From 99f5c6bbdd5721116fe63c4c6e08a90f13db949d Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Thu, 3 Oct 2024 17:47:50 +0200
Subject: [PATCH 1/7] Format workflows (#1109)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 .github/workflows/publish-bws.yml         |  3 +--
 .github/workflows/publish-dotnet.yml      | 16 ++++++++--------
 .github/workflows/publish-rust-crates.yml |  2 +-
 .github/workflows/release-dotnet.yml      |  1 -
 4 files changed, 10 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/publish-bws.yml b/.github/workflows/publish-bws.yml
index 506427faa..dc939a5d6 100644
--- a/.github/workflows/publish-bws.yml
+++ b/.github/workflows/publish-bws.yml
@@ -14,7 +14,7 @@ on:
           - Release
           - Dry Run
       version:
-        description: 'Version to publish (default: latest bws cli release)'
+        description: "Version to publish (default: latest bws cli release)"
         required: true
         type: string
         default: latest
@@ -71,7 +71,6 @@ jobs:
           description: "Deployment ${{ steps.version-output.outputs.version }} from branch ${{ github.ref_name }}"
           task: release
 
-
   publish:
     name: Publish bws to crates.io
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/publish-dotnet.yml b/.github/workflows/publish-dotnet.yml
index baafcc522..1e2fc06f4 100644
--- a/.github/workflows/publish-dotnet.yml
+++ b/.github/workflows/publish-dotnet.yml
@@ -66,10 +66,10 @@ jobs:
         uses: chrnorm/deployment-action@55729fcebec3d284f60f5bcabbd8376437d696b1 # v2.0.7
         id: deployment
         with:
-          token: '${{ secrets.GITHUB_TOKEN }}'
-          initial-status: 'in_progress'
-          environment: 'dotnet - Production'
-          description: 'Deployment ${{ needs.validate.outputs.version }} from branch ${{ github.ref_name }}'
+          token: "${{ secrets.GITHUB_TOKEN }}"
+          initial-status: "in_progress"
+          environment: "dotnet - Production"
+          description: "Deployment ${{ needs.validate.outputs.version }} from branch ${{ github.ref_name }}"
           task: release
 
       - name: Download artifact
@@ -100,14 +100,14 @@ jobs:
         if: ${{ inputs.release_type != 'Dry Run' && success() }}
         uses: chrnorm/deployment-status@9a72af4586197112e0491ea843682b5dc280d806 # v2.0.3
         with:
-          token: '${{ secrets.GITHUB_TOKEN }}'
-          state: 'success'
+          token: "${{ secrets.GITHUB_TOKEN }}"
+          state: "success"
           deployment-id: ${{ steps.deployment.outputs.deployment_id }}
 
       - name: Update deployment status to Failure
         if: ${{ inputs.release_type != 'Dry Run' && failure() }}
         uses: chrnorm/deployment-status@9a72af4586197112e0491ea843682b5dc280d806 # v2.0.3
         with:
-          token: '${{ secrets.GITHUB_TOKEN }}'
-          state: 'failure'
+          token: "${{ secrets.GITHUB_TOKEN }}"
+          state: "failure"
           deployment-id: ${{ steps.deployment.outputs.deployment_id }}
diff --git a/.github/workflows/publish-rust-crates.yml b/.github/workflows/publish-rust-crates.yml
index 43f19323a..bb79aad24 100644
--- a/.github/workflows/publish-rust-crates.yml
+++ b/.github/workflows/publish-rust-crates.yml
@@ -15,7 +15,7 @@ on:
           - Redeploy
           - Dry Run
       version:
-        description: 'Version to publish (default: latest rust crates release)'
+        description: "Version to publish (default: latest rust crates release)"
         required: true
         type: string
         default: latest
diff --git a/.github/workflows/release-dotnet.yml b/.github/workflows/release-dotnet.yml
index 2e08e8a76..dc8539271 100644
--- a/.github/workflows/release-dotnet.yml
+++ b/.github/workflows/release-dotnet.yml
@@ -13,7 +13,6 @@ on:
           - Release
           - Dry Run
 
-
 jobs:
   setup:
     name: Setup

From b74d969dab9502eb1365c79f9bac35ad3469646d Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 4 Oct 2024 10:16:13 +0200
Subject: [PATCH 2/7] [PM-12967] Create bitwarden-wasm-internal (#1089)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->

https://bitwarden.atlassian.net/browse/PM-12967

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

PM SDK. Based on the research spike in #1077

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 .github/workflows/build-wasm-internal.yml     |  59 ++++++++
 .github/workflows/publish-internal.yml        | 136 ++++++++++++++++++
 .prettierignore                               |   4 +
 Cargo.lock                                    |  51 +++++++
 Cargo.toml                                    |   5 +-
 crates/bitwarden-core/Cargo.toml              |   3 +
 .../src/client/client_settings.rs             |  15 +-
 crates/bitwarden-wasm-internal/Cargo.toml     |  28 ++++
 crates/bitwarden-wasm-internal/README.md      |  25 ++++
 crates/bitwarden-wasm-internal/build.sh       |  26 ++++
 crates/bitwarden-wasm-internal/src/client.rs  |  57 ++++++++
 crates/bitwarden-wasm-internal/src/lib.rs     |   1 +
 crates/bitwarden/Cargo.toml                   |   1 +
 languages/js/sdk-internal/.gitignore          |   6 +
 languages/js/sdk-internal/index.js            |   8 ++
 languages/js/sdk-internal/package.json        |  24 ++++
 16 files changed, 447 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/build-wasm-internal.yml
 create mode 100644 .github/workflows/publish-internal.yml
 create mode 100644 crates/bitwarden-wasm-internal/Cargo.toml
 create mode 100644 crates/bitwarden-wasm-internal/README.md
 create mode 100755 crates/bitwarden-wasm-internal/build.sh
 create mode 100644 crates/bitwarden-wasm-internal/src/client.rs
 create mode 100644 crates/bitwarden-wasm-internal/src/lib.rs
 create mode 100644 languages/js/sdk-internal/.gitignore
 create mode 100644 languages/js/sdk-internal/index.js
 create mode 100644 languages/js/sdk-internal/package.json

