Add predict (prediction market) + copy-trade example apps for Flash V2

examples/copy-trade/.env.example

@@ -1,5 +1,22 @@
-# copy-trade — LEADER is required; everything else optional (dry-run default)
-LEADER=             # wallet pubkey to mirror (any owner with live V2 positions)
-MAX_FOLLOW_USD=100  # hard cap per mirrored trade
-# RATIO=0.1         # override collateral-ratio sizing with a fixed ratio
-# FOLLOWER_KEYPAIR= # + run with `-- --execute` to sign for real (MAINNET wallet!)
+# copy-trade — copy to .env.local and fill in ONE thing: your RPC key.
+#   cp .env.example .env.local
+#
+# Flash Trade V2 runs on Solana MAINNET (real funds — start small). You connect a
+# wallet and Enable One-Click Trading; mirrors sign with a session key, no popups.
+
+NEXT_PUBLIC_FLASH_NETWORK=mainnet
+
+# ── RPC ───────────────────────────────────────────────────────────────────────
+# Base-chain RPC (setup / deposit / withdraw) — browser-direct to a CORS-friendly
+# RPC. A FREE key from helius.dev / triton.one / quicknode.com works. This URL
+# ships in the browser bundle, so use a DOMAIN-RESTRICTED key for deploys.
+NEXT_PUBLIC_BASE_RPC=https://mainnet.helius-rpc.com/?api-key=YOUR_KEY_HERE
+# Ephemeral Rollup RPC (trading + the live leader stream) — serves CORS, direct.
+NEXT_PUBLIC_ER_RPC=https://flash.magicblock.xyz
+
+# The leaderboard is fetched server-side from the public fstats V2 stats API via
+# /api/leaders (it has no CORS). No key needed. Override only if it ever moves:
+# FSTATS_BASE=https://fstats.io/v2/api/v1
+
+# Override the hosted Flash V2 API (rarely needed).
+# NEXT_PUBLIC_FLASH_API_BASE=https://flashapi.trade/v2

examples/copy-trade/app/api/leaders/route.ts

@@ -0,0 +1,39 @@
+// ─────────────────────────────────────────────────────────────────────────────
+// app/api/leaders/route.ts — same-origin read-only proxy for the PUBLIC fstats
+// V2/ER leaderboard. WHY IT EXISTS: fstats serves leader rankings (win rate,
+// PnL) for the MagicBlock ER but does NOT send CORS headers, so a browser can't
+// fetch it directly. This route fetches it server-side and hands the JSON back.
+// It carries NO keys and reaches NO RPC — it only relays public stats. (Live
+// LEADER POSITIONS come straight from flashapi.trade over the owner WS, which
+// DOES serve CORS — see lib/copy-engine.ts; this is discovery only.)
+// ─────────────────────────────────────────────────────────────────────────────
+
+export const runtime = "nodejs";
+
+const FSTATS = "https://fstats.io/v2/api/v1";
+
+export async function GET(): Promise<Response> {
+  try {
+    const [lbRes, openRes] = await Promise.all([
+      fetch(`${FSTATS}/leaderboards/pnl`, { cache: "no-store" }),
+      fetch(`${FSTATS}/positions/open`, { cache: "no-store" }),
+    ]);
+    if (!lbRes.ok) throw new Error(`fstats leaderboard ${lbRes.status}`);
+    const lb = (await lbRes.json()) as { leaderboard?: unknown[] };
+    // positions/open is best-effort — it only enriches rows with "live now" counts
+    let openByOwner: Record<string, number> = {};
+    if (openRes.ok) {
+      const open = (await openRes.json()) as { positions?: Array<{ owner: string }> };
+      openByOwner = (open.positions ?? []).reduce<Record<string, number>>((acc, p) => {
+        acc[p.owner] = (acc[p.owner] ?? 0) + 1;
+        return acc;
+      }, {});
+    }
+    return Response.json(
+      { leaders: lb.leaderboard ?? [], openByOwner },
+      { headers: { "Cache-Control": "public, max-age=10" } },
+    );
+  } catch (e) {
+    return Response.json({ error: (e as Error).message }, { status: 502 });
+  }
+}