@procivis/react-native-one-core 1.33398.0 → 1.41710.0

package/android/src/main/java/ch/procivis/one/core/ubiqu/UbiquKeyStorage.kt

@@ -0,0 +1,256 @@
+package ch.procivis.one.core.ubiqu
+
+import android.annotation.SuppressLint
+import android.util.Base64
+import android.util.Log
+import androidx.appcompat.app.AppCompatActivity
+import ch.procivis.one.core.GeneratedKeyBindingDto
+import ch.procivis.one.core.NativeKeyStorage
+import ch.procivis.one.core.NativeKeyStorageException
+import ch.procivis.one.core.ubiqu.PinPadRunner.RequestType
+import ch.procivis.one.core.ubiqu.PinPadRunner.cancelPinPadFlow
+import ch.procivis.one.core.ubiqu.PinPadRunner.startPinPadFlow
+import ch.procivis.one.core.ubiqu.Util.asyncCallback
+import ch.procivis.one.core.ubiqu.Util.exceptionWrapper
+import ch.procivis.one.core.ubiqu.Util.runOnUIThread
+import ch.procivis.one.core.ubiqu.dataformats.CreateIdentityRequest
+import ch.procivis.one.core.ubiqu.dataformats.RegisterRSEResponse
+import com.facebook.react.bridge.ReactApplicationContext
+import com.ubiqu.eid.sdk.UbqSdk
+import com.ubiqu.eid.sdk.backend.assets.UbqAsset
+import com.ubiqu.eid.sdk.backend.assets.UbqDerivedAsset
+import com.ubiqu.eid.sdk.dataformats.UnsignedData
+import com.ubiqu.eid.sdk.enums.CryptoTypes
+import com.ubiqu.eid.sdk.enums.UbqAssetState
+import com.ubiqu.eid.sdk.requests.UbqRequestFlow
+import com.ubiqu.eid.sdk.utils.Utilities.checkBiometricsAvailable
+import com.ubiqu.eid.sdk.utils.Utilities.checkBiometricsSupported
+import java.util.Arrays
+import java.util.UUID
+
+@SuppressLint("LogNotTimber")
+class UbiquKeyStorage(private val context: ReactApplicationContext) : NativeKeyStorage {
+    companion object {
+        private const val TAG = "ch.procivis.one.core.ubiqu.UbiquKeyStorage"
+
+        // Procivis secrets for Ubiqu
+        private const val CONFIG_FILE_CONTENT = "{" +
+                "\"id\": \"26c46847-152e-44e8-b73a-b7d4c51c7074\"," +
+                "\"version\": \"0\"," +
+                "\"content\": \"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\"," +
+                "\"signature\": \"ijEe2xRd36VNR7WwAgDqBbt1jpvuqS/NJL6RG+w3x9gWImR/wm/7W3mCHTlEEJ6AS0md2hVZG1pKvZqApAG788xIeVSSDfuMYn57yCu8XPBVloQazGQu4xU9WjbocbKc5VNtu0Sb1us5tBsW1wJt8eQLaPErihEcQ9HW/EaXz1h5s4pKwed/bsuLtH1HdCulLMs1IKhJKuSWzjuaf2l9Tmg2Z354C2mPm8UnXX2TE77PVxCXegIic9U6tDOgelDgGLjKFLbZwkxpuK8kSRPnvSS/K8vkyl+5KxQEwNL6DC+glFWDwB3PpWi/reniqc5QzrBMUgsdMMoPTaWaXi9F8A==\"" +
+                "}"
+        private const val IDENTITY_SERVICE_URL = "https://api.identity.strongpin.ubiqu-sandbox.com"
+        private const val ORGANISATION_ID = "88e5fe80-106e-465c-a29d-1822d3790feb"
+        private const val TOKEN_GENERATOR_URL =
+            "https://api.token-generator.strongpin.ubiqu-sandbox.com/ubiqu/"
+        private const val API_KEY =
+            "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2FwaS5pZGVudGl0eS5zdHJvbmdwaW4udWJpcXUtc2FuZGJveC5jb20iLCJpYXQiOjE3MzgzMzY2NTksImp0aSI6Ijc2NTY0M2FhLTI2NzgtNDFjZC04N2RiLThhODhmMzdjZDVhNSIsInNjb3BlIjoic2VydmljZV9hY2NvdW50Iiwic3ViIjoicHJvY2l2aXMtdGVzdCIsImF1ZCI6Imh0dHBzOi8vYXBpLnRva2VuLWdlbmVyYXRvci5zdHJvbmdwaW4udWJpcXUtc2FuZGJveC5jb20vdWJpcXUvIiwidG9rZW5fdHlwZSI6ImFwaV9rZXkifQ.RZtik0TlyoCd8M5BIKCsa0vQVols9eqB3QsvxPK-t5BvQO-v39VZoEQWahQCVQ2OKScEKX_EUeFiK0v1kzTLvKVGIIYuLYIBYJf6QQkc2MWroco54iDPMnK6_8J7EdRXdDhDH3-ukpzRrHwvOfAH50WGNco1U5QSqwvuwoWYWVANBZSBCSOMI4zYrNomEUbo04b-V10VjdHYMcpac14XxSNaxATSEliDVGv_JrAEOXSTs49ebGLT4OOdLHLoAfwu1NylpbvJQnhJYlpudzWf-46FM58uxCYs0DphYMtC6sC0XM1nhvcgli1ngzn-llSyaCQ1TY3PStU8RKxCtfa95A"
+
+        // ASN.1 prefix used for EdDSA public keys
+        private val EDDSA_PREFIX_ASN1 =
+            byteArrayOf(0x30, 0x2a, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x03, 0x21, 0x00)
