matrix-js-sdk 41.9.0 → 42.0.0

package/lib/oauth/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","names":[],"sources":["../../src/oauth/register.ts"],"sourcesContent":["/*\nCopyright 2023-2026 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type NonEmptyArray } from \"../@types/common.ts\";\nimport { hasRequiredStringProperty, isRecord } from \"../@types/type-guards.ts\";\n\ntype LocalizableKeys = \"client_name\" | \"client_uri\" | \"policy_uri\" | \"tos_uri\" | \"logo_uri\";\n\n/**\n * Request body for dynamic registration as defined by https://spec.matrix.org/v1.18/client-server-api/#client-registration\n */\nexport type OAuthRegistrationRequest = {\n    /**\n     * Kind of the application.\n     *\n     * The homeserver MUST support the web and native values to be able to perform redirect URI validation.\n     *\n     * Defaults to web if omitted.\n     */\n    application_type?: \"web\" | \"native\";\n    /**\n     * Human-readable name of the client to be presented to the user.\n     *\n     * This field can be localized by specifying `client_name#$lang`.\n     */\n    client_name?: string;\n    /**\n     * A URL to a valid web page that SHOULD give the user more information about the client.\n     *\n     * This URL MUST use the https scheme and SHOULD NOT require authentication to access.\n     * It MUST NOT use a user or password in the authority component of the URI.\n     *\n     * The server MAY reject client registrations if this field is invalid or missing.\n     *\n     * This URI is a common base for all the other URIs in the metadata:\n     * those MUST be either on the same host or on a subdomain of the host of the client_uri.\n     * The port number, path and query components MAY be different.\n     *\n     * For example, if the client_uri is https://example.com/,\n     * then one of the redirect_uris can be https://example.com/callback or https://app.example.com/callback,\n     * but not https://app.com/callback.\n     *\n     * This field can be localized by specifying `client_uri#$lang`.\n     */\n    client_uri: string;\n    /**\n     * Array of the OAuth 2.0 grant types that the client may use.\n     *\n     * This MUST include:\n     *\n     * the authorization_code value to use the authorization code grant,\n     * the refresh_token value to use the refresh token grant.\n     */\n    grant_types?: NonEmptyArray<string>;\n    /**\n     * URL that references a logo for the client.\n     *\n     * This URL MUST use the https scheme.\n     *\n     * This field can be localized by specifying `logo_uri#$lang`.\n     */\n    logo_uri?: string;\n    /**\n     * URL that points to a human-readable policy document for the client.\n     *\n     * This URL MUST use the https scheme and SHOULD NOT require authentication to access.\n     * It MUST NOT use a user or password in the authority component of the URI.\n     *\n     * This field can be localized by specifying `policy_uri#$lang`.\n     */\n    policy_uri?: string;\n    /**\n     * Array of redirection URIs for use in redirect-based flows.\n     *\n     * At least one URI is required to use the authorization code grant.\n     */\n    redirect_uris?: NonEmptyArray<string>;\n    /**\n     * Array of the OAuth 2.0 response types that the client may use.\n     *\n     * This MUST include the code value to use the authorization code grant.\n     */\n    response_types?: NonEmptyArray<string>;\n    /**\n     * String indicator of the requested authentication method for the token endpoint.\n     */\n    token_endpoint_auth_method?: string;\n    /**\n     * URL that points to a human-readable terms of service document for the client.\n     *\n     * This URL MUST use the https scheme and SHOULD NOT require authentication to access.\n     * It MUST NOT use a user or password in the authority component of the URI.\n     *\n     * This field can be localized by specifying `tos_uri#$lang`.\n     */\n    tos_uri?: string;\n} & {\n    // --- Dynamic Localized Fields (e.g., client_name#es-ES) ---\n    [K in `${LocalizableKeys}#${string}`]?: string;\n};\n\n/**\n * The OAuth 2.0 grant types that are defined for Matrix in https://spec.matrix.org/v1.17/client-server-api/#grant-types\n */\nexport enum OAuthGrantType {\n    /**\n     * As per RFC 6749 section 4.1, the authorization code grant lets the client obtain an access token through a browser redirect.\n     *\n     * See https://spec.matrix.org/v1.18/client-server-api/#authorization-code-grant\n     */\n    AuthorizationCode = \"authorization_code\",\n    /**\n     * As per RFC 6749 section 6, the refresh token grant lets the client exchange a refresh token for an access token.\n     *\n     * https://spec.matrix.org/v1.18/client-server-api/#refresh-token-grant\n     */\n    RefreshToken = \"refresh_token\",\n    /**\n     * As per RFC 8628, the device authorization grant lets clients on devices with limited input capabilities obtain\n     * an access token by having the user complete authorization on a separate device with a web browser.\n     *\n     * See https://spec.matrix.org/v1.18/client-server-api/#device-authorization-grant\n     */\n    DeviceAuthorization = \"urn:ietf:params:oauth:grant-type:device_code\",\n}\n\n/**\n * Check that URIs have a common base,\n * as per https://spec.matrix.org/v1.18/client-server-api/#redirect-uri-validation\n */\nexport function urlHasCommonBase(base: URL, urlStr?: string): boolean {\n    if (!urlStr) return false;\n    const url = new URL(urlStr);\n    if (url.protocol !== base.protocol) return false;\n    if (url.hostname !== base.hostname && !url.hostname.endsWith(`.${base.hostname}`)) return false;\n    return true;\n}\n\n/**\n * Response from dynamic registration\n */\ntype RegistrationResponse = {\n    client_id: string;\n};\n\n/**\n * Validate the given response matches the format expected for a {@link RegistrationResponse}\n * @param response - the response to validate\n * @throws if the response does not match the expected format\n */\nexport function validateRegistrationResponse(response: unknown): response is RegistrationResponse {\n    return isRecord(response) && hasRequiredStringProperty(response, \"client_id\");\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAAS,yBAAyB,EAAE,QAAQ,QAAQ,0BAA0B;;AAI9E;AACA;AACA;;AA2FA;AACA;AACA;AACA,WAAY,cAAc,0BAAd,cAAc;EACtB;AACJ;AACA;AACA;AACA;EALY,cAAc;EAOtB;AACJ;AACA;AACA;AACA;EAXY,cAAc;EAatB;AACJ;AACA;AACA;AACA;AACA;EAlBY,cAAc;EAAA,OAAd,cAAc;AAAA;;AAsB1B;AACA;AACA;AACA;AACA,OAAO,SAAS,gBAAgB,CAAC,IAAS,EAAE,MAAe,EAAW;EAClE,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK;EACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC;EAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,OAAO,KAAK;EAChD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,KAAK;EAC/F,OAAO,IAAI;AACf;;AAEA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,4BAA4B,CAAC,QAAiB,EAAoC;EAC9F,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,yBAAyB,CAAC,QAAQ,EAAE,WAAW,CAAC;AACjF","ignoreList":[]}

package/lib/oauth/tokenRefresher.d.ts

@@ -0,0 +1,21 @@
+import { type AccessTokens, type TokenRefreshFunction } from "../http-api/index.ts";
+import { type OAuth2 } from "./index.ts";
+/**
+ * Class responsible for refreshing OAuth2 access tokens
+ */
+export declare class TokenRefresher {
+    private readonly auth;
+    private readonly onRefresh;
+    private inflightRefreshRequest?;
+    constructor(auth: OAuth2, onRefresh: (tokens: AccessTokens) => Promise<void>);
+    /**
+     * Attempt token refresh using given refresh token
+     * @param refreshToken - refresh token to use in request with token issuer
+     * @returns tokens - Promise that resolves with new access and refresh tokens
+     * @throws when token refresh fails
+     */
+    tokenRefreshFunction: TokenRefreshFunction;
+    private shouldLogoutOnError;
+    private getNewTokens;
+}
+//# sourceMappingURL=tokenRefresher.d.ts.map

package/lib/oauth/tokenRefresher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenRefresher.d.ts","sourceRoot":"","sources":["../../src/oauth/tokenRefresher.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,YAAY,EAAa,KAAK,oBAAoB,EAA2B,MAAM,sBAAsB,CAAC;AACxH,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,qBAAa,cAAc;IAInB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJ9B,OAAO,CAAC,sBAAsB,CAAC,CAAwB;IAEvD,YACqB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,EACnE;IAEJ;;;;;OAKG;IACI,oBAAoB,EAAE,oBAAoB,CAiB/C;IAEF,OAAO,CAAC,mBAAmB;YAKb,YAAY;CAgB7B"}

package/lib/oauth/tokenRefresher.js

@@ -0,0 +1,68 @@
+import _defineProperty from "@babel/runtime/helpers/defineProperty";
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+import { HTTPError, TokenRefreshLogoutError } from "../http-api/index.js";
+/**
+ * Class responsible for refreshing OAuth2 access tokens
+ */
+export class TokenRefresher {
+  constructor(auth, onRefresh) {
+    _defineProperty(this, "inflightRefreshRequest", void 0);
+    /**
+     * Attempt token refresh using given refresh token
+     * @param refreshToken - refresh token to use in request with token issuer
+     * @returns tokens - Promise that resolves with new access and refresh tokens
+     * @throws when token refresh fails
+     */
+    _defineProperty(this, "tokenRefreshFunction", async refreshToken => {
+      if (!this.inflightRefreshRequest) {
+        this.inflightRefreshRequest = this.getNewTokens(refreshToken);
+      }
+      try {
+        const tokens = await this.inflightRefreshRequest;
+        return tokens;
+      } catch (e) {
+        // If we encounter a 40x error then signal that it should cause a logout by upgrading it to a TokenRefreshLogoutError
+        if (e instanceof HTTPError && this.shouldLogoutOnError(e)) {
+          throw new TokenRefreshLogoutError(e);
+        }
+        throw e;
+      } finally {
+        this.inflightRefreshRequest = undefined;
+      }
+    });
+    this.auth = auth;
+    this.onRefresh = onRefresh;
+  }
+  shouldLogoutOnError(error) {
+    // As per https://spec.matrix.org/v1.18/client-server-api/#refresh-token-grant
+    return typeof error.httpStatus === "number" && error.httpStatus < 500 && error.httpStatus >= 400;
+  }
+  async getNewTokens(refreshToken) {
+    const requestStart = Date.now();
+    const response = await this.auth.performRefreshTokenGrant(refreshToken);
+    const tokens = {
+      accessToken: response.access_token,
+      refreshToken: response.refresh_token,
+      // We use the request start time to calculate the expiry time as we don't know when the server received our request
+      expiry: response.expires_in ? new Date(requestStart + response.expires_in * 1000) : undefined
+    };
+    await this.onRefresh(tokens);
+    return tokens;
+  }
+}
+//# sourceMappingURL=tokenRefresher.js.map

package/lib/oauth/tokenRefresher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenRefresher.js","names":[],"sources":["../../src/oauth/tokenRefresher.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type AccessTokens, HTTPError, type TokenRefreshFunction, TokenRefreshLogoutError } from \"../http-api/index.ts\";\nimport { type OAuth2 } from \"./index.ts\";\n\n/**\n * Class responsible for refreshing OAuth2 access tokens\n */\nexport class TokenRefresher {\n    private inflightRefreshRequest?: Promise<AccessTokens>;\n\n    public constructor(\n        private readonly auth: OAuth2,\n        private readonly onRefresh: (tokens: AccessTokens) => Promise<void>,\n    ) {}\n\n    /**\n     * Attempt token refresh using given refresh token\n     * @param refreshToken - refresh token to use in request with token issuer\n     * @returns tokens - Promise that resolves with new access and refresh tokens\n     * @throws when token refresh fails\n     */\n    public tokenRefreshFunction: TokenRefreshFunction = async (refreshToken: string): Promise<AccessTokens> => {\n        if (!this.inflightRefreshRequest) {\n            this.inflightRefreshRequest = this.getNewTokens(refreshToken);\n        }\n\n        try {\n            const tokens = await this.inflightRefreshRequest;\n            return tokens;\n        } catch (e) {\n            // If we encounter a 40x error then signal that it should cause a logout by upgrading it to a TokenRefreshLogoutError\n            if (e instanceof HTTPError && this.shouldLogoutOnError(e)) {\n                throw new TokenRefreshLogoutError(e);\n            }\n            throw e;\n        } finally {\n            this.inflightRefreshRequest = undefined;\n        }\n    };\n\n    private shouldLogoutOnError(error: HTTPError): boolean {\n        // As per https://spec.matrix.org/v1.18/client-server-api/#refresh-token-grant\n        return typeof error.httpStatus === \"number\" && error.httpStatus < 500 && error.httpStatus >= 400;\n    }\n\n    private async getNewTokens(refreshToken: string): Promise<AccessTokens> {\n        const requestStart = Date.now();\n\n        const response = await this.auth.performRefreshTokenGrant(refreshToken);\n\n        const tokens = {\n            accessToken: response.access_token,\n            refreshToken: response.refresh_token,\n            // We use the request start time to calculate the expiry time as we don't know when the server received our request\n            expiry: response.expires_in ? new Date(requestStart + response.expires_in * 1000) : undefined,\n        } satisfies AccessTokens;\n\n        await this.onRefresh(tokens);\n\n        return tokens;\n    }\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAA4B,SAAS,EAA6B,uBAAuB,QAAQ,sBAAsB;AAGvH;AACA;AACA;AACA,OAAO,MAAM,cAAc,CAAC;EAGjB,WAAW,CACG,IAAY,EACZ,SAAkD,EACrE;IAAA;IAEF;AACJ;AACA;AACA;AACA;AACA;IALI,8CAMoD,MAAO,YAAoB,IAA4B;MACvG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE;QAC9B,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;MACjE;MAEA,IAAI;QACA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB;QAChD,OAAO,MAAM;MACjB,CAAC,CAAC,OAAO,CAAC,EAAE;QACR;QACA,IAAI,CAAC,YAAY,SAAS,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE;UACvD,MAAM,IAAI,uBAAuB,CAAC,CAAC,CAAC;QACxC;QACA,MAAM,CAAC;MACX,CAAC,SAAS;QACN,IAAI,CAAC,sBAAsB,GAAG,SAAS;MAC3C;IACJ,CAAC;IAAA,KA3BoB,IAAY,GAAZ,IAAY;IAAA,KACZ,SAAkD,GAAlD,SAAkD;EACpE;EA2BK,mBAAmB,CAAC,KAAgB,EAAW;IACnD;IACA,OAAO,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;EACpG;EAEA,MAAc,YAAY,CAAC,YAAoB,EAAyB;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC;IAEvE,MAAM,MAAM,GAAG;MACX,WAAW,EAAE,QAAQ,CAAC,YAAY;MAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;MACpC;MACA,MAAM,EAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG;IACxF,CAAwB;IAExB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAE5B,OAAO,MAAM;EACjB;AACJ","ignoreList":[]}

