feat(sdk-core): add wrap() and unwrap() to DefiVault

examples/ts/defi-vault-wrap.ts

@@ -0,0 +1,73 @@
+/**
+ * Wrap native ETH into WETH (and unwrap it back) on staging.
+ *
+ * Wrap issues a single WETH9 `deposit()` call; unwrap issues `withdraw(uint256)`.
+ * The wallet-platform builds the calldata and resolves the WETH9 address from the
+ * vault binding — the SDK only forwards vaultId and amount.
+ *
+ * Set DEFI_WRAP_DIRECTION=unwrap to run the reverse direction.
+ *
+ * Wrap does not need to be awaited before depositing: the client is free to call
+ * depositToVault() without waiting for the wrap to confirm.
+ *
+ * Usage:
+ *   STAGING_ACCESS_TOKEN=<token> \
+ *   STAGING_WALLET_ID=<walletId> \
+ *   STAGING_WALLET_PASSPHRASE=<passphrase> \
+ *   DEFI_VAULT_ID=<vaultId> \
+ *   DEFI_WRAP_AMOUNT=<amountInBaseUnits> \
+ *   DEFI_WRAP_DIRECTION=<wrap|unwrap> \
+ *   npx ts-node examples/ts/defi-vault-wrap.ts
+ *
+ * Copyright 2026, BitGo, Inc.  All Rights Reserved.
+ */
+import { BitGo } from 'bitgo';
+
+require('dotenv').config({ path: '../../.env' });
+
+const config = {
+  accessToken: '',
+  env: 'staging',
+  walletId: '',
+  vaultId: 'tbaseeth-weth-test',
+  amount: '1000000000000000000', // 1 ETH — 18dp base units, kept as a string
+  direction: 'wrap' as 'wrap' | 'unwrap',
+  passphrase: '',
+  coin: 'tbaseeth',
+  otp: '000000',
+};
+
+const bitgoTest = new BitGo({
+  env: 'staging',
+});
+
+async function main() {
+  console.log('Connecting to staging...');
+  bitgoTest.authenticateWithAccessToken({ accessToken: config.accessToken });
+  //await bitgoTest.unlock({ otp: config.otp, duration: 3600 });
+  const wallet = await bitgoTest.coin(config.coin).wallets().get({ id: config.walletId });
+  console.log('Wallet ID   :', wallet.id());
+  console.log('Vault ID    :', config.vaultId);
+  console.log('Direction   :', config.direction);
+  console.log('Amount      :', config.amount, config.direction === 'wrap' ? '(ETH base units)' : '(WETH base units)');
+
+  const params = {
+    vaultId: config.vaultId,
+    amount: config.amount,
+    ...(config.passphrase ? { walletPassphrase: config.passphrase } : {}),
+  };
+
+  console.log(`\nStarting ${config.direction}...`);
+  const result = config.direction === 'wrap' ? await wallet.defi.wrap(params) : await wallet.defi.unwrap(params);
+
+  console.log(`\n${config.direction} submitted:`);
+  console.log('  txRequestId  :', result.txRequestId);
+  // operationId is reserved for milestone M5 and is undefined today.
+  console.log('\nFull result:', JSON.stringify(result, null, 2));
+}
+
+main().catch((e) => {
+  console.error('Error:', e.message);
+  if (e.stack) console.error(e.stack);
+  process.exit(1);
+});

modules/bitgo/test/v2/unit/wallet.ts

@@ -3883,6 +3883,29 @@ describe('V2 Wallet:', function () {
         intent.feeOptions!.should.not.have.property('feeToken');
       });
 
+      ['wrap-native', 'unwrap-native'].forEach(function (intentType) {
+        it(`populate intent should return a valid ${intentType} intent without recipients`, async function () {
+          const mpcUtils = new ECDSAUtils.EcdsaUtils(bitgo, bitgo.coin('hteth'));
+
+          // Two independent sites in populateIntent must know about this intentType:
+          // the recipients-required exemption list, and the EVM intent-shape switch.
+          // Missing the first makes this call throw on the recipients assertion
+          // before the switch is ever reached.
+          const intent = mpcUtils.populateIntent(bitgo.coin('hteth'), {
+            reqId,
+            intentType,
+            defiParams: { vaultId: 'hteth-weth-test', amount: '1000000000000000000' },
+          });
+
+          intent.intentType.should.equal(intentType);
+          intent.should.have.property('recipients', undefined);
+          intent.vaultId!.should.equal('hteth-weth-test');
+          // A plain `amount`, not the `shareTokenAmount` defi-withdraw uses for shares.
+          intent.amount!.should.equal('1000000000000000000');
+          intent.should.not.have.property('shareTokenAmount');
+        });
+      });
+
       it('populate intent should return valid coredao acceleration intent', async function () {
         const mpcUtils = new ECDSAUtils.EcdsaUtils(bitgo, bitgo.coin('coredao'));
 

