@dynamic-labs/sdk-react-core 2.1.0-alpha.2 → 2.1.0-alpha.20

package/src/lib/utils/hooks/useEmbeddedWallet/useMPCEmbeddedWallet/useMPCEmbeddedWallet.js

@@ -2,6 +2,7 @@
 import { __awaiter } from '../../../../../../_virtual/_tslib.js';
 import { useCallback } from 'react';
 import { isCoinbaseMpcWalletConnector } from '@dynamic-labs/wallet-connector-core';
+import { DynamicError } from '@dynamic-labs/utils';
 import '../../../../context/DynamicContext/DynamicContext.js';
 import '@dynamic-labs/sdk-api-core';
 import '../../../../shared/logger.js';
@@ -12,12 +13,12 @@ import '@dynamic-labs/wallet-book';
 import '../../../constants/colors.js';
 import '../../../constants/values.js';
 import '../../../../shared/utils/classes/storage/localStorage.js';
-import '@dynamic-labs/utils';
 import '../../../../shared/consts/index.js';
 import '../../../../events/dynamicEvents.js';
 import '../../../../context/CaptchaContext/CaptchaContext.js';
 import '../../../../context/ErrorContext/ErrorContext.js';
 import { findEmbeddedWalletFromVerifiedCredentials } from '../../../functions/findEmbeddedWalletFromVerifiedCredentials/findEmbeddedWalletFromVerifiedCredentials.js';
+import { USER_NOT_LOGGED_IN } from '../../../constants/errors.js';
 import '@dynamic-labs/multi-wallet';
 import { getAuthToken } from '../../../functions/getAuthToken/getAuthToken.js';
 import 'react-international-phone';
@@ -36,19 +37,22 @@ import '../../../../context/UserWalletsContext/UserWalletsContext.js';
 import '../../../../context/VerificationContext/VerificationContext.js';
 import 'react-dom';
 import { useWalletContext } from '../../../../context/WalletContext/WalletContext.js';
-import { useEmbeddedWalletPassword } from '../../useEmbeddedWalletPassword/useEmbeddedWalletPassword.js';
-import { validateUserIsLoggedIn } from '../../../validations/validateUserIsLoggedIn/validateUserIsLoggedIn.js';
 import { validateMPCProviderEnabled } from '../../../validations/validateMPCProviderEnabled/validateMPCProviderEnabled.js';
+import { useEmbeddedWalletPassword } from '../../useEmbeddedWalletPassword/useEmbeddedWalletPassword.js';
 import { useCoinbaseMPC } from './useCoinbaseMPC/useCoinbaseMPC.js';
 import '../../../../context/ThemeContext/ThemeContext.js';
 import '@dynamic-labs/types';
+import '../../../../context/LoadingContext/LoadingContext.js';
 import 'yup';
 import '../../../../context/MockContext/MockContext.js';
-import 'react-i18next';
-import '../../../../context/FieldsStateContext/FieldsStateContext.js';
+import '../../../../views/CollectUserDataView/useFields.js';
 import '../../useUserUpdateRequest/useUpdateUser/useUpdateUser.js';
 import '../../../../context/UserFieldEditorContext/UserFieldEditorContext.js';
+import 'zustand';
+import 'zustand/middleware';
+import 'zustand/react/shallow';
 import '@dynamic-labs/rpc-providers';
+import 'react-i18next';
 import '../../../../components/Alert/Alert.js';
 import '../../../../components/ShadowDOM/ShadowDOM.js';
 import '../../../../components/IconButton/IconButton.js';
@@ -66,11 +70,11 @@ import '../../../../components/Popper/PopperContext/PopperContext.js';
 import 'react-focus-lock';
 import 'qrcode';
 import 'formik';
+import '../../../../context/FieldsStateContext/FieldsStateContext.js';
 import '../../../../views/WalletList/WalletList.js';
 import '../../../../context/SocialRedirectContext/SocialRedirectContext.js';
 import '../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
 import '@hcaptcha/react-hcaptcha';
-import '../../../../context/LoadingContext/LoadingContext.js';
 import '../../../../context/FooterAnimationContext/index.js';
 import '../../../../views/LoginView/sections/PhoneNumberSignInSection/PhoneNumberSignInSection.js';
 import '../../../../context/WalletGroupContext/WalletGroupContext.js';
@@ -91,69 +95,79 @@ import { useInternalDynamicContext } from '../../../../context/DynamicContext/us
  * }
  */
 const useMPCEmbeddedWallet = () => {
-    const { projectSettings, onboardingOnlyJwt, walletConnectorOptions } = useInternalDynamicContext();
+    const { projectSettings, walletConnectorOptions, user } = useInternalDynamicContext();
     const { createPassword: internalCreatePassword } = useEmbeddedWalletPassword();
