wowok 2.1.39 → 2.1.41

package/dist/esm/w/messenger/session.js

@@ -1,768 +1 @@
-// Copyright (c) Wowok.
-// SPDX-License-Identifier: Apache-2.0
-/**
- * Messenger 会话管理模块
- *
- * 基于 Signal Protocol 的双棘轮算法实现端到端加密
- * 负责：
- * 1. 身份密钥管理（与 wowok 账户体系集成）
- * 2. 会话建立和维护
- * 3. 消息加密和解密
- */
-import { KeyHelper, SessionBuilder, SessionCipher, SignalProtocolAddress, } from "libsignal-protocol-typescript";
-import { SignalProtocolStorage } from "./storage.js";
-import { MessengerServerClient } from "./server.js";
-import { recoverXed25519FromX25519PrivateKey, arrayBufferToUint8Array, bytesToBase64, base64ToBytes, } from "./crypto.js";
-import { MessageType, DEFAULT_MESSENGER_CONFIG, MessengerError, MessengerErrorCode, DEFAULT_DEVICE_ID, } from "./types.js";
-// 动态导入 Account 以避免循环依赖
-// eslint-disable-next-line import/no-cycle
-async function getAccount() {
-    // eslint-disable-next-line import/no-cycle
-    const { Account } = await import("../local/account.js");
-    return Account.Instance();
-}
-export class MessengerSession {
-    store;
-    serverClient;
-    config;
-    identity = null;
-    constructor(userAddress, config) {
-        this.store = new SignalProtocolStorage(userAddress);
-        this.config = { ...DEFAULT_MESSENGER_CONFIG, ...config };
-        this.serverClient = new MessengerServerClient(this.config);
-    }
-    /**
-     * 获取或创建本地身份
-     *
-     * 从 wowok 账户的 ED25519 私钥确定性派生 X25519 密钥对，
-     * 确保恢复钱包后加密身份不变。
-     */
-    async ensureIdentity(userAddress) {
-        if (this.identity) {
-            return this.identity;
-        }
-        // 尝试从存储加载
-        const existingSignalIdentity = await this.store.getIdentityKeyPair();
-        const existingRegId = await this.store.getLocalRegistrationId();
-        if (existingSignalIdentity && existingRegId) {
-            const x25519PrivateKey = new Uint8Array(existingSignalIdentity.privKey);
-            const xed25519 = recoverXed25519FromX25519PrivateKey(x25519PrivateKey);
-            this.identity = {
-                xed25519,
-                signalIdentity: existingSignalIdentity,
-                registrationId: existingRegId,
-            };
-            return this.identity;
-        }
-        // 从 ED25519 私钥确定性派生 X25519 密钥对
-        if (!userAddress) {
-            throw new MessengerError(MessengerErrorCode.IDENTITY_NOT_FOUND, "userAddress is required to derive identity");
-        }
-        // 从 Account 派生 X25519 密钥对
-        const { privateKey, publicKey } = await (await getAccount()).deriveX25519KeyPair(userAddress);
-        // 生成注册 ID（可以从公钥派生，确保确定性）
-        const registrationId = this.deriveRegistrationId(publicKey);
-        // 转换为 Signal Protocol 格式
-        // Signal Protocol 要求公钥带 0x05 前缀（33字节），私钥32字节
-        const prefixedPublicKey = new Uint8Array(33);
-        prefixedPublicKey[0] = 0x05; // Signal Protocol 标准前缀
-        prefixedPublicKey.set(publicKey, 1);
-        const signalIdentity = {
-            privKey: privateKey.slice().buffer,
-            pubKey: prefixedPublicKey.slice().buffer,
-        };
-        await this.store.setIdentity(signalIdentity, registrationId);
-        const xed25519 = recoverXed25519FromX25519PrivateKey(privateKey);
-        this.identity = {
-            xed25519,
-            signalIdentity,
-            registrationId,
-        };
-        return this.identity;
-    }
-    /**
-     * 从公钥确定性派生注册 ID
-     * 确保同一账户的注册 ID 始终相同
-     */
-    deriveRegistrationId(publicKey) {
-        // 取公钥前 2 字节作为注册 ID（范围 0-65535）
-        // 确保不为 0（Signal Protocol 要求）
-        const id = (publicKey[0] << 8) | publicKey[1];
-        return id === 0 ? 1 : id;
-    }
-    /**
-     * 注册设备到服务器
-     */
-    async registerDevice(userAddress) {
-        const identity = await this.ensureIdentity(userAddress);
-        const signedPreKeyId = 1;
-        let signedPreKey;
-        let signedPreKeyPublicKey;
-        let signedPreKeySignature;
-        let isNewKey = false;
-        // 【关键修复】使用带签名的存储方法
-        const existingSignedPreKey = await this.store.loadSignedPreKeyWithSignature(signedPreKeyId);
-        if (existingSignedPreKey) {
-            signedPreKeyPublicKey = arrayBufferToUint8Array(existingSignedPreKey.pubKey);
-            signedPreKeySignature = arrayBufferToUint8Array(existingSignedPreKey.signature);
-            signedPreKey = {
-                keyId: signedPreKeyId,
-                keyPair: {
-                    pubKey: existingSignedPreKey.pubKey,
-                    privKey: existingSignedPreKey.privKey,
-                },
-                signature: existingSignedPreKey.signature,
-            };
-        }
-        else {
-            signedPreKey = await KeyHelper.generateSignedPreKey(identity.signalIdentity, signedPreKeyId);
-            signedPreKeyPublicKey = arrayBufferToUint8Array(signedPreKey.keyPair.pubKey);
-            signedPreKeySignature = arrayBufferToUint8Array(signedPreKey.signature);
-            isNewKey = true;
-        }
-        // 生成 One-Time PreKeys（暂不保存）
-        const oneTimePrekeys = await this.generatePreKeyBatch(this.config.prekey_count, userAddress);
-        const prefixedIdentityKey = arrayBufferToUint8Array(identity.signalIdentity.pubKey);
-        const account = await (await getAccount()).get(userAddress, false);
-        if (!account?.pubkey) {
-            throw new MessengerError(MessengerErrorCode.IDENTITY_NOT_FOUND, `Account not found for ${userAddress}`);
-        }
-        const timestamp = Date.now();
-        const nonce = this.generateNonce();
-        const message = `register:${account.pubkey}:${timestamp}:${nonce}`;
-        const signResult = await (await getAccount()).signData(userAddress, message);
-        const signature = Buffer.from(signResult.signature.slice(2), "hex");
-        const registerRequest = {
-            userAddress,
-            deviceId: DEFAULT_DEVICE_ID,
-            registrationId: identity.registrationId,
-            identityKey: bytesToBase64(prefixedIdentityKey),
-            signedPrekey: {
-                keyId: signedPreKeyId,
-                publicKey: bytesToBase64(signedPreKeyPublicKey),
-                signature: bytesToBase64(signedPreKeySignature),
-            },
-            prekeys: oneTimePrekeys,
-            publicKey: account.pubkey,
-            signatureScheme: "ED25519",
-            signature: bytesToBase64(signature),
-            timestamp,
-            nonce,
-        };
-        console.log(`[Session Debug] Sending register request to server...`);
