@unwanted/matrix-sdk-mini 34.12.0 → 36.0.0

package/lib/rust-crypto/RoomEncryptor.js

@@ -1,299 +0,0 @@
-import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
-import _defineProperty from "@babel/runtime/helpers/defineProperty";
-/*
-Copyright 2023 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-import * as RustSdkCryptoJs from "@matrix-org/matrix-sdk-crypto-wasm";
-import { CollectStrategy, EncryptionAlgorithm, EncryptionSettings, HistoryVisibility as RustHistoryVisibility, RoomId, UserId } from "@matrix-org/matrix-sdk-crypto-wasm";
-import { EventType } from "../@types/event.js";
-import { logger, LogSpan } from "../logger.js";
-import { HistoryVisibility } from "../@types/partials.js";
-import { logDuration } from "../utils.js";
-import { KnownMembership } from "../@types/membership.js";
-import { DeviceIsolationModeKind } from "../crypto-api/index.js";
-
-/**
- * RoomEncryptor: responsible for encrypting messages to a given room
- *
- * @internal
- */
-export class RoomEncryptor {
-  /**
-   * @param olmMachine - The rust-sdk's OlmMachine
-   * @param keyClaimManager - Our KeyClaimManager, which manages the queue of one-time-key claim requests
-   * @param outgoingRequestManager - The OutgoingRequestManager, which manages the queue of outgoing requests.
-   * @param room - The room we want to encrypt for
-   * @param encryptionSettings - body of the m.room.encryption event currently in force in this room
-   */
-  constructor(olmMachine, keyClaimManager, outgoingRequestManager, room, encryptionSettings) {
-    this.olmMachine = olmMachine;
-    this.keyClaimManager = keyClaimManager;
-    this.outgoingRequestManager = outgoingRequestManager;
-    this.room = room;
-    this.encryptionSettings = encryptionSettings;
-    _defineProperty(this, "prefixedLogger", void 0);
-    /** whether the room members have been loaded and tracked for the first time */
-    _defineProperty(this, "lazyLoadedMembersResolved", false);
-    /**
-     * Ensures that there is only one encryption operation at a time for that room.
-     *
-     * An encryption operation is either a {@link prepareForEncryption} or an {@link encryptEvent} call.
-     */
-    _defineProperty(this, "currentEncryptionPromise", Promise.resolve());
-    this.prefixedLogger = logger.getChild("[".concat(room.roomId, " encryption]"));
-
-    // start tracking devices for any users already known to be in this room.
-    // Do not load members here, would defeat lazy loading.
-    var members = room.getJoinedMembers();
-
-    // At this point just mark the known members as tracked, it might not be the full list of members
-    // because of lazy loading. This is fine, because we will get a member list update when sending a message for
-    // the first time, see `RoomEncryptor#ensureEncryptionSession`
-    this.olmMachine.updateTrackedUsers(members.map(u => new RustSdkCryptoJs.UserId(u.userId))).catch(e => this.prefixedLogger.error("Error initializing tracked users", e));
-  }
-
-  /**
-   * Handle a new `m.room.encryption` event in this room
-   *
-   * @param config - The content of the encryption event
-   */
-  onCryptoEvent(config) {
-    if (JSON.stringify(this.encryptionSettings) != JSON.stringify(config)) {
-      // This should currently be unreachable, since the Rust SDK will reject any attempts to change config.
-      throw new Error("Cannot reconfigure an active RoomEncryptor");
-    }
-  }
-
-  /**
-   * Handle a new `m.room.member` event in this room
-   *
-   * @param member - new membership state
-   */
-  onRoomMembership(member) {
-    if (member.membership == KnownMembership.Join || member.membership == KnownMembership.Invite && this.room.shouldEncryptForInvitedMembers()) {
-      // make sure we are tracking the deviceList for this user
-      this.olmMachine.updateTrackedUsers([new UserId(member.userId)]).catch(e => {
-        this.prefixedLogger.error("Unable to update tracked users", e);
-      });
-    }
-
-    // TODO: handle leaves (including our own)
-  }
-
-  /**
-   * Prepare to encrypt events in this room.
-   *
-   * This ensures that we have a megolm session ready to use and that we have shared its key with all the devices
-   * in the room.
-   * @param globalBlacklistUnverifiedDevices - When `true`, and `deviceIsolationMode` is `AllDevicesIsolationMode`,
-   * will not send encrypted messages to unverified devices.
-   * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.
-   * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.
-   */
-  prepareForEncryption(globalBlacklistUnverifiedDevices, deviceIsolationMode) {
-    var _this = this;
-    return _asyncToGenerator(function* () {
-      // We consider a prepareForEncryption as an encryption promise as it will potentially share keys
-      // even if it doesn't send an event.
-      // Usually this is called when the user starts typing, so we want to make sure we have keys ready when the
-      // message is finally sent.
-      // If `encryptEvent` is invoked before `prepareForEncryption` has completed, the `encryptEvent` call will wait for
-      // `prepareForEncryption` to complete before executing.
-      // The part where `encryptEvent` shares the room key will then usually be a no-op as it was already performed by `prepareForEncryption`.
-      yield _this.encryptEvent(null, globalBlacklistUnverifiedDevices, deviceIsolationMode);
-    })();
-  }
-
-  /**
-   * Encrypt an event for this room, or prepare for encryption.
-   *
-   * This will ensure that we have a megolm session for this room, share it with the devices in the room, and
-   * then, if an event is provided, encrypt it using the session.
-   *
-   * @param event - Event to be encrypted, or null if only preparing for encryption (in which case we will pre-share the room key).
-   * @param globalBlacklistUnverifiedDevices - When `true`, and `deviceIsolationMode` is `AllDevicesIsolationMode`,
-   * will not send encrypted messages to unverified devices.
-   * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.
-   * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.
-   */
-  encryptEvent(event, globalBlacklistUnverifiedDevices, deviceIsolationMode) {
-    var _event$getTxnId,
-      _this2 = this;
-    var logger = new LogSpan(this.prefixedLogger, event ? (_event$getTxnId = event.getTxnId()) !== null && _event$getTxnId !== void 0 ? _event$getTxnId : "" : "prepareForEncryption");
-    // Ensure order of encryption to avoid message ordering issues, as the scheduler only ensures
-    // events order after they have been encrypted.
-    var prom = this.currentEncryptionPromise.catch(() => {
-      // Any errors in the previous call will have been reported already, so there is nothing to do here.
-      // we just throw away the error and start anew.
-    }).then(/*#__PURE__*/_asyncToGenerator(function* () {
-      yield logDuration(logger, "ensureEncryptionSession", /*#__PURE__*/_asyncToGenerator(function* () {
-        yield _this2.ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode);
-      }));
-      if (event) {
-        yield logDuration(logger, "encryptEventInner", /*#__PURE__*/_asyncToGenerator(function* () {
-          yield _this2.encryptEventInner(logger, event);
-        }));
-      }
-    }));
-    this.currentEncryptionPromise = prom;
-    return prom;
-  }
-
-  /**
-   * Prepare to encrypt events in this room.
-   *
-   * This ensures that we have a megolm session ready to use and that we have shared its key with all the devices
-   * in the room.
-   *
-   * @param logger - a place to write diagnostics to
-   * @param globalBlacklistUnverifiedDevices - When `true`, and `deviceIsolationMode` is `AllDevicesIsolationMode`,
-   * will not send encrypted messages to unverified devices.
-   * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.
-   * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.
-   */
-  ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode) {
-    var _this3 = this;
-    return _asyncToGenerator(function* () {
-      if (_this3.encryptionSettings.algorithm !== "m.megolm.v1.aes-sha2") {
-        throw new Error("Cannot encrypt in ".concat(_this3.room.roomId, " for unsupported algorithm '").concat(_this3.encryptionSettings.algorithm, "'"));
-      }
-      logger.debug("Starting encryption");
-      var members = yield _this3.room.getEncryptionTargetMembers();
-
-      // If this is the first time we are sending a message to the room, we may not yet have seen all the members
-      // (so the Crypto SDK might not have a device list for them). So, if this is the first time we are encrypting
-      // for this room, give the SDK the full list of members, to be on the safe side.
