v0 state

Render

Render serves the directory index at "" and one identity card at "\<name>". The index deliberately does not compute a Berty link per row: base58 over a 70-byte payload is big-integer work, and it belongs on the page that a human actually asked for.

renderIndex

renderIdentity

modeLabel

activeDevices

activeDevices counts the distinct devices whose latest sigchain entry is an add. A device can be added, revoked and added again, so only the last entry for each key decides.

short

short abbreviates a long hex string for table cells.

MinNameLen

MaxNameLen

MaxDevices

MaxRotations

rotation

rotation is one seed (or commitment) an identity has published.

deviceEntry

deviceEntry is one verified sigchain statement.

identity

identity is a published Wesh identity bound to one gno address. payload holds the public rendezvous seed when committed is false, and H(seed ‖ salt) when it is true. head is the digest of the last accepted sigchain entry, which the next entry must chain to.

byName

byOwner

byAccount

Register

Register publishes an identity whose rendezvous seed is public. sigHex must be an ed25519 signature by the account private key over wesh.BindStatement(chainID, caller, accountPK, seed, 1). Revision 1 is fixed at registration so a signature captured from a later rotation cannot be replayed to re-register the name after it is released.

RegisterCommitted

RegisterCommitted publishes an identity that keeps its rendezvous point off chain: commitmentHex is wesh.SeedCommitment(seed, salt), and the seed itself is shared out of band. The chain still attests the binding (this account key really did claim this commitment from this gno address), so a seed later disclosed privately can be checked against it. What it does not do is tell the world where the account listens.

register

register is shared by Register and RegisterCommitted. It takes the already resolved caller rather than a realm: a helper whose first parameter is \`realm\` would be a second crossing hop, and Previous() inside it would resolve to this realm rather than to the user who called in.

Rotate

Rotate publishes a new seed (or commitment) for the caller's identity. This is the operation weshnet's ContactRequestResetReference has no counterpart for. There, resetting the seed silently invalidates every link ever shared. Here the new value is numbered and the old one stays in the history, so a holder of a stale link can see that it was superseded and when. The signature must be over revision+1, which is what stops a superseded binding being replayed to roll a rotation back.

AppendDevice

AppendDevice adds one entry to the caller's device sigchain. prevHex must be the digest of the current head (all zeros for the first entry), and the signature must cover the whole statement including the sequence number and that digest. Chaining every entry to its predecessor is what stops the log being reordered or having an entry quietly dropped: any gap changes every digest after it. op is "add" or "revoke". Adding a device that is already active, or revoking one that is not, is refused: an append-only log is only useful if its entries are meaningful.

SetDisplayName

SetDisplayName updates the identity's free-form label. It carries no signature because it authenticates nothing: the display name is app metadata, and berty's own link format keeps it outside the signed payload for the same reason. Only the owning address may change it.

Release

Release removes the caller's identity and frees its name and account key. The sigchain goes with it. That is the honest behaviour: a directory entry is a live claim, not an archive, and keeping a dangling roster for a name somebody else can now take would be worse than keeping nothing.

Resolve

Resolve returns the account key and current payload of a name, both hex, and whether the payload is a commitment rather than a seed. ok is false when the name is not registered.

Link

Link returns the shareable Berty web link for a name, or "" when the name is unknown or its rendezvous point is committed rather than published.

RendezvousPointAt

RendezvousPointAt returns the hex rendezvous point the named account announces on during the rotation period containing unixSec, or "" when the name is unknown or committed. This is what makes a directory entry checkable rather than merely claimed: anyone can compare it against the DHT without trusting this realm.

DeviceStatus

DeviceStatus reports "active", "revoked" or "unknown" for a device under a name. "unknown" also covers an unregistered name: a caller must not be able to tell those apart by status alone.

SigchainHead

SigchainHead returns the hex digest the next sigchain entry must chain to, or "" when the name is unknown. A client builds its next statement from this.

NameOf

NameOf returns the handle owned by an address, or "".

Count

Count returns the number of registered identities.

lookup

contactOf

deviceIsActive

deviceSeen

mustOwnIdentity

mustAccountPK

mustPayload

mustSig

assertDisplayName

assertNameAvailable

normalizeName

normalizeName lowercases a handle so lookups are case-insensitive and two handles cannot differ only by case.