@dynamic-labs/sdk-react-core 2.1.0-alpha.10 → 2.1.0-alpha.12

package/src/lib/utils/hooks/useEmbeddedWallet/useEmbeddedWallet.js

@@ -31,6 +31,7 @@ import '../../../context/UserWalletsContext/UserWalletsContext.js';
 import '../../../context/VerificationContext/VerificationContext.js';
 import 'react-dom';
 import { useWalletContext } from '../../../context/WalletContext/WalletContext.js';
+import { useIsTurnkeyWallet } from '../useIsTurnkeyWallet/useIsTurnkeyWallet.js';
 import { useSecureEnclaveEmbeddedWallet } from './useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.js';
 import { useMPCEmbeddedWallet } from './useMPCEmbeddedWallet/useMPCEmbeddedWallet.js';
 import '../../../context/ThemeContext/ThemeContext.js';
@@ -78,21 +79,33 @@ import { useInternalDynamicContext } from '../../../context/DynamicContext/useDy
 /**
  * @returns {
  *  createEmbeddedWallet, - creates Dynamic embedded wallet according to the settings
+ *  createOrRestoreSession, - creates or restores session for the embedded wallet
+ *  createPasskey, - creates passkey for the embedded wallet
  *  createPassword, - creates MPC embedded wallet password
+ *  getPasskeys, - gets passkeys for the embedded wallet
  *  isLoadingEmbeddedWallet, - loading state of the embedded wallet
+ *  isSessionActive, - checks if the session is active for the embedded wallet
+ *  revealWalletKey, - reveals the private key or recovery phrase for the embedded wallet
+ *  sendOneTimeCode, - sends one time code for the embedded wallet
  *  userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 const useEmbeddedWallet = () => {
-    const { onboardingOnlyJwt } = useInternalDynamicContext();
-    const { createEmbeddedWallet: createCoinbaseMPCWallet, canCreateMPCWallet, createPassword, } = useMPCEmbeddedWallet();
-    const { createEmbeddedWallet: createTurnkeyEmbeddedWallet, createOrRestoreSession, createPasskey, getPasskeys, isSessionActive, sendOneTimeCode, } = useSecureEnclaveEmbeddedWallet();
+    const { onboardingOnlyJwt, user } = useInternalDynamicContext();
+    const { isTurnkeyWallet } = useIsTurnkeyWallet();
+    const { createEmbeddedWallet: createCoinbaseMPCWallet, canCreateMPCWallet, createPassword, revealEmbeddedWalletKey: reveaCoinbaseMPCEmbeddedWalletKey, } = useMPCEmbeddedWallet();
+    const { createEmbeddedWallet: createTurnkeyEmbeddedWallet, createOrRestoreSession, createPasskey, revealEmbeddedWalletKey: revealTurnkeyEmbeddedWalletKey, getPasskeys, isSessionActive, sendOneTimeCode, } = useSecureEnclaveEmbeddedWallet();
     const { isLoadingEmbeddedWallet } = useWalletContext();
+    /**
+     * Checks if user has some embedded wallet
+     * @returns boolean - true if the user has an embedded wallet
+     */
     const userHasEmbeddedWallet = () => hasEmbeddedWallet(getAuthToken() || onboardingOnlyJwt);
     /**
      * Creates Dynamic embedded wallet according to the settings
      * @param chains - array of chains to create the wallet for
      * @param options - options for the wallet creation
+     * @returns Promise<Wallet | undefined> - created wallet object
      */
     const createEmbeddedWallet = useCallback((chains, options) => __awaiter(void 0, void 0, void 0, function* () {
         if (yield canCreateMPCWallet(chains)) {
@@ -102,6 +115,23 @@ const useEmbeddedWallet = () => {
         const wallet = yield createTurnkeyEmbeddedWallet(chains, options);
         return wallet;
     }), [canCreateMPCWallet, createCoinbaseMPCWallet, createTurnkeyEmbeddedWallet]);
+    /**
+     * Reveals the private key or recovery phrase for the embedded wallet
+     * @param options - options for revealing the wallet key
+     * @returns Promise<boolean> - true if the key was revealed successfully
+     */
+    const revealWalletKey = (options) => __awaiter(void 0, void 0, void 0, function* () {
+        if (!user) {
+            throw new Error('User is not logged in');
+        }
+        if (!userHasEmbeddedWallet()) {
+            throw new Error('Embedded wallet not found');
+        }
+        if (isTurnkeyWallet) {
+            return revealTurnkeyEmbeddedWalletKey(options);
+        }
+        return reveaCoinbaseMPCEmbeddedWalletKey();
+    });
     return {
         createEmbeddedWallet,
         createOrRestoreSession,
@@ -110,6 +140,7 @@ const useEmbeddedWallet = () => {
         getPasskeys,
         isLoadingEmbeddedWallet,
         isSessionActive,
+        revealWalletKey,
         sendOneTimeCode,
         userHasEmbeddedWallet,
     };

package/src/lib/utils/hooks/useEmbeddedWallet/useMPCEmbeddedWallet/useMPCEmbeddedWallet.cjs

