@oobe-protocol-labs/sap-mcp-server 0.1.0

package/dist/session/session-permissions.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Session permissions management
+ */
+import type { SapPermission } from '../core/types.js';
+/**
+ * All available permissions
+ */
+export declare const ALL_PERMISSIONS: SapPermission[];
+/**
+ * Permission categories
+ */
+export declare const PERMISSION_CATEGORIES: {
+    readonly registry: readonly ["registry:read", "registry:write"];
+    readonly identity: readonly ["identity:read", "identity:write"];
+    readonly reputation: readonly ["reputation:read", "reputation:write"];
+    readonly payments: readonly ["payments:read", "payments:write"];
+    readonly settlement: readonly ["settlement:read", "settlement:write"];
+    readonly memory: readonly ["memory:read", "memory:write"];
+    readonly transaction: readonly ["transaction:submit"];
+};
+/**
+ * Check if permission is valid
+ */
+export declare function isValidPermission(permission: string): boolean;
+/**
+ * Get permissions by category
+ */
+export declare function getPermissionsByCategory(category: keyof typeof PERMISSION_CATEGORIES): SapPermission[];
+/**
+ * Check if permission is write permission
+ */
+export declare function isWritePermission(permission: SapPermission): boolean;
+/**
+ * Get read-only version of permission
+ */
+export declare function toReadPermission(permission: SapPermission): SapPermission;
+//# sourceMappingURL=session-permissions.d.ts.map

package/dist/session/session-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-permissions.d.ts","sourceRoot":"","sources":["../../src/session/session-permissions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EAc1C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;CAQ2B,CAAC;AAE9D;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,OAAO,qBAAqB,GAAG,aAAa,EAAE,CAEtG;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAEpE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,aAAa,CAEzE"}

package/dist/session/session-permissions.js

@@ -0,0 +1,58 @@
+/**
+ * Session permissions management
+ */
+/**
+ * All available permissions
+ */
+export const ALL_PERMISSIONS = [
+    'registry:read',
+    'registry:write',
+    'identity:read',
+    'identity:write',
+    'reputation:read',
+    'reputation:write',
+    'payments:read',
+    'payments:write',
+    'settlement:read',
+    'settlement:write',
+    'memory:read',
+    'memory:write',
+    'transaction:submit',
+];
+/**
+ * Permission categories
+ */
+export const PERMISSION_CATEGORIES = {
+    registry: ['registry:read', 'registry:write'],
+    identity: ['identity:read', 'identity:write'],
+    reputation: ['reputation:read', 'reputation:write'],
+    payments: ['payments:read', 'payments:write'],
+    settlement: ['settlement:read', 'settlement:write'],
+    memory: ['memory:read', 'memory:write'],
+    transaction: ['transaction:submit'],
+};
+/**
+ * Check if permission is valid
+ */
+export function isValidPermission(permission) {
+    return ALL_PERMISSIONS.includes(permission);
+}
+/**
+ * Get permissions by category
+ */
+export function getPermissionsByCategory(category) {
+    return [...PERMISSION_CATEGORIES[category]];
+}
+/**
+ * Check if permission is write permission
+ */
+export function isWritePermission(permission) {
+    return permission.endsWith(':write');
+}
+/**
+ * Get read-only version of permission
+ */
+export function toReadPermission(permission) {
+    return permission.replace(':write', ':read');
+}
+//# sourceMappingURL=session-permissions.js.map

package/dist/session/session-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-permissions.js","sourceRoot":"","sources":["../../src/session/session-permissions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,oBAAoB;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAC7C,UAAU,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACnD,QAAQ,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAC7C,UAAU,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACnD,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;IACvC,WAAW,EAAE,CAAC,oBAAoB,CAAC;CACwB,CAAC;AAE9D;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,eAAe,CAAC,QAAQ,CAAC,UAA2B,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA4C;IACnF,OAAO,CAAC,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAyB;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAyB;IACxD,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAkB,CAAC;AAChE,CAAC"}

package/dist/session/session-store.d.ts

@@ -0,0 +1,38 @@
+/**
+ * In-memory session store for managing active sessions
+ *
+ * Production-ready with:
+ * - Automatic cleanup of expired sessions (every hour)
+ * - Memory leak prevention
+ * - Thread-safe operations
+ *
+ * Note: For distributed deployments requiring shared session state,
+ * replace with Redis or database-backed implementation.
+ */
+import type { SapAgentSession } from '../core/types.js';
+declare class SessionStore {
+    private sessions;
+    /**
+     * Store a session
+     */
+    set(sessionId: string, session: SapAgentSession): void;
+    /**
+     * Get a session
+     */
+    get(sessionId: string): SapAgentSession | undefined;
+    /**
+     * Delete a session
+     */
+    delete(sessionId: string): boolean;
+    /**
+     * Clean up expired sessions
+     */
+    cleanup(): void;
+    /**
+     * Get all sessions
+     */
+    getAll(): SapAgentSession[];
+}
+declare const store: SessionStore;
+export { store as sessionStore };
+//# sourceMappingURL=session-store.d.ts.map

