@burnt-labs/abstraxion 1.0.0-alpha.77 → 1.0.0-alpha.78

package/.turbo/turbo-build.log

@@ -1,19 +1,19 @@
 
-> @burnt-labs/abstraxion@1.0.0-alpha.77 build /home/runner/work/xion.js/xion.js/packages/abstraxion
+> @burnt-labs/abstraxion@1.0.0-alpha.78 build /home/runner/work/xion.js/xion.js/packages/abstraxion
 > tsup
 
-CLI Building entry: src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v6.7.0
-CLI Using tsup config: /home/runner/work/xion.js/xion.js/packages/abstraxion/tsup.config.ts
-CLI Target: esnext
-CLI Cleaning output folder
-ESM Build start
-CJS Build start
-CJS dist/index.js 79.85 KB
-CJS ⚡️ Build success in 320ms
-ESM dist/index.mjs 78.41 KB
-ESM ⚡️ Build success in 321ms
-DTS Build start
-DTS ⚡️ Build success in 2165ms
-DTS dist/index.d.ts 42.25 KB
+CLI Building entry: src/index.ts
+CLI Using tsconfig: tsconfig.json
+CLI tsup v6.7.0
+CLI Using tsup config: /home/runner/work/xion.js/xion.js/packages/abstraxion/tsup.config.ts
+CLI Target: esnext
+CLI Cleaning output folder
+ESM Build start
+CJS Build start
+CJS dist/index.js 85.87 KB
+CJS ⚡️ Build success in 340ms
+ESM dist/index.mjs 84.43 KB
+ESM ⚡️ Build success in 340ms
+DTS Build start
+DTS ⚡️ Build success in 2672ms
+DTS dist/index.d.ts 36.27 KB

