{"file_path":"contracts/permissions/PermissionManager.sol","creation_status":"success","source_code":"// SPDX-License-Identifier: MIT\n\npragma solidity ^0.8.20;\n\nimport { IAuthority      } from \"@openzeppelin/contracts/access/manager/IAuthority.sol\";\nimport { Initializable   } from \"@openzeppelin/contracts/proxy/utils/Initializable.sol\";\nimport { UUPSUpgradeable } from \"@openzeppelin/contracts/proxy/utils/UUPSUpgradeable.sol\";\nimport { Multicall       } from \"@openzeppelin/contracts/utils/Multicall.sol\";\nimport { Masks           } from \"../utils/Masks.sol\";\n\n/// @custom:security-contact security@spiko.tech\n/// @custom:oz-upgrades-unsafe-allow state-variable-immutable\ncontract PermissionManager is\n    IAuthority,\n    Initializable,\n    UUPSUpgradeable,\n    Multicall\n{\n    using Masks for *;\n\n    uint8      public constant  ADMIN       = 0x00;\n    uint8      public constant  PUBLIC      = 0xFF;\n    Masks.Mask public immutable ADMIN_MASK  = ADMIN.toMask();\n    Masks.Mask public immutable PUBLIC_MASK = PUBLIC.toMask();\n\n    mapping(address =>                   Masks.Mask ) private _permissions;\n    mapping(address => mapping(bytes4 => Masks.Mask)) private _restrictions;\n    mapping(uint8   =>                   Masks.Mask ) private _admin;\n\n    event GroupAdded(address indexed user, uint8 indexed group);\n    event GroupRemoved(address indexed user, uint8 indexed group);\n    event GroupAdmins(uint8 indexed group, Masks.Mask admins);\n    event Requirements(address indexed target, bytes4 indexed selector, Masks.Mask groups);\n\n    error MissingPermissions(address user, Masks.Mask permissions, Masks.Mask restriction);\n\n    modifier onlyRole(Masks.Mask restriction) {\n        Masks.Mask permissions = getGroups(msg.sender);\n\n        if (permissions.intersection(restriction).isEmpty()) {\n            revert MissingPermissions(msg.sender, permissions, restriction);\n        }\n\n        _;\n    }\n\n    /// @custom:oz-upgrades-unsafe-allow constructor\n    constructor() {\n        _disableInitializers();\n    }\n\n    function initialize(address admin) public initializer() {\n        _addGroup(admin, 0);\n    }\n\n    // Getters\n    function canCall(address caller, address target, bytes4 selector) public view returns (bool) {\n        return !getGroups(caller).intersection(getRequirements(target, selector)).isEmpty();\n    }\n\n    function getGroups(address user) public view returns (Masks.Mask) {\n        return _permissions[user].union(PUBLIC_MASK);\n    }\n\n    function getGroupAdmins(uint8 group) public view returns (Masks.Mask) {\n        return _admin[group].union(ADMIN_MASK); // Admin have power over all groups\n    }\n\n    function getRequirements(address target, bytes4 selector) public view returns (Masks.Mask) {\n        return _restrictions[target][selector].union(ADMIN_MASK); // Admins can call an function\n    }\n\n    // Group management\n    function addGroup(address user, uint8 group) public onlyRole(getGroupAdmins(group)) {\n        _addGroup(user, group);\n    }\n\n    function remGroup(address user, uint8 group) public onlyRole(getGroupAdmins(group)) {\n        _remGroup(user, group);\n    }\n\n    function _addGroup(address user, uint8 group) internal {\n        _permissions[user] = _permissions[user].union(group.toMask());\n        emit GroupAdded(user, group);\n    }\n\n    function _remGroup(address user, uint8 group) internal {\n        _permissions[user] = _permissions[user].difference(group.toMask());\n        emit GroupRemoved(user, group);\n    }\n\n    // Group admin management\n    function setGroupAdmins(uint8 group, uint8[] calldata admins) public onlyRole(ADMIN_MASK) {\n        _setGroupAdmins(group, admins.toMask());\n    }\n\n    function _setGroupAdmins(uint8 group, Masks.Mask admins) internal {\n        _admin[group] = admins;\n        emit GroupAdmins(group, admins);\n    }\n\n    // Requirement management\n    function setRequirements(address target, bytes4[] calldata selectors, uint8[] calldata groups) public onlyRole(ADMIN_MASK) {\n        Masks.Mask mask = groups.toMask();\n        for (uint256 i = 0; i < selectors.length; ++i) {\n            _setRequirements(target, selectors[i], mask);\n        }\n    }\n\n    function _setRequirements(address target, bytes4 selector, Masks.Mask groups) internal {\n        _restrictions[target][selector] = groups;\n        emit Requirements(target, selector, groups);\n    }\n\n    // upgradeability\n    function _authorizeUpgrade(address newImplementation) internal virtual override onlyRole(ADMIN_MASK) {}\n}\n","deployed_bytecode":"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","optimization_enabled":true,"verified_twin_address_hash":null,"is_verified":true,"compiler_settings":{"evmVersion":"cancun","libraries":{},"metadata":{"bytecodeHash":"ipfs"},"optimizer":{"enabled":true,"runs":200},"remappings":[]},"optimization_runs":200,"sourcify_repo_url":"https://repo.sourcify.dev/contracts/full_match/1/0xd3f5f1524e1A472B51374A3ff41B8936EB5B658E/","decoded_constructor_args":null,"compiler_version":"0.8.24+commit.e11b9ed9","is_verified_via_verifier_alliance":false,"verified_at":"2024-06-21T08:51:00.441307Z","implementations":[],"proxy_type":null,"external_libraries":[],"creation_bytecode":"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","name":"PermissionManager","is_blueprint":false,"license_type":"none","is_fully_verified":true,"is_verified_via_eth_bytecode_db":true,"language":"solidity","evm_version":"cancun","can_be_visualized_via_sol2uml":true,"is_verified_via_sourcify":true,"additional_sources":[{"file_path":"@openzeppelin/contracts/access/manager/IAuthority.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (access/manager/IAuthority.sol)\n\npragma solidity ^0.8.20;\n\n/**\n * @dev Standard interface for permissioning originally defined in Dappsys.\n */\ninterface IAuthority {\n    /**\n     * @dev Returns true if the caller can invoke on a target the function identified by a function selector.\n     */\n    function canCall(address caller, address target, bytes4 selector) external view returns (bool allowed);\n}\n"},{"file_path":"@openzeppelin/contracts/interfaces/draft-IERC1822.