@unwanted/matrix-sdk-mini 34.12.0-1

package/lib/crypto/verification/SAS.js

@@ -0,0 +1,485 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+import _defineProperty from "@babel/runtime/helpers/defineProperty";
+/*
+Copyright 2018 - 2021 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+/**
+ * Short Authentication String (SAS) verification.
+ */
+
+import anotherjson from "another-json";
+import { VerificationBase as Base, SwitchStartEventError } from "./Base.js";
+import { errorFactory, newInvalidMessageError, newKeyMismatchError, newUnknownMethodError, newUserCancelledError } from "./Error.js";
+import { logger } from "../../logger.js";
+import { generateDecimalSas } from "./SASDecimal.js";
+import { EventType } from "../../@types/event.js";
+import { VerifierEvent } from "../../crypto-api/verification.js";
+import { VerificationMethod } from "../../types.js";
+
+// backwards-compatibility exports
+
+var START_TYPE = EventType.KeyVerificationStart;
+var EVENTS = [EventType.KeyVerificationAccept, EventType.KeyVerificationKey, EventType.KeyVerificationMac];
+var olmutil;
+var newMismatchedSASError = errorFactory("m.mismatched_sas", "Mismatched short authentication string");
+var newMismatchedCommitmentError = errorFactory("m.mismatched_commitment", "Mismatched commitment");
+
+// This list was generated from the data in the Matrix specification [1] with the following command:
+//
+//    jq  -r '.[] |  "    [\"" + .emoji + "\", \"" + (.description|ascii_downcase) + "\"], // " + (.number|tostring)' sas-emoji.json
+//
+// [1]: https://github.com/matrix-org/matrix-spec/blob/main/data-definitions/sas-emoji.json
+var emojiMapping = [["🐶", "dog"],
+// 0
+["🐱", "cat"],
+// 1
+["🦁", "lion"],
+// 2
+["🐎", "horse"],
+// 3
+["🦄", "unicorn"],
+// 4
+["🐷", "pig"],
+// 5
+["🐘", "elephant"],
+// 6
+["🐰", "rabbit"],
+// 7
+["🐼", "panda"],
+// 8
+["🐓", "rooster"],
+// 9
+["🐧", "penguin"],
+// 10
+["🐢", "turtle"],
+// 11
+["🐟", "fish"],
+// 12
+["🐙", "octopus"],
+// 13
+["🦋", "butterfly"],
+// 14
+["🌷", "flower"],
+// 15
+["🌳", "tree"],
+// 16
+["🌵", "cactus"],
+// 17
+["🍄", "mushroom"],
+// 18
+["🌏", "globe"],
+// 19
+["🌙", "moon"],
+// 20
+["☁️", "cloud"],
+// 21
+["🔥", "fire"],
+// 22
+["🍌", "banana"],
+// 23
+["🍎", "apple"],
+// 24
+["🍓", "strawberry"],
+// 25
+["🌽", "corn"],
+// 26
+["🍕", "pizza"],
+// 27
+["🎂", "cake"],
+// 28
+["❤️", "heart"],
+// 29
+["😀", "smiley"],
+// 30
+["🤖", "robot"],
+// 31
+["🎩", "hat"],
+// 32
+["👓", "glasses"],
+// 33
+["🔧", "spanner"],
+// 34
+["🎅", "santa"],
+// 35
+["👍", "thumbs up"],
+// 36
+["☂️", "umbrella"],
+// 37
+["⌛", "hourglass"],
+// 38
+["⏰", "clock"],
+// 39
+["🎁", "gift"],
+// 40
+["💡", "light bulb"],
+// 41
+["📕", "book"],
+// 42
+["✏️", "pencil"],
+// 43
+["📎", "paperclip"],
+// 44
+["✂️", "scissors"],
+// 45
+["🔒", "lock"],
+// 46
+["🔑", "key"],
+// 47
+["🔨", "hammer"],
+// 48
+["☎️", "telephone"],
+// 49
+["🏁", "flag"],
+// 50
+["🚂", "train"],
+// 51
+["🚲", "bicycle"],
+// 52
+["✈️", "aeroplane"],
+// 53
+["🚀", "rocket"],
+// 54
+["🏆", "trophy"],
+// 55
+["⚽", "ball"],
+// 56
+["🎸", "guitar"],
+// 57
+["🎺", "trumpet"],
+// 58
+["🔔", "bell"],
+// 59
+["⚓", "anchor"],
+// 60
+["🎧", "headphones"],
+// 61
+["📁", "folder"],
+// 62
+["📌", "pin"] // 63
+];
+function generateEmojiSas(sasBytes) {
+  var emojis = [
+  // just like base64 encoding
+  sasBytes[0] >> 2, (sasBytes[0] & 0x3) << 4 | sasBytes[1] >> 4, (sasBytes[1] & 0xf) << 2 | sasBytes[2] >> 6, sasBytes[2] & 0x3f, sasBytes[3] >> 2, (sasBytes[3] & 0x3) << 4 | sasBytes[4] >> 4, (sasBytes[4] & 0xf) << 2 | sasBytes[5] >> 6];
+  return emojis.map(num => emojiMapping[num]);
+}
+var sasGenerators = {
+  decimal: generateDecimalSas,
+  emoji: generateEmojiSas
+};
+function generateSas(sasBytes, methods) {
+  var sas = {};
+  for (var method of methods) {
+    if (method in sasGenerators) {
+      // @ts-ignore - ts doesn't like us mixing types like this
+      sas[method] = sasGenerators[method](Array.from(sasBytes));
+    }
+  }
+  return sas;
+}
+var macMethods = {
+  "hkdf-hmac-sha256": "calculate_mac",
+  "org.matrix.msc3783.hkdf-hmac-sha256": "calculate_mac_fixed_base64",
+  "hkdf-hmac-sha256.v2": "calculate_mac_fixed_base64",
+  "hmac-sha256": "calculate_mac_long_kdf"
+};
+function calculateMAC(olmSAS, method) {
+  return function (input, info) {
+    var mac = olmSAS[macMethods[method]](input, info);
+    logger.log("SAS calculateMAC:", method, [input, info], mac);
+    return mac;
+  };
+}
+var calculateKeyAgreement = {
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  "curve25519-hkdf-sha256": function curve25519HkdfSha256(sas, olmSAS, bytes) {
+    var ourInfo = "".concat(sas.baseApis.getUserId(), "|").concat(sas.baseApis.deviceId, "|") + "".concat(sas.ourSASPubKey, "|");
+    var theirInfo = "".concat(sas.userId, "|").concat(sas.deviceId, "|").concat(sas.theirSASPubKey, "|");
+    var sasInfo = "MATRIX_KEY_VERIFICATION_SAS|" + (sas.initiatedByMe ? ourInfo + theirInfo : theirInfo + ourInfo) + sas.channel.transactionId;
+    return olmSAS.generate_bytes(sasInfo, bytes);
+  },
+  "curve25519": function curve25519(sas, olmSAS, bytes) {
+    var ourInfo = "".concat(sas.baseApis.getUserId()).concat(sas.baseApis.deviceId);
+    var theirInfo = "".concat(sas.userId).concat(sas.deviceId);
+    var sasInfo = "MATRIX_KEY_VERIFICATION_SAS" + (sas.initiatedByMe ? ourInfo + theirInfo : theirInfo + ourInfo) + sas.channel.transactionId;
+    return olmSAS.generate_bytes(sasInfo, bytes);
+  }
+};
+/* lists of algorithms/methods that are supported.  The key agreement, hashes,
+ * and MAC lists should be sorted in order of preference (most preferred
+ * first).