+
+        @Volatile
+        var listenerCount = 0
+    }
+
+    // ==== NativeKeyStorage interface
+    override suspend fun generateKey(keyAlias: String): GeneratedKeyBindingDto {
+        return exceptionWrapper {
+            ensureUbiquSDKInitialized()
+
+            // a locked asset can be left out if previous initialization failed,
+            // in such case start all over
+            if (UbqSdk.assets.isNotEmpty() && UbqSdk.assets[0].state != UbqAssetState.NORMAL) {
+                Log.w(TAG, "Invalid asset state: ${UbqSdk.assets[0].state.name}, resetting")
+                UbqSdk.reset()
+            }
+
+            if (UbqSdk.assets.isEmpty()) {
+                val accessToken = TokenManager.getAccessToken()
+                val request = CreateIdentityRequest(UUID.randomUUID().toString())
+                val identityResponse = RegistrationManager.createIdentity(accessToken, request)
+                val rseResponse =
+                    RegistrationManager.registerRse(accessToken, identityResponse.body()!!.sub)
+                createMainUbqAsset(rseResponse.body()!!)
+            }
+
+            val asset = UbqSdk.assets[0]
+            val newKey = asset.createDerivedAsset(context, CryptoTypes.EdDSA_25519)
+
+            val keyContent = parsePemPubKeyContent(newKey.publicKey)
+            if (keyContent.size != 44) {
+                throw NativeKeyStorageException.KeyGenerationFailure("Invalid key length")
+            }
+
+            val prefix = Arrays.copyOfRange(keyContent, 0, 12)
+            if (!(EDDSA_PREFIX_ASN1 contentEquals prefix)) {
+                throw NativeKeyStorageException.KeyGenerationFailure("Invalid key prefix")
+            }
+
+            val publicKey = Arrays.copyOfRange(keyContent, 12, 44)
+            val keyReference = newKey.uuid.toString().toByteArray(Charsets.UTF_8)
+            return@exceptionWrapper GeneratedKeyBindingDto(keyReference, publicKey)
+        }
+    }
+
+    override suspend fun sign(keyReference: ByteArray, message: ByteArray): ByteArray {
+        return exceptionWrapper {
+            val derivedAssetId = UUID.fromString(keyReference.toString(Charsets.UTF_8))
+
+            val key =
+                getMainUbqAsset().listDerivedAssets(context).find { it.uuid == derivedAssetId }
+                    ?: throw NativeKeyStorageException.SignatureFailure("Ubiqu key not found")
+
+            val signature = signWithUbqAsset(key, message)
+                ?: throw NativeKeyStorageException.SignatureFailure("No signature provided")
+
+            return@exceptionWrapper Base64.decode(signature, Base64.DEFAULT)
+        }
+    }
+
+    // ==== public interface
+    suspend fun changePin(): String? {
+        return exceptionWrapper {
+            val asset = getMainUbqAsset()
+            return@exceptionWrapper runOnUIThread { promise ->
+                asset.changePin(onStarted = {
+                    startFlow(it, RequestType.CHANGE_PIN, promise)
+                }, onStartFailure = { e ->
+                    promise.fail(e)
+                })
+            }
+        }
+    }
+
+    fun getBiometricsSupported(): Boolean {
+        return exceptionWrapper {
+            return@exceptionWrapper checkBiometricsSupported(context) && checkBiometricsAvailable(
+                context
+            )
+        }
+    }
+
+    suspend fun getBiometricsEnabled(): Boolean {
+        return exceptionWrapper {
+            return@exceptionWrapper getMainUbqAsset().biometricsEnabled
+        }
+    }
+
+    suspend fun enableBiometrics(verifyBiometrics: Boolean): String? {
+        return exceptionWrapper {
+            val asset = getMainUbqAsset()
+            return@exceptionWrapper runOnUIThread { promise ->
