// SPDX-License-Identifier: MIT pragma solidity ^0.8.24; import "@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol"; import "@openzeppelin/contracts-upgradeable/utils/ReentrancyGuardUpgradeable.sol"; import "@openzeppelin/contracts-upgradeable/utils/cryptography/EIP712Upgradeable.sol"; import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; import "@openzeppelin/contracts/utils/cryptography/ECDSA.sol"; /** * @title EnvoyEscrow * @notice EIP-1167 clone — initializable, non-upgradeable after deployment. */ contract EnvoyEscrow is Initializable, ReentrancyGuardUpgradeable, EIP712Upgradeable { using SafeERC20 for IERC20; // ────────────────────────────────────────────── // Enums // ────────────────────────────────────────────── enum SlotState { Open, Claimed, Refunded } // ────────────────────────────────────────────── // Structs // ────────────────────────────────────────────── struct Campaign { address agent; address oracle; uint256 totalBudget; uint256 allocatedAmount; uint256 claimedAmount; uint256 refundedAmount; uint256 expiry; uint256 slotCount; bool closed; } struct InfluencerSlot { address influencerWallet; uint256 amount; string contentType; uint256 deadline; uint256 createdAt; uint8 stage; SlotState state; } // ────────────────────────────────────────────── // Constants // ────────────────────────────────────────────── uint256 public constant BPS_DENOMINATOR = 10000; uint256 public constant MAX_LOCK_DURATION = 90 days; // ────────────────────────────────────────────── // EIP-712 Constants // ────────────────────────────────────────────── bytes32 public constant STAGE_UPDATE_TYPEHASH = keccak256( "StageUpdate(uint256 slotIndex,uint8 newStage,uint256 expiry,uint256 nonce)" ); bytes32 public constant CANCEL_CONSENT_TYPEHASH = keccak256( "CancelConsent(uint256 slotIndex,uint256 expiry,uint256 nonce)" ); // ────────────────────────────────────────────── // State // ────────────────────────────────────────────── IERC20 public usdc; address public treasury; uint256 public feeBps; Campaign public campaign; mapping(uint256 => InfluencerSlot) public slots; mapping(uint256 => uint256) public stageNonces; uint256 public accountedBalance; // ────────────────────────────────────────────── // Events // ────────────────────────────────────────────── event FundingRecorded(uint256 amount, uint256 totalBudget, uint256 balance); event SlotAdded(uint256 indexed slotIndex, address indexed influencer, uint256 amount, string contentType, uint256 deadline); event SlotCancelled(uint256 indexed slotIndex, uint256 amount); event SlotDeadlineExtended(uint256 indexed slotIndex, uint256 newDeadline); event CampaignExpiryExtended(uint256 newExpiry); event StageAttested(uint256 indexed slotIndex, uint8 newStage, uint256 nonce); event SlotSettled(uint256 indexed slotIndex, address indexed influencer, uint8 settleStage, uint256 brandAmount, uint256 creatorAmount, uint256 feeAmount); event UnallocatedReclaimed(uint256 amount); event SlotCancelledWithConsent(uint256 indexed slotIndex, uint256 amount, address indexed influencer); event OracleUpdated(address oldOracle, address newOracle); event SlotsAddedBatch(uint256 indexed firstSlotIndex, uint256 count, uint256 totalAmount); // ────────────────────────────────────────────── // Errors // ────────────────────────────────────────────── error NotAgent(); error InvalidConsent(); error SlotNotOpen(); error InvalidStage(); error StageMustIncrease(); error BudgetExceeded(); error DeadlinePassed(); error DeadlineNotPassed(); error DeadlineMustIncrease(); error DeadlineTooFar(); error InvalidDeadline(); error InvalidAttestation(); error InvalidNonce(); error AttestationExpired(); error CanOnlyCancelAtStageZero(); error