@dynamic-labs/sdk-react-core 2.1.0-alpha.2 → 2.1.0-alpha.4

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.cjs

@@ -5,9 +5,9 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../../../../../_virtual/_tslib.cjs');
 var React = require('react');
+var sdkApiCore = require('@dynamic-labs/sdk-api-core');
 var utils = require('@dynamic-labs/utils');
 require('../../../../context/DynamicContext/DynamicContext.cjs');
-require('@dynamic-labs/sdk-api-core');
 var logger = require('../../../../shared/logger.cjs');
 require('@dynamic-labs/iconic');
 require('@dynamic-labs/wallet-connector-core');
@@ -34,6 +34,8 @@ var getEOAWallet = require('../../../functions/getEOAWallet/getEOAWallet.cjs');
 require('../../../../config/ApiEndpoint.cjs');
 var embeddedWallets = require('../../../../data/api/embeddedWallets/embeddedWallets.cjs');
 require('../../../../locale/locale.cjs');
+var updateJWTAndCreateUserProfile = require('../../../functions/updateJWTAndCreateUserProfile/updateJWTAndCreateUserProfile.cjs');
+var getUserVerifiedCredentialType = require('../../../functions/getUserVerifiedCredentialType/getUserVerifiedCredentialType.cjs');
 var hasEmbeddedWallet = require('../../../functions/hasEmbeddedWallet/hasEmbeddedWallet.cjs');
 var getEmbeddedWalletAuthHandler = require('../../../functions/getEmbeddedWalletAuthHandler/getEmbeddedWalletAuthHandler.cjs');
 var getEmbeddedWalletSessionExpiration = require('../../../functions/getEmbeddedWalletSessionExpiration/getEmbeddedWalletSessionExpiration.cjs');
@@ -92,23 +94,38 @@ require('../../../../views/TransactionConfirmationView/helpers/transactionErrorM
 require('../../../../widgets/DynamicWidget/views/ManagePasskeysWidgetView/PasskeyCard/PasskeyCard.cjs');
 var useInternalDynamicContext = require('../../../../context/DynamicContext/useDynamicContext/useInternalDynamicContext.cjs');
 
-// Hook exposed to customers and used internally to trigger dynamic embedded wallet creation
+// Hook exposed to customers
 /**
+ *
  * @returns {
- *  createEmbeddedWallet, - creates Dynamic or MPC embedded wallet according to the settings
- *  isLoadingEmbeddedWallet, - loading state of the embedded wallet
- *  userHasEmbeddedWallet, - checks if the user has an embedded wallet
+ * createEmbeddedWallet, - creates Secure enclave embedded wallet according to the settings
+ * createOrRestoreSession, - creates or restores a embedded wallet session
+ * createPasskey, - creates a new passkey both for an existing wallet or a wallet to be created
+ * getPasskeys, - gets all passkeys for the user
+ * isLoadingEmbeddedWallet, - loading state of the embedded wallet
+ * isSessionActive, - checks if the embedded wallet session is active
+ * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
+ * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 const useSecureEnclaveEmbeddedWallet = () => {
     var _a, _b;
-    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, } = useInternalDynamicContext.useInternalDynamicContext();
+    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, walletConnectorOptions, setUser, } = useInternalDynamicContext.useInternalDynamicContext();
     const { createTurnkeyWallet } = useTurnkey.useTurnkey();
     const { hasRecoveryEmail } = useIsTurnkeyWallet.useIsTurnkeyWallet();
     const turnkeyAuthIframeContainerRef = useElementById.useElementById(constants.iframeContainerId);
     const { isLoadingEmbeddedWallet, setIsLoadingEmbeddedWallet } = WalletContext.useWalletContext();
     const wallet = getEOAWallet.getEOAWallet(primaryWallet, (user === null || user === void 0 ? void 0 : user.verifiedCredentials) || []);
+    /**
+     * Checks if the user has an embedded wallet or not
+     * @returns boolean
+     */
     const userHasEmbeddedWallet = React.useCallback(() => hasEmbeddedWallet.hasEmbeddedWallet(getAuthToken.getAuthToken() || onboardingOnlyJwt, 'turnkey'), [onboardingOnlyJwt]);
+    /**
+     * Creates a new secure enclave embedded wallet according to the settings from the dashboard
+     * @param chain - optional chain parameter to create the wallet for
+     * @returns Promise<Wallet | undefined>
+     */
     const createEmbeddedWallet = React.useCallback((chain) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         var _c, _d;
         const jwt = (_c = getAuthToken.getAuthToken()) !== null && _c !== void 0 ? _c : onboardingOnlyJwt;
@@ -125,31 +142,37 @@ const useSecureEnclaveEmbeddedWallet = () => {
             throw new utils.DynamicError('Manual mode must be enabled to create an embedded wallet for this user');
         }
         validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
-        setIsLoadingEmbeddedWallet(true);
