@ironcorelabs/ironweb 3.3.3 → 4.0.19

package/commonjs/Constants.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.Versions = exports.UserAndGroupTypes = exports.GroupPermissions = exports.Frame = exports.ErrorCodes = exports.CryptoConstants = exports.ALLOWED_ID_CHAR_REGEX = exports.HEADER_META_LENGTH_LENGTH = exports.VERSION_HEADER_LENGTH = exports.DOCUMENT_ENCRYPTION_DETAILS_VERSION_NUMBER = void 0;
 /**
  * Number which is prepended onto encrypted documents to denote which classification of encrypted data
  * the document represents. Used to have a place to denote header info, symmetric encryption details, etc
@@ -16,7 +17,7 @@ exports.CryptoConstants = {
     IV_LENGTH: 12,
     SALT_LENGTH: 32,
     AES_SYMMETRIC_KEY_LENGTH: 32,
-    PBKDF2_ITERATIONS: function () { return 250000; },
+    PBKDF2_ITERATIONS: 250000,
     NATIVE_DECRYPT_FAILURE_ERROR: "OperationError",
 };
 var ErrorCodes;
@@ -80,6 +81,10 @@ var ErrorCodes;
     ErrorCodes[ErrorCodes["GROUP_ROTATE_PRIVATE_KEY_NOT_ADMIN_FAILURE"] = 418] = "GROUP_ROTATE_PRIVATE_KEY_NOT_ADMIN_FAILURE";
     ErrorCodes[ErrorCodes["REQUEST_RATE_LIMITED"] = 500] = "REQUEST_RATE_LIMITED";
     ErrorCodes[ErrorCodes["POLICY_APPLY_REQUEST_FAILURE"] = 600] = "POLICY_APPLY_REQUEST_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_CREATE_INDEX_FAILURE"] = 700] = "SEARCH_CREATE_INDEX_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_INIT_INDEX_FAILURE"] = 701] = "SEARCH_INIT_INDEX_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_TOKENIZE_DATA_FAILURE"] = 702] = "SEARCH_TOKENIZE_DATA_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_TOKENIZE_QUERY_FAILURE"] = 703] = "SEARCH_TOKENIZE_QUERY_FAILURE";
 })(ErrorCodes = exports.ErrorCodes || (exports.ErrorCodes = {}));
 /*
  * Constants around frame communication
@@ -106,5 +111,5 @@ exports.UserAndGroupTypes = {
 };
 exports.Versions = {
     //This define is replaced at runtime during development, and at build time in the build script with the proper version
-    SDK_VERSION: "3.3.3",
+    SDK_VERSION: "4.0.19",
 };

package/commonjs/lib/SDKError.js

@@ -3,10 +3,12 @@ var __extends = (this && this.__extends) || (function () {
     var extendStatics = function (d, b) {
         extendStatics = Object.setPrototypeOf ||
             ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
-            function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
         return extendStatics(d, b);
     };
     return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
         extendStatics(d, b);
         function __() { this.constructor = d; }
         d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());

