-
Notifications
You must be signed in to change notification settings - Fork 324
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CIP-0106? | Web-Wallet Bridge - Multisig wallets #617
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Couple of minor housekeeping suggestions here and I will expand on my thoughts in aggregate in a separate comment.
CIP-130/README.md
Outdated
|
||
##### Should extensions follow a specific format? | ||
|
||
Yes. They all are CIPs. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could use a bit more prose here to explain that authors wishing to extend this format should submit a new CIP and what the criteria should be for consideration by wallets to implement said extensions.
window.cardano.broclan.enable([130])
|
Co-authored-by: Adam Dean <[email protected]>
Co-authored-by: Adam Dean <[email protected]>
Multisig Wallets cannot implement CIP-30 since it is impossible to implement the api.signTx() and api.signData() endpoints. Implementing it as an extension of CIP-30 will lead to broken applications that try to connect to the multisig wallets and use them as if they are regular wallets.
The wallet is responsible for passing the transactions among the participants, gathering the signatures, composing the final transaction and submitting it on chain, dApps need to keep track of transactions only when hidden metadata is included (only the hash is provided) since in that scenario the wallet does not have all the required information to submit the transaction The functionality you are asking is already with "importTransaction" included with "submitUnsignedTx"
Done, thank you for the clarification and sorry for the confusion. |
@leo42 I look forward to reading this in more detail for content. In the meantime #617 (comment) is right that we can't allow choosing CIP numbers in the present, let alone reserving them for the future: it would require a conflict resolution system that would be unmanageable because of several technical & human factors. I have to rename it in the PR title in the meantime to avoid confusion, and also remove the redundant word "Cardano". I'm also assuming based on a quick review that, while the API strongly resembles CIP-0030, that this is a completely separate API to CIP-0030, and is therefore not an extension to it... please let me know if I'm wrong about that. cc @Ryun1 |
@rphair you are right, as I explained in the previous commend :
So calling it an extension is confusing. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(#617 (comment)) What is the rationale here to "replicate" the existing CIP-0030 functionality for web wallets under a new global-level namespace rather than simply creating the handful of new API calls as an extension to CIP-0030 itself? i.e.
window.cardano.broclan.enable([130])
I would first want to seriously consider this issue on both sides... on general principle (I'm not a wallet or dApp developer) I can't imagine going forward with this as written due to practically everything from CIP-0030 being duplicated & therefore prone to divergence: not only in the documentation, but even worse in behavioural inconsistencies between conventional & multisig wallets.
I agree with that I think @Crypto2099 is suggesting: that the CIP call only for whatever minimum of functional differences is required by the multisigs.
If @leo42 it is a widespread problem that people are connecting with the wrong type of wallets then shouldn't we be able to settle on a definitive way of handling that though an initial query... even if some changes are necessary to CIP-0030 to support this?
I've put this on the Triage list for our upcoming CIP meeting (https://hackmd.io/@cip-editors/76) ... please @leo42 come to the meeting if you can, to help us all agree on the best footing to proceed with this 😎
CIP-XXXX/README.md
Outdated
- [ ] Provide some reference implementation of wallet providers | ||
- [leo42/BroClanWallet] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- [ ] Provide some reference implementation of wallet providers | |
- [leo42/BroClanWallet] | |
- [ ] Completed reference implementation ([leo42/BroClanWallet](https://github.com/leo42/BroClanWallet)) |
(continuing #617 (comment)) Hard to tell whether "BroClan Wallet" is a working implementation because of the ambiguous language... where do you still have yet to "provide" a reference implementation? in the CIP, or in software?
p.s. edit: added suggestion to answer #617 (comment)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In software, I am making the CIP first to have a "blueprint" of sorts for the work that need to be done on the code.
I will be creating a reference implementation in BroClanWallet, its the next thing on the work agenda.
I am not sure how to mark that to make it more understandable.
I expect the implementation to be completed in ~1 month.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sure, I've updated the code highlight above with my suggestion... removing some extra language and unnecessary nesting.
