@solana/keychain-gcp-kms 0.6.1 → 1.1.0

package/dist/__tests__/gcp-kms-signer.test.js

@@ -1,31 +1,66 @@
 import { address } from '@solana/addresses';
-import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
 import { assertIsSolanaSigner } from '@solana/keychain-core';
 import { GcpKmsSigner } from '../gcp-kms-signer.js';
 vi.mock('@solana/keychain-core', async (importOriginal) => {
     const mod = await importOriginal();
-    return { ...mod, assertSignatureValid: vi.fn() };
+    return {
+        ...mod,
+        assertSignatureValid: vi.fn(),
+        sanitizeRemoteErrorResponse: mod.sanitizeRemoteErrorResponse ??
+            ((text) => text
+                .replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, ' ')
+                .replace(/\s+/g, ' ')
+                .trim()
+                .slice(0, 256)),
+    };
 });
-// Mock GCP KMS SDK
-const mockAsymmetricSign = vi.fn();
-const mockGetPublicKey = vi.fn();
-vi.mock('@google-cloud/kms', () => {
+const mockGetRequestHeaders = vi.fn();
+const mockFetch = vi.fn();
+const originalFetch = globalThis.fetch;
+vi.mock('google-auth-library', () => {
     return {
-        v1: {
-            KeyManagementServiceClient: class {
-                constructor() {
-                    this.asymmetricSign = mockAsymmetricSign;
-                    this.getPublicKey = mockGetPublicKey;
-                }
-            },
+        GoogleAuth: class {
+            constructor() {
+                this.getRequestHeaders = mockGetRequestHeaders;
+            }
         },
     };
 });
+function createJsonResponse(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function getFetchCall(index) {
+    return mockFetch.mock.calls[index];
+}
+function assertAuthorizedRequest(url, method, callIndex = 0) {
+    const [calledUrl, init] = getFetchCall(callIndex);
+    expect(calledUrl).toBe(url);
+    expect(init.method).toBe(method);
+    const headers = new Headers(init.headers);
+    expect(headers.get('authorization')).toBe('Bearer test-token');
+    return init;
+}
 describe('GcpKmsSigner', () => {
     const TEST_KEY_NAME = 'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/1';
+    const TEST_KEY_NAME_WITH_LEADING_SLASH = `/${TEST_KEY_NAME}`;
     const TEST_PUBLIC_KEY = address('11111111111111111111111111111111');
+    const SIGN_ENDPOINT = `https://cloudkms.googleapis.com/v1/${TEST_KEY_NAME}:asymmetricSign`;
+    const PUBLIC_KEY_ENDPOINT = `https://cloudkms.googleapis.com/v1/${TEST_KEY_NAME}/publicKey`;
+    const TEST_SIGNATURE_BYTES = new Uint8Array(64).fill(0x42);
+    const TEST_SIGNATURE_BASE64 = Buffer.from(TEST_SIGNATURE_BYTES).toString('base64');
+    beforeAll(() => {
+        globalThis.fetch = mockFetch;
+    });
     beforeEach(() => {
         vi.clearAllMocks();
+        mockGetRequestHeaders.mockResolvedValue(new Headers({ authorization: 'Bearer test-token' }));
+    });
+    afterAll(() => {
+        globalThis.fetch = originalFetch;
     });
     describe('create', () => {
         it('creates a GcpKmsSigner with valid config', () => {
@@ -82,6 +117,33 @@ describe('GcpKmsSigner', () => {
                 });
             }).toThrow('Invalid Solana public key format');
         });
+        it('should throw error for invalid keyName format', () => {
+            const invalidKeyNames = [
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/1#',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/1?',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/%31',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key//cryptoKeyVersions/1',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key',
+            ];
+            for (const keyName of invalidKeyNames) {
+                expect(() => {
+                    new GcpKmsSigner({
+                        keyName,
+                        publicKey: TEST_PUBLIC_KEY,
+                    });
+                }).toThrow('Invalid GCP KMS keyName format');
+            }
+        });
+        it('should canonicalize leading slashes in keyName', async () => {
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME_WITH_LEADING_SLASH,
+                publicKey: TEST_PUBLIC_KEY,
+            });
+            await signer.signMessages([{ content: new Uint8Array([1, 2, 3]), signatures: {} }]);
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(SIGN_ENDPOINT);
+            assertAuthorizedRequest(SIGN_ENDPOINT, 'POST');
+        });
         it('should validate requestDelayMs', () => {
             expect(() => {
                 new GcpKmsSigner({
@@ -104,11 +166,7 @@ describe('GcpKmsSigner', () => {
     });
     describe('signMessages', () => {
         it('should sign a message successfully', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -120,18 +178,30 @@ describe('GcpKmsSigner', () => {
             const result = await signer.signMessages([message]);
             expect(result).toHaveLength(1);
             expect(result[0]?.[signer.address]).toBeDefined();
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(1);
-            expect(mockAsymmetricSign).toHaveBeenCalledWith({
-                data: message.content,
-                name: TEST_KEY_NAME,
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(SIGN_ENDPOINT);
+            expect(mockFetch).toHaveBeenCalledTimes(1);
+            const init = assertAuthorizedRequest(SIGN_ENDPOINT, 'POST');
+            const headers = new Headers(init.headers);
+            expect(headers.get('content-type')).toBe('application/json');
+            expect(init.body).toBe(JSON.stringify({
+                data: Buffer.from(message.content).toString('base64'),
+            }));
+        });
+        it('should build sign URL without fragments or queries for valid keyName', async () => {
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME,
+                publicKey: TEST_PUBLIC_KEY,
             });
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
+            await signer.signMessages([{ content: new Uint8Array([1, 2, 3, 4]), signatures: {} }]);
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(SIGN_ENDPOINT);
+            const [calledUrl] = getFetchCall(0);
+            expect(calledUrl).toBe(SIGN_ENDPOINT);
+            expect(calledUrl).not.toContain('#');
+            expect(calledUrl).not.toContain('?');
         });
         it('should handle multiple messages with delay', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockImplementation(() => Promise.resolve(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 })));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -146,16 +216,12 @@ describe('GcpKmsSigner', () => {
             const result = await signer.signMessages(messages);
             const endTime = Date.now();
             expect(result).toHaveLength(3);
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(3);
-            // Should have some delay (at least 15ms for 2 delays of 10ms each)
+            expect(mockFetch).toHaveBeenCalledTimes(3);
             expect(endTime - startTime).toBeGreaterThanOrEqual(15);
         });
         it('should throw error on invalid signature length', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(32), // Wrong length
-                },
-            ]);
+            const shortSignature = Buffer.from(new Uint8Array(32).fill(0x42)).toString('base64');
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: shortSignature }));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -164,7 +230,7 @@ describe('GcpKmsSigner', () => {
             await expect(signer.signMessages([message])).rejects.toThrow('Invalid signature length');
         });
         it('should throw error on missing signature', async () => {
-            mockAsymmetricSign.mockResolvedValue([{}]);
+            mockFetch.mockResolvedValue(createJsonResponse({}));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -173,24 +239,31 @@ describe('GcpKmsSigner', () => {
             await expect(signer.signMessages([message])).rejects.toThrow('No signature in GCP KMS response');
         });
         it('should handle GCP KMS API errors', async () => {
-            const apiError = new Error('GCP Error');
-            apiError.code = 403;
-            mockAsymmetricSign.mockRejectedValue(apiError);
+            mockFetch.mockResolvedValue(createJsonResponse({
+                error: {
+                    message: 'GCP Error',
+                },
+            }, 403));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
             });
             const message = { content: new Uint8Array([1, 2, 3, 4]), signatures: {} };
-            await expect(signer.signMessages([message])).rejects.toThrow('GCP KMS Sign operation failed: GCP Error');
+            await expect(signer.signMessages([message])).rejects.toThrow('GCP KMS API error: 403');
+        });
+        it('should handle network errors', async () => {
+            mockFetch.mockRejectedValue(new Error('Network error'));
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME,
+                publicKey: TEST_PUBLIC_KEY,
+            });
+            const message = { content: new Uint8Array([1, 2, 3, 4]), signatures: {} };
+            await expect(signer.signMessages([message])).rejects.toThrow('GCP KMS network request failed');
         });
     });
     describe('signTransactions', () => {
         it('should sign a transaction successfully', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -202,14 +275,11 @@ describe('GcpKmsSigner', () => {
             const result = await signer.signTransactions([transaction]);
             expect(result).toHaveLength(1);
             expect(result[0]).toHaveProperty(signer.address);
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(1);
+            expect(mockFetch).toHaveBeenCalledTimes(1);
+            assertAuthorizedRequest(SIGN_ENDPOINT, 'POST');
         });
         it('should sign multiple transactions successfully', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockImplementation(() => Promise.resolve(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 })));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -220,14 +290,11 @@ describe('GcpKmsSigner', () => {
             ];
             const result = await signer.signTransactions(transactions);
             expect(result).toHaveLength(2);
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(2);
+            expect(mockFetch).toHaveBeenCalledTimes(2);
         });
         it('should throw error on invalid signature length', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(32),
-                },
-            ]);
+            const shortSignature = Buffer.from(new Uint8Array(32).fill(0x42)).toString('base64');
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: shortSignature }));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -236,7 +303,7 @@ describe('GcpKmsSigner', () => {
             await expect(signer.signTransactions([transaction])).rejects.toThrow('Invalid signature length');
         });
         it('should throw error on missing signature', async () => {
-            mockAsymmetricSign.mockResolvedValue([{}]);
+            mockFetch.mockResolvedValue(createJsonResponse({}));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -245,39 +312,44 @@ describe('GcpKmsSigner', () => {
             await expect(signer.signTransactions([transaction])).rejects.toThrow('No signature in GCP KMS response');
         });
         it('should handle GCP KMS API errors', async () => {
-            const apiError = new Error('GCP Error');
-            apiError.code = 403;
-            mockAsymmetricSign.mockRejectedValue(apiError);
+            mockFetch.mockResolvedValue(createJsonResponse({
+                error: {
+                    message: 'GCP Error',
+                },
+            }, 403));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
             });
             const transaction = { messageBytes: new Uint8Array([1, 2, 3, 4]), signatures: {} };
-            await expect(signer.signTransactions([transaction])).rejects.toThrow('GCP KMS Sign operation failed: GCP Error');
+            await expect(signer.signTransactions([transaction])).rejects.toThrow('GCP KMS API error: 403');
         });
     });
     describe('isAvailable', () => {
         it('should return true for valid Ed25519 key', async () => {
-            mockGetPublicKey.mockResolvedValue([
-                {
-                    name: TEST_KEY_NAME,
-                    algorithm: 'EC_SIGN_ED25519',
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ algorithm: 'EC_SIGN_ED25519' }));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
             });
             const available = await signer.isAvailable();
             expect(available).toBe(true);
+            expect(mockFetch).toHaveBeenCalledTimes(1);
+            assertAuthorizedRequest(PUBLIC_KEY_ENDPOINT, 'GET');
+        });
+        it('should use canonical public key endpoint for valid key names', async () => {
+            mockFetch.mockResolvedValue(createJsonResponse({ algorithm: 'EC_SIGN_ED25519' }));
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME_WITH_LEADING_SLASH,
+                publicKey: TEST_PUBLIC_KEY,
+            });
+            const available = await signer.isAvailable();
+            expect(available).toBe(true);
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(PUBLIC_KEY_ENDPOINT);
+            assertAuthorizedRequest(PUBLIC_KEY_ENDPOINT, 'GET');
         });
         it('should return false for wrong algorithm', async () => {
-            mockGetPublicKey.mockResolvedValue([
-                {
-                    name: TEST_KEY_NAME,
-                    algorithm: 'RSA_SIGN_PKCS1_2048_SHA256',
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ algorithm: 'RSA_SIGN_PKCS1_2048_SHA256' }));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -286,7 +358,7 @@ describe('GcpKmsSigner', () => {
             expect(available).toBe(false);
         });
         it('should return false for missing public key response', async () => {
-            mockGetPublicKey.mockResolvedValue([undefined]);
+            mockFetch.mockResolvedValue(createJsonResponse({}));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,
@@ -294,8 +366,12 @@ describe('GcpKmsSigner', () => {
             const available = await signer.isAvailable();
             expect(available).toBe(false);
         });
-        it('should return false on error', async () => {
-            mockGetPublicKey.mockRejectedValue(new Error('GCP error'));
+        it('should return false on API error', async () => {
+            mockFetch.mockResolvedValue(createJsonResponse({
+                error: {
+                    message: 'Forbidden',
+                },
+            }, 403));
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
                 publicKey: TEST_PUBLIC_KEY,

