matrix-js-sdk 41.8.0 → 41.9.0

package/lib/rendezvous/MSC4108SignInWithQR.js.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SignInWithQR.js","names":["QrCodeIntent","ClientRendezvousFailureReason","MSC4108FailureReason","RendezvousError","logger","MatrixError","sleep","generateScope","OAuthGrantType","startDeviceAuthorization","waitForDeviceAuthorization","PayloadType","isDeviceAuthorizationGrantProtocolPayload","payload","protocol","MSC4108SignInWithQR","checkCode","_this$channel","channel","getCheckCode","constructor","didScanCode","client","onFailure","_defineProperty","ourIntent","Reciprocate","Login","code","_code","generateCode","_this","_asyncToGenerator","getDomain","isExistingDevice","isNewDevice","negotiateProtocols","_this2","info","concat","connect","_oidcClientConfig","oidcClientConfig","getAuthMetadata","e","error","grant_types_supported","includes","DeviceAuthorization","send","type","Protocols","protocols","homeserver","Failure","reason","UnsupportedProtocol","receive","UnexpectedMessageReceived","serverName","deviceAuthorizationGrant","input","_this3","_dagResponse$verifica","Error","metadata","clientId","deviceId","scope","dagResponse","grantInProgress","Protocol","device_id","device_authorization_grant","verification_uri","verification_uri_complete","verificationUri","userCode","user_code","dag","expectingNewDeviceId","verificationUriComplete","deviceAlreadyExists","_this3$client","getDevice","err","httpStatus","DeviceAlreadyExists","completeLoginOnNewDevice","_ref","_this4","ProtocolAccepted","res","session","Unknown","AuthorizationExpired","UserCancelled","shareSecrets","_this5","Success","Secrets","secrets","Declined","UserDeclined","timeout","Date","now","_this5$client","device","secretsBundle","getCrypto","exportSecretsBundle","cancelled","_objectSpread","DeviceNotFound","_this6","secureReceive","_this7","secureSend","declineLoginOnExistingDevice","_this8","cancel","_this9","_this9$onFailure","call","close","_this0"],"sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"sourcesContent":["/*\nCopyright 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { QrCodeIntent } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    ClientRendezvousFailureReason,\n    MSC4108FailureReason,\n    RendezvousError,\n    type RendezvousFailureListener,\n} from \"./index.ts\";\nimport { type MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { MatrixError } from \"../http-api/index.ts\";\nimport { sleep } from \"../utils.ts\";\nimport {\n    type DeviceAccessTokenResponse,\n    type DeviceAuthorizationResponse,\n    generateScope,\n    OAuthGrantType,\n    startDeviceAuthorization,\n    type ValidatedAuthMetadata,\n    waitForDeviceAuthorization,\n    type OidcClientConfig,\n} from \"../oidc/index.ts\";\nimport { type CryptoApi } from \"../crypto-api/index.ts\";\n\n/**\n * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * secure channels.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport enum PayloadType {\n    Protocols = \"m.login.protocols\",\n    Protocol = \"m.login.protocol\",\n    Failure = \"m.login.failure\",\n    Success = \"m.login.success\",\n    Secrets = \"m.login.secrets\",\n    ProtocolAccepted = \"m.login.protocol_accepted\",\n    Declined = \"m.login.declined\",\n}\n\n/**\n * Type representing the base payload format for [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * messages sent over the secure channel.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport interface MSC4108Payload {\n    type: PayloadType;\n}\n\ninterface ProtocolsPayload extends MSC4108Payload {\n    type: PayloadType.Protocols;\n    protocols: string[];\n    homeserver: string;\n}\n\ninterface ProtocolPayload extends MSC4108Payload {\n    type: PayloadType.Protocol;\n    protocol: Exclude<string, \"device_authorization_grant\">;\n    device_id: string;\n}\n\ninterface DeviceAuthorizationGrantProtocolPayload extends ProtocolPayload {\n    protocol: \"device_authorization_grant\";\n    device_authorization_grant: {\n        verification_uri: string;\n        verification_uri_complete?: string;\n    };\n}\n\nfunction isDeviceAuthorizationGrantProtocolPayload(\n    payload: ProtocolPayload,\n): payload is DeviceAuthorizationGrantProtocolPayload {\n    return payload.protocol === \"device_authorization_grant\";\n}\n\ninterface FailurePayload extends MSC4108Payload {\n    type: PayloadType.Failure;\n    reason: MSC4108FailureReason;\n    homeserver?: string;\n}\n\ninterface DeclinedPayload extends MSC4108Payload {\n    type: PayloadType.Declined;\n}\n\ninterface SuccessPayload extends MSC4108Payload {\n    type: PayloadType.Success;\n}\n\ninterface AcceptedPayload extends MSC4108Payload {\n    type: PayloadType.ProtocolAccepted;\n}\n\ninterface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>>> {\n    type: PayloadType.Secrets;\n}\n\n/**\n * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * sign in with QR + OIDC flow.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport class MSC4108SignInWithQR {\n    private readonly ourIntent: QrCodeIntent;\n    private _code?: Uint8Array;\n    private expectingNewDeviceId?: string;\n    private metadata?: ValidatedAuthMetadata;\n    private grantInProgress?: DeviceAuthorizationResponse;\n\n    /**\n     * Returns the check code for the secure channel or undefined if not generated yet.\n     */\n    public get checkCode(): string | undefined {\n        return this.channel?.getCheckCode();\n    }\n\n    /**\n     * @param channel - The secure channel used for communication\n     * @param client - The Matrix client in used on the device already logged in\n     * @param didScanCode - Whether this side of the channel scanned the QR code from the other party\n     * @param onFailure - Callback for when the rendezvous fails\n     */\n    public constructor(\n        private readonly channel: MSC4108SecureChannel,\n        private readonly didScanCode: boolean,\n        private readonly client?: MatrixClient,\n        public onFailure?: RendezvousFailureListener,\n    ) {\n        this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;\n    }\n\n    /**\n     * Returns the code representing the rendezvous suitable for rendering in a QR code or undefined if not generated yet.\n     */\n    public get code(): Uint8Array | undefined {\n        return this._code;\n    }\n\n    /**\n     * Generate the code including doing partial set up of the channel where required.\n     */\n    public async generateCode(): Promise<void> {\n        if (this._code) {\n            return;\n        }\n\n        if (this.ourIntent === QrCodeIntent.Reciprocate && this.client) {\n            this._code = await this.channel.generateCode(this.ourIntent, this.client.getDomain()!);\n        } else if (this.ourIntent === QrCodeIntent.Login) {\n            this._code = await this.channel.generateCode(this.ourIntent);\n        }\n    }\n\n    /**\n     * Returns true if the device is the already logged in device reciprocating a new login on the other side of the channel.\n     */\n    public get isExistingDevice(): boolean {\n        return this.ourIntent === QrCodeIntent.Reciprocate;\n    }\n\n    /**\n     * Returns true if the device is the new device logging in being reciprocated by the device on the other side of the channel.\n     */\n    public get isNewDevice(): boolean {\n        return !this.isExistingDevice;\n    }\n\n    /**\n     * The first step in the OIDC QR login process.\n     * To be called after the QR code has been rendered or scanned.\n     * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.\n     * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.\n     */\n    public async negotiateProtocols(): Promise<{ serverName?: string }> {\n        logger.info(`negotiateProtocols(isNewDevice=${this.isNewDevice} didScanCode=${this.didScanCode})`);\n        await this.channel.connect();\n\n        if (this.didScanCode) {\n            // Secure Channel step 6 completed, we trust the channel\n\n            if (this.isNewDevice) {\n                // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set\n            } else {\n                // MSC4108-Flow: NewScanned -send protocols message\n                let oidcClientConfig: OidcClientConfig | undefined;\n                try {\n                    oidcClientConfig = await this.client!.getAuthMetadata();\n                } catch (e) {\n                    logger.error(\"Failed to discover OIDC metadata\", e);\n                }\n\n                if (oidcClientConfig?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n                    await this.send<ProtocolsPayload>({\n                        type: PayloadType.Protocols,\n                        protocols: [\"device_authorization_grant\"],\n                        homeserver: this.client!.getDomain()!,\n                    });\n                } else {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.UnsupportedProtocol,\n                    });\n                    throw new RendezvousError(\n                        \"Device code grant unsupported\",\n                        MSC4108FailureReason.UnsupportedProtocol,\n                    );\n                }\n            }\n        } else if (this.isNewDevice) {\n            // MSC4108-Flow: ExistingScanned - wait for protocols message\n            logger.info(\"Waiting for protocols message\");\n            const payload = await this.receive<ProtocolsPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocols) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            return { serverName: payload.homeserver };\n        } else {\n            // MSC4108-Flow: NewScanned - nothing to do\n        }\n        return {};\n    }\n\n    /**\n     * The second & third step in the OIDC QR login process.\n     * To be called after `negotiateProtocols` for the existing device.\n     * To be called after OIDC negotiation for the new device.