@textrp/briij-js-sdk 41.0.0

package/lib/crypto-api/key-passphrase.js

@@ -0,0 +1,51 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+/*
+ * Copyright 2024 The Matrix.org Foundation C.I.C.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+var DEFAULT_BIT_SIZE = 256;
+
+/**
+ * Derive a recovery key from a passphrase and salt using PBKDF2.
+ * @see https://spec.matrix.org/v1.11/client-server-api/#deriving-keys-from-passphrases
+ *
+ * @param passphrase - The passphrase to derive the key from
+ * @param salt - The salt to use in the derivation
+ * @param iterations - The number of iterations to use in the derivation
+ * @param numBits - The number of bits to derive
+ */
+export function deriveRecoveryKeyFromPassphrase(_x, _x2, _x3) {
+  return _deriveRecoveryKeyFromPassphrase.apply(this, arguments);
+}
+function _deriveRecoveryKeyFromPassphrase() {
+  _deriveRecoveryKeyFromPassphrase = _asyncToGenerator(function* (passphrase, salt, iterations) {
+    var numBits = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : DEFAULT_BIT_SIZE;
+    if (!globalThis.crypto.subtle || !TextEncoder) {
+      throw new Error("Password-based backup is not available on this platform");
+    }
+    var key = yield globalThis.crypto.subtle.importKey("raw", new TextEncoder().encode(passphrase), {
+      name: "PBKDF2"
+    }, false, ["deriveBits"]);
+    var keybits = yield globalThis.crypto.subtle.deriveBits({
+      name: "PBKDF2",
+      salt: new TextEncoder().encode(salt),
+      iterations: iterations,
+      hash: "SHA-512"
+    }, key, numBits);
+    return new Uint8Array(keybits);
+  });
+  return _deriveRecoveryKeyFromPassphrase.apply(this, arguments);
+}
+//# sourceMappingURL=key-passphrase.js.map

package/lib/crypto-api/key-passphrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-passphrase.js","names":["DEFAULT_BIT_SIZE","deriveRecoveryKeyFromPassphrase","_x","_x2","_x3","_deriveRecoveryKeyFromPassphrase","apply","arguments","_asyncToGenerator","passphrase","salt","iterations","numBits","length","undefined","globalThis","crypto","subtle","TextEncoder","Error","key","importKey","encode","name","keybits","deriveBits","hash","Uint8Array"],"sources":["../../src/crypto-api/key-passphrase.ts"],"sourcesContent":["/*\r\n * Copyright 2024 The Matrix.org Foundation C.I.C.\r\n *\r\n * Licensed under the Apache License, Version 2.0 (the \"License\");\r\n * you may not use this file except in compliance with the License.\r\n * You may obtain a copy of the License at\r\n *\r\n *     http://www.apache.org/licenses/LICENSE-2.0\r\n *\r\n * Unless required by applicable law or agreed to in writing, software\r\n * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n * See the License for the specific language governing permissions and\r\n * limitations under the License.\r\n */\r\n\r\nconst DEFAULT_BIT_SIZE = 256;\r\n\r\n/**\r\n * Derive a recovery key from a passphrase and salt using PBKDF2.\r\n * @see https://spec.matrix.org/v1.11/client-server-api/#deriving-keys-from-passphrases\r\n *\r\n * @param passphrase - The passphrase to derive the key from\r\n * @param salt - The salt to use in the derivation\r\n * @param iterations - The number of iterations to use in the derivation\r\n * @param numBits - The number of bits to derive\r\n */\r\nexport async function deriveRecoveryKeyFromPassphrase(\r\n    passphrase: string,\r\n    salt: string,\r\n    iterations: number,\r\n    numBits = DEFAULT_BIT_SIZE,\r\n): Promise<Uint8Array<ArrayBuffer>> {\r\n    if (!globalThis.crypto.subtle || !TextEncoder) {\r\n        throw new Error(\"Password-based backup is not available on this platform\");\r\n    }\r\n\r\n    const key = await globalThis.crypto.subtle.importKey(\r\n        \"raw\",\r\n        new TextEncoder().encode(passphrase),\r\n        { name: \"PBKDF2\" },\r\n        false,\r\n        [\"deriveBits\"],\r\n    );\r\n\r\n    const keybits = await globalThis.crypto.subtle.deriveBits(\r\n        {\r\n            name: \"PBKDF2\",\r\n            salt: new TextEncoder().encode(salt),\r\n            iterations: iterations,\r\n            hash: \"SHA-512\",\r\n        },\r\n        key,\r\n        numBits,\r\n    );\r\n\r\n    return new Uint8Array(keybits);\r\n}\r\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,IAAMA,gBAAgB,GAAG,GAAG;;AAE5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsBC,+BAA+BA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,gCAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AA8BpD,SAAAF,iCAAA;EAAAA,gCAAA,GAAAG,iBAAA,CA9BM,WACHC,UAAkB,EAClBC,IAAY,EACZC,UAAkB,EAEc;IAAA,IADhCC,OAAO,GAAAL,SAAA,CAAAM,MAAA,QAAAN,SAAA,QAAAO,SAAA,GAAAP,SAAA,MAAGP,gBAAgB;IAE1B,IAAI,CAACe,UAAU,CAACC,MAAM,CAACC,MAAM,IAAI,CAACC,WAAW,EAAE;MAC3C,MAAM,IAAIC,KAAK,CAAC,yDAAyD,CAAC;IAC9E;IAEA,IAAMC,GAAG,SAASL,UAAU,CAACC,MAAM,CAACC,MAAM,CAACI,SAAS,CAChD,KAAK,EACL,IAAIH,WAAW,CAAC,CAAC,CAACI,MAAM,CAACb,UAAU,CAAC,EACpC;MAAEc,IAAI,EAAE;IAAS,CAAC,EAClB,KAAK,EACL,CAAC,YAAY,CACjB,CAAC;IAED,IAAMC,OAAO,SAAST,UAAU,CAACC,MAAM,CAACC,MAAM,CAACQ,UAAU,CACrD;MACIF,IAAI,EAAE,QAAQ;MACdb,IAAI,EAAE,IAAIQ,WAAW,CAAC,CAAC,CAACI,MAAM,CAACZ,IAAI,CAAC;MACpCC,UAAU,EAAEA,UAAU;MACtBe,IAAI,EAAE;IACV,CAAC,EACDN,GAAG,EACHR,OACJ,CAAC;IAED,OAAO,IAAIe,UAAU,CAACH,OAAO,CAAC;EAClC,CAAC;EAAA,OAAAnB,gCAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA","ignoreList":[]}

