feat: Add signer registry URIs for GCP and Foundry keystores

src/fs/FileSystemRegistry.ts

@@ -7,17 +7,26 @@
   ChainMap,
   ChainMetadata,
   ChainName,
+  SignerConfig,
   WarpCoreConfig,
   WarpRouteDeployConfig,
 } from '@hyperlane-xyz/sdk';
+import { isSignerRef } from '@hyperlane-xyz/sdk';
 
 import {
   CHAIN_FILE_REGEX,
   SCHEMA_REF,
   WARP_ROUTE_CONFIG_FILE_REGEX,
   WARP_ROUTE_DEPLOY_FILE_REGEX,
 } from '../consts.js';
-import { ChainAddresses, ChainAddressesSchema, UpdateChainParams, WarpRouteId } from '../types.js';
+import {
+  ChainAddresses,
+  ChainAddressesSchema,
+  SignerConfigMap,
+  SignerConfiguration,
+  UpdateChainParams,
+  WarpRouteId,
+} from '../types.js';
 import { toYamlString } from '../utils.js';
 
 import {
@@ -42,10 +51,17 @@
 export class FileSystemRegistry extends SynchronousRegistry implements IRegistry {
   public readonly type = RegistryType.FileSystem;
 
+  // Signer configuration cache
+  protected signerConfigCache?: SignerConfiguration;
+
   constructor(options: FileSystemRegistryOptions) {
     super(options);
   }
 
+  protected getSignersPath(): string {
+    return 'signers';
+  }
+
   getUri(itemPath?: string): string {
     if (!itemPath) return super.getUri();
     return path.join(this.uri, itemPath);
@@ -135,6 +151,108 @@
     });
   }
 
+  /**
+   * Get the full signer configuration from the signers/ directory
+   * Parses all .yaml files in the signers/ directory and merges them
+   */
+  getSignerConfiguration(): SignerConfiguration | null {
+    if (this.signerConfigCache) return this.signerConfigCache;
+
+    const signersPath = path.join(this.uri, this.getSignersPath());
+    if (!fs.existsSync(signersPath)) return null;
+
+    const signerFiles = this.listFiles(signersPath).filter(
+      (f) => f.endsWith('.yaml') || f.endsWith('.yml'),
+    );
+
+    if (signerFiles.length === 0) return null;
+
+    // Merge all signer config files
+    let mergedConfig: SignerConfiguration = {};
+
+    for (const filePath of signerFiles) {
+      try {
+        const data = fs.readFileSync(filePath, 'utf8');
+        const parsed = yamlParse(data) as SignerConfiguration;
+
+        // Merge signers
+        if (parsed.signers) {
+          mergedConfig.signers = { ...mergedConfig.signers, ...parsed.signers };
+        }
+
+        // Merge defaults (later files override earlier ones)
+        if (parsed.defaults) {
+          mergedConfig.defaults = {
+            ...mergedConfig.defaults,
+            ...parsed.defaults,
+            // Deep merge protocols and chains
+            protocols: {
+              ...mergedConfig.defaults?.protocols,
+              ...parsed.defaults.protocols,
+            },
+            chains: {
+              ...mergedConfig.defaults?.chains,
+              ...parsed.defaults.chains,
+            },
+          };
+        }
+      } catch (error) {
+        this.logger.warn(`Failed to parse signer config file ${filePath}: ${error}`);
+      }
+    }
+
+    this.signerConfigCache = mergedConfig;
+    return mergedConfig;
+  }
+
+  /**
+   * Get all named signer configurations
+   */
+  getSigners(): SignerConfigMap | null {
+    const config = this.getSignerConfiguration();
+    return config?.signers ?? null;
+  }
+
+  /**
+   * Get a specific named signer configuration
+   */
+  getSigner(id: string): SignerConfig | null {
+    const signers = this.getSigners();
+    return signers?.[id] ?? null;
+  }
+
+  /**
+   * Get the default signer for a chain using hierarchy: chain > protocol > default
+   * Resolves refs to actual signer configs
+   */
+  getDefaultSigner(chainName?: ChainName): SignerConfig | null {
+    const config = this.getSignerConfiguration();
+    if (!config?.defaults) return null;
+
+    let signerOrRef = config.defaults.default;
+
+    // Check chain-specific override
+    if (chainName && config.defaults.chains?.[chainName]) {
+      signerOrRef = config.defaults.chains[chainName];
+    }
+    // Check protocol-specific override
+    else if (chainName) {
+      const metadata = this.getChainMetadata(chainName);
+      if (metadata?.protocol && config.defaults.protocols?.[metadata.protocol]) {
+        signerOrRef = config.defaults.protocols[metadata.protocol];
+      }
+    }
+
+    if (!signerOrRef) return null;
+
+    // Resolve ref if needed
+    if (isSignerRef(signerOrRef)) {
+      return this.getSigner(signerOrRef.ref);
+    }
+
+    return signerOrRef;
+  }
+
   protected listFiles(dirPath: string): string[] {
     if (!fs.existsSync(dirPath)) return [];
 

