@unwanted/matrix-sdk-mini 34.12.0-1

package/lib/crypto/olmlib.js

@@ -0,0 +1,492 @@
+import _defineProperty from "@babel/runtime/helpers/defineProperty";
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+/*
+Copyright 2016 - 2021 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+/**
+ * Utilities common to olm encryption algorithms
+ */
+
+import anotherjson from "another-json";
+import { logger } from "../logger.js";
+import { EventType } from "../@types/event.js";
+import { MapWithDefault } from "../utils.js";
+var Algorithm = /*#__PURE__*/function (Algorithm) {
+  Algorithm["Olm"] = "m.olm.v1.curve25519-aes-sha2";
+  Algorithm["Megolm"] = "m.megolm.v1.aes-sha2";
+  Algorithm["MegolmBackup"] = "m.megolm_backup.v1.curve25519-aes-sha2";
+  return Algorithm;
+}(Algorithm || {});
+/**
+ * matrix algorithm tag for olm
+ */
+export var OLM_ALGORITHM = Algorithm.Olm;
+
+/**
+ * matrix algorithm tag for megolm
+ */
+export var MEGOLM_ALGORITHM = Algorithm.Megolm;
+
+/**
+ * matrix algorithm tag for megolm backups
+ */
+export var MEGOLM_BACKUP_ALGORITHM = Algorithm.MegolmBackup;
+/**
+ * Encrypt an event payload for an Olm device
+ *
+ * @param resultsObject -  The `ciphertext` property
+ *   of the m.room.encrypted event to which to add our result
+ *
+ * @param olmDevice - olm.js wrapper
+ * @param payloadFields - fields to include in the encrypted payload
+ *
+ * Returns a promise which resolves (to undefined) when the payload
+ *    has been encrypted into `resultsObject`
+ */
+export function encryptMessageForDevice(_x, _x2, _x3, _x4, _x5, _x6, _x7) {
+  return _encryptMessageForDevice.apply(this, arguments);
+}
+function _encryptMessageForDevice() {
+  _encryptMessageForDevice = _asyncToGenerator(function* (resultsObject, ourUserId, ourDeviceId, olmDevice, recipientUserId, recipientDevice, payloadFields) {
+    var deviceKey = recipientDevice.getIdentityKey();
+    var sessionId = yield olmDevice.getSessionIdForDevice(deviceKey);
+    if (sessionId === null) {
+      // If we don't have a session for a device then
+      // we can't encrypt a message for it.
+      logger.log("[olmlib.encryptMessageForDevice] Unable to find Olm session for device " + "".concat(recipientUserId, ":").concat(recipientDevice.deviceId));
+      return;
+    }
+    logger.log("[olmlib.encryptMessageForDevice] Using Olm session ".concat(sessionId, " for device ") + "".concat(recipientUserId, ":").concat(recipientDevice.deviceId));
+    var payload = _objectSpread({
+      sender: ourUserId,
+      // TODO this appears to no longer be used whatsoever
+      sender_device: ourDeviceId,
+      // Include the Ed25519 key so that the recipient knows what
+      // device this message came from.
+      // We don't need to include the curve25519 key since the
+      // recipient will already know this from the olm headers.
+      // When combined with the device keys retrieved from the
+      // homeserver signed by the ed25519 key this proves that
+      // the curve25519 key and the ed25519 key are owned by
+      // the same device.
+      keys: {
+        ed25519: olmDevice.deviceEd25519Key
+      },
+      // include the recipient device details in the payload,
+      // to avoid unknown key attacks, per
+      // https://github.com/vector-im/vector-web/issues/2483
+      recipient: recipientUserId,
+      recipient_keys: {
+        ed25519: recipientDevice.getFingerprint()
+      }
+    }, payloadFields);
+
+    // TODO: technically, a bunch of that stuff only needs to be included for
+    // pre-key messages: after that, both sides know exactly which devices are
+    // involved in the session. If we're looking to reduce data transfer in the
+    // future, we could elide them for subsequent messages.
+
+    resultsObject[deviceKey] = yield olmDevice.encryptMessage(deviceKey, sessionId, JSON.stringify(payload));
+  });
+  return _encryptMessageForDevice.apply(this, arguments);
+}
+/**
+ * Get the existing olm sessions for the given devices, and the devices that
+ * don't have olm sessions.
+ *
+ *
+ *
+ * @param devicesByUser - map from userid to list of devices to ensure sessions for
+ *
+ * @returns resolves to an array.  The first element of the array is a
+ *    a map of user IDs to arrays of deviceInfo, representing the devices that
+ *    don't have established olm sessions.  The second element of the array is
+ *    a map from userId to deviceId to {@link OlmSessionResult}
+ */
+export function getExistingOlmSessions(_x8, _x9, _x10) {
+  return _getExistingOlmSessions.apply(this, arguments);
+}
+
+/**
+ * Try to make sure we have established olm sessions for the given devices.
+ *
+ * @param devicesByUser - map from userid to list of devices to ensure sessions for
+ *
+ * @param force - If true, establish a new session even if one
+ *     already exists.
+ *
+ * @param otkTimeout - The timeout in milliseconds when requesting
+ *     one-time keys for establishing new olm sessions.
+ *
+ * @param failedServers - An array to fill with remote servers that
+ *     failed to respond to one-time-key requests.
+ *
+ * @param log - A possibly customised log
+ *
+ * @returns resolves once the sessions are complete, to
+ *    an Object mapping from userId to deviceId to
+ *    {@link OlmSessionResult}
+ */
+function _getExistingOlmSessions() {
+  _getExistingOlmSessions = _asyncToGenerator(function* (olmDevice, baseApis, devicesByUser) {
+    // map user Id → DeviceInfo[]
+    var devicesWithoutSession = new MapWithDefault(() => []);
+    // map user Id → device Id → IExistingOlmSession
+    var sessions = new MapWithDefault(() => new Map());
+    var promises = [];
+    var _loop = function* _loop(userId) {
+      var _loop2 = function* _loop2(deviceInfo) {
+        var deviceId = deviceInfo.deviceId;
+        var key = deviceInfo.getIdentityKey();
+        promises.push(_asyncToGenerator(function* () {
+          var sessionId = yield olmDevice.getSessionIdForDevice(key, true);
+          if (sessionId === null) {
+            devicesWithoutSession.getOrCreate(userId).push(deviceInfo);
+          } else {
+            sessions.getOrCreate(userId).set(deviceId, {
+              device: deviceInfo,
+              sessionId: sessionId
+            });
+          }
+        })());
+      };
+      for (var deviceInfo of devices) {
+        yield* _loop2(deviceInfo);
+      }
+    };
+    for (var [userId, devices] of Object.entries(devicesByUser)) {
+      yield* _loop(userId);
+    }
+    yield Promise.all(promises);
+    return [devicesWithoutSession, sessions];
+  });
+  return _getExistingOlmSessions.apply(this, arguments);
+}
+export function ensureOlmSessionsForDevices(_x11, _x12, _x13) {
+  return _ensureOlmSessionsForDevices.apply(this, arguments);
+}
+function _ensureOlmSessionsForDevices() {
+  _ensureOlmSessionsForDevices = _asyncToGenerator(function* (olmDevice, baseApis, devicesByUser) {
+    var force = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+    var otkTimeout = arguments.length > 4 ? arguments[4] : undefined;
+    var failedServers = arguments.length > 5 ? arguments[5] : undefined;
+    var log = arguments.length > 6 && arguments[6] !== undefined ? arguments[6] : logger;
+    var devicesWithoutSession = [
+      // [userId, deviceId], ...
+    ];
+    // map user Id → device Id → IExistingOlmSession
+    var result = new Map();
+    // map device key → resolve session fn
+    var resolveSession = new Map();
+
+    // Mark all sessions this task intends to update as in progress. It is
+    // important to do this for all devices this task cares about in a single
+    // synchronous operation, as otherwise it is possible to have deadlocks
+    // where multiple tasks wait indefinitely on another task to update some set
+    // of common devices.
+    for (var devices of devicesByUser.values()) {
+      var _loop3 = function* _loop3() {
+        var key = deviceInfo.getIdentityKey();
+        if (key === olmDevice.deviceCurve25519Key) {
+          // We don't start sessions with ourself, so there's no need to
+          // mark it in progress.
+          return 1; // continue
+        }
+        if (!olmDevice.sessionsInProgress[key]) {
+          // pre-emptively mark the session as in-progress to avoid race
+          // conditions.  If we find that we already have a session, then
+          // we'll resolve
+          olmDevice.sessionsInProgress[key] = new Promise(resolve => {
+            resolveSession.set(key, v => {
+              delete olmDevice.sessionsInProgress[key];
+              resolve(v);
+            });
+          });
+        }
+      };
+      for (var deviceInfo of devices) {
+        if (yield* _loop3()) continue;
+      }
+    }
+    for (var [userId, _devices] of devicesByUser) {
+      var resultDevices = new Map();
+      result.set(userId, resultDevices);
+      for (var _deviceInfo of _devices) {
+        var deviceId = _deviceInfo.deviceId;
+        var key = _deviceInfo.getIdentityKey();
+        if (key === olmDevice.deviceCurve25519Key) {
+          // We should never be trying to start a session with ourself.
