@crossmint/wallets-sdk 0.20.2 → 0.21.1

package/dist/chunk-IXDC5JR2.js

@@ -0,0 +1,316 @@
+// src/utils/stellar.ts
+import nacl from "tweetnacl";
+var ED25519_PUBLIC_KEY_VERSION_BYTE = 6 << 3;
+var BASE32_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+var CRC16_TABLE = [
+  0,
+  4129,
+  8258,
+  12387,
+  16516,
+  20645,
+  24774,
+  28903,
+  33032,
+  37161,
+  41290,
+  45419,
+  49548,
+  53677,
+  57806,
+  61935,
+  4657,
+  528,
+  12915,
+  8786,
+  21173,
+  17044,
+  29431,
+  25302,
+  37689,
+  33560,
+  45947,
+  41818,
+  54205,
+  50076,
+  62463,
+  58334,
+  9314,
+  13379,
+  1056,
+  5121,
+  25830,
+  29895,
+  17572,
+  21637,
+  42346,
+  46411,
+  34088,
+  38153,
+  58862,
+  62927,
+  50604,
+  54669,
+  13907,
+  9842,
+  5649,
+  1584,
+  30423,
+  26358,
+  22165,
+  18100,
+  46939,
+  42874,
+  38681,
+  34616,
+  63455,
+  59390,
+  55197,
+  51132,
+  18628,
+  22757,
+  26758,
+  30887,
+  2112,
+  6241,
+  10242,
+  14371,
+  51660,
+  55789,
+  59790,
+  63919,
+  35144,
+  39273,
+  43274,
+  47403,
+  23285,
+  19156,
+  31415,
+  27286,
+  6769,
+  2640,
+  14899,
+  10770,
+  56317,
+  52188,
+  64447,
+  60318,
+  39801,
+  35672,
+  47931,
+  43802,
+  27814,
+  31879,
+  19684,
+  23749,
+  11298,
+  15363,
+  3168,
+  7233,
+  60846,
+  64911,
+  52716,
+  56781,
+  44330,
+  48395,
+  36200,
+  40265,
+  32407,
+  28342,
+  24277,
+  20212,
+  15891,
+  11826,
+  7761,
+  3696,
+  65439,
+  61374,
+  57309,
+  53244,
+  48923,
+  44858,
+  40793,
+  36728,
+  37256,
+  33193,
+  45514,
+  41451,
+  53516,
+  49453,
+  61774,
+  57711,
+  4224,
+  161,
+  12482,
+  8419,
+  20484,
+  16421,
+  28742,
+  24679,
+  33721,
+  37784,
+  41979,
+  46042,
+  49981,
+  54044,
+  58239,
+  62302,
+  689,
+  4752,
+  8947,
+  13010,
+  16949,
+  21012,
+  25207,
+  29270,
+  46570,
+  42443,
+  38312,
+  34185,
+  62830,
+  58703,
+  54572,
+  50445,
+  13538,
+  9411,
+  5280,
+  1153,
+  29798,
+  25671,
+  21540,
+  17413,
+  42971,
+  47098,
+  34713,
+  38840,
+  59231,
+  63358,
+  50973,
+  55100,
+  9939,
+  14066,
+  1681,
+  5808,
+  26199,
+  30326,
+  17941,
+  22068,
+  55628,
+  51565,
+  63758,
+  59695,
+  39368,
+  35305,
+  47498,
+  43435,
+  22596,
+  18533,
+  30726,
+  26663,
+  6336,
+  2273,
+  14466,
+  10403,
+  52093,
+  56156,
+  60223,
+  64286,
+  35833,
+  39896,
+  43963,
+  48026,
+  19061,
+  23124,
+  27191,
+  31254,
+  2801,
+  6864,
+  10931,
+  14994,
+  64814,
+  60687,
+  56684,
+  52557,
+  48554,
+  44427,
+  40424,
+  36297,
+  31782,
+  27655,
+  23652,
+  19525,
+  15522,
+  11395,
+  7392,
+  3265,
+  61215,
+  65342,
+  53085,
+  57212,
+  44955,
+  49082,
+  36825,
+  40952,
+  28183,
+  32310,
+  20053,
+  24180,
+  11923,
+  16050,
+  3793,
+  7920
+];
+function crc16Xmodem(data) {
+  let crc = 0;
+  for (let i = 0; i < data.length; i++) {
+    const byte = data[i];
+    crc = (crc << 8 ^ CRC16_TABLE[crc >> 8 ^ byte]) & 65535;
+  }
+  const checksum = new Uint8Array(2);
+  checksum[0] = crc & 255;
+  checksum[1] = crc >> 8 & 255;
+  return checksum;
+}
+function base32Encode(data) {
+  let bits = 0;
+  let value = 0;
+  let output = "";
+  for (let i = 0; i < data.length; i++) {
+    value = value << 8 | data[i];
+    bits += 8;
+    while (bits >= 5) {
+      output += BASE32_ALPHABET[value >>> bits - 5 & 31];
+      bits -= 5;
+    }
+  }
+  if (bits > 0) {
+    output += BASE32_ALPHABET[value << 5 - bits & 31];
+  }
+  while (output.length % 8 !== 0) {
+    output += "=";
+  }
+  return output;
+}
+function encodeStellarPublicKey(publicKeyBytes) {
+  const payload = new Uint8Array(1 + publicKeyBytes.length);
+  payload[0] = ED25519_PUBLIC_KEY_VERSION_BYTE;
+  payload.set(publicKeyBytes, 1);
+  const checksum = crc16Xmodem(payload);
+  const unencoded = new Uint8Array(payload.length + 2);
+  unencoded.set(payload, 0);
+  unencoded.set(checksum, payload.length);
+  return base32Encode(unencoded);
+}
+function ed25519KeypairFromSeed(seed) {
+  const keypair = nacl.sign.keyPair.fromSeed(seed);
+  return { publicKey: keypair.publicKey, secretKey: keypair.secretKey };
+}
+function ed25519Sign(message, secretKey) {
+  return nacl.sign.detached(message, secretKey);
+}
+
+export {
+  encodeStellarPublicKey,
+  ed25519KeypairFromSeed,
+  ed25519Sign
+};

