@aztec/node-keystore 2.0.0-nightly.20250826 → 2.0.0-nightly.20250828

package/dest/config.d.ts

@@ -0,0 +1,7 @@
+import { type ConfigMappingsType } from '@aztec/foundation/config';
+export type KeyStoreConfig = {
+    keyStoreDirectory: string | undefined;
+};
+export declare const keyStoreConfigMappings: ConfigMappingsType<KeyStoreConfig>;
+export declare function getKeyStoreConfigFromEnv(): KeyStoreConfig;
+//# sourceMappingURL=config.d.ts.map

package/dest/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAyB,MAAM,0BAA0B,CAAC;AAE1F,MAAM,MAAM,cAAc,GAAG;IAC3B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,kBAAkB,CAAC,cAAc,CAKrE,CAAC;AAEF,wBAAgB,wBAAwB,IAAI,cAAc,CAEzD"}

package/dest/config.js

@@ -0,0 +1,10 @@
+import { getConfigFromMappings } from '@aztec/foundation/config';
+export const keyStoreConfigMappings = {
+    keyStoreDirectory: {
+        env: 'KEY_STORE_DIRECTORY',
+        description: 'Location of key store directory'
+    }
+};
+export function getKeyStoreConfigFromEnv() {
+    return getConfigFromMappings(keyStoreConfigMappings);
+}

package/dest/index.d.ts

@@ -3,4 +3,5 @@ export * from './loader.js';
 export * from './schemas.js';
 export * from './signer.js';
 export * from './keystore_manager.js';
+export * from './config.js';
 //# sourceMappingURL=index.d.ts.map

package/dest/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC"}

package/dest/index.js

@@ -3,3 +3,4 @@ export * from './loader.js';
 export * from './schemas.js';
 export * from './signer.js';
 export * from './keystore_manager.js';
+export * from './config.js';

package/dest/keystore_manager.d.ts

@@ -3,11 +3,11 @@
  *
  * Manages keystore configuration and delegates signing operations to appropriate signers.
  */
+import type { EthSigner } from '@aztec/ethereum';
 import { Buffer32 } from '@aztec/foundation/buffer';
 import { EthAddress } from '@aztec/foundation/eth-address';
 import type { Signature } from '@aztec/foundation/eth-signature';
 import type { TypedDataDefinition } from 'viem';
-import { type Signer } from './signer.js';
 import type { EthAccounts, EthRemoteSignerConfig, KeyStore, ProverKeyStore, ValidatorKeyStore as ValidatorKeystoreConfig } from './types.js';
 /**
  * Error thrown when keystore operations fail
@@ -42,19 +42,23 @@ export declare class KeystoreManager {
     /**
      * Create signers for validator attester accounts
      */
-    createAttesterSigners(validatorIndex: number): Signer[];
+    createAttesterSigners(validatorIndex: number): EthSigner[];
     /**
      * Create signers for validator publisher accounts (falls back to attester if not specified)
      */
-    createPublisherSigners(validatorIndex: number): Signer[];
+    createPublisherSigners(validatorIndex: number): EthSigner[];
+    createAllValidatorPublisherSigners(): EthSigner[];
     /**
      * Create signers for slasher accounts
      */
-    createSlasherSigners(): Signer[];
+    createSlasherSigners(): EthSigner[];
     /**
      * Create signers for prover accounts
      */
-    createProverSigners(): Signer[];
+    createProverSigners(): {
+        id: EthAddress | undefined;
+        signers: EthSigner[];
+    } | undefined;
     /**
      * Get validator configuration by index
      */
@@ -109,11 +113,11 @@ export declare class KeystoreManager {
     /**
      * Sign message with a specific signer
      */
-    signMessage(signer: Signer, message: Buffer32): Promise<Signature>;
+    signMessage(signer: EthSigner, message: Buffer32): Promise<Signature>;
     /**
      * Sign typed data with a specific signer
      */
-    signTypedData(signer: Signer, typedData: TypedDataDefinition): Promise<Signature>;
+    signTypedData(signer: EthSigner, typedData: TypedDataDefinition): Promise<Signature>;
     /**
      * Get the effective remote signer configuration for a specific attester address
      * Precedence: account-level override > validator-level config > file-level default