package/lib/crypto-api/keybackup.d.ts

@@ -0,0 +1,87 @@
+import { type ISigned } from "../@types/signed.ts";
+import { type AESEncryptedSecretStoragePayload } from "../@types/AESEncryptedSecretStoragePayload.ts";
+import { type ImportRoomKeyProgressData } from "./index.ts";
+export interface Curve25519AuthData {
+    public_key: string;
+    private_key_salt?: string;
+    private_key_iterations?: number;
+    private_key_bits?: number;
+}
+export interface Aes256AuthData {
+    iv: string;
+    mac: string;
+    private_key_salt?: string;
+    private_key_iterations?: number;
+}
+/**
+ * Information about a server-side key backup.
+ *
+ * Returned by [`GET /_matrix/client/v3/room_keys/version`](https://spec.matrix.org/v1.7/client-server-api/#get_matrixclientv3room_keysversion).
+ */
+export interface KeyBackupInfo {
+    algorithm: string;
+    auth_data: ISigned & (Curve25519AuthData | Aes256AuthData);
+    count?: number;
+    etag?: string;
+    version?: string;
+}
+/**
+ * Information on whether a given server-side backup is trusted.
+ */
+export interface BackupTrustInfo {
+    /**
+     * Is this backup trusted?
+     *
+     * True if, and only if, there is a valid signature on the backup from a trusted device.
+     */
+    readonly trusted: boolean;
+    /**
+     * True if this backup matches the stored decryption key.
+     */
+    readonly matchesDecryptionKey: boolean;
+}
+/**
+ * The result of {@link CryptoApi.checkKeyBackupAndEnable}.
+ */
+export interface KeyBackupCheck {
+    backupInfo: KeyBackupInfo;
+    trustInfo: BackupTrustInfo;
+}
+export interface Curve25519SessionData {
+    ciphertext: string;
+    ephemeral: string;
+    mac: string;
+}
+export interface KeyBackupSession<T = Curve25519SessionData | AESEncryptedSecretStoragePayload> {
+    first_message_index: number;
+    forwarded_count: number;
+    is_verified: boolean;
+    session_data: T;
+}
+export interface KeyBackupRoomSessions {
+    [sessionId: string]: KeyBackupSession;
+}
+/**
+ * Extra parameters for {@link CryptoApi.restoreKeyBackup} and {@link CryptoApi.restoreKeyBackupWithPassphrase}.
+ */
+export interface KeyBackupRestoreOpts {
+    /**
+     * A callback which, if defined, will be called periodically to report ongoing progress of the backup restore process.
+     * @param progress
+     */
+    progressCallback?: (progress: ImportRoomKeyProgressData) => void;
+}
+/**
+ * The result of {@link CryptoApi.restoreKeyBackup}.
+ */
+export interface KeyBackupRestoreResult {
+    /**
+     * The total number of keys that were found in the backup.
+     */
+    total: number;
+    /**
+     * The number of keys that were imported.
+     */
+    imported: number;
+}
+//# sourceMappingURL=keybackup.d.ts.map

package/lib/crypto-api/keybackup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keybackup.d.ts","sourceRoot":"","sources":["../../src/crypto-api/keybackup.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,KAAK,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACtG,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,GAAG,CAAC,kBAAkB,GAAG,cAAc,CAAC,CAAC;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,SAAS,EAAE,eAAe,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,qBAAqB,GAAG,gCAAgC;IAC1F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IAClC,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,yBAAyB,KAAK,IAAI,CAAC;CACpE;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CACpB"}

package/lib/crypto-api/keybackup.js

@@ -0,0 +1 @@
+export {};