package/CHANGELOG.md

@@ -1,5 +1,76 @@
 # @burnt-labs/abstraxion
 
+## 1.0.0-alpha.78
+
+### Minor Changes
+
+- [#355](https://github.com/burnt-labs/xion.js/pull/355) [`e466751`](https://github.com/burnt-labs/xion.js/commit/e46675174d71aabd6ff24cc59016713938168ea2) Thanks [@ertemann](https://github.com/ertemann)! - Adopt `@burnt-labs/xion-types` as the source of truth for protobuf and contract types, consolidate the popup/redirect/iframe signing clients into a single `RequireSigningClient`, expose the manage-authenticators flow through the SDK, and tighten the SDK ↔ Dashboard message contract.
+
+  ## Breaking changes (`@burnt-labs/abstraxion-core`)
+  - **`IframeMessageType.ADD_AUTHENTICATORS`** and the `DashboardMessageType.ADD_AUTHENTICATORS_*` enum values have been **renamed** to `MANAGE_AUTHENTICATORS` / `MANAGE_AUTHENTICATORS_*` with no backward-compat aliases. These enums are the wire contract between the SDK and the Abstraxion Dashboard; the dashboard bundle on testnet/mainnet must be redeployed before this SDK version is published. The contract probe in `packages/abstraxion/tests/integration/message-contract.integration.test.ts` is the canonical pre-release gate.
+  - **`PopupSigningClient`, `RedirectSigningClient`, and `IframeSigningClient` have been removed** and replaced by a single `RequireSigningClient` that handles all three transports behind one interface, including proper transaction simulation. Consumers that imported the per-mode clients directly must switch to `RequireSigningClient`.
+  - **Protobuf types are no longer vendored.** All manually generated/kept protobuf and contract types have been removed in favor of `@burnt-labs/xion-types`. Consumers importing protobuf message types from `abstraxion-core` internals must import from `@burnt-labs/xion-types` instead.
+
+  ## Migration to `@burnt-labs/xion-types`
+  - `@burnt-labs/xion-types` is pinned to `29.0.0-rc1` across all packages (pnpm override + per-package `dependencies`).
+  - `@burnt-labs/signers`: imports `AbstractAccount` and `MsgRegisterAccount` from `xion-types` subpaths; `uint64FromProto` widened to accept `Long | bigint` for cross-boundary compat.
+  - `@burnt-labs/account-management`: `GrantConfigByTypeUrl` now extends `GrantConfig` from `xion-types`; the local `Any` interface has been removed and `TreasuryAny` from `xion-types` is used instead. `Params` is re-exported as `TreasuryParamsV2` for forward-compat with the upcoming chain upgrade.
+  - `@burnt-labs/abstraxion-core`: adds a `ChainGrant` interface and uses `import type` for authz types from `xion-types`.
+
+  ## New public API — Manage Authenticators flow (`@burnt-labs/abstraxion`)
+  - **`useManageAuthenticators()`** — new hook that opens the dashboard manage-authenticators flow (add or remove) in popup, iframe (embedded), and redirect modes. Returns `{ manageAuthenticators, isSupported, manageAuthResult, clearManageAuthResult }`.
+  - **`ManageAuthResult`** — exported type for the redirect-mode result (`{ success: true } | { success: false; error: string }`).
+  - **`UseManageAuthenticatorsReturn`** — type export for the hook's return shape.
+
+  ## SDK internals (`@burnt-labs/abstraxion-core`)
+  - `PopupController.promptManageAuthenticators(signerAddress)` — opens a popup to the dashboard `manage-authenticators` view; resolves on `MANAGE_AUTHENTICATORS_SUCCESS`, rejects on cancel/error. Timeout: 10 min.
+  - `IframeController.promptManageAuthenticators(signerAddress)` — sends `MANAGE_AUTHENTICATORS` via `MessageChannelManager` to the embedded iframe; resolves when the user completes the flow.
+  - `RedirectController.promptManageAuthenticators(signerAddress)` — navigates to the dashboard manage-auth page; result available via `manageAuthResult` store after return.
+  - `RedirectController.manageAuthResult` — new `ResultStore<ManageAuthResult>` (parallel to `signResult`). Subscribe, snapshot, and clear follow the same `useSyncExternalStore`-compatible pattern.
+  - `waitForPopupMessage<T>` — shared private helper in `PopupController` that eliminates duplicated popup-message-waiting boilerplate across sign and manage-auth flows.
+  - `DashboardMessageType` — three new enum values: `MANAGE_AUTHENTICATORS_SUCCESS`, `MANAGE_AUTHENTICATORS_REJECTED`, `MANAGE_AUTHENTICATORS_ERROR`.
+
+  ## Direct grant decoding pipeline (`@burnt-labs/abstraxion-core`)
+  - `fetchChainGrantsDecoded()` decodes chain grants directly from protobuf, eliminating the REST intermediate step that caused multiple session-invalidation bugs (#290, #336).
+  - `compareChainGrantsToTreasuryGrants` now returns a typed `GrantComparisonResult` with reasons (`grant_missing`, `grant_mismatch`, `decode_error`); `decode_error` is non-fatal — session is preserved and a warning is logged.
+  - Unknown limit/filter type URLs preserve raw bytes and fall back to byte-level comparison instead of returning `false`.
+  - `decodeAuthorization` is wrapped in try/catch — corrupted bytes return `Unsupported` instead of throwing, preventing malformed treasury data from crashing session restore.
+
+  ## TX payload utilities (`@burnt-labs/signers`)
+  - **`validateTxPayload(payload, context)`** — pre-flight validation for transaction payloads before encoding/transport; logs issues without throwing so dev mistakes surface early.
+  - **`normalizeMessages(messages)`** — dashboard-side normalization that converts post-JSON-transport CosmWasm `msg` fields from plain objects back to `Uint8Array` for protobuf encoding.
+  - **`TxTransportPayload`** — shared type for the wire format used by popup, redirect, and iframe signing flows.
+  - **`getTreasuryParamsMetadata(params)`** — backward-compat helper that returns `metadata` with fallback to `display_url` for pre-upgrade indexer responses.
+  - Coins are sorted in grant encoding for deterministic comparison.
+  - `NilPubKey` protobuf encoding fixed.
+  - `AAClient` upgraded from `Tendermint37Client` to `Comet38Client` for consistency with `GranteeSignerClient`/`rpcClient` and proper CometBFT 0.38+ support.
+  - `MsgInstantiateContract2` validation fixed.
+
+  ## DaoDAO indexer typing (`@burnt-labs/signers`)
+  - Generated typed API paths from the DaoDAO indexer OpenAPI spec.
+  - Manually maintained response types with runtime type guards.
+  - `xion-types` compatibility test for bigint boundary validation.
+  - New scripts: `generate:daodao-indexer-types`, `generate:daodao-indexer-types:local`.
+
+  ## Treasury strategy improvements (`@burnt-labs/account-management`)
+  - `CompositeTreasuryStrategy` gains a racing mode (`Promise.any()` parallel execution) that resolves on first success, eliminating waits for slow DAODAO indexer timeouts. Constructor signature changed to `(strategies[], options)`.
+  - DAODAO indexer treasury strategy is end-to-end typed against the generated indexer schema.
+
+  ## Refactors
+  - `resolveAuthAppUrl` and `buildDashboardUrl` extracted to `controllers/utils.ts`; used by both `PopupController` and `RedirectController`, removing duplicated `fetchConfig` call sites.
+  - `ResultStore<T>` in `RedirectController` replaces the bespoke `signResult_` / `signResultSubscribers_` pattern, making both sign and manage-auth results consistent.
+
+  ## Constants (`@burnt-labs/constants`)
+  - Mainnet dashboard / iframe URL changed from `https://settings.mainnet.burnt.com` to `https://settings.burnt.com`.
+
+### Patch Changes
+
+- Updated dependencies [[`e466751`](https://github.com/burnt-labs/xion.js/commit/e46675174d71aabd6ff24cc59016713938168ea2)]:
+  - @burnt-labs/abstraxion-core@1.0.0-alpha.69
+  - @burnt-labs/signers@1.0.0-alpha.8
+  - @burnt-labs/account-management@1.0.0-alpha.10
+  - @burnt-labs/constants@0.1.0-alpha.24
+
 ## 1.0.0-alpha.77
 
 ### Minor Changes