@telecrypt-io/storage 0.9.3 → 0.9.4

package/dist/TeleCryptIOStorage.js

@@ -1,4 +1,5 @@
 import { ClientEvent, createClient, EventType, JoinRule, MatrixEvent, MatrixError, MsgType, Preset, RoomCreateTypeField, RoomType, SyncState, UNSTABLE_MSC3088_ENABLED, UNSTABLE_MSC3088_PURPOSE, UNSTABLE_MSC3089_BRANCH, UNSTABLE_MSC3089_LEAF, UNSTABLE_MSC3089_TREE_SUBTYPE, } from "matrix-js-sdk";
+import { EventShieldReason, OnlySignedDevicesIsolationMode, } from "matrix-js-sdk/lib/crypto-api/index.js";
 import { Method } from "matrix-js-sdk/lib/http-api/method.js";
 import { ClientPrefix } from "matrix-js-sdk/lib/http-api/prefix.js";
 import { encryptAttachment, decryptAttachment } from "matrix-encrypt-attachment";
@@ -514,6 +515,13 @@ export class TeleCryptIOStorage {
             event.getType() !== EventType.RoomMessage) {
             throw new StorageError("encrypted storage metadata is invalid or unavailable");
         }
+        const crypto = this.client.getCrypto();
+        if (!crypto)
+            throw new StorageError("encryption is not initialized");
+        const encryptionInfo = await crypto.getEncryptionInfoForEvent(event);
+        if (!encryptionInfo || encryptionInfo.shieldReason === EventShieldReason.MISMATCHED_SENDER) {
+            throw new UndecryptableFileError();
+        }
         return event;
     }
     async writeTreeName(roomId, name) {
@@ -1031,6 +1039,10 @@ export class TeleCryptIOStorage {
                 useIndexedDB: persistent,
                 cryptoDatabasePrefix: opts.cryptoDatabasePrefix ?? `telecrypt-io-storage::${opts.userId}::${opts.deviceId}`,
             }), opts.initTimeoutMs ?? 60000, "crypto init", opts.signal);
+            const crypto = client.getCrypto();
+            if (!crypto)
+                throw new StorageError("encryption is not initialized");
+            crypto.setDeviceIsolationMode(new OnlySignedDevicesIsolationMode());
             progress("Encryption ready — opening secure store…");
             storage = new TeleCryptIOStorage(client, opts, opts);
             if (opts.startClient === false) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telecrypt-io/storage",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "license": "BUSL-1.1",
   "type": "module",
   "packageManager": "npm@11.19.0",