FeeExceedsCreatorShare(); error SettlementInvariantBroken(); error ZeroAddress(); error ZeroAmount(); error InvalidExpiry(); error ExpiryMustIncrease(); error InvalidSlot(); error FeeTooHigh(); error ArrayLengthMismatch(); error EmptyArray(); // ────────────────────────────────────────────── // Modifiers // ────────────────────────────────────────────── modifier onlyAgent() { if (msg.sender != campaign.agent) revert NotAgent(); _; } modifier validSlot(uint256 slotIndex) { if (slotIndex >= campaign.slotCount) revert InvalidSlot(); _; } // ────────────────────────────────────────────── // Initializer (called by Factory via clone) // ────────────────────────────────────────────── /// @custom:oz-upgrades-unsafe-allow constructor constructor() { _disableInitializers(); } function initialize( address _usdc, address _treasury, address _agent, address _oracle, uint256 _expiry, uint256 _feeBps ) external initializer { if (_usdc == address(0) || _treasury == address(0) || _agent == address(0) || _oracle == address(0)) revert ZeroAddress(); if (_expiry <= block.timestamp) revert InvalidExpiry(); if (_feeBps > 1000) revert FeeTooHigh(); __ReentrancyGuard_init(); __EIP712_init("EnvoyEscrow", "1"); usdc = IERC20(_usdc); treasury = _treasury; feeBps = _feeBps; campaign.agent = _agent; campaign.oracle = _oracle; campaign.expiry = _expiry; } // ────────────────────────────────────────────── // Funding // ────────────────────────────────────────────── function recordFunding() external { uint256 balance = usdc.balanceOf(address(this)); if (balance > accountedBalance) { uint256 delta = balance - accountedBalance; campaign.totalBudget += delta; emit FundingRecorded(delta, campaign.totalBudget, balance); } accountedBalance = balance; } // ────────────────────────────────────────────── // Slot Management // ────────────────────────────────────────────── function addInfluencerSlot( address influencerWallet, uint256 amount, string calldata contentType, uint256 deadline ) external onlyAgent returns (uint256 slotIndex) { if (influencerWallet == address(0)) revert ZeroAddress(); if (amount == 0) revert ZeroAmount(); if (deadline <= block.timestamp) revert InvalidDeadline(); if (campaign.allocatedAmount + amount > campaign.totalBudget) revert BudgetExceeded(); slotIndex = campaign.slotCount++; campaign.allocatedAmount += amount; InfluencerSlot storage slot = slots[slotIndex]; slot.influencerWallet = influencerWallet; slot.amount = amount; slot.contentType = contentType; slot.deadline = deadline; slot.createdAt = block.timestamp; // slot.stage = 0 (default) // slot.state = SlotState.Open (default) emit SlotAdded(slotIndex, influencerWallet, amount, contentType, deadline); } function addInfluencerSlots( address[] calldata influencerWallets, uint256[] calldata amounts, string[] calldata contentTypes, uint256[] calldata deadlines ) external onlyAgent returns (uint256 firstSlotIndex, uint256 count) { count = influencerWallets.length; if (count == 0) revert EmptyArray(); if (amounts.length != count || contentTypes.length != count || deadlines.length != count) revert ArrayLengthMismatch(); uint256 totalAmount; for (uint256 i; i < count; ++i) { totalAmount += amounts[i]; } if (campaign.allocatedAmount + totalAmount > campaign.totalBudget) revert BudgetExceeded(); firstSlotIndex = campaign.slotCount; for (uint256 i; i < count; ++i) { if (influencerWallets[i] == address(0)) revert ZeroAddress(); if (amounts[i] == 0) revert ZeroAmount(); if (deadlines[i] <= block.timestamp) revert InvalidDeadline(); uint256 slotIndex = campaign.slotCount++; InfluencerSlot storage slot = slots[slotIndex]; slot.influencerWallet = influencerWallets[i]; slot.amount = amounts[i]; slot.contentType = contentTypes[i]; slot.deadline = deadlines[i]; slot.createdAt = block.timestamp; emit SlotAdded(slotIndex, influencerWallets[i], amounts[i], contentTypes[i], deadlines[i]); } campaign.allocatedAmount += totalAmount; emit SlotsAddedBatch(firstSlotIndex, count, totalAmount); } function cancelSlot( uint256 slotIndex ) external onlyAgent validSlot(slotIndex) nonReentrant { InfluencerSlot storage slot = slots[slotIndex]; if (slot.state != SlotState.Open) revert SlotNotOpen(); if (slot.stage != 0) revert CanOnlyCancelAtStageZero(); if (block.timestamp < slot.deadline) revert DeadlineNotPassed(); slot.state = SlotState.Refunded; campaign.allocatedAmount -= slot.amount; campaign.totalBudget -= slot.amount; campaign.refundedAmount += slot.amount; usdc.safeTransfer(campaign.agent, slot.amount); accountedBalance = usdc.balanceOf(address(this)); emit SlotCancelled(slotIndex, slot.amount); } // ────────────────────────────────────────────── // Extensions // ────────────────────────────────────────────── function extendSlotDeadline( uint256 slotIndex, uint256 newDeadline ) external onlyAgent validSlot(slotIndex) { InfluencerSlot storage slot = slots[slotIndex]; if (slot.state != SlotState.Open) revert SlotNotOpen(); if (newDeadline <= slot.deadline) revert DeadlineMustIncrease(); if (newDeadline > slot.createdAt + MAX_LOCK_DURATION) revert DeadlineTooFar(); slot.deadline = newDeadline; emit SlotDeadlineExtended(slotIndex, newDeadline); } function extendCampaignExpiry(uint256 newExpiry) external onlyAgent { if (newExpiry <= campaign.expiry) revert ExpiryMustIncrease(); campaign.expiry = newExpiry; emit CampaignExpiryExtended(newExpiry); } // ────────────────────────────────────────────── // Oracle EIP-712 Stage Attestation // ────────────────────────────────────────────── function attestStage( uint256 slotIndex, uint8 newStage, uint256 expiry, uint256 nonce, bytes calldata signature ) external validSlot(slotIndex) nonReentrant { InfluencerSlot storage slot = slots[slotIndex]; if (slot.state != SlotState.Open) revert SlotNotOpen(); if (newStage != 3) revert InvalidStage(); if (newStage <= slot.stage) revert StageMustIncrease(); if (block.timestamp >= slot.deadline) revert DeadlinePassed(); if (block.timestamp > expiry) revert AttestationExpired(); if (nonce != stageNonces[slotIndex]) revert InvalidNonce(); bytes32 structHash = keccak256(abi.encode( STAGE_UPDATE_TYPEHASH, slotIndex, newStage, expiry, nonce )); bytes32 digest = _hashTypedDataV4(structHash); address signer = ECDSA.recover(digest, signature); if (signer != campaign.oracle) revert InvalidAttestation(); stageNonces[slotIndex]++; _settle(slotIndex, 3); emit StageAttested(slotIndex, newStage, nonce); } // ────────────────────────────────────────────── // Settlement // ────────────────────────────────────────────── function settleAfterDeadline( uint256 slotIndex ) external validSlot(slotIndex) nonReentrant { InfluencerSlot storage slot = slots[slotIndex]; if (slot.state != SlotState.Open) revert SlotNotOpen(); if (block.timestamp < slot.deadline) revert DeadlineNotPassed(); _settle(slotIndex, slot.stage); } function brandApproveAndRelease( uint256 slotIndex ) external onlyAgent validSlot(slotIndex) nonReentrant { InfluencerSlot storage slot = slots[slotIndex]; if (slot.state != SlotState.Open) revert SlotNotOpen(); _settle(slotIndex, 3); } // ────────────────────────────────────────────── // Reclaim Unallocated // ────────────────────────────────────────────── function reclaimUnallocated() external nonReentrant { uint256 unallocated = campaign.totalBudget - campaign.allocatedAmount; if (unallocated == 0) revert ZeroAmount(); campaign.totalBudget -= unallocated; campaign.refundedAmount += unallocated; usdc.safeTransfer(campaign.agent, unallocated); accountedBalance = usdc.balanceOf(address(this)); emit UnallocatedReclaimed(unallocated); } // ────────────────────────────────────────────── // Agent Admin // ────────────────────────────────────────────── function cancelSlotWithConsent( uint256 slotIndex, uint256 consentExpiry, bytes calldata creatorSignature ) external onlyAgent validSlot(slotIndex) nonReentrant { InfluencerSlot storage slot = slots[slotIndex]; if (slot.state != SlotState.Open) revert SlotNotOpen(); if (slot.stage != 0) revert CanOnlyCancelAtStageZero(); if (block.timestamp > consentExpiry) revert AttestationExpired(); uint256 nonce = stageNonces[slotIndex]; bytes32 structHash = keccak256(abi.encode( CANCEL_CONSENT_TYPEHASH, slotIndex, consentExpiry, nonce )); bytes32 digest = _hashTypedDataV4(structHash); address signer = ECDSA.recover(digest, creatorSignature); if (signer != slot.influencerWallet) revert InvalidConsent(); stageNonces[slotIndex]++; slot.state = SlotState.Refunded; campaign.allocatedAmount -= slot.amount; campaign.totalBudget -= slot.amount; campaign.refundedAmount += slot.amount; usdc.safeTransfer(campaign.agent, slot.amount); accountedBalance = usdc.balanceOf(address(this)); emit SlotCancelledWithConsent(slotIndex, slot.amount, slot.influencerWallet); } function setOracle(address _oracle) external onlyAgent { if (_oracle == address(0)) revert ZeroAddress(); address oldOracle = campaign.oracle; campaign.oracle = _oracle; for (uint256 i = 0; i < campaign.slotCount; i++) { if (slots[i].state == SlotState.Open) { stageNonces[i]++; } } emit OracleUpdated(oldOracle, _oracle); } // ────────────────────────────────────────────── // View Helpers // ────────────────────────────────────────────── function getCampaign() external view returns (Campaign memory) { return campaign; } function getSlot(uint256 slotIndex) external view returns (InfluencerSlot memory) { return slots[slotIndex]; } function getAvailableBudget() external view returns (uint256) { return campaign.totalBudget - campaign.allocatedAmount; } // ────────────────────────────────────────────── // Internal // ────────────────────────────────────────────── function _stageBrandBps(uint8 stage) internal pure returns (uint256) { if (stage == 0) return 10000; if (stage == 3) return 0; revert InvalidStage(); } function _settle(uint256 slotIndex, uint8 settleStage) internal { InfluencerSlot storage slot = slots[slotIndex]; if (settleStage > 3) revert InvalidStage(); uint256 brandRefundBps = _stageBrandBps(settleStage); uint256 brandAmount = (slot.amount * brandRefundBps) / BPS_DENOMINATOR; uint256 creatorPlusFee = slot.amount - brandAmount; uint256 feeAmount = 0; uint256 creatorAmount = 0; if (creatorPlusFee > 0) { feeAmount = (slot.amount * feeBps) / BPS_DENOMINATOR; if (creatorPlusFee < feeAmount) revert FeeExceedsCreatorShare(); creatorAmount = creatorPlusFee - feeAmount; slot.state = SlotState.Claimed; } else { slot.state = SlotState.Refunded; } if (brandAmount + creatorAmount + feeAmount != slot.amount) revert SettlementInvariantBroken(); slot.stage = settleStage; campaign.allocatedAmount -= slot.amount; campaign.totalBudget -= slot.amount; campaign.claimedAmount += creatorAmount + feeAmount; campaign.refundedAmount += brandAmount; if (brandAmount > 0) usdc.safeTransfer(campaign.agent, brandAmount); if (creatorAmount > 0) usdc.safeTransfer(slot.influencerWallet, creatorAmount); if (feeAmount > 0) usdc.safeTransfer(treasury, feeAmount); accountedBalance = usdc.balanceOf(address(this)); emit SlotSettled(slotIndex, slot.influencerWallet, settleStage, brandAmount, creatorAmount, feeAmount); } }

Visual Contract Explorer

Contract Activity

Build smart contracts visually