v1 state

MaxSetLen

Allowlist sets (design §4.6). A phase's set is a comma-separated union of terms; an address is eligible if any term admits it: users registered in r/sys/users (live check) validators in the active validator set (live check) holders:<cid> holds a token of collection <cid> merkle:<root> in a sha256 merkle tree; the minter passes the proof A term may carry "|"-separated provenance notes for humans, e.g. "merkle:\<root>|src:\<git-sha>|data:\<sha256>"; notes never affect logic.

MaxSetTerms

Allowlist sets (design §4.6). A phase's set is a comma-separated union of terms; an address is eligible if any term admits it: users registered in r/sys/users (live check) validators in the active validator set (live check) holders:<cid> holds a token of collection <cid> merkle:<root> in a sha256 merkle tree; the minter passes the proof A term may carry "|"-separated provenance notes for humans, e.g. "merkle:\<root>|src:\<git-sha>|data:\<sha256>"; notes never affect logic.

setTerm

parseSet

parseSet validates a set and returns its terms; it panics on any error so AddPhase rejects a malformed set before it is ever frozen.

eligible

eligible reports whether addr may mint in a phase with this set, and why not. Live sets are evaluated at mint time, so a deleted user or a removed validator loses eligibility immediately.

MaxPhases

sale

sale is this minter's per-collection state. Phases can change only while core says Draft; after Launch they are frozen with the rest (I-6).

sales

// cid -> \*sale

Create

Create opens a Draft collection for the calling wallet and pays the protocol's create fee from the attached ugnot (excess refunded). Empty payee strings default to "creator:10000". expectedCID, when set, makes the transaction fail instead of creating a different id than the frontend showed (OA B2).

AddPhase

AddPhase appends a sale phase. Phases are ordered and do not overlap. kind is "allow" (set required) or "public" (set empty); a fixed price has startPrice == floorPrice and zero steps; walletCap 0 means no cap.

ClearPhases

ClearPhases removes every phase of a Draft.

Launch

Launch freezes the sale. creatorCommit is safe.Commit(chainID, cid, "creator", secret), computed off-chain — never send the secret to a node before reveal.

Abort

Abort returns a launched collection with no mints to Draft (core rules).

Reserve

Reserve mints the creator's reserve to the creator before the sale.

Mint

Mint buys count tokens in the phase open at this block, at that block's unit price, never above maxUnitPrice (a Dutch step cannot surprise the buyer). proof is the merkle proof for merkle sets, otherwise "". Returns "first-last". Every attached unit is paid out or refunded (I-3, I-4).

mustSale

mustDraftSale

assertCreator

Price

Price is the unit price at height h, or -1 when no phase covers h.

Phases

Phases is the phase list as JSON.

Eligible

Eligible answers "can addr mint now, and how many?" with the same checks Mint runs, so the UI never disagrees with the chain (OA B3). JSON: {phase, kind, eligible, reason, remainingCap (-1 = no cap), price}.

Render

itoa

received

received returns the ugnot attached to a direct wallet call. Payments are accepted only when a wallet called us: the origin-send envelope is shared by every realm on the path, so a realm in between could have consumed it (chain/runtime/unsafe.OriginSend).

assertNoDeposit

assertNoDeposit refuses coins on functions that take none (RA L-1).

pay