-        await this.serverClient.registerDevice(registerRequest);
-        console.log(`[Session Debug] Server register request successful!`);
-        console.log(`[Session Debug] Verifying registration complete...`);
-        await this.verifyRegistrationComplete(userAddress);
-        console.log(`[Session Debug] Registration verification complete!`);
-        // 【关键修复】只有是新 key 时才保存到本地数据库（包含签名）
-        if (isNewKey) {
-            await this.store.storeSignedPreKeyWithSignature(signedPreKeyId, signedPreKey.keyPair, signedPreKeySignature.buffer.slice(0));
-        }
-    }
-    /**
-     * 验证注册是否完成
-     * 轮询检查服务器是否已存在该用户
-     */
-    async verifyRegistrationComplete(userAddress, maxRetries = 10, retryDelay = 500) {
-        for (let i = 0; i < maxRetries; i++) {
-            try {
-                const status = await this.serverClient.getPrekeyStatus(userAddress);
-                // 如果成功获取状态，说明注册已完成
-                console.log(`Registration verified for ${userAddress}, prekeys: ${status.currentCount}/${status.maxAllowed}`);
-                return;
-            }
-            catch (error) {
-                // 如果是 404，说明注册还没完成，继续等待
-                if (error?.message?.includes("404") || error?.status === 404) {
-                    if (i < maxRetries - 1) {
-                        console.log(`Waiting for registration to complete... (${i + 1}/${maxRetries})`);
-                        await new Promise((resolve) => setTimeout(resolve, retryDelay));
-                        continue;
-                    }
-                }
-                // 其他错误，抛出
-                throw error;
-            }
-        }
-        throw new MessengerError(MessengerErrorCode.REGISTRATION_FAILED, `Registration verification failed after ${maxRetries} attempts`);
-    }
-    /**
-     * 检查设备是否已在服务器上注册
-     * 通过查询服务器上的预密钥状态来判断
-     */
-    async isDeviceRegistered(userAddress) {
-        try {
-            // 检查本地是否有 signedPreKey（使用带签名的方法）
-            const signedPreKey = await this.store.loadSignedPreKeyWithSignature(1);
-            if (!signedPreKey) {
-                return false;
-            }
-            // 尝试从服务器获取预密钥状态
-            const _status = await this.serverClient.getPrekeyStatus(userAddress);
-            return true;
-        }
-        catch (error) {
-            // 如果是 404，说明设备未注册
-            if (error?.message?.includes("404") || error?.status === 404) {
-                return false;
-            }
-            return false;
-        }
-    }
-    /**
-     * 生成预密钥批次（One-Time PreKeys）
-     */
-    async generatePreKeyBatch(count, userAddress) {
-        if (count <= 0)
-            return [];
-        const meta = await this.store.getMeta();
-        let nextPreKeyId = meta.nextPreKeyId || 1;
-        const prekeys = [];
-        for (let i = 0; i < count; i++) {
-            const keyId = nextPreKeyId + i;
-            const existingPreKey = await this.store.loadPreKey(keyId);
-            if (existingPreKey) {
-                const pubKeyBytes = new Uint8Array(existingPreKey.pubKey);
-                const publicKeyBase64 = bytesToBase64(pubKeyBytes);
-                const signResult = await (await getAccount()).signData(userAddress, pubKeyBytes);
-                const signature = Buffer.from(signResult.signature.slice(2), "hex");
-                prekeys.push({
-                    keyId,
-                    publicKey: publicKeyBase64,
-                    signature: bytesToBase64(signature),
-                });
-                continue;
-            }
-            const preKey = await KeyHelper.generatePreKey(keyId);
-            const pubKeyBytes = new Uint8Array(preKey.keyPair.pubKey);
-            const signResult = await (await getAccount()).signData(userAddress, pubKeyBytes);
-            const signature = Buffer.from(signResult.signature.slice(2), "hex");
-            await this.store.storePreKey(keyId, preKey.keyPair);
-            prekeys.push({
-                keyId,
-                publicKey: bytesToBase64(pubKeyBytes),
-                signature: bytesToBase64(signature),
-            });
-        }
-        nextPreKeyId += count;
-        await this.store.setMeta({ nextPreKeyId });
-        return prekeys;
-    }
-    /**
-     * 确保服务器上有足够可用的预密钥
-     */
-    async ensurePreKeys(userAddress, force = false) {
-        const status = await this.serverClient.getPrekeyStatus(userAddress);
-        if (!force && status.currentCount >= status.maxAllowed) {
-            return;
-        }
-        const needCount = status.maxAllowed - status.currentCount;
-        if (needCount <= 0) {
-            return;
-        }
-        await this.ensureIdentity(userAddress);
-        const prekeys = await this.generatePreKeyBatch(needCount, userAddress);
-        if (prekeys.length === 0) {
-            return;
-        }
-        const account = await (await getAccount()).get(userAddress, false);
-        if (!account?.pubkey) {
-            throw new MessengerError(MessengerErrorCode.IDENTITY_NOT_FOUND, `Account not found for ${userAddress}`);
-        }
-        const timestamp = Date.now();
-        const nonce = this.generateNonce();
-        const message = `upload_prekeys:${account.pubkey}:${timestamp}:${nonce}`;
-        const signResult = await (await getAccount()).signData(userAddress, message);
-        const signature = Buffer.from(signResult.signature.slice(2), "hex");
-        await this.serverClient.uploadPreKeys({
-            userAddress,
-            prekeys,
-            publicKey: account.pubkey,
-            signatureScheme: "ED25519",
-            signature: bytesToBase64(signature),
-            timestamp,
-            nonce,
-        });
-    }
-    /**
-     * 生成随机 nonce
-     */
-    generateNonce() {
-        const array = new Uint8Array(16);
-        crypto.getRandomValues(array);
-        return Array.from(array, (b) => b.toString(16).padStart(2, "0")).join("");
-    }
-    /**
-     * 建立与对方的会话
-     */
-    async establishSession(myAddress, peerAddress, peerDeviceId = DEFAULT_DEVICE_ID, remoteBundle) {
-        const protocolAddress = new SignalProtocolAddress(peerAddress, peerDeviceId);
-        const existingSession = await this.store.loadSession(protocolAddress.toString());
-        if (existingSession) {
-            return;
-        }
-        if (!remoteBundle) {
-            const account = await (await getAccount()).get(myAddress, false);