         // TEMP: immediately disable loading state
         setIsLoadingEmbeddedWallet(false);
-        const wallet = yield createTurnkeyWallet(jwt, decodedJwt, chain);
-        return wallet;
+        return createTurnkeyWallet(jwt, decodedJwt, chain);
     }), [
         createTurnkeyWallet,
         onboardingOnlyJwt,
         projectSettings,
         setIsLoadingEmbeddedWallet,
     ]);
-    const createOrRestoreSession = React.useCallback((oneTimeCode) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _e, _f, _g, _h, _j, _k, _l;
-        const jwt = (_e = getAuthToken.getAuthToken()) !== null && _e !== void 0 ? _e : onboardingOnlyJwt;
+    /**
+     * Creates or restores a secure enclave embedded wallet session
+     * If it detects that the session is possible to be restored, it will restore it
+     * @param oneTimeCode - optional one-time code parameter. If not informed it tries to restore a session
+     * @returns Promise<'session_created' | 'session_restored'> - returns a string indicating the status of the session
+     */
+    const createOrRestoreSession = React.useCallback((_e) => _tslib.__awaiter(void 0, [_e], void 0, function* ({ oneTimeCode }) {
+        var _f, _g, _h, _j, _k, _l, _m;
+        const jwt = (_f = getAuthToken.getAuthToken()) !== null && _f !== void 0 ? _f : onboardingOnlyJwt;
         const { decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn(jwt);
         const turnkeyRecoveryHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
-        // try to restore session if it's active or can be restored
-        if (turnkeyRecoveryHandler.isSessionActive() ||
-            passkeyRecovery.canRestoreEmbeddedWalletSession((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.sessionKeyDuration)) {
+        if (turnkeyRecoveryHandler.isSessionActive()) {
+            return errors.ACTIVE_SESSION;
+        }
+        // try to restore session if possible
+        if (passkeyRecovery.canRestoreEmbeddedWalletSession((_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _g === void 0 ? void 0 : _g.sessionKeyDuration)) {
             try {
                 yield passkeyRecovery.restoreEmbeddedWalletSession({
                     authToken: jwt,
                     iframeContainer: turnkeyAuthIframeContainerRef.current,
                     iframeElementId: constants.iframeElementId,
-                    sessionExpiration: getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_h = (_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _g === void 0 ? void 0 : _g.embeddedWallets) === null || _h === void 0 ? void 0 : _h.sessionKeyDuration),
+                    sessionExpiration: getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_j = (_h = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _h === void 0 ? void 0 : _h.embeddedWallets) === null || _j === void 0 ? void 0 : _j.sessionKeyDuration),
                     wallet: primaryWallet,
                 });
                 return errors.SESSION_RESTORED;
@@ -158,15 +181,15 @@ const useSecureEnclaveEmbeddedWallet = () => {
                 logger.logger.error('Failed to restore embedded wallet', err);
             }
         }
-        // creates a new session
         if (!oneTimeCode) {
             throw new utils.DynamicError('One-time code is required to create a session.', errors.INVALID_REQUEST);
         }
+        // tries to create a new session with the informed one-time code
         // verify user has a turnkey wallet and email VC
         if (!userHasEmbeddedWallet() || !hasRecoveryEmail) {
             throw new utils.DynamicError('User does not have a secure enclave wallet or a verified email', errors.INVALID_WALLET_DATA);
         }
-        const organizationId = (_l = (_k = (_j = decodedJwt.verifiedCredentials) === null || _j === void 0 ? void 0 : _j.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _k === void 0 ? void 0 : _k.walletProperties) === null || _l === void 0 ? void 0 : _l.turnkeySubOrganizationId;
+        const organizationId = (_m = (_l = (_k = decodedJwt.verifiedCredentials) === null || _k === void 0 ? void 0 : _k.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _l === void 0 ? void 0 : _l.walletProperties) === null || _m === void 0 ? void 0 : _m.turnkeySubOrganizationId;
         yield turnkeyRecoveryHandler.verifyRecoveryCode(oneTimeCode, organizationId);
         const sessionSettings = {
             createdAt: new Date().getTime(),
@@ -184,6 +207,89 @@ const useSecureEnclaveEmbeddedWallet = () => {
         userHasEmbeddedWallet,
         wallet === null || wallet === void 0 ? void 0 : wallet.connector,
     ]);
+    /**
+     * Creates a new passkey both for an existing wallet or a wallet to be created