\n     *\n     * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login\n     */\n    public async deviceAuthorizationGrant(input?: {\n        metadata: ValidatedAuthMetadata;\n        clientId: string;\n        deviceId: string;\n    }): Promise<{\n        verificationUri?: string;\n        userCode?: string;\n    }> {\n        if (this.isNewDevice) {\n            if (!input) {\n                throw new Error(\"Input must be provided for new device\");\n            }\n\n            const { metadata, clientId, deviceId } = input;\n\n            const scope = generateScope(deviceId);\n\n            // MSC4108-Flow: NewDevice - start device authorization grant\n            const dagResponse = await startDeviceAuthorization({\n                clientId,\n                scope,\n                metadata,\n            });\n\n            this.metadata = metadata;\n            this.grantInProgress = dagResponse;\n\n            const protocol: DeviceAuthorizationGrantProtocolPayload = {\n                type: PayloadType.Protocol,\n                protocol: \"device_authorization_grant\",\n                device_id: deviceId,\n                device_authorization_grant: {\n                    verification_uri: dagResponse.verification_uri,\n                    verification_uri_complete: dagResponse.verification_uri_complete,\n                },\n            };\n\n            await this.send(protocol);\n\n            return {\n                verificationUri: dagResponse.verification_uri_complete ?? dagResponse.verification_uri,\n                userCode: dagResponse.user_code,\n            };\n        } else {\n            // The user needs to do step 7 for the out-of-band confirmation\n            // but, first we receive the protocol chosen by the other device so that\n            // the confirmation_uri is ready to go\n            logger.info(\"Waiting for protocol message\");\n            const payload = await this.receive<ProtocolPayload | DeviceAuthorizationGrantProtocolPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocol) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            if (isDeviceAuthorizationGrantProtocolPayload(payload)) {\n                const { device_authorization_grant: dag, device_id: expectingNewDeviceId } = payload;\n                const { verification_uri: verificationUri, verification_uri_complete: verificationUriComplete } = dag;\n\n                let deviceAlreadyExists = true;\n                try {\n                    await this.client?.getDevice(expectingNewDeviceId);\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        deviceAlreadyExists = false;\n                    }\n                }\n\n                if (deviceAlreadyExists) {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.DeviceAlreadyExists,\n                    });\n                    throw new RendezvousError(\n                        \"Specified device ID already exists\",\n                        MSC4108FailureReason.DeviceAlreadyExists,\n                    );\n                }\n\n                this.expectingNewDeviceId = expectingNewDeviceId;\n\n                return { verificationUri: verificationUriComplete ?? verificationUri };\n            }\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.UnsupportedProtocol,\n            });\n            throw new RendezvousError(\n                \"Received a request for an unsupported protocol\",\n                MSC4108FailureReason.UnsupportedProtocol,\n            );\n        }\n    }\n\n    /**\n     * The fourth step in the OIDC QR login process.\n     * The reciprocating device must perform step 5 for this method to resolve.\n     * To be called after {@link deviceAuthorizationGrant} only on the new device.\n     */\n    public async completeLoginOnNewDevice({\n        clientId,\n    }: {\n        clientId: string;\n    }): Promise<DeviceAccessTokenResponse | undefined> {\n        if (!this.isNewDevice || !this.grantInProgress || !this.metadata) {\n            throw new Error(\"Can only complete login on new device\");\n        }\n\n        logger.info(\"Waiting for protocol accepted message\");\n        // wait for accepted message\n        const payload = await this.receive<AcceptedPayload | FailurePayload>();\n\n        if (!payload) {\n            throw new RendezvousError(\n                \"No response from existing device\",\n                MSC4108FailureReason.UnexpectedMessageReceived,\n            );\n        }\n        if (payload.type === PayloadType.Failure) {\n            throw new RendezvousError(\"Failed\", (payload as FailurePayload).reason);\n        }\n        if (payload.type !== PayloadType.ProtocolAccepted) {\n            throw new RendezvousError(\"Unexpected message received\", MSC4108FailureReason.UnexpectedMessageReceived);\n        }\n\n        // poll for DAG\n        const res = await waitForDeviceAuthorization({\n            session: this.grantInProgress,\n            metadata: this.metadata,\n            clientId,\n        });\n\n        if (!res) {\n            throw new RendezvousError(\n                \"No response from device authorization endpoint\",\n                ClientRendezvousFailureReason.Unknown,\n            );\n        }\n\n        if (\"error\" in res) {\n            let reason: MSC4108FailureReason = MSC4108FailureReason.UnexpectedMessageReceived;\n            if (res.error === \"expired_token\") {\n                reason = MSC4108FailureReason.AuthorizationExpired;\n            } else if (res.error === \"access_denied\") {\n                reason = MSC4108FailureReason.UserCancelled;\n            }\n            const payload: FailurePayload = {\n                type: PayloadType.Failure,\n                reason,\n            };\n            await this.send(payload);\n\n            throw new RendezvousError(\"Rejection from device authorization endpoint\", reason);\n        }\n\n        return res;\n    }\n\n    /**\n     * The fifth (and final) step in the OIDC QR login process.\n     * To be called after the new device has completed authentication.\n     */\n    public async shareSecrets(): Promise<{ secrets?: Omit<SecretsPayload, \"type\"> }> {\n        if (this.isNewDevice) {\n            await this.send<SuccessPayload>({\n                type: PayloadType.Success,\n            });\n            // then wait for secrets\n            logger.info(\"Waiting for secrets message\");\n            const payload = await this.receive<SecretsPayload>();\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Secrets) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n            return { secrets: payload };\n            // then done?\n        } else {\n            if (!this.expectingNewDeviceId) {\n                throw new Error(\"No new device ID expected\");\n            }\n            await this.send<AcceptedPayload>({\n                type: PayloadType.ProtocolAccepted,\n            });\n\n            logger.info(\"Waiting for outcome message\");\n            const payload = await this.receive<SuccessPayload | DeclinedPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type === PayloadType.Declined) {\n                throw new RendezvousError(\"User declined\", ClientRendezvousFailureReason.UserDeclined);\n            }\n\n            if (payload?.type !== PayloadType.Success) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\"Unexpected message\", MSC4108FailureReason.UnexpectedMessageReceived);\n            }\n\n            const timeout = Date.now() + 10000; // wait up to 10 seconds\n            do {\n                // is the device visible via the Homeserver?\n                try {\n                    const device = await this.client?.getDevice(this.expectingNewDeviceId);\n\n                    if (device) {\n                        // if so, return the secrets\n                        const secretsBundle = await this.client!.getCrypto()!.exportSecretsBundle!();\n                        if (this.channel.cancelled) {\n                            throw new RendezvousError(\"User cancelled\", MSC4108FailureReason.UserCancelled);\n                        }\n                        // send secrets\n                        await this.send<SecretsPayload>({\n                            type: PayloadType.Secrets,\n                            ...secretsBundle,\n                        });\n                        return { secrets: secretsBundle };\n                        // let the other side close the rendezvous session\n                    }\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        // not found, so keep waiting until timeout\n                    } else {\n                        throw err;\n                    }\n                }\n                await sleep(1000);\n            } while (Date.now() < timeout);\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.DeviceNotFound,\n            });\n            throw new RendezvousError(\"New device not found\", MSC4108FailureReason.DeviceNotFound);\n        }\n    }\n\n    private async receive<T extends MSC4108Payload>(): Promise<T | FailurePayload | undefined> {\n        return (await this.channel.secureReceive()) as T | undefined;\n    }\n\n    private async send<T extends MSC4108Payload>(payload: T): Promise<void> {\n        await this.channel.secureSend(payload);\n    }\n\n    /**\n     * Decline the login on the existing device.\n     */\n    public async declineLoginOnExistingDevice(): Promise<void> {\n        if (!this.isExistingDevice) {\n            throw new Error(\"Can only decline login on existing device\");\n        }\n        await this.send<FailurePayload>({\n            type: PayloadType.Failure,\n            reason: MSC4108FailureReason.UserCancelled,\n        });\n    }\n\n    /**\n     * Cancels the rendezvous session.\n     * @param reason the reason for the cancellation\n     */\n    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {\n        this.onFailure?.(reason);\n        await this.channel.cancel(reason);\n    }\n\n    /**\n     * Closes the rendezvous session.\n     */\n    public async close(): Promise<void> {\n        await this.channel.close();\n    }\n}\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,QAAQ,oCAAoC;AAEjE,SACIC,6BAA6B,EAC7BC,oBAAoB,EACpBC,eAAe,QAEZ,YAAY;AAEnB,SAASC,MAAM,QAAQ,cAAc;AAErC,SAASC,WAAW,QAAQ,sBAAsB;AAClD,SAASC,KAAK,QAAQ,aAAa;AACnC,SAGIC,aAAa,EACbC,cAAc,EACdC,wBAAwB,EAExBC,0BAA0B,QAEvB,kBAAkB;AAGzB;AACA;AACA;AACA;AACA;AACA,WAAYC,WAAW,0BAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAA,OAAXA,WAAW;AAAA;;AAUvB;AACA;AACA;AACA;AACA;;AAyBA,SAASC,yCAAyCA,CAC9CC,OAAwB,EAC0B;EAClD,OAAOA,OAAO,CAACC,QAAQ,KAAK,4BAA4B;AAC5D;AAwBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mBAAmB,CAAC;EAO7B;AACJ;AACA;EACI,IAAWC,SAASA,CAAA,EAAuB;IAAA,IAAAC,aAAA;IACvC,QAAAA,aAAA,GAAO,IAAI,CAACC,OAAO,cAAAD,aAAA,uBAAZA,aAAA,CAAcE,YAAY,CAAC,CAAC;EACvC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWC,WAAWA,CACGF,OAA6B,EAC7BG,WAAoB,EACpBC,MAAqB,EAC/BC,SAAqC,EAC9C;IAAA,KAJmBL,OAA6B,GAA7BA,OAA6B;IAAA,KAC7BG,WAAoB,GAApBA,WAAoB;IAAA,KACpBC,MAAqB,GAArBA,MAAqB;IAAA,KAC/BC,SAAqC,GAArCA,SAAqC;IAAAC,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAE5C,IAAI,CAACC,SAAS,GAAGH,MAAM,GAAGtB,YAAY,CAAC0B,WAAW,GAAG1B,YAAY,CAAC2B,KAAK;EAC3E;;EAEA;AACJ;AACA;EACI,IAAWC,IAAIA,CAAA,EAA2B;IACtC,OAAO,IAAI,CAACC,KAAK;EACrB;;EAEA;AACJ;AACA;EACiBC,YAAYA,CAAA,EAAkB;IAAA,IAAAC,KAAA;IAAA,OAAAC,iBAAA;MACvC,IAAID,KAAI,CAACF,KAAK,EAAE;QACZ;MACJ;MAEA,IAAIE,KAAI,CAACN,SAAS,KAAKzB,YAAY,CAAC0B,WAAW,IAAIK,KAAI,CAACT,MAAM,EAAE;QAC5DS,KAAI,CAACF,KAAK,SAASE,KAAI,CAACb,OAAO,CAACY,YAAY,CAACC,KAAI,CAACN,SAAS,EAAEM,KAAI,CAACT,MAAM,CAACW,SAAS,CAAC,CAAE,CAAC;MAC1F,CAAC,MAAM,IAAIF,KAAI,CAACN,SAAS,KAAKzB,YAAY,CAAC2B,KAAK,EAAE;QAC9CI,KAAI,CAACF,KAAK,SAASE,KAAI,CAACb,OAAO,CAACY,YAAY,CAACC,KAAI,CAACN,SAAS,CAAC;MAChE;IAAC;EACL;;EAEA;AACJ;AACA;EACI,IAAWS,gBAAgBA,CAAA,EAAY;IACnC,OAAO,IAAI,CAACT,SAAS,KAAKzB,YAAY,CAAC0B,WAAW;EACtD;;EAEA;AACJ;AACA;EACI,IAAWS,WAAWA,CAAA,EAAY;IAC9B,OAAO,CAAC,IAAI,CAACD,gBAAgB;EACjC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBE,kBAAkBA,CAAA,EAAqC;IAAA,IAAAC,MAAA;IAAA,OAAAL,iBAAA;MAChE5B,MAAM,CAACkC,IAAI,mCAAAC,MAAA,CAAmCF,MAAI,CAACF,WAAW,mBAAAI,MAAA,CAAgBF,MAAI,CAAChB,WAAW,MAAG,CAAC;MAClG,MAAMgB,MAAI,CAACnB,OAAO,CAACsB,OAAO,CAAC,CAAC;MAE5B,IAAIH,MAAI,CAAChB,WAAW,EAAE;QAClB;;QAEA,IAAIgB,MAAI,CAACF,WAAW,EAAE;UAClB;QAAA,CACH,MAAM;UAAA,IAAAM,iBAAA;UACH;UACA,IAAIC,gBAA8C;UAClD,IAAI;YACAA,gBAAgB,SAASL,MAAI,CAACf,MAAM,CAAEqB,eAAe,CAAC,CAAC;UAC3D,CAAC,CAAC,OAAOC,CAAC,EAAE;YACRxC,MAAM,CAACyC,KAAK,CAAC,kCAAkC,EAAED,CAAC,CAAC;UACvD;UAEA,KAAAH,iBAAA,GAAIC,gBAAgB,cAAAD,iBAAA,eAAhBA,iBAAA,CAAkBK,qBAAqB,CAACC,QAAQ,CAACvC,cAAc,CAACwC,mBAAmB,CAAC,EAAE;YACtF,MAAMX,MAAI,CAACY,IAAI,CAAmB;cAC9BC,IAAI,EAAEvC,WAAW,CAACwC,SAAS;cAC3BC,SAAS,EAAE,CAAC,4BAA4B,CAAC;cACzCC,UAAU,EAAEhB,MAAI,CAACf,MAAM,CAAEW,SAAS,CAAC;YACvC,CAAC,CAAC;UACN,CAAC,MAAM;YACH,MAAMI,MAAI,CAACY,IAAI,CAAiB;cAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;cACzBC,MAAM,EAAErD,oBAAoB,CAACsD;YACjC,CAAC,CAAC;YACF,MAAM,IAAIrD,eAAe,CACrB,+BAA+B,EAC/BD,oBAAoB,CAACsD,mBACzB,CAAC;UACL;QACJ;MACJ,CAAC,MAAM,IAAInB,MAAI,CAACF,WAAW,EAAE;QACzB;QACA/B,MAAM,CAACkC,IAAI,CAAC,+BAA+B,CAAC;QAC5C,IAAMzB,OAAO,SAASwB,MAAI,CAACoB,OAAO,CAAmB,CAAC;QAEtD,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACwC,SAAS,EAAE;UACzC,MAAMd,MAAI,CAACY,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACwD,yBACzB,CAAC;QACL;QAEA,OAAO;UAAEC,UAAU,EAAE9C,OAAO,CAACwC;QAAW,CAAC;MAC7C,CAAC,MAAM;QACH;MAAA;MAEJ,OAAO,CAAC,CAAC;IAAC;EACd;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBO,wBAAwBA,CAACC,KAIrC,EAGE;IAAA,IAAAC,MAAA;IAAA,OAAA9B,iBAAA;MACC,IAAI8B,MAAI,CAAC3B,WAAW,EAAE;QAAA,IAAA4B,qBAAA;QAClB,IAAI,CAACF,KAAK,EAAE;UACR,MAAM,IAAIG,KAAK,CAAC,uCAAuC,CAAC;QAC5D;QAEA,IAAQC,QAAQ,GAAyBJ,KAAK,CAAtCI,QAAQ;UAAEC,QAAQ,GAAeL,KAAK,CAA5BK,QAAQ;UAAEC,QAAQ,GAAKN,KAAK,CAAlBM,QAAQ;QAEpC,IAAMC,KAAK,GAAG7D,aAAa,CAAC4D,QAAQ,CAAC;;QAErC;QACA,IAAME,WAAW,SAAS5D,wBAAwB,CAAC;UAC/CyD,QAAQ;UACRE,KAAK;UACLH;QACJ,CAAC,CAAC;QAEFH,MAAI,CAACG,QAAQ,GAAGA,QAAQ;QACxBH,MAAI,CAACQ,eAAe,GAAGD,WAAW;QAElC,IAAMvD,QAAiD,GAAG;UACtDoC,IAAI,EAAEvC,WAAW,CAAC4D,QAAQ;UAC1BzD,QAAQ,EAAE,4BAA4B;UACtC0D,SAAS,EAAEL,QAAQ;UACnBM,0BAA0B,EAAE;YACxBC,gBAAgB,EAAEL,WAAW,CAACK,gBAAgB;YAC9CC,yBAAyB,EAAEN,WAAW,CAACM;UAC3C;QACJ,CAAC;QAED,MAAMb,MAAI,CAACb,IAAI,CAACnC,QAAQ,CAAC;QAEzB,OAAO;UACH8D,eAAe,GAAAb,qBAAA,GAAEM,WAAW,CAACM,yBAAyB,cAAAZ,qBAAA,cAAAA,qBAAA,GAAIM,WAAW,CAACK,gBAAgB;UACtFG,QAAQ,EAAER,WAAW,CAACS;QAC1B,CAAC;MACL,CAAC,MAAM;QACH;QACA;QACA;QACA1E,MAAM,CAACkC,IAAI,CAAC,8BAA8B,CAAC;QAC3C,IAAMzB,OAAO,SAASiD,MAAI,CAACL,OAAO,CAA4D,CAAC;QAE/F,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC4D,QAAQ,EAAE;UACxC,MAAMT,MAAI,CAACb,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACwD,yBACzB,CAAC;QACL;QAEA,IAAI9C,yCAAyC,CAACC,OAAO,CAAC,EAAE;UACpD,IAAoCkE,GAAG,GAAsClE,OAAO,CAA5E4D,0BAA0B;YAAkBO,oBAAoB,GAAKnE,OAAO,CAA3C2D,SAAS;UAClD,IAA0BI,eAAe,GAAyDG,GAAG,CAA7FL,gBAAgB;YAA8CO,uBAAuB,GAAKF,GAAG,CAA1DJ,yBAAyB;UAEpE,IAAIO,mBAAmB,GAAG,IAAI;UAC9B,IAAI;YAAA,IAAAC,aAAA;YACA,OAAAA,aAAA,GAAMrB,MAAI,CAACxC,MAAM,cAAA6D,aAAA,uBAAXA,aAAA,CAAaC,SAAS,CAACJ,oBAAoB,CAAC;UACtD,CAAC,CAAC,OAAOK,GAA0B,EAAE;YACjC,IAAIA,GAAG,YAAYhF,WAAW,IAAIgF,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;cACtDJ,mBAAmB,GAAG,KAAK;YAC/B;UACJ;UAEA,IAAIA,mBAAmB,EAAE;YACrB,MAAMpB,MAAI,CAACb,IAAI,CAAiB;cAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;cACzBC,MAAM,EAAErD,oBAAoB,CAACqF;YACjC,CAAC,CAAC;YACF,MAAM,IAAIpF,eAAe,CACrB,oCAAoC,EACpCD,oBAAoB,CAACqF,mBACzB,CAAC;UACL;UAEAzB,MAAI,CAACkB,oBAAoB,GAAGA,oBAAoB;UAEhD,OAAO;YAAEJ,eAAe,EAAEK,uBAAuB,aAAvBA,uBAAuB,cAAvBA,uBAAuB,GAAIL;UAAgB,CAAC;QAC1E;QAEA,MAAMd,MAAI,CAACb,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC,MAAM,EAAErD,oBAAoB,CAACsD;QACjC,CAAC,CAAC;QACF,MAAM,IAAIrD,eAAe,CACrB,gDAAgD,EAChDD,oBAAoB,CAACsD,mBACzB,CAAC;MACL;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACiBgC,wBAAwBA,CAAAC,IAAA,EAIc;IAAA,IAAAC,MAAA;IAAA,OAAA1D,iBAAA;MAAA,IAH/CkC,QAAQ,GAAAuB,IAAA,CAARvB,QAAQ;MAIR,IAAI,CAACwB,MAAI,CAACvD,WAAW,IAAI,CAACuD,MAAI,CAACpB,eAAe,IAAI,CAACoB,MAAI,CAACzB,QAAQ,EAAE;QAC9D,MAAM,IAAID,KAAK,CAAC,uCAAuC,CAAC;MAC5D;MAEA5D,MAAM,CAACkC,IAAI,CAAC,uCAAuC,CAAC;MACpD;MACA,IAAMzB,OAAO,SAAS6E,MAAI,CAACjC,OAAO,CAAmC,CAAC;MAEtE,IAAI,CAAC5C,OAAO,EAAE;QACV,MAAM,IAAIV,eAAe,CACrB,kCAAkC,EAClCD,oBAAoB,CAACwD,yBACzB,CAAC;MACL;MACA,IAAI7C,OAAO,CAACqC,IAAI,KAAKvC,WAAW,CAAC2C,OAAO,EAAE;QACtC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAGU,OAAO,CAAoB0C,MAAM,CAAC;MAC3E;MACA,IAAI1C,OAAO,CAACqC,IAAI,KAAKvC,WAAW,CAACgF,gBAAgB,EAAE;QAC/C,MAAM,IAAIxF,eAAe,CAAC,6BAA6B,EAAED,oBAAoB,CAACwD,yBAAyB,CAAC;MAC5G;;MAEA;MACA,IAAMkC,GAAG,SAASlF,0BAA0B,CAAC;QACzCmF,OAAO,EAAEH,MAAI,CAACpB,eAAe;QAC7BL,QAAQ,EAAEyB,MAAI,CAACzB,QAAQ;QACvBC;MACJ,CAAC,CAAC;MAEF,IAAI,CAAC0B,GAAG,EAAE;QACN,MAAM,IAAIzF,eAAe,CACrB,gDAAgD,EAChDF,6BAA6B,CAAC6F,OAClC,CAAC;MACL;MAEA,IAAI,OAAO,IAAIF,GAAG,EAAE;QAChB,IAAIrC,MAA4B,GAAGrD,oBAAoB,CAACwD,yBAAyB;QACjF,IAAIkC,GAAG,CAAC/C,KAAK,KAAK,eAAe,EAAE;UAC/BU,MAAM,GAAGrD,oBAAoB,CAAC6F,oBAAoB;QACtD,CAAC,MAAM,IAAIH,GAAG,CAAC/C,KAAK,KAAK,eAAe,EAAE;UACtCU,MAAM,GAAGrD,oBAAoB,CAAC8F,aAAa;QAC/C;QACA,IAAMnF,QAAuB,GAAG;UAC5BqC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC;QACJ,CAAC;QACD,MAAMmC,MAAI,CAACzC,IAAI,CAACpC,QAAO,CAAC;QAExB,MAAM,IAAIV,eAAe,CAAC,8CAA8C,EAAEoD,MAAM,CAAC;MACrF;MAEA,OAAOqC,GAAG;IAAC;EACf;;EAEA;AACJ;AACA;AACA;EACiBK,YAAYA,CAAA,EAAwD;IAAA,IAAAC,MAAA;IAAA,OAAAlE,iBAAA;MAC7E,IAAIkE,MAAI,CAAC/D,WAAW,EAAE;QAClB,MAAM+D,MAAI,CAACjD,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAACwF;QACtB,CAAC,CAAC;QACF;QACA/F,MAAM,CAACkC,IAAI,CAAC,6BAA6B,CAAC;QAC1C,IAAMzB,OAAO,SAASqF,MAAI,CAACzC,OAAO,CAAiB,CAAC;QACpD,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACyF,OAAO,EAAE;UACvC,MAAMF,MAAI,CAACjD,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACwD,yBACzB,CAAC;QACL;QACA,OAAO;UAAE2C,OAAO,EAAExF;QAAQ,CAAC;QAC3B;MACJ,CAAC,MAAM;QACH,IAAI,CAACqF,MAAI,CAAClB,oBAAoB,EAAE;UAC5B,MAAM,IAAIhB,KAAK,CAAC,2BAA2B,CAAC;QAChD;QACA,MAAMkC,MAAI,CAACjD,IAAI,CAAkB;UAC7BC,IAAI,EAAEvC,WAAW,CAACgF;QACtB,CAAC,CAAC;QAEFvF,MAAM,CAACkC,IAAI,CAAC,6BAA6B,CAAC;QAC1C,IAAMzB,SAAO,SAASqF,MAAI,CAACzC,OAAO,CAAmC,CAAC;QAEtE,IAAI,CAAA5C,SAAO,aAAPA,SAAO,uBAAPA,SAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,SAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,SAAO,aAAPA,SAAO,uBAAPA,SAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2F,QAAQ,EAAE;UACxC,MAAM,IAAInG,eAAe,CAAC,eAAe,EAAEF,6BAA6B,CAACsG,YAAY,CAAC;QAC1F;QAEA,IAAI,CAAA1F,SAAO,aAAPA,SAAO,uBAAPA,SAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACwF,OAAO,EAAE;UACvC,MAAMD,MAAI,CAACjD,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CAAC,oBAAoB,EAAED,oBAAoB,CAACwD,yBAAyB,CAAC;QACnG;QAEA,IAAM8C,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACpC,GAAG;UACC;UACA,IAAI;YAAA,IAAAC,aAAA;YACA,IAAMC,MAAM,UAAAD,aAAA,GAAST,MAAI,CAAC5E,MAAM,cAAAqF,aAAA,uBAAXA,aAAA,CAAavB,SAAS,CAACc,MAAI,CAAClB,oBAAoB,CAAC;YAEtE,IAAI4B,MAAM,EAAE;cACR;cACA,IAAMC,aAAa,SAASX,MAAI,CAAC5E,MAAM,CAAEwF,SAAS,CAAC,CAAC,CAAEC,mBAAmB,CAAE,CAAC;cAC5E,IAAIb,MAAI,CAAChF,OAAO,CAAC8F,SAAS,EAAE;gBACxB,MAAM,IAAI7G,eAAe,CAAC,gBAAgB,EAAED,oBAAoB,CAAC8F,aAAa,CAAC;cACnF;cACA;cACA,MAAME,MAAI,CAACjD,IAAI,CAAAgE,aAAA;gBACX/D,IAAI,EAAEvC,WAAW,CAACyF;cAAO,GACtBS,aAAa,CACnB,CAAC;cACF,OAAO;gBAAER,OAAO,EAAEQ;cAAc,CAAC;cACjC;YACJ;UACJ,CAAC,CAAC,OAAOxB,GAA0B,EAAE;YACjC,IAAIA,GAAG,YAAYhF,WAAW,IAAIgF,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;cACtD;YAAA,CACH,MAAM;cACH,MAAMD,GAAG;YACb;UACJ;UACA,MAAM/E,KAAK,CAAC,IAAI,CAAC;QACrB,CAAC,QAAQmG,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGF,OAAO;QAE7B,MAAMN,MAAI,CAACjD,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC,MAAM,EAAErD,oBAAoB,CAACgH;QACjC,CAAC,CAAC;QACF,MAAM,IAAI/G,eAAe,CAAC,sBAAsB,EAAED,oBAAoB,CAACgH,cAAc,CAAC;MAC1F;IAAC;EACL;EAEczD,OAAOA,CAAA,EAAsE;IAAA,IAAA0D,MAAA;IAAA,OAAAnF,iBAAA;MACvF,aAAcmF,MAAI,CAACjG,OAAO,CAACkG,aAAa,CAAC,CAAC;IAAmB;EACjE;EAEcnE,IAAIA,CAA2BpC,OAAU,EAAiB;IAAA,IAAAwG,MAAA;IAAA,OAAArF,iBAAA;MACpE,MAAMqF,MAAI,CAACnG,OAAO,CAACoG,UAAU,CAACzG,OAAO,CAAC;IAAC;EAC3C;;EAEA;AACJ;AACA;EACiB0G,4BAA4BA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAAxF,iBAAA;MACvD,IAAI,CAACwF,MAAI,CAACtF,gBAAgB,EAAE;QACxB,MAAM,IAAI8B,KAAK,CAAC,2CAA2C,CAAC;MAChE;MACA,MAAMwD,MAAI,CAACvE,IAAI,CAAiB;QAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;QACzBC,MAAM,EAAErD,oBAAoB,CAAC8F;MACjC,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;EACiByB,MAAMA,CAAClE,MAA4D,EAAiB;IAAA,IAAAmE,MAAA;IAAA,OAAA1F,iBAAA;MAAA,IAAA2F,gBAAA;MAC7F,CAAAA,gBAAA,GAAAD,MAAI,CAACnG,SAAS,cAAAoG,gBAAA,eAAdA,gBAAA,CAAAC,IAAA,CAAAF,MAAI,EAAanE,MAAM,CAAC;MACxB,MAAMmE,MAAI,CAACxG,OAAO,CAACuG,MAAM,CAAClE,MAAM,CAAC;IAAC;EACtC;;EAEA;AACJ;AACA;EACiBsE,KAAKA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAA9F,iBAAA;MAChC,MAAM8F,MAAI,CAAC5G,OAAO,CAAC2G,KAAK,CAAC,CAAC;IAAC;EAC/B;AACJ","ignoreList":[]}
+{"version":3,"file":"MSC4108SignInWithQR.js","names":[],"sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"sourcesContent":["/*\nCopyright 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { QrCodeIntent } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    ClientRendezvousFailureReason,\n    MSC4108FailureReason,\n    RendezvousError,\n    type RendezvousFailureListener,\n} from \"./index.ts\";\nimport { type MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { MatrixError } from \"../http-api/index.ts\";\nimport { sleep } from \"../utils.ts\";\nimport {\n    type DeviceAccessTokenResponse,\n    type DeviceAuthorizationResponse,\n    generateScope,\n    OAuthGrantType,\n    startDeviceAuthorization,\n    type ValidatedAuthMetadata,\n    waitForDeviceAuthorization,\n    type OidcClientConfig,\n} from \"../oidc/index.ts\";\nimport { type CryptoApi } from \"../crypto-api/index.ts\";\n\n/**\n * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * secure channels.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport enum PayloadType {\n    Protocols = \"m.login.protocols\",\n    Protocol = \"m.login.protocol\",\n    Failure = \"m.login.failure\",\n    Success = \"m.login.success\",\n    Secrets = \"m.login.secrets\",\n    ProtocolAccepted = \"m.login.protocol_accepted\",\n    Declined = \"m.login.declined\",\n}\n\n/**\n * Type representing the base payload format for [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * messages sent over the secure channel.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport interface MSC4108Payload {\n    type: PayloadType;\n}\n\ninterface ProtocolsPayload extends MSC4108Payload {\n    type: PayloadType.Protocols;\n    protocols: string[];\n    homeserver: string;\n}\n\ninterface ProtocolPayload extends MSC4108Payload {\n    type: PayloadType.Protocol;\n    protocol: Exclude<string, \"device_authorization_grant\">;\n    device_id: string;\n}\n\ninterface DeviceAuthorizationGrantProtocolPayload extends ProtocolPayload {\n    protocol: \"device_authorization_grant\";\n    device_authorization_grant: {\n        verification_uri: string;\n        verification_uri_complete?: string;\n    };\n}\n\nfunction isDeviceAuthorizationGrantProtocolPayload(\n    payload: ProtocolPayload,\n): payload is DeviceAuthorizationGrantProtocolPayload {\n    return payload.protocol === \"device_authorization_grant\";\n}\n\ninterface FailurePayload extends MSC4108Payload {\n    type: PayloadType.Failure;\n    reason: MSC4108FailureReason;\n    homeserver?: string;\n}\n\ninterface DeclinedPayload extends MSC4108Payload {\n    type: PayloadType.Declined;\n}\n\ninterface SuccessPayload extends MSC4108Payload {\n    type: PayloadType.Success;\n}\n\ninterface AcceptedPayload extends MSC4108Payload {\n    type: PayloadType.ProtocolAccepted;\n}\n\ninterface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>>> {\n    type: PayloadType.Secrets;\n}\n\n/**\n * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * sign in with QR + OIDC flow.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport class MSC4108SignInWithQR {\n    private readonly ourIntent: QrCodeIntent;\n    private _code?: Uint8Array;\n    private expectingNewDeviceId?: string;\n    private metadata?: ValidatedAuthMetadata;\n    private grantInProgress?: DeviceAuthorizationResponse;\n\n    /**\n     * Returns the check code for the secure channel or undefined if not generated yet.\n     */\n    public get checkCode(): string | undefined {\n        return this.channel?.getCheckCode();\n    }\n\n    /**\n     * @param channel - The secure channel used for communication\n     * @param client - The Matrix client in used on the device already logged in\n     * @param didScanCode - Whether this side of the channel scanned the QR code from the other party\n     * @param onFailure - Callback for when the rendezvous fails\n     */\n    public constructor(\n        private readonly channel: MSC4108SecureChannel,\n        private readonly didScanCode: boolean,\n        private readonly client?: MatrixClient,\n        public onFailure?: RendezvousFailureListener,\n    ) {\n        this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;\n    }\n\n    /**\n     * Returns the code representing the rendezvous suitable for rendering in a QR code or undefined if not generated yet.