@agenticprimitives/contracts 1.0.0-alpha.6 → 1.0.0-alpha.7

package/AUDIT.md

@@ -239,7 +239,27 @@ The `dist/deployments/` subpath (R7.3) exposes per-network contract addresses to
 
 ## 7. Known findings (cross-reference)
 
-See [`docs/audits/2026-05-packages-contracts-production-readiness.md`](../../docs/audits/2026-05-packages-contracts-production-readiness.md) § 3 (Per-contract findings) + § 4 (Cross-cutting).
+Canonical cross-cutting status: [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml) (CI-enforced).
+Historical detail: [`docs/audits/archive/2026-05/2026-05-packages-contracts-production-readiness.md`](../../docs/audits/archive/2026-05/2026-05-packages-contracts-production-readiness.md) § 3–4.
+
+**Closed (2026-06-09 independent contracts audit — SC-1..SC-5):**
+
+- **SC-1** (critical) — agreement issuer signature now bound to contents: `AgreementRegistry.register()` recomputes the digest over `agreementCommitment, schemaHash, issuer, chainId, address(this)` (`AGREEMENT_ISSUER_TYPEHASH`).
+- **SC-2** (high) — attestation subject-spoofing closed: `assertAssociation()` binds `subject, issuer, schemaId, credentialType, credentialHash, chainId, address(this)` (`ASSOCIATION_ATTESTATION_TYPEHASH`); joint path requires both party co-signatures.
+- **SC-3** (medium) — `DelegationManager.verifyAuthorizationForCall()` returns `(false,"no-code-enforcer")` instead of failing open on a no-code enforcer.
+- **SC-4** (medium) — `.impact` TLD root handed to `roles.namingRootOwner` (governance) at deploy, with a post-deploy assertion.
+- **SC-5** (medium) — paymaster deploy `require`-rejects deployer-as-governance/owner in production mode.
+
+**Open — contract deep audit 2026-06-10** (full detail: [`docs/audits/2026-06-10-contract-by-contract-audit.md`](../../docs/audits/2026-06-10-contract-by-contract-audit.md); status in `findings.yaml`):
+
+| Finding | Severity | One-line |
+|---|---|---|
+| **CA-F1** | High | Factory counterfactual address omits mode/trustees/timelocks → pre-deploy custody hijack of the canonical identity. **Mainnet blocker.** |
+| **CP-1** | High | Custody tier thresholds default to 1-of-n → one custodian key can rotate the set / upgrade impl. **Mainnet blocker.** |
+| **AN-1-ONCHAIN** | High | On-chain name registry enforces no label normalization (the SDK fix is bypassable by direct callers). |
+| **SUB-1 / SUB-2** | High | Subregistry name front-running (no commit-reveal) + sybil/homoglyph mass-squatting. |
+| **ATT-1** | High | `assertJointAgreement` issuer signature over a bare `credentialHash` (the SC-2 bug class, issuer side). |
+| **AGR-1, ATT-2, CA-1, CA-2, CP-2, DM-1/2, EN-11/13/22, PM-1/2, GOV-1, WA-1/2, AN-2, RES-1, ONT-4/7** | Medium | See the report + `findings.yaml`. |
 
 **Open at 2026-06-01:**
 

package/README.md

@@ -1,26 +1,35 @@
-# `@agenticprimitives/contracts`
+# @agenticprimitives/contracts
 
-The Solidity contracts that back the agenticprimitives stack — ERC-4337 v0.7 Smart Agent core, ERC-7710 delegation manager + 5 enforcers, ERC-7579 modular CustodyPolicy, SmartAgentPaymaster (3 modes), `.agent` / `.impact` TLD naming, ontology + profile resolvers, identity facets, and an ERC-6492-aware UniversalSignatureValidator. **All sources are present and audited under `src/`**; this is not a stub. The package publishes ABI + per-network deployments + flattened sources for downstream consumers.
+**Contracts and SDK are one artifact.**
 
