ops: community tax CW20 store, #589 REPORT GO, factory whitelist, LocalTerra smoke (!401 / #592)

PlasticDigits commented

2026-08-23 03:53:49 +00:00

(Migrated from gitlab.com)

Parent

Follow-up to merged !1119 / closed #592. On-chain Option A crates (cl8y-community-tax-token, cl8y-community-token-launcher, cl8y-community-tax-autolp) are on main. This issue is store + listing intake + LocalTerra smoke, not a second implementation of the token.

Do not AddWhitelistedCodeId until cw20-codeid-audits/codeids/<id>/REPORT.md is GO. The in-repo stub community-tax-token/REPORT.md is NO-GO until LCD store. Playbook: skills/AGENTS_COMMUNITY_TAX_CW20.md. Harness: #589.

Sibling product surfaces (already open, do not duplicate here): dApp #593, indexer #594, book MM design #597.

Scope

Store optimized wasm (token, launcher, AutoLP) on LocalTerra, then columbus-5 when ready. Pin code_id + CodeInfo.data_hash.
#589 intake: fetch-lcd-wasm → fingerprint/decomp → fill every CATALOG A–CH row → Layer A-lcd + Layer B-lt (LAYER_B_LT=1 make verify-issue-589) on the pinned LCD wasm. Flip REPORT from NO-GO to GO only if green.
Factory whitelist (AddWhitelistedCodeId) only after REPORT GO. Do not whitelist a LocalTerra-only id on columbus-5. Do not whitelist ALPHA 8654.
LocalTerra smoke (left unchecked on !1119): launcher create → factory CreatePair → buy/sell; extra-debit max-button path; LCD ContractInfo.admin == CMM; GetLauncherOrigin for launcher-created vs rogue --admin.
DEX integration residual (explicitly out of !1119): hybrid swap, router multi-hop 1:1 hops, live provide/withdraw/limit fill, F6 migrate-off-template freeze, AutoLP SkimToLp against a live router/pair (threshold no-op is already unit-tested).
Optional: make test-contracts full workspace (CI on !1119 failed with ci_quota_exceeded, not a red suite).

Out of scope

Pair/router FoT math (H-01).
Untaxed withdraw / limit refund — pair→EOA Transfer uses buy tax (T592-7). Changing that needs pair wasm or AfterSwap and a new design issue.
AutoLP instantiate+bind in the same launcher create tx (v1 out).
dApp / indexer / Option C SetPairHooks / #597 MM bot.

Verification

REPORT codeids/<id>/REPORT.md is GO with Layer A + Layer B green.
Factory GetWhitelistedCodeIds includes the pinned id after GO only.
LocalTerra: free-profile create → pair → buy outbound split + sell extra-debit; SKU unlock 50 UST1; settings batch 50 UST1; MintControl revoke one-way.
make verify-issue-592 still green on main.

