@dynamic-labs/sdk-react-core 4.67.3-device-registration.0 → 4.69.0

package/CHANGELOG.md

@@ -1,20 +1,25 @@
 
-### [4.67.3-device-registration.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.67.2...v4.67.3-device-registration.0) (2026-03-19)
+## [4.69.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.68.0...v4.69.0) (2026-03-19)
 
 
 ### Features
 
-* add device registration icons ([#10637](https://github.com/dynamic-labs/dynamic-auth/issues/10637)) ([01bfe15](https://github.com/dynamic-labs/dynamic-auth/commit/01bfe155722111f321d289629bed95e8b9e4344d))
-* add DeviceRegistrationView ([#10638](https://github.com/dynamic-labs/dynamic-auth/issues/10638)) ([11ccbbc](https://github.com/dynamic-labs/dynamic-auth/commit/11ccbbcc5cfaeab9fbeb01c040225a731137b465))
-* add Prompt MFA and Prompt Reauthenticate to Step Up Auth methods ([#10645](https://github.com/dynamic-labs/dynamic-auth/issues/10645)) ([c97d8ee](https://github.com/dynamic-labs/dynamic-auth/commit/c97d8ee27f48d376259a921b01d151b4cf7fa27b))
-* add step-up auth for email and SMS credential updates ([#10676](https://github.com/dynamic-labs/dynamic-auth/issues/10676)) ([4c7f0a5](https://github.com/dynamic-labs/dynamic-auth/commit/4c7f0a5330e557aea4db85359f7ac10d3c7545a5))
-* add step-up auth for wallet link and unlink ([#10678](https://github.com/dynamic-labs/dynamic-auth/issues/10678)) ([8a015ca](https://github.com/dynamic-labs/dynamic-auth/commit/8a015ca0fd0bda71559c21b811b7e6acb43a7909))
-* add TrustedDevicesSection and ManageTrustedDevicesView ([#10639](https://github.com/dynamic-labs/dynamic-auth/issues/10639)) ([17df870](https://github.com/dynamic-labs/dynamic-auth/commit/17df870caa34a8428d65510e5b3c9e9c7b93cea2))
-* add useSyncDeviceRegistrationFlow ([#10640](https://github.com/dynamic-labs/dynamic-auth/issues/10640)) ([8c7752d](https://github.com/dynamic-labs/dynamic-auth/commit/8c7752d7a8afedaa3cc99fad83091586f7b6107e))
-* **sdk-react-core:** prompt step-up auth before export private key ([#10647](https://github.com/dynamic-labs/dynamic-auth/issues/10647)) ([a39d886](https://github.com/dynamic-labs/dynamic-auth/commit/a39d88643af83484aae09332adcd05df8c0f923c))
-* **step-up:** reauth flow with signInCredentialId and choose-method UI ([#10644](https://github.com/dynamic-labs/dynamic-auth/issues/10644)) ([086a97f](https://github.com/dynamic-labs/dynamic-auth/commit/086a97f27d908780b17f49f8a85ce88c34f61ed8))
+* add MoonPay icon to iconic ([#10666](https://github.com/dynamic-labs/dynamic-auth/issues/10666)) ([19d437b](https://github.com/dynamic-labs/dynamic-auth/commit/19d437b1a55e2b7800d65f375217b735f29d10eb))
+* add step-up auth for OAuth and email credential link and unlink ([#10679](https://github.com/dynamic-labs/dynamic-auth/issues/10679)) ([ba48be8](https://github.com/dynamic-labs/dynamic-auth/commit/ba48be874e44c033563ae107e46a1b90f3c307d6))
+* replace React session chaining with pure SDK implementation ([#10423](https://github.com/dynamic-labs/dynamic-auth/issues/10423)) ([2279421](https://github.com/dynamic-labs/dynamic-auth/commit/227942153828192d316d19295a69d9e7a5baa85c))
 
 
+### Bug Fixes
+
+* csp nonce global styles ([#10591](https://github.com/dynamic-labs/dynamic-auth/issues/10591)) ([6ea9c14](https://github.com/dynamic-labs/dynamic-auth/commit/6ea9c141055b3a337d8841dbebec00c7a3cb5d93))
+
+## [4.68.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.67.2...v4.68.0) (2026-03-19)
+
+
+### Features
+
+* add freighter ledger support on stellar ([#10665](https://github.com/dynamic-labs/dynamic-auth/issues/10665)) ([dedbaa6](https://github.com/dynamic-labs/dynamic-auth/commit/dedbaa6038f282b9e41b9166cad3ad6d5032948d))
+
 ### Bug Fixes
 
