Unified control plane for wallet, mining, validation, and deployment.
GXQS is not a wallet app. It is an enterprise blockchain operating platform that combines:
- π Universal Identity Layer β one cryptographic root controlling wallet signing, mining authentication, validator authorization, and enterprise deployment permissions
- β‘ Runtime Supervisor β Kubernetes-style daemon orchestration (walletd, minerd, validatord, telemetryd, deployerd)
- π¦ Rust Crypto Core β AES-256-GCM vault, memory-safe (zeroize-on-drop), WASM-capable
- πΉ Go Protocol Bridge β walletd JSON-RPC server, GXQS address derivation, transaction builder
- π Web Dashboard β Next.js + Tailwind + Zustand enterprise monitoring UI (
#00ffe1glow system) - π§ Smart Wallet Flow (walletd-mediated placeholders):
- one-click onboarding UX and registration/import/export request surfaces
- network/RPC profile toggles and auth onboarding placeholders
- secret material remains inside
walletd
- π± Mobile App β React Native + Expo cross-platform client (
apps/mobile) - π Policy Engine β YAML-driven enterprise policy enforcement (compute limits, validator rules, fleet policies)
- π³ Production Infrastructure β Docker, Kubernetes (Kustomize), Prometheus, Grafana
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β GXQS/Wallet β
β βββββββββββββββ βββββββββββββββ βββββββββββββββ βββββββββββββββββββββββ β
β β walletd β β minerd β β validatord β β telemetryd β β
β β (Go bridge) β β (mining) β β (validator) β β (metrics) β β
β ββββββββ¬βββββββ βββββββββββββββ βββββββββββββββ βββββββββββββββββββββββ β
β β β
β ββββββββΌβββββββ βββββββββββββββ βββββββββββββββ βββββββββββββββββββββββ β
β β Rust Vault β β Policy β β Runtime β β Deployerd β β
β β(AES-256-GCM)β β Engine β β Supervisor β β (deployment) β β
β βββββββββββββββ βββββββββββββββ βββββββββββββββ βββββββββββββββββββββββ β
β β β
β ββββββββΌβββββββ β
β β Core β β Protocol authority (github.com/GXQS/core) β
β β (gRPC) β β
β βββββββββββββββ β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
| Rule | Detail |
|---|---|
| β No key exposure | Private keys never leave walletd; renderer/UI processes receive only signed outputs |
| β No vault access | Mining runtimes operate without any vault access |
| β No signing duplication | All signing originates from walletd; no frontend reimplementation |
| β Authenticated IPC | All RPC channels require authentication + scoped permissions |
| β Untrusted surfaces | Web, Desktop, Mobile, and Browser runtimes are treated as untrusted |
wallet/
βββ apps/
β βββ web/ # Next.js 16 enterprise dashboard
β βββ mobile/ # React Native + Expo mobile app
βββ packages/
β βββ sdk/ # TypeScript SDK (@gxqs/sdk)
β βββ ui/ # Shared UI components (@gxqs/ui)
βββ runtime/
β βββ gxqs-runtime/ # Runtime supervisor (watchdog)
β βββ protocol/
β β βββ go-rpc-bridge/ # Go JSON-RPC walletd (Core integration)
β βββ policy-engine/ # YAML enterprise policy engine
β βββ crypto/
β βββ gxqs-wallet-core-rs/ # Rust: AES-256-GCM vault + WASM
βββ infra/
β βββ docker/ # Dockerfiles + Docker Compose
β βββ kubernetes/ # Kustomize base manifests
β βββ observability/ # Prometheus + Grafana configs
βββ api/ # OpenAPI spec (walletd)
βββ scripts/ # bootstrap.sh / bootstrap.ps1
βββ .github/workflows/ # CI: Go, Rust, TypeScript, WASM
Linux / macOS:
# Verifies prerequisites, syncs/fetches dependencies, and installs audit tools
bash scripts/bootstrap.sh
make buildWindows (PowerShell):
# Run from repo root
.\scripts\bootstrap.ps1
make buildPrerequisites: Go 1.24+, Rust 1.94.1+, Node.js 24+, pnpm 11+
# 1 β TypeScript packages
pnpm install
# 2 β Start web dashboard (dev)
pnpm --filter @gxqs/web dev
# 3 β Validate frontend quality gates
pnpm format:check
pnpm lint
pnpm typecheck
pnpm test
# 4 β Run walletd (Go)
cd runtime/protocol/go-rpc-bridge && go run ./cmd/walletd
