fix(frontend): Lunc Dash WalletConnect pair on mobile never lists dex.cl8y.com #1308

New issue

Closed

opened 2026-09-21 07:33:58 +00:00 by PlasticDigits · 3 comments

PlasticDigits commented 2026-09-21 07:33:58 +00:00

Owner

Copy link

Summary

Same-device Lunc Dash WalletConnect on production https://dex.cl8y.com does not complete. After Connect Wallet → LuncDash on a phone, the Lunc Dash app opens but never shows a pairing prompt. The wallet’s WalletConnect settings list a working bridge.cl8y.com session and do not list dex.cl8y.com. Returning to the browser shows a QR code (desktop path). Mobile must pair on the same device without a second scanner.

This replaces leftover verify #1279. Device QA found a product defect; leftover-complete is no longer a check-only ticket.

Environment

• Network: columbus-5 production (dex.cl8y.com)
• Component: frontend Connect Wallet / WalletConnect pairing
• Wallet: Lunc Dash (installed app, WalletConnect settings)
• Reference that already lists a session: https://bridge.cl8y.com (CL8Y Bridge)
• Inbox: phone card Pair Lunc Dash on the DEX failed (required fail reason). The follow-up Approve or reject a Swap in Lunc Dash card stays blocked until pairing works.

Current codebase

Lunc Dash is a first-class Connect row and is WalletConnect-only (no extension install row). Same-device mobile pairing was already implemented for #519 / #554 and is treated as shipped in leftover #1279. Live device QA shows that path does not establish a session on dex.cl8y.com.

Piece	Location	Behavior today
Connect list	frontend-dapp/src/components/wallet/connectWalletOptions.ts	Always name: 'LuncDash', WalletName.LUNCDASH, WalletType.WALLETCONNECT. Leap absent.
Pairing hook	frontend-dapp/src/services/terraclassic/walletConnectPairingHook.ts installed from main.tsx	Mobile + valid wc: URI → hide Connect list, open React pairing sheet. Otherwise returns false and cosmes QRCodeModal paints the QR (desktop).
Mobile detect	frontend-dapp/src/utils/walletConnectPairing.ts isWalletConnectMobileClient	UA / iPad desktop-UA / coarse+≤1024 / viewport ≤767. Miss → QR.
Lunc Dash href	same file, buildLuncDashDeepLink	Builds luncdash://wallet_connect? + percent-encoding of the entire payload=<encoded wc:> string. Docs/skills describe luncdash://wallet_connect?payload=<encoded wc:> (a real payload query key). Unit tests currently lock the encoded-blob form.
Pairing sheet	frontend-dapp/src/components/wallet/WalletConnectPairingModal.tsx	Open {wallet}, Open wallet (wc:), Copy pairing link, Cancel. No long-press URI field.
Cosmes patch	frontend-dapp/patches/@goblinhunt+cosmes+0.0.71-ghunt.22.patch	Delegates to __CL8Y_WC_PAIRING_MODAL__. Must not auto-location.href from the async display_uri callback (WC-M3).
Session / sign	frontend-dapp/src/services/terraclassic/wallet.ts, terraWalletSignTxRaw.ts	LUNCDashController; 0-wallet recovery reads cosmes.wallet.luncdash.wcSession. Station / LuncDash WC stay on atomic broadcastTx.
Bridge reference (other repo)	CL8Y Bridge pairing sheet (live bridge.cl8y.com)	Same luncdash:// builder in-tree, but the live Bridge session already appears in Lunc Dash WalletConnect settings. Bridge sheet also exposes a read-only pairing URI for long-press copy. Use the live Bridge connect as the working reference, not a blind copy of its helper if it still double-encodes.

Playbooks: skills/AGENTS_FRONTEND_WALLETCONNECT_MOBILE.md (WC-M1–WC-M12), skills/AGENTS_OPS_LUNCDASH_VERIFY.md (L1279). Retail: docs/frontend.md § WalletConnect same-device mobile. Manual matrix: QA_TEMPLATE.md 1.5.

