// SPDX-License-Identifier: BSD-3-Clause
pragma solidity 0.8.28;

import {
    SafeERC20Upgradeable,
    IERC20Upgradeable
} from "@openzeppelin/contracts-upgradeable/token/ERC20/utils/SafeERC20Upgradeable.sol";
import { AddressUpgradeable } from "@openzeppelin/contracts-upgradeable/utils/AddressUpgradeable.sol";
import { EIP712 } from "@openzeppelin/contracts/utils/cryptography/EIP712.sol";
import { ECDSA } from "@openzeppelin/contracts/utils/cryptography/ECDSA.sol";
import { Ownable2Step } from "@openzeppelin/contracts/access/Ownable2Step.sol";
import { ReentrancyGuard } from "@openzeppelin/contracts/security/ReentrancyGuard.sol";

/**
 * @title SwapHelper
 * @author Venus Protocol
 * @notice Helper contract for executing multiple token operations atomically
 * @dev This contract provides utilities for managing approvals,
 *      and executing arbitrary calls in a single transaction. It supports
 *      signature verification using EIP-712 for backend-authorized operations.
 *      All functions except multicall are designed to be called internally via multicall.
 * @custom:security-contact security@venus.io
 */
contract SwapHelper is EIP712, Ownable2Step, ReentrancyGuard {
    using SafeERC20Upgradeable for IERC20Upgradeable;
    using AddressUpgradeable for address;

    /// @notice EIP-712 typehash for Multicall struct used in signature verification
    /// @dev keccak256("Multicall(address caller,bytes[] calls,uint256 deadline,bytes32 salt)")
    bytes32 internal constant MULTICALL_TYPEHASH =
        keccak256("Multicall(address caller,bytes[] calls,uint256 deadline,bytes32 salt)");

    /// @notice Address authorized to sign multicall operations
    /// @dev Can be updated by contract owner via setBackendSigner
    address public backendSigner;

    /// @notice Mapping to track used salts for replay protection
    /// @dev Maps salt => bool to prevent reuse of same salt
    mapping(bytes32 => bool) public usedSalts;

    /// @notice Error thrown when transaction deadline has passed
    /// @dev Emitted when block.timestamp > deadline in multicall
    error DeadlineReached();

    /// @notice Error thrown when signature verification fails
    /// @dev Emitted when recovered signer doesn't match backendSigner
    error Unauthorized();

    /// @notice Error thrown when zero address is provided as parameter
    /// @dev Used in constructor and setBackendSigner validation
    error ZeroAddress();

    /// @notice Error thrown when salt has already been used
    /// @dev Prevents replay attacks by ensuring each salt is used only once
    error SaltAlreadyUsed();

    /// @notice Error thrown when caller is not authorized
    /// @dev Only owner or contract itself can call protected functions
    error CallerNotAuthorized();

    /// @notice Error thrown when no calls are provided to multicall
    /// @dev Emitted when calls array is empty in multicall
    error NoCallsProvided();

    /// @notice Error thrown when signature is missing but required
    /// @dev Emitted when signature length is zero but verification is expected
    error MissingSignature();

    /// @notice Event emitted when backend signer is updated
    /// @param oldSigner Previous backend signer address
    /// @param newSigner New backend signer address
    event BackendSignerUpdated(address indexed oldSigner, address indexed newSigner);

    /// @notice Event emitted when multicall is successfully executed
    /// @param caller Address that initiated the multicall
    /// @param callsCount Number of calls executed in the batch
    /// @param deadline Deadline timestamp used for the operation
    /// @param salt Salt used for replay protection
    event MulticallExecuted(address indexed caller, uint256 callsCount, uint256 deadline, bytes32 salt);

    /// @notice Event emitted when tokens are swept from the contract
    /// @param token Address of the token swept
    /// @param to Recipient address
    /// @param amount Amount of tokens swept
    event Swept(address indexed token, address indexed to, uint256 amount);

    /// @notice Event emitted when maximum approval is granted
    /// @param token Address of the token approved
    /// @param spender Address granted the approval
    event ApprovedMax(address indexed token, address indexed spender);

    /// @notice Event emitted when generic call is executed
    /// @param target Address of the contract called
    /// @param data Encoded function call data
    event GenericCallExecuted(address indexed target, bytes data);

    /// @notice Constructor
    /// @param backendSigner_ Address authorized to sign multicall operations
    /// @dev Initializes EIP-712 domain with name "VenusSwap" and version "1"
    /// @dev Transfers ownership to msg.sender
    /// @dev Reverts with ZeroAddress if parameter is address(0)
    /// @custom:error ZeroAddress if backendSigner_ is address(0)
    constructor(address backendSigner_) EIP712("VenusSwap", "1") {
        if (backendSigner_ == address(0)) {
            revert ZeroAddress();
        }

        backendSigner = backendSigner_;
    }

    /// @notice Modifier to restrict access to owner or contract itself
    /// @dev Reverts with CallerNotAuthorized if caller is neither owner nor this contract
    modifier onlyOwnerOrSelf() {
        if (msg.sender != owner() && msg.sender != address(this)) {
            revert CallerNotAuthorized();
        }
        _;
    }