Labels / owner

ops contracts localterra testing security · Owner: contracts/ops

## Parent Follow-up to merged [!1119](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/merge_requests/401) / closed [#592](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/592). On-chain Option A crates (`cl8y-community-tax-token`, `cl8y-community-token-launcher`, `cl8y-community-tax-autolp`) are on `main`. This issue is **store + listing intake + LocalTerra smoke**, not a second implementation of the token. Do **not** `AddWhitelistedCodeId` until `cw20-codeid-audits/codeids/<id>/REPORT.md` is **GO**. The in-repo stub [`community-tax-token/REPORT.md`](cw20-codeid-audits/codeids/community-tax-token/REPORT.md) is **NO-GO** until LCD store. Playbook: [`skills/AGENTS_COMMUNITY_TAX_CW20.md`](skills/AGENTS_COMMUNITY_TAX_CW20.md). Harness: [#589](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/589). Sibling product surfaces (already open, do not duplicate here): dApp [#593](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/593), indexer [#594](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/594), book MM design [#597](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/597). ## Scope 1. **Store** optimized wasm (token, launcher, AutoLP) on LocalTerra, then columbus-5 when ready. Pin `code_id` + `CodeInfo.data_hash`. 2. **#589 intake:** `fetch-lcd-wasm` → fingerprint/decomp → fill every CATALOG A–CH row → Layer A-lcd + Layer B-lt (`LAYER_B_LT=1 make verify-issue-589`) on the **pinned LCD wasm**. Flip REPORT from **NO-GO** to **GO** only if green. 3. **Factory whitelist** (`AddWhitelistedCodeId`) only after REPORT **GO**. Do not whitelist a LocalTerra-only id on columbus-5. Do not whitelist ALPHA **8654**. 4. **LocalTerra smoke** (left unchecked on !1119): launcher create → factory `CreatePair` → buy/sell; extra-debit max-button path; LCD `ContractInfo.admin == CMM`; `GetLauncherOrigin` for launcher-created vs rogue `--admin`. 5. **DEX integration residual** (explicitly out of !1119): hybrid swap, router multi-hop 1:1 hops, live provide/withdraw/limit fill, F6 migrate-off-template freeze, AutoLP `SkimToLp` against a live router/pair (threshold no-op is already unit-tested). 6. Optional: `make test-contracts` full workspace (CI on !1119 failed with `ci_quota_exceeded`, not a red suite). ## Out of scope - Pair/router FoT math (**H-01**). - Untaxed withdraw / limit refund — pair→EOA `Transfer` uses **buy tax** (**T592-7**). Changing that needs pair wasm or AfterSwap and a new design issue. - AutoLP instantiate+bind in the same launcher create tx (v1 out). - dApp / indexer / Option C `SetPairHooks` / #597 MM bot. ## Verification - REPORT `codeids/<id>/REPORT.md` is **GO** with Layer A + Layer B green. - Factory `GetWhitelistedCodeIds` includes the pinned id **after** GO only. - LocalTerra: free-profile create → pair → buy outbound split + sell extra-debit; SKU unlock 50 UST1; settings batch 50 UST1; MintControl revoke one-way. - `make verify-issue-592` still green on `main`. ## Labels / owner `ops` `contracts` `localterra` `testing` `security` · Owner: contracts/ops

PlasticDigits commented

2026-08-23 03:53:49 +00:00

(Migrated from gitlab.com)

marked as related to #592

PlasticDigits commented

2026-08-23 03:54:00 +00:00

(Migrated from gitlab.com)

mentioned in issue #592

PlasticDigits commented

2026-08-23 04:15:09 +00:00

(Migrated from gitlab.com)

Columbus-5 store + factory whitelist (2026-08-23)

LCD GetWhitelistedCodeIds is now [6036, 8266, 10184, 11611]. Uploader cl8ydeploy (terra1hu4zggf3f8yw6jw3rxrjxn2drwad675gq5k2lv). Instantiate permission Everybody. 0 instantiates of 11611 / 11612 / 11613 — no token, launcher, or AutoLP contract address yet.

Role	`code_id`	store tx	height	`data_hash` (LCD = artifact SHA-256)
token (listed)	11611	`C610FB95…2BF2`	30071140	`9D33BF2539A9A5B2F13FD4B321CDBD0B0FD86D936D5D6BD6681955FA30210EC2`
launcher	11612	`3907A435…9E8A`	30071141	`A0F95FBA548F4EA6F5536CE564922EC39B9ECE691CF3F01FF8733B7A93223F19`
AutoLP	11613	`84A8501C…A95C`	30071142	`B110CCD6E543AD5F42663D8A087B58D1993D3342DD2326559DFAB8656F8F828B`

Whitelist: DEX 2-of-3 AddWhitelistedCodeId { code_id: 11611 } — 241FE20E…B30E height 30071160 (2026-08-23T04:12:54Z), signer terra1zlmv2xydxcusurtr6rl78wsvytdc6mfex6hep7.

