@solana/connector 0.2.0 → 0.2.2

package/dist/server.js

@@ -0,0 +1,189 @@
+'use strict';
+
+var chunkQST7XLMB_js = require('./chunk-QST7XLMB.js');
+
+// src/server/route-handlers.ts
+function jsonResponse(data, status = 200) {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+function errorResponse(code, message, status = 400, details) {
+  return jsonResponse({
+    error: { code, message, details }
+  }, status);
+}
+function defaultAuthorize(request) {
+  let token = process.env.CONNECTOR_SIGNER_TOKEN;
+  if (!token)
+    return console.warn("[connector/server] CONNECTOR_SIGNER_TOKEN not set - rejecting all requests"), false;
+  let authHeader = request.headers.get("Authorization");
+  if (!authHeader)
+    return false;
+  let parts = authHeader.split(" ");
+  return (parts.length === 2 && parts[0].toLowerCase() === "bearer" ? parts[1] : authHeader) === token;
+}
+async function sendTransaction(rpc, signedTxBytes) {
+  let base64Tx = chunkQST7XLMB_js.encodeBase64(signedTxBytes), result = await (await fetch(rpc.url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "sendTransaction",
+      params: [
+        base64Tx,
+        {
+          encoding: "base64",
+          skipPreflight: false,
+          preflightCommitment: rpc.commitment || "confirmed"
+        }
+      ]
+    })
+  })).json();
+  if (result.error)
+    throw new Error(result.error.message || "RPC error");
+  return result.result;
+}
+var cachedSigner = null;
+async function loadSigner(config) {
+  if (cachedSigner)
+    return cachedSigner;
+  if (config.type === "custom")
+    return cachedSigner = config.signer, cachedSigner;
+  if (config.type === "fireblocks") {
+    let { loadFireblocksSigner } = await import('./fireblocks-FLKRTJU3.js');
+    return cachedSigner = await loadFireblocksSigner(config), cachedSigner;
+  }
+  if (config.type === "privy") {
+    let { loadPrivySigner } = await import('./privy-ID4YFTKR.js');
+    return cachedSigner = await loadPrivySigner(config), cachedSigner;
+  }
+  throw new Error(`Unknown provider type: ${config.type}`);
+}
+function createRemoteSignerRouteHandlers(config) {
+  let {
+    provider,
+    authorize = defaultAuthorize,
+    policy,
+    rpc,
+    chains = ["solana:mainnet", "solana:devnet"],
+    name = "Remote Signer",
+    icon
+  } = config;
+  async function GET(request) {
+    try {
+      if (!await authorize(request))
+        return errorResponse("UNAUTHORIZED", "Unauthorized", 401);
+      let signer = await loadSigner(provider);
+      if (!await signer.isAvailable())
+        return errorResponse("PROVIDER_ERROR", "Signer not available", 503);
+      let capabilities = {
+        signTransaction: true,
+        signAllTransactions: true,
+        signMessage: true,
+        signAndSendTransaction: !!rpc
+      }, metadata = {
+        address: signer.address,
+        chains,
+        capabilities,
+        name,
+        icon
+      };
+      return jsonResponse(metadata);
+    } catch (error) {
+      return console.error("[connector/server] GET error:", error), errorResponse(
+        "INTERNAL_ERROR",
+        error instanceof Error ? error.message : "Internal server error",
+        500
+      );
+    }
+  }
+  async function POST(request) {
+    try {
+      if (!await authorize(request))
+        return errorResponse("UNAUTHORIZED", "Unauthorized", 401);
+      let body;
+      try {
+        body = await request.json();
+      } catch {
+        return errorResponse("INVALID_REQUEST", "Invalid JSON body", 400);
+      }
+      if (!body.operation)
+        return errorResponse("INVALID_REQUEST", "Missing operation field", 400);
+      let signer = await loadSigner(provider);
+      switch (body.operation) {
+        case "signTransaction": {
+          if (!body.transaction)
+            return errorResponse("INVALID_REQUEST", "Missing transaction field", 400);
+          let txBytes = chunkQST7XLMB_js.decodeBase64(body.transaction);
+          if (policy?.validateTransaction && !await policy.validateTransaction(txBytes, request))
+            return errorResponse("POLICY_VIOLATION", "Transaction rejected by policy", 403);
+          let signedTx = await signer.signTransaction(txBytes), response = {
+            signedTransaction: chunkQST7XLMB_js.encodeBase64(signedTx)
+          };
+          return jsonResponse(response);
+        }
+        case "signAllTransactions": {
+          if (!body.transactions || !Array.isArray(body.transactions))
+            return errorResponse("INVALID_REQUEST", "Missing transactions array", 400);
+          let txBytesArray = body.transactions.map((tx) => chunkQST7XLMB_js.decodeBase64(tx));
+          if (policy?.validateTransaction) {
+            for (let txBytes of txBytesArray)
+              if (!await policy.validateTransaction(txBytes, request))
+                return errorResponse("POLICY_VIOLATION", "Transaction rejected by policy", 403);
+          }
+          let response = {
+            signedTransactions: (await signer.signAllTransactions(txBytesArray)).map((tx) => chunkQST7XLMB_js.encodeBase64(tx))
+          };
+          return jsonResponse(response);
+        }
+        case "signMessage": {
+          if (!body.message)
+            return errorResponse("INVALID_REQUEST", "Missing message field", 400);
+          let messageBytes = chunkQST7XLMB_js.decodeBase64(body.message);
+          if (policy?.validateMessage && !await policy.validateMessage(messageBytes, request))
+            return errorResponse("POLICY_VIOLATION", "Message rejected by policy", 403);
+          let signature = await signer.signMessage(messageBytes), response = {
+            signature: chunkQST7XLMB_js.encodeBase64(signature)
+          };
+          return jsonResponse(response);
+        }
+        case "signAndSendTransaction": {
+          if (!rpc)
+            return errorResponse("INVALID_OPERATION", "signAndSendTransaction not enabled", 400);
+          if (!body.transaction)
+            return errorResponse("INVALID_REQUEST", "Missing transaction field", 400);
+          let txBytes = chunkQST7XLMB_js.decodeBase64(body.transaction);
+          if (policy?.validateTransaction && !await policy.validateTransaction(txBytes, request))
+            return errorResponse("POLICY_VIOLATION", "Transaction rejected by policy", 403);
+          let signedTx = await signer.signTransaction(txBytes);
+          try {
+            let response = { signature: await sendTransaction(rpc, signedTx) };
+            return jsonResponse(response);
+          } catch (error) {
+            return errorResponse(
+              "SEND_FAILED",
+              error instanceof Error ? error.message : "Failed to send transaction",
+              500
+            );
+          }
+        }
+        default:
+          return errorResponse(
+            "INVALID_OPERATION",
+            `Unknown operation: ${body.operation}`,
+            400
+          );
+      }
+    } catch (error) {
+      return console.error("[connector/server] POST error:", error), error instanceof Error && (error.message.includes("rate limit") || error.message.includes("429")) ? errorResponse("PROVIDER_ERROR", "Rate limited, please retry", 429) : errorResponse("SIGNING_FAILED", error instanceof Error ? error.message : "Signing failed", 500);
+    }
+  }
+  return { GET, POST };
+}
+
+exports.createRemoteSignerRouteHandlers = createRemoteSignerRouteHandlers;
+//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/route-handlers.ts"],"names":["encodeBase64","decodeBase64"],"mappings":";;;;;AAwJA,SAAS,YAAA,CAAa,IAAA,EAAe,MAAA,GAAS,GAAA,EAAe;AACzD,EAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG;AAAA,IACtC,MAAA;AAAA,IACA,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,GACjD,CAAA;AACL;AAEA,SAAS,aAAA,CAAc,IAAA,EAA6B,OAAA,EAAiB,MAAA,GAAS,KAAK,OAAA,EAA6B;AAI5G,EAAA,OAAO,YAAA,CAHiC;AAAA,IACpC,KAAA,EAAO,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA;AAAQ,KAEV,MAAM,CAAA;AACpC;AAKA,SAAS,iBAAiB,OAAA,EAA2B;AACjD,EAAA,IAAM,KAAA,GAAQ,QAAQ,GAAA,CAAI,sBAAA;AAC1B,EAAA,IAAI,CAAC,KAAA;AAED,IAAA,OAAA,OAAA,CAAQ,IAAA,CAAK,4EAA4E,CAAA,EAClF,KAAA;AAGX,EAAA,IAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACtD,EAAA,IAAI,CAAC,UAAA;AACD,IAAA,OAAO,KAAA;AAIX,EAAA,IAAM,KAAA,GAAQ,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA;AAGlC,EAAA,OAAA,CAFsB,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY,KAAM,QAAA,GAAW,KAAA,CAAM,CAAC,CAAA,GAAI,UAAA,MAEpE,KAAA;AAC7B;AAKA,eAAe,eAAA,CAAgB,KAAgB,aAAA,EAA4C;AACvF,EAAA,IAAM,QAAA,GAAWA,8BAAa,aAAa,CAAA,EAoBrC,SAAS,MAAA,CAlBE,MAAM,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK;AAAA,IAClC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,MACjB,OAAA,EAAS,KAAA;AAAA,MACT,EAAA,EAAI,CAAA;AAAA,MACJ,MAAA,EAAQ,iBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,QACJ,QAAA;AAAA,QACA;AAAA,UACI,QAAA,EAAU,QAAA;AAAA,UACV,aAAA,EAAe,KAAA;AAAA,UACf,mBAAA,EAAqB,IAAI,UAAA,IAAc;AAAA;AAC3C;AACJ,KACH;AAAA,GACJ,GAE6B,IAAA,EAAK;AAEnC,EAAA,IAAI,MAAA,CAAO,KAAA;AACP,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,WAAW,WAAW,CAAA;AAGvD,EAAA,OAAO,MAAA,CAAO,MAAA;AAClB;AAMA,IAAI,YAAA,GAAoC,IAAA;AAExC,eAAe,WAAW,MAAA,EAA+C;AACrE,EAAA,IAAI,YAAA;AACA,IAAA,OAAO,YAAA;AAGX,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA;AAChB,IAAA,OAAA,YAAA,GAAe,OAAO,MAAA,EACf,YAAA;AAGX,EAAA,IAAI,MAAA,CAAO,SAAS,YAAA,EAAc;AAC9B,IAAA,IAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,0BAAwB,CAAA;AACtE,IAAA,OAAA,YAAA,GAAe,MAAM,oBAAA,CAAqB,MAAM,CAAA,EACzC,YAAA;AAAA,EACX;AAEA,EAAA,IAAI,MAAA,CAAO,SAAS,OAAA,EAAS;AACzB,IAAA,IAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,qBAAmB,CAAA;AAC5D,IAAA,OAAA,YAAA,GAAe,MAAM,eAAA,CAAgB,MAAM,CAAA,EACpC,YAAA;AAAA,EACX;AAEA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA2B,MAAA,CAA0B,IAAI,CAAA,CAAE,CAAA;AAC/E;AA8BO,SAAS,gCAAgC,MAAA,EAAwD;AACpG,EAAA,IAAM;AAAA,IACF,QAAA;AAAA,IACA,SAAA,GAAY,gBAAA;AAAA,IACZ,MAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,GAAS,CAAC,gBAAA,EAAkB,eAAe,CAAA;AAAA,IAC3C,IAAA,GAAO,eAAA;AAAA,IACP;AAAA,GACJ,GAAI,MAAA;AAGJ,EAAA,eAAe,IAAI,OAAA,EAA6C;AAC5D,IAAA,IAAI;AAGA,MAAA,IAAI,CADe,MAAM,SAAA,CAAU,OAAO,CAAA;AAEtC,QAAA,OAAO,aAAA,CAAc,cAAA,EAAgB,cAAA,EAAgB,GAAG,CAAA;AAI5D,MAAA,IAAM,MAAA,GAAS,MAAM,UAAA,CAAW,QAAQ,CAAA;AAIxC,MAAA,IAAI,CADc,MAAM,MAAA,CAAO,WAAA,EAAY;AAEvC,QAAA,OAAO,aAAA,CAAc,gBAAA,EAAkB,sBAAA,EAAwB,GAAG,CAAA;AAItE,MAAA,IAAM,YAAA,GAAyC;AAAA,QAC3C,eAAA,EAAiB,IAAA;AAAA,QACjB,mBAAA,EAAqB,IAAA;AAAA,QACrB,WAAA,EAAa,IAAA;AAAA,QACb,wBAAwB,CAAA,CAAQ;AAAA,SAI9B,QAAA,GAAiC;AAAA,QACnC,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAA;AAAA,QACA,YAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,IAChC,SAAS,KAAA,EAAO;AACZ,MAAA,OAAA,OAAA,CAAQ,KAAA,CAAM,+BAAA,EAAiC,KAAK,CAAA,EAC7C,aAAA;AAAA,QACH,gBAAA;AAAA,QACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,uBAAA;AAAA,QACzC;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAGA,EAAA,eAAe,KAAK,OAAA,EAA6C;AAC7D,IAAA,IAAI;AAGA,MAAA,IAAI,CADe,MAAM,SAAA,CAAU,OAAO,CAAA;AAEtC,QAAA,OAAO,aAAA,CAAc,cAAA,EAAgB,cAAA,EAAgB,GAAG,CAAA;AAI5D,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,IAAA,GAAO,MAAM,QAAQ,IAAA,EAAK;AAAA,MAC9B,CAAA,CAAA,MAAQ;AACJ,QAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,mBAAA,EAAqB,GAAG,CAAA;AAAA,MACpE;AAEA,MAAA,IAAI,CAAC,IAAA,CAAK,SAAA;AACN,QAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,yBAAA,EAA2B,GAAG,CAAA;AAI1E,MAAA,IAAM,MAAA,GAAS,MAAM,UAAA,CAAW,QAAQ,CAAA;AAGxC,MAAA,QAAQ,KAAK,SAAA;AAAW,QACpB,KAAK,iBAAA,EAAmB;AACpB,UAAA,IAAI,CAAC,IAAA,CAAK,WAAA;AACN,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,2BAAA,EAA6B,GAAG,CAAA;AAG5E,UAAA,IAAM,OAAA,GAAUC,6BAAA,CAAa,IAAA,CAAK,WAAW,CAAA;AAG7C,UAAA,IAAI,QAAQ,mBAAA,IAEJ,CADY,MAAM,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAE7D,YAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,gCAAA,EAAkC,GAAG,CAAA;AAItF,UAAA,IAAM,WAAW,MAAM,MAAA,CAAO,eAAA,CAAgB,OAAO,GAC/C,QAAA,GAAoC;AAAA,YACtC,iBAAA,EAAmBD,8BAAa,QAAQ;AAAA,WAC5C;AACA,UAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,QAChC;AAAA,QAEA,KAAK,qBAAA,EAAuB;AACxB,UAAA,IAAI,CAAC,IAAA,CAAK,YAAA,IAAgB,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,YAAY,CAAA;AACtD,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,4BAAA,EAA8B,GAAG,CAAA;AAG7E,UAAA,IAAM,eAAe,IAAA,CAAK,YAAA,CAAa,IAAI,CAAA,EAAA,KAAMC,6BAAA,CAAa,EAAE,CAAC,CAAA;AAGjE,UAAA,IAAI,MAAA,EAAQ,mBAAA,EAAA;AACR,YAAA,KAAA,IAAW,OAAA,IAAW,YAAA;AAElB,cAAA,IAAI,CADY,MAAM,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAE7D,gBAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,gCAAA,EAAkC,GAAG,CAAA;AAAA,UAAA;AAM1F,UAAA,IAAM,QAAA,GAAwC;AAAA,YAC1C,kBAAA,EAAA,CAFc,MAAM,MAAA,CAAO,mBAAA,CAAoB,YAAY,GAE7B,GAAA,CAAI,CAAA,EAAA,KAAMD,6BAAA,CAAa,EAAE,CAAC;AAAA,WAC5D;AACA,UAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,QAChC;AAAA,QAEA,KAAK,aAAA,EAAe;AAChB,UAAA,IAAI,CAAC,IAAA,CAAK,OAAA;AACN,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,uBAAA,EAAyB,GAAG,CAAA;AAGxE,UAAA,IAAM,YAAA,GAAeC,6BAAA,CAAa,IAAA,CAAK,OAAO,CAAA;AAG9C,UAAA,IAAI,QAAQ,eAAA,IAEJ,CADY,MAAM,MAAA,CAAO,eAAA,CAAgB,cAAc,OAAO,CAAA;AAE9D,YAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,4BAAA,EAA8B,GAAG,CAAA;AAIlF,UAAA,IAAM,YAAY,MAAM,MAAA,CAAO,WAAA,CAAY,YAAY,GACjD,QAAA,GAAgC;AAAA,YAClC,SAAA,EAAWD,8BAAa,SAAS;AAAA,WACrC;AACA,UAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,QAChC;AAAA,QAEA,KAAK,wBAAA,EAA0B;AAC3B,UAAA,IAAI,CAAC,GAAA;AACD,YAAA,OAAO,aAAA,CAAc,mBAAA,EAAqB,oCAAA,EAAsC,GAAG,CAAA;AAGvF,UAAA,IAAI,CAAC,IAAA,CAAK,WAAA;AACN,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,2BAAA,EAA6B,GAAG,CAAA;AAG5E,UAAA,IAAM,OAAA,GAAUC,6BAAA,CAAa,IAAA,CAAK,WAAW,CAAA;AAG7C,UAAA,IAAI,QAAQ,mBAAA,IAEJ,CADY,MAAM,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAE7D,YAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,gCAAA,EAAkC,GAAG,CAAA;AAKtF,UAAA,IAAM,QAAA,GAAW,MAAM,MAAA,CAAO,eAAA,CAAgB,OAAO,CAAA;AAGrD,UAAA,IAAI;AAEA,YAAA,IAAM,WAA2C,EAAE,SAAA,EADjC,MAAM,eAAA,CAAgB,GAAA,EAAK,QAAQ,CAAA,EACQ;AAC7D,YAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,UAChC,SAAS,KAAA,EAAO;AACZ,YAAA,OAAO,aAAA;AAAA,cACH,aAAA;AAAA,cACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,4BAAA;AAAA,cACzC;AAAA,aACJ;AAAA,UACJ;AAAA,QACJ;AAAA,QAEA;AACI,UAAA,OAAO,aAAA;AAAA,YACH,mBAAA;AAAA,YACA,CAAA,mBAAA,EAAuB,KAA+B,SAAS,CAAA,CAAA;AAAA,YAC/D;AAAA,WACJ;AAAA;AACR,IACJ,SAAS,KAAA,EAAO;AAIZ,MAAA,OAHA,OAAA,CAAQ,KAAA,CAAM,gCAAA,EAAkC,KAAK,CAAA,EAGjD,KAAA,YAAiB,KAAA,KACb,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,YAAY,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,KAAK,CAAA,CAAA,GAC7D,aAAA,CAAc,gBAAA,EAAkB,4BAAA,EAA8B,GAAG,CAAA,GAIzE,aAAA,CAAc,gBAAA,EAAkB,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,kBAAkB,GAAG,CAAA;AAAA,IACzG;AAAA,EACJ;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACvB","file":"server.js","sourcesContent":["/**\n * @solana/connector/server - Route Handlers\n *\n * Creates Next.js Route Handler compatible GET/POST handlers for remote signing.\n * Designed for Node.js runtime (not Edge) to support crypto operations.\n */\n\nimport type {\n    RemoteSignerMetadata,\n    RemoteSignerCapabilities,\n    RemoteSignerRequest,\n    SignTransactionResponse,\n    SignAllTransactionsResponse,\n    SignMessageResponse,\n    SignAndSendTransactionResponse,\n    RemoteSignerErrorCode,\n    RemoteSignerErrorResponse,\n} from '../remote/protocol';\nimport { decodeBase64, encodeBase64 } from '../remote/protocol';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Signer interface that providers must implement\n */\nexport interface RemoteSigner {\n    /** Signer's Solana address (base58) */\n    readonly address: string;\n\n    /** Sign transaction bytes, return signed transaction bytes */\n    signTransaction(transactionBytes: Uint8Array): Promise<Uint8Array>;\n\n    /** Sign multiple transactions */\n    signAllTransactions(transactions: Uint8Array[]): Promise<Uint8Array[]>;\n\n    /** Sign a message, return 64-byte signature */\n    signMessage(message: Uint8Array): Promise<Uint8Array>;\n\n    /** Check if signer is available/healthy */\n    isAvailable(): Promise<boolean>;\n}\n\n/**\n * Provider configuration\n */\nexport type ProviderType = 'fireblocks' | 'privy' | 'custom';\n\nexport interface FireblocksProviderConfig {\n    type: 'fireblocks';\n    /** Fireblocks API key */\n    apiKey: string;\n    /** RSA private key PEM for JWT signing */\n    privateKeyPem: string;\n    /** Vault account ID */\n    vaultAccountId: string;\n    /** Asset ID (default: 'SOL') */\n    assetId?: string;\n    /** API base URL (default: https://api.fireblocks.io) */\n    apiBaseUrl?: string;\n}\n\nexport interface PrivyProviderConfig {\n    type: 'privy';\n    /** Privy app ID */\n    appId: string;\n    /** Privy app secret */\n    appSecret: string;\n    /** Privy wallet ID */\n    walletId: string;\n    /** API base URL (default: https://api.privy.io/v1) */\n    apiBaseUrl?: string;\n}\n\nexport interface CustomProviderConfig {\n    type: 'custom';\n    /** Custom signer implementation */\n    signer: RemoteSigner;\n}\n\nexport type ProviderConfig = FireblocksProviderConfig | PrivyProviderConfig | CustomProviderConfig;\n\n/**\n * Authorization callback\n */\nexport type AuthorizeCallback = (request: Request) => Promise<boolean> | boolean;\n\n/**\n * Policy validation callback\n */\nexport interface PolicyHooks {\n    /** Validate a transaction before signing (return false to reject) */\n    validateTransaction?: (transactionBytes: Uint8Array, request: Request) => Promise<boolean> | boolean;\n    /** Validate a message before signing (return false to reject) */\n    validateMessage?: (messageBytes: Uint8Array, request: Request) => Promise<boolean> | boolean;\n}\n\n/**\n * RPC configuration for sign+send operations\n */\nexport interface RpcConfig {\n    /** Solana RPC endpoint URL */\n    url: string;\n    /** Commitment level for confirmations */\n    commitment?: 'processed' | 'confirmed' | 'finalized';\n}\n\n/**\n * Route handler configuration\n */\nexport interface RemoteSignerRouteHandlersConfig {\n    /** Provider configuration */\n    provider: ProviderConfig;\n    /**\n     * Authorization callback. Default: checks for Authorization header matching CONNECTOR_SIGNER_TOKEN env var.\n     * Return true to allow, false to reject.\n     */\n    authorize?: AuthorizeCallback;\n    /** Policy hooks for transaction/message validation */\n    policy?: PolicyHooks;\n    /** RPC configuration (required for signAndSendTransaction) */\n    rpc?: RpcConfig;\n    /** Supported chains (default: ['solana:mainnet', 'solana:devnet']) */\n    chains?: string[];\n    /** Wallet name shown in metadata */\n    name?: string;\n    /** Wallet icon URL */\n    icon?: string;\n}\n\n/**\n * Next.js compatible request/response types\n */\nexport interface NextRequest extends Request {\n    // Next.js adds extra properties, but we only need standard Request\n}\n\nexport type NextResponse = Response;\n\n/**\n * Route handlers object returned by the factory\n */\nexport interface RouteHandlers {\n    GET: (request: NextRequest) => Promise<NextResponse>;\n    POST: (request: NextRequest) => Promise<NextResponse>;\n}\n\n// ============================================================================\n// Helper functions\n// ============================================================================\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n    return new Response(JSON.stringify(data), {\n        status,\n        headers: { 'Content-Type': 'application/json' },\n    });\n}\n\nfunction errorResponse(code: RemoteSignerErrorCode, message: string, status = 400, details?: unknown): Response {\n    const body: RemoteSignerErrorResponse = {\n        error: { code, message, details },\n    };\n    return jsonResponse(body, status);\n}\n\n/**\n * Default authorization: check Authorization header against CONNECTOR_SIGNER_TOKEN env var\n */\nfunction defaultAuthorize(request: Request): boolean {\n    const token = process.env.CONNECTOR_SIGNER_TOKEN;\n    if (!token) {\n        // No token configured = reject all (safe default)\n        console.warn('[connector/server] CONNECTOR_SIGNER_TOKEN not set - rejecting all requests');\n        return false;\n    }\n\n    const authHeader = request.headers.get('Authorization');\n    if (!authHeader) {\n        return false;\n    }\n\n    // Support \"Bearer <token>\" format\n    const parts = authHeader.split(' ');\n    const providedToken = parts.length === 2 && parts[0].toLowerCase() === 'bearer' ? parts[1] : authHeader;\n\n    return providedToken === token;\n}\n\n/**\n * Send a signed transaction to Solana RPC\n */\nasync function sendTransaction(rpc: RpcConfig, signedTxBytes: Uint8Array): Promise<string> {\n    const base64Tx = encodeBase64(signedTxBytes);\n\n    const response = await fetch(rpc.url, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n            jsonrpc: '2.0',\n            id: 1,\n            method: 'sendTransaction',\n            params: [\n                base64Tx,\n                {\n                    encoding: 'base64',\n                    skipPreflight: false,\n                    