Km/data envelope follow up

.github/CODEOWNERS

@@ -15,9 +15,13 @@
 
 # Team-owned crates
 crates/bitwarden-auth/** @bitwarden/team-auth-dev @bitwarden/team-platform-dev
-crates/bitwarden-crypto/** @bitwarden/team-key-management-dev @bitwarden/team-platform-dev @bitwarden/dept-architecture 
+crates/bitwarden-crypto/** @bitwarden/team-key-management-dev @bitwarden/team-sdk-sme
 crates/bitwarden-vault/** @bitwarden/team-vault-dev @bitwarden/team-sdk-sme
 
+# KM Co-owned files
+crates/bitwarden-core/src/key_management/** @bitwarden/team-key-management-dev @bitwarden/team-sdk-sme
+crates/bitwarden-wasm-internal/src/pure_crypto.rs @bitwarden/team-key-management-dev @bitwarden/team-sdk-sme
+
 # BW CLI
 crates/bw/src/admin_console/** @bitwarden/team-platform-dev
 crates/bw/src/auth/** @bitwarden/team-auth-dev @bitwarden/team-platform-dev

.github/workflows/build-wasm-internal.yml

@@ -23,11 +23,11 @@ jobs:
     strategy:
       matrix:
         license_type:
-          - artifact_name: "wasm-internal"
+          - artifact_name: "sdk-internal"
             build_flags: ""
             npm_folder: "npm"
             readable: "open source license"
-          - artifact_name: "commercial-wasm-internal"
+          - artifact_name: "commercial-sdk-internal"
             build_flags: "-b"
             npm_folder: "bitwarden_license/npm"
             readable: "commercial license"

.github/workflows/publish-wasm-internal.yml

@@ -16,10 +16,6 @@ on:
         description: "Release Version"
         required: false
 
-defaults:
-  run:
-    working-directory: crates/bitwarden-wasm-internal/npm
-
 jobs:
   setup:
     name: Setup
@@ -57,13 +53,23 @@ jobs:
           fi
 
   npm:
-    name: Publish NPM
+    name: Publish NPM - ${{matrix.license_type.readable}}
     environment: NPM
     runs-on: ubuntu-24.04
     needs: setup
     permissions:
       contents: read
       id-token: write
+    strategy:
+      matrix:
+        license_type:
+          - artifact_name: "sdk-internal"
+            npm_folder: "npm"
+            readable: "open source license"
+          - artifact_name: "commercial-sdk-internal"
+            npm_folder: "bitwarden_license/npm"
+            readable: "commercial license"
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -80,15 +86,17 @@ jobs:
           workflow: build-wasm-internal.yml
           workflow_conclusion: success
           branch: ${{ inputs.release_type == 'Dry Run' && 'main' ||  github.ref_name }}
-          artifacts: sdk-internal
-          path: crates/bitwarden-wasm-internal/npm
+          artifacts: ${{ matrix.license_type.artifact_name }}
+          path: crates/bitwarden-wasm-internal/${{ matrix.license_type.npm_folder }}
 
       - name: Set version
+        working-directory: crates/bitwarden-wasm-internal/${{ matrix.license_type.npm_folder }}
         run: |
           npm version --no-git-tag-version $VERSION
         env:
           VERSION: ${{needs.setup.outputs.release-version}}
 
       - name: Publish NPM
         if: ${{ inputs.release_type != 'Dry Run' }}
+        working-directory: crates/bitwarden-wasm-internal/${{ matrix.license_type.npm_folder }}
         run: npm publish --access public --tag latest

.github/workflows/review-code.yml

@@ -84,16 +84,18 @@ jobs:
 
       - name: Review with Claude Code
         if: steps.check_changes.outputs.vault_team_changes == 'true'
-        uses: anthropics/claude-code-action@a5528eec7426a4f0c9c1ac96018daa53ebd05bc4 # v1.0.7
+        uses: anthropics/claude-code-action@ac1a3207f3f00b4a37e2f3a6f0935733c7c64651 # v1.0.11
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           track_progress: true
+          use_sticky_comment: true
           prompt: |
             REPO: ${{ github.repository }}
             PR NUMBER: ${{ github.event.pull_request.number }}
             TITLE: ${{ github.event.pull_request.title }}
             BODY: ${{ github.event.pull_request.body }}
             AUTHOR: ${{ github.event.pull_request.user.login }}
+            COMMIT: ${{ github.event.pull_request.head.sha }}
 
             Please review this pull request with a focus on:
             - Code quality and best practices
@@ -103,7 +105,20 @@ jobs:
 
             Note: The PR branch is already checked out in the current working directory.
 
