@unwanted/matrix-sdk-mini 34.13.0 → 36.0.0

package/lib/oidc/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","names":["jwtDecode","logger","OidcError","isRecord","value","Array","isArray","requiredStringProperty","wellKnown","key","optionalStringProperty","error","concat","optionalStringArrayProperty","every","v","requiredArrayValue","array","includes","validateOIDCIssuerWellKnown","Error","OpSupport","isInvalid","some","isValid","authorizationEndpoint","tokenEndpoint","registrationEndpoint","accountManagementEndpoint","accountManagementActionsSupported","isValidatedIssuerMetadata","metadata","decodeIdToken","token","validateIdToken","idToken","issuer","clientId","nonce","claims","iss","aud","undefined","exp","Date","now","InvalidIdToken","validateStoredUserState","userState","MissingOrInvalidStoredState","isValidBearerTokenResponse","response","toLowerCase","validateBearerTokenResponse","InvalidBearerTokenResponse"],"sources":["../../src/oidc/validate.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { jwtDecode } from \"jwt-decode\";\nimport { IdTokenClaims, OidcMetadata, SigninResponse } from \"oidc-client-ts\";\n\nimport { logger } from \"../logger.ts\";\nimport { OidcError } from \"./error.ts\";\n\nexport type ValidatedIssuerConfig = {\n    authorizationEndpoint: string;\n    tokenEndpoint: string;\n    registrationEndpoint?: string;\n    accountManagementEndpoint?: string;\n    accountManagementActionsSupported?: string[];\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n    !!value && typeof value === \"object\" && !Array.isArray(value);\nconst requiredStringProperty = (wellKnown: Record<string, unknown>, key: string): boolean => {\n    if (!wellKnown[key] || !optionalStringProperty(wellKnown, key)) {\n        logger.error(`Missing or invalid property: ${key}`);\n        return false;\n    }\n    return true;\n};\nconst optionalStringProperty = (wellKnown: Record<string, unknown>, key: string): boolean => {\n    if (!!wellKnown[key] && typeof wellKnown[key] !== \"string\") {\n        logger.error(`Invalid property: ${key}`);\n        return false;\n    }\n    return true;\n};\nconst optionalStringArrayProperty = (wellKnown: Record<string, unknown>, key: string): boolean => {\n    if (\n        !!wellKnown[key] &&\n        (!Array.isArray(wellKnown[key]) || !(<unknown[]>wellKnown[key]).every((v) => typeof v === \"string\"))\n    ) {\n        logger.error(`Invalid property: ${key}`);\n        return false;\n    }\n    return true;\n};\nconst requiredArrayValue = (wellKnown: Record<string, unknown>, key: string, value: any): boolean => {\n    const array = wellKnown[key];\n    if (!array || !Array.isArray(array) || !array.includes(value)) {\n        logger.error(`Invalid property: ${key}. ${value} is required.`);\n        return false;\n    }\n    return true;\n};\n\n/**\n * Validates issuer `.well-known/openid-configuration`\n * As defined in RFC5785 https://openid.net/specs/openid-connect-discovery-1_0.html\n * validates that OP is compatible with Element's OIDC flow\n * @param wellKnown - json object\n * @returns valid issuer config\n * @throws Error - when issuer config is not found or is invalid\n */\nexport const validateOIDCIssuerWellKnown = (wellKnown: unknown): ValidatedIssuerConfig => {\n    if (!isRecord(wellKnown)) {\n        logger.error(\"Issuer configuration not found or malformed\");\n        throw new Error(OidcError.OpSupport);\n    }\n\n    const isInvalid = [\n        requiredStringProperty(wellKnown, \"authorization_endpoint\"),\n        requiredStringProperty(wellKnown, \"token_endpoint\"),\n        requiredStringProperty(wellKnown, \"revocation_endpoint\"),\n        optionalStringProperty(wellKnown, \"registration_endpoint\"),\n        optionalStringProperty(wellKnown, \"account_management_uri\"),\n        optionalStringProperty(wellKnown, \"device_authorization_endpoint\"),\n        optionalStringArrayProperty(wellKnown, \"account_management_actions_supported\"),\n        requiredArrayValue(wellKnown, \"response_types_supported\", \"code\"),\n        requiredArrayValue(wellKnown, \"grant_types_supported\", \"authorization_code\"),\n        requiredArrayValue(wellKnown, \"code_challenge_methods_supported\", \"S256\"),\n    ].some((isValid) => !isValid);\n\n    if (!isInvalid) {\n        return {\n            authorizationEndpoint: <string>wellKnown[\"authorization_endpoint\"],\n            tokenEndpoint: <string>wellKnown[\"token_endpoint\"],\n            registrationEndpoint: <string>wellKnown[\"registration_endpoint\"],\n            accountManagementEndpoint: <string>wellKnown[\"account_management_uri\"],\n            accountManagementActionsSupported: <string[]>wellKnown[\"account_management_actions_supported\"],\n        };\n    }\n\n    logger.error(\"Issuer configuration not valid\");\n    throw new Error(OidcError.OpSupport);\n};\n\n/**\n * Metadata from OIDC authority discovery\n * With validated properties required in type\n */\nexport type ValidatedIssuerMetadata = Partial<OidcMetadata> &\n    Pick<\n        OidcMetadata,\n        | \"issuer\"\n        | \"authorization_endpoint\"\n        | \"token_endpoint\"\n        | \"registration_endpoint\"\n        | \"revocation_endpoint\"\n        | \"response_types_supported\"\n        | \"grant_types_supported\"\n        | \"code_challenge_methods_supported\"\n        | \"device_authorization_endpoint\"\n    > & {\n        // MSC2965 extensions to the OIDC spec\n        account_management_uri?: string;\n        account_management_actions_supported?: string[];\n    };\n\n/**\n * Wraps validateOIDCIssuerWellKnown in a type assertion\n * that asserts expected properties are present\n * (Typescript assertions cannot be arrow functions)\n * @param metadata - issuer openid-configuration response\n * @throws when metadata validation fails\n */\nexport function isValidatedIssuerMetadata(\n    metadata: Partial<OidcMetadata>,\n): asserts metadata is ValidatedIssuerMetadata {\n    validateOIDCIssuerWellKnown(metadata);\n}\n\nexport const decodeIdToken = (token: string): IdTokenClaims => {\n    try {\n        return jwtDecode<IdTokenClaims>(token);\n    } catch (error) {\n        logger.error(\"Could not decode id_token\", error);\n        throw error;\n    }\n};\n\n/**\n * Validate idToken\n * https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation\n * @param idToken - id token from token endpoint\n * @param issuer - issuer for the OP as found during discovery\n * @param clientId - this client's id as registered with the OP\n * @param nonce - nonce used in the authentication request\n * @throws when id token is invalid\n */\nexport const validateIdToken = (\n    idToken: string | undefined,\n    issuer: string,\n    clientId: string,\n    nonce: string | undefined,\n): void => {\n    try {\n        if (!idToken) {\n            throw new Error(\"No ID token\");\n        }\n        const claims = decodeIdToken(idToken);\n\n        // The Issuer Identifier for the OpenID Provider MUST exactly match the value of the iss (issuer) Claim.\n        if (claims.iss !== issuer) {\n            throw new Error(\"Invalid issuer\");\n        }\n        /**\n         * The Client MUST validate that the aud (audience) Claim contains its client_id value registered at the Issuer identified by the iss (issuer) Claim as an audience.\n         * The aud (audience) Claim MAY contain an array with more than one element.\n         * The ID Token MUST be rejected if the ID Token does not list the Client as a valid audience, or if it contains additional audiences not trusted by the Client.\n         * EW: Don't accept tokens with other untrusted audiences\n         * */\n        if (claims.aud !== clientId) {\n            throw new Error(\"Invalid audience\");\n        }\n\n        /**\n         * If a nonce value was sent in the Authentication Request, a nonce Claim MUST be present and its value checked\n         * to verify that it is the same value as the one that was sent in the Authentication Request.\n         */\n        if (nonce !== undefined && claims.nonce !== nonce) {\n            throw new Error(\"Invalid nonce\");\n        }\n\n        /**\n         * The current time MUST be before the time represented by the exp Claim.\n         *  exp is an epoch timestamp in seconds\n         * */\n        if (!claims.exp || Date.now() > claims.exp * 1000) {\n            throw new Error(\"Invalid expiry\");\n        }\n    } catch (error) {\n        logger.error(\"Invalid ID token\", error);\n        throw new Error(OidcError.InvalidIdToken);\n    }\n};\n\n/**\n * State we ask OidcClient to store when starting oidc authorization flow (in `generateOidcAuthorizationUrl`)\n * so that we can access it on return from the OP and complete login\n */\nexport type UserState = {\n    /**\n     * Remember which server we were trying to login to\n     */\n    homeserverUrl: string;\n    identityServerUrl?: string;\n    /**\n     * Used to validate id token\n     */\n    nonce: string;\n};\n/**\n * Validate stored user state exists and is valid\n * @param userState - userState returned by oidcClient.processSigninResponse\n * @throws when userState is invalid\n */\nexport function validateStoredUserState(userState: unknown): asserts userState is UserState {\n    if (!isRecord(userState)) {\n        logger.error(\"Stored user state not found\");\n        throw new Error(OidcError.MissingOrInvalidStoredState);\n    }\n    const isInvalid = [\n        requiredStringProperty(userState, \"homeserverUrl\"),\n        requiredStringProperty(userState, \"nonce\"),\n        optionalStringProperty(userState, \"identityServerUrl\"),\n    ].some((isValid) => !isValid);\n\n    if (isInvalid) {\n        throw new Error(OidcError.MissingOrInvalidStoredState);\n    }\n}\n\n/**\n * The expected response type from the token endpoint during authorization code flow\n * Normalized to always use capitalized 'Bearer' for token_type\n *\n * See https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.4,\n * https://openid.net/specs/openid-connect-basic-1_0.html#TokenOK.\n */\nexport type BearerTokenResponse = {\n    token_type: \"Bearer\";\n    access_token: string;\n    scope: string;\n    refresh_token?: string;\n    expires_in?: number;\n    // from oidc-client-ts\n    expires_at?: number;\n    id_token: string;\n};\n\n/**\n * Make required properties required in type\n */\ntype ValidSignInResponse = SigninResponse &\n    BearerTokenResponse & {\n        token_type: \"Bearer\" | \"bearer\";\n    };\n\nconst isValidBearerTokenResponse = (response: unknown): response is ValidSignInResponse =>\n    isRecord(response) &&\n    requiredStringProperty(response, \"token_type\") &&\n    // token_type is case insensitive, some OPs return `token_type: \"bearer\"`\n    (response[\"token_type\"] as string).toLowerCase() === \"bearer\" &&\n    requiredStringProperty(response, \"access_token\") &&\n    requiredStringProperty(response, \"refresh_token\") &&\n    (!(\"expires_in\" in response) || typeof response[\"expires_in\"] === \"number\");\n\nexport function validateBearerTokenResponse(response: unknown): asserts response is ValidSignInResponse {\n    if (!isValidBearerTokenResponse(response)) {\n        throw new Error(OidcError.InvalidBearerTokenResponse);\n    }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,SAAS,QAAQ,YAAY;AAGtC,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,SAAS,QAAQ,YAAY;AAUtC,IAAMC,QAAQ,GAAIC,KAAc,IAC5B,CAAC,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC;AACjE,IAAMG,sBAAsB,GAAGA,CAACC,SAAkC,EAAEC,GAAW,KAAc;EACzF,IAAI,CAACD,SAAS,CAACC,GAAG,CAAC,IAAI,CAACC,sBAAsB,CAACF,SAAS,EAAEC,GAAG,CAAC,EAAE;IAC5DR,MAAM,CAACU,KAAK,iCAAAC,MAAA,CAAiCH,GAAG,CAAE,CAAC;IACnD,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AACD,IAAMC,sBAAsB,GAAGA,CAACF,SAAkC,EAAEC,GAAW,KAAc;EACzF,IAAI,CAAC,CAACD,SAAS,CAACC,GAAG,CAAC,IAAI,OAAOD,SAAS,CAACC,GAAG,CAAC,KAAK,QAAQ,EAAE;IACxDR,MAAM,CAACU,KAAK,sBAAAC,MAAA,CAAsBH,GAAG,CAAE,CAAC;IACxC,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AACD,IAAMI,2BAA2B,GAAGA,CAACL,SAAkC,EAAEC,GAAW,KAAc;EAC9F,IACI,CAAC,CAACD,SAAS,CAACC,GAAG,CAAC,KACf,CAACJ,KAAK,CAACC,OAAO,CAACE,SAAS,CAACC,GAAG,CAAC,CAAC,IAAI,CAAaD,SAAS,CAACC,GAAG,CAAC,CAAEK,KAAK,CAAEC,CAAC,IAAK,OAAOA,CAAC,KAAK,QAAQ,CAAC,CAAC,EACtG;IACEd,MAAM,CAACU,KAAK,sBAAAC,MAAA,CAAsBH,GAAG,CAAE,CAAC;IACxC,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AACD,IAAMO,kBAAkB,GAAGA,CAACR,SAAkC,EAAEC,GAAW,EAAEL,KAAU,KAAc;EACjG,IAAMa,KAAK,GAAGT,SAAS,CAACC,GAAG,CAAC;EAC5B,IAAI,CAACQ,KAAK,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACW,KAAK,CAAC,IAAI,CAACA,KAAK,CAACC,QAAQ,CAACd,KAAK,CAAC,EAAE;IAC3DH,MAAM,CAACU,KAAK,sBAAAC,MAAA,CAAsBH,GAAG,QAAAG,MAAA,CAAKR,KAAK,kBAAe,CAAC;IAC/D,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMe,2BAA2B,GAAIX,SAAkB,IAA4B;EACtF,IAAI,CAACL,QAAQ,CAACK,SAAS,CAAC,EAAE;IACtBP,MAAM,CAACU,KAAK,CAAC,6CAA6C,CAAC;IAC3D,MAAM,IAAIS,KAAK,CAAClB,SAAS,CAACmB,SAAS,CAAC;EACxC;EAEA,IAAMC,SAAS,GAAG,CACdf,sBAAsB,CAACC,SAAS,EAAE,wBAAwB,CAAC,EAC3DD,sBAAsB,CAACC,SAAS,EAAE,gBAAgB,CAAC,EACnDD,sBAAsB,CAACC,SAAS,EAAE,qBAAqB,CAAC,EACxDE,sBAAsB,CAACF,SAAS,EAAE,uBAAuB,CAAC,EAC1DE,sBAAsB,CAACF,SAAS,EAAE,wBAAwB,CAAC,EAC3DE,sBAAsB,CAACF,SAAS,EAAE,+BAA+B,CAAC,EAClEK,2BAA2B,CAACL,SAAS,EAAE,sCAAsC,CAAC,EAC9EQ,kBAAkB,CAACR,SAAS,EAAE,0BAA0B,EAAE,MAAM,CAAC,EACjEQ,kBAAkB,CAACR,SAAS,EAAE,uBAAuB,EAAE,oBAAoB,CAAC,EAC5EQ,kBAAkB,CAACR,SAAS,EAAE,kCAAkC,EAAE,MAAM,CAAC,CAC5E,CAACe,IAAI,CAAEC,OAAO,IAAK,CAACA,OAAO,CAAC;EAE7B,IAAI,CAACF,SAAS,EAAE;IACZ,OAAO;MACHG,qBAAqB,EAAUjB,SAAS,CAAC,wBAAwB,CAAC;MAClEkB,aAAa,EAAUlB,SAAS,CAAC,gBAAgB,CAAC;MAClDmB,oBAAoB,EAAUnB,SAAS,CAAC,uBAAuB,CAAC;MAChEoB,yBAAyB,EAAUpB,SAAS,CAAC,wBAAwB,CAAC;MACtEqB,iCAAiC,EAAYrB,SAAS,CAAC,sCAAsC;IACjG,CAAC;EACL;EAEAP,MAAM,CAACU,KAAK,CAAC,gCAAgC,CAAC;EAC9C,MAAM,IAAIS,KAAK,CAAClB,SAAS,CAACmB,SAAS,CAAC;AACxC,CAAC;;AAED;AACA;AACA;AACA;;AAmBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASS,yBAAyBA,CACrCC,QAA+B,EACY;EAC3CZ,2BAA2B,CAACY,QAAQ,CAAC;AACzC;AAEA,OAAO,IAAMC,aAAa,GAAIC,KAAa,IAAoB;EAC3D,IAAI;IACA,OAAOjC,SAAS,CAAgBiC,KAAK,CAAC;EAC1C,CAAC,CAAC,OAAOtB,KAAK,EAAE;IACZV,MAAM,CAACU,KAAK,CAAC,2BAA2B,EAAEA,KAAK,CAAC;IAChD,MAAMA,KAAK;EACf;AACJ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMuB,eAAe,GAAGA,CAC3BC,OAA2B,EAC3BC,MAAc,EACdC,QAAgB,EAChBC,KAAyB,KAClB;EACP,IAAI;IACA,IAAI,CAACH,OAAO,EAAE;MACV,MAAM,IAAIf,KAAK,CAAC,aAAa,CAAC;IAClC;IACA,IAAMmB,MAAM,GAAGP,aAAa,CAACG,OAAO,CAAC;;IAErC;IACA,IAAII,MAAM,CAACC,GAAG,KAAKJ,MAAM,EAAE;MACvB,MAAM,IAAIhB,KAAK,CAAC,gBAAgB,CAAC;IACrC;IACA;AACR;AACA;AACA;AACA;AACA;IACQ,IAAImB,MAAM,CAACE,GAAG,KAAKJ,QAAQ,EAAE;MACzB,MAAM,IAAIjB,KAAK,CAAC,kBAAkB,CAAC;IACvC;;IAEA;AACR;AACA;AACA;IACQ,IAAIkB,KAAK,KAAKI,SAAS,IAAIH,MAAM,CAACD,KAAK,KAAKA,KAAK,EAAE;MAC/C,MAAM,IAAIlB,KAAK,CAAC,eAAe,CAAC;IACpC;;IAEA;AACR;AACA;AACA;IACQ,IAAI,CAACmB,MAAM,CAACI,GAAG,IAAIC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGN,MAAM,CAACI,GAAG,GAAG,IAAI,EAAE;MAC/C,MAAM,IAAIvB,KAAK,CAAC,gBAAgB,CAAC;IACrC;EACJ,CAAC,CAAC,OAAOT,KAAK,EAAE;IACZV,MAAM,CAACU,KAAK,CAAC,kBAAkB,EAAEA,KAAK,CAAC;IACvC,MAAM,IAAIS,KAAK,CAAClB,SAAS,CAAC4C,cAAc,CAAC;EAC7C;AACJ,CAAC;;AAED;AACA;AACA;AACA;;AAYA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,uBAAuBA,CAACC,SAAkB,EAAkC;EACxF,IAAI,CAAC7C,QAAQ,CAAC6C,SAAS,CAAC,EAAE;IACtB/C,MAAM,CAACU,KAAK,CAAC,6BAA6B,CAAC;IAC3C,MAAM,IAAIS,KAAK,CAAClB,SAAS,CAAC+C,2BAA2B,CAAC;EAC1D;EACA,IAAM3B,SAAS,GAAG,CACdf,sBAAsB,CAACyC,SAAS,EAAE,eAAe,CAAC,EAClDzC,sBAAsB,CAACyC,SAAS,EAAE,OAAO,CAAC,EAC1CtC,sBAAsB,CAACsC,SAAS,EAAE,mBAAmB,CAAC,CACzD,CAACzB,IAAI,CAAEC,OAAO,IAAK,CAACA,OAAO,CAAC;EAE7B,IAAIF,SAAS,EAAE;IACX,MAAM,IAAIF,KAAK,CAAClB,SAAS,CAAC+C,2BAA2B,CAAC;EAC1D;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAYA;AACA;AACA;;AAMA,IAAMC,0BAA0B,GAAIC,QAAiB,IACjDhD,QAAQ,CAACgD,QAAQ,CAAC,IAClB5C,sBAAsB,CAAC4C,QAAQ,EAAE,YAAY,CAAC;AAC9C;AACCA,QAAQ,CAAC,YAAY,CAAC,CAAYC,WAAW,CAAC,CAAC,KAAK,QAAQ,IAC7D7C,sBAAsB,CAAC4C,QAAQ,EAAE,cAAc,CAAC,IAChD5C,sBAAsB,CAAC4C,QAAQ,EAAE,eAAe,CAAC,KAChD,EAAE,YAAY,IAAIA,QAAQ,CAAC,IAAI,OAAOA,QAAQ,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC;AAE/E,OAAO,SAASE,2BAA2BA,CAACF,QAAiB,EAA2C;EACpG,IAAI,CAACD,0BAA0B,CAACC,QAAQ,CAAC,EAAE;IACvC,MAAM,IAAI/B,KAAK,CAAClB,SAAS,CAACoD,0BAA0B,CAAC;EACzD;AACJ","ignoreList":[]}
+{"version":3,"file":"validate.js","names":["jwtDecode","logger","OidcError","isRecord","value","Array","isArray","requiredStringProperty","wellKnown","key","optionalStringProperty","error","concat","optionalStringArrayProperty","every","v","requiredArrayValue","array","includes","validateAuthMetadata","authMetadata","Error","OpSupport","isInvalid","some","isValid","decodeIdToken","token","validateIdToken","idToken","issuer","clientId","nonce","claims","iss","sanitisedAuds","aud","undefined","exp","Date","now","InvalidIdToken","validateStoredUserState","userState","MissingOrInvalidStoredState","isValidBearerTokenResponse","response","toLowerCase","validateBearerTokenResponse","InvalidBearerTokenResponse"],"sources":["../../src/oidc/validate.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { jwtDecode } from \"jwt-decode\";\nimport { IdTokenClaims, OidcMetadata, SigninResponse } from \"oidc-client-ts\";\n\nimport { logger } from \"../logger.ts\";\nimport { OidcError } from \"./error.ts\";\n\n/**\n * Metadata from OIDC authority discovery\n * With validated properties required in type\n */\nexport type ValidatedAuthMetadata = Partial<OidcMetadata> &\n    Pick<\n        OidcMetadata,\n        | \"issuer\"\n        | \"authorization_endpoint\"\n        | \"token_endpoint\"\n        | \"revocation_endpoint\"\n        | \"response_types_supported\"\n        | \"grant_types_supported\"\n        | \"code_challenge_methods_supported\"\n    > & {\n        // MSC2965 extensions to the OIDC spec\n        account_management_uri?: string;\n        account_management_actions_supported?: string[];\n        // The OidcMetadata type from oidc-client-ts does not include `prompt_values_supported`\n        // even though it is part of the OIDC spec\n        prompt_values_supported?: string[];\n    };\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n    !!value && typeof value === \"object\" && !Array.isArray(value);\nconst requiredStringProperty = (wellKnown: Record<string, unknown>, key: string): boolean => {\n    if (!wellKnown[key] || !optionalStringProperty(wellKnown, key)) {\n        logger.error(`Missing or invalid property: ${key}`);\n        return false;\n    }\n    return true;\n};\nconst optionalStringProperty = (wellKnown: Record<string, unknown>, key: string): boolean => {\n    if (!!wellKnown[key] && typeof wellKnown[key] !== \"string\") {\n        logger.error(`Invalid property: ${key}`);\n        return false;\n    }\n    return true;\n};\nconst optionalStringArrayProperty = (wellKnown: Record<string, unknown>, key: string): boolean => {\n    if (\n        !!wellKnown[key] &&\n        (!Array.isArray(wellKnown[key]) || !(<unknown[]>wellKnown[key]).every((v) => typeof v === \"string\"))\n    ) {\n        logger.error(`Invalid property: ${key}`);\n        return false;\n    }\n    return true;\n};\nconst requiredArrayValue = (wellKnown: Record<string, unknown>, key: string, value: any): boolean => {\n    const array = wellKnown[key];\n    if (!array || !Array.isArray(array) || !array.includes(value)) {\n        logger.error(`Invalid property: ${key}. ${value} is required.`);\n        return false;\n    }\n    return true;\n};\n\n/**\n * Validates issuer `.well-known/openid-configuration`\n * As defined in RFC5785 https://openid.net/specs/openid-connect-discovery-1_0.html\n * validates that OP is compatible with Element's OIDC flow\n * @param authMetadata - json object\n * @returns valid issuer config\n * @throws Error - when issuer config is not found or is invalid\n */\nexport const validateAuthMetadata = (authMetadata: unknown): ValidatedAuthMetadata => {\n    if (!isRecord(authMetadata)) {\n        logger.error(\"Issuer configuration not found or malformed\");\n        throw new Error(OidcError.OpSupport);\n    }\n\n    const isInvalid = [\n        requiredStringProperty(authMetadata, \"issuer\"),\n        requiredStringProperty(authMetadata, \"authorization_endpoint\"),\n        requiredStringProperty(authMetadata, \"token_endpoint\"),\n        requiredStringProperty(authMetadata, \"revocation_endpoint\"),\n        optionalStringProperty(authMetadata, \"registration_endpoint\"),\n        optionalStringProperty(authMetadata, \"account_management_uri\"),\n        optionalStringProperty(authMetadata, \"device_authorization_endpoint\"),\n        optionalStringArrayProperty(authMetadata, \"account_management_actions_supported\"),\n        requiredArrayValue(authMetadata, \"response_types_supported\", \"code\"),\n        requiredArrayValue(authMetadata, \"grant_types_supported\", \"authorization_code\"),\n        requiredArrayValue(authMetadata, \"code_challenge_methods_supported\", \"S256\"),\n        optionalStringArrayProperty(authMetadata, \"prompt_values_supported\"),\n    ].some((isValid) => !isValid);\n\n    if (!isInvalid) {\n        return authMetadata as ValidatedAuthMetadata;\n    }\n\n    logger.error(\"Issuer configuration not valid\");\n    throw new Error(OidcError.OpSupport);\n};\n\nexport const decodeIdToken = (token: string): IdTokenClaims => {\n    try {\n        return jwtDecode<IdTokenClaims>(token);\n    } catch (error) {\n        logger.error(\"Could not decode id_token\", error);\n        throw error;\n    }\n};\n\n/**\n * Validate idToken\n * https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation\n * @param idToken - id token from token endpoint\n * @param issuer - issuer for the OP as found during discovery\n * @param clientId - this client's id as registered with the OP\n * @param nonce - nonce used in the authentication request\n * @throws when id token is invalid\n */\nexport const validateIdToken = (\n    idToken: string | undefined,\n    issuer: string,\n    clientId: string,\n    nonce: string | undefined,\n): void => {\n    try {\n        if (!idToken) {\n            throw new Error(\"No ID token\");\n        }\n        const claims = decodeIdToken(idToken);\n\n        // The Issuer Identifier for the OpenID Provider MUST exactly match the value of the iss (issuer) Claim.\n        if (claims.iss !== issuer) {\n            throw new Error(\"Invalid issuer\");\n        }\n        /**\n         * The Client MUST validate that the aud (audience) Claim contains its client_id value registered at the Issuer identified by the iss (issuer) Claim as an audience.\n         * The aud (audience) Claim MAY contain an array with more than one element.\n         * The ID Token MUST be rejected if the ID Token does not list the Client as a valid audience, or if it contains additional audiences not trusted by the Client.\n         * EW: Don't accept tokens with other untrusted audiences\n         * */\n        const sanitisedAuds = typeof claims.aud === \"string\" ? [claims.aud] : claims.aud;\n        if (!sanitisedAuds.includes(clientId)) {\n            throw new Error(\"Invalid audience\");\n        }\n\n        /**\n         * If a nonce value was sent in the Authentication Request, a nonce Claim MUST be present and its value checked\n         * to verify that it is the same value as the one that was sent in the Authentication Request.\n         */\n        if (nonce !== undefined && claims.nonce !== nonce) {\n            throw new Error(\"Invalid nonce\");\n        }\n\n        /**\n         * The current time MUST be before the time represented by the exp Claim.\n         *  exp is an epoch timestamp in seconds\n         * */\n        if (!claims.exp || Date.now() > claims.exp * 1000) {\n            throw new Error(\"Invalid expiry\");\n        }\n    } catch (error) {\n        logger.error(\"Invalid ID token\", error);\n        throw new Error(OidcError.InvalidIdToken);\n    }\n};\n\n/**\n * State we ask OidcClient to store when starting oidc authorization flow (in `generateOidcAuthorizationUrl`)\n * so that we can access it on return from the OP and complete login\n */\nexport type UserState = {\n    /**\n     * Remember which server we were trying to login to\n     */\n    homeserverUrl: string;\n    identityServerUrl?: string;\n    /**\n     * Used to validate id token\n     */\n    nonce: string;\n};\n/**\n * Validate stored user state exists and is valid\n * @param userState - userState returned by oidcClient.processSigninResponse\n * @throws when userState is invalid\n */\nexport function validateStoredUserState(userState: unknown): asserts userState is UserState {\n    if (!isRecord(userState)) {\n        logger.error(\"Stored user state not found\");\n        throw new Error(OidcError.MissingOrInvalidStoredState);\n    }\n    const isInvalid = [\n        requiredStringProperty(userState, \"homeserverUrl\"),\n        requiredStringProperty(userState, \"nonce\"),\n        optionalStringProperty(userState, \"identityServerUrl\"),\n    ].some((isValid) => !isValid);\n\n    if (isInvalid) {\n        throw new Error(OidcError.MissingOrInvalidStoredState);\n    }\n}\n\n/**\n * The expected response type from the token endpoint during authorization code flow\n * Normalized to always use capitalized 'Bearer' for token_type\n *\n * See https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.4,\n * https://openid.net/specs/openid-connect-basic-1_0.html#TokenOK.\n */\nexport type BearerTokenResponse = {\n    token_type: \"Bearer\";\n    access_token: string;\n    scope: string;\n    refresh_token?: string;\n    expires_in?: number;\n    // from oidc-client-ts\n    expires_at?: number;\n    id_token: string;\n};\n\n/**\n * Make required properties required in type\n */\ntype ValidSignInResponse = SigninResponse &\n    BearerTokenResponse & {\n        token_type: \"Bearer\" | \"bearer\";\n    };\n\nconst isValidBearerTokenResponse = (response: unknown): response is ValidSignInResponse =>\n    isRecord(response) &&\n    requiredStringProperty(response, \"token_type\") &&\n    // token_type is case insensitive, some OPs return `token_type: \"bearer\"`\n    (response[\"token_type\"] as string).toLowerCase() === \"bearer\" &&\n    requiredStringProperty(response, \"access_token\") &&\n    requiredStringProperty(response, \"refresh_token\") &&\n    (!(\"expires_in\" in response) || typeof response[\"expires_in\"] === \"number\");\n\nexport function validateBearerTokenResponse(response: unknown): asserts response is ValidSignInResponse {\n    if (!isValidBearerTokenResponse(response)) {\n        throw new Error(OidcError.InvalidBearerTokenResponse);\n    }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,SAAS,QAAQ,YAAY;AAGtC,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,SAAS,QAAQ,YAAY;;AAEtC;AACA;AACA;AACA;;AAoBA,IAAMC,QAAQ,GAAIC,KAAc,IAC5B,CAAC,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC;AACjE,IAAMG,sBAAsB,GAAGA,CAACC,SAAkC,EAAEC,GAAW,KAAc;EACzF,IAAI,CAACD,SAAS,CAACC,GAAG,CAAC,IAAI,CAACC,sBAAsB,CAACF,SAAS,EAAEC,GAAG,CAAC,EAAE;IAC5DR,MAAM,CAACU,KAAK,iCAAAC,MAAA,CAAiCH,GAAG,CAAE,CAAC;IACnD,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AACD,IAAMC,sBAAsB,GAAGA,CAACF,SAAkC,EAAEC,GAAW,KAAc;EACzF,IAAI,CAAC,CAACD,SAAS,CAACC,GAAG,CAAC,IAAI,OAAOD,SAAS,CAACC,GAAG,CAAC,KAAK,QAAQ,EAAE;IACxDR,MAAM,CAACU,KAAK,sBAAAC,MAAA,CAAsBH,GAAG,CAAE,CAAC;IACxC,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AACD,IAAMI,2BAA2B,GAAGA,CAACL,SAAkC,EAAEC,GAAW,KAAc;EAC9F,IACI,CAAC,CAACD,SAAS,CAACC,GAAG,CAAC,KACf,CAACJ,KAAK,CAACC,OAAO,CAACE,SAAS,CAACC,GAAG,CAAC,CAAC,IAAI,CAAaD,SAAS,CAACC,GAAG,CAAC,CAAEK,KAAK,CAAEC,CAAC,IAAK,OAAOA,CAAC,KAAK,QAAQ,CAAC,CAAC,EACtG;IACEd,MAAM,CAACU,KAAK,sBAAAC,MAAA,CAAsBH,GAAG,CAAE,CAAC;IACxC,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AACD,IAAMO,kBAAkB,GAAGA,CAACR,SAAkC,EAAEC,GAAW,EAAEL,KAAU,KAAc;EACjG,IAAMa,KAAK,GAAGT,SAAS,CAACC,GAAG,CAAC;EAC5B,IAAI,CAACQ,KAAK,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACW,KAAK,CAAC,IAAI,CAACA,KAAK,CAACC,QAAQ,CAACd,KAAK,CAAC,EAAE;IAC3DH,MAAM,CAACU,KAAK,sBAAAC,MAAA,CAAsBH,GAAG,QAAAG,MAAA,CAAKR,KAAK,kBAAe,CAAC;IAC/D,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMe,oBAAoB,GAAIC,YAAqB,IAA4B;EAClF,IAAI,CAACjB,QAAQ,CAACiB,YAAY,CAAC,EAAE;IACzBnB,MAAM,CAACU,KAAK,CAAC,6CAA6C,CAAC;IAC3D,MAAM,IAAIU,KAAK,CAACnB,SAAS,CAACoB,SAAS,CAAC;EACxC;EAEA,IAAMC,SAAS,GAAG,CACdhB,sBAAsB,CAACa,YAAY,EAAE,QAAQ,CAAC,EAC9Cb,sBAAsB,CAACa,YAAY,EAAE,wBAAwB,CAAC,EAC9Db,sBAAsB,CAACa,YAAY,EAAE,gBAAgB,CAAC,EACtDb,sBAAsB,CAACa,YAAY,EAAE,qBAAqB,CAAC,EAC3DV,sBAAsB,CAACU,YAAY,EAAE,uBAAuB,CAAC,EAC7DV,sBAAsB,CAACU,YAAY,EAAE,wBAAwB,CAAC,EAC9DV,sBAAsB,CAACU,YAAY,EAAE,+BAA+B,CAAC,EACrEP,2BAA2B,CAACO,YAAY,EAAE,sCAAsC,CAAC,EACjFJ,kBAAkB,CAACI,YAAY,EAAE,0BAA0B,EAAE,MAAM,CAAC,EACpEJ,kBAAkB,CAACI,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,CAAC,EAC/EJ,kBAAkB,CAACI,YAAY,EAAE,kCAAkC,EAAE,MAAM,CAAC,EAC5EP,2BAA2B,CAACO,YAAY,EAAE,yBAAyB,CAAC,CACvE,CAACI,IAAI,CAAEC,OAAO,IAAK,CAACA,OAAO,CAAC;EAE7B,IAAI,CAACF,SAAS,EAAE;IACZ,OAAOH,YAAY;EACvB;EAEAnB,MAAM,CAACU,KAAK,CAAC,gCAAgC,CAAC;EAC9C,MAAM,IAAIU,KAAK,CAACnB,SAAS,CAACoB,SAAS,CAAC;AACxC,CAAC;AAED,OAAO,IAAMI,aAAa,GAAIC,KAAa,IAAoB;EAC3D,IAAI;IACA,OAAO3B,SAAS,CAAgB2B,KAAK,CAAC;EAC1C,CAAC,CAAC,OAAOhB,KAAK,EAAE;IACZV,MAAM,CAACU,KAAK,CAAC,2BAA2B,EAAEA,KAAK,CAAC;IAChD,MAAMA,KAAK;EACf;AACJ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMiB,eAAe,GAAGA,CAC3BC,OAA2B,EAC3BC,MAAc,EACdC,QAAgB,EAChBC,KAAyB,KAClB;EACP,IAAI;IACA,IAAI,CAACH,OAAO,EAAE;MACV,MAAM,IAAIR,KAAK,CAAC,aAAa,CAAC;IAClC;IACA,IAAMY,MAAM,GAAGP,aAAa,CAACG,OAAO,CAAC;;IAErC;IACA,IAAII,MAAM,CAACC,GAAG,KAAKJ,MAAM,EAAE;MACvB,MAAM,IAAIT,KAAK,CAAC,gBAAgB,CAAC;IACrC;IACA;AACR;AACA;AACA;AACA;AACA;IACQ,IAAMc,aAAa,GAAG,OAAOF,MAAM,CAACG,GAAG,KAAK,QAAQ,GAAG,CAACH,MAAM,CAACG,GAAG,CAAC,GAAGH,MAAM,CAACG,GAAG;IAChF,IAAI,CAACD,aAAa,CAACjB,QAAQ,CAACa,QAAQ,CAAC,EAAE;MACnC,MAAM,IAAIV,KAAK,CAAC,kBAAkB,CAAC;IACvC;;IAEA;AACR;AACA;AACA;IACQ,IAAIW,KAAK,KAAKK,SAAS,IAAIJ,MAAM,CAACD,KAAK,KAAKA,KAAK,EAAE;MAC/C,MAAM,IAAIX,KAAK,CAAC,eAAe,CAAC;IACpC;;IAEA;AACR;AACA;AACA;IACQ,IAAI,CAACY,MAAM,CAACK,GAAG,IAAIC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGP,MAAM,CAACK,GAAG,GAAG,IAAI,EAAE;MAC/C,MAAM,IAAIjB,KAAK,CAAC,gBAAgB,CAAC;IACrC;EACJ,CAAC,CAAC,OAAOV,KAAK,EAAE;IACZV,MAAM,CAACU,KAAK,CAAC,kBAAkB,EAAEA,KAAK,CAAC;IACvC,MAAM,IAAIU,KAAK,CAACnB,SAAS,CAACuC,cAAc,CAAC;EAC7C;AACJ,CAAC;;AAED;AACA;AACA;AACA;;AAYA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,uBAAuBA,CAACC,SAAkB,EAAkC;EACxF,IAAI,CAACxC,QAAQ,CAACwC,SAAS,CAAC,EAAE;IACtB1C,MAAM,CAACU,KAAK,CAAC,6BAA6B,CAAC;IAC3C,MAAM,IAAIU,KAAK,CAACnB,SAAS,CAAC0C,2BAA2B,CAAC;EAC1D;EACA,IAAMrB,SAAS,GAAG,CACdhB,sBAAsB,CAACoC,SAAS,EAAE,eAAe,CAAC,EAClDpC,sBAAsB,CAACoC,SAAS,EAAE,OAAO,CAAC,EAC1CjC,sBAAsB,CAACiC,SAAS,EAAE,mBAAmB,CAAC,CACzD,CAACnB,IAAI,CAAEC,OAAO,IAAK,CAACA,OAAO,CAAC;EAE7B,IAAIF,SAAS,EAAE;IACX,MAAM,IAAIF,KAAK,CAACnB,SAAS,CAAC0C,2BAA2B,CAAC;EAC1D;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAYA;AACA;AACA;;AAMA,IAAMC,0BAA0B,GAAIC,QAAiB,IACjD3C,QAAQ,CAAC2C,QAAQ,CAAC,IAClBvC,sBAAsB,CAACuC,QAAQ,EAAE,YAAY,CAAC;AAC9C;AACCA,QAAQ,CAAC,YAAY,CAAC,CAAYC,WAAW,CAAC,CAAC,KAAK,QAAQ,IAC7DxC,sBAAsB,CAACuC,QAAQ,EAAE,cAAc,CAAC,IAChDvC,sBAAsB,CAACuC,QAAQ,EAAE,eAAe,CAAC,KAChD,EAAE,YAAY,IAAIA,QAAQ,CAAC,IAAI,OAAOA,QAAQ,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC;AAE/E,OAAO,SAASE,2BAA2BA,CAACF,QAAiB,EAA2C;EACpG,IAAI,CAACD,0BAA0B,CAACC,QAAQ,CAAC,EAAE;IACvC,MAAM,IAAIzB,KAAK,CAACnB,SAAS,CAAC+C,0BAA0B,CAAC;EACzD;AACJ","ignoreList":[]}

