Package Info
Namespace: samcrew
Path: /r/samcrew/memba_appstore_v1
Type: realm
Gno: 0.9
Creator: g1x7k4…weuxu0
Block: 94096
Code stats
Files: 5
.gno files: 4
Tests: 0
Funcs: 34 (18 exported)
Types: 1
Consts: 5
Imports: 7
Crossing: 12

Metadata

published
public
Documented

Package Index

memba_appstore_v1 source realm

Package memba\_appstore\_v1 is a curated App Store for gno.land dApps: publishers pay a flat listing fee to register ...

Package memba_appstore_v1 is a curated App Store for gno.land dApps: publishers pay a flat listing fee to register an app; a curator flips it live.

MONEY PATH (the only one): RegisterApp collects a flat `registrationFee` in ugnot and forwards 100% to the treasury in the SAME call — nothing is ever custodied. The safety contract mirrors memba_token_otc_v1 + the O-13 lesson:

IsUserCall() guard BEFORE reading OriginSend — an ephemeral `maketx run` realm can never attach unrecoverable coins (the guard agent_registry missed).
exact-coin via unsafe.OriginSend() (the coins on THIS call, not the wallet balance) — closes the overpay-trap and the wallet-balance bypass.
treasury-misconfig is fail-closed: an unset treasury panics (→ tx reverts → coins refunded), never silent custody.
CEI: state is written before the banker moves funds.
NewBanker(RealmSend, cur) sends the fee from the realm's own address to the treasury — no custody, no escrow (which is why no escrow is needed to be safe).

TREASURY: stored LOCALLY (admin-settable, 2-step handoff, defaults to the samcrew multisig) rather than read from memba_market_config — this keeps the realm self-contained so the whole money path is unit-tested locally. Keep it in sync with memba_market_config.GetTreasury(); a future version may read the fee spine directly (which makes the realm non-locally-testable — a deliberate later trade-off).

 1const (
 2	// DefaultRegistrationFee is the launch listing fee: 1 GNOT (1_000_000 ugnot).
 3	// The DAO/admin can change it via SetRegistrationFee (bounded by MaxRegistrationFee).
 4	DefaultRegistrationFee = int64(1_000_000)
 5	// MaxRegistrationFee caps a fat-finger / compromised-proposal fee at 100 GNOT.
 6	MaxRegistrationFee = int64(100_000_000)
 7
 8	MaxNameLen    = 80
 9	MaxTaglineLen = 140
10	MaxDescrLen   = 2000
11	MaxURLLen     = 400
12	MaxPkgPathLen = 200
13	MaxCIDLen     = 100
14	// FlagHideThreshold auto-hides a listing from the live list once this many
15	// distinct addresses have flagged it (a curator can DelistApp / restore).
16	FlagHideThreshold = 5
17)

source

1const (
2	StatusPending  = "pending"
3	StatusLive     = "live"
4	StatusDelisted = "delisted"
5)

source

StatusPending / StatusLive / StatusDelisted are the listing lifecycle states.

1const (
2	DefaultPageSize = 20  // default JSON window
3	MaxPageLimit    = 100 // hard cap on any JSON read window (read-DoS guard)
4)

source

1const AdminAddress = "g10kw7e55e9wc8j8v6904ck29dqwr9fm9u280juh"

source

AdminAddress is the samcrew-core 2-of-2 multisig (same as the fee spine's admin/ treasury). It is the initial owner AND the initial treasury.

1const RenderMaxRows = 100

source

RenderMaxRows bounds the Render() output so a large catalog can never make the realm render-DoS (mirrors the feed's live-only bounded render).

1func AcceptOwnership(cur realm)

source

AcceptOwnership completes the handoff. Only the staged pendingOwner may call it.

1func AddCurator(cur realm, addr address)

source

AddCurator grants the curate role (approve pending listings). Owner only.

1func AppCount() int

source

AppCount returns the total number of registered listings (any status).

1func ApproveApp(cur realm, pkgPath string)

source

ApproveApp flips a pending listing live. Curator-only.