Why a new implementation is needed

Leftover #1279 assumed the shipped pairing path still worked and only needed a device check. The check failed:

1. Lunc Dash opens after choosing LuncDash, but does not connect (no pairing prompt / no new session).
2. WalletConnect settings in Lunc Dash show bridge.cl8y.com and do not show dex.cl8y.com.
3. After returning to the browser, the DEX shows a QR. Desktop QR is correct; mobile must not be QR-only (WC-M1, closed #519).

Until dex.cl8y.com appears as a WalletConnect session and the header shows terra1…, Swap approve/reject leftover cannot run. This is a pairing bug, not an ops-only leftover.

Constraints / guardrails

• Do not invent a second Lunc Dash URI scheme. Keep luncdash://wallet_connect?… / allowlist luncdash:.
• Do make payload a parseable query parameter (luncdash://wallet_connect?payload=<encoded wc:>) unless live Lunc Dash + Bridge prove a different working encoding. Fix tests that currently assert the encoded-blob form.
• Do not auto-window.location.href from the async WalletConnect callback (WC-M3). Open only from a tap (<a href> / button).
• Do not replace desktop QR (WC-M2).
• Do not add Leap, AppKit/Web3Modal, Legal ADR-036, or a DEX LCD-sim of Station/LuncDash WC post (ADR 0004 Stay).
• Do not remove in-app browser as a documented alternate path (WC-M7); it is not a substitute for Chrome → Open Lunc Dash.
• Do not reopen #519 / #554 / #566 / #658 as dump tickets; cite them. This issue owns the live pairing miss.
• Do not paste WalletConnect project secrets, mnemonics, session keys, or inbox tokens on this issue.
• Listing CW20s inside Lunc Dash’s registry remains #1260, not this ticket.

Recommended direction

1. Diff live dex.cl8y.com vs live bridge.cl8y.com Lunc Dash connect on the same phone: pairing UI (sheet vs QR), deep-link query shape, copy/wc: fallback, WalletConnect client metadata url/name (what the wallet lists), v1 bridge vs v2 relay.
2. Decode buildLuncDashDeepLink with URLSearchParams / Lunc Dash’s documented payload key. Align href with a URI that the wallet actually consumes; keep Copy pairing link as raw wc: (WC-M4).
3. Keep the mobile pairing sheet in the foreground after returning from the app (no QR takeover). If isWalletConnectMobileClient() is false on a real phone (desktop-site UA / wide viewport), tighten detection so coarse/touch phones still get the sheet (WC-M1) without breaking desktop QR.
4. Optional UX parity with Bridge: read-only pairing URI for long-press copy when clipboard is blocked — still allowlisted, still not auto-redirect.
5. Coolify frontend cut after merge so production matches main. Then re-run QA 1.5.1 / 1.5.1a / 1.5.1b and a small Swap approve or reject (1.5.6 / 1.5.7).

Acceptance criteria

• AC1. Phone browser on https://dex.cl8y.com (not the wallet in-app browser): Connect Wallet → LuncDash shows Open Lunc Dash / Open wallet / Copy pairing link / Cancel. No QR on that mobile path.
• AC2. Tapping Open Lunc Dash (user gesture) opens Lunc Dash with a pairing/approve prompt. After approve, the DEX header shows terra1….
• AC3. Lunc Dash WalletConnect settings list dex.cl8y.com (same class of entry as the existing bridge.cl8y.com session).
• AC4. Copy pairing link pastes a raw wc: URI that Lunc Dash can add manually if Open fails.
• AC5. Desktop (mouse, non-mobile UA): LuncDash still shows Scan via … + QR; scanning with Lunc Dash on a second device still connects (WC-M2).
• AC6. Cancel / Close / backdrop / Escape / header Cancel abort connect; header is not a stuck spinner (WC-M9). Pairing stays above Connect (WC-M8).
• AC7. After AC2, a small Swap approve or reject in Lunc Dash completes (success toast or explicit rejection, not a hang).
• AC8. Unsigned WC with no keplr-like injector: terms hint still names Lunc Dash or the DEX list, not Keplr-only (WC-M12). Leap still absent.

