memba_feedback_v2 state

MaxPostLen

MaxTitleLen

MaxChannels

MaxThreadsPerChan

FlagThreshold

// flags before auto-hide

MaxRepliesPerThread

// live (non-deleted) replies per thread

ReplyPageSize

// replies rendered per page

ChannelType

ChannelText

ChannelAnnouncements

ChannelReadonly

Channel

Thread

Reply

channels

// name -> \*Channel

threads

// "channel/id" -> \*Thread

replies

// "channel/threadId/replyId" -> \*Reply

threadCount

// channel -> uint64 (next thread ID, monotonic)

threadLive

// channel -> uint64 (currently live (non-deleted) threads)

threadLiveIDs

// channel -> \[]uint64 (live thread IDs, ascending) — bounds renderChannel

replyCount

// "channel/threadId" -> uint64 (next reply ID, monotonic)

replyLive

// "channel/threadId" -> uint64 (currently live (non-deleted) replies)

replyLiveIDs

// "channel/threadId" -> \[]uint64 (live reply IDs, ascending) — bounds renderThread

threadTomb

// channel -> \[]uint64 (soft-deleted thread IDs awaiting hard-GC via SweepTombstones) — B2

flags

// "channel/threadId" -> \*avl.Tree (flagger addr -> bool)

channelOrder

// ordered channel names

members

membershipRevision

paused

owner

pendingOwner

init.31

addChannel

AddMember

AddMember adds an address with specified roles. Only the owner can call this. roles is a comma-separated list (e.g., "admin,dev" or "member").

RemoveMember

RemoveMember removes an address from the membership. Only the owner can call this.

UpdateMemberRoles

UpdateMemberRoles updates the roles for an existing member. Only the owner can call this.

TransferOwnership

TransferOwnership stages a successor owner. Nothing moves until that address calls AcceptOwnership with its own transaction, so ownership can never land on an address that cannot act. A later call replaces the staged address; CancelOwnershipTransfer withdraws it.

CancelOwnershipTransfer

CancelOwnershipTransfer withdraws a staged handoff. Owner only.

AcceptOwnership

AcceptOwnership completes the handoff. Only the staged pendingOwner may call it. The new owner gets "admin" added to their existing roles (not overwritten); the old owner is demoted from "admin" to their other roles, or to "member" when none remain.

GetPendingOwner

SyncMembers

SyncMembers allows the owner to batch-sync membership from the DAO. addresses and rolesList are comma-separated, with roles pipe-delimited per address. Example: SyncMembers("g1a,g1b", "admin,dev|member")

PurgeNonMembers

PurgeNonMembers removes all members not in the provided comma-separated list. The owner is never purged.

IsMember

IsMember returns whether an address is a member.

GetMemberRoles

GetMemberRoles returns the roles for a member (comma-separated) or empty string.

GetMemberCount

GetMembershipRevision

GetOwner

assertNotPaused

PauseRealm

UnpauseRealm

IsPaused

GetChannelState

Value-only readback lets a fixed DAO action verify exact channel creation.

CreateChannel

CreateChannel adds a new channel. Only the owner (admin) can create channels.

PostThread

PostThread creates a new thread in a channel. Caller must be a member with a role listed in the channel's WriteRoles.

PostReply

PostReply adds a reply to a thread. Caller must be a member with a role listed in the channel's WriteRoles.

dropReply

dropReply hard-removes a reply: deletes the node (storage reclaimed — B2), drops it from the live index, and decrements the live count. Shared by DeleteReply and RemoveReply. renderThread only walks the live index, so a removed reply is never looked up — no tombstone is needed.

DeleteReply

DeleteReply lets the reply's author delete it. Caller must be a member and the original author. The reply node is hard-removed (B2 state-shrink) and a slot is freed under MaxRepliesPerThread (B1).

RemoveReply

RemoveReply permanently removes a reply (moderation — admin role only). Hard- removes the node like DeleteReply, bounding renderThread (B1) + reclaiming storage (B2).