 * close auth flow on re-login when user already has embedded wallets ([#10641](https://github.com/dynamic-labs/dynamic-auth/issues/10641)) ([1aab930](https://github.com/dynamic-labs/dynamic-auth/commit/1aab9307c904f79bc0534026547fc112c55f6dc9))

package/package.cjs

@@ -3,10 +3,10 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.67.3-device-registration.0";
+var version = "4.69.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.0.907",
-	"@dynamic-labs-sdk/client": "0.17.1",
+	"@dynamic-labs-sdk/client": "0.17.2",
 	"@dynamic-labs-wallet/browser-wallet-client": "0.0.289",
 	"@hcaptcha/react-hcaptcha": "1.4.4",
 	"@thumbmarkjs/thumbmarkjs": "0.16.0",

package/package.js

@@ -1,8 +1,8 @@
 'use client'
-var version = "4.67.3-device-registration.0";
+var version = "4.69.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.0.907",
-	"@dynamic-labs-sdk/client": "0.17.1",
+	"@dynamic-labs-sdk/client": "0.17.2",
 	"@dynamic-labs-wallet/browser-wallet-client": "0.0.289",
 	"@hcaptcha/react-hcaptcha": "1.4.4",
 	"@thumbmarkjs/thumbmarkjs": "0.16.0",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@dynamic-labs/sdk-react-core",
-  "version": "4.67.3-device-registration.0",
+  "version": "4.69.0",
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.0.907",
-    "@dynamic-labs-sdk/client": "0.17.1",
+    "@dynamic-labs-sdk/client": "0.17.2",
     "@dynamic-labs-wallet/browser-wallet-client": "0.0.289",
     "@hcaptcha/react-hcaptcha": "1.4.4",
     "@thumbmarkjs/thumbmarkjs": "0.16.0",
@@ -16,17 +16,17 @@
     "yup": "0.32.11",
     "react-international-phone": "4.5.0",
     "bs58": "5.0.0",
-    "@dynamic-labs/assert-package-version": "4.67.3-device-registration.0",
-    "@dynamic-labs/iconic": "4.67.3-device-registration.0",
-    "@dynamic-labs/locale": "4.67.3-device-registration.0",
-    "@dynamic-labs/logger": "4.67.3-device-registration.0",
-    "@dynamic-labs/multi-wallet": "4.67.3-device-registration.0",
-    "@dynamic-labs/rpc-providers": "4.67.3-device-registration.0",
-    "@dynamic-labs/store": "4.67.3-device-registration.0",
-    "@dynamic-labs/types": "4.67.3-device-registration.0",
-    "@dynamic-labs/utils": "4.67.3-device-registration.0",
-    "@dynamic-labs/wallet-book": "4.67.3-device-registration.0",
-    "@dynamic-labs/wallet-connector-core": "4.67.3-device-registration.0",
+    "@dynamic-labs/assert-package-version": "4.69.0",
+    "@dynamic-labs/iconic": "4.69.0",
+    "@dynamic-labs/locale": "4.69.0",
+    "@dynamic-labs/logger": "4.69.0",
+    "@dynamic-labs/multi-wallet": "4.69.0",
+    "@dynamic-labs/rpc-providers": "4.69.0",
+    "@dynamic-labs/store": "4.69.0",
+    "@dynamic-labs/types": "4.69.0",
+    "@dynamic-labs/utils": "4.69.0",
+    "@dynamic-labs/wallet-book": "4.69.0",
+    "@dynamic-labs/wallet-connector-core": "4.69.0",
     "eventemitter3": "5.0.1"
   },
   "devDependencies": {

package/src/lib/Main.cjs

@@ -109,7 +109,6 @@ var PopperContext = require('./components/Popper/PopperContext/PopperContext.cjs
 var Portal = require('./components/Portal/Portal.cjs');
 require('qrcode');
 var RenderView = require('./components/RenderView/RenderView.cjs');
-require('./main.global.cjs');
 var useVerifyOnAwaitingSignature = require('./utils/hooks/multiWallet/useVerifyOnAwaitingSignature/useVerifyOnAwaitingSignature.cjs');
 
