memba_bridge_v1 state

Grant

Revoke

role

rolePlan

hasRole

Curate

Curate runs a curator action on one listing: approve, reject (with a reason), delist, restore or clearflags. Every approval binds the listing's status; approve and restore, which publish, also bind its content, and clearflags binds the flags it clears. Editing or flagging a listing thus cannot void a reject or delist vote, and cannot slip new content past one.

curatePlan

SetRegistrationFee

registrationFeePlan

SetTreasury

SetTreasury points the fees of market\_config (which escrow also pays into) or of the App Store at addr.

treasuryPlan

SetFee

feePlan

ResolveDispute

ResolveDispute settles one disputed milestone: refund pays the client the whole amount, otherwise the freelancer is paid less the fee. Either way escrow pays out at most the milestone's amount, which is checked. A milestone is disputed at most once (a resolution is final); binding the height of that dispute means no approval can be voted before it exists.

disputePlan

disputePlan returns the approval and the milestone's amount.

escrowBalance

ProposeFeeRecipient

ProposeFeeRecipient stages escrow's fallback fee recipient, used only when market\_config's treasury is unusable.

feeRecipientPlan

CancelFeeRecipient

cancelFeeRecipientPlan

HideReview

HideComment

Unhide

Unhide shows an item again and dismisses its flags.

moderate

moderate binds the item's kind and visibility; Unhide, which shows the item again, also binds its content, so an author editing it can neither void a hide vote nor slip new text past an unhide vote.

moderationPlan

SetQuestSigner

SetQuestSigner rotates the key every quest voucher is checked against.

signerPlan

AddMember

AddMember adds a new member; it never rewrites an existing member's roles.

RemoveMember

SetRoles

member

memberPlan

validRoles

validRoles accepts a non-empty, ordered, duplicate-free subset of admin,dev,ops,member.

CreateChannel

CreateChannel adds a channel. Channels are permanent (at most 20).

channelPlan

channelName

channelName is the apps' own channel-name rule.

appMarket

appEscrow

appAppstore

appReviews

appQuest

appArcade

appBadges

appFeed

appChannels

appFeedback

self

apps

protected

tenure

// app -> times the bridge accepted it

pausedUntil

// app -> end of the bridge's pause

episodes

// app -> pauses the bridge started

lastPause

// member id -> last emergency pause

init.53

direct

plan

A plan is the approval one governed call needs: action app.op, args (completed by the app's tenure, which voids approvals voted while the app was away), the invalidation scope and the minimum class.

newPlan

newPlan refuses an approval for an app the bridge does not govern now: no call could consume it.

approve

approve consumes proposal pid for p; memba\_gov checks the executor, the bridge's direct caller, is a seated member.

Approval

Approval returns, as JSON, the proposal a governed entrypoint call would consume if made now: target this realm, with the action, args, scope and minimum class given. call is the entrypoint's name and its arguments after pid, daoauth-encoded in order (strings s:, addresses a:, integers i: or u:, booleans b:). It refuses a call its entrypoint would refuse before voting, and holds only while the state it binds is unchanged.

call

call reads an Approval call's fields in order, each with its tag.

parseCall

quote

quote returns s, printable ASCII, as a JSON string with \< > & escaped.

checkApp

arg

canonical

Accept

Accept takes the admin role the 2-of-3 nominated the bridge for. It needs no vote: the nomination is the decision. A paused app is refused: only a pause the bridge started can be ended by its rules.

TransferAdmin

TransferAdmin stages to as the app's next admin: the 2-of-3, a successor bridge, or anyone the DAO names. The recipient accepts by its own call.

transferPlan

CancelTransfer

CancelTransfer withdraws a staged admin before the recipient accepts.

cancelPlan

governs

governs reports whether the bridge is app's admin now.

pendingAdmin

EmergencyPause

EmergencyPause pauses app for 7 days, without a vote. Each member may use it once per 30 days, so one key cannot keep an app closed.

SetPause

SetPause ends the bridge's pause of app now (until = 0) or keeps app paused until the unix time until, at most 30 days ahead. The approval names the pause episode, so it never ends a later pause.

pausePlan

ExpirePause

ExpirePause lets anyone end the bridge's pause of app once it is over. A SetPause that keeps app paused longer must execute before then. Once the bridge no longer governs app, its record no longer applies: anyone drops it, and the app, now its new admin's, is left as it is.

hasPause

isPaused

setPaused

unixOf

PausedUntil

PausedUntil returns the unix end of the bridge's pause of app, or 0 (also once the bridge no longer governs app).

PauseEpisode

PauseEpisode returns how many pauses of app the bridge has started; a SetPause approval binds it.

Tenure

Tenure returns how many times the bridge has accepted app; every approval for app binds it as its last argument.

Render

EmergencyPauseFor

// escrow keeps exits closed this long

PauseAllowance

// one emergency pause per member per period

MaxPauseAhead

The pause durations, in their own file so a node fixture, which cannot wait days, can replace this file alone; TestProductionDurations pins them.