package/lib/randomstring.d.ts

@@ -1,5 +1,32 @@
+/**
+ * String representing the lowercase latin alphabet for use in {@link secureRandomStringFrom}
+ * (can be combined with other such exports or other characters by appending strings)
+ */
+export declare const LOWERCASE = "abcdefghijklmnopqrstuvwxyz";
+/**
+ * String representing the uppercase latin alphabet for use in secureRandomStringFrom
+ * (can be combined with other such exports or other characters by appending strings)
+ */
+export declare const UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
+/**
+ * String representing the arabic numerals for use in secureRandomStringFrom
+ * (can be combined with other such exports or other characters by appending strings)
+ */
+export declare const DIGITS = "0123456789";
 export declare function secureRandomBase64Url(len: number): string;
-export declare function randomString(len: number): string;
-export declare function randomLowercaseString(len: number): string;
-export declare function randomUppercaseString(len: number): string;
+/**
+ * Generates a random string of uppercase and lowercase letters plus digits using a
+ * cryptographically secure random number generator.
+ * @param len The length of the string to generate
+ * @returns Random string of uppercase and lowercase letters plus digits of length `len`
+ */
+export declare function secureRandomString(len: number): string;
+/**
+ * Generate a cryptographically secure random string using characters given.
+ *
+ * @param len - The length of the string to generate (must be positive and less than 32768).
+ * @param chars - The characters to use in the random string (between 2 and 256 characters long).
+ * @returns Random string of characters of length `len`.
+ */
+export declare function secureRandomStringFrom(len: number, chars: string): string;
 //# sourceMappingURL=randomstring.d.ts.map

package/lib/randomstring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"randomstring.d.ts","sourceRoot":"","sources":["../src/randomstring.ts"],"names":[],"mappings":"AAuBA,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKzD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzD"}
+{"version":3,"file":"randomstring.d.ts","sourceRoot":"","sources":["../src/randomstring.ts"],"names":[],"mappings":"AAmBA;;;GAGG;AACH,eAAO,MAAM,SAAS,+BAA+B,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,SAAS,+BAA+B,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,MAAM,eAAe,CAAC;AAEnC,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKzD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAmCzE"}

