Appearance
Vela LabsInternal Knowledge Base
Everything you need to understand VelaPay — vision, architecture, decisions, milestones, and investor preparation.
Everything you need to understand VelaPay — vision, architecture, decisions, milestones, and investor preparation.
Project: VelaPay — private, programmable payment authority for any business receiving payments in crypto, built on Solana.
Current milestone: v1.9 Commerce OS — accepted on Solana devnet as v1.9.0-devnet.3.
Current product state: one-time invoices, verified hosted payments, receipts, refunds, Customer Vault, reconciliation, exports, merchant verification, commerce webhooks, and auditor access are live on devnet. Mainnet Commerce OS is not deployed.
Workspace: 15 product/support repos in vela-labs plus internal-wiki and .planning ops layer. Every repo has an independent deploy lifecycle. The workspace runs on Bun (TypeScript repos), Anchor 0.32.1 (Rust), and Cloudflare (infra backbone). See Workspace Map → for the full inventory.
What matters most: The transfer-hook mandate system lets merchants pull exactly what was agreed — and nothing more. If that breaks, everything breaks.
These pages are the operational source of truth for release work, incidents, environment constants, repo ownership, and verification.
| Page | What you'll find |
|---|---|
| Operations Handbook → | Source-of-truth hierarchy, operating principles, daily use |
| Environment Registry → | Devnet IDs, domains, services, local paths, secret names |
| Release Management → | Release classes, order, gates, stop conditions, rollback posture |
| Repo Contracts → | Which repo owns what, what must change together |
| Verification Matrix → | Commands to prove protocol, SDK, apps, docs, and wiki are integrated |
| Incident Response → | Severity levels, first moves, playbooks, communication templates |
| Wiki Maintenance → | How to keep this wiki trustworthy as the system changes |
| Protocol Deployment Runbook → | Devnet and mainnet program deployment ceremony |
These pages prepare the narrative, numbers, and competitive positioning for investor conversations.
| Page | What you'll find |
|---|---|
| One-Pager → | Single-page investment thesis — problem, solution, traction, ask |
| Investor FAQ → | Anticipated questions with rehearsed answers |
| Talking Points → | Key messages ranked by conversation type |
| Competitive Landscape → | Who else is trying recurring payments on Solana and why they fall short |
| Market Thesis → | Why subscription billing on-chain is a $275B+ opportunity with zero incumbents |
| Value Proposition → | What VelaPay does that nothing else can |
The product is a billing primitive. These pages explain how it works end-to-end.
| Page | What you'll find |
|---|---|
| Project Vision → | Why Vela exists, what it enables, where it's going |
| Architecture → | Full system overview — 4-layer stack, 15 repos, dual-program protocol |
| Protocol Design → | Anchor program internals — mandate PDAs, transfer hook, credentials, streaming |
| Billing Flows → | How money actually moves — periodic pulls, streams, usage metering, agent budgets |
| Data Model → | On-chain accounts + D1 tables + event schemas |
| Commerce OS → | Payment verification, refunds, outbox, reconciliation, and security invariants |
The project has delivered milestone versions v1.0 through v1.9. These pages tell the story and distinguish historical implementation from the current accepted devnet release.
| Page | What you'll find |
|---|---|
| Milestone Overview → | Every milestone — status, dates, phase counts, key accomplishments |
| v1.0 Foundation → | Protocol core, SDK, dashboard, landing page, docs |
| v1.1 Arcium Privacy Layer → | Wrapped USDC, transfer hooks, keeper automation, private analytics |
| v1.2 Protocol Admin Dashboard → | Admin auth, monitoring, emergency controls, observability |
| v1.3 Merchant Login UX → | Email-first auth, Google SSO, org management, 2FA |
| v1.4 Agent Mandates → | Scoped agent spending, x402 middleware, CLI |
| v1.5 Hosted Checkout & Billing → | Checkout, invoicing, portal, pricing tables, analytics |
| v1.6 Docs Revamp → | 60-page documentation overhaul, custom Starlight theme |
| v1.7 Protocol Modularity → | Versioned accounts, TokenConfig registry, upgradeable hook, SDK PDAFactory |
| v1.8 Advanced Billing Features → | Streaming engine, plan upgrades, multi-token, webhook SDK, staging closure |
| v1.9 Commerce OS → | One-time payment operating layer, hardening, and accepted devnet rollout |
| Lessons Learned → | What worked, what didn't, and what we'd change |
| Process Evolution → | How the development process evolved across milestones |
The detailed technical documentation for building on or operating VelaPay.
