Add EIP7702 batch DeleGator relay surface and coordinator contracts.

Introduce signed executeBatch relay execution with nonce replay protection, optional beacon proxy delegation target, batch relay coordinator, deploy script, and tests per O1-1/O1-2.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: nthpool

script/DeployEIP7702BatchDeleGator.s.sol

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: MIT AND Apache-2.0
+pragma solidity 0.8.23;
+
+import "forge-std/Script.sol";
+import { console2 } from "forge-std/console2.sol";
+import { IEntryPoint } from "@account-abstraction/interfaces/IEntryPoint.sol";
+
+import { EIP7702BatchDeleGator } from "../src/EIP7702/EIP7702BatchDeleGator.sol";
+import { EIP7702BatchDeleGatorBeacon } from "../src/EIP7702/EIP7702BatchDeleGatorBeacon.sol";
+import { EIP7702BatchDeleGatorProxy } from "../src/EIP7702/EIP7702BatchDeleGatorProxy.sol";
+import { DeleGatorBatchRelayCoordinator } from "../src/DeleGatorBatchRelayCoordinator.sol";
+import { IDelegationManager } from "../src/interfaces/IDelegationManager.sol";
+
+/**
+ * @title DeployEIP7702BatchDeleGator
+ * @notice Deploys EIP7702BatchDeleGator, optional beacon/proxy, and the batch relay coordinator.
+ * @dev Does not broadcast by default. Run with `--broadcast` only when ready to deploy.
+ * @dev Required env:
+ *      - SALT
+ *      - ENTRYPOINT_ADDRESS
+ *      - DELEGATION_MANAGER_ADDRESS
+ * @dev Optional env:
+ *      - BEACON_OWNER (defaults to deployer)
+ *      - COORDINATOR_OWNER (defaults to deployer)
+ *      - DEPLOY_PROXY=true|false (defaults to true)
+ */
+contract DeployEIP7702BatchDeleGator is Script {
+    bytes32 internal salt;
+    IEntryPoint internal entryPoint;
+    IDelegationManager internal delegationManager;
+    address internal deployer;
+    address internal beaconOwner;
+    address internal coordinatorOwner;
+    bool internal deployProxy;
+
+    function setUp() public {
+        salt = bytes32(abi.encodePacked(vm.envString("SALT")));
+        entryPoint = IEntryPoint(vm.envAddress("ENTRYPOINT_ADDRESS"));
+        delegationManager = IDelegationManager(vm.envAddress("DELEGATION_MANAGER_ADDRESS"));
+        deployer = msg.sender;
+        beaconOwner = vm.envOr("BEACON_OWNER", deployer);
+        coordinatorOwner = vm.envOr("COORDINATOR_OWNER", deployer);
+        deployProxy = vm.envOr("DEPLOY_PROXY", true);
+
+        console2.log("~~~ DeployEIP7702BatchDeleGator ~~~");
+        console2.log("Deployer: %s", deployer);
+        console2.log("Entry Point: %s", address(entryPoint));
+        console2.log("Delegation Manager: %s", address(delegationManager));
+        console2.log("Beacon Owner: %s", beaconOwner);
+        console2.log("Coordinator Owner: %s", coordinatorOwner);
+        console2.log("Deploy Proxy: %s", deployProxy);
+        console2.log("Salt:");
+        console2.logBytes32(salt);
+    }
+
+    function run() public {
+        vm.startBroadcast();
+
+        address implementation = address(
+            new EIP7702BatchDeleGator{ salt: salt }(delegationManager, entryPoint)
+        );
+        console2.log("EIP7702BatchDeleGatorImpl: %s", implementation);
+
+        address authorizationTarget = implementation;
+        address beacon;
+        address proxy;
+
+        if (deployProxy) {
+            beacon = address(new EIP7702BatchDeleGatorBeacon{ salt: salt }(implementation, beaconOwner));
+            console2.log("EIP7702BatchDeleGatorBeacon: %s", beacon);
+
+            proxy = address(new EIP7702BatchDeleGatorProxy{ salt: salt }(beacon));
+            console2.log("EIP7702BatchDeleGatorProxy: %s", proxy);
+
+            authorizationTarget = proxy;
+        }
+
+        address coordinator = address(new DeleGatorBatchRelayCoordinator{ salt: salt }(coordinatorOwner));
+        console2.log("DeleGatorBatchRelayCoordinator: %s", coordinator);
+
+        console2.log("~~~ Release Metadata ~~~");
+        console2.log("authorizationTarget: %s", authorizationTarget);
+        console2.log("implementation: %s", implementation);
+        console2.log("beacon: %s", beacon);
+        console2.log("proxy: %s", proxy);
+        console2.log("coordinator: %s", coordinator);
+        console2.log("eip712Name: EIP7702BatchDeleGator");
+        console2.log("eip712Version: 1");
+        console2.log("contractVersion: %s", EIP7702BatchDeleGator(payable(implementation)).VERSION());
+
+        vm.stopBroadcast();
+    }
+}

src/DeleGatorBatchRelayCoordinator.sol

@@ -0,0 +1,44 @@
+// SPDX-License-Identifier: MIT AND Apache-2.0
+pragma solidity 0.8.23;
+
+import { Ownable } from "@openzeppelin/contracts/access/Ownable.sol";
+
+import { IDeleGatorBatchRelayCoordinator } from "./interfaces/IDeleGatorBatchRelayCoordinator.sol";
+import { IEIP7702BatchDeleGator } from "./interfaces/IEIP7702BatchDeleGator.sol";
+
+/**
+ * @title DeleGatorBatchRelayCoordinator
+ * @notice Owner-gated multi-account coordinator for signed batch DeleGator relay execution.
+ * @dev Non-atomic by default: a failed account row is recorded and later rows still execute.
+ * @dev Does not forward ETH and does not authorize child account execution by itself.
+ */
+contract DeleGatorBatchRelayCoordinator is Ownable, IDeleGatorBatchRelayCoordinator {
+    uint256 internal constant MAX_REVERT_DATA = 256;
+
+    /// @dev Emitted for each coordinator row after execution attempt.
+    event BatchRowExecuted(uint256 indexed index, address indexed account, bool success, bytes revertData);
+
+    constructor(address initialOwner) Ownable(initialOwner) { }
+
+    /// @inheritdoc IDeleGatorBatchRelayCoordinator
+    function executeBatches(AccountBatch[] calldata batches) external onlyOwner {
+        uint256 len = batches.length;
+        for (uint256 i = 0; i < len;) {
+            AccountBatch calldata batch = batches[i];
+
+            (bool success, bytes memory revertData) = address(batch.account).call(
+                abi.encodeWithSelector(IEIP7702BatchDeleGator.executeBatch.selector, batch.mode, batch.executionData)
+            );
+
+            if (!success && revertData.length > MAX_REVERT_DATA) {
+                revertData = abi.encodePacked(keccak256(revertData));
+            }
+
+            emit BatchRowExecuted(i, batch.account, success, success ? bytes("") : revertData);
+
+            unchecked {
+                ++i;
+            }
+        }
+    }
+}