chore(deps): bump @xchainjs/* packages to latest (#1140)

* chore(deps): bump @xchainjs/* packages to latest

Upgrades 32 @xchainjs packages (all minor/patch bumps, no majors):
xchain-aggregator 2.4.0→2.5.0, xchain-arbitrum 2.1.5→2.1.6,
xchain-avax 2.0.19→2.0.20, xchain-base 1.0.19→1.0.20,
xchain-bitcoin 2.2.7→2.3.0, xchain-bitcoincash 2.2.8→2.3.0,
xchain-bsc 2.0.20→2.0.21, xchain-cardano 1.2.2→1.2.3,
xchain-client 2.0.15→2.0.16, xchain-cosmos 3.0.15→3.0.16,
xchain-crypto 1.0.7→1.0.8, xchain-dash 2.2.7→2.2.8,
xchain-doge 2.2.7→2.3.0, xchain-ethereum 2.0.20→2.0.21,
xchain-evm 2.0.19→2.0.20, xchain-evm-providers 2.0.18→2.0.19,
xchain-kujira 2.0.15→2.0.16, xchain-litecoin 2.3.4→2.4.0,
xchain-mayachain 4.1.6→4.1.7, xchain-mayachain-query 2.2.1→2.2.2,
xchain-radix 2.0.16→2.0.17, xchain-ripple 1.0.17→1.0.18,
xchain-solana 1.1.7→1.1.8, xchain-sui 0.1.4→0.1.5,
xchain-thorchain 3.0.19→3.0.20, xchain-thorchain-query 3.1.1→3.1.2,
xchain-thornode 1.2.1→1.2.2, xchain-tron 3.0.8→3.0.9,
xchain-utxo 2.2.7→2.2.8, xchain-utxo-providers 2.0.17→2.1.0,
xchain-wallet 2.0.30→2.0.31, xchain-zcash 1.3.8→1.3.9.

No application code changes were required — TypeScript compiled clean
with zero errors after the upgrade.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(renderer): drop crypto-shim; rely on xchain-crypto 1.0.8 timingSafeEqual fallback

The `crypto` alias pointed at src/shims/crypto-shim.js, which wrapped
crypto-browserify to add `timingSafeEqual` (#1115) so xchain-crypto keystore
decrypt worked in the renderer. xchain-crypto 1.0.8 (this bump) now ships
`constantTimeEqual` with its own constant-time fallback when the crypto
polyfill lacks `timingSafeEqual`, so the shim is redundant.

The shim also caused a production-only blank renderer after this bump: its
`export *` + `export default` compiled to a namespace getter
(`get default(){ return cryptoBrowserify }`) that was invoked during chunk
init before the `cryptoBrowserify` const initialized — a temporal-dead-zone
ReferenceError that aborted the renderer bundle (window opened, blank white).
Deleting the shim and restoring the direct `crypto: 'crypto-browserify'`
alias resolves it.

Verified: production build renders (MPC SDK init + renderer IPC), zero TDZ;
lint + wallet tests pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(swap): route quotes through Liquify primary, public nodes as fallback

The public THORChain/MAYAChain endpoints (thornode/midgard.thorchain.network,
mayanode/midgard.mayachain.info) are frequently slow or unresolvable. xchainjs
lists them FIRST and only falls back to Liquify, so every request storms the
dead host (console-error spam) and the methods that don't fail over break.

Configure the swap Aggregator (new in xchain-aggregator 2.5.0) with explicit
Liquify-primary endpoints for both protocols — thornodeConfig, midgardConfig,
mayanodeConfig, mayaMidgardConfig — at both config sites (initial `new
Aggregator` in slice.ts and runtime `setConfiguration` in actions.ts). Shared
helper in helpers/liquifyEndpoints.ts; mainnet only (other networks keep xchainjs
defaults). ThorchainQueryContext reuses the same LIQUIFY_THORNODE_URLS so both
quote paths behave consistently.