modules/sdk-core/src/bitgo/defi/defiVault.ts

@@ -2,6 +2,7 @@
  * @prettier
  */
 import * as t from 'io-ts';
+import { CoinFeature } from '@bitgo/statics';
 import { GetVaultResponse, VaultProtocol, VaultProtocolType } from '@bitgo/public-types';
 import {
   ConcreteDepositResult,
@@ -17,6 +18,8 @@ import {
   ResumeDepositOptions,
   WithdrawFromVaultOptions,
   WithdrawResult,
+  WrapOptions,
+  WrapResult,
 } from './iDefiVault';
 import { IWallet } from '../wallet';
 import { BitGoBase } from '../bitgoBase';
@@ -323,8 +326,78 @@ export class DefiVault implements IDefiVault {
     return { operationId, txRequestId };
   }
 
+  /**
+   * Wrap native currency into its canonical wrapped-native ERC-20
+   * (ETH → WETH via the WETH9 `deposit()` call).
+   *
+   * A thin orchestrator over a single sendMany, like {@link withdrawFromVault}.
+   * WP builds the calldata and resolves the WETH9 address server-side from the
+   * vault binding; the SDK only forwards vaultId and amount.
+   *
+   * @param params.vaultId - DeFi-service vault identifier. Required in v1: binding
+   *   the wrap to a vault is what supplies the per-enterprise authorization gate
+   *   and the address-whitelist path server-side (TDD §3.6). M7 makes it optional,
+   *   which is backward-compatible.
+   * @param params.amount - amount in base units of the native coin (18dp for ETH)
+   * @param params.walletPassphrase - required for hot wallets, omit for custody
+   */
+  async wrap(params: WrapOptions): Promise<WrapResult> {
+    return this.sendWrapIntent('wrapNative', params);
+  }
+
+  /**
+   * Unwrap the canonical wrapped-native ERC-20 back to native currency
+   * (WETH → ETH via the WETH9 `withdraw(uint256)` call).
+   *
+   * @param params.vaultId - DeFi-service vault identifier (see {@link wrap})
+   * @param params.amount - amount in base units of the wrapped token (18dp for WETH)
+   * @param params.walletPassphrase - required for hot wallets, omit for custody
+   */
+  async unwrap(params: WrapOptions): Promise<WrapResult> {
+    return this.sendWrapIntent('unwrapNative', params);
+  }
+
   // ── Internal helpers ────────────────────────────────────────────────
 
+  /**
+   * Shared body of {@link wrap} and {@link unwrap} — the two differ only in the
+   * sendMany type they issue.
+   *
+   * Deliberately does not call {@link extractOperationId}: no operation is minted
+   * for wrap/unwrap in v1, so it would only ever return undefined. Operation
+   * tracking arrives in milestone M5.
+   */
+  private async sendWrapIntent(type: 'wrapNative' | 'unwrapNative', params: WrapOptions): Promise<WrapResult> {
+    const vaultId = params.vaultId?.trim();
+    if (!vaultId) {
+      throw new Error('vaultId is required');
+    }
+    // The downstream BigIntFromString codec (wallet.ts) accepts anything JS's BigInt() constructor
+    // does - negative amounts, hex strings like '0xabc', and zero - and this amount forwards
+    // straight into a value-moving WETH9 deposit()/withdraw() call. Require a positive unsigned
+    // decimal integer string here; zero is deliberately rejected too, since a zero-amount wrap/
+    // unwrap has no on-chain effect but would still spend gas.
+    if (!params.amount || !/^\d+$/.test(params.amount) || BigInt(params.amount) === 0n) {
+      throw new Error('amount must be a positive unsigned decimal integer string');
+    }
+    // Wrapped-native vaults (WETH9 deposit()/withdraw()) only exist on EVM chains. Fail fast here
+    // instead of letting an unsupported coin reach wallet-platform and return an opaque prebuild error.
+    if (!this.wallet.baseCoin.getConfig().features.includes(CoinFeature.EVM_COIN)) {
+      throw new Error(`wrap/unwrap is not supported for ${this.wallet.baseCoin.getFamily()} wallets`);
+    }
+
+    const result = await this.wallet.sendMany({
+      type,
+      defiParams: {
+        vaultId,
+        amount: params.amount,
+      },
+      ...(params.walletPassphrase ? { walletPassphrase: params.walletPassphrase } : {}),
+    });
+
+    return { txRequestId: this.extractTxRequestId(result) };
+  }
+
   /**
    * Extract txRequestId from a sendMany result.
    * sendMany returns different shapes depending on wallet type:

