@unwanted/matrix-sdk-mini 34.12.0 → 34.13.0

package/lib/rust-crypto/verification.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification.js","names":["RustSdkCryptoJs","QrState","VerificationPhase","VerificationRequestEvent","VerifierEvent","TypedEventEmitter","TypedReEmitter","EventType","MsgType","defer","VerificationMethod","RustVerificationRequest","constructor","olmMachine","inner","outgoingRequestProcessor","supportedVerificationMethods","_defineProperty","reEmitter","weakThis","WeakRef","registerChangesCallback","_asyncToGenerator","_weakThis$deref","deref","onChange","verification","getVerification","Sas","_verifier","undefined","RustQrCodeVerifier","setVerifier","RustSASVerifier","replaceInner","Qr","emit","Change","verifier","stopReEmitting","reEmit","transactionId","flowId","roomId","_this$inner$roomId","toString","initiatedByMe","weStarted","otherUserId","otherDeviceId","_this$inner$otherDevi","getOtherDevice","_this","getDevice","isSelfVerification","phase","VerificationRequestPhase","Created","Requested","Ready","_accepting","Transitioned","Error","verificationPhase","Done","Cancelled","concat","pending","isPassive","accepting","declining","_cancelling","timeout","timeRemainingMillis","methods","chosenMethod","Started","Reciprocate","otherPartySupportsMethod","method","theirMethods","theirSupportedMethods","requiredMethod","verificationMethodsByIdentifier","some","m","accept","_this2","req","acceptWithMethods","map","verificationMethodIdentifierToMethod","makeOutgoingRequest","cancel","params","_this3","beginKeyVerification","targetDevice","startVerification","_this4","res","startSas","scanQRCode","uint8Array","_this5","scan","QrCodeScan","fromBytes","Uint8ClampedArray","scanQrCode","reciprocate","getQRCodeBytes","generateQRCode","_this6","innerVerifier","generateQrCode","Buffer","from","toBytes","cancellationCode","_this$inner$cancelInf","_this$inner$cancelInf2","cancelInfo","cancelCode","cancellingUserId","cancelledbyUs","userId","BaseRustVerifer","completionDeferred","_weakThis$deref2","promise","catch","isDone","resolve","isCancelled","reject","reason","hasBeenCancelled","e","getShowSasCallbacks","getReciprocateQrCodeCallbacks","callbacks","hasBeenScanned","confirm","confirmScanning","verify","_this7","ShowReciprocateQr","state","Scanned","Confirmed","Reciprocated","_this8","_verificationRequest","_this9","sendAccept","_this10","_this11","emoji","decimal","decimals","sas","symbol","description","_confirm","requests","apply","arguments","mismatch","request","cancelWithCode","ShowSas","_weakThis$deref3","SasV1","ScanQrCode","QrCodeScanV1","ShowQrCode","QrCodeShowV1","ReciprocateV1","meth","isVerificationEvent","event","getType","KeyVerificationCancel","KeyVerificationDone","KeyVerificationMac","KeyVerificationStart","KeyVerificationKey","KeyVerificationReady","KeyVerificationAccept","RoomMessage","getContent","msgtype","KeyVerificationRequest"],"sources":["../../src/rust-crypto/verification.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\nimport { QrState } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    GeneratedSas,\n    ShowQrCodeCallbacks,\n    ShowSasCallbacks,\n    VerificationPhase,\n    VerificationRequest,\n    VerificationRequestEvent,\n    VerificationRequestEventHandlerMap,\n    Verifier,\n    VerifierEvent,\n    VerifierEventHandlerMap,\n} from \"../crypto-api/verification.ts\";\nimport { TypedEventEmitter } from \"../models/typed-event-emitter.ts\";\nimport { OutgoingRequest, OutgoingRequestProcessor } from \"./OutgoingRequestProcessor.ts\";\nimport { TypedReEmitter } from \"../ReEmitter.ts\";\nimport { MatrixEvent } from \"../models/event.ts\";\nimport { EventType, MsgType } from \"../@types/event.ts\";\nimport { defer, IDeferred } from \"../utils.ts\";\nimport { VerificationMethod } from \"../types.ts\";\n\n/**\n * An incoming, or outgoing, request to verify a user or a device via cross-signing.\n *\n * @internal\n */\nexport class RustVerificationRequest\n    extends TypedEventEmitter<VerificationRequestEvent, VerificationRequestEventHandlerMap>\n    implements VerificationRequest\n{\n    /** a reëmitter which relays VerificationRequestEvent.Changed events emitted by the verifier */\n    private readonly reEmitter: TypedReEmitter<VerificationRequestEvent, VerificationRequestEventHandlerMap>;\n\n    /** Are we in the process of sending an `m.key.verification.ready` event? */\n    private _accepting = false;\n\n    /** Are we in the process of sending an `m.key.verification.cancellation` event? */\n    private _cancelling = false;\n\n    private _verifier: undefined | RustSASVerifier | RustQrCodeVerifier;\n\n    /**\n     * Construct a new RustVerificationRequest to wrap the rust-level `VerificationRequest`.\n     *\n     * @param olmMachine - The `OlmMachine` from the underlying rust crypto sdk.\n     * @param inner - VerificationRequest from the Rust SDK.\n     * @param outgoingRequestProcessor - `OutgoingRequestProcessor` to use for making outgoing HTTP requests.\n     * @param supportedVerificationMethods - Verification methods to use when `accept()` is called.\n     */\n    public constructor(\n        private readonly olmMachine: RustSdkCryptoJs.OlmMachine,\n        private readonly inner: RustSdkCryptoJs.VerificationRequest,\n        private readonly outgoingRequestProcessor: OutgoingRequestProcessor,\n        private readonly supportedVerificationMethods: string[],\n    ) {\n        super();\n        this.reEmitter = new TypedReEmitter(this);\n\n        // Obviously, the Rust object maintains a reference to the callback function. If the callback function maintains\n        // a reference to the Rust object, then we have a reference cycle which means that `RustVerificationRequest`\n        // will never be garbage-collected, and hence the underlying rust object will never be freed.\n        //\n        // To avoid this reference cycle, use a weak reference in the callback function. If the `RustVerificationRequest`\n        // gets garbage-collected, then there is nothing to update!\n        const weakThis = new WeakRef(this);\n        inner.registerChangesCallback(async () => weakThis.deref()?.onChange());\n    }\n\n    /**\n     * Hook which is called when the underlying rust class notifies us that there has been a change.\n     */\n    private onChange(): void {\n        const verification: RustSdkCryptoJs.Qr | RustSdkCryptoJs.Sas | undefined = this.inner.getVerification();\n\n        // Set the _verifier object (wrapping the rust `Verification` as a js-sdk Verifier) if:\n        // - we now have a `Verification` where we lacked one before\n        // - we have transitioned from QR to SAS\n        // - we are verifying with SAS, but we need to replace our verifier with a new one because both parties\n        //   tried to start verification at the same time, and we lost the tie breaking\n        if (verification instanceof RustSdkCryptoJs.Sas) {\n            if (this._verifier === undefined || this._verifier instanceof RustQrCodeVerifier) {\n                this.setVerifier(new RustSASVerifier(verification, this, this.outgoingRequestProcessor));\n            } else if (this._verifier instanceof RustSASVerifier) {\n                this._verifier.replaceInner(verification);\n            }\n        } else if (verification instanceof RustSdkCryptoJs.Qr && this._verifier === undefined) {\n            this.setVerifier(new RustQrCodeVerifier(verification, this.outgoingRequestProcessor));\n        }\n\n        this.emit(VerificationRequestEvent.Change);\n    }\n\n    private setVerifier(verifier: RustSASVerifier | RustQrCodeVerifier): void {\n        // if we already have a verifier, unsubscribe from its events\n        if (this._verifier) {\n            this.reEmitter.stopReEmitting(this._verifier, [VerificationRequestEvent.Change]);\n        }\n        this._verifier = verifier;\n        this.reEmitter.reEmit(this._verifier, [VerificationRequestEvent.Change]);\n    }\n\n    /**\n     * Unique ID for this verification request.\n     *\n     * An ID isn't assigned until the first message is sent, so this may be `undefined` in the early phases.\n     */\n    public get transactionId(): string | undefined {\n        return this.inner.flowId;\n    }\n\n    /**\n     * For an in-room verification, the ID of the room.\n     *\n     * For to-device verifications, `undefined`.\n     */\n    public get roomId(): string | undefined {\n        return this.inner.roomId?.toString();\n    }\n\n    /**\n     * True if this request was initiated by the local client.