@signalapp/libsignal-client 0.17.0 → 0.18.0

package/Native.d.ts

@@ -1,11 +1,14 @@
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 
 // WARNING: this file was automatically generated
 
 type Uuid = Buffer;
+
+/// A Native.Timestamp may be measured in seconds or in milliseconds;
+/// what's important is that it's an integer less than Number.MAX_SAFE_INTEGER.
 type Timestamp = number;
 
 export abstract class IdentityKeyStore {
@@ -51,9 +54,12 @@ export function Aes256GcmSiv_Decrypt(aesGcmSiv: Wrapper<Aes256GcmSiv>, ctext: Bu
 export function Aes256GcmSiv_Encrypt(aesGcmSivObj: Wrapper<Aes256GcmSiv>, ptext: Buffer, nonce: Buffer, associatedData: Buffer): Buffer;
 export function Aes256GcmSiv_New(key: Buffer): Aes256GcmSiv;
 export function AuthCredentialPresentation_CheckValidContents(presentationBytes: Buffer): void;
-export function AuthCredentialPresentation_GetRedemptionTime(presentationBytes: Buffer): number;
+export function AuthCredentialPresentation_GetPniCiphertext(presentationBytes: Buffer): Buffer;
+export function AuthCredentialPresentation_GetRedemptionTime(presentationBytes: Buffer): Timestamp;
 export function AuthCredentialPresentation_GetUuidCiphertext(presentationBytes: Buffer): Serialized<UuidCiphertext>;
 export function AuthCredentialResponse_CheckValidContents(buffer: Buffer): void;
+export function AuthCredentialWithPniResponse_CheckValidContents(buffer: Buffer): void;
+export function AuthCredentialWithPni_CheckValidContents(buffer: Buffer): void;
 export function AuthCredential_CheckValidContents(buffer: Buffer): void;
 export function Cds2ClientState_CompleteHandshake(cli: Wrapper<Cds2ClientState>, handshakeReceived: Buffer): void;
 export function Cds2ClientState_EstablishedRecv(cli: Wrapper<Cds2ClientState>, receivedCiphertext: Buffer): Buffer;
@@ -70,6 +76,9 @@ export function DecryptionErrorMessage_GetDeviceId(obj: Wrapper<DecryptionErrorM
 export function DecryptionErrorMessage_GetRatchetKey(m: Wrapper<DecryptionErrorMessage>): PublicKey | null;
 export function DecryptionErrorMessage_GetTimestamp(obj: Wrapper<DecryptionErrorMessage>): Timestamp;
 export function DecryptionErrorMessage_Serialize(obj: Wrapper<DecryptionErrorMessage>): Buffer;
+export function ExpiringProfileKeyCredentialResponse_CheckValidContents(buffer: Buffer): void;
+export function ExpiringProfileKeyCredential_CheckValidContents(buffer: Buffer): void;
+export function ExpiringProfileKeyCredential_GetExpirationTime(credential: Serialized<ExpiringProfileKeyCredential>): Timestamp;
 export function Fingerprint_DisplayString(obj: Wrapper<Fingerprint>): string;
 export function Fingerprint_New(iterations: number, version: number, localIdentifier: Buffer, localKey: Wrapper<PublicKey>, remoteIdentifier: Buffer, remoteKey: Wrapper<PublicKey>): Fingerprint;
 export function Fingerprint_ScannableEncoding(obj: Wrapper<Fingerprint>): Buffer;
@@ -160,7 +169,7 @@ export function PublicKey_GetPublicKeyBytes(obj: Wrapper<PublicKey>): Buffer;
 export function PublicKey_Serialize(obj: Wrapper<PublicKey>): Buffer;
 export function PublicKey_Verify(key: Wrapper<PublicKey>, message: Buffer, signature: Buffer): boolean;
 export function ReceiptCredentialPresentation_CheckValidContents(buffer: Buffer): void;
-export function ReceiptCredentialPresentation_GetReceiptExpirationTime(presentation: Serialized<ReceiptCredentialPresentation>): Buffer;
+export function ReceiptCredentialPresentation_GetReceiptExpirationTime(presentation: Serialized<ReceiptCredentialPresentation>): Timestamp;
 export function ReceiptCredentialPresentation_GetReceiptLevel(presentation: Serialized<ReceiptCredentialPresentation>): Buffer;
 export function ReceiptCredentialPresentation_GetReceiptSerial(presentation: Serialized<ReceiptCredentialPresentation>): Buffer;
 export function ReceiptCredentialRequestContext_CheckValidContents(buffer: Buffer): void;
@@ -168,7 +177,7 @@ export function ReceiptCredentialRequestContext_GetRequest(requestContext: Seria
 export function ReceiptCredentialRequest_CheckValidContents(buffer: Buffer): void;
 export function ReceiptCredentialResponse_CheckValidContents(buffer: Buffer): void;
 export function ReceiptCredential_CheckValidContents(buffer: Buffer): void;
-export function ReceiptCredential_GetReceiptExpirationTime(receiptCredential: Serialized<ReceiptCredential>): Buffer;
+export function ReceiptCredential_GetReceiptExpirationTime(receiptCredential: Serialized<ReceiptCredential>): Timestamp;
 export function ReceiptCredential_GetReceiptLevel(receiptCredential: Serialized<ReceiptCredential>): Buffer;
 export function ScannableFingerprint_Compare(fprint1: Buffer, fprint2: Buffer): boolean;
 export function SealedSenderDecryptionResult_GetDeviceId(obj: Wrapper<SealedSenderDecryptionResult>): number;
@@ -220,6 +229,8 @@ export function ServerCertificate_GetSignature(obj: Wrapper<ServerCertificate>):
 export function ServerCertificate_New(keyId: number, serverKey: Wrapper<PublicKey>, trustRoot: Wrapper<PrivateKey>): ServerCertificate;
 export function ServerPublicParams_CheckValidContents(buffer: Buffer): void;
 export function ServerPublicParams_CreateAuthCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, authCredential: Serialized<AuthCredential>): Buffer;
+export function ServerPublicParams_CreateAuthCredentialWithPniPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, authCredential: Serialized<AuthCredentialWithPni>): Buffer;
+export function ServerPublicParams_CreateExpiringProfileKeyCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, profileKeyCredential: Serialized<ExpiringProfileKeyCredential>): Buffer;
 export function ServerPublicParams_CreatePniCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, pniCredential: Serialized<PniCredential>): Buffer;
 export function ServerPublicParams_CreatePniCredentialRequestContextDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, aci: Uuid, pni: Uuid, profileKey: Serialized<ProfileKey>): Serialized<PniCredentialRequestContext>;
 export function ServerPublicParams_CreateProfileKeyCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, profileKeyCredential: Serialized<ProfileKeyCredential>): Buffer;
@@ -227,6 +238,8 @@ export function ServerPublicParams_CreateProfileKeyCredentialRequestContextDeter
 export function ServerPublicParams_CreateReceiptCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, receiptCredential: Serialized<ReceiptCredential>): Serialized<ReceiptCredentialPresentation>;
 export function ServerPublicParams_CreateReceiptCredentialRequestContextDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, receiptSerial: Buffer): Serialized<ReceiptCredentialRequestContext>;
