@wireapp/core-crypto 1.0.0-rc.32 → 1.0.0-rc.34

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wireapp/core-crypto",
-  "version": "1.0.0-rc.32",
+  "version": "1.0.0-rc.34",
   "description": "CoreCrypto bindings for the Web",
   "type": "module",
   "module": "platforms/web/corecrypto.js",

package/platforms/web/corecrypto.d.ts

@@ -92,6 +92,37 @@ export class NewAcmeOrder {
 	readonly delegate: Uint8Array;
 }
 /**
+*/
+export class ProposalBundle {
+	free(): void;
+	/**
+	* New CRL Distribution of members of this group
+	*/
+	readonly crlNewDistributionPoints: (string)[] | undefined;
+	/**
+	* TLS-serialized MLS proposal that needs to be fanned out to other (existing) members of the conversation
+	*/
+	readonly proposal: Uint8Array;
+	/**
+	* Unique identifier of a proposal. Use this in {@link CoreCrypto.clearPendingProposal} to roll back (delete) the proposal
+	*/
+	readonly proposalRef: Uint8Array;
+}
+/**
+* see [core_crypto::prelude::WelcomeBundle]
+*/
+export class WelcomeBundle {
+	free(): void;
+	/**
+	* New CRL Distribution of members of this group
+	*/
+	readonly crlNewDistributionPoints: (string)[] | undefined;
+	/**
+	* Identifier of the joined conversation
+	*/
+	readonly id: Uint8Array;
+}
+/**
 * Represents the identity claims identifying a client
 * Those claims are verifiable by any member in the group
 */
@@ -289,6 +320,10 @@ export interface MemberAddedMessages {
 	 * @readonly
 	 */
 	groupInfo: GroupInfoBundle;
+	/**
+	 * New CRL distribution points that appeared by the introduction of a new credential
+	 */
+	crlNewDistributionPoints?: string[];
 }
 /**
  * Data shape for a MLS generic commit + optional bundle (aka stapled commit & welcome)
@@ -385,6 +420,10 @@ export interface RotateBundle {
 	 * @readonly
 	 */
 	keyPackageRefsToRemove: Uint8Array[];
+	/**
+	 * New CRL distribution points that appeared by the introduction of a new credential
+	 */
+	crlNewDistributionPoints?: string[];
 }
 /**
  * Params for CoreCrypto deferred initialization
@@ -449,6 +488,10 @@ export interface ConversationInitBundle {
 	 * @readonly
 	 */
 	groupInfo: GroupInfoBundle;
+	/**
+	 * New CRL distribution points that appeared by the introduction of a new credential
+	 */
+	crlNewDistributionPoints?: string[];
 }
 /**
  *  Supporting struct for CRL registration result
@@ -552,23 +595,6 @@ export interface BufferedDecryptedMessage {
 	 */
 	crlNewDistributionPoints?: string[];
 }
-/**
- * Returned by all methods creating proposals. Contains a proposal message and an identifier to roll back the proposal
- */
-export interface ProposalBundle {
-	/**
-	 * TLS-serialized MLS proposal that needs to be fanned out to other (existing) members of the conversation
-	 *
-	 * @readonly
-	 */
-	proposal: Uint8Array;
-	/**
-	 * Unique identifier of a proposal. Use this in {@link CoreCrypto.clearPendingProposal} to roll back (delete) the proposal
-	 *
-	 * @readonly
-	 */
-	proposalRef: ProposalRef;
-}
 /**
  * MLS Proposal type
  */
@@ -873,7 +899,7 @@ export declare class CoreCrypto {
 	 * @param configuration - configuration of the MLS group
 	 * @returns The conversation ID of the newly joined group. You can use the same ID to decrypt/encrypt messages
 	 */
-	processWelcomeMessage(welcomeMessage: Uint8Array, configuration?: CustomConfiguration): Promise<ConversationId>;
+	processWelcomeMessage(welcomeMessage: Uint8Array, configuration?: CustomConfiguration): Promise<WelcomeBundle>;
 	/**
 	 * Get the client's public signature key. To upload to the DS for further backend side validation
 	 *
@@ -1200,38 +1226,38 @@ export declare class CoreCrypto {