package/commonjs/lib/Utils.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.sliceArrayBuffer = exports.concatArrayBuffers = exports.transformKeyToBase64 = exports.publicKeyToBytes = exports.publicKeyToBase64 = exports.arrayBufferToUtf8String = exports.utf8StringToArrayBuffer = void 0;
 var UTF8 = require("@stablelib/utf8");
 var base64_js_1 = require("base64-js");
 /**
@@ -21,8 +22,8 @@ exports.arrayBufferToUtf8String = arrayBufferToUtf8String;
  */
 function publicKeyToBase64(publicKey) {
     return {
-        x: base64_js_1.fromByteArray(publicKey.x),
-        y: base64_js_1.fromByteArray(publicKey.y),
+        x: (0, base64_js_1.fromByteArray)(publicKey.x),
+        y: (0, base64_js_1.fromByteArray)(publicKey.y),
     };
 }
 exports.publicKeyToBase64 = publicKeyToBase64;
@@ -31,8 +32,8 @@ exports.publicKeyToBase64 = publicKeyToBase64;
  */
 function publicKeyToBytes(publicKey) {
     return {
-        x: base64_js_1.toByteArray(publicKey.x),
-        y: base64_js_1.toByteArray(publicKey.y),
+        x: (0, base64_js_1.toByteArray)(publicKey.x),
+        y: (0, base64_js_1.toByteArray)(publicKey.y),
     };
 }
 exports.publicKeyToBytes = publicKeyToBytes;
@@ -43,10 +44,10 @@ function transformKeyToBase64(transformKey) {
     return {
         ephemeralPublicKey: publicKeyToBase64(transformKey.ephemeralPublicKey),
         toPublicKey: publicKeyToBase64(transformKey.toPublicKey),
-        encryptedTempKey: base64_js_1.fromByteArray(transformKey.encryptedTempKey),
-        hashedTempKey: base64_js_1.fromByteArray(transformKey.hashedTempKey),
-        publicSigningKey: base64_js_1.fromByteArray(transformKey.publicSigningKey),
-        signature: base64_js_1.fromByteArray(transformKey.signature),
+        encryptedTempKey: (0, base64_js_1.fromByteArray)(transformKey.encryptedTempKey),
+        hashedTempKey: (0, base64_js_1.fromByteArray)(transformKey.hashedTempKey),
+        publicSigningKey: (0, base64_js_1.fromByteArray)(transformKey.publicSigningKey),
+        signature: (0, base64_js_1.fromByteArray)(transformKey.signature),
     };
 }
 exports.transformKeyToBase64 = transformKeyToBase64;

package/commonjs/shim/FrameMediator.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-var es6_promise_1 = require("es6-promise");
+exports.sendMessage = exports.messenger = exports.ShimMessenger = void 0;
 var futurejs_1 = require("futurejs");
 var Constants_1 = require("../Constants");
 var SDKError_1 = require("../lib/SDKError");
@@ -67,7 +67,7 @@ exports.ShimMessenger = ShimMessenger;
  */
 var frame = window.document.createElement("iframe");
 exports.messenger = new ShimMessenger(frame);
-var frameLoadedPromise = new es6_promise_1.Promise(function (resolve, reject) {
+var frameLoadedPromise = new Promise(function (resolve, reject) {
     //The frame "load" even fires even if the frame failed to load (e.g. 404). So once it loads, we want to verify that it is actually
     //responding to messages we pass it. So pass a test message and verify we get a response within a second. If it does, we resolve
     //this Promise for all future messages. If it fails we reject with the appropriate SDK error message.
@@ -87,7 +87,7 @@ frame.style.display = "none";
 frame.style.position = "absolute";
 frame.style.top = "-999px";
 frame.style.left = "-999px";
-frame.src = "" + Constants_1.Frame.FRAME_DOMAIN + Constants_1.Frame.FRAME_PATH + "?version=" + Constants_1.Versions.SDK_VERSION;
+frame.src = "".concat(Constants_1.Frame.FRAME_DOMAIN).concat(Constants_1.Frame.FRAME_PATH, "?version=").concat(Constants_1.Versions.SDK_VERSION);
 window.document.body.appendChild(frame);
 /**
  * Return a simple Future wrapper around existing frame load Promise so that we wait until the iFrame has loaded before we post any messages to it. We