     const { createCoinbaseMPCWallet } = useCoinbaseMPC();
     const { isLoadingEmbeddedWallet, setIsLoadingEmbeddedWallet } = useWalletContext();
-    const userHasEmbeddedWallet = () => hasEmbeddedWallet(getAuthToken() || onboardingOnlyJwt, 'coinbase');
+    const userHasEmbeddedWallet = () => hasEmbeddedWallet(user, 'coinbase');
     const createPassword = useCallback((showIntro) => __awaiter(void 0, void 0, void 0, function* () { return internalCreatePassword(showIntro); }), [internalCreatePassword]);
-    const prepareToCreateMPCWallet = useCallback((chain) => __awaiter(void 0, void 0, void 0, function* () {
-        var _a, _b, _c, _d;
-        const jwt = (_a = getAuthToken()) !== null && _a !== void 0 ? _a : onboardingOnlyJwt;
-        const { decodedJwt } = validateUserIsLoggedIn(jwt);
-        const userWaletsCredentials = getUserWalletsFromVerifiedCredentials(jwt);
-        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials(jwt, chain);
-        const isManualMode = ((_b = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _b === void 0 ? void 0 : _b.automaticEmbeddedWalletCreation) === false;
+    const prepareToCreateMPCWallet = useCallback((chains) => __awaiter(void 0, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
+        const userWalletsCredentials = getUserWalletsFromVerifiedCredentials(user);
+        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials(user, chains);
+        const isManualMode = ((_a = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _a === void 0 ? void 0 : _a.automaticEmbeddedWalletCreation) === false;
         // if user has a wallet and it's not embedded,
         // throw error to follow another flow and set up the right wallet
         // However, if the user is in manual mode continue.
-        if ((userWaletsCredentials === null || userWaletsCredentials === void 0 ? void 0 : userWaletsCredentials.length) &&
+        if ((userWalletsCredentials === null || userWalletsCredentials === void 0 ? void 0 : userWalletsCredentials.length) &&
             !embeddedWalletVerifiedCredential &&
             !isManualMode) {
             throw new Error('Manual mode must be enabled to create an embedded wallet for this user');
         }
         validateMPCProviderEnabled(projectSettings);
-        const connector = (_c = findCoinbaseMPCWallet(walletConnectorOptions)) === null || _c === void 0 ? void 0 : _c.walletConnector;
+        const connector = (_b = findCoinbaseMPCWallet(walletConnectorOptions)) === null || _b === void 0 ? void 0 : _b.walletConnector;
         if (!isCoinbaseMpcWalletConnector(connector)) {
             throw new Error('Coinbase MPC wallet connector not found');
         }
         // since we can dynamically change the settings from demov2, we need to set
         // requires password prop here in case the connector has already been initialized with a different value
-        connector.setRequiredPassword((_d = requiresPasswordForEmbeddedWallet(projectSettings)) !== null && _d !== void 0 ? _d : false);
-        return { decodedJwt, embeddedWalletVerifiedCredential, jwt };
-    }), [onboardingOnlyJwt, projectSettings, walletConnectorOptions]);
-    const canCreateMPCWallet = useCallback((chain) => __awaiter(void 0, void 0, void 0, function* () {
+        connector.setRequiredPassword((_c = requiresPasswordForEmbeddedWallet(projectSettings)) !== null && _c !== void 0 ? _c : false);
+    }), [user, projectSettings, walletConnectorOptions]);
+    const canCreateMPCWallet = useCallback((chains) => __awaiter(void 0, void 0, void 0, function* () {
         try {
-            yield prepareToCreateMPCWallet(chain);
+            yield prepareToCreateMPCWallet(chains);
             return true;
         }
         catch (e) {
             return false;
         }
     }), [prepareToCreateMPCWallet]);
-    const createEmbeddedWallet = useCallback((chain) => __awaiter(void 0, void 0, void 0, function* () {
-        const { decodedJwt, embeddedWalletVerifiedCredential, jwt } = yield prepareToCreateMPCWallet(chain);
+    const createEmbeddedWallet = useCallback((chains) => __awaiter(void 0, void 0, void 0, function* () {
