RogueWave
b98b904896
Monetization (design Rev 4, §3.1) — transparent in-tx fee, non-custodial:
- @pyre/core: computeFeeBreakdown (single source of truth, BigInt) + FeeBreakdown
threaded through close/burn previews; fee tests.
- @pyre/config: PYRE_TREASURY_WALLET / PYRE_FEE_BPS (500) / swap fee / max contribution.
- @pyre/solana: close-empty + burn→close now append ONE System transfer of exactly
the disclosed fee to the treasury; rent/authority/feePayer pinned to wallet.
buildBurnTx re-validates EVERY account on-chain and value-gates via the classifier
(classic SPL + Token-2022) — never burns protected/valuable/NFT/unsupported;
ignores client amount (burns real balance); whole-build rejection.
- @pyre/api: close-empty/burn endpoints carry the fee + bounded optional contribution;
/api/receipt persists (cleanup_receipts) and records the on-chain treasury fee as
Essence; GET /api/essence; startup migrate(). Best-effort DB (never fails receipts).
- @pyre/db: Postgres Essence ledger (rounds, cleanup_receipts, essence_contributions),
idempotent migrations, parameterized + u64-safe.
- @pyre/web: fee preview ("reclaim · feeds the PYRE · you net" + treasury) + optional
"feed more" slider; burn flow w/ destructive confirm; decode+match verifies the fee
transfer (treasury + exact lamports) before signing; public "🔥 fed the PYRE" panel.
Built by agents (2 waves) + 2 audits. Security audit found a HIGH — buildBurnTx
didn't value-gate CLASSIC spl tokens (a direct API caller could burn USDC/an NFT);
FIXED (classify classic accounts too) + 2 regression tests. Integration: SHIP.
typecheck 8/8, core 91, solana 30, web build green. Live: burn preview on the dust
token shows 5% → treasury; non-empty/non-owned/valuable rejected. Nightly DB backup
cron enabled.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@pyre/config
Shared configuration and environment loading for PYRE.
Purpose
Per §13: shared config and environment loading. Provides a typed Env interface
and a loadConfig() loader that maps the variables in the repo-root
.env.example into typed config.
Trust rule
There is intentionally no wallet private-key / mnemonic variable here, and there never will be (§3). All signing happens client-side in the user's wallet.
Variables (mirrors .env.example)
- Solana —
SOLANA_RPC_URL,SOLANA_RPC_WS_URL,SOLANA_CLUSTER - Database —
DATABASE_URL - Redis —
REDIS_URL - AI —
ANTHROPIC_API_KEY,OPENAI_API_KEY,IMAGE_GEN_PROVIDER,IMAGE_GEN_API_KEY - App URLs / ports —
WEB_PORT,API_PORT,WEB_PUBLIC_URL,API_PUBLIC_URL - Admin / security —
ADMIN_API_TOKEN,RATE_LIMIT_SCAN_PER_MIN - Classification thresholds —
PROTECTED_USD_THRESHOLD,MAX_PRICE_IMPACT_BPS,QUOTE_MAX_AGE_MS - Optional / later phases —
IPFS_OR_ARWEAVE_ENDPOINT,IPFS_OR_ARWEAVE_TOKEN,PUMPFUN_CREATOR_WALLET_PUBKEY(public key only)
Status
Skeleton. Defines Env; loadConfig() is a stub.
TODO
- Implement
loadConfig()— readprocess.env, validate/coerce, apply defaults, fail fast on missing required values. Never hardcode secrets.