package/commonjs/shim/Initialize.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.initialize = exports.createUserDeviceKeys = exports.createNewUser = void 0;
 var futurejs_1 = require("futurejs");
 var Constants_1 = require("../Constants");
 var SDKError_1 = require("../lib/SDKError");
@@ -22,7 +23,7 @@ function getJWT(jwtCallback) {
         if (typeof jwt === "string" && jwt.length > 0) {
             return futurejs_1.default.of(jwt);
         }
-        return futurejs_1.default.reject(new SDKError_1.default(new Error("JWT should be a non-zero length string, but instead got '" + jwt + "'"), Constants_1.ErrorCodes.JWT_RETRIEVAL_FAILURE));
+        return futurejs_1.default.reject(new SDKError_1.default(new Error("JWT should be a non-zero length string, but instead got '".concat(jwt, "'")), Constants_1.ErrorCodes.JWT_RETRIEVAL_FAILURE));
     });
 }
 /**
@@ -42,7 +43,7 @@ function invokePasscodeCallback(passcodeCallback, doesUserExist) {
         if (typeof passcode === "string" && passcode.length > 0) {
             return futurejs_1.default.of(passcode);
         }
-        return futurejs_1.default.reject(new SDKError_1.default(new Error("User provided passcode should be a non-zero length string, but instead got '" + passcode + "'"), Constants_1.ErrorCodes.PASSCODE_RETRIEVAL_FAILURE));
+        return futurejs_1.default.reject(new SDKError_1.default(new Error("User provided passcode should be a non-zero length string, but instead got '".concat(passcode, "'")), Constants_1.ErrorCodes.PASSCODE_RETRIEVAL_FAILURE));
     });
 }
 /**
@@ -60,15 +61,15 @@ function setUserPasscode(doesUserExist, passcode) {
         return FrameMediator.sendMessage(payload);
     })
         .map(function (sdkResponse) {
-        ShimUtils_1.storeParentWindowSymmetricKey(sdkResponse.message.symmetricKey);
-        ShimUtils_1.setSDKInitialized();
+        (0, ShimUtils_1.storeParentWindowSymmetricKey)(sdkResponse.message.symmetricKey);
+        (0, ShimUtils_1.setSDKInitialized)();
         return { user: sdkResponse.message.user, groupsNeedingRotation: sdkResponse.message.groupsNeedingRotation };
     });
 }
 /**
  * Create a new user using a JWT callback. Returns the created user's info if successful.
  */
-exports.createNewUser = function (jwtCallback, passcode, needsRotation) {
+var createNewUser = function (jwtCallback, passcode, needsRotation) {
     if (needsRotation === void 0) { needsRotation = false; }
     return getJWT(jwtCallback)
         .flatMap(function (jwtToken) {
@@ -89,10 +90,11 @@ exports.createNewUser = function (jwtCallback, passcode, needsRotation) {
     })
         .toPromise();
 };
+exports.createNewUser = createNewUser;
 /**
  * Create a set of device keys that aren't stored in the browser and are returned to the caller.
  */
-exports.createUserDeviceKeys = function (jwtCallback, passcode) {
+var createUserDeviceKeys = function (jwtCallback, passcode) {
     return getJWT(jwtCallback)
         .flatMap(function (jwtToken) {
         var payload = { type: "CREATE_DETATCHED_USER_DEVICE", message: { passcode: passcode, jwtToken: jwtToken } };
@@ -104,6 +106,7 @@ exports.createUserDeviceKeys = function (jwtCallback, passcode) {
     })
         .toPromise();
 };
+exports.createUserDeviceKeys = createUserDeviceKeys;
 /**
  * Initialize the API by getting a JWT and verifying the user. Returns either the SDK if the user has their set of
  * device keys, or returns asking for passcode if user needs to be created/updated.
@@ -118,7 +121,7 @@ function initialize(jwtCallback, passcodeCallback) {
             type: "INIT_SDK",
             message: {
                 jwtToken: jwtToken,
-                symmetricKey: ShimUtils_1.getParentWindowSymmetricKey(),
+                symmetricKey: (0, ShimUtils_1.getParentWindowSymmetricKey)(),
             },
         };
         return FrameMediator.sendMessage(payload);
@@ -129,8 +132,8 @@ function initialize(jwtCallback, passcodeCallback) {
                 return setUserPasscode(responsePayload.message.doesUserExist, passcode);
             });
         }
-        ShimUtils_1.storeParentWindowSymmetricKey(responsePayload.message.symmetricKey);
-        ShimUtils_1.setSDKInitialized();
+        (0, ShimUtils_1.storeParentWindowSymmetricKey)(responsePayload.message.symmetricKey);
+        (0, ShimUtils_1.setSDKInitialized)();
         return futurejs_1.default.of({
             user: responsePayload.message.user,
             groupsNeedingRotation: responsePayload.message.groupsNeedingRotation,

package/commonjs/shim/SDK.js

@@ -1,12 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.codec = exports.search = exports.group = exports.user = exports.document = void 0;
+var CodecSDK = require("./sdk/CodecSDK");
 var DocumentSDK = require("./sdk/DocumentSDK");
 var GroupSDK = require("./sdk/GroupSDK");
+var SearchSDK = require("./sdk/SearchSDK");
 var UserSDK = require("./sdk/UserSDK");
-var CodecSDK = require("./sdk/CodecSDK");
 // https://github.com/Microsoft/TypeScript/issues/420
 // whenever this lands in TS we can get stronger compiler checking of our API <-> API Interface definition.
 exports.document = DocumentSDK;
 exports.user = UserSDK;
 exports.group = GroupSDK;
+exports.search = SearchSDK;
 exports.codec = CodecSDK;