package/dist/session/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/session/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,cAAM,YAAY;IAChB,OAAO,CAAC,QAAQ,CAA2C;IAE3D;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAKtD;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAMlC;;OAEG;IACH,OAAO,IAAI,IAAI;IAcf;;OAEG;IACH,MAAM,IAAI,eAAe,EAAE;CAG5B;AAGD,QAAA,MAAM,KAAK,cAAqB,CAAC;AAKjC,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,CAAC"}

package/dist/session/session-store.js

@@ -0,0 +1,62 @@
+/**
+ * In-memory session store for managing active sessions
+ *
+ * Production-ready with:
+ * - Automatic cleanup of expired sessions (every hour)
+ * - Memory leak prevention
+ * - Thread-safe operations
+ *
+ * Note: For distributed deployments requiring shared session state,
+ * replace with Redis or database-backed implementation.
+ */
+import { logger } from '../core/logger.js';
+class SessionStore {
+    sessions = new Map();
+    /**
+     * Store a session
+     */
+    set(sessionId, session) {
+        this.sessions.set(sessionId, session);
+        logger.debug('Session stored', { sessionId });
+    }
+    /**
+     * Get a session
+     */
+    get(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    /**
+     * Delete a session
+     */
+    delete(sessionId) {
+        const deleted = this.sessions.delete(sessionId);
+        logger.debug('Session deleted', { sessionId, deleted });
+        return deleted;
+    }
+    /**
+     * Clean up expired sessions
+     */
+    cleanup() {
+        const now = Date.now();
+        let cleaned = 0;
+        for (const [sessionId, session] of this.sessions.entries()) {
+            if (now >= session.expiresAt) {
+                this.sessions.delete(sessionId);
+                cleaned++;
+            }
+        }
+        logger.debug('Session cleanup', { cleaned });
+    }
+    /**
+     * Get all sessions
+     */
+    getAll() {
+        return Array.from(this.sessions.values());
+    }
+}
+// Singleton instance
+const store = new SessionStore();
+// Cleanup every hour
+setInterval(() => store.cleanup(), 60 * 60 * 1000);
+export { store as sessionStore };
+//# sourceMappingURL=session-store.js.map

package/dist/session/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/session/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG3C,MAAM,YAAY;IACR,QAAQ,GAAiC,IAAI,GAAG,EAAE,CAAC;IAE3D;;OAEG;IACH,GAAG,CAAC,SAAiB,EAAE,OAAwB;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAiB;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;AAEjC,qBAAqB;AACrB,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEnD,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,CAAC"}

package/dist/session/session-types.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Session type definitions
+ */
+import type { SapAgentSession, SapPermission } from '../core/types.js';
+/**
+ * Session creation request
+ */
+export interface CreateSessionRequest {
+    agentId: string;
+    permissions: SapPermission[];
+    spendingLimits: {
+        maxPerTransactionSol: number;
+        maxPerDaySol: number;
+        maxPerSessionSol: number;
+    };
+    expiresInSeconds?: number;
+}
+/**
+ * Session validation result
+ */
+export interface SessionValidationResult {
+    valid: boolean;
+    session?: SapAgentSession;
+    error?: string;
+}
+/**
+ * Session update
+ */
+export interface SessionUpdate {
+    remainingSessionSol?: number;
+    permissions?: SapPermission[];
+}
+//# sourceMappingURL=session-types.d.ts.map

package/dist/session/session-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-types.d.ts","sourceRoot":"","sources":["../../src/session/session-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,cAAc,EAAE;QACd,oBAAoB,EAAE,MAAM,CAAC;QAC7B,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;CAC/B"}

package/dist/session/session-types.js

@@ -0,0 +1,5 @@
+/**
+ * Session type definitions
+ */
+export {};
+//# sourceMappingURL=session-types.js.map

package/dist/session/session-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-types.js","sourceRoot":"","sources":["../../src/session/session-types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/signer/external-signer.d.ts