+                val activity =
+                    context.currentActivity as? AppCompatActivity
+                        ?: throw NativeKeyStorageException.Unknown("No activity")
+                asset.addBiometrics(activity, verifyBiometrics, onStarted = {
+                    startFlow(it, RequestType.ADD_BIOMETRICS, promise)
+                }, onStartFailure = { e ->
+                    promise.fail(e)
+                })
+            }
+        }
+    }
+
+    suspend fun disableBiometrics() {
+        return exceptionWrapper {
+            getMainUbqAsset().removeBiometrics()
+        }
+    }
+
+    suspend fun reset() {
+        return exceptionWrapper {
+            ensureUbiquSDKInitialized()
+            UbqSdk.reset()
+        }
+    }
+
+    fun resetPinFlow() {
+        return exceptionWrapper {
+            cancelPinPadFlow()
+        }
+    }
+
+    // ==== private methods
+    @Volatile
+    private var sdkInitialized = false
+    private suspend fun ensureUbiquSDKInitialized() {
+        if (sdkInitialized) return
+        return runOnUIThread { promise ->
+            val activity = context.currentActivity
+                ?: throw NativeKeyStorageException.Unknown("No current activity")
+
+            UbqSdk.enableLogging(2)
+
+            val configFile = CONFIG_FILE_CONTENT.byteInputStream(Charsets.UTF_8)
+            UbqSdk.initialize(activity.application, configFile)
+
+            RegistrationManager.build(IDENTITY_SERVICE_URL, ORGANISATION_ID)
+            TokenManager.build(TOKEN_GENERATOR_URL, API_KEY)
+
+            sdkInitialized = true
+            promise.succeed(Unit)
+        }
+    }
+
+    private suspend fun createMainUbqAsset(rseResponse: RegisterRSEResponse): String? {
+        return runOnUIThread { promise ->
+            UbqSdk.subscribe(
+                rseResponse.nonce,
+                rseResponse.puk,
+                onStarted = {
+                    startFlow(it, RequestType.SUBSCRIBE, promise)
+                },
+                onStartFailure = { e ->
+                    promise.fail(e)
+                }
+            )
+        }
+    }
+
+    private suspend fun getMainUbqAsset(): UbqAsset {
+        ensureUbiquSDKInitialized()
+
+        if (UbqSdk.assets.isEmpty()) {
+            throw NativeKeyStorageException.Unknown("Ubiqu main asset missing")
+        }
+        val asset = UbqSdk.assets[0]
+        if (asset.state != UbqAssetState.NORMAL) {
+            throw NativeKeyStorageException.Unknown("Ubiqu main asset in wrong state: ${asset.state.name}")
+        }
+        return asset
+    }
+
+    @OptIn(ExperimentalStdlibApi::class)
+    private suspend fun signWithUbqAsset(key: UbqDerivedAsset, message: ByteArray): String? {
+        return asyncCallback { promise ->
+            val hexMessage = UnsignedData(message.toHexString())
+            key.use(context, hexMessage, onStarted = {
+                startFlow(it, RequestType.TRANSACTION, promise)
+            }, onStartFailure = { e ->
+                promise.fail(e)
+            })
+        }
+    }
+
+    private fun parsePemPubKeyContent(pem: String): ByteArray {
+        val base64Content = pem.split("\n").filter { part ->
+            part != "-----BEGIN PUBLIC KEY-----" && part != "-----END PUBLIC KEY-----"
+        }.joinToString(separator = "")
+        return Base64.decode(base64Content, Base64.DEFAULT)
+    }
+
+    private fun startFlow(
+        flow: UbqRequestFlow,
+        requestType: RequestType,
+        promise: Util.Promise<String?>
+    ) {
+        if (listenerCount == 0) {
+            promise.fail(NativeKeyStorageException.Unknown("No UI listeners"))
+        } else {
+            startPinPadFlow(context, flow, requestType, promise)
+        }
+    }
+}

