feat: tx sign --sign-with-lab

FULL_HELP_DOCS.md

@@ -1337,6 +1337,7 @@ Sign a transaction envelope appending the signature to the envelope
 
 * `--sign-with-key <SIGN_WITH_KEY>` — Sign with a local key. Can be an identity (--sign-with-key alice), a secret key (--sign-with-key SC36…), or a seed phrase (--sign-with-key "kite urban…"). If using seed phrase, `--hd-path` defaults to the `0` path
 * `--hd-path <HD_PATH>` — If using a seed phrase to sign, sets which hierarchical deterministic path to use, e.g. `m/44'/148'/{hd_path}`. Example: `--hd-path 1`. Default: `0`
+* `--sign-with-lab` — Sign with <https://lab.stellar.org>
 * `--rpc-url <RPC_URL>` — RPC server endpoint
 * `--network-passphrase <NETWORK_PASSPHRASE>` — Network passphrase to sign the transaction sent to the rpc server
 * `--network <NETWORK>` — Name of network to use from config

cmd/soroban-cli/Cargo.toml

@@ -123,7 +123,8 @@ humantime = "2.1.0"
 phf = { version = "0.11.2", features = ["macros"] }
 semver = "1.0.0"
 glob = "0.3.1"
-
+open = "5.3.0"
+url = "2.5.2"
 # For hyper-tls
 [target.'cfg(unix)'.dependencies]
 openssl = { version = "=0.10.55", features = ["vendored"] }

cmd/soroban-cli/src/commands/tx/sign.rs

@@ -33,6 +33,13 @@ impl Cmd {
     #[allow(clippy::unused_async)]
     pub async fn run(&self, global_args: &global::Args) -> Result<(), Error> {
         let tx_env = super::xdr::tx_envelope_from_stdin()?;
+        if self.sign_with.sign_with_lab {
+            return Ok(self.sign_with.sign_tx_env_with_lab(
+                &self.network.get(&self.locator)?,
+                &tx_env,
+                global_args.quiet,
+            )?);
+        }
         let tx_env_signed = self.sign_with.sign_tx_env(
             tx_env,
             &self.locator,

cmd/soroban-cli/src/config/sign_with.rs

@@ -1,12 +1,17 @@
 use crate::{signer, xdr::TransactionEnvelope};
 use clap::arg;
+use soroban_env_host::xdr::WriteXdr;
+use soroban_sdk::xdr::Limits;
+use url::Url;
 
 use super::{
     locator,
     network::{self, Network},
     secret,
 };
 
+pub const LAB_URL: &str = "https://lab.stellar.org/transaction/cli-sign";
+
 #[derive(thiserror::Error, Debug)]
 pub enum Error {
     #[error(transparent)]
@@ -23,6 +28,12 @@ pub enum Error {
     NoSignWithKey,
     #[error(transparent)]
     StrKey(#[from] stellar_strkey::DecodeError),
+    #[error(transparent)]
+    Xdr(#[from] soroban_env_host::xdr::Error),
+    #[error(transparent)]
+    Url(#[from] url::ParseError),
+    #[error(transparent)]
+    Open(#[from] std::io::Error),
 }
 
 #[derive(Debug, clap::Args, Clone, Default)]
@@ -35,6 +46,10 @@ pub struct Args {
     #[arg(long, requires = "sign_with_key")]
     /// If using a seed phrase to sign, sets which hierarchical deterministic path to use, e.g. `m/44'/148'/{hd_path}`. Example: `--hd-path 1`. Default: `0`
     pub hd_path: Option<usize>,
+
+    /// Sign with <https://lab.stellar.org>
+    #[arg(long, conflicts_with = "sign_with_key", env = "STELLAR_SIGN_WITH_LAB")]
+    pub sign_with_lab: bool,
 }
 
 impl Args {
@@ -50,4 +65,26 @@ impl Args {
         let signer = secret.signer(self.hd_path, quiet)?;
         Ok(signer.sign_tx_env(tx, network)?)
     }
+    pub fn sign_tx_env_with_lab(
+        &self,
+        network: &Network,
+        tx_env: &TransactionEnvelope,
+        quiet: bool,
+    ) -> Result<(), Error> {
+        let passphrase = network.network_passphrase.clone();
+        let xdr_buffer = tx_env.to_xdr_base64(Limits::none())?;
+        let printer = crate::print::Print::new(quiet);
+
+        let mut url = Url::parse(LAB_URL)?;
+        url.query_pairs_mut()
+            .append_pair("networkPassphrase", &passphrase)
+            .append_pair("xdr", &xdr_buffer);
+
+        let txn_sign_url = url.to_string();
+
+        printer.println(format!("Opening lab to sign transaction: {txn_sign_url}"));
+        open::that(txn_sign_url)?;
+
+        Ok(())
+    }
 }