 	 * @param clientId - client identifier e.g. `b7ac11a4-8f01-4527-af88-1c30885a7931:6add501bacd1d90e@example.com`
 	 * @param displayName - human-readable name displayed in the application e.g. `Smith, Alice M (QA)`
 	 * @param handle - user handle e.g. `alice.smith.qa@example.com`
-	 * @param expiryDays - generated x509 certificate expiry
+	 * @param expirySec - generated x509 certificate expiry
 	 * @param ciphersuite - for generating signing key material
 	 * @param team - name of the Wire team a user belongs to
 	 * @returns The new {@link E2eiEnrollment} enrollment instance to use with {@link CoreCrypto.e2eiMlsInitOnly}
 	 */
-	e2eiNewEnrollment(clientId: string, displayName: string, handle: string, expiryDays: number, ciphersuite: Ciphersuite, team?: string): Promise<E2eiEnrollment>;
+	e2eiNewEnrollment(clientId: string, displayName: string, handle: string, expirySec: number, ciphersuite: Ciphersuite, team?: string): Promise<E2eiEnrollment>;
 	/**
 	 * Generates an E2EI enrollment instance for a "regular" client (with a Basic credential) willing to migrate to E2EI.
 	 * Once the enrollment is finished, use the instance in {@link CoreCrypto.e2eiRotateAll} to do the rotation.
 	 *
 	 * @param displayName - human-readable name displayed in the application e.g. `Smith, Alice M (QA)`
 	 * @param handle - user handle e.g. `alice.smith.qa@example.com`
-	 * @param expiryDays - generated x509 certificate expiry
+	 * @param expirySec - generated x509 certificate expiry
 	 * @param ciphersuite - for generating signing key material
 	 * @param team - name of the Wire team a user belongs to
 	 * @returns The new {@link E2eiEnrollment} enrollment instance to use with {@link CoreCrypto.e2eiRotateAll}
 	 */
-	e2eiNewActivationEnrollment(displayName: string, handle: string, expiryDays: number, ciphersuite: Ciphersuite, team?: string): Promise<E2eiEnrollment>;
+	e2eiNewActivationEnrollment(displayName: string, handle: string, expirySec: number, ciphersuite: Ciphersuite, team?: string): Promise<E2eiEnrollment>;
 	/**
 	 * Generates an E2EI enrollment instance for a E2EI client (with a X509 certificate credential)
 	 * having to change/rotate their credential, either because the former one is expired or it
 	 * has been revoked. It lets you change the DisplayName or the handle
 	 * if you need to. Once the enrollment is finished, use the instance in {@link CoreCrypto.e2eiRotateAll} to do the rotation.
 	 *
-	 * @param expiryDays - generated x509 certificate expiry
+	 * @param expirySec - generated x509 certificate expiry
 	 * @param ciphersuite - for generating signing key material
 	 * @param displayName - human-readable name displayed in the application e.g. `Smith, Alice M (QA)`
 	 * @param handle - user handle e.g. `alice.smith.qa@example.com`
 	 * @param team - name of the Wire team a user belongs to
 	 * @returns The new {@link E2eiEnrollment} enrollment instance to use with {@link CoreCrypto.e2eiRotateAll}
 	 */
-	e2eiNewRotateEnrollment(expiryDays: number, ciphersuite: Ciphersuite, displayName?: string, handle?: string, team?: string): Promise<E2eiEnrollment>;
+	e2eiNewRotateEnrollment(expirySec: number, ciphersuite: Ciphersuite, displayName?: string, handle?: string, team?: string): Promise<E2eiEnrollment>;
 	/**
 	 * Use this method to initialize end-to-end identity when a client signs up and the grace period is already expired ;
 	 * that means he cannot initialize with a Basic credential
@@ -1442,11 +1468,10 @@ export declare class E2eiEnrollment {
 	 * Creates a new challenge request for Wire Oidc challenge.