package/dist/__tests__/gcp-kms-signer.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-kms-signer.test.js","sourceRoot":"","sources":["../../src/__tests__/gcp-kms-signer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAC,cAAc,EAAC,EAAE;IACpD,MAAM,GAAG,GAAG,MAAM,cAAc,EAA0C,CAAC;IAC3E,OAAO,EAAE,GAAG,GAAG,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,mBAAmB;AACnB,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACnC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAEjC,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC9B,OAAO;QACH,EAAE,EAAE;YACA,0BAA0B,EAAE;gBAAA;oBACxB,mBAAc,GAAG,kBAAkB,CAAC;oBACpC,iBAAY,GAAG,gBAAgB,CAAC;gBACpC,CAAC;aAAA;SACJ;KACJ,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,MAAM,aAAa,GACf,qGAAqG,CAAC;IAC1G,MAAM,eAAe,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAEpE,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;gBAC/B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7C,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,EAAE;gBACR,YAAY,CAAC,MAAM,CAAC;oBAChB,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,eAAe;iBAC7B,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAuB;gBAC/B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7C,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,eAAe;iBAC7B,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,EAAE;iBAChB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,aAAa;iBAC3B,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACtC,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,eAAe;oBAC1B,cAAc,EAAE,CAAC,CAAC;iBACrB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAEvE,IAAI,YAAY,CAAC;gBACb,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;gBAC1B,cAAc,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAEvG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAChD,kBAAkB,CAAC,iBAAiB,CAAC;gBACjC;oBACI,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC3C;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG;gBACZ,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,UAAU,EAAE,EAAE;aACjB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC;gBAC5C,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,IAAI,EAAE,aAAa;aACtB,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YACxD,kBAAkB,CAAC,iBAAiB,CAAC;gBACjC;oBACI,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC3C;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;gBAC1B,cAAc,EAAE,EAAE;aACrB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACb,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;gBAChD,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;gBAChD,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;aAC5C,CAAC;YAET,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE3B,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACpD,mEAAmE;YACnE,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,kBAAkB,CAAC,iBAAiB,CAAC;gBACjC;oBACI,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,eAAe;iBACjD;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACrD,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE3C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YACvC,QAAgB,CAAC,IAAI,GAAG,GAAG,CAAC;YAC7B,kBAAkB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;QAC7G,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACpD,kBAAkB,CAAC,iBAAiB,CAAC;gBACjC;oBACI,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC3C;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG;gBAChB,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1C,UAAU,EAAE,EAAE;aACV,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAE5D,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,kBAAkB,CAAC,iBAAiB,CAAC;gBACjC;oBACI,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC3C;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG;gBACjB,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;gBACrD,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;aACjD,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,kBAAkB,CAAC,iBAAiB,CAAC;gBACjC;oBACI,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;iBAChC;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAS,CAAC;YAE1F,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACrD,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE3C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAS,CAAC;YAE1F,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC7G,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YACvC,QAAgB,CAAC,IAAI,GAAG,GAAG,CAAC;YAC7B,kBAAkB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAS,CAAC;YAE1F,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAChE,0CAA0C,CAC7C,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACtD,gBAAgB,CAAC,iBAAiB,CAAC;gBAC/B;oBACI,IAAI,EAAE,aAAa;oBACnB,SAAS,EAAE,iBAAiB;iBAC/B;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACrD,gBAAgB,CAAC,iBAAiB,CAAC;gBAC/B;oBACI,IAAI,EAAE,aAAa;oBACnB,SAAS,EAAE,4BAA4B;iBAC1C;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACjE,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC1C,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
+{"version":3,"file":"gcp-kms-signer.test.js","sourceRoot":"","sources":["../../src/__tests__/gcp-kms-signer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAC,cAAc,EAAC,EAAE;IACpD,MAAM,GAAG,GAAG,MAAM,cAAc,EAA0C,CAAC;IAC3E,OAAO;QACH,GAAG,GAAG;QACN,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC7B,2BAA2B,EACvB,GAAG,CAAC,2BAA2B;YAC/B,CAAC,CAAC,IAAY,EAAE,EAAE,CACd,IAAI;iBACC,OAAO,CAAC,iDAAiD,EAAE,GAAG,CAAC;iBAC/D,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,IAAI,EAAE;iBACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;KAC9B,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACtC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;AAEvC,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE;IAChC,OAAO;QACH,UAAU,EAAE;YAAA;gBACR,sBAAiB,GAAG,qBAAqB,CAAC;YAC9C,CAAC;SAAA;KACJ,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACtC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAClD,CAAC,CAAC;AACP,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAC/B,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAA0B,CAAC;AAChE,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAS,GAAG,CAAC;IACvE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,MAAM,aAAa,GACf,qGAAqG,CAAC;IAC1G,MAAM,gCAAgC,GAAG,IAAI,aAAa,EAAE,CAAC;IAC7D,MAAM,eAAe,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,sCAAsC,aAAa,iBAAiB,CAAC;IAC3F,MAAM,mBAAmB,GAAG,sCAAsC,aAAa,YAAY,CAAC;IAC5F,MAAM,oBAAoB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEnF,SAAS,CAAC,GAAG,EAAE;QACX,UAAU,CAAC,KAAK,GAAG,SAAoC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACV,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;gBAC/B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7C,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,EAAE;gBACR,YAAY,CAAC,MAAM,CAAC;oBAChB,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,eAAe;iBAC7B,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAuB;gBAC/B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7C,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,eAAe;iBAC7B,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,EAAE;iBAChB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,aAAa;iBAC3B,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACrD,MAAM,eAAe,GAAG;gBACpB,sGAAsG;gBACtG,sGAAsG;gBACtG,uGAAuG;gBACvG,sGAAsG;gBACtG,iFAAiF;aACpF,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,EAAE;oBACR,IAAI,YAAY,CAAC;wBACb,OAAO;wBACP,SAAS,EAAE,eAAe;qBAC7B,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACjD,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;YAEtF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,gCAAgC;gBACzC,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAEpF,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAClE,uBAAuB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACtC,MAAM,CAAC,GAAG,EAAE;gBACR,IAAI,YAAY,CAAC;oBACb,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,eAAe;oBAC1B,cAAc,EAAE,CAAC,CAAC;iBACrB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAEvE,IAAI,YAAY,CAAC;gBACb,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;gBAC1B,cAAc,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAEvG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAChD,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;YAEtF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG;gBACZ,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,UAAU,EAAE,EAAE;aACjB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAClE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,uBAAuB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,IAAI,CAAC,SAAS,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACxD,CAAC,CACL,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;YAEtF,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAEvF,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAClE,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YACxD,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAC9B,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAC5E,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;gBAC1B,cAAc,EAAE,EAAE;aACrB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACb,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;gBAChD,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;gBAChD,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;aAC5C,CAAC;YAET,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE3B,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrF,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YAE/E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACrD,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAC9C,SAAS,CAAC,iBAAiB,CACvB,kBAAkB,CACd;gBACI,KAAK,EAAE;oBACH,OAAO,EAAE,WAAW;iBACvB;aACJ,EACD,GAAG,CACN,CACJ,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC1C,SAAS,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAE1E,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACpD,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;YAEtF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG;gBAChB,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1C,UAAU,EAAE,EAAE;aACV,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAE5D,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAE3C,uBAAuB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAC9B,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAC5E,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG;gBACjB,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;gBACrD,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;aACjD,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrF,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YAE/E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAS,CAAC;YAE1F,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACrD,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAS,CAAC;YAE1F,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC7G,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAC9C,SAAS,CAAC,iBAAiB,CACvB,kBAAkB,CACd;gBACI,KAAK,EAAE;oBACH,OAAO,EAAE,WAAW;iBACvB;aACJ,EACD,GAAG,CACN,CACJ,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAS,CAAC;YAE1F,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACtD,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;YAElF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC3C,uBAAuB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC1E,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;YAElF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,gCAAgC;gBACzC,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;YACxE,uBAAuB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACrD,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;YAE7F,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACjE,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAC9C,SAAS,CAAC,iBAAiB,CACvB,kBAAkB,CACd;gBACI,KAAK,EAAE;oBACH,OAAO,EAAE,WAAW;iBACvB;aACJ,EACD,GAAG,CACN,CACJ,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;gBAC5B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/gcp-kms-signer.d.ts