package/dest/keystore_manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keystore_manager.d.ts","sourceRoot":"","sources":["../src/keystore_manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAKjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAGhD,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAEV,WAAW,EAKX,qBAAqB,EACrB,QAAQ,EACR,cAAc,EACd,iBAAiB,IAAI,uBAAuB,EAC7C,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAGpB,KAAK,CAAC,EAAE,KAAK;gBAD7B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,KAAK,YAAA;CAKhC;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IAEpC;;;;OAIG;gBACS,QAAQ,EAAE,QAAQ;IAK9B;;;;;OAKG;IACH,OAAO,CAAC,+BAA+B;IAkBvC;;;OAGG;IACH,OAAO,CAAC,0CAA0C;IAiElD;;OAEG;IACH,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE;IAKvD;;OAEG;IACH,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE;IAcxD;;OAEG;IACH,oBAAoB,IAAI,MAAM,EAAE;IAQhC;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;IA0B/B;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB;IAOpD;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,UAAU;IAgBtD;;OAEG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAK/C;;;OAGG;IACH,kBAAkB,IAAI,WAAW,GAAG,SAAS;IAI7C;;;OAGG;IACH,eAAe,IAAI,cAAc,GAAG,SAAS;IAI7C;;;OAGG;IACH,uCAAuC,IAAI,IAAI;IAqB/C;;OAEG;IACH,OAAO,CAAC,4BAA4B;IA4BpC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IA+ClC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkD9B;;OAEG;IACH,OAAO,CAAC,gCAAgC;IAwBxC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA8BjC;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAIxE;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;IAIvF;;;OAGG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,UAAU,GAC1B,qBAAqB,GAAG,SAAS;CAiIrC"}
+{"version":3,"file":"keystore_manager.d.ts","sourceRoot":"","sources":["../src/keystore_manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAKjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAIhD,OAAO,KAAK,EAEV,WAAW,EAKX,qBAAqB,EACrB,QAAQ,EACR,cAAc,EACd,iBAAiB,IAAI,uBAAuB,EAC7C,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAGpB,KAAK,CAAC,EAAE,KAAK;gBAD7B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,KAAK,YAAA;CAKhC;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IAEpC;;;;OAIG;gBACS,QAAQ,EAAE,QAAQ;IAK9B;;;;;OAKG;IACH,OAAO,CAAC,+BAA+B;IAkBvC;;;OAGG;IACH,OAAO,CAAC,0CAA0C;IAiElD;;OAEG;IACH,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE;IAK1D;;OAEG;IACH,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE;IAc3D,kCAAkC,IAAI,SAAS,EAAE;IAWjD;;OAEG;IACH,oBAAoB,IAAI,SAAS,EAAE;IAQnC;;OAEG;IACH,mBAAmB,IAAI;QAAE,EAAE,EAAE,UAAU,GAAG,SAAS,CAAC;QAAC,OAAO,EAAE,SAAS,EAAE,CAAA;KAAE,GAAG,SAAS;IAiCvF;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB;IAOpD;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,UAAU;IAgBtD;;OAEG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAK/C;;;OAGG;IACH,kBAAkB,IAAI,WAAW,GAAG,SAAS;IAI7C;;;OAGG;IACH,eAAe,IAAI,cAAc,GAAG,SAAS;IAI7C;;;OAGG;IACH,uCAAuC,IAAI,IAAI;IAqB/C;;OAEG;IACH,OAAO,CAAC,4BAA4B;IA+BpC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IA+ClC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkD9B;;OAEG;IACH,OAAO,CAAC,gCAAgC;IAwBxC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA8BjC;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3E;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;IAI1F;;;OAGG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,UAAU,GAC1B,qBAAqB,GAAG,SAAS;CAiIrC"}

package/dest/keystore_manager.js

@@ -125,6 +125,14 @@ import { LocalSigner, RemoteSigner } from './signer.js';
         // Fall back to attester signers
         return this.createAttesterSigners(validatorIndex);
     }
+    createAllValidatorPublisherSigners() {
+        const numValidators = this.getValidatorCount();
+        const allPublishers = [];
+        for(let i = 0; i < numValidators; i++){
+            allPublishers.push(...this.createPublisherSigners(i));
+        }
+        return allPublishers;
+    }
     /**
    * Create signers for slasher accounts
    */ createSlasherSigners() {
@@ -137,11 +145,15 @@ import { LocalSigner, RemoteSigner } from './signer.js';
    * Create signers for prover accounts
    */ createProverSigners() {
         if (!this.keystore.prover) {
-            return [];
+            return undefined;
         }
         // Handle simple prover case (just a private key)
         if (typeof this.keystore.prover === 'string' || 'path' in this.keystore.prover || 'address' in this.keystore.prover) {
-            return this.createSignersFromEthAccounts(this.keystore.prover, this.keystore.remoteSigner);
+            const signers = this.createSignersFromEthAccounts(this.keystore.prover, this.keystore.remoteSigner);
+            return {
+                id: undefined,
+                signers
+            };
         }
         // Handle complex prover case with id and publishers
         const proverConfig = this.keystore.prover;
@@ -150,7 +162,10 @@ import { LocalSigner, RemoteSigner } from './signer.js';
             const publisherSigners = this.createSignersFromEthAccounts(publisherAccounts, this.keystore.remoteSigner);
             signers.push(...publisherSigners);
         }
-        return signers;
+        return {
+            id: EthAddress.fromString(proverConfig.id),
+            signers
+        };
     }
     /**
    * Get validator configuration by index

