v0 state

pkgPath

The paths Bolo's addresses derive from. pkgPath is this realm's own; a test checks it against the realm.

registryPath

The paths Bolo's addresses derive from. pkgPath is this realm's own; a test checks it against the realm.

slashedPath

// where slashed bonds go; nothing ever spends it (INV-8)

escrowPath

escrowPath and bondPath are a campaign's sub-paths (API §1): one escrow and one bond address per campaign, so a bug in one campaign can't spend another's.

bondPath

escrowSub

bondSub

escrowAddr

bondAddr

slashedAddr

realmAddr

depositAddr

registryAddr

registryDepositAddr

adminAddr

assertCodeCaller

assertCodeCaller refuses any caller but a deployed realm (API C11). A maketx run script is ephemeral and code at once: it is refused here, as is a user.

assertSigner

assertSigner runs right after C11's branch: no session key, in either branch (C11), then the caller must be who (API §3.6).

ProposeAdmin

ProposeAdmin proposes next as the admin, who takes over by accepting. None of Bolo's own addresses can ever accept, so none can be proposed. A second proposal replaces the first.

AcceptAdmin

AcceptAdmin makes the proposed admin the admin, and ends the proposal.

SetParams

SetParams sets the Params new campaigns get; every live campaign keeps its own (INV-5).

SetTipRecipient

SetTipRecipient sets where tips and swept strays go: never one of Bolo's own addresses.

SetMinDonation

SetMinDonation sets the smallest gift Donate accepts, in ugnot, for new gifts.

SetPresets

SetPresets sets the four one-click amounts, in ugnot. Display only.

SetEscrowCap

SetEscrowCap sets the most one campaign's tracked escrow balance may reach; 0 removes the cap. It gates gifts only, never money going out (INV-4).

AddCategory

AddCategory adds a category. There is no remove and no rename: every campaign keeps a valid category.

Sunset

Sunset stops CreateCampaign for good. It names no successor: where new campaigns start is the registry's Current() (API §3.7). A second call changes nothing.

Pause

Pause stops CreateCampaign, Donate and PostBond — money coming in, never money going out. Pausing while paused changes nothing.

Unpause

Unpause lifts a pause. Unpausing while running changes nothing.

checkParams

checkParams returns the Params for SetParams' arguments, or panics with ErrSetting when one is out of bounds (API §3.6). The upper bounds keep the conversion to seconds far from overflowing.

between

checkPresets

checkPresets returns the four amounts, or panics with ErrSetting unless they are positive and strictly ascending (API §3.6).

checkOutsideBolo

checkOutsideBolo refuses, with ErrSetting, a malformed address (C12) and every address of Bolo's own (API §3.6): the realm's, where tips would stay (INV-3); the escrow and bond addresses derived so far, where an escrow would count tips as untracked money; slashed, where they would be burned; the storage-deposit address, the keeper's (Q8); and the registry, with its storage-deposit address. Tips must not go there, and none of them can ever accept the admin role.

checkNewCategory

checkNewCategory refuses a code that isn't 3 to 20 lowercase letters, one already listed, or one past the cap (API §3.6).

Close

Close closes campaign id to new donations. Its organizer can, at any time; anyone can, once it is past its deadline or inactive for long enough — the campaign's page says when. Closing stops gifts only: what the campaign holds still goes to the beneficiary, or back to its donors. Its branch follows state, never the caller (API §3.1, Q7). Past its deadline, Close records the close if nothing has yet, and never fails. A dormant campaign closes as dormant, whoever calls. Only an open campaign nobody else may close yet takes the organizer's branch, which checks how the call arrived (C11) before it reads who sent it.

closeNow

closeNow closes the open campaign c now, for reason, and takes it out of the active indexes; Closed names by, who sent the call (API §3.1, §6).

closeNotYet

closeNotYet is CanClose's reason while only the organizer may close.

CanClose

CanClose says what Close(id), sent by caller from a wallet, would do now (API §4): true, with the reason it would record — "deadline" or "dormant" for anyone, "organizer" for the organizer alone — or false, with "closed" once closed or settled, and "not\_yet" while only the organizer may close.

maxDeadlineDays

maxDeadlineDays bounds how far ahead a deadline may be, so no timer computed from it can overflow (API §3.1).

