@openclaw/matrix 2026.8.1-beta.3 → 2026.8.2

package/node_modules/matrix-js-sdk/lib/rust-crypto/backup.js

@@ -263,10 +263,6 @@ export class RustBackupManager extends TypedEventEmitter {
       return null;
     }
     this.checkedForBackup = true;
-    if (backupInfo && !backupInfo.version) {
-      this.logger.warn("active backup lacks a useful 'version'; ignoring it");
-      backupInfo = undefined;
-    }
     this.serverBackupInfo = backupInfo;
     const activeVersion = await this.getActiveBackupVersion();
     if (!backupInfo) {
@@ -290,29 +286,49 @@ export class RustBackupManager extends TypedEventEmitter {
         this.logger.debug("Key backup present on server but not trusted: not enabling key backup");
       }
     } else {
-      if (activeVersion === null) {
-        this.logger.debug(`Found usable key backup v${backupInfo.version}: enabling key backups`);
-        await this.enableKeyBackup(backupInfo);
-      } else if (activeVersion !== backupInfo.version) {
-        this.logger.debug(`On backup version ${activeVersion} but found version ${backupInfo.version}: switching.`);
-        // This will remove any pending backup request, remove the backup key and reset the backup state of each room key we have.
-        await this.disableKeyBackup();
-        // Enabling will now trigger re-upload of all the keys
-        await this.enableKeyBackup(backupInfo);
-      } else {
-        this.logger.debug(`Backup version ${backupInfo.version} still current`);
-      }
+      await this.enableOrSwitchKeyBackup(backupInfo, activeVersion);
     }
     return {
       backupInfo,
       trustInfo
     };
   }
+
+  /**
+   * Enable key backup upload for the given backup version, if it is not already.
+   *
+   * If backup is currently enabled for a different version, disables it first.
+   *
+   * Also emits one or more {@link CryptoEvent.KeyBackupStatus} events if the backup status changes.
+   *
+   * @param backupInfo - the desired backup version (and the encryption key).
+   * @param activeVersion - the current active backup version (or `null`, if none).
+   */
+  async enableOrSwitchKeyBackup(backupInfo, activeVersion) {
+    if (activeVersion === null) {
+      this.logger.debug(`Found usable key backup v${backupInfo.version}: enabling key backups`);
+      await this.enableKeyBackup(backupInfo);
+    } else if (activeVersion !== backupInfo.version) {
+      this.logger.debug(`On backup version ${activeVersion} but found version ${backupInfo.version}: switching.`);
+      // This will remove any pending backup request, remove the backup upload key from the OlmMachine and reset
+      // the backup state of each room key we have.
+      await this.disableKeyBackup();
+      // Enabling will now trigger re-upload of all the keys
+      await this.enableKeyBackup(backupInfo);
+    } else {
+      this.logger.debug(`Backup version ${backupInfo.version} still current`);
+    }
+  }
+
+  /**
+   * Helper for {@link enableOrSwitchKeyBackup}.
+   *
+   * Enables key backup upload for the given backup version. Also emits
+   * a {@link CryptoEvent.KeyBackupStatus} event.
+   */
   async enableKeyBackup(backupInfo) {
     // we know for certain it must be a Curve25519 key, because we have verified it and only Curve25519
     // keys can be verified.
-    //
-    // we also checked it has a valid `version`.
     await this.olmMachine.enableBackupV1(backupInfo.auth_data.public_key, backupInfo.version);
     this.activeBackupVersion = backupInfo.version;
     this.emit(CryptoEvent.KeyBackupStatus, true);
@@ -474,16 +490,24 @@ export class RustBackupManager extends TypedEventEmitter {
   }
 
   /**
-   * Creates a new key backup by generating a new random private key.
+   * Creates a new key backup by generating a new random private key, and then enable key backup upload and download
+   * using the new backup version.
    *
    * If there is an existing backup server side it will be deleted and replaced
    * by the new one.
    *
+   * Saves the decryption key in the Rust SDK's CryptoStore.
+   *
    * @param signObject - Method that should sign the backup with existing device and
    * existing identity.
    * @returns a KeyBackupCreationInfo - All information related to the backup.
    */
   async setupKeyBackup(signObject) {
+    // Wait for any active call to `checkKeyBackupAndEnable` to complete, to avoid racing with it
+    if (this.keyBackupCheckInProgress) {
+      await this.keyBackupCheckInProgress;
+    }
+
     // Clean up any existing backup
     await this.deleteAllKeyBackupVersions();
     const randomKey = RustSdkCryptoJs.BackupDecryptionKey.createRandomKey();
@@ -492,12 +516,29 @@ export class RustBackupManager extends TypedEventEmitter {
       public_key: pubKey.publicKeyBase64
     };
     await signObject(authData);
-    const res = await this.http.authedRequest(Method.Post, "/room_keys/version", undefined, {
+    const backupData = {
       algorithm: pubKey.algorithm,
       auth_data: authData
-    }, {
+    };
+    const res = await this.http.authedRequest(Method.Post, "/room_keys/version", undefined, backupData, {
       prefix: ClientPrefix.V3
     });
+
+    // This backup was just created and signed locally, so use the creation response to make up a full
+    // `KeyBackupInfo` struct representing the new backup, instead of doing another discovery/trust check.
+    const backupInfo = {
+      algorithm: pubKey.algorithm,
+      auth_data: authData,
+      version: res.version,
+      count: 0,
+      etag: "" // we never actually use the etag, so we can just make up a value
+    };
+
+    // saveBackupDecryptionKey emits KeyBackupDecryptionKeyCached. Cache and
+    // enable the created backup first so listeners observe the new version.
+    this.serverBackupInfo = backupInfo;
+    this.checkedForBackup = true;
+    await this.enableOrSwitchKeyBackup(backupInfo, await this.getActiveBackupVersion());
     await this.saveBackupDecryptionKey(randomKey, res.version);
     return {
       version: res.version,

package/node_modules/matrix-js-sdk/lib/rust-crypto/backup.js.map

@@ -1 +1 @@
-{"version":3,"file":"backup.js","names":[],"sources":["../../src/rust-crypto/backup.ts"],"sourcesContent":["/*\nCopyright 2023 - 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type OlmMachine, type SignatureVerification } from \"@matrix-org/matrix-sdk-crypto-wasm\";\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    type BackupTrustInfo,\n    type Curve25519AuthData,\n    type KeyBackupCheck,\n    type KeyBackupInfo,\n    type KeyBackupSession,\n    type Curve25519SessionData,\n    type KeyBackupRestoreOpts,\n    type KeyBackupRestoreResult,\n    type KeyBackupRoomSessions,\n} from \"../crypto-api/keybackup.ts\";\nimport { type Logger } from \"../logger.ts\";\nimport { ClientPrefix, type IHttpOpts, MatrixError, type MatrixHttpApi, Method } from \"../http-api/index.ts\";\nimport { TypedEventEmitter } from \"../models/typed-event-emitter.ts\";\nimport { encodeUri, logDuration } from \"../utils.ts\";\nimport { type OutgoingRequestProcessor } from \"./OutgoingRequestProcessor.ts\";\nimport { sleep } from \"../utils.ts\";\nimport { type BackupDecryptor } from \"../common-crypto/CryptoBackend.ts\";\nimport {\n    type ImportRoomKeyProgressData,\n    type ImportRoomKeysOpts,\n    CryptoEvent,\n    ImportRoomKeyStage,\n} from \"../crypto-api/index.ts\";\nimport { type AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\nimport { type IMegolmSessionData } from \"../@types/crypto.ts\";\n\n/** Authentification of the backup info, depends on algorithm */\ntype AuthData = KeyBackupInfo[\"auth_data\"];\n\n/**\n * Holds information of a created keybackup.\n * Useful to get the generated private key material and save it securely somewhere.\n */\ninterface KeyBackupCreationInfo {\n    version: string;\n    algorithm: string;\n    authData: AuthData;\n    decryptionKey: RustSdkCryptoJs.BackupDecryptionKey;\n}\n\n/**\n * @internal\n */\nexport class RustBackupManager extends TypedEventEmitter<RustBackupCryptoEvents, RustBackupCryptoEventMap> {\n    /** Have we checked if there is a backup on the server which we can use */\n    private checkedForBackup = false;\n\n    /**\n     * The latest backup version on the server, when we last checked.\n     *\n     * If there was no backup on the server, `null`. If our attempt to check resulted in an error, `undefined`.\n     *\n     * Note that the backup was not necessarily verified.\n     */\n    private serverBackupInfo: KeyBackupInfo | null | undefined = undefined;\n\n    private activeBackupVersion: string | null = null;\n    private stopped = false;\n\n    /** whether {@link backupKeysLoop} is currently running */\n    private backupKeysLoopRunning = false;\n\n    /** The logger to use */\n    private readonly logger: Logger;\n\n    public constructor(\n        logger: Logger,\n        private readonly olmMachine: OlmMachine,\n        private readonly http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n        private readonly outgoingRequestProcessor: OutgoingRequestProcessor,\n    ) {\n        super();\n        this.logger = logger.getChild(\"[RustBackupManager]\");\n    }\n\n    /**\n     * Tells the RustBackupManager to stop.\n     * The RustBackupManager is scheduling background uploads of keys to the backup, this\n     * call allows to cancel the process when the client is stoppped.\n     */\n    public stop(): void {\n        this.stopped = true;\n    }\n\n    /**\n     * Get the backup version we are currently backing up to, if any\n     */\n    public async getActiveBackupVersion(): Promise<string | null> {\n        if (!(await this.olmMachine.isBackupEnabled())) return null;\n        return this.activeBackupVersion;\n    }\n\n    /**\n     * Return the details of the latest backup on the server, when we last checked.\n     *\n     * This normally returns a cached value, but if we haven't yet made a request to the server, it will fire one off.\n     * It will always return the details of the active backup if key backup is enabled.\n     *\n     * If there was no backup on the server, `null`. If our attempt to check resulted in an error, `undefined`.\n     */\n    public async getServerBackupInfo(): Promise<KeyBackupInfo | null | undefined> {\n        // Do a validity check if we haven't already done one. The check is likely to fail if we don't yet have the\n        // backup keys -- but as a side-effect, it will populate `serverBackupInfo`.\n        await this.checkKeyBackupAndEnable(false);\n        return this.serverBackupInfo;\n    }\n\n    /**\n     * Determine if a key backup can be trusted.\n     *\n     * @param info - key backup info dict from {@link CryptoApi.getKeyBackupInfo}.\n     */\n    public async isKeyBackupTrusted(info: KeyBackupInfo): Promise<BackupTrustInfo> {\n        const signatureVerification: SignatureVerification = await this.olmMachine.verifyBackup(info);\n\n        const backupKeys: RustSdkCryptoJs.BackupKeys = await this.olmMachine.getBackupKeys();\n        const decryptionKey = backupKeys?.decryptionKey;\n        const backupMatchesSavedPrivateKey =\n            !!decryptionKey && this.backupInfoMatchesBackupDecryptionKey(info, decryptionKey);\n        return {\n            matchesDecryptionKey: backupMatchesSavedPrivateKey,\n            trusted: signatureVerification.trusted(),\n        };\n    }\n\n    /**\n     * Re-check the key backup and enable/disable it as appropriate.\n     *\n     * @param force - whether we should force a re-check even if one has already happened. If this is\n     *   `false`, and we have already done a check, `null` is returned rather than the actual info on the key backup.\n     */\n    public checkKeyBackupAndEnable(force: boolean): Promise<KeyBackupCheck | null> {\n        if (!force && this.checkedForBackup) {\n            return Promise.resolve(null);\n        }\n\n        // make sure there is only one check going on at a time\n        if (!this.keyBackupCheckInProgress) {\n            this.keyBackupCheckInProgress = this.doCheckKeyBackup().finally(() => {\n                this.keyBackupCheckInProgress = null;\n            });\n        }\n        return this.keyBackupCheckInProgress;\n    }\n\n    /**\n     * Handles a backup secret received event and store it if it matches the current backup version.\n     *\n     * Also enables key backup upload if it was not previously enabled, and the encryption key matches the received\n     * decryption key.\n     *\n     * @param secret - The secret as received from a `m.secret.send` or `io.element.msc4385.secret.push` event for secret `m.megolm_backup.v1`.\n     * @returns true if the secret is valid and has been stored, false otherwise.\n     */\n    public async handleBackupSecretReceived(secret: string): Promise<boolean> {\n        // Currently we only receive the decryption key without any key backup version. It is important to\n        // check that the secret is valid for the current version before storing it.\n        // We force a check to ensure to have the latest version.\n        let latestBackupInfo: KeyBackupInfo | null;\n        try {\n            latestBackupInfo = await this.requestKeyBackupVersion();\n        } catch (e) {\n            this.logger.warn(\"handleBackupSecretReceived: Error checking for latest key backup\", e);\n            return false;\n        }\n\n        if (!latestBackupInfo?.version) {\n            // There is no server-side key backup.\n            // This decryption key is useless to us.\n            this.logger.warn(\n                \"handleBackupSecretReceived: Received a backup decryption key, but there is no server-side key backup\",\n            );\n            return false;\n        }\n\n        let backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey;\n        try {\n            backupDecryptionKey = RustSdkCryptoJs.BackupDecryptionKey.fromBase64(secret);\n        } catch (e) {\n            this.logger.warn(\"handleBackupSecretReceived: Invalid backup decryption key\", e);\n            return false;\n        }\n\n        try {\n            const privateKeyMatches = this.backupInfoMatchesBackupDecryptionKey(latestBackupInfo, backupDecryptionKey);\n            if (!privateKeyMatches) {\n                this.logger.warn(\n                    `handleBackupSecretReceived: Private decryption key does not match the public key of the current server-side backup version (${latestBackupInfo.version})`,\n                );\n                // just ignore the secret\n                return false;\n            }\n            this.logger.info(\n                `handleBackupSecretReceived: Valid decryption key for the current server-side backup version (${latestBackupInfo.version}) received`,\n            );\n            await this.saveBackupDecryptionKey(backupDecryptionKey, latestBackupInfo.version);\n\n            // Check if backup upload should be enabled (e.g. the encryption key matches the decryption key),\n            // and enable it if so.\n            if (this.keyBackupCheckInProgress) {\n                this.logger.debug(\"handleBackupSecretReceived: waiting for ongoing keybackup check to complete\");\n                await this.keyBackupCheckInProgress;\n            }\n            this.logger.debug(\"handleBackupSecretReceived: checking if we can enable keybackup upload\");\n            this.keyBackupCheckInProgress = this.doCheckKeyBackup(latestBackupInfo).finally(() => {\n                this.keyBackupCheckInProgress = null;\n            });\n            await this.keyBackupCheckInProgress;\n            return true;\n        } catch (e) {\n            this.logger.warn(\"handleBackupSecretReceived: Unable to validate backup decryption key\", e);\n        }\n\n        return false;\n    }\n\n    public async saveBackupDecryptionKey(\n        backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n        version: string,\n    ): Promise<void> {\n        await this.olmMachine.saveBackupDecryptionKey(backupDecryptionKey, version);\n        // Emit an event that we have a new backup decryption key, so that the sdk can start\n        // importing keys from backup if needed.\n        this.emit(CryptoEvent.KeyBackupDecryptionKeyCached, version);\n    }\n\n    /**\n     * Import a list of room keys previously exported by exportRoomKeys\n     *\n     * @param keys - a list of session export objects\n     * @param opts - options object\n     * @returns a promise which resolves once the keys have been imported\n     */\n    public async importRoomKeys(keys: IMegolmSessionData[], opts?: ImportRoomKeysOpts): Promise<void> {\n        await this.importRoomKeysAsJson(JSON.stringify(keys), opts);\n    }\n\n    /**\n     * Import a list of room keys previously exported by exportRoomKeysAsJson\n     *\n     * @param jsonKeys - a JSON string encoding a list of session export objects,\n     *    each of which is an IMegolmSessionData\n     * @param opts - options object\n     * @returns a promise which resolves once the keys have been imported\n     */\n    public async importRoomKeysAsJson(jsonKeys: string, opts?: ImportRoomKeysOpts): Promise<void> {\n        await this.olmMachine.importExportedRoomKeys(jsonKeys, (progress: bigint, total: bigint): void => {\n            const importOpt: ImportRoomKeyProgressData = {\n                total: Number(total),\n                successes: Number(progress),\n                stage: ImportRoomKeyStage.LoadKeys,\n                failures: 0,\n            };\n            opts?.progressCallback?.(importOpt);\n        });\n    }\n\n    /**\n     * Implementation of {@link CryptoBackend#importBackedUpRoomKeys}.\n     */\n    public async importBackedUpRoomKeys(\n        keys: IMegolmSessionData[],\n        backupVersion: string,\n        opts?: ImportRoomKeysOpts,\n    ): Promise<void> {\n        const keysByRoom: Map<RustSdkCryptoJs.RoomId, Map<string, IMegolmSessionData>> = new Map();\n        for (const key of keys) {\n            const roomId = new RustSdkCryptoJs.RoomId(key.room_id);\n            if (!keysByRoom.has(roomId)) {\n                keysByRoom.set(roomId, new Map());\n            }\n            keysByRoom.get(roomId)!.set(key.session_id, key);\n        }\n        await this.olmMachine.importBackedUpRoomKeys(\n            keysByRoom,\n            (progress: bigint, total: bigint, failures: bigint): void => {\n                const importOpt: ImportRoomKeyProgressData = {\n                    total: Number(total),\n                    successes: Number(progress),\n                    stage: ImportRoomKeyStage.LoadKeys,\n                    failures: Number(failures),\n                };\n                opts?.progressCallback?.