@icure/api 7.0.0-beta.0 → 7.0.0-beta.2

package/icc-x-api/crypto/EntitiesEncryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntitiesEncryption.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/EntitiesEncryption.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,oCAA8H;AAC9H,4BAA2B;AAE3B,gEAAuD;AACvD,qEAAiE;AAEjE;;;GAGG;AACH,MAAa,kBAAkB;IAK7B,YAAY,UAA4B,EAAE,YAA8B,EAAE,mBAAwC;QAChH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAA;IAChD,CAAC;IAED;;;OAGG;IACG,yBAAyB,CAAC,MAAuB;;;YAIrD,OAAO;gBACL,wBAAwB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC5G,6BAA6B,EAAE,KAAK;aACrC,CAAA;;KACF;IAED;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAA6C,EAC7C,WAAoB,EACpB,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;YAE9E,2DAA2D;YAC3D,OAAO,IAAI,CAAC,4CAA4C,CACtD,MAAM,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAe,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,EACvG,WAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,EACpC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAA;;KACF;IAED;;;;;;;;;OASG;IACG,+BAA+B,CACnC,MAA6C,EAC7C,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;YAE9E,OAAO,IAAI,CAAC,gCAAgC,CAC1C,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,EAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,EACpC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAA;;KACF;IAED;;;;;;OAMG;IACG,WAAW,CACf,MAA6C,EAC7C,WAAoB,EACpB,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;YAE9E,OAAO,IAAI,CAAC,4CAA4C,CACtD,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,EACxB,WAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAA;;KACF;IAED;;;;;;;;OAQG;IACG,0BAA0B,CAC9B,MAA6C,EAC7C,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;YAE9E,OAAO,IAAI,CAAC,gCAAgC,CAC1C,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,EACxB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAA;;KACF;IAED;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,MAA6C,EAC7C,WAAoB,EACpB,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;YAE9E,OAAO,IAAI,CAAC,4CAA4C,CACtD,MAAA,MAAM,CAAC,kBAAkB,mCAAI,EAAE,EAC/B,WAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EACrC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAA;;KACF;IAED;;;;;;;;;;;;;OAaG;IACG,gCAAgC,CACpC,MAA6C,EAC7C,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;YAE9E,OAAO,IAAI,CAAC,gCAAgC,CAC1C,MAAA,MAAM,CAAC,kBAAkB,mCAAI,EAAE,EAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EACrC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAA;;KACF;IAED;;;;;;;;;;;;;;OAcG;IACG,sCAAsC,CAC1C,MAAS,EACT,YAAgC,EAChC,oBAAwC,EACxC,wBAAiC,EACjC,wBAAkC,EAAE,EACpC,OAAiB,EAAE;;YAMnB,IAAI,CAAC,yCAAyC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,wCAAwC,EAAE,SAAS,CAAC,CAAA;YAC3H,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;YAC7C,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,CAAC,CAAC,IAAA,cAAM,EAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACvG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAA;YACtF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAChF,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,MAAM,CACvC,CAAO,UAAU,EAAE,UAAU,EAAE,EAAE;gBAC/B,OAAA,MAAM,IAAI,CAAC,+BAA+B,CACxC,MAAM,UAAU,EAChB,UAAU,EACV,EAAE,EACF,EAAE,EACF,EAAE,EACF,CAAC,QAAQ,CAAC,EACV,wBAAwB,CAAC,CAAC,CAAC,CAAC,gBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EACnD,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EAClC,IAAI,EACJ,cAAc,CAAC,gBAAgB,CAChC,CAAA;cAAA,EACH,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAC9C,CAAA;YACD,IAAI,oBAAoB,EAAE;gBACxB,aAAa,CAAC,iBAAiB,GAAG,CAAC,oBAAoB,CAAC,CAAA;aACzD;YACD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAA;QACtD,CAAC;KAAA;IAEK,uCAAuC,CAC3C,MAAS,EACT,kBAA2B,EAC3B,kBAMC;;;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;aACpD;YACD,IAAI,gBAAsC,CAAA;YAC1C,IAAI,kBAAkB,EAAE;gBACtB,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;gBACzD,IAAI,kBAAkB,CAAC,MAAM,EAAE;oBAC7B,gBAAgB,GAAG,kBAAkB,CAAA;iBACtC;qBAAM;oBACL,gBAAgB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;iBAClD;aACF;YACD,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;YACnE,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACrE,IAAI,aAAa,GAAG,MAAM,CAAA;YAC1B,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;gBACvE,IAAI,cAAc,GAAa,kBAAkB,CAAC,CAAC,CAAC,gBAAiB,CAAC,CAAC,CAAC,MAAA,QAAQ,CAAC,cAAc,mCAAI,EAAE,CAAA;gBACrG,IAAI,yBAAyB,