package/lib/pushprocessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pushprocessor.d.ts","sourceRoot":"","sources":["../src/pushprocessor.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAEH,KAAK,kBAAkB,EAOvB,KAAK,SAAS,EACd,KAAK,UAAU,EAGf,KAAK,cAAc,EAGnB,YAAY,EAGZ,SAAS,EACZ,MAAM,uBAAuB,CAAC;AAgM/B,MAAM,WAAW,cAAc;IAC3B,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;CAC3C;AAED,qBAAa,aAAa;IAKH,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ1C;;;OAGG;gBACiC,MAAM,EAAE,YAAY;IAExD;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAE1D;;;;;;;;OAQG;WACW,yBAAyB,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,cAAc;IAerF;;;;;;;;;OASG;WACW,mBAAmB,CAC7B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,UAAU,EACzB,MAAM,GAAE,MAAM,GAAG,SAAqB,GACvC,UAAU;IA8Bb;;;;;;;;OAQG;WACW,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,UAAQ,EAAE,KAAK,SAAM,GAAG,MAAM;IAarG;;;;OAIG;IACI,wBAAwB,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI;IA0C3D,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAA8B;IAE9D,OAAO,CAAC,uBAAuB;IA4B/B,OAAO,CAAC,iBAAiB;IAgDzB,OAAO,CAAC,sBAAsB;IAyB9B,OAAO,CAAC,qCAAqC;IAoB7C,OAAO,CAAC,qCAAqC;IAsC7C,OAAO,CAAC,iCAAiC;IAuBzC;;;;;;OAMG;IACH,OAAO,CAAC,gCAAgC;IA2BxC;;;;;;OAMG;IACH,OAAO,CAAC,qCAAqC;IAO7C;;;;;;OAMG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,iCAAiC;IAczC;;;;;;;OAOG;WACW,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAkDtD;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IAsCzB,OAAO,CAAC,gCAAgC;IAYxC,OAAO,CAAC,8BAA8B;IAwB/B,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,WAAW,GAAG,OAAO;IAe3G;;OAEG;IACI,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,cAAc;IAKhD,sBAAsB,CAAC,EAAE,EAAE,WAAW,GAAG;QAC5C,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,IAAI,CAAC,EAAE,kBAAkB,CAAC;KAC7B;IAID;;;;;OAKG;IACI,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAKxD;;;;;;OAMG;IACI,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI;CAchG"}
+{"version":3,"file":"pushprocessor.d.ts","sourceRoot":"","sources":["../src/pushprocessor.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAEH,KAAK,kBAAkB,EAOvB,KAAK,SAAS,EACd,KAAK,UAAU,EAGf,KAAK,cAAc,EAGnB,YAAY,EAGZ,SAAS,EACZ,MAAM,uBAAuB,CAAC;AAgM/B,MAAM,WAAW,cAAc;IAC3B,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;CAC3C;AAED,qBAAa,aAAa;IAKH,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ1C;;;OAGG;IACH,YAAoC,MAAM,EAAE,YAAY,EAAI;IAE5D;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAE1D;;;;;;;;OAQG;IACH,OAAc,yBAAyB,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,cAAc,CAapF;IAED;;;;;;;;;OASG;IACH,OAAc,mBAAmB,CAC7B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,UAAU,EACzB,MAAM,GAAE,MAAM,GAAG,SAAqB,GACvC,UAAU,CA4BZ;IAED;;;;;;;;OAQG;IACH,OAAc,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,UAAQ,EAAE,KAAK,SAAM,GAAG,MAAM,CAWpG;IAED;;;;OAIG;IACI,wBAAwB,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAwC1D;IAED,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAA8B;IAE9D,OAAO,CAAC,uBAAuB;IA4B/B,OAAO,CAAC,iBAAiB;IAgDzB,OAAO,CAAC,sBAAsB;IAyB9B,OAAO,CAAC,qCAAqC;IAoB7C,OAAO,CAAC,qCAAqC;IAsC7C,OAAO,CAAC,iCAAiC;IAuBzC;;;;;;OAMG;IACH,OAAO,CAAC,gCAAgC;IA2BxC;;;;;;OAMG;IACH,OAAO,CAAC,qCAAqC;IAO7C;;;;;;OAMG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,iCAAiC;IAczC;;;;;;;OAOG;IACH,OAAc,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAgDrD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IAsCzB,OAAO,CAAC,gCAAgC;IAYxC,OAAO,CAAC,8BAA8B;IAwB/B,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,WAAW,GAAG,OAAO,CAa1G;IAED;;OAEG;IACI,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,cAAc,CAGtD;IAEM,sBAAsB,CAAC,EAAE,EAAE,WAAW,GAAG;QAC5C,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,IAAI,CAAC,EAAE,kBAAkB,CAAC;KAC7B,CAEA;IAED;;;;;OAKG;IACI,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAGvD;IAED;;;;;;OAMG;IACI,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAa5F;CACJ"}

package/lib/receipt-accumulator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receipt-accumulator.d.ts","sourceRoot":"","sources":["../src/receipt-accumulator.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAY3D;;;;;;;;;;GAUG;AACH,qBAAa,kBAAkB;IAC3B,4DAA4D;IAC5D,OAAO,CAAC,sBAAsB,CAA8C;IAE5E,+EAA+E;IAC/E,OAAO,CAAC,oBAAoB,CAE1B;IAEF;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAInB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAIrB;;;;;OAKG;IACH,OAAO,CAAE,WAAW;IAQpB;;;OAGG;IACI,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,SAAS,GAAG,IAAI;IA8DxE;;;;OAIG;IACI,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;CAgC5E"}
+{"version":3,"file":"receipt-accumulator.d.ts","sourceRoot":"","sources":["../src/receipt-accumulator.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAY3D;;;;;;;;;;GAUG;AACH,qBAAa,kBAAkB;IAC3B,4DAA4D;IAC5D,OAAO,CAAC,sBAAsB,CAA8C;IAE5E,+EAA+E;IAC/E,OAAO,CAAC,oBAAoB,CAE1B;IAEF;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAInB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAIrB;;;;;OAKG;IACH,OAAO,CAAE,WAAW;IAQpB;;;OAGG;IACI,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,SAAS,GAAG,IAAI,CA4DvE;IAED;;;;OAIG;IACI,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CA+BxE;CACJ"}

package/lib/rendezvous/MSC4108SignInWithQR.d.ts

@@ -1,7 +1,7 @@
 import { ClientRendezvousFailureReason, MSC4108FailureReason, type RendezvousFailureListener } from "./index.ts";
 import { type MatrixClient } from "../client.ts";
 import { type MSC4108SecureChannel } from "./channels/MSC4108SecureChannel.ts";
-import { type DeviceAccessTokenResponse, type ValidatedAuthMetadata } from "../oidc/index.ts";
+import { type DeviceAccessTokenResponse, type ValidatedAuthMetadata } from "../oauth/index.ts";
 import { type CryptoApi } from "../crypto-api/index.ts";
 /**
  * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
@@ -30,7 +30,7 @@ interface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<
 }
 /**
  * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
- * sign in with QR + OIDC flow.
+ * sign in with QR + OAuth2 flow.
  * @experimental Note that this is UNSTABLE and may have breaking changes without notice.
  */
 export declare class MSC4108SignInWithQR {
@@ -71,7 +71,7 @@ export declare class MSC4108SignInWithQR {
      */
     get isNewDevice(): boolean;
     /**
-     * The first step in the OIDC QR login process.
+     * The first step in the OAuth2 QR login process.
      * To be called after the QR code has been rendered or scanned.
      * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.
      * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.
@@ -80,9 +80,9 @@ export declare class MSC4108SignInWithQR {
         serverName?: string;
     }>;
     /**
-     * The second & third step in the OIDC QR login process.
+     * The second & third step in the OAuth2 QR login process.
      * To be called after `negotiateProtocols` for the existing device.
-     * To be called after OIDC negotiation for the new device.
+     * To be called after OAuth2 negotiation for the new device.
      *
      * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login
      */
@@ -95,7 +95,7 @@ export declare class MSC4108SignInWithQR {
         userCode?: string;
     }>;
     /**
-     * The fourth step in the OIDC QR login process.
+     * The fourth step in the OAuth2 QR login process.
      * The reciprocating device must perform step 5 for this method to resolve.
      * To be called after {@link deviceAuthorizationGrant} only on the new device.
      */
@@ -103,7 +103,7 @@ export declare class MSC4108SignInWithQR {
         clientId: string;
     }): Promise<DeviceAccessTokenResponse | undefined>;
     /**
-     * The fifth (and final) step in the OIDC QR login process.
+     * The fifth (and final) step in the OAuth2 QR login process.
      * To be called after the new device has completed authentication.
      */
     shareSecrets(): Promise<{

package/lib/rendezvous/MSC4108SignInWithQR.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SignInWithQR.d.ts","sourceRoot":"","sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"names":[],"mappings":"AAkBA,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EAEpB,KAAK,yBAAyB,EACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG/E,OAAO,EACH,KAAK,yBAAyB,EAK9B,KAAK,qBAAqB,EAG7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,oBAAY,WAAW;IACnB,SAAS,sBAAsB;IAC/B,QAAQ,qBAAqB;IAC7B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,gBAAgB,8BAA8B;IAC9C,QAAQ,qBAAqB;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,WAAW,CAAC;CACrB;AA8CD,UAAU,cAAe,SAAQ,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,mBAAmB;IAqBxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,yBAAyB;IAvBhD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAC,CAAa;IAC3B,OAAO,CAAC,oBAAoB,CAAC,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAwB;IACzC,OAAO,CAAC,eAAe,CAAC,CAA8B;IAEtD;;OAEG;IACH,IAAW,SAAS,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED;;;;;OAKG;gBAEkB,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,OAAO,EACpB,MAAM,CAAC,EAAE,YAAY,YAAA,EAC/B,SAAS,CAAC,EAAE,yBAAyB,YAAA;IAKhD;;OAEG;IACH,IAAW,IAAI,IAAI,UAAU,GAAG,SAAS,CAExC;IAED;;OAEG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAY1C;;OAEG;IACH,IAAW,gBAAgB,IAAI,OAAO,CAErC;IAED;;OAEG;IACH,IAAW,WAAW,IAAI,OAAO,CAEhC;IAED;;;;;OAKG;IACU,kBAAkB,IAAI,OAAO,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8DnE;;;;;;OAMG;IACU,wBAAwB,CAAC,KAAK,CAAC,EAAE;QAC1C,QAAQ,EAAE,qBAAqB,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QACR,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAkGF;;;;OAIG;IACU,wBAAwB,CAAC,EAClC,QAAQ,GACX,EAAE;QACC,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAuDlD;;;OAGG;IACU,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;YAyFlE,OAAO;YAIP,IAAI;IAIlB;;OAEG;IACU,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC;IAU1D;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhG;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAGtC"}
+{"version":3,"file":"MSC4108SignInWithQR.d.ts","sourceRoot":"","sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"names":[],"mappings":"AAkBA,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EAEpB,KAAK,yBAAyB,EACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG/E,OAAO,EACH,KAAK,yBAAyB,EAK9B,KAAK,qBAAqB,EAE7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,oBAAY,WAAW;IACnB,SAAS,sBAAsB;IAC/B,QAAQ,qBAAqB;IAC7B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,gBAAgB,8BAA8B;IAC9C,QAAQ,qBAAqB;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,WAAW,CAAC;CACrB;AA8CD,UAAU,cAAe,SAAQ,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,mBAAmB;IAqBxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,yBAAyB;IAvBhD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAC,CAAa;IAC3B,OAAO,CAAC,oBAAoB,CAAC,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAwB;IACzC,OAAO,CAAC,eAAe,CAAC,CAA8B;IAEtD;;OAEG;IACH,IAAW,SAAS,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED;;;;;OAKG;IACH,YACqB,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,OAAO,EACpB,MAAM,CAAC,EAAE,YAAY,YAAA,EAC/B,SAAS,CAAC,EAAE,yBAAyB,YAAA,EAG/C;IAED;;OAEG;IACH,IAAW,IAAI,IAAI,UAAU,GAAG,SAAS,CAExC;IAED;;OAEG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAUzC;IAED;;OAEG;IACH,IAAW,gBAAgB,IAAI,OAAO,CAErC;IAED;;OAEG;IACH,IAAW,WAAW,IAAI,OAAO,CAEhC;IAED;;;;;OAKG;IACU,kBAAkB,IAAI,OAAO,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CA4DlE;IAED;;;;;;OAMG;IACU,wBAAwB,CAAC,KAAK,CAAC,EAAE;QAC1C,QAAQ,EAAE,qBAAqB,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QACR,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAgGD;IAED;;;;OAIG;IACU,wBAAwB,CAAC,EAClC,QAAQ,GACX,EAAE;QACC,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAqDjD;IAED;;;OAGG;IACU,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAuF/E;YAEa,OAAO;YAIP,IAAI;IAIlB;;OAEG;IACU,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC,CAQzD;IAED;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/F;IAED;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAElC;CACJ"}

package/lib/rendezvous/MSC4108SignInWithQR.js

@@ -21,7 +21,7 @@ import { ClientRendezvousFailureReason, MSC4108FailureReason, RendezvousError }
 import { logger } from "../logger.js";
 import { MatrixError } from "../http-api/index.js";
 import { sleep } from "../utils.js";
-import { generateScope, OAuthGrantType, startDeviceAuthorization, waitForDeviceAuthorization } from "../oidc/index.js";
+import { generateScope, OAuthGrantType, startDeviceAuthorization, waitForDeviceAuthorization } from "../oauth/index.js";
 /**
  * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
  * secure channels.
@@ -49,7 +49,7 @@ function isDeviceAuthorizationGrantProtocolPayload(payload) {
 }
 /**
  * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
- * sign in with QR + OIDC flow.
+ * sign in with QR + OAuth2 flow.
  * @experimental Note that this is UNSTABLE and may have breaking changes without notice.
  */
 export class MSC4108SignInWithQR {
@@ -115,7 +115,7 @@ export class MSC4108SignInWithQR {
   }
 
   /**
-   * The first step in the OIDC QR login process.
+   * The first step in the OAuth2 QR login process.
    * To be called after the QR code has been rendered or scanned.
    * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.
    * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.
@@ -130,13 +130,13 @@ export class MSC4108SignInWithQR {
         // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set
       } else {
         // MSC4108-Flow: NewScanned -send protocols message
-        let oidcClientConfig;
+        let authMetadata;
         try {
-          oidcClientConfig = await this.client.getAuthMetadata();
+          authMetadata = await this.client.getAuthMetadata();
         } catch (e) {
-          logger.error("Failed to discover OIDC metadata", e);
+          logger.error("Failed to discover OAuth2 metadata", e);
         }
-        if (oidcClientConfig?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {
+        if (authMetadata?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {
           await this.send({
             type: PayloadType.Protocols,
             protocols: ["device_authorization_grant"],
@@ -174,9 +174,9 @@ export class MSC4108SignInWithQR {
   }
 
