matrix-js-sdk 41.8.0 → 41.9.0

package/lib/rust-crypto/PerSessionKeyBackupDownloader.js.map

@@ -1 +1 @@
-{"version":3,"file":"PerSessionKeyBackupDownloader.js","names":["CryptoEvent","ClientPrefix","MatrixError","Method","encodeUri","sleep","KEY_BACKUP_BACKOFF","KeyDownloadErrorCode","KeyDownloadError","Error","constructor","code","concat","name","KeyDownloadRateLimitError","retryMillis","PerSessionKeyBackupDownloader","logger","olmMachine","http","backupManager","_defineProperty","Map","hasConfigurationProblem","configuration","getOrCreateBackupConfiguration","then","downloadKeysLoop","getChild","on","KeyBackupStatus","onBackupStatusChanged","KeyBackupFailed","KeyBackupDecryptionKeyCached","isKeyBackupDownloadConfigured","getServerBackupInfo","_this","_asyncToGenerator","onDecryptionKeyMissingError","roomId","megolmSessionId","isAlreadyInQueue","trace","wasRequestedRecently","queuedRequests","push","stop","stopped","off","some","info","markAsNotFoundInBackup","now","Date","sessionLastCheckAttemptedTime","set","size","Array","from","filter","sid","ts","Math","max","lastCheck","get","getBackupDecryptionKey","_this2","getBackupKeys","_unused","requestRoomKeyFromBackup","version","sessionId","_this3","path","$roomId","$sessionId","authedRequest","Get","undefined","prefix","V3","_this4","downloadLoopRunning","length","request","result","queryKeyBackup","decryptAndImport","e","error","shift","err","MISSING_DECRYPTION_KEY","NETWORK_ERROR","STOPPED","targetRoomId","targetSessionId","_this5","debug","res","backupVersion","errCode","data","errcode","isRateLimitError","waitTime","_e$getRetryAfterMs","getRetryAfterMs","warn","sessionInfo","_this6","sessionsToImport","keys","decryptor","decryptSessions","k","room_id","importBackedUpRoomKeys","_this7","currentBackupVersionCheck","internalCheckFromServer","_this8","_currentServerVersion","_currentServerVersion2","_currentServerVersion4","currentServerVersion","algorithm","_currentServerVersion3","activeVersion","getActiveBackupVersion","backupKeys","decryptionKey","authData","auth_data","public_key","megolmV1PublicKey","publicKeyBase64","backupDecryptor","createBackupDecryptor"],"sources":["../../src/rust-crypto/PerSessionKeyBackupDownloader.ts"],"sourcesContent":["/*\nCopyright 2023 - 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type OlmMachine } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport type * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\nimport { type Curve25519AuthData, type KeyBackupInfo, type KeyBackupSession } from \"../crypto-api/keybackup.ts\";\nimport { CryptoEvent } from \"../crypto-api/index.ts\";\nimport { type Logger } from \"../logger.ts\";\nimport { ClientPrefix, type IHttpOpts, MatrixError, type MatrixHttpApi, Method } from \"../http-api/index.ts\";\nimport { type RustBackupManager } from \"./backup.ts\";\nimport { encodeUri, sleep } from \"../utils.ts\";\nimport { type BackupDecryptor } from \"../common-crypto/CryptoBackend.ts\";\n\n// The minimum time to wait between two retries in case of errors. To avoid hammering the server.\nconst KEY_BACKUP_BACKOFF = 5000; // ms\n\n/**\n * Enumerates the different kind of errors that can occurs when downloading and importing a key from backup.\n */\nenum KeyDownloadErrorCode {\n    /** The requested key is not in the backup. */\n    MISSING_DECRYPTION_KEY = \"MISSING_DECRYPTION_KEY\",\n    /** A network error occurred while trying to download the key from backup. */\n    NETWORK_ERROR = \"NETWORK_ERROR\",\n    /** The loop has been stopped. */\n    STOPPED = \"STOPPED\",\n}\n\nclass KeyDownloadError extends Error {\n    public constructor(public readonly code: KeyDownloadErrorCode) {\n        super(`Failed to get key from backup: ${code}`);\n        this.name = \"KeyDownloadError\";\n    }\n}\n\nclass KeyDownloadRateLimitError extends Error {\n    public constructor(public readonly retryMillis: number) {\n        super(`Failed to get key from backup: rate limited`);\n        this.name = \"KeyDownloadRateLimitError\";\n    }\n}\n\n/** Details of a megolm session whose key we are trying to fetch. */\ntype SessionInfo = { roomId: string; megolmSessionId: string };\n\n/** Holds the current backup decryptor and version that should be used.\n *\n * This is intended to be used as an immutable object (a new instance should be created if the configuration changes),\n * and some of the logic relies on that, so the properties are marked as `readonly`.\n */\ntype Configuration = {\n    readonly backupVersion: string;\n    readonly decryptor: BackupDecryptor;\n};\n\n/**\n * Used when an 'unable to decrypt' error occurs. It attempts to download the key from the backup.\n *\n * The current backup API lacks pagination, which can lead to lengthy key retrieval times for large histories (several 10s of minutes).\n * To mitigate this, keys are downloaded on demand as decryption errors occurs.\n * While this approach may result in numerous requests, it improves user experience by reducing wait times for message decryption.\n *\n * The PerSessionKeyBackupDownloader is resistant to backup configuration changes: it will automatically resume querying when\n * the backup is configured correctly.\n */\nexport class PerSessionKeyBackupDownloader {\n    private stopped = false;\n\n    /**\n     * The version and decryption key to use with current backup if all set up correctly.\n     *\n     * Will not be set unless `hasConfigurationProblem` is `false`.\n     */\n    private configuration: Configuration | null = null;\n\n    /** We remember when a session was requested and not found in backup to avoid query again too soon.\n     * Map of session_id to timestamp */\n    private sessionLastCheckAttemptedTime: Map<string, number> = new Map();\n\n    /** The logger to use */\n    private readonly logger: Logger;\n\n    /** Whether the download loop is running. */\n    private downloadLoopRunning = false;\n\n    /** The list of requests that are queued. */\n    private queuedRequests: SessionInfo[] = [];\n\n    /** Remembers if we have a configuration problem. */\n    private hasConfigurationProblem = false;\n\n    /** The current server backup version check promise. To avoid doing a server call if one is in flight. */\n    private currentBackupVersionCheck: Promise<Configuration | null> | null = null;\n\n    /**\n     * Creates a new instance of PerSessionKeyBackupDownloader.\n     *\n     * @param backupManager - The backup manager to use.\n     * @param olmMachine - The olm machine to use.\n     * @param http - The http instance to use.\n     * @param logger - The logger to use.\n     */\n    public constructor(\n        logger: Logger,\n        private readonly olmMachine: OlmMachine,\n        private readonly http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n        private readonly backupManager: RustBackupManager,\n    ) {\n        this.logger = logger.getChild(\"[PerSessionKeyBackupDownloader]\");\n\n        backupManager.on(CryptoEvent.KeyBackupStatus, this.onBackupStatusChanged);\n        backupManager.on(CryptoEvent.KeyBackupFailed, this.onBackupStatusChanged);\n        backupManager.on(CryptoEvent.KeyBackupDecryptionKeyCached, this.onBackupStatusChanged);\n    }\n\n    /**\n     * Check if key download is successfully configured and active.\n     *\n     * @return `true` if key download is correctly configured and active; otherwise `false`.\n     */\n    public isKeyBackupDownloadConfigured(): boolean {\n        return this.configuration !== null;\n    }\n\n    /**\n     * Return the details of the latest backup on the server, when we last checked.\n     *\n     * This is just a convenience method to expose {@link RustBackupManager.getServerBackupInfo}.\n     */\n    public async getServerBackupInfo(): Promise<KeyBackupInfo | null | undefined> {\n        return await this.backupManager.getServerBackupInfo();\n    }\n\n    /**\n     * Called when a MissingRoomKey or UnknownMessageIndex decryption error is encountered.\n     *\n     * This will try to download the key from the backup if there is a trusted active backup.\n     * In case of success the key will be imported and the onRoomKeysUpdated callback will be called\n     * internally by the rust-sdk and decryption will be retried.\n     *\n     * @param roomId - The room ID of the room where the error occurred.\n     * @param megolmSessionId - The megolm session ID that is missing.\n     */\n    public onDecryptionKeyMissingError(roomId: string, megolmSessionId: string): void {\n        // Several messages encrypted with the same session may be decrypted at the same time,\n        // so we need to be resistant and not query several time the same session.\n        if (this.isAlreadyInQueue(roomId, megolmSessionId)) {\n            // There is already a request queued for this session, no need to queue another one.\n            this.logger.trace(`Not checking key backup for session ${megolmSessionId} as it is already queued`);\n            return;\n        }\n\n        if (this.wasRequestedRecently(megolmSessionId)) {\n            // We already tried to download this session recently and it was not in backup, no need to try again.\n            this.logger.trace(\n                `Not checking key backup for session ${megolmSessionId} as it was already requested recently`,\n            );\n            return;\n        }\n\n        // We always add the request to the queue, even if we have a configuration problem (can't access backup).\n        // This is to make sure that if the configuration problem is resolved, we will try to download the key.\n        // This will happen after an initial sync, at this point the backup will not yet be trusted and the decryption\n        // key will not be available, but it will be just after the verification.\n        // We don't need to persist it because currently on refresh the sdk will retry to decrypt the messages in error.\n        this.queuedRequests.push({ roomId, megolmSessionId });\n\n        // Start the download loop if it's not already running.\n        this.downloadKeysLoop();\n    }\n\n    public stop(): void {\n        this.stopped = true;\n        this.backupManager.off(CryptoEvent.KeyBackupStatus, this.onBackupStatusChanged);\n        this.backupManager.off(CryptoEvent.KeyBackupFailed, this.onBackupStatusChanged);\n        this.backupManager.off(CryptoEvent.KeyBackupDecryptionKeyCached, this.onBackupStatusChanged);\n    }\n\n    /**\n     * Called when the backup status changes (CryptoEvents)\n     * This will trigger a check of the backup configuration.