home state

defaultProfile

defaultBadges

defaultHome

defaultHome needs base, so init sets base first.

defaultWork

defaultBlog

defaultGuestbook

homeTab

workTab

blogTab

guestbookTab

maxTabs

maxTabName

maxPageBytes

// so all pages together stay under 128 KB

maxLineRunes

maxBadges

maxSlugBytes

maxTitleRunes

pageSize

latestPosts

seqWidth

errUnauthorized

errMasterKey

errOwnerOnly

errPendingOnly

errInvalidInput

errSigned

errNoEntry

errNoTab

errNoPost

errTabsRequired

errUgnotOnly

profileData

badge

nowLine

entry

post

post dates are UTC days of the block time, "2006-01-02".

tipStats

owner

pendingOwner

// set by TransferOwnership, cleared by AcceptOwnership

base

// "/r/\<name>/home"; every generated link starts with it

profile

badges

now

tabs

// tab order: home first, guestbook last

pages

// markdown per tab

waves

// wave count; anyone can wave again

entries

// address -> \*entry

order

// zero-padded sequence -> address

posts

// slug -> \*post

postOrder

// zero-padded sequence -> slug

postSeq

// last post sequence; never reused

tips

updated

// block height of the last owner write

init.53

setDefaults

setDefaults writes the initial state (content.gno holds the personal part).

callerOf

assertOwner

assertOwner is the owner guard.

Owner

Render

Render shows one tab, or one post at blog/\<slug>. An unknown path shows Home and an unknown post shows Blog. The path is only compared against tab names or looked up as a slug, and never written into the page.

frame

frame puts the tab bar above a page and the footer below it.

tabURL

tabLabel

tabLabel capitalizes a tab name; names are ASCII by validName.

tabBar

tabBar draws every tab as a linked pill, the current one in brand green. The current tab is linked too, because gnoweb shows an unlinked image as a block and the row would break. Blog stays out until there is a post.

footer

parsePage

parsePage reads page=N from the query; anything invalid is page 1.

tipSuggestion

Suggested amount on the Tip button (1 GNOT); visitors can change it.

expand

expand replaces every widget token in one pass. strings.Replacer does not rescan its output, so visitor text inside a widget can never trigger a token. Only the tokens present in md are built, found with a single scan of md.

itoa

plural

plural renders "1 wave", "2 waves".

svgImage

svgImage embeds an SVG as a base64 data URI, the one inline image form gnoweb keeps.

colBrand

// gnoweb's links and buttons

colDeep

// banner background, text on colSoft

colAccent

// banner accents, pill outlines

colSoft

// pale surface

colGhost

gno.land's own greens, from gnoweb's palette. An image can't follow gnoweb's theme toggle, so each one reads on both its white and its near-black background.

fontUI

gno.land's own greens, from gnoweb's palette. An image can't follow gnoweb's theme toggle, so each one reads on both its white and its near-black background.

bannerMD

bannerSVG

bannerSVG draws the 720x160 banner: the ghost, a coffee cup, the name and the tagline. The face depends on height % 4: calm, happy, wink, surprised.

fontSize

fontSize shrinks size so text fits the 440 px between x=260 and the banner's right edge. perChar is the rough glyph width at that size; runes from U+1100 on (CJK, emoji and the like) count double. Scaling the font, rather than setting textLength, never stretches text that already fits.

tabH

Pills come in two heights: tabs, and chips (badges and buttons). gnoweb draws a 16 px icon on a linked image, 8 px from its left edge: images in a row get an 8 px margin, and the icon's center sits that far above the image's bottom edge. It lands on the center line of a chip about 16 px high, so chips are 17 px, with iconGap pixels left clear for it. External and $help links get the icon; tabs and the guestbook button link inside the realm's own namespace and don't.

chipH

Pills come in two heights: tabs, and chips (badges and buttons). gnoweb draws a 16 px icon on a linked image, 8 px from its left edge: images in a row get an 8 px margin, and the icon's center sits that far above the image's bottom edge. It lands on the center line of a chip about 16 px high, so chips are 17 px, with iconGap pixels left clear for it. External and $help links get the icon; tabs and the guestbook button link inside the realm's own namespace and don't.

iconGap

Pills come in two heights: tabs, and chips (badges and buttons). gnoweb draws a 16 px icon on a linked image, 8 px from its left edge: images in a row get an 8 px margin, and the icon's center sits that far above the image's bottom edge. It lands on the center line of a chip about 16 px high, so chips are 17 px, with iconGap pixels left clear for it. External and $help links get the icon; tabs and the guestbook button link inside the realm's own namespace and don't.

seg

seg is one colored part of a pill.

