@jeongsu816/matrix-bot-sdk 0.0.0-stage → 0.8.1

package/lib/e2ee/RustEngine.js

@@ -0,0 +1,467 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RustEngine = exports.SYNC_LOCK_NAME = void 0;
+exports.extractUIA = extractUIA;
+exports.hasFailedUIA = hasFailedUIA;
+const matrix_sdk_crypto_nodejs_1 = require("@matrix-org/matrix-sdk-crypto-nodejs");
+const AsyncLock = require("async-lock");
+const Crypto_1 = require("../models/Crypto");
+const EncryptionEvent_1 = require("../models/events/EncryptionEvent");
+/**
+ * @internal
+ */
+exports.SYNC_LOCK_NAME = "sync";
+/**
+ * @internal
+ */
+class RustEngine {
+    constructor(machine, client) {
+        this.machine = machine;
+        this.client = client;
+        this.lock = new AsyncLock();
+    }
+    async run() {
+        await this.runOnly(); // run everything, but with syntactic sugar
+    }
+    async runOnly(...types) {
+        // Note: we should not be running this until it runs out, so cache the value into a variable
+        const requests = await this.machine.outgoingRequests();
+        for (const request of requests) {
+            if (types.length && !types.includes(request.type))
+                continue;
+            switch (request.type) {
+                case 0 /* RequestType.KeysUpload */:
+                    await this.processKeysUploadRequest(request);
+                    break;
+                case 1 /* RequestType.KeysQuery */:
+                    await this.processKeysQueryRequest(request);
+                    break;
+                case 2 /* RequestType.KeysClaim */:
+                    await this.processKeysClaimRequest(request);
+                    break;
+                case 3 /* RequestType.ToDevice */:
+                    await this.processToDeviceRequest(request);
+                    break;
+                case 5 /* RequestType.RoomMessage */:
+                    throw new Error("Bindings error: Sending room messages is not supported");
+                case 4 /* RequestType.SignatureUpload */:
+                    await this.processSignatureUploadRequest(request);
+                    break;
+                case 6 /* RequestType.KeysBackup */:
+                    await this.processKeysBackupRequest(request);
+                    break;
+                default:
+                    throw new Error("Bindings error: Unrecognized request type: " + request.type);
+            }
+        }
+    }
+    async addTrackedUsers(userIds) {
+        await this.lock.acquire(exports.SYNC_LOCK_NAME, async () => {
+            const uids = userIds.map(u => new matrix_sdk_crypto_nodejs_1.UserId(u));
+            await this.machine.updateTrackedUsers(uids);
+            const keysClaim = await this.machine.getMissingSessions(uids);
+            if (keysClaim) {
+                await this.processKeysClaimRequest(keysClaim);
+            }
+        });
+    }
+    async prepareEncrypt(roomId, roomInfo) {
+        // TODO: Handle pre-shared invite keys too
+        const members = (await this.client.getJoinedRoomMembers(roomId)).map(u => new matrix_sdk_crypto_nodejs_1.UserId(u));
+        let historyVis = 1 /* HistoryVisibility.Joined */;
+        switch (roomInfo.historyVisibility) {
+            case "world_readable":
+                historyVis = 3 /* HistoryVisibility.WorldReadable */;
+                break;
+            case "invited":
+                historyVis = 0 /* HistoryVisibility.Invited */;
+                break;
+            case "shared":
+                historyVis = 2 /* HistoryVisibility.Shared */;
+                break;
+            case "joined":
+            default:
+            // Default and other cases handled by assignment before switch
+        }
+        const encEv = new EncryptionEvent_1.EncryptionEvent({
+            type: "m.room.encryption",
+            content: roomInfo,
+        });
+        const settings = new matrix_sdk_crypto_nodejs_1.EncryptionSettings();
+        settings.algorithm = roomInfo.algorithm === Crypto_1.EncryptionAlgorithm.MegolmV1AesSha2
+            ? 1 /* RustEncryptionAlgorithm.MegolmV1AesSha2 */
+            : undefined;
+        settings.historyVisibility = historyVis;
+        settings.rotationPeriod = BigInt(encEv.rotationPeriodMs);
+        settings.rotationPeriodMessages = BigInt(encEv.rotationPeriodMessages);
+        await this.lock.acquire(exports.SYNC_LOCK_NAME, async () => {
+            await this.machine.updateTrackedUsers(members); // just in case we missed some
+            await this.runOnly(1 /* RequestType.KeysQuery */);
+            const keysClaim = await this.machine.getMissingSessions(members);
+            if (keysClaim) {
+                await this.processKeysClaimRequest(keysClaim);
+            }
+        });
+        await this.lock.acquire(roomId, async () => {
+            const requests = await this.machine.shareRoomKey(new matrix_sdk_crypto_nodejs_1.RoomId(roomId), members, settings);
+            for (const req of requests) {
+                await this.actuallyProcessToDeviceRequest(req.txnId, req.eventType, JSON.parse(req.body)["messages"]);
+            }
+        });
+    }
+    async processKeysClaimRequest(request) {
+        const resp = await this.client.doRequest("POST", "/_matrix/client/v3/keys/claim", null, JSON.parse(request.body));
+        await this.machine.markRequestAsSent(request.id, request.type, JSON.stringify(resp));
+    }
+    async processKeysUploadRequest(request) {
+        const body = JSON.parse(request.body);