\n     */\n    private onBackupStatusChanged = (): void => {\n        // we want to force check configuration, so we clear the current one.\n        this.hasConfigurationProblem = false;\n        this.configuration = null;\n        this.getOrCreateBackupConfiguration().then((configuration) => {\n            if (configuration) {\n                // restart the download loop if it was stopped\n                this.downloadKeysLoop();\n            }\n        });\n    };\n\n    /** Returns true if the megolm session is already queued for download. */\n    private isAlreadyInQueue(roomId: string, megolmSessionId: string): boolean {\n        return this.queuedRequests.some((info) => {\n            return info.roomId == roomId && info.megolmSessionId == megolmSessionId;\n        });\n    }\n\n    /**\n     * Marks the session as not found in backup, to avoid retrying to soon for a key not in backup\n     *\n     * @param megolmSessionId - The megolm session ID that is missing.\n     */\n    private markAsNotFoundInBackup(megolmSessionId: string): void {\n        const now = Date.now();\n        this.sessionLastCheckAttemptedTime.set(megolmSessionId, now);\n        // if too big make some cleaning to keep under control\n        if (this.sessionLastCheckAttemptedTime.size > 100) {\n            this.sessionLastCheckAttemptedTime = new Map(\n                Array.from(this.sessionLastCheckAttemptedTime).filter((sid, ts) => {\n                    return Math.max(now - ts, 0) < KEY_BACKUP_BACKOFF;\n                }),\n            );\n        }\n    }\n\n    /** Returns true if the session was requested recently. */\n    private wasRequestedRecently(megolmSessionId: string): boolean {\n        const lastCheck = this.sessionLastCheckAttemptedTime.get(megolmSessionId);\n        if (!lastCheck) return false;\n        return Math.max(Date.now() - lastCheck, 0) < KEY_BACKUP_BACKOFF;\n    }\n\n    private async getBackupDecryptionKey(): Promise<RustSdkCryptoJs.BackupKeys | null> {\n        try {\n            return await this.olmMachine.getBackupKeys();\n        } catch {\n            return null;\n        }\n    }\n\n    /**\n     * Requests a key from the server side backup.\n     *\n     * @param version - The backup version to use.\n     * @param roomId - The room ID of the room where the error occurred.\n     * @param sessionId - The megolm session ID that is missing.\n     */\n    private async requestRoomKeyFromBackup(\n        version: string,\n        roomId: string,\n        sessionId: string,\n    ): Promise<KeyBackupSession> {\n        const path = encodeUri(\"/room_keys/keys/$roomId/$sessionId\", {\n            $roomId: roomId,\n            $sessionId: sessionId,\n        });\n\n        return await this.http.authedRequest<KeyBackupSession>(Method.Get, path, { version }, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    }\n\n    private async downloadKeysLoop(): Promise<void> {\n        if (this.downloadLoopRunning) return;\n\n        // If we have a configuration problem, we don't want to try to download.\n        // If any configuration change is detected, we will retry and restart the loop.\n        if (this.hasConfigurationProblem) return;\n\n        this.downloadLoopRunning = true;\n\n        try {\n            while (this.queuedRequests.length > 0) {\n                // we just peek the first one without removing it, so if a new request for same key comes in while we're\n                // processing this one, it won't queue another request.\n                const request = this.queuedRequests[0];\n                try {\n                    // The backup could have changed between the time we queued the request and now, so we need to check\n                    const configuration = await this.getOrCreateBackupConfiguration();\n                    if (!configuration) {\n                        // Backup is not configured correctly, so stop the loop.\n                        this.downloadLoopRunning = false;\n                        return;\n                    }\n\n                    const result = await this.queryKeyBackup(request.roomId, request.megolmSessionId, configuration);\n\n                    if (this.stopped) {\n                        return;\n                    }\n                    // We got the encrypted key from backup, let's try to decrypt and import it.\n                    try {\n                        await this.decryptAndImport(request, result, configuration);\n                    } catch (e) {\n                        this.logger.error(\n                            `Error while decrypting and importing key backup for session ${request.megolmSessionId}`,\n                            e,\n                        );\n                    }\n                    // now remove the request from the queue as we've processed it.\n                    this.queuedRequests.shift();\n                } catch (err) {\n                    if (err instanceof KeyDownloadError) {\n                        switch (err.code) {\n                            case KeyDownloadErrorCode.MISSING_DECRYPTION_KEY:\n                                this.markAsNotFoundInBackup(request.megolmSessionId);\n                                // continue for next one\n                                this.queuedRequests.shift();\n                                break;\n                            case KeyDownloadErrorCode.NETWORK_ERROR:\n                                // We don't want to hammer if there is a problem, so wait a bit.\n                                await sleep(KEY_BACKUP_BACKOFF);\n                                break;\n                            case KeyDownloadErrorCode.STOPPED:\n                                // If the downloader was stopped, we don't want to retry.\n                                this.downloadLoopRunning = false;\n                                return;\n                        }\n                    } else if (err instanceof KeyDownloadRateLimitError) {\n                        // we want to retry after the backoff time\n                        await sleep(err.retryMillis);\n                    }\n                }\n            }\n        } finally {\n            // all pending request have been processed, we can stop the loop.\n            this.downloadLoopRunning = false;\n        }\n    }\n\n    /**\n     * Query the backup for a key.\n     *\n     * @param targetRoomId - ID of the room that the session is used in.\n     * @param targetSessionId - ID of the session for which to check backup.\n     * @param configuration - The backup configuration to use.\n     */\n    private async queryKeyBackup(\n        targetRoomId: string,\n        targetSessionId: string,\n        configuration: Configuration,\n    ): Promise<KeyBackupSession> {\n        this.logger.debug(`Checking key backup for session ${targetSessionId}`);\n        if (this.stopped) throw new KeyDownloadError(KeyDownloadErrorCode.STOPPED);\n        try {\n            const res = await this.requestRoomKeyFromBackup(configuration.backupVersion, targetRoomId, targetSessionId);\n            this.logger.debug(`Got key from backup for sessionId:${targetSessionId}`);\n            return res;\n        } catch (e) {\n            if (this.stopped) throw new KeyDownloadError(KeyDownloadErrorCode.STOPPED);\n\n            this.logger.info(`No luck requesting key backup for session ${targetSessionId}: ${e}`);\n            if (e instanceof MatrixError) {\n                const errCode = e.data.errcode;\n                if (errCode == \"M_NOT_FOUND\") {\n                    // Unfortunately the spec doesn't give us a way to differentiate between a missing key and a wrong version.\n                    // Synapse will return:\n                    //     - \"error\": \"Unknown backup version\" if the version is wrong.\n                    //     - \"error\": \"No room_keys found\" if the key is missing.\n                    // It's useful to know if the key is missing or if the version is wrong.\n                    // As it's not spec'ed, we fall back on considering the key is not in backup.\n                    // Notice that this request will be lost if instead the backup got out of sync (updated from other session).\n                    throw new KeyDownloadError(KeyDownloadErrorCode.MISSING_DECRYPTION_KEY);\n                }\n                if (e.isRateLimitError()) {\n                    let waitTime: number | undefined;\n                    try {\n                        waitTime = e.getRetryAfterMs() ?? undefined;\n                    } catch (error) {\n                        this.logger.warn(\"Error while retrieving a rate-limit retry delay\", error);\n                    }\n                    if (waitTime && waitTime > 0) {\n                        this.logger.info(`Rate limited by server, waiting ${waitTime}ms`);\n                    }\n                    throw new KeyDownloadRateLimitError(waitTime ?? KEY_BACKUP_BACKOFF);\n                }\n            }\n            throw new KeyDownloadError(KeyDownloadErrorCode.NETWORK_ERROR);\n        }\n    }\n\n    private async decryptAndImport(\n        sessionInfo: SessionInfo,\n        data: KeyBackupSession,\n        configuration: Configuration,\n    ): Promise<void> {\n        const sessionsToImport: Record<string, KeyBackupSession> = { [sessionInfo.megolmSessionId]: data };\n\n        const keys = await configuration!.decryptor.decryptSessions(sessionsToImport);\n        for (const k of keys) {\n            k.room_id = sessionInfo.roomId;\n        }\n        await this.backupManager.importBackedUpRoomKeys(keys, configuration.backupVersion);\n    }\n\n    /**\n     * Gets the current backup configuration or create one if it doesn't exist.\n     *\n     * When a valid configuration is found it is cached and returned for subsequent calls.\n     * Otherwise, if a check is forced or a check has not yet been done, a new check is done.\n     *\n     * @returns The backup configuration to use or null if there is a configuration problem.\n     */\n    private async getOrCreateBackupConfiguration(): Promise<Configuration | null> {\n        if (this.configuration) {\n            return this.configuration;\n        }\n\n        // We already tried to check the configuration and it failed.\n        // We don't want to try again immediately, we will retry if a configuration change is detected.