 export function ServerPublicParams_ReceiveAuthCredential(params: Serialized<ServerPublicParams>, uuid: Uuid, redemptionTime: number, response: Serialized<AuthCredentialResponse>): Serialized<AuthCredential>;
+export function ServerPublicParams_ReceiveAuthCredentialWithPni(params: Serialized<ServerPublicParams>, aci: Uuid, pni: Uuid, redemptionTime: Timestamp, response: Serialized<AuthCredentialWithPniResponse>): Serialized<AuthCredentialWithPni>;
+export function ServerPublicParams_ReceiveExpiringProfileKeyCredential(serverPublicParams: Serialized<ServerPublicParams>, requestContext: Serialized<ProfileKeyCredentialRequestContext>, response: Serialized<ExpiringProfileKeyCredentialResponse>, currentTimeInSeconds: Timestamp): Serialized<ExpiringProfileKeyCredential>;
 export function ServerPublicParams_ReceivePniCredential(serverPublicParams: Serialized<ServerPublicParams>, requestContext: Serialized<PniCredentialRequestContext>, response: Serialized<PniCredentialResponse>): Serialized<PniCredential>;
 export function ServerPublicParams_ReceiveProfileKeyCredential(serverPublicParams: Serialized<ServerPublicParams>, requestContext: Serialized<ProfileKeyCredentialRequestContext>, response: Serialized<ProfileKeyCredentialResponse>): Serialized<ProfileKeyCredential>;
 export function ServerPublicParams_ReceiveReceiptCredential(serverPublicParams: Serialized<ServerPublicParams>, requestContext: Serialized<ReceiptCredentialRequestContext>, response: Serialized<ReceiptCredentialResponse>): Serialized<ReceiptCredential>;
@@ -235,13 +248,15 @@ export function ServerSecretParams_CheckValidContents(buffer: Buffer): void;
 export function ServerSecretParams_GenerateDeterministic(randomness: Buffer): Serialized<ServerSecretParams>;
 export function ServerSecretParams_GetPublicParams(params: Serialized<ServerSecretParams>): Serialized<ServerPublicParams>;
 export function ServerSecretParams_IssueAuthCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, uuid: Uuid, redemptionTime: number): Serialized<AuthCredentialResponse>;
+export function ServerSecretParams_IssueAuthCredentialWithPniDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Uuid, pni: Uuid, redemptionTime: Timestamp): Serialized<AuthCredentialWithPniResponse>;
+export function ServerSecretParams_IssueExpiringProfileKeyCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ProfileKeyCredentialRequest>, uuid: Uuid, commitment: Serialized<ProfileKeyCommitment>, expirationInSeconds: Timestamp): Serialized<ExpiringProfileKeyCredentialResponse>;
 export function ServerSecretParams_IssuePniCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ProfileKeyCredentialRequest>, aci: Uuid, pni: Uuid, commitment: Serialized<ProfileKeyCommitment>): Serialized<PniCredentialResponse>;
 export function ServerSecretParams_IssueProfileKeyCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ProfileKeyCredentialRequest>, uuid: Uuid, commitment: Serialized<ProfileKeyCommitment>): Serialized<ProfileKeyCredentialResponse>;
-export function ServerSecretParams_IssueReceiptCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ReceiptCredentialRequest>, receiptExpirationTime: Buffer, receiptLevel: Buffer): Serialized<ReceiptCredentialResponse>;
+export function ServerSecretParams_IssueReceiptCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ReceiptCredentialRequest>, receiptExpirationTime: Timestamp, receiptLevel: Buffer): Serialized<ReceiptCredentialResponse>;
 export function ServerSecretParams_SignDeterministic(params: Serialized<ServerSecretParams>, randomness: Buffer, message: Buffer): Buffer;
 export function ServerSecretParams_VerifyAuthCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, groupPublicParams: Serialized<GroupPublicParams>, presentationBytes: Buffer): void;
 export function ServerSecretParams_VerifyPniCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, groupPublicParams: Serialized<GroupPublicParams>, presentationBytes: Buffer): void;
-export function ServerSecretParams_VerifyProfileKeyCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, groupPublicParams: Serialized<GroupPublicParams>, presentationBytes: Buffer): void;
+export function ServerSecretParams_VerifyProfileKeyCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, groupPublicParams: Serialized<GroupPublicParams>, presentationBytes: Buffer, currentTimeInSeconds: Timestamp): void;
 export function ServerSecretParams_VerifyReceiptCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, presentation: Serialized<ReceiptCredentialPresentation>): void;
 export function SessionBuilder_ProcessPreKeyBundle(bundle: Wrapper<PreKeyBundle>, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, ctx: null): Promise<void>;
 export function SessionCipher_DecryptPreKeySignalMessage(message: Wrapper<PreKeySignalMessage>, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore, ctx: null): Promise<Buffer>;
@@ -253,9 +268,7 @@ export function SessionRecord_Deserialize(data: Buffer): SessionRecord;
 export function SessionRecord_GetLocalRegistrationId(obj: Wrapper<SessionRecord>): number;
 export function SessionRecord_GetRemoteRegistrationId(obj: Wrapper<SessionRecord>): number;
 export function SessionRecord_HasCurrentState(obj: Wrapper<SessionRecord>): boolean;
-export function SessionRecord_NeedsPniSignature(obj: Wrapper<SessionRecord>): boolean;
 export function SessionRecord_Serialize(obj: Wrapper<SessionRecord>): Buffer;
-export function SessionRecord_SetNeedsPniSignature(s: Wrapper<SessionRecord>, needsPniSignature: boolean): void;
 export function SignalMessage_Deserialize(data: Buffer): SignalMessage;
 export function SignalMessage_GetBody(obj: Wrapper<SignalMessage>): Buffer;
 export function SignalMessage_GetCounter(obj: Wrapper<SignalMessage>): number;
@@ -284,9 +297,13 @@ export function initLogger(maxLevel: LogLevel, callback: (level: LogLevel, targe
 interface Aes256GcmSiv { readonly __type: unique symbol; }
 interface AuthCredential { readonly __type: unique symbol; }
 interface AuthCredentialResponse { readonly __type: unique symbol; }
+interface AuthCredentialWithPni { readonly __type: unique symbol; }
+interface AuthCredentialWithPniResponse { readonly __type: unique symbol; }
 interface Cds2ClientState { readonly __type: unique symbol; }
 interface CiphertextMessage { readonly __type: unique symbol; }
 interface DecryptionErrorMessage { readonly __type: unique symbol; }
+interface ExpiringProfileKeyCredential { readonly __type: unique symbol; }
+interface ExpiringProfileKeyCredentialResponse { readonly __type: unique symbol; }
 interface Fingerprint { readonly __type: unique symbol; }
 interface GroupMasterKey { readonly __type: unique symbol; }
 interface GroupPublicParams { readonly __type: unique symbol; }