\n     *\n     * For in-room verifications, the initiator is who sent the `m.key.verification.request` event.\n     * For to-device verifications, the initiator is who sent the `m.key.verification.start` event.\n     */\n    public get initiatedByMe(): boolean {\n        return this.inner.weStarted();\n    }\n\n    /** The user id of the other party in this request */\n    public get otherUserId(): string {\n        return this.inner.otherUserId.toString();\n    }\n\n    /** For verifications via to-device messages: the ID of the other device. Otherwise, undefined. */\n    public get otherDeviceId(): string | undefined {\n        return this.inner.otherDeviceId?.toString();\n    }\n\n    /** Get the other device involved in the verification, if it is known */\n    private async getOtherDevice(): Promise<undefined | RustSdkCryptoJs.Device> {\n        const otherDeviceId = this.inner.otherDeviceId;\n        if (!otherDeviceId) {\n            return undefined;\n        }\n        return await this.olmMachine.getDevice(this.inner.otherUserId, otherDeviceId, 5);\n    }\n\n    /** True if the other party in this request is one of this user's own devices. */\n    public get isSelfVerification(): boolean {\n        return this.inner.isSelfVerification();\n    }\n\n    /** current phase of the request. */\n    public get phase(): VerificationPhase {\n        const phase = this.inner.phase();\n\n        switch (phase) {\n            case RustSdkCryptoJs.VerificationRequestPhase.Created:\n            case RustSdkCryptoJs.VerificationRequestPhase.Requested:\n                return VerificationPhase.Requested;\n            case RustSdkCryptoJs.VerificationRequestPhase.Ready:\n                // if we're still sending the `m.key.verification.ready`, that counts as \"Requested\" in the js-sdk's\n                // parlance.\n                return this._accepting ? VerificationPhase.Requested : VerificationPhase.Ready;\n            case RustSdkCryptoJs.VerificationRequestPhase.Transitioned:\n                if (!this._verifier) {\n                    // this shouldn't happen, because the onChange handler should have created a _verifier.\n                    throw new Error(\"VerificationRequest: inner phase == Transitioned but no verifier!\");\n                }\n                return this._verifier.verificationPhase;\n            case RustSdkCryptoJs.VerificationRequestPhase.Done:\n                return VerificationPhase.Done;\n            case RustSdkCryptoJs.VerificationRequestPhase.Cancelled:\n                return VerificationPhase.Cancelled;\n        }\n\n        throw new Error(`Unknown verification phase ${phase}`);\n    }\n\n    /** True if the request has sent its initial event and needs more events to complete\n     * (ie it is in phase `Requested`, `Ready` or `Started`).\n     */\n    public get pending(): boolean {\n        if (this.inner.isPassive()) return false;\n        const phase = this.phase;\n        return phase !== VerificationPhase.Done && phase !== VerificationPhase.Cancelled;\n    }\n\n    /**\n     * True if we have started the process of sending an `m.key.verification.ready` (but have not necessarily received\n     * the remote echo which causes a transition to {@link VerificationPhase.Ready}.\n     */\n    public get accepting(): boolean {\n        return this._accepting;\n    }\n\n    /**\n     * True if we have started the process of sending an `m.key.verification.cancel` (but have not necessarily received\n     * the remote echo which causes a transition to {@link VerificationPhase.Cancelled}).\n     */\n    public get declining(): boolean {\n        return this._cancelling;\n    }\n\n    /**\n     * The remaining number of ms before the request will be automatically cancelled.\n     *\n     * `null` indicates that there is no timeout\n     */\n    public get timeout(): number | null {\n        return this.inner.timeRemainingMillis();\n    }\n\n    /** once the phase is Started (and !initiatedByMe) or Ready: common methods supported by both sides */\n    public get methods(): string[] {\n        throw new Error(\"not implemented\");\n    }\n\n    /** the method picked in the .start event */\n    public get chosenMethod(): string | null {\n        if (this.phase !== VerificationPhase.Started) return null;\n\n        const verification: RustSdkCryptoJs.Qr | RustSdkCryptoJs.Sas | undefined = this.inner.getVerification();\n        if (verification instanceof RustSdkCryptoJs.Sas) {\n            return VerificationMethod.Sas;\n        } else if (verification instanceof RustSdkCryptoJs.Qr) {\n            return VerificationMethod.Reciprocate;\n        } else {\n            return null;\n        }\n    }\n\n    /**\n     * Checks whether the other party supports a given verification method.\n     * This is useful when setting up the QR code UI, as it is somewhat asymmetrical:\n     * if the other party supports SCAN_QR, we should show a QR code in the UI, and vice versa.\n     * For methods that need to be supported by both ends, use the `methods` property.\n     *\n     * @param method - the method to check\n     * @returns true if the other party said they supported the method\n     */\n    public otherPartySupportsMethod(method: string): boolean {\n        const theirMethods: RustSdkCryptoJs.VerificationMethod[] | undefined = this.inner.theirSupportedMethods;\n        if (theirMethods === undefined) {\n            // no message from the other side yet\n            return false;\n        }\n\n        const requiredMethod = verificationMethodsByIdentifier[method];\n        return theirMethods.some((m) => m === requiredMethod);\n    }\n\n    /**\n     * Accepts the request, sending a .ready event to the other party\n     *\n     * @returns Promise which resolves when the event has been sent.\n     */\n    public async accept(): Promise<void> {\n        if (this.inner.phase() !== RustSdkCryptoJs.VerificationRequestPhase.Requested || this._accepting) {\n            throw new Error(`Cannot accept a verification request in phase ${this.phase}`);\n        }\n\n        this._accepting = true;\n        try {\n            const req: undefined | OutgoingRequest = this.inner.acceptWithMethods(\n                this.supportedVerificationMethods.map(verificationMethodIdentifierToMethod),\n            );\n            if (req) {\n                await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n            }\n        } finally {\n            this._accepting = false;\n        }\n\n        // phase may have changed, so emit a 'change' event\n        this.emit(VerificationRequestEvent.Change);\n    }\n\n    /**\n     * Cancels the request, sending a cancellation to the other party\n     *\n     * @param params - Details for the cancellation, including `reason` (defaults to \"User declined\"), and `code`\n     *    (defaults to `m.user`).\n     *\n     * @returns Promise which resolves when the event has been sent.\n     */\n    public async cancel(params?: { reason?: string; code?: string }): Promise<void> {\n        if (this._cancelling) {\n            // already cancelling; do nothing\n            return;\n        }\n\n        this._cancelling = true;\n        try {\n            const req: undefined | OutgoingRequest = this.inner.cancel();\n            if (req) {\n                await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n            }\n        } finally {\n            this._cancelling = false;\n        }\n    }\n\n    /**\n     * Create a {@link Verifier} to do this verification via a particular method.\n     *\n     * If a verifier has already been created for this request, returns that verifier.\n     *\n     * This does *not* send the `m.key.verification.start` event - to do so, call {@link Verifier#verifier} on the\n     * returned verifier.\n     *\n     * If no previous events have been sent, pass in `targetDevice` to set who to direct this request to.\n     *\n     * @param method - the name of the verification method to use.\n     * @param targetDevice - details of where to send the request to.\n     *\n     * @returns The verifier which will do the actual verification.\n     */\n    public beginKeyVerification(method: string, targetDevice?: { userId?: string; deviceId?: string }): Verifier {\n        throw new Error(\"not implemented\");\n    }\n\n    /**\n     * Send an `m.key.verification.start` event to start verification via a particular method.\n     *\n     * Implementation of {@link Crypto.VerificationRequest#startVerification}.