Depends on the aggregator 2.5.0 bump in this PR (the *Config hooks don't exist
in 2.4.0).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix trunk issue

* fix(thorchain): init ThorchainQuery from active network, not hardcoded mainnet

Addresses CodeRabbit review on #1140: the initial useState hardcoded
Network.Mainnet, so a persisted Stagenet session could issue an initial query
against Mainnet before the network subscription replaced the cache. Use
getCurrentNetworkState() to match the aggregator slice.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: underthesun49

electron.vite.config.mjs

@@ -83,9 +83,7 @@ export default defineConfig(async ({ mode }) => {
         alias: {
           process: 'process/browser',
           stream: 'stream-browserify',
-          // Shim wraps crypto-browserify and adds `timingSafeEqual` (missing in
-          // the browser polyfill) so xchain-crypto >= 1.0.7 keystore decrypt works.
-          crypto: path.resolve(__dirname, 'src/shims/crypto-shim.js'),
+          crypto: 'crypto-browserify',
           assert: 'assert',
           path: path.resolve(__dirname, 'empty.js'),
           url: path.resolve(__dirname, 'empty.js'),

package.json

@@ -80,42 +80,42 @@
     "@reduxjs/toolkit": "^2.3.0",
     "@tanstack/react-table": "^8.21.3",
     "@vultisig/sdk": "0.22.5",
-    "@xchainjs/xchain-aggregator": "2.4.0",
-    "@xchainjs/xchain-arbitrum": "2.1.5",
-    "@xchainjs/xchain-avax": "2.0.19",
-    "@xchainjs/xchain-base": "1.0.19",
-    "@xchainjs/xchain-bitcoin": "2.2.7",
-    "@xchainjs/xchain-bitcoincash": "2.2.8",
-    "@xchainjs/xchain-bsc": "2.0.20",
-    "@xchainjs/xchain-cardano": "1.2.2",
-    "@xchainjs/xchain-client": "2.0.15",
-    "@xchainjs/xchain-cosmos": "3.0.15",
-    "@xchainjs/xchain-crypto": "1.0.7",
-    "@xchainjs/xchain-dash": "2.2.7",
-    "@xchainjs/xchain-doge": "2.2.7",
-    "@xchainjs/xchain-ethereum": "2.0.20",
-    "@xchainjs/xchain-evm": "2.0.19",
-    "@xchainjs/xchain-evm-providers": "2.0.18",
-    "@xchainjs/xchain-kujira": "2.0.15",
-    "@xchainjs/xchain-litecoin": "2.3.4",
-    "@xchainjs/xchain-mayachain": "4.1.6",
-    "@xchainjs/xchain-mayachain-query": "2.2.1",
+    "@xchainjs/xchain-aggregator": "2.5.0",
+    "@xchainjs/xchain-arbitrum": "2.1.6",
+    "@xchainjs/xchain-avax": "2.0.20",
+    "@xchainjs/xchain-base": "1.0.20",
+    "@xchainjs/xchain-bitcoin": "2.3.0",
+    "@xchainjs/xchain-bitcoincash": "2.3.0",
+    "@xchainjs/xchain-bsc": "2.0.21",
+    "@xchainjs/xchain-cardano": "1.2.3",
+    "@xchainjs/xchain-client": "2.0.16",
+    "@xchainjs/xchain-cosmos": "3.0.16",
+    "@xchainjs/xchain-crypto": "1.0.8",
+    "@xchainjs/xchain-dash": "2.2.8",
+    "@xchainjs/xchain-doge": "2.3.0",
+    "@xchainjs/xchain-ethereum": "2.0.21",
+    "@xchainjs/xchain-evm": "2.0.20",
+    "@xchainjs/xchain-evm-providers": "2.0.19",
+    "@xchainjs/xchain-kujira": "2.0.16",
+    "@xchainjs/xchain-litecoin": "2.4.0",
+    "@xchainjs/xchain-mayachain": "4.1.7",
+    "@xchainjs/xchain-mayachain-query": "2.2.2",
     "@xchainjs/xchain-mayamidgard": "1.1.3",
     "@xchainjs/xchain-mayanode": "1.2.3",
     "@xchainjs/xchain-midgard": "1.1.3",
-    "@xchainjs/xchain-radix": "2.0.16",
-    "@xchainjs/xchain-ripple": "1.0.17",
-    "@xchainjs/xchain-solana": "1.1.7",
-    "@xchainjs/xchain-sui": "0.1.4",
-    "@xchainjs/xchain-thorchain": "3.0.19",
-    "@xchainjs/xchain-thorchain-query": "3.1.1",
-    "@xchainjs/xchain-thornode": "1.2.1",
-    "@xchainjs/xchain-tron": "3.0.8",
+    "@xchainjs/xchain-radix": "2.0.17",
+    "@xchainjs/xchain-ripple": "1.0.18",
+    "@xchainjs/xchain-solana": "1.1.8",
+    "@xchainjs/xchain-sui": "0.1.5",
+    "@xchainjs/xchain-thorchain": "3.0.20",
+    "@xchainjs/xchain-thorchain-query": "3.1.2",
+    "@xchainjs/xchain-thornode": "1.2.2",
+    "@xchainjs/xchain-tron": "3.0.9",
     "@xchainjs/xchain-util": "2.0.7",
-    "@xchainjs/xchain-utxo": "2.2.7",
-    "@xchainjs/xchain-utxo-providers": "2.0.17",
-    "@xchainjs/xchain-wallet": "2.0.30",
-    "@xchainjs/xchain-zcash": "1.3.8",
+    "@xchainjs/xchain-utxo": "2.2.8",
+    "@xchainjs/xchain-utxo-providers": "2.1.0",
+    "@xchainjs/xchain-wallet": "2.0.31",
+    "@xchainjs/xchain-zcash": "1.3.9",
     "axios": "1.16.1",
     "bignumber.js": "^10.0.1",
     "clsx": "^2.1.1",

