matrix-js-sdk 41.5.0 → 41.6.0

package/lib/rust-crypto/libolm_migration.js.map

@@ -1 +1 @@
-{"version":3,"file":"libolm_migration.js","names":["RustSdkCryptoJs","MigrationState","IndexedDBCryptoStore","requestKeyBackupVersion","sleep","encodeBase64","decryptAESSecretStorageItem","migrateFromLegacyCrypto","_x","_migrateFromLegacyCrypto","apply","arguments","_asyncToGenerator","args","_args$legacyMigration2","logger","legacyStore","initAsync","containsData","startup","accountPickle","doTxn","STORE_ACCOUNT","txn","getAccount","acctPickle","debug","migrationState","getMigrationState","MEGOLM_SESSIONS_MIGRATED","nOlmSessions","countOlmSessions","nMegolmSessions","countMegolmSessions","totalSteps","info","concat","stepsDone","onProgress","steps","_args$legacyMigration","legacyMigrationProgressListener","call","pickleKey","TextEncoder","encode","legacyPickleKey","slice","NOT_STARTED","migrateBaseData","http","userId","deviceId","storeHandle","INITIAL_DATA_MIGRATED","setMigrationState","migrateOlmSessions","OLM_SESSIONS_MIGRATED","migrateMegolmSessions","_x2","_x3","_x4","_x5","_x6","_x7","_x8","_migrateBaseData","migrationData","BaseMigrationData","UserId","DeviceId","a","pickledAccount","recoveryKey","getAndDecryptCachedSecretKey","backupCallDone","backupInfo","e","algorithm","_backupInfo$auth_data","decryptionKey","BackupDecryptionKey","fromBase64","publicKey","auth_data","public_key","isValid","megolmV1PublicKey","publicKeyBase64","backupVersion","version","backupRecoveryKey","warn","privateCrossSigningMasterKey","privateCrossSigningSelfSigningKey","privateCrossSigningUserSigningKey","Migration","_x9","_x0","_countOlmSessions","nSessions","STORE_SESSIONS","countEndToEndSessions","n","_x1","_x10","_countMegolmSessions","countEndToEndInboundGroupSessions","_x11","_x12","_x13","_x14","_x15","_migrateOlmSessions","onBatchDone","batch","getEndToEndSessionsBatch","length","session","pickledSession","PickledSession","senderKey","deviceKey","pickle","lastUseTime","creationTime","Date","lastReceivedMessageTs","push","deleteEndToEndSessionsBatch","_x16","_x17","_x18","_x19","_x20","_migrateMegolmSessions","getEndToEndInboundGroupSessionsBatch","_sessionData$keysClai","sessionData","PickledInboundGroupSession","roomId","RoomId","room_id","senderSigningKey","keysClaimed","backedUp","needsBackup","imported","untrusted","deleteEndToEndInboundGroupSessionsBatch","migrateRoomSettingsFromLegacyCrypto","_x21","_migrateRoomSettingsFromLegacyCrypto","_ref","olmMachine","ROOM_SETTINGS_MIGRATED","rooms","STORE_ROOMS","getEndToEndRooms","result","Object","keys","legacySettings","entries","rustSettings","RoomSettings","EncryptionAlgorithm","MegolmV1AesSha2","sessionRotationPeriodMs","rotation_period_ms","sessionRotationPeriodMessages","rotation_period_msgs","setRoomSettings","JSON","stringify","_x22","_x23","_x24","_getAndDecryptCachedSecretKey","name","key","Promise","resolve","getSecretStorePrivateKey","ciphertext","iv","mac","Uint8Array","undefined","migrateLegacyLocalTrustIfNeeded","_x25","_migrateLegacyLocalTrustIfNeeded","legacyCryptoStore","rustCrypto","rustOwnIdentity","getOwnIdentity","isVerified","legacyLocallyTrustedMSK","getLegacyTrustedPublicMasterKeyBase64","mskInfo","parse","masterKey","error","rustSeenMSK","values","verify","_x26","_getLegacyTrustedPublicMasterKeyBase","maybeTrustedKeys","getCrossSigningKeys","msk","master"],"sources":["../../src/rust-crypto/libolm_migration.ts"],"sourcesContent":["/*\nCopyright 2023-2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport { type Logger } from \"../logger.ts\";\nimport { type CryptoStore, MigrationState, type SecretStorePrivateKeys } from \"../crypto/store/base.ts\";\nimport { IndexedDBCryptoStore } from \"../crypto/store/indexeddb-crypto-store.ts\";\nimport { type IHttpOpts, type MatrixHttpApi } from \"../http-api/index.ts\";\nimport { requestKeyBackupVersion } from \"./backup.ts\";\nimport { type CrossSigningKeyInfo, type Curve25519AuthData } from \"../crypto-api/index.ts\";\nimport { type RustCrypto } from \"./rust-crypto.ts\";\nimport { type KeyBackupInfo } from \"../crypto-api/keybackup.ts\";\nimport { sleep } from \"../utils.ts\";\nimport { encodeBase64 } from \"../base64.ts\";\nimport decryptAESSecretStorageItem from \"../utils/decryptAESSecretStorageItem.ts\";\nimport { type AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\n\ninterface LegacyRoomEncryption {\n    algorithm: string;\n    rotation_period_ms?: number;\n    rotation_period_msgs?: number;\n}\n\n/**\n * Determine if any data needs migrating from the legacy store, and do so.\n *\n * This migrates the base account data, and olm and megolm sessions. It does *not* migrate the room list, which should\n * happen after an `OlmMachine` is created, via {@link migrateRoomSettingsFromLegacyCrypto}.\n *\n * @param args - Arguments object.\n */\nexport async function migrateFromLegacyCrypto(args: {\n    /** A `Logger` instance that will be used for debug output. */\n    logger: Logger;\n\n    /**\n     * Low-level HTTP interface: used to make outgoing requests required by the rust SDK.\n     * We expect it to set the access token, etc.\n     */\n    http: MatrixHttpApi<IHttpOpts & { onlyData: true }>;\n\n    /** Store to migrate data from. */\n    legacyStore: CryptoStore;\n\n    /** Pickle key for `legacyStore`. */\n    legacyPickleKey?: string;\n\n    /** Local user's User ID. */\n    userId: string;\n\n    /** Local user's Device ID. */\n    deviceId: string;\n\n    /** Rust crypto store to migrate data into. */\n    storeHandle: RustSdkCryptoJs.StoreHandle;\n\n    /**\n     * A callback which will receive progress updates on migration from `legacyStore`.\n     *\n     * Called with (-1, -1) to mark the end of migration.\n     */\n    legacyMigrationProgressListener?: (progress: number, total: number) => void;\n}): Promise<void> {\n    const { logger, legacyStore } = args;\n\n    // initialise the rust matrix-sdk-crypto-wasm, if it hasn't already been done\n    await RustSdkCryptoJs.initAsync();\n\n    if (!(await legacyStore.containsData())) {\n        // This store was never used. Nothing to migrate.\n        return;\n    }\n\n    await legacyStore.startup();\n\n    let accountPickle: string | null = null;\n    await legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n        legacyStore.getAccount(txn, (acctPickle) => {\n            accountPickle = acctPickle;\n        });\n    });\n    if (!accountPickle) {\n        // This store is not properly set up. Nothing to migrate.\n        logger.debug(\"Legacy crypto store is not set up (no account found). Not migrating.\");\n        return;\n    }\n\n    let migrationState = await legacyStore.getMigrationState();\n\n    if (migrationState >= MigrationState.MEGOLM_SESSIONS_MIGRATED) {\n        // All migration is done for now. The room list comes later, once we have an OlmMachine.\n        return;\n    }\n\n    const nOlmSessions = await countOlmSessions(logger, legacyStore);\n    const nMegolmSessions = await countMegolmSessions(logger, legacyStore);\n    const totalSteps = 1 + nOlmSessions + nMegolmSessions;\n    logger.info(\n        `Migrating data from legacy crypto store. ${nOlmSessions} olm sessions and ${nMegolmSessions} megolm sessions to migrate.`,\n    );\n\n    let stepsDone = 0;\n    function onProgress(steps: number): void {\n        stepsDone += steps;\n        args.legacyMigrationProgressListener?.(stepsDone, totalSteps);\n    }\n    onProgress(0);\n\n    const pickleKey = new TextEncoder().encode(args.legacyPickleKey).slice();\n\n    if (migrationState === MigrationState.NOT_STARTED) {\n        logger.info(\"Migrating data from legacy crypto store. Step 1: base data\");\n        await migrateBaseData(args.http, args.userId, args.deviceId, legacyStore, pickleKey, args.storeHandle, logger);\n\n        migrationState = MigrationState.INITIAL_DATA_MIGRATED;\n        await legacyStore.setMigrationState(migrationState);\n    }\n    onProgress(1);\n\n    if (migrationState === MigrationState.INITIAL_DATA_MIGRATED) {\n        logger.info(\n            `Migrating data from legacy crypto store. Step 2: olm sessions (${nOlmSessions} sessions to migrate).`,\n        );\n        await migrateOlmSessions(logger, legacyStore, pickleKey, args.storeHandle, onProgress);\n\n        migrationState = MigrationState.OLM_SESSIONS_MIGRATED;\n        await legacyStore.setMigrationState(migrationState);\n    }\n\n    if (migrationState === MigrationState.OLM_SESSIONS_MIGRATED) {\n        logger.info(\n            `Migrating data from legacy crypto store. Step 3: megolm sessions (${nMegolmSessions} sessions to migrate).`,\n        );\n        await migrateMegolmSessions(logger, legacyStore, pickleKey, args.storeHandle, onProgress);\n\n        migrationState = MigrationState.MEGOLM_SESSIONS_MIGRATED;\n        await legacyStore.setMigrationState(migrationState);\n    }\n\n    // Migration is done.\n    args.legacyMigrationProgressListener?.(-1, -1);\n    logger.info(\"Migration from legacy crypto store complete\");\n}\n\nasync function migrateBaseData(\n    http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n    userId: string,\n    deviceId: string,\n    legacyStore: CryptoStore,\n    pickleKey: Uint8Array<ArrayBuffer>,\n    storeHandle: RustSdkCryptoJs.StoreHandle,\n    logger: Logger,\n): Promise<void> {\n    const migrationData = new RustSdkCryptoJs.BaseMigrationData();\n    migrationData.userId = new RustSdkCryptoJs.UserId(userId);\n    migrationData.deviceId = new RustSdkCryptoJs.DeviceId(deviceId);\n\n    await legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) =>\n        legacyStore.getAccount(txn, (a) => {\n            migrationData.pickledAccount = a ?? \"\";\n        }),\n    );\n\n    const recoveryKey = await getAndDecryptCachedSecretKey(legacyStore, pickleKey, \"m.megolm_backup.v1\");\n\n    // If we have a backup recovery key, we need to try to figure out which backup version it is for.\n    // All we can really do is ask the server for the most recent version and check if the cached key we have matches.\n    // It is possible that the backup has changed since last time his session was opened.\n    if (recoveryKey) {\n        let backupCallDone = false;\n        let backupInfo: KeyBackupInfo | null = null;\n        while (!backupCallDone) {\n            try {\n                backupInfo = await requestKeyBackupVersion(http);\n                backupCallDone = true;\n            } catch (e) {\n                logger.info(\"Failed to get backup version during migration, retrying in 2 seconds\", e);\n                // Retry until successful, use simple constant delay\n                await sleep(2000);\n            }\n        }\n        if (backupInfo && backupInfo.algorithm == \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            // check if the recovery key matches, as the active backup version may have changed since the key was cached\n            // and the migration started.