\n     */\n    public get code(): Uint8Array | undefined {\n        return this._code;\n    }\n\n    /**\n     * Generate the code including doing partial set up of the channel where required.\n     */\n    public async generateCode(): Promise<void> {\n        if (this._code) {\n            return;\n        }\n\n        if (this.ourIntent === QrCodeIntent.Reciprocate && this.client) {\n            this._code = await this.channel.generateCode(this.ourIntent, this.client.getDomain()!);\n        } else if (this.ourIntent === QrCodeIntent.Login) {\n            this._code = await this.channel.generateCode(this.ourIntent);\n        }\n    }\n\n    /**\n     * Returns true if the device is the already logged in device reciprocating a new login on the other side of the channel.\n     */\n    public get isExistingDevice(): boolean {\n        return this.ourIntent === QrCodeIntent.Reciprocate;\n    }\n\n    /**\n     * Returns true if the device is the new device logging in being reciprocated by the device on the other side of the channel.\n     */\n    public get isNewDevice(): boolean {\n        return !this.isExistingDevice;\n    }\n\n    /**\n     * The first step in the OIDC QR login process.\n     * To be called after the QR code has been rendered or scanned.\n     * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.\n     * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.\n     */\n    public async negotiateProtocols(): Promise<{ serverName?: string }> {\n        logger.info(`negotiateProtocols(isNewDevice=${this.isNewDevice} didScanCode=${this.didScanCode})`);\n        await this.channel.connect();\n\n        if (this.didScanCode) {\n            // Secure Channel step 6 completed, we trust the channel\n\n            if (this.isNewDevice) {\n                // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set\n            } else {\n                // MSC4108-Flow: NewScanned -send protocols message\n                let oidcClientConfig: OidcClientConfig | undefined;\n                try {\n                    oidcClientConfig = await this.client!.getAuthMetadata();\n                } catch (e) {\n                    logger.error(\"Failed to discover OIDC metadata\", e);\n                }\n\n                if (oidcClientConfig?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n                    await this.send<ProtocolsPayload>({\n                        type: PayloadType.Protocols,\n                        protocols: [\"device_authorization_grant\"],\n                        homeserver: this.client!.getDomain()!,\n                    });\n                } else {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.UnsupportedProtocol,\n                    });\n                    throw new RendezvousError(\n                        \"Device code grant unsupported\",\n                        MSC4108FailureReason.UnsupportedProtocol,\n                    );\n                }\n            }\n        } else if (this.isNewDevice) {\n            // MSC4108-Flow: ExistingScanned - wait for protocols message\n            logger.info(\"Waiting for protocols message\");\n            const payload = await this.receive<ProtocolsPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocols) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            return { serverName: payload.homeserver };\n        } else {\n            // MSC4108-Flow: NewScanned - nothing to do\n        }\n        return {};\n    }\n\n    /**\n     * The second & third step in the OIDC QR login process.\n     * To be called after `negotiateProtocols` for the existing device.\n     * To be called after OIDC negotiation for the new device.\n     *\n     * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login\n     */\n    public async deviceAuthorizationGrant(input?: {\n        metadata: ValidatedAuthMetadata;\n        clientId: string;\n        deviceId: string;\n    }): Promise<{\n        verificationUri?: string;\n        userCode?: string;\n    }> {\n        if (this.isNewDevice) {\n            if (!input) {\n                throw new Error(\"Input must be provided for new device\");\n            }\n\n            const { metadata, clientId, deviceId } = input;\n\n            const scope = generateScope(deviceId);\n\n            // MSC4108-Flow: NewDevice - start device authorization grant\n            const dagResponse = await startDeviceAuthorization({\n                clientId,\n                scope,\n                metadata,\n            });\n\n            this.metadata = metadata;\n            this.grantInProgress = dagResponse;\n\n            const protocol: DeviceAuthorizationGrantProtocolPayload = {\n                type: PayloadType.Protocol,\n                protocol: \"device_authorization_grant\",\n                device_id: deviceId,\n                device_authorization_grant: {\n                    verification_uri: dagResponse.verification_uri,\n                    verification_uri_complete: dagResponse.verification_uri_complete,\n                },\n            };\n\n            await this.send(protocol);\n\n            return {\n                verificationUri: dagResponse.verification_uri_complete ?? dagResponse.verification_uri,\n                userCode: dagResponse.user_code,\n            };\n        } else {\n            // The user needs to do step 7 for the out-of-band confirmation\n            // but, first we receive the protocol chosen by the other device so that\n            // the confirmation_uri is ready to go\n            logger.info(\"Waiting for protocol message\");\n            const payload = await this.receive<ProtocolPayload | DeviceAuthorizationGrantProtocolPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocol) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            if (isDeviceAuthorizationGrantProtocolPayload(payload)) {\n                const { device_authorization_grant: dag, device_id: expectingNewDeviceId } = payload;\n                const { verification_uri: verificationUri, verification_uri_complete: verificationUriComplete } = dag;\n\n                let deviceAlreadyExists = true;\n                try {\n                    await this.client?.getDevice(expectingNewDeviceId);\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        deviceAlreadyExists = false;\n                    }\n                }\n\n                if (deviceAlreadyExists) {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.DeviceAlreadyExists,\n                    });\n                    throw new RendezvousError(\n                        \"Specified device ID already exists\",\n                        MSC4108FailureReason.DeviceAlreadyExists,\n                    );\n                }\n\n                this.expectingNewDeviceId = expectingNewDeviceId;\n\n                return { verificationUri: verificationUriComplete ?? verificationUri };\n            }\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.UnsupportedProtocol,\n            });\n            throw new RendezvousError(\n                \"Received a request for an unsupported protocol\",\n                MSC4108FailureReason.UnsupportedProtocol,\n            );\n        }\n    }\n\n    /**\n     * The fourth step in the OIDC QR login process.\n     * The reciprocating device must perform step 5 for this method to resolve.\n     * To be called after {@link deviceAuthorizationGrant} only on the new device.\n     */\n    public async completeLoginOnNewDevice({\n        clientId,\n    }: {\n        clientId: string;\n    }): Promise<DeviceAccessTokenResponse | undefined> {\n        if (!this.isNewDevice || !this.grantInProgress || !this.metadata) {\n            throw new Error(\"Can only complete login on new device\");\n        }\n\n        logger.info(\"Waiting for protocol accepted message\");\n        // wait for accepted message\n        const payload = await this.receive<AcceptedPayload | FailurePayload>();\n\n        if (!payload) {\n            throw new RendezvousError(\n                \"No response from existing device\",\n                MSC4108FailureReason.UnexpectedMessageReceived,\n            );\n        }\n        if (payload.type === PayloadType.Failure) {\n            throw new RendezvousError(\"Failed\", (payload as FailurePayload).reason);\n        }\n        if (payload.type !== PayloadType.ProtocolAccepted) {\n            throw new RendezvousError(\"Unexpected message received\", MSC4108FailureReason.UnexpectedMessageReceived);\n        }\n\n        // poll for DAG\n        const res = await waitForDeviceAuthorization({\n            session: this.grantInProgress,\n            metadata: this.metadata,\n            clientId,\n        });\n\n        if (!res) {\n            throw new RendezvousError(\n                \"No response from device authorization endpoint\",\n                ClientRendezvousFailureReason.Unknown,\n            );\n        }\n\n        if (\"error\" in res) {\n            let reason: MSC4108FailureReason = MSC4108FailureReason.UnexpectedMessageReceived;\n            if (res.error === \"expired_token\") {\n                reason = MSC4108FailureReason.AuthorizationExpired;\n            } else if (res.error === \"access_denied\") {\n                reason = MSC4108FailureReason.UserCancelled;\n            }\n            const payload: FailurePayload = {\n                type: PayloadType.Failure,\n                reason,\n            };\n            await this.send(payload);\n\n            throw new RendezvousError(\"Rejection from device authorization endpoint\", reason);\n        }\n\n        return res;\n    }\n\n    /**\n     * The fifth (and final) step in the OIDC QR login process.\n     * To be called after the new device has completed authentication.\n     */\n    public async shareSecrets(): Promise<{ secrets?: Omit<SecretsPayload, \"type\"> }> {\n        if (this.isNewDevice) {\n            await this.send<SuccessPayload>({\n                type: PayloadType.Success,\n            });\n            // then wait for secrets\n            logger.info(\"Waiting for secrets message\");\n            const payload = await this.receive<SecretsPayload>();\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Secrets) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n            return { secrets: payload };\n            // then done?\n        } else {\n            if (!this.expectingNewDeviceId) {\n                throw new Error(\"No new device ID expected\");\n            }\n            await this.send<AcceptedPayload>({\n                type: PayloadType.ProtocolAccepted,\n            });\n\n            logger.info(\"Waiting for outcome message\");\n            const payload = await this.receive<SuccessPayload | DeclinedPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type === PayloadType.Declined) {\n                throw new RendezvousError(\"User declined\", ClientRendezvousFailureReason.UserDeclined);\n            }\n\n            if (payload?.type !== PayloadType.Success) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\"Unexpected message\", MSC4108FailureReason.UnexpectedMessageReceived);\n            }\n\n            const timeout = Date.now() + 10000; // wait up to 10 seconds\n            do {\n                // is the device visible via the Homeserver?