package/dist/{chunk-7TT3VUDF.cjs → chunk-IZQHJM2P.cjs}

@@ -1,10 +1,10 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 
-var _chunkZAX22GSIcjs = require('./chunk-ZAX22GSI.cjs');
+var _chunk5NWGYER3cjs = require('./chunk-5NWGYER3.cjs');
 
 
-var _chunkJREZWZ2Scjs = require('./chunk-JREZWZ2S.cjs');
+var _chunkBJQHHI7Kcjs = require('./chunk-BJQHHI7K.cjs');
 
 
 var _chunkUO2J2ZB2cjs = require('./chunk-UO2J2ZB2.cjs');
@@ -12,7 +12,7 @@ var _chunkUO2J2ZB2cjs = require('./chunk-UO2J2ZB2.cjs');
 // src/signers/non-custodial/ncs-solana-signer.ts
 var _web3js = require('@solana/web3.js');
 var _bs58 = require('bs58'); var _bs582 = _interopRequireDefault(_bs58);
-var SolanaNonCustodialSigner = class _SolanaNonCustodialSigner extends _chunkZAX22GSIcjs.NonCustodialSigner {
+var SolanaNonCustodialSigner = class _SolanaNonCustodialSigner extends _chunk5NWGYER3cjs.NonCustodialSigner {
   constructor(config) {
     super(config);
   }
@@ -29,7 +29,7 @@ var SolanaNonCustodialSigner = class _SolanaNonCustodialSigner extends _chunkZAX
       const transactionBytes = _bs582.default.decode(transaction);
       const deserializedTransaction = _web3js.VersionedTransaction.deserialize(transactionBytes);
       const messageData = deserializedTransaction.message.serialize();
-      _chunkJREZWZ2Scjs.walletsLogger.info("sign: sending request", { keyType: "ed25519" });
+      _chunkBJQHHI7Kcjs.walletsLogger.info("sign: sending request", { keyType: "ed25519" });
       const startTime = Date.now();
       const res = yield (_a = this.config.clientTEEConnection) == null ? void 0 : _a.sendAction({
         event: "request:sign",
@@ -45,9 +45,9 @@ var SolanaNonCustodialSigner = class _SolanaNonCustodialSigner extends _chunkZAX
             encoding: "base58"
           }
         },
-        options: _chunkZAX22GSIcjs.DEFAULT_EVENT_OPTIONS
+        options: _chunk5NWGYER3cjs.DEFAULT_EVENT_OPTIONS
       });
-      _chunkJREZWZ2Scjs.walletsLogger.info("sign: response received", {
+      _chunkBJQHHI7Kcjs.walletsLogger.info("sign: response received", {
         status: res == null ? void 0 : res.status,
         durationMs: Date.now() - startTime
       });