\n        if (this.hasConfigurationProblem) {\n            return null;\n        }\n\n        // This method can be called rapidly by several emitted CryptoEvent, so we need to make sure that we don't\n        // query the server several times.\n        if (this.currentBackupVersionCheck != null) {\n            this.logger.debug(`Already checking server version, use current promise`);\n            return await this.currentBackupVersionCheck;\n        }\n\n        this.currentBackupVersionCheck = this.internalCheckFromServer();\n        try {\n            return await this.currentBackupVersionCheck;\n        } finally {\n            this.currentBackupVersionCheck = null;\n        }\n    }\n\n    private async internalCheckFromServer(): Promise<Configuration | null> {\n        let currentServerVersion = null;\n        try {\n            currentServerVersion = await this.backupManager.getServerBackupInfo();\n        } catch (e) {\n            this.logger.debug(`Backup: error while checking server version: ${e}`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n        this.logger.debug(`Got current backup version from server: ${currentServerVersion?.version}`);\n\n        if (currentServerVersion?.algorithm != \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            this.logger.info(`Unsupported algorithm ${currentServerVersion?.algorithm}`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        if (!currentServerVersion?.version) {\n            this.logger.info(`No current key backup`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const activeVersion = await this.backupManager.getActiveBackupVersion();\n        if (activeVersion == null || currentServerVersion.version != activeVersion) {\n            // Either the current backup version on server side is not trusted, or it is out of sync with the active version on the client side.\n            this.logger.info(\n                `The current backup version on the server (${currentServerVersion.version}) is not trusted. Version we are currently backing up to: ${activeVersion}`,\n            );\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const backupKeys = await this.getBackupDecryptionKey();\n        if (!backupKeys?.decryptionKey) {\n            this.logger.debug(`Not checking key backup for session (no decryption key)`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        if (activeVersion != backupKeys.backupVersion) {\n            this.logger.debug(\n                `Version for which we have a decryption key (${backupKeys.backupVersion}) doesn't match the version we are backing up to (${activeVersion})`,\n            );\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const authData = currentServerVersion.auth_data as Curve25519AuthData;\n        if (authData.public_key != backupKeys.decryptionKey.megolmV1PublicKey.publicKeyBase64) {\n            this.logger.debug(`Key backup on server does not match our decryption key`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const backupDecryptor = this.backupManager.createBackupDecryptor(backupKeys.decryptionKey);\n        this.hasConfigurationProblem = false;\n        this.configuration = {\n            decryptor: backupDecryptor,\n            backupVersion: activeVersion,\n        };\n        return this.configuration;\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,SAASA,WAAW,QAAQ,wBAAwB;AAEpD,SAASC,YAAY,EAAkBC,WAAW,EAAsBC,MAAM,QAAQ,sBAAsB;AAE5G,SAASC,SAAS,EAAEC,KAAK,QAAQ,aAAa;AAG9C;AACA,IAAMC,kBAAkB,GAAG,IAAI,CAAC,CAAC;;AAEjC;AACA;AACA;AAFA,IAGKC,oBAAoB,0BAApBA,oBAAoB;EACrB;EADCA,oBAAoB;EAGrB;EAHCA,oBAAoB;EAKrB;EALCA,oBAAoB;EAAA,OAApBA,oBAAoB;AAAA,EAApBA,oBAAoB;AASzB,MAAMC,gBAAgB,SAASC,KAAK,CAAC;EAC1BC,WAAWA,CAAiBC,IAA0B,EAAE;IAC3D,KAAK,mCAAAC,MAAA,CAAmCD,IAAI,CAAE,CAAC;IAAC,KADjBA,IAA0B,GAA1BA,IAA0B;IAEzD,IAAI,CAACE,IAAI,GAAG,kBAAkB;EAClC;AACJ;AAEA,MAAMC,yBAAyB,SAASL,KAAK,CAAC;EACnCC,WAAWA,CAAiBK,WAAmB,EAAE;IACpD,KAAK,8CAA8C,CAAC;IAAC,KADtBA,WAAmB,GAAnBA,WAAmB;IAElD,IAAI,CAACF,IAAI,GAAG,2BAA2B;EAC3C;AACJ;;AAEA;;AAGA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMG,6BAA6B,CAAC;EA6BvC;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACWN,WAAWA,CACdO,MAAc,EACGC,UAAsB,EACtBC,IAAmD,EACnDC,aAAgC,EACnD;IAAA,KAHmBF,UAAsB,GAAtBA,UAAsB;IAAA,KACtBC,IAAmD,GAAnDA,IAAmD;IAAA,KACnDC,aAAgC,GAAhCA,aAAgC;IAAAC,eAAA,kBAxCnC,KAAK;IAEvB;AACJ;AACA;AACA;AACA;IAJIA,eAAA,wBAK8C,IAAI;IAElD;AACJ;IADIA,eAAA,wCAE6D,IAAIC,GAAG,CAAC,CAAC;IAEtE;IAAAD,eAAA;IAGA;IAAAA,eAAA,8BAC8B,KAAK;IAEnC;IAAAA,eAAA,yBACwC,EAAE;IAE1C;IAAAA,eAAA,kCACkC,KAAK;IAEvC;IAAAA,eAAA,oCAC0E,IAAI;IAsF9E;AACJ;AACA;AACA;IAHIA,eAAA,gCAIgC,MAAY;MACxC;MACA,IAAI,CAACE,uBAAuB,GAAG,KAAK;MACpC,IAAI,CAACC,aAAa,GAAG,IAAI;MACzB,IAAI,CAACC,8BAA8B,CAAC,CAAC,CAACC,IAAI,CAAEF,aAAa,IAAK;QAC1D,IAAIA,aAAa,EAAE;UACf;UACA,IAAI,CAACG,gBAAgB,CAAC,CAAC;QAC3B;MACJ,CAAC,CAAC;IACN,CAAC;IApFG,IAAI,CAACV,MAAM,GAAGA,MAAM,CAACW,QAAQ,CAAC,iCAAiC,CAAC;IAEhER,aAAa,CAACS,EAAE,CAAC7B,WAAW,CAAC8B,eAAe,EAAE,IAAI,CAACC,qBAAqB,CAAC;IACzEX,aAAa,CAACS,EAAE,CAAC7B,WAAW,CAACgC,eAAe,EAAE,IAAI,CAACD,qBAAqB,CAAC;IACzEX,aAAa,CAACS,EAAE,CAAC7B,WAAW,CAACiC,4BAA4B,EAAE,IAAI,CAACF,qBAAqB,CAAC;EAC1F;;EAEA;AACJ;AACA;AACA;AACA;EACWG,6BAA6BA,CAAA,EAAY;IAC5C,OAAO,IAAI,CAACV,aAAa,KAAK,IAAI;EACtC;;EAEA;AACJ;AACA;AACA;AACA;EACiBW,mBAAmBA,CAAA,EAA8C;IAAA,IAAAC,KAAA;IAAA,OAAAC,iBAAA;MAC1E,aAAaD,KAAI,CAAChB,aAAa,CAACe,mBAAmB,CAAC,CAAC;IAAC;EAC1D;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWG,2BAA2BA,CAACC,MAAc,EAAEC,eAAuB,EAAQ;IAC9E;IACA;IACA,IAAI,IAAI,CAACC,gBAAgB,CAACF,MAAM,EAAEC,eAAe,CAAC,EAAE;MAChD;MACA,IAAI,CAACvB,MAAM,CAACyB,KAAK,wCAAA9B,MAAA,CAAwC4B,eAAe,6BAA0B,CAAC;MACnG;IACJ;IAEA,IAAI,IAAI,CAACG,oBAAoB,CAACH,eAAe,CAAC,EAAE;MAC5C;MACA,IAAI,CAACvB,MAAM,CAACyB,KAAK,wCAAA9B,MAAA,CAC0B4B,eAAe,0CAC1D,CAAC;MACD;IACJ;;IAEA;IACA;IACA;IACA;IACA;IACA,IAAI,CAACI,cAAc,CAACC,IAAI,CAAC;MAAEN,MAAM;MAAEC;IAAgB,CAAC,CAAC;;IAErD;IACA,IAAI,CAACb,gBAAgB,CAAC,CAAC;EAC3B;EAEOmB,IAAIA,CAAA,EAAS;IAChB,IAAI,CAACC,OAAO,GAAG,IAAI;IACnB,IAAI,CAAC3B,aAAa,CAAC4B,GAAG,CAAChD,WAAW,CAAC8B,eAAe,EAAE,IAAI,CAACC,qBAAqB,CAAC;IAC/E,IAAI,CAACX,aAAa,CAAC4B,GAAG,CAAChD,WAAW,CAACgC,eAAe,EAAE,IAAI,CAACD,qBAAqB,CAAC;IAC/E,IAAI,CAACX,aAAa,CAAC4B,GAAG,CAAChD,WAAW,CAACiC,4BAA4B,EAAE,IAAI,CAACF,qBAAqB,CAAC;EAChG;EAkBA;EACQU,gBAAgBA,CAACF,MAAc,EAAEC,eAAuB,EAAW;IACvE,OAAO,IAAI,CAACI,cAAc,CAACK,IAAI,CAAEC,IAAI,IAAK;MACtC,OAAOA,IAAI,CAACX,MAAM,IAAIA,MAAM,IAAIW,IAAI,CAACV,eAAe,IAAIA,eAAe;IAC3E,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;EACYW,sBAAsBA,CAACX,eAAuB,EAAQ;IAC1D,IAAMY,GAAG,GAAGC,IAAI,CAACD,GAAG,CAAC,CAAC;IACtB,IAAI,CAACE,6BAA6B,CAACC,GAAG,CAACf,eAAe,EAAEY,GAAG,CAAC;IAC5D;IACA,IAAI,IAAI,CAACE,6BAA6B,CAACE,IAAI,GAAG,GAAG,EAAE;MAC/C,IAAI,CAACF,6BAA6B,GAAG,IAAIhC,GAAG,CACxCmC,KAAK,CAACC,IAAI,CAAC,IAAI,CAACJ,6BAA6B,CAAC,CAACK,MAAM,CAAC,CAACC,GAAG,EAAEC,EAAE,KAAK;QAC/D,OAAOC,IAAI,CAACC,GAAG,CAACX,GAAG,GAAGS,EAAE,EAAE,CAAC,CAAC,GAAGvD,kBAAkB;MACrD,CAAC,CACL,CAAC;IACL;EACJ;;EAEA;EACQqC,oBAAoBA,CAACH,eAAuB,EAAW;IAC3D,IAAMwB,SAAS,GAAG,IAAI,CAACV,6BAA6B,CAACW,GAAG,CAACzB,eAAe,CAAC;IACzE,IAAI,CAACwB,SAAS,EAAE,OAAO,KAAK;IAC5B,OAAOF,IAAI,CAACC,GAAG,CAACV,IAAI,CAACD,GAAG,CAAC,CAAC,GAAGY,SAAS,EAAE,CAAC,CAAC,GAAG1D,kBAAkB;EACnE;EAEc4D,sBAAsBA,CAAA,EAA+C;IAAA,IAAAC,MAAA;IAAA,OAAA9B,iBAAA;MAC/E,IAAI;QACA,aAAa8B,MAAI,CAACjD,UAAU,CAACkD,aAAa,CAAC,CAAC;MAChD,CAAC,CAAC,OAAAC,OAAA,EAAM;QACJ,OAAO,IAAI;MACf;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACkBC,wBAAwBA,CAClCC,OAAe,EACfhC,MAAc,EACdiC,SAAiB,EACQ;IAAA,IAAAC,MAAA;IAAA,OAAApC,iBAAA;MACzB,IAAMqC,IAAI,GAAGtE,SAAS,CAAC,oCAAoC,EAAE;QACzDuE,OAAO,EAAEpC,MAAM;QACfqC,UAAU,EAAEJ;MAChB,CAAC,CAAC;MAEF,aAAaC,MAAI,CAACtD,IAAI,CAAC0D,aAAa,CAAmB1E,MAAM,CAAC2E,GAAG,EAAEJ,IAAI,EAAE;QAAEH;MAAQ,CAAC,EAAEQ,SAAS,EAAE;QAC7FC,MAAM,EAAE/E,YAAY,CAACgF;MACzB,CAAC,CAAC;IAAC;EACP;EAEctD,gBAAgBA,CAAA,EAAkB;IAAA,IAAAuD,MAAA;IAAA,OAAA7C,iBAAA;MAC5C,IAAI6C,MAAI,CAACC,mBAAmB,EAAE;;MAE9B;MACA;MACA,IAAID,MAAI,CAAC3D,uBAAuB,EAAE;MAElC2D,MAAI,CAACC,mBAAmB,GAAG,IAAI;MAE/B,IAAI;QACA,OAAOD,MAAI,CAACtC,cAAc,CAACwC,MAAM,GAAG,CAAC,EAAE;UACnC;UACA;UACA,IAAMC,OAAO,GAAGH,MAAI,CAACtC,cAAc,CAAC,CAAC,CAAC;UACtC,IAAI;YACA;YACA,IAAMpB,aAAa,SAAS0D,MAAI,CAACzD,8BAA8B,CAAC,CAAC;YACjE,IAAI,CAACD,aAAa,EAAE;cAChB;cACA0D,MAAI,CAACC,mBAAmB,GAAG,KAAK;cAChC;YACJ;YAEA,IAAMG,MAAM,SAASJ,MAAI,CAACK,cAAc,CAACF,OAAO,CAAC9C,MAAM,EAAE8C,OAAO,CAAC7C,eAAe,EAAEhB,aAAa,CAAC;YAEhG,IAAI0D,MAAI,CAACnC,OAAO,EAAE;cACd;YACJ;YACA;YACA,IAAI;cACA,MAAMmC,MAAI,CAACM,gBAAgB,CAACH,OAAO,EAAEC,MAAM,EAAE9D,aAAa,CAAC;YAC/D,CAAC,CAAC,OAAOiE,CAAC,EAAE;cACRP,MAAI,CAACjE,MAAM,CAACyE,KAAK,gEAAA9E,MAAA,CACkDyE,OAAO,CAAC7C,eAAe,GACtFiD,CACJ,CAAC;YACL;YACA;YACAP,MAAI,CAACtC,cAAc,CAAC+C,KAAK,CAAC,CAAC;UAC/B,CAAC,CAAC,OAAOC,GAAG,EAAE;YACV,IAAIA,GAAG,YAAYpF,gBAAgB,EAAE;cACjC,QAAQoF,GAAG,CAACjF,IAAI;gBACZ,KAAKJ,oBAAoB,CAACsF,sBAAsB;kBAC5CX,MAAI,CAAC/B,sBAAsB,CAACkC,OAAO,CAAC7C,eAAe,CAAC;kBACpD;kBACA0C,MAAI,CAACtC,cAAc,CAAC+C,KAAK,CAAC,CAAC;kBAC3B;gBACJ,KAAKpF,oBAAoB,CAACuF,aAAa;kBACnC;kBACA,MAAMzF,KAAK,CAACC,kBAAkB,CAAC;kBAC/B;gBACJ,KAAKC,oBAAoB,CAACwF,OAAO;kBAC7B;kBACAb,MAAI,CAACC,mBAAmB,GAAG,KAAK;kBAChC;cACR;YACJ,CAAC,MAAM,IAAIS,GAAG,YAAY9E,yBAAyB,EAAE;cACjD;cACA,MAAMT,KAAK,CAACuF,GAAG,CAAC7E,WAAW,CAAC;YAChC;UACJ;QACJ;MACJ,CAAC,SAAS;QACN;QACAmE,MAAI,CAACC,mBAAmB,GAAG,KAAK;MACpC;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACkBI,cAAcA,CACxBS,YAAoB,EACpBC,eAAuB,EACvBzE,aAA4B,EACH;IAAA,IAAA0E,MAAA;IAAA,OAAA7D,iBAAA;MACzB6D,MAAI,CAACjF,MAAM,CAACkF,KAAK,oCAAAvF,MAAA,CAAoCqF,eAAe,CAAE,CAAC;MACvE,IAAIC,MAAI,CAACnD,OAAO,EAAE,MAAM,IAAIvC,gBAAgB,CAACD,oBAAoB,CAACwF,OAAO,CAAC;MAC1E,IAAI;QACA,IAAMK,GAAG,SAASF,MAAI,CAAC5B,wBAAwB,CAAC9C,aAAa,CAAC6E,aAAa,EAAEL,YAAY,EAAEC,eAAe,CAAC;QAC3GC,MAAI,CAACjF,MAAM,CAACkF,KAAK,sCAAAvF,MAAA,CAAsCqF,eAAe,CAAE,CAAC;QACzE,OAAOG,GAAG;MACd,CAAC,CAAC,OAAOX,CAAC,EAAE;QACR,IAAIS,MAAI,CAACnD,OAAO,EAAE,MAAM,IAAIvC,gBAAgB,CAACD,oBAAoB,CAACwF,OAAO,CAAC;QAE1EG,MAAI,CAACjF,MAAM,CAACiC,IAAI,8CAAAtC,MAAA,CAA8CqF,eAAe,QAAArF,MAAA,CAAK6E,CAAC,CAAE,CAAC;QACtF,IAAIA,CAAC,YAAYvF,WAAW,EAAE;UAC1B,IAAMoG,OAAO,GAAGb,CAAC,CAACc,IAAI,CAACC,OAAO;UAC9B,IAAIF,OAAO,IAAI,aAAa,EAAE;YAC1B;YACA;YACA;YACA;YACA;YACA;YACA;YACA,MAAM,IAAI9F,gBAAgB,CAACD,oBAAoB,CAACsF,sBAAsB,CAAC;UAC3E;UACA,IAAIJ,CAAC,CAACgB,gBAAgB,CAAC,CAAC,EAAE;YACtB,IAAIC,QAA4B;YAChC,IAAI;cAAA,IAAAC,kBAAA;cACAD,QAAQ,IAAAC,kBAAA,GAAGlB,CAAC,CAACmB,eAAe,CAAC,CAAC,cAAAD,kBAAA,cAAAA,kBAAA,GAAI5B,SAAS;YAC/C,CAAC,CAAC,OAAOW,KAAK,EAAE;cACZQ,MAAI,CAACjF,MAAM,CAAC4F,IAAI,CAAC,iDAAiD,EAAEnB,KAAK,CAAC;YAC9E;YACA,IAAIgB,QAAQ,IAAIA,QAAQ,GAAG,CAAC,EAAE;cAC1BR,MAAI,CAACjF,MAAM,CAACiC,IAAI,oCAAAtC,MAAA,CAAoC8F,QAAQ,OAAI,CAAC;YACrE;YACA,MAAM,IAAI5F,yBAAyB,CAAC4F,QAAQ,aAARA,QAAQ,cAARA,QAAQ,GAAIpG,kBAAkB,CAAC;UACvE;QACJ;QACA,MAAM,IAAIE,gBAAgB,CAACD,oBAAoB,CAACuF,aAAa,CAAC;MAClE;IAAC;EACL;EAEcN,gBAAgBA,CAC1BsB,WAAwB,EACxBP,IAAsB,EACtB/E,aAA4B,EACf;IAAA,IAAAuF,MAAA;IAAA,OAAA1E,iBAAA;MACb,IAAM2E,gBAAkD,GAAG;QAAE,CAACF,WAAW,CAACtE,eAAe,GAAG+D;MAAK,CAAC;MAElG,IAAMU,IAAI,SAASzF,aAAa,CAAE0F,SAAS,CAACC,eAAe,CAACH,gBAAgB,CAAC;MAC7E,KAAK,IAAMI,CAAC,IAAIH,IAAI,EAAE;QAClBG,CAAC,CAACC,OAAO,GAAGP,WAAW,CAACvE,MAAM;MAClC;MACA,MAAMwE,MAAI,CAAC3F,aAAa,CAACkG,sBAAsB,CAACL,IAAI,EAAEzF,aAAa,CAAC6E,aAAa,CAAC;IAAC;EACvF;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACkB5E,8BAA8BA,CAAA,EAAkC;IAAA,IAAA8F,MAAA;IAAA,OAAAlF,iBAAA;MAC1E,IAAIkF,MAAI,CAAC/F,aAAa,EAAE;QACpB,OAAO+F,MAAI,CAAC/F,aAAa;MAC7B;;MAEA;MACA;MACA,IAAI+F,MAAI,CAAChG,uBAAuB,EAAE;QAC9B,OAAO,IAAI;MACf;;MAEA;MACA;MACA,IAAIgG,MAAI,CAACC,yBAAyB,IAAI,IAAI,EAAE;QACxCD,MAAI,CAACtG,MAAM,CAACkF,KAAK,uDAAuD,CAAC;QACzE,aAAaoB,MAAI,CAACC,yBAAyB;MAC/C;MAEAD,MAAI,CAACC,yBAAyB,GAAGD,MAAI,CAACE,uBAAuB,CAAC,CAAC;MAC/D,IAAI;QACA,aAAaF,MAAI,CAACC,yBAAyB;MAC/C,CAAC,SAAS;QACND,MAAI,CAACC,yBAAyB,GAAG,IAAI;MACzC;IAAC;EACL;EAEcC,uBAAuBA,CAAA,EAAkC;IAAA,IAAAC,MAAA;IAAA,OAAArF,iBAAA;MAAA,IAAAsF,qBAAA,EAAAC,sBAAA,EAAAC,sBAAA;MACnE,IAAIC,oBAAoB,GAAG,IAAI;MAC/B,IAAI;QACAA,oBAAoB,SAASJ,MAAI,CAACtG,aAAa,CAACe,mBAAmB,CAAC,CAAC;MACzE,CAAC,CAAC,OAAOsD,CAAC,EAAE;QACRiC,MAAI,CAACzG,MAAM,CAACkF,KAAK,iDAAAvF,MAAA,CAAiD6E,CAAC,CAAE,CAAC;QACtEiC,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MACAmG,MAAI,CAACzG,MAAM,CAACkF,KAAK,4CAAAvF,MAAA,EAAA+G,qBAAA,GAA4CG,oBAAoB,cAAAH,qBAAA,uBAApBA,qBAAA,CAAsBpD,OAAO,CAAE,CAAC;MAE7F,IAAI,EAAAqD,sBAAA,GAAAE,oBAAoB,cAAAF,sBAAA,uBAApBA,sBAAA,CAAsBG,SAAS,KAAI,wCAAwC,EAAE;QAAA,IAAAC,sBAAA;QAC7EN,MAAI,CAACzG,MAAM,CAACiC,IAAI,0BAAAtC,MAAA,EAAAoH,sBAAA,GAA0BF,oBAAoB,cAAAE,sBAAA,uBAApBA,sBAAA,CAAsBD,SAAS,CAAE,CAAC;QAC5EL,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MAEA,IAAI,GAAAsG,sBAAA,GAACC,oBAAoB,cAAAD,sBAAA,eAApBA,sBAAA,CAAsBtD,OAAO,GAAE;QAChCmD,MAAI,CAACzG,MAAM,CAACiC,IAAI,wBAAwB,CAAC;QACzCwE,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MAEA,IAAM0G,aAAa,SAASP,MAAI,CAACtG,aAAa,CAAC8G,sBAAsB,CAAC,CAAC;MACvE,IAAID,aAAa,IAAI,IAAI,IAAIH,oBAAoB,CAACvD,OAAO,IAAI0D,aAAa,EAAE;QACxE;QACAP,MAAI,CAACzG,MAAM,CAACiC,IAAI,8CAAAtC,MAAA,CACiCkH,oBAAoB,CAACvD,OAAO,gEAAA3D,MAAA,CAA6DqH,aAAa,CACvJ,CAAC;QACDP,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MAEA,IAAM4G,UAAU,SAAST,MAAI,CAACxD,sBAAsB,CAAC,CAAC;MACtD,IAAI,EAACiE,UAAU,aAAVA,UAAU,eAAVA,UAAU,CAAEC,aAAa,GAAE;QAC5BV,MAAI,CAACzG,MAAM,CAACkF,KAAK,0DAA0D,CAAC;QAC5EuB,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MAEA,IAAI0G,aAAa,IAAIE,UAAU,CAAC9B,aAAa,EAAE;QAC3CqB,MAAI,CAACzG,MAAM,CAACkF,KAAK,gDAAAvF,MAAA,CACkCuH,UAAU,CAAC9B,aAAa,wDAAAzF,MAAA,CAAqDqH,aAAa,MAC7I,CAAC;QACDP,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MAEA,IAAM8G,QAAQ,GAAGP,oBAAoB,CAACQ,SAA+B;MACrE,IAAID,QAAQ,CAACE,UAAU,IAAIJ,UAAU,CAACC,aAAa,CAACI,iBAAiB,CAACC,eAAe,EAAE;QACnFf,MAAI,CAACzG,MAAM,CAACkF,KAAK,yDAAyD,CAAC;QAC3EuB,MAAI,CAACnG,uBAAuB,GAAG,IAAI;QACnC,OAAO,IAAI;MACf;MAEA,IAAMmH,eAAe,GAAGhB,MAAI,CAACtG,aAAa,CAACuH,qBAAqB,CAACR,UAAU,CAACC,aAAa,CAAC;MAC1FV,MAAI,CAACnG,uBAAuB,GAAG,KAAK;MACpCmG,MAAI,CAAClG,aAAa,GAAG;QACjB0F,SAAS,EAAEwB,eAAe;QAC1BrC,aAAa,EAAE4B;MACnB,CAAC;MACD,OAAOP,MAAI,CAAClG,aAAa;IAAC;EAC9B;AACJ","ignoreList":[]}
+{"version":3,"file":"PerSessionKeyBackupDownloader.js","names":[],"sources":["../../src/rust-crypto/PerSessionKeyBackupDownloader.ts"],"sourcesContent":["/*\nCopyright 2023 - 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type OlmMachine } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport type * as RustSdkCryptoJs from \"@matrix-org/matrix-sdk-crypto-wasm\";\nimport { type Curve25519AuthData, type KeyBackupInfo, type KeyBackupSession } from \"../crypto-api/keybackup.ts\";\nimport { CryptoEvent } from \"../crypto-api/index.ts\";\nimport { type Logger } from \"../logger.ts\";\nimport { ClientPrefix, type IHttpOpts, MatrixError, type MatrixHttpApi, Method } from \"../http-api/index.ts\";\nimport { type RustBackupManager } from \"./backup.ts\";\nimport { encodeUri, sleep } from \"../utils.ts\";\nimport { type BackupDecryptor } from \"../common-crypto/CryptoBackend.ts\";\n\n// The minimum time to wait between two retries in case of errors. To avoid hammering the server.\nconst KEY_BACKUP_BACKOFF = 5000; // ms\n\n/**\n * Enumerates the different kind of errors that can occurs when downloading and importing a key from backup.\n */\nenum KeyDownloadErrorCode {\n    /** The requested key is not in the backup. */\n    MISSING_DECRYPTION_KEY = \"MISSING_DECRYPTION_KEY\",\n    /** A network error occurred while trying to download the key from backup. */\n    NETWORK_ERROR = \"NETWORK_ERROR\",\n    /** The loop has been stopped. */\n    STOPPED = \"STOPPED\",\n}\n\nclass KeyDownloadError extends Error {\n    public constructor(public readonly code: KeyDownloadErrorCode) {\n        super(`Failed to get key from backup: ${code}`);\n        this.name = \"KeyDownloadError\";\n    }\n}\n\nclass KeyDownloadRateLimitError extends Error {\n    public constructor(public readonly retryMillis: number) {\n        super(`Failed to get key from backup: rate limited`);\n        this.name = \"KeyDownloadRateLimitError\";\n    }\n}\n\n/** Details of a megolm session whose key we are trying to fetch. */\ntype SessionInfo = { roomId: string; megolmSessionId: string };\n\n/** Holds the current backup decryptor and version that should be used.\n *\n * This is intended to be used as an immutable object (a new instance should be created if the configuration changes),\n * and some of the logic relies on that, so the properties are marked as `readonly`.\n */\ntype Configuration = {\n    readonly backupVersion: string;\n    readonly decryptor: BackupDecryptor;\n};\n\n/**\n * Used when an 'unable to decrypt' error occurs. It attempts to download the key from the backup.\n *\n * The current backup API lacks pagination, which can lead to lengthy key retrieval times for large histories (several 10s of minutes).\n * To mitigate this, keys are downloaded on demand as decryption errors occurs.\n * While this approach may result in numerous requests, it improves user experience by reducing wait times for message decryption.\n *\n * The PerSessionKeyBackupDownloader is resistant to backup configuration changes: it will automatically resume querying when\n * the backup is configured correctly.\n */\nexport class PerSessionKeyBackupDownloader {\n    private stopped = false;\n\n    /**\n     * The version and decryption key to use with current backup if all set up correctly.\n     *\n     * Will not be set unless `hasConfigurationProblem` is `false`.\n     */\n    private configuration: Configuration | null = null;\n\n    /** We remember when a session was requested and not found in backup to avoid query again too soon.\n     * Map of session_id to timestamp */\n    private sessionLastCheckAttemptedTime: Map<string, number> = new Map();\n\n    /** The logger to use */\n    private readonly logger: Logger;\n\n    /** Whether the download loop is running. */\n    private downloadLoopRunning = false;\n\n    /** The list of requests that are queued. */\n    private queuedRequests: SessionInfo[] = [];\n\n    /** Remembers if we have a configuration problem. */\n    private hasConfigurationProblem = false;\n\n    /** The current server backup version check promise. To avoid doing a server call if one is in flight. */\n    private currentBackupVersionCheck: Promise<Configuration | null> | null = null;\n\n    /**\n     * Creates a new instance of PerSessionKeyBackupDownloader.\n     *\n     * @param backupManager - The backup manager to use.\n     * @param olmMachine - The olm machine to use.\n     * @param http - The http instance to use.\n     * @param logger - The logger to use.\n     */\n    public constructor(\n        logger: Logger,\n        private readonly olmMachine: OlmMachine,\n        private readonly http: MatrixHttpApi<IHttpOpts & { onlyData: true }>,\n        private readonly backupManager: RustBackupManager,\n    ) {\n        this.logger = logger.getChild(\"[PerSessionKeyBackupDownloader]\");\n\n        backupManager.on(CryptoEvent.KeyBackupStatus, this.onBackupStatusChanged);\n        backupManager.on(CryptoEvent.KeyBackupFailed, this.onBackupStatusChanged);\n        backupManager.on(CryptoEvent.KeyBackupDecryptionKeyCached, this.onBackupStatusChanged);\n    }\n\n    /**\n     * Check if key download is successfully configured and active.\n     *\n     * @returns `true` if key download is correctly configured and active; otherwise `false`.\n     */\n    public isKeyBackupDownloadConfigured(): boolean {\n        return this.configuration !== null;\n    }\n\n    /**\n     * Return the details of the latest backup on the server, when we last checked.\n     *\n     * This is just a convenience method to expose {@link RustBackupManager.getServerBackupInfo}.\n     */\n    public async getServerBackupInfo(): Promise<KeyBackupInfo | null | undefined> {\n        return await this.backupManager.getServerBackupInfo();\n    }\n\n    /**\n     * Called when a MissingRoomKey or UnknownMessageIndex decryption error is encountered.\n     *\n     * This will try to download the key from the backup if there is a trusted active backup.\n     * In case of success the key will be imported and the onRoomKeysUpdated callback will be called\n     * internally by the rust-sdk and decryption will be retried.\n     *\n     * @param roomId - The room ID of the room where the error occurred.\n     * @param megolmSessionId - The megolm session ID that is missing.\n     */\n    public onDecryptionKeyMissingError(roomId: string, megolmSessionId: string): void {\n        // Several messages encrypted with the same session may be decrypted at the same time,\n        // so we need to be resistant and not query several time the same session.\n        if (this.isAlreadyInQueue(roomId, megolmSessionId)) {\n            // There is already a request queued for this session, no need to queue another one.\n            this.logger.trace(`Not checking key backup for session ${megolmSessionId} as it is already queued`);\n            return;\n        }\n\n        if (this.wasRequestedRecently(megolmSessionId)) {\n            // We already tried to download this session recently and it was not in backup, no need to try again.\n            this.logger.trace(\n                `Not checking key backup for session ${megolmSessionId} as it was already requested recently`,\n            );\n            return;\n        }\n\n        // We always add the request to the queue, even if we have a configuration problem (can't access backup).