@@ -25,12 +25,17 @@ export declare function createGcpKmsSigner<TAddress extends string = string>(con
 export declare class GcpKmsSigner<TAddress extends string = string> implements SolanaSigner<TAddress> {
     readonly address: Address<TAddress>;
     private readonly keyName;
-    private readonly client;
+    private readonly keyNamePathSegments;
+    private readonly auth;
     private readonly requestDelayMs;
     /** @deprecated Use `createGcpKmsSigner()` instead. */
     static create<TAddress extends string = string>(config: GcpKmsSignerConfig): GcpKmsSigner<TAddress>;
     /** @deprecated Use `createGcpKmsSigner()` instead. Direct construction will be removed in a future version. */
     constructor(config: GcpKmsSignerConfig);
+    private normalizeKeyName;
+    private buildResourceUrl;
+    private authorizedFetch;
+    private request;
     /**
      * Validate request delay ms
      */

package/dist/gcp-kms-signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-kms-signer.d.ts","sourceRoot":"","sources":["../src/gcp-kms-signer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAmB,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAIH,YAAY,EAEf,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAExG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,wBAAgB,kBAAkB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EAC/D,MAAM,EAAE,kBAAkB,GAC3B,YAAY,CAAC,QAAQ,CAAC,CAExB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,YAAY,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,CAAE,YAAW,YAAY,CAAC,QAAQ,CAAC;IACzF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAExC,sDAAsD;IACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAAC,QAAQ,CAAC;IAInG,+GAA+G;gBACnG,MAAM,EAAE,kBAAkB;IA6BtC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;YACW,KAAK;IAMnB;;OAEG;YACW,SAAS;IA4CvB;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAsBjG;;OAEG;IACG,gBAAgB,CAClB,YAAY,EAAE,SAAS,CAAC,WAAW,GAAG,0BAA0B,GAAG,uBAAuB,CAAC,EAAE,GAC9F,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAoB1C;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAgBxC"}
+{"version":3,"file":"gcp-kms-signer.d.ts","sourceRoot":"","sources":["../src/gcp-kms-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmB,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAKH,YAAY,EAEf,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAGxG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAoBrD,wBAAgB,kBAAkB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EAC/D,MAAM,EAAE,kBAAkB,GAC3B,YAAY,CAAC,QAAQ,CAAC,CAExB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,YAAY,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,CAAE,YAAW,YAAY,CAAC,QAAQ,CAAC;IACzF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoB;IACxD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAExC,sDAAsD;IACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAAC,QAAQ,CAAC;IAInG,+GAA+G;gBACnG,MAAM,EAAE,kBAAkB;IA8BtC,OAAO,CAAC,gBAAgB;IAkBxB,OAAO,CAAC,gBAAgB;YAOV,eAAe;YAef,OAAO;IAkCrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;YACW,KAAK;IAMnB;;OAEG;YACW,SAAS;IAoCvB;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAsBjG;;OAEG;IACG,gBAAgB,CAClB,YAAY,EAAE,SAAS,CAAC,WAAW,GAAG,0BAA0B,GAAG,uBAAuB,CAAC,EAAE,GAC9F,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAoB1C;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAgBxC"}