| Page | What you'll find |
|---|---|
| Stack Overview → | Full technology choices per repo with rationale and version pinning |
| Operations Handbook → | How the team ships, verifies, and operates the workspace |
| vela-protocol → | Anchor program internals, instruction set, account layout |
| vela-sdk → | TypeScript SDK API reference, CLI commands, PDAFactory |
| vela-dashboard → | Merchant app architecture, auth, API routes, D1 schema |
| vela-admin → | Internal ops — monitoring, emergency controls, audit trail |
| vela-checkout → | Hosted checkout at pay.velapay.io, payment links, invoices |
| vela-portal → | Subscriber self-service at portal.velapay.io |
| vela-web → | Landing page at velapay.io |
| vela-docs → | Developer documentation at docs.velapay.io |
| vela-widget → | Embedded checkout loader + iframe checkout app |
| vela-brand → | @vela/brand — design tokens, fonts, motion, primitives shared across surfaces |
| vela-webhook → | HMAC-verified merchant webhook verifier package + dispatch helpers |
| vela-mail → | Transactional email templates + transport (Cloudflare Email + React Email) |
| vela-mail-smoke → | Throwaway smoke worker that drives every vela-mail template before deploy |
| vela-synthetic → | 15-minute Cron Worker — full E2E billing pipeline check on devnet staging |
| vela-demo → | Live demo / dogfooding surface exercising subscribe → pull → cancel → upgrade |
| Decisions → | Architecture Decision Records (ADRs) |
| Planning Status → | Current execution state, milestone history, performance metrics |
| Directory | Role | Stack | Infra |
|---|---|---|---|
vela-protocol | Anchor dual-program workspace for mandates, billing, transfer-hook enforcement | Anchor 0.32.1 (Rust) | Solana devnet |
vela-sdk | Bun-built protocol and Commerce SDK published as @velapay/sdk | TypeScript, Bun | npm |
vela-dashboard | Merchant dashboard and Commerce data plane — payments, invoices, refunds, customers, exports, audit, webhook fan-out | Vite + React 19 + TanStack Router/Query + Hono Worker + D1 + Better Auth | Railway + Cloudflare |
vela-admin | Internal ops dashboard — monitoring, emergency controls, audit trail | Vite SPA + Hono Worker + service binding to dashboard | Cloudflare Workers |
vela-checkout | Hosted one-time and subscription checkout, payment links, invoices, QR/wallet flows | Vite SPA + Hono Worker | Cloudflare Workers |
vela-portal | Subscriber self-service portal at portal.velapay.io | Vite SPA + Hono Worker + KV | Cloudflare Workers |
vela-web | Public landing page at velapay.io | Astro 6.1 | Cloudflare Workers |
vela-docs | Developer documentation at docs.velapay.io | Astro + Starlight | Cloudflare Workers |
vela-widget | Embedded checkout loader + iframe checkout app | TypeScript, Bun, Vite | CDN + Cloudflare Workers |
| Directory | Role | Stack | Infra |
|---|---|---|---|
vela-brand | Canonical design system — @vela/brand (tokens, fonts, motion, primitives) consumed by all UI surfaces | TypeScript, CSS | local workspace package |
vela-webhook | Cloudflare Worker — HMAC-verified merchant webhook fan-out, retries, DLQ | Hono + Queues | Cloudflare Workers |
vela-mail | Cloudflare Worker — transactional email via React Email templates + Cloudflare Email | React Email + Hono | Cloudflare Workers |
vela-mail-smoke | Smoke test harness for vela-mail — verifies template render + dispatch end-to-end | Bun, fetch | runs locally / pre-deploy |
vela-synthetic | 15-minute Cron Worker — full E2E billing pipeline check on devnet staging | Cloudflare Cron Worker | Cloudflare Workers |
vela-demo | Live demo / dogfooding surface exercising the full subscribe → pull → cancel flow | Vite + React | Cloudflare Workers |
| Milestone | Phases | Plans | Shipped | Days |
|---|---|---|---|---|
| v1.0 Foundation | 5 | 20 | 2026-03-31 | 2 |
| v1.1 Arcium Privacy Layer | 8 | 26 | 2026-04-02 | 2 |
| v1.2 Protocol Admin Dashboard | 10 | 36 | 2026-04-06 | 4 |
| v1.3 Merchant Login UX | 3 | 13 | 2026-04-07 | 1 |
| v1.4 Agent Mandates | 2 | 13 | 2026-04-07 | 1 |
| v1.5 Hosted Checkout & Billing | 7 | 37 | 2026-04-09 | 2 |
| v1.6 Docs Revamp | 4 | 16 | 2026-04-10 | 1 |
| v1.7 Protocol Modularity | 5 | 29 | 2026-04-15 | 3 |
| v1.8 Advanced Billing Features | 3 | 16+ | 2026-04-17 | 2 |
| v1.9 Commerce OS | Commerce completion + hardening | — | 2026-07-12 | Accepted devnet release |
Total: 47 phases, 236+ plans, ~18 days of active development.