package/dest/signer.d.ts

@@ -3,58 +3,42 @@
  *
  * Common interface for different signing backends (local, remote, encrypted)
  */
+import type { EthSigner } from '@aztec/ethereum';
 import { Buffer32 } from '@aztec/foundation/buffer';
 import type { EthAddress } from '@aztec/foundation/eth-address';
 import { Signature } from '@aztec/foundation/eth-signature';
-import type { TypedDataDefinition } from 'viem';
+import { type TransactionSerializable, type TypedDataDefinition } from 'viem';
 import type { EthRemoteSignerConfig } from './types.js';
 /**
  * Error thrown for remote signer HTTP or JSON-RPC failures
  */
 export declare class SignerError extends Error {
-    method: 'eth_sign' | 'eth_signTypedData_v4';
+    method: 'eth_sign' | 'eth_signTransaction' | 'eth_signTypedData_v4';
     url: string;
     statusCode?: number | undefined;
     errorCode?: number | undefined;
-    constructor(message: string, method: 'eth_sign' | 'eth_signTypedData_v4', url: string, statusCode?: number | undefined, errorCode?: number | undefined);
+    constructor(message: string, method: 'eth_sign' | 'eth_signTransaction' | 'eth_signTypedData_v4', url: string, statusCode?: number | undefined, errorCode?: number | undefined);
 }
-/**
- * Common interface for all signer implementations
- */
-/**
- * Abstraction for signing operations used by the node keystore.
- */
-export interface Signer {
-    /** The Ethereum address for this signer */
-    readonly address: EthAddress;
-    /** Sign a message using eth_sign (with Ethereum message prefix) */
-    signMessage(message: Buffer32): Promise<Signature>;
-    /** Sign typed data using EIP-712 */
-    signTypedData(typedData: TypedDataDefinition): Promise<Signature>;
-}
-/**
- * Local signer using in-memory private key
- */
 /**
  * Local signer that holds an in-memory Secp256k1 private key.
  */
-export declare class LocalSigner implements Signer {
+export declare class LocalSigner implements EthSigner {
+    private privateKey;
     private readonly signer;
     constructor(privateKey: Buffer32);
     get address(): EthAddress;
     signMessage(message: Buffer32): Promise<Signature>;
     signTypedData(typedData: TypedDataDefinition): Promise<Signature>;
+    signTransaction(transaction: TransactionSerializable): Promise<Signature>;
 }
-/**
- * Remote signer using Web3Signer HTTP API
- */
 /**
  * Remote signer that proxies signing operations to a Web3Signer-compatible HTTP endpoint.
  */
-export declare class RemoteSigner implements Signer {
+export declare class RemoteSigner implements EthSigner {
     readonly address: EthAddress;
     private readonly config;
-    constructor(address: EthAddress, config: EthRemoteSignerConfig);
+    private fetch;
+    constructor(address: EthAddress, config: EthRemoteSignerConfig, fetch?: typeof globalThis.fetch);
     /**
      * Sign a message using eth_sign via remote JSON-RPC.
      */
@@ -63,6 +47,7 @@ export declare class RemoteSigner implements Signer {
      * Sign typed data using eth_signTypedData_v4 via remote JSON-RPC.
      */
     signTypedData(typedData: TypedDataDefinition): Promise<Signature>;
+    signTransaction(transaction: TransactionSerializable): Promise<Signature>;
     /**
      * Make a JSON-RPC sign request using eth_sign
      */
@@ -70,13 +55,14 @@ export declare class RemoteSigner implements Signer {
      * Make a JSON-RPC eth_sign request.
      */
     private makeJsonRpcSignRequest;
-    /**
-     * Make a JSON-RPC sign typed data request using eth_signTypedData_v4
-     */
     /**
      * Make a JSON-RPC eth_signTypedData_v4 request.
      */
     private makeJsonRpcSignTypedDataRequest;
+    /**
+     * Make a JSON-RPC eth_signTransaction request.
+     */
+    private makeJsonRpcSignTransactionRequest;
     /**
      * Resolve the effective remote signer URL from config.
      */

package/dest/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAE5D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAGhD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;IAG3B,MAAM,EAAE,UAAU,GAAG,sBAAsB;IAC3C,GAAG,EAAE,MAAM;IACX,UAAU,CAAC,EAAE,MAAM;IACnB,SAAS,CAAC,EAAE,MAAM;gBAJzB,OAAO,EAAE,MAAM,EACR,MAAM,EAAE,UAAU,GAAG,sBAAsB,EAC3C,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,SAAS,CAAC,EAAE,MAAM,YAAA;CAK5B;AAED;;GAEG;AACH;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAE7B,mEAAmE;IACnE,WAAW,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnD,oCAAoC;IACpC,aAAa,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACnE;AAED;;GAEG;AACH;;GAEG;AACH,qBAAa,WAAY,YAAW,MAAM;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAE7B,UAAU,EAAE,QAAQ;IAIhC,IAAI,OAAO,IAAI,UAAU,CAExB;IAED,WAAW,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlD,aAAa,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;CAIlE;AAED;;GAEG;AACH;;GAEG;AACH,qBAAa,YAAa,YAAW,MAAM;aAEvB,OAAO,EAAE,UAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADP,OAAO,EAAE,UAAU,EAClB,MAAM,EAAE,qBAAqB;IAGhD;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAIxD;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;IAIvE;;OAEG;IACH;;OAEG;YACW,sBAAsB;IAoDpC;;OAEG;IACH;;OAEG;YACW,+BAA+B;IAoD7C;;OAEG;IACH,OAAO,CAAC,YAAY;CAMrB"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAiC,MAAM,iCAAiC,CAAC;AAG3F,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EAKzB,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;IAG3B,MAAM,EAAE,UAAU,GAAG,qBAAqB,GAAG,sBAAsB;IACnE,GAAG,EAAE,MAAM;IACX,UAAU,CAAC,EAAE,MAAM;IACnB,SAAS,CAAC,EAAE,MAAM;gBAJzB,OAAO,EAAE,MAAM,EACR,MAAM,EAAE,UAAU,GAAG,qBAAqB,GAAG,sBAAsB,EACnE,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,SAAS,CAAC,EAAE,MAAM,YAAA;CAK5B;AAED;;GAEG;AACH,qBAAa,WAAY,YAAW,SAAS;IAG/B,OAAO,CAAC,UAAU;IAF9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAErB,UAAU,EAAE,QAAQ;IAIxC,IAAI,OAAO,IAAI,UAAU,CAExB;IAED,WAAW,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlD,aAAa,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;IAKjE,eAAe,CAAC,WAAW,EAAE,uBAAuB,GAAG,OAAO,CAAC,SAAS,CAAC;CAc1E;AAmBD;;GAEG;AACH,qBAAa,YAAa,YAAW,SAAS;aAE1B,OAAO,EAAE,UAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,KAAK;gBAFG,OAAO,EAAE,UAAU,EAClB,MAAM,EAAE,qBAAqB,EACtC,KAAK,GAAE,OAAO,UAAU,CAAC,KAAwB;IAG3D;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAIxD;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;IAIvE,eAAe,CAAC,WAAW,EAAE,uBAAuB,GAAG,OAAO,CAAC,SAAS,CAAC;IAIzE;;OAEG;IACH;;OAEG;YACW,sBAAsB;IAoDpC;;OAEG;YACW,+BAA+B;IAoD7C;;OAEG;YACW,iCAAiC;IAqF/C;;OAEG;IACH,OAAO,CAAC,YAAY;CAMrB"}