CreateCampaign

CreateCampaign opens a campaign, which you organize, and returns its ID. Send the creation deposit with it — Bolo's "Start a campaign" link attaches it — and it comes back when the campaign completes. title and description are public, and the description may hold links, never an image. category is one of Bolo's categories. imageCID and imageAlt are a photo on IPFS and what it shows, or both empty. beneficiary is the address the money goes to, which can never change. goal is in ugnot, 0 for none. mode is "escrow" or "direct". deadline is a Unix time, 0 for none. It opens a campaign for its caller, the organizer (API §3.1). The envelope is exactly the creation deposit, which goes to the campaign's bond address: the realm keeps nothing (INV-3).

checkCampaignText

checkCampaignText checks a campaign's text (API §2.3) and returns it normalized: the title, the story, and the photo with its description.

checkCampaignTerms

checkCampaignTerms refuses a category not listed, a mode that isn't one, a negative goal, and a deadline neither 0 nor in the future, at most maxDeadlineDays ahead (API §3.1).

checkBeneficiary

checkBeneficiary refuses a malformed address (C12) and every address a campaign must never pay (API §1): the realm's, slashed, the storage-deposit address, the registry and its storage-deposit address, every escrow and bond address handed out — and those of id, the campaign about to be created, which paying itself would trap every gift.

recordDeadline

recordDeadline records a passed deadline (API §3.1): an open campaign whose deadline has passed becomes closed, at its deadline, for reason deadline, and leaves the active indexes; Closed is emitted, naming the caller there and only there. Every crossing function that takes a campaign ID calls it before any other precondition; queries and Render compute the same with effective, writing nothing.

addActive

addActive puts c in the two active indexes, which list the open, listed campaigns (API §2.5).

dropActive

dropActive takes c out of the two active indexes (API §2.5).

Donate

Donate gives to campaign id, and returns your receipt's ID. Send the gift and any tip together: tip is the part of what you send that goes to Bolo, in ugnot — 0 for none. message is optional, and public. anonymous, if true, keeps your address off Bolo's pages; the chain still shows it. In a direct campaign the gift goes straight to the beneficiary; in escrow, to the campaign's escrow, until the beneficiary withdraws it. Any user, by a direct transaction, the donor being the caller (API §3.2). The envelope is the gift plus the tip. The gift goes to the beneficiary, or to the campaign's escrow, and the tip to the tip recipient: the realm keeps nothing (INV-3), and coins found there are never credited (C4).

checkGift

checkGift returns the gift in an envelope of total ugnot carrying tip, or panics (API §3.2), in this order: a negative tip, or nothing left for the gift; a campaign that isn't open; a paused Bolo; a gift under the minimum.

checkRoom

checkRoom refuses a gift of amount that c can't take (API §3.2): one that would push Raised past int64, or, in escrow mode with a cap set, the tracked balance — never the bank's — past MaxEscrowBalance.

receiptID

receiptID is a receipt's ID: its campaign's, a slash, and its sequence number (API C9).

SweepStrays

SweepStrays sends the coins someone sent to Bolo's own address by mistake to the tip recipient, and returns how much: anyone can. It sends the ugnot at the realm's address to the tip recipient (API §3.4). The realm holds nothing between transactions (INV-3), so all of it is strays; anyone may call, and with nothing there it sends nothing and emits nothing (Q3).

envelopeUgnot

envelopeUgnot returns the ugnot attached to this call (API C3, C4): an envelope is one ugnot coin, or nothing; anything else is ErrWrongDenom. It is the one place Bolo reads OriginSend, and only user-only writes reach it: C11's keyed refusal, then AssertOriginCall, in their own body (make check). Never a write behind C11's realm branch, which a deployed realm passes with an envelope paid to itself.

Error

Error is the type of every failure Bolo reports (API C10, §7). Each one is a constant, never a variable another realm could reassign (C6), and its text starts with its copy key, which a client turns into a message (UI spec §8).

