@unwanted/matrix-sdk-mini 34.12.0-1

package/lib/crypto/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","names":["MatrixClient","logger","MEGOLM_ALGORITHM","verifySignature","keyFromPassphrase","encodeUri","safeSet","sleep","IndexedDBCryptoStore","UnstableValue","CryptoEvent","ClientPrefix","MatrixError","Method","encodeRecoveryKey","decryptAESSecretStorageItem","encryptAESSecretStorageItem","calculateKeyCheck","KEY_BACKUP_KEYS_PER_REQUEST","KEY_BACKUP_CHECK_RATE_LIMIT","BackupManager","constructor","baseApis","getKey","_defineProperty","checkedForBackup","sendingBackups","stop","clientRunning","version","backupInfo","checkBackupVersion","info","Algorithm","algorithmsByName","algorithm","Error","auth_data","makeAlgorithm","init","enableKeyBackup","_this","_asyncToGenerator","free","emit","KeyBackupStatus","scheduleKeyBackupSend","disableKeyBackup","undefined","getKeyBackupEnabled","Boolean","prepareKeyBackupVersion","key","DefaultAlgorithm","privateKey","authData","prepare","recoveryKey","algorithmName","recovery_key","createKeyBackupVersion","_this2","deleteAllKeyBackupVersions","_this3","_yield$_this3$baseApi","_yield$_this3$baseApi2","current","getKeyBackupVersion","_yield$_this3$baseApi3","_yield$_this3$baseApi4","deleteKeyBackupVersion","_this4","path","$version","http","authedRequest","Delete","prefix","V3","checkAndStart","_this5","log","isGuest","_yield$_this5$baseApi","e","httpStatus","trustInfo","isKeyBackupTrusted","usable","concat","scheduleAllGroupSessionsForBackup","checkKeyBackup","_this6","queryKeyBackupRateLimited","targetRoomId","targetSessionId","_this7","now","Date","getTime","sessionLastCheckAttemptedTime","restoreKeyBackupWithCache","_this8","ret","trusted_locally","sigs","signatures","JSON","stringify","userId","getUserId","privKey","crypto","getSessionBackupPrivateKey","keyMatches","_unused","_algorithm","mySigs","keyId","Object","keys","keyIdParts","split","sigInfo","deviceId","crossSigningId","crossSigningInfo","getId","olmDevice","valid","warn","push","device","deviceList","getStoredDevice","deviceTrust","checkDeviceTrust","getFingerprint","some","s","_s$deviceTrust","isVerified","_arguments","arguments","_this9","maxDelay","length","debug","delay","Math","random","numFailures","numBackedUp","backupPendingKeys","err","errCode","data","errcode","KeyBackupFailed","pow","min","limit","_this10","sessions","cryptoStore","getSessionsNeedingBackup","remaining","countSessionsNeedingBackup","KeyBackupSessionsRemaining","rooms","session","_deviceList$getDevice","roomId","sessionData","room_id","exportInboundGroupSession","senderKey","sessionId","forwardedCount","forwarding_curve25519_key_chain","getUserByIdentityKey","getDeviceByIdentityKey","verified","checkDeviceInfoTrust","first_message_index","first_known_index","forwarded_count","is_verified","session_data","encryptSession","sendKeyBackup","unmarkSessionsNeedingBackup","backupGroupSession","_this11","markSessionsNeedingBackup","_this12","flagAllGroupSessionsForBackup","_this13","doTxn","STORE_INBOUND_GROUP_SESSIONS","STORE_BACKUP","txn","getAllEndToEndInboundGroupSessions","Curve25519","publicKey","globalThis","Olm","PkEncryption","set_recipient_key","public_key","decryption","PkDecryption","generate_key","Uint8Array","init_with_private_key","derivation","private_key_salt","salt","private_key_iterations","iterations","get_private_key","untrusted","_this14","plainText","assign","session_id","encrypt","decryptSessions","_this15","backupPubKey","RESTORE_BACKUP_ERROR_BAD_KEY","entries","decrypted","parse","decrypt","ephemeral","mac","ciphertext","_this16","pubKey","randomBytes","size","buf","getRandomValues","UNSTABLE_MSC3270_NAME","Aes256","iv","replace","outKey","_this17","_this18","fill","name","backupTrustInfoFromLegacyTrustInfo","_trustInfo$trusted_lo","trusted","matchesDecryptionKey","LibOlmBackupDecryptor","sourceTrusted","_this19"],"sources":["../../src/crypto/backup.ts"],"sourcesContent":["/*\nCopyright 2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Classes for dealing with key backup.\n */\n\nimport type { IMegolmSessionData } from \"../@types/crypto.ts\";\nimport { MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { MEGOLM_ALGORITHM, verifySignature } from \"./olmlib.ts\";\nimport { DeviceInfo } from \"./deviceinfo.ts\";\nimport { DeviceTrustLevel } from \"./CrossSigning.ts\";\nimport { keyFromPassphrase } from \"./key_passphrase.ts\";\nimport { encodeUri, safeSet, sleep } from \"../utils.ts\";\nimport { IndexedDBCryptoStore } from \"./store/indexeddb-crypto-store.ts\";\nimport {\n    Curve25519SessionData,\n    IAes256AuthData,\n    ICurve25519AuthData,\n    IKeyBackupInfo,\n    IKeyBackupSession,\n} from \"./keybackup.ts\";\nimport { UnstableValue } from \"../NamespacedValue.ts\";\nimport { CryptoEvent } from \"./index.ts\";\nimport { ClientPrefix, HTTPError, MatrixError, Method } from \"../http-api/index.ts\";\nimport { BackupTrustInfo } from \"../crypto-api/keybackup.ts\";\nimport { BackupDecryptor } from \"../common-crypto/CryptoBackend.ts\";\nimport { encodeRecoveryKey } from \"../crypto-api/index.ts\";\nimport decryptAESSecretStorageItem from \"../utils/decryptAESSecretStorageItem.ts\";\nimport encryptAESSecretStorageItem from \"../utils/encryptAESSecretStorageItem.ts\";\nimport { AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\nimport { calculateKeyCheck } from \"../secret-storage.ts\";\n\nconst KEY_BACKUP_KEYS_PER_REQUEST = 200;\nconst KEY_BACKUP_CHECK_RATE_LIMIT = 5000; // ms\n\ntype AuthData = IKeyBackupInfo[\"auth_data\"];\n\ntype SigInfo = {\n    deviceId: string;\n    valid?: boolean | null; // true: valid, false: invalid, null: cannot attempt validation\n    device?: DeviceInfo | null;\n    crossSigningId?: boolean;\n    deviceTrust?: DeviceTrustLevel;\n};\n\n/** @deprecated Prefer {@link BackupTrustInfo} */\nexport type TrustInfo = {\n    usable: boolean; // is the backup trusted, true iff there is a sig that is valid & from a trusted device\n    sigs: SigInfo[];\n    // eslint-disable-next-line camelcase\n    trusted_locally?: boolean;\n};\n\nexport interface IKeyBackupCheck {\n    backupInfo?: IKeyBackupInfo;\n    trustInfo: TrustInfo;\n}\n\n/* eslint-disable camelcase */\nexport interface IPreparedKeyBackupVersion {\n    algorithm: string;\n    auth_data: AuthData;\n    recovery_key: string;\n    privateKey: Uint8Array;\n}\n/* eslint-enable camelcase */\n\n/** A function used to get the secret key for a backup.\n */\ntype GetKey = () => Promise<ArrayLike<number>>;\n\ninterface BackupAlgorithmClass {\n    algorithmName: string;\n    // initialize from an existing backup\n    init(authData: AuthData, getKey: GetKey): Promise<BackupAlgorithm>;\n\n    // prepare a brand new backup\n    prepare(key?: string | Uint8Array | null): Promise<[Uint8Array, AuthData]>;\n\n    checkBackupVersion(info: IKeyBackupInfo): void;\n}\n\ninterface BackupAlgorithm {\n    untrusted: boolean;\n    encryptSession(data: Record<string, any>): Promise<Curve25519SessionData | AESEncryptedSecretStoragePayload>;\n    decryptSessions(ciphertexts: Record<string, IKeyBackupSession>): Promise<IMegolmSessionData[]>;\n    authData: AuthData;\n    keyMatches(key: ArrayLike<number>): Promise<boolean>;\n    free(): void;\n}\n\nexport interface IKeyBackup {\n    rooms: {\n        [roomId: string]: {\n            sessions: {\n                [sessionId: string]: IKeyBackupSession;\n            };\n        };\n    };\n}\n\n/**\n * Manages the key backup.\n */\nexport class BackupManager {\n    private algorithm: BackupAlgorithm | undefined;\n    public backupInfo: IKeyBackupInfo | undefined; // The info dict from /room_keys/version\n    public checkedForBackup: boolean; // Have we checked the server for a backup we can use?\n    private sendingBackups: boolean; // Are we currently sending backups?\n    private sessionLastCheckAttemptedTime: Record<string, number> = {}; // When did we last try to check the server for a given session id?\n    // The backup manager will schedule backup of keys when active (`scheduleKeyBackupSend`), this allows cancel when client is stopped\n    private clientRunning = true;\n\n    public constructor(\n        private readonly baseApis: MatrixClient,\n        public readonly getKey: GetKey,\n    ) {\n        this.checkedForBackup = false;\n        this.sendingBackups = false;\n    }\n\n    /**\n     * Stop the backup manager from backing up keys and allow a clean shutdown.\n     */\n    public stop(): void {\n        this.clientRunning = false;\n    }\n\n    public get version(): string | undefined {\n        return this.backupInfo && this.backupInfo.version;\n    }\n\n    /**\n     * Performs a quick check to ensure that the backup info looks sane.\n     *\n     * Throws an error if a problem is detected.\n     *\n     * @param info - the key backup info\n     */\n    public static checkBackupVersion(info: IKeyBackupInfo): void {\n        const Algorithm = algorithmsByName[info.algorithm];\n        if (!Algorithm) {\n            throw new Error(\"Unknown backup algorithm: \" + info.algorithm);\n        }\n        if (typeof info.auth_data !== \"object\") {\n            throw new Error(\"Invalid backup data returned\");\n        }\n        return Algorithm.checkBackupVersion(info);\n    }\n\n    public static makeAlgorithm(info: IKeyBackupInfo, getKey: GetKey): Promise<BackupAlgorithm> {\n        const Algorithm = algorithmsByName[info.algorithm];\n        if (!Algorithm) {\n            throw new Error(\"Unknown backup algorithm\");\n        }\n        return Algorithm.init(info.auth_data, getKey);\n    }\n\n    public async enableKeyBackup(info: IKeyBackupInfo): Promise<void> {\n        this.backupInfo = info;\n        if (this.algorithm) {\n            this.algorithm.free();\n        }\n\n        this.algorithm = await BackupManager.makeAlgorithm(info, this.getKey);\n\n        this.baseApis.emit(CryptoEvent.KeyBackupStatus, true);\n\n        // There may be keys left over from a partially completed backup, so\n        // schedule a send to check.\n        this.scheduleKeyBackupSend();\n    }\n\n    /**\n     * Disable backing up of keys.\n     */\n    public disableKeyBackup(): void {\n        if (this.algorithm) {\n            this.algorithm.free();\n        }\n        this.algorithm = undefined;\n\n        this.backupInfo = undefined;\n\n        this.baseApis.emit(CryptoEvent.KeyBackupStatus, false);\n    }\n\n    public getKeyBackupEnabled(): boolean | null {\n        if (!this.checkedForBackup) {\n            return null;\n        }\n        return Boolean(this.algorithm);\n    }\n\n    public async prepareKeyBackupVersion(\n        key?: string | Uint8Array | null,\n        algorithm?: string | undefined,\n    ): Promise<IPreparedKeyBackupVersion> {\n        const Algorithm = algorithm ? algorithmsByName[algorithm] : DefaultAlgorithm;\n        if (!Algorithm) {\n            throw new Error(\"Unknown backup algorithm\");\n        }\n\n        const [privateKey, authData] = await Algorithm.prepare(key);\n        const recoveryKey = encodeRecoveryKey(privateKey)!;\n        return {\n            algorithm: Algorithm.algorithmName,\n            auth_data: authData,\n            recovery_key: recoveryKey,\n            privateKey,\n        };\n    }\n\n    public async createKeyBackupVersion(info: IKeyBackupInfo): Promise<void> {\n        this.algorithm = await BackupManager.makeAlgorithm(info, this.getKey);\n    }\n\n    /**\n     * Deletes all key backups.\n     *\n     * Will call the API to delete active backup until there is no more present.\n     */\n    public async deleteAllKeyBackupVersions(): Promise<void> {\n        // there could be several backup versions, delete all to be safe.\n        let current = (await this.baseApis.getKeyBackupVersion())?.version ?? null;\n        while (current != null) {\n            await this.deleteKeyBackupVersion(current);\n            this.disableKeyBackup();\n            current = (await this.baseApis.getKeyBackupVersion())?.version ?? null;\n        }\n    }\n\n    /**\n     * Deletes the given key backup.\n     *\n     * @param version - The backup version to delete.\n     */\n    public async deleteKeyBackupVersion(version: string): Promise<void> {\n        const path = encodeUri(\"/room_keys/version/$version\", { $version: version });\n        await this.baseApis.http.authedRequest<void>(Method.Delete, path, undefined, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    }\n\n    /**\n     * Check the server for an active key backup and\n     * if one is present and has a valid signature from\n     * one of the user's verified devices, start backing up\n     * to it.