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/draft-IERC1822.sol)\n\npragma solidity ^0.8.20;\n\n/**\n * @dev ERC1822: Universal Upgradeable Proxy Standard (UUPS) documents a method for upgradeability through a simplified\n * proxy whose upgrades are fully controlled by the current implementation.\n */\ninterface IERC1822Proxiable {\n    /**\n     * @dev Returns the storage slot that the proxiable contract assumes is being used to store the implementation\n     * address.\n     *\n     * IMPORTANT: A proxy pointing at a proxiable contract should not be considered proxiable itself, because this risks\n     * bricking a proxy that upgrades to it, by delegating to itself until out of gas. Thus it is critical that this\n     * function revert if invoked through a proxy.\n     */\n    function proxiableUUID() external view returns (bytes32);\n}\n"},{"file_path":"@openzeppelin/contracts/proxy/ERC1967/ERC1967Utils.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (proxy/ERC1967/ERC1967Utils.sol)\n\npragma solidity ^0.8.20;\n\nimport {IBeacon} from \"../beacon/IBeacon.sol\";\nimport {Address} from \"../../utils/Address.sol\";\nimport {StorageSlot} from \"../../utils/StorageSlot.sol\";\n\n/**\n * @dev This abstract contract provides getters and event emitting update functions for\n * https://eips.ethereum.org/EIPS/eip-1967[EIP1967] slots.\n */\nlibrary ERC1967Utils {\n    // We re-declare ERC-1967 events here because they can't be used directly from IERC1967.\n    // This will be fixed in Solidity 0.8.21. At that point we should remove these events.\n    /**\n     * @dev Emitted when the implementation is upgraded.\n     */\n    event Upgraded(address indexed implementation);\n\n    /**\n     * @dev Emitted when the admin account has changed.\n     */\n    event AdminChanged(address previousAdmin, address newAdmin);\n\n    /**\n     * @dev Emitted when the beacon is changed.\n     */\n    event BeaconUpgraded(address indexed beacon);\n\n    /**\n     * @dev Storage slot with the address of the current implementation.\n     * This is the keccak-256 hash of \"eip1967.proxy.implementation\" subtracted by 1.\n     */\n    // solhint-disable-next-line private-vars-leading-underscore\n    bytes32 internal constant IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;\n\n    /**\n     * @dev The `implementation` of the proxy is invalid.\n     */\n    error ERC1967InvalidImplementation(address implementation);\n\n    /**\n     * @dev The `admin` of the proxy is invalid.\n     */\n    error ERC1967InvalidAdmin(address admin);\n\n    /**\n     * @dev The `beacon` of the proxy is invalid.\n     */\n    error ERC1967InvalidBeacon(address beacon);\n\n    /**\n     * @dev An upgrade function sees `msg.value > 0` that may be lost.\n     */\n    error ERC1967NonPayable();\n\n    /**\n     * @dev Returns the current implementation address.\n     */\n    function getImplementation() internal view returns (address) {\n        return StorageSlot.getAddressSlot(IMPLEMENTATION_SLOT).value;\n    }\n\n    /**\n     * @dev Stores a new address in the EIP1967 implementation slot.\n     */\n    function _setImplementation(address newImplementation) private {\n        if (newImplementation.code.length == 0) {\n            revert ERC1967InvalidImplementation(newImplementation);\n        }\n        StorageSlot.getAddressSlot(IMPLEMENTATION_SLOT).value = newImplementation;\n    }\n\n    /**\n     * @dev Performs implementation upgrade with additional setup call if data is nonempty.\n     * This function is payable only if the setup call is performed, otherwise `msg.value` is rejected\n     * to avoid stuck value in the contract.\n     *\n     * Emits an {IERC1967-Upgraded} event.\n     */\n    function upgradeToAndCall(address newImplementation, bytes memory data) internal {\n        _setImplementation(newImplementation);\n        emit Upgraded(newImplementation);\n\n        if (data.length > 0) {\n            Address.functionDelegateCall(newImplementation, data);\n        } else {\n            _checkNonPayable();\n        }\n    }\n\n    /**\n     * @dev Storage slot with the admin of the contract.\n     * This is the keccak-256 hash of \"eip1967.proxy.admin\" subtracted by 1.\n     */\n    // solhint-disable-next-line private-vars-leading-underscore\n    bytes32 internal constant ADMIN_SLOT = 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103;\n\n    /**\n     * @dev Returns the current admin.\n     *\n     * TIP: To get this value clients can read directly from the storage slot shown below (specified by EIP1967) using\n     * the https://eth.wiki/json-rpc/API#eth_getstorageat[`eth_getStorageAt`] RPC call.\n     * `0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103`\n     */\n    function getAdmin() internal view returns (address) {\n        return StorageSlot.getAddressSlot(ADMIN_SLOT).value;\n    }\n\n    /**\n     * @dev Stores a new address in the EIP1967 admin slot.\n     */\n    function _setAdmin(address newAdmin) private {\n        if (newAdmin == address(0)) {\n            revert ERC1967InvalidAdmin(address(0));\n        }\n        StorageSlot.getAddressSlot(ADMIN_SLOT).value = newAdmin;\n    }\n\n    /**\n     * @dev Changes the admin of the proxy.\n     *\n     * Emits an {IERC1967-AdminChanged} event.\n     */\n    function changeAdmin(address newAdmin) internal {\n        emit AdminChanged(getAdmin(), newAdmin);\n        _setAdmin(newAdmin);\n    }\n\n    /**\n     * @dev The storage slot of the UpgradeableBeacon contract which defines the implementation for this proxy.\n     * This is the keccak-256 hash of \"eip1967.proxy.beacon\" subtracted by 1.\n     */\n    // solhint-disable-next-line private-vars-leading-underscore\n    bytes32 internal constant BEACON_SLOT = 0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50;\n\n    /**\n     * @dev Returns the current beacon.\n     */\n    function getBeacon() internal view returns (address) {\n        return StorageSlot.getAddressSlot(BEACON_SLOT).value;\n    }\n\n    /**\n     * @dev Stores a new beacon in the EIP1967 beacon slot.