+        // delete body["one_time_keys"]; // use this to test MSC3983
+        const resp = await this.client.doRequest("POST", "/_matrix/client/v3/keys/upload", null, body);
+        await this.machine.markRequestAsSent(request.id, request.type, JSON.stringify(resp));
+    }
+    async processKeysQueryRequest(request) {
+        const resp = await this.client.doRequest("POST", "/_matrix/client/v3/keys/query", null, JSON.parse(request.body));
+        await this.machine.markRequestAsSent(request.id, request.type, JSON.stringify(resp));
+    }
+    async processToDeviceRequest(request) {
+        const req = JSON.parse(request.body);
+        await this.actuallyProcessToDeviceRequest(req.txn_id, req.event_type, req.messages);
+    }
+    async actuallyProcessToDeviceRequest(id, type, messages) {
+        const resp = await this.client.sendToDevices(type, messages);
+        await this.machine.markRequestAsSent(id, 3 /* RequestType.ToDevice */, JSON.stringify(resp));
+    }
+    async processSignatureUploadRequest(request) {
+        // The binding serializes the body as { "signed_keys": {<user_id>: {...}} },
+        // but POST /keys/signatures/upload expects that inner map directly (its
+        // top-level keys are user IDs). Unwrap the `signed_keys` envelope —
+        // otherwise the server rejects "signed_keys" as a user id (M_INVALID_PARAM)
+        // and the failure response breaks markRequestAsSent's deserialization.
+        const parsed = JSON.parse(request.body);
+        const httpBody = parsed && parsed.signed_keys ? parsed.signed_keys : parsed;
+        const resp = await this.client.doRequest("POST", "/_matrix/client/v3/keys/signatures/upload", null, httpBody);
+        // The bootstrap-driven signature request carries no request id; only
+        // mark queue-driven requests as sent.
+        if (request.id) {
+            await this.machine.markRequestAsSent(request.id, request.type, JSON.stringify(resp));
+        }
+    }
+    async processKeysBackupRequest(request) {
+        // Backing up room keys requires an existing server-side backup version
+        // to write into. The version is created out-of-band by
+        // `enableKeyBackup()`; here we just write the encrypted room keys to the
+        // active version. If no backup version exists the server returns
+        // M_NOT_FOUND — we surface that rather than silently dropping keys.
+        const version = await this.activeKeyBackupVersion();
+        if (!version) {
+            throw new Error("Bindings error: a KeysBackup request was produced but no server-side backup version " +
+                "exists. Call enableKeyBackup() to create/activate one before backing up room keys.");
+        }
+        const resp = await this.client.doRequest("PUT", "/_matrix/client/v3/room_keys/keys", { version }, JSON.parse(request.body));
+        await this.machine.markRequestAsSent(request.id, request.type, JSON.stringify(resp));
+    }
+    /** The currently-active server-side key-backup version, or null if none. */
+    async activeKeyBackupVersion() {
+        try {
+            const resp = await this.client.doRequest("GET", "/_matrix/client/v3/room_keys/version");
+            return resp?.version ?? null;
+        }
+        catch (e) {
+            // M_NOT_FOUND => no backup exists yet.
+            return null;
+        }
+    }
+    /**
+     * Publish a cross-signing identity for this account so the device becomes
+     * cross-signed (self-verified). This is the piece matrix-bot-sdk historically
+     * could not drive: `runOnly` threw on the request types it produces, and the
+     * cross-signing public-key upload is not an outgoing-queue request at all —
+     * it is returned by `OlmMachine.bootstrapCrossSigning()`.
+     *
+     * Flow:
+     *   1. `machine.bootstrapCrossSigning(reset)` creates the identity locally
+     *      and (on matrix-sdk-crypto-nodejs >= 0.5.0) returns the three upload
+     *      requests.
+     *   2. Upload device keys (`uploadKeysReq`) if present.
+     *   3. POST the cross-signing public keys to `/keys/device_signing/upload`,
+     *      completing the User-Interactive Auth challenge via `uiaCallback`.
+     *   4. POST the self-signature to `/keys/signatures/upload`.
+     *
+     * On bindings <= 0.4.0, `bootstrapCrossSigning` returns `void` and gives no
+     * way to retrieve the upload requests, so this method throws a clear,
+     * actionable error (callers are expected to treat that as non-fatal).
+     *
+     * @param uiaCallback Resolves the UIA challenge for the device-signing upload.
+     * @param reset Pass `false` (default) to reuse an existing local identity;
+     *              the same request can be re-sent across UIA stages. `true`
+     *              wipes any existing identity and resets device trust.
+     */
+    async bootstrapCrossSigning(uiaCallback, reset = false) {
+        await this.lock.acquire(exports.SYNC_LOCK_NAME, async () => {
+            const requests = (await this.machine.bootstrapCrossSigning(reset));
+            if (!requests || typeof requests.uploadSigningKeysReq !== "string") {
+                throw new Error("Bindings error: OlmMachine.bootstrapCrossSigning() did not return the upload requests. " +
+                    "Cross-signing cannot be published with this version of " +
+                    "@matrix-org/matrix-sdk-crypto-nodejs (need >= 0.5.0).");
+            }
+            // 1. Device keys (may be absent if already uploaded).