\n     *\n     * @param method - the name of the verification method to use.\n     */\n    public async startVerification(method: string): Promise<Verifier> {\n        if (method !== VerificationMethod.Sas) {\n            throw new Error(`Unsupported verification method ${method}`);\n        }\n\n        // make sure that we have a list of the other user's devices (workaround https://github.com/matrix-org/matrix-rust-sdk/issues/2896)\n        if (!(await this.getOtherDevice())) {\n            throw new Error(\"startVerification(): other device is unknown\");\n        }\n\n        const res:\n            | [RustSdkCryptoJs.Sas, RustSdkCryptoJs.RoomMessageRequest | RustSdkCryptoJs.ToDeviceRequest]\n            | undefined = await this.inner.startSas();\n\n        if (res) {\n            const [, req] = res;\n            await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n\n        // this should have triggered the onChange callback, and we should now have a verifier\n        if (!this._verifier) {\n            throw new Error(\"Still no verifier after startSas() call\");\n        }\n\n        return this._verifier;\n    }\n\n    /**\n     * Start a QR code verification by providing a scanned QR code for this verification flow.\n     *\n     * Implementation of {@link Crypto.VerificationRequest#scanQRCode}.\n     *\n     * @param qrCodeData - the decoded QR code.\n     * @returns A verifier; call `.verify()` on it to wait for the other side to complete the verification flow.\n     */\n    public async scanQRCode(uint8Array: Uint8Array): Promise<Verifier> {\n        const scan = RustSdkCryptoJs.QrCodeScan.fromBytes(new Uint8ClampedArray(uint8Array));\n        const verifier: RustSdkCryptoJs.Qr = await this.inner.scanQrCode(scan);\n\n        // this should have triggered the onChange callback, and we should now have a verifier\n        if (!this._verifier) {\n            throw new Error(\"Still no verifier after scanQrCode() call\");\n        }\n\n        // we can immediately trigger the reciprocate request\n        const req: undefined | OutgoingRequest = verifier.reciprocate();\n        if (req) {\n            await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n\n        return this._verifier;\n    }\n\n    /**\n     * The verifier which is doing the actual verification, once the method has been established.\n     * Only defined when the `phase` is Started.\n     */\n    public get verifier(): Verifier | undefined {\n        // It's possible for us to have a Verifier before a method has been chosen (in particular,\n        // if we are showing a QR code which the other device has not yet scanned. At that point, we could\n        // still switch to SAS).\n        //\n        // In that case, we should not return it to the application yet, since the application will not expect the\n        // Verifier to be replaced during the lifetime of the VerificationRequest.\n        return this.phase === VerificationPhase.Started ? this._verifier : undefined;\n    }\n\n    /**\n     * Stub implementation of {@link Crypto.VerificationRequest#getQRCodeBytes}.\n     */\n    public getQRCodeBytes(): Buffer | undefined {\n        throw new Error(\"getQRCodeBytes() unsupported in Rust Crypto; use generateQRCode() instead.\");\n    }\n\n    /**\n     * Generate the data for a QR code allowing the other device to verify this one, if it supports it.\n     *\n     * Implementation of {@link Crypto.VerificationRequest#generateQRCode}.\n     */\n    public async generateQRCode(): Promise<Buffer | undefined> {\n        // make sure that we have a list of the other user's devices (workaround https://github.com/matrix-org/matrix-rust-sdk/issues/2896)\n        if (!(await this.getOtherDevice())) {\n            throw new Error(\"generateQRCode(): other device is unknown\");\n        }\n\n        const innerVerifier: RustSdkCryptoJs.Qr | undefined = await this.inner.generateQrCode();\n        // If we are unable to generate a QRCode, we return undefined\n        if (!innerVerifier) return;\n\n        return Buffer.from(innerVerifier.toBytes());\n    }\n\n    /**\n     * If this request has been cancelled, the cancellation code (e.g `m.user`) which is responsible for cancelling\n     * this verification.\n     */\n    public get cancellationCode(): string | null {\n        return this.inner.cancelInfo?.cancelCode() ?? null;\n    }\n\n    /**\n     * The id of the user that cancelled the request.\n     *\n     * Only defined when phase is Cancelled\n     */\n    public get cancellingUserId(): string | undefined {\n        const cancelInfo = this.inner.cancelInfo;\n        if (!cancelInfo) {\n            return undefined;\n        } else if (cancelInfo.cancelledbyUs()) {\n            return this.olmMachine.userId.toString();\n        } else {\n            return this.inner.otherUserId.toString();\n        }\n    }\n}\n\n/** Common base class for `Verifier` implementations which wrap rust classes.\n *\n * The generic parameter `InnerType` is the type of the rust Verification class which we wrap.\n *\n * @internal\n */\nabstract class BaseRustVerifer<InnerType extends RustSdkCryptoJs.Qr | RustSdkCryptoJs.Sas> extends TypedEventEmitter<\n    VerifierEvent | VerificationRequestEvent,\n    VerifierEventHandlerMap & VerificationRequestEventHandlerMap\n> {\n    /** A deferred which completes when the verification completes (or rejects when it is cancelled/fails) */\n    protected readonly completionDeferred: IDeferred<void>;\n\n    public constructor(\n        protected inner: InnerType,\n        protected readonly outgoingRequestProcessor: OutgoingRequestProcessor,\n    ) {\n        super();\n\n        this.completionDeferred = defer();\n\n        // As with RustVerificationRequest, we need to avoid a reference cycle.\n        // See the comments in RustVerificationRequest.\n        const weakThis = new WeakRef(this);\n        inner.registerChangesCallback(async () => weakThis.deref()?.onChange());\n\n        // stop the runtime complaining if nobody catches a failure\n        this.completionDeferred.promise.catch(() => null);\n    }\n\n    /**\n     * Hook which is called when the underlying rust class notifies us that there has been a change.\n     *\n     * Can be overridden by subclasses to see if we can notify the application about an update. The overriding method\n     * must call `super.onChange()`.\n     */\n    protected onChange(): void {\n        if (this.inner.isDone()) {\n            this.completionDeferred.resolve(undefined);\n        } else if (this.inner.isCancelled()) {\n            const cancelInfo = this.inner.cancelInfo()!;\n            this.completionDeferred.reject(\n                new Error(\n                    `Verification cancelled by ${\n                        cancelInfo.cancelledbyUs() ? \"us\" : \"them\"\n                    } with code ${cancelInfo.cancelCode()}: ${cancelInfo.reason()}`,\n                ),\n            );\n        }\n\n        this.emit(VerificationRequestEvent.Change);\n    }\n\n    /**\n     * Returns true if the verification has been cancelled, either by us or the other side.\n     */\n    public get hasBeenCancelled(): boolean {\n        return this.inner.isCancelled();\n    }\n\n    /**\n     * The ID of the other user in the verification process.\n     */\n    public get userId(): string {\n        return this.inner.otherUserId.toString();\n    }\n\n    /**\n     * Cancel a verification.\n     *\n     * We will send an `m.key.verification.cancel` if the verification is still in flight. The verification promise\n     * will reject, and a {@link Crypto.VerifierEvent#Cancel} will be emitted.\n     *\n     * @param e - the reason for the cancellation.\n     */\n    public cancel(e?: Error): void {\n        // TODO: something with `e`\n        const req: undefined | OutgoingRequest = this.inner.cancel();\n        if (req) {\n            this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n    }\n\n    /**\n     * Get the details for an SAS verification, if one is in progress\n     *\n     * Returns `null`, unless this verifier is for a SAS-based verification and we are waiting for the user to confirm\n     * the SAS matches.\n     */\n    public getShowSasCallbacks(): ShowSasCallbacks | null {\n        return null;\n    }\n\n    /**\n     * Get the details for reciprocating QR code verification, if one is in progress\n     *\n     * Returns `null`, unless this verifier is for reciprocating a QR-code-based verification (ie, the other user has\n     * already scanned our QR code), and we are waiting for the user to confirm.