Skip to content

@ledgerhq/live-desktop@4.16.0

Choose a tag to compare

@github-actions github-actions released this 14 Aug 10:36
· 370 commits to develop since this release
15e4919

4.16.0

Minor Changes

  • #20278 3d24a89 Thanks @gre-ledger! - Drop the @ledgerhq/errors dependency, completing the errors sunset (LIVE-32915).

    The @ledgerhq/errors package is removed from the monorepo: no workspace source imported it anymore, every error class it held now lives in the package that owns it (@ledgerhq/ledger-wallet-framework/errors for the ones shared across coin modules). createCustomErrorClass and the serializeError / deserializeError stack are gone with it — define errors as native classes and branch on error.name.

    @ledgerhq/errors@6.37.0 stays on npm for external consumers, but is no longer published from this repo.

  • #20280 9fcbe39 Thanks @gre-ledger! - Stop depending on @ledgerhq/errors (LIVE-32915).

    No workspace package declares it anymore, and none may again: enforce-boundaries now fails CI on any manifest that does. The classes it held live in the package that owns them, with @ledgerhq/ledger-wallet-framework/errors as the shared home below the coin layer.

    The package itself stays in the repo so it keeps being published for external consumers, and is bridged to the external coin packages that still peer-depend on it via pnpm.packageExtensions using workspace:* (which reuses the single in-repo copy, so the dependency graph keeps exactly the physical copies it had before). LedgerHQ/coin-modules#752 removes that peerDependency upstream; once it is released the bridge can be dropped, but the package still needs publishing.

  • #20315 4b73f81 Thanks @RobinVncnt! - Portfolio upsell banner and Braze content cards can now coexist on Portfolio (Mobile: shared carousel; Desktop: side-by-side grid when Braze placement is enabled, otherwise upsell stacked above the Braze carousel).

  • #20624 e74a4a3 Thanks @LucasWerey! - Retarget desktop off the dada-client shims onto @features/platform-aggregated-assets and @domain/api-aggregated-assets

  • #20474 e73390c Thanks @deepyjr! - Replace the Desktop address name clear action with a help tooltip.

  • #20404 0f89b44 Thanks @liviuciulinaru! - Replace the legacy Pay Card placeholders with the shared authentication flow on desktop and mobile

  • #20266 626c858 Thanks @tonykhaov! - Upgrade analytics consent QA debug screen to scenario parity

  • #20585 feaf2fc Thanks @claudiiafg! - Require signer confirmation before opening address delete confirmation in Contacts.

  • #20423 44694e5 Thanks @gre-ledger! - Complete the WalletSync DDD extraction: apps now compose the DDD slices directly

    @ledgerhq/live-wallet no longer owns sync infrastructure. src/cloudsync/, src/walletsync/,
    src/accountName.ts and src/store.ts are removed in favour of @shared/cloud-sync,
    @shared/wallet-sync, @features/platform-wallet-sync, @domain/entity-account-name and
    @domain/entity-recent-addresses. What remains is the account list sync module (src/accounts/)
    plus src/walletSyncComposition.ts, which assembles the sync modules into the wallet-sync schema.

    Desktop and mobile replace the monolithic wallet reducer with a combineReducers of the entity
    slices (accountNames, starredAccountIds, walletSync, recentAddresses, nonImportedAccountInfos)
    and wire the watch loop and trustchain lifecycle from @features/platform-wallet-sync at bootstrap.
    @ledgerhq/live-common drops its @ledgerhq/live-wallet runtime dependency: the wallet-api,
    platform and CSV-export helpers now take an AccountNamesState instead of the whole WalletState.

  • #19169 d989af2 Thanks @OlivierFreyssinet! - Add desktop Device Intent Executor context initializer.

  • #20520 0db9cd3 Thanks @OlivierFreyssinet! - Add Device Intent Executor shell tracking (lifecycle, errors, dialog dismiss).

  • #20608 4033c32 Thanks @vladyslavchupovskiy-ext-art! - Add deriveShieldedAddress(ufvk) to derive the Orchard unified address host-side from a UFVK without requiring a device connection. Persists shieldedAddress in ZcashPrivateInfo with backward-compatible serialisation (null fallback for legacy accounts).

  • #20595 43bf6d8 Thanks @ysitbon! - Make every new-architecture barrel a pure regrouping point, and enforce it.

    An index.* under shared/, domain/ or features/ may now contain only export * from "./x"
    lines, plus an optional default re-export. Having to sort in the export
    (export { a, b } from "./x") proved the target file mixed public and private code; an index.*
    holding actual code proved it more loudly. A new nx plugin infers a lint:structure target on each
    of the 49 packages and fails on both, along with two related rules: a barrel may not re-export a
    private internals location, and it may not re-export another workspace package.

