eufy-security-client 4.0.0 → 4.1.0-dev.37

package/build/http/megaApi.js

@@ -0,0 +1,513 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MegaHTTPApi = exports.megaLoginHash = exports.MEGA_SERVER_STATIC_PUBKEY = void 0;
+const crypto_1 = require("crypto");
+const md5_1 = __importDefault(require("crypto-js/md5"));
+const logging_1 = require("../logging");
+const utils_1 = require("./utils");
+const types_1 = require("./types");
+const megaCrypto_1 = require("./megaCrypto");
+/**
+ * Eufy "eufy_mega" v6 backend client.
+ *
+ * Talks to the new per-service `*.eufy.com` microservices (behind APISIX) that the
+ * official app 6.0.50+ uses. Each cluster (us-pr, eu-pr, …) requires its own
+ * key/exchange handshake → per-cluster {@link MegaIdentity} (keyIdent + sharedKey).
+ * Bodies are ECDH-encrypted (`X-Encryption-Info: algo_ecdh`) and every request is
+ * signed (`X-Signature`).
+ *
+ * This is intentionally a SEPARATE class from HTTPApi: the legacy backend still
+ * works for not-yet-migrated devices, so we don't want to risk that path.
+ *
+ * Heavily rate-limited (1 request / ~3s) — the Eufy WAF rate-limits aggressive probing.
+ */
+/** Per-cluster server static public key (uncompressed hex) for the ECIES bootstrap. */
+exports.MEGA_SERVER_STATIC_PUBKEY = "04ebc77a23c7191f8c97fb2a7676710f64ddadfe5305fa80c8855476b024c6ad3d8c18d4be9d720c5a578167f899e0818d3a19de2e804407034b4a88cfdb7ae995";
+/** Login password ECDH server key — same constant the legacy HTTPApi uses. */
+const LOGIN_SERVER_PUBLIC_KEY = "04c5c00c4f8d1197cc7c3167c52bf7acb054d722f0ef08dcd7e0883236e0d72a3868d9750cb47fa4619248f3d83f0f662671dadc6e2d31c2f41db0161651c7c076";
+/**
+ * Salted change-detection hash for the persisted session: invalidate the cached mega session when
+ * the credentials change. Salted with the stable device id so a leaked persistent file isn't an
+ * offline-cracking aid the way a bare md5(user:pass) would be.
+ */
+const megaLoginHash = (email, password, openudid) => (0, crypto_1.createHash)("sha256").update(`${openudid}:${email}:${password}`).digest("hex");
+exports.megaLoginHash = megaLoginHash;
+class MegaHTTPApi {
+    ab;
+    osType;
+    appName;
+    appVersion;
+    osVersion;
+    phoneModel;
+    minIntervalMs;
+    got;
+    throttle;
+    /** Resolved domains from estimate_domain (eufy_security, etc). */
+    domains = {};
+    megaDomain = "";
+    /** One identity per cluster host (e.g. app-openapi-eu-pr.eufy.com). */
+    identities = new Map();
+    /** eufy.com auth token (from passport/login on the new backend). */
+    authToken;
+    /** Unix seconds when authToken expires (from login `token_expires_at`). */
+    tokenExpiresAt;
+    userId;
+    constructor(opts) {
+        this.ab = opts.ab.toLowerCase();
+        this.osType = opts.osType ?? "android";
+        this.appName = opts.appName ?? "eufy_mega";
+        this.appVersion = opts.appVersion ?? (this.osType === "android" ? "6.0.51_26722" : "6.0.50_260612140706");
+        this.osVersion = opts.osVersion ?? (this.osType === "android" ? "14" : "26.5.1");
+        this.phoneModel = opts.phoneModel ?? (this.osType === "android" ? "Pixel 8" : "iPhone 17 Pro");
+        if (opts.openudid)
+            this.openudid = opts.openudid;
+        this.minIntervalMs = opts.minRequestIntervalMs ?? 3000;
+    }
+    async init() {
+        const { default: pThrottle } = await import("p-throttle");
+        const { default: got } = await import("got");
+        this.got = got;
+        this.throttle = pThrottle({ limit: 1, interval: this.minIntervalMs });
+    }
+    get gtoken() {
+        return this.userId ? (0, md5_1.default)(this.userId).toString() : undefined;
+    }
+    /** Stable per-install device id (uuid-ish, 32 hex). Restored from a persisted session. */
+    openudid = (0, megaCrypto_1.generateKeyIdent)();
+    /**
+     * Low-level signed/encrypted POST to a v6 host.
+     *
+     * X-Signature covers the ENCRYPTED VALUE (the base64 ciphertext), not the JSON wrapper: for
+     * key/exchange the body is `{"client_public_key":"<b64>"}` but only `<b64>` is signed; for
+     * regular requests the body IS the ciphertext, so signed value == body.
+     *
+     * No got-level retry: the timestamp/nonce/signature are computed once per call and the backend
+     * enforces a replay/timestamp window, so a got retry would resend a frozen signature and be
+     * rejected. Retry above this method (recomputing the signature) if needed.