\n     */\n    public getReciprocateQrCodeCallbacks(): ShowQrCodeCallbacks | null {\n        return null;\n    }\n}\n\n/** A Verifier instance which is used to show and/or scan a QR code. */\nexport class RustQrCodeVerifier extends BaseRustVerifer<RustSdkCryptoJs.Qr> implements Verifier {\n    private callbacks: ShowQrCodeCallbacks | null = null;\n\n    public constructor(inner: RustSdkCryptoJs.Qr, outgoingRequestProcessor: OutgoingRequestProcessor) {\n        super(inner, outgoingRequestProcessor);\n    }\n\n    protected onChange(): void {\n        // if the other side has scanned our QR code and sent us a \"reciprocate\" message, it is now time for the\n        // application to prompt the user to confirm their side.\n        if (this.callbacks === null && this.inner.hasBeenScanned()) {\n            this.callbacks = {\n                confirm: (): void => {\n                    this.confirmScanning();\n                },\n                cancel: (): void => this.cancel(),\n            };\n        }\n\n        super.onChange();\n    }\n\n    /**\n     * Start the key verification, if it has not already been started.\n     *\n     * @returns Promise which resolves when the verification has completed, or rejects if the verification is cancelled\n     *    or times out.\n     */\n    public async verify(): Promise<void> {\n        // Some applications (hello, matrix-react-sdk) may not check if there is a `ShowQrCodeCallbacks` and instead\n        // register a `ShowReciprocateQr` listener which they expect to be called once `.verify` is called.\n        if (this.callbacks !== null) {\n            this.emit(VerifierEvent.ShowReciprocateQr, this.callbacks);\n        }\n        // Nothing to do here but wait.\n        await this.completionDeferred.promise;\n    }\n\n    /**\n     * Calculate an appropriate VerificationPhase for a VerificationRequest where this is the verifier.\n     *\n     * This is abnormally complicated because a rust-side QR Code verifier can span several verification phases.\n     */\n    public get verificationPhase(): VerificationPhase {\n        switch (this.inner.state()) {\n            case QrState.Created:\n                // we have created a QR for display; neither side has yet sent an `m.key.verification.start`.\n                return VerificationPhase.Ready;\n            case QrState.Scanned:\n                // other side has scanned our QR and sent an `m.key.verification.start` with `m.reciprocate.v1`\n                return VerificationPhase.Started;\n            case QrState.Confirmed:\n                // we have confirmed the other side's scan and sent an `m.key.verification.done`.\n                //\n                // However, the verification is not yet \"Done\", because we have to wait until we have received the\n                // `m.key.verification.done` from the other side (in particular, we don't mark the device/identity as\n                // verified until that happens). If we return \"Done\" too soon, we risk the user cancelling the flow.\n                return VerificationPhase.Started;\n            case QrState.Reciprocated:\n                // although the rust SDK doesn't immediately send the `m.key.verification.start` on transition into this\n                // state, `RustVerificationRequest.scanQrCode` immediately calls `reciprocate()` and does so, so in practice\n                // we can treat the two the same.\n                return VerificationPhase.Started;\n            case QrState.Done:\n                return VerificationPhase.Done;\n            case QrState.Cancelled:\n                return VerificationPhase.Cancelled;\n            default:\n                throw new Error(`Unknown qr code state ${this.inner.state()}`);\n        }\n    }\n\n    /**\n     * Get the details for reciprocating QR code verification, if one is in progress\n     *\n     * Returns `null`, unless this verifier is for reciprocating a QR-code-based verification (ie, the other user has\n     * already scanned our QR code), and we are waiting for the user to confirm.\n     */\n    public getReciprocateQrCodeCallbacks(): ShowQrCodeCallbacks | null {\n        return this.callbacks;\n    }\n\n    private async confirmScanning(): Promise<void> {\n        const req: undefined | OutgoingRequest = this.inner.confirmScanning();\n        if (req) {\n            await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n    }\n}\n\n/** A Verifier instance which is used if we are exchanging emojis */\nexport class RustSASVerifier extends BaseRustVerifer<RustSdkCryptoJs.Sas> implements Verifier {\n    private callbacks: ShowSasCallbacks | null = null;\n\n    public constructor(\n        inner: RustSdkCryptoJs.Sas,\n        _verificationRequest: RustVerificationRequest,\n        outgoingRequestProcessor: OutgoingRequestProcessor,\n    ) {\n        super(inner, outgoingRequestProcessor);\n    }\n\n    /**\n     * Start the key verification, if it has not already been started.\n     *\n     * This means sending a `m.key.verification.start` if we are the first responder, or a `m.key.verification.accept`\n     * if the other side has already sent a start event.\n     *\n     * @returns Promise which resolves when the verification has completed, or rejects if the verification is cancelled\n     *    or times out.\n     */\n    public async verify(): Promise<void> {\n        await this.sendAccept();\n        await this.completionDeferred.promise;\n    }\n\n    /**\n     * Send the accept or start event, if it hasn't already been sent\n     */\n    private async sendAccept(): Promise<void> {\n        const req: undefined | OutgoingRequest = this.inner.accept();\n        if (req) {\n            await this.outgoingRequestProcessor.makeOutgoingRequest(req);\n        }\n    }\n\n    /** if we can now show the callbacks, do so */\n    protected onChange(): void {\n        super.onChange();\n\n        if (this.callbacks === null) {\n            const emoji = this.inner.emoji();\n            const decimal = this.inner.decimals();\n\n            if (emoji === undefined && decimal === undefined) {\n                return;\n            }\n\n            const sas: GeneratedSas = {};\n            if (emoji) {\n                sas.emoji = emoji.map((e) => [e.symbol, e.description]);\n            }\n            if (decimal) {\n                sas.decimal = [decimal[0], decimal[1], decimal[2]];\n            }\n\n            this.callbacks = {\n                sas,\n                confirm: async (): Promise<void> => {\n                    const requests: Array<OutgoingRequest> = await this.inner.confirm();\n                    for (const m of requests) {\n                        await this.outgoingRequestProcessor.makeOutgoingRequest(m);\n                    }\n                },\n                mismatch: (): void => {\n                    const request = this.inner.cancelWithCode(\"m.mismatched_sas\");\n                    if (request) {\n                        this.outgoingRequestProcessor.makeOutgoingRequest(request);\n                    }\n                },\n                cancel: (): void => {\n                    const request = this.inner.cancelWithCode(\"m.user\");\n                    if (request) {\n                        this.outgoingRequestProcessor.makeOutgoingRequest(request);\n                    }\n                },\n            };\n            this.emit(VerifierEvent.ShowSas, this.callbacks);\n        }\n    }\n\n    /**\n     * Calculate an appropriate VerificationPhase for a VerificationRequest where this is the verifier.\n     */\n    public get verificationPhase(): VerificationPhase {\n        return VerificationPhase.Started;\n    }\n\n    /**\n     * Get the details for an SAS verification, if one is in progress\n     *\n     * Returns `null`, unless this verifier is for a SAS-based verification and we are waiting for the user to confirm\n     * the SAS matches.\n     */\n    public getShowSasCallbacks(): ShowSasCallbacks | null {\n        return this.callbacks;\n    }\n\n    /**\n     * Replace the inner Rust verifier with a different one.\n     *\n     * @param inner - the new Rust verifier\n     * @internal\n     */\n    public replaceInner(inner: RustSdkCryptoJs.Sas): void {\n        if (this.inner != inner) {\n            this.inner = inner;\n\n            // As with RustVerificationRequest, we need to avoid a reference cycle.\n            // See the comments in RustVerificationRequest.