@@ -6,6 +6,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 var _tslib = require('../../../../../../_virtual/_tslib.cjs');
 var React = require('react');
 var walletConnectorCore = require('@dynamic-labs/wallet-connector-core');
+var utils = require('@dynamic-labs/utils');
 require('../../../../context/DynamicContext/DynamicContext.cjs');
 require('@dynamic-labs/sdk-api-core');
 require('../../../../shared/logger.cjs');
@@ -16,7 +17,6 @@ require('@dynamic-labs/wallet-book');
 require('../../../constants/colors.cjs');
 require('../../../constants/values.cjs');
 require('../../../../shared/utils/classes/storage/localStorage.cjs');
-require('@dynamic-labs/utils');
 require('../../../../shared/consts/index.cjs');
 require('../../../../events/dynamicEvents.cjs');
 require('../../../../context/CaptchaContext/CaptchaContext.cjs');
@@ -153,11 +153,15 @@ const useMPCEmbeddedWallet = () => {
         projectSettings,
         setIsLoadingEmbeddedWallet,
     ]);
+    const revealEmbeddedWalletKey = () => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        throw new utils.DynamicError('Coinbase MPC wallet does not support headless reveal yet');
+    });
     return {
         canCreateMPCWallet,
         createEmbeddedWallet,
         createPassword,
         isLoadingEmbeddedWallet,
+        revealEmbeddedWalletKey,
         userHasEmbeddedWallet,
     };
 };

package/src/lib/utils/hooks/useEmbeddedWallet/useMPCEmbeddedWallet/useMPCEmbeddedWallet.d.ts

@@ -13,5 +13,6 @@ export declare const useMPCEmbeddedWallet: () => {
     readonly createEmbeddedWallet: (chains?: ChainEnum[]) => Promise<Wallet | undefined>;
     readonly createPassword: (showIntro?: boolean) => Promise<string>;
     readonly isLoadingEmbeddedWallet: boolean;
+    readonly revealEmbeddedWalletKey: () => Promise<never>;
     readonly userHasEmbeddedWallet: () => boolean;
 };

package/src/lib/utils/hooks/useEmbeddedWallet/useMPCEmbeddedWallet/useMPCEmbeddedWallet.js

@@ -2,6 +2,7 @@
 import { __awaiter } from '../../../../../../_virtual/_tslib.js';
 import { useCallback } from 'react';
 import { isCoinbaseMpcWalletConnector } from '@dynamic-labs/wallet-connector-core';
+import { DynamicError } from '@dynamic-labs/utils';
 import '../../../../context/DynamicContext/DynamicContext.js';
 import '@dynamic-labs/sdk-api-core';
 import '../../../../shared/logger.js';
@@ -12,7 +13,6 @@ import '@dynamic-labs/wallet-book';
 import '../../../constants/colors.js';
 import '../../../constants/values.js';
 import '../../../../shared/utils/classes/storage/localStorage.js';
-import '@dynamic-labs/utils';
 import '../../../../shared/consts/index.js';
 import '../../../../events/dynamicEvents.js';
 import '../../../../context/CaptchaContext/CaptchaContext.js';
@@ -149,11 +149,15 @@ const useMPCEmbeddedWallet = () => {
         projectSettings,
         setIsLoadingEmbeddedWallet,
     ]);
+    const revealEmbeddedWalletKey = () => __awaiter(void 0, void 0, void 0, function* () {
+        throw new DynamicError('Coinbase MPC wallet does not support headless reveal yet');
+    });
     return {
         canCreateMPCWallet,
         createEmbeddedWallet,
         createPassword,
         isLoadingEmbeddedWallet,
+        revealEmbeddedWalletKey,
         userHasEmbeddedWallet,
     };
 };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.cjs