(importOpt);\n            },\n            backupVersion,\n        );\n    }\n\n    private keyBackupCheckInProgress: Promise<KeyBackupCheck | null> | null = null;\n\n    /** Helper to check the key backup status, and enable/disable it as appropriate\n     *\n     * A KeyBackupInfo can be passed if it was fetched recently, to avoid trying to\n     * re-fetch it from the server.\n     */\n    private async doCheckKeyBackup(backupInfo?: KeyBackupInfo | null | undefined): Promise<KeyBackupCheck | null> {\n        this.logger.debug(\"Checking key backup status...\");\n        try {\n            if (!backupInfo) {\n                backupInfo = await this.requestKeyBackupVersion();\n            }\n        } catch (e) {\n            this.logger.warn(\"Error checking for active key backup\", e);\n            this.serverBackupInfo = undefined;\n            return null;\n        }\n        this.checkedForBackup = true;\n\n        if (backupInfo && !backupInfo.version) {\n            this.logger.warn(\"active backup lacks a useful 'version'; ignoring it\");\n            backupInfo = undefined;\n        }\n        this.serverBackupInfo = backupInfo;\n\n        const activeVersion = await this.getActiveBackupVersion();\n\n        if (!backupInfo) {\n            if (activeVersion !== null) {\n                this.logger.debug(\"No key backup present on server: disabling key backup\");\n                await this.disableKeyBackup();\n            } else {\n                this.logger.debug(\"No key backup present on server: not enabling key backup\");\n            }\n            return null;\n        }\n\n        const trustInfo = await this.isKeyBackupTrusted(backupInfo);\n\n        // Per the spec, we should enable key upload if either (a) the backup is signed by a trusted key, or\n        // (b) the public key matches the private decryption key that we have received from 4S.\n        if (!trustInfo.matchesDecryptionKey && !trustInfo.trusted) {\n            if (activeVersion !== null) {\n                this.logger.debug(\"Key backup present on server but not trusted: disabling key backup\");\n                await this.disableKeyBackup();\n            } else {\n                this.logger.debug(\"Key backup present on server but not trusted: not enabling key backup\");\n            }\n        } else {\n            if (activeVersion === null) {\n                this.logger.debug(`Found usable key backup v${backupInfo.version}: enabling key backups`);\n                await this.enableKeyBackup(backupInfo);\n            } else if (activeVersion !== backupInfo.version) {\n                this.logger.debug(\n                    `On backup version ${activeVersion} but found version ${backupInfo.version}: switching.`,\n                );\n                // This will remove any pending backup request, remove the backup key and reset the backup state of each room key we have.\n                await this.disableKeyBackup();\n                // Enabling will now trigger re-upload of all the keys\n                await this.enableKeyBackup(backupInfo);\n            } else {\n                this.logger.debug(`Backup version ${backupInfo.version} still current`);\n            }\n        }\n        return { backupInfo, trustInfo };\n    }\n\n    private async enableKeyBackup(backupInfo: KeyBackupInfo): Promise<void> {\n        // we know for certain it must be a Curve25519 key, because we have verified it and only Curve25519\n        // keys can be verified.\n        //\n        // we also checked it has a valid `version`.\n        await this.olmMachine.enableBackupV1(\n            (backupInfo.auth_data as Curve25519AuthData).public_key,\n            backupInfo.version!,\n        );\n        this.activeBackupVersion = backupInfo.version!;\n\n        this.emit(CryptoEvent.KeyBackupStatus, true);\n\n        this.backupKeysLoop();\n    }\n\n    /**\n     * Restart the backup key loop if there is an active trusted backup.\n     * Doesn't try to check the backup server side. To be called when a new\n     * megolm key is known locally.\n     */\n    public async maybeUploadKey(): Promise<void> {\n        if (this.activeBackupVersion != null) {\n            this.backupKeysLoop();\n        }\n    }\n\n    private async disableKeyBackup(): Promise<void> {\n        await this.olmMachine.disableBackup();\n        this.activeBackupVersion = null;\n        this.emit(CryptoEvent.KeyBackupStatus, false);\n    }\n\n    private async backupKeysLoop(maxDelay = 10000): Promise<void> {\n        if (this.backupKeysLoopRunning) {\n            this.logger.debug(`Backup loop already running`);\n            return;\n        }\n        this.backupKeysLoopRunning = true;\n\n        this.logger.debug(`Backup: Starting keys upload loop for backup version:${this.activeBackupVersion}.`);\n\n        // wait between 0 and `maxDelay` seconds, to avoid backup\n        // requests from different clients hitting the server all at\n        // the same time when a new key is sent\n        const delay = Math.random() * maxDelay;\n        await sleep(delay);\n\n        try {\n            // number of consecutive network failures for exponential backoff\n            let numFailures = 0;\n            // The number of keys left to back up. (Populated lazily: see more comments below.)\n            let remainingToUploadCount: number | null = null;\n            // To avoid computing the key when only a few keys were added (after a sync for example),\n            // we compute the count only when at least two iterations are needed.\n            let isFirstIteration = true;\n\n            while (!this.stopped) {\n                // Get a batch of room keys to upload\n                let request: RustSdkCryptoJs.KeysBackupRequest | undefined = undefined;\n                try {\n                    request = await logDuration(\n                        this.logger,\n                        \"BackupRoomKeys: Get keys to backup from rust crypto-sdk\",\n                        async () => {\n                            return await this.olmMachine.backupRoomKeys();\n                        },\n                    );\n                } catch (err) {\n                    this.logger.error(\"Backup: Failed to get keys to backup from rust crypto-sdk\", err);\n                }\n\n                if (!request || this.stopped || !this.activeBackupVersion) {\n                    this.logger.debug(`Backup: Ending loop for version ${this.activeBackupVersion}.`);\n                    if (!request) {\n                        // nothing more to upload\n                        this.emit(CryptoEvent.KeyBackupSessionsRemaining, 0);\n                    }\n                    return;\n                }\n\n                try {\n                    await this.outgoingRequestProcessor.makeOutgoingRequest(request);\n                    numFailures = 0;\n                    if (this.stopped) break;\n\n                    // Key count performance (`olmMachine.roomKeyCounts()`) can be pretty bad on some configurations.\n                    // In particular, we detected on some M1 macs that when the object store reaches a threshold, the count\n                    // performance stops growing in O(n) and suddenly becomes very slow (40s, 60s or more).\n                    // For reference, the performance drop occurs around 300-400k keys on the platforms where this issue is observed.\n                    // Even on other configurations, the count can take several seconds.\n                    // This will block other operations on the database, like sending messages.\n                    //\n                    // This is a workaround to avoid calling `olmMachine.roomKeyCounts()` too often, and only when necessary.\n                    // We don't call it on the first loop because there could be only a few keys to upload, and we don't want to wait for the count.\n                    if (!isFirstIteration && remainingToUploadCount === null) {\n                        try {\n                            const keyCount = await this.olmMachine.roomKeyCounts();\n                            remainingToUploadCount = keyCount.total - keyCount.backedUp;\n                        } catch (err) {\n                            this.logger.error(\"Backup: Failed to get key counts from rust crypto-sdk\", err);\n                        }\n                    }\n\n                    if (remainingToUploadCount !== null) {\n                        this.emit(CryptoEvent.KeyBackupSessionsRemaining, remainingToUploadCount);\n                        const keysCountInBatch = this.keysCountInBatch(request);\n                        // `OlmMachine.roomKeyCounts` is called only once for the current backupKeysLoop. But new\n                        // keys could be added during the current loop (after a sync for example).\n                        // So the count can get out of sync with the real number of remaining keys to upload.\n                        // Depending on the number of new keys imported and the time to complete the loop,\n                        // this could result in multiple events being emitted with a remaining key count of 0.\n                        remainingToUploadCount = Math.max(remainingToUploadCount - keysCountInBatch, 0);\n                    }\n                } catch (err) {\n                    numFailures++;\n                    this.logger.error(\"Backup: Error processing backup request for rust crypto-sdk\", err);\n                    if (err instanceof MatrixError) {\n                        const errCode = err.data.errcode;\n                        if (errCode == \"M_NOT_FOUND\" || errCode == \"M_WRONG_ROOM_KEYS_VERSION\") {\n                            this.logger.debug(`Backup: Failed to upload keys to current vesion: ${errCode}.`);\n                            try {\n                                await this.disableKeyBackup();\n                            } catch (error) {\n                                this.logger.error(\"Backup: An error occurred while disabling key backup:\", error);\n                            }\n                            this.emit(CryptoEvent.KeyBackupFailed, err.data.errcode!);\n                            // There was an active backup and we are out of sync with the server\n                            // force a check server side\n                            this.backupKeysLoopRunning = false;\n                            this.checkKeyBackupAndEnable(true);\n                            return;\n                        } else if (err.isRateLimitError()) {\n                            // wait for that and then continue?\n                            try {\n                                const waitTime = err.getRetryAfterMs();\n                                if (waitTime && waitTime > 0) {\n                                    await sleep(waitTime);\n                                    continue;\n                                }\n                            } catch (error) {\n                                this.logger.warn(\n                                    \"Backup: An error occurred while retrieving a rate-limit retry delay\",\n                                    error,\n                                );\n                            } // else go to the normal backoff\n                        }\n                    }\n\n                    // Some other errors (mx, network, or CORS or invalid urls?) anyhow backoff\n                    // exponential backoff if we have failures\n                    await sleep(1000 * Math.pow(2, Math.min(numFailures - 1, 4)));\n                }\n                isFirstIteration = false;\n            }\n        } finally {\n            this.backupKeysLoopRunning = false;\n        }\n    }\n\n    /**\n     * Utility method to count the number of keys in a backup request, in order to update the remaining keys count.\n     * This should be the chunk size of the backup request for all requests but the last, but we don't have access to it\n     * (it's static in the Rust SDK).\n     * @param batch - The backup request to count the keys from.\n     *\n     * @returns The number of keys in the backup request.\n     */\n    private keysCountInBatch(batch: RustSdkCryptoJs.KeysBackupRequest): number {\n        const parsedBody: KeyBackup = JSON.parse(batch.body);\n        return countKeysInBackup(parsedBody);\n    }\n\n    /**\n     * Get information about a key backup from the server\n     * - If version is provided, get information about that backup version.\n     * - If no version is provided, get information about the latest backup.\n     *\n     * @param version - The version of the backup to get information about.\n     * @returns Information object from API or null if there is no active backup.\n     */\n    public async requestKeyBackupVersion(version?: string): Promise<KeyBackupInfo | null> {\n        return await requestKeyBackupVersion(this.http, version);\n    }\n\n    /**\n     * Creates a new key backup by generating a new random private key.\n     *\n     * If there is an existing backup server side it will be deleted and replaced\n     * by the new one.\n     *\n     * @param signObject - Method that should sign the backup with existing device and\n     * existing identity.\n     * @returns a KeyBackupCreationInfo - All information related to the backup.\n     */\n    public async setupKeyBackup(signObject: (authData: AuthData) => Promise<void>): Promise<KeyBackupCreationInfo> {\n        // Clean up any existing backup\n        await this.deleteAllKeyBackupVersions();\n\n        const randomKey = RustSdkCryptoJs.BackupDecryptionKey.createRandomKey();\n        const pubKey = randomKey.megolmV1PublicKey;\n\n        const authData = { public_key: pubKey.publicKeyBase64 };\n\n        await signObject(authData);\n\n        const res = await this.http.authedRequest<{ version: string }>(\n            Method.Post,\n            \"/room_keys/version\",\n            undefined,\n            {\n                algorithm: pubKey.algorithm,\n                auth_data: authData,\n            },\n            {\n                prefix: ClientPrefix.V3,\n            },\n        );\n\n        await this.saveBackupDecryptionKey(randomKey, res.version);\n\n        return {\n            version: res.version,\n            algorithm: pubKey.algorithm,\n            authData: authData,\n            decryptionKey: randomKey,\n        };\n    }\n\n    /**\n     * Deletes all key backups.\n     *\n     * Will call the API to delete active backup until there is no more present.\n     */\n    public async deleteAllKeyBackupVersions(): Promise<void> {\n        // there could be several backup versions. Delete all to be safe.\n        let current = (await this.requestKeyBackupVersion())?.version ?? null;\n        while (current != null) {\n            await this.deleteKeyBackupVersion(current);\n            current = (await this.requestKeyBackupVersion())?.version ?? null;\n        }\n\n        // XXX: Should this also update Secret Storage and delete any existing keys?\n    }\n\n    /**\n     * Deletes the given key backup.\n     *\n     * @param version - The backup version to delete.\n     */\n    public async deleteKeyBackupVersion(version: string): Promise<void> {\n        this.logger.debug(`deleteKeyBackupVersion v:${version}`);\n        const path = encodeUri(\"/room_keys/version/$version\", { $version: version });\n        await this.http.authedRequest<void>(Method.Delete, path, undefined, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n        // If the backup we are deleting is the active one, we need to disable the key backup and to have the local properties reset\n        if (this.activeBackupVersion === version) {\n            this.serverBackupInfo = null;\n            await this.disableKeyBackup();\n        }\n    }\n\n    /**\n     * Creates a new backup decryptor for the given private key.\n     * @param decryptionKey - The private key to use for decryption.\n     */\n    public createBackupDecryptor(decryptionKey: RustSdkCryptoJs.BackupDecryptionKey): BackupDecryptor {\n        return new RustBackupDecryptor(this.logger, decryptionKey);\n    }\n\n    /**\n     * Restore a key backup.\n     *\n     * @param backupVersion - The version of the backup to restore.\n     * @param backupDecryptor - The backup decryptor to use to decrypt the keys.\n     * @param opts - Options for the restore.\n     * @returns The total number of keys and the total imported.\n     */\n    public async restoreKeyBackup(\n        backupVersion: string,\n        backupDecryptor: BackupDecryptor,\n        opts?: KeyBackupRestoreOpts,\n    ): Promise<KeyBackupRestoreResult> {\n        const keyBackup = await this.downloadKeyBackup(backupVersion);\n\n        return this.importKeyBackup(keyBackup, backupVersion, backupDecryptor, opts);\n    }\n\n    /**\n     * Download and import the keys for a given room from the current backup version.\n     *\n     * @param roomId - The room in question.\n     */\n    public async downloadLatestRoomKeyBackup(roomId: string): Promise<void> {\n        const { backupVersion, decryptionKey } = await this.olmMachine.getBackupKeys();\n        if (!backupVersion || !decryptionKey) {\n            this.logger.warn(\n                `downloadLatestRoomKeyBackup: Could not download backup (backupVersion=${backupVersion}, hasDecryptionKey=${!!decryptionKey})`,\n            );\n            return;\n        }\n        const sessions = await this.downloadRoomKeyBackup(backupVersion, roomId);\n        const backupDecryptor = this.createBackupDecryptor(decryptionKey);\n        this.importKeyBackup({ rooms: { [roomId]: { sessions } } }, backupVersion, backupDecryptor);\n    }\n\n    /**\n     * Call `/room_keys/keys` to download the key backup (room keys) for the given backup version.\n     * https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keyskeys\n     *\n     * @param backupVersion\n     * @returns The key backup response.