v1 state

roleAddresses

init.1

SetRoleAddress

SetRoleAddress sets or updates a role's address. It trims surrounding whitespace from roleName, creates missing roles, and replaces the address for an existing role. Parameters: - cur: current realm context; callers use cross(cur) when crossing into this realm - roleName: role identifier; surrounding whitespace is ignored and an empty name panics - roleAddress: non-empty, valid address to associate with roleName Only callable by the RBAC contract.

setRoleAddress

setRoleAddress is the internal implementation of SetRoleAddress. Separated for testability.

RemoveRole

RemoveRole removes a role from the system after trimming its name. Parameters: - cur: current realm context; callers use cross(cur) when crossing into this realm - roleName: role identifier to trim and remove; an empty or unknown name panics Only callable by the RBAC contract.

IsAuthorized

IsAuthorized reports whether caller is the address currently mapped to role. Parameters: - role: role name to trim and look up - caller: address to compare with the mapped role address Returns: - authorized: true when role exists and caller matches its address; false when the role is absent or does not match

GetAddress

GetRoleAddresses

GetRoleAddresses returns an independent map copy of all stored role addresses. Returns: - roleAddresses: map from normalized role names to their configured addresses

MustGetAddress

rbacPackagePath

rbacPackagePath is the package path of the RBAC contract Used to verify that role management functions are called only by RBAC

AssertIsRlmCurrent

AssertIsRlmCurrent panics if the realm token is not the current crossing frame. Parameters: - \_: leading realm-call discriminator; callers pass 0 - rlm: realm context token that must represent the current crossing frame

AssertIsAdminOrGovernance

AssertIsAdminOrGovernance panics unless caller is the configured admin or governance address. Parameters: - caller: address whose authorization is checked against the admin and governance roles

AssertIsAdmin

AssertIsAdmin panics unless caller is the configured admin address. Parameters: - caller: address whose authorization is checked against the admin role

AssertIsGovernance

AssertIsGovernance panics unless caller is the configured governance address. Parameters: - caller: address whose authorization is checked against the governance role

AssertIsGovStaker

AssertIsGovStaker panics unless caller is the configured governance-staker address. Parameters: - caller: address whose authorization is checked against the governance-staker role

AssertIsRouter

AssertIsRouter panics unless caller is the configured router address. Parameters: - caller: address whose authorization is checked against the router role

AssertIsPool

AssertIsPool panics unless caller is the configured pool address. Parameters: - caller: address whose authorization is checked against the pool role

AssertIsPosition

AssertIsPosition panics unless caller is the configured position address. Parameters: - caller: address whose authorization is checked against the position role

AssertIsStaker

AssertIsStaker panics unless caller is the configured staker address. Parameters: - caller: address whose authorization is checked against the staker role

AssertIsLaunchpad

AssertIsLaunchpad panics unless caller is the configured launchpad address. Parameters: - caller: address whose authorization is checked against the launchpad role

AssertIsEmission

AssertIsEmission panics unless caller is the configured emission address. Parameters: - caller: address whose authorization is checked against the emission role

AssertIsProtocolFee

AssertIsProtocolFee panics unless caller is the configured protocol-fee address. Parameters: - caller: address whose authorization is checked against the protocol-fee role

AssertIsGovXGNS

AssertIsGovXGNS panics unless caller is the configured xGNS governance address. Parameters: - caller: address whose authorization is checked against the xGNS governance role

AssertIsAuthorized

AssertIsAuthorized panics if caller does not have the specified role or if the role is absent. Parameters: - roleName: role identifier whose configured address is required - caller: address that must match the configured address for roleName

AssertHasAnyRole

AssertHasAnyRole checks roleNames in order and panics unless caller matches one. It panics immediately if a checked role is absent, even if a later role might match. Parameters: - caller: address compared against each configured role address - roleNames: ordered role identifiers to check; each missing role causes a panic

AssertIsValidAddress

AssertIsValidAddress panics if addr is not a valid address. Parameters: - addr: address value to validate

assertIsRBAC

assertIsRBAC panics if the caller is not the RBAC contract. Used internally to protect role management functions.

errSpoofedRealm

errInvalidAddress

errRoleNotFound

errUnauthorized

errUnauthorizedAdminOrGov

errUnauthorizedAnyRole

errUnauthorizedRBAC

errInvalidAddressShort