package/dest/signer.js

@@ -3,9 +3,10 @@
  *
  * Common interface for different signing backends (local, remote, encrypted)
  */ import { Buffer32 } from '@aztec/foundation/buffer';
-import { Secp256k1Signer } from '@aztec/foundation/crypto';
+import { Secp256k1Signer, toRecoveryBit } from '@aztec/foundation/crypto';
 import { Signature } from '@aztec/foundation/eth-signature';
-import { hashTypedData } from 'viem';
+import { withHexPrefix } from '@aztec/foundation/string';
+import { hashTypedData, keccak256, parseTransaction, serializeTransaction } from 'viem';
 /**
  * Error thrown for remote signer HTTP or JSON-RPC failures
  */ export class SignerError extends Error {
@@ -19,12 +20,12 @@ import { hashTypedData } from 'viem';
     }
 }
 /**
- * Local signer using in-memory private key
- */ /**
  * Local signer that holds an in-memory Secp256k1 private key.
  */ export class LocalSigner {
+    privateKey;
     signer;
     constructor(privateKey){
+        this.privateKey = privateKey;
         this.signer = new Secp256k1Signer(privateKey);
     }
     get address() {
@@ -37,17 +38,28 @@ import { hashTypedData } from 'viem';
         const digest = hashTypedData(typedData);
         return Promise.resolve(this.signer.sign(Buffer32.fromString(digest)));
     }
+    signTransaction(transaction) {
+        // Taken from viem's `signTransaction` implementation
+        const tx = transaction.type === 'eip4844' ? {
+            ...transaction,
+            sidecars: false
+        } : transaction;
+        const serializedTx = serializeTransaction(tx);
+        const txHash = keccak256(serializedTx);
+        const sig = this.signer.sign(Buffer32.fromString(txHash.slice(2)));
+        return Promise.resolve(new Signature(sig.r, sig.s, toRecoveryBit(sig.v)));
+    }
 }
 /**
- * Remote signer using Web3Signer HTTP API
- */ /**
  * Remote signer that proxies signing operations to a Web3Signer-compatible HTTP endpoint.
  */ export class RemoteSigner {
     address;
     config;
-    constructor(address, config){
+    fetch;
+    constructor(address, config, fetch = globalThis.fetch){
         this.address = address;
         this.config = config;
+        this.fetch = fetch;
     }
     /**
    * Sign a message using eth_sign via remote JSON-RPC.
@@ -59,6 +71,9 @@ import { hashTypedData } from 'viem';
    */ async signTypedData(typedData) {
         return await this.makeJsonRpcSignTypedDataRequest(typedData);
     }
+    signTransaction(transaction) {
+        return this.makeJsonRpcSignTransactionRequest(transaction);
+    }
     /**
    * Make a JSON-RPC sign request using eth_sign
    */ /**
@@ -74,7 +89,7 @@ import { hashTypedData } from 'viem';
             ],
             id: 1
         };
-        const response = await fetch(url, {
+        const response = await this.fetch(url, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json'
@@ -99,8 +114,6 @@ import { hashTypedData } from 'viem';
         return Signature.fromString(signatureHex);
     }
     /**
-   * Make a JSON-RPC sign typed data request using eth_signTypedData_v4
-   */ /**
    * Make a JSON-RPC eth_signTypedData_v4 request.
    */ async makeJsonRpcSignTypedDataRequest(typedData) {
         const url = this.getSignerUrl();
@@ -113,7 +126,7 @@ import { hashTypedData } from 'viem';
             ],
             id: 1
         };
-        const response = await fetch(url, {
+        const response = await this.fetch(url, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json'
@@ -138,6 +151,60 @@ import { hashTypedData } from 'viem';
         return Signature.fromString(signatureHex);
     }
     /**
+   * Make a JSON-RPC eth_signTransaction request.
+   */ async makeJsonRpcSignTransactionRequest(tx) {
+        if (tx.type !== 'eip1559') {
+            throw new Error('This signer does not support tx type: ' + tx.type);
+        }
+        const url = this.getSignerUrl();
+        const txObject = {
+            from: this.address.toString(),
+            to: tx.to ?? null,
+            data: tx.data,
+            value: typeof tx.value !== 'undefined' ? withHexPrefix(tx.value.toString(16)) : undefined,
+            nonce: typeof tx.nonce !== 'undefined' ? withHexPrefix(tx.nonce.toString(16)) : undefined,
+            gas: typeof tx.gas !== 'undefined' ? withHexPrefix(tx.gas.toString(16)) : undefined,
+            maxFeePerGas: typeof tx.maxFeePerGas !== 'undefined' ? withHexPrefix(tx.maxFeePerGas.toString(16)) : undefined,
+            maxPriorityFeePerGas: typeof tx.maxPriorityFeePerGas !== 'undefined' ? withHexPrefix(tx.maxPriorityFeePerGas.toString(16)) : undefined
+        };
+        const body = {
+            jsonrpc: '2.0',
+            method: 'eth_signTransaction',
+            params: [
+                txObject
+            ],
+            id: 1
+        };
+        const response = await this.fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(body)
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new SignerError(`Web3Signer request failed for eth_signTransaction at ${url}: ${response.status} ${response.statusText} - ${errorText}`, 'eth_signTransaction', url, response.status);
+        }
+        const result = await response.json();
+        if (result.error) {
+            throw new SignerError(`Web3Signer JSON-RPC error for eth_signTransaction at ${url}: ${result.error.code} - ${result.error.message}`, 'eth_signTransaction', url, undefined, result.error.code);
+        }
+        if (!result.result) {
+            throw new Error('Invalid response from Web3Signer: no result found');
+        }
+        let rawTxHex = result.result;
+        if (!rawTxHex.startsWith('0x')) {
+            rawTxHex = '0x' + rawTxHex;
+        }
+        // we get back to whole signed tx. Deserialize it in order to read the signature
+        const parsedTxWithSignature = parseTransaction(rawTxHex);
+        if (parsedTxWithSignature.r === undefined || parsedTxWithSignature.s === undefined || parsedTxWithSignature.v === undefined) {
+            throw new Error('Tx not signed by Web3Signer');
+        }
+        return Signature.fromViemTransactionSignature(parsedTxWithSignature);
+    }
+    /**
    * Resolve the effective remote signer URL from config.
    */ getSignerUrl() {
         if (typeof this.config === 'string') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aztec/node-keystore",
-  "version": "2.0.0-nightly.20250826",
+  "version": "2.0.0-nightly.20250828",
   "type": "module",
   "exports": {
     ".": "./dest/index.js",
@@ -62,8 +62,9 @@
     ]
   },
   "dependencies": {
-    "@aztec/foundation": "2.0.0-nightly.20250826",
-    "@aztec/stdlib": "2.0.0-nightly.20250826",
+    "@aztec/ethereum": "2.0.0-nightly.20250828",
+    "@aztec/foundation": "2.0.0-nightly.20250828",
+    "@aztec/stdlib": "2.0.0-nightly.20250828",
     "@ethersproject/wallet": "^5.7.0",
     "tslib": "^2.4.0",
     "viem": "2.23.7",