    That last rule removes the proxies. A package that re-exported a neighbour gave the same symbol two
    import paths and hid who actually provided it. Consumers now import the original provider and
    declare the dependency, which is why the two apps gain @features/flow-contacts-add-contact and the
    desktop app gains @features/platform-contacts.

    Renamed or relocated, with the import specifier unchanged for consumers in every case except where
    noted:

    • @domain/entity-account-name no longer exports the setAccountNames alias; use
      bulkSetAccountNames, the name the slice actually defines.
    • @shared/cloud-sync exports getCloudSyncApi as a named export from its api module instead of
      re-exporting a default under a different name.

    Five packages are left untouched behind temporary exclusions, each recording how to remove it:

    • @shared/env, the facade over the legacy @ledgerhq/live-env, which carries the wrapping in its
      barrel.
    • the @ledgerhq/engagement and @ledgerhq/ptx packages (flow-analytics-consent,
      flow-large-screen-upsell, flow-lazy-onboarding-banner, flow-pay-card-auth), so each owning
      team lands the change on its own schedule. Conformant barrels were prepared and verified for them
      before being reverted, so the work is deferred rather than open.
  • #20627 7af726b Thanks @YazhuEth! - Explain the higher network fees when sending to an address that does not exist yet. EIP-8037 charges account creation substantially more gas, and nothing in the send flow told the user why the fee jumped. The gas we send is unchanged: eth_estimateGas remains the only source.

  • #20646 fd7152a Thanks @dilaouid! - feat(lwd): add recipient contact card to the send flow

  • #20439 65beee5 Thanks @deepyjr! - Fix the Contacts currency selection list so it fills the modal height.

  • #20454 e1b63ff Thanks @dilaouid! - feat(lwd): bip21 and eip681 scan for lwd

  • #20455 f77b3fa Thanks @deepyjr! - Add invalid and sanctioned address feedback to the Desktop Contacts flow.

  • #20641 1dde844 Thanks @semeano! - Add a warning on Zcash accounts that the private balance excludes Sapling and Orchard shielded funds.

  • #20216 593231c Thanks @semeano! - Restrict the Zcash balance, operations and shielded send flow to the Ironwood pool only.

  • #20207 aee0e64 Thanks @lysyi3m! - Add Internet Computer (ICP) neuron staking to the coin module: create and top up neurons, start/stop dissolving, disburse, set/increase dissolve delay, follow, split, spawn, stake maturity, and add/remove hot keys, plus neuron listing. Governance operations are routed through the NNS governance canister via the device's update-call signing, alongside the existing ledger transfer path, and account synchronization now carries neuron data. Adds the STAKE_NEURON and TOP_UP_NEURON operation types, with matching icons and labels in the desktop and mobile operation history. (LIVE-28469)

  • #20456 a0f13a2 Thanks @sarneijim! - Use fixed legacy onboarding date for backfill instead of app-open date

  • #20458 9876163 Thanks @sarneijim! - Use legacy onboarding date fallback in large-screen upsell eligibility

  • #19169 92b70ef Thanks @OlivierFreyssinet! - Preserve installed apps in Device Intent Executor last seen device info.

  • #20408 e9a14f8 Thanks @claudiiafg! - Wire send, edit, and delete actions on desktop contact address detail.

  • #20557 3e0ae80 Thanks @claudiiafg! - Render Desktop Contacts address edit signer mismatch error from shared flow state.

  • #20539 60b4626 Thanks @gre-ledger! - Scope @ledgerhq/live-wallet down to wallet sync only

    The package now exposes ./accounts and ./walletSyncComposition and nothing else.
    ordering.ts and addAccounts.ts move to @ledgerhq/live-common/account/*, and
    accountRawToAccountUserData joins live-common/account/serialization next to fromAccountRaw.
    The liveqr/ folder is gone: importAccounts.ts and accountToAccountData were unreachable, and
    accountDataToAccount — whose only callers rehydrated a wallet-sync descriptor — becomes
    accounts/descriptorToAccount. live-common no longer depends on live-wallet.

  • #20510 a1bd49e Thanks @claudiiafg! - Model Me as the default self contact with shared display-name formatting, external address counts, and a Ledger Wallet accounts intent.