package/dist/gcp-kms-signer.js

@@ -1,6 +1,15 @@
-import { v1 } from '@google-cloud/kms';
 import { assertIsAddress } from '@solana/addresses';
-import { assertSignatureValid, createSignatureDictionary, SignerErrorCode, throwSignerError, } from '@solana/keychain-core';
+import { assertSignatureValid, createSignatureDictionary, sanitizeRemoteErrorResponse, SignerErrorCode, throwSignerError, } from '@solana/keychain-core';
+import { GoogleAuth } from 'google-auth-library';
+/**
+ * Create a Google Cloud KMS-backed signer.
+ *
+ * @throws {SignerError} `SIGNER_CONFIG_ERROR` when required config is missing or invalid.
+ */
+const CLOUD_KMS_BASE_URL = 'https://cloudkms.googleapis.com/v1';
+const CLOUD_KMS_SCOPE = 'https://www.googleapis.com/auth/cloud-platform';
+const ED25519_SIGNATURE_LENGTH = 64;
+const GCP_KMS_KEY_NAME_PATTERN = /^projects\/[A-Za-z0-9._-]+\/locations\/[A-Za-z0-9._-]+\/keyRings\/[A-Za-z0-9._-]+\/cryptoKeys\/[A-Za-z0-9._-]+\/cryptoKeyVersions\/[A-Za-z0-9._-]+$/;
 export function createGcpKmsSigner(config) {
     return GcpKmsSigner.create(config);
 }
@@ -49,10 +58,74 @@ export class GcpKmsSigner {
                 message: 'Invalid Solana public key format',
             });
         }
-        this.keyName = config.keyName;
+        this.keyName = this.normalizeKeyName(config.keyName);
+        this.keyNamePathSegments = this.keyName.split('/');
         this.requestDelayMs = config.requestDelayMs || 0;
         this.validateRequestDelayMs(this.requestDelayMs);
-        this.client = new v1.KeyManagementServiceClient();
+        this.auth = new GoogleAuth({ scopes: [CLOUD_KMS_SCOPE] });
+    }
+    normalizeKeyName(keyName) {
+        const canonicalKeyName = keyName.replace(/^\/+/, '');
+        if (/\/{2,}/.test(canonicalKeyName) || /[#?%]/.test(canonicalKeyName)) {
+            throwSignerError(SignerErrorCode.CONFIG_ERROR, {
+                message: 'Invalid GCP KMS keyName format',
+            });
+        }
+        if (!GCP_KMS_KEY_NAME_PATTERN.test(canonicalKeyName)) {
+            throwSignerError(SignerErrorCode.CONFIG_ERROR, {
+                message: 'Invalid GCP KMS keyName format',
+            });
+        }
+        return canonicalKeyName;
+    }
+    buildResourceUrl(suffix) {
+        const url = new URL(`${CLOUD_KMS_BASE_URL}/`);
+        const basePathSegments = url.pathname.split('/').filter(Boolean);
+        url.pathname = `/${[...basePathSegments, ...this.keyNamePathSegments].join('/')}${suffix}`;
+        return url.toString();
+    }
+    async authorizedFetch(url, init) {
+        const authHeaders = await this.auth.getRequestHeaders(url);
+        const headers = new Headers(init.headers);
+        authHeaders.forEach((value, key) => {
+            headers.set(key, value);
+        });
+        if (init.body && !headers.has('content-type')) {
+            headers.set('content-type', 'application/json');
+        }
+        return await fetch(url, { ...init, headers });
+    }
+    async request(url, init) {
+        let response;
+        try {
+            response = await this.authorizedFetch(url, init);
+        }
+        catch (error) {
+            throwSignerError(SignerErrorCode.HTTP_ERROR, {
+                cause: error,
+                message: 'GCP KMS network request failed',
+                url,
+            });
+        }
+        if (!response.ok) {
+            const errorText = await response.text().catch(() => 'Failed to read error response');
+            throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
+                message: `GCP KMS API error: ${response.status}`,
+                response: sanitizeRemoteErrorResponse(errorText),
+                status: response.status,
+            });
+        }
+        let payload;
+        try {
+            payload = (await response.json());
+        }
+        catch (error) {
+            throwSignerError(SignerErrorCode.PARSING_ERROR, {
+                cause: error,
+                message: 'Failed to parse GCP KMS response',
+            });
+        }
+        return payload;
     }
     /**
      * Validate request delay ms
@@ -80,10 +153,11 @@ export class GcpKmsSigner {
      */
     async signBytes(messageBytes) {
         try {
-            // GCP KMS AsymmetricSign expects the raw message for Ed25519 (PureEdDSA)
-            const [response] = await this.client.asymmetricSign({
-                data: messageBytes,
-                name: this.keyName,
+            const response = await this.request(this.buildResourceUrl(':asymmetricSign'), {
+                body: JSON.stringify({
+                    data: Buffer.from(messageBytes).toString('base64'),
+                }),
+                method: 'POST',
             });
             if (!response.signature) {
                 throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
@@ -91,29 +165,20 @@ export class GcpKmsSigner {
                 });
             }
             // Ed25519 signatures are 64 bytes
-            const signature = response.signature;
-            if (signature.length !== 64) {
+            const signature = new Uint8Array(Buffer.from(response.signature, 'base64'));
+            if (signature.length !== ED25519_SIGNATURE_LENGTH) {
                 throwSignerError(SignerErrorCode.SIGNING_FAILED, {
-                    message: `Invalid signature length: expected 64 bytes, got ${signature.length}`,
+                    message: `Invalid signature length: expected ${ED25519_SIGNATURE_LENGTH} bytes, got ${signature.length}`,
                 });
             }
             return signature;
         }
         catch (error) {
-            // Re-throw SignerError as-is
+            // Re-throw SignerError as-is (from request())
             if (error instanceof Error && error.name === 'SignerError') {
                 throw error;
             }
-            if (error instanceof Error) {
-                // GCP SDK errors
-                const gcpError = error;
-                throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
-                    cause: error,
-                    message: `GCP KMS Sign operation failed: ${gcpError.message || error.message}`,
-                    status: gcpError.code,
-                });
-            }
-            throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
+            throwSignerError(SignerErrorCode.SIGNING_FAILED, {
                 cause: error,
                 message: 'GCP KMS Sign operation failed',
             });
@@ -165,8 +230,8 @@ export class GcpKmsSigner {
      */
     async isAvailable() {
         try {
-            const [publicKey] = await this.client.getPublicKey({
-                name: this.keyName,
+            const publicKey = await this.request(this.buildResourceUrl('/publicKey'), {
+                method: 'GET',
             });
             if (!publicKey) {
                 return false;

