Contract Address Details

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import "@openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol";
import "@openzeppelin/contracts/access/Ownable.sol";
import "@openzeppelin/contracts/utils/ReentrancyGuard.sol";
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
import {TOKEN_V3} from "./Tokens.sol";
import "./libraries/TimeUtilsLib.sol";
import "./libraries/AuctionLib.sol";
import "./libraries/NormalAuctionCalculations.sol";
import "./libraries/ReverseAuctionCalculations.sol";
import { SwapErrors } from "./interfaces/SwapErrors.sol";
import { SwapEvents } from "./interfaces/SwapEvents.sol";
import { IPair } from "./interfaces/IPair.sol";
import "./interfaces/IAuctionAdmin.sol";
import "./libraries/SwapCoreLib.sol";
import "./libraries/BurnLib.sol";
import "./libraries/AuctionUtilsLib.sol";

interface IPulseXFactory {
    function getPair(address tokenA, address tokenB) external view returns (address pair);
    function createPair(address tokenA, address tokenB) external returns (address pair);
}

interface IPulseXRouter02 {
    function addLiquidity(
        address tokenA,
        address tokenB,
        uint256 amountADesired,
        uint256 amountBDesired,
        uint256 amountAMin,
        uint256 amountBMin,
        address to,
        uint256 deadline
    ) external returns (uint256 amountA, uint256 amountB, uint256 liquidity);
    
    function swapExactTokensForTokens(
        uint256 amountIn,
        uint256 amountOutMin,
        address[] calldata path,
        address to,
        uint256 deadline
    ) external returns (uint256[] memory amounts);
}

interface IDAV {
    function transferGovernanceImmediate(address newGovernance) external;
    function governance() external view returns (address);
    function getActiveBalance(address user) external view returns (uint256);
}

interface IAirdropDistributor {
    function consumedDavUnits(address token, address user) external view returns (uint256);
    function getConsumedDavUnitsByCycle(address token, address user, uint256 cycle) external view returns (uint256);
}

/**
 * @title SWAP_V3 - State Protocol Auction System
 * @author State Protocol Team
 * @notice Main contract implementing normal and reverse auctions for token distribution
 * @dev Manages auction system with normal/reverse auctions, DAV-based token claims, and PulseX integration
 * @custom:security Uses Solidity 0.8.20 built-in overflow protection, ReentrancyGuard on external functions
 * @custom:access Governance-controlled with admin delegation pattern
 * @custom:schedule 50 auction tokens rotating daily, 20 cycles per token, 1000-day total period
 * @custom:participants Maximum 2500 unique participants across all auctions
 * @custom:timezone All daily boundaries calculated at GMT+3 17:00 (5 PM)
 */
contract SWAP_V3 is Ownable, ReentrancyGuard, SwapErrors, SwapEvents {
    using SafeERC20 for IERC20;
    using TimeUtilsLib for uint256;
    using AuctionLib for AuctionLib.AuctionCycle;
    using BurnLib for BurnLib.BurnParams;
    using AuctionUtilsLib for AuctionUtilsLib.AuctionSchedule;
    
    error DeadlineExpired();
    error SlippageExceeded();

    // ================= State Variables =================
    
    IDAV public dav;
    
    // Constants
    uint256 constant MIN_DAV_REQUIRED = 1 ether;
    address private constant BURN_ADDRESS = 0x000000000000000000000000000000000000dEaD;
    uint256 constant MAX_CYCLES_PER_TOKEN = 20; // Each token can run for maximum 20 cycles (20 days per token)
    
    // Core addresses
    address public stateToken;
    address public davToken;
    address public governanceAddress;
    address public airdropDistributor;
    IAuctionAdmin public auctionAdmin;
    address public buyAndBurnController;
    address public swapLens;
    address public pulseXRouter;
    address public pulseXFactory;
    
    // State variables
    uint256 public TotalBurnedStates;
    bool public paused = false;
    uint256 public maxAuctionParticipants = 2500;
    
    // Daily tracking
    uint256 public currentDayStart;
    uint256 public dailyStateReleased;
    uint256 public dailyStateReleasedNormal;
    uint256 public dailyStateReleasedReverse;
    uint256 public dailySwapsCount;
    uint256 public dailyUniqueSwappersCount;
    
    // Auction schedule
    AuctionUtilsLib.AuctionSchedule public auctionSchedule;
    
    // Auto registration
    address[] public autoRegisteredTokens;
    mapping(address => bool) public isAutoRegistered;
    bool public autoScheduleLocked;
    uint256 public totalAuctionsCompleted = 0;
    
    // Unified user registration system
    mapping(address => bool) public isRegisteredForAuctions; // Auto-registered during first participation (max 5000)
    uint256 public totalRegisteredUsers = 0; // Counter for auto-registered users
    mapping(uint256 => uint256) public stateReleasedByDayIndex;
    mapping(uint256 => uint256) public stateReleasedNormalByDayIndex;
    mapping(uint256 => uint256) public stateReleasedReverseByDayIndex;
    mapping(uint256 => uint256) public swapsCountByDayIndex;
    mapping(uint256 => uint256) public uniqueSwappersCountByDayIndex;
    mapping(address => uint256) private lastCountedDayIdxForUser;
    
    mapping(address => string[]) private userToTokenNames;
    mapping(address => mapping(string => address)) private deployedTokensByUser;
    mapping(address => address) private pairAddresses;
    mapping(address => bool) private supportedTokens;
    mapping(address => address) private tokenOwners;
    mapping(address => address[]) private ownerToTokens;
    mapping(string => bool) private isTokenNameUsed;
    uint256 public tokenCount;
    mapping(address => uint256) private tokenNumber;
    mapping(bytes32 => SwapCoreLib.UserSwapInfo) private userSwapTotalInfo;
    
    mapping(address => mapping(address => mapping(uint256 => bool))) private hasUserBurnedTokens;
    mapping(address => mapping(address => mapping(uint256 => uint256))) private userStateBalance;
    mapping(address => mapping(address => mapping(uint256 => uint256))) private tokensBurnedByUser;
    mapping(address => mapping(address => mapping(uint256 => uint256))) private davTokensUsed;
    
    mapping(address => mapping(address => mapping(uint256 => bool))) private hasCompletedReverseStep1;
    mapping(address => mapping(address => mapping(uint256 => uint256))) private reverseStateBalance;
    mapping(address => mapping(address => mapping(uint256 => bool))) private hasCompletedReverseStep2;

    // Cycle-wide STATE tracking for reverse auction limits (per user, per token, per cycle)
    mapping(address => mapping(address => mapping(uint256 => uint256))) private cycleNormalStateEarned;
    
    // NEW: Track tokens received from normal auction Step 3 (pool swap output)
    mapping(address => mapping(address => mapping(uint256 => uint256))) private normalAuctionSwapOutput;

    mapping(address => uint256) private TotalTokensBurned;
    
    // Airdrop constant (must match AirdropDistributor.AIRDROP_PER_DAV)
    uint256 constant AIRDROP_PER_DAV = 10_000 ether; // 10,000 tokens per DAV unit

    // ================= Modifiers =================
    
    modifier onlyGovernance() {
        if (msg.sender != governanceAddress) revert NotGovernance();
        _;
    }
    
    modifier onlyTokenOwnerOrGovernance(address token) {
        if (!(msg.sender == tokenOwners[token] || msg.sender == governanceAddress)) revert Unauthorized();
        _;
    }
    
    modifier whenNotPaused() {
        if (paused) revert PausedErr();
        _;
    }

    // ================= Constructor =================
    
    constructor(address _gov) Ownable(msg.sender) {
        governanceAddress = _gov;
        currentDayStart = _calcCurrentDayStart(block.timestamp);
        auctionSchedule.scheduleSize = 2; // 50 tokens for production
        // Each token gets 20 cycles: 50 tokens × 20 cycles = 1000 total auction days (1000-day cycle)
        auctionSchedule.auctionDaysLimit = auctionSchedule.scheduleSize * 20; // 50 × 20 = 1000 days
        renounceOwnership();
    }

    // ================= Core Auction Functions (Simplified) =================
    
    /**
     * @notice Normal Auction Step 3 - Swap STATE tokens for auction tokens via PulseX pool
     * @dev Users can call multiple times per cycle if they acquire more DAV and burn more tokens
     * @custom:balance userStateBalance tracks accumulated STATE from burns, deducts on each swap
     * @custom:tracking STATE release counted in burnTokensForState (Step 2), not here
     */
    function swapTokens() external nonReentrant whenNotPaused {
        _rollDailyIfNeeded();
        
        // Auto-detect today's token
        (address inputToken, bool active) = getTodayToken();
        if (!active || inputToken == address(0)) revert NoActiveAuction();
        if (isReverseAuctionActive(inputToken)) revert ReverseAuctionActive();
        
        address user = msg.sender;
        
        // Validation
        _validateSwap(user, inputToken);
        
        // Enforce global unique participant cap on first-ever swap
        if (!isRegisteredForAuctions[user]) {
            if (totalRegisteredUsers >= maxAuctionParticipants) revert ParticipantCapReached();
            isRegisteredForAuctions[user] = true;
            totalRegisteredUsers += 1;
            emit UserAutoRegistered(user, block.timestamp);
        }
        
        uint256 currentAuctionCycle = getCurrentAuctionCycle(inputToken);
        bytes32 key = SwapCoreLib.getSwapInfoKey(user, inputToken, stateToken, currentAuctionCycle);
        SwapCoreLib.UserSwapInfo storage userSwapInfo = userSwapTotalInfo[key];
        userSwapInfo.cycle = currentAuctionCycle;

        bool isReverseActive = isReverseAuctionActive(inputToken);
        if (isReverseActive) revert ReverseDayLPOonly();
        
        if (!auctionSchedule.isAuctionActive(inputToken, block.timestamp)) 
            revert NotStarted();
        
        // Allow multiple swaps per cycle if user has STATE balance
        uint256 userStateFromBurn = userStateBalance[user][inputToken][currentAuctionCycle];
        if (userStateFromBurn == 0) revert Step2NotCompleted();
        
        // Check if user has approved this contract to spend their STATE tokens
        uint256 stateAllowance = IERC20(stateToken).allowance(user, address(this));
        if (stateAllowance < userStateFromBurn) revert InsufficientAllowance();
        
        // STEP 3: Execute actual swap through PulseX pool (not from contract balance)
        uint256 amountOut = _executePoolSwap(user, inputToken, userStateFromBurn);
        if (amountOut == 0) revert AmountZero();
        
        // Track tokens received from pool swap - cumulative for multiple swaps
        normalAuctionSwapOutput[user][inputToken][currentAuctionCycle] += amountOut;
        
        // Mark swap as completed and deduct used STATE balance
        userSwapInfo.hasSwapped = true;
        userStateBalance[user][inputToken][currentAuctionCycle] -= userStateFromBurn;
        
        // Update daily tracking
        dailySwapsCount += 1;
        uint256 todayIdx = currentDayStart / 1 days;
        if (lastCountedDayIdxForUser[user] != todayIdx) {
            lastCountedDayIdxForUser[user] = todayIdx;
            dailyUniqueSwappersCount += 1;
        }
        // This would be used in reverse auctions where STATE might be the output
        // For now, keeping consistent with original logic - no tracking for normal auctions
        
        emit TokensSwapped(user, stateToken, inputToken, userStateFromBurn, amountOut);
    }

    /**
     * @notice Normal Auction Step 2 - Burn auction tokens to receive STATE tokens
     * @dev User must have completed Step 1 (claim airdrop via DAV). Multiple burns allowed per cycle.
    * @custom:burn User burns 25% of airdrop tokens (e.g., 2500 from 10K airdrop per 1 DAV)
     * @custom:reward Receives 2x STATE tokens based on pool ratio
     * @custom:fee 0.5% auction fee deducted from STATE output
     * @custom:requirement Minimum 1 DAV balance, Step 1 completed, sufficient auction token balance
     */
    function burnTokensForState() external nonReentrant whenNotPaused {
        _rollDailyIfNeeded();
        
        // Auto-detect today's token
        (address auctionToken, bool active) = getTodayToken();
        if (!active || auctionToken == address(0)) revert NoActiveAuction();
        if (isReverseAuctionActive(auctionToken)) revert ReverseAuctionActive();
        
        // User should already be registered from Step 1 (AirdropDistributor.claim)
        
        if (!supportedTokens[auctionToken]) revert UnsupportedToken();
        if (stateToken == address(0)) revert StateNotSet();
        
        // STEP 1 VALIDATION
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        if (!_hasCompletedStep1(msg.sender, auctionToken)) revert Step1NotCompleted();
        
        uint256 totalDavBalance = getDavBalance(msg.sender);
        if (totalDavBalance < MIN_DAV_REQUIRED) revert DavInsufficient();
        
        // Allow multiple burns per cycle if user mints more DAV
        uint256 davAlreadyUsed = davTokensUsed[msg.sender][auctionToken][currentCycle];
        uint256 availableDav = totalDavBalance > davAlreadyUsed ? totalDavBalance - davAlreadyUsed : 0;
        
        if (availableDav < MIN_DAV_REQUIRED) revert DavInsufficient();
        
        uint256 tokensToBurn = NormalAuctionCalculations.calculateTokensToBurn(availableDav);
        if (tokensToBurn == 0) revert AmountZero();
        
        uint256 userBalance = IERC20(auctionToken).balanceOf(msg.sender);
        if (userBalance < tokensToBurn) revert InsufficientBalance();
        
        // Check if user has approved this contract to spend their auction tokens
        uint256 allowance = IERC20(auctionToken).allowance(msg.sender, address(this));
        if (allowance < tokensToBurn) revert InsufficientAllowance();
        
        uint256 poolRatio = getRatioPrice(auctionToken);
        if (poolRatio == 0) revert InvalidParam();
        
        uint256 stateToGive = NormalAuctionCalculations.calculateStateToGive(tokensToBurn, poolRatio);
        if (stateToGive == 0) revert AmountZero();
        
        // Deduct 0.5% auction fee from STATE output
        uint256 auctionFee = (stateToGive * 50) / 10000; // 0.5% = 50/10000
        stateToGive -= auctionFee;
        
        if (IERC20(stateToken).balanceOf(address(this)) < (stateToGive + auctionFee)) revert InsufficientVault();
        
        // Use library for burn execution
        BurnLib.BurnParams memory burnParams = BurnLib.BurnParams({
            user: msg.sender,
            auctionToken: auctionToken,
            stateToken: stateToken,
            currentCycle: currentCycle,
            tokensToBurn: tokensToBurn,
            stateToGive: stateToGive,
            availableDav: availableDav
        });
        
        burnParams.executeTokenBurn(
            hasUserBurnedTokens,
            userStateBalance,
            tokensBurnedByUser,
            davTokensUsed,
            TotalTokensBurned
        );
        
        // Distribute auction fee to development wallets
        _distributeAuctionFee(stateToken, auctionFee);
        emit AuctionFeeCollected(stateToken, auctionFee, msg.sender);
        
        // Track cycle-wide STATE earned from normal auctions (per token)
        cycleNormalStateEarned[msg.sender][auctionToken][currentCycle] += stateToGive;
        
        emit TokensSwapped(msg.sender, auctionToken, stateToken, tokensToBurn, stateToGive);
    }

    /**
     * @notice Reverse Auction Step 1 - Swap auction tokens for STATE tokens
     * @param tokenAmount Amount of auction tokens to swap (auto-adjusted to maximum if exceeds limit)
     * @dev Only tokens earned from previous 3 normal auction cycles can be swapped
     * @custom:requirement Minimum 1 DAV balance, participated in previous normal auctions
     * @custom:lookback Calculates net tokens from previous 3 cycles as maximum swap limit
     */
    function reverseSwapTokensForState(uint256 tokenAmount) external nonReentrant whenNotPaused {
        _rollDailyIfNeeded();
        
        // Auto-detect today's token
        (address auctionToken, bool active) = getTodayToken();
        if (!active || auctionToken == address(0)) revert NoActiveAuction();
        if (!isReverseAuctionActive(auctionToken)) revert NormalAuctionActive();
        
        // Auto-register user if not already registered
        _autoRegisterUser(msg.sender);
        
        if (!supportedTokens[auctionToken]) revert UnsupportedToken();
        if (stateToken == address(0)) revert StateNotSet();
        
        if (!isReverseAuctionActive(auctionToken)) revert NotStarted();
        
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        
        // Check if token has completed maximum cycles
        if (currentCycle > MAX_CYCLES_PER_TOKEN) revert AuctionCyclesCompleted();
        
        if (hasCompletedReverseStep1[msg.sender][auctionToken][currentCycle]) revert AlreadySwapped();
        
        uint256 davBalance = getDavBalance(msg.sender);
        if (davBalance < MIN_DAV_REQUIRED) revert DavInsufficient();
        
        // NEW: Calculate maximum allowed tokens from previous 3 normal auction cycles
        uint256 maxAllowedTokens = 0;
        uint256 lookbackCount = 3;
        for (uint256 i = 1; i <= lookbackCount && currentCycle > i; i++) {
            uint256 netTokens = calculateNetTokensFromNormalAuction(
                msg.sender,
                auctionToken,
                currentCycle - i
            );
            maxAllowedTokens += netTokens;
        }
        
        // User must have participated in at least one previous normal auction
        if (maxAllowedTokens == 0) revert NoNormalAuctionParticipation();
        
        // NEW: Enforce token limit - user can only swap tokens they earned from auctions
        // Even if user bought extra tokens from market, they can only use auction-earned tokens
        if (tokenAmount > maxAllowedTokens) {
            // Auto-adjust to maximum allowed instead of reverting
            tokenAmount = maxAllowedTokens;
        }
        
        if (tokenAmount == 0) revert AmountZero();
        
        uint256 userBalance = IERC20(auctionToken).balanceOf(msg.sender);
        if (userBalance < tokenAmount) revert InsufficientBalance();
        
        uint256 stateOutput = calculatePoolSwapOutputReverse(auctionToken, tokenAmount);
        if (stateOutput == 0) revert AmountZero();
        
        if (IERC20(stateToken).balanceOf(address(this)) < stateOutput) revert InsufficientVault();
        
        hasCompletedReverseStep1[msg.sender][auctionToken][currentCycle] = true;
        reverseStateBalance[msg.sender][auctionToken][currentCycle] = stateOutput;
        