\n            try {\n                const decryptionKey = RustSdkCryptoJs.BackupDecryptionKey.fromBase64(recoveryKey);\n                const publicKey = (backupInfo.auth_data as Curve25519AuthData)?.public_key;\n                const isValid = decryptionKey.megolmV1PublicKey.publicKeyBase64 == publicKey;\n                if (isValid) {\n                    migrationData.backupVersion = backupInfo.version;\n                    migrationData.backupRecoveryKey = recoveryKey;\n                } else {\n                    logger.debug(\n                        \"The backup key to migrate does not match the active backup version\",\n                        `Cached pub key: ${decryptionKey.megolmV1PublicKey.publicKeyBase64}`,\n                        `Active pub key: ${publicKey}`,\n                    );\n                }\n            } catch (e) {\n                logger.warn(\"Failed to check if the backup key to migrate matches the active backup version\", e);\n            }\n        }\n    }\n\n    migrationData.privateCrossSigningMasterKey = await getAndDecryptCachedSecretKey(legacyStore, pickleKey, \"master\");\n    migrationData.privateCrossSigningSelfSigningKey = await getAndDecryptCachedSecretKey(\n        legacyStore,\n        pickleKey,\n        \"self_signing\",\n    );\n    migrationData.privateCrossSigningUserSigningKey = await getAndDecryptCachedSecretKey(\n        legacyStore,\n        pickleKey,\n        \"user_signing\",\n    );\n    await RustSdkCryptoJs.Migration.migrateBaseData(migrationData, pickleKey, storeHandle, logger);\n}\n\nasync function countOlmSessions(logger: Logger, legacyStore: CryptoStore): Promise<number> {\n    logger.debug(\"Counting olm sessions to be migrated\");\n    let nSessions: number;\n    await legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_SESSIONS], (txn) =>\n        legacyStore.countEndToEndSessions(txn, (n) => (nSessions = n)),\n    );\n    return nSessions!;\n}\n\nasync function countMegolmSessions(logger: Logger, legacyStore: CryptoStore): Promise<number> {\n    logger.debug(\"Counting megolm sessions to be migrated\");\n    return await legacyStore.countEndToEndInboundGroupSessions();\n}\n\nasync function migrateOlmSessions(\n    logger: Logger,\n    legacyStore: CryptoStore,\n    pickleKey: Uint8Array,\n    storeHandle: RustSdkCryptoJs.StoreHandle,\n    onBatchDone: (batchSize: number) => void,\n): Promise<void> {\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n        const batch = await legacyStore.getEndToEndSessionsBatch();\n        if (batch === null) return;\n\n        logger.debug(`Migrating batch of ${batch.length} olm sessions`);\n        const migrationData: RustSdkCryptoJs.PickledSession[] = [];\n        for (const session of batch) {\n            const pickledSession = new RustSdkCryptoJs.PickledSession();\n            pickledSession.senderKey = session.deviceKey!;\n            pickledSession.pickle = session.session!;\n            pickledSession.lastUseTime = pickledSession.creationTime = new Date(session.lastReceivedMessageTs!);\n            migrationData.push(pickledSession);\n        }\n\n        await RustSdkCryptoJs.Migration.migrateOlmSessions(migrationData, pickleKey, storeHandle, logger);\n        await legacyStore.deleteEndToEndSessionsBatch(batch);\n        onBatchDone(batch.length);\n    }\n}\n\nasync function migrateMegolmSessions(\n    logger: Logger,\n    legacyStore: CryptoStore,\n    pickleKey: Uint8Array,\n    storeHandle: RustSdkCryptoJs.StoreHandle,\n    onBatchDone: (batchSize: number) => void,\n): Promise<void> {\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n        const batch = await legacyStore.getEndToEndInboundGroupSessionsBatch();\n        if (batch === null) return;\n\n        logger.debug(`Migrating batch of ${batch.length} megolm sessions`);\n        const migrationData: RustSdkCryptoJs.PickledInboundGroupSession[] = [];\n        for (const session of batch) {\n            const sessionData = session.sessionData!;\n\n            const pickledSession = new RustSdkCryptoJs.PickledInboundGroupSession();\n            pickledSession.pickle = sessionData.session;\n            pickledSession.roomId = new RustSdkCryptoJs.RoomId(sessionData.room_id);\n            pickledSession.senderKey = session.senderKey;\n            pickledSession.senderSigningKey = sessionData.keysClaimed?.[\"ed25519\"];\n            pickledSession.backedUp = !session.needsBackup;\n\n            // The Rust SDK `imported` flag is used to indicate the authenticity status of a Megolm\n            // session, which tells us whether we can reliably tell which Olm device is the owner\n            // (creator) of the session.\n            //\n            // If `imported` is true, then we have no cryptographic proof that the session is owned\n            // by the device with the identity key `senderKey`.\n            //\n            // Only Megolm sessions received directly from the owning device via an encrypted\n            // `m.room_key` to-device message should have `imported` flag set to false. Megolm\n            // sessions received by any other currently available means (i.e. from a\n            // `m.forwarded_room_key`, from v1 asymmetric server-side key backup, imported from a\n            // file, etc) should have the `imported` flag set to true.\n            //\n            // Messages encrypted with such Megolm sessions will have a grey shield in the UI\n            // (\"Authenticity of this message cannot be guaranteed\").\n            //\n            // However, we don't want to bluntly mark all sessions as `imported` during migration\n            // because users will suddenly start seeing all their historic messages decorated with a\n            // grey shield, which would be seen as a non-actionable regression.\n            //\n            // In the legacy crypto stack, the flag encoding similar information was called\n            // `InboundGroupSessionData.untrusted`. The value of this flag was set as follows:\n            //\n            // - For outbound Megolm sessions created by our own device, `untrusted` is `undefined`.\n            // - For Megolm sessions received via a `m.room_key` to-device message, `untrusted` is\n            //   `undefined`.\n            // - For Megolm sessions received via a `m.forwarded_room_key` to-device message,\n            //   `untrusted` is `true`.\n            // - For Megolm sessions imported from a (v1 asymmetric / \"legacy\") server-side key\n            //   backup, `untrusted` is `true`.\n            // - For Megolm sessions imported from a file, untrusted is `undefined`.\n            //\n            // The main difference between the legacy crypto stack and the Rust crypto stack is that\n            // the Rust stack considers sessions imported from a file as `imported` (not\n            // authenticated). This is because the Megolm session export file format does not\n            // encode this authenticity information.\n            //\n            // Given this migration is only a one-time thing, we make a concession to accept the\n            // loss of information in this case, to avoid degrading UX in a non-actionable way.\n            pickledSession.imported = sessionData.untrusted === true;\n\n            migrationData.push(pickledSession);\n        }\n\n        await RustSdkCryptoJs.Migration.migrateMegolmSessions(migrationData, pickleKey, storeHandle, logger);\n        await legacyStore.deleteEndToEndInboundGroupSessionsBatch(batch);\n        onBatchDone(batch.length);\n    }\n}\n\n/**\n * Determine if any room settings need migrating from the legacy store, and do so.\n *\n * @param args - Arguments object.\n */\nexport async function migrateRoomSettingsFromLegacyCrypto({\n    logger,\n    legacyStore,\n    olmMachine,\n}: {\n    /** A `Logger` instance that will be used for debug output. */\n    logger: Logger;\n\n    /** Store to migrate data from. */\n    legacyStore: CryptoStore;\n\n    /** OlmMachine to store the new data on. */\n    olmMachine: RustSdkCryptoJs.OlmMachine;\n}): Promise<void> {\n    if (!(await legacyStore.containsData())) {\n        // This store was never used. Nothing to migrate.\n        return;\n    }\n\n    const migrationState = await legacyStore.getMigrationState();\n\n    if (migrationState >= MigrationState.ROOM_SETTINGS_MIGRATED) {\n        // We've already migrated the room settings.\n        return;\n    }\n\n    let rooms: Record<string, LegacyRoomEncryption> = {};\n\n    await legacyStore.doTxn(\"readwrite\", [IndexedDBCryptoStore.STORE_ROOMS], (txn) => {\n        legacyStore.getEndToEndRooms(txn, (result) => {\n            rooms = result;\n        });\n    });\n\n    logger.debug(`Migrating ${Object.keys(rooms).length} sets of room settings`);\n    for (const [roomId, legacySettings] of Object.entries(rooms)) {\n        try {\n            const rustSettings = new RustSdkCryptoJs.RoomSettings();\n\n            if (legacySettings.algorithm !== \"m.megolm.v1.aes-sha2\") {\n                logger.warn(`Room ${roomId}: ignoring room with invalid algorithm ${legacySettings.algorithm}`);\n                continue;\n            }\n            rustSettings.algorithm = RustSdkCryptoJs.EncryptionAlgorithm.MegolmV1AesSha2;\n            rustSettings.sessionRotationPeriodMs = legacySettings.rotation_period_ms;\n            rustSettings.sessionRotationPeriodMessages = legacySettings.rotation_period_msgs;\n            await olmMachine.setRoomSettings(new RustSdkCryptoJs.RoomId(roomId), rustSettings);\n\n            // We don't attempt to clear out the settings from the old store, or record where we've gotten up to,\n            // which means that if the app gets restarted while we're in the middle of this migration, we'll start\n            // again from scratch. So be it. Given that legacy crypto loads the whole room list into memory on startup\n            // anyway, we know it can't be that big.\n        } catch (e) {\n            logger.warn(`Room ${roomId}: ignoring settings ${JSON.stringify(legacySettings)} which caused error ${e}`);\n        }\n    }\n\n    logger.debug(`Completed room settings migration`);\n    await legacyStore.setMigrationState(MigrationState.ROOM_SETTINGS_MIGRATED);\n}\n\nasync function getAndDecryptCachedSecretKey(\n    legacyStore: CryptoStore,\n    legacyPickleKey: Uint8Array<ArrayBuffer>,\n    name: string,\n): Promise<string | undefined> {\n    const key = await new Promise<any>((resolve) => {\n        legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n            legacyStore.getSecretStorePrivateKey(txn, resolve, name as keyof SecretStorePrivateKeys);\n        });\n    });\n\n    if (key && key.ciphertext && key.iv && key.mac) {\n        return await decryptAESSecretStorageItem(key as AESEncryptedSecretStoragePayload, legacyPickleKey, name);\n    } else if (key instanceof Uint8Array) {\n        // This is a legacy backward compatibility case where the key was stored in clear.\n        return encodeBase64(key);\n    } else {\n        return undefined;\n    }\n}\n\n/**\n * Check if the user's published identity (ie, public cross-signing keys) was trusted by the legacy session,\n * and if so mark it as trusted in the Rust session if needed.\n *\n * By default, if the legacy session didn't have the private MSK, the migrated session will revert to unverified,\n * even if the user has verified the session in the past.\n *\n * This only occurs if the private MSK was not cached in the crypto store (USK and SSK private keys won't help\n * to establish trust: the trust is rooted in the MSK).\n *\n * Rust crypto will only consider the current session as trusted if we import the private MSK itself.\n *\n * We could prompt the user to verify the session again, but it's probably better to just mark the user identity\n * as locally verified if it was before.