+     *
+     * @param host    full host (e.g. app-passport-eu-pr.eufy.com)
+     * @param path    request path
+     * @param payload plaintext object (encrypted with the cluster identity sharedKey)
+     * @param identity cluster identity; if omitted, bootstrap mode (presetKey) is used
+     */
+    async signedPost(host, path, payload, identity, bootstrap) {
+        const ts = `${Math.floor(Date.now() / 1000)}`;
+        const nonce = (0, megaCrypto_1.generateKeyIdent)();
+        let body;
+        let signedValue;
+        let signingKey;
+        let keyIdent;
+        if (bootstrap !== undefined) {
+            body = JSON.stringify({ client_public_key: bootstrap.encryptedValue });
+            signedValue = bootstrap.encryptedValue;
+            signingKey = megaCrypto_1.MEGA_PRESET_KEY;
+            keyIdent = bootstrap.keyIdent;
+        }
+        else {
+            if (!identity)
+                throw new Error("signedPost: identity required for non-bootstrap request");
+            const aesKey = (0, megaCrypto_1.sharedKeyToAesKey)(identity.sharedKey);
+            body = (0, megaCrypto_1.megaEncryptBody)(JSON.stringify(payload), aesKey);
+            signedValue = body;
+            signingKey = (0, megaCrypto_1.sharedKeySigningKey)(identity.sharedKey);
+            keyIdent = identity.keyIdent;
+        }
+        const headers = {
+            accept: "application/json",
+            "accept-charset": "UTF-8",
+            "accept-language": `${this.ab}-${this.ab.toUpperCase()},${this.ab};q=0.9`,
+            "app-name": this.appName,
+            "app-version": this.appVersion,
+            app_version: this.appVersion,
+            "os-type": this.osType,
+            os_type: this.osType,
+            "os-version": this.osVersion,
+            os_version: this.osVersion,
+            "model-type": "PHONE",
+            "phone-model": this.phoneModel,
+            phone_model: this.phoneModel,
+            openudid: this.openudid,
+            "test-flag": "false",
+            priority: "u=3, i",
+            "user-agent": "ktor-client",
+            "content-type": "application/json",
+            "x-encryption-info": "algo_ecdh",
+            "x-key-ident": keyIdent,
+            "x-request-ts": ts,
+            "x-request-once": nonce,
+            "x-replay-info": "replay",
+            "x-signature": (0, megaCrypto_1.xSignature)(signingKey, ts, nonce, signedValue),
+            country: this.ab.toUpperCase(),
+            language: this.ab,
+            ab_code: this.ab,
+        };
+        if (this.gtoken)
+            headers.gtoken = this.gtoken;
+        if (this.authToken) {
+            headers["x-auth-token"] = this.authToken;
+            headers.authorization = this.authToken;
+        }
+        logging_1.rootHTTPLogger.debug("MegaApi request", { host, path, osType: this.osType, keyIdent });
+        const send = this.throttle(async () => {
+            return await this.got(`https://${host}${path}`, {
+                method: "POST",
+                headers,
+                body,
+                responseType: "text",
+                throwHttpErrors: false,
+                retry: { limit: 0 },
+            });
+        });
+        const resp = await send();
+        const responseText = resp.body ?? "";
+        let parsed;
+        try {
+            parsed = JSON.parse(responseText);
+        }
+        catch {
+            throw new Error(`${host}${path} → HTTP ${resp.statusCode}, non-JSON body (${responseText.length} bytes)`);
+        }
+        logging_1.rootHTTPLogger.debug("MegaApi response", { host, path, status: resp.statusCode, code: parsed.code });
+        if (parsed.code === types_1.ResponseErrorCode.CODE_NEED_NEGOTIATE_KEY ||
+            parsed.code === types_1.ResponseErrorCode.CODE_SIGNATURE_ERROR) {
+            logging_1.rootHTTPLogger.info("MegaApi identity rejected — evicting cached identities to force re-handshake", {
+                code: parsed.code,
+            });
+            this.identities.clear();
+        }
+        return parsed;
+    }
+    /** Decrypt a v6 response `data` field with a cluster identity sharedKey. */
+    decryptForCluster(identity, dataB64) {
+        return (0, megaCrypto_1.megaDecryptBody)(dataB64, (0, megaCrypto_1.sharedKeyToAesKey)(identity.sharedKey));
+    }
+    /** Resolve the region's mega domain + product domains. Body is cleartext JSON. */
+    async estimateDomain() {
+        const host = `mega-${this.ab === "us" ? "us" : "eu"}-pr.eufy.com`;
+        const send = this.throttle(async () => this.got(`https://${host}/passport/estimate_domain`, {
+            method: "POST",
+            headers: {
+                "app-name": this.appName,
+                "app-version": this.appVersion,
+                "os-type": this.osType,
+                "content-type": "application/json",
+            },
+            json: { ab: this.ab, mode: 1 },
+            responseType: "json",
+            throwHttpErrors: false,
+        }));
+        const resp = await send();
+        const result = resp.body;
+        if (result.code !== 0)
+            throw new Error(`estimate_domain failed: ${result.code} ${result.msg}`);
+        const data = result.data;
+        this.megaDomain = data.domain;
+        this.domains = data.product_domains;
+        logging_1.rootHTTPLogger.info("MegaApi estimate_domain", { megaDomain: this.megaDomain, domains: this.domains });
+        return this.domains;
+    }
+    /**
+     * Perform a key/exchange against a cluster's openapi host and cache the identity.