-      //
-      // This could end up being racy (if two calls to ensureEncryptionSession happen at the same time), but that's
-      // not a particular problem, since `OlmMachine.updateTrackedUsers` just adds any users that weren't already tracked.
-      if (!_this3.lazyLoadedMembersResolved) {
-        yield logDuration(_this3.prefixedLogger, "loadMembersIfNeeded: updateTrackedUsers", /*#__PURE__*/_asyncToGenerator(function* () {
-          yield _this3.olmMachine.updateTrackedUsers(members.map(u => new RustSdkCryptoJs.UserId(u.userId)));
-        }));
-        logger.debug("Updated tracked users");
-        _this3.lazyLoadedMembersResolved = true;
-
-        // Query keys in case we don't have them for newly tracked members.
-        // It's important after loading members for the first time, as likely most of them won't be
-        // known yet and will be unable to decrypt messages despite being in the room for long.
-        // This must be done before ensuring sessions. If not the devices of these users are not
-        // known yet and will not get the room key.
-        // We don't have API to only get the keys queries related to this member list, so we just
-        // process the pending requests from the olmMachine. (usually these are processed
-        // at the end of the sync, but we can't wait for that).
-        // XXX future improvement process only KeysQueryRequests for the users that have never been queried.
-        logger.debug("Processing outgoing requests");
-        yield logDuration(_this3.prefixedLogger, "doProcessOutgoingRequests", /*#__PURE__*/_asyncToGenerator(function* () {
-          yield _this3.outgoingRequestManager.doProcessOutgoingRequests();
-        }));
-      } else {
-        // If members are already loaded it's less critical to await on key queries.
-        // We might still want to trigger a processOutgoingRequests here.
-        // The call to `ensureSessionsForUsers` below will wait a bit on in-flight key queries we are
-        // interested in. If a sync handling happens in the meantime, and some new members are added to the room
-        // or have new devices it would give us a chance to query them before sending.
-        // It's less critical due to the racy nature of this process.
-        logger.debug("Processing outgoing requests in background");
-        _this3.outgoingRequestManager.doProcessOutgoingRequests();
-      }
-      logger.debug("Encrypting for users (shouldEncryptForInvitedMembers: ".concat(_this3.room.shouldEncryptForInvitedMembers(), "):"), members.map(u => "".concat(u.userId, " (").concat(u.membership, ")")));
-      var userList = members.map(u => new UserId(u.userId));
-      yield logDuration(_this3.prefixedLogger, "ensureSessionsForUsers", /*#__PURE__*/_asyncToGenerator(function* () {
-        yield _this3.keyClaimManager.ensureSessionsForUsers(logger, userList);
-      }));
-      var rustEncryptionSettings = new EncryptionSettings();
-      rustEncryptionSettings.historyVisibility = toRustHistoryVisibility(_this3.room.getHistoryVisibility());
-
-      // We only support megolm
-      rustEncryptionSettings.algorithm = EncryptionAlgorithm.MegolmV1AesSha2;
-
-      // We need to convert the rotation period from milliseconds to microseconds
-      // See https://spec.matrix.org/v1.8/client-server-api/#mroomencryption and
-      // https://matrix-org.github.io/matrix-rust-sdk-crypto-wasm/classes/EncryptionSettings.html#rotationPeriod
-      if (typeof _this3.encryptionSettings.rotation_period_ms === "number") {
-        rustEncryptionSettings.rotationPeriod = BigInt(_this3.encryptionSettings.rotation_period_ms * 1000);
-      }
-      if (typeof _this3.encryptionSettings.rotation_period_msgs === "number") {
-        rustEncryptionSettings.rotationPeriodMessages = BigInt(_this3.encryptionSettings.rotation_period_msgs);
-      }
-      switch (deviceIsolationMode.kind) {
-        case DeviceIsolationModeKind.AllDevicesIsolationMode:
-          {
-            var _this3$room$getBlackl;
-            // When this.room.getBlacklistUnverifiedDevices() === null, the global settings should be used
-            // See Room#getBlacklistUnverifiedDevices
-            var onlyAllowTrustedDevices = (_this3$room$getBlackl = _this3.room.getBlacklistUnverifiedDevices()) !== null && _this3$room$getBlackl !== void 0 ? _this3$room$getBlackl : globalBlacklistUnverifiedDevices;
-            rustEncryptionSettings.sharingStrategy = CollectStrategy.deviceBasedStrategy(onlyAllowTrustedDevices, deviceIsolationMode.errorOnVerifiedUserProblems);
-          }
-          break;
-        case DeviceIsolationModeKind.OnlySignedDevicesIsolationMode:
-          rustEncryptionSettings.sharingStrategy = CollectStrategy.identityBasedStrategy();
-          break;
-      }
-      yield logDuration(_this3.prefixedLogger, "shareRoomKey", /*#__PURE__*/_asyncToGenerator(function* () {
-        var shareMessages = yield _this3.olmMachine.shareRoomKey(new RoomId(_this3.room.roomId),
-        // safe to pass without cloning, as it's not reused here (before or after)
-        userList, rustEncryptionSettings);
-        if (shareMessages) {
-          for (var m of shareMessages) {
-            yield _this3.outgoingRequestManager.outgoingRequestProcessor.makeOutgoingRequest(m);
-          }
-        }
-      }));
-    })();
-  }
-
-  /**
-   * Discard any existing group session for this room
-   */
-  forceDiscardSession() {
-    var _this4 = this;
-    return _asyncToGenerator(function* () {
-      var r = yield _this4.olmMachine.invalidateGroupSession(new RoomId(_this4.room.roomId));
-      if (r) {
-        _this4.prefixedLogger.info("Discarded existing group session");
-      }
-    })();
-  }
-  encryptEventInner(logger, event) {
-    var _this5 = this;
-    return _asyncToGenerator(function* () {
-      logger.debug("Encrypting actual message content");
-      var encryptedContent = yield _this5.olmMachine.encryptRoomEvent(new RoomId(_this5.room.roomId), event.getType(), JSON.stringify(event.getContent()));
-      event.makeEncrypted(EventType.RoomMessageEncrypted, JSON.parse(encryptedContent), _this5.olmMachine.identityKeys.curve25519.toBase64(), _this5.olmMachine.identityKeys.ed25519.toBase64());
-      logger.debug("Encrypted event successfully");
-    })();
-  }
-}
-
-/**
- * Convert a HistoryVisibility to a RustHistoryVisibility
- * @param visibility - HistoryVisibility enum
- * @returns a RustHistoryVisibility enum
- */
-export function toRustHistoryVisibility(visibility) {
-  switch (visibility) {
-    case HistoryVisibility.Invited:
-      return RustHistoryVisibility.Invited;
-    case HistoryVisibility.Joined:
-      return RustHistoryVisibility.Joined;
-    case HistoryVisibility.Shared:
-      return RustHistoryVisibility.Shared;
-    case HistoryVisibility.WorldReadable:
-      return RustHistoryVisibility.WorldReadable;
-  }
-}
-//# sourceMappingURL=RoomEncryptor.js.map

package/lib/rust-crypto/RoomEncryptor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoomEncryptor.js","names":["RustSdkCryptoJs","CollectStrategy","EncryptionAlgorithm","EncryptionSettings","HistoryVisibility","RustHistoryVisibility","RoomId","UserId","EventType","logger","LogSpan","logDuration","KnownMembership","DeviceIsolationModeKind","RoomEncryptor","constructor","olmMachine","keyClaimManager","outgoingRequestManager","room","encryptionSettings","_defineProperty","Promise","resolve","prefixedLogger","getChild","concat","roomId","members","getJoinedMembers","updateTrackedUsers","map","u","userId","catch","e","error","onCryptoEvent","config","JSON","stringify","Error","onRoomMembership","member","membership","Join","Invite","shouldEncryptForInvitedMembers","prepareForEncryption","globalBlacklistUnverifiedDevices","deviceIsolationMode","_this","_asyncToGenerator","encryptEvent","event","_event$getTxnId","_this2","getTxnId","prom","currentEncryptionPromise","then","ensureEncryptionSession","encryptEventInner","_this3","algorithm","debug","getEncryptionTargetMembers","lazyLoadedMembersResolved","doProcessOutgoingRequests","userList","ensureSessionsForUsers","rustEncryptionSettings","historyVisibility","toRustHistoryVisibility","getHistoryVisibility","MegolmV1AesSha2","rotation_period_ms","rotationPeriod","BigInt","rotation_period_msgs","rotationPeriodMessages","kind","AllDevicesIsolationMode","_this3$room$getBlackl","onlyAllowTrustedDevices","getBlacklistUnverifiedDevices","sharingStrategy","deviceBasedStrategy","errorOnVerifiedUserProblems","OnlySignedDevicesIsolationMode","identityBasedStrategy","shareMessages","shareRoomKey","m","outgoingRequestProcessor","makeOutgoingRequest","forceDiscardSession","_this4","r","invalidateGroupSession","info","_this5","encryptedContent","encryptRoomEvent","getType","getContent","makeEncrypted","RoomMessageEncrypted","parse","identityKeys","curve25519","toBase64","ed25519","visibility","Invited","Joined","Shared","WorldReadable"],"sources":["../../src/rust-crypto/RoomEncryptor.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\nimport {\n    CollectStrategy,\n    EncryptionAlgorithm,\n    EncryptionSettings,\n    HistoryVisibility as RustHistoryVisibility,\n    OlmMachine,\n    RoomId,\n    ToDeviceRequest,\n    UserId,\n} from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport { EventType } from \"../@types/event.ts\";\nimport { IContent, MatrixEvent } from \"../models/event.ts\";\nimport { Room } from \"../models/room.ts\";\nimport { Logger, logger, LogSpan } from \"../logger.ts\";\nimport { KeyClaimManager } from \"./KeyClaimManager.ts\";\nimport { RoomMember } from \"../models/room-member.ts\";\nimport { HistoryVisibility } from \"../@types/partials.ts\";\nimport { OutgoingRequestsManager } from \"./OutgoingRequestsManager.ts\";\nimport { logDuration } from \"../utils.ts\";\nimport { KnownMembership } from \"../@types/membership.ts\";\nimport { DeviceIsolationMode, DeviceIsolationModeKind } from \"../crypto-api/index.ts\";\n\n/**\n * RoomEncryptor: responsible for encrypting messages to a given room\n *\n * @internal\n */\nexport class RoomEncryptor {\n    private readonly prefixedLogger: Logger;\n\n    /** whether the room members have been loaded and tracked for the first time */\n    private lazyLoadedMembersResolved = false;\n\n    /**\n     * Ensures that there is only one encryption operation at a time for that room.\n     *\n     * An encryption operation is either a {@link prepareForEncryption} or an {@link encryptEvent} call.\n     */\n    private currentEncryptionPromise: Promise<void> = Promise.resolve();\n\n    /**\n     * @param olmMachine - The rust-sdk's OlmMachine\n     * @param keyClaimManager - Our KeyClaimManager, which manages the queue of one-time-key claim requests\n     * @param outgoingRequestManager - The OutgoingRequestManager, which manages the queue of outgoing requests.\n     * @param room - The room we want to encrypt for\n     * @param encryptionSettings - body of the m.room.encryption event currently in force in this room\n     */\n    public constructor(\n        private readonly olmMachine: OlmMachine,\n        private readonly keyClaimManager: KeyClaimManager,\n        private readonly outgoingRequestManager: OutgoingRequestsManager,\n        private readonly room: Room,\n        private encryptionSettings: IContent,\n    ) {\n        this.prefixedLogger = logger.getChild(`[${room.roomId} encryption]`);\n\n        // start tracking devices for any users already known to be in this room.\n        // Do not load members here, would defeat lazy loading.\n        const members = room.getJoinedMembers();\n\n        // At this point just mark the known members as tracked, it might not be the full list of members\n        // because of lazy loading. This is fine, because we will get a member list update when sending a message for\n        // the first time, see `RoomEncryptor#ensureEncryptionSession`\n        this.olmMachine\n            .updateTrackedUsers(members.map((u) => new RustSdkCryptoJs.UserId(u.userId)))\n            .catch((e) => this.prefixedLogger.error(\"Error initializing tracked users\", e));\n    }\n\n    /**\n     * Handle a new `m.room.encryption` event in this room\n     *\n     * @param config - The content of the encryption event\n     */\n    public onCryptoEvent(config: IContent): void {\n        if (JSON.stringify(this.encryptionSettings) != JSON.stringify(config)) {\n            // This should currently be unreachable, since the Rust SDK will reject any attempts to change config.\n            throw new Error(\"Cannot reconfigure an active RoomEncryptor\");\n        }\n    }\n\n    /**\n     * Handle a new `m.room.member` event in this room\n     *\n     * @param member - new membership state\n     */\n    public onRoomMembership(member: RoomMember): void {\n        if (\n            member.membership == KnownMembership.Join ||\n            (member.membership == KnownMembership.Invite && this.room.shouldEncryptForInvitedMembers())\n        ) {\n            // make sure we are tracking the deviceList for this user\n            this.olmMachine.updateTrackedUsers([new UserId(member.userId)]).catch((e) => {\n                this.prefixedLogger.error(\"Unable to update tracked users\", e);\n            });\n        }\n\n        // TODO: handle leaves (including our own)\n    }\n\n    /**\n     * Prepare to encrypt events in this room.\n     *\n     * This ensures that we have a megolm session ready to use and that we have shared its key with all the devices\n     * in the room.