+        const jwt = yield getAuthToken();
+        if (!user || !jwt) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
+        yield prepareToCreateMPCWallet(chains);
         setIsLoadingEmbeddedWallet(true);
         let password;
+        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials(user, chains);
         if (!embeddedWalletVerifiedCredential &&
             requiresPasswordForEmbeddedWalletOnSignup(projectSettings)) {
             password = yield internalCreatePassword(false, true);
         }
-        const wallet = yield createCoinbaseMPCWallet(jwt, decodedJwt, chain, password);
+        const wallet = yield createCoinbaseMPCWallet(jwt, chains, password);
         setIsLoadingEmbeddedWallet(false);
         return wallet;
     }), [
+        user,
         createCoinbaseMPCWallet,
         internalCreatePassword,
         prepareToCreateMPCWallet,
         projectSettings,
         setIsLoadingEmbeddedWallet,
     ]);
+    const revealEmbeddedWalletKey = () => __awaiter(void 0, void 0, void 0, function* () {
+        throw new DynamicError('Coinbase MPC wallet does not support headless reveal yet');
+    });
     return {
         canCreateMPCWallet,
         createEmbeddedWallet,
         createPassword,
         isLoadingEmbeddedWallet,
+        revealEmbeddedWalletKey,
         userHasEmbeddedWallet,
     };
 };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.cjs

@@ -5,6 +5,10 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 const iframeContainerId = 'dyn-secure-enclave-container-id';
 const iframeElementId = 'dyn-secure-enclave-element-id';
+const revealIframeContainerId = 'dyn-secure-enclave-export-container-id';
+const revealIframeElementId = 'dyn-secure-enclave-export-element-id';
 
 exports.iframeContainerId = iframeContainerId;
 exports.iframeElementId = iframeElementId;
+exports.revealIframeContainerId = revealIframeContainerId;
+exports.revealIframeElementId = revealIframeElementId;

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.d.ts

@@ -1,2 +1,4 @@
 export declare const iframeContainerId = "dyn-secure-enclave-container-id";
 export declare const iframeElementId = "dyn-secure-enclave-element-id";
+export declare const revealIframeContainerId = "dyn-secure-enclave-export-container-id";
+export declare const revealIframeElementId = "dyn-secure-enclave-export-element-id";

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.js

@@ -1,5 +1,7 @@
 'use client'
 const iframeContainerId = 'dyn-secure-enclave-container-id';
 const iframeElementId = 'dyn-secure-enclave-element-id';
+const revealIframeContainerId = 'dyn-secure-enclave-export-container-id';
+const revealIframeElementId = 'dyn-secure-enclave-export-element-id';
 
-export { iframeContainerId, iframeElementId };
+export { iframeContainerId, iframeElementId, revealIframeContainerId, revealIframeElementId };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.cjs

@@ -5,9 +5,9 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../../../../../_virtual/_tslib.cjs');
 var React = require('react');
+var sdkApiCore = require('@dynamic-labs/sdk-api-core');
 var utils = require('@dynamic-labs/utils');
 require('../../../../context/DynamicContext/DynamicContext.cjs');
-require('@dynamic-labs/sdk-api-core');
 var logger = require('../../../../shared/logger.cjs');
 require('@dynamic-labs/iconic');
 require('@dynamic-labs/wallet-connector-core');
@@ -25,15 +25,17 @@ require('../../../../context/ErrorContext/ErrorContext.cjs');
 var findEmbeddedWalletFromVerifiedCredentials = require('../../../functions/findEmbeddedWalletFromVerifiedCredentials/findEmbeddedWalletFromVerifiedCredentials.cjs');
 var findTurnkeyWallet = require('../../../functions/findTurnkeyWallet/findTurnkeyWallet.cjs');
 require('@dynamic-labs/multi-wallet');
-var getAuthToken = require('../../../functions/getAuthToken/getAuthToken.cjs');
 require('react-international-phone');
 var getUserWalletsFromVerifiedCredentials = require('../../../functions/getUserWalletsFromVerifiedCredentials/getUserWalletsFromVerifiedCredentials.cjs');
+var addPasskeyIdentifierToWalletConnector = require('../../../functions/addPasskeyIdentifierToWalletConnector/addPasskeyIdentifierToWalletConnector.cjs');
