@wireapp/core-crypto 10.3.0 → 10.4.0

package/dist/native/corecrypto.d.ts

@@ -2915,6 +2915,16 @@ export declare enum SignatureScheme {
 	 */
 	Ed448 = 2056
 }
+declare enum TargetedMessagePolicy {
+	/**
+	 * Won't be persisted and will only be visible to currently online members who immediately process it.
+	 */
+	Transient = 0,
+	/**
+	 * May be persisted and buffered, will also be delivered and processed by currently offline members.
+	 */
+	Persisted = 1
+}
 /**
  * Typealias from the type name used in the UDL file to the builtin type.  This
  * is needed because the UDL type name is used in function/method signatures.
@@ -3312,6 +3322,15 @@ declare class CoreCryptoContext extends UniffiAbstractObject {
 	encryptMessage(conversationId: ConversationIdLike, message: Uint8Array, asyncOpts_?: {
 		signal: AbortSignal;
 	}): Promise<Uint8Array>;
+	/**
+	 * Encrypts a plaintext message for one member of the given conversation.
+	 *
+	 * Any feature using a targeted, transient or transient targeted message MUST specify why the lower security
+	 * guarantees (compared to MLS application messages) are acceptable and/or how they are mitigated.
+	 */
+	encryptTargetedMessage(conversationId: ConversationIdLike, recipient: ClientIdLike, policy: TargetedMessagePolicy, message: Uint8Array, asyncOpts_?: {
+		signal: AbortSignal;
+	}): Promise<Uint8Array>;
 	/**
 	 * Derives and exports a secret of `key_length` bytes for the given conversation.
 	 *
@@ -3601,13 +3620,23 @@ export declare class PkiEnvironment extends UniffiAbstractObject {
 	}): Promise<void>;
 	/**
 	 * Add a PEM-encoded certificate as a trust anchor.
-	 *
-	 * NOTE: currently we only support storing a single trust anchor, calling this method multiple
-	 * times will overwrite any previously added trust anchor.
 	 */
 	addTrustAnchor(certPem: string, asyncOpts_?: {
 		signal: AbortSignal;
 	}): Promise<void>;
+	/**
+	 * Get all trust anchors as PEM-encoded certificates.
+	 */
+	getTrustAnchors(asyncOpts_?: {
+		signal: AbortSignal;
+	}): Promise<Array<string>>;
+	/**
+	 * Remove a trust anchor by providing the certificates Subject Public Key Info (SPKI) fingerprint as bytes.
+	 * Trying to remove trust anchor that doesn't exist in the database will just succeed.
+	 */
+	removeTrustAnchor(fingerprint: Uint8Array, asyncOpts_?: {
+		signal: AbortSignal;
+	}): Promise<void>;
 	uniffiDestroy(): void;
 	static instanceOf(obj_: any): obj_ is PkiEnvironment;
 }

