v1 state

maxAirdropProofBytes

AirdropRecord

AirdropRecord keeps the whole funded allocation encumbered until recipients claim. Claims never expire, and nothing sweeps or returns an unclaimed remainder.

requireAirdropRoot

CreateAirdrop

CreateAirdrop funds one immutable campaign for a token from its creator's allowance. Its Merkle leaves are sha256(0x00 || "launchpad-airdrop-v1|\<token-id>|\<index>|\<beneficiary>|\<amount>"). The token ID in every leaf prevents a proof from authorizing a claim on a different launch, even if two creators publish the same tree shape.

GetAirdrop

AirdropClaimed

ClaimAirdrop

ClaimAirdrop remains available while the airdrop lane is paused. Anyone can submit a proof; the destination is always the leaf's beneficiary. A leaf whose beneficiary is not written as the chain writes a caller's address can never be claimed: the token ledger would credit a balance no caller can reach.

maxAllocationBytes

maxAllocations

allocation

decimal

parseAllocations

parseAllocations accepts a single bounded, canonical MsgCall argument. Each record is address:amount:start:cliff:duration:revocable, with the address order providing both a stable encoding and duplicate rejection.

maxFairHoldingGateBytes

maxFairProofBytes

fairHoldingGate

parseFairHoldingGates

Gates are at most three canonical, strictly token-ID-ordered records: token:T\<n>:\<positive base units>. Collection gates remain unavailable until the collection realm and its BalanceOf interface are implemented.

validateFairEligibility

requireFairEligibility

The leaf is sha256(0x00 || "launchpad-fair-v1|\<token-id>|\<buyer>"). The token ID prevents a valid proof from being reused for a different sale.

FairSaleRecord

FairSaleRecord fixes the sale terms and records funded whole-lot orders. Settlement splits GrossQuote into the primary fee, owed to the protocol, and CreatorQuote, owed to the creator: the fee is GrossQuote minus CreatorQuote. RefundPaid and TokensClaimed count what buyer claims have taken out of this sale, so no claim can pay more than the sale itself owes.

FairBuyerRecord

fairEscrowLiability

fairRefundLiability

fairProceedsLiability

openFairSale

openFairSale gates a new sale on the live config, pins its primary fee, bounds the most quote it can ever hold in escrow, and collects its creation fee, which it returns.

fairTerms

emitFairCreated

CreateFairSale

CreateFairSale mints a fixed-supply fair-sale token and encumbers its whole- lot allocation in sales custody. The creator receives the initial supply remainder.

CreateGatedFairSale

CreateGatedFairSale binds a precomputed token ID to a Merkle root and/or token-holding gates. The expected ID prevents an intervening creation from silently attaching the root to a different token.

createFairSale

CreateFairSaleFromToken

CreateFairSaleFromToken locks an existing direct token's exact creator-funded allocation. Other token liabilities remain encumbered in the same custody balance. One token can have at most one fair sale.

CreateGatedFairSaleFromToken

createFairSaleFromToken

GetFairSale

GetFairBuyer

assertWithinSale

assertWithinSale runs on every exit of a settled sale. Quote and tokens sit in balances pooled across sales, and the custody checks compare a balance with totals only: an exit that overpaid one sale while lowering the totals by as much would pass them, paid with other sales' money. Settlement asserted GrossQuote + RefundQuote = TotalDeposits, so with these bounds a sale never pays out more quote than it took in, nor more tokens than it sold. Settlement also sets CreatorQuote to GrossQuote minus the fee, so the last bound cannot fail on a record settlement wrote; it stays as a defence should a later change break that.

SettleFair

SettleFair closes a sale at its recorded hard-cap fill or scheduled end. It returns every unsold token to the creator and partitions deposits into buyer refunds, the creator's proceeds and the protocol's primary fee. The fee joins the bucket SweepFees pays; nothing is paid out here, so neither receiver can hold up settlement or buyer claims.

ClaimFair

ClaimFair lets anyone release a buyer's recorded tokens and quote refund to that buyer. Claims never expire and ignore current pause/listing.

ReleaseFairProceeds

ReleaseFairProceeds pays a succeeded sale's creator what settlement recorded for them, once, and returns the amount. Anyone can call it; the receiver is always the recorded creator. It stays open while the lane is paused or the currency delisted.

ContributeFair

ContributeFair escrows exact quote atoms for whole token lots at this transaction's schedule price. The direct caller is both payer and buyer, and maxDeposit is the most the order may cost. A native order attaches exactly maxDeposit and gets maxDeposit minus the cost back in the same transaction; a token order pulls only the cost from the buyer's allowance.