 	 *
 	 * @param idToken you get back from Identity Provider
-	 * @param refreshToken you get back from Identity Provider to renew the access token
 	 * @param previousNonce `replay-nonce` response header from `POST /acme/{provisioner-name}/authz/{authz-id}`
 	 * @see https://www.rfc-editor.org/rfc/rfc8555.html#section-7.5.1
 	 */
-	newOidcChallengeRequest(idToken: string, refreshToken: string, previousNonce: string): Promise<JsonRawData>;
+	newOidcChallengeRequest(idToken: string, previousNonce: string): Promise<JsonRawData>;
 	/**
 	 * Parses the response from `POST /acme/{provisioner-name}/challenge/{challenge-id}` for the OIDC challenge.
 	 *
@@ -1454,7 +1479,7 @@ export declare class E2eiEnrollment {
 	 * @param challenge HTTP response body
 	 * @see https://www.rfc-editor.org/rfc/rfc8555.html#section-7.5.1
 	 */
-	newOidcChallengeResponse(cc: CoreCrypto, challenge: JsonRawData): Promise<void>;
+	newOidcChallengeResponse(challenge: JsonRawData): Promise<void>;
 	/**
 	 * Verifies that the previous challenge has been completed.
 	 *
@@ -1493,12 +1518,6 @@ export declare class E2eiEnrollment {
 	 * @see https://www.rfc-editor.org/rfc/rfc8555.html#section-7.4.2
 	 */
 	certificateRequest(previousNonce: string): Promise<JsonRawData>;
-	/**
-	 * Lets clients retrieve the OIDC refresh token to try to renew the user's authorization.
-	 * If it's expired, the user needs to reauthenticate and they will update the refresh token
-	 * in {@link newOidcChallengeRequest}
-	 */
-	getRefreshToken(): Promise<String>;
 }
 /**
  * Indicates the state of a Conversation regarding end-to-end identity.

package/platforms/web/corecrypto.js

@@ -232,7 +232,7 @@ var handleError = function(f, args) {
     wasm.__wbindgen_exn_store(addHeapObject(e));
   }
 };
-var __wbg_adapter_413 = function(arg0, arg1, arg2, arg3) {
+var __wbg_adapter_417 = function(arg0, arg1, arg2, arg3) {
   wasm.wasm_bindgen__convert__closures__invoke2_mut__h639173e274a4a014(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
 };
 async function __wbg_load(module, imports) {
@@ -262,20 +262,16 @@ async function __wbg_load(module, imports) {
 var __wbg_get_imports = function() {
   const imports = {};
   imports.wbg = {};
-  imports.wbg.__wbg_acmedirectory_new = function(arg0) {
-    const ret = AcmeDirectory.__wrap(arg0);
-    return addHeapObject(ret);
-  };
-  imports.wbg.__wbg_commitbundle_new = function(arg0) {
-    const ret = CommitBundle.__wrap(arg0);
+  imports.wbg.__wbindgen_number_new = function(arg0) {
+    const ret = arg0;
     return addHeapObject(ret);
   };
-  imports.wbg.__wbg_corecrypto_new = function(arg0) {
-    const ret = CoreCrypto.__wrap(arg0);
+  imports.wbg.__wbg_newacmeorder_new = function(arg0) {
+    const ret = NewAcmeOrder.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_number_new = function(arg0) {
-    const ret = arg0;
+  imports.wbg.__wbg_newacmeauthz_new = function(arg0) {
+    const ret = NewAcmeAuthz.__wrap(arg0);
     return addHeapObject(ret);
   };
   imports.wbg.__wbg_ffiwiree2eidentity_new = function(arg0) {
@@ -285,30 +281,38 @@ var __wbg_get_imports = function() {
   imports.wbg.__wbindgen_object_drop_ref = function(arg0) {
     takeObject(arg0);
   };
-  imports.wbg.__wbg_proposalbundle_new = function(arg0) {
-    const ret = ProposalBundle.__wrap(arg0);
-    return addHeapObject(ret);
-  };
-  imports.wbg.__wbg_newacmeauthz_new = function(arg0) {
-    const ret = NewAcmeAuthz.__wrap(arg0);
-    return addHeapObject(ret);
-  };
