@crossmint/wallets-sdk 0.20.2 → 0.21.1

package/dist/{chunk-PM7BGATN.cjs → chunk-LIUDLEBE.cjs}

@@ -1,9 +1,12 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkPOG76HDDcjs = require('./chunk-POG76HDD.cjs');
+var _chunkJUS5BKF2cjs = require('./chunk-JUS5BKF2.cjs');
 
 
-var _chunkWDZY4PP4cjs = require('./chunk-WDZY4PP4.cjs');
+var _chunkJD77GNRZcjs = require('./chunk-JD77GNRZ.cjs');
+
+
+var _chunkUBWFRFQ6cjs = require('./chunk-UBWFRFQ6.cjs');
 
 
 
@@ -11,7 +14,7 @@ var _chunkWDZY4PP4cjs = require('./chunk-WDZY4PP4.cjs');
 var _chunkXC2V34TScjs = require('./chunk-XC2V34TS.cjs');
 
 
-var _chunkJREZWZ2Scjs = require('./chunk-JREZWZ2S.cjs');
+var _chunkBJQHHI7Kcjs = require('./chunk-BJQHHI7K.cjs');
 
 
 
@@ -20,7 +23,7 @@ var _chunkUO2J2ZB2cjs = require('./chunk-UO2J2ZB2.cjs');
 // src/wallets/evm.ts
 var _viem = require('viem');
 var _commonsdkbase = require('@crossmint/common-sdk-base');
-var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
+var _EVMWallet = class _EVMWallet extends _chunkJUS5BKF2cjs.Wallet {
   constructor(wallet) {
     super(
       {
@@ -28,10 +31,10 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
         address: wallet.address,
         owner: wallet.owner,
         signer: wallet.signer,
-        options: _chunkPOG76HDDcjs.Wallet.getOptions(wallet),
+        options: _chunkJUS5BKF2cjs.Wallet.getOptions(wallet),
         alias: wallet.alias
       },
-      _chunkPOG76HDDcjs.Wallet.getApiClient(wallet)
+      _chunkJUS5BKF2cjs.Wallet.getApiClient(wallet)
     );
   }
   static from(wallet) {
@@ -43,12 +46,12 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
   sendTransaction(params) {
     return _chunkUO2J2ZB2cjs.__async.call(void 0, this, null, function* () {
       var _a;
-      _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.sendTransaction.start");
+      _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.sendTransaction.start");
       yield this.preAuthIfNeeded();
       const builtTransaction = this.buildTransaction(params);
       const createdTransaction = yield this.createTransaction(builtTransaction, params.options);
       if ((_a = params.options) == null ? void 0 : _a.experimental_prepareOnly) {
-        _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.sendTransaction.prepared", {
+        _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.sendTransaction.prepared", {
           transactionId: createdTransaction.id
         });
         return {
@@ -58,7 +61,7 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
         };
       }
       const result = yield this.approveTransactionAndWait(createdTransaction.id);
-      _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.sendTransaction.success", {
+      _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.sendTransaction.success", {
         transactionId: createdTransaction.id,
         hash: result.hash
       });
@@ -68,7 +71,7 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
   signMessage(params) {
     return _chunkUO2J2ZB2cjs.__async.call(void 0, this, null, function* () {
       var _a;
-      _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.signMessage.start");
+      _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.signMessage.start");
       yield this.preAuthIfNeeded();
       const signatureCreationResponse = yield this.apiClient.createSignature(this.walletLocator, {
         type: "message",
@@ -79,11 +82,11 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
         }
       });
       if ("error" in signatureCreationResponse) {
-        _chunkJREZWZ2Scjs.walletsLogger.error("evmWallet.signMessage.error", { error: signatureCreationResponse });
+        _chunkBJQHHI7Kcjs.walletsLogger.error("evmWallet.signMessage.error", { error: signatureCreationResponse });
         throw new (0, _chunkXC2V34TScjs.SignatureNotCreatedError)(JSON.stringify(signatureCreationResponse));
       }
       if ((_a = params.options) == null ? void 0 : _a.experimental_prepareOnly) {
-        _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.signMessage.prepared", {
+        _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.signMessage.prepared", {
           signatureId: signatureCreationResponse.id
         });
         return {
@@ -92,23 +95,23 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
         };
       }
       const result = yield this.approveSignatureAndWait(signatureCreationResponse.id);
-      _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.signMessage.success", { signatureId: signatureCreationResponse.id });
+      _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.signMessage.success", { signatureId: signatureCreationResponse.id });
       return result;
     });
   }
   signTypedData(params) {
     return _chunkUO2J2ZB2cjs.__async.call(void 0, this, null, function* () {
       var _a;
-      _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.signTypedData.start");
+      _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.signTypedData.start");
