keetanetwork-client-wasm 0.2.0

//! JS `Permissions` and `PermissionChange`: inputs for MODIFY_PERMISSIONS.

use alloc::string::String;
use alloc::vec::Vec;

use keetanetwork_bindings::permissions as bindings_permissions;
use keetanetwork_block::{ModifyPermissions, ModifyPermissionsPrincipal, Permissions as CorePermissions};
use wasm_bindgen::prelude::wasm_bindgen;

use crate::account::Account;
use crate::convert::{coded, parse_adjust_method, parse_base_flag, parse_bigint_hex, parse_hash32, JsResult};

/// A permission set: well-known base flags plus optional external bit offsets.
#[wasm_bindgen]
#[derive(Clone)]
pub struct Permissions {
	inner: CorePermissions,
}

#[wasm_bindgen]
impl Permissions {
	/// Build from snake_case base flag names (e.g. `"access"`, `"owner"`,
	/// `"admin"`) and external bit `offsets`.
	#[wasm_bindgen(constructor)]
	pub fn new(flags: Vec<String>, offsets: Vec<u8>) -> JsResult<Permissions> {
		let flags = flags
			.iter()
			.map(|flag| parse_base_flag(flag))
			.collect::<JsResult<Vec<_>>>()?;
		let inner = bindings_permissions::from_flags(&flags, &offsets).map_err(coded)?;
		Ok(Self { inner })
	}

	/// Decode from the on-chain `[base, external]` bitmaps an ACL entry
	/// returns, each a `0x`-prefixed hex integer.
	#[wasm_bindgen(js_name = fromBitmaps)]
	pub fn from_bitmaps(base: String, external: String) -> JsResult<Permissions> {
		let base = parse_bigint_hex(&base, "base")?;
		let external = parse_bigint_hex(&external, "external")?;
		let inner = bindings_permissions::from_bigints(base, external).map_err(coded)?;
		Ok(Self { inner })
	}

	/// The base flag names present, after normalization (`owner`/`admin`
	/// subsume narrower flags).
	#[wasm_bindgen(getter)]
	pub fn flags(&self) -> Vec<String> {
		bindings_permissions::flag_names(&self.inner)
	}

	/// The external bit offsets present, ascending.
	#[wasm_bindgen(getter)]
	pub fn offsets(&self) -> Vec<u8> {
		bindings_permissions::offsets(&self.inner)
	}

	/// Whether every named base `flags` and external `offsets` is granted,
	/// honoring `owner`/`admin` precedence.
	pub fn has(&self, flags: Vec<String>, offsets: Vec<u8>) -> JsResult<bool> {
		let flags = flags
			.iter()
			.map(|flag| parse_base_flag(flag))
			.collect::<JsResult<Vec<_>>>()?;
		Ok(self.inner.has(&flags, &offsets))
	}

	/// The `[base, external]` bitmaps as `0x`-prefixed hex.
	#[wasm_bindgen(js_name = toBitmaps)]
	pub fn to_bitmaps(&self) -> Vec<String> {
		bindings_permissions::bitmaps(&self.inner)
	}
}

impl Permissions {
	pub(crate) fn to_core(&self) -> CorePermissions {
		self.inner.clone()
	}
}

/// A MODIFY_PERMISSIONS change: who, how, and what. Build with `forAccount` or
/// `forCertificate`, then optionally attach permissions and a target.
#[wasm_bindgen]
pub struct PermissionChange {
	inner: ModifyPermissions,
}

#[wasm_bindgen]
impl PermissionChange {
	/// Change permissions for an account `principal`. `method` is `"add"`,
	/// `"subtract"`, or `"set"`.
	#[wasm_bindgen(js_name = forAccount)]
	pub fn for_account(principal: &Account, method: String) -> JsResult<PermissionChange> {
		Ok(Self {
			inner: ModifyPermissions {
				principal: ModifyPermissionsPrincipal::Account(principal.inner()),
				method: parse_adjust_method(&method)?,
				permissions: None,
				target: None,
			},
		})
	}

	/// Change the default permissions tied to a certificate, identified by its
	/// 32-byte hex `hash` and issuing `account`.
	#[wasm_bindgen(js_name = forCertificate)]
	pub fn for_certificate(hash: String, account: &Account, method: String) -> JsResult<PermissionChange> {
		Ok(Self {
			inner: ModifyPermissions {
				principal: ModifyPermissionsPrincipal::Certificate {
					hash: parse_hash32(&hash, "certificate hash")?,
					account: account.inner(),
				},
				method: parse_adjust_method(&method)?,
				permissions: None,
				target: None,
			},
		})
	}

	/// Attach the permissions to apply. Omit to clear (requires `"set"`).
	#[wasm_bindgen(js_name = setPermissions)]
	pub fn set_permissions(&mut self, permissions: &Permissions) {
		self.inner.permissions = Some(permissions.to_core());
	}

	/// Scope the change to a `target` account.
	#[wasm_bindgen(js_name = setTarget)]
	pub fn set_target(&mut self, target: &Account) {
		self.inner.target = Some(target.inner());
	}
}

impl PermissionChange {
	pub(crate) fn to_core(&self) -> ModifyPermissions {
		self.inner.clone()
	}
}