 require('viem');
 require('viem/chains');
 var getEOAWallet = require('../../../functions/getEOAWallet/getEOAWallet.cjs');
 require('../../../../config/ApiEndpoint.cjs');
 var embeddedWallets = require('../../../../data/api/embeddedWallets/embeddedWallets.cjs');
 require('../../../../locale/locale.cjs');
+var updateJWTAndCreateUserProfile = require('../../../functions/updateJWTAndCreateUserProfile/updateJWTAndCreateUserProfile.cjs');
+var getUserVerifiedCredentialType = require('../../../functions/getUserVerifiedCredentialType/getUserVerifiedCredentialType.cjs');
 var hasEmbeddedWallet = require('../../../functions/hasEmbeddedWallet/hasEmbeddedWallet.cjs');
 var getEmbeddedWalletAuthHandler = require('../../../functions/getEmbeddedWalletAuthHandler/getEmbeddedWalletAuthHandler.cjs');
 var getEmbeddedWalletSessionExpiration = require('../../../functions/getEmbeddedWalletSessionExpiration/getEmbeddedWalletSessionExpiration.cjs');
@@ -43,23 +45,27 @@ require('../../../../context/UserWalletsContext/UserWalletsContext.cjs');
 require('../../../../context/VerificationContext/VerificationContext.cjs');
 require('react-dom');
 var useElementById = require('../../useElementById/useElementById.cjs');
-var WalletContext = require('../../../../context/WalletContext/WalletContext.cjs');
-var validateUserIsLoggedIn = require('../../../validations/validateUserIsLoggedIn/validateUserIsLoggedIn.cjs');
-var validateTurnkeyProviderEnabled = require('../../../validations/validateTurnkeyProviderEnabled/validateTurnkeyProviderEnabled.cjs');
 var errors = require('../../../constants/errors.cjs');
+var WalletContext = require('../../../../context/WalletContext/WalletContext.cjs');
 var useIsTurnkeyWallet = require('../../useIsTurnkeyWallet/useIsTurnkeyWallet.cjs');
+var validateTurnkeyProviderEnabled = require('../../../validations/validateTurnkeyProviderEnabled/validateTurnkeyProviderEnabled.cjs');
 var passkeyRecovery = require('../../../../views/Passkey/utils/passkeyRecovery/passkeyRecovery.cjs');
+var turnkeyExport = require('../../../../views/EmbeddedReveal/utils/turnkeyExport/turnkeyExport.cjs');
 var useTurnkey = require('./useTurnkey/useTurnkey.cjs');
 var constants = require('./constants.cjs');
 require('../../../../context/ThemeContext/ThemeContext.cjs');
 require('@dynamic-labs/types');
+require('../../../../context/LoadingContext/LoadingContext.cjs');
 require('yup');
 require('../../../../context/MockContext/MockContext.cjs');
-require('react-i18next');
-require('../../../../context/FieldsStateContext/FieldsStateContext.cjs');
+require('../../../../views/CollectUserDataView/useFields.cjs');
 require('../../useUserUpdateRequest/useUpdateUser/useUpdateUser.cjs');
 require('../../../../context/UserFieldEditorContext/UserFieldEditorContext.cjs');
+require('zustand');
+require('zustand/middleware');
+require('zustand/react/shallow');
 require('@dynamic-labs/rpc-providers');
+require('react-i18next');
 require('../../../../components/Alert/Alert.cjs');
 require('../../../../components/ShadowDOM/ShadowDOM.cjs');
 require('../../../../components/IconButton/IconButton.cjs');
@@ -77,11 +83,11 @@ require('../../../../components/Popper/PopperContext/PopperContext.cjs');
 require('react-focus-lock');
 require('qrcode');
 require('formik');
+require('../../../../context/FieldsStateContext/FieldsStateContext.cjs');
 require('../../../../views/WalletList/WalletList.cjs');
 require('../../../../context/SocialRedirectContext/SocialRedirectContext.cjs');
 require('../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
 require('@hcaptcha/react-hcaptcha');
-require('../../../../context/LoadingContext/LoadingContext.cjs');
 require('../../../../context/FooterAnimationContext/index.cjs');
 require('../../../../views/LoginView/sections/PhoneNumberSignInSection/PhoneNumberSignInSection.cjs');
 require('../../../../context/WalletGroupContext/WalletGroupContext.cjs');
@@ -92,124 +98,253 @@ require('../../../../views/TransactionConfirmationView/helpers/transactionErrorM
 require('../../../../widgets/DynamicWidget/views/ManagePasskeysWidgetView/PasskeyCard/PasskeyCard.cjs');
 var useInternalDynamicContext = require('../../../../context/DynamicContext/useDynamicContext/useInternalDynamicContext.cjs');
 