       yield this.preAuthIfNeeded();
       const { domain, message, primaryType, types, chain } = params;
       if (!domain || !message || !types || !chain) {
-        _chunkJREZWZ2Scjs.walletsLogger.error("evmWallet.signTypedData.error", { error: "Invalid typed data" });
+        _chunkBJQHHI7Kcjs.walletsLogger.error("evmWallet.signTypedData.error", { error: "Invalid typed data" });
         throw new (0, _chunkXC2V34TScjs.InvalidTypedDataError)("Invalid typed data");
       }
       const { name, version, chainId, verifyingContract, salt } = domain;
       if (!name || !version || !chainId || !verifyingContract) {
-        _chunkJREZWZ2Scjs.walletsLogger.error("evmWallet.signTypedData.error", { error: "Invalid typed data domain" });
+        _chunkBJQHHI7Kcjs.walletsLogger.error("evmWallet.signTypedData.error", { error: "Invalid typed data domain" });
         throw new (0, _chunkXC2V34TScjs.InvalidTypedDataError)("Invalid typed data domain");
       }
       const signatureCreationResponse = yield this.apiClient.createSignature(this.walletLocator, {
@@ -131,11 +134,11 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
         }
       });
       if ("error" in signatureCreationResponse) {
-        _chunkJREZWZ2Scjs.walletsLogger.error("evmWallet.signTypedData.error", { error: signatureCreationResponse });
+        _chunkBJQHHI7Kcjs.walletsLogger.error("evmWallet.signTypedData.error", { error: signatureCreationResponse });
         throw new (0, _chunkXC2V34TScjs.SignatureNotCreatedError)(JSON.stringify(signatureCreationResponse));
       }
       if ((_a = params.options) == null ? void 0 : _a.experimental_prepareOnly) {
-        _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.signTypedData.prepared", {
+        _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.signTypedData.prepared", {
           signatureId: signatureCreationResponse.id
         });
         return {
@@ -144,7 +147,7 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
         };
       }
       const result = yield this.approveSignatureAndWait(signatureCreationResponse.id);
-      _chunkJREZWZ2Scjs.walletsLogger.info("evmWallet.signTypedData.success", { signatureId: signatureCreationResponse.id });
+      _chunkBJQHHI7Kcjs.walletsLogger.info("evmWallet.signTypedData.success", { signatureId: signatureCreationResponse.id });
       return result;
     });
   }
@@ -157,13 +160,19 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
     var _a;
     return _viem.createPublicClient.call(void 0, {
       transport: (_a = params == null ? void 0 : params.transport) != null ? _a : _viem.http.call(void 0, ),
-      chain: _chunkWDZY4PP4cjs.toViemChain.call(void 0, this.chain)
+      chain: _chunkUBWFRFQ6cjs.toViemChain.call(void 0, this.chain)
     });
   }
   createTransaction(transaction, options) {
     return _chunkUO2J2ZB2cjs.__async.call(void 0, this, null, function* () {
-      var _a;
-      const signer = (_a = options == null ? void 0 : options.experimental_signer) != null ? _a : this.signer.locator();
+      let signer;
+      if ((options == null ? void 0 : options.experimental_signer) == null) {
+        signer = this.signer.locator();
+      } else if (typeof options.experimental_signer === "string") {
+        signer = options.experimental_signer;
+      } else {
+        signer = `server:${_chunkJD77GNRZcjs.deriveServerSignerDetails.call(void 0, options.experimental_signer, this.chain, this.apiClient.projectId, this.apiClient.environment).derivedAddress}`;
+      }
       const transactionCreationResponse = yield this.apiClient.createTransaction(this.walletLocator, {
         params: {
           signer,
@@ -205,7 +214,7 @@ var _EVMWallet = class _EVMWallet extends _chunkPOG76HDDcjs.Wallet {
 };
 _chunkUO2J2ZB2cjs.__decorateClass.call(void 0, [
   _commonsdkbase.WithLoggerContext.call(void 0, {
-    logger: _chunkJREZWZ2Scjs.walletsLogger,
+    logger: _chunkBJQHHI7Kcjs.walletsLogger,
     methodName: "evmWallet.sendTransaction",
     buildContext(thisArg) {
       return { chain: thisArg.chain, address: thisArg.address };
@@ -214,7 +223,7 @@ _chunkUO2J2ZB2cjs.__decorateClass.call(void 0, [
 ], _EVMWallet.prototype, "sendTransaction", 1);
 _chunkUO2J2ZB2cjs.__decorateClass.call(void 0, [
   _commonsdkbase.WithLoggerContext.call(void 0, {
-    logger: _chunkJREZWZ2Scjs.walletsLogger,
+    logger: _chunkBJQHHI7Kcjs.walletsLogger,
     methodName: "evmWallet.signMessage",
     buildContext(thisArg) {
       return { chain: thisArg.chain, address: thisArg.address };
@@ -223,7 +232,7 @@ _chunkUO2J2ZB2cjs.__decorateClass.call(void 0, [
 ], _EVMWallet.prototype, "signMessage", 1);
 _chunkUO2J2ZB2cjs.__decorateClass.call(void 0, [
   _commonsdkbase.WithLoggerContext.call(void 0, {
-    logger: _chunkJREZWZ2Scjs.walletsLogger,
+    logger: _chunkBJQHHI7Kcjs.walletsLogger,
     methodName: "evmWallet.signTypedData",
     buildContext(thisArg) {
       return { chain: thisArg.chain, address: thisArg.address };

