v1 state

Subpath

Subpath is the subpath of a realm's gnotif identity: me := cur.Sub(gnotif.Subpath).

Trigger

Trigger is an alias, so a dapp imports only the registry.

Handle

Handle changes the triggers of the realm that opened it. Each method also needs that realm's gnotif identity as its caller, so the pointer alone is useless to any other realm.

triggers

// id → record.encode()

byTarget

// target → \[]string of its active ids, oldest first

handles

// target → its live \*Handle

lastID

idPrefix

idPrefix is the last element of the registry's path and a dash, such as "v1-": gnotifd takes an id only from the registry version it names.

Open

Open returns the handle that changes the triggers of the realm whose gnotif identity calls it. It panics while the realm holds a handle its namespace owner has not revoked. It also panics outside the owner's deploy of the realm and outside a call the owner signed and sent straight to the realm. r/sys/names says who the owner is.

Drop

Drop removes target's listed active triggers, ids separated by commas. Spaces around an id are ignored. Only target's namespace owner may call it, directly, with their own key. r/sys/names says who the owner is, and while it is not enabled nobody is. A call that lists an id more than once, or one that is not an active trigger of target, removes nothing. Drop leaves the realm's handle live: Revoke stops the realm from setting them again.

Revoke

Revoke ends target's handle: its methods panic from then on, and target's triggers stay. The realm can Open a new handle. Only target's namespace owner may call it, directly, with their own key. r/sys/names says who the owner is, and while it is not enabled nobody is.

Active

Active lists target's active trigger ids, comma-separated, oldest first.

activeOf

find

ceiling: decodes up to maxPerTarget records per lookup; index target and name to id before raising maxPerTarget.

targetOf

targetOf returns the realm whose gnotif identity me is, and panics for any other caller.

mustOwnerEntered

mustOwnerEntered panics unless target's namespace owner signed the transaction with its own key and called target's realm directly.

mustOwn

mustOwn panics unless target's namespace owner called straight into the registry with its own key.

store

store writes r under id and emits TriggerDeclared.

removeIDs

removeIDs removes the listed active ids of target and emits TriggerRemoved for each.

recordFields

record

record is a trigger, its target and its name as the registry stores them: one string per trigger, because a tree holds a string inline and a struct is one more stored object.

decodeRecord

decodeRecord reads a string made by encode and panics on any other.

packFields

packFields writes each field as its byte length, a colon and the field, so a field may hold colons and digits.

unpackFields

unpackFields reads exactly n fields made by packFields and panics on any other string.

cutField

pageSize

Render

Render serves "" (the first page), "page/N", "trigger/\<id>" and "target/\<path>".

renderPage

renderPage lists the triggers newest first, pageSize to a page.

renderTarget

renderTarget lists a realm's triggers, newest first. The cap on them keeps the page to one screen, so it is not paged.

writeLine

renderTrigger

selfPath

selfPath is this realm's path on gnoweb, read at package init: Render is not crossing, so reading it there would give the caller's path.

targetPrefix

maxTarget

maxName

maxFilterPairs

maxBody

maxLink

maxPerTarget

validate

namespaceOf

namespaceOf returns the namespace a valid target lives in, and panics on a target that is not a valid realm path.

sized

validTarget

validTarget accepts a realm path whose segments each match the chain's Re\_name, so a target names a path where a realm can exist.

isLowerAlnum

validName

validName accepts identifier bytes only, so a name cannot carry spaces or symbols that imitate the verified mark in rendered output.

validFilter

validLink

validLink accepts only a path, so a click always stays on the dapp's origin. "//host" starts with a slash yet resolves to another host. A URL parser drops tab, LF and CR and reads a backslash as a slash, so "/\\t/host" and "/\\host" would do the same; control bytes and backslashes are refused.