@icure/api 6.4.0 → 7.0.0-beta.1

package/icc-x-api/icc-icure-maintenance-x-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icc-icure-maintenance-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-icure-maintenance-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,sEAAkE;AAClE,mCAAgC;AAChC,gEAA4D;AAC5D,wEAAoE;AACpE,wEAAoE;AAEpE,6EAAyE;AACzE,iEAA4E;AAK5E;;GAEG;AACH,MAAa,uBAAuB;IAKlC,YAAY,MAAqB,EAAE,QAAgC,EAAE,YAA8B;QACjG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED,iEAAiE;IAEjE;;;;;OAKG;IACG,kBAAkB,CAAC,MAA4B;;YACnD,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAClD,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAChD,CAAA;QACH,CAAC;KAAA;IAED;;;;;OAKG;IACG,mCAAmC,CAAC,IAAU,EAAE,OAA2B;;YAC/E,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAA;YACzE,IAAI,eAAe,KAAK,wCAAiB,CAAC,MAAM,EAAE;gBAChD,OAAO,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAA;aACrH;iBAAM,IAAI,eAAe,KAAK,wCAAiB,CAAC,OAAO,IAAI,eAAe,KAAK,wCAAiB,CAAC,GAAG,EAAE;gBACrG,MAAM,oBAAoB,GACxB,eAAe,KAAK,wCAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wCAAiB,CAAC,OAAO,EAAE,wCAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,wCAAiB,CAAC,GAAG,CAAC,CAAA;gBAC9H,MAAM,YAAY,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;gBAClG,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;gBAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;gBAChF,MAAM,iBAAiB,GAAG,QAAQ;qBAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;qBACxD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;qBAClD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,CAAA;gBAC9C,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE;oBAChC,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;wBAC1D,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,YAAY,CAAC;qBACvD,CAAC,CAAC,CAAA;oBACH,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE;wBACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;wBACxI,IAAI,QAAQ,EAAE;4BACZ,sBAAsB;4BACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;yBAClE;qBACF;iBACF;aACF;;gBAAM,MAAM,IAAI,KAAK,CAAC,4CAA4C,eAAe,EAAE,CAAC,CAAA;QACvF,CAAC;KAAA;IAEa,sBAAsB,CAAC,WAAmB,EAAE,eAAoC;;YAC5F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAChH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,CACtG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACvD,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,WAAW;gBACrB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3E,CAAC,CAAC,CACJ,CAAA;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE,CACzF,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrE,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3E,CAAC,CAAC,CACJ,CAAA;YACD,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAA;QACjC,CAAC;KAAA;IAEO,qBAAqB,CAAC,OAAe,EAAE,eAAuB;QACpE,OAAO,IAAI,iCAAe,CAAC;YACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;YACvC,QAAQ,EAAE,2CAAoB,CAAC,SAAS;YACxC,MAAM,EAAE,iCAAe,CAAC,UAAU,CAAC,OAAO;YAC1C,UAAU,EAAE;gBACV,IAAI,2BAAY,CAAC;oBACf,EAAE,EAAE,2CAAoB,CAAC,gBAAgB;oBACzC,IAAI,EAAE,IAAI,mCAAgB,CAAC,EAAE,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACtE,UAAU,EAAE,IAAI,mCAAgB,CAAC;wBAC/B,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM;wBACtC,WAAW,EAAE,OAAO;qBACrB,CAAC;iBACH,CAAC;gBACF,IAAI,2BAAY,CAAC;oBACf,EAAE,EAAE,2CAAoB,CAAC,iBAAiB;oBAC1C,IAAI,EAAE,IAAI,mCAAgB,CAAC,EAAE,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACtE,UAAU,EAAE,IAAI,mCAAgB,CAAC;wBAC/B,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM;wBACtC,WAAW,EAAE,eAAe;qBAC7B,CAAC;iBACH,CAAC;aACH;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AA5GD,0DA4GC","sourcesContent":["import { KeyPair } from './crypto/RSA'\nimport { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api'\nimport { MaintenanceTask } from '../icc-api/model/MaintenanceTask'\nimport { ua2hex } from './utils'\nimport { PropertyStub } from '../icc-api/model/PropertyStub'\nimport { PropertyTypeStub } from '../icc-api/model/PropertyTypeStub'\nimport { TypedValueObject } from '../icc-api/model/TypedValueObject'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { KeyPairUpdateRequest } from './maintenance/KeyPairUpdateRequest'\nimport { DataOwnerTypeEnum, IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { User } from '../icc-api/model/User'\n\ntype ExchangeKeyInfo = { delegator: string; delegate: string; fingerprints: Set<string> }\n\n/**\n * Api for interpreting maintenance tasks and applying required client-side actions.\n */\nexport class IccIcureMaintenanceXApi {\n  private readonly crypto: IccCryptoXApi\n  private readonly tasksApi: IccMaintenanceTaskXApi\n  private readonly dataOwnerApi: IccDataOwnerXApi\n\n  constructor(crypto: IccCryptoXApi, tasksApi: IccMaintenanceTaskXApi, dataOwnerApi: IccDataOwnerXApi) {\n    this.crypto = crypto\n    this.tasksApi = tasksApi\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  // TODO api to get all tasks for current owner from owner with id\n\n  /**\n   * Applies a key pair update request between another data owner and the current data owner to allow the other data owner to access existing exchange\n   * keys shared with the current data owner. IMPORTANT: it is your responsibility to verify the authenticity of the public key / update request\n   * before calling this method: this method assumes the new public key for the concerned data owner is authentic.\n   * @param update a keypair update request to the current data owner.