feat(wallets): add Turnkey signer support

Add Turnkey as a remote signer option alongside AWS KMS and GCP KMS.

Key changes:
- Added alloy-signer-turnkey dependency to foundry-wallets
- Implemented Turnkey wallet CLI args and initialization logic
- Added turnkey feature flags to cast and forge
- Updated Dockerfile and Makefile to include turnkey in release builds

Fixed forge wallet feature flags:
- Moved foundry-wallets from dev-dependencies to dependencies in forge/Cargo.toml
- This fixes an issue where aws-kms, gcp-kms, and turnkey features were defined
  but non-functional when using cargo run with --features flags
- The features worked in release builds (via Makefile) but not in local dev
- This aligns forge with cast, which already had foundry-wallets as a regular dependency

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: rplusq

Cargo.lock

@@ -238,6 +238,7 @@ alloy-serde = { version = "1.0.36", default-features = false }
 alloy-signer = { version = "1.0.36", default-features = false }
 alloy-signer-aws = { version = "1.0.36", default-features = false }
 alloy-signer-gcp = { version = "1.0.36", default-features = false }
+alloy-signer-turnkey = { path = "../alloy/crates/signer-turnkey", default-features = false }
 alloy-signer-ledger = { version = "1.0.36", default-features = false }
 alloy-signer-local = { version = "1.0.36", default-features = false }
 alloy-signer-trezor = { version = "1.0.36", default-features = false }

Cargo.toml

@@ -19,7 +19,7 @@ COPY . .
 RUN git update-index --force-write-index
 
 RUN --mount=type=cache,target=/root/.cargo/registry --mount=type=cache,target=/root/.cargo/git --mount=type=cache,target=/opt/foundry/target \
-    source $HOME/.profile && cargo build --release --features anvil/js-tracer,cast/aws-kms,cast/gcp-kms,forge/aws-kms,forge/gcp-kms \
+    source $HOME/.profile && cargo build --release --features anvil/js-tracer,cast/aws-kms,cast/gcp-kms,cast/turnkey,forge/aws-kms,forge/gcp-kms,forge/turnkey \
     && mkdir out \
     && mv target/release/forge out/forge \
     && mv target/release/cast out/cast \

Dockerfile

@@ -15,9 +15,9 @@ CARGO_TARGET_DIR ?= target
 # List of features to use when building. Can be overridden via the environment.
 # No jemalloc on Windows
 ifeq ($(OS),Windows_NT)
-    FEATURES ?= aws-kms gcp-kms cli asm-keccak
+    FEATURES ?= aws-kms gcp-kms turnkey cli asm-keccak
 else
-    FEATURES ?= jemalloc aws-kms gcp-kms cli asm-keccak
+    FEATURES ?= jemalloc aws-kms gcp-kms turnkey cli asm-keccak
 endif
 
 ##@ Help
@@ -47,15 +47,15 @@ build-%:
 .PHONY: docker-build-push
 docker-build-push: docker-build-prepare ## Build and push a cross-arch Docker image tagged with DOCKER_IMAGE_NAME.
 	# Build x86_64-unknown-linux-gnu.
-	cargo build --target x86_64-unknown-linux-gnu --features "jemalloc aws-kms gcp-kms cli asm-keccak js-tracer" --profile "$(PROFILE)"
+	cargo build --target x86_64-unknown-linux-gnu --features "jemalloc aws-kms gcp-kms turnkey cli asm-keccak js-tracer" --profile "$(PROFILE)"
 	mkdir -p $(BIN_DIR)/amd64
 	for bin in anvil cast chisel forge; do \
 		cp $(CARGO_TARGET_DIR)/x86_64-unknown-linux-gnu/$(PROFILE)/$$bin $(BIN_DIR)/amd64/; \
 	done
 
 	# Build aarch64-unknown-linux-gnu.
 	rustup target add aarch64-unknown-linux-gnu
-	RUSTFLAGS="-C linker=aarch64-linux-gnu-gcc" cargo build --target aarch64-unknown-linux-gnu --features "aws-kms gcp-kms cli asm-keccak js-tracer" --profile "$(PROFILE)"
+	RUSTFLAGS="-C linker=aarch64-linux-gnu-gcc" cargo build --target aarch64-unknown-linux-gnu --features "aws-kms gcp-kms turnkey cli asm-keccak js-tracer" --profile "$(PROFILE)"
 	mkdir -p $(BIN_DIR)/arm64
 	for bin in anvil cast chisel forge; do \
 		cp $(CARGO_TARGET_DIR)/aarch64-unknown-linux-gnu/$(PROFILE)/$$bin $(BIN_DIR)/arm64/; \

Makefile

@@ -101,4 +101,5 @@ mimalloc = ["foundry-cli/mimalloc"]
 tracy-allocator = ["foundry-cli/tracy-allocator"]
 aws-kms = ["foundry-wallets/aws-kms"]
 gcp-kms = ["foundry-wallets/gcp-kms"]
+turnkey = ["foundry-wallets/turnkey"]
 isolate-by-default = ["foundry-config/isolate-by-default"]

crates/cast/Cargo.toml

@@ -50,6 +50,7 @@ forge-script.workspace = true
 forge-sol-macro-gen.workspace = true
 foundry-cli.workspace = true
 foundry-debugger.workspace = true
+foundry-wallets.workspace = true
 
 alloy-chains.workspace = true
 alloy-dyn-abi.workspace = true
@@ -101,7 +102,6 @@ alloy-hardforks.workspace = true
 anvil.workspace = true
 forge-script-sequence.workspace = true
 foundry-test-utils.workspace = true
-foundry-wallets.workspace = true
 futures.workspace = true
 reqwest = { workspace = true, features = ["json"] }
 
@@ -122,4 +122,5 @@ mimalloc = ["foundry-cli/mimalloc"]
 tracy-allocator = ["foundry-cli/tracy-allocator"]
 aws-kms = ["foundry-wallets/aws-kms"]
 gcp-kms = ["foundry-wallets/gcp-kms"]
+turnkey = ["foundry-wallets/turnkey"]
 isolate-by-default = ["foundry-config/isolate-by-default"]

crates/forge/Cargo.toml

@@ -32,6 +32,9 @@ aws-config = { version = "1", default-features = true, optional = true }
 # gcp-kms
 alloy-signer-gcp = { workspace = true, features = ["eip712"], optional = true }
 
+# turnkey
+alloy-signer-turnkey = { workspace = true, features = ["eip712"], optional = true }
+
 async-trait.workspace = true
 clap = { version = "4", features = ["derive", "env", "unicode", "wrap_help"] }
 derive_builder = "0.20"
@@ -48,3 +51,4 @@ tokio = { workspace = true, features = ["macros"] }
 [features]
 aws-kms = ["dep:alloy-signer-aws", "dep:aws-config"]
 gcp-kms = ["dep:alloy-signer-gcp"]
+turnkey = ["dep:alloy-signer-turnkey"]