@openclaw/matrix 2026.5.20-beta.2 → 2026.5.22

package/node_modules/matrix-js-sdk/lib/rust-crypto/rust-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust-crypto.js","names":["anotherjson","RustSdkCryptoJs","KnownMembership","MatrixEventEvent","DecryptionError","LogSpan","Method","RoomEncryptor","OutgoingRequestProcessor","KeyClaimManager","MapWithDefault","AllDevicesIsolationMode","CrossSigningKey","CryptoEvent","DecryptionFailureCode","DecryptionKeyDoesNotMatchError","deriveRecoveryKeyFromPassphrase","DeviceIsolationModeKind","DeviceVerificationStatus","encodeRecoveryKey","EventShieldColour","EventShieldReason","ImportRoomKeyStage","UserVerificationStatus","deviceKeysToDeviceMap","rustDeviceToJsDevice","SECRET_STORAGE_ALGORITHM_V1_AES","CrossSigningIdentity","secretStorageContainsCrossSigningKeys","isVerificationEvent","RustVerificationRequest","verificationMethodIdentifierToMethod","EventType","MsgType","TypedEventEmitter","decryptionKeyMatchesKeyBackupInfo","RustBackupManager","TypedReEmitter","secureRandomString","ClientStoppedError","decodeBase64","encodeBase64","OutgoingRequestsManager","PerSessionKeyBackupDownloader","DehydratedDeviceManager","VerificationMethod","keyFromAuthData","getHttpUriForMxc","ALL_VERIFICATION_METHODS","Sas","ScanQrCode","ShowQrCode","Reciprocate","MAX_INVITE_ACCEPTANCE_MS_FOR_KEY_BUNDLE","RustCrypto","constructor","logger","olmMachine","http","userId","_deviceId","secretStorage","cryptoCallbacks","enableEncryptedStateEvents","arguments","length","undefined","_defineProperty","outgoingRequestProcessor","outgoingRequestsManager","keyClaimManager","backupManager","perSessionBackupDownloader","dehydratedDeviceManager","eventDecryptor","EventDecryptor","reemitter","reEmit","KeyBackupStatus","KeyBackupSessionsRemaining","KeyBackupFailed","KeyBackupDecryptionKeyCached","DehydratedDeviceCreated","DehydratedDeviceUploaded","RehydrationStarted","RehydrationProgress","RehydrationCompleted","RehydrationError","DehydrationKeyCached","DehydratedDeviceRotationError","crossSigningIdentity","checkKeyBackupAndEnable","getOlmMachineOrThrow","stopped","globalErrorOnUnknownDevices","_v","stop","close","encryptEvent","event","_room","_this","_asyncToGenerator","roomId","getRoomId","encryptor","roomEncryptors","Error","concat","globalBlacklistUnverifiedDevices","deviceIsolationMode","decryptEvent","_this2","attemptEventDecryption","getBackupDecryptor","backupInfo","privKey","_this3","Uint8Array","algorithm","backupDecryptionKey","BackupDecryptionKey","fromBase64","createBackupDecryptor","importBackedUpRoomKeys","keys","backupVersion","opts","_this4","maybeAcceptKeyBundle","inviter","_this5","info","request","queryKeysForUsers","UserId","makeOutgoingRequest","bundleData","getReceivedRoomKeyBundleData","RoomId","url","baseUrl","encryptedBundle","bundleUrl","URL","encryptedBundleBlob","authedRequest","Get","pathname","search","rawResponseBody","prefix","size","arrayBuffer","err","warn","receiveRoomKeyBundle","clearRoomPendingKeyBundle","markRoomAsPendingKeyBundle","_this6","storeRoomPendingKeyBundle","getVersion","versions","getVersions","matrix_sdk_crypto","git_sha","vodozemac","setDeviceIsolationMode","isolationMode","isEncryptionEnabledInRoom","_this7","roomSettings","getRoomSettings","Boolean","isStateEncryptionEnabledInRoom","_this8","encryptStateEvents","getOwnDeviceKeys","_this9","identityKeys","ed25519","toBase64","curve25519","prepareToEncrypt","room","prepareForEncryption","forceDiscardSession","_this$roomEncryptors$","exportRoomKeys","_this0","raw","JSON","parse","exportRoomKeysAsJson","_this1","importRoomKeys","_this10","importRoomKeysAsJson","_this11","userHasCrossSigningKeys","_arguments","_this12","downloadUncached","rustTrackedUsers","trackedUsers","rustTrackedUser","u","toString","clone","userIdentity","getIdentity","free","_keyResult$master_key","keyResult","downloadDeviceList","Set","master_keys","Object","values","getUserDeviceInfo","userIds","_arguments2","_this13","deviceMapByUserId","Map","forEach","rustUserId","add","untrackedUsers","has","set","getUserDevices","queryResult","entries","device_keys","_ref","_ref2","_slicedToArray","deviceKeys","_this14","userDevices","deviceArray","devices","map","device","deviceId","d","_this15","queryBody","user","Post","getTrustCrossSignedDevices","_trustCrossSignedDevices","setTrustCrossSignedDevices","val","setDeviceVerified","_arguments3","_this16","verified","getDevice","DeviceId","setLocalTrust","LocalTrust","Verified","Unset","crossSignDevice","_this17","outgoingRequest","verify","getDeviceVerificationStatus","_this18","signedByOwner","isCrossSignedByOwner","crossSigningVerified","isCrossSigningTrusted","localVerified","isLocallyTrusted","trustCrossSignedDevices","getUserVerificationStatus","_this19","isVerified","wasVerified","wasPreviouslyVerified","needsUserApproval","OtherUserIdentity","identityNeedsUserApproval","pinCurrentUserIdentity","_this20","OwnUserIdentity","pinCurrentMasterKey","withdrawVerificationRequirement","_this21","withdrawVerification","isCrossSigningReady","_this22","_yield$_this22$getCro","getCrossSigningStatus","privateKeysInSecretStorage","privateKeysCachedLocally","hasKeysInCache","masterKey","selfSigningKey","userSigningKey","identity","getOwnIdentity","getCrossSigningKeyId","_arguments4","_this23","type","Master","crossSigningStatus","privateKeysOnDevice","hasMaster","hasUserSigning","hasSelfSigning","key","SelfSigning","UserSigning","parsedKey","bootstrapCrossSigning","_this24","isSecretStorageReady","_this25","getSecretStorageStatus","ready","_this26","secretsToCheck","keyBackupEnabled","getActiveBackupVersion","push","defaultKeyId","getDefaultKeyId","result","secretStorageKeyValidityMap","secretName","record","isStored","secretStored","bootstrapSecretStorage","_arguments5","_this27","_ref3","createSecretStorageKey","setupNewSecretStorage","setupNewKeyBackup","isNewSecretStorageKeyNeeded","secretStorageHasAESKey","recoveryKey","addSecretStorageKeyToSecretStorage","crossSigningPrivateKeys","exportCrossSigningKeys","hasPrivateKeys","self_signing_key","store","saveBackupKeyToStorage","resetKeyBackup","_this28","keyBackupInfo","getServerBackupInfo","version","backupKeys","getBackupKeys","decryptionKey","backupKeyBase64","secretStorageKey","_this29","_secretStorageKey$key","_secretStorageKey$key2","_this29$cryptoCallbac","_this29$cryptoCallbac2","secretStorageKeyObject","addKey","passphrase","keyInfo","name","privateKey","setDefaultKeyId","keyId","cacheSecretStorageKey","call","_this30","secretStorageKeyTuple","getKey","_secretStorageKeyTupl","_this31","publicKeysOnDevice","createRecoveryKeyFromPassphrase","password","_this32","salt","RECOVERY_KEY_DERIVATION_ITERATIONS","iterations","encodedPrivateKey","globalThis","crypto","getRandomValues","getEncryptionInfoForEvent","_this33","getVerificationRequestsToDeviceInProgress","requests","getVerificationRequests","filter","isCancelled","makeVerificationRequest","findVerificationRequestDMInProgress","find","_request$roomId","requestVerificationDM","_this34","methods","_supportedVerificationMethods","method","verCont","verificationRequestContent","verContObj","verificationEventContent","stringify","eventId","sendVerificationRequestContent","requestVerification","EventId","_this35","txId","_yield$_this35$http$a","Put","encodeURIComponent","event_id","setSupportedVerificationMethods","requestOwnUserVerification","_this36","_yield$userIdentity$r","_yield$userIdentity$r2","requestDeviceVerification","_this37","_device$requestVerifi","_device$requestVerifi2","getSessionBackupPrivateKey","_this38","storeSessionBackupPrivateKey","_this39","base64Key","saveBackupDecryptionKey","loadSessionBackupPrivateKeyFromSecretStorage","_this40","backupKey","get","getActiveSessionBackupVersion","_this41","getKeyBackupInfo","_this42","isKeyBackupTrusted","_this43","_this44","deleteKeyBackupVersion","_this45","_this46","setupKeyBackup","o","signObject","pushSecretToVerifiedDevices","disableKeyStorage","_this47","error","deleteSecretStorage","delete","obj","_this48","sigs","signatures","unsigned","userSignatures","canonalizedJson","sign","asJSON","_objectSpread","fromEntries","restoreKeyBackupWithPassphrase","_this49","auth_data","restoreKeyBackup","_this50","decodedDecryptionKey","requestKeyBackupVersion","backupDecryptor","_opts$progressCallbac","progressCallback","stage","Fetch","isDehydrationSupported","_this51","isSupported","startDehydration","_arguments6","_this52","start","importSecretsBundle","secrets","_this53","secretsBundle","SecretsBundle","from_json","exportSecretsBundle","_this54","to_json","encryptToDeviceMessages","eventType","payload","_this55","uniqueUsers","_ref4","ensureSessionsForUsers","Array","from","batch","RoomMessageEncrypted","Promise","all","_ref6","_ref5","encryptedPayload","encryptToDeviceEvent","_x","apply","resetEncryption","authUploadDeviceSigningKeys","_this56","debug","deleteAllKeyBackupVersions","setupNewCrossSigning","_this57","shareRoomHistoryWithUser","_this58","hasDownloadedAllRoomKeys","downloadLatestRoomKeyBackup","setHasDownloadedAllRoomKeys","bundle","buildRoomKeyBundle","uploadResponse","uploadContent","encryptedData","req","shareRoomKeyBundleData","content_uri","mediaEncryptionInfo","CollectStrategy","identityBasedStrategy","receiveSyncChanges","_ref7","_this59","events","_ref7$oneTimeKeysCoun","oneTimeKeysCounts","unusedFallbackKeys","_ref7$devices","DeviceLists","preprocessToDeviceMessages","_this60","processed","received","_loop","parsedMessage","message","rawEvent","KeyVerificationRequest","sender","transactionId","content","transaction_id","onIncomingKeyVerificationRequest","ProcessedToDeviceEventType","Decrypted","_encryptionInfo$sende","encryptionInfo","senderDevice","senderCurve25519KeyBase64","senderCurve25519Key","senderVerified","isSenderVerified","isRoomKeyBundleMessage","room_id","pendingDetails","getPendingKeyBundleDetailsForRoom","Date","now","inviteAcceptedAtMillis","toISOString","inviterId","catch","PlainText","UnableToDecrypt","Invalid","processKeyCounts","_this61","mapOneTimeKeysCount","setUnusedFallbackKeys","processDeviceLists","deviceLists","_this62","_deviceLists$changed","_deviceLists$left","changed","left","onCryptoEvent","_this63","config","getContent","settings","RoomSettings","EncryptionAlgorithm","MegolmV1AesSha2","sessionRotationPeriodMs","rotation_period_ms","sessionRotationPeriodMessages","rotation_period_msgs","setRoomSettings","e","existingEncryptor","getChild","onSyncCompleted","syncState","doProcessOutgoingRequests","markAllTrackedUsersAsDirty","_this64","getVerificationRequest","emit","VerificationRequestReceived","onRoomMembership","member","oldMembership","Join","membership","enc","onRoomStateEvent","_state","_prevEvent","getType","RoomMember","getStateKey","onRoomKeysUpdated","_this65","onRoomKeyUpdated","maybeUploadKey","_this66","sessionId","senderKey","pendingList","getEventsPendingRoomKey","getId","_loop2","ev","attemptDecryption","isRetry","_e","onRoomKeysWithheld","withheld","_this67","session","onUserIdentityUpdated","_this68","newVerification","UserTrustStatusChanged","KeysChanged","onDevicesUpdated","_this69","WillUpdateDevices","DevicesUpdated","handleSecretReceived","value","_this70","handleBackupSecretReceived","checkSecrets","_this71","pendingValues","getSecretsFromInbox","deleteSecretsFromInbox","onLiveEventFromSync","_this72","isState","getUnsigned","processEvent","_ref8","evt","onKeyVerificationEvent","_x2","isDecryptionFailure","isEncrypted","TIMEOUT_DELAY","timeoutId","setTimeout","off","onDecrypted","decryptedEvent","clearTimeout","on","_this73","senderId","getSender","isRoomVerificationRequest","RoomMessage","msgtype","receiveVerificationEvent","state_key","origin_server_ts","getTs","_this74","_this75","_this76","addEventToPendingList","trustRequirement","kind","TrustRequirement","Untrusted","OnlySignedDevicesIsolationMode","CrossSignedOrLegacy","_res$forwarder","res","decryptRoomEvent","stringifyEvent","DecryptionSettings","removeEventFromPendingList","clearEvent","claimedEd25519Key","senderClaimedEd25519Key","keyForwardedBy","forwarder","MegolmDecryptionError","onMegolmDecryptionError","UNKNOWN_ERROR","serverBackupInfo","getWireContent","errorDetails","sender_key","session_id","code","DecryptionErrorCode","MissingRoomKey","UnknownMessageIndex","onDecryptionKeyMissingError","getMembershipAtEvent","Invite","HISTORICAL_MESSAGE_USER_NOT_JOINED","deviceCreationTimeMs","HISTORICAL_MESSAGE_NO_KEY_BACKUP","isKeyBackupDownloadConfigured","HISTORICAL_MESSAGE_BACKUP_UNCONFIGURED","HISTORICAL_MESSAGE_WORKING_BACKUP","maybe_withheld","failureCode","MEGOLM_KEY_WITHHELD_FOR_UNVERIFIED_DEVICE","MEGOLM_KEY_WITHHELD","MEGOLM_UNKNOWN_INBOUND_SESSION_ID","OLM_UNKNOWN_MESSAGE_INDEX","SenderIdentityVerificationViolation","SENDER_IDENTITY_PREVIOUSLY_VERIFIED","UnknownSenderDevice","UNKNOWN_SENDER_DEVICE","UnsignedSenderDevice","UNSIGNED_SENDER_DEVICE","description","_this77","getClearContent","status","shieldColour","NONE","shieldReason","getRoomEventEncryptionInfo","rustEncryptionInfoToJsEncryptionInfo","roomPendingEvents","eventsPendingKey","sessionPendingEvents","getOrCreate","getWireType","shieldState","color","ShieldColor","Grey","GREY","None","RED","ShieldStateCode","AuthenticityNotGuaranteed","AUTHENTICITY_NOT_GUARANTEED","UnknownDevice","UNKNOWN_DEVICE","UnsignedDevice","UNSIGNED_DEVICE","UnverifiedIdentity","UNVERIFIED_IDENTITY","VerificationViolation","VERIFICATION_VIOLATION","MismatchedSender","MISMATCHED_SENDER","UNKNOWN"],"sources":["../../src/rust-crypto/rust-crypto.ts"],"sourcesContent":["/*\nCopyright 2022-2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport anotherjson from \"another-json\";\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport type { IMegolmSessionData } from \"../@types/crypto.ts\";\nimport { KnownMembership } from \"../@types/membership.ts\";\nimport { type IDeviceLists, type IToDeviceEvent, type ReceivedToDeviceMessage } from \"../sync-accumulator.ts\";\nimport type { ToDeviceBatch, ToDevicePayload } from \"../models/ToDeviceMessage.ts\";\nimport { type MatrixEvent, MatrixEventEvent } from \"../models/event.ts\";\nimport { type Room } from \"../models/room.ts\";\nimport { type RoomMember } from \"../models/room-member.ts\";\nimport {\n    type BackupDecryptor,\n    type CryptoBackend,\n    DecryptionError,\n    type EventDecryptionResult,\n    type OnSyncCompletedData,\n} from \"../common-crypto/CryptoBackend.ts\";\nimport { type Logger, LogSpan } from \"../logger.ts\";\nimport { type IHttpOpts, type MatrixHttpApi, Method } from \"../http-api/index.ts\";\nimport { RoomEncryptor } from \"./RoomEncryptor.ts\";\nimport { OutgoingRequestProcessor } from \"./OutgoingRequestProcessor.ts\";\nimport { KeyClaimManager } from \"./KeyClaimManager.ts\";\nimport { MapWithDefault } from \"../utils.ts\";\nimport {\n    AllDevicesIsolationMode,\n    type BackupTrustInfo,\n    type BootstrapCrossSigningOpts,\n    type CreateSecretStorageOpts,\n    CrossSigningKey,\n    type CrossSigningKeyInfo,\n    type CrossSigningStatus,\n    type CryptoApi,\n    type CryptoCallbacks,\n    CryptoEvent,\n    type CryptoEventHandlerMap,\n    DecryptionFailureCode,\n    DecryptionKeyDoesNotMatchError,\n    deriveRecoveryKeyFromPassphrase,\n    type DeviceIsolationMode,\n    DeviceIsolationModeKind,\n    DeviceVerificationStatus,\n    encodeRecoveryKey,\n    type EventEncryptionInfo,\n    EventShieldColour,\n    EventShieldReason,\n    type GeneratedSecretStorageKey,\n    type ImportRoomKeysOpts,\n    ImportRoomKeyStage,\n    type KeyBackupCheck,\n    type KeyBackupInfo,\n    type KeyBackupRestoreOpts,\n    type KeyBackupRestoreResult,\n    type OwnDeviceKeys,\n    type SecretStorageStatus,\n    type StartDehydrationOpts,\n    UserVerificationStatus,\n    type VerificationRequest,\n} from \"../crypto-api/index.ts\";\nimport { deviceKeysToDeviceMap, rustDeviceToJsDevice } from \"./device-converter.ts\";\nimport { type IDownloadKeyResult, type IQueryKeysRequest } from \"../client.ts\";\nimport { type Device, type DeviceMap } from \"../models/device.ts\";\nimport {\n    SECRET_STORAGE_ALGORITHM_V1_AES,\n    type SecretStorageKey,\n    type ServerSideSecretStorage,\n} from \"../secret-storage.ts\";\nimport { CrossSigningIdentity } from \"./CrossSigningIdentity.ts\";\nimport { secretStorageContainsCrossSigningKeys } from \"./secret-storage.ts\";\nimport { isVerificationEvent, RustVerificationRequest, verificationMethodIdentifierToMethod } from \"./verification.ts\";\nimport { EventType, MsgType } from \"../@types/event.ts\";\nimport { TypedEventEmitter } from \"../models/typed-event-emitter.ts\";\nimport { decryptionKeyMatchesKeyBackupInfo, RustBackupManager } from \"./backup.ts\";\nimport { TypedReEmitter } from \"../ReEmitter.ts\";\nimport { secureRandomString } from \"../randomstring.ts\";\nimport { ClientStoppedError } from \"../errors.ts\";\nimport { type ISignatures } from \"../@types/signed.ts\";\nimport { decodeBase64, encodeBase64 } from \"../base64.ts\";\nimport { OutgoingRequestsManager } from \"./OutgoingRequestsManager.ts\";\nimport { PerSessionKeyBackupDownloader } from \"./PerSessionKeyBackupDownloader.ts\";\nimport { DehydratedDeviceManager } from \"./DehydratedDeviceManager.ts\";\nimport { VerificationMethod } from \"../types.ts\";\nimport { keyFromAuthData } from \"../common-crypto/key-passphrase.ts\";\nimport { type UIAuthCallback } from \"../interactive-auth.ts\";\nimport { getHttpUriForMxc } from \"../content-repo.ts\";\nimport { type RoomState } from \"../matrix.ts\";\n\nconst ALL_VERIFICATION_METHODS = [\n    VerificationMethod.Sas,\n    VerificationMethod.ScanQrCode,\n    VerificationMethod.ShowQrCode,\n    VerificationMethod.Reciprocate,\n];\n\ninterface ISignableObject {\n    signatures?: ISignatures;\n    unsigned?: object;\n}\n\n/** The maximum time, in milliseconds, since we accepted an invite, that we should accept a key bundle. */\nexport const MAX_INVITE_ACCEPTANCE_MS_FOR_KEY_BUNDLE = 24 * 60 * 60 * 1000; // 24 hours\n\n/**\n * An implementation of {@link CryptoBackend} using the Rust matrix-sdk-crypto.\n *\n * @internal\n */\nexport class RustCrypto extends TypedEventEmitter<RustCryptoEvents, CryptoEventHandlerMap> implements CryptoBackend {\n    /**\n     * The number of iterations to use when deriving a recovery key from a passphrase.\n     */\n    private readonly RECOVERY_KEY_DERIVATION_ITERATIONS = 500000;\n\n    private _trustCrossSignedDevices = true;\n    private deviceIsolationMode: DeviceIsolationMode = new AllDevicesIsolationMode(false);\n\n    /** whether {@link stop} has been called */\n    private stopped = false;\n\n    /** mapping of roomId → encryptor class */\n    private roomEncryptors: Record<string, RoomEncryptor> = {};\n\n    private eventDecryptor: EventDecryptor;\n    private keyClaimManager: KeyClaimManager;\n    private outgoingRequestProcessor: OutgoingRequestProcessor;\n    private crossSigningIdentity: CrossSigningIdentity;\n    private readonly backupManager: RustBackupManager;\n    private outgoingRequestsManager: OutgoingRequestsManager;\n    private readonly perSessionBackupDownloader: PerSessionKeyBackupDownloader;\n    private readonly dehydratedDeviceManager: DehydratedDeviceManager;\n    private readonly reemitter = new TypedReEmitter<RustCryptoEvents, CryptoEventHandlerMap>(this);\n\n    public constructor(\n        private readonly logger: Logger,\n\n        /** The `OlmMachine` from the underlying rust crypto sdk. */\n        private readonly olmMachine: RustSdkCryptoJs.OlmMachine,\n\n        /**\n         * Low-level HTTP interface: used to make outgoing requests required by the rust SDK.\n         *\n         * We expect it to set the access token, etc.\n         */\n        private readonly http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n\n        /** The local user's User ID. */\n        private readonly userId: string,\n\n        /** The local user's Device ID. */\n        _deviceId: string,\n\n        /** Interface to server-side secret storage */\n        private readonly secretStorage: ServerSideSecretStorage,\n\n        /** Crypto callbacks provided by the application */\n        private readonly cryptoCallbacks: CryptoCallbacks,\n\n        /** Enable support for encrypted state events under MSC4362. */\n        private readonly enableEncryptedStateEvents: boolean = false,\n    ) {\n        super();\n        this.outgoingRequestProcessor = new OutgoingRequestProcessor(logger, olmMachine, http);\n        this.outgoingRequestsManager = new OutgoingRequestsManager(\n            this.logger,\n            olmMachine,\n            this.outgoingRequestProcessor,\n        );\n\n        this.keyClaimManager = new KeyClaimManager(olmMachine, this.outgoingRequestProcessor);\n\n        this.backupManager = new RustBackupManager(logger, olmMachine, http, this.outgoingRequestProcessor);\n        this.perSessionBackupDownloader = new PerSessionKeyBackupDownloader(\n            this.logger,\n            this.olmMachine,\n            this.http,\n            this.backupManager,\n        );\n        this.dehydratedDeviceManager = new DehydratedDeviceManager(\n            this.logger,\n            olmMachine,\n            http,\n            this.outgoingRequestProcessor,\n            secretStorage,\n        );\n        this.eventDecryptor = new EventDecryptor(this.logger, olmMachine, this.perSessionBackupDownloader);\n\n        // re-emit the events emitted by managers\n        this.reemitter.reEmit(this.backupManager, [\n            CryptoEvent.KeyBackupStatus,\n            CryptoEvent.KeyBackupSessionsRemaining,\n            CryptoEvent.KeyBackupFailed,\n            CryptoEvent.KeyBackupDecryptionKeyCached,\n        ]);\n        this.reemitter.reEmit(this.dehydratedDeviceManager, [\n            CryptoEvent.DehydratedDeviceCreated,\n            CryptoEvent.DehydratedDeviceUploaded,\n            CryptoEvent.RehydrationStarted,\n            CryptoEvent.RehydrationProgress,\n            CryptoEvent.RehydrationCompleted,\n            CryptoEvent.RehydrationError,\n            CryptoEvent.DehydrationKeyCached,\n            CryptoEvent.DehydratedDeviceRotationError,\n        ]);\n\n        this.crossSigningIdentity = new CrossSigningIdentity(\n            logger,\n            olmMachine,\n            this.outgoingRequestProcessor,\n            secretStorage,\n        );\n\n        // Check and start in background the key backup connection\n        this.checkKeyBackupAndEnable();\n    }\n\n    /**\n     * Return the OlmMachine only if {@link RustCrypto#stop} has not been called.\n     *\n     * This allows us to better handle race conditions where the client is stopped before or during a crypto API call.\n     *\n     * @throws ClientStoppedError if {@link RustCrypto#stop} has been called.\n     */\n    private getOlmMachineOrThrow(): RustSdkCryptoJs.OlmMachine {\n        if (this.stopped) {\n            throw new ClientStoppedError();\n        }\n        return this.olmMachine;\n    }\n\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n    //\n    // CryptoBackend implementation\n    //\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n    public set globalErrorOnUnknownDevices(_v: boolean) {\n        // Not implemented for rust crypto.\n    }\n\n    public get globalErrorOnUnknownDevices(): boolean {\n        // Not implemented for rust crypto.\n        return false;\n    }\n\n    public stop(): void {\n        // stop() may be called multiple times, but attempting to close() the OlmMachine twice\n        // will cause an error.\n        if (this.stopped) {\n            return;\n        }\n        this.stopped = true;\n\n        this.keyClaimManager.stop();\n        this.backupManager.stop();\n        this.outgoingRequestsManager.stop();\n        this.perSessionBackupDownloader.stop();\n        this.dehydratedDeviceManager.stop();\n\n        // make sure we close() the OlmMachine; doing so means that all the Rust objects will be\n        // cleaned up; in particular, the indexeddb connections will be closed, which means they\n        // can then be deleted.