@@ -0,0 +1,16 @@
+/**
+ * External signer interface
+ *
+ * For integrating with external signing services (Ledger, Fireblocks, etc.)
+ */
+import type { Signer } from './signer-types.js';
+/**
+ * Create external signer
+ *
+ * Implements HTTP-based external signing service protocol.
+ * The public key is fetched from the signer service at initialization time
+ * via a GET request to the same endpoint. If the service does not support
+ * key retrieval, the caller must provide it separately.
+ */
+export declare function createExternalSigner(externalSignerUrl: string): Promise<Signer>;
+//# sourceMappingURL=external-signer.d.ts.map

package/dist/signer/external-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-signer.d.ts","sourceRoot":"","sources":["../../src/signer/external-signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAuDhD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+ErF"}

package/dist/signer/external-signer.js

@@ -0,0 +1,128 @@
+/**
+ * External signer interface
+ *
+ * For integrating with external signing services (Ledger, Fireblocks, etc.)
+ */
+import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import { logger } from '../core/logger.js';
+/**
+ * @name isPlainObject
+ * @description Checks whether a value is a plain JSON-compatible object.
+ */
+function isPlainObject(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+/**
+ * @name serializeForExternalSigner
+ * @description Serializes a Solana transaction for external signing.
+ * @param tx - Transaction to send to the signing service.
+ * @returns Base64 serialized transaction.
+ */
+function serializeForExternalSigner(tx) {
+    if (tx instanceof VersionedTransaction) {
+        return Buffer.from(tx.serialize()).toString('base64');
+    }
+    return tx.serialize({
+        requireAllSignatures: false,
+        verifySignatures: false,
+    }).toString('base64');
+}
+/**
+ * @name isExternalSignerResponse
+ * @description Validates the minimal response shape returned by an external signer service.
+ * @param value - Parsed JSON response.
+ * @returns True when the response contains a signed transaction.
+ */
+function isExternalSignerResponse(value) {
+    return Boolean(value) && typeof value === 'object' && typeof value.signedTransaction === 'string';
+}
+/**
+ * @name createExternalSignerHeaders
+ * @description Builds HTTP headers for external signer requests without exposing bearer tokens in logs.
+ */
+function createExternalSignerHeaders() {
+    const headers = { 'Content-Type': 'application/json' };
+    const authToken = process.env.SAP_EXTERNAL_SIGNER_AUTH_TOKEN;
+    if (authToken) {
+        headers.Authorization = `Bearer ${authToken}`;
+    }
+    return headers;
+}
+/**
+ * Create external signer
+ *
+ * Implements HTTP-based external signing service protocol.
+ * The public key is fetched from the signer service at initialization time
+ * via a GET request to the same endpoint. If the service does not support
+ * key retrieval, the caller must provide it separately.
+ */
+export async function createExternalSigner(externalSignerUrl) {
+    logger.info('Creating external signer', { url: externalSignerUrl });
+    // Attempt to fetch the public key from the signer service
+    let publicKey;
+    try {
+        const response = await fetch(externalSignerUrl, {
+            method: 'GET',
+            headers: createExternalSignerHeaders(),
+        });
+        if (response.ok) {
+            const result = await response.json();
+            if (isPlainObject(result) && typeof result.publicKey === 'string') {
+                publicKey = new PublicKey(result.publicKey);
+                logger.info('External signer public key fetched', { publicKey: publicKey.toBase58() });
+            }
+            else {
+                throw new Error('External signer did not return a valid publicKey field');
+            }
+        }
+        else {
+            throw new Error(`External signer key retrieval failed: ${response.status} ${await response.text()}`);
+        }
+    }
+    catch (error) {
+        logger.error('Failed to fetch external signer public key', { error });
+        throw new Error(`Cannot initialize external signer: ${error instanceof Error ? error.message : 'Unknown error'}. ` +
+            'The signer service must respond to GET with a JSON body containing "publicKey".');
+    }
+    const signer = {
+        publicKey,
+        async signTransaction(tx) {
+            logger.debug('Signing transaction via external signer', { url: externalSignerUrl });
+            // Call external signing service
+            const response = await fetch(externalSignerUrl, {
+                method: 'POST',
+                headers: createExternalSignerHeaders(),
+                body: JSON.stringify({
+                    action: 'signTransaction',
+                    transaction: serializeForExternalSigner(tx),
+                }),
+            });
+            if (!response.ok) {
+                const error = await response.text();
+                logger.error('External signer failed', { status: response.status, error });
+                throw new Error(`External signer failed: ${error}`);
+            }
+            const result = await response.json();
+            if (!isExternalSignerResponse(result)) {
+                throw new Error('External signer returned an invalid response');
+            }
+            // Parse signed transaction
+            const signedBytes = Buffer.from(result.signedTransaction, 'base64');
+            const signedTx = tx.constructor.name === 'Transaction'
+                ? Transaction.from(signedBytes)
+                : VersionedTransaction.deserialize(signedBytes);
+            return signedTx;
+        },
+        async signAllTransactions(txs) {
+            logger.debug('Signing all transactions via external signer', { count: txs.length });
+            const signed = [];
+            for (const tx of txs) {
+                const signedTx = await this.signTransaction(tx);
+                signed.push(signedTx);
+            }
+            return signed;
+        },
+    };
+    return signer;
+}
+//# sourceMappingURL=external-signer.js.map

