[hanzel98]

Summary

• Adds MetaSwapOrderDelegationManager for two flows: exact batches and MetaSwap limit orders.
• An exact batch signs the batch hash, so the submitter cannot change a target, value, or calldata byte. A limit order signs the settlement bounds, and the redeemer supplies the route.
• Redemption costs less because these flows no longer go through the generic delegation loop and external caveat hooks. The checks those flows need are enforced by the manager.

Flow	User signs	Submitter may change
Exact batch	The batch hash	Nothing
Limit order	Tokens, amounts, approval shape, recipient, redeemers, optional timestamp and id	The route and aggregator id

A limit order still requires a listed redeemer, checks the approval and swap shape, and requires the signed minimum output. disabledDelegations remains the one-shot for both flows. A failed fill rolls back.

Gas

Estimated transaction gas: 21,000 plus calldata plus execution. Each row is the same swap.

Exact batches

Today the signed call is a self-call into the 7702 account, and that call runs the batch. The order manager signs the batch hash and runs the batch directly.

Swap	Delegation Manager self-call	Order manager	Saved
Native ETH in, token out	207,406	119,846	87,560 (42.2%)
Token in, native ETH out	244,371	150,307	94,064 (38.5%)
Token in, token out	267,138	172,834	94,304 (35.3%)
Token in, token out, with reset	280,704	179,889	100,815 (35.9%)

Limit orders

Today this is separate root delegations on DelegationManager: an approval, then a swap. The flexible settlement enforcer collapses that into one delegation. This manager does too, and it is cheaper than both.

The separate-roots baseline uses IdEnforcer for the one-shot. The approval root uses id 2 and the swap root uses id 1, because both are redeemed in the same call. The flexible settlement enforcer is the current one, which requires a non-zero id.

Swap	Separate roots	Delegation Manager + flexible settlement enforcer	Order manager
Native ETH in, token out	353,525	180,290	154,912
Token in, native ETH out	478,354	230,784	185,311
Token in, token out	484,415	235,375	209,792
Token in, token out, with reset	509,838	244,105	218,471

Saved against the separate roots:

Swap	Enforcer	Order manager
Native ETH in, token out	173,235 (49.0%)	198,613 (56.2%)
Token in, native ETH out	247,570 (51.7%)	293,043 (61.3%)
Token in, token out	249,040 (51.4%)	274,623 (56.7%)
Token in, token out, with reset	265,733 (52.1%)	291,367 (57.1%)

The order manager is also cheaper than the enforcer on every shape:

Swap	Saved	Percent
Native ETH in, token out	25,378	14.1%
Token in, native ETH out	45,473	19.7%
Token in, token out	25,583	10.9%
Token in, token out, with reset	25,634	10.5%

Scope

• One root delegation, one caveat, batch mode
• An exact batch has no on-chain expiry. A limit order can set a timestamp window
• Every id, including 0, burns the id bitmap for the delegator and blocks sibling orders that share it. The delegation hash is still one-shot as well. Cancelling does not burn the id
• No delegation chains, try mode, pause, or enableDelegation
• An EIP-7702 account that uses this manager redeems through it instead of DelegationManager

Test plan

• MetaSwapOrderDelegationManagerTest passes, including both flows and the redemption guards
• Dry-run script/DeployMetaSwapOrderDelegationManager.s.sol
• Confirm the verify script reads META_SWAP_ORDER_DELEGATION_MANAGER_ADDRESS

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8e74755. Configure here.}