@dcprotocol/wallet-core

@dcprotocol/wallet-core

The pure wallet brain for DCP — transaction building, decoding, validation, the execution runner, and the shared protocol error type. Zero native dependencies, no storage, no key custody, no UI — so it imports identically in Node (the vault server, agents), the browser, and React Native (the mobile app).

This is the single source of truth for wallet logic. Higher packages (@dcprotocol/core, @dcprotocol/vault, the official apps) build their platform adapters on top of it, so a fix / feature / fee change happens once and every surface gets it.

What's inside

Area	Exports
Build	buildSolanaTransferTx, buildSplTransferTx, getSolanaAtaAddress
Decode / validate	verifyTransferTx (anti-blind-sign), getTransactionSigners, getTransactionProgramIds
Swap safety	validateSwapQuote (quote↔intent), validateSwapTransaction (sole-signer + program allow-list), idempotencyIntentMatches
Jupiter	jupiterQuote, jupiterBuildSwapTx (fee + endpoint injected, never hardcoded)
Tokens	resolveToken, resolveSwapToken, WSOL_MINT, DEFAULT_KNOWN_TOKENS
Reads	SolanaReader (balances, tx status, history, token search)
Runner	executeTransfer, executeSwap + the ports (Signer, RpcClient, BudgetStore, IdempotencyStore, ApprovalUI, ActivityRecorder, ConfigProvider, SwapProvider)
Consent	ConsentRequiredError, normalizeApproval (supports both inline-PIN and async approve-later)
Errors	VaultError, VaultErrorCode (the shared protocol error type)

Design rules (do not break)

• No native deps. Only @solana/web3.js, @solana/spl-token, fetch. A native dependency (sqlite/sodium/keychain) would break the React Native build — that is the whole reason this package exists separately from @dcprotocol/core.
• The brain never signs and never holds a key. The runner builds + validates, then delegates signing to the platform's Signer port.
• No business config. The swap fee (rate + account) and RPC endpoint are injected by the host, never embedded here.

Usage (runner)

import { executeTransfer, type TransferPorts } from '@dcprotocol/wallet-core';

const ports: TransferPorts = { signer, rpc, approval, budget, idempotency, activity };
const result = await executeTransfer(
  { chain: 'solana', to, amount, currency: 'SOL', idempotencyKey },
  ports,
);

The runner runs: idempotency → build → validate → budget → approval → sign(port) → verify-after-sign → submit → record-on-success. Approval may return a boolean (inline PIN) or { deferred, consentId } (async consent) — the latter throws ConsentRequiredError for the host to surface as requires_consent.

License

Apache-2.0