        IERC20(auctionToken).safeTransferFrom(msg.sender, address(this), tokenAmount);
        IERC20(stateToken).safeTransfer(msg.sender, stateOutput);
        
        dailyStateReleased += stateOutput;
        dailyStateReleasedReverse += stateOutput;
        
        emit TokensSwapped(msg.sender, auctionToken, stateToken, tokenAmount, stateOutput);
    }

    /**
     * @notice Reverse Auction Step 2 - Burn STATE tokens to receive auction tokens
     * @param stateToBurn Amount of STATE to burn (parameter ignored, uses exact balance from Step 1)
     * @dev User must burn exact STATE amount received in Step 1, cannot choose custom amount
     * @custom:burn User burns STATE from Step 1 to receive auction tokens
     * @custom:reward Receives auction tokens based on pool ratio (inverse of normal auction)
     * @custom:fee 0.5% auction fee deducted from token output
     * @custom:requirement Step 1 completed, sufficient STATE balance to burn
     */
    function burnStateForTokens(uint256 stateToBurn) external nonReentrant whenNotPaused {
        _rollDailyIfNeeded();
        
        // Auto-detect today's token
        (address auctionToken, bool active) = getTodayToken();
        if (!active || auctionToken == address(0)) revert NoActiveAuction();
        if (!isReverseAuctionActive(auctionToken)) revert NormalAuctionActive();
        
        if (!supportedTokens[auctionToken]) revert UnsupportedToken();
        if (stateToken == address(0)) revert StateNotSet();
        
        if (!isReverseAuctionActive(auctionToken)) revert NotStarted();
        
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        
        if (!hasCompletedReverseStep1[msg.sender][auctionToken][currentCycle]) revert Step1NotCompleted();
        if (hasCompletedReverseStep2[msg.sender][auctionToken][currentCycle]) revert AlreadySwapped();
        
        // NEW: IGNORE user input - force burning EXACTLY the STATE received from reverse Step 1
        // User must burn all STATE they got from swapping their auction tokens
        stateToBurn = reverseStateBalance[msg.sender][auctionToken][currentCycle];
        if (stateToBurn == 0) revert AmountZero();
        
        // User must hold sufficient STATE balance to complete burn
        uint256 userCurrentStateBalance = IERC20(stateToken).balanceOf(msg.sender);
        if (userCurrentStateBalance < stateToBurn) revert InsufficientBalance();
        
        uint256 poolRatio = getRatioPrice(auctionToken);
        if (poolRatio == 0) revert InvalidParam();
        
        uint256 tokensToGive = ReverseAuctionCalculations.calculateTokensToGive(stateToBurn, poolRatio);
        if (tokensToGive == 0) revert AmountZero();
        
        // Deduct 0.5% auction fee from token output
        uint256 auctionFee = (tokensToGive * 50) / 10000; // 0.5% = 50/10000
        tokensToGive -= auctionFee;
        
        if (IERC20(auctionToken).balanceOf(address(this)) < (tokensToGive + auctionFee)) revert InsufficientVault();
        
        // Use library for reverse burn execution
        BurnLib.ReverseBurnParams memory reverseParams = BurnLib.ReverseBurnParams({
            user: msg.sender,
            auctionToken: auctionToken,
            stateToken: stateToken,
            currentCycle: currentCycle,
            stateToBurn: stateToBurn,
            tokensToGive: tokensToGive
        });
        
        BurnLib.executeReverseBurn(
            reverseParams,
            hasCompletedReverseStep2,
            reverseStateBalance,
            TotalTokensBurned
        );
        
        // Distribute auction fee to development wallets
        _distributeAuctionFee(auctionToken, auctionFee);
        emit AuctionFeeCollected(auctionToken, auctionFee, msg.sender);
        
        emit TokensSwapped(msg.sender, stateToken, auctionToken, stateToBurn, tokensToGive);
    }

    // ================= Internal Functions =================
    
    /**
     * @notice Validate swap eligibility and requirements
     * @param user User address performing swap
     * @param inputToken Token being swapped
     * @dev Checks DAV balance, auction status, schedule, and participant cap
     */
    function _validateSwap(address user, address inputToken) internal view {
        if (msg.sender != user) revert Unauthorized();
        if (user == address(0)) revert ZeroAddr();
        if (!supportedTokens[inputToken]) revert UnsupportedToken();
        if (stateToken == address(0)) revert StateNotSet();
        if (getDavBalance(user) < MIN_DAV_REQUIRED) revert DavInsufficient();
        if (!auctionSchedule.scheduleSet) revert ScheduleNotSet();
        if (block.timestamp < auctionSchedule.scheduleStart) revert NotStarted();
        
        (address todayToken, bool activeWindow) = auctionSchedule.getTodayToken(block.timestamp);
        if (!(activeWindow && todayToken == inputToken)) revert NotToday();

        if (!isRegisteredForAuctions[user]) {
            if (totalRegisteredUsers >= maxAuctionParticipants) revert ParticipantCapReached();
        }
    }

    /**
     * @notice Check if user has completed Step 1 (airdrop claim) for current auction cycle
     * @dev CRITICAL: DAV tokens are mint-only (non-transferable)
     *      User's DAV balance can ONLY increase between claims
     *      Must ensure consumed >= current balance to prevent exploitation
     * @param user User address to check
     * @param token Auction token address
     * @return true if user has claimed airdrops for ALL their current DAV balance
     */
    function _hasCompletedStep1(address user, address token) internal view returns (bool) {
        if (airdropDistributor == address(0)) return false;
        
        // Get current auction cycle
        uint256 currentCycle = getCurrentAuctionCycle(token);
        
        // Get consumed DAV units from airdrop claims
        uint256 consumed = IAirdropDistributor(airdropDistributor).getConsumedDavUnitsByCycle(token, user, currentCycle);
        
        // Get current ACTIVE DAV balance (respects expiration)
        uint256 activeDavBalance = getDavBalance(user);
        uint256 davUnits = activeDavBalance / 1e18;
        
        // CRITICAL FIX: Enforce consumed >= davUnits
        // This prevents users from minting new DAV without claiming
        // Since DAV is mint-only, balance never decreases (until expiration)
        // consumed >= davUnits ensures ALL minted DAV has corresponding airdrop claims
        return consumed >= davUnits;
    }

    /**
     * @notice Get user's active DAV balance
     * @param user User address to check
     * @return User's active DAV balance
     * @dev Validates DAV contract is initialized before querying balance
     */
    function getDavBalance(address user) internal view returns (uint256) {
        if (address(dav).code.length == 0) revert InvalidParam();
        return dav.getActiveBalance(user);
    }

    /**
     * @notice Set exact token allowance for spender
     * @param token Token to approve
     * @param spender Address receiving allowance
     * @param amount Exact allowance amount to set
     * @dev Safely adjusts allowance up or down to reach exact target amount
     */
    function _setExactAllowance(address token, address spender, uint256 amount) internal {
        uint256 current = IERC20(token).allowance(address(this), spender);
        if (current == amount) return;
        if (current > amount) {
            uint256 delta = current - amount;
            IERC20(token).safeDecreaseAllowance(spender, delta);
        } else {
            uint256 delta = amount - current;
            IERC20(token).safeIncreaseAllowance(spender, delta);
        }
    }

    /**
     * @notice Roll over daily tracking if 24 hours passed since last roll
     * @dev Saves current day metrics and resets counters at GMT+3 17:00 boundary
     */
    function _rollDailyIfNeeded() internal {
        if (block.timestamp >= currentDayStart + 1 days) {
            uint256 dayIndex = currentDayStart / 1 days;
            stateReleasedByDayIndex[dayIndex] = dailyStateReleased;
            stateReleasedNormalByDayIndex[dayIndex] = dailyStateReleasedNormal;
            stateReleasedReverseByDayIndex[dayIndex] = dailyStateReleasedReverse;
            swapsCountByDayIndex[dayIndex] = dailySwapsCount;
            uniqueSwappersCountByDayIndex[dayIndex] = dailyUniqueSwappersCount;
            emit DailyStateReleaseRolled(dayIndex, dailyStateReleased, currentDayStart + 1 days);
            currentDayStart = _calcCurrentDayStart(block.timestamp);
            dailyStateReleased = 0;
            dailyStateReleasedNormal = 0;
            dailyStateReleasedReverse = 0;
            dailySwapsCount = 0;
            dailyUniqueSwappersCount = 0;
        }
    }

    /**
     * @notice Calculate current day start timestamp
     * @param ts Reference timestamp
     * @return Day start timestamp aligned to GMT+3 17:00 boundary
     */
    function _calcCurrentDayStart(uint256 ts) internal pure returns (uint256) {
        uint256 next = TimeUtilsLib.calculateNextClaimStartGMTPlus3(ts);
        return next - 1 days;
    }

    /**
     * @notice Auto-register user for auction participation
     * @param user User address to register
     * @dev First-come-first-served registration up to maxAuctionParticipants limit (2500)
     */
    function _autoRegisterUser(address user) internal {
        if (!isRegisteredForAuctions[user]) {
            if (totalRegisteredUsers >= maxAuctionParticipants) {
                revert ParticipantCapReached();
            }
            isRegisteredForAuctions[user] = true;
            totalRegisteredUsers += 1;
            emit UserAutoRegistered(user, block.timestamp);
        }
    }

    /**
     * @notice Public function to register user for auctions (called by AirdropDistributor)
     * @param user Address to register
     * @dev Only callable by AirdropDistributor contract or internal delegation
     */
    function registerUserForAuctions(address user) external {
        // Only allow specific contracts to register users
        if (msg.sender != airdropDistributor && msg.sender != address(this)) revert UnauthorizedRegistration();
        _autoRegisterUser(user);
    }

    // ================= View Functions =================
    
    function isReverseAuctionActive(address inputToken) public view returns (bool) {
        if (!supportedTokens[inputToken]) revert UnsupportedToken();
        return auctionSchedule.isReverseAuctionActive(inputToken, block.timestamp);
    }

    function isAuctionActive(address inputToken) public view returns (bool) {
        if (!supportedTokens[inputToken]) revert UnsupportedToken();
        return auctionSchedule.isAuctionActive(inputToken, block.timestamp);
    }

    function getCurrentAuctionCycle(address inputToken) public view returns (uint256) {
        return auctionSchedule.getCurrentAuctionCycle(inputToken, block.timestamp);
    }

    function getAuctionTimeLeft(address inputToken) public view returns (uint256) {
        if (!supportedTokens[inputToken]) revert UnsupportedToken();
        return auctionSchedule.getAuctionTimeLeft(inputToken, block.timestamp);
    }

    function getTodayToken() public view returns (address tokenOfDay, bool active) {
        return auctionSchedule.getTodayToken(block.timestamp);
    }

    function getUserHasSwapped(address user, address inputToken) public view returns (bool) {
        uint256 getCycle = getCurrentAuctionCycle(inputToken);
        bytes32 key = SwapCoreLib.getSwapInfoKey(user, inputToken, stateToken, getCycle);
        return userSwapTotalInfo[key].hasSwapped;
    }

    function getUserHasReverseSwapped(address user, address inputToken) public view returns (bool) {
        uint256 getCycle = getCurrentAuctionCycle(inputToken);
        bytes32 key = SwapCoreLib.getSwapInfoKey(user, inputToken, stateToken, getCycle);
        return userSwapTotalInfo[key].hasReverseSwap;
    }

    function getUserAuctionStatus(address user, address auctionToken) 
        external view returns (bool step1, bool step2, bool step3, uint256 stateBalance) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        
        step1 = _hasCompletedStep1(user, auctionToken);
        step2 = hasUserBurnedTokens[user][auctionToken][currentCycle];
        
        bytes32 key = SwapCoreLib.getSwapInfoKey(user, auctionToken, stateToken, currentCycle);
        SwapCoreLib.UserSwapInfo storage userSwapInfo = userSwapTotalInfo[key];
        step3 = userSwapInfo.hasSwapped;
        
        stateBalance = userStateBalance[user][auctionToken][currentCycle];
    }

    function hasUserBurnedForToken(address user, address auctionToken) external view returns (bool) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return hasUserBurnedTokens[user][auctionToken][currentCycle];
    }

    function getUserStateBalance(address user, address auctionToken) external view returns (uint256) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return userStateBalance[user][auctionToken][currentCycle];
    }

    function getTokensBurnedByUser(address user, address auctionToken) external view returns (uint256) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return tokensBurnedByUser[user][auctionToken][currentCycle];
    }

    function hasCompletedStep1(address user, address auctionToken) external view returns (bool) {
        return _hasCompletedStep1(user, auctionToken);
    }

    function hasCompletedStep2(address user, address auctionToken) external view returns (bool) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return hasUserBurnedTokens[user][auctionToken][currentCycle];
    }

    function hasCompletedStep3(address user, address auctionToken) external view returns (bool) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        bytes32 key = SwapCoreLib.getSwapInfoKey(user, auctionToken, stateToken, currentCycle);
        SwapCoreLib.UserSwapInfo storage userSwapInfo = userSwapTotalInfo[key];
        return userSwapInfo.hasSwapped;
    }

    function getDavTokensUsed(address user, address auctionToken) external view returns (uint256) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return davTokensUsed[user][auctionToken][currentCycle];
    }

    /**
     * @notice Get available DAV balance for auction participation
     * @param user User address
     * @param auctionToken Token being auctioned
     * @return Available DAV amount (total - used)
     * @dev Calculates remaining DAV balance after accounting for usage in current cycle
     */
    function getAvailableDavForAuction(address user, address auctionToken) external view returns (uint256) {
        uint256 totalDav = getDavBalance(user);
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        uint256 usedDav = davTokensUsed[user][auctionToken][currentCycle];
        
        return totalDav > usedDav ? totalDav - usedDav : 0;
    }

    function canParticipateInAuction(address user, address auctionToken) external view returns (bool) {
        uint256 availableDav = this.getAvailableDavForAuction(user, auctionToken);
        return availableDav >= MIN_DAV_REQUIRED;
    }

    // ================= Reverse Auction View Functions =================
    
    /**
     * @notice Calculate net tokens user received from a specific normal auction cycle
     * @param user User address
     * @param token Token address
     * @param cycle Auction cycle number
     * @return netTokens Net tokens = airdrop + swapOutput - burned
     * @dev DAV tokens are always whole units (1, 2, 3 DAV), matching AirdropDistributor logic
     * @custom:formula netTokens = (davUsed/1e18 * 10000) + swapOutput - tokensBurned
     */
    function calculateNetTokensFromNormalAuction(
        address user,
        address token,
        uint256 cycle
    ) public view returns (uint256 netTokens) {
        // Get DAV used in Step 2 (always whole units: 1 DAV, 2 DAV, etc.)
        uint256 davUsed = davTokensUsed[user][token][cycle];
        
        // Calculate airdrop from Step 1 (whole DAV units)
        // No precision loss: DAV tokens are minted in whole units only
        uint256 davWholeUnits = davUsed / 1e18; // Always exact whole number
        uint256 airdropAmount = davWholeUnits * AIRDROP_PER_DAV; // 10,000 tokens per DAV
        
        // Get tokens burned in Step 2 (already tracked)
        uint256 tokensBurned = tokensBurnedByUser[user][token][cycle];
        
        // Get tokens received from pool swap in Step 3 (newly tracked)
        uint256 swapOutput = normalAuctionSwapOutput[user][token][cycle];
        
        // Calculate net tokens: airdrop + swap - burned
        netTokens = airdropAmount + swapOutput - tokensBurned;
        
        return netTokens;
    }
    
    function hasUserCompletedReverseStep1(address user, address auctionToken) external view returns (bool) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return hasCompletedReverseStep1[user][auctionToken][currentCycle];
    }

    function hasUserCompletedReverseStep2(address user, address auctionToken) external view returns (bool) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return hasCompletedReverseStep2[user][auctionToken][currentCycle];
    }

    function getReverseStateBalance(address user, address auctionToken) external view returns (uint256) {
        uint256 currentCycle = getCurrentAuctionCycle(auctionToken);
        return reverseStateBalance[user][auctionToken][currentCycle];
    }

    function calculateReverseStep2Output(address auctionToken, uint256 stateToBurn) external view returns (uint256) {
        uint256 poolRatio = getRatioPrice(auctionToken);
        if (poolRatio == 0) return 0;
        return ReverseAuctionCalculations.calculateTokensToGive(stateToBurn, poolRatio);
    }

    function isTokenSupported(address token) external view returns (bool) {
        return supportedTokens[token];
    }

    function getCurrentDayIndex() external view returns (uint256) {
        return AuctionUtilsLib._currentDayIndex(auctionSchedule, block.timestamp);
    }

    function getPairAddress(address token) external view returns (address) {
        return pairAddresses[token];
    }

    function getTotalTokensBurned(address token) external view returns (uint256) {
        return TotalTokensBurned[token];
    }

    function isUserEligible(address user) external view returns (bool) {
        return isRegisteredForAuctions[user];
    }

    function getEligibilityInfo() external view returns (uint256 totalEligible, uint256 maxAllowed, uint256 remaining) {
        totalEligible = totalRegisteredUsers;
        maxAllowed = maxAuctionParticipants;
        remaining = maxAllowed > totalEligible ? maxAllowed - totalEligible : 0;
    }