package/dist/gcp-kms-signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-kms-signer.js","sourceRoot":"","sources":["../src/gcp-kms-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAW,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EACH,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EAEf,gBAAgB,GACnB,MAAM,uBAAuB,CAAC;AAO/B,MAAM,UAAU,kBAAkB,CAC9B,MAA0B;IAE1B,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,YAAY;IAMrB,sDAAsD;IACtD,MAAM,CAAC,MAAM,CAAmC,MAA0B;QACtE,OAAO,IAAI,YAAY,CAAW,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,+GAA+G;IAC/G,YAAY,MAA0B;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,gCAAgC;aAC5C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACpB,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,kCAAkC;aAC9C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,SAA8B,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,kCAAkC;aAC9C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,0BAA0B,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,cAAsB;QACjD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACrB,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,qCAAqC;aACjD,CAAC,CAAC;QACP,CAAC;QACD,IAAI,cAAc,GAAG,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CACR,yHAAyH,CAC5H,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,KAAa;QAC7B,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACnF,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,YAAwB;QAC5C,IAAI,CAAC;YACD,yEAAyE;YACzE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAChD,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,IAAI,CAAC,OAAO;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACtB,gBAAgB,CAAC,eAAe,CAAC,gBAAgB,EAAE;oBAC/C,OAAO,EAAE,kCAAkC;iBAC9C,CAAC,CAAC;YACP,CAAC;YAED,kCAAkC;YAClC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAuB,CAAC;YACnD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC1B,gBAAgB,CAAC,eAAe,CAAC,cAAc,EAAE;oBAC7C,OAAO,EAAE,oDAAoD,SAAS,CAAC,MAAM,EAAE;iBAClF,CAAC,CAAC;YACP,CAAC;YAED,OAAO,SAA2B,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACtB,6BAA6B;YAC7B,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACzD,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBACzB,iBAAiB;gBACjB,MAAM,QAAQ,GAAG,KAA4C,CAAC;gBAC9D,gBAAgB,CAAC,eAAe,CAAC,gBAAgB,EAAE;oBAC/C,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE,kCAAkC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;oBAC9E,MAAM,EAAE,QAAQ,CAAC,IAAI;iBACxB,CAAC,CAAC;YACP,CAAC;YACD,gBAAgB,CAAC,eAAe,CAAC,gBAAgB,EAAE;gBAC/C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,+BAA+B;aAC3C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAoC;QACnD,OAAO,MAAM,OAAO,CAAC,GAAG,CACpB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,YAAY,GACd,OAAO,CAAC,OAAO,YAAY,UAAU;gBACjC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,oBAAoB,CAAC;gBACvB,IAAI,EAAE,YAAY;gBAClB,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO,yBAAyB,CAAC;gBAC7B,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;QACP,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAClB,YAA6F;QAE7F,OAAO,MAAM,OAAO,CAAC,GAAG,CACpB,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,qCAAqC;YACrC,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC5D,MAAM,oBAAoB,CAAC;gBACvB,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO,yBAAyB,CAAC;gBAC7B,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;QACP,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACb,IAAI,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC/C,IAAI,EAAE,IAAI,CAAC,OAAO;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,0CAA0C;YAC1C,OAAO,SAAS,CAAC,SAAS,KAAK,iBAAiB,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;CACJ"}
+{"version":3,"file":"gcp-kms-signer.js","sourceRoot":"","sources":["../src/gcp-kms-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EACH,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,eAAe,EAEf,gBAAgB,GACnB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIjD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAChE,MAAM,eAAe,GAAG,gDAAgD,CAAC;AACzE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,wBAAwB,GAC1B,qJAAqJ,CAAC;AAS1J,MAAM,UAAU,kBAAkB,CAC9B,MAA0B;IAE1B,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,YAAY;IAOrB,sDAAsD;IACtD,MAAM,CAAC,MAAM,CAAmC,MAA0B;QACtE,OAAO,IAAI,YAAY,CAAW,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,+GAA+G;IAC/G,YAAY,MAA0B;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,gCAAgC;aAC5C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACpB,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,kCAAkC;aAC9C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,SAA8B,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,kCAAkC;aAC9C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAEO,gBAAgB,CAAC,OAAe;QACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpE,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,gCAAgC;aAC5C,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnD,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,gCAAgC;aAC5C,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAEO,gBAAgB,CAAC,MAAwC;QAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,kBAAkB,GAAG,CAAC,CAAC;QAC9C,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;QAC3F,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,IAAiB;QACxD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE1C,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAY,GAAW,EAAE,IAAiB;QAC3D,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACD,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,gBAAgB,CAAC,eAAe,CAAC,UAAU,EAAE;gBACzC,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,gCAAgC;gBACzC,GAAG;aACN,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,CAAC;YACrF,gBAAgB,CAAC,eAAe,CAAC,gBAAgB,EAAE;gBAC/C,OAAO,EAAE,sBAAsB,QAAQ,CAAC,MAAM,EAAE;gBAChD,QAAQ,EAAE,2BAA2B,CAAC,SAAS,CAAC;gBAChD,MAAM,EAAE,QAAQ,CAAC,MAAM;aAC1B,CAAC,CAAC;QACP,CAAC;QAED,IAAI,OAAkB,CAAC;QACvB,IAAI,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,gBAAgB,CAAC,eAAe,CAAC,aAAa,EAAE;gBAC5C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,kCAAkC;aAC9C,CAAC,CAAC;QACP,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,cAAsB;QACjD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACrB,gBAAgB,CAAC,eAAe,CAAC,YAAY,EAAE;gBAC3C,OAAO,EAAE,qCAAqC;aACjD,CAAC,CAAC;QACP,CAAC;QACD,IAAI,cAAc,GAAG,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CACR,yHAAyH,CAC5H,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,KAAa;QAC7B,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACnF,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,YAAwB;QAC5C,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAyB,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE;gBAClG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACrD,CAAC;gBACF,MAAM,EAAE,MAAM;aACjB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACtB,gBAAgB,CAAC,eAAe,CAAC,gBAAgB,EAAE;oBAC/C,OAAO,EAAE,kCAAkC;iBAC9C,CAAC,CAAC;YACP,CAAC;YAED,kCAAkC;YAClC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5E,IAAI,SAAS,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;gBAChD,gBAAgB,CAAC,eAAe,CAAC,cAAc,EAAE;oBAC7C,OAAO,EAAE,sCAAsC,wBAAwB,eAAe,SAAS,CAAC,MAAM,EAAE;iBAC3G,CAAC,CAAC;YACP,CAAC;YAED,OAAO,SAA2B,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACtB,8CAA8C;YAC9C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACzD,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,gBAAgB,CAAC,eAAe,CAAC,cAAc,EAAE;gBAC7C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,+BAA+B;aAC3C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAoC;QACnD,OAAO,MAAM,OAAO,CAAC,GAAG,CACpB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,YAAY,GACd,OAAO,CAAC,OAAO,YAAY,UAAU;gBACjC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,oBAAoB,CAAC;gBACvB,IAAI,EAAE,YAAY;gBAClB,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO,yBAAyB,CAAC;gBAC7B,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;QACP,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAClB,YAA6F;QAE7F,OAAO,MAAM,OAAO,CAAC,GAAG,CACpB,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,qCAAqC;YACrC,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC5D,MAAM,oBAAoB,CAAC;gBACvB,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO,yBAAyB,CAAC;gBAC7B,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;aAC9B,CAAC,CAAC;QACP,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACb,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAoB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE;gBACzF,MAAM,EAAE,KAAK;aAChB,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,0CAA0C;YAC1C,OAAO,SAAS,CAAC,SAAS,KAAK,iBAAiB,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;CACJ"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@solana/keychain-gcp-kms",
   "author": "Solana Foundation",
-  "version": "0.6.1",
+  "version": "1.1.0",
   "description": "Google Cloud KMS-based signer for Solana transactions using EdDSA (Ed25519)",
   "license": "MIT",
   "repository": "https://github.com/solana-foundation/solana-keychain",
@@ -29,8 +29,8 @@
     "src"
   ],
   "dependencies": {
-    "@google-cloud/kms": "^5.2.1",
-    "@solana/keychain-core": "0.6.1"
+    "google-auth-library": "^10.6.2",
+    "@solana/keychain-core": "1.1.0"
   },
   "peerDependencies": {
     "@solana/addresses": ">=6.0.1",
@@ -46,7 +46,7 @@
     "@solana-program/memo": "^0.11.0",
     "@solana/kit": "^6.0.1",
     "dotenv": "^17.2.3",
-    "@solana/keychain-test-utils": "0.6.1"
+    "@solana/keychain-test-utils": "1.1.0"
   },
   "publishConfig": {
     "access": "public"