-// Hook exposed to customers and used internally to trigger dynamic embedded wallet creation
+// Hook exposed to customers
 /**
+ *
  * @returns {
- *  createEmbeddedWallet, - creates Dynamic or MPC embedded wallet according to the settings
- *  isLoadingEmbeddedWallet, - loading state of the embedded wallet
- *  userHasEmbeddedWallet, - checks if the user has an embedded wallet
+ * createEmbeddedWallet, - creates Secure enclave embedded wallet according to the settings
+ * createOrRestoreSession, - creates or restores a embedded wallet session
+ * createPasskey, - creates a new passkey both for an existing wallet or a wallet to be created
+ * getPasskeys, - gets all passkeys for the user
+ * isLoadingEmbeddedWallet, - loading state of the embedded wallet
+ * isSessionActive, - checks if the embedded wallet session is active
+ * revealEmbeddedWalletKey - export the recovery phrase or private key of the embedded wallet
+ * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
+ * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 const useSecureEnclaveEmbeddedWallet = () => {
-    var _a, _b;
-    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, } = useInternalDynamicContext.useInternalDynamicContext();
+    var _a, _b, _c, _d;
+    const { projectSettings, authToken, primaryWallet, user, environmentId, walletConnectorOptions, setUser, } = useInternalDynamicContext.useInternalDynamicContext();
     const { createTurnkeyWallet } = useTurnkey.useTurnkey();
     const { hasRecoveryEmail } = useIsTurnkeyWallet.useIsTurnkeyWallet();
-    const turnkeyAuthIframeContainerRef = useElementById.useElementById(constants.iframeContainerId);
+    const { createRootElement } = useElementById.useElementById();
     const { isLoadingEmbeddedWallet, setIsLoadingEmbeddedWallet } = WalletContext.useWalletContext();
     const wallet = getEOAWallet.getEOAWallet(primaryWallet, (user === null || user === void 0 ? void 0 : user.verifiedCredentials) || []);
-    const userHasEmbeddedWallet = React.useCallback(() => hasEmbeddedWallet.hasEmbeddedWallet(getAuthToken.getAuthToken() || onboardingOnlyJwt, 'turnkey'), [onboardingOnlyJwt]);
-    const createEmbeddedWallet = React.useCallback((chain) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _c, _d;
-        const jwt = (_c = getAuthToken.getAuthToken()) !== null && _c !== void 0 ? _c : onboardingOnlyJwt;
-        const { decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn(jwt);
-        const userWaletsCredentials = getUserWalletsFromVerifiedCredentials.getUserWalletsFromVerifiedCredentials(jwt);
-        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials.findEmbeddedWalletFromVerifiedCredentials(jwt, chain);
-        const isManualMode = ((_d = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _d === void 0 ? void 0 : _d.automaticEmbeddedWalletCreation) === false;
+    const userHasEmbeddedWallet = React.useCallback(() => hasEmbeddedWallet.hasEmbeddedWallet(user, 'turnkey'), [user]);
+    /**
+     * Creates a new secure enclave embedded wallet according to the settings from the dashboard
+     * @param chain - optional chain parameter to create the wallet for
+     * @param options - optional parameter contained more settings for the wallet creation
+     * @returns Promise<Wallet | undefined>
+     */
+    const createEmbeddedWallet = React.useCallback((chains, options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _e;
+        if (!user) {
+            throw new utils.DynamicError(errors.USER_NOT_LOGGED_IN);
+        }
+        const userWalletsCredentials = getUserWalletsFromVerifiedCredentials.getUserWalletsFromVerifiedCredentials(user);
+        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials.findEmbeddedWalletFromVerifiedCredentials(user, chains);
+        const isManualMode = ((_e = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _e === void 0 ? void 0 : _e.automaticEmbeddedWalletCreation) === false;
         // if user has a wallet and it's not embedded,
         // throw error to follow another flow and set up the right wallet
         // However, if the user is in manual mode continue.