\n        this.olmMachine.close();\n    }\n\n    public async encryptEvent(event: MatrixEvent, _room: Room): Promise<void> {\n        const roomId = event.getRoomId()!;\n        const encryptor = this.roomEncryptors[roomId];\n\n        if (!encryptor) {\n            throw new Error(`Cannot encrypt event in unconfigured room ${roomId}`);\n        }\n\n        await encryptor.encryptEvent(event, this.globalBlacklistUnverifiedDevices, this.deviceIsolationMode);\n    }\n\n    public async decryptEvent(event: MatrixEvent): Promise<EventDecryptionResult> {\n        const roomId = event.getRoomId();\n        if (!roomId) {\n            // presumably, a to-device message. These are normally decrypted in preprocessToDeviceMessages\n            // so the fact it has come back here suggests that decryption failed.\n            //\n            // once we drop support for the libolm crypto implementation, we can stop passing to-device messages\n            // through decryptEvent and hence get rid of this case.\n            throw new Error(\"to-device event was not decrypted in preprocessToDeviceMessages\");\n        }\n        return await this.eventDecryptor.attemptEventDecryption(event, this.deviceIsolationMode);\n    }\n\n    /**\n     * Implementation of {@link CryptoBackend#getBackupDecryptor}.\n     */\n    public async getBackupDecryptor(backupInfo: KeyBackupInfo, privKey: Uint8Array): Promise<BackupDecryptor> {\n        if (!(privKey instanceof Uint8Array)) {\n            throw new Error(`getBackupDecryptor: expects Uint8Array`);\n        }\n\n        if (backupInfo.algorithm != \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            throw new Error(`getBackupDecryptor: Unsupported algorithm ${backupInfo.algorithm}`);\n        }\n\n        const backupDecryptionKey = RustSdkCryptoJs.BackupDecryptionKey.fromBase64(encodeBase64(privKey));\n        if (!decryptionKeyMatchesKeyBackupInfo(backupDecryptionKey, backupInfo)) {\n            throw new Error(`getBackupDecryptor: key backup on server does not match the decryption key`);\n        }\n\n        return this.backupManager.createBackupDecryptor(backupDecryptionKey);\n    }\n\n    /**\n     * Implementation of {@link CryptoBackend#importBackedUpRoomKeys}.\n     */\n    public async importBackedUpRoomKeys(\n        keys: IMegolmSessionData[],\n        backupVersion: string,\n        opts?: ImportRoomKeysOpts,\n    ): Promise<void> {\n        return await this.backupManager.importBackedUpRoomKeys(keys, backupVersion, opts);\n    }\n\n    /**\n     * Implementation of {@link CryptoBackend.maybeAcceptKeyBundle}.\n     */\n    public async maybeAcceptKeyBundle(roomId: string, inviter: string): Promise<boolean> {\n        // TODO: retry this if it gets interrupted or it fails. (https://github.com/matrix-org/matrix-rust-sdk/issues/5112)\n        // TODO: do this in the background.\n\n        const logger = new LogSpan(this.logger, `maybeAcceptKeyBundle(${roomId}, ${inviter})`);\n\n        // Make sure we have an up-to-date idea of the inviter's cross-signing keys, so that we can check if the\n        // device that sent us the bundle data was correctly cross-signed.\n        //\n        // TODO: it would be nice to skip this step if we have an up-to-date copy of the inviter's cross-signing keys,\n        //   but we don't have an easy way to check that. Possibly the rust side could trigger a key request and then\n        //   block until it happens.\n        logger.info(`Checking inviter cross-signing keys`);\n        const request = this.olmMachine.queryKeysForUsers([new RustSdkCryptoJs.UserId(inviter)]);\n        await this.outgoingRequestProcessor.makeOutgoingRequest(request);\n\n        const bundleData = await this.olmMachine.getReceivedRoomKeyBundleData(\n            new RustSdkCryptoJs.RoomId(roomId),\n            new RustSdkCryptoJs.UserId(inviter),\n        );\n        if (!bundleData) {\n            logger.info(\"No key bundle found for user\");\n            return false;\n        }\n\n        logger.info(`Fetching key bundle ${bundleData.url}`);\n        const url = getHttpUriForMxc(\n            this.http.opts.baseUrl,\n            bundleData.url,\n            undefined,\n            undefined,\n            undefined,\n            /* allowDirectLinks */ false,\n            /* allowRedirects */ true,\n            /* useAuthentication */ true,\n        );\n        let encryptedBundle: Uint8Array;\n        try {\n            const bundleUrl = new URL(url);\n            const encryptedBundleBlob = await this.http.authedRequest<Blob>(\n                Method.Get,\n                bundleUrl.pathname + bundleUrl.search,\n                {},\n                undefined,\n                {\n                    rawResponseBody: true,\n                    prefix: \"\",\n                },\n            );\n            logger.info(`Received blob of length ${encryptedBundleBlob.size}`);\n            encryptedBundle = new Uint8Array(await encryptedBundleBlob.arrayBuffer());\n        } catch (err) {\n            logger.warn(`Error downloading encrypted bundle from ${url}:`, err);\n            throw err;\n        }\n\n        try {\n            await this.olmMachine.receiveRoomKeyBundle(bundleData, encryptedBundle);\n        } catch (err) {\n            logger.warn(`Error receiving encrypted bundle:`, err);\n\n            throw err;\n        } finally {\n            // Even if we were unable to import the bundle, we still clear the flag that indicates that we\n            // are waiting for the bundle to be received. The only reason this can happen is that the bundle was\n            // malformed somehow, so we don't want to keep retrying it.\n            await this.olmMachine.clearRoomPendingKeyBundle(new RustSdkCryptoJs.RoomId(roomId));\n        }\n\n        return true;\n    }\n\n    /**\n     * Implementation of {@link CryptoBackend.markRoomAsPendingKeyBundle}.\n     */\n    public async markRoomAsPendingKeyBundle(roomId: string, inviter: string): Promise<void> {\n        await this.olmMachine.storeRoomPendingKeyBundle(\n            new RustSdkCryptoJs.RoomId(roomId),\n            new RustSdkCryptoJs.UserId(inviter),\n        );\n    }\n\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n    //\n    // CryptoApi implementation\n    //\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n    public globalBlacklistUnverifiedDevices = false;\n\n    /**\n     * Implementation of {@link CryptoApi#getVersion}.\n     */\n    public getVersion(): string {\n        const versions = RustSdkCryptoJs.getVersions();\n        return `Rust SDK ${versions.matrix_sdk_crypto} (${versions.git_sha}), Vodozemac ${versions.vodozemac}`;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#setDeviceIsolationMode}.\n     */\n    public setDeviceIsolationMode(isolationMode: DeviceIsolationMode): void {\n        this.deviceIsolationMode = isolationMode;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#isEncryptionEnabledInRoom}.\n     */\n    public async isEncryptionEnabledInRoom(roomId: string): Promise<boolean> {\n        const roomSettings: RustSdkCryptoJs.RoomSettings | undefined = await this.olmMachine.getRoomSettings(\n            new RustSdkCryptoJs.RoomId(roomId),\n        );\n        return Boolean(roomSettings?.algorithm);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#isStateEncryptionEnabledInRoom}.\n     */\n    public async isStateEncryptionEnabledInRoom(roomId: string): Promise<boolean> {\n        const roomSettings: RustSdkCryptoJs.RoomSettings | undefined = await this.olmMachine.getRoomSettings(\n            new RustSdkCryptoJs.RoomId(roomId),\n        );\n        return Boolean(roomSettings?.encryptStateEvents);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getOwnDeviceKeys}.\n     */\n    public async getOwnDeviceKeys(): Promise<OwnDeviceKeys> {\n        const keys = this.olmMachine.identityKeys;\n        return { ed25519: keys.ed25519.toBase64(), curve25519: keys.curve25519.toBase64() };\n    }\n\n    public prepareToEncrypt(room: Room): void {\n        const encryptor = this.roomEncryptors[room.roomId];\n\n        if (encryptor) {\n            encryptor.prepareForEncryption(this.globalBlacklistUnverifiedDevices, this.deviceIsolationMode);\n        }\n    }\n\n    public forceDiscardSession(roomId: string): Promise<void> {\n        return this.roomEncryptors[roomId]?.forceDiscardSession();\n    }\n\n    public async exportRoomKeys(): Promise<IMegolmSessionData[]> {\n        const raw = await this.olmMachine.exportRoomKeys(() => true);\n        return JSON.parse(raw);\n    }\n\n    public async exportRoomKeysAsJson(): Promise<string> {\n        return await this.olmMachine.exportRoomKeys(() => true);\n    }\n\n    public async importRoomKeys(keys: IMegolmSessionData[], opts?: ImportRoomKeysOpts): Promise<void> {\n        return await this.backupManager.importRoomKeys(keys, opts);\n    }\n\n    public async importRoomKeysAsJson(keys: string, opts?: ImportRoomKeysOpts): Promise<void> {\n        return await this.backupManager.importRoomKeysAsJson(keys, opts);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi.userHasCrossSigningKeys}.\n     */\n    public async userHasCrossSigningKeys(userId = this.userId, downloadUncached = false): Promise<boolean> {\n        // TODO: could probably do with a more efficient way of doing this than returning the whole set and searching\n        const rustTrackedUsers: Set<RustSdkCryptoJs.UserId> = await this.olmMachine.trackedUsers();\n        let rustTrackedUser: RustSdkCryptoJs.UserId | undefined;\n        for (const u of rustTrackedUsers) {\n            if (userId === u.toString()) {\n                rustTrackedUser = u;\n                break;\n            }\n        }\n\n        if (rustTrackedUser !== undefined) {\n            if (userId === this.userId) {\n                /* make sure we have an *up-to-date* idea of the user's cross-signing keys. This is important, because if we\n                 * return \"false\" here, we will end up generating new cross-signing keys and replacing the existing ones.\n                 */\n                const request = this.olmMachine.queryKeysForUsers(\n                    // clone as rust layer will take ownership and it's reused later\n                    [rustTrackedUser.clone()],\n                );\n                await this.outgoingRequestProcessor.makeOutgoingRequest(request);\n            }\n            const userIdentity = await this.olmMachine.getIdentity(rustTrackedUser);\n            userIdentity?.free();\n            return userIdentity !== undefined;\n        } else if (downloadUncached) {\n            // Download the cross signing keys and check if the master key is available\n            const keyResult = await this.downloadDeviceList(new Set([userId]));\n            const keys = keyResult.master_keys?.[userId];\n\n            // No master key\n            if (!keys) return false;\n\n            // `keys` is an object with { [`ed25519:${pubKey}`]: pubKey }\n            // We assume only a single key, and we want the bare form without type\n            // prefix, so we select the values.\n            return Boolean(Object.values(keys.keys)[0]);\n        } else {\n            return false;\n        }\n    }\n\n    /**\n     * Get the device information for the given list of users.\n     *\n     * @param userIds - The users to fetch.\n     * @param downloadUncached - If true, download the device list for users whose device list we are not\n     *    currently tracking. Defaults to false, in which case such users will not appear at all in the result map.\n     *\n     * @returns A map `{@link DeviceMap}`.\n     */\n    public async getUserDeviceInfo(userIds: string[], downloadUncached = false): Promise<DeviceMap> {\n        const deviceMapByUserId = new Map<string, Map<string, Device>>();\n        const rustTrackedUsers: Set<RustSdkCryptoJs.UserId> = await this.getOlmMachineOrThrow().trackedUsers();\n\n        // Convert RustSdkCryptoJs.UserId to a `Set<string>`\n        const trackedUsers = new Set<string>();\n        rustTrackedUsers.forEach((rustUserId) => trackedUsers.add(rustUserId.toString()));\n\n        // Keep untracked user to download their keys after\n        const untrackedUsers: Set<string> = new Set();\n\n        for (const userId of userIds) {\n            // if this is a tracked user, we can just fetch the device list from the rust-sdk\n            // (NB: this is probably ok even if we race with a leave event such that we stop tracking the user's\n            // devices: the rust-sdk will return the last-known device list, which will be good enough.)\n            if (trackedUsers.has(userId)) {\n                deviceMapByUserId.set(userId, await this.getUserDevices(userId));\n            } else {\n                untrackedUsers.add(userId);\n            }\n        }\n\n        // for any users whose device lists we are not tracking, fall back to downloading the device list\n        // over HTTP.\n        if (downloadUncached && untrackedUsers.size >= 1) {\n            const queryResult = await this.downloadDeviceList(untrackedUsers);\n            Object.entries(queryResult.device_keys).forEach(([userId, deviceKeys]) =>\n                deviceMapByUserId.set(userId, deviceKeysToDeviceMap(deviceKeys)),\n            );\n        }\n\n        return deviceMapByUserId;\n    }\n\n    /**\n     * Get the device list for the given user from the olm machine\n     * @param userId - Rust SDK UserId\n     */\n    private async getUserDevices(userId: string): Promise<Map<string, Device>> {\n        const rustUserId = new RustSdkCryptoJs.UserId(userId);\n\n        // For reasons I don't really understand, the Javascript FinalizationRegistry doesn't seem to run the\n        // registered callbacks when `userDevices` goes out of scope, nor when the individual devices in the array\n        // returned by `userDevices.devices` do so.\n        //\n        // This is particularly problematic, because each of those structures holds a reference to the\n        // VerificationMachine, which in turn holds a reference to the IndexeddbCryptoStore. Hence, we end up leaking\n        // open connections to the crypto store, which means the store can't be deleted on logout.\n        //\n        // To fix this, we explicitly call `.free` on each of the objects, which tells the rust code to drop the\n        // allocated memory and decrement the refcounts for the crypto store.\n\n        // Wait for up to a second for any in-flight device list requests to complete.\n        // The reason for this isn't so much to avoid races (some level of raciness is\n        // inevitable for this method) but to make testing easier.\n        const userDevices: RustSdkCryptoJs.UserDevices = await this.olmMachine.getUserDevices(rustUserId, 1);\n        try {\n            const deviceArray: RustSdkCryptoJs.Device[] = userDevices.devices();\n            try {\n                return new Map(\n                    deviceArray.map((device) => [device.deviceId.toString(), rustDeviceToJsDevice(device, rustUserId)]),\n                );\n            } finally {\n                deviceArray.forEach((d) => d.free());\n            }\n        } finally {\n            userDevices.free();\n        }\n    }\n\n    /**\n     * Download the given user keys by calling `/keys/query` request\n     * @param untrackedUsers - download keys of these users\n     */\n    private async downloadDeviceList(untrackedUsers: Set<string>): Promise<IDownloadKeyResult> {\n        const queryBody: IQueryKeysRequest = { device_keys: {} };\n        untrackedUsers.forEach((user) => (queryBody.device_keys[user] = []));\n\n        return await this.http.authedRequest(Method.Post, \"/_matrix/client/v3/keys/query\", undefined, queryBody, {\n            prefix: \"\",\n        });\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getTrustCrossSignedDevices}.\n     */\n    public getTrustCrossSignedDevices(): boolean {\n        return this._trustCrossSignedDevices;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#setTrustCrossSignedDevices}.\n     */\n    public setTrustCrossSignedDevices(val: boolean): void {\n        this._trustCrossSignedDevices = val;\n        // TODO: legacy crypto goes through the list of known devices and emits DeviceVerificationChanged\n        //  events. Maybe we need to do the same?\n    }\n\n    /**\n     * Mark the given device as locally verified.\n     *\n     * Implementation of {@link CryptoApi#setDeviceVerified}.\n     */\n    public async setDeviceVerified(userId: string, deviceId: string, verified = true): Promise<void> {\n        const device: RustSdkCryptoJs.Device | undefined = await this.olmMachine.getDevice(\n            new RustSdkCryptoJs.UserId(userId),\n            new RustSdkCryptoJs.DeviceId(deviceId),\n        );\n\n        if (!device) {\n            throw new Error(`Unknown device ${userId}|${deviceId}`);\n        }\n        try {\n            await device.setLocalTrust(\n                verified ? RustSdkCryptoJs.LocalTrust.Verified : RustSdkCryptoJs.LocalTrust.Unset,\n            );\n        } finally {\n            device.free();\n        }\n    }\n\n    /**\n     * Blindly cross-sign one of our other devices.\n     *\n     * Implementation of {@link CryptoApi#crossSignDevice}.\n     */\n    public async crossSignDevice(deviceId: string): Promise<void> {\n        const device: RustSdkCryptoJs.Device | undefined = await this.olmMachine.getDevice(\n            new RustSdkCryptoJs.UserId(this.userId),\n            new RustSdkCryptoJs.DeviceId(deviceId),\n        );\n        if (!device) {\n            throw new Error(`Unknown device ${deviceId}`);\n        }\n        try {\n            const outgoingRequest: RustSdkCryptoJs.SignatureUploadRequest = await device.verify();\n            await this.outgoingRequestProcessor.makeOutgoingRequest(outgoingRequest);\n        } finally {\n            device.free();\n        }\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getDeviceVerificationStatus}.\n     */\n    public async getDeviceVerificationStatus(\n        userId: string,\n        deviceId: string,\n    ): Promise<DeviceVerificationStatus | null> {\n        const device: RustSdkCryptoJs.Device | undefined = await this.olmMachine.getDevice(\n            new RustSdkCryptoJs.UserId(userId),\n            new RustSdkCryptoJs.DeviceId(deviceId),\n        );\n\n        if (!device) return null;\n        try {\n            return new DeviceVerificationStatus({\n                signedByOwner: device.isCrossSignedByOwner(),\n                crossSigningVerified: device.isCrossSigningTrusted(),\n                localVerified: device.isLocallyTrusted(),\n                trustCrossSignedDevices: this._trustCrossSignedDevices,\n            });\n        } finally {\n            device.free();\n        }\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getUserVerificationStatus}.\n     */\n    public async getUserVerificationStatus(userId: string): Promise<UserVerificationStatus> {\n        const userIdentity: RustSdkCryptoJs.OtherUserIdentity | RustSdkCryptoJs.OwnUserIdentity | undefined =\n            await this.getOlmMachineOrThrow().getIdentity(new RustSdkCryptoJs.UserId(userId));\n        if (userIdentity === undefined) {\n            return new UserVerificationStatus(false, false, false);\n        }\n\n        const verified = userIdentity.isVerified();\n        const wasVerified = userIdentity.wasPreviouslyVerified();\n        const needsUserApproval =\n            userIdentity instanceof RustSdkCryptoJs.OtherUserIdentity\n                ? userIdentity.identityNeedsUserApproval()\n                : false;\n        userIdentity.free();\n        return new UserVerificationStatus(verified, wasVerified, true, needsUserApproval);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#pinCurrentUserIdentity}.\n     */\n    public async pinCurrentUserIdentity(userId: string): Promise<void> {\n        const userIdentity: RustSdkCryptoJs.OtherUserIdentity | RustSdkCryptoJs.OwnUserIdentity | undefined =\n            await this.getOlmMachineOrThrow().getIdentity(new RustSdkCryptoJs.UserId(userId));\n\n        if (userIdentity === undefined) {\n            throw new Error(\"Cannot pin identity of unknown user\");\n        }\n\n        if (userIdentity instanceof RustSdkCryptoJs.OwnUserIdentity) {\n            throw new Error(\"Cannot pin identity of own user\");\n        }\n\n        await userIdentity.pinCurrentMasterKey();\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#withdrawVerificationRequirement}.\n     */\n    public async withdrawVerificationRequirement(userId: string): Promise<void> {\n        const userIdentity: RustSdkCryptoJs.OtherUserIdentity | RustSdkCryptoJs.OwnUserIdentity | undefined =\n            await this.getOlmMachineOrThrow().getIdentity(new RustSdkCryptoJs.UserId(userId));\n\n        if (userIdentity === undefined) {\n            throw new Error(\"Cannot withdraw verification of unknown user\");\n        }\n\n        await userIdentity.withdrawVerification();\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#isCrossSigningReady}\n     */\n    public async isCrossSigningReady(): Promise<boolean> {\n        const { privateKeysInSecretStorage, privateKeysCachedLocally } = await this.getCrossSigningStatus();\n        const hasKeysInCache =\n            Boolean(privateKeysCachedLocally.masterKey) &&\n            Boolean(privateKeysCachedLocally.selfSigningKey) &&\n            Boolean(privateKeysCachedLocally.userSigningKey);\n\n        const identity = await this.getOwnIdentity();\n\n        // Cross-signing is ready if the public identity is trusted, and the private keys\n        // are either cached, or accessible via secret-storage.\n        return !!identity?.isVerified() && (hasKeysInCache || privateKeysInSecretStorage);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getCrossSigningKeyId}\n     */\n    public async getCrossSigningKeyId(type: CrossSigningKey = CrossSigningKey.Master): Promise<string | null> {\n        const userIdentity = await this.getOwnIdentity();\n        if (!userIdentity) {\n            // The public keys are not available on this device\n            return null;\n        }\n\n        try {\n            const crossSigningStatus: RustSdkCryptoJs.CrossSigningStatus = await this.olmMachine.crossSigningStatus();\n\n            const privateKeysOnDevice =\n                crossSigningStatus.hasMaster && crossSigningStatus.hasUserSigning && crossSigningStatus.hasSelfSigning;\n\n            if (!privateKeysOnDevice) {\n                // The private keys are not available on this device\n                return null;\n            }\n\n            if (!userIdentity.isVerified()) {\n                // We have both public and private keys, but they don't match!\n                return null;\n            }\n\n            let key: string;\n            switch (type) {\n                case CrossSigningKey.Master:\n                    key = userIdentity.masterKey;\n                    break;\n                case CrossSigningKey.SelfSigning:\n                    key = userIdentity.selfSigningKey;\n                    break;\n                case CrossSigningKey.UserSigning:\n                    key = userIdentity.userSigningKey;\n                    break;\n                default:\n                    // Unknown type\n                    return null;\n            }\n\n            const parsedKey: CrossSigningKeyInfo = JSON.parse(key);\n            // `keys` is an object with { [`ed25519:${pubKey}`]: pubKey }\n            // We assume only a single key, and we want the bare form without type\n            // prefix, so we select the values.