Test plan (happy + edge)

Path	How
Unit: payload query	buildLuncDashDeepLink → new URL(href).searchParams.get('payload') is a wc: URI (isWalletConnectPairingUri). Reject encoded-blob-only hrefs that have no payload key.
Unit: mobile vs desktop	isWalletConnectMobileClient still true for Android/iPhone UA, iPad desktop-UA + maxTouchPoints > 1, coarse + ≤1024. False for desktop mouse + wide viewport. Add a case that would have produced QR on a phone if detection is too strict.
Unit: hook	installWalletConnectPairingHook returns true on mobile + wc:; false on junk URI; false on desktop so QR remains.
Unit: modal	Pairing sheet href starts with luncdash://wallet_connect?payload=; Copy uses raw wc:; Cancel calls cancelConnection.
Unit: allowlist	javascript:, data:, random https:// still rejected (WC-M5).
Cosmes patch	Existing cosmesPatch127 / #519 assertions: hook delegate, no auto-redirect.
Child pre-check	make verify-issue-519 · make verify-issue-554 · VERIFY1279_SKIP_CHILDREN=1 make verify-issue-1279 (docs/pre-check only).
Device	Android Chrome (and iOS Safari if available): AC1–AC4, AC6. Repeat once after Coolify deploy. Desktop Chrome: AC5.
Follow-up sign	AC7 only after AC2 (do not treat Swap as the pairing test).
In-app alternate	Opening dex.cl8y.com inside Lunc Dash’s browser still connects (WC-M7); this must not be the only passing path.

Test plan (attack, hack, abuse)

Vector	Expect
Pairing href injection	Deep links only from allowlisted schemes (wc:, luncdash:, …). Malicious display_uri / details fields must not become javascript:, data:, or arbitrary https://.
Open redirect / intent smuggling	Do not pass through wallet android/ios templates that escape the allowlist. Galaxy intent: rules stay WC-M11; Lunc Dash stays luncdash:.
Clipboard	Copy writes only the pairing wc: URI, not session keys or mnemonics.
Session fixation / late connect	Cancel and timeout must ignore a late WalletConnect session (WC-M9). Do not persist cl8y_wallet_connection on dismiss without a real address.
Clickjacking / overlay	Pairing portal remains above Connect; Open/Copy are the tappable surface. Do not auto-navigate on overlay click.
Terms skip	Dismiss pairing without connect must not skip TermsGate (#517 / D8).
Metadata spoof	Client metadata url/name must be the DEX origin the user opened (dex.cl8y.com), not an attacker origin. Do not take metadata from query params.
WC bridge/relay	Do not document or paste project secrets. Changing relay/bridge is only to match a working Lunc Dash session; no custom attacker bridge.

Verification criteria

• Green: pairing unit tests + make verify-issue-519 + make verify-issue-554 + patch SHA check.
• Leftover-complete for this bug: AC1–AC3 on a real Lunc Dash install against production after Coolify (wallet settings show dex.cl8y.com; header terra1…). AC5 still passes on desktop. AC7 once.
• VERIFY1279_IID=1279 / VERIFY1279_LEFTOVER_COMPLETE=1 must still FAIL if those env flags remain — leftover-complete is never make. Close this issue on device AC, not on Vitest.
• Record anonymized device notes (OS/browser, pass/fail). No tokens, no inbox ids, no personal handles.

Out of scope

• Token listing inside Lunc Dash (#1260).
• Wallet-app LCD-sim gas rewrite (ADR 0004 Stay).
• Legal portal signer matrix (cl8y-ecosystem-legal).
• Replacing WalletConnect with a new library unless pairing cannot be fixed in the existing cosmes + hook path.