\n                try {\n                    const device = await this.client?.getDevice(this.expectingNewDeviceId);\n\n                    if (device) {\n                        // if so, return the secrets\n                        const secretsBundle = await this.client!.getCrypto()!.exportSecretsBundle!();\n                        if (this.channel.cancelled) {\n                            throw new RendezvousError(\"User cancelled\", MSC4108FailureReason.UserCancelled);\n                        }\n                        // send secrets\n                        await this.send<SecretsPayload>({\n                            type: PayloadType.Secrets,\n                            ...secretsBundle,\n                        });\n                        return { secrets: secretsBundle };\n                        // let the other side close the rendezvous session\n                    }\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        // not found, so keep waiting until timeout\n                    } else {\n                        throw err;\n                    }\n                }\n                await sleep(1000);\n            } while (Date.now() < timeout);\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.DeviceNotFound,\n            });\n            throw new RendezvousError(\"New device not found\", MSC4108FailureReason.DeviceNotFound);\n        }\n    }\n\n    private async receive<T extends MSC4108Payload>(): Promise<T | FailurePayload | undefined> {\n        return (await this.channel.secureReceive()) as T | undefined;\n    }\n\n    private async send<T extends MSC4108Payload>(payload: T): Promise<void> {\n        await this.channel.secureSend(payload);\n    }\n\n    /**\n     * Decline the login on the existing device.\n     */\n    public async declineLoginOnExistingDevice(): Promise<void> {\n        if (!this.isExistingDevice) {\n            throw new Error(\"Can only decline login on existing device\");\n        }\n        await this.send<FailurePayload>({\n            type: PayloadType.Failure,\n            reason: MSC4108FailureReason.UserCancelled,\n        });\n    }\n\n    /**\n     * Cancels the rendezvous session.\n     * @param reason the reason for the cancellation\n     */\n    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {\n        this.onFailure?.(reason);\n        await this.channel.cancel(reason);\n    }\n\n    /**\n     * Closes the rendezvous session.\n     */\n    public async close(): Promise<void> {\n        await this.channel.close();\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAAS,YAAY,QAAQ,oCAAoC;AAEjE,SACI,6BAA6B,EAC7B,oBAAoB,EACpB,eAAe,QAEZ,YAAY;AAEnB,SAAS,MAAM,QAAQ,cAAc;AAErC,SAAS,WAAW,QAAQ,sBAAsB;AAClD,SAAS,KAAK,QAAQ,aAAa;AACnC,SAGI,aAAa,EACb,cAAc,EACd,wBAAwB,EAExB,0BAA0B,QAEvB,kBAAkB;AAGzB;AACA;AACA;AACA;AACA;AACA,WAAY,WAAW,0BAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAA,OAAX,WAAW;AAAA;;AAUvB;AACA;AACA;AACA;AACA;;AAyBA,SAAS,yCAAyC,CAC9C,OAAwB,EAC0B;EAClD,OAAO,OAAO,CAAC,QAAQ,KAAK,4BAA4B;AAC5D;AAwBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAM,mBAAmB,CAAC;EAO7B;AACJ;AACA;EACI,IAAW,SAAS,GAAuB;IACvC,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;EACvC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW,WAAW,CACG,OAA6B,EAC7B,WAAoB,EACpB,MAAqB,EAC/B,SAAqC,EAC9C;IAAA;IAAA;IAAA;IAAA;IAAA;IAAA,KAJmB,OAA6B,GAA7B,OAA6B;IAAA,KAC7B,WAAoB,GAApB,WAAoB;IAAA,KACpB,MAAqB,GAArB,MAAqB;IAAA,KAC/B,SAAqC,GAArC,SAAqC;IAE5C,IAAI,CAAC,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK;EAC3E;;EAEA;AACJ;AACA;EACI,IAAW,IAAI,GAA2B;IACtC,OAAO,IAAI,CAAC,KAAK;EACrB;;EAEA;AACJ;AACA;EACI,MAAa,YAAY,GAAkB;IACvC,IAAI,IAAI,CAAC,KAAK,EAAE;MACZ;IACJ;IAEA,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;MAC5D,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAE,CAAC;IAC1F,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,KAAK,EAAE;MAC9C,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IAChE;EACJ;;EAEA;AACJ;AACA;EACI,IAAW,gBAAgB,GAAY;IACnC,OAAO,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,WAAW;EACtD;;EAEA;AACJ;AACA;EACI,IAAW,WAAW,GAAY;IAC9B,OAAO,CAAC,IAAI,CAAC,gBAAgB;EACjC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACI,MAAa,kBAAkB,GAAqC;IAChE,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,WAAW,gBAAgB,IAAI,CAAC,WAAW,GAAG,CAAC;IAClG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5B,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB;;MAEA,IAAI,IAAI,CAAC,WAAW,EAAE;QAClB;MAAA,CACH,MAAM;QACH;QACA,IAAI,gBAA8C;QAClD,IAAI;UACA,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAE,eAAe,CAAC,CAAC;QAC3D,CAAC,CAAC,OAAO,CAAC,EAAE;UACR,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAC;QACvD;QAEA,IAAI,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE;UACtF,MAAM,IAAI,CAAC,IAAI,CAAmB;YAC9B,IAAI,EAAE,WAAW,CAAC,SAAS;YAC3B,SAAS,EAAE,CAAC,4BAA4B,CAAC;YACzC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAE,SAAS,CAAC;UACvC,CAAC,CAAC;QACN,CAAC,MAAM;UACH,MAAM,IAAI,CAAC,IAAI,CAAiB;YAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,MAAM,EAAE,oBAAoB,CAAC;UACjC,CAAC,CAAC;UACF,MAAM,IAAI,eAAe,CACrB,+BAA+B,EAC/B,oBAAoB,CAAC,mBACzB,CAAC;QACL;MACJ;IACJ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE;MACzB;MACA,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC;MAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,CAAC;MAEtD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,SAAS,EAAE;QACzC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MAEA,OAAO;QAAE,UAAU,EAAE,OAAO,CAAC;MAAW,CAAC;IAC7C,CAAC,MAAM;MACH;IAAA;IAEJ,OAAO,CAAC,CAAC;EACb;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,wBAAwB,CAAC,KAIrC,EAGE;IACC,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB,IAAI,CAAC,KAAK,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;MAC5D;MAEA,MAAM;QAAE,QAAQ;QAAE,QAAQ;QAAE;MAAS,CAAC,GAAG,KAAK;MAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC;;MAErC;MACA,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;QAC/C,QAAQ;QACR,KAAK;QACL;MACJ,CAAC,CAAC;MAEF,IAAI,CAAC,QAAQ,GAAG,QAAQ;MACxB,IAAI,CAAC,eAAe,GAAG,WAAW;MAElC,MAAM,QAAiD,GAAG;QACtD,IAAI,EAAE,WAAW,CAAC,QAAQ;QAC1B,QAAQ,EAAE,4BAA4B;QACtC,SAAS,EAAE,QAAQ;QACnB,0BAA0B,EAAE;UACxB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;UAC9C,yBAAyB,EAAE,WAAW,CAAC;QAC3C;MACJ,CAAC;MAED,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;MAEzB,OAAO;QACH,eAAe,EAAE,WAAW,CAAC,yBAAyB,IAAI,WAAW,CAAC,gBAAgB;QACtF,QAAQ,EAAE,WAAW,CAAC;MAC1B,CAAC;IACL,CAAC,MAAM;MACH;MACA;MACA;MACA,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC;MAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA4D,CAAC;MAE/F,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE;QACxC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MAEA,IAAI,yCAAyC,CAAC,OAAO,CAAC,EAAE;QACpD,MAAM;UAAE,0BAA0B,EAAE,GAAG;UAAE,SAAS,EAAE;QAAqB,CAAC,GAAG,OAAO;QACpF,MAAM;UAAE,gBAAgB,EAAE,eAAe;UAAE,yBAAyB,EAAE;QAAwB,CAAC,GAAG,GAAG;QAErG,IAAI,mBAAmB,GAAG,IAAI;QAC9B,IAAI;UACA,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,oBAAoB,CAAC;QACtD,CAAC,CAAC,OAAO,GAA0B,EAAE;UACjC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;YACtD,mBAAmB,GAAG,KAAK;UAC/B;QACJ;QAEA,IAAI,mBAAmB,EAAE;UACrB,MAAM,IAAI,CAAC,IAAI,CAAiB;YAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,MAAM,EAAE,oBAAoB,CAAC;UACjC,CAAC,CAAC;UACF,MAAM,IAAI,eAAe,CACrB,oCAAoC,EACpC,oBAAoB,CAAC,mBACzB,CAAC;QACL;QAEA,IAAI,CAAC,oBAAoB,GAAG,oBAAoB;QAEhD,OAAO;UAAE,eAAe,EAAE,uBAAuB,IAAI;QAAgB,CAAC;MAC1E;MAEA,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,MAAM,EAAE,oBAAoB,CAAC;MACjC,CAAC,CAAC;MACF,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,oBAAoB,CAAC,mBACzB,CAAC;IACL;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,wBAAwB,CAAC;IAClC;EAGJ,CAAC,EAAkD;IAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;MAC9D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;IAC5D;IAEA,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC;IACpD;IACA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmC,CAAC;IAEtE,IAAI,CAAC,OAAO,EAAE;MACV,MAAM,IAAI,eAAe,CACrB,kCAAkC,EAClC,oBAAoB,CAAC,yBACzB,CAAC;IACL;IACA,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;MACtC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAG,OAAO,CAAoB,MAAM,CAAC;IAC3E;IACA,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,gBAAgB,EAAE;MAC/C,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,oBAAoB,CAAC,yBAAyB,CAAC;IAC5G;;IAEA;IACA,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC;MACzC,OAAO,EAAE,IAAI,CAAC,eAAe;MAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;MACvB;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE;MACN,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,6BAA6B,CAAC,OAClC,CAAC;IACL;IAEA,IAAI,OAAO,IAAI,GAAG,EAAE;MAChB,IAAI,MAA4B,GAAG,oBAAoB,CAAC,yBAAyB;MACjF,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,EAAE;QAC/B,MAAM,GAAG,oBAAoB,CAAC,oBAAoB;MACtD,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,EAAE;QACtC,MAAM,GAAG,oBAAoB,CAAC,aAAa;MAC/C;MACA,MAAM,OAAuB,GAAG;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB;MACJ,CAAC;MACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;MAExB,MAAM,IAAI,eAAe,CAAC,8CAA8C,EAAE,MAAM,CAAC;IACrF;IAEA,OAAO,GAAG;EACd;;EAEA;AACJ;AACA;AACA;EACI,MAAa,YAAY,GAAwD;IAC7E,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC;MACtB,CAAC,CAAC;MACF;MACA,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;MAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,CAAC;MACpD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MACA,OAAO;QAAE,OAAO,EAAE;MAAQ,CAAC;MAC3B;IACJ,CAAC,MAAM;MACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;MAChD;MACA,MAAM,IAAI,CAAC,IAAI,CAAkB;QAC7B,IAAI,EAAE,WAAW,CAAC;MACtB,CAAC,CAAC;MAEF,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;MAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmC,CAAC;MAEtE,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE;QACxC,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,6BAA6B,CAAC,YAAY,CAAC;MAC1F;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,yBAAyB,CAAC;MACnG;MAEA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;MACpC,GAAG;QACC;QACA,IAAI;UACA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC;UAEtE,IAAI,MAAM,EAAE;YACR;YACA,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAE,SAAS,CAAC,CAAC,CAAE,mBAAmB,CAAE,CAAC;YAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;cACxB,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,aAAa,CAAC;YACnF;YACA;YACA,MAAM,IAAI,CAAC,IAAI;cACX,IAAI,EAAE,WAAW,CAAC;YAAO,GACtB,aAAa,CACnB,CAAC;YACF,OAAO;cAAE,OAAO,EAAE;YAAc,CAAC;YACjC;UACJ;QACJ,CAAC,CAAC,OAAO,GAA0B,EAAE;UACjC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;YACtD;UAAA,CACH,MAAM;YACH,MAAM,GAAG;UACb;QACJ;QACA,MAAM,KAAK,CAAC,IAAI,CAAC;MACrB,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO;MAE7B,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,MAAM,EAAE,oBAAoB,CAAC;MACjC,CAAC,CAAC;MACF,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,cAAc,CAAC;IAC1F;EACJ;EAEA,MAAc,OAAO,GAAsE;IACvF,OAAQ,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;EAC9C;EAEA,MAAc,IAAI,CAA2B,OAAU,EAAiB;IACpE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;EAC1C;;EAEA;AACJ;AACA;EACI,MAAa,4BAA4B,GAAkB;IACvD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;MACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;IAChE;IACA,MAAM,IAAI,CAAC,IAAI,CAAiB;MAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;MACzB,MAAM,EAAE,oBAAoB,CAAC;IACjC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACI,MAAa,MAAM,CAAC,MAA4D,EAAiB;IAC7F,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;EACrC;;EAEA;AACJ;AACA;EACI,MAAa,KAAK,GAAkB;IAChC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;EAC9B;AACJ","ignoreList":[]}