package/src/__tests__/gcp-kms-signer.test.ts

@@ -1,5 +1,5 @@
 import { address } from '@solana/addresses';
-import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
 import { assertIsSolanaSigner } from '@solana/keychain-core';
 
 import { GcpKmsSigner } from '../gcp-kms-signer.js';
@@ -7,31 +7,75 @@ import type { GcpKmsSignerConfig } from '../types.js';
 
 vi.mock('@solana/keychain-core', async importOriginal => {
     const mod = await importOriginal<typeof import('@solana/keychain-core')>();
-    return { ...mod, assertSignatureValid: vi.fn() };
+    return {
+        ...mod,
+        assertSignatureValid: vi.fn(),
+        sanitizeRemoteErrorResponse:
+            mod.sanitizeRemoteErrorResponse ??
+            ((text: string) =>
+                text
+                    .replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, ' ')
+                    .replace(/\s+/g, ' ')
+                    .trim()
+                    .slice(0, 256)),
+    };
 });
 
-// Mock GCP KMS SDK
-const mockAsymmetricSign = vi.fn();
-const mockGetPublicKey = vi.fn();
+const mockGetRequestHeaders = vi.fn();
+const mockFetch = vi.fn();
+const originalFetch = globalThis.fetch;
 
-vi.mock('@google-cloud/kms', () => {
+vi.mock('google-auth-library', () => {
     return {
-        v1: {
-            KeyManagementServiceClient: class {
-                asymmetricSign = mockAsymmetricSign;
-                getPublicKey = mockGetPublicKey;
-            },
+        GoogleAuth: class {
+            getRequestHeaders = mockGetRequestHeaders;
         },
     };
 });
 
+function createJsonResponse(body: unknown, status = 200): Response {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+
+function getFetchCall(index: number): [string, RequestInit] {
+    return mockFetch.mock.calls[index] as [string, RequestInit];
+}
+
+function assertAuthorizedRequest(url: string, method: string, callIndex = 0): RequestInit {
+    const [calledUrl, init] = getFetchCall(callIndex);
+    expect(calledUrl).toBe(url);
+    expect(init.method).toBe(method);
+
+    const headers = new Headers(init.headers);
+    expect(headers.get('authorization')).toBe('Bearer test-token');
+    return init;
+}
+
 describe('GcpKmsSigner', () => {
     const TEST_KEY_NAME =
         'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/1';
+    const TEST_KEY_NAME_WITH_LEADING_SLASH = `/${TEST_KEY_NAME}`;
     const TEST_PUBLIC_KEY = address('11111111111111111111111111111111');
+    const SIGN_ENDPOINT = `https://cloudkms.googleapis.com/v1/${TEST_KEY_NAME}:asymmetricSign`;
+    const PUBLIC_KEY_ENDPOINT = `https://cloudkms.googleapis.com/v1/${TEST_KEY_NAME}/publicKey`;
+    const TEST_SIGNATURE_BYTES = new Uint8Array(64).fill(0x42);
+    const TEST_SIGNATURE_BASE64 = Buffer.from(TEST_SIGNATURE_BYTES).toString('base64');
+
+    beforeAll(() => {
+        globalThis.fetch = mockFetch as unknown as typeof fetch;
+    });
 
     beforeEach(() => {
         vi.clearAllMocks();
+
+        mockGetRequestHeaders.mockResolvedValue(new Headers({ authorization: 'Bearer test-token' }));
+    });
+
+    afterAll(() => {
+        globalThis.fetch = originalFetch;
     });
 
     describe('create', () => {
@@ -88,6 +132,7 @@ describe('GcpKmsSigner', () => {
                 });
             }).toThrow('Missing required publicKey field');
         });
+
         it('should throw error for invalid public key', () => {
             expect(() => {
                 new GcpKmsSigner({
@@ -97,6 +142,39 @@ describe('GcpKmsSigner', () => {
             }).toThrow('Invalid Solana public key format');
         });
 
+        it('should throw error for invalid keyName format', () => {
+            const invalidKeyNames = [
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/1#',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/1?',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key/cryptoKeyVersions/%31',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key//cryptoKeyVersions/1',
+                'projects/test-project/locations/us-east1/keyRings/test-ring/cryptoKeys/test-key',
+            ];
+
+            for (const keyName of invalidKeyNames) {
+                expect(() => {
+                    new GcpKmsSigner({
+                        keyName,
+                        publicKey: TEST_PUBLIC_KEY,
+                    });
+                }).toThrow('Invalid GCP KMS keyName format');
+            }
+        });
+
+        it('should canonicalize leading slashes in keyName', async () => {
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
+
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME_WITH_LEADING_SLASH,
+                publicKey: TEST_PUBLIC_KEY,
+            });
+
+            await signer.signMessages([{ content: new Uint8Array([1, 2, 3]), signatures: {} }]);
+
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(SIGN_ENDPOINT);
+            assertAuthorizedRequest(SIGN_ENDPOINT, 'POST');
+        });
+
         it('should validate requestDelayMs', () => {
             expect(() => {
                 new GcpKmsSigner({
@@ -124,11 +202,7 @@ describe('GcpKmsSigner', () => {
 
     describe('signMessages', () => {
         it('should sign a message successfully', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -143,19 +217,40 @@ describe('GcpKmsSigner', () => {
 
             expect(result).toHaveLength(1);
             expect(result[0]?.[signer.address]).toBeDefined();
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(1);
-            expect(mockAsymmetricSign).toHaveBeenCalledWith({
-                data: message.content,
-                name: TEST_KEY_NAME,
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(SIGN_ENDPOINT);
+            expect(mockFetch).toHaveBeenCalledTimes(1);
+
+            const init = assertAuthorizedRequest(SIGN_ENDPOINT, 'POST');
+            const headers = new Headers(init.headers);
+            expect(headers.get('content-type')).toBe('application/json');
+            expect(init.body).toBe(
+                JSON.stringify({
+                    data: Buffer.from(message.content).toString('base64'),
+                }),
+            );
+        });
+
+        it('should build sign URL without fragments or queries for valid keyName', async () => {
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME,
+                publicKey: TEST_PUBLIC_KEY,
             });
+
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
+
+            await signer.signMessages([{ content: new Uint8Array([1, 2, 3, 4]), signatures: {} }]);
+
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(SIGN_ENDPOINT);
+            const [calledUrl] = getFetchCall(0);
+            expect(calledUrl).toBe(SIGN_ENDPOINT);
+            expect(calledUrl).not.toContain('#');
+            expect(calledUrl).not.toContain('?');
         });
 
         it('should handle multiple messages with delay', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockImplementation(() =>
+                Promise.resolve(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 })),
+            );
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -174,17 +269,13 @@ describe('GcpKmsSigner', () => {
             const endTime = Date.now();
 