package/android/src/main/java/ch/procivis/one/core/ubiqu/UbiquKeyStorage.kt_opensource

@@ -0,0 +1,51 @@
+package ch.procivis.one.core.ubiqu
+
+import ch.procivis.one.core.GeneratedKeyBindingDto
+import ch.procivis.one.core.NativeKeyStorage
+import ch.procivis.one.core.NativeKeyStorageException
+import com.facebook.react.bridge.ReactApplicationContext
+
+// Dummy implementation for licensed library
+class UbiquKeyStorage(private val context: ReactApplicationContext) : NativeKeyStorage {
+    companion object {
+        var listenerCount = 0
+    }
+
+    // ==== NativeKeyStorage interface
+    override suspend fun generateKey(keyAlias: String): GeneratedKeyBindingDto {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun sign(keyReference: ByteArray, message: ByteArray): ByteArray {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    // ==== public interface
+    fun changePin(): String? {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    fun getBiometricsSupported(): Boolean {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    fun getBiometricsEnabled(): Boolean {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    fun enableBiometrics(verifyBiometrics: Boolean): String? {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    fun disableBiometrics() {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    fun reset() {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    fun resetPinFlow() {
+        throw NativeKeyStorageException.Unsupported()
+    }
+}

package/android/src/main/java/ch/procivis/one/core/ubiqu/Util.kt

@@ -0,0 +1,74 @@
+package ch.procivis.one.core.ubiqu
+
+import android.annotation.SuppressLint
+import android.os.Handler
+import android.os.Looper
+import android.util.Log
+import ch.procivis.one.core.NativeKeyStorageException
+import kotlin.coroutines.Continuation
+import kotlin.coroutines.resume
+import kotlin.coroutines.resumeWithException
+import kotlin.coroutines.suspendCoroutine
+
+@SuppressLint("LogNotTimber")
+object Util {
+    val TAG = "ch.procivis.one.core.ubiqu"
+
+    class Promise<in T>(private val continuation: Continuation<T>) {
+        @Volatile
+        private var finished = false
+
+        @Synchronized
+        fun succeed(result: T) {
+            if (!finished) {
+                finished = true
+                continuation.resume(result)
+            }
+        }
+
+        @Synchronized
+        fun fail(error: Throwable) {
+            if (!finished) {
+                finished = true
+                continuation.resumeWithException(error)
+            }
+        }
+    }
+
+    suspend inline fun <T> asyncCallback(crossinline block: (Promise<T>) -> Unit): T {
+        return exceptionWrapper {
+            return@exceptionWrapper suspendCoroutine { continuation ->
+                val promise = Promise(continuation)
+                try {
+                    block(promise)
+                } catch (error: Throwable) {
+                    promise.fail(error)
+                }
+            }
+        }
+    }
+
+    inline fun <R> exceptionWrapper(function: () -> R): R {
+        try {
+            return function()
+        } catch (error: NativeKeyStorageException) {
+            Log.w(TAG, "NativeKeyStorageException: $error")
+            throw error
+        } catch (error: Throwable) {
+            Log.w(TAG, "Throwable: $error")
+            throw NativeKeyStorageException.Unknown(error.toString())
+        }
+    }
+
+    suspend inline fun <R> runOnUIThread(crossinline block: (Promise<R>) -> Unit): R {
+        return asyncCallback { promise ->
+            Handler(Looper.getMainLooper()).post {
+                try {
+                    block(promise)
+                } catch (e: Throwable) {
+                    promise.fail(e)
+                }
+            }
+        }
+    }
+}