-        if ((userWaletsCredentials === null || userWaletsCredentials === void 0 ? void 0 : userWaletsCredentials.length) &&
+        if ((userWalletsCredentials === null || userWalletsCredentials === void 0 ? void 0 : userWalletsCredentials.length) &&
             !embeddedWalletVerifiedCredential &&
             !isManualMode) {
             throw new utils.DynamicError('Manual mode must be enabled to create an embedded wallet for this user');
         }
         validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
-        setIsLoadingEmbeddedWallet(true);
         // TEMP: immediately disable loading state
         setIsLoadingEmbeddedWallet(false);
-        const wallet = yield createTurnkeyWallet(jwt, decodedJwt, chain);
-        return wallet;
-    }), [
-        createTurnkeyWallet,
-        onboardingOnlyJwt,
-        projectSettings,
-        setIsLoadingEmbeddedWallet,
-    ]);
-    const createOrRestoreSession = React.useCallback((oneTimeCode) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _e, _f, _g, _h, _j, _k, _l;
-        const jwt = (_e = getAuthToken.getAuthToken()) !== null && _e !== void 0 ? _e : onboardingOnlyJwt;
-        const { decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn(jwt);
+        return createTurnkeyWallet(chains, options);
+    }), [createTurnkeyWallet, projectSettings, setIsLoadingEmbeddedWallet, user]);
+    /**
+     * Creates or restores a secure enclave embedded wallet session
+     * If it detects that the session is possible to be restored, it will restore it
+     * @param oneTimeCode - optional one-time code parameter. If not informed it tries to restore a session
+     * @returns Promise<'session_created' | 'session_restored'> - returns a string indicating the status of the session
+     */
+    const createOrRestoreSession = React.useCallback((options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _f, _g, _h, _j, _k, _l;
+        if (!user) {
+            throw new utils.DynamicError(errors.USER_NOT_LOGGED_IN);
+        }
         const turnkeyRecoveryHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
-        // try to restore session if it's active or can be restored
-        if (turnkeyRecoveryHandler.isSessionActive() ||
-            passkeyRecovery.canRestoreEmbeddedWalletSession((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.sessionKeyDuration)) {
+        if (turnkeyRecoveryHandler.isSessionActive()) {
+            return errors.ACTIVE_SESSION;
+        }
+        const turnkeyAuthIframeContainerRef = createRootElement(constants.iframeContainerId);
+        // try to restore session if possible
+        if (passkeyRecovery.canRestoreEmbeddedWalletSession((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.sessionKeyDuration)) {
             try {
-                yield passkeyRecovery.restoreEmbeddedWalletSession({
-                    authToken: jwt,
+                const sessionRestored = yield passkeyRecovery.restoreEmbeddedWalletSession({
                     iframeContainer: turnkeyAuthIframeContainerRef.current,
                     iframeElementId: constants.iframeElementId,
                     sessionExpiration: getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_h = (_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _g === void 0 ? void 0 : _g.embeddedWallets) === null || _h === void 0 ? void 0 : _h.sessionKeyDuration),
+                    user,
                     wallet: primaryWallet,
                 });
-                return errors.SESSION_RESTORED;
+                if (sessionRestored)
+                    return errors.SESSION_RESTORED;
             }
             catch (err) {
                 logger.logger.error('Failed to restore embedded wallet', err);
             }
         }
-        // creates a new session
-        if (!oneTimeCode) {
+        if (!(options === null || options === void 0 ? void 0 : options.oneTimeCode)) {
             throw new utils.DynamicError('One-time code is required to create a session.', errors.INVALID_REQUEST);
         }
+        // tries to create a new session with the informed one-time code
         // verify user has a turnkey wallet and email VC
         if (!userHasEmbeddedWallet() || !hasRecoveryEmail) {
             throw new utils.DynamicError('User does not have a secure enclave wallet or a verified email', errors.INVALID_WALLET_DATA);
         }
-        const organizationId = (_l = (_k = (_j = decodedJwt.verifiedCredentials) === null || _j === void 0 ? void 0 : _j.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _k === void 0 ? void 0 : _k.walletProperties) === null || _l === void 0 ? void 0 : _l.turnkeySubOrganizationId;
-        yield turnkeyRecoveryHandler.verifyRecoveryCode(oneTimeCode, organizationId);
+        const organizationId = (_l = (_k = (_j = user === null || user === void 0 ? void 0 : user.verifiedCredentials) === null || _j === void 0 ? void 0 : _j.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _k === void 0 ? void 0 : _k.walletProperties) === null || _l === void 0 ? void 0 : _l.turnkeySubOrganizationId;
+        yield turnkeyRecoveryHandler.verifyRecoveryCode(options.oneTimeCode, organizationId);
         const sessionSettings = {
             createdAt: new Date().getTime(),
-            emailCode: oneTimeCode,
+            emailCode: options.oneTimeCode,
             userId: turnkeyRecoveryHandler.recoveryUserId,
         };