    /**
     * @notice Get auction schedule information as tuple for external contracts
     * @return scheduleSet Whether auction schedule has been initialized
     * @return scheduleStart Unix timestamp when first auction started
     * @return registeredTokenCount Number of tokens currently registered in schedule
     * @return scheduleSize Number of tokens in rotation (50)
     * @return auctionDaysLimit Total days in schedule (1000)
     */
    function getAuctionScheduleInfo() external view returns (
        bool scheduleSet,
        uint256 scheduleStart,
        uint256 registeredTokenCount,
        uint256 scheduleSize,
        uint256 auctionDaysLimit
    ) {
        return (
            auctionSchedule.scheduleSet,
            auctionSchedule.scheduleStart,
            auctionSchedule.tokenCount,
            auctionSchedule.scheduleSize,
            auctionSchedule.auctionDaysLimit
        );
    }
    
    /**
     * @notice Get auction statistics for a specific token
     * @param token Address of the token to query
     * @return completedAuctions Number of auctions completed for this token (cycle number)
     * @return maxAuctions Maximum number of auctions allowed per token (20 cycles)
     * @return remainingAuctions Number of auctions remaining for this token
     * @return isActive Whether the token is currently in an active auction
     * @return isScheduled Whether the token is scheduled in the auction rotation
     */
    function getTokenAuctionStats(address token) external view returns (
        uint256 completedAuctions,
        uint256 maxAuctions,
        uint256 remainingAuctions,
        bool isActive,
        bool isScheduled
    ) {
        // Get current cycle (this is the number of completed auctions)
        completedAuctions = getCurrentAuctionCycle(token);
        
        // Max auctions per token is 20
        maxAuctions = 20;
        
        // Calculate remaining auctions
        remainingAuctions = completedAuctions >= maxAuctions ? 0 : maxAuctions - completedAuctions;
        
        // Check if currently active
        isActive = isAuctionActive(token);
        
        // Check if scheduled (has a scheduledIndex > 0)
        isScheduled = auctionSchedule.scheduledIndex[token] > 0;
    }
    
    /**
     * @notice Get global auction progress
     * @return totalSlots Total number of auction slots that can be completed (50 tokens × 20 cycles = 1000 days)
     * @return completedSlots Number of auction slots completed so far
     * @return remainingSlots Number of auction slots remaining
     * @return auctionsEnded Whether all auctions have been completed
     */
    function getGlobalAuctionProgress() external view returns (
        uint256 totalSlots,
        uint256 completedSlots,
        uint256 remainingSlots,
        bool auctionsEnded
    ) {
        totalSlots = auctionSchedule.auctionDaysLimit; // scheduleSize × 20
        
        // Calculate completed slots
        if (!auctionSchedule.scheduleSet || block.timestamp < auctionSchedule.scheduleStart) {
            completedSlots = 0;
        } else {
            uint256 timeSinceStart = block.timestamp - auctionSchedule.scheduleStart;
            uint256 slotDuration = AuctionLib.AUCTION_DURATION + AuctionLib.AUCTION_INTERVAL;
            completedSlots = timeSinceStart / slotDuration;
        }
        
        // Calculate remaining slots
        remainingSlots = completedSlots >= totalSlots ? 0 : totalSlots - completedSlots;
        
        // Check if auctions have ended
        auctionsEnded = completedSlots >= totalSlots;
    }

    // ================= Admin Functions (Delegated) =================
    
    /**
     * @notice One-click token deployment - only requires name and symbol
     * @param name Token name
     * @param symbol Token symbol
     * @return tokenAddress Address of the deployed token
     * @dev User only needs to provide name and symbol, function handles the rest
     * @dev Can only deploy up to scheduleSize (50) tokens
     */
    function deployTokenOneClick(
        string memory name,
        string memory symbol
    ) external onlyGovernance returns (address tokenAddress) {
        // Check if token limit reached
        if (autoRegisteredTokens.length >= auctionSchedule.scheduleSize) revert TokenDeploymentLimitReached();
        
        if (address(auctionAdmin) != address(0)) {
            tokenAddress = auctionAdmin.deployTokenOneClick(address(this), name, symbol);
            
            // AUTOMATIC ALLOWANCE SETUP: Set up allowances for newly deployed token
            _setupAutomaticTokenAllowances(tokenAddress);
            
            return tokenAddress;
        } else {
            // Fallback implementation for when admin is not set
            revert("Admin contract required");
        }
    }

    /**
     * @notice Automatically set up allowances for a newly deployed token
     * @param tokenAddress The newly deployed token address
     * @dev Called internally after token deployment to set up required allowances
     */
    function _setupAutomaticTokenAllowances(address tokenAddress) internal {
        // Set vault allowance for airdrop distributor to access the new token
        if (airdropDistributor != address(0)) {
            _setExactAllowance(tokenAddress, airdropDistributor, type(uint256).max);
        }
        
        // Set allowance for PulseX router for automatic pool creation
        if (pulseXRouter != address(0)) {
            _setExactAllowance(tokenAddress, pulseXRouter, type(uint256).max);
        }
    }

    /**
     * @notice One-click pool creation with PERMANENT liquidity (LP tokens burned)
     * @dev Creates STATE/token pool and burns LP tokens making it unruggable
     * @param token Token to pair with STATE
     * @param tokenAmount Amount of token for initial liquidity
     * @param stateAmount Amount of STATE for initial liquidity
     * @return pair Address of the created pair
     * @custom:access Governance-only function, requires proper token validation
     */
    function createPoolOneClick(
        address token,
        uint256 tokenAmount,
        uint256 stateAmount
    ) external onlyGovernance returns (address pair) {
        if (token == address(0)) revert InvalidToken();
        if (tokenAmount == 0 || stateAmount == 0) revert InvalidAmounts();
        if (stateToken == address(0)) revert StateNotSet();
        if (pulseXRouter == address(0)) revert RouterNotSet();
        if (pulseXFactory == address(0)) revert FactoryNotSet();
        
        // Check balances
        if (IERC20(stateToken).balanceOf(address(this)) < stateAmount) revert InsufficientSTATE();
        if (IERC20(token).balanceOf(address(this)) < tokenAmount) revert InsufficientToken();
        
        // Get or create the pair directly through PulseX
        IPulseXFactory factory = IPulseXFactory(pulseXFactory);
        pair = factory.getPair(token, stateToken);
        if (pair == address(0)) {
            pair = factory.createPair(token, stateToken);
        }
        
        // Approve tokens for PulseX router
        IERC20(stateToken).approve(pulseXRouter, stateAmount);
        IERC20(token).approve(pulseXRouter, tokenAmount);
        
        // Add liquidity directly through PulseX router
        (uint256 amountTokenUsed, uint256 amountStateUsed, uint256 liquidity) = IPulseXRouter02(pulseXRouter).addLiquidity(
            token,
            stateToken,
            tokenAmount,
            stateAmount,
            tokenAmount * 95 / 100, // 5% slippage tolerance
            stateAmount * 95 / 100, // 5% slippage tolerance
            address(this), // LP tokens go to this contract first
            block.timestamp + 3600  // 1 hour deadline
        );
        
        // BURN LP TOKENS PERMANENTLY - makes pool unruggable
        IERC20(pair).transfer(BURN_ADDRESS, liquidity);
        emit LPTokensBurned(pair, liquidity, BURN_ADDRESS);
        
        // Register the token as supported and set pair address
        supportedTokens[token] = true;
        pairAddresses[token] = pair;
        
        // Register token in autoRegisteredTokens if not already registered
        // This ensures tokens show up in the frontend list
        if (!isAutoRegistered[token]) {
            // Get token name for registration (fallback to symbol if needed)
            string memory tokenName;
            try IERC20Metadata(token).name() returns (string memory name) {
                tokenName = name;
            } catch {
                try IERC20Metadata(token).symbol() returns (string memory symbol) {
                    tokenName = symbol;
                } catch {
                    tokenName = "Unknown Token";
                }
            }
            
            // Add to auto-registered list
            autoRegisteredTokens.push(token);
            isAutoRegistered[token] = true;
            tokenOwners[token] = governanceAddress;
            ownerToTokens[governanceAddress].push(token);
            userToTokenNames[governanceAddress].push(tokenName);
            tokenCount++;
            
            if (autoRegisteredTokens.length == auctionSchedule.scheduleSize) {
                autoScheduleLocked = true;
            }
        }
        
        // Emit events with actual amounts used and note that LP tokens are burned
        emit PoolCreated(token, pair, amountTokenUsed, amountStateUsed);
        return pair;
    }

    /**
     * @notice Start auction using auto-registered tokens from pool creation
     * @dev Automatically calculates next GMT+3 17:00 (5 PM) as start time
     * @dev Uses tokens that were automatically registered during createPoolOneClick calls
     * @dev This is the ONLY function needed to start auctions - just click "Start Auction"
     */
    function startAuctionWithAutoTokens() external onlyGovernance {
        if (!autoScheduleLocked) revert TokensNotRegistered();
        if (autoRegisteredTokens.length == 0) revert NoAutoTokens();
        if (auctionSchedule.scheduleSet) revert ScheduleAlreadySet();
        
        // Automatically calculate next GMT+3 17:00 (5 PM) time
        uint256 startAt = TimeUtilsLib.calculateNextClaimStartGMTPlus3(block.timestamp);
        
        // Use auto-registered tokens for auction schedule
        AuctionUtilsLib.setAuctionSchedule(
            auctionSchedule, 
            autoRegisteredTokens, 
            startAt, 
            supportedTokens
        );
        
        emit AuctionScheduleSet(startAt, autoRegisteredTokens.length);
    }

    /**
     * @notice Approves all currently supported tokens for the airdrop distributor
     * @dev This is essential for Step 1 (airdrop) to work in mainnet environment
     */
    function _approveAllTokensForAirdrop(address _airdropDistributor) internal {
        // Approve all tokens in the auction schedule using mapping
        for (uint256 i = 0; i < auctionSchedule.tokenCount; i++) {
            address token = auctionSchedule.tokenByIndex[i];
            if (token != address(0)) {
                // Reset approval to 0 first (for tokens that require it)
                IERC20(token).approve(_airdropDistributor, 0);
                // Set maximum approval
                IERC20(token).approve(_airdropDistributor, type(uint256).max);
            }
        }
    }
    
    // ================= User Registration Management =================
    
    /**
     * @notice Update maximum auction participant limit
     * @param newMax New maximum participant count (must be >= current registered users)
     * @dev Governance-only function to adjust participant cap (default 2500)
     */
    function setMaxAuctionParticipants(uint256 newMax) external onlyGovernance {
        if (newMax == 0) revert InvalidParam();
        if (newMax < totalRegisteredUsers) revert InvalidParam(); // Cannot be less than current registered users
        
        uint256 oldMax = maxAuctionParticipants;
        maxAuctionParticipants = newMax;
        emit MaxParticipantsUpdated(oldMax, newMax);
    }

    // ================= Internal Helper Functions =================
    
    /**
     * @notice Execute token swap through PulseX pool
     * @param user User address performing the swap
     * @param auctionToken Token to receive from swap
     * @param stateAmountIn Amount of STATE to swap
     * @return Amount of auction tokens received
     * @dev Protected by ReentrancyGuard on calling functions, uses SafeERC20 for transfers
     * @custom:slippage 5% tolerance for low-liquidity pools, adjustable via governance
     */
    function _executePoolSwap(address user, address auctionToken, uint256 stateAmountIn) internal returns (uint256) {
        if (pulseXRouter == address(0)) revert RouterNotSet();
        
        // Transfer STATE tokens from user to this contract
        IERC20(stateToken).safeTransferFrom(user, address(this), stateAmountIn);
        
        // Approve router to spend STATE tokens
        IERC20(stateToken).approve(pulseXRouter, stateAmountIn);
        
        // Set up swap path: STATE -> auction token
        address[] memory path = new address[](2);
        path[0] = stateToken;
        path[1] = auctionToken;
        
        // Calculate minimum output with 5% slippage tolerance
        uint256 expectedOut = calculatePoolSwapOutput(auctionToken, stateAmountIn);
        uint256 minAmountOut = expectedOut * 95 / 100;
        
        // Execute swap through PulseX router
        uint256[] memory amounts = IPulseXRouter02(pulseXRouter).swapExactTokensForTokens(
            stateAmountIn,
            minAmountOut,
            path,
            user, // Send auction tokens directly to user
            block.timestamp + 300 // 5 minute deadline
        );
        
        return amounts[1]; // Return amount of auction tokens received
    }
    
    function getRatioPrice(address inputToken) public view returns (uint256) {
        if (!supportedTokens[inputToken]) revert UnsupportedToken();
        return NormalAuctionCalculations.getRatioPrice(
            inputToken,
            stateToken,
            pairAddresses[inputToken]
        );
    }

    function calculatePoolSwapOutput(address inputToken, uint256 stateAmountIn) internal view returns (uint256) {
        if (!supportedTokens[inputToken]) revert UnsupportedToken();
        return NormalAuctionCalculations.calculatePoolSwapOutput(
            stateAmountIn,
            stateToken,
            inputToken,
            pairAddresses[inputToken]
        );
    }

    function calculatePoolSwapOutputReverse(address auctionToken, uint256 tokenAmountIn) internal view returns (uint256) {
        if (!supportedTokens[auctionToken]) revert UnsupportedToken();
        return ReverseAuctionCalculations.calculatePoolSwapOutputReverse(
            tokenAmountIn,
            auctionToken,
            stateToken,
            pairAddresses[auctionToken]
        );
    }

    // ================= Governance Functions (Delegate to Admin) =================
    // ... (Keep all the governance delegation functions from previous version)
    // They remain the same as in the previous split

    /**
     * @notice Pause all auction operations
     * @dev Governance emergency function, blocks all whenNotPaused operations
     */
    function pause() external onlyGovernance {
        paused = true;
        emit ContractPaused(msg.sender);
    }

    /**
     * @notice Resume auction operations
     * @dev Governance function to unpause contract after emergency
     */
    function unpause() external onlyGovernance {
        paused = false;
        emit ContractUnpaused(msg.sender);
    }

    // ... (All other governance functions remain the same as previous version)

    // ================= Internal State Setters for Admin Contract =================
    
    /**
     * @notice Internal setter for max auction participants (called by AuctionAdmin only)
     * @param newMax New maximum participant count
     */
    function _setMaxAuctionParticipants(uint256 newMax) external {
        if (msg.sender != address(auctionAdmin)) revert OnlyAdmin();
        maxAuctionParticipants = newMax;
    }
    
    /**
     * @notice Internal setter for governance address (called by AuctionAdmin only)
     * @param newGov New governance address
     */
    function _setGovernance(address newGov) external {
        if (msg.sender != address(auctionAdmin)) revert OnlyAdmin();
        governanceAddress = newGov;
    }
    
    /**
     * @notice Register deployed token (called by AuctionAdmin only)
     * @param tokenAddress Address of deployed token
     * @param name Token name
     * @param deployer Address of token deployer
     * @dev Array limited to scheduleSize (50 tokens max) to ensure reasonable gas costs
     */
    function _registerDeployedToken(address tokenAddress, string memory name, address deployer) external {
        if (msg.sender != address(auctionAdmin)) revert OnlyAdmin();
        
        // Check if token limit reached - cannot register more than scheduleSize tokens
        if (autoRegisteredTokens.length >= auctionSchedule.scheduleSize) revert TokenDeploymentLimitReached();
        
        tokenOwners[tokenAddress] = deployer;
        ownerToTokens[deployer].push(tokenAddress);
        userToTokenNames[deployer].push(name);
        autoRegisteredTokens.push(tokenAddress);
        isAutoRegistered[tokenAddress] = true;
        supportedTokens[tokenAddress] = true;
        tokenCount++;
        if (autoRegisteredTokens.length == auctionSchedule.scheduleSize) {
            autoScheduleLocked = true;
        }
    }

    /**
     * @notice One-click governance setup for complete system initialization
     * @dev This is the MAIN function governance calls via UI to configure everything
     * @param _stateToken STATE token address
     * @param _davToken DAV token address
     * @param _airdropDistributor AirdropDistributor contract address
     * @param _auctionAdmin AuctionAdmin contract address
     * @param _buyBurnController BuyAndBurnController address for allowance setup
     * @param _swapLens SwapLens contract address (optional - can be address(0))
     * @param _pulseXRouter PulseX router address
     * @param _pulseXFactory PulseX factory address
     */
    function initializeCompleteSystem(
        address _stateToken,
        address _davToken,
        address _airdropDistributor,
        address _auctionAdmin,
        address _buyBurnController,
        address _swapLens,
        address _pulseXRouter,
        address _pulseXFactory
    ) external onlyGovernance nonReentrant {
        if (_stateToken == address(0)) revert StateNotSet();
        if (_davToken == address(0)) revert InvalidParam();
        if (_airdropDistributor == address(0)) revert InvalidParam();
        if (_auctionAdmin == address(0)) revert InvalidParam();
        if (_buyBurnController == address(0)) revert InvalidParam();
        if (_pulseXRouter == address(0)) revert RouterNotSet();
        if (_pulseXFactory == address(0)) revert FactoryNotSet();
        
        // Set all contract addresses
        stateToken = _stateToken;
        davToken = _davToken;
        dav = IDAV(_davToken);
        airdropDistributor = _airdropDistributor;
        auctionAdmin = IAuctionAdmin(_auctionAdmin);
        buyAndBurnController = _buyBurnController;
        swapLens = _swapLens;
        pulseXRouter = _pulseXRouter;
        pulseXFactory = _pulseXFactory;
        
        // CRITICAL: Set vault allowance for BuyAndBurnController to access STATE
        _setExactAllowance(_stateToken, _buyBurnController, type(uint256).max);
        
        // Auto-approve all tokens for airdrop distributor (enables Step 1)
        _approveAllTokensForAirdrop(_airdropDistributor);
        
        emit AirdropDistributorSet(_airdropDistributor);
        emit SystemInitialized(
            _stateToken,
            _davToken,
            address(0), // lpHelper removed - using SWAP_V3.createPoolOneClick() instead
            _airdropDistributor,
            _auctionAdmin,
            _buyBurnController,
            _pulseXRouter,
            _pulseXFactory
        );
    }