1func DelistApp(cur realm, pkgPath string)

source

DelistApp removes a listing from public view. The publisher or a curator may do it.

1func FlagApp(cur realm, pkgPath string)

source

FlagApp lets any user flag a LIVE listing once. At FlagHideThreshold distinct flags the listing stops appearing live; a curator then DelistApp's it or leaves it for review (a delisted app can be brought back with RestoreApp).

1func GetListingJSON(pkgPath string) string

source

GetListingJSON returns a single listing (any status) with its description, or the JSON literal `null` if the package path is not registered.

1func GetRegistrationFee() int64

source

GetRegistrationFee returns the current flat listing fee in ugnot.

1func GetStatsJSON() string

source

GetStatsJSON returns a small stats object for a status header.

1func ListLiveJSON(offset, limit int) string

source

ListLiveJSON returns a bounded JSON array of the visible (live, un-hidden) listings: skip `offset`, take up to clamped `limit`. Iteration stops as soon as the window is filled, so the scan is bounded by offset+limit regardless of catalog size.

1func Pause(cur realm, state bool)

source

Pause is the kill switch: while paused, RegisterApp aborts (reads stay available). Owner only.

1func RegisterApp(
2	cur realm,
3	pkgPath, name, tagline, descr, category, iconCID, appURL string,
4) uint64

source

RegisterApp lists a new app. The caller pays EXACTLY registrationFee ugnot with the call; the whole fee is forwarded to the treasury (no custody). The listing starts `pending` and is not shown live until a curator approves it.

1func RemoveCurator(cur realm, addr address)

source

RemoveCurator revokes the curate role. Owner only.

1func Render(path string) string

source

Render shows the live catalog (bounded) — a read-only trust surface for gnoweb. The frontend reads structured data via the getters, not this markdown.

1func RestoreApp(cur realm, pkgPath string)

source

RestoreApp brings a delisted app back to `pending` (re-curation required before it shows live again). Curator-only — this is the reverse of DelistApp, so a mistaken or contested delist is recoverable.

1func SetRegistrationFee(cur realm, fee int64)

source

SetRegistrationFee sets the flat listing fee in ugnot (0..MaxRegistrationFee). Zero is allowed (a fee waiver). Owner only.

1func SetTreasury(cur realm, addr address)

source

SetTreasury repoints the fee recipient. Must be non-empty (an empty treasury would fail-close RegisterApp). Owner only. Keep this in sync with memba_market_config.GetTreasury().

1func TransferOwnership(cur realm, newOwner address)

source

TransferOwnership stages a new owner; it takes effect only after AcceptOwnership is called BY that address (2-step, so a typo can't brick admin).

 1type Listing struct {
 2	Id        uint64
 3	PkgPath   string
 4	Name      string
 5	Tagline   string
 6	Descr     string
 7	Category  string
 8	IconCID   string
 9	AppURL    string
10	Publisher address
11	Status    string
12	FlagCount int
13	CreatedAt int64
14}

source

Listing is one app. PkgPath (the realm/package path) is the unique key.

chain stdlib
chain/banker stdlib
chain/runtime stdlib
chain/runtime/unsafe stdlib
gno.land/p/nt/ufmt/v0 package
gno.land/p/samcrew/avl package
strings stdlib

memba_appstore_v1 source realm

Overview

Constants 5

const DefaultRegistrationFee, MaxRegistrationFee, MaxNameLen, MaxTaglineLen, MaxDescrLen, MaxURLLen, MaxPkgPathLen, MaxCIDLen, FlagHideThreshold

const StatusPending, StatusLive, StatusDelisted

const DefaultPageSize, MaxPageLimit

const AdminAddress

const RenderMaxRows

Functions 18

func AcceptOwnership

func AddCurator

func AppCount

func ApproveApp

func DelistApp

func FlagApp

func GetListingJSON

func GetRegistrationFee

func GetStatsJSON

func ListLiveJSON

func Pause

func RegisterApp

func RemoveCurator

func Render

func RestoreApp

func SetRegistrationFee

func SetTreasury

func TransferOwnership

Types 1

type Listing

Imports 7

Source Files 5