// SPDX-License-Identifier: MIT
pragma solidity ^0.8.25;

import { ITimelock } from "./interfaces/ITimelock.sol";
import { IRegistry } from "./interfaces/IRegistry.sol";

import { ReverseClaimer } from "./ReverseClaimer.sol";
import { Ownable2Step } from "@openzeppelin/contracts/access/Ownable2Step.sol";

/**
 * @title SecurityCouncil
 * @dev A contract to cancel proposals in the ENS timelock, controlled by the Security Council multisig.
 * @author Alexandro Netto - <[email protected]>
 */
contract SecurityCouncil is ReverseClaimer, Ownable2Step {
    ITimelock public immutable timelock;
    uint256 public immutable expiration;

    error ExpirationNotReached();
    error ExpirationReached();

    /**
     * @dev Constructor to initialize the contract with the Security Council multisig and timelock.
     * @param securityCouncilMultisig Address of the Security Council multisig.
     * @param _timelock Address of the timelock contract.
     * @param ensRegistry Address of the ENS registry.
     */
    constructor(
        address securityCouncilMultisig,
        ITimelock _timelock,
        IRegistry ensRegistry
    )
        ReverseClaimer(ensRegistry, msg.sender)
    {
        timelock = _timelock;

        // Set expiration to 2 years from deployment + voting period
        expiration = block.timestamp + (2 * 365 days) + 7 days;

        // security council multisig needs to call acceptOwnership()
        transferOwnership(securityCouncilMultisig);
    }

    /**
     * @dev Function to cancel a proposal in the timelock.
     * @param proposalId ID of the proposal to cancel.
     */
    function veto(bytes32 proposalId) external onlyOwner {
        if (block.timestamp >= expiration) {
            revert ExpirationReached();
        }

        timelock.cancel(proposalId);
    }

    /**
     * @dev Function to renounce the veto role after expiration.
     */
    function renounceTimelockRoleByExpiration() external {
        if (block.timestamp < expiration) {
            revert ExpirationNotReached();
        }

        timelock.renounceRole(timelock.PROPOSER_ROLE(), address(this));
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.4;

interface ITimelock {
    event CallExecuted(bytes32 indexed id, uint256 indexed index, address target, uint256 value, bytes data);
    event CallScheduled(
        bytes32 indexed id,
        uint256 indexed index,
        address target,
        uint256 value,
        bytes data,
        bytes32 predecessor,
        uint256 delay
    );
    event Cancelled(bytes32 indexed id);
    event MinDelayChange(uint256 oldDuration, uint256 newDuration);
    event RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole);
    event RoleGranted(bytes32 indexed role, address indexed account, address indexed sender);
    event RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender);

    receive() external payable;

    function DEFAULT_ADMIN_ROLE() external view returns (bytes32);

    function EXECUTOR_ROLE() external view returns (bytes32);

    function PROPOSER_ROLE() external view returns (bytes32);

    function TIMELOCK_ADMIN_ROLE() external view returns (bytes32);

    function cancel(bytes32 id) external;

    function execute(
        address target,
        uint256 value,
        bytes memory data,
        bytes32 predecessor,
        bytes32 salt
    )
        external
        payable;

    function executeBatch(
        address[] memory targets,
        uint256[] memory values,
        bytes[] memory datas,
        bytes32 predecessor,
        bytes32 salt
    )
        external
        payable;

    function getMinDelay() external view returns (uint256 duration);

    function getRoleAdmin(bytes32 role) external view returns (bytes32);

    function getTimestamp(bytes32 id) external view returns (uint256 timestamp);

    function grantRole(bytes32 role, address account) external;

    function hasRole(bytes32 role, address account) external view returns (bool);

    function hashOperation(
        address target,
        uint256 value,
        bytes memory data,
        bytes32 predecessor,
        bytes32 salt
    )
        external
        pure
        returns (bytes32 hash);