@@ -5,6 +5,10 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 const iframeContainerId = 'dyn-secure-enclave-container-id';
 const iframeElementId = 'dyn-secure-enclave-element-id';
+const revealIframeContainerId = 'dyn-secure-enclave-export-container-id';
+const revealIframeElementId = 'dyn-secure-enclave-export-element-id';
 
 exports.iframeContainerId = iframeContainerId;
 exports.iframeElementId = iframeElementId;
+exports.revealIframeContainerId = revealIframeContainerId;
+exports.revealIframeElementId = revealIframeElementId;

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.d.ts

@@ -1,2 +1,4 @@
 export declare const iframeContainerId = "dyn-secure-enclave-container-id";
 export declare const iframeElementId = "dyn-secure-enclave-element-id";
+export declare const revealIframeContainerId = "dyn-secure-enclave-export-container-id";
+export declare const revealIframeElementId = "dyn-secure-enclave-export-element-id";

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.js

@@ -1,5 +1,7 @@
 'use client'
 const iframeContainerId = 'dyn-secure-enclave-container-id';
 const iframeElementId = 'dyn-secure-enclave-element-id';
+const revealIframeContainerId = 'dyn-secure-enclave-export-container-id';
+const revealIframeElementId = 'dyn-secure-enclave-export-element-id';
 
-export { iframeContainerId, iframeElementId };
+export { iframeContainerId, iframeElementId, revealIframeContainerId, revealIframeElementId };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.cjs