    // ================= AUCTION FEE DISTRIBUTION =================
    
    /**
     * @notice Internal function to distribute 0.5% auction fees to development wallets
     * @param token Address of the token to distribute (STATE or auction token)
     * @param feeAmount Amount of tokens to distribute as fee
     * @dev Transfers fee to AuctionAdmin which handles distribution to dev wallets
     */
    function _distributeAuctionFee(address token, uint256 feeAmount) internal {
        IERC20(token).transfer(address(auctionAdmin), feeAmount);
        auctionAdmin.distributeFeeToWallets(token, feeAmount);
    }
    
    // ================= LIQUIDITY MANAGEMENT =================
    
    /**
     * @notice Add liquidity to existing pool from vault (governance-only)
     * @param token Auction token address
     * @param tokenAmount Token amount from vault
     * @param stateAmount STATE amount from vault
     * @return liquidity LP tokens burned
     */
    function addLiquidityToPool(
        address token,
        uint256 tokenAmount,
        uint256 stateAmount
    ) external onlyGovernance nonReentrant returns (uint256 liquidity) {
        if (token == address(0)) revert ZeroAddr();
        if (token == stateToken) revert InvalidParam();
        if (tokenAmount == 0 || stateAmount == 0) revert AmountZero();
        
        address pool = IPulseXFactory(pulseXFactory).getPair(token, stateToken);
        if (pool == address(0)) revert InvalidParam();
        
        if (IERC20(token).balanceOf(address(this)) < tokenAmount) revert InsufficientVault();
        if (IERC20(stateToken).balanceOf(address(this)) < stateAmount) revert InsufficientVault();
        
        _setExactAllowance(token, pulseXRouter, tokenAmount);
        _setExactAllowance(stateToken, pulseXRouter, stateAmount);
        
        (uint256 usedToken, uint256 usedState, uint256 lpAmount) = 
            IPulseXRouter02(pulseXRouter).addLiquidity(
                token,
                stateToken,
                tokenAmount,
                stateAmount,
                (tokenAmount * 95) / 100,
                (stateAmount * 95) / 100,
                BURN_ADDRESS,
                block.timestamp + 3600
            );
        
        if (lpAmount == 0) revert AmountZero();
        
        _setExactAllowance(token, pulseXRouter, 0);
        _setExactAllowance(stateToken, pulseXRouter, 0);
        
        emit LiquidityAdded(token, pool, usedState, usedToken, lpAmount);
        
        return lpAmount;
    }
}
        

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/introspection/IERC165.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC-165 standard, as defined in the
 * https://eips.ethereum.org/EIPS/eip-165[ERC].
 *
 * Implementers can declare support of contract interfaces, which can then be
 * queried by others ({ERC165Checker}).
 *
 * For an implementation, see {ERC165}.
 */
interface IERC165 {
    /**
     * @dev Returns true if this contract implements the interface defined by
     * `interfaceId`. See the corresponding
     * https://eips.ethereum.org/EIPS/eip-165#how-interfaces-are-identified[ERC section]
     * to learn more about how these ids are created.
     *
     * This function call must use less than 30 000 gas.
     */
    function supportsInterface(bytes4 interfaceId) external view returns (bool);
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

/**
 * @title TimeUtilsLib
 * @author State Protocol Team
 * @notice Utility library for timezone-aware time calculations
 * @dev Provides functions to calculate time boundaries with timezone offsets
 * @custom:timezone Default: GMT+3 (17:00 local = 14:00 UTC for DAV mint timing)
 * @custom:validation Bounds checking for timezone offsets (-14 to +14 hours)
 */
library TimeUtilsLib {
    uint256 internal constant SECONDS_IN_DAY = 86400;
    // Default time boundary: 17:00 GMT+3 (5:00 PM GMT+3)
    uint256 internal constant TARGET_GMT_HOUR = 17;
    uint256 internal constant TARGET_GMT_MINUTE = 0;

    /**
     * @notice Validates time calculation parameters
     * @custom:bounds Timezone offset: -14 to +14 hours, Hour: 0-23, Minute: 0-59
     * @custom:safety Prevents overflow in signed integer operations
     */
    function _validateTimeParams(
        uint256 blockTimestamp,
        int256 tzOffsetHours,
        uint256 targetLocalHour,
        uint256 targetLocalMinute
    ) private pure {
        require(blockTimestamp > 0, "Invalid timestamp");
        require(tzOffsetHours >= -14 && tzOffsetHours <= 14, "Invalid offset");
        require(targetLocalHour < 24, "Invalid hour");
        require(targetLocalMinute < 60, "Invalid minute");
        require(blockTimestamp <= uint256(type(int256).max), "Timestamp too large");
    }

    /**
     * @notice Calculates the next claim start time using a timezone offset and local-hour target
     * @param blockTimestamp Current block timestamp (UTC seconds)
     * @param tzOffsetHours Signed hour offset from UTC (e.g. +3 for GMT+3, -4 for GMT-4)
     * @param targetLocalHour Target hour in the local timezone (0-23)
     * @param targetLocalMinute Target minute in the local timezone (0-59)
     * @return finalTimestamp UTC timestamp of the next target local-time boundary
     * @custom:timezone Fixed offsets (does not account for DST)
     * @custom:safety Overflow protection on all signed math operations
     */
    function calculateNextClaimStartTZ(
        uint256 blockTimestamp,
        int256 tzOffsetHours,
        uint256 targetLocalHour,
        uint256 targetLocalMinute
    ) internal pure returns (uint256 finalTimestamp) {
        _validateTimeParams(blockTimestamp, tzOffsetHours, targetLocalHour, targetLocalMinute);
        
        int256 offsetSeconds = tzOffsetHours * int256(1 hours);
        int256 tsInt = int256(blockTimestamp);
        
        if (offsetSeconds > 0) {
            require(tsInt <= type(int256).max - offsetSeconds, "Local overflow");
        } else if (offsetSeconds < 0) {
            require(tsInt >= type(int256).min - offsetSeconds, "Local underflow");
        }
        
        int256 localTs = tsInt + offsetSeconds;
        require(localTs >= 0, "Local time < 0");
        
        uint256 localTsUint = uint256(localTs);
        uint256 localDayStart = (localTsUint / SECONDS_IN_DAY) * SECONDS_IN_DAY;
        
        uint256 hoursSec = targetLocalHour * 1 hours;
        uint256 minutesSec = targetLocalMinute * 1 minutes;
        require(localDayStart <= type(uint256).max - hoursSec, "Target calc ovf (h)");
        uint256 targetLocal = localDayStart + hoursSec;
        require(targetLocal <= type(uint256).max - minutesSec, "Target calc ovf (m)");
        targetLocal += minutesSec;
        
        if (localTsUint >= targetLocal) {
            require(targetLocal <= type(uint256).max - SECONDS_IN_DAY, "Next day ovf");
            targetLocal += SECONDS_IN_DAY;
        }
        
        require(targetLocal <= uint256(type(int256).max), "UTC cast ovf");
        int256 utcTs = int256(targetLocal) - offsetSeconds;
        require(utcTs >= 0, "UTC time < 0");
        finalTimestamp = uint256(utcTs);
        require(finalTimestamp > blockTimestamp, "Non-future ts");
    }

    /**
     * @notice Calculate next 17:00 GMT+3 (5:00 PM GMT+3)
     * @custom:utc 17:00 GMT+3 = 14:00 UTC (2:00 PM UTC)
     */
    function calculateNextClaimStartGMTPlus3(uint256 blockTimestamp)
        internal
        pure
        returns (uint256)
    {
        return calculateNextClaimStartTZ(blockTimestamp, int256(3), 17, 0);
    }

    /**
     * @notice LEGACY: Calculate next 23:00 Pakistan Standard Time (11:00 PM UTC+5)
     * @dev Not used in current protocol. Use calculateNextClaimStartGMTPlus3() instead
     * @custom:utc 23:00 UTC+5 = 18:00 UTC (6:00 PM UTC)
     */
    function calculateNextClaimStartPakistan(uint256 blockTimestamp) internal pure returns (uint256) {
        return calculateNextClaimStartTZ(blockTimestamp, int256(5), 23, 0);
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/token/ERC20/ERC20.sol";
import "@openzeppelin/contracts/access/Ownable.sol";

/**
 * @title TOKEN_V3 - Auction Token Contract
 * @author State Protocol Team
 * @notice Generic ERC20 token with fixed 5 billion supply minted at deployment
 * @dev Used for auction tokens in State Protocol ecosystem
 *
 * @custom:supply 5 billion tokens (5,000,000,000 with 18 decimals)
 * @custom:allocation Entire supply minted to recipient (typically SWAP_V3) in constructor
 * @custom:ownership Deployed ownerless - constructor accepts address(0) for _owner parameter
 * @custom:ownable-modification Uses modified OpenZeppelin Ownable.sol with constructor validation removed
 *                               to allow address(0) as initial owner (ownerless from deployment)
 */
contract TOKEN_V3 is ERC20, Ownable {
    
    // ============ Constants ============
    
    /// @notice Total supply of auction tokens
    /// @dev 5 billion tokens: 5,000,000,000 × 10^18 wei
    ///      Compile-time constant - does not consume storage slot
    uint256 public constant MAX_SUPPLY = 5000000000 ether;
    
    // ============ Events ============
    
    /// @notice Emitted when initial supply is minted during deployment
    /// @param recipient Address receiving the entire token supply
    /// @param totalAmount Total tokens minted (5 billion with 18 decimals)
    event InitialDistribution(
        address indexed recipient,
        uint256 totalAmount
    );

    // ============ Constructor ============
    
    /// @notice Deploys auction token with entire supply minted to recipient
    /// @param name Human-readable token name (e.g., "MyToken")
    /// @param symbol Token ticker symbol (e.g., "MTK")
    /// @param recipient Address receiving 100% of supply (typically SWAP_V3 auction contract)
    /// @param _owner Owner address - pass address(0) for ownerless deployment (standard practice)
    /// @dev Constructor operations (atomic transaction):
    ///      1. Validate recipient address (non-zero)
    ///      2. Mint 5 billion tokens to recipient
    ///      3. Set owner (address(0) for ownerless tokens - modified OZ Ownable accepts this)
    ///      4. Emit InitialDistribution event
    /// @custom:ownerless-design Tokens deployed with _owner = address(0) have no owner from birth
    ///                          Modified Ownable.sol constructor allows this (standard OZ v5 would revert)
    ///                          This is intentional - saves gas vs deploying with owner then renouncing
    constructor(
        string memory name,
        string memory symbol,
        address recipient,
        address _owner
    ) ERC20(name, symbol) Ownable(_owner) {
        require(recipient != address(0), "Invalid recipient address");
        
        // Mint entire supply to auction contract
        _mint(recipient, MAX_SUPPLY);
        
        emit InitialDistribution(recipient, MAX_SUPPLY);
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

/**
 * @title SwapCoreLib
 * @author State Protocol Team
 * @notice Core data structures and utilities for the auction swap system
 * @dev Pure data/utility library with no state modification logic
 * @custom:security Access control enforced in AuctionSwap.sol
 * @custom:storage Struct instances stored in AuctionSwap contract storage
 * @custom:functions Pure/view only - no state changes, key generation uses fixed-length types
 */
library SwapCoreLib {
    
    /**
     * @notice Tracks user's swap completion status for a specific auction cycle
     * @dev Stored in AuctionSwap's userSwapTotalInfo mapping, keyed by getSwapInfoKey()
     * @custom:storage Optimally packed into single storage slot (2 bools + 1 uint256)
     * @custom:flags hasSwapped (normal auction), hasReverseSwap (reverse auction)
     */
    struct UserSwapInfo {
        bool hasSwapped;        // Normal auction swap completed
        bool hasReverseSwap;    // Reverse auction swap completed
        uint256 cycle;          // Auction cycle number
    }

    /**
     * @notice Generates a unique key for tracking user swap info across cycles
     * @param user The address of the user performing the swap
     * @param inputToken The token being swapped (auction token)
     * @param stateToken The STATE token address
     * @param cycle The current auction cycle number
     * @return bytes32 A unique deterministic hash key for this swap instance
     * @custom:encoding Uses abi.encodePacked with fixed-length types (no collision risk)
     * @custom:gas More efficient than abi.encode for fixed-length types
     */
    function getSwapInfoKey(
        address user,
        address inputToken,
        address stateToken,
        uint256 cycle
    ) internal pure returns (bytes32) {
        return keccak256(abi.encodePacked(user, inputToken, stateToken, cycle));
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "../interfaces/IPair.sol";

/**
 * @title ReverseAuctionCalculations
 * @author State Protocol Team
 * @notice Library for reverse auction calculations (users swap auction tokens back to STATE)
 * @dev Library functions called only by AuctionSwap.sol (not directly callable by users).
 * @custom:security Access control and validation enforced in AuctionSwap.sol
 * @custom:flow Step 1: User deposits auction tokens → Step 2: Swap for STATE → Step 3: Burn 100% STATE → Step 4: Return 2x pool ratio auction tokens
 * @custom:precision All calculations use 18 decimal precision (1e18), Solidity 0.8.20 overflow protection
 * @custom:bonus STATE_MULTIPLIER = 2 (users receive double market rate for burned STATE)
 */
library ReverseAuctionCalculations {

    /// @notice STATE token bonus multiplier: 2x the pool ratio
    /// @dev Users receive double the market rate for burned STATE tokens
    uint256 internal constant STATE_MULTIPLIER = 2;
    
    /// @notice Precision factor for decimal calculations
    /// @dev Standard 18 decimal precision used throughout DeFi
    uint256 internal constant PRECISION_FACTOR = 1e18;

    // ================= Errors =================
    
    /// @notice Thrown when liquidity pool reserves are zero
    error InvalidReserves();
    
    /// @notice Thrown when pair tokens don't match expected auction/STATE tokens
    error PairInvalid();
    
    /// @notice Thrown when swap amount is zero
    error AmountZero();

    /**
     * @notice Calculate STATE output from swapping auction tokens in pool
     * @param tokenAmountIn Amount of auction tokens to swap (in wei, 18 decimals)
     * @param auctionToken The auction token address
     * @param stateToken The STATE token address
     * @param pairAddress The Uniswap V2-style pair contract address
     * @return stateOutput Amount of STATE tokens to receive (in wei, 18 decimals)
     * @dev Step 2 of reverse auction: swaps auction tokens for STATE using Uniswap V2 AMM
     * @custom:formula stateOut = (tokenIn × 997 × stateReserve) ÷ (tokenReserve × 1000 + tokenIn × 997)
     * @custom:fee 0.3% trading fee (997/1000 = 99.7% effective)
     * @custom:flow User deposits tokens → Calculate STATE → Must burn 100% STATE → Receive 2x auction tokens
     * @custom:precision 18 decimals, integer division truncation favors pool
     */
    function calculatePoolSwapOutputReverse(
        uint256 tokenAmountIn,
        address auctionToken,
        address stateToken,
        address pairAddress
    ) internal view returns (uint256 stateOutput) {
        if (tokenAmountIn == 0) revert AmountZero();
        
        IPair pair = IPair(pairAddress);
        (uint112 reserve0, uint112 reserve1, ) = pair.getReserves();
        
        address token0 = pair.token0();
        address token1 = pair.token1();
        
        if (reserve0 == 0 || reserve1 == 0) revert InvalidReserves();
        
        uint256 tokenReserve;
        uint256 stateReserve;
        
        if (token0 == auctionToken && token1 == stateToken) {
            tokenReserve = uint256(reserve0);
            stateReserve = uint256(reserve1);
        } else if (token0 == stateToken && token1 == auctionToken) {
            tokenReserve = uint256(reserve1);
            stateReserve = uint256(reserve0);
        } else {
            revert PairInvalid();
        }
        
        // AMM formula with 0.3% fee: stateOut = (tokenIn * 997 * stateReserve) / (tokenReserve * 1000 + tokenIn * 997)
        uint256 tokenInWithFee = tokenAmountIn * 997;
        uint256 numerator = tokenInWithFee * stateReserve;
        uint256 denominator = (tokenReserve * 1000) + tokenInWithFee;
        
        return numerator / denominator;
    }

    /**
     * @notice Calculate auction tokens to return based on burned STATE and apply 2x bonus
     * @param stateToBurn Amount of STATE tokens being burned (in wei, 18 decimals)
     * @param poolRatio Current pool ratio: STATE per auction token (in wei, 18 decimals)
     * @return tokensToGive Amount of auction tokens to return (includes 2x multiplier, in wei, 18 decimals)
     * @dev Step 4 of reverse auction: calculates final reward with 2x multiplier
     * @custom:formula tokensToGive = (stateToBurn × 1e18 × 2) ÷ poolRatio
     * @custom:multiplier 2x bonus incentivizes STATE burning (deflationary mechanism)
     * @custom:requirement User must burn 100% of received STATE (enforced by AuctionSwap.sol)
     * @custom:precision Multiplies before dividing to minimize precision loss
     */
    function calculateTokensToGive(
        uint256 stateToBurn,
        uint256 poolRatio
    ) internal pure returns (uint256 tokensToGive) {
        if (poolRatio == 0) return 0;
        
        // tokensToGive = (stateToBurn / poolRatio) * 2
        // Rewritten to avoid precision loss: (stateToBurn * 1e18 * 2) / poolRatio
        return (stateToBurn * PRECISION_FACTOR * STATE_MULTIPLIER) / poolRatio;
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "../interfaces/IPair.sol";