    function hashOperationBatch(
        address[] memory targets,
        uint256[] memory values,
        bytes[] memory datas,
        bytes32 predecessor,
        bytes32 salt
    )
        external
        pure
        returns (bytes32 hash);

    function isOperation(bytes32 id) external view returns (bool pending);

    function isOperationDone(bytes32 id) external view returns (bool done);

    function isOperationPending(bytes32 id) external view returns (bool pending);

    function isOperationReady(bytes32 id) external view returns (bool ready);

    function renounceRole(bytes32 role, address account) external;

    function revokeRole(bytes32 role, address account) external;

    function schedule(
        address target,
        uint256 value,
        bytes memory data,
        bytes32 predecessor,
        bytes32 salt,
        uint256 delay
    )
        external;

    function scheduleBatch(
        address[] memory targets,
        uint256[] memory values,
        bytes[] memory datas,
        bytes32 predecessor,
        bytes32 salt,
        uint256 delay
    )
        external;

    function supportsInterface(bytes4 interfaceId) external view returns (bool);

    function updateDelay(uint256 newDelay) external;
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.4;

interface IRegistry {
    event ApprovalForAll(address indexed owner, address indexed operator, bool approved);
    event NewOwner(bytes32 indexed node, bytes32 indexed label, address owner);
    event NewResolver(bytes32 indexed node, address resolver);
    event NewTTL(bytes32 indexed node, uint64 ttl);
    event Transfer(bytes32 indexed node, address owner);

    function isApprovedForAll(address owner, address operator) external view returns (bool);
    function old() external view returns (address);
    function owner(bytes32 node) external view returns (address);
    function recordExists(bytes32 node) external view returns (bool);
    function resolver(bytes32 node) external view returns (address);
    function setApprovalForAll(address operator, bool approved) external;
    function setOwner(bytes32 node, address owner) external;
    function setRecord(bytes32 node, address owner, address resolver, uint64 ttl) external;
    function setResolver(bytes32 node, address resolver) external;
    function setSubnodeOwner(bytes32 node, bytes32 label, address owner) external returns (bytes32);
    function setSubnodeRecord(bytes32 node, bytes32 label, address owner, address resolver, uint64 ttl) external;
    function setTTL(bytes32 node, uint64 ttl) external;
    function ttl(bytes32 node) external view returns (uint64);
}

//SPDX-License-Identifier: MIT
pragma solidity >=0.8.17 <0.9.0;

import { IRegistry } from "./interfaces/IRegistry.sol";
import { IReverseRegistrar } from "./interfaces/IReverseRegistrar.sol";

contract ReverseClaimer {
    bytes32 constant ADDR_REVERSE_NODE = 0x91d1777781884d03a6757a803996e38de2a42967fb37eeaca72729271025a9e2;

    constructor(IRegistry ensRegistry, address claimant) {
        IReverseRegistrar reverseRegistrar = IReverseRegistrar(IRegistry(ensRegistry).owner(ADDR_REVERSE_NODE));
        reverseRegistrar.claim(claimant);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.9.0) (access/Ownable2Step.sol)

pragma solidity ^0.8.0;

import "./Ownable.sol";

/**
 * @dev Contract module which provides access control mechanism, where
 * there is an account (an owner) that can be granted exclusive access to
 * specific functions.
 *
 * By default, the owner account will be the one that deploys the contract. This
 * can later be changed with {transferOwnership} and {acceptOwnership}.
 *
 * This module is used through inheritance. It will make available all functions
 * from parent (Ownable).
 */
abstract contract Ownable2Step is Ownable {
    address private _pendingOwner;

    event OwnershipTransferStarted(address indexed previousOwner, address indexed newOwner);

    /**
     * @dev Returns the address of the pending owner.
     */
    function pendingOwner() public view virtual returns (address) {
        return _pendingOwner;
    }