+            if (requests.uploadKeysReq) {
+                await this.processKeysUploadRequest(requests.uploadKeysReq);
+            }
+            // 2. Cross-signing public keys -> /keys/device_signing/upload (UIA).
+            await this.uploadDeviceSigningKeys(JSON.parse(requests.uploadSigningKeysReq), uiaCallback);
+            // 3. Self-signature upload. This one IS a normal SignatureUpload
+            //    request, so reuse the same code path (and mark it as sent).
+            await this.processSignatureUploadRequest(requests.uploadSignaturesReq);
+        });
+    }
+    /**
+     * POST the cross-signing public keys to `/keys/device_signing/upload`,
+     * driving the UIA challenge. The first attempt is sent without `auth`; the
+     * server replies 401 with the available flows, which `uiaCallback` resolves
+     * (typically an `m.login.password` stage). We then resubmit the SAME key
+     * body with the returned `auth` dict (including the `session` id).
+     */
+    async uploadDeviceSigningKeys(keysBody, uiaCallback) {
+        const path = "/_matrix/client/v3/keys/device_signing/upload";
+        try {
+            await this.client.doRequest("POST", path, null, keysBody);
+            return; // Server accepted without UIA (rare, but allowed).
+        }
+        catch (e) {
+            const uia = extractUIA(e);
+            if (!uia)
+                throw e; // Not a UIA challenge — a real error.
+            // Resolve the challenge, then resubmit the same keys with `auth`.
+            // Loop in case the server stacks multiple stages.
+            let session = uia.session;
+            for (let attempt = 0; attempt < 10; attempt++) {
+                const auth = await uiaCallback(uia);
+                if (!auth) {
+                    throw new Error("UIA for /keys/device_signing/upload was not satisfied (callback returned null)");
+                }
+                if (session && auth.session === undefined)
+                    auth.session = session;
+                try {
+                    await this.client.doRequest("POST", path, null, { ...keysBody, auth });
+                    return; // Success.
+                }
+                catch (e2) {
+                    const next = extractUIA(e2);
+                    if (!next)
+                        throw e2; // Either success-shaped error or a hard failure.
+                    // 401 again: if it carries completed stages we progress; otherwise
+                    // the credentials were rejected. Surface the error body either way.
+                    if (next.session)
+                        session = next.session;
+                    if (hasFailedUIA(e2)) {
+                        throw new Error("UIA for /keys/device_signing/upload failed: credentials rejected");
+                    }
+                    // Continue to next stage.
+                }
+            }
+            throw new Error("UIA for /keys/device_signing/upload did not complete after multiple attempts");
+        }
+    }
+    /**
+     * Create + activate a server-side key-backup version derived from the given
+     * recovery/backup public key, and tell the OlmMachine to use it. After this,
+     * `KeysBackup` requests produced by `backupRoomKeys()` will have a version to
+     * write into (handled in `processKeysBackupRequest`).
+     *
+     * NOTE: key backup is secondary to cross-signing. This wires the version
+     * plumbing; the caller is responsible for generating the backup key and for
+     * calling `machine.enableBackupV1()` / `backupRoomKeys()`. It is intentionally
+     * conservative — see the adapter docs.
+     */
+    async enableKeyBackup(authData, algorithm = "m.megolm_backup.v1.curve25519-aes-sha2") {
+        const resp = await this.client.doRequest("POST", "/_matrix/client/v3/room_keys/version", null, { algorithm, auth_data: authData });
+        return resp.version;
+    }
+    /**
+     * Restore cross-signing private keys (and optionally the megolm backup decryption
+     * key) from Secure Secret Storage (4S/SSSS) into the local crypto store.
+     *
+     * This is the recovery path when the local crypto store has been lost: the
+     * cross-signing keys were previously uploaded encrypted to account data by
+     * `bootstrapSecretStorage*`, and this method fetches and decrypts them using
+     * the same passphrase. After a successful restore:
+     *
+     * - The OlmMachine has the master / self-signing / user-signing private keys.
+     * - The device re-signs itself, so it continues to appear verified without
+     *   needing UIA or a fresh cross-signing bootstrap.
+     * - If the megolm backup decryption key is in account data, it is also
+     *   restored so room-key backup requests work with the existing backup version.
+     *
+     * Requires `@matrix-org/matrix-sdk-crypto-nodejs >= 0.6.0` (for
+     * `importSecretsFromSecretStorage`). Throws if the passphrase does not match
+     * the SSSS key on the server, or if account data is missing.
+     *
+     * @param passphrase The same passphrase that was used to bootstrap 4S.
+     */
+    async restoreSecretsFromSecretStorage(passphrase) {
+        const machine4s = this.machine;
+        if (typeof machine4s.importSecretsFromSecretStorage !== "function") {
+            throw new Error("Bindings error: OlmMachine.importSecretsFromSecretStorage() is not available. " +
+                "Secret Storage restore requires @matrix-org/matrix-sdk-crypto-nodejs >= 0.6.0.");
+        }
+        // 1. Resolve the default SSSS key from account data.