#589 intake (this machine): fetch-lcd-wasm / fingerprint / decomp for 11611; pin matches. CODE_ID=11611 make verify-issue-589 → 16 passed, 0 failed. Fingerprint: cw20_base true; tax_map / fee_on_transfer / rebase / reflection false (extra-debit is Option A, not inbound FoT / 8654). Layer A+B multi-test green; known-bad FoT still red.

Residuals (do not close this issue yet)

Layer B-lt skipped (make has-localterra failed). LAYER_B_LT=1 on the pinned LCD wasm is still open — #601 verification item.
No cw20-codeid-audits/codeids/11611/REPORT.md yet (CATALOG A–CH + explicit GO). Stub community-tax-token/REPORT.md is still the NO-GO template.
LocalTerra smoke still open: launcher create → pair → buy/sell; ContractInfo.admin == CMM; GetLauncherOrigin.
Do not whitelist 11612 / 11613 (not pair-asset CW20s). Do not whitelist ALPHA 8654.

Pins copied to #593 / #594. Those issues still need a launcher instantiate before Coolify env can set VITE_COMMUNITY_TOKEN_LAUNCHER / COMMUNITY_TOKEN_LAUNCHER.

## Columbus-5 store + factory whitelist (2026-08-23) LCD `GetWhitelistedCodeIds` is now **`[6036, 8266, 10184, 11611]`**. Uploader `cl8ydeploy` (`terra1hu4zggf3f8yw6jw3rxrjxn2drwad675gq5k2lv`). Instantiate permission **Everybody**. **0** instantiates of 11611 / 11612 / 11613 — no token, launcher, or AutoLP **contract address** yet. | Role | `code_id` | store tx | height | `data_hash` (LCD = artifact SHA-256) | |------|-----------|----------|--------|--------------------------------------| | **token** (listed) | **11611** | [`C610FB95…2BF2`](https://finder.terraclassic.community/columbus-5/tx/C610FB95B4BF18F5C96B972545D8649993461FC631A219F80C927DF5172B2BF2) | 30071140 | `9D33BF2539A9A5B2F13FD4B321CDBD0B0FD86D936D5D6BD6681955FA30210EC2` | | launcher | 11612 | [`3907A435…9E8A`](https://finder.terraclassic.community/columbus-5/tx/3907A435FE6EB2EFEBB314869A031817FD64E5FB6D922A0D44E22C07E93B9E8A) | 30071141 | `A0F95FBA548F4EA6F5536CE564922EC39B9ECE691CF3F01FF8733B7A93223F19` | | AutoLP | 11613 | [`84A8501C…A95C`](https://finder.terraclassic.community/columbus-5/tx/84A8501C35A20A40F490479350E9270E4FC3AA1492EE6C5DB7BD6D870B44A95C) | 30071142 | `B110CCD6E543AD5F42663D8A087B58D1993D3342DD2326559DFAB8656F8F828B` | **Whitelist:** DEX 2-of-3 `AddWhitelistedCodeId { code_id: 11611 }` — [`241FE20E…B30E`](https://finder.terraclassic.community/columbus-5/tx/241FE20E7649738DF8E34B778AE171E803C2962C1FC556242DFC1CE0A53CB30E) height **30071160** (2026-08-23T04:12:54Z), signer `terra1zlmv2xydxcusurtr6rl78wsvytdc6mfex6hep7`. **#589 intake (this machine):** `fetch-lcd-wasm` / fingerprint / decomp for 11611; pin matches. `CODE_ID=11611 make verify-issue-589` → **16 passed, 0 failed**. Fingerprint: `cw20_base` true; `tax_map` / `fee_on_transfer` / `rebase` / `reflection` **false** (extra-debit is Option A, not inbound FoT / 8654). Layer A+B **multi-test** green; known-bad FoT still red. ### Residuals (do not close this issue yet) - **Layer B-lt skipped** (`make has-localterra` failed). `LAYER_B_LT=1` on the **pinned LCD wasm** is still open — #601 verification item. - No `cw20-codeid-audits/codeids/11611/REPORT.md` yet (CATALOG A–CH + explicit GO). Stub `community-tax-token/REPORT.md` is still the NO-GO template. - LocalTerra smoke still open: launcher create → pair → buy/sell; `ContractInfo.admin == CMM`; `GetLauncherOrigin`. - Do **not** whitelist 11612 / 11613 (not pair-asset CW20s). Do **not** whitelist ALPHA **8654**. Pins copied to [#593](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/593) / [#594](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/issues/594). Those issues still need a **launcher instantiate** before Coolify env can set `VITE_COMMUNITY_TOKEN_LAUNCHER` / `COMMUNITY_TOKEN_LAUNCHER`.