-For the security & invariant breakdown see [`AUDIT.md`](./AUDIT.md). For the architecture rationale + per-file role see [`CLAUDE.md`](./CLAUDE.md). For the current security review checklist see [`docs/audits/2026-05-packages-contracts-production-readiness.md`](../../docs/audits/2026-05-packages-contracts-production-readiness.md).
+This is the on-chain enforcement layer of the agenticprimitives substrate — 42 Solidity sources, all present and audited under `src/`, none of them stubs. ERC-4337 v0.7 Smart Agent core, ERC-7710-style delegation manager with caveat enforcers, an ERC-7579 modular CustodyPolicy, a three-mode paymaster, `.agent` TLD naming with hierarchical subregistries, ontology and profile resolvers, identity facets, and an ERC-6492-aware UniversalSignatureValidator. The package publishes ABI subpaths, per-network deployment JSON, flattened sources, and the Solidity itself — so a TypeScript consumer pulls addresses and ABIs from the same artifact the auditors read.
 
-**Current contract roster** (28 contracts under `src/`, 635 Foundry tests):
-- `AgentAccount.sol` — UUPSUpgradeable + ERC-7579 + ERC-1271 + WebAuthn-supporting SA
+"One artifact" is CI-enforced, not aspirational: TypeScript typehashes are locked to the Solidity constants (`pnpm check:eip712-typehash-equality`), ABIs are sync-gated, and storage layouts are snapshot-gated (`pnpm check:storage-layouts`). You cannot drift the client from the chain.
+
+> Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
+
+## What's in `src/`
+
+- `AgentAccount.sol` — UUPSUpgradeable + ERC-7579 + ERC-1271 + WebAuthn-supporting Smart Agent; a thin modular core where custody, threshold, and session machinery are modules, not inlined features
 - `AgentAccountFactory.sol` — CREATE2 deterministic deploys; salt from auth methods + scope (NEVER from a name)
 - `SmartAgentPaymaster.sol` — verifying-paymaster + allowlist + devMode (testnet only) modes
-- `agency/DelegationManager.sol` + `enforcers/{AllowedMethods,AllowedTargets,Timestamp,Value,Quorum}Enforcer.sol`
+- `agency/DelegationManager.sol` + `enforcers/{AllowedMethods,AllowedTargets,Timestamp,Value,Quorum,CallDataHash}Enforcer.sol` — scoped delegation with on-chain caveat enforcement
 - `custody/CustodyPolicy.sol` — 16-action ERC-7579 module, T4/T5/T6 quorum tiers + 24h default T5 timelock
 - `naming/{AgentNameRegistry,AgentNameUniversalResolver,AgentNameAttributeResolver,PermissionlessSubregistry}.sol`
 - `identity/AgentProfileResolver.sol` + `ontology/{OntologyTermRegistry,ShapeRegistry,AttributeStorage}.sol`
-- `relationships/{AgentRelationship,RelationshipTypeRegistry}.sol` (⚠ Privacy Fork — see AUDIT.md § 3.9)
+- `relationships/{AgentRelationship,RelationshipTypeRegistry}.sol` (⚠ Privacy Fork — experimental surface; see AUDIT.md § 3.9)
 - `governance/{AgenticGovernance,GovernanceManaged}.sol` — system pause + governance base
-- `libraries/{WebAuthnLib,P256Verifier,SignatureSlotRecovery,MultiSendCallOnly}.sol`
+- `libraries/{WebAuthnLib,P256Verifier,SignatureSlotRecovery,MultiSendCallOnly}.sol` — security-critical primitives
 - `UniversalSignatureValidator.sol` — single signature entrypoint (ERC-6492 + ERC-1271 + raw ECDSA fanout per spec 214 SB-4)
 - `ApprovedHashRegistry.sol` — v=1 pre-approved hash signature path
 
-Deployed addresses (Base Sepolia testnet): [`deployments-base-sepolia.json`](./deployments-base-sepolia.json) (committed, public; surfaced to TypeScript consumers via the generated `@agenticprimitives/contracts/deployments/base-sepolia` subpath).
+Behind it: 774 Foundry tests including invariant suites, plus Halmos symbolic proofs, Echidna and Medusa fuzzing campaigns, and PR-blocking static analysis (Slither, Aderyn, CodeQL, Solhint).
 