\n   */\n  async applyKeyPairUpdate(update: KeyPairUpdateRequest) {\n    await this.crypto.exchangeKeys.base.giveAccessBackTo(\n      update.concernedDataOwnerId,\n      update.newPublicKey,\n      this.crypto.userKeysManager.getDecryptionKeys()\n    )\n  }\n\n  /**\n   * @internal This method is intended only for internal use and may be changed without notice.\n   * Creates the necessary maintenance tasks to request access to existing exchange keys with the new key pair for the current user.\n   * @param user the user which owns the new key pair.\n   * @param keypair a new key pair for the current user.\n   */\n  async createMaintenanceTasksForNewKeypair(user: User, keypair: KeyPair<CryptoKey>): Promise<void> {\n    const currentUserType = await this.dataOwnerApi.getCurrentDataOwnerType()\n    if (currentUserType === DataOwnerTypeEnum.Device) {\n      console.warn('Current data owner is a device and there is no need to create maintenance tasks for updated keypair.')\n    } else if (currentUserType === DataOwnerTypeEnum.Patient || currentUserType === DataOwnerTypeEnum.Hcp) {\n      const requestsToOwnerTypes =\n        currentUserType === DataOwnerTypeEnum.Patient ? [DataOwnerTypeEnum.Patient, DataOwnerTypeEnum.Hcp] : [DataOwnerTypeEnum.Hcp]\n      const hexNewPubKey = ua2hex(await this.crypto.primitives.RSA.exportKey(keypair.publicKey, 'spki'))\n      const hexNewPubKeyFp = hexNewPubKey.slice(-32)\n      const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n      const keysInfo = await this.getExchangeKeysInfosOf(selfId, requestsToOwnerTypes)\n      const requestDataOwners = keysInfo\n        .filter((info) => !info.fingerprints.has(hexNewPubKeyFp))\n        .flatMap((info) => [info.delegate, info.delegator])\n        .filter((dataOwner) => dataOwner !== selfId)\n      if (requestDataOwners.length > 0) {\n        const tasksToCreate = requestDataOwners.map((dataOwner) => ({\n          delegate: dataOwner,\n          task: this.createMaintenanceTask(selfId, hexNewPubKey),\n        }))\n        for (const taskToCreate of tasksToCreate) {\n          const instance = await this.tasksApi.newInstance(user, taskToCreate.task, { additionalDelegates: { [taskToCreate.delegate]: 'WRITE' } })\n          if (instance) {\n            // TODO create in bulk\n            await this.tasksApi.createMaintenanceTaskWithUser(user, instance)\n          }\n        }\n      }\n    } else throw new Error(`Unknown data owner type for current user ${currentUserType}`)\n  }\n\n  private async getExchangeKeysInfosOf(dataOwnerId: string, otherOwnerTypes: DataOwnerTypeEnum[]): Promise<ExchangeKeyInfo[]> {\n    const allExchangeKeys = await this.crypto.exchangeKeys.base.getAllExchangeKeysWith(dataOwnerId, otherOwnerTypes)\n    const infoTo = Object.entries(allExchangeKeys.keysToOwner).flatMap(([delegatorId, delegatorFpToKeys]) =>\n      Object.values(delegatorFpToKeys).map((encryptedKeys) => ({\n        delegator: delegatorId,\n        delegate: dataOwnerId,\n        fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),\n      }))\n    )\n    const infoFrom = Object.values(allExchangeKeys.keysFromOwner).flatMap((delegateIdToKeys) =>\n      Object.entries(delegateIdToKeys).map(([delegateId, encryptedKeys]) => ({\n        delegator: dataOwnerId,\n        delegate: delegateId,\n        fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),\n      }))\n    )\n    return [...infoFrom, ...infoTo]\n  }\n\n  private createMaintenanceTask(ownerId: string, concernedPubKey: string) {\n    return new MaintenanceTask({\n      id: this.crypto.primitives.randomUuid(),\n      taskType: KeyPairUpdateRequest.TASK_TYPE,\n      status: MaintenanceTask.StatusEnum.Pending,\n      properties: [\n        new PropertyStub({\n          id: KeyPairUpdateRequest.OWNER_ID_PROP_ID,\n          type: new PropertyTypeStub({ type: PropertyTypeStub.TypeEnum.STRING }),\n          typedValue: new TypedValueObject({\n            type: TypedValueObject.TypeEnum.STRING,\n            stringValue: ownerId,\n          }),\n        }),\n        new PropertyStub({\n          id: KeyPairUpdateRequest.OWNER_PUB_PROP_ID,\n          type: new PropertyTypeStub({ type: PropertyTypeStub.TypeEnum.STRING }),\n          typedValue: new TypedValueObject({\n            type: TypedValueObject.TypeEnum.STRING,\n            stringValue: concernedPubKey,\n          }),\n        }),\n      ],\n    })\n  }\n}\n"]}

package/icc-x-api/icc-invoice-x-api.d.ts

@@ -4,6 +4,7 @@ import * as models from '../icc-api/model/models';
 import { Invoice } from '../icc-api/model/models';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
+import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
 export declare class IccInvoiceXApi extends IccInvoiceApi {
     crypto: IccCryptoXApi;
     entityrefApi: IccEntityrefApi;
@@ -11,11 +12,27 @@ export declare class IccInvoiceXApi extends IccInvoiceApi {
     constructor(host: string, headers: {
         [key: string]: string;
     }, crypto: IccCryptoXApi, entityrefApi: IccEntityrefApi, dataOwnerApi: IccDataOwnerXApi, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
-    newInstance(user: models.User, patient: models.Patient, inv?: any, delegates?: string[]): Promise<models.Invoice>;
-    initEncryptionKeys(user: models.User, invoice: models.Invoice): Promise<models.Invoice & {
-        encryptionKeys: any;
-    }>;
-    private initDelegationsAndEncryptionKeys;
+    /**
+     * Creates a new instance of invoice with initialised encryption metadata (not in the database).