+     * @param oneTimeCode: string | undefined,
+     *
+     * @returns {
+     *    attestation: Attestation,
+     *    challenge: string,
+     *    displayName: string,
+     * }
+     */
+    const createPasskey = React.useCallback((_o) => _tslib.__awaiter(void 0, [_o], void 0, function* ({ oneTimeCode }) {
+        var _p, _q, _r;
+        const { decodedJwt, jwt } = validateUserIsLoggedIn.validateUserIsLoggedIn(getAuthToken.getAuthToken() || onboardingOnlyJwt);
+        validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
+        const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_p = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _p === void 0 ? void 0 : _p.chainConfigurations, decodedJwt.verifiedCredentials);
+        if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector)) {
+            throw new utils.DynamicError('Wallet connector not found', errors.INVALID_WALLET_DATA);
+        }
+        const walletConnector = turnkeyWallet.walletConnector;
+        walletConnector.setEmail(user === null || user === void 0 ? void 0 : user.email);
+        if (!(user === null || user === void 0 ? void 0 : user.email)) {
+            const passkeyIdentifier = (user === null || user === void 0 ? void 0 : user.phoneNumber) ||
+                ((_q = user === null || user === void 0 ? void 0 : user.verifiedCredentials.find((vc) => vc.oauthDisplayName)) === null || _q === void 0 ? void 0 : _q.oauthDisplayName) ||
+                '';
+            walletConnector.setPasskeyIdentifier(passkeyIdentifier);
+        }
+        const hasEmailVC = getUserVerifiedCredentialType.getUserVerifiedCredentialType(decodedJwt, sdkApiCore.JwtVerifiedCredentialFormatEnum.Email);
+        // return a new passkey if the user doesn't have a wallet yet or
+        // none of the requirements to add a passkey to an existing wallet are met
+        if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id) || !hasEmailVC) {
+            return walletConnector.getWebAuthnAttestation();
+        }
+        const organizationId = (_r = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _r === void 0 ? void 0 : _r.turnkeySubOrganizationId;
+        if (!organizationId) {
+            throw new utils.DynamicError('No sub organization id found for the wallet', errors.INVALID_WALLET_DATA);
+        }
+        const turnkAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(walletConnector);
+        // add new passkey to the wallet through an active session
+        yield createOrRestoreSession({ oneTimeCode });
+        const { attestation, challenge, displayName } = yield walletConnector.getWebAuthnAttestation();
+        yield turnkAuthenticatorHandler.addPasskeyAuthenticator({
+            attestation,
+            challenge,
+            organizationId,
+        });
+        const passkeyResponse = yield embeddedWallets.completePasskeyRecovery({
+            attestation: attestation,
+            challenge,
+            environmentId,
+            userJwt: jwt,
+            walletId: turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id,
+        });
+        const { jwt: updatedJwt, minifiedJwt } = passkeyResponse;
+        setUser(updateJWTAndCreateUserProfile.updateJWTAndCreateUserProfile(updatedJwt, minifiedJwt));
+        return { attestation, challenge, displayName };
+    }), [
+        createOrRestoreSession,
+        environmentId,
+        onboardingOnlyJwt,
+        projectSettings,
+        setUser,
+        user === null || user === void 0 ? void 0 : user.email,
+        user === null || user === void 0 ? void 0 : user.phoneNumber,
+        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
+        walletConnectorOptions,
+    ]);
+    /**
+     * Gets all passkeys for the user
+     * @returns Promise<Passkey[]>
+     */
+    const getPasskeys = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _s;
+        const { jwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_s = getAuthToken.getAuthToken()) !== null && _s !== void 0 ? _s : onboardingOnlyJwt);
+        const data = yield embeddedWallets.getUserPasskeys({
+            environmentId: environmentId,
+            userJwt: jwt,
+        });
+        return data.passkeys;
+    }), [environmentId, onboardingOnlyJwt]);
+    /**
+     * Checks if the embedded wallet session is active
+     * @returns boolean
+     */
     const isSessionActive = React.useMemo(() => {
         if (!(wallet === null || wallet === void 0 ? void 0 : wallet.connector))
             return false;
@@ -195,21 +301,25 @@ const useSecureEnclaveEmbeddedWallet = () => {
             return false;
         }