package/android/src/main/java/ch/procivis/one/core/ubiqu/dataformats/CreateIdentityRequest.kt

@@ -0,0 +1,9 @@
+package ch.procivis.one.core.ubiqu.dataformats
+
+import kotlinx.serialization.SerialName
+import kotlinx.serialization.Serializable
+
+@Serializable
+data class CreateIdentityRequest(
+    @SerialName("sub") val sub: String
+)

package/android/src/main/java/ch/procivis/one/core/ubiqu/dataformats/CreateIdentityResponse.kt

@@ -0,0 +1,9 @@
+package ch.procivis.one.core.ubiqu.dataformats
+
+import kotlinx.serialization.SerialName
+import kotlinx.serialization.Serializable
+
+@Serializable
+data class CreateIdentityResponse(
+    @SerialName("sub") val sub: String
+)

package/android/src/main/java/ch/procivis/one/core/ubiqu/dataformats/RegisterRSEResponse.kt

@@ -0,0 +1,10 @@
+package ch.procivis.one.core.ubiqu.dataformats
+
+import kotlinx.serialization.SerialName
+import kotlinx.serialization.Serializable
+
+@Serializable
+data class RegisterRSEResponse(
+    @SerialName("nonce") val nonce: String,
+    @SerialName("puk") val puk: String
+)

package/core-sdk.json

@@ -1,16 +1,16 @@
 {
   "android": {
     "debug": {
-      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/33398/onecore-debug.aar",
-      "sha1": "06d7af07daa1a98ff1aad434aae6eeabac8531f0"
+      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/41710/onecore-debug.aar",
+      "sha1": "c07081741f81c7482148ef2d84ec85d869509563"
     },
     "release": {
-      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/33398/onecore-release.aar",
-      "sha1": "f5f0f535ef83e4c10019736fe86367b36c359d33"
+      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/41710/onecore-release.aar",
+      "sha1": "75e3b007ef873221f996b96be8bf4471b44d3919"
     }
   },
   "ios": {
-    "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/ios/33398/deploy.zip",
-    "sha1": "66f87203d8b3b36443c2bf6e1f2f577ccdf95907"
+    "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/ios/41710/deploy.zip",
+    "sha1": "938ca63f338b0539c9138808be5a4f2a7919a3c3"
   }
 }

package/dist/index.d.ts

@@ -1,6 +1,13 @@
 import { ONECore } from "./src/core";
+import * as ubiqu from "./src/ubiqu";
 export * from "./src/core";
 export * from "./src/error";
+export declare const Ubiqu: typeof ubiqu;
+export declare namespace Ubiqu {
+    type PinEventType = ubiqu.PinEventType;
+    type PinFlowType = ubiqu.PinFlowType;
+    type PinFlowStage = ubiqu.PinFlowStage;
+}
 /**
  * Initialize ONE Core
  * @note Beware that only one instance can be initialized at a time, repeated calls will fail