 const viewsToDisableCloseOnOverlayClick = [

package/src/lib/Main.d.ts

@@ -1,4 +1,3 @@
 import { FC } from 'react';
-import './main.global.scss';
 export declare const Main: FC;
 export default Main;

package/src/lib/Main.js

@@ -105,7 +105,6 @@ import { PopperProvider } from './components/Popper/PopperContext/PopperContext.
 import { Portal } from './components/Portal/Portal.js';
 import 'qrcode';
 import { RenderView } from './components/RenderView/RenderView.js';
-import './main.global.js';
 import { useVerifyOnAwaitingSignature } from './utils/hooks/multiWallet/useVerifyOnAwaitingSignature/useVerifyOnAwaitingSignature.js';
 
 const viewsToDisableCloseOnOverlayClick = [

package/src/lib/client/extension/functions/generateChainingSignature/generateChainingSignature.cjs

@@ -0,0 +1,15 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var _tslib = require('../../../../../../_virtual/_tslib.cjs');
+var client = require('@dynamic-labs-sdk/client');
+var core = require('@dynamic-labs-sdk/client/core');
+
+const generateChainingSignature = () => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    const { signature } = yield core.getSignedSessionId(client.getDefaultClient());
+    return signature;
+});
+
+exports.generateChainingSignature = generateChainingSignature;

package/src/lib/client/extension/functions/generateChainingSignature/generateChainingSignature.d.ts

@@ -0,0 +1 @@
+export declare const generateChainingSignature: () => Promise<string>;

package/src/lib/client/extension/functions/generateChainingSignature/generateChainingSignature.js

@@ -0,0 +1,11 @@
+'use client'
+import { __awaiter } from '../../../../../../_virtual/_tslib.js';
+import { getDefaultClient } from '@dynamic-labs-sdk/client';
+import { getSignedSessionId } from '@dynamic-labs-sdk/client/core';
+
+const generateChainingSignature = () => __awaiter(void 0, void 0, void 0, function* () {
+    const { signature } = yield getSignedSessionId(getDefaultClient());
+    return signature;
+});
+
+export { generateChainingSignature };

package/src/lib/client/extension/functions/generateSessionKeys/generateSessionKeys.cjs

@@ -0,0 +1,11 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var client = require('@dynamic-labs-sdk/client');
+var core = require('@dynamic-labs-sdk/client/core');
+
+const generateSessionKeys = () => core.generateSessionKeys(client.getDefaultClient());
+
+exports.generateSessionKeys = generateSessionKeys;

package/src/lib/client/extension/functions/generateSessionKeys/generateSessionKeys.d.ts

@@ -0,0 +1 @@
+export declare const generateSessionKeys: () => Promise<import("@dynamic-labs-sdk/client/core").SessionKeys>;

package/src/lib/client/extension/functions/generateSessionKeys/generateSessionKeys.js

@@ -0,0 +1,7 @@
+'use client'
+import { getDefaultClient } from '@dynamic-labs-sdk/client';
+import { generateSessionKeys as generateSessionKeys$1 } from '@dynamic-labs-sdk/client/core';
+
+const generateSessionKeys = () => generateSessionKeys$1(getDefaultClient());
+
+export { generateSessionKeys };

package/src/lib/client/extension/functions/getClientSessionNonceHeaders/getClientSessionNonceHeaders.cjs

@@ -0,0 +1,33 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var _tslib = require('../../../../../../_virtual/_tslib.cjs');
+var client = require('@dynamic-labs-sdk/client');
+var core = require('@dynamic-labs-sdk/client/core');
+
+/**
+ * Returns the nonce, nonce signature, and session public key needed for
+ * Turnkey session key registration headers.
+ *
+ * Parses the combined session chaining signature format:
+ * `${signedSessionId}/${nonceSignature}/${nonce}`
+ *
+ * Note: signatures are hex-encoded (no slashes), so splitting on '/' is safe.
+ */
+const getClientSessionNonceHeaders = () => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
+    const client$1 = client.getDefaultClient();
+    const { signature } = yield core.getSignedSessionId(client$1);
+    // signature format: "${signedSessionId}/${nonceSignature}/${nonce}"
+    const parts = signature.split('/');
+    if (parts.length < 3) {
+        throw new Error(`Unexpected session chaining signature format: expected 3 parts, got ${parts.length}`);
+    }
+    const [, nonceSignature, nonce] = parts;
+    const publicKey = (_b = (_a = core.getSessionKeys(client$1)) === null || _a === void 0 ? void 0 : _a.publicKey) !== null && _b !== void 0 ? _b : '';
+    return { nonce, nonceSignature, publicKey };
+});
+
+exports.getClientSessionNonceHeaders = getClientSessionNonceHeaders;

package/src/lib/client/extension/functions/getClientSessionNonceHeaders/getClientSessionNonceHeaders.d.ts