\n        // This is to make sure that if the configuration problem is resolved, we will try to download the key.\n        // This will happen after an initial sync, at this point the backup will not yet be trusted and the decryption\n        // key will not be available, but it will be just after the verification.\n        // We don't need to persist it because currently on refresh the sdk will retry to decrypt the messages in error.\n        this.queuedRequests.push({ roomId, megolmSessionId });\n\n        // Start the download loop if it's not already running.\n        this.downloadKeysLoop();\n    }\n\n    public stop(): void {\n        this.stopped = true;\n        this.backupManager.off(CryptoEvent.KeyBackupStatus, this.onBackupStatusChanged);\n        this.backupManager.off(CryptoEvent.KeyBackupFailed, this.onBackupStatusChanged);\n        this.backupManager.off(CryptoEvent.KeyBackupDecryptionKeyCached, this.onBackupStatusChanged);\n    }\n\n    /**\n     * Called when the backup status changes (CryptoEvents)\n     * This will trigger a check of the backup configuration.\n     */\n    private onBackupStatusChanged = (): void => {\n        // we want to force check configuration, so we clear the current one.\n        this.hasConfigurationProblem = false;\n        this.configuration = null;\n        this.getOrCreateBackupConfiguration().then((configuration) => {\n            if (configuration) {\n                // restart the download loop if it was stopped\n                this.downloadKeysLoop();\n            }\n        });\n    };\n\n    /** Returns true if the megolm session is already queued for download. */\n    private isAlreadyInQueue(roomId: string, megolmSessionId: string): boolean {\n        return this.queuedRequests.some((info) => {\n            return info.roomId == roomId && info.megolmSessionId == megolmSessionId;\n        });\n    }\n\n    /**\n     * Marks the session as not found in backup, to avoid retrying to soon for a key not in backup\n     *\n     * @param megolmSessionId - The megolm session ID that is missing.\n     */\n    private markAsNotFoundInBackup(megolmSessionId: string): void {\n        const now = Date.now();\n        this.sessionLastCheckAttemptedTime.set(megolmSessionId, now);\n        // if too big make some cleaning to keep under control\n        if (this.sessionLastCheckAttemptedTime.size > 100) {\n            this.sessionLastCheckAttemptedTime = new Map(\n                Array.from(this.sessionLastCheckAttemptedTime).filter((sid, ts) => {\n                    return Math.max(now - ts, 0) < KEY_BACKUP_BACKOFF;\n                }),\n            );\n        }\n    }\n\n    /** Returns true if the session was requested recently. */\n    private wasRequestedRecently(megolmSessionId: string): boolean {\n        const lastCheck = this.sessionLastCheckAttemptedTime.get(megolmSessionId);\n        if (!lastCheck) return false;\n        return Math.max(Date.now() - lastCheck, 0) < KEY_BACKUP_BACKOFF;\n    }\n\n    private async getBackupDecryptionKey(): Promise<RustSdkCryptoJs.BackupKeys | null> {\n        try {\n            return await this.olmMachine.getBackupKeys();\n        } catch {\n            return null;\n        }\n    }\n\n    /**\n     * Requests a key from the server side backup.\n     *\n     * @param version - The backup version to use.\n     * @param roomId - The room ID of the room where the error occurred.\n     * @param sessionId - The megolm session ID that is missing.\n     */\n    private async requestRoomKeyFromBackup(\n        version: string,\n        roomId: string,\n        sessionId: string,\n    ): Promise<KeyBackupSession> {\n        const path = encodeUri(\"/room_keys/keys/$roomId/$sessionId\", {\n            $roomId: roomId,\n            $sessionId: sessionId,\n        });\n\n        return await this.http.authedRequest<KeyBackupSession>(Method.Get, path, { version }, undefined, {\n            prefix: ClientPrefix.V3,\n        });\n    }\n\n    private async downloadKeysLoop(): Promise<void> {\n        if (this.downloadLoopRunning) return;\n\n        // If we have a configuration problem, we don't want to try to download.\n        // If any configuration change is detected, we will retry and restart the loop.\n        if (this.hasConfigurationProblem) return;\n\n        this.downloadLoopRunning = true;\n\n        try {\n            while (this.queuedRequests.length > 0) {\n                // we just peek the first one without removing it, so if a new request for same key comes in while we're\n                // processing this one, it won't queue another request.\n                const request = this.queuedRequests[0];\n                try {\n                    // The backup could have changed between the time we queued the request and now, so we need to check\n                    const configuration = await this.getOrCreateBackupConfiguration();\n                    if (!configuration) {\n                        // Backup is not configured correctly, so stop the loop.\n                        this.downloadLoopRunning = false;\n                        return;\n                    }\n\n                    const result = await this.queryKeyBackup(request.roomId, request.megolmSessionId, configuration);\n\n                    if (this.stopped) {\n                        return;\n                    }\n                    // We got the encrypted key from backup, let's try to decrypt and import it.\n                    try {\n                        await this.decryptAndImport(request, result, configuration);\n                    } catch (e) {\n                        this.logger.error(\n                            `Error while decrypting and importing key backup for session ${request.megolmSessionId}`,\n                            e,\n                        );\n                    }\n                    // now remove the request from the queue as we've processed it.\n                    this.queuedRequests.shift();\n                } catch (err) {\n                    if (err instanceof KeyDownloadError) {\n                        switch (err.code) {\n                            case KeyDownloadErrorCode.MISSING_DECRYPTION_KEY:\n                                this.markAsNotFoundInBackup(request.megolmSessionId);\n                                // continue for next one\n                                this.queuedRequests.shift();\n                                break;\n                            case KeyDownloadErrorCode.NETWORK_ERROR:\n                                // We don't want to hammer if there is a problem, so wait a bit.\n                                await sleep(KEY_BACKUP_BACKOFF);\n                                break;\n                            case KeyDownloadErrorCode.STOPPED:\n                                // If the downloader was stopped, we don't want to retry.\n                                this.downloadLoopRunning = false;\n                                return;\n                        }\n                    } else if (err instanceof KeyDownloadRateLimitError) {\n                        // we want to retry after the backoff time\n                        await sleep(err.retryMillis);\n                    }\n                }\n            }\n        } finally {\n            // all pending request have been processed, we can stop the loop.\n            this.downloadLoopRunning = false;\n        }\n    }\n\n    /**\n     * Query the backup for a key.\n     *\n     * @param targetRoomId - ID of the room that the session is used in.\n     * @param targetSessionId - ID of the session for which to check backup.\n     * @param configuration - The backup configuration to use.\n     */\n    private async queryKeyBackup(\n        targetRoomId: string,\n        targetSessionId: string,\n        configuration: Configuration,\n    ): Promise<KeyBackupSession> {\n        this.logger.debug(`Checking key backup for session ${targetSessionId}`);\n        if (this.stopped) throw new KeyDownloadError(KeyDownloadErrorCode.STOPPED);\n        try {\n            const res = await this.requestRoomKeyFromBackup(configuration.backupVersion, targetRoomId, targetSessionId);\n            this.logger.debug(`Got key from backup for sessionId:${targetSessionId}`);\n            return res;\n        } catch (e) {\n            if (this.stopped) throw new KeyDownloadError(KeyDownloadErrorCode.STOPPED);\n\n            this.logger.info(`No luck requesting key backup for session ${targetSessionId}: ${e}`);\n            if (e instanceof MatrixError) {\n                const errCode = e.data.errcode;\n                if (errCode == \"M_NOT_FOUND\") {\n                    // Unfortunately the spec doesn't give us a way to differentiate between a missing key and a wrong version.\n                    // Synapse will return:\n                    //     - \"error\": \"Unknown backup version\" if the version is wrong.\n                    //     - \"error\": \"No room_keys found\" if the key is missing.\n                    // It's useful to know if the key is missing or if the version is wrong.\n                    // As it's not spec'ed, we fall back on considering the key is not in backup.\n                    // Notice that this request will be lost if instead the backup got out of sync (updated from other session).\n                    throw new KeyDownloadError(KeyDownloadErrorCode.MISSING_DECRYPTION_KEY);\n                }\n                if (e.isRateLimitError()) {\n                    let waitTime: number | undefined;\n                    try {\n                        waitTime = e.getRetryAfterMs() ?? undefined;\n                    } catch (error) {\n                        this.logger.warn(\"Error while retrieving a rate-limit retry delay\", error);\n                    }\n                    if (waitTime && waitTime > 0) {\n                        this.logger.info(`Rate limited by server, waiting ${waitTime}ms`);\n                    }\n                    throw new KeyDownloadRateLimitError(waitTime ?? KEY_BACKUP_BACKOFF);\n                }\n            }\n            throw new KeyDownloadError(KeyDownloadErrorCode.NETWORK_ERROR);\n        }\n    }\n\n    private async decryptAndImport(\n        sessionInfo: SessionInfo,\n        data: KeyBackupSession,\n        configuration: Configuration,\n    ): Promise<void> {\n        const sessionsToImport: Record<string, KeyBackupSession> = { [sessionInfo.megolmSessionId]: data };\n\n        const keys = await configuration!.decryptor.decryptSessions(sessionsToImport);\n        for (const k of keys) {\n            k.room_id = sessionInfo.roomId;\n        }\n        await this.backupManager.importBackedUpRoomKeys(keys, configuration.backupVersion);\n    }\n\n    /**\n     * Gets the current backup configuration or create one if it doesn't exist.