         localStorage.LocalStorage.setToLS(localStorage$1.EMBEDDED_WALLET_SESSION_SETTINGS, sessionSettings);
         return errors.SESSION_CREATED;
     }), [
+        createRootElement,
+        user,
         hasRecoveryEmail,
-        onboardingOnlyJwt,
         primaryWallet,
         (_b = (_a = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _a === void 0 ? void 0 : _a.embeddedWallets) === null || _b === void 0 ? void 0 : _b.sessionKeyDuration,
-        turnkeyAuthIframeContainerRef,
         userHasEmbeddedWallet,
         wallet === null || wallet === void 0 ? void 0 : wallet.connector,
     ]);
-    const isSessionActive = React.useMemo(() => {
-        if (!(wallet === null || wallet === void 0 ? void 0 : wallet.connector))
-            return false;
-        try {
-            const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
-            return turnkeyAuthenticatorHandler.isSessionActive();
-        }
-        catch (err) {
-            return false;
-        }
-    }, [wallet === null || wallet === void 0 ? void 0 : wallet.connector]);
-    const sendOneTimeCode = React.useCallback((_m) => _tslib.__awaiter(void 0, [_m], void 0, function* ({ address }) {
-        var _o, _p;
-        const { jwt, decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_o = getAuthToken.getAuthToken()) !== null && _o !== void 0 ? _o : onboardingOnlyJwt);
+    /**
+     * Creates a new passkey both for an existing wallet or a wallet to be created
+     * @param options - optional parameter to inform a one-time code to create a session,
+     * @returns Promise<WebAuthnAttestation>
+     */
+    const createPasskey = React.useCallback((options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _m, _o;
+        if (!user) {
+            throw new utils.DynamicError(errors.USER_NOT_LOGGED_IN);
+        }
         validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
-        const targetTurnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByAddress(decodedJwt.verifiedCredentials, address);
-        if (!targetTurnkeyWallet || !targetTurnkeyWallet.id) {
+        const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_m = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _m === void 0 ? void 0 : _m.chainConfigurations, user.verifiedCredentials);
+        if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector)) {
+            throw new utils.DynamicError('Wallet connector not found', errors.INVALID_WALLET_DATA);
+        }
+        const walletConnector = turnkeyWallet.walletConnector;
+        walletConnector.setEmail(user === null || user === void 0 ? void 0 : user.email);
+        if (user && !(user === null || user === void 0 ? void 0 : user.email)) {
+            addPasskeyIdentifierToWalletConnector.addPasskeyIdentifierToWalletConnector(walletConnector, user);
+        }
+        const hasEmailVC = getUserVerifiedCredentialType.getUserVerifiedCredentialType(user, sdkApiCore.JwtVerifiedCredentialFormatEnum.Email);
+        // return a new passkey if the user doesn't have a wallet yet or
+        // none of the requirements to add a passkey to an existing wallet are met
+        if (!('id' in turnkeyWallet) || !hasEmailVC) {
+            return walletConnector.getWebAuthnAttestation();
+        }
+        const turnkeySubOrganizationId = (_o = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _o === void 0 ? void 0 : _o.turnkeySubOrganizationId;
+        if (!turnkeySubOrganizationId) {
+            throw new utils.DynamicError('No sub organization id found for the wallet', errors.INVALID_WALLET_DATA);
+        }
+        const turnkAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(walletConnector);
+        // add new passkey to the wallet through an active session
+        yield createOrRestoreSession(options);
+        const { attestation, challenge, displayName } = yield walletConnector.getWebAuthnAttestation();
+        yield turnkAuthenticatorHandler.addPasskeyAuthenticator({
+            attestation,
+            challenge,
+            turnkeySubOrganizationId,
+        });
+        const passkeyResponse = yield embeddedWallets.completePasskeyRecovery({
+            attestation: attestation,
+            challenge,
+            environmentId,
+            walletId: turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id,
+        });
+        const { jwt: updatedJwt, minifiedJwt } = passkeyResponse;
+        setUser(updateJWTAndCreateUserProfile.updateJWTAndCreateUserProfile(updatedJwt, minifiedJwt));
+        return { attestation, challenge, displayName };
+    }), [
+        createOrRestoreSession,
+        environmentId,
+        projectSettings,
+        setUser,
+        user,
+        walletConnectorOptions,
+    ]);
+    /**
+     * Gets all passkeys for the user
+     * @returns Promise<Passkey[]>
+     */
+    const getPasskeys = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        if (!user) {
+            throw new utils.DynamicError(errors.USER_NOT_LOGGED_IN);
+        }
+        const data = yield embeddedWallets.getUserPasskeys({
+            environmentId: environmentId,
+        });
+        return data.passkeys;
+    }), [user, environmentId]);
+    /**
+     * Checks if the embedded wallet session is active
+     * @returns boolean
+     */
+    const isSessionActive = (_d = ((wallet === null || wallet === void 0 ? void 0 : wallet.connector) &&
+        'getAuthenticatorHandler' in wallet.connector &&
