1// SPDX-License-Identifier: MIT
2pragma solidity ^0.8.28;
3import "forge-std/Script.sol";
4 
5interface ISafe {
6    function setup(
7        address[] calldata _owners,
8        uint256 _threshold,
9        address to,
10        bytes calldata data,
11        address fallbackHandler,
12        address paymentToken,
13        uint256 payment,
14        address payable paymentReceiver
15    ) external;
16}
17 
18interface ISafeProxyFactory {
19    function createProxyWithNonce(
20        address _singleton,
21        bytes memory initializer,
22        uint256 saltNonce
23    ) external returns (address);
24}
25 
26contract DeploySafeCREATE2 is Script {
27    address constant SAFE_SINGLETON = 0x29fcB43b46531BcA003ddC8FCB67FFE91900C762; // SafeL2
28    address constant SAFE_PROXY_FACTORY = 0x4e1DCf7AD4e460CfD30791CCC4F9c8a4f820ec67;
29    address constant FALLBACK_HANDLER = 0xfd0732Dc9E303f09fCEf3a7388Ad10A83459Ec99;
30 
31    uint256 constant MONAD_MAINNET_CHAIN_ID = 143;
32    uint256 constant MONAD_TESTNET_CHAIN_ID = 10143;
33 
34    function run() external returns (address) {
35        address owner1 = vm.envAddress("OWNER_1");
36        address owner2 = vm.envAddress("OWNER_2");
37        address owner3 = vm.envAddress("OWNER_3");
38 
39        address[] memory owners = new address[](3);
40        owners[0] = owner1;
41        owners[1] = owner2;
42        owners[2] = owner3;
43 
44        bytes memory initializer = abi.encodeWithSelector(
45            ISafe.setup.selector,
46            owners,              // _owners
47            2,                   // _threshold (2 of 3)
48            address(0),          // to
49            "",                  // data
50            FALLBACK_HANDLER,    // fallbackHandler
51            address(0),          // paymentToken
52            0,                   // payment
53            payable(0)           // paymentReceiver
54        );
55 
56        vm.startBroadcast();
57 
58        // Deterministic if SALT_NONCE is fixed; default derives from owners + chainId
59        uint256 saltNonce = vm.envOr(
60            "SALT_NONCE",
61            uint256(keccak256(abi.encode(owners, block.chainid)))
62        );
63 
64        address proxy = ISafeProxyFactory(SAFE_PROXY_FACTORY).createProxyWithNonce(
65            SAFE_SINGLETON,
66            initializer,
67            saltNonce
68        );
69 
70        string memory safePrefix;
71        if (block.chainid == MONAD_MAINNET_CHAIN_ID) {
72            safePrefix = "monad";
73        } else if (block.chainid == MONAD_TESTNET_CHAIN_ID) {
74            safePrefix = "monad-testnet";
75        } else {
76            revert("Unsupported chain");
77        }
78 
79        console.log("Safe deployed at:", proxy);
80        console.log(
81            string.concat("Access: https://app.safe.global/home?safe=", safePrefix, ":"),
82            proxy
83        );
84 
85        vm.stopBroadcast();
86        return proxy;
87    }
88}