preflightCommitment: rpc.commitment || 'confirmed',\n                },\n            ],\n        }),\n    });\n\n    const result = await response.json();\n\n    if (result.error) {\n        throw new Error(result.error.message || 'RPC error');\n    }\n\n    return result.result as string;\n}\n\n// ============================================================================\n// Provider loader\n// ============================================================================\n\nlet cachedSigner: RemoteSigner | null = null;\n\nasync function loadSigner(config: ProviderConfig): Promise<RemoteSigner> {\n    if (cachedSigner) {\n        return cachedSigner;\n    }\n\n    if (config.type === 'custom') {\n        cachedSigner = config.signer;\n        return cachedSigner;\n    }\n\n    if (config.type === 'fireblocks') {\n        const { loadFireblocksSigner } = await import('./providers/fireblocks');\n        cachedSigner = await loadFireblocksSigner(config);\n        return cachedSigner;\n    }\n\n    if (config.type === 'privy') {\n        const { loadPrivySigner } = await import('./providers/privy');\n        cachedSigner = await loadPrivySigner(config);\n        return cachedSigner;\n    }\n\n    throw new Error(`Unknown provider type: ${(config as ProviderConfig).type}`);\n}\n\n// ============================================================================\n// Route Handler Factory\n// ============================================================================\n\n/**\n * Create Next.js Route Handlers for remote signing\n *\n * @example\n * ```typescript\n * // app/api/connector-signer/route.ts\n * import { createRemoteSignerRouteHandlers } from '@solana/connector/server';\n *\n * const { GET, POST } = createRemoteSignerRouteHandlers({\n *   provider: {\n *     type: 'fireblocks',\n *     apiKey: process.env.FIREBLOCKS_API_KEY!,\n *     privateKeyPem: process.env.FIREBLOCKS_PRIVATE_KEY!,\n *     vaultAccountId: process.env.FIREBLOCKS_VAULT_ID!,\n *   },\n *   rpc: {\n *     url: process.env.SOLANA_RPC_URL!,\n *   },\n * });\n *\n * export { GET, POST };\n * export const runtime = 'nodejs';\n * ```\n */\nexport function createRemoteSignerRouteHandlers(config: RemoteSignerRouteHandlersConfig): RouteHandlers {\n    const {\n        provider,\n        authorize = defaultAuthorize,\n        policy,\n        rpc,\n        chains = ['solana:mainnet', 'solana:devnet'],\n        name = 'Remote Signer',\n        icon,\n    } = config;\n\n    // GET handler: return signer metadata\n    async function GET(request: NextRequest): Promise<NextResponse> {\n        try {\n            // Check authorization\n            const authorized = await authorize(request);\n            if (!authorized) {\n                return errorResponse('UNAUTHORIZED', 'Unauthorized', 401);\n            }\n\n            // Load signer\n            const signer = await loadSigner(provider);\n\n            // Check availability\n            const available = await signer.isAvailable();\n            if (!available) {\n                return errorResponse('PROVIDER_ERROR', 'Signer not available', 503);\n            }\n\n            // Build capabilities\n            const capabilities: RemoteSignerCapabilities = {\n                signTransaction: true,\n                signAllTransactions: true,\n                signMessage: true,\n                signAndSendTransaction: Boolean(rpc),\n            };\n\n            // Build metadata response\n            const metadata: RemoteSignerMetadata = {\n                address: signer.address,\n                chains,\n                capabilities,\n                name,\n                icon,\n            };\n\n            return jsonResponse(metadata);\n        } catch (error) {\n            console.error('[connector/server] GET error:', error);\n            return errorResponse(\n                'INTERNAL_ERROR',\n                error instanceof Error ? error.message : 'Internal server error',\n                500,\n            );\n        }\n    }\n\n    // POST handler: handle signing operations\n    async function POST(request: NextRequest): Promise<NextResponse> {\n        try {\n            // Check authorization\n            const authorized = await authorize(request);\n            if (!authorized) {\n                return errorResponse('UNAUTHORIZED', 'Unauthorized', 401);\n            }\n\n            // Parse request body\n            let body: RemoteSignerRequest;\n            try {\n                body = await request.json();\n            } catch {\n                return errorResponse('INVALID_REQUEST', 'Invalid JSON body', 400);\n            }\n\n            if (!body.operation) {\n                return errorResponse('INVALID_REQUEST', 'Missing operation field', 400);\n            }\n\n            // Load signer\n            const signer = await loadSigner(provider);\n\n            // Handle operations\n            switch (body.operation) {\n                case 'signTransaction': {\n                    if (!body.transaction) {\n                        return errorResponse('INVALID_REQUEST', 'Missing transaction field', 400);\n                    }\n\n                    const txBytes = decodeBase64(body.transaction);\n\n                    // Policy check\n                    if (policy?.validateTransaction) {\n                        const allowed = await policy.validateTransaction(txBytes, request);\n                        if (!allowed) {\n                            return errorResponse('POLICY_VIOLATION', 'Transaction rejected by policy', 403);\n                        }\n                    }\n\n                    const signedTx = await signer.signTransaction(txBytes);\n                    const response: SignTransactionResponse = {\n                        signedTransaction: encodeBase64(signedTx),\n                    };\n                    return jsonResponse(response);\n                }\n\n                case 'signAllTransactions': {\n                    if (!body.transactions || !Array.isArray(body.transactions)) {\n                        return errorResponse('INVALID_REQUEST', 'Missing transactions array', 400);\n                    }\n\n                    const txBytesArray = body.transactions.map(tx => decodeBase64(tx));\n\n                    // Policy check for each transaction\n                    if (policy?.validateTransaction) {\n                        for (const txBytes of txBytesArray) {\n                            const allowed = await policy.validateTransaction(txBytes, request);\n                            if (!allowed) {\n                                return errorResponse('POLICY_VIOLATION', 'Transaction rejected by policy', 403);\n                            }\n                        }\n                    }\n\n                    const signedTxs = await signer.signAllTransactions(txBytesArray);\n                    const response: SignAllTransactionsResponse = {\n                        signedTransactions: signedTxs.map(tx => encodeBase64(tx)),\n                    };\n                    return jsonResponse(response);\n                }\n\n                case 'signMessage': {\n                    if (!body.message) {\n                        return errorResponse('INVALID_REQUEST', 'Missing message field', 400);\n                    }\n\n                    const messageBytes = decodeBase64(body.message);\n\n                    // Policy check\n                    if (policy?.validateMessage) {\n                        const allowed = await policy.validateMessage(messageBytes, request);\n                        if (!allowed) {\n                            return errorResponse('POLICY_VIOLATION', 'Message rejected by policy', 403);\n                        }\n                    }\n\n                    const signature = await signer.signMessage(messageBytes);\n                    const response: SignMessageResponse = {\n                        signature: encodeBase64(signature),\n                    };\n                    return jsonResponse(response);\n                }\n\n                case 'signAndSendTransaction': {\n                    if (!rpc) {\n                        return errorResponse('INVALID_OPERATION', 'signAndSendTransaction not enabled', 400);\n                    }\n\n                    if (!body.transaction) {\n                        return errorResponse('INVALID_REQUEST', 'Missing transaction field', 400);\n                    }\n\n                    const txBytes = decodeBase64(body.transaction);\n\n                    // Policy check\n                    if (policy?.validateTransaction) {\n                        const allowed = await policy.validateTransaction(txBytes, request);\n                        if (!allowed) {\n                            return errorResponse('POLICY_VIOLATION', 'Transaction rejected by policy', 403);\n                        }\n                    }\n\n                    // Sign\n                    const signedTx = await signer.signTransaction(txBytes);\n\n                    // Send\n                    try {\n                        const signature = await sendTransaction(rpc, signedTx);\n                        const response: SignAndSendTransactionResponse = { signature };\n                        return jsonResponse(response);\n                    } catch (error) {\n                        return errorResponse(\n                            'SEND_FAILED',\n                            error instanceof Error ? error.message : 'Failed to send transaction',\n                            500,\n                        );\n                    }\n                }\n\n                default:\n                    return errorResponse(\n                        'INVALID_OPERATION',\n                        `Unknown operation: ${(body as { operation: string }).operation}`,\n                        400,\n                    );\n            }\n        } catch (error) {\n            console.error('[connector/server] POST error:', error);\n\n            // Check for known signer errors\n            if (error instanceof Error) {\n                if (error.message.includes('rate limit') || error.message.includes('429')) {\n                    return errorResponse('PROVIDER_ERROR', 'Rate limited, please retry', 429);\n                }\n            }\n\n            return errorResponse('SIGNING_FAILED', error instanceof Error ? error.message : 'Signing failed', 500);\n        }\n    }\n\n    return { GET, POST };\n}\n"]}