ErrNotFound

ErrNotUserCall

ErrSessionKey

ErrWrongDenom

ErrBadAmount

ErrDepositMismatch

ErrPaused

ErrNotOrganizer

ErrNotBeneficiary

ErrNotAdmin

ErrCampaignClosed

ErrCampaignSettled

ErrBondSlashed

ErrNoBond

ErrHoldEnded

ErrWrongMode

ErrNothingToRefund

ErrRefundWindowClosed

ErrExitOpen

ErrNotClosable

ErrNotFinalizable

ErrNothingToWithdraw

ErrTitle

ErrDescription

ErrMessage

ErrUpdate

ErrNotice

ErrImage

ErrMarkup

ErrBeneficiary

ErrCategory

ErrMode

ErrDeadline

ErrGoal

ErrSetting

ErrSunset

ErrCapReached

ErrBooksMismatch

evCampaignCreated

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evBondPosted

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evBondReleased

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evDonated

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evWithdrawn

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evRefunded

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evUpdatePosted

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evClosed

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evSettled

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evDelisted

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evRelisted

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evNoticeSet

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evStraysSwept

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evImageHidden

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evMessageHidden

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evParamsChanged

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evAdminProposed

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evAdminChanged

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evPaused

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evUnpaused

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evTipRecipientChanged

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evMinDonationChanged

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evPresetsChanged

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evEscrowCapChanged

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evCategoryAdded

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

evSunset

The events Bolo emits (API §6), for the web app's indexer. Their attributes are strings.

itoa

itoa formats an amount, a timestamp or a sequence number as an attribute.

Finalize

Finalize completes closed campaign id: anyone can, once the campaign's page offers it. It returns the organizer's deposit, and sends the beneficiary the coins someone sent to the escrow outside Bolo. What donors can still reclaim stays theirs. It settles a closed campaign, and forwards what no donor is owed (API §3.4): anyone may call, with no identity. At its first call it settles the campaign; every call forwards the coins sent to the escrow outside Bolo to the beneficiary, and everything at the bond address but a bond still on hold to the organizer — the deposit, and the bond once its hold has ended. It never moves the tracked balance: that stays the donors' (INV-16).

settlement

settlement is what one Finalize call moves, and announces.

bookFinalize

bookFinalize checks a Finalize call on c and enters it in the books, before any coin moves (API §3.4): the first settles c, if checkFinalizable allows; every one works out what to forward, and releases a bond whose hold has ended.

checkFinalizable

checkFinalizable refuses c's first settlement (API §3.4), with ErrNotFinalizable, unless it is closed and its FinalizableAt has come: at once in direct mode or with no tracked balance, else once its exit window opens. The view, CanFinalize and this share one rule, finalizableAt.

pending

pending works out what a Finalize call would move from c now, without writing: the escrow's coins above its books, to the beneficiary; the bond address's coins but a bond still on hold — not slashed, not released, its hold not ended — to the organizer, the bond itself included once its hold has ended. Books above the bank, at either address, are ErrBooksMismatch (INV-1, INV-7).

CanFinalize

CanFinalize says what Finalize(id) would do now (API §4), a passed deadline counted as recorded: true with "settle" for the first settlement, or "forward" on a settled campaign with something to move; false with "open", "not\_yet" while a tracked balance waits for its exit window, or "settled" with nothing to move.

assertCurrent

assertCurrent is the first statement of every crossing function (API C2).

checkAddress

checkAddress refuses an address argument that isn't a well-formed address (API C12): exactly 40 characters, a lowercase "g" first, then IsValid(). MsgCall passes an address argument through unchecked, and a malformed one stored once would make every later send to it fail. IsValid alone also accepts an address in capitals, which the bank pays as the same account but which never equals the lowercase spelling; it refuses mixed case, so a lowercase "g" means a lowercase address. The length comes first, so IsValid only ever parses address-sized input.

secondsPerDay

daysToSeconds

daysToSeconds converts a duration in whole days to seconds, refusing a negative one and one whose seconds would overflow (API §2.3).

now

now is block time in Unix seconds (API C8).

parseID

parseID returns the campaign ID s names, if s is canonical (API C9): the decimal form of a positive ID — digits only, no sign, no leading zero, no space. "042" names nothing, never campaign 42: one ID has one spelling, and so one set of addresses (INV-18).

idString

idString is the canonical decimal form of id.

init.130

maxPageSize

idKeyLen

idKeyLen is the length of a campaign's key, seqid.ID.Binary().

pageSize

pageSize clamps a requested size to 1–50.