\n     */\n    private downloadKeyBackup(backupVersion: string): Promise<KeyBackup> {\n        return this.http.authedRequest<KeyBackup>(\n            Method.Get,\n            \"/room_keys/keys\",\n            { version: backupVersion },\n            undefined,\n            {\n                prefix: ClientPrefix.V3,\n            },\n        );\n    }\n\n    /**\n     * Call `/room/keys/keys/{roomId}` to download the key backup (room keys) for a given backup version and room ID.\n     * @param backupVersion - The version to download.\n     * @param roomId - The ID of the room.\n     * @returns The key backup response.\n     */\n    private downloadRoomKeyBackup(backupVersion: string, roomId: string): Promise<KeyBackupRoomSessions> {\n        const path = encodeUri(\"/room_keys/keys/$roomId\", {\n            $roomId: roomId,\n        });\n        return this.http.authedRequest<KeyBackupRoomSessions>(Method.Get, path, { version: backupVersion }, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    }\n\n    /**\n     * Import the room keys from a `/room_keys/keys` call.\n     * Calls `opts.progressCallback` with the progress of the import.\n     *\n     * @param keyBackup - The response from the server containing the keys to import.\n     * @param backupVersion - The version of the backup info.\n     * @param backupDecryptor - The backup decryptor to use to decrypt the keys.\n     * @param opts - Options for the import.\n     *\n     * @returns The total number of keys and the total imported.\n     *\n     * @private\n     */\n    private async importKeyBackup(\n        keyBackup: KeyBackup,\n        backupVersion: string,\n        backupDecryptor: BackupDecryptor,\n        opts?: KeyBackupRestoreOpts,\n    ): Promise<KeyBackupRestoreResult> {\n        // We have a full backup here, it can get quite big, so we need to decrypt and import it in chunks.\n\n        const CHUNK_SIZE = 200;\n        // Get the total count as a first pass\n        const totalKeyCount = countKeysInBackup(keyBackup);\n        let totalImported = 0;\n        let totalFailures = 0;\n\n        opts?.progressCallback?.({\n            total: totalKeyCount,\n            successes: totalImported,\n            stage: ImportRoomKeyStage.LoadKeys,\n            failures: totalFailures,\n        });\n\n        /**\n         * This method is called when we have enough chunks to decrypt.\n         * It will decrypt the chunks and try to import the room keys.\n         * @param roomChunks\n         */\n        const handleChunkCallback = async (roomChunks: Map<string, KeyBackupRoomSessions>): Promise<void> => {\n            const currentChunk: IMegolmSessionData[] = [];\n            for (const roomId of roomChunks.keys()) {\n                // Decrypt the sessions for the given room\n                const decryptedSessions = await backupDecryptor.decryptSessions(roomChunks.get(roomId)!);\n                // Add the decrypted sessions to the current chunk\n                decryptedSessions.forEach((session) => {\n                    // We set the room_id for each session\n                    session.room_id = roomId;\n                    currentChunk.push(session);\n                });\n            }\n\n            // We have a chunk of decrypted keys: import them\n            try {\n                await this.importBackedUpRoomKeys(currentChunk, backupVersion);\n                totalImported += currentChunk.length;\n            } catch (e) {\n                totalFailures += currentChunk.length;\n                // We failed to import some keys, but we should still try to import the rest?\n                // Log the error and continue\n                this.logger.error(\"Error importing keys from backup\", e);\n            }\n\n            opts?.progressCallback?.({\n                total: totalKeyCount,\n                successes: totalImported,\n                stage: ImportRoomKeyStage.LoadKeys,\n                failures: totalFailures,\n            });\n        };\n\n        let groupChunkCount = 0;\n        let chunkGroupByRoom: Map<string, KeyBackupRoomSessions> = new Map();\n\n        // Iterate over the rooms and sessions to group them in chunks\n        // And we call the handleChunkCallback when we have enough chunks to decrypt\n        for (const [roomId, roomData] of Object.entries(keyBackup.rooms)) {\n            // If there are no sessions for the room, skip it\n            if (!roomData.sessions) continue;\n\n            // Initialize a new chunk group for the current room\n            chunkGroupByRoom.set(roomId, {});\n\n            for (const [sessionId, session] of Object.entries(roomData.sessions)) {\n                // We set previously the chunk group for the current room, so we can safely get it\n                const sessionsForRoom = chunkGroupByRoom.get(roomId)!;\n                sessionsForRoom[sessionId] = session;\n                groupChunkCount += 1;\n                // If we have enough chunks to decrypt, call the block callback\n                if (groupChunkCount >= CHUNK_SIZE) {\n                    // We have enough chunks to decrypt\n                    await handleChunkCallback(chunkGroupByRoom);\n                    // Reset the chunk group\n                    chunkGroupByRoom = new Map();\n                    // There might be remaining keys for that room, so add back an entry for the current room.\n                    chunkGroupByRoom.set(roomId, {});\n                    groupChunkCount = 0;\n                }\n            }\n        }\n\n        // Handle remaining chunk if needed\n        if (groupChunkCount > 0) {\n            await handleChunkCallback(chunkGroupByRoom);\n        }\n\n        return { total: totalKeyCount, imported: totalImported };\n    }\n\n    /**\n     * Checks if the provided backup info matches the given private key.\n     *\n     * @param info - The backup info to check.\n     * @param backupDecryptionKey - The `BackupDecryptionKey` private key to check against.\n     * @returns `true` if the private key can decrypt the backup, `false` otherwise.\n     */\n    private backupInfoMatchesBackupDecryptionKey(\n        info: KeyBackupInfo,\n        backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n    ): boolean {\n        if (info.algorithm !== \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            this.logger.warn(\"backupMatchesPrivateKey: Unsupported backup algorithm\", info.algorithm);\n            return false;\n        }\n\n        return (\n            (info.auth_data as Curve25519AuthData)?.public_key === backupDecryptionKey.megolmV1PublicKey.publicKeyBase64\n        );\n    }\n}\n/**\n * Implementation of {@link BackupDecryptor} for the rust crypto backend.\n */\nexport class RustBackupDecryptor implements BackupDecryptor {\n    private decryptionKey: RustSdkCryptoJs.BackupDecryptionKey;\n    public sourceTrusted: boolean;\n\n    public constructor(\n        private readonly logger: Logger,\n        decryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n    ) {\n        this.decryptionKey = decryptionKey;\n        this.sourceTrusted = false;\n    }\n\n    /**\n     * Implements {@link BackupDecryptor#decryptSessions}\n     */\n    public async decryptSessions(\n        ciphertexts: Record<string, KeyBackupSession<Curve25519SessionData | AESEncryptedSecretStoragePayload>>,\n    ): Promise<IMegolmSessionData[]> {\n        const keys: IMegolmSessionData[] = [];\n        for (const [sessionId, sessionData] of Object.entries(ciphertexts)) {\n            try {\n                const decrypted = JSON.parse(\n                    this.decryptionKey.decryptV1(\n                        sessionData.session_data.ephemeral,\n                        sessionData.session_data.mac,\n                        sessionData.session_data.ciphertext,\n                    ),\n                );\n                decrypted.session_id = sessionId;\n                keys.push(decrypted);\n            } catch (e) {\n                this.logger.debug(\"Failed to decrypt megolm session from backup\", e, sessionData);\n            }\n        }\n        return keys;\n    }\n\n    /**\n     * Implements {@link BackupDecryptor#free}\n     */\n    public free(): void {\n        this.decryptionKey.free();\n    }\n}\n\n/**\n * Fetch a key backup info from the server.\n *\n * If `version` is provided, calls `GET /room_keys/version/$version` and gets the backup info for that version.\n * See https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keysversionversion.\n *\n * If not, calls `GET /room_keys/version` and gets the latest backup info.\n * See https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keysversion\n *\n * @param http\n * @param version - the specific version of the backup info to fetch\n * @returns The key backup info or null if there is no backup.\n */\nexport async function requestKeyBackupVersion(\n    http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n    version?: string,\n): Promise<KeyBackupInfo | null> {\n    try {\n        const path = version ? encodeUri(\"/room_keys/version/$version\", { $version: version }) : \"/room_keys/version\";\n        return await http.authedRequest<KeyBackupInfo>(Method.Get, path, undefined, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    } catch (e) {\n        if ((<MatrixError>e).errcode === \"M_NOT_FOUND\") {\n            return null;\n        } else {\n            throw e;\n        }\n    }\n}\n\n/**\n * Checks if the provided decryption key matches the public key of the key backup info.\n *\n * @param decryptionKey - The decryption key to check.\n * @param keyBackupInfo - The key backup info to check against.\n * @returns `true` if the decryption key matches the key backup info, `false` otherwise.\n */\nexport function decryptionKeyMatchesKeyBackupInfo(\n    decryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n    keyBackupInfo: KeyBackupInfo,\n): boolean {\n    const authData = <Curve25519AuthData>keyBackupInfo.auth_data;\n    return authData.public_key === decryptionKey.megolmV1PublicKey.publicKeyBase64;\n}\n\n/**\n * Counts the total number of keys present in a key backup.\n * @param keyBackup - The key backup to count the keys from.\n * @returns The total number of keys in the backup.\n */\nfunction countKeysInBackup(keyBackup: KeyBackup): number {\n    let count = 0;\n    for (const { sessions } of Object.values(keyBackup.rooms)) {\n        count += Object.keys(sessions).length;\n    }\n    return count;\n}\n\nexport type RustBackupCryptoEvents =\n    | CryptoEvent.KeyBackupStatus\n    | CryptoEvent.KeyBackupSessionsRemaining\n    | CryptoEvent.KeyBackupFailed\n    | CryptoEvent.KeyBackupDecryptionKeyCached;\n\nexport type RustBackupCryptoEventMap = {\n    [CryptoEvent.KeyBackupStatus]: (enabled: boolean) => void;\n    [CryptoEvent.KeyBackupSessionsRemaining]: (remaining: number) => void;\n    [CryptoEvent.KeyBackupFailed]: (errCode: string) => void;\n    [CryptoEvent.KeyBackupDecryptionKeyCached]: (version: string) => void;\n};\n\n/**\n * Response from GET `/room_keys/keys` endpoint.\n * See https://spec.matrix.org/latest/client-server-api/#get_matrixclientv3room_keyskeys\n */\nexport interface KeyBackup {\n    rooms: Record<string, { sessions: KeyBackupRoomSessions }>;\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,OAAO,KAAK,eAAe,MAAM,oCAAoC;AAcrE,SAAS,YAAY,EAAkB,WAAW,EAAsB,MAAM,QAAQ,sBAAsB;AAC5G,SAAS,iBAAiB,QAAQ,kCAAkC;AACpE,SAAS,SAAS,EAAE,WAAW,QAAQ,aAAa;AAEpD,SAAS,KAAK,QAAQ,aAAa;AAEnC,SAGI,WAAW,EACX,kBAAkB,QACf,wBAAwB;;AAI/B;;AAGA;AACA;AACA;AACA;;AAQA;AACA;AACA;AACA,OAAO,MAAM,iBAAiB,SAAS,iBAAiB,CAAmD;EAsBhG,WAAW,CACd,MAAc,EACG,UAAsB,EACtB,IAAmD,EACnD,wBAAkD,EACrE;IACE,KAAK,CAAC,CAAC;IA3BX;IAAA,0CAC2B,KAAK;IAEhC;AACJ;AACA;AACA;AACA;AACA;AACA;IANI,0CAO6D,SAAS;IAAA,6CAEzB,IAAI;IAAA,iCAC/B,KAAK;IAEvB;IAAA,+CACgC,KAAK;IAErC;IAAA;IAAA,kDAkO0E,IAAI;IAAA,KA7NzD,UAAsB,GAAtB,UAAsB;IAAA,KACtB,IAAmD,GAAnD,IAAmD;IAAA,KACnD,wBAAkD,GAAlD,wBAAkD;IAGnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC;EACxD;;EAEA;AACJ;AACA;AACA;AACA;EACW,IAAI,GAAS;IAChB,IAAI,CAAC,OAAO,GAAG,IAAI;EACvB;;EAEA;AACJ;AACA;EACI,MAAa,sBAAsB,GAA2B;IAC1D,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;IAC3D,OAAO,IAAI,CAAC,mBAAmB;EACnC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,mBAAmB,GAA8C;IAC1E;IACA;IACA,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC,gBAAgB;EAChC;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,kBAAkB,CAAC,IAAmB,EAA4B;IAC3E,MAAM,qBAA4C,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC;IAE7F,MAAM,UAAsC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,UAAU,EAAE,aAAa;IAC/C,MAAM,4BAA4B,GAC9B,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,oCAAoC,CAAC,IAAI,EAAE,aAAa,CAAC;IACrF,OAAO;MACH,oBAAoB,EAAE,4BAA4B;MAClD,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC;IAC3C,CAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW,uBAAuB,CAAC,KAAc,EAAkC;IAC3E,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,EAAE;MACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC;;IAEA;IACA,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE;MAChC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;QAClE,IAAI,CAAC,wBAAwB,GAAG,IAAI;MACxC,CAAC,CAAC;IACN;IACA,OAAO,IAAI,CAAC,wBAAwB;EACxC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,0BAA0B,CAAC,MAAc,EAAoB;IACtE;IACA;IACA;IACA,IAAI,gBAAsC;IAC1C,IAAI;MACA,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,CAAC,CAAC;MACvF,OAAO,KAAK;IAChB;IAEA,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE;MAC5B;MACA;MACA,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,sGACJ,CAAC;MACD,OAAO,KAAK;IAChB;IAEA,IAAI,mBAAwD;IAC5D,IAAI;MACA,mBAAmB,GAAG,eAAe,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC;IAChF,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE,CAAC,CAAC;MAChF,OAAO,KAAK;IAChB;IAEA,IAAI;MACA,MAAM,iBAAiB,GAAG,IAAI,CAAC,oCAAoC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;MAC1G,IAAI,CAAC,iBAAiB,EAAE;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,+HAA+H,gBAAgB,CAAC,OAAO,GAC3J,CAAC;QACD;QACA,OAAO,KAAK;MAChB;MACA,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,gGAAgG,gBAAgB,CAAC,OAAO,YAC5H,CAAC;MACD,MAAM,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,OAAO,CAAC;;MAEjF;MACA;MACA,IAAI,IAAI,CAAC,wBAAwB,EAAE;QAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC;QAChG,MAAM,IAAI,CAAC,wBAAwB;MACvC;MACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC;MAC3F,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM;QAClF,IAAI,CAAC,wBAAwB,GAAG,IAAI;MACxC,CAAC,CAAC;MACF,MAAM,IAAI,CAAC,wBAAwB;MACnC,OAAO,IAAI;IACf,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE,CAAC,CAAC;IAC/F;IAEA,OAAO,KAAK;EAChB;EAEA,MAAa,uBAAuB,CAChC,mBAAwD,EACxD,OAAe,EACF;IACb,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC3E;IACA;IACA,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,4BAA4B,EAAE,OAAO,CAAC;EAChE;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,cAAc,CAAC,IAA0B,EAAE,IAAyB,EAAiB;IAC9F,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;EAC/D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,oBAAoB,CAAC,QAAgB,EAAE,IAAyB,EAAiB;IAC1F,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,QAAQ,EAAE,CAAC,QAAgB,EAAE,KAAa,KAAW;MAC9F,MAAM,SAAoC,GAAG;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,KAAK,EAAE,kBAAkB,CAAC,QAAQ;QAClC,QAAQ,EAAE;MACd,CAAC;MACD,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACvC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;EACI,MAAa,sBAAsB,CAC/B,IAA0B,EAC1B,aAAqB,EACrB,IAAyB,EACZ;IACb,MAAM,UAAwE,GAAG,IAAI,GAAG,CAAC,CAAC;IAC1F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;MACpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;MACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACzB,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;MACrC;MACA,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;IACpD;IACA,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,CACxC,UAAU,EACV,CAAC,QAAgB,EAAE,KAAa,EAAE,QAAgB,KAAW;MACzD,MAAM,SAAoC,GAAG;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,KAAK,EAAE,kBAAkB,CAAC,QAAQ;QAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;MAC7B,CAAC;MACD,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACvC,CAAC,EACD,aACJ,CAAC;EACL;EAIA;AACJ;AACA;AACA;AACA;EACI,MAAc,gBAAgB,CAAC,UAA6C,EAAkC;IAC1G,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC;IAClD,IAAI;MACA,IAAI,CAAC,UAAU,EAAE;QACb,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC;MACrD;IACJ,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC;MAC3D,IAAI,CAAC,gBAAgB,GAAG,SAAS;MACjC,OAAO,IAAI;IACf;IACA,IAAI,CAAC,gBAAgB,GAAG,IAAI;IAE5B,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;MACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC;MACvE,UAAU,GAAG,SAAS;IAC1B;IACA,IAAI,CAAC,gBAAgB,GAAG,UAAU;IAElC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEzD,IAAI,CAAC,UAAU,EAAE;MACb,IAAI,aAAa,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC;QAC1E,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;MACjC,CAAC,MAAM;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC;MACjF;MACA,OAAO,IAAI;IACf;IAEA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;;IAE3D;IACA;IACA,IAAI,CAAC,SAAS,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;MACvD,IAAI,aAAa,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC;QACvF,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;MACjC,CAAC,MAAM;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC;MAC9F;IACJ,CAAC,MAAM;MACH,IAAI,aAAa,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,UAAU,CAAC,OAAO,wBAAwB,CAAC;QACzF,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;MAC1C,CAAC,MAAM,IAAI,aAAa,KAAK,UAAU,CAAC,OAAO,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,qBAAqB,aAAa,sBAAsB,UAAU,CAAC,OAAO,cAC9E,CAAC;QACD;QACA,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B;QACA,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;MAC1C,CAAC,MAAM;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,UAAU,CAAC,OAAO,gBAAgB,CAAC;MAC3E;IACJ;IACA,OAAO;MAAE,UAAU;MAAE;IAAU,CAAC;EACpC;EAEA,MAAc,eAAe,CAAC,UAAyB,EAAiB;IACpE;IACA;IACA;IACA;IACA,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAC/B,UAAU,CAAC,SAAS,CAAwB,UAAU,EACvD,UAAU,CAAC,OACf,CAAC;IACD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,OAAQ;IAE9C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC;IAE5C,IAAI,CAAC,cAAc,CAAC,CAAC;EACzB;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,cAAc,GAAkB;IACzC,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,EAAE;MAClC