\n     */\n    public async checkAndStart(): Promise<IKeyBackupCheck | null> {\n        logger.log(\"Checking key backup status...\");\n        if (this.baseApis.isGuest()) {\n            logger.log(\"Skipping key backup check since user is guest\");\n            this.checkedForBackup = true;\n            return null;\n        }\n        let backupInfo: IKeyBackupInfo | undefined;\n        try {\n            backupInfo = (await this.baseApis.getKeyBackupVersion()) ?? undefined;\n        } catch (e) {\n            logger.log(\"Error checking for active key backup\", e);\n            if ((<HTTPError>e).httpStatus === 404) {\n                // 404 is returned when the key backup does not exist, so that\n                // counts as successfully checking.\n                this.checkedForBackup = true;\n            }\n            return null;\n        }\n        this.checkedForBackup = true;\n\n        const trustInfo = await this.isKeyBackupTrusted(backupInfo);\n\n        if (trustInfo.usable && !this.backupInfo) {\n            logger.log(`Found usable key backup v${backupInfo!.version}: enabling key backups`);\n            await this.enableKeyBackup(backupInfo!);\n        } else if (!trustInfo.usable && this.backupInfo) {\n            logger.log(\"No usable key backup: disabling key backup\");\n            this.disableKeyBackup();\n        } else if (!trustInfo.usable && !this.backupInfo) {\n            logger.log(\"No usable key backup: not enabling key backup\");\n        } else if (trustInfo.usable && this.backupInfo) {\n            // may not be the same version: if not, we should switch\n            if (backupInfo!.version !== this.backupInfo.version) {\n                logger.log(\n                    `On backup version ${this.backupInfo.version} but ` +\n                        `found version ${backupInfo!.version}: switching.`,\n                );\n                this.disableKeyBackup();\n                await this.enableKeyBackup(backupInfo!);\n                // We're now using a new backup, so schedule all the keys we have to be\n                // uploaded to the new backup. This is a bit of a workaround to upload\n                // keys to a new backup in *most* cases, but it won't cover all cases\n                // because we don't remember what backup version we uploaded keys to:\n                // see https://github.com/vector-im/element-web/issues/14833\n                await this.scheduleAllGroupSessionsForBackup();\n            } else {\n                logger.log(`Backup version ${backupInfo!.version} still current`);\n            }\n        }\n\n        return { backupInfo, trustInfo };\n    }\n\n    /**\n     * Forces a re-check of the key backup and enables/disables it\n     * as appropriate.\n     *\n     * @returns Object with backup info (as returned by\n     *     getKeyBackupVersion) in backupInfo and\n     *     trust information (as returned by isKeyBackupTrusted)\n     *     in trustInfo.\n     */\n    public async checkKeyBackup(): Promise<IKeyBackupCheck | null> {\n        this.checkedForBackup = false;\n        return this.checkAndStart();\n    }\n\n    /**\n     * Attempts to retrieve a session from a key backup, if enough time\n     * has elapsed since the last check for this session id.\n     */\n    public async queryKeyBackupRateLimited(\n        targetRoomId: string | undefined,\n        targetSessionId: string | undefined,\n    ): Promise<void> {\n        if (!this.backupInfo) {\n            return;\n        }\n\n        const now = new Date().getTime();\n        if (\n            !this.sessionLastCheckAttemptedTime[targetSessionId!] ||\n            now - this.sessionLastCheckAttemptedTime[targetSessionId!] > KEY_BACKUP_CHECK_RATE_LIMIT\n        ) {\n            this.sessionLastCheckAttemptedTime[targetSessionId!] = now;\n            await this.baseApis.restoreKeyBackupWithCache(targetRoomId!, targetSessionId!, this.backupInfo, {});\n        }\n    }\n\n    /**\n     * Check if the given backup info is trusted.\n     *\n     * @param backupInfo - key backup info dict from /room_keys/version\n     */\n    public async isKeyBackupTrusted(backupInfo?: IKeyBackupInfo): Promise<TrustInfo> {\n        const ret = {\n            usable: false,\n            trusted_locally: false,\n            sigs: [] as SigInfo[],\n        };\n\n        if (!backupInfo || !backupInfo.algorithm || !backupInfo.auth_data || !backupInfo.auth_data.signatures) {\n            logger.info(`Key backup is absent or missing required data: ${JSON.stringify(backupInfo)}`);\n            return ret;\n        }\n\n        const userId = this.baseApis.getUserId()!;\n        const privKey = await this.baseApis.crypto!.getSessionBackupPrivateKey();\n        if (privKey) {\n            let algorithm: BackupAlgorithm | null = null;\n            try {\n                algorithm = await BackupManager.makeAlgorithm(backupInfo, async () => privKey);\n\n                if (await algorithm.keyMatches(privKey)) {\n                    logger.info(\"Backup is trusted locally\");\n                    ret.trusted_locally = true;\n                }\n            } catch {\n                // do nothing -- if we have an error, then we don't mark it as\n                // locally trusted\n            } finally {\n                algorithm?.free();\n            }\n        }\n\n        const mySigs = backupInfo.auth_data.signatures[userId] || {};\n\n        for (const keyId of Object.keys(mySigs)) {\n            const keyIdParts = keyId.split(\":\");\n            if (keyIdParts[0] !== \"ed25519\") {\n                logger.log(\"Ignoring unknown signature type: \" + keyIdParts[0]);\n                continue;\n            }\n            // Could be a cross-signing master key, but just say this is the device\n            // ID for backwards compat\n            const sigInfo: SigInfo = { deviceId: keyIdParts[1] };\n\n            // first check to see if it's from our cross-signing key\n            const crossSigningId = this.baseApis.crypto!.crossSigningInfo.getId();\n            if (crossSigningId === sigInfo.deviceId) {\n                sigInfo.crossSigningId = true;\n                try {\n                    await verifySignature(\n                        this.baseApis.crypto!.olmDevice,\n                        backupInfo.auth_data,\n                        userId,\n                        sigInfo.deviceId,\n                        crossSigningId,\n                    );\n                    sigInfo.valid = true;\n                } catch (e) {\n                    logger.warn(\"Bad signature from cross signing key \" + crossSigningId, e);\n                    sigInfo.valid = false;\n                }\n                ret.sigs.push(sigInfo);\n                continue;\n            }\n\n            // Now look for a sig from a device\n            // At some point this can probably go away and we'll just support\n            // it being signed by the cross-signing master key\n            const device = this.baseApis.crypto!.deviceList.getStoredDevice(userId, sigInfo.deviceId);\n            if (device) {\n                sigInfo.device = device;\n                sigInfo.deviceTrust = this.baseApis.checkDeviceTrust(userId, sigInfo.deviceId);\n                try {\n                    await verifySignature(\n                        this.baseApis.crypto!.olmDevice,\n                        backupInfo.auth_data,\n                        userId,\n                        device.deviceId,\n                        device.getFingerprint(),\n                    );\n                    sigInfo.valid = true;\n                } catch (e) {\n                    logger.info(\n                        \"Bad signature from key ID \" +\n                            keyId +\n                            \" userID \" +\n                            this.baseApis.getUserId() +\n                            \" device ID \" +\n                            device.deviceId +\n                            \" fingerprint: \" +\n                            device.getFingerprint(),\n                        backupInfo.auth_data,\n                        e,\n                    );\n                    sigInfo.valid = false;\n                }\n            } else {\n                sigInfo.valid = null; // Can't determine validity because we don't have the signing device\n                logger.info(\"Ignoring signature from unknown key \" + keyId);\n            }\n            ret.sigs.push(sigInfo);\n        }\n\n        ret.usable = ret.sigs.some((s) => {\n            return s.valid && ((s.device && s.deviceTrust?.isVerified()) || s.crossSigningId);\n        });\n        return ret;\n    }\n\n    /**\n     * Schedules sending all keys waiting to be sent to the backup, if not already\n     * scheduled. Retries if necessary.\n     *\n     * @param maxDelay - Maximum delay to wait in ms. 0 means no delay.\n     */\n    public async scheduleKeyBackupSend(maxDelay = 10000): Promise<void> {\n        logger.debug(`Key backup: scheduleKeyBackupSend currentSending:${this.sendingBackups} delay:${maxDelay}`);\n        if (this.sendingBackups) return;\n\n        this.sendingBackups = true;\n\n        try {\n            // wait between 0 and `maxDelay` seconds, to avoid backup\n            // requests from different clients hitting the server all at\n            // the same time when a new key is sent\n            const delay = Math.random() * maxDelay;\n            await sleep(delay);\n            if (!this.clientRunning) {\n                this.sendingBackups = false;\n                return;\n            }\n            let numFailures = 0; // number of consecutive failures\n            for (;;) {\n                if (!this.algorithm) {\n                    return;\n                }\n                try {\n                    const numBackedUp = await this.backupPendingKeys(KEY_BACKUP_KEYS_PER_REQUEST);\n                    if (numBackedUp === 0) {\n                        // no sessions left needing backup: we're done\n                        this.sendingBackups = false;\n                        return;\n                    }\n                    numFailures = 0;\n                } catch (err) {\n                    numFailures++;\n                    logger.log(\"Key backup request failed\", err);\n                    if (err instanceof MatrixError) {\n                        const errCode = err.data.errcode;\n                        if (errCode == \"M_NOT_FOUND\" || errCode == \"M_WRONG_ROOM_KEYS_VERSION\") {\n                            // Set to false now as `checkKeyBackup` might schedule a backupsend before this one ends.\n                            this.sendingBackups = false;\n                            // Backup version has changed or this backup version\n                            // has been deleted\n                            this.baseApis.crypto!.emit(CryptoEvent.KeyBackupFailed, errCode);\n                            // Re-check key backup status on error, so we can be\n                            // sure to present the current situation when asked.\n                            // This call might restart the backup loop if new backup version is trusted\n                            await this.checkKeyBackup();\n                            return;\n                        }\n                    }\n                }\n                if (numFailures) {\n                    // exponential backoff if we have failures\n                    await sleep(1000 * Math.pow(2, Math.min(numFailures - 1, 4)));\n                }\n\n                if (!this.clientRunning) {\n                    logger.debug(\"Key backup send loop aborted, client stopped\");\n                    this.sendingBackups = false;\n                    return;\n                }\n            }\n        } catch (err) {\n            // No one actually checks errors on this promise, it's spawned internally.\n            // Just log, apps/client should use events to check status\n            logger.log(`Backup loop failed ${err}`);\n            this.sendingBackups = false;\n        }\n    }\n\n    /**\n     * Take some e2e keys waiting to be backed up and send them\n     * to the backup.