Monetization (design Rev 4, §3.1) — transparent in-tx fee, non-custodial:
- @pyre/core: computeFeeBreakdown (single source of truth, BigInt) + FeeBreakdown
threaded through close/burn previews; fee tests.
- @pyre/config: PYRE_TREASURY_WALLET / PYRE_FEE_BPS (500) / swap fee / max contribution.
- @pyre/solana: close-empty + burn→close now append ONE System transfer of exactly
the disclosed fee to the treasury; rent/authority/feePayer pinned to wallet.
buildBurnTx re-validates EVERY account on-chain and value-gates via the classifier
(classic SPL + Token-2022) — never burns protected/valuable/NFT/unsupported;
ignores client amount (burns real balance); whole-build rejection.
- @pyre/api: close-empty/burn endpoints carry the fee + bounded optional contribution;
/api/receipt persists (cleanup_receipts) and records the on-chain treasury fee as
Essence; GET /api/essence; startup migrate(). Best-effort DB (never fails receipts).
- @pyre/db: Postgres Essence ledger (rounds, cleanup_receipts, essence_contributions),
idempotent migrations, parameterized + u64-safe.
- @pyre/web: fee preview ("reclaim · feeds the PYRE · you net" + treasury) + optional
"feed more" slider; burn flow w/ destructive confirm; decode+match verifies the fee
transfer (treasury + exact lamports) before signing; public "🔥 fed the PYRE" panel.
Built by agents (2 waves) + 2 audits. Security audit found a HIGH — buildBurnTx
didn't value-gate CLASSIC spl tokens (a direct API caller could burn USDC/an NFT);
FIXED (classify classic accounts too) + 2 regression tests. Integration: SHIP.
typecheck 8/8, core 91, solana 30, web build green. Live: burn preview on the dust
token shows 5% → treasury; non-empty/non-owned/valuable rejected. Nightly DB backup
cron enabled.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@pyre/web
User-facing PYRE web app. Skeleton only — no wallet or business logic is
implemented yet (see CLAUDE.md and §13 of the design doc).
Stack: Next.js (App Router) + TypeScript + Tailwind + Solana Wallet Adapter + React Query.
Responsibilities (§13)
- Landing page
- Wallet connect (Solana Wallet Adapter)
- Scanner UI — display token accounts and classification grouping
- Cleanup preview — accounts to close, tokens to burn, rent returned, fees, warnings, rent destination (decode tx and match against preview before signing)
- Receipt page — tx signature, accounts closed, tokens burned, rent returned, skipped accounts
- Prometheus generation preview — Spawn name/ticker/lore/image-prompt review
- Admin review page — approve/reject generated Spawn packages
Trust rules (do not weaken)
- PYRE never holds private keys; all signing is client-side in the user's wallet.
- Always show a preview and match the decoded transaction against it before requesting a signature.
- Recovered ATA rent returns to the user by default.
TODO
- Tailwind + PostCSS config and global styles
- WalletAdapter / React Query providers
- Scanner page wired to
POST /api/scan - Cleanup preview + transaction decode/match UI
- Sign flow via wallet adapter
- Receipt page wired to
POST /api/receipt - Prometheus generation preview + admin review pages
Scripts
dev—next devbuild—next buildtypecheck—tsc --noEmitlint/test— placeholders for now