package/lib/crypto-api/keybackup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keybackup.js","names":[],"sources":["../../src/crypto-api/keybackup.ts"],"sourcesContent":["/*\r\nCopyright 2023 The Matrix.org Foundation C.I.C.\r\n\r\nLicensed under the Apache License, Version 2.0 (the \"License\");\r\nyou may not use this file except in compliance with the License.\r\nYou may obtain a copy of the License at\r\n\r\n    http://www.apache.org/licenses/LICENSE-2.0\r\n\r\nUnless required by applicable law or agreed to in writing, software\r\ndistributed under the License is distributed on an \"AS IS\" BASIS,\r\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\nSee the License for the specific language governing permissions and\r\nlimitations under the License.\r\n*/\r\n\r\nimport { type ISigned } from \"../@types/signed.ts\";\r\nimport { type AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\r\nimport { type ImportRoomKeyProgressData } from \"./index.ts\";\r\n\r\nexport interface Curve25519AuthData {\r\n    public_key: string;\r\n    private_key_salt?: string;\r\n    private_key_iterations?: number;\r\n    private_key_bits?: number;\r\n}\r\n\r\nexport interface Aes256AuthData {\r\n    iv: string;\r\n    mac: string;\r\n    private_key_salt?: string;\r\n    private_key_iterations?: number;\r\n}\r\n\r\n/**\r\n * Information about a server-side key backup.\r\n *\r\n * Returned by [`GET /_matrix/client/v3/room_keys/version`](https://spec.matrix.org/v1.7/client-server-api/#get_matrixclientv3room_keysversion).\r\n */\r\nexport interface KeyBackupInfo {\r\n    algorithm: string;\r\n    auth_data: ISigned & (Curve25519AuthData | Aes256AuthData);\r\n    count?: number;\r\n    etag?: string;\r\n    version?: string; // number contained within\r\n}\r\n\r\n/**\r\n * Information on whether a given server-side backup is trusted.\r\n */\r\nexport interface BackupTrustInfo {\r\n    /**\r\n     * Is this backup trusted?\r\n     *\r\n     * True if, and only if, there is a valid signature on the backup from a trusted device.\r\n     */\r\n    readonly trusted: boolean;\r\n\r\n    /**\r\n     * True if this backup matches the stored decryption key.\r\n     */\r\n    readonly matchesDecryptionKey: boolean;\r\n}\r\n\r\n/**\r\n * The result of {@link CryptoApi.checkKeyBackupAndEnable}.\r\n */\r\nexport interface KeyBackupCheck {\r\n    backupInfo: KeyBackupInfo;\r\n    trustInfo: BackupTrustInfo;\r\n}\r\n\r\nexport interface Curve25519SessionData {\r\n    ciphertext: string;\r\n    ephemeral: string;\r\n    mac: string;\r\n}\r\n\r\n/* eslint-disable camelcase */\r\nexport interface KeyBackupSession<T = Curve25519SessionData | AESEncryptedSecretStoragePayload> {\r\n    first_message_index: number;\r\n    forwarded_count: number;\r\n    is_verified: boolean;\r\n    session_data: T;\r\n}\r\n\r\nexport interface KeyBackupRoomSessions {\r\n    [sessionId: string]: KeyBackupSession;\r\n}\r\n\r\n/**\r\n * Extra parameters for {@link CryptoApi.restoreKeyBackup} and {@link CryptoApi.restoreKeyBackupWithPassphrase}.\r\n */\r\nexport interface KeyBackupRestoreOpts {\r\n    /**\r\n     * A callback which, if defined, will be called periodically to report ongoing progress of the backup restore process.\r\n     * @param progress\r\n     */\r\n    progressCallback?: (progress: ImportRoomKeyProgressData) => void;\r\n}\r\n\r\n/**\r\n * The result of {@link CryptoApi.restoreKeyBackup}.\r\n */\r\nexport interface KeyBackupRestoreResult {\r\n    /**\r\n     * The total number of keys that were found in the backup.\r\n     */\r\n    total: number;\r\n    /**\r\n     * The number of keys that were imported.\r\n     */\r\n    imported: number;\r\n}\r\n"],"mappings":"","ignoreList":[]}

package/lib/crypto-api/recovery-key.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Encode a recovery key using the Matrix {@link https://spec.matrix.org/v1.11/appendices/#cryptographic-key-representation | Cryptographic key representation}
+ * @param key
+ */
+export declare function encodeRecoveryKey(key: ArrayLike<number>): string | undefined;
+/**
+ * Decode a recovery key encoded with the Matrix {@link https://spec.matrix.org/v1.11/appendices/#cryptographic-key-representation | Cryptographic key representation} encoding.
+ * @param recoveryKey
+ */
+export declare function decodeRecoveryKey(recoveryKey: string): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=recovery-key.d.ts.map

package/lib/crypto-api/recovery-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-key.d.ts","sourceRoot":"","sources":["../../src/crypto-api/recovery-key.ts"],"names":[],"mappings":"AAuBA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAa5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAsB9E"}