diff --git a/.github/workflows/build-wasm-internal.yml b/.github/workflows/build-wasm-internal.yml
new file mode 100644
index 000000000..99fe06c44
--- /dev/null
+++ b/.github/workflows/build-wasm-internal.yml
@@ -0,0 +1,59 @@
+---
+name: Build @bitwarden/sdk-internal
+
+on:
+  pull_request:
+  push:
+    branches:
+      - "main"
+      - "rc"
+      - "hotfix-rc"
+  workflow_dispatch:
+
+defaults:
+  run:
+    shell: bash
+    working-directory: crates/bitwarden-wasm-internal
+
+jobs:
+  build:
+    name: Building @bitwarden/sdk-wasm-internal
+    runs-on: ubuntu-22.04
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      - name: Setup Node
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
+        with:
+          node-version: 20
+          registry-url: "https://npm.pkg.github.com"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm i -g binaryen
+
+      - name: Install rust
+        uses: dtolnay/rust-toolchain@7b1c307e0dcbda6122208f10795a713336a9b35a # stable
+        with:
+          toolchain: stable
+          targets: wasm32-unknown-unknown
+
+      - name: Cache cargo registry
+        uses: Swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84 # v2.7.3
+        with:
+          key: wasm-cargo-cache
+
+      - name: Install wasm-bindgen-cli
+        run: cargo install wasm-bindgen-cli
+
+      - name: Build
+        run: ./build.sh -r
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+        with:
+          name: sdk-internal
+          path: ${{ github.workspace }}/languages/js/sdk-internal/*
+          if-no-files-found: error
diff --git a/.github/workflows/publish-internal.yml b/.github/workflows/publish-internal.yml
new file mode 100644
index 000000000..304fade43
--- /dev/null
+++ b/.github/workflows/publish-internal.yml
@@ -0,0 +1,136 @@
+---
+name: Publish @bitwarden/sdk-internal
+run-name: Publish @bitwarden/sdk-internal ${{ inputs.release_type }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      release_type:
+        description: "Release Options"
+        required: true
+        default: "Release"
+        type: choice
+        options:
+          - Release
+          - Dry Run
+      version:
+        description: "Release Version"
+        required: false
+        default: "latest"
+
+defaults:
+  run:
+    working-directory: languages/js/sdk-internal
+
+jobs:
+  setup:
+    name: Setup
+    runs-on: ubuntu-22.04
+    outputs:
+      release-version: ${{ steps.version-output.outputs.version }}
+      tag_name: ${{ steps.version-output.outputs.tag_name }}
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      - name: Branch check
+        if: ${{ inputs.release_type != 'Dry Run' }}
+        run: |
+          if [[ "$GITHUB_REF" != "refs/heads/main" ]]; then
+            echo "==================================="
+            echo "[!] Can only release from the 'main' branch"
+            echo "==================================="
+            exit 1
+          fi
+
+      - name: Version output
+        id: version-output
+        run: |
+          if [[ "${{ inputs.version }}" == "latest" || "${{ inputs.version }}" == "" ]]; then
+            TAG_NAME=$(curl  "https://api.github.com/repos/bitwarden/sdk/releases" | jq -c '.[] | select(.tag_name | contains("sdk-internal")) | .tag_name' | head -1)
+            VERSION=$(echo $TAG_NAME | grep -ohE '20[0-9]{2}\.([1-9]|1[0-2])\.[0-9]+')
+            echo "Latest Released Version: $VERSION"
+            echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+            echo "Latest Released Tag name: $TAG_NAME"
+            echo "tag_name=$TAG_NAME" >> $GITHUB_OUTPUT
+          else
+            echo "Release Version: ${{ inputs.version }}"
+            echo "version=${{ inputs.version }}" >> $GITHUB_OUTPUT
+          fi
+
+  npm:
+    name: Publish NPM
+    runs-on: ubuntu-22.04
+    needs: setup
+    env:
+      _VERSION: ${{ needs.setup.outputs.release-version }}
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        with:
+          ref: ${{ needs.setup.outputs.tag_name }}
+
+      - name: Setup Node
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
+        with:
+          node-version: 20
+
+      - name: Login to Azure
+        uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
+        with:
+          creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
+
+      - name: Retrieve secrets
+        id: retrieve-secrets
+        uses: bitwarden/gh-actions/get-keyvault-secrets@main
+        with:
+          keyvault: "bitwarden-ci"
+          secrets: "npm-api-key"
+
+      - name: Download artifact
+        run: |
+          wget https://github.com/bitwarden/sdk/releases/download/sdk-internal-v${{ env._VERSION }}/sdk-internal.zip
+          unzip sdk-internal.zip
+          rm sdk-internal.zip
+
+      - name: Create GitHub deployment
+        if: ${{ inputs.release_type != 'Dry Run' }}
+        uses: chrnorm/deployment-action@55729fcebec3d284f60f5bcabbd8376437d696b1 # v2.0.7
+        id: deployment
+        with:
+          token: "${{ secrets.GITHUB_TOKEN }}"
+          initial-status: "in_progress"
+          environment: "Bitwarden SDK Internal - Production"
+          description: "Deployment ${{ env._VERSION }} from branch ${{ github.ref_name }}"
+          task: release
+
+      - name: Setup NPM
+        run: |
+          echo 'registry="https://registry.npmjs.org/"' > ./.npmrc
+          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ./.npmrc
+
+          echo 'registry="https://registry.npmjs.org/"' > ~/.npmrc
+          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
+        env:
+          NPM_TOKEN: ${{ steps.retrieve-secrets.outputs.npm-api-key }}
+
+      - name: Publish NPM
+        if: ${{ inputs.release_type != 'Dry Run' }}
+        run: npm publish --access public --registry=https://registry.npmjs.org/  --userconfig=./.npmrc
+
+      - name: Update deployment status to Success
+        if: ${{ inputs.release_type != 'Dry Run' && success() }}
+        uses: chrnorm/deployment-status@9a72af4586197112e0491ea843682b5dc280d806 # v2.0.3
+        with:
+          token: "${{ secrets.GITHUB_TOKEN }}"
+          state: "success"
+          deployment-id: ${{ steps.deployment.outputs.deployment_id }}
+
+      - name: Update deployment status to Failure
+        if: ${{ inputs.release_type != 'Dry Run' && failure() }}
+        uses: chrnorm/deployment-status@9a72af4586197112e0491ea843682b5dc280d806 # v2.0.3
+        with:
+          token: "${{ secrets.GITHUB_TOKEN }}"
+          state: "failure"
+          deployment-id: ${{ steps.deployment.outputs.deployment_id }}
diff --git a/.prettierignore b/.prettierignore
index 36c418776..16243942f 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -1,5 +1,9 @@
 target
 languages/*
+!languages/js
+languages/js/*
+!languages/js/sdk-internal
+languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm.js
 schemas
 /crates/bitwarden-napi/src-ts/bitwarden_client/schemas.ts
 about.hbs
diff --git a/Cargo.lock b/Cargo.lock
index 27eddfa65..4e0d14119 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -446,9 +446,11 @@ dependencies = [
  "sha2",
  "thiserror",
  "tokio",
+ "tsify-next",
  "uniffi",
  "uuid",
  "validator",
+ "wasm-bindgen",
  "wiremock",
  "zeroize",
  "zxcvbn",
@@ -683,6 +685,20 @@ dependencies = [
  "wasm-bindgen-test",
 ]
 
+[[package]]
+name = "bitwarden-wasm-internal"
+version = "0.1.0"
+dependencies = [
+ "bitwarden",
+ "console_error_panic_hook",
+ "console_log",
+ "js-sys",
+ "log",
+ "serde_json",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+]
+
 [[package]]
 name = "blake2"
 version = "0.10.6"
@@ -3509,6 +3525,17 @@ dependencies = [
  "serde_derive",
 ]
 
+[[package]]
+name = "serde-wasm-bindgen"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8302e169f0eddcc139c70f139d19d6467353af16f9fce27e8c30158036a1e16b"
+dependencies = [
+ "js-sys",
+ "serde",
+ "wasm-bindgen",
+]
+
 [[package]]
 name = "serde_derive"
 version = "1.0.210"
@@ -4155,6 +4182,30 @@ version = "0.2.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
 