-            Provide detailed feedback using inline comments for specific issues.
+            Provide a comprehensive review including:
+            - Summary of changes since last review
+            - Critical issues found (be thorough)
+            - Suggested improvements (be thorough)
+            - Good practices observed (be concise - list only the most notable items without elaboration)
+            - Action items for the author
+            - Leverage collapsible <details> sections where appropriate for lengthy explanations or code snippets to enhance human readability
+
+            When reviewing subsequent commits:
+            - Track status of previously identified issues (fixed/unfixed/reopened)
+            - Identify NEW problems introduced since last review
+            - Note if fixes introduced new issues
+
+            IMPORTANT: Be comprehensive about issues and improvements. For good practices, be brief - just note what was done well without explaining why or praising excessively.
 
           claude_args: |
-            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
+            --allowedTools "mcp__github_comment__update_claude_comment,mcp__github_inline_comment__create_inline_comment,Bash(gh pr diff:*),Bash(gh pr view:*)"

Cargo.toml

@@ -40,7 +40,6 @@ bitwarden-send = { path = "crates/bitwarden-send", version = "=1.0.0" }
 bitwarden-sm = { path = "bitwarden_license/bitwarden-sm", version = "=1.0.0" }
 bitwarden-ssh = { path = "crates/bitwarden-ssh", version = "=1.0.0" }
 bitwarden-state = { path = "crates/bitwarden-state", version = "=1.0.0" }
-bitwarden-state-migrations = { path = "crates/bitwarden-state-migrations", version = "=1.0.0" }
 bitwarden-test = { path = "crates/bitwarden-test", version = "=1.0.0" }
 bitwarden-threading = { path = "crates/bitwarden-threading", version = "=1.0.0" }
 bitwarden-uniffi-error = { path = "crates/bitwarden-uniffi-error", version = "=1.0.0" }