\n            return Object.values(parsedKey.keys)[0];\n        } finally {\n            userIdentity.free();\n        }\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#bootstrapCrossSigning}\n     */\n    public async bootstrapCrossSigning(opts: BootstrapCrossSigningOpts): Promise<void> {\n        await this.crossSigningIdentity.bootstrapCrossSigning(opts);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#isSecretStorageReady}\n     */\n    public async isSecretStorageReady(): Promise<boolean> {\n        return (await this.getSecretStorageStatus()).ready;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getSecretStorageStatus}\n     */\n    public async getSecretStorageStatus(): Promise<SecretStorageStatus> {\n        // make sure that the cross-signing keys are stored\n        const secretsToCheck: SecretStorageKey[] = [\n            \"m.cross_signing.master\",\n            \"m.cross_signing.user_signing\",\n            \"m.cross_signing.self_signing\",\n        ];\n\n        // If key backup is active, we also need to check that the backup decryption key is stored\n        const keyBackupEnabled = (await this.backupManager.getActiveBackupVersion()) != null;\n        if (keyBackupEnabled) {\n            secretsToCheck.push(\"m.megolm_backup.v1\");\n        }\n\n        const defaultKeyId = await this.secretStorage.getDefaultKeyId();\n\n        const result: SecretStorageStatus = {\n            // Assume we have all secrets until proven otherwise\n            ready: true,\n            defaultKeyId,\n            secretStorageKeyValidityMap: {},\n        };\n\n        for (const secretName of secretsToCheck) {\n            // Check which keys this particular secret is encrypted with\n            const record = (await this.secretStorage.isStored(secretName)) || {};\n\n            // If it's encrypted with the right key, it is valid\n            const secretStored = !!defaultKeyId && defaultKeyId in record;\n            result.secretStorageKeyValidityMap[secretName] = secretStored;\n            result.ready = result.ready && secretStored;\n        }\n\n        return result;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#bootstrapSecretStorage}\n     */\n    public async bootstrapSecretStorage({\n        createSecretStorageKey,\n        setupNewSecretStorage,\n        setupNewKeyBackup,\n    }: CreateSecretStorageOpts = {}): Promise<void> {\n        // If an AES Key is already stored in the secret storage and setupNewSecretStorage is not set\n        // we don't want to create a new key\n        const isNewSecretStorageKeyNeeded = setupNewSecretStorage || !(await this.secretStorageHasAESKey());\n\n        if (isNewSecretStorageKeyNeeded) {\n            if (!createSecretStorageKey) {\n                throw new Error(\"unable to create a new secret storage key, createSecretStorageKey is not set\");\n            }\n\n            // Create a new storage key and add it to secret storage\n            this.logger.info(\"bootstrapSecretStorage: creating new secret storage key\");\n            const recoveryKey = await createSecretStorageKey();\n            if (!recoveryKey) {\n                throw new Error(\"createSecretStorageKey() callback did not return a secret storage key\");\n            }\n            await this.addSecretStorageKeyToSecretStorage(recoveryKey);\n        }\n\n        const crossSigningPrivateKeys: RustSdkCryptoJs.CrossSigningKeyExport | undefined =\n            await this.olmMachine.exportCrossSigningKeys();\n        const hasPrivateKeys =\n            crossSigningPrivateKeys &&\n            crossSigningPrivateKeys.masterKey !== undefined &&\n            crossSigningPrivateKeys.self_signing_key !== undefined &&\n            crossSigningPrivateKeys.userSigningKey !== undefined;\n\n        // If we have cross-signing private keys cached, store them in secret\n        // storage if they are not there already.\n        if (\n            hasPrivateKeys &&\n            (isNewSecretStorageKeyNeeded || !(await secretStorageContainsCrossSigningKeys(this.secretStorage)))\n        ) {\n            this.logger.info(\"bootstrapSecretStorage: cross-signing keys not yet exported; doing so now.\");\n\n            await this.secretStorage.store(\"m.cross_signing.master\", crossSigningPrivateKeys.masterKey);\n            await this.secretStorage.store(\"m.cross_signing.user_signing\", crossSigningPrivateKeys.userSigningKey);\n            await this.secretStorage.store(\"m.cross_signing.self_signing\", crossSigningPrivateKeys.self_signing_key);\n        }\n\n        // likewise with the key backup key: if we have one, store it in secret storage (if it's not already there)\n        // also don't bother storing it if we're about to set up a new backup\n        if (!setupNewKeyBackup) {\n            await this.saveBackupKeyToStorage();\n        } else {\n            await this.resetKeyBackup();\n        }\n    }\n\n    /**\n     * If we have a backup key for the current, trusted backup in cache,\n     * save it to secret storage.\n     */\n    private async saveBackupKeyToStorage(): Promise<void> {\n        const keyBackupInfo = await this.backupManager.getServerBackupInfo();\n        if (!keyBackupInfo || !keyBackupInfo.version) {\n            this.logger.info(\"Not saving backup key to secret storage: no backup info\");\n            return;\n        }\n\n        const backupKeys: RustSdkCryptoJs.BackupKeys = await this.olmMachine.getBackupKeys();\n        if (!backupKeys.decryptionKey) {\n            this.logger.info(\"Not saving backup key to secret storage: no backup key\");\n            return;\n        }\n\n        if (!decryptionKeyMatchesKeyBackupInfo(backupKeys.decryptionKey, keyBackupInfo)) {\n            this.logger.info(\"Not saving backup key to secret storage: decryption key does not match backup info\");\n            return;\n        }\n\n        const backupKeyBase64 = backupKeys.decryptionKey.toBase64();\n\n        await this.secretStorage.store(\"m.megolm_backup.v1\", backupKeyBase64);\n    }\n\n    /**\n     * Add the secretStorage key to the secret storage\n     * - The secret storage key must have the `keyInfo` field filled\n     * - The secret storage key is set as the default key of the secret storage\n     * - Call `cryptoCallbacks.cacheSecretStorageKey` when done\n     *\n     * @param secretStorageKey - The secret storage key to add in the secret storage.\n     */\n    private async addSecretStorageKeyToSecretStorage(secretStorageKey: GeneratedSecretStorageKey): Promise<void> {\n        const secretStorageKeyObject = await this.secretStorage.addKey(SECRET_STORAGE_ALGORITHM_V1_AES, {\n            passphrase: secretStorageKey.keyInfo?.passphrase,\n            name: secretStorageKey.keyInfo?.name,\n            key: secretStorageKey.privateKey,\n        });\n\n        await this.secretStorage.setDefaultKeyId(secretStorageKeyObject.keyId);\n\n        this.cryptoCallbacks.cacheSecretStorageKey?.(\n            secretStorageKeyObject.keyId,\n            secretStorageKeyObject.keyInfo,\n            secretStorageKey.privateKey,\n        );\n    }\n\n    /**\n     * Check if a secret storage AES Key is already added in secret storage\n     *\n     * @returns True if an AES key is in the secret storage\n     */\n    private async secretStorageHasAESKey(): Promise<boolean> {\n        // See if we already have an AES secret-storage key.\n        const secretStorageKeyTuple = await this.secretStorage.getKey();\n\n        if (!secretStorageKeyTuple) return false;\n\n        const [, keyInfo] = secretStorageKeyTuple;\n\n        // Check if the key is an AES key\n        return keyInfo.algorithm === SECRET_STORAGE_ALGORITHM_V1_AES;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getCrossSigningStatus}\n     */\n    public async getCrossSigningStatus(): Promise<CrossSigningStatus> {\n        const userIdentity = await this.getOwnIdentity();\n\n        const publicKeysOnDevice =\n            Boolean(userIdentity?.masterKey) &&\n            Boolean(userIdentity?.selfSigningKey) &&\n            Boolean(userIdentity?.userSigningKey);\n        userIdentity?.free();\n\n        const privateKeysInSecretStorage = await secretStorageContainsCrossSigningKeys(this.secretStorage);\n        const crossSigningStatus: RustSdkCryptoJs.CrossSigningStatus | null =\n            await this.getOlmMachineOrThrow().crossSigningStatus();\n\n        return {\n            publicKeysOnDevice,\n            privateKeysInSecretStorage,\n            privateKeysCachedLocally: {\n                masterKey: Boolean(crossSigningStatus?.hasMaster),\n                userSigningKey: Boolean(crossSigningStatus?.hasUserSigning),\n                selfSigningKey: Boolean(crossSigningStatus?.hasSelfSigning),\n            },\n        };\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#createRecoveryKeyFromPassphrase}\n     */\n    public async createRecoveryKeyFromPassphrase(password?: string): Promise<GeneratedSecretStorageKey> {\n        if (password) {\n            // Generate the key from the passphrase\n            // first we generate a random salt\n            const salt = secureRandomString(32);\n            // then we derive the key from the passphrase\n            const recoveryKey = await deriveRecoveryKeyFromPassphrase(\n                password,\n                salt,\n                this.RECOVERY_KEY_DERIVATION_ITERATIONS,\n            );\n            return {\n                keyInfo: {\n                    passphrase: {\n                        algorithm: \"m.pbkdf2\",\n                        iterations: this.RECOVERY_KEY_DERIVATION_ITERATIONS,\n                        salt,\n                    },\n                },\n                privateKey: recoveryKey,\n                encodedPrivateKey: encodeRecoveryKey(recoveryKey),\n            };\n        } else {\n            // Using the navigator crypto API to generate the private key\n            const key = new Uint8Array(32);\n            globalThis.crypto.getRandomValues(key);\n            return {\n                privateKey: key,\n                encodedPrivateKey: encodeRecoveryKey(key),\n            };\n        }\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getEncryptionInfoForEvent}.\n     */\n    public async getEncryptionInfoForEvent(event: MatrixEvent): Promise<EventEncryptionInfo | null> {\n        return this.eventDecryptor.getEncryptionInfoForEvent(event);\n    }\n\n    /**\n     * Returns to-device verification requests that are already in progress for the given user id.\n     *\n     * Implementation of {@link CryptoApi#getVerificationRequestsToDeviceInProgress}\n     *\n     * @param userId - the ID of the user to query\n     *\n     * @returns the VerificationRequests that are in progress\n     */\n    public getVerificationRequestsToDeviceInProgress(userId: string): VerificationRequest[] {\n        const requests: RustSdkCryptoJs.VerificationRequest[] = this.olmMachine.getVerificationRequests(\n            new RustSdkCryptoJs.UserId(userId),\n        );\n        return requests\n            .filter((request) => request.roomId === undefined && !request.isCancelled())\n            .map((request) => this.makeVerificationRequest(request));\n    }\n\n    /**\n     * Finds a DM verification request that is already in progress for the given room id\n     *\n     * Implementation of {@link CryptoApi#findVerificationRequestDMInProgress}\n     *\n     * @param roomId - the room to use for verification\n     * @param userId - search the verification request for the given user\n     *\n     * @returns the VerificationRequest that is in progress, if any\n     *\n     */\n    public findVerificationRequestDMInProgress(roomId: string, userId?: string): VerificationRequest | undefined {\n        if (!userId) throw new Error(\"missing userId\");\n\n        const requests: RustSdkCryptoJs.VerificationRequest[] = this.olmMachine.getVerificationRequests(\n            new RustSdkCryptoJs.UserId(userId),\n        );\n\n        // Search for the verification request for the given room id\n        const request = requests.find((request) => request.roomId?.toString() === roomId && !request.isCancelled());\n\n        if (request) {\n            return this.makeVerificationRequest(request);\n        }\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#requestVerificationDM}\n     */\n    public async requestVerificationDM(userId: string, roomId: string): Promise<VerificationRequest> {\n        const userIdentity = (await this.olmMachine.getIdentity(new RustSdkCryptoJs.UserId(userId))) as\n            | RustSdkCryptoJs.OtherUserIdentity\n            | undefined;\n\n        if (!userIdentity) throw new Error(`unknown userId ${userId}`);\n\n        try {\n            // Transform the verification methods into rust objects\n            const methods = this._supportedVerificationMethods.map((method) =>\n                verificationMethodIdentifierToMethod(method),\n            );\n            // Get the request content to send to the DM room\n            const verCont: string = await userIdentity.verificationRequestContent(methods);\n\n            // TODO: due to https://github.com/matrix-org/matrix-rust-sdk/issues/5643, we need to fix up the verification request content to include `msgtype`.\n            const verContObj = JSON.parse(verCont);\n            verContObj[\"msgtype\"] = \"m.key.verification.request\";\n            const verificationEventContent: string = JSON.stringify(verContObj);\n\n            // Send the request content to send to the DM room\n            const eventId = await this.sendVerificationRequestContent(roomId, verificationEventContent);\n\n            // Get a verification request\n            const request: RustSdkCryptoJs.VerificationRequest = await userIdentity.requestVerification(\n                new RustSdkCryptoJs.RoomId(roomId),\n                new RustSdkCryptoJs.EventId(eventId),\n                methods,\n            );\n            return this.makeVerificationRequest(request);\n        } finally {\n            userIdentity.free();\n        }\n    }\n\n    /**\n     * Send the verification content to a room\n     * See https://spec.matrix.org/v1.7/client-server-api/#put_matrixclientv3roomsroomidsendeventtypetxnid\n     *\n     * Prefer to use {@link OutgoingRequestProcessor.makeOutgoingRequest} when dealing with {@link RustSdkCryptoJs.RoomMessageRequest}\n     *\n     * @param roomId - the targeted room\n     * @param verificationEventContent - the request body.\n     *\n     * @returns the event id\n     */\n    private async sendVerificationRequestContent(roomId: string, verificationEventContent: string): Promise<string> {\n        const txId = secureRandomString(32);\n        // Send the verification request content to the DM room\n        const { event_id: eventId } = await this.http.authedRequest<{ event_id: string }>(\n            Method.Put,\n            `/_matrix/client/v3/rooms/${encodeURIComponent(roomId)}/send/m.room.message/${encodeURIComponent(txId)}`,\n            undefined,\n            verificationEventContent,\n            {\n                prefix: \"\",\n            },\n        );\n\n        return eventId;\n    }\n\n    /**\n     * The verification methods we offer to the other side during an interactive verification.\n     */\n    private _supportedVerificationMethods: string[] = ALL_VERIFICATION_METHODS;\n\n    /**\n     * Set the verification methods we offer to the other side during an interactive verification.\n     *\n     * If `undefined`, we will offer all the methods supported by the Rust SDK.\n     */\n    public setSupportedVerificationMethods(methods: string[] | undefined): void {\n        // by default, the Rust SDK does not offer `m.qr_code.scan.v1`, but we do want to offer that.\n        this._supportedVerificationMethods = methods ?? ALL_VERIFICATION_METHODS;\n    }\n\n    /**\n     * Send a verification request to our other devices.\n     *\n     * If a verification is already in flight, returns it. Otherwise, initiates a new one.\n     *\n     * Implementation of {@link CryptoApi#requestOwnUserVerification}.\n     *\n     * @returns a VerificationRequest when the request has been sent to the other party.\n     */\n    public async requestOwnUserVerification(): Promise<VerificationRequest> {\n        const userIdentity = await this.getOwnIdentity();\n        if (userIdentity === undefined) {\n            throw new Error(\"cannot request verification for this device when there is no existing cross-signing key\");\n        }\n\n        try {\n            const [request, outgoingRequest]: [RustSdkCryptoJs.VerificationRequest, RustSdkCryptoJs.ToDeviceRequest] =\n                await userIdentity.requestVerification(\n                    this._supportedVerificationMethods.map(verificationMethodIdentifierToMethod),\n                );\n            await this.outgoingRequestProcessor.makeOutgoingRequest(outgoingRequest);\n            return this.makeVerificationRequest(request);\n        } finally {\n            userIdentity.free();\n        }\n    }\n\n    /**\n     * Request an interactive verification with the given device.\n     *\n     * If a verification is already in flight, returns it. Otherwise, initiates a new one.\n     *\n     * Implementation of {@link CryptoApi#requestDeviceVerification}.\n     *\n     * @param userId - ID of the owner of the device to verify\n     * @param deviceId - ID of the device to verify\n     *\n     * @returns a VerificationRequest when the request has been sent to the other party.\n     */\n    public async requestDeviceVerification(userId: string, deviceId: string): Promise<VerificationRequest> {\n        const device: RustSdkCryptoJs.Device | undefined = await this.olmMachine.getDevice(\n            new RustSdkCryptoJs.UserId(userId),\n            new RustSdkCryptoJs.DeviceId(deviceId),\n        );\n\n        if (!device) {\n            throw new Error(\"Not a known device\");\n        }\n\n        try {\n            const [request, outgoingRequest] = device.requestVerification(\n                this._supportedVerificationMethods.map(verificationMethodIdentifierToMethod),\n            );\n            await this.outgoingRequestProcessor.makeOutgoingRequest(outgoingRequest);\n            return this.makeVerificationRequest(request);\n        } finally {\n            device.free();\n        }\n    }\n\n    /**\n     * Fetch the backup decryption key we have saved in our store.\n     *\n     * Implementation of {@link CryptoApi#getSessionBackupPrivateKey}.\n     *\n     * @returns the key, if any, or null\n     */\n    public async getSessionBackupPrivateKey(): Promise<Uint8Array | null> {\n        const backupKeys: RustSdkCryptoJs.BackupKeys = await this.olmMachine.getBackupKeys();\n        if (!backupKeys.decryptionKey) return null;\n        return decodeBase64(backupKeys.decryptionKey.toBase64());\n    }\n\n    /**\n     * Store the backup decryption key.\n     *\n     * Implementation of {@link CryptoApi#storeSessionBackupPrivateKey}.\n     *\n     * @param key - the backup decryption key\n     * @param version - the backup version for this key.\n     */\n    public async storeSessionBackupPrivateKey(key: Uint8Array, version?: string): Promise<void> {\n        const base64Key = encodeBase64(key);\n\n        if (!version) {\n            throw new Error(\"storeSessionBackupPrivateKey: version is required\");\n        }\n\n        await this.backupManager.saveBackupDecryptionKey(\n            RustSdkCryptoJs.BackupDecryptionKey.fromBase64(base64Key),\n            version,\n        );\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#loadSessionBackupPrivateKeyFromSecretStorage}.\n     */\n    public async loadSessionBackupPrivateKeyFromSecretStorage(): Promise<void> {\n        const backupKey = await this.secretStorage.get(\"m.megolm_backup.v1\");\n        if (!backupKey) {\n            throw new Error(\"loadSessionBackupPrivateKeyFromSecretStorage: missing decryption key in secret storage\");\n        }\n\n        const keyBackupInfo = await this.backupManager.getServerBackupInfo();\n        if (!keyBackupInfo || !keyBackupInfo.version) {\n            throw new Error(\"loadSessionBackupPrivateKeyFromSecretStorage: unable to get backup version\");\n        }\n\n        const backupDecryptionKey = RustSdkCryptoJs.BackupDecryptionKey.fromBase64(backupKey);\n        if (!decryptionKeyMatchesKeyBackupInfo(backupDecryptionKey, keyBackupInfo)) {\n            throw new DecryptionKeyDoesNotMatchError(\n                \"loadSessionBackupPrivateKeyFromSecretStorage: decryption key does not match backup info\",\n            );\n        }\n\n        await this.backupManager.saveBackupDecryptionKey(backupDecryptionKey, keyBackupInfo.version);\n    }\n\n    /**\n     * Get the current status of key backup.\n     *\n     * Implementation of {@link CryptoApi#getActiveSessionBackupVersion}.\n     */\n    public async getActiveSessionBackupVersion(): Promise<string | null> {\n        return await this.backupManager.getActiveBackupVersion();\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#getKeyBackupInfo}.\n     */\n    public async getKeyBackupInfo(): Promise<KeyBackupInfo | null> {\n        return (await this.backupManager.getServerBackupInfo()) || null;\n    }\n\n    /**\n     * Determine if a key backup can be trusted.\n     *\n     * Implementation of {@link CryptoApi#isKeyBackupTrusted}.\n     */\n    public async isKeyBackupTrusted(info: KeyBackupInfo): Promise<BackupTrustInfo> {\n        return await this.backupManager.isKeyBackupTrusted(info);\n    }\n\n    /**\n     * Force a re-check of the key backup and enable/disable it as appropriate.\n     *\n     * Implementation of {@link CryptoApi#checkKeyBackupAndEnable}.\n     */\n    public async checkKeyBackupAndEnable(): Promise<KeyBackupCheck | null> {\n        return await this.backupManager.checkKeyBackupAndEnable(true);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#deleteKeyBackupVersion}.\n     */\n    public async deleteKeyBackupVersion(version: string): Promise<void> {\n        await this.backupManager.deleteKeyBackupVersion(version);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#resetKeyBackup}.\n     */\n    public async resetKeyBackup(): Promise<void> {\n        const backupInfo = await this.backupManager.setupKeyBackup((o) => this.signObject(o));\n\n        await this.pushSecretToVerifiedDevices(\"m.megolm_backup.v1\");\n\n        // we want to store the private key in 4S\n        // need to check if 4S is set up?\n        if (await this.secretStorageHasAESKey()) {\n            await this.secretStorage.store(\"m.megolm_backup.v1\", backupInfo.decryptionKey.toBase64());\n        }\n\n        // we can check and start async\n        this.checkKeyBackupAndEnable();\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#disableKeyStorage}.\n     */\n    public async disableKeyStorage(): Promise<void> {\n        // Get the key backup version we're using\n        const info = await this.getKeyBackupInfo();\n        if (info?.version) {\n            await this.deleteKeyBackupVersion(info.version);\n        } else {\n            this.logger.error(\"Can't delete key backup version: no version available\");\n        }\n\n        // also turn off 4S, since this is also storing keys on the server.\n        await this.deleteSecretStorage();\n\n        await this.dehydratedDeviceManager.delete();\n    }\n\n    /**\n     * Signs the given object with the current device and current identity (if available).\n     * As defined in {@link https://spec.matrix.org/v1.8/appendices/#signing-json | Signing JSON}.\n     *\n     * Helper for {@link RustCrypto#resetKeyBackup}.\n     *\n     * @param obj - The object to sign\n     */\n    private async signObject<T extends ISignableObject & object>(obj: T): Promise<void> {\n        const sigs = new Map(Object.entries(obj.signatures || {}));\n        const unsigned = obj.unsigned;\n\n        delete obj.signatures;\n        delete obj.unsigned;\n\n        const userSignatures = sigs.get(this.userId) || {};\n\n        const canonalizedJson = anotherjson.stringify(obj);\n        const signatures: RustSdkCryptoJs.Signatures = await this.olmMachine.sign(canonalizedJson);\n\n        const map = JSON.parse(signatures.asJSON());\n\n        sigs.set(this.userId, { ...userSignatures, ...map[this.userId] });\n\n        if (unsigned !== undefined) obj.unsigned = unsigned;\n        obj.signatures = Object.fromEntries(sigs.entries());\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#restoreKeyBackupWithPassphrase}.\n     */\n    public async restoreKeyBackupWithPassphrase(\n        passphrase: string,\n        opts?: KeyBackupRestoreOpts,\n    ): Promise<KeyBackupRestoreResult> {\n        const backupInfo = await this.backupManager.getServerBackupInfo();\n        if (!backupInfo?.version) {\n            throw new Error(\"No backup info available\");\n        }\n\n        const privateKey = await keyFromAuthData(backupInfo.auth_data, passphrase);\n\n        // Cache the key\n        await this.storeSessionBackupPrivateKey(privateKey, backupInfo.version);\n        return this.restoreKeyBackup(opts);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#restoreKeyBackup}.