package/lib/randomstring.js

@@ -16,28 +16,80 @@ limitations under the License.
 */
 
 import { encodeUnpaddedBase64Url } from "./base64.js";
-var LOWERCASE = "abcdefghijklmnopqrstuvwxyz";
-var UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
-var DIGITS = "0123456789";
+
+/**
+ * String representing the lowercase latin alphabet for use in {@link secureRandomStringFrom}
+ * (can be combined with other such exports or other characters by appending strings)
+ */
+export var LOWERCASE = "abcdefghijklmnopqrstuvwxyz";
+
+/**
+ * String representing the uppercase latin alphabet for use in secureRandomStringFrom
+ * (can be combined with other such exports or other characters by appending strings)
+ */
+export var UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
+
+/**
+ * String representing the arabic numerals for use in secureRandomStringFrom
+ * (can be combined with other such exports or other characters by appending strings)
+ */
+export var DIGITS = "0123456789";
 export function secureRandomBase64Url(len) {
   var key = new Uint8Array(len);
   globalThis.crypto.getRandomValues(key);
   return encodeUnpaddedBase64Url(key);
 }
-export function randomString(len) {
-  return randomStringFrom(len, UPPERCASE + LOWERCASE + DIGITS);
-}
-export function randomLowercaseString(len) {
-  return randomStringFrom(len, LOWERCASE);
-}
-export function randomUppercaseString(len) {
-  return randomStringFrom(len, UPPERCASE);
+
+/**
+ * Generates a random string of uppercase and lowercase letters plus digits using a
+ * cryptographically secure random number generator.
+ * @param len The length of the string to generate
+ * @returns Random string of uppercase and lowercase letters plus digits of length `len`
+ */
+export function secureRandomString(len) {
+  return secureRandomStringFrom(len, UPPERCASE + LOWERCASE + DIGITS);
 }
-function randomStringFrom(len, chars) {
-  var ret = "";
-  for (var i = 0; i < len; ++i) {
-    ret += chars.charAt(Math.floor(Math.random() * chars.length));
+
+/**
+ * Generate a cryptographically secure random string using characters given.
+ *
+ * @param len - The length of the string to generate (must be positive and less than 32768).
+ * @param chars - The characters to use in the random string (between 2 and 256 characters long).
+ * @returns Random string of characters of length `len`.
+ */
+export function secureRandomStringFrom(len, chars) {
+  // This is intended for latin strings so 256 possibilities should be more than enough and
+  // means we can use random bytes, minimising the amount of entropy we need to ask for.
+  if (chars.length < 2 || chars.length > 256) {
+    throw new Error("Character set must be between 2 and 256 characters long");
+  }
+  if (len < 1 || len > 32768) {
+    throw new Error("Requested random string length must be between 1 and 32768");
+  }
+  // We'll generate random unsigned bytes, so get the largest number less than 256 that is a multiple
+  // of the length of the character set: We'll need to discard any random values that are larger than
+  // this as we can't possibly map them onto the character set while keeping each character equally
+  // likely to be chosen (minus 1 to convert to indices in a string). (Essentially, we're using a d8
+  // to choose between 7 possibilities and re-rolling on an 8, keeping all 7 outcomes equally likely.)
+  // Our random values must be strictly less than this
+  var randomValueCutoff = 256 - 256 % chars.length;
+  // Grab 30% more entropy than we need. This should be enough that we can discard the values that are
+  // too high without having to go back and grab more unless we're super unlucky.
+  var entropyBuffer = new Uint8Array(Math.floor(len * 1.3));
+  // Mark all of this buffer as used to start with (we haven't populated it with entropy yet) so it will
+  // be filled on the first iteration.
+  var entropyBufferPos = entropyBuffer.length;
+  var result = [];
+  while (result.length < len) {
+    if (entropyBufferPos === entropyBuffer.length) {
+      globalThis.crypto.getRandomValues(entropyBuffer);
+      entropyBufferPos = 0;
+    }
+    var randomByte = entropyBuffer[entropyBufferPos++];
+    if (randomByte < randomValueCutoff) {
+      result.push(chars[randomByte % chars.length]);
+    }
   }
-  return ret;
+  return result.join("");
 }
 //# sourceMappingURL=randomstring.js.map

package/lib/randomstring.js.map

@@ -1 +1 @@
-{"version":3,"file":"randomstring.js","names":["encodeUnpaddedBase64Url","LOWERCASE","UPPERCASE","DIGITS","secureRandomBase64Url","len","key","Uint8Array","globalThis","crypto","getRandomValues","randomString","randomStringFrom","randomLowercaseString","randomUppercaseString","chars","ret","i","charAt","Math","floor","random","length"],"sources":["../src/randomstring.ts"],"sourcesContent":["/*\nCopyright 2018 New Vector Ltd\nCopyright 2019 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { encodeUnpaddedBase64Url } from \"./base64.ts\";\n\nconst LOWERCASE = \"abcdefghijklmnopqrstuvwxyz\";\nconst UPPERCASE = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\";\nconst DIGITS = \"0123456789\";\n\nexport function secureRandomBase64Url(len: number): string {\n    const key = new Uint8Array(len);\n    globalThis.crypto.getRandomValues(key);\n\n    return encodeUnpaddedBase64Url(key);\n}\n\nexport function randomString(len: number): string {\n    return randomStringFrom(len, UPPERCASE + LOWERCASE + DIGITS);\n}\n\nexport function randomLowercaseString(len: number): string {\n    return randomStringFrom(len, LOWERCASE);\n}\n\nexport function randomUppercaseString(len: number): string {\n    return randomStringFrom(len, UPPERCASE);\n}\n\nfunction randomStringFrom(len: number, chars: string): string {\n    let ret = \"\";\n\n    for (let i = 0; i < len; ++i) {\n        ret += chars.charAt(Math.floor(Math.random() * chars.length));\n    }\n\n    return ret;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,uBAAuB,QAAQ,aAAa;AAErD,IAAMC,SAAS,GAAG,4BAA4B;AAC9C,IAAMC,SAAS,GAAG,4BAA4B;AAC9C,IAAMC,MAAM,GAAG,YAAY;AAE3B,OAAO,SAASC,qBAAqBA,CAACC,GAAW,EAAU;EACvD,IAAMC,GAAG,GAAG,IAAIC,UAAU,CAACF,GAAG,CAAC;EAC/BG,UAAU,CAACC,MAAM,CAACC,eAAe,CAACJ,GAAG,CAAC;EAEtC,OAAON,uBAAuB,CAACM,GAAG,CAAC;AACvC;AAEA,OAAO,SAASK,YAAYA,CAACN,GAAW,EAAU;EAC9C,OAAOO,gBAAgB,CAACP,GAAG,EAAEH,SAAS,GAAGD,SAAS,GAAGE,MAAM,CAAC;AAChE;AAEA,OAAO,SAASU,qBAAqBA,CAACR,GAAW,EAAU;EACvD,OAAOO,gBAAgB,CAACP,GAAG,EAAEJ,SAAS,CAAC;AAC3C;AAEA,OAAO,SAASa,qBAAqBA,CAACT,GAAW,EAAU;EACvD,OAAOO,gBAAgB,CAACP,GAAG,EAAEH,SAAS,CAAC;AAC3C;AAEA,SAASU,gBAAgBA,CAACP,GAAW,EAAEU,KAAa,EAAU;EAC1D,IAAIC,GAAG,GAAG,EAAE;EAEZ,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGZ,GAAG,EAAE,EAAEY,CAAC,EAAE;IAC1BD,GAAG,IAAID,KAAK,CAACG,MAAM,CAACC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,CAAC,CAAC,GAAGN,KAAK,CAACO,MAAM,CAAC,CAAC;EACjE;EAEA,OAAON,GAAG;AACd","ignoreList":[]}
+{"version":3,"file":"randomstring.js","names":["encodeUnpaddedBase64Url","LOWERCASE","UPPERCASE","DIGITS","secureRandomBase64Url","len","key","Uint8Array","globalThis","crypto","getRandomValues","secureRandomString","secureRandomStringFrom","chars","length","Error","randomValueCutoff","entropyBuffer","Math","floor","entropyBufferPos","result","randomByte","push","join"],"sources":["../src/randomstring.ts"],"sourcesContent":["/*\nCopyright 2018 New Vector Ltd\nCopyright 2019 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { encodeUnpaddedBase64Url } from \"./base64.ts\";\n\n/**\n * String representing the lowercase latin alphabet for use in {@link secureRandomStringFrom}\n * (can be combined with other such exports or other characters by appending strings)\n */\nexport const LOWERCASE = \"abcdefghijklmnopqrstuvwxyz\";\n\n/**\n * String representing the uppercase latin alphabet for use in secureRandomStringFrom\n * (can be combined with other such exports or other characters by appending strings)\n */\nexport const UPPERCASE = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\";\n\n/**\n * String representing the arabic numerals for use in secureRandomStringFrom\n * (can be combined with other such exports or other characters by appending strings)\n */\nexport const DIGITS = \"0123456789\";\n\nexport function secureRandomBase64Url(len: number): string {\n    const key = new Uint8Array(len);\n    globalThis.crypto.getRandomValues(key);\n\n    return encodeUnpaddedBase64Url(key);\n}\n\n/**\n * Generates a random string of uppercase and lowercase letters plus digits using a\n * cryptographically secure random number generator.\n * @param len The length of the string to generate\n * @returns Random string of uppercase and lowercase letters plus digits of length `len`\n */\nexport function secureRandomString(len: number): string {\n    return secureRandomStringFrom(len, UPPERCASE + LOWERCASE + DIGITS);\n}\n\n/**\n * Generate a cryptographically secure random string using characters given.\n *\n * @param len - The length of the string to generate (must be positive and less than 32768).\n * @param chars - The characters to use in the random string (between 2 and 256 characters long).\n * @returns Random string of characters of length `len`.\n */\nexport function secureRandomStringFrom(len: number, chars: string): string {\n    // This is intended for latin strings so 256 possibilities should be more than enough and\n    // means we can use random bytes, minimising the amount of entropy we need to ask for.\n    if (chars.length < 2 || chars.length > 256) {\n        throw new Error(\"Character set must be between 2 and 256 characters long\");\n    }\n    if (len < 1 || len > 32768) {\n        throw new Error(\"Requested random string length must be between 1 and 32768\");\n    }\n    // We'll generate random unsigned bytes, so get the largest number less than 256 that is a multiple\n    // of the length of the character set: We'll need to discard any random values that are larger than\n    // this as we can't possibly map them onto the character set while keeping each character equally\n    // likely to be chosen (minus 1 to convert to indices in a string). (Essentially, we're using a d8\n    // to choose between 7 possibilities and re-rolling on an 8, keeping all 7 outcomes equally likely.)\n    // Our random values must be strictly less than this\n    const randomValueCutoff = 256 - (256 % chars.length);\n    // Grab 30% more entropy than we need. This should be enough that we can discard the values that are\n    // too high without having to go back and grab more unless we're super unlucky.\n    const entropyBuffer = new Uint8Array(Math.floor(len * 1.3));\n    // Mark all of this buffer as used to start with (we haven't populated it with entropy yet) so it will\n    // be filled on the first iteration.\n    let entropyBufferPos = entropyBuffer.length;\n    const result = [];\n    while (result.length < len) {\n        if (entropyBufferPos === entropyBuffer.length) {\n            globalThis.crypto.getRandomValues(entropyBuffer);\n            entropyBufferPos = 0;\n        }\n        const randomByte = entropyBuffer[entropyBufferPos++];\n        if (randomByte < randomValueCutoff) {\n            result.push(chars[randomByte % chars.length]);\n        }\n    }\n\n    return result.join(\"\");\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,uBAAuB,QAAQ,aAAa;;AAErD;AACA;AACA;AACA;AACA,OAAO,IAAMC,SAAS,GAAG,4BAA4B;;AAErD;AACA;AACA;AACA;AACA,OAAO,IAAMC,SAAS,GAAG,4BAA4B;;AAErD;AACA;AACA;AACA;AACA,OAAO,IAAMC,MAAM,GAAG,YAAY;AAElC,OAAO,SAASC,qBAAqBA,CAACC,GAAW,EAAU;EACvD,IAAMC,GAAG,GAAG,IAAIC,UAAU,CAACF,GAAG,CAAC;EAC/BG,UAAU,CAACC,MAAM,CAACC,eAAe,CAACJ,GAAG,CAAC;EAEtC,OAAON,uBAAuB,CAACM,GAAG,CAAC;AACvC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASK,kBAAkBA,CAACN,GAAW,EAAU;EACpD,OAAOO,sBAAsB,CAACP,GAAG,EAAEH,SAAS,GAAGD,SAAS,GAAGE,MAAM,CAAC;AACtE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASS,sBAAsBA,CAACP,GAAW,EAAEQ,KAAa,EAAU;EACvE;EACA;EACA,IAAIA,KAAK,CAACC,MAAM,GAAG,CAAC,IAAID,KAAK,CAACC,MAAM,GAAG,GAAG,EAAE;IACxC,MAAM,IAAIC,KAAK,CAAC,yDAAyD,CAAC;EAC9E;EACA,IAAIV,GAAG,GAAG,CAAC,IAAIA,GAAG,GAAG,KAAK,EAAE;IACxB,MAAM,IAAIU,KAAK,CAAC,4DAA4D,CAAC;EACjF;EACA;EACA;EACA;EACA;EACA;EACA;EACA,IAAMC,iBAAiB,GAAG,GAAG,GAAI,GAAG,GAAGH,KAAK,CAACC,MAAO;EACpD;EACA;EACA,IAAMG,aAAa,GAAG,IAAIV,UAAU,CAACW,IAAI,CAACC,KAAK,CAACd,GAAG,GAAG,GAAG,CAAC,CAAC;EAC3D;EACA;EACA,IAAIe,gBAAgB,GAAGH,aAAa,CAACH,MAAM;EAC3C,IAAMO,MAAM,GAAG,EAAE;EACjB,OAAOA,MAAM,CAACP,MAAM,GAAGT,GAAG,EAAE;IACxB,IAAIe,gBAAgB,KAAKH,aAAa,CAACH,MAAM,EAAE;MAC3CN,UAAU,CAACC,MAAM,CAACC,eAAe,CAACO,aAAa,CAAC;MAChDG,gBAAgB,GAAG,CAAC;IACxB;IACA,IAAME,UAAU,GAAGL,aAAa,CAACG,gBAAgB,EAAE,CAAC;IACpD,IAAIE,UAAU,GAAGN,iBAAiB,EAAE;MAChCK,MAAM,CAACE,IAAI,CAACV,KAAK,CAACS,UAAU,GAAGT,KAAK,CAACC,MAAM,CAAC,CAAC;IACjD;EACJ;EAEA,OAAOO,MAAM,CAACG,IAAI,CAAC,EAAE,CAAC;AAC1B","ignoreList":[]}

package/lib/store/indexeddb-local-backend.js

@@ -69,7 +69,8 @@ function selectQuery(store, keyRange, resultMapper) {
   return new Promise((resolve, reject) => {
     var results = [];
     query.onerror = () => {
-      reject(new Error("Query failed: " + query.error));
+      var _query$error;
+      reject(new Error("Query failed: " + ((_query$error = query.error) === null || _query$error === void 0 ? void 0 : _query$error.name)));
     };
     // collect results
     query.onsuccess = () => {
@@ -332,10 +333,11 @@ export class LocalIndexedDBStoreBackend {
         logger.log("can't yet delete indexeddb ".concat(this.dbName, " because it is open elsewhere"));
       };
       req.onerror = () => {
+        var _req$error;
         // in firefox, with indexedDB disabled, this fails with a
         // DOMError. We treat this as non-fatal, so that we can still
         // use the app.
-        logger.warn("unable to delete js-sdk store indexeddb: ".concat(req.error));
+        logger.warn("unable to delete js-sdk store indexeddb: ".concat((_req$error = req.error) === null || _req$error === void 0 ? void 0 : _req$error.name));
         resolve();
       };
       req.onsuccess = () => {