\n     * @param globalBlacklistUnverifiedDevices - When `true`, and `deviceIsolationMode` is `AllDevicesIsolationMode`,\n     * will not send encrypted messages to unverified devices.\n     * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.\n     * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.\n     */\n    public async prepareForEncryption(\n        globalBlacklistUnverifiedDevices: boolean,\n        deviceIsolationMode: DeviceIsolationMode,\n    ): Promise<void> {\n        // We consider a prepareForEncryption as an encryption promise as it will potentially share keys\n        // even if it doesn't send an event.\n        // Usually this is called when the user starts typing, so we want to make sure we have keys ready when the\n        // message is finally sent.\n        // If `encryptEvent` is invoked before `prepareForEncryption` has completed, the `encryptEvent` call will wait for\n        // `prepareForEncryption` to complete before executing.\n        // The part where `encryptEvent` shares the room key will then usually be a no-op as it was already performed by `prepareForEncryption`.\n        await this.encryptEvent(null, globalBlacklistUnverifiedDevices, deviceIsolationMode);\n    }\n\n    /**\n     * Encrypt an event for this room, or prepare for encryption.\n     *\n     * This will ensure that we have a megolm session for this room, share it with the devices in the room, and\n     * then, if an event is provided, encrypt it using the session.\n     *\n     * @param event - Event to be encrypted, or null if only preparing for encryption (in which case we will pre-share the room key).\n     * @param globalBlacklistUnverifiedDevices - When `true`, and `deviceIsolationMode` is `AllDevicesIsolationMode`,\n     * will not send encrypted messages to unverified devices.\n     * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.\n     * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.\n     */\n    public encryptEvent(\n        event: MatrixEvent | null,\n        globalBlacklistUnverifiedDevices: boolean,\n        deviceIsolationMode: DeviceIsolationMode,\n    ): Promise<void> {\n        const logger = new LogSpan(this.prefixedLogger, event ? (event.getTxnId() ?? \"\") : \"prepareForEncryption\");\n        // Ensure order of encryption to avoid message ordering issues, as the scheduler only ensures\n        // events order after they have been encrypted.\n        const prom = this.currentEncryptionPromise\n            .catch(() => {\n                // Any errors in the previous call will have been reported already, so there is nothing to do here.\n                // we just throw away the error and start anew.\n            })\n            .then(async () => {\n                await logDuration(logger, \"ensureEncryptionSession\", async () => {\n                    await this.ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode);\n                });\n                if (event) {\n                    await logDuration(logger, \"encryptEventInner\", async () => {\n                        await this.encryptEventInner(logger, event);\n                    });\n                }\n            });\n\n        this.currentEncryptionPromise = prom;\n        return prom;\n    }\n\n    /**\n     * Prepare to encrypt events in this room.\n     *\n     * This ensures that we have a megolm session ready to use and that we have shared its key with all the devices\n     * in the room.\n     *\n     * @param logger - a place to write diagnostics to\n     * @param globalBlacklistUnverifiedDevices - When `true`, and `deviceIsolationMode` is `AllDevicesIsolationMode`,\n     * will not send encrypted messages to unverified devices.\n     * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.\n     * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.\n     */\n    private async ensureEncryptionSession(\n        logger: LogSpan,\n        globalBlacklistUnverifiedDevices: boolean,\n        deviceIsolationMode: DeviceIsolationMode,\n    ): Promise<void> {\n        if (this.encryptionSettings.algorithm !== \"m.megolm.v1.aes-sha2\") {\n            throw new Error(\n                `Cannot encrypt in ${this.room.roomId} for unsupported algorithm '${this.encryptionSettings.algorithm}'`,\n            );\n        }\n        logger.debug(\"Starting encryption\");\n\n        const members = await this.room.getEncryptionTargetMembers();\n\n        // If this is the first time we are sending a message to the room, we may not yet have seen all the members\n        // (so the Crypto SDK might not have a device list for them). So, if this is the first time we are encrypting\n        // for this room, give the SDK the full list of members, to be on the safe side.\n        //\n        // This could end up being racy (if two calls to ensureEncryptionSession happen at the same time), but that's\n        // not a particular problem, since `OlmMachine.updateTrackedUsers` just adds any users that weren't already tracked.\n        if (!this.lazyLoadedMembersResolved) {\n            await logDuration(this.prefixedLogger, \"loadMembersIfNeeded: updateTrackedUsers\", async () => {\n                await this.olmMachine.updateTrackedUsers(members.map((u) => new RustSdkCryptoJs.UserId(u.userId)));\n            });\n            logger.debug(`Updated tracked users`);\n            this.lazyLoadedMembersResolved = true;\n\n            // Query keys in case we don't have them for newly tracked members.\n            // It's important after loading members for the first time, as likely most of them won't be\n            // known yet and will be unable to decrypt messages despite being in the room for long.\n            // This must be done before ensuring sessions. If not the devices of these users are not\n            // known yet and will not get the room key.\n            // We don't have API to only get the keys queries related to this member list, so we just\n            // process the pending requests from the olmMachine. (usually these are processed\n            // at the end of the sync, but we can't wait for that).\n            // XXX future improvement process only KeysQueryRequests for the users that have never been queried.\n            logger.debug(`Processing outgoing requests`);\n\n            await logDuration(this.prefixedLogger, \"doProcessOutgoingRequests\", async () => {\n                await this.outgoingRequestManager.doProcessOutgoingRequests();\n            });\n        } else {\n            // If members are already loaded it's less critical to await on key queries.\n            // We might still want to trigger a processOutgoingRequests here.