#506 - feat: /ust1 window UI — route, nav, CW20 Send client, UST1/vFDUSD metadata - code/cl8y-dex-terraclassic

PlasticDigits commented

2026-08-08 11:26:04 +00:00

(Migrated from gitlab.com)

Summary

Ship a dedicated /ust1 page on https://dex.cl8y.com for always-on oracle vFDUSD ↔ UST1 mint/redeem against the live mainnet window — route + nav distinct from the soft-launch faucet /mint, a ust1Window client (CW20 Send + effective_swap quotes/gates), and UST1/vFDUSD token metadata/logos.

Parent track: #502 (Phase 4).
Upstream complete: ust1-window#19.

Published mainnet addresses (Phase 2)

Role	Address
vFDUSD	`terra1mnl9azefrqpmu888ar2u6zrcwr80hxlt3avf4300r576cw5ar7esvxsvj3`
UST1	`terra1f0eqgy9w7e5e7up97vjudqwx38tesf8ylx75x2lv3nwm0clry0pqmgfy72`
ust1-oracle	`terra1fmht0t6svq3n24zx03nkfja0m40zhfyyxkdcvlrkl6u7gfe6aagq4gch8n` (code 11568)
ust1-window	`terra1zxwpzpzpleatqn39r00grau4yt29sld8pw78s7ktvjafnj5nsaxq0h3rh2` (code 11566)

Approved window params: fee_bps=100, per-tx 1000 UST1, rolling 24h 10000 UST1.

Current codebase

Area	Status
Routes	`frontend-dapp/src/App.tsx` — `/mint` → `MintPage`; no `/ust1`
Nav	`navItems.ts`: `MINT_NAV_ITEM` label Mint, shown in More only when `VITE_FAUCET_ADDRESS` set (`Layout.tsx` `includeMint`)
Faucet	Soft-launch only (`SOFT_LAUNCH_MINTABLE_TOKENS` / gemstones) — must not list UST1
Window client	None — no `ust1Window.ts`, no `effective_swap` query helper
Token registry	`tokenRegistry.ts` / `tokenlist/` — no UST1 or vFDUSD entries or logos
On-chain window	Live; UI still missing

Integrators today must hand-craft CW20 Send + {"effective_swap":{}}. Retail users have no first-class mint/redeem surface on the DEX.

Why this is needed

Phase 2 deployed the oracle window and tokens, but without /ust1 the economic base asset is operator-only. Soft-launch /mint is a faucet and must stay that way — overloading it would confuse users and risk mixing faucet mintables with oracle issuance. A dedicated route, execution-aligned quotes from effective_swap, and clear UST1/vFDUSD metadata are required before production smoke and Phase 5 monitoring can treat the UI as the user path.

Constraints / guardrails

Do not reuse /mint for UST1; add /ust1 with nav label that cannot be confused with faucet Mint.
Mint/redeem must call ust1-window via CW20 Send — not the AMM router.
Quotes and submit gates must come from on-chain effective_swap / config (fee, limits, pause, oracle age/staleness) — never invent rates client-side.
Block submit when paused, oracle stale, or amount exceeds per-tx / remaining 24h capacity.
Allowlist tokens: deposit = vFDUSD only; withdraw = UST1 only.
Coolify VITE_* must point at columbus-5 addresses above — never LocalTerra defaults on prod.
Follow design-system + retail copy skills; keep cognitive load low (deposit/withdraw tabs, one quote surface).
Do not list UST1/vFDUSD in soft-launch faucet token set.
Logo hosts must stay within tokenLogoAllowlist / reviewed indexer logo_url.