+ */
+var KEY_AGREEMENT_LIST = ["curve25519-hkdf-sha256", "curve25519"];
+var HASHES_LIST = ["sha256"];
+var MAC_LIST = ["hkdf-hmac-sha256.v2", "org.matrix.msc3783.hkdf-hmac-sha256", "hkdf-hmac-sha256", "hmac-sha256"];
+var SAS_LIST = Object.keys(sasGenerators);
+var KEY_AGREEMENT_SET = new Set(KEY_AGREEMENT_LIST);
+var HASHES_SET = new Set(HASHES_LIST);
+var MAC_SET = new Set(MAC_LIST);
+var SAS_SET = new Set(SAS_LIST);
+function intersection(anArray, aSet) {
+  return Array.isArray(anArray) ? anArray.filter(x => aSet.has(x)) : [];
+}
+
+/** @deprecated use VerifierEvent */
+
+/** @deprecated use VerifierEvent */
+export var SasEvent = VerifierEvent;
+
+/** @deprecated Avoid referencing this class directly; instead use {@link Crypto.Verifier}. */
+export class SAS extends Base {
+  constructor() {
+    var _this;
+    super(...arguments);
+    _this = this;
+    _defineProperty(this, "waitingForAccept", void 0);
+    _defineProperty(this, "ourSASPubKey", void 0);
+    _defineProperty(this, "theirSASPubKey", void 0);
+    _defineProperty(this, "sasEvent", void 0);
+    _defineProperty(this, "doVerification", /*#__PURE__*/_asyncToGenerator(function* () {
+      yield globalThis.Olm.init();
+      olmutil = olmutil || new globalThis.Olm.Utility();
+
+      // make sure user's keys are downloaded
+      yield _this.baseApis.downloadKeys([_this.userId]);
+      var retry = false;
+      do {
+        try {
+          if (_this.initiatedByMe) {
+            return yield _this.doSendVerification();
+          } else {
+            return yield _this.doRespondVerification();
+          }
+        } catch (err) {
+          if (err instanceof SwitchStartEventError) {
+            // this changes what initiatedByMe returns
+            _this.startEvent = err.startEvent;
+            retry = true;
+          } else {
+            throw err;
+          }
+        }
+      } while (retry);
+    }));
+  }
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  static get NAME() {
+    return VerificationMethod.Sas;
+  }
+  get events() {
+    return EVENTS;
+  }
+  canSwitchStartEvent(event) {
+    if (event.getType() !== START_TYPE) {
+      return false;
+    }
+    var content = event.getContent();
+    return (content === null || content === void 0 ? void 0 : content.method) === SAS.NAME && !!this.waitingForAccept;
+  }
+  sendStart() {
+    var _this2 = this;
+    return _asyncToGenerator(function* () {
+      var startContent = _this2.channel.completeContent(START_TYPE, {
+        method: SAS.NAME,
+        from_device: _this2.baseApis.deviceId,
+        key_agreement_protocols: KEY_AGREEMENT_LIST,
+        hashes: HASHES_LIST,
+        message_authentication_codes: MAC_LIST,
+        // FIXME: allow app to specify what SAS methods can be used
+        short_authentication_string: SAS_LIST
+      });
+      yield _this2.channel.sendCompleted(START_TYPE, startContent);
+      return startContent;
+    })();
+  }
+  verifyAndCheckMAC(keyAgreement, sasMethods, olmSAS, macMethod) {
+    var _this3 = this;
+    return _asyncToGenerator(function* () {
+      var sasBytes = calculateKeyAgreement[keyAgreement](_this3, olmSAS, 6);
+      var verifySAS = new Promise((resolve, reject) => {
+        _this3.sasEvent = {
+          sas: generateSas(sasBytes, sasMethods),
+          confirm: function () {
+            var _confirm = _asyncToGenerator(function* () {
+              try {
+                yield _this3.sendMAC(olmSAS, macMethod);
+                resolve();
+              } catch (err) {
+                reject(err);
+              }
+            });
+            function confirm() {
+              return _confirm.apply(this, arguments);
+            }
+            return confirm;
+          }(),
+          cancel: () => reject(newUserCancelledError()),
+          mismatch: () => reject(newMismatchedSASError())
+        };
+        _this3.emit(SasEvent.ShowSas, _this3.sasEvent);
+      });
+      var [e] = yield Promise.all([_this3.waitForEvent(EventType.KeyVerificationMac).then(e => {
+        // we don't expect any more messages from the other
+        // party, and they may send a m.key.verification.done
+        // when they're done on their end
+        _this3.expectedEvent = EventType.KeyVerificationDone;
+        return e;
+      }), verifySAS]);
+      var content = e.getContent();
+      yield _this3.checkMAC(olmSAS, content, macMethod);
+    })();
+  }
+  doSendVerification() {
+    var _this4 = this;
+    return _asyncToGenerator(function* () {
+      _this4.waitingForAccept = true;
+      var startContent;
+      if (_this4.startEvent) {
+        startContent = _this4.channel.completedContentFromEvent(_this4.startEvent);
+      } else {
+        startContent = yield _this4.sendStart();
+      }
+
+      // we might have switched to a different start event,
+      // but was we didn't call _waitForEvent there was no
+      // call that could throw yet. So check manually that
+      // we're still on the initiator side
+      if (!_this4.initiatedByMe) {
+        throw new SwitchStartEventError(_this4.startEvent);
+      }
+      var e;
+      try {
+        e = yield _this4.waitForEvent(EventType.KeyVerificationAccept);
+      } finally {
+        _this4.waitingForAccept = false;
+      }
+      var content = e.getContent();
+      var sasMethods = intersection(content.short_authentication_string, SAS_SET);
+      if (!(KEY_AGREEMENT_SET.has(content.key_agreement_protocol) && HASHES_SET.has(content.hash) && MAC_SET.has(content.message_authentication_code) && sasMethods.length)) {
+        throw newUnknownMethodError();
+      }
+      if (typeof content.commitment !== "string") {
+        throw newInvalidMessageError();
+      }
+      var keyAgreement = content.key_agreement_protocol;
+      var macMethod = content.message_authentication_code;
+      var hashCommitment = content.commitment;
+      var olmSAS = new globalThis.Olm.SAS();
+      try {
+        _this4.ourSASPubKey = olmSAS.get_pubkey();
+        yield _this4.send(EventType.KeyVerificationKey, {
+          key: _this4.ourSASPubKey
+        });
+        e = yield _this4.waitForEvent(EventType.KeyVerificationKey);
+        // FIXME: make sure event is properly formed
+        content = e.getContent();
+        var commitmentStr = content.key + anotherjson.stringify(startContent);
+        // TODO: use selected hash function (when we support multiple)
+        if (olmutil.sha256(commitmentStr) !== hashCommitment) {
+          throw newMismatchedCommitmentError();
+        }
+        _this4.theirSASPubKey = content.key;
+        olmSAS.set_their_key(content.key);
+        yield _this4.verifyAndCheckMAC(keyAgreement, sasMethods, olmSAS, macMethod);
+      } finally {
+        olmSAS.free();
+      }
+    })();
+  }
+  doRespondVerification() {
+    var _this5 = this;
+    return _asyncToGenerator(function* () {
+      // as m.related_to is not included in the encrypted content in e2e rooms,
+      // we need to make sure it is added
+      var content = _this5.channel.completedContentFromEvent(_this5.startEvent);
+
+      // Note: we intersect using our pre-made lists, rather than the sets,
+      // so that the result will be in our order of preference.  Then
+      // fetching the first element from the array will give our preferred