   /**
-   * The second & third step in the OIDC QR login process.
+   * The second & third step in the OAuth2 QR login process.
    * To be called after `negotiateProtocols` for the existing device.
-   * To be called after OIDC negotiation for the new device.
+   * To be called after OAuth2 negotiation for the new device.
    *
    * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login
    */
@@ -268,7 +268,7 @@ export class MSC4108SignInWithQR {
   }
 
   /**
-   * The fourth step in the OIDC QR login process.
+   * The fourth step in the OAuth2 QR login process.
    * The reciprocating device must perform step 5 for this method to resolve.
    * To be called after {@link deviceAuthorizationGrant} only on the new device.
    */
@@ -318,7 +318,7 @@ export class MSC4108SignInWithQR {
   }
 
   /**
-   * The fifth (and final) step in the OIDC QR login process.
+   * The fifth (and final) step in the OAuth2 QR login process.
    * To be called after the new device has completed authentication.
    */
   async shareSecrets() {

package/lib/rendezvous/MSC4108SignInWithQR.js.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SignInWithQR.js","names":[],"sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"sourcesContent":["/*\nCopyright 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { QrCodeIntent } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    ClientRendezvousFailureReason,\n    MSC4108FailureReason,\n    RendezvousError,\n    type RendezvousFailureListener,\n} from \"./index.ts\";\nimport { type MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { MatrixError } from \"../http-api/index.ts\";\nimport { sleep } from \"../utils.ts\";\nimport {\n    type DeviceAccessTokenResponse,\n    type DeviceAuthorizationResponse,\n    generateScope,\n    OAuthGrantType,\n    startDeviceAuthorization,\n    type ValidatedAuthMetadata,\n    waitForDeviceAuthorization,\n    type OidcClientConfig,\n} from \"../oidc/index.ts\";\nimport { type CryptoApi } from \"../crypto-api/index.ts\";\n\n/**\n * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * secure channels.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport enum PayloadType {\n    Protocols = \"m.login.protocols\",\n    Protocol = \"m.login.protocol\",\n    Failure = \"m.login.failure\",\n    Success = \"m.login.success\",\n    Secrets = \"m.login.secrets\",\n    ProtocolAccepted = \"m.login.protocol_accepted\",\n    Declined = \"m.login.declined\",\n}\n\n/**\n * Type representing the base payload format for [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * messages sent over the secure channel.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport interface MSC4108Payload {\n    type: PayloadType;\n}\n\ninterface ProtocolsPayload extends MSC4108Payload {\n    type: PayloadType.Protocols;\n    protocols: string[];\n    homeserver: string;\n}\n\ninterface ProtocolPayload extends MSC4108Payload {\n    type: PayloadType.Protocol;\n    protocol: Exclude<string, \"device_authorization_grant\">;\n    device_id: string;\n}\n\ninterface DeviceAuthorizationGrantProtocolPayload extends ProtocolPayload {\n    protocol: \"device_authorization_grant\";\n    device_authorization_grant: {\n        verification_uri: string;\n        verification_uri_complete?: string;\n    };\n}\n\nfunction isDeviceAuthorizationGrantProtocolPayload(\n    payload: ProtocolPayload,\n): payload is DeviceAuthorizationGrantProtocolPayload {\n    return payload.protocol === \"device_authorization_grant\";\n}\n\ninterface FailurePayload extends MSC4108Payload {\n    type: PayloadType.Failure;\n    reason: MSC4108FailureReason;\n    homeserver?: string;\n}\n\ninterface DeclinedPayload extends MSC4108Payload {\n    type: PayloadType.Declined;\n}\n\ninterface SuccessPayload extends MSC4108Payload {\n    type: PayloadType.Success;\n}\n\ninterface AcceptedPayload extends MSC4108Payload {\n    type: PayloadType.ProtocolAccepted;\n}\n\ninterface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>>> {\n    type: PayloadType.Secrets;\n}\n\n/**\n * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * sign in with QR + OIDC flow.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport class MSC4108SignInWithQR {\n    private readonly ourIntent: QrCodeIntent;\n    private _code?: Uint8Array;\n    private expectingNewDeviceId?: string;\n    private metadata?: ValidatedAuthMetadata;\n    private grantInProgress?: DeviceAuthorizationResponse;\n\n    /**\n     * Returns the check code for the secure channel or undefined if not generated yet.\n     */\n    public get checkCode(): string | undefined {\n        return this.channel?.getCheckCode();\n    }\n\n    /**\n     * @param channel - The secure channel used for communication\n     * @param client - The Matrix client in used on the device already logged in\n     * @param didScanCode - Whether this side of the channel scanned the QR code from the other party\n     * @param onFailure - Callback for when the rendezvous fails\n     */\n    public constructor(\n        private readonly channel: MSC4108SecureChannel,\n        private readonly didScanCode: boolean,\n        private readonly client?: MatrixClient,\n        public onFailure?: RendezvousFailureListener,\n    ) {\n        this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;\n    }\n\n    /**\n     * Returns the code representing the rendezvous suitable for rendering in a QR code or undefined if not generated yet.\n     */\n    public get code(): Uint8Array | undefined {\n        return this._code;\n    }\n\n    /**\n     * Generate the code including doing partial set up of the channel where required.\n     */\n    public async generateCode(): Promise<void> {\n        if (this._code) {\n            return;\n        }\n\n        if (this.ourIntent === QrCodeIntent.Reciprocate && this.client) {\n            this._code = await this.channel.generateCode(this.ourIntent, this.client.getDomain()!);\n        } else if (this.ourIntent === QrCodeIntent.Login) {\n            this._code = await this.channel.generateCode(this.ourIntent);\n        }\n    }\n\n    /**\n     * Returns true if the device is the already logged in device reciprocating a new login on the other side of the channel.\n     */\n    public get isExistingDevice(): boolean {\n        return this.ourIntent === QrCodeIntent.Reciprocate;\n    }\n\n    /**\n     * Returns true if the device is the new device logging in being reciprocated by the device on the other side of the channel.\n     */\n    public get isNewDevice(): boolean {\n        return !this.isExistingDevice;\n    }\n\n    /**\n     * The first step in the OIDC QR login process.\n     * To be called after the QR code has been rendered or scanned.\n     * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.\n     * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.\n     */\n    public async negotiateProtocols(): Promise<{ serverName?: string }> {\n        logger.info(`negotiateProtocols(isNewDevice=${this.isNewDevice} didScanCode=${this.didScanCode})`);\n        await this.channel.connect();\n\n        if (this.didScanCode) {\n            // Secure Channel step 6 completed, we trust the channel\n\n            if (this.isNewDevice) {\n                // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set\n            } else {\n                // MSC4108-Flow: NewScanned -send protocols message\n                let oidcClientConfig: OidcClientConfig | undefined;\n                try {\n                    oidcClientConfig = await this.client!.getAuthMetadata();\n                } catch (e) {\n                    logger.error(\"Failed to discover OIDC metadata\", e);\n                }\n\n                if (oidcClientConfig?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n                    await this.send<ProtocolsPayload>({\n                        type: PayloadType.Protocols,\n                        protocols: [\"device_authorization_grant\"],\n                        homeserver: this.client!.getDomain()!,\n                    });\n                } else {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.UnsupportedProtocol,\n                    });\n                    throw new RendezvousError(\n                        \"Device code grant unsupported\",\n                        MSC4108FailureReason.UnsupportedProtocol,\n                    );\n                }\n            }\n        } else if (this.isNewDevice) {\n            // MSC4108-Flow: ExistingScanned - wait for protocols message\n            logger.info(\"Waiting for protocols message\");\n            const payload = await this.receive<ProtocolsPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocols) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            return { serverName: payload.homeserver };\n        } else {\n            // MSC4108-Flow: NewScanned - nothing to do\n        }\n        return {};\n    }\n\n    /**\n     * The second & third step in the OIDC QR login process.\n     * To be called after `negotiateProtocols` for the existing device.\n     * To be called after OIDC negotiation for the new device.\n     *\n     * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login\n     */\n    public async deviceAuthorizationGrant(input?: {\n        metadata: ValidatedAuthMetadata;\n        clientId: string;\n        deviceId: string;\n    }): Promise<{\n        verificationUri?: string;\n        userCode?: string;\n    }> {\n        if (this.isNewDevice) {\n            if (!input) {\n                throw new Error(\"Input must be provided for new device\");\n            }\n\n            const { metadata, clientId, deviceId } = input;\n\n            const scope = generateScope(deviceId);\n\n            // MSC4108-Flow: NewDevice - start device authorization grant\n            const dagResponse = await startDeviceAuthorization({\n                clientId,\n                scope,\n                metadata,\n            });\n\n            this.metadata = metadata;\n            this.grantInProgress = dagResponse;\n\n            const protocol: DeviceAuthorizationGrantProtocolPayload = {\n                type: PayloadType.Protocol,\n                protocol: \"device_authorization_grant\",\n                device_id: deviceId,\n                device_authorization_grant: {\n                    verification_uri: dagResponse.verification_uri,\n                    verification_uri_complete: dagResponse.verification_uri_complete,\n                },\n            };\n\n            await this.send(protocol);\n\n            return {\n                verificationUri: dagResponse.verification_uri_complete ?? dagResponse.verification_uri,\n                userCode: dagResponse.user_code,\n            };\n        } else {\n            // The user needs to do step 7 for the out-of-band confirmation\n            // but, first we receive the protocol chosen by the other device so that\n            // the confirmation_uri is ready to go\n            logger.info(\"Waiting for protocol message\");\n            const payload = await this.receive<ProtocolPayload | DeviceAuthorizationGrantProtocolPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocol) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            if (isDeviceAuthorizationGrantProtocolPayload(payload)) {\n                const { device_authorization_grant: dag, device_id: expectingNewDeviceId } = payload;\n                const { verification_uri: verificationUri, verification_uri_complete: verificationUriComplete } = dag;\n\n                let deviceAlreadyExists = true;\n                try {\n                    await this.client?.getDevice(expectingNewDeviceId);\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        deviceAlreadyExists = false;\n                    }\n                }\n\n                if (deviceAlreadyExists) {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.DeviceAlreadyExists,\n                    });\n                    throw new RendezvousError(\n                        \"Specified device ID already exists\",\n                        MSC4108FailureReason.DeviceAlreadyExists,\n                    );\n                }\n\n                this.expectingNewDeviceId = expectingNewDeviceId;\n\n                return { verificationUri: verificationUriComplete ?? verificationUri };\n            }\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.UnsupportedProtocol,\n            });\n            throw new RendezvousError(\n                \"Received a request for an unsupported protocol\",\n                MSC4108FailureReason.UnsupportedProtocol,\n            );\n        }\n    }\n\n    /**\n     * The fourth step in the OIDC QR login process.\n     * The reciprocating device must perform step 5 for this method to resolve.\n     * To be called after {@link deviceAuthorizationGrant} only on the new device.\n     */\n    public async completeLoginOnNewDevice({\n        clientId,\n    }: {\n        clientId: string;\n    }): Promise<DeviceAccessTokenResponse | undefined> {\n        if (!this.isNewDevice || !this.grantInProgress || !this.metadata) {\n            throw new Error(\"Can only complete login on new device\");\n        }\n\n        logger.info(\"Waiting for protocol accepted message\");\n        // wait for accepted message\n        const payload = await this.receive<AcceptedPayload | FailurePayload>();\n\n        if (!payload) {\n            throw new RendezvousError(\n                \"No response from existing device\",\n                MSC4108FailureReason.UnexpectedMessageReceived,\n            );\n        }\n        if (payload.type === PayloadType.Failure) {\n            throw new RendezvousError(\"Failed\", (payload as FailurePayload).reason);\n        }\n        if (payload.type !== PayloadType.ProtocolAccepted) {\n            throw new RendezvousError(\"Unexpected message received\", MSC4108FailureReason.UnexpectedMessageReceived);\n        }\n\n        // poll for DAG\n        const res = await waitForDeviceAuthorization({\n            session: this.grantInProgress,\n            metadata: this.metadata,\n            clientId,\n        });\n\n        if (!res) {\n            throw new RendezvousError(\n                \"No response from device authorization endpoint\",\n                ClientRendezvousFailureReason.Unknown,\n            );\n        }\n\n        if (\"error\" in res) {\n            let reason: MSC4108FailureReason = MSC4108FailureReason.UnexpectedMessageReceived;\n            if (res.error === \"expired_token\") {\n                reason = MSC4108FailureReason.AuthorizationExpired;\n            } else if (res.error === \"access_denied\") {\n                reason = MSC4108FailureReason.UserCancelled;\n            }\n            const payload: FailurePayload = {\n                type: PayloadType.Failure,\n                reason,\n            };\n            await this.send(payload);\n\n            throw new RendezvousError(\"Rejection from device authorization endpoint\", reason);\n        }\n\n        return res;\n    }\n\n    /**\n     * The fifth (and final) step in the OIDC QR login process.\n     * To be called after the new device has completed authentication.\n     */\n    public async shareSecrets(): Promise<{ secrets?: Omit<SecretsPayload, \"type\"> }> {\n        if (this.isNewDevice) {\n            await this.send<SuccessPayload>({\n                type: PayloadType.Success,\n            });\n            // then wait for secrets\n            logger.info(\"Waiting for secrets message\");\n            const payload = await this.receive<SecretsPayload>();\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Secrets) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n            return { secrets: payload };\n            // then done?\n        } else {\n            if (!this.expectingNewDeviceId) {\n                throw new Error(\"No new device ID expected\");\n            }\n            await this.send<AcceptedPayload>({\n                type: PayloadType.ProtocolAccepted,\n            });\n\n            logger.info(\"Waiting for outcome message\");\n            const payload = await this.receive<SuccessPayload | DeclinedPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type === PayloadType.Declined) {\n                throw new RendezvousError(\"User declined\", ClientRendezvousFailureReason.UserDeclined);\n            }\n\n            if (payload?.type !== PayloadType.Success) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\"Unexpected message\", MSC4108FailureReason.UnexpectedMessageReceived);\n            }\n\n            const timeout = Date.now() + 10000; // wait up to 10 seconds\n            do {\n                // is the device visible via the Homeserver?\n                try {\n                    const device = await this.client?.getDevice(this.expectingNewDeviceId);\n\n                    if (device) {\n                        // if so, return the secrets\n                        const secretsBundle = await this.client!.getCrypto()!.exportSecretsBundle!();\n                        if (this.channel.cancelled) {\n                            throw new RendezvousError(\"User cancelled\", MSC4108FailureReason.UserCancelled);\n                        }\n                        // send secrets\n                        await this.send<SecretsPayload>({\n                            type: PayloadType.Secrets,\n                            ...secretsBundle,\n                        });\n                        return { secrets: secretsBundle };\n                        // let the other side close the rendezvous session\n                    }\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        // not found, so keep waiting until timeout\n                    } else {\n                        throw err;\n                    }\n                }\n                await sleep(1000);\n            } while (Date.now() < timeout);\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.DeviceNotFound,\n            });\n            throw new RendezvousError(\"New device not found\", MSC4108FailureReason.DeviceNotFound);\n        }\n    }\n\n    private async receive<T extends MSC4108Payload>(): Promise<T | FailurePayload | undefined> {\n        return (await this.channel.secureReceive()) as T | undefined;\n    }\n\n    private async send<T extends MSC4108Payload>(payload: T): Promise<void> {\n        await this.channel.secureSend(payload);\n    }\n\n    /**\n     * Decline the login on the existing device.