windle

本页保存的是公开项目资料快照，阅读过程不需要连接 GitHub。

图片：CI 图片：CodeQL

Website · App · Docs · API · How it works

---

What is windle

windle puts promises on the line. A team states something a program can check on Solana — “our program is deployed and executable at this address before Dec 1” — and locks collateral behind it. A YES/NO market prices the odds. At the deadline nobody votes: the program reads the chain and pays out. Ship, and the team gets its collateral back while YES is paid. Slash, and the collateral goes to NO holders.

flowchart LR
    team(["Team"]) -- "checkable claim + deadline" --> promise["Promise"]
    team -- "locks" --> collateral[("Collateralprogram-owned")]
    traders(["Traders"]) -- "buy YES / NO" --> market{{"YES / NO marketprice = odds"}}
    promise --> market
    market --> verdict{"Deadlinethe chain decides"}
    collateral --> verdict
    verdict -- "condition met" --> ship["SHIPcollateral back · YES paid"]
    verdict -- "condition missed" --> slash["SLASHcollateral to NO holders"]

Promise	A condition over onchain accounts plus a deadline. A tweet saying “mainnet soon” is not a promise; a condition a program can evaluate is.
Collateral	Locked in a program-controlled account. Neither the team nor windle can withdraw it before resolution. The amount is public.
Market	Buy YES if you believe the team ships, NO if you don’t. The YES price, between 0 and 1, reads as the probability.
Verdict	After the deadline anyone can trigger resolution; the program checks the condition against chain state. No vote, no dispute window.

Read the full design in the docs: How it works · Collateral · Market · Resolution · Payouts.

[!IMPORTANT] windle is pre-launch. The protocol programs are not deployed; markets, prices and positions on the website are illustrative demo data, and no real funds are involved anywhere. What is live today: the website, sign-in with a Solana wallet, the account API and the docs.

Screenshots

Landing — www.windle.fun
The market prices the truth — demo market, no real funds


Sign in with Solana — oauth.windle.fun
API portal — api.windle.fun

Docs — docs.windle.fun

Live

Surface	URL	What runs there
Website	www.windle.fun	Landing — Vite + React 19 + React Three Fiber, GSAP and Motion
App	app.windle.fun	Product app — React 19, React Router 7, TanStack Query
Sign-in	oauth.windle.fun	Sign-In With Solana via Wallet Standard
Docs	docs.windle.fun	Astro Starlight — concepts, guides, API, legal
API	api.windle.fun	Fastify 5 — sessions and accounts; reference · OpenAPI 3.1
CDN	cdn.windle.fun	Brand assets, fonts, image resizing (imgproxy)

Architecture

npm-workspaces monorepo: every surface, the API, the shared packages and the server setup live and ship together.

windle/
├─ apps/
│  ├─ web/        landing             Vite · React 19 · R3F · GSAP · Motion · Tailwind 4
│  ├─ app/        product app         Vite · React 19 · React Router 7 · TanStack Query
│  ├─ auth/       sign-in             Wallet Standard · Sign-In With Solana · R3F
│  ├─ docs/       documentation       Astro · Starlight
│  └─ api/        backend             Fastify 5 · zod · Drizzle · Postgres 17 · Redis 7
├─ packages/
│  ├─ tokens/     design tokens       Tailwind 4 @theme (OKLCH) + sRGB mirrors for three.js
│  ├─ brand/      WindleMark          React component, mark SVG, favicon source
│  └─ shared/     API contracts       zod schemas + TS types (SIWS, session, me)
└─ infra/         production          docker compose, nginx, CDN, deploy / backup scripts, runbook

Path	Deploys to	Notes
apps/web	www.windle.fun	static, immutable releases with atomic switch
apps/app	app.windle.fun	static SPA
apps/auth	oauth.windle.fun	static SPA
apps/docs	docs.windle.fun	static
apps/api	api.windle.fun	container on loopback behind nginx, health-gated switch
packages/*	—	source-only TypeScript (exports → src/*.ts); Vite, Vitest and tsx compile them in place, esbuild inlines them into the API
infra	the server	see infra/README.md and DEPLOY.md

flowchart LR
    user(("Browser")) --> cf["Cloudflare"]
    cf --> nginx["nginxTLS · CSP · rate limits"]
    nginx --> static["www · app · oauth · docsstatic releases"]
    nginx --> cdn["cdnbrand · fonts"]
    cdn --> img["imgproxy"]
    nginx --> api["apiFastify 5"]
    api --> pg[("Postgres 17")]
    api --> redis[("Redis 7sessions · nonces")]