\n     *\n     * @param limit - Maximum number of keys to back up\n     * @returns Number of sessions backed up\n     */\n    public async backupPendingKeys(limit: number): Promise<number> {\n        const sessions = await this.baseApis.crypto!.cryptoStore.getSessionsNeedingBackup(limit);\n        if (!sessions.length) {\n            return 0;\n        }\n\n        let remaining = await this.baseApis.crypto!.cryptoStore.countSessionsNeedingBackup();\n        this.baseApis.crypto!.emit(CryptoEvent.KeyBackupSessionsRemaining, remaining);\n\n        const rooms: IKeyBackup[\"rooms\"] = {};\n        for (const session of sessions) {\n            const roomId = session.sessionData!.room_id;\n            safeSet(rooms, roomId, rooms[roomId] || { sessions: {} });\n\n            const sessionData = this.baseApis.crypto!.olmDevice.exportInboundGroupSession(\n                session.senderKey,\n                session.sessionId,\n                session.sessionData!,\n            );\n            sessionData.algorithm = MEGOLM_ALGORITHM;\n\n            const forwardedCount = (sessionData.forwarding_curve25519_key_chain || []).length;\n\n            const userId = this.baseApis.crypto!.deviceList.getUserByIdentityKey(MEGOLM_ALGORITHM, session.senderKey);\n            const device =\n                this.baseApis.crypto!.deviceList.getDeviceByIdentityKey(MEGOLM_ALGORITHM, session.senderKey) ??\n                undefined;\n            const verified = this.baseApis.crypto!.checkDeviceInfoTrust(userId!, device).isVerified();\n\n            safeSet(rooms[roomId][\"sessions\"], session.sessionId, {\n                first_message_index: sessionData.first_known_index,\n                forwarded_count: forwardedCount,\n                is_verified: verified,\n                session_data: await this.algorithm!.encryptSession(sessionData),\n            });\n        }\n\n        await this.baseApis.sendKeyBackup(undefined, undefined, this.backupInfo!.version, { rooms });\n\n        await this.baseApis.crypto!.cryptoStore.unmarkSessionsNeedingBackup(sessions);\n        remaining = await this.baseApis.crypto!.cryptoStore.countSessionsNeedingBackup();\n        this.baseApis.crypto!.emit(CryptoEvent.KeyBackupSessionsRemaining, remaining);\n\n        return sessions.length;\n    }\n\n    public async backupGroupSession(senderKey: string, sessionId: string): Promise<void> {\n        await this.baseApis.crypto!.cryptoStore.markSessionsNeedingBackup([\n            {\n                senderKey: senderKey,\n                sessionId: sessionId,\n            },\n        ]);\n\n        if (this.backupInfo) {\n            // don't wait for this to complete: it will delay so\n            // happens in the background\n            this.scheduleKeyBackupSend();\n        }\n        // if this.backupInfo is not set, then the keys will be backed up when\n        // this.enableKeyBackup is called\n    }\n\n    /**\n     * Marks all group sessions as needing to be backed up and schedules them to\n     * upload in the background as soon as possible.\n     */\n    public async scheduleAllGroupSessionsForBackup(): Promise<void> {\n        await this.flagAllGroupSessionsForBackup();\n\n        // Schedule keys to upload in the background as soon as possible.\n        this.scheduleKeyBackupSend(0 /* maxDelay */);\n    }\n\n    /**\n     * Marks all group sessions as needing to be backed up without scheduling\n     * them to upload in the background.\n     * @returns Promise which resolves to the number of sessions now requiring a backup\n     *     (which will be equal to the number of sessions in the store).\n     */\n    public async flagAllGroupSessionsForBackup(): Promise<number> {\n        await this.baseApis.crypto!.cryptoStore.doTxn(\n            \"readwrite\",\n            [IndexedDBCryptoStore.STORE_INBOUND_GROUP_SESSIONS, IndexedDBCryptoStore.STORE_BACKUP],\n            (txn) => {\n                this.baseApis.crypto!.cryptoStore.getAllEndToEndInboundGroupSessions(txn, (session) => {\n                    if (session !== null) {\n                        this.baseApis.crypto!.cryptoStore.markSessionsNeedingBackup([session], txn);\n                    }\n                });\n            },\n        );\n\n        const remaining = await this.baseApis.crypto!.cryptoStore.countSessionsNeedingBackup();\n        this.baseApis.emit(CryptoEvent.KeyBackupSessionsRemaining, remaining);\n        return remaining;\n    }\n\n    /**\n     * Counts the number of end to end session keys that are waiting to be backed up\n     * @returns Promise which resolves to the number of sessions requiring backup\n     */\n    public countSessionsNeedingBackup(): Promise<number> {\n        return this.baseApis.crypto!.cryptoStore.countSessionsNeedingBackup();\n    }\n}\n\nexport class Curve25519 implements BackupAlgorithm {\n    public static algorithmName = \"m.megolm_backup.v1.curve25519-aes-sha2\";\n\n    public constructor(\n        public authData: ICurve25519AuthData,\n        private publicKey: any, // FIXME: PkEncryption\n        private getKey: () => Promise<Uint8Array>,\n    ) {}\n\n    public static async init(authData: AuthData, getKey: () => Promise<Uint8Array>): Promise<Curve25519> {\n        if (!authData || !(\"public_key\" in authData)) {\n            throw new Error(\"auth_data missing required information\");\n        }\n        const publicKey = new globalThis.Olm.PkEncryption();\n        publicKey.set_recipient_key(authData.public_key);\n        return new Curve25519(authData as ICurve25519AuthData, publicKey, getKey);\n    }\n\n    public static async prepare(key?: string | Uint8Array | null): Promise<[Uint8Array, AuthData]> {\n        const decryption = new globalThis.Olm.PkDecryption();\n        try {\n            const authData: Partial<ICurve25519AuthData> = {};\n            if (!key) {\n                authData.public_key = decryption.generate_key();\n            } else if (key instanceof Uint8Array) {\n                authData.public_key = decryption.init_with_private_key(key);\n            } else {\n                const derivation = await keyFromPassphrase(key);\n                authData.private_key_salt = derivation.salt;\n                authData.private_key_iterations = derivation.iterations;\n                authData.public_key = decryption.init_with_private_key(derivation.key);\n            }\n            const publicKey = new globalThis.Olm.PkEncryption();\n            publicKey.set_recipient_key(authData.public_key);\n\n            return [decryption.get_private_key(), authData as AuthData];\n        } finally {\n            decryption.free();\n        }\n    }\n\n    public static checkBackupVersion(info: IKeyBackupInfo): void {\n        if (!(\"public_key\" in info.auth_data)) {\n            throw new Error(\"Invalid backup data returned\");\n        }\n    }\n\n    public get untrusted(): boolean {\n        return true;\n    }\n\n    public async encryptSession(data: Record<string, any>): Promise<Curve25519SessionData> {\n        const plainText: Record<string, any> = Object.assign({}, data);\n        delete plainText.session_id;\n        delete plainText.room_id;\n        delete plainText.first_known_index;\n        return this.publicKey.encrypt(JSON.stringify(plainText));\n    }\n\n    public async decryptSessions(\n        sessions: Record<string, IKeyBackupSession<Curve25519SessionData>>,\n    ): Promise<IMegolmSessionData[]> {\n        const privKey = await this.getKey();\n        const decryption = new globalThis.Olm.PkDecryption();\n        try {\n            const backupPubKey = decryption.init_with_private_key(privKey);\n\n            if (backupPubKey !== this.authData.public_key) {\n                throw new MatrixError({ errcode: MatrixClient.RESTORE_BACKUP_ERROR_BAD_KEY });\n            }\n\n            const keys: IMegolmSessionData[] = [];\n\n            for (const [sessionId, sessionData] of Object.entries(sessions)) {\n                try {\n                    const decrypted = JSON.parse(\n                        decryption.decrypt(\n                            sessionData.session_data.ephemeral,\n                            sessionData.session_data.mac,\n                            sessionData.session_data.ciphertext,\n                        ),\n                    );\n                    decrypted.session_id = sessionId;\n                    keys.push(decrypted);\n                } catch (e) {\n                    logger.log(\"Failed to decrypt megolm session from backup\", e, sessionData);\n                }\n            }\n            return keys;\n        } finally {\n            decryption.free();\n        }\n    }\n\n    public async keyMatches(key: Uint8Array): Promise<boolean> {\n        const decryption = new globalThis.Olm.PkDecryption();\n        let pubKey: string;\n        try {\n            pubKey = decryption.init_with_private_key(key);\n        } finally {\n            decryption.free();\n        }\n\n        return pubKey === this.authData.public_key;\n    }\n\n    public free(): void {\n        this.publicKey.free();\n    }\n}\n\nfunction randomBytes(size: number): Uint8Array {\n    const buf = new Uint8Array(size);\n    globalThis.crypto.getRandomValues(buf);\n    return buf;\n}\n\nconst UNSTABLE_MSC3270_NAME = new UnstableValue(\n    \"m.megolm_backup.v1.aes-hmac-sha2\",\n    \"org.matrix.msc3270.v1.aes-hmac-sha2\",\n);\n\nexport class Aes256 implements BackupAlgorithm {\n    public static algorithmName = UNSTABLE_MSC3270_NAME.name;\n\n    public constructor(\n        public readonly authData: IAes256AuthData,\n        private readonly key: Uint8Array,\n    ) {}\n\n    public static async init(authData: IAes256AuthData, getKey: () => Promise<Uint8Array>): Promise<Aes256> {\n        if (!authData) {\n            throw new Error(\"auth_data missing\");\n        }\n        const key = await getKey();\n        if (authData.mac) {\n            const { mac } = await calculateKeyCheck(key, authData.iv);\n            if (authData.mac.replace(/=+$/g, \"\") !== mac.replace(/=+/g, \"\")) {\n                throw new Error(\"Key does not match\");\n            }\n        }\n        return new Aes256(authData, key);\n    }\n\n    public static async prepare(key?: string | Uint8Array | null): Promise<[Uint8Array, AuthData]> {\n        let outKey: Uint8Array;\n        const authData: Partial<IAes256AuthData> = {};\n        if (!key) {\n            outKey = randomBytes(32);\n        } else if (key instanceof Uint8Array) {\n            outKey = new Uint8Array(key);\n        } else {\n            const derivation = await keyFromPassphrase(key);\n            authData.private_key_salt = derivation.salt;\n            authData.private_key_iterations = derivation.iterations;\n            outKey = derivation.key;\n        }\n\n        const { iv, mac } = await calculateKeyCheck(outKey);\n        authData.iv = iv;\n        authData.mac = mac;\n\n        return [outKey, authData as AuthData];\n    }\n\n    public static checkBackupVersion(info: IKeyBackupInfo): void {\n        if (!(\"iv\" in info.auth_data && \"mac\" in info.auth_data)) {\n            throw new Error(\"Invalid backup data returned\");\n        }\n    }\n\n    public get untrusted(): boolean {\n        return false;\n    }\n\n    public encryptSession(data: Record<string, any>): Promise<AESEncryptedSecretStoragePayload> {\n        const plainText: Record<string, any> = Object.assign({}, data);\n        delete plainText.session_id;\n        delete plainText.room_id;\n        delete plainText.first_known_index;\n        return encryptAESSecretStorageItem(JSON.stringify(plainText), this.key, data.session_id);\n    }\n\n    public async decryptSessions(\n        sessions: Record<string, IKeyBackupSession<AESEncryptedSecretStoragePayload>>,\n    ): Promise<IMegolmSessionData[]> {\n        const keys: IMegolmSessionData[] = [];\n\n        for (const [sessionId, sessionData] of Object.entries(sessions)) {\n            try {\n                const decrypted = JSON.parse(\n                    await decryptAESSecretStorageItem(sessionData.session_data, this.key, sessionId),\n                );\n                decrypted.session_id = sessionId;\n                keys.push(decrypted);\n            } catch (e) {\n                logger.log(\"Failed to decrypt megolm session from backup\", e, sessionData);\n            }\n        }\n        return keys;\n    }\n\n    public async keyMatches(key: Uint8Array): Promise<boolean> {\n        if (this.authData.mac) {\n            const { mac } = await calculateKeyCheck(key, this.authData.iv);\n            return this.authData.mac.replace(/=+$/g, \"\") === mac.replace(/=+/g, \"\");\n        } else {\n            // if we have no information, we have to assume the key is right\n            return true;\n        }\n    }\n\n    public free(): void {\n        this.key.fill(0);\n    }\n}\n\nexport const algorithmsByName: Record<string, BackupAlgorithmClass> = {\n    [Curve25519.algorithmName]: Curve25519,\n    [Aes256.algorithmName]: Aes256,\n};\n\n// the linter doesn't like this but knip does\n// eslint-disable-next-line tsdoc/syntax\n/** @alias */\nexport const DefaultAlgorithm: BackupAlgorithmClass = Curve25519;\n\n/**\n * Map a legacy {@link TrustInfo} into a new-style {@link BackupTrustInfo}.