+          // Apart from talking to yourself being the first sign of madness,
+          // olm sessions can't do this because they get confused when
+          // they get a message and see that the 'other side' has started a
+          // new chain when this side has an active sender chain.
+          // If you see this message being logged in the wild, we should find
+          // the thing that is trying to send Olm messages to itself and fix it.
+          log.info("Attempted to start session with ourself! Ignoring");
+          // We must fill in the section in the return value though, as callers
+          // expect it to be there.
+          resultDevices.set(deviceId, {
+            device: _deviceInfo,
+            sessionId: null
+          });
+          continue;
+        }
+        var forWhom = "for ".concat(key, " (").concat(userId, ":").concat(deviceId, ")");
+        var sessionId = yield olmDevice.getSessionIdForDevice(key, !!resolveSession.get(key), log);
+        var resolveSessionFn = resolveSession.get(key);
+        if (sessionId !== null && resolveSessionFn) {
+          // we found a session, but we had marked the session as
+          // in-progress, so resolve it now, which will unmark it and
+          // unblock anything that was waiting
+          resolveSessionFn();
+        }
+        if (sessionId === null || force) {
+          if (force) {
+            log.info("Forcing new Olm session ".concat(forWhom));
+          } else {
+            log.info("Making new Olm session ".concat(forWhom));
+          }
+          devicesWithoutSession.push([userId, deviceId]);
+        }
+        resultDevices.set(deviceId, {
+          device: _deviceInfo,
+          sessionId: sessionId
+        });
+      }
+    }
+    if (devicesWithoutSession.length === 0) {
+      return result;
+    }
+    var oneTimeKeyAlgorithm = "signed_curve25519";
+    var res;
+    var taskDetail = "one-time keys for ".concat(devicesWithoutSession.length, " devices");
+    try {
+      log.debug("Claiming ".concat(taskDetail));
+      res = yield baseApis.claimOneTimeKeys(devicesWithoutSession, oneTimeKeyAlgorithm, otkTimeout);
+      log.debug("Claimed ".concat(taskDetail));
+    } catch (e) {
+      for (var resolver of resolveSession.values()) {
+        resolver();
+      }
+      log.debug("Failed to claim ".concat(taskDetail), e, devicesWithoutSession);
+      throw e;
+    }
+    if (failedServers && "failures" in res) {
+      failedServers.push(...Object.keys(res.failures));
+    }
+    var otkResult = res.one_time_keys || {};
+    var promises = [];
+    var _loop4 = function* _loop4(_userId) {
+      var userRes = otkResult[_userId] || {};
+      var _loop5 = function* _loop5() {
+          var _result$get;
+          var deviceId = _deviceInfo2.deviceId;
+          var key = _deviceInfo2.getIdentityKey();
+          if (key === olmDevice.deviceCurve25519Key) {
+            // We've already logged about this above. Skip here too
+            // otherwise we'll log saying there are no one-time keys
+            // which will be confusing.
+            return 0; // continue
+          }
+          if ((_result$get = result.get(_userId)) !== null && _result$get !== void 0 && (_result$get = _result$get.get(deviceId)) !== null && _result$get !== void 0 && _result$get.sessionId && !force) {
+            // we already have a result for this device
+            return 0; // continue
+          }
+          var deviceRes = userRes[deviceId] || {};
+          var oneTimeKey = null;
+          for (var keyId in deviceRes) {
+            if (keyId.indexOf(oneTimeKeyAlgorithm + ":") === 0) {
+              oneTimeKey = deviceRes[keyId];
+            }
+          }
+          if (!oneTimeKey) {
+            var _resolveSession$get;
+            log.warn("No one-time keys (alg=".concat(oneTimeKeyAlgorithm, ") ") + "for device ".concat(_userId, ":").concat(deviceId));
+            (_resolveSession$get = resolveSession.get(key)) === null || _resolveSession$get === void 0 || _resolveSession$get();
+            return 0; // continue
+          }
+          promises.push(_verifyKeyAndStartSession(olmDevice, oneTimeKey, _userId, _deviceInfo2).then(sid => {
+            var _resolveSession$get2, _result$get2;
+            (_resolveSession$get2 = resolveSession.get(key)) === null || _resolveSession$get2 === void 0 || _resolveSession$get2(sid !== null && sid !== void 0 ? sid : undefined);
+            var deviceInfo = (_result$get2 = result.get(_userId)) === null || _result$get2 === void 0 ? void 0 : _result$get2.get(deviceId);
+            if (deviceInfo) deviceInfo.sessionId = sid;
+          }, e => {
+            var _resolveSession$get3;
+            (_resolveSession$get3 = resolveSession.get(key)) === null || _resolveSession$get3 === void 0 || _resolveSession$get3();
+            throw e;
+          }));
+        },
+        _ret;
+      for (var _deviceInfo2 of _devices2) {
+        _ret = yield* _loop5();
+        if (_ret === 0) continue;
+      }
+    };
+    for (var [_userId, _devices2] of devicesByUser) {
+      yield* _loop4(_userId);
+    }
+    taskDetail = "Olm sessions for ".concat(promises.length, " devices");
+    log.debug("Starting ".concat(taskDetail));
+    yield Promise.all(promises);
+    log.debug("Started ".concat(taskDetail));
+    return result;
+  });
+  return _ensureOlmSessionsForDevices.apply(this, arguments);
+}
+function _verifyKeyAndStartSession(_x14, _x15, _x16, _x17) {
+  return _verifyKeyAndStartSession2.apply(this, arguments);
+}
+function _verifyKeyAndStartSession2() {
+  _verifyKeyAndStartSession2 = _asyncToGenerator(function* (olmDevice, oneTimeKey, userId, deviceInfo) {
+    var deviceId = deviceInfo.deviceId;
+    try {
+      yield verifySignature(olmDevice, oneTimeKey, userId, deviceId, deviceInfo.getFingerprint());
+    } catch (e) {
+      logger.error("Unable to verify signature on one-time key for device " + userId + ":" + deviceId + ":", e);
+      return null;
+    }
+    var sid;
+    try {
+      sid = yield olmDevice.createOutboundSession(deviceInfo.getIdentityKey(), oneTimeKey.key);
+    } catch (e) {
+      // possibly a bad key
+      logger.error("Error starting olm session with device " + userId + ":" + deviceId + ": " + e);
+      return null;
+    }
+    logger.log("Started new olm sessionid " + sid + " for device " + userId + ":" + deviceId);
+    return sid;
+  });
+  return _verifyKeyAndStartSession2.apply(this, arguments);
+}
+/**
+ * Verify the signature on an object
+ *
+ * @param olmDevice - olm wrapper to use for verify op
+ *
+ * @param obj - object to check signature on.
+ *
+ * @param signingUserId -  ID of the user whose signature should be checked
+ *
+ * @param signingDeviceId -  ID of the device whose signature should be checked
+ *
+ * @param signingKey -   base64-ed ed25519 public key
+ *
+ * Returns a promise which resolves (to undefined) if the the signature is good,
+ * or rejects with an Error if it is bad.