+[[package]]
+name = "tsify-next"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f4a645dca4ee0800f5ab60ce166deba2db6a0315de795a2691e138a3d55d756"
+dependencies = [
+ "serde",
+ "serde-wasm-bindgen",
+ "tsify-next-macros",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "tsify-next-macros"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d5c06f8a51d759bb58129e30b2631739e7e1e4579fad1f30ac09a6c88e488a6"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde_derive_internals",
+ "syn 2.0.79",
+]
+
 [[package]]
 name = "typenum"
 version = "1.17.0"
diff --git a/Cargo.toml b/Cargo.toml
index 190341a7e..ce01a7b7e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -49,10 +49,13 @@ serde_qs = ">=0.12.0, <0.14"
 serde_repr = ">=0.1.12, <0.2"
 thiserror = ">=1.0.40, <2.0"
 tokio = { version = "1.36.0", features = ["macros"] }
+tsify-next = { version = ">=0.5.4, <0.6", features = [
+    "js",
+], default-features = false }
 uniffi = "=0.28.1"
 uuid = { version = ">=1.3.3, <2.0", features = ["serde", "v4"] }
 validator = { version = "0.18.1", features = ["derive"] }
-wasm-bindgen = { version = "0.2.91", features = ["serde-serialize"] }
+wasm-bindgen = { version = ">=0.2.91, <0.3", features = ["serde-serialize"] }
 wasm-bindgen-futures = "0.4.41"
 
 [workspace.lints.clippy]
diff --git a/crates/bitwarden-core/Cargo.toml b/crates/bitwarden-core/Cargo.toml
index f4b6ec423..d212afb7a 100644
--- a/crates/bitwarden-core/Cargo.toml
+++ b/crates/bitwarden-core/Cargo.toml
@@ -20,6 +20,7 @@ no-memory-hardening = [
 ] # Disable memory hardening features
 uniffi = ["bitwarden-crypto/uniffi", "dep:uniffi"] # Uniffi bindings
 secrets = [] # Secrets manager API
+wasm = ["dep:wasm-bindgen", "dep:tsify-next"] # WASM support
 
 [dependencies]
 base64 = ">=0.22.1, <0.23"
@@ -44,8 +45,10 @@ thiserror = { workspace = true }
 uniffi = { workspace = true, optional = true, features = ["tokio"] }
 uuid = { workspace = true }
 validator = { workspace = true }
+wasm-bindgen = { workspace = true, optional = true }
 zeroize = { version = ">=1.7.0, <2.0", features = ["derive", "aarch64"] }
 zxcvbn = { version = ">=3.0.1, <4.0", optional = true }
+tsify-next = { workspace = true, optional = true }
 
 [target.'cfg(not(target_arch="wasm32"))'.dependencies]
 # By default, we use rustls as the TLS stack and rust-platform-verifier to support user-installed root certificates
diff --git a/crates/bitwarden-core/src/client/client_settings.rs b/crates/bitwarden-core/src/client/client_settings.rs
index bd678d131..70e2e6839 100644
--- a/crates/bitwarden-core/src/client/client_settings.rs
+++ b/crates/bitwarden-core/src/client/client_settings.rs
@@ -19,6 +19,11 @@ use serde::{Deserialize, Serialize};
 #[derive(Serialize, Deserialize, Debug, JsonSchema)]
 #[serde(default, rename_all = "camelCase", deny_unknown_fields)]
 #[cfg_attr(feature = "uniffi", derive(uniffi::Record))]
+#[cfg_attr(
+    feature = "wasm",
+    derive(tsify_next::Tsify),
+    tsify(into_wasm_abi, from_wasm_abi)
+)]
 pub struct ClientSettings {
     /// The identity url of the targeted Bitwarden instance. Defaults to `https://identity.bitwarden.com`
     pub identity_url: String,
@@ -44,6 +49,11 @@ impl Default for ClientSettings {
 #[allow(non_camel_case_types)]
 #[derive(Serialize, Deserialize, Copy, Clone, Debug, JsonSchema)]
 #[cfg_attr(feature = "uniffi", derive(uniffi::Enum))]
+#[cfg_attr(
+    feature = "wasm",
+    derive(tsify_next::Tsify),
+    tsify(into_wasm_abi, from_wasm_abi)
+)]
 pub enum DeviceType {
     Android = 0,
     iOS = 1,
@@ -66,6 +76,9 @@ pub enum DeviceType {
     VivaldiBrowser = 18,
     VivaldiExtension = 19,
     SafariExtension = 20,
-
     SDK = 21,
+    Server = 22,
+    WindowsCLI = 23,
+    MacOsCLI = 24,
+    LinuxCLI = 25,
 }
diff --git a/crates/bitwarden-wasm-internal/Cargo.toml b/crates/bitwarden-wasm-internal/Cargo.toml
new file mode 100644
index 000000000..df69015cf
--- /dev/null
+++ b/crates/bitwarden-wasm-internal/Cargo.toml
@@ -0,0 +1,28 @@
+[package]
+name = "bitwarden-wasm-internal"
+version = "0.1.0"
+publish = false
+
+authors.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+homepage.workspace = true
+repository.workspace = true
+license-file.workspace = true
+keywords.workspace = true
+
+[lib]
+crate-type = ["cdylib"]
+
+[dependencies]
+bitwarden = { workspace = true, features = ["internal", "wasm"] }
+console_error_panic_hook = "0.1.7"
+console_log = { version = "1.0.0", features = ["color"] }
+js-sys = "0.3.68"
+log = "0.4.20"
+serde_json = ">=1.0.96, <2.0"
+wasm-bindgen = { version = "0.2.91", features = ["serde-serialize"] }
+wasm-bindgen-futures = "0.4.41"
+
+[lints]
+workspace = true
diff --git a/crates/bitwarden-wasm-internal/README.md b/crates/bitwarden-wasm-internal/README.md
new file mode 100644
index 000000000..4db9847f5
--- /dev/null
+++ b/crates/bitwarden-wasm-internal/README.md
@@ -0,0 +1,25 @@
+# bitwarden-wasm-internal
+
+**Note:** This is only for internal use. Bitwarden will not provide any support for this crate.
+
+Requirements:
+
+- `wasm32-unknown-unknown` rust target.
+- `wasm-bindgen-cli` installed.
+- `binaryen` installed for `wasm-opt` and `wasm2js`.
+
+```bash
+rustup target add wasm32-unknown-unknown
+cargo install -f wasm-bindgen-cli
+brew install binaryen
+```
+
+#### Build
+
+```bash
+# dev
+./build.sh
+
+# release
+./build.sh -r
+```
diff --git a/crates/bitwarden-wasm-internal/build.sh b/crates/bitwarden-wasm-internal/build.sh
new file mode 100755
index 000000000..aa8426c59
--- /dev/null
+++ b/crates/bitwarden-wasm-internal/build.sh
@@ -0,0 +1,26 @@
+# Move to the root of the repository
+cd "$(dirname "$0")"
+cd ../../
+
+if [ "$1" != "-r" ]; then
+  # Dev
+  cargo build -p bitwarden-wasm-internal --target wasm32-unknown-unknown
+  wasm-bindgen --target bundler --out-dir languages/js/sdk-internal ./target/wasm32-unknown-unknown/debug/bitwarden_wasm_internal.wasm
+  wasm-bindgen --target nodejs --out-dir languages/js/sdk-internal/node ./target/wasm32-unknown-unknown/debug/bitwarden_wasm_internal.wasm
+else
+  # Release
+  cargo build -p bitwarden-wasm-internal --target wasm32-unknown-unknown --release
+  wasm-bindgen --target bundler --out-dir languages/js/sdk-internal ./target/wasm32-unknown-unknown/release/bitwarden_wasm_internal.wasm
+  wasm-bindgen --target nodejs --out-dir languages/js/sdk-internal/node ./target/wasm32-unknown-unknown/release/bitwarden_wasm_internal.wasm
+fi
+
+# Format
+npx prettier --write ./languages/js/sdk-internal
+
+# Optimize size
+wasm-opt -Os ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm -o ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm
+wasm-opt -Os ./languages/js/sdk-internal/node/bitwarden_wasm_internal_bg.wasm -o ./languages/js/sdk-internal/node/bitwarden_wasm_internal_bg.wasm
+
+# Transpile to JS
+wasm2js ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm -o ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm.js
+npx terser ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm.js -o ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm.js
diff --git a/crates/bitwarden-wasm-internal/src/client.rs b/crates/bitwarden-wasm-internal/src/client.rs
new file mode 100644
index 000000000..994af1fcf
--- /dev/null
+++ b/crates/bitwarden-wasm-internal/src/client.rs
@@ -0,0 +1,57 @@
+extern crate console_error_panic_hook;
+use std::rc::Rc;
+
+use bitwarden::{Client, ClientSettings};
+use log::{set_max_level, Level};
+use wasm_bindgen::prelude::*;
+
+#[wasm_bindgen]
+pub enum LogLevel {
+    Trace,
+    Debug,
+    Info,
+    Warn,
+    Error,
+}
+
+fn convert_level(level: LogLevel) -> Level {
+    match level {
+        LogLevel::Trace => Level::Trace,
+        LogLevel::Debug => Level::Debug,
+        LogLevel::Info => Level::Info,
+        LogLevel::Warn => Level::Warn,
+        LogLevel::Error => Level::Error,
+    }
+}
+
+// Rc<...> is to avoid needing to take ownership of the Client during our async run_command
+// function https://github.com/rustwasm/wasm-bindgen/issues/2195#issuecomment-799588401
+#[wasm_bindgen]
+pub struct BitwardenClient(Rc<Client>);
+
+#[wasm_bindgen]
+impl BitwardenClient {
+    #[wasm_bindgen(constructor)]
+    pub fn new(settings: Option<ClientSettings>, log_level: Option<LogLevel>) -> Self {
+        console_error_panic_hook::set_once();
+        let log_level = convert_level(log_level.unwrap_or(LogLevel::Info));
+        if let Err(_e) = console_log::init_with_level(log_level) {
+            set_max_level(log_level.to_level_filter())
+        }
+
+        Self(Rc::new(Client::new(settings)))
+    }
+
+    /// Test method, echoes back the input
+    pub fn echo(&self, msg: String) -> String {
+        msg
+    }
+
+    /// Test method, calls http endpoint
+    pub async fn http_get(&self, url: String) -> Result<String, String> {
+        let client = self.0.internal.get_http_client();
+        let res = client.get(&url).send().await.map_err(|e| e.to_string())?;
+
+        res.text().await.map_err(|e| e.to_string())
+    }
+}
diff --git a/crates/bitwarden-wasm-internal/src/lib.rs b/crates/bitwarden-wasm-internal/src/lib.rs
new file mode 100644
index 000000000..b79c47fca
--- /dev/null
+++ b/crates/bitwarden-wasm-internal/src/lib.rs
@@ -0,0 +1 @@
+mod client;
diff --git a/crates/bitwarden/Cargo.toml b/crates/bitwarden/Cargo.toml
index 9fa5c0cb3..1d09377cf 100644
--- a/crates/bitwarden/Cargo.toml
+++ b/crates/bitwarden/Cargo.toml
@@ -40,6 +40,7 @@ secrets = [
     "dep:bitwarden-sm",
     "dep:bitwarden-generators",
 ] # Secrets manager API
+wasm = ["bitwarden-core/wasm"] # WASM support
 