\n     *\n     * When a valid configuration is found it is cached and returned for subsequent calls.\n     * Otherwise, if a check is forced or a check has not yet been done, a new check is done.\n     *\n     * @returns The backup configuration to use or null if there is a configuration problem.\n     */\n    private async getOrCreateBackupConfiguration(): Promise<Configuration | null> {\n        if (this.configuration) {\n            return this.configuration;\n        }\n\n        // We already tried to check the configuration and it failed.\n        // We don't want to try again immediately, we will retry if a configuration change is detected.\n        if (this.hasConfigurationProblem) {\n            return null;\n        }\n\n        // This method can be called rapidly by several emitted CryptoEvent, so we need to make sure that we don't\n        // query the server several times.\n        if (this.currentBackupVersionCheck != null) {\n            this.logger.debug(`Already checking server version, use current promise`);\n            return await this.currentBackupVersionCheck;\n        }\n\n        this.currentBackupVersionCheck = this.internalCheckFromServer();\n        try {\n            return await this.currentBackupVersionCheck;\n        } finally {\n            this.currentBackupVersionCheck = null;\n        }\n    }\n\n    private async internalCheckFromServer(): Promise<Configuration | null> {\n        let currentServerVersion = null;\n        try {\n            currentServerVersion = await this.backupManager.getServerBackupInfo();\n        } catch (e) {\n            this.logger.debug(`Backup: error while checking server version: ${e}`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n        this.logger.debug(`Got current backup version from server: ${currentServerVersion?.version}`);\n\n        if (currentServerVersion?.algorithm != \"m.megolm_backup.v1.curve25519-aes-sha2\") {\n            this.logger.info(`Unsupported algorithm ${currentServerVersion?.algorithm}`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        if (!currentServerVersion?.version) {\n            this.logger.info(`No current key backup`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const activeVersion = await this.backupManager.getActiveBackupVersion();\n        if (activeVersion == null || currentServerVersion.version != activeVersion) {\n            // Either the current backup version on server side is not trusted, or it is out of sync with the active version on the client side.\n            this.logger.info(\n                `The current backup version on the server (${currentServerVersion.version}) is not trusted. Version we are currently backing up to: ${activeVersion}`,\n            );\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const backupKeys = await this.getBackupDecryptionKey();\n        if (!backupKeys?.decryptionKey) {\n            this.logger.debug(`Not checking key backup for session (no decryption key)`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        if (activeVersion != backupKeys.backupVersion) {\n            this.logger.debug(\n                `Version for which we have a decryption key (${backupKeys.backupVersion}) doesn't match the version we are backing up to (${activeVersion})`,\n            );\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const authData = currentServerVersion.auth_data as Curve25519AuthData;\n        if (authData.public_key != backupKeys.decryptionKey.megolmV1PublicKey.publicKeyBase64) {\n            this.logger.debug(`Key backup on server does not match our decryption key`);\n            this.hasConfigurationProblem = true;\n            return null;\n        }\n\n        const backupDecryptor = this.backupManager.createBackupDecryptor(backupKeys.decryptionKey);\n        this.hasConfigurationProblem = false;\n        this.configuration = {\n            decryptor: backupDecryptor,\n            backupVersion: activeVersion,\n        };\n        return this.configuration;\n    }\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,SAAS,WAAW,QAAQ,wBAAwB;AAEpD,SAAS,YAAY,EAAkB,WAAW,EAAsB,MAAM,QAAQ,sBAAsB;AAE5G,SAAS,SAAS,EAAE,KAAK,QAAQ,aAAa;AAG9C;AACA,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC;;AAEjC;AACA;AACA;AAFA,IAGK,oBAAoB,0BAApB,oBAAoB;EACrB;EADC,oBAAoB;EAGrB;EAHC,oBAAoB;EAKrB;EALC,oBAAoB;EAAA,OAApB,oBAAoB;AAAA,EAApB,oBAAoB;AASzB,MAAM,gBAAgB,SAAS,KAAK,CAAC;EAC1B,WAAW,CAAiB,IAA0B,EAAE;IAC3D,KAAK,CAAC,kCAAkC,IAAI,EAAE,CAAC;IAAC,KADjB,IAA0B,GAA1B,IAA0B;IAEzD,IAAI,CAAC,IAAI,GAAG,kBAAkB;EAClC;AACJ;AAEA,MAAM,yBAAyB,SAAS,KAAK,CAAC;EACnC,WAAW,CAAiB,WAAmB,EAAE;IACpD,KAAK,CAAC,6CAA6C,CAAC;IAAC,KADtB,WAAmB,GAAnB,WAAmB;IAElD,IAAI,CAAC,IAAI,GAAG,2BAA2B;EAC3C;AACJ;;AAEA;;AAGA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAM,6BAA6B,CAAC;EA6BvC;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACW,WAAW,CACd,MAAc,EACG,UAAsB,EACtB,IAAmD,EACnD,aAAgC,EACnD;IAAA,iCAzCgB,KAAK;IAEvB;AACJ;AACA;AACA;AACA;IAJI,uCAK8C,IAAI;IAElD;AACJ;IADI,uDAE6D,IAAI,GAAG,CAAC,CAAC;IAEtE;IAAA;IAGA;IAAA,6CAC8B,KAAK;IAEnC;IAAA,wCACwC,EAAE;IAE1C;IAAA,iDACkC,KAAK;IAEvC;IAAA,mDAC0E,IAAI;IAsF9E;AACJ;AACA;AACA;IAHI,+CAIgC,MAAY;MACxC;MACA,IAAI,CAAC,uBAAuB,GAAG,KAAK;MACpC,IAAI,CAAC,aAAa,GAAG,IAAI;MACzB,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAE,aAAa,IAAK;QAC1D,IAAI,aAAa,EAAE;UACf;UACA,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3B;MACJ,CAAC,CAAC;IACN,CAAC;IAAA,KAxFoB,UAAsB,GAAtB,UAAsB;IAAA,KACtB,IAAmD,GAAnD,IAAmD;IAAA,KACnD,aAAgC,GAAhC,aAAgC;IAEjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAEhE,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC;IACzE,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC;IACzE,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,4BAA4B,EAAE,IAAI,CAAC,qBAAqB,CAAC;EAC1F;;EAEA;AACJ;AACA;AACA;AACA;EACW,6BAA6B,GAAY;IAC5C,OAAO,IAAI,CAAC,aAAa,KAAK,IAAI;EACtC;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,mBAAmB,GAA8C;IAC1E,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;EACzD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACW,2BAA2B,CAAC,MAAc,EAAE,eAAuB,EAAQ;IAC9E;IACA;IACA,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE;MAChD;MACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,eAAe,0BAA0B,CAAC;MACnG;IACJ;IAEA,IAAI,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAAE;MAC5C;MACA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,uCAAuC,eAAe,uCAC1D,CAAC;MACD;IACJ;;IAEA;IACA;IACA;IACA;IACA;IACA,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;MAAE,MAAM;MAAE;IAAgB,CAAC,CAAC;;IAErD;IACA,IAAI,CAAC,gBAAgB,CAAC,CAAC;EAC3B;EAEO,IAAI,GAAS;IAChB,IAAI,CAAC,OAAO,GAAG,IAAI;IACnB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,4BAA4B,EAAE,IAAI,CAAC,qBAAqB,CAAC;EAChG;EAkBA;EACQ,gBAAgB,CAAC,MAAc,EAAE,eAAuB,EAAW;IACvE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAE,IAAI,IAAK;MACtC,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,eAAe,IAAI,eAAe;IAC3E,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;AACA;EACY,sBAAsB,CAAC,eAAuB,EAAQ;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC;IAC5D;IACA,IAAI,IAAI,CAAC,6BAA6B,CAAC,IAAI,GAAG,GAAG,EAAE;MAC/C,IAAI,CAAC,6BAA6B,GAAG,IAAI,GAAG,CACxC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,kBAAkB;MACrD,CAAC,CACL,CAAC;IACL;EACJ;;EAEA;EACQ,oBAAoB,CAAC,eAAuB,EAAW;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,eAAe,CAAC;IACzE,IAAI,CAAC,SAAS,EAAE,OAAO,KAAK;IAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC,GAAG,kBAAkB;EACnE;EAEA,MAAc,sBAAsB,GAA+C;IAC/E,IAAI;MACA,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC,CAAC,MAAM;MACJ,OAAO,IAAI;IACf;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAc,wBAAwB,CAClC,OAAe,EACf,MAAc,EACd,SAAiB,EACQ;IACzB,MAAM,IAAI,GAAG,SAAS,CAAC,oCAAoC,EAAE;MACzD,OAAO,EAAE,MAAM;MACf,UAAU,EAAE;IAChB,CAAC,CAAC;IAEF,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAmB,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE;MAAE;IAAQ,CAAC,EAAE,SAAS,EAAE;MAC7F,MAAM,EAAE,YAAY,CAAC;IACzB,CAAC,CAAC;EACN;EAEA,MAAc,gBAAgB,GAAkB;IAC5C,IAAI,IAAI,CAAC,mBAAmB,EAAE;;IAE9B;IACA;IACA,IAAI,IAAI,CAAC,uBAAuB,EAAE;IAElC,IAAI,CAAC,mBAAmB,GAAG,IAAI;IAE/B,IAAI;MACA,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;QACnC;QACA;QACA,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtC,IAAI;UACA;UACA,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,CAAC;UACjE,IAAI,CAAC,aAAa,EAAE;YAChB;YACA,IAAI,CAAC,mBAAmB,GAAG,KAAK;YAChC;UACJ;UAEA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC;UAEhG,IAAI,IAAI,CAAC,OAAO,EAAE;YACd;UACJ;UACA;UACA,IAAI;YACA,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC;UAC/D,CAAC,CAAC,OAAO,CAAC,EAAE;YACR,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,+DAA+D,OAAO,CAAC,eAAe,EAAE,EACxF,CACJ,CAAC;UACL;UACA;UACA,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,OAAO,GAAG,EAAE;UACV,IAAI,GAAG,YAAY,gBAAgB,EAAE;YACjC,QAAQ,GAAG,CAAC,IAAI;cACZ,KAAK,oBAAoB,CAAC,sBAAsB;gBAC5C,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,eAAe,CAAC;gBACpD;gBACA,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC3B;cACJ,KAAK,oBAAoB,CAAC,aAAa;gBACnC;gBACA,MAAM,KAAK,CAAC,kBAAkB,CAAC;gBAC/B;cACJ,KAAK,oBAAoB,CAAC,OAAO;gBAC7B;gBACA,IAAI,CAAC,mBAAmB,GAAG,KAAK;gBAChC;YACR;UACJ,CAAC,MAAM,IAAI,GAAG,YAAY,yBAAyB,EAAE;YACjD;YACA,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;UAChC;QACJ;MACJ;IACJ,CAAC,SAAS;MACN;MACA,IAAI,CAAC,mBAAmB,GAAG,KAAK;IACpC;EACJ;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAc,cAAc,CACxB,YAAoB,EACpB,eAAuB,EACvB,aAA4B,EACH;IACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,eAAe,EAAE,CAAC;IACvE,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC;IAC1E,IAAI;MACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,aAAa,EAAE,YAAY,EAAE,eAAe,CAAC;MAC3G,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,eAAe,EAAE,CAAC;MACzE,OAAO,GAAG;IACd,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC;MAE1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,eAAe,KAAK,CAAC,EAAE,CAAC;MACtF,IAAI,CAAC,YAAY,WAAW,EAAE;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO;QAC9B,IAAI,OAAO,IAAI,aAAa,EAAE;UAC1B;UACA;UACA;UACA;UACA;UACA;UACA;UACA,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