package/dist/index.d.ts

@@ -153,19 +153,6 @@ export declare class SessionRecord {
     localRegistrationId(): number;
     remoteRegistrationId(): number;
     hasCurrentState(): boolean;
-    /**
-     * Returns true if this session was marked as needing a PNI signature and has not received a
-     * reply.
-     *
-     * Precondition: `this.hasCurrentState()`
-     */
-    needsPniSignature(): boolean;
-    /**
-     * Marks whether this session needs a PNI signature included in outgoing messages.
-     *
-     * Precondition: `this.hasCurrentState()`
-     */
-    setNeedsPniSignature(needsPniSignature: boolean): void;
     currentRatchetKeyMatches(key: PublicKey): boolean;
 }
 export declare class ServerCertificate {

package/dist/index.js

@@ -383,23 +383,6 @@ class SessionRecord {
     hasCurrentState() {
         return Native.SessionRecord_HasCurrentState(this);
     }
-    /**
-     * Returns true if this session was marked as needing a PNI signature and has not received a
-     * reply.
-     *
-     * Precondition: `this.hasCurrentState()`
-     */
-    needsPniSignature() {
-        return Native.SessionRecord_NeedsPniSignature(this);
-    }
-    /**
-     * Marks whether this session needs a PNI signature included in outgoing messages.
-     *
-     * Precondition: `this.hasCurrentState()`
-     */
-    setNeedsPniSignature(needsPniSignature) {
-        Native.SessionRecord_SetNeedsPniSignature(this, needsPniSignature);
-    }
     currentRatchetKeyMatches(key) {
         return Native.SessionRecord_CurrentRatchetKeyMatches(this, key);
     }

package/dist/zkgroup/NotarySignature.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 import ByteArray from './internal/ByteArray';
 export default class NotarySignature extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/ServerPublicParams.d.ts

@@ -2,6 +2,7 @@
 import ByteArray from './internal/ByteArray';
 import NotarySignature from './NotarySignature';
 export default class ServerPublicParams extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     verifySignature(message: Buffer, notarySignature: NotarySignature): void;
 }

package/dist/zkgroup/ServerSecretParams.d.ts

@@ -3,6 +3,7 @@ import ByteArray from './internal/ByteArray';
 import ServerPublicParams from './ServerPublicParams';
 import NotarySignature from './NotarySignature';
 export default class ServerSecretParams extends ByteArray {
+    private readonly __type?;
     static generate(): ServerSecretParams;
     static generateWithRandom(random: Buffer): ServerSecretParams;
     constructor(contents: Buffer);

package/dist/zkgroup/ServerSecretParams.js

@@ -11,6 +11,9 @@ const Constants_1 = require("./internal/Constants");
 const ServerPublicParams_1 = require("./ServerPublicParams");
 const NotarySignature_1 = require("./NotarySignature");
 class ServerSecretParams extends ByteArray_1.default {
+    constructor(contents) {
+        super(contents, Native.ServerSecretParams_CheckValidContents);
+    }
     static generate() {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return ServerSecretParams.generateWithRandom(random);
@@ -18,9 +21,6 @@ class ServerSecretParams extends ByteArray_1.default {
     static generateWithRandom(random) {
         return new ServerSecretParams(Native.ServerSecretParams_GenerateDeterministic(random));
     }
-    constructor(contents) {
-        super(contents, Native.ServerSecretParams_CheckValidContents);
-    }
     getPublicParams() {
         return new ServerPublicParams_1.default(Native.ServerSecretParams_GetPublicParams(this.contents));
     }

package/dist/zkgroup/auth/AuthCredential.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class AuthCredential extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/auth/AuthCredentialPresentation.d.ts

@@ -2,7 +2,9 @@
 import ByteArray from '../internal/ByteArray';
 import UuidCiphertext from '../groups/UuidCiphertext';
 export default class AuthCredentialPresentation extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     getUuidCiphertext(): UuidCiphertext;
-    getRedemptionTime(): number;
+    getPniCiphertext(): UuidCiphertext | null;
+    getRedemptionTime(): Date;
 }

package/dist/zkgroup/auth/AuthCredentialPresentation.js

@@ -1,6 +1,6 @@
 "use strict";
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -14,8 +14,15 @@ class AuthCredentialPresentation extends ByteArray_1.default {
     getUuidCiphertext() {
         return new UuidCiphertext_1.default(Native.AuthCredentialPresentation_GetUuidCiphertext(this.contents));
     }
+    getPniCiphertext() {
+        const ciphertextBytes = Native.AuthCredentialPresentation_GetPniCiphertext(this.contents);
+        if (ciphertextBytes === null) {
+            return null;
+        }
+        return new UuidCiphertext_1.default(ciphertextBytes);
+    }
     getRedemptionTime() {
-        return Native.AuthCredentialPresentation_GetRedemptionTime(this.contents);
+        return new Date(1000 * Native.AuthCredentialPresentation_GetRedemptionTime(this.contents));
     }
 }
 exports.default = AuthCredentialPresentation;

package/dist/zkgroup/auth/AuthCredentialResponse.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class AuthCredentialResponse extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/auth/AuthCredentialWithPni.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="node" />
+import ByteArray from '../internal/ByteArray';
+export default class AuthCredentialWithPni extends ByteArray {
+    private readonly __type?;
+    constructor(contents: Buffer);
+}

package/dist/zkgroup/auth/AuthCredentialWithPni.js

@@ -0,0 +1,15 @@
+"use strict";
+//
+// Copyright 2022 Signal Messenger, LLC.
+// SPDX-License-Identifier: AGPL-3.0-only
+//
+Object.defineProperty(exports, "__esModule", { value: true });
+const ByteArray_1 = require("../internal/ByteArray");
+const Native = require("../../../Native");
+class AuthCredentialWithPni extends ByteArray_1.default {
+    constructor(contents) {
+        super(contents, Native.AuthCredentialWithPni_CheckValidContents);
+    }
+}
+exports.default = AuthCredentialWithPni;
+//# sourceMappingURL=AuthCredentialWithPni.js.map

package/dist/zkgroup/auth/AuthCredentialWithPniResponse.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="node" />
+import ByteArray from '../internal/ByteArray';
+export default class AuthCredentialWithPniResponse extends ByteArray {
+    private readonly __type?;
+    constructor(contents: Buffer);
+}

package/dist/zkgroup/auth/AuthCredentialWithPniResponse.js

@@ -0,0 +1,15 @@
+"use strict";
+//
+// Copyright 2022 Signal Messenger, LLC.
+// SPDX-License-Identifier: AGPL-3.0-only
+//
+Object.defineProperty(exports, "__esModule", { value: true });
+const ByteArray_1 = require("../internal/ByteArray");
+const Native = require("../../../Native");
+class AuthCredentialWithPniResponse extends ByteArray_1.default {
+    constructor(contents) {
+        super(contents, Native.AuthCredentialWithPniResponse_CheckValidContents);
+    }
+}
+exports.default = AuthCredentialWithPniResponse;
+//# sourceMappingURL=AuthCredentialWithPniResponse.js.map

package/dist/zkgroup/auth/ClientZkAuthOperations.d.ts

@@ -3,12 +3,22 @@ import ServerPublicParams from '../ServerPublicParams';
 import AuthCredential from './AuthCredential';
 import AuthCredentialPresentation from './AuthCredentialPresentation';
 import AuthCredentialResponse from './AuthCredentialResponse';
+import AuthCredentialWithPni from './AuthCredentialWithPni';
+import AuthCredentialWithPniResponse from './AuthCredentialWithPniResponse';
 import GroupSecretParams from '../groups/GroupSecretParams';
 import { UUIDType } from '../internal/UUIDUtil';
 export default class ClientZkAuthOperations {
     serverPublicParams: ServerPublicParams;
     constructor(serverPublicParams: ServerPublicParams);
     receiveAuthCredential(uuid: UUIDType, redemptionTime: number, authCredentialResponse: AuthCredentialResponse): AuthCredential;
+    /**
+     * Produces the AuthCredentialWithPni from a server-generated AuthCredentialWithPniResponse.
+     *
+     * @param redemptionTime - This is provided by the server as an integer, and should be passed through directly.
+     */
+    receiveAuthCredentialWithPni(aci: UUIDType, pni: UUIDType, redemptionTime: number, authCredentialResponse: AuthCredentialWithPniResponse): AuthCredentialWithPni;
     createAuthCredentialPresentation(groupSecretParams: GroupSecretParams, authCredential: AuthCredential): AuthCredentialPresentation;
     createAuthCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, authCredential: AuthCredential): AuthCredentialPresentation;
+    createAuthCredentialWithPniPresentation(groupSecretParams: GroupSecretParams, authCredential: AuthCredentialWithPni): AuthCredentialPresentation;
+    createAuthCredentialWithPniPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, authCredential: AuthCredentialWithPni): AuthCredentialPresentation;
 }

package/dist/zkgroup/auth/ClientZkAuthOperations.js

@@ -1,6 +1,6 @@
 "use strict";
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -9,6 +9,7 @@ const Native = require("../../../Native");
 const Constants_1 = require("../internal/Constants");
 const AuthCredential_1 = require("./AuthCredential");
 const AuthCredentialPresentation_1 = require("./AuthCredentialPresentation");
+const AuthCredentialWithPni_1 = require("./AuthCredentialWithPni");
 const UUIDUtil_1 = require("../internal/UUIDUtil");
 class ClientZkAuthOperations {
     constructor(serverPublicParams) {
@@ -17,6 +18,14 @@ class ClientZkAuthOperations {
     receiveAuthCredential(uuid, redemptionTime, authCredentialResponse) {
         return new AuthCredential_1.default(Native.ServerPublicParams_ReceiveAuthCredential(this.serverPublicParams.getContents(), (0, UUIDUtil_1.fromUUID)(uuid), redemptionTime, authCredentialResponse.getContents()));
     }
+    /**
+     * Produces the AuthCredentialWithPni from a server-generated AuthCredentialWithPniResponse.
+     *
+     * @param redemptionTime - This is provided by the server as an integer, and should be passed through directly.
+     */
+    receiveAuthCredentialWithPni(aci, pni, redemptionTime, authCredentialResponse) {
+        return new AuthCredentialWithPni_1.default(Native.ServerPublicParams_ReceiveAuthCredentialWithPni(this.serverPublicParams.getContents(), (0, UUIDUtil_1.fromUUID)(aci), (0, UUIDUtil_1.fromUUID)(pni), redemptionTime, authCredentialResponse.getContents()));
+    }
     createAuthCredentialPresentation(groupSecretParams, authCredential) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.createAuthCredentialPresentationWithRandom(random, groupSecretParams, authCredential);
@@ -24,6 +33,13 @@ class ClientZkAuthOperations {
     createAuthCredentialPresentationWithRandom(random, groupSecretParams, authCredential) {
         return new AuthCredentialPresentation_1.default(Native.ServerPublicParams_CreateAuthCredentialPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), authCredential.getContents()));
     }
+    createAuthCredentialWithPniPresentation(groupSecretParams, authCredential) {
+        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
+        return this.createAuthCredentialWithPniPresentationWithRandom(random, groupSecretParams, authCredential);
+    }
+    createAuthCredentialWithPniPresentationWithRandom(random, groupSecretParams, authCredential) {
+        return new AuthCredentialPresentation_1.default(Native.ServerPublicParams_CreateAuthCredentialWithPniPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), authCredential.getContents()));
+    }
 }
 exports.default = ClientZkAuthOperations;
 //# sourceMappingURL=ClientZkAuthOperations.js.map