+        const defaultKey = await this.client.getAccountData("m.secret_storage.default_key");
+        if (!defaultKey?.key) {
+            throw new Error("No default SSSS key found in account data (m.secret_storage.default_key missing or empty).");
+        }
+        const keyEventType = `m.secret_storage.key.${defaultKey.key}`;
+        const keyContent = await this.client.getAccountData(keyEventType);
+        if (!keyContent) {
+            throw new Error(`SSSS key descriptor not found in account data (${keyEventType} missing).`);
+        }
+        // 2. Reconstruct the SecretStorageKey from the passphrase + server metadata.
+        //    fromAccountData verifies the passphrase against the stored MAC; it throws
+        //    if the passphrase is wrong.
+        const ssssKey = matrix_sdk_crypto_nodejs_1.SecretStorageKey.fromAccountData(passphrase, keyEventType, JSON.stringify(keyContent));
+        // 3. Fetch the three encrypted cross-signing key blobs from account data.
+        const [masterRaw, selfSigningRaw, userSigningRaw] = await Promise.all([
+            this.client.getAccountData("m.cross_signing.master"),
+            this.client.getAccountData("m.cross_signing.self_signing"),
+            this.client.getAccountData("m.cross_signing.user_signing"),
+        ]);
+        if (!masterRaw || !selfSigningRaw || !userSigningRaw) {
+            throw new Error("One or more cross-signing key blobs are missing from account data. " +
+                "4S may not have been bootstrapped yet — run bootstrapSecretStorage first.");
+        }
+        // 4. Import: the binding decrypts each blob using ssssKey, imports the
+        //    private keys into the local OlmMachine, and returns a SignatureUpload
+        //    request to re-sign the current device with the self-signing key.
+        const items = new matrix_sdk_crypto_nodejs_1.SecretStorageItems({
+            masterKey: JSON.stringify(masterRaw),
+            selfSigningKey: JSON.stringify(selfSigningRaw),
+            userSigningKey: JSON.stringify(userSigningRaw),
+        });
+        const sigReq = await machine4s.importSecretsFromSecretStorage(ssssKey, items);
+        await this.processSignatureUploadRequest(sigReq);
+        // 5. Restore the megolm backup decryption key if present, so room-key
+        //    backup requests are directed to the existing backup version.
+        try {
+            const backupKeyRaw = await this.client.getAccountData("m.megolm_backup.v1");
+            if (backupKeyRaw) {
+                const decryptedBase64 = ssssKey.decrypt(JSON.stringify(backupKeyRaw), "m.megolm_backup.v1");
+                const decryptionKey = matrix_sdk_crypto_nodejs_1.BackupDecryptionKey.fromBase64(decryptedBase64);
+                const backupInfo = await this.activeKeyBackupVersion();
+                if (backupInfo) {
+                    await this.machine.enableBackupV1(decryptionKey.megolmV1PublicKey.publicKeyBase64, backupInfo);
+                    await this.machine.saveBackupDecryptionKey(decryptionKey, backupInfo);
+                }
+            }
+        }
+        catch (e) {
+            // Non-fatal: cross-signing keys are restored; only room-key backup is affected.
+        }
+    }
+    async bootstrapSecretStorage(ssssKey, opts = {}) {
+        const machine4s = this.machine;
+        if (typeof machine4s.exportSecretsForSecretStorage !== "function") {
+            throw new Error("Bindings error: OlmMachine.exportSecretsForSecretStorage() is not available. " +
+                "Secret Storage (4S) requires @matrix-org/matrix-sdk-crypto-nodejs >= 0.6.0.");
+        }
+        const { withKeyBackup = true, reset = false } = opts;
+        const userId = this.machine.userId.toString();
+        await this.putAccountData(userId, ssssKey.eventType(), JSON.parse(ssssKey.accountDataContent()));
+        await this.putAccountData(userId, "m.secret_storage.default_key", { key: ssssKey.keyId() });
+        const items = await machine4s.exportSecretsForSecretStorage(ssssKey);
+        await this.putAccountData(userId, "m.cross_signing.master", JSON.parse(items.masterKey));
+        await this.putAccountData(userId, "m.cross_signing.self_signing", JSON.parse(items.selfSigningKey));
+        await this.putAccountData(userId, "m.cross_signing.user_signing", JSON.parse(items.userSigningKey));
+        if (withKeyBackup) {
+            await this.bootstrapKeyBackupIntoSecretStorage(ssssKey, userId, reset);
+        }
+    }
+    async bootstrapSecretStorageFromPassphrase(passphrase, opts = {}) {
+        const ssssKey = matrix_sdk_crypto_nodejs_1.SecretStorageKey.createFromPassphrase(passphrase);
+        await this.bootstrapSecretStorage(ssssKey, opts);
+    }
+    async bootstrapSecretStorageFromKey(ssssKey, opts = {}) {
+        await this.bootstrapSecretStorage(ssssKey, opts);
+    }
+    async bootstrapKeyBackupIntoSecretStorage(ssssKey, userId, reset) {
+        const existingVersion = await this.activeKeyBackupVersion();
+        if (existingVersion && !reset) {
+            // Server has a backup. Check whether the local OlmMachine already knows about it.