package/lib/rendezvous/RendezvousChannel.js

@@ -1 +1,3 @@
-export {};
+export {};
+export {};
+//# sourceMappingURL=RendezvousChannel.js.map

package/lib/rendezvous/RendezvousCode.js

@@ -1 +1,3 @@
-export {};
+export {};
+export {};
+//# sourceMappingURL=RendezvousCode.js.map

package/lib/rendezvous/RendezvousError.js.map

@@ -1 +1 @@
-{"version":3,"file":"RendezvousError.js","names":["RendezvousError","Error","constructor","message","code"],"sources":["../../src/rendezvous/RendezvousError.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type RendezvousFailureReason } from \"./index.ts\";\n\nexport class RendezvousError extends Error {\n    public constructor(\n        message: string,\n        public readonly code: RendezvousFailureReason,\n    ) {\n        super(message);\n    }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,OAAO,MAAMA,eAAe,SAASC,KAAK,CAAC;EAChCC,WAAWA,CACdC,OAAe,EACCC,IAA6B,EAC/C;IACE,KAAK,CAACD,OAAO,CAAC;IAAC,KAFCC,IAA6B,GAA7BA,IAA6B;EAGjD;AACJ","ignoreList":[]}
+{"version":3,"file":"RendezvousError.js","names":[],"sources":["../../src/rendezvous/RendezvousError.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type RendezvousFailureReason } from \"./index.ts\";\n\nexport class RendezvousError extends Error {\n    public constructor(\n        message: string,\n        public readonly code: RendezvousFailureReason,\n    ) {\n        super(message);\n    }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,OAAO,MAAM,eAAe,SAAS,KAAK,CAAC;EAChC,WAAW,CACd,OAAe,EACC,IAA6B,EAC/C;IACE,KAAK,CAAC,OAAO,CAAC;IAAC,KAFC,IAA6B,GAA7B,IAA6B;EAGjD;AACJ","ignoreList":[]}

