feat(transmute): sell-route detection (Jupiter) + design Rev 3

Re-prioritizes the core loop (sell→feed→close; burn for unsellable only) per
user direction. READ-ONLY this increment — quotes + risk flags only, no swap
build/sign, no funds moved.

- docs: Rev 3 — §5 scope, §6 TRANSMUTABLE active, new §6.1 (Jupiter Ultra
  routing incl. pump.fun pre/post-graduation + Token-2022; 3rd-party-swap trust
  model = simulate + lamports-delta ≥ min-out + sole-signer + no
  SetAuthority/Approve/bad-CloseAccount; Shield; price-impact/slippage/dust
  guards; Essence model 1 = opt-in off-chain tally, no custody).
- @pyre/core: SellInfo type + TokenAccountDto.sell.
- @pyre/api: keyless Jupiter client (lite-api: /swap/v1/quote + /ultra/v1/shield);
  bounded /api/scan enrichment — upgrades INCINERATE_ONLY→TRANSMUTABLE when a
  worthwhile route exists; dust gate (proceeds ≤ fee+rent → keep burn); price
  impact >10% blocks; graceful degrade if Jupiter down.
- @pyre/web: shows "Sellable for ~X SOL", price impact, Shield chips; disabled
  "Sell & feed the PYRE (soon)" CTA (execution is the next, audited step).

Tracker: Phase 6 "swap candidate detection" + "route quote preview" done.
typecheck 8/8, core 85, solana 19, web build green.

LIVE FINDING: both pump.fun tokens ARE routable via Jupiter (so no pump.fun
engine needed) but quote ~0.0000097 SOL each — far below their ~0.002 SOL rent,
so the dust gate correctly keeps them INCINERATE_ONLY ("not worth selling").

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/core/src/dto.ts

@@ -10,6 +10,7 @@
  * scan/classify/build pipeline is implemented. Approximations are flagged inline.
  */
 import type { TokenClassification } from "./classification";
+import type { SellInfo } from "./sell";
 
 // ---------------------------------------------------------------------------
 // POST /api/scan
@@ -58,6 +59,8 @@ export interface TokenAccountDto {
   frozen?: boolean;
   /** Whether the account is delegated, if known. TODO: confirm availability. */
   delegated?: boolean;
+  /** Sell-quote (transmute) probe result for selling this token to SOL, for display. */
+  sell?: SellInfo;
 }
 
 export interface ScanResponse {

packages/core/src/index.ts

@@ -5,5 +5,6 @@ export * from "./extensions";
 export * from "./risk";
 export * from "./tx";
 export * from "./dto";
+export * from "./sell";
 export * from "./receipt";
 export * from "./prometheus";

packages/core/src/sell.ts

@@ -0,0 +1,13 @@
+/** Result of probing whether a token can be sold to SOL (via Jupiter), for display. */
+export interface SellInfo {
+  /** True if a usable route to SOL was found within the guards. */
+  routable: boolean;
+  /** Estimated NET SOL out, in lamports (string, u64-safe). Present when routable. */
+  estimatedSolLamports?: string;
+  /** Quoted price impact, percent (e.g. 1.2 = 1.2%). Present when a quote was obtained. */
+  priceImpactPct?: number;
+  /** Jupiter Shield risk flags for the mint (e.g. "HAS_FREEZE_AUTHORITY"). */
+  riskFlags?: string[];
+  /** Human note when not routable / not worth selling (e.g. "no route", "dust: rent > sale value", "price impact too high"). */
+  note?: string;
+}