 [dependencies]
 bitwarden-api-api = { workspace = true }
diff --git a/languages/js/sdk-internal/.gitignore b/languages/js/sdk-internal/.gitignore
new file mode 100644
index 000000000..ef69b9de9
--- /dev/null
+++ b/languages/js/sdk-internal/.gitignore
@@ -0,0 +1,6 @@
+bitwarden_wasm_internal_bg.js
+bitwarden_wasm_internal_bg.wasm
+bitwarden_wasm_internal_bg.wasm.d.ts
+bitwarden_wasm_internal_bg.wasm.js
+bitwarden_wasm_internal.d.ts
+bitwarden_wasm_internal.js
diff --git a/languages/js/sdk-internal/index.js b/languages/js/sdk-internal/index.js
new file mode 100644
index 000000000..0525f7aa4
--- /dev/null
+++ b/languages/js/sdk-internal/index.js
@@ -0,0 +1,8 @@
+import { __wbg_set_wasm } from "./bitwarden_wasm_internal_bg.js";
+
+// In order to support a fallback strategy for web we need to conditionally load the wasm file
+export function init(wasm) {
+  __wbg_set_wasm(wasm);
+}
+
+export * from "./bitwarden_wasm_internal_bg.js";
diff --git a/languages/js/sdk-internal/package.json b/languages/js/sdk-internal/package.json
new file mode 100644
index 000000000..94b678141
--- /dev/null
+++ b/languages/js/sdk-internal/package.json
@@ -0,0 +1,24 @@
+{
+  "name": "@bitwarden/sdk-internal",
+  "version": "0.1.0",
+  "files": [
+    "bitwarden_wasm_internal_bg.js",
+    "bitwarden_wasm_internal_bg.wasm",
+    "bitwarden_wasm_internal_bg.wasm.d.ts",
+    "bitwarden_wasm_internal_bg.wasm.js",
+    "bitwarden_wasm_internal.d.ts",
+    "bitwarden_wasm_internal.js",
+    "index.js",
+    "node/bitwarden_wasm_internal.wasm",
+    "node/bitwarden_wasm_internal.wasm.d.ts",
+    "node/bitwarden_wasm_internal.d.ts",
+    "node/bitwarden_wasm_internal.js"
+  ],
+  "main": "node/bitwarden_wasm_internal.js",
+  "module": "index.js",
+  "types": "bitwarden_wasm_internal.d.ts",
+  "scripts": {},
+  "sideEffects": [
+    "./bitwarden_wasm_internal.js"
+  ]
+}

From 3f023405e8a31fc68dd1c78af96e652ef1af203e Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 4 Oct 2024 11:19:11 +0200
Subject: [PATCH 3/7] Fix publish internal (#1111)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->


[bitwarden.atlassian.net/browse/PM-12967](https://bitwarden.atlassian.net/browse/PM-12967)

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

We expect to automate this so that every merge to main will publish a
new sdk-internal release. Therefore we want to:
- Not create github releases
- Publish to GH packages

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 .github/workflows/publish-internal.yml  | 89 +++----------------------
 crates/bitwarden-wasm-internal/build.sh |  3 -
 2 files changed, 11 insertions(+), 81 deletions(-)

diff --git a/.github/workflows/publish-internal.yml b/.github/workflows/publish-internal.yml
index 304fade43..7d0ceb198 100644
--- a/.github/workflows/publish-internal.yml
+++ b/.github/workflows/publish-internal.yml
@@ -15,8 +15,7 @@ on:
           - Dry Run
       version:
         description: "Release Version"
-        required: false
-        default: "latest"
+        required: true
 
 defaults:
   run:
@@ -26,9 +25,6 @@ jobs:
   setup:
     name: Setup
     runs-on: ubuntu-22.04
-    outputs:
-      release-version: ${{ steps.version-output.outputs.version }}
-      tag_name: ${{ steps.version-output.outputs.tag_name }}
     steps:
       - name: Checkout repo
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
@@ -43,94 +39,31 @@ jobs:
             exit 1
           fi
 