Relevant files

Frontend (new + wire)

frontend-dapp/src/App.tsx — register /ust1
frontend-dapp/src/components/common/navItems.ts, Layout.tsx
New: frontend-dapp/src/pages/Ust1Page.tsx (or equivalent)
New: frontend-dapp/src/services/terraclassic/ust1Window.ts
frontend-dapp/src/utils/constants.ts — VITE_UST1_* / window / token envs
frontend-dapp/src/utils/tokenRegistry.ts, tokenLogoAllowlist.ts
tokenlist/tokenlist.json, tokenlist/images/

Docs / deploy

Coolify / docker/frontend env examples
docs/frontend.md routes table
docs/runbooks/mainnet-soft-launch.md (post-SL5 UST1 track note)
Parent #502

Skills

skills/AGENTS_FRONTEND_SHELL_NAV.md
skills/AGENTS_SOFT_LAUNCH_FAUCET.md (anti-pattern: do not overload Mint)
skills/AGENTS_FRONTEND_DESIGN_SYSTEM.md, AGENTS_FRONTEND_COPY_COGNITIVE_LOAD.md

Recommended direction

Env: Add VITE_UST1_WINDOW_ADDRESS, VITE_UST1_TOKEN_ADDRESS, VITE_VFDUSD_TOKEN_ADDRESS (and oracle only if UI needs it); document Coolify values from the table above.
Client (ust1Window.ts): Query effective_swap / config; build CW20 Send msgs for deposit (vFDUSD→window) and withdraw (UST1→window); map pause/stale/limit errors to CTA copy.
Page: /ust1 with Deposit / Withdraw tabs; show fee_bps, per-tx + 24h remaining, oracle freshness; disable CTA when unsafe; copy that this is oracle mint/redeem not an AMM swap (link Trade/Swap when secondary pairs exist).
Nav: Discoverable item (primary or More — product choice) with label e.g. UST1, never Mint.
Metadata: Registry + logos for UST1 and vFDUSD; indexer logo_url after allowlist review.
Tests: Unit tests for quote formatting + gates; Playwright for disabled states; optional strict e2e when env present.
Ship: Coolify rebuild; record mainnet UI smoke txs on this issue / #502.

Acceptance criteria

https://dex.cl8y.com/ust1 serves vFDUSD↔UST1 mint/redeem UI (not the faucet).
Nav discovers /ust1 without confusing it with /mint.
UI quotes match on-chain effective_swap; CTA respects pause, stale oracle, per-tx and 24h limits.
Deposit and withdraw succeed from the UI (mainnet or documented staging with mainnet addresses); txs recorded.
Only vFDUSD (deposit) / UST1 (withdraw) are selectable for window sends.
UST1 and vFDUSD metadata/logos visible (registry and/or indexer).
Coolify VITE_* documented/updated for window + tokens.
make lint-frontend / make test-frontend green for changed code.

Test plan (happy / functional paths)

Unit: ust1Window quote formatting; limit remaining math; pause/stale/over-limit disable predicates.
Unit: env parsing — missing window address hides/disables page safely; wrong direction tokens rejected.
Component / Playwright: /ust1 loads; Deposit/Withdraw tabs; CTA disabled when mocked stale/paused/over-limit; enabled when healthy quote.
LocalTerra (optional): deploy/mock window; round-trip CW20 Send deposit + withdraw.
Mainnet QA: small deposit vFDUSD→UST1 and withdraw UST1→vFDUSD from UI; compare UI quote to LCD effective_swap; confirm nav ≠ Mint.
Coolify: production build with new env; /ust1 loads (correct Node 24 — no Aw Snap).

Test plan (attack / hack / abuse vectors)

Vector	Expected
Submit while oracle stale / window paused	CTA blocked; chain would reject anyway
Exceed per-tx or 24h limit via UI	Client block + chain reject
AMM / router used for “mint”	Never — only CW20 Send to window
Wrong token selected for window send	Client allowlist only
Env pointing at LocalTerra on prod	Deploy checklist + columbus-5 verification query
XSS / malicious token metadata	Logo allowlist; sanitize URLs
Faucet `/mint` spoofing UST1	UST1 never in faucet set; separate route/label
Confused user treating AMM pair as oracle mint	Copy + link secondary markets separately

Verification criteria

Production /ust1 mint + redeem smoke tx hashes recorded.
Side-by-side LCD effective_swap vs UI quote for a probe amount.
Nav screenshot or checklist: UST1 ≠ Mint.
Coolify env keys listed in issue comment or deploy docs.
Unblocks remaining #502 window ACs; hands addresses to #503 monitoring as needed.