If adoption by other wallet providers is a part of your Implementation Plan, please add some more checkboxes with the adoption plan as you see it. 🤓
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am in contact with the Gamechanger and ADAO devs trying to get them onboard.
Co-authored-by: Robert Phair <[email protected]>
Co-authored-by: Robert Phair <[email protected]>
You are correct, implementing as an extension would would lead to problems and it is
@rphair I will be happy to attend if you provide a meeting link. |
Discord server (CIP Editors Meetings) invitation: https://discord.gg/JtWfD4hqgz |
I disagree with the premise on principle. It would be quite trivial for a multi-sig wallet to only allow Either solution would require major overhauls for all existing dApps to account for and handle multisig wallets so it's not really a matter of one being "easier" for the dApp ecosystem to handle or not, but by making this a multisig-specific extension to CIP-30 we have less concern about maintaining feature parity when there are naturally extensions or modifications to CIP-30. |
I agree that maintainability will be easier if it is implemented as an
extension, and I did not consider simply rejecting connections that do not
contain the extension number.
But it will still require some changes to CIP-30 since its specifications
say that all the base endpoints need to be supported and extensions only
add new endpoints.
Can I add changes to another CIP as part of a single pull request ?
p.s. I know Mlabs is supposed to do a rework of CIP-30 but they have not
come back to me yet about coordinating on that front.
…On Sun, Nov 12, 2023 at 6:12 AM Adam Dean ***@***.***> wrote:
1. What is the rationale here to "replicate" the existing CIP-0030
functionality for web wallets under a new global-level namespace rather
than simply creating the handful of new API calls as an extension to
CIP-0030 itself? i.e.
window.cardano.broclan.enable([130])
Multisig Wallets cannot implement CIP-30 since it is impossible to
implement the api.signTx() and api.signData() endpoints. Implementing it as
an extension of CIP-30 will lead to broken applications that try to connect
to the multisig wallets and use them as if they are regular wallets.
I disagree with the premise on principle. It would be quite trivial for a
multi-sig wallet to only allow enable calls if the cip-130 (I know we've
agreed to change the number but we'll use it for example here) extension is
enabled and otherwise throw an error similar to not having a dApp account
selected.
Either solution would require major overhauls for all existing dApps to
account for and handle multisig wallets so it's not really a matter of one
being "easier" for the dApp ecosystem to handle or not, but by making this
a multisig-specific extension to CIP-30 we have less concern about
maintaining feature parity when there are naturally extensions or
modifications to CIP-30.
—
Reply to this email directly, view it on GitHub
<#617 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABBLGXOWBT56WKJYEBKJCVDYEBEBHAVCNFSM6AAAAAA7HAZAVKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMBWHE4TMMZQGI>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Yes, this is common when a CIP requires changes to data structure like the registry tables in CIP-0010 & CIP-0067. But I don't know of any examples where one CIP PR has made fundamental changes to another prerequisite CIP ... which I think we are considering here. Generally I think these types of problems are best dealt with through versioning: e.g. "v1 of CIP-0030 doesn't discriminate properly between conventional & multisig wallets, but v2 will according to CIP-0130" (again, naming this informally). Regardless of exactly how CIP-0030 might be versioned or extended, I believe this PR for this proposal alone should be fully reviewed & merged first.... documenting any dependencies upon further modifications to CIP-0030 in its Path to Active but without modifying CIP-0030 itself... before any future PR to extend or version bump CIP-0030. Otherwise I can imagine a serious delay in adopting multisig capability as described here because of uncertainty about breaking changes. |
Hey @leo42 Thanks for this proposal. Although, copying CIP30 endpoints under a new namespace I feel is a mistake. Looking forward to seeing how this proposal progresses. |
Having the base endpoints be |
Yes, in most cases dApps are built using plutus and we need to make special
provisions since Native Scripts cannot provide collateral.