-      - name: Version output
-        id: version-output
-        run: |
-          if [[ "${{ inputs.version }}" == "latest" || "${{ inputs.version }}" == "" ]]; then
-            TAG_NAME=$(curl  "https://api.github.com/repos/bitwarden/sdk/releases" | jq -c '.[] | select(.tag_name | contains("sdk-internal")) | .tag_name' | head -1)
-            VERSION=$(echo $TAG_NAME | grep -ohE '20[0-9]{2}\.([1-9]|1[0-2])\.[0-9]+')
-            echo "Latest Released Version: $VERSION"
-            echo "version=$VERSION" >> $GITHUB_OUTPUT
-
-            echo "Latest Released Tag name: $TAG_NAME"
-            echo "tag_name=$TAG_NAME" >> $GITHUB_OUTPUT
-          else
-            echo "Release Version: ${{ inputs.version }}"
-            echo "version=${{ inputs.version }}" >> $GITHUB_OUTPUT
-          fi
-
   npm:
     name: Publish NPM
     runs-on: ubuntu-22.04
     needs: setup
-    env:
-      _VERSION: ${{ needs.setup.outputs.release-version }}
     steps:
       - name: Checkout repo
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-        with:
-          ref: ${{ needs.setup.outputs.tag_name }}
 
       - name: Setup Node
         uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version: 20
-
-      - name: Login to Azure
-        uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
-        with:
-          creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
-
-      - name: Retrieve secrets
-        id: retrieve-secrets
-        uses: bitwarden/gh-actions/get-keyvault-secrets@main
-        with:
-          keyvault: "bitwarden-ci"
-          secrets: "npm-api-key"
+          registry-url: "https://npm.pkg.github.com"
 
       - name: Download artifact
-        run: |
-          wget https://github.com/bitwarden/sdk/releases/download/sdk-internal-v${{ env._VERSION }}/sdk-internal.zip
-          unzip sdk-internal.zip
-          rm sdk-internal.zip
-
-      - name: Create GitHub deployment
-        if: ${{ inputs.release_type != 'Dry Run' }}
-        uses: chrnorm/deployment-action@55729fcebec3d284f60f5bcabbd8376437d696b1 # v2.0.7
-        id: deployment
+        uses: bitwarden/gh-actions/download-artifacts@main
         with:
-          token: "${{ secrets.GITHUB_TOKEN }}"
-          initial-status: "in_progress"
-          environment: "Bitwarden SDK Internal - Production"
-          description: "Deployment ${{ env._VERSION }} from branch ${{ github.ref_name }}"
-          task: release
-
-      - name: Setup NPM
-        run: |
-          echo 'registry="https://registry.npmjs.org/"' > ./.npmrc
-          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ./.npmrc
-
-          echo 'registry="https://registry.npmjs.org/"' > ~/.npmrc
-          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
-        env:
-          NPM_TOKEN: ${{ steps.retrieve-secrets.outputs.npm-api-key }}
+          workflow: build-wasm-internal.yml
+          workflow_conclusion: success
+          branch: ${{ inputs.release_type == 'Dry Run' && 'main' ||  github.ref_name }}
+          artifacts: sdk-internal
 
       - name: Publish NPM
         if: ${{ inputs.release_type != 'Dry Run' }}
-        run: npm publish --access public --registry=https://registry.npmjs.org/  --userconfig=./.npmrc
-
-      - name: Update deployment status to Success
-        if: ${{ inputs.release_type != 'Dry Run' && success() }}
-        uses: chrnorm/deployment-status@9a72af4586197112e0491ea843682b5dc280d806 # v2.0.3
-        with:
-          token: "${{ secrets.GITHUB_TOKEN }}"
-          state: "success"
-          deployment-id: ${{ steps.deployment.outputs.deployment_id }}
-
-      - name: Update deployment status to Failure
-        if: ${{ inputs.release_type != 'Dry Run' && failure() }}
-        uses: chrnorm/deployment-status@9a72af4586197112e0491ea843682b5dc280d806 # v2.0.3
-        with:
-          token: "${{ secrets.GITHUB_TOKEN }}"
-          state: "failure"
-          deployment-id: ${{ steps.deployment.outputs.deployment_id }}
+        run: npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        working-directory: languages/js/sdk-internal
diff --git a/crates/bitwarden-wasm-internal/build.sh b/crates/bitwarden-wasm-internal/build.sh
index aa8426c59..b02ee1ea1 100755
--- a/crates/bitwarden-wasm-internal/build.sh
+++ b/crates/bitwarden-wasm-internal/build.sh
@@ -6,12 +6,10 @@ if [ "$1" != "-r" ]; then
   # Dev
   cargo build -p bitwarden-wasm-internal --target wasm32-unknown-unknown
   wasm-bindgen --target bundler --out-dir languages/js/sdk-internal ./target/wasm32-unknown-unknown/debug/bitwarden_wasm_internal.wasm
-  wasm-bindgen --target nodejs --out-dir languages/js/sdk-internal/node ./target/wasm32-unknown-unknown/debug/bitwarden_wasm_internal.wasm
 else
   # Release
   cargo build -p bitwarden-wasm-internal --target wasm32-unknown-unknown --release
   wasm-bindgen --target bundler --out-dir languages/js/sdk-internal ./target/wasm32-unknown-unknown/release/bitwarden_wasm_internal.wasm
-  wasm-bindgen --target nodejs --out-dir languages/js/sdk-internal/node ./target/wasm32-unknown-unknown/release/bitwarden_wasm_internal.wasm
 fi
 
 # Format
@@ -19,7 +17,6 @@ npx prettier --write ./languages/js/sdk-internal
 
 # Optimize size
 wasm-opt -Os ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm -o ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm
-wasm-opt -Os ./languages/js/sdk-internal/node/bitwarden_wasm_internal_bg.wasm -o ./languages/js/sdk-internal/node/bitwarden_wasm_internal_bg.wasm
 
 # Transpile to JS
 wasm2js ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm -o ./languages/js/sdk-internal/bitwarden_wasm_internal_bg.wasm.js

From e0a4c2e14f4353a89ba81de407eacb628cf24394 Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 4 Oct 2024 11:29:31 +0200
Subject: [PATCH 4/7] Set version when publishing (#1112)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 .github/workflows/publish-internal.yml | 7 ++++++-
 languages/js/sdk-internal/package.json | 7 +------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/publish-internal.yml b/.github/workflows/publish-internal.yml
index 7d0ceb198..915b0bfe4 100644
--- a/.github/workflows/publish-internal.yml
+++ b/.github/workflows/publish-internal.yml
@@ -61,9 +61,14 @@ jobs:
           branch: ${{ inputs.release_type == 'Dry Run' && 'main' ||  github.ref_name }}
           artifacts: sdk-internal
 
+      - name: Set version
+        run: |
+          npm version --no-git-tag-version ${{ inputs.version }}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Publish NPM
         if: ${{ inputs.release_type != 'Dry Run' }}
         run: npm publish --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        working-directory: languages/js/sdk-internal
diff --git a/languages/js/sdk-internal/package.json b/languages/js/sdk-internal/package.json
index 94b678141..4ce87a3c1 100644
--- a/languages/js/sdk-internal/package.json
+++ b/languages/js/sdk-internal/package.json
@@ -8,13 +8,8 @@
     "bitwarden_wasm_internal_bg.wasm.js",
     "bitwarden_wasm_internal.d.ts",
     "bitwarden_wasm_internal.js",
-    "index.js",
-    "node/bitwarden_wasm_internal.wasm",
-    "node/bitwarden_wasm_internal.wasm.d.ts",
-    "node/bitwarden_wasm_internal.d.ts",
-    "node/bitwarden_wasm_internal.js"
+    "index.js"
   ],
-  "main": "node/bitwarden_wasm_internal.js",
   "module": "index.js",
   "types": "bitwarden_wasm_internal.d.ts",
   "scripts": {},

From bb93c233314b889c1b53fb3b9b62a106ef68578f Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 4 Oct 2024 13:40:45 +0200
Subject: [PATCH 5/7] Switch to using npm for sdk-internal (#1113)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

It's a hassle to consume an package published on GitHub Packages in
GitHub Actions as you need a PAT. Proposing we switch to publishing on
npm instead.