/**
 * @title NormalAuctionCalculations
 * @author State Protocol Team
 * @notice Library for normal auction calculations (users burn DAV to get auction tokens)
 * @dev Library functions called only by AuctionSwap.sol (not directly callable by users).
 * @custom:security Access control and validation enforced in AuctionSwap.sol
 * @custom:flow Burn DAV → Calculate burn amount (30% of airdrop) and STATE bonus (2x pool ratio) → Transfer tokens
 * @custom:precision 18 decimal precision (1e18), Solidity 0.8.20 overflow protection
 * @custom:bonus STATE_MULTIPLIER = 2 (users receive double market rate STATE tokens)
 */
library NormalAuctionCalculations {

    /// @notice Conversion rate: 2500 auction tokens per 1 DAV token
    /// @dev Fixed rate set by protocol design (18 decimals)
    uint256 constant TOKENS_PER_DAV = 2500 ether;
    
    /// @notice STATE token bonus multiplier: 2x the pool ratio
    /// @dev Users receive double the market rate as incentive for burning DAV
    uint256 constant STATE_MULTIPLIER = 2;
    
    /// @notice Precision factor for decimal calculations
    /// @dev Standard 18 decimal precision used throughout DeFi
    uint256 constant PRECISION_FACTOR = 1e18;

    // ================= Errors =================
    
    /// @notice Thrown when liquidity pool reserves are zero
    error InvalidReserves();
    
    /// @notice Thrown when pair tokens don't match expected auction/STATE tokens
    error PairInvalid();
    
    /// @notice Thrown when swap amount is zero
    error AmountZero();

    // ================= Core Calculation Functions =================

    /**
     * @notice Calculate auction tokens to burn based on available DAV
     * @param availableDav Amount of DAV tokens available for burning (18 decimals)
     * @return tokensToBurn Amount of auction tokens to burn (18 decimals)
    * @custom:formula tokensToBurn = (availableDav × 2500) ÷ 1e18
    * @custom:rate 2500 auction tokens per 1 DAV token
     */
    function calculateTokensToBurn(uint256 availableDav) internal pure returns (uint256 tokensToBurn) {
        return (availableDav * TOKENS_PER_DAV) / 1e18;
    }

    /**
     * @notice Calculate STATE tokens to give based on pool ratio and apply 2x bonus
     * @param tokensToBurn Amount of auction tokens being burned (18 decimals)
     * @param poolRatio Current pool ratio: STATE per auction token (18 decimals)
     * @return stateToGive Amount of STATE tokens to give with 2x multiplier (18 decimals)
     * @custom:formula stateToGive = (tokensToBurn × poolRatio × 2) ÷ 1e18
     * @custom:multiplier 2x bonus incentivizes DAV burning and participation
     */
    function calculateStateToGive(
        uint256 tokensToBurn, 
        uint256 poolRatio
    ) internal pure returns (uint256 stateToGive) {
        return (tokensToBurn * poolRatio * STATE_MULTIPLIER) / PRECISION_FACTOR;
    }

    /**
     * @notice Get price ratio from liquidity pool reserves
     * @param inputToken The auction token address
     * @param stateToken The STATE token address
     * @param pairAddress The Uniswap V2-style pair contract address
     * @return ratio Amount of STATE tokens per 1 auction token (18 decimals)
     * @custom:formula ratio = (stateReserve × 1e18) ÷ auctionReserve
     * @custom:ordering Handles both Uniswap V2 token orderings (token0/token1)
     * @custom:zero-check Returns 0 if reserves are zero, reverts if pair invalid
     */
    function getRatioPrice(
        address inputToken,
        address stateToken, 
        address pairAddress
    ) internal view returns (uint256 ratio) {
        IPair pair = IPair(pairAddress);
        (uint112 reserve0, uint112 reserve1, ) = pair.getReserves();
        
        address token0 = pair.token0();
        address token1 = pair.token1();
        
        if (reserve0 == 0 || reserve1 == 0) return 0;

        if (token0 == inputToken && token1 == stateToken) {
            ratio = (uint256(reserve1) * PRECISION_FACTOR) / uint256(reserve0);
        } else if (token0 == stateToken && token1 == inputToken) {
            ratio = (uint256(reserve0) * PRECISION_FACTOR) / uint256(reserve1);
        } else {
            revert PairInvalid();
        }

        return ratio;
    }

    /**
     * @notice Calculate expected output from swapping STATE tokens for auction tokens in pool
     * @param stateAmountIn Amount of STATE tokens to swap (18 decimals)
     * @param stateToken The STATE token address
     * @param inputToken The auction token address to receive
     * @param pairAddress The Uniswap V2-style pair contract address
     * @return amountOut Amount of auction tokens to receive (18 decimals)
     * @custom:formula amountOut = (amountIn × 997 × reserveOut) ÷ (reserveIn × 1000 + amountIn × 997)
     * @custom:fee 0.3% Uniswap V2 trading fee (997/1000 effective input)
     * @custom:validation Reverts if amount is zero, reserves are zero, or pair is invalid
     */
    function calculatePoolSwapOutput(
        uint256 stateAmountIn,
        address stateToken,
        address inputToken,
        address pairAddress
    ) internal view returns (uint256 amountOut) {
        if (stateAmountIn == 0) revert AmountZero();
        
        IPair pair = IPair(pairAddress);
        (uint112 reserve0, uint112 reserve1, ) = pair.getReserves();
        
        address token0 = pair.token0();
        address token1 = pair.token1();
        
        if (reserve0 == 0 || reserve1 == 0) revert InvalidReserves();
        
        uint256 stateReserve;
        uint256 tokenReserve;
        
        if (token0 == stateToken && token1 == inputToken) {
            stateReserve = uint256(reserve0);
            tokenReserve = uint256(reserve1);
        } else if (token0 == inputToken && token1 == stateToken) {
            stateReserve = uint256(reserve1);
            tokenReserve = uint256(reserve0);
        } else {
            revert PairInvalid();
        }
        
        // AMM formula with 0.3% fee: amountOut = (amountIn * 997 * reserveOut) / (reserveIn * 1000 + amountIn * 997)
        uint256 amountInWithFee = stateAmountIn * 997;
        uint256 numerator = amountInWithFee * tokenReserve;
        uint256 denominator = (stateReserve * 1000) + amountInWithFee;
        
        return numerator / denominator;
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";

/**
 * @title BurnLib
 * @author State Protocol Team
 * @notice Library for handling token burning operations in the auction system
 * @dev Library functions called only by AuctionSwap.sol (not directly callable by users).
 * @custom:security Access control enforced in AuctionSwap.sol (nonReentrant, whenNotPaused)
 * @custom:normal-flow Users burn auction tokens → receive STATE from vault
 * @custom:reverse-flow Users burn STATE → receive auction tokens
 * @custom:burn-address All burned tokens sent to 0xdead (permanent removal)
 * @custom:validation Input validation handled by AuctionSwap.sol before library calls
 */
library BurnLib {
    using SafeERC20 for IERC20;
    
    // Burn address for permanently removing tokens from circulation
    address private constant BURN_ADDRESS = 0x000000000000000000000000000000000000dEaD;
    
    // ================= Events =================
    
    /// @notice Emitted when tokens are permanently burned to dead address
    /// @param token Address of the token burned
    /// @param amount Amount of tokens burned
    /// @param user Address of the user who initiated the burn
    event TokensBurned(address indexed token, uint256 amount, address indexed user);
    
    /// @notice Emitted when STATE tokens are issued to user in normal auction
    /// @param user Address receiving STATE tokens
    /// @param amount Amount of STATE tokens issued
    /// @param cycle Auction cycle number
    event StateTokensIssued(address indexed user, uint256 amount, uint256 indexed cycle);
    
    /// @notice Emitted when STATE tokens are burned in reverse auction
    /// @param user Address burning STATE tokens
    /// @param amount Amount of STATE tokens burned
    /// @param cycle Auction cycle number
    event ReverseStateTokensBurned(address indexed user, uint256 amount, uint256 indexed cycle);
    
    /// @notice Emitted when auction tokens are issued to user in reverse auction
    /// @param user Address receiving auction tokens
    /// @param amount Amount of auction tokens issued
    /// @param cycle Auction cycle number
    event AuctionTokensIssued(address indexed user, uint256 amount, uint256 indexed cycle);

    // ================= Structs =================
    
    /**
     * @notice Parameters for normal auction token burning (Step 2)
     * @param user Address of the user performing the burn
     * @param auctionToken Address of the auction token being burned
     * @param stateToken Address of the STATE token being issued
     * @param currentCycle Current auction cycle number
     * @param tokensToBurn Amount of auction tokens to burn
     * @param stateToGive Amount of STATE tokens to issue from vault
     * @param availableDav Amount of DAV used for this burn operation
     */
    struct BurnParams {
        address user;
        address auctionToken;
        address stateToken;
        uint256 currentCycle;
        uint256 tokensToBurn;
        uint256 stateToGive;
        uint256 availableDav;
    }

    /**
     * @notice Parameters for reverse auction STATE burning (Step 2)
     * @param user Address of the user performing the burn
     * @param auctionToken Address of the auction token being issued
     * @param stateToken Address of the STATE token being burned
     * @param currentCycle Current auction cycle number
     * @param stateToBurn Amount of STATE tokens to burn
     * @param tokensToGive Amount of auction tokens to issue from vault
     */
    struct ReverseBurnParams {
        address user;
        address auctionToken;
        address stateToken;
        uint256 currentCycle;
        uint256 stateToBurn;
        uint256 tokensToGive;
    }

    // ================= Core Functions =================
    
    /**
     * @notice Execute normal auction token burn (Step 2 of normal auction)
     * @dev Called by AuctionSwap.burnTokensForState() after validation
     * @custom:flow Update tracking → Burn auction tokens to 0xdead → Transfer STATE from vault → Emit events
     * @custom:validation All checks performed in AuctionSwap.sol before calling
     * @custom:accumulation Allows multiple burns per cycle (values accumulate)
     * @param params Struct containing burn operation parameters (pre-validated)
     * @param hasUserBurnedTokens Mapping tracking if user has burned tokens for a cycle
     * @param userStateBalance Mapping of user's STATE balance earned per cycle
     * @param tokensBurnedByUser Mapping of tokens burned by user per cycle
     * @param davTokensUsed Mapping of DAV tokens used by user per cycle
     * @param TotalTokensBurned Mapping tracking total burned tokens globally
     */
    function executeTokenBurn(
        BurnParams memory params,
        mapping(address => mapping(address => mapping(uint256 => bool))) storage hasUserBurnedTokens,
        mapping(address => mapping(address => mapping(uint256 => uint256))) storage userStateBalance,
        mapping(address => mapping(address => mapping(uint256 => uint256))) storage tokensBurnedByUser,
        mapping(address => mapping(address => mapping(uint256 => uint256))) storage davTokensUsed,
        mapping(address => uint256) storage TotalTokensBurned
    ) external {
        // Input validation
        require(params.user != address(0), "BurnLib: Invalid user address");
        require(params.auctionToken != address(0), "BurnLib: Invalid auction token");
        require(params.stateToken != address(0), "BurnLib: Invalid state token");
        require(params.tokensToBurn > 0, "BurnLib: Invalid burn amount");
        require(params.stateToGive > 0, "BurnLib: Invalid state amount");
        
        // Allow multiple burns per cycle - accumulate values
        hasUserBurnedTokens[params.user][params.auctionToken][params.currentCycle] = true;
        userStateBalance[params.user][params.auctionToken][params.currentCycle] += params.stateToGive;
        tokensBurnedByUser[params.user][params.auctionToken][params.currentCycle] += params.tokensToBurn;
        davTokensUsed[params.user][params.auctionToken][params.currentCycle] += params.availableDav;
        
        // Burn the auction tokens permanently by sending to dead address
        IERC20(params.auctionToken).safeTransferFrom(params.user, BURN_ADDRESS, params.tokensToBurn);
        TotalTokensBurned[params.auctionToken] += params.tokensToBurn;
        
        // Give STATE tokens to user from contract vault
        IERC20(params.stateToken).safeTransfer(params.user, params.stateToGive);
        
        // Emit burn event to track the burning of auction tokens
        emit TokensBurned(params.auctionToken, params.tokensToBurn, params.user);
        emit StateTokensIssued(params.user, params.stateToGive, params.currentCycle);
    }

    /**
     * @notice Execute reverse auction STATE burn (Step 2 of reverse auction)
     * @dev Called by AuctionSwap.burnStateForTokens() after validation
     * @custom:flow Verify not completed → Mark completed → Burn STATE to 0xdead → Transfer auction tokens → Emit events
     * @custom:validation All checks performed in AuctionSwap.sol before calling
     * @custom:once-per-cycle Prevents double execution via hasCompletedReverseStep2 flag
     * @param params Struct containing reverse burn operation parameters (pre-validated)
     * @param hasCompletedReverseStep2 Mapping tracking reverse step 2 completion
     * @param reverseStateBalance Mapping of STATE balance from reverse step 1
     * @param TotalTokensBurned Mapping tracking total burned tokens globally
     */
    function executeReverseBurn(
        ReverseBurnParams memory params,
        mapping(address => mapping(address => mapping(uint256 => bool))) storage hasCompletedReverseStep2,
        mapping(address => mapping(address => mapping(uint256 => uint256))) storage reverseStateBalance,
        mapping(address => uint256) storage TotalTokensBurned
    ) external {
        // Input validation
        require(params.user != address(0), "BurnLib: Invalid user address");
        require(params.auctionToken != address(0), "BurnLib: Invalid auction token");
        require(params.stateToken != address(0), "BurnLib: Invalid state token");
        require(params.stateToBurn > 0, "BurnLib: Invalid burn amount");
        require(params.tokensToGive > 0, "BurnLib: Invalid token amount");
        
        // Check for double execution
        require(!hasCompletedReverseStep2[params.user][params.auctionToken][params.currentCycle], "BurnLib: Already completed reverse step 2");
        
        hasCompletedReverseStep2[params.user][params.auctionToken][params.currentCycle] = true;
        
        // Safe subtraction with underflow protection
        uint256 currentBalance = reverseStateBalance[params.user][params.auctionToken][params.currentCycle];
        require(currentBalance >= params.stateToBurn, "BurnLib: Insufficient reverse balance");
        reverseStateBalance[params.user][params.auctionToken][params.currentCycle] = currentBalance - params.stateToBurn;
        
        // Burn STATE tokens permanently by sending to dead address
        IERC20(params.stateToken).safeTransferFrom(params.user, BURN_ADDRESS, params.stateToBurn);
        TotalTokensBurned[params.stateToken] += params.stateToBurn;
        
        // Give auction tokens to user from contract vault
        IERC20(params.auctionToken).safeTransfer(params.user, params.tokensToGive);
        
        // Emit burn event to track the burning of STATE tokens in reverse auction
        emit TokensBurned(params.stateToken, params.stateToBurn, params.user);
        emit ReverseStateTokensBurned(params.user, params.stateToBurn, params.currentCycle);
        emit AuctionTokensIssued(params.user, params.tokensToGive, params.currentCycle);
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "./AuctionLib.sol";

/**
 * @title AuctionUtilsLib
 * @author State Protocol Team
 * @notice Library for auction scheduling and timing calculations
 * @dev Provides reusable calculation functions for auction timing and token rotation
 * @custom:architecture Library provides calculations only, business rules enforced in AuctionSwap.sol
 * @custom:timing Configurable via AuctionLib constants (AUCTION_DURATION, AUCTION_INTERVAL)
 * @custom:rotation Tokens rotate continuously: Index 0, 1, 2... % tokenCount (perfect sequential rotation)
 * @custom:cycles Maximum cycles per token (20) enforced in AuctionSwap.sol, not in library layer
 */
library AuctionUtilsLib {
    
    /**
     * @notice Auction schedule configuration and state tracking
     * @dev This struct manages the rotation schedule for auction tokens
     * @param tokenByIndex Mapping from index to token address (0-based: 0 = token1, 1 = token2)
     * @param tokenCount Number of tokens currently registered in the schedule
     * @param scheduledIndex Mapping from token address to its position (1-based, 0 = not scheduled)
     * @param scheduleSet Whether the auction schedule has been initialized
     * @param scheduleStart Unix timestamp when auctions begin (typically GMT+3 17:00 / 5 PM)
     * @param auctionDaysLimit Total number of auction slots available (scheduleSize × MAX_CYCLES_PER_TOKEN)
     * @param scheduleSize Maximum number of tokens that can be scheduled (configurable, testing with various values)
     */
    struct AuctionSchedule {
        mapping(uint256 => address) tokenByIndex; // index 0 = token1, index 1 = token2, etc.
        uint256 tokenCount; // actual number of tokens registered
        mapping(address => uint256) scheduledIndex;
        bool scheduleSet;
        uint256 scheduleStart;
        uint256 auctionDaysLimit;
        uint256 scheduleSize;
    }

    /**
     * @notice Get the currently active auction token
     * @param schedule Auction schedule storage reference
     * @param currentTime Current block timestamp
     * @return tokenOfDay Address of the token scheduled for current slot (address(0) if none)
     * @return active Whether we're currently within an active auction window (not in interval)
     * @dev Calculates which auction slot we're in based on AUCTION_DURATION + AUCTION_INTERVAL.
     *      Duration and interval are configurable via AuctionLib constants.
     *      Tokens rotate through schedule continuously.
     */
    function getTodayToken(AuctionSchedule storage schedule, uint256 currentTime) 
        internal 
        view 
        returns (address tokenOfDay, bool active) 
    {
        if (!_auctionStarted(schedule, currentTime)) return (address(0), false);
        if (schedule.tokenCount == 0) return (address(0), false);
        
        // Calculate which auction slot we're in (15 min auction + 5 min interval = 20 min per slot)
        uint256 timeSinceStart = currentTime - schedule.scheduleStart;
        uint256 slotDuration = AuctionLib.AUCTION_DURATION + AuctionLib.AUCTION_INTERVAL;
        uint256 auctionSlot = timeSinceStart / slotDuration; // Each slot is 20 minutes (15 min auction + 5 min break)
        uint256 tokenIndex = auctionSlot % schedule.tokenCount; // Use tokenCount instead of array length
        
        tokenOfDay = schedule.tokenByIndex[tokenIndex]; // Use mapping access instead of array
        