-**Production deployment is deferred** — the testnet uses a publicly disclosed deployer EOA intentionally (keeps the demo reproducible). See [`AUDIT.md` § 4.1](./AUDIT.md#41-the-production-gate-open-audit-item-n1) for the production rotation runbook.
+Deployed addresses (Base Sepolia testnet): [`deployments-base-sepolia.json`](./deployments-base-sepolia.json) — committed, public, and surfaced to TypeScript consumers via the generated `@agenticprimitives/contracts/deployments/base-sepolia` subpath.
+
+## How it's different
+
+Compared to Safe, ZeroDev, or Alchemy's contract stacks, the difference is scope and coupling. Those projects ship an account (and ship it well); the rest of the trust chain — who the account is, what it may delegate, how custody recovers it — is left to integrations with other vendors' contracts. Here the account, delegation manager, caveat enforcers, custody module, naming registry, and signature validator are designed and audited as one system, sharing one identity anchor. There is no third-party multi-sig dependency: custody quorums are our own ERC-7579 module, with Safe-style signature packing ported as a pattern rather than inherited as a runtime dependency. And the consumption model is different — most contract suites hand you addresses and a block explorer link; this package hands you versioned ABIs, deployments, and flattened sources as npm subpaths, CI-locked to the TypeScript SDK that consumes them.
 
 ## Setup
 
@@ -43,7 +52,7 @@ anvil
 pnpm deploy:anvil
 ```
 
-Writes deployed addresses to `deployments-anvil.json`. The other demo apps (`apps/demo-web`, `apps/demo-a2a`, `apps/demo-mcp`) read this file on startup.
+Writes deployed addresses to `deployments-anvil.json`. The demo apps (`apps/demo-web`, `apps/demo-a2a`, `apps/demo-mcp`) read this file on startup.
 
 ## Deploy to Base Sepolia
 
@@ -53,4 +62,19 @@ export PRIVATE_KEY=0x...     # funded deployer
 pnpm deploy:base-sepolia
 ```
 
-Writes to `deployments-base-sepolia.json`. The CI/Vercel/Fly deploy reads this. Demo idle cost: ~$0.
+Writes to `deployments-base-sepolia.json`. CI and hosted deploys read this. Demo idle cost: ~$0.
+
+## Audit posture
+
+Trust infrastructure should be the most transparent code you depend on, so the audit trail is public by default:
+
+- [`AUDIT.md`](./AUDIT.md) — the security and invariant dossier for every contract under `src/`, including the production key-rotation runbook (§ 4.1).
+- [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml) — the live, CI-gated findings ledger; a "closed" finding must anchor to real source or the build fails.
+- [`docs/audits/2026-05-packages-contracts-production-readiness.md`](../../docs/audits/2026-05-packages-contracts-production-readiness.md) — the per-contract findings dossier.
+- [`CLAUDE.md`](./CLAUDE.md) — architecture rationale and per-file roles.
+
+## Status
+
+Testnet/pilot-ready. Production launch is gated on the public checklist in the root README — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).
+
+**Production deployment is deliberately deferred:** the testnet uses a publicly disclosed deployer EOA on purpose (it keeps the demo reproducible). The production rotation runbook is [`AUDIT.md` § 4.1](./AUDIT.md#41-the-production-gate-open-audit-item-n1).