\n     */\n    function _setBeacon(address newBeacon) private {\n        if (newBeacon.code.length == 0) {\n            revert ERC1967InvalidBeacon(newBeacon);\n        }\n\n        StorageSlot.getAddressSlot(BEACON_SLOT).value = newBeacon;\n\n        address beaconImplementation = IBeacon(newBeacon).implementation();\n        if (beaconImplementation.code.length == 0) {\n            revert ERC1967InvalidImplementation(beaconImplementation);\n        }\n    }\n\n    /**\n     * @dev Change the beacon and trigger a setup call if data is nonempty.\n     * This function is payable only if the setup call is performed, otherwise `msg.value` is rejected\n     * to avoid stuck value in the contract.\n     *\n     * Emits an {IERC1967-BeaconUpgraded} event.\n     *\n     * CAUTION: Invoking this function has no effect on an instance of {BeaconProxy} since v5, since\n     * it uses an immutable beacon without looking at the value of the ERC-1967 beacon slot for\n     * efficiency.\n     */\n    function upgradeBeaconToAndCall(address newBeacon, bytes memory data) internal {\n        _setBeacon(newBeacon);\n        emit BeaconUpgraded(newBeacon);\n\n        if (data.length > 0) {\n            Address.functionDelegateCall(IBeacon(newBeacon).implementation(), data);\n        } else {\n            _checkNonPayable();\n        }\n    }\n\n    /**\n     * @dev Reverts if `msg.value` is not zero. It can be used to avoid `msg.value` stuck in the contract\n     * if an upgrade doesn't perform an initialization call.\n     */\n    function _checkNonPayable() private {\n        if (msg.value > 0) {\n            revert ERC1967NonPayable();\n        }\n    }\n}\n"},{"file_path":"@openzeppelin/contracts/proxy/beacon/IBeacon.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (proxy/beacon/IBeacon.sol)\n\npragma solidity ^0.8.20;\n\n/**\n * @dev This is the interface that {BeaconProxy} expects of its beacon.\n */\ninterface IBeacon {\n    /**\n     * @dev Must return an address that can be used as a delegate call target.\n     *\n     * {UpgradeableBeacon} will check that this address is a contract.\n     */\n    function implementation() external view returns (address);\n}\n"},{"file_path":"@openzeppelin/contracts/proxy/utils/Initializable.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (proxy/utils/Initializable.sol)\n\npragma solidity ^0.8.20;\n\n/**\n * @dev This is a base contract to aid in writing upgradeable contracts, or any kind of contract that will be deployed\n * behind a proxy. Since proxied contracts do not make use of a constructor, it's common to move constructor logic to an\n * external initializer function, usually called `initialize`. It then becomes necessary to protect this initializer\n * function so it can only be called once. The {initializer} modifier provided by this contract will have this effect.\n *\n * The initialization functions use a version number. Once a version number is used, it is consumed and cannot be\n * reused. This mechanism prevents re-execution of each \"step\" but allows the creation of new initialization steps in\n * case an upgrade adds a module that needs to be initialized.\n *\n * For example:\n *\n * [.hljs-theme-light.nopadding]\n * ```solidity\n * contract MyToken is ERC20Upgradeable {\n *     function initialize() initializer public {\n *         __ERC20_init(\"MyToken\", \"MTK\");\n *     }\n * }\n *\n * contract MyTokenV2 is MyToken, ERC20PermitUpgradeable {\n *     function initializeV2() reinitializer(2) public {\n *         __ERC20Permit_init(\"MyToken\");\n *     }\n * }\n * ```\n *\n * TIP: To avoid leaving the proxy in an uninitialized state, the initializer function should be called as early as\n * possible by providing the encoded function call as the `_data` argument to {ERC1967Proxy-constructor}.\n *\n * CAUTION: When used with inheritance, manual care must be taken to not invoke a parent initializer twice, or to ensure\n * that all initializers are idempotent. This is not verified automatically as constructors are by Solidity.\n *\n * [CAUTION]\n * ====\n * Avoid leaving a contract uninitialized.\n *\n * An uninitialized contract can be taken over by an attacker. This applies to both a proxy and its implementation\n * contract, which may impact the proxy. To prevent the implementation contract from being used, you should invoke\n * the {_disableInitializers} function in the constructor to automatically lock it when it is deployed:\n *\n * [.hljs-theme-light.nopadding]\n * ```\n * /// @custom:oz-upgrades-unsafe-allow constructor\n * constructor() {\n *     _disableInitializers();\n * }\n * ```\n * ====\n */\nabstract contract Initializable {\n    /**\n     * @dev Storage of the initializable contract.\n     *\n     * It's implemented on a custom ERC-7201 namespace to reduce the risk of storage collisions\n     * when using with upgradeable contracts.\n     *\n     * @custom:storage-location erc7201:openzeppelin.storage.Initializable\n     */\n    struct InitializableStorage {\n        /**\n         * @dev Indicates that the contract has been initialized.\n         */\n        uint64 _initialized;\n        /**\n         * @dev Indicates that the contract is in the process of being initialized.\n         */\n        bool _initializing;\n    }\n\n    // keccak256(abi.encode(uint256(keccak256(\"openzeppelin.storage.Initializable\")) - 1)) & ~bytes32(uint256(0xff))\n    bytes32 private constant INITIALIZABLE_STORAGE = 0xf0c57e16840df040f15088dc2f81fe391c3923bec73e23a9662efc9c229c6a00;\n\n    /**\n     * @dev The contract is already initialized.\n     */\n    error InvalidInitialization();\n\n    /**\n     * @dev The contract is not initializing.\n     */\n    error NotInitializing();\n\n    /**\n     * @dev Triggered when the contract has been initialized or reinitialized.\n     */\n    event Initialized(uint64 version);\n\n    /**\n     * @dev A modifier that defines a protected initializer function that can be invoked at most once. In its scope,\n     * `onlyInitializing` functions can be used to initialize parent contracts.\n     *\n     * Similar to `reinitializer(1)`, except that in the context of a constructor an `initializer` may be invoked any\n     * number of times. This behavior in the constructor can be useful during testing and is not expected to be used in\n     * production.