#ifndef SRC_PERMISSION_PERMISSION_BASE_H_
#define SRC_PERMISSION_PERMISSION_BASE_H_

#if defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS

#include <span>
#include <string>
#include <string_view>

namespace node {

class Environment;

namespace permission {

#define FILESYSTEM_PERMISSIONS(V)                                              \
  V(FileSystem, "fs", PermissionsRoot, "")                                     \
  V(FileSystemRead, "fs.read", FileSystem, "--allow-fs-read")                  \
  V(FileSystemWrite, "fs.write", FileSystem, "--allow-fs-write")

#define CHILD_PROCESS_PERMISSIONS(V)                                           \
  V(ChildProcess, "child", PermissionsRoot, "--allow-child-process")

#define WASI_PERMISSIONS(V) V(WASI, "wasi", PermissionsRoot, "--allow-wasi")

#define WORKER_THREADS_PERMISSIONS(V)                                          \
  V(WorkerThreads, "worker", PermissionsRoot, "--allow-worker")

#define INSPECTOR_PERMISSIONS(V)                                               \
  V(Inspector, "inspector", PermissionsRoot, "--allow-inspector")

#define NET_PERMISSIONS(V) V(Net, "net", PermissionsRoot, "--allow-net")

#define ADDON_PERMISSIONS(V)                                                   \
  V(Addon, "addon", PermissionsRoot, "--allow-addons")

#define FFI_PERMISSIONS(V) V(FFI, "ffi", PermissionsRoot, "--allow-ffi")

#define OPENSSL_STORE_PERMISSIONS(V)                                           \
  V(OpenSSLStore, "openssl.store", PermissionsRoot, "--allow-openssl-store")

#define ENV_PERMISSIONS(V) V(Env, "env", PermissionsRoot, "--allow-env")

#define PERMISSIONS(V)                                                         \
  FILESYSTEM_PERMISSIONS(V)                                                    \
  CHILD_PROCESS_PERMISSIONS(V)                                                 \
  WASI_PERMISSIONS(V)                                                          \
  WORKER_THREADS_PERMISSIONS(V)                                                \
  INSPECTOR_PERMISSIONS(V)                                                     \
  NET_PERMISSIONS(V)                                                           \
  ADDON_PERMISSIONS(V)                                                         \
  FFI_PERMISSIONS(V)                                                           \
  OPENSSL_STORE_PERMISSIONS(V)                                                 \
  ENV_PERMISSIONS(V)

#define V(name, _, __, ___) k##name,
enum class PermissionScope {
  kPermissionsRoot = -1,
  PERMISSIONS(V) kPermissionsCount
};
#undef V

class PermissionBase {
 public:
  virtual ~PermissionBase() = default;
  virtual void Apply(Environment* env,
                     std::span<const std::string> allow,
                     PermissionScope scope) = 0;
  virtual void Drop(Environment* env,
                    PermissionScope scope,
                    std::string_view param) = 0;
  virtual bool is_granted(Environment* env,
                          PermissionScope perm,
                          std::string_view param) const = 0;
};

}  // namespace permission

}  // namespace node

#endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
#endif  // SRC_PERMISSION_PERMISSION_BASE_H_