package/dist/chunk-J65ILI3Y.cjs

@@ -0,0 +1,44 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _chunkM6E6A543cjs = require('./chunk-M6E6A543.cjs');
+
+
+var _chunkUO2J2ZB2cjs = require('./chunk-UO2J2ZB2.cjs');
+
+// src/signers/server/stellar-server-signer.ts
+var StellarServerSigner = class {
+  constructor(config) {
+    this.type = "server";
+    const keypair = _chunkM6E6A543cjs.ed25519KeypairFromSeed.call(void 0, config.derivedKeyBytes);
+    this._address = _chunkM6E6A543cjs.encodeStellarPublicKey.call(void 0, keypair.publicKey);
+    this._locator = config.locator;
+    this.secretKey = keypair.secretKey;
+  }
+  address() {
+    return this._address;
+  }
+  locator() {
+    return this._locator;
+  }
+  signMessage(message) {
+    return _chunkUO2J2ZB2cjs.__async.call(void 0, this, null, function* () {
+      if (!/^[A-Za-z0-9+/]*={0,2}$/.test(message)) {
+        throw new Error("StellarServerSigner.signMessage: expected a base64-encoded string");
+      }
+      const messageBytes = Buffer.from(message, "base64");
+      const signatureBytes = _chunkM6E6A543cjs.ed25519Sign.call(void 0, messageBytes, this.secretKey);
+      return { signature: Buffer.from(signatureBytes).toString("base64") };
+    });
+  }
+  signTransaction(transaction) {
+    return _chunkUO2J2ZB2cjs.__async.call(void 0, this, null, function* () {
+      return yield this.signMessage(transaction);
+    });
+  }
+};
+
+
+
+exports.StellarServerSigner = StellarServerSigner;

package/dist/chunk-JD77GNRZ.cjs

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkRUQYXEEGcjs = require('./chunk-RUQYXEEG.cjs');
+
+
+var _chunkMNHK6EQKcjs = require('./chunk-MNHK6EQK.cjs');
+
+
+
+var _chunkM6E6A543cjs = require('./chunk-M6E6A543.cjs');
+
+// src/signers/server/helpers/derive-server-signer.ts
+var _accounts = require('viem/accounts');
+var _utils = require('@noble/hashes/utils');
+var _web3js = require('@solana/web3.js');
+function deriveServerSignerAddress(keyBytes, chain) {
+  const chainType = _chunkRUQYXEEGcjs.getChainType.call(void 0, chain);
+  switch (chainType) {
+    case "evm":
+      return _accounts.privateKeyToAccount.call(void 0, `0x${_utils.bytesToHex.call(void 0, keyBytes)}`).address;
+    case "solana":
+      return _web3js.Keypair.fromSeed(keyBytes).publicKey.toBase58();
+    case "stellar":
+      return _chunkM6E6A543cjs.encodeStellarPublicKey.call(void 0, _chunkM6E6A543cjs.ed25519KeypairFromSeed.call(void 0, keyBytes).publicKey);
+  }
+}
+function deriveServerSignerDetails(signer, chain, projectId, environment) {
+  if (typeof window !== "undefined") {
+    throw new Error("Server signers can only be used from server-side code.");
+  }
+  const chainStr = typeof chain === "string" ? chain : String(chain);
+  const derivedKeyBytes = _chunkMNHK6EQKcjs.deriveKeyBytes.call(void 0, signer.secret, projectId, environment, chainStr);
+  const derivedAddress = deriveServerSignerAddress(derivedKeyBytes, chain);
+  return { derivedKeyBytes, derivedAddress };
+}
+
+
+
+
+exports.deriveServerSignerAddress = deriveServerSignerAddress; exports.deriveServerSignerDetails = deriveServerSignerDetails;

package/dist/{chunk-PUO4QNXH.js → chunk-JO7QKDU4.js}

@@ -1,10 +1,10 @@
 import {
   DEFAULT_EVENT_OPTIONS,
   NonCustodialSigner
-} from "./chunk-U3NV7UY7.js";
+} from "./chunk-LDVEJ2XZ.js";
 import {
   walletsLogger
-} from "./chunk-ABMZ3ZVN.js";
+} from "./chunk-SIP7NNGL.js";
 import {
   __async
 } from "./chunk-ASE2FXWP.js";