## Summary Same-device Lunc Dash WalletConnect on production `https://dex.cl8y.com` does not complete. After Connect Wallet → LuncDash on a phone, the Lunc Dash app opens but never shows a pairing prompt. The wallet’s WalletConnect settings list a working `bridge.cl8y.com` session and do **not** list `dex.cl8y.com`. Returning to the browser shows a **QR code** (desktop path). Mobile must pair on the same device without a second scanner. This replaces leftover verify [#1279](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/1279). Device QA found a product defect; leftover-complete is no longer a check-only ticket. ## Environment - Network: columbus-5 production (`dex.cl8y.com`) - Component: frontend Connect Wallet / WalletConnect pairing - Wallet: Lunc Dash (installed app, WalletConnect settings) - Reference that already lists a session: `https://bridge.cl8y.com` (CL8Y Bridge) - Inbox: phone card **Pair Lunc Dash on the DEX** failed (required fail reason). The follow-up **Approve or reject a Swap in Lunc Dash** card stays blocked until pairing works. ## Current codebase Lunc Dash is a first-class Connect row and is **WalletConnect-only** (no extension install row). Same-device mobile pairing was already implemented for [#519](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/519) / [#554](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/554) and is treated as shipped in leftover [#1279](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/1279). Live device QA shows that path does not establish a session on `dex.cl8y.com`. | Piece | Location | Behavior today | | --- | --- | --- | | Connect list | [`frontend-dapp/src/components/wallet/connectWalletOptions.ts`](frontend-dapp/src/components/wallet/connectWalletOptions.ts) | Always `name: 'LuncDash'`, `WalletName.LUNCDASH`, `WalletType.WALLETCONNECT`. Leap absent. | | Pairing hook | [`frontend-dapp/src/services/terraclassic/walletConnectPairingHook.ts`](frontend-dapp/src/services/terraclassic/walletConnectPairingHook.ts) installed from [`main.tsx`](frontend-dapp/src/main.tsx) | Mobile + valid `wc:` URI → hide Connect list, open React pairing sheet. Otherwise returns `false` and cosmes `QRCodeModal` paints the **QR** (desktop). | | Mobile detect | [`frontend-dapp/src/utils/walletConnectPairing.ts`](frontend-dapp/src/utils/walletConnectPairing.ts) `isWalletConnectMobileClient` | UA / iPad desktop-UA / coarse+≤1024 / viewport ≤767. Miss → QR. | | Lunc Dash href | same file, `buildLuncDashDeepLink` | Builds `luncdash://wallet_connect?` + **percent-encoding of the entire `payload=<encoded wc:>` string**. Docs/skills describe `luncdash://wallet_connect?payload=<encoded wc:>` (a real `payload` query key). Unit tests currently lock the encoded-blob form. | | Pairing sheet | [`frontend-dapp/src/components/wallet/WalletConnectPairingModal.tsx`](frontend-dapp/src/components/wallet/WalletConnectPairingModal.tsx) | **Open {wallet}**, **Open wallet** (`wc:`), **Copy pairing link**, **Cancel**. No long-press URI field. | | Cosmes patch | [`frontend-dapp/patches/@goblinhunt+cosmes+0.0.71-ghunt.22.patch`](frontend-dapp/patches/@goblinhunt+cosmes+0.0.71-ghunt.22.patch) | Delegates to `__CL8Y_WC_PAIRING_MODAL__`. Must **not** auto-`location.href` from the async `display_uri` callback (**WC-M3**). | | Session / sign | [`frontend-dapp/src/services/terraclassic/wallet.ts`](frontend-dapp/src/services/terraclassic/wallet.ts), [`terraWalletSignTxRaw.ts`](frontend-dapp/src/services/terraclassic/terraWalletSignTxRaw.ts) | `LUNCDashController`; 0-wallet recovery reads `cosmes.wallet.luncdash.wcSession`. Station / LuncDash WC stay on atomic `broadcastTx`. | | Bridge reference (other repo) | CL8Y Bridge pairing sheet (live `bridge.cl8y.com`) | Same `luncdash://` builder in-tree, but the **live** Bridge session already appears in Lunc Dash WalletConnect settings. Bridge sheet also exposes a read-only pairing URI for long-press copy. Use the **live** Bridge connect as the working reference, not a blind copy of its helper if it still double-encodes. | Playbooks: [`skills/AGENTS_FRONTEND_WALLETCONNECT_MOBILE.md`](skills/AGENTS_FRONTEND_WALLETCONNECT_MOBILE.md) (**WC-M1–WC-M12**), [`skills/AGENTS_OPS_LUNCDASH_VERIFY.md`](skills/AGENTS_OPS_LUNCDASH_VERIFY.md) (**L1279**). Retail: [`docs/frontend.md`](docs/frontend.md) § WalletConnect same-device mobile. Manual matrix: [`QA_TEMPLATE.md`](QA_TEMPLATE.md) **1.5**. ## Why a new implementation is needed Leftover [#1279](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/1279) assumed the shipped pairing path still worked and only needed a device check. The check failed: 1. Lunc Dash **opens** after choosing LuncDash, but **does not connect** (no pairing prompt / no new session). 