+        ((_c = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet.connector)) === null || _c === void 0 ? void 0 : _c.isSessionActive()))) !== null && _d !== void 0 ? _d : false;
+    /**
+     * export the recovery phrase or private key of the embedded wallet
+     * @param options - optional parameter object containing the type of key to reveal 'recoveryPhrase' | 'privateKey'
+     * and the html container id to render the iframe into
+     * @returns Promise<string> - returns the embedded wallet recovery phrase or private key
+     */
+    const revealEmbeddedWalletKey = (_p) => _tslib.__awaiter(void 0, [_p], void 0, function* ({ type, htmlContainerId, }) {
+        var _q, _r;
+        if (!user) {
+            throw new utils.DynamicError('User is not logged in', errors.USER_NOT_LOGGED_IN);
+        }
+        yield turnkeyExport.cleanupExport({
+            wallet,
+        });
+        const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_q = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _q === void 0 ? void 0 : _q.chainConfigurations, user === null || user === void 0 ? void 0 : user.verifiedCredentials);
+        const turnkeyHDWalletId = (_r = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _r === void 0 ? void 0 : _r.turnkeyHDWalletId;
+        if (type === 'recoveryPhrase' && !turnkeyHDWalletId) {
+            type = 'privateKey';
+        }
+        const iframeContainerElement = createRootElement(constants.revealIframeElementId, htmlContainerId || constants.revealIframeContainerId);
+        // hide the iframe container until the export is done
+        // since it will show unrelated turnkey content
+        iframeContainerElement.current.style.display = 'none';
+        yield turnkeyExport.initExport({
+            iframeContainer: iframeContainerElement.current,
+            iframeElementId: constants.revealIframeElementId,
+            wallet,
+        });
+        yield turnkeyExport.exportCredential({
+            address: type === 'privateKey' ? wallet === null || wallet === void 0 ? void 0 : wallet.address : undefined,
+            authToken,
+            environmentId,
+            userEmail: user === null || user === void 0 ? void 0 : user.email,
+            wallet,
+        });
+        // show the iframe container after the export is done
+        // to show the exported content only
+        iframeContainerElement.current.style.display = 'block';
+        return true;
+    });
+    /**
+     * Sends a one-time code to the user so they can create a session or add a new passkey
+     * @returns Promise<'code_sent'>
+     */
+    const sendOneTimeCode = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _s, _t;
+        if (!user) {
+            throw new utils.DynamicError(errors.USER_NOT_LOGGED_IN);
+        }
+        const targetTurnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_s = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _s === void 0 ? void 0 : _s.chainConfigurations, user.verifiedCredentials);
+        if (!targetTurnkeyWallet || !('id' in targetTurnkeyWallet)) {
             throw new utils.DynamicError('User does not have a valid secure enclave wallet', errors.INVALID_WALLET_DATA);
         }
-        const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
+        const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(targetTurnkeyWallet === null || targetTurnkeyWallet === void 0 ? void 0 : targetTurnkeyWallet.walletConnector);
         const targetTurnkeyWalletId = targetTurnkeyWallet.id;
         const isSessionActive = turnkeyAuthenticatorHandler.isSessionActive();
         if (isSessionActive) {
             throw new utils.DynamicError('Session is active. No need to create a new one', errors.ACTIVE_SESSION);
         }
-        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, 'dyn-turnkey-auth-element-id', getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_p = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _p === void 0 ? void 0 : _p.sessionKeyDuration));
+        const turnkeyAuthIframeContainerRef = createRootElement(constants.iframeContainerId);
+        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, constants.iframeElementId, getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_t = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _t === void 0 ? void 0 : _t.sessionKeyDuration));
         if (!publicKey) {
             throw new utils.DynamicError(errors.ERROR_SENDING_CODE);
         }
@@ -217,23 +352,25 @@ const useSecureEnclaveEmbeddedWallet = () => {
             authenticatorType: 'email',
             environmentId,
             publicKey,
-            userJwt: jwt,
             walletId: targetTurnkeyWalletId,
         });
         turnkeyAuthenticatorHandler.recoveryUserId = response.turnkeyUserId;
         return errors.CODE_SENT;
     }), [
+        createRootElement,
+        user,
         environmentId,
-        onboardingOnlyJwt,
         projectSettings,
-        turnkeyAuthIframeContainerRef,
-        wallet === null || wallet === void 0 ? void 0 : wallet.connector,
+        walletConnectorOptions,
     ]);
     return {
         createEmbeddedWallet,
         createOrRestoreSession,
+        createPasskey,
+        getPasskeys,
         isLoadingEmbeddedWallet,
         isSessionActive,
+        revealEmbeddedWalletKey,
         sendOneTimeCode,
         userHasEmbeddedWallet,
     };