package/lib/crypto-api/recovery-key.js

@@ -0,0 +1,65 @@
+/*
+ * Copyright 2024 The Matrix.org Foundation C.I.C.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import bs58 from "bs58";
+
+// picked arbitrarily but to try & avoid clashing with any bitcoin ones
+// (which are also base58 encoded, but bitcoin's involve a lot more hashing)
+var OLM_RECOVERY_KEY_PREFIX = [0x8b, 0x01];
+var KEY_SIZE = 32;
+
+/**
+ * Encode a recovery key using the Matrix {@link https://spec.matrix.org/v1.11/appendices/#cryptographic-key-representation | Cryptographic key representation}
+ * @param key
+ */
+export function encodeRecoveryKey(key) {
+  var _base58key$match;
+  var buf = new Uint8Array(OLM_RECOVERY_KEY_PREFIX.length + key.length + 1);
+  buf.set(OLM_RECOVERY_KEY_PREFIX, 0);
+  buf.set(key, OLM_RECOVERY_KEY_PREFIX.length);
+  var parity = 0;
+  for (var i = 0; i < buf.length - 1; ++i) {
+    parity ^= buf[i];
+  }
+  buf[buf.length - 1] = parity;
+  var base58key = bs58.encode(buf);
+  return (_base58key$match = base58key.match(/.{1,4}/g)) === null || _base58key$match === void 0 ? void 0 : _base58key$match.join(" ");
+}
+
+/**
+ * Decode a recovery key encoded with the Matrix {@link https://spec.matrix.org/v1.11/appendices/#cryptographic-key-representation | Cryptographic key representation} encoding.
+ * @param recoveryKey
+ */
+export function decodeRecoveryKey(recoveryKey) {
+  var result = bs58.decode(recoveryKey.replace(/ /g, ""));
+  var parity = 0;
+  for (var b of result) {
+    parity ^= b;
+  }
+  if (parity !== 0) {
+    throw new Error("Incorrect parity");
+  }
+  for (var i = 0; i < OLM_RECOVERY_KEY_PREFIX.length; ++i) {
+    if (result[i] !== OLM_RECOVERY_KEY_PREFIX[i]) {
+      throw new Error("Incorrect prefix");
+    }
+  }
+  if (result.length !== OLM_RECOVERY_KEY_PREFIX.length + KEY_SIZE + 1) {
+    throw new Error("Incorrect length");
+  }
+  return Uint8Array.from(result.slice(OLM_RECOVERY_KEY_PREFIX.length, OLM_RECOVERY_KEY_PREFIX.length + KEY_SIZE));
+}
+//# sourceMappingURL=recovery-key.js.map