+     * @param user the current user.
+     * @param patient the patient this invoice refers to.
+     * @param inv initialised data for the invoice. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify
+     * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.
+     * @param options optional parameters:
+     * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
+     * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
+     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
+     * access will be possible.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
+     * secret id of patient known by the topmost parent in the current data owner hierarchy.
+     * @return a new instance of invoice.
+     */
+    newInstance(user: models.User, patient: models.Patient, inv?: any, options?: {
+        additionalDelegates?: {
+            [dataOwnerId: string]: 'WRITE';
+        };
+        preferredSfk?: string;
+    }): Promise<models.Invoice>;
     createInvoice(invoice: Invoice, prefix?: string): Promise<Invoice>;
     getNextInvoiceReference(prefix: string, entityrefApi: IccEntityrefApi): Promise<number>;
     createInvoiceReference(nextReference: number, docId: string, prefix: string, entityrefApi: IccEntityrefApi): Promise<models.EntityReference>;
@@ -38,4 +55,27 @@ export declare class IccInvoiceXApi extends IccInvoiceApi {
     findBy(hcpartyId: string, patient: models.Patient, usingPost?: boolean): Promise<Array<models.Invoice>>;
     encrypt(user: models.User, invoices: Array<models.Invoice>): Promise<models.Invoice[]>;
     decrypt(hcpartyId: string, invoices: Array<models.Invoice>): Promise<Array<models.Invoice>>;
+    /**
+     * @param invoice a invoice
+     * @return the id of the patient that the invoice refers to, retrieved from the encrypted metadata. Normally there should only be one element
+     * in the returned array, but in case of entity merges there could be multiple values.
+     */
+    decryptPatientIdOf(invoice: models.Invoice): Promise<string[]>;
+    /**
+     * Share an existing invoice with other data owners, allowing them to access the non-encrypted data of the invoice and optionally also
+     * the encrypted content.
+     * @param delegateId the id of the data owner which will be granted access to the invoice.
+     * @param invoice the invoice to share.
+     * @param options optional parameters to customize the sharing behaviour:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * invoice does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this invoice refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated invoice.
+     */
+    shareWith(delegateId: string, invoice: models.Invoice, options?: {
+        shareEncryptionKey?: ShareMetadataBehaviour;
+        sharePatientId?: ShareMetadataBehaviour;
+    }): Promise<models.Invoice>;
 }

package/icc-x-api/icc-invoice-x-api.js

@@ -1,4 +1,13 @@
 "use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IccInvoiceXApi = void 0;
 const icc_api_1 = require("../icc-api");
@@ -16,58 +25,48 @@ class IccInvoiceXApi extends icc_api_1.IccInvoiceApi {
         this.entityrefApi = entityrefApi;
         this.dataOwnerApi = dataOwnerApi;
     }
-    newInstance(user, patient, inv = {}, delegates = []) {
-        const invoice = new models.Invoice(_.extend({
-            id: this.crypto.randomUuid(),
-            groupId: this.crypto.randomUuid(),
-            _type: 'org.taktik.icure.entities.Invoice',
-            created: new Date().getTime(),
-            modified: new Date().getTime(),
-            responsible: this.dataOwnerApi.getDataOwnerOf(user),
-            author: user.id,
-            codes: [],
-            tags: [],
-            invoicingCodes: [],
-        }, inv || {}));
-        return this.initDelegationsAndEncryptionKeys(user, patient, invoice, delegates);
-    }
-    initEncryptionKeys(user, invoice) {
-        const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user);
-        return this.crypto.initEncryptionKeys(invoice, dataOwnerId).then((eks) => {
-            let promise = Promise.resolve(_.extend(invoice, {
-                encryptionKeys: eks.encryptionKeys,
-            }));
-            (user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.financialInformation || []) : []).forEach((delegateId) => (promise = promise.then((invoice) => this.crypto.appendEncryptionKeys(invoice, dataOwnerId, delegateId, eks.secretId).then((extraEks) => {
-                return _.extend(extraEks.modifiedObject, {
-                    encryptionKeys: extraEks.encryptionKeys,
-                });
-            }))));
-            return promise;
-        });
-    }
-    initDelegationsAndEncryptionKeys(user, patient, invoice, delegates = []) {
-        const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user);
-        return this.crypto
-            .extractDelegationsSFKs(patient, dataOwnerId)
-            .then((secretForeignKeys) => Promise.all([
-            this.crypto.initObjectDelegations(invoice, patient, dataOwnerId, secretForeignKeys.extractedKeys[0]),
-            this.crypto.initEncryptionKeys(invoice, dataOwnerId),
-        ]))
-            .then((initData) => {
-            const dels = initData[0];
-            const eks = initData[1];
-            _.extend(invoice, {
-                delegations: dels.delegations,
-                cryptedForeignKeys: dels.cryptedForeignKeys,
-                secretForeignKeys: dels.secretForeignKeys,
-                encryptionKeys: eks.encryptionKeys,
-            });
-            let promise = Promise.resolve(invoice);
-            _.uniq(delegates.concat(user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.financialInformation || []) : [])).forEach((delegateId) => (promise = promise.then((invoice) => this.crypto.addDelegationsAndEncryptionKeys(patient, invoice, dataOwnerId, delegateId, dels.secretId, eks.secretId).catch((e) => {
-                console.log(e);
-                return invoice;
-            }))));
-            return promise;
+    /**
+     * Creates a new instance of invoice with initialised encryption metadata (not in the database).
