restrict increase, decrease, and burn and v4 initialize pool call

contracts/base/Dispatcher.sol

@@ -15,6 +15,8 @@ import {IAllowanceTransfer} from 'permit2/src/interfaces/IAllowanceTransfer.sol'
 import {IERC721Permit} from '@uniswap/v3-periphery/contracts/interfaces/IERC721Permit.sol';
 import {ActionConstants} from '@uniswap/v4-periphery/src/libraries/ActionConstants.sol';
 import {CalldataDecoder} from '@uniswap/v4-periphery/src/libraries/CalldataDecoder.sol';
+import {Actions} from '@uniswap/v4-periphery/src/libraries/Actions.sol';
+import {PoolInitializer} from '@uniswap/v4-periphery/src/base/PoolInitializer.sol';
 
 /// @title Decodes and Executes Commands
 /// @notice Called by the UniversalRouter contract to efficiently decode and execute a singular command
@@ -26,6 +28,7 @@ abstract contract Dispatcher is Payments, V2SwapRouter, V3SwapRouter, V4SwapRout
     error BalanceTooLow();
     error InvalidAction(bytes4 action);
     error NotAuthorizedForToken(uint256 tokenId);
+    error OnlyMintAllowed();
 
     /// @notice Executes encoded commands along with provided inputs.
     /// @param commands A set of concatenated commands, each 1 byte in length
@@ -254,7 +257,6 @@ abstract contract Dispatcher is Payments, V2SwapRouter, V3SwapRouter, V4SwapRout
                     if (!isValidAction(selector)) {
                         revert InvalidAction(selector);
                     }
-
                     uint256 tokenId;
                     assembly {
                         // tokenId is always the first parameter in the valid actions
@@ -269,9 +271,40 @@ abstract contract Dispatcher is Payments, V2SwapRouter, V3SwapRouter, V4SwapRout
                     }
 
                     (success, output) = address(V3_POSITION_MANAGER).call(inputs);
+                } else if (command == Commands.V4_INITIALIZE_POOL) {
+                    bytes4 selector;
+                    assembly {
+                        selector := calldataload(inputs.offset)
+                    }
+                    if (selector != PoolInitializer.initializePool.selector) {
+                        revert InvalidAction(selector);
+                    }
+                    (success, output) = address(V4_POSITION_MANAGER).call(inputs);
                 } else if (command == Commands.V4_POSITION_CALL) {
                     // should only call modifyLiquidities() to mint
-                    // do not permit or approve this contract over a v4 position or someone could use this command to decrease, burn, or transfer your position
+                    bytes4 selector;
+                    assembly {
+                        selector := calldataload(inputs.offset)
+                    }
+                    if (selector != V4_POSITION_MANAGER.modifyLiquidities.selector) {
+                        revert InvalidAction(selector);
+                    }
+
+                    bytes calldata slice = inputs[4:];
+                    (bytes calldata actions,) = slice.toBytes(0).decodeActionsRouterParams();
+
+                    uint256 numActions = actions.length;
+
+                    for (uint256 actionIndex = 0; actionIndex < numActions; actionIndex++) {
+                        uint256 action = uint8(actions[actionIndex]);
+
+                        if (
+                            action == Actions.INCREASE_LIQUIDITY || action == Actions.DECREASE_LIQUIDITY
+                                || action == Actions.BURN_POSITION
+                        ) {
+                            revert OnlyMintAllowed();
+                        }
+                    }
                     (success, output) = address(V4_POSITION_MANAGER).call{value: address(this).balance}(inputs);
                 } else {
                     // placeholder area for commands 0x13-0x20

contracts/libraries/Commands.sol

@@ -35,8 +35,9 @@ library Commands {
     uint256 constant V4_SWAP = 0x10;
     uint256 constant V3_POSITION_MANAGER_PERMIT = 0x11;
     uint256 constant V3_POSITION_MANAGER_CALL = 0x12;
-    uint256 constant V4_POSITION_CALL = 0x13;
-    // COMMAND_PLACEHOLDER = 0x14 -> 0x20
+    uint256 constant V4_INITIALIZE_POOL = 0x13;
+    uint256 constant V4_POSITION_CALL = 0x14;
+    // COMMAND_PLACEHOLDER = 0x15 -> 0x20
 
     // Command Types where 0x21<=value<=0x3f
     uint256 constant EXECUTE_SUB_PLAN = 0x21;

test/integration-tests/UniswapV2.test.ts

@@ -74,7 +74,7 @@ describe('Uniswap V2 Tests:', () => {
 
     beforeEach(async () => {
       // cancel the permit on DAI
-      await permit2.approve(DAI.address, ADDRESS_ZERO, 0, 0)
+      await permit2.approve(DAI.address, router.address, 0, 0)
     })
 
     it('V2 exactIn, permiting the exact amount', async () => {