package/lib/rendezvous/RendezvousFailureReason.js

@@ -14,7 +14,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
-export var MSC4108FailureReason = /*#__PURE__*/function (MSC4108FailureReason) {
+export let MSC4108FailureReason = /*#__PURE__*/function (MSC4108FailureReason) {
   MSC4108FailureReason["AuthorizationExpired"] = "authorization_expired";
   MSC4108FailureReason["DeviceAlreadyExists"] = "device_already_exists";
   MSC4108FailureReason["DeviceNotFound"] = "device_not_found";
@@ -23,7 +23,7 @@ export var MSC4108FailureReason = /*#__PURE__*/function (MSC4108FailureReason) {
   MSC4108FailureReason["UserCancelled"] = "user_cancelled";
   return MSC4108FailureReason;
 }({});
-export var ClientRendezvousFailureReason = /*#__PURE__*/function (ClientRendezvousFailureReason) {
+export let ClientRendezvousFailureReason = /*#__PURE__*/function (ClientRendezvousFailureReason) {
   /** The sign in request has expired */
   ClientRendezvousFailureReason["Expired"] = "expired";
   /** The homeserver is lacking support for the required features */

package/lib/rendezvous/RendezvousFailureReason.js.map

@@ -1 +1 @@
-{"version":3,"file":"RendezvousFailureReason.js","names":["MSC4108FailureReason","ClientRendezvousFailureReason"],"sources":["../../src/rendezvous/RendezvousFailureReason.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nexport type RendezvousFailureListener = (reason: RendezvousFailureReason) => void;\n\nexport type RendezvousFailureReason = MSC4108FailureReason | ClientRendezvousFailureReason;\n\nexport enum MSC4108FailureReason {\n    AuthorizationExpired = \"authorization_expired\",\n    DeviceAlreadyExists = \"device_already_exists\",\n    DeviceNotFound = \"device_not_found\",\n    UnexpectedMessageReceived = \"unexpected_message_received\",\n    UnsupportedProtocol = \"unsupported_protocol\",\n    UserCancelled = \"user_cancelled\",\n}\n\nexport enum ClientRendezvousFailureReason {\n    /** The sign in request has expired */\n    Expired = \"expired\",\n    /** The homeserver is lacking support for the required features */\n    HomeserverLacksSupport = \"homeserver_lacks_support\",\n    /** The secure channel verification failed meaning that it might be compromised */\n    InsecureChannelDetected = \"insecure_channel_detected\",\n    /** An invalid/incompatible QR code was scanned */\n    InvalidCode = \"invalid_code\",\n    /** The other device is not signed in */\n    OtherDeviceNotSignedIn = \"other_device_not_signed_in\",\n    /** The other device is already signed in */\n    OtherDeviceAlreadySignedIn = \"other_device_already_signed_in\",\n    /** Other */\n    Unknown = \"unknown\",\n    /** The user declined the sign in request */\n    UserDeclined = \"user_declined\",\n    /** The rendezvous request is missing an ETag header */\n    ETagMissing = \"etag_missing\",\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,WAAYA,oBAAoB,0BAApBA,oBAAoB;EAApBA,oBAAoB;EAApBA,oBAAoB;EAApBA,oBAAoB;EAApBA,oBAAoB;EAApBA,oBAAoB;EAApBA,oBAAoB;EAAA,OAApBA,oBAAoB;AAAA;AAShC,WAAYC,6BAA6B,0BAA7BA,6BAA6B;EACrC;EADQA,6BAA6B;EAGrC;EAHQA,6BAA6B;EAKrC;EALQA,6BAA6B;EAOrC;EAPQA,6BAA6B;EASrC;EATQA,6BAA6B;EAWrC;EAXQA,6BAA6B;EAarC;EAbQA,6BAA6B;EAerC;EAfQA,6BAA6B;EAiBrC;EAjBQA,6BAA6B;EAAA,OAA7BA,6BAA6B;AAAA","ignoreList":[]}
+{"version":3,"file":"RendezvousFailureReason.js","names":[],"sources":["../../src/rendezvous/RendezvousFailureReason.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nexport type RendezvousFailureListener = (reason: RendezvousFailureReason) => void;\n\nexport type RendezvousFailureReason = MSC4108FailureReason | ClientRendezvousFailureReason;\n\nexport enum MSC4108FailureReason {\n    AuthorizationExpired = \"authorization_expired\",\n    DeviceAlreadyExists = \"device_already_exists\",\n    DeviceNotFound = \"device_not_found\",\n    UnexpectedMessageReceived = \"unexpected_message_received\",\n    UnsupportedProtocol = \"unsupported_protocol\",\n    UserCancelled = \"user_cancelled\",\n}\n\nexport enum ClientRendezvousFailureReason {\n    /** The sign in request has expired */\n    Expired = \"expired\",\n    /** The homeserver is lacking support for the required features */\n    HomeserverLacksSupport = \"homeserver_lacks_support\",\n    /** The secure channel verification failed meaning that it might be compromised */\n    InsecureChannelDetected = \"insecure_channel_detected\",\n    /** An invalid/incompatible QR code was scanned */\n    InvalidCode = \"invalid_code\",\n    /** The other device is not signed in */\n    OtherDeviceNotSignedIn = \"other_device_not_signed_in\",\n    /** The other device is already signed in */\n    OtherDeviceAlreadySignedIn = \"other_device_already_signed_in\",\n    /** Other */\n    Unknown = \"unknown\",\n    /** The user declined the sign in request */\n    UserDeclined = \"user_declined\",\n    /** The rendezvous request is missing an ETag header */\n    ETagMissing = \"etag_missing\",\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,WAAY,oBAAoB,0BAApB,oBAAoB;EAApB,oBAAoB;EAApB,oBAAoB;EAApB,oBAAoB;EAApB,oBAAoB;EAApB,oBAAoB;EAApB,oBAAoB;EAAA,OAApB,oBAAoB;AAAA;AAShC,WAAY,6BAA6B,0BAA7B,6BAA6B;EACrC;EADQ,6BAA6B;EAGrC;EAHQ,6BAA6B;EAKrC;EALQ,6BAA6B;EAOrC;EAPQ,6BAA6B;EASrC;EATQ,6BAA6B;EAWrC;EAXQ,6BAA6B;EAarC;EAbQ,6BAA6B;EAerC;EAfQ,6BAA6B;EAiBrC;EAjBQ,6BAA6B;EAAA,OAA7B,6BAA6B;AAAA","ignoreList":[]}

package/lib/rendezvous/RendezvousIntent.js

@@ -14,7 +14,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
-export var RendezvousIntent = /*#__PURE__*/function (RendezvousIntent) {
+export let RendezvousIntent = /*#__PURE__*/function (RendezvousIntent) {
   RendezvousIntent["LOGIN_ON_NEW_DEVICE"] = "login.start";
   RendezvousIntent["RECIPROCATE_LOGIN_ON_EXISTING_DEVICE"] = "login.reciprocate";
   return RendezvousIntent;

package/lib/rendezvous/RendezvousIntent.js.map

@@ -1 +1 @@
-{"version":3,"file":"RendezvousIntent.js","names":["RendezvousIntent"],"sources":["../../src/rendezvous/RendezvousIntent.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nexport enum RendezvousIntent {\n    LOGIN_ON_NEW_DEVICE = \"login.start\",\n    RECIPROCATE_LOGIN_ON_EXISTING_DEVICE = \"login.reciprocate\",\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,WAAYA,gBAAgB,0BAAhBA,gBAAgB;EAAhBA,gBAAgB;EAAhBA,gBAAgB;EAAA,OAAhBA,gBAAgB;AAAA","ignoreList":[]}
+{"version":3,"file":"RendezvousIntent.js","names":[],"sources":["../../src/rendezvous/RendezvousIntent.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nexport enum RendezvousIntent {\n    LOGIN_ON_NEW_DEVICE = \"login.start\",\n    RECIPROCATE_LOGIN_ON_EXISTING_DEVICE = \"login.reciprocate\",\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,WAAY,gBAAgB,0BAAhB,gBAAgB;EAAhB,gBAAgB;EAAhB,gBAAgB;EAAA,OAAhB,gBAAgB;AAAA","ignoreList":[]}

package/lib/rendezvous/RendezvousTransport.js

@@ -1 +1,3 @@
-export {};
+export {};
+export {};
+//# sourceMappingURL=RendezvousTransport.js.map

package/lib/rendezvous/channels/MSC4108SecureChannel.js

@@ -1,4 +1,3 @@
-import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
 import _defineProperty from "@babel/runtime/helpers/defineProperty";
 /*
 Copyright 2024 The Matrix.org Foundation C.I.C.
@@ -28,12 +27,12 @@ import { logger } from "../../logger.js";
  */
 export class MSC4108SecureChannel {
   constructor(rendezvousSession, theirPublicKey, onFailure) {
-    this.rendezvousSession = rendezvousSession;
-    this.theirPublicKey = theirPublicKey;
-    this.onFailure = onFailure;
     _defineProperty(this, "secureChannel", void 0);
     _defineProperty(this, "establishedChannel", void 0);
     _defineProperty(this, "connected", false);
+    this.rendezvousSession = rendezvousSession;
+    this.theirPublicKey = theirPublicKey;
+    this.onFailure = onFailure;
     this.secureChannel = new Ecies();
   }
 
@@ -43,196 +42,173 @@ export class MSC4108SecureChannel {
    * @param serverName the name of the homeserver to connect to, as defined by server discovery in the spec, required for `Reciprocate` mode.
    */
 
-  generateCode(mode, serverName) {
-    var _this = this;
-    return _asyncToGenerator(function* () {
-      var url = _this.rendezvousSession.url;
-      if (!url) {
-        throw new Error("No rendezvous session URL");
-      }
-      return new QrCodeData(_this.secureChannel.public_key(), url, mode === QrCodeIntent.Reciprocate ? serverName : undefined).toBytes();
-    })();
+  async generateCode(mode, serverName) {
+    const {
+      url
+    } = this.rendezvousSession;
+    if (!url) {
+      throw new Error("No rendezvous session URL");
+    }
+    return new QrCodeData(this.secureChannel.public_key(), url, mode === QrCodeIntent.Reciprocate ? serverName : undefined).toBytes();
   }
 
   /**
    * Returns the check code for the secure channel or undefined if not generated yet.
    */
   getCheckCode() {
-    var _this$establishedChan;
-    var x = (_this$establishedChan = this.establishedChannel) === null || _this$establishedChan === void 0 ? void 0 : _this$establishedChan.check_code();
+    const x = this.establishedChannel?.check_code();
     if (!x) {
       return undefined;
     }
-    return Array.from(x.as_bytes()).map(b => "".concat(b % 10)).join("");
+    return Array.from(x.as_bytes()).map(b => `${b % 10}`).join("");
   }
 