,sBAAsB,CAAC;QAC3E;QACA,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE;UACtB,IAAI,QAA4B;UAChC,IAAI;YACA,QAAQ,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,SAAS;UAC/C,CAAC,CAAC,OAAO,KAAK,EAAE;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,KAAK,CAAC;UAC9E;UACA,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,QAAQ,IAAI,CAAC;UACrE;UACA,MAAM,IAAI,yBAAyB,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QACvE;MACJ;MACA,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,aAAa,CAAC;IAClE;EACJ;EAEA,MAAc,gBAAgB,CAC1B,WAAwB,EACxB,IAAsB,EACtB,aAA4B,EACf;IACb,MAAM,gBAAkD,GAAG;MAAE,CAAC,WAAW,CAAC,eAAe,GAAG;IAAK,CAAC;IAElG,MAAM,IAAI,GAAG,MAAM,aAAa,CAAE,SAAS,CAAC,eAAe,CAAC,gBAAgB,CAAC;IAC7E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;MAClB,CAAC,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM;IAClC;IACA,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC;EACtF;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;EACI,MAAc,8BAA8B,GAAkC;IAC1E,IAAI,IAAI,CAAC,aAAa,EAAE;MACpB,OAAO,IAAI,CAAC,aAAa;IAC7B;;IAEA;IACA;IACA,IAAI,IAAI,CAAC,uBAAuB,EAAE;MAC9B,OAAO,IAAI;IACf;;IAEA;IACA;IACA,IAAI,IAAI,CAAC,yBAAyB,IAAI,IAAI,EAAE;MACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC;MACzE,OAAO,MAAM,IAAI,CAAC,yBAAyB;IAC/C;IAEA,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IAAI;MACA,OAAO,MAAM,IAAI,CAAC,yBAAyB;IAC/C,CAAC,SAAS;MACN,IAAI,CAAC,yBAAyB,GAAG,IAAI;IACzC;EACJ;EAEA,MAAc,uBAAuB,GAAkC;IACnE,IAAI,oBAAoB,GAAG,IAAI;IAC/B,IAAI;MACA,oBAAoB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACzE,CAAC,CAAC,OAAO,CAAC,EAAE;MACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,EAAE,CAAC;MACtE,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,oBAAoB,EAAE,OAAO,EAAE,CAAC;IAE7F,IAAI,oBAAoB,EAAE,SAAS,IAAI,wCAAwC,EAAE;MAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,oBAAoB,EAAE,SAAS,EAAE,CAAC;MAC5E,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IAEA,IAAI,CAAC,oBAAoB,EAAE,OAAO,EAAE;MAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC;MACzC,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IAEA,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACvE,IAAI,aAAa,IAAI,IAAI,IAAI,oBAAoB,CAAC,OAAO,IAAI,aAAa,EAAE;MACxE;MACA,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,6CAA6C,oBAAoB,CAAC,OAAO,6DAA6D,aAAa,EACvJ,CAAC;MACD,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IAEA,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE;MAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC;MAC5E,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IAEA,IAAI,aAAa,IAAI,UAAU,CAAC,aAAa,EAAE;MAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,+CAA+C,UAAU,CAAC,aAAa,qDAAqD,aAAa,GAC7I,CAAC;MACD,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IAEA,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAA+B;IACrE,IAAI,QAAQ,CAAC,UAAU,IAAI,UAAU,CAAC,aAAa,CAAC,iBAAiB,CAAC,eAAe,EAAE;MACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC;MAC3E,IAAI,CAAC,uBAAuB,GAAG,IAAI;MACnC,OAAO,IAAI;IACf;IAEA,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,UAAU,CAAC,aAAa,CAAC;IAC1F,IAAI,CAAC,uBAAuB,GAAG,KAAK;IACpC,IAAI,CAAC,aAAa,GAAG;MACjB,SAAS,EAAE,eAAe;MAC1B,aAAa,EAAE;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,aAAa;EAC7B;AACJ","ignoreList":[]}

package/lib/rust-crypto/RoomEncryptor.js

@@ -1,4 +1,3 @@
-import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
 import _defineProperty from "@babel/runtime/helpers/defineProperty";
 /*
 Copyright 2023 The Matrix.org Foundation C.I.C.
@@ -40,12 +39,6 @@ export class RoomEncryptor {
    * @param encryptionSettings - body of the m.room.encryption event currently in force in this room
    */
   constructor(prefixedLogger, olmMachine, keyClaimManager, outgoingRequestManager, room, encryptionSettings) {
-    this.prefixedLogger = prefixedLogger;
-    this.olmMachine = olmMachine;
-    this.keyClaimManager = keyClaimManager;
-    this.outgoingRequestManager = outgoingRequestManager;
-    this.room = room;
-    this.encryptionSettings = encryptionSettings;
     /** whether the room members have been loaded and tracked for the first time */
     _defineProperty(this, "lazyLoadedMembersResolved", false);
     /**
@@ -54,9 +47,15 @@ export class RoomEncryptor {
      * An encryption operation is either a {@link prepareForEncryption} or an {@link encryptEvent} call.
      */
     _defineProperty(this, "currentEncryptionPromise", Promise.resolve());
+    this.prefixedLogger = prefixedLogger;
+    this.olmMachine = olmMachine;
+    this.keyClaimManager = keyClaimManager;
+    this.outgoingRequestManager = outgoingRequestManager;
+    this.room = room;
+    this.encryptionSettings = encryptionSettings;
     // start tracking devices for any users already known to be in this room.
     // Do not load members here, would defeat lazy loading.
-    var members = room.getJoinedMembers();
+    const members = room.getJoinedMembers();
 
     // At this point just mark the known members as tracked, it might not be the full list of members
     // because of lazy loading. This is fine, because we will get a member list update when sending a message for
@@ -102,18 +101,15 @@ export class RoomEncryptor {
    * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.
    * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.
    */
-  prepareForEncryption(globalBlacklistUnverifiedDevices, deviceIsolationMode) {
-    var _this = this;
-    return _asyncToGenerator(function* () {
-      // We consider a prepareForEncryption as an encryption promise as it will potentially share keys
-      // even if it doesn't send an event.
-      // Usually this is called when the user starts typing, so we want to make sure we have keys ready when the
-      // message is finally sent.
-      // If `encryptEvent` is invoked before `prepareForEncryption` has completed, the `encryptEvent` call will wait for
-      // `prepareForEncryption` to complete before executing.
-      // The part where `encryptEvent` shares the room key will then usually be a no-op as it was already performed by `prepareForEncryption`.
-      yield _this.encryptEvent(null, globalBlacklistUnverifiedDevices, deviceIsolationMode);
-    })();
+  async prepareForEncryption(globalBlacklistUnverifiedDevices, deviceIsolationMode) {
+    // We consider a prepareForEncryption as an encryption promise as it will potentially share keys
+    // even if it doesn't send an event.
+    // Usually this is called when the user starts typing, so we want to make sure we have keys ready when the
+    // message is finally sent.
+    // If `encryptEvent` is invoked before `prepareForEncryption` has completed, the `encryptEvent` call will wait for
+    // `prepareForEncryption` to complete before executing.
+    // The part where `encryptEvent` shares the room key will then usually be a no-op as it was already performed by `prepareForEncryption`.
+    await this.encryptEvent(null, globalBlacklistUnverifiedDevices, deviceIsolationMode);
   }
 
   /**
@@ -129,24 +125,22 @@ export class RoomEncryptor {
    * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.
    */
   encryptEvent(event, globalBlacklistUnverifiedDevices, deviceIsolationMode) {
-    var _event$getTxnId,
-      _this2 = this;
-    var logger = new LogSpan(this.prefixedLogger, event ? (_event$getTxnId = event.getTxnId()) !== null && _event$getTxnId !== void 0 ? _event$getTxnId : "" : "prepareForEncryption");
+    const logger = new LogSpan(this.prefixedLogger, event ? event.getTxnId() ?? "" : "prepareForEncryption");
     // Ensure order of encryption to avoid message ordering issues, as the scheduler only ensures
     // events order after they have been encrypted.
-    var prom = this.currentEncryptionPromise.catch(() => {
+    const prom = this.currentEncryptionPromise.catch(() => {
       // Any errors in the previous call will have been reported already, so there is nothing to do here.
       // we just throw away the error and start anew.
-    }).then(/*#__PURE__*/_asyncToGenerator(function* () {
-      yield logDuration(logger, "ensureEncryptionSession", /*#__PURE__*/_asyncToGenerator(function* () {
-        yield _this2.ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode);
-      }));
+    }).then(async () => {
+      await logDuration(logger, "ensureEncryptionSession", async () => {
+        await this.ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode);
+      });
       if (event) {
-        yield logDuration(logger, "encryptEventInner", /*#__PURE__*/_asyncToGenerator(function* () {
-          yield _this2.encryptEventInner(logger, event);
-        }));
+        await logDuration(logger, "encryptEventInner", async () => {
+          await this.encryptEventInner(logger, event);
+        });
       }
-    }));
+    });
     this.currentEncryptionPromise = prom;
     return prom;
   }
@@ -163,128 +157,118 @@ export class RoomEncryptor {
    * Ignored when `deviceIsolationMode` is `OnlySignedDevicesIsolationMode`.
    * @param deviceIsolationMode - The device isolation mode. See {@link DeviceIsolationMode}.
    */
-  ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode) {
-    var _this3 = this;
-    return _asyncToGenerator(function* () {
-      if (_this3.encryptionSettings.algorithm !== "m.megolm.v1.aes-sha2") {
-        throw new Error("Cannot encrypt in ".concat(_this3.room.roomId, " for unsupported algorithm '").concat(_this3.encryptionSettings.algorithm, "'"));
-      }
-      logger.debug("Starting encryption");
-      var members = yield _this3.room.getEncryptionTargetMembers();
+  async ensureEncryptionSession(logger, globalBlacklistUnverifiedDevices, deviceIsolationMode) {
+    if (this.encryptionSettings.algorithm !== "m.megolm.v1.aes-sha2") {
+      throw new Error(`Cannot encrypt in ${this.room.roomId} for unsupported algorithm '${this.encryptionSettings.algorithm}'`);
+    }
+    logger.debug("Starting encryption");
+    const members = await this.room.getEncryptionTargetMembers();
 
-      // If this is the first time we are sending a message to the room, we may not yet have seen all the members
-      // (so the Crypto SDK might not have a device list for them). So, if this is the first time we are encrypting
-      // for this room, give the SDK the full list of members, to be on the safe side.
-      //
-      // This could end up being racy (if two calls to ensureEncryptionSession happen at the same time), but that's
-      // not a particular problem, since `OlmMachine.updateTrackedUsers` just adds any users that weren't already tracked.