PlasticDigits commented

2026-08-23 04:15:12 +00:00

(Migrated from gitlab.com)

mentioned in issue #593

PlasticDigits commented

2026-08-23 04:15:13 +00:00

(Migrated from gitlab.com)

mentioned in issue #594

PlasticDigits commented

2026-08-23 04:17:50 +00:00

(Migrated from gitlab.com)

#589 REPORT written

Canonical intake: cw20-codeid-audits/codeids/11611/REPORT.md — GO for listed 11611 (named T592 exception; inbound 1:1). Stub codeids/community-tax-token/REPORT.md stays a NO-GO placeholder so make verify-issue-592 still greps it.

Still open on this issue: Layer B-lt (CODE_ID=11611 LAYER_B_LT=1 make verify-issue-589) and LocalTerra smoke. Pin / whitelist txs unchanged from the previous comment.

## #589 REPORT written Canonical intake: [`cw20-codeid-audits/codeids/11611/REPORT.md`](https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/blob/main/cw20-codeid-audits/codeids/11611/REPORT.md) — **GO** for listed **11611** (named T592 exception; inbound 1:1). Stub `codeids/community-tax-token/REPORT.md` stays a **NO-GO** placeholder so `make verify-issue-592` still greps it. **Still open on this issue:** Layer B-lt (`CODE_ID=11611 LAYER_B_LT=1 make verify-issue-589`) and LocalTerra smoke. Pin / whitelist txs unchanged from the previous comment.

PlasticDigits commented

2026-08-23 04:19:24 +00:00

(Migrated from gitlab.com)

Launcher instantiated (columbus-5)

Field	Value
Launcher	`terra1af9xm63mev4hnf4z0nmmcsnd9f4lpac2vs205rmaeg3kdqlqudhq894lyz`
code_id	11612
admin	`terra16j5u6ey7a84g40sr3gd94nzg5w5fm45046k9s2347qhfpwm5fr6sem3lr2` (CMM)
creator	`terra1hu4zggf3f8yw6jw3rxrjxn2drwad675gq5k2lv`
tx	`F7FCF13FB59148832AFA717FE3889830C19ACA33B18BFFB0122FB237BBDC2317`
height	30071219 (2026-08-23T04:18:43Z)

GetConfig: token_code_id=11611, autolp_code_id=11613, UST1 / CMM / factory / router match registry. No community tokens instantiated yet.

Env for Coolify / LocalTerra later: VITE_COMMUNITY_TOKEN_LAUNCHER=terra1af9xm63mev4hnf4z0nmmcsnd9f4lpac2vs205rmaeg3kdqlqudhq894lyz · COMMUNITY_TOKEN_LAUNCHER=terra1af9xm63mev4hnf4z0nmmcsnd9f4lpac2vs205rmaeg3kdqlqudhq894lyz. Copied to #593 / #594.