# 5 β Verify
curl http://localhost:8545/healthz
curl http://localhost:8545/rpc/v1/versionPre-commit checks are enforced with Lefthook in strict order:
pnpm generated:guardβ removes non-material generated-file drift from stagingpnpm format:stagedβ runsprettier --writeon staged files onlypnpm format:check:stagedβ strictprettier --checkon staged filespnpm lintandpnpm typecheckβ static quality gates
For generated file classification and commit behavior, see:
docs/GENERATED_FILE_POLICY.mddocs/CONTRIBUTOR_WORKFLOW.md
# Format only staged files (same behavior as pre-commit step)
pnpm format:staged
# Strictly verify formatting on staged files
pnpm format:check:staged
# Format full repository
pnpm format
# Verify formatting without writing changes
pnpm format:checkEnterprise dashboard featuring:
- Real-time telemetry β Live TPS, block height, finality, validator count
- Neon glow system β
#00ffe1primary glow with state-driven animations - Glassmorphism UI β Frosted glass effects with depth levels
- Responsive design β Mobile-first adaptive layout with bottom navigation
- Live charts β Collapsible TPS chart with auto-refresh
- Block stream β Real-time block updates with SSE streaming
- Mempool monitor β Priority-based transaction visualization
Note: This is a representative SVG mockup. The actual dashboard is fully interactive with live Core gRPC data.
docs/architecture/MOBILE_FIRST_ADAPTIVE_UI.mddocs/RESPONSIVE_STORYBOOK_DOCS.md
cd infra/docker
docker compose up -d
# Web dashboard β http://localhost:3000
# walletd RPC β http://localhost:8545
# Grafana β http://localhost:3001 (admin / changeme)
# Prometheus β http://localhost:9090| Command | Description |
|---|---|
make help |
Show all targets |
make bootstrap |
Install all toolchain prerequisites and project dependencies |
make build |
Build all (Go, Rust, TypeScript) |
make test |
Run all tests |
make lint |
Lint all workspaces |
make typecheck |
TypeScript type-check |
make audit |
Security audit (pnpm + cargo) |
make fmt |
Format all code |
make docker |
Build Docker images |
make k8s |
Apply Kubernetes manifests |
make clean |
Remove build artifacts |
All pull requests must pass required CI gates. govulncheck currently runs as report-only (non-blocking):
| Gate | Tool |
|---|---|
| TypeScript check | tsc --noEmit |
| Go vet | go vet |
| Go test (race) | go test -race |
| Go build | go build |
| Go vuln check (report-only) | govulncheck |
| Rust clippy | cargo clippy |
| Rust fmt | cargo fmt |
| npm audit | pnpm audit |
| cargo audit | cargo audit |
| WASM build | cargo build --target wasm32-unknown-unknown |
| Prettier format | prettier --check |
CI runs on Ubuntu, Windows, and macOS for all language stacks.
| Process | Vault Access | Network Access | UI Access |
|---|---|---|---|
| walletd | β R/W | Internal only | β |
| minerd | β | Pool RPC only | β |
| validatord | β | Consensus RPC | β |
| telemetryd | β | Telemetry sink | β |
| Web UI | β | walletd IPC | β |
| Browser | β | Pool RPC only | β |
| Feature | Description |
|---|---|
| Neon Glow System | State-driven glow effects (hover, active, critical) with #00ffe1 primary |
| Glassmorphism | Three depth levels (L1/L2/L3) with backdrop blur and translucent borders |
| Responsive Navigation | Sidebar on desktop β Bottom nav with expandable tray on mobile |
| Live Streaming | Server-Sent Events (SSE) for blocks and events β no browser gRPC |
| Collapsible Charts | Toggle charts on mobile, memoized for performance |
| Dark Theme | Cyberpunk-inspired dark interface with high contrast |
Wallet v0.1.0 consumes Core as the protocol authority:
- β
Canonical Protobuf schemas from
github.com/GXQS/core(proto/in Core repo) - β Hybrid post-quantum signing (Ed25519 + Dilithium2)
- β
gRPC client wrapper for
WalletService - β Deterministic event sourcing support
Apache-2.0 Β© GXQS Platform Team