package/commonjs/shim/ShimUtils.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.dedupeAccessLists = exports.validateIDList = exports.validateAccessList = exports.validateEncryptedDeks = exports.validateEncryptedDocument = exports.validateDocumentData = exports.validateID = exports.validateOwnership = exports.dedupeArray = exports.clearParentWindowSymmetricKey = exports.getParentWindowSymmetricKey = exports.storeParentWindowSymmetricKey = exports.checkSDKInitialized = exports.clearSDKInitialized = exports.setSDKInitialized = void 0;
 var Constants_1 = require("../Constants");
 var SECRET_KEY_LOCAL_STORAGE_VERSION = "1";
 var hasInitializedSDK = false;
@@ -7,7 +8,7 @@ var hasInitializedSDK = false;
  * Generate parent window storage key that we'll use to store/retrieve the users symmetric key to decrypt their device/signing keys
  */
 function generateParentStorageKey() {
-    return SECRET_KEY_LOCAL_STORAGE_VERSION + "-icldassk";
+    return "".concat(SECRET_KEY_LOCAL_STORAGE_VERSION, "-icldassk");
 }
 /**
  * Mark SDK initialization as complete to allow SDK methods to be run
@@ -103,10 +104,10 @@ exports.validateOwnership = validateOwnership;
  */
 function validateID(id) {
     if (typeof id !== "string" || !id.length) {
-        throw new Error("Invalid ID provided. Expected a non-zero length string but got " + id);
+        throw new Error("Invalid ID provided. Expected a non-zero length string but got ".concat(id));
     }
     if (!Constants_1.ALLOWED_ID_CHAR_REGEX.test(id)) {
-        throw new Error("Invalid ID provided. Provided value includes invalid characters: '" + id + "'.");
+        throw new Error("Invalid ID provided. Provided value includes invalid characters: '".concat(id, "'."));
     }
 }
 exports.validateID = validateID;

package/commonjs/shim/index.js

@@ -1,8 +1,20 @@
 "use strict";
-function __export(m) {
-    for (var p in m) if (!exports.hasOwnProperty(p)) exports[p] = m[p];
-}
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDKError = exports.ErrorCodes = exports.isInitialized = exports.initialize = exports.createNewDeviceKeys = exports.createNewUser = void 0;
 var Constants_1 = require("../Constants");
 var SDKError_1 = require("../lib/SDKError");
 var Init = require("./Initialize");
@@ -11,7 +23,7 @@ var ShimUtils_1 = require("./ShimUtils");
  * Checks bowser functionality to ensure random number generation is supported.
  */
 function supportsRandomNumGen() {
-    var nativeCrypto = window.msCrypto || window.crypto;
+    var nativeCrypto = window.crypto;
     return typeof nativeCrypto === "object" && typeof nativeCrypto.getRandomValues === "function";
 }
 /**
@@ -92,7 +104,7 @@ exports.initialize = initialize;
  */
 function isInitialized() {
     try {
-        ShimUtils_1.checkSDKInitialized();
+        (0, ShimUtils_1.checkSDKInitialized)();
         return true;
     }
     catch (_) {
@@ -107,10 +119,10 @@ exports.isInitialized = isInitialized;
  * List of SDK Error Codes
  */
 var Constants_2 = require("../Constants");
-exports.ErrorCodes = Constants_2.ErrorCodes;
+Object.defineProperty(exports, "ErrorCodes", { enumerable: true, get: function () { return Constants_2.ErrorCodes; } });
 /**
  * SDK Error which extends normal Error object but adds `code` property which will be one of the ErrorCodes from above
  */
 var SDKError_2 = require("../lib/SDKError");
-exports.SDKError = SDKError_2.default;
-__export(require("./SDK"));
+Object.defineProperty(exports, "SDKError", { enumerable: true, get: function () { return SDKError_2.default; } });
+__exportStar(require("./SDK"), exports);