+ */
+export function verifySignature(_x18, _x19, _x20, _x21, _x22) {
+  return _verifySignature.apply(this, arguments);
+}
+
+/**
+ * Sign a JSON object using public key cryptography
+ * @param obj - Object to sign.  The object will be modified to include
+ *     the new signature
+ * @param key - the signing object or the private key
+ * seed
+ * @param userId - The user ID who owns the signing key
+ * @param pubKey - The public key (ignored if key is a seed)
+ * @returns the signature for the object
+ */
+function _verifySignature() {
+  _verifySignature = _asyncToGenerator(function* (olmDevice, obj, signingUserId, signingDeviceId, signingKey) {
+    var signKeyId = "ed25519:" + signingDeviceId;
+    var signatures = obj.signatures || {};
+    var userSigs = signatures[signingUserId] || {};
+    var signature = userSigs[signKeyId];
+    if (!signature) {
+      throw Error("No signature");
+    }
+
+    // prepare the canonical json: remove unsigned and signatures, and stringify with anotherjson
+    var mangledObj = Object.assign({}, obj);
+    if ("unsigned" in mangledObj) {
+      delete mangledObj.unsigned;
+    }
+    delete mangledObj.signatures;
+    var json = anotherjson.stringify(mangledObj);
+    olmDevice.verifySignature(signingKey, json, signature);
+  });
+  return _verifySignature.apply(this, arguments);
+}
+export function pkSign(obj, key, userId, pubKey) {
+  var createdKey = false;
+  if (key instanceof Uint8Array) {
+    var keyObj = new globalThis.Olm.PkSigning();
+    pubKey = keyObj.init_with_seed(key);
+    key = keyObj;
+    createdKey = true;
+  }
+  var sigs = obj.signatures || {};
+  delete obj.signatures;
+  var unsigned = obj.unsigned;
+  if (obj.unsigned) delete obj.unsigned;
+  try {
+    var mysigs = sigs[userId] || {};
+    sigs[userId] = mysigs;
+    return mysigs["ed25519:" + pubKey] = key.sign(anotherjson.stringify(obj));
+  } finally {
+    obj.signatures = sigs;
+    if (unsigned) obj.unsigned = unsigned;
+    if (createdKey) {
+      key.free();
+    }
+  }
+}
+
+/**
+ * Verify a signed JSON object
+ * @param obj - Object to verify
+ * @param pubKey - The public key to use to verify
+ * @param userId - The user ID who signed the object
+ */
+export function pkVerify(obj, pubKey, userId) {
+  var keyId = "ed25519:" + pubKey;
+  if (!(obj.signatures && obj.signatures[userId] && obj.signatures[userId][keyId])) {
+    throw new Error("No signature");
+  }
+  var signature = obj.signatures[userId][keyId];
+  var util = new globalThis.Olm.Utility();
+  var sigs = obj.signatures;
+  delete obj.signatures;
+  var unsigned = obj.unsigned;
+  if (obj.unsigned) delete obj.unsigned;
+  try {
+    util.ed25519_verify(pubKey, anotherjson.stringify(obj), signature);
+  } finally {
+    obj.signatures = sigs;
+    if (unsigned) obj.unsigned = unsigned;
+    util.free();
+  }
+}
+
+/**
+ * Check that an event was encrypted using olm.
+ */
+export function isOlmEncrypted(event) {
+  if (!event.getSenderKey()) {
+    logger.error("Event has no sender key (not encrypted?)");
+    return false;
+  }
+  if (event.getWireType() !== EventType.RoomMessageEncrypted || !["m.olm.v1.curve25519-aes-sha2"].includes(event.getWireContent().algorithm)) {
+    logger.error("Event was not encrypted using an appropriate algorithm");
+    return false;
+  }
+  return true;
+}
+//# sourceMappingURL=olmlib.js.map

package/lib/crypto/olmlib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"olmlib.js","names":["anotherjson","logger","EventType","MapWithDefault","Algorithm","OLM_ALGORITHM","Olm","MEGOLM_ALGORITHM","Megolm","MEGOLM_BACKUP_ALGORITHM","MegolmBackup","encryptMessageForDevice","_x","_x2","_x3","_x4","_x5","_x6","_x7","_encryptMessageForDevice","apply","arguments","_asyncToGenerator","resultsObject","ourUserId","ourDeviceId","olmDevice","recipientUserId","recipientDevice","payloadFields","deviceKey","getIdentityKey","sessionId","getSessionIdForDevice","log","concat","deviceId","payload","_objectSpread","sender","sender_device","keys","ed25519","deviceEd25519Key","recipient","recipient_keys","getFingerprint","encryptMessage","JSON","stringify","getExistingOlmSessions","_x8","_x9","_x10","_getExistingOlmSessions","baseApis","devicesByUser","devicesWithoutSession","sessions","Map","promises","_loop","userId","_loop2","deviceInfo","key","push","getOrCreate","set","device","devices","Object","entries","Promise","all","ensureOlmSessionsForDevices","_x11","_x12","_x13","_ensureOlmSessionsForDevices","force","length","undefined","otkTimeout","failedServers","result","resolveSession","values","_loop3","deviceCurve25519Key","sessionsInProgress","resolve","v","resultDevices","info","forWhom","get","resolveSessionFn","oneTimeKeyAlgorithm","res","taskDetail","debug","claimOneTimeKeys","e","resolver","failures","otkResult","one_time_keys","_loop4","_userId","userRes","_loop5","_result$get","deviceRes","oneTimeKey","keyId","indexOf","_resolveSession$get","warn","_verifyKeyAndStartSession","then","sid","_resolveSession$get2","_result$get2","_resolveSession$get3","_ret","_x14","_x15","_x16","_x17","_verifyKeyAndStartSession2","verifySignature","error","createOutboundSession","_x18","_x19","_x20","_x21","_x22","_verifySignature","obj","signingUserId","signingDeviceId","signingKey","signKeyId","signatures","userSigs","signature","Error","mangledObj","assign","unsigned","json","pkSign","pubKey","createdKey","Uint8Array","keyObj","globalThis","PkSigning","init_with_seed","sigs","mysigs","sign","free","pkVerify","util","Utility","ed25519_verify","isOlmEncrypted","event","getSenderKey","getWireType","RoomMessageEncrypted","includes","getWireContent","algorithm"],"sources":["../../src/crypto/olmlib.ts"],"sourcesContent":["/*\nCopyright 2016 - 2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Utilities common to olm encryption algorithms\n */\n\nimport anotherjson from \"another-json\";\n\nimport type { PkSigning } from \"@matrix-org/olm\";\nimport type { IOneTimeKey } from \"../@types/crypto.ts\";\nimport { OlmDevice } from \"./OlmDevice.ts\";\nimport { DeviceInfo } from \"./deviceinfo.ts\";\nimport { Logger, logger } from \"../logger.ts\";\nimport { IClaimOTKsResult, MatrixClient } from \"../client.ts\";\nimport { ISignatures } from \"../@types/signed.ts\";\nimport { MatrixEvent } from \"../models/event.ts\";\nimport { EventType } from \"../@types/event.ts\";\nimport { IMessage } from \"./algorithms/olm.ts\";\nimport { MapWithDefault } from \"../utils.ts\";\n\nenum Algorithm {\n    Olm = \"m.olm.v1.curve25519-aes-sha2\",\n    