Turn regions of your page into ownable, tradeable inventory.
A publisher marks parts of a page as slots. Anyone can buy one and become its effective owner — able to write its content, trade it as an ERC-721, or rent it to an advertiser without giving up the asset. Each site is its own contract, so one publisher's inventory and funds are structurally isolated from everyone else's.
<h1><Slot id="hero.headline" fallback="Ship faster" /></h1>That headline now has an owner, a price, and a payout when somebody takes it.
Experimental software. Unaudited. Testnet only. The contracts are not upgradeable — a site is a clone frozen to the implementation it was created from. Do not put money on this that you would mind losing.
npm create websitekit my-site
cd my-site && pnpm install && pnpm devThe first run needs no credentials. It renders a shared demo board on Robinhood Chain testnet: already claimed across two owners, two slots open, one taken twice, one under a live tenancy, and one withdrawn from sale. An empty board teaches nothing about the mechanic, so the one you start with is not empty.
| Claim | An unowned slot sells at its floor. |
| Take | An owned slot sells at takeBps of its effective floor — 1.4× on the demo board. The displaced owner is paid payoutBps of that same floor. |
| Reversion | The takeover price reverts weekly toward the floor, bounded below by it. This is mean reversion of the takeover price, not loss of value — it is the handler for a position nobody is tending. |
| Rent | An owner can sell temporary use without giving up the asset. Rent streams to them; the tenant holds the content gate for the term. |
One correction worth stating plainly, because an earlier version of this documentation got it wrong: being taken is not guaranteed to be a profit event. The payout tracks the slot's current effective floor, not what the displaced holder paid, and reversion separates the two. In a 128,000-call invariant campaign, 33 of 73 takes credited the displaced owner less than they paid. The guarantee that survives every input is narrower and worth trusting: a displaced owner always receives at least the floor.
@websitekit/sdk |
Reads, writes, pricing. Takes your viem client. |
@websitekit/react |
<Slot>, useSlot, useBuy, <BuyDialog>. |
create-websitekit |
Scaffold and its Next.js template. |
packages/websitekit-contracts |
SlotSite, SlotFactory, SlotReader, RentalsLib. |
Four, because one does not fit under EIP-170. SlotSite is the sole custodian of funds and is
frozen — every site is an EIP-1167 clone of it. RentalsLib is delegatecalled and never touches
money. SlotReader holds every convenience view and is deliberately not frozen, so the read
surface can improve without redeploying a single site.
Deployed on Robinhood Chain testnet (46630) and fully verified — see
packages/websitekit-sdk/src/addresses.ts.
Four layers, each catching what the one below cannot:
- Unit — the SDK against its own assumptions.
- Parity — a TypeScript pricing twin compared against real Solidity across 3,024 take-price vectors and 690 ask/rent vectors. Both languages can be wrong the same way, so property tests check the arithmetic separately from the agreement.
- End-to-end — real bytecode on anvil, driven through the SDK. This is the layer that caught a wall-clock deadline bug and a helper treating a reverted transaction as success.
- Invariant — four configuration campaigns sweeping combinations, not one config per feature, and mutation-tested: deliberate breaks are introduced to confirm the properties catch them. One of the first four did not get caught, which is why that discipline exists.
pnpm install
pnpm test # every package; needs `forge` on PATH
pnpm test:contracts # forge onlyRequires Node 22.13+ and Foundry.
-
docs/README.md— the guide: the model, every mechanism, and the traps. -
docs/PROTOCOL-SPEC.md— the contract spec, and what the§references scattered through the source point at. Every parameter decision, with its reasoning.
The API reference is the TypeScript types and each package's README. There is deliberately no hand-maintained function list: the one this repo used to have went a full release describing an API that had already changed, because it was the only document with no compiler behind it.
MIT © websitekit