package/dist/server.mjs

@@ -0,0 +1,187 @@
+import { decodeBase64, encodeBase64 } from './chunk-E3DAIOYS.mjs';
+
+// src/server/route-handlers.ts
+function jsonResponse(data, status = 200) {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+function errorResponse(code, message, status = 400, details) {
+  return jsonResponse({
+    error: { code, message, details }
+  }, status);
+}
+function defaultAuthorize(request) {
+  let token = process.env.CONNECTOR_SIGNER_TOKEN;
+  if (!token)
+    return console.warn("[connector/server] CONNECTOR_SIGNER_TOKEN not set - rejecting all requests"), false;
+  let authHeader = request.headers.get("Authorization");
+  if (!authHeader)
+    return false;
+  let parts = authHeader.split(" ");
+  return (parts.length === 2 && parts[0].toLowerCase() === "bearer" ? parts[1] : authHeader) === token;
+}
+async function sendTransaction(rpc, signedTxBytes) {
+  let base64Tx = encodeBase64(signedTxBytes), result = await (await fetch(rpc.url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "sendTransaction",
+      params: [
+        base64Tx,
+        {
+          encoding: "base64",
+          skipPreflight: false,
+          preflightCommitment: rpc.commitment || "confirmed"
+        }
+      ]
+    })
+  })).json();
+  if (result.error)
+    throw new Error(result.error.message || "RPC error");
+  return result.result;
+}
+var cachedSigner = null;
+async function loadSigner(config) {
+  if (cachedSigner)
+    return cachedSigner;
+  if (config.type === "custom")
+    return cachedSigner = config.signer, cachedSigner;
+  if (config.type === "fireblocks") {
+    let { loadFireblocksSigner } = await import('./fireblocks-KCJV3GEK.mjs');
+    return cachedSigner = await loadFireblocksSigner(config), cachedSigner;
+  }
+  if (config.type === "privy") {
+    let { loadPrivySigner } = await import('./privy-6LYDE24Z.mjs');
+    return cachedSigner = await loadPrivySigner(config), cachedSigner;
+  }
+  throw new Error(`Unknown provider type: ${config.type}`);
+}
+function createRemoteSignerRouteHandlers(config) {
+  let {
+    provider,
+    authorize = defaultAuthorize,
+    policy,
+    rpc,
+    chains = ["solana:mainnet", "solana:devnet"],
+    name = "Remote Signer",
+    icon
+  } = config;
+  async function GET(request) {
+    try {
+      if (!await authorize(request))
+        return errorResponse("UNAUTHORIZED", "Unauthorized", 401);
+      let signer = await loadSigner(provider);
+      if (!await signer.isAvailable())
+        return errorResponse("PROVIDER_ERROR", "Signer not available", 503);
+      let capabilities = {
+        signTransaction: true,
+        signAllTransactions: true,
+        signMessage: true,
+        signAndSendTransaction: !!rpc
+      }, metadata = {
+        address: signer.address,
+        chains,
+        capabilities,
+        name,
+        icon
+      };
+      return jsonResponse(metadata);
+    } catch (error) {
+      return console.error("[connector/server] GET error:", error), errorResponse(
+        "INTERNAL_ERROR",
+        error instanceof Error ? error.message : "Internal server error",
+        500
+      );
+    }
+  }
+  async function POST(request) {
+    try {
+      if (!await authorize(request))
+        return errorResponse("UNAUTHORIZED", "Unauthorized", 401);
+      let body;
+      try {
+        body = await request.json();
+      } catch {
+        return errorResponse("INVALID_REQUEST", "Invalid JSON body", 400);
+      }
+      if (!body.operation)
+        return errorResponse("INVALID_REQUEST", "Missing operation field", 400);
+      let signer = await loadSigner(provider);
+      switch (body.operation) {
+        case "signTransaction": {
+          if (!body.transaction)
+            return errorResponse("INVALID_REQUEST", "Missing transaction field", 400);
+          let txBytes = decodeBase64(body.transaction);
+          if (policy?.validateTransaction && !await policy.validateTransaction(txBytes, request))
+            return errorResponse("POLICY_VIOLATION", "Transaction rejected by policy", 403);
+          let signedTx = await signer.signTransaction(txBytes), response = {
+            signedTransaction: encodeBase64(signedTx)
+          };
+          return jsonResponse(response);
+        }
+        case "signAllTransactions": {
+          if (!body.transactions || !Array.isArray(body.transactions))
+            return errorResponse("INVALID_REQUEST", "Missing transactions array", 400);
+          let txBytesArray = body.transactions.map((tx) => decodeBase64(tx));
+          if (policy?.validateTransaction) {
+            for (let txBytes of txBytesArray)
+              if (!await policy.validateTransaction(txBytes, request))
+                return errorResponse("POLICY_VIOLATION", "Transaction rejected by policy", 403);
+          }
+          let response = {
+            signedTransactions: (await signer.signAllTransactions(txBytesArray)).map((tx) => encodeBase64(tx))
+          };
+          return jsonResponse(response);
+        }
+        case "signMessage": {
+          if (!body.message)
+            return errorResponse("INVALID_REQUEST", "Missing message field", 400);
+          let messageBytes = decodeBase64(body.message);
+          if (policy?.validateMessage && !await policy.validateMessage(messageBytes, request))
+            return errorResponse("POLICY_VIOLATION", "Message rejected by policy", 403);
+          let signature = await signer.signMessage(messageBytes), response = {
+            signature: encodeBase64(signature)
+          };
+          return jsonResponse(response);
+        }
+        case "signAndSendTransaction": {
+          if (!rpc)
+            return errorResponse("INVALID_OPERATION", "signAndSendTransaction not enabled", 400);
+          if (!body.transaction)
+            return errorResponse("INVALID_REQUEST", "Missing transaction field", 400);
+          let txBytes = decodeBase64(body.transaction);
+          if (policy?.validateTransaction && !await policy.validateTransaction(txBytes, request))
+            return errorResponse("POLICY_VIOLATION", "Transaction rejected by policy", 403);
+          let signedTx = await signer.signTransaction(txBytes);
+          try {
+            let response = { signature: await sendTransaction(rpc, signedTx) };
+            return jsonResponse(response);
+          } catch (error) {
+            return errorResponse(
+              "SEND_FAILED",
+              error instanceof Error ? error.message : "Failed to send transaction",
+              500
+            );
+          }
+        }
+        default:
+          return errorResponse(
+            "INVALID_OPERATION",
+            `Unknown operation: ${body.operation}`,
+            400
+          );
+      }
+    } catch (error) {
+      return console.error("[connector/server] POST error:", error), error instanceof Error && (error.message.includes("rate limit") || error.message.includes("429")) ? errorResponse("PROVIDER_ERROR", "Rate limited, please retry", 429) : errorResponse("SIGNING_FAILED", error instanceof Error ? error.message : "Signing failed", 500);
+    }
+  }
+  return { GET, POST };
+}
+
+export { createRemoteSignerRouteHandlers };
+//# sourceMappingURL=server.mjs.map
+//# sourceMappingURL=server.mjs.map