\n     */\n    public async restoreKeyBackup(opts?: KeyBackupRestoreOpts): Promise<KeyBackupRestoreResult> {\n        // Get the decryption key from the crypto store\n        const backupKeys: RustSdkCryptoJs.BackupKeys = await this.olmMachine.getBackupKeys();\n        const { decryptionKey, backupVersion } = backupKeys;\n        if (!decryptionKey || !backupVersion) throw new Error(\"No decryption key found in crypto store\");\n\n        const decodedDecryptionKey = decodeBase64(decryptionKey.toBase64());\n\n        const backupInfo = await this.backupManager.requestKeyBackupVersion(backupVersion);\n        if (!backupInfo) throw new Error(`Backup version to restore ${backupVersion} not found on server`);\n\n        const backupDecryptor = await this.getBackupDecryptor(backupInfo, decodedDecryptionKey);\n\n        try {\n            opts?.progressCallback?.({\n                stage: ImportRoomKeyStage.Fetch,\n            });\n\n            return await this.backupManager.restoreKeyBackup(backupVersion, backupDecryptor, opts);\n        } finally {\n            // Free to avoid to keep in memory the decryption key stored in it. To avoid to exposing it to an attacker.\n            backupDecryptor.free();\n        }\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#isDehydrationSupported}.\n     */\n    public async isDehydrationSupported(): Promise<boolean> {\n        return await this.dehydratedDeviceManager.isSupported();\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#startDehydration}.\n     */\n    public async startDehydration(opts: StartDehydrationOpts | boolean = {}): Promise<void> {\n        if (!(await this.isCrossSigningReady()) || !(await this.isSecretStorageReady())) {\n            throw new Error(\"Device dehydration requires cross-signing and secret storage to be set up\");\n        }\n        return await this.dehydratedDeviceManager.start(opts || {});\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#importSecretsBundle}.\n     */\n    public async importSecretsBundle(\n        secrets: Parameters<NonNullable<CryptoApi[\"importSecretsBundle\"]>>[0],\n    ): Promise<void> {\n        const secretsBundle = RustSdkCryptoJs.SecretsBundle.from_json(secrets);\n        await this.getOlmMachineOrThrow().importSecretsBundle(secretsBundle); // this method frees the SecretsBundle\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#exportSecretsBundle}.\n     */\n    public async exportSecretsBundle(): ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>> {\n        const secretsBundle = await this.getOlmMachineOrThrow().exportSecretsBundle();\n        const secrets = secretsBundle.to_json();\n        secretsBundle.free();\n        return secrets;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#encryptToDeviceMessages}.\n     */\n    public async encryptToDeviceMessages(\n        eventType: string,\n        devices: { userId: string; deviceId: string }[],\n        payload: ToDevicePayload,\n    ): Promise<ToDeviceBatch> {\n        const logger = new LogSpan(this.logger, \"encryptToDeviceMessages\");\n        const uniqueUsers = new Set(devices.map(({ userId }) => userId));\n\n        // This will ensure we have Olm sessions for all of the users' devices.\n        // However, we only care about some of the devices.\n        // So, perhaps we can optimise this later on.\n        await this.keyClaimManager.ensureSessionsForUsers(\n            logger,\n            Array.from(uniqueUsers).map((userId) => new RustSdkCryptoJs.UserId(userId)),\n        );\n        const batch: ToDeviceBatch = {\n            batch: [],\n            eventType: EventType.RoomMessageEncrypted,\n        };\n\n        await Promise.all(\n            devices.map(async ({ userId, deviceId }) => {\n                const device: RustSdkCryptoJs.Device | undefined = await this.olmMachine.getDevice(\n                    new RustSdkCryptoJs.UserId(userId),\n                    new RustSdkCryptoJs.DeviceId(deviceId),\n                );\n\n                if (device) {\n                    const encryptedPayload = JSON.parse(await device.encryptToDeviceEvent(eventType, payload));\n                    batch.batch.push({\n                        deviceId,\n                        userId,\n                        payload: encryptedPayload,\n                    });\n                } else {\n                    this.logger.warn(`encryptToDeviceMessages: unknown device ${userId}:${deviceId}`);\n                }\n            }),\n        );\n\n        return batch;\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#resetEncryption}.\n     */\n    public async resetEncryption(authUploadDeviceSigningKeys: UIAuthCallback<void>): Promise<void> {\n        this.logger.debug(\"resetEncryption: resetting encryption\");\n\n        // Delete the dehydrated device, since any existing one will be signed\n        // by the wrong cross-signing key\n        this.dehydratedDeviceManager.delete();\n\n        // Disable backup, and delete all the backups from the server\n        await this.backupManager.deleteAllKeyBackupVersions();\n\n        await this.deleteSecretStorage();\n\n        // Reset the cross-signing keys\n        await this.crossSigningIdentity.bootstrapCrossSigning({\n            setupNewCrossSigning: true,\n            authUploadDeviceSigningKeys,\n        });\n\n        // Create a new key backup\n        await this.resetKeyBackup();\n\n        this.logger.debug(\"resetEncryption: ended\");\n    }\n\n    /**\n     * Removes the secret storage key, default key pointer and all (known) secret storage data\n     * from the user's account data\n     */\n    private async deleteSecretStorage(): Promise<void> {\n        // Remove the stored secrets in the secret storage\n        await this.secretStorage.store(\"m.cross_signing.master\", null);\n        await this.secretStorage.store(\"m.cross_signing.self_signing\", null);\n        await this.secretStorage.store(\"m.cross_signing.user_signing\", null);\n        await this.secretStorage.store(\"m.megolm_backup.v1\", null);\n\n        // Remove the recovery key\n        const defaultKeyId = await this.secretStorage.getDefaultKeyId();\n        if (defaultKeyId) await this.secretStorage.store(`m.secret_storage.key.${defaultKeyId}`, null);\n        // Disable the recovery key and the secret storage\n        await this.secretStorage.setDefaultKeyId(null);\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#shareRoomHistoryWithUser}.\n     */\n    public async shareRoomHistoryWithUser(roomId: string, userId: string): Promise<void> {\n        const logger = new LogSpan(this.logger, `shareRoomHistoryWithUser(${roomId}, ${userId})`);\n\n        // 0. We can only share room history if our user has set up cross-signing.\n        const identity = await this.getOwnIdentity();\n        if (!identity?.isVerified()) {\n            logger.warn(\n                \"Not sharing message history as the current device is not verified by our cross-signing identity\",\n            );\n            return;\n        }\n\n        logger.info(\"Sharing message history\");\n\n        // 1. Download keys from backup.\n        if (!(await this.getOlmMachineOrThrow().hasDownloadedAllRoomKeys(new RustSdkCryptoJs.RoomId(roomId)))) {\n            await this.backupManager.downloadLatestRoomKeyBackup(roomId);\n            await this.getOlmMachineOrThrow().setHasDownloadedAllRoomKeys(new RustSdkCryptoJs.RoomId(roomId));\n        }\n\n        // 2. Construct the key bundle\n        const bundle = await this.getOlmMachineOrThrow().buildRoomKeyBundle(new RustSdkCryptoJs.RoomId(roomId));\n        if (!bundle) {\n            logger.info(\"No keys to share\");\n            return;\n        }\n\n        // 3. Upload the encrypted bundle to the server\n        const uploadResponse = await this.http.uploadContent(bundle.encryptedData as Uint8Array<ArrayBuffer>);\n        logger.info(`Uploaded encrypted key blob: ${JSON.stringify(uploadResponse)}`);\n\n        // 4. We may not share a room with the user, so get a fresh list of devices for the invited user.\n        const req = this.getOlmMachineOrThrow().queryKeysForUsers([new RustSdkCryptoJs.UserId(userId)]);\n        await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n\n        // 5. Establish Olm sessions with all of the recipient's devices.\n        await this.keyClaimManager.ensureSessionsForUsers(logger, [new RustSdkCryptoJs.UserId(userId)]);\n\n        // 6. Send to-device messages to the recipient to share the keys.\n        const requests = await this.getOlmMachineOrThrow().shareRoomKeyBundleData(\n            new RustSdkCryptoJs.UserId(userId),\n            new RustSdkCryptoJs.RoomId(roomId),\n            uploadResponse.content_uri,\n            bundle.mediaEncryptionInfo,\n            RustSdkCryptoJs.CollectStrategy.identityBasedStrategy(),\n        );\n        for (const req of requests) {\n            await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n    }\n\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n    //\n    // SyncCryptoCallbacks implementation\n    //\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n    /**\n     * Apply sync changes to the olm machine\n     * @param events - the received to-device messages\n     * @param oneTimeKeysCounts - the received one time key counts\n     * @param unusedFallbackKeys - the received unused fallback keys\n     * @param devices - the received device list updates\n     * @returns A list of processed to-device messages.\n     */\n    private async receiveSyncChanges({\n        events,\n        oneTimeKeysCounts = new Map<string, number>(),\n        unusedFallbackKeys,\n        devices = new RustSdkCryptoJs.DeviceLists(),\n    }: {\n        events?: IToDeviceEvent[];\n        oneTimeKeysCounts?: Map<string, number>;\n        unusedFallbackKeys?: Set<string>;\n        devices?: RustSdkCryptoJs.DeviceLists;\n    }): Promise<RustSdkCryptoJs.ProcessedToDeviceEvent[]> {\n        return await this.olmMachine.receiveSyncChanges(\n            events ? JSON.stringify(events) : \"[]\",\n            devices,\n            oneTimeKeysCounts,\n            unusedFallbackKeys,\n        );\n    }\n\n    /** called by the sync loop to preprocess incoming to-device messages\n     *\n     * @param events - the received to-device messages\n     * @returns A list of preprocessed to-device messages.\n     */\n    public async preprocessToDeviceMessages(events: IToDeviceEvent[]): Promise<ReceivedToDeviceMessage[]> {\n        // send the received to-device messages into receiveSyncChanges. We have no info on device-list changes,\n        // one-time-keys, or fallback keys, so just pass empty data.\n        const processed = await this.receiveSyncChanges({ events });\n\n        const received: ReceivedToDeviceMessage[] = [];\n\n        for (const message of processed) {\n            const parsedMessage: IToDeviceEvent = JSON.parse(message.rawEvent);\n\n            // look for interesting to-device messages\n            if (parsedMessage.type === EventType.KeyVerificationRequest) {\n                const sender = parsedMessage.sender;\n                const transactionId = parsedMessage.content.transaction_id;\n                if (transactionId && sender) {\n                    this.onIncomingKeyVerificationRequest(sender, transactionId);\n                }\n            }\n\n            switch (message.type) {\n                case RustSdkCryptoJs.ProcessedToDeviceEventType.Decrypted: {\n                    const encryptionInfo = (message as RustSdkCryptoJs.DecryptedToDeviceEvent).encryptionInfo;\n                    received.push({\n                        message: parsedMessage,\n                        encryptionInfo: {\n                            sender: encryptionInfo.sender.toString(),\n                            senderDevice: encryptionInfo.senderDevice?.toString(),\n                            senderCurve25519KeyBase64: encryptionInfo.senderCurve25519Key,\n                            senderVerified: encryptionInfo.isSenderVerified(),\n                        },\n                    });\n\n                    // If we have received a room key bundle message, and have recently joined the room in question,\n                    // tell the Rust SDK to try and accept the key bundle.\n                    //\n                    // We don't actually need to validate the contents of the bundle message, or do\n                    // anything with its contents at all. We simply want to inform the Rust SDK we have\n                    // received a new room key bundle that we might be able to download.\n                    if (isRoomKeyBundleMessage(parsedMessage)) {\n                        const roomId = parsedMessage.content.room_id;\n                        const pendingDetails = await this.olmMachine.getPendingKeyBundleDetailsForRoom(\n                            new RustSdkCryptoJs.RoomId(roomId),\n                        );\n                        // Only accept the key bundle if we joined the room less than 24 hours ago.\n                        if (!pendingDetails) {\n                            this.logger.debug(\n                                `Not yet accepting key bundle for room where we are not awaiting a bundle: ${roomId}`,\n                            );\n                        } else if (\n                            Date.now() - pendingDetails.inviteAcceptedAtMillis >\n                            MAX_INVITE_ACCEPTANCE_MS_FOR_KEY_BUNDLE\n                        ) {\n                            this.logger.info(\n                                `Ignoring key bundle for room we joined too long ago: ${roomId}, joining time: ${new Date(pendingDetails.inviteAcceptedAtMillis).toISOString()}`,\n                            );\n                        } else {\n                            this.logger.info(`Considering key bundle for recently-joined room ${roomId}`);\n                            // Don't block for the import to happen, here, as this is called from inside the `/sync` loop.\n                            this.maybeAcceptKeyBundle(roomId, pendingDetails.inviterId.toString()).catch((err) => {\n                                this.logger.error(`Error attempting to download key bundle for room ${roomId}`);\n                                this.logger.error(err);\n                            });\n                        }\n                    }\n\n                    break;\n                }\n                case RustSdkCryptoJs.ProcessedToDeviceEventType.PlainText: {\n                    received.push({\n                        message: parsedMessage,\n                        encryptionInfo: null,\n                    });\n                    break;\n                }\n                case RustSdkCryptoJs.ProcessedToDeviceEventType.UnableToDecrypt:\n                    // ignore messages we cannot decrypt\n                    break;\n                case RustSdkCryptoJs.ProcessedToDeviceEventType.Invalid:\n                    // ignore invalid messages\n                    break;\n            }\n        }\n\n        return received;\n    }\n\n    /** called by the sync loop to process one time key counts and unused fallback keys\n     *\n     * @param oneTimeKeysCounts - the received one time key counts\n     * @param unusedFallbackKeys - the received unused fallback keys\n     */\n    public async processKeyCounts(\n        oneTimeKeysCounts?: Record<string, number>,\n        unusedFallbackKeys?: string[],\n    ): Promise<void> {\n        const mapOneTimeKeysCount = oneTimeKeysCounts && new Map<string, number>(Object.entries(oneTimeKeysCounts));\n        const setUnusedFallbackKeys = unusedFallbackKeys && new Set<string>(unusedFallbackKeys);\n\n        if (mapOneTimeKeysCount !== undefined || setUnusedFallbackKeys !== undefined) {\n            await this.receiveSyncChanges({\n                oneTimeKeysCounts: mapOneTimeKeysCount,\n                unusedFallbackKeys: setUnusedFallbackKeys,\n            });\n        }\n    }\n\n    /** called by the sync loop to process the notification that device lists have\n     * been changed.\n     *\n     * @param deviceLists - device_lists field from /sync\n     */\n    public async processDeviceLists(deviceLists: IDeviceLists): Promise<void> {\n        const devices = new RustSdkCryptoJs.DeviceLists(\n            deviceLists.changed?.map((userId) => new RustSdkCryptoJs.UserId(userId)),\n            deviceLists.left?.map((userId) => new RustSdkCryptoJs.UserId(userId)),\n        );\n        await this.receiveSyncChanges({ devices });\n    }\n\n    /** called by the sync loop on m.room.encryption events\n     *\n     * @param room - in which the event was received\n     * @param event - encryption event to be processed\n     */\n    public async onCryptoEvent(room: Room, event: MatrixEvent): Promise<void> {\n        const config = event.getContent();\n        const settings = new RustSdkCryptoJs.RoomSettings();\n\n        if (config.algorithm === \"m.megolm.v1.aes-sha2\") {\n            settings.algorithm = RustSdkCryptoJs.EncryptionAlgorithm.MegolmV1AesSha2;\n        } else {\n            // Among other situations, this happens if the crypto state event is redacted.\n            this.logger.warn(`Room ${room.roomId}: ignoring crypto event with invalid algorithm ${config.algorithm}`);\n            return;\n        }\n\n        if (config[\"io.element.msc4362.encrypt_state_events\"] && this.enableEncryptedStateEvents) {\n            this.logger.info(\"crypto Enabling state event encryption...\");\n            settings.encryptStateEvents = true;\n        }\n\n        try {\n            settings.sessionRotationPeriodMs = config.rotation_period_ms;\n            settings.sessionRotationPeriodMessages = config.rotation_period_msgs;\n            await this.olmMachine.setRoomSettings(new RustSdkCryptoJs.RoomId(room.roomId), settings);\n        } catch (e) {\n            this.logger.warn(`Room ${room.roomId}: ignoring crypto event which caused error: ${e}`);\n            return;\n        }\n\n        // If we got this far, the SDK found the event acceptable.\n        // We need to either create or update the active RoomEncryptor.\n        const existingEncryptor = this.roomEncryptors[room.roomId];\n        if (existingEncryptor) {\n            existingEncryptor.onCryptoEvent(config);\n        } else {\n            this.roomEncryptors[room.roomId] = new RoomEncryptor(\n                this.logger.getChild(`[${room.roomId} encryption]`),\n                this.olmMachine,\n                this.keyClaimManager,\n                this.outgoingRequestsManager,\n                room,\n                config,\n            );\n        }\n    }\n\n    /** called by the sync loop after processing each sync.\n     *\n     *\n     * @param syncState - information on the completed sync.\n     */\n    public onSyncCompleted(syncState: OnSyncCompletedData): void {\n        // Processing the /sync may have produced new outgoing requests which need sending, so kick off the outgoing\n        // request loop, if it's not already running.\n        this.outgoingRequestsManager.doProcessOutgoingRequests().catch((e) => {\n            this.logger.warn(\"onSyncCompleted: Error processing outgoing requests\", e);\n        });\n    }\n\n    /**\n     * Implementation of {@link CryptoApi#markAllTrackedUsersAsDirty}.\n     */\n    public async markAllTrackedUsersAsDirty(): Promise<void> {\n        await this.olmMachine.markAllTrackedUsersAsDirty();\n    }\n\n    /**\n     * Handle an incoming m.key.verification.request event, received either in-room or in a to-device message.\n     *\n     * @param sender - the sender of the event\n     * @param transactionId - the transaction ID for the verification. For to-device messages, this comes from the\n     *    content of the message; for in-room messages it is the event ID.\n     */\n    private onIncomingKeyVerificationRequest(sender: string, transactionId: string): void {\n        const request: RustSdkCryptoJs.VerificationRequest | undefined = this.olmMachine.getVerificationRequest(\n            new RustSdkCryptoJs.UserId(sender),\n            transactionId,\n        );\n\n        if (request) {\n            this.emit(CryptoEvent.VerificationRequestReceived, this.makeVerificationRequest(request));\n        } else {\n            // There are multiple reasons this can happen; probably the most likely is that the event is an\n            // in-room event which is too old.\n            this.logger.info(\n                `Ignoring just-received verification request ${transactionId} which did not start a rust-side verification`,\n            );\n        }\n    }\n\n    /** Utility function to wrap a rust `VerificationRequest` with our own {@link VerificationRequest}. */\n    private makeVerificationRequest(request: RustSdkCryptoJs.VerificationRequest): VerificationRequest {\n        return new RustVerificationRequest(\n            this.logger,\n            this.olmMachine,\n            request,\n            this.outgoingRequestProcessor,\n            this._supportedVerificationMethods,\n        );\n    }\n\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n    //\n    // Other public functions\n    //\n    ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n    /** called by the MatrixClient on a room membership event\n     *\n     * @param event - The matrix event which caused this event to fire.\n     * @param member - The member whose RoomMember.membership changed.\n     * @param oldMembership - The previous membership state. Null if it's a new member.\n     */\n    public onRoomMembership(event: MatrixEvent, member: RoomMember, oldMembership?: string): void {\n        const roomId = event.getRoomId()!;\n\n        // If it's our own membership, and we are no longer joined, clear any indication that we are waiting for a key\n        // bundle.\n        if (\n            oldMembership === KnownMembership.Join &&\n            member.membership !== KnownMembership.Join &&\n            member.userId === this.olmMachine.userId.toString()\n        ) {\n            this.olmMachine.clearRoomPendingKeyBundle(new RustSdkCryptoJs.RoomId(roomId)).catch((e) => {\n                this.logger.error(`Error clearing room pending key bundle indicator for ${roomId}: ${e}`);\n            });\n        }\n\n        const enc = this.roomEncryptors[roomId];\n        if (!enc) {\n            // not encrypting in this room\n            return;\n        }\n        enc.onRoomMembership(member);\n    }\n\n    /**\n     * Previously, it was sufficient to check if we need to rotate the room key\n     * prior to sending a message. However, the history sharing feature\n     * (MSC4268) breaks this logic:\n     *\n     * 1. Alice sends a message M1 in room X;\n     * 2. Bob invites Charlie, who joins and immediately leaves the room;\n     * 3. Alice sends another message M2 in room X.\n     *\n     * Under the old logic, Alice would not rotate her key after Charlie\n     * leaves, resulting in M2 being encrypted with the same session as M1.\n     * This would allow Charlie to decrypt M2 if he ever gains access to\n     * the event.\n     *\n     * To counter this, we proactively discard any active outgoing Megolm\n     * session when we see an event indicating the user left.\n     *\n     * Note that we have to do this in `onRoomStateEvent` rather than\n     * `onRoomMembership`, because `onRoomMembership` is only called when we see\n     * a *change* in membership. In the case of a gappy sync, we might miss\n     * Charlie's invite and join, and only see the final `leave` event (so his\n     * membership goes from `leave` to `leave`).\n     */\n    public onRoomStateEvent(event: MatrixEvent, _state: RoomState, _prevEvent: MatrixEvent | null): void {\n        if (event.getType() != EventType.RoomMember) {\n            // Ignore all events that aren't member updates.\n            return;\n        }\n\n        if (\n            event.getStateKey()! !== this.olmMachine.userId.toString() &&\n            event.getContent().membership !