2. WalletConnect settings in Lunc Dash show **`bridge.cl8y.com`** and do **not** show **`dex.cl8y.com`**. 3. After returning to the browser, the DEX shows a **QR**. Desktop QR is correct; mobile must not be QR-only (**WC-M1**, closed [#519](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/519)). Until `dex.cl8y.com` appears as a WalletConnect session and the header shows `terra1…`, Swap approve/reject leftover cannot run. This is a pairing bug, not an ops-only leftover. ## Constraints / guardrails - **Do not** invent a second Lunc Dash URI scheme. Keep `luncdash://wallet_connect?…` / allowlist `luncdash:`. - **Do** make `payload` a parseable query parameter (`luncdash://wallet_connect?payload=<encoded wc:>`) unless live Lunc Dash + Bridge prove a different working encoding. Fix tests that currently assert the encoded-blob form. - **Do not** auto-`window.location.href` from the async WalletConnect callback (**WC-M3**). Open only from a tap (`<a href>` / button). - **Do not** replace desktop QR (**WC-M2**). - **Do not** add Leap, AppKit/Web3Modal, Legal ADR-036, or a DEX LCD-sim of Station/LuncDash WC post (ADR 0004 Stay). - **Do not** remove in-app browser as a documented **alternate** path (**WC-M7**); it is not a substitute for Chrome → Open Lunc Dash. - **Do not** reopen [#519](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/519) / [#554](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/554) / [#566](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/566) / [#658](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/658) as dump tickets; cite them. This issue owns the live pairing miss. - **Do not** paste WalletConnect project secrets, mnemonics, session keys, or inbox tokens on this issue. - Listing CW20s *inside* Lunc Dash’s registry remains [#1260](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/1260), not this ticket. ## Recommended direction 1. Diff **live** `dex.cl8y.com` vs **live** `bridge.cl8y.com` Lunc Dash connect on the same phone: pairing UI (sheet vs QR), deep-link query shape, copy/`wc:` fallback, WalletConnect client metadata **url/name** (what the wallet lists), v1 bridge vs v2 relay. 2. Decode `buildLuncDashDeepLink` with `URLSearchParams` / Lunc Dash’s documented `payload` key. Align href with a URI that the wallet actually consumes; keep **Copy pairing link** as raw `wc:` (**WC-M4**). 3. Keep the mobile pairing sheet in the foreground after returning from the app (no QR takeover). If `isWalletConnectMobileClient()` is false on a real phone (desktop-site UA / wide viewport), tighten detection so coarse/touch phones still get the sheet (**WC-M1**) without breaking desktop QR. 4. Optional UX parity with Bridge: read-only pairing URI for long-press copy when clipboard is blocked — still allowlisted, still not auto-redirect. 5. Coolify frontend cut after merge so production matches `main`. Then re-run QA **1.5.1 / 1.5.1a / 1.5.1b** and a small Swap approve or reject (**1.5.6 / 1.5.7**). ## Acceptance criteria - [ ] **AC1.** Phone browser on `https://dex.cl8y.com` (not the wallet in-app browser): Connect Wallet → LuncDash shows **Open Lunc Dash** / **Open wallet** / **Copy pairing link** / **Cancel**. No QR on that mobile path. - [ ] **AC2.** Tapping **Open Lunc Dash** (user gesture) opens Lunc Dash with a pairing/approve prompt. After approve, the DEX header shows `terra1…`. - [ ] **AC3.** Lunc Dash WalletConnect settings list **`dex.cl8y.com`** (same class of entry as the existing `bridge.cl8y.com` session). - [ ] **AC4.** **Copy pairing link** pastes a raw `wc:` URI that Lunc Dash can add manually if Open fails. - [ ] **AC5.** Desktop (mouse, non-mobile UA): LuncDash still shows **Scan via …** + QR; scanning with Lunc Dash on a second device still connects (**WC-M2**). - [ ] **AC6.