func ActivatePilotSale
crossing ActionActivate once, after metadata and proofs are ready. Both purchase modes share the same on-chain 24-hour window beginning in this activation transaction.
Community realm. Read the code first. Community realm, deployed by its author. Read the code before you interact or send coins.
Activate once, after metadata and proofs are ready. Both purchase modes share the same on-chain 24-hour window beginning in this activation transaction.
AdminMint is for reserve/local-development minting and is permanently locked after the first sale activation to prevent post-sale rare-token allocation.
AllowlistLeaf binds a claim to this chain, collection, phase, address, individual allowance and configured unit price.
ApplyRevealBatch updates sequentially minted tokens. Anyone may execute the deterministic batch, so the project operator cannot block progress.
ComputeRevealCommitment is deterministic but production secrets should be committed with the offline helper, never exposed through a public RPC query.
ConfigureReveal permanently commits provenance, secret hash and final URI layout before the first token can be minted.
ConfigureSale stores timestamps as Unix seconds and prices in ugnot. Configuration is only mutable while the sale is paused.
1func MarketplaceTransfer(cur realm, seller, buyer address, tokenID string, grossPrice, nonce int64)MarketplaceTransfer is the only operator-transfer route. The authorized market supplies its consumed listing nonce and gross price for audit events.
1func Mint(cur realm, freeQuantity, paidQuantity, allowance int, unitPrice int64, proof string)Mint applies an explicit free/paid split in one atomic direct-user call. The caller reviews the split and payment in Adena before signing.
MintPublic accepts only direct Adena/EOA calls. This pairing is critical: OriginSend describes actual receipt by this realm only for a direct user call.
The pilot owner reveals manually after the full 24-hour sale window. Selling out early never starts reveal, and no timer invokes this function.
SetAllowlistRoot accepts a lowercase/uppercase 32-byte SHA-256 hash in hex. The first sale unpause permanently locks the root for this deployment.
SetAuthorizedMarketplace is a one-time binding made before minting. Keeping the PrivateLedger and Token handle private prevents other approved operators from bypassing the official royalty settlement path.
SetVeiledURI allows the final placeholder CID to be configured once before minting begins. Existing token URIs are never silently rewritten.
VerifyAllowlist expects comma-separated 64-character hex sibling hashes. Pair hashing is sorted, so proofs do not need left/right direction flags.