    /// @notice Multicall function to execute multiple calls in a single transaction.
    /// @param calls Array of encoded function calls to execute on this contract
    /// @param deadline Unix timestamp after which the transaction will revert
    /// @param salt Unique value to ensure this exact multicall can only be executed once
    /// @param signature EIP-712 signature from backend signer
    /// @dev All calls are executed atomically - if any call fails, entire transaction reverts
    /// @dev Calls must be to functions on this contract (address(this))
    /// @dev Protected by nonReentrant modifier to prevent reentrancy attacks
    /// @dev This function should be called as a part of a transaction that sends tokens to this contract and verifies if they received desired tokens after execution.
    /// @dev EOA that calls this function should not send tokens directly nor approve this contract to spend tokens on their behalf.
    /// @custom:event MulticallExecuted emitted upon successful execution
    /// @custom:security Only the contract itself can call sweep, approveMax, and genericCall
    /// @custom:error NoCallsProvided if calls array is empty
    /// @custom:error DeadlineReached if block.timestamp > deadline
    /// @custom:error SaltAlreadyUsed if salt has been used before
    /// @custom:error Unauthorized if signature verification fails
    /// @custom:error MissingSignature if signature is empty
    function multicall(
        bytes[] calldata calls,
        uint256 deadline,
        bytes32 salt,
        bytes calldata signature
    ) external nonReentrant {
        if (calls.length == 0) {
            revert NoCallsProvided();
        }

        if (block.timestamp > deadline) {
            revert DeadlineReached();
        }

        if (signature.length == 0) {
            revert MissingSignature();
        }
        if (usedSalts[salt]) {
            revert SaltAlreadyUsed();
        }
        usedSalts[salt] = true;

        bytes32 digest = _hashMulticall(msg.sender, calls, deadline, salt);
        address signer = ECDSA.recover(digest, signature);
        if (signer != backendSigner) {
            revert Unauthorized();
        }

        for (uint256 i = 0; i < calls.length; i++) {
            (bool success, bytes memory returnData) = address(this).call(calls[i]);
            if (!success) {
                assembly {
                    revert(add(returnData, 0x20), mload(returnData))
                }
            }
        }

        emit MulticallExecuted(msg.sender, calls.length, deadline, salt);
    }

    /// @notice Generic call function to execute a call to an arbitrary address
    /// @param target Address of the contract to call
    /// @param data Encoded function call data
    /// @dev This function can interact with any external contract
    /// @dev Should only be called via multicall for safety, but can be called directly by owner
    /// @custom:security Use with extreme caution - can call any contract with any data
    /// @custom:security Ensure proper validation of target and data in off-chain systems
    /// @custom:error CallerNotAuthorized if caller is not owner or contract itself
    function genericCall(address target, bytes calldata data) external onlyOwnerOrSelf {
        target.functionCall(data);
        emit GenericCallExecuted(target, data);
    }

    /// @notice Sweeps entire balance of an ERC-20 token to a specified address
    /// @param token ERC-20 token contract to sweep
    /// @param to Recipient address for the swept tokens
    /// @dev Transfers the entire balance of token held by this contract
    /// @dev Uses SafeERC20 for safe transfer operations
    /// @dev Should only be called via multicall for safety, but can be called directly by owner
    /// @custom:error CallerNotAuthorized if caller is not owner or contract itself
    /// @custom:error ZeroAddress if token is address(0) or to is address(0)
    function sweep(IERC20Upgradeable token, address to) external onlyOwnerOrSelf {
        if (address(token) == address(0) || to == address(0)) {
            revert ZeroAddress();
        }
        uint256 amount = token.balanceOf(address(this));
        if (amount > 0) {
            token.safeTransfer(to, amount);
        }
        emit Swept(address(token), to, amount);
    }

    /// @notice Approves maximum amount of an ERC-20 token to a specified spender
    /// @param token ERC-20 token contract to approve
    /// @param spender Address to grant approval to
    /// @dev Sets approval to type(uint256).max for unlimited spending
    /// @dev Uses forceApprove to handle tokens that require 0 approval first
    /// @dev Should only be called via multicall for safety, but can be called directly by owner
    /// @custom:security Grants unlimited approval - ensure spender is trusted
    /// @custom:error CallerNotAuthorized if caller is not owner or contract itself
    function approveMax(IERC20Upgradeable token, address spender) external onlyOwnerOrSelf {
        token.forceApprove(spender, type(uint256).max);
        emit ApprovedMax(address(token), spender);
    }

    /// @notice Updates the backend signer address
    /// @param newSigner New backend signer address
    /// @dev Only callable by contract owner
    /// @dev Reverts with ZeroAddress if newSigner is address(0)
    /// @dev Emits BackendSignerUpdated event
    /// @custom:error ZeroAddress if newSigner is address(0)
    /// @custom:error Ownable: caller is not the owner (from OpenZeppelin Ownable)
    function setBackendSigner(address newSigner) external onlyOwner {
        if (newSigner == address(0)) {
            revert ZeroAddress();
        }

        emit BackendSignerUpdated(backendSigner, newSigner);
        backendSigner = newSigner;
    }

    /// @notice Produces an EIP-712 digest of the multicall data
    /// @param caller Address of the authorized caller
    /// @param calls Array of encoded function calls
    /// @param deadline Unix timestamp deadline
    /// @param salt Unique value to ensure replay protection
    /// @return EIP-712 typed data hash for signature verification
    /// @dev Hashes each call individually, then encodes with MULTICALL_TYPEHASH, caller, deadline, and salt
    /// @dev Uses EIP-712 _hashTypedDataV4 for domain-separated hashing
    function _hashMulticall(
        address caller,
        bytes[] calldata calls,
        uint256 deadline,
        bytes32 salt
    ) internal view returns (bytes32) {
        bytes32[] memory callHashes = new bytes32[](calls.length);
        for (uint256 i = 0; i < calls.length; i++) {
            callHashes[i] = keccak256(calls[i]);
        }
        return
            _hashTypedDataV4(
                keccak256(
                    abi.encode(MULTICALL_TYPEHASH, caller, keccak256(abi.encodePacked(callHashes)), deadline, salt)
                )
            );
    }
}