\n     *\n     * Emits an {Initialized} event.\n     */\n    modifier initializer() {\n        // solhint-disable-next-line var-name-mixedcase\n        InitializableStorage storage $ = _getInitializableStorage();\n\n        // Cache values to avoid duplicated sloads\n        bool isTopLevelCall = !$._initializing;\n        uint64 initialized = $._initialized;\n\n        // Allowed calls:\n        // - initialSetup: the contract is not in the initializing state and no previous version was\n        //                 initialized\n        // - construction: the contract is initialized at version 1 (no reininitialization) and the\n        //                 current contract is just being deployed\n        bool initialSetup = initialized == 0 && isTopLevelCall;\n        bool construction = initialized == 1 && address(this).code.length == 0;\n\n        if (!initialSetup && !construction) {\n            revert InvalidInitialization();\n        }\n        $._initialized = 1;\n        if (isTopLevelCall) {\n            $._initializing = true;\n        }\n        _;\n        if (isTopLevelCall) {\n            $._initializing = false;\n            emit Initialized(1);\n        }\n    }\n\n    /**\n     * @dev A modifier that defines a protected reinitializer function that can be invoked at most once, and only if the\n     * contract hasn't been initialized to a greater version before. In its scope, `onlyInitializing` functions can be\n     * used to initialize parent contracts.\n     *\n     * A reinitializer may be used after the original initialization step. This is essential to configure modules that\n     * are added through upgrades and that require initialization.\n     *\n     * When `version` is 1, this modifier is similar to `initializer`, except that functions marked with `reinitializer`\n     * cannot be nested. If one is invoked in the context of another, execution will revert.\n     *\n     * Note that versions can jump in increments greater than 1; this implies that if multiple reinitializers coexist in\n     * a contract, executing them in the right order is up to the developer or operator.\n     *\n     * WARNING: Setting the version to 2**64 - 1 will prevent any future reinitialization.\n     *\n     * Emits an {Initialized} event.\n     */\n    modifier reinitializer(uint64 version) {\n        // solhint-disable-next-line var-name-mixedcase\n        InitializableStorage storage $ = _getInitializableStorage();\n\n        if ($._initializing || $._initialized >= version) {\n            revert InvalidInitialization();\n        }\n        $._initialized = version;\n        $._initializing = true;\n        _;\n        $._initializing = false;\n        emit Initialized(version);\n    }\n\n    /**\n     * @dev Modifier to protect an initialization function so that it can only be invoked by functions with the\n     * {initializer} and {reinitializer} modifiers, directly or indirectly.\n     */\n    modifier onlyInitializing() {\n        _checkInitializing();\n        _;\n    }\n\n    /**\n     * @dev Reverts if the contract is not in an initializing state. See {onlyInitializing}.\n     */\n    function _checkInitializing() internal view virtual {\n        if (!_isInitializing()) {\n            revert NotInitializing();\n        }\n    }\n\n    /**\n     * @dev Locks the contract, preventing any future reinitialization. This cannot be part of an initializer call.\n     * Calling this in the constructor of a contract will prevent that contract from being initialized or reinitialized\n     * to any version. It is recommended to use this to lock implementation contracts that are designed to be called\n     * through proxies.\n     *\n     * Emits an {Initialized} event the first time it is successfully executed.\n     */\n    function _disableInitializers() internal virtual {\n        // solhint-disable-next-line var-name-mixedcase\n        InitializableStorage storage $ = _getInitializableStorage();\n\n        if ($._initializing) {\n            revert InvalidInitialization();\n        }\n        if ($._initialized != type(uint64).max) {\n            $._initialized = type(uint64).max;\n            emit Initialized(type(uint64).max);\n        }\n    }\n\n    /**\n     * @dev Returns the highest version that has been initialized. See {reinitializer}.\n     */\n    function _getInitializedVersion() internal view returns (uint64) {\n        return _getInitializableStorage()._initialized;\n    }\n\n    /**\n     * @dev Returns `true` if the contract is currently initializing. See {onlyInitializing}.\n     */\n    function _isInitializing() internal view returns (bool) {\n        return _getInitializableStorage()._initializing;\n    }\n\n    /**\n     * @dev Returns a pointer to the storage namespace.\n     */\n    // solhint-disable-next-line var-name-mixedcase\n    function _getInitializableStorage() private pure returns (InitializableStorage storage $) {\n        assembly {\n            $.slot := INITIALIZABLE_STORAGE\n        }\n    }\n}\n"},{"file_path":"@openzeppelin/contracts/proxy/utils/UUPSUpgradeable.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (proxy/utils/UUPSUpgradeable.sol)\n\npragma solidity ^0.8.20;\n\nimport {IERC1822Proxiable} from \"../../interfaces/draft-IERC1822.sol\";\nimport {ERC1967Utils} from \"../ERC1967/ERC1967Utils.sol\";\n\n/**\n * @dev An upgradeability mechanism designed for UUPS proxies. The functions included here can perform an upgrade of an\n * {ERC1967Proxy}, when this contract is set as the implementation behind such a proxy.\n *\n * A security mechanism ensures that an upgrade does not turn off upgradeability accidentally, although this risk is\n * reinstated if the upgrade retains upgradeability but removes the security mechanism, e.g. by replacing\n * `UUPSUpgradeable` with a custom implementation of upgrades.\n *\n * The {_authorizeUpgrade} function must be overridden to include access restriction to the upgrade mechanism.