crates/bitwarden-api-api/.openapi-generator/FILES

@@ -118,6 +118,7 @@ src/models/bulk_delete_response_model.rs
 src/models/bulk_delete_response_model_list_response_model.rs
 src/models/bulk_deny_admin_auth_request_request_model.rs
 src/models/change_plan_frequency_request.rs
+src/models/checkout_billing_address_request.rs
 src/models/cipher.rs
 src/models/cipher_attachment_model.rs
 src/models/cipher_bulk_archive_request_model.rs
@@ -241,8 +242,10 @@ src/models/key_regeneration_request_model.rs
 src/models/keys_request_model.rs
 src/models/keys_response_model.rs
 src/models/license_type.rs
+src/models/master_password_authentication_data_request_model.rs
 src/models/master_password_policy_response_model.rs
-src/models/master_password_unlock_data_model.rs
+src/models/master_password_unlock_and_authentication_data_model.rs
+src/models/master_password_unlock_data_request_model.rs
 src/models/master_password_unlock_kdf_response_model.rs
 src/models/master_password_unlock_response_model.rs
 src/models/member_access_detail_report_response_model.rs
@@ -276,6 +279,7 @@ src/models/organization_integration_configuration_request_model.rs
 src/models/organization_integration_configuration_response_model.rs
 src/models/organization_integration_request_model.rs
 src/models/organization_integration_response_model.rs
+src/models/organization_integration_status.rs
 src/models/organization_keys_request_model.rs
 src/models/organization_keys_response_model.rs
 src/models/organization_license.rs
@@ -295,7 +299,10 @@ src/models/organization_sponsorship_sync_response_model.rs
 src/models/organization_sso_request_model.rs
 src/models/organization_sso_response_model.rs
 src/models/organization_status_type.rs
+src/models/organization_subscription_plan_change_request.rs
+src/models/organization_subscription_purchase_request.rs
 src/models/organization_subscription_response_model.rs
+src/models/organization_subscription_update_request.rs
 src/models/organization_subscription_update_request_model.rs
 src/models/organization_update_request_model.rs
 src/models/organization_upgrade_request_model.rs
@@ -322,13 +329,14 @@ src/models/organization_user_user_details_response_model.rs
 src/models/organization_user_user_details_response_model_list_response_model.rs
 src/models/organization_user_user_mini_details_response_model.rs
 src/models/organization_user_user_mini_details_response_model_list_response_model.rs
-src/models/organization_verify_bank_request_model.rs
 src/models/organization_verify_delete_recover_request_model.rs
 src/models/other_device_keys_update_request_model.rs
 src/models/password_health_report_application.rs
 src/models/password_health_report_application_model.rs
 src/models/password_hint_request_model.rs
 src/models/password_manager_plan_features_response_model.rs
+src/models/password_manager_purchase_selections.rs
+src/models/password_manager_update_selections.rs
 src/models/password_request_model.rs
 src/models/payment_method_type.rs
 src/models/payment_request_model.rs
@@ -340,6 +348,7 @@ src/models/pending_organization_auth_request_response_model.rs
 src/models/pending_organization_auth_request_response_model_list_response_model.rs
 src/models/people_access_policies_request_model.rs
 src/models/permissions.rs
+src/models/plan_cadence_type.rs
 src/models/plan_response_model.rs
 src/models/plan_response_model_list_response_model.rs
 src/models/plan_sponsorship_type.rs
@@ -355,10 +364,12 @@ src/models/pre_validate_sponsorship_response_model.rs
 src/models/premium_cloud_hosted_subscription_request.rs
 src/models/preview_individual_invoice_request_body.rs
 src/models/preview_organization_invoice_request_body.rs
-src/models/preview_tax_amount_for_organization_trial_request_body.rs
+src/models/preview_organization_subscription_plan_change_tax_request.rs
+src/models/preview_organization_subscription_purchase_tax_request.rs
+src/models/preview_organization_subscription_update_tax_request.rs
+src/models/preview_premium_subscription_purchase_tax_request.rs
 src/models/priority.rs
 src/models/product_tier_type.rs
-src/models/product_type.rs
 src/models/profile_organization_response_model.rs
 src/models/profile_organization_response_model_list_response_model.rs
 src/models/profile_provider_organization_response_model.rs
@@ -413,6 +424,7 @@ src/models/push_update_request_model.rs
 src/models/request_sm_access_request_model.rs
 src/models/reset_password_with_org_id_request_model.rs
 src/models/response_data.rs
+src/models/restart_subscription_request.rs
 src/models/revoke_access_tokens_request.rs
 src/models/rotate_user_account_keys_and_data_request_model.rs
 src/models/saml2_binding_type.rs
@@ -429,9 +441,11 @@ src/models/secret_verification_request_model.rs
 src/models/secret_with_projects_inner_project.rs
 src/models/secret_with_projects_list_response_model.rs
 src/models/secrets_manager_plan_features_response_model.rs
+src/models/secrets_manager_purchase_selections.rs
 src/models/secrets_manager_request_model.rs
 src/models/secrets_manager_subscribe_request_model.rs
 src/models/secrets_manager_subscription_update_request_model.rs
+src/models/secrets_manager_update_selections.rs
 src/models/secrets_sync_response_model.rs
 src/models/secrets_with_projects_inner_secret.rs
 src/models/secure_note_type.rs
@@ -482,7 +496,6 @@ src/models/sync_response_model.rs
 src/models/tax_id_request.rs
 src/models/tax_info_response_model.rs
 src/models/tax_info_update_request_model.rs
-src/models/tax_information_dto.rs
 src/models/tax_information_request_body.rs
 src/models/tax_information_request_model.rs
 src/models/tokenized_payment_method_request.rs