== KnownMembership.Join\n        ) {\n            this.logger.info(`Rotating session for room ${event.getRoomId()} due to member leaving the room`);\n            this.forceDiscardSession(event.getRoomId()!);\n        }\n    }\n\n    /** Callback for OlmMachine.registerRoomKeyUpdatedCallback\n     *\n     * Called by the rust-sdk whenever there is an update to (megolm) room keys. We\n     * check if we have any events waiting for the given keys, and schedule them for\n     * a decryption retry if so.\n     *\n     * @param keys - details of the updated keys\n     */\n    public async onRoomKeysUpdated(keys: RustSdkCryptoJs.RoomKeyInfo[]): Promise<void> {\n        for (const key of keys) {\n            this.onRoomKeyUpdated(key);\n        }\n        this.backupManager.maybeUploadKey();\n    }\n\n    private onRoomKeyUpdated(key: RustSdkCryptoJs.RoomKeyInfo): void {\n        if (this.stopped) return;\n        this.logger.debug(\n            `Got update for session ${key.sessionId} from sender ${key.senderKey.toBase64()} in ${key.roomId.toString()}`,\n        );\n        const pendingList = this.eventDecryptor.getEventsPendingRoomKey(key.roomId.toString(), key.sessionId);\n        if (pendingList.length === 0) return;\n\n        this.logger.debug(\n            \"Retrying decryption on events:\",\n            pendingList.map((e) => `${e.getId()}`),\n        );\n\n        // Have another go at decrypting events with this key.\n        //\n        // We don't want to end up blocking the callback from Rust, which could otherwise end up dropping updates,\n        // so we don't wait for the decryption to complete. In any case, there is no need to wait:\n        // MatrixEvent.attemptDecryption ensures that there is only one decryption attempt happening at once,\n        // and deduplicates repeated attempts for the same event.\n        for (const ev of pendingList) {\n            ev.attemptDecryption(this, { isRetry: true }).catch((_e) => {\n                this.logger.info(`Still unable to decrypt event ${ev.getId()} after receiving key`);\n            });\n        }\n    }\n\n    /**\n     * Callback for `OlmMachine.registerRoomKeyWithheldCallback`.\n     *\n     * Called by the rust sdk whenever we are told that a key has been withheld. We see if we had any events that\n     * failed to decrypt for the given session, and update their status if so.\n     *\n     * @param withheld - Details of the withheld sessions.\n     */\n    public async onRoomKeysWithheld(withheld: RustSdkCryptoJs.RoomKeyWithheldInfo[]): Promise<void> {\n        for (const session of withheld) {\n            this.logger.debug(`Got withheld message for session ${session.sessionId} in ${session.roomId.toString()}`);\n            const pendingList = this.eventDecryptor.getEventsPendingRoomKey(\n                session.roomId.toString(),\n                session.sessionId,\n            );\n            if (pendingList.length === 0) return;\n\n            // The easiest way to update the status of the event is to have another go at decrypting it.\n            this.logger.debug(\n                \"Retrying decryption on events:\",\n                pendingList.map((e) => `${e.getId()}`),\n            );\n\n            for (const ev of pendingList) {\n                ev.attemptDecryption(this, { isRetry: true }).catch((_e) => {\n                    // It's somewhat expected that we still can't decrypt here.\n                });\n            }\n        }\n    }\n\n    /**\n     * Callback for `OlmMachine.registerUserIdentityUpdatedCallback`\n     *\n     * Called by the rust-sdk whenever there is an update to any user's cross-signing status. We re-check their trust\n     * status and emit a `UserTrustStatusChanged` event, as well as a `KeysChanged` if it is our own identity that changed.\n     *\n     * @param userId - the user with the updated identity\n     */\n    public async onUserIdentityUpdated(userId: RustSdkCryptoJs.UserId): Promise<void> {\n        const newVerification = await this.getUserVerificationStatus(userId.toString());\n        this.emit(CryptoEvent.UserTrustStatusChanged, userId.toString(), newVerification);\n\n        // If our own user identity has changed, we may now trust the key backup where we did not before.\n        // So, re-check the key backup status and enable it if available.\n        if (userId.toString() === this.userId) {\n            this.emit(CryptoEvent.KeysChanged, {});\n            await this.checkKeyBackupAndEnable();\n        }\n    }\n\n    /**\n     * Callback for `OlmMachine.registerDevicesUpdatedCallback`\n     *\n     * Called when users' devices have updated. Emits `WillUpdateDevices` and `DevicesUpdated`. In the JavaScript\n     * crypto backend, these events are called at separate times, with `WillUpdateDevices` being emitted just before\n     * the devices are saved, and `DevicesUpdated` being emitted just after. But the OlmMachine only gives us\n     * one event, so we emit both events here.\n     *\n     * @param userIds - an array of user IDs of users whose devices have updated.\n     */\n    public async onDevicesUpdated(userIds: string[]): Promise<void> {\n        this.emit(CryptoEvent.WillUpdateDevices, userIds, false);\n        this.emit(CryptoEvent.DevicesUpdated, userIds, false);\n    }\n\n    /**\n     * Handles secret received from the rust secret inbox.\n     *\n     * The gossipped secrets are received using the `m.secret.send` or\n     * `io.element.msc4385.secret.push` event types and are guaranteed to have\n     * been received over a 1-to-1 Olm Session from a verified device.\n     *\n     * The only secret currently handled in this way is `m.megolm_backup.v1`.\n     *\n     * @param name - the secret name\n     * @param value - the secret value\n     */\n    private async handleSecretReceived(name: string, value: string): Promise<boolean> {\n        this.logger.debug(`onReceiveSecret: Received secret ${name}`);\n        if (name === \"m.megolm_backup.v1\") {\n            return await this.backupManager.handleBackupSecretReceived(value);\n            // XXX at this point we should probably try to download the backup and import the keys,\n            // or at least retry for the current decryption failures?\n            // Maybe add some signaling when a new secret is received, and let clients handle it?\n            // as it's where the restore from backup APIs are exposed.\n        }\n        return false;\n    }\n\n    /**\n     * Called when a new secret is received in the rust secret inbox.\n     *\n     * Will poll the secret inbox and handle the secrets received.\n     *\n     * @param name - The name of the secret received.\n     */\n    public async checkSecrets(name: string): Promise<void> {\n        const pendingValues: Set<string> = await this.olmMachine.getSecretsFromInbox(name);\n        for (const value of pendingValues) {\n            if (await this.handleSecretReceived(name, value)) {\n                // If we have a valid secret for that name there is no point of processing the other secrets values.\n                // It's probably the same secret shared by another device.\n                break;\n            }\n        }\n\n        // Important to call this after handling the secrets as good hygiene.\n        await this.olmMachine.deleteSecretsFromInbox(name);\n    }\n\n    /**\n     * Handle a live event received via /sync.\n     * See {@link ClientEventHandlerMap#event}\n     *\n     * @param event - live event\n     */\n    public async onLiveEventFromSync(event: MatrixEvent): Promise<void> {\n        // Ignore state event or remote echo\n        // transaction_id is provided in case of remote echo {@link https://spec.matrix.org/v1.7/client-server-api/#local-echo}\n        if (event.isState() || !!event.getUnsigned().transaction_id) return;\n\n        const processEvent = async (evt: MatrixEvent): Promise<void> => {\n            // Process only verification event\n            if (isVerificationEvent(event)) {\n                await this.onKeyVerificationEvent(evt);\n            }\n        };\n\n        // If the event is encrypted of in failure, we wait for decryption\n        if (event.isDecryptionFailure() || event.isEncrypted()) {\n            // 5 mins\n            const TIMEOUT_DELAY = 5 * 60 * 1000;\n\n            // After 5mins, we are not expecting the event to be decrypted\n            const timeoutId = setTimeout(() => event.off(MatrixEventEvent.Decrypted, onDecrypted), TIMEOUT_DELAY);\n\n            const onDecrypted = (decryptedEvent: MatrixEvent, error?: Error): void => {\n                if (error) return;\n\n                clearTimeout(timeoutId);\n                event.off(MatrixEventEvent.Decrypted, onDecrypted);\n                processEvent(decryptedEvent);\n            };\n\n            event.on(MatrixEventEvent.Decrypted, onDecrypted);\n        } else {\n            await processEvent(event);\n        }\n    }\n\n    /**\n     * Handle an in-room key verification event.\n     *\n     * @param event - a key validation request event.\n     */\n    private async onKeyVerificationEvent(event: MatrixEvent): Promise<void> {\n        const roomId = event.getRoomId();\n        const senderId = event.getSender();\n\n        if (!roomId) {\n            throw new Error(\"missing roomId in the event\");\n        }\n\n        if (!senderId) {\n            throw new Error(\"missing sender in the event\");\n        }\n\n        this.logger.debug(\n            `Incoming verification event ${event.getId()} type ${event.getType()} from ${event.getSender()}`,\n        );\n\n        const isRoomVerificationRequest =\n            event.getType() === EventType.RoomMessage && event.getContent().msgtype === MsgType.KeyVerificationRequest;\n\n        if (isRoomVerificationRequest) {\n            // Before processing an in-room verification request, we need to\n            // make sure we have the sender's device information - otherwise we\n            // will immediately abort verification. So we explicitly fetch it\n            // from /keys/query and wait for that request to complete before we\n            // call receiveVerificationEvent.\n            const req = this.getOlmMachineOrThrow().queryKeysForUsers([new RustSdkCryptoJs.UserId(senderId)]);\n            await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n\n        await this.getOlmMachineOrThrow().receiveVerificationEvent(\n            JSON.stringify({\n                event_id: event.getId(),\n                type: event.getType(),\n                sender: senderId,\n                state_key: event.getStateKey(),\n                content: event.getContent(),\n                origin_server_ts: event.getTs(),\n            }),\n            new RustSdkCryptoJs.RoomId(roomId),\n        );\n\n        if (isRoomVerificationRequest) {\n            this.onIncomingKeyVerificationRequest(senderId, event.getId()!);\n        }\n\n        // that may have caused us to queue up outgoing requests, so make sure we send them.\n        this.outgoingRequestsManager.doProcessOutgoingRequests().catch((e) => {\n            this.logger.warn(\"onKeyVerificationRequest: Error processing outgoing requests\", e);\n        });\n    }\n\n    /**\n     * Returns the cross-signing user identity of the current user.\n     *\n     * Not part of the public crypto-api interface.\n     * Used during migration from legacy js-crypto to update local trust if needed.\n     */\n    public async getOwnIdentity(): Promise<RustSdkCryptoJs.OwnUserIdentity | undefined> {\n        const identity = (await this.getOlmMachineOrThrow().getIdentity(new RustSdkCryptoJs.UserId(this.userId))) as\n            | RustSdkCryptoJs.OwnUserIdentity\n            | undefined;\n        return identity;\n    }\n\n    /**\n     * Push a secret to all of the current user's verified devices.\n     */\n    public async pushSecretToVerifiedDevices(name: string): Promise<void> {\n        const logger = new LogSpan(this.logger, \"pushSecretToVerifiedDevices\");\n        await this.keyClaimManager.ensureSessionsForUsers(logger, [new RustSdkCryptoJs.UserId(this.userId)]);\n        await this.olmMachine.pushSecretToVerifiedDevices(name);\n        this.outgoingRequestsManager.doProcessOutgoingRequests().catch((e) => {\n            logger.warn(\"pushSecretToVerifiedDevices: Error processing outgoing requests\", e);\n        });\n    }\n}\n\nclass EventDecryptor {\n    /**\n     * Events which we couldn't decrypt due to unknown sessions / indexes.\n     *\n     * Map from roomId to sessionId to Set of MatrixEvents\n     */\n    private eventsPendingKey = new MapWithDefault<string, MapWithDefault<string, Set<MatrixEvent>>>(\n        () => new MapWithDefault<string, Set<MatrixEvent>>(() => new Set()),\n    );\n\n    public constructor(\n        private readonly logger: Logger,\n        private readonly olmMachine: RustSdkCryptoJs.OlmMachine,\n        private readonly perSessionBackupDownloader: PerSessionKeyBackupDownloader,\n    ) {}\n\n    public async attemptEventDecryption(\n        event: MatrixEvent,\n        isolationMode: DeviceIsolationMode,\n    ): Promise<EventDecryptionResult> {\n        // add the event to the pending list *before* attempting to decrypt.\n        // then, if the key turns up while decryption is in progress (and\n        // decryption fails), we will schedule a retry.\n        // (fixes https://github.com/vector-im/element-web/issues/5001)\n        this.addEventToPendingList(event);\n\n        let trustRequirement;\n\n        switch (isolationMode.kind) {\n            case DeviceIsolationModeKind.AllDevicesIsolationMode:\n                trustRequirement = RustSdkCryptoJs.TrustRequirement.Untrusted;\n                break;\n            case DeviceIsolationModeKind.OnlySignedDevicesIsolationMode:\n                trustRequirement = RustSdkCryptoJs.TrustRequirement.CrossSignedOrLegacy;\n                break;\n        }\n\n        try {\n            const res = (await this.olmMachine.decryptRoomEvent(\n                stringifyEvent(event),\n                new RustSdkCryptoJs.RoomId(event.getRoomId()!),\n                new RustSdkCryptoJs.DecryptionSettings(trustRequirement),\n            )) as RustSdkCryptoJs.DecryptedRoomEvent;\n\n            // Success. We can remove the event from the pending list, if\n            // that hasn't already happened.\n            this.removeEventFromPendingList(event);\n\n            return {\n                clearEvent: JSON.parse(res.event),\n                claimedEd25519Key: res.senderClaimedEd25519Key,\n                senderCurve25519Key: res.senderCurve25519Key,\n                keyForwardedBy: res.forwarder?.toString(),\n            };\n        } catch (err) {\n            if (err instanceof RustSdkCryptoJs.MegolmDecryptionError) {\n                this.onMegolmDecryptionError(event, err, await this.perSessionBackupDownloader.getServerBackupInfo());\n            } else {\n                throw new DecryptionError(DecryptionFailureCode.UNKNOWN_ERROR, \"Unknown error\");\n            }\n        }\n    }\n\n    /**\n     * Handle a `MegolmDecryptionError` returned by the rust SDK.\n     *\n     * Fires off a request to the `perSessionBackupDownloader`, if appropriate, and then throws a `DecryptionError`.\n     *\n     * @param event - The event which could not be decrypted.\n     * @param err - The error from the Rust SDK.\n     * @param serverBackupInfo - Details about the current backup from the server. `null` if there is no backup.\n     *     `undefined` if our attempt to check failed.\n     */\n    private onMegolmDecryptionError(\n        event: MatrixEvent,\n        err: RustSdkCryptoJs.MegolmDecryptionError,\n        serverBackupInfo: KeyBackupInfo | null | undefined,\n    ): never {\n        const content = event.getWireContent();\n        const errorDetails = { sender_key: content.sender_key, session_id: content.session_id };\n\n        // If the error looks like it might be recoverable from backup, queue up a request to try that.\n        if (\n            err.code === RustSdkCryptoJs.DecryptionErrorCode.MissingRoomKey ||\n            err.code === RustSdkCryptoJs.DecryptionErrorCode.UnknownMessageIndex\n        ) {\n            this.perSessionBackupDownloader.onDecryptionKeyMissingError(event.getRoomId()!, content.session_id!);\n\n            // If the server is telling us our membership at the time the event\n            // was sent, and it isn't \"join\", we use a different error code.\n            const membership = event.getMembershipAtEvent();\n            if (membership && membership !== KnownMembership.Join && membership !== KnownMembership.Invite) {\n                throw new DecryptionError(\n                    DecryptionFailureCode.HISTORICAL_MESSAGE_USER_NOT_JOINED,\n                    \"This message was sent when we were not a member of the room.\",\n                    errorDetails,\n                );\n            }\n\n            // If the event was sent before this device was created, we use some different error codes.\n            if (event.getTs() <= this.olmMachine.deviceCreationTimeMs) {\n                if (serverBackupInfo === null) {\n                    throw new DecryptionError(\n                        DecryptionFailureCode.HISTORICAL_MESSAGE_NO_KEY_BACKUP,\n                        \"This message was sent before this device logged in, and there is no key backup on the server.\",\n                        errorDetails,\n                    );\n                } else if (!this.perSessionBackupDownloader.isKeyBackupDownloadConfigured()) {\n                    throw new DecryptionError(\n                        DecryptionFailureCode.HISTORICAL_MESSAGE_BACKUP_UNCONFIGURED,\n                        \"This message was sent before this device logged in, and key backup is not working.\",\n                        errorDetails,\n                    );\n                } else {\n                    throw new DecryptionError(\n                        DecryptionFailureCode.HISTORICAL_MESSAGE_WORKING_BACKUP,\n                        \"This message was sent before this device logged in. Key backup is working, but we still do not (yet) have the key.\",\n                        errorDetails,\n                    );\n                }\n            }\n        }\n\n        // If we got a withheld code, expose that.\n        if (err.maybe_withheld) {\n            // Unfortunately the Rust SDK API doesn't let us distinguish between different withheld cases, other than\n            // by string-matching.\n            const failureCode =\n                err.maybe_withheld === \"The sender has disabled encrypting to unverified devices.\"\n                    ? DecryptionFailureCode.MEGOLM_KEY_WITHHELD_FOR_UNVERIFIED_DEVICE\n                    : DecryptionFailureCode.MEGOLM_KEY_WITHHELD;\n            throw new DecryptionError(failureCode, err.maybe_withheld, errorDetails);\n        }\n\n        switch (err.code) {\n            case RustSdkCryptoJs.DecryptionErrorCode.MissingRoomKey:\n                throw new DecryptionError(\n                    DecryptionFailureCode.MEGOLM_UNKNOWN_INBOUND_SESSION_ID,\n                    \"The sender's device has not sent us the keys for this message.\",\n                    errorDetails,\n                );\n\n            case RustSdkCryptoJs.DecryptionErrorCode.UnknownMessageIndex:\n                throw new DecryptionError(\n                    DecryptionFailureCode.OLM_UNKNOWN_MESSAGE_INDEX,\n                    \"The sender's device has not sent us the keys for this message at this index.\",\n                    errorDetails,\n                );\n\n            case RustSdkCryptoJs.DecryptionErrorCode.SenderIdentityVerificationViolation:\n                // We're refusing to decrypt due to not trusting the sender,\n                // rather than failing to decrypt due to lack of keys, so we\n                // don't need to keep it on the pending list.\n                this.removeEventFromPendingList(event);\n                throw new DecryptionError(\n                    DecryptionFailureCode.SENDER_IDENTITY_PREVIOUSLY_VERIFIED,\n                    \"The sender identity is unverified, but was previously verified.\",\n                );\n\n            case RustSdkCryptoJs.DecryptionErrorCode.UnknownSenderDevice:\n                // We're refusing to decrypt due to not trusting the sender,\n                // rather than failing to decrypt due to lack of keys, so we\n                // don't need to keep it on the pending list.\n                this.removeEventFromPendingList(event);\n                throw new DecryptionError(\n                    DecryptionFailureCode.UNKNOWN_SENDER_DEVICE,\n                    \"The sender device is not known.\",\n                );\n\n            case RustSdkCryptoJs.DecryptionErrorCode.UnsignedSenderDevice:\n                // We're refusing to decrypt due to not trusting the sender,\n                // rather than failing to decrypt due to lack of keys, so we\n                // don't need to keep it on the pending list.\n                this.removeEventFromPendingList(event);\n                throw new DecryptionError(\n                    DecryptionFailureCode.UNSIGNED_SENDER_DEVICE,\n                    \"The sender identity is not cross-signed.\",\n                );\n\n            // We don't map MismatchedIdentityKeys for now, as there is no equivalent in legacy.\n            // Just put it on the `UNKNOWN_ERROR` bucket.\n            default:\n                throw new DecryptionError(DecryptionFailureCode.UNKNOWN_ERROR, err.description, errorDetails);\n        }\n    }\n\n    public async getEncryptionInfoForEvent(event: MatrixEvent): Promise<EventEncryptionInfo | null> {\n        if (!event.getClearContent() || event.isDecryptionFailure()) {\n            // not successfully decrypted\n            return null;\n        }\n\n        // special-case outgoing events, which the rust crypto-sdk will barf on\n        if (event.status !== null) {\n            return { shieldColour: EventShieldColour.NONE, shieldReason: null };\n        }\n\n        const encryptionInfo = await this.olmMachine.getRoomEventEncryptionInfo(\n            stringifyEvent(event),\n            new RustSdkCryptoJs.RoomId(event.getRoomId()!),\n        );\n\n        return rustEncryptionInfoToJsEncryptionInfo(this.logger, encryptionInfo);\n    }\n\n    /**\n     * Look for events which are waiting for a given megolm session\n     *\n     * Returns a list of events which were encrypted by `session` and could not be decrypted\n     */\n    public getEventsPendingRoomKey(roomId: string, sessionId: string): MatrixEvent[] {\n        const roomPendingEvents = this.eventsPendingKey.get(roomId);\n        if (!roomPendingEvents) return [];\n\n        const sessionPendingEvents = roomPendingEvents.get(sessionId);\n        if (!sessionPendingEvents) return [];\n\n        return [...sessionPendingEvents];\n    }\n\n    /**\n     * Add an event to the list of those awaiting their session keys.\n     */\n    private addEventToPendingList(event: MatrixEvent): void {\n        const roomId = event.getRoomId();\n        // We shouldn't have events without a room id here.\n        if (!roomId) return;\n\n        const roomPendingEvents = this.eventsPendingKey.getOrCreate(roomId);\n        const sessionPendingEvents = roomPendingEvents.getOrCreate(event.getWireContent().session_id);\n        sessionPendingEvents.add(event);\n    }\n\n    /**\n     * Remove an event from the list of those awaiting their session keys.\n     */\n    private removeEventFromPendingList(event: MatrixEvent): void {\n        const roomId = event.getRoomId();\n        if (!roomId) return;\n\n        const roomPendingEvents = this.eventsPendingKey.getOrCreate(roomId);\n        if (!roomPendingEvents) return;\n\n        const sessionPendingEvents = roomPendingEvents.get(event.getWireContent().session_id);\n        if (!sessionPendingEvents) return;\n\n        sessionPendingEvents.delete(event);\n\n        // also clean up the higher-level maps if they are now empty\n        if (sessionPendingEvents.size === 0) {\n            roomPendingEvents.delete(event.getWireContent().session_id);\n            if (roomPendingEvents.size === 0) {\n                this.eventsPendingKey.delete(roomId);\n            }\n        }\n    }\n}\n\nfunction stringifyEvent(event: MatrixEvent): string {\n    return JSON.stringify({\n        event_id: event.getId(),\n        type: event.getWireType(),\n        sender: event.getSender(),\n        state_key: event.getStateKey(),\n        content: event.getWireContent(),\n        origin_server_ts: event.getTs(),\n    });\n}\n\nfunction rustEncryptionInfoToJsEncryptionInfo(\n    logger: Logger,\n    encryptionInfo: RustSdkCryptoJs.EncryptionInfo | undefined,\n): EventEncryptionInfo | null {\n    if (encryptionInfo === undefined) {\n        // not decrypted here\n        return null;\n    }\n\n    // TODO: use strict shield semantics.