segOn

segSoft

pillSVG

pillSVG draws a pill h pixels high from segments, left to right, with gap empty pixels before the first text. SVG can't measure text before drawing, so widths come from the rune count, wide runes (U+1100 on) counting double. The outline gives the pale parts an edge on a white page.

half

half writes n/2 with its .5, for SVG coordinates.

pillLink

pillLink is a pill image linked to url, with alt text for screen readers.

badgesMD

badgesMD draws the badges as one paragraph. A new row starts after a hard line break (a backslash ending the line), so rows sit as close as wrapped ones.

nowMD

button

button is a linked chip: the action, then its count. $help links get gnoweb's transaction icon, hence the gap.

wavesMD

tipMD

signMD

signMD counts hidden entries too: their authors did sign.

shortAddr

shortAddr keeps the ends of an address: g1jg8mtu…sqf5.

userLink

userLink links an address to its profile page under its short form. The address comes from the chain, never from visitor text.

clampPage

clampPage returns the page to show, at most the last one, and the last page for total items.

pageNav

pageNav links the pages around page on tab: Newer, then Older.

signForm

visitorText

visitorText makes a stored message safe as one markdown list item. sanitize.InlineText escapes links, images, HTML and emphasis; the escaped @ and the &#103; entity for the g of g1 keep gnoweb from turning "@name" or a typed g1 address into a profile link. Neither replacement produces the other's pattern, so the order doesn't matter.

guestbookMD

guestbookMD shows the form and one page of entries, newest first. Hidden entries still count toward the offset, so a page can show fewer than 20.

postList

postList lists count posts from offset, newest first: one item each with the publish date as a code chip and the linked title.

blogMD

blogMD lists one page of posts.

postsMD

postsMD is the Latest posts section, or nothing while there are no posts, so no empty heading shows.

postMD

postMD is a post's page. The body is shown as written: no tokens.

maxSignBytes

invalid

checkLine

checkLine enforces valid UTF-8, a rune count in \[min, max], and no control characters (so no newline either): the text may end up inside an SVG, where they would break the XML.

assertMasterKey

assertMasterKey refuses a transaction signed by a session key. Delegated keys may edit content, but not move ownership or hide an entry for good.

checkBadgeURL

checkBadgeURL wants a printable-ASCII https:// URL (non-ASCII must be percent-encoded) with no quotes, backslashes, backticks, parentheses, square brackets, \< or >, so the markdown link can't end early or become javascript:.

parseBadges

parseBadges reads one badge per line, "label | value | url". Blank lines between two badges start a new row; other blank lines are skipped.

hasVisible

hasVisible reports whether s has a character that draws something: not a space, a format character (zero-width, bidi), a combining mark, or one of the blank-looking fillers (Hangul fillers, braille blank).

validName

validName wants 1 to max characters from a-z, 0-9 and "-": safe in a link, a tab label, and a path gnoweb passes to Render.

checkPage

checkPage enforces the tab name, the page size, and the tab count.

checkPost

checkPost enforces the slug, a one-line title, and the body size. Title and body must each show something.

seqKey

seqKey zero-pads n so that keys sort in number order.

touch

SetNow

SetNow sets the one-line status shown on Home; empty clears it.

SetProfile

SetProfile sets the name and tagline drawn on the banner.

SetBadges

SetBadges replaces every badge. One badge per line: "label | value | url"; a blank line starts a new row.

SetPage

SetPage creates or replaces any tab's markdown, Blog and Guestbook included. A new tab goes just before Guestbook, which stays last.

RemovePage

RemovePage removes any tab except home, blog and guestbook.

SetPost

SetPost publishes a post, or edits the post at slug. An edit keeps the post's place in the list and its publish date.

RemovePost

RemovePost deletes a post for good; its slug can be used again.

Hide

Hide hides an author's guestbook entry for good. The entry stays stored, so the author can't sign again, and nobody's deposit is refunded. Hiding a hidden entry does nothing.

TransferOwnership

TransferOwnership records newOwner as pending; nothing changes until that address calls AcceptOwnership. Naming the current owner cancels.

AcceptOwnership

AcceptOwnership completes a transfer. Only the pending owner may call it, and a realm address can't pass the account guard, so it never can.

Wave

Wave adds one to the wave count. It's a plain counter: anyone can wave again, and a wave stores nothing but the count.

Sign

Sign leaves one guestbook entry per address. The message is stored trimmed and sanitized when rendered, and must contain a visible character.

Tip

Tip forwards exactly the ugnot sent with this call to the owner. The account guard is inlined so the audit harness sees it next to OriginSend. It forwards what was sent, never the realm's balance: the OriginSend banker refuses to spend more than was sent.