+     * @param user the current user.
+     * @param patient the patient this invoice refers to.
+     * @param inv initialised data for the invoice. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify
+     * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.
+     * @param options optional parameters:
+     * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
+     * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
+     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
+     * access will be possible.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
+     * secret id of patient known by the topmost parent in the current data owner hierarchy.
+     * @return a new instance of invoice.
+     */
+    newInstance(user, patient, inv = {}, options = {}) {
+        var _a, _b, _c, _d, _e, _f;
+        return __awaiter(this, void 0, void 0, function* () {
+            const invoice = new models.Invoice(_.extend({
+                id: this.crypto.primitives.randomUuid(),
+                groupId: this.crypto.primitives.randomUuid(),
+                _type: 'org.taktik.icure.entities.Invoice',
+                created: new Date().getTime(),
+                modified: new Date().getTime(),
+                responsible: this.dataOwnerApi.getDataOwnerIdOf(user),
+                author: user.id,
+                codes: [],
+                tags: [],
+                invoicingCodes: [],
+            }, inv || {}));
+            const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
+            if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
+                throw new Error('Can only initialise entities as current data owner.');
+            const sfk = (_a = options.preferredSfk) !== null && _a !== void 0 ? _a : (yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient));
+            if (!sfk)
+                throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`);
+            const extraDelegations = [
+                ...Object.keys((_b = options.additionalDelegates) !== null && _b !== void 0 ? _b : {}),
+                ...((_d = (_c = user.autoDelegations) === null || _c === void 0 ? void 0 : _c.all) !== null && _d !== void 0 ? _d : []),
+                ...((_f = (_e = user.autoDelegations) === null || _e === void 0 ? void 0 : _e.financialInformation) !== null && _f !== void 0 ? _f : []),
+            ];
+            return new models.Invoice(yield this.crypto.entities.entityWithInitialisedEncryptedMetadata(invoice, patient.id, sfk, true, extraDelegations).then((x) => x.updatedEntity));
         });
     }
     createInvoice(invoice, prefix) {
@@ -75,7 +74,7 @@ class IccInvoiceXApi extends icc_api_1.IccInvoiceApi {
             return super.createInvoice(invoice);
         }
         if (!invoice.id) {
-            invoice.id = this.crypto.randomUuid();
+            invoice.id = this.crypto.primitives.randomUuid();
         }
         return this.getNextInvoiceReference(prefix, this.entityrefApi)
             .then((reference) => this.createInvoiceReference(reference, invoice.id, prefix, this.entityrefApi))
@@ -84,11 +83,10 @@ class IccInvoiceXApi extends icc_api_1.IccInvoiceApi {
                 throw new Error('Cannot create invoice');
             }
             if (invoice.internshipNihii) {
-                const ref = entityReference.id.substr(prefix.length).replace('0', '1');
-                invoice.invoiceReference = ref;
+                invoice.invoiceReference = entityReference.id.substring(prefix.length).replace('0', '1');
             }
             else {
-                invoice.invoiceReference = entityReference.id.substr(prefix.length);
+                invoice.invoiceReference = entityReference.id.substring(prefix.length);
             }
             return super.createInvoice(invoice);
         });
@@ -129,14 +127,13 @@ class IccInvoiceXApi extends icc_api_1.IccInvoiceApi {
      * @param usingPost
      */
     findBy(hcpartyId, patient, usingPost = false) {
-        return this.crypto
-            .extractDelegationsSFKs(patient, hcpartyId)
-            .then((secretForeignKeys) => usingPost ?
-            this.findInvoicesByHCPartyPatientForeignKeysUsingPost(secretForeignKeys.hcpartyId, _.uniq(secretForeignKeys.extractedKeys)) :
-            this.findInvoicesByHCPartyPatientForeignKeys(secretForeignKeys.hcpartyId, _.uniq(secretForeignKeys.extractedKeys).join(',')))
-            .then((invoices) => this.decrypt(hcpartyId, invoices))
-            .then(function (decryptedInvoices) {
-            return decryptedInvoices;
+        return __awaiter(this, void 0, void 0, function* () {
+            const extractedKeys = yield this.crypto.entities.secretIdsOf(patient, hcpartyId);
+            const topmostParentId = (yield this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0];
+            let invoices = usingPost
+                ? yield this.findInvoicesByHCPartyPatientForeignKeysUsingPost(topmostParentId, _.uniq(extractedKeys))
+                : yield this.findInvoicesByHCPartyPatientForeignKeys(topmostParentId, _.uniq(extractedKeys).join(','));
+            return yield this.decrypt(hcpartyId, invoices);
         });
     }
     encrypt(user, invoices) {
@@ -145,6 +142,34 @@ class IccInvoiceXApi extends icc_api_1.IccInvoiceApi {
     decrypt(hcpartyId, invoices) {
         return Promise.resolve(invoices);
     }
+    /**
+     * @param invoice a invoice
+     * @return the id of the patient that the invoice refers to, retrieved from the encrypted metadata. Normally there should only be one element
+     * in the returned array, but in case of entity merges there could be multiple values.
+     */
+    decryptPatientIdOf(invoice) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.entities.owningEntityIdsOf(invoice, undefined);
+        });
+    }
+    /**
+     * Share an existing invoice with other data owners, allowing them to access the non-encrypted data of the invoice and optionally also
+     * the encrypted content.
