@icure/api 6.4.0 → 7.0.0-beta.1

package/icc-x-api/icc-helement-x-api.js

@@ -14,8 +14,6 @@ const icc_api_1 = require("../icc-api");
 const models = require("../icc-api/model/models");
 const _ = require("lodash");
 const moment = require("moment");
-const binary_utils_1 = require("./utils/binary-utils");
-const utils_1 = require("./utils");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
 class IccHelementXApi extends icc_api_1.IccHelementApi {
     constructor(host, headers, crypto, dataOwnerApi, encryptedKeys = ['descr', 'note'], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
@@ -28,47 +26,54 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
         this.dataOwnerApi = dataOwnerApi;
         this.encryptedKeys = encryptedKeys;
     }
-    newInstance(user, patient, h, confidential = false, delegates = []) {
-        const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user);
-        const helement = _.assign({
-            id: this.crypto.randomUuid(),
-            _type: 'org.taktik.icure.entities.HealthElement',
-            created: new Date().getTime(),
-            modified: new Date().getTime(),
-            responsible: dataOwnerId,
-            author: user.id,
-            codes: [],
-            tags: [],
-            healthElementId: this.crypto.randomUuid(),
-            openingDate: parseInt(moment().format('YYYYMMDDHHmmss')),
-        }, h || {});
-        return this.initDelegationsAndEncryptionKeys(helement, patient, user, confidential, delegates);
-    }
-    initDelegationsAndEncryptionKeys(healthElement, patient, user, confidential, delegates = []) {
-        const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user);
-        return this.crypto.extractPreferredSfk(patient, dataOwnerId, confidential).then((key) => __awaiter(this, void 0, void 0, function* () {
-            if (!key) {
-                console.error(`SFK cannot be found for Health element ${key}. The healthElement will not be reachable from the patient side`);
-            }
-            const dels = yield this.crypto.initObjectDelegations(healthElement, patient, dataOwnerId, key !== null && key !== void 0 ? key : null);
-            const eks = yield this.crypto.initEncryptionKeys(healthElement, dataOwnerId);
-            _.extend(healthElement, {
-                delegations: dels.delegations,
-                cryptedForeignKeys: dels.cryptedForeignKeys,
-                secretForeignKeys: dels.secretForeignKeys,
-                encryptionKeys: eks.encryptionKeys,
-            });
-            let promise = Promise.resolve(healthElement);
-            _.uniq(delegates.concat(user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.medicalInformation || []) : [])).forEach((delegateId) => (promise = promise.then((healthElement) => this.crypto.addDelegationsAndEncryptionKeys(patient, healthElement, dataOwnerId, delegateId, dels.secretId, eks.secretId).catch((e) => {
-                console.log(e);
-                return healthElement;
-            }))));
-            (user.autoDelegations && user.autoDelegations.anonymousMedicalInformation ? user.autoDelegations.anonymousMedicalInformation : []).forEach((delegateId) => (promise = promise.then((healthElement) => this.crypto.addDelegationsAndEncryptionKeys(patient, healthElement, dataOwnerId, delegateId, null, eks.secretId).catch((e) => {
-                console.log(e);
-                return healthElement;
-            }))));
-            return promise;
-        }));
+    /**
+     * Creates a new instance of health element with initialised encryption metadata (not in the database).
+     * @param user the current user.
+     * @param patient the patient this health element refers to.
+     * @param h initialised data for the health element. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify
+     * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.
+     * @param options optional parameters:
+     * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
+     * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
+     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
+     * access will be possible.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
+     * secret id of patient known by the topmost parent in the current data owner hierarchy.
+     * - confidential: if true, the entity will be created as confidential. Confidential entities are not shared with auto-delegations, and the default
+     * foreign key used is any key that is not shared with any of the data owner parents. By default entities are created as non-confidential.
+     * @return a new instance of health element.
+     */
+    newInstance(user, patient, h, options = {}) {
+        var _a, _b, _c, _d, _e, _f;
+        return __awaiter(this, void 0, void 0, function* () {
+            const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user);
+            const helement = _.assign({
+                id: this.crypto.primitives.randomUuid(),
+                _type: 'org.taktik.icure.entities.HealthElement',
+                created: new Date().getTime(),
+                modified: new Date().getTime(),
+                responsible: dataOwnerId,
+                author: user.id,
+                codes: [],
+                tags: [],
+                healthElementId: this.crypto.primitives.randomUuid(),
+                openingDate: parseInt(moment().format('YYYYMMDDHHmmss')),
+            }, h || {});
+            const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
+            if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
+                throw new Error('Can only initialise entities as current data owner.');
+            const sfk = (_a = options.preferredSfk) !== null && _a !== void 0 ? _a : (!!options.confidential
+                ? yield this.crypto.confidential.getConfidentialSecretId(patient)
+                : yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient));
+            if (!sfk)
+                throw new Error(`Couldn't find any sfk of parent patient ${patient.id} for confidential=${!!options.confidential}`);
+            const extraDelegations = [
+                ...Object.keys((_b = options.additionalDelegates) !== null && _b !== void 0 ? _b : {}),
+                ...(options.confidential ? [] : [...((_d = (_c = user.autoDelegations) === null || _c === void 0 ? void 0 : _c.all) !== null && _d !== void 0 ? _d : []), ...((_f = (_e = user.autoDelegations) === null || _e === void 0 ? void 0 : _e.medicalInformation) !== null && _f !== void 0 ? _f : [])]),
+            ];
+            const initialisationInfo = yield this.crypto.entities.entityWithInitialisedEncryptedMetadata(helement, patient.id, sfk, true, extraDelegations);
+            return new models.HealthElement(initialisationInfo.updatedEntity);
+        });
     }
     createHealthElement(body) {
         throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption');
@@ -88,7 +93,7 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
         return bodies
             ? this.encrypt(user, bodies.map((c) => _.cloneDeep(c)))
                 .then((hes) => super.createHealthElements(hes))
-                .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes))
+                .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))
             : Promise.resolve(null);
     }
     getHealthElement(healthElementId) {
@@ -104,7 +109,7 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
         throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption');
     }
     getHealthElementsWithUser(user, body) {
-        return super.getHealthElements(body).then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes));
+        return super.getHealthElements(body).then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes));
     }
     newHealthElementDelegations(healthElementId, body) {
         throw new Error('Cannot call a method that returns health element without providing a user for de/encryption');
@@ -125,9 +130,10 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
         return super.findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes));
     }
     findHealthElementsByHCPartyAndPatientWithUser(user, hcPartyId, patient, usingPost = false) {
-        return this.crypto.extractSFKsHierarchyFromDelegations(patient, hcPartyId).then((keysAndHcPartyId) => {
-            var _a;
-            const keys = (_a = keysAndHcPartyId.find((secretForeignKeys) => secretForeignKeys.hcpartyId == hcPartyId)) === null || _a === void 0 ? void 0 : _a.extractedKeys;