   /**
    * Connects and establishes a secure channel with the other device.
    */
-  connect() {
-    var _this2 = this;
-    return _asyncToGenerator(function* () {
-      if (_this2.connected) {
-        throw new Error("Channel already connected");
+  async connect() {
+    if (this.connected) {
+      throw new Error("Channel already connected");
+    }
+    if (this.theirPublicKey) {
+      // We are the scanning device
+      const result = this.secureChannel.establish_outbound_channel(this.theirPublicKey, "MATRIX_QR_CODE_LOGIN_INITIATE");
+      this.establishedChannel = result.channel;
+
+      /*
+       Secure Channel step 4. Device S sends the initial message
+        Nonce := 0
+       SH := ECDH(Ss, Gp)
+       EncKey := HKDF_SHA256(SH, "MATRIX_QR_CODE_LOGIN|" || Gp || "|" || Sp, 0, 32)
+       TaggedCiphertext := ChaCha20Poly1305_Encrypt(EncKey, Nonce, "MATRIX_QR_CODE_LOGIN_INITIATE")
+       Nonce := Nonce + 2
+       LoginInitiateMessage := UnpaddedBase64(TaggedCiphertext) || "|" || UnpaddedBase64(Sp)
+       */
+      {
+        logger.info("Sending LoginInitiateMessage");
+        await this.rendezvousSession.send(result.initial_message);
       }
-      if (_this2.theirPublicKey) {
-        // We are the scanning device
-        var result = _this2.secureChannel.establish_outbound_channel(_this2.theirPublicKey, "MATRIX_QR_CODE_LOGIN_INITIATE");
-        _this2.establishedChannel = result.channel;
-
-        /*
-         Secure Channel step 4. Device S sends the initial message
-          Nonce := 0
-         SH := ECDH(Ss, Gp)
-         EncKey := HKDF_SHA256(SH, "MATRIX_QR_CODE_LOGIN|" || Gp || "|" || Sp, 0, 32)
-         TaggedCiphertext := ChaCha20Poly1305_Encrypt(EncKey, Nonce, "MATRIX_QR_CODE_LOGIN_INITIATE")
-         Nonce := Nonce + 2
-         LoginInitiateMessage := UnpaddedBase64(TaggedCiphertext) || "|" || UnpaddedBase64(Sp)
-         */
-        {
-          logger.info("Sending LoginInitiateMessage");
-          yield _this2.rendezvousSession.send(result.initial_message);
-        }
 
-        /*
-        Secure Channel step 6. Verification by Device S
-         Nonce_G := 1
-        (TaggedCiphertext, Sp) := Unpack(Message)
-        Plaintext := ChaCha20Poly1305_Decrypt(EncKey, Nonce_G, TaggedCiphertext)
-        Nonce_G := Nonce_G + 2
-         unless Plaintext == "MATRIX_QR_CODE_LOGIN_OK":
-            FAIL
-         */
-        {
-          logger.info("Waiting for LoginOkMessage");
-          var ciphertext = yield _this2.rendezvousSession.receive();
-          if (!ciphertext) {
-            throw new RendezvousError("No response from other device", MSC4108FailureReason.UnexpectedMessageReceived);
-          }
-          var candidateLoginOkMessage = yield _this2.decrypt(ciphertext);
-          if (candidateLoginOkMessage !== "MATRIX_QR_CODE_LOGIN_OK") {
-            throw new RendezvousError("Invalid response from other device", ClientRendezvousFailureReason.InsecureChannelDetected);
-          }
-
-          // Step 6 is now complete. We trust the channel
-        }
-      } else {
-        /*
-        Secure Channel step 5. Device G confirms
-         Nonce_S := 0
-        (TaggedCiphertext, Sp) := Unpack(LoginInitiateMessage)
-        SH := ECDH(Gs, Sp)
-        EncKey := HKDF_SHA256(SH, "MATRIX_QR_CODE_LOGIN|" || Gp || "|" || Sp, 0, 32)
-        Plaintext := ChaCha20Poly1305_Decrypt(EncKey, Nonce_S, TaggedCiphertext)
-        Nonce_S := Nonce_S + 2
-         */
-        // wait for the other side to send us their public key
-        logger.info("Waiting for LoginInitiateMessage");
-        var loginInitiateMessage = yield _this2.rendezvousSession.receive();
-        if (!loginInitiateMessage) {
+      /*
+      Secure Channel step 6. Verification by Device S
+       Nonce_G := 1
+      (TaggedCiphertext, Sp) := Unpack(Message)
+      Plaintext := ChaCha20Poly1305_Decrypt(EncKey, Nonce_G, TaggedCiphertext)
+      Nonce_G := Nonce_G + 2
+       unless Plaintext == "MATRIX_QR_CODE_LOGIN_OK":
+          FAIL
+       */
+      {
+        logger.info("Waiting for LoginOkMessage");
+        const ciphertext = await this.rendezvousSession.receive();
+        if (!ciphertext) {
           throw new RendezvousError("No response from other device", MSC4108FailureReason.UnexpectedMessageReceived);
         }
-        var _this2$secureChannel$ = _this2.secureChannel.establish_inbound_channel(loginInitiateMessage),
-          channel = _this2$secureChannel$.channel,
-          candidateLoginInitiateMessage = _this2$secureChannel$.message;
-        _this2.establishedChannel = channel;
-        if (candidateLoginInitiateMessage !== "MATRIX_QR_CODE_LOGIN_INITIATE") {
+        const candidateLoginOkMessage = await this.decrypt(ciphertext);
+        if (candidateLoginOkMessage !== "MATRIX_QR_CODE_LOGIN_OK") {
           throw new RendezvousError("Invalid response from other device", ClientRendezvousFailureReason.InsecureChannelDetected);
         }
-        logger.info("LoginInitiateMessage received");
-        logger.info("Sending LoginOkMessage");
-        var loginOkMessage = yield _this2.encrypt("MATRIX_QR_CODE_LOGIN_OK");
-        yield _this2.rendezvousSession.send(loginOkMessage);
-
-        // Step 5 is complete. We don't yet trust the channel
 
-        // next step will be for the user to confirm the check code on the other device
+        // Step 6 is now complete. We trust the channel
       }
-      _this2.connected = true;
-    })();
-  }
-  decrypt(ciphertext) {
-    var _this3 = this;
-    return _asyncToGenerator(function* () {
-      if (!_this3.establishedChannel) {
-        throw new Error("Channel closed");
+    } else {
+      /*
+      Secure Channel step 5. Device G confirms
+       Nonce_S := 0
+      (TaggedCiphertext, Sp) := Unpack(LoginInitiateMessage)
+      SH := ECDH(Gs, Sp)
+      EncKey := HKDF_SHA256(SH, "MATRIX_QR_CODE_LOGIN|" || Gp || "|" || Sp, 0, 32)
+      Plaintext := ChaCha20Poly1305_Decrypt(EncKey, Nonce_S, TaggedCiphertext)
+      Nonce_S := Nonce_S + 2
+       */
+      // wait for the other side to send us their public key
+      logger.info("Waiting for LoginInitiateMessage");
+      const loginInitiateMessage = await this.rendezvousSession.receive();
+      if (!loginInitiateMessage) {
+        throw new RendezvousError("No response from other device", MSC4108FailureReason.UnexpectedMessageReceived);
       }
-      return _this3.establishedChannel.decrypt(ciphertext);
-    })();
-  }
-  encrypt(plaintext) {
-    var _this4 = this;
-    return _asyncToGenerator(function* () {
-      if (!_this4.establishedChannel) {
-        throw new Error("Channel closed");
+      const {
+        channel,
+        message: candidateLoginInitiateMessage
+      } = this.secureChannel.establish_inbound_channel(loginInitiateMessage);
+      this.establishedChannel = channel;
+      if (candidateLoginInitiateMessage !== "MATRIX_QR_CODE_LOGIN_INITIATE") {
+        throw new RendezvousError("Invalid response from other device", ClientRendezvousFailureReason.InsecureChannelDetected);
       }
-      return _this4.establishedChannel.encrypt(plaintext);
-    })();
+      logger.info("LoginInitiateMessage received");
+      logger.info("Sending LoginOkMessage");
+      const loginOkMessage = await this.encrypt("MATRIX_QR_CODE_LOGIN_OK");
+      await this.rendezvousSession.send(loginOkMessage);
+
+      // Step 5 is complete. We don't yet trust the channel
+
+      // next step will be for the user to confirm the check code on the other device
+    }
+    this.connected = true;
+  }
+  async decrypt(ciphertext) {
+    if (!this.establishedChannel) {
+      throw new Error("Channel closed");
+    }
+    return this.establishedChannel.decrypt(ciphertext);
+  }
+  async encrypt(plaintext) {
+    if (!this.establishedChannel) {
+      throw new Error("Channel closed");
+    }
+    return this.establishedChannel.encrypt(plaintext);
   }
 
   /**
    * Sends a payload securely to the other device.
    * @param payload the payload to encrypt and send
    */
-  secureSend(payload) {
-    var _this5 = this;
-    return _asyncToGenerator(function* () {
-      if (!_this5.connected) {
-        throw new Error("Channel closed");
-      }
-      var stringifiedPayload = JSON.stringify(payload);
-      logger.debug("=> {\"type\": ".concat(JSON.stringify(payload.type), ", ...}"));
-      yield _this5.rendezvousSession.send(yield _this5.encrypt(stringifiedPayload));
-    })();
+  async secureSend(payload) {
+    if (!this.connected) {
+      throw new Error("Channel closed");
+    }
+    const stringifiedPayload = JSON.stringify(payload);
+    logger.debug(`=> {"type": ${JSON.stringify(payload.type)}, ...}`);
+    await this.rendezvousSession.send(await this.encrypt(stringifiedPayload));
   }
 
   /**
    * Receives an encrypted payload from the other device and decrypts it.
    */
-  secureReceive() {
-    var _this6 = this;
-    return _asyncToGenerator(function* () {
-      if (!_this6.establishedChannel) {
-        throw new Error("Channel closed");
-      }
-      var ciphertext = yield _this6.rendezvousSession.receive();
-      if (!ciphertext) {
-        return undefined;
-      }
-      var plaintext = yield _this6.decrypt(ciphertext);
-      var json = JSON.parse(plaintext);
-      logger.debug("<= {\"type\": ".concat(JSON.stringify(json.type), ", ...}"));
-      return json;
-    })();
+  async secureReceive() {
+    if (!this.establishedChannel) {
+      throw new Error("Channel closed");
+    }
+    const ciphertext = await this.rendezvousSession.receive();
+    if (!ciphertext) {
+      return undefined;
+    }
+    const plaintext = await this.decrypt(ciphertext);
+    const json = JSON.parse(plaintext);
+    logger.debug(`<= {"type": ${JSON.stringify(json.type)}, ...}`);
+    return json;
   }
 
   /**
    * Closes the secure channel.
    */
-  close() {
-    var _this7 = this;
-    return _asyncToGenerator(function* () {
-      yield _this7.rendezvousSession.close();
-    })();
+  async close() {
+    await this.rendezvousSession.close();
   }
 
   /**
    * Cancels the secure channel.
    * @param reason the reason for the cancellation
    */
-  cancel(reason) {
-    var _this8 = this;
-    return _asyncToGenerator(function* () {
-      try {
-        var _this8$onFailure;
-        yield _this8.rendezvousSession.cancel(reason);
-        (_this8$onFailure = _this8.onFailure) === null || _this8$onFailure === void 0 || _this8$onFailure.call(_this8, reason);
-      } finally {
-        if (reason !== ClientRendezvousFailureReason.UserDeclined && reason !== MSC4108FailureReason.UserCancelled) {
-          yield _this8.close();
-        }
+  async cancel(reason) {
+    try {
+      await this.rendezvousSession.cancel(reason);
+      this.onFailure?.(reason);
+    } finally {
+      if (reason !== ClientRendezvousFailureReason.UserDeclined && reason !== MSC4108FailureReason.UserCancelled) {
+        await this.close();
       }
-    })();
+    }
   }
 
   /**