package/dist/{chunk-6UMJYMAY.js → chunk-LQWOPRRW.js}

@@ -1,10 +1,10 @@
 import {
   DEFAULT_EVENT_OPTIONS,
   NonCustodialSigner
-} from "./chunk-U3NV7UY7.js";
+} from "./chunk-LDVEJ2XZ.js";
 import {
   walletsLogger
-} from "./chunk-ABMZ3ZVN.js";
+} from "./chunk-SIP7NNGL.js";
 import {
   __async
 } from "./chunk-ASE2FXWP.js";

package/dist/chunk-M6E6A543.cjs

@@ -0,0 +1,316 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }// src/utils/stellar.ts
+var _tweetnacl = require('tweetnacl'); var _tweetnacl2 = _interopRequireDefault(_tweetnacl);
+var ED25519_PUBLIC_KEY_VERSION_BYTE = 6 << 3;
+var BASE32_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+var CRC16_TABLE = [
+  0,
+  4129,
+  8258,
+  12387,
+  16516,
+  20645,
+  24774,
+  28903,
+  33032,
+  37161,
+  41290,
+  45419,
+  49548,
+  53677,
+  57806,
+  61935,
+  4657,
+  528,
+  12915,
+  8786,
+  21173,
+  17044,
+  29431,
+  25302,
+  37689,
+  33560,
+  45947,
+  41818,
+  54205,
+  50076,
+  62463,
+  58334,
+  9314,
+  13379,
+  1056,
+  5121,
+  25830,
+  29895,
+  17572,
+  21637,
+  42346,
+  46411,
+  34088,
+  38153,
+  58862,
+  62927,
+  50604,
+  54669,
+  13907,
+  9842,
+  5649,
+  1584,
+  30423,
+  26358,
+  22165,
+  18100,
+  46939,
+  42874,
+  38681,
+  34616,
+  63455,
+  59390,
+  55197,
+  51132,
+  18628,
+  22757,
+  26758,
+  30887,
+  2112,
+  6241,
+  10242,
+  14371,
+  51660,
+  55789,
+  59790,
+  63919,
+  35144,
+  39273,
+  43274,
+  47403,
+  23285,
+  19156,
+  31415,
+  27286,
+  6769,
+  2640,
+  14899,
+  10770,
+  56317,
+  52188,
+  64447,
+  60318,
+  39801,
+  35672,
+  47931,
+  43802,
+  27814,
+  31879,
+  19684,
+  23749,
+  11298,
+  15363,
+  3168,
+  7233,
+  60846,
+  64911,
+  52716,
+  56781,
+  44330,
+  48395,
+  36200,
+  40265,
+  32407,
+  28342,
+  24277,
+  20212,
+  15891,
+  11826,
+  7761,
+  3696,
+  65439,
+  61374,
+  57309,
+  53244,
+  48923,
+  44858,
+  40793,
+  36728,
+  37256,
+  33193,
+  45514,
+  41451,
+  53516,
+  49453,
+  61774,
+  57711,
+  4224,
+  161,
+  12482,
+  8419,
+  20484,
+  16421,
+  28742,
+  24679,
+  33721,
+  37784,
+  41979,
+  46042,
+  49981,
+  54044,
+  58239,
+  62302,
+  689,
+  4752,
+  8947,
+  13010,
+  16949,
+  21012,
+  25207,
+  29270,
+  46570,
+  42443,
+  38312,
+  34185,
+  62830,
+  58703,
+  54572,
+  50445,
+  13538,
+  9411,
+  5280,
+  1153,
+  29798,
+  25671,
+  21540,
+  17413,