-  imports.wbg.__wbg_newacmeorder_new = function(arg0) {
-    const ret = NewAcmeOrder.__wrap(arg0);
+  imports.wbg.__wbg_corecrypto_new = function(arg0) {
+    const ret = CoreCrypto.__wrap(arg0);
     return addHeapObject(ret);
   };
   imports.wbg.__wbg_proteusautoprekeybundle_new = function(arg0) {
     const ret = ProteusAutoPrekeyBundle.__wrap(arg0);
     return addHeapObject(ret);
   };
+  imports.wbg.__wbg_proposalbundle_new = function(arg0) {
+    const ret = ProposalBundle.__wrap(arg0);
+    return addHeapObject(ret);
+  };
   imports.wbg.__wbg_buffereddecryptedmessage_new = function(arg0) {
     const ret = BufferedDecryptedMessage.__wrap(arg0);
     return addHeapObject(ret);
   };
+  imports.wbg.__wbg_acmedirectory_new = function(arg0) {
+    const ret = AcmeDirectory.__wrap(arg0);
+    return addHeapObject(ret);
+  };
+  imports.wbg.__wbg_commitbundle_new = function(arg0) {
+    const ret = CommitBundle.__wrap(arg0);
+    return addHeapObject(ret);
+  };
   imports.wbg.__wbindgen_object_clone_ref = function(arg0) {
     const ret = getObject(arg0);
     return addHeapObject(ret);
   };
+  imports.wbg.__wbindgen_bigint_from_u64 = function(arg0) {
+    const ret = BigInt.asUintN(64, arg0);
+    return addHeapObject(ret);
+  };
   imports.wbg.__wbindgen_string_new = function(arg0, arg1) {
     const ret = getStringFromWasm0(arg0, arg1);
     return addHeapObject(ret);
@@ -321,10 +325,6 @@ var __wbg_get_imports = function() {
     const ret = getObject(arg0) === null;
     return ret;
   };
-  imports.wbg.__wbindgen_bigint_from_u64 = function(arg0) {
-    const ret = BigInt.asUintN(64, arg0);
-    return addHeapObject(ret);
-  };
   imports.wbg.__wbindgen_string_get = function(arg0, arg1) {
     const obj = getObject(arg1);
     const ret = typeof obj === "string" ? obj : undefined;
@@ -886,7 +886,7 @@ var __wbg_get_imports = function() {
         const a = state0.a;
         state0.a = 0;
         try {
-          return __wbg_adapter_413(a, state0.b, arg02, arg12);
+          return __wbg_adapter_417(a, state0.b, arg02, arg12);
         } finally {
           state0.a = a;
         }
@@ -966,12 +966,12 @@ var __wbg_get_imports = function() {
     const ret = wasm.memory;
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_closure_wrapper2515 = function(arg0, arg1, arg2) {
-    const ret = makeMutClosure(arg0, arg1, 651, __wbg_adapter_54);
+  imports.wbg.__wbindgen_closure_wrapper2502 = function(arg0, arg1, arg2) {
+    const ret = makeMutClosure(arg0, arg1, 648, __wbg_adapter_54);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_closure_wrapper11461 = function(arg0, arg1, arg2) {
-    const ret = makeMutClosure(arg0, arg1, 1589, __wbg_adapter_57);
+  imports.wbg.__wbindgen_closure_wrapper11505 = function(arg0, arg1, arg2) {
+    const ret = makeMutClosure(arg0, arg1, 1588, __wbg_adapter_57);
     return addHeapObject(ret);
   };
   return imports;
@@ -1033,6 +1033,12 @@ var cachedFloat64Memory0 = null;
 var cachedBigInt64Memory0 = null;
 var cachedUint32Memory0 = null;
 var cachedUint16Memory0 = null;
+var WirePolicy = Object.freeze({
+  Plaintext: 1,
+  "1": "Plaintext",
+  Ciphertext: 2,
+  "2": "Ciphertext"
+});
 var CredentialType = Object.freeze({
   Basic: 1,
   "1": "Basic",
@@ -1057,12 +1063,6 @@ var Ciphersuite = Object.freeze({
   MLS_128_X25519KYBER768DRAFT00_AES128GCM_SHA256_Ed25519: 61489,
   "61489": "MLS_128_X25519KYBER768DRAFT00_AES128GCM_SHA256_Ed25519"
 });
-var WirePolicy = Object.freeze({
-  Plaintext: 1,
-  "1": "Plaintext",
-  Ciphertext: 2,
