token_transfer_checked

Transfers vault SPL/Token-2022 tokens with checked mint decimals under GLAM authorization and transfer policy.

Handler narrative

Load the GLAM state or program account required by the instruction and verify the signer.
Verify that the integration is enabled on the vault and that the caller has the required delegate permission or owner authority.
Validate the instruction-specific policy, then invoke the external protocol with the vault authority where required.

The submitted accounts must match the declared account list, signer requirements, writable requirements, fixed program addresses, and account relationships shown below.
The GLAM state account is the source of truth for owner, enabled integrations, delegate permissions, policies, assets, borrowable assets, timelock settings, mint linkage, and pricing records.
The vault account must be the PDA controlled by the core protocol program and derived conceptually from the state account; instructions use it as the vault authority for SOL, token accounts, and external positions.
The vault integration ACL must enable this integration before the instruction is accepted; that enablement is defined on the GLAM state account.
If the signer is not the owner, the delegate ACL on the GLAM state must contain the exact protocol permission required by this instruction; registering a delegate alone is insufficient.
Instruction-specific destination accounts must satisfy the external protocol's own account model; GLAM validates the accounts it needs for authorization and policy enforcement, then passes the remaining protocol accounts through CPI.
Asset, amount, and destination restrictions must satisfy the configured transfer or destination policy when that policy is present.

Uses the standard Big Seven account pattern, plus the instruction-specific accounts below.

Account	Role	Description
from	writable	Token account read or written by the instruction.
mint	read-only	Token mint account used by the instruction.
to	writable	Token account read or written by the instruction.

Argument	Type	Notes
amount	u64	Token amount in the mint's smallest unit.
decimals	u8	Expected mint decimals used by the checked transfer to prevent mint/decimal mismatch.

Enable SplToken / SPL Token support on the vault integration ACL. Protocol bitflag: 0b00000001.
Delegate permission: SPL Transfer (0b0000000000000001).
Destination and asset restrictions must satisfy the configured transfer or destination policy when one is set.

await glamClient.vault.tokenTransfer(
  usdcMint,
  50_000_000,
  recipient,
);

No additional cross-instruction constraint is documented beyond account initialization, authority checks, and policy validation.