ContributeFairWithProof

ContributeFairWithProof verifies the recorded allowlist and holding gates against the direct buyer's live address and balances before collecting quote.

contributeFair

CancelFairSale

CancelFairSale returns the entire unsold allocation to its creator while there are no contributions. It remains callable if the new-sale lane is paused or the quote currency has since been delisted. The creation fee is not returned.

salesPath

launchpadTokenRegistryPrefix

VestingRecord

feeLiability

directCaller

directFee

collectCreationFee

collectQuote

collectQuote takes amount from the immediate caller, as attached coins or from a token allowance. Both routes pay from that caller and no one else.

quoteBalance

owedIn

owedIn is everything the realm owes in one currency: fees, escrow, refunds and proceeds.

assertQuoteCovered

assertQuoteCovered follows every movement of quote: the realm must still hold everything it owes in that currency. An exit ends with it; a creation runs it right after collecting its fee.

payQuote

SweepFees

SweepFees pays every fee recorded in one currency, creation fees and fair-sale primary fees alike, to the treasury of the current config, and returns the amount. Anyone can call it; the caller chooses neither the receiver nor the amount. A fee is only ever recorded once a treasury is named, and config never lets the treasury be removed.

CreateDirect

CreateDirect creates a direct token without an initial airdrop. The allocation string is parsed and the whole amount partitioned before any payment. The caller, payer and initial mint's creator are the same live direct user.

CreateDirectWithAirdrop

CreateDirectWithAirdrop reserves part of the initial mint for one Merkle campaign. The caller commits to the next token ID used in every leaf. If another launch takes that ID first, this transaction rejects before payment.

createDirect

MintCappedAllocated

MintCappedAllocated requires the token's current mint authority to be the immediate user or realm caller. Every new unit is assigned to an immediate or vested allocation; there is no implicit receiver or unrecorded sales balance. No additional creation fee is charged, and attached native coins are rejected. Pausing the direct lane stops new mints without blocking claims.

VestingCount

GetVesting

TokenLiability

ClaimVested

ClaimVested remains open even when the direct-launch lane is paused. Anyone may trigger release, but the destination is always the recorded beneficiary. This also permits a realm beneficiary to receive its vested tokens.

RevokeVesting

RevokeVesting returns only unvested tokens to the original creator. The beneficiary retains its accrued vested entitlement and claim right.

vestingCaller

ProposeVestingBeneficiary

ProposeVestingBeneficiary is callable by the current beneficiary, including a beneficiary realm. A pending move freezes claims until acceptance or cancellation, so the old beneficiary cannot drain accrued entitlement.

CancelVestingBeneficiary

AcceptVestingBeneficiary

vestings

// "\<token id>:\<index>" -> VestingRecord

vestingCounts

// token id -> int

tokenLiabilities

// token id -> int64

airdrops

// token id -> AirdropRecord

airdropClaims

// "\<token id>:\<index>" -> true

fairSales

// token id -> FairSaleRecord

fairBuyers

// "\<token id>:\<buyer>" -> FairBuyerRecord

indexKey

A token id is "T" and digits, so ":" separates it from what follows.

buyerKey

vestingCount

vestingAt

vestingAt returns record index of a token, which the caller has checked to be below vestingCount.

setVesting

appendVesting

tokenOwed

setTokenOwed

A token that is owed nothing has no entry.

airdropOf

airdropOf returns the zero record for a token without a campaign.

jsonInt

fairRecordJSON

fairRecordJSON reports a sale's terms and outcome. Once settled, the primary fee is what was raised minus the creator's share.

airdropRecordJSON

TermsJSON

TermsJSON is what launching a token in a currency costs under the current config version: the fee a direct creation and a fair-sale creation attach, exactly; the most one fair sale may raise; and the primary fee a new sale pins. A fee of -1 means the currency has no terms. A creation names this version, so if the terms change before it lands it fails with "config changed" and takes nothing. Whether a lane takes new launches now is config's ActionStatusJSON.

SolvencyJSON

SolvencyJSON is the realm's books in one currency: the balance it holds and what it owes, in total and by liability. fees is what SweepFees would pay now. Every movement of quote ends with balance >= owed, so a watcher that sees otherwise has found a fault; what the balance holds above owed was sent outside the entry points and is owed to no one. An empty key or one over 200 bytes panics "invalid currency"; a key that is neither ugnot nor a registered GRC20 aborts in the registry ("unknown token").

LaunchJSON

LaunchJSON is a token's launch state: the ledger's record of the token, what sales still owes in it, how many vesting records it has, and its fair sale and airdrop campaign, each null when the token has none.

FairBuyerJSON

FairBuyerJSON is one buyer's record in a sale and, once the sale is settled and until the buyer is paid, what ClaimFair would send them. Before settlement both amounts are 0 and settled is false: settle first.

VestingJSON

VestingJSON is one vesting record: its schedule, who holds the claim right and who has been proposed to take it.