Megolm = \"m.megolm.v1.aes-sha2\",\n    MegolmBackup = \"m.megolm_backup.v1.curve25519-aes-sha2\",\n}\n\n/**\n * matrix algorithm tag for olm\n */\nexport const OLM_ALGORITHM = Algorithm.Olm;\n\n/**\n * matrix algorithm tag for megolm\n */\nexport const MEGOLM_ALGORITHM = Algorithm.Megolm;\n\n/**\n * matrix algorithm tag for megolm backups\n */\nexport const MEGOLM_BACKUP_ALGORITHM = Algorithm.MegolmBackup;\n\nexport interface IOlmSessionResult {\n    /** device info */\n    device: DeviceInfo;\n    /** base64 olm session id; null if no session could be established */\n    sessionId: string | null;\n}\n\n/**\n * Encrypt an event payload for an Olm device\n *\n * @param resultsObject -  The `ciphertext` property\n *   of the m.room.encrypted event to which to add our result\n *\n * @param olmDevice - olm.js wrapper\n * @param payloadFields - fields to include in the encrypted payload\n *\n * Returns a promise which resolves (to undefined) when the payload\n *    has been encrypted into `resultsObject`\n */\nexport async function encryptMessageForDevice(\n    resultsObject: Record<string, IMessage>,\n    ourUserId: string,\n    ourDeviceId: string | undefined,\n    olmDevice: OlmDevice,\n    recipientUserId: string,\n    recipientDevice: DeviceInfo,\n    payloadFields: Record<string, any>,\n): Promise<void> {\n    const deviceKey = recipientDevice.getIdentityKey();\n    const sessionId = await olmDevice.getSessionIdForDevice(deviceKey);\n    if (sessionId === null) {\n        // If we don't have a session for a device then\n        // we can't encrypt a message for it.\n        logger.log(\n            `[olmlib.encryptMessageForDevice] Unable to find Olm session for device ` +\n                `${recipientUserId}:${recipientDevice.deviceId}`,\n        );\n        return;\n    }\n\n    logger.log(\n        `[olmlib.encryptMessageForDevice] Using Olm session ${sessionId} for device ` +\n            `${recipientUserId}:${recipientDevice.deviceId}`,\n    );\n\n    const payload = {\n        sender: ourUserId,\n        // TODO this appears to no longer be used whatsoever\n        sender_device: ourDeviceId,\n\n        // Include the Ed25519 key so that the recipient knows what\n        // device this message came from.\n        // We don't need to include the curve25519 key since the\n        // recipient will already know this from the olm headers.\n        // When combined with the device keys retrieved from the\n        // homeserver signed by the ed25519 key this proves that\n        // the curve25519 key and the ed25519 key are owned by\n        // the same device.\n        keys: {\n            ed25519: olmDevice.deviceEd25519Key,\n        },\n\n        // include the recipient device details in the payload,\n        // to avoid unknown key attacks, per\n        // https://github.com/vector-im/vector-web/issues/2483\n        recipient: recipientUserId,\n        recipient_keys: {\n            ed25519: recipientDevice.getFingerprint(),\n        },\n        ...payloadFields,\n    };\n\n    // TODO: technically, a bunch of that stuff only needs to be included for\n    // pre-key messages: after that, both sides know exactly which devices are\n    // involved in the session. If we're looking to reduce data transfer in the\n    // future, we could elide them for subsequent messages.\n\n    resultsObject[deviceKey] = await olmDevice.encryptMessage(deviceKey, sessionId, JSON.stringify(payload));\n}\n\ninterface IExistingOlmSession {\n    device: DeviceInfo;\n    sessionId: string | null;\n}\n\n/**\n * Get the existing olm sessions for the given devices, and the devices that\n * don't have olm sessions.\n *\n *\n *\n * @param devicesByUser - map from userid to list of devices to ensure sessions for\n *\n * @returns resolves to an array.  The first element of the array is a\n *    a map of user IDs to arrays of deviceInfo, representing the devices that\n *    don't have established olm sessions.  The second element of the array is\n *    a map from userId to deviceId to {@link OlmSessionResult}\n */\nexport async function getExistingOlmSessions(\n    olmDevice: OlmDevice,\n    baseApis: MatrixClient,\n    devicesByUser: Record<string, DeviceInfo[]>,\n): Promise<[Map<string, DeviceInfo[]>, Map<string, Map<string, IExistingOlmSession>>]> {\n    // map user Id → DeviceInfo[]\n    const devicesWithoutSession: MapWithDefault<string, DeviceInfo[]> = new MapWithDefault(() => []);\n    // map user Id → device Id → IExistingOlmSession\n    const sessions: MapWithDefault<string, Map<string, IExistingOlmSession>> = new MapWithDefault(() => new Map());\n\n    const promises: Promise<void>[] = [];\n\n    for (const [userId, devices] of Object.entries(devicesByUser)) {\n        for (const deviceInfo of devices) {\n            const deviceId = deviceInfo.deviceId;\n            const key = deviceInfo.getIdentityKey();\n            promises.push(\n                (async (): Promise<void> => {\n                    const sessionId = await olmDevice.getSessionIdForDevice(key, true);\n                    if (sessionId === null) {\n                        devicesWithoutSession.getOrCreate(userId).push(deviceInfo);\n                    } else {\n                        sessions.getOrCreate(userId).set(deviceId, {\n                            device: deviceInfo,\n                            sessionId: sessionId,\n                        });\n                    }\n                })(),\n            );\n        }\n    }\n\n    await Promise.all(promises);\n\n    return [devicesWithoutSession, sessions];\n}\n\n/**\n * Try to make sure we have established olm sessions for the given devices.\n *\n * @param devicesByUser - map from userid to list of devices to ensure sessions for\n *\n * @param force - If true, establish a new session even if one\n *     already exists.\n *\n * @param otkTimeout - The timeout in milliseconds when requesting\n *     one-time keys for establishing new olm sessions.\n *\n * @param failedServers - An array to fill with remote servers that\n *     failed to respond to one-time-key requests.\n *\n * @param log - A possibly customised log\n *\n * @returns resolves once the sessions are complete, to\n *    an Object mapping from userId to deviceId to\n *    {@link OlmSessionResult}\n */\nexport async function ensureOlmSessionsForDevices(\n    olmDevice: OlmDevice,\n    baseApis: MatrixClient,\n    devicesByUser: Map<string, DeviceInfo[]>,\n    force = false,\n    otkTimeout?: number,\n    failedServers?: string[],\n    log: Logger = logger,\n): Promise<Map<string, Map<string, IOlmSessionResult>>> {\n    const devicesWithoutSession: [string, string][] = [\n        // [userId, deviceId], ...