\n    const shieldState = encryptionInfo.shieldState(false);\n\n    let shieldColour: EventShieldColour;\n    switch (shieldState.color) {\n        case RustSdkCryptoJs.ShieldColor.Grey:\n            shieldColour = EventShieldColour.GREY;\n            break;\n        case RustSdkCryptoJs.ShieldColor.None:\n            shieldColour = EventShieldColour.NONE;\n            break;\n        default:\n            shieldColour = EventShieldColour.RED;\n    }\n\n    let shieldReason: EventShieldReason | null;\n    switch (shieldState.code) {\n        case undefined:\n        case null:\n            shieldReason = null;\n            break;\n        case RustSdkCryptoJs.ShieldStateCode.AuthenticityNotGuaranteed:\n            shieldReason = EventShieldReason.AUTHENTICITY_NOT_GUARANTEED;\n            break;\n        case RustSdkCryptoJs.ShieldStateCode.UnknownDevice:\n            shieldReason = EventShieldReason.UNKNOWN_DEVICE;\n            break;\n        case RustSdkCryptoJs.ShieldStateCode.UnsignedDevice:\n            shieldReason = EventShieldReason.UNSIGNED_DEVICE;\n            break;\n        case RustSdkCryptoJs.ShieldStateCode.UnverifiedIdentity:\n            shieldReason = EventShieldReason.UNVERIFIED_IDENTITY;\n            break;\n        case RustSdkCryptoJs.ShieldStateCode.VerificationViolation:\n            shieldReason = EventShieldReason.VERIFICATION_VIOLATION;\n            break;\n        case RustSdkCryptoJs.ShieldStateCode.MismatchedSender:\n            shieldReason = EventShieldReason.MISMATCHED_SENDER;\n            break;\n        default:\n            shieldReason = EventShieldReason.UNKNOWN;\n            break;\n    }\n\n    return { shieldColour, shieldReason };\n}\n\ninterface RoomKeyBundleMessage {\n    type: \"m.room_key_bundle\" | \"io.element.msc4268.room_key_bundle\";\n    content: {\n        room_id: string;\n    };\n}\n\n/**\n * Determines if the given payload is a RoomKeyBundleMessage.\n *\n * A RoomKeyBundleMessage is identified by having a specific message type\n * (\"m.room_key_bundle\") and a valid room_id in its content.\n *\n * @param message - The received to-device message to check.\n * @returns True if the payload matches the RoomKeyBundleMessage structure, false otherwise.\n */\nfunction isRoomKeyBundleMessage(message: IToDeviceEvent): message is IToDeviceEvent & RoomKeyBundleMessage {\n    return (\n        (message.type === \"io.element.msc4268.room_key_bundle\" || message.type === \"m.room_key_bundle\") &&\n        typeof message.content.room_id === \"string\"\n    );\n}\n\ntype CryptoEvents = (typeof CryptoEvent)[keyof typeof CryptoEvent];\ntype RustCryptoEvents = Exclude<CryptoEvents, CryptoEvent.LegacyCryptoStoreMigrationProgress>;\n"],"mappings":";;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,WAAW,MAAM,cAAc;AACtC,OAAO,KAAKC,eAAe,MAAM,oCAAoC;AAGrE,SAASC,eAAe,QAAQ,yBAAyB;AAGzD,SAA2BC,gBAAgB,QAAQ,oBAAoB;AAGvE,SAGIC,eAAe,QAGZ,mCAAmC;AAC1C,SAAsBC,OAAO,QAAQ,cAAc;AACnD,SAA6CC,MAAM,QAAQ,sBAAsB;AACjF,SAASC,aAAa,QAAQ,oBAAoB;AAClD,SAASC,wBAAwB,QAAQ,+BAA+B;AACxE,SAASC,eAAe,QAAQ,sBAAsB;AACtD,SAASC,cAAc,QAAQ,aAAa;AAC5C,SACIC,uBAAuB,EAIvBC,eAAe,EAKfC,WAAW,EAEXC,qBAAqB,EACrBC,8BAA8B,EAC9BC,+BAA+B,EAE/BC,uBAAuB,EACvBC,wBAAwB,EACxBC,iBAAiB,EAEjBC,iBAAiB,EACjBC,iBAAiB,EAGjBC,kBAAkB,EAQlBC,sBAAsB,QAEnB,wBAAwB;AAC/B,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,uBAAuB;AAGnF,SACIC,+BAA+B,QAG5B,sBAAsB;AAC7B,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,qCAAqC,QAAQ,qBAAqB;AAC3E,SAASC,mBAAmB,EAAEC,uBAAuB,EAAEC,oCAAoC,QAAQ,mBAAmB;AACtH,SAASC,SAAS,EAAEC,OAAO,QAAQ,oBAAoB;AACvD,SAASC,iBAAiB,QAAQ,kCAAkC;AACpE,SAASC,iCAAiC,EAAEC,iBAAiB,QAAQ,aAAa;AAClF,SAASC,cAAc,QAAQ,iBAAiB;AAChD,SAASC,kBAAkB,QAAQ,oBAAoB;AACvD,SAASC,kBAAkB,QAAQ,cAAc;AAEjD,SAASC,YAAY,EAAEC,YAAY,QAAQ,cAAc;AACzD,SAASC,uBAAuB,QAAQ,8BAA8B;AACtE,SAASC,6BAA6B,QAAQ,oCAAoC;AAClF,SAASC,uBAAuB,QAAQ,8BAA8B;AACtE,SAASC,kBAAkB,QAAQ,aAAa;AAChD,SAASC,eAAe,QAAQ,oCAAoC;AAEpE,SAASC,gBAAgB,QAAQ,oBAAoB;AAGrD,IAAMC,wBAAwB,GAAG,CAC7BH,kBAAkB,CAACI,GAAG,EACtBJ,kBAAkB,CAACK,UAAU,EAC7BL,kBAAkB,CAACM,UAAU,EAC7BN,kBAAkB,CAACO,WAAW,CACjC;AAOD;AACA,OAAO,IAAMC,uCAAuC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;;AAE5E;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,UAAU,SAASpB,iBAAiB,CAAmE;EAyBzGqB,WAAWA,CACGC,MAAc,EAE/B;EACiBC,UAAsC;EAEvD;AACR;AACA;AACA;AACA;EACyBC,IAAmD,EAEpE;EACiBC,MAAc,EAE/B;EACAC,SAAiB,EAEjB;EACiBC,aAAsC,EAEvD;EACiBC,eAAgC,EAInD;IAAA,IADmBC,0BAAmC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,KAAK;IAE5D,KAAK,CAAC,CAAC;IApDX;AACJ;AACA;IAFIG,eAAA,6CAGsD,MAAM;IAAAA,eAAA,mCAEzB,IAAI;IAAAA,eAAA,8BACY,IAAIxD,uBAAuB,CAAC,KAAK,CAAC;IAErF;IAAAwD,eAAA,kBACkB,KAAK;IAEvB;IAAAA,eAAA,yBACwD,CAAC,CAAC;IAAAA,eAAA,oBAU7B,IAAI9B,cAAc,CAA0C,IAAI,CAAC;IAkR9F;IACA;IACA;IACA;IACA;IAAA8B,eAAA,2CAE0C,KAAK;IAqwB/C;AACJ;AACA;IAFIA,eAAA,wCAGkDnB,wBAAwB;IAAA,KA7hCrDQ,MAAc,GAAdA,MAAc;IAAA,KAGdC,UAAsC,GAAtCA,UAAsC;IAAA,KAOtCC,IAAmD,GAAnDA,IAAmD;IAAA,KAGnDC,MAAc,GAAdA,MAAc;IAAA,KAMdE,aAAsC,GAAtCA,aAAsC;IAAA,KAGtCC,eAAgC,GAAhCA,eAAgC;IAAA,KAGhCC,0BAAmC,GAAnCA,0BAAmC;IAGpD,IAAI,CAACK,wBAAwB,GAAG,IAAI5D,wBAAwB,CAACgD,MAAM,EAAEC,UAAU,EAAEC,IAAI,CAAC;IACtF,IAAI,CAACW,uBAAuB,GAAG,IAAI3B,uBAAuB,CACtD,IAAI,CAACc,MAAM,EACXC,UAAU,EACV,IAAI,CAACW,wBACT,CAAC;IAED,IAAI,CAACE,eAAe,GAAG,IAAI7D,eAAe,CAACgD,UAAU,EAAE,IAAI,CAACW,wBAAwB,CAAC;IAErF,IAAI,CAACG,aAAa,GAAG,IAAInC,iBAAiB,CAACoB,MAAM,EAAEC,UAAU,EAAEC,IAAI,EAAE,IAAI,CAACU,wBAAwB,CAAC;IACnG,IAAI,CAACI,0BAA0B,GAAG,IAAI7B,6BAA6B,CAC/D,IAAI,CAACa,MAAM,EACX,IAAI,CAACC,UAAU,EACf,IAAI,CAACC,IAAI,EACT,IAAI,CAACa,aACT,CAAC;IACD,IAAI,CAACE,uBAAuB,GAAG,IAAI7B,uBAAuB,CACtD,IAAI,CAACY,MAAM,EACXC,UAAU,EACVC,IAAI,EACJ,IAAI,CAACU,wBAAwB,EAC7BP,aACJ,CAAC;IACD,IAAI,CAACa,cAAc,GAAG,IAAIC,cAAc,CAAC,IAAI,CAACnB,MAAM,EAAEC,UAAU,EAAE,IAAI,CAACe,0BAA0B,CAAC;;IAElG;IACA,IAAI,CAACI,SAAS,CAACC,MAAM,CAAC,IAAI,CAACN,aAAa,EAAE,CACtC1D,WAAW,CAACiE,eAAe,EAC3BjE,WAAW,CAACkE,0BAA0B,EACtClE,WAAW,CAACmE,eAAe,EAC3BnE,WAAW,CAACoE,4BAA4B,CAC3C,CAAC;IACF,IAAI,CAACL,SAAS,CAACC,MAAM,CAAC,IAAI,CAACJ,uBAAuB,EAAE,CAChD5D,WAAW,CAACqE,uBAAuB,EACnCrE,WAAW,CAACsE,wBAAwB,EACpCtE,WAAW,CAACuE,kBAAkB,EAC9BvE,WAAW,CAACwE,mBAAmB,EAC/BxE,WAAW,CAACyE,oBAAoB,EAChCzE,WAAW,CAAC0E,gBAAgB,EAC5B1E,WAAW,CAAC2E,oBAAoB,EAChC3E,WAAW,CAAC4E,6BAA6B,CAC5C,CAAC;IAEF,IAAI,CAACC,oBAAoB,GAAG,IAAI/D,oBAAoB,CAChD6B,MAAM,EACNC,UAAU,EACV,IAAI,CAACW,wBAAwB,EAC7BP,aACJ,CAAC;;IAED;IACA,IAAI,CAAC8B,uBAAuB,CAAC,CAAC;EAClC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACYC,oBAAoBA,CAAA,EAA+B;IACvD,IAAI,IAAI,CAACC,OAAO,EAAE;MACd,MAAM,IAAItD,kBAAkB,CAAC,CAAC;IAClC;IACA,OAAO,IAAI,CAACkB,UAAU;EAC1B;;EAEA;EACA;EACA;EACA;EACA;;EAEA,IAAWqC,2BAA2BA,CAACC,EAAW,EAAE;IAChD;EAAA;EAGJ,IAAWD,2BAA2BA,CAAA,EAAY;IAC9C;IACA,OAAO,KAAK;EAChB;EAEOE,IAAIA,CAAA,EAAS;IAChB;IACA;IACA,IAAI,IAAI,CAACH,OAAO,EAAE;MACd;IACJ;IACA,IAAI,CAACA,OAAO,GAAG,IAAI;IAEnB,IAAI,CAACvB,eAAe,CAAC0B,IAAI,CAAC,CAAC;IAC3B,IAAI,CAACzB,aAAa,CAACyB,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC3B,uBAAuB,CAAC2B,IAAI,CAAC,CAAC;IACnC,IAAI,CAACxB,0BAA0B,CAACwB,IAAI,CAAC,CAAC;IACtC,IAAI,CAACvB,uBAAuB,CAACuB,IAAI,CAAC,CAAC;;IAEnC;IACA;IACA;IACA,IAAI,CAACvC,UAAU,CAACwC,KAAK,CAAC,CAAC;EAC3B;EAEaC,YAAYA,CAACC,KAAkB,EAAEC,KAAW,EAAiB;IAAA,IAAAC,KAAA;IAAA,OAAAC,iBAAA;MACtE,IAAMC,MAAM,GAAGJ,KAAK,CAACK,SAAS,CAAC,CAAE;MACjC,IAAMC,SAAS,GAAGJ,KAAI,CAACK,cAAc,CAACH,MAAM,CAAC;MAE7C,IAAI,CAACE,SAAS,EAAE;QACZ,MAAM,IAAIE,KAAK,8CAAAC,MAAA,CAA8CL,MAAM,CAAE,CAAC;MAC1E;MAEA,MAAME,SAAS,CAACP,YAAY,CAACC,KAAK,EAAEE,KAAI,CAACQ,gCAAgC,EAAER,KAAI,CAACS,mBAAmB,CAAC;IAAC;EACzG;EAEaC,YAAYA,CAACZ,KAAkB,EAAkC;IAAA,IAAAa,MAAA;IAAA,OAAAV,iBAAA;MAC1E,IAAMC,MAAM,GAAGJ,KAAK,CAACK,SAAS,CAAC,CAAC;MAChC,IAAI,CAACD,MAAM,EAAE;QACT;QACA;QACA;QACA;QACA;QACA,MAAM,IAAII,KAAK,CAAC,iEAAiE,CAAC;MACtF;MACA,aAAaK,MAAI,CAACtC,cAAc,CAACuC,sBAAsB,CAACd,KAAK,EAAEa,MAAI,CAACF,mBAAmB,CAAC;IAAC;EAC7F;;EAEA;AACJ;AACA;EACiBI,kBAAkBA,CAACC,UAAyB,EAAEC,OAAmB,EAA4B;IAAA,IAAAC,MAAA;IAAA,OAAAf,iBAAA;MACtG,IAAI,EAAEc,OAAO,YAAYE,UAAU,CAAC,EAAE;QAClC,MAAM,IAAIX,KAAK,yCAAyC,CAAC;MAC7D;MAEA,IAAIQ,UAAU,CAACI,SAAS,IAAI,wCAAwC,EAAE;QAClE,MAAM,IAAIZ,KAAK,8CAAAC,MAAA,CAA8CO,UAAU,CAACI,SAAS,CAAE,CAAC;MACxF;MAEA,IAAMC,mBAAmB,GAAGvH,eAAe,CAACwH,mBAAmB,CAACC,UAAU,CAACjF,YAAY,CAAC2E,OAAO,CAAC,CAAC;MACjG,IAAI,CAACjF,iCAAiC,CAACqF,mBAAmB,EAAEL,UAAU,CAAC,EAAE;QACrE,MAAM,IAAIR,KAAK,6EAA6E,CAAC;MACjG;MAEA,OAAOU,MAAI,CAAC9C,aAAa,CAACoD,qBAAqB,CAACH,mBAAmB,CAAC;IAAC;EACzE;;EAEA;AACJ;AACA;EACiBI,sBAAsBA,CAC/BC,IAA0B,EAC1BC,aAAqB,EACrBC,IAAyB,EACZ;IAAA,IAAAC,MAAA;IAAA,OAAA1B,iBAAA;MACb,aAAa0B,MAAI,CAACzD,aAAa,CAACqD,sBAAsB,CAACC,IAAI,EAAEC,aAAa,EAAEC,IAAI,CAAC;IAAC;EACtF;;EAEA;AACJ;AACA;EACiBE,oBAAoBA,CAAC1B,MAAc,EAAE2B,OAAe,EAAoB;IAAA,IAAAC,MAAA;IAAA,OAAA7B,iBAAA;MACjF;MACA;;MAEA,IAAM9C,MAAM,GAAG,IAAInD,OAAO,CAAC8H,MAAI,CAAC3E,MAAM,0BAAAoD,MAAA,CAA0BL,MAAM,QAAAK,MAAA,CAAKsB,OAAO,MAAG,CAAC;;MAEtF;MACA;MACA;MACA;MACA;MACA;MACA1E,MAAM,CAAC4E,IAAI,sCAAsC,CAAC;MAClD,IAAMC,OAAO,GAAGF,MAAI,CAAC1E,UAAU,CAAC6E,iBAAiB,CAAC,CAAC,IAAIrI,eAAe,CAACsI,MAAM,CAACL,OAAO,CAAC,CAAC,CAAC;MACxF,MAAMC,MAAI,CAAC/D,wBAAwB,CAACoE,mBAAmB,CAACH,OAAO,CAAC;MAEhE,IAAMI,UAAU,SAASN,MAAI,CAAC1E,UAAU,CAACiF,4BAA4B,CACjE,IAAIzI,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,EAClC,IAAItG,eAAe,CAACsI,MAAM,CAACL,OAAO,CACtC,CAAC;MACD,IAAI,CAACO,UAAU,EAAE;QACbjF,MAAM,CAAC4E,IAAI,CAAC,8BAA8B,CAAC;QAC3C,OAAO,KAAK;MAChB;MAEA5E,MAAM,CAAC4E,IAAI,wBAAAxB,MAAA,CAAwB6B,UAAU,CAACG,GAAG,CAAE,CAAC;MACpD,IAAMA,GAAG,GAAG7F,gBAAgB,CACxBoF,MAAI,CAACzE,IAAI,CAACqE,IAAI,CAACc,OAAO,EACtBJ,UAAU,CAACG,GAAG,EACd1E,SAAS,EACTA,SAAS,EACTA,SAAS,EACT,sBAAuB,KAAK,EAC5B,oBAAqB,IAAI,EACzB,uBAAwB,IAC5B,CAAC;MACD,IAAI4E,eAA2B;MAC/B,IAAI;QACA,IAAMC,SAAS,GAAG,IAAIC,GAAG,CAACJ,GAAG,CAAC;QAC9B,IAAMK,mBAAmB,SAASd,MAAI,CAACzE,IAAI,CAACwF,aAAa,CACrD5I,MAAM,CAAC6I,GAAG,EACVJ,SAAS,CAACK,QAAQ,GAAGL,SAAS,CAACM,MAAM,EACrC,CAAC,CAAC,EACFnF,SAAS,EACT;UACIoF,eAAe,EAAE,IAAI;UACrBC,MAAM,EAAE;QACZ,CACJ,CAAC;QACD/F,MAAM,CAAC4E,IAAI,4BAAAxB,MAAA,CAA4BqC,mBAAmB,CAACO,IAAI,CAAE,CAAC;QAClEV,eAAe,GAAG,IAAIxB,UAAU,OAAO2B,mBAAmB,CAACQ,WAAW,CAAC,CAAC,CAAC;MAC7E,CAAC,CAAC,OAAOC,GAAG,EAAE;QACVlG,MAAM,CAACmG,IAAI,4CAAA/C,MAAA,CAA4CgC,GAAG,QAAKc,GAAG,CAAC;QACnE,MAAMA,GAAG;MACb;MAEA,IAAI;QACA,MAAMvB,MAAI,CAAC1E,UAAU,CAACmG,oBAAoB,CAACnB,UAAU,EAAEK,eAAe,CAAC;MAC3E,CAAC,CAAC,OAAOY,GAAG,EAAE;QACVlG,MAAM,CAACmG,IAAI,sCAAsCD,GAAG,CAAC;QAErD,MAAMA,GAAG;MACb,CAAC,SAAS;QACN;QACA;QACA;QACA,MAAMvB,MAAI,CAAC1E,UAAU,CAACoG,yBAAyB,CAAC,IAAI5J,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,CAAC;MACvF;MAEA,OAAO,IAAI;IAAC;EAChB;;EAEA;AACJ;AACA;EACiBuD,0BAA0BA,CAACvD,MAAc,EAAE2B,OAAe,EAAiB;IAAA,IAAA6B,MAAA;IAAA,OAAAzD,iBAAA;MACpF,MAAMyD,MAAI,CAACtG,UAAU,CAACuG,yBAAyB,CAC3C,IAAI/J,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,EAClC,IAAItG,eAAe,CAACsI,MAAM,CAACL,OAAO,CACtC,CAAC;IAAC;EACN;EAUA;AACJ;AACA;EACW+B,UAAUA,CAAA,EAAW;IACxB,IAAMC,QAAQ,GAAGjK,eAAe,CAACkK,WAAW,CAAC,CAAC;IAC9C,mBAAAvD,MAAA,CAAmBsD,QAAQ,CAACE,iBAAiB,QAAAxD,MAAA,CAAKsD,QAAQ,CAACG,OAAO,mBAAAzD,MAAA,CAAgBsD,QAAQ,CAACI,SAAS;EACxG;;EAEA;AACJ;AACA;EACWC,sBAAsBA,CAACC,aAAkC,EAAQ;IACpE,IAAI,CAAC1D,mBAAmB,GAAG0D,aAAa;EAC5C;;EAEA;AACJ;AACA;EACiBC,yBAAyBA,CAAClE,MAAc,EAAoB;IAAA,IAAAmE,MAAA;IAAA,OAAApE,iBAAA;MACrE,IAAMqE,YAAsD,SAASD,MAAI,CAACjH,UAAU,CAACmH,eAAe,CAChG,IAAI3K,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CACrC,CAAC;MACD,OAAOsE,OAAO,CAACF,YAAY,aAAZA,YAAY,uBAAZA,YAAY,CAAEpD,SAAS,CAAC;IAAC;EAC5C;;EAEA;AACJ;AACA;EACiBuD,8BAA8BA,CAACvE,MAAc,EAAoB;IAAA,IAAAwE,MAAA;IAAA,OAAAzE,iBAAA;MAC1E,IAAMqE,YAAsD,SAASI,MAAI,CAACtH,UAAU,CAACmH,eAAe,CAChG,IAAI3K,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CACrC,CAAC;MACD,OAAOsE,OAAO,CAACF,YAAY,aAAZA,YAAY,uBAAZA,YAAY,CAAEK,kBAAkB,CAAC;IAAC;EACrD;;EAEA;AACJ;AACA;EACiBC,gBAAgBA,CAAA,EAA2B;IAAA,IAAAC,MAAA;IAAA,OAAA5E,iBAAA;MACpD,IAAMuB,IAAI,GAAGqD,MAAI,CAACzH,UAAU,CAAC0H,YAAY;MACzC,OAAO;QAAEC,OAAO,EAAEvD,IAAI,CAACuD,OAAO,CAACC,QAAQ,CAAC,CAAC;QAAEC,UAAU,EAAEzD,IAAI,CAACyD,UAAU,CAACD,QAAQ,CAAC;MAAE,CAAC;IAAC;EACxF;EAEOE,gBAAgBA,CAACC,IAAU,EAAQ;IACtC,IAAM/E,SAAS,GAAG,IAAI,CAACC,cAAc,CAAC8E,IAAI,CAACjF,MAAM,CAAC;IAElD,IAAIE,SAAS,EAAE;MACXA,SAAS,CAACgF,oBAAoB,CAAC,IAAI,CAAC5E,gCAAgC,EAAE,IAAI,CAACC,mBAAmB,CAAC;IACnG;EACJ;EAEO4E,mBAAmBA,CAACnF,MAAc,EAAiB;IAAA,IAAAoF,qBAAA;IACtD,QAAAA,qBAAA,GAAO,IAAI,CAACjF,cAAc,CAACH,MAAM,CAAC,cAAAoF,qBAAA,uBAA3BA,qBAAA,CAA6BD,mBAAmB,CAAC,CAAC;EAC7D;EAEaE,cAAcA,CAAA,EAAkC;IAAA,IAAAC,MAAA;IAAA,OAAAvF,iBAAA;MACzD,IAAMwF,GAAG,SAASD,MAAI,CAACpI,UAAU,CAACmI,cAAc,CAAC,MAAM,IAAI,CAAC;MAC5D,OAAOG,IAAI,CAACC,KAAK,CAACF,GAAG,CAAC;IAAC;EAC3B;EAEaG,oBAAoBA,CAAA,EAAoB;IAAA,IAAAC,MAAA;IAAA,OAAA5F,iBAAA;MACjD,aAAa4F,MAAI,CAACzI,UAAU,CAACmI,cAAc,CAAC,MAAM,IAAI,CAAC;IAAC;EAC5D;EAEaO,cAAcA,CAACtE,IAA0B,EAAEE,IAAyB,EAAiB;IAAA,IAAAqE,OAAA;IAAA,OAAA9F,iBAAA;MAC9F,aAAa8F,OAAI,CAAC7H,aAAa,CAAC4H,cAAc,CAACtE,IAAI,EAAEE,IAAI,CAAC;IAAC;EAC/D;EAEasE,oBAAoBA,CAACxE,IAAY,EAAEE,IAAyB,EAAiB;IAAA,IAAAuE,OAAA;IAAA,OAAAhG,iBAAA;MACtF,aAAagG,OAAI,CAAC/H,aAAa,CAAC8H,oBAAoB,CAACxE,IAAI,EAAEE,IAAI,CAAC;IAAC;EACrE;;EAEA;AACJ;AACA;EACiBwE,uBAAuBA,CAAA,EAAmE;IAAA,IAAAC,UAAA,GAAAxI,SAAA;MAAAyI,OAAA;IAAA,OAAAnG,iBAAA;MAAA,IAAlE3C,MAAM,GAAA6I,UAAA,CAAAvI,MAAA,QAAAuI,UAAA,QAAAtI,SAAA,GAAAsI,UAAA,MAAGC,OAAI,CAAC9I,MAAM;MAAA,IAAE+I,gBAAgB,GAAAF,UAAA,CAAAvI,MAAA,QAAAuI,UAAA,QAAAtI,SAAA,GAAAsI,UAAA,MAAG,KAAK;MAC/E;MACA,IAAMG,gBAA6C,SAASF,OAAI,CAAChJ,UAAU,CAACmJ,YAAY,CAAC,CAAC;MAC1F,IAAIC,eAAmD;MACvD,KAAK,IAAMC,CAAC,IAAIH,gBAAgB,EAAE;QAC9B,IAAIhJ,MAAM,KAAKmJ,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE;UACzBF,eAAe,GAAGC,CAAC;UACnB;QACJ;MACJ;MAEA,IAAID,eAAe,KAAK3I,SAAS,EAAE;QAC/B,IAAIP,MAAM,KAAK8I,OAAI,CAAC9I,MAAM,EAAE;UACxB;AAChB;AACA;UACgB,IAAM0E,OAAO,GAAGoE,OAAI,CAAChJ,UAAU,CAAC6E,iBAAiB;UAC7C;UACA,CAACuE,eAAe,CAACG,KAAK,CAAC,CAAC,CAC5B,CAAC;UACD,MAAMP,OAAI,CAACrI,wBAAwB,CAACoE,mBAAmB,CAACH,OAAO,CAAC;QACpE;QACA,IAAM4E,YAAY,SAASR,OAAI,CAAChJ,UAAU,CAACyJ,WAAW,CAACL,eAAe,CAAC;QACvEI,YAAY,aAAZA,YAAY,eAAZA,YAAY,CAAEE,IAAI,CAAC,CAAC;QACpB,OAAOF,YAAY,KAAK/I,SAAS;MACrC,CAAC,MAAM,IAAIwI,gBAAgB,EAAE;QAAA,IAAAU,qBAAA;QACzB;QACA,IAAMC,SAAS,SAASZ,OAAI,CAACa,kBAAkB,CAAC,IAAIC,GAAG,CAAC,CAAC5J,MAAM,CAAC,CAAC,CAAC;QAClE,IAAMkE,IAAI,IAAAuF,qBAAA,GAAGC,SAAS,CAACG,WAAW,cAAAJ,qBAAA,uBAArBA,qBAAA,CAAwBzJ,MAAM,CAAC;;QAE5C;QACA,IAAI,CAACkE,IAAI,EAAE,OAAO,KAAK;;QAEvB;QACA;QACA;QACA,OAAOgD,OAAO,CAAC4C,MAAM,CAACC,MAAM,CAAC7F,IAAI,CAACA,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;MAC/C,CAAC,MAAM;QACH,OAAO,KAAK;MAChB;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiB8F,iBAAiBA,CAACC,OAAiB,EAAgD;IAAA,IAAAC,WAAA,GAAA7J,SAAA;MAAA8J,OAAA;IAAA,OAAAxH,iBAAA;MAAA,IAA9CoG,gBAAgB,GAAAmB,WAAA,CAAA5J,MAAA,QAAA4J,WAAA,QAAA3J,SAAA,GAAA2J,WAAA,MAAG,KAAK;MACtE,IAAME,iBAAiB,GAAG,IAAIC,GAAG,CAA8B,CAAC;MAChE,IAAMrB,gBAA6C,SAASmB,OAAI,CAAClI,oBAAoB,CAAC,CAAC,CAACgH,YAAY,CAAC,CAAC;;MAEtG;MACA,IAAMA,YAAY,GAAG,IAAIW,GAAG,CAAS,CAAC;MACtCZ,gBAAgB,CAACsB,OAAO,CAAEC,UAAU,IAAKtB,YAAY,CAACuB,GAAG,CAACD,UAAU,CAACnB,QAAQ,CAAC,CAAC,CAAC,CAAC;;MAEjF;MACA,IAAMqB,cAA2B,GAAG,IAAIb,GAAG,CAAC,CAAC;MAE7C,KAAK,IAAM5J,OAAM,IAAIiK,OAAO,EAAE;QAC1B;QACA;QACA;QACA,IAAIhB,YAAY,CAACyB,GAAG,CAAC1K,OAAM,CAAC,EAAE;UAC1BoK,iBAAiB,CAACO,GAAG,CAAC3K,OAAM,QAAQmK,OAAI,CAACS,cAAc,CAAC5K,OAAM,CAAC,CAAC;QACpE,CAAC,MAAM;UACHyK,cAAc,CAACD,GAAG,CAACxK,OAAM,CAAC;QAC9B;MACJ;;MAEA;MACA;MACA,IAAI+I,gBAAgB,IAAI0B,cAAc,CAAC5E,IAAI,IAAI,CAAC,EAAE;QAC9C,IAAMgF,WAAW,SAASV,OAAI,CAACR,kBAAkB,CAACc,cAAc,CAAC;QACjEX,MAAM,CAACgB,OAAO,CAACD,WAAW,CAACE,WAAW,CAAC,CAACT,OAAO,CAACU,IAAA;UAAA,IAAAC,KAAA,GAAAC,cAAA,CAAAF,IAAA;YAAEhL,MAAM,GAAAiL,KAAA;YAAEE,UAAU,GAAAF,KAAA;UAAA,OAChEb,iBAAiB,CAACO,GAAG,CAAC3K,MAAM,EAAEnC,qBAAqB,CAACsN,UAAU,CAAC,CAAC;QAAA,CACpE,CAAC;MACL;MAEA,OAAOf,iBAAiB;IAAC;EAC7B;;EAEA;AACJ;AACA;AACA;EACkBQ,cAAcA,CAAC5K,MAAc,EAAgC;IAAA,IAAAoL,OAAA;IAAA,OAAAzI,iBAAA;MACvE,IAAM4H,UAAU,GAAG,IAAIjO,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC;;MAErD;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA;MACA;MACA,IAAMqL,WAAwC,SAASD,OAAI,CAACtL,UAAU,CAAC8K,cAAc,CAACL,UAAU,EAAE,CAAC,CAAC;MACpG,IAAI;QACA,IAAMe,WAAqC,GAAGD,WAAW,CAACE,OAAO,CAAC,CAAC;QACnE,IAAI;UACA,OAAO,IAAIlB,GAAG,CACViB,WAAW,CAACE,GAAG,CAAEC,MAAM,IAAK,CAACA,MAAM,CAACC,QAAQ,CAACtC,QAAQ,CAAC,CAAC,EAAEtL,oBAAoB,CAAC2N,MAAM,EAAElB,UAAU,CAAC,CAAC,CACtG,CAAC;QACL,CAAC,SAAS;UACNe,WAAW,CAAChB,OAAO,CAAEqB,CAAC,IAAKA,CAAC,CAACnC,IAAI,CAAC,CAAC,CAAC;QACxC;MACJ,CAAC,SAAS;QACN6B,WAAW,CAAC7B,IAAI,CAAC,CAAC;MACtB;IAAC;EACL;;EAEA;AACJ;AACA;AACA;EACkBG,kBAAkBA,CAACc,cAA2B,EAA+B;IAAA,IAAAmB,OAAA;IAAA,OAAAjJ,iBAAA;MACvF,IAAMkJ,SAA4B,GAAG;QAAEd,WAAW,EAAE,CAAC;MAAE,CAAC;MACxDN,cAAc,CAACH,OAAO,CAAEwB,IAAI,IAAMD,SAAS,CAACd,WAAW,CAACe,IAAI,CAAC,GAAG,EAAG,CAAC;MAEpE,aAAaF,OAAI,CAAC7L,IAAI,CAACwF,aAAa,CAAC5I,MAAM,CAACoP,IAAI,EAAE,+BAA+B,EAAExL,SAAS,EAAEsL,SAAS,EAAE;QACrGjG,MAAM,EAAE;MACZ,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;EACWoG,0BAA0BA,CAAA,EAAY;IACzC,OAAO,IAAI,CAACC,wBAAwB;EACxC;;EAEA;AACJ;AACA;EACWC,0BAA0BA,CAACC,GAAY,EAAQ;IAClD,IAAI,CAACF,wBAAwB,GAAGE,GAAG;IACnC;IACA;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACiBC,iBAAiBA,CAACpM,MAAc,EAAE0L,QAAgB,EAAkC;IAAA,IAAAW,WAAA,GAAAhM,SAAA;MAAAiM,OAAA;IAAA,OAAA3J,iBAAA;MAAA,IAAhC4J,QAAQ,GAAAF,WAAA,CAAA/L,MAAA,QAAA+L,WAAA,QAAA9L,SAAA,GAAA8L,WAAA,MAAG,IAAI;MAC5E,IAAMZ,MAA0C,SAASa,OAAI,CAACxM,UAAU,CAAC0M,SAAS,CAC9E,IAAIlQ,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,EAClC,IAAI1D,eAAe,CAACmQ,QAAQ,CAACf,QAAQ,CACzC,CAAC;MAED,IAAI,CAACD,MAAM,EAAE;QACT,MAAM,IAAIzI,KAAK,mBAAAC,MAAA,CAAmBjD,MAAM,OAAAiD,MAAA,CAAIyI,QAAQ,CAAE,CAAC;MAC3D;MACA,IAAI;QACA,MAAMD,MAAM,CAACiB,aAAa,CACtBH,QAAQ,GAAGjQ,eAAe,CAACqQ,UAAU,CAACC,QAAQ,GAAGtQ,eAAe,CAACqQ,UAAU,CAACE,KAChF,CAAC;MACL,CAAC,SAAS;QACNpB,MAAM,CAACjC,IAAI,CAAC,CAAC;MACjB;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACiBsD,eAAeA,CAACpB,QAAgB,EAAiB;IAAA,IAAAqB,OAAA;IAAA,OAAApK,iBAAA;MAC1D,IAAM8I,MAA0C,SAASsB,OAAI,CAACjN,UAAU,CAAC0M,SAAS,CAC9E,IAAIlQ,eAAe,CAACsI,MAAM,CAACmI,OAAI,CAAC/M,MAAM,CAAC,EACvC,IAAI1D,eAAe,CAACmQ,QAAQ,CAACf,QAAQ,CACzC,CAAC;MACD,IAAI,CAACD,MAAM,EAAE;QACT,MAAM,IAAIzI,KAAK,mBAAAC,MAAA,CAAmByI,QAAQ,CAAE,CAAC;MACjD;MACA,IAAI;QACA,IAAMsB,eAAuD,SAASvB,MAAM,CAACwB,MAAM,CAAC,CAAC;QACrF,MAAMF,OAAI,CAACtM,wBAAwB,CAACoE,mBAAmB,CAACmI,eAAe,CAAC;MAC5E,CAAC,SAAS;QACNvB,MAAM,CAACjC,IAAI,CAAC,CAAC;MACjB;IAAC;EACL;;EAEA;AACJ;AACA;EACiB0D,2BAA2BA,CACpClN,MAAc,EACd0L,QAAgB,EACwB;IAAA,IAAAyB,OAAA;IAAA,OAAAxK,iBAAA;MACxC,IAAM8I,MAA0C,SAAS0B,OAAI,CAACrN,UAAU,CAAC0M,SAAS,CAC9E,IAAIlQ,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,EAClC,IAAI1D,eAAe,CAACmQ,QAAQ,CAACf,QAAQ,CACzC,CAAC;MAED,IAAI,CAACD,MAAM,EAAE,OAAO,IAAI;MACxB,IAAI;QACA,OAAO,IAAIlO,wBAAwB,CAAC;UAChC6P,aAAa,EAAE3B,MAAM,CAAC4B,oBAAoB,CAAC,CAAC;UAC5CC,oBAAoB,EAAE7B,MAAM,CAAC8B,qBAAqB,CAAC,CAAC;UACpDC,aAAa,EAAE/B,MAAM,CAACgC,gBAAgB,CAAC,CAAC;UACxCC,uBAAuB,EAAEP,OAAI,CAAClB;QAClC,CAAC,CAAC;MACN,CAAC,SAAS;QACNR,MAAM,CAACjC,IAAI,CAAC,CAAC;MACjB;IAAC;EACL;;EAEA;AACJ;AACA;EACiBmE,yBAAyBA,CAAC3N,MAAc,EAAmC;IAAA,IAAA4N,OAAA;IAAA,OAAAjL,iBAAA;MACpF,IAAM2G,YAA6F,SACzFsE,OAAI,CAAC3L,oBAAoB,CAAC,CAAC,CAACsH,WAAW,CAAC,IAAIjN,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAAC;MACrF,IAAIsJ,YAAY,KAAK/I,SAAS,EAAE;QAC5B,OAAO,IAAI3C,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;MAC1D;MAEA,IAAM2O,QAAQ,GAAGjD,YAAY,CAACuE,UAAU,CAAC,CAAC;MAC1C,IAAMC,WAAW,GAAGxE,YAAY,CAACyE,qBAAqB,CAAC,CAAC;MACxD,IAAMC,iBAAiB,GACnB1E,YAAY,YAAYhN,eAAe,CAAC2R,iBAAiB,GACnD3E,YAAY,CAAC4E,yBAAyB,CAAC,CAAC,GACxC,KAAK;MACf5E,YAAY,CAACE,IAAI,CAAC,CAAC;MACnB,OAAO,IAAI5L,sBAAsB,CAAC2O,QAAQ,EAAEuB,WAAW,EAAE,IAAI,EAAEE,iBAAiB,CAAC;IAAC;EACtF;;EAEA;AACJ;AACA;EACiBG,sBAAsBA,CAACnO,MAAc,EAAiB;IAAA,IAAAoO,OAAA;IAAA,OAAAzL,iBAAA;MAC/D,IAAM2G,YAA6F,SACzF8E,OAAI,CAACnM,oBAAoB,CAAC,CAAC,CAACsH,WAAW,CAAC,IAAIjN,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAAC;MAErF,IAAIsJ,YAAY,KAAK/I,SAAS,EAAE;QAC5B,MAAM,IAAIyC,KAAK,CAAC,qCAAqC,CAAC;MAC1D;MAEA,IAAIsG,YAAY,YAAYhN,eAAe,CAAC+R,eAAe,EAAE;QACzD,MAAM,IAAIrL,KAAK,CAAC,iCAAiC,CAAC;MACtD;MAEA,MAAMsG,YAAY,CAACgF,mBAAmB,CAAC,CAAC;IAAC;EAC7C;;EAEA;AACJ;AACA;EACiBC,+BAA+BA,CAACvO,MAAc,EAAiB;IAAA,IAAAwO,OAAA;IAAA,OAAA7L,iBAAA;MACxE,IAAM2G,YAA6F,SACzFkF,OAAI,CAACvM,oBAAoB,CAAC,CAAC,CAACsH,WAAW,CAAC,IAAIjN,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAAC;MAErF,IAAIsJ,YAAY,KAAK/I,SAAS,EAAE;QAC5B,MAAM,IAAIyC,KAAK,CAAC,8CAA8C,CAAC;MACnE;MAEA,MAAMsG,YAAY,CAACmF,oBAAoB,CAAC,CAAC;IAAC;EAC9C;;EAEA;AACJ;AACA;EACiBC,mBAAmBA,CAAA,EAAqB;IAAA,IAAAC,OAAA;IAAA,OAAAhM,iBAAA;MACjD,IAAAiM,qBAAA,SAAuED,OAAI,CAACE,qBAAqB,CAAC,CAAC;QAA3FC,0BAA0B,GAAAF,qBAAA,CAA1BE,0BAA0B;QAAEC,wBAAwB,GAAAH,qBAAA,CAAxBG,wBAAwB;MAC5D,IAAMC,cAAc,GAChB9H,OAAO,CAAC6H,wBAAwB,CAACE,SAAS,CAAC,IAC3C/H,OAAO,CAAC6H,wBAAwB,CAACG,cAAc,CAAC,IAChDhI,OAAO,CAAC6H,wBAAwB,CAACI,cAAc,CAAC;MAEpD,IAAMC,QAAQ,SAAST,OAAI,CAACU,cAAc,CAAC,CAAC;;MAE5C;MACA;MACA,OAAO,CAAC,EAACD,QAAQ,aAARA,QAAQ,eAARA,QAAQ,CAAEvB,UAAU,CAAC,CAAC,MAAKmB,cAAc,IAAIF,0BAA0B,CAAC;IAAC;EACtF;;EAEA;AACJ;AACA;EACiBQ,oBAAoBA,CAAA,EAAyE;IAAA,IAAAC,WAAA,GAAAlP,SAAA;MAAAmP,OAAA;IAAA,OAAA7M,iBAAA;MAAA,IAAxE8M,IAAqB,GAAAF,WAAA,CAAAjP,MAAA,QAAAiP,WAAA,QAAAhP,SAAA,GAAAgP,WAAA,MAAGtS,eAAe,CAACyS,MAAM;MAC5E,IAAMpG,YAAY,SAASkG,OAAI,CAACH,cAAc,CAAC,CAAC;MAChD,IAAI,CAAC/F,YAAY,EAAE;QACf;QACA,OAAO,IAAI;MACf;MAEA,IAAI;QACA,IAAMqG,kBAAsD,SAASH,OAAI,CAAC1P,UAAU,CAAC6P,kBAAkB,CAAC,CAAC;QAEzG,IAAMC,mBAAmB,GACrBD,kBAAkB,CAACE,SAAS,IAAIF,kBAAkB,CAACG,cAAc,IAAIH,kBAAkB,CAACI,cAAc;QAE1G,IAAI,CAACH,mBAAmB,EAAE;UACtB;UACA,OAAO,IAAI;QACf;QAEA,IAAI,CAACtG,YAAY,CAACuE,UAAU,CAAC,CAAC,EAAE;UAC5B;UACA,OAAO,IAAI;QACf;QAEA,IAAImC,GAAW;QACf,QAAQP,IAAI;UACR,KAAKxS,eAAe,CAACyS,MAAM;YACvBM,GAAG,GAAG1G,YAAY,CAAC2F,SAAS;YAC5B;UACJ,KAAKhS,eAAe,CAACgT,WAAW;YAC5BD,GAAG,GAAG1G,YAAY,CAAC4F,cAAc;YACjC;UACJ,KAAKjS,eAAe,CAACiT,WAAW;YAC5BF,GAAG,GAAG1G,YAAY,CAAC6F,cAAc;YACjC;UACJ;YACI;YACA,OAAO,IAAI;QACnB;QAEA,IAAMgB,SAA8B,GAAG/H,IAAI,CAACC,KAAK,CAAC2H,GAAG,CAAC;QACtD;QACA;QACA;QACA,OAAOlG,MAAM,CAACC,MAAM,CAACoG,SAAS,CAACjM,IAAI,CAAC,CAAC,CAAC,CAAC;MAC3C,CAAC,SAAS;QACNoF,YAAY,CAACE,IAAI,CAAC,CAAC;MACvB;IAAC;EACL;;EAEA;AACJ;AACA;EACiB4G,qBAAqBA,CAAChM,IAA+B,EAAiB;IAAA,IAAAiM,OAAA;IAAA,OAAA1N,iBAAA;MAC/E,MAAM0N,OAAI,CAACtO,oBAAoB,CAACqO,qBAAqB,CAAChM,IAAI,CAAC;IAAC;EAChE;;EAEA;AACJ;AACA;EACiBkM,oBAAoBA,CAAA,EAAqB;IAAA,IAAAC,OAAA;IAAA,OAAA5N,iBAAA;MAClD,OAAO,OAAO4N,OAAI,CAACC,sBAAsB,CAAC,CAAC,EAAEC,KAAK;IAAC;EACvD;;EAEA;AACJ;AACA;EACiBD,sBAAsBA,CAAA,EAAiC;IAAA,IAAAE,OAAA;IAAA,OAAA/N,iBAAA;MAChE;MACA,IAAMgO,cAAkC,GAAG,CACvC,wBAAwB,EACxB,8BAA8B,EAC9B,8BAA8B,CACjC;;MAED;MACA,IAAMC,gBAAgB,GAAG,OAAOF,OAAI,CAAC9P,aAAa,CAACiQ,sBAAsB,CAAC,CAAC,KAAK,IAAI;MACpF,IAAID,gBAAgB,EAAE;QAClBD,cAAc,CAACG,IAAI,CAAC,oBAAoB,CAAC;MAC7C;MAEA,IAAMC,YAAY,SAASL,OAAI,CAACxQ,aAAa,CAAC8Q,eAAe,CAAC,CAAC;MAE/D,IAAMC,MAA2B,GAAG;QAChC;QACAR,KAAK,EAAE,IAAI;QACXM,YAAY;QACZG,2BAA2B,EAAE,CAAC;MAClC,CAAC;MAED,KAAK,IAAMC,UAAU,IAAIR,cAAc,EAAE;QACrC;QACA,IAAMS,MAAM,GAAG,OAAOV,OAAI,CAACxQ,aAAa,CAACmR,QAAQ,CAACF,UAAU,CAAC,KAAK,CAAC,CAAC;;QAEpE;QACA,IAAMG,YAAY,GAAG,CAAC,CAACP,YAAY,IAAIA,YAAY,IAAIK,MAAM;QAC7DH,MAAM,CAACC,2BAA2B,CAACC,UAAU,CAAC,GAAGG,YAAY;QAC7DL,MAAM,CAACR,KAAK,GAAGQ,MAAM,CAACR,KAAK,IAAIa,YAAY;MAC/C;MAEA,OAAOL,MAAM;IAAC;EAClB;;EAEA;AACJ;AACA;EACiBM,sBAAsBA,CAAA,EAIa;IAAA,IAAAC,WAAA,GAAAnR,SAAA;MAAAoR,OAAA;IAAA,OAAA9O,iBAAA;MAAA,IAAA+O,KAAA,GAAAF,WAAA,CAAAlR,MAAA,QAAAkR,WAAA,QAAAjR,SAAA,GAAAiR,WAAA,MAAnB,CAAC,CAAC;QAH3BG,sBAAsB,GAAAD,KAAA,CAAtBC,sBAAsB;QACtBC,qBAAqB,GAAAF,KAAA,CAArBE,qBAAqB;QACrBC,iBAAiB,GAAAH,KAAA,CAAjBG,iBAAiB;MAEjB;MACA;MACA,IAAMC,2BAA2B,GAAGF,qBAAqB,IAAI,QAAQH,OAAI,CAACM,sBAAsB,CAAC,CAAC,CAAC;MAEnG,IAAID,2BAA2B,EAAE;QAC7B,IAAI,CAACH,sBAAsB,EAAE;UACzB,MAAM,IAAI3O,KAAK,CAAC,8EAA8E,CAAC;QACnG;;QAEA;QACAyO,OAAI,CAAC5R,MAAM,CAAC4E,IAAI,CAAC,yDAAyD,CAAC;QAC3E,IAAMuN,WAAW,SAASL,sBAAsB,CAAC,CAAC;QAClD,IAAI,CAACK,WAAW,EAAE;UACd,MAAM,IAAIhP,KAAK,CAAC,uEAAuE,CAAC;QAC5F;QACA,MAAMyO,OAAI,CAACQ,kCAAkC,CAACD,WAAW,CAAC;MAC9D;MAEA,IAAME,uBAA0E,SACtET,OAAI,CAAC3R,UAAU,CAACqS,sBAAsB,CAAC,CAAC;MAClD,IAAMC,cAAc,GAChBF,uBAAuB,IACvBA,uBAAuB,CAACjD,SAAS,KAAK1O,SAAS,IAC/C2R,uBAAuB,CAACG,gBAAgB,KAAK9R,SAAS,IACtD2R,uBAAuB,CAAC/C,cAAc,KAAK5O,SAAS;;MAExD;MACA;MACA,IACI6R,cAAc,KACbN,2BAA2B,IAAI,QAAQ7T,qCAAqC,CAACwT,OAAI,CAACvR,aAAa,CAAC,CAAC,CAAC,EACrG;QACEuR,OAAI,CAAC5R,MAAM,CAAC4E,IAAI,CAAC,4EAA4E,CAAC;QAE9F,MAAMgN,OAAI,CAACvR,aAAa,CAACoS,KAAK,CAAC,wBAAwB,EAAEJ,uBAAuB,CAACjD,SAAS,CAAC;QAC3F,MAAMwC,OAAI,CAACvR,aAAa,CAACoS,KAAK,CAAC,8BAA8B,EAAEJ,uBAAuB,CAAC/C,cAAc,CAAC;QACtG,MAAMsC,OAAI,CAACvR,aAAa,CAACoS,KAAK,CAAC,8BAA8B,EAAEJ,uBAAuB,CAACG,gBAAgB,CAAC;MAC5G;;MAEA;MACA;MACA,IAAI,CAACR,iBAAiB,EAAE;QACpB,MAAMJ,OAAI,CAACc,sBAAsB,CAAC,CAAC;MACvC,CAAC,MAAM;QACH,MAAMd,OAAI,CAACe,cAAc,CAAC,CAAC;MAC/B;IAAC;EACL;;EAEA;AACJ;AACA;AACA;EACkBD,sBAAsBA,CAAA,EAAkB;IAAA,IAAAE,OAAA;IAAA,OAAA9P,iBAAA;MAClD,IAAM+P,aAAa,SAASD,OAAI,CAAC7R,aAAa,CAAC+R,mBAAmB,CAAC,CAAC;MACpE,IAAI,CAACD,aAAa,IAAI,CAACA,aAAa,CAACE,OAAO,EAAE;QAC1CH,OAAI,CAAC5S,MAAM,CAAC4E,IAAI,CAAC,yDAAyD,CAAC;QAC3E;MACJ;MAEA,IAAMoO,UAAsC,SAASJ,OAAI,CAAC3S,UAAU,CAACgT,aAAa,CAAC,CAAC;MACpF,IAAI,CAACD,UAAU,CAACE,aAAa,EAAE;QAC3BN,OAAI,CAAC5S,MAAM,CAAC4E,IAAI,CAAC,wDAAwD,CAAC;QAC1E;MACJ;MAEA,IAAI,CAACjG,iCAAiC,CAACqU,UAAU,CAACE,aAAa,EAAEL,aAAa,CAAC,EAAE;QAC7ED,OAAI,CAAC5S,MAAM,CAAC4E,IAAI,CAAC,oFAAoF,CAAC;QACtG;MACJ;MAEA,IAAMuO,eAAe,GAAGH,UAAU,CAACE,aAAa,CAACrL,QAAQ,CAAC,CAAC;MAE3D,MAAM+K,OAAI,CAACvS,aAAa,CAACoS,KAAK,CAAC,oBAAoB,EAAEU,eAAe,CAAC;IAAC;EAC1E;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACkBf,kCAAkCA,CAACgB,gBAA2C,EAAiB;IAAA,IAAAC,OAAA;IAAA,OAAAvQ,iBAAA;MAAA,IAAAwQ,qBAAA,EAAAC,sBAAA,EAAAC,qBAAA,EAAAC,sBAAA;MACzG,IAAMC,sBAAsB,SAASL,OAAI,CAAChT,aAAa,CAACsT,MAAM,CAACzV,+BAA+B,EAAE;QAC5F0V,UAAU,GAAAN,qBAAA,GAAEF,gBAAgB,CAACS,OAAO,cAAAP,qBAAA,uBAAxBA,qBAAA,CAA0BM,UAAU;QAChDE,IAAI,GAAAP,sBAAA,GAAEH,gBAAgB,CAACS,OAAO,cAAAN,sBAAA,uBAAxBA,sBAAA,CAA0BO,IAAI;QACpC3D,GAAG,EAAEiD,gBAAgB,CAACW;MAC1B,CAAC,CAAC;MAEF,MAAMV,OAAI,CAAChT,aAAa,CAAC2T,eAAe,CAACN,sBAAsB,CAACO,KAAK,CAAC;MAEtE,CAAAT,qBAAA,IAAAC,sBAAA,GAAAJ,OAAI,CAAC/S,eAAe,EAAC4T,qBAAqB,cAAAV,qBAAA,eAA1CA,qBAAA,CAAAW,IAAA,CAAAV,sBAAA,EACIC,sBAAsB,CAACO,KAAK,EAC5BP,sBAAsB,CAACG,OAAO,EAC9BT,gBAAgB,CAACW,UACrB,CAAC;IAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;EACkB7B,sBAAsBA,CAAA,EAAqB;IAAA,IAAAkC,OAAA;IAAA,OAAAtR,iBAAA;MACrD;MACA,IAAMuR,qBAAqB,SAASD,OAAI,CAAC/T,aAAa,CAACiU,MAAM,CAAC,CAAC;MAE/D,IAAI,CAACD,qBAAqB,EAAE,OAAO,KAAK;MAExC,IAAAE,qBAAA,GAAAlJ,cAAA,CAAoBgJ,qBAAqB;QAAhCR,OAAO,GAAAU,qBAAA;;MAEhB;MACA,OAAOV,OAAO,CAAC9P,SAAS,KAAK7F,+BAA+B;IAAC;EACjE;;EAEA;AACJ;AACA;EACiB8Q,qBAAqBA,CAAA,EAAgC;IAAA,IAAAwF,OAAA;IAAA,OAAA1R,iBAAA;MAC9D,IAAM2G,YAAY,SAAS+K,OAAI,CAAChF,cAAc,CAAC,CAAC;MAEhD,IAAMiF,kBAAkB,GACpBpN,OAAO,CAACoC,YAAY,aAAZA,YAAY,uBAAZA,YAAY,CAAE2F,SAAS,CAAC,IAChC/H,OAAO,CAACoC,YAAY,aAAZA,YAAY,uBAAZA,YAAY,CAAE4F,cAAc,CAAC,IACrChI,OAAO,CAACoC,YAAY,aAAZA,YAAY,uBAAZA,YAAY,CAAE6F,cAAc,CAAC;MACzC7F,YAAY,aAAZA,YAAY,eAAZA,YAAY,CAAEE,IAAI,CAAC,CAAC;MAEpB,IAAMsF,0BAA0B,SAAS7Q,qCAAqC,CAACoW,OAAI,CAACnU,aAAa,CAAC;MAClG,IAAMyP,kBAA6D,SACzD0E,OAAI,CAACpS,oBAAoB,CAAC,CAAC,CAAC0N,kBAAkB,CAAC,CAAC;MAE1D,OAAO;QACH2E,kBAAkB;QAClBxF,0BAA0B;QAC1BC,wBAAwB,EAAE;UACtBE,SAAS,EAAE/H,OAAO,CAACyI,kBAAkB,aAAlBA,kBAAkB,uBAAlBA,kBAAkB,CAAEE,SAAS,CAAC;UACjDV,cAAc,EAAEjI,OAAO,CAACyI,kBAAkB,aAAlBA,kBAAkB,uBAAlBA,kBAAkB,CAAEG,cAAc,CAAC;UAC3DZ,cAAc,EAAEhI,OAAO,CAACyI,kBAAkB,aAAlBA,kBAAkB,uBAAlBA,kBAAkB,CAAEI,cAAc;QAC9D;MACJ,CAAC;IAAC;EACN;;EAEA;AACJ;AACA;EACiBwE,+BAA+BA,CAACC,QAAiB,EAAsC;IAAA,IAAAC,OAAA;IAAA,OAAA9R,iBAAA;MAChG,IAAI6R,QAAQ,EAAE;QACV;QACA;QACA,IAAME,IAAI,GAAG/V,kBAAkB,CAAC,EAAE,CAAC;QACnC;QACA,IAAMqT,WAAW,SAAS3U,+BAA+B,CACrDmX,QAAQ,EACRE,IAAI,EACJD,OAAI,CAACE,kCACT,CAAC;QACD,OAAO;UACHjB,OAAO,EAAE;YACLD,UAAU,EAAE;cACR7P,SAAS,EAAE,UAAU;cACrBgR,UAAU,EAAEH,OAAI,CAACE,kCAAkC;cACnDD;YACJ;UACJ,CAAC;UACDd,UAAU,EAAE5B,WAAW;UACvB6C,iBAAiB,EAAErX,iBAAiB,CAACwU,WAAW;QACpD,CAAC;MACL,CAAC,MAAM;QACH;QACA,IAAMhC,GAAG,GAAG,IAAIrM,UAAU,CAAC,EAAE,CAAC;QAC9BmR,UAAU,CAACC,MAAM,CAACC,eAAe,CAAChF,GAAG,CAAC;QACtC,OAAO;UACH4D,UAAU,EAAE5D,GAAG;UACf6E,iBAAiB,EAAErX,iBAAiB,CAACwS,GAAG;QAC5C,CAAC;MACL;IAAC;EACL;;EAEA;AACJ;AACA;EACiBiF,yBAAyBA,CAACzS,KAAkB,EAAuC;IAAA,IAAA0S,OAAA;IAAA,OAAAvS,iBAAA;MAC5F,OAAOuS,OAAI,CAACnU,cAAc,CAACkU,yBAAyB,CAACzS,KAAK,CAAC;IAAC;EAChE;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACW2S,yCAAyCA,CAACnV,MAAc,EAAyB;IACpF,IAAMoV,QAA+C,GAAG,IAAI,CAACtV,UAAU,CAACuV,uBAAuB,CAC3F,IAAI/Y,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CACrC,CAAC;IACD,OAAOoV,QAAQ,CACVE,MAAM,CAAE5Q,OAAO,IAAKA,OAAO,CAAC9B,MAAM,KAAKrC,SAAS,IAAI,CAACmE,OAAO,CAAC6Q,WAAW,CAAC,CAAC,CAAC,CAC3E/J,GAAG,CAAE9G,OAAO,IAAK,IAAI,CAAC8Q,uBAAuB,CAAC9Q,OAAO,CAAC,CAAC;EAChE;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACW+Q,mCAAmCA,CAAC7S,MAAc,EAAE5C,MAAe,EAAmC;IACzG,IAAI,CAACA,MAAM,EAAE,MAAM,IAAIgD,KAAK,CAAC,gBAAgB,CAAC;IAE9C,IAAMoS,QAA+C,GAAG,IAAI,CAACtV,UAAU,CAACuV,uBAAuB,CAC3F,IAAI/Y,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CACrC,CAAC;;IAED;IACA,IAAM0E,OAAO,GAAG0Q,QAAQ,CAACM,IAAI,CAAEhR,OAAO;MAAA,IAAAiR,eAAA;MAAA,OAAK,EAAAA,eAAA,GAAAjR,OAAO,CAAC9B,MAAM,cAAA+S,eAAA,uBAAdA,eAAA,CAAgBvM,QAAQ,CAAC,CAAC,MAAKxG,MAAM,IAAI,CAAC8B,OAAO,CAAC6Q,WAAW,CAAC,CAAC;IAAA,EAAC;IAE3G,IAAI7Q,OAAO,EAAE;MACT,OAAO,IAAI,CAAC8Q,uBAAuB,CAAC9Q,OAAO,CAAC;IAChD;EACJ;;EAEA;AACJ;AACA;EACiBkR,qBAAqBA,CAAC5V,MAAc,EAAE4C,MAAc,EAAgC;IAAA,IAAAiT,OAAA;IAAA,OAAAlT,iBAAA;MAC7F,IAAM2G,YAAY,SAAUuM,OAAI,CAAC/V,UAAU,CAACyJ,WAAW,CAAC,IAAIjN,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAE3E;MAEf,IAAI,CAACsJ,YAAY,EAAE,MAAM,IAAItG,KAAK,mBAAAC,MAAA,CAAmBjD,MAAM,CAAE,CAAC;MAE9D,IAAI;QACA;QACA,IAAM8V,OAAO,GAAGD,OAAI,CAACE,6BAA6B,CAACvK,GAAG,CAAEwK,MAAM,IAC1D5X,oCAAoC,CAAC4X,MAAM,CAC/C,CAAC;QACD;QACA,IAAMC,OAAe,SAAS3M,YAAY,CAAC4M,0BAA0B,CAACJ,OAAO,CAAC;;QAE9E;QACA,IAAMK,UAAU,GAAG/N,IAAI,CAACC,KAAK,CAAC4N,OAAO,CAAC;QACtCE,UAAU,CAAC,SAAS,CAAC,GAAG,4BAA4B;QACpD,IAAMC,wBAAgC,GAAGhO,IAAI,CAACiO,SAAS,CAACF,UAAU,CAAC;;QAEnE;QACA,IAAMG,OAAO,SAAST,OAAI,CAACU,8BAA8B,CAAC3T,MAAM,EAAEwT,wBAAwB,CAAC;;QAE3F;QACA,IAAM1R,OAA4C,SAAS4E,YAAY,CAACkN,mBAAmB,CACvF,IAAIla,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,EAClC,IAAItG,eAAe,CAACma,OAAO,CAACH,OAAO,CAAC,EACpCR,OACJ,CAAC;QACD,OAAOD,OAAI,CAACL,uBAAuB,CAAC9Q,OAAO,CAAC;MAChD,CAAC,SAAS;QACN4E,YAAY,CAACE,IAAI,CAAC,CAAC;MACvB;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACkB+M,8BAA8BA,CAAC3T,MAAc,EAAEwT,wBAAgC,EAAmB;IAAA,IAAAM,OAAA;IAAA,OAAA/T,iBAAA;MAC5G,IAAMgU,IAAI,GAAGhY,kBAAkB,CAAC,EAAE,CAAC;MACnC;MACA,IAAAiY,qBAAA,SAAoCF,OAAI,CAAC3W,IAAI,CAACwF,aAAa,CACvD5I,MAAM,CAACka,GAAG,8BAAA5T,MAAA,CACkB6T,kBAAkB,CAAClU,MAAM,CAAC,2BAAAK,MAAA,CAAwB6T,kBAAkB,CAACH,IAAI,CAAC,GACtGpW,SAAS,EACT6V,wBAAwB,EACxB;UACIxQ,MAAM,EAAE;QACZ,CACJ,CAAC;QARiB0Q,OAAO,GAAAM,qBAAA,CAAjBG,QAAQ;MAUhB,OAAOT,OAAO;IAAC;EACnB;EAOA;AACJ;AACA;AACA;AACA;EACWU,+BAA+BA,CAAClB,OAA6B,EAAQ;IACxE;IACA,IAAI,CAACC,6BAA6B,GAAGD,OAAO,aAAPA,OAAO,cAAPA,OAAO,GAAIzW,wBAAwB;EAC5E;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiB4X,0BAA0BA,CAAA,EAAiC;IAAA,IAAAC,OAAA;IAAA,OAAAvU,iBAAA;MACpE,IAAM2G,YAAY,SAAS4N,OAAI,CAAC7H,cAAc,CAAC,CAAC;MAChD,IAAI/F,YAAY,KAAK/I,SAAS,EAAE;QAC5B,MAAM,IAAIyC,KAAK,CAAC,yFAAyF,CAAC;MAC9G;MAEA,IAAI;QACA,IAAAmU,qBAAA,SACU7N,YAAY,CAACkN,mBAAmB,CAClCU,OAAI,CAACnB,6BAA6B,CAACvK,GAAG,CAACpN,oCAAoC,CAC/E,CAAC;UAAAgZ,sBAAA,GAAAlM,cAAA,CAAAiM,qBAAA;UAHEzS,OAAO,GAAA0S,sBAAA;UAAEpK,eAAe,GAAAoK,sBAAA;QAI/B,MAAMF,OAAI,CAACzW,wBAAwB,CAACoE,mBAAmB,CAACmI,eAAe,CAAC;QACxE,OAAOkK,OAAI,CAAC1B,uBAAuB,CAAC9Q,OAAO,CAAC;MAChD,CAAC,SAAS;QACN4E,YAAY,CAACE,IAAI,CAAC,CAAC;MACvB;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiB6N,yBAAyBA,CAACrX,MAAc,EAAE0L,QAAgB,EAAgC;IAAA,IAAA4L,OAAA;IAAA,OAAA3U,iBAAA;MACnG,IAAM8I,MAA0C,SAAS6L,OAAI,CAACxX,UAAU,CAAC0M,SAAS,CAC9E,IAAIlQ,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,EAClC,IAAI1D,eAAe,CAACmQ,QAAQ,CAACf,QAAQ,CACzC,CAAC;MAED,IAAI,CAACD,MAAM,EAAE;QACT,MAAM,IAAIzI,KAAK,CAAC,oBAAoB,CAAC;MACzC;MAEA,IAAI;QACA,IAAAuU,qBAAA,GAAmC9L,MAAM,CAAC+K,mBAAmB,CACzDc,OAAI,CAACvB,6BAA6B,CAACvK,GAAG,CAACpN,oCAAoC,CAC/E,CAAC;UAAAoZ,sBAAA,GAAAtM,cAAA,CAAAqM,qBAAA;UAFM7S,OAAO,GAAA8S,sBAAA;UAAExK,eAAe,GAAAwK,sBAAA;QAG/B,MAAMF,OAAI,CAAC7W,wBAAwB,CAACoE,mBAAmB,CAACmI,eAAe,CAAC;QACxE,OAAOsK,OAAI,CAAC9B,uBAAuB,CAAC9Q,OAAO,CAAC;MAChD,CAAC,SAAS;QACN+G,MAAM,CAACjC,IAAI,CAAC,CAAC;MACjB;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBiO,0BAA0BA,CAAA,EAA+B;IAAA,IAAAC,OAAA;IAAA,OAAA/U,iBAAA;MAClE,IAAMkQ,UAAsC,SAAS6E,OAAI,CAAC5X,UAAU,CAACgT,aAAa,CAAC,CAAC;MACpF,IAAI,CAACD,UAAU,CAACE,aAAa,EAAE,OAAO,IAAI;MAC1C,OAAOlU,YAAY,CAACgU,UAAU,CAACE,aAAa,CAACrL,QAAQ,CAAC,CAAC,CAAC;IAAC;EAC7D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACiBiQ,4BAA4BA,CAAC3H,GAAe,EAAE4C,OAAgB,EAAiB;IAAA,IAAAgF,OAAA;IAAA,OAAAjV,iBAAA;MACxF,IAAMkV,SAAS,GAAG/Y,YAAY,CAACkR,GAAG,CAAC;MAEnC,IAAI,CAAC4C,OAAO,EAAE;QACV,MAAM,IAAI5P,KAAK,CAAC,mDAAmD,CAAC;MACxE;MAEA,MAAM4U,OAAI,CAAChX,aAAa,CAACkX,uBAAuB,CAC5Cxb,eAAe,CAACwH,mBAAmB,CAACC,UAAU,CAAC8T,SAAS,CAAC,EACzDjF,OACJ,CAAC;IAAC;EACN;;EAEA;AACJ;AACA;EACiBmF,4CAA4CA,CAAA,EAAkB;IAAA,IAAAC,OAAA;IAAA,OAAArV,iBAAA;MACvE,IAAMsV,SAAS,SAASD,OAAI,CAAC9X,aAAa,CAACgY,GAAG,CAAC,oBAAoB,CAAC;MACpE,IAAI,CAACD,SAAS,EAAE;QACZ,MAAM,IAAIjV,KAAK,CAAC,wFAAwF,CAAC;MAC7G;MAEA,IAAM0P,aAAa,SAASsF,OAAI,CAACpX,aAAa,CAAC+R,mBAAmB,CAAC,CAAC;MACpE,IAAI,CAACD,aAAa,IAAI,CAACA,aAAa,CAACE,OAAO,EAAE;QAC1C,MAAM,IAAI5P,KAAK,CAAC,4EAA4E,CAAC;MACjG;MAEA,IAAMa,mBAAmB,GAAGvH,eAAe,CAACwH,mBAAmB,CAACC,UAAU,CAACkU,SAAS,CAAC;MACrF,IAAI,CAACzZ,iCAAiC,CAACqF,mBAAmB,EAAE6O,aAAa,CAAC,EAAE;QACxE,MAAM,IAAItV,8BAA8B,CACpC,yFACJ,CAAC;MACL;MAEA,MAAM4a,OAAI,CAACpX,aAAa,CAACkX,uBAAuB,CAACjU,mBAAmB,EAAE6O,aAAa,CAACE,OAAO,CAAC;IAAC;EACjG;;EAEA;AACJ;AACA;AACA;AACA;EACiBuF,6BAA6BA,CAAA,EAA2B;IAAA,IAAAC,OAAA;IAAA,OAAAzV,iBAAA;MACjE,aAAayV,OAAI,CAACxX,aAAa,CAACiQ,sBAAsB,CAAC,CAAC;IAAC;EAC7D;;EAEA;AACJ;AACA;EACiBwH,gBAAgBA,CAAA,EAAkC;IAAA,IAAAC,OAAA;IAAA,OAAA3V,iBAAA;MAC3D,OAAO,OAAO2V,OAAI,CAAC1X,aAAa,CAAC+R,mBAAmB,CAAC,CAAC,KAAK,IAAI;IAAC;EACpE;;EAEA;AACJ;AACA;AACA;AACA;EACiB4F,kBAAkBA,CAAC9T,IAAmB,EAA4B;IAAA,IAAA+T,OAAA;IAAA,OAAA7V,iBAAA;MAC3E,aAAa6V,OAAI,CAAC5X,aAAa,CAAC2X,kBAAkB,CAAC9T,IAAI,CAAC;IAAC;EAC7D;;EAEA;AACJ;AACA;AACA;AACA;EACiBzC,uBAAuBA,CAAA,EAAmC;IAAA,IAAAyW,OAAA;IAAA,OAAA9V,iBAAA;MACnE,aAAa8V,OAAI,CAAC7X,aAAa,CAACoB,uBAAuB,CAAC,IAAI,CAAC;IAAC;EAClE;;EAEA;AACJ;AACA;EACiB0W,sBAAsBA,CAAC9F,OAAe,EAAiB;IAAA,IAAA+F,OAAA;IAAA,OAAAhW,iBAAA;MAChE,MAAMgW,OAAI,CAAC/X,aAAa,CAAC8X,sBAAsB,CAAC9F,OAAO,CAAC;IAAC;EAC7D;;EAEA;AACJ;AACA;EACiBJ,cAAcA,CAAA,EAAkB;IAAA,IAAAoG,OAAA;IAAA,OAAAjW,iBAAA;MACzC,IAAMa,UAAU,SAASoV,OAAI,CAAChY,aAAa,CAACiY,cAAc,CAAEC,CAAC,IAAKF,OAAI,CAACG,UAAU,CAACD,CAAC,CAAC,CAAC;MAErF,MAAMF,OAAI,CAACI,2BAA2B,CAAC,oBAAoB,CAAC;;MAE5D;MACA;MACA,UAAUJ,OAAI,CAAC7G,sBAAsB,CAAC,CAAC,EAAE;QACrC,MAAM6G,OAAI,CAAC1Y,aAAa,CAACoS,KAAK,CAAC,oBAAoB,EAAE9O,UAAU,CAACuP,aAAa,CAACrL,QAAQ,CAAC,CAAC,CAAC;MAC7F;;MAEA;MACAkR,OAAI,CAAC5W,uBAAuB,CAAC,CAAC;IAAC;EACnC;;EAEA;AACJ;AACA;EACiBiX,iBAAiBA,CAAA,EAAkB;IAAA,IAAAC,OAAA;IAAA,OAAAvW,iBAAA;MAC5C;MACA,IAAM8B,IAAI,SAASyU,OAAI,CAACb,gBAAgB,CAAC,CAAC;MAC1C,IAAI5T,IAAI,aAAJA,IAAI,eAAJA,IAAI,CAAEmO,OAAO,EAAE;QACf,MAAMsG,OAAI,CAACR,sBAAsB,CAACjU,IAAI,CAACmO,OAAO,CAAC;MACnD,CAAC,MAAM;QACHsG,OAAI,CAACrZ,MAAM,CAACsZ,KAAK,CAAC,uDAAuD,CAAC;MAC9E;;MAEA;MACA,MAAMD,OAAI,CAACE,mBAAmB,CAAC,CAAC;MAEhC,MAAMF,OAAI,CAACpY,uBAAuB,CAACuY,MAAM,CAAC,CAAC;IAAC;EAChD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACkBN,UAAUA,CAAqCO,GAAM,EAAiB;IAAA,IAAAC,OAAA;IAAA,OAAA5W,iBAAA;MAChF,IAAM6W,IAAI,GAAG,IAAInP,GAAG,CAACP,MAAM,CAACgB,OAAO,CAACwO,GAAG,CAACG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;MAC1D,IAAMC,QAAQ,GAAGJ,GAAG,CAACI,QAAQ;MAE7B,OAAOJ,GAAG,CAACG,UAAU;MACrB,OAAOH,GAAG,CAACI,QAAQ;MAEnB,IAAMC,cAAc,GAAGH,IAAI,CAACtB,GAAG,CAACqB,OAAI,CAACvZ,MAAM,CAAC,IAAI,CAAC,CAAC;MAElD,IAAM4Z,eAAe,GAAGvd,WAAW,CAACga,SAAS,CAACiD,GAAG,CAAC;MAClD,IAAMG,UAAsC,SAASF,OAAI,CAACzZ,UAAU,CAAC+Z,IAAI,CAACD,eAAe,CAAC;MAE1F,IAAMpO,GAAG,GAAGpD,IAAI,CAACC,KAAK,CAACoR,UAAU,CAACK,MAAM,CAAC,CAAC,CAAC;MAE3CN,IAAI,CAAC7O,GAAG,CAAC4O,OAAI,CAACvZ,MAAM,EAAA+Z,aAAA,CAAAA,aAAA,KAAOJ,cAAc,GAAKnO,GAAG,CAAC+N,OAAI,CAACvZ,MAAM,CAAC,CAAE,CAAC;MAEjE,IAAI0Z,QAAQ,KAAKnZ,SAAS,EAAE+Y,GAAG,CAACI,QAAQ,GAAGA,QAAQ;MACnDJ,GAAG,CAACG,UAAU,GAAG3P,MAAM,CAACkQ,WAAW,CAACR,IAAI,CAAC1O,OAAO,CAAC,CAAC,CAAC;IAAC;EACxD;;EAEA;AACJ;AACA;EACiBmP,8BAA8BA,CACvCxG,UAAkB,EAClBrP,IAA2B,EACI;IAAA,IAAA8V,OAAA;IAAA,OAAAvX,iBAAA;MAC/B,IAAMa,UAAU,SAAS0W,OAAI,CAACtZ,aAAa,CAAC+R,mBAAmB,CAAC,CAAC;MACjE,IAAI,EAACnP,UAAU,aAAVA,UAAU,eAAVA,UAAU,CAAEoP,OAAO,GAAE;QACtB,MAAM,IAAI5P,KAAK,CAAC,0BAA0B,CAAC;MAC/C;MAEA,IAAM4Q,UAAU,SAASzU,eAAe,CAACqE,UAAU,CAAC2W,SAAS,EAAE1G,UAAU,CAAC;;MAE1E;MACA,MAAMyG,OAAI,CAACvC,4BAA4B,CAAC/D,UAAU,EAAEpQ,UAAU,CAACoP,OAAO,CAAC;MACvE,OAAOsH,OAAI,CAACE,gBAAgB,CAAChW,IAAI,CAAC;IAAC;EACvC;;EAEA;AACJ;AACA;EACiBgW,gBAAgBA,CAAChW,IAA2B,EAAmC;IAAA,IAAAiW,OAAA;IAAA,OAAA1X,iBAAA;MACxF;MACA,IAAMkQ,UAAsC,SAASwH,OAAI,CAACva,UAAU,CAACgT,aAAa,CAAC,CAAC;MACpF,IAAQC,aAAa,GAAoBF,UAAU,CAA3CE,aAAa;QAAE5O,aAAa,GAAK0O,UAAU,CAA5B1O,aAAa;MACpC,IAAI,CAAC4O,aAAa,IAAI,CAAC5O,aAAa,EAAE,MAAM,IAAInB,KAAK,CAAC,yCAAyC,CAAC;MAEhG,IAAMsX,oBAAoB,GAAGzb,YAAY,CAACkU,aAAa,CAACrL,QAAQ,CAAC,CAAC,CAAC;MAEnE,IAAMlE,UAAU,SAAS6W,OAAI,CAACzZ,aAAa,CAAC2Z,uBAAuB,CAACpW,aAAa,CAAC;MAClF,IAAI,CAACX,UAAU,EAAE,MAAM,IAAIR,KAAK,8BAAAC,MAAA,CAA8BkB,aAAa,yBAAsB,CAAC;MAElG,IAAMqW,eAAe,SAASH,OAAI,CAAC9W,kBAAkB,CAACC,UAAU,EAAE8W,oBAAoB,CAAC;MAEvF,IAAI;QAAA,IAAAG,qBAAA;QACArW,IAAI,aAAJA,IAAI,gBAAAqW,qBAAA,GAAJrW,IAAI,CAAEsW,gBAAgB,cAAAD,qBAAA,eAAtBA,qBAAA,CAAAzG,IAAA,CAAA5P,IAAI,EAAqB;UACrBuW,KAAK,EAAEhd,kBAAkB,CAACid;QAC9B,CAAC,CAAC;QAEF,aAAaP,OAAI,CAACzZ,aAAa,CAACwZ,gBAAgB,CAACjW,aAAa,EAAEqW,eAAe,EAAEpW,IAAI,CAAC;MAC1F,CAAC,SAAS;QACN;QACAoW,eAAe,CAAChR,IAAI,CAAC,CAAC;MAC1B;IAAC;EACL;;EAEA;AACJ;AACA;EACiBqR,sBAAsBA,CAAA,EAAqB;IAAA,IAAAC,OAAA;IAAA,OAAAnY,iBAAA;MACpD,aAAamY,OAAI,CAACha,uBAAuB,CAACia,WAAW,CAAC,CAAC;IAAC;EAC5D;;EAEA;AACJ;AACA;EACiBC,gBAAgBA,CAAA,EAA2D;IAAA,IAAAC,WAAA,GAAA5a,SAAA;MAAA6a,OAAA;IAAA,OAAAvY,iBAAA;MAAA,IAA1DyB,IAAoC,GAAA6W,WAAA,CAAA3a,MAAA,QAAA2a,WAAA,QAAA1a,SAAA,GAAA0a,WAAA,MAAG,CAAC,CAAC;MACnE,IAAI,QAAQC,OAAI,CAACxM,mBAAmB,CAAC,CAAC,CAAC,IAAI,QAAQwM,OAAI,CAAC5K,oBAAoB,CAAC,CAAC,CAAC,EAAE;QAC7E,MAAM,IAAItN,KAAK,CAAC,2EAA2E,CAAC;MAChG;MACA,aAAakY,OAAI,CAACpa,uBAAuB,CAACqa,KAAK,CAAC/W,IAAI,IAAI,CAAC,CAAC,CAAC;IAAC;EAChE;;EAEA;AACJ;AACA;EACiBgX,mBAAmBA,CAC5BC,OAAqE,EACxD;IAAA,IAAAC,OAAA;IAAA,OAAA3Y,iBAAA;MACb,IAAM4Y,aAAa,GAAGjf,eAAe,CAACkf,aAAa,CAACC,SAAS,CAACJ,OAAO,CAAC;MACtE,MAAMC,OAAI,CAACrZ,oBAAoB,CAAC,CAAC,CAACmZ,mBAAmB,CAACG,aAAa,CAAC,CAAC,CAAC;IAAA;EAC1E;;EAEA;AACJ;AACA;EACiBG,mBAAmBA,CAAA,EAA8D;IAAA,IAAAC,OAAA;IAAA,OAAAhZ,iBAAA;MAC1F,IAAM4Y,aAAa,SAASI,OAAI,CAAC1Z,oBAAoB,CAAC,CAAC,CAACyZ,mBAAmB,CAAC,CAAC;MAC7E,IAAML,OAAO,GAAGE,aAAa,CAACK,OAAO,CAAC,CAAC;MACvCL,aAAa,CAAC/R,IAAI,CAAC,CAAC;MACpB,OAAO6R,OAAO;IAAC;EACnB;;EAEA;AACJ;AACA;EACiBQ,uBAAuBA,CAChCC,SAAiB,EACjBvQ,OAA+C,EAC/CwQ,OAAwB,EACF;IAAA,IAAAC,OAAA;IAAA,OAAArZ,iBAAA;MACtB,IAAM9C,MAAM,GAAG,IAAInD,OAAO,CAACsf,OAAI,CAACnc,MAAM,EAAE,yBAAyB,CAAC;MAClE,IAAMoc,WAAW,GAAG,IAAIrS,GAAG,CAAC2B,OAAO,CAACC,GAAG,CAAC0Q,KAAA;QAAA,IAAGlc,MAAM,GAAAkc,KAAA,CAANlc,MAAM;QAAA,OAAOA,MAAM;MAAA,EAAC,CAAC;;MAEhE;MACA;MACA;MACA,MAAMgc,OAAI,CAACrb,eAAe,CAACwb,sBAAsB,CAC7Ctc,MAAM,EACNuc,KAAK,CAACC,IAAI,CAACJ,WAAW,CAAC,CAACzQ,GAAG,CAAExL,MAAM,IAAK,IAAI1D,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAC9E,CAAC;MACD,IAAMsc,KAAoB,GAAG;QACzBA,KAAK,EAAE,EAAE;QACTR,SAAS,EAAEzd,SAAS,CAACke;MACzB,CAAC;MAED,MAAMC,OAAO,CAACC,GAAG,CACblR,OAAO,CAACC,GAAG;QAAA,IAAAkR,KAAA,GAAA/Z,iBAAA,CAAC,WAAAga,KAAA,EAAgC;UAAA,IAAvB3c,MAAM,GAAA2c,KAAA,CAAN3c,MAAM;YAAE0L,QAAQ,GAAAiR,KAAA,CAARjR,QAAQ;UACjC,IAAMD,MAA0C,SAASuQ,OAAI,CAAClc,UAAU,CAAC0M,SAAS,CAC9E,IAAIlQ,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,EAClC,IAAI1D,eAAe,CAACmQ,QAAQ,CAACf,QAAQ,CACzC,CAAC;UAED,IAAID,MAAM,EAAE;YACR,IAAMmR,gBAAgB,GAAGxU,IAAI,CAACC,KAAK,OAAOoD,MAAM,CAACoR,oBAAoB,CAACf,SAAS,EAAEC,OAAO,CAAC,CAAC;YAC1FO,KAAK,CAACA,KAAK,CAACxL,IAAI,CAAC;cACbpF,QAAQ;cACR1L,MAAM;cACN+b,OAAO,EAAEa;YACb,CAAC,CAAC;UACN,CAAC,MAAM;YACHZ,OAAI,CAACnc,MAAM,CAACmG,IAAI,4CAAA/C,MAAA,CAA4CjD,MAAM,OAAAiD,MAAA,CAAIyI,QAAQ,CAAE,CAAC;UACrF;QACJ,CAAC;QAAA,iBAAAoR,EAAA;UAAA,OAAAJ,KAAA,CAAAK,KAAA,OAAA1c,SAAA;QAAA;MAAA,IACL,CAAC;MAED,OAAOic,KAAK;IAAC;EACjB;;EAEA;AACJ;AACA;EACiBU,eAAeA,CAACC,2BAAiD,EAAiB;IAAA,IAAAC,OAAA;IAAA,OAAAva,iBAAA;MAC3Fua,OAAI,CAACrd,MAAM,CAACsd,KAAK,CAAC,uCAAuC,CAAC;;MAE1D;MACA;MACAD,OAAI,CAACpc,uBAAuB,CAACuY,MAAM,CAAC,CAAC;;MAErC;MACA,MAAM6D,OAAI,CAACtc,aAAa,CAACwc,0BAA0B,CAAC,CAAC;MAErD,MAAMF,OAAI,CAAC9D,mBAAmB,CAAC,CAAC;;MAEhC;MACA,MAAM8D,OAAI,CAACnb,oBAAoB,CAACqO,qBAAqB,CAAC;QAClDiN,oBAAoB,EAAE,IAAI;QAC1BJ;MACJ,CAAC,CAAC;;MAEF;MACA,MAAMC,OAAI,CAAC1K,cAAc,CAAC,CAAC;MAE3B0K,OAAI,CAACrd,MAAM,CAACsd,KAAK,CAAC,wBAAwB,CAAC;IAAC;EAChD;;EAEA;AACJ;AACA;AACA;EACkB/D,mBAAmBA,CAAA,EAAkB;IAAA,IAAAkE,OAAA;IAAA,OAAA3a,iBAAA;MAC/C;MACA,MAAM2a,OAAI,CAACpd,aAAa,CAACoS,KAAK,CAAC,wBAAwB,EAAE,IAAI,CAAC;MAC9D,MAAMgL,OAAI,CAACpd,aAAa,CAACoS,KAAK,CAAC,8BAA8B,EAAE,IAAI,CAAC;MACpE,MAAMgL,OAAI,CAACpd,aAAa,CAACoS,KAAK,CAAC,8BAA8B,EAAE,IAAI,CAAC;MACpE,MAAMgL,OAAI,CAACpd,aAAa,CAACoS,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC;;MAE1D;MACA,IAAMvB,YAAY,SAASuM,OAAI,CAACpd,aAAa,CAAC8Q,eAAe,CAAC,CAAC;MAC/D,IAAID,YAAY,EAAE,MAAMuM,OAAI,CAACpd,aAAa,CAACoS,KAAK,yBAAArP,MAAA,CAAyB8N,YAAY,GAAI,IAAI,CAAC;MAC9F;MACA,MAAMuM,OAAI,CAACpd,aAAa,CAAC2T,eAAe,CAAC,IAAI,CAAC;IAAC;EACnD;;EAEA;AACJ;AACA;EACiB0J,wBAAwBA,CAAC3a,MAAc,EAAE5C,MAAc,EAAiB;IAAA,IAAAwd,OAAA;IAAA,OAAA7a,iBAAA;MACjF,IAAM9C,MAAM,GAAG,IAAInD,OAAO,CAAC8gB,OAAI,CAAC3d,MAAM,8BAAAoD,MAAA,CAA8BL,MAAM,QAAAK,MAAA,CAAKjD,MAAM,MAAG,CAAC;;MAEzF;MACA,IAAMoP,QAAQ,SAASoO,OAAI,CAACnO,cAAc,CAAC,CAAC;MAC5C,IAAI,EAACD,QAAQ,aAARA,QAAQ,eAARA,QAAQ,CAAEvB,UAAU,CAAC,CAAC,GAAE;QACzBhO,MAAM,CAACmG,IAAI,CACP,iGACJ,CAAC;QACD;MACJ;MAEAnG,MAAM,CAAC4E,IAAI,CAAC,yBAAyB,CAAC;;MAEtC;MACA,IAAI,QAAQ+Y,OAAI,CAACvb,oBAAoB,CAAC,CAAC,CAACwb,wBAAwB,CAAC,IAAInhB,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,CAAC,CAAC,EAAE;QACnG,MAAM4a,OAAI,CAAC5c,aAAa,CAAC8c,2BAA2B,CAAC9a,MAAM,CAAC;QAC5D,MAAM4a,OAAI,CAACvb,oBAAoB,CAAC,CAAC,CAAC0b,2BAA2B,CAAC,IAAIrhB,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,CAAC;MACrG;;MAEA;MACA,IAAMgb,MAAM,SAASJ,OAAI,CAACvb,oBAAoB,CAAC,CAAC,CAAC4b,kBAAkB,CAAC,IAAIvhB,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,CAAC;MACvG,IAAI,CAACgb,MAAM,EAAE;QACT/d,MAAM,CAAC4E,IAAI,CAAC,kBAAkB,CAAC;QAC/B;MACJ;;MAEA;MACA,IAAMqZ,cAAc,SAASN,OAAI,CAACzd,IAAI,CAACge,aAAa,CAACH,MAAM,CAACI,aAAwC,CAAC;MACrGne,MAAM,CAAC4E,IAAI,iCAAAxB,MAAA,CAAiCmF,IAAI,CAACiO,SAAS,CAACyH,cAAc,CAAC,CAAE,CAAC;;MAE7E;MACA,IAAMG,GAAG,GAAGT,OAAI,CAACvb,oBAAoB,CAAC,CAAC,CAAC0C,iBAAiB,CAAC,CAAC,IAAIrI,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAAC,CAAC;MAC/F,MAAMwd,OAAI,CAAC/c,wBAAwB,CAACoE,mBAAmB,CAACoZ,GAAG,CAAC;;MAE5D;MACA,MAAMT,OAAI,CAAC7c,eAAe,CAACwb,sBAAsB,CAACtc,MAAM,EAAE,CAAC,IAAIvD,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAAC,CAAC;;MAE/F;MACA,IAAMoV,QAAQ,SAASoI,OAAI,CAACvb,oBAAoB,CAAC,CAAC,CAACic,sBAAsB,CACrE,IAAI5hB,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,EAClC,IAAI1D,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,EAClCkb,cAAc,CAACK,WAAW,EAC1BP,MAAM,CAACQ,mBAAmB,EAC1B9hB,eAAe,CAAC+hB,eAAe,CAACC,qBAAqB,CAAC,CAC1D,CAAC;MACD,KAAK,IAAML,IAAG,IAAI7I,QAAQ,EAAE;QACxB,MAAMoI,OAAI,CAAC/c,wBAAwB,CAACoE,mBAAmB,CAACoZ,IAAG,CAAC;MAChE;IAAC;EACL;;EAEA;EACA;EACA;EACA;EACA;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACkBM,kBAAkBA,CAAAC,KAAA,EAUsB;IAAA,IAAAC,OAAA;IAAA,OAAA9b,iBAAA;MAAA,IATlD+b,MAAM,GAAAF,KAAA,CAANE,MAAM;QAAAC,qBAAA,GAAAH,KAAA,CACNI,iBAAiB;QAAjBA,iBAAiB,GAAAD,qBAAA,cAAG,IAAItU,GAAG,CAAiB,CAAC,GAAAsU,qBAAA;QAC7CE,kBAAkB,GAAAL,KAAA,CAAlBK,kBAAkB;QAAAC,aAAA,GAAAN,KAAA,CAClBjT,OAAO;QAAPA,OAAO,GAAAuT,aAAA,cAAG,IAAIxiB,eAAe,CAACyiB,WAAW,CAAC,CAAC,GAAAD,aAAA;MAO3C,aAAaL,OAAI,CAAC3e,UAAU,CAACye,kBAAkB,CAC3CG,MAAM,GAAGtW,IAAI,CAACiO,SAAS,CAACqI,MAAM,CAAC,GAAG,IAAI,EACtCnT,OAAO,EACPqT,iBAAiB,EACjBC,kBACJ,CAAC;IAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;EACiBG,0BAA0BA,CAACN,MAAwB,EAAsC;IAAA,IAAAO,OAAA;IAAA,OAAAtc,iBAAA;MAClG;MACA;MACA,IAAMuc,SAAS,SAASD,OAAI,CAACV,kBAAkB,CAAC;QAAEG;MAAO,CAAC,CAAC;MAE3D,IAAMS,QAAmC,GAAG,EAAE;MAAC,IAAAC,KAAA,aAAAA,MAAA,EAEd;QAC7B,IAAMC,aAA6B,GAAGjX,IAAI,CAACC,KAAK,CAACiX,OAAO,CAACC,QAAQ,CAAC;;QAElE;QACA,IAAIF,aAAa,CAAC5P,IAAI,KAAKpR,SAAS,CAACmhB,sBAAsB,EAAE;UACzD,IAAMC,MAAM,GAAGJ,aAAa,CAACI,MAAM;UACnC,IAAMC,aAAa,GAAGL,aAAa,CAACM,OAAO,CAACC,cAAc;UAC1D,IAAIF,aAAa,IAAID,MAAM,EAAE;YACzBR,OAAI,CAACY,gCAAgC,CAACJ,MAAM,EAAEC,aAAa,CAAC;UAChE;QACJ;QAEA,QAAQJ,OAAO,CAAC7P,IAAI;UAChB,KAAKnT,eAAe,CAACwjB,0BAA0B,CAACC,SAAS;YAAE;cAAA,IAAAC,qBAAA;cACvD,IAAMC,cAAc,GAAIX,OAAO,CAA4CW,cAAc;cACzFd,QAAQ,CAACrO,IAAI,CAAC;gBACVwO,OAAO,EAAED,aAAa;gBACtBY,cAAc,EAAE;kBACZR,MAAM,EAAEQ,cAAc,CAACR,MAAM,CAACrW,QAAQ,CAAC,CAAC;kBACxC8W,YAAY,GAAAF,qBAAA,GAAEC,cAAc,CAACC,YAAY,cAAAF,qBAAA,uBAA3BA,qBAAA,CAA6B5W,QAAQ,CAAC,CAAC;kBACrD+W,yBAAyB,EAAEF,cAAc,CAACG,mBAAmB;kBAC7DC,cAAc,EAAEJ,cAAc,CAACK,gBAAgB,CAAC;gBACpD;cACJ,CAAC,CAAC;;cAEF;cACA;cACA;cACA;cACA;cACA;cACA,IAAIC,sBAAsB,CAAClB,aAAa,CAAC,EAAE;gBACvC,IAAMzc,MAAM,GAAGyc,aAAa,CAACM,OAAO,CAACa,OAAO;gBAC5C,IAAMC,cAAc,SAASxB,OAAI,CAACnf,UAAU,CAAC4gB,iCAAiC,CAC1E,IAAIpkB,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CACrC,CAAC;gBACD;gBACA,IAAI,CAAC6d,cAAc,EAAE;kBACjBxB,OAAI,CAACpf,MAAM,CAACsd,KAAK,8EAAAla,MAAA,CACgEL,MAAM,CACvF,CAAC;gBACL,CAAC,MAAM,IACH+d,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGH,cAAc,CAACI,sBAAsB,GAClDnhB,uCAAuC,EACzC;kBACEuf,OAAI,CAACpf,MAAM,CAAC4E,IAAI,yDAAAxB,MAAA,CAC4CL,MAAM,sBAAAK,MAAA,CAAmB,IAAI0d,IAAI,CAACF,cAAc,CAACI,sBAAsB,CAAC,CAACC,WAAW,CAAC,CAAC,CAClJ,CAAC;gBACL,CAAC,MAAM;kBACH7B,OAAI,CAACpf,MAAM,CAAC4E,IAAI,oDAAAxB,MAAA,CAAoDL,MAAM,CAAE,CAAC;kBAC7E;kBACAqc,OAAI,CAAC3a,oBAAoB,CAAC1B,MAAM,EAAE6d,cAAc,CAACM,SAAS,CAAC3X,QAAQ,CAAC,CAAC,CAAC,CAAC4X,KAAK,CAAEjb,GAAG,IAAK;oBAClFkZ,OAAI,CAACpf,MAAM,CAACsZ,KAAK,qDAAAlW,MAAA,CAAqDL,MAAM,CAAE,CAAC;oBAC/Eqc,OAAI,CAACpf,MAAM,CAACsZ,KAAK,CAACpT,GAAG,CAAC;kBAC1B,CAAC,CAAC;gBACN;cACJ;cAEA;YACJ;UACA,KAAKzJ,eAAe,CAACwjB,0BAA0B,CAACmB,SAAS;YAAE;cACvD9B,QAAQ,CAACrO,IAAI,CAAC;gBACVwO,OAAO,EAAED,aAAa;gBACtBY,cAAc,EAAE;cACpB,CAAC,CAAC;cACF;YACJ;UACA,KAAK3jB,eAAe,CAACwjB,0BAA0B,CAACoB,eAAe;YAC3D;YACA;UACJ,KAAK5kB,eAAe,CAACwjB,0BAA0B,CAACqB,OAAO;YACnD;YACA;QACR;MACJ,CAAC;MA1ED,KAAK,IAAM7B,OAAO,IAAIJ,SAAS;QAAA,OAAAE,KAAA;MAAA;MA4E/B,OAAOD,QAAQ;IAAC;EACpB;;EAEA;AACJ;AACA;AACA;AACA;EACiBiC,gBAAgBA,CACzBxC,iBAA0C,EAC1CC,kBAA6B,EAChB;IAAA,IAAAwC,OAAA;IAAA,OAAA1e,iBAAA;MACb,IAAM2e,mBAAmB,GAAG1C,iBAAiB,IAAI,IAAIvU,GAAG,CAAiBP,MAAM,CAACgB,OAAO,CAAC8T,iBAAiB,CAAC,CAAC;MAC3G,IAAM2C,qBAAqB,GAAG1C,kBAAkB,IAAI,IAAIjV,GAAG,CAASiV,kBAAkB,CAAC;MAEvF,IAAIyC,mBAAmB,KAAK/gB,SAAS,IAAIghB,qBAAqB,KAAKhhB,SAAS,EAAE;QAC1E,MAAM8gB,OAAI,CAAC9C,kBAAkB,CAAC;UAC1BK,iBAAiB,EAAE0C,mBAAmB;UACtCzC,kBAAkB,EAAE0C;QACxB,CAAC,CAAC;MACN;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACiBC,kBAAkBA,CAACC,WAAyB,EAAiB;IAAA,IAAAC,OAAA;IAAA,OAAA/e,iBAAA;MAAA,IAAAgf,oBAAA,EAAAC,iBAAA;MACtE,IAAMrW,OAAO,GAAG,IAAIjP,eAAe,CAACyiB,WAAW,EAAA4C,oBAAA,GAC3CF,WAAW,CAACI,OAAO,cAAAF,oBAAA,uBAAnBA,oBAAA,CAAqBnW,GAAG,CAAExL,MAAM,IAAK,IAAI1D,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CAAC,GAAA4hB,iBAAA,GACxEH,WAAW,CAACK,IAAI,cAAAF,iBAAA,uBAAhBA,iBAAA,CAAkBpW,GAAG,CAAExL,MAAM,IAAK,IAAI1D,eAAe,CAACsI,MAAM,CAAC5E,MAAM,CAAC,CACxE,CAAC;MACD,MAAM0hB,OAAI,CAACnD,kBAAkB,CAAC;QAAEhT;MAAQ,CAAC,CAAC;IAAC;EAC/C;;EAEA;AACJ;AACA;AACA;AACA;EACiBwW,aAAaA,CAACla,IAAU,EAAErF,KAAkB,EAAiB;IAAA,IAAAwf,OAAA;IAAA,OAAArf,iBAAA;MACtE,IAAMsf,MAAM,GAAGzf,KAAK,CAAC0f,UAAU,CAAC,CAAC;MACjC,IAAMC,QAAQ,GAAG,IAAI7lB,eAAe,CAAC8lB,YAAY,CAAC,CAAC;MAEnD,IAAIH,MAAM,CAACre,SAAS,KAAK,sBAAsB,EAAE;QAC7Cue,QAAQ,CAACve,SAAS,GAAGtH,eAAe,CAAC+lB,mBAAmB,CAACC,eAAe;MAC5E,CAAC,MAAM;QACH;QACAN,OAAI,CAACniB,MAAM,CAACmG,IAAI,SAAA/C,MAAA,CAAS4E,IAAI,CAACjF,MAAM,qDAAAK,MAAA,CAAkDgf,MAAM,CAACre,SAAS,CAAE,CAAC;QACzG;MACJ;MAEA,IAAIqe,MAAM,CAAC,yCAAyC,CAAC,IAAID,OAAI,CAAC5hB,0BAA0B,EAAE;QACtF4hB,OAAI,CAACniB,MAAM,CAAC4E,IAAI,CAAC,2CAA2C,CAAC;QAC7D0d,QAAQ,CAAC9a,kBAAkB,GAAG,IAAI;MACtC;MAEA,IAAI;QACA8a,QAAQ,CAACI,uBAAuB,GAAGN,MAAM,CAACO,kBAAkB;QAC5DL,QAAQ,CAACM,6BAA6B,GAAGR,MAAM,CAACS,oBAAoB;QACpE,MAAMV,OAAI,CAACliB,UAAU,CAAC6iB,eAAe,CAAC,IAAIrmB,eAAe,CAAC0I,MAAM,CAAC6C,IAAI,CAACjF,MAAM,CAAC,EAAEuf,QAAQ,CAAC;MAC5F,CAAC,CAAC,OAAOS,CAAC,EAAE;QACRZ,OAAI,CAACniB,MAAM,CAACmG,IAAI,SAAA/C,MAAA,CAAS4E,IAAI,CAACjF,MAAM,kDAAAK,MAAA,CAA+C2f,CAAC,CAAE,CAAC;QACvF;MACJ;;MAEA;MACA;MACA,IAAMC,iBAAiB,GAAGb,OAAI,CAACjf,cAAc,CAAC8E,IAAI,CAACjF,MAAM,CAAC;MAC1D,IAAIigB,iBAAiB,EAAE;QACnBA,iBAAiB,CAACd,aAAa,CAACE,MAAM,CAAC;MAC3C,CAAC,MAAM;QACHD,OAAI,CAACjf,cAAc,CAAC8E,IAAI,CAACjF,MAAM,CAAC,GAAG,IAAIhG,aAAa,CAChDolB,OAAI,CAACniB,MAAM,CAACijB,QAAQ,KAAA7f,MAAA,CAAK4E,IAAI,CAACjF,MAAM,iBAAc,CAAC,EACnDof,OAAI,CAACliB,UAAU,EACfkiB,OAAI,CAACrhB,eAAe,EACpBqhB,OAAI,CAACthB,uBAAuB,EAC5BmH,IAAI