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB;EACJ;EAEA,MAAc,gBAAgB,GAAkB;IAC5C,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,mBAAmB,GAAG,IAAI;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,KAAK,CAAC;EACjD;EAEA,MAAc,cAAc,CAAC,QAAQ,GAAG,KAAK,EAAiB;IAC1D,IAAI,IAAI,CAAC,qBAAqB,EAAE;MAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC;MAChD;IACJ;IACA,IAAI,CAAC,qBAAqB,GAAG,IAAI;IAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,IAAI,CAAC,mBAAmB,GAAG,CAAC;;IAEtG;IACA;IACA;IACA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ;IACtC,MAAM,KAAK,CAAC,KAAK,CAAC;IAElB,IAAI;MACA;MACA,IAAI,WAAW,GAAG,CAAC;MACnB;MACA,IAAI,sBAAqC,GAAG,IAAI;MAChD;MACA;MACA,IAAI,gBAAgB,GAAG,IAAI;MAE3B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QAClB;QACA,IAAI,OAAsD,GAAG,SAAS;QACtE,IAAI;UACA,OAAO,GAAG,MAAM,WAAW,CACvB,IAAI,CAAC,MAAM,EACX,yDAAyD,EACzD,YAAY;YACR,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;UACjD,CACJ,CAAC;QACL,CAAC,CAAC,OAAO,GAAG,EAAE;UACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,EAAE,GAAG,CAAC;QACvF;QAEA,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;UACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,mBAAmB,GAAG,CAAC;UACjF,IAAI,CAAC,OAAO,EAAE;YACV;YACA,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,CAAC;UACxD;UACA;QACJ;QAEA,IAAI;UACA,MAAM,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,OAAO,CAAC;UAChE,WAAW,GAAG,CAAC;UACf,IAAI,IAAI,CAAC,OAAO,EAAE;;UAElB;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA,IAAI,CAAC,gBAAgB,IAAI,sBAAsB,KAAK,IAAI,EAAE;YACtD,IAAI;cACA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;cACtD,sBAAsB,GAAG,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ;YAC/D,CAAC,CAAC,OAAO,GAAG,EAAE;cACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,GAAG,CAAC;YACnF;UACJ;UAEA,IAAI,sBAAsB,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,sBAAsB,CAAC;YACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACvD;YACA;YACA;YACA;YACA;YACA,sBAAsB,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAsB,GAAG,gBAAgB,EAAE,CAAC,CAAC;UACnF;QACJ,CAAC,CAAC,OAAO,GAAG,EAAE;UACV,WAAW,EAAE;UACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE,GAAG,CAAC;UACrF,IAAI,GAAG,YAAY,WAAW,EAAE;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO;YAChC,IAAI,OAAO,IAAI,aAAa,IAAI,OAAO,IAAI,2BAA2B,EAAE;cACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,OAAO,GAAG,CAAC;cACjF,IAAI;gBACA,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;cACjC,CAAC,CAAC,OAAO,KAAK,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC;cACrF;cACA,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,OAAQ,CAAC;cACzD;cACA;cACA,IAAI,CAAC,qBAAqB,GAAG,KAAK;cAClC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;cAClC;YACJ,CAAC,MAAM,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE;cAC/B;cACA,IAAI;gBACA,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;gBACtC,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE;kBAC1B,MAAM,KAAK,CAAC,QAAQ,CAAC;kBACrB;gBACJ;cACJ,CAAC,CAAC,OAAO,KAAK,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,qEAAqE,EACrE,KACJ,CAAC;cACL,CAAC,CAAC;YACN;UACJ;;UAEA;UACA;UACA,MAAM,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE;QACA,gBAAgB,GAAG,KAAK;MAC5B;IACJ,CAAC,SAAS;MACN,IAAI,CAAC,qBAAqB,GAAG,KAAK;IACtC;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACY,gBAAgB,CAAC,KAAwC,EAAU;IACvE,MAAM,UAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IACpD,OAAO,iBAAiB,CAAC,UAAU,CAAC;EACxC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,uBAAuB,CAAC,OAAgB,EAAiC;IAClF,OAAO,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;EAC5D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,cAAc,CAAC,UAAiD,EAAkC;IAC3G;IACA,MAAM,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,eAAe,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB;IAE1C,MAAM,QAAQ,GAAG;MAAE,UAAU,EAAE,MAAM,CAAC;IAAgB,CAAC;IAEvD,MAAM,UAAU,CAAC,QAAQ,CAAC;IAE1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CACrC,MAAM,CAAC,IAAI,EACX,oBAAoB,EACpB,SAAS,EACT;MACI,SAAS,EAAE,MAAM,CAAC,SAAS;MAC3B,SAAS,EAAE;IACf,CAAC,EACD;MACI,MAAM,EAAE,YAAY,CAAC;IACzB,CACJ,CAAC;IAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC;IAE1D,OAAO;MACH,OAAO,EAAE,GAAG,CAAC,OAAO;MACpB,SAAS,EAAE,MAAM,CAAC,SAAS;MAC3B,QAAQ,EAAE,QAAQ;MAClB,aAAa,EAAE;IACnB,CAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,0BAA0B,GAAkB;IACrD;IACA,IAAI,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI;IACrE,OAAO,OAAO,IAAI,IAAI,EAAE;MACpB,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;MAC1C,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI;IACrE;;IAEA;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,sBAAsB,CAAC,OAAe,EAAiB;IAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,SAAS,CAAC,6BAA6B,EAAE;MAAE,QAAQ,EAAE;IAAQ,CAAC,CAAC;IAC5E,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;MAC3E,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;IACF;IACA,IAAI,IAAI,CAAC,mBAAmB,KAAK,OAAO,EAAE;MACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI;MAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC;EACJ;;EAEA;AACJ;AACA;AACA;EACW,qBAAqB,CAAC,aAAkD,EAAmB;IAC9F,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;EAC9D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,gBAAgB,CACzB,aAAqB,EACrB,eAAgC,EAChC,IAA2B,EACI;IAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC;IAE7D,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC;EAChF;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,2BAA2B,CAAC,MAAc,EAAiB;IACpE,MAAM;MAAE,aAAa;MAAE;IAAc,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE;MAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,yEAAyE,aAAa,sBAAsB,CAAC,CAAC,aAAa,GAC/H,CAAC;MACD;IACJ;IACA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,MAAM,CAAC;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC;MAAE,KAAK,EAAE;QAAE,CAAC,MAAM,GAAG;UAAE;QAAS;MAAE;IAAE,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC;EAC/F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACY,iBAAiB,CAAC,aAAqB,EAAsB;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAC1B,MAAM,CAAC,GAAG,EACV,iBAAiB,EACjB;MAAE,OAAO,EAAE;IAAc,CAAC,EAC1B,SAAS,EACT;MACI,MAAM,EAAE,YAAY,CAAC;IACzB,CACJ,CAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACY,qBAAqB,CAAC,aAAqB,EAAE,MAAc,EAAkC;IACjG,MAAM,IAAI,GAAG,SAAS,CAAC,yBAAyB,EAAE;MAC9C,OAAO,EAAE;IACb,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAwB,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE;MAAE,OAAO,EAAE;IAAc,CAAC,EAAE,SAAS,EAAE;MAC3G,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAc,eAAe,CACzB,SAAoB,EACpB,aAAqB,EACrB,eAAgC,EAChC,IAA2B,EACI;IAC/B;;IAEA,MAAM,UAAU,GAAG,GAAG;IACtB;IACA,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAAC;IAClD,IAAI,aAAa,GAAG,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC;IAErB,IAAI,EAAE,gBAAgB,GAAG;MACrB,KAAK,EAAE,aAAa;MACpB,SAAS,EAAE,aAAa;MACxB,KAAK,EAAE,kBAAkB,CAAC,QAAQ;MAClC,QAAQ,EAAE;IACd,CAAC,CAAC;;IAEF;AACR;AACA;AACA;AACA;IACQ,MAAM,mBAAmB,GAAG,MAAO,UAA8C,IAAoB;MACjG,MAAM,YAAkC,GAAG,EAAE;MAC7C,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE;QACpC;QACA,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QACxF;QACA,iBAAiB,CAAC,OAAO,CAAE,OAAO,IAAK;UACnC;UACA,OAAO,CAAC,OAAO,GAAG,MAAM;UACxB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC;MACN;;MAEA;MACA,IAAI;QACA,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,aAAa,CAAC;QAC9D,aAAa,IAAI,YAAY,CAAC,MAAM;MACxC,CAAC,CAAC,OAAO,CAAC,EAAE;QACR,aAAa,IAAI,YAAY,CAAC,MAAM;QACpC;QACA;QACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAC;MAC5D;MAEA,IAAI,EAAE,gBAAgB,GAAG;QACrB,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,kBAAkB,CAAC,QAAQ;QAClC,QAAQ,EAAE;MACd,CAAC,CAAC;IACN,CAAC;IAED,IAAI,eAAe,GAAG,CAAC;IACvB,IAAI,gBAAoD,GAAG,IAAI,GAAG,CAAC,CAAC;;IAEpE;IACA;IACA,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;MAC9D;MACA,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;;MAExB;MACA,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;MAEhC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClE;QACA,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAE;QACrD,eAAe,CAAC,SAAS,CAAC,GAAG,OAAO;QACpC,eAAe,IAAI,CAAC;QACpB;QACA,IAAI,eAAe,IAAI,UAAU,EAAE;UAC/B;UACA,MAAM,mBAAmB,CAAC,gBAAgB,CAAC;UAC3C;UACA,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC;UAC5B;UACA,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;UAChC,eAAe,GAAG,CAAC;QACvB;MACJ;IACJ;;IAEA;IACA,IAAI,eAAe,GAAG,CAAC,EAAE;MACrB,MAAM,mBAAmB,CAAC,gBAAgB,CAAC;IAC/C;IAEA,OAAO;MAAE,KAAK,EAAE,aAAa;MAAE,QAAQ,EAAE;IAAc,CAAC;EAC5D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACY,oCAAoC,CACxC,IAAmB,EACnB,mBAAwD,EACjD;IACP,IAAI,IAAI,CAAC,SAAS,KAAK,wCAAwC,EAAE;MAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE,IAAI,CAAC,SAAS,CAAC;MACzF,OAAO,KAAK;IAChB;IAEA,OACK,IAAI,CAAC,SAAS,EAAyB,UAAU,KAAK,mBAAmB,CAAC,iBAAiB,CAAC,eAAe;EAEpH;AACJ;AACA;AACA;AACA;AACA,OAAO,MAAM,mBAAmB,CAA4B;EAIjD,WAAW,CACG,MAAc,EAC/B,aAAkD,EACpD;IAAA;IAAA;IAAA,KAFmB,MAAc,GAAd,MAAc;IAG/B,IAAI,CAAC,aAAa,GAAG,aAAa;IAClC,IAAI,CAAC,aAAa,GAAG,KAAK;EAC9B;;EAEA;AACJ;AACA;EACI,MAAa,eAAe,CACxB,WAAuG,EAC1E;IAC7B,MAAM,IAA0B,GAAG,EAAE;IACrC,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;MAChE,IAAI;QACA,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,CAAC,aAAa,CAAC,SAAS,CACxB,WAAW,CAAC,YAAY,CAAC,SAAS,EAClC,WAAW,CAAC,YAAY,CAAC,GAAG,EAC5B,WAAW,CAAC,YAAY,CAAC,UAC7B,CACJ,CAAC;QACD,SAAS,CAAC,UAAU,GAAG,SAAS;QAChC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;MACxB,CAAC,CAAC,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,EAAE,WAAW,CAAC;MACrF;IACJ;IACA,OAAO,IAAI;EACf;;EAEA;AACJ;AACA;EACW,IAAI,GAAS;IAChB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;EAC7B;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,uBAAuB,CACzC,IAAmD,EACnD,OAAgB,EACa;EAC7B,IAAI;IACA,MAAM,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC,6BAA6B,EAAE;MAAE,QAAQ,EAAE;IAAQ,CAAC,CAAC,GAAG,oBAAoB;IAC7G,OAAO,MAAM,IAAI,CAAC,aAAa,CAAgB,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;MACnF,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;EACN,CAAC,CAAC,OAAO,CAAC,EAAE;IACR,IAAkB,CAAC,CAAE,OAAO,KAAK,aAAa,EAAE;MAC5C,OAAO,IAAI;IACf,CAAC,MAAM;MACH,MAAM,CAAC;IACX;EACJ;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,iCAAiC,CAC7C,aAAkD,EAClD,aAA4B,EACrB;EACP,MAAM,QAAQ,GAAuB,aAAa,CAAC,SAAS;EAC5D,OAAO,QAAQ,CAAC,UAAU,KAAK,aAAa,CAAC,iBAAiB,CAAC,eAAe;AAClF;;AAEA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,SAAoB,EAAU;EACrD,IAAI,KAAK,GAAG,CAAC;EACb,KAAK,MAAM;IAAE;EAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;IACvD,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;EACzC;EACA,OAAO,KAAK;AAChB;;AAeA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"file":"backup.js","names":[],"sources":["../../src/rust-crypto/backup.ts"],"sourcesContent":["/*\nCopyright 2023 - 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type OlmMachine, type SignatureVerification } from \"@matrix-org/matrix-sdk-crypto-wasm\";\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    type BackupTrustInfo,\n    type Curve25519AuthData,\n    type KeyBackupCheck,\n    type KeyBackupInfo,\n    type KeyBackupSession,\n    type KeyBackupRestoreOpts,\n    type KeyBackupRestoreResult,\n    type KeyBackupRoomSessions,\n    type NewKeyBackupInfo,\n} from \"../crypto-api/keybackup.ts\";\nimport { type Logger } from \"../logger.ts\";\nimport { ClientPrefix, type IHttpOpts, MatrixError, type MatrixHttpApi, Method } from \"../http-api/index.ts\";\nimport { TypedEventEmitter } from \"../models/typed-event-emitter.ts\";\nimport { encodeUri, logDuration } from \"../utils.ts\";\nimport { type OutgoingRequestProcessor } from \"./OutgoingRequestProcessor.ts\";\nimport { sleep } from \"../utils.ts\";\nimport { type BackupDecryptor } from \"../common-crypto/CryptoBackend.ts\";\nimport {\n    type ImportRoomKeyProgressData,\n    type ImportRoomKeysOpts,\n    CryptoEvent,\n    ImportRoomKeyStage,\n} from \"../crypto-api/index.ts\";\nimport { type IMegolmSessionData } from \"../@types/crypto.ts\";\n\n/** Authentification of the backup info, depends on algorithm */\ntype AuthData = KeyBackupInfo[\"auth_data\"];\n\n/**\n * Holds information of a created keybackup.\n * Useful to get the generated private key material and save it securely somewhere.\n */\ninterface KeyBackupCreationInfo {\n    version: string;\n    algorithm: string;\n    authData: AuthData;\n    decryptionKey: RustSdkCryptoJs.BackupDecryptionKey;\n}\n\n/**\n * @internal\n */\nexport class RustBackupManager extends TypedEventEmitter<RustBackupCryptoEvents, RustBackupCryptoEventMap> {\n    /** Have we checked if there is a backup on the server which we can use */\n    private checkedForBackup = false;\n\n    /**\n     * The latest backup version on the server, when we last checked.\n     *\n     * If there was no backup on the server, `null`. If our attempt to check resulted in an error, `undefined`.\n     *\n     * Note that the backup was not necessarily verified.\n     */\n    private serverBackupInfo: KeyBackupInfo | null | undefined = undefined;\n\n    private activeBackupVersion: string | null = null;\n    private stopped = false;\n\n    /** whether {@link backupKeysLoop} is currently running */\n    private backupKeysLoopRunning = false;\n\n    /** The logger to use */\n    private readonly logger: Logger;\n\n    public constructor(\n        logger: Logger,\n        private readonly olmMachine: OlmMachine,\n        private readonly http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n        private readonly outgoingRequestProcessor: OutgoingRequestProcessor,\n    ) {\n        super();\n        this.logger = logger.getChild(\"[RustBackupManager]\");\n    }\n\n    /**\n     * Tells the RustBackupManager to stop.\n     * The RustBackupManager is scheduling background uploads of keys to the backup, this\n     * call allows to cancel the process when the client is stoppped.\n     */\n    public stop(): void {\n        this.stopped = true;\n    }\n\n    /**\n     * Get the backup version we are currently backing up to, if any\n     */\n    public async getActiveBackupVersion(): Promise<string | null> {\n        if (!(await this.olmMachine.isBackupEnabled())) return null;\n        return this.activeBackupVersion;\n    }\n\n    /**\n     * Return the details of the latest backup on the server, when we last checked.\n     *\n     * This normally returns a cached value, but if we haven't yet made a request to the server, it will fire one off.\n     * It will always return the details of the active backup if key backup is enabled.\n     *\n     * If there was no backup on the server, `null`. If our attempt to check resulted in an error, `undefined`.\n     */\n    public async getServerBackupInfo(): Promise<KeyBackupInfo | null | undefined> {\n        // Do a validity check if we haven't already done one. The check is likely to fail if we don't yet have the\n        // backup keys -- but as a side-effect, it will populate `serverBackupInfo`.\n        await this.checkKeyBackupAndEnable(false);\n        return this.serverBackupInfo;\n    }\n\n    /**\n     * Determine if a key backup can be trusted.\n     *\n     * @param info - key backup info dict from {@link CryptoApi.getKeyBackupInfo}.\n     */\n    public async isKeyBackupTrusted(info: KeyBackupInfo): Promise<BackupTrustInfo> {\n        const signatureVerification: SignatureVerification = await this.olmMachine.verifyBackup(info);\n\n        const backupKeys: RustSdkCryptoJs.BackupKeys = await this.olmMachine.getBackupKeys();\n        const decryptionKey = backupKeys?.decryptionKey;\n        const backupMatchesSavedPrivateKey =\n            !!decryptionKey && this.backupInfoMatchesBackupDecryptionKey(info, decryptionKey);\n        return {\n            matchesDecryptionKey: backupMatchesSavedPrivateKey,\n            trusted: signatureVerification.trusted(),\n        };\n    }\n\n    /**\n     * Re-check the key backup and enable/disable it as appropriate.\n     *\n     * @param force - whether we should force a re-check even if one has already happened. If this is\n     *   `false`, and we have already done a check, `null` is returned rather than the actual info on the key backup.\n     */\n    public checkKeyBackupAndEnable(force: boolean): Promise<KeyBackupCheck | null> {\n        if (!force && this.checkedForBackup) {\n            return Promise.resolve(null);\n        }\n\n        // make sure there is only one check going on at a time\n        if (!this.keyBackupCheckInProgress) {\n            this.keyBackupCheckInProgress = this.doCheckKeyBackup().finally(() => {\n                this.keyBackupCheckInProgress = null;\n            });\n        }\n        return this.keyBackupCheckInProgress;\n    }\n\n    /**\n     * Handles a backup secret received event and store it if it matches the current backup version.\n     *\n     * Also enables key backup upload if it was not previously enabled, and the encryption key matches the received\n     * decryption key.\n     *\n     * @param secret - The secret as received from a `m.secret.send` or `io.element.msc4385.secret.push` event for secret `m.megolm_backup.v1`.\n     * @returns true if the secret is valid and has been stored, false otherwise.\n     */\n    public async handleBackupSecretReceived(secret: string): Promise<boolean> {\n        // Currently we only receive the decryption key without any key backup version. It is important to\n        // check that the secret is valid for the current version before storing it.\n        // We force a check to ensure to have the latest version.\n        let latestBackupInfo: KeyBackupInfo | null;\n        try {\n            latestBackupInfo = await this.requestKeyBackupVersion();\n        } catch (e) {\n            this.logger.warn(\"handleBackupSecretReceived: Error checking for latest key backup\", e);\n            return false;\n        }\n\n        if (!latestBackupInfo?.version) {\n            // There is no server-side key backup.\n            // This decryption key is useless to us.