+      // method out of the ones offered by the other party.
+      var keyAgreement = intersection(KEY_AGREEMENT_LIST, new Set(content.key_agreement_protocols))[0];
+      var hashMethod = intersection(HASHES_LIST, new Set(content.hashes))[0];
+      var macMethod = intersection(MAC_LIST, new Set(content.message_authentication_codes))[0];
+      // FIXME: allow app to specify what SAS methods can be used
+      var sasMethods = intersection(content.short_authentication_string, SAS_SET);
+      if (!(keyAgreement !== undefined && hashMethod !== undefined && macMethod !== undefined && sasMethods.length)) {
+        throw newUnknownMethodError();
+      }
+      var olmSAS = new globalThis.Olm.SAS();
+      try {
+        var commitmentStr = olmSAS.get_pubkey() + anotherjson.stringify(content);
+        yield _this5.send(EventType.KeyVerificationAccept, {
+          key_agreement_protocol: keyAgreement,
+          hash: hashMethod,
+          message_authentication_code: macMethod,
+          short_authentication_string: sasMethods,
+          // TODO: use selected hash function (when we support multiple)
+          commitment: olmutil.sha256(commitmentStr)
+        });
+        var e = yield _this5.waitForEvent(EventType.KeyVerificationKey);
+        // FIXME: make sure event is properly formed
+        content = e.getContent();
+        _this5.theirSASPubKey = content.key;
+        olmSAS.set_their_key(content.key);
+        _this5.ourSASPubKey = olmSAS.get_pubkey();
+        yield _this5.send(EventType.KeyVerificationKey, {
+          key: _this5.ourSASPubKey
+        });
+        yield _this5.verifyAndCheckMAC(keyAgreement, sasMethods, olmSAS, macMethod);
+      } finally {
+        olmSAS.free();
+      }
+    })();
+  }
+  sendMAC(olmSAS, method) {
+    var mac = {};
+    var keyList = [];
+    var baseInfo = "MATRIX_KEY_VERIFICATION_MAC" + this.baseApis.getUserId() + this.baseApis.deviceId + this.userId + this.deviceId + this.channel.transactionId;
+    var deviceKeyId = "ed25519:".concat(this.baseApis.deviceId);
+    mac[deviceKeyId] = calculateMAC(olmSAS, method)(this.baseApis.getDeviceEd25519Key(), baseInfo + deviceKeyId);
+    keyList.push(deviceKeyId);
+    var crossSigningId = this.baseApis.getCrossSigningId();
+    if (crossSigningId) {
+      var crossSigningKeyId = "ed25519:".concat(crossSigningId);
+      mac[crossSigningKeyId] = calculateMAC(olmSAS, method)(crossSigningId, baseInfo + crossSigningKeyId);
+      keyList.push(crossSigningKeyId);
+    }
+    var keys = calculateMAC(olmSAS, method)(keyList.sort().join(","), baseInfo + "KEY_IDS");
+    return this.send(EventType.KeyVerificationMac, {
+      mac,
+      keys
+    });
+  }
+  checkMAC(olmSAS, content, method) {
+    var _this6 = this;
+    return _asyncToGenerator(function* () {
+      var baseInfo = "MATRIX_KEY_VERIFICATION_MAC" + _this6.userId + _this6.deviceId + _this6.baseApis.getUserId() + _this6.baseApis.deviceId + _this6.channel.transactionId;
+      if (content.keys !== calculateMAC(olmSAS, method)(Object.keys(content.mac).sort().join(","), baseInfo + "KEY_IDS")) {
+        throw newKeyMismatchError();
+      }
+      yield _this6.verifyKeys(_this6.userId, content.mac, (keyId, device, keyInfo) => {
+        if (keyInfo !== calculateMAC(olmSAS, method)(device.keys[keyId], baseInfo + keyId)) {
+          throw newKeyMismatchError();
+        }
+      });
+    })();
+  }
+  getShowSasCallbacks() {
+    var _this$sasEvent;
+    return (_this$sasEvent = this.sasEvent) !== null && _this$sasEvent !== void 0 ? _this$sasEvent : null;
+  }
+}
+//# sourceMappingURL=SAS.js.map

package/lib/crypto/verification/SAS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SAS.js","names":["anotherjson","VerificationBase","Base","SwitchStartEventError","errorFactory","newInvalidMessageError","newKeyMismatchError","newUnknownMethodError","newUserCancelledError","logger","generateDecimalSas","EventType","VerifierEvent","VerificationMethod","START_TYPE","KeyVerificationStart","EVENTS","KeyVerificationAccept","KeyVerificationKey","KeyVerificationMac","olmutil","newMismatchedSASError","newMismatchedCommitmentError","emojiMapping","generateEmojiSas","sasBytes","emojis","map","num","sasGenerators","decimal","emoji","generateSas","methods","sas","method","Array","from","macMethods","calculateMAC","olmSAS","input","info","mac","log","calculateKeyAgreement","curve25519HkdfSha256","bytes","ourInfo","concat","baseApis","getUserId","deviceId","ourSASPubKey","theirInfo","userId","theirSASPubKey","sasInfo","initiatedByMe","channel","transactionId","generate_bytes","curve25519","KEY_AGREEMENT_LIST","HASHES_LIST","MAC_LIST","SAS_LIST","Object","keys","KEY_AGREEMENT_SET","Set","HASHES_SET","MAC_SET","SAS_SET","intersection","anArray","aSet","isArray","filter","x","has","SasEvent","SAS","constructor","_this","arguments","this","_defineProperty","_asyncToGenerator","globalThis","Olm","init","Utility","downloadKeys","retry","doSendVerification","doRespondVerification","err","startEvent","NAME","Sas","events","canSwitchStartEvent","event","getType","content","getContent","waitingForAccept","sendStart","_this2","startContent","completeContent","from_device","key_agreement_protocols","hashes","message_authentication_codes","short_authentication_string","sendCompleted","verifyAndCheckMAC","keyAgreement","sasMethods","macMethod","_this3","verifySAS","Promise","resolve","reject","sasEvent","confirm","_confirm","sendMAC","apply","cancel","mismatch","emit","ShowSas","e","all","waitForEvent","then","expectedEvent","KeyVerificationDone","checkMAC","_this4","completedContentFromEvent","key_agreement_protocol","hash","message_authentication_code","length","commitment","hashCommitment","get_pubkey","send","key","commitmentStr","stringify","sha256","set_their_key","free","_this5","hashMethod","undefined","keyList","baseInfo","deviceKeyId","getDeviceEd25519Key","push","crossSigningId","getCrossSigningId","crossSigningKeyId","sort","join","_this6","verifyKeys","keyId","device","keyInfo","getShowSasCallbacks","_this$sasEvent"],"sources":["../../../src/crypto/verification/SAS.ts"],"sourcesContent":["/*\nCopyright 2018 - 2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Short Authentication String (SAS) verification.\n */\n\nimport anotherjson from \"another-json\";\nimport { Utility, SAS as OlmSAS } from \"@matrix-org/olm\";\n\nimport { VerificationBase as Base, SwitchStartEventError } from \"./Base.ts\";\nimport {\n    errorFactory,\n    newInvalidMessageError,\n    newKeyMismatchError,\n    newUnknownMethodError,\n    newUserCancelledError,\n} from \"./Error.ts\";\nimport { logger } from \"../../logger.ts\";\nimport { IContent, MatrixEvent } from \"../../models/event.ts\";\nimport { generateDecimalSas } from \"./SASDecimal.ts\";\nimport { EventType } from \"../../@types/event.ts\";\nimport { EmojiMapping, GeneratedSas, ShowSasCallbacks, VerifierEvent } from \"../../crypto-api/verification.ts\";\nimport { VerificationMethod } from \"../../types.ts\";\n\n// backwards-compatibility exports\nexport type {\n    ShowSasCallbacks as ISasEvent,\n    GeneratedSas as IGeneratedSas,\n    EmojiMapping,\n} from \"../../crypto-api/verification.ts\";\n\nconst START_TYPE = EventType.KeyVerificationStart;\n\nconst EVENTS = [EventType.KeyVerificationAccept, EventType.KeyVerificationKey, EventType.KeyVerificationMac];\n\nlet olmutil: Utility;\n\nconst newMismatchedSASError = errorFactory(\"m.mismatched_sas\", \"Mismatched short authentication string\");\n\nconst newMismatchedCommitmentError = errorFactory(\"m.mismatched_commitment\", \"Mismatched commitment\");\n\n// This list was generated from the data in the Matrix specification [1] with the following command:\n//\n//    jq  -r '.