\n *\n * See https://github.com/element-hq/element-web/issues/27079\n *\n * @param args - Argument object.\n */\nexport async function migrateLegacyLocalTrustIfNeeded(args: {\n    /** The legacy crypto store that is migrated. */\n    legacyCryptoStore: CryptoStore;\n    /** The migrated rust crypto stack. */\n    rustCrypto: RustCrypto;\n    /** The logger to use */\n    logger: Logger;\n}): Promise<void> {\n    const { legacyCryptoStore, rustCrypto, logger } = args;\n    // Get the public cross-signing identity from rust.\n    const rustOwnIdentity = await rustCrypto.getOwnIdentity();\n    if (!rustOwnIdentity) {\n        // There are no cross-signing keys published server side, so nothing to do here.\n        return;\n    }\n    if (rustOwnIdentity.isVerified()) {\n        // The rust session already trusts the keys, so again, nothing to do.\n        return;\n    }\n\n    const legacyLocallyTrustedMSK = await getLegacyTrustedPublicMasterKeyBase64(legacyCryptoStore);\n    if (!legacyLocallyTrustedMSK) {\n        // The user never verified their identity in the legacy session, so nothing to do.\n        return;\n    }\n\n    const mskInfo: CrossSigningKeyInfo = JSON.parse(rustOwnIdentity.masterKey);\n    if (!mskInfo.keys || Object.keys(mskInfo.keys).length === 0) {\n        // This should not happen, but let's be safe\n        logger.error(\"Post Migration | Unexpected error: no master key in the rust session.\");\n        return;\n    }\n    const rustSeenMSK = Object.values(mskInfo.keys)[0];\n\n    if (rustSeenMSK && rustSeenMSK == legacyLocallyTrustedMSK) {\n        logger.info(`Post Migration: Migrating legacy trusted MSK: ${legacyLocallyTrustedMSK} to locally verified.`);\n        // Let's mark the user identity as locally verified as part of the migration.\n        await rustOwnIdentity!.verify();\n        // As well as marking the MSK as trusted, `OlmMachine.verify` returns a\n        // `SignatureUploadRequest` which will publish a signature of the MSK using\n        // this device. In this case, we ignore the request: since the user hasn't\n        // actually re-verified the MSK, we don't publish a new signature. (`.verify`\n        // doesn't store the signature, and if we drop the request here it won't be\n        // retried.)\n        //\n        // Not publishing the signature is consistent with the behaviour of\n        // matrix-crypto-sdk when the private key is imported via\n        // `importCrossSigningKeys`, and when the identity is verified via interactive\n        // verification.\n        //\n        // [Aside: device signatures on the MSK are not considered by the rust-sdk to\n        // establish the trust of the user identity so in any case, what we actually do\n        // here is somewhat moot.]\n    }\n}\n\n/**\n * Checks if the legacy store has a trusted public master key, and returns it if so.\n *\n * @param legacyStore - The legacy store to check.\n *\n * @returns `null` if there were no cross signing keys or if they were not trusted. The trusted public master key if it was.\n */\nasync function getLegacyTrustedPublicMasterKeyBase64(legacyStore: CryptoStore): Promise<string | null> {\n    let maybeTrustedKeys: string | null = null;\n    await legacyStore.doTxn(\"readonly\", \"account\", (txn) => {\n        legacyStore.getCrossSigningKeys(txn, (keys) => {\n            // can be an empty object after resetting cross-signing keys, see storeTrustedSelfKeys\n            const msk = keys?.master;\n            if (msk && Object.keys(msk.keys).length != 0) {\n                // `msk.keys` is an object with { [`ed25519:${pubKey}`]: pubKey }\n                maybeTrustedKeys = Object.values(msk.keys)[0];\n            }\n        });\n    });\n\n    return maybeTrustedKeys;\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,KAAKA,eAAe,MAAM,oCAAoC;AAGrE,SAA2BC,cAAc,QAAqC,yBAAyB;AACvG,SAASC,oBAAoB,QAAQ,2CAA2C;AAEhF,SAASC,uBAAuB,QAAQ,aAAa;AAIrD,SAASC,KAAK,QAAQ,aAAa;AACnC,SAASC,YAAY,QAAQ,cAAc;AAC3C,OAAOC,2BAA2B,MAAM,yCAAyC;AASjF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsBC,uBAAuBA,CAAAC,EAAA;EAAA,OAAAC,wBAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AA+G5C,SAAAF,yBAAA;EAAAA,wBAAA,GAAAG,iBAAA,CA/GM,WAAuCC,IA+B7C,EAAiB;IAAA,IAAAC,sBAAA;IACd,IAAM;MAAEC,MAAM;MAAEC;IAAY,CAAC,GAAGH,IAAI;;IAEpC;IACA,MAAMb,eAAe,CAACiB,SAAS,CAAC,CAAC;IAEjC,IAAI,QAAQD,WAAW,CAACE,YAAY,CAAC,CAAC,CAAC,EAAE;MACrC;MACA;IACJ;IAEA,MAAMF,WAAW,CAACG,OAAO,CAAC,CAAC;IAE3B,IAAIC,aAA4B,GAAG,IAAI;IACvC,MAAMJ,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACoB,aAAa,CAAC,EAAGC,GAAG,IAAK;MAC/EP,WAAW,CAACQ,UAAU,CAACD,GAAG,EAAGE,UAAU,IAAK;QACxCL,aAAa,GAAGK,UAAU;MAC9B,CAAC,CAAC;IACN,CAAC,CAAC;IACF,IAAI,CAACL,aAAa,EAAE;MAChB;MACAL,MAAM,CAACW,KAAK,CAAC,sEAAsE,CAAC;MACpF;IACJ;IAEA,IAAIC,cAAc,SAASX,WAAW,CAACY,iBAAiB,CAAC,CAAC;IAE1D,IAAID,cAAc,IAAI1B,cAAc,CAAC4B,wBAAwB,EAAE;MAC3D;MACA;IACJ;IAEA,IAAMC,YAAY,SAASC,gBAAgB,CAAChB,MAAM,EAAEC,WAAW,CAAC;IAChE,IAAMgB,eAAe,SAASC,mBAAmB,CAAClB,MAAM,EAAEC,WAAW,CAAC;IACtE,IAAMkB,UAAU,GAAG,CAAC,GAAGJ,YAAY,GAAGE,eAAe;IACrDjB,MAAM,CAACoB,IAAI,6CAAAC,MAAA,CACqCN,YAAY,wBAAAM,MAAA,CAAqBJ,eAAe,iCAChG,CAAC;IAED,IAAIK,SAAS,GAAG,CAAC;IACjB,SAASC,UAAUA,CAACC,KAAa,EAAQ;MAAA,IAAAC,qBAAA;MACrCH,SAAS,IAAIE,KAAK;MAClB,CAAAC,qBAAA,GAAA3B,IAAI,CAAC4B,+BAA+B,cAAAD,qBAAA,eAApCA,qBAAA,CAAAE,IAAA,CAAA7B,IAAI,EAAmCwB,SAAS,EAAEH,UAAU,CAAC;IACjE;IACAI,UAAU,CAAC,CAAC,CAAC;IAEb,IAAMK,SAAS,GAAG,IAAIC,WAAW,CAAC,CAAC,CAACC,MAAM,CAAChC,IAAI,CAACiC,eAAe,CAAC,CAACC,KAAK,CAAC,CAAC;IAExE,IAAIpB,cAAc,KAAK1B,cAAc,CAAC+C,WAAW,EAAE;MAC/CjC,MAAM,CAACoB,IAAI,CAAC,4DAA4D,CAAC;MACzE,MAAMc,eAAe,CAACpC,IAAI,CAACqC,IAAI,EAAErC,IAAI,CAACsC,MAAM,EAAEtC,IAAI,CAACuC,QAAQ,EAAEpC,WAAW,EAAE2B,SAAS,EAAE9B,IAAI,CAACwC,WAAW,EAAEtC,MAAM,CAAC;MAE9GY,cAAc,GAAG1B,cAAc,CAACqD,qBAAqB;MACrD,MAAMtC,WAAW,CAACuC,iBAAiB,CAAC5B,cAAc,CAAC;IACvD;IACAW,UAAU,CAAC,CAAC,CAAC;IAEb,IAAIX,cAAc,KAAK1B,cAAc,CAACqD,qBAAqB,EAAE;MACzDvC,MAAM,CAACoB,IAAI,mEAAAC,MAAA,CAC2DN,YAAY,2BAClF,CAAC;MACD,MAAM0B,kBAAkB,CAACzC,MAAM,EAAEC,WAAW,EAAE2B,SAAS,EAAE9B,IAAI,CAACwC,WAAW,EAAEf,UAAU,CAAC;MAEtFX,cAAc,GAAG1B,cAAc,CAACwD,qBAAqB;MACrD,MAAMzC,WAAW,CAACuC,iBAAiB,CAAC5B,cAAc,CAAC;IACvD;IAEA,IAAIA,cAAc,KAAK1B,cAAc,CAACwD,qBAAqB,EAAE;MACzD1C,MAAM,CAACoB,IAAI,sEAAAC,MAAA,CAC8DJ,eAAe,2BACxF,CAAC;MACD,MAAM0B,qBAAqB,CAAC3C,MAAM,EAAEC,WAAW,EAAE2B,SAAS,EAAE9B,IAAI,CAACwC,WAAW,EAAEf,UAAU,CAAC;MAEzFX,cAAc,GAAG1B,cAAc,CAAC4B,wBAAwB;MACxD,MAAMb,WAAW,CAACuC,iBAAiB,CAAC5B,cAAc,CAAC;IACvD;;IAEA;IACA,CAAAb,sBAAA,GAAAD,IAAI,CAAC4B,+BAA+B,cAAA3B,sBAAA,eAApCA,sBAAA,CAAA4B,IAAA,CAAA7B,IAAI,EAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9CE,MAAM,CAACoB,IAAI,CAAC,6CAA6C,CAAC;EAC9D,CAAC;EAAA,OAAA1B,wBAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEcsC,eAAeA,CAAAU,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,gBAAA,CAAAxD,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAuD,iBAAA;EAAAA,gBAAA,GAAAtD,iBAAA,CAA9B,WACIsC,IAAmD,EACnDC,MAAc,EACdC,QAAgB,EAChBpC,WAAwB,EACxB2B,SAAkC,EAClCU,WAAwC,EACxCtC,MAAc,EACD;IACb,IAAMoD,aAAa,GAAG,IAAInE,eAAe,CAACoE,iBAAiB,CAAC,CAAC;IAC7DD,aAAa,CAAChB,MAAM,GAAG,IAAInD,eAAe,CAACqE,MAAM,CAAClB,MAAM,CAAC;IACzDgB,aAAa,CAACf,QAAQ,GAAG,IAAIpD,eAAe,CAACsE,QAAQ,CAAClB,QAAQ,CAAC;IAE/D,MAAMpC,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACoB,aAAa,CAAC,EAAGC,GAAG,IAC1EP,WAAW,CAACQ,UAAU,CAACD,GAAG,EAAGgD,CAAC,IAAK;MAC/BJ,aAAa,CAACK,cAAc,GAAGD,CAAC,aAADA,CAAC,cAADA,CAAC,GAAI,EAAE;IAC1C,CAAC,CACL,CAAC;IAED,IAAME,WAAW,SAASC,4BAA4B,CAAC1D,WAAW,EAAE2B,SAAS,EAAE,oBAAoB,CAAC;;IAEpG;IACA;IACA;IACA,IAAI8B,WAAW,EAAE;MACb,IAAIE,cAAc,GAAG,KAAK;MAC1B,IAAIC,UAAgC,GAAG,IAAI;MAC3C,OAAO,CAACD,cAAc,EAAE;QACpB,IAAI;UACAC,UAAU,SAASzE,uBAAuB,CAAC+C,IAAI,CAAC;UAChDyB,cAAc,GAAG,IAAI;QACzB,CAAC,CAAC,OAAOE,CAAC,EAAE;UACR9D,MAAM,CAACoB,IAAI,CAAC,sEAAsE,EAAE0C,CAAC,CAAC;UACtF;UACA,MAAMzE,KAAK,CAAC,IAAI,CAAC;QACrB;MACJ;MACA,IAAIwE,UAAU,IAAIA,UAAU,CAACE,SAAS,IAAI,wCAAwC,EAAE;QAChF;QACA;QACA,IAAI;UAAA,IAAAC,qBAAA;UACA,IAAMC,aAAa,GAAGhF,eAAe,CAACiF,mBAAmB,CAACC,UAAU,CAACT,WAAW,CAAC;UACjF,IAAMU,SAAS,IAAAJ,qBAAA,GAAIH,UAAU,CAACQ,SAAS,cAAAL,qBAAA,uBAArBA,qBAAA,CAA8CM,UAAU;UAC1E,IAAMC,OAAO,GAAGN,aAAa,CAACO,iBAAiB,CAACC,eAAe,IAAIL,SAAS;UAC5E,IAAIG,OAAO,EAAE;YACTnB,aAAa,CAACsB,aAAa,GAAGb,UAAU,CAACc,OAAO;YAChDvB,aAAa,CAACwB,iBAAiB,GAAGlB,WAAW;UACjD,CAAC,MAAM;YACH1D,MAAM,CAACW,KAAK,CACR,oEAAoE,qBAAAU,MAAA,CACjD4C,aAAa,CAACO,iBAAiB,CAACC,eAAe,sBAAApD,MAAA,CAC/C+C,SAAS,CAChC,CAAC;UACL;QACJ,CAAC,CAAC,OAAON,CAAC,EAAE;UACR9D,MAAM,CAAC6E,IAAI,CAAC,gFAAgF,EAAEf,CAAC,CAAC;QACpG;MACJ;IACJ;IAEAV,aAAa,CAAC0B,4BAA4B,SAASnB,4BAA4B,CAAC1D,WAAW,EAAE2B,SAAS,EAAE,QAAQ,CAAC;IACjHwB,aAAa,CAAC2B,iCAAiC,SAASpB,4BAA4B,CAChF1D,WAAW,EACX2B,SAAS,EACT,cACJ,CAAC;IACDwB,aAAa,CAAC4B,iCAAiC,SAASrB,4BAA4B,CAChF1D,WAAW,EACX2B,SAAS,EACT,cACJ,CAAC;IACD,MAAM3C,eAAe,CAACgG,SAAS,CAAC/C,eAAe,CAACkB,aAAa,EAAExB,SAAS,EAAEU,WAAW,EAAEtC,MAAM,CAAC;EAClG,CAAC;EAAA,OAAAmD,gBAAA,CAAAxD,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEcoB,gBAAgBA,CAAAkE,GAAA,EAAAC,GAAA;EAAA,OAAAC,iBAAA,CAAAzF,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAwF,kBAAA;EAAAA,iBAAA,GAAAvF,iBAAA,CAA/B,WAAgCG,MAAc,EAAEC,WAAwB,EAAmB;IACvFD,MAAM,CAACW,KAAK,CAAC,sCAAsC,CAAC;IACpD,IAAI0E,SAAiB;IACrB,MAAMpF,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACmG,cAAc,CAAC,EAAG9E,GAAG,IAC3EP,WAAW,CAACsF,qBAAqB,CAAC/E,GAAG,EAAGgF,CAAC,IAAMH,SAAS,GAAGG,CAAE,CACjE,CAAC;IACD,OAAOH,SAAS;EACpB,CAAC;EAAA,OAAAD,iBAAA,CAAAzF,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEcsB,mBAAmBA,CAAAuE,GAAA,EAAAC,IAAA;EAAA,OAAAC,oBAAA,CAAAhG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAA+F,qBAAA;EAAAA,oBAAA,GAAA9F,iBAAA,CAAlC,WAAmCG,MAAc,EAAEC,WAAwB,EAAmB;IAC1FD,MAAM,CAACW,KAAK,CAAC,yCAAyC,CAAC;IACvD,aAAaV,WAAW,CAAC2F,iCAAiC,CAAC,CAAC;EAChE,CAAC;EAAA,OAAAD,oBAAA,CAAAhG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEc6C,kBAAkBA,CAAAoD,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,mBAAA,CAAAvG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAsG,oBAAA;EAAAA,mBAAA,GAAArG,iBAAA,CAAjC,WACIG,MAAc,EACdC,WAAwB,EACxB2B,SAAqB,EACrBU,WAAwC,EACxC6D,WAAwC,EAC3B;IACb;IACA,OAAO,IAAI,EAAE;MACT,IAAMC,KAAK,SAASnG,WAAW,CAACoG,wBAAwB,CAAC,CAAC;MAC1D,IAAID,KAAK,KAAK,IAAI,EAAE;MAEpBpG,MAAM,CAACW,KAAK,uBAAAU,MAAA,CAAuB+E,KAAK,CAACE,MAAM,kBAAe,CAAC;MAC/D,IAAMlD,aAA+C,GAAG,EAAE;MAC1D,KAAK,IAAMmD,OAAO,IAAIH,KAAK,EAAE;QACzB,IAAMI,cAAc,GAAG,IAAIvH,eAAe,CAACwH,cAAc,CAAC,CAAC;QAC3DD,cAAc,CAACE,SAAS,GAAGH,OAAO,CAACI,SAAU;QAC7CH,cAAc,CAACI,MAAM,GAAGL,OAAO,CAACA,OAAQ;QACxCC,cAAc,CAACK,WAAW,GAAGL,cAAc,CAACM,YAAY,GAAG,IAAIC,IAAI,CAACR,OAAO,CAACS,qBAAsB,CAAC;QACnG5D,aAAa,CAAC6D,IAAI,CAACT,cAAc,CAAC;MACtC;MAEA,MAAMvH,eAAe,CAACgG,SAAS,CAACxC,kBAAkB,CAACW,aAAa,EAAExB,SAAS,EAAEU,WAAW,EAAEtC,MAAM,CAAC;MACjG,MAAMC,WAAW,CAACiH,2BAA2B,CAACd,KAAK,CAAC;MACpDD,WAAW,CAACC,KAAK,CAACE,MAAM,CAAC;IAC7B;EACJ,CAAC;EAAA,OAAAJ,mBAAA,CAAAvG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEc+C,qBAAqBA,CAAAwE,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,sBAAA,CAAA7H,KAAA,OAAAC,SAAA;AAAA;AA0EpC;AACA;AACA;AACA;AACA;AAJA,SAAA4H,uBAAA;EAAAA,sBAAA,GAAA3H,iBAAA,CA1EA,WACIG,MAAc,EACdC,WAAwB,EACxB2B,SAAqB,EACrBU,WAAwC,EACxC6D,WAAwC,EAC3B;IACb;IACA,OAAO,IAAI,EAAE;MACT,IAAMC,KAAK,SAASnG,WAAW,CAACwH,oCAAoC,CAAC,CAAC;MACtE,IAAIrB,KAAK,KAAK,IAAI,EAAE;MAEpBpG,MAAM,CAACW,KAAK,uBAAAU,MAAA,CAAuB+E,KAAK,CAACE,MAAM,qBAAkB,CAAC;MAClE,IAAMlD,aAA2D,GAAG,EAAE;MACtE,KAAK,IAAMmD,OAAO,IAAIH,KAAK,EAAE;QAAA,IAAAsB,qBAAA;QACzB,IAAMC,WAAW,GAAGpB,OAAO,CAACoB,WAAY;QAExC,IAAMnB,cAAc,GAAG,IAAIvH,eAAe,CAAC2I,0BAA0B,CAAC,CAAC;QACvEpB,cAAc,CAACI,MAAM,GAAGe,WAAW,CAACpB,OAAO;QAC3CC,cAAc,CAACqB,MAAM,GAAG,IAAI5I,eAAe,CAAC6I,MAAM,CAACH,WAAW,CAACI,OAAO,CAAC;QACvEvB,cAAc,CAACE,SAAS,GAAGH,OAAO,CAACG,SAAS;QAC5CF,cAAc,CAACwB,gBAAgB,IAAAN,qBAAA,GAAGC,WAAW,CAACM,WAAW,cAAAP,qBAAA,uBAAvBA,qBAAA,CAA0B,SAAS,CAAC;QACtElB,cAAc,CAAC0B,QAAQ,GAAG,CAAC3B,OAAO,CAAC4B,WAAW;;QAE9C;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA3B,cAAc,CAAC4B,QAAQ,GAAGT,WAAW,CAACU,SAAS,KAAK,IAAI;QAExDjF,aAAa,CAAC6D,IAAI,CAACT,cAAc,CAAC;MACtC;MAEA,MAAMvH,eAAe,CAACgG,SAAS,CAACtC,qBAAqB,CAACS,aAAa,EAAExB,SAAS,EAAEU,WAAW,EAAEtC,MAAM,CAAC;MACpG,MAAMC,WAAW,CAACqI,uCAAuC,CAAClC,KAAK,CAAC;MAChED,WAAW,CAACC,KAAK,CAACE,MAAM,CAAC;IAC7B;EACJ,CAAC;EAAA,OAAAkB,sBAAA,CAAA7H,KAAA,OAAAC,SAAA;AAAA;AAOD,gBAAsB2I,mCAAmCA,CAAAC,IAAA;EAAA,OAAAC,oCAAA,CAAA9I,KAAA,OAAAC,SAAA;AAAA;AA2DxD,SAAA6I,qCAAA;EAAAA,oCAAA,GAAA5I,iBAAA,CA3DM,WAAA6I,IAAA,EAaW;IAAA,IAbwC;MACtD1I,MAAM;MACNC,WAAW;MACX0I;IAUJ,CAAC,GAAAD,IAAA;IACG,IAAI,QAAQzI,WAAW,CAACE,YAAY,CAAC,CAAC,CAAC,EAAE;MACrC;MACA;IACJ;IAEA,IAAMS,cAAc,SAASX,WAAW,CAACY,iBAAiB,CAAC,CAAC;IAE5D,IAAID,cAAc,IAAI1B,cAAc,CAAC0J,sBAAsB,EAAE;MACzD;MACA;IACJ;IAEA,IAAIC,KAA2C,GAAG,CAAC,CAAC;IAEpD,MAAM5I,WAAW,CAACK,KAAK,CAAC,WAAW,EAAE,CAACnB,oBAAoB,CAAC2J,WAAW,CAAC,EAAGtI,GAAG,IAAK;MAC9EP,WAAW,CAAC8I,gBAAgB,CAACvI,GAAG,EAAGwI,MAAM,IAAK;QAC1CH,KAAK,GAAGG,MAAM;MAClB,CAAC,CAAC;IACN,CAAC,CAAC;IAEFhJ,MAAM,CAACW,KAAK,cAAAU,MAAA,CAAc4H,MAAM,CAACC,IAAI,CAACL,KAAK,CAAC,CAACvC,MAAM,2BAAwB,CAAC;IAC5E,KAAK,IAAM,CAACuB,MAAM,EAAEsB,cAAc,CAAC,IAAIF,MAAM,CAACG,OAAO,CAACP,KAAK,CAAC,EAAE;MAC1D,IAAI;QACA,IAAMQ,YAAY,GAAG,IAAIpK,eAAe,CAACqK,YAAY,CAAC,CAAC;QAEvD,IAAIH,cAAc,CAACpF,SAAS,KAAK,sBAAsB,EAAE;UACrD/D,MAAM,CAAC6E,IAAI,SAAAxD,MAAA,CAASwG,MAAM,6CAAAxG,MAAA,CAA0C8H,cAAc,CAACpF,SAAS,CAAE,CAAC;UAC/F;QACJ;QACAsF,YAAY,CAACtF,SAAS,GAAG9E,eAAe,CAACsK,mBAAmB,CAACC,eAAe;QAC5EH,YAAY,CAACI,uBAAuB,GAAGN,cAAc,CAACO,kBAAkB;QACxEL,YAAY,CAACM,6BAA6B,GAAGR,cAAc,CAACS,oBAAoB;QAChF,MAAMjB,UAAU,CAACkB,eAAe,CAAC,IAAI5K,eAAe,CAAC6I,MAAM,CAACD,MAAM,CAAC,EAAEwB,YAAY,CAAC;;QAElF;QACA;QACA;QACA;MACJ,CAAC,CAAC,OAAOvF,CAAC,EAAE;QACR9D,MAAM,CAAC6E,IAAI,SAAAxD,MAAA,CAASwG,MAAM,0BAAAxG,MAAA,CAAuByI,IAAI,CAACC,SAAS,CAACZ,cAAc,CAAC,0BAAA9H,MAAA,CAAuByC,CAAC,CAAE,CAAC;MAC9G;IACJ;IAEA9D,MAAM,CAACW,KAAK,oCAAoC,CAAC;IACjD,MAAMV,WAAW,CAACuC,iBAAiB,CAACtD,cAAc,CAAC0J,sBAAsB,CAAC;EAC9E,CAAC;EAAA,OAAAH,oCAAA,CAAA9I,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEc+D,4BAA4BA,CAAAqG,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,6BAAA,CAAAxK,KAAA,OAAAC,SAAA;AAAA;AAqB3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAlBA,SAAAuK,8BAAA;EAAAA,6BAAA,GAAAtK,iBAAA,CArBA,WACII,WAAwB,EACxB8B,eAAwC,EACxCqI,IAAY,EACe;IAC3B,IAAMC,GAAG,SAAS,IAAIC,OAAO,CAAOC,OAAO,IAAK;MAC5CtK,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACoB,aAAa,CAAC,EAAGC,GAAG,IAAK;QACzEP,WAAW,CAACuK,wBAAwB,CAAChK,GAAG,EAAE+J,OAAO,EAAEH,IAAoC,CAAC;MAC5F,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,IAAIC,GAAG,IAAIA,GAAG,CAACI,UAAU,IAAIJ,GAAG,CAACK,EAAE,IAAIL,GAAG,CAACM,GAAG,EAAE;MAC5C,aAAapL,2BAA2B,CAAC8K,GAAG,EAAsCtI,eAAe,EAAEqI,IAAI,CAAC;IAC5G,CAAC,MAAM,IAAIC,GAAG,YAAYO,UAAU,EAAE;MAClC;MACA,OAAOtL,YAAY,CAAC+K,GAAG,CAAC;IAC5B,CAAC,MAAM;MACH,OAAOQ,SAAS;IACpB;EACJ,CAAC;EAAA,OAAAV,6BAAA,CAAAxK,KAAA,OAAAC,SAAA;AAAA;AAqBD,gBAAsBkL,+BAA+BA,CAAAC,IAAA;EAAA,OAAAC,gCAAA,CAAArL,KAAA,OAAAC,SAAA;AAAA;;AAwDrD;AACA;AACA;AACA;AACA;AACA;AACA;AANA,SAAAoL,iCAAA;EAAAA,gCAAA,GAAAnL,iBAAA,CAxDO,WAA+CC,IAOrD,EAAiB;IACd,IAAM;MAAEmL,iBAAiB;MAAEC,UAAU;MAAElL;IAAO,CAAC,GAAGF,IAAI;IACtD;IACA,IAAMqL,eAAe,SAASD,UAAU,CAACE,cAAc,CAAC,CAAC;IACzD,IAAI,CAACD,eAAe,EAAE;MAClB;MACA;IACJ;IACA,IAAIA,eAAe,CAACE,UAAU,CAAC,CAAC,EAAE;MAC9B;MACA;IACJ;IAEA,IAAMC,uBAAuB,SAASC,qCAAqC,CAACN,iBAAiB,CAAC;IAC9F,IAAI,CAACK,uBAAuB,EAAE;MAC1B;MACA;IACJ;IAEA,IAAME,OAA4B,GAAG1B,IAAI,CAAC2B,KAAK,CAACN,eAAe,CAACO,SAAS,CAAC;IAC1E,IAAI,CAACF,OAAO,CAACtC,IAAI,IAAID,MAAM,CAACC,IAAI,CAACsC,OAAO,CAACtC,IAAI,CAAC,CAAC5C,MAAM,KAAK,CAAC,EAAE;MACzD;MACAtG,MAAM,CAAC2L,KAAK,CAAC,uEAAuE,CAAC;MACrF;IACJ;IACA,IAAMC,WAAW,GAAG3C,MAAM,CAAC4C,MAAM,CAACL,OAAO,CAACtC,IAAI,CAAC,CAAC,CAAC,CAAC;IAElD,IAAI0C,WAAW,IAAIA,WAAW,IAAIN,uBAAuB,EAAE;MACvDtL,MAAM,CAACoB,IAAI,kDAAAC,MAAA,CAAkDiK,uBAAuB,0BAAuB,CAAC;MAC5G;MACA,MAAMH,eAAe,CAAEW,MAAM,CAAC,CAAC;MAC/B;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;IACJ;EACJ,CAAC;EAAA,OAAAd,gCAAA,CAAArL,KAAA,OAAAC,SAAA;AAAA;AAAA,SASc2L,qCAAqCA,CAAAQ,IAAA;EAAA,OAAAC,oCAAA,CAAArM,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAoM,qCAAA;EAAAA,oCAAA,GAAAnM,iBAAA,CAApD,WAAqDI,WAAwB,EAA0B;IACnG,IAAIgM,gBAA+B,GAAG,IAAI;IAC1C,MAAMhM,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,SAAS,EAAGE,GAAG,IAAK;MACpDP,WAAW,CAACiM,mBAAmB,CAAC1L,GAAG,EAAG0I,IAAI,IAAK;QAC3C;QACA,IAAMiD,GAAG,GAAGjD,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEkD,MAAM;QACxB,IAAID,GAAG,IAAIlD,MAAM,CAACC,IAAI,CAACiD,GAAG,CAACjD,IAAI,CAAC,CAAC5C,MAAM,IAAI,CAAC,EAAE;UAC1C;UACA2F,gBAAgB,GAAGhD,MAAM,CAAC4C,MAAM,CAACM,GAAG,CAACjD,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD;MACJ,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,OAAO+C,gBAAgB;EAC3B,CAAC;EAAA,OAAAD,oCAAA,CAAArM,KAAA,OAAAC,SAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"libolm_migration.js","names":["RustSdkCryptoJs","MigrationState","IndexedDBCryptoStore","requestKeyBackupVersion","sleep","encodeBase64","decryptAESSecretStorageItem","migrateFromLegacyCrypto","_x","_migrateFromLegacyCrypto","apply","arguments","_asyncToGenerator","args","_args$legacyMigration2","logger","legacyStore","initAsync","containsData","startup","accountPickle","doTxn","STORE_ACCOUNT","txn","getAccount","acctPickle","debug","migrationState","getMigrationState","MEGOLM_SESSIONS_MIGRATED","nOlmSessions","countOlmSessions","nMegolmSessions","countMegolmSessions","totalSteps","info","concat","stepsDone","onProgress","steps","_args$legacyMigration","legacyMigrationProgressListener","call","pickleKey","TextEncoder","encode","legacyPickleKey","slice","NOT_STARTED","migrateBaseData","http","userId","deviceId","storeHandle","INITIAL_DATA_MIGRATED","setMigrationState","migrateOlmSessions","OLM_SESSIONS_MIGRATED","migrateMegolmSessions","_x2","_x3","_x4","_x5","_x6","_x7","_x8","_migrateBaseData","migrationData","BaseMigrationData","UserId","DeviceId","a","pickledAccount","recoveryKey","getAndDecryptCachedSecretKey","backupCallDone","backupInfo","e","algorithm","_backupInfo$auth_data","decryptionKey","BackupDecryptionKey","fromBase64","publicKey","auth_data","public_key","isValid","megolmV1PublicKey","publicKeyBase64","backupVersion","version","backupRecoveryKey","warn","privateCrossSigningMasterKey","privateCrossSigningSelfSigningKey","privateCrossSigningUserSigningKey","Migration","_x9","_x0","_countOlmSessions","nSessions","STORE_SESSIONS","countEndToEndSessions","n","_x1","_x10","_countMegolmSessions","countEndToEndInboundGroupSessions","_x11","_x12","_x13","_x14","_x15","_migrateOlmSessions","onBatchDone","batch","getEndToEndSessionsBatch","length","session","pickledSession","PickledSession","senderKey","deviceKey","pickle","lastUseTime","creationTime","Date","lastReceivedMessageTs","push","deleteEndToEndSessionsBatch","_x16","_x17","_x18","_x19","_x20","_migrateMegolmSessions","getEndToEndInboundGroupSessionsBatch","_sessionData$keysClai","sessionData","PickledInboundGroupSession","roomId","RoomId","room_id","senderSigningKey","keysClaimed","backedUp","needsBackup","imported","untrusted","deleteEndToEndInboundGroupSessionsBatch","migrateRoomSettingsFromLegacyCrypto","_x21","_migrateRoomSettingsFromLegacyCrypto","_ref","olmMachine","ROOM_SETTINGS_MIGRATED","rooms","STORE_ROOMS","getEndToEndRooms","result","Object","keys","_ref4","entries","_ref3","_slicedToArray","legacySettings","rustSettings","RoomSettings","EncryptionAlgorithm","MegolmV1AesSha2","sessionRotationPeriodMs","rotation_period_ms","sessionRotationPeriodMessages","rotation_period_msgs","setRoomSettings","JSON","stringify","_x22","_x23","_x24","_getAndDecryptCachedSecretKey","name","key","Promise","resolve","getSecretStorePrivateKey","ciphertext","iv","mac","Uint8Array","undefined","migrateLegacyLocalTrustIfNeeded","_x25","_migrateLegacyLocalTrustIfNeeded","legacyCryptoStore","rustCrypto","rustOwnIdentity","getOwnIdentity","isVerified","legacyLocallyTrustedMSK","getLegacyTrustedPublicMasterKeyBase64","mskInfo","parse","masterKey","error","rustSeenMSK","values","verify","_x26","_getLegacyTrustedPublicMasterKeyBase","maybeTrustedKeys","getCrossSigningKeys","msk","master"],"sources":["../../src/rust-crypto/libolm_migration.ts"],"sourcesContent":["/*\nCopyright 2023-2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport { type Logger } from \"../logger.ts\";\nimport { type CryptoStore, MigrationState, type SecretStorePrivateKeys } from \"../crypto/store/base.ts\";\nimport { IndexedDBCryptoStore } from \"../crypto/store/indexeddb-crypto-store.ts\";\nimport { type IHttpOpts, type MatrixHttpApi } from \"../http-api/index.ts\";\nimport { requestKeyBackupVersion } from \"./backup.ts\";\nimport { type CrossSigningKeyInfo, type Curve25519AuthData } from \"../crypto-api/index.ts\";\nimport { type RustCrypto } from \"./rust-crypto.ts\";\nimport { type KeyBackupInfo } from \"../crypto-api/keybackup.ts\";\nimport { sleep } from \"../utils.ts\";\nimport { encodeBase64 } from \"../base64.ts\";\nimport decryptAESSecretStorageItem from \"../utils/decryptAESSecretStorageItem.ts\";\nimport { type AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\n\ninterface LegacyRoomEncryption {\n    algorithm: string;\n    rotation_period_ms?: number;\n    rotation_period_msgs?: number;\n}\n\n/**\n * Determine if any data needs migrating from the legacy store, and do so.\n *\n * This migrates the base account data, and olm and megolm sessions. It does *not* migrate the room list, which should\n * happen after an `OlmMachine` is created, via {@link migrateRoomSettingsFromLegacyCrypto}.\n *\n * @param args - Arguments object.\n */\nexport async function migrateFromLegacyCrypto(args: {\n    /** A `Logger` instance that will be used for debug output. */\n    logger: Logger;\n\n    /**\n     * Low-level HTTP interface: used to make outgoing requests required by the rust SDK.\n     * We expect it to set the access token, etc.\n     */\n    http: MatrixHttpApi<IHttpOpts & { onlyData: true }>;\n\n    /** Store to migrate data from. */\n    legacyStore: CryptoStore;\n\n    /** Pickle key for `legacyStore`. */\n    legacyPickleKey?: string;\n\n    /** Local user's User ID. */\n    userId: string;\n\n    /** Local user's Device ID. */\n    deviceId: string;\n\n    /** Rust crypto store to migrate data into. */\n    storeHandle: RustSdkCryptoJs.StoreHandle;\n\n    /**\n     * A callback which will receive progress updates on migration from `legacyStore`.\n     *\n     * Called with (-1, -1) to mark the end of migration.\n     */\n    legacyMigrationProgressListener?: (progress: number, total: number) => void;\n}): Promise<void> {\n    const { logger, legacyStore } = args;\n\n    // initialise the rust matrix-sdk-crypto-wasm, if it hasn't already been done\n    await RustSdkCryptoJs.initAsync();\n\n    if (!(await legacyStore.containsData())) {\n        // This store was never used. Nothing to migrate.