package/dist/{chunk-KQH5ZXJ4.js → chunk-JP6227LZ.js}

@@ -4,20 +4,23 @@ import {
 } from "./chunk-ZP4ZZCIE.js";
 import {
   Wallet
-} from "./chunk-FHMKNG62.js";
+} from "./chunk-CUE4X7Y4.js";
 import {
   assembleSigner
-} from "./chunk-T2XUADHW.js";
+} from "./chunk-QPVKMB34.js";
+import {
+  deriveServerSignerDetails
+} from "./chunk-4MEGQR3I.js";
 import {
   validateChainForEnvironment
-} from "./chunk-2WBSPOWU.js";
+} from "./chunk-NBBOYFQW.js";
 import {
   WalletCreationError,
   WalletNotAvailableError
 } from "./chunk-SGINWAB6.js";
 import {
   walletsLogger
-} from "./chunk-ABMZ3ZVN.js";
+} from "./chunk-SIP7NNGL.js";
 import {
   __async,
   __decorateClass,
@@ -88,19 +91,35 @@ var WalletFactory = class {
   }
   createWalletInternal(args) {
     return __async(this, null, function* () {
-      var _a, _b, _c, _d, _e;
+      var _a, _b, _c, _d, _e, _f;
       yield (_c = (_b = (_a = args.options) == null ? void 0 : _a.experimental_callbacks) == null ? void 0 : _b.onWalletCreationStart) == null ? void 0 : _c.call(_b);
       walletsLogger.info("walletFactory.createWallet.start");
       this.mutateSignerFromCustomAuth(args, true);
-      const adminSigner = args.signer.type === "passkey" ? yield this.createPasskeyAdminSigner(args.signer) : args.signer;
+      let adminSigner;
+      const delegatedSigners = (_d = args.delegatedSigners) == null ? void 0 : _d.map((ds) => ({
+        signer: typeof ds.signer === "object" && ds.signer.type === "server" ? `server:${deriveServerSignerDetails(ds.signer, args.chain, this.apiClient.projectId, this.apiClient.environment).derivedAddress}` : ds.signer
+      }));
+      if (args.signer.type === "passkey") {
+        adminSigner = yield this.createPasskeyAdminSigner(args.signer);
+      } else if (args.signer.type === "server") {
+        const { derivedAddress } = deriveServerSignerDetails(
+          args.signer,
+          args.chain,
+          this.apiClient.projectId,
+          this.apiClient.environment
+        );
+        adminSigner = { type: "server", address: derivedAddress };
+      } else {
+        adminSigner = args.signer;
+      }
       const walletResponse = yield this.apiClient.createWallet({
         type: "smart",
         chainType: this.getChainType(args.chain),
         config: __spreadValues(__spreadValues({
           adminSigner
-        }, (args == null ? void 0 : args.plugins) ? { plugins: args.plugins } : {}), args.delegatedSigners != null ? { delegatedSigners: args.delegatedSigners } : {}),
-        owner: (_d = args.owner) != null ? _d : void 0,
-        alias: (_e = args.alias) != null ? _e : void 0
+        }, (args == null ? void 0 : args.plugins) ? { plugins: args.plugins } : {}), delegatedSigners != null ? { delegatedSigners } : {}),
+        owner: (_e = args.owner) != null ? _e : void 0,
+        alias: (_f = args.alias) != null ? _f : void 0
       });
       if ("error" in walletResponse) {
         walletsLogger.error("walletFactory.createWallet.error", {
@@ -116,7 +135,7 @@ var WalletFactory = class {
   }
   createWalletInstance(walletResponse, args) {
     this.validateExistingWalletConfig(walletResponse, args);
-    const signerConfig = this.toInternalSignerConfig(walletResponse, args.signer, args.options);
+    const signerConfig = this.toInternalSignerConfig(walletResponse, args.signer, args.chain, args.options);
     return new Wallet(
       {
         chain: args.chain,
@@ -129,8 +148,8 @@ var WalletFactory = class {
       this.apiClient
     );
   }
-  toInternalSignerConfig(walletResponse, signerArgs, options) {
-    var _a, _b, _c, _d, _e, _f;
+  toInternalSignerConfig(walletResponse, signerArgs, chain, options) {
+    var _a, _b, _c, _d, _e, _f, _g;
     if (!(walletResponse.chainType === "evm" || walletResponse.chainType === "solana" || walletResponse.chainType === "stellar")) {
       throw new WalletCreationError(`Wallet type ${walletResponse.chainType} is not supported`);