[] |  \"    [\\\"\" + .emoji + \"\\\", \\\"\" + (.description|ascii_downcase) + \"\\\"], // \" + (.number|tostring)' sas-emoji.json\n//\n// [1]: https://github.com/matrix-org/matrix-spec/blob/main/data-definitions/sas-emoji.json\nconst emojiMapping: EmojiMapping[] = [\n    [\"🐶\", \"dog\"], // 0\n    [\"🐱\", \"cat\"], // 1\n    [\"🦁\", \"lion\"], // 2\n    [\"🐎\", \"horse\"], // 3\n    [\"🦄\", \"unicorn\"], // 4\n    [\"🐷\", \"pig\"], // 5\n    [\"🐘\", \"elephant\"], // 6\n    [\"🐰\", \"rabbit\"], // 7\n    [\"🐼\", \"panda\"], // 8\n    [\"🐓\", \"rooster\"], // 9\n    [\"🐧\", \"penguin\"], // 10\n    [\"🐢\", \"turtle\"], // 11\n    [\"🐟\", \"fish\"], // 12\n    [\"🐙\", \"octopus\"], // 13\n    [\"🦋\", \"butterfly\"], // 14\n    [\"🌷\", \"flower\"], // 15\n    [\"🌳\", \"tree\"], // 16\n    [\"🌵\", \"cactus\"], // 17\n    [\"🍄\", \"mushroom\"], // 18\n    [\"🌏\", \"globe\"], // 19\n    [\"🌙\", \"moon\"], // 20\n    [\"☁️\", \"cloud\"], // 21\n    [\"🔥\", \"fire\"], // 22\n    [\"🍌\", \"banana\"], // 23\n    [\"🍎\", \"apple\"], // 24\n    [\"🍓\", \"strawberry\"], // 25\n    [\"🌽\", \"corn\"], // 26\n    [\"🍕\", \"pizza\"], // 27\n    [\"🎂\", \"cake\"], // 28\n    [\"❤️\", \"heart\"], // 29\n    [\"😀\", \"smiley\"], // 30\n    [\"🤖\", \"robot\"], // 31\n    [\"🎩\", \"hat\"], // 32\n    [\"👓\", \"glasses\"], // 33\n    [\"🔧\", \"spanner\"], // 34\n    [\"🎅\", \"santa\"], // 35\n    [\"👍\", \"thumbs up\"], // 36\n    [\"☂️\", \"umbrella\"], // 37\n    [\"⌛\", \"hourglass\"], // 38\n    [\"⏰\", \"clock\"], // 39\n    [\"🎁\", \"gift\"], // 40\n    [\"💡\", \"light bulb\"], // 41\n    [\"📕\", \"book\"], // 42\n    [\"✏️\", \"pencil\"], // 43\n    [\"📎\", \"paperclip\"], // 44\n    [\"✂️\", \"scissors\"], // 45\n    [\"🔒\", \"lock\"], // 46\n    [\"🔑\", \"key\"], // 47\n    [\"🔨\", \"hammer\"], // 48\n    [\"☎️\", \"telephone\"], // 49\n    [\"🏁\", \"flag\"], // 50\n    [\"🚂\", \"train\"], // 51\n    [\"🚲\", \"bicycle\"], // 52\n    [\"✈️\", \"aeroplane\"], // 53\n    [\"🚀\", \"rocket\"], // 54\n    [\"🏆\", \"trophy\"], // 55\n    [\"⚽\", \"ball\"], // 56\n    [\"🎸\", \"guitar\"], // 57\n    [\"🎺\", \"trumpet\"], // 58\n    [\"🔔\", \"bell\"], // 59\n    [\"⚓\", \"anchor\"], // 60\n    [\"🎧\", \"headphones\"], // 61\n    [\"📁\", \"folder\"], // 62\n    [\"📌\", \"pin\"], // 63\n];\n\nfunction generateEmojiSas(sasBytes: number[]): EmojiMapping[] {\n    const emojis = [\n        // just like base64 encoding\n        sasBytes[0] >> 2,\n        ((sasBytes[0] & 0x3) << 4) | (sasBytes[1] >> 4),\n        ((sasBytes[1] & 0xf) << 2) | (sasBytes[2] >> 6),\n        sasBytes[2] & 0x3f,\n        sasBytes[3] >> 2,\n        ((sasBytes[3] & 0x3) << 4) | (sasBytes[4] >> 4),\n        ((sasBytes[4] & 0xf) << 2) | (sasBytes[5] >> 6),\n    ];\n\n    return emojis.map((num) => emojiMapping[num]);\n}\n\nconst sasGenerators = {\n    decimal: generateDecimalSas,\n    emoji: generateEmojiSas,\n} as const;\n\nfunction generateSas(sasBytes: Uint8Array, methods: string[]): GeneratedSas {\n    const sas: GeneratedSas = {};\n    for (const method of methods) {\n        if (method in sasGenerators) {\n            // @ts-ignore - ts doesn't like us mixing types like this\n            sas[method] = sasGenerators[method](Array.from(sasBytes));\n        }\n    }\n    return sas;\n}\n\nconst macMethods = {\n    \"hkdf-hmac-sha256\": \"calculate_mac\",\n    \"org.matrix.msc3783.hkdf-hmac-sha256\": \"calculate_mac_fixed_base64\",\n    \"hkdf-hmac-sha256.v2\": \"calculate_mac_fixed_base64\",\n    \"hmac-sha256\": \"calculate_mac_long_kdf\",\n} as const;\n\ntype MacMethod = keyof typeof macMethods;\n\nfunction calculateMAC(olmSAS: OlmSAS, method: MacMethod) {\n    return function (input: string, info: string): string {\n        const mac = olmSAS[macMethods[method]](input, info);\n        logger.log(\"SAS calculateMAC:\", method, [input, info], mac);\n        return mac;\n    };\n}\n\nconst calculateKeyAgreement = {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    \"curve25519-hkdf-sha256\": function (sas: SAS, olmSAS: OlmSAS, bytes: number): Uint8Array {\n        const ourInfo = `${sas.baseApis.getUserId()}|${sas.baseApis.deviceId}|` + `${sas.ourSASPubKey}|`;\n        const theirInfo = `${sas.userId}|${sas.deviceId}|${sas.theirSASPubKey}|`;\n        const sasInfo =\n            \"MATRIX_KEY_VERIFICATION_SAS|\" +\n            (sas.initiatedByMe ? ourInfo + theirInfo : theirInfo + ourInfo) +\n            sas.channel.transactionId;\n        return olmSAS.generate_bytes(sasInfo, bytes);\n    },\n    \"curve25519\": function (sas: SAS, olmSAS: OlmSAS, bytes: number): Uint8Array {\n        const ourInfo = `${sas.baseApis.getUserId()}${sas.baseApis.deviceId}`;\n        const theirInfo = `${sas.userId}${sas.deviceId}`;\n        const sasInfo =\n            \"MATRIX_KEY_VERIFICATION_SAS\" +\n            (sas.initiatedByMe ? ourInfo + theirInfo : theirInfo + ourInfo) +\n            sas.channel.transactionId;\n        return olmSAS.generate_bytes(sasInfo, bytes);\n    },\n} as const;\n\ntype KeyAgreement = keyof typeof calculateKeyAgreement;\n\n/* lists of algorithms/methods that are supported.  The key agreement, hashes,\n * and MAC lists should be sorted in order of preference (most preferred\n * first).\n */\nconst KEY_AGREEMENT_LIST: KeyAgreement[] = [\"curve25519-hkdf-sha256\", \"curve25519\"];\nconst HASHES_LIST = [\"sha256\"];\nconst MAC_LIST: MacMethod[] = [\n    \"hkdf-hmac-sha256.v2\",\n    \"org.matrix.msc3783.hkdf-hmac-sha256\",\n    \"hkdf-hmac-sha256\",\n    \"hmac-sha256\",\n];\nconst SAS_LIST = Object.keys(sasGenerators);\n\nconst KEY_AGREEMENT_SET = new Set(KEY_AGREEMENT_LIST);\nconst HASHES_SET = new Set(HASHES_LIST);\nconst MAC_SET = new Set(MAC_LIST);\nconst SAS_SET = new Set(SAS_LIST);\n\nfunction intersection<T>(anArray: T[], aSet: Set<T>): T[] {\n    return Array.isArray(anArray) ? anArray.filter((x) => aSet.has(x)) : [];\n}\n\n/** @deprecated use VerifierEvent */\nexport type SasEvent = VerifierEvent;\n/** @deprecated use VerifierEvent */\nexport const SasEvent = VerifierEvent;\n\n/** @deprecated Avoid referencing this class directly; instead use {@link Crypto.Verifier}. */\nexport class SAS extends Base {\n    private waitingForAccept?: boolean;\n    public ourSASPubKey?: string;\n    public theirSASPubKey?: string;\n    public sasEvent?: ShowSasCallbacks;\n\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    public static get NAME(): string {\n        return VerificationMethod.Sas;\n    }\n\n    public get events(): string[] {\n        return EVENTS;\n    }\n\n    protected doVerification = async (): Promise<void> => {\n        await globalThis.Olm.init();\n        olmutil = olmutil || new globalThis.Olm.Utility();\n\n        // make sure user's keys are downloaded\n        await this.baseApis.downloadKeys([this.userId]);\n\n        let retry = false;\n        do {\n            try {\n                if (this.initiatedByMe) {\n                    return await this.doSendVerification();\n                } else {\n                    return await this.doRespondVerification();\n                }\n            } catch (err) {\n                if (err instanceof SwitchStartEventError) {\n                    // this changes what initiatedByMe returns\n                    this.startEvent = err.startEvent;\n                    retry = true;\n                } else {\n                    throw err;\n                }\n            }\n        } while (retry);\n    };\n\n    public canSwitchStartEvent(event: MatrixEvent): boolean {\n        if (event.getType() !