package/dist/zkgroup/auth/ServerZkAuthOperations.d.ts

@@ -2,6 +2,7 @@
 import ServerSecretParams from '../ServerSecretParams';
 import AuthCredentialResponse from './AuthCredentialResponse';
 import AuthCredentialPresentation from './AuthCredentialPresentation';
+import AuthCredentialWithPniResponse from './AuthCredentialWithPniResponse';
 import GroupPublicParams from '../groups/GroupPublicParams';
 import { UUIDType } from '../internal/UUIDUtil';
 export default class ServerZkAuthOperations {
@@ -9,5 +10,7 @@ export default class ServerZkAuthOperations {
     constructor(serverSecretParams: ServerSecretParams);
     issueAuthCredential(uuid: UUIDType, redemptionTime: number): AuthCredentialResponse;
     issueAuthCredentialWithRandom(random: Buffer, uuid: UUIDType, redemptionTime: number): AuthCredentialResponse;
+    issueAuthCredentialWithPni(aci: UUIDType, pni: UUIDType, redemptionTime: number): AuthCredentialWithPniResponse;
+    issueAuthCredentialWithPniWithRandom(random: Buffer, aci: UUIDType, pni: UUIDType, redemptionTime: number): AuthCredentialWithPniResponse;
     verifyAuthCredentialPresentation(groupPublicParams: GroupPublicParams, authCredentialPresentation: AuthCredentialPresentation): void;
 }

package/dist/zkgroup/auth/ServerZkAuthOperations.js

@@ -1,6 +1,6 @@
 "use strict";
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -8,6 +8,7 @@ const crypto_1 = require("crypto");
 const Constants_1 = require("../internal/Constants");
 const Native = require("../../../Native");
 const AuthCredentialResponse_1 = require("./AuthCredentialResponse");
+const AuthCredentialWithPniResponse_1 = require("./AuthCredentialWithPniResponse");
 const UUIDUtil_1 = require("../internal/UUIDUtil");
 class ServerZkAuthOperations {
     constructor(serverSecretParams) {
@@ -20,6 +21,13 @@ class ServerZkAuthOperations {
     issueAuthCredentialWithRandom(random, uuid, redemptionTime) {
         return new AuthCredentialResponse_1.default(Native.ServerSecretParams_IssueAuthCredentialDeterministic(this.serverSecretParams.getContents(), random, (0, UUIDUtil_1.fromUUID)(uuid), redemptionTime));
     }
+    issueAuthCredentialWithPni(aci, pni, redemptionTime) {
+        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
+        return this.issueAuthCredentialWithPniWithRandom(random, aci, pni, redemptionTime);
+    }
+    issueAuthCredentialWithPniWithRandom(random, aci, pni, redemptionTime) {
+        return new AuthCredentialWithPniResponse_1.default(Native.ServerSecretParams_IssueAuthCredentialWithPniDeterministic(this.serverSecretParams.getContents(), random, (0, UUIDUtil_1.fromUUID)(aci), (0, UUIDUtil_1.fromUUID)(pni), redemptionTime));
+    }
     verifyAuthCredentialPresentation(groupPublicParams, authCredentialPresentation) {
         Native.ServerSecretParams_VerifyAuthCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), authCredentialPresentation.getContents());
     }

package/dist/zkgroup/groups/GroupIdentifier.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class GroupIdentifier extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/groups/GroupMasterKey.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class GroupMasterKey extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/groups/GroupPublicParams.d.ts

@@ -2,6 +2,7 @@
 import ByteArray from '../internal/ByteArray';
 import GroupIdentifier from './GroupIdentifier';
 export default class GroupPublicParams extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     getGroupIdentifier(): GroupIdentifier;
 }

package/dist/zkgroup/groups/GroupSecretParams.d.ts

@@ -3,6 +3,7 @@ import ByteArray from '../internal/ByteArray';
 import GroupMasterKey from './GroupMasterKey';
 import GroupPublicParams from './GroupPublicParams';
 export default class GroupSecretParams extends ByteArray {
+    private readonly __type?;
     static generate(): GroupSecretParams;
     static generateWithRandom(random: Buffer): GroupSecretParams;
     static deriveFromMasterKey(groupMasterKey: GroupMasterKey): GroupSecretParams;

package/dist/zkgroup/groups/GroupSecretParams.js

@@ -11,6 +11,9 @@ const Constants_1 = require("../internal/Constants");
 const GroupMasterKey_1 = require("./GroupMasterKey");
 const GroupPublicParams_1 = require("./GroupPublicParams");
 class GroupSecretParams extends ByteArray_1.default {
+    constructor(contents) {
+        super(contents, Native.GroupSecretParams_CheckValidContents);
+    }
     static generate() {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return GroupSecretParams.generateWithRandom(random);
@@ -21,9 +24,6 @@ class GroupSecretParams extends ByteArray_1.default {
     static deriveFromMasterKey(groupMasterKey) {
         return new GroupSecretParams(Native.GroupSecretParams_DeriveFromMasterKey(groupMasterKey.getContents()));
     }
-    constructor(contents) {
-        super(contents, Native.GroupSecretParams_CheckValidContents);
-    }
     getMasterKey() {
         return new GroupMasterKey_1.default(Native.GroupSecretParams_GetMasterKey(this.contents));
     }

package/dist/zkgroup/groups/ProfileKeyCiphertext.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ProfileKeyCiphertext extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/groups/UuidCiphertext.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class UuidCiphertext extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/ClientZkProfileOperations.d.ts

@@ -1,6 +1,8 @@
 /// <reference types="node" />
 import ServerPublicParams from '../ServerPublicParams';
 import GroupSecretParams from '../groups/GroupSecretParams';
+import ExpiringProfileKeyCredential from './ExpiringProfileKeyCredential';
+import ExpiringProfileKeyCredentialResponse from './ExpiringProfileKeyCredentialResponse';
 import PniCredential from './PniCredential';
 import PniCredentialPresentation from './PniCredentialPresentation';
 import PniCredentialRequestContext from './PniCredentialRequestContext';
@@ -19,9 +21,12 @@ export default class ClientZkProfileOperations {
     createPniCredentialRequestContext(aci: UUIDType, pni: UUIDType, profileKey: ProfileKey): PniCredentialRequestContext;
     createPniCredentialRequestContextWithRandom(random: Buffer, aci: UUIDType, pni: UUIDType, profileKey: ProfileKey): PniCredentialRequestContext;
     receiveProfileKeyCredential(profileKeyCredentialRequestContext: ProfileKeyCredentialRequestContext, profileKeyCredentialResponse: ProfileKeyCredentialResponse): ProfileKeyCredential;
+    receiveExpiringProfileKeyCredential(profileKeyCredentialRequestContext: ProfileKeyCredentialRequestContext, profileKeyCredentialResponse: ExpiringProfileKeyCredentialResponse, now?: Date): ExpiringProfileKeyCredential;
     receivePniCredential(requestContext: PniCredentialRequestContext, response: PniCredentialResponse): PniCredential;
     createProfileKeyCredentialPresentation(groupSecretParams: GroupSecretParams, profileKeyCredential: ProfileKeyCredential): ProfileKeyCredentialPresentation;
     createProfileKeyCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, profileKeyCredential: ProfileKeyCredential): ProfileKeyCredentialPresentation;
+    createExpiringProfileKeyCredentialPresentation(groupSecretParams: GroupSecretParams, profileKeyCredential: ExpiringProfileKeyCredential): ProfileKeyCredentialPresentation;
+    createExpiringProfileKeyCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, profileKeyCredential: ExpiringProfileKeyCredential): ProfileKeyCredentialPresentation;
     createPniCredentialPresentation(groupSecretParams: GroupSecretParams, credential: PniCredential): PniCredentialPresentation;
     createPniCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, credential: PniCredential): PniCredentialPresentation;
 }

