refactor(aptos): use CoinGecko tokenlist for asset generation

Replaces the bespoke Panora-based fetcher with the same CoinGecko
tokenlist pattern used by every other non-EVM chain (Solana, Sui,
Near, Ton, Tron). Removes the VITE_PANORA_API_KEY requirement from
the asset generation pipeline.

CoinGecko exposes two different platform slugs for Aptos: their
/api/v3 endpoints (and our CoinGecko adapter) use 'aptos-network',
but the static tokenlist at tokens.coingecko.com only responds to
'aptos' ('aptos-network' returns 403 there). Hardcoded the right
slug in scripts/generateAssetData/coingecko.ts to keep the existing
'aptos-network' adapter value untouched for API consumers.

Verified `pnpm run generate:chain aptos` returns 70 assets from
CoinGecko without any API key.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: swdiscordia

scripts/generateAssetData/aptos/index.ts

@@ -1,81 +1,27 @@
-import { aptosChainId, ASSET_NAMESPACE, toAssetId } from '@shapeshiftoss/caip'
+import { aptosChainId } from '@shapeshiftoss/caip'
 import type { Asset } from '@shapeshiftoss/types'
 import { aptos, unfreeze } from '@shapeshiftoss/utils'
-import axios from 'axios'
 import uniqBy from 'lodash/uniqBy'
 
-const PANORA_API_BASE = 'https://api.panora.exchange'
+import * as coingecko from '../coingecko'
 
-// Aptos has no public CoinGecko token list (their tokens endpoint returns 403),
-// so we use Panora's tokenlist as the source of truth for tradeable assets.
-// Panora is the DEX aggregator we integrate with, so this matches what users can swap.
-
-type PanoraToken = {
-  chainId: number
-  tokenAddress: string | null
-  faAddress: string | null
-  name: string
-  symbol: string
-  decimals: number
-  logoUrl: string | null
-  panoraUI: boolean
-  panoraTags: string[] | null
-  isBanned: boolean
-}
-
-type PanoraResponse = { status: string; data: PanoraToken[] } | PanoraToken[]
-
-// Trusted tag set — excludes "Emojicoin" / "Meme"-only spam.
-// Per Panora's taxonomy: Native/Verified are official, Bridged is canonical cross-chain
-// (e.g. LayerZero USDC), Recognized/RWA cover BUIDL etc.
-const TRUSTED_TAGS = new Set(['Verified', 'Recognized', 'RWA', 'Bridged'])
-
-const fetchPanoraTokens = async (): Promise<Asset[]> => {
-  const apiKey = process.env.VITE_PANORA_API_KEY
-  if (!apiKey) throw new Error('Missing VITE_PANORA_API_KEY - source ~/.zshrc or set it')
+export const getAssets = async (): Promise<Asset[]> => {
+  const results = await Promise.allSettled([coingecko.getAssets(aptosChainId)])
 
-  const { data } = await axios.get<PanoraResponse>(`${PANORA_API_BASE}/tokenlist`, {
-    headers: { 'x-api-key': apiKey },
-    timeout: 30000,
+  const [assets] = results.map(result => {
+    if (result.status === 'fulfilled') return result.value
+    console.error(result.reason)
+    return []
   })
 
-  const tokens = Array.isArray(data) ? data : data.data
-
-  return tokens
-    .filter(t => t.panoraUI && !t.isBanned)
-    .filter(t => (t.panoraTags ?? []).some(tag => TRUSTED_TAGS.has(tag)))
-    .filter(t => Boolean(t.faAddress || t.tokenAddress))
-    .filter(t => t.tokenAddress !== '0x1::aptos_coin::AptosCoin' && t.faAddress !== '0xa')
-    .map(token => {
-      // Prefer faAddress (modern Aptos Fungible Asset standard, universally supported by Panora).
-      // Falls back to tokenAddress for legacy coin-standard-only tokens.
-      const assetReference = (token.faAddress ?? token.tokenAddress) as string
-      const assetId = toAssetId({
-        chainId: aptosChainId,
-        assetNamespace: ASSET_NAMESPACE.aptosCoin,
-        assetReference,
-      })
-      const asset: Asset = {
-        assetId,
-        chainId: aptosChainId,
-        name: token.name,
-        symbol: token.symbol,
-        precision: token.decimals,
-        color: aptos.color,
-        icon: token.logoUrl ?? '',
-        explorer: aptos.explorer,
-        explorerAddressLink: aptos.explorerAddressLink,
-        explorerTxLink: aptos.explorerTxLink,
-        relatedAssetKey: null,
-      }
-      return asset
-    })
-}
-
-export const getAssets = async (): Promise<Asset[]> => {
-  const panoraAssets = await fetchPanoraTokens()
+  // Filter out the native APT token from CoinGecko to avoid duplicates
+  // CoinGecko includes native APT both as the slip44 base asset (added manually) and
+  // as the coin-standard token (0x1::aptos_coin::AptosCoin) at the same metadata
+  // address 0xa under the aptosCoin namespace.
+  const nativeAptCoinPattern = /^aptos:[^/]+\/aptosCoin:(0x0*a|0x1::aptos_coin::AptosCoin)$/i
+  const tokensOnly = assets.filter(asset => !nativeAptCoinPattern.test(asset.assetId))
 
-  const allAssets = uniqBy(panoraAssets, 'assetId')
+  const allAssets = uniqBy(tokensOnly, 'assetId')
 
   return [unfreeze(aptos), ...allAssets]
 }

scripts/generateAssetData/coingecko.ts

@@ -448,7 +448,11 @@ export async function getAssets(chainId: ChainId): Promise<Asset[]> {
       case aptosChainId:
         return {
           assetNamespace: ASSET_NAMESPACE.aptosCoin,
-          category: adapters.chainIdToCoingeckoAssetPlatform(chainId),
+          // CoinGecko uses two different platform slugs for Aptos: their /api/v3
+          // endpoints (and our adapter) use 'aptos-network', but the static tokenlist
+          // at tokens.coingecko.com only responds to 'aptos' (the 'aptos-network'
+          // slug returns 403 there). Hardcoded to keep the token fetch working.
+          category: 'aptos',
           explorer: aptos.explorer,
           explorerAddressLink: aptos.explorerAddressLink,
           explorerTxLink: aptos.explorerTxLink,