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 .github/workflows/publish-internal.yml |  27 ++-
 languages/js/sdk-internal/LICENSE      | 295 +++++++++++++++++++++++++
 languages/js/sdk-internal/README.md    |   3 +
 languages/js/sdk-internal/package.json |   1 +
 4 files changed, 322 insertions(+), 4 deletions(-)
 create mode 100644 languages/js/sdk-internal/LICENSE
 create mode 100644 languages/js/sdk-internal/README.md

diff --git a/.github/workflows/publish-internal.yml b/.github/workflows/publish-internal.yml
index 915b0bfe4..6df0b844c 100644
--- a/.github/workflows/publish-internal.yml
+++ b/.github/workflows/publish-internal.yml
@@ -51,7 +51,18 @@ jobs:
         uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version: 20
-          registry-url: "https://npm.pkg.github.com"
+
+      - name: Login to Azure
+        uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
+        with:
+          creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
+
+      - name: Retrieve secrets
+        id: retrieve-secrets
+        uses: bitwarden/gh-actions/get-keyvault-secrets@main
+        with:
+          keyvault: "bitwarden-ci"
+          secrets: "npm-api-key"
 
       - name: Download artifact
         uses: bitwarden/gh-actions/download-artifacts@main
@@ -67,8 +78,16 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Setup NPM
+        run: |
+          echo 'registry="https://registry.npmjs.org/"' > ./.npmrc
+          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ./.npmrc
+
+          echo 'registry="https://registry.npmjs.org/"' > ~/.npmrc
+          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
+        env:
+          NPM_TOKEN: ${{ steps.retrieve-secrets.outputs.npm-api-key }}
+
       - name: Publish NPM
         if: ${{ inputs.release_type != 'Dry Run' }}
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: npm publish --access public --registry=https://registry.npmjs.org/  --userconfig=./.npmrc
diff --git a/languages/js/sdk-internal/LICENSE b/languages/js/sdk-internal/LICENSE
new file mode 100644
index 000000000..e9d496ff7
--- /dev/null
+++ b/languages/js/sdk-internal/LICENSE
@@ -0,0 +1,295 @@
+BITWARDEN SOFTWARE DEVELOPMENT KIT LICENSE AGREEMENT
+Version 1, 17 March 2023
+
+1. Introduction
+
+1.1 The Bitwarden Software Development Kit (referred to in the License Agreement
+as the "SDK" and available for download at the following URL
+https://github.com/bitwarden/sdk) is licensed to you subject to the terms of
+this License Agreement. The License Agreement forms a legally binding contract
+between you and the Company in relation to your use of the SDK.
+
+1.2 "Bitwarden" means the Bitwarden software made available by the Company,
+available for download at the following URL, as updated from time to time.
+
+1.3 A "Compatible Application" means any software program or service that (i)
+connects to and interoperates with a current version of the Bitwarden server
+products distributed by the Company; and (ii) complies with the Company’s
+acceptable use policy available at the following URL:
+https://bitwarden.com/terms/#acceptable_use.
+
+1.4 "Company" means Bitwarden Inc., organized under the laws of the State of
+Delaware.
+
+2. Accepting this License Agreement
+
+2.1 In order to access or use the SDK, you must first agree to the License
+Agreement. You may not access or use the SDK if you do not accept the License
+Agreement.
+
+2.2 By clicking to accept and/or accessing or using the SDK, you hereby agree to
+the terms of the License Agreement.
+
+2.3 You may not access or use the SDK and may not accept the License Agreement
+if you are a person barred from receiving the SDK under the laws of the United
+States or other countries, including the country in which you are resident or
+from which you access or use the SDK.
+
+2.4 If you are agreeing to be bound by the License Agreement on behalf of your
+employer or any other entity, you represent and warrant that you have full legal
+authority to bind your employer or such other entity to the License Agreement.
+If you do not have the requisite authority, you may not accept the License
+Agreement or you may not access or use the SDK on behalf of your employer or
+other entity.
+
+3. SDK License from Bitwarden
+
+3.1 Subject to the terms of this License Agreement, Bitwarden grants you a
+limited, worldwide, royalty-free, non-assignable, non-exclusive, and
+non-sublicensable license to use the SDK solely (a) to develop, test, and
+demonstrate a Compatible Application; (b) to develop, test, and run a Compatible
+Application for personal use by your family; or (c) to to develop, test, and run
+a Compatible Application for the internal business operations of your
+organization in connection with a paid license for a Bitwarden server product,
+provided that in no case above may the Compatible Application be offered,
+licensed, or sold to a third party.
+
+3.2 You agree that Bitwarden or third parties own all legal right, title and
+interest in and to the SDK, including any Intellectual Property Rights that
+subsist in the SDK. "Intellectual Property Rights" means any and all rights
+under patent law, copyright law, trade secret law, trademark law, and any and
+all other proprietary rights. Bitwarden reserves all rights not expressly
+granted to you.
+
+3.3 You may not use this SDK to develop applications for use with software other
+than Bitwarden (including non-compatible implementations of Bitwarden) or to
+develop another SDK.
+
+3.4 You may not use the SDK for any purpose not expressly permitted by the
+License Agreement. Except for contributions to Bitwarden pursuant to the
+Contribution License Agreement available at this URL:
+https://cla-assistant.io/bitwarden/clients, or to the extent required by
+applicable third party licenses, you may not copy modify, adapt, redistribute,
+decompile, reverse engineer, disassemble, or create derivative works of the SDK
+or any part of the SDK.
+
+3.5 Use, reproduction, and distribution of a component of the SDK licensed under
+an open source software license are governed solely by the terms of that open
+source software license and not the License Agreement.
+
+3.6 You agree that the form and nature of the SDK that the Company provides may
+change without prior notice to you and that future versions of the SDK may be
+incompatible with applications developed on previous versions of the SDK. You
+agree that the Company may stop (permanently or temporarily) providing the SDK
+or any features within the SDK to you or to users generally at the Company’s
+sole discretion, without prior notice to you.
+
+3.7 Nothing in the License Agreement gives you a right to use any of the
+Company’s trade names, trademarks, service marks, logos, domain names, or other
+distinctive brand features.
+
+3.8 You agree that you will not remove, obscure, or alter any proprietary rights
+notices (including copyright and trademark notices) that may be affixed to or
+contained within the SDK.
+
+4. Use of the SDK by You
+
+4.1 The Company agrees that it obtains no right, title, or interest from you (or
+your licensors) under the License Agreement in or to any software applications
+that you develop using the SDK, including any Intellectual Property Rights that
+subsist in those applications.
+
+4.2 You agree to use the SDK and write applications only for purposes that are
+permitted by (a) the License Agreement and (b) any applicable law, regulation or
+generally accepted practices or guidelines in the relevant jurisdictions
+(including any laws regarding the export of data or software to and from the
+United States or other relevant countries).
+
+4.3 You agree that if you use the SDK to develop applications for other users,
+you will protect the privacy and legal rights of those users. If the users
+provide you with user names, passwords, or other login information or personal
+information, you must make the users aware that the information will be
+available to your application, and you must provide legally adequate privacy
+notice and protection for those users. If your application stores personal or
+sensitive information provided by users, it must do so securely. If the user
+provides your application with Bitwarden Account information, your application
+may only use that information to access the user's Bitwarden Account when, and
+for the limited purposes for which, the user has given you permission to do so.
+
+4.4 You agree that you will not engage in any activity with the SDK, including
+the development or distribution of an application, that interferes with,
+disrupts, damages, or accesses in an unauthorized manner the servers, networks,
+or other properties or services of any third party including, but not limited
+to, the Company, or any mobile communications carrier or public cloud service.
+
+4.5 If you use the SDK to retrieve a user's data from Bitwarden, you acknowledge
+and agree that you shall retrieve data only with the user's explicit consent and
+only when, and for the limited purposes for which, the user has given you
+permission to do so.
+
+4.6 You agree that you are solely responsible for, and that the Company has no
+responsibility to you or to any third party for, any data, content, or resources
+that you create, transmit or display through Bitwarden and/or applications for
+Bitwarden, and for the consequences of your actions (including any loss or
+damage which Bitwarden may suffer) by doing so.
+