\n            this.logger.warn(\n                \"handleBackupSecretReceived: Received a backup decryption key, but there is no server-side key backup\",\n            );\n            return false;\n        }\n\n        let backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey;\n        try {\n            backupDecryptionKey = RustSdkCryptoJs.BackupDecryptionKey.fromBase64(secret);\n        } catch (e) {\n            this.logger.warn(\"handleBackupSecretReceived: Invalid backup decryption key\", e);\n            return false;\n        }\n\n        try {\n            const privateKeyMatches = this.backupInfoMatchesBackupDecryptionKey(latestBackupInfo, backupDecryptionKey);\n            if (!privateKeyMatches) {\n                this.logger.warn(\n                    `handleBackupSecretReceived: Private decryption key does not match the public key of the current server-side backup version (${latestBackupInfo.version})`,\n                );\n                // just ignore the secret\n                return false;\n            }\n            this.logger.info(\n                `handleBackupSecretReceived: Valid decryption key for the current server-side backup version (${latestBackupInfo.version}) received`,\n            );\n            await this.saveBackupDecryptionKey(backupDecryptionKey, latestBackupInfo.version);\n\n            // Check if backup upload should be enabled (e.g. the encryption key matches the decryption key),\n            // and enable it if so.\n            if (this.keyBackupCheckInProgress) {\n                this.logger.debug(\"handleBackupSecretReceived: waiting for ongoing keybackup check to complete\");\n                await this.keyBackupCheckInProgress;\n            }\n            this.logger.debug(\"handleBackupSecretReceived: checking if we can enable keybackup upload\");\n            this.keyBackupCheckInProgress = this.doCheckKeyBackup(latestBackupInfo).finally(() => {\n                this.keyBackupCheckInProgress = null;\n            });\n            await this.keyBackupCheckInProgress;\n            return true;\n        } catch (e) {\n            this.logger.warn(\"handleBackupSecretReceived: Unable to validate backup decryption key\", e);\n        }\n\n        return false;\n    }\n\n    public async saveBackupDecryptionKey(\n        backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n        version: string,\n    ): Promise<void> {\n        await this.olmMachine.saveBackupDecryptionKey(backupDecryptionKey, version);\n        // Emit an event that we have a new backup decryption key, so that the sdk can start\n        // importing keys from backup if needed.\n        this.emit(CryptoEvent.KeyBackupDecryptionKeyCached, version);\n    }\n\n    /**\n     * Import a list of room keys previously exported by exportRoomKeys\n     *\n     * @param keys - a list of session export objects\n     * @param opts - options object\n     * @returns a promise which resolves once the keys have been imported\n     */\n    public async importRoomKeys(keys: IMegolmSessionData[], opts?: ImportRoomKeysOpts): Promise<void> {\n        await this.importRoomKeysAsJson(JSON.stringify(keys), opts);\n    }\n\n    /**\n     * Import a list of room keys previously exported by exportRoomKeysAsJson\n     *\n     * @param jsonKeys - a JSON string encoding a list of session export objects,\n     *    each of which is an IMegolmSessionData\n     * @param opts - options object\n     * @returns a promise which resolves once the keys have been imported\n     */\n    public async importRoomKeysAsJson(jsonKeys: string, opts?: ImportRoomKeysOpts): Promise<void> {\n        await this.olmMachine.importExportedRoomKeys(jsonKeys, (progress: bigint, total: bigint): void => {\n            const importOpt: ImportRoomKeyProgressData = {\n                total: Number(total),\n                successes: Number(progress),\n                stage: ImportRoomKeyStage.LoadKeys,\n                failures: 0,\n            };\n            opts?.progressCallback?.(importOpt);\n        });\n    }\n\n    /**\n     * Implementation of {@link CryptoBackend#importBackedUpRoomKeys}.\n     */\n    public async importBackedUpRoomKeys(\n        keys: IMegolmSessionData[],\n        backupVersion: string,\n        opts?: ImportRoomKeysOpts,\n    ): Promise<void> {\n        const keysByRoom: Map<RustSdkCryptoJs.RoomId, Map<string, IMegolmSessionData>> = new Map();\n        for (const key of keys) {\n            const roomId = new RustSdkCryptoJs.RoomId(key.room_id);\n            if (!keysByRoom.has(roomId)) {\n                keysByRoom.set(roomId, new Map());\n            }\n            keysByRoom.get(roomId)!.set(key.session_id, key);\n        }\n        await this.olmMachine.importBackedUpRoomKeys(\n            keysByRoom,\n            (progress: bigint, total: bigint, failures: bigint): void => {\n                const importOpt: ImportRoomKeyProgressData = {\n                    total: Number(total),\n                    successes: Number(progress),\n                    stage: ImportRoomKeyStage.LoadKeys,\n                    failures: Number(failures),\n                };\n                opts?.progressCallback?.(importOpt);\n            },\n            backupVersion,\n        );\n    }\n\n    private keyBackupCheckInProgress: Promise<KeyBackupCheck | null> | null = null;\n\n    /** Helper to check the key backup status, and enable/disable it as appropriate\n     *\n     * A KeyBackupInfo can be passed if it was fetched recently, to avoid trying to\n     * re-fetch it from the server.\n     */\n    private async doCheckKeyBackup(backupInfo?: KeyBackupInfo | null | undefined): Promise<KeyBackupCheck | null> {\n        this.logger.debug(\"Checking key backup status...\");\n        try {\n            if (!backupInfo) {\n                backupInfo = await this.requestKeyBackupVersion();\n            }\n        } catch (e) {\n            this.logger.warn(\"Error checking for active key backup\", e);\n            this.serverBackupInfo = undefined;\n            return null;\n        }\n        this.checkedForBackup = true;\n        this.serverBackupInfo = backupInfo;\n\n        const activeVersion = await this.getActiveBackupVersion();\n\n        if (!backupInfo) {\n            if (activeVersion !== null) {\n                this.logger.debug(\"No key backup present on server: disabling key backup\");\n                await this.disableKeyBackup();\n            } else {\n                this.logger.debug(\"No key backup present on server: not enabling key backup\");\n            }\n            return null;\n        }\n\n        const trustInfo = await this.isKeyBackupTrusted(backupInfo);\n\n        // Per the spec, we should enable key upload if either (a) the backup is signed by a trusted key, or\n        // (b) the public key matches the private decryption key that we have received from 4S.\n        if (!trustInfo.matchesDecryptionKey && !trustInfo.trusted) {\n            if (activeVersion !== null) {\n                this.logger.debug(\"Key backup present on server but not trusted: disabling key backup\");\n                await this.disableKeyBackup();\n            } else {\n                this.logger.debug(\"Key backup present on server but not trusted: not enabling key backup\");\n            }\n        } else {\n            await this.enableOrSwitchKeyBackup(backupInfo, activeVersion);\n        }\n        return { backupInfo, trustInfo };\n    }\n\n    /**\n     * Enable key backup upload for the given backup version, if it is not already.\n     *\n     * If backup is currently enabled for a different version, disables it first.\n     *\n     * Also emits one or more {@link CryptoEvent.KeyBackupStatus} events if the backup status changes.\n     *\n     * @param backupInfo - the desired backup version (and the encryption key).\n     * @param activeVersion - the current active backup version (or `null`, if none).\n     */\n    private async enableOrSwitchKeyBackup(backupInfo: KeyBackupInfo, activeVersion: string | null): Promise<void> {\n        if (activeVersion === null) {\n            this.logger.debug(`Found usable key backup v${backupInfo.version}: enabling key backups`);\n            await this.enableKeyBackup(backupInfo);\n        } else if (activeVersion !== backupInfo.version) {\n            this.logger.debug(`On backup version ${activeVersion} but found version ${backupInfo.version}: switching.`);\n            // This will remove any pending backup request, remove the backup upload key from the OlmMachine and reset\n            // the backup state of each room key we have.\n            await this.disableKeyBackup();\n            // Enabling will now trigger re-upload of all the keys\n            await this.enableKeyBackup(backupInfo);\n        } else {\n            this.logger.debug(`Backup version ${backupInfo.version} still current`);\n        }\n    }\n\n    /**\n     * Helper for {@link enableOrSwitchKeyBackup}.\n     *\n     * Enables key backup upload for the given backup version. Also emits\n     * a {@link CryptoEvent.KeyBackupStatus} event.\n     */\n    private async enableKeyBackup(backupInfo: KeyBackupInfo): Promise<void> {\n        // we know for certain it must be a Curve25519 key, because we have verified it and only Curve25519\n        // keys can be verified.\n        await this.olmMachine.enableBackupV1(\n            (backupInfo.auth_data as Curve25519AuthData).public_key,\n            backupInfo.version,\n        );\n        this.activeBackupVersion = backupInfo.version;\n\n        this.emit(CryptoEvent.KeyBackupStatus, true);\n\n        this.backupKeysLoop();\n    }\n\n    /**\n     * Restart the backup key loop if there is an active trusted backup.\n     * Doesn't try to check the backup server side. To be called when a new\n     * megolm key is known locally.\n     */\n    public async maybeUploadKey(): Promise<void> {\n        if (this.activeBackupVersion != null) {\n            this.backupKeysLoop();\n        }\n    }\n\n    private async disableKeyBackup(): Promise<void> {\n        await this.olmMachine.disableBackup();\n        this.activeBackupVersion = null;\n        this.emit(CryptoEvent.KeyBackupStatus, false);\n    }\n\n    private async backupKeysLoop(maxDelay = 10000): Promise<void> {\n        if (this.backupKeysLoopRunning) {\n            this.logger.debug(`Backup loop already running`);\n            return;\n        }\n        this.backupKeysLoopRunning = true;\n\n        this.logger.debug(`Backup: Starting keys upload loop for backup version:${this.activeBackupVersion}.`);\n\n        // wait between 0 and `maxDelay` seconds, to avoid backup\n        // requests from different clients hitting the server all at\n        // the same time when a new key is sent\n        const delay = Math.random() * maxDelay;\n        await sleep(delay);\n\n        try {\n            // number of consecutive network failures for exponential backoff\n            let numFailures = 0;\n            // The number of keys left to back up. (Populated lazily: see more comments below.)\n            let remainingToUploadCount: number | null = null;\n            // To avoid computing the key when only a few keys were added (after a sync for example),\n            // we compute the count only when at least two iterations are needed.\n            let isFirstIteration = true;\n\n            while (!this.stopped) {\n                // Get a batch of room keys to upload\n                let request: RustSdkCryptoJs.KeysBackupRequest | undefined = undefined;\n                try {\n                    request = await logDuration(\n                        this.logger,\n                        \"BackupRoomKeys: Get keys to backup from rust crypto-sdk\",\n                        async () => {\n                            return await this.olmMachine.backupRoomKeys();\n                        },\n                    );\n                } catch (err) {\n                    this.logger.error(\"Backup: Failed to get keys to backup from rust crypto-sdk\", err);\n                }\n\n                if (!request || this.stopped || !this.activeBackupVersion) {\n                    this.logger.debug(`Backup: Ending loop for version ${this.activeBackupVersion}.`);\n                    if (!request) {\n                        // nothing more to upload\n                        this.emit(CryptoEvent.KeyBackupSessionsRemaining, 0);\n                    }\n                    return;\n                }\n\n                try {\n                    await this.outgoingRequestProcessor.makeOutgoingRequest(request);\n                    numFailures = 0;\n                    if (this.stopped) break;\n\n                    // Key count performance (`olmMachine.roomKeyCounts()`) can be pretty bad on some configurations.\n                    // In particular, we detected on some M1 macs that when the object store reaches a threshold, the count\n                    // performance stops growing in O(n) and suddenly becomes very slow (40s, 60s or more).\n                    // For reference, the performance drop occurs around 300-400k keys on the platforms where this issue is observed.\n                    // Even on other configurations, the count can take several seconds.\n                    // This will block other operations on the database, like sending messages.\n                    //\n                    // This is a workaround to avoid calling `olmMachine.roomKeyCounts()` too often, and only when necessary.\n                    // We don't call it on the first loop because there could be only a few keys to upload, and we don't want to wait for the count.\n                    if (!isFirstIteration && remainingToUploadCount === null) {\n                        try {\n                            const keyCount = await this.olmMachine.roomKeyCounts();\n                            remainingToUploadCount = keyCount.total - keyCount.backedUp;\n                        } catch (err) {\n                            this.logger.error(\"Backup: Failed to get key counts from rust crypto-sdk\", err);\n                        }\n                    }\n\n                    if (remainingToUploadCount !== null) {\n                        this.emit(CryptoEvent.KeyBackupSessionsRemaining, remainingToUploadCount);\n                        const keysCountInBatch = this.keysCountInBatch(request);\n                        // `OlmMachine.roomKeyCounts` is called only once for the current backupKeysLoop. But new\n                        // keys could be added during the current loop (after a sync for example).\n                        // So the count can get out of sync with the real number of remaining keys to upload.\n                        // Depending on the number of new keys imported and the time to complete the loop,\n                        // this could result in multiple events being emitted with a remaining key count of 0.\n                        remainingToUploadCount = Math.max(remainingToUploadCount - keysCountInBatch, 0);\n                    }\n                } catch (err) {\n                    numFailures++;\n                    this.logger.error(\"Backup: Error processing backup request for rust crypto-sdk\", err);\n                    if (err instanceof MatrixError) {\n                        const errCode = err.data.errcode;\n                        if (errCode == \"M_NOT_FOUND\" || errCode == \"M_WRONG_ROOM_KEYS_VERSION\") {\n                            this.logger.debug(`Backup: Failed to upload keys to current vesion: ${errCode}.`);\n                            try {\n                                await this.disableKeyBackup();\n                            } catch (error) {\n                                this.logger.error(\"Backup: An error occurred while disabling key backup:\", error);\n                            }\n                            this.emit(CryptoEvent.KeyBackupFailed, err.data.errcode!);\n                            // There was an active backup and we are out of sync with the server\n                            // force a check server side\n                            this.backupKeysLoopRunning = false;\n                            this.checkKeyBackupAndEnable(true);\n                            return;\n                        } else if (err.isRateLimitError()) {\n                            // wait for that and then continue?\n                            try {\n                                const waitTime = err.getRetryAfterMs();\n                                if (waitTime && waitTime > 0) {\n                                    await sleep(waitTime);\n                                    continue;\n                                }\n                            } catch (error) {\n                                this.logger.warn(\n                                    \"Backup: An error occurred while retrieving a rate-limit retry delay\",\n                                    error,\n                                );\n                            } // else go to the normal backoff\n                        }\n                    }\n\n                    // Some other errors (mx, network, or CORS or invalid urls?) anyhow backoff\n                    // exponential backoff if we have failures\n                    await sleep(1000 * Math.pow(2, Math.min(numFailures - 1, 4)));\n                }\n                isFirstIteration = false;\n            }\n        } finally {\n            this.backupKeysLoopRunning = false;\n        }\n    }\n\n    /**\n     * Utility method to count the number of keys in a backup request, in order to update the remaining keys count.\n     * This should be the chunk size of the backup request for all requests but the last, but we don't have access to it\n     * (it's static in the Rust SDK).\n     * @param batch - The backup request to count the keys from.\n     *\n     * @returns The number of keys in the backup request.\n     */\n    private keysCountInBatch(batch: RustSdkCryptoJs.KeysBackupRequest): number {\n        const parsedBody: KeyBackup = JSON.parse(batch.body);\n        return countKeysInBackup(parsedBody);\n    }\n\n    /**\n     * Get information about a key backup from the server\n     * - If version is provided, get information about that backup version.\n     * - If no version is provided, get information about the latest backup.\n     *\n     * @param version - The version of the backup to get information about.\n     * @returns Information object from API or null if there is no active backup.\n     */\n    public async requestKeyBackupVersion(version?: string): Promise<KeyBackupInfo | null> {\n        return await requestKeyBackupVersion(this.http, version);\n    }\n\n    /**\n     * Creates a new key backup by generating a new random private key, and then enable key backup upload and download\n     * using the new backup version.