PREVIEW: feat(APP-1099): Safe account impl

.changeset/safe-account-read-view.md

@@ -0,0 +1,5 @@
+---
+"@aragon/app": minor
+---
+
+Add a read-only Safe account view at `/safe/{network}/{address}` showing owners, threshold, version, nonce, the live pending queue and balances

.changeset/safe-account-writes.md

@@ -0,0 +1,5 @@
+---
+"@aragon/app": minor
+---
+
+Let Safe owner wallets submit gasless approval or veto signatures from SPP proposal body cards and execute the report once the Safe threshold is reached

.changeset/safe-body-card.md

@@ -0,0 +1,5 @@
+---
+"@aragon/app": minor
+---
+
+Show live Safe owners, signature progress, nonces and superseded result reports inside SPP proposal body cards

.changeset/safe-tx-service-data-layer.md

@@ -0,0 +1,5 @@
+---
+"@aragon/app": none
+---
+
+Add the Safe transaction service data layer: a keyed `/api/safe` proxy route and the `safeService` queries for Safe info, live queue and balances

apps/app/.env.example

@@ -13,6 +13,10 @@ NEXT_SECRET_DRPC_RPC_KEY=YOUR_VALUE_HERE
 # Api key for connecting to the Aragon backend service
 NEXT_SECRET_ARAGON_BACKEND_API_KEY=YOUR_VALUE_HERE
 
+# Api key for the Safe transaction service, sent as an Authorization Bearer header by the
+# /api/safe proxy route (see https://docs.safe.global/core-api/how-to-use-api-keys)
+NEXT_SECRET_SAFE_API_KEY=YOUR_VALUE_HERE
+
 # Envio API key and endpoint
 NEXT_SECRET_ENVIO_GRAPHQL_ENDPOINT=YOUR_VALUE_HERE
 NEXT_SECRET_ENVIO_API_TOKEN=YOUR_VALUE_HERE

apps/app/package.json

@@ -42,6 +42,8 @@
         "@reown/appkit": "^1.8.23",
         "@reown/appkit-adapter-wagmi": "^1.8.23",
         "@reown/walletkit": "^1.5.6",
+        "@safe-global/protocol-kit": "^8.0.6",
+
         "@sentry/core": "^10.70.0",
         "@sentry/nextjs": "^10.70.0",
         "@tanstack/react-query": "catalog:",

apps/app/src/app/api/safe/[chainId]/[...path]/route.ts

@@ -0,0 +1,4 @@
+import { proxySafeUtils } from '@/modules/application/utils/proxySafeUtils';
+
+export const GET = proxySafeUtils.request;
+export const POST = proxySafeUtils.request;

apps/app/src/app/safe/[network]/[address]/page.tsx

@@ -0,0 +1,27 @@
+import { notFound } from 'next/navigation-original';
+import { SafeAccountPage } from '@/modules/safe/pages/safeAccountPage';
+import type { ISafeAccountPageParams } from '@/modules/safe/types';
+import { networkUtils } from '@/shared/utils/networkUtils';
+
+interface ISafePageProps {
+    /**
+     * Safe account route parameters.
+     */
+    params: Promise<ISafeAccountPageParams>;
+}
+
+// `next/navigation` is aliased to the app's client-side wrapper, so the server helpers are
+// imported from `next/navigation-original`.
+const SafePage = async (props: ISafePageProps) => {
+    const { network, address } = await props.params;
+
+    // A malformed network is a missing page, never a server error. The address is normalised to
+    // its checksum in the client page, matching how the DAO page resolves its parameters.
+    if (!networkUtils.isValidNetwork(network)) {
+        notFound();
+    }
+
+    return <SafeAccountPage address={address} network={network} />;
+};
+
+export default SafePage;