package/src/config.ts

@@ -0,0 +1,16 @@
+import { type ConfigMappingsType, getConfigFromMappings } from '@aztec/foundation/config';
+
+export type KeyStoreConfig = {
+  keyStoreDirectory: string | undefined;
+};
+
+export const keyStoreConfigMappings: ConfigMappingsType<KeyStoreConfig> = {
+  keyStoreDirectory: {
+    env: 'KEY_STORE_DIRECTORY',
+    description: 'Location of key store directory',
+  },
+};
+
+export function getKeyStoreConfigFromEnv(): KeyStoreConfig {
+  return getConfigFromMappings<KeyStoreConfig>(keyStoreConfigMappings);
+}

package/src/index.ts

@@ -3,3 +3,4 @@ export * from './loader.js';
 export * from './schemas.js';
 export * from './signer.js';
 export * from './keystore_manager.js';
+export * from './config.js';

package/src/keystore_manager.ts

@@ -3,6 +3,7 @@
  *
  * Manages keystore configuration and delegates signing operations to appropriate signers.
  */
+import type { EthSigner } from '@aztec/ethereum';
 import { Buffer32 } from '@aztec/foundation/buffer';
 import { EthAddress } from '@aztec/foundation/eth-address';
 import type { Signature } from '@aztec/foundation/eth-signature';
@@ -13,7 +14,7 @@ import { extname, join } from 'path';
 import type { TypedDataDefinition } from 'viem';
 import { mnemonicToAccount } from 'viem/accounts';
 