ListCampaigns

ListCampaigns returns the open, listed campaigns, newest first, from below after ("" for the newest), and the cursor to pass next, "" at the end; category may be "". A campaign past a deadline nobody recorded is left out (Q6). One call reads at most four times size entries, so a page can be short while the cursor isn't "".

ListByOrganizer

ListByOrganizer returns the campaigns addr organizes, delisted included, newest first, from below after, and the cursor to pass next. An address is compared as given (C12).

ListByBeneficiary

ListByBeneficiary returns the campaigns naming addr as beneficiary, delisted included — the beneficiary must keep seeing them (INV-4) — newest first, from below after, and the cursor to pass next.

ListByDonor

ListByDonor returns the campaigns addr gave to at least once without anonymity, newest first, from below after, and the cursor to pass next: a campaign where all of addr's gifts were anonymous is in no index under addr.

everyCampaign

campaignPage

campaignPage reads index newest first: the keys under prefix — a category's or an address's range, which ends at the "/" after it, or the whole index for "" — below after's key. It reads at most budget entries, keeps size views of those keep accepts, and returns them with the ID of the last entry read when more remain, "" when the range is done. A non-canonical after is ErrNotFound (C9).

pageOffset

pageOffset returns where page starts, newest first, in a tree of n entries paged by size, and false past the end. A page counts from 1; below 1 reads as 1.

ListReceipts

ListReceipts returns a page of the campaign's gifts, newest first.

WithdrawalView

WithdrawalView is one payout to the beneficiary (API §2.4): its tracked amount and the coins sent outside Bolo it carried, apart.

ListWithdrawals

ListWithdrawals returns a page of the campaign's withdrawals, newest first.

RefundView

RefundView is one payout to a donor (API §2.4). Donor is empty when all of that donor's gifts to the campaign were anonymous; Kind is "open" or "exit".

ListRefunds

ListRefunds returns a page of the campaign's refunds, newest first.

UpdateView

UpdateView is one organizer update (API §2.4).

ListUpdates

ListUpdates returns a page of the campaign's updates, newest first.

Delist

Delist takes the campaign off the active lists, with a public notice, and with slash moves its bond to the slashed address, where nothing ever spends it (INV-8). Delisting again replaces the notice, and may slash a bond not yet slashed.

bookSlash

bookSlash checks a slash of c's bond and enters it in the books, before the coins move (API §3.5), and returns what moves: the bond, never the deposit. It refuses, in order, no bond posted, a bond already slashed, a hold that has ended — once closed, BondHold after closedAt, settled or not — and a bond address holding less than the bond (INV-7).

Relist

Relist puts a delisted campaign back on the lists, and into the active indexes if it is still open (API §3.5). Its notice stays, as does a slash. Relisting a listed campaign changes nothing.

SetNotice

SetNotice attaches a public warning to the campaign without delisting it, or clears it with "" (API §3.5). An unchanged notice changes nothing.

checkNotice

checkNotice returns notice as SetNotice stores it (API §3.5): "" clears, except on a delisted campaign, which keeps a public reason; any other text is normalized, 1–280 characters. It panics with ErrNotice otherwise.

HideMessage

HideMessage hides one gift's message (API §3.5): visibility only. The receipt, its amount and its donor stay, and so does the stored text. Hiding a hidden message, or a receipt without one, changes nothing.

hiderOrganizer

Who hid a campaign's photo: ImageHidden's by (API §6).

hiderModerator

Who hid a campaign's photo: ImageHidden's by (API §6).

PostBond

PostBond adds what you send to campaign id's bond: a stake its organizer may post, lost if Bolo's moderator delists the campaign for fraud. It is not a guarantee. The organizer only, while the campaign is open. It adds the envelope to the campaign's bond (API §3.1): its organizer only, by a direct transaction, while the campaign is open, its bond unslashed and Bolo not paused. The bond only grows, and the coins go on to the bond address: the realm keeps nothing (INV-3).

checkBond

checkBond refuses amount as more bond for c (API §3.1), in this order: nothing sent, a campaign that isn't open, a slashed bond, a paused Bolo, and a bond that would pass int64.

assertOpen

assertOpen refuses a campaign that isn't open, by its stored status: ErrCampaignSettled once settled, ErrCampaignClosed otherwise. A passed deadline is recorded before (API §3.1).