\n            // The call to `ensureSessionsForUsers` below will wait a bit on in-flight key queries we are\n            // interested in. If a sync handling happens in the meantime, and some new members are added to the room\n            // or have new devices it would give us a chance to query them before sending.\n            // It's less critical due to the racy nature of this process.\n            logger.debug(`Processing outgoing requests in background`);\n            this.outgoingRequestManager.doProcessOutgoingRequests();\n        }\n\n        logger.debug(\n            `Encrypting for users (shouldEncryptForInvitedMembers: ${this.room.shouldEncryptForInvitedMembers()}):`,\n            members.map((u) => `${u.userId} (${u.membership})`),\n        );\n\n        const userList = members.map((u) => new UserId(u.userId));\n\n        await logDuration(this.prefixedLogger, \"ensureSessionsForUsers\", async () => {\n            await this.keyClaimManager.ensureSessionsForUsers(logger, userList);\n        });\n\n        const rustEncryptionSettings = new EncryptionSettings();\n        rustEncryptionSettings.historyVisibility = toRustHistoryVisibility(this.room.getHistoryVisibility());\n\n        // We only support megolm\n        rustEncryptionSettings.algorithm = EncryptionAlgorithm.MegolmV1AesSha2;\n\n        // We need to convert the rotation period from milliseconds to microseconds\n        // See https://spec.matrix.org/v1.8/client-server-api/#mroomencryption and\n        // https://matrix-org.github.io/matrix-rust-sdk-crypto-wasm/classes/EncryptionSettings.html#rotationPeriod\n        if (typeof this.encryptionSettings.rotation_period_ms === \"number\") {\n            rustEncryptionSettings.rotationPeriod = BigInt(this.encryptionSettings.rotation_period_ms * 1000);\n        }\n\n        if (typeof this.encryptionSettings.rotation_period_msgs === \"number\") {\n            rustEncryptionSettings.rotationPeriodMessages = BigInt(this.encryptionSettings.rotation_period_msgs);\n        }\n\n        switch (deviceIsolationMode.kind) {\n            case DeviceIsolationModeKind.AllDevicesIsolationMode:\n                {\n                    // When this.room.getBlacklistUnverifiedDevices() === null, the global settings should be used\n                    // See Room#getBlacklistUnverifiedDevices\n                    const onlyAllowTrustedDevices =\n                        this.room.getBlacklistUnverifiedDevices() ?? globalBlacklistUnverifiedDevices;\n                    rustEncryptionSettings.sharingStrategy = CollectStrategy.deviceBasedStrategy(\n                        onlyAllowTrustedDevices,\n                        deviceIsolationMode.errorOnVerifiedUserProblems,\n                    );\n                }\n                break;\n            case DeviceIsolationModeKind.OnlySignedDevicesIsolationMode:\n                rustEncryptionSettings.sharingStrategy = CollectStrategy.identityBasedStrategy();\n                break;\n        }\n\n        await logDuration(this.prefixedLogger, \"shareRoomKey\", async () => {\n            const shareMessages: ToDeviceRequest[] = await this.olmMachine.shareRoomKey(\n                new RoomId(this.room.roomId),\n                // safe to pass without cloning, as it's not reused here (before or after)\n                userList,\n                rustEncryptionSettings,\n            );\n            if (shareMessages) {\n                for (const m of shareMessages) {\n                    await this.outgoingRequestManager.outgoingRequestProcessor.makeOutgoingRequest(m);\n                }\n            }\n        });\n    }\n\n    /**\n     * Discard any existing group session for this room\n     */\n    public async forceDiscardSession(): Promise<void> {\n        const r = await this.olmMachine.invalidateGroupSession(new RoomId(this.room.roomId));\n        if (r) {\n            this.prefixedLogger.info(\"Discarded existing group session\");\n        }\n    }\n\n    private async encryptEventInner(logger: LogSpan, event: MatrixEvent): Promise<void> {\n        logger.debug(\"Encrypting actual message content\");\n        const encryptedContent = await this.olmMachine.encryptRoomEvent(\n            new RoomId(this.room.roomId),\n            event.getType(),\n            JSON.stringify(event.getContent()),\n        );\n\n        event.makeEncrypted(\n            EventType.RoomMessageEncrypted,\n            JSON.parse(encryptedContent),\n            this.olmMachine.identityKeys.curve25519.toBase64(),\n            this.olmMachine.identityKeys.ed25519.toBase64(),\n        );\n\n        logger.debug(\"Encrypted event successfully\");\n    }\n}\n\n/**\n * Convert a HistoryVisibility to a RustHistoryVisibility\n * @param visibility - HistoryVisibility enum\n * @returns a RustHistoryVisibility enum\n */\nexport function toRustHistoryVisibility(visibility: HistoryVisibility): RustHistoryVisibility {\n    switch (visibility) {\n        case HistoryVisibility.Invited:\n            return RustHistoryVisibility.Invited;\n        case HistoryVisibility.Joined:\n            return RustHistoryVisibility.Joined;\n        case HistoryVisibility.Shared:\n            return RustHistoryVisibility.Shared;\n        case HistoryVisibility.WorldReadable:\n            return RustHistoryVisibility.WorldReadable;\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,KAAKA,eAAe,MAAM,oCAAoC;AACrE,SACIC,eAAe,EACfC,mBAAmB,EACnBC,kBAAkB,EAClBC,iBAAiB,IAAIC,qBAAqB,EAE1CC,MAAM,EAENC,MAAM,QACH,oCAAoC;AAE3C,SAASC,SAAS,QAAQ,oBAAoB;AAG9C,SAAiBC,MAAM,EAAEC,OAAO,QAAQ,cAAc;AAGtD,SAASN,iBAAiB,QAAQ,uBAAuB;AAEzD,SAASO,WAAW,QAAQ,aAAa;AACzC,SAASC,eAAe,QAAQ,yBAAyB;AACzD,SAA8BC,uBAAuB,QAAQ,wBAAwB;;AAErF;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,aAAa,CAAC;EAavB;AACJ;AACA;AACA;AACA;AACA;AACA;EACWC,WAAWA,CACGC,UAAsB,EACtBC,eAAgC,EAChCC,sBAA+C,EAC/CC,IAAU,EACnBC,kBAA4B,EACtC;IAAA,KALmBJ,UAAsB,GAAtBA,UAAsB;IAAA,KACtBC,eAAgC,GAAhCA,eAAgC;IAAA,KAChCC,sBAA+C,GAA/CA,sBAA+C;IAAA,KAC/CC,IAAU,GAAVA,IAAU;IAAA,KACnBC,kBAA4B,GAA5BA,kBAA4B;IAAAC,eAAA;IAtBxC;IAAAA,eAAA,oCACoC,KAAK;IAEzC;AACJ;AACA;AACA;AACA;IAJIA,eAAA,mCAKkDC,OAAO,CAACC,OAAO,CAAC,CAAC;IAgB/D,IAAI,CAACC,cAAc,GAAGf,MAAM,CAACgB,QAAQ,KAAAC,MAAA,CAAKP,IAAI,CAACQ,MAAM,iBAAc,CAAC;;IAEpE;IACA;IACA,IAAMC,OAAO,GAAGT,IAAI,CAACU,gBAAgB,CAAC,CAAC;;IAEvC;IACA;IACA;IACA,IAAI,CAACb,UAAU,CACVc,kBAAkB,CAACF,OAAO,CAACG,GAAG,CAAEC,CAAC,IAAK,IAAIhC,eAAe,CAACO,MAAM,CAACyB,CAAC,CAACC,MAAM,CAAC,CAAC,CAAC,CAC5EC,KAAK,CAAEC,CAAC,IAAK,IAAI,CAACX,cAAc,CAACY,KAAK,CAAC,kCAAkC,EAAED,CAAC,CAAC,CAAC;EACvF;;EAEA;AACJ;AACA;AACA;AACA;EACWE,aAAaA,CAACC,MAAgB,EAAQ;IACzC,IAAIC,IAAI,CAACC,SAAS,CAAC,IAAI,CAACpB,kBAAkB,CAAC,IAAImB,IAAI,CAACC,SAAS,CAACF,MAAM,CAAC,EAAE;MACnE;MACA,MAAM,IAAIG,KAAK,CAAC,4CAA4C,CAAC;IACjE;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACWC,gBAAgBA,CAACC,MAAkB,EAAQ;IAC9C,IACIA,MAAM,CAACC,UAAU,IAAIhC,eAAe,CAACiC,IAAI,IACxCF