package/dist/index.js

@@ -1,11 +1,18 @@
 import { NativeModules } from "react-native";
 import { OneError } from "./src/error";
+import { interfaceMethodNames } from "./src/core";
+import * as ubiqu from "./src/ubiqu";
 export * from "./src/core";
 export * from "./src/error";
+export const Ubiqu = ubiqu;
 const ONE = NativeModules.ProcivisOneCoreModule;
+// New Architecture bridgeless issue workaround: see https://github.com/facebook/react-native/issues/43221
+interfaceMethodNames.forEach((method) => ONE?.[method]);
 // Config entities are exposed as serialized JSON, here conversion to structs
-const originalGetConfig = ONE.getConfig;
-ONE.getConfig = () => originalGetConfig().then((config) => objectMap(config, (entities) => objectMap(entities, (json) => JSON.parse(json))));
+const originalGetConfig = ONE?.getConfig;
+if (originalGetConfig) {
+    ONE.getConfig = () => originalGetConfig().then((config) => objectMap(config, (entities) => objectMap(entities, (json) => JSON.parse(json))));
+}
 /**
  * Initialize ONE Core
  * @note Beware that only one instance can be initialized at a time, repeated calls will fail
@@ -47,8 +54,7 @@ function wrapFn(fn, operation) {
         };
         // set name on the err handler to display the original function name in callstack
         Object.defineProperty(errHandler, "name", { value: operation });
-        // convert undefined parameters to null for proper parameter matching in native code
-        return fn(...args.map((x) => (x === undefined ? null : x))).catch(errHandler);
+        return fn(...args).catch(errHandler);
     };
 }
 function wrapObj(obj) {

package/dist/src/cache.d.ts

@@ -6,7 +6,3 @@ export declare enum CacheType {
     JSON_SCHEMA = "JSON_SCHEMA",
     TRUST_LIST = "TRUST_LIST"
 }
-export declare enum BypassCache {
-    DID_DOCUMENT = "DID_DOCUMENT",
-    STATUS_LIST_CREDENTIAL = "STATUS_LIST_CREDENTIAL"
-}

package/dist/src/cache.js

@@ -7,8 +7,3 @@ export var CacheType;
     CacheType["JSON_SCHEMA"] = "JSON_SCHEMA";
     CacheType["TRUST_LIST"] = "TRUST_LIST";
 })(CacheType || (CacheType = {}));
-export var BypassCache;
-(function (BypassCache) {
-    BypassCache["DID_DOCUMENT"] = "DID_DOCUMENT";
-    BypassCache["STATUS_LIST_CREDENTIAL"] = "STATUS_LIST_CREDENTIAL";
-})(BypassCache || (BypassCache = {}));

package/dist/src/config.d.ts

@@ -56,7 +56,7 @@ export interface RevocationCapabilities {
     operations: RevocationOperationEnum[];
 }
 export interface ConfigEntity<Capabilities> {
-    disabled?: boolean;
+    enabled?: boolean;
     capabilities: Capabilities;
     display: string;
     order: number;
@@ -110,14 +110,22 @@ export type DataTypeParams = {
     type: DataTypeEnum.Object;
     params?: undefined;
 };
+export interface IssuanceProtocolCapabilities {
+    didMethods: string[];
+}
+export interface VerificationProtocolCapabilities {
+    didMethods: string[];
+    supportedTransports: string[];
+}
 export interface Config {
     format: ConfigEntities<FormatCapabilities>;
-    exchange: ConfigEntities;
+    issuanceProtocol: ConfigEntities<IssuanceProtocolCapabilities>;
+    verificationProtocol: ConfigEntities<VerificationProtocolCapabilities>;
     transport: ConfigEntities;
     revocation: ConfigEntities<RevocationCapabilities>;
     did: ConfigEntities<DidCapabilities>;
     datatype: ConfigEntities<undefined, DataTypeParams>;
-    keyAlgorithm: ConfigEntities<KeyAlgorithmCapabilities>;
+    keyAlgorithm: ConfigEntities<KeyAlgorithmCapabilities, {}>;
     keyStorage: ConfigEntities<KeyStorageCapabilities>;
     trustManagement: ConfigEntities;
     cacheEntities: ConfigEntities;