package/commonjs/shim/sdk/CodecSDK.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.base64 = exports.utf8 = void 0;
 var utf8_1 = require("@stablelib/utf8");
 var base64_js_1 = require("base64-js");
 exports.utf8 = {
@@ -8,14 +9,14 @@ exports.utf8 = {
      * @param {Uint8Array} bytes Array of bytes to convert into UTF-8
      */
     fromBytes: function (bytes) {
-        return utf8_1.decode(bytes);
+        return (0, utf8_1.decode)(bytes);
     },
     /**
      * Convert a valid UTF-8 string into an array of bytes. This operation will throw an exception if the string provided is not valid UTF-8.
      * @param {string} utf8String UTF-8 string to convert into bytes
      */
     toBytes: function (utf8String) {
-        return utf8_1.encode(utf8String);
+        return (0, utf8_1.encode)(utf8String);
     },
 };
 exports.base64 = {
@@ -24,13 +25,13 @@ exports.base64 = {
      * @param {Uint8Array} bytes Array of bytes to convert into Base64
      */
     fromBytes: function (bytes) {
-        return base64_js_1.fromByteArray(bytes);
+        return (0, base64_js_1.fromByteArray)(bytes);
     },
     /**
      * Convert a valid Base64 string into an array of bytes. This operation will throw an exception if the string provided is not valid Base64.
      * @param {string} base64String Base64 string to convert into bytes
      */
     toBytes: function (base64String) {
-        return base64_js_1.toByteArray(base64String);
+        return (0, base64_js_1.toByteArray)(base64String);
     },
 };