== START_TYPE) {\n            return false;\n        }\n        const content = event.getContent();\n        return content?.method === SAS.NAME && !!this.waitingForAccept;\n    }\n\n    private async sendStart(): Promise<Record<string, any>> {\n        const startContent = this.channel.completeContent(START_TYPE, {\n            method: SAS.NAME,\n            from_device: this.baseApis.deviceId,\n            key_agreement_protocols: KEY_AGREEMENT_LIST,\n            hashes: HASHES_LIST,\n            message_authentication_codes: MAC_LIST,\n            // FIXME: allow app to specify what SAS methods can be used\n            short_authentication_string: SAS_LIST,\n        });\n        await this.channel.sendCompleted(START_TYPE, startContent);\n        return startContent;\n    }\n\n    private async verifyAndCheckMAC(\n        keyAgreement: KeyAgreement,\n        sasMethods: string[],\n        olmSAS: OlmSAS,\n        macMethod: MacMethod,\n    ): Promise<void> {\n        const sasBytes = calculateKeyAgreement[keyAgreement](this, olmSAS, 6);\n        const verifySAS = new Promise<void>((resolve, reject) => {\n            this.sasEvent = {\n                sas: generateSas(sasBytes, sasMethods),\n                confirm: async (): Promise<void> => {\n                    try {\n                        await this.sendMAC(olmSAS, macMethod);\n                        resolve();\n                    } catch (err) {\n                        reject(err);\n                    }\n                },\n                cancel: (): void => reject(newUserCancelledError()),\n                mismatch: (): void => reject(newMismatchedSASError()),\n            };\n            this.emit(SasEvent.ShowSas, this.sasEvent);\n        });\n\n        const [e] = await Promise.all([\n            this.waitForEvent(EventType.KeyVerificationMac).then((e) => {\n                // we don't expect any more messages from the other\n                // party, and they may send a m.key.verification.done\n                // when they're done on their end\n                this.expectedEvent = EventType.KeyVerificationDone;\n                return e;\n            }),\n            verifySAS,\n        ]);\n        const content = e.getContent();\n        await this.checkMAC(olmSAS, content, macMethod);\n    }\n\n    private async doSendVerification(): Promise<void> {\n        this.waitingForAccept = true;\n        let startContent;\n        if (this.startEvent) {\n            startContent = this.channel.completedContentFromEvent(this.startEvent);\n        } else {\n            startContent = await this.sendStart();\n        }\n\n        // we might have switched to a different start event,\n        // but was we didn't call _waitForEvent there was no\n        // call that could throw yet. So check manually that\n        // we're still on the initiator side\n        if (!this.initiatedByMe) {\n            throw new SwitchStartEventError(this.startEvent);\n        }\n\n        let e: MatrixEvent;\n        try {\n            e = await this.waitForEvent(EventType.KeyVerificationAccept);\n        } finally {\n            this.waitingForAccept = false;\n        }\n        let content = e.getContent();\n        const sasMethods = intersection(content.short_authentication_string, SAS_SET);\n        if (\n            !(\n                KEY_AGREEMENT_SET.has(content.key_agreement_protocol) &&\n                HASHES_SET.has(content.hash) &&\n                MAC_SET.has(content.message_authentication_code) &&\n                sasMethods.length\n            )\n        ) {\n            throw newUnknownMethodError();\n        }\n        if (typeof content.commitment !== \"string\") {\n            throw newInvalidMessageError();\n        }\n        const keyAgreement = content.key_agreement_protocol;\n        const macMethod = content.message_authentication_code;\n        const hashCommitment = content.commitment;\n        const olmSAS = new globalThis.Olm.SAS();\n        try {\n            this.ourSASPubKey = olmSAS.get_pubkey();\n            await this.send(EventType.KeyVerificationKey, {\n                key: this.ourSASPubKey,\n            });\n\n            e = await this.waitForEvent(EventType.KeyVerificationKey);\n            // FIXME: make sure event is properly formed\n            content = e.getContent();\n            const commitmentStr = content.key + anotherjson.stringify(startContent);\n            // TODO: use selected hash function (when we support multiple)\n            if (olmutil.sha256(commitmentStr) !== hashCommitment) {\n                throw newMismatchedCommitmentError();\n            }\n            this.theirSASPubKey = content.key;\n            olmSAS.set_their_key(content.key);\n\n            await this.verifyAndCheckMAC(keyAgreement, sasMethods, olmSAS, macMethod);\n        } finally {\n            olmSAS.free();\n        }\n    }\n\n    private async doRespondVerification(): Promise<void> {\n        // as m.related_to is not included in the encrypted content in e2e rooms,\n        // we need to make sure it is added\n        let content = this.channel.completedContentFromEvent(this.startEvent!);\n\n        // Note: we intersect using our pre-made lists, rather than the sets,\n        // so that the result will be in our order of preference.  Then\n        // fetching the first element from the array will give our preferred\n        // method out of the ones offered by the other party.\n        const keyAgreement = intersection(KEY_AGREEMENT_LIST, new Set(content.key_agreement_protocols))[0];\n        const hashMethod = intersection(HASHES_LIST, new Set(content.hashes))[0];\n        const macMethod = intersection(MAC_LIST, new Set(content.message_authentication_codes))[0];\n        // FIXME: allow app to specify what SAS methods can be used\n        const sasMethods = intersection(content.short_authentication_string, SAS_SET);\n        if (!(keyAgreement !== undefined && hashMethod !== undefined && macMethod !