\n    ];\n    // map user Id → device Id → IExistingOlmSession\n    const result: Map<string, Map<string, IExistingOlmSession>> = new Map();\n    // map device key → resolve session fn\n    const resolveSession: Map<string, (sessionId?: string) => void> = new Map();\n\n    // Mark all sessions this task intends to update as in progress. It is\n    // important to do this for all devices this task cares about in a single\n    // synchronous operation, as otherwise it is possible to have deadlocks\n    // where multiple tasks wait indefinitely on another task to update some set\n    // of common devices.\n    for (const devices of devicesByUser.values()) {\n        for (const deviceInfo of devices) {\n            const key = deviceInfo.getIdentityKey();\n\n            if (key === olmDevice.deviceCurve25519Key) {\n                // We don't start sessions with ourself, so there's no need to\n                // mark it in progress.\n                continue;\n            }\n\n            if (!olmDevice.sessionsInProgress[key]) {\n                // pre-emptively mark the session as in-progress to avoid race\n                // conditions.  If we find that we already have a session, then\n                // we'll resolve\n                olmDevice.sessionsInProgress[key] = new Promise((resolve) => {\n                    resolveSession.set(key, (v: any): void => {\n                        delete olmDevice.sessionsInProgress[key];\n                        resolve(v);\n                    });\n                });\n            }\n        }\n    }\n\n    for (const [userId, devices] of devicesByUser) {\n        const resultDevices = new Map();\n        result.set(userId, resultDevices);\n\n        for (const deviceInfo of devices) {\n            const deviceId = deviceInfo.deviceId;\n            const key = deviceInfo.getIdentityKey();\n\n            if (key === olmDevice.deviceCurve25519Key) {\n                // We should never be trying to start a session with ourself.\n                // Apart from talking to yourself being the first sign of madness,\n                // olm sessions can't do this because they get confused when\n                // they get a message and see that the 'other side' has started a\n                // new chain when this side has an active sender chain.\n                // If you see this message being logged in the wild, we should find\n                // the thing that is trying to send Olm messages to itself and fix it.\n                log.info(\"Attempted to start session with ourself! Ignoring\");\n                // We must fill in the section in the return value though, as callers\n                // expect it to be there.\n                resultDevices.set(deviceId, {\n                    device: deviceInfo,\n                    sessionId: null,\n                });\n                continue;\n            }\n\n            const forWhom = `for ${key} (${userId}:${deviceId})`;\n            const sessionId = await olmDevice.getSessionIdForDevice(key, !!resolveSession.get(key), log);\n            const resolveSessionFn = resolveSession.get(key);\n            if (sessionId !== null && resolveSessionFn) {\n                // we found a session, but we had marked the session as\n                // in-progress, so resolve it now, which will unmark it and\n                // unblock anything that was waiting\n                resolveSessionFn();\n            }\n            if (sessionId === null || force) {\n                if (force) {\n                    log.info(`Forcing new Olm session ${forWhom}`);\n                } else {\n                    log.info(`Making new Olm session ${forWhom}`);\n                }\n                devicesWithoutSession.push([userId, deviceId]);\n            }\n            resultDevices.set(deviceId, {\n                device: deviceInfo,\n                sessionId: sessionId,\n            });\n        }\n    }\n\n    if (devicesWithoutSession.length === 0) {\n        return result;\n    }\n\n    const oneTimeKeyAlgorithm = \"signed_curve25519\";\n    let res: IClaimOTKsResult;\n    let taskDetail = `one-time keys for ${devicesWithoutSession.length} devices`;\n    try {\n        log.debug(`Claiming ${taskDetail}`);\n        res = await baseApis.claimOneTimeKeys(devicesWithoutSession, oneTimeKeyAlgorithm, otkTimeout);\n        log.debug(`Claimed ${taskDetail}`);\n    } catch (e) {\n        for (const resolver of resolveSession.values()) {\n            resolver();\n        }\n        log.debug(`Failed to claim ${taskDetail}`, e, devicesWithoutSession);\n        throw e;\n    }\n\n    if (failedServers && \"failures\" in res) {\n        failedServers.push(...Object.keys(res.failures));\n    }\n\n    const otkResult = res.one_time_keys || ({} as IClaimOTKsResult[\"one_time_keys\"]);\n    const promises: Promise<void>[] = [];\n    for (const [userId, devices] of devicesByUser) {\n        const userRes = otkResult[userId] || {};\n        for (const deviceInfo of devices) {\n            const deviceId = deviceInfo.deviceId;\n            const key = deviceInfo.getIdentityKey();\n\n            if (key === olmDevice.deviceCurve25519Key) {\n                // We've already logged about this above. Skip here too\n                // otherwise we'll log saying there are no one-time keys\n                // which will be confusing.\n                continue;\n            }\n\n            if (result.get(userId)?.get(deviceId)?.sessionId && !force) {\n                // we already have a result for this device\n                continue;\n            }\n\n            const deviceRes = userRes[deviceId] || {};\n            let oneTimeKey: IOneTimeKey | null = null;\n            for (const keyId in deviceRes) {\n                if (keyId.indexOf(oneTimeKeyAlgorithm + \":\") === 0) {\n                    oneTimeKey = deviceRes[keyId];\n                }\n            }\n\n            if (!oneTimeKey) {\n                log.warn(`No one-time keys (alg=${oneTimeKeyAlgorithm}) ` + `for device ${userId}:${deviceId}`);\n                resolveSession.get(key)?.();\n                continue;\n            }\n\n            promises.push(\n                _verifyKeyAndStartSession(olmDevice, oneTimeKey, userId, deviceInfo).then(\n                    (sid) => {\n                        resolveSession.get(key)?.