src/renderer/contexts/ThorchainQueryContext.tsx

@@ -1,8 +1,20 @@
 import React, { createContext, useContext, useEffect, useState } from 'react'
 
+import { Network } from '@xchainjs/xchain-client'
 import { ThorchainCache, ThorchainQuery, Thornode } from '@xchainjs/xchain-thorchain-query'
 
-import { clientNetwork$ } from '../services/app/service'
+import { LIQUIFY_THORNODE_URLS } from '../helpers/liquifyEndpoints'
+import { clientNetwork$, getCurrentNetworkState } from '../services/app/service'
+
+// Prefer the Liquify gateway over the public THORNode for mainnet quotes — the
+// xchainjs default lists `thornode.thorchain.network` first and only falls back
+// to Liquify. Keeps the same "Liquify primary" behaviour as the swap aggregator
+// (see helpers/liquifyEndpoints). Other networks keep the library defaults
+// (stagenet has no URLs, testnet is deprecated).
+const createThornode = (network: Network): Thornode =>
+  network === Network.Mainnet
+    ? new Thornode(network, { apiRetries: 3, thornodeBaseUrls: LIQUIFY_THORNODE_URLS })
+    : new Thornode(network)
 
 // Define the type of the context value here
 interface ThorchainQueryContextValue {
@@ -14,13 +26,15 @@ const ThorchainQueryContext = createContext<ThorchainQueryContextValue | null>(n
 
 // Provider component
 export const ThorchainQueryProvider = ({ children }: { children: React.ReactNode }) => {
-  const [thorchainQuery, setThorchainQuery] = useState<ThorchainQuery>(new ThorchainQuery())
+  const [thorchainQuery, setThorchainQuery] = useState<ThorchainQuery>(
+    () => new ThorchainQuery(new ThorchainCache(createThornode(getCurrentNetworkState())))
+  )
 
   useEffect(() => {
     // Subscribe to network$ observable
     const subscription = clientNetwork$.subscribe((network) => {
       // Create a new ThorchainQuery with the updated network
-      const thorchainCache = new ThorchainCache(new Thornode(network))
+      const thorchainCache = new ThorchainCache(createThornode(network))
       setThorchainQuery(new ThorchainQuery(thorchainCache))
     })
 