package/dist/server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/route-handlers.ts"],"names":[],"mappings":";;;AAwJA,SAAS,YAAA,CAAa,IAAA,EAAe,MAAA,GAAS,GAAA,EAAe;AACzD,EAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG;AAAA,IACtC,MAAA;AAAA,IACA,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,GACjD,CAAA;AACL;AAEA,SAAS,aAAA,CAAc,IAAA,EAA6B,OAAA,EAAiB,MAAA,GAAS,KAAK,OAAA,EAA6B;AAI5G,EAAA,OAAO,YAAA,CAHiC;AAAA,IACpC,KAAA,EAAO,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA;AAAQ,KAEV,MAAM,CAAA;AACpC;AAKA,SAAS,iBAAiB,OAAA,EAA2B;AACjD,EAAA,IAAM,KAAA,GAAQ,QAAQ,GAAA,CAAI,sBAAA;AAC1B,EAAA,IAAI,CAAC,KAAA;AAED,IAAA,OAAA,OAAA,CAAQ,IAAA,CAAK,4EAA4E,CAAA,EAClF,KAAA;AAGX,EAAA,IAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACtD,EAAA,IAAI,CAAC,UAAA;AACD,IAAA,OAAO,KAAA;AAIX,EAAA,IAAM,KAAA,GAAQ,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA;AAGlC,EAAA,OAAA,CAFsB,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY,KAAM,QAAA,GAAW,KAAA,CAAM,CAAC,CAAA,GAAI,UAAA,MAEpE,KAAA;AAC7B;AAKA,eAAe,eAAA,CAAgB,KAAgB,aAAA,EAA4C;AACvF,EAAA,IAAM,QAAA,GAAW,aAAa,aAAa,CAAA,EAoBrC,SAAS,MAAA,CAlBE,MAAM,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK;AAAA,IAClC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,MACjB,OAAA,EAAS,KAAA;AAAA,MACT,EAAA,EAAI,CAAA;AAAA,MACJ,MAAA,EAAQ,iBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,QACJ,QAAA;AAAA,QACA;AAAA,UACI,QAAA,EAAU,QAAA;AAAA,UACV,aAAA,EAAe,KAAA;AAAA,UACf,mBAAA,EAAqB,IAAI,UAAA,IAAc;AAAA;AAC3C;AACJ,KACH;AAAA,GACJ,GAE6B,IAAA,EAAK;AAEnC,EAAA,IAAI,MAAA,CAAO,KAAA;AACP,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,WAAW,WAAW,CAAA;AAGvD,EAAA,OAAO,MAAA,CAAO,MAAA;AAClB;AAMA,IAAI,YAAA,GAAoC,IAAA;AAExC,eAAe,WAAW,MAAA,EAA+C;AACrE,EAAA,IAAI,YAAA;AACA,IAAA,OAAO,YAAA;AAGX,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA;AAChB,IAAA,OAAA,YAAA,GAAe,OAAO,MAAA,EACf,YAAA;AAGX,EAAA,IAAI,MAAA,CAAO,SAAS,YAAA,EAAc;AAC9B,IAAA,IAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,2BAAwB,CAAA;AACtE,IAAA,OAAA,YAAA,GAAe,MAAM,oBAAA,CAAqB,MAAM,CAAA,EACzC,YAAA;AAAA,EACX;AAEA,EAAA,IAAI,MAAA,CAAO,SAAS,OAAA,EAAS;AACzB,IAAA,IAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,sBAAmB,CAAA;AAC5D,IAAA,OAAA,YAAA,GAAe,MAAM,eAAA,CAAgB,MAAM,CAAA,EACpC,YAAA;AAAA,EACX;AAEA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA2B,MAAA,CAA0B,IAAI,CAAA,CAAE,CAAA;AAC/E;AA8BO,SAAS,gCAAgC,MAAA,EAAwD;AACpG,EAAA,IAAM;AAAA,IACF,QAAA;AAAA,IACA,SAAA,GAAY,gBAAA;AAAA,IACZ,MAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,GAAS,CAAC,gBAAA,EAAkB,eAAe,CAAA;AAAA,IAC3C,IAAA,GAAO,eAAA;AAAA,IACP;AAAA,GACJ,GAAI,MAAA;AAGJ,EAAA,eAAe,IAAI,OAAA,EAA6C;AAC5D,IAAA,IAAI;AAGA,MAAA,IAAI,CADe,MAAM,SAAA,CAAU,OAAO,CAAA;AAEtC,QAAA,OAAO,aAAA,CAAc,cAAA,EAAgB,cAAA,EAAgB,GAAG,CAAA;AAI5D,MAAA,IAAM,MAAA,GAAS,MAAM,UAAA,CAAW,QAAQ,CAAA;AAIxC,MAAA,IAAI,CADc,MAAM,MAAA,CAAO,WAAA,EAAY;AAEvC,QAAA,OAAO,aAAA,CAAc,gBAAA,EAAkB,sBAAA,EAAwB,GAAG,CAAA;AAItE,MAAA,IAAM,YAAA,GAAyC;AAAA,QAC3C,eAAA,EAAiB,IAAA;AAAA,QACjB,mBAAA,EAAqB,IAAA;AAAA,QACrB,WAAA,EAAa,IAAA;AAAA,QACb,wBAAwB,CAAA,CAAQ;AAAA,SAI9B,QAAA,GAAiC;AAAA,QACnC,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAA;AAAA,QACA,YAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,IAChC,SAAS,KAAA,EAAO;AACZ,MAAA,OAAA,OAAA,CAAQ,KAAA,CAAM,+BAAA,EAAiC,KAAK,CAAA,EAC7C,aAAA;AAAA,QACH,gBAAA;AAAA,QACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,uBAAA;AAAA,QACzC;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAGA,EAAA,eAAe,KAAK,OAAA,EAA6C;AAC7D,IAAA,IAAI;AAGA,MAAA,IAAI,CADe,MAAM,SAAA,CAAU,OAAO,CAAA;AAEtC,QAAA,OAAO,aAAA,CAAc,cAAA,EAAgB,cAAA,EAAgB,GAAG,CAAA;AAI5D,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,IAAA,GAAO,MAAM,QAAQ,IAAA,EAAK;AAAA,MAC9B,CAAA,CAAA,MAAQ;AACJ,QAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,mBAAA,EAAqB,GAAG,CAAA;AAAA,MACpE;AAEA,MAAA,IAAI,CAAC,IAAA,CAAK,SAAA;AACN,QAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,yBAAA,EAA2B,GAAG,CAAA;AAI1E,MAAA,IAAM,MAAA,GAAS,MAAM,UAAA,CAAW,QAAQ,CAAA;AAGxC,MAAA,QAAQ,KAAK,SAAA;AAAW,QACpB,KAAK,iBAAA,EAAmB;AACpB,UAAA,IAAI,CAAC,IAAA,CAAK,WAAA;AACN,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,2BAAA,EAA6B,GAAG,CAAA;AAG5E,UAAA,IAAM,OAAA,GAAU,YAAA,CAAa,IAAA,CAAK,WAAW,CAAA;AAG7C,UAAA,IAAI,QAAQ,mBAAA,IAEJ,CADY,MAAM,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAE7D,YAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,gCAAA,EAAkC,GAAG,CAAA;AAItF,UAAA,IAAM,WAAW,MAAM,MAAA,CAAO,eAAA,CAAgB,OAAO,GAC/C,QAAA,GAAoC;AAAA,YACtC,iBAAA,EAAmB,aAAa,QAAQ;AAAA,WAC5C;AACA,UAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,QAChC;AAAA,QAEA,KAAK,qBAAA,EAAuB;AACxB,UAAA,IAAI,CAAC,IAAA,CAAK,YAAA,IAAgB,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,YAAY,CAAA;AACtD,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,4BAAA,EAA8B,GAAG,CAAA;AAG7E,UAAA,IAAM,eAAe,IAAA,CAAK,YAAA,CAAa,IAAI,CAAA,EAAA,KAAM,YAAA,CAAa,EAAE,CAAC,CAAA;AAGjE,UAAA,IAAI,MAAA,EAAQ,mBAAA,EAAA;AACR,YAAA,KAAA,IAAW,OAAA,IAAW,YAAA;AAElB,cAAA,IAAI,CADY,MAAM,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAE7D,gBAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,gCAAA,EAAkC,GAAG,CAAA;AAAA,UAAA;AAM1F,UAAA,IAAM,QAAA,GAAwC;AAAA,YAC1C,kBAAA,EAAA,CAFc,MAAM,MAAA,CAAO,mBAAA,CAAoB,YAAY,GAE7B,GAAA,CAAI,CAAA,EAAA,KAAM,YAAA,CAAa,EAAE,CAAC;AAAA,WAC5D;AACA,UAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,QAChC;AAAA,QAEA,KAAK,aAAA,EAAe;AAChB,UAAA,IAAI,CAAC,IAAA,CAAK,OAAA;AACN,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,uBAAA,EAAyB,GAAG,CAAA;AAGxE,UAAA,IAAM,YAAA,GAAe,YAAA,CAAa,IAAA,CAAK,OAAO,CAAA;AAG9C,UAAA,IAAI,QAAQ,eAAA,IAEJ,CADY,MAAM,MAAA,CAAO,eAAA,CAAgB,cAAc,OAAO,CAAA;AAE9D,YAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,4BAAA,EAA8B,GAAG,CAAA;AAIlF,UAAA,IAAM,YAAY,MAAM,MAAA,CAAO,WAAA,CAAY,YAAY,GACjD,QAAA,GAAgC;AAAA,YAClC,SAAA,EAAW,aAAa,SAAS;AAAA,WACrC;AACA,UAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,QAChC;AAAA,QAEA,KAAK,wBAAA,EAA0B;AAC3B,UAAA,IAAI,CAAC,GAAA;AACD,YAAA,OAAO,aAAA,CAAc,mBAAA,EAAqB,oCAAA,EAAsC,GAAG,CAAA;AAGvF,UAAA,IAAI,CAAC,IAAA,CAAK,WAAA;AACN,YAAA,OAAO,aAAA,CAAc,iBAAA,EAAmB,2BAAA,EAA6B,GAAG,CAAA;AAG5E,UAAA,IAAM,OAAA,GAAU,YAAA,CAAa,IAAA,CAAK,WAAW,CAAA;AAG7C,UAAA,IAAI,QAAQ,mBAAA,IAEJ,CADY,MAAM,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAE7D,YAAA,OAAO,aAAA,CAAc,kBAAA,EAAoB,gCAAA,EAAkC,GAAG,CAAA;AAKtF,UAAA,IAAM,QAAA,GAAW,MAAM,MAAA,CAAO,eAAA,CAAgB,OAAO,CAAA;AAGrD,UAAA,IAAI;AAEA,YAAA,IAAM,WAA2C,EAAE,SAAA,EADjC,MAAM,eAAA,CAAgB,GAAA,EAAK,QAAQ,CAAA,EACQ;AAC7D,YAAA,OAAO,aAAa,QAAQ,CAAA;AAAA,UAChC,SAAS,KAAA,EAAO;AACZ,YAAA,OAAO,aAAA;AAAA,cACH,aAAA;AAAA,cACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,4BAAA;AAAA,cACzC;AAAA,aACJ;AAAA,UACJ;AAAA,QACJ;AAAA,QAEA;AACI,UAAA,OAAO,aAAA;AAAA,YACH,mBAAA;AAAA,YACA,CAAA,mBAAA,EAAuB,KAA+B,SAAS,CAAA,CAAA;AAAA,YAC/D;AAAA,WACJ;AAAA;AACR,IACJ,SAAS,KAAA,EAAO;AAIZ,MAAA,OAHA,OAAA,CAAQ,KAAA,CAAM,gCAAA,EAAkC,KAAK,CAAA,EAGjD,KAAA,YAAiB,KAAA,KACb,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,YAAY,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,KAAK,CAAA,CAAA,GAC7D,aAAA,CAAc,gBAAA,EAAkB,4BAAA,EAA8B,GAAG,CAAA,GAIzE,aAAA,CAAc,gBAAA,EAAkB,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,kBAAkB,GAAG,CAAA;AAAA,IACzG;AAAA,EACJ;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACvB","file":"server.mjs","sourcesContent":["/**\n * @solana/connector/server - Route Handlers\n *\n * Creates Next.js Route Handler compatible GET/POST handlers for remote signing.\n * Designed for Node.js runtime (not Edge) to support crypto operations.