+     * @param delegateId the id of the data owner which will be granted access to the invoice.
+     * @param invoice the invoice to share.
+     * @param options optional parameters to customize the sharing behaviour:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * invoice does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this invoice refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated invoice.
+     */
+    shareWith(delegateId, invoice, options = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.modifyInvoice(yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(invoice, delegateId, undefined, options.shareEncryptionKey, options.sharePatientId));
+        });
+    }
 }
 exports.IccInvoiceXApi = IccInvoiceXApi;
 //# sourceMappingURL=icc-invoice-x-api.js.map

package/icc-x-api/icc-invoice-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-invoice-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-invoice-x-api.ts"],"names":[],"mappings":";;;AAAA,wCAA2D;AAG3D,4BAA2B;AAC3B,kDAAiD;AAGjD,0EAAgG;AAEhG,MAAa,cAAe,SAAQ,uBAAa;IAK/C,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA6B,EAC7B,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED,WAAW,CAAC,IAAiB,EAAE,OAAuB,EAAE,MAAW,EAAE,EAAE,YAAsB,EAAE;QAC7F,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAChC,CAAC,CAAC,MAAM,CACN;YACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;YAC5B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;YACjC,KAAK,EAAE,mCAAmC;YAC1C,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;YAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;YAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC;YACnD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE;YACR,cAAc,EAAE,EAAE;SACnB,EACD,GAAG,IAAI,EAAE,CACV,CACF,CAAA;QAED,OAAO,IAAI,CAAC,gCAAgC,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IACjF,CAAC;IAED,kBAAkB,CAAC,IAAiB,EAAE,OAAuB;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACxE,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAC3B,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE;gBAChB,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC,CACH,CACA;YAAA,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAC7H,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,WAAY,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAClG,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE;oBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;iBACxC,CAAC,CAAA;YACJ,CAAC,CAAC,CACH,CAAC,CACL,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,gCAAgC,CACtC,IAAiB,EACjB,OAAuB,EACvB,OAAuB,EACvB,YAAsB,EAAE;QAExB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,MAAM;aACf,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC;aAC5C,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAC1B,OAAO,CAAC,GAAG,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAY,EAAE,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAY,CAAC;SACtD,CAAC,CACH;aACA,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;YACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;YACvB,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC,CAAA;YAEF,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YACtC,CAAC,CAAC,IAAI,CACJ,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACvI,CAAC,OAAO,CACP,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,OAAO,EAAE,OAAO,EAAE,WAAY,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/H,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC,CAAC,CACH,CAAC,CACL,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;IACN,CAAC;IAED,aAAa,CAAC,OAAgB,EAAE,MAAe;QAC7C,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;SACpC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;YACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;SACtC;QACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC;aAC3D,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAG,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;aACnG,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE;YACxB,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE;gBACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;aACzC;YAED,IAAI,OAAO,CAAC,eAAe,EAAE;gBAC3B,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;gBACtE,OAAO,CAAC,gBAAgB,GAAG,GAAG,CAAA;aAC/B;iBAAM;gBACL,OAAO,CAAC,gBAAgB,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;aACpE;YACD,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACN,CAAC;IAED,uBAAuB,CAAC,MAAc,EAAE,YAA6B;QACnE,OAAO,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAA8B,EAAE,EAAE;YAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,CAAA;YACrE,MAAM,cAAc,GAAG,MAAM,CAAC,EAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACvD,OAAO,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,sBAAsB,CAAC,aAAqB,EAAE,KAAa,EAAE,MAAc,EAAE,YAA6B;QACxG,OAAO,YAAY;aAChB,qBAAqB,CACpB,IAAI,MAAM,CAAC,eAAe,CAAC;YACzB,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YACtD,KAAK;SACN,CAAC,CACH;aACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChB,OAAO,IAAI,CAAC,sBAAsB,CAAC,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAA;QACpF,CAAC,CAAC,CAAA;IACN,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;QAC3E,OAAO,IAAI,CAAC,MAAM;aACf,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC;aAC1C,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAC1B,SAAS,CAAC,CAAC;YACT,IAAI,CAAC,gDAAgD,CAAC,iBAAiB,CAAC,SAAU,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC9H,IAAI,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,SAAU,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAChI;aACA,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;aACrD,IAAI,CAAC,UAAU,iBAAiB;YAC/B,OAAO,iBAAiB,CAAA;QAC1B,CAAC,CAAC,CAAA;IACN,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,QAA+B;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,QAA+B;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;CACF;AAhMD,wCAgMC","sourcesContent":["import { IccEntityrefApi, IccInvoiceApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { Invoice } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\n\nexport class IccInvoiceXApi extends IccInvoiceApi {\n  crypto: IccCryptoXApi\n  entityrefApi: IccEntityrefApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    entityrefApi: IccEntityrefApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.entityrefApi = entityrefApi\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  newInstance(user: models.User, patient: models.Patient, inv: any = {}, delegates: string[] = []): Promise<models.Invoice> {\n    const invoice = new models.Invoice(\n      _.extend(\n        {\n          id: this.crypto.randomUuid(),\n          groupId: this.crypto.randomUuid(),\n          _type: 'org.taktik.icure.entities.Invoice',\n          created: new Date().getTime(),\n          modified: new Date().getTime(),\n          responsible: this.dataOwnerApi.getDataOwnerOf(user),\n          author: user.id,\n          codes: [],\n          tags: [],\n          invoicingCodes: [],\n        },\n        inv || {}\n      )\n    )\n\n    return this.initDelegationsAndEncryptionKeys(user, patient, invoice, delegates)\n  }\n\n  initEncryptionKeys(user: models.User, invoice: models.Invoice) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user)\n    return this.crypto.initEncryptionKeys(invoice, dataOwnerId!).then((eks) => {\n      let promise = Promise.resolve(\n        _.extend(invoice, {\n          encryptionKeys: eks.encryptionKeys,\n        })\n      )\n      ;(user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.financialInformation || []) : []).forEach(\n        (delegateId) =>\n          (promise = promise.then((invoice) =>\n            this.crypto.appendEncryptionKeys(invoice, dataOwnerId!, delegateId, eks.secretId).then((extraEks) => {\n              return _.extend(extraEks.modifiedObject, {\n                encryptionKeys: extraEks.encryptionKeys,\n              })\n            })\n          ))\n      )\n      return promise\n    })\n  }\n\n  private initDelegationsAndEncryptionKeys(\n    user: models.User,\n    patient: models.Patient,\n    invoice: models.Invoice,\n    delegates: string[] = []\n  ): Promise<models.Invoice> {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerOf(user)\n    return this.crypto\n      .extractDelegationsSFKs(patient, dataOwnerId)\n      .then((secretForeignKeys) =>\n        Promise.all([\n          this.crypto.initObjectDelegations(invoice, patient, dataOwnerId!, secretForeignKeys.extractedKeys[0]),\n          this.crypto.initEncryptionKeys(invoice, dataOwnerId!),\n        ])\n      )\n      .then((initData) => {\n        const dels = initData[0]\n        const eks = initData[1]\n        _.extend(invoice, {\n          delegations: dels.delegations,\n          cryptedForeignKeys: dels.cryptedForeignKeys,\n          secretForeignKeys: dels.secretForeignKeys,\n          encryptionKeys: eks.encryptionKeys,\n        })\n\n        let promise = Promise.resolve(invoice)\n        _.uniq(\n          delegates.concat(user.autoDelegations ? (user.autoDelegations.all || []).concat(user.autoDelegations.financialInformation || []) : [])\n        ).forEach(\n          (delegateId) =>\n            (promise = promise.then((invoice) =>\n              this.crypto.addDelegationsAndEncryptionKeys(patient, invoice, dataOwnerId!, delegateId, dels.secretId, eks.secretId).catch((e) => {\n                console.log(e)\n                return invoice\n              })\n            ))\n        )\n        return promise\n      })\n  }\n\n  createInvoice(invoice: Invoice, prefix?: string): Promise<Invoice> {\n    if (!prefix) {\n      return super.createInvoice(invoice)\n    }\n    if (!invoice.id) {\n      invoice.id = this.crypto.randomUuid()\n    }\n    return this.getNextInvoiceReference(prefix, this.entityrefApi)\n      .then((reference) => this.createInvoiceReference(reference, invoice.id!, prefix, this.entityrefApi))\n      .then((entityReference) => {\n        if (!entityReference.id) {\n          throw new Error('Cannot create invoice')\n        }\n\n        if (invoice.internshipNihii) {\n          const ref = entityReference.id.substr(prefix.length).replace('0', '1')\n          invoice.invoiceReference = ref\n        } else {\n          invoice.invoiceReference = entityReference.id.substr(prefix.length)\n        }\n        return super.createInvoice(invoice)\n      })\n  }\n\n  getNextInvoiceReference(prefix: string, entityrefApi: IccEntityrefApi): Promise<number> {\n    return entityrefApi.getLatest(prefix).then((entRef: models.EntityReference) => {\n      if (!entRef || !entRef.id || !entRef.id!.startsWith(prefix)) return 1\n      const sequenceNumber = entRef.id!.split(':').pop() || 0\n      return Number(sequenceNumber) + 1\n    })\n  }\n\n  createInvoiceReference(nextReference: number, docId: string, prefix: string, entityrefApi: IccEntityrefApi): Promise<models.EntityReference> {\n    return entityrefApi\n      .createEntityReference(\n        new models.EntityReference({\n          id: prefix + nextReference.toString().padStart(6, '0'),\n          docId,\n        })\n      )\n      .catch((err) => {\n        console.log(err)\n        return this.createInvoiceReference(nextReference + 1, docId, prefix, entityrefApi)\n      })\n  }\n\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all invoices with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the invoices of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param usingPost\n   */\n  findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false): Promise<Array<models.Invoice>> {\n    return this.crypto\n      .extractDelegationsSFKs(patient, hcpartyId)\n      .then((secretForeignKeys) =>\n        usingPost ?\n          this.findInvoicesByHCPartyPatientForeignKeysUsingPost(secretForeignKeys.hcpartyId!, _.uniq(secretForeignKeys.extractedKeys)) :\n          this.findInvoicesByHCPartyPatientForeignKeys(secretForeignKeys.hcpartyId!, _.uniq(secretForeignKeys.extractedKeys).join(','))\n      )\n      .then((invoices) => this.decrypt(hcpartyId, invoices))\n      .then(function (decryptedInvoices) {\n        return decryptedInvoices\n      })\n  }\n\n  encrypt(user: models.User, invoices: Array<models.Invoice>) {\n    return Promise.resolve(invoices)\n  }\n\n  decrypt(hcpartyId: string, invoices: Array<models.Invoice>): Promise<Array<models.Invoice>> {\n    return Promise.resolve(invoices)\n  }\n}\n"]}