\n */\nabstract contract UUPSUpgradeable is IERC1822Proxiable {\n    /// @custom:oz-upgrades-unsafe-allow state-variable-immutable\n    address private immutable __self = address(this);\n\n    /**\n     * @dev The version of the upgrade interface of the contract. If this getter is missing, both `upgradeTo(address)`\n     * and `upgradeToAndCall(address,bytes)` are present, and `upgradeTo` must be used if no function should be called,\n     * while `upgradeToAndCall` will invoke the `receive` function if the second argument is the empty byte string.\n     * If the getter returns `\"5.0.0\"`, only `upgradeToAndCall(address,bytes)` is present, and the second argument must\n     * be the empty byte string if no function should be called, making it impossible to invoke the `receive` function\n     * during an upgrade.\n     */\n    string public constant UPGRADE_INTERFACE_VERSION = \"5.0.0\";\n\n    /**\n     * @dev The call is from an unauthorized context.\n     */\n    error UUPSUnauthorizedCallContext();\n\n    /**\n     * @dev The storage `slot` is unsupported as a UUID.\n     */\n    error UUPSUnsupportedProxiableUUID(bytes32 slot);\n\n    /**\n     * @dev Check that the execution is being performed through a delegatecall call and that the execution context is\n     * a proxy contract with an implementation (as defined in ERC1967) pointing to self. This should only be the case\n     * for UUPS and transparent proxies that are using the current contract as their implementation. Execution of a\n     * function through ERC1167 minimal proxies (clones) would not normally pass this test, but is not guaranteed to\n     * fail.\n     */\n    modifier onlyProxy() {\n        _checkProxy();\n        _;\n    }\n\n    /**\n     * @dev Check that the execution is not being performed through a delegate call. This allows a function to be\n     * callable on the implementing contract but not through proxies.\n     */\n    modifier notDelegated() {\n        _checkNotDelegated();\n        _;\n    }\n\n    /**\n     * @dev Implementation of the ERC1822 {proxiableUUID} function. This returns the storage slot used by the\n     * implementation. It is used to validate the implementation's compatibility when performing an upgrade.\n     *\n     * IMPORTANT: A proxy pointing at a proxiable contract should not be considered proxiable itself, because this risks\n     * bricking a proxy that upgrades to it, by delegating to itself until out of gas. Thus it is critical that this\n     * function revert if invoked through a proxy. This is guaranteed by the `notDelegated` modifier.\n     */\n    function proxiableUUID() external view virtual notDelegated returns (bytes32) {\n        return ERC1967Utils.IMPLEMENTATION_SLOT;\n    }\n\n    /**\n     * @dev Upgrade the implementation of the proxy to `newImplementation`, and subsequently execute the function call\n     * encoded in `data`.\n     *\n     * Calls {_authorizeUpgrade}.\n     *\n     * Emits an {Upgraded} event.\n     *\n     * @custom:oz-upgrades-unsafe-allow-reachable delegatecall\n     */\n    function upgradeToAndCall(address newImplementation, bytes memory data) public payable virtual onlyProxy {\n        _authorizeUpgrade(newImplementation);\n        _upgradeToAndCallUUPS(newImplementation, data);\n    }\n\n    /**\n     * @dev Reverts if the execution is not performed via delegatecall or the execution\n     * context is not of a proxy with an ERC1967-compliant implementation pointing to self.\n     * See {_onlyProxy}.\n     */\n    function _checkProxy() internal view virtual {\n        if (\n            address(this) == __self || // Must be called through delegatecall\n            ERC1967Utils.getImplementation() != __self // Must be called through an active proxy\n        ) {\n            revert UUPSUnauthorizedCallContext();\n        }\n    }\n\n    /**\n     * @dev Reverts if the execution is performed via delegatecall.\n     * See {notDelegated}.\n     */\n    function _checkNotDelegated() internal view virtual {\n        if (address(this) != __self) {\n            // Must not be called through delegatecall\n            revert UUPSUnauthorizedCallContext();\n        }\n    }\n\n    /**\n     * @dev Function that should revert when `msg.sender` is not authorized to upgrade the contract. Called by\n     * {upgradeToAndCall}.\n     *\n     * Normally, this function will use an xref:access.adoc[access control] modifier such as {Ownable-onlyOwner}.\n     *\n     * ```solidity\n     * function _authorizeUpgrade(address) internal onlyOwner {}\n     * ```\n     */\n    function _authorizeUpgrade(address newImplementation) internal virtual;\n\n    /**\n     * @dev Performs an implementation upgrade with a security check for UUPS proxies, and additional setup call.\n     *\n     * As a security check, {proxiableUUID} is invoked in the new implementation, and the return value\n     * is expected to be the implementation slot in ERC1967.\n     *\n     * Emits an {IERC1967-Upgraded} event.\n     */\n    function _upgradeToAndCallUUPS(address newImplementation, bytes memory data) private {\n        try IERC1822Proxiable(newImplementation).proxiableUUID() returns (bytes32 slot) {\n            if (slot != ERC1967Utils.IMPLEMENTATION_SLOT) {\n                revert UUPSUnsupportedProxiableUUID(slot);\n            }\n            ERC1967Utils.upgradeToAndCall(newImplementation, data);\n        } catch {\n            // The implementation is not UUPS\n            revert ERC1967Utils.ERC1967InvalidImplementation(newImplementation);\n        }\n    }\n}\n"},{"file_path":"@openzeppelin/contracts/utils/Address.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (utils/Address.sol)\n\npragma solidity ^0.8.20;\n\n/**\n * @dev Collection of functions related to the address type\n */\nlibrary Address {\n    /**\n     * @dev The ETH balance of the account is not enough to perform the operation.\n     */\n    error AddressInsufficientBalance(address account);\n\n    /**\n     * @dev There's no code at `target` (it is not a contract).\n     */\n    error AddressEmptyCode(address target);\n\n    /**\n     * @dev A call to an address target failed. The target may have reverted.\n     */\n    error FailedInnerCall();\n\n    /**\n     * @dev Replacement for Solidity's `transfer`: sends `amount` wei to\n     * `recipient`, forwarding all available gas and reverting on errors.