     }
@@ -165,8 +184,31 @@ var WalletFactory = class {
           onCreatePasskey: signerArgs.onCreatePasskey,
           onSignWithPasskey: signerArgs.onSignWithPasskey
         };
+      case "server": {
+        const serverAdminSigner = (_e = walletResponse.config) == null ? void 0 : _e.adminSigner;
+        if ((serverAdminSigner == null ? void 0 : serverAdminSigner.type) !== "server") {
+          throw new WalletCreationError("Server signer expects a server admin signer on the wallet");
+        }
+        const { derivedKeyBytes, derivedAddress } = deriveServerSignerDetails(
+          signerArgs,
+          chain,
+          this.apiClient.projectId,
+          this.apiClient.environment
+        );
+        if (serverAdminSigner.address !== derivedAddress) {
+          throw new WalletCreationError(
+            `Server signer address ${derivedAddress} does not match the wallet's admin signer address`
+          );
+        }
+        return {
+          type: "server",
+          derivedKeyBytes,
+          locator: serverAdminSigner.locator,
+          address: derivedAddress
+        };
+      }
       case "email": {
-        if (((_e = walletResponse.config) == null ? void 0 : _e.adminSigner.type) !== "email") {
+        if (((_f = walletResponse.config) == null ? void 0 : _f.adminSigner.type) !== "email") {
           throw new WalletCreationError("Email signer does not match the wallet's signer type");
         }
         const { locator, email, address } = walletResponse.config.adminSigner;
@@ -181,7 +223,7 @@ var WalletFactory = class {
         };
       }
       case "phone": {
-        if (((_f = walletResponse.config) == null ? void 0 : _f.adminSigner.type) !== "phone") {
+        if (((_g = walletResponse.config) == null ? void 0 : _g.adminSigner.type) !== "phone") {
           throw new WalletCreationError("Phone signer does not match the wallet's signer type");
         }
         const { locator, phone, address } = walletResponse.config.adminSigner;
@@ -263,10 +305,10 @@ var WalletFactory = class {
       compareSignerConfigs(adminSignerArgs, existingWalletSigner);
     }
     if (args.delegatedSigners != null) {
-      this.validateDelegatedSigners(existingWallet, args.delegatedSigners);
+      this.validateDelegatedSigners(existingWallet, args.delegatedSigners, args.chain);
     }
   }
-  validateDelegatedSigners(existingWallet, inputDelegatedSigners) {
+  validateDelegatedSigners(existingWallet, inputDelegatedSigners, chain) {
     var _a;
     const existingDelegatedSigners = (_a = existingWallet == null ? void 0 : existingWallet.config) == null ? void 0 : _a.delegatedSigners;
     if (inputDelegatedSigners.length === 0) {
@@ -278,13 +320,14 @@ var WalletFactory = class {
       );
     }
     for (const argSigner of inputDelegatedSigners) {
+      const resolvedSigner = typeof argSigner.signer === "object" && argSigner.signer.type === "server" ? `server:${deriveServerSignerDetails(argSigner.signer, chain, this.apiClient.projectId, this.apiClient.environment).derivedAddress}` : argSigner.signer;
       const matchingExistingSigner = existingDelegatedSigners.find(
-        (existingSigner) => existingSigner.locator === argSigner.signer
+        (existingSigner) => existingSigner.locator === resolvedSigner
       );
       if (matchingExistingSigner == null) {
         const walletSigners = existingDelegatedSigners.map((s) => s.locator).join(", ");
         throw new WalletCreationError(
-          `Delegated signer '${argSigner.signer}' does not exist in wallet "${existingWallet.address}". Available delegated signers: ${walletSigners}. ${DELEGATED_SIGNER_MISMATCH_ERROR}`
+          `Delegated signer '${resolvedSigner}' does not exist in wallet "${existingWallet.address}". Available delegated signers: ${walletSigners}. ${DELEGATED_SIGNER_MISMATCH_ERROR}`
         );
       }
     }