+        var _a;
+        return __awaiter(this, void 0, void 0, function* () {
+            let keysAndHcPartyId = yield this.crypto.entities.secretIdsForHcpHierarchyOf(patient);
+            const keys = (_a = keysAndHcPartyId.find((secretForeignKeys) => secretForeignKeys.ownerId == hcPartyId)) === null || _a === void 0 ? void 0 : _a.extracted;
             if (keys == undefined) {
                 throw Error('No delegation for user');
             }
@@ -140,12 +146,13 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
         throw new Error('Cannot call a method that returns health element without providing a user for de/encryption');
     }
     modifyHealthElementWithUser(user, body) {
-        return body
-            ? this.encrypt(user, [_.cloneDeep(body)])
-                .then((hes) => super.modifyHealthElement(hes[0]))
-                .then((he) => this.decryptWithUser(user, [he]))
-                .then((hes) => hes[0])
-            : Promise.resolve(null);
+        return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null);
+    }
+    modifyAs(dataOwner, body) {
+        return this.encryptAs(dataOwner, [_.cloneDeep(body)])
+            .then((hes) => super.modifyHealthElement(hes[0]))
+            .then((he) => this.decrypt(dataOwner, [he]))
+            .then((hes) => hes[0]);
     }
     modifyHealthElements(body) {
         throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption');
@@ -154,7 +161,7 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
         return bodies
             ? this.encrypt(user, bodies.map((c) => _.cloneDeep(c)))
                 .then((hes) => super.modifyHealthElements(hes))
-                .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes))
+                .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))
             : Promise.resolve(null);
     }
     // noinspection JSUnusedGlobalSymbols
@@ -176,15 +183,15 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
      * @param usingPost
      */
     findBy(hcpartyId, patient, keepObsoleteVersions = false, usingPost = false) {
-        return this.crypto
-            .extractSFKsHierarchyFromDelegations(patient, hcpartyId)
+        return this.crypto.entities
+            .secretIdsForHcpHierarchyOf(patient)
             .then((secretForeignKeys) => secretForeignKeys && secretForeignKeys.length > 0
             ? Promise.all(secretForeignKeys
                 .reduce((acc, level) => {
                 return acc.concat([
                     {
-                        hcpartyId: level.hcpartyId,
-                        extractedKeys: level.extractedKeys.filter((key) => !acc.some((previousLevel) => previousLevel.extractedKeys.includes(key))),
+                        hcpartyId: level.ownerId,
+                        extractedKeys: level.extracted.filter((key) => !acc.some((previousLevel) => previousLevel.extractedKeys.includes(key))),
                     },
                 ]);
             }, [])
@@ -220,69 +227,16 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
             .then((helements) => this.decrypt(hcPartyId, helements));
     }
     encrypt(user, healthElements) {
-        const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user);
-        return Promise.all(healthElements.map((he) => (he.encryptionKeys && Object.keys(he.encryptionKeys).some((k) => !!he.encryptionKeys[k].length)
-            ? Promise.resolve(he)
-            : this.initEncryptionKeys(user, he))
-            .then((healthElement) => this.crypto.extractKeysFromDelegationsForHcpHierarchy(dataOwnerId, healthElement.id, healthElement.encryptionKeys))
-            .then((sfks) => this.crypto.AES.importKey('raw', (0, binary_utils_1.hex2ua)(sfks.extractedKeys[0].replace(/-/g, ''))))
-            .then((key) => (0, utils_1.crypt)(he, (obj) => this.crypto.AES.encrypt(key, (0, binary_utils_1.utf8_2ua)(JSON.stringify(obj, (k, v) => {
-            return v instanceof ArrayBuffer || v instanceof Uint8Array
-                ? (0, binary_utils_1.b2a)(new Uint8Array(v).reduce((d, b) => d + String.fromCharCode(b), ''))
-                : v;
-        }))), this.encryptedKeys))));
-    }
-    initEncryptionKeys(user, he) {
-        const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user);
-        return this.crypto.initEncryptionKeys(he, dataOwnerId).then((eks) => {
-            let promise = Promise.resolve(_.extend(he, {
-                encryptionKeys: eks.encryptionKeys,
-            }));
-            (user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.medicalInformation || []) : []).forEach((delegateId) => (promise = promise.then((healthElement) => this.crypto
-                .appendEncryptionKeys(healthElement, dataOwnerId, delegateId, eks.secretId)
-                .then((extraEks) => {
-                return _.extend(extraEks.modifiedObject, {
-                    encryptionKeys: extraEks.encryptionKeys,
-                });
-            })
-                .catch((e) => {
-                console.log(e.message);
-                return healthElement;
-            }))));
-            return promise;
-        });
+        return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), healthElements);
+    }
+    encryptAs(owner, healthElements) {
+        return Promise.all(healthElements.map((he) => this.crypto.entities.tryEncryptEntity(he, owner, this.encryptedKeys, false, true, (x) => new models.HealthElement(x))));
     }
     decryptWithUser(user, hes) {
-        return this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes);
+        return this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes);
     }
     decrypt(dataOwnerId, hes) {
-        return Promise.all(hes.map((he) => this.crypto
-            .extractKeysFromDelegationsForHcpHierarchy(dataOwnerId, he.id, _.size(he.encryptionKeys) ? he.encryptionKeys : he.delegations)
-            .then(({ extractedKeys: sfks }) => {
-            if (!sfks || !sfks.length) {
-                console.log('Cannot decrypt helement', he.id);
-                return Promise.resolve(he);
-            }
-            if (he.encryptedSelf) {
-                return this.crypto.AES.importKey('raw', (0, binary_utils_1.hex2ua)(sfks[0].replace(/-/g, ''))).then((key) => new Promise((resolve) => this.crypto.AES.decrypt(key, (0, binary_utils_1.string2ua)((0, binary_utils_1.a2b)(he.encryptedSelf))).then((dec) => {
-                    let jsonContent;
-                    try {
-                        jsonContent = dec && (0, binary_utils_1.ua2utf8)(dec);
-                        jsonContent && _.assign(he, JSON.parse(jsonContent));
-                    }
-                    catch (e) {
-                        console.log('Cannot parse he', he.id, jsonContent || '<- Invalid encoding');
-                    }
-                    resolve(he);
-                }, () => {
-                    console.log('Cannot decrypt health element', he.id);
-                    resolve(he);
-                })));
-            }
-            else {
-                return Promise.resolve(he);
-            }
-        })));
+        return Promise.all(hes.map((he) => this.crypto.entities.decryptEntity(he, dataOwnerId, (x) => new models.HealthElement(x)).then(({ entity }) => entity)));
     }
     filterHealthElementsBy(startDocumentId, limit, body) {
         throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption');
@@ -319,6 +273,35 @@ class IccHelementXApi extends icc_api_1.IccHelementApi {
             id: code,
         });
     }
+    /**
+     * @param healthElement a health element
+     * @return the id of the patient that the health element refers to, retrieved from the encrypted metadata. Normally there should only be one element
+     * in the returned array, but in case of entity merges there could be multiple values.
+     */
+    decryptPatientIdOf(healthElement) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.entities.owningEntityIdsOf(healthElement, undefined);
+        });
+    }
+    /**
+     * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param delegateId the id of the data owner which will be granted access to the health element.
+     * @param healthElement the health element to share.
+     * @param options optional parameters to customize the sharing behaviour:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * health element does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated health element.