package/lib/crypto-api/recovery-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-key.js","names":["bs58","OLM_RECOVERY_KEY_PREFIX","KEY_SIZE","encodeRecoveryKey","key","_base58key$match","buf","Uint8Array","length","set","parity","i","base58key","encode","match","join","decodeRecoveryKey","recoveryKey","result","decode","replace","b","Error","from","slice"],"sources":["../../src/crypto-api/recovery-key.ts"],"sourcesContent":["/*\r\n * Copyright 2024 The Matrix.org Foundation C.I.C.\r\n *\r\n * Licensed under the Apache License, Version 2.0 (the \"License\");\r\n * you may not use this file except in compliance with the License.\r\n * You may obtain a copy of the License at\r\n *\r\n *     http://www.apache.org/licenses/LICENSE-2.0\r\n *\r\n * Unless required by applicable law or agreed to in writing, software\r\n * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n * See the License for the specific language governing permissions and\r\n * limitations under the License.\r\n */\r\n\r\nimport bs58 from \"bs58\";\r\n\r\n// picked arbitrarily but to try & avoid clashing with any bitcoin ones\r\n// (which are also base58 encoded, but bitcoin's involve a lot more hashing)\r\nconst OLM_RECOVERY_KEY_PREFIX = [0x8b, 0x01];\r\nconst KEY_SIZE = 32;\r\n\r\n/**\r\n * Encode a recovery key using the Matrix {@link https://spec.matrix.org/v1.11/appendices/#cryptographic-key-representation | Cryptographic key representation}\r\n * @param key\r\n */\r\nexport function encodeRecoveryKey(key: ArrayLike<number>): string | undefined {\r\n    const buf = new Uint8Array(OLM_RECOVERY_KEY_PREFIX.length + key.length + 1);\r\n    buf.set(OLM_RECOVERY_KEY_PREFIX, 0);\r\n    buf.set(key, OLM_RECOVERY_KEY_PREFIX.length);\r\n\r\n    let parity = 0;\r\n    for (let i = 0; i < buf.length - 1; ++i) {\r\n        parity ^= buf[i];\r\n    }\r\n    buf[buf.length - 1] = parity;\r\n    const base58key = bs58.encode(buf);\r\n\r\n    return base58key.match(/.{1,4}/g)?.join(\" \");\r\n}\r\n\r\n/**\r\n * Decode a recovery key encoded with the Matrix {@link https://spec.matrix.org/v1.11/appendices/#cryptographic-key-representation | Cryptographic key representation} encoding.\r\n * @param recoveryKey\r\n */\r\nexport function decodeRecoveryKey(recoveryKey: string): Uint8Array<ArrayBuffer> {\r\n    const result = bs58.decode(recoveryKey.replace(/ /g, \"\"));\r\n\r\n    let parity = 0;\r\n    for (const b of result) {\r\n        parity ^= b;\r\n    }\r\n    if (parity !== 0) {\r\n        throw new Error(\"Incorrect parity\");\r\n    }\r\n\r\n    for (let i = 0; i < OLM_RECOVERY_KEY_PREFIX.length; ++i) {\r\n        if (result[i] !== OLM_RECOVERY_KEY_PREFIX[i]) {\r\n            throw new Error(\"Incorrect prefix\");\r\n        }\r\n    }\r\n\r\n    if (result.length !== OLM_RECOVERY_KEY_PREFIX.length + KEY_SIZE + 1) {\r\n        throw new Error(\"Incorrect length\");\r\n    }\r\n\r\n    return Uint8Array.from(result.slice(OLM_RECOVERY_KEY_PREFIX.length, OLM_RECOVERY_KEY_PREFIX.length + KEY_SIZE));\r\n}\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,IAAI,MAAM,MAAM;;AAEvB;AACA;AACA,IAAMC,uBAAuB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;AAC5C,IAAMC,QAAQ,GAAG,EAAE;;AAEnB;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAACC,GAAsB,EAAsB;EAAA,IAAAC,gBAAA;EAC1E,IAAMC,GAAG,GAAG,IAAIC,UAAU,CAACN,uBAAuB,CAACO,MAAM,GAAGJ,GAAG,CAACI,MAAM,GAAG,CAAC,CAAC;EAC3EF,GAAG,CAACG,GAAG,CAACR,uBAAuB,EAAE,CAAC,CAAC;EACnCK,GAAG,CAACG,GAAG,CAACL,GAAG,EAAEH,uBAAuB,CAACO,MAAM,CAAC;EAE5C,IAAIE,MAAM,GAAG,CAAC;EACd,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGL,GAAG,CAACE,MAAM,GAAG,CAAC,EAAE,EAAEG,CAAC,EAAE;IACrCD,MAAM,IAAIJ,GAAG,CAACK,CAAC,CAAC;EACpB;EACAL,GAAG,CAACA,GAAG,CAACE,MAAM,GAAG,CAAC,CAAC,GAAGE,MAAM;EAC5B,IAAME,SAAS,GAAGZ,IAAI,CAACa,MAAM,CAACP,GAAG,CAAC;EAElC,QAAAD,gBAAA,GAAOO,SAAS,CAACE,KAAK,CAAC,SAAS,CAAC,cAAAT,gBAAA,uBAA1BA,gBAAA,CAA4BU,IAAI,CAAC,GAAG,CAAC;AAChD;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAACC,WAAmB,EAA2B;EAC5E,IAAMC,MAAM,GAAGlB,IAAI,CAACmB,MAAM,CAACF,WAAW,CAACG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;EAEzD,IAAIV,MAAM,GAAG,CAAC;EACd,KAAK,IAAMW,CAAC,IAAIH,MAAM,EAAE;IACpBR,MAAM,IAAIW,CAAC;EACf;EACA,IAAIX,MAAM,KAAK,CAAC,EAAE;IACd,MAAM,IAAIY,KAAK,CAAC,kBAAkB,CAAC;EACvC;EAEA,KAAK,IAAIX,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGV,uBAAuB,CAACO,MAAM,EAAE,EAAEG,CAAC,EAAE;IACrD,IAAIO,MAAM,CAACP,CAAC,CAAC,KAAKV,uBAAuB,CAACU,CAAC,CAAC,EAAE;MAC1C,MAAM,IAAIW,KAAK,CAAC,kBAAkB,CAAC;IACvC;EACJ;EAEA,IAAIJ,MAAM,CAACV,MAAM,KAAKP,uBAAuB,CAACO,MAAM,GAAGN,QAAQ,GAAG,CAAC,EAAE;IACjE,MAAM,IAAIoB,KAAK,CAAC,kBAAkB,CAAC;EACvC;EAEA,OAAOf,UAAU,CAACgB,IAAI,CAACL,MAAM,CAACM,KAAK,CAACvB,uBAAuB,CAACO,MAAM,EAAEP,uBAAuB,CAACO,MAAM,GAAGN,QAAQ,CAAC,CAAC;AACnH","ignoreList":[]}