\n *\n * @param trustInfo - trustInfo to convert\n */\nexport function backupTrustInfoFromLegacyTrustInfo(trustInfo: TrustInfo): BackupTrustInfo {\n    return {\n        trusted: trustInfo.usable,\n        matchesDecryptionKey: trustInfo.trusted_locally ?? false,\n    };\n}\n\n/**\n * Implementation of {@link BackupDecryptor} for the libolm crypto backend.\n */\nexport class LibOlmBackupDecryptor implements BackupDecryptor {\n    private algorithm: BackupAlgorithm;\n    public readonly sourceTrusted: boolean;\n\n    public constructor(algorithm: BackupAlgorithm) {\n        this.algorithm = algorithm;\n        this.sourceTrusted = !algorithm.untrusted;\n    }\n\n    /**\n     * Implements {@link BackupDecryptor#free}\n     */\n    public free(): void {\n        this.algorithm.free();\n    }\n\n    /**\n     * Implements {@link BackupDecryptor#decryptSessions}\n     */\n    public async decryptSessions(\n        sessions: Record<string, IKeyBackupSession<Curve25519SessionData>>,\n    ): Promise<IMegolmSessionData[]> {\n        return await this.algorithm.decryptSessions(sessions);\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAGA,SAASA,YAAY,QAAQ,cAAc;AAC3C,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,gBAAgB,EAAEC,eAAe,QAAQ,aAAa;AAG/D,SAASC,iBAAiB,QAAQ,qBAAqB;AACvD,SAASC,SAAS,EAAEC,OAAO,EAAEC,KAAK,QAAQ,aAAa;AACvD,SAASC,oBAAoB,QAAQ,mCAAmC;AAQxE,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,WAAW,QAAQ,YAAY;AACxC,SAASC,YAAY,EAAaC,WAAW,EAAEC,MAAM,QAAQ,sBAAsB;AAGnF,SAASC,iBAAiB,QAAQ,wBAAwB;AAC1D,OAAOC,2BAA2B,MAAM,yCAAyC;AACjF,OAAOC,2BAA2B,MAAM,yCAAyC;AAEjF,SAASC,iBAAiB,QAAQ,sBAAsB;AAExD,IAAMC,2BAA2B,GAAG,GAAG;AACvC,IAAMC,2BAA2B,GAAG,IAAI,CAAC,CAAC;;AAY1C;;AAaA;;AAOA;;AAEA;AACA;;AAiCA;AACA;AACA;AACA,OAAO,MAAMC,aAAa,CAAC;EAShBC,WAAWA,CACGC,QAAsB,EACvBC,MAAc,EAChC;IAAA,KAFmBD,QAAsB,GAAtBA,QAAsB;IAAA,KACvBC,MAAc,GAAdA,MAAc;IAAAC,eAAA;IAAAA,eAAA;IATa;IAAAA,eAAA;IACb;IAAAA,eAAA;IACD;IAAAA,eAAA,wCAC+B,CAAC,CAAC;IAAE;IACpE;IAAAA,eAAA,wBACwB,IAAI;IAMxB,IAAI,CAACC,gBAAgB,GAAG,KAAK;IAC7B,IAAI,CAACC,cAAc,GAAG,KAAK;EAC/B;;EAEA;AACJ;AACA;EACWC,IAAIA,CAAA,EAAS;IAChB,IAAI,CAACC,aAAa,GAAG,KAAK;EAC9B;EAEA,IAAWC,OAAOA,CAAA,EAAuB;IACrC,OAAO,IAAI,CAACC,UAAU,IAAI,IAAI,CAACA,UAAU,CAACD,OAAO;EACrD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,OAAcE,kBAAkBA,CAACC,IAAoB,EAAQ;IACzD,IAAMC,SAAS,GAAGC,gBAAgB,CAACF,IAAI,CAACG,SAAS,CAAC;IAClD,IAAI,CAACF,SAAS,EAAE;MACZ,MAAM,IAAIG,KAAK,CAAC,4BAA4B,GAAGJ,IAAI,CAACG,SAAS,CAAC;IAClE;IACA,IAAI,OAAOH,IAAI,CAACK,SAAS,KAAK,QAAQ,EAAE;MACpC,MAAM,IAAID,KAAK,CAAC,8BAA8B,CAAC;IACnD;IACA,OAAOH,SAAS,CAACF,kBAAkB,CAACC,IAAI,CAAC;EAC7C;EAEA,OAAcM,aAAaA,CAACN,IAAoB,EAAET,MAAc,EAA4B;IACxF,IAAMU,SAAS,GAAGC,gBAAgB,CAACF,IAAI,CAACG,SAAS,CAAC;IAClD,IAAI,CAACF,SAAS,EAAE;MACZ,MAAM,IAAIG,KAAK,CAAC,0BAA0B,CAAC;IAC/C;IACA,OAAOH,SAAS,CAACM,IAAI,CAACP,IAAI,CAACK,SAAS,EAAEd,MAAM,CAAC;EACjD;EAEaiB,eAAeA,CAACR,IAAoB,EAAiB;IAAA,IAAAS,KAAA;IAAA,OAAAC,iBAAA;MAC9DD,KAAI,CAACX,UAAU,GAAGE,IAAI;MACtB,IAAIS,KAAI,CAACN,SAAS,EAAE;QAChBM,KAAI,CAACN,SAAS,CAACQ,IAAI,CAAC,CAAC;MACzB;MAEAF,KAAI,CAACN,SAAS,SAASf,aAAa,CAACkB,aAAa,CAACN,IAAI,EAAES,KAAI,CAAClB,MAAM,CAAC;MAErEkB,KAAI,CAACnB,QAAQ,CAACsB,IAAI,CAAClC,WAAW,CAACmC,eAAe,EAAE,IAAI,CAAC;;MAErD;MACA;MACAJ,KAAI,CAACK,qBAAqB,CAAC,CAAC;IAAC;EACjC;;EAEA;AACJ;AACA;EACWC,gBAAgBA,CAAA,EAAS;IAC5B,IAAI,IAAI,CAACZ,SAAS,EAAE;MAChB,IAAI,CAACA,SAAS,CAACQ,IAAI,CAAC,CAAC;IACzB;IACA,IAAI,CAACR,SAAS,GAAGa,SAAS;IAE1B,IAAI,CAAClB,UAAU,GAAGkB,SAAS;IAE3B,IAAI,CAAC1B,QAAQ,CAACsB,IAAI,CAAClC,WAAW,CAACmC,eAAe,EAAE,KAAK,CAAC;EAC1D;EAEOI,mBAAmBA,CAAA,EAAmB;IACzC,IAAI,CAAC,IAAI,CAACxB,gBAAgB,EAAE;MACxB,OAAO,IAAI;IACf;IACA,OAAOyB,OAAO,CAAC,IAAI,CAACf,SAAS,CAAC;EAClC;EAEagB,uBAAuBA,CAChCC,GAAgC,EAChCjB,SAA8B,EACI;IAAA,OAAAO,iBAAA;MAClC,IAAMT,SAAS,GAAGE,SAAS,GAAGD,gBAAgB,CAACC,SAAS,CAAC,GAAGkB,gBAAgB;MAC5E,IAAI,CAACpB,SAAS,EAAE;QACZ,MAAM,IAAIG,KAAK,CAAC,0BAA0B,CAAC;MAC/C;MAEA,IAAM,CAACkB,UAAU,EAAEC,QAAQ,CAAC,SAAStB,SAAS,CAACuB,OAAO,CAACJ,GAAG,CAAC;MAC3D,IAAMK,WAAW,GAAG3C,iBAAiB,CAACwC,UAAU,CAAE;MAClD,OAAO;QACHnB,SAAS,EAAEF,SAAS,CAACyB,aAAa;QAClCrB,SAAS,EAAEkB,QAAQ;QACnBI,YAAY,EAAEF,WAAW;QACzBH;MACJ,CAAC;IAAC;EACN;EAEaM,sBAAsBA,CAAC5B,IAAoB,EAAiB;IAAA,IAAA6B,MAAA;IAAA,OAAAnB,iBAAA;MACrEmB,MAAI,CAAC1B,SAAS,SAASf,aAAa,CAACkB,aAAa,CAACN,IAAI,EAAE6B,MAAI,CAACtC,MAAM,CAAC;IAAC;EAC1E;;EAEA;AACJ;AACA;AACA;AACA;EACiBuC,0BAA0BA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAArB,iBAAA;MAAA,IAAAsB,qBAAA,EAAAC,sBAAA;MACrD;MACA,IAAIC,OAAO,IAAAF,qBAAA,IAAAC,sBAAA,SAAUF,MAAI,CAACzC,QAAQ,CAAC6C,mBAAmB,CAAC,CAAC,cAAAF,sBAAA,uBAA1CA,sBAAA,CAA6CpC,OAAO,cAAAmC,qBAAA,cAAAA,qBAAA,GAAI,IAAI;MAC1E,OAAOE,OAAO,IAAI,IAAI,EAAE;QAAA,IAAAE,sBAAA,EAAAC,sBAAA;QACpB,MAAMN,MAAI,CAACO,sBAAsB,CAACJ,OAAO,CAAC;QAC1CH,MAAI,CAAChB,gBAAgB,CAAC,CAAC;QACvBmB,OAAO,IAAAE,sBAAA,IAAAC,sBAAA,SAAUN,MAAI,CAACzC,QAAQ,CAAC6C,mBAAmB,CAAC,CAAC,cAAAE,sBAAA,uBAA1CA,sBAAA,CAA6CxC,OAAO,cAAAuC,sBAAA,cAAAA,sBAAA,GAAI,IAAI;MAC1E;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACiBE,sBAAsBA,CAACzC,OAAe,EAAiB;IAAA,IAAA0C,MAAA;IAAA,OAAA7B,iBAAA;MAChE,IAAM8B,IAAI,GAAGnE,SAAS,CAAC,6BAA6B,EAAE;QAAEoE,QAAQ,EAAE5C;MAAQ,CAAC,CAAC;MAC5E,MAAM0C,MAAI,CAACjD,QAAQ,CAACoD,IAAI,CAACC,aAAa,CAAO9D,MAAM,CAAC+D,MAAM,EAAEJ,IAAI,EAAExB,SAAS,EAAEA,SAAS,EAAE;QACpF6B,MAAM,EAAElE,YAAY,CAACmE;MACzB,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBC,aAAaA,CAAA,EAAoC;IAAA,IAAAC,MAAA;IAAA,OAAAtC,iBAAA;MAC1DzC,MAAM,CAACgF,GAAG,CAAC,+BAA+B,CAAC;MAC3C,IAAID,MAAI,CAAC1D,QAAQ,CAAC4D,OAAO,CAAC,CAAC,EAAE;QACzBjF,MAAM,CAACgF,GAAG,CAAC,+CAA+C,CAAC;QAC3DD,MAAI,CAACvD,gBAAgB,GAAG,IAAI;QAC5B,OAAO,IAAI;MACf;MACA,IAAIK,UAAsC;MAC1C,IAAI;QAAA,IAAAqD,qBAAA;QACArD,UAAU,IAAAqD,qBAAA,SAAUH,MAAI,CAAC1D,QAAQ,CAAC6C,mBAAmB,CAAC,CAAC,cAAAgB,qBAAA,cAAAA,qBAAA,GAAKnC,SAAS;MACzE,CAAC,CAAC,OAAOoC,CAAC,EAAE;QACRnF,MAAM,CAACgF,GAAG,CAAC,sCAAsC,EAAEG,CAAC,CAAC;QACrD,IAAgBA,CAAC,CAAEC,UAAU,KAAK,GAAG,EAAE;UACnC;UACA;UACAL,MAAI,CAACvD,gBAAgB,GAAG,IAAI;QAChC;QACA,OAAO,IAAI;MACf;MACAuD,MAAI,CAACvD,gBAAgB,GAAG,IAAI;MAE5B,IAAM6D,SAAS,SAASN,MAAI,CAACO,kBAAkB,CAACzD,UAAU,CAAC;MAE3D,IAAIwD,SAAS,CAACE,MAAM,IAAI,CAACR,MAAI,CAAClD,UAAU,EAAE;QACtC7B,MAAM,CAACgF,GAAG,6BAAAQ,MAAA,CAA6B3D,UAAU,CAAED,OAAO,2BAAwB,CAAC;QACnF,MAAMmD,MAAI,CAACxC,eAAe,CAACV,UAAW,CAAC;MAC3C,CAAC,MAAM,IAAI,CAACwD,SAAS,CAACE,MAAM,IAAIR,MAAI,CAAClD,UAAU,EAAE;QAC7C7B,MAAM,CAACgF,GAAG,CAAC,4CAA4C,CAAC;QACxDD,MAAI,CAACjC,gBAAgB,CAAC,CAAC;MAC3B,CAAC,MAAM,IAAI,CAACuC,SAAS,CAACE,MAAM,IAAI,CAACR,MAAI,CAAClD,UAAU,EAAE;QAC9C7B,MAAM,CAACgF,GAAG,CAAC,+CAA+C,CAAC;MAC/D,CAAC,MAAM,IAAIK,SAAS,CAACE,MAAM,IAAIR,MAAI,CAAClD,UAAU,EAAE;QAC5C;QACA,IAAIA,UAAU,CAAED,OAAO,KAAKmD,MAAI,CAAClD,UAAU,CAACD,OAAO,EAAE;UACjD5B,MAAM,CAACgF,GAAG,CACN,qBAAAQ,MAAA,CAAqBT,MAAI,CAAClD,UAAU,CAACD,OAAO,8BAAA4D,MAAA,CACvB3D,UAAU,CAAED,OAAO,iBAC5C,CAAC;UACDmD,MAAI,CAACjC,gBAAgB,CAAC,CAAC;UACvB,MAAMiC,MAAI,CAACxC,eAAe,CAACV,UAAW,CAAC;UACvC;UACA;UACA;UACA;UACA;UACA,MAAMkD,MAAI,CAACU,iCAAiC,CAAC,CAAC;QAClD,CAAC,MAAM;UACHzF,MAAM,CAACgF,GAAG,mBAAAQ,MAAA,CAAmB3D,UAAU,CAAED,OAAO,mBAAgB,CAAC;QACrE;MACJ;MAEA,OAAO;QAAEC,UAAU;QAAEwD;MAAU,CAAC;IAAC;EACrC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiBK,cAAcA,CAAA,EAAoC;IAAA,IAAAC,MAAA;IAAA,OAAAlD,iBAAA;MAC3DkD,MAAI,CAACnE,gBAAgB,GAAG,KAAK;MAC7B,OAAOmE,MAAI,CAACb,aAAa,CAAC,CAAC;IAAC;EAChC;;EAEA;AACJ;AACA;AACA;EACiBc,yBAAyBA,CAClCC,YAAgC,EAChCC,eAAmC,EACtB;IAAA,IAAAC,MAAA;IAAA,OAAAtD,iBAAA;MACb,IAAI,CAACsD,MAAI,CAAClE,UAAU,EAAE;QAClB;MACJ;MAEA,IAAMmE,GAAG,GAAG,IAAIC,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC;MAChC,IACI,CAACH,MAAI,CAACI,6BAA6B,CAACL,eAAe,CAAE,IACrDE,GAAG,GAAGD,MAAI,CAACI,6BAA6B,CAACL,eAAe,CAAE,GAAG5E,2BAA2B,EAC1F;QACE6E,MAAI,CAACI,6BAA6B,CAACL,eAAe,CAAE,GAAGE,GAAG;QAC1D,MAAMD,MAAI,CAAC1E,QAAQ,CAAC+E,yBAAyB,CAACP,YAAY,EAAGC,eAAe,EAAGC,MAAI,CAAClE,UAAU,EAAE,CAAC,CAAC,CAAC;MACvG;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACiByD,kBAAkBA,CAACzD,UAA2B,EAAsB;IAAA,IAAAwE,MAAA;IAAA,OAAA5D,iBAAA;MAC7E,IAAM6D,GAAG,GAAG;QACRf,MAAM,EAAE,KAAK;QACbgB,eAAe,EAAE,KAAK;QACtBC,IAAI,EAAE;MACV,CAAC;MAED,IAAI,CAAC3E,UAAU,IAAI,CAACA,UAAU,CAACK,SAAS,IAAI,CAACL,UAAU,CAACO,SAAS,IAAI,CAACP,UAAU,CAACO,SAAS,CAACqE,UAAU,EAAE;QACnGzG,MAAM,CAAC+B,IAAI,mDAAAyD,MAAA,CAAmDkB,IAAI,CAACC,SAAS,CAAC9E,UAAU,CAAC,CAAE,CAAC;QAC3F,OAAOyE,GAAG;MACd;MAEA,IAAMM,MAAM,GAAGP,MAAI,CAAChF,QAAQ,CAACwF,SAAS,CAAC,CAAE;MACzC,IAAMC,OAAO,SAAST,MAAI,CAAChF,QAAQ,CAAC0F,MAAM,CAAEC,0BAA0B,CAAC,CAAC;MACxE,IAAIF,OAAO,EAAE;QACT,IAAI5E,SAAiC,GAAG,IAAI;QAC5C,IAAI;UACAA,SAAS,SAASf,aAAa,CAACkB,aAAa,CAACR,UAAU,eAAAY,iBAAA,CAAE;YAAA,OAAYqE,OAAO;UAAA,GAAC;UAE9E,UAAU5E,SAAS,CAAC+E,UAAU,CAACH,OAAO,CAAC,EAAE;YACrC9G,MAAM,CAAC+B,IAAI,CAAC,2BAA2B,CAAC;YACxCuE,GAAG,CAACC,eAAe,GAAG,IAAI;UAC9B;QACJ,CAAC,CAAC,OAAAW,OAAA,EAAM;UACJ;UACA;QAAA,CACH,SAAS;UAAA,IAAAC,UAAA;UACN,CAAAA,UAAA,GAAAjF,SAAS,cAAAiF,UAAA,eAATA,UAAA,CAAWzE,IAAI,CAAC,CAAC;QACrB;MACJ;MAEA,IAAM0E,MAAM,GAAGvF,UAAU,CAACO,SAAS,CAACqE,UAAU,CAACG,MAAM,CAAC,IAAI,CAAC,CAAC;MAE5D,KAAK,IAAMS,KAAK,IAAIC,MAAM,CAACC,IAAI,CAACH,MAAM,CAAC,EAAE;QACrC,IAAMI,UAAU,GAAGH,KAAK,CAACI,KAAK,CAAC,GAAG,CAAC;QACnC,IAAID,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE;UAC7BxH,MAAM,CAACgF,GAAG,CAAC,mCAAmC,GAAGwC,UAAU,CAAC,CAAC,CAAC,CAAC;UAC/D;QACJ;QACA;QACA;QACA,IAAME,OAAgB,GAAG;UAAEC,QAAQ,EAAEH,UAAU,CAAC,CAAC;QAAE,CAAC;;QAEpD;QACA,IAAMI,cAAc,GAAGvB,MAAI,CAAChF,QAAQ,CAAC0F,MAAM,CAAEc,gBAAgB,CAACC,KAAK,CAAC,CAAC;QACrE,IAAIF,cAAc,KAAKF,OAAO,CAACC,QAAQ,EAAE;UACrCD,OAAO,CAACE,cAAc,GAAG,IAAI;UAC7B,IAAI;YACA,MAAM1H,eAAe,CACjBmG,MAAI,CAAChF,QAAQ,CAAC0F,MAAM,CAAEgB,SAAS,EAC/BlG,UAAU,CAACO,SAAS,EACpBwE,MAAM,EACNc,OAAO,CAACC,QAAQ,EAChBC,cACJ,CAAC;YACDF,OAAO,CAACM,KAAK,GAAG,IAAI;UACxB,CAAC,CAAC,OAAO7C,CAAC,EAAE;YACRnF,MAAM,CAACiI,IAAI,CAAC,uCAAuC,GAAGL,cAAc,EAAEzC,CAAC,CAAC;YACxEuC,OAAO,CAACM,KAAK,GAAG,KAAK;UACzB;UACA1B,GAAG,CAACE,IAAI,CAAC0B,IAAI,CAACR,OAAO,CAAC;UACtB;QACJ;;QAEA;QACA;QACA;QACA,IAAMS,MAAM,GAAG9B,MAAI,CAAChF,QAAQ,CAAC0F,MAAM,CAAEqB,UAAU,CAACC,eAAe,CAACzB,MAAM,EAAEc,OAAO,CAACC,QAAQ,CAAC;QACzF,IAAIQ,MAAM,EAAE;UACRT,OAAO,CAACS,MAAM,GAAGA,MAAM;UACvBT,OAAO,CAACY,WAAW,GAAGjC,MAAI,CAAChF,QAAQ,CAACkH,gBAAgB,CAAC3B,MAAM,EAAEc,OAAO,CAACC,QAAQ,CAAC;UAC9E,IAAI;YACA,MAAMzH,eAAe,CACjBmG,MAAI,CAAChF,QAAQ,CAAC0F,MAAM,CAAEgB,SAAS,EAC/BlG,UAAU,CAACO,SAAS,EACpBwE,MAAM,EACNuB,MAAM,CAACR,QAAQ,EACfQ,MAAM,CAACK,cAAc,CAAC,CAC1B,CAAC;YACDd,OAAO,CAACM,KAAK,GAAG,IAAI;UACxB,CAAC,CAAC,OAAO7C,CAAC,EAAE;YACRnF,MAAM,CAAC+B,IAAI,CACP,4BAA4B,GACxBsF,KAAK,GACL,UAAU,GACVhB,MAAI,CAAChF,QAAQ,CAACwF,SAAS,CAAC,CAAC,GACzB,aAAa,GACbsB,MAAM,CAACR,QAAQ,GACf,gBAAgB,GAChBQ,MAAM,CAACK,cAAc,CAAC,CAAC,EAC3B3G,UAAU,CAACO,SAAS,EACpB+C,CACJ,CAAC;YACDuC,OAAO,CAACM,KAAK,GAAG,KAAK;UACzB;QACJ,CAAC,MAAM;UACHN,OAAO,CAACM,KAAK,GAAG,IAAI,CAAC,CAAC;UACtBhI,MAAM,CAAC+B,IAAI,CAAC,sCAAsC,GAAGsF,KAAK,CAAC;QAC/D;QACAf,GAAG,CAACE,IAAI,CAAC0B,IAAI,CAACR,OAAO,CAAC;MAC1B;MAEApB,GAAG,CAACf,MAAM,GAAGe,GAAG,CAACE,IAAI,CAACiC,IAAI,CAAEC,CAAC,IAAK;QAAA,IAAAC,cAAA;QAC9B,OAAOD,CAAC,CAACV,KAAK,KAAMU,CAAC,CAACP,MAAM,MAAAQ,cAAA,GAAID,CAAC,CAACJ,WAAW,cAAAK,cAAA,uBAAbA,cAAA,CAAeC,UAAU,CAAC,CAAC,KAAKF,CAAC,CAACd,cAAc,CAAC;MACrF,CAAC,CAAC;MACF,OAAOtB,GAAG;IAAC;EACf;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBzD,qBAAqBA,CAAA,EAAkC;IAAA,IAAAgG,UAAA,GAAAC,SAAA;MAAAC,MAAA;IAAA,OAAAtG,iBAAA;MAAA,IAAjCuG,QAAQ,GAAAH,UAAA,CAAAI,MAAA,QAAAJ,UAAA,QAAA9F,SAAA,GAAA8F,UAAA,MAAG,KAAK;MAC/C7I,MAAM,CAACkJ,KAAK,qDAAA1D,MAAA,CAAqDuD,MAAI,CAACtH,cAAc,aAAA+D,MAAA,CAAUwD,QAAQ,CAAE,CAAC;MACzG,IAAID,MAAI,CAACtH,cAAc,EAAE;MAEzBsH,MAAI,CAACtH,cAAc,GAAG,IAAI;MAE1B,IAAI;QACA;QACA;QACA;QACA,IAAM0H,KAAK,GAAGC,IAAI,CAACC,MAAM,CAAC,CAAC,GAAGL,QAAQ;QACtC,MAAM1I,KAAK,CAAC6I,KAAK,CAAC;QAClB,IAAI,CAACJ,MAAI,CAACpH,aAAa,EAAE;UACrBoH,MAAI,CAACtH,cAAc,GAAG,KAAK;UAC3B;QACJ;QACA,IAAI6H,WAAW,GAAG,CAAC,CAAC,CAAC;QACrB,SAAS;UACL,IAAI,CAACP,MAAI,CAAC7G,SAAS,EAAE;YACjB;UACJ;UACA,IAAI;YACA,IAAMqH,WAAW,SAASR,MAAI,CAACS,iBAAiB,CAACvI,2BAA2B,CAAC;YAC7E,IAAIsI,WAAW,KAAK,CAAC,EAAE;cACnB;cACAR,MAAI,CAACtH,cAAc,GAAG,KAAK;cAC3B;YACJ;YACA6H,WAAW,GAAG,CAAC;UACnB,CAAC,CAAC,OAAOG,GAAG,EAAE;YACVH,WAAW,EAAE;YACbtJ,MAAM,CAACgF,GAAG,CAAC,2BAA2B,EAAEyE,GAAG,CAAC;YAC5C,IAAIA,GAAG,YAAY9I,WAAW,EAAE;cAC5B,IAAM+I,OAAO,GAAGD,GAAG,CAACE,IAAI,CAACC,OAAO;cAChC,IAAIF,OAAO,IAAI,aAAa,IAAIA,OAAO,IAAI,2BAA2B,EAAE;gBACpE;gBACAX,MAAI,CAACtH,cAAc,GAAG,KAAK;gBAC3B;gBACA;gBACAsH,MAAI,CAAC1H,QAAQ,CAAC0F,MAAM,CAAEpE,IAAI,CAAClC,WAAW,CAACoJ,eAAe,EAAEH,OAAO,CAAC;gBAChE;gBACA;gBACA;gBACA,MAAMX,MAAI,CAACrD,cAAc,CAAC,CAAC;gBAC3B;cACJ;YACJ;UACJ;UACA,IAAI4D,WAAW,EAAE;YACb;YACA,MAAMhJ,KAAK,CAAC,IAAI,GAAG8I,IAAI,CAACU,GAAG,CAAC,CAAC,EAAEV,IAAI,CAACW,GAAG,CAACT,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;UACjE;UAEA,IAAI,CAACP,MAAI,CAACpH,aAAa,EAAE;YACrB3B,MAAM,CAACkJ,KAAK,CAAC,8CAA8C,CAAC;YAC5DH,MAAI,CAACtH,cAAc,GAAG,KAAK;YAC3B;UACJ;QACJ;MACJ,CAAC,CAAC,OAAOgI,GAAG,EAAE;QACV;QACA;QACAzJ,MAAM,CAACgF,GAAG,uBAAAQ,MAAA,CAAuBiE,GAAG,CAAE,CAAC;QACvCV,MAAI,CAACtH,cAAc,GAAG,KAAK;MAC/B;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiB+H,iBAAiBA,CAACQ,KAAa,EAAmB;IAAA,IAAAC,OAAA;IAAA,OAAAxH,iBAAA;MAC3D,IAAMyH,QAAQ,SAASD,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACC,wBAAwB,CAACJ,KAAK,CAAC;MACxF,IAAI,CAACE,QAAQ,CAACjB,MAAM,EAAE;QAClB,OAAO,CAAC;MACZ;MAEA,IAAIoB,SAAS,SAASJ,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACG,0BAA0B,CAAC,CAAC;MACpFL,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEpE,IAAI,CAAClC,WAAW,CAAC8J,0BAA0B,EAAEF,SAAS,CAAC;MAE7E,IAAMG,KAA0B,GAAG,CAAC,CAAC;MACrC,KAAK,IAAMC,OAAO,IAAIP,QAAQ,EAAE;QAAA,IAAAQ,qBAAA;QAC5B,IAAMC,MAAM,GAAGF,OAAO,CAACG,WAAW,CAAEC,OAAO;QAC3CxK,OAAO,CAACmK,KAAK,EAAEG,MAAM,EAAEH,KAAK,CAACG,MAAM,CAAC,IAAI;UAAET,QAAQ,EAAE,CAAC;QAAE,CAAC,CAAC;QAEzD,IAAMU,WAAW,GAAGX,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEgB,SAAS,CAAC+C,yBAAyB,CACzEL,OAAO,CAACM,SAAS,EACjBN,OAAO,CAACO,SAAS,EACjBP,OAAO,CAACG,WACZ,CAAC;QACDA,WAAW,CAAC1I,SAAS,GAAGjC,gBAAgB;QAExC,IAAMgL,cAAc,GAAG,CAACL,WAAW,CAACM,+BAA+B,IAAI,EAAE,EAAEjC,MAAM;QAEjF,IAAMrC,MAAM,GAAGqD,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEqB,UAAU,CAAC+C,oBAAoB,CAAClL,gBAAgB,EAAEwK,OAAO,CAACM,SAAS,CAAC;QACzG,IAAM5C,MAAM,IAAAuC,qBAAA,GACRT,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEqB,UAAU,CAACgD,sBAAsB,CAACnL,gBAAgB,EAAEwK,OAAO,CAACM,SAAS,CAAC,cAAAL,qBAAA,cAAAA,qBAAA,GAC5F3H,SAAS;QACb,IAAMsI,QAAQ,GAAGpB,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEuE,oBAAoB,CAAC1E,MAAM,EAAGuB,MAAM,CAAC,CAACS,UAAU,CAAC,CAAC;QAEzFvI,OAAO,CAACmK,KAAK,CAACG,MAAM,CAAC,CAAC,UAAU,CAAC,EAAEF,OAAO,CAACO,SAAS,EAAE;UAClDO,mBAAmB,EAAEX,WAAW,CAACY,iBAAiB;UAClDC,eAAe,EAAER,cAAc;UAC/BS,WAAW,EAAEL,QAAQ;UACrBM,YAAY,QAAQ1B,OAAI,CAAC/H,SAAS,CAAE0J,cAAc,CAAChB,WAAW;QAClE,CAAC,CAAC;MACN;MAEA,MAAMX,OAAI,CAAC5I,QAAQ,CAACwK,aAAa,CAAC9I,SAAS,EAAEA,SAAS,EAAEkH,OAAI,CAACpI,UAAU,CAAED,OAAO,EAAE;QAAE4I;MAAM,CAAC,CAAC;MAE5F,MAAMP,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAAC2B,2BAA2B,CAAC5B,QAAQ,CAAC;MAC7EG,SAAS,SAASJ,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACG,0BAA0B,CAAC,CAAC;MAChFL,OAAI,CAAC5I,QAAQ,CAAC0F,MAAM,CAAEpE,IAAI,CAAClC,WAAW,CAAC8J,0BAA0B,EAAEF,SAAS,CAAC;MAE7E,OAAOH,QAAQ,CAACjB,MAAM;IAAC;EAC3B;EAEa8C,kBAAkBA,CAAChB,SAAiB,EAAEC,SAAiB,EAAiB;IAAA,IAAAgB,OAAA;IAAA,OAAAvJ,iBAAA;MACjF,MAAMuJ,OAAI,CAAC3K,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAAC8B,yBAAyB,CAAC,CAC9D;QACIlB,SAAS,EAAEA,SAAS;QACpBC,SAAS,EAAEA;MACf,CAAC,CACJ,CAAC;MAEF,IAAIgB,OAAI,CAACnK,UAAU,EAAE;QACjB;QACA;QACAmK,OAAI,CAACnJ,qBAAqB,CAAC,CAAC;MAChC;MACA;MACA;IAAA;EACJ;;EAEA;AACJ;AACA;AACA;EACiB4C,iCAAiCA,CAAA,EAAkB;IAAA,IAAAyG,OAAA;IAAA,OAAAzJ,iBAAA;MAC5D,MAAMyJ,OAAI,CAACC,6BAA6B,CAAC,CAAC;;MAE1C;MACAD,OAAI,CAACrJ,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAC;IAAC;EACjD;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBsJ,6BAA6BA,CAAA,EAAoB;IAAA,IAAAC,OAAA;IAAA,OAAA3J,iBAAA;MAC1D,MAAM2J,OAAI,CAAC/K,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACkC,KAAK,CACzC,WAAW,EACX,CAAC9L,oBAAoB,CAAC+L,4BAA4B,EAAE/L,oBAAoB,CAACgM,YAAY,CAAC,EACrFC,GAAG,IAAK;QACLJ,OAAI,CAAC/K,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACsC,kCAAkC,CAACD,GAAG,EAAG/B,OAAO,IAAK;UACnF,IAAIA,OAAO,KAAK,IAAI,EAAE;YAClB2B,OAAI,CAAC/K,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAAC8B,yBAAyB,CAAC,CAACxB,OAAO,CAAC,EAAE+B,GAAG,CAAC;UAC/E;QACJ,CAAC,CAAC;MACN,CACJ,CAAC;MAED,IAAMnC,SAAS,SAAS+B,OAAI,CAAC/K,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACG,0BAA0B,CAAC,CAAC;MACtF8B,OAAI,CAAC/K,QAAQ,CAACsB,IAAI,CAAClC,WAAW,CAAC8J,0BAA0B,EAAEF,SAAS,CAAC;MACrE,OAAOA,SAAS;IAAC;EACrB;;EAEA;AACJ;AACA;AACA;EACWC,0BAA0BA,CAAA,EAAoB;IACjD,OAAO,IAAI,CAACjJ,QAAQ,CAAC0F,MAAM,CAAEoD,WAAW,CAACG,0BAA0B,CAAC,CAAC;EACzE;AACJ;AAEA,OAAO,MAAMoC,UAAU,CAA4B;EAGxCtL,WAAWA,CACPkC,QAA6B,EAC5BqJ,SAAc;EAAE;EAChBrL,MAAiC,EAC3C;IAAA,KAHSgC,QAA6B,GAA7BA,QAA6B;IAAA,KAC5BqJ,SAAc,GAAdA,SAAc;IAAA,KACdrL,MAAiC,GAAjCA,MAAiC;EAC1C;EAEH,OAAoBgB,IAAIA,CAACgB,QAAkB,EAAEhC,MAAiC,EAAuB;IAAA,OAAAmB,iBAAA;MACjG,IAAI,CAACa,QAAQ,IAAI,EAAE,YAAY,IAAIA,QAAQ,CAAC,EAAE;QAC1C,MAAM,IAAInB,KAAK,CAAC,wCAAwC,CAAC;MAC7D;MACA,IAAMwK,SAAS,GAAG,IAAIC,UAAU,CAACC,GAAG,CAACC,YAAY,CAAC,CAAC;MACnDH,SAAS,CAACI,iBAAiB,CAACzJ,QAAQ,CAAC0J,UAAU,CAAC;MAChD,OAAO,IAAIN,UAAU,CAACpJ,QAAQ,EAAyBqJ,SAAS,EAAErL,MAAM,CAAC;IAAC;EAC9E;EAEA,OAAoBiC,OAAOA,CAACJ,GAAgC,EAAmC;IAAA,OAAAV,iBAAA;MAC3F,IAAMwK,UAAU,GAAG,IAAIL,UAAU,CAACC,GAAG,CAACK,YAAY,CAAC,CAAC;MACpD,IAAI;QACA,IAAM5J,SAAsC,GAAG,CAAC,CAAC;QACjD,IAAI,CAACH,GAAG,EAAE;UACNG,SAAQ,CAAC0J,UAAU,GAAGC,UAAU,CAACE,YAAY,CAAC,CAAC;QACnD,CAAC,MAAM,IAAIhK,GAAG,YAAYiK,UAAU,EAAE;UAClC9J,SAAQ,CAAC0J,UAAU,GAAGC,UAAU,CAACI,qBAAqB,CAAClK,GAAG,CAAC;QAC/D,CAAC,MAAM;UACH,IAAMmK,UAAU,SAASnN,iBAAiB,CAACgD,GAAG,CAAC;UAC/CG,SAAQ,CAACiK,gBAAgB,GAAGD,UAAU,CAACE,IAAI;UAC3ClK,SAAQ,CAACmK,sBAAsB,GAAGH,UAAU,CAACI,UAAU;UACvDpK,SAAQ,CAAC0J,UAAU,GAAGC,UAAU,CAACI,qBAAqB,CAACC,UAAU,CAACnK,GAAG,CAAC;QAC1E;QACA,IAAMwJ,UAAS,GAAG,IAAIC,UAAU,CAACC,GAAG,CAACC,YAAY,CAAC,CAAC;QACnDH,UAAS,CAACI,iBAAiB,CAACzJ,SAAQ,CAAC0J,UAAU,CAAC;QAEhD,OAAO,CAACC,UAAU,CAACU,eAAe,CAAC,CAAC,EAAErK,SAAQ,CAAa;MAC/D,CAAC,SAAS;QACN2J,UAAU,CAACvK,IAAI,CAAC,CAAC;MACrB;IAAC;EACL;EAEA,OAAcZ,kBAAkBA,CAACC,IAAoB,EAAQ;IACzD,IAAI,EAAE,YAAY,IAAIA,IAAI,CAACK,SAAS,CAAC,EAAE;MACnC,MAAM,IAAID,KAAK,CAAC,8BAA8B,CAAC;IACnD;EACJ;EAEA,IAAWyL,SAASA,CAAA,EAAY;IAC5B,OAAO,IAAI;EACf;EAEahC,cAAcA,CAACjC,IAAyB,EAAkC;IAAA,IAAAkE,OAAA;IAAA,OAAApL,iBAAA;MACnF,IAAMqL,SAA8B,GAAGxG,MAAM,CAACyG,MAAM,CAAC,CAAC,CAAC,EAAEpE,IAAI,CAAC;MAC9D,OAAOmE,SAAS,CAACE,UAAU;MAC3B,OAAOF,SAAS,CAACjD,OAAO;MACxB,OAAOiD,SAAS,CAACtC,iBAAiB;MAClC,OAAOqC,OAAI,CAAClB,SAAS,CAACsB,OAAO,CAACvH,IAAI,CAACC,SAAS,CAACmH,SAAS,CAAC,CAAC;IAAC;EAC7D;EAEaI,eAAeA,CACxBhE,QAAkE,EACrC;IAAA,IAAAiE,OAAA;IAAA,OAAA1L,iBAAA;MAC7B,IAAMqE,OAAO,SAASqH,OAAI,CAAC7M,MAAM,CAAC,CAAC;MACnC,IAAM2L,UAAU,GAAG,IAAIL,UAAU,CAACC,GAAG,CAACK,YAAY,CAAC,CAAC;MACpD,IAAI;QACA,IAAMkB,YAAY,GAAGnB,UAAU,CAACI,qBAAqB,CAACvG,OAAO,CAAC;QAE9D,IAAIsH,YAAY,KAAKD,OAAI,CAAC7K,QAAQ,CAAC0J,UAAU,EAAE;UAC3C,MAAM,IAAIrM,WAAW,CAAC;YAAEiJ,OAAO,EAAE7J,YAAY,CAACsO;UAA6B,CAAC,CAAC;QACjF;QAEA,IAAM9G,IAA0B,GAAG,EAAE;QAErC,KAAK,IAAM,CAACyD,SAAS,EAAEJ,WAAW,CAAC,IAAItD,MAAM,CAACgH,OAAO,CAACpE,QAAQ,CAAC,EAAE;UAC7D,IAAI;YACA,IAAMqE,SAAS,GAAG7H,IAAI,CAAC8H,KAAK,CACxBvB,UAAU,CAACwB,OAAO,CACd7D,WAAW,CAACe,YAAY,CAAC+C,SAAS,EAClC9D,WAAW,CAACe,YAAY,CAACgD,GAAG,EAC5B/D,WAAW,CAACe,YAAY,CAACiD,UAC7B,CACJ,CAAC;YACDL,SAAS,CAACP,UAAU,GAAGhD,SAAS;YAChCzD,IAAI,CAACW,IAAI,CAACqG,SAAS,CAAC;UACxB,CAAC,CAAC,OAAOpJ,CAAC,EAAE;YACRnF,MAAM,CAACgF,GAAG,CAAC,8CAA8C,EAAEG,CAAC,EAAEyF,WAAW,CAAC;UAC9E;QACJ;QACA,OAAOrD,IAAI;MACf,CAAC,SAAS;QACN0F,UAAU,CAACvK,IAAI,CAAC,CAAC;MACrB;IAAC;EACL;EAEauE,UAAUA,CAAC9D,GAAe,EAAoB;IAAA,IAAA0L,OAAA;IAAA,OAAApM,iBAAA;MACvD,IAAMwK,UAAU,GAAG,IAAIL,UAAU,CAACC,GAAG,CAACK,YAAY,CAAC,CAAC;MACpD,IAAI4B,MAAc;MAClB,IAAI;QACAA,MAAM,GAAG7B,UAAU,CAACI,qBAAqB,CAAClK,GAAG,CAAC;MAClD,CAAC,SAAS;QACN8J,UAAU,CAACvK,IAAI,CAAC,CAAC;MACrB;MAEA,OAAOoM,MAAM,KAAKD,OAAI,CAACvL,QAAQ,CAAC0J,UAAU;IAAC;EAC/C;EAEOtK,IAAIA,CAAA,EAAS;IAChB,IAAI,CAACiK,SAAS,CAACjK,IAAI,CAAC,CAAC;EACzB;AACJ;AAACnB,eAAA,CA7GYmL,UAAU,mBACW,wCAAwC;AA8G1E,SAASqC,WAAWA,CAACC,IAAY,EAAc;EAC3C,IAAMC,GAAG,GAAG,IAAI7B,UAAU,CAAC4B,IAAI,CAAC;EAChCpC,UAAU,CAAC7F,MAAM,CAACmI,eAAe,CAACD,GAAG,CAAC;EACtC,OAAOA,GAAG;AACd;AAEA,IAAME,qBAAqB,GAAG,IAAI3O,aAAa,CAC3C,kCAAkC,EAClC,qCACJ,CAAC;AAED,OAAO,MAAM4O,MAAM,CAA4B;EAGpChO,WAAWA,CACEkC,QAAyB,EACxBH,GAAe,EAClC;IAAA,KAFkBG,QAAyB,GAAzBA,QAAyB;IAAA,KACxBH,GAAe,GAAfA,GAAe;EACjC;EAEH,OAAoBb,IAAIA,CAACgB,QAAyB,EAAEhC,MAAiC,EAAmB;IAAA,OAAAmB,iBAAA;MACpG,IAAI,CAACa,QAAQ,EAAE;QACX,MAAM,IAAInB,KAAK,CAAC,mBAAmB,CAAC;MACxC;MACA,IAAMgB,GAAG,SAAS7B,MAAM,CAAC,CAAC;MAC1B,IAAIgC,QAAQ,CAACqL,GAAG,EAAE;QACd,IAAM;UAAEA;QAAI,CAAC,SAAS3N,iBAAiB,CAACmC,GAAG,EAAEG,QAAQ,CAAC+L,EAAE,CAAC;QACzD,IAAI/L,QAAQ,CAACqL,GAAG,CAACW,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAKX,GAAG,CAACW,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;UAC7D,MAAM,IAAInN,KAAK,CAAC,oBAAoB,CAAC;QACzC;MACJ;MACA,OAAO,IAAIiN,MAAM,CAAC9L,QAAQ,EAAEH,GAAG,CAAC;IAAC;EACrC;EAEA,OAAoBI,OAAOA,CAACJ,GAAgC,EAAmC;IAAA,OAAAV,iBAAA;MAC3F,IAAI8M,MAAkB;MACtB,IAAMjM,QAAkC,GAAG,CAAC,CAAC;MAC7C,IAAI,CAACH,GAAG,EAAE;QACNoM,MAAM,GAAGR,WAAW,CAAC,EAAE,CAAC;MAC5B,CAAC,MAAM,IAAI5L,GAAG,YAAYiK,UAAU,EAAE;QAClCmC,MAAM,GAAG,IAAInC,UAAU,CAACjK,GAAG,CAAC;MAChC,CAAC,MAAM;QACH,IAAMmK,UAAU,SAASnN,iBAAiB,CAACgD,GAAG,CAAC;QAC/CG,QAAQ,CAACiK,gBAAgB,GAAGD,UAAU,CAACE,IAAI;QAC3ClK,QAAQ,CAACmK,sBAAsB,GAAGH,UAAU,CAACI,UAAU;QACvD6B,MAAM,GAAGjC,UAAU,CAACnK,GAAG;MAC3B;MAEA,IAAM;QAAEkM,EAAE;QAAEV;MAAI,CAAC,SAAS3N,iBAAiB,CAACuO,MAAM,CAAC;MACnDjM,QAAQ,CAAC+L,EAAE,GAAGA,EAAE;MAChB/L,QAAQ,CAACqL,GAAG,GAAGA,GAAG;MAElB,OAAO,CAACY,MAAM,EAAEjM,QAAQ,CAAa;IAAC;EAC1C;EAEA,OAAcxB,kBAAkBA,CAACC,IAAoB,EAAQ;IACzD,IAAI,EAAE,IAAI,IAAIA,IAAI,CAACK,SAAS,IAAI,KAAK,IAAIL,IAAI,CAACK,SAAS,CAAC,EAAE;MACtD,MAAM,IAAID,KAAK,CAAC,8BAA8B,CAAC;IACnD;EACJ;EAEA,IAAWyL,SAASA,CAAA,EAAY;IAC5B,OAAO,KAAK;EAChB;EAEOhC,cAAcA,CAACjC,IAAyB,EAA6C;IACxF,IAAMmE,SAA8B,GAAGxG,MAAM,CAACyG,MAAM,CAAC,CAAC,CAAC,EAAEpE,IAAI,CAAC;IAC9D,OAAOmE,SAAS,CAACE,UAAU;IAC3B,OAAOF,SAAS,CAACjD,OAAO;IACxB,OAAOiD,SAAS,CAACtC,iBAAiB;IAClC,OAAOzK,2BAA2B,CAAC2F,IAAI,CAACC,SAAS,CAACmH,SAAS,CAAC,EAAE,IAAI,CAAC3K,GAAG,EAAEwG,IAAI,CAACqE,UAAU,CAAC;EAC5F;EAEaE,eAAeA,CACxBhE,QAA6E,EAChD;IAAA,IAAAsF,OAAA;IAAA,OAAA/M,iBAAA;MAC7B,IAAM8E,IAA0B,GAAG,EAAE;MAErC,KAAK,IAAM,CAACyD,SAAS,EAAEJ,WAAW,CAAC,IAAItD,MAAM,CAACgH,OAAO,CAACpE,QAAQ,CAAC,EAAE;QAC7D,IAAI;UACA,IAAMqE,SAAS,GAAG7H,IAAI,CAAC8H,KAAK,OAClB1N,2BAA2B,CAAC8J,WAAW,CAACe,YAAY,EAAE6D,OAAI,CAACrM,GAAG,EAAE6H,SAAS,CACnF,CAAC;UACDuD,SAAS,CAACP,UAAU,GAAGhD,SAAS;UAChCzD,IAAI,CAACW,IAAI,CAACqG,SAAS,CAAC;QACxB,CAAC,CAAC,OAAOpJ,CAAC,EAAE;UACRnF,MAAM,CAACgF,GAAG,CAAC,8CAA8C,EAAEG,CAAC,EAAEyF,WAAW,CAAC;QAC9E;MACJ;MACA,OAAOrD,IAAI;IAAC;EAChB;EAEaN,UAAUA,CAAC9D,GAAe,EAAoB;IAAA,IAAAsM,OAAA;IAAA,OAAAhN,iBAAA;MACvD,IAAIgN,OAAI,CAACnM,QAAQ,CAACqL,GAAG,EAAE;QACnB,IAAM;UAAEA;QAAI,CAAC,SAAS3N,iBAAiB,CAACmC,GAAG,EAAEsM,OAAI,CAACnM,QAAQ,CAAC+L,EAAE,CAAC;QAC9D,OAAOI,OAAI,CAACnM,QAAQ,CAACqL,GAAG,CAACW,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAKX,GAAG,CAACW,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;MAC3E,CAAC,MAAM;QACH;QACA,OAAO,IAAI;MACf;IAAC;EACL;EAEO5M,IAAIA,CAAA,EAAS;IAChB,IAAI,CAACS,GAAG,CAACuM,IAAI,CAAC,CAAC,CAAC;EACpB;AACJ;AAACnO,eAAA,CA7FY6N,MAAM,mBACeD,qBAAqB,CAACQ,IAAI;AA8F5D,OAAO,IAAM1N,gBAAsD,GAAG;EAClE,CAACyK,UAAU,CAACjJ,aAAa,GAAGiJ,UAAU;EACtC,CAAC0C,MAAM,CAAC3L,aAAa,GAAG2L;AAC5B,CAAC;;AAED;AACA;AACA;AACA,OAAO,IAAMhM,gBAAsC,GAAGsJ,UAAU;;AAEhE;AACA;AACA;AACA;AACA;AACA,OAAO,SAASkD,kCAAkCA,CAACvK,SAAoB,EAAmB;EAAA,IAAAwK,qBAAA;EACtF,OAAO;IACHC,OAAO,EAAEzK,SAAS,CAACE,MAAM;IACzBwK,oBAAoB,GAAAF,qBAAA,GAAExK,SAAS,CAACkB,eAAe,cAAAsJ,qBAAA,cAAAA,qBAAA,GAAI;EACvD,CAAC;AACL;;AAEA;AACA;AACA;AACA,OAAO,MAAMG,qBAAqB,CAA4B;EAInD5O,WAAWA,CAACc,SAA0B,EAAE;IAAAX,eAAA;IAAAA,eAAA;IAC3C,IAAI,CAACW,SAAS,GAAGA,SAAS;IAC1B,IAAI,CAAC+N,aAAa,GAAG,CAAC/N,SAAS,CAAC0L,SAAS;EAC7C;;EAEA;AACJ;AACA;EACWlL,IAAIA,CAAA,EAAS;IAChB,IAAI,CAACR,SAAS,CAACQ,IAAI,CAAC,CAAC;EACzB;;EAEA;AACJ;AACA;EACiBwL,eAAeA,CACxBhE,QAAkE,EACrC;IAAA,IAAAgG,OAAA;IAAA,OAAAzN,iBAAA;MAC7B,aAAayN,OAAI,CAAChO,SAAS,CAACgM,eAAe,CAAChE,QAAQ,CAAC;IAAC;EAC1D;AACJ","ignoreList":[]}