        // Check if we're within the active 15-minute auction window (not in the 5-minute break)
        uint256 auctionStart = schedule.scheduleStart + (auctionSlot * slotDuration);
        uint256 auctionEnd = auctionStart + AuctionLib.AUCTION_DURATION;
        
        active = currentTime >= auctionStart && currentTime < auctionEnd;
    }

    /**
     * @notice Check if auctions have started
     * @param schedule Auction schedule storage reference
     * @param currentTime Current block timestamp
     * @return True if schedule is set and current time is past start time
     */
    function _auctionStarted(AuctionSchedule storage schedule, uint256 currentTime) internal view returns (bool) {
        return schedule.scheduleSet && currentTime >= schedule.scheduleStart;
    }

    /**
     * @notice Calculate current day index since auction start
     * @param schedule Auction schedule storage reference
     * @param currentTime Current block timestamp
     * @return Day index (0-based) for analytics tracking
     * @dev Used for daily statistics aggregation (GMT+3 17:00 / 5 PM timezone boundaries)
     */
    function _currentDayIndex(AuctionSchedule storage schedule, uint256 currentTime) internal view returns (uint256) {
        if (!_auctionStarted(schedule, currentTime)) return 0;
        return (currentTime - schedule.scheduleStart) / 1 days;
    }

    /**
     * @notice Calculate start and end timestamps for current day window
     * @param schedule Auction schedule storage reference
     * @param currentTime Current block timestamp
     * @return start Unix timestamp for start of current day
     * @return end Unix timestamp for end of current day
     * @dev Used for daily analytics boundaries (GMT+3 17:00 / 5 PM timezone)
     */
    function _todayWindow(AuctionSchedule storage schedule, uint256 currentTime) 
        internal 
        view 
        returns (uint256 start, uint256 end) 
    {
        uint256 d = _currentDayIndex(schedule, currentTime);
        start = schedule.scheduleStart + d * 1 days;
        end = start + 1 days;
    }

    /**
     * @notice Calculate how many times a token has appeared in auction rotation
     * @param schedule Auction schedule storage reference
     * @param token Token address to check
     * @param currentTime Current block timestamp
     * @return Number of completed auction cycles for this token (1-based count)
     * @dev This is the "cycle number" used throughout the system.
     * @custom:rotation With N tokens in schedule, each token appears every N slots
     * @custom:formula appearances = (completedSlots - tokenIndex) / tokenCount + 1
     * @custom:limit Cycle maximum (20) enforced in AuctionSwap.sol, not here
     */
    function _appearanceCount(AuctionSchedule storage schedule, address token, uint256 currentTime) 
        internal 
        view 
        returns (uint256) 
    {
        if (!_auctionStarted(schedule, currentTime)) return 0;
        uint256 idx1 = schedule.scheduledIndex[token];
        if (idx1 == 0) return 0;
        uint256 idx = idx1 - 1;
        
        // Count completed auction slots (each slot is 20 minutes: 15 min auction + 5 min interval)
        uint256 timeSinceStart = currentTime - schedule.scheduleStart;
        uint256 slotDuration = AuctionLib.AUCTION_DURATION + AuctionLib.AUCTION_INTERVAL;
        uint256 completedSlots = timeSinceStart / slotDuration;
        
        // Calculate how many times this token has appeared
        if (completedSlots < idx) return 0;
        return (completedSlots - idx) / schedule.tokenCount + 1;
    }

    /**
     * @notice Calculate total number of completed auction slots across all tokens
     * @param schedule Auction schedule storage reference
     * @param currentTime Current block timestamp
     * @return Number of completed auction slots
     * @dev Total slots = MAX_CYCLES_PER_TOKEN × scheduleSize
     *      Used for global progress tracking in AuctionSwap.getGlobalAuctionProgress()
     */
    function _getCompletedSlots(AuctionSchedule storage schedule, uint256 currentTime) 
        internal 
        view 
        returns (uint256) 
    {
        if (!_auctionStarted(schedule, currentTime)) return 0;
        uint256 timeSinceStart = currentTime - schedule.scheduleStart;
        uint256 slotDuration = AuctionLib.AUCTION_DURATION + AuctionLib.AUCTION_INTERVAL;
        return timeSinceStart / slotDuration;
    }

    /**
     * @notice Check if a specific token has an active normal auction right now
     * @param schedule Auction schedule storage reference
     * @param inputToken Token to check
     * @param currentTime Current block timestamp
     * @return True if it's this token's turn AND we're within the auction window
     * @dev This checks TIMING only. Business rules (max cycles, participant limits) are
     *      enforced in AuctionSwap.sol. See contract header for architecture explanation.
     */
    function isAuctionActive(
        AuctionSchedule storage schedule, 
        address inputToken, 
        uint256 currentTime
    ) external view returns (bool) {
        (address today, bool activeWindow) = getTodayToken(schedule, currentTime);
        return activeWindow && today == inputToken;
    }

    /**
     * @notice Check if a specific token has an active reverse auction right now
     * @param schedule Auction schedule storage reference
     * @param inputToken Token to check
     * @param currentTime Current block timestamp
     * @return True if it's this token's turn AND it's a reverse cycle (every 4th appearance)
     * @dev Reverse auctions happen on cycles 4, 8, 12, 16, 20 for each token.
     *      Users can swap earned tokens back to STATE during these cycles.
     *      Business rules (token limits) enforced in AuctionSwap.reverseSwapTokensForState()
     */
    function isReverseAuctionActive(
        AuctionSchedule storage schedule,
        address inputToken,
        uint256 currentTime
    ) external view returns (bool) {
        if (!_isReverseToday(schedule, inputToken, currentTime)) return false;
        
        // Check if we're within the active 2-hour window
        (address today, bool activeWindow) = getTodayToken(schedule, currentTime);
        return activeWindow && today == inputToken;
    }

    /**
     * @notice Internal check if today is a reverse auction day for specific token
     * @param schedule Auction schedule storage reference
     * @param token Token to check
     * @param currentTime Current block timestamp
     * @return True if token is scheduled today AND cycle count is divisible by 4
     * @custom:pattern Reverse cycles occur every 4th appearance (cycles 4, 8, 12, 16, 20)
     * @custom:economic Users can swap earned tokens back to STATE during reverse auctions
     */
    function _isReverseToday(AuctionSchedule storage schedule, address token, uint256 currentTime) internal view returns (bool) {
        (address today, bool active) = getTodayToken(schedule, currentTime);
        if (!active || today != token) return false;
        uint256 count = _appearanceCount(schedule, token, currentTime);
        // Reverse on 4,8,12,... (every 4th appearance)
        return count > 0 && (count % 4 == 0);
    }

    /**
     * @notice Get current auction cycle number for a specific token
     * @param schedule Auction schedule storage reference
     * @param inputToken Token to check
     * @param currentTime Current block timestamp
     * @return Cycle number (1-based count)
     * @dev This is the primary cycle counter used throughout the system.
     *      Returns 0 if auctions haven't started or token not scheduled.
     *      Maximum value is enforced at application layer (see AuctionSwap.MAX_CYCLES_PER_TOKEN)
     */
    function getCurrentAuctionCycle(
        AuctionSchedule storage schedule, 
        address inputToken, 
        uint256 currentTime
    ) external view returns (uint256) {
        return _appearanceCount(schedule, inputToken, currentTime);
    }

    /**
     * @notice Get remaining time in current auction slot
     * @param schedule Auction schedule storage reference
     * @param inputToken Token to check
     * @param currentTime Current block timestamp
     * @return Seconds remaining in current auction window (0 if not active)
     * @custom:precision Integer division used only for slot index; time remaining maintains full second precision
     * @custom:display Frontend displays as countdown timer (e.g., "1h 1m 1s")
     */
    function getAuctionTimeLeft(
        AuctionSchedule storage schedule,
        address inputToken,
        uint256 currentTime
    ) external view returns (uint256) {
        (address today, bool activeWindow) = getTodayToken(schedule, currentTime);
        if (!activeWindow || today != inputToken) return 0;
        
        // Calculate time left in current auction slot
        uint256 timeSinceStart = currentTime - schedule.scheduleStart;
        uint256 slotDuration = AuctionLib.AUCTION_DURATION + AuctionLib.AUCTION_INTERVAL;
        uint256 auctionSlot = timeSinceStart / slotDuration;
        uint256 auctionEnd = schedule.scheduleStart + (auctionSlot * slotDuration) + AuctionLib.AUCTION_DURATION;
        
        return auctionEnd > currentTime ? auctionEnd - currentTime : 0;
    }

    /**
     * @notice Initialize auction schedule with token rotation
     * @param schedule Auction schedule storage reference
     * @param tokens Array of token addresses to rotate (must equal scheduleSize)
     * @param startAt Unix timestamp when auctions begin (typically GMT+3 17:00 / 5 PM)
     * @param supportedTokens Mapping to verify tokens are supported
     * @custom:immutable Can only be called once (scheduleSet prevents re-initialization)
     * @custom:validation Tokens must be supported, unique, and non-zero
     * @custom:indexing Uses 1-based indexing for cycle counting (scheduledIndex[token] = position + 1)
     */
    function setAuctionSchedule(
        AuctionSchedule storage schedule,
        address[] memory tokens,
        uint256 startAt,
        mapping(address => bool) storage supportedTokens
    ) external {
        require(!schedule.scheduleSet, "Schedule already set");
        require(tokens.length == schedule.scheduleSize, "Invalid token count");
        
        // Validate tokens are supported and unique
        for (uint256 i = 0; i < tokens.length; i++) {
            address t = tokens[i];
            require(t != address(0), "Zero address");
            require(supportedTokens[t], "Unsupported token");
            require(schedule.scheduledIndex[t] == 0, "Duplicate token");
            schedule.scheduledIndex[t] = i + 1; // store index+1
            schedule.tokenByIndex[i] = t; // Add token to mapping
        }
        
        schedule.tokenCount = tokens.length;
        schedule.scheduleStart = startAt;
        schedule.scheduleSet = true;
    }

    /**
     * @notice Set maximum number of tokens that can participate in rotation
     * @param schedule Auction schedule storage reference
     * @param newSize New schedule size (1-50)
     * @custom:immutable Can only be called before schedule initialization (scheduleSet = false)
     * @custom:limit Total auction slots calculated as scheduleSize × MAX_CYCLES_PER_TOKEN in AuctionSwap.sol
     */
    function setScheduleSize(AuctionSchedule storage schedule, uint256 newSize) external {
        require(!schedule.scheduleSet, "Schedule already set");
        require(newSize > 0 && newSize <= 50, "Invalid size");
        schedule.scheduleSize = newSize;
    }

    /**
     * @notice Set total number of auction slots available
     * @param schedule Auction schedule storage reference
     * @param daysLimit Total auction slots (typically scheduleSize × MAX_CYCLES_PER_TOKEN)
     * @custom:calculation Set in AuctionSwap constructor: auctionDaysLimit = scheduleSize * 20
     * @custom:scope Global auction capacity limit, not per-token limit
     */
    function setAuctionDaysLimit(AuctionSchedule storage schedule, uint256 daysLimit) external {
        require(daysLimit > 0, "Invalid limit");
        schedule.auctionDaysLimit = daysLimit;
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

/**
 * @title AuctionLib
 * @author State Protocol Team
 * @notice Core constants for auction timing configuration
 * @dev Centralized constants used across auction system for timing calculations
 * @custom:duration 24 hours per auction (production configuration)
 * @custom:interval 0 minutes between auctions (continuous rotation)
 */
library AuctionLib {
    uint256 public constant AUCTION_DURATION = 24 hours; // 24 hours auction duration for production
    uint256 public constant AUCTION_INTERVAL = 0; // No gap between auctions
    
    struct AuctionCycle {
        uint256 firstAuctionStart;
        bool isInitialized;
        uint256 auctionCount;
    }
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

interface SwapEvents {
    event DailyStateReleaseRolled(uint256 indexed dayIndex, uint256 amount, uint256 newDayStart);
    event AuctionStarted(uint256 startTime, uint256 endTime, address inputToken, address stateToken);
    event TokenDeployed(string name, address tokenAddress, uint256 tokenNo);
    event TokensDeposited(address indexed token, uint256 amount);
    event RewardDistributed(address indexed user, uint256 amount);
    event TokensSwapped(address indexed user, address indexed inputToken, address indexed stateToken, uint256 amountIn, uint256 amountOut);
    event TokenAdded(address indexed token, address pairAddress);
    event GovernanceUpdateProposed(address newGov, uint256 timestamp);
    event GovernanceUpdated(address newGov);
    event ContractPaused(address by);
    event ContractUnpaused(address by);
    event AuctionScheduleSet(uint256 startAt, uint256 count);
    event AuctionDaysLimitUpdated(uint256 newLimit);
    event TreasuryUpdated(address indexed oldTreasury, address indexed newTreasury);
    event ProtocolFeeAccrued(address indexed token, uint256 amount);
    event BurnAccrued(address indexed token, uint256 amount);
    event NewDayStarted(uint256 newDayStart);
    event AuctionAdminSet(address indexed admin);
    event AirdropDistributorSet(address indexed airdropDistributor);
    event DavTokenAddressSet(address indexed davToken);
    event DexAddressesUpdated(address router, address factory);
    event UserAutoRegistered(address indexed user, uint256 timestamp);
    event MaxParticipantsUpdated(uint256 oldMax, uint256 newMax);
    event RegistrationCapReached(uint256 maxParticipants);
    event LiquidityAdded(address indexed token, address indexed pair, uint256 amountState, uint256 amountToken, uint256 liquidity);
    event PoolCreated(address indexed token, address indexed pair, uint256 tokenAmount, uint256 stateAmount);
    event LPTokensBurned(address indexed pair, uint256 liquidity, address burnAddress);
    // Protocol governance transfer events
    event ProtocolGovernanceTransferInitiated(address indexed newGovernance, uint256 timestamp);
    event ProtocolGovernanceTransferCompleted(address indexed newGovernance);
    // Vault distribution events
    event VaultDistribution(address indexed token, address indexed recipient, uint256 amount);
    // Auction fee collection event
    event AuctionFeeCollected(address indexed token, uint256 feeAmount, address indexed user);
    // System initialization event
    event SystemInitialized(
        address indexed stateToken,
        address indexed davToken,
        address lpHelper,
        address airdropDistributor,
        address auctionAdmin,
        address buyBurnController,
        address pulseXRouter,
        address pulseXFactory
    );
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

interface SwapErrors {
    error NotGovernance();
    error Unauthorized();
    error PausedErr();
    error UnsupportedToken();
    error ZeroAddr();
    error AlreadySet();
    error ScheduleNotSet();
    error NotStarted();
    error NotToday();
    error Ended();
    error AlreadySwapped();
    error AlreadyReverse();
    error StateNotSet();
    error DavInsufficient();
    error InvalidParam();
    error PairInvalid();
    error PairUsed();
    error TokenExists();
    error NoDAV();
    error InvalidReserves();
    error ReserveFetchFail();
    error InsufficientVault();
    error AmountZero();
    error TimelockNotExpired();
    error NoPendingGov();
    error BadTreasury();
    error ReverseDayLPOonly();
    error ParticipantCapReached();
    error InsufficientBalance();
    error InsufficientAllowance();
    error Step1NotCompleted();
    error Step2NotCompleted();
    error UserNotEligible();
    error NoNormalAuctionParticipation();
    error ExceedsReverseLimit();
    
    // Phase 2 Optimization - New Errors
    error NoActiveAuction();
    error ReverseAuctionActive();
    error NormalAuctionActive();
    error InvalidToken();
    error InvalidAmounts();
    error RouterNotSet();
    error FactoryNotSet();
    error InsufficientSTATE();
    error InsufficientToken();
    error OnlyAdmin();
    error TokensNotRegistered();
    error NoAutoTokens();
    error ScheduleAlreadySet();
    error InvalidStartTime();
    error ArrayLengthMismatch();
    error EmptyArrays();
    error AirdropNotSet();
    error TokenNotSupported();
    error UnauthorizedRegistration();
    error AuctionCyclesCompleted();
    error TokenDeploymentLimitReached();
    error MustClaimAllDavAirdrops();
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

interface IPair {
    function getReserves()
        external
        view
        returns (uint112 reserve0, uint112 reserve1, uint32 blockTimestampLast);
    function token0() external view returns (address);
    function token1() external view returns (address);
}
          

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

interface IAuctionAdmin {
    function pause() external;
    function unpause() external;
    function setMaxAuctionParticipants(address swapContract, uint256 newMax) external;
    function setDexAddresses(address swapContract, address _router, address _factory) external;
    function deployTokenOneClick(address swapContract, string memory name, string memory symbol) external returns (address tokenAddress);
    function updateGovernance(address swapContract, address newGov) external;
    function confirmGovernanceUpdate(address swapContract) external;
    function transferProtocolGovernance(address swapContract, address newGovernance) external;
    function setDavTokenAddress(address swapContract, address _davToken) external;
    function depositTokens(address swapContract, address token, uint256 amount) external;
    function deployUserToken(address swapContract, string memory name, string memory symbol, address _One, address _swap, address _owner) external returns (address);
    function addToken(address swapContract, address token, address pairAddress, address _tokenOwner) external;
    function setAuctionSchedule(address swapContract, address[] calldata tokens) external;
    function setScheduleSize(address swapContract, uint256 newSize) external;
    function setAuctionDaysLimit(address swapContract, uint256 daysLimit) external;
    function setLPHelper(address swapContract, address helper) external;
    function setTreasury(address swapContract, address _treasury) external;
    function withdrawAccruedFees(address swapContract, address token, uint256 amount, address to) external;
    function setVaultAllowance(address swapContract, address token, address spender, uint256 amount) external;
    function setVaultAllowances(address swapContract, address[] calldata tokens, address spender, uint256 amount) external;
    function createPoolForToken(address swapContract, address auctionToken, uint256 tokenAmount, uint256 stateAmount, address tokenOwner) external returns (address pair);
    function startAutoAuction(address swapContract) external;
    function registerTokenWithPair(address swapContract, address token, address tokenOwner, address pairAddress) external;
    
    // Development Fee Wallet Management
    function addDevelopmentFeeWallet(address wallet, uint256 percentage) external;
    function removeDevelopmentFeeWallet(address wallet) external;
    function updateDevelopmentFeeWalletPercentage(address wallet, uint256 newPercentage) external;
    function getDevelopmentFeeWalletsInfo() external view returns (
        address[] memory wallets,
        uint256[] memory percentages,
        bool[] memory activeStatuses
    );
    function getWalletPercentage(address wallet) external view returns (uint256);
    function distributeFeeToWallets(address token, uint256 amount) external;
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/ReentrancyGuard.sol)

pragma solidity ^0.8.20;

/**
 * @dev Contract module that helps prevent reentrant calls to a function.
 *
 * Inheriting from `ReentrancyGuard` will make the {nonReentrant} modifier
 * available, which can be applied to functions to make sure there are no nested
 * (reentrant) calls to them.
 *
 * Note that because there is a single `nonReentrant` guard, functions marked as
 * `nonReentrant` may not call one another. This can be worked around by making
 * those functions `private`, and then adding `external` `nonReentrant` entry
 * points to them.
 *
 * TIP: If EIP-1153 (transient storage) is available on the chain you're deploying at,
 * consider using {ReentrancyGuardTransient} instead.
 *
 * TIP: If you would like to learn more about reentrancy and alternative ways
 * to protect against it, check out our blog post
 * https://blog.openzeppelin.com/reentrancy-after-istanbul/[Reentrancy After Istanbul].
 */
abstract contract ReentrancyGuard {
    // Booleans are more expensive than uint256 or any type that takes up a full
    // word because each write operation emits an extra SLOAD to first read the
    // slot's contents, replace the bits taken up by the boolean, and then write
    // back. This is the compiler's defense against contract upgrades and
    // pointer aliasing, and it cannot be disabled.