-import { LocalSigner, RemoteSigner, type Signer } from './signer.js';
+import { LocalSigner, RemoteSigner } from './signer.js';
 import type {
   EthAccount,
   EthAccounts,
@@ -152,7 +153,7 @@ export class KeystoreManager {
   /**
    * Create signers for validator attester accounts
    */
-  createAttesterSigners(validatorIndex: number): Signer[] {
+  createAttesterSigners(validatorIndex: number): EthSigner[] {
     const validator = this.getValidator(validatorIndex);
     return this.createSignersFromEthAccounts(validator.attester, validator.remoteSigner || this.keystore.remoteSigner);
   }
@@ -160,7 +161,7 @@ export class KeystoreManager {
   /**
    * Create signers for validator publisher accounts (falls back to attester if not specified)
    */
-  createPublisherSigners(validatorIndex: number): Signer[] {
+  createPublisherSigners(validatorIndex: number): EthSigner[] {
     const validator = this.getValidator(validatorIndex);
 
     if (validator.publisher) {
@@ -174,10 +175,21 @@ export class KeystoreManager {
     return this.createAttesterSigners(validatorIndex);
   }
 
+  createAllValidatorPublisherSigners(): EthSigner[] {
+    const numValidators = this.getValidatorCount();
+    const allPublishers = [];
+
+    for (let i = 0; i < numValidators; i++) {
+      allPublishers.push(...this.createPublisherSigners(i));
+    }
+
+    return allPublishers;
+  }
+
   /**
    * Create signers for slasher accounts
    */
-  createSlasherSigners(): Signer[] {
+  createSlasherSigners(): EthSigner[] {
     if (!this.keystore.slasher) {
       return [];
     }
@@ -188,9 +200,9 @@ export class KeystoreManager {
   /**
    * Create signers for prover accounts
    */
-  createProverSigners(): Signer[] {
+  createProverSigners(): { id: EthAddress | undefined; signers: EthSigner[] } | undefined {
     if (!this.keystore.prover) {
-      return [];
+      return undefined;
     }
 
     // Handle simple prover case (just a private key)
@@ -199,19 +211,26 @@ export class KeystoreManager {
       'path' in this.keystore.prover ||
       'address' in this.keystore.prover
     ) {
-      return this.createSignersFromEthAccounts(this.keystore.prover as EthAccount, this.keystore.remoteSigner);
+      const signers = this.createSignersFromEthAccounts(this.keystore.prover as EthAccount, this.keystore.remoteSigner);
+      return {
+        id: undefined,
+        signers,
+      };
     }
 
     // Handle complex prover case with id and publishers
     const proverConfig = this.keystore.prover;
-    const signers: Signer[] = [];
+    const signers: EthSigner[] = [];
 
     for (const publisherAccounts of proverConfig.publisher) {
       const publisherSigners = this.createSignersFromEthAccounts(publisherAccounts, this.keystore.remoteSigner);
       signers.push(...publisherSigners);
     }
 
-    return signers;
+    return {
+      id: EthAddress.fromString(proverConfig.id),
+      signers,
+    };
   }
 
   /**
@@ -302,13 +321,16 @@ export class KeystoreManager {
   /**
    * Create signers from EthAccounts configuration
    */
-  private createSignersFromEthAccounts(accounts: EthAccounts, defaultRemoteSigner?: EthRemoteSignerConfig): Signer[] {
+  private createSignersFromEthAccounts(
+    accounts: EthAccounts,
+    defaultRemoteSigner?: EthRemoteSignerConfig,
+  ): EthSigner[] {
     if (typeof accounts === 'string') {
       return [this.createSignerFromEthAccount(accounts, defaultRemoteSigner)];
     }
 
     if (Array.isArray(accounts)) {
-      const signers: Signer[] = [];
+      const signers: EthSigner[] = [];
       for (const account of accounts) {
         const accountSigners = this.createSignersFromEthAccounts(account, defaultRemoteSigner);
         signers.push(...accountSigners);
@@ -333,7 +355,7 @@ export class KeystoreManager {
   /**
    * Create a signer from a single EthAccount configuration
    */
-  private createSignerFromEthAccount(account: EthAccount, defaultRemoteSigner?: EthRemoteSignerConfig): Signer {
+  private createSignerFromEthAccount(account: EthAccount, defaultRemoteSigner?: EthRemoteSignerConfig): EthSigner {
     // Private key (hex string)
     if (typeof account === 'string') {
       if (account.startsWith('0x') && account.length === 66) {
@@ -383,14 +405,14 @@ export class KeystoreManager {
   /**
    * Create signer from JSON V3 keystore file or directory
    */
-  private createSignerFromJsonV3(config: EthJsonKeyFileV3Config): Signer[] {
+  private createSignerFromJsonV3(config: EthJsonKeyFileV3Config): EthSigner[] {
     try {
       const stats = statSync(config.path);
 
       if (stats.isDirectory()) {
         // Handle directory - load all JSON files
         const files = readdirSync(config.path);
-        const signers: Signer[] = [];
+        const signers: EthSigner[] = [];
         const seenAddresses = new Map<string, string>(); // address -> file name
 