Sign-In With Solana — how a session is created

sequenceDiagram
    autonumber
    participant W as Wallet
    participant A as oauth.windle.fun
    participant API as api.windle.fun
    A->>API: GET /v1/auth/siws/nonce
    API-->>A: single-use sign-in input
    A->>W: solana:signIn(input)
    W-->>A: signed message + signature
    A->>API: POST /v1/auth/siws/verify
    API-->>A: 200 + HttpOnly session cookie (Domain=.windle.fun)
    A->>API: GET /v1/me (credentials: include)

Signing a message cannot move funds. There are no API keys: browser clients call with credentials: "include", credentialed CORS is limited to an exact-origin allow-list, and every non-2xx body is { "error": { "code", "message", "requestId" } }. Details: API docs.

Run it locally

Requirements: Node.js ≥ 22.12 and npm 10. The frontends and all unit tests need nothing else (API tests use an in-memory store). Running the API itself (dev:api) needs a local Postgres 17 and Redis 7 — by default postgres://windle:windle@127.0.0.1:5432/windle and redis://127.0.0.1:6379/0; override with DATABASE_URL and REDIS_URL (see apps/api/.env.example).

git clone https://github.com/cxmza/windle.git
cd windle
npm ci                 # one lockfile for every workspace

Command	What
npm run dev:web	landing on :5173
npm run dev:app	product app on :5174
npm run dev:auth	sign-in on :5175
npm run dev:docs	docs on :4321
npm run dev:api	API on :3001 (tsx watch)
npm run lint	Biome over the whole repo (lint:fix applies safe fixes)
npm run typecheck	every workspace (tsc / astro sync && tsc)
npm test	Vitest in every workspace that has tests
npm run build	every workspace → /dist
npm run e2e	Playwright for apps/web

One workspace: npm run -w @windle/. Add a dependency: npm install -w @windle/. Frontends read VITE_API_URL, VITE_APP_URL, VITE_AUTH_URL, VITE_DOCS_URL and default to the local ports above in development.

Using the shared packages

• Tokens in a Tailwind app — in the app’s CSS entry, after @import "tailwindcss";, add @import "@windle/tokens/fonts.css";, @import "@windle/tokens/tokens.css"; and @source "/packages/brand/src"; so classes used inside shared components are generated.
• Palette for three.js / canvas — import { BLUE, SCENE_BLUE } from '@windle/tokens';
• Brand — import { WindleMark, WINDLE_MARK_PATH } from '@windle/brand';; SVG files: @windle/brand/favicon.svg, @windle/brand/windle-mark.svg.
• Contracts — import { SiwsNonce, SiwsVerifyRequest, Session, Me, safeReturnTo } from '@windle/shared';
• Inside packages, relative imports carry the .ts extension (./auth.ts); every tsconfig extends tsconfig.base.json, which allows it.

Project status

Area	State
Website, docs, brand	live
Sign-In With Solana, sessions, account API	live (v0.1)
Product app	early shell
Protocol programs (promises, collateral, markets, resolution)	design stage — see docs
Email / X / Google sign-in	planned, disabled until real credentials exist

Releases and notes: Releases. Questions and ideas: Discussions.

Security

Please do not open public issues for vulnerabilities. Report them privately through GitHub private vulnerability reporting — see SECURITY.md. Secrets never live in this repository; server-only values are generated on the server.

License

Source-available, all rights reserved. The code is public so it can be read, reviewed and learned from; it is not open source, and no right to use, copy, modify or redistribute it is granted. See LICENSE. The owner may switch to an open-source license later.

[!NOTE] Nothing on windle is financial advice. Prediction markets may be restricted where you live; read the risk notice and terms.