package/commonjs/shim/sdk/DocumentSDK.js

@@ -1,5 +1,22 @@
 "use strict";
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.advanced = exports.revokeAccess = exports.grantAccess = exports.updateName = exports.updateEncryptedData = exports.updateEncryptedDataInStore = exports.encrypt = exports.encryptToStore = exports.decrypt = exports.decryptFromStore = exports.getDocumentIDFromBytes = exports.getMetadata = exports.list = void 0;
 var futurejs_1 = require("futurejs");
 var Constants_1 = require("../../Constants");
 var SDKError_1 = require("../../lib/SDKError");
@@ -14,8 +31,8 @@ var MAX_DOCUMENT_SIZE = 1024 * 2 * 1000; //2MB
  */
 function calculateDocumentCreateOptionsDefault(options) {
     //Generate a random ID for the document if the user didn't provide one
-    var randomBytes = (window.msCrypto || window.crypto).getRandomValues(new Uint8Array(16));
-    var hexID = Array.prototype.map.call(randomBytes, function (byte) { return ("00" + byte.toString(16)).slice(-2); }).join("");
+    var randomBytes = window.crypto.getRandomValues(new Uint8Array(16));
+    var hexID = Array.prototype.map.call(randomBytes, function (byte) { return "00".concat(byte.toString(16)).slice(-2); }).join("");
     if (!options) {
         return { documentID: hexID, documentName: "", accessList: { users: [], groups: [], grantToAuthor: true } };
     }
@@ -91,10 +108,12 @@ function getDocumentIDFromBytes(documentData) {
 }
 exports.getDocumentIDFromBytes = getDocumentIDFromBytes;
 /**
+ * @deprecated Use `decrypt` instead.
  * Retrieve and decrypt a document from the document store. Returns a Promise which will be resolved once the document has been retrieved and decrypted.
  * @param {string} documentID ID of the document to retrieve
  */
 function decryptFromStore(documentID) {
+    console.warn("decryptFromStore is deprecated. Use decrypt instead.");
     ShimUtils.checkSDKInitialized();
     ShimUtils.validateID(documentID);
     var payload = {
@@ -136,6 +155,7 @@ function decrypt(documentID, documentData) {
 }
 exports.decrypt = decrypt;
 /**
+ * @deprecated Use `encrypt` instead and manage storage of the result yourself.
  * Creates a new encrypted document within the store. Returns a Promise which will be resolved once the data has been fully encrypted and saved.
  * @param {Uint8Array}            documentData Data to save for document
  * @param {DocumentCreateOptions} options      Document create options. Includes:
@@ -148,16 +168,17 @@ exports.decrypt = decrypt;
  *                                                   grantToAuthor: boolean - Should the create grant access to the logged in user. Defaults to true.
  */
 function encryptToStore(documentData, options) {
+    console.warn("encryptToStore is deprecated. Use encrypt instead and manage storage of the result yourself.");
     ShimUtils.checkSDKInitialized();
     ShimUtils.validateDocumentData(documentData);
     if (documentData.length > MAX_DOCUMENT_SIZE) {
-        return Promise.reject(new SDKError_1.default(new Error("Document of length " + documentData.length + " exceeds maximum allowed byte size of " + MAX_DOCUMENT_SIZE), Constants_1.ErrorCodes.DOCUMENT_MAX_SIZE_EXCEEDED));
+        return Promise.reject(new SDKError_1.default(new Error("Document of length ".concat(documentData.length, " exceeds maximum allowed byte size of ").concat(MAX_DOCUMENT_SIZE)), Constants_1.ErrorCodes.DOCUMENT_MAX_SIZE_EXCEEDED));
     }
     var encryptOptions = calculateDocumentCreateOptionsDefault(options);
     if (encryptOptions.documentID) {
         ShimUtils.validateID(encryptOptions.documentID);
     }
-    var _a = ShimUtils.dedupeAccessLists(encryptOptions.accessList), userGrants = _a[0], groupGrants = _a[1];
+    var _a = __read(ShimUtils.dedupeAccessLists(encryptOptions.accessList), 2), userGrants = _a[0], groupGrants = _a[1];
     var payload = {
         type: "DOCUMENT_STORE_ENCRYPT",
         message: {
@@ -198,7 +219,7 @@ function encrypt(documentData, options) {
     if (encryptOptions.documentID) {
         ShimUtils.validateID(encryptOptions.documentID);
     }
-    var _a = ShimUtils.dedupeAccessLists(encryptOptions.accessList), userGrants = _a[0], groupGrants = _a[1];
+    var _a = __read(ShimUtils.dedupeAccessLists(encryptOptions.accessList), 2), userGrants = _a[0], groupGrants = _a[1];
     var payload = {
         type: "DOCUMENT_ENCRYPT",
         message: {
@@ -229,7 +250,7 @@ function updateEncryptedDataInStore(documentID, newDocumentData) {
     ShimUtils.validateID(documentID);
     ShimUtils.validateDocumentData(newDocumentData);
     if (newDocumentData.length > MAX_DOCUMENT_SIZE) {
-        return Promise.reject(new SDKError_1.default(new Error("Document of length " + newDocumentData.length + " exceeds maximum allowed byte size of " + MAX_DOCUMENT_SIZE), Constants_1.ErrorCodes.DOCUMENT_MAX_SIZE_EXCEEDED));
+        return Promise.reject(new SDKError_1.default(new Error("Document of length ".concat(newDocumentData.length, " exceeds maximum allowed byte size of ").concat(MAX_DOCUMENT_SIZE)), Constants_1.ErrorCodes.DOCUMENT_MAX_SIZE_EXCEEDED));
     }
     var payload = {
         type: "DOCUMENT_STORE_UPDATE_DATA",
@@ -303,7 +324,7 @@ function grantAccess(documentID, grantList) {
     ShimUtils.checkSDKInitialized();
     ShimUtils.validateID(documentID);
     ShimUtils.validateAccessList(grantList);
-    var _a = ShimUtils.dedupeAccessLists(grantList), userGrants = _a[0], groupGrants = _a[1];
+    var _a = __read(ShimUtils.dedupeAccessLists(grantList), 2), userGrants = _a[0], groupGrants = _a[1];
     var payload = {
         type: "DOCUMENT_GRANT",
         message: {
@@ -330,7 +351,7 @@ function revokeAccess(documentID, revokeList) {
     ShimUtils.checkSDKInitialized();
     ShimUtils.validateID(documentID);
     ShimUtils.validateAccessList(revokeList);
-    var _a = ShimUtils.dedupeAccessLists(revokeList), userRevocations = _a[0], groupRevocations = _a[1];
+    var _a = __read(ShimUtils.dedupeAccessLists(revokeList), 2), userRevocations = _a[0], groupRevocations = _a[1];
     var payload = {
         type: "DOCUMENT_REVOKE",
         message: {
@@ -395,7 +416,7 @@ exports.advanced = {
         if (encryptOptions.documentID) {
             ShimUtils.validateID(encryptOptions.documentID);
         }
-        var _a = ShimUtils.dedupeAccessLists(encryptOptions.accessList), userGrants = _a[0], groupGrants = _a[1];
+        var _a = __read(ShimUtils.dedupeAccessLists(encryptOptions.accessList), 2), userGrants = _a[0], groupGrants = _a[1];
         var payload = {
             type: "DOCUMENT_UNMANAGED_ENCRYPT",
             message: {