             expect(result).toHaveLength(3);
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(3);
-            // Should have some delay (at least 15ms for 2 delays of 10ms each)
+            expect(mockFetch).toHaveBeenCalledTimes(3);
             expect(endTime - startTime).toBeGreaterThanOrEqual(15);
         });
 
         it('should throw error on invalid signature length', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(32), // Wrong length
-                },
-            ]);
+            const shortSignature = Buffer.from(new Uint8Array(32).fill(0x42)).toString('base64');
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: shortSignature }));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -197,7 +288,7 @@ describe('GcpKmsSigner', () => {
         });
 
         it('should throw error on missing signature', async () => {
-            mockAsymmetricSign.mockResolvedValue([{}]);
+            mockFetch.mockResolvedValue(createJsonResponse({}));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -210,9 +301,16 @@ describe('GcpKmsSigner', () => {
         });
 
         it('should handle GCP KMS API errors', async () => {
-            const apiError = new Error('GCP Error');
-            (apiError as any).code = 403;
-            mockAsymmetricSign.mockRejectedValue(apiError);
+            mockFetch.mockResolvedValue(
+                createJsonResponse(
+                    {
+                        error: {
+                            message: 'GCP Error',
+                        },
+                    },
+                    403,
+                ),
+            );
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -221,17 +319,26 @@ describe('GcpKmsSigner', () => {
 
             const message = { content: new Uint8Array([1, 2, 3, 4]), signatures: {} };
 
-            await expect(signer.signMessages([message])).rejects.toThrow('GCP KMS Sign operation failed: GCP Error');
+            await expect(signer.signMessages([message])).rejects.toThrow('GCP KMS API error: 403');
+        });
+
+        it('should handle network errors', async () => {
+            mockFetch.mockRejectedValue(new Error('Network error'));
+
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME,
+                publicKey: TEST_PUBLIC_KEY,
+            });
+
+            const message = { content: new Uint8Array([1, 2, 3, 4]), signatures: {} };
+
+            await expect(signer.signMessages([message])).rejects.toThrow('GCP KMS network request failed');
         });
     });
 
     describe('signTransactions', () => {
         it('should sign a transaction successfully', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 }));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -247,15 +354,15 @@ describe('GcpKmsSigner', () => {
 
             expect(result).toHaveLength(1);
             expect(result[0]).toHaveProperty(signer.address);
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(1);
+            expect(mockFetch).toHaveBeenCalledTimes(1);
+
+            assertAuthorizedRequest(SIGN_ENDPOINT, 'POST');
         });
 
         it('should sign multiple transactions successfully', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(64).fill(0x42),
-                },
-            ]);
+            mockFetch.mockImplementation(() =>
+                Promise.resolve(createJsonResponse({ signature: TEST_SIGNATURE_BASE64 })),
+            );
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -270,15 +377,12 @@ describe('GcpKmsSigner', () => {
             const result = await signer.signTransactions(transactions);
 
             expect(result).toHaveLength(2);
-            expect(mockAsymmetricSign).toHaveBeenCalledTimes(2);
+            expect(mockFetch).toHaveBeenCalledTimes(2);
         });
 
         it('should throw error on invalid signature length', async () => {
-            mockAsymmetricSign.mockResolvedValue([
-                {
-                    signature: new Uint8Array(32),
-                },
-            ]);
+            const shortSignature = Buffer.from(new Uint8Array(32).fill(0x42)).toString('base64');
+            mockFetch.mockResolvedValue(createJsonResponse({ signature: shortSignature }));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -291,7 +395,7 @@ describe('GcpKmsSigner', () => {
         });
 
         it('should throw error on missing signature', async () => {
-            mockAsymmetricSign.mockResolvedValue([{}]);
+            mockFetch.mockResolvedValue(createJsonResponse({}));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -304,9 +408,16 @@ describe('GcpKmsSigner', () => {
         });
 
         it('should handle GCP KMS API errors', async () => {
-            const apiError = new Error('GCP Error');
-            (apiError as any).code = 403;
-            mockAsymmetricSign.mockRejectedValue(apiError);
+            mockFetch.mockResolvedValue(
+                createJsonResponse(
+                    {
+                        error: {
+                            message: 'GCP Error',
+                        },
+                    },
+                    403,
+                ),
+            );
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -315,20 +426,13 @@ describe('GcpKmsSigner', () => {
 
             const transaction = { messageBytes: new Uint8Array([1, 2, 3, 4]), signatures: {} } as any;
 
-            await expect(signer.signTransactions([transaction])).rejects.toThrow(
-                'GCP KMS Sign operation failed: GCP Error',
-            );
+            await expect(signer.signTransactions([transaction])).rejects.toThrow('GCP KMS API error: 403');
         });
     });
 
     describe('isAvailable', () => {
         it('should return true for valid Ed25519 key', async () => {
-            mockGetPublicKey.mockResolvedValue([
-                {
-                    name: TEST_KEY_NAME,
-                    algorithm: 'EC_SIGN_ED25519',
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ algorithm: 'EC_SIGN_ED25519' }));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -338,15 +442,27 @@ describe('GcpKmsSigner', () => {
             const available = await signer.isAvailable();
 
             expect(available).toBe(true);
+            expect(mockFetch).toHaveBeenCalledTimes(1);
+            assertAuthorizedRequest(PUBLIC_KEY_ENDPOINT, 'GET');
+        });
+
+        it('should use canonical public key endpoint for valid key names', async () => {
+            mockFetch.mockResolvedValue(createJsonResponse({ algorithm: 'EC_SIGN_ED25519' }));
+
+            const signer = new GcpKmsSigner({
+                keyName: TEST_KEY_NAME_WITH_LEADING_SLASH,
+                publicKey: TEST_PUBLIC_KEY,
+            });
+
+            const available = await signer.isAvailable();
+
+            expect(available).toBe(true);
+            expect(mockGetRequestHeaders).toHaveBeenCalledWith(PUBLIC_KEY_ENDPOINT);
+            assertAuthorizedRequest(PUBLIC_KEY_ENDPOINT, 'GET');
         });
 
         it('should return false for wrong algorithm', async () => {
-            mockGetPublicKey.mockResolvedValue([
-                {
-                    name: TEST_KEY_NAME,
-                    algorithm: 'RSA_SIGN_PKCS1_2048_SHA256',
-                },
-            ]);
+            mockFetch.mockResolvedValue(createJsonResponse({ algorithm: 'RSA_SIGN_PKCS1_2048_SHA256' }));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -359,7 +475,7 @@ describe('GcpKmsSigner', () => {
         });
 
         it('should return false for missing public key response', async () => {
-            mockGetPublicKey.mockResolvedValue([undefined]);
+            mockFetch.mockResolvedValue(createJsonResponse({}));
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,
@@ -371,8 +487,17 @@ describe('GcpKmsSigner', () => {
             expect(available).toBe(false);
         });
 
-        it('should return false on error', async () => {
-            mockGetPublicKey.mockRejectedValue(new Error('GCP error'));
+        it('should return false on API error', async () => {
+            mockFetch.mockResolvedValue(
+                createJsonResponse(
+                    {
+                        error: {
+                            message: 'Forbidden',
+                        },
+                    },
+                    403,
+                ),
+            );
 
             const signer = new GcpKmsSigner({
                 keyName: TEST_KEY_NAME,

package/src/gcp-kms-signer.ts

@@ -1,8 +1,8 @@
-import { v1 } from '@google-cloud/kms';
 import { Address, assertIsAddress } from '@solana/addresses';
 import {
     assertSignatureValid,
     createSignatureDictionary,
+    sanitizeRemoteErrorResponse,
     SignerErrorCode,
     SolanaSigner,
     throwSignerError,
@@ -10,9 +10,28 @@ import {
 import { SignatureBytes } from '@solana/keys';
 import { SignableMessage, SignatureDictionary } from '@solana/signers';
 import { Transaction, TransactionWithinSizeLimit, TransactionWithLifetime } from '@solana/transactions';
+import { GoogleAuth } from 'google-auth-library';
 
 import type { GcpKmsSignerConfig } from './types.js';
 