\n        return;\n    }\n\n    await legacyStore.startup();\n\n    let accountPickle: string | null = null;\n    await legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n        legacyStore.getAccount(txn, (acctPickle) => {\n            accountPickle = acctPickle;\n        });\n    });\n    if (!accountPickle) {\n        // This store is not properly set up. Nothing to migrate.\n        logger.debug(\"Legacy crypto store is not set up (no account found). Not migrating.\");\n        return;\n    }\n\n    let migrationState = await legacyStore.getMigrationState();\n\n    if (migrationState >= MigrationState.MEGOLM_SESSIONS_MIGRATED) {\n        // All migration is done for now. The room list comes later, once we have an OlmMachine.\n        return;\n    }\n\n    const nOlmSessions = await countOlmSessions(logger, legacyStore);\n    const nMegolmSessions = await countMegolmSessions(logger, legacyStore);\n    const totalSteps = 1 + nOlmSessions + nMegolmSessions;\n    logger.info(\n        `Migrating data from legacy crypto store. ${nOlmSessions} olm sessions and ${nMegolmSessions} megolm sessions to migrate.`,\n    );\n\n    let stepsDone = 0;\n    function onProgress(steps: number): void {\n        stepsDone += steps;\n        args.legacyMigrationProgressListener?.(stepsDone, totalSteps);\n    }\n    onProgress(0);\n\n    const pickleKey = new TextEncoder().encode(args.legacyPickleKey).slice();\n\n    if (migrationState === MigrationState.NOT_STARTED) {\n        logger.info(\"Migrating data from legacy crypto store. Step 1: base data\");\n        await migrateBaseData(args.http, args.userId, args.deviceId, legacyStore, pickleKey, args.storeHandle, logger);\n\n        migrationState = MigrationState.INITIAL_DATA_MIGRATED;\n        await legacyStore.setMigrationState(migrationState);\n    }\n    onProgress(1);\n\n    if (migrationState === MigrationState.INITIAL_DATA_MIGRATED) {\n        logger.info(\n            `Migrating data from legacy crypto store. Step 2: olm sessions (${nOlmSessions} sessions to migrate).`,\n        );\n        await migrateOlmSessions(logger, legacyStore, pickleKey, args.storeHandle, onProgress);\n\n        migrationState = MigrationState.OLM_SESSIONS_MIGRATED;\n        await legacyStore.setMigrationState(migrationState);\n    }\n\n    if (migrationState === MigrationState.OLM_SESSIONS_MIGRATED) {\n        logger.info(\n            `Migrating data from legacy crypto store. Step 3: megolm sessions (${nMegolmSessions} sessions to migrate).`,\n        );\n        await migrateMegolmSessions(logger, legacyStore, pickleKey, args.storeHandle, onProgress);\n\n        migrationState = MigrationState.MEGOLM_SESSIONS_MIGRATED;\n        await legacyStore.setMigrationState(migrationState);\n    }\n\n    // Migration is done.\n    args.legacyMigrationProgressListener?.(-1, -1);\n    logger.info(\"Migration from legacy crypto store complete\");\n}\n\nasync function migrateBaseData(\n    http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n    userId: string,\n    deviceId: string,\n    legacyStore: CryptoStore,\n    pickleKey: Uint8Array<ArrayBuffer>,\n    storeHandle: RustSdkCryptoJs.StoreHandle,\n    logger: Logger,\n): Promise<void> {\n    const migrationData = new RustSdkCryptoJs.BaseMigrationData();\n    migrationData.userId = new RustSdkCryptoJs.UserId(userId);\n    migrationData.deviceId = new RustSdkCryptoJs.DeviceId(deviceId);\n\n    await legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) =>\n        legacyStore.getAccount(txn, (a) => {\n            migrationData.pickledAccount = a ?? \"\";\n        }),\n    );\n\n    const recoveryKey = await getAndDecryptCachedSecretKey(legacyStore, pickleKey, \"m.megolm_backup.v1\");\n\n    // If we have a backup recovery key, we need to try to figure out which backup version it is for.\n    // All we can really do is ask the server for the most recent version and check if the cached key we have matches.\n    // It is possible that the backup has changed since last time his session was opened.\n    if (recoveryKey) {\n        let backupCallDone = false;\n        let backupInfo: KeyBackupInfo | null = null;\n        while (!backupCallDone) {\n            try {\n                backupInfo = await requestKeyBackupVersion(http);\n                backupCallDone = true;\n            } catch (e) {\n                logger.info(\"Failed to get backup version during migration, retrying in 2 seconds\", e);\n                // Retry until successful, use simple constant delay\n                await sleep(2000);\n            }\n        }\n        if (backupInfo && backupInfo.algorithm == \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            // check if the recovery key matches, as the active backup version may have changed since the key was cached\n            // and the migration started.\n            try {\n                const decryptionKey = RustSdkCryptoJs.BackupDecryptionKey.fromBase64(recoveryKey);\n                const publicKey = (backupInfo.auth_data as Curve25519AuthData)?.public_key;\n                const isValid = decryptionKey.megolmV1PublicKey.publicKeyBase64 == publicKey;\n                if (isValid) {\n                    migrationData.backupVersion = backupInfo.version;\n                    migrationData.backupRecoveryKey = recoveryKey;\n                } else {\n                    logger.debug(\n                        \"The backup key to migrate does not match the active backup version\",\n                        `Cached pub key: ${decryptionKey.megolmV1PublicKey.publicKeyBase64}`,\n                        `Active pub key: ${publicKey}`,\n                    );\n                }\n            } catch (e) {\n                logger.warn(\"Failed to check if the backup key to migrate matches the active backup version\", e);\n            }\n        }\n    }\n\n    migrationData.privateCrossSigningMasterKey = await getAndDecryptCachedSecretKey(legacyStore, pickleKey, \"master\");\n    migrationData.privateCrossSigningSelfSigningKey = await getAndDecryptCachedSecretKey(\n        legacyStore,\n        pickleKey,\n        \"self_signing\",\n    );\n    migrationData.privateCrossSigningUserSigningKey = await getAndDecryptCachedSecretKey(\n        legacyStore,\n        pickleKey,\n        \"user_signing\",\n    );\n    await RustSdkCryptoJs.Migration.migrateBaseData(migrationData, pickleKey, storeHandle, logger);\n}\n\nasync function countOlmSessions(logger: Logger, legacyStore: CryptoStore): Promise<number> {\n    logger.debug(\"Counting olm sessions to be migrated\");\n    let nSessions: number;\n    await legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_SESSIONS], (txn) =>\n        legacyStore.countEndToEndSessions(txn, (n) => (nSessions = n)),\n    );\n    return nSessions!;\n}\n\nasync function countMegolmSessions(logger: Logger, legacyStore: CryptoStore): Promise<number> {\n    logger.debug(\"Counting megolm sessions to be migrated\");\n    return await legacyStore.countEndToEndInboundGroupSessions();\n}\n\nasync function migrateOlmSessions(\n    logger: Logger,\n    legacyStore: CryptoStore,\n    pickleKey: Uint8Array,\n    storeHandle: RustSdkCryptoJs.StoreHandle,\n    onBatchDone: (batchSize: number) => void,\n): Promise<void> {\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n        const batch = await legacyStore.getEndToEndSessionsBatch();\n        if (batch === null) return;\n\n        logger.debug(`Migrating batch of ${batch.length} olm sessions`);\n        const migrationData: RustSdkCryptoJs.PickledSession[] = [];\n        for (const session of batch) {\n            const pickledSession = new RustSdkCryptoJs.PickledSession();\n            pickledSession.senderKey = session.deviceKey!;\n            pickledSession.pickle = session.session!;\n            pickledSession.lastUseTime = pickledSession.creationTime = new Date(session.lastReceivedMessageTs!);\n            migrationData.push(pickledSession);\n        }\n\n        await RustSdkCryptoJs.Migration.migrateOlmSessions(migrationData, pickleKey, storeHandle, logger);\n        await legacyStore.deleteEndToEndSessionsBatch(batch);\n        onBatchDone(batch.length);\n    }\n}\n\nasync function migrateMegolmSessions(\n    logger: Logger,\n    legacyStore: CryptoStore,\n    pickleKey: Uint8Array,\n    storeHandle: RustSdkCryptoJs.StoreHandle,\n    onBatchDone: (batchSize: number) => void,\n): Promise<void> {\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n        const batch = await legacyStore.getEndToEndInboundGroupSessionsBatch();\n        if (batch === null) return;\n\n        logger.debug(`Migrating batch of ${batch.length} megolm sessions`);\n        const migrationData: RustSdkCryptoJs.PickledInboundGroupSession[] = [];\n        for (const session of batch) {\n            const sessionData = session.sessionData!;\n\n            const pickledSession = new RustSdkCryptoJs.PickledInboundGroupSession();\n            pickledSession.pickle = sessionData.session;\n            pickledSession.roomId = new RustSdkCryptoJs.RoomId(sessionData.room_id);\n            pickledSession.senderKey = session.senderKey;\n            pickledSession.senderSigningKey = sessionData.keysClaimed?.[\"ed25519\"];\n            pickledSession.backedUp = !session.needsBackup;\n\n            // The Rust SDK `imported` flag is used to indicate the authenticity status of a Megolm\n            // session, which tells us whether we can reliably tell which Olm device is the owner\n            // (creator) of the session.\n            //\n            // If `imported` is true, then we have no cryptographic proof that the session is owned\n            // by the device with the identity key `senderKey`.\n            //\n            // Only Megolm sessions received directly from the owning device via an encrypted\n            // `m.room_key` to-device message should have `imported` flag set to false. Megolm\n            // sessions received by any other currently available means (i.e. from a\n            // `m.forwarded_room_key`, from v1 asymmetric server-side key backup, imported from a\n            // file, etc) should have the `imported` flag set to true.\n            //\n            // Messages encrypted with such Megolm sessions will have a grey shield in the UI\n            // (\"Authenticity of this message cannot be guaranteed\").\n            //\n            // However, we don't want to bluntly mark all sessions as `imported` during migration\n            // because users will suddenly start seeing all their historic messages decorated with a\n            // grey shield, which would be seen as a non-actionable regression.\n            //\n            // In the legacy crypto stack, the flag encoding similar information was called\n            // `InboundGroupSessionData.untrusted`. The value of this flag was set as follows:\n            //\n            // - For outbound Megolm sessions created by our own device, `untrusted` is `undefined`.\n            // - For Megolm sessions received via a `m.room_key` to-device message, `untrusted` is\n            //   `undefined`.\n            // - For Megolm sessions received via a `m.forwarded_room_key` to-device message,\n            //   `untrusted` is `true`.\n            // - For Megolm sessions imported from a (v1 asymmetric / \"legacy\") server-side key\n            //   backup, `untrusted` is `true`.\n            // - For Megolm sessions imported from a file, untrusted is `undefined`.