-            if (!account?.pubkey) {
-                throw new MessengerError(MessengerErrorCode.IDENTITY_NOT_FOUND, `Account not found for ${myAddress}`);
-            }
-            const timestamp = Date.now();
-            const nonce = this.generateNonce();
-            const publicKeyWithFlag = account.pubkey;
-            const message = `get_bundle:${myAddress}:${timestamp}:${nonce}`;
-            const signResult = await (await getAccount()).signData(myAddress, message);
-            const signature = Buffer.from(signResult.signature.slice(2), "hex");
-            remoteBundle = await this.serverClient.fetchRemoteBundle(peerAddress, myAddress, publicKeyWithFlag, {
-                signatureScheme: "ED25519",
-                signature: bytesToBase64(new Uint8Array(signature)),
-                timestamp,
-                nonce,
-            }, peerDeviceId);
-        }
-        const oneTimePreKey = remoteBundle.oneTimePrekey;
-        const signedPreKey = remoteBundle.signedPrekey;
-        if (!signedPreKey) {
-            throw new MessengerError(MessengerErrorCode.IDENTITY_NOT_FOUND, `No signed prekey available for ${peerAddress}`);
-        }
-        const identityKeyBytes = base64ToBytes(remoteBundle.identityKey);
-        const originalIdentityKeyWithPrefix = new Uint8Array(identityKeyBytes);
-        const signedPreKeyPublicBytes = base64ToBytes(signedPreKey.publicKey);
-        const signedPreKeySignatureBytes = base64ToBytes(signedPreKey.signature);
-        const originalSignedPreKeyWithPrefix = new Uint8Array(signedPreKeyPublicBytes);
-        let oneTimePreKeyData = undefined;
-        if (oneTimePreKey) {
-            const oneTimePreKeyPublicBytes = base64ToBytes(oneTimePreKey.publicKey);
-            const originalOneTimePreKeyWithPrefix = new Uint8Array(oneTimePreKeyPublicBytes);
-            oneTimePreKeyData = {
-                keyId: oneTimePreKey.keyId,
-                publicKey: originalOneTimePreKeyWithPrefix.buffer.slice(originalOneTimePreKeyWithPrefix.byteOffset, originalOneTimePreKeyWithPrefix.byteOffset +
-                    originalOneTimePreKeyWithPrefix.byteLength),
-            };
-        }
-        const device = {
-            registrationId: remoteBundle.registrationId,
-            identityKey: originalIdentityKeyWithPrefix.buffer.slice(originalIdentityKeyWithPrefix.byteOffset, originalIdentityKeyWithPrefix.byteOffset +
-                originalIdentityKeyWithPrefix.byteLength),
-            signedPreKey: {
-                keyId: signedPreKey.keyId,
-                publicKey: originalSignedPreKeyWithPrefix.buffer.slice(originalSignedPreKeyWithPrefix.byteOffset, originalSignedPreKeyWithPrefix.byteOffset +
-                    originalSignedPreKeyWithPrefix.byteLength),
-                signature: new Uint8Array(signedPreKeySignatureBytes).buffer.slice(signedPreKeySignatureBytes.byteOffset, signedPreKeySignatureBytes.byteOffset +
-                    signedPreKeySignatureBytes.byteLength),
-            },
-            preKey: oneTimePreKeyData,
-        };
-        const builder = new SessionBuilder(this.store, protocolAddress);
-        await builder.processPreKey(device);
-        await this.store.saveIdentity(protocolAddress.toString(), device.identityKey);
-        // 【关键改进】将会话从默认key复制到发送会话key
-        const defaultSessionKey = protocolAddress.toString();
-        const sendSessionKey = `send:${peerAddress}.${peerDeviceId}`;
-        const sessionData = await this.store.loadSession(defaultSessionKey);
-        if (sessionData) {
-            await this.store.storeSession(sendSessionKey, sessionData);
-            console.log(`[Session] 会话已保存到发送key: ${sendSessionKey}`);
-        }
-    }
-    /**
-     * 加密消息
-     * 【改进】使用发送会话key，与接收会话分离
-     */
-    async encryptMessage(myAddress, peerAddress, plaintext, peerDeviceId = DEFAULT_DEVICE_ID) {
-        const protocolAddress = new SignalProtocolAddress(peerAddress, peerDeviceId);
-        // Signal Protocol使用的默认key格式
-        const defaultSessionKey = protocolAddress.toString();
-        // 【关键改进】使用发送会话key
-        const sendSessionKey = `send:${peerAddress}.${peerDeviceId}`;
-        const recvSessionKey = `recv:${peerAddress}.${peerDeviceId}`;
-        // 【关键】首先检查默认key（Signal Protocol使用的格式）
-        let existingDefaultSession = await this.store.loadSession(defaultSessionKey);
-        // 检查是否存在发送会话或接收会话
-        let existingSendSession = await this.store.loadSession(sendSessionKey);
-        const existingRecvSession = await this.store.loadSession(recvSessionKey);
-        // 【关键逻辑1】如果存在接收会话但没有默认会话，复制接收会话到默认key
-        // 这样SessionCipher可以找到会话
-        if (!existingDefaultSession && existingRecvSession) {
-            console.log(`[Session] 复制接收会话到默认key: ${peerAddress}`);
-            await this.store.storeSession(defaultSessionKey, existingRecvSession);
-            existingDefaultSession = existingRecvSession;
-        }
-        // 【关键逻辑2】如果存在接收会话但没有发送会话，复制接收会话作为发送会话
-        // 这确保双方使用相同的密钥材料
-        if (!existingSendSession && existingRecvSession) {
-            console.log(`[Session] 复制接收会话到发送会话: ${peerAddress}`);
-            await this.store.storeSession(sendSessionKey, existingRecvSession);
-            existingSendSession = existingRecvSession;
-        }
-        let existingSession = existingDefaultSession || existingSendSession;
-        let isNewSession = !existingSession;
-        let retryCount = 0;
-        const maxRetries = 5; // 【用户要求】加大容错窗口，让消息可以重试更多次
-        while (retryCount <= maxRetries) {
-            try {
-                if (isNewSession) {
-                    console.log(`[Session] 建立新会话 (尝试 ${retryCount + 1}/${maxRetries + 1})`);
-                    const account = await (await getAccount()).get(myAddress, false);
-                    if (!account?.pubkey) {
-                        throw new MessengerError(MessengerErrorCode.IDENTITY_NOT_FOUND, `Account not found for ${myAddress}`);
-                    }
-                    const timestamp = Date.now();
-                    const nonce = this.generateNonce();
-                    const publicKeyWithFlag = account.pubkey;
-                    const message = `get_bundle:${myAddress}:${timestamp}:${nonce}`;
-                    const signResult = await (await getAccount()).signData(myAddress, message);
-                    const signature = Buffer.from(signResult.signature.slice(2), "hex");
-                    const remoteBundle = await this.serverClient.fetchRemoteBundle(peerAddress, myAddress, publicKeyWithFlag, {