package/deployments-base-sepolia.json

@@ -1 +1,32 @@
-{"agentAccountFactory":"0x6f7Fc9B36977F55666548e0a73D9063F0D88A760","agentAccountImplementation":"0x11f1523D9883BdF382993d70C601D307ED0F1f13","agentNameRegistry":"0x6e660e41CFd0B410827fb96D21c26600AF6abF2f","agentNameResolver":"0x324F5A60c5DE45244c70a43cA3A6B1462d80fF5f","agentNameUniversalResolver":"0x40587e3591F7051ba7534177aB1F0B366034040e","agentProfileResolver":"0x748D005E8B3b366132F209F066821B2713A6e19e","agentRelationship":"0x5c3bf13822a37c84Dc617C920dB61a8217f6311d","agreementRegistry":"0x3B1DB6AC972b649E9E0960F0816F4D1EC3264c22","allowedMethodsEnforcer":"0x1500601201aA339249e2B78c42952Cf26CD12Ea7","allowedTargetsEnforcer":"0xfA1c40F9dC4ACC4d339D2eDE0003872154292CEa","approvedHashRegistry":"0xE01c1356F4B10FEfa8Ab210020B802cf3e900759","attestationRegistry":"0x16EB207C65A63E3ae256F49a4B11e785fE001139","callDataHashEnforcer":"0x7267eF129fCf341717D7f3469DDf7A0135d00b61","chainId":84532,"custodyPolicy":"0x5e3e3Bda33c799f2403a30aE35bf81deff236283","delegationManager":"0xBC5AE6213E91E076232a6c8e3942746f06A50154","deployer":"0x31ed17fb99e82E02085Ab4B3cbdaB05489098b44","entryPoint":"0x7707C2b483CcADc3E72C2d39d216aC1C337FCd9d","geoFeatureRegistry":"0x0A9f10cb72D6Fb5C89Aa5865f397957729cF71F0","ontologyTermRegistry":"0xa9635EbfDb993395df6CD03b0DEE21E5b2A66Ec1","permissionlessSubregistry":"0xF38fdcd8eC83360C2F73CEEa52ae419D37aCaB5F","permissionlessSubregistryDemoAgent":"0x1c698cBFE2733301614a245a505E20eB5597a972","quorumEnforcer":"0xeB88df4492FB8Eb254f6017eD0463d42CF6FC8e7","relationshipTypeRegistry":"0x7c5FfD0aB55C52f6aa00c04D2a30457579A3083B","shapeRegistry":"0xAe431c6F000235d30ae28f507493215815eF88E2","skillDefinitionRegistry":"0xc0A26f8bac0482E0F8e3a61762F5862Bc21a2D11","smartAgentPaymaster":"0x0e54A8Cc986C86530f0593817E8CafE01FC52983","timestampEnforcer":"0xf9AeF60b8cb4939bF5B1AF48E777dad99Ef1084f","universalSignatureValidator":"0x7A282fFf06E6DC73613A31F55345535e24CB6832","valueEnforcer":"0x4be1B537b9583E69D9baBf8af1dc5371A4a750C5"}
+{
+  "agentAccountFactory": "0x3E68B72B45e7C9d35B210E4Ab06e5Cece85cEbE4",
+  "agentAccountImplementation": "0x338318ABf9C8b28E7e77ed96a91857cCE1Db1328",
+  "agentNameRegistry": "0x15F7ed064A230C011b0244A14fD9653f011d609B",
+  "agentNameResolver": "0xcC9855A23C7a4D4592E68Fe47E195C2f9D832473",
+  "agentNameUniversalResolver": "0x7d777d2d0bbc1806B9Cc779121C27fbaAaFDb60b",
+  "agentProfileResolver": "0xc448EB159B2a35F07f6E1814CC8d125244d7384B",
+  "agentRelationship": "0xE6B8F6C7F1c9857013dA356DF08D0384334A9607",
+  "agreementRegistry": "0x7f4d6A74eda1D6ce251D371566f1c6639F9B0DDa",
+  "allowedMethodsEnforcer": "0xf77cf06aCd8b9e2f3204fe4bE16449B3594c9633",
+  "allowedTargetsEnforcer": "0xe3909FdEfD8b74B7D006E045DCd678e97D469Bfd",
+  "approvedHashRegistry": "0x90735B5281434D1746926E2AA722Cc6DbF3EFEe6",
+  "attestationRegistry": "0xaE3861fd299c74D96F6FCA25f19c7ACf8b9020ed",
+  "callDataHashEnforcer": "0x9F12932F1b85A1F96c1Cb1c5A0645e3F0Ab478Dd",
+  "chainId": 84532,
+  "custodyPolicy": "0xDeD6542A55476745846370562d1c75D15DDf2572",
+  "delegationManager": "0x3a8E2cE74564f699b135db6f266ccDb563979C05",
+  "deployer": "0x31ed17fb99e82E02085Ab4B3cbdaB05489098b44",
+  "entryPoint": "0x9B33De9d9597de82Eb56b5B26C478Dc0a6955388",
+  "geoFeatureRegistry": "0x78FdCae0aC9B0CD9943996282b8F39D77bec5b1c",
+  "ontologyTermRegistry": "0xf486Ba6e9FD2d687e68a1a7A77D0FA27bb1E66c3",
+  "permissionlessSubregistry": "0x1B8ED8693738e1A9DD653FEE5430d49e00202Bb7",
+  "permissionlessSubregistryDemoAgent": "0xc76b1cdB4340398f59fD9C5d6Cb65fCdC606B33b",
+  "quorumEnforcer": "0x76fb494aE991d1fe1603a91384BA4c1F890442a8",
+  "relationshipTypeRegistry": "0x526fBF5900b18B1D06201493bcE470b416FB71C3",
+  "shapeRegistry": "0x03AbD67A910abB2c5026f1973A05502e0473e316",
+  "skillDefinitionRegistry": "0x5ae94aba46D7daA1Ca9eaE0051043Ad05bcc392B",
+  "smartAgentPaymaster": "0x8eF92B9D62826052D8F7e6dcaB630dC3890bF540",
+  "timestampEnforcer": "0x7c452434314A5bf2048f9263aeCd0cC20Fa07965",
+  "universalSignatureValidator": "0xe8F3e531429F44D77dC3A331C18032bfa1550D84",
+  "valueEnforcer": "0x7c4533e0A9fB0B1cb5aa70327b222a80d72d52db"
+}

