feat(expo-example): add export wallet on mobile

[andrascodes]

Closes FS-1979

For the export wallet on mobile, I decided to go with the same approach as the iframe-stamper on Web. This is the ExportWebView file. It requests the bundle using the wallet-core export functions and passes the bundle to the export.turnkey.com website via an iframe. The iframe on mobile is rendered in a WebView. The ExportWebView component injects some JS into the WebView to enable passing the bundle to the iframe itself via a MessageChannel.
Other than this the rest of the files are to demo certain further security measures that app developers can take: Biometrics before revealing the key, blocking screen capture both for screenshots and for not showing the keys when switching between apps and protection against supply chain attacks (restricting package versions and network security config)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
zerodev-signer-demo	Ready	Preview, Comment	May 14, 2026 1:11pm

[Copilot]

Pull request overview

Adds a mobile-only wallet export flow to the expo-example app using a hardened react-native-webview wrapper around Turnkey’s export.turnkey.com iframe, plus demo “defense-in-depth” measures (biometric gating, screenshot/recording protection, and dependency pinning).

Changes:

• Add /export route group with consent screen + seed phrase/private key reveal screens, backed by a WebView-based Turnkey export bridge.
• Add security utilities: biometric-only auth gate, screen-capture prevention hook, and app-state listener for resetting consent/reveal.
• Pin sensitive dependencies (Turnkey packages + webview) and update Expo config/plugins/docs to reflect export behavior.

Reviewed changes

Copilot reviewed 20 out of 21 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
pnpm-lock.yaml	Lockfile updates for newly added/pinned dependencies (webview, screen capture, local auth) and resolution changes.
apps/expo-example/src/lib/biometricAuth.ts	Adds biometric-only authentication helper for reveal/export flows.
apps/expo-example/src/hooks/usePreventScreenCapture.ts	Adds a hook to enable/restore screen-capture protection with fail-closed status.
apps/expo-example/src/hooks/useAppChangeListener.ts	Adds AppState transition listener hook with “latest callback” ref pattern.
apps/expo-example/src/components/export/WarningCard.tsx	Introduces reusable warning UI card for sensitive screens.
apps/expo-example/src/components/export/ExportWebView.tsx	Implements Turnkey export wrapper HTML + message bridge + navigation allowlist hardening.
apps/expo-example/src/components/export/ExportBox.tsx	Wraps export WebView with loading/error UI and mounts/unmounts for reveal lifecycle.
apps/expo-example/src/components/export/CaptureFailedScreen.tsx	Full-screen fail-closed UI when screen-capture prevention can’t be enabled.
apps/expo-example/src/app/index.tsx	Adds “Export wallet” link from home screen.
apps/expo-example/src/app/export/wallet.web.tsx	Web shim redirect for wallet export route.
apps/expo-example/src/app/export/wallet.tsx	Native seed phrase export screen with consent guard, biometrics, and capture protection.
apps/expo-example/src/app/export/private-key.web.tsx	Web shim redirect for private key export route.
apps/expo-example/src/app/export/private-key.tsx	Native private key export screen with consent guard, biometrics, and capture protection.
apps/expo-example/src/app/export/index.web.tsx	Web-only “export disabled” screen.
apps/expo-example/src/app/export/index.tsx	Consent screen with checkbox + navigation to reveal routes.
apps/expo-example/src/app/export/_layout.tsx	Route-group layout providing consent context and reset-on-background behavior.
apps/expo-example/src/app/_layout.tsx	Registers export route under authenticated stack.
apps/expo-example/README.md	Documents new wallet export flow and links to the detailed export hardening doc.
apps/expo-example/package.json	Adds/pins expo-local-authentication, expo-screen-capture, and react-native-webview; pins Turnkey deps.
apps/expo-example/docs/wallet-export.md	Adds detailed design/security rationale and hardening guidance for the export flow.
apps/expo-example/app.json	Adds expo-local-authentication plugin configuration (Face ID permission string).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[OmarBasem]

Tested on physical devices on iOS and Android, most auth flows are working except for dynamic links on both platforms, in addition to passkeys and universal links on iOS which needs extra setup (discussed on Slack, yet to be setup and tested out)

Export wallet looks good

Transactions looks good

A small comment on the email input keyboard, should not hide the email input