package/dist/zkgroup/profiles/ClientZkProfileOperations.js

@@ -1,12 +1,13 @@
 "use strict";
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
 const crypto_1 = require("crypto");
 const Constants_1 = require("../internal/Constants");
 const Native = require("../../../Native");
+const ExpiringProfileKeyCredential_1 = require("./ExpiringProfileKeyCredential");
 const PniCredential_1 = require("./PniCredential");
 const PniCredentialPresentation_1 = require("./PniCredentialPresentation");
 const PniCredentialRequestContext_1 = require("./PniCredentialRequestContext");
@@ -35,6 +36,9 @@ class ClientZkProfileOperations {
     receiveProfileKeyCredential(profileKeyCredentialRequestContext, profileKeyCredentialResponse) {
         return new ProfileKeyCredential_1.default(Native.ServerPublicParams_ReceiveProfileKeyCredential(this.serverPublicParams.getContents(), profileKeyCredentialRequestContext.getContents(), profileKeyCredentialResponse.getContents()));
     }
+    receiveExpiringProfileKeyCredential(profileKeyCredentialRequestContext, profileKeyCredentialResponse, now = new Date()) {
+        return new ExpiringProfileKeyCredential_1.default(Native.ServerPublicParams_ReceiveExpiringProfileKeyCredential(this.serverPublicParams.getContents(), profileKeyCredentialRequestContext.getContents(), profileKeyCredentialResponse.getContents(), Math.floor(now.getTime() / 1000)));
+    }
     receivePniCredential(requestContext, response) {
         return new PniCredential_1.default(Native.ServerPublicParams_ReceivePniCredential(this.serverPublicParams.getContents(), requestContext.getContents(), response.getContents()));
     }
@@ -45,6 +49,13 @@ class ClientZkProfileOperations {
     createProfileKeyCredentialPresentationWithRandom(random, groupSecretParams, profileKeyCredential) {
         return new ProfileKeyCredentialPresentation_1.default(Native.ServerPublicParams_CreateProfileKeyCredentialPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), profileKeyCredential.getContents()));
     }
+    createExpiringProfileKeyCredentialPresentation(groupSecretParams, profileKeyCredential) {
+        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
+        return this.createExpiringProfileKeyCredentialPresentationWithRandom(random, groupSecretParams, profileKeyCredential);
+    }
+    createExpiringProfileKeyCredentialPresentationWithRandom(random, groupSecretParams, profileKeyCredential) {
+        return new ProfileKeyCredentialPresentation_1.default(Native.ServerPublicParams_CreateExpiringProfileKeyCredentialPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), profileKeyCredential.getContents()));
+    }
     createPniCredentialPresentation(groupSecretParams, credential) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.createPniCredentialPresentationWithRandom(random, groupSecretParams, credential);

package/dist/zkgroup/profiles/ExpiringProfileKeyCredential.d.ts

@@ -0,0 +1,7 @@
+/// <reference types="node" />
+import ByteArray from '../internal/ByteArray';
+export default class ExpiringProfileKeyCredential extends ByteArray {
+    private readonly __type?;
+    constructor(contents: Buffer);
+    getExpirationTime(): Date;
+}

package/dist/zkgroup/profiles/ExpiringProfileKeyCredential.js

@@ -0,0 +1,19 @@
+"use strict";
+//
+// Copyright 2022 Signal Messenger, LLC.
+// SPDX-License-Identifier: AGPL-3.0-only
+//
+Object.defineProperty(exports, "__esModule", { value: true });
+const ByteArray_1 = require("../internal/ByteArray");
+const Native = require("../../../Native");
+class ExpiringProfileKeyCredential extends ByteArray_1.default {
+    constructor(contents) {
+        super(contents, Native.ExpiringProfileKeyCredential_CheckValidContents);
+    }
+    getExpirationTime() {
+        return new Date(1000 *
+            Native.ExpiringProfileKeyCredential_GetExpirationTime(this.contents));
+    }
+}
+exports.default = ExpiringProfileKeyCredential;
+//# sourceMappingURL=ExpiringProfileKeyCredential.js.map

package/dist/zkgroup/profiles/ExpiringProfileKeyCredentialResponse.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="node" />
+import ByteArray from '../internal/ByteArray';
+export default class ExpiringProfileKeyCredentialResponse extends ByteArray {
+    private readonly __type?;
+    constructor(contents: Buffer);
+}

package/dist/zkgroup/profiles/ExpiringProfileKeyCredentialResponse.js

@@ -0,0 +1,15 @@
+"use strict";
+//
+// Copyright 2022 Signal Messenger, LLC.
+// SPDX-License-Identifier: AGPL-3.0-only
+//
+Object.defineProperty(exports, "__esModule", { value: true });
+const ByteArray_1 = require("../internal/ByteArray");
+const Native = require("../../../Native");
+class ExpiringProfileKeyCredentialResponse extends ByteArray_1.default {
+    constructor(contents) {
+        super(contents, Native.ExpiringProfileKeyCredentialResponse_CheckValidContents);
+    }
+}
+exports.default = ExpiringProfileKeyCredentialResponse;
+//# sourceMappingURL=ExpiringProfileKeyCredentialResponse.js.map

package/dist/zkgroup/profiles/PniCredential.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class PniCredential extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/PniCredentialPresentation.d.ts

@@ -3,6 +3,7 @@ import ByteArray from '../internal/ByteArray';
 import UuidCiphertext from '../groups/UuidCiphertext';
 import ProfileKeyCiphertext from '../groups/ProfileKeyCiphertext';
 export default class PniCredentialPresentation extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     getAciCiphertext(): UuidCiphertext;
     getPniCiphertext(): UuidCiphertext;

package/dist/zkgroup/profiles/PniCredentialRequestContext.d.ts

@@ -2,6 +2,7 @@
 import ByteArray from '../internal/ByteArray';
 import ProfileKeyCredentialRequest from './ProfileKeyCredentialRequest';
 export default class PniCredentialRequestContext extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     getRequest(): ProfileKeyCredentialRequest;
 }

package/dist/zkgroup/profiles/PniCredentialResponse.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class PniCredentialResponse extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/ProfileKey.d.ts