-  "2": "Ciphertext"
-});
 var DeviceStatus = Object.freeze({
   Valid: 0,
   "0": "Valid",
@@ -1268,9 +1268,21 @@ class BufferedDecryptedMessage {
     const ret = wasm.buffereddecryptedmessage_identity(this.__wbg_ptr);
     return ret === 0 ? undefined : WireIdentity.__wrap(ret);
   }
-  get crl_new_distribution_points() {
-    const ret = wasm.buffereddecryptedmessage_crl_new_distribution_points(this.__wbg_ptr);
-    return takeObject(ret);
+  get crlNewDistributionPoints() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_buffereddecryptedmessage_crlNewDistributionPoints(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      let v1;
+      if (r0 !== 0) {
+        v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+        wasm.__wbindgen_free(r0, r1 * 4, 4);
+      }
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
   }
 }
 
@@ -1349,7 +1361,7 @@ class CoreCrypto {
     const ptr = this.__destroy_into_raw();
     wasm.__wbg_corecrypto_free(ptr);
   }
-  e2ei_new_enrollment(client_id, display_name, handle, team, expiry_days, ciphersuite) {
+  e2ei_new_enrollment(client_id, display_name, handle, team, expiry_sec, ciphersuite) {
     const ptr0 = passStringToWasm0(client_id, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
     const ptr1 = passStringToWasm0(display_name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
@@ -1358,27 +1370,27 @@ class CoreCrypto {
     const len2 = WASM_VECTOR_LEN;
     var ptr3 = isLikeNone(team) ? 0 : passStringToWasm0(team, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     var len3 = WASM_VECTOR_LEN;
-    const ret = wasm.corecrypto_e2ei_new_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, expiry_days, ciphersuite);
+    const ret = wasm.corecrypto_e2ei_new_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, expiry_sec, ciphersuite);
     return takeObject(ret);
   }
-  e2ei_new_activation_enrollment(display_name, handle, team, expiry_days, ciphersuite) {
+  e2ei_new_activation_enrollment(display_name, handle, team, expiry_sec, ciphersuite) {
     const ptr0 = passStringToWasm0(display_name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
     const ptr1 = passStringToWasm0(handle, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len1 = WASM_VECTOR_LEN;
     var ptr2 = isLikeNone(team) ? 0 : passStringToWasm0(team, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     var len2 = WASM_VECTOR_LEN;
-    const ret = wasm.corecrypto_e2ei_new_activation_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, expiry_days, ciphersuite);
+    const ret = wasm.corecrypto_e2ei_new_activation_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, expiry_sec, ciphersuite);
     return takeObject(ret);
   }
-  e2ei_new_rotate_enrollment(display_name, handle, team, expiry_days, ciphersuite) {
+  e2ei_new_rotate_enrollment(display_name, handle, team, expiry_sec, ciphersuite) {
     var ptr0 = isLikeNone(display_name) ? 0 : passStringToWasm0(display_name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     var len0 = WASM_VECTOR_LEN;
     var ptr1 = isLikeNone(handle) ? 0 : passStringToWasm0(handle, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     var len1 = WASM_VECTOR_LEN;
     var ptr2 = isLikeNone(team) ? 0 : passStringToWasm0(team, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     var len2 = WASM_VECTOR_LEN;
-    const ret = wasm.corecrypto_e2ei_new_rotate_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, expiry_days, ciphersuite);