\n */\n\nimport type {\n    RemoteSignerMetadata,\n    RemoteSignerCapabilities,\n    RemoteSignerRequest,\n    SignTransactionResponse,\n    SignAllTransactionsResponse,\n    SignMessageResponse,\n    SignAndSendTransactionResponse,\n    RemoteSignerErrorCode,\n    RemoteSignerErrorResponse,\n} from '../remote/protocol';\nimport { decodeBase64, encodeBase64 } from '../remote/protocol';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Signer interface that providers must implement\n */\nexport interface RemoteSigner {\n    /** Signer's Solana address (base58) */\n    readonly address: string;\n\n    /** Sign transaction bytes, return signed transaction bytes */\n    signTransaction(transactionBytes: Uint8Array): Promise<Uint8Array>;\n\n    /** Sign multiple transactions */\n    signAllTransactions(transactions: Uint8Array[]): Promise<Uint8Array[]>;\n\n    /** Sign a message, return 64-byte signature */\n    signMessage(message: Uint8Array): Promise<Uint8Array>;\n\n    /** Check if signer is available/healthy */\n    isAvailable(): Promise<boolean>;\n}\n\n/**\n * Provider configuration\n */\nexport type ProviderType = 'fireblocks' | 'privy' | 'custom';\n\nexport interface FireblocksProviderConfig {\n    type: 'fireblocks';\n    /** Fireblocks API key */\n    apiKey: string;\n    /** RSA private key PEM for JWT signing */\n    privateKeyPem: string;\n    /** Vault account ID */\n    vaultAccountId: string;\n    /** Asset ID (default: 'SOL') */\n    assetId?: string;\n    /** API base URL (default: https://api.fireblocks.io) */\n    apiBaseUrl?: string;\n}\n\nexport interface PrivyProviderConfig {\n    type: 'privy';\n    /** Privy app ID */\n    appId: string;\n    /** Privy app secret */\n    appSecret: string;\n    /** Privy wallet ID */\n    walletId: string;\n    /** API base URL (default: https://api.privy.io/v1) */\n    apiBaseUrl?: string;\n}\n\nexport interface CustomProviderConfig {\n    type: 'custom';\n    /** Custom signer implementation */\n    signer: RemoteSigner;\n}\n\nexport type ProviderConfig = FireblocksProviderConfig | PrivyProviderConfig | CustomProviderConfig;\n\n/**\n * Authorization callback\n */\nexport type AuthorizeCallback = (request: Request) => Promise<boolean> | boolean;\n\n/**\n * Policy validation callback\n */\nexport interface PolicyHooks {\n    /** Validate a transaction before signing (return false to reject) */\n    validateTransaction?: (transactionBytes: Uint8Array, request: Request) => Promise<boolean> | boolean;\n    /** Validate a message before signing (return false to reject) */\n    validateMessage?: (messageBytes: Uint8Array, request: Request) => Promise<boolean> | boolean;\n}\n\n/**\n * RPC configuration for sign+send operations\n */\nexport interface RpcConfig {\n    /** Solana RPC endpoint URL */\n    url: string;\n    /** Commitment level for confirmations */\n    commitment?: 'processed' | 'confirmed' | 'finalized';\n}\n\n/**\n * Route handler configuration\n */\nexport interface RemoteSignerRouteHandlersConfig {\n    /** Provider configuration */\n    provider: ProviderConfig;\n    /**\n     * Authorization callback. Default: checks for Authorization header matching CONNECTOR_SIGNER_TOKEN env var.\n     * Return true to allow, false to reject.\n     */\n    authorize?: AuthorizeCallback;\n    /** Policy hooks for transaction/message validation */\n    policy?: PolicyHooks;\n    /** RPC configuration (required for signAndSendTransaction) */\n    rpc?: RpcConfig;\n    /** Supported chains (default: ['solana:mainnet', 'solana:devnet']) */\n    chains?: string[];\n    /** Wallet name shown in metadata */\n    name?: string;\n    /** Wallet icon URL */\n    icon?: string;\n}\n\n/**\n * Next.js compatible request/response types\n */\nexport interface NextRequest extends Request {\n    // Next.js adds extra properties, but we only need standard Request\n}\n\nexport type NextResponse = Response;\n\n/**\n * Route handlers object returned by the factory\n */\nexport interface RouteHandlers {\n    GET: (request: NextRequest) => Promise<NextResponse>;\n    POST: (request: NextRequest) => Promise<NextResponse>;\n}\n\n// ============================================================================\n// Helper functions\n// ============================================================================\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n    return new Response(JSON.stringify(data), {\n        status,\n        headers: { 'Content-Type': 'application/json' },\n    });\n}\n\nfunction errorResponse(code: RemoteSignerErrorCode, message: string, status = 400, details?: unknown): Response {\n    const body: RemoteSignerErrorResponse = {\n        error: { code, message, details },\n    };\n    return jsonResponse(body, status);\n}\n\n/**\n * Default authorization: check Authorization header against CONNECTOR_SIGNER_TOKEN env var\n */\nfunction defaultAuthorize(request: Request): boolean {\n    const token = process.env.CONNECTOR_SIGNER_TOKEN;\n    if (!token) {\n        // No token configured = reject all (safe default)\n        console.warn('[connector/server] CONNECTOR_SIGNER_TOKEN not set - rejecting all requests');\n        return false;\n    }\n\n    const authHeader = request.headers.get('Authorization');\n    if (!authHeader) {\n        return false;\n    }\n\n    // Support \"Bearer <token>\" format\n    const parts = authHeader.split(' ');\n    const providedToken = parts.length === 2 && parts[0].toLowerCase() === 'bearer' ? parts[1] : authHeader;\n\n    return providedToken === token;\n}\n\n/**\n * Send a signed transaction to Solana RPC\n */\nasync function sendTransaction(rpc: RpcConfig, signedTxBytes: Uint8Array): Promise<string> {\n    const base64Tx = encodeBase64(signedTxBytes);\n\n    const response = await fetch(rpc.url, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n            jsonrpc: '2.0',\n            id: 1,\n            method: 'sendTransaction',\n            params: [\n                base64Tx,\n                {\n                    encoding: 'base64',\n                    skipPreflight: false,\n                    preflightCommitment: rpc.commitment || 'confirmed',\n                },\n            ],\n        }),\n    });\n\n    const result = await response.json();\n\n    if (result.error) {\n        throw new Error(result.error.message || 'RPC error');\n    }\n\n    return result.result as string;\n}\n\n// ============================================================================\n// Provider loader\n// ============================================================================\n\nlet cachedSigner: RemoteSigner | null = null;\n\nasync function loadSigner(config: ProviderConfig): Promise<RemoteSigner> {\n    if (cachedSigner) {\n        return cachedSigner;\n    }\n\n    if (config.type === 'custom') {\n        cachedSigner = config.signer;\n        return cachedSigner;\n    }\n\n    if (config.type === 'fireblocks') {\n        const { loadFireblocksSigner } = await import('./providers/fireblocks');\n        cachedSigner = await loadFireblocksSigner(config);\n        return cachedSigner;\n    }\n\n    if (config.type === 'privy') {\n        const { loadPrivySigner } = await import('./providers/privy');\n        cachedSigner = await loadPrivySigner(config);\n        return cachedSigner;\n    }\n\n    throw new Error(`Unknown provider type: ${(config as ProviderConfig).type}`);\n}\n\n// ============================================================================\n// Route Handler Factory\n// ============================================================================\n\n/**\n * Create Next.js Route Handlers for remote signing\n *\n * @example\n * ```typescript\n * // app/api/connector-signer/route.ts\n * import { createRemoteSignerRouteHandlers } from '@solana/connector/server';\n *\n * const { GET, POST } = createRemoteSignerRouteHandlers({\n *   provider: {\n *     type: 'fireblocks',\n *     apiKey: process.env.FIREBLOCKS_API_KEY!,\n *     privateKeyPem: process.env.FIREBLOCKS_PRIVATE_KEY!,\n *     vaultAccountId: process.env.FIREBLOCKS_VAULT_ID!,\n *   },\n *   rpc: {\n *     url: process.env.SOLANA_RPC_URL!,\n *   },\n * });\n *\n * export { GET, POST };\n * export const runtime = 'nodejs';\n * ```\n */\nexport function createRemoteSignerRouteHandlers(config: RemoteSignerRouteHandlersConfig): RouteHandlers {\n    const {\n        provider,\n        authorize = defaultAuthorize,\n        policy,\n        rpc,\n        chains = ['solana:mainnet', 'solana:devnet'],\n        name = 'Remote Signer',\n        icon,\n    } = config;\n\n    // GET handler: return signer