package/lib/crypto/crypto.d.ts

@@ -0,0 +1,3 @@
+/** @deprecated this is a no-op and should no longer be called. */
+export declare function setCrypto(_crypto: Crypto): void;
+//# sourceMappingURL=crypto.d.ts.map

package/lib/crypto/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/crypto/crypto.ts"],"names":[],"mappings":"AAgBA,kEAAkE;AAClE,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAG"}

package/lib/crypto/crypto.js

@@ -0,0 +1,19 @@
+/*
+Copyright 2022 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+/** @deprecated this is a no-op and should no longer be called. */
+export function setCrypto(_crypto) {}
+//# sourceMappingURL=crypto.js.map

package/lib/crypto/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","names":["setCrypto","_crypto"],"sources":["../../src/crypto/crypto.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/** @deprecated this is a no-op and should no longer be called. */\nexport function setCrypto(_crypto: Crypto): void {}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,OAAO,SAASA,SAASA,CAACC,OAAe,EAAQ,CAAC","ignoreList":[]}

package/lib/crypto/dehydration.d.ts

@@ -0,0 +1,34 @@
+import { Crypto } from "./index.ts";
+import { SecretStorageKeyDescription } from "../secret-storage.ts";
+export interface IDehydratedDevice {
+    device_id: string;
+    device_data: SecretStorageKeyDescription & {
+        algorithm: string;
+        account: string;
+    };
+}
+export interface IDehydratedDeviceKeyInfo {
+    passphrase?: string;
+}
+export declare const DEHYDRATION_ALGORITHM = "org.matrix.msc2697.v1.olm.libolm_pickle";
+export declare class DehydrationManager {
+    private readonly crypto;
+    private inProgress;
+    private timeoutId;
+    private key?;
+    private keyInfo?;
+    private deviceDisplayName?;
+    constructor(crypto: Crypto);
+    getDehydrationKeyFromCache(): Promise<void>;
+    /** set the key, and queue periodic dehydration to the server in the background */
+    setKeyAndQueueDehydration(key: Uint8Array, keyInfo?: {
+        [props: string]: any;
+    }, deviceDisplayName?: string): Promise<void>;
+    setKey(key: Uint8Array, keyInfo?: {
+        [props: string]: any;
+    }, deviceDisplayName?: string): Promise<boolean | undefined>;
+    /** returns the device id of the newly created dehydrated device */
+    dehydrateDevice(): Promise<string | undefined>;
+    stop(): void;
+}
+//# sourceMappingURL=dehydration.d.ts.map

package/lib/crypto/dehydration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dehydration.d.ts","sourceRoot":"","sources":["../../src/crypto/dehydration.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAInE,MAAM,WAAW,iBAAiB;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,2BAA2B,GAAG;QAEvC,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;KACnB,CAAC;CACL;AAED,MAAM,WAAW,wBAAwB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,qBAAqB,4CAA4C,CAAC;AAI/E,qBAAa,kBAAkB;IAOR,OAAO,CAAC,QAAQ,CAAC,MAAM;IAN1C,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,GAAG,CAAC,CAAa;IACzB,OAAO,CAAC,OAAO,CAAC,CAA2B;IAC3C,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEC,MAAM,EAAE,MAAM;IAI3C,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBlD,kFAAkF;IACrE,yBAAyB,CAClC,GAAG,EAAE,UAAU,EACf,OAAO,GAAE;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAA;KAAO,EACtC,iBAAiB,CAAC,EAAE,MAAM,GAC3B,OAAO,CAAC,IAAI,CAAC;IAQH,MAAM,CACf,GAAG,EAAE,UAAU,EACf,OAAO,GAAE;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAA;KAAO,EACtC,iBAAiB,CAAC,EAAE,MAAM,GAC3B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAkC/B,mEAAmE;IACtD,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAuIpD,IAAI,IAAI,IAAI;CAMtB"}

package/lib/crypto/dehydration.js

@@ -0,0 +1,252 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+import _defineProperty from "@babel/runtime/helpers/defineProperty";
+/*
+Copyright 2020-2021 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+import anotherjson from "another-json";
+import { decodeBase64, encodeBase64 } from "../base64.js";
+import { IndexedDBCryptoStore } from "../crypto/store/indexeddb-crypto-store.js";
+import { logger } from "../logger.js";
+import { Method } from "../http-api/index.js";
+import decryptAESSecretStorageItem from "../utils/decryptAESSecretStorageItem.js";
+import encryptAESSecretStorageItem from "../utils/encryptAESSecretStorageItem.js";
+export var DEHYDRATION_ALGORITHM = "org.matrix.msc2697.v1.olm.libolm_pickle";
+var oneweek = 7 * 24 * 60 * 60 * 1000;
+export class DehydrationManager {
+  constructor(crypto) {
+    this.crypto = crypto;
+    _defineProperty(this, "inProgress", false);
+    _defineProperty(this, "timeoutId", void 0);
+    _defineProperty(this, "key", void 0);
+    _defineProperty(this, "keyInfo", void 0);
+    _defineProperty(this, "deviceDisplayName", void 0);
+    this.getDehydrationKeyFromCache();
+  }
+  getDehydrationKeyFromCache() {
+    var _this = this;
+    return this.crypto.cryptoStore.doTxn("readonly", [IndexedDBCryptoStore.STORE_ACCOUNT], txn => {
+      this.crypto.cryptoStore.getSecretStorePrivateKey(txn, /*#__PURE__*/function () {
+        var _ref = _asyncToGenerator(function* (result) {
+          if (result) {
+            var {
+              key,
+              keyInfo,
+              deviceDisplayName,
+              time
+            } = result;
+            var pickleKey = Buffer.from(_this.crypto.olmDevice.pickleKey);
+            var decrypted = yield decryptAESSecretStorageItem(key, pickleKey, DEHYDRATION_ALGORITHM);
+            _this.key = decodeBase64(decrypted);
+            _this.keyInfo = keyInfo;
+            _this.deviceDisplayName = deviceDisplayName;
+            var now = Date.now();
+            var delay = Math.max(1, time + oneweek - now);
+            _this.timeoutId = globalThis.setTimeout(_this.dehydrateDevice.bind(_this), delay);
+          }
+        });
+        return function (_x) {
+          return _ref.apply(this, arguments);
+        };
+      }(), "dehydration");
+    });
+  }
+
+  /** set the key, and queue periodic dehydration to the server in the background */
+  setKeyAndQueueDehydration(key) {
+    var _arguments = arguments,
+      _this2 = this;
+    return _asyncToGenerator(function* () {
+      var keyInfo = _arguments.length > 1 && _arguments[1] !== undefined ? _arguments[1] : {};
+      var deviceDisplayName = _arguments.length > 2 ? _arguments[2] : undefined;
+      var matches = yield _this2.setKey(key, keyInfo, deviceDisplayName);
+      if (!matches) {
+        // start dehydration in the background
+        _this2.dehydrateDevice();
+      }
+    })();
+  }
+  setKey(key) {
+    var _arguments2 = arguments,
+      _this3 = this;
+    return _asyncToGenerator(function* () {
+      var keyInfo = _arguments2.length > 1 && _arguments2[1] !== undefined ? _arguments2[1] : {};
+      var deviceDisplayName = _arguments2.length > 2 ? _arguments2[2] : undefined;
+      if (!key) {
+        // unsetting the key -- cancel any pending dehydration task
+        if (_this3.timeoutId) {
+          globalThis.clearTimeout(_this3.timeoutId);
+          _this3.timeoutId = undefined;
+        }
+        // clear storage
+        yield _this3.crypto.cryptoStore.doTxn("readwrite", [IndexedDBCryptoStore.STORE_ACCOUNT], txn => {
+          _this3.crypto.cryptoStore.storeSecretStorePrivateKey(txn, "dehydration", null);
+        });
+        _this3.key = undefined;
+        _this3.keyInfo = undefined;
+        return;
+      }
+
+      // Check to see if it's the same key as before.  If it's different,
+      // dehydrate a new device.  If it's the same, we can keep the same
+      // device.  (Assume that keyInfo and deviceDisplayName will be the
+      // same if the key is the same.)
+      var matches = !!_this3.key && key.length == _this3.key.length;
+      for (var i = 0; matches && i < key.length; i++) {
+        if (key[i] != _this3.key[i]) {
+          matches = false;
+        }
+      }
+      if (!matches) {
+        _this3.key = key;
+        _this3.keyInfo = keyInfo;
+        _this3.deviceDisplayName = deviceDisplayName;
+      }
+      return matches;
+    })();
+  }
+
+  /** returns the device id of the newly created dehydrated device */
+  dehydrateDevice() {
+    var _this4 = this;
+    return _asyncToGenerator(function* () {
+      if (_this4.inProgress) {
+        logger.log("Dehydration already in progress -- not starting new dehydration");
+        return;
+      }
+      _this4.inProgress = true;
+      if (_this4.timeoutId) {
+        globalThis.clearTimeout(_this4.timeoutId);
+        _this4.timeoutId = undefined;
+      }
+      try {
+        var pickleKey = Buffer.from(_this4.crypto.olmDevice.pickleKey);
+
+        // update the crypto store with the timestamp
+        var key = yield encryptAESSecretStorageItem(encodeBase64(_this4.key), pickleKey, DEHYDRATION_ALGORITHM);
+        yield _this4.crypto.cryptoStore.doTxn("readwrite", [IndexedDBCryptoStore.STORE_ACCOUNT], txn => {
+          _this4.crypto.cryptoStore.storeSecretStorePrivateKey(txn, "dehydration", {
+            keyInfo: _this4.keyInfo,
+            key,
+            deviceDisplayName: _this4.deviceDisplayName,
+            time: Date.now()
+          });
+        });
+        logger.log("Attempting to dehydrate device");
+        logger.log("Creating account");
+        // create the account and all the necessary keys
+        var account = new globalThis.Olm.Account();
+        account.create();
+        var e2eKeys = JSON.parse(account.identity_keys());
+        var maxKeys = account.max_number_of_one_time_keys();
+        // FIXME: generate in small batches?
+        account.generate_one_time_keys(maxKeys / 2);
+        account.generate_fallback_key();
+        var otks = JSON.parse(account.one_time_keys());
+        var fallbacks = JSON.parse(account.fallback_key());
+        account.mark_keys_as_published();
+
+        // dehydrate the account and store it on the server
+        var pickledAccount = account.pickle(new Uint8Array(_this4.key));
+        var deviceData = {
+          algorithm: DEHYDRATION_ALGORITHM,
+          account: pickledAccount
+        };
+        if (_this4.keyInfo.passphrase) {
+          deviceData.passphrase = _this4.keyInfo.passphrase;
+        }
+        logger.log("Uploading account to server");
+        // eslint-disable-next-line camelcase
+        var dehydrateResult = yield _this4.crypto.baseApis.http.authedRequest(Method.Put, "/dehydrated_device", undefined, {
+          device_data: deviceData,
+          initial_device_display_name: _this4.deviceDisplayName
+        }, {
+          prefix: "/_matrix/client/unstable/org.matrix.msc2697.v2"
+        });
+
+        // send the keys to the server
+        var deviceId = dehydrateResult.device_id;
+        logger.log("Preparing device keys", deviceId);
+        var deviceKeys = {
+          algorithms: _this4.crypto.supportedAlgorithms,
+          device_id: deviceId,
+          user_id: _this4.crypto.userId,
+          keys: {
+            ["ed25519:".concat(deviceId)]: e2eKeys.ed25519,
+            ["curve25519:".concat(deviceId)]: e2eKeys.curve25519
+          }
+        };
+        var deviceSignature = account.sign(anotherjson.stringify(deviceKeys));
+        deviceKeys.signatures = {
+          [_this4.crypto.userId]: {
+            ["ed25519:".concat(deviceId)]: deviceSignature
+          }
+        };
+        if (_this4.crypto.crossSigningInfo.getId("self_signing")) {
+          yield _this4.crypto.crossSigningInfo.signObject(deviceKeys, "self_signing");
+        }
+        logger.log("Preparing one-time keys");
+        var oneTimeKeys = {};
+        for (var [keyId, _key] of Object.entries(otks.curve25519)) {
+          var k = {
+            key: _key
+          };
+          var signature = account.sign(anotherjson.stringify(k));
+          k.signatures = {
+            [_this4.crypto.userId]: {
+              ["ed25519:".concat(deviceId)]: signature
+            }
+          };
+          oneTimeKeys["signed_curve25519:".concat(keyId)] = k;
+        }
+        logger.log("Preparing fallback keys");
+        var fallbackKeys = {};
+        for (var [_keyId, _key2] of Object.entries(fallbacks.curve25519)) {
+          var _k = {
+            key: _key2,
+            fallback: true
+          };
+          var _signature = account.sign(anotherjson.stringify(_k));
+          _k.signatures = {
+            [_this4.crypto.userId]: {
+              ["ed25519:".concat(deviceId)]: _signature
+            }
+          };
+          fallbackKeys["signed_curve25519:".concat(_keyId)] = _k;
+        }
+        logger.log("Uploading keys to server");
+        yield _this4.crypto.baseApis.http.authedRequest(Method.Post, "/keys/upload/" + encodeURI(deviceId), undefined, {
+          "device_keys": deviceKeys,
+          "one_time_keys": oneTimeKeys,
+          "org.matrix.msc2732.fallback_keys": fallbackKeys
+        });
+        logger.log("Done dehydrating");
+
+        // dehydrate again in a week
+        _this4.timeoutId = globalThis.setTimeout(_this4.dehydrateDevice.bind(_this4), oneweek);
+        return deviceId;
+      } finally {
+        _this4.inProgress = false;
+      }
+    })();
+  }
+  stop() {
+    if (this.timeoutId) {
+      globalThis.clearTimeout(this.timeoutId);
+      this.timeoutId = undefined;
+    }
+  }
+}
+//# sourceMappingURL=dehydration.js.map