package/lib/crypto-api/verification.d.ts

@@ -0,0 +1,315 @@
+import { type BriijEvent } from "../models/event.ts";
+import { type TypedEventEmitter } from "../models/typed-event-emitter.ts";
+/**
+ * An incoming, or outgoing, request to verify a user or a device via cross-signing.
+ */
+export interface VerificationRequest extends TypedEventEmitter<VerificationRequestEvent, VerificationRequestEventHandlerMap> {
+    /**
+     * Unique ID for this verification request.
+     *
+     * An ID isn't assigned until the first message is sent, so this may be `undefined` in the early phases.
+     */
+    get transactionId(): string | undefined;
+    /**
+     * For an in-room verification, the ID of the room.
+     *
+     * For to-device verifictions, `undefined`.
+     */
+    get roomId(): string | undefined;
+    /**
+     * True if this request was initiated by the local client.
+     *
+     * For in-room verifications, the initiator is who sent the `m.key.verification.request` event.
+     * For to-device verifications, the initiator is who sent the `m.key.verification.start` event.
+     */
+    get initiatedByMe(): boolean;
+    /** The user id of the other party in this request */
+    get otherUserId(): string;
+    /** For verifications via to-device messages: the ID of the other device. Otherwise, undefined. */
+    get otherDeviceId(): string | undefined;
+    /** True if the other party in this request is one of this user's own devices. */
+    get isSelfVerification(): boolean;
+    /** current phase of the request. */
+    get phase(): VerificationPhase;
+    /** True if the request has sent its initial event and needs more events to complete
+     * (ie it is in phase `Requested`, `Ready` or `Started`).
+     */
+    get pending(): boolean;
+    /**
+     * True if we have started the process of sending an `m.key.verification.ready` (but have not necessarily received
+     * the remote echo which causes a transition to {@link VerificationPhase.Ready}.
+     */
+    get accepting(): boolean;
+    /**
+     * True if we have started the process of sending an `m.key.verification.cancel` (but have not necessarily received
+     * the remote echo which causes a transition to {@link VerificationPhase.Cancelled}).
+     */
+    get declining(): boolean;
+    /**
+     * The remaining number of ms before the request will be automatically cancelled.
+     *
+     * `null` indicates that there is no timeout
+     */
+    get timeout(): number | null;
+    /** once the phase is Started (and !initiatedByMe) or Ready: common methods supported by both sides */
+    get methods(): string[];
+    /** the method picked in the .start event */
+    get chosenMethod(): string | null;
+    /**
+     * Checks whether the other party supports a given verification method.
+     * This is useful when setting up the QR code UI, as it is somewhat asymmetrical:
+     * if the other party supports SCAN_QR, we should show a QR code in the UI, and vice versa.
+     * For methods that need to be supported by both ends, use the `methods` property.
+     *
+     * @param method - the method to check
+     * @returns true if the other party said they supported the method
+     */
+    otherPartySupportsMethod(method: string): boolean;
+    /**
+     * Accepts the request, sending a .ready event to the other party
+     *
+     * @returns Promise which resolves when the event has been sent.
+     */
+    accept(): Promise<void>;
+    /**
+     * Cancels the request, sending a cancellation to the other party
+     *
+     * @param params - Details for the cancellation, including `reason` (defaults to "User declined"), and `code`
+     *    (defaults to `m.user`). **Deprecated**: this parameter is ignored by the Rust cryptography implementation.
+     *
+     * @returns Promise which resolves when the event has been sent.
+     */
+    cancel(params?: {
+        reason?: string;
+        code?: string;
+    }): Promise<void>;
+    /**
+     * Send an `m.key.verification.start` event to start verification via a particular method.
+     *
+     * This is normally used when starting a verification via emojis (ie, `method` is set to `m.sas.v1`).
+     *
+     * @param method - the name of the verification method to use.
+     *
+     * @returns The verifier which will do the actual verification.
+     */
+    startVerification(method: string): Promise<Verifier>;
+    /**
+     * Start a QR code verification by providing a scanned QR code for this verification flow.
+     *
+     * Validates the QR code, and if it is ok, sends an `m.key.verification.start` event with `method` set to
+     * `m.reciprocate.v1`, to tell the other side the scan was successful.
+     *
+     * See also {@link VerificationRequest#startVerification} which can be used to start other verification methods.
+     *
+     * @param qrCodeData - the decoded QR code.
+     * @returns A verifier; call `.verify()` on it to wait for the other side to complete the verification flow.
+     */
+    scanQRCode(qrCodeData: Uint8ClampedArray): Promise<Verifier>;
+    /**
+     * The verifier which is doing the actual verification, once the method has been established.
+     * Only defined when the `phase` is Started.
+     */
+    get verifier(): Verifier | undefined;
+    /**
+     * Generate the data for a QR code allowing the other device to verify this one, if it supports it.
+     *
+     * Only returns data once `phase` is {@link VerificationPhase.Ready} and the other party can scan a QR code;
+     * otherwise returns `undefined`.
+     */
+    generateQRCode(): Promise<Uint8ClampedArray | undefined>;
+    /**
+     * If this request has been cancelled, the cancellation code (e.g `m.user`) which is responsible for cancelling
+     * this verification.
+     */
+    get cancellationCode(): string | null;
+    /**
+     * The id of the user that cancelled the request.
+     *
+     * Only defined when phase is Cancelled
+     */
+    get cancellingUserId(): string | undefined;
+}
+/** Events emitted by {@link VerificationRequest}. */
+export declare enum VerificationRequestEvent {
+    /**
+     * Fires whenever the state of the request object has changed.
+     *
+     * There is no payload to the event.
+     */
+    Change = "change"
+}
+/**
+ * Listener type map for {@link VerificationRequestEvent}s.
+ *
+ * @internal
+ */
+export type VerificationRequestEventHandlerMap = {
+    [VerificationRequestEvent.Change]: () => void;
+};
+/** The current phase of a verification request. */
+export declare enum VerificationPhase {
