Function grantIdentity

ios-qa/daemon/src/allowlist.ts:78–104

(opts: {
  identity: string;
  capability: Capability;
  ttlSeconds?: number | null; // null/undefined = no expiry
  note?: string;
  path?: string;
})

 * Owner-granted mint path. Adds (or upgrades) an allowlist entry.
 */
export async function grantIdentity(opts: {
  identity: string;
  capability: Capability;
  ttlSeconds?: number | null; // null/undefined = no expiry
  note?: string;
  path?: string;
}): Promise<Allowlist> {
  const path = opts.path ?? defaultAllowlistPath();
  const allowlist = await loadAllowlist(path);
  const existingIdx = allowlist.entries.findIndex(e => e.identity === opts.identity);
  const expiresAt = opts.ttlSeconds && opts.ttlSeconds > 0
    ? new Date(Date.now() + opts.ttlSeconds * 1000).toISOString()
    : null;
  const newEntry: AllowlistEntry = {
    identity: opts.identity,
    capabilities: [opts.capability],
    expires_at: expiresAt,
    note: opts.note,
  };
  if (existingIdx >= 0) {
    allowlist.entries[existingIdx] = newEntry;
  } else {
    allowlist.entries.push(newEntry);
  }
  await saveAllowlist(allowlist, path);
  return allowlist;
}

/**
 * Revoke an identity from the allowlist.