\n     *\n     * https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost\n     * of certain opcodes, possibly making contracts go over the 2300 gas limit\n     * imposed by `transfer`, making them unable to receive funds via\n     * `transfer`. {sendValue} removes this limitation.\n     *\n     * https://consensys.net/diligence/blog/2019/09/stop-using-soliditys-transfer-now/[Learn more].\n     *\n     * IMPORTANT: because control is transferred to `recipient`, care must be\n     * taken to not create reentrancy vulnerabilities. Consider using\n     * {ReentrancyGuard} or the\n     * https://solidity.readthedocs.io/en/v0.8.20/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern].\n     */\n    function sendValue(address payable recipient, uint256 amount) internal {\n        if (address(this).balance < amount) {\n            revert AddressInsufficientBalance(address(this));\n        }\n\n        (bool success, ) = recipient.call{value: amount}(\"\");\n        if (!success) {\n            revert FailedInnerCall();\n        }\n    }\n\n    /**\n     * @dev Performs a Solidity function call using a low level `call`. A\n     * plain `call` is an unsafe replacement for a function call: use this\n     * function instead.\n     *\n     * If `target` reverts with a revert reason or custom error, it is bubbled\n     * up by this function (like regular Solidity function calls). However, if\n     * the call reverted with no returned reason, this function reverts with a\n     * {FailedInnerCall} error.\n     *\n     * Returns the raw returned data. To convert to the expected return value,\n     * use https://solidity.readthedocs.io/en/latest/units-and-global-variables.html?highlight=abi.decode#abi-encoding-and-decoding-functions[`abi.decode`].\n     *\n     * Requirements:\n     *\n     * - `target` must be a contract.\n     * - calling `target` with `data` must not revert.\n     */\n    function functionCall(address target, bytes memory data) internal returns (bytes memory) {\n        return functionCallWithValue(target, data, 0);\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],\n     * but also transferring `value` wei to `target`.\n     *\n     * Requirements:\n     *\n     * - the calling contract must have an ETH balance of at least `value`.\n     * - the called Solidity function must be `payable`.\n     */\n    function functionCallWithValue(address target, bytes memory data, uint256 value) internal returns (bytes memory) {\n        if (address(this).balance < value) {\n            revert AddressInsufficientBalance(address(this));\n        }\n        (bool success, bytes memory returndata) = target.call{value: value}(data);\n        return verifyCallResultFromTarget(target, success, returndata);\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],\n     * but performing a static call.\n     */\n    function functionStaticCall(address target, bytes memory data) internal view returns (bytes memory) {\n        (bool success, bytes memory returndata) = target.staticcall(data);\n        return verifyCallResultFromTarget(target, success, returndata);\n    }\n\n    /**\n     * @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],\n     * but performing a delegate call.\n     */\n    function functionDelegateCall(address target, bytes memory data) internal returns (bytes memory) {\n        (bool success, bytes memory returndata) = target.delegatecall(data);\n        return verifyCallResultFromTarget(target, success, returndata);\n    }\n\n    /**\n     * @dev Tool to verify that a low level call to smart-contract was successful, and reverts if the target\n     * was not a contract or bubbling up the revert reason (falling back to {FailedInnerCall}) in case of an\n     * unsuccessful call.\n     */\n    function verifyCallResultFromTarget(\n        address target,\n        bool success,\n        bytes memory returndata\n    ) internal view returns (bytes memory) {\n        if (!success) {\n            _revert(returndata);\n        } else {\n            // only check if target is a contract if the call was successful and the return data is empty\n            // otherwise we already know that it was a contract\n            if (returndata.length == 0 && target.code.length == 0) {\n                revert AddressEmptyCode(target);\n            }\n            return returndata;\n        }\n    }\n\n    /**\n     * @dev Tool to verify that a low level call was successful, and reverts if it wasn't, either by bubbling the\n     * revert reason or with a default {FailedInnerCall} error.\n     */\n    function verifyCallResult(bool success, bytes memory returndata) internal pure returns (bytes memory) {\n        if (!success) {\n            _revert(returndata);\n        } else {\n            return returndata;\n        }\n    }\n\n    /**\n     * @dev Reverts with returndata if present. Otherwise reverts with {FailedInnerCall}.\n     */\n    function _revert(bytes memory returndata) private pure {\n        // Look for revert reason and bubble it up if present\n        if (returndata.length > 0) {\n            // The easiest way to bubble the revert reason is using memory via assembly\n            /// @solidity memory-safe-assembly\n            assembly {\n                let returndata_size := mload(returndata)\n                revert(add(32, returndata), returndata_size)\n            }\n        } else {\n            revert FailedInnerCall();\n        }\n    }\n}\n"},{"file_path":"@openzeppelin/contracts/utils/Context.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)\n\npragma solidity ^0.8.20;\n\n/**\n * @dev Provides information about the current execution context, including the\n * sender of the transaction and its data. While these are generally available\n * via msg.sender and msg.data, they should not be accessed in such a direct\n * manner, since when dealing with meta-transactions the account sending and\n * paying for execution may not be the actual sender (as far as an application\n * is concerned).\n *\n * This contract is only required for intermediate, library-like contracts.