granted `role`, emits a {RoleGranted}\n     * event.\n     *\n     * Requirements:\n     *\n     * - the caller must have ``role``'s admin role.\n     */\n    function grantRole(bytes32 role, address account) external;\n\n    /**\n     * @dev Revokes `role` from `account`.\n     *\n     * If `account` had been granted `role`, emits a {RoleRevoked} event.\n     *\n     * Requirements:\n     *\n     * - the caller must have ``role``'s admin role.\n     */\n    function revokeRole(bytes32 role, address account) external;\n\n    /**\n     * @dev Revokes `role` from the calling account.\n     *\n     * Roles are often managed via {grantRole} and {revokeRole}: this function's\n     * purpose is to provide a mechanism for accounts to lose their privileges\n     * if they are compromised (such as when a trusted device is misplaced).\n     *\n     * If the calling account had been granted `role`, emits a {RoleRevoked}\n     * event.\n     *\n     * Requirements:\n     *\n     * - the caller must be `account`.\n     */\n    function renounceRole(bytes32 role, address account) external;\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/Context.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.4) (utils/Context.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Provides information about the current execution context, including the\n * sender of the transaction and its data. While these are generally available\n * via msg.sender and msg.data, they should not be accessed in such a direct\n * manner, since when dealing with meta-transactions the account sending and\n * paying for execution may not be the actual sender (as far as an application\n * is concerned).\n *\n * This contract is only required for intermediate, library-like contracts.\n */\nabstract contract Context {\n    function _msgSender() internal view virtual returns (address) {\n        return msg.sender;\n    }\n\n    function _msgData() internal view virtual returns (bytes calldata) {\n        return msg.data;\n    }\n\n    function _contextSuffixLength() internal view virtual returns (uint256) {\n        return 0;\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/introspection/ERC165.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts v4.4.1 (utils/introspection/ERC165.sol)\n\npragma solidity ^0.8.0;\n\nimport \"./IERC165.sol\";\n\n/**\n * @dev Implementation of the {IERC165} interface.\n *\n * Contracts that want to implement ERC165 should inherit from this contract and override {supportsInterface} to check\n * for the additional interface id that will be supported. For example:\n *\n * ```solidity\n * function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {\n *     return interfaceId == type(MyInterface).interfaceId || super.supportsInterface(interfaceId);\n * }\n * ```\n *\n * Alternatively, {ERC165Storage} provides an easier to use but more expensive implementation.\n */\nabstract contract ERC165 is IERC165 {\n    /**\n     * @dev See {IERC165-supportsInterface}.\n     */\n    function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {\n        return interfaceId == type(IERC165).interfaceId;\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/math/Math.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.9.0) (utils/math/Math.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Standard math utilities missing in the Solidity language.\n */\nlibrary Math {\n    enum Rounding {\n        Down, // Toward negative infinity\n        Up, // Toward infinity\n        Zero // Toward zero\n    }\n\n    /**\n     * @dev Returns the largest of two numbers.\n     */\n    function max(uint256 a, uint256 b) internal pure returns (uint256) {\n        return a > b ? a : b;\n    }\n\n    /**\n     * @dev Returns the smallest of two numbers.\n     */\n    function min(uint256 a, uint256 b) internal pure returns (uint256) {\n        return a < b ? a : b;\n    }\n\n    /**\n     * @dev Returns the average of two numbers. The result is rounded towards\n     * zero.\n     */\n    function average(uint256 a, uint256 b) internal pure returns (uint256) {\n        // (a + b) / 2 can overflow.\n        return (a & b) + (a ^ b) / 2;\n    }\n\n    /**\n     * @dev Returns the ceiling of the division of two numbers.\n     *\n     * This differs from standard division with `/` in that it rounds up instead\n     * of rounding down.\n     */\n    function ceilDiv(uint256 a, uint256 b) internal pure returns (uint256) {\n        // (a + b - 1) / b can overflow on addition, so we distribute.\n        return a == 0 ? 0 : (a - 1) / b + 1;\n    }\n\n    /**\n     * @notice Calculates floor(x * y / denominator) with full precision. Throws if result overflows a uint256 or denominator == 0\n     * @dev Original credit to Remco Bloemen under MIT license (https://xn--2-umb.com/21/muldiv)\n     * with further edits by Uniswap Labs also under MIT license.