| Metric | Value |
|---|---|
| Commits since March 29 | 529+ |
| Current accepted milestone | v1.9 Commerce OS on devnet |
| Total phases executed | 47 |
| Total plans executed | 206+ |
| Total agent execution time | ~36 hours |
| Average plan duration | ~15 minutes |
| Repos in workspace | 9 product repos + 6 support repos (brand, webhook, mail, mail-smoke, synthetic, demo) |
| Total requirements validated | 69 in v1.8 alone |
VelaPay runs on a 4-layer architecture:
Layer 4: Applications — Dashboard, Portal, Checkout, Admin, Web, Docs, Widget
Layer 3: Revenue Finance — MRR Oracle, Lending, Marketplace (future)
Layer 2: Billing Engine — Mandate Registry, Stream Engine, Usage Meter, Keeper Network
Layer 1: Protocol Core + Privacy — Vela Mandate (Transfer Hook) + Arcium MXE + Credentials
Base: Solana Token-2022, Arcium MXE Network, Helius RPCThe deepest architectural choice is the dual-program split: vela-protocol (billing state transitions) and vela-transfer-hook (transfer-time enforcement). The transfer hook must be isolated because it runs during every transfer_checked — any bug either lets merchants steal or blocks legitimate payments.
See Architecture → for the full system design.
VelaPay lets a business receive one-time payments and operate programmable billing on Solana. Commerce OS currently executes public SPL and Token-2022 payments on devnet, while Vela Protocol provides scoped, revocable Token-2022 payment authority for subscriptions, streams, usage metering, and agent budgets. Arcium-backed privacy is a separate protocol capability and roadmap; it must not be implied for v1.9 Commerce transfers. The product spans the merchant dashboard, subscriber portal, hosted checkout, embedded widgets, developer documentation, and internal admin console.
| Need | Go to |
|---|---|
| I just joined — where do I start? | Day-1 Onboarding → |
| What does this term mean? | Glossary → |
| What is VelaPay and why does it exist? | Project Vision → |
| How is the codebase organized? | Workspace Map → |
| What's the current execution state? | Planning Status → |
| How does the system work technically? | Architecture → |
| What technology choices were made? | Stack Overview → |
| How do we deploy and verify safely? | Operations Handbook → |
| What's the testing bar across repos? | Testing Strategy → |
| What's the PR review bar? | Code Review Checklist → |
| Which repo do I change? | Repo Contracts → |
| Pull stopped working — where do I start? | Keeper Operations → |
| Webhook missing or duplicate? | Webhook Troubleshooting → |
| How does Arcium fit operationally? | Arcium MXE Operations → |
| Schema change in dashboard? | Database Migrations → |
| Rotating a secret? | Secrets Management → |
| What has shipped and when? | Milestone History → |
| Investor preparation materials | One-Pager → |
| Competitive positioning | Competition → |
Vela is the primitive. VelaPay is the product.
The way Token-2022 is the primitive for tokens and Squads is the primitive for multisig, Vela becomes the primitive for private, programmable payment authority — any payment model, any business receiving in crypto. The product story spans merchant tools, admin ops, subscriber portals, and checkout UX — but the system still lives or dies on the same core property: enforce the mandate at the token-transfer boundary.
The workspace is built around private, programmable payment authority using Token-2022 transfer hooks for scoped enforcement and Arcium MPC for encrypted billing logic. Phase 0 proved the billing primitive standalone. Phase 1 layered in Arcium privacy. Phase 2 added operational surfaces. Everything from v1.3 onward has been building product completeness on top of the same unshakeable foundation.
This wiki is grounded in these primary sources. When in doubt, .planning/ artifacts are more current than root docs or repo READMEs.
.planning/PROJECT.md — canonical current-state summary and key decisions.planning/STATE.md — current execution state with machine-readable frontmatter.planning/ROADMAP.md — complete milestone and phase history.planning/REQUIREMENTS.md — product requirements with validation state.planning/MILESTONES.md — milestone completion log with accomplishmentsThis internal wiki is built with VitePress and deployed to Cloudflare Workers. It serves as the navigable knowledge base for the entire VelaPay workspace — covering investor preparation, product understanding, technical architecture, development history, and operational planning.
The wiki is maintained alongside the codebase and should be updated when:
For the public-facing documentation, see docs.velapay.io (powered by Astro + Starlight in vela-docs/).