\n */\nabstract contract Context {\n    function _msgSender() internal view virtual returns (address) {\n        return msg.sender;\n    }\n\n    function _msgData() internal view virtual returns (bytes calldata) {\n        return msg.data;\n    }\n\n    function _contextSuffixLength() internal view virtual returns (uint256) {\n        return 0;\n    }\n}\n"},{"file_path":"@openzeppelin/contracts/utils/Multicall.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.1) (utils/Multicall.sol)\n\npragma solidity ^0.8.20;\n\nimport {Address} from \"./Address.sol\";\nimport {Context} from \"./Context.sol\";\n\n/**\n * @dev Provides a function to batch together multiple calls in a single external call.\n *\n * Consider any assumption about calldata validation performed by the sender may be violated if it's not especially\n * careful about sending transactions invoking {multicall}. For example, a relay address that filters function\n * selectors won't filter calls nested within a {multicall} operation.\n *\n * NOTE: Since 5.0.1 and 4.9.4, this contract identifies non-canonical contexts (i.e. `msg.sender` is not {_msgSender}).\n * If a non-canonical context is identified, the following self `delegatecall` appends the last bytes of `msg.data`\n * to the subcall. This makes it safe to use with {ERC2771Context}. Contexts that don't affect the resolution of\n * {_msgSender} are not propagated to subcalls.\n */\nabstract contract Multicall is Context {\n    /**\n     * @dev Receives and executes a batch of function calls on this contract.\n     * @custom:oz-upgrades-unsafe-allow-reachable delegatecall\n     */\n    function multicall(bytes[] calldata data) external virtual returns (bytes[] memory results) {\n        bytes memory context = msg.sender == _msgSender()\n            ? new bytes(0)\n            : msg.data[msg.data.length - _contextSuffixLength():];\n\n        results = new bytes[](data.length);\n        for (uint256 i = 0; i < data.length; i++) {\n            results[i] = Address.functionDelegateCall(address(this), bytes.concat(data[i], context));\n        }\n        return results;\n    }\n}\n"},{"file_path":"@openzeppelin/contracts/utils/StorageSlot.sol","source_code":"// SPDX-License-Identifier: MIT\n// OpenZeppelin Contracts (last updated v5.0.0) (utils/StorageSlot.sol)\n// This file was procedurally generated from scripts/generate/templates/StorageSlot.js.\n\npragma solidity ^0.8.20;\n\n/**\n * @dev Library for reading and writing primitive types to specific storage slots.\n *\n * Storage slots are often used to avoid storage conflict when dealing with upgradeable contracts.\n * This library helps with reading and writing to such slots without the need for inline assembly.\n *\n * The functions in this library return Slot structs that contain a `value` member that can be used to read or write.\n *\n * Example usage to set ERC1967 implementation slot:\n * ```solidity\n * contract ERC1967 {\n *     bytes32 internal constant _IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;\n *\n *     function _getImplementation() internal view returns (address) {\n *         return StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value;\n *     }\n *\n *     function _setImplementation(address newImplementation) internal {\n *         require(newImplementation.code.length > 0);\n *         StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value = newImplementation;\n *     }\n * }\n * ```\n */\nlibrary StorageSlot {\n    struct AddressSlot {\n        address value;\n    }\n\n    struct BooleanSlot {\n        bool value;\n    }\n\n    struct Bytes32Slot {\n        bytes32 value;\n    }\n\n    struct Uint256Slot {\n        uint256 value;\n    }\n\n    struct StringSlot {\n        string value;\n    }\n\n    struct BytesSlot {\n        bytes value;\n    }\n\n    /**\n     * @dev Returns an `AddressSlot` with member `value` located at `slot`.\n     */\n    function getAddressSlot(bytes32 slot) internal pure returns (AddressSlot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := slot\n        }\n    }\n\n    /**\n     * @dev Returns an `BooleanSlot` with member `value` located at `slot`.\n     */\n    function getBooleanSlot(bytes32 slot) internal pure returns (BooleanSlot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := slot\n        }\n    }\n\n    /**\n     * @dev Returns an `Bytes32Slot` with member `value` located at `slot`.\n     */\n    function getBytes32Slot(bytes32 slot) internal pure returns (Bytes32Slot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := slot\n        }\n    }\n\n    /**\n     * @dev Returns an `Uint256Slot` with member `value` located at `slot`.\n     */\n    function getUint256Slot(bytes32 slot) internal pure returns (Uint256Slot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := slot\n        }\n    }\n\n    /**\n     * @dev Returns an `StringSlot` with member `value` located at `slot`.\n     */\n    function getStringSlot(bytes32 slot) internal pure returns (StringSlot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := slot\n        }\n    }\n\n    /**\n     * @dev Returns an `StringSlot` representation of the string storage pointer `store`.\n     */\n    function getStringSlot(string storage store) internal pure returns (StringSlot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := store.slot\n        }\n    }\n\n    /**\n     * @dev Returns an `BytesSlot` with member `value` located at `slot`.\n     */\n    function getBytesSlot(bytes32 slot) internal pure returns (BytesSlot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := slot\n        }\n    }\n\n    /**\n     * @dev Returns an `BytesSlot` representation of the bytes storage pointer `store`.\n     */\n    function getBytesSlot(bytes storage store) internal pure returns (BytesSlot storage r) {\n        /// @solidity memory-safe-assembly\n        assembly {\n            r.slot := store.slot\n        }\n    }\n}\n"},{"file_path":"contracts/utils/Masks.sol","source_code":"// SPDX-License-Identifier: MIT\n\npragma solidity ^0.8.20;\n\n/// @custom:security-contact security@spiko.tech\nlibrary Masks {\n    using Masks for *;\n\n    type Mask is bytes32;\n\n    function toMask(uint8 group) internal pure returns (Mask) {\n        return Mask.wrap(bytes32(1 << group));\n    }\n\n    function toMask(uint8[] memory groups) internal pure returns (Mask) {\n        Masks.Mask set = Mask.wrap(0);\n        for (uint256 i = 0; i < groups.length; ++i) {\n            set = set.union(groups[i].toMask());\n        }\n        return set;\n    }\n\n    /// Not used by this project, and not covered by test. Kept for completeness. Use at your own risks.