@@ -4,6 +4,7 @@ import ProfileKeyCommitment from './ProfileKeyCommitment';
 import ProfileKeyVersion from './ProfileKeyVersion';
 import { UUIDType } from '../internal/UUIDUtil';
 export default class ProfileKey extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
     getCommitment(uuid: UUIDType): ProfileKeyCommitment;

package/dist/zkgroup/profiles/ProfileKeyCommitment.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ProfileKeyCommitment extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/ProfileKeyCredential.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ProfileKeyCredential extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/ProfileKeyCredentialPresentation.d.ts

@@ -3,6 +3,7 @@ import ByteArray from '../internal/ByteArray';
 import UuidCiphertext from '../groups/UuidCiphertext';
 import ProfileKeyCiphertext from '../groups/ProfileKeyCiphertext';
 export default class ProfileKeyCredentialPresentation extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     getUuidCiphertext(): UuidCiphertext;
     getProfileKeyCiphertext(): ProfileKeyCiphertext;

package/dist/zkgroup/profiles/ProfileKeyCredentialRequest.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ProfileKeyCredentialRequest extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/ProfileKeyCredentialRequestContext.d.ts

@@ -2,6 +2,7 @@
 import ByteArray from '../internal/ByteArray';
 import ProfileKeyCredentialRequest from './ProfileKeyCredentialRequest';
 export default class ProfileKeyCredentialRequestContext extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
     getRequest(): ProfileKeyCredentialRequest;
 }

package/dist/zkgroup/profiles/ProfileKeyCredentialResponse.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ProfileKeyCredentialResponse extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/profiles/ProfileKeyVersion.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ProfileKeyVersion extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer | string);
     toString(): string;

package/dist/zkgroup/profiles/ServerZkProfileOperations.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 import ServerSecretParams from '../ServerSecretParams';
 import GroupPublicParams from '../groups/GroupPublicParams';
+import ExpiringProfileKeyCredentialResponse from './ExpiringProfileKeyCredentialResponse';
 import PniCredentialPresentation from './PniCredentialPresentation';
 import PniCredentialResponse from './PniCredentialResponse';
 import ProfileKeyCommitment from './ProfileKeyCommitment';
@@ -13,8 +14,10 @@ export default class ServerZkProfileOperations {
     constructor(serverSecretParams: ServerSecretParams);
     issueProfileKeyCredential(profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment): ProfileKeyCredentialResponse;
     issueProfileKeyCredentialWithRandom(random: Buffer, profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment): ProfileKeyCredentialResponse;
+    issueExpiringProfileKeyCredential(profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment, expirationInSeconds: number): ExpiringProfileKeyCredentialResponse;
+    issueExpiringProfileKeyCredentialWithRandom(random: Buffer, profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment, expirationInSeconds: number): ExpiringProfileKeyCredentialResponse;
     issuePniCredential(profileKeyCredentialRequest: ProfileKeyCredentialRequest, aci: UUIDType, pni: UUIDType, profileKeyCommitment: ProfileKeyCommitment): PniCredentialResponse;
     issuePniCredentialWithRandom(random: Buffer, profileKeyCredentialRequest: ProfileKeyCredentialRequest, aci: UUIDType, pni: UUIDType, profileKeyCommitment: ProfileKeyCommitment): PniCredentialResponse;
-    verifyProfileKeyCredentialPresentation(groupPublicParams: GroupPublicParams, profileKeyCredentialPresentation: ProfileKeyCredentialPresentation): void;
+    verifyProfileKeyCredentialPresentation(groupPublicParams: GroupPublicParams, profileKeyCredentialPresentation: ProfileKeyCredentialPresentation, now?: Date): void;
     verifyPniCredentialPresentation(groupPublicParams: GroupPublicParams, presentation: PniCredentialPresentation): void;
 }

package/dist/zkgroup/profiles/ServerZkProfileOperations.js

@@ -1,12 +1,13 @@
 "use strict";
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
 const crypto_1 = require("crypto");
 const Native = require("../../../Native");
 const Constants_1 = require("../internal/Constants");
+const ExpiringProfileKeyCredentialResponse_1 = require("./ExpiringProfileKeyCredentialResponse");
 const PniCredentialResponse_1 = require("./PniCredentialResponse");
 const ProfileKeyCredentialResponse_1 = require("./ProfileKeyCredentialResponse");
 const UUIDUtil_1 = require("../internal/UUIDUtil");
@@ -21,6 +22,13 @@ class ServerZkProfileOperations {
     issueProfileKeyCredentialWithRandom(random, profileKeyCredentialRequest, uuid, profileKeyCommitment) {
         return new ProfileKeyCredentialResponse_1.default(Native.ServerSecretParams_IssueProfileKeyCredentialDeterministic(this.serverSecretParams.getContents(), random, profileKeyCredentialRequest.getContents(), (0, UUIDUtil_1.fromUUID)(uuid), profileKeyCommitment.getContents()));
     }
+    issueExpiringProfileKeyCredential(profileKeyCredentialRequest, uuid, profileKeyCommitment, expirationInSeconds) {
+        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
+        return this.issueExpiringProfileKeyCredentialWithRandom(random, profileKeyCredentialRequest, uuid, profileKeyCommitment, expirationInSeconds);
+    }
+    issueExpiringProfileKeyCredentialWithRandom(random, profileKeyCredentialRequest, uuid, profileKeyCommitment, expirationInSeconds) {
+        return new ExpiringProfileKeyCredentialResponse_1.default(Native.ServerSecretParams_IssueExpiringProfileKeyCredentialDeterministic(this.serverSecretParams.getContents(), random, profileKeyCredentialRequest.getContents(), (0, UUIDUtil_1.fromUUID)(uuid), profileKeyCommitment.getContents(), expirationInSeconds));
+    }
     issuePniCredential(profileKeyCredentialRequest, aci, pni, profileKeyCommitment) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.issuePniCredentialWithRandom(random, profileKeyCredentialRequest, aci, pni, profileKeyCommitment);
@@ -28,8 +36,8 @@ class ServerZkProfileOperations {
     issuePniCredentialWithRandom(random, profileKeyCredentialRequest, aci, pni, profileKeyCommitment) {
         return new PniCredentialResponse_1.default(Native.ServerSecretParams_IssuePniCredentialDeterministic(this.serverSecretParams.getContents(), random, profileKeyCredentialRequest.getContents(), (0, UUIDUtil_1.fromUUID)(aci), (0, UUIDUtil_1.fromUUID)(pni), profileKeyCommitment.getContents()));
     }
-    verifyProfileKeyCredentialPresentation(groupPublicParams, profileKeyCredentialPresentation) {
-        Native.ServerSecretParams_VerifyProfileKeyCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), profileKeyCredentialPresentation.getContents());
+    verifyProfileKeyCredentialPresentation(groupPublicParams, profileKeyCredentialPresentation, now = new Date()) {
+        Native.ServerSecretParams_VerifyProfileKeyCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), profileKeyCredentialPresentation.getContents(), Math.floor(now.getTime() / 1000));
     }
     verifyPniCredentialPresentation(groupPublicParams, presentation) {
         Native.ServerSecretParams_VerifyPniCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), presentation.getContents());