     }, [wallet === null || wallet === void 0 ? void 0 : wallet.connector]);
-    const sendOneTimeCode = React.useCallback((_m) => _tslib.__awaiter(void 0, [_m], void 0, function* ({ address }) {
-        var _o, _p;
-        const { jwt, decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_o = getAuthToken.getAuthToken()) !== null && _o !== void 0 ? _o : onboardingOnlyJwt);
+    /**
+     * Sends a one-time code to the user so they can create a session or add a new passkey
+     * @returns Promise<'code_sent'>
+     */
+    const sendOneTimeCode = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        var _t, _u, _v;
+        const { jwt, decodedJwt } = validateUserIsLoggedIn.validateUserIsLoggedIn((_t = getAuthToken.getAuthToken()) !== null && _t !== void 0 ? _t : onboardingOnlyJwt);
         validateTurnkeyProviderEnabled.validateTurnkeyProviderEnabled(projectSettings);
-        const targetTurnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByAddress(decodedJwt.verifiedCredentials, address);
+        const targetTurnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_u = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _u === void 0 ? void 0 : _u.chainConfigurations, decodedJwt.verifiedCredentials);
         if (!targetTurnkeyWallet || !targetTurnkeyWallet.id) {
             throw new utils.DynamicError('User does not have a valid secure enclave wallet', errors.INVALID_WALLET_DATA);
         }
-        const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
+        const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler.getEmbeddedWalletAuthHandler(targetTurnkeyWallet === null || targetTurnkeyWallet === void 0 ? void 0 : targetTurnkeyWallet.walletConnector);
         const targetTurnkeyWalletId = targetTurnkeyWallet.id;
         const isSessionActive = turnkeyAuthenticatorHandler.isSessionActive();
         if (isSessionActive) {
             throw new utils.DynamicError('Session is active. No need to create a new one', errors.ACTIVE_SESSION);
         }
-        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, 'dyn-turnkey-auth-element-id', getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_p = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _p === void 0 ? void 0 : _p.sessionKeyDuration));
+        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, 'dyn-turnkey-auth-element-id', getEmbeddedWalletSessionExpiration.getEmbeddedWalletSessionExpiration((_v = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _v === void 0 ? void 0 : _v.sessionKeyDuration));
         if (!publicKey) {
             throw new utils.DynamicError(errors.ERROR_SENDING_CODE);
         }
@@ -227,11 +337,13 @@ const useSecureEnclaveEmbeddedWallet = () => {
         onboardingOnlyJwt,
         projectSettings,
         turnkeyAuthIframeContainerRef,
-        wallet === null || wallet === void 0 ? void 0 : wallet.connector,
+        walletConnectorOptions,
     ]);
     return {
         createEmbeddedWallet,
         createOrRestoreSession,
+        createPasskey,
+        getPasskeys,
         isLoadingEmbeddedWallet,
         isSessionActive,
         sendOneTimeCode,

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.d.ts

@@ -1,19 +1,29 @@
 import { ChainEnum } from '@dynamic-labs/sdk-api-core';
 import { Wallet } from '../../../../shared';
 /**
+ *
  * @returns {
- *  createEmbeddedWallet, - creates Dynamic or MPC embedded wallet according to the settings
- *  isLoadingEmbeddedWallet, - loading state of the embedded wallet
- *  userHasEmbeddedWallet, - checks if the user has an embedded wallet
+ * createEmbeddedWallet, - creates Secure enclave embedded wallet according to the settings
+ * createOrRestoreSession, - creates or restores a embedded wallet session
+ * createPasskey, - creates a new passkey both for an existing wallet or a wallet to be created
+ * getPasskeys, - gets all passkeys for the user
+ * isLoadingEmbeddedWallet, - loading state of the embedded wallet
+ * isSessionActive, - checks if the embedded wallet session is active
+ * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
+ * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 export declare const useSecureEnclaveEmbeddedWallet: () => {
     readonly createEmbeddedWallet: (chain?: ChainEnum) => Promise<Wallet | undefined>;
-    readonly createOrRestoreSession: (oneTimeCode?: string) => Promise<string>;
+    readonly createOrRestoreSession: ({ oneTimeCode }: {
+        oneTimeCode?: string;
+    }) => Promise<string>;
+    readonly createPasskey: ({ oneTimeCode }: {
+        oneTimeCode?: string;
+    }) => Promise<import("@dynamic-labs/wallet-connector-core").WebAuthnAttestation>;
+    readonly getPasskeys: () => Promise<import("@dynamic-labs/sdk-api-core").UserPasskey[]>;