+     * @param openapiHost e.g. app-openapi-eu-pr.eufy.com
+     */
+    async keyExchange(openapiHost) {
+        const cached = this.identities.get(openapiHost);
+        if (cached)
+            return cached;
+        const { ecdh, clientPublicKeyBody, clientPublicKey, keyIdent } = (0, megaCrypto_1.buildKeyExchange)();
+        const result = await this.signedPost(openapiHost, "/openapi/oauth/key/exchange", undefined, undefined, {
+            keyIdent,
+            encryptedValue: clientPublicKeyBody,
+        });
+        if (result.code !== 0)
+            throw new Error(`key/exchange failed on ${openapiHost}: ${result.code} ${result.msg}`);
+        const serverPubEnc = result.data.server_public_key;
+        const identity = (0, megaCrypto_1.finalizeKeyExchange)(ecdh, serverPubEnc, keyIdent, clientPublicKey);
+        this.identities.set(openapiHost, identity);
+        logging_1.rootHTTPLogger.info("MegaApi key/exchange ok", { openapiHost, keyIdent });
+        return identity;
+    }
+    /**
+     * Region cluster host for a service, e.g. "passport" → app-passport-eu-pr.eufy.com.
+     *
+     * Derived from the `domain` returned by {@link estimateDomain} (the server decides the region,
+     * the client does not guess it) by replacing the `mega` prefix with `app-{service}` — the same
+     * transform the app does in MegaAppDomain.createByMega. Falls back to a us/eu guess only when
+     * estimate_domain has not run yet (e.g. the bootstrap key/exchange before login).
+     */
+    clusterHost(service) {
+        if (this.megaDomain && this.megaDomain.startsWith("mega-")) {
+            return this.megaDomain.replace(/^mega-/, `app-${service}-`);
+        }
+        const region = this.ab === "us" ? "us" : "eu";
+        return `app-${service}-${region}-pr.eufy.com`;
+    }
+    getDomains() {
+        return this.domains;
+    }
+    getIdentity(host) {
+        return this.identities.get(host);
+    }
+    setAuth(authToken, userId) {
+        this.authToken = authToken;
+        this.userId = userId;
+    }
+    /**
+     * Export the full session so a later run can resume WITHOUT a fresh login/2FA.
+     *
+     * Mirrors the legacy HTTPApi's `persistentData`: once authenticated you ARE authenticated —
+     * persist the token + user_id + the per-cluster ECDH identities (keyIdent/sharedKey) + the
+     * stable device id. As long as the token hasn't expired, `restoreSession()` lets every signed
+     * call go straight through (no estimate_domain / key/exchange / login replay).
+     */
+    exportSession(loginHash) {
+        return {
+            ab: this.ab,
+            openudid: this.openudid,
+            login_hash: loginHash,
+            cloud_token: this.authToken,
+            cloud_token_expiration: this.tokenExpiresAt,
+            user_id: this.userId,
+            domains: this.domains,
+            megaDomain: this.megaDomain,
+            identities: Object.fromEntries(this.identities),
+        };
+    }
+    /** Restore a session previously produced by {@link exportSession}. */
+    restoreSession(s) {
+        if (s.openudid)
+            this.openudid = s.openudid;
+        this.authToken = s.cloud_token;
+        this.userId = s.user_id;
+        this.tokenExpiresAt = s.cloud_token_expiration;
+        this.domains = s.domains ?? {};
+        this.megaDomain = s.megaDomain ?? "";
+        this.identities = new Map(Object.entries(s.identities ?? {}));
+    }
+    /**
+     * True if we hold a non-expired auth token (60s safety margin) → no login replay needed.
+     * An unknown expiry is treated as invalid (forces a relogin) rather than valid-forever.
+     */
+    hasValidSession() {
+        if (!this.authToken || !this.userId)
+            return false;
+        if (!this.tokenExpiresAt)
+            return false;
+        if (Date.now() / 1000 >= this.tokenExpiresAt - 60)
+            return false;
+        return true;
+    }
+    /** Generic signed/encrypted call once an identity exists for the host's cluster. */
+    async call(host, path, payload) {
+        const openapiHost = this.clusterHost("openapi");
+        const identity = await this.keyExchange(openapiHost);
+        return this.signedPost(host, path, payload, identity);
+    }
+    /** {@link call} + decrypt the `data` field. Throws on non-zero code. */
+    async callDecrypted(service, path, payload = {}) {
+        const openapiHost = this.clusterHost("openapi");
+        const identity = await this.keyExchange(openapiHost);
+        const result = await this.signedPost(this.clusterHost(service), path, payload, identity);
+        if (result.code !== 0)
+            throw new Error(`${path} failed: ${result.code} ${result.msg}`);
+        if (typeof result.data !== "string") {
+            logging_1.rootHTTPLogger.warn("MegaApi response data is not an encrypted string (protocol drift?)", { path });
+            return result.data;
+        }
+        return JSON.parse(this.decryptForCluster(identity, result.data));
+    }
+    /**
+     * MQTT connection info for the v6 backend (`devicemanage/get_user_mqtt_info`).