+     */
+    shareWith(delegateId, healthElement, options = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
+            return yield this.modifyAs(self, yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(healthElement, delegateId, undefined, options.shareEncryptionKey, options.sharePatientId));
+        });
+    }
 }
 exports.IccHelementXApi = IccHelementXApi;
 //# sourceMappingURL=icc-helement-x-api.js.map

package/icc-x-api/icc-helement-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-helement-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-helement-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA2C;AAG3C,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAChC,uDAAqF;AAGrF,mCAA+B;AAC/B,0EAAgG;AAEhG,MAAa,eAAgB,SAAQ,wBAAc;IAMjD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,gBAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,EAChD,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAED,WAAW,CAAC,IAAiB,EAAE,OAAuB,EAAE,CAAM,EAAE,YAAY,GAAG,KAAK,EAAE,YAAsB,EAAE;QAC5G,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CACvB;YACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;YAC5B,KAAK,EAAE,yCAAyC;YAChD,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;YAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;YAC9B,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;YACzC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;SACzD,EACD,CAAC,IAAI,EAAE,CACR,CAAA;QAED,OAAO,IAAI,CAAC,gCAAgC,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;IAChG,CAAC;IAED,gCAAgC,CAC9B,aAAmC,EACnC,OAAuB,EACvB,IAAiB,EACjB,YAAqB,EACrB,YAAsB,EAAE;QAExB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAE1D,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAO,GAAG,EAAE,EAAE;YAC7F,IAAI,CAAC,GAAG,EAAE;gBACR,OAAO,CAAC,KAAK,CAAC,0CAA0C,GAAG,iEAAiE,CAAC,CAAA;aAC9H;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE,OAAO,EAAE,WAAY,EAAE,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,IAAI,CAAC,CAAA;YACvG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,aAAa,EAAE,WAAY,CAAC,CAAA;YAC7E,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE;gBACtB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC,CAAA;YAEF,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YAC5C,CAAC,CAAC,IAAI,CACJ,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACrI,CAAC,OAAO,CACP,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CACxC,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,OAAO,EAAE,aAAa,EAAE,WAAY,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,OAAO,aAAa,CAAA;YACtB,CAAC,CAAC,CACH,CAAC,CACL,CACA;YAAA,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CACzI,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CACxC,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,OAAO,EAAE,aAAa,EAAE,WAAY,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5H,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,OAAO,aAAa,CAAA;YACtB,CAAC,CAAC,CACH,CAAC,CACL,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;IAED,mBAAmB,CAAC,IAA2B;QAC7C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAA2B;QACxE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAA+B;QAC7E,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,gBAAgB,CAAC,eAAuB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,wBAAwB,CAAC,IAAiB,EAAE,eAAuB;QACjE,OAAO,KAAK;aACT,gBAAgB,CAAC,eAAe,CAAC;aACjC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,iBAAiB,CAAC,IAAuB;QACvC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,yBAAyB,CAAC,IAAiB,EAAE,IAAuB;QAClE,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/G,CAAC;IAED,2BAA2B,CAAC,eAAuB,EAAE,IAA+B;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,mCAAmC,CAAC,IAAiB,EAAE,eAAuB,EAAE,IAA+B;QAC7G,OAAO,KAAK;aACT,2BAA2B,CAAC,eAAe,EAAE,IAAI,CAAC;aAClD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,6CAA6C,CAAC,SAAiB,EAAE,WAAmB;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,qDAAqD,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAmB;QAC7G,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACnI,CAAC;IAED,0DAA0D,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAqB;QACpH,OAAO,KAAK,CAAC,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,6CAA6C,CAC3C,IAAiB,EACjB,SAAiB,EACjB,OAAuB,EACvB,YAAqB,KAAK;QAE1B,OAAO,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,EAAE;;YACnG,MAAM,IAAI,GAAG,MAAA,gBAAgB,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,IAAI,SAAS,CAAC,0CAAE,aAAa,CAAA;YAElH,IAAI,IAAI,IAAI,SAAS,EAAE;gBACrB,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;aACtC;YAED,OAAO,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACjG,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,mBAAmB,CAAC,IAAoB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAAoB;QACjE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAAwB;QACtE,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEH,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,oBAAoB,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK;QAChG,OAAO,IAAI,CAAC,MAAM;aACf,mCAAmC,CAAC,OAAO,EAAE,SAAS,CAAC;aACvD,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAC1B,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,iBAAiB;iBACd,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,OAAO,GAAG,CAAC,MAAM,CAAC;oBAChB;wBACE,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;qBAC5H;iBACF,CAAC,CAAA;YACJ,CAAC,EAAE,EAAgE,CAAC;iBACnE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;iBACzC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,CACpC,SAAS;gBACP,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7E,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CACrF,CACJ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CACxB;aACA,IAAI,CAAC,CAAC,kBAA+C,EAAE,EAAE;YACxD,MAAM,KAAK,GAA4C,EAAE,CAAA;YAEzD,IAAI,oBAAoB,EAAE;gBACxB,OAAO,kBAAkB,CAAA;aAC1B;iBAAM;gBACL,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBAChC,IAAI,EAAE,CAAC,eAAe,EAAE;wBACtB,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,CAAA;wBACrC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;4BACxE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,CAAA;yBAC/B;qBACF;gBACH,CAAC,CAAC,CAAA;gBACF,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;aACxD;QACH,CAAC,CAAC,CAAA;IACN,CAAC;IAED,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;QACpE,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC9E,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,cAA2C;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC1D,OAAO,OAAO,CAAC,GAAG,CAChB,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACxB,CAAC,EAAE,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,cAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9F,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CACpC;aACE,IAAI,CAAC,CAAC,aAA4B,EAAE,EAAE,CACrC,IAAI,CAAC,MAAM,CAAC,yCAAyC,CAAC,WAAW,EAAE,aAAa,CAAC,EAAG,EAAE,aAAa,CAAC,cAAe,CAAC,CACrH;aACA,IAAI,CAAC,CAAC,IAAyD,EAAE,EAAE,CAClE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,qBAAM,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAClF;aACA,IAAI,CAAC,CAAC,GAAc,EAAE,EAAE,CACvB,IAAA,aAAK,EACH,EAAE,EACF,CAAC,GAA8B,EAAE,EAAE,CACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CACrB,GAAG,EACH,IAAA,uBAAQ,EACN,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3B,OAAO,CAAC,YAAY,WAAW,IAAI,CAAC,YAAY,UAAU;gBACxD,CAAC,CAAC,IAAA,kBAAG,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC,CAAA;QACP,CAAC,CAAC,CACH,CACF,EACH,IAAI,CAAC,aAAa,CACnB,CACF,CACJ,CACF,CAAA;IACH,CAAC;IAED,kBAAkB,CAAC,IAAiB,EAAE,EAAwB;QAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,WAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACnE,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAC3B,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE;gBACX,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC,CACH,CACA;YAAA,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAC3H,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CACxC,IAAI,CAAC,MAAM;iBACR,oBAAoB,CAAC,aAAa,EAAE,WAAY,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC;iBAC3E,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACjB,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE;oBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;iBACxC,CAAC,CAAA;YACJ,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACX,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;gBACtB,OAAO,aAAa,CAAA;YACtB,CAAC,CAAC,CACL,CAAC,CACL,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,eAAe,CAAC,IAAiB,EAAE,GAAgC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IAClE,CAAC;IAED,OAAO,CAAC,WAAmB,EAAE,GAAgC;QAC3D,OAAO,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACb,IAAI,CAAC,MAAM;aACR,yCAAyC,CAAC,WAAW,EAAE,EAAE,CAAC,EAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,cAAe,CAAC,CAAC,CAAC,EAAE,CAAC,WAAY,CAAC;aAChI,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBACzB,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;gBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;aAC3B;YACD,IAAI,EAAE,CAAC,aAAa,EAAE;gBACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,qBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7E,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAC,CAAC,OAA4B,EAAE,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAA,wBAAS,EAAC,IAAA,kBAAG,EAAC,EAAE,CAAC,aAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAClE,CAAC,GAAG,EAAE,EAAE;oBACN,IAAI,WAAW,CAAA;oBACf,IAAI;wBACF,WAAW,GAAG,GAAG,IAAI,IAAA,sBAAO,EAAC,GAAG,CAAC,CAAA;wBACjC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;qBACrD;oBAAC,OAAO,CAAC,EAAE;wBACV,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,WAAW,IAAI,qBAAqB,CAAC,CAAA;qBAC5E;oBACD,OAAO,CAAC,EAAE,CAAC,CAAA;gBACb,CAAC,EACD,GAAG,EAAE;oBACH,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;oBACnD,OAAO,CAAC,EAAE,CAAC,CAAA;gBACb,CAAC,CACF,CACF,CACJ,CAAA;aACF;iBAAM;gBACL,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;aAC3B;QACH,CAAC,CAAC,CACL,CACF,CAAA;IACH,CAAC;IAED,sBAAsB,CAAC,eAAwB,EAAE,KAAc,EAAE,IAA+B;QAC9F,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,gBAAgB,CACd,IAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,IAA+B;QAE/B,OAAO,KAAK;aACT,sBAAsB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;aACpD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACrG,CAAC;IAED,qCAAqC;IACrC,sBAAsB,CAAC,IAAiB,EAAE,OAAuB,EAAE,KAAqB,EAAE,KAAa;QACrG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;YACjD,KAAK,EAAE,KAAK;YACZ,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACb,OAAO,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,IAAY;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,EAAE,EAAE,IAAI;SACT,CAAC,CAAA;IACJ,CAAC;CACF;AAhbD,0CAgbC","sourcesContent":["import { IccHelementApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { a2b, b2a, hex2ua, string2ua, ua2utf8, utf8_2ua } from './utils/binary-utils'\nimport { FilterChainHealthElement, HealthElement, PaginatedListHealthElement } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { crypt } from './utils'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\n\nexport class IccHelementXApi extends IccHelementApi {\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  private readonly encryptedKeys: Array<string>\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    encryptedKeys: Array<string> = ['descr', 'note'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedKeys = encryptedKeys\n  }\n\n  newInstance(user: models.User, patient: models.Patient, h: any, confidential = false, delegates: string[] = []) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user)\n    const helement = _.assign(\n      {\n        id: this.crypto.randomUuid(),\n        _type: 'org.taktik.icure.entities.HealthElement',\n        created: new Date().getTime(),\n        modified: new Date().getTime(),\n        responsible: dataOwnerId,\n        author: user.id,\n        codes: [],\n        tags: [],\n        healthElementId: this.crypto.randomUuid(),\n        openingDate: parseInt(moment().format('YYYYMMDDHHmmss')),\n      },\n      h || {}\n    )\n\n    return this.initDelegationsAndEncryptionKeys(helement, patient, user, confidential, delegates)\n  }\n\n  initDelegationsAndEncryptionKeys(\n    healthElement: models.HealthElement,\n    patient: models.Patient,\n    user: models.User,\n    confidential: boolean,\n    delegates: string[] = []\n  ): Promise<models.HealthElement> {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user)\n\n    return this.crypto.extractPreferredSfk(patient, dataOwnerId!, confidential).then(async (key) => {\n      if (!key) {\n        console.error(`SFK cannot be found for Health element ${key}. The healthElement will not be reachable from the patient side`)\n      }\n      const dels = await this.crypto.initObjectDelegations(healthElement, patient, dataOwnerId!, key ?? null)\n      const eks = await this.crypto.initEncryptionKeys(healthElement, dataOwnerId!)\n      _.extend(healthElement, {\n        delegations: dels.delegations,\n        cryptedForeignKeys: dels.cryptedForeignKeys,\n        secretForeignKeys: dels.secretForeignKeys,\n        encryptionKeys: eks.encryptionKeys,\n      })\n\n      let promise = Promise.resolve(healthElement)\n      _.uniq(\n        delegates.concat(user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.medicalInformation || []) : [])\n      ).forEach(\n        (delegateId) =>\n          (promise = promise.then((healthElement) =>\n            this.crypto.addDelegationsAndEncryptionKeys(patient, healthElement, dataOwnerId!, delegateId, dels.secretId, eks.secretId).catch((e) => {\n              console.log(e)\n              return healthElement\n            })\n          ))\n      )\n      ;(user.autoDelegations && user.autoDelegations.anonymousMedicalInformation ? user.autoDelegations.anonymousMedicalInformation : []).forEach(\n        (delegateId) =>\n          (promise = promise.then((healthElement) =>\n            this.crypto.addDelegationsAndEncryptionKeys(patient, healthElement, dataOwnerId!, delegateId, null, eks.secretId).catch((e) => {\n              console.log(e)\n              return healthElement\n            })\n          ))\n      )\n      return promise\n    })\n  }\n\n  createHealthElement(body?: models.HealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementWithUser(user: models.User, body?: models.HealthElement): Promise<models.HealthElement | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((hes) => super.createHealthElement(hes[0]))\n          .then((he) => this.decryptWithUser(user, [he]))\n          .then((hes) => hes[0])\n      : Promise.resolve(null)\n  }\n\n  createHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementsWithUser(user: models.User, bodies?: models.HealthElement[]): Promise<models.HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.createHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  getHealthElement(healthElementId: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  getHealthElementWithUser(user: models.User, healthElementId: string): Promise<models.HealthElement> {\n    return super\n      .getHealthElement(healthElementId)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((hes) => hes[0])\n  }\n\n  getHealthElements(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  getHealthElementsWithUser(user: models.User, body?: models.ListOfIds): Promise<models.HealthElement[]> {\n    return super.getHealthElements(body).then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes))\n  }\n\n  newHealthElementDelegations(healthElementId: string, body?: Array<models.Delegation>): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  newHealthElementDelegationsWithUser(user: models.User, healthElementId: string, body?: Array<models.Delegation>): Promise<models.HealthElement> {\n    return super\n      .newHealthElementDelegations(healthElementId, body)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((he) => he[0])\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeys(hcPartyId: string, secretFKeys: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysWithUser(user: models.User, hcPartyId: string, secretFKeys: string): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user: models.User, hcPartyId: string, secretFKeys: string[]): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  findHealthElementsByHCPartyAndPatientWithUser(\n    user: models.User,\n    hcPartyId: string,\n    patient: models.Patient,\n    usingPost: boolean = false\n  ): Promise<models.HealthElement[]> {\n    return this.crypto.extractSFKsHierarchyFromDelegations(patient, hcPartyId).then((keysAndHcPartyId) => {\n      const keys = keysAndHcPartyId.find((secretForeignKeys) => secretForeignKeys.hcpartyId == hcPartyId)?.extractedKeys\n\n      if (keys == undefined) {\n        throw Error('No delegation for user')\n      }\n\n      return usingPost\n        ? this.findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user, hcPartyId, keys)\n        : this.findHealthElementsByHCPartyPatientForeignKeysWithUser(user, hcPartyId, keys.join(','))\n    })\n  }\n\n  modifyHealthElement(body?: HealthElement): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  modifyHealthElementWithUser(user: models.User, body?: HealthElement): Promise<HealthElement | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((hes) => super.modifyHealthElement(hes[0]))\n          .then((he) => this.decryptWithUser(user, [he]))\n          .then((hes) => hes[0])\n      : Promise.resolve(null)\n  }\n\n  modifyHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  modifyHealthElementsWithUser(user: models.User, bodies?: HealthElement[]): Promise<HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.modifyHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  findBy(hcpartyId: string, patient: models.Patient, keepObsoleteVersions = false, usingPost = false) {\n    return this.crypto\n      .extractSFKsHierarchyFromDelegations(patient, hcpartyId)\n      .then((secretForeignKeys) =>\n        secretForeignKeys && secretForeignKeys.length > 0\n          ? Promise.all(\n              secretForeignKeys\n                .reduce((acc, level) => {\n                  return acc.concat([\n                    {\n                      hcpartyId: level.hcpartyId,\n                      extractedKeys: level.extractedKeys.filter((key) => !acc.some((previousLevel) => previousLevel.extractedKeys.includes(key))),\n                    },\n                  ])\n                }, [] as Array<{ hcpartyId: string; extractedKeys: Array<string> }>)\n                .filter((l) => l.extractedKeys.length > 0)\n                .map(({ hcpartyId, extractedKeys }) =>\n                  usingPost\n                    ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId, _.uniq(extractedKeys))\n                    : this.findByHCPartyPatientSecretFKeys(hcpartyId, _.uniq(extractedKeys).join(','))\n                )\n            ).then((results) => _.uniqBy(_.flatMap(results), (x) => x.id))\n          : Promise.resolve([])\n      )\n      .then((decryptedHelements: Array<models.HealthElement>) => {\n        const byIds: { [key: string]: models.HealthElement } = {}\n\n        if (keepObsoleteVersions) {\n          return decryptedHelements\n        } else {\n          decryptedHelements.forEach((he) => {\n            if (he.healthElementId) {\n              const phe = byIds[he.healthElementId]\n              if (!phe || !phe.modified || (he.modified && phe.modified < he.modified)) {\n                byIds[he.healthElementId] = he\n              }\n            }\n          })\n          return _.values(byIds).filter((s: any) => !s.endOfLife)\n        }\n      })\n  }\n\n  findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.Contact> | any> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.Contact> | any> {\n    return super\n      .findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  encrypt(user: models.User, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user)\n    return Promise.all(\n      healthElements.map((he) =>\n        (he.encryptionKeys && Object.keys(he.encryptionKeys).some((k) => !!he.encryptionKeys![k].length)\n          ? Promise.resolve(he)\n          : this.initEncryptionKeys(user, he)\n        )\n          .then((healthElement: HealthElement) =>\n            this.crypto.extractKeysFromDelegationsForHcpHierarchy(dataOwnerId, healthElement.id!, healthElement.encryptionKeys!)\n          )\n          .then((sfks: { extractedKeys: Array<string>; hcpartyId: string }) =>\n            this.crypto.AES.importKey('raw', hex2ua(sfks.extractedKeys[0].replace(/-/g, '')))\n          )\n          .then((key: CryptoKey) =>\n            crypt(\n              he,\n              (obj: { [key: string]: string }) =>\n                this.crypto.AES.encrypt(\n                  key,\n                  utf8_2ua(\n                    JSON.stringify(obj, (k, v) => {\n                      return v instanceof ArrayBuffer || v instanceof Uint8Array\n                        ? b2a(new Uint8Array(v).reduce((d, b) => d + String.fromCharCode(b), ''))\n                        : v\n                    })\n                  )\n                ),\n              this.encryptedKeys\n            )\n          )\n      )\n    )\n  }\n\n  initEncryptionKeys(user: models.User, he: models.HealthElement): Promise<models.HealthElement> {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user)\n    return this.crypto.initEncryptionKeys(he, dataOwnerId!).then((eks) => {\n      let promise = Promise.resolve(\n        _.extend(he, {\n          encryptionKeys: eks.encryptionKeys,\n        })\n      )\n      ;(user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.medicalInformation || []) : []).forEach(\n        (delegateId) =>\n          (promise = promise.then((healthElement) =>\n            this.crypto\n              .appendEncryptionKeys(healthElement, dataOwnerId!, delegateId, eks.secretId)\n              .then((extraEks) => {\n                return _.extend(extraEks.modifiedObject, {\n                  encryptionKeys: extraEks.encryptionKeys,\n                })\n              })\n              .catch((e) => {\n                console.log(e.message)\n                return healthElement\n              })\n          ))\n      )\n      return promise\n    })\n  }\n\n  decryptWithUser(user: models.User, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.decrypt(this.dataOwnerApi.getDataOwnerOf(user), hes)\n  }\n\n  decrypt(dataOwnerId: string, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      hes.map((he) =>\n        this.crypto\n          .extractKeysFromDelegationsForHcpHierarchy(dataOwnerId, he.id!, _.size(he.encryptionKeys) ? he.encryptionKeys! : he.delegations!)\n          .then(({ extractedKeys: sfks }) => {\n            if (!sfks || !sfks.length) {\n              console.log('Cannot decrypt helement', he.id)\n              return Promise.resolve(he)\n            }\n            if (he.encryptedSelf) {\n              return this.crypto.AES.importKey('raw', hex2ua(sfks[0].replace(/-/g, ''))).then(\n                (key) =>\n                  new Promise((resolve: (value: any) => any) =>\n                    this.crypto.AES.decrypt(key, string2ua(a2b(he.encryptedSelf!))).then(\n                      (dec) => {\n                        let jsonContent\n                        try {\n                          jsonContent = dec && ua2utf8(dec)\n                          jsonContent && _.assign(he, JSON.parse(jsonContent))\n                        } catch (e) {\n                          console.log('Cannot parse he', he.id, jsonContent || '<- Invalid encoding')\n                        }\n                        resolve(he)\n                      },\n                      () => {\n                        console.log('Cannot decrypt health element', he.id)\n                        resolve(he)\n                      }\n                    )\n                  )\n              )\n            } else {\n              return Promise.resolve(he)\n            }\n          })\n      )\n    )\n  }\n\n  filterHealthElementsBy(startDocumentId?: string, limit?: number, body?: FilterChainHealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  filterByWithUser(\n    user: models.User,\n    startDocumentId?: string,\n    limit?: number,\n    body?: FilterChainHealthElement\n  ): Promise<PaginatedListHealthElement> {\n    return super\n      .filterHealthElementsBy(startDocumentId, limit, body)\n      .then((pl) => this.decryptWithUser(user, pl.rows!).then((dr) => Object.assign(pl, { rows: dr })))\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  serviceToHealthElement(user: models.User, patient: models.Patient, heSvc: models.Service, descr: string) {\n    return this.newInstance(user, patient, {\n      idService: heSvc.id,\n      author: heSvc.author,\n      responsible: heSvc.responsible,\n      openingDate: heSvc.valueDate || heSvc.openingDate,\n      descr: descr,\n      idOpeningContact: heSvc.contactId,\n      modified: heSvc.modified,\n      created: heSvc.created,\n      codes: heSvc.codes,\n      tags: heSvc.tags,\n    }).then((he) => {\n      return this.createHealthElement(he)\n    })\n  }\n\n  // noinspection JSUnusedGlobalSymbols, JSMethodCanBeStatic\n  stringToCode(code: string) {\n    const c = code.split('|')\n    return new models.Code({\n      type: c[0],\n      code: c[1],\n      version: c[2],\n      id: code,\n    })\n  }\n}\n"]}
+{"version":3,"file":"icc-helement-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-helement-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA2C;AAG3C,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAGhC,0EAAgG;AAGhG,MAAa,eAAgB,SAAQ,wBAAc;IAMjD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,gBAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,EAChD,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,CAAM,EACN,UAII,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CACvB;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACvC,KAAK,EAAE,yCAAyC;gBAChD,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,WAAW;gBACxB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;gBACR,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACpD,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;aACzD,EACD,CAAC,IAAI,EAAE,CACR,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GACP,MAAA,OAAO,CAAC,YAAY,mCACpB,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;gBACrB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,OAAO,CAAC;gBACjE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAA;YAC9E,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;YAC7H,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC;aAC7H,CAAA;YACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sCAAsC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAA;YAC/I,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;;KAClE;IAED,mBAAmB,CAAC,IAA2B;QAC7C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAA2B;QACxE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAA+B;QAC7E,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,gBAAgB,CAAC,eAAuB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,wBAAwB,CAAC,IAAiB,EAAE,eAAuB;QACjE,OAAO,KAAK;aACT,gBAAgB,CAAC,eAAe,CAAC;aACjC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,iBAAiB,CAAC,IAAuB;QACvC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,yBAAyB,CAAC,IAAiB,EAAE,IAAuB;QAClE,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACjH,CAAC;IAED,2BAA2B,CAAC,eAAuB,EAAE,IAA+B;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,mCAAmC,CAAC,IAAiB,EAAE,eAAuB,EAAE,IAA+B;QAC7G,OAAO,KAAK;aACT,2BAA2B,CAAC,eAAe,EAAE,IAAI,CAAC;aAClD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,6CAA6C,CAAC,SAAiB,EAAE,WAAmB;QAClF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,qDAAqD,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAmB;QAC7G,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACnI,CAAC;IAED,0DAA0D,CAAC,IAAiB,EAAE,SAAiB,EAAE,WAAqB;QACpH,OAAO,KAAK,CAAC,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5I,CAAC;IAEK,6CAA6C,CACjD,IAAiB,EACjB,SAAiB,EACjB,OAAuB,EACvB,YAAqB,KAAK;;;YAE1B,IAAI,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;YACrF,MAAM,IAAI,GAAG,MAAA,gBAAgB,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,IAAI,SAAS,CAAC,0CAAE,SAAS,CAAA;YAC5G,IAAI,IAAI,IAAI,SAAS,EAAE;gBACrB,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;aACtC;YACD,OAAO,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;;KAChG;IAED,mBAAmB,CAAC,IAAoB;QACtC,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,CAAC;IAED,2BAA2B,CAAC,IAAiB,EAAE,IAAoB;QACjE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrG,CAAC;IACO,QAAQ,CAAC,SAAiB,EAAE,IAAmB;QACrD,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,oBAAoB,CAAC,IAA2B;QAC9C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,4BAA4B,CAAC,IAAiB,EAAE,MAAwB;QACtE,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAClC;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEH,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,oBAAoB,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK;QAChG,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;aACxB,0BAA0B,CAAC,OAAO,CAAC;aACnC,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAC1B,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,iBAAiB;iBACd,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,OAAO,GAAG,CAAC,MAAM,CAAC;oBAChB;wBACE,SAAS,EAAE,KAAK,CAAC,OAAO;wBACxB,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;qBACxH;iBACF,CAAC,CAAA;YACJ,CAAC,EAAE,EAAgE,CAAC;iBACnE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;iBACzC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,CACpC,SAAS;gBACP,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7E,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CACrF,CACJ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CACxB;aACA,IAAI,CAAC,CAAC,kBAA+C,EAAE,EAAE;YACxD,MAAM,KAAK,GAA4C,EAAE,CAAA;YAEzD,IAAI,oBAAoB,EAAE;gBACxB,OAAO,kBAAkB,CAAA;aAC1B;iBAAM;gBACL,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBAChC,IAAI,EAAE,CAAC,eAAe,EAAE;wBACtB,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,CAAA;wBACrC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;4BACxE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,CAAA;yBAC/B;qBACF;gBACH,CAAC,CAAC,CAAA;gBACF,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;aACxD;QACH,CAAC,CAAC,CAAA;IACN,CAAC;IAED,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;QACpE,OAAO,KAAK,CAAC,6CAA6C,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,sDAAsD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC9E,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,cAA2C;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAA;IACjF,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,cAA2C;QAC1E,OAAO,OAAO,CAAC,GAAG,CAChB,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACtH,CACF,CAAA;IACH,CAAC;IAED,eAAe,CAAC,IAAiB,EAAE,GAAgC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IACpE,CAAC;IAED,OAAO,CAAC,WAAmB,EAAE,GAAgC;QAC3D,OAAO,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAED,sBAAsB,CAAC,eAAwB,EAAE,KAAc,EAAE,IAA+B;QAC9F,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAA;IACjH,CAAC;IAED,gBAAgB,CACd,IAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,IAA+B;QAE/B,OAAO,KAAK;aACT,sBAAsB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;aACpD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACrG,CAAC;IAED,qCAAqC;IACrC,sBAAsB,CAAC,IAAiB,EAAE,OAAuB,EAAE,KAAqB,EAAE,KAAa;QACrG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;YACjD,KAAK,EAAE,KAAK;YACZ,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACb,OAAO,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,IAAY;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,EAAE,EAAE,IAAI;SACT,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,aAAmC;;YAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;QACzE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,aAAmC,EACnC,UAGI,EAAE;;YAEN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,OAAO,MAAM,IAAI,CAAC,QAAQ,CACxB,IAAI,EACJ,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAChE,aAAa,EACb,UAAU,EACV,SAAS,EACT,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,cAAc,CACvB,CACF,CAAA;QACH,CAAC;KAAA;CACF;AA5XD,0CA4XC","sourcesContent":["import { IccHelementApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { FilterChainHealthElement, HealthElement, PaginatedListHealthElement } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\n\nexport class IccHelementXApi extends IccHelementApi {\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  private readonly encryptedKeys: Array<string>\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    encryptedKeys: Array<string> = ['descr', 'note'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedKeys = encryptedKeys\n  }\n\n  /**\n   * Creates a new instance of health element with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this health element refers to.\n   * @param h initialised data for the health element. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * - confidential: if true, the entity will be created as confidential. Confidential entities are not shared with auto-delegations, and the default\n   * foreign key used is any key that is not shared with any of the data owner parents. By default entities are created as non-confidential.\n   * @return a new instance of health element.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    h: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n      confidential?: boolean\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    const helement = _.assign(\n      {\n        id: this.crypto.primitives.randomUuid(),\n        _type: 'org.taktik.icure.entities.HealthElement',\n        created: new Date().getTime(),\n        modified: new Date().getTime(),\n        responsible: dataOwnerId,\n        author: user.id,\n        codes: [],\n        tags: [],\n        healthElementId: this.crypto.primitives.randomUuid(),\n        openingDate: parseInt(moment().format('YYYYMMDDHHmmss')),\n      },\n      h || {}\n    )\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk =\n      options.preferredSfk ??\n      (!!options.confidential\n        ? await this.crypto.confidential.getConfidentialSecretId(patient)\n        : await this.crypto.confidential.getAnySecretIdSharedWithParents(patient))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id} for confidential=${!!options.confidential}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(options.confidential ? [] : [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])]),\n    ]\n    const initialisationInfo = await this.crypto.entities.entityWithInitialisedEncryptedMetadata(helement, patient.id, sfk, true, extraDelegations)\n    return new models.HealthElement(initialisationInfo.updatedEntity)\n  }\n\n  createHealthElement(body?: models.HealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementWithUser(user: models.User, body?: models.HealthElement): Promise<models.HealthElement | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((hes) => super.createHealthElement(hes[0]))\n          .then((he) => this.decryptWithUser(user, [he]))\n          .then((hes) => hes[0])\n      : Promise.resolve(null)\n  }\n\n  createHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  createHealthElementsWithUser(user: models.User, bodies?: models.HealthElement[]): Promise<models.HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.createHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  getHealthElement(healthElementId: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  getHealthElementWithUser(user: models.User, healthElementId: string): Promise<models.HealthElement> {\n    return super\n      .getHealthElement(healthElementId)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((hes) => hes[0])\n  }\n\n  getHealthElements(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  getHealthElementsWithUser(user: models.User, body?: models.ListOfIds): Promise<models.HealthElement[]> {\n    return super.getHealthElements(body).then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n  }\n\n  newHealthElementDelegations(healthElementId: string, body?: Array<models.Delegation>): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  newHealthElementDelegationsWithUser(user: models.User, healthElementId: string, body?: Array<models.Delegation>): Promise<models.HealthElement> {\n    return super\n      .newHealthElementDelegations(healthElementId, body)\n      .then((he) => this.decryptWithUser(user, [he]))\n      .then((he) => he[0])\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeys(hcPartyId: string, secretFKeys: string): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysWithUser(user: models.User, hcPartyId: string, secretFKeys: string): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user: models.User, hcPartyId: string, secretFKeys: string[]): Promise<HealthElement[]> {\n    return super.findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((hes) => this.decryptWithUser(user, hes))\n  }\n\n  async findHealthElementsByHCPartyAndPatientWithUser(\n    user: models.User,\n    hcPartyId: string,\n    patient: models.Patient,\n    usingPost: boolean = false\n  ): Promise<models.HealthElement[]> {\n    let keysAndHcPartyId = await this.crypto.entities.secretIdsForHcpHierarchyOf(patient)\n    const keys = keysAndHcPartyId.find((secretForeignKeys) => secretForeignKeys.ownerId == hcPartyId)?.extracted\n    if (keys == undefined) {\n      throw Error('No delegation for user')\n    }\n    return usingPost\n      ? this.findHealthElementsByHCPartyPatientForeignKeysArrayWithUser(user, hcPartyId, keys)\n      : this.findHealthElementsByHCPartyPatientForeignKeysWithUser(user, hcPartyId, keys.join(','))\n  }\n\n  modifyHealthElement(body?: HealthElement): never {\n    throw new Error('Cannot call a method that returns health element without providing a user for de/encryption')\n  }\n\n  modifyHealthElementWithUser(user: models.User, body?: HealthElement): Promise<HealthElement | any> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null)\n  }\n  private modifyAs(dataOwner: string, body: HealthElement): Promise<HealthElement | any> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((hes) => super.modifyHealthElement(hes[0]))\n      .then((he) => this.decrypt(dataOwner, [he]))\n      .then((hes) => hes[0])\n  }\n\n  modifyHealthElements(body?: Array<HealthElement>): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  modifyHealthElementsWithUser(user: models.User, bodies?: HealthElement[]): Promise<HealthElement[] | any> {\n    return bodies\n      ? this.encrypt(\n          user,\n          bodies.map((c) => _.cloneDeep(c))\n        )\n          .then((hes) => super.modifyHealthElements(hes))\n          .then((hes) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes))\n      : Promise.resolve(null)\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  findBy(hcpartyId: string, patient: models.Patient, keepObsoleteVersions = false, usingPost = false) {\n    return this.crypto.entities\n      .secretIdsForHcpHierarchyOf(patient)\n      .then((secretForeignKeys) =>\n        secretForeignKeys && secretForeignKeys.length > 0\n          ? Promise.all(\n              secretForeignKeys\n                .reduce((acc, level) => {\n                  return acc.concat([\n                    {\n                      hcpartyId: level.ownerId,\n                      extractedKeys: level.extracted.filter((key) => !acc.some((previousLevel) => previousLevel.extractedKeys.includes(key))),\n                    },\n                  ])\n                }, [] as Array<{ hcpartyId: string; extractedKeys: Array<string> }>)\n                .filter((l) => l.extractedKeys.length > 0)\n                .map(({ hcpartyId, extractedKeys }) =>\n                  usingPost\n                    ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId, _.uniq(extractedKeys))\n                    : this.findByHCPartyPatientSecretFKeys(hcpartyId, _.uniq(extractedKeys).join(','))\n                )\n            ).then((results) => _.uniqBy(_.flatMap(results), (x) => x.id))\n          : Promise.resolve([])\n      )\n      .then((decryptedHelements: Array<models.HealthElement>) => {\n        const byIds: { [key: string]: models.HealthElement } = {}\n\n        if (keepObsoleteVersions) {\n          return decryptedHelements\n        } else {\n          decryptedHelements.forEach((he) => {\n            if (he.healthElementId) {\n              const phe = byIds[he.healthElementId]\n              if (!phe || !phe.modified || (he.modified && phe.modified < he.modified)) {\n                byIds[he.healthElementId] = he\n              }\n            }\n          })\n          return _.values(byIds).filter((s: any) => !s.endOfLife)\n        }\n      })\n  }\n\n  findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.Contact> | any> {\n    return super.findHealthElementsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys).then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.Contact> | any> {\n    return super\n      .findHealthElementsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((helements) => this.decrypt(hcPartyId, helements))\n  }\n\n  encrypt(user: models.User, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), healthElements)\n  }\n\n  private encryptAs(owner: string, healthElements: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      healthElements.map((he) =>\n        this.crypto.entities.tryEncryptEntity(he, owner, this.encryptedKeys, false, true, (x) => new models.HealthElement(x))\n      )\n    )\n  }\n\n  decryptWithUser(user: models.User, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), hes)\n  }\n\n  decrypt(dataOwnerId: string, hes: Array<models.HealthElement>): Promise<Array<models.HealthElement>> {\n    return Promise.all(\n      hes.map((he) => this.crypto.entities.decryptEntity(he, dataOwnerId, (x) => new models.HealthElement(x)).then(({ entity }) => entity))\n    )\n  }\n\n  filterHealthElementsBy(startDocumentId?: string, limit?: number, body?: FilterChainHealthElement): never {\n    throw new Error('Cannot call a method that returns health elements without providing a user for de/encryption')\n  }\n\n  filterByWithUser(\n    user: models.User,\n    startDocumentId?: string,\n    limit?: number,\n    body?: FilterChainHealthElement\n  ): Promise<PaginatedListHealthElement> {\n    return super\n      .filterHealthElementsBy(startDocumentId, limit, body)\n      .then((pl) => this.decryptWithUser(user, pl.rows!).then((dr) => Object.assign(pl, { rows: dr })))\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  serviceToHealthElement(user: models.User, patient: models.Patient, heSvc: models.Service, descr: string) {\n    return this.newInstance(user, patient, {\n      idService: heSvc.id,\n      author: heSvc.author,\n      responsible: heSvc.responsible,\n      openingDate: heSvc.valueDate || heSvc.openingDate,\n      descr: descr,\n      idOpeningContact: heSvc.contactId,\n      modified: heSvc.modified,\n      created: heSvc.created,\n      codes: heSvc.codes,\n      tags: heSvc.tags,\n    }).then((he) => {\n      return this.createHealthElement(he)\n    })\n  }\n\n  // noinspection JSUnusedGlobalSymbols, JSMethodCanBeStatic\n  stringToCode(code: string) {\n    const c = code.split('|')\n    return new models.Code({\n      type: c[0],\n      code: c[1],\n      version: c[2],\n      id: code,\n    })\n  }\n\n  /**\n   * @param healthElement a health element\n   * @return the id of the patient that the health element refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(healthElement: models.HealthElement): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(healthElement, undefined)\n  }\n\n  /**\n   * Share an existing health element with other data owners, allowing them to access the non-encrypted data of the health element and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the health element.\n   * @param healthElement the health element to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * health element does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this health element refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated health element.\n   */\n  async shareWith(\n    delegateId: string,\n    healthElement: models.HealthElement,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.HealthElement> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    return await this.modifyAs(\n      self,\n      await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n        healthElement,\n        delegateId,\n        undefined,\n        options.shareEncryptionKey,\n        options.sharePatientId\n      )\n    )\n  }\n}\n"]}

package/icc-x-api/icc-icure-maintenance-x-api.d.ts

@@ -0,0 +1,31 @@
+import { KeyPair } from './crypto/RSA';
+import { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api';
+import { IccCryptoXApi } from './icc-crypto-x-api';
+import { KeyPairUpdateRequest } from './maintenance/KeyPairUpdateRequest';
+import { IccDataOwnerXApi } from './icc-data-owner-x-api';
+import { User } from '../icc-api/model/User';
+/**
+ * Api for interpreting maintenance tasks and applying required client-side actions.
+ */
+export declare class IccIcureMaintenanceXApi {
+    private readonly crypto;
+    private readonly tasksApi;
+    private readonly dataOwnerApi;
+    constructor(crypto: IccCryptoXApi, tasksApi: IccMaintenanceTaskXApi, dataOwnerApi: IccDataOwnerXApi);
+    /**
+     * Applies a key pair update request between another data owner and the current data owner to allow the other data owner to access existing exchange
+     * keys shared with the current data owner. IMPORTANT: it is your responsibility to verify the authenticity of the public key / update request
+     * before calling this method: this method assumes the new public key for the concerned data owner is authentic.