(sid ?? undefined);\n                        const deviceInfo = result.get(userId)?.get(deviceId);\n                        if (deviceInfo) deviceInfo.sessionId = sid;\n                    },\n                    (e) => {\n                        resolveSession.get(key)?.();\n                        throw e;\n                    },\n                ),\n            );\n        }\n    }\n\n    taskDetail = `Olm sessions for ${promises.length} devices`;\n    log.debug(`Starting ${taskDetail}`);\n    await Promise.all(promises);\n    log.debug(`Started ${taskDetail}`);\n    return result;\n}\n\nasync function _verifyKeyAndStartSession(\n    olmDevice: OlmDevice,\n    oneTimeKey: IOneTimeKey,\n    userId: string,\n    deviceInfo: DeviceInfo,\n): Promise<string | null> {\n    const deviceId = deviceInfo.deviceId;\n    try {\n        await verifySignature(olmDevice, oneTimeKey, userId, deviceId, deviceInfo.getFingerprint());\n    } catch (e) {\n        logger.error(\"Unable to verify signature on one-time key for device \" + userId + \":\" + deviceId + \":\", e);\n        return null;\n    }\n\n    let sid;\n    try {\n        sid = await olmDevice.createOutboundSession(deviceInfo.getIdentityKey(), oneTimeKey.key);\n    } catch (e) {\n        // possibly a bad key\n        logger.error(\"Error starting olm session with device \" + userId + \":\" + deviceId + \": \" + e);\n        return null;\n    }\n\n    logger.log(\"Started new olm sessionid \" + sid + \" for device \" + userId + \":\" + deviceId);\n    return sid;\n}\n\nexport interface IObject {\n    unsigned?: object;\n    signatures?: ISignatures;\n}\n\n/**\n * Verify the signature on an object\n *\n * @param olmDevice - olm wrapper to use for verify op\n *\n * @param obj - object to check signature on.\n *\n * @param signingUserId -  ID of the user whose signature should be checked\n *\n * @param signingDeviceId -  ID of the device whose signature should be checked\n *\n * @param signingKey -   base64-ed ed25519 public key\n *\n * Returns a promise which resolves (to undefined) if the the signature is good,\n * or rejects with an Error if it is bad.\n */\nexport async function verifySignature(\n    olmDevice: OlmDevice,\n    obj: IOneTimeKey | IObject,\n    signingUserId: string,\n    signingDeviceId: string,\n    signingKey: string,\n): Promise<void> {\n    const signKeyId = \"ed25519:\" + signingDeviceId;\n    const signatures = obj.signatures || {};\n    const userSigs = signatures[signingUserId] || {};\n    const signature = userSigs[signKeyId];\n    if (!signature) {\n        throw Error(\"No signature\");\n    }\n\n    // prepare the canonical json: remove unsigned and signatures, and stringify with anotherjson\n    const mangledObj = Object.assign({}, obj);\n    if (\"unsigned\" in mangledObj) {\n        delete mangledObj.unsigned;\n    }\n    delete mangledObj.signatures;\n    const json = anotherjson.stringify(mangledObj);\n\n    olmDevice.verifySignature(signingKey, json, signature);\n}\n\n/**\n * Sign a JSON object using public key cryptography\n * @param obj - Object to sign.  The object will be modified to include\n *     the new signature\n * @param key - the signing object or the private key\n * seed\n * @param userId - The user ID who owns the signing key\n * @param pubKey - The public key (ignored if key is a seed)\n * @returns the signature for the object\n */\nexport function pkSign(obj: object & IObject, key: Uint8Array | PkSigning, userId: string, pubKey: string): string {\n    let createdKey = false;\n    if (key instanceof Uint8Array) {\n        const keyObj = new globalThis.Olm.PkSigning();\n        pubKey = keyObj.init_with_seed(key);\n        key = keyObj;\n        createdKey = true;\n    }\n    const sigs = obj.signatures || {};\n    delete obj.signatures;\n    const unsigned = obj.unsigned;\n    if (obj.unsigned) delete obj.unsigned;\n    try {\n        const mysigs = sigs[userId] || {};\n        sigs[userId] = mysigs;\n\n        return (mysigs[\"ed25519:\" + pubKey] = key.sign(anotherjson.stringify(obj)));\n    } finally {\n        obj.signatures = sigs;\n        if (unsigned) obj.unsigned = unsigned;\n        if (createdKey) {\n            key.free();\n        }\n    }\n}\n\n/**\n * Verify a signed JSON object\n * @param obj - Object to verify\n * @param pubKey - The public key to use to verify\n * @param userId - The user ID who signed the object\n */\nexport function pkVerify(obj: IObject, pubKey: string, userId: string): void {\n    const keyId = \"ed25519:\" + pubKey;\n    if (!(obj.signatures && obj.signatures[userId] && obj.signatures[userId][keyId])) {\n        throw new Error(\"No signature\");\n    }\n    const signature = obj.signatures[userId][keyId];\n    const util = new globalThis.Olm.Utility();\n    const sigs = obj.signatures;\n    delete obj.signatures;\n    const unsigned = obj.unsigned;\n    if (obj.unsigned) delete obj.unsigned;\n    try {\n        util.ed25519_verify(pubKey, anotherjson.stringify(obj), signature);\n    } finally {\n        obj.signatures = sigs;\n        if (unsigned) obj.unsigned = unsigned;\n        util.free();\n    }\n}\n\n/**\n * Check that an event was encrypted using olm.\n */\nexport function isOlmEncrypted(event: MatrixEvent): boolean {\n    if (!event.getSenderKey()) {\n        logger.error(\"Event has no sender key (not encrypted?)\");\n        return false;\n    }\n    if (\n        event.getWireType() !== EventType.RoomMessageEncrypted ||\n        ![\"m.olm.v1.curve25519-aes-sha2\"].includes(event.getWireContent().algorithm)\n    ) {\n        logger.error(\"Event was not encrypted using an appropriate algorithm\");\n        return false;\n    }\n    return