\n    function get(Mask self, uint8 group) internal pure returns (bool) {\n        return !group.toMask().intersection(self).isEmpty();\n    }\n\n    function isEmpty(Mask self) internal pure returns (bool) {\n        return Mask.unwrap(self) == bytes32(0);\n    }\n\n    function complement(Mask m1) internal pure returns (Mask) {\n        return Mask.wrap(~Mask.unwrap(m1));\n    }\n\n    function union(Mask m1, Mask m2) internal pure returns (Mask) {\n        return Mask.wrap(Mask.unwrap(m1) | Mask.unwrap(m2));\n    }\n\n    function intersection(Mask m1, Mask m2) internal pure returns (Mask) {\n        return Mask.wrap(Mask.unwrap(m1) & Mask.unwrap(m2));\n    }\n\n    function difference(Mask m1, Mask m2) internal pure returns (Mask) {\n        return m1.intersection(m2.complement());\n    }\n\n    /// Not used by this project, and not covered by test. Kept for completeness. Use at your own risks.\n    function symetric_difference(Mask m1, Mask m2) internal pure returns (Mask) {\n        return m1.union(m2).difference(m1.intersection(m2));\n    }\n}\n"}],"certified":false,"conflicting_implementations":null,"abi":[{"inputs":[],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[{"internalType":"address","name":"target","type":"address"}],"name":"AddressEmptyCode","type":"error"},{"inputs":[{"internalType":"address","name":"implementation","type":"address"}],"name":"ERC1967InvalidImplementation","type":"error"},{"inputs":[],"name":"ERC1967NonPayable","type":"error"},{"inputs":[],"name":"FailedInnerCall","type":"error"},{"inputs":[],"name":"InvalidInitialization","type":"error"},{"inputs":[{"internalType":"address","name":"user","type":"address"},{"internalType":"Masks.Mask","name":"permissions","type":"bytes32"},{"internalType":"Masks.Mask","name":"restriction","type":"bytes32"}],"name":"MissingPermissions","type":"error"},{"inputs":[],"name":"NotInitializing","type":"error"},{"inputs":[],"name":"UUPSUnauthorizedCallContext","type":"error"},{"inputs":[{"internalType":"bytes32","name":"slot","type":"bytes32"}],"name":"UUPSUnsupportedProxiableUUID","type":"error"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"user","type":"address"},{"indexed":true,"internalType":"uint8","name":"group","type":"uint8"}],"name":"GroupAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"uint8","name":"group","type":"uint8"},{"indexed":false,"internalType":"Masks.Mask","name":"admins","type":"bytes32"}],"name":"GroupAdmins","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"user","type":"address"},{"indexed":true,"internalType":"uint8","name":"group","type":"uint8"}],"name":"GroupRemoved","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint64","name":"version","type":"uint64"}],"name":"Initialized","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"target","type":"address"},{"indexed":true,"internalType":"bytes4","name":"selector","type":"bytes4"},{"indexed":false,"internalType":"Masks.Mask","name":"groups","type":"bytes32"}],"name":"Requirements","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"implementation","type":"address"}],"name":"Upgraded","type":"event"},{"inputs":[],"name":"ADMIN","outputs":[{"internalType":"uint8","name":"","type":"uint8"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"ADMIN_MASK","outputs":[{"internalType":"Masks.Mask","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"PUBLIC","outputs":[{"internalType":"uint8","name":"","type":"uint8"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"PUBLIC_MASK","outputs":[{"internalType":"Masks.Mask","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"UPGRADE_INTERFACE_VERSION","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"user","type":"address"},{"internalType":"uint8","name":"group","type":"uint8"}],"name":"addGroup","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"caller","type":"address"},{"internalType":"address","name":"target","type":"address"},{"internalType":"bytes4","name":"selector","type":"bytes4"}],"name":"canCall","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint8","name":"group","type":"uint8"}],"name":"getGroupAdmins","outputs":[{"internalType":"Masks.Mask","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"user","type":"address"}],"name":"getGroups","outputs":[{"internalType":"Masks.Mask","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"target","type":"address"},{"internalType":"bytes4","name":"selector","type":"bytes4"}],"name":"getRequirements","outputs":[{"internalType":"Masks.Mask","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"admin","type":"address"}],"name":"initialize","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes[]","name":"data","type":"bytes[]"}],"name":"multicall","outputs":[{"internalType":"bytes[]","name":"results","type":"bytes[]"}],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"proxiableUUID","outputs":[{"internalType":"bytes32","name":"","type":"bytes32"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"user","type":"address"},{"internalType":"uint8","name":"group","type":"uint8"}],"name":"remGroup","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"uint8","name":"group","type":"uint8"},{"internalType":"uint8[]","name":"admins","type":"uint8[]"}],"name":"setGroupAdmins","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"target","type":"address"},{"internalType":"bytes4[]","name":"selectors","type":"bytes4[]"},{"internalType":"uint8[]","name":"groups","type":"uint8[]"}],"name":"setRequirements","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"newImplementation","type":"address"},{"internalType":"bytes","name":"data","type":"bytes"}],"name":"upgradeToAndCall","outputs":[],"stateMutability":"payable","type":"function"}],"is_changed_bytecode":false,"is_partially_verified":false,"constructor_args":null}