+    /** Initial state: no event yet exchanged */
+    Unsent = 1,
+    /** An `m.key.verification.request` event has been sent or received */
+    Requested = 2,
+    /** An `m.key.verification.ready` event has been sent or received, indicating the verification request is accepted. */
+    Ready = 3,
+    /**
+     * The verification is in flight.
+     *
+     * This means that an `m.key.verification.start` event has been sent or received, choosing a verification method;
+     * however the verification has not yet completed or been cancelled.
+     */
+    Started = 4,
+    /**
+     * An `m.key.verification.cancel` event has been sent or received at any time before the `done` event, cancelling
+     * the verification request
+     */
+    Cancelled = 5,
+    /**
+     * The verification request is complete.
+     *
+     * Normally this means that `m.key.verification.done` events have been sent and received.
+     */
+    Done = 6
+}
+/**
+ * A `Verifier` is responsible for performing the verification using a particular method, such as via QR code or SAS
+ * (emojis).
+ *
+ * A verifier object can be created by calling `VerificationRequest.beginVerification`; one is also created
+ * automatically when a `m.key.verification.start` event is received for an existing VerificationRequest.
+ *
+ * Once a verifier object is created, the verification can be started by calling the {@link Verifier#verify} method.
+ */
+export interface Verifier extends TypedEventEmitter<VerifierEvent, VerifierEventHandlerMap> {
+    /**
+     * Returns true if the verification has been cancelled, either by us or the other side.
+     */
+    get hasBeenCancelled(): boolean;
+    /**
+     * The ID of the other user in the verification process.
+     */
+    get userId(): string;
+    /**
+     * Start the key verification, if it has not already been started.
+     *
+     * This means sending a `m.key.verification.start` if we are the first responder, or a `m.key.verification.accept`
+     * if the other side has already sent a start event.
+     *
+     * @returns Promise which resolves when the verification has completed, or rejects if the verification is cancelled
+     *    or times out.
+     */
+    verify(): Promise<void>;
+    /**
+     * Cancel a verification.
+     *
+     * We will send an `m.key.verification.cancel` if the verification is still in flight. The verification promise
+     * will reject, and a {@link crypto-api.VerifierEvent.Cancel | VerifierEvent.Cancel} will be emitted.
+     *
+     * @param e - the reason for the cancellation.
+     */
+    cancel(e: Error): void;
+    /**
+     * Get the details for an SAS verification, if one is in progress
+     *
+     * Returns `null`, unless this verifier is for a SAS-based verification and we are waiting for the user to confirm
+     * the SAS matches.
+     */
+    getShowSasCallbacks(): ShowSasCallbacks | null;
+    /**
+     * Get the details for reciprocating QR code verification, if one is in progress
+     *
+     * Returns `null`, unless this verifier is for reciprocating a QR-code-based verification (ie, the other user has
+     * already scanned our QR code), and we are waiting for the user to confirm.
+     */
+    getReciprocateQrCodeCallbacks(): ShowQrCodeCallbacks | null;
+}
+/** Events emitted by {@link Verifier} */
+export declare enum VerifierEvent {
+    /**
+     * The verification has been cancelled, by us or the other side.
+     *
+     * The payload is either an {@link Error}, or an (incoming or outgoing) {@link BriijEvent}, depending on
+     * unspecified reasons.
+     */
+    Cancel = "cancel",
+    /**
+     * SAS data has been exchanged and should be displayed to the user.
+     *
+     * The payload is the {@link ShowSasCallbacks} object.
+     */
+    ShowSas = "show_sas",
+    /**
+     * The user should confirm if the other side has scanned our QR code.
+     *
+     * The payload is the {@link ShowQrCodeCallbacks} object.
+     */
+    ShowReciprocateQr = "show_reciprocate_qr"
+}
+/** Listener type map for {@link VerifierEvent}s. */
+export type VerifierEventHandlerMap = {
+    [VerifierEvent.Cancel]: (e: Error | BriijEvent) => void;
+    [VerifierEvent.ShowSas]: (sas: ShowSasCallbacks) => void;
+    [VerifierEvent.ShowReciprocateQr]: (qr: ShowQrCodeCallbacks) => void;
+};
+/**
+ * Callbacks for user actions to confirm that the other side has scanned our QR code.
+ *
+ * This is exposed as the payload of a `VerifierEvent.ShowReciprocateQr` event, or can be retrieved directly from the
+ * verifier as `reciprocateQREvent`.
+ */
+export interface ShowQrCodeCallbacks {
+    /** The user confirms that the verification data matches */
+    confirm(): void;
+    /** Cancel the verification flow */
+    cancel(): void;
+}
+/**
+ * Callbacks for user actions while a SAS is displayed.
+ *
+ * This is exposed as the payload of a `VerifierEvent.ShowSas` event, or directly from the verifier as `sasEvent`.
+ */
+export interface ShowSasCallbacks {
+    /** The generated SAS to be shown to the user */
+    sas: GeneratedSas;
+    /** Function to call if the user confirms that the SAS matches.
+     *
+     * @returns A Promise that completes once the m.key.verification.mac is queued.
+     */
+    confirm(): Promise<void>;
+    /**
+     * Function to call if the user finds the SAS does not match.
+     *
+     * Sends an `m.key.verification.cancel` event with a `m.mismatched_sas` error code.
+     */
+    mismatch(): void;
+    /** Cancel the verification flow */
+    cancel(): void;
+}
+/** A generated SAS to be shown to the user, in alternative formats */
+export interface GeneratedSas {
+    /**
+     * The SAS as three numbers between 0 and 8191.
+     *
+     * Only populated if the `decimal` SAS method was negotiated.
+     */
+    decimal?: [number, number, number];
+    /**
+     * The SAS as seven emojis.
+     *
+     * Only populated if the `emoji` SAS method was negotiated.
+     */
+    emoji?: EmojiMapping[];
+}
+/**
+ * An emoji for the generated SAS. A tuple `[emoji, name]` where `emoji` is the emoji itself and `name` is the
+ * English name.
+ */
+export type EmojiMapping = [emoji: string, name: string];
+/**
+ * True if the request is in a state where it can be accepted (ie, that we're in phases {@link VerificationPhase.Unsent}
+ * or {@link VerificationPhase.Requested}, and that we're not in the process of sending a `ready` or `cancel`).
+ */
+export declare function canAcceptVerificationRequest(req: VerificationRequest): boolean;
+//# sourceMappingURL=verification.d.ts.map