Parent: #502
Phase 2: ust1-window#19
Sibling: mainnet wrap env + Swap wrap UX; secondary AMM pair / waiver

## Summary Ship a dedicated **`/ust1`** page on `https://dex.cl8y.com` for always-on oracle **vFDUSD ↔ UST1** mint/redeem against the live mainnet window — route + nav distinct from the soft-launch faucet **`/mint`**, a `ust1Window` client (CW20 `Send` + `effective_swap` quotes/gates), and UST1/vFDUSD token metadata/logos. Parent track: [#502](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/502) (Phase 4). Upstream complete: [ust1-window#19](https://gitlab.com/PlasticDigits/ust1-window/-/issues/19). ### Published mainnet addresses (Phase 2) | Role | Address | |------|---------| | vFDUSD | `terra1mnl9azefrqpmu888ar2u6zrcwr80hxlt3avf4300r576cw5ar7esvxsvj3` | | UST1 | `terra1f0eqgy9w7e5e7up97vjudqwx38tesf8ylx75x2lv3nwm0clry0pqmgfy72` | | ust1-oracle | `terra1fmht0t6svq3n24zx03nkfja0m40zhfyyxkdcvlrkl6u7gfe6aagq4gch8n` (code **11568**) | | ust1-window | `terra1zxwpzpzpleatqn39r00grau4yt29sld8pw78s7ktvjafnj5nsaxq0h3rh2` (code **11566**) | Approved window params: `fee_bps=100`, per-tx **1000** UST1, rolling 24h **10000** UST1. --- ## Current codebase | Area | Status | |------|--------| | Routes | `frontend-dapp/src/App.tsx` — `/mint` → `MintPage`; **no `/ust1`** | | Nav | `navItems.ts`: `MINT_NAV_ITEM` label **Mint**, shown in More only when `VITE_FAUCET_ADDRESS` set (`Layout.tsx` `includeMint`) | | Faucet | Soft-launch only (`SOFT_LAUNCH_MINTABLE_TOKENS` / gemstones) — must not list UST1 | | Window client | **None** — no `ust1Window.ts`, no `effective_swap` query helper | | Token registry | `tokenRegistry.ts` / `tokenlist/` — no UST1 or vFDUSD entries or logos | | On-chain window | Live; UI still missing | Integrators today must hand-craft CW20 `Send` + `{"effective_swap":{}}`. Retail users have no first-class mint/redeem surface on the DEX. --- ## Why this is needed Phase 2 deployed the oracle window and tokens, but without `/ust1` the economic base asset is operator-only. Soft-launch **`/mint`** is a faucet and must stay that way — overloading it would confuse users and risk mixing faucet mintables with oracle issuance. A dedicated route, execution-aligned quotes from `effective_swap`, and clear UST1/vFDUSD metadata are required before production smoke and Phase 5 monitoring can treat the UI as the user path. --- ## Constraints / guardrails 1. **Do not** reuse `/mint` for UST1; add **`/ust1`** with nav label that cannot be confused with faucet **Mint**. 2. Mint/redeem must call **ust1-window** via CW20 `Send` — **not** the AMM router. 3. Quotes and submit gates must come from on-chain `effective_swap` / config (fee, limits, pause, oracle age/staleness) — never invent rates client-side. 4. Block submit when paused, oracle stale, or amount exceeds per-tx / remaining 24h capacity. 5. Allowlist tokens: deposit = vFDUSD only; withdraw = UST1 only. 6. Coolify `VITE_*` must point at columbus-5 addresses above — never LocalTerra defaults on prod. 7. Follow design-system + retail copy skills; keep cognitive load low (deposit/withdraw tabs, one quote surface). 8. Do not list UST1/vFDUSD in soft-launch faucet token set. 9. Logo hosts must stay within `tokenLogoAllowlist` / reviewed indexer `logo_url`. --- ## Relevant files **Frontend (new + wire)** - `frontend-dapp/src/App.tsx` — register `/ust1` - `frontend-dapp/src/components/common/navItems.ts`, `Layout.tsx` - New: `frontend-dapp/src/pages/Ust1Page.tsx` (or equivalent) - New: `frontend-dapp/src/services/terraclassic/ust1Window.ts` - `frontend-dapp/src/utils/constants.ts` — `VITE_UST1_*` / window / token envs - `frontend-dapp/src/utils/tokenRegistry.ts`, `tokenLogoAllowlist.ts` - `tokenlist/tokenlist.json`, `tokenlist/images/` **Docs / deploy** - Coolify / `docker/frontend` env examples - `docs/frontend.md` routes table - `docs/runbooks/mainnet-soft-launch.md` (post-SL5 UST1 track note) - Parent [#502](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/502) **Skills** - `skills/AGENTS_FRONTEND_SHELL_NAV.md` - `skills/AGENTS_SOFT_LAUNCH_FAUCET.md` (anti-pattern: do not overload Mint) - `skills/AGENTS_FRONTEND_DESIGN_SYSTEM.md`, `AGENTS_FRONTEND_COPY_COGNITIVE_LOAD.md` --- ## Recommended direction 1. **Env:** Add `VITE_UST1_WINDOW_ADDRESS`, `VITE_UST1_TOKEN_ADDRESS`, `VITE_VFDUSD_TOKEN_ADDRESS` (and oracle only if UI needs it); document Coolify values from the table above. 