    // The values being non-zero value makes deployment a bit more expensive,
    // but in exchange the refund on every call to nonReentrant will be lower in
    // amount. Since refunds are capped to a percentage of the total
    // transaction's gas, it is best to keep them low in cases like this one, to
    // increase the likelihood of the full refund coming into effect.
    uint256 private constant NOT_ENTERED = 1;
    uint256 private constant ENTERED = 2;

    uint256 private _status;

    /**
     * @dev Unauthorized reentrant call.
     */
    error ReentrancyGuardReentrantCall();

    constructor() {
        _status = NOT_ENTERED;
    }

    /**
     * @dev Prevents a contract from calling itself, directly or indirectly.
     * Calling a `nonReentrant` function from another `nonReentrant`
     * function is not supported. It is possible to prevent this from happening
     * by making the `nonReentrant` function external, and making it call a
     * `private` function that does the actual work.
     */
    modifier nonReentrant() {
        _nonReentrantBefore();
        _;
        _nonReentrantAfter();
    }

    function _nonReentrantBefore() private {
        // On the first call to nonReentrant, _status will be NOT_ENTERED
        if (_status == ENTERED) {
            revert ReentrancyGuardReentrantCall();
        }

        // Any calls to nonReentrant after this point will fail
        _status = ENTERED;
    }

    function _nonReentrantAfter() private {
        // By storing the original value once again, a refund is triggered (see
        // https://eips.ethereum.org/EIPS/eip-2200)
        _status = NOT_ENTERED;
    }

    /**
     * @dev Returns true if the reentrancy guard is currently set to "entered", which indicates there is a
     * `nonReentrant` function in the call stack.
     */
    function _reentrancyGuardEntered() internal view returns (bool) {
        return _status == ENTERED;
    }
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)

pragma solidity ^0.8.20;

/**
 * @dev Provides information about the current execution context, including the
 * sender of the transaction and its data. While these are generally available
 * via msg.sender and msg.data, they should not be accessed in such a direct
 * manner, since when dealing with meta-transactions the account sending and
 * paying for execution may not be the actual sender (as far as an application
 * is concerned).
 *
 * This contract is only required for intermediate, library-like contracts.
 */
abstract contract Context {
    function _msgSender() internal view virtual returns (address) {
        return msg.sender;
    }

    function _msgData() internal view virtual returns (bytes calldata) {
        return msg.data;
    }

    function _contextSuffixLength() internal view virtual returns (uint256) {
        return 0;
    }
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (token/ERC20/utils/SafeERC20.sol)

pragma solidity ^0.8.20;

import {IERC20} from "../IERC20.sol";
import {IERC1363} from "../../../interfaces/IERC1363.sol";

/**
 * @title SafeERC20
 * @dev Wrappers around ERC-20 operations that throw on failure (when the token
 * contract returns false). Tokens that return no value (and instead revert or
 * throw on failure) are also supported, non-reverting calls are assumed to be
 * successful.
 * To use this library you can add a `using SafeERC20 for IERC20;` statement to your contract,
 * which allows you to call the safe operations as `token.safeTransfer(...)`, etc.
 */
library SafeERC20 {
    /**
     * @dev An operation with an ERC-20 token failed.
     */
    error SafeERC20FailedOperation(address token);

    /**
     * @dev Indicates a failed `decreaseAllowance` request.
     */
    error SafeERC20FailedDecreaseAllowance(address spender, uint256 currentAllowance, uint256 requestedDecrease);

    /**
     * @dev Transfer `value` amount of `token` from the calling contract to `to`. If `token` returns no value,
     * non-reverting calls are assumed to be successful.
     */
    function safeTransfer(IERC20 token, address to, uint256 value) internal {
        _callOptionalReturn(token, abi.encodeCall(token.transfer, (to, value)));
    }

    /**
     * @dev Transfer `value` amount of `token` from `from` to `to`, spending the approval given by `from` to the
     * calling contract. If `token` returns no value, non-reverting calls are assumed to be successful.
     */
    function safeTransferFrom(IERC20 token, address from, address to, uint256 value) internal {
        _callOptionalReturn(token, abi.encodeCall(token.transferFrom, (from, to, value)));
    }

    /**
     * @dev Variant of {safeTransfer} that returns a bool instead of reverting if the operation is not successful.
     */
    function trySafeTransfer(IERC20 token, address to, uint256 value) internal returns (bool) {
        return _callOptionalReturnBool(token, abi.encodeCall(token.transfer, (to, value)));
    }

    /**
     * @dev Variant of {safeTransferFrom} that returns a bool instead of reverting if the operation is not successful.
     */
    function trySafeTransferFrom(IERC20 token, address from, address to, uint256 value) internal returns (bool) {
        return _callOptionalReturnBool(token, abi.encodeCall(token.transferFrom, (from, to, value)));
    }

    /**
     * @dev Increase the calling contract's allowance toward `spender` by `value`. If `token` returns no value,
     * non-reverting calls are assumed to be successful.
     *
     * IMPORTANT: If the token implements ERC-7674 (ERC-20 with temporary allowance), and if the "client"
     * smart contract uses ERC-7674 to set temporary allowances, then the "client" smart contract should avoid using
     * this function. Performing a {safeIncreaseAllowance} or {safeDecreaseAllowance} operation on a token contract
     * that has a non-zero temporary allowance (for that particular owner-spender) will result in unexpected behavior.
     */
    function safeIncreaseAllowance(IERC20 token, address spender, uint256 value) internal {
        uint256 oldAllowance = token.allowance(address(this), spender);
        forceApprove(token, spender, oldAllowance + value);
    }

    /**
     * @dev Decrease the calling contract's allowance toward `spender` by `requestedDecrease`. If `token` returns no
     * value, non-reverting calls are assumed to be successful.
     *
     * IMPORTANT: If the token implements ERC-7674 (ERC-20 with temporary allowance), and if the "client"
     * smart contract uses ERC-7674 to set temporary allowances, then the "client" smart contract should avoid using
     * this function. Performing a {safeIncreaseAllowance} or {safeDecreaseAllowance} operation on a token contract
     * that has a non-zero temporary allowance (for that particular owner-spender) will result in unexpected behavior.
     */
    function safeDecreaseAllowance(IERC20 token, address spender, uint256 requestedDecrease) internal {
        unchecked {
            uint256 currentAllowance = token.allowance(address(this), spender);
            if (currentAllowance < requestedDecrease) {
                revert SafeERC20FailedDecreaseAllowance(spender, currentAllowance, requestedDecrease);
            }
            forceApprove(token, spender, currentAllowance - requestedDecrease);
        }
    }

    /**
     * @dev Set the calling contract's allowance toward `spender` to `value`. If `token` returns no value,
     * non-reverting calls are assumed to be successful. Meant to be used with tokens that require the approval
     * to be set to zero before setting it to a non-zero value, such as USDT.
     *
     * NOTE: If the token implements ERC-7674, this function will not modify any temporary allowance. This function
     * only sets the "standard" allowance. Any temporary allowance will remain active, in addition to the value being
     * set here.
     */
    function forceApprove(IERC20 token, address spender, uint256 value) internal {
        bytes memory approvalCall = abi.encodeCall(token.approve, (spender, value));

        if (!_callOptionalReturnBool(token, approvalCall)) {
            _callOptionalReturn(token, abi.encodeCall(token.approve, (spender, 0)));
            _callOptionalReturn(token, approvalCall);
        }
    }

    /**
     * @dev Performs an {ERC1363} transferAndCall, with a fallback to the simple {ERC20} transfer if the target has no
     * code. This can be used to implement an {ERC721}-like safe transfer that rely on {ERC1363} checks when
     * targeting contracts.
     *
     * Reverts if the returned value is other than `true`.
     */
    function transferAndCallRelaxed(IERC1363 token, address to, uint256 value, bytes memory data) internal {
        if (to.code.length == 0) {
            safeTransfer(token, to, value);
        } else if (!token.transferAndCall(to, value, data)) {
            revert SafeERC20FailedOperation(address(token));
        }
    }

    /**
     * @dev Performs an {ERC1363} transferFromAndCall, with a fallback to the simple {ERC20} transferFrom if the target
     * has no code. This can be used to implement an {ERC721}-like safe transfer that rely on {ERC1363} checks when
     * targeting contracts.
     *
     * Reverts if the returned value is other than `true`.
     */
    function transferFromAndCallRelaxed(
        IERC1363 token,
        address from,
        address to,
        uint256 value,
        bytes memory data
    ) internal {
        if (to.code.length == 0) {
            safeTransferFrom(token, from, to, value);
        } else if (!token.transferFromAndCall(from, to, value, data)) {
            revert SafeERC20FailedOperation(address(token));
        }
    }

    /**
     * @dev Performs an {ERC1363} approveAndCall, with a fallback to the simple {ERC20} approve if the target has no
     * code. This can be used to implement an {ERC721}-like safe transfer that rely on {ERC1363} checks when
     * targeting contracts.
     *
     * NOTE: When the recipient address (`to`) has no code (i.e. is an EOA), this function behaves as {forceApprove}.
     * Opposedly, when the recipient address (`to`) has code, this function only attempts to call {ERC1363-approveAndCall}
     * once without retrying, and relies on the returned value to be true.
     *
     * Reverts if the returned value is other than `true`.
     */
    function approveAndCallRelaxed(IERC1363 token, address to, uint256 value, bytes memory data) internal {
        if (to.code.length == 0) {
            forceApprove(token, to, value);
        } else if (!token.approveAndCall(to, value, data)) {
            revert SafeERC20FailedOperation(address(token));
        }
    }

    /**
     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
     * on the return value: the return value is optional (but if data is returned, it must not be false).
     * @param token The token targeted by the call.
     * @param data The call data (encoded using abi.encode or one of its variants).
     *
     * This is a variant of {_callOptionalReturnBool} that reverts if call fails to meet the requirements.
     */
    function _callOptionalReturn(IERC20 token, bytes memory data) private {
        uint256 returnSize;
        uint256 returnValue;
        assembly ("memory-safe") {
            let success := call(gas(), token, 0, add(data, 0x20), mload(data), 0, 0x20)
            // bubble errors
            if iszero(success) {
                let ptr := mload(0x40)
                returndatacopy(ptr, 0, returndatasize())
                revert(ptr, returndatasize())
            }
            returnSize := returndatasize()
            returnValue := mload(0)
        }

        if (returnSize == 0 ? address(token).code.length == 0 : returnValue != 1) {
            revert SafeERC20FailedOperation(address(token));
        }
    }

    /**
     * @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
     * on the return value: the return value is optional (but if data is returned, it must not be false).
     * @param token The token targeted by the call.
     * @param data The call data (encoded using abi.encode or one of its variants).
     *
     * This is a variant of {_callOptionalReturn} that silently catches all reverts and returns a bool instead.
     */
    function _callOptionalReturnBool(IERC20 token, bytes memory data) private returns (bool) {
        bool success;
        uint256 returnSize;
        uint256 returnValue;
        assembly ("memory-safe") {
            success := call(gas(), token, 0, add(data, 0x20), mload(data), 0, 0x20)
            returnSize := returndatasize()
            returnValue := mload(0)
        }
        return success && (returnSize == 0 ? address(token).code.length > 0 : returnValue == 1);
    }
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (token/ERC20/extensions/IERC20Metadata.sol)

pragma solidity ^0.8.20;

import {IERC20} from "../IERC20.sol";

/**
 * @dev Interface for the optional metadata functions from the ERC-20 standard.
 */
interface IERC20Metadata is IERC20 {
    /**
     * @dev Returns the name of the token.
     */
    function name() external view returns (string memory);

    /**
     * @dev Returns the symbol of the token.
     */
    function symbol() external view returns (string memory);

    /**
     * @dev Returns the decimals places of the token.
     */
    function decimals() external view returns (uint8);
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (token/ERC20/IERC20.sol)

pragma solidity ^0.8.20;

/**
 * @dev Interface of the ERC-20 standard as defined in the ERC.
 */
interface IERC20 {
    /**
     * @dev Emitted when `value` tokens are moved from one account (`from`) to
     * another (`to`).
     *
     * Note that `value` may be zero.
     */
    event Transfer(address indexed from, address indexed to, uint256 value);

    /**
     * @dev Emitted when the allowance of a `spender` for an `owner` is set by
     * a call to {approve}. `value` is the new allowance.
     */
    event Approval(address indexed owner, address indexed spender, uint256 value);

    /**
     * @dev Returns the value of tokens in existence.
     */
    function totalSupply() external view returns (uint256);

    /**
     * @dev Returns the value of tokens owned by `account`.
     */
    function balanceOf(address account) external view returns (uint256);

    /**
     * @dev Moves a `value` amount of tokens from the caller's account to `to`.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transfer(address to, uint256 value) external returns (bool);

    /**
     * @dev Returns the remaining number of tokens that `spender` will be
     * allowed to spend on behalf of `owner` through {transferFrom}. This is
     * zero by default.
     *
     * This value changes when {approve} or {transferFrom} are called.
     */
    function allowance(address owner, address spender) external view returns (uint256);

    /**
     * @dev Sets a `value` amount of tokens as the allowance of `spender` over the
     * caller's tokens.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * IMPORTANT: Beware that changing an allowance with this method brings the risk
     * that someone may use both the old and the new allowance by unfortunate
     * transaction ordering. One possible solution to mitigate this race
     * condition is to first reduce the spender's allowance to 0 and set the
     * desired value afterwards:
     * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
     *
     * Emits an {Approval} event.
     */
    function approve(address spender, uint256 value) external returns (bool);

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to` using the
     * allowance mechanism. `value` is then deducted from the caller's
     * allowance.
     *
     * Returns a boolean value indicating whether the operation succeeded.
     *
     * Emits a {Transfer} event.
     */
    function transferFrom(address from, address to, uint256 value) external returns (bool);
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (token/ERC20/ERC20.sol)

pragma solidity ^0.8.20;

import {IERC20} from "./IERC20.sol";
import {IERC20Metadata} from "./extensions/IERC20Metadata.sol";
import {Context} from "../../utils/Context.sol";
import {IERC20Errors} from "../../interfaces/draft-IERC6093.sol";

/**
 * @dev Implementation of the {IERC20} interface.
 *
 * This implementation is agnostic to the way tokens are created. This means
 * that a supply mechanism has to be added in a derived contract using {_mint}.
 *
 * TIP: For a detailed writeup see our guide
 * https://forum.openzeppelin.com/t/how-to-implement-erc20-supply-mechanisms/226[How
 * to implement supply mechanisms].
 *
 * The default value of {decimals} is 18. To change this, you should override
 * this function so it returns a different value.
 *
 * We have followed general OpenZeppelin Contracts guidelines: functions revert
 * instead returning `false` on failure. This behavior is nonetheless
 * conventional and does not conflict with the expectations of ERC-20
 * applications.
 */
abstract contract ERC20 is Context, IERC20, IERC20Metadata, IERC20Errors {
    mapping(address account => uint256) private _balances;

    mapping(address account => mapping(address spender => uint256)) private _allowances;

    uint256 private _totalSupply;

    string private _name;
    string private _symbol;

    /**
     * @dev Sets the values for {name} and {symbol}.
     *
     * Both values are immutable: they can only be set once during construction.
     */
    constructor(string memory name_, string memory symbol_) {
        _name = name_;
        _symbol = symbol_;
    }

    /**
     * @dev Returns the name of the token.
     */
    function name() public view virtual returns (string memory) {
        return _name;
    }

    /**
     * @dev Returns the symbol of the token, usually a shorter version of the
     * name.
     */
    function symbol() public view virtual returns (string memory) {
        return _symbol;
    }