     readonly isLoadingEmbeddedWallet: boolean;
     readonly isSessionActive: boolean;
-    readonly sendOneTimeCode: ({ address }: {
-        address: string;
-    }) => Promise<string>;
+    readonly sendOneTimeCode: () => Promise<string>;
     readonly userHasEmbeddedWallet: () => boolean;
 };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.js

@@ -1,9 +1,9 @@
 'use client'
 import { __awaiter } from '../../../../../../_virtual/_tslib.js';
 import { useCallback, useMemo } from 'react';
+import { JwtVerifiedCredentialFormatEnum } from '@dynamic-labs/sdk-api-core';
 import { DynamicError } from '@dynamic-labs/utils';
 import '../../../../context/DynamicContext/DynamicContext.js';
-import '@dynamic-labs/sdk-api-core';
 import { logger } from '../../../../shared/logger.js';
 import '@dynamic-labs/iconic';
 import '@dynamic-labs/wallet-connector-core';
@@ -19,7 +19,7 @@ import '../../../../events/dynamicEvents.js';
 import '../../../../context/CaptchaContext/CaptchaContext.js';
 import '../../../../context/ErrorContext/ErrorContext.js';
 import { findEmbeddedWalletFromVerifiedCredentials } from '../../../functions/findEmbeddedWalletFromVerifiedCredentials/findEmbeddedWalletFromVerifiedCredentials.js';
-import { findTurnkeyWalletByAddress } from '../../../functions/findTurnkeyWallet/findTurnkeyWallet.js';
+import { findTurnkeyWalletByPrimaryChain } from '../../../functions/findTurnkeyWallet/findTurnkeyWallet.js';
 import '@dynamic-labs/multi-wallet';
 import { getAuthToken } from '../../../functions/getAuthToken/getAuthToken.js';
 import 'react-international-phone';
@@ -28,8 +28,10 @@ import 'viem';
 import 'viem/chains';
 import { getEOAWallet } from '../../../functions/getEOAWallet/getEOAWallet.js';
 import '../../../../config/ApiEndpoint.js';
-import { initEmbeddedWalletSession } from '../../../../data/api/embeddedWallets/embeddedWallets.js';
+import { completePasskeyRecovery, getUserPasskeys, initEmbeddedWalletSession } from '../../../../data/api/embeddedWallets/embeddedWallets.js';
 import '../../../../locale/locale.js';
+import { updateJWTAndCreateUserProfile } from '../../../functions/updateJWTAndCreateUserProfile/updateJWTAndCreateUserProfile.js';
+import { getUserVerifiedCredentialType } from '../../../functions/getUserVerifiedCredentialType/getUserVerifiedCredentialType.js';
 import { hasEmbeddedWallet } from '../../../functions/hasEmbeddedWallet/hasEmbeddedWallet.js';
 import { getEmbeddedWalletAuthHandler } from '../../../functions/getEmbeddedWalletAuthHandler/getEmbeddedWalletAuthHandler.js';
 import { getEmbeddedWalletSessionExpiration } from '../../../functions/getEmbeddedWalletSessionExpiration/getEmbeddedWalletSessionExpiration.js';
@@ -42,7 +44,7 @@ import { useElementById } from '../../useElementById/useElementById.js';
 import { useWalletContext } from '../../../../context/WalletContext/WalletContext.js';
 import { validateUserIsLoggedIn } from '../../../validations/validateUserIsLoggedIn/validateUserIsLoggedIn.js';
 import { validateTurnkeyProviderEnabled } from '../../../validations/validateTurnkeyProviderEnabled/validateTurnkeyProviderEnabled.js';
-import { SESSION_RESTORED, INVALID_REQUEST, INVALID_WALLET_DATA, SESSION_CREATED, ACTIVE_SESSION, ERROR_SENDING_CODE, CODE_SENT } from '../../../constants/errors.js';
+import { ACTIVE_SESSION, SESSION_RESTORED, INVALID_REQUEST, INVALID_WALLET_DATA, SESSION_CREATED, ERROR_SENDING_CODE, CODE_SENT } from '../../../constants/errors.js';
 import { useIsTurnkeyWallet } from '../../useIsTurnkeyWallet/useIsTurnkeyWallet.js';
 import { canRestoreEmbeddedWalletSession, restoreEmbeddedWalletSession } from '../../../../views/Passkey/utils/passkeyRecovery/passkeyRecovery.js';
 import { useTurnkey } from './useTurnkey/useTurnkey.js';
@@ -88,23 +90,38 @@ import '../../../../views/TransactionConfirmationView/helpers/transactionErrorMe
 import '../../../../widgets/DynamicWidget/views/ManagePasskeysWidgetView/PasskeyCard/PasskeyCard.js';
 import { useInternalDynamicContext } from '../../../../context/DynamicContext/useDynamicContext/useInternalDynamicContext.js';
 
-// Hook exposed to customers and used internally to trigger dynamic embedded wallet creation
+// Hook exposed to customers
 /**
+ *
  * @returns {
- *  createEmbeddedWallet, - creates Dynamic or MPC embedded wallet according to the settings
- *  isLoadingEmbeddedWallet, - loading state of the embedded wallet
- *  userHasEmbeddedWallet, - checks if the user has an embedded wallet
+ * createEmbeddedWallet, - creates Secure enclave embedded wallet according to the settings
+ * createOrRestoreSession, - creates or restores a embedded wallet session