,MAAM,CAACC,UAAU,IAAIhC,eAAe,CAACkC,MAAM,IAAI,IAAI,CAAC3B,IAAI,CAAC4B,8BAA8B,CAAC,CAAE,EAC7F;MACE;MACA,IAAI,CAAC/B,UAAU,CAACc,kBAAkB,CAAC,CAAC,IAAIvB,MAAM,CAACoC,MAAM,CAACV,MAAM,CAAC,CAAC,CAAC,CAACC,KAAK,CAAEC,CAAC,IAAK;QACzE,IAAI,CAACX,cAAc,CAACY,KAAK,CAAC,gCAAgC,EAAED,CAAC,CAAC;MAClE,CAAC,CAAC;IACN;;IAEA;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACiBa,oBAAoBA,CAC7BC,gCAAyC,EACzCC,mBAAwC,EAC3B;IAAA,IAAAC,KAAA;IAAA,OAAAC,iBAAA;MACb;MACA;MACA;MACA;MACA;MACA;MACA;MACA,MAAMD,KAAI,CAACE,YAAY,CAAC,IAAI,EAAEJ,gCAAgC,EAAEC,mBAAmB,CAAC;IAAC;EACzF;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWG,YAAYA,CACfC,KAAyB,EACzBL,gCAAyC,EACzCC,mBAAwC,EAC3B;IAAA,IAAAK,eAAA;MAAAC,MAAA;IACb,IAAM/C,MAAM,GAAG,IAAIC,OAAO,CAAC,IAAI,CAACc,cAAc,EAAE8B,KAAK,IAAAC,eAAA,GAAID,KAAK,CAACG,QAAQ,CAAC,CAAC,cAAAF,eAAA,cAAAA,eAAA,GAAI,EAAE,GAAI,sBAAsB,CAAC;IAC1G;IACA;IACA,IAAMG,IAAI,GAAG,IAAI,CAACC,wBAAwB,CACrCzB,KAAK,CAAC,MAAM;MACT;MACA;IAAA,CACH,CAAC,CACD0B,IAAI,cAAAR,iBAAA,CAAC,aAAY;MACd,MAAMzC,WAAW,CAACF,MAAM,EAAE,yBAAyB,eAAA2C,iBAAA,CAAE,aAAY;QAC7D,MAAMI,MAAI,CAACK,uBAAuB,CAACpD,MAAM,EAAEwC,gCAAgC,EAAEC,mBAAmB,CAAC;MACrG,CAAC,EAAC;MACF,IAAII,KAAK,EAAE;QACP,MAAM3C,WAAW,CAACF,MAAM,EAAE,mBAAmB,eAAA2C,iBAAA,CAAE,aAAY;UACvD,MAAMI,MAAI,CAACM,iBAAiB,CAACrD,MAAM,EAAE6C,KAAK,CAAC;QAC/C,CAAC,EAAC;MACN;IACJ,CAAC,EAAC;IAEN,IAAI,CAACK,wBAAwB,GAAGD,IAAI;IACpC,OAAOA,IAAI;EACf;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACkBG,uBAAuBA,CACjCpD,MAAe,EACfwC,gCAAyC,EACzCC,mBAAwC,EAC3B;IAAA,IAAAa,MAAA;IAAA,OAAAX,iBAAA;MACb,IAAIW,MAAI,CAAC3C,kBAAkB,CAAC4C,SAAS,KAAK,sBAAsB,EAAE;QAC9D,MAAM,IAAIvB,KAAK,sBAAAf,MAAA,CACUqC,MAAI,CAAC5C,IAAI,CAACQ,MAAM,kCAAAD,MAAA,CAA+BqC,MAAI,CAAC3C,kBAAkB,CAAC4C,SAAS,MACzG,CAAC;MACL;MACAvD,MAAM,CAACwD,KAAK,CAAC,qBAAqB,CAAC;MAEnC,IAAMrC,OAAO,SAASmC,MAAI,CAAC5C,IAAI,CAAC+C,0BAA0B,CAAC,CAAC;;MAE5D;MACA;MACA;MACA;MACA;MACA;MACA,IAAI,CAACH,MAAI,CAACI,yBAAyB,EAAE;QACjC,MAAMxD,WAAW,CAACoD,MAAI,CAACvC,cAAc,EAAE,yCAAyC,eAAA4B,iBAAA,CAAE,aAAY;UAC1F,MAAMW,MAAI,CAAC/C,UAAU,CAACc,kBAAkB,CAACF,OAAO,CAACG,GAAG,CAAEC,CAAC,IAAK,IAAIhC,eAAe,CAACO,MAAM,CAACyB,CAAC,CAACC,MAAM,CAAC,CAAC,CAAC;QACtG,CAAC,EAAC;QACFxB,MAAM,CAACwD,KAAK,wBAAwB,CAAC;QACrCF,MAAI,CAACI,yBAAyB,GAAG,IAAI;;QAErC;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA1D,MAAM,CAACwD,KAAK,+BAA+B,CAAC;QAE5C,MAAMtD,WAAW,CAACoD,MAAI,CAACvC,cAAc,EAAE,2BAA2B,eAAA4B,iBAAA,CAAE,aAAY;UAC5E,MAAMW,MAAI,CAAC7C,sBAAsB,CAACkD,yBAAyB,CAAC,CAAC;QACjE,CAAC,EAAC;MACN,CAAC,MAAM;QACH;QACA;QACA;QACA;QACA;QACA;QACA3D,MAAM,CAACwD,KAAK,6CAA6C,CAAC;QAC1DF,MAAI,CAAC7C,sBAAsB,CAACkD,yBAAyB,CAAC,CAAC;MAC3D;MAEA3D,MAAM,CAACwD,KAAK,0DAAAvC,MAAA,CACiDqC,MAAI,CAAC5C,IAAI,CAAC4B,8BAA8B,CAAC,CAAC,SACnGnB,OAAO,CAACG,GAAG,CAAEC,CAAC,OAAAN,MAAA,CAAQM,CAAC,CAACC,MAAM,QAAAP,MAAA,CAAKM,CAAC,CAACY,UAAU,MAAG,CACtD,CAAC;MAED,IAAMyB,QAAQ,GAAGzC,OAAO,CAACG,GAAG,CAAEC,CAAC,IAAK,IAAIzB,MAAM,CAACyB,CAAC,CAACC,MAAM,CAAC,CAAC;MAEzD,MAAMtB,WAAW,CAACoD,MAAI,CAACvC,cAAc,EAAE,wBAAwB,eAAA4B,iBAAA,CAAE,aAAY;QACzE,MAAMW,MAAI,CAAC9C,eAAe,CAACqD,sBAAsB,CAAC7D,MAAM,EAAE4D,QAAQ,CAAC;MACvE,CAAC,EAAC;MAEF,IAAME,sBAAsB,GAAG,IAAIpE,kBAAkB,CAAC,CAAC;MACvDoE,sBAAsB,CAACC,iBAAiB,GAAGC,uBAAuB,CAACV,MAAI,CAAC5C,IAAI,CAACuD,oBAAoB,CAAC,CAAC,CAAC;;MAEpG;MACAH,sBAAsB,CAACP,SAAS,GAAG9D,mBAAmB,CAACyE,eAAe;;MAEtE;MACA;MACA;MACA,IAAI,OAAOZ,MAAI,CAAC3C,kBAAkB,CAACwD,kBAAkB,KAAK,QAAQ,EAAE;QAChEL,sBAAsB,CAACM,cAAc,GAAGC,MAAM,CAACf,MAAI,CAAC3C,kBAAkB,CAACwD,kBAAkB,GAAG,IAAI,CAAC;MACrG;MAEA,IAAI,OAAOb,MAAI,CAAC3C,kBAAkB,CAAC2D,oBAAoB,KAAK,QAAQ,EAAE;QAClER,sBAAsB,CAACS,sBAAsB,GAAGF,MAAM,CAACf,MAAI,CAAC3C,kBAAkB,CAAC2D,oBAAoB,CAAC;MACxG;MAEA,QAAQ7B,mBAAmB,CAAC+B,IAAI;QAC5B,KAAKpE,uBAAuB,CAACqE,uBAAuB;UAChD;YAAA,IAAAC,qBAAA;YACI;YACA;YACA,IAAMC,uBAAuB,IAAAD,qBAAA,GACzBpB,MAAI,CAAC5C,IAAI,CAACkE,6BAA6B,CAAC,CAAC,cAAAF,qBAAA,cAAAA,qBAAA,GAAIlC,gCAAgC;YACjFsB,sBAAsB,CAACe,eAAe,GAAGrF,eAAe,CAACsF,mBAAmB,CACxEH,uBAAuB,EACvBlC,mBAAmB,CAACsC,2BACxB,CAAC;UACL;UACA;QACJ,KAAK3E,uBAAuB,CAAC4E,8BAA8B;UACvDlB,sBAAsB,CAACe,eAAe,GAAGrF,eAAe,CAACyF,qBAAqB,CAAC,CAAC;UAChF;MACR;MAEA,MAAM/E,WAAW,CAACoD,MAAI,CAACvC,cAAc,EAAE,cAAc,eAAA4B,iBAAA,CAAE,aAAY;QAC/D,IAAMuC,aAAgC,SAAS5B,MAAI,CAAC/C,UAAU,CAAC4E,YAAY,CACvE,IAAItF,MAAM,CAACyD,MAAI,CAAC5C,IAAI,CAACQ,MAAM,CAAC;QAC5B;QACA0C,QAAQ,EACRE,sBACJ,CAAC;QACD,IAAIoB,aAAa,EAAE;UACf,KAAK,IAAME,CAAC,IAAIF,aAAa,EAAE;YAC3B,MAAM5B,MAAI,CAAC7C,sBAAsB,CAAC4E,wBAAwB,CAACC,mBAAmB,CAACF,CAAC,CAAC;UACrF;QACJ;MACJ,CAAC,EAAC;IAAC;EACP;;EAEA;AACJ;AACA;EACiBG,mBAAmBA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAA7C,iBAAA;MAC9C,IAAM8C,CAAC,SAASD,MAAI,CAACjF,UAAU,CAACmF,sBAAsB,CAAC,IAAI7F,MAAM,CAAC2F,MAAI,CAAC9E,IAAI,CAACQ,MAAM,CAAC,CAAC;MACpF,IAAIuE,CAAC,EAAE;QACHD,MAAI,CAACzE,cAAc,CAAC4E,IAAI,CAAC,kCAAkC,CAAC;MAChE;IAAC;EACL;EAEctC,iBAAiBA,CAACrD,MAAe,EAAE6C,KAAkB,EAAiB;IAAA,IAAA+C,MAAA;IAAA,OAAAjD,iBAAA;MAChF3C,MAAM,CAACwD,KAAK,CAAC,mCAAmC,CAAC;MACjD,IAAMqC,gBAAgB,SAASD,MAAI,CAACrF,UAAU,CAACuF,gBAAgB,CAC3D,IAAIjG,MAAM,CAAC+F,MAAI,CAAClF,IAAI,CAACQ,MAAM,CAAC,EAC5B2B,KAAK,CAACkD,OAAO,CAAC,CAAC,EACfjE,IAAI,CAACC,SAAS,CAACc,KAAK,CAACmD,UAAU,CAAC,CAAC,CACrC,CAAC;MAEDnD,KAAK,CAACoD,aAAa,CACflG,SAAS,CAACmG,oBAAoB,EAC9BpE,IAAI,CAACqE,KAAK,CAACN,gBAAgB,CAAC,EAC5BD,MAAI,CAACrF,UAAU,CAAC6F,YAAY,CAACC,UAAU,CAACC,QAAQ,CAAC,CAAC,EAClDV,MAAI,CAACrF,UAAU,CAAC6F,YAAY,CAACG,OAAO,CAACD,QAAQ,CAAC,CAClD,CAAC;MAEDtG,MAAM,CAACwD,KAAK,CAAC,8BAA8B,CAAC;IAAC;EACjD;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASQ,uBAAuBA,CAACwC,UAA6B,EAAyB;EAC1F,QAAQA,UAAU;IACd,KAAK7G,iBAAiB,CAAC8G,OAAO;MAC1B,OAAO7G,qBAAqB,CAAC6G,OAAO;IACxC,KAAK9G,iBAAiB,CAAC+G,MAAM;MACzB,OAAO9G,qBAAqB,CAAC8G,MAAM;IACvC,KAAK/G,iBAAiB,CAACgH,MAAM;MACzB,OAAO/G,qBAAqB,CAAC+G,MAAM;IACvC,KAAKhH,iBAAiB,CAACiH,aAAa;MAChC,OAAOhH,qBAAqB,CAACgH,aAAa;EAClD;AACJ","ignoreList":[]}

package/lib/rust-crypto/backup.d.ts

@@ -1,254 +0,0 @@
-import { OlmMachine } from "@matrix-org/matrix-sdk-crypto-wasm";
-import * as RustSdkCryptoJs from "@matrix-org/matrix-sdk-crypto-wasm";
-import { BackupTrustInfo, KeyBackupCheck, KeyBackupInfo, KeyBackupSession, Curve25519SessionData, KeyBackupRestoreOpts, KeyBackupRestoreResult, KeyBackupRoomSessions } from "../crypto-api/keybackup.ts";
-import { IHttpOpts, MatrixHttpApi } from "../http-api/index.ts";
-import { IMegolmSessionData } from "../crypto/index.ts";
-import { TypedEventEmitter } from "../models/typed-event-emitter.ts";
-import { OutgoingRequestProcessor } from "./OutgoingRequestProcessor.ts";
-import { BackupDecryptor } from "../common-crypto/CryptoBackend.ts";
-import { ImportRoomKeysOpts, CryptoEvent } from "../crypto-api/index.ts";
-import { AESEncryptedSecretStoragePayload } from "../@types/AESEncryptedSecretStoragePayload.ts";
-/** Authentification of the backup info, depends on algorithm */
-type AuthData = KeyBackupInfo["auth_data"];
-/**
- * Holds information of a created keybackup.