\n     *\n     * If there is an existing backup server side it will be deleted and replaced\n     * by the new one.\n     *\n     * Saves the decryption key in the Rust SDK's CryptoStore.\n     *\n     * @param signObject - Method that should sign the backup with existing device and\n     * existing identity.\n     * @returns a KeyBackupCreationInfo - All information related to the backup.\n     */\n    public async setupKeyBackup(signObject: (authData: AuthData) => Promise<void>): Promise<KeyBackupCreationInfo> {\n        // Wait for any active call to `checkKeyBackupAndEnable` to complete, to avoid racing with it\n        if (this.keyBackupCheckInProgress) {\n            await this.keyBackupCheckInProgress;\n        }\n\n        // Clean up any existing backup\n        await this.deleteAllKeyBackupVersions();\n\n        const randomKey = RustSdkCryptoJs.BackupDecryptionKey.createRandomKey();\n        const pubKey = randomKey.megolmV1PublicKey;\n\n        const authData = { public_key: pubKey.publicKeyBase64 };\n\n        await signObject(authData);\n\n        const backupData: NewKeyBackupInfo = {\n            algorithm: pubKey.algorithm,\n            auth_data: authData,\n        };\n\n        const res = await this.http.authedRequest<{ version: string }>(\n            Method.Post,\n            \"/room_keys/version\",\n            undefined,\n            backupData,\n            {\n                prefix: ClientPrefix.V3,\n            },\n        );\n\n        // This backup was just created and signed locally, so use the creation response to make up a full\n        // `KeyBackupInfo` struct representing the new backup, instead of doing another discovery/trust check.\n        const backupInfo: KeyBackupInfo = {\n            algorithm: pubKey.algorithm,\n            auth_data: authData,\n            version: res.version,\n            count: 0,\n            etag: \"\", // we never actually use the etag, so we can just make up a value\n        };\n\n        // saveBackupDecryptionKey emits KeyBackupDecryptionKeyCached. Cache and\n        // enable the created backup first so listeners observe the new version.\n        this.serverBackupInfo = backupInfo;\n        this.checkedForBackup = true;\n        await this.enableOrSwitchKeyBackup(backupInfo, await this.getActiveBackupVersion());\n        await this.saveBackupDecryptionKey(randomKey, res.version);\n\n        return {\n            version: res.version,\n            algorithm: pubKey.algorithm,\n            authData: authData,\n            decryptionKey: randomKey,\n        };\n    }\n\n    /**\n     * Deletes all key backups.\n     *\n     * Will call the API to delete active backup until there is no more present.\n     */\n    public async deleteAllKeyBackupVersions(): Promise<void> {\n        // there could be several backup versions. Delete all to be safe.\n        let current = (await this.requestKeyBackupVersion())?.version ?? null;\n        while (current != null) {\n            await this.deleteKeyBackupVersion(current);\n            current = (await this.requestKeyBackupVersion())?.version ?? null;\n        }\n\n        // XXX: Should this also update Secret Storage and delete any existing keys?\n    }\n\n    /**\n     * Deletes the given key backup.\n     *\n     * @param version - The backup version to delete.\n     */\n    public async deleteKeyBackupVersion(version: string): Promise<void> {\n        this.logger.debug(`deleteKeyBackupVersion v:${version}`);\n        const path = encodeUri(\"/room_keys/version/$version\", { $version: version });\n        await this.http.authedRequest<void>(Method.Delete, path, undefined, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n        // If the backup we are deleting is the active one, we need to disable the key backup and to have the local properties reset\n        if (this.activeBackupVersion === version) {\n            this.serverBackupInfo = null;\n            await this.disableKeyBackup();\n        }\n    }\n\n    /**\n     * Creates a new backup decryptor for the given private key.\n     * @param decryptionKey - The private key to use for decryption.\n     */\n    public createBackupDecryptor(decryptionKey: RustSdkCryptoJs.BackupDecryptionKey): BackupDecryptor {\n        return new RustBackupDecryptor(this.logger, decryptionKey);\n    }\n\n    /**\n     * Restore a key backup.\n     *\n     * @param backupVersion - The version of the backup to restore.\n     * @param backupDecryptor - The backup decryptor to use to decrypt the keys.\n     * @param opts - Options for the restore.\n     * @returns The total number of keys and the total imported.\n     */\n    public async restoreKeyBackup(\n        backupVersion: string,\n        backupDecryptor: BackupDecryptor,\n        opts?: KeyBackupRestoreOpts,\n    ): Promise<KeyBackupRestoreResult> {\n        const keyBackup = await this.downloadKeyBackup(backupVersion);\n\n        return this.importKeyBackup(keyBackup, backupVersion, backupDecryptor, opts);\n    }\n\n    /**\n     * Download and import the keys for a given room from the current backup version.\n     *\n     * @param roomId - The room in question.\n     */\n    public async downloadLatestRoomKeyBackup(roomId: string): Promise<void> {\n        const { backupVersion, decryptionKey } = await this.olmMachine.getBackupKeys();\n        if (!backupVersion || !decryptionKey) {\n            this.logger.warn(\n                `downloadLatestRoomKeyBackup: Could not download backup (backupVersion=${backupVersion}, hasDecryptionKey=${!!decryptionKey})`,\n            );\n            return;\n        }\n        const sessions = await this.downloadRoomKeyBackup(backupVersion, roomId);\n        const backupDecryptor = this.createBackupDecryptor(decryptionKey);\n        this.importKeyBackup({ rooms: { [roomId]: { sessions } } }, backupVersion, backupDecryptor);\n    }\n\n    /**\n     * Call `/room_keys/keys` to download the key backup (room keys) for the given backup version.\n     * https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keyskeys\n     *\n     * @param backupVersion\n     * @returns The key backup response.\n     */\n    private downloadKeyBackup(backupVersion: string): Promise<KeyBackup> {\n        return this.http.authedRequest<KeyBackup>(\n            Method.Get,\n            \"/room_keys/keys\",\n            { version: backupVersion },\n            undefined,\n            {\n                prefix: ClientPrefix.V3,\n            },\n        );\n    }\n\n    /**\n     * Call `/room/keys/keys/{roomId}` to download the key backup (room keys) for a given backup version and room ID.\n     * @param backupVersion - The version to download.\n     * @param roomId - The ID of the room.\n     * @returns The key backup response.\n     */\n    private downloadRoomKeyBackup(backupVersion: string, roomId: string): Promise<KeyBackupRoomSessions> {\n        const path = encodeUri(\"/room_keys/keys/$roomId\", {\n            $roomId: roomId,\n        });\n        return this.http.authedRequest<KeyBackupRoomSessions>(Method.Get, path, { version: backupVersion }, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    }\n\n    /**\n     * Import the room keys from a `/room_keys/keys` call.\n     * Calls `opts.progressCallback` with the progress of the import.\n     *\n     * @param keyBackup - The response from the server containing the keys to import.\n     * @param backupVersion - The version of the backup info.\n     * @param backupDecryptor - The backup decryptor to use to decrypt the keys.\n     * @param opts - Options for the import.\n     *\n     * @returns The total number of keys and the total imported.\n     *\n     * @private\n     */\n    private async importKeyBackup(\n        keyBackup: KeyBackup,\n        backupVersion: string,\n        backupDecryptor: BackupDecryptor,\n        opts?: KeyBackupRestoreOpts,\n    ): Promise<KeyBackupRestoreResult> {\n        // We have a full backup here, it can get quite big, so we need to decrypt and import it in chunks.\n\n        const CHUNK_SIZE = 200;\n        // Get the total count as a first pass\n        const totalKeyCount = countKeysInBackup(keyBackup);\n        let totalImported = 0;\n        let totalFailures = 0;\n\n        opts?.progressCallback?.({\n            total: totalKeyCount,\n            successes: totalImported,\n            stage: ImportRoomKeyStage.LoadKeys,\n            failures: totalFailures,\n        });\n\n        /**\n         * This method is called when we have enough chunks to decrypt.\n         * It will decrypt the chunks and try to import the room keys.\n         * @param roomChunks\n         */\n        const handleChunkCallback = async (roomChunks: Map<string, KeyBackupRoomSessions>): Promise<void> => {\n            const currentChunk: IMegolmSessionData[] = [];\n            for (const roomId of roomChunks.keys()) {\n                // Decrypt the sessions for the given room\n                const decryptedSessions = await backupDecryptor.decryptSessions(roomChunks.get(roomId)!);\n                // Add the decrypted sessions to the current chunk\n                decryptedSessions.forEach((session) => {\n                    // We set the room_id for each session\n                    session.room_id = roomId;\n                    currentChunk.push(session);\n                });\n            }\n\n            // We have a chunk of decrypted keys: import them\n            try {\n                await this.importBackedUpRoomKeys(currentChunk, backupVersion);\n                totalImported += currentChunk.length;\n            } catch (e) {\n                totalFailures += currentChunk.length;\n                // We failed to import some keys, but we should still try to import the rest?\n                // Log the error and continue\n                this.logger.error(\"Error importing keys from backup\", e);\n            }\n\n            opts?.progressCallback?.({\n                total: totalKeyCount,\n                successes: totalImported,\n                stage: ImportRoomKeyStage.LoadKeys,\n                failures: totalFailures,\n            });\n        };\n\n        let groupChunkCount = 0;\n        let chunkGroupByRoom: Map<string, KeyBackupRoomSessions> = new Map();\n\n        // Iterate over the rooms and sessions to group them in chunks\n        // And we call the handleChunkCallback when we have enough chunks to decrypt\n        for (const [roomId, roomData] of Object.entries(keyBackup.rooms)) {\n            // If there are no sessions for the room, skip it\n            if (!roomData.sessions) continue;\n\n            // Initialize a new chunk group for the current room\n            chunkGroupByRoom.set(roomId, {});\n\n            for (const [sessionId, session] of Object.entries(roomData.sessions)) {\n                // We set previously the chunk group for the current room, so we can safely get it\n                const sessionsForRoom = chunkGroupByRoom.get(roomId)!;\n                sessionsForRoom[sessionId] = session;\n                groupChunkCount += 1;\n                // If we have enough chunks to decrypt, call the block callback\n                if (groupChunkCount >= CHUNK_SIZE) {\n                    // We have enough chunks to decrypt\n                    await handleChunkCallback(chunkGroupByRoom);\n                    // Reset the chunk group\n                    chunkGroupByRoom = new Map();\n                    // There might be remaining keys for that room, so add back an entry for the current room.\n                    chunkGroupByRoom.set(roomId, {});\n                    groupChunkCount = 0;\n                }\n            }\n        }\n\n        // Handle remaining chunk if needed\n        if (groupChunkCount > 0) {\n            await handleChunkCallback(chunkGroupByRoom);\n        }\n\n        return { total: totalKeyCount, imported: totalImported };\n    }\n\n    /**\n     * Checks if the provided backup info matches the given private key.\n     *\n     * @param info - The backup info to check.\n     * @param backupDecryptionKey - The `BackupDecryptionKey` private key to check against.\n     * @returns `true` if the private key can decrypt the backup, `false` otherwise.\n     */\n    private backupInfoMatchesBackupDecryptionKey(\n        info: KeyBackupInfo,\n        backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n    ): boolean {\n        if (info.algorithm !== \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            this.logger.warn(\"backupMatchesPrivateKey: Unsupported backup algorithm\", info.algorithm);\n            return false;\n        }\n\n        return (\n            (info.auth_data as Curve25519AuthData)?.public_key === backupDecryptionKey.megolmV1PublicKey.publicKeyBase64\n        );\n    }\n}\n/**\n * Implementation of {@link BackupDecryptor} for the rust crypto backend.\n */\nexport class RustBackupDecryptor implements BackupDecryptor {\n    private decryptionKey: RustSdkCryptoJs.BackupDecryptionKey;\n    public sourceTrusted: boolean;\n\n    public constructor(\n        private readonly logger: Logger,\n        decryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n    ) {\n        this.decryptionKey = decryptionKey;\n        this.sourceTrusted = false;\n    }\n\n    /**\n     * Implements {@link BackupDecryptor#decryptSessions}\n     */\n    public async decryptSessions(ciphertexts: Record<string, KeyBackupSession>): Promise<IMegolmSessionData[]> {\n        const keys: IMegolmSessionData[] = [];\n        for (const [sessionId, sessionData] of Object.entries(ciphertexts)) {\n            try {\n                const decrypted = JSON.parse(\n                    this.decryptionKey.decryptV1(\n                        sessionData.session_data.ephemeral,\n                        sessionData.session_data.mac,\n                        sessionData.session_data.ciphertext,\n                    ),\n                );\n                decrypted.session_id = sessionId;\n                keys.push(decrypted);\n            } catch (e) {\n                this.logger.debug(\"Failed to decrypt megolm session from backup\", e, sessionData);\n            }\n        }\n        return keys;\n    }\n\n    /**\n     * Implements {@link BackupDecryptor#free}\n     */\n    public free(): void {\n        this.decryptionKey.free();\n    }\n}\n\n/**\n * Fetch a key backup info from the server.\n *\n * If `version` is provided, calls `GET /room_keys/version/$version` and gets the backup info for that version.\n * See https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keysversionversion.\n *\n * If not, calls `GET /room_keys/version` and gets the latest backup info.\n * See https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keysversion\n *\n * @param http\n * @param version - the specific version of the backup info to fetch\n * @returns The key backup info or null if there is no backup.\n */\nexport async function requestKeyBackupVersion(\n    http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n    version?: string,\n): Promise<KeyBackupInfo | null> {\n    try {\n        const path = version ? encodeUri(\"/room_keys/version/$version\", { $version: version }) : \"/room_keys/version\";\n        return await http.authedRequest<KeyBackupInfo>(Method.Get, path, undefined, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    } catch (e) {\n        if ((<MatrixError>e).errcode === \"M_NOT_FOUND\") {\n            return null;\n        } else {\n            throw e;\n        }\n    }\n}\n\n/**\n * Checks if the provided decryption key matches the public key of the key backup info.\n *\n * @param decryptionKey - The decryption key to check.\n * @param keyBackupInfo - The key backup info to check against.\n * @returns `true` if the decryption key matches the key backup info, `false` otherwise.\n */\nexport function decryptionKeyMatchesKeyBackupInfo(\n    decryptionKey: RustSdkCryptoJs.BackupDecryptionKey,\n    keyBackupInfo: KeyBackupInfo,\n): boolean {\n    const authData = <Curve25519AuthData>keyBackupInfo.auth_data;\n    return authData.public_key === decryptionKey.megolmV1PublicKey.publicKeyBase64;\n}\n\n/**\n * Counts the total number of keys present in a key backup.\n * @param keyBackup - The key backup to count the keys from.\n * @returns The total number of keys in the backup.\n */\nfunction countKeysInBackup(keyBackup: KeyBackup): number {\n    let count = 0;\n    for (const { sessions } of Object.values(keyBackup.rooms)) {\n        count += Object.keys(sessions).length;\n    }\n    return count;\n}\n\nexport type RustBackupCryptoEvents =\n    | CryptoEvent.KeyBackupStatus\n    | CryptoEvent.KeyBackupSessionsRemaining\n    | CryptoEvent.KeyBackupFailed\n    | CryptoEvent.KeyBackupDecryptionKeyCached;\n\nexport type RustBackupCryptoEventMap = {\n    [CryptoEvent.KeyBackupStatus]: (enabled: boolean) => void;\n    [CryptoEvent.KeyBackupSessionsRemaining]: (remaining: number) => void;\n    [CryptoEvent.KeyBackupFailed]: (errCode: string) => void;\n    [CryptoEvent.KeyBackupDecryptionKeyCached]: (version: string) => void;\n};\n\n/**\n * Response from GET `/room_keys/keys` endpoint.