+/**
+ * Create a Google Cloud KMS-backed signer.
+ *
+ * @throws {SignerError} `SIGNER_CONFIG_ERROR` when required config is missing or invalid.
+ */
+const CLOUD_KMS_BASE_URL = 'https://cloudkms.googleapis.com/v1';
+const CLOUD_KMS_SCOPE = 'https://www.googleapis.com/auth/cloud-platform';
+const ED25519_SIGNATURE_LENGTH = 64;
+const GCP_KMS_KEY_NAME_PATTERN =
+    /^projects\/[A-Za-z0-9._-]+\/locations\/[A-Za-z0-9._-]+\/keyRings\/[A-Za-z0-9._-]+\/cryptoKeys\/[A-Za-z0-9._-]+\/cryptoKeyVersions\/[A-Za-z0-9._-]+$/;
+
+type AsymmetricSignResponse = {
+    signature?: string;
+};
+
+type PublicKeyResponse = {
+    algorithm?: string;
+};
 export function createGcpKmsSigner<TAddress extends string = string>(
     config: GcpKmsSignerConfig,
 ): SolanaSigner<TAddress> {
@@ -40,7 +59,8 @@ export function createGcpKmsSigner<TAddress extends string = string>(
 export class GcpKmsSigner<TAddress extends string = string> implements SolanaSigner<TAddress> {
     readonly address: Address<TAddress>;
     private readonly keyName: string;
-    private readonly client: v1.KeyManagementServiceClient;
+    private readonly keyNamePathSegments: readonly string[];
+    private readonly auth: GoogleAuth;
     private readonly requestDelayMs: number;
 
     /** @deprecated Use `createGcpKmsSigner()` instead. */
@@ -72,10 +92,85 @@ export class GcpKmsSigner<TAddress extends string = string> implements SolanaSig
             });
         }
 
-        this.keyName = config.keyName;
+        this.keyName = this.normalizeKeyName(config.keyName);
+        this.keyNamePathSegments = this.keyName.split('/');
         this.requestDelayMs = config.requestDelayMs || 0;
         this.validateRequestDelayMs(this.requestDelayMs);
-        this.client = new v1.KeyManagementServiceClient();
+        this.auth = new GoogleAuth({ scopes: [CLOUD_KMS_SCOPE] });
+    }
+
+    private normalizeKeyName(keyName: string): string {
+        const canonicalKeyName = keyName.replace(/^\/+/, '');
+
+        if (/\/{2,}/.test(canonicalKeyName) || /[#?%]/.test(canonicalKeyName)) {
+            throwSignerError(SignerErrorCode.CONFIG_ERROR, {
+                message: 'Invalid GCP KMS keyName format',
+            });
+        }
+
+        if (!GCP_KMS_KEY_NAME_PATTERN.test(canonicalKeyName)) {
+            throwSignerError(SignerErrorCode.CONFIG_ERROR, {
+                message: 'Invalid GCP KMS keyName format',
+            });
+        }
+
+        return canonicalKeyName;
+    }
+
+    private buildResourceUrl(suffix: ':asymmetricSign' | '/publicKey'): string {
+        const url = new URL(`${CLOUD_KMS_BASE_URL}/`);
+        const basePathSegments = url.pathname.split('/').filter(Boolean);
+        url.pathname = `/${[...basePathSegments, ...this.keyNamePathSegments].join('/')}${suffix}`;
+        return url.toString();
+    }
+
+    private async authorizedFetch(url: string, init: RequestInit): Promise<Response> {
+        const authHeaders = await this.auth.getRequestHeaders(url);
+        const headers = new Headers(init.headers);
+
+        authHeaders.forEach((value, key) => {
+            headers.set(key, value);
+        });
+
+        if (init.body && !headers.has('content-type')) {
+            headers.set('content-type', 'application/json');
+        }
+
+        return await fetch(url, { ...init, headers });
+    }
+
+    private async request<TResponse>(url: string, init: RequestInit): Promise<TResponse> {
+        let response: Response;
+        try {
+            response = await this.authorizedFetch(url, init);
+        } catch (error) {
+            throwSignerError(SignerErrorCode.HTTP_ERROR, {
+                cause: error,
+                message: 'GCP KMS network request failed',
+                url,
+            });
+        }
+
+        if (!response.ok) {
+            const errorText = await response.text().catch(() => 'Failed to read error response');
+            throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
+                message: `GCP KMS API error: ${response.status}`,
+                response: sanitizeRemoteErrorResponse(errorText),
+                status: response.status,
+            });
+        }
+
+        let payload: TResponse;
+        try {
+            payload = (await response.json()) as TResponse;
+        } catch (error) {
+            throwSignerError(SignerErrorCode.PARSING_ERROR, {
+                cause: error,
+                message: 'Failed to parse GCP KMS response',
+            });
+        }
+
+        return payload;
     }
 
     /**
@@ -108,10 +203,11 @@ export class GcpKmsSigner<TAddress extends string = string> implements SolanaSig
      */
     private async signBytes(messageBytes: Uint8Array): Promise<SignatureBytes> {
         try {
-            // GCP KMS AsymmetricSign expects the raw message for Ed25519 (PureEdDSA)
-            const [response] = await this.client.asymmetricSign({
-                data: messageBytes,
-                name: this.keyName,
+            const response = await this.request<AsymmetricSignResponse>(this.buildResourceUrl(':asymmetricSign'), {
+                body: JSON.stringify({
+                    data: Buffer.from(messageBytes).toString('base64'),
+                }),
+                method: 'POST',
             });
 
             if (!response.signature) {
@@ -121,29 +217,20 @@ export class GcpKmsSigner<TAddress extends string = string> implements SolanaSig
             }
 
             // Ed25519 signatures are 64 bytes
-            const signature = response.signature as Uint8Array;
-            if (signature.length !== 64) {
+            const signature = new Uint8Array(Buffer.from(response.signature, 'base64'));
+            if (signature.length !== ED25519_SIGNATURE_LENGTH) {
                 throwSignerError(SignerErrorCode.SIGNING_FAILED, {
-                    message: `Invalid signature length: expected 64 bytes, got ${signature.length}`,
+                    message: `Invalid signature length: expected ${ED25519_SIGNATURE_LENGTH} bytes, got ${signature.length}`,
                 });
             }
 
             return signature as SignatureBytes;
         } catch (error: unknown) {
-            // Re-throw SignerError as-is
+            // Re-throw SignerError as-is (from request())
             if (error instanceof Error && error.name === 'SignerError') {
                 throw error;
             }
-            if (error instanceof Error) {
-                // GCP SDK errors
-                const gcpError = error as { code?: number; message?: string };
-                throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
-                    cause: error,
-                    message: `GCP KMS Sign operation failed: ${gcpError.message || error.message}`,
-                    status: gcpError.code,
-                });
-            }
-            throwSignerError(SignerErrorCode.REMOTE_API_ERROR, {
+            throwSignerError(SignerErrorCode.SIGNING_FAILED, {
                 cause: error,
                 message: 'GCP KMS Sign operation failed',
             });
@@ -205,8 +292,8 @@ export class GcpKmsSigner<TAddress extends string = string> implements SolanaSig
      */
     async isAvailable(): Promise<boolean> {
         try {
-            const [publicKey] = await this.client.getPublicKey({
-                name: this.keyName,
+            const publicKey = await this.request<PublicKeyResponse>(this.buildResourceUrl('/publicKey'), {
+                method: 'GET',
             });
 
             if (!publicKey) {