apps/app/src/assets/locales/en.json

@@ -3134,6 +3134,72 @@
           "entity": "Votes"
         }
       },
+      "safeMultisig": {
+        "safeMultisigGovernanceSettings": {
+          "approvalRule": "Approval rule",
+          "owners": "Owners",
+          "threshold": "{{min}} of {{max}} owners",
+          "unknownVersion": "Unknown",
+          "version": "Safe version",
+          "vetoRule": "Veto rule"
+        },
+        "safeMultisigProposalVotingBreakdown": {
+          "details": {
+            "safeNonce": "Safe nonce",
+            "transactionNonce": "Transaction nonce",
+            "unavailable": "Not available",
+            "unknown": "Unknown",
+            "version": "Safe version"
+          },
+          "error": "Safe state could not be loaded. Try again later.",
+          "loading": "Loading Safe state…",
+          "partialError": "The pending transaction state could not be refreshed.",
+          "report": {
+            "approval": {
+              "executed": "Approved and executed",
+              "pending": "Approval pending — {{count}} of {{required}}",
+              "superseded": "Approval superseded — {{count}} of {{required}}"
+            },
+            "none": {
+              "executed": "No result executed",
+              "pending": "No-result report pending — {{count}} of {{required}}",
+              "superseded": "No-result report superseded — {{count}} of {{required}}"
+            },
+            "nonePending": {
+              "approval": "No approval submitted yet",
+              "veto": "No veto submitted yet"
+            },
+            "veto": {
+              "executed": "Vetoed and executed",
+              "pending": "Veto pending — {{count}} of {{required}}",
+              "superseded": "Veto superseded — {{count}} of {{required}}"
+            }
+          },
+          "signers": {
+            "empty": "No owner has signed this report yet.",
+            "title": "Signers ({{count}})"
+          },
+          "tag": {
+            "competition": "Competing transaction",
+            "superseded": "Superseded",
+            "youSigned": "You have signed"
+          },
+          "viewSafeAccount": "View Safe account"
+        },
+        "safeMultisigSubmitVote": {
+          "approve": "Approve proposal",
+          "approved": "Approved",
+          "error": "The Safe action could not be completed. Try again.",
+          "executeApproval": "Execute approval",
+          "executeVeto": "Execute veto",
+          "ownerRequired": "Connect an owner wallet for this Safe to continue.",
+          "unknownVersion": "unknown",
+          "versionUnsupported": "Contract-owner signatures require Safe v1.4.1 or newer. This Safe is {{version}}.",
+          "veto": "Veto proposal",
+          "vetoed": "Vetoed",
+          "waitingForOwners": "Your signature is submitted. Waiting for the remaining Safe owners."
+        }
+      },
       "spp": {
         "advanceStageDialog": {
           "button": {
@@ -3208,7 +3274,6 @@
           "approve": "Approve proposal",
           "approved": "Approved",
           "helpText": "If you are an owner of this address you can connect with WalletConnect to vote on this proposal.",
-          "helpTextSafe": "To approve this proposal from the Safe{Wallet} UI, add Aragon as a custom Safe App or connect directly with a WalletConnect QR code.",
           "veto": "Veto proposal",
           "vetoed": "Vetoed"
         },
@@ -3596,6 +3661,85 @@
         }
       }
     },
+    "safe": {
+      "safeAccountPage": {
+        "aside": {
+          "details": {
+            "address": "Address",
+            "chain": "Chain",
+            "nonce": "Nonce",
+            "threshold": "Threshold",
+            "thresholdValue": "{{threshold}} of {{owners}}",
+            "title": "Details",
+            "unknown": "Unknown",
+            "version": "Version"
+          }
+        },
+        "header": {
+          "description": "A read-only view of this Safe: its owners, signing threshold, contract version, nonce, queued transactions and balances."
+        },
+        "main": {
+          "assets": {
+            "title": "Assets"
+          },
+          "owners": {
+            "title": "Owners"
+          },
+          "pending": {
+            "description": "Transactions waiting to be executed. Transactions below the current nonce can never execute and are not shown.",
+            "title": "Pending transactions"
+          }
+        },
+        "stats": {
+          "nonce": "Nonce",
+          "owners": "Owners",
+          "threshold": "Threshold",
+          "thresholdSuffix": "of {{owners}}"
+        },
+        "unsupportedNetwork": {
+          "description": "Safe does not run a transaction service on {{network}}, so this Safe cannot be read here.",
+          "heading": "Not supported on this network"
+        }
+      },
+      "safeBalanceList": {
+        "empty": {
+          "description": "This Safe does not hold any assets yet.",
+          "heading": "No assets"
+        },
+        "entity": "Assets",
+        "error": {
+          "description": "The balances of this Safe could not be loaded. Please try again later.",
+          "heading": "Unable to load assets"
+        }
+      },
+      "safeOwnerList": {
+        "empty": {
+          "description": "No owners were reported for this Safe.",
+          "heading": "No owners"
+        },
+        "entity": "Owners",
+        "error": {
+          "description": "The owners of this Safe could not be loaded. Please try again later.",
+          "heading": "Unable to load owners"
+        }
+      },
+      "safePendingTransactionList": {
+        "empty": {
+          "description": "This Safe has no transactions waiting to be executed.",
+          "heading": "No pending transactions"
+        },
+        "entity": "Transactions",
+        "error": {
+          "description": "The pending transactions of this Safe could not be loaded. Please try again later.",
+          "heading": "Unable to load pending transactions"
+        },
+        "item": {
+          "confirmations": "{{count}} of {{required}} confirmations",
+          "nonce": "Nonce {{nonce}}",
+          "submittedOn": "Submitted {{date}}"
+        }
+      }
+    },
     "settings": {
       "daoPluginInfo": {
         "bodyName": "Body name",

apps/app/src/modules/application/utils/proxySafeUtils/index.ts

@@ -0,0 +1,6 @@
+import { ProxySafeUtils } from './proxySafeUtils';
+
+// The singleton asserts the server-side Safe key at boot, so this barrel is server-only. Client
+// code that needs the chain coverage table imports `./safeTxServiceNetworks` directly.
+export const proxySafeUtils = new ProxySafeUtils();
+export type { ISafeRequestParams } from './proxySafeUtils';