,EACJoa,MACJ,CAAC;MACL;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACWc,eAAeA,CAACC,SAA8B,EAAQ;IACzD;IACA;IACA,IAAI,CAACtiB,uBAAuB,CAACuiB,yBAAyB,CAAC,CAAC,CAACjC,KAAK,CAAE4B,CAAC,IAAK;MAClE,IAAI,CAAC/iB,MAAM,CAACmG,IAAI,CAAC,qDAAqD,EAAE4c,CAAC,CAAC;IAC9E,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;EACiBM,0BAA0BA,CAAA,EAAkB;IAAA,IAAAC,OAAA;IAAA,OAAAxgB,iBAAA;MACrD,MAAMwgB,OAAI,CAACrjB,UAAU,CAACojB,0BAA0B,CAAC,CAAC;IAAC;EACvD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACYrD,gCAAgCA,CAACJ,MAAc,EAAEC,aAAqB,EAAQ;IAClF,IAAMhb,OAAwD,GAAG,IAAI,CAAC5E,UAAU,CAACsjB,sBAAsB,CACnG,IAAI9mB,eAAe,CAACsI,MAAM,CAAC6a,MAAM,CAAC,EAClCC,aACJ,CAAC;IAED,IAAIhb,OAAO,EAAE;MACT,IAAI,CAAC2e,IAAI,CAACnmB,WAAW,CAAComB,2BAA2B,EAAE,IAAI,CAAC9N,uBAAuB,CAAC9Q,OAAO,CAAC,CAAC;IAC7F,CAAC,MAAM;MACH;MACA;MACA,IAAI,CAAC7E,MAAM,CAAC4E,IAAI,gDAAAxB,MAAA,CACmCyc,aAAa,kDAChE,CAAC;IACL;EACJ;;EAEA;EACQlK,uBAAuBA,CAAC9Q,OAA4C,EAAuB;IAC/F,OAAO,IAAIvG,uBAAuB,CAC9B,IAAI,CAAC0B,MAAM,EACX,IAAI,CAACC,UAAU,EACf4E,OAAO,EACP,IAAI,CAACjE,wBAAwB,EAC7B,IAAI,CAACsV,6BACT,CAAC;EACL;;EAEA;EACA;EACA;EACA;EACA;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWwN,gBAAgBA,CAAC/gB,KAAkB,EAAEghB,MAAkB,EAAEC,aAAsB,EAAQ;IAC1F,IAAM7gB,MAAM,GAAGJ,KAAK,CAACK,SAAS,CAAC,CAAE;;IAEjC;IACA;IACA,IACI4gB,aAAa,KAAKlnB,eAAe,CAACmnB,IAAI,IACtCF,MAAM,CAACG,UAAU,KAAKpnB,eAAe,CAACmnB,IAAI,IAC1CF,MAAM,CAACxjB,MAAM,KAAK,IAAI,CAACF,UAAU,CAACE,MAAM,CAACoJ,QAAQ,CAAC,CAAC,EACrD;MACE,IAAI,CAACtJ,UAAU,CAACoG,yBAAyB,CAAC,IAAI5J,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CAAC,CAAC,CAACoe,KAAK,CAAE4B,CAAC,IAAK;QACvF,IAAI,CAAC/iB,MAAM,CAACsZ,KAAK,yDAAAlW,MAAA,CAAyDL,MAAM,QAAAK,MAAA,CAAK2f,CAAC,CAAE,CAAC;MAC7F,CAAC,CAAC;IACN;IAEA,IAAMgB,GAAG,GAAG,IAAI,CAAC7gB,cAAc,CAACH,MAAM,CAAC;IACvC,IAAI,CAACghB,GAAG,EAAE;MACN;MACA;IACJ;IACAA,GAAG,CAACL,gBAAgB,CAACC,MAAM,CAAC;EAChC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWK,gBAAgBA,CAACrhB,KAAkB,EAAEshB,MAAiB,EAAEC,UAA8B,EAAQ;IACjG,IAAIvhB,KAAK,CAACwhB,OAAO,CAAC,CAAC,IAAI3lB,SAAS,CAAC4lB,UAAU,EAAE;MACzC;MACA;IACJ;IAEA,IACIzhB,KAAK,CAAC0hB,WAAW,CAAC,CAAC,KAAM,IAAI,CAACpkB,UAAU,CAACE,MAAM,CAACoJ,QAAQ,CAAC,CAAC,IAC1D5G,KAAK,CAAC0f,UAAU,CAAC,CAAC,CAACyB,UAAU,KAAKpnB,eAAe,CAACmnB,IAAI,EACxD;MACE,IAAI,CAAC7jB,MAAM,CAAC4E,IAAI,8BAAAxB,MAAA,CAA8BT,KAAK,CAACK,SAAS,CAAC,CAAC,oCAAiC,CAAC;MACjG,IAAI,CAACkF,mBAAmB,CAACvF,KAAK,CAACK,SAAS,CAAC,CAAE,CAAC;IAChD;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACiBshB,iBAAiBA,CAACjgB,IAAmC,EAAiB;IAAA,IAAAkgB,OAAA;IAAA,OAAAzhB,iBAAA;MAC/E,KAAK,IAAMqN,GAAG,IAAI9L,IAAI,EAAE;QACpBkgB,OAAI,CAACC,gBAAgB,CAACrU,GAAG,CAAC;MAC9B;MACAoU,OAAI,CAACxjB,aAAa,CAAC0jB,cAAc,CAAC,CAAC;IAAC;EACxC;EAEQD,gBAAgBA,CAACrU,GAAgC,EAAQ;IAAA,IAAAuU,OAAA;IAC7D,IAAI,IAAI,CAACriB,OAAO,EAAE;IAClB,IAAI,CAACrC,MAAM,CAACsd,KAAK,2BAAAla,MAAA,CACa+M,GAAG,CAACwU,SAAS,mBAAAvhB,MAAA,CAAgB+M,GAAG,CAACyU,SAAS,CAAC/c,QAAQ,CAAC,CAAC,UAAAzE,MAAA,CAAO+M,GAAG,CAACpN,MAAM,CAACwG,QAAQ,CAAC,CAAC,CAC/G,CAAC;IACD,IAAMsb,WAAW,GAAG,IAAI,CAAC3jB,cAAc,CAAC4jB,uBAAuB,CAAC3U,GAAG,CAACpN,MAAM,CAACwG,QAAQ,CAAC,CAAC,EAAE4G,GAAG,CAACwU,SAAS,CAAC;IACrG,IAAIE,WAAW,CAACpkB,MAAM,KAAK,CAAC,EAAE;IAE9B,IAAI,CAACT,MAAM,CAACsd,KAAK,CACb,gCAAgC,EAChCuH,WAAW,CAAClZ,GAAG,CAAEoX,CAAC,OAAA3f,MAAA,CAAQ2f,CAAC,CAACgC,KAAK,CAAC,CAAC,CAAE,CACzC,CAAC;;IAED;IACA;IACA;IACA;IACA;IACA;IAAA,IAAAC,MAAA,YAAAA,OAAAC,EAAA,EAC8B;MAC1BA,EAAE,CAACC,iBAAiB,CAACR,OAAI,EAAE;QAAES,OAAO,EAAE;MAAK,CAAC,CAAC,CAAChE,KAAK,CAAEiE,EAAE,IAAK;QACxDV,OAAI,CAAC1kB,MAAM,CAAC4E,IAAI,kCAAAxB,MAAA,CAAkC6hB,EAAE,CAACF,KAAK,CAAC,CAAC,yBAAsB,CAAC;MACvF,CAAC,CAAC;IACN,CAAC;IAJD,KAAK,IAAME,EAAE,IAAIJ,WAAW;MAAAG,MAAA,CAAAC,EAAA;IAAA;EAKhC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACiBI,kBAAkBA,CAACC,QAA+C,EAAiB;IAAA,IAAAC,OAAA;IAAA,OAAAziB,iBAAA;MAC5F,KAAK,IAAM0iB,OAAO,IAAIF,QAAQ,EAAE;QAC5BC,OAAI,CAACvlB,MAAM,CAACsd,KAAK,qCAAAla,MAAA,CAAqCoiB,OAAO,CAACb,SAAS,UAAAvhB,MAAA,CAAOoiB,OAAO,CAACziB,MAAM,CAACwG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC1G,IAAMsb,WAAW,GAAGU,OAAI,CAACrkB,cAAc,CAAC4jB,uBAAuB,CAC3DU,OAAO,CAACziB,MAAM,CAACwG,QAAQ,CAAC,CAAC,EACzBic,OAAO,CAACb,SACZ,CAAC;QACD,IAAIE,WAAW,CAACpkB,MAAM,KAAK,CAAC,EAAE;;QAE9B;QACA8kB,OAAI,CAACvlB,MAAM,CAACsd,KAAK,CACb,gCAAgC,EAChCuH,WAAW,CAAClZ,GAAG,CAAEoX,CAAC,OAAA3f,MAAA,CAAQ2f,CAAC,CAACgC,KAAK,CAAC,CAAC,CAAE,CACzC,CAAC;QAED,KAAK,IAAME,EAAE,IAAIJ,WAAW,EAAE;UAC1BI,EAAE,CAACC,iBAAiB,CAACK,OAAI,EAAE;YAAEJ,OAAO,EAAE;UAAK,CAAC,CAAC,CAAChE,KAAK,CAAEiE,EAAE,IAAK;YACxD;UAAA,CACH,CAAC;QACN;MACJ;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACiBK,qBAAqBA,CAACtlB,MAA8B,EAAiB;IAAA,IAAAulB,OAAA;IAAA,OAAA5iB,iBAAA;MAC9E,IAAM6iB,eAAe,SAASD,OAAI,CAAC5X,yBAAyB,CAAC3N,MAAM,CAACoJ,QAAQ,CAAC,CAAC,CAAC;MAC/Emc,OAAI,CAAClC,IAAI,CAACnmB,WAAW,CAACuoB,sBAAsB,EAAEzlB,MAAM,CAACoJ,QAAQ,CAAC,CAAC,EAAEoc,eAAe,CAAC;;MAEjF;MACA;MACA,IAAIxlB,MAAM,CAACoJ,QAAQ,CAAC,CAAC,KAAKmc,OAAI,CAACvlB,MAAM,EAAE;QACnCulB,OAAI,CAAClC,IAAI,CAACnmB,WAAW,CAACwoB,WAAW,EAAE,CAAC,CAAC,CAAC;QACtC,MAAMH,OAAI,CAACvjB,uBAAuB,CAAC,CAAC;MACxC;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiB2jB,gBAAgBA,CAAC1b,OAAiB,EAAiB;IAAA,IAAA2b,OAAA;IAAA,OAAAjjB,iBAAA;MAC5DijB,OAAI,CAACvC,IAAI,CAACnmB,WAAW,CAAC2oB,iBAAiB,EAAE5b,OAAO,EAAE,KAAK,CAAC;MACxD2b,OAAI,CAACvC,IAAI,CAACnmB,WAAW,CAAC4oB,cAAc,EAAE7b,OAAO,EAAE,KAAK,CAAC;IAAC;EAC1D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACkB8b,oBAAoBA,CAACpS,IAAY,EAAEqS,KAAa,EAAoB;IAAA,IAAAC,OAAA;IAAA,OAAAtjB,iBAAA;MAC9EsjB,OAAI,CAACpmB,MAAM,CAACsd,KAAK,qCAAAla,MAAA,CAAqC0Q,IAAI,CAAE,CAAC;MAC7D,IAAIA,IAAI,KAAK,oBAAoB,EAAE;QAC/B,aAAasS,OAAI,CAACrlB,aAAa,CAACslB,0BAA0B,CAACF,KAAK,CAAC;QACjE;QACA;QACA;QACA;MACJ;MACA,OAAO,KAAK;IAAC;EACjB;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBG,YAAYA,CAACxS,IAAY,EAAiB;IAAA,IAAAyS,OAAA;IAAA,OAAAzjB,iBAAA;MACnD,IAAM0jB,aAA0B,SAASD,OAAI,CAACtmB,UAAU,CAACwmB,mBAAmB,CAAC3S,IAAI,CAAC;MAClF,KAAK,IAAMqS,KAAK,IAAIK,aAAa,EAAE;QAC/B,UAAUD,OAAI,CAACL,oBAAoB,CAACpS,IAAI,EAAEqS,KAAK,CAAC,EAAE;UAC9C;UACA;UACA;QACJ;MACJ;;MAEA;MACA,MAAMI,OAAI,CAACtmB,UAAU,CAACymB,sBAAsB,CAAC5S,IAAI,CAAC;IAAC;EACvD;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiB6S,mBAAmBA,CAAChkB,KAAkB,EAAiB;IAAA,IAAAikB,OAAA;IAAA,OAAA9jB,iBAAA;MAChE;MACA;MACA,IAAIH,KAAK,CAACkkB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAClkB,KAAK,CAACmkB,WAAW,CAAC,CAAC,CAAC/G,cAAc,EAAE;MAE7D,IAAMgH,YAAY;QAAA,IAAAC,KAAA,GAAAlkB,iBAAA,CAAG,WAAOmkB,GAAgB,EAAoB;UAC5D;UACA,IAAI5oB,mBAAmB,CAACsE,KAAK,CAAC,EAAE;YAC5B,MAAMikB,OAAI,CAACM,sBAAsB,CAACD,GAAG,CAAC;UAC1C;QACJ,CAAC;QAAA,gBALKF,YAAYA,CAAAI,GAAA;UAAA,OAAAH,KAAA,CAAA9J,KAAA,OAAA1c,SAAA;QAAA;MAAA,GAKjB;;MAED;MACA,IAAImC,KAAK,CAACykB,mBAAmB,CAAC,CAAC,IAAIzkB,KAAK,CAAC0kB,WAAW,CAAC,CAAC,EAAE;QACpD;QACA,IAAMC,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;;QAEnC;QACA,IAAMC,SAAS,GAAGC,UAAU,CAAC,MAAM7kB,KAAK,CAAC8kB,GAAG,CAAC9qB,gBAAgB,CAACujB,SAAS,EAAEwH,WAAW,CAAC,EAAEJ,aAAa,CAAC;QAErG,IAAMI,WAAW,GAAGA,CAACC,cAA2B,EAAErO,KAAa,KAAW;UACtE,IAAIA,KAAK,EAAE;UAEXsO,YAAY,CAACL,SAAS,CAAC;UACvB5kB,KAAK,CAAC8kB,GAAG,CAAC9qB,gBAAgB,CAACujB,SAAS,EAAEwH,WAAW,CAAC;UAClDX,YAAY,CAACY,cAAc,CAAC;QAChC,CAAC;QAEDhlB,KAAK,CAACklB,EAAE,CAAClrB,gBAAgB,CAACujB,SAAS,EAAEwH,WAAW,CAAC;MACrD,CAAC,MAAM;QACH,MAAMX,YAAY,CAACpkB,KAAK,CAAC;MAC7B;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACkBukB,sBAAsBA,CAACvkB,KAAkB,EAAiB;IAAA,IAAAmlB,OAAA;IAAA,OAAAhlB,iBAAA;MACpE,IAAMC,MAAM,GAAGJ,KAAK,CAACK,SAAS,CAAC,CAAC;MAChC,IAAM+kB,QAAQ,GAAGplB,KAAK,CAACqlB,SAAS,CAAC,CAAC;MAElC,IAAI,CAACjlB,MAAM,EAAE;QACT,MAAM,IAAII,KAAK,CAAC,6BAA6B,CAAC;MAClD;MAEA,IAAI,CAAC4kB,QAAQ,EAAE;QACX,MAAM,IAAI5kB,KAAK,CAAC,6BAA6B,CAAC;MAClD;MAEA2kB,OAAI,CAAC9nB,MAAM,CAACsd,KAAK,gCAAAla,MAAA,CACkBT,KAAK,CAACoiB,KAAK,CAAC,CAAC,YAAA3hB,MAAA,CAAST,KAAK,CAACwhB,OAAO,CAAC,CAAC,YAAA/gB,MAAA,CAAST,KAAK,CAACqlB,SAAS,CAAC,CAAC,CAClG,CAAC;MAED,IAAMC,yBAAyB,GAC3BtlB,KAAK,CAACwhB,OAAO,CAAC,CAAC,KAAK3lB,SAAS,CAAC0pB,WAAW,IAAIvlB,KAAK,CAAC0f,UAAU,CAAC,CAAC,CAAC8F,OAAO,KAAK1pB,OAAO,CAACkhB,sBAAsB;MAE9G,IAAIsI,yBAAyB,EAAE;QAC3B;QACA;QACA;QACA;QACA;QACA,IAAM7J,GAAG,GAAG0J,OAAI,CAAC1lB,oBAAoB,CAAC,CAAC,CAAC0C,iBAAiB,CAAC,CAAC,IAAIrI,eAAe,CAACsI,MAAM,CAACgjB,QAAQ,CAAC,CAAC,CAAC;QACjG,MAAMD,OAAI,CAAClnB,wBAAwB,CAACoE,mBAAmB,CAACoZ,GAAG,CAAC;MAChE;MAEA,MAAM0J,OAAI,CAAC1lB,oBAAoB,CAAC,CAAC,CAACgmB,wBAAwB,CACtD7f,IAAI,CAACiO,SAAS,CAAC;QACXU,QAAQ,EAAEvU,KAAK,CAACoiB,KAAK,CAAC,CAAC;QACvBnV,IAAI,EAAEjN,KAAK,CAACwhB,OAAO,CAAC,CAAC;QACrBvE,MAAM,EAAEmI,QAAQ;QAChBM,SAAS,EAAE1lB,KAAK,CAAC0hB,WAAW,CAAC,CAAC;QAC9BvE,OAAO,EAAEnd,KAAK,CAAC0f,UAAU,CAAC,CAAC;QAC3BiG,gBAAgB,EAAE3lB,KAAK,CAAC4lB,KAAK,CAAC;MAClC,CAAC,CAAC,EACF,IAAI9rB,eAAe,CAAC0I,MAAM,CAACpC,MAAM,CACrC,CAAC;MAED,IAAIklB,yBAAyB,EAAE;QAC3BH,OAAI,CAAC9H,gCAAgC,CAAC+H,QAAQ,EAAEplB,KAAK,CAACoiB,KAAK,CAAC,CAAE,CAAC;MACnE;;MAEA;MACA+C,OAAI,CAACjnB,uBAAuB,CAACuiB,yBAAyB,CAAC,CAAC,CAACjC,KAAK,CAAE4B,CAAC,IAAK;QAClE+E,OAAI,CAAC9nB,MAAM,CAACmG,IAAI,CAAC,8DAA8D,EAAE4c,CAAC,CAAC;MACvF,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBvT,cAAcA,CAAA,EAAyD;IAAA,IAAAgZ,OAAA;IAAA,OAAA1lB,iBAAA;MAChF,IAAMyM,QAAQ,SAAUiZ,OAAI,CAACpmB,oBAAoB,CAAC,CAAC,CAACsH,WAAW,CAAC,IAAIjN,eAAe,CAACsI,MAAM,CAACyjB,OAAI,CAACroB,MAAM,CAAC,CAExF;MACf,OAAOoP,QAAQ;IAAC;EACpB;;EAEA;AACJ;AACA;EACiB4J,2BAA2BA,CAACrF,IAAY,EAAiB;IAAA,IAAA2U,OAAA;IAAA,OAAA3lB,iBAAA;MAClE,IAAM9C,MAAM,GAAG,IAAInD,OAAO,CAAC4rB,OAAI,CAACzoB,MAAM,EAAE,6BAA6B,CAAC;MACtE,MAAMyoB,OAAI,CAAC3nB,eAAe,CAACwb,sBAAsB,CAACtc,MAAM,EAAE,CAAC,IAAIvD,eAAe,CAACsI,MAAM,CAAC0jB,OAAI,CAACtoB,MAAM,CAAC,CAAC,CAAC;MACpG,MAAMsoB,OAAI,CAACxoB,UAAU,CAACkZ,2BAA2B,CAACrF,IAAI,CAAC;MACvD2U,OAAI,CAAC5nB,uBAAuB,CAACuiB,yBAAyB,CAAC,CAAC,CAACjC,KAAK,CAAE4B,CAAC,IAAK;QAClE/iB,MAAM,CAACmG,IAAI,CAAC,iEAAiE,EAAE4c,CAAC,CAAC;MACrF,CAAC,CAAC;IAAC;EACP;AACJ;AAEA,MAAM5hB,cAAc,CAAC;EAUVpB,WAAWA,CACGC,MAAc,EACdC,UAAsC,EACtCe,0BAAyD,EAC5E;IAbF;AACJ;AACA;AACA;AACA;IAJIL,eAAA,2BAK2B,IAAIzD,cAAc,CACzC,MAAM,IAAIA,cAAc,CAA2B,MAAM,IAAI6M,GAAG,CAAC,CAAC,CACtE,CAAC;IAAA,KAGoB/J,MAAc,GAAdA,MAAc;IAAA,KACdC,UAAsC,GAAtCA,UAAsC;IAAA,KACtCe,0BAAyD,GAAzDA,0BAAyD;EAC3E;EAEUyC,sBAAsBA,CAC/Bd,KAAkB,EAClBqE,aAAkC,EACJ;IAAA,IAAA0hB,OAAA;IAAA,OAAA5lB,iBAAA;MAC9B;MACA;MACA;MACA;MACA4lB,OAAI,CAACC,qBAAqB,CAAChmB,KAAK,CAAC;MAEjC,IAAIimB,gBAAgB;MAEpB,QAAQ5hB,aAAa,CAAC6hB,IAAI;QACtB,KAAKprB,uBAAuB,CAACN,uBAAuB;UAChDyrB,gBAAgB,GAAGnsB,eAAe,CAACqsB,gBAAgB,CAACC,SAAS;UAC7D;QACJ,KAAKtrB,uBAAuB,CAACurB,8BAA8B;UACvDJ,gBAAgB,GAAGnsB,eAAe,CAACqsB,gBAAgB,CAACG,mBAAmB;UACvE;MACR;MAEA,IAAI;QAAA,IAAAC,cAAA;QACA,IAAMC,GAAG,SAAUT,OAAI,CAACzoB,UAAU,CAACmpB,gBAAgB,CAC/CC,cAAc,CAAC1mB,KAAK,CAAC,EACrB,IAAIlG,eAAe,CAAC0I,MAAM,CAACxC,KAAK,CAACK,SAAS,CAAC,CAAE,CAAC,EAC9C,IAAIvG,eAAe,CAAC6sB,kBAAkB,CAACV,gBAAgB,CAC3D,CAAwC;;QAExC;QACA;QACAF,OAAI,CAACa,0BAA0B,CAAC5mB,KAAK,CAAC;QAEtC,OAAO;UACH6mB,UAAU,EAAEjhB,IAAI,CAACC,KAAK,CAAC2gB,GAAG,CAACxmB,KAAK,CAAC;UACjC8mB,iBAAiB,EAAEN,GAAG,CAACO,uBAAuB;UAC9CnJ,mBAAmB,EAAE4I,GAAG,CAAC5I,mBAAmB;UAC5CoJ,cAAc,GAAAT,cAAA,GAAEC,GAAG,CAACS,SAAS,cAAAV,cAAA,uBAAbA,cAAA,CAAe3f,QAAQ,CAAC;QAC5C,CAAC;MACL,CAAC,CAAC,OAAOrD,GAAG,EAAE;QACV,IAAIA,GAAG,YAAYzJ,eAAe,CAACotB,qBAAqB,EAAE;UACtDnB,OAAI,CAACoB,uBAAuB,CAACnnB,KAAK,EAAEuD,GAAG,QAAQwiB,OAAI,CAAC1nB,0BAA0B,CAAC8R,mBAAmB,CAAC,CAAC,CAAC;QACzG,CAAC,MAAM;UACH,MAAM,IAAIlW,eAAe,CAACU,qBAAqB,CAACysB,aAAa,EAAE,eAAe,CAAC;QACnF;MACJ;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACYD,uBAAuBA,CAC3BnnB,KAAkB,EAClBuD,GAA0C,EAC1C8jB,gBAAkD,EAC7C;IACL,IAAMlK,OAAO,GAAGnd,KAAK,CAACsnB,cAAc,CAAC,CAAC;IACtC,IAAMC,YAAY,GAAG;MAAEC,UAAU,EAAErK,OAAO,CAACqK,UAAU;MAAEC,UAAU,EAAEtK,OAAO,CAACsK;IAAW,CAAC;;IAEvF;IACA,IACIlkB,GAAG,CAACmkB,IAAI,KAAK5tB,eAAe,CAAC6tB,mBAAmB,CAACC,cAAc,IAC/DrkB,GAAG,CAACmkB,IAAI,KAAK5tB,eAAe,CAAC6tB,mBAAmB,CAACE,mBAAmB,EACtE;MACE,IAAI,CAACxpB,0BAA0B,CAACypB,2BAA2B,CAAC9nB,KAAK,CAACK,SAAS,CAAC,CAAC,EAAG8c,OAAO,CAACsK,UAAW,CAAC;;MAEpG;MACA;MACA,IAAMtG,UAAU,GAAGnhB,KAAK,CAAC+nB,oBAAoB,CAAC,CAAC;MAC/C,IAAI5G,UAAU,IAAIA,UAAU,KAAKpnB,eAAe,CAACmnB,IAAI,IAAIC,UAAU,KAAKpnB,eAAe,CAACiuB,MAAM,EAAE;QAC5F,MAAM,IAAI/tB,eAAe,CACrBU,qBAAqB,CAACstB,kCAAkC,EACxD,8DAA8D,EAC9DV,YACJ,CAAC;MACL;;MAEA;MACA,IAAIvnB,KAAK,CAAC4lB,KAAK,CAAC,CAAC,IAAI,IAAI,CAACtoB,UAAU,CAAC4qB,oBAAoB,EAAE;QACvD,IAAIb,gBAAgB,KAAK,IAAI,EAAE;UAC3B,MAAM,IAAIptB,eAAe,CACrBU,qBAAqB,CAACwtB,gCAAgC,EACtD,+FAA+F,EAC/FZ,YACJ,CAAC;QACL,CAAC,MAAM,IAAI,CAAC,IAAI,CAAClpB,0BAA0B,CAAC+pB,6BAA6B,CAAC,CAAC,EAAE;UACzE,MAAM,IAAInuB,eAAe,CACrBU,qBAAqB,CAAC0tB,sCAAsC,EAC5D,oFAAoF,EACpFd,YACJ,CAAC;QACL,CAAC,MAAM;UACH,MAAM,IAAIttB,eAAe,CACrBU,qBAAqB,CAAC2tB,iCAAiC,EACvD,oHAAoH,EACpHf,YACJ,CAAC;QACL;MACJ;IACJ;;IAEA;IACA,IAAIhkB,GAAG,CAACglB,cAAc,EAAE;MACpB;MACA;MACA,IAAMC,WAAW,GACbjlB,GAAG,CAACglB,cAAc,KAAK,2DAA2D,GAC5E5tB,qBAAqB,CAAC8tB,yCAAyC,GAC/D9tB,qBAAqB,CAAC+tB,mBAAmB;MACnD,MAAM,IAAIzuB,eAAe,CAACuuB,WAAW,EAAEjlB,GAAG,CAACglB,cAAc,EAAEhB,YAAY,CAAC;IAC5E;IAEA,QAAQhkB,GAAG,CAACmkB,IAAI;MACZ,KAAK5tB,eAAe,CAAC6tB,mBAAmB,CAACC,cAAc;QACnD,MAAM,IAAI3tB,eAAe,CACrBU,qBAAqB,CAACguB,iCAAiC,EACvD,gEAAgE,EAChEpB,YACJ,CAAC;MAEL,KAAKztB,eAAe,CAAC6tB,mBAAmB,CAACE,mBAAmB;QACxD,MAAM,IAAI5tB,eAAe,CACrBU,qBAAqB,CAACiuB,yBAAyB,EAC/C,8EAA8E,EAC9ErB,YACJ,CAAC;MAEL,KAAKztB,eAAe,CAAC6tB,mBAAmB,CAACkB,mCAAmC;QACxE;QACA;QACA;QACA,IAAI,CAACjC,0BAA0B,CAAC5mB,KAAK,CAAC;QACtC,MAAM,IAAI/F,eAAe,CACrBU,qBAAqB,CAACmuB,mCAAmC,EACzD,iEACJ,CAAC;MAEL,KAAKhvB,eAAe,CAAC6tB,mBAAmB,CAACoB,mBAAmB;QACxD;QACA;QACA;QACA,IAAI,CAACnC,0BAA0B,CAAC5mB,KAAK,CAAC;QACtC,MAAM,IAAI/F,eAAe,CACrBU,qBAAqB,CAACquB,qBAAqB,EAC3C,iCACJ,CAAC;MAEL,KAAKlvB,eAAe,CAAC6tB,mBAAmB,CAACsB,oBAAoB;QACzD;QACA;QACA;QACA,IAAI,CAACrC,0BAA0B,CAAC5mB,KAAK,CAAC;QACtC,MAAM,IAAI/F,eAAe,CACrBU,qBAAqB,CAACuuB,sBAAsB,EAC5C,0CACJ,CAAC;;MAEL;MACA;MACA;QACI,MAAM,IAAIjvB,eAAe,CAACU,qBAAqB,CAACysB,aAAa,EAAE7jB,GAAG,CAAC4lB,WAAW,EAAE5B,YAAY,CAAC;IACrG;EACJ;EAEa9U,yBAAyBA,CAACzS,KAAkB,EAAuC;IAAA,IAAAopB,OAAA;IAAA,OAAAjpB,iBAAA;MAC5F,IAAI,CAACH,KAAK,CAACqpB,eAAe,CAAC,CAAC,IAAIrpB,KAAK,CAACykB,mBAAmB,CAAC,CAAC,EAAE;QACzD;QACA,OAAO,IAAI;MACf;;MAEA;MACA,IAAIzkB,KAAK,CAACspB,MAAM,KAAK,IAAI,EAAE;QACvB,OAAO;UAAEC,YAAY,EAAEtuB,iBAAiB,CAACuuB,IAAI;UAAEC,YAAY,EAAE;QAAK,CAAC;MACvE;MAEA,IAAMhM,cAAc,SAAS2L,OAAI,CAAC9rB,UAAU,CAACosB,0BAA0B,CACnEhD,cAAc,CAAC1mB,KAAK,CAAC,EACrB,IAAIlG,eAAe,CAAC0I,MAAM,CAACxC,KAAK,CAACK,SAAS,CAAC,CAAE,CACjD,CAAC;MAED,OAAOspB,oCAAoC,CAACP,OAAI,CAAC/rB,MAAM,EAAEogB,cAAc,CAAC;IAAC;EAC7E;;EAEA;AACJ;AACA;AACA;AACA;EACW0E,uBAAuBA,CAAC/hB,MAAc,EAAE4hB,SAAiB,EAAiB;IAC7E,IAAM4H,iBAAiB,GAAG,IAAI,CAACC,gBAAgB,CAACnU,GAAG,CAACtV,MAAM,CAAC;IAC3D,IAAI,CAACwpB,iBAAiB,EAAE,OAAO,EAAE;IAEjC,IAAME,oBAAoB,GAAGF,iBAAiB,CAAClU,GAAG,CAACsM,SAAS,CAAC;IAC7D,IAAI,CAAC8H,oBAAoB,EAAE,OAAO,EAAE;IAEpC,OAAO,CAAC,GAAGA,oBAAoB,CAAC;EACpC;;EAEA;AACJ;AACA;EACY9D,qBAAqBA,CAAChmB,KAAkB,EAAQ;IACpD,IAAMI,MAAM,GAAGJ,KAAK,CAACK,SAAS,CAAC,CAAC;IAChC;IACA,IAAI,CAACD,MAAM,EAAE;IAEb,IAAMwpB,iBAAiB,GAAG,IAAI,CAACC,gBAAgB,CAACE,WAAW,CAAC3pB,MAAM,CAAC;IACnE,IAAM0pB,oBAAoB,GAAGF,iBAAiB,CAACG,WAAW,CAAC/pB,KAAK,CAACsnB,cAAc,CAAC,CAAC,CAACG,UAAU,CAAC;IAC7FqC,oBAAoB,CAAC9hB,GAAG,CAAChI,KAAK,CAAC;EACnC;;EAEA;AACJ;AACA;EACY4mB,0BAA0BA,CAAC5mB,KAAkB,EAAQ;IACzD,IAAMI,MAAM,GAAGJ,KAAK,CAACK,SAAS,CAAC,CAAC;IAChC,IAAI,CAACD,MAAM,EAAE;IAEb,IAAMwpB,iBAAiB,GAAG,IAAI,CAACC,gBAAgB,CAACE,WAAW,CAAC3pB,MAAM,CAAC;IACnE,IAAI,CAACwpB,iBAAiB,EAAE;IAExB,IAAME,oBAAoB,GAAGF,iBAAiB,CAAClU,GAAG,CAAC1V,KAAK,CAACsnB,cAAc,CAAC,CAAC,CAACG,UAAU,CAAC;IACrF,IAAI,CAACqC,oBAAoB,EAAE;IAE3BA,oBAAoB,CAACjT,MAAM,CAAC7W,KAAK,CAAC;;IAElC;IACA,IAAI8pB,oBAAoB,CAACzmB,IAAI,KAAK,CAAC,EAAE;MACjCumB,iBAAiB,CAAC/S,MAAM,CAAC7W,KAAK,CAACsnB,cAAc,CAAC,CAAC,CAACG,UAAU,CAAC;MAC3D,IAAImC,iBAAiB,CAACvmB,IAAI,KAAK,CAAC,EAAE;QAC9B,IAAI,CAACwmB,gBAAgB,CAAChT,MAAM,CAACzW,MAAM,CAAC;MACxC;IACJ;EACJ;AACJ;AAEA,SAASsmB,cAAcA,CAAC1mB,KAAkB,EAAU;EAChD,OAAO4F,IAAI,CAACiO,SAAS,CAAC;IAClBU,QAAQ,EAAEvU,KAAK,CAACoiB,KAAK,CAAC,CAAC;IACvBnV,IAAI,EAAEjN,KAAK,CAACgqB,WAAW,CAAC,CAAC;IACzB/M,MAAM,EAAEjd,KAAK,CAACqlB,SAAS,CAAC,CAAC;IACzBK,SAAS,EAAE1lB,KAAK,CAAC0hB,WAAW,CAAC,CAAC;IAC9BvE,OAAO,EAAEnd,KAAK,CAACsnB,cAAc,CAAC,CAAC;IAC/B3B,gBAAgB,EAAE3lB,KAAK,CAAC4lB,KAAK,CAAC;EAClC,CAAC,CAAC;AACN;AAEA,SAAS+D,oCAAoCA,CACzCtsB,MAAc,EACdogB,cAA0D,EAChC;EAC1B,IAAIA,cAAc,KAAK1f,SAAS,EAAE;IAC9B;IACA,OAAO,IAAI;EACf;;EAEA;EACA,IAAMksB,WAAW,GAAGxM,cAAc,CAACwM,WAAW,CAAC,KAAK,CAAC;EAErD,IAAIV,YAA+B;EACnC,QAAQU,WAAW,CAACC,KAAK;IACrB,KAAKpwB,eAAe,CAACqwB,WAAW,CAACC,IAAI;MACjCb,YAAY,GAAGtuB,iBAAiB,CAACovB,IAAI;MACrC;IACJ,KAAKvwB,eAAe,CAACqwB,WAAW,CAACG,IAAI;MACjCf,YAAY,GAAGtuB,iBAAiB,CAACuuB,IAAI;MACrC;IACJ;MACID,YAAY,GAAGtuB,iBAAiB,CAACsvB,GAAG;EAC5C;EAEA,IAAId,YAAsC;EAC1C,QAAQQ,WAAW,CAACvC,IAAI;IACpB,KAAK3pB,SAAS;IACd,KAAK,IAAI;MACL0rB,YAAY,GAAG,IAAI;MACnB;IACJ,KAAK3vB,eAAe,CAAC0wB,eAAe,CAACC,yBAAyB;MAC1DhB,YAAY,GAAGvuB,iBAAiB,CAACwvB,2BAA2B;MAC5D;IACJ,KAAK5wB,eAAe,CAAC0wB,eAAe,CAACG,aAAa;MAC9ClB,YAAY,GAAGvuB,iBAAiB,CAAC0vB,cAAc;MAC/C;IACJ,KAAK9wB,eAAe,CAAC0wB,eAAe,CAACK,cAAc;MAC/CpB,YAAY,GAAGvuB,iBAAiB,CAAC4vB,eAAe;MAChD;IACJ,KAAKhxB,eAAe,CAAC0wB,eAAe,CAACO,kBAAkB;MACnDtB,YAAY,GAAGvuB,iBAAiB,CAAC8vB,mBAAmB;MACpD;IACJ,KAAKlxB,eAAe,CAAC0wB,eAAe,CAACS,qBAAqB;MACtDxB,YAAY,GAAGvuB,iBAAiB,CAACgwB,sBAAsB;MACvD;IACJ,KAAKpxB,eAAe,CAAC0wB,eAAe,CAACW,gBAAgB;MACjD1B,YAAY,GAAGvuB,iBAAiB,CAACkwB,iBAAiB;MAClD;IACJ;MACI3B,YAAY,GAAGvuB,iBAAiB,CAACmwB,OAAO;MACxC;EACR;EAEA,OAAO;IAAE9B,YAAY;IAAEE;EAAa,CAAC;AACzC;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS1L,sBAAsBA,CAACjB,OAAuB,EAAoD;EACvG,OACI,CAACA,OAAO,CAAC7P,IAAI,KAAK,oCAAoC,IAAI6P,OAAO,CAAC7P,IAAI,KAAK,mBAAmB,KAC9F,OAAO6P,OAAO,CAACK,OAAO,CAACa,OAAO,KAAK,QAAQ;AAEnD","ignoreList":[]}

package/node_modules/matrix-js-sdk/lib/rust-crypto/secret-storage.d.ts

@@ -0,0 +1,22 @@
+import { type SecretStorageKey, type ServerSideSecretStorage } from "../secret-storage.ts";
+/**
+ * Check that the private cross signing keys (master, self signing, user signing) are stored in the secret storage and encrypted with the default secret storage key.
+ *
+ * @param secretStorage - The secret store using account data
+ * @returns True if the cross-signing keys are all stored and encrypted with the same secret storage key.
+ *
+ * @internal
+ */
+export declare function secretStorageContainsCrossSigningKeys(secretStorage: ServerSideSecretStorage): Promise<boolean>;
+/**
+ *
+ * Check that the secret storage can access the given secrets using the default key.
+ *
+ * @param secretStorage - The secret store using account data
+ * @param secretNames - The secret names to check
+ * @returns True if all the given secrets are accessible and encrypted with the given key.
+ *
+ * @internal
+ */
+export declare function secretStorageCanAccessSecrets(secretStorage: ServerSideSecretStorage, secretNames: SecretStorageKey[]): Promise<boolean>;
+//# sourceMappingURL=secret-storage.d.ts.map

package/node_modules/matrix-js-sdk/lib/rust-crypto/secret-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-storage.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/secret-storage.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE3F;;;;;;;GAOG;AACH,wBAAsB,qCAAqC,CAAC,aAAa,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAMpH;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAC/C,aAAa,EAAE,uBAAuB,EACtC,WAAW,EAAE,gBAAgB,EAAE,GAChC,OAAO,CAAC,OAAO,CAAC,CAYlB"}

package/node_modules/matrix-js-sdk/lib/rust-crypto/secret-storage.js

@@ -0,0 +1,63 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+/**
+ * Check that the private cross signing keys (master, self signing, user signing) are stored in the secret storage and encrypted with the default secret storage key.
+ *
+ * @param secretStorage - The secret store using account data
+ * @returns True if the cross-signing keys are all stored and encrypted with the same secret storage key.
+ *
+ * @internal
+ */
+export function secretStorageContainsCrossSigningKeys(_x) {
+  return _secretStorageContainsCrossSigningKeys.apply(this, arguments);
+}
+
+/**
+ *
+ * Check that the secret storage can access the given secrets using the default key.
+ *
+ * @param secretStorage - The secret store using account data
+ * @param secretNames - The secret names to check
+ * @returns True if all the given secrets are accessible and encrypted with the given key.
+ *
+ * @internal
+ */
+function _secretStorageContainsCrossSigningKeys() {
+  _secretStorageContainsCrossSigningKeys = _asyncToGenerator(function* (secretStorage) {
+    return secretStorageCanAccessSecrets(secretStorage, ["m.cross_signing.master", "m.cross_signing.user_signing", "m.cross_signing.self_signing"]);
+  });
+  return _secretStorageContainsCrossSigningKeys.apply(this, arguments);
+}
+export function secretStorageCanAccessSecrets(_x2, _x3) {
+  return _secretStorageCanAccessSecrets.apply(this, arguments);
+}
+function _secretStorageCanAccessSecrets() {
+  _secretStorageCanAccessSecrets = _asyncToGenerator(function* (secretStorage, secretNames) {
+    var defaultKeyId = yield secretStorage.getDefaultKeyId();
+    if (!defaultKeyId) return false;
+    for (var secretName of secretNames) {
+      // check which keys this particular secret is encrypted with
+      var record = (yield secretStorage.isStored(secretName)) || {};
+      // if it's not encrypted with the right key, there is no point continuing
+      if (!(defaultKeyId in record)) return false;
+    }
+    return true;
+  });
+  return _secretStorageCanAccessSecrets.apply(this, arguments);
+}
+//# sourceMappingURL=secret-storage.js.map

package/node_modules/matrix-js-sdk/lib/rust-crypto/secret-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-storage.js","names":["secretStorageContainsCrossSigningKeys","_x","_secretStorageContainsCrossSigningKeys","apply","arguments","_asyncToGenerator","secretStorage","secretStorageCanAccessSecrets","_x2","_x3","_secretStorageCanAccessSecrets","secretNames","defaultKeyId","getDefaultKeyId","secretName","record","isStored"],"sources":["../../src/rust-crypto/secret-storage.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type SecretStorageKey, type ServerSideSecretStorage } from \"../secret-storage.ts\";\n\n/**\n * Check that the private cross signing keys (master, self signing, user signing) are stored in the secret storage and encrypted with the default secret storage key.\n *\n * @param secretStorage - The secret store using account data\n * @returns True if the cross-signing keys are all stored and encrypted with the same secret storage key.\n *\n * @internal\n */\nexport async function secretStorageContainsCrossSigningKeys(secretStorage: ServerSideSecretStorage): Promise<boolean> {\n    return secretStorageCanAccessSecrets(secretStorage, [\n        \"m.cross_signing.master\",\n        \"m.cross_signing.user_signing\",\n        \"m.cross_signing.self_signing\",\n    ]);\n}\n\n/**\n *\n * Check that the secret storage can access the given secrets using the default key.\n *\n * @param secretStorage - The secret store using account data\n * @param secretNames - The secret names to check\n * @returns True if all the given secrets are accessible and encrypted with the given key.\n *\n * @internal\n */\nexport async function secretStorageCanAccessSecrets(\n    secretStorage: ServerSideSecretStorage,\n    secretNames: SecretStorageKey[],\n): Promise<boolean> {\n    const defaultKeyId = await secretStorage.getDefaultKeyId();\n    if (!defaultKeyId) return false;\n\n    for (const secretName of secretNames) {\n        // check which keys this particular secret is encrypted with\n        const record = (await secretStorage.isStored(secretName)) || {};\n        // if it's not encrypted with the right key, there is no point continuing\n        if (!(defaultKeyId in record)) return false;\n    }\n\n    return true;\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsBA,qCAAqCA,CAAAC,EAAA;EAAA,OAAAC,sCAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;;AAQ3D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AATA,SAAAF,uCAAA;EAAAA,sCAAA,GAAAG,iBAAA,CARO,WAAqDC,aAAsC,EAAoB;IAClH,OAAOC,6BAA6B,CAACD,aAAa,EAAE,CAChD,wBAAwB,EACxB,8BAA8B,EAC9B,8BAA8B,CACjC,CAAC;EACN,CAAC;EAAA,OAAAJ,sCAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAYD,gBAAsBG,6BAA6BA,CAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,8BAAA,CAAAP,KAAA,OAAAC,SAAA;AAAA;AAelD,SAAAM,+BAAA;EAAAA,8BAAA,GAAAL,iBAAA,CAfM,WACHC,aAAsC,EACtCK,WAA+B,EACf;IAChB,IAAMC,YAAY,SAASN,aAAa,CAACO,eAAe,CAAC,CAAC;IAC1D,IAAI,CAACD,YAAY,EAAE,OAAO,KAAK;IAE/B,KAAK,IAAME,UAAU,IAAIH,WAAW,EAAE;MAClC;MACA,IAAMI,MAAM,GAAG,OAAOT,aAAa,CAACU,QAAQ,CAACF,UAAU,CAAC,KAAK,CAAC,CAAC;MAC/D;MACA,IAAI,EAAEF,YAAY,IAAIG,MAAM,CAAC,EAAE,OAAO,KAAK;IAC/C;IAEA,OAAO,IAAI;EACf,CAAC;EAAA,OAAAL,8BAAA,CAAAP,KAAA,OAAAC,SAAA;AAAA","ignoreList":[]}