@@ -47,11 +47,12 @@ require('../../../../context/VerificationContext/VerificationContext.cjs');
 require('react-dom');
 var useElementById = require('../../useElementById/useElementById.cjs');
 var WalletContext = require('../../../../context/WalletContext/WalletContext.cjs');
+var useIsTurnkeyWallet = require('../../useIsTurnkeyWallet/useIsTurnkeyWallet.cjs');
 var validateUserIsLoggedIn = require('../../../validations/validateUserIsLoggedIn/validateUserIsLoggedIn.cjs');
 var validateTurnkeyProviderEnabled = require('../../../validations/validateTurnkeyProviderEnabled/validateTurnkeyProviderEnabled.cjs');
 var errors = require('../../../constants/errors.cjs');
-var useIsTurnkeyWallet = require('../../useIsTurnkeyWallet/useIsTurnkeyWallet.cjs');
 var passkeyRecovery = require('../../../../views/Passkey/utils/passkeyRecovery/passkeyRecovery.cjs');
+var turnkeyExport = require('../../../../views/EmbeddedReveal/utils/turnkeyExport/turnkeyExport.cjs');
 var useTurnkey = require('./useTurnkey/useTurnkey.cjs');
 var constants = require('./constants.cjs');
 require('../../../../context/ThemeContext/ThemeContext.cjs');
@@ -105,20 +106,21 @@ var useInternalDynamicContext = require('../../../../context/DynamicContext/useD
  * getPasskeys, - gets all passkeys for the user
  * isLoadingEmbeddedWallet, - loading state of the embedded wallet
  * isSessionActive, - checks if the embedded wallet session is active
+ * revealEmbeddedWalletKey - export the recovery phrase or private key of the embedded wallet
  * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
  * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 const useSecureEnclaveEmbeddedWallet = () => {
     var _a, _b, _c, _d;
-    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, walletConnectorOptions, setUser, } = useInternalDynamicContext.useInternalDynamicContext();
+    const { projectSettings, authToken, onboardingOnlyJwt, primaryWallet, user, environmentId, walletConnectorOptions, setUser, } = useInternalDynamicContext.useInternalDynamicContext();
     const { createTurnkeyWallet } = useTurnkey.useTurnkey();
     const { hasRecoveryEmail } = useIsTurnkeyWallet.useIsTurnkeyWallet();
     const { createRootElement } = useElementById.useElementById();
     const { isLoadingEmbeddedWallet, setIsLoadingEmbeddedWallet } = WalletContext.useWalletContext();
     const wallet = getEOAWallet.getEOAWallet(primaryWallet, (user === null || user === void 0 ? void 0 : user.verifiedCredentials) || []);
     /**
-     * Checks if the user has an embedded wallet or not
+     * Checks if the user has a secure enclave embedded wallet or not
      * @returns boolean
      */
     const userHasEmbeddedWallet = React.useCallback(() => hasEmbeddedWallet.hasEmbeddedWallet(getAuthToken.getAuthToken() || onboardingOnlyJwt, 'turnkey'), [onboardingOnlyJwt]);
@@ -159,9 +161,9 @@ const useSecureEnclaveEmbeddedWallet = () => {
      * @param oneTimeCode - optional one-time code parameter. If not informed it tries to restore a session
      * @returns Promise<'session_created' | 'session_restored'> - returns a string indicating the status of the session
      */
-    const createOrRestoreSession = React.useCallback((_g) => _tslib.__awaiter(void 0, [_g], void 0, function* ({ oneTimeCode }) {
-        var _h, _j, _k, _l, _m, _o, _p;
-        const jwt = (_h = getAuthToken.getAuthToken()) !== null && _h !== void 0 ? _h : onboardingOnlyJwt;
+    const createOrRestoreSession = React.useCallback((options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _g, _h, _j, _k, _l, _m, _o;
+        const jwt = (_g = getAuthToken.getAuthToken()) !== null && _g !== void 0 ? _g : onboardingOnlyJwt;
         const { decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn(jwt);
         const turnkeyRecoveryHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
         if (turnkeyRecoveryHandler.isSessionActive()) {
@@ -169,13 +171,13 @@ const useSecureEnclaveEmbeddedWallet = () => {
         }
         const turnkeyAuthIframeContainerRef = createRootElement(constants.iframeContainerId);
         // try to restore session if possible
-        if (passkeyRecovery.canRestoreEmbeddedWalletSession((_j = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _j === void 0 ? void 0 : _j.sessionKeyDuration)) {
+        if (passkeyRecovery.canRestoreEmbeddedWalletSession((_h = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _h === void 0 ? void 0 : _h.sessionKeyDuration)) {
             try {
                 const sessionRestored = yield passkeyRecovery.restoreEmbeddedWalletSession({
                     authToken: jwt,
                     iframeContainer: turnkeyAuthIframeContainerRef.current,
                     iframeElementId: constants.iframeElementId,
-                    sessionExpiration: getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_l = (_k = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _k === void 0 ? void 0 : _k.embeddedWallets) === null || _l === void 0 ? void 0 : _l.sessionKeyDuration),
+                    sessionExpiration: getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_k = (_j = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _j === void 0 ? void 0 : _j.embeddedWallets) === null || _k === void 0 ? void 0 : _k.sessionKeyDuration),
                     wallet: primaryWallet,
                 });
                 if (sessionRestored)
@@ -185,7 +187,7 @@ const useSecureEnclaveEmbeddedWallet = () => {
                 logger.logger.error('Failed to restore embedded wallet', err);
             }
         }
-        if (!oneTimeCode) {
+        if (!(options === null || options === void 0 ? void 0 : options.oneTimeCode)) {
             throw new utils.DynamicError('One-time code is required to create a session.', errors.INVALID_REQUEST);
         }
         // tries to create a new session with the informed one-time code
@@ -193,11 +195,11 @@ const useSecureEnclaveEmbeddedWallet = () => {
         if (!userHasEmbeddedWallet() || !hasRecoveryEmail) {
             throw new utils.DynamicError('User does not have a secure enclave wallet or a verified email', errors.INVALID_WALLET_DATA);
         }
-        const organizationId = (_p = (_o = (_m = decodedJwt.verifiedCredentials) === null || _m === void 0 ? void 0 : _m.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _o === void 0 ? void 0 : _o.walletProperties) === null || _p === void 0 ? void 0 : _p.turnkeySubOrganizationId;
-        yield turnkeyRecoveryHandler.verifyRecoveryCode(oneTimeCode, organizationId);
+        const organizationId = (_o = (_m = (_l = decodedJwt.verifiedCredentials) === null || _l === void 0 ? void 0 : _l.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _m === void 0 ? void 0 : _m.walletProperties) === null || _o === void 0 ? void 0 : _o.turnkeySubOrganizationId;
+        yield turnkeyRecoveryHandler.verifyRecoveryCode(options.oneTimeCode, organizationId);
         const sessionSettings = {
             createdAt: new Date().getTime(),
-            emailCode: oneTimeCode,
+            emailCode: options.oneTimeCode,
             userId: turnkeyRecoveryHandler.recoveryUserId,
         };
         localStorage.LocalStorage.setToLS(localStorage$1.EMBEDDED_WALLET_SESSION_SETTINGS, sessionSettings);
@@ -213,15 +215,14 @@ const useSecureEnclaveEmbeddedWallet = () => {
     ]);
     /**
      * Creates a new passkey both for an existing wallet or a wallet to be created
-     * @param oneTimeCode: string | undefined,
-     *
+     * @param options - optional parameter to inform a one-time code to create a session,
      * @returns Promise<WebAuthnAttestation>
      */
-    const createPasskey = React.useCallback((_q) => _tslib.__awaiter(void 0, [_q], void 0, function* ({ oneTimeCode, }) {
-        var _r, _s;
+    const createPasskey = React.useCallback((options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _p, _q;
         const { decodedJwt, jwt } = validateUserIsLoggedIn.validateUserIsLoggedIn(getAuthToken.getAuthToken() || onboardingOnlyJwt);
         validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
-        const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_r = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _r === void 0 ? void 0 : _r.chainConfigurations, decodedJwt.verifiedCredentials);
+        const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_p = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _p === void 0 ? void 0 : _p.chainConfigurations, decodedJwt.verifiedCredentials);
         if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector)) {
             throw new utils.DynamicError('Wallet connector not found', errors.INVALID_WALLET_DATA);
         }
@@ -236,13 +237,13 @@ const useSecureEnclaveEmbeddedWallet = () => {
         if (!('id' in turnkeyWallet) || !hasEmailVC) {
             return walletConnector.getWebAuthnAttestation();
         }
-        const organizationId = (_s = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _s === void 0 ? void 0 : _s.turnkeySubOrganizationId;
+        const organizationId = (_q = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _q === void 0 ? void 0 : _q.turnkeySubOrganizationId;
         if (!organizationId) {
             throw new utils.DynamicError('No sub organization id found for the wallet', errors.INVALID_WALLET_DATA);
         }
         const turnkAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(walletConnector);
         // add new passkey to the wallet through an active session
-        yield createOrRestoreSession({ oneTimeCode });
+        yield createOrRestoreSession(options);
         const { attestation, challenge, displayName } = yield walletConnector.getWebAuthnAttestation();
         yield turnkAuthenticatorHandler.addPasskeyAuthenticator({
             attestation,
@@ -265,9 +266,7 @@ const useSecureEnclaveEmbeddedWallet = () => {
         onboardingOnlyJwt,
         projectSettings,
         setUser,
-        user === null || user === void 0 ? void 0 : user.email,
-        user === null || user === void 0 ? void 0 : user.phoneNumber,
-        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
+        user,
         walletConnectorOptions,
     ]);
     /**
@@ -275,8 +274,8 @@ const useSecureEnclaveEmbeddedWallet = () => {
      * @returns Promise<Passkey[]>
      */
     const getPasskeys = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _t;
-        const { jwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_t = getAuthToken.getAuthToken()) !== null && _t !== void 0 ? _t : onboardingOnlyJwt);
+        var _r;
+        const { jwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_r = getAuthToken.getAuthToken()) !== null && _r !== void 0 ? _r : onboardingOnlyJwt);
         const data = yield embeddedWallets.getUserPasskeys({
             environmentId: environmentId,
             userJwt: jwt,
@@ -290,15 +289,55 @@ const useSecureEnclaveEmbeddedWallet = () => {
     const isSessionActive = (_d = ((wallet === null || wallet === void 0 ? void 0 : wallet.connector) &&
         'getAuthenticatorHandler' in wallet.connector &&
         ((_c = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet.connector)) === null || _c === void 0 ? void 0 : _c.isSessionActive()))) !== null && _d !== void 0 ? _d : false;
+    /**
+     * export the recovery phrase or private key of the embedded wallet
+     * @param options - optional parameter object containing the type of key to reveal 'recoveryPhrase' | 'privateKey'
+     * and the html container id to render the iframe into
+     * @returns Promise<string> - returns the embedded wallet recovery phrase or private key
+     */
+    const revealEmbeddedWalletKey = (_s) => _tslib.__awaiter(void 0, [_s], void 0, function* ({ type, htmlContainerId, }) {
+        var _t, _u;
+        if (!user) {
+            throw new utils.DynamicError('User is not logged in', errors.USER_NOT_LOGGED_IN);
+        }
+        yield turnkeyExport.cleanupExport({
+            wallet,
+        });
+        const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_t = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _t === void 0 ? void 0 : _t.chainConfigurations, user === null || user === void 0 ? void 0 : user.verifiedCredentials);
+        const turnkeyHDWalletId = (_u = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _u === void 0 ? void 0 : _u.turnkeyHDWalletId;
+        if (type === 'recoveryPhrase' && !turnkeyHDWalletId) {
+            type = 'privateKey';
+        }
+        const iframeContainerElement = createRootElement(constants.revealIframeElementId, htmlContainerId || constants.revealIframeContainerId);
+        // hide the iframe container until the export is done
+        // since it will show unrelated turnkey content
+        iframeContainerElement.current.style.display = 'none';
+        yield turnkeyExport.initExport({
+            iframeContainer: iframeContainerElement.current,
+            iframeElementId: constants.revealIframeElementId,
+            wallet,
+        });
+        yield turnkeyExport.exportCredential({
+            address: type === 'privateKey' ? wallet === null || wallet === void 0 ? void 0 : wallet.address : undefined,
+            authToken,
+            environmentId,
+            userEmail: user === null || user === void 0 ? void 0 : user.email,
+            wallet,
+        });
+        // show the iframe container after the export is done
+        // to show the exported content only
+        iframeContainerElement.current.style.display = 'block';
+        return true;
+    });
     /**
      * Sends a one-time code to the user so they can create a session or add a new passkey
      * @returns Promise<'code_sent'>
      */
     const sendOneTimeCode = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _u, _v, _w;
-        const { jwt, decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_u = getAuthToken.getAuthToken()) !== null && _u !== void 0 ? _u : onboardingOnlyJwt);
+        var _v, _w, _x;
+        const { jwt, decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_v = getAuthToken.getAuthToken()) !== null && _v !== void 0 ? _v : onboardingOnlyJwt);
         validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
-        const targetTurnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_v = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _v === void 0 ? void 0 : _v.chainConfigurations, decodedJwt.verifiedCredentials);
+        const targetTurnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_w = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _w === void 0 ? void 0 : _w.chainConfigurations, decodedJwt.verifiedCredentials);
         if (!targetTurnkeyWallet || !('id' in targetTurnkeyWallet)) {
             throw new utils.DynamicError('User does not have a valid secure enclave wallet', errors.INVALID_WALLET_DATA);
         }
@@ -309,7 +348,7 @@ const useSecureEnclaveEmbeddedWallet = () => {
             throw new utils.DynamicError('Session is active. No need to create a new one', errors.ACTIVE_SESSION);
         }
         const turnkeyAuthIframeContainerRef = createRootElement(constants.iframeContainerId);
-        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, constants.iframeElementId, getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_w = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _w === void 0 ? void 0 : _w.sessionKeyDuration));
+        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, constants.iframeElementId, getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_x = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _x === void 0 ? void 0 : _x.sessionKeyDuration));
         if (!publicKey) {
             throw new utils.DynamicError(errors.ERROR_SENDING_CODE);
         }
@@ -336,6 +375,7 @@ const useSecureEnclaveEmbeddedWallet = () => {
         getPasskeys,
         isLoadingEmbeddedWallet,
         isSessionActive,
+        revealEmbeddedWalletKey,
         sendOneTimeCode,
         userHasEmbeddedWallet,
     };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.d.ts

