home state

Admin

Admin is the initial authority: the only address that may write slots and accept, roll back or freeze a theme. It is a constant so a reviewer can read who controls the page without decoding chain state; TransferAuthority moves it afterwards. The value here is the standard test1 account, so the gnodev walkthrough in the README works unedited. \`make build ADMIN=g1...\` rewrites it for a real deployment.

LayoutSlug

StylePrefix

maxSlugLen

Theme

Theme is what a renderer realm promises. It is declared here, in the file that can never change, so every theme version agrees on one type identity. Render receives the render path ("" is the profile page) and returns markdown. The operator views (system, slots, edit, manifest) never reach a theme; for any other path it does not draw itself, a theme should return Fallback(path). A panic here aborts the query: there is no recovering a foreign realm's panic, so a broken theme shows an error until Rollback.

Slot

Slot is one named fragment of the page.

proxy

selfPath

slots

// slug -> \*Slot

rev

// total writes accepted; bumps on every mutation

lastHeight

// height of the most recent write

init.11

assertAuthority

assertAuthority panics unless the caller of the crossing function that owns cur is the current authority. It asks the proxy's Authority directly rather than going through proxy.AssertAuthorized, so content writes keep working after Freeze: freezing ends code upgrades, not editing.

reservedSlugs

reservedSlugs are placeholders computed at render time (see render.gno). A slot may not take one of these names, so the page never depends on which of the two would win.

validSlug

validSlug reports whether slug is a legal slot name: 1..maxSlugLen bytes of \[a-z0-9.\_-]. No ':' so a slug can never break out of its own :slug: placeholder, and no uppercase so a slot has exactly one name.

assertWritableSlug

Set

Set creates or replaces the slot named slug. This is the ordinary update: one slot, one transaction. An empty body keeps the slot but empties it; use Delete to remove it.

Append

Append adds to the end of a slot, creating it when absent. It exists for a body too large for one transaction: Set the first chunk, Append the rest.

Delete

Delete removes a slot. Deleting the layout slot restores the theme's default layout.

write

bump

Get

Get returns a slot body, or "" when the slot does not exist.

Has

Has reports whether a slot exists, empty or not.

Lookup

Lookup returns a copy of a slot and whether it exists.

Slugs

Slugs returns every slot name, sorted.

Each

Each visits every slot in name order until fn returns true.

Style

Style returns the style knob named key (the slot "style."+key), or fallback when it is absent or empty.

Layout

Layout returns the layout slot, or "" when none has been set. Themes substitute their own default in that case.

Revision

Revision returns the total number of writes this realm has accepted. It changes on every mutation, so a client can cheaply tell "nothing moved".

LastHeight

LastHeight returns the block height of the most recent write, or 0.

Manifest

Manifest returns one tab-separated line per slot: <slug>\t<rev>\t<bytes>\t<sha256 of body, hex> It is the diff surface scripts/sync.sh reads: one query tells it exactly which local file is out of date, without downloading any body.

Path

Path returns this realm's package path, e.g. "gno.land/r/g1lnkytfqcjwllws63gvf0mv9yt04aswy4y9amhm/home".

Link

Link returns the gnoweb path of a render path on this realm: Link("") is "/r/g1lnkytfqcjwllws63gvf0mv9yt04aswy4y9amhm/home", Link("slots") is "/r/g1lnkytfqcjwllws63gvf0mv9yt04aswy4y9amhm/home:slots".

Register

Register records the calling realm's theme as a candidate. The path filed is read off the crossing frame, never taken as an argument, so a candidate cannot claim to live somewhere it does not. Only realms nested under this one are admitted; a direct user call is refused.

Accept

Accept makes the candidate at pkgPath the live theme. Authority only.

Withdraw

Withdraw drops a candidate. Authority only, except that a theme realm may always drop its own.

Rollback

Rollback restores the previous theme and returns the current one to the pending set. Authority only.

Forget

Forget drops the rollback history and the storage it holds. Authority only.

Freeze

Freeze ends theme upgrades permanently. Slots stay editable. Authority only, and there is no way back.

TransferAuthority

TransferAuthority hands both editing and upgrading to another address.

LivePath

LivePath returns the realm path of the theme currently serving, or "".

PendingPaths

PendingPaths returns the candidate theme paths awaiting acceptance.

HistoryPaths

HistoryPaths returns the themes this realm has already served, oldest first, excluding the live one.

Frozen

Frozen reports whether theme upgrades have ended.

Authority

Authority returns a human-readable description of who may write and upgrade.

liveTheme

liveTheme returns the accepted theme, if any.

Render

Render is what gnoweb calls. The operator views (system, slots, edit, manifest) are always served here, never through the theme: a panic inside a foreign realm's code aborts the whole call and cannot be recovered from this side, so a theme that panics takes the page down until it is rolled back. These views are what the rollback is done from, and the routing keeps them out of the theme's reach. Every other path, the page itself included, goes to the live theme, or to the built-in renderer when none is accepted.

operatorPaths

operatorPaths are the render paths this realm keeps for itself.

isOperatorPath

cleanPath

cleanPath drops a query string from a render path.

Fallback

Fallback is the built-in renderer. Render routes the operator views here directly, and themes delegate to it for every other path they do not draw themselves, so these views exist under any theme: "" the assembled page: the layout slot filled from the slots "slots" the slot index: name, size, revision, height of last write "slots/<slug>" one slot's raw markdown, fenced "edit" forms that write slots (they build the gnokey command) "edit/<slug>" the same, prefilled with one slot "system" who may write, which theme is live, pending, history "manifest" Manifest() as plain text, for scripts

Filler

Filler substitutes :name: placeholders in a layout. It is lazy: a callback runs only when its placeholder occurs in the layout, so an unused slot is never even read. Substitution is single-pass and non-recursive, so a placeholder inside a slot body is left alone and no slot can expand into another. Names never contain ':', so no placeholder is a prefix of another and the result does not depend on registration order. A placeholder that nothing claims survives into the output verbatim: a missing section should be visible, not silently blank.

NewFiller

NewFiller returns a Filler with every slot and every computed placeholder registered. A theme adds its own widgets with Add before calling Fill.

updated

updated is the :updated: placeholder: when the slots last changed.

defaultLayout

defaultLayout renders before a layout slot exists and no theme is live, i.e. right after the very first deploy. It uses only computed placeholders, so it never shows an unresolved :slug: of its own.

renderPage

slotLinks

slotLinks is the :slots: placeholder: a bullet list of every slot, linking to its raw view.

renderIndex

renderSlot

fence

fence returns a code fence longer than any backtick run in body, so the body can never close it early.

renderEdit

renderEdit is the in-browser editor: gnoweb forms that build the gnokey command for Set and Delete. Anyone can see them; only the authority's signature makes the resulting transaction succeed.

attr

attr escapes s for a double-quoted attribute of a gnoweb form tag, which must sit on one line: newlines and tabs become the \\n and \\t sequences the textarea unfolds.

renderSystem

renderSystem shows the upgrade wiring and offers the Accept form.

helpLink

sourceLink