\n     */\n    public async declineLoginOnExistingDevice(): Promise<void> {\n        if (!this.isExistingDevice) {\n            throw new Error(\"Can only decline login on existing device\");\n        }\n        await this.send<FailurePayload>({\n            type: PayloadType.Failure,\n            reason: MSC4108FailureReason.UserCancelled,\n        });\n    }\n\n    /**\n     * Cancels the rendezvous session.\n     * @param reason the reason for the cancellation\n     */\n    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {\n        this.onFailure?.(reason);\n        await this.channel.cancel(reason);\n    }\n\n    /**\n     * Closes the rendezvous session.\n     */\n    public async close(): Promise<void> {\n        await this.channel.close();\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAAS,YAAY,QAAQ,oCAAoC;AAEjE,SACI,6BAA6B,EAC7B,oBAAoB,EACpB,eAAe,QAEZ,YAAY;AAEnB,SAAS,MAAM,QAAQ,cAAc;AAErC,SAAS,WAAW,QAAQ,sBAAsB;AAClD,SAAS,KAAK,QAAQ,aAAa;AACnC,SAGI,aAAa,EACb,cAAc,EACd,wBAAwB,EAExB,0BAA0B,QAEvB,kBAAkB;AAGzB;AACA;AACA;AACA;AACA;AACA,WAAY,WAAW,0BAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAA,OAAX,WAAW;AAAA;;AAUvB;AACA;AACA;AACA;AACA;;AAyBA,SAAS,yCAAyC,CAC9C,OAAwB,EAC0B;EAClD,OAAO,OAAO,CAAC,QAAQ,KAAK,4BAA4B;AAC5D;AAwBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAM,mBAAmB,CAAC;EAO7B;AACJ;AACA;EACI,IAAW,SAAS,GAAuB;IACvC,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;EACvC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW,WAAW,CACG,OAA6B,EAC7B,WAAoB,EACpB,MAAqB,EAC/B,SAAqC,EAC9C;IAAA;IAAA;IAAA;IAAA;IAAA;IAAA,KAJmB,OAA6B,GAA7B,OAA6B;IAAA,KAC7B,WAAoB,GAApB,WAAoB;IAAA,KACpB,MAAqB,GAArB,MAAqB;IAAA,KAC/B,SAAqC,GAArC,SAAqC;IAE5C,IAAI,CAAC,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK;EAC3E;;EAEA;AACJ;AACA;EACI,IAAW,IAAI,GAA2B;IACtC,OAAO,IAAI,CAAC,KAAK;EACrB;;EAEA;AACJ;AACA;EACI,MAAa,YAAY,GAAkB;IACvC,IAAI,IAAI,CAAC,KAAK,EAAE;MACZ;IACJ;IAEA,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;MAC5D,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAE,CAAC;IAC1F,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,KAAK,EAAE;MAC9C,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IAChE;EACJ;;EAEA;AACJ;AACA;EACI,IAAW,gBAAgB,GAAY;IACnC,OAAO,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,WAAW;EACtD;;EAEA;AACJ;AACA;EACI,IAAW,WAAW,GAAY;IAC9B,OAAO,CAAC,IAAI,CAAC,gBAAgB;EACjC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACI,MAAa,kBAAkB,GAAqC;IAChE,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,WAAW,gBAAgB,IAAI,CAAC,WAAW,GAAG,CAAC;IAClG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5B,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB;;MAEA,IAAI,IAAI,CAAC,WAAW,EAAE;QAClB;MAAA,CACH,MAAM;QACH;QACA,IAAI,gBAA8C;QAClD,IAAI;UACA,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAE,eAAe,CAAC,CAAC;QAC3D,CAAC,CAAC,OAAO,CAAC,EAAE;UACR,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAC;QACvD;QAEA,IAAI,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE;UACtF,MAAM,IAAI,CAAC,IAAI,CAAmB;YAC9B,IAAI,EAAE,WAAW,CAAC,SAAS;YAC3B,SAAS,EAAE,CAAC,4BAA4B,CAAC;YACzC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAE,SAAS,CAAC;UACvC,CAAC,CAAC;QACN,CAAC,MAAM;UACH,MAAM,IAAI,CAAC,IAAI,CAAiB;YAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,MAAM,EAAE,oBAAoB,CAAC;UACjC,CAAC,CAAC;UACF,MAAM,IAAI,eAAe,CACrB,+BAA+B,EAC/B,oBAAoB,CAAC,mBACzB,CAAC;QACL;MACJ;IACJ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE;MACzB;MACA,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC;MAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,CAAC;MAEtD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,SAAS,EAAE;QACzC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MAEA,OAAO;QAAE,UAAU,EAAE,OAAO,CAAC;MAAW,CAAC;IAC7C,CAAC,MAAM;MACH;IAAA;IAEJ,OAAO,CAAC,CAAC;EACb;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,wBAAwB,CAAC,KAIrC,EAGE;IACC,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB,IAAI,CAAC,KAAK,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;MAC5D;MAEA,MAAM;QAAE,QAAQ;QAAE,QAAQ;QAAE;MAAS,CAAC,GAAG,KAAK;MAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC;;MAErC;MACA,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;QAC/C,QAAQ;QACR,KAAK;QACL;MACJ,CAAC,CAAC;MAEF,IAAI,CAAC,QAAQ,GAAG,QAAQ;MACxB,IAAI,CAAC,eAAe,GAAG,WAAW;MAElC,MAAM,QAAiD,GAAG;QACtD,IAAI,EAAE,WAAW,CAAC,QAAQ;QAC1B,QAAQ,EAAE,4BAA4B;QACtC,SAAS,EAAE,QAAQ;QACnB,0BAA0B,EAAE;UACxB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;UAC9C,yBAAyB,EAAE,WAAW,CAAC;QAC3C;MACJ,CAAC;MAED,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;MAEzB,OAAO;QACH,eAAe,EAAE,WAAW,CAAC,yBAAyB,IAAI,WAAW,CAAC,gBAAgB;QACtF,QAAQ,EAAE,WAAW,CAAC;MAC1B,CAAC;IACL,CAAC,MAAM;MACH;MACA;MACA;MACA,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC;MAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA4D,CAAC;MAE/F,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE;QACxC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MAEA,IAAI,yCAAyC,CAAC,OAAO,CAAC,EAAE;QACpD,MAAM;UAAE,0BAA0B,EAAE,GAAG;UAAE,SAAS,EAAE;QAAqB,CAAC,GAAG,OAAO;QACpF,MAAM;UAAE,gBAAgB,EAAE,eAAe;UAAE,yBAAyB,EAAE;QAAwB,CAAC,GAAG,GAAG;QAErG,IAAI,mBAAmB,GAAG,IAAI;QAC9B,IAAI;UACA,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,oBAAoB,CAAC;QACtD,CAAC,CAAC,OAAO,GAA0B,EAAE;UACjC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;YACtD,mBAAmB,GAAG,KAAK;UAC/B;QACJ;QAEA,IAAI,mBAAmB,EAAE;UACrB,MAAM,IAAI,CAAC,IAAI,CAAiB;YAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,MAAM,EAAE,oBAAoB,CAAC;UACjC,CAAC,CAAC;UACF,MAAM,IAAI,eAAe,CACrB,oCAAoC,EACpC,oBAAoB,CAAC,mBACzB,CAAC;QACL;QAEA,IAAI,CAAC,oBAAoB,GAAG,oBAAoB;QAEhD,OAAO;UAAE,eAAe,EAAE,uBAAuB,IAAI;QAAgB,CAAC;MAC1E;MAEA,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,MAAM,EAAE,oBAAoB,CAAC;MACjC,CAAC,CAAC;MACF,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,oBAAoB,CAAC,mBACzB,CAAC;IACL;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,wBAAwB,CAAC;IAClC;EAGJ,CAAC,EAAkD;IAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;MAC9D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;IAC5D;IAEA,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC;IACpD;IACA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmC,CAAC;IAEtE,IAAI,CAAC,OAAO,EAAE;MACV,MAAM,IAAI,eAAe,CACrB,kCAAkC,EAClC,oBAAoB,CAAC,yBACzB,CAAC;IACL;IACA,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;MACtC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAG,OAAO,CAAoB,MAAM,CAAC;IAC3E;IACA,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,gBAAgB,EAAE;MAC/C,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,oBAAoB,CAAC,yBAAyB,CAAC;IAC5G;;IAEA;IACA,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC;MACzC,OAAO,EAAE,IAAI,CAAC,eAAe;MAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;MACvB;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE;MACN,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,6BAA6B,CAAC,OAClC,CAAC;IACL;IAEA,IAAI,OAAO,IAAI,GAAG,EAAE;MAChB,IAAI,MAA4B,GAAG,oBAAoB,CAAC,yBAAyB;MACjF,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,EAAE;QAC/B,MAAM,GAAG,oBAAoB,CAAC,oBAAoB;MACtD,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,EAAE;QACtC,MAAM,GAAG,oBAAoB,CAAC,aAAa;MAC/C;MACA,MAAM,OAAuB,GAAG;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB;MACJ,CAAC;MACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;MAExB,MAAM,IAAI,eAAe,CAAC,8CAA8C,EAAE,MAAM,CAAC;IACrF;IAEA,OAAO,GAAG;EACd;;EAEA;AACJ;AACA;AACA;EACI,MAAa,YAAY,GAAwD;IAC7E,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC;MACtB,CAAC,CAAC;MACF;MACA,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;MAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,CAAC;MACpD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MACA,OAAO;QAAE,OAAO,EAAE;MAAQ,CAAC;MAC3B;IACJ,CAAC,MAAM;MACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;MAChD;MACA,MAAM,IAAI,CAAC,IAAI,CAAkB;QAC7B,IAAI,EAAE,WAAW,CAAC;MACtB,CAAC,CAAC;MAEF,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;MAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmC,CAAC;MAEtE,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE;QACxC,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,6BAA6B,CAAC,YAAY,CAAC;MAC1F;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,yBAAyB,CAAC;MACnG;MAEA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;MACpC,GAAG;QACC;QACA,IAAI;UACA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC;UAEtE,IAAI,MAAM,EAAE;YACR;YACA,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAE,SAAS,CAAC,CAAC,CAAE,mBAAmB,CAAE,CAAC;YAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;cACxB,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,aAAa,CAAC;YACnF;YACA;YACA,MAAM,IAAI,CAAC,IAAI;cACX,IAAI,EAAE,WAAW,CAAC;YAAO,GACtB,aAAa,CACnB,CAAC;YACF,OAAO;cAAE,OAAO,EAAE;YAAc,CAAC;YACjC;UACJ;QACJ,CAAC,CAAC,OAAO,GAA0B,EAAE;UACjC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;YACtD;UAAA,CACH,MAAM;YACH,MAAM,GAAG;UACb;QACJ;QACA,MAAM,KAAK,CAAC,IAAI,CAAC;MACrB,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO;MAE7B,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,MAAM,EAAE,oBAAoB,CAAC;MACjC,CAAC,CAAC;MACF,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,cAAc,CAAC;IAC1F;EACJ;EAEA,MAAc,OAAO,GAAsE;IACvF,OAAQ,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;EAC9C;EAEA,MAAc,IAAI,CAA2B,OAAU,EAAiB;IACpE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;EAC1C;;EAEA;AACJ;AACA;EACI,MAAa,4BAA4B,GAAkB;IACvD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;MACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;IAChE;IACA,MAAM,IAAI,CAAC,IAAI,CAAiB;MAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;MACzB,MAAM,EAAE,oBAAoB,CAAC;IACjC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACI,MAAa,MAAM,CAAC,MAA4D,EAAiB;IAC7F,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;EACrC;;EAEA;AACJ;AACA;EACI,MAAa,KAAK,GAAkB;IAChC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;EAC9B;AACJ","ignoreList":[]}
+{"version":3,"file":"MSC4108SignInWithQR.js","names":[],"sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"sourcesContent":["/*\nCopyright 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { QrCodeIntent } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    ClientRendezvousFailureReason,\n    MSC4108FailureReason,\n    RendezvousError,\n    type RendezvousFailureListener,\n} from \"./index.ts\";\nimport { type MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { MatrixError } from \"../http-api/index.ts\";\nimport { sleep } from \"../utils.ts\";\nimport {\n    type DeviceAccessTokenResponse,\n    type DeviceAuthorizationResponse,\n    generateScope,\n    OAuthGrantType,\n    startDeviceAuthorization,\n    type ValidatedAuthMetadata,\n    waitForDeviceAuthorization,\n} from \"../oauth/index.ts\";\nimport { type CryptoApi } from \"../crypto-api/index.ts\";\n\n/**\n * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * secure channels.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport enum PayloadType {\n    Protocols = \"m.login.protocols\",\n    Protocol = \"m.login.protocol\",\n    Failure = \"m.login.failure\",\n    Success = \"m.login.success\",\n    Secrets = \"m.login.secrets\",\n    ProtocolAccepted = \"m.login.protocol_accepted\",\n    Declined = \"m.login.declined\",\n}\n\n/**\n * Type representing the base payload format for [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * messages sent over the secure channel.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport interface MSC4108Payload {\n    type: PayloadType;\n}\n\ninterface ProtocolsPayload extends MSC4108Payload {\n    type: PayloadType.Protocols;\n    protocols: string[];\n    homeserver: string;\n}\n\ninterface ProtocolPayload extends MSC4108Payload {\n    type: PayloadType.Protocol;\n    protocol: Exclude<string, \"device_authorization_grant\">;\n    device_id: string;\n}\n\ninterface DeviceAuthorizationGrantProtocolPayload extends ProtocolPayload {\n    protocol: \"device_authorization_grant\";\n    device_authorization_grant: {\n        verification_uri: string;\n        verification_uri_complete?: string;\n    };\n}\n\nfunction isDeviceAuthorizationGrantProtocolPayload(\n    payload: ProtocolPayload,\n): payload is DeviceAuthorizationGrantProtocolPayload {\n    return payload.protocol === \"device_authorization_grant\";\n}\n\ninterface FailurePayload extends MSC4108Payload {\n    type: PayloadType.Failure;\n    reason: MSC4108FailureReason;\n    homeserver?: string;\n}\n\ninterface DeclinedPayload extends MSC4108Payload {\n    type: PayloadType.Declined;\n}\n\ninterface SuccessPayload extends MSC4108Payload {\n    type: PayloadType.Success;\n}\n\ninterface AcceptedPayload extends MSC4108Payload {\n    type: PayloadType.ProtocolAccepted;\n}\n\ninterface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>>> {\n    type: PayloadType.Secrets;\n}\n\n/**\n * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * sign in with QR + OAuth2 flow.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport class MSC4108SignInWithQR {\n    private readonly ourIntent: QrCodeIntent;\n    private _code?: Uint8Array;\n    private expectingNewDeviceId?: string;\n    private metadata?: ValidatedAuthMetadata;\n    private grantInProgress?: DeviceAuthorizationResponse;\n\n    /**\n     * Returns the check code for the secure channel or undefined if not generated yet.\n     */\n    public get checkCode(): string | undefined {\n        return this.channel?.getCheckCode();\n    }\n\n    /**\n     * @param channel - The secure channel used for communication\n     * @param client - The Matrix client in used on the device already logged in\n     * @param didScanCode - Whether this side of the channel scanned the QR code from the other party\n     * @param onFailure - Callback for when the rendezvous fails\n     */\n    public constructor(\n        private readonly channel: MSC4108SecureChannel,\n        private readonly didScanCode: boolean,\n        private readonly client?: MatrixClient,\n        public onFailure?: RendezvousFailureListener,\n    ) {\n        this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;\n    }\n\n    /**\n     * Returns the code representing the rendezvous suitable for rendering in a QR code or undefined if not generated yet.\n     */\n    public get code(): Uint8Array | undefined {\n        return this._code;\n    }\n\n    /**\n     * Generate the code including doing partial set up of the channel where required.\n     */\n    public async generateCode(): Promise<void> {\n        if (this._code) {\n            return;\n        }\n\n        if (this.ourIntent === QrCodeIntent.Reciprocate && this.client) {\n            this._code = await this.channel.generateCode(this.ourIntent, this.client.getDomain()!);\n        } else if (this.ourIntent === QrCodeIntent.Login) {\n            this._code = await this.channel.generateCode(this.ourIntent);\n        }\n    }\n\n    /**\n     * Returns true if the device is the already logged in device reciprocating a new login on the other side of the channel.\n     */\n    public get isExistingDevice(): boolean {\n        return this.ourIntent === QrCodeIntent.Reciprocate;\n    }\n\n    /**\n     * Returns true if the device is the new device logging in being reciprocated by the device on the other side of the channel.\n     */\n    public get isNewDevice(): boolean {\n        return !this.isExistingDevice;\n    }\n\n    /**\n     * The first step in the OAuth2 QR login process.\n     * To be called after the QR code has been rendered or scanned.\n     * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.\n     * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.\n     */\n    public async negotiateProtocols(): Promise<{ serverName?: string }> {\n        logger.info(`negotiateProtocols(isNewDevice=${this.isNewDevice} didScanCode=${this.didScanCode})`);\n        await this.channel.connect();\n\n        if (this.didScanCode) {\n            // Secure Channel step 6 completed, we trust the channel\n\n            if (this.isNewDevice) {\n                // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set\n            } else {\n                // MSC4108-Flow: NewScanned -send protocols message\n                let authMetadata: ValidatedAuthMetadata | undefined;\n                try {\n                    authMetadata = await this.client!.getAuthMetadata();\n                } catch (e) {\n                    logger.error(\"Failed to discover OAuth2 metadata\", e);\n                }\n\n                if (authMetadata?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n                    await this.send<ProtocolsPayload>({\n                        type: PayloadType.Protocols,\n                        protocols: [\"device_authorization_grant\"],\n                        homeserver: this.client!.getDomain()!,\n                    });\n                } else {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.UnsupportedProtocol,\n                    });\n                    throw new RendezvousError(\n                        \"Device code grant unsupported\",\n                        MSC4108FailureReason.UnsupportedProtocol,\n                    );\n                }\n            }\n        } else if (this.isNewDevice) {\n            // MSC4108-Flow: ExistingScanned - wait for protocols message\n            logger.info(\"Waiting for protocols message\");\n            const payload = await this.receive<ProtocolsPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocols) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            return { serverName: payload.homeserver };\n        } else {\n            // MSC4108-Flow: NewScanned - nothing to do\n        }\n        return {};\n    }\n\n    /**\n     * The second & third step in the OAuth2 QR login process.\n     * To be called after `negotiateProtocols` for the existing device.\n     * To be called after OAuth2 negotiation for the new device.