inspection

type AccountChange map[string]int64

type Inspector interface {
	// Inspect
	// - storage is the execution state before the procedure was executed.
	//    only the executionSnapshot.Reads, will be read
	// - executionSnapshot is the reads and writes of the procedure
	// - events are all of the events the procedure is emitting
	// - signers are the transaction's authorizing signers, as returned by
	//   [AuthorizingSigners]. Empty for procedures that are not transactions
	//   (e.g. scripts).
	Inspect(
		logger zerolog.Logger,
		storage snapshot.StorageSnapshot,
		executionSnapshot *snapshot.ExecutionSnapshot,
		events []flow.Event,
		signers []flow.Address,
	) (Result, error)

	// Name is the name of the inspector
	Name() string
}

type Result interface {
	InspectionName() string
	AsLogEvent() (zerolog.Level, func(e *zerolog.Event))
}

type SearchToken struct {
	ID         string
	GetBalance func(value *interpreter.CompositeValue) uint64
	// TODO: optimize by using decoded events
	SinksSources map[string]SourceSink
}

type SignerAllowlistViolation struct {
	// TokenID is the token whose supply changed.
	TokenID string
	// EventType is the event type ID that triggered the violation.
	EventType string
	// Amount is the signed token-amount delta decoded from the event.
	Amount int64
	// Signers are the transaction's authorizing signers.
	Signers []flow.Address
}

type SourceSink struct {
	// Amount decodes the signed token-amount delta from the event. A positive
	// value is a source (tokens entering/created); a negative value is a sink
	// (tokens leaving/destroyed).
	Amount func(flow.Event) (int64, error)

	// SignerAllowlist, when non-nil, restricts which accounts may trigger this
	// event. The check passes if at least one of the transaction's authorizing
	// signers (see [AuthorizingSigners]) is in the set. A nil map disables the
	// check (the default, preserving prior behavior).
	SignerAllowlist map[flow.Address]struct{}
}

type TokenChanges struct {
	// contains filtered or unexported fields
}

type TokenChangesSearchTokens map[string]SearchToken

type TokenDiffResult struct {
	// Changes in token balances per account
	// parsed from the state changes
	Changes map[flow.Address]AccountChange

	// KnownSourcesSinks is a map (by token id) of
	// know mints/burns for the token parsed from predetermined events
	KnownSourcesSinks map[string]int64

	// UnauthorizedSourcesSinks holds source/sink events whose transaction's
	// authorizing signers included no allow-listed account. Empty when no
	// allow-list is configured or all matched events were authorized.
	UnauthorizedSourcesSinks []SignerAllowlistViolation
}