+  42971,
+  47098,
+  34713,
+  38840,
+  59231,
+  63358,
+  50973,
+  55100,
+  9939,
+  14066,
+  1681,
+  5808,
+  26199,
+  30326,
+  17941,
+  22068,
+  55628,
+  51565,
+  63758,
+  59695,
+  39368,
+  35305,
+  47498,
+  43435,
+  22596,
+  18533,
+  30726,
+  26663,
+  6336,
+  2273,
+  14466,
+  10403,
+  52093,
+  56156,
+  60223,
+  64286,
+  35833,
+  39896,
+  43963,
+  48026,
+  19061,
+  23124,
+  27191,
+  31254,
+  2801,
+  6864,
+  10931,
+  14994,
+  64814,
+  60687,
+  56684,
+  52557,
+  48554,
+  44427,
+  40424,
+  36297,
+  31782,
+  27655,
+  23652,
+  19525,
+  15522,
+  11395,
+  7392,
+  3265,
+  61215,
+  65342,
+  53085,
+  57212,
+  44955,
+  49082,
+  36825,
+  40952,
+  28183,
+  32310,
+  20053,
+  24180,
+  11923,
+  16050,
+  3793,
+  7920
+];
+function crc16Xmodem(data) {
+  let crc = 0;
+  for (let i = 0; i < data.length; i++) {
+    const byte = data[i];
+    crc = (crc << 8 ^ CRC16_TABLE[crc >> 8 ^ byte]) & 65535;
+  }
+  const checksum = new Uint8Array(2);
+  checksum[0] = crc & 255;
+  checksum[1] = crc >> 8 & 255;
+  return checksum;
+}
+function base32Encode(data) {
+  let bits = 0;
+  let value = 0;
+  let output = "";
+  for (let i = 0; i < data.length; i++) {
+    value = value << 8 | data[i];
+    bits += 8;
+    while (bits >= 5) {
+      output += BASE32_ALPHABET[value >>> bits - 5 & 31];
+      bits -= 5;
+    }
+  }
+  if (bits > 0) {
+    output += BASE32_ALPHABET[value << 5 - bits & 31];
+  }
+  while (output.length % 8 !== 0) {
+    output += "=";
+  }
+  return output;
+}
+function encodeStellarPublicKey(publicKeyBytes) {
+  const payload = new Uint8Array(1 + publicKeyBytes.length);
+  payload[0] = ED25519_PUBLIC_KEY_VERSION_BYTE;
+  payload.set(publicKeyBytes, 1);
+  const checksum = crc16Xmodem(payload);
+  const unencoded = new Uint8Array(payload.length + 2);
+  unencoded.set(payload, 0);
+  unencoded.set(checksum, payload.length);
+  return base32Encode(unencoded);
+}
+function ed25519KeypairFromSeed(seed) {
+  const keypair = _tweetnacl2.default.sign.keyPair.fromSeed(seed);
+  return { publicKey: keypair.publicKey, secretKey: keypair.secretKey };
+}
+function ed25519Sign(message, secretKey) {
+  return _tweetnacl2.default.sign.detached(message, secretKey);
+}
+
+
+
+
+
+exports.encodeStellarPublicKey = encodeStellarPublicKey; exports.ed25519KeypairFromSeed = ed25519KeypairFromSeed; exports.ed25519Sign = ed25519Sign;