package/lib/store/indexeddb-local-backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"indexeddb-local-backend.js","names":["SyncAccumulator","deepCopy","promiseTry","exists","idbExists","logger","DB_MIGRATIONS","db","createObjectStore","keyPath","oobMembersStore","createIndex","autoIncrement","VERSION","length","selectQuery","store","keyRange","resultMapper","query","openCursor","Promise","resolve","reject","results","onerror","Error","error","onsuccess","cursor","result","push","continue","txnAsPromise","txn","oncomplete","event","reqAsEventPromise","req","reqAsPromise","err","reqAsCursorPromise","then","LocalIndexedDBStoreBackend","indexedDB","dbName","constructor","arguments","undefined","_defineProperty","syncAccumulator","connect","onClose","_this","disconnected","log","open","onupgradeneeded","ev","oldVersion","concat","_isNewlyCreated","forEach","migration","index","onblocked","_asyncToGenerator","onversionchange","_this$db","close","onclose","init","isNewlyCreated","all","loadAccountData","loadSyncData","_ref2","accountData","syncData","accumulate","next_batch","nextBatch","rooms","roomsData","account_data","events","getOutOfBandMembers","roomId","tx","transaction","objectStore","roomIndex","range","IDBKeyRange","only","request","membershipEvents","oobWritten","record","value","oob_written","setOutOfBandMembers","_this2","e","put","markerObject","room_id","state_key","clearOutOfBandMembers","_this3","readTx","roomRange","minStateKeyProm","openKeyCursor","primaryKey","maxStateKeyProm","minStateKey","maxStateKey","writeTx","writeStore","membersKeyRange","bound","delete","clearDatabase","_this$db2","deleteDatabase","warn","getSavedSync","copy","data","getJSON","getNextBatchToken","setSyncData","syncToDatabase","userTuples","_this4","syncToDatabasePromise","pendingUserPresenceData","unshift","doSyncToDatabase","_this5","persistUserPresenceEvents","persistAccountData","persistSyncData","clobber","tuples","tuple","userId","getUserPresenceEvents","getClientOptions","_cursor$value","options","storeClientOptions","_this6","saveToDeviceBatches","batches","_this7","batch","add","getOldestToDeviceBatch","_this8","resultBatch","id","key","txnId","eventType","removeToDeviceBatch","_this9","destroy","_this10","_this10$db"],"sources":["../../src/store/indexeddb-local-backend.ts"],"sourcesContent":["/*\nCopyright 2017 - 2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { IMinimalEvent, ISyncData, ISyncResponse, SyncAccumulator } from \"../sync-accumulator.ts\";\nimport { deepCopy, promiseTry } from \"../utils.ts\";\nimport { exists as idbExists } from \"../indexeddb-helpers.ts\";\nimport { logger } from \"../logger.ts\";\nimport { IStateEventWithRoomId, IStoredClientOpts } from \"../matrix.ts\";\nimport { ISavedSync } from \"./index.ts\";\nimport { IIndexedDBBackend, UserTuple } from \"./indexeddb-backend.ts\";\nimport { IndexedToDeviceBatch, ToDeviceBatchWithTxnId } from \"../models/ToDeviceMessage.ts\";\n\ntype DbMigration = (db: IDBDatabase) => void;\nconst DB_MIGRATIONS: DbMigration[] = [\n    (db): void => {\n        // Make user store, clobber based on user ID. (userId property of User objects)\n        db.createObjectStore(\"users\", { keyPath: [\"userId\"] });\n\n        // Make account data store, clobber based on event type.\n        // (event.type property of MatrixEvent objects)\n        db.createObjectStore(\"accountData\", { keyPath: [\"type\"] });\n\n        // Make /sync store (sync tokens, room data, etc), always clobber (const key).\n        db.createObjectStore(\"sync\", { keyPath: [\"clobber\"] });\n    },\n    (db): void => {\n        const oobMembersStore = db.createObjectStore(\"oob_membership_events\", {\n            keyPath: [\"room_id\", \"state_key\"],\n        });\n        oobMembersStore.createIndex(\"room\", \"room_id\");\n    },\n    (db): void => {\n        db.createObjectStore(\"client_options\", { keyPath: [\"clobber\"] });\n    },\n    (db): void => {\n        db.createObjectStore(\"to_device_queue\", { autoIncrement: true });\n    },\n    // Expand as needed.\n];\nconst VERSION = DB_MIGRATIONS.length;\n\n/**\n * Helper method to collect results from a Cursor and promiseify it.\n * @param store - The store to perform openCursor on.\n * @param keyRange - Optional key range to apply on the cursor.\n * @param resultMapper - A function which is repeatedly called with a\n * Cursor.\n * Return the data you want to keep.\n * @returns Promise which resolves to an array of whatever you returned from\n * resultMapper.\n */\nfunction selectQuery<T>(\n    store: IDBObjectStore,\n    keyRange: IDBKeyRange | IDBValidKey | undefined,\n    resultMapper: (cursor: IDBCursorWithValue) => T,\n): Promise<T[]> {\n    const query = store.openCursor(keyRange);\n    return new Promise((resolve, reject) => {\n        const results: T[] = [];\n        query.onerror = (): void => {\n            reject(new Error(\"Query failed: \" + query.error));\n        };\n        // collect results\n        query.onsuccess = (): void => {\n            const cursor = query.result;\n            if (!cursor) {\n                resolve(results);\n                return; // end of results\n            }\n            results.push(resultMapper(cursor));\n            cursor.continue();\n        };\n    });\n}\n\nfunction txnAsPromise(txn: IDBTransaction): Promise<Event> {\n    return new Promise((resolve, reject) => {\n        txn.oncomplete = function (event): void {\n            resolve(event);\n        };\n        txn.onerror = function (): void {\n            reject(txn.error);\n        };\n    });\n}\n\nfunction reqAsEventPromise(req: IDBRequest): Promise<Event> {\n    return new Promise((resolve, reject) => {\n        req.onsuccess = function (event): void {\n            resolve(event);\n        };\n        req.onerror = function (): void {\n            reject(req.error);\n        };\n    });\n}\n\nfunction reqAsPromise(req: IDBRequest): Promise<IDBRequest> {\n    return new Promise((resolve, reject) => {\n        req.onsuccess = (): void => resolve(req);\n        req.onerror = (err): void => reject(err);\n    });\n}\n\nfunction reqAsCursorPromise<T>(req: IDBRequest<T>): Promise<T> {\n    return reqAsEventPromise(req).then((event) => req.result);\n}\n\nexport class LocalIndexedDBStoreBackend implements IIndexedDBBackend {\n    public static exists(indexedDB: IDBFactory, dbName: string): Promise<boolean> {\n        dbName = \"matrix-js-sdk:\" + (dbName || \"default\");\n        return idbExists(indexedDB, dbName);\n    }\n\n    private readonly dbName: string;\n    private readonly syncAccumulator: SyncAccumulator;\n    private db?: IDBDatabase;\n    private disconnected = true;\n    private _isNewlyCreated = false;\n    private syncToDatabasePromise?: Promise<void>;\n    private pendingUserPresenceData: UserTuple[] = [];\n\n    /**\n     * Does the actual reading from and writing to the indexeddb\n     *\n     * Construct a new Indexed Database store backend. This requires a call to\n     * `connect()` before this store can be used.\n     * @param indexedDB - The Indexed DB interface e.g\n     * `window.indexedDB`\n     * @param dbName - Optional database name. The same name must be used\n     * to open the same database.\n     */\n    public constructor(\n        private readonly indexedDB: IDBFactory,\n        dbName = \"default\",\n    ) {\n        this.dbName = \"matrix-js-sdk:\" + dbName;\n        this.syncAccumulator = new SyncAccumulator();\n    }\n\n    /**\n     * Attempt to connect to the database. This can fail if the user does not\n     * grant permission.\n     * @returns Promise which resolves if successfully connected.\n     */\n    public connect(onClose?: () => void): Promise<void> {\n        if (!this.disconnected) {\n            logger.log(`LocalIndexedDBStoreBackend.connect: already connected or connecting`);\n            return Promise.resolve();\n        }\n\n        this.disconnected = false;\n\n        logger.log(`LocalIndexedDBStoreBackend.connect: connecting...`);\n        const req = this.indexedDB.open(this.dbName, VERSION);\n        req.onupgradeneeded = (ev): void => {\n            const db = req.result;\n            const oldVersion = ev.oldVersion;\n            logger.log(`LocalIndexedDBStoreBackend.connect: upgrading from ${oldVersion}`);\n            if (oldVersion < 1) {\n                // The database did not previously exist\n                this._isNewlyCreated = true;\n            }\n            DB_MIGRATIONS.forEach((migration, index) => {\n                if (oldVersion <= index) migration(db);\n            });\n        };\n\n        req.onblocked = (): void => {\n            logger.log(`can't yet open LocalIndexedDBStoreBackend because it is open elsewhere`);\n        };\n\n        logger.log(`LocalIndexedDBStoreBackend.connect: awaiting connection...`);\n        return reqAsEventPromise(req).then(async () => {\n            logger.log(`LocalIndexedDBStoreBackend.connect: connected`);\n            this.db = req.result;\n\n            // add a poorly-named listener for when deleteDatabase is called\n            // so we can close our db connections.\n            this.db.onversionchange = (): void => {\n                this.db?.close(); // this does not call onclose\n                this.disconnected = true;\n                this.db = undefined;\n            };\n            this.db.onclose = (): void => {\n                this.disconnected = true;\n                this.db = undefined;\n                onClose?.();\n            };\n\n            await this.init();\n        });\n    }\n\n    /** @returns whether or not the database was newly created in this session. */\n    public isNewlyCreated(): Promise<boolean> {\n        return Promise.resolve(this._isNewlyCreated);\n    }\n\n    /**\n     * Having connected, load initial data from the database and prepare for use\n     * @returns Promise which resolves on success\n     */\n    private init(): Promise<unknown> {\n        return Promise.all([this.loadAccountData(), this.loadSyncData()]).then(([accountData, syncData]) => {\n            logger.log(`LocalIndexedDBStoreBackend: loaded initial data`);\n            this.syncAccumulator.accumulate(\n                {\n                    next_batch: syncData.nextBatch,\n                    rooms: syncData.roomsData,\n                    account_data: {\n                        events: accountData,\n                    },\n                },\n                true,\n            );\n        });\n    }\n\n    /**\n     * Returns the out-of-band membership events for this room that\n     * were previously loaded.\n     * @returns the events, potentially an empty array if OOB loading didn't yield any new members\n     * @returns in case the members for this room haven't been stored yet\n     */\n    public getOutOfBandMembers(roomId: string): Promise<IStateEventWithRoomId[] | null> {\n        return new Promise<IStateEventWithRoomId[] | null>((resolve, reject) => {\n            const tx = this.db!.transaction([\"oob_membership_events\"], \"readonly\");\n            const store = tx.objectStore(\"oob_membership_events\");\n            const roomIndex = store.index(\"room\");\n            const range = IDBKeyRange.only(roomId);\n            const request = roomIndex.openCursor(range);\n\n            const membershipEvents: IStateEventWithRoomId[] = [];\n            // did we encounter the oob_written marker object\n            // amongst the results? That means OOB member\n            // loading already happened for this room\n            // but there were no members to persist as they\n            // were all known already\n            let oobWritten = false;\n\n            request.onsuccess = (): void => {\n                const cursor = request.result;\n                if (!cursor) {\n                    // Unknown room\n                    if (!membershipEvents.length && !oobWritten) {\n                        return resolve(null);\n                    }\n                    return resolve(membershipEvents);\n                }\n                const record = cursor.value;\n                if (record.oob_written) {\n                    oobWritten = true;\n                } else {\n                    membershipEvents.push(record);\n                }\n                cursor.continue();\n            };\n            request.onerror = (err): void => {\n                reject(err);\n            };\n        }).then((events) => {\n            logger.log(`LL: got ${events?.length} membershipEvents from storage for room ${roomId} ...`);\n            return events;\n        });\n    }\n\n    /**\n     * Stores the out-of-band membership events for this room. Note that\n     * it still makes sense to store an empty array as the OOB status for the room is\n     * marked as fetched, and getOutOfBandMembers will return an empty array instead of null\n     * @param membershipEvents - the membership events to store\n     */\n    public async setOutOfBandMembers(roomId: string, membershipEvents: IStateEventWithRoomId[]): Promise<void> {\n        logger.log(`LL: backend about to store ${membershipEvents.length}` + ` members for ${roomId}`);\n        const tx = this.db!.transaction([\"oob_membership_events\"], \"readwrite\");\n        const store = tx.objectStore(\"oob_membership_events\");\n        membershipEvents.forEach((e) => {\n            store.put(e);\n        });\n        // aside from all the events, we also write a marker object to the store\n        // to mark the fact that OOB members have been written for this room.\n        // It's possible that 0 members need to be written as all where previously know\n        // but we still need to know whether to return null or [] from getOutOfBandMembers\n        // where null means out of band members haven't been stored yet for this room\n        const markerObject = {\n            room_id: roomId,\n            oob_written: true,\n            state_key: 0,\n        };\n        store.put(markerObject);\n        await txnAsPromise(tx);\n        logger.log(`LL: backend done storing for ${roomId}!`);\n    }\n\n    public async clearOutOfBandMembers(roomId: string): Promise<void> {\n        // the approach to delete all members for a room\n        // is to get the min and max state key from the index\n        // for that room, and then delete between those\n        // keys in the store.\n        // this should be way faster than deleting every member\n        // individually for a large room.\n        const readTx = this.db!.transaction([\"oob_membership_events\"], \"readonly\");\n        const store = readTx.objectStore(\"oob_membership_events\");\n        const roomIndex = store.index(\"room\");\n        const roomRange = IDBKeyRange.only(roomId);\n\n        const minStateKeyProm = reqAsCursorPromise(roomIndex.openKeyCursor(roomRange, \"next\")).then(\n            (cursor) => (<IDBValidKey[]>cursor?.primaryKey)[1],\n        );\n        const maxStateKeyProm = reqAsCursorPromise(roomIndex.openKeyCursor(roomRange, \"prev\")).then(\n            (cursor) => (<IDBValidKey[]>cursor?.primaryKey)[1],\n        );\n        const [minStateKey, maxStateKey] = await Promise.all([minStateKeyProm, maxStateKeyProm]);\n\n        const writeTx = this.db!.transaction([\"oob_membership_events\"], \"readwrite\");\n        const writeStore = writeTx.objectStore(\"oob_membership_events\");\n        const membersKeyRange = IDBKeyRange.bound([roomId, minStateKey], [roomId, maxStateKey]);\n\n        logger.log(\n            `LL: Deleting all users + marker in storage for room ${roomId}, with key range:`,\n            [roomId, minStateKey],\n            [roomId, maxStateKey],\n        );\n        await reqAsPromise(writeStore.delete(membersKeyRange));\n    }\n\n    /**\n     * Clear the entire database. This should be used when logging out of a client\n     * to prevent mixing data between accounts. Closes the database.\n     * @returns Resolved when the database is cleared.\n     */\n    public clearDatabase(): Promise<void> {\n        return new Promise((resolve) => {\n            logger.log(`Removing indexeddb instance: ${this.dbName}`);\n\n            // Close the database first to avoid firing unexpected close events\n            this.db?.close();\n\n            const req = this.indexedDB.deleteDatabase(this.dbName);\n\n            req.onblocked = (): void => {\n                logger.log(`can't yet delete indexeddb ${this.dbName} because it is open elsewhere`);\n            };\n\n            req.onerror = (): void => {\n                // in firefox, with indexedDB disabled, this fails with a\n                // DOMError. We treat this as non-fatal, so that we can still\n                // use the app.\n                logger.warn(`unable to delete js-sdk store indexeddb: ${req.error}`);\n                resolve();\n            };\n\n            req.onsuccess = (): void => {\n                logger.log(`Removed indexeddb instance: ${this.dbName}`);\n                resolve();\n            };\n        });\n    }\n\n    /**\n     * @param copy - If false, the data returned is from internal\n     * buffers and must not be mutated. Otherwise, a copy is made before\n     * returning such that the data can be safely mutated. Default: true.\n     *\n     * @returns Promise which resolves with a sync response to restore the\n     * client state to where it was at the last save, or null if there\n     * is no saved sync data.\n     */\n    public getSavedSync(copy = true): Promise<ISavedSync | null> {\n        const data = this.syncAccumulator.getJSON();\n        if (!data.nextBatch) return Promise.resolve(null);\n        if (copy) {\n            // We must deep copy the stored data so that the /sync processing code doesn't\n            // corrupt the internal state of the sync accumulator (it adds non-clonable keys)\n            return Promise.resolve(deepCopy(data));\n        } else {\n            return Promise.resolve(data);\n        }\n    }\n\n    public getNextBatchToken(): Promise<string> {\n        return Promise.resolve(this.syncAccumulator.getNextBatchToken());\n    }\n\n    public setSyncData(syncData: ISyncResponse): Promise<void> {\n        return Promise.resolve().then(() => {\n            this.syncAccumulator.accumulate(syncData);\n        });\n    }\n\n    /**\n     * Sync users and all accumulated sync data to the database.\n     * If a previous sync is in flight, the new data will be added to the\n     * next sync and the current sync's promise will be returned.\n     * @param userTuples - The user tuples\n     * @returns Promise which resolves if the data was persisted.\n     */\n    public async syncToDatabase(userTuples: UserTuple[]): Promise<void> {\n        if (this.syncToDatabasePromise) {\n            logger.warn(\"Skipping syncToDatabase() as persist already in flight\");\n            this.pendingUserPresenceData.push(...userTuples);\n            return this.syncToDatabasePromise;\n        }\n        userTuples.unshift(...this.pendingUserPresenceData);\n        this.syncToDatabasePromise = this.doSyncToDatabase(userTuples);\n        return this.syncToDatabasePromise;\n    }\n\n    private async doSyncToDatabase(userTuples: UserTuple[]): Promise<void> {\n        try {\n            const syncData = this.syncAccumulator.getJSON(true);\n            await Promise.all([\n                this.persistUserPresenceEvents(userTuples),\n                this.persistAccountData(syncData.accountData),\n                this.persistSyncData(syncData.nextBatch, syncData.roomsData),\n            ]);\n        } finally {\n            this.syncToDatabasePromise = undefined;\n        }\n    }\n\n    /**\n     * Persist rooms /sync data along with the next batch token.\n     * @param nextBatch - The next_batch /sync value.\n     * @param roomsData - The 'rooms' /sync data from a SyncAccumulator\n     * @returns Promise which resolves if the data was persisted.\n     */\n    private persistSyncData(nextBatch: string, roomsData: ISyncResponse[\"rooms\"]): Promise<void> {\n        logger.log(\"Persisting sync data up to\", nextBatch);\n        return promiseTry<void>(() => {\n            const txn = this.db!.transaction([\"sync\"], \"readwrite\");\n            const store = txn.objectStore(\"sync\");\n            store.put({\n                clobber: \"-\", // constant key so will always clobber\n                nextBatch,\n                roomsData,\n            }); // put == UPSERT\n            return txnAsPromise(txn).then(() => {\n                logger.log(\"Persisted sync data up to\", nextBatch);\n            });\n        });\n    }\n\n    /**\n     * Persist a list of account data events. Events with the same 'type' will\n     * be replaced.\n     * @param accountData - An array of raw user-scoped account data events\n     * @returns Promise which resolves if the events were persisted.\n     */\n    private persistAccountData(accountData: IMinimalEvent[]): Promise<void> {\n        return promiseTry<void>(() => {\n            const txn = this.db!.transaction([\"accountData\"], \"readwrite\");\n            const store = txn.objectStore(\"accountData\");\n            for (const event of accountData) {\n                store.put(event); // put == UPSERT\n            }\n            return txnAsPromise(txn).then();\n        });\n    }\n\n    /**\n     * Persist a list of [user id, presence event] they are for.\n     * Users with the same 'userId' will be replaced.\n     * Presence events should be the event in its raw form (not the Event\n     * object)\n     * @param tuples - An array of [userid, event] tuples\n     * @returns Promise which resolves if the users were persisted.