package/dist/src/core.d.ts

@@ -9,7 +9,8 @@ import { ItemList } from "./list";
 import { CreateProofRequest, InvitationResultProofRequest, PresentationDefinition, PresentationDefinitionRequestedCredential, PresentationSubmitCredentialRequest, ProofDetail, ProofListItem, ProofListQuery, ProposeProofResponse, ShareProofRequest, ShareProofResponse } from "./proof";
 import { CreateProofSchemaRequest, ImportProofSchemaRequest, ProofSchema, ProofSchemaListItem, ProofSchemaListQuery, ShareProofSchemaResponse } from "./proofSchema";
 import { CreateRemoteTrustEntityRequest, CreateTrustAnchorRequest, CreateTrustEntityRequest, TrustAnchor, TrustAnchorListItem, TrustAnchorListQuery, TrustEntity, TrustEntityListItem, TrustEntityListQuery, UpdateRemoteTrustEntityRequest } from "./trust";
-import { BypassCache, CacheType } from "./cache";
+import { CacheType } from "./cache";
+import { CreateOrganisationRequest, UpsertOrganisationRequest } from "./organisation";
 export * from "./backup";
 export * from "./cache";
 export * from "./config";
@@ -19,6 +20,7 @@ export * from "./did";
 export * from "./history";
 export * from "./key";
 export * from "./list";
+export * from "./organisation";
 export * from "./proof";
 export * from "./proofSchema";
 export * from "./trust";
@@ -38,7 +40,8 @@ export interface ResolveJsonLdContextResponse {
 export interface ONECore {
     getVersion(): Promise<Version>;
     getConfig(): Promise<Config>;
-    createOrganisation(uuid: string | undefined): Promise<string>;
+    createOrganisation(request: CreateOrganisationRequest): Promise<string>;
+    upsertOrganisation(request: UpsertOrganisationRequest): Promise<void>;
     generateKey(keyRequest: KeyRequest): Promise<string>;
     createDid(didRequest: DidRequest): Promise<string>;
     getDids(query: DidListQuery): Promise<ItemList<DidListItem>>;
@@ -64,14 +67,14 @@ export interface ONECore {
     shareCredentialSchema(credentialSchemaId: CredentialSchema["id"]): Promise<ShareCredentialSchemaResponse>;
     getProof(proofId: ProofDetail["id"]): Promise<ProofDetail>;
     getProofs(query: ProofListQuery): Promise<ItemList<ProofListItem>>;
-    retractProof(proofId: ProofDetail["id"]): Promise<ProofDetail["id"]>;
+    deleteProof(proofId: ProofDetail["id"]): Promise<void>;
     proposeProof(exchange: string, organisationId: string): Promise<ProposeProofResponse>;
     createProofSchema(request: CreateProofSchemaRequest): Promise<ProofSchema["id"]>;
     getProofSchemas(query: ProofSchemaListQuery): Promise<ItemList<ProofSchemaListItem>>;
     getProofSchema(proofSchemaId: ProofSchema["id"]): Promise<ProofSchema>;
     deleteProofSchema(proofSchemaId: ProofSchema["id"]): Promise<void>;
     importProofSchema(request: ImportProofSchemaRequest): Promise<ProofSchema["id"]>;
-    checkRevocation(credentialIds: Array<CredentialListItem["id"]>, bypassCache: BypassCache[] | undefined): Promise<CredentialRevocationCheckResponse[]>;
+    checkRevocation(credentialIds: Array<CredentialListItem["id"]>, forceRefresh: boolean): Promise<CredentialRevocationCheckResponse[]>;
     createTrustAnchor(request: CreateTrustAnchorRequest): Promise<TrustAnchor["id"]>;
     deleteTrustAnchor(trustAnchorId: TrustAnchor["id"]): Promise<void>;
     getTrustAnchor(trustAnchorId: TrustAnchor["id"]): Promise<TrustAnchor>;
@@ -119,3 +122,4 @@ export interface ONECore {
      */
     uninitialize(deleteData: boolean): Promise<void>;
 }
+export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "getPresentationDefinition", "holderRejectProof", "holderSubmitProof", "getCredentials", "runTask", "checkCertificate", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "uninitialize"];