+            const localKeys = await this.machine.getBackupKeys();
+            if (localKeys.backupVersion === existingVersion)
+                return; // In sync — nothing to do.
+            // Local store is out of sync (e.g. crypto-store wiped and bootstrap retried with
+            // a new SSSS key, or interrupted before saveBackupDecryptionKey). Try to reconnect
+            // by decrypting the existing backup key from account data using the current SSSS key.
+            try {
+                const backupKeyRaw = await this.client.getAccountData("m.megolm_backup.v1");
+                if (backupKeyRaw) {
+                    const decryptedBase64 = ssssKey.decrypt(JSON.stringify(backupKeyRaw), "m.megolm_backup.v1");
+                    const decryptionKey = matrix_sdk_crypto_nodejs_1.BackupDecryptionKey.fromBase64(decryptedBase64);
+                    await this.machine.enableBackupV1(decryptionKey.megolmV1PublicKey.publicKeyBase64, existingVersion);
+                    await this.machine.saveBackupDecryptionKey(decryptionKey, existingVersion);
+                    return;
+                }
+            }
+            catch {
+                // Account data is missing, encrypted with a different SSSS key, or corrupted.
+                // Fall through to create a new backup version under the current SSSS key.
+            }
+            // Could not reuse the existing backup — delete it and create a fresh one.
+            await this.client.doRequest("DELETE", `/_matrix/client/v3/room_keys/version/${existingVersion}`);
+        }
+        if (existingVersion && reset) {
+            await this.client.doRequest("DELETE", `/_matrix/client/v3/room_keys/version/${existingVersion}`);
+        }
+        const decryptionKey = matrix_sdk_crypto_nodejs_1.BackupDecryptionKey.createRandomKey();
+        const publicKey = decryptionKey.megolmV1PublicKey;
+        const authDataBase = { public_key: publicKey.publicKeyBase64 };
+        const canonicalBase = JSON.stringify(authDataBase, Object.keys(authDataBase).sort());
+        const sigs = await this.machine.sign(canonicalBase);
+        const authData = { ...authDataBase, signatures: JSON.parse(sigs.asJSON()) };
+        const version = await this.enableKeyBackup(authData, publicKey.algorithm);
+        await this.machine.enableBackupV1(publicKey.publicKeyBase64, version);
+        await this.machine.saveBackupDecryptionKey(decryptionKey, version);
+        const encryptedKey = ssssKey.encrypt(decryptionKey.toBase64(), "m.megolm_backup.v1");
+        await this.putAccountData(userId, "m.megolm_backup.v1", JSON.parse(encryptedKey));
+    }
+    async putAccountData(userId, eventType, content) {
+        await this.client.doRequest("PUT", `/_matrix/client/v3/user/${encodeURIComponent(userId)}/account_data/${encodeURIComponent(eventType)}`, null, content);
+    }
+}
+exports.RustEngine = RustEngine;
+/**
+ * Extract a UIA challenge from a thrown matrix-bot-sdk request error. A 401 UIA
+ * body has `flows`/`session` and no `errcode`, so matrix-bot-sdk throws the raw
+ * response object (`throw response`) rather than a `MatrixError`. We also accept
+ * a `MatrixError`-like shape defensively. Returns null if it is not a UIA 401.
+ *
+ * @internal
+ */
+function extractUIA(err) {
+    if (!err || typeof err !== "object")
+        return null;
+    const e = err;
+    const status = e.statusCode;
+    const body = (e.body ?? err);
+    if (status !== undefined && status !== 401)
+        return null;
+    if (!body || !Array.isArray(body.flows))
+        return null;
+    return { flows: body.flows, params: body.params, session: body.session };
+}
+/**
+ * A second 401 whose body reports `completed: []` (or an unchanged stage list)
+ * after we supplied credentials indicates the credentials were rejected, not a
+ * stacked second stage. We treat the presence of an `error`/`errcode` in the
+ * body as a hard rejection.