-                        signatureScheme: "ED25519",
-                        signature: bytesToBase64(new Uint8Array(signature)),
-                        timestamp,
-                        nonce,
-                    }, peerDeviceId);
-                    await this.establishSession(myAddress, peerAddress, peerDeviceId, remoteBundle);
-                }
-                const cipher = new SessionCipher(this.store, protocolAddress);
-                const encoder = new TextEncoder();
-                const cipherMessage = await cipher.encrypt(encoder.encode(plaintext).buffer);
-                let bodyBuffer;
-                if (typeof cipherMessage.body === "string") {
-                    const bodyBytes = Buffer.from(cipherMessage.body, "binary");
-                    bodyBuffer = new Uint8Array(bodyBytes).buffer;
-                }
-                else if (cipherMessage.body) {
-                    bodyBuffer = cipherMessage.body;
-                }
-                else {
-                    throw new MessengerError(MessengerErrorCode.ENCRYPTION_FAILED, "Cipher message body is empty");
-                }
-                return {
-                    type: cipherMessage.type,
-                    body: bodyBuffer,
-                    registrationId: cipherMessage.registrationId,
-                };
-            }
-            catch (error) {
-                console.error(`[Session] 加密失败 (尝试 ${retryCount + 1}/${maxRetries + 1}):`, error);
-                if (retryCount >= maxRetries) {
-                    throw error;
-                }
-                console.log(`[Session] 尝试删除旧会话并重新建立...`);
-                try {
-                    if (existingSession) {
-                        // 【关键】删除所有相关的会话key
-                        await this.store.removeSession(defaultSessionKey);
-                        await this.store.removeSession(sendSessionKey);
-                        await this.store.removeSession(recvSessionKey);
-                        existingSession = undefined;
-                    }
-                    isNewSession = true;
-                    retryCount++;
-                    await new Promise((resolve) => setTimeout(resolve, 100));
-                }
-                catch (rebuildError) {
-                    console.error(`[Session] 重新建立会话失败:`, rebuildError);
-                    throw error;
-                }
-            }
-        }
-        throw new MessengerError(MessengerErrorCode.ENCRYPTION_FAILED, "Encryption failed after multiple attempts");
-    }
-    /**
-     * 解密消息
-     */
-    async decryptMessage(myAddress, peerAddress, ciphertext, msgType, peerDeviceId = DEFAULT_DEVICE_ID) {
-        const protocolAddress = new SignalProtocolAddress(peerAddress, peerDeviceId);
-        const sessionKey = protocolAddress.toString();
-        let existingSession = await this.store.loadSession(sessionKey);
-        const decoder = new TextDecoder();
-        let ciphertextBinary = "";
-        const ciphertextArray = new Uint8Array(ciphertext);
-        for (let i = 0; i < ciphertextArray.length; i++) {
-            ciphertextBinary += String.fromCharCode(ciphertextArray[i]);
-        }
-        let retryCount = 0;
-        const maxRetries = 5; // 【用户要求】加大容错窗口，让消息可以重试更多次
-        // 【新增】如果是 WHISPER_MESSAGE 且没有现有会话，直接抛出可重试错误
-        if (msgType !== MessageType.PREKEY_MESSAGE && !existingSession) {
-            console.log(`[Session] 收到 WHISPER_MESSAGE 但无现有会话，需要等待 PREKEY_MESSAGE`);
-            throw new Error("收到 WHISPER_MESSAGE 但无现有会话，需要等待 PREKEY_MESSAGE");
-        }
-        while (retryCount <= maxRetries) {
-            try {
-                const cipher = new SessionCipher(this.store, protocolAddress);
-                let plaintextBuffer;
-                if (msgType === MessageType.PREKEY_MESSAGE) {
-                    console.log(`[Session] 收到 PREKEY_MESSAGE，尝试解密 (尝试 ${retryCount + 1}/${maxRetries + 1})`);
-                    try {
-                        // 【用户要求】先用尝试解密（真解密可能推动会话密钥变更，极度重要！）
-                        plaintextBuffer =
-                            await cipher.decryptPreKeyWhisperMessage(ciphertextBinary, "binary");
-                        console.log(`[Session] PREKEY_MESSAGE 解密成功！`);
-                        return decoder.decode(plaintextBuffer);
-                    }
-                    catch (decryptError) {
-                        console.log(`[Session] 直接解密 PREKEY_MESSAGE 失败: ${decryptError instanceof Error ? decryptError.message : String(decryptError)}`);
-                        // 如果解密失败，再处理 PREKEY 竞争的情况（但只在第一次尝试时处理）
-                        if (existingSession && retryCount === 0) {
-                            // 【用户要求】PREKEY 竞争时，双方始终优先以小地址发送的消息为最终依据
-                            const myAddr = myAddress.toLowerCase();
-                            const peerAddr = peerAddress.toLowerCase();
-                            if (myAddr < peerAddr) {
-                                // 我的地址较小，保留我的会话！不处理这个 PREKEY_MESSAGE，稍后重试
-                                console.log(`[Session] 我的地址较小 (${myAddr} < ${peerAddr})，保留我的会话，稍后重试`);
-                                throw new Error("PREKEY 竞争：我的地址较小，保留我的会话");
-                            }
-                            else {
-                                // 我的地址较大，删除我的会话，用对方的 PREKEY_MESSAGE 建立新会话
-                                console.log(`[Session] 我的地址较大 (${myAddr} > ${peerAddr})，删除我的会话，用对方的 PREKEY_MESSAGE 建立新会话`);
-                                await this.store.removeSession(sessionKey);
-                                existingSession = undefined;
-                                // 现在删除了会话，重新尝试解密
-                                console.log(`[Session] 已删除旧会话，重新尝试解密...`);
-                                plaintextBuffer =
-                                    await cipher.decryptPreKeyWhisperMessage(ciphertextBinary, "binary");
-                                console.log(`[Session] PREKEY_MESSAGE 解密成功，新会话已建立`);
-                                return decoder.decode(plaintextBuffer);
-                            }
-                        }
-                        else {
-                            // 没有现有会话，或者不是第一次尝试，重新抛出解密错误
-                            throw decryptError;
-                        }
-                    }
-                }
-                else {
-                    plaintextBuffer = await cipher.decryptWhisperMessage(ciphertextBinary, "binary");