package/deployments-registries-base-sepolia.json

@@ -0,0 +1 @@
+{"agreementRegistry":"0x9f2A085f0bd2d8Afb69490C0C98D88592093906A","attestationRegistry":"0x4a156CAaE69E894E3C5e6F3064fE028F138b6847"}

package/dist/abi/AgentAccount.json

@@ -737,6 +737,19 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "scheduleUpgrade",
+    "inputs": [
+      {
+        "name": "newImplementation",
+        "type": "address",
+        "internalType": "address"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "sessionIssuer",
@@ -1297,6 +1310,11 @@
       }
     ]
   },
+  {
+    "type": "error",
+    "name": "DirectUpgradeBlocked",
+    "inputs": []
+  },
   {
     "type": "error",
     "name": "ERC1967InvalidImplementation",
@@ -1618,6 +1636,11 @@
     "name": "UpgradePending",
     "inputs": []
   },
+  {
+    "type": "error",
+    "name": "UpgradeTimelockNotSet",
+    "inputs": []
+  },
   {
     "type": "error",
     "name": "UpgradeTimelockTooLong",

package/dist/abi/AgentAccountFactory.json

@@ -230,6 +230,11 @@
           }
         ]
       },
+      {
+        "name": "timelockOverrides",
+        "type": "uint32[7]",
+        "internalType": "uint32[7]"
+      },
       {
         "name": "salt",
         "type": "uint256",

package/dist/abi/AgentNameRegistry.json

@@ -803,6 +803,11 @@
     "name": "EmptyLabel",
     "inputs": []
   },
+  {
+    "type": "error",
+    "name": "InvalidLabel",
+    "inputs": []
+  },
   {
     "type": "error",
     "name": "NameExpired",

package/dist/abi/AgenticGovernance.json

@@ -105,6 +105,19 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "setGuardian",
+    "inputs": [
+      {
+        "name": "newGuardian",
+        "type": "address",
+        "internalType": "address"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "setSigner",
@@ -168,6 +181,25 @@
     ],
     "anonymous": false
   },
+  {
+    "type": "event",
+    "name": "GuardianRotated",
+    "inputs": [
+      {
+        "name": "oldGuardian",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      },
+      {
+        "name": "newGuardian",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "Paused",

package/dist/abi/AgreementRegistry.json

@@ -195,11 +195,6 @@
             "type": "address",
             "internalType": "address"
           },
-          {
-            "name": "attestationStructHash",
-            "type": "bytes32",
-            "internalType": "bytes32"
-          },
           {
             "name": "issuerSignature",
             "type": "bytes",

package/dist/abi/CustodyPolicy.json

@@ -1103,6 +1103,17 @@
       }
     ]
   },
+  {
+    "type": "error",
+    "name": "UnconfiguredTier",
+    "inputs": [
+      {
+        "name": "tier",
+        "type": "uint8",
+        "internalType": "uint8"
+      }
+    ]
+  },
   {
     "type": "error",
     "name": "ZeroAddress",