** Cancel / Close / backdrop / Escape / header Cancel abort connect; header is not a stuck spinner (**WC-M9**). Pairing stays above Connect (**WC-M8**). - [ ] **AC7.** After AC2, a small Swap approve **or** reject in Lunc Dash completes (success toast or explicit rejection, not a hang). - [ ] **AC8.** Unsigned WC with no keplr-like injector: terms hint still names Lunc Dash or the DEX list, not Keplr-only (**WC-M12**). Leap still absent. ## Test plan (happy + edge) | Path | How | | --- | --- | | Unit: `payload` query | `buildLuncDashDeepLink` → `new URL(href).searchParams.get('payload')` is a `wc:` URI (`isWalletConnectPairingUri`). Reject encoded-blob-only hrefs that have no `payload` key. | | Unit: mobile vs desktop | `isWalletConnectMobileClient` still true for Android/iPhone UA, iPad desktop-UA + `maxTouchPoints > 1`, coarse + ≤1024. False for desktop mouse + wide viewport. Add a case that would have produced QR on a phone if detection is too strict. | | Unit: hook | `installWalletConnectPairingHook` returns true on mobile + `wc:`; false on junk URI; false on desktop so QR remains. | | Unit: modal | Pairing sheet href starts with `luncdash://wallet_connect?payload=`; Copy uses raw `wc:`; Cancel calls `cancelConnection`. | | Unit: allowlist | `javascript:`, `data:`, random `https://` still rejected (**WC-M5**). | | Cosmes patch | Existing `cosmesPatch127` / #519 assertions: hook delegate, no auto-redirect. | | Child pre-check | `make verify-issue-519` · `make verify-issue-554` · `VERIFY1279_SKIP_CHILDREN=1 make verify-issue-1279` (docs/pre-check only). | | Device | Android Chrome (and iOS Safari if available): AC1–AC4, AC6. Repeat once after Coolify deploy. Desktop Chrome: AC5. | | Follow-up sign | AC7 only after AC2 (do not treat Swap as the pairing test). | | In-app alternate | Opening `dex.cl8y.com` inside Lunc Dash’s browser still connects (**WC-M7**); this must not be the only passing path. | ## Test plan (attack, hack, abuse) | Vector | Expect | | --- | --- | | Pairing href injection | Deep links only from allowlisted schemes (`wc:`, `luncdash:`, …). Malicious `display_uri` / details fields must not become `javascript:`, `data:`, or arbitrary `https://`. | | Open redirect / intent smuggling | Do not pass through wallet `android`/`ios` templates that escape the allowlist. Galaxy `intent:` rules stay **WC-M11**; Lunc Dash stays `luncdash:`. | | Clipboard | Copy writes only the pairing `wc:` URI, not session keys or mnemonics. | | Session fixation / late connect | Cancel and timeout must ignore a late WalletConnect session (**WC-M9**). Do not persist `cl8y_wallet_connection` on dismiss without a real address. | | Clickjacking / overlay | Pairing portal remains above Connect; Open/Copy are the tappable surface. Do not auto-navigate on overlay click. | | Terms skip | Dismiss pairing without connect must not skip TermsGate ([#517](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/517) / **D8**). | | Metadata spoof | Client metadata url/name must be the DEX origin the user opened (`dex.cl8y.com`), not an attacker origin. Do not take metadata from query params. | | WC bridge/relay | Do not document or paste project secrets. Changing relay/bridge is only to match a working Lunc Dash session; no custom attacker bridge. | ## Verification criteria - Green: pairing unit tests + `make verify-issue-519` + `make verify-issue-554` + patch SHA check. - **Leftover-complete for this bug:** AC1–AC3 on a real Lunc Dash install against **production** after Coolify (wallet settings show `dex.cl8y.com`; header `terra1…`). AC5 still passes on desktop. AC7 once. - `VERIFY1279_IID=1279` / `VERIFY1279_LEFTOVER_COMPLETE=1` must still **FAIL** if those env flags remain — leftover-complete is never make. Close **this** issue on device AC, not on Vitest. - Record anonymized device notes (OS/browser, pass/fail). No tokens, no inbox ids, no personal handles. ## Out of scope - Token listing inside Lunc Dash ([#1260](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/1260)). - Wallet-app LCD-sim gas rewrite (ADR 0004 Stay). - Legal portal signer matrix (`cl8y-ecosystem-legal`). - Replacing WalletConnect with a new library unless pairing cannot be fixed in the existing cosmes + hook path.