package/dist/chunk-MNHK6EQK.cjs

@@ -0,0 +1,57 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/utils/server-key-derivation.ts
+var _hkdf = require('@noble/hashes/hkdf');
+var _sha2 = require('@noble/hashes/sha2');
+var _utils = require('@noble/hashes/utils');
+var HKDF_SALT = "crossmint";
+var SECRET_PREFIX = "xmsk1_";
+function deriveKeyBytes(secret, projectId, environment, chain) {
+  const rawSecret = stripAndValidateSecret(secret);
+  const ikm = hexToBytes(rawSecret);
+  const algorithm = getAlgorithmForChain(chain);
+  const info = `${projectId}:${environment}:${chain}-${algorithm}`;
+  return _hkdf.hkdf.call(void 0, _sha2.sha256, ikm, HKDF_SALT, info, 32);
+}
+function deriveAlias(secret, projectId, environment, chain) {
+  const rawSecret = stripAndValidateSecret(secret);
+  const ikm = hexToBytes(rawSecret);
+  const info = `${projectId}:${environment}:${chain}-alias`;
+  const derived = _hkdf.hkdf.call(void 0, _sha2.sha256, ikm, HKDF_SALT, info, 17);
+  return `s-${_utils.bytesToHex.call(void 0, derived).slice(0, 34)}`;
+}
+var EXPECTED_SECRET_LENGTH = 64;
+function stripAndValidateSecret(secret) {
+  const rawSecret = secret.startsWith(SECRET_PREFIX) ? secret.slice(SECRET_PREFIX.length) : secret;
+  if (rawSecret.length !== EXPECTED_SECRET_LENGTH) {
+    throw new Error(
+      `Invalid server signer secret: expected ${EXPECTED_SECRET_LENGTH}-char hex string (256-bit), got ${rawSecret.length} chars`
+    );
+  }
+  return rawSecret;
+}
+function getAlgorithmForChain(chain) {
+  if (chain === "solana") {
+    return "ed25519";
+  }
+  if (chain === "stellar") {
+    return "ed25519";
+  }
+  return "secp256k1";
+}
+function hexToBytes(hex) {
+  if (hex.length % 2 !== 0) {
+    throw new Error(`Invalid hex string: odd length (${hex.length})`);
+  }
+  if (!/^[0-9a-fA-F]+$/.test(hex)) {
+    throw new Error("Invalid hex string: contains non-hex characters");
+  }
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < hex.length; i += 2) {
+    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+  }
+  return bytes;
+}
+
+
+
+
+exports.deriveKeyBytes = deriveKeyBytes; exports.deriveAlias = deriveAlias;

package/dist/{chunk-2WBSPOWU.js → chunk-NBBOYFQW.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-SGINWAB6.js";
 import {
   walletsLogger
-} from "./chunk-ABMZ3ZVN.js";
+} from "./chunk-SIP7NNGL.js";
 