+{"version":3,"file":"icc-invoice-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-invoice-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA2D;AAG3D,4BAA2B;AAC3B,kDAAiD;AAGjD,0EAAgG;AAGhG,MAAa,cAAe,SAAQ,uBAAa;IAK/C,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA6B,EAC7B,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,MAAW,EAAE,EACb,UAGI,EAAE;;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAChC,CAAC,CAAC,MAAM,CACN;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACvC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBAC5C,KAAK,EAAE,mCAAmC;gBAC1C,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;gBACR,cAAc,EAAE,EAAE;aACnB,EACD,GAAG,IAAI,EAAE,CACV,CACF,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7G,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,oBAAoB,mCAAI,EAAE,CAAC;aACtD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sCAAsC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CACjJ,CAAA;;KACF;IAED,aAAa,CAAC,OAAgB,EAAE,MAAe;QAC7C,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;SACpC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;YACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;SACjD;QACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC;aAC3D,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAG,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;aACnG,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE;YACxB,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE;gBACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;aACzC;YAED,IAAI,OAAO,CAAC,eAAe,EAAE;gBAC3B,OAAO,CAAC,gBAAgB,GAAG,eAAe,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;aACzF;iBAAM;gBACL,OAAO,CAAC,gBAAgB,GAAG,eAAe,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;aACvE;YACD,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACN,CAAC;IAED,uBAAuB,CAAC,MAAc,EAAE,YAA6B;QACnE,OAAO,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAA8B,EAAE,EAAE;YAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,CAAA;YACrE,MAAM,cAAc,GAAG,MAAM,CAAC,EAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACvD,OAAO,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,sBAAsB,CAAC,aAAqB,EAAE,KAAa,EAAE,MAAc,EAAE,YAA6B;QACxG,OAAO,YAAY;aAChB,qBAAqB,CACpB,IAAI,MAAM,CAAC,eAAe,CAAC;YACzB,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YACtD,KAAK;SACN,CAAC,CACH;aACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChB,OAAO,IAAI,CAAC,sBAAsB,CAAC,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAA;QACpF,CAAC,CAAC,CAAA;IACN,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACG,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,IAAI,QAAQ,GAAmB,SAAS;gBACtC,CAAC,CAAC,MAAM,IAAI,CAAC,gDAAgD,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACrG,CAAC,CAAC,MAAM,IAAI,CAAC,uCAAuC,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YACxG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAChD,CAAC;KAAA;IAED,OAAO,CAAC,IAAiB,EAAE,QAA+B;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,QAA+B;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,OAAuB;;YAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QACnE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,OAAuB,EACvB,UAGI,EAAE;;YAEN,OAAO,MAAM,IAAI,CAAC,aAAa,CAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAChE,OAAO,EACP,UAAU,EACV,SAAS,EACT,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,cAAc,CACvB,CACF,CAAA;QACH,CAAC;KAAA;CACF;AAtMD,wCAsMC","sourcesContent":["import { IccEntityrefApi, IccInvoiceApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { Invoice } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\n\nexport class IccInvoiceXApi extends IccInvoiceApi {\n  crypto: IccCryptoXApi\n  entityrefApi: IccEntityrefApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    entityrefApi: IccEntityrefApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.entityrefApi = entityrefApi\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of invoice with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this invoice refers to.\n   * @param inv initialised data for the invoice. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of invoice.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    inv: any = {},\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.Invoice> {\n    const invoice = new models.Invoice(\n      _.extend(\n        {\n          id: this.crypto.primitives.randomUuid(),\n          groupId: this.crypto.primitives.randomUuid(),\n          _type: 'org.taktik.icure.entities.Invoice',\n          created: new Date().getTime(),\n          modified: new Date().getTime(),\n          responsible: this.dataOwnerApi.getDataOwnerIdOf(user),\n          author: user.id,\n          codes: [],\n          tags: [],\n          invoicingCodes: [],\n        },\n        inv || {}\n      )\n    )\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.financialInformation ?? []),\n    ]\n    return new models.Invoice(\n      await this.crypto.entities.entityWithInitialisedEncryptedMetadata(invoice, patient.id, sfk, true, extraDelegations).then((x) => x.updatedEntity)\n    )\n  }\n\n  createInvoice(invoice: Invoice, prefix?: string): Promise<Invoice> {\n    if (!prefix) {\n      return super.createInvoice(invoice)\n    }\n    if (!invoice.id) {\n      invoice.id = this.crypto.primitives.randomUuid()\n    }\n    return this.getNextInvoiceReference(prefix, this.entityrefApi)\n      .then((reference) => this.createInvoiceReference(reference, invoice.id!, prefix, this.entityrefApi))\n      .then((entityReference) => {\n        if (!entityReference.id) {\n          throw new Error('Cannot create invoice')\n        }\n\n        if (invoice.internshipNihii) {\n          invoice.invoiceReference = entityReference.id.substring(prefix.length).replace('0', '1')\n        } else {\n          invoice.invoiceReference = entityReference.id.substring(prefix.length)\n        }\n        return super.createInvoice(invoice)\n      })\n  }\n\n  getNextInvoiceReference(prefix: string, entityrefApi: IccEntityrefApi): Promise<number> {\n    return entityrefApi.getLatest(prefix).then((entRef: models.EntityReference) => {\n      if (!entRef || !entRef.id || !entRef.id!.startsWith(prefix)) return 1\n      const sequenceNumber = entRef.id!.split(':').pop() || 0\n      return Number(sequenceNumber) + 1\n    })\n  }\n\n  createInvoiceReference(nextReference: number, docId: string, prefix: string, entityrefApi: IccEntityrefApi): Promise<models.EntityReference> {\n    return entityrefApi\n      .createEntityReference(\n        new models.EntityReference({\n          id: prefix + nextReference.toString().padStart(6, '0'),\n          docId,\n        })\n      )\n      .catch((err) => {\n        console.log(err)\n        return this.createInvoiceReference(nextReference + 1, docId, prefix, entityrefApi)\n      })\n  }\n\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all