    /**
     * @dev Starts the ownership transfer of the contract to a new account. Replaces the pending transfer if there is one.
     * Can only be called by the current owner.
     */
    function transferOwnership(address newOwner) public virtual override onlyOwner {
        _pendingOwner = newOwner;
        emit OwnershipTransferStarted(owner(), newOwner);
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`) and deletes any pending owner.
     * Internal function without access restriction.
     */
    function _transferOwnership(address newOwner) internal virtual override {
        delete _pendingOwner;
        super._transferOwnership(newOwner);
    }

    /**
     * @dev The new owner accepts the ownership transfer.
     */
    function acceptOwnership() public virtual {
        address sender = _msgSender();
        require(pendingOwner() == sender, "Ownable2Step: caller is not the new owner");
        _transferOwnership(sender);
    }
}

pragma solidity >=0.8.4;

interface IReverseRegistrar {
    function setDefaultResolver(address resolver) external;

    function claim(address owner) external returns (bytes32);

    function claimForAddr(address addr, address owner, address resolver) external returns (bytes32);

    function claimWithResolver(address owner, address resolver) external returns (bytes32);

    function setName(string memory name) external returns (bytes32);

    function setNameForAddr(
        address addr,
        address owner,
        address resolver,
        string memory name
    )
        external
        returns (bytes32);

    function node(address addr) external pure returns (bytes32);
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v4.9.0) (access/Ownable.sol)

pragma solidity ^0.8.0;

import "../utils/Context.sol";

/**
 * @dev Contract module which provides a basic access control mechanism, where
 * there is an account (an owner) that can be granted exclusive access to
 * specific functions.
 *
 * By default, the owner account will be the one that deploys the contract. This
 * can later be changed with {transferOwnership}.
 *
 * This module is used through inheritance. It will make available the modifier
 * `onlyOwner`, which can be applied to your functions to restrict their use to
 * the owner.
 */
abstract contract Ownable is Context {
    address private _owner;

    event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);

    /**
     * @dev Initializes the contract setting the deployer as the initial owner.
     */
    constructor() {
        _transferOwnership(_msgSender());
    }

    /**
     * @dev Throws if called by any account other than the owner.
     */
    modifier onlyOwner() {
        _checkOwner();
        _;
    }

    /**
     * @dev Returns the address of the current owner.
     */
    function owner() public view virtual returns (address) {
        return _owner;
    }

    /**
     * @dev Throws if the sender is not the owner.
     */
    function _checkOwner() internal view virtual {
        require(owner() == _msgSender(), "Ownable: caller is not the owner");
    }

    /**
     * @dev Leaves the contract without owner. It will not be possible to call
     * `onlyOwner` functions. Can only be called by the current owner.
     *
     * NOTE: Renouncing ownership will leave the contract without an owner,
     * thereby disabling any functionality that is only available to the owner.
     */
    function renounceOwnership() public virtual onlyOwner {
        _transferOwnership(address(0));
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`).
     * Can only be called by the current owner.
     */
    function transferOwnership(address newOwner) public virtual onlyOwner {
        require(newOwner != address(0), "Ownable: new owner is the zero address");
        _transferOwnership(newOwner);
    }

    /**
     * @dev Transfers ownership of the contract to a new account (`newOwner`).
     * Internal function without access restriction.
     */
    function _transferOwnership(address newOwner) internal virtual {
        address oldOwner = _owner;
        _owner = newOwner;
        emit OwnershipTransferred(oldOwner, newOwner);
    }
}

// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts v4.4.1 (utils/Context.sol)

pragma solidity ^0.8.0;

/**
 * @dev Provides information about the current execution context, including the
 * sender of the transaction and its data. While these are generally available
 * via msg.sender and msg.data, they should not be accessed in such a direct
 * manner, since when dealing with meta-transactions the account sending and
 * paying for execution may not be the actual sender (as far as an application
 * is concerned).
 *
 * This contract is only required for intermediate, library-like contracts.
 */
abstract contract Context {
    function _msgSender() internal view virtual returns (address) {
        return msg.sender;
    }

    function _msgData() internal view virtual returns (bytes calldata) {
        return msg.data;
    }
}