\n     */\n    private persistUserPresenceEvents(tuples: UserTuple[]): Promise<void> {\n        return promiseTry<void>(() => {\n            const txn = this.db!.transaction([\"users\"], \"readwrite\");\n            const store = txn.objectStore(\"users\");\n            for (const tuple of tuples) {\n                store.put({\n                    userId: tuple[0],\n                    event: tuple[1],\n                }); // put == UPSERT\n            }\n            return txnAsPromise(txn).then();\n        });\n    }\n\n    /**\n     * Load all user presence events from the database. This is not cached.\n     * FIXME: It would probably be more sensible to store the events in the\n     * sync.\n     * @returns A list of presence events in their raw form.\n     */\n    public getUserPresenceEvents(): Promise<UserTuple[]> {\n        return promiseTry<UserTuple[]>(() => {\n            const txn = this.db!.transaction([\"users\"], \"readonly\");\n            const store = txn.objectStore(\"users\");\n            return selectQuery(store, undefined, (cursor) => {\n                return [cursor.value.userId, cursor.value.event];\n            });\n        });\n    }\n\n    /**\n     * Load all the account data events from the database. This is not cached.\n     * @returns A list of raw global account events.\n     */\n    private loadAccountData(): Promise<IMinimalEvent[]> {\n        logger.log(`LocalIndexedDBStoreBackend: loading account data...`);\n        return promiseTry<IMinimalEvent[]>(() => {\n            const txn = this.db!.transaction([\"accountData\"], \"readonly\");\n            const store = txn.objectStore(\"accountData\");\n            return selectQuery(store, undefined, (cursor) => {\n                return cursor.value;\n            }).then((result: IMinimalEvent[]) => {\n                logger.log(`LocalIndexedDBStoreBackend: loaded account data`);\n                return result;\n            });\n        });\n    }\n\n    /**\n     * Load the sync data from the database.\n     * @returns An object with \"roomsData\" and \"nextBatch\" keys.\n     */\n    private loadSyncData(): Promise<ISyncData> {\n        logger.log(`LocalIndexedDBStoreBackend: loading sync data...`);\n        return promiseTry<ISyncData>(() => {\n            const txn = this.db!.transaction([\"sync\"], \"readonly\");\n            const store = txn.objectStore(\"sync\");\n            return selectQuery(store, undefined, (cursor) => {\n                return cursor.value;\n            }).then((results: ISyncData[]) => {\n                logger.log(`LocalIndexedDBStoreBackend: loaded sync data`);\n                if (results.length > 1) {\n                    logger.warn(\"loadSyncData: More than 1 sync row found.\");\n                }\n                return results.length > 0 ? results[0] : ({} as ISyncData);\n            });\n        });\n    }\n\n    public getClientOptions(): Promise<IStoredClientOpts | undefined> {\n        return Promise.resolve().then(() => {\n            const txn = this.db!.transaction([\"client_options\"], \"readonly\");\n            const store = txn.objectStore(\"client_options\");\n            return selectQuery(store, undefined, (cursor) => {\n                return cursor.value?.options;\n            }).then((results) => results[0]);\n        });\n    }\n\n    public async storeClientOptions(options: IStoredClientOpts): Promise<void> {\n        const txn = this.db!.transaction([\"client_options\"], \"readwrite\");\n        const store = txn.objectStore(\"client_options\");\n        store.put({\n            clobber: \"-\", // constant key so will always clobber\n            options: options,\n        }); // put == UPSERT\n        await txnAsPromise(txn);\n    }\n\n    public async saveToDeviceBatches(batches: ToDeviceBatchWithTxnId[]): Promise<void> {\n        const txn = this.db!.transaction([\"to_device_queue\"], \"readwrite\");\n        const store = txn.objectStore(\"to_device_queue\");\n        for (const batch of batches) {\n            store.add(batch);\n        }\n        await txnAsPromise(txn);\n    }\n\n    public async getOldestToDeviceBatch(): Promise<IndexedToDeviceBatch | null> {\n        const txn = this.db!.transaction([\"to_device_queue\"], \"readonly\");\n        const store = txn.objectStore(\"to_device_queue\");\n        const cursor = await reqAsCursorPromise(store.openCursor());\n        if (!cursor) return null;\n\n        const resultBatch = cursor.value as ToDeviceBatchWithTxnId;\n\n        return {\n            id: cursor.key as number,\n            txnId: resultBatch.txnId,\n            eventType: resultBatch.eventType,\n            batch: resultBatch.batch,\n        };\n    }\n\n    public async removeToDeviceBatch(id: number): Promise<void> {\n        const txn = this.db!.transaction([\"to_device_queue\"], \"readwrite\");\n        const store = txn.objectStore(\"to_device_queue\");\n        store.delete(id);\n        await txnAsPromise(txn);\n    }\n\n    /*\n     * Close the database\n     */\n    public async destroy(): Promise<void> {\n        this.db?.close();\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAAkDA,eAAe,QAAQ,wBAAwB;AACjG,SAASC,QAAQ,EAAEC,UAAU,QAAQ,aAAa;AAClD,SAASC,MAAM,IAAIC,SAAS,QAAQ,yBAAyB;AAC7D,SAASC,MAAM,QAAQ,cAAc;AAOrC,IAAMC,aAA4B,GAAG,CAChCC,EAAE,IAAW;EACV;EACAA,EAAE,CAACC,iBAAiB,CAAC,OAAO,EAAE;IAAEC,OAAO,EAAE,CAAC,QAAQ;EAAE,CAAC,CAAC;;EAEtD;EACA;EACAF,EAAE,CAACC,iBAAiB,CAAC,aAAa,EAAE;IAAEC,OAAO,EAAE,CAAC,MAAM;EAAE,CAAC,CAAC;;EAE1D;EACAF,EAAE,CAACC,iBAAiB,CAAC,MAAM,EAAE;IAAEC,OAAO,EAAE,CAAC,SAAS;EAAE,CAAC,CAAC;AAC1D,CAAC,EACAF,EAAE,IAAW;EACV,IAAMG,eAAe,GAAGH,EAAE,CAACC,iBAAiB,CAAC,uBAAuB,EAAE;IAClEC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW;EACpC,CAAC,CAAC;EACFC,eAAe,CAACC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC;AAClD,CAAC,EACAJ,EAAE,IAAW;EACVA,EAAE,CAACC,iBAAiB,CAAC,gBAAgB,EAAE;IAAEC,OAAO,EAAE,CAAC,SAAS;EAAE,CAAC,CAAC;AACpE,CAAC,EACAF,EAAE,IAAW;EACVA,EAAE,CAACC,iBAAiB,CAAC,iBAAiB,EAAE;IAAEI,aAAa,EAAE;EAAK,CAAC,CAAC;AACpE;AACA;AAAA,CACH;AACD,IAAMC,OAAO,GAAGP,aAAa,CAACQ,MAAM;;AAEpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,WAAWA,CAChBC,KAAqB,EACrBC,QAA+C,EAC/CC,YAA+C,EACnC;EACZ,IAAMC,KAAK,GAAGH,KAAK,CAACI,UAAU,CAACH,QAAQ,CAAC;EACxC,OAAO,IAAII,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpC,IAAMC,OAAY,GAAG,EAAE;IACvBL,KAAK,CAACM,OAAO,GAAG,MAAY;MACxBF,MAAM,CAAC,IAAIG,KAAK,CAAC,gBAAgB,GAAGP,KAAK,CAACQ,KAAK,CAAC,CAAC;IACrD,CAAC;IACD;IACAR,KAAK,CAACS,SAAS,GAAG,MAAY;MAC1B,IAAMC,MAAM,GAAGV,KAAK,CAACW,MAAM;MAC3B,IAAI,CAACD,MAAM,EAAE;QACTP,OAAO,CAACE,OAAO,CAAC;QAChB,OAAO,CAAC;MACZ;MACAA,OAAO,CAACO,IAAI,CAACb,YAAY,CAACW,MAAM,CAAC,CAAC;MAClCA,MAAM,CAACG,QAAQ,CAAC,CAAC;IACrB,CAAC;EACL,CAAC,CAAC;AACN;AAEA,SAASC,YAAYA,CAACC,GAAmB,EAAkB;EACvD,OAAO,IAAIb,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpCW,GAAG,CAACC,UAAU,GAAG,UAAUC,KAAK,EAAQ;MACpCd,OAAO,CAACc,KAAK,CAAC;IAClB,CAAC;IACDF,GAAG,CAACT,OAAO,GAAG,YAAkB;MAC5BF,MAAM,CAACW,GAAG,CAACP,KAAK,CAAC;IACrB,CAAC;EACL,CAAC,CAAC;AACN;AAEA,SAASU,iBAAiBA,CAACC,GAAe,EAAkB;EACxD,OAAO,IAAIjB,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpCe,GAAG,CAACV,SAAS,GAAG,UAAUQ,KAAK,EAAQ;MACnCd,OAAO,CAACc,KAAK,CAAC;IAClB,CAAC;IACDE,GAAG,CAACb,OAAO,GAAG,YAAkB;MAC5BF,MAAM,CAACe,GAAG,CAACX,KAAK,CAAC;IACrB,CAAC;EACL,CAAC,CAAC;AACN;AAEA,SAASY,YAAYA,CAACD,GAAe,EAAuB;EACxD,OAAO,IAAIjB,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpCe,GAAG,CAACV,SAAS,GAAG,MAAYN,OAAO,CAACgB,GAAG,CAAC;IACxCA,GAAG,CAACb,OAAO,GAAIe,GAAG,IAAWjB,MAAM,CAACiB,GAAG,CAAC;EAC5C,CAAC,CAAC;AACN;AAEA,SAASC,kBAAkBA,CAAIH,GAAkB,EAAc;EAC3D,OAAOD,iBAAiB,CAACC,GAAG,CAAC,CAACI,IAAI,CAAEN,KAAK,IAAKE,GAAG,CAACR,MAAM,CAAC;AAC7D;AAEA,OAAO,MAAMa,0BAA0B,CAA8B;EACjE,OAAcxC,MAAMA,CAACyC,SAAqB,EAAEC,MAAc,EAAoB;IAC1EA,MAAM,GAAG,gBAAgB,IAAIA,MAAM,IAAI,SAAS,CAAC;IACjD,OAAOzC,SAAS,CAACwC,SAAS,EAAEC,MAAM,CAAC;EACvC;EAUA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWC,WAAWA,CACGF,SAAqB,EAExC;IAAA,IADEC,MAAM,GAAAE,SAAA,CAAAjC,MAAA,QAAAiC,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,SAAS;IAAA,KADDH,SAAqB,GAArBA,SAAqB;IAAAK,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA,uBAhBnB,IAAI;IAAAA,eAAA,0BACD,KAAK;IAAAA,eAAA;IAAAA,eAAA,kCAEgB,EAAE;IAgB7C,IAAI,CAACJ,MAAM,GAAG,gBAAgB,GAAGA,MAAM;IACvC,IAAI,CAACK,eAAe,GAAG,IAAIlD,eAAe,CAAC,CAAC;EAChD;;EAEA;AACJ;AACA;AACA;AACA;EACWmD,OAAOA,CAACC,OAAoB,EAAiB;IAAA,IAAAC,KAAA;IAChD,IAAI,CAAC,IAAI,CAACC,YAAY,EAAE;MACpBjD,MAAM,CAACkD,GAAG,sEAAsE,CAAC;MACjF,OAAOlC,OAAO,CAACC,OAAO,CAAC,CAAC;IAC5B;IAEA,IAAI,CAACgC,YAAY,GAAG,KAAK;IAEzBjD,MAAM,CAACkD,GAAG,oDAAoD,CAAC;IAC/D,IAAMjB,GAAG,GAAG,IAAI,CAACM,SAAS,CAACY,IAAI,CAAC,IAAI,CAACX,MAAM,EAAEhC,OAAO,CAAC;IACrDyB,GAAG,CAACmB,eAAe,GAAIC,EAAE,IAAW;MAChC,IAAMnD,EAAE,GAAG+B,GAAG,CAACR,MAAM;MACrB,IAAM6B,UAAU,GAAGD,EAAE,CAACC,UAAU;MAChCtD,MAAM,CAACkD,GAAG,uDAAAK,MAAA,CAAuDD,UAAU,CAAE,CAAC;MAC9E,IAAIA,UAAU,GAAG,CAAC,EAAE;QAChB;QACA,IAAI,CAACE,eAAe,GAAG,IAAI;MAC/B;MACAvD,aAAa,CAACwD,OAAO,CAAC,CAACC,SAAS,EAAEC,KAAK,KAAK;QACxC,IAAIL,UAAU,IAAIK,KAAK,EAAED,SAAS,CAACxD,EAAE,CAAC;MAC1C,CAAC,CAAC;IACN,CAAC;IAED+B,GAAG,CAAC2B,SAAS,GAAG,MAAY;MACxB5D,MAAM,CAACkD,GAAG,yEAAyE,CAAC;IACxF,CAAC;IAEDlD,MAAM,CAACkD,GAAG,6DAA6D,CAAC;IACxE,OAAOlB,iBAAiB,CAACC,GAAG,CAAC,CAACI,IAAI,cAAAwB,iBAAA,CAAC,aAAY;MAC3C7D,MAAM,CAACkD,GAAG,gDAAgD,CAAC;MAC3DF,KAAI,CAAC9C,EAAE,GAAG+B,GAAG,CAACR,MAAM;;MAEpB;MACA;MACAuB,KAAI,CAAC9C,EAAE,CAAC4D,eAAe,GAAG,MAAY;QAAA,IAAAC,QAAA;QAClC,CAAAA,QAAA,GAAAf,KAAI,CAAC9C,EAAE,cAAA6D,QAAA,eAAPA,QAAA,CAASC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClBhB,KAAI,CAACC,YAAY,GAAG,IAAI;QACxBD,KAAI,CAAC9C,EAAE,GAAGyC,SAAS;MACvB,CAAC;MACDK,KAAI,CAAC9C,EAAE,CAAC+D,OAAO,GAAG,MAAY;QAC1BjB,KAAI,CAACC,YAAY,GAAG,IAAI;QACxBD,KAAI,CAAC9C,EAAE,GAAGyC,SAAS;QACnBI,OAAO,aAAPA,OAAO,eAAPA,OAAO,CAAG,CAAC;MACf,CAAC;MAED,MAAMC,KAAI,CAACkB,IAAI,CAAC,CAAC;IACrB,CAAC,EAAC;EACN;;EAEA;EACOC,cAAcA,CAAA,EAAqB;IACtC,OAAOnD,OAAO,CAACC,OAAO,CAAC,IAAI,CAACuC,eAAe,CAAC;EAChD;;EAEA;AACJ;AACA;AACA;EACYU,IAAIA,CAAA,EAAqB;IAC7B,OAAOlD,OAAO,CAACoD,GAAG,CAAC,CAAC,IAAI,CAACC,eAAe,CAAC,CAAC,EAAE,IAAI,CAACC,YAAY,CAAC,CAAC,CAAC,CAAC,CAACjC,IAAI,CAACkC,KAAA,IAA6B;MAAA,IAA5B,CAACC,WAAW,EAAEC,QAAQ,CAAC,GAAAF,KAAA;MAC3FvE,MAAM,CAACkD,GAAG,kDAAkD,CAAC;MAC7D,IAAI,CAACL,eAAe,CAAC6B,UAAU,CAC3B;QACIC,UAAU,EAAEF,QAAQ,CAACG,SAAS;QAC9BC,KAAK,EAAEJ,QAAQ,CAACK,SAAS;QACzBC,YAAY,EAAE;UACVC,MAAM,EAAER;QACZ;MACJ,CAAC,EACD,IACJ,CAAC;IACL,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWS,mBAAmBA,CAACC,MAAc,EAA2C;IAChF,OAAO,IAAIlE,OAAO,CAAiC,CAACC,OAAO,EAAEC,MAAM,KAAK;MACpE,IAAMiE,EAAE,GAAG,IAAI,CAACjF,EAAE,CAAEkF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,UAAU,CAAC;MACtE,IAAMzE,KAAK,GAAGwE,EAAE,CAACE,WAAW,CAAC,uBAAuB,CAAC;MACrD,IAAMC,SAAS,GAAG3E,KAAK,CAACgD,KAAK,CAAC,MAAM,CAAC;MACrC,IAAM4B,KAAK,GAAGC,WAAW,CAACC,IAAI,CAACP,MAAM,CAAC;MACtC,IAAMQ,OAAO,GAAGJ,SAAS,CAACvE,UAAU,CAACwE,KAAK,CAAC;MAE3C,IAAMI,gBAAyC,GAAG,EAAE;MACpD;MACA;MACA;MACA;MACA;MACA,IAAIC,UAAU,GAAG,KAAK;MAEtBF,OAAO,CAACnE,SAAS,GAAG,MAAY;QAC5B,IAAMC,MAAM,GAAGkE,OAAO,CAACjE,MAAM;QAC7B,IAAI,CAACD,MAAM,EAAE;UACT;UACA,IAAI,CAACmE,gBAAgB,CAAClF,MAAM,IAAI,CAACmF,UAAU,EAAE;YACzC,OAAO3E,OAAO,CAAC,IAAI,CAAC;UACxB;UACA,OAAOA,OAAO,CAAC0E,gBAAgB,CAAC;QACpC;QACA,IAAME,MAAM,GAAGrE,MAAM,CAACsE,KAAK;QAC3B,IAAID,MAAM,CAACE,WAAW,EAAE;UACpBH,UAAU,GAAG,IAAI;QACrB,CAAC,MAAM;UACHD,gBAAgB,CAACjE,IAAI,CAACmE,MAAM,CAAC;QACjC;QACArE,MAAM,CAACG,QAAQ,CAAC,CAAC;MACrB,CAAC;MACD+D,OAAO,CAACtE,OAAO,GAAIe,GAAG,IAAW;QAC7BjB,MAAM,CAACiB,GAAG,CAAC;MACf,CAAC;IACL,CAAC,CAAC,CAACE,IAAI,CAAE2C,MAAM,IAAK;MAChBhF,MAAM,CAACkD,GAAG,YAAAK,MAAA,CAAYyB,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEvE,MAAM,8CAAA8C,MAAA,CAA2C2B,MAAM,SAAM,CAAC;MAC5F,OAAOF,MAAM;IACjB,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBgB,mBAAmBA,CAACd,MAAc,EAAES,gBAAyC,EAAiB;IAAA,IAAAM,MAAA;IAAA,OAAApC,iBAAA;MACvG7D,MAAM,CAACkD,GAAG,CAAC,8BAAAK,MAAA,CAA8BoC,gBAAgB,CAAClF,MAAM,oBAAA8C,MAAA,CAAqB2B,MAAM,CAAE,CAAC;MAC9F,IAAMC,EAAE,GAAGc,MAAI,CAAC/F,EAAE,CAAEkF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,WAAW,CAAC;MACvE,IAAMzE,KAAK,GAAGwE,EAAE,CAACE,WAAW,CAAC,uBAAuB,CAAC;MACrDM,gBAAgB,CAAClC,OAAO,CAAEyC,CAAC,IAAK;QAC5BvF,KAAK,CAACwF,GAAG,CAACD,CAAC,CAAC;MAChB,CAAC,CAAC;MACF;MACA;MACA;MACA;MACA;MACA,IAAME,YAAY,GAAG;QACjBC,OAAO,EAAEnB,MAAM;QACfa,WAAW,EAAE,IAAI;QACjBO,SAAS,EAAE;MACf,CAAC;MACD3F,KAAK,CAACwF,GAAG,CAACC,YAAY,CAAC;MACvB,MAAMxE,YAAY,CAACuD,EAAE,CAAC;MACtBnF,MAAM,CAACkD,GAAG,iCAAAK,MAAA,CAAiC2B,MAAM,MAAG,CAAC;IAAC;EAC1D;EAEaqB,qBAAqBA,CAACrB,MAAc,EAAiB;IAAA,IAAAsB,MAAA;IAAA,OAAA3C,iBAAA;MAC9D;MACA;MACA;MACA;MACA;MACA;MACA,IAAM4C,MAAM,GAAGD,MAAI,CAACtG,EAAE,CAAEkF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,UAAU,CAAC;MAC1E,IAAMzE,KAAK,GAAG8F,MAAM,CAACpB,WAAW,CAAC,uBAAuB,CAAC;MACzD,IAAMC,SAAS,GAAG3E,KAAK,CAACgD,KAAK,CAAC,MAAM,CAAC;MACrC,IAAM+C,SAAS,GAAGlB,WAAW,CAACC,IAAI,CAACP,MAAM,CAAC;MAE1C,IAAMyB,eAAe,GAAGvE,kBAAkB,CAACkD,SAAS,CAACsB,aAAa,CAACF,SAAS,EAAE,MAAM,CAAC,CAAC,CAACrE,IAAI,CACtFb,MAAM,IAAK,CAAgBA,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEqF,UAAU,EAAE,CAAC,CACrD,CAAC;MACD,IAAMC,eAAe,GAAG1E,kBAAkB,CAACkD,SAAS,CAACsB,aAAa,CAACF,SAAS,EAAE,MAAM,CAAC,CAAC,CAACrE,IAAI,CACtFb,MAAM,IAAK,CAAgBA,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEqF,UAAU,EAAE,CAAC,CACrD,CAAC;MACD,IAAM,CAACE,WAAW,EAAEC,WAAW,CAAC,SAAShG,OAAO,CAACoD,GAAG,CAAC,CAACuC,eAAe,EAAEG,eAAe,CAAC,CAAC;MAExF,IAAMG,OAAO,GAAGT,MAAI,CAACtG,EAAE,CAAEkF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,WAAW,CAAC;MAC5E,IAAM8B,UAAU,GAAGD,OAAO,CAAC5B,WAAW,CAAC,uBAAuB,CAAC;MAC/D,IAAM8B,eAAe,GAAG3B,WAAW,CAAC4B,KAAK,CAAC,CAAClC,MAAM,EAAE6B,WAAW,CAAC,EAAE,CAAC7B,MAAM,EAAE8B,WAAW,CAAC,CAAC;MAEvFhH,MAAM,CAACkD,GAAG,wDAAAK,MAAA,CACiD2B,MAAM,wBAC7D,CAACA,MAAM,EAAE6B,WAAW,CAAC,EACrB,CAAC7B,MAAM,EAAE8B,WAAW,CACxB,CAAC;MACD,MAAM9E,YAAY,CAACgF,UAAU,CAACG,MAAM,CAACF,eAAe,CAAC,CAAC;IAAC;EAC3D;;EAEA;AACJ;AACA;AACA;AACA;EACWG,aAAaA,CAAA,EAAkB;IAClC,OAAO,IAAItG,OAAO,CAAEC,OAAO,IAAK;MAAA,IAAAsG,SAAA;MAC5BvH,MAAM,CAACkD,GAAG,iCAAAK,MAAA,CAAiC,IAAI,CAACf,MAAM,CAAE,CAAC;;MAEzD;MACA,CAAA+E,SAAA,OAAI,CAACrH,EAAE,cAAAqH,SAAA,eAAPA,SAAA,CAASvD,KAAK,CAAC,CAAC;MAEhB,IAAM/B,GAAG,GAAG,IAAI,CAACM,SAAS,CAACiF,cAAc,CAAC,IAAI,CAAChF,MAAM,CAAC;MAEtDP,GAAG,CAAC2B,SAAS,GAAG,MAAY;QACxB5D,MAAM,CAACkD,GAAG,+BAAAK,MAAA,CAA+B,IAAI,CAACf,MAAM,kCAA+B,CAAC;MACxF,CAAC;MAEDP,GAAG,CAACb,OAAO,GAAG,MAAY;QACtB;QACA;QACA;QACApB,MAAM,CAACyH,IAAI,6CAAAlE,MAAA,CAA6CtB,GAAG,CAACX,KAAK,CAAE,CAAC;QACpEL,OAAO,CAAC,CAAC;MACb,CAAC;MAEDgB,GAAG,CAACV,SAAS,GAAG,MAAY;QACxBvB,MAAM,CAACkD,GAAG,gCAAAK,MAAA,CAAgC,IAAI,CAACf,MAAM,CAAE,CAAC;QACxDvB,OAAO,CAAC,CAAC;MACb,CAAC;IACL,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWyG,YAAYA,CAAA,EAA0C;IAAA,IAAzCC,IAAI,GAAAjF,SAAA,CAAAjC,MAAA,QAAAiC,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,IAAI;IAC3B,IAAMkF,IAAI,GAAG,IAAI,CAAC/E,eAAe,CAACgF,OAAO,CAAC,CAAC;IAC3C,IAAI,CAACD,IAAI,CAAChD,SAAS,EAAE,OAAO5D,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC;IACjD,IAAI0G,IAAI,EAAE;MACN;MACA;MACA,OAAO3G,OAAO,CAACC,OAAO,CAACrB,QAAQ,CAACgI,IAAI,CAAC,CAAC;IAC1C,CAAC,MAAM;MACH,OAAO5G,OAAO,CAACC,OAAO,CAAC2G,IAAI,CAAC;IAChC;EACJ;EAEOE,iBAAiBA,CAAA,EAAoB;IACxC,OAAO9G,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC4B,eAAe,CAACiF,iBAAiB,CAAC,CAAC,CAAC;EACpE;EAEOC,WAAWA,CAACtD,QAAuB,EAAiB;IACvD,OAAOzD,OAAO,CAACC,OAAO,CAAC,CAAC,CAACoB,IAAI,CAAC,MAAM;MAChC,IAAI,CAACQ,eAAe,CAAC6B,UAAU,CAACD,QAAQ,CAAC;IAC7C,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBuD,cAAcA,CAACC,UAAuB,EAAiB;IAAA,IAAAC,MAAA;IAAA,OAAArE,iBAAA;MAChE,IAAIqE,MAAI,CAACC,qBAAqB,EAAE;QAC5BnI,MAAM,CAACyH,IAAI,CAAC,wDAAwD,CAAC;QACrES,MAAI,CAACE,uBAAuB,CAAC1G,IAAI,CAAC,GAAGuG,UAAU,CAAC;QAChD,OAAOC,MAAI,CAACC,qBAAqB;MACrC;MACAF,UAAU,CAACI,OAAO,CAAC,GAAGH,MAAI,CAACE,uBAAuB,CAAC;MACnDF,MAAI,CAACC,qBAAqB,GAAGD,MAAI,CAACI,gBAAgB,CAACL,UAAU,CAAC;MAC9D,OAAOC,MAAI,CAACC,qBAAqB;IAAC;EACtC;EAEcG,gBAAgBA,CAACL,UAAuB,EAAiB;IAAA,IAAAM,MAAA;IAAA,OAAA1E,iBAAA;MACnE,IAAI;QACA,IAAMY,QAAQ,GAAG8D,MAAI,CAAC1F,eAAe,CAACgF,OAAO,CAAC,IAAI,CAAC;QACnD,MAAM7G,OAAO,CAACoD,GAAG,CAAC,CACdmE,MAAI,CAACC,yBAAyB,CAACP,UAAU,CAAC,EAC1CM,MAAI,CAACE,kBAAkB,CAAChE,QAAQ,CAACD,WAAW,CAAC,EAC7C+D,MAAI,CAACG,eAAe,CAACjE,QAAQ,CAACG,SAAS,EAAEH,QAAQ,CAACK,SAAS,CAAC,CAC/D,CAAC;MACN,CAAC,SAAS;QACNyD,MAAI,CAACJ,qBAAqB,GAAGxF,SAAS;MAC1C;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACY+F,eAAeA,CAAC9D,SAAiB,EAAEE,SAAiC,EAAiB;IACzF9E,MAAM,CAACkD,GAAG,CAAC,4BAA4B,EAAE0B,SAAS,CAAC;IACnD,OAAO/E,UAAU,CAAO,MAAM;MAC1B,IAAMgC,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;MACvD,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,MAAM,CAAC;MACrC1E,KAAK,CAACwF,GAAG,CAAC;QACNwC,OAAO,EAAE,GAAG;QAAE;QACd/D,SAAS;QACTE;MACJ,CAAC,CAAC,CAAC,CAAC;MACJ,OAAOlD,YAAY,CAACC,GAAG,CAAC,CAACQ,IAAI,CAAC,MAAM;QAChCrC,MAAM,CAACkD,GAAG,CAAC,2BAA2B,EAAE0B,SAAS,CAAC;MACtD,CAAC,CAAC;IACN,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACY6D,kBAAkBA,CAACjE,WAA4B,EAAiB;IACpE,OAAO3E,UAAU,CAAO,MAAM;MAC1B,IAAMgC,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC;MAC9D,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,aAAa,CAAC;MAC5C,KAAK,IAAMtD,KAAK,IAAIyC,WAAW,EAAE;QAC7B7D,KAAK,CAACwF,GAAG,CAACpE,KAAK,CAAC,CAAC,CAAC;MACtB;MACA,OAAOH,YAAY,CAACC,GAAG,CAAC,CAACQ,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACYmG,yBAAyBA,CAACI,MAAmB,EAAiB;IAClE,OAAO/I,UAAU,CAAO,MAAM;MAC1B,IAAMgC,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;MACxD,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,OAAO,CAAC;MACtC,KAAK,IAAMwD,KAAK,IAAID,MAAM,EAAE;QACxBjI,KAAK,CAACwF,GAAG,CAAC;UACN2C,MAAM,EAAED,KAAK,CAAC,CAAC,CAAC;UAChB9G,KAAK,EAAE8G,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;MACR;MACA,OAAOjH,YAAY,CAACC,GAAG,CAAC,CAACQ,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW0G,qBAAqBA,CAAA,EAAyB;IACjD,OAAOlJ,UAAU,CAAc,MAAM;MACjC,IAAMgC,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;MACvD,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,OAAO,CAAC;MACtC,OAAO3E,WAAW,CAACC,KAAK,EAAEgC,SAAS,EAAGnB,MAAM,IAAK;QAC7C,OAAO,CAACA,MAAM,CAACsE,KAAK,CAACgD,MAAM,EAAEtH,MAAM,CAACsE,KAAK,CAAC/D,KAAK,CAAC;MACpD,CAAC,CAAC;IACN,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACYsC,eAAeA,CAAA,EAA6B;IAChDrE,MAAM,CAACkD,GAAG,sDAAsD,CAAC;IACjE,OAAOrD,UAAU,CAAkB,MAAM;MACrC,IAAMgC,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;MAC7D,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,aAAa,CAAC;MAC5C,OAAO3E,WAAW,CAACC,KAAK,EAAEgC,SAAS,EAAGnB,MAAM,IAAK;QAC7C,OAAOA,MAAM,CAACsE,KAAK;MACvB,CAAC,CAAC,CAACzD,IAAI,CAAEZ,MAAuB,IAAK;QACjCzB,MAAM,CAACkD,GAAG,kDAAkD,CAAC;QAC7D,OAAOzB,MAAM;MACjB,CAAC,CAAC;IACN,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACY6C,YAAYA,CAAA,EAAuB;IACvCtE,MAAM,CAACkD,GAAG,mDAAmD,CAAC;IAC9D,OAAOrD,UAAU,CAAY,MAAM;MAC/B,IAAMgC,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;MACtD,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,MAAM,CAAC;MACrC,OAAO3E,WAAW,CAACC,KAAK,EAAEgC,SAAS,EAAGnB,MAAM,IAAK;QAC7C,OAAOA,MAAM,CAACsE,KAAK;MACvB,CAAC,CAAC,CAACzD,IAAI,CAAElB,OAAoB,IAAK;QAC9BnB,MAAM,CAACkD,GAAG,+CAA+C,CAAC;QAC1D,IAAI/B,OAAO,CAACV,MAAM,GAAG,CAAC,EAAE;UACpBT,MAAM,CAACyH,IAAI,CAAC,2CAA2C,CAAC;QAC5D;QACA,OAAOtG,OAAO,CAACV,MAAM,GAAG,CAAC,GAAGU,OAAO,CAAC,CAAC,CAAC,GAAI,CAAC,CAAe;MAC9D,CAAC,CAAC;IACN,CAAC,CAAC;EACN;EAEO6H,gBAAgBA,CAAA,EAA2C;IAC9D,OAAOhI,OAAO,CAACC,OAAO,CAAC,CAAC,CAACoB,IAAI,CAAC,MAAM;MAChC,IAAMR,GAAG,GAAG,IAAI,CAAC3B,EAAE,CAAEkF,WAAW,CAAC,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC;MAChE,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,gBAAgB,CAAC;MAC/C,OAAO3E,WAAW,CAACC,KAAK,EAAEgC,SAAS,EAAGnB,MAAM,IAAK;QAAA,IAAAyH,aAAA;QAC7C,QAAAA,aAAA,GAAOzH,MAAM,CAACsE,KAAK,cAAAmD,aAAA,uBAAZA,aAAA,CAAcC,OAAO;MAChC,CAAC,CAAC,CAAC7G,IAAI,CAAElB,OAAO,IAAKA,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;EACN;EAEagI,kBAAkBA,CAACD,OAA0B,EAAiB;IAAA,IAAAE,MAAA;IAAA,OAAAvF,iBAAA;MACvE,IAAMhC,GAAG,GAAGuH,MAAI,CAAClJ,EAAE,CAAEkF,WAAW,CAAC,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC;MACjE,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,gBAAgB,CAAC;MAC/C1E,KAAK,CAACwF,GAAG,CAAC;QACNwC,OAAO,EAAE,GAAG;QAAE;QACdO,OAAO,EAAEA;MACb,CAAC,CAAC,CAAC,CAAC;MACJ,MAAMtH,YAAY,CAACC,GAAG,CAAC;IAAC;EAC5B;EAEawH,mBAAmBA,CAACC,OAAiC,EAAiB;IAAA,IAAAC,MAAA;IAAA,OAAA1F,iBAAA;MAC/E,IAAMhC,GAAG,GAAG0H,MAAI,CAACrJ,EAAE,CAAEkF,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;MAClE,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,iBAAiB,CAAC;MAChD,KAAK,IAAMmE,KAAK,IAAIF,OAAO,EAAE;QACzB3I,KAAK,CAAC8I,GAAG,CAACD,KAAK,CAAC;MACpB;MACA,MAAM5H,YAAY,CAACC,GAAG,CAAC;IAAC;EAC5B;EAEa6H,sBAAsBA,CAAA,EAAyC;IAAA,IAAAC,MAAA;IAAA,OAAA9F,iBAAA;MACxE,IAAMhC,GAAG,GAAG8H,MAAI,CAACzJ,EAAE,CAAEkF,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,UAAU,CAAC;MACjE,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,iBAAiB,CAAC;MAChD,IAAM7D,MAAM,SAASY,kBAAkB,CAACzB,KAAK,CAACI,UAAU,CAAC,CAAC,CAAC;MAC3D,IAAI,CAACS,MAAM,EAAE,OAAO,IAAI;MAExB,IAAMoI,WAAW,GAAGpI,MAAM,CAACsE,KAA+B;MAE1D,OAAO;QACH+D,EAAE,EAAErI,MAAM,CAACsI,GAAa;QACxBC,KAAK,EAAEH,WAAW,CAACG,KAAK;QACxBC,SAAS,EAAEJ,WAAW,CAACI,SAAS;QAChCR,KAAK,EAAEI,WAAW,CAACJ;MACvB,CAAC;IAAC;EACN;EAEaS,mBAAmBA,CAACJ,EAAU,EAAiB;IAAA,IAAAK,MAAA;IAAA,OAAArG,iBAAA;MACxD,IAAMhC,GAAG,GAAGqI,MAAI,CAAChK,EAAE,CAAEkF,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;MAClE,IAAMzE,KAAK,GAAGkB,GAAG,CAACwD,WAAW,CAAC,iBAAiB,CAAC;MAChD1E,KAAK,CAAC0G,MAAM,CAACwC,EAAE,CAAC;MAChB,MAAMjI,YAAY,CAACC,GAAG,CAAC;IAAC;EAC5B;;EAEA;AACJ;AACA;EACiBsI,OAAOA,CAAA,EAAkB;IAAA,IAAAC,OAAA;IAAA,OAAAvG,iBAAA;MAAA,IAAAwG,UAAA;MAClC,CAAAA,UAAA,GAAAD,OAAI,CAAClK,EAAE,cAAAmK,UAAA,eAAPA,UAAA,CAASrG,KAAK,CAAC,CAAC;IAAC;EACrB;AACJ","ignoreList":[]}