PostUpdate

PostUpdate posts an update on campaign id, shown under its story, and returns the update's number: its organizer only. body may hold links, never an image. It appends an update to the campaign (API §3.1): its organizer only, by a direct transaction, in every status and while paused. Updates are append-only, and each resets the dormancy clock.

HideImage

HideImage hides campaign id's photo, for good: its organizer can, and so can Bolo's moderator. Its organizer may, by a direct transaction, and so may the moderator, with the master key — a DAO realm, once one holds the role, through C11's realm branch (API §3.1, §3.5). The CID stays: it is a fingerprint, and never replaced. Hiding a hidden photo, or a campaign with none, changes nothing.

windowOpen

The refund windows' names: Refund's kind, GetContribution's window (API §3.2).

windowExit

The refund windows' names: Refund's kind, GetContribution's window (API §3.2).

Withdraw

Withdraw sends everything campaign id's escrow holds to its beneficiary, and returns how much: the beneficiary only, until the exit window opens — the campaign's page says when. The beneficiary only — a user by a direct transaction, or a deployed realm, through C11's realm branch (API §3.3). The tracked part counts as Withdrawn, and only it ends the open refund window; coins sent to the escrow outside Bolo go along, recorded apart.

bookWithdrawal

bookWithdrawal checks a withdrawal from c and enters it in the books, before any coin moves (API §3.3): the refusals of checkWithdrawable; nothing at the escrow; INV-1. Everything at the escrow goes, the tracked part as Withdrawn — ending the open refund window only when above 0 — and the rest recorded apart. It returns the stored record.

checkWithdrawable

checkWithdrawable refuses a withdrawal from c (API §3.3), in this order: a direct campaign, a settled one, and a closed one whose exit window has opened — what is left belongs to the exit process then.

Refund

Refund gives you back, from campaign id's escrow, what you can take back now, and returns how much: your whole gift until the beneficiary first withdraws, or, once the beneficiary's window after the campaign closes has passed, your share of what they left uncollected. The campaign's page offers it when a donor can. It pays the caller back from their own contribution to the campaign (API §3.2, INV-13): a donor, by a direct transaction, while a refund window is open to them. The open window — no tracked withdrawal ever — pays everything not yet refunded.

bookRefund

bookRefund checks a refund of donor's contribution to c and enters it in the books, before any coin moves (API §3.2): the refusals of checkRefund, then INV-1, on the books as they stand. An exit claim freezes the pool and its base if it is the first, uses the donor's one claim, and may not exceed the tracked balance (INV-17). It returns the stored record.

checkRefund

checkRefund returns donor's contribution to c, the window Refund would use and what it would pay, or panics (API §3.2), in this order: a direct campaign; nothing to refund; no window open, a used exit claim included; an exit claim that rounds down to 0.

refundable

refundable returns the window Refund would use for k now, and what it would pay (API §3.2). The open window, while no tracked withdrawal ever happened, pays all not yet refunded. After one, the exit window opens once the campaign is closed and ExitDelay has passed, while a tracked balance is left: one claim per donor, pro-rata against the pool and base the first claim froze — or would freeze now. It reads the effective status, as GetContribution can't record a passed deadline.

exitClaim

exitClaim is left × pool / base, rounded down (API §3.2): computed in 128 bits, as both factors fit in 63 bits but their product doesn't. A claimant's left is part of the base, so the base is above 0 and the quotient at most the pool, and Div64's own panics, keyless, can't be reached; both conditions are asserted first.

assertBooks

assertBooks panics with ErrBooksMismatch when c's books hold more than its escrow does (INV-1). It runs before every payout from an escrow, on the books as they stand, so a bug in the books stops a payment instead of paying out coins they can't account for.

contributionOf

contributionOf returns donor's record in c, or nil.

ContributionView

ContributionView is one donor's record in one campaign (API §2.4), with what Refund would pay them now: a copy.

