Files
pyre/packages/solana
RogueWave b98b904896 feat(fee+burn+essence): 5% transparent fee, burn→close, Essence ledger + dashboard
Monetization (design Rev 4, §3.1) — transparent in-tx fee, non-custodial:
- @pyre/core: computeFeeBreakdown (single source of truth, BigInt) + FeeBreakdown
  threaded through close/burn previews; fee tests.
- @pyre/config: PYRE_TREASURY_WALLET / PYRE_FEE_BPS (500) / swap fee / max contribution.
- @pyre/solana: close-empty + burn→close now append ONE System transfer of exactly
  the disclosed fee to the treasury; rent/authority/feePayer pinned to wallet.
  buildBurnTx re-validates EVERY account on-chain and value-gates via the classifier
  (classic SPL + Token-2022) — never burns protected/valuable/NFT/unsupported;
  ignores client amount (burns real balance); whole-build rejection.
- @pyre/api: close-empty/burn endpoints carry the fee + bounded optional contribution;
  /api/receipt persists (cleanup_receipts) and records the on-chain treasury fee as
  Essence; GET /api/essence; startup migrate(). Best-effort DB (never fails receipts).
- @pyre/db: Postgres Essence ledger (rounds, cleanup_receipts, essence_contributions),
  idempotent migrations, parameterized + u64-safe.
- @pyre/web: fee preview ("reclaim · feeds the PYRE · you net" + treasury) + optional
  "feed more" slider; burn flow w/ destructive confirm; decode+match verifies the fee
  transfer (treasury + exact lamports) before signing; public "🔥 fed the PYRE" panel.

Built by agents (2 waves) + 2 audits. Security audit found a HIGH — buildBurnTx
didn't value-gate CLASSIC spl tokens (a direct API caller could burn USDC/an NFT);
FIXED (classify classic accounts too) + 2 regression tests. Integration: SHIP.
typecheck 8/8, core 91, solana 30, web build green. Live: burn preview on the dust
token shows 5% → treasury; non-empty/non-owned/valuable rejected. Nightly DB backup
cron enabled.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-05-31 06:11:00 +00:00
..

@pyre/solana

Solana transaction helpers for PYRE.

Purpose

Token-account reading and unsigned transaction construction for the burner flow. Per §13 its responsibilities are:

  • Token-account parsing.
  • Close-account transaction builder.
  • Burn transaction builder.
  • Simulation helpers.
  • Transaction decoder (for preview matching).

Trust rules (load-bearing)

  • PYRE never holds private keys — this package builds unsigned transactions; signing happens client-side in the user's wallet.
  • Recovered ATA rent defaults to the user's own wallet.
  • Always simulate, then decode and match against the user-facing preview before requesting a signature.
  • Classic SPL only in the MVP. Skip Token-2022, NFTs, and unsupported layouts.

Status

Stubs only. Every exported function throws Error("not implemented").

TODO

  • Implement parseTokenAccounts, buildCloseEmptyAccountsTx, buildBurnTx, simulateTransaction, and decodeTransaction.
  • Wire classification through @pyre/core.