@@ -0,0 +1,16 @@
+type ClientSessionNonceHeaders = {
+    nonce: string;
+    nonceSignature: string;
+    publicKey: string;
+};
+/**
+ * Returns the nonce, nonce signature, and session public key needed for
+ * Turnkey session key registration headers.
+ *
+ * Parses the combined session chaining signature format:
+ * `${signedSessionId}/${nonceSignature}/${nonce}`
+ *
+ * Note: signatures are hex-encoded (no slashes), so splitting on '/' is safe.
+ */
+export declare const getClientSessionNonceHeaders: () => Promise<ClientSessionNonceHeaders>;
+export {};

package/src/lib/client/extension/functions/getClientSessionNonceHeaders/getClientSessionNonceHeaders.js

@@ -0,0 +1,29 @@
+'use client'
+import { __awaiter } from '../../../../../../_virtual/_tslib.js';
+import { getDefaultClient } from '@dynamic-labs-sdk/client';
+import { getSignedSessionId, getSessionKeys } from '@dynamic-labs-sdk/client/core';
+
+/**
+ * Returns the nonce, nonce signature, and session public key needed for
+ * Turnkey session key registration headers.
+ *
+ * Parses the combined session chaining signature format:
+ * `${signedSessionId}/${nonceSignature}/${nonce}`
+ *
+ * Note: signatures are hex-encoded (no slashes), so splitting on '/' is safe.
+ */
+const getClientSessionNonceHeaders = () => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
+    const client = getDefaultClient();
+    const { signature } = yield getSignedSessionId(client);
+    // signature format: "${signedSessionId}/${nonceSignature}/${nonce}"
+    const parts = signature.split('/');
+    if (parts.length < 3) {
+        throw new Error(`Unexpected session chaining signature format: expected 3 parts, got ${parts.length}`);
+    }
+    const [, nonceSignature, nonce] = parts;
+    const publicKey = (_b = (_a = getSessionKeys(client)) === null || _a === void 0 ? void 0 : _a.publicKey) !== null && _b !== void 0 ? _b : '';
+    return { nonce, nonceSignature, publicKey };
+});
+
+export { getClientSessionNonceHeaders };

package/src/lib/client/extension/functions/getSessionKeys/getSessionKeys.d.ts

@@ -0,0 +1 @@
+export declare const getSessionKeys: () => import("@dynamic-labs-sdk/client/core").SessionKeys | undefined;

package/src/lib/client/extension/functions/migrateClientSessionKey/migrateClientSessionKey.cjs

@@ -0,0 +1,51 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var _tslib = require('../../../../../../_virtual/_tslib.cjs');
+var client = require('@dynamic-labs-sdk/client');
+var core = require('@dynamic-labs-sdk/client/core');
+require('@dynamic-labs/iconic');
+require('@dynamic-labs/wallet-connector-core');
+require('react');
+require('react/jsx-runtime');
+require('../../../../context/ViewContext/ViewContext.cjs');
+var logger = require('../../../../shared/logger.cjs');
+require('@dynamic-labs/wallet-book');
+require('@dynamic-labs/utils');
+require('../../../../utils/constants/colors.cjs');
+require('../../../../utils/constants/values.cjs');
+require('@dynamic-labs/sdk-api-core');
+require('../../../../shared/consts/index.cjs');
+var getClientSessionKeys = require('../../../../utils/functions/clientSessionKeys/getClientSessionKeys.cjs');
+
+const migrateClientSessionKey = () => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    try {
+        // Wait for the SDK to finish initializing (including its own migration phase)
+        // before overwriting the keychain — react-SDK keys always take precedence.
+        const client$1 = client.getDefaultClient();
+        yield client.waitForClientInitialized(client$1);
+        logger.logger.debug('[migrateClientSessionKey] Checking for legacy session key in storage');
+        const legacy = getClientSessionKeys.getClientSessionKeys();
+        if (!legacy) {
+            logger.logger.debug('[migrateClientSessionKey] No legacy session key found in storage, skipping migration');
+            return;
+        }
+        const { keychain } = core.getCore(client$1);
+        logger.logger.debug('[migrateClientSessionKey] Found legacy session key, importing into keychain', { expectedPublicKey: legacy.publicKey });
+        const importedPublicKey = yield keychain.importKey('session', legacy.privateKeyJwk);
+        logger.logger.debug('[migrateClientSessionKey] Key imported into IndexedDB', {
+            expectedPublicKey: legacy.publicKey,
+            importedPublicKey,
+        });
+        core.getCore(client$1).state.set({ sessionKeys: importedPublicKey });
+        getClientSessionKeys.clearClientSessionKeys();
+        logger.logger.debug('[migrateClientSessionKey] Migration complete, legacy entry removed from storage');
+    }
+    catch (error) {
+        logger.logger.debug('[migrateClientSessionKey] Migration failed, ignoring:', error);
+    }
+});
+
+exports.migrateClientSessionKey = migrateClientSessionKey;