+{"version":3,"file":"indexeddb-local-backend.js","names":["SyncAccumulator","deepCopy","promiseTry","exists","idbExists","logger","DB_MIGRATIONS","db","createObjectStore","keyPath","oobMembersStore","createIndex","autoIncrement","VERSION","length","selectQuery","store","keyRange","resultMapper","query","openCursor","Promise","resolve","reject","results","onerror","_query$error","Error","error","name","onsuccess","cursor","result","push","continue","txnAsPromise","txn","oncomplete","event","reqAsEventPromise","req","reqAsPromise","err","reqAsCursorPromise","then","LocalIndexedDBStoreBackend","indexedDB","dbName","constructor","arguments","undefined","_defineProperty","syncAccumulator","connect","onClose","_this","disconnected","log","open","onupgradeneeded","ev","oldVersion","concat","_isNewlyCreated","forEach","migration","index","onblocked","_asyncToGenerator","onversionchange","_this$db","close","onclose","init","isNewlyCreated","all","loadAccountData","loadSyncData","_ref2","accountData","syncData","accumulate","next_batch","nextBatch","rooms","roomsData","account_data","events","getOutOfBandMembers","roomId","tx","transaction","objectStore","roomIndex","range","IDBKeyRange","only","request","membershipEvents","oobWritten","record","value","oob_written","setOutOfBandMembers","_this2","e","put","markerObject","room_id","state_key","clearOutOfBandMembers","_this3","readTx","roomRange","minStateKeyProm","openKeyCursor","primaryKey","maxStateKeyProm","minStateKey","maxStateKey","writeTx","writeStore","membersKeyRange","bound","delete","clearDatabase","_this$db2","deleteDatabase","_req$error","warn","getSavedSync","copy","data","getJSON","getNextBatchToken","setSyncData","syncToDatabase","userTuples","_this4","syncToDatabasePromise","pendingUserPresenceData","unshift","doSyncToDatabase","_this5","persistUserPresenceEvents","persistAccountData","persistSyncData","clobber","tuples","tuple","userId","getUserPresenceEvents","getClientOptions","_cursor$value","options","storeClientOptions","_this6","saveToDeviceBatches","batches","_this7","batch","add","getOldestToDeviceBatch","_this8","resultBatch","id","key","txnId","eventType","removeToDeviceBatch","_this9","destroy","_this10","_this10$db"],"sources":["../../src/store/indexeddb-local-backend.ts"],"sourcesContent":["/*\nCopyright 2017 - 2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { IMinimalEvent, ISyncData, ISyncResponse, SyncAccumulator } from \"../sync-accumulator.ts\";\nimport { deepCopy, promiseTry } from \"../utils.ts\";\nimport { exists as idbExists } from \"../indexeddb-helpers.ts\";\nimport { logger } from \"../logger.ts\";\nimport { IStateEventWithRoomId, IStoredClientOpts } from \"../matrix.ts\";\nimport { ISavedSync } from \"./index.ts\";\nimport { IIndexedDBBackend, UserTuple } from \"./indexeddb-backend.ts\";\nimport { IndexedToDeviceBatch, ToDeviceBatchWithTxnId } from \"../models/ToDeviceMessage.ts\";\n\ntype DbMigration = (db: IDBDatabase) => void;\nconst DB_MIGRATIONS: DbMigration[] = [\n    (db): void => {\n        // Make user store, clobber based on user ID. (userId property of User objects)\n        db.createObjectStore(\"users\", { keyPath: [\"userId\"] });\n\n        // Make account data store, clobber based on event type.\n        // (event.type property of MatrixEvent objects)\n        db.createObjectStore(\"accountData\", { keyPath: [\"type\"] });\n\n        // Make /sync store (sync tokens, room data, etc), always clobber (const key).\n        db.createObjectStore(\"sync\", { keyPath: [\"clobber\"] });\n    },\n    (db): void => {\n        const oobMembersStore = db.createObjectStore(\"oob_membership_events\", {\n            keyPath: [\"room_id\", \"state_key\"],\n        });\n        oobMembersStore.createIndex(\"room\", \"room_id\");\n    },\n    (db): void => {\n        db.createObjectStore(\"client_options\", { keyPath: [\"clobber\"] });\n    },\n    (db): void => {\n        db.createObjectStore(\"to_device_queue\", { autoIncrement: true });\n    },\n    // Expand as needed.\n];\nconst VERSION = DB_MIGRATIONS.length;\n\n/**\n * Helper method to collect results from a Cursor and promiseify it.\n * @param store - The store to perform openCursor on.\n * @param keyRange - Optional key range to apply on the cursor.\n * @param resultMapper - A function which is repeatedly called with a\n * Cursor.\n * Return the data you want to keep.\n * @returns Promise which resolves to an array of whatever you returned from\n * resultMapper.\n */\nfunction selectQuery<T>(\n    store: IDBObjectStore,\n    keyRange: IDBKeyRange | IDBValidKey | undefined,\n    resultMapper: (cursor: IDBCursorWithValue) => T,\n): Promise<T[]> {\n    const query = store.openCursor(keyRange);\n    return new Promise((resolve, reject) => {\n        const results: T[] = [];\n        query.onerror = (): void => {\n            reject(new Error(\"Query failed: \" + query.error?.name));\n        };\n        // collect results\n        query.onsuccess = (): void => {\n            const cursor = query.result;\n            if (!cursor) {\n                resolve(results);\n                return; // end of results\n            }\n            results.push(resultMapper(cursor));\n            cursor.continue();\n        };\n    });\n}\n\nfunction txnAsPromise(txn: IDBTransaction): Promise<Event> {\n    return new Promise((resolve, reject) => {\n        txn.oncomplete = function (event): void {\n            resolve(event);\n        };\n        txn.onerror = function (): void {\n            reject(txn.error);\n        };\n    });\n}\n\nfunction reqAsEventPromise(req: IDBRequest): Promise<Event> {\n    return new Promise((resolve, reject) => {\n        req.onsuccess = function (event): void {\n            resolve(event);\n        };\n        req.onerror = function (): void {\n            reject(req.error);\n        };\n    });\n}\n\nfunction reqAsPromise(req: IDBRequest): Promise<IDBRequest> {\n    return new Promise((resolve, reject) => {\n        req.onsuccess = (): void => resolve(req);\n        req.onerror = (err): void => reject(err);\n    });\n}\n\nfunction reqAsCursorPromise<T>(req: IDBRequest<T>): Promise<T> {\n    return reqAsEventPromise(req).then((event) => req.result);\n}\n\nexport class LocalIndexedDBStoreBackend implements IIndexedDBBackend {\n    public static exists(indexedDB: IDBFactory, dbName: string): Promise<boolean> {\n        dbName = \"matrix-js-sdk:\" + (dbName || \"default\");\n        return idbExists(indexedDB, dbName);\n    }\n\n    private readonly dbName: string;\n    private readonly syncAccumulator: SyncAccumulator;\n    private db?: IDBDatabase;\n    private disconnected = true;\n    private _isNewlyCreated = false;\n    private syncToDatabasePromise?: Promise<void>;\n    private pendingUserPresenceData: UserTuple[] = [];\n\n    /**\n     * Does the actual reading from and writing to the indexeddb\n     *\n     * Construct a new Indexed Database store backend. This requires a call to\n     * `connect()` before this store can be used.\n     * @param indexedDB - The Indexed DB interface e.g\n     * `window.indexedDB`\n     * @param dbName - Optional database name. The same name must be used\n     * to open the same database.\n     */\n    public constructor(\n        private readonly indexedDB: IDBFactory,\n        dbName = \"default\",\n    ) {\n        this.dbName = \"matrix-js-sdk:\" + dbName;\n        this.syncAccumulator = new SyncAccumulator();\n    }\n\n    /**\n     * Attempt to connect to the database. This can fail if the user does not\n     * grant permission.\n     * @returns Promise which resolves if successfully connected.\n     */\n    public connect(onClose?: () => void): Promise<void> {\n        if (!this.disconnected) {\n            logger.log(`LocalIndexedDBStoreBackend.connect: already connected or connecting`);\n            return Promise.resolve();\n        }\n\n        this.disconnected = false;\n\n        logger.log(`LocalIndexedDBStoreBackend.connect: connecting...`);\n        const req = this.indexedDB.open(this.dbName, VERSION);\n        req.onupgradeneeded = (ev): void => {\n            const db = req.result;\n            const oldVersion = ev.oldVersion;\n            logger.log(`LocalIndexedDBStoreBackend.connect: upgrading from ${oldVersion}`);\n            if (oldVersion < 1) {\n                // The database did not previously exist\n                this._isNewlyCreated = true;\n            }\n            DB_MIGRATIONS.forEach((migration, index) => {\n                if (oldVersion <= index) migration(db);\n            });\n        };\n\n        req.onblocked = (): void => {\n            logger.log(`can't yet open LocalIndexedDBStoreBackend because it is open elsewhere`);\n        };\n\n        logger.log(`LocalIndexedDBStoreBackend.connect: awaiting connection...`);\n        return reqAsEventPromise(req).then(async () => {\n            logger.log(`LocalIndexedDBStoreBackend.connect: connected`);\n            this.db = req.result;\n\n            // add a poorly-named listener for when deleteDatabase is called\n            // so we can close our db connections.\n            this.db.onversionchange = (): void => {\n                this.db?.close(); // this does not call onclose\n                this.disconnected = true;\n                this.db = undefined;\n            };\n            this.db.onclose = (): void => {\n                this.disconnected = true;\n                this.db = undefined;\n                onClose?.();\n            };\n\n            await this.init();\n        });\n    }\n\n    /** @returns whether or not the database was newly created in this session. */\n    public isNewlyCreated(): Promise<boolean> {\n        return Promise.resolve(this._isNewlyCreated);\n    }\n\n    /**\n     * Having connected, load initial data from the database and prepare for use\n     * @returns Promise which resolves on success\n     */\n    private init(): Promise<unknown> {\n        return Promise.all([this.loadAccountData(), this.loadSyncData()]).then(([accountData, syncData]) => {\n            logger.log(`LocalIndexedDBStoreBackend: loaded initial data`);\n            this.syncAccumulator.accumulate(\n                {\n                    next_batch: syncData.nextBatch,\n                    rooms: syncData.roomsData,\n                    account_data: {\n                        events: accountData,\n                    },\n                },\n                true,\n            );\n        });\n    }\n\n    /**\n     * Returns the out-of-band membership events for this room that\n     * were previously loaded.\n     * @returns the events, potentially an empty array if OOB loading didn't yield any new members\n     * @returns in case the members for this room haven't been stored yet\n     */\n    public getOutOfBandMembers(roomId: string): Promise<IStateEventWithRoomId[] | null> {\n        return new Promise<IStateEventWithRoomId[] | null>((resolve, reject) => {\n            const tx = this.db!.transaction([\"oob_membership_events\"], \"readonly\");\n            const store = tx.objectStore(\"oob_membership_events\");\n            const roomIndex = store.index(\"room\");\n            const range = IDBKeyRange.only(roomId);\n            const request = roomIndex.openCursor(range);\n\n            const membershipEvents: IStateEventWithRoomId[] = [];\n            // did we encounter the oob_written marker object\n            // amongst the results? That means OOB member\n            // loading already happened for this room\n            // but there were no members to persist as they\n            // were all known already\n            let oobWritten = false;\n\n            request.onsuccess = (): void => {\n                const cursor = request.result;\n                if (!cursor) {\n                    // Unknown room\n                    if (!membershipEvents.length && !oobWritten) {\n                        return resolve(null);\n                    }\n                    return resolve(membershipEvents);\n                }\n                const record = cursor.value;\n                if (record.oob_written) {\n                    oobWritten = true;\n                } else {\n                    membershipEvents.push(record);\n                }\n                cursor.continue();\n            };\n            request.onerror = (err): void => {\n                reject(err);\n            };\n        }).then((events) => {\n            logger.log(`LL: got ${events?.length} membershipEvents from storage for room ${roomId} ...`);\n            return events;\n        });\n    }\n\n    /**\n     * Stores the out-of-band membership events for this room. Note that\n     * it still makes sense to store an empty array as the OOB status for the room is\n     * marked as fetched, and getOutOfBandMembers will return an empty array instead of null\n     * @param membershipEvents - the membership events to store\n     */\n    public async setOutOfBandMembers(roomId: string, membershipEvents: IStateEventWithRoomId[]): Promise<void> {\n        logger.log(`LL: backend about to store ${membershipEvents.length}` + ` members for ${roomId}`);\n        const tx = this.db!.transaction([\"oob_membership_events\"], \"readwrite\");\n        const store = tx.objectStore(\"oob_membership_events\");\n        membershipEvents.forEach((e) => {\n            store.put(e);\n        });\n        // aside from all the events, we also write a marker object to the store\n        // to mark the fact that OOB members have been written for this room.\n        // It's possible that 0 members need to be written as all where previously know\n        // but we still need to know whether to return null or [] from getOutOfBandMembers\n        // where null means out of band members haven't been stored yet for this room\n        const markerObject = {\n            room_id: roomId,\n            oob_written: true,\n            state_key: 0,\n        };\n        store.put(markerObject);\n        await txnAsPromise(tx);\n        logger.log(`LL: backend done storing for ${roomId}!`);\n    }\n\n    public async clearOutOfBandMembers(roomId: string): Promise<void> {\n        // the approach to delete all members for a room\n        // is to get the min and max state key from the index\n        // for that room, and then delete between those\n        // keys in the store.\n        // this should be way faster than deleting every member\n        // individually for a large room.\n        const readTx = this.db!.transaction([\"oob_membership_events\"], \"readonly\");\n        const store = readTx.objectStore(\"oob_membership_events\");\n        const roomIndex = store.index(\"room\");\n        const roomRange = IDBKeyRange.only(roomId);\n\n        const minStateKeyProm = reqAsCursorPromise(roomIndex.openKeyCursor(roomRange, \"next\")).then(\n            (cursor) => (<IDBValidKey[]>cursor?.primaryKey)[1],\n        );\n        const maxStateKeyProm = reqAsCursorPromise(roomIndex.openKeyCursor(roomRange, \"prev\")).then(\n            (cursor) => (<IDBValidKey[]>cursor?.primaryKey)[1],\n        );\n        const [minStateKey, maxStateKey] = await Promise.all([minStateKeyProm, maxStateKeyProm]);\n\n        const writeTx = this.db!.transaction([\"oob_membership_events\"], \"readwrite\");\n        const writeStore = writeTx.objectStore(\"oob_membership_events\");\n        const membersKeyRange = IDBKeyRange.bound([roomId, minStateKey], [roomId, maxStateKey]);\n\n        logger.log(\n            `LL: Deleting all users + marker in storage for room ${roomId}, with key range:`,\n            [roomId, minStateKey],\n            [roomId, maxStateKey],\n        );\n        await reqAsPromise(writeStore.delete(membersKeyRange));\n    }\n\n    /**\n     * Clear the entire database. This should be used when logging out of a client\n     * to prevent mixing data between accounts. Closes the database.\n     * @returns Resolved when the database is cleared.\n     */\n    public clearDatabase(): Promise<void> {\n        return new Promise((resolve) => {\n            logger.log(`Removing indexeddb instance: ${this.dbName}`);\n\n            // Close the database first to avoid firing unexpected close events\n            this.db?.close();\n\n            const req = this.indexedDB.deleteDatabase(this.dbName);\n\n            req.onblocked = (): void => {\n                logger.log(`can't yet delete indexeddb ${this.dbName} because it is open elsewhere`);\n            };\n\n            req.onerror = (): void => {\n                // in firefox, with indexedDB disabled, this fails with a\n                // DOMError. We treat this as non-fatal, so that we can still\n                // use the app.\n                logger.warn(`unable to delete js-sdk store indexeddb: ${req.error?.name}`);\n                resolve();\n            };\n\n            req.onsuccess = (): void => {\n                logger.log(`Removed indexeddb instance: ${this.dbName}`);\n                resolve();\n            };\n        });\n    }\n\n    /**\n     * @param copy - If false, the data returned is from internal\n     * buffers and must not be mutated. Otherwise, a copy is made before\n     * returning such that the data can be safely mutated. Default: true.\n     *\n     * @returns Promise which resolves with a sync response to restore the\n     * client state to where it was at the last save, or null if there\n     * is no saved sync data.\n     */\n    public getSavedSync(copy = true): Promise<ISavedSync | null> {\n        const data = this.syncAccumulator.getJSON();\n        if (!data.nextBatch) return Promise.resolve(null);\n        if (copy) {\n            // We must deep copy the stored data so that the /sync processing code doesn't\n            // corrupt the internal state of the sync accumulator (it adds non-clonable keys)\n            return Promise.resolve(deepCopy(data));\n        } else {\n            return Promise.resolve(data);\n        }\n    }\n\n    public getNextBatchToken(): Promise<string> {\n        return Promise.resolve(this.syncAccumulator.getNextBatchToken());\n    }\n\n    public setSyncData(syncData: ISyncResponse): Promise<void> {\n        return Promise.resolve().then(() => {\n            this.syncAccumulator.accumulate(syncData);\n        });\n    }\n\n    /**\n     * Sync users and all accumulated sync data to the database.\n     * If a previous sync is in flight, the new data will be added to the\n     * next sync and the current sync's promise will be returned.\n     * @param userTuples - The user tuples\n     * @returns Promise which resolves if the data was persisted.\n     */\n    public async syncToDatabase(userTuples: UserTuple[]): Promise<void> {\n        if (this.syncToDatabasePromise) {\n            logger.warn(\"Skipping syncToDatabase() as persist already in flight\");\n            this.pendingUserPresenceData.push(...userTuples);\n            return this.syncToDatabasePromise;\n        }\n        userTuples.unshift(...this.pendingUserPresenceData);\n        this.syncToDatabasePromise = this.doSyncToDatabase(userTuples);\n        return this.syncToDatabasePromise;\n    }\n\n    private async doSyncToDatabase(userTuples: UserTuple[]): Promise<void> {\n        try {\n            const syncData = this.syncAccumulator.getJSON(true);\n            await Promise.all([\n                this.persistUserPresenceEvents(userTuples),\n                this.persistAccountData(syncData.accountData),\n                this.persistSyncData(syncData.nextBatch, syncData.roomsData),\n            ]);\n        } finally {\n            this.syncToDatabasePromise = undefined;\n        }\n    }\n\n    /**\n     * Persist rooms /sync data along with the next batch token.\n     * @param nextBatch - The next_batch /sync value.\n     * @param roomsData - The 'rooms' /sync data from a SyncAccumulator\n     * @returns Promise which resolves if the data was persisted.\n     */\n    private persistSyncData(nextBatch: string, roomsData: ISyncResponse[\"rooms\"]): Promise<void> {\n        logger.log(\"Persisting sync data up to\", nextBatch);\n        return promiseTry<void>(() => {\n            const txn = this.db!.transaction([\"sync\"], \"readwrite\");\n            const store = txn.objectStore(\"sync\");\n            store.put({\n                clobber: \"-\", // constant key so will always clobber\n                nextBatch,\n                roomsData,\n            }); // put == UPSERT\n            return txnAsPromise(txn).then(() => {\n                logger.log(\"Persisted sync data up to\", nextBatch);\n            });\n        });\n    }\n\n    /**\n     * Persist a list of account data events. Events with the same 'type' will\n     * be replaced.\n     * @param accountData - An array of raw user-scoped account data events\n     * @returns Promise which resolves if the events were persisted.\n     */\n    private persistAccountData(accountData: IMinimalEvent[]): Promise<void> {\n        return promiseTry<void>(() => {\n            const txn = this.db!.transaction([\"accountData\"], \"readwrite\");\n            const store = txn.objectStore(\"accountData\");\n            for (const event of accountData) {\n                store.put(event); // put == UPSERT\n            }\n            return txnAsPromise(txn).then();\n        });\n    }\n\n    /**\n     * Persist a list of [user id, presence event] they are for.\n     * Users with the same 'userId' will be replaced.\n     * Presence events should be the event in its raw form (not the Event\n     * object)\n     * @param tuples - An array of [userid, event] tuples\n     * @returns Promise which resolves if the users were persisted.