src/fs/registry-utils.ts

@@ -1,5 +1,10 @@
 import type { Logger } from 'pino';
 import { GithubRegistry } from '../registry/GithubRegistry.js';
+import { GCPSignerRegistry, parseGCPUri } from '../registry/GCPSignerRegistry.js';
+import {
+  FoundryKeystoreRegistry,
+  parseFoundryKeystoreUri,
+} from '../registry/FoundryKeystoreRegistry.js';
 import { FileSystemRegistry } from './FileSystemRegistry.js';
 import { IRegistry } from '../registry/IRegistry.js';
 import { PROXY_DEPLOYED_URL } from '../consts.js';
@@ -74,6 +79,23 @@ export function getRegistry({
     .filter((uri) => !!uri)
     .map((uri, index) => {
       const childLogger = registryLogger?.child({ uri, index });
+
+      // Check for GCP signer registry (gcp://project/secret-name)
+      if (parseGCPUri(uri)) {
+        return new GCPSignerRegistry({
+          uri,
+          logger: childLogger,
+        });
+      }
+
+      // Check for Foundry keystore registry (foundry://accountName or foundry:///path/accountName)
+      if (parseFoundryKeystoreUri(uri)) {
+        return new FoundryKeystoreRegistry({
+          uri,
+          logger: childLogger,
+        });
+      }
+
       if (isProtocolUrl(uri, ['https:']) && uri.includes('github')) {
         return new GithubRegistry({
           uri,

src/index.ts

@@ -5,6 +5,16 @@ export {
 } from './consts.js';
 export { BaseRegistry } from './registry/BaseRegistry.js';
 export { GithubRegistry, GithubRegistryOptions } from './registry/GithubRegistry.js';
+export {
+  GCPSignerRegistry,
+  GCPSignerRegistryOptions,
+  parseGCPUri,
+} from './registry/GCPSignerRegistry.js';
+export {
+  FoundryKeystoreRegistry,
+  FoundryKeystoreRegistryOptions,
+  parseFoundryKeystoreUri,
+} from './registry/FoundryKeystoreRegistry.js';
 export {
   AddWarpRouteConfigOptions,
   ChainFiles,

src/registry/BaseRegistry.ts

@@ -5,6 +5,7 @@ import {
   ChainMetadata,
   ChainName,
   HypTokenRouterConfig,
+  SignerConfig,
   WarpCoreConfig,
   WarpRouteDeployConfig,
 } from '@hyperlane-xyz/sdk';
@@ -13,6 +14,8 @@ import { WARP_ROUTE_ID_REGEX } from '../consts.js';
 import type {
   ChainAddresses,
   MaybePromise,
+  SignerConfigMap,
+  SignerConfiguration,
   UpdateChainParams,
   WarpDeployConfigMap,
   WarpRouteFilterParams,
@@ -192,6 +195,41 @@ export abstract class BaseRegistry implements IRegistry {
   abstract getWarpDeployConfig(routeId: string): MaybePromise<WarpRouteDeployConfig | null>;
   abstract getWarpDeployConfigs(filter?: WarpRouteFilterParams): MaybePromise<WarpDeployConfigMap>;
 
+  // Default signer implementations - return null by default
+  // Subclasses can override to provide signer support
+
+  /**
+   * Get all named signer configurations
+   * Default implementation returns null (not supported)
+   */
+  getSigners(): MaybePromise<SignerConfigMap | null> {
+    return null;
+  }
+
+  /**
+   * Get a specific named signer configuration
+   * Default implementation returns null (not found)
+   */
+  getSigner(_id: string): MaybePromise<SignerConfig | null> {
+    return null;
+  }
+
+  /**
+   * Get the default signer for a chain using hierarchy: chain > protocol > default
+   * Default implementation returns null (not configured)
+   */
+  getDefaultSigner(_chainName?: ChainName): MaybePromise<SignerConfig | null> {
+    return null;
+  }
+
+  /**
+   * Get the full signer configuration
+   * Default implementation returns null (not supported)
+   */
+  getSignerConfiguration(): MaybePromise<SignerConfiguration | null> {
+    return null;
+  }
+
   merge(otherRegistry: IRegistry): IRegistry {
     return new MergedRegistry({ registries: [this, otherRegistry], logger: this.logger });
   }