-                }
-                return decoder.decode(plaintextBuffer);
-            }
-            catch (error) {
-                console.error(`[Session Debug] 解密失败 (尝试 ${retryCount + 1}/${maxRetries + 1}):`);
-                console.error(`  错误类型: ${error instanceof Error ? error.constructor.name : typeof error}`);
-                console.error(`  错误消息: ${error instanceof Error ? error.message : String(error)}`);
-                if (error instanceof Error && error.stack) {
-                    console.error(`  堆栈: ${error.stack.split("\n")[0]}`);
-                }
-                console.error(`  上下文:`);
-                console.error(`    - myAddress: ${myAddress}`);
-                console.error(`    - peerAddress: ${peerAddress}`);
-                console.error(`    - msgType: ${msgType} (${msgType === MessageType.PREKEY_MESSAGE ? "PREKEY" : "WHISPER"})`);
-                console.error(`    - sessionKey: ${sessionKey}`);
-                console.error(`    - existingSession: ${existingSession ? "存在" : "不存在"}`);
-                console.error(`    - ciphertext.length: ${ciphertext.byteLength}`);
-                const identityKey = await this.store.getIdentityKeyPair();
-                const regId = await this.store.getLocalRegistrationId();
-                console.error(`    - identityKey: ${identityKey ? "存在" : "缺失"}`);
-                console.error(`    - registrationId: ${regId}`);
-                if (retryCount >= maxRetries) {
-                    throw error;
-                }
-                console.log(`[Session] 尝试重新建立会话...`);
-                try {
-                    if (existingSession) {
-                        console.log(`[Session] 删除旧会话`);
-                        await this.store.removeSession(sessionKey);
-                        existingSession = undefined;
-                    }
-                    if (msgType === MessageType.PREKEY_MESSAGE) {
-                        console.log(`[Session] 收到的是 PREKEY_MESSAGE，等待发送方的 PreKey 即可重建会话`);
-                    }
-                    else {
-                        console.log(`[Session] 收到的是 WHISPER_MESSAGE，需要让对方重新发送 PREKEY_MESSAGE`);
-                    }
-                    retryCount++;
-                    await new Promise((resolve) => setTimeout(resolve, 100));
-                }
-                catch (rebuildError) {
-                    console.error(`[Session] 重新建立会话失败:`, rebuildError);
-                    throw error;
-                }
-            }
-        }
-        throw new MessengerError(MessengerErrorCode.DECRYPTION_FAILED, "Decryption failed after multiple attempts");
-    }
-    /**
-     * 获取本地身份公钥
-     */
-    async getIdentityKey() {
-        const identity = await this.ensureIdentity();
-        return bytesToBase64(arrayBufferToUint8Array(identity.signalIdentity.pubKey));
-    }
-    /**
-     * 获取注册 ID
-     */
-    async getRegistrationId() {
-        const identity = await this.ensureIdentity();
-        return identity.registrationId;
-    }
-}
-export class SessionStateManager {
-    store;
-    constructor(store) {
-        this.store = store;
-    }
-    /**
-     * 保存会话快照
-     */
-    async snapshotSession(sessionKey) {
-        const sessionData = await this.store.loadSession(sessionKey);
-        return {
-            sessionData: sessionData || null,
-            timestamp: Date.now(),
-        };
-    }
-    /**
-     * 回滚会话状态
-     */
-    async rollbackSession(sessionKey, snapshot) {
-        if (snapshot.sessionData) {
-            await this.store.storeSession(sessionKey, snapshot.sessionData);
-            console.log(`[SessionState] 回滚会话: ${sessionKey}`);
-        }
-        else {
-            await this.store.removeSession(sessionKey);
-            console.log(`[SessionState] 清除会话: ${sessionKey}`);
-        }
-    }
-    /**
-     * 提交会话状态（保留新会话）
-     */
-    async commitSession(_sessionKey) {
-        // 新会话已经在 decrypt 过程中保存到存储
-        // 这里可以添加额外的确认逻辑
-        console.log(`[SessionState] 提交新会话`);
-    }
-}
-export class DecryptionEngine {
-    sessionManager;
-    store;
-    constructor(store) {
-        this.store = store;
-        this.sessionManager = new SessionStateManager(store);
-    }
-    /**
-     * 【核心改进】获取接收会话key
-     * 使用 recv: 前缀区分接收会话和发送会话
-     */
-    getRecvSessionKey(peerAddress, deviceId) {
-        return `recv:${peerAddress}.${deviceId}`;
-    }
-    /**
-     * 【核心改进】获取发送会话key
-     * 使用 send: 前缀区分发送会话和接收会话
-     */
-    getSendSessionKey(peerAddress, deviceId) {
-        return `send:${peerAddress}.${deviceId}`;
-    }
-    /**
-     * 统一解密入口
-     * 【改进】使用方向区分的sessionKey管理双向会话
-     */
-    async decryptMessage(myAddress, peerAddress, ciphertext, msgType, peerDeviceId = DEFAULT_DEVICE_ID) {
-        // 【关键改进】使用接收会话key
-        const recvSessionKey = this.getRecvSessionKey(peerAddress, peerDeviceId);
-        // 创建protocolAddress用于Signal Protocol
-        const protocolAddress = new SignalProtocolAddress(peerAddress, peerDeviceId);
-        // 1. 保存会话快照（用于回滚）
-        const snapshot = await this.sessionManager.snapshotSession(recvSessionKey);
-        try {
-            if (msgType === MessageType.PREKEY_MESSAGE) {
-                return await this.handlePreKeyMessage(myAddress, peerAddress, ciphertext, protocolAddress, recvSessionKey, snapshot);
-            }
-            else {
-                return await this.handleWhisperMessage(myAddress, peerAddress, ciphertext, protocolAddress, recvSessionKey, snapshot);
-            }
-        }
-        catch (error) {
-            // 发生错误，回滚会话
-            await this.sessionManager.rollbackSession(recvSessionKey, snapshot);
-            return {
-                success: false,
-                sessionUpdated: false,
-                sessionRolledBack: true,
-                messageType: msgType === MessageType.PREKEY_MESSAGE
-                    ? "PREKEY"
-                    : "WHISPER",
-                error: error instanceof Error ? error.message : String(error),
-            };
-        }
-    }
-    /**
-     * 处理 PREKEY_MESSAGE
-     * 【核心改进】无论大小地址，都保存接收会话
-     * 小地址优先原则只影响发送会话，不影响接收会话
-     */
-    async handlePreKeyMessage(myAddress, peerAddress, ciphertext, protocolAddress, recvSessionKey, snapshot) {
-        console.log(`[Decrypt] 处理 PREKEY_MESSAGE from ${peerAddress}`);
-        const cipher = new SessionCipher(this.store, protocolAddress);
-        const decoder = new TextDecoder();
-        // 尝试解密（这会可能建立新会话）