\n     *\n     * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login\n     */\n    public async deviceAuthorizationGrant(input?: {\n        metadata: ValidatedAuthMetadata;\n        clientId: string;\n        deviceId: string;\n    }): Promise<{\n        verificationUri?: string;\n        userCode?: string;\n    }> {\n        if (this.isNewDevice) {\n            if (!input) {\n                throw new Error(\"Input must be provided for new device\");\n            }\n\n            const { metadata, clientId, deviceId } = input;\n\n            const scope = generateScope(deviceId);\n\n            // MSC4108-Flow: NewDevice - start device authorization grant\n            const dagResponse = await startDeviceAuthorization({\n                clientId,\n                scope,\n                metadata,\n            });\n\n            this.metadata = metadata;\n            this.grantInProgress = dagResponse;\n\n            const protocol: DeviceAuthorizationGrantProtocolPayload = {\n                type: PayloadType.Protocol,\n                protocol: \"device_authorization_grant\",\n                device_id: deviceId,\n                device_authorization_grant: {\n                    verification_uri: dagResponse.verification_uri,\n                    verification_uri_complete: dagResponse.verification_uri_complete,\n                },\n            };\n\n            await this.send(protocol);\n\n            return {\n                verificationUri: dagResponse.verification_uri_complete ?? dagResponse.verification_uri,\n                userCode: dagResponse.user_code,\n            };\n        } else {\n            // The user needs to do step 7 for the out-of-band confirmation\n            // but, first we receive the protocol chosen by the other device so that\n            // the confirmation_uri is ready to go\n            logger.info(\"Waiting for protocol message\");\n            const payload = await this.receive<ProtocolPayload | DeviceAuthorizationGrantProtocolPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocol) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            if (isDeviceAuthorizationGrantProtocolPayload(payload)) {\n                const { device_authorization_grant: dag, device_id: expectingNewDeviceId } = payload;\n                const { verification_uri: verificationUri, verification_uri_complete: verificationUriComplete } = dag;\n\n                let deviceAlreadyExists = true;\n                try {\n                    await this.client?.getDevice(expectingNewDeviceId);\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        deviceAlreadyExists = false;\n                    }\n                }\n\n                if (deviceAlreadyExists) {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.DeviceAlreadyExists,\n                    });\n                    throw new RendezvousError(\n                        \"Specified device ID already exists\",\n                        MSC4108FailureReason.DeviceAlreadyExists,\n                    );\n                }\n\n                this.expectingNewDeviceId = expectingNewDeviceId;\n\n                return { verificationUri: verificationUriComplete ?? verificationUri };\n            }\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.UnsupportedProtocol,\n            });\n            throw new RendezvousError(\n                \"Received a request for an unsupported protocol\",\n                MSC4108FailureReason.UnsupportedProtocol,\n            );\n        }\n    }\n\n    /**\n     * The fourth step in the OAuth2 QR login process.\n     * The reciprocating device must perform step 5 for this method to resolve.\n     * To be called after {@link deviceAuthorizationGrant} only on the new device.\n     */\n    public async completeLoginOnNewDevice({\n        clientId,\n    }: {\n        clientId: string;\n    }): Promise<DeviceAccessTokenResponse | undefined> {\n        if (!this.isNewDevice || !this.grantInProgress || !this.metadata) {\n            throw new Error(\"Can only complete login on new device\");\n        }\n\n        logger.info(\"Waiting for protocol accepted message\");\n        // wait for accepted message\n        const payload = await this.receive<AcceptedPayload | FailurePayload>();\n\n        if (!payload) {\n            throw new RendezvousError(\n                \"No response from existing device\",\n                MSC4108FailureReason.UnexpectedMessageReceived,\n            );\n        }\n        if (payload.type === PayloadType.Failure) {\n            throw new RendezvousError(\"Failed\", (payload as FailurePayload).reason);\n        }\n        if (payload.type !== PayloadType.ProtocolAccepted) {\n            throw new RendezvousError(\"Unexpected message received\", MSC4108FailureReason.UnexpectedMessageReceived);\n        }\n\n        // poll for DAG\n        const res = await waitForDeviceAuthorization({\n            session: this.grantInProgress,\n            metadata: this.metadata,\n            clientId,\n        });\n\n        if (!res) {\n            throw new RendezvousError(\n                \"No response from device authorization endpoint\",\n                ClientRendezvousFailureReason.Unknown,\n            );\n        }\n\n        if (\"error\" in res) {\n            let reason: MSC4108FailureReason = MSC4108FailureReason.UnexpectedMessageReceived;\n            if (res.error === \"expired_token\") {\n                reason = MSC4108FailureReason.AuthorizationExpired;\n            } else if (res.error === \"access_denied\") {\n                reason = MSC4108FailureReason.UserCancelled;\n            }\n            const payload: FailurePayload = {\n                type: PayloadType.Failure,\n                reason,\n            };\n            await this.send(payload);\n\n            throw new RendezvousError(\"Rejection from device authorization endpoint\", reason);\n        }\n\n        return res;\n    }\n\n    /**\n     * The fifth (and final) step in the OAuth2 QR login process.\n     * To be called after the new device has completed authentication.\n     */\n    public async shareSecrets(): Promise<{ secrets?: Omit<SecretsPayload, \"type\"> }> {\n        if (this.isNewDevice) {\n            await this.send<SuccessPayload>({\n                type: PayloadType.Success,\n            });\n            // then wait for secrets\n            logger.info(\"Waiting for secrets message\");\n            const payload = await this.receive<SecretsPayload>();\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Secrets) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n            return { secrets: payload };\n            // then done?\n        } else {\n            if (!this.expectingNewDeviceId) {\n                throw new Error(\"No new device ID expected\");\n            }\n            await this.send<AcceptedPayload>({\n                type: PayloadType.ProtocolAccepted,\n            });\n\n            logger.info(\"Waiting for outcome message\");\n            const payload = await this.receive<SuccessPayload | DeclinedPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type === PayloadType.Declined) {\n                throw new RendezvousError(\"User declined\", ClientRendezvousFailureReason.UserDeclined);\n            }\n\n            if (payload?.type !== PayloadType.Success) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\"Unexpected message\", MSC4108FailureReason.UnexpectedMessageReceived);\n            }\n\n            const timeout = Date.now() + 10000; // wait up to 10 seconds\n            do {\n                // is the device visible via the Homeserver?\n                try {\n                    const device = await this.client?.getDevice(this.expectingNewDeviceId);\n\n                    if (device) {\n                        // if so, return the secrets\n                        const secretsBundle = await this.client!.getCrypto()!.exportSecretsBundle!();\n                        if (this.channel.cancelled) {\n                            throw new RendezvousError(\"User cancelled\", MSC4108FailureReason.UserCancelled);\n                        }\n                        // send secrets\n                        await this.send<SecretsPayload>({\n                            type: PayloadType.Secrets,\n                            ...secretsBundle,\n                        });\n                        return { secrets: secretsBundle };\n                        // let the other side close the rendezvous session\n                    }\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        // not found, so keep waiting until timeout\n                    } else {\n                        throw err;\n                    }\n                }\n                await sleep(1000);\n            } while (Date.now() < timeout);\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.DeviceNotFound,\n            });\n            throw new RendezvousError(\"New device not found\", MSC4108FailureReason.DeviceNotFound);\n        }\n    }\n\n    private async receive<T extends MSC4108Payload>(): Promise<T | FailurePayload | undefined> {\n        return (await this.channel.secureReceive()) as T | undefined;\n    }\n\n    private async send<T extends MSC4108Payload>(payload: T): Promise<void> {\n        await this.channel.secureSend(payload);\n    }\n\n    /**\n     * Decline the login on the existing device.\n     */\n    public async declineLoginOnExistingDevice(): Promise<void> {\n        if (!this.isExistingDevice) {\n            throw new Error(\"Can only decline login on existing device\");\n        }\n        await this.send<FailurePayload>({\n            type: PayloadType.Failure,\n            reason: MSC4108FailureReason.UserCancelled,\n        });\n    }\n\n    /**\n     * Cancels the rendezvous session.\n     * @param reason the reason for the cancellation\n     */\n    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {\n        this.onFailure?.(reason);\n        await this.channel.cancel(reason);\n    }\n\n    /**\n     * Closes the rendezvous session.\n     */\n    public async close(): Promise<void> {\n        await this.channel.close();\n    }\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAAS,YAAY,QAAQ,oCAAoC;AAEjE,SACI,6BAA6B,EAC7B,oBAAoB,EACpB,eAAe,QAEZ,YAAY;AAEnB,SAAS,MAAM,QAAQ,cAAc;AAErC,SAAS,WAAW,QAAQ,sBAAsB;AAClD,SAAS,KAAK,QAAQ,aAAa;AACnC,SAGI,aAAa,EACb,cAAc,EACd,wBAAwB,EAExB,0BAA0B,QACvB,mBAAmB;AAG1B;AACA;AACA;AACA;AACA;AACA,WAAY,WAAW,0BAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAX,WAAW;EAAA,OAAX,WAAW;AAAA;;AAUvB;AACA;AACA;AACA;AACA;;AAyBA,SAAS,yCAAyC,CAC9C,OAAwB,EAC0B;EAClD,OAAO,OAAO,CAAC,QAAQ,KAAK,4BAA4B;AAC5D;AAwBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAM,mBAAmB,CAAC;EAO7B;AACJ;AACA;EACI,IAAW,SAAS,GAAuB;IACvC,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;EACvC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACW,WAAW,CACG,OAA6B,EAC7B,WAAoB,EACpB,MAAqB,EAC/B,SAAqC,EAC9C;IAAA;IAAA;IAAA;IAAA;IAAA;IAAA,KAJmB,OAA6B,GAA7B,OAA6B;IAAA,KAC7B,WAAoB,GAApB,WAAoB;IAAA,KACpB,MAAqB,GAArB,MAAqB;IAAA,KAC/B,SAAqC,GAArC,SAAqC;IAE5C,IAAI,CAAC,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK;EAC3E;;EAEA;AACJ;AACA;EACI,IAAW,IAAI,GAA2B;IACtC,OAAO,IAAI,CAAC,KAAK;EACrB;;EAEA;AACJ;AACA;EACI,MAAa,YAAY,GAAkB;IACvC,IAAI,IAAI,CAAC,KAAK,EAAE;MACZ;IACJ;IAEA,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;MAC5D,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAE,CAAC;IAC1F,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,KAAK,EAAE;MAC9C,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IAChE;EACJ;;EAEA;AACJ;AACA;EACI,IAAW,gBAAgB,GAAY;IACnC,OAAO,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,WAAW;EACtD;;EAEA;AACJ;AACA;EACI,IAAW,WAAW,GAAY;IAC9B,OAAO,CAAC,IAAI,CAAC,gBAAgB;EACjC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACI,MAAa,kBAAkB,GAAqC;IAChE,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,WAAW,gBAAgB,IAAI,CAAC,WAAW,GAAG,CAAC;IAClG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5B,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB;;MAEA,IAAI,IAAI,CAAC,WAAW,EAAE;QAClB;MAAA,CACH,MAAM;QACH;QACA,IAAI,YAA+C;QACnD,IAAI;UACA,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAE,eAAe,CAAC,CAAC;QACvD,CAAC,CAAC,OAAO,CAAC,EAAE;UACR,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,CAAC;QACzD;QAEA,IAAI,YAAY,EAAE,qBAAqB,CAAC,QAAQ,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE;UAClF,MAAM,IAAI,CAAC,IAAI,CAAmB;YAC9B,IAAI,EAAE,WAAW,CAAC,SAAS;YAC3B,SAAS,EAAE,CAAC,4BAA4B,CAAC;YACzC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAE,SAAS,CAAC;UACvC,CAAC,CAAC;QACN,CAAC,MAAM;UACH,MAAM,IAAI,CAAC,IAAI,CAAiB;YAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,MAAM,EAAE,oBAAoB,CAAC;UACjC,CAAC,CAAC;UACF,MAAM,IAAI,eAAe,CACrB,+BAA+B,EAC/B,oBAAoB,CAAC,mBACzB,CAAC;QACL;MACJ;IACJ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE;MACzB;MACA,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC;MAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,CAAC;MAEtD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,SAAS,EAAE;QACzC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MAEA,OAAO;QAAE,UAAU,EAAE,OAAO,CAAC;MAAW,CAAC;IAC7C,CAAC,MAAM;MACH;IAAA;IAEJ,OAAO,CAAC,CAAC;EACb;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACI,MAAa,wBAAwB,CAAC,KAIrC,EAGE;IACC,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB,IAAI,CAAC,KAAK,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;MAC5D;MAEA,MAAM;QAAE,QAAQ;QAAE,QAAQ;QAAE;MAAS,CAAC,GAAG,KAAK;MAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC;;MAErC;MACA,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;QAC/C,QAAQ;QACR,KAAK;QACL;MACJ,CAAC,CAAC;MAEF,IAAI,CAAC,QAAQ,GAAG,QAAQ;MACxB,IAAI,CAAC,eAAe,GAAG,WAAW;MAElC,MAAM,QAAiD,GAAG;QACtD,IAAI,EAAE,WAAW,CAAC,QAAQ;QAC1B,QAAQ,EAAE,4BAA4B;QACtC,SAAS,EAAE,QAAQ;QACnB,0BAA0B,EAAE;UACxB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;UAC9C,yBAAyB,EAAE,WAAW,CAAC;QAC3C;MACJ,CAAC;MAED,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;MAEzB,OAAO;QACH,eAAe,EAAE,WAAW,CAAC,yBAAyB,IAAI,WAAW,CAAC,gBAAgB;QACtF,QAAQ,EAAE,WAAW,CAAC;MAC1B,CAAC;IACL,CAAC,MAAM;MACH;MACA;MACA;MACA,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC;MAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA4D,CAAC;MAE/F,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE;QACxC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MAEA,IAAI,yCAAyC,CAAC,OAAO,CAAC,EAAE;QACpD,MAAM;UAAE,0BAA0B,EAAE,GAAG;UAAE,SAAS,EAAE;QAAqB,CAAC,GAAG,OAAO;QACpF,MAAM;UAAE,gBAAgB,EAAE,eAAe;UAAE,yBAAyB,EAAE;QAAwB,CAAC,GAAG,GAAG;QAErG,IAAI,mBAAmB,GAAG,IAAI;QAC9B,IAAI;UACA,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,oBAAoB,CAAC;QACtD,CAAC,CAAC,OAAO,GAA0B,EAAE;UACjC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;YACtD,mBAAmB,GAAG,KAAK;UAC/B;QACJ;QAEA,IAAI,mBAAmB,EAAE;UACrB,MAAM,IAAI,CAAC,IAAI,CAAiB;YAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,MAAM,EAAE,oBAAoB,CAAC;UACjC,CAAC,CAAC;UACF,MAAM,IAAI,eAAe,CACrB,oCAAoC,EACpC,oBAAoB,CAAC,mBACzB,CAAC;QACL;QAEA,IAAI,CAAC,oBAAoB,GAAG,oBAAoB;QAEhD,OAAO;UAAE,eAAe,EAAE,uBAAuB,IAAI;QAAgB,CAAC;MAC1E;MAEA,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,MAAM,EAAE,oBAAoB,CAAC;MACjC,CAAC,CAAC;MACF,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,oBAAoB,CAAC,mBACzB,CAAC;IACL;EACJ;;EAEA;AACJ;AACA;AACA;AACA;EACI,MAAa,wBAAwB,CAAC;IAClC;EAGJ,CAAC,EAAkD;IAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;MAC9D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;IAC5D;IAEA,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC;IACpD;IACA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmC,CAAC;IAEtE,IAAI,CAAC,OAAO,EAAE;MACV,MAAM,IAAI,eAAe,CACrB,kCAAkC,EAClC,oBAAoB,CAAC,yBACzB,CAAC;IACL;IACA,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;MACtC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAG,OAAO,CAAoB,MAAM,CAAC;IAC3E;IACA,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,gBAAgB,EAAE;MAC/C,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,oBAAoB,CAAC,yBAAyB,CAAC;IAC5G;;IAEA;IACA,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC;MACzC,OAAO,EAAE,IAAI,CAAC,eAAe;MAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;MACvB;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE;MACN,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,6BAA6B,CAAC,OAClC,CAAC;IACL;IAEA,IAAI,OAAO,IAAI,GAAG,EAAE;MAChB,IAAI,MAA4B,GAAG,oBAAoB,CAAC,yBAAyB;MACjF,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,EAAE;QAC/B,MAAM,GAAG,oBAAoB,CAAC,oBAAoB;MACtD,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,EAAE;QACtC,MAAM,GAAG,oBAAoB,CAAC,aAAa;MAC/C;MACA,MAAM,OAAuB,GAAG;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB;MACJ,CAAC;MACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;MAExB,MAAM,IAAI,eAAe,CAAC,8CAA8C,EAAE,MAAM,CAAC;IACrF;IAEA,OAAO,GAAG;EACd;;EAEA;AACJ;AACA;AACA;EACI,MAAa,YAAY,GAAwD;IAC7E,IAAI,IAAI,CAAC,WAAW,EAAE;MAClB,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC;MACtB,CAAC,CAAC;MACF;MACA,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;MAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,CAAC;MACpD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CACrB,6BAA6B,EAC7B,oBAAoB,CAAC,yBACzB,CAAC;MACL;MACA,OAAO;QAAE,OAAO,EAAE;MAAQ,CAAC;MAC3B;IACJ,CAAC,MAAM;MACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;MAChD;MACA,MAAM,IAAI,CAAC,IAAI,CAAkB;QAC7B,IAAI,EAAE,WAAW,CAAC;MACtB,CAAC,CAAC;MAEF,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;MAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmC,CAAC;MAEtE,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;MACvD;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE;QACxC,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,6BAA6B,CAAC,YAAY,CAAC;MAC1F;MAEA,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE;QACvC,MAAM,IAAI,CAAC,IAAI,CAAiB;UAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;UACzB,MAAM,EAAE,oBAAoB,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,yBAAyB,CAAC;MACnG;MAEA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;MACpC,GAAG;QACC;QACA,IAAI;UACA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC;UAEtE,IAAI,MAAM,EAAE;YACR;YACA,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAE,SAAS,CAAC,CAAC,CAAE,mBAAmB,CAAE,CAAC;YAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;cACxB,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,aAAa,CAAC;YACnF;YACA;YACA,MAAM,IAAI,CAAC,IAAI;cACX,IAAI,EAAE,WAAW,CAAC;YAAO,GACtB,aAAa,CACnB,CAAC;YACF,OAAO;cAAE,OAAO,EAAE;YAAc,CAAC;YACjC;UACJ;QACJ,CAAC,CAAC,OAAO,GAA0B,EAAE;UACjC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;YACtD;UAAA,CACH,MAAM;YACH,MAAM,GAAG;UACb;QACJ;QACA,MAAM,KAAK,CAAC,IAAI,CAAC;MACrB,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO;MAE7B,MAAM,IAAI,CAAC,IAAI,CAAiB;QAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,MAAM,EAAE,oBAAoB,CAAC;MACjC,CAAC,CAAC;MACF,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,cAAc,CAAC;IAC1F;EACJ;EAEA,MAAc,OAAO,GAAsE;IACvF,OAAQ,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;EAC9C;EAEA,MAAc,IAAI,CAA2B,OAAU,EAAiB;IACpE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;EAC1C;;EAEA;AACJ;AACA;EACI,MAAa,4BAA4B,GAAkB;IACvD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;MACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;IAChE;IACA,MAAM,IAAI,CAAC,IAAI,CAAiB;MAC5B,IAAI,EAAE,WAAW,CAAC,OAAO;MACzB,MAAM,EAAE,oBAAoB,CAAC;IACjC,CAAC,CAAC;EACN;;EAEA;AACJ;AACA;AACA;EACI,MAAa,MAAM,CAAC,MAA4D,EAAiB;IAC7F,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;EACrC;;EAEA;AACJ;AACA;EACI,MAAa,KAAK,GAAkB;IAChC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;EAC9B;AACJ","ignoreList":[]}