    /**
     * @dev Returns the number of decimals used to get its user representation.
     * For example, if `decimals` equals `2`, a balance of `505` tokens should
     * be displayed to a user as `5.05` (`505 / 10 ** 2`).
     *
     * Tokens usually opt for a value of 18, imitating the relationship between
     * Ether and Wei. This is the default value returned by this function, unless
     * it's overridden.
     *
     * NOTE: This information is only used for _display_ purposes: it in
     * no way affects any of the arithmetic of the contract, including
     * {IERC20-balanceOf} and {IERC20-transfer}.
     */
    function decimals() public view virtual returns (uint8) {
        return 18;
    }

    /**
     * @dev See {IERC20-totalSupply}.
     */
    function totalSupply() public view virtual returns (uint256) {
        return _totalSupply;
    }

    /**
     * @dev See {IERC20-balanceOf}.
     */
    function balanceOf(address account) public view virtual returns (uint256) {
        return _balances[account];
    }

    /**
     * @dev See {IERC20-transfer}.
     *
     * Requirements:
     *
     * - `to` cannot be the zero address.
     * - the caller must have a balance of at least `value`.
     */
    function transfer(address to, uint256 value) public virtual returns (bool) {
        address owner = _msgSender();
        _transfer(owner, to, value);
        return true;
    }

    /**
     * @dev See {IERC20-allowance}.
     */
    function allowance(address owner, address spender) public view virtual returns (uint256) {
        return _allowances[owner][spender];
    }

    /**
     * @dev See {IERC20-approve}.
     *
     * NOTE: If `value` is the maximum `uint256`, the allowance is not updated on
     * `transferFrom`. This is semantically equivalent to an infinite approval.
     *
     * Requirements:
     *
     * - `spender` cannot be the zero address.
     */
    function approve(address spender, uint256 value) public virtual returns (bool) {
        address owner = _msgSender();
        _approve(owner, spender, value);
        return true;
    }

    /**
     * @dev See {IERC20-transferFrom}.
     *
     * Skips emitting an {Approval} event indicating an allowance update. This is not
     * required by the ERC. See {xref-ERC20-_approve-address-address-uint256-bool-}[_approve].
     *
     * NOTE: Does not update the allowance if the current allowance
     * is the maximum `uint256`.
     *
     * Requirements:
     *
     * - `from` and `to` cannot be the zero address.
     * - `from` must have a balance of at least `value`.
     * - the caller must have allowance for ``from``'s tokens of at least
     * `value`.
     */
    function transferFrom(address from, address to, uint256 value) public virtual returns (bool) {
        address spender = _msgSender();
        _spendAllowance(from, spender, value);
        _transfer(from, to, value);
        return true;
    }

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to`.
     *
     * This internal function is equivalent to {transfer}, and can be used to
     * e.g. implement automatic token fees, slashing mechanisms, etc.
     *
     * Emits a {Transfer} event.
     *
     * NOTE: This function is not virtual, {_update} should be overridden instead.
     */
    function _transfer(address from, address to, uint256 value) internal {
        if (from == address(0)) {
            revert ERC20InvalidSender(address(0));
        }
        if (to == address(0)) {
            revert ERC20InvalidReceiver(address(0));
        }
        _update(from, to, value);
    }

    /**
     * @dev Transfers a `value` amount of tokens from `from` to `to`, or alternatively mints (or burns) if `from`
     * (or `to`) is the zero address. All customizations to transfers, mints, and burns should be done by overriding
     * this function.
     *
     * Emits a {Transfer} event.
     */
    function _update(address from, address to, uint256 value) internal virtual {
        if (from == address(0)) {
            // Overflow check required: The rest of the code assumes that totalSupply never overflows
            _totalSupply += value;
        } else {
            uint256 fromBalance = _balances[from];
            if (fromBalance < value) {
                revert ERC20InsufficientBalance(from, fromBalance, value);
            }
            unchecked {
                // Overflow not possible: value <= fromBalance <= totalSupply.
                _balances[from] = fromBalance - value;
            }
        }

        if (to == address(0)) {
            unchecked {
                // Overflow not possible: value <= totalSupply or value <= fromBalance <= totalSupply.
                _totalSupply -= value;
            }
        } else {
            unchecked {
                // Overflow not possible: balance + value is at most totalSupply, which we know fits into a uint256.
                _balances[to] += value;
            }
        }

        emit Transfer(from, to, value);
    }

    /**
     * @dev Creates a `value` amount of tokens and assigns them to `account`, by transferring it from address(0).
     * Relies on the `_update` mechanism
     *
     * Emits a {Transfer} event with `from` set to the zero address.
     *
     * NOTE: This function is not virtual, {_update} should be overridden instead.
     */
    function _mint(address account, uint256 value) internal {
        if (account == address(0)) {
            revert ERC20InvalidReceiver(address(0));
        }
        _update(address(0), account, value);
    }

    /**
     * @dev Destroys a `value` amount of tokens from `account`, lowering the total supply.
     * Relies on the `_update` mechanism.
     *
     * Emits a {Transfer} event with `to` set to the zero address.
     *
     * NOTE: This function is not virtual, {_update} should be overridden instead
     */
    function _burn(address account, uint256 value) internal {
        if (account == address(0)) {
            revert ERC20InvalidSender(address(0));
        }
        _update(account, address(0), value);
    }

    /**
     * @dev Sets `value` as the allowance of `spender` over the `owner`'s tokens.
     *
     * This internal function is equivalent to `approve`, and can be used to
     * e.g. set automatic allowances for certain subsystems, etc.
     *
     * Emits an {Approval} event.
     *
     * Requirements:
     *
     * - `owner` cannot be the zero address.
     * - `spender` cannot be the zero address.
     *
     * Overrides to this logic should be done to the variant with an additional `bool emitEvent` argument.
     */
    function _approve(address owner, address spender, uint256 value) internal {
        _approve(owner, spender, value, true);
    }

    /**
     * @dev Variant of {_approve} with an optional flag to enable or disable the {Approval} event.
     *
     * By default (when calling {_approve}) the flag is set to true. On the other hand, approval changes made by
     * `_spendAllowance` during the `transferFrom` operation set the flag to false. This saves gas by not emitting any
     * `Approval` event during `transferFrom` operations.
     *
     * Anyone who wishes to continue emitting `Approval` events on the`transferFrom` operation can force the flag to
     * true using the following override:
     *
     * ```solidity
     * function _approve(address owner, address spender, uint256 value, bool) internal virtual override {
     *     super._approve(owner, spender, value, true);
     * }
     * ```
     *
     * Requirements are the same as {_approve}.
     */
    function _approve(address owner, address spender, uint256 value, bool emitEvent) internal virtual {
        if (owner == address(0)) {
            revert ERC20InvalidApprover(address(0));
        }
        if (spender == address(0)) {
            revert ERC20InvalidSpender(address(0));
        }
        _allowances[owner][spender] = value;
        if (emitEvent) {
            emit Approval(owner, spender, value);
        }
    }

    /**
     * @dev Updates `owner`'s allowance for `spender` based on spent `value`.
     *
     * Does not update the allowance value in case of infinite allowance.
     * Revert if not enough allowance is available.
     *
     * Does not emit an {Approval} event.
     */
    function _spendAllowance(address owner, address spender, uint256 value) internal virtual {
        uint256 currentAllowance = allowance(owner, spender);
        if (currentAllowance < type(uint256).max) {
            if (currentAllowance < value) {
                revert ERC20InsufficientAllowance(spender, currentAllowance, value);
            }
            unchecked {
                _approve(owner, spender, currentAllowance - value, false);
            }
        }
    }
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (interfaces/draft-IERC6093.sol)
pragma solidity ^0.8.20;

/**
 * @dev Standard ERC-20 Errors
 * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC-20 tokens.
 */
interface IERC20Errors {
    /**
     * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param balance Current balance for the interacting account.
     * @param needed Minimum amount required to perform a transfer.
     */
    error ERC20InsufficientBalance(address sender, uint256 balance, uint256 needed);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error ERC20InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error ERC20InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the `spender`’s `allowance`. Used in transfers.
     * @param spender Address that may be allowed to operate on tokens without being their owner.
     * @param allowance Amount of tokens a `spender` is allowed to operate with.
     * @param needed Minimum amount required to perform a transfer.
     */
    error ERC20InsufficientAllowance(address spender, uint256 allowance, uint256 needed);

    /**
     * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
     * @param approver Address initiating an approval operation.
     */
    error ERC20InvalidApprover(address approver);

    /**
     * @dev Indicates a failure with the `spender` to be approved. Used in approvals.
     * @param spender Address that may be allowed to operate on tokens without being their owner.
     */
    error ERC20InvalidSpender(address spender);
}

/**
 * @dev Standard ERC-721 Errors
 * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC-721 tokens.
 */
interface IERC721Errors {
    /**
     * @dev Indicates that an address can't be an owner. For example, `address(0)` is a forbidden owner in ERC-20.
     * Used in balance queries.
     * @param owner Address of the current owner of a token.
     */
    error ERC721InvalidOwner(address owner);

    /**
     * @dev Indicates a `tokenId` whose `owner` is the zero address.
     * @param tokenId Identifier number of a token.
     */
    error ERC721NonexistentToken(uint256 tokenId);

    /**
     * @dev Indicates an error related to the ownership over a particular token. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param tokenId Identifier number of a token.
     * @param owner Address of the current owner of a token.
     */
    error ERC721IncorrectOwner(address sender, uint256 tokenId, address owner);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error ERC721InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error ERC721InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the `operator`’s approval. Used in transfers.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     * @param tokenId Identifier number of a token.
     */
    error ERC721InsufficientApproval(address operator, uint256 tokenId);

    /**
     * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
     * @param approver Address initiating an approval operation.
     */
    error ERC721InvalidApprover(address approver);

    /**
     * @dev Indicates a failure with the `operator` to be approved. Used in approvals.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     */
    error ERC721InvalidOperator(address operator);
}

/**
 * @dev Standard ERC-1155 Errors
 * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC-1155 tokens.
 */
interface IERC1155Errors {
    /**
     * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     * @param balance Current balance for the interacting account.
     * @param needed Minimum amount required to perform a transfer.
     * @param tokenId Identifier number of a token.
     */
    error ERC1155InsufficientBalance(address sender, uint256 balance, uint256 needed, uint256 tokenId);

    /**
     * @dev Indicates a failure with the token `sender`. Used in transfers.
     * @param sender Address whose tokens are being transferred.
     */
    error ERC1155InvalidSender(address sender);

    /**
     * @dev Indicates a failure with the token `receiver`. Used in transfers.
     * @param receiver Address to which tokens are being transferred.
     */
    error ERC1155InvalidReceiver(address receiver);

    /**
     * @dev Indicates a failure with the `operator`’s approval. Used in transfers.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     * @param owner Address of the current owner of a token.
     */
    error ERC1155MissingApprovalForAll(address operator, address owner);

    /**
     * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
     * @param approver Address initiating an approval operation.
     */
    error ERC1155InvalidApprover(address approver);

    /**
     * @dev Indicates a failure with the `operator` to be approved. Used in approvals.
     * @param operator Address that may be allowed to operate on tokens without being their owner.
     */
    error ERC1155InvalidOperator(address operator);

    /**
     * @dev Indicates an array length mismatch between ids and values in a safeBatchTransferFrom operation.
     * Used in batch transfers.
     * @param idsLength Length of the array of token identifiers
     * @param valuesLength Length of the array of token amounts
     */
    error ERC1155InvalidArrayLength(uint256 idsLength, uint256 valuesLength);
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC20.sol)

pragma solidity ^0.8.20;

import {IERC20} from "../token/ERC20/IERC20.sol";
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC165.sol)

pragma solidity ^0.8.20;

import {IERC165} from "../utils/introspection/IERC165.sol";
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (interfaces/IERC1363.sol)

pragma solidity ^0.8.20;

import {IERC20} from "./IERC20.sol";
import {IERC165} from "./IERC165.sol";

/**
 * @title IERC1363
 * @dev Interface of the ERC-1363 standard as defined in the https://eips.ethereum.org/EIPS/eip-1363[ERC-1363].
 *
 * Defines an extension interface for ERC-20 tokens that supports executing code on a recipient contract
 * after `transfer` or `transferFrom`, or code on a spender contract after `approve`, in a single transaction.
 */
interface IERC1363 is IERC20, IERC165 {
    /*
     * Note: the ERC-165 identifier for this interface is 0xb0202a11.
     * 0xb0202a11 ===
     *   bytes4(keccak256('transferAndCall(address,uint256)')) ^
     *   bytes4(keccak256('transferAndCall(address,uint256,bytes)')) ^
     *   bytes4(keccak256('transferFromAndCall(address,address,uint256)')) ^
     *   bytes4(keccak256('transferFromAndCall(address,address,uint256,bytes)')) ^
     *   bytes4(keccak256('approveAndCall(address,uint256)')) ^
     *   bytes4(keccak256('approveAndCall(address,uint256,bytes)'))
     */

    /**
     * @dev Moves a `value` amount of tokens from the caller's account to `to`
     * and then calls {IERC1363Receiver-onTransferReceived} on `to`.
     * @param to The address which you want to transfer to.
     * @param value The amount of tokens to be transferred.
     * @return A boolean value indicating whether the operation succeeded unless throwing.
     */
    function transferAndCall(address to, uint256 value) external returns (bool);

    /**
     * @dev Moves a `value` amount of tokens from the caller's account to `to`
     * and then calls {IERC1363Receiver-onTransferReceived} on `to`.
     * @param to The address which you want to transfer to.
     * @param value The amount of tokens to be transferred.
     * @param data Additional data with no specified format, sent in call to `to`.
     * @return A boolean value indicating whether the operation succeeded unless throwing.
     */
    function transferAndCall(address to, uint256 value, bytes calldata data) external returns (bool);

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to` using the allowance mechanism
     * and then calls {IERC1363Receiver-onTransferReceived} on `to`.
     * @param from The address which you want to send tokens from.
     * @param to The address which you want to transfer to.
     * @param value The amount of tokens to be transferred.
     * @return A boolean value indicating whether the operation succeeded unless throwing.
     */
    function transferFromAndCall(address from, address to, uint256 value) external returns (bool);

    /**
     * @dev Moves a `value` amount of tokens from `from` to `to` using the allowance mechanism
     * and then calls {IERC1363Receiver-onTransferReceived} on `to`.
     * @param from The address which you want to send tokens from.
     * @param to The address which you want to transfer to.
     * @param value The amount of tokens to be transferred.
     * @param data Additional data with no specified format, sent in call to `to`.
     * @return A boolean value indicating whether the operation succeeded unless throwing.
     */
    function transferFromAndCall(address from, address to, uint256 value, bytes calldata data) external returns (bool);

    /**
     * @dev Sets a `value` amount of tokens as the allowance of `spender` over the
     * caller's tokens and then calls {IERC1363Spender-onApprovalReceived} on `spender`.
     * @param spender The address which will spend the funds.
     * @param value The amount of tokens to be spent.
     * @return A boolean value indicating whether the operation succeeded unless throwing.
     */
    function approveAndCall(address spender, uint256 value) external returns (bool);

    /**
     * @dev Sets a `value` amount of tokens as the allowance of `spender` over the
     * caller's tokens and then calls {IERC1363Spender-onApprovalReceived} on `spender`.
     * @param spender The address which will spend the funds.
     * @param value The amount of tokens to be spent.
     * @param data Additional data with no specified format, sent in call to `spender`.
     * @return A boolean value indicating whether the operation succeeded unless throwing.
     */
    function approveAndCall(address spender, uint256 value, bytes calldata data) external returns (bool);
}
          

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/Ownable.sol)

pragma solidity ^0.8.20;

import {Context} from "../utils/Context.sol";

/**
 * @dev Contract module which provides a basic access control mechanism, where
 * there is an account (an owner) that can be granted exclusive access to
 * specific functions.
 *
 * The initial owner is set to the address provided by the deployer. This can
 * later be changed with {transferOwnership}.
 *
 * This module is used through inheritance. It will make available the modifier
 * `onlyOwner`, which can be applied to your functions to restrict their use to
 * the owner.
 */
abstract contract Ownable is Context {
    address private _owner;

    /**
     * @dev The caller account is not authorized to perform an operation.
     */
    error OwnableUnauthorizedAccount(address account);

    /**
     * @dev The owner is not a valid owner account. (eg. `address(0)`)
     */
    error OwnableInvalidOwner(address owner);

    event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);

    /**
     * @dev Initializes the contract setting the address provided by the deployer as the initial owner.
     */
    constructor(address initialOwner) {
        
        _transferOwnership(initialOwner);
    }

    /**
     * @dev Throws if called by any account other than the owner.
     */
    modifier onlyOwner() {
        _checkOwner();
        _;
    }

    /**
     * @dev Returns the address of the current owner.
     */
    function owner() public view virtual returns (address) {
        return _owner;
    }

    /**
     * @dev Throws if the sender is not the owner.
     */
    function _checkOwner() internal view virtual {
        if (owner() != _msgSender()) {
            revert OwnableUnauthorizedAccount(_msgSender());
        }
    }

    /**
     * @dev Leaves the contract without owner. It will not be possible to call
     * `onlyOwner` functions. Can only be called by the current owner.
     *
     * NOTE: Renouncing ownership will leave the contract without an owner,
     * thereby disabling any functionality that is only available to the owner.
     */
    function renounceOwnership() public virtual onlyOwner {
        _transferOwnership(address(0));
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`).
     * Can only be called by the current owner.
     */
    function transferOwnership(address newOwner) public virtual onlyOwner {
        if (newOwner == address(0)) {
            revert OwnableInvalidOwner(address(0));
        }
        _transferOwnership(newOwner);
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`).
     * Internal function without access restriction.
     */
    function _transferOwnership(address newOwner) internal virtual {
        address oldOwner = _owner;
        _owner = newOwner;
        emit OwnershipTransferred(oldOwner, newOwner);
    }
}