+     * This is how events are pushed in v6 — broker endpoint + credentials + topics, returned
+     * dynamically (unlike the legacy static `security-mqtt-eu.eufylife.com`). Decrypted.
+     */
+    async getUserMqttInfo() {
+        return (await this.callDecrypted("devicemanage", "/app/devicemanage/get_user_mqtt_info", {}));
+    }
+    /**
+     * Build the full AWS IoT MQTT connection config for the v6 event channel. Fetches the per-user
+     * certificate/credentials and combines them with the client identity so a consumer can connect
+     * without touching MegaHTTPApi internals.
+     *
+     * NOTE: SCAFFOLDING — there is no MQTT subscriber consuming this yet. The v6 AWS IoT channel
+     * only serves devices flagged `is_support_mqtt`; ordinary cameras/sensors are delivered over
+     * FCM ({@link registerPushToken}). This builder is shipped ahead of a follow-up MQTT-consumer
+     * change so that change won't need to touch MegaHTTPApi. It is NOT a live event path today.
+     *
+     * The `clientId` format is mandatory for the AWS IoT policy (decompiled `createClientId`):
+     * `android-{app_name}-{user_id}-{openudid}`. Topics carry `PN`/`SN` placeholders to fill per
+     * device. Requires a valid session.
+     */
+    async getMqttConnectConfig() {
+        const info = await this.getUserMqttInfo();
+        return {
+            endpoint: info.endpoint_addr,
+            port: 8883,
+            clientId: `android-${this.appName}-${info.user_id}-${this.openudid}`,
+            thingName: info.thing_name,
+            userId: info.user_id,
+            certificatePem: info.certificate_pem,
+            privateKey: info.private_key,
+            awsRootCaPem: info.aws_root_ca1_pem,
+            topics: {
+                subCmd: "cmd/eufy_security/PN/SN/res",
+                stateInfo: "synq/eufy_life/PN/SN/state_info",
+                pubCmd: "cmd/eufy_security/PN/SN/req",
+            },
+        };
+    }
+    /**
+     * Register an FCM push token on the v6 backend (`push/register_push_token`).
+     *
+     * Body (decompiled `PushManager.uploadToken`): `{token, is_notification_enable, voip_token}`.
+     * There is NO platform/type field in the body — the backend routes FCM vs APNs purely by the
+     * `os-type` header + the `x-key-ident` identity this request is signed under. So this MUST run
+     * on an `os-type: android` identity (the default here) for events to be delivered over FCM.
+     */
+    async registerPushToken(fcmToken) {
+        return this.call(this.clusterHost("push"), "/app/push/register_push_token", {
+            token: fcmToken,
+            is_notification_enable: true,
+            voip_token: fcmToken,
+        });
+    }
+    /** Encrypt the login password exactly like the legacy HTTPApi (ECDH vs LOGIN_SERVER_PUBLIC_KEY). */
+    encryptLoginPassword(password) {
+        const ecdh = (0, crypto_1.createECDH)("prime256v1");
+        ecdh.generateKeys();
+        const secret = ecdh.computeSecret(Buffer.from(LOGIN_SERVER_PUBLIC_KEY, "hex"));
+        return {
+            encrypted: (0, utils_1.encryptAPIData)(password, secret),
+            clientSecretPub: ecdh.getPublicKey("hex"),
+        };
+    }
+    /** Validate the email exists on the new backend (the app does this before login). */
+    async validateEmail(email) {
+        return this.call(this.clusterHost("passport"), "/passport/validate_email", { email, ab: this.ab });
+    }
+    /** The 2FA session id, shared between login (which triggers 2FA) and loginAfterTFA. */
+    loginId;
+    /**
+     * Obtain a `login_id` (2FA session id). The app calls `passport/get_login_id` before login and
+     * passes the SAME login_id to both the initial login and the post-2FA login. (Decompiled flow.)
+     */
+    async getLoginId() {
+        const result = await this.call(this.clusterHost("passport"), "/passport/get_login_id", {});
+        if (result.code !== 0)
+            throw new Error(`get_login_id failed: ${result.code} ${result.msg}`);
+        const openapiHost = this.clusterHost("openapi");
+        const identity = this.identities.get(openapiHost);
+        const decoded = JSON.parse(this.decryptForCluster(identity, result.data));
+        this.loginId = decoded.login_id;
+        logging_1.rootHTTPLogger.info("MegaApi get_login_id", { loginId: this.loginId });
+        return this.loginId;
+    }
+    /**
+     * Login against the v6 passport backend.