 // src/chains/chains.ts
 import { APIKeyEnvironmentPrefix, BlockchainIncludingTestnet as Blockchain } from "@crossmint/common-sdk-base";

package/dist/{chunk-A6E67ZZP.js → chunk-OBKOVQQJ.js}

@@ -1,9 +1,12 @@
 import {
   Wallet
-} from "./chunk-FHMKNG62.js";
+} from "./chunk-CUE4X7Y4.js";
+import {
+  deriveServerSignerDetails
+} from "./chunk-4MEGQR3I.js";
 import {
   toViemChain
-} from "./chunk-2WBSPOWU.js";
+} from "./chunk-NBBOYFQW.js";
 import {
   InvalidTypedDataError,
   SignatureNotCreatedError,
@@ -11,7 +14,7 @@ import {
 } from "./chunk-SGINWAB6.js";
 import {
   walletsLogger
-} from "./chunk-ABMZ3ZVN.js";
+} from "./chunk-SIP7NNGL.js";
 import {
   __async,
   __decorateClass
@@ -162,8 +165,14 @@ var _EVMWallet = class _EVMWallet extends Wallet {
   }
   createTransaction(transaction, options) {
     return __async(this, null, function* () {
-      var _a;
-      const signer = (_a = options == null ? void 0 : options.experimental_signer) != null ? _a : this.signer.locator();
+      let signer;
+      if ((options == null ? void 0 : options.experimental_signer) == null) {
+        signer = this.signer.locator();
+      } else if (typeof options.experimental_signer === "string") {
+        signer = options.experimental_signer;
+      } else {
+        signer = `server:${deriveServerSignerDetails(options.experimental_signer, this.chain, this.apiClient.projectId, this.apiClient.environment).derivedAddress}`;
+      }
       const transactionCreationResponse = yield this.apiClient.createTransaction(this.walletLocator, {
         params: {
           signer,

package/dist/{chunk-TYQ4YIP7.js → chunk-PC3YMFJM.js}

@@ -1,6 +1,6 @@
 // package.json
 var name = "@crossmint/wallets-sdk";
-var version = "0.20.2";
+var version = "0.21.1";
 
 // src/utils/constants.ts
 var WALLETS_SERVICE = "WALLETS_SDK";

package/dist/chunk-Q52MMQSC.js

@@ -0,0 +1,57 @@
+// src/utils/server-key-derivation.ts
+import { hkdf } from "@noble/hashes/hkdf";
+import { sha256 } from "@noble/hashes/sha2";
+import { bytesToHex } from "@noble/hashes/utils";
+var HKDF_SALT = "crossmint";
+var SECRET_PREFIX = "xmsk1_";
+function deriveKeyBytes(secret, projectId, environment, chain) {
+  const rawSecret = stripAndValidateSecret(secret);
+  const ikm = hexToBytes(rawSecret);
+  const algorithm = getAlgorithmForChain(chain);
+  const info = `${projectId}:${environment}:${chain}-${algorithm}`;
+  return hkdf(sha256, ikm, HKDF_SALT, info, 32);
+}
+function deriveAlias(secret, projectId, environment, chain) {
+  const rawSecret = stripAndValidateSecret(secret);
+  const ikm = hexToBytes(rawSecret);
+  const info = `${projectId}:${environment}:${chain}-alias`;
+  const derived = hkdf(sha256, ikm, HKDF_SALT, info, 17);
+  return `s-${bytesToHex(derived).slice(0, 34)}`;
+}
+var EXPECTED_SECRET_LENGTH = 64;
+function stripAndValidateSecret(secret) {
+  const rawSecret = secret.startsWith(SECRET_PREFIX) ? secret.slice(SECRET_PREFIX.length) : secret;
+  if (rawSecret.length !== EXPECTED_SECRET_LENGTH) {
+    throw new Error(
+      `Invalid server signer secret: expected ${EXPECTED_SECRET_LENGTH}-char hex string (256-bit), got ${rawSecret.length} chars`
+    );
+  }
+  return rawSecret;
+}
+function getAlgorithmForChain(chain) {
+  if (chain === "solana") {
+    return "ed25519";
+  }
+  if (chain === "stellar") {
+    return "ed25519";
+  }
+  return "secp256k1";
+}
+function hexToBytes(hex) {
+  if (hex.length % 2 !== 0) {
+    throw new Error(`Invalid hex string: odd length (${hex.length})`);
+  }
+  if (!/^[0-9a-fA-F]+$/.test(hex)) {
+    throw new Error("Invalid hex string: contains non-hex characters");
+  }
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < hex.length; i += 2) {
+    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+  }
+  return bytes;
+}
+
+export {
+  deriveKeyBytes,
+  deriveAlias
+};