Warrants and criminal justice

net.Receive("WarrantsDatabase.IssueWarrant", function(_, ply)
    -- Permission first, before anything is read from the request.
    if (not PLUGIN:CanIssueWarrant(ply)) then return end   -- rank-based, checked on the server

    -- One database request per second per player.
    if (ply.lastWarrantDBQuery and ply.lastWarrantDBQuery > SysTime() - 1) then
        ply:notify("You must wait 1 second before querying the warrants database again.")
        return
    end
    ply.lastWarrantDBQuery = SysTime()

    local charID = net.ReadUInt(32)
    local requested = pon.decode(net.ReadString())
    local documentLink = net.ReadString()

    -- Rebuild the charges against the server's own charge list.
    -- Unknown charge IDs and non-numbers are rejected outright.
    local allCharges = nut.plugin.list.police:GetCharges()
    local charges, total = {}, 0
    for chargeID, count in pairs(requested) do
        assert(isnumber(count), "charge count is not a number")
        assert(allCharges[chargeID], "not a valid charge ID")
        if (count > 0) then
            charges[chargeID] = count
            total = total + count
        end
    end

    if (total > 10) then
        ply:notify("You cannot submit a warrant with more than a total of 10 charges.")
        return
    end

    -- The trailing slash matters: it rejects lookalikes such as docs.google.com.evil.example
    if (not documentLink:StartsWith("https://docs.google.com/")) then
        ply:notify("Invalid Google Docs link.")
        return
    end

    -- One active warrant per person.
    nut.db.preparedCallDeferred("warrantsGetActiveByWantedCharID", charID):next(function(res)
        if (res.results and res.results[1]) then
            ply:notify("A warrant has already been issued for this individual.")
            return
        end

        -- ... look up the wanted character's name, then issue the warrant (omitted)
    end)
end)

-- When a government character opens someone's record, the server remembers
-- exactly which record IDs it sent to that player, and whose they were.
nut.getCharDataOffline(citizenID, nil, {}, function(charData)
    ply.allowedSetRecords = {}

    if (charData.jailed) then
        ply.allowedSetRecords[0] = { CharID = citizenID }   -- 0 = the current sentence
    end
    for recordID in pairs(charData.jailRapSheet or {}) do
        ply.allowedSetRecords[recordID] = { CharID = citizenID }
    end

    -- ... send the records to the player (omitted)
end)

-- The appeal itself. The client sends a record ID and the new felony status,
-- but never whose record it is: that comes from the server's own list.
net.Receive("GovtManageRecordsSetIsFelony", function(_, ply)
    local char = ply:getChar()
    if (not char) then return end
    if (not nut.faction.indices[char:getFaction()].NYC or not char:getData("allowAppeals")) then return end

    if (ply.lastFelonySet and ply.lastFelonySet > SysTime() - 1) then
        ply:notify("You must wait 1 second before setting another felony.")
        return
    end
    ply.lastFelonySet = SysTime()

    local isFelony = net.ReadBool()
    local recordID = net.ReadUInt(32)

    -- Anything the server didn't send this player is rejected.
    local record = ply.allowedSetRecords and ply.allowedSetRecords[recordID]
    if (not record) then return end

    nut.getCharDataOffline(record.CharID, nil, {}, function(charData)
        local key = (recordID == 0) and "jailed" or "jailRapSheet"
        local data = charData and table.Copy(charData[key])
        local entry = data and ((recordID == 0) and data or data[recordID])
        if (not entry) then
            ply:notify("Something went wrong - contact a developer.")
            return
        end

        entry.Felony = isFelony
        nut.setCharData(record.CharID, key, data, function()
            ply:notify("Successfully updated felony status for selected record.")
            -- ... refresh the player's view and log the change to Discord (omitted)
        end)
    end)
end)