…On Tue, Nov 14, 2023, 10:37 AM Vladimir Kalnitsky ***@***.***> wrote:
***@***.**** commented on this pull request.
------------------------------
In CIP-XXXX/README.md
<#617 (comment)>
:
> +License: CC-BY-4.0
+---
+
+## Abstract
+
+This document describes a webpage-based communication bridge allowing webpages (i.e. dApps) to interface with Cardano Multisig-wallets. It follows the specification format of CIP-30 as it attempts to make implementing this connector as easy as possible for applications that have already successfully implemented CIP-30. This document is a work in progress and is not yet finalized. It is expected to be updated as the ecosystem evolves.
+
+
+## Motivation: why is this CIP necessary?
+
+In order to facilitate future dApp development, we will need a way for dApps to communicate with multisig wallets, given the unique complexities of native script based address special provisions need to be made to make the connector compatible with them.
+
+Specifically apps building transactions need to be able to get the following information from the wallet:
+- Script descriptor
+- Script Requirements list
+- Collateral donator (since native script based addresses cannot provide collateral for transactions)
Is this for the case when there are plutus scripts as well as native
scripts present? Because native scripts don't require collateral.
—
Reply to this email directly, view it on GitHub
<#617 (review)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABBLGXMNNPWLW3CZSGFMXBDYEMUSXAVCNFSM6AAAAAA7HAZAVKVHI2DSMVQWIX3LMV43YUDVNRWFEZLROVSXG5CSMV3GSZLXHMYTOMRZGE3TENJZHA>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't understand why is it needed to return the native script contents to dApps. As I see it, dApps should be able to work with native script addresses just fine without ever knowing who are the signatories. I think the answer to this should be in the motivation section.
When calling getCollateral, the wallet can return any of the UTxOs controlled by some of the parties as well.
The only real problem that I see in CIP-30 is that gathering of signatures can take a long time and promise-based API does not play well with page reloads.
If you create a transaction without knowing the exact signers you will not
be able to calculate the fees correctly.
Also including the correct "required signers" brings UX improvements, and
you need to know if the script has any before-after requirements to set the
correct validBefore and TTL values.
Transactions consuming inputs from a native script address need to attach
the script.
|
I have reworked and renamed the proposal to be a CIP-30 extension. This will provide greater maintainability and backwards compatibility as CIP-30 continues to be updated and developed. |
thanks @leo42, that definitely reflects the intentions of the CIP Editors' meeting today... @Ryun1 @Crypto2099 if you agree this is now properly integrated as an CIP-0030 extension, then I think it would be good to have on the agenda again next CIP meeting (# 77) to confirm the scope & keep it moving forward. |
Co-authored-by: Ryan <[email protected]>
Co-authored-by: Ryan <[email protected]>
Yes we are fully compatible with this. I will build a dRrep management and registration portal using the connector so all users of BroCllan(and other providers that implement it) have the ability to participate in governance .(when I find some time ) |
Co-authored-by: Ryan <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@leo42 I'm ready to approve this after 1) adjusting the Implementors:
as below and 2) fixing the section headings & content as requested in #617 (comment) ... as both you & I already have for your earlier 2 CIPs (103, 104) which follow the same form.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@leo42 after compliance with the last round of recommendations I think this is sound enough to merge, pending @Crypto2099's final review for technical foundation + document clarity for potential implementors.
This has been at Last Check
for a while, which we will again revisit in 3 days as per meeting agenda https://hackmd.io/@cip-editors/91.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Given that no further issues have been raised and the author also feels that this is in a state that is satisfactory, I see no blockers to prevent this from being merged in and continuing on its path to active.
A new connector specification that will allow dApps to connect with multisig wallets. And enable defi for DAOs and security conscious users.
The structure of this CIP follows CIP-30 as close as possible, to make integration by applications already using CIP-30 easy and streamlined.
I am requesting the number 130 for this CIP to make the affiliation with CIP-30 clear and easy for dev's to remember and search for. (planning on making Plutus-powered-wallet connector under CIP-230 in the future)
Rendered Version