package/dist/zkgroup/receipts/ReceiptCredential.d.ts

@@ -1,7 +1,8 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ReceiptCredential extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
-    getReceiptExpirationTime(): bigint;
+    getReceiptExpirationTime(): number;
     getReceiptLevel(): bigint;
 }

package/dist/zkgroup/receipts/ReceiptCredential.js

@@ -11,7 +11,7 @@ class ReceiptCredential extends ByteArray_1.default {
         super(contents, Native.ReceiptCredential_CheckValidContents);
     }
     getReceiptExpirationTime() {
-        return Native.ReceiptCredential_GetReceiptExpirationTime(this.contents).readBigUInt64BE();
+        return Native.ReceiptCredential_GetReceiptExpirationTime(this.contents);
     }
     getReceiptLevel() {
         return Native.ReceiptCredential_GetReceiptLevel(this.contents).readBigUInt64BE();

package/dist/zkgroup/receipts/ReceiptCredentialPresentation.d.ts

@@ -2,9 +2,10 @@
 import ByteArray from '../internal/ByteArray';
 import ReceiptSerial from './ReceiptSerial';
 export default class ReceiptCredentialPresentation extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
-    getReceiptExpirationTime(): bigint;
+    getReceiptExpirationTime(): number;
     getReceiptLevel(): bigint;
     getReceiptSerialBytes(): ReceiptSerial;
 }

package/dist/zkgroup/receipts/ReceiptCredentialPresentation.js

@@ -12,7 +12,7 @@ class ReceiptCredentialPresentation extends ByteArray_1.default {
         super(contents, Native.ReceiptCredentialPresentation_CheckValidContents);
     }
     getReceiptExpirationTime() {
-        return Native.ReceiptCredentialPresentation_GetReceiptExpirationTime(this.contents).readBigUInt64BE();
+        return Native.ReceiptCredentialPresentation_GetReceiptExpirationTime(this.contents);
     }
     getReceiptLevel() {
         return Native.ReceiptCredentialPresentation_GetReceiptLevel(this.contents).readBigUInt64BE();

package/dist/zkgroup/receipts/ReceiptCredentialRequest.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ReceiptCredentialRequest extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/receipts/ReceiptCredentialRequestContext.d.ts

@@ -2,6 +2,7 @@
 import ByteArray from '../internal/ByteArray';
 import ReceiptCredentialRequest from './ReceiptCredentialRequest';
 export default class ReceiptCredentialRequestContext extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
     getRequest(): ReceiptCredentialRequest;

package/dist/zkgroup/receipts/ReceiptCredentialResponse.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ReceiptCredentialResponse extends ByteArray {
+    private readonly __type?;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/receipts/ReceiptSerial.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 import ByteArray from '../internal/ByteArray';
 export default class ReceiptSerial extends ByteArray {
+    private readonly __type?;
     static SIZE: number;
     constructor(contents: Buffer);
 }

package/dist/zkgroup/receipts/ServerZkReceiptOperations.d.ts

@@ -6,7 +6,7 @@ import ReceiptCredentialPresentation from './ReceiptCredentialPresentation';
 export default class ServerZkReceiptOperations {
     serverSecretParams: ServerSecretParams;
     constructor(serverSecretParams: ServerSecretParams);
-    issueReceiptCredential(receiptCredentialRequest: ReceiptCredentialRequest, receiptExpirationTime: bigint, receiptLevel: bigint): ReceiptCredentialResponse;
-    issueReceiptCredentialWithRandom(random: Buffer, receiptCredentialRequest: ReceiptCredentialRequest, receiptExpirationTime: bigint, receiptLevel: bigint): ReceiptCredentialResponse;
+    issueReceiptCredential(receiptCredentialRequest: ReceiptCredentialRequest, receiptExpirationTime: number, receiptLevel: bigint): ReceiptCredentialResponse;
+    issueReceiptCredentialWithRandom(random: Buffer, receiptCredentialRequest: ReceiptCredentialRequest, receiptExpirationTime: number, receiptLevel: bigint): ReceiptCredentialResponse;
     verifyReceiptCredentialPresentation(receiptCredentialPresentation: ReceiptCredentialPresentation): void;
 }

package/dist/zkgroup/receipts/ServerZkReceiptOperations.js

@@ -18,7 +18,7 @@ class ServerZkReceiptOperations {
         return this.issueReceiptCredentialWithRandom(random, receiptCredentialRequest, receiptExpirationTime, receiptLevel);
     }
     issueReceiptCredentialWithRandom(random, receiptCredentialRequest, receiptExpirationTime, receiptLevel) {
-        return new ReceiptCredentialResponse_1.default(Native.ServerSecretParams_IssueReceiptCredentialDeterministic(this.serverSecretParams.getContents(), random, receiptCredentialRequest.getContents(), (0, BigIntUtil_1.bufferFromBigUInt64BE)(receiptExpirationTime), (0, BigIntUtil_1.bufferFromBigUInt64BE)(receiptLevel)));
+        return new ReceiptCredentialResponse_1.default(Native.ServerSecretParams_IssueReceiptCredentialDeterministic(this.serverSecretParams.getContents(), random, receiptCredentialRequest.getContents(), receiptExpirationTime, (0, BigIntUtil_1.bufferFromBigUInt64BE)(receiptLevel)));
     }
     verifyReceiptCredentialPresentation(receiptCredentialPresentation) {
         Native.ServerSecretParams_VerifyReceiptCredentialPresentation(this.serverSecretParams.getContents(), receiptCredentialPresentation.getContents());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signalapp/libsignal-client",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -30,7 +30,7 @@
   },
   "devDependencies": {
     "@types/bindings": "^1.3.0",
-    "@types/chai": "^4.2.15",
+    "@types/chai": "^4.3.1",
     "@types/chai-as-promised": "^7.1.3",
     "@types/mocha": "^5.2.7",
     "@types/node": "*",