@solana/keychain-aws-kms 0.2.1 → 0.4.0

package/dist/__tests__/aws-kms-signer.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=aws-kms-signer.integration.test.d.ts.map

package/dist/__tests__/aws-kms-signer.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-kms-signer.integration.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/aws-kms-signer.integration.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/aws-kms-signer.integration.test.js

@@ -0,0 +1,50 @@
+import { appendTransactionMessageInstructions, createSolanaRpc, createTransactionMessage, pipe, setTransactionMessageFeePayerSigner, setTransactionMessageLifetimeUsingBlockhash, signTransactionMessageWithSigners, } from '@solana/kit';
+import { getAddMemoInstruction } from '@solana-program/memo';
+import { config } from 'dotenv';
+import { describe, expect, it } from 'vitest';
+import { AwsKmsSigner } from '../aws-kms-signer.js';
+config();
+const REQUIRED_ENV_VARS = ['AWS_KMS_KEY_ID', 'AWS_KMS_SIGNER_PUBKEY'];
+function hasRequiredEnvVars() {
+    return REQUIRED_ENV_VARS.every(v => process.env[v]);
+}
+function createAwsKmsSigner() {
+    return new AwsKmsSigner({
+        keyId: process.env.AWS_KMS_KEY_ID,
+        publicKey: process.env.AWS_KMS_SIGNER_PUBKEY,
+        region: process.env.AWS_KMS_REGION,
+    });
+}
+describe('AwsKmsSigner Integration', () => {
+    it.skipIf(!hasRequiredEnvVars())('signs transactions with AWS KMS', async () => {
+        const signer = createAwsKmsSigner();
+        const rpcUrl = process.env.SOLANA_RPC_URL ?? 'https://api.devnet.solana.com';
+        // Get real blockhash from devnet
+        const rpc = createSolanaRpc(rpcUrl);
+        const { value: { blockhash, lastValidBlockHeight }, } = await rpc.getLatestBlockhash().send();
+        // Create memo transaction (doesn't need funds)
+        const transaction = pipe(createTransactionMessage({ version: 0 }), tx => setTransactionMessageFeePayerSigner(signer, tx), tx => appendTransactionMessageInstructions([getAddMemoInstruction({ memo: 'AWS KMS test' })], tx), tx => setTransactionMessageLifetimeUsingBlockhash({ blockhash, lastValidBlockHeight }, tx));
+        // Sign via AWS KMS
+        const signed = await signTransactionMessageWithSigners(transaction);
+        // Verify signature returned
+        expect(signed.signatures[signer.address]).toBeDefined();
+        expect(signed.signatures[signer.address]?.length).toBe(64);
+    }, 60000); // 1 minute timeout
+    it.skipIf(!hasRequiredEnvVars())('signs messages', async () => {
+        const signer = createAwsKmsSigner();
+        const message = {
+            content: new Uint8Array([1, 2, 3, 4, 5]),
+            signatures: {},
+        };
+        const result = await signer.signMessages([message]);
+        expect(result).toHaveLength(1);
+        expect(result[0]?.[signer.address]).toBeDefined();
+        expect(result[0]?.[signer.address]?.length).toBe(64);
+    });
+    it.skipIf(!hasRequiredEnvVars())('checks availability', async () => {
+        const signer = createAwsKmsSigner();
+        const available = await signer.isAvailable();
+        expect(available).toBe(true);
+    });
+});
+//# sourceMappingURL=aws-kms-signer.integration.test.js.map