modules/sdk-core/src/bitgo/defi/iDefiVault.ts

@@ -80,6 +80,21 @@ export interface WithdrawResult {
   txRequestId: string;
 }
 
+export interface WrapOptions {
+  /** DeFi-service vault identifier — required in v1, see note below */
+  vaultId: string;
+  /** Amount in base units (18dp for ETH/WETH) */
+  amount: string;
+  /** Wallet passphrase — required for hot wallets, omit for custody */
+  walletPassphrase?: string;
+}
+
+export interface WrapResult {
+  txRequestId: string;
+  /** Reserved — populated from milestone M5 onward, absent in v1 */
+  operationId?: string;
+}
+
 export interface IDefiVault {
   depositToVault(params: DepositToVaultOptions): Promise<DepositResult>;
   resumeDeposit(params: ResumeDepositOptions): Promise<DepositResult>;
@@ -88,4 +103,6 @@ export interface IDefiVault {
   getVaultConfig(params: GetVaultConfigOptions): Promise<GetVaultResponse>;
   getVaultProtocol(params: GetVaultConfigOptions): Promise<VaultProtocol>;
   withdrawFromVault(params: WithdrawFromVaultOptions): Promise<WithdrawResult>;
+  wrap(params: WrapOptions): Promise<WrapResult>;
+  unwrap(params: WrapOptions): Promise<WrapResult>;
 }

modules/sdk-core/src/bitgo/utils/mpcUtils.ts

@@ -222,6 +222,8 @@ export abstract class MpcUtils {
         'defi-approve',
         'defi-deposit',
         'defi-withdraw',
+        'wrap-native',
+        'unwrap-native',
         'wrapApprove',
         'wrap',
       ].includes(params.intentType)
@@ -336,6 +338,18 @@ export abstract class MpcUtils {
             shareTokenAmount: params.defiParams.amount,
           };
         }
+        case 'wrap-native':
+        case 'unwrap-native': {
+          assert(params.defiParams, `'defiParams' is required for ${params.intentType} intent`);
+          // WrapNativeIntent / UnwrapNativeIntent carry a plain `amount` (base units
+          // of the native coin when wrapping, of the wrapped token when unwrapping),
+          // not the `shareTokenAmount` that defi-withdraw uses for vault shares.
+          return {
+            ...baseIntent,
+            vaultId: params.defiParams.vaultId,
+            amount: params.defiParams.amount,
+          };
+        }
         case 'wrapApprove':
         case 'wrap': {
           assert(params.wrapParams, `'wrapParams' is required for ${params.intentType} intent`);

modules/sdk-core/src/bitgo/utils/tss/baseTypes.ts

@@ -381,7 +381,7 @@ export interface PrebuildTransactionWithIntentOptions extends IntentOptionsBase
   feeToken?: string;
   /** Canton-specific params for the cantonCommand intent. */
   cantonCommandParams?: CantonCommandParams;
-  /** DeFi vault intent fields for defi-approve / defi-deposit intents. */
+  /** DeFi vault intent fields for defi-* and wrap-native / unwrap-native intents. */
   defiParams?: DefiIntentParams;
   /** ERC-7984 wrap / wrapApprove fields flattened onto the WP intent. */
   wrapParams?: WrapIntentParams;

modules/sdk-core/src/bitgo/utils/tss/recipientUtils.ts

@@ -31,6 +31,18 @@ export const NO_RECIPIENT_TX_TYPES = new Set([
   'defiApprove',
   'defiDeposit',
   'defiWithdraw',
+  // Native wrap/unwrap (WETH9 deposit()/withdraw()) — calldata and the WETH9
+  // address are resolved server-side from the vault binding, so no recipients.
+  // Registered in BOTH spellings on purpose: this set is matched against
+  // txParams.type, which is buildParams.type (camelCase, from wallet.sendMany),
+  // AND against intent.intentType (kebab-case, as WP persists it). Signing paths
+  // that carry no txParams — notably pendingApproval.approve() →
+  // recreateTxRequest() → signTxRequest() with no txParams — only ever see the
+  // kebab-case spelling.
+  'wrapNative',
+  'wrap-native',
+  'unwrapNative',
+  'unwrap-native',
   // ERC-7984 shielding: approve/wrap calldata is built server-side from the wrap intent
   'wrapApprove',
   'wrap',

modules/sdk-core/src/bitgo/wallet/wallet.ts

@@ -4808,6 +4808,26 @@ export class Wallet implements IWallet {
         );
         break;
       }
+      case 'wrapNative':
+      case 'unwrapNative': {
+        // WETH9 amounts are 18dp and exceed Number.MAX_SAFE_INTEGER, so amount is
+        // decoded as a numeric string and handed on as a string, never a number.
+        const wrapNativeParams = decodeWithCodec(
+          t.type({ vaultId: t.string, amount: BigIntFromString }),
+          params.defiParams,
+          `${params.type}.defiParams`
+        );
+        txRequest = await this.tssUtils!.prebuildTxWithIntent(
+          {
+            reqId,
+            intentType: params.type === 'wrapNative' ? 'wrap-native' : 'unwrap-native',
+            defiParams: { ...wrapNativeParams, amount: wrapNativeParams.amount.toString() },
+          },
+          apiVersion,
+          params.preview
+        );
+        break;
+      }
       default:
         throw new Error(`transaction type not supported: ${params.type}`);
     }