+    const ret = wasm.corecrypto_e2ei_new_rotate_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, expiry_sec, ciphersuite);
     return takeObject(ret);
   }
   e2ei_register_acme_ca(trust_anchor_pem) {
@@ -1989,19 +2001,16 @@ class FfiWireE2EIdentity {
     const ret = wasm.ffiwiree2eidentity_new_dpop_challenge_response(this.__wbg_ptr, addHeapObject(challenge));
     return takeObject(ret);
   }
-  new_oidc_challenge_request(id_token, refresh_token, previous_nonce) {
+  new_oidc_challenge_request(id_token, previous_nonce) {
     const ptr0 = passStringToWasm0(id_token, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
-    const ptr1 = passStringToWasm0(refresh_token, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const ptr1 = passStringToWasm0(previous_nonce, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len1 = WASM_VECTOR_LEN;
-    const ptr2 = passStringToWasm0(previous_nonce, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len2 = WASM_VECTOR_LEN;
-    const ret = wasm.ffiwiree2eidentity_new_oidc_challenge_request(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2);
+    const ret = wasm.ffiwiree2eidentity_new_oidc_challenge_request(this.__wbg_ptr, ptr0, len0, ptr1, len1);
     return takeObject(ret);
   }
-  new_oidc_challenge_response(cc, challenge) {
-    _assertClass(cc, CoreCrypto);
-    const ret = wasm.ffiwiree2eidentity_new_oidc_challenge_response(this.__wbg_ptr, cc.__wbg_ptr, addHeapObject(challenge));
+  new_oidc_challenge_response(challenge) {
+    const ret = wasm.ffiwiree2eidentity_new_oidc_challenge_response(this.__wbg_ptr, addHeapObject(challenge));
     return takeObject(ret);
   }
   check_order_request(order_url, previous_nonce) {
@@ -2032,10 +2041,6 @@ class FfiWireE2EIdentity {
     const ret = wasm.ffiwiree2eidentity_certificate_request(this.__wbg_ptr, ptr0, len0);
     return takeObject(ret);
   }
-  get_refresh_token() {
-    const ret = wasm.ffiwiree2eidentity_get_refresh_token(this.__wbg_ptr);
-    return takeObject(ret);
-  }
 }
 
 class GroupInfoBundle {
@@ -2182,12 +2187,46 @@ class ProposalBundle {
     wasm.__wbg_proposalbundle_free(ptr);
   }
   get proposal() {
-    const ret = wasm.proposalbundle_proposal(this.__wbg_ptr);
-    return takeObject(ret);
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_acmechallenge_delegate(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      var v1 = getArrayU8FromWasm0(r0, r1).slice();
+      wasm.__wbindgen_free(r0, r1 * 1, 1);
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
   }
-  get proposal_ref() {
-    const ret = wasm.proposalbundle_proposal_ref(this.__wbg_ptr);
-    return takeObject(ret);
+  get proposalRef() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_proposalbundle_proposalRef(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      var v1 = getArrayU8FromWasm0(r0, r1).slice();
+      wasm.__wbindgen_free(r0, r1 * 1, 1);
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
+  get crlNewDistributionPoints() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_proposalbundle_crlNewDistributionPoints(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      let v1;
+      if (r0 !== 0) {
+        v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+        wasm.__wbindgen_free(r0, r1 * 4, 4);
+      }
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
   }
 }
 
@@ -2233,6 +2272,47 @@ class ProteusAutoPrekeyBundle {
     wasm.__wbg_set_proteusautoprekeybundle_pkb(this.__wbg_ptr, ptr0, len0);
   }
 }
+class WelcomeBundle {