+ *
+ * @internal
+ */
+function hasFailedUIA(err) {
+    if (!err || typeof err !== "object")
+        return false;
+    const e = err;
+    const body = e.body ?? err;
+    return Boolean(body && body.errcode);
+}
+//# sourceMappingURL=RustEngine.js.map

package/lib/e2ee/RustEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RustEngine.js","sourceRoot":"","sources":["../../src/e2ee/RustEngine.ts"],"names":[],"mappings":";;;AA4iBA,gCAQC;AAUD,oCAKC;AAnkBD,mFAiB8C;AAY9C,wCAAwC;AAIxC,6CAAuD;AACvD,sEAAmE;AAEnE;;GAEG;AACU,QAAA,cAAc,GAAG,MAAM,CAAC;AAsCrC;;GAEG;AACH,MAAa,UAAU;IAGnB,YAAmC,OAAmB,EAAU,MAAoB;QAAjD,YAAO,GAAP,OAAO,CAAY;QAAU,WAAM,GAAN,MAAM,CAAc;QAFpE,SAAI,GAAG,IAAI,SAAS,EAAE,CAAC;IAGvC,CAAC;IAEM,KAAK,CAAC,GAAG;QACZ,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,2CAA2C;IACrE,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAG,KAAoB;QACzC,4FAA4F;QAC5F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5D,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnB;oBACI,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;oBAC7C,MAAM;gBACV;oBACI,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;oBAC5C,MAAM;gBACV;oBACI,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;oBAC5C,MAAM;gBACV;oBACI,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAA0B,CAAC,CAAC;oBAC9D,MAAM;gBACV;oBACI,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC9E;oBACI,MAAM,IAAI,CAAC,6BAA6B,CAAC,OAAiC,CAAC,CAAC;oBAC5E,MAAM;gBACV;oBACI,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAA4B,CAAC,CAAC;oBAClE,MAAM;gBACV;oBACI,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YACtF,CAAC;QACL,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,OAAiB;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAc,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,iCAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAE5C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgC;QACxE,0CAA0C;QAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,iCAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzF,IAAI,UAAU,mCAA2B,CAAC;QAC1C,QAAQ,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YACjC,KAAK,gBAAgB;gBACjB,UAAU,0CAAkC,CAAC;gBAC7C,MAAM;YACV,KAAK,SAAS;gBACV,UAAU,oCAA4B,CAAC;gBACvC,MAAM;YACV,KAAK,QAAQ;gBACT,UAAU,mCAA2B,CAAC;gBACtC,MAAM;YACV,KAAK,QAAQ,CAAC;YACd,QAAQ;YACR,8DAA8D;QAClE,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,iCAAe,CAAC;YAC9B,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,6CAAkB,EAAE,CAAC;QAC1C,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,KAAK,4BAAmB,CAAC,eAAe;YAC3E,CAAC;YACD,CAAC,CAAC,SAAS,CAAC;QAChB,QAAQ,CAAC,iBAAiB,GAAG,UAAU,CAAC;QACxC,QAAQ,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACzD,QAAQ,CAAC,sBAAsB,GAAG,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEvE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAc,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;YAC9E,MAAM,IAAI,CAAC,OAAO,+BAAuB,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,iCAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACxF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1G,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,OAAyB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,+BAA+B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClH,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,OAA0B;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,4DAA4D;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,gCAAgC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/F,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,OAAyB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,+BAA+B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClH,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,OAAwB;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,EAAU,EAAE,IAAY,EAAE,QAAiD;QACpH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,gCAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,OAA+B;QACvE,4EAA4E;QAC5E,wEAAwE;QACxE,oEAAoE;QACpE,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CACpC,MAAM,EAAE,2CAA2C,EAAE,IAAI,EAAE,QAAQ,CACtE,CAAC;QACF,qEAAqE;QACrE,sCAAsC;QACtC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACzF,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,OAA0B;QAC7D,uEAAuE;QACvE,uDAAuD;QACvD,yEAAyE;QACzE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACX,sFAAsF;gBACtF,oFAAoF,CACvF,CAAC;QACN,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CACpC,KAAK,EAAE,mCAAmC,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CACpF,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,sBAAsB;QAChC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;YACxF,OAAO,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,uCAAuC;YACvC,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACI,KAAK,CAAC,qBAAqB,CAAC,WAAwB,EAAE,KAAK,GAAG,KAAK;QACtE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAc,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CACL,CAAC;YAE7D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACX,yFAAyF;oBACzF,yDAAyD;oBACzD,uDAAuD,CAC1D,CAAC;YACN,CAAC;YAED,sDAAsD;YACtD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAChE,CAAC;YAED,qEAAqE;YACrE,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,CAAC;YAE3F,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,uBAAuB,CAAC,QAAiC,EAAE,WAAwB;QAC7F,MAAM,IAAI,GAAG,+CAA+C,CAAC;QAC7D,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1D,OAAO,CAAC,mDAAmD;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG;gBAAE,MAAM,CAAC,CAAC,CAAC,sCAAsC;YAEzD,kEAAkE;YAClE,kDAAkD;YAClD,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC1B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACR,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;gBACtG,CAAC;gBACD,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;oBAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;gBAClE,IAAI,CAAC;oBACD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvE,OAAO,CAAC,WAAW;gBACvB,CAAC;gBAAC,OAAO,EAAE,EAAE,CAAC;oBACV,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC5B,IAAI,CAAC,IAAI;wBAAE,MAAM,EAAE,CAAC,CAAC,iDAAiD;oBACtE,mEAAmE;oBACnE,oEAAoE;oBACpE,IAAI,IAAI,CAAC,OAAO;wBAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBACzC,IAAI,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;oBACxF,CAAC;oBACD,0BAA0B;gBAC9B,CAAC;YACL,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACpG,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,eAAe,CAAC,QAAiC,EAAE,SAAS,GAAG,wCAAwC;QAChH