+4.7 You agree that you are solely responsible for, and that the Company has no
+responsibility to you or to any third party for, any breach of your obligations
+under the License Agreement, any applicable third party contract or Terms of
+Service, or any applicable law or regulation, and for the consequences
+(including any loss or damage which the Company or any third party may suffer)
+of any such breach.
+
+5. Third Party Applications
+
+5.1 If you use the SDK to integrate or run applications developed by a third
+party or that access data, content or resources provided by a third party, you
+agree that the Company is not responsible for those applications, data, content,
+or resources. You understand that all data, content or resources which you may
+access through such third party applications are the sole responsibility of the
+person from which they originated and that the Company is not liable for any
+loss or damage that you may experience as a result of the use or access of any
+of those third party applications, data, content, or resources.
+
+5.2 You should be aware that the data, content, and resources presented to you
+through such a third party application may be protected by intellectual property
+rights which are owned by the providers (or by other persons or companies on
+their behalf). You acknowledge that your use of such third party applications,
+data, content, or resources may be subject to separate terms between you and the
+relevant third party. In that case, the License Agreement does not affect your
+legal relationship with these third parties.
+
+6. Use of Bitwarden Server
+
+You acknowledge and agree that the Bitwarden server products to which any
+Compatible Application must connect is protected by intellectual property rights
+which are owned by the Company and your use of the Bitwarden server products is
+subject to additional terms not set forth in this License Agreement.
+
+7. Terminating this License Agreement
+
+7.1 The License Agreement will continue to apply until terminated by either you
+or the Company as set out below.
+
+7.2 If you want to terminate the License Agreement, you may do so by ceasing
+your use of the SDK and any relevant developer credentials.
+
+7.3 The Company may at any time, terminate the License Agreement with you if:
+
+(a) you have breached any provision of the License Agreement; or
+
+(b) the Company is required to do so by law; or
+
+(c) a third party with whom the Company offered certain parts of the SDK to you
+has terminated its relationship with the Company or ceased to offer certain
+parts of the SDK to either the Company or to you; or
+
+(d) the Company decides to no longer provide the SDK or certain parts of the SDK
+to users in the country in which you are resident or from which you use the
+service, or the provision of the SDK or certain SDK services to you by the
+Company is, in the Company’'s sole discretion, no longer commercially viable or
+technically practicable.
+
+7.4 When the License Agreement comes to an end, all of the legal rights,
+obligations and liabilities that you and the Company have benefited from, been
+subject to (or which have accrued over time whilst the License Agreement has
+been in force) or which are expressed to continue indefinitely, shall be
+unaffected by this cessation, and the provisions of paragraph 12.8 shall
+continue to apply to such rights, obligations and liabilities indefinitely.
+
+8. NO SUPPORT
+
+The Company is not obligated under this License Agreement to provide you any
+support services for the SDK. Any support provided is at the Company’s sole
+discretion and provided on an "as is" basis and without warranty of any kind.
+
+9. DISCLAIMER OF WARRANTIES
+
+9.1 YOU EXPRESSLY UNDERSTAND AND AGREE THAT YOUR USE OF THE SDK IS AT YOUR SOLE
+RISK AND THAT THE SDK IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF
+ANY KIND FROM Bitwarden.
+
+9.2 YOUR USE OF THE SDK AND ANY MATERIAL DOWNLOADED OR OTHERWISE OBTAINED
+THROUGH THE USE OF THE SDK IS AT YOUR OWN DISCRETION AND RISK AND YOU ARE SOLELY
+RESPONSIBLE FOR ANY DAMAGE TO YOUR COMPUTER SYSTEM OR OTHER DEVICE OR LOSS OF
+DATA THAT RESULTS FROM SUCH USE.
+
+9.3 THE COMPANY FURTHER EXPRESSLY DISCLAIMS ALL WARRANTIES AND CONDITIONS OF ANY
+KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO THE IMPLIED
+WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
+AND NON-INFRINGEMENT.
+
+10. LIMITATION OF LIABILITY
+
+YOU EXPRESSLY UNDERSTAND AND AGREE THAT THE COMPANY, ITS SUBSIDIARIES AND
+AFFILIATES, AND ITS LICENSORS SHALL NOT BE LIABLE TO YOU UNDER ANY THEORY OF
+LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL,
+STATUTORY, OR EXEMPLARY DAMAGES THAT MAY BE INCURRED BY YOU, INCLUDING ANY LOSS
+OF DATA, WHETHER OR NOT THE COMPANY OR ITS REPRESENTATIVES HAVE BEEN ADVISED OF
+OR SHOULD HAVE BEEN AWARE OF THE POSSIBILITY OF ANY SUCH LOSSES ARISING.
+
+11. Indemnification
+
+To the maximum extent permitted by law, you agree to defend, indemnify and hold
+harmless the Company, its affiliates and their respective directors, officers,
+employees and agents from and against any and all claims, actions, suits or
+proceedings, as well as any and all losses, liabilities, damages, costs and
+expenses (including reasonable attorneys fees) arising out of or accruing from
+(a) your use of the SDK, (b) any application you develop on the SDK that
+infringes any copyright, trademark, trade secret, trade dress, patent or other
+intellectual property right of any person or defames any person or violates
+their rights of publicity or privacy, and (c) any non-compliance by you with the
+License Agreement.
+
+12. General Legal Terms
+
+12.1 The Company may make changes to the License Agreement as it distributes new
+versions of the SDK. When these changes are made, the Company will make a new
+version of the License Agreement available on the website where the SDK is made
+available.
+
+12.2 The License Agreement constitutes the whole legal agreement between you and
+the Company and governs your use of the SDK (excluding any services or software
+which the Company may provide to you under a separate written agreement), and
+completely replaces any prior agreements between you and the Company in relation
+to the SDK.
+
+12.3 You agree that if the Company does not exercise or enforce any legal right
+or remedy which is contained in the License Agreement (or which the Company has
+the benefit of under any applicable law), this will not be taken to be a formal
+waiver of the Company's rights and that those rights or remedies will still be
+available to the Company.
+
+12.4 If any court of law, having the jurisdiction to decide on this matter,
+rules that any provision of the License Agreement is invalid, then that
+provision will be removed from the License Agreement without affecting the rest
+of the License Agreement. The remaining provisions of the License Agreement will
+continue to be valid and enforceable.
+
+12.5 You acknowledge and agree that each member of the group of companies of
+which the Company is the parent shall be third party beneficiaries to the
+License Agreement and that such other companies shall be entitled to directly
+enforce, and rely upon, any provision of the License Agreement that confers a
+benefit on them or rights in favor of them. Other than this, no other person or
+company shall be third party beneficiaries to the License Agreement.
+
+12.6 EXPORT RESTRICTIONS. THE SDK IS SUBJECT TO UNITED STATES EXPORT LAWS AND
+REGULATIONS. YOU MUST COMPLY WITH ALL DOMESTIC AND INTERNATIONAL EXPORT LAWS AND
+REGULATIONS THAT APPLY TO THE SDK. THESE LAWS INCLUDE RESTRICTIONS ON
+DESTINATIONS, END USERS, AND END USE.
+
+12.7 The rights granted in the License Agreement may not be assigned or
+transferred by either you or the Company without the prior written approval of
+the other party, provided that the Company may assign this License Agreement
+upon notice to you in connection with an acquisition, merger, sale of assets, or
+similar corporate change in control for the Company or the Intellectual Property
+Rights in the SDK.
+
+12.8 The License Agreement, and any dispute relating to or arising out of this
+License Agreement, shall be governed by the laws of the State of California
+without regard to its conflict of laws provisions. You and the Company agree to
+submit to the exclusive jurisdiction of the courts located within the county of
+Los Angeles, California to resolve any dispute or legal matter arising from the
+License Agreement. Notwithstanding this, you agree that the Company shall be
+allowed to apply for injunctive remedies, or any equivalent type of urgent legal
+relief, in any forum or jurisdiction.
diff --git a/languages/js/sdk-internal/README.md b/languages/js/sdk-internal/README.md
new file mode 100644
index 000000000..9391aa071
--- /dev/null
+++ b/languages/js/sdk-internal/README.md
@@ -0,0 +1,3 @@
+# @bitwarden/sdk-internal
+
+**Note:** This is only for internal use. Bitwarden will not provide any support for this package.
diff --git a/languages/js/sdk-internal/package.json b/languages/js/sdk-internal/package.json
index 4ce87a3c1..51cfa577c 100644
--- a/languages/js/sdk-internal/package.json
+++ b/languages/js/sdk-internal/package.json
@@ -1,6 +1,7 @@
 {
   "name": "@bitwarden/sdk-internal",
   "version": "0.1.0",
+  "license": "SEE LICENSE IN LICENSE",
   "files": [
     "bitwarden_wasm_internal_bg.js",
     "bitwarden_wasm_internal_bg.wasm",