+  __destroy_into_raw() {
+    const ptr = this.__wbg_ptr;
+    this.__wbg_ptr = 0;
+    return ptr;
+  }
+  free() {
+    const ptr = this.__destroy_into_raw();
+    wasm.__wbg_welcomebundle_free(ptr);
+  }
+  get id() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_acmechallenge_delegate(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      var v1 = getArrayU8FromWasm0(r0, r1).slice();
+      wasm.__wbindgen_free(r0, r1 * 1, 1);
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
+  get crlNewDistributionPoints() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_welcomebundle_crlNewDistributionPoints(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      let v1;
+      if (r0 !== 0) {
+        v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+        wasm.__wbindgen_free(r0, r1 * 4, 4);
+      }
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
+}
+
 class WireIdentity {
   static __wrap(ptr) {
     ptr = ptr >>> 0;
@@ -2549,7 +2629,7 @@ class CoreCrypto2 {
     }
     try {
       const ffiDecryptedMessage = await CoreCryptoError.asyncMapErr(this.#cc.decrypt_message(conversationId, payload));
-      const ffiCommitDelay = ffiDecryptedMessage.commit_delay;
+      const ffiCommitDelay = ffiDecryptedMessage.commitDelay;
       let commitDelay = undefined;
       if (typeof ffiCommitDelay === "number" && ffiCommitDelay >= 0) {
         commitDelay = ffiCommitDelay * 1000;
@@ -2557,10 +2637,10 @@ class CoreCrypto2 {
       const ret = {
         message: ffiDecryptedMessage.message,
         proposals: ffiDecryptedMessage.proposals,
-        isActive: ffiDecryptedMessage.is_active,
+        isActive: ffiDecryptedMessage.isActive,
         senderClientId: ffiDecryptedMessage.sender_client_id,
         commitDelay,
-        hasEpochChanged: ffiDecryptedMessage.has_epoch_changed,
+        hasEpochChanged: ffiDecryptedMessage.hasEpochChanged,
         bufferedMessages: ffiDecryptedMessage.buffered_messages?.map((m) => {
           return {
             message: m.message,
@@ -2569,10 +2649,10 @@ class CoreCrypto2 {
             senderClientId: m.sender_client_id,
             commitDelay: m.commit_delay,
             hasEpochChanged: m.has_epoch_changed,
-            crlNewDistributionPoints: m.crl_new_distribution_points
+            crlNewDistributionPoints: m.crlNewDistributionPoints
           };
         }),
-        crlNewDistributionPoints: ffiDecryptedMessage.crl_new_distribution_points
+        crlNewDistributionPoints: ffiDecryptedMessage.crlNewDistributionPoints
       };
       return ret;
     } catch (e) {
@@ -2614,7 +2694,8 @@ class CoreCrypto2 {
           encryptionType: gi.encryption_type,
           ratchetTreeType: gi.ratchet_tree_type,
           payload: gi.payload
-        }
+        },
+        crlNewDistributionPoints: ffiRet.crlNewDistributionPoints
       };
       return ret;
     } catch (e) {
@@ -2721,7 +2802,8 @@ class CoreCrypto2 {
           encryptionType: gi.encryption_type,
           ratchetTreeType: gi.ratchet_tree_type,
           payload: gi.payload
-        }
+        },
+        crlNewDistributionPoints: ffiInitMessage.crlNewDistributionPoints
       };
       return ret;
     } catch (e) {
@@ -2820,16 +2902,16 @@ class CoreCrypto2 {
   async proteusLastErrorCode() {
     return await this.#cc.proteus_last_error_code();
   }
-  async e2eiNewEnrollment(clientId, displayName, handle, expiryDays, ciphersuite, team) {
-    const e2ei = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_new_enrollment(clientId, displayName, handle, team, expiryDays, ciphersuite));