package/dist/__tests__/aws-kms-signer.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-kms-signer.integration.test.js","sourceRoot":"","sources":["../../src/__tests__/aws-kms-signer.integration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,oCAAoC,EACpC,eAAe,EACf,wBAAwB,EACxB,IAAI,EACJ,mCAAmC,EACnC,2CAA2C,EAC3C,iCAAiC,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,EAAE,CAAC;AAET,MAAM,iBAAiB,GAAG,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;AAEtE,SAAS,kBAAkB;IACvB,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,kBAAkB;IACvB,OAAO,IAAI,YAAY,CAAC;QACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAe;QAClC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB;QAC7C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;KACrC,CAAC,CAAC;AACP,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAC5B,iCAAiC,EACjC,KAAK,IAAI,EAAE;QACP,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,+BAA+B,CAAC;QAE7E,iCAAiC;QACjC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,EACF,KAAK,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAC7C,GAAG,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,CAAC;QAE1C,+CAA+C;QAC/C,MAAM,WAAW,GAAG,IAAI,CACpB,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,EAAE,CAAC,mCAAmC,CAAC,MAAM,EAAE,EAAE,CAAC,EACrD,EAAE,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EACjG,EAAE,CAAC,EAAE,CAAC,2CAA2C,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAC7F,CAAC;QAEF,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;QAEpE,4BAA4B;QAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC,EACD,KAAM,CACT,CAAC,CAAC,mBAAmB;IAEtB,EAAE,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG;YACZ,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACxC,UAAU,EAAE,EAAE;SACjB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAEpD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@solana/keychain-aws-kms",
   "author": "Solana Foundation",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "description": "AWS KMS-based signer for Solana transactions using EdDSA (Ed25519)",
   "license": "MIT",
   "repository": "https://github.com/solana-foundation/solana-keychain",
@@ -30,16 +30,18 @@
   ],
   "dependencies": {
     "@aws-sdk/client-kms": "^3.700.0",
-    "@solana/addresses": "^5.0.0",
-    "@solana/codecs-strings": "^5.0.0",
-    "@solana/keys": "^5.0.0",
-    "@solana/signers": "^5.0.0",
-    "@solana/transactions": "^5.0.0",
-    "@solana/keychain-core": "0.2.1"
+    "@solana/addresses": "^6.0.1",
+    "@solana/codecs-strings": "^6.0.1",
+    "@solana/keys": "^6.0.1",
+    "@solana/signers": "^6.0.1",
+    "@solana/transactions": "^6.0.1",
+    "@solana/keychain-core": "0.4.0"
   },
   "devDependencies": {
+    "@solana-program/memo": "^0.11.0",
+    "@solana/kit": "^6.0.1",
     "dotenv": "^17.2.3",
-    "@solana/keychain-test-utils": "0.2.1"
+    "@solana/keychain-test-utils": "0.4.0"
   },
   "publishConfig": {
     "access": "public"

package/src/__tests__/aws-kms-signer.integration.test.ts

@@ -0,0 +1,83 @@
+import {
+    appendTransactionMessageInstructions,
+    createSolanaRpc,
+    createTransactionMessage,
+    pipe,
+    setTransactionMessageFeePayerSigner,
+    setTransactionMessageLifetimeUsingBlockhash,
+    signTransactionMessageWithSigners,
+} from '@solana/kit';
+import { getAddMemoInstruction } from '@solana-program/memo';
+import { config } from 'dotenv';
+import { describe, expect, it } from 'vitest';
+
+import { AwsKmsSigner } from '../aws-kms-signer.js';
+
+config();
+
+const REQUIRED_ENV_VARS = ['AWS_KMS_KEY_ID', 'AWS_KMS_SIGNER_PUBKEY'];
+
+function hasRequiredEnvVars(): boolean {
+    return REQUIRED_ENV_VARS.every(v => process.env[v]);
+}
+
+function createAwsKmsSigner(): AwsKmsSigner {
+    return new AwsKmsSigner({
+        keyId: process.env.AWS_KMS_KEY_ID!,
+        publicKey: process.env.AWS_KMS_SIGNER_PUBKEY!,
+        region: process.env.AWS_KMS_REGION,
+    });
+}
+
+describe('AwsKmsSigner Integration', () => {
+    it.skipIf(!hasRequiredEnvVars())(
+        'signs transactions with AWS KMS',
+        async () => {
+            const signer = createAwsKmsSigner();
+            const rpcUrl = process.env.SOLANA_RPC_URL ?? 'https://api.devnet.solana.com';
+
+            // Get real blockhash from devnet
+            const rpc = createSolanaRpc(rpcUrl);
+            const {
+                value: { blockhash, lastValidBlockHeight },
+            } = await rpc.getLatestBlockhash().send();
+
+            // Create memo transaction (doesn't need funds)
+            const transaction = pipe(
+                createTransactionMessage({ version: 0 }),
+                tx => setTransactionMessageFeePayerSigner(signer, tx),
+                tx => appendTransactionMessageInstructions([getAddMemoInstruction({ memo: 'AWS KMS test' })], tx),
+                tx => setTransactionMessageLifetimeUsingBlockhash({ blockhash, lastValidBlockHeight }, tx),
+            );
+
+            // Sign via AWS KMS
+            const signed = await signTransactionMessageWithSigners(transaction);
+
+            // Verify signature returned
+            expect(signed.signatures[signer.address]).toBeDefined();
+            expect(signed.signatures[signer.address]?.length).toBe(64);
+        },
+        60_000,
+    ); // 1 minute timeout
+
+    it.skipIf(!hasRequiredEnvVars())('signs messages', async () => {
+        const signer = createAwsKmsSigner();
+
+        const message = {
+            content: new Uint8Array([1, 2, 3, 4, 5]),
+            signatures: {},
+        };
+
+        const result = await signer.signMessages([message]);
+
+        expect(result).toHaveLength(1);
+        expect(result[0]?.[signer.address]).toBeDefined();
+        expect(result[0]?.[signer.address]?.length).toBe(64);
+    });
+
+    it.skipIf(!hasRequiredEnvVars())('checks availability', async () => {
+        const signer = createAwsKmsSigner();
+        const available = await signer.isAvailable();
+        expect(available).toBe(true);
+    });
+});