package/lib/crypto/dehydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dehydration.js","names":["anotherjson","decodeBase64","encodeBase64","IndexedDBCryptoStore","logger","Method","decryptAESSecretStorageItem","encryptAESSecretStorageItem","DEHYDRATION_ALGORITHM","oneweek","DehydrationManager","constructor","crypto","_defineProperty","getDehydrationKeyFromCache","_this","cryptoStore","doTxn","STORE_ACCOUNT","txn","getSecretStorePrivateKey","_ref","_asyncToGenerator","result","key","keyInfo","deviceDisplayName","time","pickleKey","Buffer","from","olmDevice","decrypted","now","Date","delay","Math","max","timeoutId","globalThis","setTimeout","dehydrateDevice","bind","_x","apply","arguments","setKeyAndQueueDehydration","_arguments","_this2","length","undefined","matches","setKey","_arguments2","_this3","clearTimeout","storeSecretStorePrivateKey","i","_this4","inProgress","log","account","Olm","Account","create","e2eKeys","JSON","parse","identity_keys","maxKeys","max_number_of_one_time_keys","generate_one_time_keys","generate_fallback_key","otks","one_time_keys","fallbacks","fallback_key","mark_keys_as_published","pickledAccount","pickle","Uint8Array","deviceData","algorithm","passphrase","dehydrateResult","baseApis","http","authedRequest","Put","device_data","initial_device_display_name","prefix","deviceId","device_id","deviceKeys","algorithms","supportedAlgorithms","user_id","userId","keys","concat","ed25519","curve25519","deviceSignature","sign","stringify","signatures","crossSigningInfo","getId","signObject","oneTimeKeys","keyId","Object","entries","k","signature","fallbackKeys","fallback","Post","encodeURI","stop"],"sources":["../../src/crypto/dehydration.ts"],"sourcesContent":["/*\nCopyright 2020-2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport anotherjson from \"another-json\";\n\nimport type { IDeviceKeys, IOneTimeKey } from \"../@types/crypto.ts\";\nimport { decodeBase64, encodeBase64 } from \"../base64.ts\";\nimport { IndexedDBCryptoStore } from \"../crypto/store/indexeddb-crypto-store.ts\";\nimport { logger } from \"../logger.ts\";\nimport { Crypto } from \"./index.ts\";\nimport { Method } from \"../http-api/index.ts\";\nimport { SecretStorageKeyDescription } from \"../secret-storage.ts\";\nimport decryptAESSecretStorageItem from \"../utils/decryptAESSecretStorageItem.ts\";\nimport encryptAESSecretStorageItem from \"../utils/encryptAESSecretStorageItem.ts\";\n\nexport interface IDehydratedDevice {\n    device_id: string; // eslint-disable-line camelcase\n    device_data: SecretStorageKeyDescription & {\n        // eslint-disable-line camelcase\n        algorithm: string;\n        account: string; // pickle\n    };\n}\n\nexport interface IDehydratedDeviceKeyInfo {\n    passphrase?: string;\n}\n\nexport const DEHYDRATION_ALGORITHM = \"org.matrix.msc2697.v1.olm.libolm_pickle\";\n\nconst oneweek = 7 * 24 * 60 * 60 * 1000;\n\nexport class DehydrationManager {\n    private inProgress = false;\n    private timeoutId: any;\n    private key?: Uint8Array;\n    private keyInfo?: { [props: string]: any };\n    private deviceDisplayName?: string;\n\n    public constructor(private readonly crypto: Crypto) {\n        this.getDehydrationKeyFromCache();\n    }\n\n    public getDehydrationKeyFromCache(): Promise<void> {\n        return this.crypto.cryptoStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n            this.crypto.cryptoStore.getSecretStorePrivateKey(\n                txn,\n                async (result) => {\n                    if (result) {\n                        const { key, keyInfo, deviceDisplayName, time } = result;\n                        const pickleKey = Buffer.from(this.crypto.olmDevice.pickleKey);\n                        const decrypted = await decryptAESSecretStorageItem(key, pickleKey, DEHYDRATION_ALGORITHM);\n                        this.key = decodeBase64(decrypted);\n                        this.keyInfo = keyInfo;\n                        this.deviceDisplayName = deviceDisplayName;\n                        const now = Date.now();\n                        const delay = Math.max(1, time + oneweek - now);\n                        this.timeoutId = globalThis.setTimeout(this.dehydrateDevice.bind(this), delay);\n                    }\n                },\n                \"dehydration\",\n            );\n        });\n    }\n\n    /** set the key, and queue periodic dehydration to the server in the background */\n    public async setKeyAndQueueDehydration(\n        key: Uint8Array,\n        keyInfo: { [props: string]: any } = {},\n        deviceDisplayName?: string,\n    ): Promise<void> {\n        const matches = await this.setKey(key, keyInfo, deviceDisplayName);\n        if (!matches) {\n            // start dehydration in the background\n            this.dehydrateDevice();\n        }\n    }\n\n    public async setKey(\n        key: Uint8Array,\n        keyInfo: { [props: string]: any } = {},\n        deviceDisplayName?: string,\n    ): Promise<boolean | undefined> {\n        if (!key) {\n            // unsetting the key -- cancel any pending dehydration task\n            if (this.timeoutId) {\n                globalThis.clearTimeout(this.timeoutId);\n                this.timeoutId = undefined;\n            }\n            // clear storage\n            await this.crypto.cryptoStore.doTxn(\"readwrite\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n                this.crypto.cryptoStore.storeSecretStorePrivateKey(txn, \"dehydration\", null);\n            });\n            this.key = undefined;\n            this.keyInfo = undefined;\n            return;\n        }\n\n        // Check to see if it's the same key as before.  If it's different,\n        // dehydrate a new device.  If it's the same, we can keep the same\n        // device.  (Assume that keyInfo and deviceDisplayName will be the\n        // same if the key is the same.)\n        let matches: boolean = !!this.key && key.length == this.key.length;\n        for (let i = 0; matches && i < key.length; i++) {\n            if (key[i] != this.key![i]) {\n                matches = false;\n            }\n        }\n        if (!matches) {\n            this.key = key;\n            this.keyInfo = keyInfo;\n            this.deviceDisplayName = deviceDisplayName;\n        }\n        return matches;\n    }\n\n    /** returns the device id of the newly created dehydrated device */\n    public async dehydrateDevice(): Promise<string | undefined> {\n        if (this.inProgress) {\n            logger.log(\"Dehydration already in progress -- not starting new dehydration\");\n            return;\n        }\n        this.inProgress = true;\n        if (this.timeoutId) {\n            globalThis.clearTimeout(this.timeoutId);\n            this.timeoutId = undefined;\n        }\n        try {\n            const pickleKey = Buffer.from(this.crypto.olmDevice.pickleKey);\n\n            // update the crypto store with the timestamp\n            const key = await encryptAESSecretStorageItem(encodeBase64(this.key!), pickleKey, DEHYDRATION_ALGORITHM);\n            await this.crypto.cryptoStore.doTxn(\"readwrite\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n                this.crypto.cryptoStore.storeSecretStorePrivateKey(txn, \"dehydration\", {\n                    keyInfo: this.keyInfo,\n                    key,\n                    deviceDisplayName: this.deviceDisplayName!,\n                    time: Date.now(),\n                });\n            });\n            logger.log(\"Attempting to dehydrate device\");\n\n            logger.log(\"Creating account\");\n            // create the account and all the necessary keys\n            const account = new globalThis.Olm.Account();\n            account.create();\n            const e2eKeys = JSON.parse(account.identity_keys());\n\n            const maxKeys = account.max_number_of_one_time_keys();\n            // FIXME: generate in small batches?\n            account.generate_one_time_keys(maxKeys / 2);\n            account.generate_fallback_key();\n            const otks: Record<string, string> = JSON.parse(account.one_time_keys());\n            const fallbacks: Record<string, string> = JSON.parse(account.fallback_key());\n            account.mark_keys_as_published();\n\n            // dehydrate the account and store it on the server\n            const pickledAccount = account.pickle(new Uint8Array(this.key!));\n\n            const deviceData: { [props: string]: any } = {\n                algorithm: DEHYDRATION_ALGORITHM,\n                account: pickledAccount,\n            };\n            if (this.keyInfo!.passphrase) {\n                deviceData.passphrase = this.keyInfo!.passphrase;\n            }\n\n            logger.log(\"Uploading account to server\");\n            // eslint-disable-next-line camelcase\n            const dehydrateResult = await this.crypto.baseApis.http.authedRequest<{ device_id: string }>(\n                Method.Put,\n                \"/dehydrated_device\",\n                undefined,\n                {\n                    device_data: deviceData,\n                    initial_device_display_name: this.deviceDisplayName,\n                },\n                {\n                    prefix: \"/_matrix/client/unstable/org.matrix.msc2697.v2\",\n                },\n            );\n\n            // send the keys to the server\n            const deviceId = dehydrateResult.device_id;\n            logger.log(\"Preparing device keys\", deviceId);\n            const deviceKeys: IDeviceKeys = {\n                algorithms: this.crypto.supportedAlgorithms,\n                device_id: deviceId,\n                user_id: this.crypto.userId,\n                keys: {\n                    [`ed25519:${deviceId}`]: e2eKeys.ed25519,\n                    [`curve25519:${deviceId}`]: e2eKeys.curve25519,\n                },\n            };\n            const deviceSignature = account.sign(anotherjson.stringify(deviceKeys));\n            deviceKeys.signatures = {\n                [this.crypto.userId]: {\n                    [`ed25519:${deviceId}`]: deviceSignature,\n                },\n            };\n            if (this.crypto.crossSigningInfo.getId(\"self_signing\")) {\n                await this.crypto.crossSigningInfo.signObject(deviceKeys, \"self_signing\");\n            }\n\n            logger.log(\"Preparing one-time keys\");\n            const oneTimeKeys: Record<string, IOneTimeKey> = {};\n            for (const [keyId, key] of Object.entries(otks.curve25519)) {\n                const k: IOneTimeKey = { key };\n                const signature = account.sign(anotherjson.stringify(k));\n                k.signatures = {\n                    [this.crypto.userId]: {\n                        [`ed25519:${deviceId}`]: signature,\n                    },\n                };\n                oneTimeKeys[`signed_curve25519:${keyId}`] = k;\n            }\n\n            logger.log(\"Preparing fallback keys\");\n            const fallbackKeys: Record<string, IOneTimeKey> = {};\n            for (const [keyId, key] of Object.entries(fallbacks.curve25519)) {\n                const k: IOneTimeKey = { key, fallback: true };\n                const signature = account.sign(anotherjson.stringify(k));\n                k.signatures = {\n                    [this.crypto.userId]: {\n                        [`ed25519:${deviceId}`]: signature,\n                    },\n                };\n                fallbackKeys[`signed_curve25519:${keyId}`] = k;\n            }\n\n            logger.log(\"Uploading keys to server\");\n            await this.crypto.baseApis.http.authedRequest(\n                Method.Post,\n                \"/keys/upload/\" + encodeURI(deviceId),\n                undefined,\n                {\n                    \"device_keys\": deviceKeys,\n                    \"one_time_keys\": oneTimeKeys,\n                    \"org.matrix.msc2732.fallback_keys\": fallbackKeys,\n                },\n            );\n            logger.log(\"Done dehydrating\");\n\n            // dehydrate again in a week\n            this.timeoutId = globalThis.setTimeout(this.dehydrateDevice.bind(this), oneweek);\n\n            return deviceId;\n        } finally {\n            this.inProgress = false;\n        }\n    }\n\n    public stop(): void {\n        if (this.timeoutId) {\n            globalThis.clearTimeout(this.timeoutId);\n            this.timeoutId = undefined;\n        }\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,WAAW,MAAM,cAAc;AAGtC,SAASC,YAAY,EAAEC,YAAY,QAAQ,cAAc;AACzD,SAASC,oBAAoB,QAAQ,2CAA2C;AAChF,SAASC,MAAM,QAAQ,cAAc;AAErC,SAASC,MAAM,QAAQ,sBAAsB;AAE7C,OAAOC,2BAA2B,MAAM,yCAAyC;AACjF,OAAOC,2BAA2B,MAAM,yCAAyC;AAejF,OAAO,IAAMC,qBAAqB,GAAG,yCAAyC;AAE9E,IAAMC,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAEvC,OAAO,MAAMC,kBAAkB,CAAC;EAOrBC,WAAWA,CAAkBC,MAAc,EAAE;IAAA,KAAhBA,MAAc,GAAdA,MAAc;IAAAC,eAAA,qBAN7B,KAAK;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAOtB,IAAI,CAACC,0BAA0B,CAAC,CAAC;EACrC;EAEOA,0BAA0BA,CAAA,EAAkB;IAAA,IAAAC,KAAA;IAC/C,OAAO,IAAI,CAACH,MAAM,CAACI,WAAW,CAACC,KAAK,CAAC,UAAU,EAAE,CAACd,oBAAoB,CAACe,aAAa,CAAC,EAAGC,GAAG,IAAK;MAC5F,IAAI,CAACP,MAAM,CAACI,WAAW,CAACI,wBAAwB,CAC5CD,GAAG;QAAA,IAAAE,IAAA,GAAAC,iBAAA,CACH,WAAOC,MAAM,EAAK;UACd,IAAIA,MAAM,EAAE;YACR,IAAM;cAAEC,GAAG;cAAEC,OAAO;cAAEC,iBAAiB;cAAEC;YAAK,CAAC,GAAGJ,MAAM;YACxD,IAAMK,SAAS,GAAGC,MAAM,CAACC,IAAI,CAACf,KAAI,CAACH,MAAM,CAACmB,SAAS,CAACH,SAAS,CAAC;YAC9D,IAAMI,SAAS,SAAS1B,2BAA2B,CAACkB,GAAG,EAAEI,SAAS,EAAEpB,qBAAqB,CAAC;YAC1FO,KAAI,CAACS,GAAG,GAAGvB,YAAY,CAAC+B,SAAS,CAAC;YAClCjB,KAAI,CAACU,OAAO,GAAGA,OAAO;YACtBV,KAAI,CAACW,iBAAiB,GAAGA,iBAAiB;YAC1C,IAAMO,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;YACtB,IAAME,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEV,IAAI,GAAGlB,OAAO,GAAGwB,GAAG,CAAC;YAC/ClB,KAAI,CAACuB,SAAS,GAAGC,UAAU,CAACC,UAAU,CAACzB,KAAI,CAAC0B,eAAe,CAACC,IAAI,CAAC3B,KAAI,CAAC,EAAEoB,KAAK,CAAC;UAClF;QACJ,CAAC;QAAA,iBAAAQ,EAAA;UAAA,OAAAtB,IAAA,CAAAuB,KAAA,OAAAC,SAAA;QAAA;MAAA,KACD,aACJ,CAAC;IACL,CAAC,CAAC;EACN;;EAEA;EACaC,yBAAyBA,CAClCtB,GAAe,EAGF;IAAA,IAAAuB,UAAA,GAAAF,SAAA;MAAAG,MAAA;IAAA,OAAA1B,iBAAA;MAAA,IAFbG,OAAiC,GAAAsB,UAAA,CAAAE,MAAA,QAAAF,UAAA,QAAAG,SAAA,GAAAH,UAAA,MAAG,CAAC,CAAC;MAAA,IACtCrB,iBAA0B,GAAAqB,UAAA,CAAAE,MAAA,OAAAF,UAAA,MAAAG,SAAA;MAE1B,IAAMC,OAAO,SAASH,MAAI,CAACI,MAAM,CAAC5B,GAAG,EAAEC,OAAO,EAAEC,iBAAiB,CAAC;MAClE,IAAI,CAACyB,OAAO,EAAE;QACV;QACAH,MAAI,CAACP,eAAe,CAAC,CAAC;MAC1B;IAAC;EACL;EAEaW,MAAMA,CACf5B,GAAe,EAGa;IAAA,IAAA6B,WAAA,GAAAR,SAAA;MAAAS,MAAA;IAAA,OAAAhC,iBAAA;MAAA,IAF5BG,OAAiC,GAAA4B,WAAA,CAAAJ,MAAA,QAAAI,WAAA,QAAAH,SAAA,GAAAG,WAAA,MAAG,CAAC,CAAC;MAAA,IACtC3B,iBAA0B,GAAA2B,WAAA,CAAAJ,MAAA,OAAAI,WAAA,MAAAH,SAAA;MAE1B,IAAI,CAAC1B,GAAG,EAAE;QACN;QACA,IAAI8B,MAAI,CAAChB,SAAS,EAAE;UAChBC,UAAU,CAACgB,YAAY,CAACD,MAAI,CAAChB,SAAS,CAAC;UACvCgB,MAAI,CAAChB,SAAS,GAAGY,SAAS;QAC9B;QACA;QACA,MAAMI,MAAI,CAAC1C,MAAM,CAACI,WAAW,CAACC,KAAK,CAAC,WAAW,EAAE,CAACd,oBAAoB,CAACe,aAAa,CAAC,EAAGC,GAAG,IAAK;UAC5FmC,MAAI,CAAC1C,MAAM,CAACI,WAAW,CAACwC,0BAA0B,CAACrC,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC;QAChF,CAAC,CAAC;QACFmC,MAAI,CAAC9B,GAAG,GAAG0B,SAAS;QACpBI,MAAI,CAAC7B,OAAO,GAAGyB,SAAS;QACxB;MACJ;;MAEA;MACA;MACA;MACA;MACA,IAAIC,OAAgB,GAAG,CAAC,CAACG,MAAI,CAAC9B,GAAG,IAAIA,GAAG,CAACyB,MAAM,IAAIK,MAAI,CAAC9B,GAAG,CAACyB,MAAM;MAClE,KAAK,IAAIQ,CAAC,GAAG,CAAC,EAAEN,OAAO,IAAIM,CAAC,GAAGjC,GAAG,CAACyB,MAAM,EAAEQ,CAAC,EAAE,EAAE;QAC5C,IAAIjC,GAAG,CAACiC,CAAC,CAAC,IAAIH,MAAI,CAAC9B,GAAG,CAAEiC,CAAC,CAAC,EAAE;UACxBN,OAAO,GAAG,KAAK;QACnB;MACJ;MACA,IAAI,CAACA,OAAO,EAAE;QACVG,MAAI,CAAC9B,GAAG,GAAGA,GAAG;QACd8B,MAAI,CAAC7B,OAAO,GAAGA,OAAO;QACtB6B,MAAI,CAAC5B,iBAAiB,GAAGA,iBAAiB;MAC9C;MACA,OAAOyB,OAAO;IAAC;EACnB;;EAEA;EACaV,eAAeA,CAAA,EAAgC;IAAA,IAAAiB,MAAA;IAAA,OAAApC,iBAAA;MACxD,IAAIoC,MAAI,CAACC,UAAU,EAAE;QACjBvD,MAAM,CAACwD,GAAG,CAAC,iEAAiE,CAAC;QAC7E;MACJ;MACAF,MAAI,CAACC,UAAU,GAAG,IAAI;MACtB,IAAID,MAAI,CAACpB,SAAS,EAAE;QAChBC,UAAU,CAACgB,YAAY,CAACG,MAAI,CAACpB,SAAS,CAAC;QACvCoB,MAAI,CAACpB,SAAS,GAAGY,SAAS;MAC9B;MACA,IAAI;QACA,IAAMtB,SAAS,GAAGC,MAAM,CAACC,IAAI,CAAC4B,MAAI,CAAC9C,MAAM,CAACmB,SAAS,CAACH,SAAS,CAAC;;QAE9D;QACA,IAAMJ,GAAG,SAASjB,2BAA2B,CAACL,YAAY,CAACwD,MAAI,CAAClC,GAAI,CAAC,EAAEI,SAAS,EAAEpB,qBAAqB,CAAC;QACxG,MAAMkD,MAAI,CAAC9C,MAAM,CAACI,WAAW,CAACC,KAAK,CAAC,WAAW,EAAE,CAACd,oBAAoB,CAACe,aAAa,CAAC,EAAGC,GAAG,IAAK;UAC5FuC,MAAI,CAAC9C,MAAM,CAACI,WAAW,CAACwC,0BAA0B,CAACrC,GAAG,EAAE,aAAa,EAAE;YACnEM,OAAO,EAAEiC,MAAI,CAACjC,OAAO;YACrBD,GAAG;YACHE,iBAAiB,EAAEgC,MAAI,CAAChC,iBAAkB;YAC1CC,IAAI,EAAEO,IAAI,CAACD,GAAG,CAAC;UACnB,CAAC,CAAC;QACN,CAAC,CAAC;QACF7B,MAAM,CAACwD,GAAG,CAAC,gCAAgC,CAAC;QAE5CxD,MAAM,CAACwD,GAAG,CAAC,kBAAkB,CAAC;QAC9B;QACA,IAAMC,OAAO,GAAG,IAAItB,UAAU,CAACuB,GAAG,CAACC,OAAO,CAAC,CAAC;QAC5CF,OAAO,CAACG,MAAM,CAAC,CAAC;QAChB,IAAMC,OAAO,GAAGC,IAAI,CAACC,KAAK,CAACN,OAAO,CAACO,aAAa,CAAC,CAAC,CAAC;QAEnD,IAAMC,OAAO,GAAGR,OAAO,CAACS,2BAA2B,CAAC,CAAC;QACrD;QACAT,OAAO,CAACU,sBAAsB,CAACF,OAAO,GAAG,CAAC,CAAC;QAC3CR,OAAO,CAACW,qBAAqB,CAAC,CAAC;QAC/B,IAAMC,IAA4B,GAAGP,IAAI,CAACC,KAAK,CAACN,OAAO,CAACa,aAAa,CAAC,CAAC,CAAC;QACxE,IAAMC,SAAiC,GAAGT,IAAI,CAACC,KAAK,CAACN,OAAO,CAACe,YAAY,CAAC,CAAC,CAAC;QAC5Ef,OAAO,CAACgB,sBAAsB,CAAC,CAAC;;QAEhC;QACA,IAAMC,cAAc,GAAGjB,OAAO,CAACkB,MAAM,CAAC,IAAIC,UAAU,CAACtB,MAAI,CAAClC,GAAI,CAAC,CAAC;QAEhE,IAAMyD,UAAoC,GAAG;UACzCC,SAAS,EAAE1E,qBAAqB;UAChCqD,OAAO,EAAEiB;QACb,CAAC;QACD,IAAIpB,MAAI,CAACjC,OAAO,CAAE0D,UAAU,EAAE;UAC1BF,UAAU,CAACE,UAAU,GAAGzB,MAAI,CAACjC,OAAO,CAAE0D,UAAU;QACpD;QAEA/E,MAAM,CAACwD,GAAG,CAAC,6BAA6B,CAAC;QACzC;QACA,IAAMwB,eAAe,SAAS1B,MAAI,CAAC9C,MAAM,CAACyE,QAAQ,CAACC,IAAI,CAACC,aAAa,CACjElF,MAAM,CAACmF,GAAG,EACV,oBAAoB,EACpBtC,SAAS,EACT;UACIuC,WAAW,EAAER,UAAU;UACvBS,2BAA2B,EAAEhC,MAAI,CAAChC;QACtC,CAAC,EACD;UACIiE,MAAM,EAAE;QACZ,CACJ,CAAC;;QAED;QACA,IAAMC,QAAQ,GAAGR,eAAe,CAACS,SAAS;QAC1CzF,MAAM,CAACwD,GAAG,CAAC,uBAAuB,EAAEgC,QAAQ,CAAC;QAC7C,IAAME,UAAuB,GAAG;UAC5BC,UAAU,EAAErC,MAAI,CAAC9C,MAAM,CAACoF,mBAAmB;UAC3CH,SAAS,EAAED,QAAQ;UACnBK,OAAO,EAAEvC,MAAI,CAAC9C,MAAM,CAACsF,MAAM;UAC3BC,IAAI,EAAE;YACF,YAAAC,MAAA,CAAYR,QAAQ,IAAK3B,OAAO,CAACoC,OAAO;YACxC,eAAAD,MAAA,CAAeR,QAAQ,IAAK3B,OAAO,CAACqC;UACxC;QACJ,CAAC;QACD,IAAMC,eAAe,GAAG1C,OAAO,CAAC2C,IAAI,CAACxG,WAAW,CAACyG,SAAS,CAACX,UAAU,CAAC,CAAC;QACvEA,UAAU,CAACY,UAAU,GAAG;UACpB,CAAChD,MAAI,CAAC9C,MAAM,CAACsF,MAAM,GAAG;YAClB,YAAAE,MAAA,CAAYR,QAAQ,IAAKW;UAC7B;QACJ,CAAC;QACD,IAAI7C,MAAI,CAAC9C,MAAM,CAAC+F,gBAAgB,CAACC,KAAK,CAAC,cAAc,CAAC,EAAE;UACpD,MAAMlD,MAAI,CAAC9C,MAAM,CAAC+F,gBAAgB,CAACE,UAAU,CAACf,UAAU,EAAE,cAAc,CAAC;QAC7E;QAEA1F,MAAM,CAACwD,GAAG,CAAC,yBAAyB,CAAC;QACrC,IAAMkD,WAAwC,GAAG,CAAC,CAAC;QACnD,KAAK,IAAM,CAACC,KAAK,EAAEvF,IAAG,CAAC,IAAIwF,MAAM,CAACC,OAAO,CAACxC,IAAI,CAAC6B,UAAU,CAAC,EAAE;UACxD,IAAMY,CAAc,GAAG;YAAE1F,GAAG,EAAHA;UAAI,CAAC;UAC9B,IAAM2F,SAAS,GAAGtD,OAAO,CAAC2C,IAAI,CAACxG,WAAW,CAACyG,SAAS,CAACS,CAAC,CAAC,CAAC;UACxDA,CAAC,CAACR,UAAU,GAAG;YACX,CAAChD,MAAI,CAAC9C,MAAM,CAACsF,MAAM,GAAG;cAClB,YAAAE,MAAA,CAAYR,QAAQ,IAAKuB;YAC7B;UACJ,CAAC;UACDL,WAAW,sBAAAV,MAAA,CAAsBW,KAAK,EAAG,GAAGG,CAAC;QACjD;QAEA9G,MAAM,CAACwD,GAAG,CAAC,yBAAyB,CAAC;QACrC,IAAMwD,YAAyC,GAAG,CAAC,CAAC;QACpD,KAAK,IAAM,CAACL,MAAK,EAAEvF,KAAG,CAAC,IAAIwF,MAAM,CAACC,OAAO,CAACtC,SAAS,CAAC2B,UAAU,CAAC,EAAE;UAC7D,IAAMY,EAAc,GAAG;YAAE1F,GAAG,EAAHA,KAAG;YAAE6F,QAAQ,EAAE;UAAK,CAAC;UAC9C,IAAMF,UAAS,GAAGtD,OAAO,CAAC2C,IAAI,CAACxG,WAAW,CAACyG,SAAS,CAACS,EAAC,CAAC,CAAC;UACxDA,EAAC,CAACR,UAAU,GAAG;YACX,CAAChD,MAAI,CAAC9C,MAAM,CAACsF,MAAM,GAAG;cAClB,YAAAE,MAAA,CAAYR,QAAQ,IAAKuB;YAC7B;UACJ,CAAC;UACDC,YAAY,sBAAAhB,MAAA,CAAsBW,MAAK,EAAG,GAAGG,EAAC;QAClD;QAEA9G,MAAM,CAACwD,GAAG,CAAC,0BAA0B,CAAC;QACtC,MAAMF,MAAI,CAAC9C,MAAM,CAACyE,QAAQ,CAACC,IAAI,CAACC,aAAa,CACzClF,MAAM,CAACiH,IAAI,EACX,eAAe,GAAGC,SAAS,CAAC3B,QAAQ,CAAC,EACrC1C,SAAS,EACT;UACI,aAAa,EAAE4C,UAAU;UACzB,eAAe,EAAEgB,WAAW;UAC5B,kCAAkC,EAAEM;QACxC,CACJ,CAAC;QACDhH,MAAM,CAACwD,GAAG,CAAC,kBAAkB,CAAC;;QAE9B;QACAF,MAAI,CAACpB,SAAS,GAAGC,UAAU,CAACC,UAAU,CAACkB,MAAI,CAACjB,eAAe,CAACC,IAAI,CAACgB,MAAI,CAAC,EAAEjD,OAAO,CAAC;QAEhF,OAAOmF,QAAQ;MACnB,CAAC,SAAS;QACNlC,MAAI,CAACC,UAAU,GAAG,KAAK;MAC3B;IAAC;EACL;EAEO6D,IAAIA,CAAA,EAAS;IAChB,IAAI,IAAI,CAAClF,SAAS,EAAE;MAChBC,UAAU,CAACgB,YAAY,CAAC,IAAI,CAACjB,SAAS,CAAC;MACvC,IAAI,CAACA,SAAS,GAAGY,SAAS;IAC9B;EACJ;AACJ","ignoreList":[]}