- * Useful to get the generated private key material and save it securely somewhere.
- */
-interface KeyBackupCreationInfo {
-    version: string;
-    algorithm: string;
-    authData: AuthData;
-    decryptionKey: RustSdkCryptoJs.BackupDecryptionKey;
-}
-/**
- * @internal
- */
-export declare class RustBackupManager extends TypedEventEmitter<RustBackupCryptoEvents, RustBackupCryptoEventMap> {
-    private readonly olmMachine;
-    private readonly http;
-    private readonly outgoingRequestProcessor;
-    /** Have we checked if there is a backup on the server which we can use */
-    private checkedForBackup;
-    /**
-     * The latest backup version on the server, when we last checked.
-     *
-     * If there was no backup on the server, `null`. If our attempt to check resulted in an error, `undefined`.
-     *
-     * Note that the backup was not necessarily verified.
-     */
-    private serverBackupInfo;
-    private activeBackupVersion;
-    private stopped;
-    /** whether {@link backupKeysLoop} is currently running */
-    private backupKeysLoopRunning;
-    constructor(olmMachine: OlmMachine, http: MatrixHttpApi<IHttpOpts & {
-        onlyData: true;
-    }>, outgoingRequestProcessor: OutgoingRequestProcessor);
-    /**
-     * Tells the RustBackupManager to stop.
-     * The RustBackupManager is scheduling background uploads of keys to the backup, this
-     * call allows to cancel the process when the client is stoppped.
-     */
-    stop(): void;
-    /**
-     * Get the backup version we are currently backing up to, if any
-     */
-    getActiveBackupVersion(): Promise<string | null>;
-    /**
-     * Return the details of the latest backup on the server, when we last checked.
-     *
-     * This normally returns a cached value, but if we haven't yet made a request to the server, it will fire one off.
-     * It will always return the details of the active backup if key backup is enabled.
-     *
-     * If there was no backup on the server, `null`. If our attempt to check resulted in an error, `undefined`.
-     */
-    getServerBackupInfo(): Promise<KeyBackupInfo | null | undefined>;
-    /**
-     * Determine if a key backup can be trusted.
-     *
-     * @param info - key backup info dict from {@link MatrixClient#getKeyBackupVersion}.
-     */
-    isKeyBackupTrusted(info: KeyBackupInfo): Promise<BackupTrustInfo>;
-    /**
-     * Re-check the key backup and enable/disable it as appropriate.
-     *
-     * @param force - whether we should force a re-check even if one has already happened.
-     */
-    checkKeyBackupAndEnable(force: boolean): Promise<KeyBackupCheck | null>;
-    /**
-     * Handles a backup secret received event and store it if it matches the current backup version.
-     *
-     * @param secret - The secret as received from a `m.secret.send` event for secret `m.megolm_backup.v1`.
-     * @returns true if the secret is valid and has been stored, false otherwise.
-     */
-    handleBackupSecretReceived(secret: string): Promise<boolean>;
-    saveBackupDecryptionKey(backupDecryptionKey: RustSdkCryptoJs.BackupDecryptionKey, version: string): Promise<void>;
-    /**
-     * Import a list of room keys previously exported by exportRoomKeys
-     *
-     * @param keys - a list of session export objects
-     * @param opts - options object
-     * @returns a promise which resolves once the keys have been imported
-     */
-    importRoomKeys(keys: IMegolmSessionData[], opts?: ImportRoomKeysOpts): Promise<void>;
-    /**
-     * Import a list of room keys previously exported by exportRoomKeysAsJson
-     *
-     * @param jsonKeys - a JSON string encoding a list of session export objects,
-     *    each of which is an IMegolmSessionData
-     * @param opts - options object
-     * @returns a promise which resolves once the keys have been imported
-     */
-    importRoomKeysAsJson(jsonKeys: string, opts?: ImportRoomKeysOpts): Promise<void>;
-    /**
-     * Implementation of {@link CryptoBackend#importBackedUpRoomKeys}.
-     */
-    importBackedUpRoomKeys(keys: IMegolmSessionData[], backupVersion: string, opts?: ImportRoomKeysOpts): Promise<void>;
-    private keyBackupCheckInProgress;
-    /** Helper for `checkKeyBackup` */
-    private doCheckKeyBackup;
-    private enableKeyBackup;
-    /**
-     * Restart the backup key loop if there is an active trusted backup.
-     * Doesn't try to check the backup server side. To be called when a new
-     * megolm key is known locally.
-     */
-    maybeUploadKey(): Promise<void>;
-    private disableKeyBackup;
-    private backupKeysLoop;
-    /**
-     * Utility method to count the number of keys in a backup request, in order to update the remaining keys count.
-     * This should be the chunk size of the backup request for all requests but the last, but we don't have access to it
-     * (it's static in the Rust SDK).
-     * @param batch - The backup request to count the keys from.
-     *
-     * @returns The number of keys in the backup request.
-     */
-    private keysCountInBatch;
-    /**
-     * Get information about a key backup from the server
-     * - If version is provided, get information about that backup version.
-     * - If no version is provided, get information about the latest backup.
-     *
-     * @param version - The version of the backup to get information about.
-     * @returns Information object from API or null if there is no active backup.
-     */
-    requestKeyBackupVersion(version?: string): Promise<KeyBackupInfo | null>;
-    /**
-     * Creates a new key backup by generating a new random private key.
-     *
-     * If there is an existing backup server side it will be deleted and replaced
-     * by the new one.
-     *
-     * @param signObject - Method that should sign the backup with existing device and
-     * existing identity.
-     * @returns a KeyBackupCreationInfo - All information related to the backup.
-     */
-    setupKeyBackup(signObject: (authData: AuthData) => Promise<void>): Promise<KeyBackupCreationInfo>;
-    /**
-     * Deletes all key backups.
-     *
-     * Will call the API to delete active backup until there is no more present.
-     */
-    deleteAllKeyBackupVersions(): Promise<void>;
-    /**
-     * Deletes the given key backup.
-     *
-     * @param version - The backup version to delete.