\n     */\n    private persistUserPresenceEvents(tuples: UserTuple[]): Promise<void> {\n        return promiseTry<void>(() => {\n            const txn = this.db!.transaction([\"users\"], \"readwrite\");\n            const store = txn.objectStore(\"users\");\n            for (const tuple of tuples) {\n                store.put({\n                    userId: tuple[0],\n                    event: tuple[1],\n                }); // put == UPSERT\n            }\n            return txnAsPromise(txn).then();\n        });\n    }\n\n    /**\n     * Load all user presence events from the database. This is not cached.\n     * FIXME: It would probably be more sensible to store the events in the\n     * sync.\n     * @returns A list of presence events in their raw form.\n     */\n    public getUserPresenceEvents(): Promise<UserTuple[]> {\n        return promiseTry<UserTuple[]>(() => {\n            const txn = this.db!.transaction([\"users\"], \"readonly\");\n            const store = txn.objectStore(\"users\");\n            return selectQuery(store, undefined, (cursor) => {\n                return [cursor.value.userId, cursor.value.event];\n            });\n        });\n    }\n\n    /**\n     * Load all the account data events from the database. This is not cached.\n     * @returns A list of raw global account events.\n     */\n    private loadAccountData(): Promise<IMinimalEvent[]> {\n        logger.log(`LocalIndexedDBStoreBackend: loading account data...`);\n        return promiseTry<IMinimalEvent[]>(() => {\n            const txn = this.db!.transaction([\"accountData\"], \"readonly\");\n            const store = txn.objectStore(\"accountData\");\n            return selectQuery(store, undefined, (cursor) => {\n                return cursor.value;\n            }).then((result: IMinimalEvent[]) => {\n                logger.log(`LocalIndexedDBStoreBackend: loaded account data`);\n                return result;\n            });\n        });\n    }\n\n    /**\n     * Load the sync data from the database.\n     * @returns An object with \"roomsData\" and \"nextBatch\" keys.\n     */\n    private loadSyncData(): Promise<ISyncData> {\n        logger.log(`LocalIndexedDBStoreBackend: loading sync data...`);\n        return promiseTry<ISyncData>(() => {\n            const txn = this.db!.transaction([\"sync\"], \"readonly\");\n            const store = txn.objectStore(\"sync\");\n            return selectQuery(store, undefined, (cursor) => {\n                return cursor.value;\n            }).then((results: ISyncData[]) => {\n                logger.log(`LocalIndexedDBStoreBackend: loaded sync data`);\n                if (results.length > 1) {\n                    logger.warn(\"loadSyncData: More than 1 sync row found.\");\n                }\n                return results.length > 0 ? results[0] : ({} as ISyncData);\n            });\n        });\n    }\n\n    public getClientOptions(): Promise<IStoredClientOpts | undefined> {\n        return Promise.resolve().then(() => {\n            const txn = this.db!.transaction([\"client_options\"], \"readonly\");\n            const store = txn.objectStore(\"client_options\");\n            return selectQuery(store, undefined, (cursor) => {\n                return cursor.value?.options;\n            }).then((results) => results[0]);\n        });\n    }\n\n    public async storeClientOptions(options: IStoredClientOpts): Promise<void> {\n        const txn = this.db!.transaction([\"client_options\"], \"readwrite\");\n        const store = txn.objectStore(\"client_options\");\n        store.put({\n            clobber: \"-\", // constant key so will always clobber\n            options: options,\n        }); // put == UPSERT\n        await txnAsPromise(txn);\n    }\n\n    public async saveToDeviceBatches(batches: ToDeviceBatchWithTxnId[]): Promise<void> {\n        const txn = this.db!.transaction([\"to_device_queue\"], \"readwrite\");\n        const store = txn.objectStore(\"to_device_queue\");\n        for (const batch of batches) {\n            store.add(batch);\n        }\n        await txnAsPromise(txn);\n    }\n\n    public async getOldestToDeviceBatch(): Promise<IndexedToDeviceBatch | null> {\n        const txn = this.db!.transaction([\"to_device_queue\"], \"readonly\");\n        const store = txn.objectStore(\"to_device_queue\");\n        const cursor = await reqAsCursorPromise(store.openCursor());\n        if (!cursor) return null;\n\n        const resultBatch = cursor.value as ToDeviceBatchWithTxnId;\n\n        return {\n            id: cursor.key as number,\n            txnId: resultBatch.txnId,\n            eventType: resultBatch.eventType,\n            batch: resultBatch.batch,\n        };\n    }\n\n    public async removeToDeviceBatch(id: number): Promise<void> {\n        const txn = this.db!.transaction([\"to_device_queue\"], \"readwrite\");\n        const store = txn.objectStore(\"to_device_queue\");\n        store.delete(id);\n        await txnAsPromise(txn);\n    }\n\n    /*\n     * Close the database\n     */\n    public async destroy(): Promise<void> {\n        this.db?.close();\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAAkDA,eAAe,QAAQ,wBAAwB;AACjG,SAASC,QAAQ,EAAEC,UAAU,QAAQ,aAAa;AAClD,SAASC,MAAM,IAAIC,SAAS,QAAQ,yBAAyB;AAC7D,SAASC,MAAM,QAAQ,cAAc;AAOrC,IAAMC,aAA4B,GAAG,CAChCC,EAAE,IAAW;EACV;EACAA,EAAE,CAACC,iBAAiB,CAAC,OAAO,EAAE;IAAEC,OAAO,EAAE,CAAC,QAAQ;EAAE,CAAC,CAAC;;EAEtD;EACA;EACAF,EAAE,CAACC,iBAAiB,CAAC,aAAa,EAAE;IAAEC,OAAO,EAAE,CAAC,MAAM;EAAE,CAAC,CAAC;;EAE1D;EACAF,EAAE,CAACC,iBAAiB,CAAC,MAAM,EAAE;IAAEC,OAAO,EAAE,CAAC,SAAS;EAAE,CAAC,CAAC;AAC1D,CAAC,EACAF,EAAE,IAAW;EACV,IAAMG,eAAe,GAAGH,EAAE,CAACC,iBAAiB,CAAC,uBAAuB,EAAE;IAClEC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW;EACpC,CAAC,CAAC;EACFC,eAAe,CAACC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC;AAClD,CAAC,EACAJ,EAAE,IAAW;EACVA,EAAE,CAACC,iBAAiB,CAAC,gBAAgB,EAAE;IAAEC,OAAO,EAAE,CAAC,SAAS;EAAE,CAAC,CAAC;AACpE,CAAC,EACAF,EAAE,IAAW;EACVA,EAAE,CAACC,iBAAiB,CAAC,iBAAiB,EAAE;IAAEI,aAAa,EAAE;EAAK,CAAC,CAAC;AACpE;AACA;AAAA,CACH;AACD,IAAMC,OAAO,GAAGP,aAAa,CAACQ,MAAM;;AAEpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,WAAWA,CAChBC,KAAqB,EACrBC,QAA+C,EAC/CC,YAA+C,EACnC;EACZ,IAAMC,KAAK,GAAGH,KAAK,CAACI,UAAU,CAACH,QAAQ,CAAC;EACxC,OAAO,IAAII,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpC,IAAMC,OAAY,GAAG,EAAE;IACvBL,KAAK,CAACM,OAAO,GAAG,MAAY;MAAA,IAAAC,YAAA;MACxBH,MAAM,CAAC,IAAII,KAAK,CAAC,gBAAgB,KAAAD,YAAA,GAAGP,KAAK,CAACS,KAAK,cAAAF,YAAA,uBAAXA,YAAA,CAAaG,IAAI,EAAC,CAAC;IAC3D,CAAC;IACD;IACAV,KAAK,CAACW,SAAS,GAAG,MAAY;MAC1B,IAAMC,MAAM,GAAGZ,KAAK,CAACa,MAAM;MAC3B,IAAI,CAACD,MAAM,EAAE;QACTT,OAAO,CAACE,OAAO,CAAC;QAChB,OAAO,CAAC;MACZ;MACAA,OAAO,CAACS,IAAI,CAACf,YAAY,CAACa,MAAM,CAAC,CAAC;MAClCA,MAAM,CAACG,QAAQ,CAAC,CAAC;IACrB,CAAC;EACL,CAAC,CAAC;AACN;AAEA,SAASC,YAAYA,CAACC,GAAmB,EAAkB;EACvD,OAAO,IAAIf,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpCa,GAAG,CAACC,UAAU,GAAG,UAAUC,KAAK,EAAQ;MACpChB,OAAO,CAACgB,KAAK,CAAC;IAClB,CAAC;IACDF,GAAG,CAACX,OAAO,GAAG,YAAkB;MAC5BF,MAAM,CAACa,GAAG,CAACR,KAAK,CAAC;IACrB,CAAC;EACL,CAAC,CAAC;AACN;AAEA,SAASW,iBAAiBA,CAACC,GAAe,EAAkB;EACxD,OAAO,IAAInB,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpCiB,GAAG,CAACV,SAAS,GAAG,UAAUQ,KAAK,EAAQ;MACnChB,OAAO,CAACgB,KAAK,CAAC;IAClB,CAAC;IACDE,GAAG,CAACf,OAAO,GAAG,YAAkB;MAC5BF,MAAM,CAACiB,GAAG,CAACZ,KAAK,CAAC;IACrB,CAAC;EACL,CAAC,CAAC;AACN;AAEA,SAASa,YAAYA,CAACD,GAAe,EAAuB;EACxD,OAAO,IAAInB,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACpCiB,GAAG,CAACV,SAAS,GAAG,MAAYR,OAAO,CAACkB,GAAG,CAAC;IACxCA,GAAG,CAACf,OAAO,GAAIiB,GAAG,IAAWnB,MAAM,CAACmB,GAAG,CAAC;EAC5C,CAAC,CAAC;AACN;AAEA,SAASC,kBAAkBA,CAAIH,GAAkB,EAAc;EAC3D,OAAOD,iBAAiB,CAACC,GAAG,CAAC,CAACI,IAAI,CAAEN,KAAK,IAAKE,GAAG,CAACR,MAAM,CAAC;AAC7D;AAEA,OAAO,MAAMa,0BAA0B,CAA8B;EACjE,OAAc1C,MAAMA,CAAC2C,SAAqB,EAAEC,MAAc,EAAoB;IAC1EA,MAAM,GAAG,gBAAgB,IAAIA,MAAM,IAAI,SAAS,CAAC;IACjD,OAAO3C,SAAS,CAAC0C,SAAS,EAAEC,MAAM,CAAC;EACvC;EAUA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWC,WAAWA,CACGF,SAAqB,EAExC;IAAA,IADEC,MAAM,GAAAE,SAAA,CAAAnC,MAAA,QAAAmC,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,SAAS;IAAA,KADDH,SAAqB,GAArBA,SAAqB;IAAAK,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA,uBAhBnB,IAAI;IAAAA,eAAA,0BACD,KAAK;IAAAA,eAAA;IAAAA,eAAA,kCAEgB,EAAE;IAgB7C,IAAI,CAACJ,MAAM,GAAG,gBAAgB,GAAGA,MAAM;IACvC,IAAI,CAACK,eAAe,GAAG,IAAIpD,eAAe,CAAC,CAAC;EAChD;;EAEA;AACJ;AACA;AACA;AACA;EACWqD,OAAOA,CAACC,OAAoB,EAAiB;IAAA,IAAAC,KAAA;IAChD,IAAI,CAAC,IAAI,CAACC,YAAY,EAAE;MACpBnD,MAAM,CAACoD,GAAG,sEAAsE,CAAC;MACjF,OAAOpC,OAAO,CAACC,OAAO,CAAC,CAAC;IAC5B;IAEA,IAAI,CAACkC,YAAY,GAAG,KAAK;IAEzBnD,MAAM,CAACoD,GAAG,oDAAoD,CAAC;IAC/D,IAAMjB,GAAG,GAAG,IAAI,CAACM,SAAS,CAACY,IAAI,CAAC,IAAI,CAACX,MAAM,EAAElC,OAAO,CAAC;IACrD2B,GAAG,CAACmB,eAAe,GAAIC,EAAE,IAAW;MAChC,IAAMrD,EAAE,GAAGiC,GAAG,CAACR,MAAM;MACrB,IAAM6B,UAAU,GAAGD,EAAE,CAACC,UAAU;MAChCxD,MAAM,CAACoD,GAAG,uDAAAK,MAAA,CAAuDD,UAAU,CAAE,CAAC;MAC9E,IAAIA,UAAU,GAAG,CAAC,EAAE;QAChB;QACA,IAAI,CAACE,eAAe,GAAG,IAAI;MAC/B;MACAzD,aAAa,CAAC0D,OAAO,CAAC,CAACC,SAAS,EAAEC,KAAK,KAAK;QACxC,IAAIL,UAAU,IAAIK,KAAK,EAAED,SAAS,CAAC1D,EAAE,CAAC;MAC1C,CAAC,CAAC;IACN,CAAC;IAEDiC,GAAG,CAAC2B,SAAS,GAAG,MAAY;MACxB9D,MAAM,CAACoD,GAAG,yEAAyE,CAAC;IACxF,CAAC;IAEDpD,MAAM,CAACoD,GAAG,6DAA6D,CAAC;IACxE,OAAOlB,iBAAiB,CAACC,GAAG,CAAC,CAACI,IAAI,cAAAwB,iBAAA,CAAC,aAAY;MAC3C/D,MAAM,CAACoD,GAAG,gDAAgD,CAAC;MAC3DF,KAAI,CAAChD,EAAE,GAAGiC,GAAG,CAACR,MAAM;;MAEpB;MACA;MACAuB,KAAI,CAAChD,EAAE,CAAC8D,eAAe,GAAG,MAAY;QAAA,IAAAC,QAAA;QAClC,CAAAA,QAAA,GAAAf,KAAI,CAAChD,EAAE,cAAA+D,QAAA,eAAPA,QAAA,CAASC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClBhB,KAAI,CAACC,YAAY,GAAG,IAAI;QACxBD,KAAI,CAAChD,EAAE,GAAG2C,SAAS;MACvB,CAAC;MACDK,KAAI,CAAChD,EAAE,CAACiE,OAAO,GAAG,MAAY;QAC1BjB,KAAI,CAACC,YAAY,GAAG,IAAI;QACxBD,KAAI,CAAChD,EAAE,GAAG2C,SAAS;QACnBI,OAAO,aAAPA,OAAO,eAAPA,OAAO,CAAG,CAAC;MACf,CAAC;MAED,MAAMC,KAAI,CAACkB,IAAI,CAAC,CAAC;IACrB,CAAC,EAAC;EACN;;EAEA;EACOC,cAAcA,CAAA,EAAqB;IACtC,OAAOrD,OAAO,CAACC,OAAO,CAAC,IAAI,CAACyC,eAAe,CAAC;EAChD;;EAEA;AACJ;AACA;AACA;EACYU,IAAIA,CAAA,EAAqB;IAC7B,OAAOpD,OAAO,CAACsD,GAAG,CAAC,CAAC,IAAI,CAACC,eAAe,CAAC,CAAC,EAAE,IAAI,CAACC,YAAY,CAAC,CAAC,CAAC,CAAC,CAACjC,IAAI,CAACkC,KAAA,IAA6B;MAAA,IAA5B,CAACC,WAAW,EAAEC,QAAQ,CAAC,GAAAF,KAAA;MAC3FzE,MAAM,CAACoD,GAAG,kDAAkD,CAAC;MAC7D,IAAI,CAACL,eAAe,CAAC6B,UAAU,CAC3B;QACIC,UAAU,EAAEF,QAAQ,CAACG,SAAS;QAC9BC,KAAK,EAAEJ,QAAQ,CAACK,SAAS;QACzBC,YAAY,EAAE;UACVC,MAAM,EAAER;QACZ;MACJ,CAAC,EACD,IACJ,CAAC;IACL,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWS,mBAAmBA,CAACC,MAAc,EAA2C;IAChF,OAAO,IAAIpE,OAAO,CAAiC,CAACC,OAAO,EAAEC,MAAM,KAAK;MACpE,IAAMmE,EAAE,GAAG,IAAI,CAACnF,EAAE,CAAEoF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,UAAU,CAAC;MACtE,IAAM3E,KAAK,GAAG0E,EAAE,CAACE,WAAW,CAAC,uBAAuB,CAAC;MACrD,IAAMC,SAAS,GAAG7E,KAAK,CAACkD,KAAK,CAAC,MAAM,CAAC;MACrC,IAAM4B,KAAK,GAAGC,WAAW,CAACC,IAAI,CAACP,MAAM,CAAC;MACtC,IAAMQ,OAAO,GAAGJ,SAAS,CAACzE,UAAU,CAAC0E,KAAK,CAAC;MAE3C,IAAMI,gBAAyC,GAAG,EAAE;MACpD;MACA;MACA;MACA;MACA;MACA,IAAIC,UAAU,GAAG,KAAK;MAEtBF,OAAO,CAACnE,SAAS,GAAG,MAAY;QAC5B,IAAMC,MAAM,GAAGkE,OAAO,CAACjE,MAAM;QAC7B,IAAI,CAACD,MAAM,EAAE;UACT;UACA,IAAI,CAACmE,gBAAgB,CAACpF,MAAM,IAAI,CAACqF,UAAU,EAAE;YACzC,OAAO7E,OAAO,CAAC,IAAI,CAAC;UACxB;UACA,OAAOA,OAAO,CAAC4E,gBAAgB,CAAC;QACpC;QACA,IAAME,MAAM,GAAGrE,MAAM,CAACsE,KAAK;QAC3B,IAAID,MAAM,CAACE,WAAW,EAAE;UACpBH,UAAU,GAAG,IAAI;QACrB,CAAC,MAAM;UACHD,gBAAgB,CAACjE,IAAI,CAACmE,MAAM,CAAC;QACjC;QACArE,MAAM,CAACG,QAAQ,CAAC,CAAC;MACrB,CAAC;MACD+D,OAAO,CAACxE,OAAO,GAAIiB,GAAG,IAAW;QAC7BnB,MAAM,CAACmB,GAAG,CAAC;MACf,CAAC;IACL,CAAC,CAAC,CAACE,IAAI,CAAE2C,MAAM,IAAK;MAChBlF,MAAM,CAACoD,GAAG,YAAAK,MAAA,CAAYyB,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEzE,MAAM,8CAAAgD,MAAA,CAA2C2B,MAAM,SAAM,CAAC;MAC5F,OAAOF,MAAM;IACjB,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBgB,mBAAmBA,CAACd,MAAc,EAAES,gBAAyC,EAAiB;IAAA,IAAAM,MAAA;IAAA,OAAApC,iBAAA;MACvG/D,MAAM,CAACoD,GAAG,CAAC,8BAAAK,MAAA,CAA8BoC,gBAAgB,CAACpF,MAAM,oBAAAgD,MAAA,CAAqB2B,MAAM,CAAE,CAAC;MAC9F,IAAMC,EAAE,GAAGc,MAAI,CAACjG,EAAE,CAAEoF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,WAAW,CAAC;MACvE,IAAM3E,KAAK,GAAG0E,EAAE,CAACE,WAAW,CAAC,uBAAuB,CAAC;MACrDM,gBAAgB,CAAClC,OAAO,CAAEyC,CAAC,IAAK;QAC5BzF,KAAK,CAAC0F,GAAG,CAACD,CAAC,CAAC;MAChB,CAAC,CAAC;MACF;MACA;MACA;MACA;MACA;MACA,IAAME,YAAY,GAAG;QACjBC,OAAO,EAAEnB,MAAM;QACfa,WAAW,EAAE,IAAI;QACjBO,SAAS,EAAE;MACf,CAAC;MACD7F,KAAK,CAAC0F,GAAG,CAACC,YAAY,CAAC;MACvB,MAAMxE,YAAY,CAACuD,EAAE,CAAC;MACtBrF,MAAM,CAACoD,GAAG,iCAAAK,MAAA,CAAiC2B,MAAM,MAAG,CAAC;IAAC;EAC1D;EAEaqB,qBAAqBA,CAACrB,MAAc,EAAiB;IAAA,IAAAsB,MAAA;IAAA,OAAA3C,iBAAA;MAC9D;MACA;MACA;MACA;MACA;MACA;MACA,IAAM4C,MAAM,GAAGD,MAAI,CAACxG,EAAE,CAAEoF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,UAAU,CAAC;MAC1E,IAAM3E,KAAK,GAAGgG,MAAM,CAACpB,WAAW,CAAC,uBAAuB,CAAC;MACzD,IAAMC,SAAS,GAAG7E,KAAK,CAACkD,KAAK,CAAC,MAAM,CAAC;MACrC,IAAM+C,SAAS,GAAGlB,WAAW,CAACC,IAAI,CAACP,MAAM,CAAC;MAE1C,IAAMyB,eAAe,GAAGvE,kBAAkB,CAACkD,SAAS,CAACsB,aAAa,CAACF,SAAS,EAAE,MAAM,CAAC,CAAC,CAACrE,IAAI,CACtFb,MAAM,IAAK,CAAgBA,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEqF,UAAU,EAAE,CAAC,CACrD,CAAC;MACD,IAAMC,eAAe,GAAG1E,kBAAkB,CAACkD,SAAS,CAACsB,aAAa,CAACF,SAAS,EAAE,MAAM,CAAC,CAAC,CAACrE,IAAI,CACtFb,MAAM,IAAK,CAAgBA,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEqF,UAAU,EAAE,CAAC,CACrD,CAAC;MACD,IAAM,CAACE,WAAW,EAAEC,WAAW,CAAC,SAASlG,OAAO,CAACsD,GAAG,CAAC,CAACuC,eAAe,EAAEG,eAAe,CAAC,CAAC;MAExF,IAAMG,OAAO,GAAGT,MAAI,CAACxG,EAAE,CAAEoF,WAAW,CAAC,CAAC,uBAAuB,CAAC,EAAE,WAAW,CAAC;MAC5E,IAAM8B,UAAU,GAAGD,OAAO,CAAC5B,WAAW,CAAC,uBAAuB,CAAC;MAC/D,IAAM8B,eAAe,GAAG3B,WAAW,CAAC4B,KAAK,CAAC,CAAClC,MAAM,EAAE6B,WAAW,CAAC,EAAE,CAAC7B,MAAM,EAAE8B,WAAW,CAAC,CAAC;MAEvFlH,MAAM,CAACoD,GAAG,wDAAAK,MAAA,CACiD2B,MAAM,wBAC7D,CAACA,MAAM,EAAE6B,WAAW,CAAC,EACrB,CAAC7B,MAAM,EAAE8B,WAAW,CACxB,CAAC;MACD,MAAM9E,YAAY,CAACgF,UAAU,CAACG,MAAM,CAACF,eAAe,CAAC,CAAC;IAAC;EAC3D;;EAEA;AACJ;AACA;AACA;AACA;EACWG,aAAaA,CAAA,EAAkB;IAClC,OAAO,IAAIxG,OAAO,CAAEC,OAAO,IAAK;MAAA,IAAAwG,SAAA;MAC5BzH,MAAM,CAACoD,GAAG,iCAAAK,MAAA,CAAiC,IAAI,CAACf,MAAM,CAAE,CAAC;;MAEzD;MACA,CAAA+E,SAAA,OAAI,CAACvH,EAAE,cAAAuH,SAAA,eAAPA,SAAA,CAASvD,KAAK,CAAC,CAAC;MAEhB,IAAM/B,GAAG,GAAG,IAAI,CAACM,SAAS,CAACiF,cAAc,CAAC,IAAI,CAAChF,MAAM,CAAC;MAEtDP,GAAG,CAAC2B,SAAS,GAAG,MAAY;QACxB9D,MAAM,CAACoD,GAAG,+BAAAK,MAAA,CAA+B,IAAI,CAACf,MAAM,kCAA+B,CAAC;MACxF,CAAC;MAEDP,GAAG,CAACf,OAAO,GAAG,MAAY;QAAA,IAAAuG,UAAA;QACtB;QACA;QACA;QACA3H,MAAM,CAAC4H,IAAI,6CAAAnE,MAAA,EAAAkE,UAAA,GAA6CxF,GAAG,CAACZ,KAAK,cAAAoG,UAAA,uBAATA,UAAA,CAAWnG,IAAI,CAAE,CAAC;QAC1EP,OAAO,CAAC,CAAC;MACb,CAAC;MAEDkB,GAAG,CAACV,SAAS,GAAG,MAAY;QACxBzB,MAAM,CAACoD,GAAG,gCAAAK,MAAA,CAAgC,IAAI,CAACf,MAAM,CAAE,CAAC;QACxDzB,OAAO,CAAC,CAAC;MACb,CAAC;IACL,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACW4G,YAAYA,CAAA,EAA0C;IAAA,IAAzCC,IAAI,GAAAlF,SAAA,CAAAnC,MAAA,QAAAmC,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,IAAI;IAC3B,IAAMmF,IAAI,GAAG,IAAI,CAAChF,eAAe,CAACiF,OAAO,CAAC,CAAC;IAC3C,IAAI,CAACD,IAAI,CAACjD,SAAS,EAAE,OAAO9D,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC;IACjD,IAAI6G,IAAI,EAAE;MACN;MACA;MACA,OAAO9G,OAAO,CAACC,OAAO,CAACrB,QAAQ,CAACmI,IAAI,CAAC,CAAC;IAC1C,CAAC,MAAM;MACH,OAAO/G,OAAO,CAACC,OAAO,CAAC8G,IAAI,CAAC;IAChC;EACJ;EAEOE,iBAAiBA,CAAA,EAAoB;IACxC,OAAOjH,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC8B,eAAe,CAACkF,iBAAiB,CAAC,CAAC,CAAC;EACpE;EAEOC,WAAWA,CAACvD,QAAuB,EAAiB;IACvD,OAAO3D,OAAO,CAACC,OAAO,CAAC,CAAC,CAACsB,IAAI,CAAC,MAAM;MAChC,IAAI,CAACQ,eAAe,CAAC6B,UAAU,CAACD,QAAQ,CAAC;IAC7C,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBwD,cAAcA,CAACC,UAAuB,EAAiB;IAAA,IAAAC,MAAA;IAAA,OAAAtE,iBAAA;MAChE,IAAIsE,MAAI,CAACC,qBAAqB,EAAE;QAC5BtI,MAAM,CAAC4H,IAAI,CAAC,wDAAwD,CAAC;QACrES,MAAI,CAACE,uBAAuB,CAAC3G,IAAI,CAAC,GAAGwG,UAAU,CAAC;QAChD,OAAOC,MAAI,CAACC,qBAAqB;MACrC;MACAF,UAAU,CAACI,OAAO,CAAC,GAAGH,MAAI,CAACE,uBAAuB,CAAC;MACnDF,MAAI,CAACC,qBAAqB,GAAGD,MAAI,CAACI,gBAAgB,CAACL,UAAU,CAAC;MAC9D,OAAOC,MAAI,CAACC,qBAAqB;IAAC;EACtC;EAEcG,gBAAgBA,CAACL,UAAuB,EAAiB;IAAA,IAAAM,MAAA;IAAA,OAAA3E,iBAAA;MACnE,IAAI;QACA,IAAMY,QAAQ,GAAG+D,MAAI,CAAC3F,eAAe,CAACiF,OAAO,CAAC,IAAI,CAAC;QACnD,MAAMhH,OAAO,CAACsD,GAAG,CAAC,CACdoE,MAAI,CAACC,yBAAyB,CAACP,UAAU,CAAC,EAC1CM,MAAI,CAACE,kBAAkB,CAACjE,QAAQ,CAACD,WAAW,CAAC,EAC7CgE,MAAI,CAACG,eAAe,CAAClE,QAAQ,CAACG,SAAS,EAAEH,QAAQ,CAACK,SAAS,CAAC,CAC/D,CAAC;MACN,CAAC,SAAS;QACN0D,MAAI,CAACJ,qBAAqB,GAAGzF,SAAS;MAC1C;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACYgG,eAAeA,CAAC/D,SAAiB,EAAEE,SAAiC,EAAiB;IACzFhF,MAAM,CAACoD,GAAG,CAAC,4BAA4B,EAAE0B,SAAS,CAAC;IACnD,OAAOjF,UAAU,CAAO,MAAM;MAC1B,IAAMkC,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;MACvD,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,MAAM,CAAC;MACrC5E,KAAK,CAAC0F,GAAG,CAAC;QACNyC,OAAO,EAAE,GAAG;QAAE;QACdhE,SAAS;QACTE;MACJ,CAAC,CAAC,CAAC,CAAC;MACJ,OAAOlD,YAAY,CAACC,GAAG,CAAC,CAACQ,IAAI,CAAC,MAAM;QAChCvC,MAAM,CAACoD,GAAG,CAAC,2BAA2B,EAAE0B,SAAS,CAAC;MACtD,CAAC,CAAC;IACN,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACY8D,kBAAkBA,CAAClE,WAA4B,EAAiB;IACpE,OAAO7E,UAAU,CAAO,MAAM;MAC1B,IAAMkC,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC;MAC9D,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,aAAa,CAAC;MAC5C,KAAK,IAAMtD,KAAK,IAAIyC,WAAW,EAAE;QAC7B/D,KAAK,CAAC0F,GAAG,CAACpE,KAAK,CAAC,CAAC,CAAC;MACtB;MACA,OAAOH,YAAY,CAACC,GAAG,CAAC,CAACQ,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACYoG,yBAAyBA,CAACI,MAAmB,EAAiB;IAClE,OAAOlJ,UAAU,CAAO,MAAM;MAC1B,IAAMkC,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;MACxD,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,OAAO,CAAC;MACtC,KAAK,IAAMyD,KAAK,IAAID,MAAM,EAAE;QACxBpI,KAAK,CAAC0F,GAAG,CAAC;UACN4C,MAAM,EAAED,KAAK,CAAC,CAAC,CAAC;UAChB/G,KAAK,EAAE+G,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;MACR;MACA,OAAOlH,YAAY,CAACC,GAAG,CAAC,CAACQ,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW2G,qBAAqBA,CAAA,EAAyB;IACjD,OAAOrJ,UAAU,CAAc,MAAM;MACjC,IAAMkC,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;MACvD,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,OAAO,CAAC;MACtC,OAAO7E,WAAW,CAACC,KAAK,EAAEkC,SAAS,EAAGnB,MAAM,IAAK;QAC7C,OAAO,CAACA,MAAM,CAACsE,KAAK,CAACiD,MAAM,EAAEvH,MAAM,CAACsE,KAAK,CAAC/D,KAAK,CAAC;MACpD,CAAC,CAAC;IACN,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACYsC,eAAeA,CAAA,EAA6B;IAChDvE,MAAM,CAACoD,GAAG,sDAAsD,CAAC;IACjE,OAAOvD,UAAU,CAAkB,MAAM;MACrC,IAAMkC,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;MAC7D,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,aAAa,CAAC;MAC5C,OAAO7E,WAAW,CAACC,KAAK,EAAEkC,SAAS,EAAGnB,MAAM,IAAK;QAC7C,OAAOA,MAAM,CAACsE,KAAK;MACvB,CAAC,CAAC,CAACzD,IAAI,CAAEZ,MAAuB,IAAK;QACjC3B,MAAM,CAACoD,GAAG,kDAAkD,CAAC;QAC7D,OAAOzB,MAAM;MACjB,CAAC,CAAC;IACN,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACY6C,YAAYA,CAAA,EAAuB;IACvCxE,MAAM,CAACoD,GAAG,mDAAmD,CAAC;IAC9D,OAAOvD,UAAU,CAAY,MAAM;MAC/B,IAAMkC,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;MACtD,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,MAAM,CAAC;MACrC,OAAO7E,WAAW,CAACC,KAAK,EAAEkC,SAAS,EAAGnB,MAAM,IAAK;QAC7C,OAAOA,MAAM,CAACsE,KAAK;MACvB,CAAC,CAAC,CAACzD,IAAI,CAAEpB,OAAoB,IAAK;QAC9BnB,MAAM,CAACoD,GAAG,+CAA+C,CAAC;QAC1D,IAAIjC,OAAO,CAACV,MAAM,GAAG,CAAC,EAAE;UACpBT,MAAM,CAAC4H,IAAI,CAAC,2CAA2C,CAAC;QAC5D;QACA,OAAOzG,OAAO,CAACV,MAAM,GAAG,CAAC,GAAGU,OAAO,CAAC,CAAC,CAAC,GAAI,CAAC,CAAe;MAC9D,CAAC,CAAC;IACN,CAAC,CAAC;EACN;EAEOgI,gBAAgBA,CAAA,EAA2C;IAC9D,OAAOnI,OAAO,CAACC,OAAO,CAAC,CAAC,CAACsB,IAAI,CAAC,MAAM;MAChC,IAAMR,GAAG,GAAG,IAAI,CAAC7B,EAAE,CAAEoF,WAAW,CAAC,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC;MAChE,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,gBAAgB,CAAC;MAC/C,OAAO7E,WAAW,CAACC,KAAK,EAAEkC,SAAS,EAAGnB,MAAM,IAAK;QAAA,IAAA0H,aAAA;QAC7C,QAAAA,aAAA,GAAO1H,MAAM,CAACsE,KAAK,cAAAoD,aAAA,uBAAZA,aAAA,CAAcC,OAAO;MAChC,CAAC,CAAC,CAAC9G,IAAI,CAAEpB,OAAO,IAAKA,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;EACN;EAEamI,kBAAkBA,CAACD,OAA0B,EAAiB;IAAA,IAAAE,MAAA;IAAA,OAAAxF,iBAAA;MACvE,IAAMhC,GAAG,GAAGwH,MAAI,CAACrJ,EAAE,CAAEoF,WAAW,CAAC,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC;MACjE,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,gBAAgB,CAAC;MAC/C5E,KAAK,CAAC0F,GAAG,CAAC;QACNyC,OAAO,EAAE,GAAG;QAAE;QACdO,OAAO,EAAEA;MACb,CAAC,CAAC,CAAC,CAAC;MACJ,MAAMvH,YAAY,CAACC,GAAG,CAAC;IAAC;EAC5B;EAEayH,mBAAmBA,CAACC,OAAiC,EAAiB;IAAA,IAAAC,MAAA;IAAA,OAAA3F,iBAAA;MAC/E,IAAMhC,GAAG,GAAG2H,MAAI,CAACxJ,EAAE,CAAEoF,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;MAClE,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,iBAAiB,CAAC;MAChD,KAAK,IAAMoE,KAAK,IAAIF,OAAO,EAAE;QACzB9I,KAAK,CAACiJ,GAAG,CAACD,KAAK,CAAC;MACpB;MACA,MAAM7H,YAAY,CAACC,GAAG,CAAC;IAAC;EAC5B;EAEa8H,sBAAsBA,CAAA,EAAyC;IAAA,IAAAC,MAAA;IAAA,OAAA/F,iBAAA;MACxE,IAAMhC,GAAG,GAAG+H,MAAI,CAAC5J,EAAE,CAAEoF,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,UAAU,CAAC;MACjE,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,iBAAiB,CAAC;MAChD,IAAM7D,MAAM,SAASY,kBAAkB,CAAC3B,KAAK,CAACI,UAAU,CAAC,CAAC,CAAC;MAC3D,IAAI,CAACW,MAAM,EAAE,OAAO,IAAI;MAExB,IAAMqI,WAAW,GAAGrI,MAAM,CAACsE,KAA+B;MAE1D,OAAO;QACHgE,EAAE,EAAEtI,MAAM,CAACuI,GAAa;QACxBC,KAAK,EAAEH,WAAW,CAACG,KAAK;QACxBC,SAAS,EAAEJ,WAAW,CAACI,SAAS;QAChCR,KAAK,EAAEI,WAAW,CAACJ;MACvB,CAAC;IAAC;EACN;EAEaS,mBAAmBA,CAACJ,EAAU,EAAiB;IAAA,IAAAK,MAAA;IAAA,OAAAtG,iBAAA;MACxD,IAAMhC,GAAG,GAAGsI,MAAI,CAACnK,EAAE,CAAEoF,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;MAClE,IAAM3E,KAAK,GAAGoB,GAAG,CAACwD,WAAW,CAAC,iBAAiB,CAAC;MAChD5E,KAAK,CAAC4G,MAAM,CAACyC,EAAE,CAAC;MAChB,MAAMlI,YAAY,CAACC,GAAG,CAAC;IAAC;EAC5B;;EAEA;AACJ;AACA;EACiBuI,OAAOA,CAAA,EAAkB;IAAA,IAAAC,OAAA;IAAA,OAAAxG,iBAAA;MAAA,IAAAyG,UAAA;MAClC,CAAAA,UAAA,GAAAD,OAAI,CAACrK,EAAE,cAAAsK,UAAA,eAAPA,UAAA,CAAStG,KAAK,CAAC,CAAC;IAAC;EACrB;AACJ","ignoreList":[]}