\n * See https://spec.matrix.org/latest/client-server-api/#get_matrixclientv3room_keyskeys\n */\nexport interface KeyBackup {\n    rooms: Record<string, { sessions: KeyBackupRoomSessions }>;\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,OAAO,KAAK,eAAe,MAAM,oCAAoC;AAcrE,SAAS,YAAY,EAAkB,WAAW,EAAsB,MAAM,QAAQ,sBAAsB;AAC5G,SAAS,iBAAiB,QAAQ,kCAAkC;AACpE,SAAS,SAAS,EAAE,WAAW,QAAQ,aAAa;AAEpD,SAAS,KAAK,QAAQ,aAAa;AAEnC,SAGI,WAAW,EACX,kBAAkB,QACf,wBAAwB;;AAG/B;;AAGA;AACA;AACA;AACA;;AAQA;AACA;AACA;AACA,OAAO,MAAM,iBAAiB,SAAS,iBAAiB,CAAmD;EAsBhG,WAAW,CACd,MAAc,EACG,UAAsB,EACtB,IAAmD,EACnD,wBAAkD,EACrE;IACE,KAAK,CAAC,CAAC;IA3BX;IAAA,0CAC2B,KAAK;IAEhC;AACJ;AACA;AACA;AACA;AACA;AACA;IANI,0CAO6D,SAAS;IAAA,6CAEzB,IAAI;IAAA,iCAC/B,KAAK;IAEvB;IAAA,+CACgC,KAAK;IAErC;IAAA;IAAA,kDAkO0E,IAAI;IAAA,KA7NzD,UAAsB,GAAtB,UAAsB;IAAA,KACtB,IAAmD,GAAnD,IAAmD;IAAA,KACnD,wBAAkD,GAAlD,wBAAkD;IAGnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC;EACxD;;EAEA;AACJ;AACA;AACA;AACA;EACW,IAAI,GAAS;IAChB,IAAI,CAAC,OAAO,GAAG,IAAI;EACvB;;EAEA;AACJ;AACA;EACI,MAAa,sBAAsB,GAA2B;IAC1D,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;IAC3D,OAAO,IAAI,CAAC,mBAAmB;EACnC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,mBAAmB,GAA8C;IAC1E;IACA;IACA,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC,gBAAgB;EAChC;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,kBAAkB,CAAC,IAAmB,EAA4B;IAC3E,MAAM,qBAA4C,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC;IAE7F,MAAM,UAAsC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,UAAU,EAAE,aAAa;IAC/C,MAAM,4BAA4B,GAC9B,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,oCAAoC,CAAC,IAAI,EAAE,aAAa,CAAC;IACrF,OAAO;MACH,oBAAoB,EAAE,4BAA4B;MAClD,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC;IAC3C,CAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW,uBAAuB,CAAC,KAAc,EAAkC;IAC3E,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,EAAE;MACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC;;IAEA;IACA,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE;MAChC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;QAClE,IAAI,CAAC,wBAAwB,GAAG,IAAI;MACxC,CAAC,CAAC;IACN;IACA,OAAO,IAAI,CAAC,wBAAwB;EACxC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,0BAA0B,CAAC,MAAc,EAAoB;IACtE;IACA;IACA;IACA,IAAI,gBAAsC;IAC1C,IAAI;MACA,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,CAAC,CAAC;MACvF,OAAO,KAAK;IAChB;IAEA,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE;MAC5B;MACA;MACA,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,sGACJ,CAAC;MACD,OAAO,KAAK;IAChB;IAEA,IAAI,mBAAwD;IAC5D,IAAI;MACA,mBAAmB,GAAG,eAAe,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC;IAChF,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE,CAAC,CAAC;MAChF,OAAO,KAAK;IAChB;IAEA,IAAI;MACA,MAAM,iBAAiB,GAAG,IAAI,CAAC,oCAAoC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;MAC1G,IAAI,CAAC,iBAAiB,EAAE;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,+HAA+H,gBAAgB,CAAC,OAAO,GAC3J,CAAC;QACD;QACA,OAAO,KAAK;MAChB;MACA,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,gGAAgG,gBAAgB,CAAC,OAAO,YAC5H,CAAC;MACD,MAAM,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,OAAO,CAAC;;MAEjF;MACA;MACA,IAAI,IAAI,CAAC,wBAAwB,EAAE;QAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC;QAChG,MAAM,IAAI,CAAC,wBAAwB;MACvC;MACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC;MAC3F,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM;QAClF,IAAI,CAAC,wBAAwB,GAAG,IAAI;MACxC,CAAC,CAAC;MACF,MAAM,IAAI,CAAC,wBAAwB;MACnC,OAAO,IAAI;IACf,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE,CAAC,CAAC;IAC/F;IAEA,OAAO,KAAK;EAChB;EAEA,MAAa,uBAAuB,CAChC,mBAAwD,EACxD,OAAe,EACF;IACb,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC3E;IACA;IACA,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,4BAA4B,EAAE,OAAO,CAAC;EAChE;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,cAAc,CAAC,IAA0B,EAAE,IAAyB,EAAiB;IAC9F,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;EAC/D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,oBAAoB,CAAC,QAAgB,EAAE,IAAyB,EAAiB;IAC1F,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,QAAQ,EAAE,CAAC,QAAgB,EAAE,KAAa,KAAW;MAC9F,MAAM,SAAoC,GAAG;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,KAAK,EAAE,kBAAkB,CAAC,QAAQ;QAClC,QAAQ,EAAE;MACd,CAAC;MACD,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACvC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;EACI,MAAa,sBAAsB,CAC/B,IAA0B,EAC1B,aAAqB,EACrB,IAAyB,EACZ;IACb,MAAM,UAAwE,GAAG,IAAI,GAAG,CAAC,CAAC;IAC1F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;MACpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;MACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACzB,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;MACrC;MACA,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;IACpD;IACA,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,CACxC,UAAU,EACV,CAAC,QAAgB,EAAE,KAAa,EAAE,QAAgB,KAAW;MACzD,MAAM,SAAoC,GAAG;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,KAAK,EAAE,kBAAkB,CAAC,QAAQ;QAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;MAC7B,CAAC;MACD,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACvC,CAAC,EACD,aACJ,CAAC;EACL;EAIA;AACJ;AACA;AACA;AACA;EACI,MAAc,gBAAgB,CAAC,UAA6C,EAAkC;IAC1G,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC;IAClD,IAAI;MACA,IAAI,CAAC,UAAU,EAAE;QACb,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC;MACrD;IACJ,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC;MAC3D,IAAI,CAAC,gBAAgB,GAAG,SAAS;MACjC,OAAO,IAAI;IACf;IACA,IAAI,CAAC,gBAAgB,GAAG,IAAI;IAC5B,IAAI,CAAC,gBAAgB,GAAG,UAAU;IAElC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEzD,IAAI,CAAC,UAAU,EAAE;MACb,IAAI,aAAa,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC;QAC1E,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;MACjC,CAAC,MAAM;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC;MACjF;MACA,OAAO,IAAI;IACf;IAEA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;;IAE3D;IACA;IACA,IAAI,CAAC,SAAS,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;MACvD,IAAI,aAAa,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC;QACvF,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;MACjC,CAAC,MAAM;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC;MAC9F;IACJ,CAAC,MAAM;MACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,aAAa,CAAC;IACjE;IACA,OAAO;MAAE,UAAU;MAAE;IAAU,CAAC;EACpC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAc,uBAAuB,CAAC,UAAyB,EAAE,aAA4B,EAAiB;IAC1G,IAAI,aAAa,KAAK,IAAI,EAAE;MACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,UAAU,CAAC,OAAO,wBAAwB,CAAC;MACzF,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;IAC1C,CAAC,MAAM,IAAI,aAAa,KAAK,UAAU,CAAC,OAAO,EAAE;MAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,aAAa,sBAAsB,UAAU,CAAC,OAAO,cAAc,CAAC;MAC3G;MACA;MACA,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;MAC7B;MACA,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;IAC1C,CAAC,MAAM;MACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,UAAU,CAAC,OAAO,gBAAgB,CAAC;IAC3E;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACI,MAAc,eAAe,CAAC,UAAyB,EAAiB;IACpE;IACA;IACA,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAC/B,UAAU,CAAC,SAAS,CAAwB,UAAU,EACvD,UAAU,CAAC,OACf,CAAC;IACD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,OAAO;IAE7C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC;IAE5C,IAAI,CAAC,cAAc,CAAC,CAAC;EACzB;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,cAAc,GAAkB;IACzC,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,EAAE;MAClC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB;EACJ;EAEA,MAAc,gBAAgB,GAAkB;IAC5C,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,mBAAmB,GAAG,IAAI;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,KAAK,CAAC;EACjD;EAEA,MAAc,cAAc,CAAC,QAAQ,GAAG,KAAK,EAAiB;IAC1D,IAAI,IAAI,CAAC,qBAAqB,EAAE;MAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC;MAChD;IACJ;IACA,IAAI,CAAC,qBAAqB,GAAG,IAAI;IAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,IAAI,CAAC,mBAAmB,GAAG,CAAC;;IAEtG;IACA;IACA;IACA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ;IACtC,MAAM,KAAK,CAAC,KAAK,CAAC;IAElB,IAAI;MACA;MACA,IAAI,WAAW,GAAG,CAAC;MACnB;MACA,IAAI,sBAAqC,GAAG,IAAI;MAChD;MACA;MACA,IAAI,gBAAgB,GAAG,IAAI;MAE3B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QAClB;QACA,IAAI,OAAsD,GAAG,SAAS;QACtE,IAAI;UACA,OAAO,GAAG,MAAM,WAAW,CACvB,IAAI,CAAC,MAAM,EACX,yDAAyD,EACzD,YAAY;YACR,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;UACjD,CACJ,CAAC;QACL,CAAC,CAAC,OAAO,GAAG,EAAE;UACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,EAAE,GAAG,CAAC;QACvF;QAEA,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;UACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,mBAAmB,GAAG,CAAC;UACjF,IAAI,CAAC,OAAO,EAAE;YACV;YACA,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,CAAC;UACxD;UACA;QACJ;QAEA,IAAI;UACA,MAAM,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,OAAO,CAAC;UAChE,WAAW,GAAG,CAAC;UACf,IAAI,IAAI,CAAC,OAAO,EAAE;;UAElB;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA,IAAI,CAAC,gBAAgB,IAAI,sBAAsB,KAAK,IAAI,EAAE;YACtD,IAAI;cACA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;cACtD,sBAAsB,GAAG,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ;YAC/D,CAAC,CAAC,OAAO,GAAG,EAAE;cACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,GAAG,CAAC;YACnF;UACJ;UAEA,IAAI,sBAAsB,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,sBAAsB,CAAC;YACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACvD;YACA;YACA;YACA;YACA;YACA,sBAAsB,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAsB,GAAG,gBAAgB,EAAE,CAAC,CAAC;UACnF;QACJ,CAAC,CAAC,OAAO,GAAG,EAAE;UACV,WAAW,EAAE;UACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE,GAAG,CAAC;UACrF,IAAI,GAAG,YAAY,WAAW,EAAE;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO;YAChC,IAAI,OAAO,IAAI,aAAa,IAAI,OAAO,IAAI,2BAA2B,EAAE;cACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,OAAO,GAAG,CAAC;cACjF,IAAI;gBACA,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;cACjC,CAAC,CAAC,OAAO,KAAK,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC;cACrF;cACA,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,OAAQ,CAAC;cACzD;cACA;cACA,IAAI,CAAC,qBAAqB,GAAG,KAAK;cAClC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;cAClC;YACJ,CAAC,MAAM,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE;cAC/B;cACA,IAAI;gBACA,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;gBACtC,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE;kBAC1B,MAAM,KAAK,CAAC,QAAQ,CAAC;kBACrB;gBACJ;cACJ,CAAC,CAAC,OAAO,KAAK,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,qEAAqE,EACrE,KACJ,CAAC;cACL,CAAC,CAAC;YACN;UACJ;;UAEA;UACA;UACA,MAAM,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE;QACA,gBAAgB,GAAG,KAAK;MAC5B;IACJ,CAAC,SAAS;MACN,IAAI,CAAC,qBAAqB,GAAG,KAAK;IACtC;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACY,gBAAgB,CAAC,KAAwC,EAAU;IACvE,MAAM,UAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IACpD,OAAO,iBAAiB,CAAC,UAAU,CAAC;EACxC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,uBAAuB,CAAC,OAAgB,EAAiC;IAClF,OAAO,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;EAC5D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,cAAc,CAAC,UAAiD,EAAkC;IAC3G;IACA,IAAI,IAAI,CAAC,wBAAwB,EAAE;MAC/B,MAAM,IAAI,CAAC,wBAAwB;IACvC;;IAEA;IACA,MAAM,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,eAAe,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB;IAE1C,MAAM,QAAQ,GAAG;MAAE,UAAU,EAAE,MAAM,CAAC;IAAgB,CAAC;IAEvD,MAAM,UAAU,CAAC,QAAQ,CAAC;IAE1B,MAAM,UAA4B,GAAG;MACjC,SAAS,EAAE,MAAM,CAAC,SAAS;MAC3B,SAAS,EAAE;IACf,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CACrC,MAAM,CAAC,IAAI,EACX,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV;MACI,MAAM,EAAE,YAAY,CAAC;IACzB,CACJ,CAAC;;IAED;IACA;IACA,MAAM,UAAyB,GAAG;MAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;MAC3B,SAAS,EAAE,QAAQ;MACnB,OAAO,EAAE,GAAG,CAAC,OAAO;MACpB,KAAK,EAAE,CAAC;MACR,IAAI,EAAE,EAAE,CAAE;IACd,CAAC;;IAED;IACA;IACA,IAAI,CAAC,gBAAgB,GAAG,UAAU;IAClC,IAAI,CAAC,gBAAgB,GAAG,IAAI;IAC5B,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC;IAE1D,OAAO;MACH,OAAO,EAAE,GAAG,CAAC,OAAO;MACpB,SAAS,EAAE,MAAM,CAAC,SAAS;MAC3B,QAAQ,EAAE,QAAQ;MAClB,aAAa,EAAE;IACnB,CAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,0BAA0B,GAAkB;IACrD;IACA,IAAI,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI;IACrE,OAAO,OAAO,IAAI,IAAI,EAAE;MACpB,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;MAC1C,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI;IACrE;;IAEA;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,sBAAsB,CAAC,OAAe,EAAiB;IAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,SAAS,CAAC,6BAA6B,EAAE;MAAE,QAAQ,EAAE;IAAQ,CAAC,CAAC;IAC5E,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;MAC3E,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;IACF;IACA,IAAI,IAAI,CAAC,mBAAmB,KAAK,OAAO,EAAE;MACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI;MAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC;EACJ;;EAEA;AACJ;AACA;AACA;EACW,qBAAqB,CAAC,aAAkD,EAAmB;IAC9F,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;EAC9D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,gBAAgB,CACzB,aAAqB,EACrB,eAAgC,EAChC,IAA2B,EACI;IAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC;IAE7D,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC;EAChF;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,2BAA2B,CAAC,MAAc,EAAiB;IACpE,MAAM;MAAE,aAAa;MAAE;IAAc,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE;MAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,yEAAyE,aAAa,sBAAsB,CAAC,CAAC,aAAa,GAC/H,CAAC;MACD;IACJ;IACA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,MAAM,CAAC;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC;MAAE,KAAK,EAAE;QAAE,CAAC,MAAM,GAAG;UAAE;QAAS;MAAE;IAAE,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC;EAC/F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACY,iBAAiB,CAAC,aAAqB,EAAsB;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAC1B,MAAM,CAAC,GAAG,EACV,iBAAiB,EACjB;MAAE,OAAO,EAAE;IAAc,CAAC,EAC1B,SAAS,EACT;MACI,MAAM,EAAE,YAAY,CAAC;IACzB,CACJ,CAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACY,qBAAqB,CAAC,aAAqB,EAAE,MAAc,EAAkC;IACjG,MAAM,IAAI,GAAG,SAAS,CAAC,yBAAyB,EAAE;MAC9C,OAAO,EAAE;IACb,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAwB,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE;MAAE,OAAO,EAAE;IAAc,CAAC,EAAE,SAAS,EAAE;MAC3G,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAc,eAAe,CACzB,SAAoB,EACpB,aAAqB,EACrB,eAAgC,EAChC,IAA2B,EACI;IAC/B;;IAEA,MAAM,UAAU,GAAG,GAAG;IACtB;IACA,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAAC;IAClD,IAAI,aAAa,GAAG,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC;IAErB,IAAI,EAAE,gBAAgB,GAAG;MACrB,KAAK,EAAE,aAAa;MACpB,SAAS,EAAE,aAAa;MACxB,KAAK,EAAE,kBAAkB,CAAC,QAAQ;MAClC,QAAQ,EAAE;IACd,CAAC,CAAC;;IAEF;AACR;AACA;AACA;AACA;IACQ,MAAM,mBAAmB,GAAG,MAAO,UAA8C,IAAoB;MACjG,MAAM,YAAkC,GAAG,EAAE;MAC7C,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE;QACpC;QACA,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QACxF;QACA,iBAAiB,CAAC,OAAO,CAAE,OAAO,IAAK;UACnC;UACA,OAAO,CAAC,OAAO,GAAG,MAAM;UACxB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC;MACN;;MAEA;MACA,IAAI;QACA,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,aAAa,CAAC;QAC9D,aAAa,IAAI,YAAY,CAAC,MAAM;MACxC,CAAC,CAAC,OAAO,CAAC,EAAE;QACR,aAAa,IAAI,YAAY,CAAC,MAAM;QACpC;QACA;QACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAC;MAC5D;MAEA,IAAI,EAAE,gBAAgB,GAAG;QACrB,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,kBAAkB,CAAC,QAAQ;QAClC,QAAQ,EAAE;MACd,CAAC,CAAC;IACN,CAAC;IAED,IAAI,eAAe,GAAG,CAAC;IACvB,IAAI,gBAAoD,GAAG,IAAI,GAAG,CAAC,CAAC;;IAEpE;IACA;IACA,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;MAC9D;MACA,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;;MAExB;MACA,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;MAEhC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClE;QACA,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAE;QACrD,eAAe,CAAC,SAAS,CAAC,GAAG,OAAO;QACpC,eAAe,IAAI,CAAC;QACpB;QACA,IAAI,eAAe,IAAI,UAAU,EAAE;UAC/B;UACA,MAAM,mBAAmB,CAAC,gBAAgB,CAAC;UAC3C;UACA,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC;UAC5B;UACA,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;UAChC,eAAe,GAAG,CAAC;QACvB;MACJ;IACJ;;IAEA;IACA,IAAI,eAAe,GAAG,CAAC,EAAE;MACrB,MAAM,mBAAmB,CAAC,gBAAgB,CAAC;IAC/C;IAEA,OAAO;MAAE,KAAK,EAAE,aAAa;MAAE,QAAQ,EAAE;IAAc,CAAC;EAC5D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACY,oCAAoC,CACxC,IAAmB,EACnB,mBAAwD,EACjD;IACP,IAAI,IAAI,CAAC,SAAS,KAAK,wCAAwC,EAAE;MAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE,IAAI,CAAC,SAAS,CAAC;MACzF,OAAO,KAAK;IAChB;IAEA,OACK,IAAI,CAAC,SAAS,EAAyB,UAAU,KAAK,mBAAmB,CAAC,iBAAiB,CAAC,eAAe;EAEpH;AACJ;AACA;AACA;AACA;AACA,OAAO,MAAM,mBAAmB,CAA4B;EAIjD,WAAW,CACG,MAAc,EAC/B,aAAkD,EACpD;IAAA;IAAA;IAAA,KAFmB,MAAc,GAAd,MAAc;IAG/B,IAAI,CAAC,aAAa,GAAG,aAAa;IAClC,IAAI,CAAC,aAAa,GAAG,KAAK;EAC9B;;EAEA;AACJ;AACA;EACI,MAAa,eAAe,CAAC,WAA6C,EAAiC;IACvG,MAAM,IAA0B,GAAG,EAAE;IACrC,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;MAChE,IAAI;QACA,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,CAAC,aAAa,CAAC,SAAS,CACxB,WAAW,CAAC,YAAY,CAAC,SAAS,EAClC,WAAW,CAAC,YAAY,CAAC,GAAG,EAC5B,WAAW,CAAC,YAAY,CAAC,UAC7B,CACJ,CAAC;QACD,SAAS,CAAC,UAAU,GAAG,SAAS;QAChC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;MACxB,CAAC,CAAC,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,EAAE,WAAW,CAAC;MACrF;IACJ;IACA,OAAO,IAAI;EACf;;EAEA;AACJ;AACA;EACW,IAAI,GAAS;IAChB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;EAC7B;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,uBAAuB,CACzC,IAAmD,EACnD,OAAgB,EACa;EAC7B,IAAI;IACA,MAAM,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC,6BAA6B,EAAE;MAAE,QAAQ,EAAE;IAAQ,CAAC,CAAC,GAAG,oBAAoB;IAC7G,OAAO,MAAM,IAAI,CAAC,aAAa,CAAgB,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;MACnF,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;EACN,CAAC,CAAC,OAAO,CAAC,EAAE;IACR,IAAkB,CAAC,CAAE,OAAO,KAAK,aAAa,EAAE;MAC5C,OAAO,IAAI;IACf,CAAC,MAAM;MACH,MAAM,CAAC;IACX;EACJ;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,iCAAiC,CAC7C,aAAkD,EAClD,aAA4B,EACrB;EACP,MAAM,QAAQ,GAAuB,aAAa,CAAC,SAAS;EAC5D,OAAO,QAAQ,CAAC,UAAU,KAAK,aAAa,CAAC,iBAAiB,CAAC,eAAe;AAClF;;AAEA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,SAAoB,EAAU;EACrD,IAAI,KAAK,GAAG,CAAC;EACb,KAAK,MAAM;IAAE;EAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;IACvD,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;EACzC;EACA,OAAO,KAAK;AAChB;;AAeA;AACA;AACA;AACA","ignoreList":[]}

package/node_modules/matrix-js-sdk/lib/rust-crypto/device-converter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-converter.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/device-converter.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,eAAe,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EAAE,MAAM,EAAsB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,GAAG,MAAM,CAwD3G;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAIjF;AAGD,KAAK,WAAW,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAoBpE"}
+{"version":3,"file":"device-converter.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/device-converter.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,eAAe,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EAAE,MAAM,EAAsB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,GAAG,MAAM,CAwD3G;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAIjF;AAGD,KAAK,WAAW,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBpE"}

package/node_modules/matrix-js-sdk/lib/rust-crypto/device-converter.js

@@ -102,6 +102,7 @@ export function downloadDeviceToJsDevice(device) {
   const displayName = device.unsigned?.device_display_name;
   const signatures = new Map();
   if (device.signatures) {