-      if (!_this3.lazyLoadedMembersResolved) {
-        yield logDuration(logger, "loadMembersIfNeeded: updateTrackedUsers", /*#__PURE__*/_asyncToGenerator(function* () {
-          yield _this3.olmMachine.updateTrackedUsers(members.map(u => new RustSdkCryptoJs.UserId(u.userId)));
-        }));
-        logger.debug("Updated tracked users");
-        _this3.lazyLoadedMembersResolved = true;
+    // If this is the first time we are sending a message to the room, we may not yet have seen all the members
+    // (so the Crypto SDK might not have a device list for them). So, if this is the first time we are encrypting
+    // for this room, give the SDK the full list of members, to be on the safe side.
+    //
+    // This could end up being racy (if two calls to ensureEncryptionSession happen at the same time), but that's
+    // not a particular problem, since `OlmMachine.updateTrackedUsers` just adds any users that weren't already tracked.
+    if (!this.lazyLoadedMembersResolved) {
+      await logDuration(logger, "loadMembersIfNeeded: updateTrackedUsers", async () => {
+        await this.olmMachine.updateTrackedUsers(members.map(u => new RustSdkCryptoJs.UserId(u.userId)));
+      });
+      logger.debug(`Updated tracked users`);
+      this.lazyLoadedMembersResolved = true;
 
-        // Query keys in case we don't have them for newly tracked members.
-        // It's important after loading members for the first time, as likely most of them won't be
-        // known yet and will be unable to decrypt messages despite being in the room for long.
-        // This must be done before ensuring sessions. If not the devices of these users are not
-        // known yet and will not get the room key.
-        // We don't have API to only get the keys queries related to this member list, so we just
-        // process the pending requests from the olmMachine. (usually these are processed
-        // at the end of the sync, but we can't wait for that).
-        // XXX future improvement process only KeysQueryRequests for the users that have never been queried.
-        logger.debug("Processing outgoing requests");
-        yield logDuration(logger, "doProcessOutgoingRequests", /*#__PURE__*/_asyncToGenerator(function* () {
-          yield _this3.outgoingRequestManager.doProcessOutgoingRequests();
-        }));
-      } else {
-        // If members are already loaded it's less critical to await on key queries.
-        // We might still want to trigger a processOutgoingRequests here.
-        // The call to `ensureSessionsForUsers` below will wait a bit on in-flight key queries we are
-        // interested in. If a sync handling happens in the meantime, and some new members are added to the room
-        // or have new devices it would give us a chance to query them before sending.
-        // It's less critical due to the racy nature of this process.
-        logger.debug("Processing outgoing requests in background");
-        _this3.outgoingRequestManager.doProcessOutgoingRequests();
-      }
-      logger.debug("Encrypting for users (shouldEncryptForInvitedMembers: ".concat(_this3.room.shouldEncryptForInvitedMembers(), "):"), members.map(u => "".concat(u.userId, " (").concat(u.membership, ")")));
-      var userList = members.map(u => new UserId(u.userId));
-      yield logDuration(logger, "ensureSessionsForUsers", /*#__PURE__*/_asyncToGenerator(function* () {
-        yield _this3.keyClaimManager.ensureSessionsForUsers(logger, userList);
-      }));
-      var rustEncryptionSettings = new EncryptionSettings();
-      rustEncryptionSettings.historyVisibility = toRustHistoryVisibility(_this3.room.getHistoryVisibility());
+      // Query keys in case we don't have them for newly tracked members.
+      // It's important after loading members for the first time, as likely most of them won't be
+      // known yet and will be unable to decrypt messages despite being in the room for long.
+      // This must be done before ensuring sessions. If not the devices of these users are not
+      // known yet and will not get the room key.
+      // We don't have API to only get the keys queries related to this member list, so we just
+      // process the pending requests from the olmMachine. (usually these are processed
+      // at the end of the sync, but we can't wait for that).
+      // XXX future improvement process only KeysQueryRequests for the users that have never been queried.
+      logger.debug(`Processing outgoing requests`);
+      await logDuration(logger, "doProcessOutgoingRequests", async () => {
+        await this.outgoingRequestManager.doProcessOutgoingRequests();
+      });
+    } else {
+      // If members are already loaded it's less critical to await on key queries.
+      // We might still want to trigger a processOutgoingRequests here.
+      // The call to `ensureSessionsForUsers` below will wait a bit on in-flight key queries we are
+      // interested in. If a sync handling happens in the meantime, and some new members are added to the room
+      // or have new devices it would give us a chance to query them before sending.
+      // It's less critical due to the racy nature of this process.
+      logger.debug(`Processing outgoing requests in background`);
+      this.outgoingRequestManager.doProcessOutgoingRequests();
+    }
+    logger.debug(`Encrypting for users (shouldEncryptForInvitedMembers: ${this.room.shouldEncryptForInvitedMembers()}):`, members.map(u => `${u.userId} (${u.membership})`));
+    const userList = members.map(u => new UserId(u.userId));
+    await logDuration(logger, "ensureSessionsForUsers", async () => {
+      await this.keyClaimManager.ensureSessionsForUsers(logger, userList);
+    });
+    const rustEncryptionSettings = new EncryptionSettings();
+    rustEncryptionSettings.historyVisibility = toRustHistoryVisibility(this.room.getHistoryVisibility());
 
-      // We only support megolm
-      rustEncryptionSettings.algorithm = EncryptionAlgorithm.MegolmV1AesSha2;
+    // We only support megolm
+    rustEncryptionSettings.algorithm = EncryptionAlgorithm.MegolmV1AesSha2;
 
-      // We need to convert the rotation period from milliseconds to microseconds
-      // See https://spec.matrix.org/v1.8/client-server-api/#mroomencryption and
-      // https://matrix-org.github.io/matrix-rust-sdk-crypto-wasm/classes/EncryptionSettings.html#rotationPeriod
-      if (typeof _this3.encryptionSettings.rotation_period_ms === "number") {
-        rustEncryptionSettings.rotationPeriod = BigInt(_this3.encryptionSettings.rotation_period_ms * 1000);
-      }
-      if (typeof _this3.encryptionSettings.rotation_period_msgs === "number") {
-        rustEncryptionSettings.rotationPeriodMessages = BigInt(_this3.encryptionSettings.rotation_period_msgs);
-      }
-      switch (deviceIsolationMode.kind) {
-        case DeviceIsolationModeKind.AllDevicesIsolationMode:
-          {
-            var _this3$room$getBlackl;
-            // When this.room.getBlacklistUnverifiedDevices() === null, the global settings should be used
-            // See Room#getBlacklistUnverifiedDevices
-            var onlyAllowTrustedDevices = (_this3$room$getBlackl = _this3.room.getBlacklistUnverifiedDevices()) !== null && _this3$room$getBlackl !== void 0 ? _this3$room$getBlackl : globalBlacklistUnverifiedDevices;
-            rustEncryptionSettings.sharingStrategy = CollectStrategy.deviceBasedStrategy(onlyAllowTrustedDevices, deviceIsolationMode.errorOnVerifiedUserProblems);
-          }
-          break;
-        case DeviceIsolationModeKind.OnlySignedDevicesIsolationMode:
-          rustEncryptionSettings.sharingStrategy = CollectStrategy.identityBasedStrategy();
-          break;
-      }
-      yield logDuration(logger, "shareRoomKey", /*#__PURE__*/_asyncToGenerator(function* () {
-        var shareMessages = yield _this3.olmMachine.shareRoomKey(new RoomId(_this3.room.roomId),
-        // safe to pass without cloning, as it's not reused here (before or after)
-        userList, rustEncryptionSettings);
-        if (shareMessages) {
-          for (var m of shareMessages) {
-            yield _this3.outgoingRequestManager.outgoingRequestProcessor.makeOutgoingRequest(m);
-          }
+    // We need to convert the rotation period from milliseconds to microseconds
+    // See https://spec.matrix.org/v1.8/client-server-api/#mroomencryption and
+    // https://matrix-org.github.io/matrix-rust-sdk-crypto-wasm/classes/EncryptionSettings.html#rotationPeriod
+    if (typeof this.encryptionSettings.rotation_period_ms === "number") {
+      rustEncryptionSettings.rotationPeriod = BigInt(this.encryptionSettings.rotation_period_ms * 1000);
+    }
+    if (typeof this.encryptionSettings.rotation_period_msgs === "number") {
+      rustEncryptionSettings.rotationPeriodMessages = BigInt(this.encryptionSettings.rotation_period_msgs);
+    }
+    switch (deviceIsolationMode.kind) {
+      case DeviceIsolationModeKind.AllDevicesIsolationMode:
+        {
+          // When this.room.getBlacklistUnverifiedDevices() === null, the global settings should be used
+          // See Room#getBlacklistUnverifiedDevices
+          const onlyAllowTrustedDevices = this.room.getBlacklistUnverifiedDevices() ?? globalBlacklistUnverifiedDevices;
+          rustEncryptionSettings.sharingStrategy = CollectStrategy.deviceBasedStrategy(onlyAllowTrustedDevices, deviceIsolationMode.errorOnVerifiedUserProblems);
         }
-      }));
-    })();
+        break;
+      case DeviceIsolationModeKind.OnlySignedDevicesIsolationMode:
+        rustEncryptionSettings.sharingStrategy = CollectStrategy.identityBasedStrategy();
+        break;
+    }
+    await logDuration(logger, "shareRoomKey", async () => {
+      const shareMessages = await this.olmMachine.shareRoomKey(new RoomId(this.room.roomId),
+      // safe to pass without cloning, as it's not reused here (before or after)
+      userList, rustEncryptionSettings);
+      if (shareMessages) {
+        for (const m of shareMessages) {
+          await this.outgoingRequestManager.outgoingRequestProcessor.makeOutgoingRequest(m);
+        }
+      }
+    });
   }
 
   /**
    * Discard any existing group session for this room
    */
-  forceDiscardSession() {
-    var _this4 = this;
-    return _asyncToGenerator(function* () {
-      var r = yield _this4.olmMachine.invalidateGroupSession(new RoomId(_this4.room.roomId));
-      if (r) {
-        _this4.prefixedLogger.info("Discarded existing group session");
-      }
-    })();
+  async forceDiscardSession() {
+    const r = await this.olmMachine.invalidateGroupSession(new RoomId(this.room.roomId));
+    if (r) {
+      this.prefixedLogger.info("Discarded existing group session");
+    }
   }
-  encryptEventInner(logger, event) {
-    var _this5 = this;
-    return _asyncToGenerator(function* () {
-      logger.debug("Encrypting actual message content");
-      var room = new RoomId(_this5.room.roomId);
-      var type = event.getType();
-      var content = JSON.stringify(event.getContent());
-      var encryptedContent;
-      if (event.isState()) {
-        encryptedContent = yield _this5.olmMachine.encryptStateEvent(room, type,
-        // Safety: we've already checked above that this is a state event, so the state key must exist.
-        event.getStateKey(), content);
-      } else {
-        encryptedContent = yield _this5.olmMachine.encryptRoomEvent(room, type, content);
-      }
-      event.makeEncrypted(EventType.RoomMessageEncrypted, JSON.parse(encryptedContent), _this5.olmMachine.identityKeys.curve25519.toBase64(), _this5.olmMachine.identityKeys.ed25519.toBase64());
-      logger.debug("Encrypted event successfully");
-    })();
+  async encryptEventInner(logger, event) {
+    logger.debug("Encrypting actual message content");
+    const room = new RoomId(this.room.roomId);
+    const type = event.getType();
+    const content = JSON.stringify(event.getContent());
+    let encryptedContent;
+    if (event.isState()) {
+      encryptedContent = await this.olmMachine.encryptStateEvent(room, type,
+      // Safety: we've already checked above that this is a state event, so the state key must exist.
+      event.getStateKey(), content);
+    } else {
+      encryptedContent = await this.olmMachine.encryptRoomEvent(room, type, content);
+    }
+    event.makeEncrypted(EventType.RoomMessageEncrypted, JSON.parse(encryptedContent), this.olmMachine.identityKeys.curve25519.toBase64(), this.olmMachine.identityKeys.ed25519.toBase64());
+    logger.debug("Encrypted event successfully");
   }
 }