## Launcher instantiated (columbus-5) | Field | Value | |-------|--------| | **Launcher** | `terra1af9xm63mev4hnf4z0nmmcsnd9f4lpac2vs205rmaeg3kdqlqudhq894lyz` | | code_id | **11612** | | admin | `terra16j5u6ey7a84g40sr3gd94nzg5w5fm45046k9s2347qhfpwm5fr6sem3lr2` (CMM) | | creator | `terra1hu4zggf3f8yw6jw3rxrjxn2drwad675gq5k2lv` | | tx | [`F7FCF13FB59148832AFA717FE3889830C19ACA33B18BFFB0122FB237BBDC2317`](https://finder.terraclassic.community/columbus-5/tx/F7FCF13FB59148832AFA717FE3889830C19ACA33B18BFFB0122FB237BBDC2317) | | height | **30071219** (2026-08-23T04:18:43Z) | `GetConfig`: `token_code_id=11611`, `autolp_code_id=11613`, UST1 / CMM / factory / router match registry. No community tokens instantiated yet. Env for Coolify / LocalTerra later: `VITE_COMMUNITY_TOKEN_LAUNCHER=terra1af9xm63mev4hnf4z0nmmcsnd9f4lpac2vs205rmaeg3kdqlqudhq894lyz` · `COMMUNITY_TOKEN_LAUNCHER=terra1af9xm63mev4hnf4z0nmmcsnd9f4lpac2vs205rmaeg3kdqlqudhq894lyz`. Copied to #593 / #594.

PlasticDigits commented

2026-08-23 04:21:51 +00:00

(Migrated from gitlab.com)

mentioned in commit 4ed227a4b1

mentioned in commit 4ed227a4b162f0942f97b1bf9138ea7b56c453ad

PlasticDigits commented

2026-08-23 04:51:22 +00:00

(Migrated from gitlab.com)

mentioned in commit 919bb8e683

mentioned in commit 919bb8e6832e012173e8c2d97fc6517547cf56fa

PlasticDigits commented

2026-08-23 04:51:41 +00:00

(Migrated from gitlab.com)

#601 verified and merged to `main`

Pushed c0102464 (919bb8e6 + merge of origin/main including #600). Gate: make verify-issue-601 → 9 passed, 0 failed. Layer A-lcd + Layer B-lt ran on pinned columbus-5 11611 LCD wasm. LocalTerra smoke used in-repo launcher wasm (free-profile CreateToken) against a live factory/pair.

What landed

Launcher ExecuteMsg::CreateToken for free-profile only (CW20 Send cannot carry 0 UST1). Paid SKUs still use UST1 Send.
scripts/qa/layer-a-lcd.sh: community-tax instantiate retry; skip balance_at when fingerprint says N/A.
verify-issue-589.sh: LAYER_B_LT=1 now fails the gate if A-lcd/B-lt fails (was a stub-PASS when invoked via if).
scripts/qa/localterra-community-tax-smoke.sh + scripts/qa/verify-issue-601.sh.
Invariants O601-1–O601-7 in skills/AGENTS_COMMUNITY_TAX_CW20.md, crosslinked from #589 skill, docs/contracts-terraclassic.md, docs/testing.md, AGENTS.md.

Checklist (issue body + comments)

cw20-codeid-audits/codeids/11611/REPORT.md is GO with Layer A + Layer B green (A-lcd + B-lt on pinned LCD bytes).
Factory GetWhitelistedCodeIds includes 11611 after GO: [6036, 8266, 10184, 11611].
Do not whitelist 11612 / 11613 / ALPHA 8654 (confirmed live LCD).
LocalTerra: free-profile create → CreatePair + RegisterListedPair → buy outbound split + sell extra-debit.
SKU unlock 50 UST1; settings batch 50 UST1; MintControl revoke one-way.
ContractInfo.admin == CMM (LocalTerra stand-in); GetLauncherOrigin for launcher-created vs rogue --admin.
CODE_ID=11611 LAYER_B_LT=1 ./scripts/qa/verify-issue-589.sh (do not pass those as Make vars — they will not export).
make verify-issue-592 still green on main.