\n     */\n    function mulDiv(uint256 x, uint256 y, uint256 denominator) internal pure returns (uint256 result) {\n        unchecked {\n            // 512-bit multiply [prod1 prod0] = x * y. Compute the product mod 2^256 and mod 2^256 - 1, then use\n            // use the Chinese Remainder Theorem to reconstruct the 512 bit result. The result is stored in two 256\n            // variables such that product = prod1 * 2^256 + prod0.\n            uint256 prod0; // Least significant 256 bits of the product\n            uint256 prod1; // Most significant 256 bits of the product\n            assembly {\n                let mm := mulmod(x, y, not(0))\n                prod0 := mul(x, y)\n                prod1 := sub(sub(mm, prod0), lt(mm, prod0))\n            }\n\n            // Handle non-overflow cases, 256 by 256 division.\n            if (prod1 == 0) {\n                // Solidity will revert if denominator == 0, unlike the div opcode on its own.\n                // The surrounding unchecked block does not change this fact.\n                // See https://docs.soliditylang.org/en/latest/control-structures.html#checked-or-unchecked-arithmetic.\n                return prod0 / denominator;\n            }\n\n            // Make sure the result is less than 2^256. Also prevents denominator == 0.\n            require(denominator > prod1, \"Math: mulDiv overflow\");\n\n            ///////////////////////////////////////////////\n            // 512 by 256 division.\n            ///////////////////////////////////////////////\n\n            // Make division exact by subtracting the remainder from [prod1 prod0].\n            uint256 remainder;\n            assembly {\n                // Compute remainder using mulmod.\n                remainder := mulmod(x, y, denominator)\n\n                // Subtract 256 bit number from 512 bit number.\n                prod1 := sub(prod1, gt(remainder, prod0))\n                prod0 := sub(prod0, remainder)\n            }\n\n            // Factor powers of two out of denominator and compute largest power of two divisor of denominator. Always >= 1.\n            // See https://cs.stackexchange.com/q/138556/92363.\n\n            // Does not overflow because the denominator cannot be zero at this stage in the function.\n            uint256 twos = denominator & (~denominator + 1);\n            assembly {\n                // Divide denominator by twos.\n                denominator := div(denominator, twos)\n\n                // Divide [prod1 prod0] by twos.\n                prod0 := div(prod0, twos)\n\n                // Flip twos such that it is 2^256 / twos. If twos is zero, then it becomes one.\n                twos := add(div(sub(0, twos), twos), 1)\n            }\n\n            // Shift in bits from prod1 into prod0.\n            prod0 |= prod1 * twos;\n\n            // Invert denominator mod 2^256. Now that denominator is an odd number, it has an inverse modulo 2^256 such\n            // that denominator * inv = 1 mod 2^256. Compute the inverse by starting with a seed that is correct for\n            // four bits. That is, denominator * inv = 1 mod 2^4.\n            uint256 inverse = (3 * denominator) ^ 2;\n\n            // Use the Newton-Raphson iteration to improve the precision. Thanks to Hensel's lifting lemma, this also works\n            // in modular arithmetic, doubling the correct bits in each step.\n            inverse *= 2 - denominator * inverse; // inverse mod 2^8\n            inverse *= 2 - denominator * inverse; // inverse mod 2^16\n            inverse *= 2 - denominator * inverse; // inverse mod 2^32\n            inverse *= 2 - denominator * inverse; // inverse mod 2^64\n            inverse *= 2 - denominator * inverse; // inverse mod 2^128\n            inverse *= 2 - denominator * inverse; // inverse mod 2^256\n\n            // Because the division is now exact we can divide by multiplying with the modular inverse of denominator.\n            // This will give us the correct result modulo 2^256. Since the preconditions guarantee that the outcome is\n            // less than 2^256, this is the final result. We don't need to compute the high bits of the result and prod1\n            // is no longer required.\n            result = prod0 * inverse;\n            return result;\n        }\n    }\n\n    /**\n     * @notice Calculates x * y / denominator with full precision, following the selected rounding direction.\n     */\n    function mulDiv(uint256 x, uint256 y, uint256 denominator, Rounding rounding) internal pure returns (uint256) {\n        uint256 result = mulDiv(x, y, denominator);\n        if (rounding == Rounding.Up && mulmod(x, y, denominator) > 0) {\n            result += 1;\n        }\n        return result;\n    }\n\n    /**\n     * @dev Returns the square root of a number. If the number is not a perfect square, the value is rounded down.