memba_notes_v1 source realm

Package memba\_notes\_v1 stores versioned Markdown notes and their receipts. Publication is immutable; deployment is ...

Package memba_notes_v1 stores versioned Markdown notes and their receipts. Publication is immutable; deployment is gated on the complete contract audit.

1const (
2	OpRead uint8 = iota
3	OpWrite
4	OpComment
5)

source

1const (
2	ModePrivate uint8 = iota
3	ModeShared
4	ModeLink
5	ModePublic
6	ModePublicOpen
7)

source

1const (
2	MaxBodyBytes        = 131072
3	MaxCipherBodyBytes  = 135223
4	MaxTitleBytes       = 160
5	MaxCipherTitleBytes = 231
6	MaxReaders          = 32
7	MaxPage             = 50
8)

source

1const CommentCooldownBlocks int64 = 10

source

1const GovRealmPath = "gno.land/r/samcrew/memba_gov"

source

1const ManifestEntryBytes = 1299

source

1const MaxAccessRequests = 256

source

1const MaxAnchorBytes = 600

source

1const MaxBackupBytes = 365

source

1const MaxBodyChunkBytes = 8192

source

1const MaxCipherCommentBytes = 5687

source

1const MaxCommentBytes = 4000

source

1const MaxCommentPage = 5

source

1const MaxGovPayloadBytes = MaxCipherTitleBytes + MaxCipherBodyBytes + MaxManifestBytes + 128

source

1const MaxManifestBytes = 2 + MaxReaders*ManifestEntryBytes

source

1const MaxModerators = 32

source

1const RealmPath = "gno.land/r/samcrew/memba_notes_v1"

source

1const RedactedTitle = "Redacted by moderation"

source

RedactedTitle replaces a redacted current title, which must stay valid.

1const RequestTTLBlocks int64 = 10000

source

1func AcceptAdmin(cur realm)

source

1func AcceptOwnership(cur realm, id [16]byte, baseRevision uint64, opID [16]byte)

source

1func AccessRequestJSON(idHex string, who address) string

source

1func AccessRequestsJSON(idHex, cursor string, limit int) string

source

1func AddComment(cur realm, id, cid [16]byte, bodyRevision uint64, epoch uint32, parent [16]byte, anchor, body []byte, opID [16]byte)

source

Public comments carry UTF8 anchor/body separately. Encrypted comments will carry their combined authenticated payload in Body and an empty Anchor.

1func AddModerator(cur realm, to address)

source

1func AddWriter(cur realm, id [16]byte, baseRevision uint64, to address, opID [16]byte)

source

1func ApplyAccess(cur realm, id [16]byte, baseRevision uint64, expectedEpoch uint32, mode uint8, manifest []byte, opID [16]byte)

source

ApplyAccess grants access to the CURRENT epoch and its history. Removing a reader/writer or changing link scope requires Rotate, never this entrypoint.

1func CancelAccessRequest(cur realm, id [16]byte, opID [16]byte)

source

1func CommentJSON(idHex, cidHex string) string

source

1func CommentsJSON(idHex, cursor string, limit int) string

source

Comments paginate in append order; editing or moderation never reorders them.

1func Commit(cur realm, id [16]byte, baseRevision uint64, expectedEpoch uint32, fieldMask uint8, title, body []byte, opID [16]byte)

source

fieldMask: 1 title, 2 body, 3 both. An unchanged field must be omitted (empty blob). The separate field revision advances only when that field changes.

1func ConfigJSON() string

source

1func CreateNote(cur realm, id [16]byte, mode uint8, title, body, access, commitment []byte, maxFee int64, opID [16]byte)

source

CreateNote is the only payable entrypoint; encrypted creation is atomic.

1func Delete(cur realm, id [16]byte, baseRevision uint64, opID [16]byte)

source

Delete retains the ID and last operation receipt forever. Large collections are purged by bounded follow-up calls, never by an unbounded delete loop.