+ * createPasskey, - creates a new passkey both for an existing wallet or a wallet to be created
+ * getPasskeys, - gets all passkeys for the user
+ * isLoadingEmbeddedWallet, - loading state of the embedded wallet
+ * isSessionActive, - checks if the embedded wallet session is active
+ * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
+ * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 const useSecureEnclaveEmbeddedWallet = () => {
     var _a, _b;
-    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, } = useInternalDynamicContext();
+    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, walletConnectorOptions, setUser, } = useInternalDynamicContext();
     const { createTurnkeyWallet } = useTurnkey();
     const { hasRecoveryEmail } = useIsTurnkeyWallet();
     const turnkeyAuthIframeContainerRef = useElementById(iframeContainerId);
     const { isLoadingEmbeddedWallet, setIsLoadingEmbeddedWallet } = useWalletContext();
     const wallet = getEOAWallet(primaryWallet, (user === null || user === void 0 ? void 0 : user.verifiedCredentials) || []);
+    /**
+     * Checks if the user has an embedded wallet or not
+     * @returns boolean
+     */
     const userHasEmbeddedWallet = useCallback(() => hasEmbeddedWallet(getAuthToken() || onboardingOnlyJwt, 'turnkey'), [onboardingOnlyJwt]);
+    /**
+     * Creates a new secure enclave embedded wallet according to the settings from the dashboard
+     * @param chain - optional chain parameter to create the wallet for
+     * @returns Promise<Wallet | undefined>
+     */
     const createEmbeddedWallet = useCallback((chain) => __awaiter(void 0, void 0, void 0, function* () {
         var _c, _d;
         const jwt = (_c = getAuthToken()) !== null && _c !== void 0 ? _c : onboardingOnlyJwt;
@@ -121,31 +138,37 @@ const useSecureEnclaveEmbeddedWallet = () => {
             throw new DynamicError('Manual mode must be enabled to create an embedded wallet for this user');
         }
         validateTurnkeyProviderEnabled(projectSettings);
-        setIsLoadingEmbeddedWallet(true);
         // TEMP: immediately disable loading state
         setIsLoadingEmbeddedWallet(false);
-        const wallet = yield createTurnkeyWallet(jwt, decodedJwt, chain);
-        return wallet;
+        return createTurnkeyWallet(jwt, decodedJwt, chain);
     }), [
         createTurnkeyWallet,
         onboardingOnlyJwt,
         projectSettings,
         setIsLoadingEmbeddedWallet,
     ]);
-    const createOrRestoreSession = useCallback((oneTimeCode) => __awaiter(void 0, void 0, void 0, function* () {
-        var _e, _f, _g, _h, _j, _k, _l;
-        const jwt = (_e = getAuthToken()) !== null && _e !== void 0 ? _e : onboardingOnlyJwt;
+    /**
+     * Creates or restores a secure enclave embedded wallet session
+     * If it detects that the session is possible to be restored, it will restore it
+     * @param oneTimeCode - optional one-time code parameter. If not informed it tries to restore a session
+     * @returns Promise<'session_created' | 'session_restored'> - returns a string indicating the status of the session
+     */
+    const createOrRestoreSession = useCallback((_e) => __awaiter(void 0, [_e], void 0, function* ({ oneTimeCode }) {
+        var _f, _g, _h, _j, _k, _l, _m;
+        const jwt = (_f = getAuthToken()) !== null && _f !== void 0 ? _f : onboardingOnlyJwt;
         const { decodedJwt } = validateUserIsLoggedIn(jwt);
         const turnkeyRecoveryHandler = getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
-        // try to restore session if it's active or can be restored
-        if (turnkeyRecoveryHandler.isSessionActive() ||
-            canRestoreEmbeddedWalletSession((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.sessionKeyDuration)) {
+        if (turnkeyRecoveryHandler.isSessionActive()) {
+            return ACTIVE_SESSION;
+        }
+        // try to restore session if possible
+        if (canRestoreEmbeddedWalletSession((_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _g === void 0 ? void 0 : _g.sessionKeyDuration)) {
             try {
                 yield restoreEmbeddedWalletSession({
                     authToken: jwt,
                     iframeContainer: turnkeyAuthIframeContainerRef.current,
                     iframeElementId,
-                    sessionExpiration: getEmbeddedWalletSessionExpiration((_h = (_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _g === void 0 ? void 0 : _g.embeddedWallets) === null || _h === void 0 ? void 0 : _h.sessionKeyDuration),
+                    sessionExpiration: getEmbeddedWalletSessionExpiration((_j = (_h = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _h === void 0 ? void 0 : _h.embeddedWallets) === null || _j === void 0 ? void 0 : _j.sessionKeyDuration),