package/src/lib/client/extension/functions/migrateClientSessionKey/migrateClientSessionKey.d.ts

@@ -0,0 +1 @@
+export declare const migrateClientSessionKey: () => Promise<void>;

package/src/lib/client/extension/functions/migrateClientSessionKey/migrateClientSessionKey.js

@@ -0,0 +1,47 @@
+'use client'
+import { __awaiter } from '../../../../../../_virtual/_tslib.js';
+import { getDefaultClient, waitForClientInitialized } from '@dynamic-labs-sdk/client';
+import { getCore } from '@dynamic-labs-sdk/client/core';
+import '@dynamic-labs/iconic';
+import '@dynamic-labs/wallet-connector-core';
+import 'react';
+import 'react/jsx-runtime';
+import '../../../../context/ViewContext/ViewContext.js';
+import { logger } from '../../../../shared/logger.js';
+import '@dynamic-labs/wallet-book';
+import '@dynamic-labs/utils';
+import '../../../../utils/constants/colors.js';
+import '../../../../utils/constants/values.js';
+import '@dynamic-labs/sdk-api-core';
+import '../../../../shared/consts/index.js';
+import { getClientSessionKeys, clearClientSessionKeys } from '../../../../utils/functions/clientSessionKeys/getClientSessionKeys.js';
+
+const migrateClientSessionKey = () => __awaiter(void 0, void 0, void 0, function* () {
+    try {
+        // Wait for the SDK to finish initializing (including its own migration phase)
+        // before overwriting the keychain — react-SDK keys always take precedence.
+        const client = getDefaultClient();
+        yield waitForClientInitialized(client);
+        logger.debug('[migrateClientSessionKey] Checking for legacy session key in storage');
+        const legacy = getClientSessionKeys();
+        if (!legacy) {
+            logger.debug('[migrateClientSessionKey] No legacy session key found in storage, skipping migration');
+            return;
+        }
+        const { keychain } = getCore(client);
+        logger.debug('[migrateClientSessionKey] Found legacy session key, importing into keychain', { expectedPublicKey: legacy.publicKey });
+        const importedPublicKey = yield keychain.importKey('session', legacy.privateKeyJwk);
+        logger.debug('[migrateClientSessionKey] Key imported into IndexedDB', {
+            expectedPublicKey: legacy.publicKey,
+            importedPublicKey,
+        });
+        getCore(client).state.set({ sessionKeys: importedPublicKey });
+        clearClientSessionKeys();
+        logger.debug('[migrateClientSessionKey] Migration complete, legacy entry removed from storage');
+    }
+    catch (error) {
+        logger.debug('[migrateClientSessionKey] Migration failed, ignoring:', error);
+    }
+});
+
+export { migrateClientSessionKey };

package/src/lib/client/extension/hooks/useInitializeSdkClient/getApiHeaders/getApiHeaders.cjs

