OpenFinance launchpad (the "wrapper") — launch a token on Robinhood Chain (EVM, chain id 4663) with a FEE MODULE that decides, permanently, where its trading fees go. This is the "launch a token that burns its fees / splits them / runs a raffle / pays its holders" tool.
**THIS IS THE DEFAULT LAUNCH TOOL FOR THE PONS CURVE ON ROBINHOOD CHAIN** — a plain launch with nothing said about fees uses module='keep', which sends the fees to the creator's own wallet and is the only module that can be repointed later. Do NOT use openfinance-pons-launch for a new launch; this tool launches on the same Pons curve, with the fee router added, so it is a superset.
**It is not the only launch venue on this chain.** openfinance-launchpad-v4 is a separate product: a launch there IS a real Uniswap V4 position, paired against an approved quote token such as USDG, with a snipe tax and no fee modules. Route to it when the user names Uniswap or V4, names a pair asset like USDG, or wants the token tradable through the Uniswap router. If the user says only "launch a token on Robinhood Chain" with nothing about fee modules or Uniswap, ASK which venue — the pools are not interchangeable and the choice is permanent.
HOW IT RELATES TO openfinance-pons-launch:
• Same chain, same Pons curve underneath, same Privy EVM wallet. The token still trades on Pons.
• This adds a fee router, so fees can be kept, sent to one wallet, split, burned, raffled, or airdropped to holders.
• openfinance-pons-launch remains only for READING Pons state (quote assets, launch terms) and for the fee-claim actions on tokens launched through it BEFORE the wrapper existed. Its launch action is legacy — do not route a new launch to it.
• **Module choices are FROZEN AT LAUNCH**, with one exception: `keep` may be repointed later (`FeeRouter.repointWallet`). A burn, split, raffle or holders module cannot be changed afterwards — no admin key, no migration. Treat those like deploying an immutable contract.
• Every launch keeps 5% of its fee bucket (500 bps) for the keeper's gas. This is not optional and not a platform fee: without it the launch could never have its fees moved, and the keeper refuses to service it. The module gets the other 95%.
MODULES (pick one, frozen):
keep — fees to the creator's own wallet.
wallet — fees to one named wallet (`recipient`).
split — fees divided between 2-16 wallets (`split`), bps totalling exactly 10000.
burn — fees buy the launched token back and burn it.
raffle — fees fund a periodic prize draw among holders (`raffle`, required).
holders — fees airdropped pro-rata to holders (`airdrop`, optional; defaults are sensible).
ROUTING:
• A bare "launch a token" with no fee preference → this tool, module='keep'. Do not ask the user to choose a module they did not raise; `keep` is the plain behaviour and is repointable.
• Call action='get_readiness' first for a raffle launch — it reports whether the keeper and randomness contracts are live, and lists the stock assets a stock-prize raffle may use. A raffle launched without a live keeper would never draw.
• Call action='simulate_launch' before action='launch' for anything non-trivial. It builds and validates the exact transaction without sending it, so a bad split or an impossible raffle fails for free.
• action='list_launches' is the public feed of every launch from this factory, newest first — the "what has been launched" question.
ACTIONS:
launch — { module, name, symbol, description?, logo?, creatorTaxBps, pairToken?, developerBuy?, recipient?, split?, raffle?, airdrop? }:
`module` — one of keep|wallet|split|burn|raffle|holders. Frozen.
`creatorTaxBps` — the TOTAL trading tax in basis points, capped by Pons's live limit. The wrapper's own protocol surcharge is included in this number, not added to it.
`pairToken` — optional; the asset the token trades against (a symbol or address — use openfinance-pons-launch's list_quote_assets to enumerate them, including Robinhood's tokenized stocks). Defaults to ETH.
`recipient` — required for module='wallet'.
`split` — required for module='split': [{ recipient, bps }], 2-16 entries, bps summing to EXACTLY 10000. They do not sum if each share is rounded independently — three equal shares floor to 9999 — so floor each and give the remainder to one recipient.
`raffle` — required for module='raffle'. Frozen terms: cadence, prize pool share, winners per round, ticket size, prize bounds.
**DESTRUCTIVE AND IRREVERSIBLE — launches a real token on mainnet, commits real funds for the launch fee, and freezes the fee module forever.** Show the user: module, resolved pair asset, creatorTaxBps, the 5% keeper slice, and every recipient/share. Require explicit confirmation.
simulate_launch — same arguments as launch: builds and validates the transaction WITHOUT sending it. Returns the resolved allocations, the launch fee and the would-be addresses. Free and safe — prefer it before any launch.
list_launches — { limit?, offset? } (PUBLIC — no auth): every launch from this factory, newest first. Returns { total, tokens: [{ token, curve, creator, name, symbol, router, adapter, raffle, pairToken, launchedAt, feesOwedWei, marketCapUsd }] }. `launchedAt` is a unix second from the launch's own block — a launch carries no timestamp on chain, so this comes from its `Deployed` event. `feesOwedWei` is what its buckets hold but have not yet delivered. `marketCapUsd` is null until a market-cap provider indexes the token, which is normal for a launch still on its bonding curve with no DEX pair.
get_launch — { token } (0x… address): one launch's fee module and routing, read from the contracts. Returns its module, buckets, allocations, router, adapter and raffle.
get_funding — { token } (0x… address): why a launch's fees have or have not moved. Returns { paidWei, spentWei, fundingWei, ledger }. `paid` is on chain (what the router has sent the keeper hub); `spent` comes from the keeper's own ledger. The keeper cranks a launch only when the fee covers the gas, so `fundingWei` is the number that explains a launch whose fees appear stuck. `ledger: null` means the keeper has never worked this launch, so spend is zero.
list_creator_launches — { creator } (0x… address) (PUBLIC — no auth): every launch by one creator, with the same enrichment as list_launches.
get_raffle — { raffle } (0x… address): a raffle's live state — current round, cadence, prize terms, and whether a round is drawable.
get_raffle_claims — { raffle, wallet, round? }: a holder's claimable prizes with their Merkle proofs. The proofs come from the keeper's database; whether a slot is already PAID comes from the contract, which is authoritative.
list_raffle_stocks — {} (PUBLIC — no auth): the tokenized-stock assets a stock-prize raffle may pay out in.
get_readiness — {} (PUBLIC — no auth): whether a raffle can be launched at all in this environment — keeper hub, randomness contract, and whether the hub owner has paused launches. Call before offering a raffle launch.
get_keeper_status — {} (PUBLIC — no auth): a deployment check, not launch data. Reports whether this host can reach the keeper's database and whether the keeper is alive. An unreachable database is a SUPPORTED state — proofs fall back to a slower rebuild from transfer history — so `configured: true` with `reachable: false` means proofs still work but the indexed path is not in use.
**⚠️ SAFETY** — launch is irreversible, commits real funds, and freezes the fee module permanently. Always simulate_launch first, show the resolved allocations including the 5% keeper slice, and get explicit confirmation.