package/lib/crypto/device-converter.d.ts

@@ -0,0 +1,9 @@
+import { Device } from "../models/device.ts";
+import { DeviceInfo } from "./deviceinfo.ts";
+/**
+ * Convert a {@link DeviceInfo} to a {@link Device}.
+ * @param deviceInfo - deviceInfo to convert
+ * @param userId - id of the user that owns the device.
+ */
+export declare function deviceInfoToDevice(deviceInfo: DeviceInfo, userId: string): Device;
+//# sourceMappingURL=device-converter.d.ts.map

package/lib/crypto/device-converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-converter.d.ts","sourceRoot":"","sources":["../../src/crypto/device-converter.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAoBjF"}

package/lib/crypto/device-converter.js

@@ -0,0 +1,42 @@
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+import { Device } from "../models/device.js";
+/**
+ * Convert a {@link DeviceInfo} to a {@link Device}.
+ * @param deviceInfo - deviceInfo to convert
+ * @param userId - id of the user that owns the device.
+ */
+export function deviceInfoToDevice(deviceInfo, userId) {
+  var keys = new Map(Object.entries(deviceInfo.keys));
+  var displayName = deviceInfo.getDisplayName() || undefined;
+  var signatures = new Map();
+  if (deviceInfo.signatures) {
+    for (var _userId in deviceInfo.signatures) {
+      signatures.set(_userId, new Map(Object.entries(deviceInfo.signatures[_userId])));
+    }
+  }
+  return new Device({
+    deviceId: deviceInfo.deviceId,
+    userId: userId,
+    keys,
+    algorithms: deviceInfo.algorithms,
+    verified: deviceInfo.verified,
+    signatures,
+    displayName
+  });
+}
+//# sourceMappingURL=device-converter.js.map

package/lib/crypto/device-converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-converter.js","names":["Device","deviceInfoToDevice","deviceInfo","userId","keys","Map","Object","entries","displayName","getDisplayName","undefined","signatures","set","deviceId","algorithms","verified"],"sources":["../../src/crypto/device-converter.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { Device } from \"../models/device.ts\";\nimport { DeviceInfo } from \"./deviceinfo.ts\";\n\n/**\n * Convert a {@link DeviceInfo} to a {@link Device}.\n * @param deviceInfo - deviceInfo to convert\n * @param userId - id of the user that owns the device.\n */\nexport function deviceInfoToDevice(deviceInfo: DeviceInfo, userId: string): Device {\n    const keys = new Map<string, string>(Object.entries(deviceInfo.keys));\n    const displayName = deviceInfo.getDisplayName() || undefined;\n\n    const signatures = new Map<string, Map<string, string>>();\n    if (deviceInfo.signatures) {\n        for (const userId in deviceInfo.signatures) {\n            signatures.set(userId, new Map(Object.entries(deviceInfo.signatures[userId])));\n        }\n    }\n\n    return new Device({\n        deviceId: deviceInfo.deviceId,\n        userId: userId,\n        keys,\n        algorithms: deviceInfo.algorithms,\n        verified: deviceInfo.verified,\n        signatures,\n        displayName,\n    });\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,MAAM,QAAQ,qBAAqB;AAG5C;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,kBAAkBA,CAACC,UAAsB,EAAEC,MAAc,EAAU;EAC/E,IAAMC,IAAI,GAAG,IAAIC,GAAG,CAAiBC,MAAM,CAACC,OAAO,CAACL,UAAU,CAACE,IAAI,CAAC,CAAC;EACrE,IAAMI,WAAW,GAAGN,UAAU,CAACO,cAAc,CAAC,CAAC,IAAIC,SAAS;EAE5D,IAAMC,UAAU,GAAG,IAAIN,GAAG,CAA8B,CAAC;EACzD,IAAIH,UAAU,CAACS,UAAU,EAAE;IACvB,KAAK,IAAMR,OAAM,IAAID,UAAU,CAACS,UAAU,EAAE;MACxCA,UAAU,CAACC,GAAG,CAACT,OAAM,EAAE,IAAIE,GAAG,CAACC,MAAM,CAACC,OAAO,CAACL,UAAU,CAACS,UAAU,CAACR,OAAM,CAAC,CAAC,CAAC,CAAC;IAClF;EACJ;EAEA,OAAO,IAAIH,MAAM,CAAC;IACda,QAAQ,EAAEX,UAAU,CAACW,QAAQ;IAC7BV,MAAM,EAAEA,MAAM;IACdC,IAAI;IACJU,UAAU,EAAEZ,UAAU,CAACY,UAAU;IACjCC,QAAQ,EAAEb,UAAU,CAACa,QAAQ;IAC7BJ,UAAU;IACVH;EACJ,CAAC,CAAC;AACN","ignoreList":[]}