true;\n}\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAEA,OAAOA,WAAW,MAAM,cAAc;AAMtC,SAAiBC,MAAM,QAAQ,cAAc;AAI7C,SAASC,SAAS,QAAQ,oBAAoB;AAE9C,SAASC,cAAc,QAAQ,aAAa;AAAC,IAExCC,SAAS,0BAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAAA,OAATA,SAAS;AAAA,EAATA,SAAS;AAMd;AACA;AACA;AACA,OAAO,IAAMC,aAAa,GAAGD,SAAS,CAACE,GAAG;;AAE1C;AACA;AACA;AACA,OAAO,IAAMC,gBAAgB,GAAGH,SAAS,CAACI,MAAM;;AAEhD;AACA;AACA;AACA,OAAO,IAAMC,uBAAuB,GAAGL,SAAS,CAACM,YAAY;AAS7D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsBC,uBAAuBA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,wBAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AA2D5C,SAAAF,yBAAA;EAAAA,wBAAA,GAAAG,iBAAA,CA3DM,WACHC,aAAuC,EACvCC,SAAiB,EACjBC,WAA+B,EAC/BC,SAAoB,EACpBC,eAAuB,EACvBC,eAA2B,EAC3BC,aAAkC,EACrB;IACb,IAAMC,SAAS,GAAGF,eAAe,CAACG,cAAc,CAAC,CAAC;IAClD,IAAMC,SAAS,SAASN,SAAS,CAACO,qBAAqB,CAACH,SAAS,CAAC;IAClE,IAAIE,SAAS,KAAK,IAAI,EAAE;MACpB;MACA;MACA/B,MAAM,CAACiC,GAAG,CACN,+EAAAC,MAAA,CACOR,eAAe,OAAAQ,MAAA,CAAIP,eAAe,CAACQ,QAAQ,CACtD,CAAC;MACD;IACJ;IAEAnC,MAAM,CAACiC,GAAG,CACN,sDAAAC,MAAA,CAAsDH,SAAS,uBAAAG,MAAA,CACxDR,eAAe,OAAAQ,MAAA,CAAIP,eAAe,CAACQ,QAAQ,CACtD,CAAC;IAED,IAAMC,OAAO,GAAAC,aAAA;MACTC,MAAM,EAAEf,SAAS;MACjB;MACAgB,aAAa,EAAEf,WAAW;MAE1B;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACAgB,IAAI,EAAE;QACFC,OAAO,EAAEhB,SAAS,CAACiB;MACvB,CAAC;MAED;MACA;MACA;MACAC,SAAS,EAAEjB,eAAe;MAC1BkB,cAAc,EAAE;QACZH,OAAO,EAAEd,eAAe,CAACkB,cAAc,CAAC;MAC5C;IAAC,GACEjB,aAAa,CACnB;;IAED;IACA;IACA;IACA;;IAEAN,aAAa,CAACO,SAAS,CAAC,SAASJ,SAAS,CAACqB,cAAc,CAACjB,SAAS,EAAEE,SAAS,EAAEgB,IAAI,CAACC,SAAS,CAACZ,OAAO,CAAC,CAAC;EAC5G,CAAC;EAAA,OAAAlB,wBAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAOD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsB6B,sBAAsBA,CAAAC,GAAA,EAAAC,GAAA,EAAAC,IAAA;EAAA,OAAAC,uBAAA,CAAAlC,KAAA,OAAAC,SAAA;AAAA;;AAqC5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAnBA,SAAAiC,wBAAA;EAAAA,uBAAA,GAAAhC,iBAAA,CArCO,WACHI,SAAoB,EACpB6B,QAAsB,EACtBC,aAA2C,EACwC;IACnF;IACA,IAAMC,qBAA2D,GAAG,IAAItD,cAAc,CAAC,MAAM,EAAE,CAAC;IAChG;IACA,IAAMuD,QAAkE,GAAG,IAAIvD,cAAc,CAAC,MAAM,IAAIwD,GAAG,CAAC,CAAC,CAAC;IAE9G,IAAMC,QAAyB,GAAG,EAAE;IAAC,IAAAC,KAAA,aAAAA,MAAAC,MAAA,EAE0B;MAAA,IAAAC,MAAA,aAAAA,OAAAC,UAAA,EACzB;QAC9B,IAAM5B,QAAQ,GAAG4B,UAAU,CAAC5B,QAAQ;QACpC,IAAM6B,GAAG,GAAGD,UAAU,CAACjC,cAAc,CAAC,CAAC;QACvC6B,QAAQ,CAACM,IAAI,CACT5C,iBAAA,CAAC,aAA2B;UACxB,IAAMU,SAAS,SAASN,SAAS,CAACO,qBAAqB,CAACgC,GAAG,EAAE,IAAI,CAAC;UAClE,IAAIjC,SAAS,KAAK,IAAI,EAAE;YACpByB,qBAAqB,CAACU,WAAW,CAACL,MAAM,CAAC,CAACI,IAAI,CAACF,UAAU,CAAC;UAC9D,CAAC,MAAM;YACHN,QAAQ,CAACS,WAAW,CAACL,MAAM,CAAC,CAACM,GAAG,CAAChC,QAAQ,EAAE;cACvCiC,MAAM,EAAEL,UAAU;cAClBhC,SAAS,EAAEA;YACf,CAAC,CAAC;UACN;QACJ,CAAC,EAAE,CACP,CAAC;MACL,CAAC;MAhBD,KAAK,IAAMgC,UAAU,IAAIM,OAAO;QAAA,OAAAP,MAAA,CAAAC,UAAA;MAAA;IAiBpC,CAAC;IAlBD,KAAK,IAAM,CAACF,MAAM,EAAEQ,OAAO,CAAC,IAAIC,MAAM,CAACC,OAAO,CAAChB,aAAa,CAAC;MAAA,OAAAK,KAAA,CAAAC,MAAA;IAAA;IAoB7D,MAAMW,OAAO,CAACC,GAAG,CAACd,QAAQ,CAAC;IAE3B,OAAO,CAACH,qBAAqB,EAAEC,QAAQ,CAAC;EAC5C,CAAC;EAAA,OAAAJ,uBAAA,CAAAlC,KAAA,OAAAC,SAAA;AAAA;AAsBD,gBAAsBsD,2BAA2BA,CAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,4BAAA,CAAA3D,KAAA,OAAAC,SAAA;AAAA;AA8KhD,SAAA0D,6BAAA;EAAAA,4BAAA,GAAAzD,iBAAA,CA9KM,WACHI,SAAoB,EACpB6B,QAAsB,EACtBC,aAAwC,EAKY;IAAA,IAJpDwB,KAAK,GAAA3D,SAAA,CAAA4D,MAAA,QAAA5D,SAAA,QAAA6D,SAAA,GAAA7D,SAAA,MAAG,KAAK;IAAA,IACb8D,UAAmB,GAAA9D,SAAA,CAAA4D,MAAA,OAAA5D,SAAA,MAAA6D,SAAA;IAAA,IACnBE,aAAwB,GAAA/D,SAAA,CAAA4D,MAAA,OAAA5D,SAAA,MAAA6D,SAAA;IAAA,IACxBhD,GAAW,GAAAb,SAAA,CAAA4D,MAAA,QAAA5D,SAAA,QAAA6D,SAAA,GAAA7D,SAAA,MAAGpB,MAAM;IAEpB,IAAMwD,qBAAyC,GAAG;MAC9C;IAAA,CACH;IACD;IACA,IAAM4B,MAAqD,GAAG,IAAI1B,GAAG,CAAC,CAAC;IACvE;IACA,IAAM2B,cAAyD,GAAG,IAAI3B,GAAG,CAAC,CAAC;;IAE3E;IACA;IACA;IACA;IACA;IACA,KAAK,IAAMW,OAAO,IAAId,aAAa,CAAC+B,MAAM,CAAC,CAAC,EAAE;MAAA,IAAAC,MAAA,aAAAA,OAAA,EACR;QAC9B,IAAMvB,GAAG,GAAGD,UAAU,CAACjC,cAAc,CAAC,CAAC;QAEvC,IAAIkC,GAAG,KAAKvC,SAAS,CAAC+D,mBAAmB,EAAE;UACvC;UACA;UAAA;QAEJ;QAEA,IAAI,CAAC/D,SAAS,CAACgE,kBAAkB,CAACzB,GAAG,CAAC,EAAE;UACpC;UACA;UACA;UACAvC,SAAS,CAACgE,kBAAkB,CAACzB,GAAG,CAAC,GAAG,IAAIQ,OAAO,CAAEkB,OAAO,IAAK;YACzDL,cAAc,CAAClB,GAAG,CAACH,GAAG,EAAG2B,CAAM,IAAW;cACtC,OAAOlE,SAAS,CAACgE,kBAAkB,CAACzB,GAAG,CAAC;cACxC0B,OAAO,CAACC,CAAC,CAAC;YACd,CAAC,CAAC;UACN,CAAC,CAAC;QACN;MACJ,CAAC;MApBD,KAAK,IAAM5B,UAAU,IAAIM,OAAO;QAAA,WAAAkB,MAAA,IAMxB;MAAS;IAerB;IAEA,KAAK,IAAM,CAAC1B,MAAM,EAAEQ,QAAO,CAAC,IAAId,aAAa,EAAE;MAC3C,IAAMqC,aAAa,GAAG,IAAIlC,GAAG,CAAC,CAAC;MAC/B0B,MAAM,CAACjB,GAAG,CAACN,MAAM,EAAE+B,aAAa,CAAC;MAEjC,KAAK,IAAM7B,WAAU,IAAIM,QAAO,EAAE;QAC9B,IAAMlC,QAAQ,GAAG4B,WAAU,CAAC5B,QAAQ;QACpC,IAAM6B,GAAG,GAAGD,WAAU,CAACjC,cAAc,CAAC,CAAC;QAEvC,IAAIkC,GAAG,KAAKvC,SAAS,CAAC+D,mBAAmB,EAAE;UACvC;UACA;UACA;UACA;UACA;UACA;UACA;UACAvD,GAAG,CAAC4D,IAAI,CAAC,mDAAmD,CAAC;UAC7D;UACA;UACAD,aAAa,CAACzB,GAAG,CAAChC,QAAQ,EAAE;YACxBiC,MAAM,EAAEL,WAAU;YAClBhC,SAAS,EAAE;UACf,CAAC,CAAC;UACF;QACJ;QAEA,IAAM+D,OAAO,UAAA5D,MAAA,CAAU8B,GAAG,QAAA9B,MAAA,CAAK2B,MAAM,OAAA3B,MAAA,CAAIC,QAAQ,MAAG;QACpD,IAAMJ,SAAS,SAASN,SAAS,CAACO,qBAAqB,CAACgC,GAAG,EAAE,CAAC,CAACqB,cAAc,CAACU,GAAG,CAAC/B,GAAG,CAAC,EAAE/B,GAAG,CAAC;QAC5F,IAAM+D,gBAAgB,GAAGX,cAAc,CAACU,GAAG,CAAC/B,GAAG,CAAC;QAChD,IAAIjC,SAAS,KAAK,IAAI,IAAIiE,gBAAgB,EAAE;UACxC;UACA;UACA;UACAA,gBAAgB,CAAC,CAAC;QACtB;QACA,IAAIjE,SAAS,KAAK,IAAI,IAAIgD,KAAK,EAAE;UAC7B,IAAIA,KAAK,EAAE;YACP9C,GAAG,CAAC4D,IAAI,4BAAA3D,MAAA,CAA4B4D,OAAO,CAAE,CAAC;UAClD,CAAC,MAAM;YACH7D,GAAG,CAAC4D,IAAI,2BAAA3D,MAAA,CAA2B4D,OAAO,CAAE,CAAC;UACjD;UACAtC,qBAAqB,CAACS,IAAI,CAAC,CAACJ,MAAM,EAAE1B,QAAQ,CAAC,CAAC;QAClD;QACAyD,aAAa,CAACzB,GAAG,CAAChC,QAAQ,EAAE;UACxBiC,MAAM,EAAEL,WAAU;UAClBhC,SAAS,EAAEA;QACf,CAAC,CAAC;MACN;IACJ;IAEA,IAAIyB,qBAAqB,CAACwB,MAAM,KAAK,CAAC,EAAE;MACpC,OAAOI,MAAM;IACjB;IAEA,IAAMa,mBAAmB,GAAG,mBAAmB;IAC/C,IAAIC,GAAqB;IACzB,IAAIC,UAAU,wBAAAjE,MAAA,CAAwBsB,qBAAqB,CAACwB,MAAM,aAAU;IAC5E,IAAI;MACA/C,GAAG,CAACmE,KAAK,aAAAlE,MAAA,CAAaiE,UAAU,CAAE,CAAC;MACnCD,GAAG,SAAS5C,QAAQ,CAAC+C,gBAAgB,CAAC7C,qBAAqB,EAAEyC,mBAAmB,EAAEf,UAAU,CAAC;MAC7FjD,GAAG,CAACmE,KAAK,YAAAlE,MAAA,CAAYiE,UAAU,CAAE,CAAC;IACtC,CAAC,CAAC,OAAOG,CAAC,EAAE;MACR,KAAK,IAAMC,QAAQ,IAAIlB,cAAc,CAACC,MAAM,CAAC,CAAC,EAAE;QAC5CiB,QAAQ,CAAC,CAAC;MACd;MACAtE,GAAG,CAACmE,KAAK,oBAAAlE,MAAA,CAAoBiE,UAAU,GAAIG,CAAC,EAAE9C,qBAAqB,CAAC;MACpE,MAAM8C,CAAC;IACX;IAEA,IAAInB,aAAa,IAAI,UAAU,IAAIe,GAAG,EAAE;MACpCf,aAAa,CAAClB,IAAI,CAAC,GAAGK,MAAM,CAAC9B,IAAI,CAAC0D,GAAG,CAACM,QAAQ,CAAC,CAAC;IACpD;IAEA,IAAMC,SAAS,GAAGP,GAAG,CAACQ,aAAa,IAAK,CAAC,CAAuC;IAChF,IAAM/C,QAAyB,GAAG,EAAE;IAAC,IAAAgD,MAAA,aAAAA,OAAAC,OAAA,EACU;MAC3C,IAAMC,OAAO,GAAGJ,SAAS,CAAC5C,OAAM,CAAC,IAAI,CAAC,CAAC;MAAC,IAAAiD,MAAA,aAAAA,OAAA,EACN;UAAA,IAAAC,WAAA;UAC9B,IAAM5E,QAAQ,GAAG4B,YAAU,CAAC5B,QAAQ;UACpC,IAAM6B,GAAG,GAAGD,YAAU,CAACjC,cAAc,CAAC,CAAC;UAEvC,IAAIkC,GAAG,KAAKvC,SAAS,CAAC+D,mBAAmB,EAAE;YACvC;YACA;YACA;YAAA;UAEJ;UAEA,IAAI,CAAAuB,WAAA,GAAA3B,MAAM,CAACW,GAAG,CAAClC,OAAM,CAAC,cAAAkD,WAAA,gBAAAA,WAAA,GAAlBA,WAAA,CAAoBhB,GAAG,CAAC5D,QAAQ,CAAC,cAAA4E,WAAA,eAAjCA,WAAA,CAAmChF,SAAS,IAAI,CAACgD,KAAK,EAAE;YACxD;YAAA;UAEJ;UAEA,IAAMiC,SAAS,GAAGH,OAAO,CAAC1E,QAAQ,CAAC,IAAI,CAAC,CAAC;UACzC,IAAI8E,UAA8B,GAAG,IAAI;UACzC,KAAK,IAAMC,KAAK,IAAIF,SAAS,EAAE;YAC3B,IAAIE,KAAK,CAACC,OAAO,CAAClB,mBAAmB,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE;cAChDgB,UAAU,GAAGD,SAAS,CAACE,KAAK,CAAC;YACjC;UACJ;UAEA,IAAI,CAACD,UAAU,EAAE;YAAA,IAAAG,mBAAA;YACbnF,GAAG,CAACoF,IAAI,CAAC,yBAAAnF,MAAA,CAAyB+D,mBAAmB,wBAAA/D,