\n            const weakThis = new WeakRef(this);\n            inner.registerChangesCallback(async () => weakThis.deref()?.onChange());\n\n            // replaceInner will only get called if we started the verification at the same time as the other side, and we lost\n            // the tie breaker.  So we need to re-accept their verification.\n            this.sendAccept();\n            this.onChange();\n        }\n    }\n}\n\n/** For each specced verification method, the rust-side `VerificationMethod` corresponding to it */\nconst verificationMethodsByIdentifier: Record<string, RustSdkCryptoJs.VerificationMethod> = {\n    [VerificationMethod.Sas]: RustSdkCryptoJs.VerificationMethod.SasV1,\n    [VerificationMethod.ScanQrCode]: RustSdkCryptoJs.VerificationMethod.QrCodeScanV1,\n    [VerificationMethod.ShowQrCode]: RustSdkCryptoJs.VerificationMethod.QrCodeShowV1,\n    [VerificationMethod.Reciprocate]: RustSdkCryptoJs.VerificationMethod.ReciprocateV1,\n};\n\n/**\n * Convert a specced verification method identifier into a rust-side `VerificationMethod`.\n *\n * @param method - specced method identifier, for example `m.sas.v1`.\n * @returns Rust-side `VerificationMethod` corresponding to `method`.\n * @throws An error if the method is unknown.\n *\n * @internal\n */\nexport function verificationMethodIdentifierToMethod(method: string): RustSdkCryptoJs.VerificationMethod {\n    const meth = verificationMethodsByIdentifier[method];\n    if (meth === undefined) {\n        throw new Error(`Unknown verification method ${method}`);\n    }\n    return meth;\n}\n\n/**\n * Return true if the event's type matches that of an in-room verification event\n *\n * @param event - MatrixEvent\n * @returns\n *\n * @internal\n */\nexport function isVerificationEvent(event: MatrixEvent): boolean {\n    switch (event.getType()) {\n        case EventType.KeyVerificationCancel:\n        case EventType.KeyVerificationDone:\n        case EventType.KeyVerificationMac:\n        case EventType.KeyVerificationStart:\n        case EventType.KeyVerificationKey:\n        case EventType.KeyVerificationReady:\n        case EventType.KeyVerificationAccept:\n            return true;\n        case EventType.RoomMessage:\n            return event.getContent().msgtype === MsgType.KeyVerificationRequest;\n        default:\n            return false;\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,KAAKA,eAAe,MAAM,oCAAoC;AACrE,SAASC,OAAO,QAAQ,oCAAoC;AAE5D,SAIIC,iBAAiB,EAEjBC,wBAAwB,EAGxBC,aAAa,QAEV,+BAA+B;AACtC,SAASC,iBAAiB,QAAQ,kCAAkC;AAEpE,SAASC,cAAc,QAAQ,iBAAiB;AAEhD,SAASC,SAAS,EAAEC,OAAO,QAAQ,oBAAoB;AACvD,SAASC,KAAK,QAAmB,aAAa;AAC9C,SAASC,kBAAkB,QAAQ,aAAa;;AAEhD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,uBAAuB,SACxBN,iBAAiB,CAE7B;EAYI;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACWO,WAAWA,CACGC,UAAsC,EACtCC,KAA0C,EAC1CC,wBAAkD,EAClDC,4BAAsC,EACzD;IACE,KAAK,CAAC,CAAC;IAAC,KALSH,UAAsC,GAAtCA,UAAsC;IAAA,KACtCC,KAA0C,GAA1CA,KAA0C;IAAA,KAC1CC,wBAAkD,GAAlDA,wBAAkD;IAAA,KAClDC,4BAAsC,GAAtCA,4BAAsC;IAvB3D;IAAAC,eAAA;IAGA;IAAAA,eAAA,qBACqB,KAAK;IAE1B;IAAAA,eAAA,sBACsB,KAAK;IAAAA,eAAA;IAmBvB,IAAI,CAACC,SAAS,GAAG,IAAIZ,cAAc,CAAC,IAAI,CAAC;;IAEzC;IACA;IACA;IACA;IACA;IACA;IACA,IAAMa,QAAQ,GAAG,IAAIC,OAAO,CAAC,IAAI,CAAC;IAClCN,KAAK,CAACO,uBAAuB,cAAAC,iBAAA,CAAC;MAAA,IAAAC,eAAA;MAAA,QAAAA,eAAA,GAAYJ,QAAQ,CAACK,KAAK,CAAC,CAAC,cAAAD,eAAA,uBAAhBA,eAAA,CAAkBE,QAAQ,CAAC,CAAC;IAAA,GAAC;EAC3E;;EAEA;AACJ;AACA;EACYA,QAAQA,CAAA,EAAS;IACrB,IAAMC,YAAkE,GAAG,IAAI,CAACZ,KAAK,CAACa,eAAe,CAAC,CAAC;;IAEvG;IACA;IACA;IACA;IACA;IACA,IAAID,YAAY,YAAY1B,eAAe,CAAC4B,GAAG,EAAE;MAC7C,IAAI,IAAI,CAACC,SAAS,KAAKC,SAAS,IAAI,IAAI,CAACD,SAAS,YAAYE,kBAAkB,EAAE;QAC9E,IAAI,CAACC,WAAW,CAAC,IAAIC,eAAe,CAACP,YAAY,EAAE,IAAI,EAAE,IAAI,CAACX,wBAAwB,CAAC,CAAC;MAC5F,CAAC,MAAM,IAAI,IAAI,CAACc,SAAS,YAAYI,eAAe,EAAE;QAClD,IAAI,CAACJ,SAAS,CAACK,YAAY,CAACR,YAAY,CAAC;MAC7C;IACJ,CAAC,MAAM,IAAIA,YAAY,YAAY1B,eAAe,CAACmC,EAAE,IAAI,IAAI,CAACN,SAAS,KAAKC,SAAS,EAAE;MACnF,IAAI,CAACE,WAAW,CAAC,IAAID,kBAAkB,CAACL,YAAY,EAAE,IAAI,CAACX,wBAAwB,CAAC,CAAC;IACzF;IAEA,IAAI,CAACqB,IAAI,CAACjC,wBAAwB,CAACkC,MAAM,CAAC;EAC9C;EAEQL,WAAWA,CAACM,QAA8C,EAAQ;IACtE;IACA,IAAI,IAAI,CAACT,SAAS,EAAE;MAChB,IAAI,CAACX,SAAS,CAACqB,cAAc,CAAC,IAAI,CAACV,SAAS,EAAE,CAAC1B,wBAAwB,CAACkC,MAAM,CAAC,CAAC;IACpF;IACA,IAAI,CAACR,SAAS,GAAGS,QAAQ;IACzB,IAAI,CAACpB,SAAS,CAACsB,MAAM,CAAC,IAAI,CAACX,SAAS,EAAE,CAAC1B,wBAAwB,CAACkC,MAAM,CAAC,CAAC;EAC5E;;EAEA;AACJ;AACA;AACA;AACA;EACI,IAAWI,aAAaA,CAAA,EAAuB;IAC3C,OAAO,IAAI,CAAC3B,KAAK,CAAC4B,MAAM;EAC5B;;EAEA;AACJ;AACA;AACA;AACA;EACI,IAAWC,MAAMA,CAAA,EAAuB;IAAA,IAAAC,kBAAA;IACpC,QAAAA,kBAAA,GAAO,IAAI,CAAC9B,KAAK,CAAC6B,MAAM,cAAAC,kBAAA,uBAAjBA,kBAAA,CAAmBC,QAAQ,CAAC,CAAC;EACxC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACI,IAAWC,aAAaA,CAAA,EAAY;IAChC,OAAO,IAAI,CAAChC,KAAK,CAACiC,SAAS,CAAC,CAAC;EACjC;;EAEA;EACA,IAAWC,WAAWA,CAAA,EAAW;IAC7B,OAAO,IAAI,CAAClC,KAAK,CAACkC,WAAW,CAACH,QAAQ,CAAC,CAAC;EAC5C;;EAEA;EACA,IAAWI,aAAaA,CAAA,EAAuB;IAAA,IAAAC,qBAAA;IAC3C,QAAAA,qBAAA,GAAO,IAAI,CAACpC,KAAK,CAACmC,aAAa,cAAAC,qBAAA,uBAAxBA,qBAAA,CAA0BL,QAAQ,CAAC,CAAC;EAC/C;;EAEA;EACcM,cAAcA,CAAA,EAAgD;IAAA,IAAAC,KAAA;IAAA,OAAA9B,iBAAA;MACxE,IAAM2B,aAAa,GAAGG,KAAI,CAACtC,KAAK,CAACmC,aAAa;MAC9C,IAAI,CAACA,aAAa,EAAE;QAChB,OAAOnB,SAAS;MACpB;MACA,aAAasB,KAAI,CAACvC,UAAU,CAACwC,SAAS,CAACD,KAAI,CAACtC,KAAK,CAACkC,WAAW,EAAEC,aAAa,EAAE,CAAC,CAAC;IAAC;EACrF;;EAEA;EACA,IAAWK,kBAAkBA,CAAA,EAAY;IACrC,OAAO,IAAI,CAACxC,KAAK,CAACwC,kBAAkB,CAAC,CAAC;EAC1C;;EAEA;EACA,IAAWC,KAAKA,CAAA,EAAsB;IAClC,IAAMA,KAAK,GAAG,IAAI,CAACzC,KAAK,CAACyC,KAAK,CAAC,CAAC;IAEhC,QAAQA,KAAK;MACT,KAAKvD,eAAe,CAACwD,wBAAwB,CAACC,OAAO;MACrD,KAAKzD,eAAe,CAACwD,wBAAwB,CAACE,SAAS;QACnD,OAAOxD,iBAAiB,CAACwD,SAAS;MACtC,KAAK1D,eAAe,CAACwD,wBAAwB,CAACG,KAAK;QAC/C;QACA;QACA,OAAO,IAAI,CAACC,UAAU,GAAG1D,iBAAiB,CAACwD,SAAS,GAAGxD,iBAAiB,CAACyD,KAAK;MAClF,KAAK3D,eAAe,CAACwD,wBAAwB,CAACK,YAAY;QACtD,IAAI,CAAC,IAAI,CAAChC,SAAS,EAAE;UACjB;UACA,MAAM,IAAIiC,KAAK,CAAC,mEAAmE,CAAC;QACxF;QACA,OAAO,IAAI,CAACjC,SAAS,CAACkC,iBAAiB;MAC3C,KAAK/D,eAAe,CAACwD,wBAAwB,CAACQ,IAAI;QAC9C,OAAO9D,iBAAiB,CAAC8D,IAAI;MACjC,KAAKhE,eAAe,CAACwD,wBAAwB,CAACS,SAAS;QACnD,OAAO/D,iBAAiB,CAAC+D,SAAS;IAC1C;IAEA,MAAM,IAAIH,KAAK,+BAAAI,MAAA,CAA+BX,KAAK,CAAE,CAAC;EAC1D;;EAEA;AACJ;AACA;EACI,IAAWY,OAAOA,CAAA,EAAY;IAC1B,IAAI,IAAI,CAACrD,KAAK,CAACsD,SAAS,CAAC,CAAC,EAAE,OAAO,KAAK;IACxC,IAAMb,KAAK,GAAG,IAAI,CAACA,KAAK;IACxB,OAAOA,KAAK,KAAKrD,iBAAiB,CAAC8D,IAAI,IAAIT,KAAK,KAAKrD,iBAAiB,CAAC+D,SAAS;EACpF;;EAEA;AACJ;AACA;AACA;EACI,IAAWI,SAASA,CAAA,EAAY;IAC5B,OAAO,IAAI,CAACT,UAAU;EAC1B;;EAEA;AACJ;AACA;AACA;EACI,IAAWU,SAASA,CAAA,EAAY;IAC5B,OAAO,IAAI,CAACC,WAAW;EAC3B;;EAEA;AACJ;AACA;AACA;AACA;EACI,IAAWC,OAAOA,CAAA,EAAkB;IAChC,OAAO,IAAI,CAAC1D,KAAK,CAAC2D,mBAAmB,CAAC,CAAC;EAC3C;;EAEA;EACA,IAAWC,OAAOA,CAAA,EAAa;IAC3B,MAAM,IAAIZ,KAAK,CAAC,iBAAiB,CAAC;EACtC;;EAEA;EACA,IAAWa,YAAYA,CAAA,EAAkB;IACrC,IAAI,IAAI,CAACpB,KAAK,KAAKrD,iBAAiB,CAAC0E,OAAO,EAAE,OAAO,IAAI;IAEzD,IAAMlD,YAAkE,GAAG,IAAI,CAACZ,KAAK,CAACa,eAAe,CAAC,CAAC;IACvG,IAAID,YAAY,YAAY1B,eAAe,CAAC4B,GAAG,EAAE;MAC7C,OAAOlB,kBAAkB,CAACkB,GAAG;IACjC,CAAC,MAAM,IAAIF,YAAY,YAAY1B,eAAe,CAACmC,EAAE,EAAE;MACnD,OAAOzB,kBAAkB,CAACmE,WAAW;IACzC,CAAC,MAAM;MACH,OAAO,IAAI;IACf;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWC,wBAAwBA,CAACC,MAAc,EAAW;IACrD,IAAMC,YAA8D,GAAG,IAAI,CAAClE,KAAK,CAACmE,qBAAqB;IACvG,IAAID,YAAY,KAAKlD,SAAS,EAAE;MAC5B;MACA,OAAO,KAAK;IAChB;IAEA,IAAMoD,cAAc,GAAGC,+BAA+B,CAACJ,MAAM,CAAC;IAC9D,OAAOC,YAAY,CAACI,IAAI,CAAEC,CAAC,IAAKA,CAAC,KAAKH,cAAc,CAAC;EACzD;;EAEA;AACJ;AACA;AACA;AACA;EACiBI,MAAMA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAAjE,iBAAA;MACjC,IAAIiE,MAAI,CAACzE,KAAK,CAACyC,KAAK,CAAC,CAAC,KAAKvD,eAAe,CAACwD,wBAAwB,CAACE,SAAS,IAAI6B,MAAI,CAAC3B,UAAU,EAAE;QAC9F,MAAM,IAAIE,KAAK,kDAAAI,MAAA,CAAkDqB,MAAI,CAAChC,KAAK,CAAE,CAAC;MAClF;MAEAgC,MAAI,CAAC3B,UAAU,GAAG,IAAI;MACtB,IAAI;QACA,IAAM4B,GAAgC,GAAGD,MAAI,CAACzE,KAAK,CAAC2E,iBAAiB,CACjEF,MAAI,CAACvE,4BAA4B,CAAC0E,GAAG,CAACC,oCAAoC,CAC9E,CAAC;QACD,IAAIH,GAAG,EAAE;UACL,MAAMD,MAAI,CAACxE,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;QAChE;MACJ,CAAC,SAAS;QACND,MAAI,CAAC3B,UAAU,GAAG,KAAK;MAC3B;;MAEA;MACA2B,MAAI,CAACnD,IAAI,CAACjC,wBAAwB,CAACkC,MAAM,CAAC;IAAC;EAC/C;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACiBwD,MAAMA,CAACC,MAA2C,EAAiB;IAAA,IAAAC,MAAA;IAAA,OAAAzE,iBAAA;MAC5E,IAAIyE,MAAI,CAACxB,WAAW,EAAE;QAClB;QACA;MACJ;MAEAwB,MAAI,CAACxB,WAAW,GAAG,IAAI;MACvB,IAAI;QACA,IAAMiB,GAAgC,GAAGO,MAAI,CAACjF,KAAK,CAAC+E,MAAM,CAAC,CAAC;QAC5D,IAAIL,GAAG,EAAE;UACL,MAAMO,MAAI,CAAChF,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;QAChE;MACJ,CAAC,SAAS;QACNO,MAAI,CAACxB,WAAW,GAAG,KAAK;MAC5B;