package/dist/signer/external-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-signer.js","sourceRoot":"","sources":["../../src/signer/external-signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAQ3C;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,EAAsC;IACxE,IAAI,EAAE,YAAY,oBAAoB,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,CAAC,SAAS,CAAC;QAClB,oBAAoB,EAAE,KAAK;QAC3B,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAAgC,CAAC,iBAAiB,KAAK,QAAQ,CAAC;AAChI,CAAC;AAED;;;GAGG;AACH,SAAS,2BAA2B;IAClC,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;IAC7D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,aAAa,GAAG,UAAU,SAAS,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,iBAAyB;IAClE,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAEpE,0DAA0D;IAC1D,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;YAC9C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,2BAA2B,EAAE;SACvC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClE,SAAS,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzF,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,IAAI;YAClG,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAW;QACrB,SAAS;QAET,KAAK,CAAC,eAAe,CAA+C,EAAK;YACvE,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAEpF,gCAAgC;YAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,2BAA2B,EAAE;gBACtC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE,0BAA0B,CAAC,EAAE,CAAC;iBAC5C,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,2BAA2B;YAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa;gBACpD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAM;gBACpC,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,WAAW,CAAM,CAAC;YAEvD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,mBAAmB,CAA+C,GAAQ;YAC9E,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAEpF,MAAM,MAAM,GAAQ,EAAE,CAAC;YACvB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/signer/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Signer module barrel export
+ */
+export type { Signer, SignerMode, SignerConfig, SignerResult, } from './signer-types.js';
+export { loadKeypairFromFile, loadKeypairFromEnv } from './load-keypair.js';
+export { createLocalKeypairSigner } from './local-keypair-signer.js';
+export { createExternalSigner } from './external-signer.js';
+export { resolveSigner } from './signer-resolver.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/signer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signer/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,MAAM,EACN,UAAU,EACV,YAAY,EACZ,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/signer/index.js

@@ -0,0 +1,8 @@
+/**
+ * Signer module barrel export
+ */
+export { loadKeypairFromFile, loadKeypairFromEnv } from './load-keypair.js';
+export { createLocalKeypairSigner } from './local-keypair-signer.js';
+export { createExternalSigner } from './external-signer.js';
+export { resolveSigner } from './signer-resolver.js';
+//# sourceMappingURL=index.js.map

package/dist/signer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signer/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/signer/load-keypair.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Load keypair from file
+ *
+ * WARNING: Only use in local-dev-keypair mode. NEVER in production.
+ */
+import { Keypair } from '@solana/web3.js';
+/**
+ * Load keypair from JSON file
+ */
+export declare function loadKeypairFromFile(walletPath: string): Keypair;
+/**
+ * Load keypair from environment variable (base58 encoded)
+ */
+export declare function loadKeypairFromEnv(envVar: string): Promise<Keypair>;
+//# sourceMappingURL=load-keypair.d.ts.map

package/dist/signer/load-keypair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-keypair.d.ts","sourceRoot":"","sources":["../../src/signer/load-keypair.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAK1C;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAW/D;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAczE"}