2. **Client (`ust1Window.ts`):** Query `effective_swap` / config; build CW20 `Send` msgs for deposit (vFDUSD→window) and withdraw (UST1→window); map pause/stale/limit errors to CTA copy. 3. **Page:** `/ust1` with Deposit / Withdraw tabs; show fee_bps, per-tx + 24h remaining, oracle freshness; disable CTA when unsafe; copy that this is oracle mint/redeem **not** an AMM swap (link Trade/Swap when secondary pairs exist). 4. **Nav:** Discoverable item (primary or More — product choice) with label e.g. **UST1**, never **Mint**. 5. **Metadata:** Registry + logos for UST1 and vFDUSD; indexer `logo_url` after allowlist review. 6. **Tests:** Unit tests for quote formatting + gates; Playwright for disabled states; optional strict e2e when env present. 7. **Ship:** Coolify rebuild; record mainnet UI smoke txs on this issue / #502. --- ## Acceptance criteria - [ ] `https://dex.cl8y.com/ust1` serves vFDUSD↔UST1 mint/redeem UI (not the faucet). - [ ] Nav discovers `/ust1` without confusing it with `/mint`. - [ ] UI quotes match on-chain `effective_swap`; CTA respects pause, stale oracle, per-tx and 24h limits. - [ ] Deposit and withdraw succeed from the UI (mainnet or documented staging with mainnet addresses); txs recorded. - [ ] Only vFDUSD (deposit) / UST1 (withdraw) are selectable for window sends. - [ ] UST1 and vFDUSD metadata/logos visible (registry and/or indexer). - [ ] Coolify `VITE_*` documented/updated for window + tokens. - [ ] `make lint-frontend` / `make test-frontend` green for changed code. --- ## Test plan (happy / functional paths) 1. **Unit:** `ust1Window` quote formatting; limit remaining math; pause/stale/over-limit disable predicates. 2. **Unit:** env parsing — missing window address hides/disables page safely; wrong direction tokens rejected. 3. **Component / Playwright:** `/ust1` loads; Deposit/Withdraw tabs; CTA disabled when mocked stale/paused/over-limit; enabled when healthy quote. 4. **LocalTerra (optional):** deploy/mock window; round-trip CW20 Send deposit + withdraw. 5. **Mainnet QA:** small deposit vFDUSD→UST1 and withdraw UST1→vFDUSD from UI; compare UI quote to LCD `effective_swap`; confirm nav ≠ Mint. 6. **Coolify:** production build with new env; `/ust1` loads (correct Node 24 — no Aw Snap). --- ## Test plan (attack / hack / abuse vectors) | Vector | Expected | |--------|----------| | Submit while oracle stale / window paused | CTA blocked; chain would reject anyway | | Exceed per-tx or 24h limit via UI | Client block + chain reject | | AMM / router used for “mint” | Never — only CW20 Send to window | | Wrong token selected for window send | Client allowlist only | | Env pointing at LocalTerra on prod | Deploy checklist + columbus-5 verification query | | XSS / malicious token metadata | Logo allowlist; sanitize URLs | | Faucet `/mint` spoofing UST1 | UST1 never in faucet set; separate route/label | | Confused user treating AMM pair as oracle mint | Copy + link secondary markets separately | --- ## Verification criteria - [ ] Production `/ust1` mint + redeem smoke tx hashes recorded. - [ ] Side-by-side LCD `effective_swap` vs UI quote for a probe amount. - [ ] Nav screenshot or checklist: UST1 ≠ Mint. - [ ] Coolify env keys listed in issue comment or deploy docs. - [ ] Unblocks remaining #502 window ACs; hands addresses to [#503](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/503) monitoring as needed. ### Related - Parent: [#502](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/502) - Phase 2: [ust1-window#19](https://gitlab.com/PlasticDigits/ust1-window/-/issues/19) - Sibling: mainnet wrap env + Swap wrap UX; secondary AMM pair / waiver