@@ -3,6 +3,8 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
+var client = require('@dynamic-labs-sdk/client');
+var core = require('@dynamic-labs-sdk/client/core');
 var version = require('../../../../../../version.cjs');
 var isGlobalWalletPopup = require('../../../../../shared/utils/functions/isGlobalWalletPopup/isGlobalWalletPopup.cjs');
 require('@dynamic-labs/sdk-api-core');
@@ -23,16 +25,13 @@ require('../../../../../utils/constants/colors.cjs');
 require('../../../../../shared/consts/index.cjs');
 require('../../../../../store/state/nonce/nonce.cjs');
 var randomString = require('../../../../../utils/functions/randomString/randomString.cjs');
-require('@dynamic-labs-sdk/client/core');
 require('../../../../client.cjs');
-require('@dynamic-labs-sdk/client');
 require('../../../../../config/ApiEndpoint.cjs');
 require('../../../../../events/dynamicEvents.cjs');
 require('@dynamic-labs/locale');
 require('../../../../../store/state/dynamicContextProps/dynamicContextProps.cjs');
 require('../../../../../store/state/primaryWalletId/primaryWalletId.cjs');
 require('../../../../../store/state/connectedWalletsInfo/connectedWalletsInfo.cjs');
-var getClientSessionKeys = require('../../../../../utils/functions/clientSessionKeys/getClientSessionKeys.cjs');
 require('../../../../../utils/functions/getWaasAddressTypeLabel/getWaasAddressTypeLabel.cjs');
 
 const getApiHeaders = () => {
@@ -43,9 +42,9 @@ const getApiHeaders = () => {
     if (deviceFingerprint) {
         apiHeaders['x-dyn-device-fingerprint'] = deviceFingerprint;
     }
-    const sessionPublicKey = getClientSessionKeys.getClientSessionPublicKey();
-    if (sessionPublicKey) {
-        apiHeaders['x-dyn-session-public-key'] = sessionPublicKey;
+    const sessionKeys = core.getSessionKeys(client.getDefaultClient());
+    if (sessionKeys === null || sessionKeys === void 0 ? void 0 : sessionKeys.publicKey) {
+        apiHeaders['x-dyn-session-public-key'] = sessionKeys.publicKey;
     }
     apiHeaders['x-dyn-version'] = `WalletKit/${version.VERSION}`;
     apiHeaders['x-dyn-api-version'] = `API/${version.API_VERSION}`;

package/src/lib/client/extension/hooks/useInitializeSdkClient/getApiHeaders/getApiHeaders.js

@@ -1,4 +1,6 @@
 'use client'
+import { getDefaultClient } from '@dynamic-labs-sdk/client';
+import { getSessionKeys } from '@dynamic-labs-sdk/client/core';
 import { VERSION, API_VERSION } from '../../../../../../version.js';
 import { isGlobalWalletPopup } from '../../../../../shared/utils/functions/isGlobalWalletPopup/isGlobalWalletPopup.js';
 import '@dynamic-labs/sdk-api-core';
@@ -19,16 +21,13 @@ import '../../../../../utils/constants/colors.js';
 import '../../../../../shared/consts/index.js';
 import '../../../../../store/state/nonce/nonce.js';
 import { randomString } from '../../../../../utils/functions/randomString/randomString.js';
-import '@dynamic-labs-sdk/client/core';
 import '../../../../client.js';
-import '@dynamic-labs-sdk/client';
 import '../../../../../config/ApiEndpoint.js';
 import '../../../../../events/dynamicEvents.js';
 import '@dynamic-labs/locale';
 import '../../../../../store/state/dynamicContextProps/dynamicContextProps.js';
 import '../../../../../store/state/primaryWalletId/primaryWalletId.js';
 import '../../../../../store/state/connectedWalletsInfo/connectedWalletsInfo.js';
-import { getClientSessionPublicKey } from '../../../../../utils/functions/clientSessionKeys/getClientSessionKeys.js';
 import '../../../../../utils/functions/getWaasAddressTypeLabel/getWaasAddressTypeLabel.js';
 
 const getApiHeaders = () => {
@@ -39,9 +38,9 @@ const getApiHeaders = () => {
     if (deviceFingerprint) {
         apiHeaders['x-dyn-device-fingerprint'] = deviceFingerprint;
     }
-    const sessionPublicKey = getClientSessionPublicKey();
-    if (sessionPublicKey) {
-        apiHeaders['x-dyn-session-public-key'] = sessionPublicKey;
+    const sessionKeys = getSessionKeys(getDefaultClient());
+    if (sessionKeys === null || sessionKeys === void 0 ? void 0 : sessionKeys.publicKey) {
+        apiHeaders['x-dyn-session-public-key'] = sessionKeys.publicKey;
     }
     apiHeaders['x-dyn-version'] = `WalletKit/${VERSION}`;
     apiHeaders['x-dyn-api-version'] = `API/${API_VERSION}`;

package/src/lib/client/extension/hooks/useInitializeSdkClient/useInitializeSdkClient.cjs