== undefined && sasMethods.length)) {\n            throw newUnknownMethodError();\n        }\n\n        const olmSAS = new globalThis.Olm.SAS();\n        try {\n            const commitmentStr = olmSAS.get_pubkey() + anotherjson.stringify(content);\n            await this.send(EventType.KeyVerificationAccept, {\n                key_agreement_protocol: keyAgreement,\n                hash: hashMethod,\n                message_authentication_code: macMethod,\n                short_authentication_string: sasMethods,\n                // TODO: use selected hash function (when we support multiple)\n                commitment: olmutil.sha256(commitmentStr),\n            });\n\n            const e = await this.waitForEvent(EventType.KeyVerificationKey);\n            // FIXME: make sure event is properly formed\n            content = e.getContent();\n            this.theirSASPubKey = content.key;\n            olmSAS.set_their_key(content.key);\n            this.ourSASPubKey = olmSAS.get_pubkey();\n            await this.send(EventType.KeyVerificationKey, {\n                key: this.ourSASPubKey,\n            });\n\n            await this.verifyAndCheckMAC(keyAgreement, sasMethods, olmSAS, macMethod);\n        } finally {\n            olmSAS.free();\n        }\n    }\n\n    private sendMAC(olmSAS: OlmSAS, method: MacMethod): Promise<void> {\n        const mac: Record<string, string> = {};\n        const keyList: string[] = [];\n        const baseInfo =\n            \"MATRIX_KEY_VERIFICATION_MAC\" +\n            this.baseApis.getUserId() +\n            this.baseApis.deviceId +\n            this.userId +\n            this.deviceId +\n            this.channel.transactionId;\n\n        const deviceKeyId = `ed25519:${this.baseApis.deviceId}`;\n        mac[deviceKeyId] = calculateMAC(olmSAS, method)(this.baseApis.getDeviceEd25519Key()!, baseInfo + deviceKeyId);\n        keyList.push(deviceKeyId);\n\n        const crossSigningId = this.baseApis.getCrossSigningId();\n        if (crossSigningId) {\n            const crossSigningKeyId = `ed25519:${crossSigningId}`;\n            mac[crossSigningKeyId] = calculateMAC(olmSAS, method)(crossSigningId, baseInfo + crossSigningKeyId);\n            keyList.push(crossSigningKeyId);\n        }\n\n        const keys = calculateMAC(olmSAS, method)(keyList.sort().join(\",\"), baseInfo + \"KEY_IDS\");\n        return this.send(EventType.KeyVerificationMac, { mac, keys });\n    }\n\n    private async checkMAC(olmSAS: OlmSAS, content: IContent, method: MacMethod): Promise<void> {\n        const baseInfo =\n            \"MATRIX_KEY_VERIFICATION_MAC\" +\n            this.userId +\n            this.deviceId +\n            this.baseApis.getUserId() +\n            this.baseApis.deviceId +\n            this.channel.transactionId;\n\n        if (\n            content.keys !==\n            calculateMAC(olmSAS, method)(Object.keys(content.mac).sort().join(\",\"), baseInfo + \"KEY_IDS\")\n        ) {\n            throw newKeyMismatchError();\n        }\n\n        await this.verifyKeys(this.userId, content.mac, (keyId, device, keyInfo) => {\n            if (keyInfo !== calculateMAC(olmSAS, method)(device.keys[keyId], baseInfo + keyId)) {\n                throw newKeyMismatchError();\n            }\n        });\n    }\n\n    public getShowSasCallbacks(): ShowSasCallbacks | null {\n        return this.sasEvent ?? null;\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAEA,OAAOA,WAAW,MAAM,cAAc;AAGtC,SAASC,gBAAgB,IAAIC,IAAI,EAAEC,qBAAqB,QAAQ,WAAW;AAC3E,SACIC,YAAY,EACZC,sBAAsB,EACtBC,mBAAmB,EACnBC,qBAAqB,EACrBC,qBAAqB,QAClB,YAAY;AACnB,SAASC,MAAM,QAAQ,iBAAiB;AAExC,SAASC,kBAAkB,QAAQ,iBAAiB;AACpD,SAASC,SAAS,QAAQ,uBAAuB;AACjD,SAAuDC,aAAa,QAAQ,kCAAkC;AAC9G,SAASC,kBAAkB,QAAQ,gBAAgB;;AAEnD;;AAOA,IAAMC,UAAU,GAAGH,SAAS,CAACI,oBAAoB;AAEjD,IAAMC,MAAM,GAAG,CAACL,SAAS,CAACM,qBAAqB,EAAEN,SAAS,CAACO,kBAAkB,EAAEP,SAAS,CAACQ,kBAAkB,CAAC;AAE5G,IAAIC,OAAgB;AAEpB,IAAMC,qBAAqB,GAAGjB,YAAY,CAAC,kBAAkB,EAAE,wCAAwC,CAAC;AAExG,IAAMkB,4BAA4B,GAAGlB,YAAY,CAAC,yBAAyB,EAAE,uBAAuB,CAAC;;AAErG;AACA;AACA;AACA;AACA;AACA,IAAMmB,YAA4B,GAAG,CACjC,CAAC,IAAI,EAAE,KAAK,CAAC;AAAE;AACf,CAAC,IAAI,EAAE,KAAK,CAAC;AAAE;AACf,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,KAAK,CAAC;AAAE;AACf,CAAC,IAAI,EAAE,UAAU,CAAC;AAAE;AACpB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,WAAW,CAAC;AAAE;AACrB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,UAAU,CAAC;AAAE;AACpB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,YAAY,CAAC;AAAE;AACtB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,KAAK,CAAC;AAAE;AACf,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,WAAW,CAAC;AAAE;AACrB,CAAC,IAAI,EAAE,UAAU,CAAC;AAAE;AACpB,CAAC,GAAG,EAAE,WAAW,CAAC;AAAE;AACpB,CAAC,GAAG,EAAE,OAAO,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,YAAY,CAAC;AAAE;AACtB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,WAAW,CAAC;AAAE;AACrB,CAAC,IAAI,EAAE,UAAU,CAAC;AAAE;AACpB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,KAAK,CAAC;AAAE;AACf,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,WAAW,CAAC;AAAE;AACrB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,IAAI,EAAE,OAAO,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,WAAW,CAAC;AAAE;AACrB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,GAAG,EAAE,MAAM,CAAC;AAAE;AACf,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,SAAS,CAAC;AAAE;AACnB,CAAC,IAAI,EAAE,MAAM,CAAC;AAAE;AAChB,CAAC,GAAG,EAAE,QAAQ,CAAC;AAAE;AACjB,CAAC,IAAI,EAAE,YAAY,CAAC;AAAE;AACtB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAAE;AAClB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAE;AAAA,CAClB;AAED,SAASC,gBAAgBA,CAACC,QAAkB,EAAkB;EAC1D,IAAMC,MAAM,GAAG;EACX;EACAD,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EACf,CAACA,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,EAC9C,CAACA,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,EAC/CA,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,EAClBA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EACf,CAACA,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,EAC9C,CAACA,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,CAClD;EAED,OAAOC,MAAM,CAACC,GAAG,CAAEC,GAAG,IAAKL,YAAY,CAACK,GAAG,CAAC,CAAC;AACjD;AAEA,IAAMC,aAAa,GAAG;EAClBC,OAAO,EAAEpB,kBAAkB;EAC3BqB,KAAK,EAAEP;AACX,CAAU;AAEV,SAASQ,WAAWA,CAACP,QAAoB,EAAEQ,OAAiB,EAAgB;EACxE,IAAMC,GAAiB,GAAG,CAAC,CAAC;EAC5B,KAAK,IAAMC,MAAM,IAAIF,OAAO,EAAE;IAC1B,IAAIE,MAAM,IAAIN,aAAa,EAAE;MACzB;MACAK,GAAG,CAACC,MAAM,CAAC,GAAGN,aAAa,CAACM,MAAM,CAAC,CAACC,KAAK,CAACC,IAAI,CAACZ,QAAQ,CAAC,CAAC;IAC7D;EACJ;EACA,OAAOS,GAAG;AACd;AAEA,IAAMI,UAAU,GAAG;EACf,kBAAkB,EAAE,eAAe;EACnC,qCAAqC,EAAE,4BAA4B;EACnE,qBAAqB,EAAE,4BAA4B;EACnD,aAAa,EAAE;AACnB,CAAU;AAIV,SAASC,YAAYA,CAACC,MAAc,EAAEL,MAAiB,EAAE;EACrD,OAAO,UAAUM,KAAa,EAAEC,IAAY,EAAU;IAClD,IAAMC,GAAG,GAAGH,MAAM,CAACF,UAAU,CAACH,MAAM,CAAC,CAAC,CAACM,KAAK,EAAEC,IAAI,CAAC;IACnDjC,MAAM,CAACmC,GAAG,CAAC,mBAAmB,EAAET,MAAM,EAAE,CAACM,KAAK,EAAEC,IAAI,CAAC,EAAEC,GAAG,CAAC;IAC3D,OAAOA,GAAG;EACd,CAAC;AACL;AAEA,IAAME,qBAAqB,GAAG;EAC1B;EACA,wBAAwB,EAAE,SAA1BC,oBAAwBA,CAAYZ,GAAQ,EAAEM,MAAc,EAAEO,KAAa,EAAc;IACrF,IAAMC,OAAO,GAAG,GAAAC,MAAA,CAAGf,GAAG,CAACgB,QAAQ,CAACC,SAAS,CAAC,CAAC,OAAAF,MAAA,CAAIf,GAAG,CAACgB,QAAQ,CAACE,QAAQ,YAAAH,MAAA,CAASf,GAAG,CAACmB,YAAY,MAAG;IAChG,IAAMC,SAAS,MAAAL,MAAA,CAAMf,GAAG,CAACqB,MAAM,OAAAN,MAAA,CAAIf,GAAG,CAACkB,QAAQ,OAAAH,MAAA,CAAIf,GAAG,CAACsB,cAAc,MAAG;IACxE,IAAMC,OAAO,GACT,8BAA8B,IAC7BvB,GAAG,CAACwB,aAAa,GAAGV,OAAO,GAAGM,SAAS,GAAGA,SAAS,GAAGN,OAAO,CAAC,GAC/Dd,GAAG,CAACyB,OAAO,CAACC,aAAa;IAC7B,OAAOpB,MAAM,CAACqB,cAAc,CAACJ,OAAO,EAAEV,KAAK,CAAC;EAChD,CAAC;EACD,YAAY,EAAE,SAAde,UAAYA,CAAY5B,GAAQ,EAAEM,MAAc,EAAEO,KAAa,EAAc;IACzE,IAAMC,OAAO,MAAAC,MAAA,CAAMf,GAAG,CAACgB,QAAQ,CAACC,SAAS,CAAC,CAAC,EAAAF,MAAA,CAAGf,GAAG,CAACgB,QAAQ,CAACE,QAAQ,CAAE;IACrE,IAAME,SAAS,MAAAL,MAAA,CAAMf,GAAG,CAACqB,MAAM,EAAAN,MAAA,CAAGf,GAAG,CAACkB,QAAQ,CAAE;IAChD,IAAMK,OAAO,GACT,6BAA6B,IAC5BvB,GAAG,CAACwB,aAAa,GAAGV,OAAO,GAAGM,SAAS,GAAGA,SAAS,GAAGN,OAAO,CAAC,GAC/Dd,GAAG,CAACyB,OAAO,CAACC,aAAa;IAC7B,OAAOpB,MAAM,CAACqB,cAAc,CAACJ,OAAO,EAAEV,KAAK,CAAC;EAChD;AACJ,CAAU;AAIV;AACA;AACA;AACA;AACA,IAAMgB,kBAAkC,GAAG,CAAC,wBAAwB,EAAE,YAAY,CAAC;AACnF,IAAMC,WAAW,GAAG,CAAC,QAAQ,CAAC;AAC9B,IAAMC,QAAqB,GAAG,CAC1B,qBAAqB,EACrB,qCAAqC,EACrC,kBAAkB,EAClB,aAAa,CAChB;AACD,IAAMC,QAAQ,GAAGC,MAAM,CAACC,IAAI,CAACvC,aAAa,CAAC;AAE3C,IAAMwC,iBAAiB,GAAG,IAAIC,GAAG,CAACP,kBAAkB,CAAC;AACrD,IAAMQ,UAAU,GAAG,IAAID,GAAG,CAACN,WAAW,CAAC;AACvC,IAAMQ,OAAO,GAAG,IAAIF,GAAG,CAACL,QAAQ,CAAC;AACjC,IAAMQ,OAAO,GAAG,IAAIH,GAAG,CAACJ,QAAQ,CAAC;AAEjC,SAASQ,YAAYA,CAAIC,OAAY,EAAEC,IAAY,EAAO;EACtD,OAAOxC,KAAK,CAACyC,OAAO,CAACF,OAAO,CAAC,GAAGA,OAAO,CAACG,MAAM,CAAEC,CAAC,IAAKH,IAAI,CAACI,GAAG,CAACD,CAAC,CAAC,CAAC,GAAG,EAAE;AAC3E;;AAEA;;AAEA;AACA,OAAO,IAAME,QAAQ,GAAGrE,aAAa;;AAErC;AACA,OAAO,MAAMsE,GAAG,SAAShF,IAAI,CAAC;EAAAiF,YAAA;IAAA,IAAAC,KAAA;IAAA,SAAAC,SAAA;IAAAD,KAAA,GAAAE,IAAA;IAAAC,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA,sCAAAC,iBAAA,CAeC,aAA2B;MAClD,MAAMC,UAAU,CAACC,GAAG,CAACC,IAAI,CAAC,CAAC;MAC3BvE,OAAO,GAAGA,OAAO,IAAI,IAAIqE,UAAU,CAACC,GAAG,CAACE,OAAO,CAAC,CAAC;;MAEjD;MACA,MAAMR,KAAI,CAAClC,QAAQ,CAAC2C,YAAY,CAAC,CAACT,KAAI,CAAC7B,MAAM,CAAC,CAAC;MAE/C,IAAIuC,KAAK,GAAG,KAAK;MACjB,GAAG;QACC,IAAI;UACA,IAAIV,KAAI,CAAC1B,aAAa,EAAE;YACpB,aAAa0B,KAAI,CAACW,kBAAkB,CAAC,CAAC;UAC1C,CAAC,MAAM;YACH,aAAaX,KAAI,CAACY,qBAAqB,CAAC,CAAC;UAC7C;QACJ,CAAC,CAAC,OAAOC,GAAG,EAAE;UACV,IAAIA,GAAG,YAAY9F,qBAAqB,EAAE;YACtC;YACAiF,KAAI,CAACc,UAAU,GAAGD,GAAG,CAACC,UAAU;YAChCJ,KAAK,GAAG,IAAI;UAChB,CAAC,MAAM;YACH,MAAMG,GAAG;UACb;QACJ;MACJ,CAAC,QAAQH,KAAK;IAClB,CAAC;EAAA;EAlCD;EACA,WAAkBK,IAAIA,CAAA,EAAW;IAC7B,OAAOtF,kBAAkB,CAACuF,GAAG;EACjC;EAEA,IAAWC,MAAMA,CAAA,EAAa;IAC1B,OAAOrF,MAAM;EACjB;EA6BOsF,mBAAmBA,CAACC,KAAkB,EAAW;IACpD,IAAIA,KAAK,CAACC,OAAO,CAAC,CAAC,KAAK1F,UAAU,EAAE;MAChC,OAAO,KAAK;IAChB;IACA,IAAM2F,OAAO,GAAGF,KAAK,CAACG,UAAU,CAAC,CAAC;IAClC,OAAO,CAAAD,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEtE,MAAM,MAAK+C,GAAG,CAACiB,IAAI,IAAI,CAAC,CAAC,IAAI,CAACQ,gBAAgB;EAClE;EAEcC,SAASA,CAAA,EAAiC;IAAA,IAAAC,MAAA;IAAA,OAAArB,iBAAA;MACpD,IAAMsB,YAAY,GAAGD,MAAI,CAAClD,OAAO,CAACoD,eAAe,CAACjG,UAAU,EAAE;QAC1DqB,MAAM,EAAE+C,GAAG,CAACiB,IAAI;QAChBa,WAAW,EAAEH,MAAI,CAAC3D,QAAQ,CAACE,QAAQ;QACnC6D,uBAAuB,EAAElD,kBAAkB;QAC3CmD,MAAM,EAAElD,WAAW;QACnBmD,4BAA4B,EAAElD,QAAQ;QACtC;QACAmD,2BAA2B,EAAElD;MACjC,CAAC,CAAC;MACF,MAAM2C,MAAI,CAAClD,OAAO,CAAC0D,aAAa,CAACvG,UAAU,EAAEgG,YAAY,CAAC;MAC1D,OAAOA,YAAY;IAAC;EACxB;EAEcQ,iBAAiBA,CAC3BC,YAA0B,EAC1BC,UAAoB,EACpBhF,MAAc,EACdiF,SAAoB,EACP;IAAA,IAAAC,MAAA;IAAA,OAAAlC,iBAAA;MACb,IAAM/D,QAAQ,GAAGoB,qBAAqB,CAAC0E,YAAY,CAAC,CAACG,MAAI,EAAElF,MAAM,EAAE,CAAC,CAAC;MACrE,IAAMmF,SAAS,GAAG,IAAIC,OAAO,CAAO,CAACC,OAAO,EAAEC,MAAM,KAAK;QACrDJ,MAAI,CAACK,QAAQ,GAAG;UACZ7F,GAAG,EAAEF,WAAW,CAACP,QAAQ,EAAE+F,UAAU,CAAC;UACtCQ,OAAO;YAAA,IAAAC,QAAA,GAAAzC,iBAAA,CAAE,aAA2B;cAChC,IAAI;gBACA,MAAMkC,MAAI,CAACQ,OAAO,CAAC1F,MAAM,EAAEiF,SAAS,CAAC;gBACrCI,OAAO,CAAC,CAAC;cACb,CAAC,CAAC,OAAO5B,GAAG,EAAE;gBACV6B,MAAM,CAAC7B,GAAG,CAAC;cACf;YACJ,CAAC;YAAA,SAPD+B,OAAOA,CAAA;cAAA,OAAAC,QAAA,CAAAE,KAAA,OAAA9C,SAAA;YAAA;YAAA,OAAP2C,OAAO;UAAA,GAON;UACDI,MAAM,EAAEA,CAAA,KAAYN,MAAM,CAACtH,qBAAqB,CAAC,CAAC,CAAC;UACnD6H,QAAQ,EAAEA,CAAA,KAAYP,MAAM,CAACzG,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACDqG,MAAI,CAACY,IAAI,CAACrD,QAAQ,CAACsD,OAAO,EAAEb,MAAI,CAACK,QAAQ,CAAC;MAC9C,CAAC,CAAC;MAEF,IAAM,CAACS,CAAC,CAAC,SAASZ,OAAO,CAACa,GAAG,CAAC,CAC1Bf,MAAI,CAACgB,YAAY,CAAC/H,SAAS,CAACQ,kBAAkB,CAAC,CAACwH,IAAI,CAAEH,CAAC,IAAK;QACxD;QACA;QACA;QACAd,MAAI,CAACkB,aAAa,GAAGjI,SAAS,CAACkI,mBAAmB;QAClD,OAAOL,CAAC;MACZ,CAAC,CAAC,EACFb,SAAS,CACZ,CAAC;MACF,IAAMlB,OAAO,GAAG+B,CAAC,CAAC9B,UAAU,CAAC,CAAC;MAC9B,MAAMgB,MAAI,CAACoB,QAAQ,CAACtG,MAAM,EAAEiE,OAAO,EAAEgB,SAAS,CAAC;IAAC;EACpD;EAEc1B,kBAAkBA,CAAA,EAAkB;IAAA,IAAAgD,MAAA;IAAA,OAAAvD,iBAAA;MAC9CuD,MAAI,CAACpC,gBAAgB,GAAG,IAAI;MAC5B,IAAIG,YAAY;MAChB,IAAIiC,MAAI,CAAC7C,UAAU,EAAE;QACjBY,YAAY,GAAGiC,MAAI,CAACpF,OAAO,CAACqF,yBAAyB,CAACD,MAAI,CAAC7C,UAAU,CAAC;MAC1E,CAAC,MAAM;QACHY,YAAY,SAASiC,MAAI,CAACnC,SAAS,CAAC,CAAC;MACzC;;MAEA;MACA;MACA;MACA;MACA,IAAI,CAACmC,MAAI,CAACrF,aAAa,EAAE;QACrB,MAAM,IAAIvD,qBAAqB,CAAC4I,MAAI,CAAC7C,UAAU,CAAC;MACpD;MAEA,IAAIsC,CAAc;MAClB,IAAI;QACAA,CAAC,SAASO,MAAI,CAACL,YAAY,CAAC/H,SAAS,CAACM,qBAAqB,CAAC;MAChE,CAAC,SAAS;QACN8H,MAAI,CAACpC,gBAAgB,GAAG,KAAK;MACjC;MACA,IAAIF,OAAO,GAAG+B,CAAC,CAAC9B,UAAU,CAAC,CAAC;MAC5B,IAAMc,UAAU,GAAG9C,YAAY,CAAC+B,OAAO,CAACW,2BAA2B,EAAE3C,OAAO,CAAC;MAC7E,IACI,EACIJ,iBAAiB,CAACW,GAAG,CAACyB,OAAO,CAACwC,sBAAsB,CAAC,IACrD1E,UAAU,CAACS,GAAG,CAACyB,OAAO,CAACyC,IAAI,CAAC,IAC5B1E,OAAO,CAACQ,GAAG,CAACyB,OAAO,CAAC0C,2BAA2B,CAAC,IAChD3B,UAAU,CAAC4B,MAAM,CACpB,EACH;QACE,MAAM7I,qBAAqB,CAAC,CAAC;MACjC;MACA,IAAI,OAAOkG,OAAO,CAAC4C,UAAU,KAAK,QAAQ,EAAE;QACxC,MAAMhJ,sBAAsB,CAAC,CAAC;MAClC;MACA,IAAMkH,YAAY,GAAGd,OAAO,CAACwC,sBAAsB;MACnD,IAAMxB,SAAS,GAAGhB,OAAO,CAAC0C,2BAA2B;MACrD,IAAMG,cAAc,GAAG7C,OAAO,CAAC4C,UAAU;MACzC,IAAM7G,MAAM,GAAG,IAAIiD,UAAU,CAACC,GAAG,CAACR,GAAG,CAAC,CAAC;MACvC,IAAI;QACA6D,MAAI,CAAC1F,YAAY,GAAGb,MAAM,CAAC+G,UAAU,CAAC,CAAC;QACvC,MAAMR,MAAI,CAACS,IAAI,CAAC7I,SAAS,CAACO,kBAAkB,EAAE;UAC1CuI,GAAG,EAAEV,MAAI,CAAC1F;QACd,CAAC,CAAC;QAEFmF,CAAC,SAASO,MAAI,CAACL,YAAY,CAAC/H,SAAS,CAACO,kBAAkB,CAAC;QACzD;QACAuF,OAAO,GAAG+B,CAAC,CAAC9B,UAAU,CAAC,CAAC;QACxB,IAAMgD,aAAa,GAAGjD,OAAO,CAACgD,GAAG,GAAGzJ,WAAW,CAAC2J,SAAS,CAAC7C,YAAY,CAAC;QACvE;QACA,IAAI1F,OAAO,CAACwI,MAAM,CAACF,aAAa,CAAC,KAAKJ,cAAc,EAAE;UAClD,MAAMhI,4BAA4B,CAAC,CAAC;QACxC;QACAyH,MAAI,CAACvF,cAAc,GAAGiD,OAAO,CAACgD,GAAG;QACjCjH,MAAM,CAACqH,aAAa,CAACpD,OAAO,CAACgD,GAAG,CAAC;QAEjC,MAAMV,MAAI,CAACzB,iBAAiB,CAACC,YAAY,EAAEC,UAAU,EAAEhF,MAAM,EAAEiF,SAAS,CAAC;MAC7E,CAAC,SAAS;QACNjF,MAAM,CAACsH,IAAI,CAAC,CAAC;MACjB;IAAC;EACL;EAEc9D,qBAAqBA,CAAA,EAAkB;IAAA,IAAA+D,MAAA;IAAA,OAAAvE,iBAAA;MACjD;MACA;MACA,IAAIiB,OAAO,GAAGsD,MAAI,CAACpG,OAAO,CAACqF,yBAAyB,CAACe,MAAI,CAAC7D,UAAW,CAAC;;MAEtE;MACA;MACA;MACA;MACA,IAAMqB,YAAY,GAAG7C,YAAY,CAACX,kBAAkB,EAAE,IAAIO,GAAG,CAACmC,OAAO,CAACQ,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;MAClG,IAAM+C,UAAU,GAAGtF,YAAY,CAACV,WAAW,EAAE,IAAIM,GAAG,CAACmC,OAAO,CAACS,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;MACxE,IAAMO,SAAS,GAAG/C,YAAY,CAACT,QAAQ,EAAE,IAAIK,GAAG,CAACmC,OAAO,CAACU,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC;MAC1F;MACA,IAAMK,UAAU,GAAG9C,YAAY,CAAC+B,OAAO,CAACW,2BAA2B,EAAE3C,OAAO,CAAC;MAC7E,IAAI,EAAE8C,YAAY,KAAK0C,SAAS,IAAID,UAAU,KAAKC,SAAS,IAAIxC,SAAS,KAAKwC,SAAS,IAAIzC,UAAU,CAAC4B,MAAM,CAAC,EAAE;QAC3G,MAAM7I,qBAAqB,CAAC,CAAC;MACjC;MAEA,IAAMiC,MAAM,GAAG,IAAIiD,UAAU,CAACC,GAAG,CAACR,GAAG,CAAC,CAAC;MACvC,IAAI;QACA,IAAMwE,aAAa,GAAGlH,MAAM,CAAC+G,UAAU,CAAC,CAAC,GAAGvJ,WAAW,CAAC2J,SAAS,CAAClD,OAAO,CAAC;QAC1E,MAAMsD,MAAI,CAACP,IAAI,CAAC7I,SAAS,CAACM,qBAAqB,EAAE;UAC7CgI,sBAAsB,EAAE1B,YAAY;UACpC2B,IAAI,EAAEc,UAAU;UAChBb,2BAA2B,EAAE1B,SAAS;UACtCL,2BAA2B,EAAEI,UAAU;UACvC;UACA6B,UAAU,EAAEjI,OAAO,CAACwI,MAAM,CAACF,aAAa;QAC5C,CAAC,CAAC;QAEF,IAAMlB,CAAC,SAASuB,MAAI,CAACrB,YAAY,CAAC/H,SAAS,CAACO,kBAAkB,CAAC;QAC/D;QACAuF,OAAO,GAAG+B,CAAC,CAAC9B,UAAU,CAAC,CAAC;QACxBqD,MAAI,CAACvG,cAAc,GAAGiD,OAAO,CAACgD,GAAG;QACjCjH,MAAM,CAACqH,aAAa,CAACpD,OAAO,CAACgD,GAAG,CAAC;QACjCM,MAAI,CAAC1G,YAAY,GAAGb,MAAM,CAAC+G,UAAU,CAAC,CAAC;QACvC,MAAMQ,MAAI,CAACP,IAAI,CAAC7I,SAAS,CAACO,kBAAkB,EAAE;UAC1CuI,GAAG,EAAEM,MAAI,CAAC1G;QACd,CAAC,CAAC;QAEF,MAAM0G,MAAI,CAACzC,iBAAiB,CAACC,YAAY,EAAEC,UAAU,EAAEhF,MAAM,EAAEiF,SAAS,CAAC;MAC7E,CAAC,SAAS;QACNjF,