GetContribution

GetContribution returns donor's record in campaign id (API §4): zeros and no window for an address that never gave, and no window for an exit claim that rounds to 0, which Refund refuses. An address is compared as given (C12).

ReceiptView

ReceiptView is one gift, as the receipt page and the campaign page show it (API §2.4): a copy, holding nothing of the realm's state.

GetReceipt

GetReceipt returns gift seq of campaign id (API §4): an unknown campaign or sequence number is ErrNotFound.

receiptOf

receiptOf returns gift seq of c, or panics with ErrNotFound.

ListRecent

ListRecent returns the campaign's last gifts, newest first, at most recentSize (API §4): read through the ring of sequence numbers in its hot state.

receiptView

receiptView builds r's view (API §2.4): the donor blanked when the gift was anonymous, the message when moderation hid it, and what this donor was refunded since, so a receipt can't vouch for money taken back (INV-12).

webPath

// this realm on gnoweb

maxPathLen

// longer than any valid path

listPage

// entries a list page shows

updatesPage

// updates a page shows: each can cost 0.18 billion gas to render

addressSection

// entries each address-page section shows

barWide

// a progress bar's width across a page, scaled down to fit

barCard

// and in a card, half a row

notFound

Render

Render returns the markdown page for path (API §5).

route2page

route2page renders route, or reports false when route names nothing or a value in q doesn't parse. Every prefix of a route renders a page, as gnoweb's header links each one: "c" the home page, "c/{id}/r" the gifts, "u" the form to find an address.

parseQuery

parseQuery splits a query into its key=value pairs: an empty pair is skipped, a key given twice fails. Values are taken as they are: the routes parse them.

pageOf

pageOf calls render with the page q asks for, 1 when it asks none, or fails when its page isn't a canonical number of at least 1.

parsePage

parsePage parses a page number: canonical decimal — no sign, no leading zero — from 1, at most nine digits.

parseAddress

renderHome

renderHome is the home page: the guarantees in one line, how it works, the links to start a campaign and to find an address, the newest active campaigns in a category or all, 20 at a time by cursor, and the categories.

writeStart

writeStart writes the link to start a campaign — CreateCampaign's form, the creation deposit attached — while this version takes new campaigns, or why it doesn't; then the link to find an address.

writeCards

writeCards writes campaigns as cards, two to a row in gnoweb's columns (UI spec §4.13): the title as a link, the progress bar, raised of the goal and donors, then the mode, the category, the time left or how it ended, and a bond or a moderator's notice when there is one. The one user text, the title, goes through inline, whose InlineText escapes "\<": nothing in it can open, separate or close a block. A separator is written self-closing, the spelling every gnoweb reads as one.

timeWord

timeWord says where a campaign stands in time, on a card: the time left, no deadline, or how it ended.

renderCampaign

renderCampaign is a campaign's page (API §5, UI spec §4.13), Bolo's own blocks before the organizer's words: the notice, the photo, the title and byline, the figures, the mode, the state banner, the donate links, where the money is, the verification block; then the story as a quote; then the recent gifts, the latest update, and last the actions of the organizer, the beneficiary and anyone.

writeFigures

writeFigures writes the progress bar, then three figures, a short line each, which stay short on a phone: raised, of the goal; donors and gifts; the time left, or how it ended.

writeMode

writeMode writes the custody mode in words and what it means now (UI spec §4.3, ModeChip), with the refund link while a refund window is open to some donor — as far as the books can tell: after every donor's exit claim, rounding can leave a few ugnot that keep the window open in the books (API §2.4, §5).

writeBanner

writeBanner writes the one state banner the UI spec's state matrix gives the campaign now (§6), as gnoweb's alert box, which no user text can open (API §5): how it was closed and what remains to happen, that it completed, that Bolo is paused, that the escrow cap leaves no room for a gift, or that anyone may close it as it is dormant. space is the room the cap leaves.

closedText

closedText says how a campaign was closed and, in escrow, what remains: the beneficiary's countdown to the exit window, or the window open to donors.

room

room is how much more campaign v can take: what the escrow cap leaves, in escrow with a cap (checkRoom); otherwise as much as an amount can be.