invoices with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the invoices of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param usingPost\n   */\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false): Promise<Array<models.Invoice>> {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    let invoices: Array<Invoice> = usingPost\n      ? await this.findInvoicesByHCPartyPatientForeignKeysUsingPost(topmostParentId, _.uniq(extractedKeys))\n      : await this.findInvoicesByHCPartyPatientForeignKeys(topmostParentId, _.uniq(extractedKeys).join(','))\n    return await this.decrypt(hcpartyId, invoices)\n  }\n\n  encrypt(user: models.User, invoices: Array<models.Invoice>) {\n    return Promise.resolve(invoices)\n  }\n\n  decrypt(hcpartyId: string, invoices: Array<models.Invoice>): Promise<Array<models.Invoice>> {\n    return Promise.resolve(invoices)\n  }\n\n  /**\n   * @param invoice a invoice\n   * @return the id of the patient that the invoice refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(invoice: models.Invoice): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(invoice, undefined)\n  }\n\n  /**\n   * Share an existing invoice with other data owners, allowing them to access the non-encrypted data of the invoice and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the invoice.\n   * @param invoice the invoice to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * invoice does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this invoice refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated invoice.\n   */\n  async shareWith(\n    delegateId: string,\n    invoice: models.Invoice,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Invoice> {\n    return await this.modifyInvoice(\n      await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n        invoice,\n        delegateId,\n        undefined,\n        options.shareEncryptionKey,\n        options.sharePatientId\n      )\n    )\n  }\n}\n"]}

package/icc-x-api/icc-maintenance-task-x-api.d.ts

@@ -1,10 +1,11 @@
 import { IccMaintenanceTaskApi } from '../icc-api/api/IccMaintenanceTaskApi';
 import { IccCryptoXApi } from './icc-crypto-x-api';
 import * as models from '../icc-api/model/models';
-import { IccHcpartyXApi } from './icc-hcparty-x-api';
 import { DocIdentifier } from '../icc-api/model/models';
+import { IccHcpartyXApi } from './icc-hcparty-x-api';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
+import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
 export declare class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi {
     crypto: IccCryptoXApi;
     hcPartyApi: IccHcpartyXApi;
@@ -13,19 +14,50 @@ export declare class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi {
     constructor(host: string, headers: {
         [key: string]: string;
     }, crypto: IccCryptoXApi, hcPartyApi: IccHcpartyXApi, dataOwnerApi: IccDataOwnerXApi, encryptedKeys?: Array<string>, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
-    newInstance(user: models.User, m: any, delegates?: string[]): Promise<models.MaintenanceTask>;
-    initDelegations(user: models.User, maintenanceTask: models.MaintenanceTask, delegates?: string[]): Promise<models.MaintenanceTask>;
-    initEncryptionKeys(user: models.User, maintenanceTask: models.MaintenanceTask, delegates?: string[]): Promise<models.MaintenanceTask>;
+    /**
+     * Creates a new instance of maintenance task with initialised encryption metadata (not in the database).
+     * @param user the current user.
+     * @param m initialised data for the maintenance task. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify
+     * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.
+     * @param options optional parameters:
+     * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
+     * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
+     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
+     * access will be possible.
+     * @return a new instance of maintenance task.
+     */
+    newInstance(user: models.User, m: any, options?: {
+        additionalDelegates?: {
+            [dataOwnerId: string]: 'WRITE';
+        };
+    }): Promise<models.MaintenanceTask>;
     createMaintenanceTask(body?: models.MaintenanceTask): never;
-    createMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | any>;
+    createMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | null>;
     filterMaintenanceTasksBy(startDocumentId?: string, limit?: number, body?: models.FilterChainMaintenanceTask): never;
     deleteMaintenanceTask(_maintenanceTaskIds: string): never;
     deleteMaintenanceTaskWithUser(user: models.User, maintenanceTaskId: string): Promise<Array<DocIdentifier>> | never;
-    filterMaintenanceTasksByWithUser(user: models.User, startDocumentId?: string, limit?: number, body?: models.FilterChainMaintenanceTask): Promise<models.PaginatedListMaintenanceTask | any>;
+    filterMaintenanceTasksByWithUser(user: models.User, startDocumentId?: string, limit?: number, body?: models.FilterChainMaintenanceTask): Promise<models.PaginatedListMaintenanceTask>;
     getMaintenanceTask(maintenanceTaskId: string): never;
     getMaintenanceTaskWithUser(user: models.User, maintenanceTaskId: string): Promise<models.MaintenanceTask | any>;
     modifyMaintenanceTask(body?: models.MaintenanceTask): never;
     modifyMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | any>;
+    private modifyAs;
     encrypt(user: models.User, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>>;
+    private encryptAs;
     decrypt(user: models.User, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>>;
+    private decryptAs;
+    /**
+     * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also
+     * the encrypted content.
+     * @param delegateId the id of the data owner which will be granted access to the maintenance task.
+     * @param maintenanceTask the maintenance task to share.
+     * @param options optional parameters to customize the sharing behaviour:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * maintenance task does not have encrypted content.
+     * @return a promise which will contain the updated maintenance task
+     */
+    shareWith(delegateId: string, maintenanceTask: models.MaintenanceTask, options?: {
+        shareEncryptionKey?: ShareMetadataBehaviour;
+    }): Promise<models.MaintenanceTask>;
 }