package/lib/testing.d.ts

@@ -7,6 +7,7 @@
  */
 import { IContent, IUnsigned, MatrixEvent } from "./models/event.ts";
 import { EventType } from "./@types/event.ts";
+import { OidcClientConfig, ValidatedAuthMetadata } from "./oidc/index.ts";
 /**
  * Create a {@link MatrixEvent}.
  *
@@ -30,4 +31,20 @@ export declare function mkMatrixEvent(opts: {
     /** Optional `unsigned` data for the event. */
     unsigned?: IUnsigned;
 }): MatrixEvent;
+/**
+ * Makes a valid OidcClientConfig with minimum valid values
+ * @param issuer used as the base for all other urls
+ * @param additionalGrantTypes to add to the default grant types
+ * @returns OidcClientConfig
+ * @experimental
+ */
+export declare const makeDelegatedAuthConfig: (issuer?: string, additionalGrantTypes?: string[]) => OidcClientConfig;
+/**
+ * Useful for mocking <issuer>/.well-known/openid-configuration
+ * @param issuer used as the base for all other urls
+ * @param additionalGrantTypes to add to the default grant types
+ * @returns ValidatedAuthMetadata
+ * @experimental
+ */
+export declare const mockOpenIdConfiguration: (issuer?: string, additionalGrantTypes?: string[]) => ValidatedAuthMetadata;
 //# sourceMappingURL=testing.d.ts.map

package/lib/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAgBA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAU,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAChC,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IAEf,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IAEf,6BAA6B;IAC7B,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IAEzB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,iGAAiG;IACjG,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ,wGAAwG;IACxG,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,OAAO,EAAE,QAAQ,CAAC;IAElB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,SAAS,CAAC;CACxB,GAAG,WAAW,CAyBd"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAgBA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAU,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAChC,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IAEf,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IAEf,6BAA6B;IAC7B,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IAEzB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,iGAAiG;IACjG,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ,wGAAwG;IACxG,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,OAAO,EAAE,QAAQ,CAAC;IAElB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,SAAS,CAAC;CACxB,GAAG,WAAW,CAyBd;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,2CAEV,MAAM,EAAE,KAC/B,gBAMF,CAAC;AACF;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,2CAEV,MAAM,EAAE,KAC/B,qBAWD,CAAC"}

package/lib/testing.js

@@ -1,3 +1,6 @@
+import _defineProperty from "@babel/runtime/helpers/defineProperty";
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 /*
 Copyright 2024 The Matrix.org Foundation C.I.C.
 
@@ -54,4 +57,43 @@ export function mkMatrixEvent(opts) {
   };
   return mxEvent;
 }
+
+/**
+ * Makes a valid OidcClientConfig with minimum valid values
+ * @param issuer used as the base for all other urls
+ * @param additionalGrantTypes to add to the default grant types
+ * @returns OidcClientConfig
+ * @experimental
+ */
+export var makeDelegatedAuthConfig = function makeDelegatedAuthConfig() {
+  var issuer = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "https://auth.org/";
+  var additionalGrantTypes = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : [];
+  var metadata = mockOpenIdConfiguration(issuer, additionalGrantTypes);
+  return _objectSpread(_objectSpread({}, metadata), {}, {
+    signingKeys: null
+  });
+};
+/**
+ * Useful for mocking <issuer>/.well-known/openid-configuration
+ * @param issuer used as the base for all other urls
+ * @param additionalGrantTypes to add to the default grant types
+ * @returns ValidatedAuthMetadata
+ * @experimental
+ */
+export var mockOpenIdConfiguration = function mockOpenIdConfiguration() {
+  var issuer = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "https://auth.org/";
+  var additionalGrantTypes = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : [];
+  return {
+    issuer,
+    revocation_endpoint: issuer + "revoke",
+    token_endpoint: issuer + "token",
+    authorization_endpoint: issuer + "auth",
+    registration_endpoint: issuer + "registration",
+    device_authorization_endpoint: issuer + "device",
+    jwks_uri: issuer + "jwks",
+    response_types_supported: ["code"],
+    grant_types_supported: ["authorization_code", "refresh_token", ...additionalGrantTypes],
+    code_challenge_methods_supported: ["S256"]
+  };
+};
 //# sourceMappingURL=testing.js.map