package/dist/native/corecrypto.js

@@ -728,6 +728,11 @@ var DEFINITIONS = {
       ret: FfiType.Handle,
       hasRustCallStatus: false
     },
+    uniffi_core_crypto_ffi_fn_method_corecryptocontext_encrypt_targeted_message: {
+      args: [FfiType.Handle, FfiType.Handle, FfiType.Handle, FfiType.RustBuffer, FfiType.RustBuffer],
+      ret: FfiType.Handle,
+      hasRustCallStatus: false
+    },
     uniffi_core_crypto_ffi_fn_method_corecryptocontext_export_secret_key: {
       args: [FfiType.Handle, FfiType.Handle, FfiType.UInt32],
       ret: FfiType.Handle,
@@ -1288,6 +1293,16 @@ var DEFINITIONS = {
       ret: FfiType.Handle,
       hasRustCallStatus: false
     },
+    uniffi_core_crypto_ffi_fn_method_pkienvironment_get_trust_anchors: {
+      args: [FfiType.Handle],
+      ret: FfiType.Handle,
+      hasRustCallStatus: false
+    },
+    uniffi_core_crypto_ffi_fn_method_pkienvironment_remove_trust_anchor: {
+      args: [FfiType.Handle, FfiType.RustBuffer],
+      ret: FfiType.Handle,
+      hasRustCallStatus: false
+    },
     uniffi_core_crypto_ffi_fn_method_pkienvironmenthooks_http_request: {
       args: [FfiType.Handle, FfiType.RustBuffer, FfiType.RustBuffer, FfiType.RustBuffer, FfiType.RustBuffer],
       ret: FfiType.Handle,
@@ -1563,6 +1578,11 @@ var DEFINITIONS = {
       ret: FfiType.UInt16,
       hasRustCallStatus: false
     },
+    uniffi_core_crypto_ffi_checksum_method_corecryptocontext_encrypt_targeted_message: {
+      args: [],
+      ret: FfiType.UInt16,
+      hasRustCallStatus: false
+    },
     uniffi_core_crypto_ffi_checksum_method_corecryptocontext_export_secret_key: {
       args: [],
       ret: FfiType.UInt16,
@@ -2078,6 +2098,16 @@ var DEFINITIONS = {
       ret: FfiType.UInt16,
       hasRustCallStatus: false
     },
+    uniffi_core_crypto_ffi_checksum_method_pkienvironment_get_trust_anchors: {
+      args: [],
+      ret: FfiType.UInt16,
+      hasRustCallStatus: false
+    },
+    uniffi_core_crypto_ffi_checksum_method_pkienvironment_remove_trust_anchor: {
+      args: [],
+      ret: FfiType.UInt16,
+      hasRustCallStatus: false
+    },
     uniffi_core_crypto_ffi_checksum_method_pkienvironmenthooks_http_request: {
       args: [],
       ret: FfiType.UInt16,
@@ -5026,6 +5056,34 @@ var FfiConverterTypeSignatureScheme = (() => {
   }
   return new FFIConverter;
 })();
+var FfiConverterTypeTargetedMessagePolicy = (() => {
+  const ordinalConverter = FfiConverterInt32;
+
+  class FFIConverter extends AbstractFfiConverterByteArray {
+    read(from) {
+      switch (ordinalConverter.read(from)) {
+        case 1:
+          return 0 /* Transient */;
+        case 2:
+          return 1 /* Persisted */;
+        default:
+          throw new UniffiInternalError.UnexpectedEnumCase;
+      }
+    }
+    write(value, into) {
+      switch (value) {
+        case 0 /* Transient */:
+          return ordinalConverter.write(1, into);
+        case 1 /* Persisted */:
+          return ordinalConverter.write(2, into);
+      }
+    }
+    allocationSize(value) {
+      return ordinalConverter.allocationSize(0);
+    }
+  }
+  return new FFIConverter;
+})();
 var FfiConverterTypeMlsTransportData = FfiConverterUint8Array;
 
