Docs

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.24;

interface IAutoJob {
    /// @dev MUST NOT mutate state. Returns true only when performJob is ready.
    function checkJob() external view returns (bool canExec, bytes memory execPayload);

    /// @dev MUST be restricted to the PeekRegistry. MUST flip checkJob to
    ///      false for the next block.
    function performJob(bytes calldata execPayload) external;
}

contract EpochKeeper is IAutoJob {
    address public immutable REGISTRY_ADDRESS;
    IVoter public immutable voter;
    uint256 public nextEpoch;

    error NotRegistry();

    constructor(address registry, address voter_, uint256 firstEpoch) {
        REGISTRY_ADDRESS = registry;
        voter = voter_;
        nextEpoch = firstEpoch;
    }

    function checkJob() external view returns (bool, bytes memory) {
        return (block.timestamp >= nextEpoch, "");
    }

    function performJob(bytes calldata) external {
        if (msg.sender != REGISTRY_ADDRESS) revert NotRegistry();
        uint256 ts = nextEpoch;
        if (block.timestamp < ts) return;      // idempotent within an epoch
        nextEpoch = ts + 1 weeks;              // effect first
        bool ok;
        try voter.distribute() {
            ok = true;   // recorded; a failed leg retries next epoch
        } catch {
            ok = false;  // never roll back the epoch
        }
    }
}