metadata\n    async function GET(request: NextRequest): Promise<NextResponse> {\n        try {\n            // Check authorization\n            const authorized = await authorize(request);\n            if (!authorized) {\n                return errorResponse('UNAUTHORIZED', 'Unauthorized', 401);\n            }\n\n            // Load signer\n            const signer = await loadSigner(provider);\n\n            // Check availability\n            const available = await signer.isAvailable();\n            if (!available) {\n                return errorResponse('PROVIDER_ERROR', 'Signer not available', 503);\n            }\n\n            // Build capabilities\n            const capabilities: RemoteSignerCapabilities = {\n                signTransaction: true,\n                signAllTransactions: true,\n                signMessage: true,\n                signAndSendTransaction: Boolean(rpc),\n            };\n\n            // Build metadata response\n            const metadata: RemoteSignerMetadata = {\n                address: signer.address,\n                chains,\n                capabilities,\n                name,\n                icon,\n            };\n\n            return jsonResponse(metadata);\n        } catch (error) {\n            console.error('[connector/server] GET error:', error);\n            return errorResponse(\n                'INTERNAL_ERROR',\n                error instanceof Error ? error.message : 'Internal server error',\n                500,\n            );\n        }\n    }\n\n    // POST handler: handle signing operations\n    async function POST(request: NextRequest): Promise<NextResponse> {\n        try {\n            // Check authorization\n            const authorized = await authorize(request);\n            if (!authorized) {\n                return errorResponse('UNAUTHORIZED', 'Unauthorized', 401);\n            }\n\n            // Parse request body\n            let body: RemoteSignerRequest;\n            try {\n                body = await request.json();\n            } catch {\n                return errorResponse('INVALID_REQUEST', 'Invalid JSON body', 400);\n            }\n\n            if (!body.operation) {\n                return errorResponse('INVALID_REQUEST', 'Missing operation field', 400);\n            }\n\n            // Load signer\n            const signer = await loadSigner(provider);\n\n            // Handle operations\n            switch (body.operation) {\n                case 'signTransaction': {\n                    if (!body.transaction) {\n                        return errorResponse('INVALID_REQUEST', 'Missing transaction field', 400);\n                    }\n\n                    const txBytes = decodeBase64(body.transaction);\n\n                    // Policy check\n                    if (policy?.validateTransaction) {\n                        const allowed = await policy.validateTransaction(txBytes, request);\n                        if (!allowed) {\n                            return errorResponse('POLICY_VIOLATION', 'Transaction rejected by policy', 403);\n                        }\n                    }\n\n                    const signedTx = await signer.signTransaction(txBytes);\n                    const response: SignTransactionResponse = {\n                        signedTransaction: encodeBase64(signedTx),\n                    };\n                    return jsonResponse(response);\n                }\n\n                case 'signAllTransactions': {\n                    if (!body.transactions || !Array.isArray(body.transactions)) {\n                        return errorResponse('INVALID_REQUEST', 'Missing transactions array', 400);\n                    }\n\n                    const txBytesArray = body.transactions.map(tx => decodeBase64(tx));\n\n                    // Policy check for each transaction\n                    if (policy?.validateTransaction) {\n                        for (const txBytes of txBytesArray) {\n                            const allowed = await policy.validateTransaction(txBytes, request);\n                            if (!allowed) {\n                                return errorResponse('POLICY_VIOLATION', 'Transaction rejected by policy', 403);\n                            }\n                        }\n                    }\n\n                    const signedTxs = await signer.signAllTransactions(txBytesArray);\n                    const response: SignAllTransactionsResponse = {\n                        signedTransactions: signedTxs.map(tx => encodeBase64(tx)),\n                    };\n                    return jsonResponse(response);\n                }\n\n                case 'signMessage': {\n                    if (!body.message) {\n                        return errorResponse('INVALID_REQUEST', 'Missing message field', 400);\n                    }\n\n                    const messageBytes = decodeBase64(body.message);\n\n                    // Policy check\n                    if (policy?.validateMessage) {\n                        const allowed = await policy.validateMessage(messageBytes, request);\n                        if (!allowed) {\n                            return errorResponse('POLICY_VIOLATION', 'Message rejected by policy', 403);\n                        }\n                    }\n\n                    const signature = await signer.signMessage(messageBytes);\n                    const response: SignMessageResponse = {\n                        signature: encodeBase64(signature),\n                    };\n                    return jsonResponse(response);\n                }\n\n                case 'signAndSendTransaction': {\n                    if (!rpc) {\n                        return errorResponse('INVALID_OPERATION', 'signAndSendTransaction not enabled', 400);\n                    }\n\n                    if (!body.transaction) {\n                        return errorResponse('INVALID_REQUEST', 'Missing transaction field', 400);\n                    }\n\n                    const txBytes = decodeBase64(body.transaction);\n\n                    // Policy check\n                    if (policy?.validateTransaction) {\n                        const allowed = await policy.validateTransaction(txBytes, request);\n                        if (!allowed) {\n                            return errorResponse('POLICY_VIOLATION', 'Transaction rejected by policy', 403);\n                        }\n                    }\n\n                    // Sign\n                    const signedTx = await signer.signTransaction(txBytes);\n\n                    // Send\n                    try {\n                        const signature = await sendTransaction(rpc, signedTx);\n                        const response: SignAndSendTransactionResponse = { signature };\n                        return jsonResponse(response);\n                    } catch (error) {\n                        return errorResponse(\n                            'SEND_FAILED',\n                            error instanceof Error ? error.message : 'Failed to send transaction',\n                            500,\n                        );\n                    }\n                }\n\n                default:\n                    return errorResponse(\n                        'INVALID_OPERATION',\n                        `Unknown operation: ${(body as { operation: string }).operation}`,\n                        400,\n                    );\n            }\n        } catch (error) {\n            console.error('[connector/server] POST error:', error);\n\n            // Check for known signer errors\n            if (error instanceof Error) {\n                if (error.message.includes('rate limit') || error.message.includes('429')) {\n                    return errorResponse('PROVIDER_ERROR', 'Rate limited, please retry', 429);\n                }\n            }\n\n            return errorResponse('SIGNING_FAILED', error instanceof Error ? error.message : 'Signing failed', 500);\n        }\n    }\n\n    return { GET, POST };\n}\n"]}