1func DeleteComment(cur realm, id, cid [16]byte, baseRevision uint64, opID [16]byte)

source

1func EpochJSON(idHex string, epoch uint32) string

source

1func EpochsJSON(idHex string, cursor uint32, limit int) string

source

1func GovApply(cur realm, pid uint64, id [16]byte, baseRevision, ownerGeneration uint64, expectedEpoch uint32, action string, payload []byte, opID [16]byte)

source

1func GovDigest(idHex string, baseRevision, ownerGeneration uint64, expectedEpoch uint32, action string, payload []byte, opID [16]byte) string

source

1func GrantAccess(cur realm, id [16]byte, baseRevision uint64, expectedEpoch uint32, manifest []byte, opID [16]byte)

source

A holder may grant a read-policy-approved recipient the current epoch. Every existing entry must remain byte-identical: a grantee cannot corrupt someone else's wrap, change writers, remove access or rotate the owner into new keys.

1func HideComment(cur realm, id, cid [16]byte, baseRevision uint64, hidden bool, opID [16]byte)

source

1func ListByOwnerJSON(addr address, cursor string, limit int) string

source

1func ListPublicJSON(cursor string, limit int) string

source

1func ListSharedWithJSON(addr address, cursor string, limit int) string

source

1func ModerateListing(cur realm, id [16]byte, baseRevision uint64, visible bool, opID [16]byte)

source

Directory moderation is separate from owner discoverability. Owners cannot undo a moderation hide by toggling their own listing preference.

1func ModeratorsJSON() string

source

1func NoteBodyChunkJSON(idHex string, expectedRevision uint64, offset, limit int) string

source

Each page is tied to the complete state revision, including access/mode and epoch changes. Clients concatenate binary chunks before decoding UTF8/AEAD.

1func NoteJSON(idHex string) string

source

1func NoteMetaJSON(idHex string) string

source

1func Pause(cur realm, on bool)

source

1func PoliciesJSON(idHex string) string

source

1func ProposeOwner(cur realm, id [16]byte, baseRevision uint64, to address, opID [16]byte)

source

1func PublicCapabilitiesJSON(idHex string) string

source

Separate schema: existing NoteJSON consumers retain their exact field set.

1func PublicHistoryBodyChunkJSON(idHex string, seq uint64, offset, limit int) string

source

PublicHistoryBodyChunkJSON reads the body of the version recorded by the note-level event seq (a version's recorded_seq). A later note-level event that kept the body returns the same body; comment and cleanup events, deletion versions, unknown seqs and redacted bodies return null.

1func PublicHistoryCommentJSON(idHex, cidHex string) string

source

1func PublicHistoryEntryJSON(idHex string, seq uint64) string

source

1func PublicHistoryInfoJSON(idHex string) string

source

1func PublicHistoryJSON(idHex string, afterSeq, throughSeq uint64, limit int) string

source

1func PublicHistoryVersionJSON(idHex string, stateRevision uint64) string

source

PublicHistoryVersionJSON reads the public state recorded at a state revision. recorded_seq is the event that recorded it; PublicHistoryBodyChunkJSON and RedactPublicContentAtSeq address that version by this seq.

1func Publish(cur realm, id [16]byte, baseRevision uint64, mode uint8, title, body []byte, opID [16]byte)

source

1func Purge(cur realm, id [16]byte, limit int) int

source

Purge never operates on a live note. Each call erases at most limit records (including cooldowns); a permanent note tombstone prevents ID reuse.

1func PurgeExpiredRequests(cur realm, id [16]byte, cursor string, limit int) string

source

At most limit records are inspected, not just removed. The returned cursor lets a caller sweep the full request set without an unbounded scan.

1func ReadersJSON(idHex string) string

source

1func RedactPublicComment(cur realm, id, cid [16]byte, baseRevision uint64, opID [16]byte)

source

RedactPublicComment removes a public comment's anchor and body from both the live comment (which becomes hidden and cannot be shown again) and its public history. A purged comment keeps only its history record, which is redacted the same way; baseRevision is then ignored (pass 0).