package/lib/rendezvous/RendezvousError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RendezvousError.d.ts","sourceRoot":"","sources":["../../src/rendezvous/RendezvousError.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,qBAAa,eAAgB,SAAQ,KAAK;aAGlB,IAAI,EAAE,uBAAuB;gBAD7C,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,uBAAuB;CAIpD"}
+{"version":3,"file":"RendezvousError.d.ts","sourceRoot":"","sources":["../../src/rendezvous/RendezvousError.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,qBAAa,eAAgB,SAAQ,KAAK;aAGlB,IAAI,EAAE,uBAAuB;IAFjD,YACI,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,uBAAuB,EAGhD;CACJ"}

package/lib/rendezvous/channels/MSC4108SecureChannel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SecureChannel.d.ts","sourceRoot":"","sources":["../../../src/rendezvous/channels/MSC4108SecureChannel.ts"],"names":[],"mappings":"AAgBA,OAAO,EACH,KAAK,mBAAmB,EAIxB,YAAY,EACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,cAAc,EAEnB,KAAK,yBAAyB,EACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F;;;;;GAKG;AACH,qBAAa,oBAAoB;IAMzB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,cAAc,CAAC;IAChB,SAAS,CAAC,EAAE,yBAAyB;IAPhD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,SAAS,CAAS;gBAGd,iBAAiB,EAAE,wBAAwB,EAC3C,cAAc,CAAC,EAAE,mBAAmB,YAAA,EACrC,SAAS,CAAC,EAAE,yBAAyB,YAAA;IAKhD;;;;OAIG;IACU,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;IAC3D,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAelG;;OAEG;IACI,YAAY,IAAI,MAAM,GAAG,SAAS;IAWzC;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAyGvB,OAAO;YAQP,OAAO;IAQrB;;;OAGG;IACU,UAAU,CAAC,CAAC,SAAS,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5E;;OAEG;IACU,aAAa,CAAC,CAAC,SAAS,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IAgBvF;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAchG;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;CACJ"}
+{"version":3,"file":"MSC4108SecureChannel.d.ts","sourceRoot":"","sources":["../../../src/rendezvous/channels/MSC4108SecureChannel.ts"],"names":[],"mappings":"AAgBA,OAAO,EACH,KAAK,mBAAmB,EAIxB,YAAY,EACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,cAAc,EAEnB,KAAK,yBAAyB,EACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F;;;;;GAKG;AACH,qBAAa,oBAAoB;IAMzB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,cAAc,CAAC;IAChB,SAAS,CAAC,EAAE,yBAAyB;IAPhD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,SAAS,CAAS;IAE1B,YACY,iBAAiB,EAAE,wBAAwB,EAC3C,cAAc,CAAC,EAAE,mBAAmB,YAAA,EACrC,SAAS,CAAC,EAAE,yBAAyB,YAAA,EAG/C;IAED;;;;OAIG;IACU,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAenG;;OAEG;IACI,YAAY,IAAI,MAAM,GAAG,SAAS,CASxC;IAED;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAuGpC;YAEa,OAAO;YAQP,OAAO;IAQrB;;;OAGG;IACU,UAAU,CAAC,CAAC,SAAS,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3E;IAED;;OAEG;IACU,aAAa,CAAC,CAAC,SAAS,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CActF;IAED;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAElC;IAED;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAY/F;IAED;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;CACJ"}

package/lib/rendezvous/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rendezvous/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,YAAY,EAAyC,MAAM,cAAc,CAAC;AACxF,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,cAAc,0BAA0B,CAAC;AACzC,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,qBAAqB,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,mBAAmB,0BAA0B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AAEpC;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC7C,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,yBAAyB,EACpC,WAAW,EAAE,WAAW,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAG9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACtC,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,yBAAyB,EACpC,WAAW,EAAE,WAAW,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAM9B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rendezvous/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,YAAY,EAA8C,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,cAAc,0BAA0B,CAAC;AACzC,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,qBAAqB,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,mBAAmB,0BAA0B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AAEpC;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC7C,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,yBAAyB,EACpC,WAAW,EAAE,WAAW,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAG9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACtC,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,yBAAyB,EACpC,WAAW,EAAE,WAAW,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAM9B"}