\n     *\n     * Inspired by Henry S. Warren, Jr.'s \"Hacker's Delight\" (Chapter 11).\n     */\n    function sqrt(uint256 a) internal pure returns (uint256) {\n        if (a == 0) {\n            return 0;\n        }\n\n        // For our first guess, we get the biggest power of 2 which is smaller than the square root of the target.\n        //\n        // We know that the \"msb\" (most significant bit) of our target number `a` is a power of 2 such that we have\n        // `msb(a) <= a < 2*msb(a)`. This value can be written `msb(a)=2**k` with `k=log2(a)`.\n        //\n        // This can be rewritten `2**log2(a) <= a < 2**(log2(a) + 1)`\n        // → `sqrt(2**k) <= sqrt(a) < sqrt(2**(k+1))`\n        // → `2**(k/2) <= sqrt(a) < 2**((k+1)/2) <= 2**(k/2 + 1)`\n        //\n        // Consequently, `2**(log2(a) / 2)` is a good first approximation of `sqrt(a)` with at least 1 correct bit.\n        uint256 result = 1 << (log2(a) >> 1);\n\n        // At this point `result` is an estimation with one bit of precision. We know the true value is a uint128,\n        // since it is the square root of a uint256. Newton's method converges quadratically (precision doubles at\n        // every iteration). We thus need at most 7 iteration to turn our partial result with one bit of precision\n        // into the expected uint128 result.\n        unchecked {\n            result = (result + a / result) >> 1;\n            result = (result + a / result) >> 1;\n            result = (result + a / result) >> 1;\n            result = (result + a / result) >> 1;\n            result = (result + a / result) >> 1;\n            result = (result + a / result) >> 1;\n            result = (result + a / result) >> 1;\n            return min(result, a / result);\n        }\n    }\n\n    /**\n     * @notice Calculates sqrt(a), following the selected rounding direction.\n     */\n    function sqrt(uint256 a, Rounding rounding) internal pure returns (uint256) {\n        unchecked {\n            uint256 result = sqrt(a);\n            return result + (rounding == Rounding.Up && result * result < a ? 1 : 0);\n        }\n    }\n\n    /**\n     * @dev Return the log in base 2, rounded down, of a positive value.\n     * Returns 0 if given 0.\n     */\n    function log2(uint256 value) internal pure returns (uint256) {\n        uint256 result = 0;\n        unchecked {\n            if (value >> 128 > 0) {\n                value >>= 128;\n                result += 128;\n            }\n            if (value >> 64 > 0) {\n                value >>= 64;\n                result += 64;\n            }\n            if (value >> 32 > 0) {\n                value >>= 32;\n                result += 32;\n            }\n            if (value >> 16 > 0) {\n                value >>= 16;\n                result += 16;\n            }\n            if (value >> 8 > 0) {\n                value >>= 8;\n                result += 8;\n            }\n            if (value >> 4 > 0) {\n                value >>= 4;\n                result += 4;\n            }\n            if (value >> 2 > 0) {\n                value >>= 2;\n                result += 2;\n            }\n            if (value >> 1 > 0) {\n                result += 1;\n            }\n        }\n        return result;\n    }\n\n    /**\n     * @dev Return the log in base 2, following the selected rounding direction, of a positive value.\n     * Returns 0 if given 0.\n     */\n    function log2(uint256 value, Rounding rounding) internal pure returns (uint256) {\n        unchecked {\n            uint256 result = log2(value);\n            return result + (rounding == Rounding.Up && 1 << result < value ? 1 : 0);\n        }\n    }\n\n    /**\n     * @dev Return the log in base 10, rounded down, of a positive value.\n     * Returns 0 if given 0.\n     */\n    function log10(uint256 value) internal pure returns (uint256) {\n        uint256 result = 0;\n        unchecked {\n            if (value >= 10 ** 64) {\n                value /= 10 ** 64;\n                result += 64;\n            }\n            if (value >= 10 ** 32) {\n                value /= 10 ** 32;\n                result += 32;\n            }\n            if (value >= 10 ** 16) {\n                value /= 10 ** 16;\n                result += 16;\n            }\n            if (value >= 10 ** 8) {\n                value /= 10 ** 8;\n                result += 8;\n            }\n            if (value >= 10 ** 4) {\n                value /= 10 ** 4;\n                result += 4;\n            }\n            if (value >= 10 ** 2) {\n                value /= 10 ** 2;\n                result += 2;\n            }\n            if (value >= 10 ** 1) {\n                result += 1;\n            }\n        }\n        return result;\n    }\n\n    /**\n     * @dev Return the log in base 10, following the selected rounding direction, of a positive value.\n     * Returns 0 if given 0.