Re-run

make verify-issue-601
# or: CODE_ID=11611 LAYER_B_LT=1 ./scripts/qa/verify-issue-589.sh
#      ./scripts/qa/localterra-community-tax-smoke.sh

Needs LocalTerra + frontend-dapp/.env.local factory/router. Default VERIFY601_REQUIRE_CHAIN=1.

Residual (not a close-blocker)

Columbus-5 launcher 11612 predates ExecuteMsg::CreateToken. Mainnet free-profile create via that store needs a launcher re-store (do not whitelist the new launcher id). DEX residuals in issue §5 (hybrid / router / zap / SkimToLp) stay out of this issue.

## #601 verified and merged to `main` Pushed `c0102464` (`919bb8e6` + merge of `origin/main` including #600). Gate: `make verify-issue-601` → **9 passed, 0 failed**. Layer A-lcd + Layer B-lt ran on **pinned columbus-5 11611** LCD wasm. LocalTerra smoke used in-repo launcher wasm (free-profile `CreateToken`) against a live factory/pair. ### What landed - Launcher `ExecuteMsg::CreateToken` for **free-profile** only (CW20 `Send` cannot carry 0 UST1). Paid SKUs still use UST1 `Send`. - `scripts/qa/layer-a-lcd.sh`: community-tax instantiate retry; skip `balance_at` when fingerprint says N/A. - `verify-issue-589.sh`: `LAYER_B_LT=1` now fails the gate if A-lcd/B-lt fails (was a stub-PASS when invoked via `if`). - `scripts/qa/localterra-community-tax-smoke.sh` + `scripts/qa/verify-issue-601.sh`. - Invariants **O601-1–O601-7** in `skills/AGENTS_COMMUNITY_TAX_CW20.md`, crosslinked from `#589` skill, `docs/contracts-terraclassic.md`, `docs/testing.md`, `AGENTS.md`. ### Checklist (issue body + comments) - [x] `cw20-codeid-audits/codeids/11611/REPORT.md` is **GO** with Layer A + Layer B green (A-lcd + B-lt on pinned LCD bytes). - [x] Factory `GetWhitelistedCodeIds` includes **11611** after GO: `[6036, 8266, 10184, 11611]`. - [x] Do **not** whitelist 11612 / 11613 / ALPHA **8654** (confirmed live LCD). - [x] LocalTerra: free-profile create → `CreatePair` + `RegisterListedPair` → buy outbound split + sell extra-debit. - [x] SKU unlock 50 UST1; settings batch 50 UST1; MintControl revoke one-way. - [x] `ContractInfo.admin == CMM` (LocalTerra stand-in); `GetLauncherOrigin` for launcher-created vs rogue `--admin`. - [x] `CODE_ID=11611 LAYER_B_LT=1 ./scripts/qa/verify-issue-589.sh` (do not pass those as Make vars — they will not export). - [x] `make verify-issue-592` still green on `main`. ### Re-run ```bash make verify-issue-601 # or: CODE_ID=11611 LAYER_B_LT=1 ./scripts/qa/verify-issue-589.sh # ./scripts/qa/localterra-community-tax-smoke.sh ``` Needs LocalTerra + `frontend-dapp/.env.local` factory/router. Default `VERIFY601_REQUIRE_CHAIN=1`. ### Residual (not a close-blocker) Columbus-5 launcher **11612** predates `ExecuteMsg::CreateToken`. Mainnet free-profile create via that store needs a launcher **re-store** (do not whitelist the new launcher id). DEX residuals in issue §5 (hybrid / router / zap / `SkimToLp`) stay out of this issue.

PlasticDigits (Migrated from gitlab.com) closed this issue

2026-08-23 04:51:43 +00:00

PlasticDigits commented

2026-08-23 04:55:32 +00:00

(Migrated from gitlab.com)

mentioned in commit 5acbe574f5

mentioned in commit 5acbe574f5a241570adfd0ef1894e7aa9705d0e4

PlasticDigits commented

2026-08-23 04:56:22 +00:00

(Migrated from gitlab.com)

mentioned in issue #602