package staker

import (
	"chain"

	ufmt "gno.land/p/nt/ufmt/v0"
	"gno.land/r/gnoswap/access/v1"
	"gno.land/r/gnoswap/common"
	"gno.land/r/gnoswap/halt/v1"
	sr "gno.land/r/gnoswap/staker"
)

// AddToken adds a registered token key to the list of allowed tokens.
// Only admin or governance can add a token.
//
// Parameters:
//   - _: Leading realm-call discriminator; callers pass 0.
//   - rlm: Current staker realm context, validated before storage is changed.
//   - tokenPath: Registered token path to add to the allowed-token list.
//
// Panics:
//   - If the caller is not admin or governance, or the token key is not registered.
func (s *stakerV1) AddToken(_ int, rlm realm, tokenPath string) {
	access.AssertIsRlmCurrent(0, rlm)

	halt.AssertIsNotHaltedStaker()

	previousRealm := rlm.Previous()
	caller := previousRealm.Address()
	access.AssertIsAdminOrGovernance(caller)

	if err := checkCannotAddDefaultToken(tokenPath); err != nil {
		panic(err.Error())
	}

	common.MustRegistered(tokenPath)

	if err := s.store.AddAllowedToken(0, rlm, tokenPath); err != nil {
		panic(err.Error())
	}

	chain.Emit(
		"AddToken",
		"prevAddr", caller.String(),
		"prevRealm", previousRealm.PkgPath(),
		"tokenPath", tokenPath,
	)
}

// RemoveToken removes a token path from the list of allowed tokens.
// Only the admin can remove a token.
//
// Default tokens cannot be removed.
//
// Parameters:
//   - _: Leading realm-call discriminator; callers pass 0.
//   - rlm: Current staker realm context, validated before storage is changed.
//   - tokenPath: Token path to remove from the allowed-token list.
//
// Panics:
//   - If the caller is not admin or governance, or the token path is a protected default token.
func (s *stakerV1) RemoveToken(_ int, rlm realm, tokenPath string) {
	access.AssertIsRlmCurrent(0, rlm)

	halt.AssertIsNotHaltedStaker()

	previousRealm := rlm.Previous()
	caller := previousRealm.Address()
	access.AssertIsAdminOrGovernance(caller)

	if err := checkCannotRemoveDefaultToken(tokenPath); err != nil {
		panic(err.Error())
	}

	if err := s.store.RemoveAllowedToken(0, rlm, tokenPath); err != nil {
		panic(err.Error())
	}

	chain.Emit(
		"RemoveToken",
		"prevAddr", caller.String(),
		"prevRealm", previousRealm.PkgPath(),
		"tokenPath", tokenPath,
	)
}

func checkCannotAddDefaultToken(tokenPath string) error {
	if contains(sr.DefaultAllowedTokens(), tokenPath) {
		return ufmt.Errorf("%v: cannot add existing token(%s)", errAddExistingToken, tokenPath)
	}

	return nil
}

func checkCannotRemoveDefaultToken(tokenPath string) error {
	if contains(sr.DefaultAllowedTokens(), tokenPath) {
		return ufmt.Errorf("%v: cannot remove default token(%s)", errDefaultExternalToken, tokenPath)
	}

	return nil
}

// SetDeniedRewardToken sets or clears the operational deny flag for an external
// incentive reward token.
//
// Pool-pair tokens qualify as reward tokens for their own pool without the
// governance allowlist (a product policy), so the deny flag is the only lever
// to stop NEW incentives in a pair token whose issuer turned hostile. The flag
// is checked at incentive creation only: collection of already-created
// incentives is deliberately unaffected, because the ledger-level delivery
// guard in deliverExternalIncentiveReward already bounds their blast radius to
// the hostile token itself.
//
// Default protocol tokens (GNS, WUGNOT) cannot be denied.
//
// Only the admin or governance can set the flag.
//
// Parameters:
//   - _: Leading realm-call discriminator; callers pass 0.
//   - rlm: Current staker realm context, validated before the deny list is changed.
//   - tokenPath: Reward-token path whose denied status is being changed.
//   - denied: True to add tokenPath to the deny list, false to remove it.
func (s *stakerV1) SetDeniedRewardToken(_ int, rlm realm, tokenPath string, denied bool) {
	access.AssertIsRlmCurrent(0, rlm)

	halt.AssertIsNotHaltedStaker()

	previousRealm := rlm.Previous()
	caller := previousRealm.Address()
	access.AssertIsAdminOrGovernance(caller)

	if denied {
		if err := checkCannotDenyDefaultToken(tokenPath); err != nil {
			panic(err.Error())
		}

		if err := s.store.AddDeniedRewardToken(0, rlm, tokenPath); err != nil {
			panic(err.Error())
		}
	} else {
		if err := s.store.RemoveDeniedRewardToken(0, rlm, tokenPath); err != nil {
			panic(err.Error())
		}
	}

	deniedStr := "false"
	if denied {
		deniedStr = "true"
	}

	chain.Emit(
		"SetDeniedRewardToken",
		"prevAddr", caller.String(),
		"prevRealm", previousRealm.PkgPath(),
		"tokenPath", tokenPath,
		"denied", deniedStr,
	)
}

func checkCannotDenyDefaultToken(tokenPath string) error {
	if contains(sr.DefaultAllowedTokens(), tokenPath) {
		return ufmt.Errorf("%v: cannot deny default token(%s)", errCannotDenyDefaultToken, tokenPath)
	}

	return nil
}