                     wallet: primaryWallet,
                 });
                 return SESSION_RESTORED;
@@ -154,15 +177,15 @@ const useSecureEnclaveEmbeddedWallet = () => {
                 logger.error('Failed to restore embedded wallet', err);
             }
         }
-        // creates a new session
         if (!oneTimeCode) {
             throw new DynamicError('One-time code is required to create a session.', INVALID_REQUEST);
         }
+        // tries to create a new session with the informed one-time code
         // verify user has a turnkey wallet and email VC
         if (!userHasEmbeddedWallet() || !hasRecoveryEmail) {
             throw new DynamicError('User does not have a secure enclave wallet or a verified email', INVALID_WALLET_DATA);
         }
-        const organizationId = (_l = (_k = (_j = decodedJwt.verifiedCredentials) === null || _j === void 0 ? void 0 : _j.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _k === void 0 ? void 0 : _k.walletProperties) === null || _l === void 0 ? void 0 : _l.turnkeySubOrganizationId;
+        const organizationId = (_m = (_l = (_k = decodedJwt.verifiedCredentials) === null || _k === void 0 ? void 0 : _k.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _l === void 0 ? void 0 : _l.walletProperties) === null || _m === void 0 ? void 0 : _m.turnkeySubOrganizationId;
         yield turnkeyRecoveryHandler.verifyRecoveryCode(oneTimeCode, organizationId);
         const sessionSettings = {
             createdAt: new Date().getTime(),
@@ -180,6 +203,89 @@ const useSecureEnclaveEmbeddedWallet = () => {
         userHasEmbeddedWallet,
         wallet === null || wallet === void 0 ? void 0 : wallet.connector,
     ]);
+    /**
+     * Creates a new passkey both for an existing wallet or a wallet to be created
+     * @param oneTimeCode: string | undefined,
+     *
+     * @returns {
+     *    attestation: Attestation,
+     *    challenge: string,
+     *    displayName: string,
+     * }
+     */
+    const createPasskey = useCallback((_o) => __awaiter(void 0, [_o], void 0, function* ({ oneTimeCode }) {
+        var _p, _q, _r;
+        const { decodedJwt, jwt } = validateUserIsLoggedIn(getAuthToken() || onboardingOnlyJwt);
+        validateTurnkeyProviderEnabled(projectSettings);
+        const turnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_p = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _p === void 0 ? void 0 : _p.chainConfigurations, decodedJwt.verifiedCredentials);
+        if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector)) {
+            throw new DynamicError('Wallet connector not found', INVALID_WALLET_DATA);
+        }
+        const walletConnector = turnkeyWallet.walletConnector;
+        walletConnector.setEmail(user === null || user === void 0 ? void 0 : user.email);
+        if (!(user === null || user === void 0 ? void 0 : user.email)) {
+            const passkeyIdentifier = (user === null || user === void 0 ? void 0 : user.phoneNumber) ||
+                ((_q = user === null || user === void 0 ? void 0 : user.verifiedCredentials.find((vc) => vc.oauthDisplayName)) === null || _q === void 0 ? void 0 : _q.oauthDisplayName) ||
+                '';
+            walletConnector.setPasskeyIdentifier(passkeyIdentifier);
+        }
+        const hasEmailVC = getUserVerifiedCredentialType(decodedJwt, JwtVerifiedCredentialFormatEnum.Email);
+        // return a new passkey if the user doesn't have a wallet yet or
+        // none of the requirements to add a passkey to an existing wallet are met
+        if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id) || !hasEmailVC) {
+            return walletConnector.getWebAuthnAttestation();
+        }
+        const organizationId = (_r = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _r === void 0 ? void 0 : _r.turnkeySubOrganizationId;
+        if (!organizationId) {
+            throw new DynamicError('No sub organization id found for the wallet', INVALID_WALLET_DATA);
+        }
+        const turnkAuthenticatorHandler = getEmbeddedWalletAuthHandler(walletConnector);
+        // add new passkey to the wallet through an active session
+        yield createOrRestoreSession({ oneTimeCode });
+        const { attestation, challenge, displayName } = yield walletConnector.getWebAuthnAttestation();
+        yield turnkAuthenticatorHandler.addPasskeyAuthenticator({
+            attestation,
+            challenge,
+            organizationId,
+        });
+        const passkeyResponse = yield completePasskeyRecovery({
+            attestation: attestation,