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWyB,oBAAoBA,CAACjB,MAAc,EAAEkB,YAAqD,EAAY;IACzG,MAAM,IAAInC,KAAK,CAAC,iBAAiB,CAAC;EACtC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBoC,iBAAiBA,CAACnB,MAAc,EAAqB;IAAA,IAAAoB,MAAA;IAAA,OAAA7E,iBAAA;MAC9D,IAAIyD,MAAM,KAAKrE,kBAAkB,CAACkB,GAAG,EAAE;QACnC,MAAM,IAAIkC,KAAK,oCAAAI,MAAA,CAAoCa,MAAM,CAAE,CAAC;MAChE;;MAEA;MACA,IAAI,QAAQoB,MAAI,CAAChD,cAAc,CAAC,CAAC,CAAC,EAAE;QAChC,MAAM,IAAIW,KAAK,CAAC,8CAA8C,CAAC;MACnE;MAEA,IAAMsC,GAES,SAASD,MAAI,CAACrF,KAAK,CAACuF,QAAQ,CAAC,CAAC;MAE7C,IAAID,GAAG,EAAE;QACL,IAAM,GAAGZ,GAAG,CAAC,GAAGY,GAAG;QACnB,MAAMD,MAAI,CAACpF,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;MAChE;;MAEA;MACA,IAAI,CAACW,MAAI,CAACtE,SAAS,EAAE;QACjB,MAAM,IAAIiC,KAAK,CAAC,yCAAyC,CAAC;MAC9D;MAEA,OAAOqC,MAAI,CAACtE,SAAS;IAAC;EAC1B;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACiByE,UAAUA,CAACC,UAAsB,EAAqB;IAAA,IAAAC,MAAA;IAAA,OAAAlF,iBAAA;MAC/D,IAAMmF,IAAI,GAAGzG,eAAe,CAAC0G,UAAU,CAACC,SAAS,CAAC,IAAIC,iBAAiB,CAACL,UAAU,CAAC,CAAC;MACpF,IAAMjE,QAA4B,SAASkE,MAAI,CAAC1F,KAAK,CAAC+F,UAAU,CAACJ,IAAI,CAAC;;MAEtE;MACA,IAAI,CAACD,MAAI,CAAC3E,SAAS,EAAE;QACjB,MAAM,IAAIiC,KAAK,CAAC,2CAA2C,CAAC;MAChE;;MAEA;MACA,IAAM0B,GAAgC,GAAGlD,QAAQ,CAACwE,WAAW,CAAC,CAAC;MAC/D,IAAItB,GAAG,EAAE;QACL,MAAMgB,MAAI,CAACzF,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;MAChE;MAEA,OAAOgB,MAAI,CAAC3E,SAAS;IAAC;EAC1B;;EAEA;AACJ;AACA;AACA;EACI,IAAWS,QAAQA,CAAA,EAAyB;IACxC;IACA;IACA;IACA;IACA;IACA;IACA,OAAO,IAAI,CAACiB,KAAK,KAAKrD,iBAAiB,CAAC0E,OAAO,GAAG,IAAI,CAAC/C,SAAS,GAAGC,SAAS;EAChF;;EAEA;AACJ;AACA;EACWiF,cAAcA,CAAA,EAAuB;IACxC,MAAM,IAAIjD,KAAK,CAAC,4EAA4E,CAAC;EACjG;;EAEA;AACJ;AACA;AACA;AACA;EACiBkD,cAAcA,CAAA,EAAgC;IAAA,IAAAC,MAAA;IAAA,OAAA3F,iBAAA;MACvD;MACA,IAAI,QAAQ2F,MAAI,CAAC9D,cAAc,CAAC,CAAC,CAAC,EAAE;QAChC,MAAM,IAAIW,KAAK,CAAC,2CAA2C,CAAC;MAChE;MAEA,IAAMoD,aAA6C,SAASD,MAAI,CAACnG,KAAK,CAACqG,cAAc,CAAC,CAAC;MACvF;MACA,IAAI,CAACD,aAAa,EAAE;MAEpB,OAAOE,MAAM,CAACC,IAAI,CAACH,aAAa,CAACI,OAAO,CAAC,CAAC,CAAC;IAAC;EAChD;;EAEA;AACJ;AACA;AACA;EACI,IAAWC,gBAAgBA,CAAA,EAAkB;IAAA,IAAAC,qBAAA,EAAAC,sBAAA;IACzC,QAAAD,qBAAA,IAAAC,sBAAA,GAAO,IAAI,CAAC3G,KAAK,CAAC4G,UAAU,cAAAD,sBAAA,uBAArBA,sBAAA,CAAuBE,UAAU,CAAC,CAAC,cAAAH,qBAAA,cAAAA,qBAAA,GAAI,IAAI;EACtD;;EAEA;AACJ;AACA;AACA;AACA;EACI,IAAWI,gBAAgBA,CAAA,EAAuB;IAC9C,IAAMF,UAAU,GAAG,IAAI,CAAC5G,KAAK,CAAC4G,UAAU;IACxC,IAAI,CAACA,UAAU,EAAE;MACb,OAAO5F,SAAS;IACpB,CAAC,MAAM,IAAI4F,UAAU,CAACG,aAAa,CAAC,CAAC,EAAE;MACnC,OAAO,IAAI,CAAChH,UAAU,CAACiH,MAAM,CAACjF,QAAQ,CAAC,CAAC;IAC5C,CAAC,MAAM;MACH,OAAO,IAAI,CAAC/B,KAAK,CAACkC,WAAW,CAACH,QAAQ,CAAC,CAAC;IAC5C;EACJ;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,MAAekF,eAAe,SAAqE1H,iBAAiB,CAGlH;EAISO,WAAWA,CACJE,KAAgB,EACPC,wBAAkD,EACvE;IACE,KAAK,CAAC,CAAC;IAAC,KAHED,KAAgB,GAAhBA,KAAgB;IAAA,KACPC,wBAAkD,GAAlDA,wBAAkD;IALzE;IAAAE,eAAA;IASI,IAAI,CAAC+G,kBAAkB,GAAGvH,KAAK,CAAC,CAAC;;IAEjC;IACA;IACA,IAAMU,QAAQ,GAAG,IAAIC,OAAO,CAAC,IAAI,CAAC;IAClCN,KAAK,CAACO,uBAAuB,cAAAC,iBAAA,CAAC;MAAA,IAAA2G,gBAAA;MAAA,QAAAA,gBAAA,GAAY9G,QAAQ,CAACK,KAAK,CAAC,CAAC,cAAAyG,gBAAA,uBAAhBA,gBAAA,CAAkBxG,QAAQ,CAAC,CAAC;IAAA,GAAC;;IAEvE;IACA,IAAI,CAACuG,kBAAkB,CAACE,OAAO,CAACC,KAAK,CAAC,MAAM,IAAI,CAAC;EACrD;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACc1G,QAAQA,CAAA,EAAS;IACvB,IAAI,IAAI,CAACX,KAAK,CAACsH,MAAM,CAAC,CAAC,EAAE;MACrB,IAAI,CAACJ,kBAAkB,CAACK,OAAO,CAACvG,SAAS,CAAC;IAC9C,CAAC,MAAM,IAAI,IAAI,CAAChB,KAAK,CAACwH,WAAW,CAAC,CAAC,EAAE;MACjC,IAAMZ,UAAU,GAAG,IAAI,CAAC5G,KAAK,CAAC4G,UAAU,CAAC,CAAE;MAC3C,IAAI,CAACM,kBAAkB,CAACO,MAAM,CAC1B,IAAIzE,KAAK,8BAAAI,MAAA,CAEDwD,UAAU,CAACG,aAAa,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,iBAAA3D,MAAA,CAChCwD,UAAU,CAACC,UAAU,CAAC,CAAC,QAAAzD,MAAA,CAAKwD,UAAU,CAACc,MAAM,CAAC,CAAC,CACjE,CACJ,CAAC;IACL;IAEA,IAAI,CAACpG,IAAI,CAACjC,wBAAwB,CAACkC,MAAM,CAAC;EAC9C;;EAEA;AACJ;AACA;EACI,IAAWoG,gBAAgBA,CAAA,EAAY;IACnC,OAAO,IAAI,CAAC3H,KAAK,CAACwH,WAAW,CAAC,CAAC;EACnC;;EAEA;AACJ;AACA;EACI,IAAWR,MAAMA,CAAA,EAAW;IACxB,OAAO,IAAI,CAAChH,KAAK,CAACkC,WAAW,CAACH,QAAQ,CAAC,CAAC;EAC5C;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACWgD,MAAMA,CAAC6C,CAAS,EAAQ;IAC3B;IACA,IAAMlD,GAAgC,GAAG,IAAI,CAAC1E,KAAK,CAAC+E,MAAM,CAAC,CAAC;IAC5D,IAAIL,GAAG,EAAE;MACL,IAAI,CAACzE,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;IAC1D;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWmD,mBAAmBA,CAAA,EAA4B;IAClD,OAAO,IAAI;EACf;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWC,6BAA6BA,CAAA,EAA+B;IAC/D,OAAO,IAAI;EACf;AACJ;;AAEA;AACA,OAAO,MAAM7G,kBAAkB,SAASgG,eAAe,CAAyC;EAGrFnH,WAAWA,CAACE,KAAyB,EAAEC,wBAAkD,EAAE;IAC9F,KAAK,CAACD,KAAK,EAAEC,wBAAwB,CAAC;IAACE,eAAA,oBAHK,IAAI;EAIpD;EAEUQ,QAAQA,CAAA,EAAS;IACvB;IACA;IACA,IAAI,IAAI,CAACoH,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC/H,KAAK,CAACgI,cAAc,CAAC,CAAC,EAAE;MACxD,IAAI,CAACD,SAAS,GAAG;QACbE,OAAO,EAAEA,CAAA,KAAY;UACjB,IAAI,CAACC,eAAe,CAAC,CAAC;QAC1B,CAAC;QACDnD,MAAM,EAAEA,CAAA,KAAY,IAAI,CAACA,MAAM,CAAC;MACpC,CAAC;IACL;IAEA,KAAK,CAACpE,QAAQ,CAAC,CAAC;EACpB;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBwH,MAAMA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAA5H,iBAAA;MACjC;MACA;MACA,IAAI4H,MAAI,CAACL,SAAS,KAAK,IAAI,EAAE;QACzBK,MAAI,CAAC9G,IAAI,CAAChC,aAAa,CAAC+I,iBAAiB,EAAED,MAAI,CAACL,SAAS,CAAC;MAC9D;MACA;MACA,MAAMK,MAAI,CAAClB,kBAAkB,CAACE,OAAO;IAAC;EAC1C;;EAEA;AACJ;AACA;AACA;AACA;EACI,IAAWnE,iBAAiBA,CAAA,EAAsB;IAC9C,QAAQ,IAAI,CAACjD,KAAK,CAACsI,KAAK,CAAC,CAAC;MACtB,KAAKnJ,OAAO,CAACwD,OAAO;QAChB;QACA,OAAOvD,iBAAiB,CAACyD,KAAK;MAClC,KAAK1D,OAAO,CAACoJ,OAAO;QAChB;QACA,OAAOnJ,iBAAiB,CAAC0E,OAAO;MACpC,KAAK3E,OAAO,CAACqJ,SAAS;QAClB;QACA;QACA;QACA;QACA;QACA,OAAOpJ,iBAAiB,CAAC0E,OAAO;MACpC,KAAK3E,OAAO,CAACsJ,YAAY;QACrB;QACA;QACA;QACA,OAAOrJ,iBAAiB,CAAC0E,OAAO;MACpC,KAAK3E,OAAO,CAAC+D,IAAI;QACb,OAAO9D,iBAAiB,CAAC8D,IAAI;MACjC,KAAK/D,OAAO,CAACgE,SAAS;QAClB,OAAO/D,iBAAiB,CAAC+D,SAAS;MACtC;QACI,MAAM,IAAIH,KAAK,0BAAAI,MAAA,CAA0B,IAAI,CAACpD,KAAK,CAACsI,KAAK,CAAC,CAAC,CAAE,CAAC;IACtE;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWR,6BAA6BA,CAAA,EAA+B;IAC/D,OAAO,IAAI,CAACC,SAAS;EACzB;EAEcG,eAAeA,CAAA,EAAkB;IAAA,IAAAQ,MAAA;IAAA,OAAAlI,iBAAA;MAC3C,IAAMkE,GAAgC,GAAGgE,MAAI,CAAC1I,KAAK,CAACkI,eAAe,CAAC,CAAC;MACrE,IAAIxD,GAAG,EAAE;QACL,MAAMgE,MAAI,CAACzI,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;MAChE;IAAC;EACL;AACJ;;AAEA;AACA,OAAO,MAAMvD,eAAe,SAAS8F,eAAe,CAA0C;EAGnFnH,WAAWA,CACdE,KAA0B,EAC1B2I,oBAA6C,EAC7C1I,wBAAkD,EACpD;IACE,KAAK,CAACD,KAAK,EAAEC,wBAAwB,CAAC;IAACE,eAAA,oBAPE,IAAI;EAQjD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiBgI,MAAMA,CAAA,EAAkB;IAAA,IAAAS,MAAA;IAAA,OAAApI,iBAAA;MACjC,MAAMoI,MAAI,CAACC,UAAU,CAAC,CAAC;MACvB,MAAMD,MAAI,CAAC1B,kBAAkB,CAACE,OAAO;IAAC;EAC1C;;EAEA;AACJ;AACA;EACkByB,UAAUA,CAAA,EAAkB;IAAA,IAAAC,OAAA;IAAA,OAAAtI,iBAAA;MACtC,IAAMkE,GAAgC,GAAGoE,OAAI,CAAC9I,KAAK,CAACwE,MAAM,CAAC,CAAC;MAC5D,IAAIE,GAAG,EAAE;QACL,MAAMoE,OAAI,CAAC7I,wBAAwB,CAAC6E,mBAAmB,CAACJ,GAAG,CAAC;MAChE;IAAC;EACL;;EAEA;EACU/D,QAAQA,CAAA,EAAS;IAAA,IAAAoI,OAAA;IACvB,KAAK,CAACpI,QAAQ,CAAC,CAAC;IAEhB,IAAI,IAAI,CAACoH,SAAS,KAAK,IAAI,EAAE;MACzB,IAAMiB,KAAK,GAAG,IAAI,CAAChJ,KAAK,CAACgJ,KAAK,CAAC,CAAC;MAChC,IAAMC,OAAO,GAAG,IAAI,CAACjJ,KAAK,CAACkJ,QAAQ,CAAC,CAAC;MAErC,IAAIF,KAAK,KAAKhI,SAAS,IAAIiI,OAAO,KAAKjI,SAAS,EAAE;QAC9C;MACJ;MAEA,IAAMmI,GAAiB,GAAG,CAAC,CAAC;MAC5B,IAAIH,KAAK,EAAE;QACPG,GAAG,CAACH,KAAK,GAAGA,KAAK,CAACpE,GAAG,CAAEgD,CAAC,IAAK,CAACA,CAAC,CAACwB,MAAM,EAAExB,CAAC,CAACyB,WAAW,CAAC,CAAC;MAC3D;MACA,IAAIJ,OAAO,EAAE;QACTE,GAAG,CAACF,OAAO,GAAG,CAACA,OAAO,CAAC,CAAC,CAAC,EAAEA,OAAO,CAAC,CAAC,CAAC,EAAEA,OAAO,CAAC,CAAC,CAAC,CAAC;MACtD;MAEA,IAAI,CAAClB,SAAS,GAAG;QACboB,GAAG;QACHlB,OAAO;UAAA,IAAAqB,QAAA,GAAA9I,iBAAA,CAAE,aAA2B;YAChC,IAAM+I,QAAgC,SAASR,OAAI,CAAC/I,KAAK,CAACiI,OAAO,CAAC,CAAC;YACnE,KAAK,IAAM1D,CAAC,IAAIgF,QAAQ,EAAE;cACtB,MAAMR,OAAI,CAAC9I,wBAAwB,CAAC6E,mBAAmB,CAACP,CAAC,CAAC;YAC9D;UACJ,CAAC;UAAA,SALD0D,OAAOA,CAAA;YAAA,OAAAqB,QAAA,CAAAE,KAAA,OAAAC,SAAA;UAAA;UAAA,OAAPxB,OAAO;QAAA,GAKN;QACDyB,QAAQ,EAAEA,CAAA,KAAY;UAClB,IAAMC,OAAO,GAAG,IAAI,CAAC3J,KAAK,CAAC4J,cAAc,CAAC,kBAAkB,CAAC;UAC7D,IAAID,OAAO,EAAE;YACT,IAAI,CAAC1J,wBAAwB,CAAC6E,mBAAmB,CAAC6E,OAAO,CAAC;UAC9D;QACJ,CAAC;QACD5E,MAAM,EAAEA,CAAA,KAAY;UAChB,IAAM4E,OAAO,GAAG,IAAI,CAAC3J,KAAK,CAAC4J,cAAc,CAAC,QAAQ,CAAC;UACnD,IAAID,OAAO,EAAE;YACT,IAAI,CAAC1J,wBAAwB,CAAC6E,mBAAmB,CAAC6E,OAAO,CAAC;UAC9D;QACJ;MACJ,CAAC;MACD,IAAI,CAACrI,IAAI,CAAChC,aAAa,CAACuK,OAAO,EAAE,IAAI,CAAC9B,SAAS,CAAC;IACpD;EACJ;;EAEA;AACJ;AACA;EACI,IAAW9E,iBAAiBA,CAAA,EAAsB;IAC9C,OAAO7D,iBAAiB,CAAC0E,OAAO;EACpC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW+D,mBAAmBA,CAAA,EAA4B;IAClD,OAAO,IAAI,CAACE,SAAS;EACzB;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW3G,YAAYA,CAACpB,KAA0B,EAAQ;IAClD,IAAI,IAAI,CAACA,KAAK,IAAIA,KAAK,EAAE;MACrB,IAAI,CAACA,KAAK,GAAGA,KAAK;;MAElB;MACA;MACA,IAAMK,QAAQ,GAAG,IAAIC,OAAO,CAAC,IAAI,CAAC;MAClCN,KAAK,CAACO,uBAAuB,cAAAC,iBAAA,CAAC;QAAA,IAAAsJ,gBAAA;QAAA,QAAAA,gBAAA,GAAYzJ,QAAQ,CAACK,KAAK,CAAC,CAAC,cAAAoJ,gBAAA,uBAAhBA,gBAAA,CAAkBnJ,QAAQ,CAAC,CAAC;MAAA,GAAC;;MAEvE;MACA;MACA,IAAI,CAACkI,UAAU,CAAC,CAAC;MACjB,IAAI,CAAClI,QAAQ,CAAC,CAAC;IACnB;EACJ;AACJ;;AAEA;AACA,IAAM0D,+BAAmF,GAAG;EACxF,CAACzE,kBAAkB,CAACkB,GAAG,GAAG5B,eAAe,CAACU,kBAAkB,CAACmK,KAAK;EAClE,CAACnK,kBAAkB,CAACoK,UAAU,GAAG9K,eAAe,CAACU,kBAAkB,CAACqK,YAAY;EAChF,CAACrK,kBAAkB,CAACsK,UAAU,GAAGhL,eAAe,CAACU,kBAAkB,CAACuK,YAAY;EAChF,CAACvK,kBAAkB,CAACmE,WAAW,GAAG7E,eAAe,CAACU,kBAAkB,CAACwK;AACzE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASvF,oCAAoCA,CAACZ,MAAc,EAAsC;EACrG,IAAMoG,IAAI,GAAGhG,+BAA+B,CAACJ,MAAM,CAAC;EACpD,IAAIoG,IAAI,KAAKrJ,SAAS,EAAE;IACpB,MAAM,IAAIgC,KAAK,gCAAAI,MAAA,CAAgCa,MAAM,CAAE,CAAC;EAC5D;EACA,OAAOoG,IAAI;AACf;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAACC,KAAkB,EAAW;EAC7D,QAAQA,KAAK,CAACC,OAAO,CAAC,CAAC;IACnB,KAAK/K,SAAS,CAACgL,qBAAqB;IACpC,KAAKhL,SAAS,CAACiL,mBAAmB;IAClC,KAAKjL,SAAS,CAACkL,kBAAkB;IACjC,KAAKlL,SAAS,CAACmL,oBAAoB;IACnC,KAAKnL,SAAS,CAACoL,kBAAkB;IACjC,KAAKpL,SAAS,CAACqL,oBAAoB;IACnC,KAAKrL,SAAS,CAACsL,qBAAqB;MAChC,OAAO,IAAI;IACf,KAAKtL,SAAS,CAACuL,WAAW;MACtB,OAAOT,KAAK,CAACU,UAAU,CAAC,CAAC,CAACC,OAAO,KAAKxL,OAAO,CAACyL,sBAAsB;IACxE;MACI,OAAO,KAAK;EACpB;AACJ","ignoreList":[]}

package/lib/secret-storage.d.ts

@@ -1,370 +0,0 @@
-/**
- * Implementation of server-side secret storage
- *
- * @see https://spec.matrix.org/v1.6/client-server-api/#storage
- */
-import { TypedEventEmitter } from "./models/typed-event-emitter.ts";
-import { ClientEvent, ClientEventHandlerMap } from "./client.ts";
-import { AESEncryptedSecretStoragePayload } from "./@types/AESEncryptedSecretStoragePayload.ts";
-export declare const SECRET_STORAGE_ALGORITHM_V1_AES = "m.secret_storage.v1.aes-hmac-sha2";
-/**
- * Common base interface for Secret Storage Keys.
- *
- * The common properties for all encryption keys used in server-side secret storage.
- *
- * @see https://spec.matrix.org/v1.6/client-server-api/#key-storage
- */
-export interface SecretStorageKeyDescriptionCommon {
-    /** A human-readable name for this key. */
-    name: string;
-    /** The encryption algorithm used with this key. */
-    algorithm: string;
-    /** Information for deriving this key from a passphrase. */
-    passphrase: PassphraseInfo;
-}
-/**
- * Properties for a SSSS key using the `m.secret_storage.v1.aes-hmac-sha2` algorithm.
- *
- * Corresponds to `AesHmacSha2KeyDescription` in the specification.
- *
- * @see https://spec.matrix.org/v1.6/client-server-api/#msecret_storagev1aes-hmac-sha2
- */
-export interface SecretStorageKeyDescriptionAesV1 extends SecretStorageKeyDescriptionCommon {
-    /** The 16-byte AES initialization vector, encoded as base64. */
-    iv: string;
-    /** The MAC of the result of encrypting 32 bytes of 0, encoded as base64. */
-    mac: string;
-}
-/**
- * Union type for secret storage keys.
- *
- * For now, this is only {@link SecretStorageKeyDescriptionAesV1}, but other interfaces may be added in future.
- */
-export type SecretStorageKeyDescription = SecretStorageKeyDescriptionAesV1;
-/**
- * Information on how to generate the key from a passphrase.
- *
- * @see https://spec.matrix.org/v1.6/client-server-api/#deriving-keys-from-passphrases
- */
-export interface PassphraseInfo {
-    /** The algorithm to be used to derive the key. */
-    algorithm: "m.pbkdf2";
-    /** The number of PBKDF2 iterations to use. */
-    iterations: number;
-    /** The salt to be used for PBKDF2. */
-    salt: string;
-    /** The number of bits to generate. Defaults to 256. */
-    bits?: number;
-}
-/**
- * Options for {@link ServerSideSecretStorageImpl#addKey}.
- */
-export interface AddSecretStorageKeyOpts {
-    /** Information for deriving the key from a passphrase if any. */
-    passphrase?: PassphraseInfo;
-    /** Optional name of the key. */
-    name?: string;
-    /** The private key. Will be used to generate the key check values in the key info; it will not be stored on the server */
-    key: Uint8Array;
-}
-/**
- * Return type for {@link ServerSideSecretStorageImpl#getKey}.
- */
-export type SecretStorageKeyTuple = [keyId: string, keyInfo: SecretStorageKeyDescription];
-/**
- * Return type for {@link ServerSideSecretStorageImpl#addKey}.
- */
-export type SecretStorageKeyObject = {
-    /** The ID of the key */
-    keyId: string;
-    /**  details about the key */
-    keyInfo: SecretStorageKeyDescription;
-};
-/** Interface for managing account data on the server.
- *
- * A subset of {@link MatrixClient}.
- */
-export interface AccountDataClient extends TypedEventEmitter<ClientEvent.AccountData, ClientEventHandlerMap> {
-    /**
-     * Get account data event of given type for the current user. This variant
-     * gets account data directly from the homeserver if the local store is not
-     * ready, which can be useful very early in startup before the initial sync.
-     *
-     * @param eventType - The type of account data
-     * @returns The contents of the given account data event, or `null` if the event is not found
-     */
-    getAccountDataFromServer: <T extends Record<string, any>>(eventType: string) => Promise<T | null>;
-    /**
-     * Set account data event for the current user, with retries
-     *
-     * @param eventType - The type of account data
-     * @param content - the content object to be set
-     * @returns an empty object
-     */
-    setAccountData: (eventType: string, content: any) => Promise<{}>;
-}
-/**
- *  Application callbacks for use with {@link SecretStorage.ServerSideSecretStorageImpl}
- */
-export interface SecretStorageCallbacks {
-    /**
-     * Called to retrieve a secret storage encryption key
-     *
-     * Before a secret can be stored in server-side storage, it must be encrypted with one or more
-     * keys. Similarly, after it has been retrieved from storage, it must be decrypted with one of
-     * the keys it was encrypted with. These encryption keys are known as "secret storage keys".
-     *
-     * Descriptions of the secret storage keys are also stored in server-side storage, per the
-     * [matrix specification](https://spec.matrix.org/v1.6/client-server-api/#key-storage), so
-     * before a key can be used in this way, it must have been stored on the server. This is
-     * done via {@link ServerSideSecretStorage#addKey}.
-     *
-     * Obviously the keys themselves are not stored server-side, so the js-sdk calls this callback
-     * in order to retrieve a secret storage key from the application.
-     *
-     * @param keys - An options object, containing only the property `keys`.
-     *
-     * @param name - the name of the *secret* (NB: not the encryption key) being stored or retrieved.
-     *    This is the "event type" stored in account data.
-     *
-     * @returns a pair [`keyId`, `privateKey`], where `keyId` is one of the keys from the `keys` parameter,
-     *    and `privateKey` is the raw private encryption key, as appropriate for the encryption algorithm.
-     *    (For `m.secret_storage.v1.aes-hmac-sha2`, it is the input to an HKDF as defined in the
-     *    [specification](https://spec.matrix.org/v1.6/client-server-api/#msecret_storagev1aes-hmac-sha2).)
-     *
-     *    Alternatively, if none of the keys are known, may return `null` — in which case the original
-     *    storage/retrieval operation will fail with an exception.
-     */
-    getSecretStorageKey?: (keys: {
-        /**
-         * details of the secret storage keys required: a map from the key ID
-         * (excluding the `m.secret_storage.key.` prefix) to details of the key.
-         *
-         * When storing a secret, `keys` will contain exactly one entry; this method will be called
-         * once for each secret storage key to be used for encryption.
-         *
-         * For secret retrieval, `keys` may contain several entries, and the application can return
-         * any one of the requested keys.
-         */
-        keys: Record<string, SecretStorageKeyDescription>;
-    }, name: string) => Promise<[string, Uint8Array] | null>;
-}
-/**
- * Interface provided by SecretStorage implementations
- *
- * Normally this will just be an {@link ServerSideSecretStorageImpl}, but for backwards
- * compatibility some methods allow other implementations.