 class ConversationId extends UniffiAbstractObject {
@@ -6245,6 +6303,19 @@ class CoreCryptoContext extends UniffiAbstractObject {
       throw __error;
     }
   }
+  async encryptTargetedMessage(conversationId, recipient, policy, message, asyncOpts_) {
+    const __stack = uniffiIsDebug ? new Error().stack : undefined;
+    try {
+      return await uniffiRustCallAsync(uniffiCaller, () => {
+        return core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_fn_method_corecryptocontext_encrypt_targeted_message(uniffiTypeCoreCryptoContextObjectFactory.clonePointer(this), FfiConverterTypeConversationId.lower(conversationId, core_crypto_ffi_ffi_default().rustbuffer_alloc), FfiConverterTypeClientId.lower(recipient, core_crypto_ffi_ffi_default().rustbuffer_alloc), FfiConverterTypeTargetedMessagePolicy.lower(policy, core_crypto_ffi_ffi_default().rustbuffer_alloc), FfiConverterUint8Array.lower(message, core_crypto_ffi_ffi_default().rustbuffer_alloc));
+      }, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_poll_rust_buffer, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_cancel_rust_buffer, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_complete_rust_buffer, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_free_rust_buffer, FfiConverterUint8Array.lift.bind(FfiConverterUint8Array), FfiConverterString.lift.bind(FfiConverterString), asyncOpts_, FfiConverterTypeCoreCryptoError.lift.bind(FfiConverterTypeCoreCryptoError));
+    } catch (__error) {
+      if (uniffiIsDebug && __error instanceof Error) {
+        __error.stack = __stack;
+      }
+      throw __error;
+    }
+  }
   async exportSecretKey(conversationId, keyLength, asyncOpts_) {
     const __stack = uniffiIsDebug ? new Error().stack : undefined;
     try {
@@ -6938,6 +7009,32 @@ class PkiEnvironment extends UniffiAbstractObject {
       throw __error;
     }
   }
+  async getTrustAnchors(asyncOpts_) {
+    const __stack = uniffiIsDebug ? new Error().stack : undefined;
+    try {
+      return await uniffiRustCallAsync(uniffiCaller, () => {
+        return core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_fn_method_pkienvironment_get_trust_anchors(uniffiTypePkiEnvironmentObjectFactory.clonePointer(this));
+      }, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_poll_rust_buffer, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_cancel_rust_buffer, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_complete_rust_buffer, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_free_rust_buffer, FfiConverterSequenceString.lift.bind(FfiConverterSequenceString), FfiConverterString.lift.bind(FfiConverterString), asyncOpts_, FfiConverterTypeCoreCryptoError.lift.bind(FfiConverterTypeCoreCryptoError));
+    } catch (__error) {
+      if (uniffiIsDebug && __error instanceof Error) {
+        __error.stack = __stack;
+      }
+      throw __error;
+    }
+  }
+  async removeTrustAnchor(fingerprint, asyncOpts_) {
+    const __stack = uniffiIsDebug ? new Error().stack : undefined;
+    try {
+      return await uniffiRustCallAsync(uniffiCaller, () => {
+        return core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_fn_method_pkienvironment_remove_trust_anchor(uniffiTypePkiEnvironmentObjectFactory.clonePointer(this), FfiConverterUint8Array.lower(fingerprint, core_crypto_ffi_ffi_default().rustbuffer_alloc));
+      }, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_poll_void, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_cancel_void, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_complete_void, core_crypto_ffi_ffi_default().ffi_core_crypto_ffi_rust_future_free_void, (_v) => {}, FfiConverterString.lift.bind(FfiConverterString), asyncOpts_, FfiConverterTypeCoreCryptoError.lift.bind(FfiConverterTypeCoreCryptoError));
+    } catch (__error) {
+      if (uniffiIsDebug && __error instanceof Error) {
+        __error.stack = __stack;
+      }
+      throw __error;
+    }
+  }
   uniffiDestroy() {
     const ptr = this[destructorGuardSymbol];
     if (ptr !== undefined) {
@@ -8396,6 +8493,9 @@ function uniffiEnsureInitialized() {
   if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_corecryptocontext_encrypt_message() !== 23805) {
     throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_corecryptocontext_encrypt_message");
   }
+  if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_corecryptocontext_encrypt_targeted_message() !== 52733) {
+    throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_corecryptocontext_encrypt_targeted_message");
+  }
   if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_corecryptocontext_export_secret_key() !== 35407) {
     throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_corecryptocontext_export_secret_key");
   }
@@ -8702,9 +8802,15 @@ function uniffiEnsureInitialized() {
   if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_pkienvironment_add_intermediate_cert() !== 57664) {
     throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_pkienvironment_add_intermediate_cert");
   }
-  if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_pkienvironment_add_trust_anchor() !== 9292) {
+  if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_pkienvironment_add_trust_anchor() !== 14999) {
     throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_pkienvironment_add_trust_anchor");
   }
+  if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_pkienvironment_get_trust_anchors() !== 11812) {
+    throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_pkienvironment_get_trust_anchors");
+  }
+  if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_pkienvironment_remove_trust_anchor() !== 41980) {
+    throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_pkienvironment_remove_trust_anchor");
+  }
   if (core_crypto_ffi_ffi_default().uniffi_core_crypto_ffi_checksum_method_pkienvironmenthooks_http_request() !== 1349) {
     throw new UniffiInternalError.ApiChecksumMismatch("uniffi_core_crypto_ffi_checksum_method_pkienvironmenthooks_http_request");
   }
@@ -8803,6 +8909,7 @@ var core_crypto_ffi_default = Object.freeze({
     FfiConverterTypeProteusError,
     FfiConverterTypeSecretKey,
     FfiConverterTypeSignatureScheme,
+    FfiConverterTypeTargetedMessagePolicy,
     FfiConverterTypeTimestamp,
     FfiConverterTypeUuid,
     FfiConverterTypeWelcome,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@wireapp/core-crypto",
-    "version": "10.3.0",
+    "version": "10.4.0",
     "description": "CoreCrypto bindings for browser and native JavaScript runtimes",
     "keywords": [
         "corecrypto",