+     *
+     * The body sends `login_id: ""`: `get_login_id`/`getTouchId` is for biometric (TouchID) login
+     * only and must not be called in the email+2FA flow. On success the backend returns code:0 even
+     * when 2FA is still pending — the real state is in `fa_info.step` (26052), and the returned token
+     * is provisional but still used to authenticate the subsequent sendVerifyCode + final login.
+     *
+     * @param verifyCode email 2FA code (omit on first call; pass it on retry after code 26052)
+     * @param captcha    picture-captcha answer (pass it after code 100032/100033 — see {@link generateCaptcha})
+     * @returns the full MegaResult. Codes the caller acts on: 26052 = email 2FA required;
+     *          100032 = captcha required, 100033 = captcha answer incorrect. On success, token+user stored.
+     */
+    async login(email, password, verifyCode, captcha) {
+        const { encrypted, clientSecretPub } = this.encryptLoginPassword(password);
+        const payload = {
+            email,
+            password: encrypted,
+            ab: this.ab,
+            client_secret_info: { public_key: clientSecretPub },
+            answer: captcha?.answer ?? "",
+            captcha_id: captcha?.captchaId ?? "",
+            verify_code: verifyCode ?? "",
+            login_id: "",
+        };
+        const result = await this.call(this.clusterHost("passport"), "/passport/login", payload);
+        if (result.code === types_1.ResponseErrorCode.LOGIN_NEED_CAPTCHA || result.code === types_1.ResponseErrorCode.LOGIN_CAPTCHA_ERROR) {
+            logging_1.rootHTTPLogger.info("MegaApi login needs a captcha", { code: result.code });
+            return result;
+        }
+        if (result.code === 0 && result.data) {
+            const openapiHost = this.clusterHost("openapi");
+            const identity = this.identities.get(openapiHost);
+            const decoded = JSON.parse(this.decryptForCluster(identity, result.data));
+            const authToken = (decoded.auth_token ?? decoded.token);
+            const userId = (decoded.user_id ?? decoded.userId);
+            this.setAuth(authToken, userId);
+            if (typeof decoded.token_expires_at === "number")
+                this.tokenExpiresAt = decoded.token_expires_at;
+            const faInfo = decoded.fa_info;
+            if (faInfo?.step === types_1.ResponseErrorCode.CODE_NEED_VERIFY_CODE) {
+                logging_1.rootHTTPLogger.info("MegaApi login needs 2FA (token stored for verify_code)", { step: faInfo.step });
+                return { ...result, code: types_1.ResponseErrorCode.CODE_NEED_VERIFY_CODE, msg: "2FA verify code required" };
+            }
+            logging_1.rootHTTPLogger.info("MegaApi login ok", { userId, keys: Object.keys(decoded) });
+        }
+        return result;
+    }
+    /**
+     * Request the email 2FA code (after login indicates fa_info.step 26052).
+     *
+     * Exact payload confirmed by decompiling the Ijiami-packed `SendVerifyCodeRequest`
+     * (dumped from process memory): the 2FA-login send is `{message_type, biz_type, transaction}`
+     * with `biz_type = 1004` (BIZ_TYPE_TFA) and `message_type = 2` (TYPE_EMAIL). No captcha for send.
+     */
+    async sendVerifyCode(_email) {
+        return this.call(this.clusterHost("push"), "/app/sendmsg/verify_code", {
+            message_type: 2, // TYPE_EMAIL
+            biz_type: 1004, // BIZ_TYPE_TFA
+            transaction: `${Date.now()}`,
+        });
+    }
+    /**
+     * Fetch a picture captcha (after login returns 100032/100033). Body
+     * `{captcha_type, biz_type}` (decompiled CaptchaManager.getCaptcha); the response `item` is a
+     * base64 image the user must solve, then pass the answer + captcha_id back into {@link login}.
+     */
+    async generateCaptcha() {
+        const result = await this.call(this.clusterHost("passport"), "/passport/generate/captcha", {
+            captcha_type: "PIC",
+            biz_type: 0,
+        });
+        if (result.code !== 0)
+            throw new Error(`generate/captcha failed: ${result.code} ${result.msg}`);
+        const openapiHost = this.clusterHost("openapi");
+        const identity = this.identities.get(openapiHost);
+        const data = typeof result.data === "string" ? JSON.parse(this.decryptForCluster(identity, result.data)) : result.data;
+        return data;
+    }
+    /**
+     * Fetch the Tuya/Thingclips device list (`get_things_list`) and DECRYPT it.
+     * This is the probe to see whether a given device (e.g. Kitchen sensor) has been
+     * migrated server-side onto the Tuya backend.