- */
-export interface ServerSideSecretStorage {
-    /**
-     * Add a key for encrypting secrets.
-     *
-     * @param algorithm - the algorithm used by the key.
-     * @param opts - the options for the algorithm.  The properties used
-     *     depend on the algorithm given.
-     * @param keyId - the ID of the key.  If not given, a random
-     *     ID will be generated.
-     *
-     * @returns details about the key.
-     */
-    addKey(algorithm: string, opts: AddSecretStorageKeyOpts, keyId?: string): Promise<SecretStorageKeyObject>;
-    /**
-     * Get the key information for a given ID.
-     *
-     * @param keyId - The ID of the key to check
-     *     for. Defaults to the default key ID if not provided.
-     * @returns If the key was found, the return value is an array of
-     *     the form [keyId, keyInfo].  Otherwise, null is returned.
-     *     XXX: why is this an array when addKey returns an object?
-     */
-    getKey(keyId?: string | null): Promise<SecretStorageKeyTuple | null>;
-    /**
-     * Check whether we have a key with a given ID.
-     *
-     * @param keyId - The ID of the key to check
-     *     for. Defaults to the default key ID if not provided.
-     * @returns Whether we have the key.
-     */
-    hasKey(keyId?: string): Promise<boolean>;
-    /**
-     * Check whether a key matches what we expect based on the key info
-     *
-     * @param key - the key to check
-     * @param info - the key info
-     *
-     * @returns whether or not the key matches
-     */
-    checkKey(key: Uint8Array, info: SecretStorageKeyDescriptionAesV1): Promise<boolean>;
-    /**
-     * Store an encrypted secret on the server.
-     *
-     * Details of the encryption keys to be used must previously have been stored in account data
-     * (for example, via {@link ServerSideSecretStorage#addKey}.
-     *
-     * @param name - The name of the secret - i.e., the "event type" to be stored in the account data
-     * @param secret - The secret contents.
-     * @param keys - The IDs of the keys to use to encrypt the secret, or null/undefined to use the default key
-     *     (will throw if no default key is set).
-     */
-    store(name: string, secret: string, keys?: string[] | null): Promise<void>;
-    /**
-     * Get a secret from storage, and decrypt it.
-     *
-     * @param name - the name of the secret - i.e., the "event type" stored in the account data
-     *
-     * @returns the decrypted contents of the secret, or "undefined" if `name` is not found in
-     *    the user's account data.
-     */
-    get(name: string): Promise<string | undefined>;
-    /**
-     * Check if a secret is stored on the server.
-     *
-     * @param name - the name of the secret
-     *
-     * @returns map of key name to key info the secret is encrypted
-     *     with, or null if it is not present or not encrypted with a trusted
-     *     key
-     */
-    isStored(name: string): Promise<Record<string, SecretStorageKeyDescriptionAesV1> | null>;
-    /**
-     * Get the current default key ID for encrypting secrets.
-     *
-     * @returns The default key ID or null if no default key ID is set
-     */
-    getDefaultKeyId(): Promise<string | null>;
-    /**
-     * Set the default key ID for encrypting secrets.
-     *
-     * @param keyId - The new default key ID
-     */
-    setDefaultKeyId(keyId: string): Promise<void>;
-}
-/**
- * Implementation of Server-side secret storage.
- *
- * Secret *sharing* is *not* implemented here: this class is strictly about the storage component of
- * SSSS.
- *
- * @see https://spec.matrix.org/v1.6/client-server-api/#storage
- */
-export declare class ServerSideSecretStorageImpl implements ServerSideSecretStorage {
-    private readonly accountDataAdapter;
-    private readonly callbacks;
-    /**
-     * Construct a new `SecretStorage`.
-     *
-     * Normally, it is unnecessary to call this directly, since MatrixClient automatically constructs one.
-     * However, it may be useful to construct a new `SecretStorage`, if custom `callbacks` are required, for example.
-     *
-     * @param accountDataAdapter - interface for fetching and setting account data on the server. Normally an instance
-     *   of {@link MatrixClient}.
-     * @param callbacks - application level callbacks for retrieving secret keys
-     */
-    constructor(accountDataAdapter: AccountDataClient, callbacks: SecretStorageCallbacks);
-    /**
-     * Get the current default key ID for encrypting secrets.
-     *
-     * @returns The default key ID or null if no default key ID is set
-     */
-    getDefaultKeyId(): Promise<string | null>;
-    /**
-     * Set the default key ID for encrypting secrets.
-     *
-     * @param keyId - The new default key ID
-     */
-    setDefaultKeyId(keyId: string): Promise<void>;
-    /**
-     * Add a key for encrypting secrets.
-     *
-     * @param algorithm - the algorithm used by the key.
-     * @param opts - the options for the algorithm.  The properties used
-     *     depend on the algorithm given.
-     * @param keyId - the ID of the key.  If not given, a random
-     *     ID will be generated.
-     *
-     * @returns An object with:
-     *     keyId: the ID of the key
-     *     keyInfo: details about the key (iv, mac, passphrase)
-     */
-    addKey(algorithm: string, opts: AddSecretStorageKeyOpts, keyId?: string): Promise<SecretStorageKeyObject>;
-    /**
-     * Get the key information for a given ID.
-     *
-     * @param keyId - The ID of the key to check
-     *     for. Defaults to the default key ID if not provided.
-     * @returns If the key was found, the return value is an array of
-     *     the form [keyId, keyInfo].  Otherwise, null is returned.
-     *     XXX: why is this an array when addKey returns an object?
-     */
-    getKey(keyId?: string | null): Promise<SecretStorageKeyTuple | null>;
-    /**
-     * Check whether we have a key with a given ID.
-     *
-     * @param keyId - The ID of the key to check
-     *     for. Defaults to the default key ID if not provided.
-     * @returns Whether we have the key.
-     */
-    hasKey(keyId?: string): Promise<boolean>;
-    /**
-     * Check whether a key matches what we expect based on the key info
-     *
-     * @param key - the key to check
-     * @param info - the key info
-     *
-     * @returns whether or not the key matches
-     */
-    checkKey(key: Uint8Array, info: SecretStorageKeyDescriptionAesV1): Promise<boolean>;
-    /**
-     * Store an encrypted secret on the server.
-     *
-     * Details of the encryption keys to be used must previously have been stored in account data
-     * (for example, via {@link ServerSideSecretStorageImpl#addKey}. {@link SecretStorageCallbacks#getSecretStorageKey} will be called to obtain a secret storage
-     * key to decrypt the secret.
-     *
-     * @param name - The name of the secret - i.e., the "event type" to be stored in the account data
-     * @param secret - The secret contents.
-     * @param keys - The IDs of the keys to use to encrypt the secret, or null/undefined to use the default key.
-     */
-    store(name: string, secret: string, keys?: string[] | null): Promise<void>;
-    /**
-     * Get a secret from storage, and decrypt it.
-     *
-     * {@link SecretStorageCallbacks#getSecretStorageKey} will be called to obtain a secret storage
-     * key to decrypt the secret.
-     *
-     * @param name - the name of the secret - i.e., the "event type" stored in the account data
-     *
-     * @returns the decrypted contents of the secret, or "undefined" if `name` is not found in
-     *    the user's account data.
-     */
-    get(name: string): Promise<string | undefined>;
-    /**
-     * Check if a secret is stored on the server.
-     *
-     * @param name - the name of the secret
-     *
-     * @returns map of key name to key info the secret is encrypted
-     *     with, or null if it is not present or not encrypted with a trusted
-     *     key
-     */
-    isStored(name: string): Promise<Record<string, SecretStorageKeyDescriptionAesV1> | null>;
-    private getSecretStorageKey;
-}
-/** trim trailing instances of '=' from a string
- *
- * @internal
- *
- * @param input - input string
- */
-export declare function trimTrailingEquals(input: string): string;
-/**
- * Calculate the MAC for checking the key.
- * See https://spec.matrix.org/v1.11/client-server-api/#msecret_storagev1aes-hmac-sha2, steps 3 and 4.
- *
- * @param key - the key to use
- * @param iv - The initialization vector as a base64-encoded string.
- *     If omitted, a random initialization vector will be created.
- * @returns An object that contains, `mac` and `iv` properties.
- */
-export declare function calculateKeyCheck(key: Uint8Array, iv?: string): Promise<AESEncryptedSecretStoragePayload>;
-//# sourceMappingURL=secret-storage.d.ts.map

package/lib/secret-storage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-storage.d.ts","sourceRoot":"","sources":["../src/secret-storage.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAMjE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAEhG,eAAO,MAAM,+BAA+B,sCAAsC,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,WAAW,iCAAiC;IAC9C,0CAA0C;IAE1C,IAAI,EAAE,MAAM,CAAC;IAEb,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAElB,2DAA2D;IAE3D,UAAU,EAAE,cAAc,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gCAAiC,SAAQ,iCAAiC;IAOvF,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IAEX,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAE3E;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC3B,kDAAkD;IAClD,SAAS,EAAE,UAAU,CAAC;IAEtB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IAEnB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC,iEAAiE;IACjE,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0HAA0H;IAC1H,GAAG,EAAE,UAAU,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC;AAE1F;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,OAAO,EAAE,2BAA2B,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB,CAAC,WAAW,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACxG;;;;;;;OAOG;IACH,wBAAwB,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAElG;;;;;;OAMG;IACH,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;CACpE;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,mBAAmB,CAAC,EAAE,CAClB,IAAI,EAAE;QACF;;;;;;;;;WASG;QACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;KACrD,EACD,IAAI,EAAE,MAAM,KACX,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;CAC7C;AAaD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE1G;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAErE;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzC;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,gCAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpF;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E;;;;;;;OAOG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzF;;;;OAIG;IACH,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1C;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA4B,YAAW,uBAAuB;IAYnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAZ9B;;;;;;;;;OASG;gBAEkB,kBAAkB,EAAE,iBAAiB,EACrC,SAAS,EAAE,sBAAsB;IAGtD;;;;OAIG;IACU,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQtD;;;;OAIG;IACI,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBpD;;;;;;;;;;;;OAYG;IACU,MAAM,CACf,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,uBAAuB,EAC7B,KAAK,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC;IAsClC;;;;;;;;OAQG;IACU,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAcjF;;;;;;OAMG;IACU,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrD;;;;;;;OAOG;IACU,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,gCAAgC,GAAG,OAAO,CAAC,OAAO,CAAC;IAchG;;;;;;;;;;OAUG;IACU,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAuCvF;;;;;;;;;;OAUG;IACU,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAuC3D;;;;;;;;OAQG;IACU,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,GAAG,IAAI,CAAC;YA0BvF,mBAAmB;CAoCpC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAcxD;AAKD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAEzG"}