\n            //\n            // The main difference between the legacy crypto stack and the Rust crypto stack is that\n            // the Rust stack considers sessions imported from a file as `imported` (not\n            // authenticated). This is because the Megolm session export file format does not\n            // encode this authenticity information.\n            //\n            // Given this migration is only a one-time thing, we make a concession to accept the\n            // loss of information in this case, to avoid degrading UX in a non-actionable way.\n            pickledSession.imported = sessionData.untrusted === true;\n\n            migrationData.push(pickledSession);\n        }\n\n        await RustSdkCryptoJs.Migration.migrateMegolmSessions(migrationData, pickleKey, storeHandle, logger);\n        await legacyStore.deleteEndToEndInboundGroupSessionsBatch(batch);\n        onBatchDone(batch.length);\n    }\n}\n\n/**\n * Determine if any room settings need migrating from the legacy store, and do so.\n *\n * @param args - Arguments object.\n */\nexport async function migrateRoomSettingsFromLegacyCrypto({\n    logger,\n    legacyStore,\n    olmMachine,\n}: {\n    /** A `Logger` instance that will be used for debug output. */\n    logger: Logger;\n\n    /** Store to migrate data from. */\n    legacyStore: CryptoStore;\n\n    /** OlmMachine to store the new data on. */\n    olmMachine: RustSdkCryptoJs.OlmMachine;\n}): Promise<void> {\n    if (!(await legacyStore.containsData())) {\n        // This store was never used. Nothing to migrate.\n        return;\n    }\n\n    const migrationState = await legacyStore.getMigrationState();\n\n    if (migrationState >= MigrationState.ROOM_SETTINGS_MIGRATED) {\n        // We've already migrated the room settings.\n        return;\n    }\n\n    let rooms: Record<string, LegacyRoomEncryption> = {};\n\n    await legacyStore.doTxn(\"readwrite\", [IndexedDBCryptoStore.STORE_ROOMS], (txn) => {\n        legacyStore.getEndToEndRooms(txn, (result) => {\n            rooms = result;\n        });\n    });\n\n    logger.debug(`Migrating ${Object.keys(rooms).length} sets of room settings`);\n    for (const [roomId, legacySettings] of Object.entries(rooms)) {\n        try {\n            const rustSettings = new RustSdkCryptoJs.RoomSettings();\n\n            if (legacySettings.algorithm !== \"m.megolm.v1.aes-sha2\") {\n                logger.warn(`Room ${roomId}: ignoring room with invalid algorithm ${legacySettings.algorithm}`);\n                continue;\n            }\n            rustSettings.algorithm = RustSdkCryptoJs.EncryptionAlgorithm.MegolmV1AesSha2;\n            rustSettings.sessionRotationPeriodMs = legacySettings.rotation_period_ms;\n            rustSettings.sessionRotationPeriodMessages = legacySettings.rotation_period_msgs;\n            await olmMachine.setRoomSettings(new RustSdkCryptoJs.RoomId(roomId), rustSettings);\n\n            // We don't attempt to clear out the settings from the old store, or record where we've gotten up to,\n            // which means that if the app gets restarted while we're in the middle of this migration, we'll start\n            // again from scratch. So be it. Given that legacy crypto loads the whole room list into memory on startup\n            // anyway, we know it can't be that big.\n        } catch (e) {\n            logger.warn(`Room ${roomId}: ignoring settings ${JSON.stringify(legacySettings)} which caused error ${e}`);\n        }\n    }\n\n    logger.debug(`Completed room settings migration`);\n    await legacyStore.setMigrationState(MigrationState.ROOM_SETTINGS_MIGRATED);\n}\n\nasync function getAndDecryptCachedSecretKey(\n    legacyStore: CryptoStore,\n    legacyPickleKey: Uint8Array<ArrayBuffer>,\n    name: string,\n): Promise<string | undefined> {\n    const key = await new Promise<any>((resolve) => {\n        legacyStore.doTxn(\"readonly\", [IndexedDBCryptoStore.STORE_ACCOUNT], (txn) => {\n            legacyStore.getSecretStorePrivateKey(txn, resolve, name as keyof SecretStorePrivateKeys);\n        });\n    });\n\n    if (key && key.ciphertext && key.iv && key.mac) {\n        return await decryptAESSecretStorageItem(key as AESEncryptedSecretStoragePayload, legacyPickleKey, name);\n    } else if (key instanceof Uint8Array) {\n        // This is a legacy backward compatibility case where the key was stored in clear.\n        return encodeBase64(key);\n    } else {\n        return undefined;\n    }\n}\n\n/**\n * Check if the user's published identity (ie, public cross-signing keys) was trusted by the legacy session,\n * and if so mark it as trusted in the Rust session if needed.\n *\n * By default, if the legacy session didn't have the private MSK, the migrated session will revert to unverified,\n * even if the user has verified the session in the past.\n *\n * This only occurs if the private MSK was not cached in the crypto store (USK and SSK private keys won't help\n * to establish trust: the trust is rooted in the MSK).\n *\n * Rust crypto will only consider the current session as trusted if we import the private MSK itself.\n *\n * We could prompt the user to verify the session again, but it's probably better to just mark the user identity\n * as locally verified if it was before.\n *\n * See https://github.com/element-hq/element-web/issues/27079\n *\n * @param args - Argument object.\n */\nexport async function migrateLegacyLocalTrustIfNeeded(args: {\n    /** The legacy crypto store that is migrated. */\n    legacyCryptoStore: CryptoStore;\n    /** The migrated rust crypto stack. */\n    rustCrypto: RustCrypto;\n    /** The logger to use */\n    logger: Logger;\n}): Promise<void> {\n    const { legacyCryptoStore, rustCrypto, logger } = args;\n    // Get the public cross-signing identity from rust.\n    const rustOwnIdentity = await rustCrypto.getOwnIdentity();\n    if (!rustOwnIdentity) {\n        // There are no cross-signing keys published server side, so nothing to do here.\n        return;\n    }\n    if (rustOwnIdentity.isVerified()) {\n        // The rust session already trusts the keys, so again, nothing to do.\n        return;\n    }\n\n    const legacyLocallyTrustedMSK = await getLegacyTrustedPublicMasterKeyBase64(legacyCryptoStore);\n    if (!legacyLocallyTrustedMSK) {\n        // The user never verified their identity in the legacy session, so nothing to do.\n        return;\n    }\n\n    const mskInfo: CrossSigningKeyInfo = JSON.parse(rustOwnIdentity.masterKey);\n    if (!mskInfo.keys || Object.keys(mskInfo.keys).length === 0) {\n        // This should not happen, but let's be safe\n        logger.error(\"Post Migration | Unexpected error: no master key in the rust session.\");\n        return;\n    }\n    const rustSeenMSK = Object.values(mskInfo.keys)[0];\n\n    if (rustSeenMSK && rustSeenMSK == legacyLocallyTrustedMSK) {\n        logger.info(`Post Migration: Migrating legacy trusted MSK: ${legacyLocallyTrustedMSK} to locally verified.`);\n        // Let's mark the user identity as locally verified as part of the migration.\n        await rustOwnIdentity!.verify();\n        // As well as marking the MSK as trusted, `OlmMachine.verify` returns a\n        // `SignatureUploadRequest` which will publish a signature of the MSK using\n        // this device. In this case, we ignore the request: since the user hasn't\n        // actually re-verified the MSK, we don't publish a new signature. (`.verify`\n        // doesn't store the signature, and if we drop the request here it won't be\n        // retried.)\n        //\n        // Not publishing the signature is consistent with the behaviour of\n        // matrix-crypto-sdk when the private key is imported via\n        // `importCrossSigningKeys`, and when the identity is verified via interactive\n        // verification.\n        //\n        // [Aside: device signatures on the MSK are not considered by the rust-sdk to\n        // establish the trust of the user identity so in any case, what we actually do\n        // here is somewhat moot.]\n    }\n}\n\n/**\n * Checks if the legacy store has a trusted public master key, and returns it if so.\n *\n * @param legacyStore - The legacy store to check.\n *\n * @returns `null` if there were no cross signing keys or if they were not trusted. The trusted public master key if it was.\n */\nasync function getLegacyTrustedPublicMasterKeyBase64(legacyStore: CryptoStore): Promise<string | null> {\n    let maybeTrustedKeys: string | null = null;\n    await legacyStore.doTxn(\"readonly\", \"account\", (txn) => {\n        legacyStore.getCrossSigningKeys(txn, (keys) => {\n            // can be an empty object after resetting cross-signing keys, see storeTrustedSelfKeys\n            const msk = keys?.master;\n            if (msk && Object.keys(msk.keys).length != 0) {\n                // `msk.keys` is an object with { [`ed25519:${pubKey}`]: pubKey }\n                maybeTrustedKeys = Object.values(msk.keys)[0];\n            }\n        });\n    });\n\n    return maybeTrustedKeys;\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,KAAKA,eAAe,MAAM,oCAAoC;AAGrE,SAA2BC,cAAc,QAAqC,yBAAyB;AACvG,SAASC,oBAAoB,QAAQ,2CAA2C;AAEhF,SAASC,uBAAuB,QAAQ,aAAa;AAIrD,SAASC,KAAK,QAAQ,aAAa;AACnC,SAASC,YAAY,QAAQ,cAAc;AAC3C,OAAOC,2BAA2B,MAAM,yCAAyC;AASjF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsBC,uBAAuBA,CAAAC,EAAA;EAAA,OAAAC,wBAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AA+G5C,SAAAF,yBAAA;EAAAA,wBAAA,GAAAG,iBAAA,CA/GM,WAAuCC,IA+B7C,EAAiB;IAAA,IAAAC,sBAAA;IACd,IAAQC,MAAM,GAAkBF,IAAI,CAA5BE,MAAM;MAAEC,WAAW,GAAKH,IAAI,CAApBG,WAAW;;IAE3B;IACA,MAAMhB,eAAe,CAACiB,SAAS,CAAC,CAAC;IAEjC,IAAI,QAAQD,WAAW,CAACE,YAAY,CAAC,CAAC,CAAC,EAAE;MACrC;MACA;IACJ;IAEA,MAAMF,WAAW,CAACG,OAAO,CAAC,CAAC;IAE3B,IAAIC,aAA4B,GAAG,IAAI;IACvC,MAAMJ,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACoB,aAAa,CAAC,EAAGC,GAAG,IAAK;MAC/EP,WAAW,CAACQ,UAAU,CAACD,GAAG,EAAGE,UAAU,IAAK;QACxCL,aAAa,GAAGK,UAAU;MAC9B,CAAC,CAAC;IACN,CAAC,CAAC;IACF,IAAI,CAACL,aAAa,EAAE;MAChB;MACAL,MAAM,CAACW,KAAK,CAAC,sEAAsE,CAAC;MACpF;IACJ;IAEA,IAAIC,cAAc,SAASX,WAAW,CAACY,iBAAiB,CAAC,CAAC;IAE1D,IAAID,cAAc,IAAI1B,cAAc,CAAC4B,wBAAwB,EAAE;MAC3D;MACA;IACJ;IAEA,IAAMC,YAAY,SAASC,gBAAgB,CAAChB,MAAM,EAAEC,WAAW,CAAC;IAChE,IAAMgB,eAAe,SAASC,mBAAmB,CAAClB,MAAM,EAAEC,WAAW,CAAC;IACtE,IAAMkB,UAAU,GAAG,CAAC,GAAGJ,YAAY,GAAGE,eAAe;IACrDjB,MAAM,CAACoB,IAAI,6CAAAC,MAAA,CACqCN,YAAY,wBAAAM,MAAA,CAAqBJ,eAAe,iCAChG,CAAC;IAED,IAAIK,SAAS,GAAG,CAAC;IACjB,SAASC,UAAUA,CAACC,KAAa,EAAQ;MAAA,IAAAC,qBAAA;MACrCH,SAAS,IAAIE,KAAK;MAClB,CAAAC,qBAAA,GAAA3B,IAAI,CAAC4B,+BAA+B,cAAAD,qBAAA,eAApCA,qBAAA,CAAAE,IAAA,CAAA7B,IAAI,EAAmCwB,SAAS,EAAEH,UAAU,CAAC;IACjE;IACAI,UAAU,CAAC,CAAC,CAAC;IAEb,IAAMK,SAAS,GAAG,IAAIC,WAAW,CAAC,CAAC,CAACC,MAAM,CAAChC,IAAI,CAACiC,eAAe,CAAC,CAACC,KAAK,CAAC,CAAC;IAExE,IAAIpB,cAAc,KAAK1B,cAAc,CAAC+C,WAAW,EAAE;MAC/CjC,MAAM,CAACoB,IAAI,CAAC,4DAA4D,CAAC;MACzE,MAAMc,eAAe,CAACpC,IAAI,CAACqC,IAAI,EAAErC,IAAI,CAACsC,MAAM,EAAEtC,IAAI,CAACuC,QAAQ,EAAEpC,WAAW,EAAE2B,SAAS,EAAE9B,IAAI,CAACwC,WAAW,EAAEtC,MAAM,CAAC;MAE9GY,cAAc,GAAG1B,cAAc,CAACqD,qBAAqB;MACrD,MAAMtC,WAAW,CAACuC,iBAAiB,CAAC5B,cAAc,CAAC;IACvD;IACAW,UAAU,CAAC,CAAC,CAAC;IAEb,IAAIX,cAAc,KAAK1B,cAAc,CAACqD,qBAAqB,EAAE;MACzDvC,MAAM,CAACoB,IAAI,mEAAAC,MAAA,CAC2DN,YAAY,2BAClF,CAAC;MACD,MAAM0B,kBAAkB,CAACzC,MAAM,EAAEC,WAAW,EAAE2B,SAAS,EAAE9B,IAAI,CAACwC,WAAW,EAAEf,UAAU,CAAC;MAEtFX,cAAc,GAAG1B,cAAc,CAACwD,qBAAqB;MACrD,MAAMzC,WAAW,CAACuC,iBAAiB,CAAC5B,cAAc,CAAC;IACvD;IAEA,IAAIA,cAAc,KAAK1B,cAAc,CAACwD,qBAAqB,EAAE;MACzD1C,MAAM,CAACoB,IAAI,sEAAAC,MAAA,CAC8DJ,eAAe,2BACxF,CAAC;MACD,MAAM0B,qBAAqB,CAAC3C,MAAM,EAAEC,WAAW,EAAE2B,SAAS,EAAE9B,IAAI,CAACwC,WAAW,EAAEf,UAAU,CAAC;MAEzFX,cAAc,GAAG1B,cAAc,CAAC4B,wBAAwB;MACxD,MAAMb,WAAW,CAACuC,iBAAiB,CAAC5B,cAAc,CAAC;IACvD;;IAEA;IACA,CAAAb,sBAAA,GAAAD,IAAI,CAAC4B,+BAA+B,cAAA3B,sBAAA,eAApCA,sBAAA,CAAA4B,IAAA,CAAA7B,IAAI,EAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9CE,MAAM,CAACoB,IAAI,CAAC,6CAA6C,CAAC;EAC9D,CAAC;EAAA,OAAA1B,wBAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEcsC,eAAeA,CAAAU,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,gBAAA,CAAAxD,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAuD,iBAAA;EAAAA,gBAAA,GAAAtD,iBAAA,CAA9B,WACIsC,IAAmD,EACnDC,MAAc,EACdC,QAAgB,EAChBpC,WAAwB,EACxB2B,SAAkC,EAClCU,WAAwC,EACxCtC,MAAc,EACD;IACb,IAAMoD,aAAa,GAAG,IAAInE,eAAe,CAACoE,iBAAiB,CAAC,CAAC;IAC7DD,aAAa,CAAChB,MAAM,GAAG,IAAInD,eAAe,CAACqE,MAAM,CAAClB,MAAM,CAAC;IACzDgB,aAAa,CAACf,QAAQ,GAAG,IAAIpD,eAAe,CAACsE,QAAQ,CAAClB,QAAQ,CAAC;IAE/D,MAAMpC,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACoB,aAAa,CAAC,EAAGC,GAAG,IAC1EP,WAAW,CAACQ,UAAU,CAACD,GAAG,EAAGgD,CAAC,IAAK;MAC/BJ,aAAa,CAACK,cAAc,GAAGD,CAAC,aAADA,CAAC,cAADA,CAAC,GAAI,EAAE;IAC1C,CAAC,CACL,CAAC;IAED,IAAME,WAAW,SAASC,4BAA4B,CAAC1D,WAAW,EAAE2B,SAAS,EAAE,oBAAoB,CAAC;;IAEpG;IACA;IACA;IACA,IAAI8B,WAAW,EAAE;MACb,IAAIE,cAAc,GAAG,KAAK;MAC1B,IAAIC,UAAgC,GAAG,IAAI;MAC3C,OAAO,CAACD,cAAc,EAAE;QACpB,IAAI;UACAC,UAAU,SAASzE,uBAAuB,CAAC+C,IAAI,CAAC;UAChDyB,cAAc,GAAG,IAAI;QACzB,CAAC,CAAC,OAAOE,CAAC,EAAE;UACR9D,MAAM,CAACoB,IAAI,CAAC,sEAAsE,EAAE0C,CAAC,CAAC;UACtF;UACA,MAAMzE,KAAK,CAAC,IAAI,CAAC;QACrB;MACJ;MACA,IAAIwE,UAAU,IAAIA,UAAU,CAACE,SAAS,IAAI,wCAAwC,EAAE;QAChF;QACA;QACA,IAAI;UAAA,IAAAC,qBAAA;UACA,IAAMC,aAAa,GAAGhF,eAAe,CAACiF,mBAAmB,CAACC,UAAU,CAACT,WAAW,CAAC;UACjF,IAAMU,SAAS,IAAAJ,qBAAA,GAAIH,UAAU,CAACQ,SAAS,cAAAL,qBAAA,uBAArBA,qBAAA,CAA8CM,UAAU;UAC1E,IAAMC,OAAO,GAAGN,aAAa,CAACO,iBAAiB,CAACC,eAAe,IAAIL,SAAS;UAC5E,IAAIG,OAAO,EAAE;YACTnB,aAAa,CAACsB,aAAa,GAAGb,UAAU,CAACc,OAAO;YAChDvB,aAAa,CAACwB,iBAAiB,GAAGlB,WAAW;UACjD,CAAC,MAAM;YACH1D,MAAM,CAACW,KAAK,CACR,oEAAoE,qBAAAU,MAAA,CACjD4C,aAAa,CAACO,iBAAiB,CAACC,eAAe,sBAAApD,MAAA,CAC/C+C,SAAS,CAChC,CAAC;UACL;QACJ,CAAC,CAAC,OAAON,CAAC,EAAE;UACR9D,MAAM,CAAC6E,IAAI,CAAC,gFAAgF,EAAEf,CAAC,CAAC;QACpG;MACJ;IACJ;IAEAV,aAAa,CAAC0B,4BAA4B,SAASnB,4BAA4B,CAAC1D,WAAW,EAAE2B,SAAS,EAAE,QAAQ,CAAC;IACjHwB,aAAa,CAAC2B,iCAAiC,SAASpB,4BAA4B,CAChF1D,WAAW,EACX2B,SAAS,EACT,cACJ,CAAC;IACDwB,aAAa,CAAC4B,iCAAiC,SAASrB,4BAA4B,CAChF1D,WAAW,EACX2B,SAAS,EACT,cACJ,CAAC;IACD,MAAM3C,eAAe,CAACgG,SAAS,CAAC/C,eAAe,CAACkB,aAAa,EAAExB,SAAS,EAAEU,WAAW,EAAEtC,MAAM,CAAC;EAClG,CAAC;EAAA,OAAAmD,gBAAA,CAAAxD,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEcoB,gBAAgBA,CAAAkE,GAAA,EAAAC,GAAA;EAAA,OAAAC,iBAAA,CAAAzF,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAwF,kBAAA;EAAAA,iBAAA,GAAAvF,iBAAA,CAA/B,WAAgCG,MAAc,EAAEC,WAAwB,EAAmB;IACvFD,MAAM,CAACW,KAAK,CAAC,sCAAsC,CAAC;IACpD,IAAI0E,SAAiB;IACrB,MAAMpF,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACmG,cAAc,CAAC,EAAG9E,GAAG,IAC3EP,WAAW,CAACsF,qBAAqB,CAAC/E,GAAG,EAAGgF,CAAC,IAAMH,SAAS,GAAGG,CAAE,CACjE,CAAC;IACD,OAAOH,SAAS;EACpB,CAAC;EAAA,OAAAD,iBAAA,CAAAzF,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEcsB,mBAAmBA,CAAAuE,GAAA,EAAAC,IAAA;EAAA,OAAAC,oBAAA,CAAAhG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAA+F,qBAAA;EAAAA,oBAAA,GAAA9F,iBAAA,CAAlC,WAAmCG,MAAc,EAAEC,WAAwB,EAAmB;IAC1FD,MAAM,CAACW,KAAK,CAAC,yCAAyC,CAAC;IACvD,aAAaV,WAAW,CAAC2F,iCAAiC,CAAC,CAAC;EAChE,CAAC;EAAA,OAAAD,oBAAA,CAAAhG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEc6C,kBAAkBA,CAAAoD,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,mBAAA,CAAAvG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAsG,oBAAA;EAAAA,mBAAA,GAAArG,iBAAA,CAAjC,WACIG,MAAc,EACdC,WAAwB,EACxB2B,SAAqB,EACrBU,WAAwC,EACxC6D,WAAwC,EAC3B;IACb;IACA,OAAO,IAAI,EAAE;MACT,IAAMC,KAAK,SAASnG,WAAW,CAACoG,wBAAwB,CAAC,CAAC;MAC1D,IAAID,KAAK,KAAK,IAAI,EAAE;MAEpBpG,MAAM,CAACW,KAAK,uBAAAU,MAAA,CAAuB+E,KAAK,CAACE,MAAM,kBAAe,CAAC;MAC/D,IAAMlD,aAA+C,GAAG,EAAE;MAC1D,KAAK,IAAMmD,OAAO,IAAIH,KAAK,EAAE;QACzB,IAAMI,cAAc,GAAG,IAAIvH,eAAe,CAACwH,cAAc,CAAC,CAAC;QAC3DD,cAAc,CAACE,SAAS,GAAGH,OAAO,CAACI,SAAU;QAC7CH,cAAc,CAACI,MAAM,GAAGL,OAAO,CAACA,OAAQ;QACxCC,cAAc,CAACK,WAAW,GAAGL,cAAc,CAACM,YAAY,GAAG,IAAIC,IAAI,CAACR,OAAO,CAACS,qBAAsB,CAAC;QACnG5D,aAAa,CAAC6D,IAAI,CAACT,cAAc,CAAC;MACtC;MAEA,MAAMvH,eAAe,CAACgG,SAAS,CAACxC,kBAAkB,CAACW,aAAa,EAAExB,SAAS,EAAEU,WAAW,EAAEtC,MAAM,CAAC;MACjG,MAAMC,WAAW,CAACiH,2BAA2B,CAACd,KAAK,CAAC;MACpDD,WAAW,CAACC,KAAK,CAACE,MAAM,CAAC;IAC7B;EACJ,CAAC;EAAA,OAAAJ,mBAAA,CAAAvG,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEc+C,qBAAqBA,CAAAwE,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,sBAAA,CAAA7H,KAAA,OAAAC,SAAA;AAAA;AA0EpC;AACA;AACA;AACA;AACA;AAJA,SAAA4H,uBAAA;EAAAA,sBAAA,GAAA3H,iBAAA,CA1EA,WACIG,MAAc,EACdC,WAAwB,EACxB2B,SAAqB,EACrBU,WAAwC,EACxC6D,WAAwC,EAC3B;IACb;IACA,OAAO,IAAI,EAAE;MACT,IAAMC,KAAK,SAASnG,WAAW,CAACwH,oCAAoC,CAAC,CAAC;MACtE,IAAIrB,KAAK,KAAK,IAAI,EAAE;MAEpBpG,MAAM,CAACW,KAAK,uBAAAU,MAAA,CAAuB+E,KAAK,CAACE,MAAM,qBAAkB,CAAC;MAClE,IAAMlD,aAA2D,GAAG,EAAE;MACtE,KAAK,IAAMmD,OAAO,IAAIH,KAAK,EAAE;QAAA,IAAAsB,qBAAA;QACzB,IAAMC,WAAW,GAAGpB,OAAO,CAACoB,WAAY;QAExC,IAAMnB,cAAc,GAAG,IAAIvH,eAAe,CAAC2I,0BAA0B,CAAC,CAAC;QACvEpB,cAAc,CAACI,MAAM,GAAGe,WAAW,CAACpB,OAAO;QAC3CC,cAAc,CAACqB,MAAM,GAAG,IAAI5I,eAAe,CAAC6I,MAAM,CAACH,WAAW,CAACI,OAAO,CAAC;QACvEvB,cAAc,CAACE,SAAS,GAAGH,OAAO,CAACG,SAAS;QAC5CF,cAAc,CAACwB,gBAAgB,IAAAN,qBAAA,GAAGC,WAAW,CAACM,WAAW,cAAAP,qBAAA,uBAAvBA,qBAAA,CAA0B,SAAS,CAAC;QACtElB,cAAc,CAAC0B,QAAQ,GAAG,CAAC3B,OAAO,CAAC4B,WAAW;;QAE9C;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA3B,cAAc,CAAC4B,QAAQ,GAAGT,WAAW,CAACU,SAAS,KAAK,IAAI;QAExDjF,aAAa,CAAC6D,IAAI,CAACT,cAAc,CAAC;MACtC;MAEA,MAAMvH,eAAe,CAACgG,SAAS,CAACtC,qBAAqB,CAACS,aAAa,EAAExB,SAAS,EAAEU,WAAW,EAAEtC,MAAM,CAAC;MACpG,MAAMC,WAAW,CAACqI,uCAAuC,CAAClC,KAAK,CAAC;MAChED,WAAW,CAACC,KAAK,CAACE,MAAM,CAAC;IAC7B;EACJ,CAAC;EAAA,OAAAkB,sBAAA,CAAA7H,KAAA,OAAAC,SAAA;AAAA;AAOD,gBAAsB2I,mCAAmCA,CAAAC,IAAA;EAAA,OAAAC,oCAAA,CAAA9I,KAAA,OAAAC,SAAA;AAAA;AA2DxD,SAAA6I,qCAAA;EAAAA,oCAAA,GAAA5I,iBAAA,CA3DM,WAAA6I,IAAA,EAaW;IAAA,IAZd1I,MAAM,GAAA0I,IAAA,CAAN1I,MAAM;MACNC,WAAW,GAAAyI,IAAA,CAAXzI,WAAW;MACX0I,UAAU,GAAAD,IAAA,CAAVC,UAAU;IAWV,IAAI,QAAQ1I,WAAW,CAACE,YAAY,CAAC,CAAC,CAAC,EAAE;MACrC;MACA;IACJ;IAEA,IAAMS,cAAc,SAASX,WAAW,CAACY,iBAAiB,CAAC,CAAC;IAE5D,IAAID,cAAc,IAAI1B,cAAc,CAAC0J,sBAAsB,EAAE;MACzD;MACA;IACJ;IAEA,IAAIC,KAA2C,GAAG,CAAC,CAAC;IAEpD,MAAM5I,WAAW,CAACK,KAAK,CAAC,WAAW,EAAE,CAACnB,oBAAoB,CAAC2J,WAAW,CAAC,EAAGtI,GAAG,IAAK;MAC9EP,WAAW,CAAC8I,gBAAgB,CAACvI,GAAG,EAAGwI,MAAM,IAAK;QAC1CH,KAAK,GAAGG,MAAM;MAClB,CAAC,CAAC;IACN,CAAC,CAAC;IAEFhJ,MAAM,CAACW,KAAK,cAAAU,MAAA,CAAc4H,MAAM,CAACC,IAAI,CAACL,KAAK,CAAC,CAACvC,MAAM,2BAAwB,CAAC;IAC5E,SAAA6C,KAAA,IAAuCF,MAAM,CAACG,OAAO,CAACP,KAAK,CAAC,EAAE;MAAA,IAAAQ,KAAA,GAAAC,cAAA,CAAAH,KAAA;MAAA,IAAlDtB,MAAM,GAAAwB,KAAA;MAAA,IAAEE,cAAc,GAAAF,KAAA;MAC9B,IAAI;QACA,IAAMG,YAAY,GAAG,IAAIvK,eAAe,CAACwK,YAAY,CAAC,CAAC;QAEvD,IAAIF,cAAc,CAACxF,SAAS,KAAK,sBAAsB,EAAE;UACrD/D,MAAM,CAAC6E,IAAI,SAAAxD,MAAA,CAASwG,MAAM,6CAAAxG,MAAA,CAA0CkI,cAAc,CAACxF,SAAS,CAAE,CAAC;UAC/F;QACJ;QACAyF,YAAY,CAACzF,SAAS,GAAG9E,eAAe,CAACyK,mBAAmB,CAACC,eAAe;QAC5EH,YAAY,CAACI,uBAAuB,GAAGL,cAAc,CAACM,kBAAkB;QACxEL,YAAY,CAACM,6BAA6B,GAAGP,cAAc,CAACQ,oBAAoB;QAChF,MAAMpB,UAAU,CAACqB,eAAe,CAAC,IAAI/K,eAAe,CAAC6I,MAAM,CAACD,MAAM,CAAC,EAAE2B,YAAY,CAAC;;QAElF;QACA;QACA;QACA;MACJ,CAAC,CAAC,OAAO1F,CAAC,EAAE;QACR9D,MAAM,CAAC6E,IAAI,SAAAxD,MAAA,CAASwG,MAAM,0BAAAxG,MAAA,CAAuB4I,IAAI,CAACC,SAAS,CAACX,cAAc,CAAC,0BAAAlI,MAAA,CAAuByC,CAAC,CAAE,CAAC;MAC9G;IACJ;IAEA9D,MAAM,CAACW,KAAK,oCAAoC,CAAC;IACjD,MAAMV,WAAW,CAACuC,iBAAiB,CAACtD,cAAc,CAAC0J,sBAAsB,CAAC;EAC9E,CAAC;EAAA,OAAAH,oCAAA,CAAA9I,KAAA,OAAAC,SAAA;AAAA;AAAA,SAEc+D,4BAA4BA,CAAAwG,IAAA,EAAAC,IAAA,EAAAC,IAAA;EAAA,OAAAC,6BAAA,CAAA3K,KAAA,OAAAC,SAAA;AAAA;AAqB3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAlBA,SAAA0K,8BAAA;EAAAA,6BAAA,GAAAzK,iBAAA,CArBA,WACII,WAAwB,EACxB8B,eAAwC,EACxCwI,IAAY,EACe;IAC3B,IAAMC,GAAG,SAAS,IAAIC,OAAO,CAAOC,OAAO,IAAK;MAC5CzK,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,CAACnB,oBAAoB,CAACoB,aAAa,CAAC,EAAGC,GAAG,IAAK;QACzEP,WAAW,CAAC0K,wBAAwB,CAACnK,GAAG,EAAEkK,OAAO,EAAEH,IAAoC,CAAC;MAC5F,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,IAAIC,GAAG,IAAIA,GAAG,CAACI,UAAU,IAAIJ,GAAG,CAACK,EAAE,IAAIL,GAAG,CAACM,GAAG,EAAE;MAC5C,aAAavL,2BAA2B,CAACiL,GAAG,EAAsCzI,eAAe,EAAEwI,IAAI,CAAC;IAC5G,CAAC,MAAM,IAAIC,GAAG,YAAYO,UAAU,EAAE;MAClC;MACA,OAAOzL,YAAY,CAACkL,GAAG,CAAC;IAC5B,CAAC,MAAM;MACH,OAAOQ,SAAS;IACpB;EACJ,CAAC;EAAA,OAAAV,6BAAA,CAAA3K,KAAA,OAAAC,SAAA;AAAA;AAqBD,gBAAsBqL,+BAA+BA,CAAAC,IAAA;EAAA,OAAAC,gCAAA,CAAAxL,KAAA,OAAAC,SAAA;AAAA;;AAwDrD;AACA;AACA;AACA;AACA;AACA;AACA;AANA,SAAAuL,iCAAA;EAAAA,gCAAA,GAAAtL,iBAAA,CAxDO,WAA+CC,IAOrD,EAAiB;IACd,IAAQsL,iBAAiB,GAAyBtL,IAAI,CAA9CsL,iBAAiB;MAAEC,UAAU,GAAavL,IAAI,CAA3BuL,UAAU;MAAErL,MAAM,GAAKF,IAAI,CAAfE,MAAM;IAC7C;IACA,IAAMsL,eAAe,SAASD,UAAU,CAACE,cAAc,CAAC,CAAC;IACzD,IAAI,CAACD,eAAe,EAAE;MAClB;MACA;IACJ;IACA,IAAIA,eAAe,CAACE,UAAU,CAAC,CAAC,EAAE;MAC9B;MACA;IACJ;IAEA,IAAMC,uBAAuB,SAASC,qCAAqC,CAACN,iBAAiB,CAAC;IAC9F,IAAI,CAACK,uBAAuB,EAAE;MAC1B;MACA;IACJ;IAEA,IAAME,OAA4B,GAAG1B,IAAI,CAAC2B,KAAK,CAACN,eAAe,CAACO,SAAS,CAAC;IAC1E,IAAI,CAACF,OAAO,CAACzC,IAAI,IAAID,MAAM,CAACC,IAAI,CAACyC,OAAO,CAACzC,IAAI,CAAC,CAAC5C,MAAM,KAAK,CAAC,EAAE;MACzD;MACAtG,MAAM,CAAC8L,KAAK,CAAC,uEAAuE,CAAC;MACrF;IACJ;IACA,IAAMC,WAAW,GAAG9C,MAAM,CAAC+C,MAAM,CAACL,OAAO,CAACzC,IAAI,CAAC,CAAC,CAAC,CAAC;IAElD,IAAI6C,WAAW,IAAIA,WAAW,IAAIN,uBAAuB,EAAE;MACvDzL,MAAM,CAACoB,IAAI,kDAAAC,MAAA,CAAkDoK,uBAAuB,0BAAuB,CAAC;MAC5G;MACA,MAAMH,eAAe,CAAEW,MAAM,CAAC,CAAC;MAC/B;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;IACJ;EACJ,CAAC;EAAA,OAAAd,gCAAA,CAAAxL,KAAA,OAAAC,SAAA;AAAA;AAAA,SASc8L,qCAAqCA,CAAAQ,IAAA;EAAA,OAAAC,oCAAA,CAAAxM,KAAA,OAAAC,SAAA;AAAA;AAAA,SAAAuM,qCAAA;EAAAA,oCAAA,GAAAtM,iBAAA,CAApD,WAAqDI,WAAwB,EAA0B;IACnG,IAAImM,gBAA+B,GAAG,IAAI;IAC1C,MAAMnM,WAAW,CAACK,KAAK,CAAC,UAAU,EAAE,SAAS,EAAGE,GAAG,IAAK;MACpDP,WAAW,CAACoM,mBAAmB,CAAC7L,GAAG,EAAG0I,IAAI,IAAK;QAC3C;QACA,IAAMoD,GAAG,GAAGpD,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEqD,MAAM;QACxB,IAAID,GAAG,IAAIrD,MAAM,CAACC,IAAI,CAACoD,GAAG,CAACpD,IAAI,CAAC,CAAC5C,MAAM,IAAI,CAAC,EAAE;UAC1C;UACA8F,gBAAgB,GAAGnD,MAAM,CAAC+C,MAAM,CAACM,GAAG,CAACpD,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD;MACJ,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,OAAOkD,gBAAgB;EAC3B,CAAC;EAAA,OAAAD,oCAAA,CAAAxM,KAAA,OAAAC,SAAA;AAAA","ignoreList":[]}

package/lib/rust-crypto/rust-crypto.js

@@ -1,3 +1,4 @@
+import _slicedToArray from "@babel/runtime/helpers/slicedToArray";
 import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
 import _defineProperty from "@babel/runtime/helpers/defineProperty";
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
@@ -72,13 +73,6 @@ export class RustCrypto extends TypedEventEmitter {
   cryptoCallbacks) {
     var enableEncryptedStateEvents = arguments.length > 7 && arguments[7] !== undefined ? arguments[7] : false;
     super();
-    this.logger = logger;
-    this.olmMachine = olmMachine;
-    this.http = http;
-    this.userId = userId;
-    this.secretStorage = secretStorage;
-    this.cryptoCallbacks = cryptoCallbacks;
-    this.enableEncryptedStateEvents = enableEncryptedStateEvents;
     /**
      * The number of iterations to use when deriving a recovery key from a passphrase.