From 5dd990954004e4e0e2c04553f632a1d1d6c02cd4 Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 4 Oct 2024 14:24:14 +0200
Subject: [PATCH 6/7] Ensure the built files are added to published (#1114)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 .github/workflows/publish-internal.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/publish-internal.yml b/.github/workflows/publish-internal.yml
index 6df0b844c..13f3a9d97 100644
--- a/.github/workflows/publish-internal.yml
+++ b/.github/workflows/publish-internal.yml
@@ -71,6 +71,7 @@ jobs:
           workflow_conclusion: success
           branch: ${{ inputs.release_type == 'Dry Run' && 'main' ||  github.ref_name }}
           artifacts: sdk-internal
+          path: languages/js/sdk-internal
 
       - name: Set version
         run: |

From 16a8496bfb62d78c9692a44515f63e73248e7aab Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 4 Oct 2024 17:04:39 +0200
Subject: [PATCH 7/7] Publish node compatible sdk (#1115)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 🎟️ Tracking

<!-- Paste the link to the Jira or GitHub issue or otherwise describe /
point to where this change is coming from. -->

## 📔 Objective

<!-- Describe what the purpose of this PR is, for example what bug
you're fixing or new feature you're adding. -->

## ⏰ Reminders before review

- Contributor guidelines followed
- All formatters and local linters executed and passed
- Written new unit and / or integration tests where applicable
- Protected functional changes with optionality (feature flags)
- Used internationalization (i18n) for all UI strings
- CI builds passed
- Communicated to DevOps any deployment requirements
- Updated any necessary documentation (Confluence, contributing docs) or
informed the documentation
  team

## 🦮 Reviewer guidelines

<!-- Suggested interactions but feel free to use (or not) as you desire!
-->

- 👍 (`:+1:`) or similar for great changes
- 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info
- ❓ (`:question:`) for questions
- 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry
that's not quite a confirmed
  issue and could potentially benefit from discussion
- 🎨 (`:art:`) for suggestions / improvements
- ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or
concerns needing attention
- 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or
indications of technical debt
- ⛏ (`:pick:`) for minor or nitpick changes
---
 crates/bitwarden-wasm-internal/build.sh | 2 ++
 languages/js/sdk-internal/package.json  | 7 ++++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/crates/bitwarden-wasm-internal/build.sh b/crates/bitwarden-wasm-internal/build.sh
index b02ee1ea1..109037e89 100755
--- a/crates/bitwarden-wasm-internal/build.sh
+++ b/crates/bitwarden-wasm-internal/build.sh
@@ -6,10 +6,12 @@ if [ "$1" != "-r" ]; then
   # Dev
   cargo build -p bitwarden-wasm-internal --target wasm32-unknown-unknown
   wasm-bindgen --target bundler --out-dir languages/js/sdk-internal ./target/wasm32-unknown-unknown/debug/bitwarden_wasm_internal.wasm
+  wasm-bindgen --target nodejs --out-dir languages/js/sdk-internal/node ./target/wasm32-unknown-unknown/debug/bitwarden_wasm_internal.wasm
 else
   # Release
   cargo build -p bitwarden-wasm-internal --target wasm32-unknown-unknown --release
   wasm-bindgen --target bundler --out-dir languages/js/sdk-internal ./target/wasm32-unknown-unknown/release/bitwarden_wasm_internal.wasm
+  wasm-bindgen --target nodejs --out-dir languages/js/sdk-internal/node ./target/wasm32-unknown-unknown/release/bitwarden_wasm_internal.wasm
 fi
 
 # Format
diff --git a/languages/js/sdk-internal/package.json b/languages/js/sdk-internal/package.json
index 51cfa577c..29e5c5a54 100644
--- a/languages/js/sdk-internal/package.json
+++ b/languages/js/sdk-internal/package.json
@@ -9,8 +9,13 @@
     "bitwarden_wasm_internal_bg.wasm.js",
     "bitwarden_wasm_internal.d.ts",
     "bitwarden_wasm_internal.js",
-    "index.js"
+    "index.js",
+    "node/bitwarden_wasm_internal_bg.wasm",
+    "node/bitwarden_wasm_internal_bg.wasm.d.ts",
+    "node/bitwarden_wasm_internal.d.ts",
+    "node/bitwarden_wasm_internal.js"
   ],
+  "main": "node/bitwarden_wasm_internal.js",
   "module": "index.js",
   "types": "bitwarden_wasm_internal.d.ts",
   "scripts": {},