package/lib/crypto-api/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/crypto-api/verification.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB,CAC1D,wBAAwB,EACxB,kCAAkC,CACrC;IACG;;;;OAIG;IACH,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IAExC;;;;OAIG;IACH,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAAC;IAEjC;;;;;OAKG;IACH,IAAI,aAAa,IAAI,OAAO,CAAC;IAE7B,qDAAqD;IACrD,IAAI,WAAW,IAAI,MAAM,CAAC;IAE1B,kGAAkG;IAClG,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IAExC,iFAAiF;IACjF,IAAI,kBAAkB,IAAI,OAAO,CAAC;IAElC,oCAAoC;IACpC,IAAI,KAAK,IAAI,iBAAiB,CAAC;IAE/B;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAAC;IAEvB;;;OAGG;IACH,IAAI,SAAS,IAAI,OAAO,CAAC;IAEzB;;;OAGG;IACH,IAAI,SAAS,IAAI,OAAO,CAAC;IAEzB;;;;OAIG;IACH,IAAI,OAAO,IAAI,MAAM,GAAG,IAAI,CAAC;IAE7B,sGAAsG;IACtG,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;IAExB,4CAA4C;IAC5C,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,CAAC;IAElC;;;;;;;;OAQG;IACH,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAElD;;;;OAIG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;;;;;;;OAQG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErD;;;;;;;;;;OAUG;IACH,UAAU,CAAC,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7D;;;OAGG;IACH,IAAI,QAAQ,IAAI,QAAQ,GAAG,SAAS,CAAC;IAErC;;;;;OAKG;IACH,cAAc,IAAI,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAEzD;;;OAGG;IACH,IAAI,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAAC;IAEtC;;;;OAIG;IACH,IAAI,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,qDAAqD;AACrD,oBAAY,wBAAwB;IAChC;;;;OAIG;IACH,MAAM,WAAW;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC7C,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACjD,CAAC;AAEF,mDAAmD;AACnD,oBAAY,iBAAiB;IACzB,4CAA4C;IAC5C,MAAM,IAAI;IAEV,sEAAsE;IACtE,SAAS,IAAA;IAET,sHAAsH;IACtH,KAAK,IAAA;IAEL;;;;;OAKG;IACH,OAAO,IAAA;IAEP;;;OAGG;IACH,SAAS,IAAA;IAET;;;;OAIG;IACH,IAAI,IAAA;CACP;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAS,SAAQ,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,CAAC;IACvF;;OAEG;IACH,IAAI,gBAAgB,IAAI,OAAO,CAAC;IAEhC;;OAEG;IACH,IAAI,MAAM,IAAI,MAAM,CAAC;IAErB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IAEvB;;;;;OAKG;IACH,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAAC;IAE/C;;;;;OAKG;IACH,6BAA6B,IAAI,mBAAmB,GAAG,IAAI,CAAC;CAC/D;AAED,yCAAyC;AACzC,oBAAY,aAAa;IACrB;;;;;OAKG;IACH,MAAM,WAAW;IAEjB;;;;OAIG;IACH,OAAO,aAAa;IAEpB;;;;OAIG;IACH,iBAAiB,wBAAwB;CAC5C;AAED,oDAAoD;AACpD,MAAM,MAAM,uBAAuB,GAAG;IAClC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,GAAG,UAAU,KAAK,IAAI,CAAC;IACxD,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACzD,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACxE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,2DAA2D;IAC3D,OAAO,IAAI,IAAI,CAAC;IAEhB,mCAAmC;IACnC,MAAM,IAAI,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC7B,gDAAgD;IAChD,GAAG,EAAE,YAAY,CAAC;IAElB;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzB;;;;OAIG;IACH,QAAQ,IAAI,IAAI,CAAC;IAEjB,mCAAmC;IACnC,MAAM,IAAI,IAAI,CAAC;CAClB;AAED,sEAAsE;AACtE,MAAM,WAAW,YAAY;IACzB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAEnC;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAE9E"}