+    // oxlint-disable-next-line guard-for-in
     for (const userId in device.signatures) {
       signatures.set(userId, new Map(Object.entries(device.signatures[userId])));
     }

package/node_modules/matrix-js-sdk/lib/rust-crypto/device-converter.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-converter.js","names":[],"sources":["../../src/rust-crypto/device-converter.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport { Device, DeviceVerification } from \"../models/device.ts\";\nimport { type DeviceKeys } from \"../client.ts\";\n\n/**\n * Convert a {@link RustSdkCryptoJs.Device} to a {@link Device}\n * @param device - Rust Sdk device\n * @param userId - owner of the device\n *\n * @internal\n */\nexport function rustDeviceToJsDevice(device: RustSdkCryptoJs.Device, userId: RustSdkCryptoJs.UserId): Device {\n    // Copy rust device keys to Device.keys\n    const keys = new Map<string, string>();\n    for (const [keyId, key] of device.keys.entries()) {\n        keys.set(keyId.toString(), key.toBase64());\n    }\n\n    // Compute verified from device state\n    let verified: DeviceVerification = DeviceVerification.Unverified;\n    if (device.isBlacklisted()) {\n        verified = DeviceVerification.Blocked;\n    } else if (device.isVerified()) {\n        verified = DeviceVerification.Verified;\n    }\n\n    // Convert rust signatures to Device.signatures\n    const signatures = new Map<string, Map<string, string>>();\n    const mayBeSignatureMap: Map<string, RustSdkCryptoJs.MaybeSignature> | undefined = device.signatures.get(userId);\n    if (mayBeSignatureMap) {\n        const convertedSignatures = new Map<string, string>();\n        // Convert maybeSignatures map to a Map<string, string>\n        for (const [key, value] of mayBeSignatureMap.entries()) {\n            if (value.isValid() && value.signature) {\n                convertedSignatures.set(key, value.signature.toBase64());\n            }\n        }\n\n        signatures.set(userId.toString(), convertedSignatures);\n    }\n\n    // Convert rust algorithms to algorithms\n    const rustAlgorithms: RustSdkCryptoJs.EncryptionAlgorithm[] = device.algorithms;\n    // Use set to ensure that algorithms are not duplicated\n    const algorithms = new Set<string>();\n    rustAlgorithms.forEach((algorithm) => {\n        switch (algorithm) {\n            case RustSdkCryptoJs.EncryptionAlgorithm.MegolmV1AesSha2:\n                algorithms.add(\"m.megolm.v1.aes-sha2\");\n                break;\n            case RustSdkCryptoJs.EncryptionAlgorithm.OlmV1Curve25519AesSha2:\n            default:\n                algorithms.add(\"m.olm.v1.curve25519-aes-sha2\");\n                break;\n        }\n    });\n\n    return new Device({\n        deviceId: device.deviceId.toString(),\n        userId: userId.toString(),\n        keys,\n        algorithms: Array.from(algorithms),\n        verified,\n        signatures,\n        displayName: device.displayName,\n        dehydrated: device.isDehydrated,\n    });\n}\n\n/**\n * Convert {@link DeviceKeys}  from `/keys/query` request to a `Map<string, Device>`\n * @param deviceKeys - Device keys object to convert\n *\n * @internal\n */\nexport function deviceKeysToDeviceMap(deviceKeys: DeviceKeys): Map<string, Device> {\n    return new Map(\n        Object.entries(deviceKeys).map(([deviceId, device]) => [deviceId, downloadDeviceToJsDevice(device)]),\n    );\n}\n\n// Device from `/keys/query` request\ntype QueryDevice = DeviceKeys[keyof DeviceKeys];\n\n/**\n * Convert `/keys/query` {@link QueryDevice} device to {@link Device}\n * @param device - Device from `/keys/query` request\n *\n * @internal\n */\nexport function downloadDeviceToJsDevice(device: QueryDevice): Device {\n    const keys = new Map(Object.entries(device.keys));\n    const displayName = device.unsigned?.device_display_name;\n\n    const signatures = new Map<string, Map<string, string>>();\n    if (device.signatures) {\n        for (const userId in device.signatures) {\n            signatures.set(userId, new Map(Object.entries(device.signatures[userId])));\n        }\n    }\n\n    return new Device({\n        deviceId: device.device_id,\n        userId: device.user_id,\n        keys,\n        algorithms: device.algorithms,\n        verified: DeviceVerification.Unverified,\n        signatures,\n        displayName,\n    });\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,KAAK,eAAe,MAAM,oCAAoC;AAErE,SAAS,MAAM,EAAE,kBAAkB,QAAQ,qBAAqB;AAGhE;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,oBAAoB,CAAC,MAA8B,EAAE,MAA8B,EAAU;EACzG;EACA,MAAM,IAAI,GAAG,IAAI,GAAG,CAAiB,CAAC;EACtC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;EAC9C;;EAEA;EACA,IAAI,QAA4B,GAAG,kBAAkB,CAAC,UAAU;EAChE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE;IACxB,QAAQ,GAAG,kBAAkB,CAAC,OAAO;EACzC,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;IAC5B,QAAQ,GAAG,kBAAkB,CAAC,QAAQ;EAC1C;;EAEA;EACA,MAAM,UAAU,GAAG,IAAI,GAAG,CAA8B,CAAC;EACzD,MAAM,iBAA0E,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;EAChH,IAAI,iBAAiB,EAAE;IACnB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB,CAAC;IACrD;IACA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE;MACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE;QACpC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;MAC5D;IACJ;IAEA,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC;EAC1D;;EAEA;EACA,MAAM,cAAqD,GAAG,MAAM,CAAC,UAAU;EAC/E;EACA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC;EACpC,cAAc,CAAC,OAAO,CAAE,SAAS,IAAK;IAClC,QAAQ,SAAS;MACb,KAAK,eAAe,CAAC,mBAAmB,CAAC,eAAe;QACpD,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACtC;MACJ,KAAK,eAAe,CAAC,mBAAmB,CAAC,sBAAsB;MAC/D;QACI,UAAU,CAAC,GAAG,CAAC,8BAA8B,CAAC;QAC9C;IACR;EACJ,CAAC,CAAC;EAEF,OAAO,IAAI,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,IAAI;IACJ,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;IAClC,QAAQ;IACR,UAAU;IACV,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,UAAU,EAAE,MAAM,CAAC;EACvB,CAAC,CAAC;AACN;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,qBAAqB,CAAC,UAAsB,EAAuB;EAC/E,OAAO,IAAI,GAAG,CACV,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC,CACvG,CAAC;AACL;;AAEA;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,wBAAwB,CAAC,MAAmB,EAAU;EAClE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;EACjD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,mBAAmB;EAExD,MAAM,UAAU,GAAG,IAAI,GAAG,CAA8B,CAAC;EACzD,IAAI,MAAM,CAAC,UAAU,EAAE;IACnB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE;MACpC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9E;EACJ;EAEA,OAAO,IAAI,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,SAAS;IAC1B,MAAM,EAAE,MAAM,CAAC,OAAO;IACtB,IAAI;IACJ,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,QAAQ,EAAE,kBAAkB,CAAC,UAAU;IACvC,UAAU;IACV;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
+{"version":3,"file":"device-converter.js","names":[],"sources":["../../src/rust-crypto/device-converter.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport { Device, DeviceVerification } from \"../models/device.ts\";\nimport { type DeviceKeys } from \"../client.ts\";\n\n/**\n * Convert a {@link RustSdkCryptoJs.Device} to a {@link Device}\n * @param device - Rust Sdk device\n * @param userId - owner of the device\n *\n * @internal\n */\nexport function rustDeviceToJsDevice(device: RustSdkCryptoJs.Device, userId: RustSdkCryptoJs.UserId): Device {\n    // Copy rust device keys to Device.keys\n    const keys = new Map<string, string>();\n    for (const [keyId, key] of device.keys.entries()) {\n        keys.set(keyId.toString(), key.toBase64());\n    }\n\n    // Compute verified from device state\n    let verified: DeviceVerification = DeviceVerification.Unverified;\n    if (device.isBlacklisted()) {\n        verified = DeviceVerification.Blocked;\n    } else if (device.isVerified()) {\n        verified = DeviceVerification.Verified;\n    }\n\n    // Convert rust signatures to Device.signatures\n    const signatures = new Map<string, Map<string, string>>();\n    const mayBeSignatureMap: Map<string, RustSdkCryptoJs.MaybeSignature> | undefined = device.signatures.get(userId);\n    if (mayBeSignatureMap) {\n        const convertedSignatures = new Map<string, string>();\n        // Convert maybeSignatures map to a Map<string, string>\n        for (const [key, value] of mayBeSignatureMap.entries()) {\n            if (value.isValid() && value.signature) {\n                convertedSignatures.set(key, value.signature.toBase64());\n            }\n        }\n\n        signatures.set(userId.toString(), convertedSignatures);\n    }\n\n    // Convert rust algorithms to algorithms\n    const rustAlgorithms: RustSdkCryptoJs.EncryptionAlgorithm[] = device.algorithms;\n    // Use set to ensure that algorithms are not duplicated\n    const algorithms = new Set<string>();\n    rustAlgorithms.forEach((algorithm) => {\n        switch (algorithm) {\n            case RustSdkCryptoJs.EncryptionAlgorithm.MegolmV1AesSha2:\n                algorithms.add(\"m.megolm.v1.aes-sha2\");\n                break;\n            case RustSdkCryptoJs.EncryptionAlgorithm.OlmV1Curve25519AesSha2:\n            default:\n                algorithms.add(\"m.olm.v1.curve25519-aes-sha2\");\n                break;\n        }\n    });\n\n    return new Device({\n        deviceId: device.deviceId.toString(),\n        userId: userId.toString(),\n        keys,\n        algorithms: Array.from(algorithms),\n        verified,\n        signatures,\n        displayName: device.displayName,\n        dehydrated: device.isDehydrated,\n    });\n}\n\n/**\n * Convert {@link DeviceKeys}  from `/keys/query` request to a `Map<string, Device>`\n * @param deviceKeys - Device keys object to convert\n *\n * @internal\n */\nexport function deviceKeysToDeviceMap(deviceKeys: DeviceKeys): Map<string, Device> {\n    return new Map(\n        Object.entries(deviceKeys).map(([deviceId, device]) => [deviceId, downloadDeviceToJsDevice(device)]),\n    );\n}\n\n// Device from `/keys/query` request\ntype QueryDevice = DeviceKeys[keyof DeviceKeys];\n\n/**\n * Convert `/keys/query` {@link QueryDevice} device to {@link Device}\n * @param device - Device from `/keys/query` request\n *\n * @internal\n */\nexport function downloadDeviceToJsDevice(device: QueryDevice): Device {\n    const keys = new Map(Object.entries(device.keys));\n    const displayName = device.unsigned?.device_display_name;\n\n    const signatures = new Map<string, Map<string, string>>();\n    if (device.signatures) {\n        // oxlint-disable-next-line guard-for-in\n        for (const userId in device.signatures) {\n            signatures.set(userId, new Map(Object.entries(device.signatures[userId])));\n        }\n    }\n\n    return new Device({\n        deviceId: device.device_id,\n        userId: device.user_id,\n        keys,\n        algorithms: device.algorithms,\n        verified: DeviceVerification.Unverified,\n        signatures,\n        displayName,\n    });\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,KAAK,eAAe,MAAM,oCAAoC;AAErE,SAAS,MAAM,EAAE,kBAAkB,QAAQ,qBAAqB;AAGhE;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,oBAAoB,CAAC,MAA8B,EAAE,MAA8B,EAAU;EACzG;EACA,MAAM,IAAI,GAAG,IAAI,GAAG,CAAiB,CAAC;EACtC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;EAC9C;;EAEA;EACA,IAAI,QAA4B,GAAG,kBAAkB,CAAC,UAAU;EAChE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE;IACxB,QAAQ,GAAG,kBAAkB,CAAC,OAAO;EACzC,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;IAC5B,QAAQ,GAAG,kBAAkB,CAAC,QAAQ;EAC1C;;EAEA;EACA,MAAM,UAAU,GAAG,IAAI,GAAG,CAA8B,CAAC;EACzD,MAAM,iBAA0E,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;EAChH,IAAI,iBAAiB,EAAE;IACnB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB,CAAC;IACrD;IACA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE;MACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE;QACpC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;MAC5D;IACJ;IAEA,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC;EAC1D;;EAEA;EACA,MAAM,cAAqD,GAAG,MAAM,CAAC,UAAU;EAC/E;EACA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC;EACpC,cAAc,CAAC,OAAO,CAAE,SAAS,IAAK;IAClC,QAAQ,SAAS;MACb,KAAK,eAAe,CAAC,mBAAmB,CAAC,eAAe;QACpD,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACtC;MACJ,KAAK,eAAe,CAAC,mBAAmB,CAAC,sBAAsB;MAC/D;QACI,UAAU,CAAC,GAAG,CAAC,8BAA8B,CAAC;QAC9C;IACR;EACJ,CAAC,CAAC;EAEF,OAAO,IAAI,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,IAAI;IACJ,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;IAClC,QAAQ;IACR,UAAU;IACV,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,UAAU,EAAE,MAAM,CAAC;EACvB,CAAC,CAAC;AACN;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,qBAAqB,CAAC,UAAsB,EAAuB;EAC/E,OAAO,IAAI,GAAG,CACV,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC,CACvG,CAAC;AACL;;AAEA;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,wBAAwB,CAAC,MAAmB,EAAU;EAClE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;EACjD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,mBAAmB;EAExD,MAAM,UAAU,GAAG,IAAI,GAAG,CAA8B,CAAC;EACzD,IAAI,MAAM,CAAC,UAAU,EAAE;IACnB;IACA,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE;MACpC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9E;EACJ;EAEA,OAAO,IAAI,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,SAAS;IAC1B,MAAM,EAAE,MAAM,CAAC,OAAO;IACtB,IAAI;IACJ,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,QAAQ,EAAE,kBAAkB,CAAC,UAAU;IACvC,UAAU;IACV;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/node_modules/matrix-js-sdk/lib/rust-crypto/index.d.ts

@@ -5,12 +5,11 @@ import { type Logger } from "../logger.ts";
 import { type CryptoStore } from "../crypto/store/base.ts";
 import { type CryptoCallbacks } from "../crypto-api/index.ts";
 /**
- * Create a new `RustCrypto` implementation
+ * The arguments used to initialise RustCrypto, passed in to initRustCrypto.
  *
- * @param args - Parameter object
  * @internal
  */
-export declare function initRustCrypto(args: {
+export interface InitRustCryptoArgs {
     /** A `Logger` instance that will be used for debug output. */
     logger: Logger;
     /**
@@ -61,5 +60,19 @@ export declare function initRustCrypto(args: {
      * Whether to enable support for encrypting state events.
      */
     enableEncryptedStateEvents?: boolean;
-}): Promise<RustCrypto>;
+    /**
+     * Optional PEM-formatted string that provides CA certificates. These will
+     * be used to check X.509 signatures on user identities. Any user identity
+     * that has a valid signature according to the supplied CAs will be
+     * considered verified, without any manual verification taking place.
+     */
+    caCertsPem?: string;
+}
+/**
+ * Create a new `RustCrypto` implementation
+ *
+ * @param args - InitRustCryptoArgs
+ * @internal
+ */
+export declare function initRustCrypto(args: InitRustCryptoArgs): Promise<RustCrypto>;
 //# sourceMappingURL=index.d.ts.map

package/node_modules/matrix-js-sdk/lib/rust-crypto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA2C,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,yBAAyB,CAAC;AAM3E,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACvC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAEpD,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IAEf,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IAEjB,+CAA+C;IAC/C,aAAa,EAAE,uBAAuB,CAAC;IAEvC,oDAAoD;IACpD,eAAe,EAAE,eAAe,CAAC;IAEjC;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,UAAU,CAAC;IAEtB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,WAAW,CAAC;IAEhC,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAE5E;;OAEG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACxC,GAAG,OAAO,CAAC,UAAU,CAAC,CA4CtB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA2C,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,yBAAyB,CAAC;AAM3E,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAC/B,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAEpD,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IAEf,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IAEjB,+CAA+C;IAC/C,aAAa,EAAE,uBAAuB,CAAC;IAEvC,oDAAoD;IACpD,eAAe,EAAE,eAAe,CAAC;IAEjC;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,UAAU,CAAC;IAEtB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,WAAW,CAAC;IAEhC,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAE5E;;OAEG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAkClF"}

package/node_modules/matrix-js-sdk/lib/rust-crypto/index.js

@@ -20,10 +20,17 @@ import { StoreHandle } from "@matrix-org/matrix-sdk-crypto-wasm";
 import { MAX_INVITE_ACCEPTANCE_MS_FOR_KEY_BUNDLE, RustCrypto } from "./rust-crypto.js";
 import { MigrationState } from "../crypto/store/base.js";
 import { migrateFromLegacyCrypto, migrateLegacyLocalTrustIfNeeded, migrateRoomSettingsFromLegacyCrypto } from "./libolm_migration.js";
+
+/**
+ * The arguments used to initialise RustCrypto, passed in to initRustCrypto.
+ *
+ * @internal
+ */
+
 /**
  * Create a new `RustCrypto` implementation
  *
- * @param args - Parameter object
+ * @param args - InitRustCryptoArgs
  * @internal
  */
 export async function initRustCrypto(args) {
@@ -52,14 +59,24 @@ export async function initRustCrypto(args) {
       storeHandle
     }, args));
   }
-  const rustCrypto = await initOlmMachine(logger, args.http, args.userId, args.deviceId, args.secretStorage, args.cryptoCallbacks, storeHandle, args.legacyCryptoStore, args.enableEncryptedStateEvents);
+  const rustCrypto = await initOlmMachine(args, storeHandle);
   storeHandle.free();
   logger.debug("Completed rust crypto-sdk setup");
   return rustCrypto;
 }
-async function initOlmMachine(logger, http, userId, deviceId, secretStorage, cryptoCallbacks, storeHandle, legacyCryptoStore, enableEncryptedStateEvents) {
+async function initOlmMachine({
+  logger,
+  http,
+  userId,
+  deviceId,
+  secretStorage,
+  cryptoCallbacks,
+  legacyCryptoStore,
+  enableEncryptedStateEvents,
+  caCertsPem
+}, storeHandle) {
   logger.debug("Init OlmMachine");
-  const olmMachine = await RustSdkCryptoJs.OlmMachine.initFromStore(new RustSdkCryptoJs.UserId(userId), new RustSdkCryptoJs.DeviceId(deviceId), storeHandle, logger);
+  const olmMachine = await RustSdkCryptoJs.OlmMachine.initFromStore(new RustSdkCryptoJs.UserId(userId), new RustSdkCryptoJs.DeviceId(deviceId), storeHandle, logger, caCertsPem);
 
   // A final migration step, now that we have an OlmMachine.
   if (legacyCryptoStore) {