PlasticDigits referenced this issue 2026-09-21 07:34:12 +00:00

incident(frontend): verify Lunc Dash wallet path on DEX #1279

PlasticDigits added the

ready

ready

labels 2026-09-21 07:45:22 +00:00

PlasticDigits commented 2026-09-21 07:45:37 +00:00

Author

Owner

Copy link

cl8y-agent-control: queued implement job 8946da10-b5a8-4536-b3d3-d44072aa010e (not executed; no Hetzner VM).

cl8y-agent-control: queued `implement` job `8946da10-b5a8-4536-b3d3-d44072aa010e` (not executed; no Hetzner VM).

PlasticDigits removed the

ready

label 2026-09-21 07:45:44 +00:00

PlasticDigits referenced this issue from a commit 2026-09-21 07:50:55 +00:00

fix(frontend): Lunc Dash WalletConnect payload query for mobile pairing

PlasticDigits referenced this issue from a pull request that will close it, 2026-09-21 07:51:07 +00:00

fix(frontend): Lunc Dash WalletConnect pair on mobile never lists dex.cl8y.com #1310

PlasticDigits removed the

ready

label 2026-09-21 07:51:13 +00:00

PlasticDigits commented 2026-09-21 08:22:50 +00:00

Author

Owner

Copy link

Merge of !1310 is going in with the payload-query product fix (luncdash://wallet_connect?payload=<encoded wc:>). In-repo AC that this MR covers: AC1 sheet (WC-M1), AC4 copy wc:, AC5 desktop QR, AC6 cancel/stacking, AC8 terms hint. make verify-issue-1308 is pre-check only.

Device leftover after Coolify frontend cut (not closed by Vitest):

• AC2 Open Lunc Dash then DEX header terra1…
• AC3 Lunc Dash WalletConnect settings list dex.cl8y.com
• AC7 small Swap approve or reject after AC2

Fixes #1308 on !1310 will close this implement ticket. A leftover issue will be opened for Coolify + QA 1.5.1 / 1.5.1a / 1.5.1b + Swap. Do not reopen #1279.

Merge of !1310 is going in with the payload-query product fix (`luncdash://wallet_connect?payload=<encoded wc:>`). In-repo AC that this MR covers: AC1 sheet (WC-M1), AC4 copy `wc:`, AC5 desktop QR, AC6 cancel/stacking, AC8 terms hint. `make verify-issue-1308` is pre-check only. Device leftover after Coolify frontend cut (not closed by Vitest): - AC2 Open Lunc Dash then DEX header `terra1…` - AC3 Lunc Dash WalletConnect settings list `dex.cl8y.com` - AC7 small Swap approve or reject after AC2 `Fixes #1308` on !1310 will close this implement ticket. A leftover issue will be opened for Coolify + QA 1.5.1 / 1.5.1a / 1.5.1b + Swap. Do not reopen #1279.

PlasticDigits referenced this issue 2026-09-21 08:22:51 +00:00

chore(qa): verify-issue-1290 bundle for hub wrap labels #1306

PlasticDigits closed this issue 2026-09-21 08:24:43 +00:00

PlasticDigits referenced this issue 2026-09-21 08:30:00 +00:00

ops: post-merge leftover after PRs 1306/1309/1310 #1311

PlasticDigits referenced this issue 2026-09-21 08:30:11 +00:00

ops: post-merge leftover after PRs 1302-1304 #1305

PlasticDigits commented 2026-09-21 08:30:12 +00:00

Author

Owner

Copy link

!1310 merged; this implement ticket closed via Fixes #1308. In-repo AC1/AC4/AC5/AC6/AC8 + make verify-issue-1308 passed. Device leftover AC2/AC3/AC7 after Coolify is #1311. Do not reopen #1279.