  • #20643 bef9477 Thanks @dilaouid! - fix(send): validate custom fees against native balance for evm tokens

  • #18764 d266e13 Thanks @philipptpunkt! - Migrate the swap fetchQuotes helper from axios to an RTK Query endpoint (swapQuotesApi). The aggregator /quote request now flows through the Redux data layer, and the rawQuotes/providerErrors split is unchanged. Desktop and mobile register the new API and inject their store dispatch at startup via setSwapQuotesStore; wallet-cli, which has no app store, sets up a standalone one.

    The endpoint itself now lives in the new @domain/api-swap-quotes package; live-common re-exports it, so existing call sites are unchanged.

    Two behaviour changes to be aware of:

    • /quote now goes through the authenticated base query, where the legacy axios call sent no credentials. Both apps already register an auth provider on their store's extra, so whether a request carries an Authorization header is controlled entirely by the lwdAuth/lwmAuth feature flags. They are disabled by default; enabling either one makes /quote send the user's bearer token to the aggregator, and makes a 401/403 trigger the adapter's refresh-and-retry.
    • An aggregator HTTP error (4xx/5xx) now resolves to an empty result, so the caller surfaces the noQuotes global. Previously the shared axios error interceptor turned these into LedgerAPI4xx/LedgerAPI5xx, which propagated to the live app as an error. Only transport failures (no HTTP response) still reject, now with a SwapQuotesRequestFailed error rather than a bare RTK Query error object.
  • #20638 120d4eb Thanks @sarneijim! - Use full-width LNS upsell MediaBanner in notification center

  • #20642 a61f702 Thanks @mcayuelas-ledger! - Persist the pay card hero balance filter across app restarts

  • #20551 488217f Thanks @mcayuelas-ledger! - Persist the payCard slice on desktop: save and restore only { hasSeenFeatureTour } so the Pay feature tour does not reappear after restarting the app

  • #20628 8259d4d Thanks @dilaouid! - feat(lwdm): add matched contact lookup for the send recipient flow

  • #20518 ce46179 Thanks @dilaouid! - chore(lwdm): refactoring mvvm recipient screen

  • #20430 647804e Thanks @gre-ledger! - Move the recent-addresses domain model and in-memory store into @domain/entity-recent-addresses

    RecentAddress and RecentAddressesState are no longer declared in @ledgerhq/types-live; they are now inferred from the Zod schemas in @domain/entity-recent-addresses, which also owns RecentAddressesStore, setupRecentAddressesStore and getRecentAddressesStore. Import them from @domain/entity-recent-addresses.

    @ledgerhq/live-common/account/index still re-exports the store API unchanged, minus the RecentAddressesCache alias — use RecentAddressesState instead.

    Also fixes the store mutating its own state in place: once a first mutation had been dispatched, immer had frozen that exact object graph, so the next addAddress or removeAddress on the same currency threw TypeError: Cannot assign to read only property. The store now replaces its state instead of mutating it.

  • #20473 73948c9 Thanks @dilaouid! - fix(lwdm): fix sanctionned ens address check

  • #20111 aa3ea09 Thanks @YazhuEth! - chore(coin-solana): remove preload and hydrate - fetch validators on demand

    CurrencyBridge.preload / hydrate are deprecated, and preloading the validators.app
    list slowed down the scan account flow. Validators are now fetched lazily behind a 15min
    LRU cache (@ledgerhq/coin-solana/validators) the first time a screen needs them.

    useSolanaPreloadData is removed from @ledgerhq/live-common/families/solana/react; use
    useValidators instead. getAccountBannerState now takes the validators as a third argument.

  • #20371 0f42c42 Thanks @deepyjr! - Add mocked confirmation and saved address rendering to Desktop Contacts.

  • #20333 4ef4615 Thanks @tonykhaov! - Inline large-screen upsell modal entity state into the flow package

  • #20471 3aefd3b Thanks @dilaouid! - fix(lwdm): check sanctions for token recipient addresses

  • #20622 ed79527 Thanks @mdomanski-ext-ledger! - Rename Hedera's HederaValidator.nodeId to id (string), matching the framework's Validator.id and removing the duplicate identity field. Preload caches persisted by earlier versions are migrated on hydration, so upgrading users keep their cached validators. On-chain protocol fields (Transaction.stakingNodeId, HederaDelegation.nodeId) are unchanged.

  • #20508 e7c941f Thanks @claudiiafg! - Extract ghost-click guard logic to shared utility in EditName dialog

  • #20637 f440c85 Thanks @LucasWerey! - Retarget the remaining libs consumers and both store roots off the dada-client shims

  • #20597 8c97aa1 Thanks @OlivierFreyssinet! - Track Device Intent Executor Connect App states on desktop.

  • #20552 e499f00 Thanks @OlivierFreyssinet! - Add Device Intent Executor Connect Device tracking.

Patch Changes