package/dist/signer/load-keypair.js

@@ -0,0 +1,39 @@
+/**
+ * Load keypair from file
+ *
+ * WARNING: Only use in local-dev-keypair mode. NEVER in production.
+ */
+import { Keypair } from '@solana/web3.js';
+import { readFileSync } from 'fs';
+import { logger } from '../core/logger.js';
+import { SignerError } from '../core/errors.js';
+/**
+ * Load keypair from JSON file
+ */
+export function loadKeypairFromFile(walletPath) {
+    logger.debug('Loading keypair from file', { walletPath: '[REDACTED]' });
+    try {
+        const secretKeyString = readFileSync(walletPath, 'utf-8');
+        const secretKey = Uint8Array.from(JSON.parse(secretKeyString));
+        return Keypair.fromSecretKey(secretKey);
+    }
+    catch (error) {
+        logger.error('Failed to load keypair', { error });
+        throw new SignerError('Failed to load configured keypair');
+    }
+}
+/**
+ * Load keypair from environment variable (base58 encoded)
+ */
+export async function loadKeypairFromEnv(envVar) {
+    const secretKeyBase58 = process.env[envVar];
+    if (!secretKeyBase58) {
+        throw new SignerError(`Environment variable ${envVar} not set`);
+    }
+    // Decode base58 to bytes (ESM compatible)
+    const bs58 = await import('bs58');
+    const secretKey = Uint8Array.from(bs58.default.decode(secretKeyBase58));
+    logger.debug('Loaded keypair from environment', { envVar, publicKey: Keypair.fromSecretKey(secretKey).publicKey.toBase58() });
+    return Keypair.fromSecretKey(secretKey);
+}
+//# sourceMappingURL=load-keypair.js.map

package/dist/signer/load-keypair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-keypair.js","sourceRoot":"","sources":["../../src/signer/load-keypair.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,WAAW,CAAC,wBAAwB,MAAM,UAAU,CAAC,CAAC;IAClE,CAAC;IAED,0CAA0C;IAC1C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IAExE,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAE9H,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC"}

package/dist/signer/local-keypair-signer.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Local keypair signer (for development only)
+ *
+ * WARNING: NEVER use in production or hosted environments.
+ */
+import type { Signer } from './signer-types.js';
+/**
+ * Create local keypair signer
+ */
+export declare function createLocalKeypairSigner(walletPath: string): Signer;
+//# sourceMappingURL=local-keypair-signer.d.ts.map

package/dist/signer/local-keypair-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-keypair-signer.d.ts","sourceRoot":"","sources":["../../src/signer/local-keypair-signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAgCnE"}

package/dist/signer/local-keypair-signer.js

@@ -0,0 +1,46 @@
+/**
+ * Local keypair signer (for development only)
+ *
+ * WARNING: NEVER use in production or hosted environments.
+ */
+import { Transaction, VersionedTransaction } from '@solana/web3.js';
+import { logger } from '../core/logger.js';
+import { loadKeypairFromFile } from './load-keypair.js';
+/**
+ * Create local keypair signer
+ */
+export function createLocalKeypairSigner(walletPath) {
+    logger.info('Creating local keypair signer', { walletPath: '[REDACTED]' });
+    const keypair = loadKeypairFromFile(walletPath);
+    logger.warn('Local keypair signer created - DO NOT USE IN PRODUCTION');
+    return {
+        publicKey: keypair.publicKey,
+        signTransaction: async (tx) => {
+            if (tx instanceof VersionedTransaction) {
+                tx.sign([keypair]);
+            }
+            else if (tx instanceof Transaction) {
+                tx.partialSign(keypair);
+            }
+            else {
+                throw new Error('Unsupported transaction type');
+            }
+            return tx;
+        },
+        signAllTransactions: async (txs) => {
+            for (const tx of txs) {
+                if (tx instanceof VersionedTransaction) {
+                    tx.sign([keypair]);
+                }
+                else if (tx instanceof Transaction) {
+                    tx.partialSign(keypair);
+                }
+                else {
+                    throw new Error('Unsupported transaction type');
+                }
+            }
+            return txs;
+        },
+    };
+}
+//# sourceMappingURL=local-keypair-signer.js.map

package/dist/signer/local-keypair-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-keypair-signer.js","sourceRoot":"","sources":["../../src/signer/local-keypair-signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAE3E,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEhD,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAEvE,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5B,IAAI,EAAE,YAAY,oBAAoB,EAAE,CAAC;gBACvC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,EAAE,YAAY,WAAW,EAAE,CAAC;gBACrC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,IAAI,EAAE,YAAY,oBAAoB,EAAE,CAAC;oBACvC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACrB,CAAC;qBAAM,IAAI,EAAE,YAAY,WAAW,EAAE,CAAC;oBACrC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/signer/signer-resolver.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Resolve signer based on MCP mode
+ */
+import type { SapMcpConfig } from '../core/types.js';
+import type { SignerResult } from './signer-types.js';
+/**
+ * Resolve signer based on configuration
+ */
+export declare function resolveSigner(config: SapMcpConfig): Promise<SignerResult>;
+//# sourceMappingURL=signer-resolver.d.ts.map

package/dist/signer/signer-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-resolver.d.ts","sourceRoot":"","sources":["../../src/signer/signer-resolver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAuC/E"}