{
  "remappings": [
    "@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/",
    "ds-test/=lib/openzeppelin-contracts/lib/forge-std/lib/ds-test/src/",
    "erc4626-tests/=lib/openzeppelin-contracts/lib/erc4626-tests/",
    "forge-std/=lib/forge-std/src/",
    "openzeppelin-contracts/=lib/openzeppelin-contracts/",
    "openzeppelin/=lib/openzeppelin-contracts/contracts/"
  ],
  "optimizer": {
    "enabled": true,
    "runs": 200
  },
  "metadata": {
    "useLiteralContent": false,
    "bytecodeHash": "ipfs",
    "appendCBOR": true
  },
  "outputSelection": {
    "*": {
      "*": [
        "evm.bytecode",
        "evm.deployedBytecode",
        "devdoc",
        "userdoc",
        "metadata",
        "abi"
      ]
    }
  },
  "evmVersion": "paris",
  "viaIR": false,
  "libraries": {}
}

• No Contract Security Audit Submitted- Submit Audit Here

[{"inputs":[{"internalType":"address","name":"securityCouncilMultisig","type":"address"},{"internalType":"contract ITimelock","name":"_timelock","type":"address"},{"internalType":"contract IRegistry","name":"ensRegistry","type":"address"}],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[],"name":"ExpirationNotReached","type":"error"},{"inputs":[],"name":"ExpirationReached","type":"error"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"previousOwner","type":"address"},{"indexed":true,"internalType":"address","name":"newOwner","type":"address"}],"name":"OwnershipTransferStarted","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"previousOwner","type":"address"},{"indexed":true,"internalType":"address","name":"newOwner","type":"address"}],"name":"OwnershipTransferred","type":"event"},{"inputs":[],"name":"acceptOwnership","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"expiration","outputs":[{"internalType":"uint256","name":"","type":"uint256"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"owner","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"pendingOwner","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"renounceOwnership","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"renounceTimelockRoleByExpiration","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"name":"timelock","outputs":[{"internalType":"contract ITimelock","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"address","name":"newOwner","type":"address"}],"name":"transferOwnership","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"bytes32","name":"proposalId","type":"bytes32"}],"name":"veto","outputs":[],"stateMutability":"nonpayable","type":"function"}]