         for (const file of files) {
@@ -436,7 +458,7 @@ export class KeystoreManager {
   /**
    * Create signer from a single JSON V3 keystore file
    */
-  private createSignerFromSingleJsonV3File(filePath: string, password?: string): Signer {
+  private createSignerFromSingleJsonV3File(filePath: string, password?: string): EthSigner {
     try {
       // Read the keystore file
       const keystoreJson = readFileSync(filePath, 'utf8');
@@ -463,9 +485,9 @@ export class KeystoreManager {
   /**
    * Create signers from mnemonic configuration using BIP44 derivation
    */
-  private createSignersFromMnemonic(config: EthMnemonicConfig): Signer[] {
+  private createSignersFromMnemonic(config: EthMnemonicConfig): EthSigner[] {
     const { mnemonic, addressIndex = 0, accountIndex = 0, addressCount = 1, accountCount = 1 } = config;
-    const signers: Signer[] = [];
+    const signers: EthSigner[] = [];
 
     try {
       // Use viem's mnemonic derivation (imported at top of file)
@@ -496,14 +518,14 @@ export class KeystoreManager {
   /**
    * Sign message with a specific signer
    */
-  async signMessage(signer: Signer, message: Buffer32): Promise<Signature> {
+  async signMessage(signer: EthSigner, message: Buffer32): Promise<Signature> {
     return await signer.signMessage(message);
   }
 
   /**
    * Sign typed data with a specific signer
    */
-  async signTypedData(signer: Signer, typedData: TypedDataDefinition): Promise<Signature> {
+  async signTypedData(signer: EthSigner, typedData: TypedDataDefinition): Promise<Signature> {
     return await signer.signTypedData(typedData);
   }
 

package/src/signer.ts

@@ -3,13 +3,21 @@
  *
  * Common interface for different signing backends (local, remote, encrypted)
  */
+import type { EthSigner } from '@aztec/ethereum';
 import { Buffer32 } from '@aztec/foundation/buffer';
-import { Secp256k1Signer } from '@aztec/foundation/crypto';
+import { Secp256k1Signer, toRecoveryBit } from '@aztec/foundation/crypto';
 import type { EthAddress } from '@aztec/foundation/eth-address';
-import { Signature } from '@aztec/foundation/eth-signature';
-
-import type { TypedDataDefinition } from 'viem';
-import { hashTypedData } from 'viem';
+import { Signature, type ViemTransactionSignature } from '@aztec/foundation/eth-signature';
+import { withHexPrefix } from '@aztec/foundation/string';
+
+import {
+  type TransactionSerializable,
+  type TypedDataDefinition,
+  hashTypedData,
+  keccak256,
+  parseTransaction,
+  serializeTransaction,
+} from 'viem';
 
 import type { EthRemoteSignerConfig } from './types.js';
 
@@ -19,7 +27,7 @@ import type { EthRemoteSignerConfig } from './types.js';
 export class SignerError extends Error {
   constructor(
     message: string,
-    public method: 'eth_sign' | 'eth_signTypedData_v4',
+    public method: 'eth_sign' | 'eth_signTransaction' | 'eth_signTypedData_v4',
     public url: string,
     public statusCode?: number,
     public errorCode?: number,
@@ -29,33 +37,13 @@ export class SignerError extends Error {
   }
 }
 
-/**
- * Common interface for all signer implementations
- */
-/**
- * Abstraction for signing operations used by the node keystore.
- */
-export interface Signer {
-  /** The Ethereum address for this signer */
-  readonly address: EthAddress;
-
-  /** Sign a message using eth_sign (with Ethereum message prefix) */
-  signMessage(message: Buffer32): Promise<Signature>;
-
-  /** Sign typed data using EIP-712 */
-  signTypedData(typedData: TypedDataDefinition): Promise<Signature>;
-}
-
-/**
- * Local signer using in-memory private key
- */
 /**
  * Local signer that holds an in-memory Secp256k1 private key.
  */
-export class LocalSigner implements Signer {
+export class LocalSigner implements EthSigner {
   private readonly signer: Secp256k1Signer;
 
-  constructor(privateKey: Buffer32) {
+  constructor(private privateKey: Buffer32) {
     this.signer = new Secp256k1Signer(privateKey);
   }
 
@@ -71,18 +59,48 @@ export class LocalSigner implements Signer {
     const digest = hashTypedData(typedData);
     return Promise.resolve(this.signer.sign(Buffer32.fromString(digest)));
   }
+
+  signTransaction(transaction: TransactionSerializable): Promise<Signature> {
+    // Taken from viem's `signTransaction` implementation
+    const tx: TransactionSerializable =
+      transaction.type === 'eip4844'
+        ? {
+            ...transaction,
+            sidecars: false,
+          }
+        : transaction;
+    const serializedTx = serializeTransaction(tx);
+    const txHash = keccak256(serializedTx);
+    const sig = this.signer.sign(Buffer32.fromString(txHash.slice(2)));
+    return Promise.resolve(new Signature(sig.r, sig.s, toRecoveryBit(sig.v)));
+  }
 }
 
-/**
- * Remote signer using Web3Signer HTTP API
- */
+// reference - https://docs.web3signer.consensys.io/reference/api/json-rpc#eth_signtransaction
+type RemoteSignerTxObject = {
+  from: string;
+  to?: string | null;
+  gas?: string;
+  maxPriorityFeePerGas?: string;
+  maxFeePerGas?: string;
+  nonce?: string;
+  value?: string;
+  data?: string;
+
+  // EIP-4844 extension - https://github.com/Consensys/web3signer/pull/1096
+  maxFeePerBlobGas?: string;
+  blobVersionedHashes?: readonly string[];
+  blobs?: readonly string[];
+};
+
 /**
  * Remote signer that proxies signing operations to a Web3Signer-compatible HTTP endpoint.
  */
-export class RemoteSigner implements Signer {
+export class RemoteSigner implements EthSigner {
   constructor(
     public readonly address: EthAddress,
     private readonly config: EthRemoteSignerConfig,
+    private fetch: typeof globalThis.fetch = globalThis.fetch,
   ) {}
 