+     */
+    async getThingsListDecrypted(productCodes = []) {
+        const host = this.clusterHost("things");
+        const openapiHost = this.clusterHost("openapi");
+        const identity = await this.keyExchange(openapiHost);
+        const result = await this.signedPost(host, "/app/things/get_things_list", { product_codes: productCodes }, identity);
+        if (result.code !== 0)
+            throw new Error(`get_things_list failed: ${result.code} ${result.msg}`);
+        return JSON.parse(this.decryptForCluster(identity, result.data));
+    }
+    /** Eufy-side device list (`house/get_devs_list`), decrypted. The non-Tuya inventory. */
+    async getDevsListDecrypted() {
+        const host = this.clusterHost("house");
+        const openapiHost = this.clusterHost("openapi");
+        const identity = await this.keyExchange(openapiHost);
+        const result = await this.signedPost(host, "/app/house/get_devs_list", { device_sn: "", num: 100, orderby: "" }, identity);
+        if (result.code !== 0)
+            throw new Error(`get_devs_list failed: ${result.code} ${result.msg}`);
+        return JSON.parse(this.decryptForCluster(identity, result.data));
+    }
+}
+exports.MegaHTTPApi = MegaHTTPApi;
+//# sourceMappingURL=megaApi.js.map

package/build/http/megaApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"megaApi.js","sourceRoot":"","sources":["../../src/http/megaApi.ts"],"names":[],"mappings":";;;;;;AAAA,mCAAgD;AAChD,wDAAgC;AAEhC,wCAA4C;AAC5C,mCAAyC;AACzC,mCAA4C;AAC5C,6CAWsB;AAqBtB;;;;;;;;;;;;;GAaG;AAEH,uFAAuF;AAC1E,QAAA,yBAAyB,GACpC,oIAAoI,CAAC;AAEvI,8EAA8E;AAC9E,MAAM,uBAAuB,GAC3B,oIAAoI,CAAC;AAEvI;;;;GAIG;AACI,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAgB,EAAU,EAAE,CACzF,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AADnE,QAAA,aAAa,iBACsD;AAEhF,MAAa,WAAW;IACL,EAAE,CAAS;IACX,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,aAAa,CAAS;IAE/B,GAAG,CAAO;IACV,QAAQ,CAAoF;IAEpG,kEAAkE;IAC1D,OAAO,GAA2B,EAAE,CAAC;IACrC,UAAU,GAAG,EAAE,CAAC;IAExB,uEAAuE;IAC/D,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IAErD,oEAAoE;IAC5D,SAAS,CAAU;IAC3B,2EAA2E;IACnE,cAAc,CAAU;IACxB,MAAM,CAAU;IAExB,YAAY,IAAoB;QAC9B,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC1G,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC;IACzD,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAY,MAAM;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,aAAG,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED,0FAA0F;IAClF,QAAQ,GAAG,IAAA,6BAAgB,GAAE,CAAC;IAEtC;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,UAAU,CACtB,IAAY,EACZ,IAAY,EACZ,OAAgB,EAChB,QAAuB,EACvB,SAAwD;QAExD,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAA,6BAAgB,GAAE,CAAC;QAEjC,IAAI,IAAY,CAAC;QACjB,IAAI,WAAmB,CAAC;QACxB,IAAI,UAAkB,CAAC;QACvB,IAAI,QAAgB,CAAC;QAErB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;YACvE,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC;YACvC,UAAU,GAAG,4BAAe,CAAC;YAC7B,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,IAAA,8BAAiB,EAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,GAAG,IAAA,4BAAe,EAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YACxD,WAAW,GAAG,IAAI,CAAC;YACnB,UAAU,GAAG,IAAA,gCAAmB,EAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACrD,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,gBAAgB,EAAE,OAAO;YACzB,iBAAiB,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,EAAE,QAAQ;YACzE,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,aAAa,EAAE,IAAI,CAAC,UAAU;YAC9B,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM;YACpB,YAAY,EAAE,IAAI,CAAC,SAAS;YAC5B,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,YAAY,EAAE,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,UAAU;YAC9B,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,OAAO;YACpB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,aAAa;YAC3B,cAAc,EAAE,kBAAkB;YAClC,mBAAmB,EAAE,WAAW;YAChC,aAAa,EAAE,QAAQ;YACvB,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,QAAQ;YACzB,aAAa,EAAE,IAAA,uBAAU,EAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;YAC7D,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;YAC9B,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,OAAO,EAAE,IAAI,CAAC,EAAE;SACjB,CAAC;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACzC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;QACzC,CAAC;QAED,wBAAc,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEvF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,IAAI,EAAE,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI;gBACJ,YAAY,EAAE,MAAM;gBACpB,eAAe,EAAE,KAAK;gBACtB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAW,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7C,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAe,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,WAAW,IAAI,CAAC,UAAU,oBAAoB,YAAY,CAAC,MAAM,SAAS,CAAC,CAAC;QAC5G,CAAC;QACD,wBAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAErG,IACE,MAAM,CAAC,IAAI,KAAK,yBAAiB,CAAC,uBAAuB;YACzD,MAAM,CAAC,IAAI,KAAK,yBAAiB,CAAC,oBAAoB,EACtD,CAAC;YACD,wBAAc,CAAC,IAAI,CAAC,8EAA8E,EAAE;gBAClG,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4EAA4E;IACrE,iBAAiB,CAAC,QAAsB,EAAE,OAAe;QAC9D,OAAO,IAAA,4BAAe,EAAC,OAAO,EAAE,IAAA,8BAAiB,EAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,kFAAkF;IAC3E,KAAK,CAAC,cAAc;QACzB,MAAM,IAAI,GAAG,QAAQ,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CACpC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,2BAA2B,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI,CAAC,OAAO;gBACxB,aAAa,EAAE,IAAI,CAAC,UAAU;gBAC9B,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;YAC9B,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,KAAK;SACvB,CAAC,CACH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAkB,CAAC