@@ -20,6 +20,7 @@ require('../../../../utils/constants/colors.cjs');
 require('../../../../utils/constants/values.cjs');
 require('@dynamic-labs/sdk-api-core');
 require('../../../../shared/consts/index.cjs');
+var migrateClientSessionKey = require('../../functions/migrateClientSessionKey/migrateClientSessionKey.cjs');
 var getApiHeaders = require('./getApiHeaders/getApiHeaders.cjs');
 var syncEvents = require('./syncEvents/syncEvents.cjs');
 
@@ -69,6 +70,7 @@ const useInitializeSdkClient = ({ settings, client: clientFromProps }, key) => {
         logLevel: settings.logLevel === 'DEBUG' ? 'debug' : undefined,
     });
     setClient(client$2);
+    void migrateClientSessionKey.migrateClientSessionKey();
 };
 
 exports.useInitializeSdkClient = useInitializeSdkClient;

package/src/lib/client/extension/hooks/useInitializeSdkClient/useInitializeSdkClient.js

@@ -16,6 +16,7 @@ import '../../../../utils/constants/colors.js';
 import '../../../../utils/constants/values.js';
 import '@dynamic-labs/sdk-api-core';
 import '../../../../shared/consts/index.js';
+import { migrateClientSessionKey } from '../../functions/migrateClientSessionKey/migrateClientSessionKey.js';
 import { getApiHeaders } from './getApiHeaders/getApiHeaders.js';
 import { syncEvents } from './syncEvents/syncEvents.js';
 
@@ -65,6 +66,7 @@ const useInitializeSdkClient = ({ settings, client: clientFromProps }, key) => {
         logLevel: settings.logLevel === 'DEBUG' ? 'debug' : undefined,
     });
     setClient(client);
+    void migrateClientSessionKey();
 };
 
 export { useInitializeSdkClient };

package/src/lib/client/extension/index.d.ts

@@ -16,6 +16,10 @@ export { getSignInCredentialIdFromMinToken } from './functions/getSignInCredenti
 export { getAuthToken } from './functions/getAuthToken';
 export { getExpiresAt } from './functions/getExpiresAt';
 export { hasElevatedAccessToken } from './functions/hasElevatedAccessToken';
+export { generateChainingSignature } from './functions/generateChainingSignature/generateChainingSignature';
+export { generateSessionKeys } from './functions/generateSessionKeys/generateSessionKeys';
+export { getSessionKeys } from './functions/getSessionKeys/getSessionKeys';
+export { getClientSessionNonceHeaders } from './functions/getClientSessionNonceHeaders/getClientSessionNonceHeaders';
 export { useInitStatus } from './initStatus/useInitStatus';
 export { setUnverifiedWalletAccounts } from './unverifiedWalletAccounts/setUnverifiedWalletAccounts';
 export { createDeviceSignatureHeadersMiddleware } from './functions/createDeviceSignatureHeadersMiddleware';

package/src/lib/components/UserProfile/parts/UserProfileSocialAccount/UserProfileSocialAccount.cjs