   /**
@@ -99,6 +117,10 @@ export class RemoteSigner implements Signer {
     return await this.makeJsonRpcSignTypedDataRequest(typedData);
   }
 
+  signTransaction(transaction: TransactionSerializable): Promise<Signature> {
+    return this.makeJsonRpcSignTransactionRequest(transaction);
+  }
+
   /**
    * Make a JSON-RPC sign request using eth_sign
    */
@@ -115,7 +137,7 @@ export class RemoteSigner implements Signer {
       id: 1,
     };
 
-    const response = await fetch(url, {
+    const response = await this.fetch(url, {
       method: 'POST',
       headers: {
         'Content-Type': 'application/json',
@@ -157,9 +179,6 @@ export class RemoteSigner implements Signer {
     return Signature.fromString(signatureHex as `0x${string}`);
   }
 
-  /**
-   * Make a JSON-RPC sign typed data request using eth_signTypedData_v4
-   */
   /**
    * Make a JSON-RPC eth_signTypedData_v4 request.
    */
@@ -173,7 +192,7 @@ export class RemoteSigner implements Signer {
       id: 1,
     };
 
-    const response = await fetch(url, {
+    const response = await this.fetch(url, {
       method: 'POST',
       headers: {
         'Content-Type': 'application/json',
@@ -215,6 +234,94 @@ export class RemoteSigner implements Signer {
     return Signature.fromString(signatureHex as `0x${string}`);
   }
 
+  /**
+   * Make a JSON-RPC eth_signTransaction request.
+   */
+  private async makeJsonRpcSignTransactionRequest(tx: TransactionSerializable): Promise<Signature> {
+    if (tx.type !== 'eip1559') {
+      throw new Error('This signer does not support tx type: ' + tx.type);
+    }
+
+    const url = this.getSignerUrl();
+
+    const txObject: RemoteSignerTxObject = {
+      from: this.address.toString(),
+      to: tx.to ?? null,
+      data: tx.data,
+      value: typeof tx.value !== 'undefined' ? withHexPrefix(tx.value.toString(16)) : undefined,
+      nonce: typeof tx.nonce !== 'undefined' ? withHexPrefix(tx.nonce.toString(16)) : undefined,
+      gas: typeof tx.gas !== 'undefined' ? withHexPrefix(tx.gas.toString(16)) : undefined,
+      maxFeePerGas: typeof tx.maxFeePerGas !== 'undefined' ? withHexPrefix(tx.maxFeePerGas.toString(16)) : undefined,
+      maxPriorityFeePerGas:
+        typeof tx.maxPriorityFeePerGas !== 'undefined'
+          ? withHexPrefix(tx.maxPriorityFeePerGas.toString(16))
+          : undefined,
+
+      // maxFeePerBlobGas:
+      //   typeof tx.maxFeePerBlobGas !== 'undefined' ? withHexPrefix(tx.maxFeePerBlobGas.toString(16)) : undefined,
+      // blobVersionedHashes: tx.blobVersionedHashes,
+      // blobs: tx.blobs?.map(blob => (typeof blob === 'string' ? blob : bufferToHex(Buffer.from(blob)))),
+    };
+
+    const body = {
+      jsonrpc: '2.0',
+      method: 'eth_signTransaction',
+      params: [txObject],
+      id: 1,
+    };
+
+    const response = await this.fetch(url, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify(body),
+    });
+
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new SignerError(
+        `Web3Signer request failed for eth_signTransaction at ${url}: ${response.status} ${response.statusText} - ${errorText}`,
+        'eth_signTransaction',
+        url,
+        response.status,
+      );
+    }
+
+    const result = await response.json();
+
+    if (result.error) {
+      throw new SignerError(
+        `Web3Signer JSON-RPC error for eth_signTransaction at ${url}: ${result.error.code} - ${result.error.message}`,
+        'eth_signTransaction',
+        url,
+        undefined,
+        result.error.code,
+      );
+    }
+
+    if (!result.result) {
+      throw new Error('Invalid response from Web3Signer: no result found');
+    }
+
+    let rawTxHex = result.result;
+    if (!rawTxHex.startsWith('0x')) {
+      rawTxHex = '0x' + rawTxHex;
+    }
+
+    // we get back to whole signed tx. Deserialize it in order to read the signature
+    const parsedTxWithSignature = parseTransaction(rawTxHex);
+    if (
+      parsedTxWithSignature.r === undefined ||
+      parsedTxWithSignature.s === undefined ||
+      parsedTxWithSignature.v === undefined
+    ) {
+      throw new Error('Tx not signed by Web3Signer');
+    }
+
+    return Signature.fromViemTransactionSignature(parsedTxWithSignature as ViemTransactionSignature);
+  }
+
   /**
    * Resolve the effective remote signer URL from config.
    */