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CACpC,MAAM,EAAE,sCAAsC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAC3F,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,KAAK,CAAC,+BAA+B,CAAC,UAAkB;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,OAA2B,CAAC;QACnD,IAAI,OAAO,SAAS,CAAC,8BAA8B,KAAK,UAAU,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACX,gFAAgF;gBAChF,gFAAgF,CACnF,CAAC;QACN,CAAC;QAED,qDAAqD;QACrD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAkB,8BAA8B,CAAC,CAAC;QACrG,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,YAAY,GAAG,wBAAwB,UAAU,CAAC,GAAG,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAS,YAAY,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,kDAAkD,YAAY,YAAY,CAAC,CAAC;QAChG,CAAC;QAED,6EAA6E;QAC7E,+EAA+E;QAC/E,iCAAiC;QACjC,MAAM,OAAO,GAAG,2CAAgB,CAAC,eAAe,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvG,0EAA0E;QAC1E,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAS,wBAAwB,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,cAAc,CAAS,8BAA8B,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAS,8BAA8B,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,qEAAqE;gBACjF,2EAA2E,CAAC,CAAC;QACrF,CAAC;QAED,uEAAuE;QACvE,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,KAAK,GAAG,IAAI,6CAAkB,CAAC;YACjC,SAAS,EAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YACzC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAC9C,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,8BAA8B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;QAEjD,sEAAsE;QACtE,kEAAkE;QAClE,IAAI,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAS,oBAAoB,CAAC,CAAC;YACpF,IAAI,YAAY,EAAE,CAAC;gBACf,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBACxF,MAAM,aAAa,GAAG,8CAAmB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;gBAC1E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACvD,IAAI,UAAU,EAAE,CAAC;oBACb,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,iBAAiB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;oBAC/F,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBAC1E,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,gFAAgF;QACpF,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,OAAwE,EAAE,OAAqD,EAAE;QAClK,MAAM,SAAS,GAAG,IAAI,CAAC,OAA2B,CAAC;QACnD,IAAI,OAAO,SAAS,CAAC,6BAA6B,KAAK,UAAU,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,+EAA+E;gBAC3F,6EAA6E,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5F,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,EAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5F,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,8BAA8B,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACpG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,8BAA8B,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAEpG,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,oCAAoC,CAAC,UAAkB,EAAE,OAAqD,EAAE;QACzH,MAAM,OAAO,GAAG,2CAAgB,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,6BAA6B,CAAC,OAAwE,EAAE,OAAqD,EAAE;QACxK,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,mCAAmC,CAC7C,OAAwE,EACxE,MAAc,EACd,KAAc;QAEd,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5D,IAAI,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,kFAAkF;YAClF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACrD,IAAI,SAAS,CAAC,aAAa,KAAK,eAAe;gBAAE,OAAO,CAAC,2BAA2B;YAEpF,iFAAiF;YACjF,mFAAmF;YACnF,sFAAsF;YACtF,IAAI,CAAC;gBACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAS,oBAAoB,CAAC,CAAC;gBACpF,IAAI,YAAY,EAAE,CAAC;oBACf,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBAC5F,MAAM,aAAa,GAAG,8CAAmB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;oBACtE,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,iBAAiB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;oBACpG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;oBAC3E,OAAO;gBACX,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,8EAA8E;gBAC9E,0EAA0E;YAC9E,CAAC;YACD,0EAA0E;YAC1E,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,wCAAwC,eAAe,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,eAAe,IAAI,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,wCAAwC,eAAe,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,aAAa,GAAG,8CAAmB,CAAC,eAAe,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,aAAa,CAAC,iBAAiB,CAAC;QAClD,MAAM,YAAY,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAE5E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAEnE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAgC;QAC5F,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CACvB,KAAK,EACL,2BAA2B,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACrG,IAAI,EAAE,OAAO,CAChB,CAAC;IACN,CAAC;CACJ;AAldD,gCAkdC;AAED;;;;;;;GAOG;AACH,SAAgB,UAAU,CAAC,GAAY;IACnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8C,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAA4E,CAAC;IACxG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACvG,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,GAAY;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAK,GAA4C,CAAC;IACrE,OAAO,OAAO,CAAC,IAAI,IAAK,IAA6B,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC"}

package/lib/e2ee/decorators.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Flags a MatrixClient function as needing end-to-end encryption enabled.
+ * @category Encryption
+ */
+export declare function requiresCrypto(): (target: any, propertyKey: string, descriptor: PropertyDescriptor) => void;
+/**
+ * Flags a CryptoClient function as needing the CryptoClient to be ready.
+ * @category Encryption
+ */
+export declare function requiresReady(): (target: any, propertyKey: string, descriptor: PropertyDescriptor) => void;

package/lib/e2ee/decorators.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requiresCrypto = requiresCrypto;
+exports.requiresReady = requiresReady;
+/**
+ * Flags a MatrixClient function as needing end-to-end encryption enabled.
+ * @category Encryption
+ */
+function requiresCrypto() {
+    return function (target, propertyKey, descriptor) {
+        const originalMethod = descriptor.value;
+        descriptor.value = function (...args) {
+            const client = this; // eslint-disable-line @typescript-eslint/no-this-alias
+            if (!client.crypto) {
+                throw new Error("End-to-end encryption is not enabled");
+            }
+            return originalMethod.apply(this, args);
+        };
+    };
+}
+/**
+ * Flags a CryptoClient function as needing the CryptoClient to be ready.
