// SPDX-License-Identifier: GPL-3.0-only
pragma solidity ^0.8.26;

import {Events} from "lens-modules/contracts/core/types/Events.sol";
import {RoleBasedAccessControl} from "lens-modules/contracts/core/access/RoleBasedAccessControl.sol";
import {Access} from "lens-modules/contracts/core/interfaces/IRoleBasedAccessControl.sol";
import {Errors} from "lens-modules/contracts/core/types/Errors.sol";
import {ILock} from "lens-modules/contracts/core/interfaces/ILock.sol";

contract OwnerAdminOnlyAccessControl is RoleBasedAccessControl {
    ILock immutable LOCK;

    /// @custom:keccak lens.role.Admin
    uint256 constant ADMIN_ROLE_ID = uint256(0xfcbeadd75a96b5f8140d8c80f7c8d81ccbd7c4caa9592217bc8936b9eaabee75);
    /// @custom:keccak lens.contract.AccessControl.OwnerAdminOnlyAccessControl
    bytes32 constant OWNER_ADMIN_ONLY_CONTRACT_TYPE = 0x366c180b93c016d94aa781dd984842068840b0dc26dec0c4bf64de7c26ee02bb;

    constructor(address owner, address lock) RoleBasedAccessControl(owner) {
        _setAccess(ADMIN_ROLE_ID, ANY_CONTRACT_ADDRESS, ANY_PERMISSION_ID, Access.GRANTED);
        LOCK = ILock(lock);
        LOCK.isLocked(); // Aims to verify the given address follows ILock interface
    }

    function _beforeGrantingRole(address account, uint256 roleId) internal virtual override {
        require(roleId == ADMIN_ROLE_ID, Errors.InvalidParameter());
        super._beforeGrantingRole(account, roleId);
    }

    function canChangeAccessControl(address account, address /* contractAddress */ )
        external
        view
        virtual
        override
        returns (bool)
    {
        return account == owner() && !LOCK.isLocked();
    }

    function _beforeSettingAccess(
        uint256, /*roleId*/
        address, /*contractAddress*/
        uint256, /*permissionId*/
        Access /*access*/
    ) internal virtual override {
        revert Errors.NotImplemented();
    }

    function getType() external pure virtual override returns (bytes32) {
        return OWNER_ADMIN_ONLY_CONTRACT_TYPE;
    }

    function _emitLensContractDeployedEvent() internal virtual override {
        emit Events.Lens_Contract_Deployed({
            contractType: "lens.contract.AccessControl",
            flavour: "lens.contract.AccessControl.OwnerAdminOnlyAccessControl"
        });
    }
}