package/commonjs/shim/sdk/GroupSDK.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteGroup = exports.removeSelfAsMember = exports.removeMembers = exports.addMembers = exports.removeAdmins = exports.addAdmins = exports.update = exports.rotatePrivateKey = exports.create = exports.get = exports.list = void 0;
 var FrameMediator = require("../FrameMediator");
 var ShimUtils = require("../ShimUtils");
 /**

package/commonjs/shim/sdk/SearchSDK.js

@@ -0,0 +1,99 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.transliterateString = exports.initializeBlindSearchIndex = exports.createBlindSearchIndex = void 0;
+var FrameMediator = require("../FrameMediator");
+var ShimUtils = require("../ShimUtils");
+/**
+ * Class that is used to represent an initialized search index. Holds the search index ID (which is just a random ID used in the
+ * frames decrypted salt in-memory cache) so it can pass that down to the frame when tokenizing data.
+ */
+var InitializedSearchIndex = /** @class */ (function () {
+    function InitializedSearchIndex(searchIndexId) {
+        this.searchIndexId = searchIndexId;
+    }
+    InitializedSearchIndex.prototype.tokenizeData = function (data, partitionId) {
+        return FrameMediator.sendMessage({
+            type: "BLIND_SEARCH_INDEX_TOKENIZE_DATA",
+            message: {
+                data: data,
+                partitionId: partitionId,
+                searchIndexId: this.searchIndexId,
+            },
+        })
+            .map(function (_a) {
+            var message = _a.message;
+            return message;
+        })
+            .toPromise();
+    };
+    InitializedSearchIndex.prototype.tokenizeQuery = function (query, partitionId) {
+        return FrameMediator.sendMessage({
+            type: "BLIND_SEARCH_INDEX_TOKENIZE_QUERY",
+            message: {
+                query: query,
+                partitionId: partitionId,
+                searchIndexId: this.searchIndexId,
+            },
+        })
+            .map(function (_a) {
+            var message = _a.message;
+            return message;
+        })
+            .toPromise();
+    };
+    return InitializedSearchIndex;
+}());
+/**
+ * Create a new blind search index and allow it to be decryptable by the provided group members. Creates and encrypts a new unmanaged
+ * document which is returned to the caller to store.
+ */
+var createBlindSearchIndex = function (groupId) {
+    ShimUtils.checkSDKInitialized();
+    ShimUtils.validateID(groupId);
+    return FrameMediator.sendMessage({ type: "BLIND_SEARCH_INDEX_CREATE", message: { groupId: groupId } })
+        .map(function (_a) {
+        var message = _a.message;
+        return message;
+    })
+        .toPromise();
+};
+exports.createBlindSearchIndex = createBlindSearchIndex;
+/**
+ * Initialize a blind search index using the fields returned from the createBlindSearchIndex method. Resolves with an instance of the
+ * InitializedSearchIndex class which
+ */
+var initializeBlindSearchIndex = function (index) {
+    ShimUtils.checkSDKInitialized();
+    ShimUtils.validateDocumentData(index.searchIndexEncryptedSalt);
+    ShimUtils.validateDocumentData(index.searchIndexEdeks);
+    return FrameMediator.sendMessage({ type: "BLIND_SEARCH_INDEX_INIT", message: __assign({}, index) })
+        .map(function (_a) {
+        var message = _a.message;
+        return new InitializedSearchIndex(message.searchIndexId);
+    })
+        .toPromise();
+};
+exports.initializeBlindSearchIndex = initializeBlindSearchIndex;
+/**
+ * Transliterate the provided string by latinizing each character and removing all special characters.
+ */
+var transliterateString = function (string) {
+    return FrameMediator.sendMessage({ type: "SEARCH_TRANSLITERATE_STRING", message: string })
+        .map(function (_a) {
+        var message = _a.message;
+        return message;
+    })
+        .toPromise();
+};
+exports.transliterateString = transliterateString;