package/lib/rendezvous/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/rendezvous/index.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type MatrixClient, OAuthGrantType, type OidcClientConfig } from \"../matrix.ts\";\nimport { MSC4108FailureReason, type RendezvousFailureListener } from \"./RendezvousFailureReason.ts\";\nimport { MSC4108SignInWithQR } from \"./MSC4108SignInWithQR.ts\";\nimport { MSC4108RendezvousSession } from \"./transports/MSC4108RendezvousSession.ts\";\nimport { MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { RendezvousIntent } from \"./RendezvousIntent.ts\";\nimport { logger } from \"../logger.ts\";\n\nexport * from \"./MSC4108SignInWithQR.ts\";\nexport type * from \"./RendezvousChannel.ts\";\nexport type * from \"./RendezvousCode.ts\";\nexport * from \"./RendezvousError.ts\";\nexport * from \"./RendezvousFailureReason.ts\";\nexport * from \"./RendezvousIntent.ts\";\nexport type * from \"./RendezvousTransport.ts\";\nexport * from \"./transports/index.ts\";\nexport * from \"./channels/index.ts\";\n\n/**\n * Check if the homeserver that the client is connected to supports a variant of sign-in with QR that we can use.\n *\n * @param client the client to check for sign-in with QR support\n * @returns true if the homeserver that the client is connected to supports a variant of sign-in with QR that we can use, false otherwise.\n */\nexport async function isSignInWithQRAvailable(client: MatrixClient): Promise<boolean> {\n    let metadata: OidcClientConfig;\n    try {\n        metadata = await client.getAuthMetadata();\n    } catch (e) {\n        logger.warn(\"Failed to fetch auth metadata, assuming sign-in with QR is unavailable\", e);\n        return false;\n    }\n\n    // check for support of device authorization grant\n    if (!metadata.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n        return false;\n    }\n\n    // check for unstable support for MSC4108 2024 version\n    return client.doesServerSupportUnstableFeature(\"org.matrix.msc4108\");\n}\n\n/**\n * Start a linking flow from an existing authenticated client by generating a QR code that can be scanned by the new device.\n * The new device will then authenticate with the server and link itself to the same account as the existing client and\n * share the end-to-end encryption keys.\n *\n * @param client the existing client\n * @param onFailure callback for when the linking process fails\n * @param abortSignal an AbortSignal that can be used to cancel the linking process,\n *   for example when the user cancels out of the flow.\n *   This will unbind the {@link onFailure} callback and prevent any further steps in the flow from being executed.\n * @returns a promise that resolves to an instance of the linking flow\n */\nexport async function linkNewDeviceByGeneratingQR(\n    client: MatrixClient,\n    onFailure: RendezvousFailureListener,\n    abortSignal: AbortSignal,\n): Promise<MSC4108SignInWithQR> {\n    // we assume rust crypto is already initialised\n    return initGenerateQrFlow(RendezvousIntent.RECIPROCATE_LOGIN_ON_EXISTING_DEVICE, client, onFailure, abortSignal);\n}\n\n/**\n * Start a sign-in flow by generating a QR code that can be scanned by an existing authenticated client.\n * The existing client will then help complete the authentication of the new device and link it to the same account,\n * sharing the end-to-end encryption keys.\n *\n * @param tempClient temporary client used during the flow for the rendezvous channel\n * @param onFailure callback for when the sign-in process fails\n * @param abortSignal an AbortSignal that can be used to cancel the linking process,\n *   for example when the user cancels out of the flow.\n *   This will unbind the {@link onFailure} callback and prevent any further steps in the flow from being executed.\n * @returns a promise that resolves to an instance of the sign-in flow\n */\nexport async function signInByGeneratingQR(\n    tempClient: MatrixClient,\n    onFailure: RendezvousFailureListener,\n    abortSignal: AbortSignal,\n): Promise<MSC4108SignInWithQR> {\n    // ensure rust crypto is initialized as needed for the secure channel\n    const RustSdkCryptoJs = await import(\"@matrix-org/matrix-sdk-crypto-wasm\");\n    await RustSdkCryptoJs.initAsync();\n\n    return initGenerateQrFlow(RendezvousIntent.LOGIN_ON_NEW_DEVICE, tempClient, onFailure, abortSignal);\n}\n\nasync function initGenerateQrFlow(\n    intent: RendezvousIntent,\n    client: MatrixClient,\n    onFailure: RendezvousFailureListener,\n    abortSignal: AbortSignal,\n): Promise<MSC4108SignInWithQR> {\n    const session = new MSC4108RendezvousSession({\n        onFailure,\n        client,\n    });\n    const channel = new MSC4108SecureChannel(session, undefined, onFailure);\n    const flow = new MSC4108SignInWithQR(\n        channel,\n        false,\n        intent === RendezvousIntent.LOGIN_ON_NEW_DEVICE ? undefined : client,\n        onFailure,\n    );\n\n    if (abortSignal.aborted) return flow;\n\n    abortSignal.onabort = (): void => {\n        // Detach failure handlers\n        session.onFailure = undefined;\n        channel.onFailure = undefined;\n        flow.onFailure = undefined;\n        // Cancel the session\n        void flow.cancel(MSC4108FailureReason.UserCancelled);\n    };\n\n    await session.send(\"\"); // open channel\n\n    if (!abortSignal.aborted) {\n        await flow.generateCode();\n    }\n\n    return flow;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAA4B,cAAc,QAA+B,cAAc;AACvF,SAAS,oBAAoB,QAAwC,8BAA8B;AACnG,SAAS,mBAAmB,QAAQ,0BAA0B;AAC9D,SAAS,wBAAwB,QAAQ,0CAA0C;AACnF,SAAS,oBAAoB,QAAQ,oCAAoC;AACzE,SAAS,gBAAgB,QAAQ,uBAAuB;AACxD,SAAS,MAAM,QAAQ,cAAc;AAErC,cAAc,0BAA0B;AAGxC,cAAc,sBAAsB;AACpC,cAAc,8BAA8B;AAC5C,cAAc,uBAAuB;AAErC,cAAc,uBAAuB;AACrC,cAAc,qBAAqB;;AAEnC;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,uBAAuB,CAAC,MAAoB,EAAoB;EAClF,IAAI,QAA0B;EAC9B,IAAI;IACA,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;EAC7C,CAAC,CAAC,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE,CAAC,CAAC;IACxF,OAAO,KAAK;EAChB;;EAEA;EACA,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE;IAC9E,OAAO,KAAK;EAChB;;EAEA;EACA,OAAO,MAAM,CAAC,gCAAgC,CAAC,oBAAoB,CAAC;AACxE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,2BAA2B,CAC7C,MAAoB,EACpB,SAAoC,EACpC,WAAwB,EACI;EAC5B;EACA,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,oCAAoC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;AACpH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,oBAAoB,CACtC,UAAwB,EACxB,SAAoC,EACpC,WAAwB,EACI;EAC5B;EACA,MAAM,eAAe,GAAG,MAAM,OAAO,oCAAoC,CAAC;EAC1E,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;EAEjC,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;AACvG;AAEA,eAAe,kBAAkB,CAC7B,MAAwB,EACxB,MAAoB,EACpB,SAAoC,EACpC,WAAwB,EACI;EAC5B,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC;IACzC,SAAS;IACT;EACJ,CAAC,CAAC;EACF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;EACvE,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAChC,OAAO,EACP,KAAK,EACL,MAAM,KAAK,gBAAgB,CAAC,mBAAmB,GAAG,SAAS,GAAG,MAAM,EACpE,SACJ,CAAC;EAED,IAAI,WAAW,CAAC,OAAO,EAAE,OAAO,IAAI;EAEpC,WAAW,CAAC,OAAO,GAAG,MAAY;IAC9B;IACA,OAAO,CAAC,SAAS,GAAG,SAAS;IAC7B,OAAO,CAAC,SAAS,GAAG,SAAS;IAC7B,IAAI,CAAC,SAAS,GAAG,SAAS;IAC1B;IACA,KAAK,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,aAAa,CAAC;EACxD,CAAC;EAED,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;;EAExB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;IACtB,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;EAC7B;EAEA,OAAO,IAAI;AACf","ignoreList":[]}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/rendezvous/index.ts"],"sourcesContent":["/*\nCopyright 2022 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type MatrixClient, OAuthGrantType, type ValidatedAuthMetadata } from \"../matrix.ts\";\nimport { MSC4108FailureReason, type RendezvousFailureListener } from \"./RendezvousFailureReason.ts\";\nimport { MSC4108SignInWithQR } from \"./MSC4108SignInWithQR.ts\";\nimport { MSC4108RendezvousSession } from \"./transports/MSC4108RendezvousSession.ts\";\nimport { MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { RendezvousIntent } from \"./RendezvousIntent.ts\";\nimport { logger } from \"../logger.ts\";\n\nexport * from \"./MSC4108SignInWithQR.ts\";\nexport type * from \"./RendezvousChannel.ts\";\nexport type * from \"./RendezvousCode.ts\";\nexport * from \"./RendezvousError.ts\";\nexport * from \"./RendezvousFailureReason.ts\";\nexport * from \"./RendezvousIntent.ts\";\nexport type * from \"./RendezvousTransport.ts\";\nexport * from \"./transports/index.ts\";\nexport * from \"./channels/index.ts\";\n\n/**\n * Check if the homeserver that the client is connected to supports a variant of sign-in with QR that we can use.\n *\n * @param client the client to check for sign-in with QR support\n * @returns true if the homeserver that the client is connected to supports a variant of sign-in with QR that we can use, false otherwise.\n */\nexport async function isSignInWithQRAvailable(client: MatrixClient): Promise<boolean> {\n    let metadata: ValidatedAuthMetadata;\n    try {\n        metadata = await client.getAuthMetadata();\n    } catch (e) {\n        logger.warn(\"Failed to fetch auth metadata, assuming sign-in with QR is unavailable\", e);\n        return false;\n    }\n\n    // check for support of device authorization grant\n    if (!metadata.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n        return false;\n    }\n\n    // check for unstable support for MSC4108 2024 version\n    return client.doesServerSupportUnstableFeature(\"org.matrix.msc4108\");\n}\n\n/**\n * Start a linking flow from an existing authenticated client by generating a QR code that can be scanned by the new device.\n * The new device will then authenticate with the server and link itself to the same account as the existing client and\n * share the end-to-end encryption keys.\n *\n * @param client the existing client\n * @param onFailure callback for when the linking process fails\n * @param abortSignal an AbortSignal that can be used to cancel the linking process,\n *   for example when the user cancels out of the flow.\n *   This will unbind the {@link onFailure} callback and prevent any further steps in the flow from being executed.\n * @returns a promise that resolves to an instance of the linking flow\n */\nexport async function linkNewDeviceByGeneratingQR(\n    client: MatrixClient,\n    onFailure: RendezvousFailureListener,\n    abortSignal: AbortSignal,\n): Promise<MSC4108SignInWithQR> {\n    // we assume rust crypto is already initialised\n    return initGenerateQrFlow(RendezvousIntent.RECIPROCATE_LOGIN_ON_EXISTING_DEVICE, client, onFailure, abortSignal);\n}\n\n/**\n * Start a sign-in flow by generating a QR code that can be scanned by an existing authenticated client.\n * The existing client will then help complete the authentication of the new device and link it to the same account,\n * sharing the end-to-end encryption keys.\n *\n * @param tempClient temporary client used during the flow for the rendezvous channel\n * @param onFailure callback for when the sign-in process fails\n * @param abortSignal an AbortSignal that can be used to cancel the linking process,\n *   for example when the user cancels out of the flow.\n *   This will unbind the {@link onFailure} callback and prevent any further steps in the flow from being executed.\n * @returns a promise that resolves to an instance of the sign-in flow\n */\nexport async function signInByGeneratingQR(\n    tempClient: MatrixClient,\n    onFailure: RendezvousFailureListener,\n    abortSignal: AbortSignal,\n): Promise<MSC4108SignInWithQR> {\n    // ensure rust crypto is initialized as needed for the secure channel\n    const RustSdkCryptoJs = await import(\"@matrix-org/matrix-sdk-crypto-wasm\");\n    await RustSdkCryptoJs.initAsync();\n\n    return initGenerateQrFlow(RendezvousIntent.LOGIN_ON_NEW_DEVICE, tempClient, onFailure, abortSignal);\n}\n\nasync function initGenerateQrFlow(\n    intent: RendezvousIntent,\n    client: MatrixClient,\n    onFailure: RendezvousFailureListener,\n    abortSignal: AbortSignal,\n): Promise<MSC4108SignInWithQR> {\n    const session = new MSC4108RendezvousSession({\n        onFailure,\n        client,\n    });\n    const channel = new MSC4108SecureChannel(session, undefined, onFailure);\n    const flow = new MSC4108SignInWithQR(\n        channel,\n        false,\n        intent === RendezvousIntent.LOGIN_ON_NEW_DEVICE ? undefined : client,\n        onFailure,\n    );\n\n    if (abortSignal.aborted) return flow;\n\n    abortSignal.onabort = (): void => {\n        // Detach failure handlers\n        session.onFailure = undefined;\n        channel.onFailure = undefined;\n        flow.onFailure = undefined;\n        // Cancel the session\n        void flow.cancel(MSC4108FailureReason.UserCancelled);\n    };\n\n    await session.send(\"\"); // open channel\n\n    if (!abortSignal.aborted) {\n        await flow.generateCode();\n    }\n\n    return flow;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAA4B,cAAc,QAAoC,cAAc;AAC5F,SAAS,oBAAoB,QAAwC,8BAA8B;AACnG,SAAS,mBAAmB,QAAQ,0BAA0B;AAC9D,SAAS,wBAAwB,QAAQ,0CAA0C;AACnF,SAAS,oBAAoB,QAAQ,oCAAoC;AACzE,SAAS,gBAAgB,QAAQ,uBAAuB;AACxD,SAAS,MAAM,QAAQ,cAAc;AAErC,cAAc,0BAA0B;AAGxC,cAAc,sBAAsB;AACpC,cAAc,8BAA8B;AAC5C,cAAc,uBAAuB;AAErC,cAAc,uBAAuB;AACrC,cAAc,qBAAqB;;AAEnC;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,uBAAuB,CAAC,MAAoB,EAAoB;EAClF,IAAI,QAA+B;EACnC,IAAI;IACA,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;EAC7C,CAAC,CAAC,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE,CAAC,CAAC;IACxF,OAAO,KAAK;EAChB;;EAEA;EACA,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE;IAC9E,OAAO,KAAK;EAChB;;EAEA;EACA,OAAO,MAAM,CAAC,gCAAgC,CAAC,oBAAoB,CAAC;AACxE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,2BAA2B,CAC7C,MAAoB,EACpB,SAAoC,EACpC,WAAwB,EACI;EAC5B;EACA,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,oCAAoC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;AACpH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,oBAAoB,CACtC,UAAwB,EACxB,SAAoC,EACpC,WAAwB,EACI;EAC5B;EACA,MAAM,eAAe,GAAG,MAAM,OAAO,oCAAoC,CAAC;EAC1E,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;EAEjC,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;AACvG;AAEA,eAAe,kBAAkB,CAC7B,MAAwB,EACxB,MAAoB,EACpB,SAAoC,EACpC,WAAwB,EACI;EAC5B,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC;IACzC,SAAS;IACT;EACJ,CAAC,CAAC;EACF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;EACvE,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAChC,OAAO,EACP,KAAK,EACL,MAAM,KAAK,gBAAgB,CAAC,mBAAmB,GAAG,SAAS,GAAG,MAAM,EACpE,SACJ,CAAC;EAED,IAAI,WAAW,CAAC,OAAO,EAAE,OAAO,IAAI;EAEpC,WAAW,CAAC,OAAO,GAAG,MAAY;IAC9B;IACA,OAAO,CAAC,SAAS,GAAG,SAAS;IAC7B,OAAO,CAAC,SAAS,GAAG,SAAS;IAC7B,IAAI,CAAC,SAAS,GAAG,SAAS;IAC1B;IACA,KAAK,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,aAAa,CAAC;EACxD,CAAC;EAED,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;;EAExB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;IACtB,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;EAC7B;EAEA,OAAO,IAAI;AACf","ignoreList":[]}