1func RedactPublicContentAtSeq(cur realm, id [16]byte, baseRevision uint64, field uint8, seq uint64, opID [16]byte)

source

RedactPublicContentAtSeq removes one public title (field 1) or body (field 2) from realm storage: the one recorded by the note-level history event seq (a version's recorded_seq). The name carries the addressing so a caller written for field revisions cannot act on the wrong version. History stores each field revision once, so every version that kept that title or body shows it redacted. Public history keeps its SHA-256 and a content-redact entry naming the moderator and the field revision. Redacting the current version also replaces it (placeholder title, empty body) under a new field revision. Gno refunds the freed storage to the moderator who frees it.

1func RefreshOwnWrap(cur realm, id [16]byte, baseRevision uint64, expectedEpoch uint32, manifest []byte, opID [16]byte)

source

RefreshOwnWrap changes only the caller's identity envelope. It cannot change roles, readers, modes or epochs, and never rewrites anybody else's recovery.

1func RegisterPolicy(cur realm, slug string, p Policy) string

source

1func RejectAccessRequest(cur realm, id [16]byte, to address, opID [16]byte)

source

1func RemoveModerator(cur realm, to address)

source

1func RemoveWriter(cur realm, id [16]byte, baseRevision uint64, to address, opID [16]byte)

source

1func Rename(cur realm, id [16]byte, baseRevision uint64, expectedEpoch uint32, title []byte, opID [16]byte)

source

1func Render(path string) string

source

gnoweb uses bounded pages. A revision in every continuation link prevents assembling a whitepaper from different edits; the app reads binary chunks.

1func RequestAccess(cur realm, id [16]byte, opID [16]byte)

source

1func ResolveComment(cur realm, id, cid [16]byte, baseRevision uint64, resolved bool, opID [16]byte)

source

1func Reveal(cur realm, id [16]byte, baseRevision uint64, epoch uint32, key []byte, opID [16]byte)

source

1func Rotate(cur realm, id [16]byte, baseRevision uint64, expectedEpoch uint32, mode uint8, title, body, manifest, kc []byte, opID [16]byte)

source

Rotate installs the entire next epoch in one transaction. Historical epoch records stay available until Delete+boundedPurge; rotation never scans them.

1func SealJSON(idHex string) string

source

1func SeedBackupAtJSON(who address, generation uint64) string

source

1func SeedBackupJSON(who address) string

source

1func SeedBackupsJSON(who address, cursor uint64, limit int) string

source

1func SetCommentMode(cur realm, id [16]byte, baseRevision uint64, open bool, opID [16]byte)

source

1func SetCreateFee(cur realm, fee int64)

source

1func SetGovWriters(cur realm, id [16]byte, baseRevision uint64, on bool, opID [16]byte)

source

1func SetListed(cur realm, id [16]byte, baseRevision uint64, listed bool, opID [16]byte)

source

1func SetPolicy(cur realm, id [16]byte, baseRevision uint64, op uint8, key string, opID [16]byte)

source

1func SetPublicWrites(cur realm, id [16]byte, baseRevision uint64, on bool, opID [16]byte)

source

1func SetSeedBackup(cur realm, baseRevision uint64, record []byte, opID [16]byte)

source

1func SetTreasury(cur realm, to address)

source

1func TransferAdmin(cur realm, to address)

source

1func WrapJSON(idHex string, epoch uint32, who address) string

source

1func WritersJSON(idHex string) string

source

1type Policy interface {
2	Allows(cur realm, id [16]byte, who address, op uint8) bool
3}

source

The realm parameter forces an explicit crossing: adapters run with their own realm identity. All mutators retain the busy guard throughout callbacks.

bytes stdlib
chain stdlib
chain/banker stdlib
chain/runtime stdlib
chain/runtime/unsafe stdlib
crypto/bech32 stdlib
crypto/sha256 stdlib
encoding/base64 stdlib
encoding/binary stdlib
encoding/hex stdlib
gno.land/p/samcrew/avl package
gno.land/p/samcrew/daoauth package
gno.land/r/samcrew/enckeys_v1 realm
gno.land/r/samcrew/memba_gov realm
strconv stdlib
strings stdlib
unicode stdlib
unicode/utf8 stdlib

Overview

Constants 19

Functions 72

Types 1

Imports 18

Source Files 23