feat: add key export helper (#2434)

* feat: add key export helper

Re-introduce exportPrivateKey and experimental_multiOwnerExportPrivateKey
methods to BaseSignerClient and BaseAlchemySigner.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: remove experimental_multiOwnerExportPrivateKey

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: florrdv

aa-sdk/core/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/core/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/infra/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/logging/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/plugingen/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/privy-integration/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/react-native/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/react/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.85.0";
+export const VERSION = "4.86.1";

account-kit/signer/src/base.ts

@@ -1051,6 +1051,16 @@ export abstract class BaseAlchemySigner<TClient extends BaseSignerClient>
     return this.inner.exportWallet(params);
   };
 
+  /**
+   * Exports a private key for a given account
+   *
+   * @param {ExportPrivateKeyParams} opts the parameters for the export
+   * @returns {Promise<string>} the private key
+   */
+  exportPrivateKey: TClient["exportPrivateKey"] = (opts) => {
+    return this.inner.exportPrivateKey(opts);
+  };
+
   /**
    * Exports a private key for a given account encrypted with the provided public key
    *

account-kit/signer/src/client/base.ts

@@ -7,6 +7,7 @@ import {
   recoverPublicKey,
   serializeSignature,
   sha256,
+  toHex,
   fromHex,
   type Address,
   type Hex,
@@ -16,6 +17,7 @@ import {
   OAuthProvidersError,
   UnsupportedFeatureError,
 } from "../errors.js";
+import { decryptExportBundle } from "@turnkey/crypto";
 import { getDefaultProviderCustomization } from "../oauth.js";
 import type { OauthMode } from "../signer.js";
 import { base64UrlEncode } from "../utils/base64UrlEncode.js";
@@ -59,6 +61,7 @@ import type {
 import { VERSION } from "../version.js";
 import { secp256k1 } from "@noble/curves/secp256k1";
 import { Point } from "@noble/secp256k1";
+import { p256 } from "@noble/curves/p256";
 
 export interface BaseSignerClientParams {
   stamper: TurnkeyClient["stamper"];
@@ -1562,6 +1565,42 @@ export abstract class BaseSignerClient<
     };
   };
 
+  /**
+   * Exports a private key for a given account
+   *
+   * @param {ExportPrivateKeyParams} opts the parameters for the export
+   * @returns {Promise<string>} the private key
+   */
+  public exportPrivateKey = async (
+    opts: ExportPrivateKeyParams,
+  ): Promise<string> => {
+    if (!this.user) {
+      throw new NotAuthenticatedError();
+    }
+
+    const targetPrivateKey = p256.utils.randomPrivateKey();
+    const targetPublicKey = p256.getPublicKey(targetPrivateKey, false);
+    const orgId = opts.orgId ?? this.user.orgId;
+    const keyFormat = opts.type === "ETHEREUM" ? "HEXADECIMAL" : "SOLANA";
+
+    const { exportBundle } = await this.exportPrivateKeyEncrypted({
+      type: opts.type,
+      client: opts.client ?? this.turnkeyClient,
+      orgId: orgId,
+      encryptWith: toHex(targetPublicKey).slice(2),
+    });
+
+    const decrypted = await decryptExportBundle({
+      exportBundle,
+      embeddedKey: toHex(targetPrivateKey).slice(2),
+      organizationId: orgId,
+      returnMnemonic: false,
+      keyFormat,
+    });
+
+    return decrypted;
+  };
+
   /**
    * Exports a private key for a given account in a multi-owner org
    *