0x60c060405234801561001057600080fd5b506040516109aa3803806109aa83398101604081905261002f916102d9565b6040516302571be360e01b81527f91d1777781884d03a6757a803996e38de2a42967fb37eeaca72729271025a9e26004820152819033906000906001600160a01b038416906302571be390602401602060405180830381865afa15801561009a573d6000803e3d6000fd5b505050506040513d601f19601f820116820180604052508101906100be9190610326565b604051630f41a04d60e11b81526001600160a01b03848116600483015291925090821690631e83409a906024016020604051808303816000875af115801561010a573d6000803e3d6000fd5b505050506040513d601f19601f8201168201806040525081019061012e919061034a565b5050505061014861014361018460201b60201c565b610188565b6001600160a01b038216608052610163426303c26700610363565b6101709062093a80610363565b60a05261017c836101a4565b50505061038a565b3390565b600180546001600160a01b03191690556101a181610214565b50565b6101ac610264565b600180546001600160a01b0319166001600160a01b0383169081179091556101dc6000546001600160a01b031690565b6001600160a01b03167f38d16b8cac22d99fc7c124b9cd0de2d3fa1faef420bfe791d8c362d765e2270060405160405180910390a350565b600080546001600160a01b038381166001600160a01b0319831681178455604051919092169283917f8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e09190a35050565b6000546001600160a01b031633146102c25760405162461bcd60e51b815260206004820181905260248201527f4f776e61626c653a2063616c6c6572206973206e6f7420746865206f776e6572604482015260640160405180910390fd5b565b6001600160a01b03811681146101a157600080fd5b6000806000606084860312156102ee57600080fd5b83516102f9816102c4565b602085015190935061030a816102c4565b604085015190925061031b816102c4565b809150509250925092565b60006020828403121561033857600080fd5b8151610343816102c4565b9392505050565b60006020828403121561035c57600080fd5b5051919050565b8082018082111561038457634e487b7160e01b600052601160045260246000fd5b92915050565b60805160a0516105d96103d160003960008181609d0152818161020401526103c801526000818161010e0152818161024501528181610274015261041c01526105d96000f3fe608060405234801561001057600080fd5b50600436106100935760003560e01c8063d33219b411610066578063d33219b414610109578063e30c397814610130578063e64bf7b914610141578063f2fde38b14610149578063fb6f93f91461015c57600080fd5b80634665096d14610098578063715018a6146100d257806379ba5097146100dc5780638da5cb5b146100e4575b600080fd5b6100bf7f000000000000000000000000000000000000000000000000000000000000000081565b6040519081526020015b60405180910390f35b6100da61016f565b005b6100da610183565b6000546001600160a01b03165b6040516001600160a01b0390911681526020016100c9565b6100f17f000000000000000000000000000000000000000000000000000000000000000081565b6001546001600160a01b03166100f1565b6100da610202565b6100da610157366004610541565b61034d565b6100da61016a366004610571565b6103be565b610177610483565b61018160006104dd565b565b60015433906001600160a01b031681146101f65760405162461bcd60e51b815260206004820152602960248201527f4f776e61626c6532537465703a2063616c6c6572206973206e6f7420746865206044820152683732bb9037bbb732b960b91b60648201526084015b60405180910390fd5b6101ff816104dd565b50565b7f0000000000000000000000000000000000000000000000000000000000000000421015610243576040516392899bcd60e01b815260040160405180910390fd5b7f00000000000000000000000000000000000000000000000000000000000000006001600160a01b03166336568abe7f00000000000000000000000000000000000000000000000000000000000000006001600160a01b0316638f61f4f56040518163ffffffff1660e01b8152600401602060405180830381865afa1580156102d0573d6000803e3d6000fd5b505050506040513d601f19601f820116820180604052508101906102f4919061058a565b6040516001600160e01b031960e084901b1681526004810191909152306024820152604401600060405180830381600087803b15801561033357600080fd5b505af1158015610347573d6000803e3d6000fd5b50505050565b610355610483565b600180546001600160a01b0383166001600160a01b031990911681179091556103866000546001600160a01b031690565b6001600160a01b03167f38d16b8cac22d99fc7c124b9cd0de2d3fa1faef420bfe791d8c362d765e2270060405160405180910390a350565b6103c6610483565b7f000000000000000000000000000000000000000000000000000000000000000042106104065760405163045465cf60e31b815260040160405180910390fd5b60405163c4d252f560e01b8152600481018290527f00000000000000000000000000000000000000000000000000000000000000006001600160a01b03169063c4d252f590602401600060405180830381600087803b15801561046857600080fd5b505af115801561047c573d6000803e3d6000fd5b5050505050565b6000546001600160a01b031633146101815760405162461bcd60e51b815260206004820181905260248201527f4f776e61626c653a2063616c6c6572206973206e6f7420746865206f776e657260448201526064016101ed565b600180546001600160a01b03191690556101ff81600080546001600160a01b038381166001600160a01b0319831681178455604051919092169283917f8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e09190a35050565b60006020828403121561055357600080fd5b81356001600160a01b038116811461056a57600080fd5b9392505050565b60006020828403121561058357600080fd5b5035919050565b60006020828403121561059c57600080fd5b505191905056fea26469706673582212204c1281a8fdcd8298a8415a413fa563d8d48a9e22f6fae80cf28e78982c6086f864736f6c63430008190033000000000000000000000000aa5cd05f6b62c3af58ae9c4f3f7a2acc2cdc2cc7000000000000000000000000fe89cc7abb2c4183683ab71653c4cdc9b02d44b700000000000000000000000000000000000c2e074ec69a0dfb2997ba6c7d2e1e

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