+ * @category Encryption
+ */
+function requiresReady() {
+    return function (target, propertyKey, descriptor) {
+        const originalMethod = descriptor.value;
+        descriptor.value = function (...args) {
+            const crypto = this; // eslint-disable-line @typescript-eslint/no-this-alias
+            if (!crypto.isReady) {
+                throw new Error("End-to-end encryption has not initialized");
+            }
+            return originalMethod.apply(this, args);
+        };
+    };
+}
+//# sourceMappingURL=decorators.js.map

package/lib/e2ee/decorators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorators.js","sourceRoot":"","sources":["../../src/e2ee/decorators.ts"],"names":[],"mappings":";;AAOA,wCAYC;AAMD,sCAYC;AAlCD;;;GAGG;AACH,SAAgB,cAAc;IAC1B,OAAO,UAAS,MAAW,EAAE,WAAmB,EAAE,UAA8B;QAC5E,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC;QACxC,UAAU,CAAC,KAAK,GAAG,UAAS,GAAG,IAAW;YACtC,MAAM,MAAM,GAAiB,IAAI,CAAC,CAAC,uDAAuD;YAC1F,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC5D,CAAC;YAED,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC;IACN,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa;IACzB,OAAO,UAAS,MAAW,EAAE,WAAmB,EAAE,UAA8B;QAC5E,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC;QACxC,UAAU,CAAC,KAAK,GAAG,UAAS,GAAG,IAAW;YACtC,MAAM,MAAM,GAAiB,IAAI,CAAC,CAAC,uDAAuD;YAC1F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACjE,CAAC;YAED,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC;IACN,CAAC,CAAC;AACN,CAAC"}

package/lib/helpers/MatrixEntity.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Represents a Matrix entity
+ * @category Utilities
+ */
+export declare class MatrixEntity {
+    private fullId;
+    private entityLocalpart;
+    private entityDomain;
+    /**
+     * Creates a new Matrix entity
+     * @param {string} fullId The full ID of the entity
+     */
+    constructor(fullId: string);
+    /**
+     * The localpart for the entity
+     */
+    get localpart(): string;
+    /**
+     * The domain for the entity
+     */
+    get domain(): string;
+    toString(): string;
+}
+/**
+ * Represents a Matrix user ID
+ * @category Utilities
+ */
+export declare class UserID extends MatrixEntity {
+    constructor(userId: string);
+}
+/**
+ * Represents a Matrix room alias
+ * @category Utilities
+ */
+export declare class RoomAlias extends MatrixEntity {
+    constructor(alias: string);
+}

package/lib/helpers/MatrixEntity.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoomAlias = exports.UserID = exports.MatrixEntity = void 0;
+/**
+ * Represents a Matrix entity
+ * @category Utilities
+ */
+class MatrixEntity {
+    /**
+     * Creates a new Matrix entity
+     * @param {string} fullId The full ID of the entity
+     */
+    constructor(fullId) {
+        this.fullId = fullId;
+        if (!fullId)
+            throw new Error("No entity ID provided");
+        if (fullId.length < 2)
+            throw new Error("ID too short");
+        const parts = fullId.split(/:/g);
+        this.entityLocalpart = parts[0].substring(1);
+        this.entityDomain = parts.splice(1).join(':');
+    }
+    /**
+     * The localpart for the entity
+     */
+    get localpart() {
+        return this.entityLocalpart;
+    }
+    /**
+     * The domain for the entity
+     */
+    get domain() {
+        return this.entityDomain;
+    }
+    // override
+    toString() {
+        return this.fullId;
+    }
+}
+exports.MatrixEntity = MatrixEntity;
+/**
+ * Represents a Matrix user ID
+ * @category Utilities
+ */
+class UserID extends MatrixEntity {
+    constructor(userId) {
+        super(userId);
+        if (!userId.startsWith("@")) {
+            throw new Error("Not a valid user ID");
+        }
+    }
+}
+exports.UserID = UserID;
+/**
+ * Represents a Matrix room alias
+ * @category Utilities
+ */
+class RoomAlias extends MatrixEntity {
+    constructor(alias) {
+        super(alias);
+        if (!alias.startsWith("#")) {
+            throw new Error("Not a valid room alias");
+        }
+    }
+}
+exports.RoomAlias = RoomAlias;
+//# sourceMappingURL=MatrixEntity.js.map

package/lib/helpers/MatrixEntity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MatrixEntity.js","sourceRoot":"","sources":["../../src/helpers/MatrixEntity.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,MAAa,YAAY;IAIrB;;;OAGG;IACH,YAAoB,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QAC9B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAW,MAAM;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,WAAW;IACJ,QAAQ;QACX,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;CACJ;AAlCD,oCAkCC;AAED;;;GAGG;AACH,MAAa,MAAO,SAAQ,YAAY;IACpC,YAAY,MAAc;QACtB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;CACJ;AAPD,wBAOC;AAED;;;GAGG;AACH,MAAa,SAAU,SAAQ,YAAY;IACvC,YAAY,KAAa;QACrB,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;CACJ;AAPD,8BAOC"}