-     */
-    deleteKeyBackupVersion(version: string): Promise<void>;
-    /**
-     * Creates a new backup decryptor for the given private key.
-     * @param decryptionKey - The private key to use for decryption.
-     */
-    createBackupDecryptor(decryptionKey: RustSdkCryptoJs.BackupDecryptionKey): BackupDecryptor;
-    /**
-     * Restore a key backup.
-     *
-     * @param backupVersion - The version of the backup to restore.
-     * @param backupDecryptor - The backup decryptor to use to decrypt the keys.
-     * @param opts - Options for the restore.
-     * @returns The total number of keys and the total imported.
-     */
-    restoreKeyBackup(backupVersion: string, backupDecryptor: BackupDecryptor, opts?: KeyBackupRestoreOpts): Promise<KeyBackupRestoreResult>;
-    /**
-     * Call `/room_keys/keys` to download the key backup (room keys) for the given backup version.
-     * https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keyskeys
-     *
-     * @param backupVersion
-     * @returns The key backup response.
-     */
-    private downloadKeyBackup;
-    /**
-     * Import the room keys from a `/room_keys/keys` call.
-     * Calls `opts.progressCallback` with the progress of the import.
-     *
-     * @param keyBackup - The response from the server containing the keys to import.
-     * @param backupVersion - The version of the backup info.
-     * @param backupDecryptor - The backup decryptor to use to decrypt the keys.
-     * @param opts - Options for the import.
-     *
-     * @returns The total number of keys and the total imported.
-     *
-     * @private
-     */
-    private importKeyBackup;
-}
-/**
- * Implementation of {@link BackupDecryptor} for the rust crypto backend.
- */
-export declare class RustBackupDecryptor implements BackupDecryptor {
-    private decryptionKey;
-    sourceTrusted: boolean;
-    constructor(decryptionKey: RustSdkCryptoJs.BackupDecryptionKey);
-    /**
-     * Implements {@link BackupDecryptor#decryptSessions}
-     */
-    decryptSessions(ciphertexts: Record<string, KeyBackupSession<Curve25519SessionData | AESEncryptedSecretStoragePayload>>): Promise<IMegolmSessionData[]>;
-    /**
-     * Implements {@link BackupDecryptor#free}
-     */
-    free(): void;
-}
-/**
- * Fetch a key backup info from the server.
- *
- * If `version` is provided, calls `GET /room_keys/version/$version` and gets the backup info for that version.
- * See https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keysversionversion.
- *
- * If not, calls `GET /room_keys/version` and gets the latest backup info.
- * See https://spec.matrix.org/v1.12/client-server-api/#get_matrixclientv3room_keysversion
- *
- * @param http
- * @param version - the specific version of the backup info to fetch
- * @returns The key backup info or null if there is no backup.
- */
-export declare function requestKeyBackupVersion(http: MatrixHttpApi<IHttpOpts & {
-    onlyData: true;
-}>, version?: string): Promise<KeyBackupInfo | null>;
-/**
- * Checks if the provided decryption key matches the public key of the key backup info.
- *
- * @param decryptionKey - The decryption key to check.
- * @param keyBackupInfo - The key backup info to check against.
- * @returns `true` if the decryption key matches the key backup info, `false` otherwise.
- */
-export declare function decryptionKeyMatchesKeyBackupInfo(decryptionKey: RustSdkCryptoJs.BackupDecryptionKey, keyBackupInfo: KeyBackupInfo): boolean;
-export type RustBackupCryptoEvents = CryptoEvent.KeyBackupStatus | CryptoEvent.KeyBackupSessionsRemaining | CryptoEvent.KeyBackupFailed | CryptoEvent.KeyBackupDecryptionKeyCached;
-export type RustBackupCryptoEventMap = {
-    [CryptoEvent.KeyBackupStatus]: (enabled: boolean) => void;
-    [CryptoEvent.KeyBackupSessionsRemaining]: (remaining: number) => void;
-    [CryptoEvent.KeyBackupFailed]: (errCode: string) => void;
-    [CryptoEvent.KeyBackupDecryptionKeyCached]: (version: string) => void;
-};
-/**
- * Response from GET `/room_keys/keys` endpoint.
- * See https://spec.matrix.org/latest/client-server-api/#get_matrixclientv3room_keyskeys
- */
-export interface KeyBackup {
-    rooms: Record<string, {
-        sessions: KeyBackupRoomSessions;
-    }>;
-}
-export {};
-//# sourceMappingURL=backup.d.ts.map

package/lib/rust-crypto/backup.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/backup.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,UAAU,EAAyB,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,eAAe,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EACH,eAAe,EAEf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACxB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAgB,SAAS,EAAe,aAAa,EAAU,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAA6B,kBAAkB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AAEjG,gEAAgE;AAChE,KAAK,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;AAE3C;;;GAGG;AACH,UAAU,qBAAqB;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,aAAa,EAAE,eAAe,CAAC,mBAAmB,CAAC;CACtD;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,iBAAiB,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAoBlG,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IArB7C,0EAA0E;IAC1E,OAAO,CAAC,gBAAgB,CAAS;IAEjC;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB,CAA+C;IAEvE,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,OAAO,CAAS;IAExB,0DAA0D;IAC1D,OAAO,CAAC,qBAAqB,CAAS;gBAGjB,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,EACnD,wBAAwB,EAAE,wBAAwB;IAKvE;;;;OAIG;IACI,IAAI,IAAI,IAAI;IAInB;;OAEG;IACU,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK7D;;;;;;;OAOG;IACU,mBAAmB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,GAAG,SAAS,CAAC;IAO7E;;;;OAIG;IACU,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAa9E;;;;OAIG;IACI,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAc9E;;;;;OAKG;IACU,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsC5D,uBAAuB,CAChC,mBAAmB,EAAE,eAAe,CAAC,mBAAmB,EACxD,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;;;OAMG;IACU,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjG;;;;;;;OAOG;IACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7F;;OAEG;IACU,sBAAsB,CAC/B,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAwBhB,OAAO,CAAC,wBAAwB,CAA+C;IAE/E,kCAAkC;YACpB,gBAAgB;YAwDhB,eAAe;IAgB7B;;;;OAIG;IACU,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;YAM9B,gBAAgB;YAMhB,cAAc;IA+H5B;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;;;;;;OAOG;IACU,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAIrF;;;;;;;;;OASG;IACU,cAAc,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAkC9G;;;;OAIG;IACU,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAWxD;;;;OAIG;IACU,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnE;;;OAGG;IACI,qBAAqB,CAAC,aAAa,EAAE,eAAe,CAAC,mBAAmB,GAAG,eAAe;IAIjG;;;;;;;OAOG;IACU,gBAAgB,CACzB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,eAAe,EAChC,IAAI,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IASlC;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;OAYG;YACW,eAAe;CAwFhC;AAqBD;;GAEG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IACvD,OAAO,CAAC,aAAa,CAAsC;IACpD,aAAa,EAAE,OAAO,CAAC;gBAEX,aAAa,EAAE,eAAe,CAAC,mBAAmB;IAKrE;;OAEG;IACU,eAAe,CACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,qBAAqB,GAAG,gCAAgC,CAAC,CAAC,GACxG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAoBhC;;OAEG;IACI,IAAI,IAAI,IAAI;CAGtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CACzC,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC,EACnD,OAAO,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC7C,aAAa,EAAE,eAAe,CAAC,mBAAmB,EAClD,aAAa,EAAE,aAAa,GAC7B,OAAO,CAGT;AAeD,MAAM,MAAM,sBAAsB,GAC5B,WAAW,CAAC,eAAe,GAC3B,WAAW,CAAC,0BAA0B,GACtC,WAAW,CAAC,eAAe,GAC3B,WAAW,CAAC,4BAA4B,CAAC;AAE/C,MAAM,MAAM,wBAAwB,GAAG;IACnC,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC1D,CAAC,WAAW,CAAC,0BAA0B,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACtE,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzE,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,SAAS;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;CAC9D"}