package/lib/rendezvous/transports/MSC4108RendezvousSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108RendezvousSession.d.ts","sourceRoot":"","sources":["../../../src/rendezvous/transports/MSC4108RendezvousSession.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,KAAK,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAClH,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,iBAAiB,CAAC;AAG5D;;;;GAIG;AACH,qBAAa,wBAAwB;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA0B;IAC5C,SAAS,CAAC,EAAE,yBAAyB,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAS;IACtB,OAAO,CAAC,SAAS,CAAC,CAAO;IACzB,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAS;gBAEJ,EACf,SAAS,EACT,GAAG,EACH,OAAO,GACV,EAAE;QACC,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAClC,SAAS,CAAC,EAAE,yBAAyB,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC;KACf;gBACkB,EACf,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,OAAO,GACV,EAAE;QACC,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAClC,SAAS,CAAC,EAAE,yBAAyB,CAAC;QACtC,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B;IAqBD;;OAEG;IACH,IAAW,KAAK,IAAI,OAAO,CAE1B;IAED;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED,OAAO,CAAC,KAAK;YAOC,eAAe;IAgB7B;;;OAGG;IACU,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuD9C;;;OAGG;IACU,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IA6CnD;;;;OAIG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBhG;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAetC"}
+{"version":3,"file":"MSC4108RendezvousSession.d.ts","sourceRoot":"","sources":["../../../src/rendezvous/transports/MSC4108RendezvousSession.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,KAAK,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAClH,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,iBAAiB,CAAC;AAG5D;;;;GAIG;AACH,qBAAa,wBAAwB;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA0B;IAC5C,SAAS,CAAC,EAAE,yBAAyB,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAS;IACtB,OAAO,CAAC,SAAS,CAAC,CAAO;IACzB,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAmB,EACf,SAAS,EACT,GAAG,EACH,OAAO,GACV,EAAE;QACC,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAClC,SAAS,CAAC,EAAE,yBAAyB,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC;KACf,EAAE;IACH,YAAmB,EACf,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,OAAO,GACV,EAAE;QACC,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAClC,SAAS,CAAC,EAAE,yBAAyB,CAAC;QACtC,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B,EAAE;IAqBH;;OAEG;IACH,IAAW,KAAK,IAAI,OAAO,CAE1B;IAED;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED,OAAO,CAAC,KAAK;YAOC,eAAe;IAgB7B;;;OAGG;IACU,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqD7C;IAED;;;OAGG;IACU,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2ClD;IAED;;;;OAIG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB/F;IAED;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAclC;CACJ"}

package/lib/retentionPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"retentionPolicy.d.ts","sourceRoot":"","sources":["../src/retentionPolicy.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAgB,KAAK,SAAS,EAAE,KAAK,aAAa,EAAU,MAAM,qBAAqB,CAAC;AAC/F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CACb,MAAM,EACN;QACI,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACzB,CACJ,CAAC;IACF,MAAM,CAAC,EAAE;QACL,YAAY,CAAC,EAAE;YACX,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,GAAG,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;QACF,YAAY,CAAC,EAAE;YACX,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,GAAG,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;KACL,CAAC;CACL;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,gBAAgB,CAAC,8BAA8B,CAAC;gBACrE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC;IAGtF;;;OAGG;IACI,KAAK,QAAa,OAAO,CAAC,8BAA8B,CAAC,CAY9D;CACL"}
+{"version":3,"file":"retentionPolicy.d.ts","sourceRoot":"","sources":["../src/retentionPolicy.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAgB,KAAK,SAAS,EAAE,KAAK,aAAa,EAAU,MAAM,qBAAqB,CAAC;AAC/F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CACb,MAAM,EACN;QACI,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACzB,CACJ,CAAC;IACF,MAAM,CAAC,EAAE;QACL,YAAY,CAAC,EAAE;YACX,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,GAAG,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;QACF,YAAY,CAAC,EAAE;YACX,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,GAAG,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;KACL,CAAC;CACL;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,gBAAgB,CAAC,8BAA8B,CAAC;IACxF,YAAmB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,EAErF;IACD;;;OAGG;IACI,KAAK,QAAa,OAAO,CAAC,8BAA8B,CAAC,CAY9D;CACL"}

package/lib/room-hierarchy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"room-hierarchy.d.ts","sourceRoot":"","sources":["../src/room-hierarchy.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAKlF,qBAAa,aAAa;aAuBF,IAAI,EAAE,IAAI;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAxBlC,SAAgB,MAAM,2BAAkC;IAExD,SAAgB,QAAQ,wBAA+B;IAEvD,SAAgB,OAAO,8BAAqC;IAC5D,OAAO,CAAC,WAAW,CAAC,CAA+C;IACnE,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,kBAAkB,CAAC,CAAQ;IAEnC;;;;;;;;;OASG;gBAEiB,IAAI,EAAE,IAAI,EACT,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,aAAa,UAAQ;IAG1C,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED,IAAW,WAAW,IAAI,OAAO,CAEhC;IAED,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED,IAAW,KAAK,IAAI,cAAc,EAAE,GAAG,SAAS,CAE/C;IAEY,IAAI,CAAC,QAAQ,qBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IA2D/D,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAI9E,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAKnE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;CAgBjE"}
+{"version":3,"file":"room-hierarchy.d.ts","sourceRoot":"","sources":["../src/room-hierarchy.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAKlF,qBAAa,aAAa;aAuBF,IAAI,EAAE,IAAI;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAxBlC,SAAgB,MAAM,2BAAkC;IAExD,SAAgB,QAAQ,wBAA+B;IAEvD,SAAgB,OAAO,8BAAqC;IAC5D,OAAO,CAAC,WAAW,CAAC,CAA+C;IACnE,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,kBAAkB,CAAC,CAAQ;IAEnC;;;;;;;;;OASG;IACH,YACoB,IAAI,EAAE,IAAI,EACT,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,aAAa,UAAQ,EACtC;IAEJ,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED,IAAW,WAAW,IAAI,OAAO,CAEhC;IAED,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED,IAAW,KAAK,IAAI,cAAc,EAAE,GAAG,SAAS,CAE/C;IAEY,IAAI,CAAC,QAAQ,qBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAyDrE;IAEM,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEpF;IAEM,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAEzE;IAGM,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAe7D;CACJ"}

package/lib/rust-crypto/CrossSigningIdentity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CrossSigningIdentity.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/CrossSigningIdentity.ts"],"names":[],"mappings":"AAgBA,OAAO,EACH,KAAK,UAAU,EAGlB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE;;;GAGG;AACH,qBAAa,oBAAoB;IAEzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAHb,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,wBAAwB,EAAE,wBAAwB,EAClD,aAAa,EAAE,uBAAuB;IAG3D;;OAEG;IACU,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuFlF;;;;;;OAMG;YACW,iBAAiB;IA+B/B;;;;OAIG;YACW,+BAA+B;CAoBhD"}
+{"version":3,"file":"CrossSigningIdentity.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/CrossSigningIdentity.ts"],"names":[],"mappings":"AAgBA,OAAO,EACH,KAAK,UAAU,EAGlB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE;;;GAGG;AACH,qBAAa,oBAAoB;IAEzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAJlC,YACqB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,wBAAwB,EAAE,wBAAwB,EAClD,aAAa,EAAE,uBAAuB,EACvD;IAEJ;;OAEG;IACU,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqFjF;IAED;;;;;;OAMG;YACW,iBAAiB;IA+B/B;;;;OAIG;YACW,+BAA+B;CAoBhD"}

package/lib/rust-crypto/DehydratedDeviceManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DehydratedDeviceManager.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/DehydratedDeviceManager.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,eAAe,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,KAAK,SAAS,EAAoB,KAAK,aAAa,EAAU,MAAM,sBAAsB,CAAC;AAEpG,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAmBrE;;GAEG;AACH,eAAO,MAAM,cAAc,mDAAmD,CAAC;AAW/E;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAwB,SAAQ,iBAAiB,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;IAK1G,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa;IARlC,8EAA8E;IAC9E,OAAO,CAAC,UAAU,CAAC,CAAiC;gBAG/B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,eAAe,CAAC,UAAU,EACtC,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,EACnD,wBAAwB,EAAE,wBAAwB,EAClD,aAAa,EAAE,uBAAuB;YAK7C,QAAQ;IAKtB;;OAEG;IACU,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IA2B5C;;;;;;;;;;;;;;;OAeG;IACU,KAAK,CAAC,IAAI,GAAE,oBAAoB,GAAG,OAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB5E;;OAEG;IACU,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI5C;;;;;;OAMG;IACU,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC;IAQrE;;;;;;OAMG;YACW,MAAM;IAuBpB;;;;;;;OAOG;IACU,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC;IA4E3D;;;;OAIG;IACU,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7D;;OAEG;IACU,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAavD;;;;OAIG;IACI,IAAI,IAAI,IAAI;IAOnB;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAyBvC;AAED;;;GAGG;AACH,KAAK,uBAAuB,GACtB,WAAW,CAAC,uBAAuB,GACnC,WAAW,CAAC,wBAAwB,GACpC,WAAW,CAAC,kBAAkB,GAC9B,WAAW,CAAC,mBAAmB,GAC/B,WAAW,CAAC,oBAAoB,GAChC,WAAW,CAAC,gBAAgB,GAC5B,WAAW,CAAC,oBAAoB,GAChC,WAAW,CAAC,6BAA6B,CAAC;AAEhD;;;GAGG;AACH,KAAK,yBAAyB,GAAG,IAAI,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"DehydratedDeviceManager.d.ts","sourceRoot":"","sources":["../../src/rust-crypto/DehydratedDeviceManager.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,eAAe,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,KAAK,SAAS,EAAoB,KAAK,aAAa,EAAU,MAAM,sBAAsB,CAAC;AAEpG,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAmBrE;;GAEG;AACH,eAAO,MAAM,cAAc,mDAAmD,CAAC;AAW/E;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAwB,SAAQ,iBAAiB,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;IAK1G,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa;IARlC,8EAA8E;IAC9E,OAAO,CAAC,UAAU,CAAC,CAAiC;IAEpD,YACqB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,eAAe,CAAC,UAAU,EACtC,IAAI,EAAE,aAAa,CAAC,SAAS,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,EACnD,wBAAwB,EAAE,wBAAwB,EAClD,aAAa,EAAE,uBAAuB,EAG1D;YAEa,QAAQ;IAKtB;;OAEG;IACU,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAyB3C;IAED;;;;;;;;;;;;;;;OAeG;IACU,KAAK,CAAC,IAAI,GAAE,oBAAoB,GAAG,OAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3E;IAED;;OAEG;IACU,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAE3C;IAED;;;;;;OAMG;IACU,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAMpE;IAED;;;;;;OAMG;YACW,MAAM;IAuBpB;;;;;;;OAOG;IACU,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC,CA2E1D;IAED;;;;OAIG;IACU,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC,CAW5D;IAED;;OAEG;IACU,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAWtD;IAED;;;;OAIG;IACI,IAAI,IAAI,IAAI,CAKlB;IAED;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAwBnC;CACJ;AAED;;;GAGG;AACH,KAAK,uBAAuB,GACtB,WAAW,CAAC,uBAAuB,GACnC,WAAW,CAAC,wBAAwB,GACpC,WAAW,CAAC,kBAAkB,GAC9B,WAAW,CAAC,mBAAmB,GAC/B,WAAW,CAAC,oBAAoB,GAChC,WAAW,CAAC,gBAAgB,GAC5B,WAAW,CAAC,oBAAoB,GAChC,WAAW,CAAC,6BAA6B,CAAC;AAEhD;;;GAGG;AACH,KAAK,yBAAyB,GAAG,IAAI,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC"}

package/lib/rust-crypto/DehydratedDeviceManager.js

@@ -27,7 +27,7 @@ import { TypedEventEmitter } from "../models/typed-event-emitter.js";
  */
 
 /**
- * The response body of `POST /_matrix/client/unstable/org.matrix.msc3814.v1/dehydrated_device/events`.
+ * The response body of `GET /_matrix/client/unstable/org.matrix.msc3814.v1/dehydrated_device/{device_id}/events`.
  */
 
 /**
@@ -229,22 +229,20 @@ export class DehydratedDeviceManager extends TypedEventEmitter {
     const path = encodeUri("/dehydrated_device/$device_id/events", {
       $device_id: dehydratedDeviceResp.device_id
     });
-    // eslint-disable-next-line no-constant-condition
-    while (true) {
-      const eventResp = await this.http.authedRequest(Method.Post, path, undefined, nextBatch ? {
-        next_batch: nextBatch
-      } : {}, {
+    do {
+      const eventResp = await this.http.authedRequest(Method.Get, path, nextBatch ? {
+        from: nextBatch
+      } : undefined, undefined, {
         prefix: UnstablePrefix
       });
-      if (eventResp.events.length === 0) {
-        break;
-      }
       toDeviceCount += eventResp.events.length;
       nextBatch = eventResp.next_batch;
-      const roomKeyInfos = await rehydratedDevice.receiveEvents(JSON.stringify(eventResp.events));
-      roomKeyCount += roomKeyInfos.length;
-      this.emit(CryptoEvent.RehydrationProgress, roomKeyCount, toDeviceCount);
-    }
+      if (eventResp.events.length > 0) {
+        const roomKeyInfos = await rehydratedDevice.receiveEvents(JSON.stringify(eventResp.events));
+        roomKeyCount += roomKeyInfos.length;
+        this.emit(CryptoEvent.RehydrationProgress, roomKeyCount, toDeviceCount);
+      }
+    } while (nextBatch !== undefined);
     this.logger.info(`dehydration: received ${roomKeyCount} room keys from ${toDeviceCount} to-device events`);
     this.emit(CryptoEvent.RehydrationCompleted);
     return true;