-        const ciphertextBinary = this.arrayBufferToBinary(ciphertext);
-        const plaintextBuffer = await cipher.decryptPreKeyWhisperMessage(ciphertextBinary, "binary");
-        const plaintext = decoder.decode(plaintextBuffer);
-        console.log(`[Decrypt] PREKEY_MESSAGE 解密成功`);
-        // 【核心改进】无论大小地址，都保存接收会话
-        // 因为PREKEY_MESSAGE意味着对方想要建立会话，我们应该接受
-        await this.sessionManager.commitSession(recvSessionKey);
-        const myAddr = myAddress.toLowerCase();
-        const peerAddr = peerAddress.toLowerCase();
-        if (myAddr < peerAddr) {
-            // 我是小地址，我的发送会话优先
-            // 但接收会话仍然保存（用于解密对方的消息）
-            console.log(`[Decrypt] 小地址(${myAddr})保存接收会话用于解密，发送会话保持不变`);
-        }
-        else {
-            // 我是大地址，完全接受对方的会话
-            console.log(`[Decrypt] 大地址(${myAddr})接受新会话`);
-        }
-        return {
-            success: true,
-            plaintext,
-            sessionUpdated: true,
-            sessionRolledBack: false,
-            messageType: "PREKEY",
-        };
-    }
-    /**
-     * 处理 WHISPER_MESSAGE
-     * 【改进】使用接收会话key查找会话
-     */
-    async handleWhisperMessage(_myAddress, peerAddress, ciphertext, protocolAddress, recvSessionKey, snapshot) {
-        console.log(`[Decrypt] 处理 WHISPER_MESSAGE from ${peerAddress}`);
-        // 【改进】检查接收会话是否存在
-        const existingSession = await this.store.loadSession(recvSessionKey);
-        if (!existingSession) {
-            console.log(`[Decrypt] 无接收会话，WHISPER_MESSAGE 需要等待 PREKEY`);
-            await this.sessionManager.rollbackSession(recvSessionKey, snapshot);
-            return {
-                success: false,
-                sessionUpdated: false,
-                sessionRolledBack: false,
-                messageType: "WHISPER",
-                error: "NO_SESSION",
-            };
-        }
-        const cipher = new SessionCipher(this.store, protocolAddress);
-        const decoder = new TextDecoder();
-        // 尝试解密
-        const ciphertextBinary = this.arrayBufferToBinary(ciphertext);
-        const plaintextBuffer = await cipher.decryptWhisperMessage(ciphertextBinary, "binary");
-        console.log(`[Decrypt] WHISPER_MESSAGE 解密成功`);
-        return {
-            success: true,
-            plaintext: decoder.decode(plaintextBuffer),
-            sessionUpdated: true,
-            sessionRolledBack: false,
-            messageType: "WHISPER",
-        };
-    }
-    arrayBufferToBinary(buffer) {
-        const array = new Uint8Array(buffer);
-        let binary = "";
-        for (let i = 0; i < array.length; i++) {
-            binary += String.fromCharCode(array[i]);
-        }
-        return binary;
-    }
-}
-//# sourceMappingURL=session.js.map
+import{KeyHelper,SessionBuilder,SessionCipher,SignalProtocolAddress}from'libsignal-protocol-typescript';import{SignalProtocolStorage}from'./storage.js';import{MessengerServerClient}from'./server.js';import{recoverXed25519FromX25519PrivateKey,arrayBufferToUint8Array,bytesToBase64,base64ToBytes}from'./crypto.js';import{MessageType,DEFAULT_MESSENGER_CONFIG,MessengerError,MessengerErrorCode,DEFAULT_DEVICE_ID}from'./types.js';async function getAccount(){const {Account:a}=await import('../local/account.js');return a['Instance']();}export class MessengerSession{['store'];['serverClient'];['config'];['identity']=null;constructor(a,b){this['store']=new SignalProtocolStorage(a),this['config']={...DEFAULT_MESSENGER_CONFIG,...b},this['serverClient']=new MessengerServerClient(this['config']);}async['ensureIdentity'](a){if(this['identity'])return this['identity'];const b=await this['store']['getIdentityKeyPair'](),c=await this['store']['getLocalRegistrationId']();if(b&&c){const j=new Uint8Array(b['privKey']),k=recoverXed25519FromX25519PrivateKey(j);return this['identity']={'xed25519':k,'signalIdentity':b,'registrationId':c},this['identity'];}if(!a)throw new MessengerError(MessengerErrorCode['IDENTITY_NOT_FOUND'],'userAddress\x20is\x20required\x20to\x20derive\x20identity');const {privateKey:d,publicKey:e}=await(await getAccount())['deriveX25519KeyPair'](a),f=this['deriveRegistrationId'](e),g=new Uint8Array(0x21);g[0x0]=0x5,g['set'](e,0x1);const h={'privKey':d['slice']()['buffer'],'pubKey':g['slice']()['buffer']};await this['store']['setIdentity'](h,f);const i=recoverXed25519FromX25519PrivateKey(d);return this['identity']={'xed25519':i,'signalIdentity':h,'registrationId':f},this['identity'];}['deriveRegistrationId'](a){const b=a[0x0]<<0x8|a[0x1];return b===0x0?0x1:b;}async['registerDevice'](a){const b=await this['ensureIdentity'](a),c=0x1;let d,e,f,g=![];const h=await this['store']['loadSignedPreKeyWithSignature'](c);h?(e=arrayBufferToUint8Array(h['pubKey']),f=arrayBufferToUint8Array(h['signature']),d={'keyId':c,'keyPair':{'pubKey':h['pubKey'],'privKey':h['privKey']},'signature':h['signature']}):(d=await KeyHelper['generateSignedPreKey'](b['signalIdentity'],c),e=arrayBufferToUint8Array(d['keyPair']['pubKey']),f=arrayBufferToUint8Array(d['signature']),g=!![]);const i=await this['generatePreKeyBatch'](this['config']['prekey_count'],a),j=arrayBufferToUint8Array(b['signalIdentity']['pubKey']),k=await(await getAccount())['get'](a,![]);if(!k?.['pubkey'])throw new MessengerError(MessengerErrorCode['IDENTITY_NOT_FOUND'],'Account\x20not\x20found\x20for\x20'+a);const l=Date['now'](),m=this['generateNonce'](),n='register:'+k['pubkey']+':'+l+':'+m,o=await(await getAccount())['signData'](a,n),p=Buffer['from'](o['signature']['slice'](0x2),'hex'),q={'userAddress':a,'deviceId':DEFAULT_DEVICE_ID,'registrationId':b['registrationId'],'identityKey':bytesToBase64(j),'signedPrekey':{'keyId':c,'publicKey':bytesToBase64(e),'signature':bytesToBase64(f)},'prekeys':i,'publicKey':k['pubkey'],'signatureScheme':'ED25519','signature':bytesToBase64(p),'timestamp':l,'nonce':m};console['log']('[Session\x20Debug]\x20Sending\x20register\x20request\x20to\x20server...'),await this['serverClient']['registerDevice'](q),console['log']('[Session\x20Debug]\x20Server\x20register\x20request\x20successful!'),console['log']('[Session\x20Debug]\x20Verifying\x20registration\x20complete...'),await this['verifyRegistrationComplete'](a),console['log']('[Session\x20Debug]\x20Registration\x20verification\x20complete!'),g&&await this['store']['storeSignedPreKeyWithSignature'](c,d['keyPair'],f['buffer']['slice'](0x0));}async['verifyRegistrationComplete'](a,b=0xa,c=0x1f4){for(let d=0x0;d<b;d++){try{const e=await this['serverClient']['getPrekeyStatus'](a);console['log']('Registration\x20verified\x20for\x20'+a+',\x20prekeys:\x20'+e['currentCount']+'/'+e['maxAllowed']);return;}catch(f){if(f?.