PlasticDigits commented

2026-08-08 11:26:05 +00:00

(Migrated from gitlab.com)

marked as related to #502

PlasticDigits commented

2026-08-08 11:27:02 +00:00

(Migrated from gitlab.com)

mentioned in issue #502

PlasticDigits commented

2026-08-08 13:34:32 +00:00

(Migrated from gitlab.com)

mentioned in commit 962fe51512

mentioned in commit 962fe5151285fb6df68fdc74afdfb9f2ff11bece

PlasticDigits commented

2026-08-08 13:42:36 +00:00

(Migrated from gitlab.com)

mentioned in merge request !1045

PlasticDigits commented

2026-08-08 13:42:40 +00:00

(Migrated from gitlab.com)

Implementation MR: https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/merge_requests/327

Acceptance criteria progress

Nav discovers /ust1 without confusing it with /mint (label UST1, conditional More item)
UI quotes from on-chain effective_swap + INV-SWAP math; CTA gates pause / stale / per-tx / 24h
Only vFDUSD (deposit) / UST1 (withdraw) selectable for window sends
UST1 and vFDUSD metadata/logos in registry + tokenlist
Coolify VITE_* documented (docker/frontend/Dockerfile defaults + .env.example + runbook)
make lint-frontend / targeted frontend tests green (make verify-issue-506)
https://dex.cl8y.com/ust1 live after Coolify rebuild
Deposit and withdraw succeed from UI; mainnet smoke txs recorded
Side-by-side LCD effective_swap vs UI quote on prod

Docs: docs/runbooks/ust1-window-ui.md (U1–U8), skill skills/AGENTS_UST1_WINDOW_UI.md.

Implementation MR: https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/merge_requests/327 ### Acceptance criteria progress - [x] Nav discovers `/ust1` without confusing it with `/mint` (label **UST1**, conditional More item) - [x] UI quotes from on-chain `effective_swap` + INV-SWAP math; CTA gates pause / stale / per-tx / 24h - [x] Only vFDUSD (deposit) / UST1 (withdraw) selectable for window sends - [x] UST1 and vFDUSD metadata/logos in registry + tokenlist - [x] Coolify `VITE_*` documented (`docker/frontend/Dockerfile` defaults + `.env.example` + runbook) - [x] `make lint-frontend` / targeted frontend tests green (`make verify-issue-506`) - [ ] `https://dex.cl8y.com/ust1` live after Coolify rebuild - [ ] Deposit and withdraw succeed from UI; mainnet smoke txs recorded - [ ] Side-by-side LCD `effective_swap` vs UI quote on prod Docs: `docs/runbooks/ust1-window-ui.md` (U1–U8), skill `skills/AGENTS_UST1_WINDOW_UI.md`.

PlasticDigits commented

2026-08-09 06:50:18 +00:00

(Migrated from gitlab.com)

mentioned in merge request !1046

PlasticDigits commented

2026-08-09 06:55:09 +00:00

(Migrated from gitlab.com)

mentioned in commit cfd6f13d59

mentioned in commit cfd6f13d590f3bf0e55c678ac365950e9976eebc

PlasticDigits commented

2026-08-09 07:02:21 +00:00

(Migrated from gitlab.com)

Merge sanity check (MR !1045 → main)

Verdict: Code ACs for #506 look satisfied at tip cfd6f13 (logos, withdraw min-out disclosure, gate e2e). make verify-issue-506 PASS locally.