\n     */\n    function log10(uint256 value, Rounding rounding) internal pure returns (uint256) {\n        unchecked {\n            uint256 result = log10(value);\n            return result + (rounding == Rounding.Up && 10 ** result < value ? 1 : 0);\n        }\n    }\n\n    /**\n     * @dev Return the log in base 256, rounded down, of a positive value.\n     * Returns 0 if given 0.\n     *\n     * Adding one to the result gives the number of pairs of hex symbols needed to represent `value` as a hex string.\n     */\n    function log256(uint256 value) internal pure returns (uint256) {\n        uint256 result = 0;\n        unchecked {\n            if (value >> 128 > 0) {\n                value >>= 128;\n                result += 16;\n            }\n            if (value >> 64 > 0) {\n                value >>= 64;\n                result += 8;\n            }\n            if (value >> 32 > 0) {\n                value >>= 32;\n                result += 4;\n            }\n            if (value >> 16 > 0) {\n                value >>= 16;\n                result += 2;\n            }\n            if (value >> 8 > 0) {\n                result += 1;\n            }\n        }\n        return result;\n    }\n\n    /**\n     * @dev Return the log in base 256, following the selected rounding direction, of a positive value.\n     * Returns 0 if given 0.\n     */\n    function log256(uint256 value, Rounding rounding) internal pure returns (uint256) {\n        unchecked {\n            uint256 result = log256(value);\n            return result + (rounding == Rounding.Up && 1 << (result << 3) < value ? 1 : 0);\n        }\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/math/SignedMath.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v4.8.0) (utils/math/SignedMath.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Standard signed math utilities missing in the Solidity language.\n */\nlibrary SignedMath {\n    /**\n     * @dev Returns the largest of two signed numbers.\n     */\n    function max(int256 a, int256 b) internal pure returns (int256) {\n        return a > b ? a : b;\n    }\n\n    /**\n     * @dev Returns the smallest of two signed numbers.\n     */\n    function min(int256 a, int256 b) internal pure returns (int256) {\n        return a < b ? a : b;\n    }\n\n    /**\n     * @dev Returns the average of two signed numbers without overflow.\n     * The result is rounded towards zero.\n     */\n    function average(int256 a, int256 b) internal pure returns (int256) {\n        // Formula from the book \"Hacker's Delight\"\n        int256 x = (a & b) + ((a ^ b) >> 1);\n        return x + (int256(uint256(x) >> 255) & (a ^ b));\n    }\n\n    /**\n     * @dev Returns the absolute unsigned value of a signed value.\n     */\n    function abs(int256 n) internal pure returns (uint256) {\n        unchecked {\n            // must be unchecked in order to support `n = type(int256).min`\n            return uint256(n >= 0 ? n : -n);\n        }\n    }\n}\n"
      },
      "lib/openzeppelin-contracts/contracts/utils/introspection/IERC165.sol": {
        "content": "// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts v4.4.1 (utils/introspection/IERC165.sol)\n\npragma solidity ^0.8.0;\n\n/**\n * @dev Interface of the ERC165 standard, as defined in the\n * https://eips.ethereum.org/EIPS/eip-165[EIP].\n *\n * Implementers can declare support of contract interfaces, which can then be\n * queried by others ({ERC165Checker}).\n *\n * For an implementation, see {ERC165}.\n */\ninterface IERC165 {\n    /**\n     * @dev Returns true if this contract implements the interface defined by\n     * `interfaceId`. See the corresponding\n     * https://eips.ethereum.org/EIPS/eip-165#how-interfaces-are-identified[EIP section]\n     * to learn more about how these ids are created.\n     *\n     * This function call must use less than 30 000 gas.\n     */\n    function supportsInterface(bytes4 interfaceId) external view returns (bool);\n}\n"
      }
    },
    "settings": {
      "remappings": [
        "ds-test/=lib/forge-std/lib/ds-test/src/",
        "forge-std/=lib/forge-std/src/",
        "@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/",
        "erc4626-tests/=lib/openzeppelin-contracts/lib/erc4626-tests/",
        "openzeppelin-contracts/=lib/openzeppelin-contracts/",
        "openzeppelin/=lib/openzeppelin-contracts/contracts/"
      ],
      "optimizer": {
        "enabled": true,
        "runs": 20000
      },
      "metadata": {
        "useLiteralContent": false,
        "bytecodeHash": "ipfs",
        "appendCBOR": true
      },
      "outputSelection": {
        "*": {
          "*": [
            "evm.bytecode",
            "evm.deployedBytecode",
            "devdoc",
            "userdoc",
            "metadata",
            "abi"
          ]
        }
      },
      "evmVersion": "shanghai",
      "libraries": {}
    }
  }}