package/dist/abi/QuorumEnforcer.json

@@ -212,6 +212,22 @@
       }
     ]
   },
+  {
+    "type": "error",
+    "name": "InvalidThreshold",
+    "inputs": [
+      {
+        "name": "threshold",
+        "type": "uint8",
+        "internalType": "uint8"
+      },
+      {
+        "name": "signerSetSize",
+        "type": "uint256",
+        "internalType": "uint256"
+      }
+    ]
+  },
   {
     "type": "error",
     "name": "PasskeyPubKeyMismatch",

package/dist/abi/SmartAgentPaymaster.json

@@ -30,6 +30,19 @@
     ],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "DEPOSIT_WITHDRAWAL_TIMELOCK",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "",
+        "type": "uint64",
+        "internalType": "uint64"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "acceptOwnership",
@@ -50,6 +63,13 @@
     "outputs": [],
     "stateMutability": "payable"
   },
+  {
+    "type": "function",
+    "name": "cancelDepositWithdrawal",
+    "inputs": [],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "deposit",
@@ -83,6 +103,13 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "executeDepositWithdrawal",
+    "inputs": [],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "getDeposit",
@@ -217,6 +244,19 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "paused",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "pendingOwner",
@@ -230,6 +270,29 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "pendingWithdrawal",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "to",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "amount",
+        "type": "uint256",
+        "internalType": "uint256"
+      },
+      {
+        "name": "eta",
+        "type": "uint64",
+        "internalType": "uint64"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "postOp",
@@ -265,6 +328,24 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "scheduleDepositWithdrawal",
+    "inputs": [
+      {
+        "name": "to",
+        "type": "address",
+        "internalType": "address payable"
+      },
+      {
+        "name": "amount",
+        "type": "uint256",
+        "internalType": "uint256"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "setAccepted",
@@ -314,6 +395,19 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "setPauseMirror",
+    "inputs": [
+      {
+        "name": "paused_",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "setVerifyingSigner",
@@ -327,6 +421,13 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "syncPauseFromGovernance",
+    "inputs": [],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "transferOwnership",
@@ -472,6 +573,69 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "event",
+    "name": "DepositWithdrawalCancelled",
+    "inputs": [
+      {
+        "name": "to",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      },
+      {
+        "name": "amount",
+        "type": "uint256",
+        "indexed": false,
+        "internalType": "uint256"
+      }
+    ],
+    "anonymous": false
+  },
+  {
+    "type": "event",
+    "name": "DepositWithdrawalExecuted",
+    "inputs": [
+      {
+        "name": "to",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      },
+      {
+        "name": "amount",
+        "type": "uint256",
+        "indexed": false,
+        "internalType": "uint256"
+      }
+    ],
+    "anonymous": false
+  },
+  {
+    "type": "event",
+    "name": "DepositWithdrawalScheduled",
+    "inputs": [
+      {
+        "name": "to",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      },
+      {
+        "name": "amount",
+        "type": "uint256",
+        "indexed": false,
+        "internalType": "uint256"
+      },
+      {
+        "name": "eta",
+        "type": "uint64",
+        "indexed": false,
+        "internalType": "uint64"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "DevModeSet",
@@ -523,6 +687,25 @@
     ],
     "anonymous": false
   },
+  {
+    "type": "event",
+    "name": "PauseMirrorSynced",
+    "inputs": [
+      {
+        "name": "paused",
+        "type": "bool",
+        "indexed": false,
+        "internalType": "bool"
+      },
+      {
+        "name": "by",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "SenderAcceptedSet",
@@ -582,6 +765,11 @@
     "name": "MustOverride",
     "inputs": []
   },
+  {
+    "type": "error",
+    "name": "NoPendingWithdrawal",
+    "inputs": []
+  },
   {
     "type": "error",
     "name": "NotFromEntryPoint",
@@ -656,6 +844,27 @@
     "name": "SystemPaused",
     "inputs": []
   },
+  {
+    "type": "error",
+    "name": "WithdrawalAmountZero",
+    "inputs": []
+  },
+  {
+    "type": "error",
+    "name": "WithdrawalNotReady",
+    "inputs": [
+      {
+        "name": "eta",
+        "type": "uint64",
+        "internalType": "uint64"
+      }
+    ]
+  },
+  {
+    "type": "error",
+    "name": "WithdrawalToZero",
+    "inputs": []
+  },
   {
     "type": "error",
     "name": "ZeroGovernance",