Realm

1package admin
2
3import (
4	"chain"
5	"chain/runtime/unsafe"
6
7	"gno.land/p/akkadia/beta/accesscontrol"
8)
9
10const (
11	TransferAdminEvent  = "TransferAdmin"
12	AcceptAdminEvent    = "AcceptAdmin"
13	CancelAdminEvent    = "CancelAdmin"
14	SetExplorerURLEvent = "SetExplorerURL"
15)
16
17var (
18	admin        address
19	pendingAdmin address
20	explorerURL  string = "https://app.beta.akkadia.land"
21)
22
23func init() {
24	caller := unsafe.OriginCaller()
25	admin = caller
26}
27
28func GetAdmin() address {
29	return admin
30}
31
32func GetPendingAdmin() address {
33	return pendingAdmin
34}
35
36func TransferAdmin(cur realm, newAdmin address) {
37	assertTransferAdminCaller(0, cur)
38	assertValidAddress(newAdmin)
39	if pendingAdmin.IsValid() {
40		panic("pending admin transfer already exists")
41	}
42
43	pendingAdmin = newAdmin
44
45	chain.Emit(
46		TransferAdminEvent,
47		"from", admin.String(),
48		"to", newAdmin.String(),
49	)
50}
51
52func assertTransferAdminCaller(_ int, rlm realm) {
53	if !admin.IsValid() {
54		// The admin realm normally initializes admin from OriginCaller during
55		// package deployment, so a live on-chain admin should be a valid address.
56		// An empty admin is a bootstrap-only state observed by cross-package tests:
57		// dependent realm tests can import admin before a real deploy signer exists,
58		// leaving admin as address(""). In that state there is no valid user address
59		// that can satisfy direct caller authorization, so requiring AssertIsAdmin
60		// would make those tests unable to promote a real test admin at all.
61		//
62		// Keep the legacy OriginCaller check only for this invalid-admin bootstrap
63		// state. This preserves the narrow test/bootstrap path where the current
64		// placeholder admin is address(""), while ensuring that once a real admin is
65		// accepted every subsequent admin transfer is direct-caller-only. In other
66		// words, code-realm relays cannot borrow a valid admin signer's authority to
67		// change pendingAdmin; the exception exists solely to escape the empty
68		// imported-test initialization state.
69		accesscontrol.AssertCurrentRealm(0, rlm)
70		accesscontrol.AssertIsAdminOrigin(IsAdmin)
71		return
72	}
73
74	accesscontrol.AssertIsAdmin(0, rlm, IsAdmin)
75}
76
77func AcceptAdmin(cur realm) {
78	if !pendingAdmin.IsValid() {
79		panic("invalid pending admin address")
80	}
81	caller := mustGetPendingAdminUserCaller(0, cur)
82
83	prevAdmin := admin
84	admin = caller
85	pendingAdmin = address("")
86
87	chain.Emit(
88		AcceptAdminEvent,
89		"from", prevAdmin.String(),
90		"to", admin.String(),
91	)
92}
93
94func CancelAdminTransfer(cur realm) {
95	accesscontrol.AssertIsAdmin(0, cur, IsAdmin)
96	if !pendingAdmin.IsValid() {
97		panic("invalid pending admin address")
98	}
99
100	canceledAdmin := pendingAdmin
101	pendingAdmin = address("")
102
103	chain.Emit(
104		CancelAdminEvent,
105		"admin", admin.String(),
106		"pendingAdmin", canceledAdmin.String(),
107	)
108}
109
110func IsAdmin(address address) bool {
111	return address == admin
112}
113
114// SetExplorerURL sets the explorer base URL (admin only)
115func SetExplorerURL(cur realm, url string) {
116	accesscontrol.AssertIsAdmin(0, cur, IsAdmin)
117
118	normalizedURL := normalizeExplorerURL(url)
119	oldURL := explorerURL
120	explorerURL = normalizedURL
121
122	chain.Emit(
123		SetExplorerURLEvent,
124		"admin", admin.String(),
125		"oldURL", oldURL,
126		"newURL", normalizedURL,
127	)
128}
129
130// GetExplorerURL returns the explorer base URL
131func GetExplorerURL() string {
132	return explorerURL
133}
134