Remaining problems / open items

Ops before closing #506: Coolify rebuild with columbus-5 VITE_UST1_* → prod /ust1 → small deposit + withdraw → record tx hashes + LCD effective_swap vs UI quote; confirm nav UST1 ≠ Mint.
Cosmetic nit: Oracle status badge can still show “Fresh” when effective_swap.paused is true; CTA correctly shows window paused (Ust1Page).
CI: test-frontend red on branch, but failing suites (useTerraBroadcastMutation*, LcdQueryGate, WalletIndexerHistoryPanel, formatAmount CL8Y decimals 18 vs expected 6, etc.) are outside this MR’s diff / also fail on current main class of drift. Not treated as a #506 regression.
Wiring deferral: Secondary-market blurb/deep-links from #508 (ust1SecondaryMarket.ts) are not yet mounted on /ust1 — track as follow-up once both land.

## Merge sanity check (MR !1045 → main) **Verdict:** Code ACs for #506 look satisfied at tip `cfd6f13` (logos, withdraw min-out disclosure, gate e2e). `make verify-issue-506` PASS locally. ### Remaining problems / open items 1. **Ops before closing #506:** Coolify rebuild with columbus-5 `VITE_UST1_*` → prod `/ust1` → small deposit + withdraw → record tx hashes + LCD `effective_swap` vs UI quote; confirm nav **UST1** ≠ **Mint**. 2. **Cosmetic nit:** Oracle status badge can still show “Fresh” when `effective_swap.paused` is true; CTA correctly shows window paused (`Ust1Page`). 3. **CI:** `test-frontend` red on branch, but failing suites (`useTerraBroadcastMutation*`, `LcdQueryGate`, `WalletIndexerHistoryPanel`, `formatAmount` CL8Y decimals 18 vs expected 6, etc.) are outside this MR’s diff / also fail on current `main` class of drift. Not treated as a #506 regression. 4. **Wiring deferral:** Secondary-market blurb/deep-links from #508 (`ust1SecondaryMarket.ts`) are not yet mounted on `/ust1` — track as follow-up once both land.

PlasticDigits commented

2026-08-09 07:02:22 +00:00

(Migrated from gitlab.com)

mentioned in issue #508

PlasticDigits commented

2026-08-09 07:03:10 +00:00

(Migrated from gitlab.com)

mentioned in commit 12be42cecd

mentioned in commit 12be42cecd1915338cc980a1ea444fc61a725d55

PlasticDigits commented

2026-08-09 07:03:26 +00:00

(Migrated from gitlab.com)

mentioned in commit 361cd8083c

mentioned in commit 361cd8083c9b7a4a019c7f8e291cc46c04dc2954

PlasticDigits (Migrated from gitlab.com) closed this issue

2026-08-09 07:03:26 +00:00

PlasticDigits commented

2026-08-09 07:04:03 +00:00

(Migrated from gitlab.com)

mentioned in commit 7d43b49356

mentioned in commit 7d43b493568a0a619d246768ee7e757166fc9c0e

PlasticDigits commented

2026-08-09 07:05:00 +00:00

(Migrated from gitlab.com)

MR !1045 merged to main (361cd80) after conflict resolution with !1044 (cLUNC/cUSTC + UST1/vFDUSD registry maps). Issue auto-closed via Closes #506.

Still needed for production AC: Coolify rebuild with VITE_UST1_*, deposit/withdraw smoke txs, LCD effective_swap vs UI quote. Optional follow-up: wire #508 secondary-market blurb/CTAs onto /ust1.

MR !1045 merged to `main` (`361cd80`) after conflict resolution with !1044 (cLUNC/cUSTC + UST1/vFDUSD registry maps). Issue auto-closed via `Closes #506`. **Still needed for production AC:** Coolify rebuild with `VITE_UST1_*`, deposit/withdraw smoke txs, LCD `effective_swap` vs UI quote. Optional follow-up: wire `#508` secondary-market blurb/CTAs onto `/ust1`.

PlasticDigits commented

2026-08-09 09:26:07 +00:00

(Migrated from gitlab.com)

mentioned in issue #503