feat(settings): add Albion Labs tokenlist

[dcatki2]

Summary

Adds Albion Labs tokenlist to settings.yaml for R1/R2 royalty token discovery on Base.

Tokens Added

Symbol	Name	Address	Royalty
ALB-WR1-R1	Wressle-1 Community Preview	0xf836a500...	2.5% of 4.5%
ALB-WR1-R2	Wressle-1 Investor Preview	0x1d57246f...	7.5% of 4.5%

Tokenlist

• URL: https://raw.githubusercontent.com/albionlabs/tokenlist/main/albion.tokenlist.json
• Repo: https://github.com/albionlabs/tokenlist
• Format: Standard Uniswap tokenlist with extended metadata

Why

Enables Raindex users to discover and trade Albion royalty tokens (tokenized UK oil field royalties) through the registry deployment workflow.

Summary by CodeRabbit

• Chores
  • Integrated a new token list source to expand available token data and coverage.

[coderabbitai]

Walkthrough

A single token list source URL was added to the settings.yaml configuration file's using-tokens-from section, enabling the system to fetch token data from an additional remote source hosted on GitHub.

Changes

Cohort / File(s)	Summary
Configuration Update settings.yaml	Added new token list source URL (https://raw.githubusercontent.com/albionlabs/tokenlist/main/albion.tokenlist.json) to the using-tokens-from section for expanded token data integration.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: adding the Albion Labs tokenlist to settings.yaml as a new token source.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@settings.yaml`:
- Line 62: The settings.yaml contains a mutable URL reference to
"https://raw.githubusercontent.com/albionlabs/tokenlist/main/albion.tokenlist.json"
which tracks the repository's main branch; replace this with an immutable
reference by pinning to a specific commit SHA or a release/tag URL (e.g., the
raw URL for a specific commit or tag) so the tokenlist cannot change silently;
update the tokenlist entry in settings.yaml to use that pinned URL and, if
possible, add a comment noting the commit SHA or tag used for traceability.

[coderabbitai]

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Fetch the Albion Labs tokenlist and inspect its structure and token entries.

URL="https://raw.githubusercontent.com/albionlabs/tokenlist/main/albion.tokenlist.json"

echo "=== HTTP Status ==="
HTTP_STATUS=$(curl -o /tmp/albion_tokenlist.json -w "%{http_code}" -s "$URL")
echo "Status: $HTTP_STATUS"

if [ "$HTTP_STATUS" -ne 200 ]; then
  echo "ERROR: URL returned non-200 status."
  exit 1
fi

echo ""
echo "=== Top-level keys ==="
jq 'keys' /tmp/albion_tokenlist.json

echo ""
echo "=== List name and version ==="
jq '{name: .name, version: .version}' /tmp/albion_tokenlist.json

echo ""
echo "=== Token count ==="
jq '.tokens | length' /tmp/albion_tokenlist.json

echo ""
echo "=== Tokens on Base (chainId 8453) ==="
jq '[.tokens[] | select(.chainId == 8453) | {symbol, address, name}]' /tmp/albion_tokenlist.json

echo ""
echo "=== Check for PR-mentioned addresses ==="
jq '[.tokens[] | select(.address | ascii_downcase | startswith("0xf836a500") or startswith("0x1d57246f"))]' /tmp/albion_tokenlist.json

Repository: rainlanguage/rain.strategies

Length of output: 2340

---

Supply-chain risk: URL references a mutable main branch, not a pinned commit.

The tokenlist URL points to the main branch of albionlabs/tokenlist. Any future commit to that branch — including accidental or malicious token additions — will be silently ingested without a PR review here. The existing three CoinGecko URLs have the same property, but those are large, well-established registries with their own governance. This is a brand-new, unknown third-party repository with no equivalent trust signal.

Recommended: either pin to an immutable commit SHA or use a tagged release URL, e.g.:

Example fix

-  - https://raw.githubusercontent.com/albionlabs/tokenlist/main/albion.tokenlist.json
+  - https://raw.githubusercontent.com/albionlabs/tokenlist/<COMMIT_SHA>/albion.tokenlist.json

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@settings.yaml` at line 62, The settings.yaml contains a mutable URL reference
to
"https://raw.githubusercontent.com/albionlabs/tokenlist/main/albion.tokenlist.json"
which tracks the repository's main branch; replace this with an immutable
reference by pinning to a specific commit SHA or a release/tag URL (e.g., the
raw URL for a specific commit or tag) so the tokenlist cannot change silently;
update the tokenlist entry in settings.yaml to use that pinned URL and, if
possible, add a comment noting the commit SHA or tag used for traceability.