MAAA,CAAqB2B,OAAM,OAAA3B,MAAA,CAAIC,QAAQ,CAAE,CAAC;YAC/F,CAAAiF,mBAAA,GAAA/B,cAAc,CAACU,GAAG,CAAC/B,GAAG,CAAC,cAAAoD,mBAAA,eAAvBA,mBAAA,CAA0B,CAAC;YAAC;UAEhC;UAEAzD,QAAQ,CAACM,IAAI,CACTqD,yBAAyB,CAAC7F,SAAS,EAAEwF,UAAU,EAAEpD,OAAM,EAAEE,YAAU,CAAC,CAACwD,IAAI,CACpEC,GAAG,IAAK;YAAA,IAAAC,oBAAA,EAAAC,YAAA;YACL,CAAAD,oBAAA,GAAApC,cAAc,CAACU,GAAG,CAAC/B,GAAG,CAAC,cAAAyD,oBAAA,eAAvBA,oBAAA,CAA0BD,GAAG,aAAHA,GAAG,cAAHA,GAAG,GAAIvC,SAAS,CAAC;YAC3C,IAAMlB,UAAU,IAAA2D,YAAA,GAAGtC,MAAM,CAACW,GAAG,CAAClC,OAAM,CAAC,cAAA6D,YAAA,uBAAlBA,YAAA,CAAoB3B,GAAG,CAAC5D,QAAQ,CAAC;YACpD,IAAI4B,UAAU,EAAEA,UAAU,CAAChC,SAAS,GAAGyF,GAAG;UAC9C,CAAC,EACAlB,CAAC,IAAK;YAAA,IAAAqB,oBAAA;YACH,CAAAA,oBAAA,GAAAtC,cAAc,CAACU,GAAG,CAAC/B,GAAG,CAAC,cAAA2D,oBAAA,eAAvBA,oBAAA,CAA0B,CAAC;YAC3B,MAAMrB,CAAC;UACX,CACJ,CACJ,CAAC;QACL,CAAC;QAAAsB,IAAA;MA3CD,KAAK,IAAM7D,YAAU,IAAIM,SAAO;QAAAuD,IAAA,UAAAd,MAAA;QAAA,IAAAc,IAAA,QAQxB;MAAS;IAoCrB,CAAC;IA9CD,KAAK,IAAM,CAAC/D,OAAM,EAAEQ,SAAO,CAAC,IAAId,aAAa;MAAA,OAAAoD,MAAA,CAAAC,OAAA;IAAA;IAgD7CT,UAAU,uBAAAjE,MAAA,CAAuByB,QAAQ,CAACqB,MAAM,aAAU;IAC1D/C,GAAG,CAACmE,KAAK,aAAAlE,MAAA,CAAaiE,UAAU,CAAE,CAAC;IACnC,MAAM3B,OAAO,CAACC,GAAG,CAACd,QAAQ,CAAC;IAC3B1B,GAAG,CAACmE,KAAK,YAAAlE,MAAA,CAAYiE,UAAU,CAAE,CAAC;IAClC,OAAOf,MAAM;EACjB,CAAC;EAAA,OAAAN,4BAAA,CAAA3D,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEckG,yBAAyBA,CAAAO,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,0BAAA,CAAA9G,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAA6G,2BAAA;EAAAA,0BAAA,GAAA5G,iBAAA,CAAxC,WACII,SAAoB,EACpBwF,UAAuB,EACvBpD,MAAc,EACdE,UAAsB,EACA;IACtB,IAAM5B,QAAQ,GAAG4B,UAAU,CAAC5B,QAAQ;IACpC,IAAI;MACA,MAAM+F,eAAe,CAACzG,SAAS,EAAEwF,UAAU,EAAEpD,MAAM,EAAE1B,QAAQ,EAAE4B,UAAU,CAAClB,cAAc,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,OAAOyD,CAAC,EAAE;MACRtG,MAAM,CAACmI,KAAK,CAAC,wDAAwD,GAAGtE,MAAM,GAAG,GAAG,GAAG1B,QAAQ,GAAG,GAAG,EAAEmE,CAAC,CAAC;MACzG,OAAO,IAAI;IACf;IAEA,IAAIkB,GAAG;IACP,IAAI;MACAA,GAAG,SAAS/F,SAAS,CAAC2G,qBAAqB,CAACrE,UAAU,CAACjC,cAAc,CAAC,CAAC,EAAEmF,UAAU,CAACjD,GAAG,CAAC;IAC5F,CAAC,CAAC,OAAOsC,CAAC,EAAE;MACR;MACAtG,MAAM,CAACmI,KAAK,CAAC,yCAAyC,GAAGtE,MAAM,GAAG,GAAG,GAAG1B,QAAQ,GAAG,IAAI,GAAGmE,CAAC,CAAC;MAC5F,OAAO,IAAI;IACf;IAEAtG,MAAM,CAACiC,GAAG,CAAC,4BAA4B,GAAGuF,GAAG,GAAG,cAAc,GAAG3D,MAAM,GAAG,GAAG,GAAG1B,QAAQ,CAAC;IACzF,OAAOqF,GAAG;EACd,CAAC;EAAA,OAAAS,0BAAA,CAAA9G,KAAA,OAAAC,SAAA;AAAA;AAOD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsB8G,eAAeA,CAAAG,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,gBAAA,CAAAvH,KAAA,OAAAC,SAAA;AAAA;;AA0BrC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AATA,SAAAsH,iBAAA;EAAAA,gBAAA,GAAArH,iBAAA,CA1BO,WACHI,SAAoB,EACpBkH,GAA0B,EAC1BC,aAAqB,EACrBC,eAAuB,EACvBC,UAAkB,EACL;IACb,IAAMC,SAAS,GAAG,UAAU,GAAGF,eAAe;IAC9C,IAAMG,UAAU,GAAGL,GAAG,CAACK,UAAU,IAAI,CAAC,CAAC;IACvC,IAAMC,QAAQ,GAAGD,UAAU,CAACJ,aAAa,CAAC,IAAI,CAAC,CAAC;IAChD,IAAMM,SAAS,GAAGD,QAAQ,CAACF,SAAS,CAAC;IACrC,IAAI,CAACG,SAAS,EAAE;MACZ,MAAMC,KAAK,CAAC,cAAc,CAAC;IAC/B;;IAEA;IACA,IAAMC,UAAU,GAAG9E,MAAM,CAAC+E,MAAM,CAAC,CAAC,CAAC,EAAEV,GAAG,CAAC;IACzC,IAAI,UAAU,IAAIS,UAAU,EAAE;MAC1B,OAAOA,UAAU,CAACE,QAAQ;IAC9B;IACA,OAAOF,UAAU,CAACJ,UAAU;IAC5B,IAAMO,IAAI,GAAGxJ,WAAW,CAACiD,SAAS,CAACoG,UAAU,CAAC;IAE9C3H,SAAS,CAACyG,eAAe,CAACY,UAAU,EAAES,IAAI,EAAEL,SAAS,CAAC;EAC1D,CAAC;EAAA,OAAAR,gBAAA,CAAAvH,KAAA,OAAAC,SAAA;AAAA;AAYD,OAAO,SAASoI,MAAMA,CAACb,GAAqB,EAAE3E,GAA2B,EAAEH,MAAc,EAAE4F,MAAc,EAAU;EAC/G,IAAIC,UAAU,GAAG,KAAK;EACtB,IAAI1F,GAAG,YAAY2F,UAAU,EAAE;IAC3B,IAAMC,MAAM,GAAG,IAAIC,UAAU,CAACxJ,GAAG,CAACyJ,SAAS,CAAC,CAAC;IAC7CL,MAAM,GAAGG,MAAM,CAACG,cAAc,CAAC/F,GAAG,CAAC;IACnCA,GAAG,GAAG4F,MAAM;IACZF,UAAU,GAAG,IAAI;EACrB;EACA,IAAMM,IAAI,GAAGrB,GAAG,CAACK,UAAU,IAAI,CAAC,CAAC;EACjC,OAAOL,GAAG,CAACK,UAAU;EACrB,IAAMM,QAAQ,GAAGX,GAAG,CAACW,QAAQ;EAC7B,IAAIX,GAAG,CAACW,QAAQ,EAAE,OAAOX,GAAG,CAACW,QAAQ;EACrC,IAAI;IACA,IAAMW,MAAM,GAAGD,IAAI,CAACnG,MAAM,CAAC,IAAI,CAAC,CAAC;IACjCmG,IAAI,CAACnG,MAAM,CAAC,GAAGoG,MAAM;IAErB,OAAQA,MAAM,CAAC,UAAU,GAAGR,MAAM,CAAC,GAAGzF,GAAG,CAACkG,IAAI,CAACnK,WAAW,CAACiD,SAAS,CAAC2F,GAAG,CAAC,CAAC;EAC9E,CAAC,SAAS;IACNA,GAAG,CAACK,UAAU,GAAGgB,IAAI;IACrB,IAAIV,QAAQ,EAAEX,GAAG,CAACW,QAAQ,GAAGA,QAAQ;IACrC,IAAII,UAAU,EAAE;MACZ1F,GAAG,CAACmG,IAAI,CAAC,CAAC;IACd;EACJ;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,QAAQA,CAACzB,GAAY,EAAEc,MAAc,EAAE5F,MAAc,EAAQ;EACzE,IAAMqD,KAAK,GAAG,UAAU,GAAGuC,MAAM;EACjC,IAAI,EAAEd,GAAG,CAACK,UAAU,IAAIL,GAAG,CAACK,UAAU,CAACnF,MAAM,CAAC,IAAI8E,GAAG,CAACK,UAAU,CAACnF,MAAM,CAAC,CAACqD,KAAK,CAAC,CAAC,EAAE;IAC9E,MAAM,IAAIiC,KAAK,CAAC,cAAc,CAAC;EACnC;EACA,IAAMD,SAAS,GAAGP,GAAG,CAACK,UAAU,CAACnF,MAAM,CAAC,CAACqD,KAAK,CAAC;EAC/C,IAAMmD,IAAI,GAAG,IAAIR,UAAU,CAACxJ,GAAG,CAACiK,OAAO,CAAC,CAAC;EACzC,IAAMN,IAAI,GAAGrB,GAAG,CAACK,UAAU;EAC3B,OAAOL,GAAG,CAACK,UAAU;EACrB,IAAMM,QAAQ,GAAGX,GAAG,CAACW,QAAQ;EAC7B,IAAIX,GAAG,CAACW,QAAQ,EAAE,OAAOX,GAAG,CAACW,QAAQ;EACrC,IAAI;IACAe,IAAI,CAACE,cAAc,CAACd,MAAM,EAAE1J,WAAW,CAACiD,SAAS,CAAC2F,GAAG,CAAC,EAAEO,SAAS,CAAC;EACtE,CAAC,SAAS;IACNP,GAAG,CAACK,UAAU,GAAGgB,IAAI;IACrB,IAAIV,QAAQ,EAAEX,GAAG,CAACW,QAAQ,GAAGA,QAAQ;IACrCe,IAAI,CAACF,IAAI,CAAC,CAAC;EACf;AACJ;;AAEA;AACA;AACA;AACA,OAAO,SAASK,cAAcA,CAACC,KAAkB,EAAW;EACxD,IAAI,CAACA,KAAK,CAACC,YAAY,CAAC,CAAC,EAAE;IACvB1K,MAAM,CAACmI,KAAK,CAAC,0CAA0C,CAAC;IACxD,OAAO,KAAK;EAChB;EACA,IACIsC,KAAK,CAACE,WAAW,CAAC,CAAC,KAAK1K,SAAS,CAAC2K,oBAAoB,IACtD,CAAC,CAAC,8BAA8B,CAAC,CAACC,QAAQ,CAACJ,KAAK,CAACK,cAAc,CAAC,CAAC,CAACC,SAAS,CAAC,EAC9E;IACE/K,MAAM,CAACmI,KAAK,CAAC,wDAAwD,CAAC;IACtE,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf","ignoreList":[]}

package/lib/crypto/recoverykey.d.ts

@@ -0,0 +1,2 @@
+export * from "../crypto-api/recovery-key.ts";
+//# sourceMappingURL=recoverykey.d.ts.map

package/lib/crypto/recoverykey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoverykey.d.ts","sourceRoot":"","sources":["../../src/crypto/recoverykey.ts"],"names":[],"mappings":"AAiBA,cAAc,+BAA+B,CAAC"}

package/lib/crypto/recoverykey.js

@@ -0,0 +1,19 @@
+/*
+Copyright 2018 New Vector Ltd
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Re-export to avoid breaking changes
+export * from "../crypto-api/recovery-key.js";
+//# sourceMappingURL=recoverykey.js.map

package/lib/crypto/recoverykey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoverykey.js","names":[],"sources":["../../src/crypto/recoverykey.ts"],"sourcesContent":["/*\nCopyright 2018 New Vector Ltd\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n// Re-export to avoid breaking changes\nexport * from \"../crypto-api/recovery-key.ts\";\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,cAAc,+BAA+B","ignoreList":[]}