;QACvC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAmE,CAAC;QACxF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC;QACpC,wBAAc,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CAAC,WAAmB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,IAAA,6BAAgB,GAAE,CAAC;QAEpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,6BAA6B,EAAE,SAAS,EAAE,SAAS,EAAE;YACrG,QAAQ;YACR,cAAc,EAAE,mBAAmB;SACpC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAE9G,MAAM,YAAY,GAAI,MAAM,CAAC,IAAsC,CAAC,iBAAiB,CAAC;QACtF,MAAM,QAAQ,GAAG,IAAA,gCAAmB,EAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QACpF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC3C,wBAAc,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACI,WAAW,CAAC,OAAe;QAChC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,OAAO,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,OAAO,OAAO,OAAO,IAAI,MAAM,cAAc,CAAC;IAChD,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACM,WAAW,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACM,OAAO,CAAC,SAAiB,EAAE,MAAc;QAC9C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACI,aAAa,CAAC,SAAkB;QACrC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,IAAI,CAAC,SAAS;YAC3B,sBAAsB,EAAE,IAAI,CAAC,cAAc;YAC3C,OAAO,EAAE,IAAI,CAAC,MAAM;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,sEAAsE;IAC/D,cAAc,CAAC,CAAc;QAClC,IAAI,CAAC,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,sBAAsB,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACI,eAAe;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,cAAc,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oFAAoF;IAC7E,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,OAAgB;QAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IACjE,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,IAAY,EAAE,UAAmB,EAAE;QAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACvF,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,wBAAc,CAAC,IAAI,CAAC,oEAAoE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACpG,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe;QAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAqB,CAAC;IACpH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,oBAAoB;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,WAAW,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE;YACpE,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,MAAM,EAAE;gBACN,MAAM,EAAE,6BAA6B;gBACrC,SAAS,EAAE,iCAAiC;gBAC5C,MAAM,EAAE,6BAA6B;aACtC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,+BAA+B,EAAE;YAC1E,KAAK,EAAE,QAAQ;YACf,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED,oGAAoG;IAC5F,oBAAoB,CAAC,QAAgB;QAC3C,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/E,OAAO;YACL,SAAS,EAAE,IAAA,sBAAc,EAAC,QAAQ,EAAE,MAAM,CAAC;YAC3C,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,aAAa,CAAC,KAAa;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,uFAAuF;IAC/E,OAAO,CAAU;IAEzB;;;OAGG;IACI,KAAK,CAAC,UAAU;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,wBAAwB,EAAE,EAAE,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAc,CAAC,CAAyB,CAAC;QAC5G,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;QAChC,wBAAc,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,KAAK,CAChB,KAAa,EACb,QAAgB,EAChB,UAAmB,EACnB,OAA2B;QAE3B,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,OAAO,GAA4B;YACvC,KAAK;YACL,QAAQ,EAAE,SAAS;YACnB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,kBAAkB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;YACnD,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE;YAC7B,UAAU,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;YACpC,WAAW,EAAE,UAAU,IAAI,EAAE;YAC7B,QAAQ,EAAE,EAAE;SACb,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAEzF,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAiB,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAiB,CAAC,mBAAmB,EAAE,CAAC;YAClH,wBAAc,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAc,CAAC,CAA4B,CAAC;YAE/G,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,CAAW,CAAC;YAClE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAW,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;gBAAE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAEjG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAwC,CAAC;YAChE,IAAI,MAAM,EAAE,IAAI,KAAK,yBAAiB,CAAC,qBAAqB,EAAE,CAAC;gBAC7D,wBAAc,CAAC,IAAI,CAAC,wDAAwD,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrG,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,yBAAiB,CAAC,qBAAqB,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC;YACvG,CAAC;YACD,wBAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,cAAc,CAAC,MAAe;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,0BAA0B,EAAE;YACrE,YAAY,EAAE,CAAC,EAAE,aAAa;YAC9B,QAAQ,EAAE,IAAI,EAAE,eAAe;YAC/B,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,4BAA4B,EAAE;YACzF,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAChG,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACnD,MAAM,IAAI,GACR,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5G,OAAO,IAAmB,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,sBAAsB,CAAC,eAAyB,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,IAAI,EACJ,6BAA6B,EAC7B,EAAE,aAAa,EAAE,YAAY,EAAE,EAC/B,QAAQ,CACT,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAc,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,wFAAwF;IACjF,KAAK,CAAC,oBAAoB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,IAAI,EACJ,0BAA0B,EAC1B,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EACxC,QAAQ,CACT,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAc,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF;AA9gBD,kCA8gBC"}

package/build/http/megaCrypto.d.ts

@@ -0,0 +1,84 @@
+import { ECDH } from "crypto";
+/**
+ * Eufy "eufy_mega" v6 transport crypto.