!1310 merged; this implement ticket closed via `Fixes #1308`. In-repo AC1/AC4/AC5/AC6/AC8 + `make verify-issue-1308` passed. Device leftover AC2/AC3/AC7 after Coolify is [#1311](https://git.cl8y.com/code/cl8y-dex-terraclassic/issues/1311). Do not reopen #1279.

PlasticDigits referenced this issue from a commit 2026-09-21 14:05:08 +00:00

docs(adr): finish leftover-3 Q21 rewrite and bind AC3 (#1311)

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

renovate/tokio-util-0.x-lockfile

renovate/thiserror-2.x-lockfile

renovate/serde_json-1.x-lockfile

renovate/serde-monorepo

renovate/libc-0.x-lockfile

renovate/chrono-0.x-lockfile

cac-design-issue-1206

cac-design-issue-1317

cac-design-issue-1316

cac-design-issue-1311

cac-design-issue-1300

cac-design-issue-1306

cac-design-issue-1305

cac-design-issue-1302

cac-design-issue-1277

No results found.

Labels

Clear labels   

agent:fix_bugfix

  

agent:fix_conflicts

  

agent:fix_security

  

agent:gap_analysis

  

agent:implement

  

agent:implement

Queue implement gate

  

agent:implement

Queue implement gate

  

agent:open_issues

  

agent:ready

  

agent:research

  

agent:security_audit

  

agent:verify

  

architecture

Architecture

  

backend

API and services

  

blocker:hybrid

Blocks hybrid launch

  

blocker:launch

Blocks launch

  

blocker:limit-orders

Blocks limits launch

  

blocker:v2

Blocks v2

  

block:log_only

  

block:security

  

bug

  

ci

  

contracts

Smart contracts

  

correctness

  

deploy

  

dev

  

devops

  

docs

  

documentation

  

duplicate

  

e2e

  

enhancement

  

epic

Epic

  

feature

  

frontend

  

functional-completion

Functional

  

gas

  

good first issue

  

governance

  

help wanted

  

high-risk

  

hooks

  

hybrid

Hybrid swaps

  

indexer

Indexer

  

infra

CI/CD

  

infrastructure

  

integrators

  

invalid

  

launch-blocker

  

limit-orders

Limit orders

  

localnet

  

localterra

  

low priority

  

missing-implementation

Implementation

  

needs-design

Design decision required

  

ops

  

performance

  

priority

high

  

priority

medium

  

product

  

qa

  

QA

  

question

  

ready

Definition of Ready

  

ready

Definition of Ready

  

research

  

scripts

  

security

Security

  

security-hardening

Security hardening

  

smartcontracts

  

tech-debt

  

testing

Testing

  

ux

  

UX

  

v2

Pool-only swaps

  

verification

  

wontfix

No labels

agent:fix_bugfix

agent:fix_conflicts

agent:fix_security

agent:gap_analysis

agent:implement

agent:implement

agent:implement

agent:open_issues

agent:ready

agent:research

agent:security_audit

agent:verify

architecture

backend

blocker:hybrid

blocker:launch

blocker:limit-orders

blocker:v2

block:log_only

block:security

bug

ci

contracts

correctness

deploy

dev

devops

docs

documentation

duplicate

e2e

enhancement

epic

feature

frontend

functional-completion

gas

good first issue

governance

help wanted

high-risk

hooks

hybrid

indexer

infra

infrastructure

integrators

invalid

launch-blocker

limit-orders

localnet

localterra

low priority

missing-implementation

needs-design

ops

performance

priority

high

priority

medium

product

qa

QA

question

ready

ready

research

scripts

security

security-hardening

smartcontracts

tech-debt

testing

ux

UX

v2

verification

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

code/cl8y-dex-terraclassic#1308

No description provided.