@@ -3,15 +3,16 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
+var _tslib = require('../../../../../../_virtual/_tslib.cjs');
 var jsxRuntime = require('react/jsx-runtime');
 var React = require('react');
 var iconic = require('@dynamic-labs/iconic');
+var sdkApiCore = require('@dynamic-labs/sdk-api-core');
 require('../../../Accordion/components/AccordionItem/AccordionItem.cjs');
 require('react-i18next');
 var add = require('../../../../shared/assets/add.cjs');
 var unlink = require('../../../../shared/assets/unlink.cjs');
 require('../../../../context/ViewContext/ViewContext.cjs');
-require('../../../../../../_virtual/_tslib.cjs');
 require('@dynamic-labs/utils');
 require('@dynamic-labs/wallet-connector-core');
 require('../../../../shared/logger.cjs');
@@ -19,7 +20,6 @@ require('@dynamic-labs/wallet-book');
 require('../../../../utils/constants/colors.cjs');
 require('../../../../utils/constants/values.cjs');
 var providerLabel = require('../../../../shared/utils/functions/providerLabel/providerLabel.cjs');
-require('@dynamic-labs/sdk-api-core');
 require('../../../../shared/consts/index.cjs');
 require('../../../Alert/Alert.cjs');
 require('../../../../events/dynamicEvents.cjs');
@@ -73,8 +73,8 @@ require('react-focus-lock');
 require('../../../../context/ThemeContext/ThemeContext.cjs');
 var Icon = require('../../../Icon/Icon.cjs');
 require('../../../../context/LoadingContext/LoadingContext.cjs');
+var useStepUpAuthentication = require('../../../../utils/hooks/useStepUpAuthentication/useStepUpAuthentication.cjs');
 require('../../../../context/WalletContext/WalletContext.cjs');
-require('../../../../utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.cjs');
 require('../../../../widgets/DynamicWidget/context/DynamicWidgetContext.cjs');
 require('../../../IconButton/IconButton.cjs');
 var TypographyButton = require('../../../TypographyButton/TypographyButton.cjs');
@@ -90,6 +90,7 @@ require('../../../../views/TransactionConfirmationView/TransactionConfirmationVi
 require('../../../PasskeyCreatedSuccessBanner/PasskeyCreatedSuccessBanner.cjs');
 require('../../../../context/PasskeyContext/PasskeyContext.cjs');
 require('../../../../widgets/DynamicWidget/components/PasskeyCard/PasskeyCard.cjs');
+require('../../../../utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.cjs');
 require('../../../../utils/hooks/useWalletBackup/useWalletBackup.cjs');
 require('../../../../utils/hooks/useWalletBackup/types.cjs');
 require('../../../../utils/hooks/useWalletBackup/cloudProviders.cjs');
@@ -121,20 +122,48 @@ const UserProfileSocialAccount = ({ provider, }) => {
     var _a;
     const { user, primaryWallet } = useInternalDynamicContext.useInternalDynamicContext();
     const { linkSocialAccount, unlinkSocialAccount, isProcessing, isLinked, getLinkedAccountInformation, } = useSocialAccounts.useSocialAccounts();
+    const { isStepUpRequired, promptStepUpAuth } = useStepUpAuthentication.useStepUpAuthentication();
     const isProviderLinked = isLinked(provider);
     const connectedAccountInfo = getLinkedAccountInformation(provider);
     const iconThemeVariant = useIconThemeVariant.useIconThemeVariant();
     const isActiveCredential = !primaryWallet &&
         connectedAccountInfo &&
         (connectedAccountInfo === null || connectedAccountInfo === void 0 ? void 0 : connectedAccountInfo.id) === (user === null || user === void 0 ? void 0 : user.lastVerifiedCredentialId);
-    const handleSocialAccountButton = React.useCallback(() => {
+    const handleSocialAccountButton = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         if (isProviderLinked) {
+            if (isStepUpRequired({ scope: sdkApiCore.TokenScope.Credentialunlink })) {
+                try {
+                    yield promptStepUpAuth({
+                        requestedScopes: [sdkApiCore.TokenScope.Credentialunlink],
+                    });
+                }
+                catch (_b) {
+                    return;
+                }
+            }
             unlinkSocialAccount(provider);
         }
         else {
+            if (isStepUpRequired({ scope: sdkApiCore.TokenScope.Credentiallink })) {
+                try {
+                    yield promptStepUpAuth({
+                        requestedScopes: [sdkApiCore.TokenScope.Credentiallink],
+                    });
+                }
+                catch (_c) {
+                    return;
+                }
+            }
             linkSocialAccount(provider, { showWidgetAfterConnection: true });
         }
-    }, [isProviderLinked, linkSocialAccount, provider, unlinkSocialAccount]);
+    }), [
+        isProviderLinked,
+        isStepUpRequired,
+        promptStepUpAuth,
+        linkSocialAccount,
+        provider,
+        unlinkSocialAccount,
+    ]);
     const renderButton = () => (jsxRuntime.jsx(TypographyButton.TypographyButton, { buttonClassName: 'user-profile-social-account__button', buttonVariant: 'secondary', buttonPadding: 'none', onClick: handleSocialAccountButton, loading: isProcessing, dataTestId: `social-account-${isProviderLinked ? 'disconnect' : 'connect'}-button`, typographyProps: {
             color: 'secondary',
             variant: 'button_tertiary',