package/dist/{standard-shim-tmnQelaJ.d.ts → standard-shim-Cg6fmjK_.d.ts}

@@ -700,6 +700,11 @@ interface ConnectorConfig {
      * @see https://docs.walletconnect.network/wallet-sdk/chain-support/solana
      */
     walletConnect?: WalletConnectConfig;
+    /**
+     * Additional wallets to include alongside Wallet Standard wallets.
+     * Use this to add remote/server-backed signers created via `createRemoteSignerWallet()`.
+     */
+    additionalWallets?: Wallet[];
 }
 /**
  * Health check information for connector diagnostics
@@ -991,6 +996,11 @@ interface DefaultConfigOptions {
      * @see https://docs.walletconnect.network/wallet-sdk/chain-support/solana
      */
     walletConnect?: boolean | SimplifiedWalletConnectConfig;
+    /**
+     * Additional wallets to include alongside Wallet Standard wallets.
+     * Use this to add remote/server-backed signers created via `createRemoteSignerWallet()`.
+     */
+    additionalWallets?: Wallet[];
 }
 /**
  * Simplified WalletConnect configuration

package/dist/{standard-shim-CGB88PPO.d.mts → standard-shim-Cz4UNS7t.d.mts}

@@ -700,6 +700,11 @@ interface ConnectorConfig {
      * @see https://docs.walletconnect.network/wallet-sdk/chain-support/solana
      */
     walletConnect?: WalletConnectConfig;
+    /**
+     * Additional wallets to include alongside Wallet Standard wallets.
+     * Use this to add remote/server-backed signers created via `createRemoteSignerWallet()`.
+     */
+    additionalWallets?: Wallet[];
 }
 /**
  * Health check information for connector diagnostics
@@ -991,6 +996,11 @@ interface DefaultConfigOptions {
      * @see https://docs.walletconnect.network/wallet-sdk/chain-support/solana
      */
     walletConnect?: boolean | SimplifiedWalletConnectConfig;
+    /**
+     * Additional wallets to include alongside Wallet Standard wallets.
+     * Use this to add remote/server-backed signers created via `createRemoteSignerWallet()`.
+     */
+    additionalWallets?: Wallet[];
 }
 /**
  * Simplified WalletConnect configuration

package/dist/{walletconnect-447EY3OJ.js → walletconnect-F2M3PAAN.js}

@@ -1,28 +1,28 @@
 'use strict';
 
-var chunkHN5AJF7F_js = require('./chunk-HN5AJF7F.js');
+var chunkNLPEO5GT_js = require('./chunk-NLPEO5GT.js');
 
 
 
 Object.defineProperty(exports, "createMockWalletConnectTransport", {
   enumerable: true,
-  get: function () { return chunkHN5AJF7F_js.createMockWalletConnectTransport; }
+  get: function () { return chunkNLPEO5GT_js.createMockWalletConnectTransport; }
 });
 Object.defineProperty(exports, "createWalletConnectTransport", {
   enumerable: true,
-  get: function () { return chunkHN5AJF7F_js.createWalletConnectTransport; }
+  get: function () { return chunkNLPEO5GT_js.createWalletConnectTransport; }
 });
 Object.defineProperty(exports, "createWalletConnectWallet", {
   enumerable: true,
-  get: function () { return chunkHN5AJF7F_js.createWalletConnectWallet; }
+  get: function () { return chunkNLPEO5GT_js.createWalletConnectWallet; }
 });
 Object.defineProperty(exports, "isWalletConnectAvailable", {
   enumerable: true,
-  get: function () { return chunkHN5AJF7F_js.isWalletConnectAvailable; }
+  get: function () { return chunkNLPEO5GT_js.isWalletConnectAvailable; }
 });
 Object.defineProperty(exports, "registerWalletConnectWallet", {
   enumerable: true,
-  get: function () { return chunkHN5AJF7F_js.registerWalletConnectWallet; }
+  get: function () { return chunkNLPEO5GT_js.registerWalletConnectWallet; }
 });
-//# sourceMappingURL=walletconnect-447EY3OJ.js.map
-//# sourceMappingURL=walletconnect-447EY3OJ.js.map
+//# sourceMappingURL=walletconnect-F2M3PAAN.js.map
+//# sourceMappingURL=walletconnect-F2M3PAAN.js.map

package/dist/{walletconnect-447EY3OJ.js.map → walletconnect-F2M3PAAN.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"walletconnect-447EY3OJ.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"walletconnect-F2M3PAAN.js"}

package/dist/walletconnect-Z6LPGALR.mjs

@@ -0,0 +1,3 @@
+export { createMockWalletConnectTransport, createWalletConnectTransport, createWalletConnectWallet, isWalletConnectAvailable, registerWalletConnectWallet } from './chunk-A7WQ3K75.mjs';
+//# sourceMappingURL=walletconnect-Z6LPGALR.mjs.map
+//# sourceMappingURL=walletconnect-Z6LPGALR.mjs.map

package/dist/{walletconnect-U455PO4I.mjs.map → walletconnect-Z6LPGALR.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"walletconnect-U455PO4I.mjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"walletconnect-Z6LPGALR.mjs"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@solana/connector",
-    "version": "0.2.0",
+    "version": "0.2.2",
     "description": "Headless wallet connector client and React provider built on Wallet Standard",
     "main": "./dist/index.js",
     "module": "./dist/index.mjs",
@@ -26,6 +26,16 @@
             "types": "./dist/compat.d.ts",
             "import": "./dist/compat.mjs",
             "require": "./dist/compat.js"
+        },
+        "./remote": {
+            "types": "./dist/remote.d.ts",
+            "import": "./dist/remote.mjs",
+            "require": "./dist/remote.js"
+        },
+        "./server": {
+            "types": "./dist/server.d.ts",
+            "import": "./dist/server.mjs",
+            "require": "./dist/server.js"
         }
     },
     "files": [
@@ -49,7 +59,13 @@
     "peerDependencies": {
         "@solana/web3.js": "^1.0.0",
         "react": ">=18.0.0",
-        "@walletconnect/universal-provider": "^2.0.0"
+        "@walletconnect/universal-provider": "^2.0.0",
+        "@solana/keychain": "^0.2.1",
+        "@solana/keychain-fireblocks": "^0.2.1",
+        "@solana/keychain-privy": "^0.2.1",
+        "@solana/keychain-turnkey": "^0.2.1",
+        "@solana/keychain-vault": "^0.2.1",
+        "@solana/keychain-aws-kms": "^0.2.1"
     },
     "peerDependenciesMeta": {
         "react": {
@@ -63,6 +79,15 @@
         },
         "@solana/web3.js": {
             "optional": true
+        },
+        "@solana/keychain": {
+            "optional": true
+        },
+        "@solana/keychain-fireblocks": {
+            "optional": true
+        },
+        "@solana/keychain-privy": {
+            "optional": true
         }
     },
     "dependencies": {