RogueWave
b98b904896
Monetization (design Rev 4, §3.1) — transparent in-tx fee, non-custodial:
- @pyre/core: computeFeeBreakdown (single source of truth, BigInt) + FeeBreakdown
threaded through close/burn previews; fee tests.
- @pyre/config: PYRE_TREASURY_WALLET / PYRE_FEE_BPS (500) / swap fee / max contribution.
- @pyre/solana: close-empty + burn→close now append ONE System transfer of exactly
the disclosed fee to the treasury; rent/authority/feePayer pinned to wallet.
buildBurnTx re-validates EVERY account on-chain and value-gates via the classifier
(classic SPL + Token-2022) — never burns protected/valuable/NFT/unsupported;
ignores client amount (burns real balance); whole-build rejection.
- @pyre/api: close-empty/burn endpoints carry the fee + bounded optional contribution;
/api/receipt persists (cleanup_receipts) and records the on-chain treasury fee as
Essence; GET /api/essence; startup migrate(). Best-effort DB (never fails receipts).
- @pyre/db: Postgres Essence ledger (rounds, cleanup_receipts, essence_contributions),
idempotent migrations, parameterized + u64-safe.
- @pyre/web: fee preview ("reclaim · feeds the PYRE · you net" + treasury) + optional
"feed more" slider; burn flow w/ destructive confirm; decode+match verifies the fee
transfer (treasury + exact lamports) before signing; public "🔥 fed the PYRE" panel.
Built by agents (2 waves) + 2 audits. Security audit found a HIGH — buildBurnTx
didn't value-gate CLASSIC spl tokens (a direct API caller could burn USDC/an NFT);
FIXED (classify classic accounts too) + 2 regression tests. Integration: SHIP.
typecheck 8/8, core 91, solana 30, web build green. Live: burn preview on the dust
token shows 5% → treasury; non-empty/non-owned/valuable rejected. Nightly DB backup
cron enabled.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
58 lines
2.7 KiB
Plaintext
58 lines
2.7 KiB
Plaintext
# ============================================================================
|
|
# PYRE / Prometheus Protocol — environment template
|
|
# Copy to .env (per app) and fill in. NEVER commit a real .env.
|
|
#
|
|
# CORE TRUST RULE: PYRE never holds private keys. There is intentionally NO
|
|
# wallet private key / mnemonic variable anywhere in this file. All signing
|
|
# happens client-side in the user's wallet.
|
|
# ============================================================================
|
|
|
|
# ---- Solana ----------------------------------------------------------------
|
|
# Use an external RPC provider (Helius, Triton, QuickNode, etc.).
|
|
# Do NOT run a validator/RPC node on the MVP VPS.
|
|
SOLANA_RPC_URL=https://api.mainnet-beta.solana.com
|
|
SOLANA_RPC_WS_URL=
|
|
SOLANA_CLUSTER=mainnet-beta # mainnet-beta | devnet | testnet
|
|
|
|
# ---- Database (PostgreSQL) -------------------------------------------------
|
|
DATABASE_URL=postgresql://pyre:pyre@localhost:5432/pyre
|
|
|
|
# ---- Redis (queues, cache, rate limiting) ----------------------------------
|
|
REDIS_URL=redis://localhost:6379
|
|
|
|
# ---- AI services (Prometheus) ----------------------------------------------
|
|
# API-based only for MVP. Do NOT run local LLMs/image models on the server.
|
|
ANTHROPIC_API_KEY=
|
|
OPENAI_API_KEY=
|
|
IMAGE_GEN_PROVIDER= # e.g. openai | stability | replicate
|
|
IMAGE_GEN_API_KEY=
|
|
|
|
# ---- App URLs / ports ------------------------------------------------------
|
|
WEB_PORT=3000
|
|
API_PORT=4000
|
|
WEB_PUBLIC_URL=http://localhost:3000
|
|
API_PUBLIC_URL=http://localhost:4000
|
|
|
|
# ---- Admin / security ------------------------------------------------------
|
|
ADMIN_API_TOKEN= # protects /admin endpoints
|
|
RATE_LIMIT_SCAN_PER_MIN=10
|
|
|
|
# ---- Classification safety thresholds --------------------------------------
|
|
PROTECTED_USD_THRESHOLD=50 # skip tokens valued above this (USD)
|
|
MAX_PRICE_IMPACT_BPS=300 # skip swap routes above this impact
|
|
QUOTE_MAX_AGE_MS=15000 # skip stale quotes older than this
|
|
|
|
# ---- Protocol fee (§3.1) — transparent, in-tx, non-custodial ---------------
|
|
# The treasury receives ONLY the fee SOL (never user funds). Swap it for a
|
|
# multisig before real volume. The fee is shown in the preview before signing.
|
|
PYRE_TREASURY_WALLET=122CNV5ZLu6fqZFpEMUdUSQwDv2zs23pkYQhkNtSQk5k
|
|
PYRE_FEE_BPS=500 # 5% of reclaimed rent
|
|
PYRE_SWAP_FEE_BPS=100 # 1% on swaps (proceeds still go to user)
|
|
PYRE_MAX_CONTRIBUTION_BPS=5000 # cap on the optional "feed more" extra (50%)
|
|
|
|
# ---- Optional: metadata / launch (later phases) ----------------------------
|
|
IPFS_OR_ARWEAVE_ENDPOINT=
|
|
IPFS_OR_ARWEAVE_TOKEN=
|
|
# Public key only — the operator signs Pump.fun launches manually in MVP.
|
|
PUMPFUN_CREATOR_WALLET_PUBKEY=
|