package/commonjs/shim/sdk/UserSDK.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.deauthorizeDevice = exports.rotateMasterKey = exports.changePasscode = void 0;
 var ShimUtils_1 = require("../ShimUtils");
 var FrameMediator = require("../FrameMediator");
 /**
@@ -9,7 +10,7 @@ var FrameMediator = require("../FrameMediator");
  * @param {string} newPasscode     New passcode
  */
 function changePasscode(currentPasscode, newPasscode) {
-    ShimUtils_1.checkSDKInitialized();
+    (0, ShimUtils_1.checkSDKInitialized)();
     var payload = {
         type: "CHANGE_USER_PASSCODE",
         message: { currentPasscode: currentPasscode, newPasscode: newPasscode },
@@ -24,7 +25,7 @@ exports.changePasscode = changePasscode;
  * @param {string} passcode The users current passcode
  */
 function rotateMasterKey(passcode) {
-    ShimUtils_1.checkSDKInitialized();
+    (0, ShimUtils_1.checkSDKInitialized)();
     var payload = {
         type: "ROTATE_USER_PRIVATE_KEY",
         message: { passcode: passcode },
@@ -39,18 +40,18 @@ exports.rotateMasterKey = rotateMasterKey;
  * This method should usually be called whenever the current user logs out of your application.
  */
 function deauthorizeDevice() {
-    ShimUtils_1.checkSDKInitialized();
+    (0, ShimUtils_1.checkSDKInitialized)();
     var payload = {
         type: "DEAUTHORIZE_DEVICE",
         message: null,
     };
     //Clear the local symmetric key from local storage, then send a request to clear the frames local storage. Once that's complete clear the SDK init flag
     //so that the user has to rerun init before the SDK methods will work again.
-    ShimUtils_1.clearParentWindowSymmetricKey();
+    (0, ShimUtils_1.clearParentWindowSymmetricKey)();
     return FrameMediator.sendMessage(payload)
         .map(function (_a) {
         var message = _a.message;
-        ShimUtils_1.clearSDKInitialized();
+        (0, ShimUtils_1.clearSDKInitialized)();
         return { transformKeyDeleted: message };
     })
         .toPromise();

package/es/Constants.js

@@ -14,7 +14,7 @@ export var CryptoConstants = {
     IV_LENGTH: 12,
     SALT_LENGTH: 32,
     AES_SYMMETRIC_KEY_LENGTH: 32,
-    PBKDF2_ITERATIONS: function () { return 250000; },
+    PBKDF2_ITERATIONS: 250000,
     NATIVE_DECRYPT_FAILURE_ERROR: "OperationError",
 };
 export var ErrorCodes;
@@ -78,6 +78,10 @@ export var ErrorCodes;
     ErrorCodes[ErrorCodes["GROUP_ROTATE_PRIVATE_KEY_NOT_ADMIN_FAILURE"] = 418] = "GROUP_ROTATE_PRIVATE_KEY_NOT_ADMIN_FAILURE";
     ErrorCodes[ErrorCodes["REQUEST_RATE_LIMITED"] = 500] = "REQUEST_RATE_LIMITED";
     ErrorCodes[ErrorCodes["POLICY_APPLY_REQUEST_FAILURE"] = 600] = "POLICY_APPLY_REQUEST_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_CREATE_INDEX_FAILURE"] = 700] = "SEARCH_CREATE_INDEX_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_INIT_INDEX_FAILURE"] = 701] = "SEARCH_INIT_INDEX_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_TOKENIZE_DATA_FAILURE"] = 702] = "SEARCH_TOKENIZE_DATA_FAILURE";
+    ErrorCodes[ErrorCodes["SEARCH_TOKENIZE_QUERY_FAILURE"] = 703] = "SEARCH_TOKENIZE_QUERY_FAILURE";
 })(ErrorCodes || (ErrorCodes = {}));
 /*
  * Constants around frame communication
@@ -104,5 +108,5 @@ export var UserAndGroupTypes = {
 };
 export var Versions = {
     //This define is replaced at runtime during development, and at build time in the build script with the proper version
-    SDK_VERSION: "3.3.3",
+    SDK_VERSION: "4.0.19",
 };