[satran004]

A full redesign of Yaci Viewer: a modern, live explorer for a local devnet and for any Yaci Store, including Mainnet.

What's new

• App shell
  • light and dark themes in the DevKit look, with fonts bundled so it works offline
  • a collapsible sidebar grouped into Explore, Staking and Governance
  • a status badge showing the network (found from the store), tip block and whether updates are live
• Search everywhere (⌘K, /, or paste anywhere)
  • recognises blocks, transactions, addresses, stake accounts, pools, DReps, assets, policies, scripts, datums and epochs
  • ambiguous hashes are checked against the store before being offered
• Live dashboard
  • new blocks slide in, with a "next block" countdown
  • trends for block time, transactions and block load
  • a latest-transactions feed, epoch progress and ADA supply
  • uses the live-blocks WebSocket when the store has one; otherwise it polls
• Transaction page
  • an inputs → transaction → outputs flow, with change outputs marked
  • a "where the ADA went" breakdown
  • script execution budgets
  • redeemers and datums decoded from CBOR into readable trees
  • mints and burns, metadata, collateral, reference inputs, signers and raw JSON
• Every other page is rebuilt in the same style
  • blocks (← and → keys step between blocks)
  • addresses and stake accounts (with delegated pool and DRep)
  • assets (CIP-25/68), scripts and datums
  • a new Epochs section with protocol parameters
  • Ada pots, pools, delegations, rewards, withdrawals and certificates
  • governance: overview, proposals with a vote tally, DReps, votes, committee and constitution

Fixes

• Security: the governance anchor page fetched any URL server-side, which could reach internal services. It now refuses private and internal addresses, and checks them again after DNS lookup and on every redirect. It also enforces a size limit and a time budget, and compares the document's BLAKE2b-256 hash with the hash on chain. Pool metadata fetches use the same guard.
• Paging: the store's pages are 1-based, so page 2 of address, stake and similar lists showed page 1 again.
• Broken pages and data:
  • the epoch-stakes page always failed because of doubled /api/v1 paths
  • the live stats sent when the page connects (aggregate_data) were silently dropped
  • the block page showed its transaction table twice
• Docker: the image ran the Vite dev server. It is now a multi-stage production build (node build) on port 5173, with a .dockerignore.
• Config: in config/env, PUBLIC_INDEXER_CLIENT_BASE_URL now follows HOST_STORE_API_PORT.
• Redirects: old routes redirect to their new homes (/governance/govactions, /adapot, /rewards/account/[a]).

Dependencies

• Upgraded:
  • Svelte 5.16 → 5.57, to fix hydration bugs
  • SvelteKit 2.15 → 2.70
  • vite-plugin-svelte 5.1.1, adapter-node 5.5.7
• Added (dev only, pinned exactly):
  • @lucide/svelte
  • @fontsource-variable/{inter,space-grotesk,jetbrains-mono}
  • @types/node
• Removed: daisyui, moment, svelte-feather-icons, classnames, @popperjs/core
• Removed code: the unused src/routes/api proxy and old components, utilities and stores

Testing

• npx svelte-check: 0 errors, 0 warnings
• npm run test:unit: 26 passing. These cover formatting, search classification, CBOR, address and bech32 helpers, and the anchor URL guard.
• Playwright smoke tests (tests/smoke.spec.ts): 19 passing against a local devnet. The old tests/test.ts never matched Playwright's pattern, so it never ran.
• npm run build passes, and the Docker image was built and run against a devnet.
• Checked by hand in light and dark mode, at desktop and phone width:
  • against a local devnet with the WebSocket
  • against the Mainnet playground store (https://yaci-playground.cf-app.org), which has no WebSocket and uses polling

Known limits

• Public IPFS gateways often rate-limit; IPFS_GATEWAY can name a preferred (public) gateway.
• On Mainnet, an asset's transaction and UTxO tabs can time out on the store side. The error shows inside that tab.

🤖 Generated with Claude Code

[beanbot-gh]

Initial automated review · Aster

Hi @satran004, thanks for the PR! 🙏 This is an automatic first check by an AI reviewer. It does not replace maintainer review and may be wrong.

Reviewed commit: 9c1ad4a3211cd7b94820c4a38eb34737fd448edf

Issues found:

• applications/viewer/src/routes/transactions/[id]/+page.svelte:76 — The bundled Store response builder leaves invalid false, so failed-script transactions are labeled “Success”; please obtain a reliable status before asserting success.
• applications/viewer/src/lib/live/chain.svelte.ts:254 — After a devnet reset, the old higher-height blocks win this sort, leaving the dashboard on the obsolete tip; please clear or reconcile the cached chain.
• applications/viewer/src/lib/live/chain.svelte.ts:290 — When polling catches up multiple blocks, only the newest block’s transactions are fetched, so intermediate transactions never reach the feed; please fetch the full gap.
• applications/viewer/src/routes/assets/unit/[unit]/+page.server.ts:31 — The bundled Store’s holders endpoint uses zero-based pages, so this skips the first 20 holders; please send page - 1 for this endpoint.
• applications/viewer/src/routes/transactions/[id]/+page.svelte:187 — Collateral returns use amounts, but UtxoCard reads amount, so nonzero returns display zero ADA and omit native assets; please normalize this payload.

Not tested: Code was read only, not built or run. The head CI build was still running.