+     * @param update a keypair update request to the current data owner.
+     */
+    applyKeyPairUpdate(update: KeyPairUpdateRequest): Promise<void>;
+    /**
+     * @internal This method is intended only for internal use and may be changed without notice.
+     * Creates the necessary maintenance tasks to request access to existing exchange keys with the new key pair for the current user.
+     * @param user the user which owns the new key pair.
+     * @param keypair a new key pair for the current user.
+     */
+    createMaintenanceTasksForNewKeypair(user: User, keypair: KeyPair<CryptoKey>): Promise<void>;
+    private getExchangeKeysInfosOf;
+    private createMaintenanceTask;
+}

package/icc-x-api/icc-icure-maintenance-x-api.js

@@ -0,0 +1,124 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IccIcureMaintenanceXApi = void 0;
+const MaintenanceTask_1 = require("../icc-api/model/MaintenanceTask");
+const utils_1 = require("./utils");
+const PropertyStub_1 = require("../icc-api/model/PropertyStub");
+const PropertyTypeStub_1 = require("../icc-api/model/PropertyTypeStub");
+const TypedValueObject_1 = require("../icc-api/model/TypedValueObject");
+const KeyPairUpdateRequest_1 = require("./maintenance/KeyPairUpdateRequest");
+const icc_data_owner_x_api_1 = require("./icc-data-owner-x-api");
+/**
+ * Api for interpreting maintenance tasks and applying required client-side actions.
+ */
+class IccIcureMaintenanceXApi {
+    constructor(crypto, tasksApi, dataOwnerApi) {
+        this.crypto = crypto;
+        this.tasksApi = tasksApi;
+        this.dataOwnerApi = dataOwnerApi;
+    }
+    // TODO api to get all tasks for current owner from owner with id
+    /**
+     * Applies a key pair update request between another data owner and the current data owner to allow the other data owner to access existing exchange
+     * keys shared with the current data owner. IMPORTANT: it is your responsibility to verify the authenticity of the public key / update request
+     * before calling this method: this method assumes the new public key for the concerned data owner is authentic.
+     * @param update a keypair update request to the current data owner.
+     */
+    applyKeyPairUpdate(update) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.crypto.exchangeKeys.base.giveAccessBackTo(update.concernedDataOwnerId, update.newPublicKey, this.crypto.userKeysManager.getDecryptionKeys());
+        });
+    }
+    /**
+     * @internal This method is intended only for internal use and may be changed without notice.
+     * Creates the necessary maintenance tasks to request access to existing exchange keys with the new key pair for the current user.
+     * @param user the user which owns the new key pair.
+     * @param keypair a new key pair for the current user.
+     */
+    createMaintenanceTasksForNewKeypair(user, keypair) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const currentUserType = yield this.dataOwnerApi.getCurrentDataOwnerType();
+            if (currentUserType === icc_data_owner_x_api_1.DataOwnerTypeEnum.Device) {
+                console.warn('Current data owner is a device and there is no need to create maintenance tasks for updated keypair.');
+            }
+            else if (currentUserType === icc_data_owner_x_api_1.DataOwnerTypeEnum.Patient || currentUserType === icc_data_owner_x_api_1.DataOwnerTypeEnum.Hcp) {
+                const requestsToOwnerTypes = currentUserType === icc_data_owner_x_api_1.DataOwnerTypeEnum.Patient ? [icc_data_owner_x_api_1.DataOwnerTypeEnum.Patient, icc_data_owner_x_api_1.DataOwnerTypeEnum.Hcp] : [icc_data_owner_x_api_1.DataOwnerTypeEnum.Hcp];
+                const hexNewPubKey = (0, utils_1.ua2hex)(yield this.crypto.primitives.RSA.exportKey(keypair.publicKey, 'spki'));
+                const hexNewPubKeyFp = hexNewPubKey.slice(-32);
+                const selfId = yield this.dataOwnerApi.getCurrentDataOwnerId();
+                const keysInfo = yield this.getExchangeKeysInfosOf(selfId, requestsToOwnerTypes);
+                const requestDataOwners = keysInfo
+                    .filter((info) => !info.fingerprints.has(hexNewPubKeyFp))
+                    .flatMap((info) => [info.delegate, info.delegator])
+                    .filter((dataOwner) => dataOwner !== selfId);
+                if (requestDataOwners.length > 0) {
+                    const tasksToCreate = requestDataOwners.map((dataOwner) => ({
+                        delegate: dataOwner,
+                        task: this.createMaintenanceTask(selfId, hexNewPubKey),
+                    }));
+                    for (const taskToCreate of tasksToCreate) {
+                        const instance = yield this.tasksApi.newInstance(user, taskToCreate.task, { additionalDelegates: { [taskToCreate.delegate]: 'WRITE' } });
+                        if (instance) {
+                            // TODO create in bulk
+                            yield this.tasksApi.createMaintenanceTaskWithUser(user, instance);
+                        }
+                    }
+                }
+            }
+            else
+                throw new Error(`Unknown data owner type for current user ${currentUserType}`);
+        });
+    }
+    getExchangeKeysInfosOf(dataOwnerId, otherOwnerTypes) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const allExchangeKeys = yield this.crypto.exchangeKeys.base.getAllExchangeKeysWith(dataOwnerId, otherOwnerTypes);
+            const infoTo = Object.entries(allExchangeKeys.keysToOwner).flatMap(([delegatorId, delegatorFpToKeys]) => Object.values(delegatorFpToKeys).map((encryptedKeys) => ({
+                delegator: delegatorId,
+                delegate: dataOwnerId,
+                fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),
+            })));
+            const infoFrom = Object.values(allExchangeKeys.keysFromOwner).flatMap((delegateIdToKeys) => Object.entries(delegateIdToKeys).map(([delegateId, encryptedKeys]) => ({
+                delegator: dataOwnerId,
+                delegate: delegateId,
+                fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),
+            })));
+            return [...infoFrom, ...infoTo];
+        });
+    }
+    createMaintenanceTask(ownerId, concernedPubKey) {
+        return new MaintenanceTask_1.MaintenanceTask({
+            id: this.crypto.primitives.randomUuid(),
+            taskType: KeyPairUpdateRequest_1.KeyPairUpdateRequest.TASK_TYPE,
+            status: MaintenanceTask_1.MaintenanceTask.StatusEnum.Pending,
+            properties: [
+                new PropertyStub_1.PropertyStub({
+                    id: KeyPairUpdateRequest_1.KeyPairUpdateRequest.OWNER_ID_PROP_ID,
+                    type: new PropertyTypeStub_1.PropertyTypeStub({ type: PropertyTypeStub_1.PropertyTypeStub.TypeEnum.STRING }),
+                    typedValue: new TypedValueObject_1.TypedValueObject({
+                        type: TypedValueObject_1.TypedValueObject.TypeEnum.STRING,
+                        stringValue: ownerId,
+                    }),
+                }),
+                new PropertyStub_1.PropertyStub({
+                    id: KeyPairUpdateRequest_1.KeyPairUpdateRequest.OWNER_PUB_PROP_ID,
+                    type: new PropertyTypeStub_1.PropertyTypeStub({ type: PropertyTypeStub_1.PropertyTypeStub.TypeEnum.STRING }),
+                    typedValue: new TypedValueObject_1.TypedValueObject({
+                        type: TypedValueObject_1.TypedValueObject.TypeEnum.STRING,
+                        stringValue: concernedPubKey,
+                    }),
+                }),
+            ],
+        });
+    }
+}
+exports.IccIcureMaintenanceXApi = IccIcureMaintenanceXApi;
+//# sourceMappingURL=icc-icure-maintenance-x-api.js.map