writeGive

writeGive writes the one-click donate links (API §5): while the campaign is open, listed and Bolo isn't paused, one per preset Donate would take — at least the smallest gift, and no more than the room the escrow cap leaves, space — then the page for another amount, with the room said when it left a preset out.

giveLink

giveLink is a one-click link that gives ugnot to campaign id, with no tip and no message: gnoweb's form attaches the coins once the donor confirms them.

renderGive

renderGive is the page for another amount (API §5). gnoweb's function form attaches only the coins a link carries, so this page asks the amount in gnoweb's own form, which submits back as ?amount=, and answers an amount Donate would take with its one-click link. Any other amount gets the form again with what the campaign can take, echoing nothing; a campaign Bolo offers no gift link for says so.

parseGNOT

parseGNOT parses an amount in GNOT into ugnot (API §5): digits without a sign or a leading zero, at most 12 of them, then optionally a decimal point — "." or, as a form sends a comma, "%2C" — and one to six digits; but not a comma and exactly three, which may be a thousands separator. The spaces a form sends around a value, as "+", are dropped first.

writeMoney

writeMoney writes where the money is, a table of amounts: given, then, in escrow, refunded, raised net of refunds, withdrawn and held; in direct mode, sent straight to the beneficiary.

writeVerify

writeVerify writes the verification block: where to check every figure on the chain itself (UI spec §2, level 3), each address in full.

writeManage

writeManage writes the actions of the organizer, the beneficiary and anyone, each with who may take it, when that call could succeed for someone (API §5): last, as the web app puts maintenance last (UI spec §4.3). anyone is whether CanClose lets anyone close it.

writeGift

writeGift writes one gift in two lines: its amount, and its message unless moderation hid it; then who gave it — a short address linking to its page, or anonymous — when, how much its donor was refunded since (INV-12), and its receipt.

renderReceipt

renderReceipt is a gift's receipt: the shareable object (PRD §5). When its donor was refunded since, the refund banner comes first, so a refunded receipt never looks like a live gift (UI spec §4.5, INV-12).

renderDonations

renderDonations is a page of a campaign's gifts, newest first, under one line of totals.

renderLedger

renderLedger is a page of a campaign's money out of its escrow: withdrawals, then refunds, each newest first. In direct mode, it says that nothing goes out: Withdraw and Refund refuse a direct campaign, so neither list ever holds one.

renderUpdates

renderUpdates is a page of a campaign's updates, newest first, each as a quote.

empty

empty says a page of a campaign's list has nothing on it: first on the list's first page, where it means the list is empty, later past it (API §5).

writePager

writePager writes links to the pages before and after page, of n entries, size a page.

addressList

addressList returns the address page's list a path segment names, and its heading; nil for any other segment. They show listed campaigns only, as they promote (API §5).

renderAddress

renderAddress is the public address page: the short address as its title and the full one under it, then the 10 newest campaigns of each list, as cards, with "More" while a list goes on.

renderAddressList

renderAddressList is one of the address page's lists, 20 at a time by cursor.

writeListed

writeListed writes the cards of the listed campaigns among views: a delisted one is left out of a list that promotes. With none to show, it says so, and whether this is only one page of the list: a later one, or one a "More" follows (paged).

renderLookup

renderLookup is the page that finds an address: gnoweb's form, which submits back here as ?address=. A valid address gets its page; anything else, the form again with one fixed line, echoing nothing from the request (API §5).

renderAbout

renderAbout is the guarantees table, what Bolo costs, where tips go, how to check it, and what not to do (PRD §3, UI spec §4.11).

renderParams

renderParams shows the parameters new campaigns get, the live settings in words, and the admin.

progressBar

progressBar draws how much of its goal a campaign raised (UI spec §5, ProgressBar): an SVG image of two numbers, which gnoweb accepts inline as a data URI, width wide. It fills min(net, goal) of goal; its text, the percentage, is uncapped. With no goal, there is no bar.

percent

percent writes net as a share of goal, rounded down and uncapped: "124%".

share

share is part×scale/whole rounded down, for whole > 0, and 0 for part ≤ 0: exact for any part up to math.MaxInt64/scale, past every amount of ugnot there is, and held there beyond, so the product never overflows.