@@ -10,6 +10,7 @@ import { Wallet } from '../../../../shared';
  * getPasskeys, - gets all passkeys for the user
  * isLoadingEmbeddedWallet, - loading state of the embedded wallet
  * isSessionActive, - checks if the embedded wallet session is active
+ * revealEmbeddedWalletKey - export the recovery phrase or private key of the embedded wallet
  * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
  * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
@@ -18,15 +19,19 @@ export declare const useSecureEnclaveEmbeddedWallet: () => {
     readonly createEmbeddedWallet: (chains?: ChainEnum[], options?: {
         webAuthnAttestation: WebAuthnAttestation;
     }) => Promise<Wallet | undefined>;
-    readonly createOrRestoreSession: ({ oneTimeCode }: {
-        oneTimeCode?: string;
-    }) => Promise<string>;
-    readonly createPasskey: ({ oneTimeCode, }: {
-        oneTimeCode?: string;
-    }) => Promise<WebAuthnAttestation>;
+    readonly createOrRestoreSession: (options: {
+        oneTimeCode: string;
+    } | undefined) => Promise<string>;
+    readonly createPasskey: (options: {
+        oneTimeCode: string;
+    } | undefined) => Promise<WebAuthnAttestation>;
     readonly getPasskeys: () => Promise<import("@dynamic-labs/sdk-api-core").UserPasskey[]>;
     readonly isLoadingEmbeddedWallet: boolean;
     readonly isSessionActive: boolean;
+    readonly revealEmbeddedWalletKey: ({ type, htmlContainerId, }: {
+        type: 'recoveryPhrase' | 'privateKey';
+        htmlContainerId?: string;
+    }) => Promise<boolean>;
     readonly sendOneTimeCode: () => Promise<string>;
     readonly userHasEmbeddedWallet: () => boolean;
 };