      */
@@ -89,14 +83,6 @@ export class RustCrypto extends TypedEventEmitter {
     _defineProperty(this, "stopped", false);
     /** mapping of roomId → encryptor class */
     _defineProperty(this, "roomEncryptors", {});
-    _defineProperty(this, "eventDecryptor", void 0);
-    _defineProperty(this, "keyClaimManager", void 0);
-    _defineProperty(this, "outgoingRequestProcessor", void 0);
-    _defineProperty(this, "crossSigningIdentity", void 0);
-    _defineProperty(this, "backupManager", void 0);
-    _defineProperty(this, "outgoingRequestsManager", void 0);
-    _defineProperty(this, "perSessionBackupDownloader", void 0);
-    _defineProperty(this, "dehydratedDeviceManager", void 0);
     _defineProperty(this, "reemitter", new TypedReEmitter(this));
     ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////
     //
@@ -108,6 +94,13 @@ export class RustCrypto extends TypedEventEmitter {
      * The verification methods we offer to the other side during an interactive verification.
      */
     _defineProperty(this, "_supportedVerificationMethods", ALL_VERIFICATION_METHODS);
+    this.logger = logger;
+    this.olmMachine = olmMachine;
+    this.http = http;
+    this.userId = userId;
+    this.secretStorage = secretStorage;
+    this.cryptoCallbacks = cryptoCallbacks;
+    this.enableEncryptedStateEvents = enableEncryptedStateEvents;
     this.outgoingRequestProcessor = new OutgoingRequestProcessor(logger, olmMachine, http);
     this.outgoingRequestsManager = new OutgoingRequestsManager(this.logger, olmMachine, this.outgoingRequestProcessor);
     this.keyClaimManager = new KeyClaimManager(olmMachine, this.outgoingRequestProcessor);
@@ -466,7 +459,9 @@ export class RustCrypto extends TypedEventEmitter {
       if (downloadUncached && untrackedUsers.size >= 1) {
         var queryResult = yield _this13.downloadDeviceList(untrackedUsers);
         Object.entries(queryResult.device_keys).forEach(_ref => {
-          var [userId, deviceKeys] = _ref;
+          var _ref2 = _slicedToArray(_ref, 2),
+            userId = _ref2[0],
+            deviceKeys = _ref2[1];
           return deviceMapByUserId.set(userId, deviceKeysToDeviceMap(deviceKeys));
         });
       }
@@ -663,10 +658,9 @@ export class RustCrypto extends TypedEventEmitter {
   isCrossSigningReady() {
     var _this22 = this;
     return _asyncToGenerator(function* () {
-      var {
-        privateKeysInSecretStorage,
-        privateKeysCachedLocally
-      } = yield _this22.getCrossSigningStatus();
+      var _yield$_this22$getCro = yield _this22.getCrossSigningStatus(),
+        privateKeysInSecretStorage = _yield$_this22$getCro.privateKeysInSecretStorage,
+        privateKeysCachedLocally = _yield$_this22$getCro.privateKeysCachedLocally;
       var hasKeysInCache = Boolean(privateKeysCachedLocally.masterKey) && Boolean(privateKeysCachedLocally.selfSigningKey) && Boolean(privateKeysCachedLocally.userSigningKey);
       var identity = yield _this22.getOwnIdentity();
 
@@ -787,11 +781,10 @@ export class RustCrypto extends TypedEventEmitter {
     var _arguments5 = arguments,
       _this27 = this;
     return _asyncToGenerator(function* () {
-      var {
-        createSecretStorageKey,
-        setupNewSecretStorage,
-        setupNewKeyBackup
-      } = _arguments5.length > 0 && _arguments5[0] !== undefined ? _arguments5[0] : {};
+      var _ref3 = _arguments5.length > 0 && _arguments5[0] !== undefined ? _arguments5[0] : {},
+        createSecretStorageKey = _ref3.createSecretStorageKey,
+        setupNewSecretStorage = _ref3.setupNewSecretStorage,
+        setupNewKeyBackup = _ref3.setupNewKeyBackup;
       // If an AES Key is already stored in the secret storage and setupNewSecretStorage is not set
       // we don't want to create a new key
       var isNewSecretStorageKeyNeeded = setupNewSecretStorage || !(yield _this27.secretStorageHasAESKey());
@@ -889,7 +882,8 @@ export class RustCrypto extends TypedEventEmitter {
       // See if we already have an AES secret-storage key.
       var secretStorageKeyTuple = yield _this30.secretStorage.getKey();
       if (!secretStorageKeyTuple) return false;
-      var [, keyInfo] = secretStorageKeyTuple;
+      var _secretStorageKeyTupl = _slicedToArray(secretStorageKeyTuple, 2),
+        keyInfo = _secretStorageKeyTupl[1];
 
       // Check if the key is an AES key
       return keyInfo.algorithm === SECRET_STORAGE_ALGORITHM_V1_AES;
@@ -1050,11 +1044,10 @@ export class RustCrypto extends TypedEventEmitter {
     return _asyncToGenerator(function* () {
       var txId = secureRandomString(32);
       // Send the verification request content to the DM room
-      var {
-        event_id: eventId
-      } = yield _this35.http.authedRequest(Method.Put, "/_matrix/client/v3/rooms/".concat(encodeURIComponent(roomId), "/send/m.room.message/").concat(encodeURIComponent(txId)), undefined, verificationEventContent, {
-        prefix: ""
-      });
+      var _yield$_this35$http$a = yield _this35.http.authedRequest(Method.Put, "/_matrix/client/v3/rooms/".concat(encodeURIComponent(roomId), "/send/m.room.message/").concat(encodeURIComponent(txId)), undefined, verificationEventContent, {
+          prefix: ""
+        }),
+        eventId = _yield$_this35$http$a.event_id;
       return eventId;
     })();
   }
@@ -1085,7 +1078,10 @@ export class RustCrypto extends TypedEventEmitter {
         throw new Error("cannot request verification for this device when there is no existing cross-signing key");
       }
       try {
-        var [request, outgoingRequest] = yield userIdentity.requestVerification(_this36._supportedVerificationMethods.map(verificationMethodIdentifierToMethod));
+        var _yield$userIdentity$r = yield userIdentity.requestVerification(_this36._supportedVerificationMethods.map(verificationMethodIdentifierToMethod)),
+          _yield$userIdentity$r2 = _slicedToArray(_yield$userIdentity$r, 2),
+          request = _yield$userIdentity$r2[0],
+          outgoingRequest = _yield$userIdentity$r2[1];
         yield _this36.outgoingRequestProcessor.makeOutgoingRequest(outgoingRequest);
         return _this36.makeVerificationRequest(request);
       } finally {
@@ -1114,7 +1110,10 @@ export class RustCrypto extends TypedEventEmitter {
         throw new Error("Not a known device");
       }
       try {
-        var [request, outgoingRequest] = device.requestVerification(_this37._supportedVerificationMethods.map(verificationMethodIdentifierToMethod));
+        var _device$requestVerifi = device.requestVerification(_this37._supportedVerificationMethods.map(verificationMethodIdentifierToMethod)),
+          _device$requestVerifi2 = _slicedToArray(_device$requestVerifi, 2),
+          request = _device$requestVerifi2[0],
+          outgoingRequest = _device$requestVerifi2[1];
         yield _this37.outgoingRequestProcessor.makeOutgoingRequest(outgoingRequest);
         return _this37.makeVerificationRequest(request);
       } finally {
@@ -1327,10 +1326,8 @@ export class RustCrypto extends TypedEventEmitter {
     return _asyncToGenerator(function* () {
       // Get the decryption key from the crypto store
       var backupKeys = yield _this50.olmMachine.getBackupKeys();
-      var {
-        decryptionKey,
-        backupVersion
-      } = backupKeys;
+      var decryptionKey = backupKeys.decryptionKey,
+        backupVersion = backupKeys.backupVersion;
       if (!decryptionKey || !backupVersion) throw new Error("No decryption key found in crypto store");
       var decodedDecryptionKey = decodeBase64(decryptionKey.toBase64());
       var backupInfo = yield _this50.backupManager.requestKeyBackupVersion(backupVersion);
@@ -1405,10 +1402,8 @@ export class RustCrypto extends TypedEventEmitter {
     var _this55 = this;
     return _asyncToGenerator(function* () {
       var logger = new LogSpan(_this55.logger, "encryptToDeviceMessages");
-      var uniqueUsers = new Set(devices.map(_ref2 => {
-        var {
-          userId
-        } = _ref2;
+      var uniqueUsers = new Set(devices.map(_ref4 => {
+        var userId = _ref4.userId;
         return userId;
       }));
 
@@ -1421,11 +1416,9 @@ export class RustCrypto extends TypedEventEmitter {
         eventType: EventType.RoomMessageEncrypted
       };
       yield Promise.all(devices.map(/*#__PURE__*/function () {
-        var _ref4 = _asyncToGenerator(function* (_ref3) {
-          var {
-            userId,
-            deviceId
-          } = _ref3;
+        var _ref6 = _asyncToGenerator(function* (_ref5) {
+          var userId = _ref5.userId,
+            deviceId = _ref5.deviceId;
           var device = yield _this55.olmMachine.getDevice(new RustSdkCryptoJs.UserId(userId), new RustSdkCryptoJs.DeviceId(deviceId));
           if (device) {
             var encryptedPayload = JSON.parse(yield device.encryptToDeviceEvent(eventType, payload));
@@ -1439,7 +1432,7 @@ export class RustCrypto extends TypedEventEmitter {
           }
         });
         return function (_x) {
-          return _ref4.apply(this, arguments);
+          return _ref6.apply(this, arguments);
         };
       }()));
       return batch;
@@ -1557,15 +1550,15 @@ export class RustCrypto extends TypedEventEmitter {
    * @param devices - the received device list updates
    * @returns A list of processed to-device messages.
    */
-  receiveSyncChanges(_ref5) {
+  receiveSyncChanges(_ref7) {
     var _this59 = this;
     return _asyncToGenerator(function* () {
-      var {
-        events,
-        oneTimeKeysCounts = new Map(),
-        unusedFallbackKeys,
-        devices = new RustSdkCryptoJs.DeviceLists()
-      } = _ref5;
+      var events = _ref7.events,
+        _ref7$oneTimeKeysCoun = _ref7.oneTimeKeysCounts,
+        oneTimeKeysCounts = _ref7$oneTimeKeysCoun === void 0 ? new Map() : _ref7$oneTimeKeysCoun,
+        unusedFallbackKeys = _ref7.unusedFallbackKeys,
+        _ref7$devices = _ref7.devices,
+        devices = _ref7$devices === void 0 ? new RustSdkCryptoJs.DeviceLists() : _ref7$devices;
       return yield _this59.olmMachine.receiveSyncChanges(events ? JSON.stringify(events) : "[]", devices, oneTimeKeysCounts, unusedFallbackKeys);
     })();
   }
@@ -2021,14 +2014,14 @@ export class RustCrypto extends TypedEventEmitter {
       // transaction_id is provided in case of remote echo {@link https://spec.matrix.org/v1.7/client-server-api/#local-echo}
       if (event.isState() || !!event.getUnsigned().transaction_id) return;
       var processEvent = /*#__PURE__*/function () {
-        var _ref6 = _asyncToGenerator(function* (evt) {
+        var _ref8 = _asyncToGenerator(function* (evt) {
           // Process only verification event
           if (isVerificationEvent(event)) {
             yield _this72.onKeyVerificationEvent(evt);
           }
         });
         return function processEvent(_x2) {
-          return _ref6.apply(this, arguments);
+          return _ref8.apply(this, arguments);
         };
       }();
 
@@ -2129,15 +2122,15 @@ export class RustCrypto extends TypedEventEmitter {
 }
 class EventDecryptor {
   constructor(logger, olmMachine, perSessionBackupDownloader) {
-    this.logger = logger;
-    this.olmMachine = olmMachine;
-    this.perSessionBackupDownloader = perSessionBackupDownloader;
     /**
      * Events which we couldn't decrypt due to unknown sessions / indexes.
      *
      * Map from roomId to sessionId to Set of MatrixEvents
      */
     _defineProperty(this, "eventsPendingKey", new MapWithDefault(() => new MapWithDefault(() => new Set())));
+    this.logger = logger;
+    this.olmMachine = olmMachine;
+    this.perSessionBackupDownloader = perSessionBackupDownloader;
   }
   attemptEventDecryption(event, isolationMode) {
     var _this76 = this;