src/renderer/helpers/liquifyEndpoints.ts

@@ -0,0 +1,41 @@
+import { Network } from '@xchainjs/xchain-client'
+
+// Prefer the Liquify gateway over the public THORChain / MAYAChain endpoints.
+//
+// The xchainjs defaults list the public nodes (thornode.thorchain.network,
+// midgard.thorchain.network, mayanode.mayachain.info, midgard.mayachain.info)
+// FIRST and only fall back to Liquify. When the public nodes are slow or down —
+// as they regularly are — every request storms the dead host first (a wall of
+// console errors), and the methods that don't fail over (e.g. getQueue) break
+// outright. Making Liquify primary avoids that while keeping the public nodes as
+// a fallback.
+//
+// Mainnet only: stagenet/testnet keep the xchainjs network defaults.
+export const LIQUIFY_THORNODE_URLS = [
+  'https://gateway.liquify.com/chain/thorchain_api',
+  'https://thornode.thorchain.network'
+]
+const LIQUIFY_MIDGARD_URLS = [
+  'https://gateway.liquify.com/chain/thorchain_midgard',
+  'https://midgard.thorchain.network'
+]
+const LIQUIFY_MAYANODE_URLS = ['https://api-maya.liquify.com', 'https://mayanode.mayachain.info']
+const LIQUIFY_MAYA_MIDGARD_URLS = ['https://midgard-maya.liquify.com', 'https://midgard.mayachain.info']
+
+const API_RETRIES = 3
+
+/**
+ * Endpoint overrides for `@xchainjs/xchain-aggregator` — Liquify primary, public
+ * node fallback — covering both the Thorchain (thornode + midgard) and Mayachain
+ * (mayanode + maya midgard) protocols. Returns `{}` for non-mainnet networks so
+ * the aggregator keeps its own network defaults.
+ */
+export const liquifyAggregatorConfig = (network: Network) =>
+  network === Network.Mainnet
+    ? {
+        thornodeConfig: { apiRetries: API_RETRIES, thornodeBaseUrls: LIQUIFY_THORNODE_URLS },
+        midgardConfig: { apiRetries: API_RETRIES, midgardBaseUrls: LIQUIFY_MIDGARD_URLS },
+        mayanodeConfig: { apiRetries: API_RETRIES, mayanodeBaseUrls: LIQUIFY_MAYANODE_URLS },
+        mayaMidgardConfig: { apiRetries: API_RETRIES, midgardBaseUrls: LIQUIFY_MAYA_MIDGARD_URLS }
+      }
+    : {}

src/renderer/store/aggregator/actions.ts

@@ -22,6 +22,7 @@ import {
   ASGARDEX_ONECLICK_API_KEY
 } from '../../../shared/const'
 import { defaultEthParams } from '../../../shared/ethereum/const'
+import { liquifyAggregatorConfig } from '../../helpers/liquifyEndpoints'
 import { logger } from '../../helpers/logger'
 
 export const getEstimate = createAsyncThunk(
@@ -104,6 +105,7 @@ export const getEstimate = createAsyncThunk(
         wallet,
         network,
         affiliateBrokers,
+        ...liquifyAggregatorConfig(network),
         ...(brokerUrl && { brokerUrl }), // Only include brokerUrl if it's non-empty
         ...(ASGARDEX_ONECLICK_API_KEY && { oneClickApiKey: ASGARDEX_ONECLICK_API_KEY })
       }

src/renderer/store/aggregator/slice.ts

@@ -20,6 +20,7 @@ import {
   ASGARDEX_ONECLICK_API_KEY
 } from '../../../shared/const'
 import { defaultEthParams } from '../../../shared/ethereum/const'
+import { liquifyAggregatorConfig } from '../../helpers/liquifyEndpoints'
 import { logger } from '../../helpers/logger'
 import { getProtocolFromStorage, setValueToStorage, StorageKey } from '../../helpers/storage'
 import { getCurrentNetworkState } from '../../services/app/service'
@@ -87,6 +88,7 @@ const initialState: State = {
     network: getCurrentNetworkState(),
     brokerUrl: getBrokerUrl(),
     affiliateBrokers: getAffiliateBrokers(),
+    ...liquifyAggregatorConfig(getCurrentNetworkState()),
     ...(ASGARDEX_ONECLICK_API_KEY && { oneClickApiKey: ASGARDEX_ONECLICK_API_KEY })
   }),
   quoteSwap: null