['message']?.['includes']('404')||f?.['status']===0x194){if(d<b-0x1){console['log']('Waiting\x20for\x20registration\x20to\x20complete...\x20('+(d+0x1)+'/'+b+')'),await new Promise(g=>setTimeout(g,c));continue;}}throw f;}}throw new MessengerError(MessengerErrorCode['REGISTRATION_FAILED'],'Registration\x20verification\x20failed\x20after\x20'+b+'\x20attempts');}async['isDeviceRegistered'](a){try{const b=await this['store']['loadSignedPreKeyWithSignature'](0x1);if(!b)return![];const c=await this['serverClient']['getPrekeyStatus'](a);return!![];}catch(d){if(d?.['message']?.['includes']('404')||d?.['status']===0x194)return![];return![];}}async['generatePreKeyBatch'](a,b){if(a<=0x0)return[];const c=await this['store']['getMeta']();let d=c['nextPreKeyId']||0x1;const e=[];for(let f=0x0;f<a;f++){const g=d+f,h=await this['store']['loadPreKey'](g);if(h){const n=new Uint8Array(h['pubKey']),o=bytesToBase64(n),p=await(await getAccount())['signData'](b,n),q=Buffer['from'](p['signature']['slice'](0x2),'hex');e['push']({'keyId':g,'publicKey':o,'signature':bytesToBase64(q)});continue;}const j=await KeyHelper['generatePreKey'](g),k=new Uint8Array(j['keyPair']['pubKey']),l=await(await getAccount())['signData'](b,k),m=Buffer['from'](l['signature']['slice'](0x2),'hex');await this['store']['storePreKey'](g,j['keyPair']),e['push']({'keyId':g,'publicKey':bytesToBase64(k),'signature':bytesToBase64(m)});}return d+=a,await this['store']['setMeta']({'nextPreKeyId':d}),e;}async['ensurePreKeys'](a,b=![]){const c=await this['serverClient']['getPrekeyStatus'](a);if(!b&&c['currentCount']>=c['maxAllowed'])return;const d=c['maxAllowed']-c['currentCount'];if(d<=0x0)return;await this['ensureIdentity'](a);const e=await this['generatePreKeyBatch'](d,a);if(e['length']===0x0)return;const f=await(await getAccount())['get'](a,![]);if(!f?.['pubkey'])throw new MessengerError(MessengerErrorCode['IDENTITY_NOT_FOUND'],'Account\x20not\x20found\x20for\x20'+a);const g=Date['now'](),h=this['generateNonce'](),i='upload_prekeys:'+f['pubkey']+':'+g+':'+h,j=await(await getAccount())['signData'](a,i),k=Buffer['from'](j['signature']['slice'](0x2),'hex');await this['serverClient']['uploadPreKeys']({'userAddress':a,'prekeys':e,'publicKey':f['pubkey'],'signatureScheme':'ED25519','signature':bytesToBase64(k),'timestamp':g,'nonce':h});}['generateNonce'](){const a=new Uint8Array(0x10);return crypto['getRandomValues'](a),Array['from'](a,c=>c['toString'](0x10)['padStart'](0x2,'0'))['join']('');}async['establishSession'](a,b,c=DEFAULT_DEVICE_ID,d){const e=new SignalProtocolAddress(b,c),f=await this['store']['loadSession'](e['toString']());if(f)return;if(!d){const t=await(await getAccount())['get'](a,![]);if(!t?.['pubkey'])throw new MessengerError(MessengerErrorCode['IDENTITY_NOT_FOUND'],'Account\x20not\x20found\x20for\x20'+a);const u=Date['now'](),v=this['generateNonce'](),w=t['pubkey'],x='get_bundle:'+a+':'+u+':'+v,y=await(await getAccount())['signData'](a,x),z=Buffer['from'](y['signature']['slice'](0x2),'hex');d=await this['serverClient']['fetchRemoteBundle'](b,a,w,{'signatureScheme':'ED25519','signature':bytesToBase64(new Uint8Array(z)),'timestamp':u,'nonce':v},c);}const g=d['oneTimePrekey'],h=d['signedPrekey'];if(!h)throw new MessengerError(MessengerErrorCode['IDENTITY_NOT_FOUND'],'No\x20signed\x20prekey\x20available\x20for\x20'+b);const i=base64ToBytes(d['identityKey']),j=new Uint8Array(i),k=base64ToBytes(h['publicKey']),l=base64ToBytes(h['signature']),m=new Uint8Array(k);let n=undefined;if(g){const A=base64ToBytes(g['publicKey']),B=new Uint8Array(A);n={'keyId':g['keyId'],'publicKey':B['buffer']['slice'](B['byteOffset'],B['byteOffset']+B['byteLength'])};}const o={'registrationId':d['registrationId'],'identityKey':j['buffer']['slice'](j['byteOffset'],j['byteOffset']+j['byteLength']),'signedPreKey':{'keyId':h['keyId'],'publicKey':m['buffer']['slice'](m['byteOffset'],m['byteOffset']+m['byteLength']),'signature':new Uint8Array(l)['buffer']['slice'](l['byteOffset'],l['byteOffset']+l['byteLength'])},'preKey':n},p=new SessionBuilder(this['store'],e);await p['processPreKey'](o),await this['store']['saveIdentity'](e['toString'](),o['identityKey']);const q=e['toString'](),r='send:'+b+'.'+c,s=await this['store']['loadSession'](q);s&&(await this['store']['storeSession'](r,s),console['log']('[Session]\x20会话已保存到发送key:\x20'+r));}async['encryptMessage'](a,b,c,d=DEFAULT_DEVICE_ID){const e=new SignalProtocolAddress(b,d),f=e['toString'](),g='send:'+b+'.'+d,h='recv:'+b+'.'+d;let i=await this['store']['loadSession'](f),j=await this['store']['loadSession'](g);const k=await this['store']['loadSession'](h);!i&&k&&(console['log']('[Session]\x20复制接收会话到默认key:\x20'+b),await this['store']['storeSession'](f,k),i=k);!j&&k&&(console['log']('[Session]\x20复制接收会话到发送会话:\x20'+b),await this['store']['storeSession'](g,k),j=k);let l=i||j,m=!l,n=0x0;const o=0x5;while(n<=o){try{if(m){console['log']('[Session]\x20建立新会话\x20(尝试\x20'+(n+0x1)+'/'+(o+0x1)+')');const t=await(await getAccount())['get'](a,![]);if(!t?.['pubkey'])throw new MessengerError(MessengerErrorCode['IDENTITY_NOT_FOUND'],'Account\x20not\x20found\x20for\x20'+a);const u=Date['now'](),v=this['generateNonce'](),w=t['pubkey'],x='get_bundle:'+a+':'+u+':'+v,y=await(await getAccount())['signData'](a,x),z=Buffer['from'](y['signature']['slice'](0x2),'hex'),A=await this['serverClient']['fetchRemoteBundle'](b,a,w,{'signatureScheme':'ED25519','signature':bytesToBase64(new Uint8Array(z)),'timestamp':u,'nonce':v},d);await this['establishSession'](a,b,d,A);}const p=new SessionCipher(this['store'],e),q=new TextEncoder(),r=await p['encrypt'](q['encode'](c)['buffer']);let s;if(typeof r['body']==='string'){const B=Buffer['from'](r['body'],'binary');s=new Uint8Array(B)['buffer'];}else{if(r['body'])s=r['body'];else throw new MessengerError(MessengerErrorCode['ENCRYPTION_FAILED'],'Cipher\x20message\x20body\x20is\x20empty');}return{'type':r['type'],'body':s,'registrationId':r['registrationId']};}catch(C){console['error']('[Session]\x20加密失败\x20(尝试\x20'+(n+0x1)+'/'+(o+0x1)+'):',C);if(n>=o)throw C;console['log']('[Session]\x20尝试删除旧会话并重新建立...');try{l&&(await this['store']['removeSession'](f),await this['store']['removeSession'](g),await this['store']['removeSession'](h),l=undefined),m=!![],n++,await new Promise(D=>setTimeout(D,0x64));}catch(D){console['error']('[Session]\x20重新建立会话失败:',D);throw C;}}}throw new MessengerError(MessengerErrorCode['ENCRYPTION_FAILED'],'Encryption\x20failed\x20after\x20multiple\x20attempts');}async['decryptMessage'](a,b,c,d,e=DEFAULT_DEVICE_ID){const f=new SignalProtocolAddress(b,e),g=f['toString']();let h=await this['store']['loadSession'](g);const j=new TextDecoder();let k='';const l=new Uint8Array(c);for(let o=0x0;o<l['length'];o++){k+=String['fromCharCode'](l[o]);}let m=0x0;const n=0x5;if(d!