MAAM,CAACsH,IAAI,CAAC,CAAC;MACjB;IAAC;EACL;EAEQ5B,OAAOA,CAAC1F,MAAc,EAAEL,MAAiB,EAAiB;IAC9D,IAAMQ,GAA2B,GAAG,CAAC,CAAC;IACtC,IAAMuH,OAAiB,GAAG,EAAE;IAC5B,IAAMC,QAAQ,GACV,6BAA6B,GAC7B,IAAI,CAACjH,QAAQ,CAACC,SAAS,CAAC,CAAC,GACzB,IAAI,CAACD,QAAQ,CAACE,QAAQ,GACtB,IAAI,CAACG,MAAM,GACX,IAAI,CAACH,QAAQ,GACb,IAAI,CAACO,OAAO,CAACC,aAAa;IAE9B,IAAMwG,WAAW,cAAAnH,MAAA,CAAc,IAAI,CAACC,QAAQ,CAACE,QAAQ,CAAE;IACvDT,GAAG,CAACyH,WAAW,CAAC,GAAG7H,YAAY,CAACC,MAAM,EAAEL,MAAM,CAAC,CAAC,IAAI,CAACe,QAAQ,CAACmH,mBAAmB,CAAC,CAAC,EAAGF,QAAQ,GAAGC,WAAW,CAAC;IAC7GF,OAAO,CAACI,IAAI,CAACF,WAAW,CAAC;IAEzB,IAAMG,cAAc,GAAG,IAAI,CAACrH,QAAQ,CAACsH,iBAAiB,CAAC,CAAC;IACxD,IAAID,cAAc,EAAE;MAChB,IAAME,iBAAiB,cAAAxH,MAAA,CAAcsH,cAAc,CAAE;MACrD5H,GAAG,CAAC8H,iBAAiB,CAAC,GAAGlI,YAAY,CAACC,MAAM,EAAEL,MAAM,CAAC,CAACoI,cAAc,EAAEJ,QAAQ,GAAGM,iBAAiB,CAAC;MACnGP,OAAO,CAACI,IAAI,CAACG,iBAAiB,CAAC;IACnC;IAEA,IAAMrG,IAAI,GAAG7B,YAAY,CAACC,MAAM,EAAEL,MAAM,CAAC,CAAC+H,OAAO,CAACQ,IAAI,CAAC,CAAC,CAACC,IAAI,CAAC,GAAG,CAAC,EAAER,QAAQ,GAAG,SAAS,CAAC;IACzF,OAAO,IAAI,CAACX,IAAI,CAAC7I,SAAS,CAACQ,kBAAkB,EAAE;MAAEwB,GAAG;MAAEyB;IAAK,CAAC,CAAC;EACjE;EAEc0E,QAAQA,CAACtG,MAAc,EAAEiE,OAAiB,EAAEtE,MAAiB,EAAiB;IAAA,IAAAyI,MAAA;IAAA,OAAApF,iBAAA;MACxF,IAAM2E,QAAQ,GACV,6BAA6B,GAC7BS,MAAI,CAACrH,MAAM,GACXqH,MAAI,CAACxH,QAAQ,GACbwH,MAAI,CAAC1H,QAAQ,CAACC,SAAS,CAAC,CAAC,GACzByH,MAAI,CAAC1H,QAAQ,CAACE,QAAQ,GACtBwH,MAAI,CAACjH,OAAO,CAACC,aAAa;MAE9B,IACI6C,OAAO,CAACrC,IAAI,KACZ7B,YAAY,CAACC,MAAM,EAAEL,MAAM,CAAC,CAACgC,MAAM,CAACC,IAAI,CAACqC,OAAO,CAAC9D,GAAG,CAAC,CAAC+H,IAAI,CAAC,CAAC,CAACC,IAAI,CAAC,GAAG,CAAC,EAAER,QAAQ,GAAG,SAAS,CAAC,EAC/F;QACE,MAAM7J,mBAAmB,CAAC,CAAC;MAC/B;MAEA,MAAMsK,MAAI,CAACC,UAAU,CAACD,MAAI,CAACrH,MAAM,EAAEkD,OAAO,CAAC9D,GAAG,EAAE,CAACmI,KAAK,EAAEC,MAAM,EAAEC,OAAO,KAAK;QACxE,IAAIA,OAAO,KAAKzI,YAAY,CAACC,MAAM,EAAEL,MAAM,CAAC,CAAC4I,MAAM,CAAC3G,IAAI,CAAC0G,KAAK,CAAC,EAAEX,QAAQ,GAAGW,KAAK,CAAC,EAAE;UAChF,MAAMxK,mBAAmB,CAAC,CAAC;QAC/B;MACJ,CAAC,CAAC;IAAC;EACP;EAEO2K,mBAAmBA,CAAA,EAA4B;IAAA,IAAAC,cAAA;IAClD,QAAAA,cAAA,GAAO,IAAI,CAACnD,QAAQ,cAAAmD,cAAA,cAAAA,cAAA,GAAI,IAAI;EAChC;AACJ","ignoreList":[]}

package/lib/crypto/verification/SASDecimal.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Implementation of decimal encoding of SAS as per:
+ * https://spec.matrix.org/v1.4/client-server-api/#sas-method-decimal
+ * @param sasBytes - the five bytes generated by HKDF
+ * @returns the derived three numbers between 1000 and 9191 inclusive
+ */
+export declare function generateDecimalSas(sasBytes: number[]): [number, number, number];
+//# sourceMappingURL=SASDecimal.d.ts.map

package/lib/crypto/verification/SASDecimal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SASDecimal.d.ts","sourceRoot":"","sources":["../../../src/crypto/verification/SASDecimal.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAc/E"}

package/lib/crypto/verification/SASDecimal.js

@@ -0,0 +1,34 @@
+/*
+Copyright 2018 - 2022 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+/**
+ * Implementation of decimal encoding of SAS as per:
+ * https://spec.matrix.org/v1.4/client-server-api/#sas-method-decimal
+ * @param sasBytes - the five bytes generated by HKDF
+ * @returns the derived three numbers between 1000 and 9191 inclusive
+ */
+export function generateDecimalSas(sasBytes) {
+  /*
+   *      +--------+--------+--------+--------+--------+
+   *      | Byte 0 | Byte 1 | Byte 2 | Byte 3 | Byte 4 |
+   *      +--------+--------+--------+--------+--------+
+   * bits: 87654321 87654321 87654321 87654321 87654321
+   *       \____________/\_____________/\____________/
+   *         1st number    2nd number     3rd number
+   */
+  return [(sasBytes[0] << 5 | sasBytes[1] >> 3) + 1000, ((sasBytes[1] & 0x7) << 10 | sasBytes[2] << 2 | sasBytes[3] >> 6) + 1000, ((sasBytes[3] & 0x3f) << 7 | sasBytes[4] >> 1) + 1000];
+}
+//# sourceMappingURL=SASDecimal.js.map

package/lib/crypto/verification/SASDecimal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SASDecimal.js","names":["generateDecimalSas","sasBytes"],"sources":["../../../src/crypto/verification/SASDecimal.ts"],"sourcesContent":["/*\nCopyright 2018 - 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Implementation of decimal encoding of SAS as per:\n * https://spec.matrix.org/v1.4/client-server-api/#sas-method-decimal\n * @param sasBytes - the five bytes generated by HKDF\n * @returns the derived three numbers between 1000 and 9191 inclusive\n */\nexport function generateDecimalSas(sasBytes: number[]): [number, number, number] {\n    /*\n     *      +--------+--------+--------+--------+--------+\n     *      | Byte 0 | Byte 1 | Byte 2 | Byte 3 | Byte 4 |\n     *      +--------+--------+--------+--------+--------+\n     * bits: 87654321 87654321 87654321 87654321 87654321\n     *       \\____________/\\_____________/\\____________/\n     *         1st number    2nd number     3rd number\n     */\n    return [\n        ((sasBytes[0] << 5) | (sasBytes[1] >> 3)) + 1000,\n        (((sasBytes[1] & 0x7) << 10) | (sasBytes[2] << 2) | (sasBytes[3] >> 6)) + 1000,\n        (((sasBytes[3] & 0x3f) << 7) | (sasBytes[4] >> 1)) + 1000,\n    ];\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,kBAAkBA,CAACC,QAAkB,EAA4B;EAC7E;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,OAAO,CACH,CAAEA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,IAAI,IAAI,EAChD,CAAE,CAACA,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,EAAE,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,GAAIA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,IAAI,IAAI,EAC9E,CAAE,CAACA,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,GAAKA,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,IAAI,IAAI,CAC5D;AACL","ignoreList":[]}

package/lib/crypto/verification/request/Channel.d.ts

@@ -0,0 +1,18 @@
+import { MatrixEvent } from "../../../models/event.ts";
+import { VerificationRequest } from "./VerificationRequest.ts";
+export interface IVerificationChannel {
+    request?: VerificationRequest;
+    readonly userId?: string;
+    readonly roomId?: string;
+    readonly deviceId?: string;
+    readonly transactionId?: string;
+    readonly receiveStartFromOtherDevices?: boolean;
+    getTimestamp(event: MatrixEvent): number;
+    send(type: string, uncompletedContent: Record<string, any>): Promise<void>;
+    completeContent(type: string, content: Record<string, any>): Record<string, any>;
+    sendCompleted(type: string, content: Record<string, any>): Promise<void>;
+    completedContentFromEvent(event: MatrixEvent): Record<string, any>;
+    canCreateRequest(type: string): boolean;
+    handleEvent(event: MatrixEvent, request: VerificationRequest, isLiveEvent: boolean): Promise<void>;
+}
+//# sourceMappingURL=Channel.d.ts.map

package/lib/crypto/verification/request/Channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Channel.d.ts","sourceRoot":"","sources":["../../../../src/crypto/verification/request/Channel.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACjC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAChD,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjF,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnE,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACxC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtG"}

package/lib/crypto/verification/request/Channel.js

@@ -0,0 +1 @@
+export {};