EditThread

EditThread allows the original author to edit their thread. Caller must be a member.

DeleteThread

DeleteThread soft-deletes a thread (marks as deleted). Caller must be a member and the original author.

FlagThread

FlagThread flags a thread for moderation review. After FlagThreshold flags, the thread is auto-hidden. Caller must be a member (any role) to flag content.

UnhideThread

UnhideThread allows the owner or an admin to clear flags and un-hide a thread.

RemoveThread

RemoveThread permanently removes a thread (moderation action — admin role only).

SweepTombstones

SweepTombstones hard-removes up to \`limit\` soft-deleted threads in a channel (and all of their remaining reply state), reclaiming AVL storage so that post+delete spam can no longer accrete permanent state (B2). Permissionless GC by design: anyone may call it. Released storage deposits go to the calling tx per the chain's deposit policy (an explicit caller bounty); on restricted-denom chains (e.g. test12/test13 \`restricted\_denoms=\["ugnot"]\`) they route to the StorageFeeCollector instead — so this is a state-shrink/ hygiene primitive, not a user-refund path (see plan B2 / Q11). Bounded + idempotent: each soft-deleted thread holds at most MaxRepliesPerThread reply nodes, so keep \`limit\` small (1–5) to stay well within block gas; re-running drains the next batch and stops at 0. Returns the number of threads swept.

GetTombstoneCount

GetTombstoneCount returns how many soft-deleted threads in a channel are still awaiting hard-GC (read-only; lets ops/indexers decide when to call SweepTombstones).

Render

renderHome

renderHome produces the board home page. Format: parser.ts parseBoardHome() expects: - \[#name](:\_channel/name) 📢 (N threads)

renderChannel

renderChannel produces a channel's thread list. Format: parser.ts parseThreadList() expects: ### [Title](:channel/id) by g1addr... | N replies | block H

renderThread

renderThread produces a single thread with replies. Format: parser.ts parseThreadDetail() expects: # Title body --- *Posted by g1addr at block H* *(edited at block M)* ## Replies **g1addr...** (block H) *(edited)* reply body ---

parsePageQuery

parsePageQuery extracts the page number from a "?page=N" query string (also tolerates extra &-separated params). Returns 0 (= default/newest) on absence or parse error.

pageClamp

pageClamp keeps a page link within \[1, totalPages].

renderACL

renderACL produces the ACL response for a channel. Format: parser.ts parseACL() expects: read:role1,role2 write:role1,role2,role3 type:text

getChannel

getThreadCount

getLiveThreadCount

getLiveThreadCount returns the number of non-deleted threads in a channel. Unlike getThreadCount (monotonic ID counter), this decreases when threads are deleted, so deleted threads free up slots under MaxThreadsPerChan.

getLiveThreadIDs

addLiveThreadID

removeLiveThreadID

getLiveReplyCount

getLiveReplyIDs

addLiveReplyID

removeLiveReplyID

getThreadTomb

enqueueThreadTomb

getReplyCount

truncAddr

isValidRoles

isValidRoles validates a comma-separated role list contains only safe characters. Allowed: a-z, A-Z, 0-9, hyphen, comma. No spaces, no markdown chars, no null bytes.

sanitizeForRender

sanitizeForRender strips markdown-sensitive characters to prevent injection.

assertCallerIsOwner

assertCallerIsMember

assertCallerHasWriteAccess

assertCallerHasWriteAccess checks that the caller is a member AND has at least one role that matches the channel's WriteRoles.

hasRole

assertCallerIsAdminRole

assertCallerIsAdminRole checks that the caller is a member with the "admin" role. Used for moderation actions (RemoveThread, UnhideThread) so any admin can moderate, not just the single owner.

isValidChannelName

isValidChannelName validates that a channel name contains only lowercase alphanumeric characters and hyphens, and does not start with underscore.