market state

Denom

Denom is the only asset this realm accepts.

MaxFeeBps

MaxFeeBps is the hard protocol-fee cap: 1000 bps = 10%.

StatusActive

Listing status values.

StatusSold

Listing status values.

StatusCancelled

Listing status values.

MaxTitleLen

Input bounds.

MaxDescLen

Input bounds.

MinPrice

Input bounds.

listing

admin

// may set fee, fee recipient, stage successor

pendingAdmin

// staged by TransferAdmin, completes via AcceptAdmin

feeRecipient

// may withdraw fees and sweep surplus

feeBps

// fee snapshotted into NEW listings

self

// this realm's address, captured at deploy

nextID

listings

// padID(id) -> \*listing

ledger

init.17

CreateListing

CreateListing publishes an immutable listing and returns its id. No coins are accepted (the storage deposit the caller pays is the anti-spam). The current protocol fee is snapshotted into the listing and must not exceed maxFeeBps, the ceiling the seller signed for; pass MaxFeeBps to accept any legal fee. Sellers may be EOAs or realms.

Buy

Buy purchases an active listing. The buyer must be a direct EOA caller and attach EXACTLY the listed price in ugnot — any mismatch (including a price the seller changed by cancel-and-relist) aborts and the coins revert with the transaction. Settlement is atomic: the seller's proceeds (price minus the snapshotted fee) become claimable, the fee accrues to the pot, and the buyer is recorded. Terminal.

CancelListing

CancelListing withdraws an active listing. Only the seller may cancel; no funds are involved. Terminal.

Claim

Claim sends amount ugnot of the caller's claimable proceeds back to the caller.

ClaimAll

ClaimAll sends the caller's entire claimable proceeds back to the caller. Fails if there is nothing to claim.

WithdrawFees

WithdrawFees sends the accrued fee pot to the fee recipient. Only the fee recipient may call it.

SweepDenom

SweepDenom sends the surplus of a single denomination to the fee recipient. For ugnot only the excess over Liabilities() moves; other denoms move wholly. Only the fee recipient may call it.

SetFeeBps

SetFeeBps sets the protocol fee snapshotted into FUTURE listings. Existing listings keep the fee they were created under. Admin only; bounded by \[0, MaxFeeBps].

SetFeeRecipient

SetFeeRecipient re-points the fee/surplus role, including the pot accrued so far. Admin only; zero address rejected.

TransferAdmin

TransferAdmin STAGES a successor admin; the handoff completes only when that address calls AcceptAdmin (2-step, so a typo cannot brick administration — pattern adopted from memba\_appstore\_v2). Admin only; zero address rejected. Re-staging overwrites a previous stage.

AcceptAdmin

AcceptAdmin completes a staged admin handoff. Only the staged address may call it.

ListingInfo

ListingInfo returns a listing's fields by value: seller, title, price, snapshotted fee bps, status, and buyer (zero unless sold).

Description

Description returns a listing's raw description text.

Quote

Quote returns what a buyer pays and what the seller would receive for a listing, at its SNAPSHOTTED fee — the same arithmetic Buy performs (pattern from nsmarket/v4: a fee discovered after signing is a fee the seller was not told about).

Admin

PendingAdmin

FeeRecipient

FeeBps

FeeBps returns the fee that will be snapshotted into newly created listings (existing listings keep their own snapshot).

NumListings

NumListings returns how many listings have ever been created.

BalanceOf

BalanceOf returns addr's claimable proceeds.

UsersTotal

UsersTotal returns the sum of all claimable proceeds (the U term).

FeesAccrued

FeesAccrued returns the fee pot (the F term).

Liabilities

Liabilities returns everything this realm owes: UsersTotal + FeesAccrued (listings hold no value by construction).

Held

Held returns the ugnot actually held at the realm address (H).

Surplus

Surplus returns Held() - Liabilities() (the S term).

Address

Render

Render shows the market at "" and a listing detail at "\<id>". Titles are charset-restricted; descriptions pass through the ecosystem sanitizer.

renderListing

assertNoSend

assertNoSend refuses coins on non-payable entrypoints: an accidental -send would otherwise strand at the realm as sweep-only surplus (pattern from nsmarket/v4). Buy is the only payable function. NOTE: this reads the ORIGIN envelope — for EOA callers that is exactly "coins that landed here"; for realm callers it fails closed whenever the origin tx carried any -send (see the header caveat).

assertAdmin

mustGetListing

assertValidTitle

assertValidTitle bounds length and restricts the charset so titles are list-safe in Render without escaping.

padID

padID renders an id as a fixed-width key so avl iteration order is numeric order.

itoa