v1 state

maxTextLen

ringSize

cooldownBlocks

Message

Message is one line in the room. Every field is set by the contract from the transaction itself EXCEPT Text, which is the only caller-supplied value in this realm — so Text is the only thing any reader has to treat as hostile. Author cannot be forged: it is read from the call, never from an argument.

messages

// len is capped at ringSize

next

// write cursor; wraps once full

seen

// total ever posted, including those overwritten

lastPost

Post

Post appends one message and returns its ID. It is a crossing function because it reads the caller's identity, and it requires an EOA: cur.Previous().IsUserCall(). A realm posting on a user's behalf would make Author meaningless — the room would show the realm's address for every line and there would be no way to tell who said what. There is no reason for a contract to speak here.

rejectAttachedCoin

rejectAttachedCoin panics if the caller attached native coin. This realm has no use for any, and — unlike every other realm in SPLASH — no way whatsoever to give it back. See the note in the package comment. Inert on a non-user call, for the reason r/splash/exchange's Buy comment gives: unsafe.OriginSend() reads the envelope attached at the chain root, shared by every realm in the call chain, so reading it is only sound when the immediate caller is an EOA. Post refuses non-EOA callers on the very next line anyway, so nothing is let through by this early return.

checkText

checkText is the whole input policy, in one place so there is one answer to "what is allowed". Control characters are rejected rather than stripped, deliberately: a silent strip means the sender sees something different from the room, and a newline inside a markdown table cell would break every row below it in Render. Better to refuse and say why.

Count

Count is how many messages the ring currently holds, at most RingSize.

Seen

Seen is every message ever posted, including those the ring has overwritten. The gap between this and Count is exactly what a reader must go to the event log for.

RingSize

RingSize is the bound, exported so a front end can say "last 64" without hardcoding a number that might change.

MaxTextLen

MaxTextLen lets a front end enforce the same cap the contract will, so a too-long message is refused in the browser instead of costing gas to fail.

CooldownBlocks

CooldownBlocks lets a front end say how long the wait is instead of surprising someone with a panic.

NextAllowedHeight

NextAllowedHeight is the first block at which addr may post again, or 0 if addr has never posted. A front end can disable its button until then rather than letting someone pay gas to be refused.

Recent

Recent returns up to \`limit\` messages, MOST RECENT FIRST. limit is clamped to what the ring holds, so no caller can ask for an unbounded amount of work.

cell

short

Render