+ *
+ * Two layers:
+ *  1. Bootstrap (handshake): body + signature use a STATIC per-app `presetKey`.
+ *  2. Regular requests (post-handshake): body + signature use the per-cluster
+ *     ECDH `sharedKey` derived from the key/exchange.
+ */
+/** Static preset key for the `eufy_security` category (`*.eufy.com`). Extracted from the app's
+ *  `ESIotAppConfig`, stored in `MegaAppDomain.presetKeyMap` (one key per product category). */
+export declare const MEGA_PRESET_KEY = "2500a7d5617812f9d52515b2c8f20a3d";
+/**
+ * X-Signature = HMAC-SHA256, hex lowercase, over `${ts}+${nonce}+${encryptedBody}`.
+ * The HMAC key is the **ASCII string** of the key material (NOT hex-decoded).
+ *
+ * @param keyAscii presetKey (bootstrap) or sharedKey hex string (regular requests)
+ */
+export declare const xSignature: (keyAscii: string, ts: string, nonce: string, encryptedBody?: string) => string;
+/** Random 32-hex client-generated X-Key-Ident (one per cluster identity). */
+export declare const generateKeyIdent: () => string;
+/**
+ * Encrypt a payload AES-128-CBC/PKCS7 under the preset key, output `base64(IV ++ ciphertext)`.
+ * The AES key is `bytes.fromhex(presetKey)` (16 bytes); a fresh random IV is prepended.
+ * Used to wrap the client's EC public key in the key/exchange request body.
+ */
+export declare const presetEncrypt: (plaintext: string, presetKeyHex?: string) => string;
+/** Inverse of {@link presetEncrypt}: decode `base64(IV ++ ciphertext)` → plaintext. */
+export declare const presetDecrypt: (b64: string, presetKeyHex?: string) => string;
+/** Result of a key/exchange handshake, cached per cluster host. */
+export interface MegaIdentity {
+    keyIdent: string;
+    /** ECDH shared secret as lowercase hex (raw 32-byte X coordinate). */
+    sharedKey: string;
+    /** Our ephemeral public key (uncompressed `04…`, hex) sent in the exchange. */
+    clientPublicKey: string;
+}
+/**
+ * Build the key/exchange request material.
+ *
+ * The exchange is ECIES-bootstrapped: the client's ephemeral EC public key is wrapped
+ * with the static `presetKey`. The SESSION sharedKey is NOT derivable yet — it is
+ * `ECDH(clientPriv, server_public_key)` where server_public_key comes back in the
+ * response (see {@link finalizeKeyExchange}). We keep the ECDH object so the caller can
+ * finish the derivation once the server replies.
+ *
+ * @returns the ECDH object (holds the client private key), the wrapped client_public_key
+ *          body value, the client public key hex, and a fresh client-generated keyIdent.
+ */
+export declare const buildKeyExchange: () => {
+    ecdh: ECDH;
+    clientPublicKeyBody: string;
+    clientPublicKey: string;
+    keyIdent: string;
+};
+/**
+ * Finalize the handshake: derive the session sharedKey from our ECDH private key and the
+ * server's public key returned (preset-encrypted) in the key/exchange response.
+ *
+ * @param ecdh the ECDH object from {@link buildKeyExchange} (holds clientPriv)
+ * @param serverPublicKeyEnc base64 `server_public_key` from the response (preset-wrapped)
+ * @param keyIdent the client keyIdent used for this cluster
+ * @param clientPublicKey our public key hex (for reference)
+ */
+export declare const finalizeKeyExchange: (ecdh: ECDH, serverPublicKeyEnc: string, keyIdent: string, clientPublicKey: string) => MegaIdentity;
+/**
+ * Per-request key material derived from the handshake sharedKey.
+ *
+ * The sharedKey is the ECDH X-coordinate as a 64-char hex string. For regular requests:
+ *  - **HMAC/signature key** = the first 32 hex CHARS of sharedKey, used as an ASCII string.
+ *  - **AES body key**       = `bytes.fromhex(sharedKey[:32])` → 16 bytes (AES-128); iv = key[:16].
+ *
+ * NOTE: only the first 32 hex chars (16 bytes) of the 64-char sharedKey are used.
+ */
+export declare const sharedKeySigningKey: (sharedKeyHex: string) => string;
+/** AES key buffer for body encryption: bytes.fromhex(sharedKey[:32]) = 16 bytes (AES-128). */
+export declare const sharedKeyToAesKey: (sharedKeyHex: string) => Buffer;
+/**
+ * Encrypt a regular (post-handshake) request/response body: AES-128-CBC/PKCS7 with a fresh
+ * RANDOM IV, output `base64(IV ++ ciphertext)` — same envelope as the key/exchange body.
+ */
+export declare const megaEncryptBody: (plaintext: string, aesKey: Buffer) => string;
+/** Inverse of {@link megaEncryptBody}: decode `base64(IV ++ ciphertext)` → plaintext. */
+export declare const megaDecryptBody: (b64: string, aesKey: Buffer) => string;