⚠️ PROPRIETARY SOFTWARE — NOT OPEN SOURCE This repository is the private, proprietary property of GREA. See LICENSE for terms. No public redistribution, forking, or derivative works are permitted.
A full-stack creator monetization platform. Creators publish posts, stories, and live streams behind subscription paywalls. Fans subscribe, tip, and unlock content with USDC via Solana.
Built on Next.js 15, Supabase, Drizzle ORM, Stripe, LiveKit, and Solana.
- Subscription tiers — free, monthly, annual with Stripe billing
- Posts — text, image, video with pay-per-view (PPV) unlock
- Stories — 24-hour ephemeral content with viewer analytics
- Live streaming — LiveKit-powered streams with chat, tips, and viewer count
- Broadcasts — mass-message all active subscribers (2/day rate limit)
- Earnings dashboard — USDC revenue, pending payouts, transaction history
- Creator verification — identity verification with document upload
- Referral program — track and earn from referred creators
- Geo-blocking — restrict content by country (USC 2257 compliance)
- Tax reporting — W-9 collection, yearly summaries, CSV export
- Explore & discover creators by category
- Subscribe with Stripe Checkout
- Tip creators in USDC via Solana wallet
- DM creators with paid/unpaid message tiers
- Bookmark posts for later
- AI chat with creator personas (OpenAI-powered)
- Wallet — connect Solana wallet, view balance
- Admin dashboard — 20+ pages
- Creator applications — review, approve, reject with notes
- Moderation queue — AI-assisted content scanning
- DMCA management — takedowns, counter-notices, reinstatement
- Payout management — batch processing, manual overrides, reconciliation
- Solvency monitoring — real-time wallet vs. liabilities
- Tax summaries — per-creator export
- Audit log — immutable admin action trail
- Compliance — age gate (18+), state AV requirements, content policy
| Layer | Technology |
|---|---|
| Framework | Next.js 15 (App Router) |
| Language | TypeScript (strict mode, 0 errors) |
| Database | PostgreSQL via Supabase |
| ORM | Drizzle ORM |
| Auth | Supabase Auth (email, Google, GitHub OAuth) |
| Payments | Stripe Checkout + Connect |
| Crypto | Solana Web3.js, USDC (SPL token) |
| Streaming | LiveKit (WebRTC) |
| Storage | Supabase Storage |
| AI | OpenAI (chat personas, moderation) |
| Resend | |
| Rate Limiting | Upstash Redis |
| Styling | Tailwind CSS, shadcn/ui |
├── app/
│ ├── api/ # 100+ API routes
│ │ ├── admin/ # Admin panel endpoints
│ │ ├── cron/ # Scheduled jobs (10 routes)
│ │ ├── messages/ # DM + broadcast system
│ │ ├── posts/ # Content CRUD + PPV unlock
│ │ ├── streams/ # LiveKit token + chat
│ │ ├── webhooks/ # Stripe + LiveKit handlers
│ │ └── wallet/ # Solana balance + transactions
│ ├── dashboard/ # 25+ creator/fan pages
│ ├── admin/ # 20+ admin pages
│ ├── stream/[id]/ # Live stream viewer + host
│ └── [username]/ # Public creator profiles
├── components/ # 60+ shared components
├── utils/
│ ├── db/ # Drizzle schema (40+ tables)
│ ├── solana/ # Wallet ops, payout verification
│ ├── stripe/ # Billing, fulfillment, Connect
│ └── streaming/ # LiveKit client, analytics
└── tests/ # Unit + integration tests
This codebase has undergone comprehensive security audit resolving 124 Linear issues across 12 lanes:
| Lane | Scope | Issues |
|---|---|---|
| A1 | Auth & session management | 12 |
| A2 | Input validation & sanitization | 14 |
| A3 | Database query safety | 11 |
| A4 | API rate limiting & abuse prevention | 8 |
| A5 | File upload & storage security | 7 |
| A6 | Wallet & payment integrity | 18 |
| A7 | Creator verification & identity | 9 |
| A8 | DMCA & legal compliance | 8 |
| A9 | Streaming & real-time security | 6 |
| A10 | Admin panel hardening | 15 |
| A11 | Cron job reliability | 10 |
| A12 | Dependency & supply chain | 6 |
Post-close review: 33 additional fixes (OPE-231–263) resolving all syntax, structural, and TypeScript strict-mode errors.
npx tsc --noEmit # → exit 0, zero project-level errors- Node.js 20+
- PostgreSQL (Supabase)
- Stripe account
- Solana RPC endpoint
- LiveKit server (optional)
- Resend API key (optional)
Copy .env.example to .env and configure required variables.
npm install
npm run db:migrate
npm run dev # → http://localhost:3000npm run test:wallet:unit
npm run test:wallet:integration
npx tsc --noEmitProprietary — All Rights Reserved. See LICENSE.
This software is the exclusive property of GREA (Government Regulatory & Enterprise AI). No license is granted for redistribution, modification, or derivative works. Unauthorized use is strictly prohibited.
Open-source components used under their respective licenses (MIT, SIL OFL) are listed in LICENSE.
- Original development: Alex Carney
- Audit & enterprise hardening: GREA / RK