==MessageType['PREKEY_MESSAGE']&&!h){console['log']('[Session]\x20收到\x20WHISPER_MESSAGE\x20但无现有会话，需要等待\x20PREKEY_MESSAGE');throw new Error('收到\x20WHISPER_MESSAGE\x20但无现有会话，需要等待\x20PREKEY_MESSAGE');}while(m<=n){try{const p=new SessionCipher(this['store'],f);let q;if(d===MessageType['PREKEY_MESSAGE']){console['log']('[Session]\x20收到\x20PREKEY_MESSAGE，尝试解密\x20(尝试\x20'+(m+0x1)+'/'+(n+0x1)+')');try{return q=await p['decryptPreKeyWhisperMessage'](k,'binary'),console['log']('[Session]\x20PREKEY_MESSAGE\x20解密成功！'),j['decode'](q);}catch(r){console['log']('[Session]\x20直接解密\x20PREKEY_MESSAGE\x20失败:\x20'+(r instanceof Error?r['message']:String(r)));if(h&&m===0x0){const s=a['toLowerCase'](),t=b['toLowerCase']();if(s<t){console['log']('[Session]\x20我的地址较小\x20('+s+'\x20<\x20'+t+')，保留我的会话，稍后重试');throw new Error('PREKEY\x20竞争：我的地址较小，保留我的会话');}else return console['log']('[Session]\x20我的地址较大\x20('+s+'\x20>\x20'+t+')，删除我的会话，用对方的\x20PREKEY_MESSAGE\x20建立新会话'),await this['store']['removeSession'](g),h=undefined,console['log']('[Session]\x20已删除旧会话，重新尝试解密...'),q=await p['decryptPreKeyWhisperMessage'](k,'binary'),console['log']('[Session]\x20PREKEY_MESSAGE\x20解密成功，新会话已建立'),j['decode'](q);}else throw r;}}else q=await p['decryptWhisperMessage'](k,'binary');return j['decode'](q);}catch(u){console['error']('[Session\x20Debug]\x20解密失败\x20(尝试\x20'+(m+0x1)+'/'+(n+0x1)+'):'),console['error']('\x20\x20错误类型:\x20'+(u instanceof Error?u['constructor']['name']:typeof u)),console['error']('\x20\x20错误消息:\x20'+(u instanceof Error?u['message']:String(u)));u instanceof Error&&u['stack']&&console['error']('\x20\x20堆栈:\x20'+u['stack']['split']('\x0a')[0x0]);console['error']('\x20\x20上下文:'),console['error']('\x20\x20\x20\x20-\x20myAddress:\x20'+a),console['error']('\x20\x20\x20\x20-\x20peerAddress:\x20'+b),console['error']('\x20\x20\x20\x20-\x20msgType:\x20'+d+'\x20('+(d===MessageType['PREKEY_MESSAGE']?'PREKEY':'WHISPER')+')'),console['error']('\x20\x20\x20\x20-\x20sessionKey:\x20'+g),console['error']('\x20\x20\x20\x20-\x20existingSession:\x20'+(h?'存在':'不存在')),console['error']('\x20\x20\x20\x20-\x20ciphertext.length:\x20'+c['byteLength']);const v=await this['store']['getIdentityKeyPair'](),w=await this['store']['getLocalRegistrationId']();console['error']('\x20\x20\x20\x20-\x20identityKey:\x20'+(v?'存在':'缺失')),console['error']('\x20\x20\x20\x20-\x20registrationId:\x20'+w);if(m>=n)throw u;console['log']('[Session]\x20尝试重新建立会话...');try{h&&(console['log']('[Session]\x20删除旧会话'),await this['store']['removeSession'](g),h=undefined),d===MessageType['PREKEY_MESSAGE']?console['log']('[Session]\x20收到的是\x20PREKEY_MESSAGE，等待发送方的\x20PreKey\x20即可重建会话'):console['log']('[Session]\x20收到的是\x20WHISPER_MESSAGE，需要让对方重新发送\x20PREKEY_MESSAGE'),m++,await new Promise(x=>setTimeout(x,0x64));}catch(x){console['error']('[Session]\x20重新建立会话失败:',x);throw u;}}}throw new MessengerError(MessengerErrorCode['DECRYPTION_FAILED'],'Decryption\x20failed\x20after\x20multiple\x20attempts');}async['getIdentityKey'](){const a=await this['ensureIdentity']();return bytesToBase64(arrayBufferToUint8Array(a['signalIdentity']['pubKey']));}async['getRegistrationId'](){const a=await this['ensureIdentity']();return a['registrationId'];}}export class SessionStateManager{['store'];constructor(a){this['store']=a;}async['snapshotSession'](a){const b=await this['store']['loadSession'](a);return{'sessionData':b||null,'timestamp':Date['now']()};}async['rollbackSession'](a,b){b['sessionData']?(await this['store']['storeSession'](a,b['sessionData']),console['log']('[SessionState]\x20回滚会话:\x20'+a)):(await this['store']['removeSession'](a),console['log']('[SessionState]\x20清除会话:\x20'+a));}async['commitSession'](a){console['log']('[SessionState]\x20提交新会话');}}export class DecryptionEngine{['sessionManager'];['store'];constructor(a){this['store']=a,this['sessionManager']=new SessionStateManager(a);}['getRecvSessionKey'](a,b){return'recv:'+a+'.'+b;}['getSendSessionKey'](a,b){return'send:'+a+'.'+b;}async['decryptMessage'](a,b,c,d,e=DEFAULT_DEVICE_ID){const f=this['getRecvSessionKey'](b,e),g=new SignalProtocolAddress(b,e),h=await this['sessionManager']['snapshotSession'](f);try{return d===MessageType['PREKEY_MESSAGE']?await this['handlePreKeyMessage'](a,b,c,g,f,h):await this['handleWhisperMessage'](a,b,c,g,f,h);}catch(i){return await this['sessionManager']['rollbackSession'](f,h),{'success':![],'sessionUpdated':![],'sessionRolledBack':!![],'messageType':d===MessageType['PREKEY_MESSAGE']?'PREKEY':'WHISPER','error':i instanceof Error?i['message']:String(i)};}}async['handlePreKeyMessage'](a,b,c,d,e,f){console['log']('[Decrypt]\x20处理\x20PREKEY_MESSAGE\x20from\x20'+b);const g=new SessionCipher(this['store'],d),h=new TextDecoder(),i=this['arrayBufferToBinary'](c),j=await g['decryptPreKeyWhisperMessage'](i,'binary'),k=h['decode'](j);console['log']('[Decrypt]\x20PREKEY_MESSAGE\x20解密成功'),await this['sessionManager']['commitSession'](e);const l=a['toLowerCase'](),m=b['toLowerCase']();return l<m?console['log']('[Decrypt]\x20小地址('+l+')保存接收会话用于解密，发送会话保持不变'):console['log']('[Decrypt]\x20大地址('+l+')接受新会话'),{'success':!![],'plaintext':k,'sessionUpdated':!![],'sessionRolledBack':![],'messageType':'PREKEY'};}async['handleWhisperMessage'](a,b,c,d,e,f){console['log']('[Decrypt]\x20处理\x20WHISPER_MESSAGE\x20from\x20'+b);const g=await this['store']['loadSession'](e);if(!g)return console['log']('[Decrypt]\x20无接收会话，WHISPER_MESSAGE\x20需要等待\x20PREKEY'),await this['sessionManager']['rollbackSession'](e,f),{'success':![],'sessionUpdated':![],'sessionRolledBack':![],'messageType':'WHISPER','error':'NO_SESSION'};const h=new SessionCipher(this['store'],d),i=new TextDecoder(),j=this['arrayBufferToBinary'](c),k=await h['decryptWhisperMessage'](j,'binary');return console['log']('[Decrypt]\x20WHISPER_MESSAGE\x20解密成功'),{'success':!![],'plaintext':i['decode'](k),'sessionUpdated':!![],'sessionRolledBack':![],'messageType':'WHISPER'};}['arrayBufferToBinary'](a){const b=new Uint8Array(a);let c='';for(let d=0x0;d<b['length'];d++){c+=String['fromCharCode'](b[d]);}return c;}}