v1 state

ModeDirectFixed

ModeDirectCap

ModeFairSale

maxPublicID

// T plus ten decimal digits: GRC20 MaxSymbolLen is 11.

Metadata

Metadata is editable only by the original creator until frozen.

createSpec

createSpec is assembled within this realm: a foreign Gno realm cannot allocate a struct declared here, so the crossing interface uses scalars.

Info

Info excludes the private ledger capability and can be returned safely.

entry

nextID

Tokens live in an AVL tree: creating one touches its own entry and the path to it, whatever the number of tokens. A Go map, or a slice of their ids, would be rewritten whole on every creation. Ids are T1, T2, ... in creation order and no token is ever removed, so a page of the list is a range of ids.

entries

// token id -> \*entry

requireIssuer

check

caller

requireAddress

The ledger keys balances and allowances by the address text, so an address in any spelling but the one the chain gives a caller would hold something no caller can reach.

validateMetadata

protectedTicker

The founding names remain unavailable even if governance globally clears a config reservation. A creator-specific grant needs its own reviewed proof.

validateSpec

laneForMode

nextPublicID

Create

Create registers exactly one new GRC20 for a listed issuer, which must authenticate the creator, reserve the launch terms and collect payment before this crossing call. The currency key names the config action currency: creation-fee currency for a direct token, quote currency for a fair sale; the issuer binds it to the corresponding payment route. The public symbol T\<n> is distinct from the nonunique creator-selected ticker. The whole initial mint lands in the issuer's custody for atomic allocation and escrow setup, and the token stays bound to that issuer.

mustEntry

GetInfo

Count

Count is the number of tokens created: ids are T1 to T\<Count>, none removed.

RegistryKeyOf

BalanceOf

TotalSupply

MintCapped

MintCapped can only be reached through the issuer that created the token. That issuer authenticates the live caller as the current mint authority and must partition the newly minted balance into recorded allocations in this same transaction. The ledger independently rechecks the authority and the immutable cap, and takes no mint while the direct lane is closed: the pauser stops every issuer here, whatever each one checks by itself.

Allowance

Transfer

Standard wrappers operate only on the immediate caller's balance or allowance, accept no coins, and take an address only as the chain writes one. A realm can also move its own balance, or an allowance it holds, through the token in the registry, where the GRC20 library alone checks the receiver. A script an account runs is such a realm with the account's address, so these wrappers are an account's only way in only while the chain does not let that account submit scripts.

Approve

TransferFrom

Burn

SetMetadata

FreezeMetadata

ProposeMintAuthority

A capped token's authority moves only through its own two-step handoff. The issuer checks this live authority before each later mint.

CancelMintAuthority

AcceptMintAuthority

RenounceMintAuthority

Render

infoJSON

int64 amounts and versions are decimal strings so JSON clients cannot round a valid value above JavaScript's exact integer range.

TokenJSON

ListTokensJSON

ListTokensJSON returns a zero-based page; page size is strictly 1..100.