+            challenge,
+            environmentId,
+            userJwt: jwt,
+            walletId: turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id,
+        });
+        const { jwt: updatedJwt, minifiedJwt } = passkeyResponse;
+        setUser(updateJWTAndCreateUserProfile(updatedJwt, minifiedJwt));
+        return { attestation, challenge, displayName };
+    }), [
+        createOrRestoreSession,
+        environmentId,
+        onboardingOnlyJwt,
+        projectSettings,
+        setUser,
+        user === null || user === void 0 ? void 0 : user.email,
+        user === null || user === void 0 ? void 0 : user.phoneNumber,
+        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
+        walletConnectorOptions,
+    ]);
+    /**
+     * Gets all passkeys for the user
+     * @returns Promise<Passkey[]>
+     */
+    const getPasskeys = useCallback(() => __awaiter(void 0, void 0, void 0, function* () {
+        var _s;
+        const { jwt } = validateUserIsLoggedIn((_s = getAuthToken()) !== null && _s !== void 0 ? _s : onboardingOnlyJwt);
+        const data = yield getUserPasskeys({
+            environmentId: environmentId,
+            userJwt: jwt,
+        });
+        return data.passkeys;
+    }), [environmentId, onboardingOnlyJwt]);
+    /**
+     * Checks if the embedded wallet session is active
+     * @returns boolean
+     */
     const isSessionActive = useMemo(() => {
         if (!(wallet === null || wallet === void 0 ? void 0 : wallet.connector))
             return false;
@@ -191,21 +297,25 @@ const useSecureEnclaveEmbeddedWallet = () => {
             return false;
         }
     }, [wallet === null || wallet === void 0 ? void 0 : wallet.connector]);
-    const sendOneTimeCode = useCallback((_m) => __awaiter(void 0, [_m], void 0, function* ({ address }) {
-        var _o, _p;
-        const { jwt, decodedJwt } = validateUserIsLoggedIn((_o = getAuthToken()) !== null && _o !== void 0 ? _o : onboardingOnlyJwt);
+    /**
+     * Sends a one-time code to the user so they can create a session or add a new passkey
+     * @returns Promise<'code_sent'>
+     */
+    const sendOneTimeCode = useCallback(() => __awaiter(void 0, void 0, void 0, function* () {
+        var _t, _u, _v;
+        const { jwt, decodedJwt } = validateUserIsLoggedIn((_t = getAuthToken()) !== null && _t !== void 0 ? _t : onboardingOnlyJwt);
         validateTurnkeyProviderEnabled(projectSettings);
-        const targetTurnkeyWallet = findTurnkeyWalletByAddress(decodedJwt.verifiedCredentials, address);
+        const targetTurnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_u = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _u === void 0 ? void 0 : _u.chainConfigurations, decodedJwt.verifiedCredentials);
         if (!targetTurnkeyWallet || !targetTurnkeyWallet.id) {
             throw new DynamicError('User does not have a valid secure enclave wallet', INVALID_WALLET_DATA);
         }
-        const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
+        const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler(targetTurnkeyWallet === null || targetTurnkeyWallet === void 0 ? void 0 : targetTurnkeyWallet.walletConnector);
         const targetTurnkeyWalletId = targetTurnkeyWallet.id;
         const isSessionActive = turnkeyAuthenticatorHandler.isSessionActive();
         if (isSessionActive) {
             throw new DynamicError('Session is active. No need to create a new one', ACTIVE_SESSION);
         }
-        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, 'dyn-turnkey-auth-element-id', getEmbeddedWalletSessionExpiration((_p = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _p === void 0 ? void 0 : _p.sessionKeyDuration));
+        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, 'dyn-turnkey-auth-element-id', getEmbeddedWalletSessionExpiration((_v = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _v === void 0 ? void 0 : _v.sessionKeyDuration));
         if (!publicKey) {
             throw new DynamicError(ERROR_SENDING_CODE);
         }
@@ -223,11 +333,13 @@ const useSecureEnclaveEmbeddedWallet = () => {
         onboardingOnlyJwt,
         projectSettings,
         turnkeyAuthIframeContainerRef,
-        wallet === null || wallet === void 0 ? void 0 : wallet.connector,
+        walletConnectorOptions,
     ]);
     return {
         createEmbeddedWallet,
         createOrRestoreSession,
+        createPasskey,
+        getPasskeys,
         isLoadingEmbeddedWallet,
         isSessionActive,
         sendOneTimeCode,

package/src/lib/utils/hooks/useMergeUserAccounts/index.d.ts

@@ -0,0 +1 @@
+export { useMergeUserAccounts } from './useMergeUserAccounts';