+  async e2eiNewEnrollment(clientId, displayName, handle, expirySec, ciphersuite, team) {
+    const e2ei = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_new_enrollment(clientId, displayName, handle, team, expirySec, ciphersuite));
     return new E2eiEnrollment(e2ei);
   }
-  async e2eiNewActivationEnrollment(displayName, handle, expiryDays, ciphersuite, team) {
-    const e2ei = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_new_activation_enrollment(displayName, handle, team, expiryDays, ciphersuite));
+  async e2eiNewActivationEnrollment(displayName, handle, expirySec, ciphersuite, team) {
+    const e2ei = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_new_activation_enrollment(displayName, handle, team, expirySec, ciphersuite));
     return new E2eiEnrollment(e2ei);
   }
-  async e2eiNewRotateEnrollment(expiryDays, ciphersuite, displayName, handle, team) {
-    const e2ei = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_new_rotate_enrollment(displayName, handle, team, expiryDays, ciphersuite));
+  async e2eiNewRotateEnrollment(expirySec, ciphersuite, displayName, handle, team) {
+    const e2ei = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_new_rotate_enrollment(displayName, handle, team, expirySec, ciphersuite));
     return new E2eiEnrollment(e2ei);
   }
   async e2eiMlsInitOnly(enrollment, certificateChain, nbKeyPackage) {
@@ -2849,7 +2931,8 @@ class CoreCrypto2 {
     const ret = {
       commits: ffiRet.commits,
       newKeyPackages: ffiRet.new_key_packages,
-      keyPackageRefsToRemove: ffiRet.key_package_refs_to_remove
+      keyPackageRefsToRemove: ffiRet.key_package_refs_to_remove,
+      crlNewDistributionPoints: ffiRet.crlNewDistributionPoints
     };
     return ret;
   }
@@ -2924,11 +3007,11 @@ class E2eiEnrollment {
   async newDpopChallengeResponse(challenge) {
     return await CoreCryptoError.asyncMapErr(this.#enrollment.new_dpop_challenge_response(challenge));
   }
-  async newOidcChallengeRequest(idToken, refreshToken, previousNonce) {
-    return await CoreCryptoError.asyncMapErr(this.#enrollment.new_oidc_challenge_request(idToken, refreshToken, previousNonce));
+  async newOidcChallengeRequest(idToken, previousNonce) {
+    return await CoreCryptoError.asyncMapErr(this.#enrollment.new_oidc_challenge_request(idToken, previousNonce));
   }
-  async newOidcChallengeResponse(cc, challenge) {
-    return await CoreCryptoError.asyncMapErr(this.#enrollment.new_oidc_challenge_response(cc.inner(), challenge));
+  async newOidcChallengeResponse(challenge) {
+    return await CoreCryptoError.asyncMapErr(this.#enrollment.new_oidc_challenge_response(challenge));
   }
   async checkOrderRequest(orderUrl, previousNonce) {
     return await CoreCryptoError.asyncMapErr(this.#enrollment.check_order_request(orderUrl, previousNonce));
@@ -2945,9 +3028,6 @@ class E2eiEnrollment {
   async certificateRequest(previousNonce) {
     return await CoreCryptoError.asyncMapErr(this.#enrollment.certificate_request(previousNonce));
   }
-  async getRefreshToken() {
-    return await CoreCryptoError.asyncMapErr(this.#enrollment.get_refresh_token());
-  }
 }
 var E2eiConversationState;
 (function(E2eiConversationState2) {
@@ -2958,8 +3038,10 @@ var E2eiConversationState;
 export {
   WirePolicy2 as WirePolicy,
   WireIdentity,
+  WelcomeBundle,
   RatchetTreeType,
   ProposalType,
+  ProposalBundle,
   NewAcmeOrder,
   NewAcmeAuthz,
   GroupInfoEncryptionType,