GAAa,EAAE,CAAA;gBAC5C,IAAI,QAAQ,CAAC,kBAAkB,KAAK,+CAAsB,CAAC,KAAK,EAAE;oBAChE,IAAI,CAAC,uBAAuB,CAAC,MAAM,IAAI,QAAQ,CAAC,kBAAkB,KAAK,+CAAsB,CAAC,QAAQ,EAAE;wBACtG,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,qFAAqF,CAAC,CAAA;qBACvI;oBACD,yBAAyB,GAAG,uBAAuB,CAAA;iBACpD;gBACD,IAAI,0BAA0B,GAAa,EAAE,CAAA;gBAC7C,IAAI,QAAQ,CAAC,oBAAoB,KAAK,+CAAsB,CAAC,KAAK,EAAE;oBAClE,IAAI,CAAC,wBAAwB,CAAC,MAAM,IAAI,QAAQ,CAAC,oBAAoB,KAAK,+CAAsB,CAAC,QAAQ,EAAE;wBACzG,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,yFAAyF,CAAC,CAAA;qBAC3I;oBACD,0BAA0B,GAAG,wBAAwB,CAAA;iBACtD;gBACD,aAAa,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAC5D,aAAa,EACb,UAAU,EACV,cAAc,EACd,yBAAyB,EACzB,0BAA0B,CAC3B,CAAA;aACF;YACD,OAAO,aAAa,CAAA;;KACrB;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACG,mCAAmC,CACvC,MAAS,EACT,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,UAAoB,EAAE;;;YAEtB,IAAI,CAAC,yCAAyC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAA;YACtH,SAAe,gBAAgB,CAAC,KAAe,EAAE,SAAiB,EAAE,QAAmD;;oBACrH,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE;wBACrB,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;wBAC9B,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,GAAG,CAAC,CAAA;qBAC3H;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC;aAAA;YACD,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7G,MAAM,qBAAqB,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YACjI,MAAM,sBAAsB,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAA;YACrI,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,8CAA8C,CACxF,UAAU,EACV,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,EACxB,gBAAgB,EAChB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAChC,CAAA;YACD,MAAM,6BAA6B,GAAG,MAAM,IAAI,CAAC,8CAA8C,CAC7F,UAAU,EACV,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,EAC3B,qBAAqB,EACrB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CACrC,CAAA;YACD,MAAM,8BAA8B,GAAG,MAAM,IAAI,CAAC,8CAA8C,CAC9F,UAAU,EACV,MAAA,MAAM,CAAC,kBAAkB,mCAAI,EAAE,EAC/B,sBAAsB,EACtB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CACtC,CAAA;YACD;;;eAGG;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,IAAI,wBAAwB,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,EAAE;gBAC7I,wBAAwB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;aAC3E;YACD,IACE,wBAAwB,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;gBACpD,6BAA6B,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;gBACzD,8BAA8B,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;gBAE1D,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC5B,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;YAC3G,OAAO,IAAI,CAAC,+BAA+B,CACzC,aAAa,EACb,UAAU,EACV,wBAAwB,CAAC,uBAAuB,EAChD,6BAA6B,CAAC,uBAAuB,EACrD,8BAA8B,CAAC,uBAAuB,EACtD,wBAAwB,CAAC,cAAc,EACvC,6BAA6B,CAAC,cAAc,EAC5C,8BAA8B,CAAC,cAAc,EAC7C,OAAO,EACP,gBAAgB,CACjB,CAAA;;KACF;IAED;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,MAA6C,EAC7C,OAAiC,EACjC,WAAoB,EACpB,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAE9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;YACrH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,mBACvD,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CACjE,GAAG,CACJ,CAAA;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAChE,CAAC;KAAA;IAED;;;;;;;;;;;;;;;OAeG;IACG,gBAAgB,CACpB,MAA6C,EAC7C,OAAiC,EACjC,YAA8D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EACzF,WAAoB,EACpB,aAAmD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAE9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;YACzE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;gBACtB,IAAI;oBACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;oBAC3E,IAAI,MAAM,SAAS,CAAC,SAAS,CAAC;wBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;iBAC/E;gBAAC,OAAO,CAAC,EAAE;oBACV,YAAY;iBACb;aACF;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAC/C,CAAC;KAAA;IAED;;;OAGG;IACG,aAAa,CACjB,MAAS,EACT,OAA2B,EAC3B,WAA6B;;YAE7B,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YAC7D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;YAClG,IAAI,CAAC,cAAc,CAAC,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;YAC/D,OAAO;gBACL,MAAM,EAAE,WAAW,CACjB,MAAM,IAAA,eAAO,EAAC,MAAM,EAAE,CAAO,SAAS,EAAE,EAAE;;oBACxC,OAAO,MAAA,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,mCAAI,EAAE,CAAA;gBAC5E,CAAC,CAAA,CAAC,CACH;gBACD,SAAS,EAAE,IAAI;aAChB,CAAA;QACH,CAAC;KAAA;IAED;;;OAGG;IACG,cAAc,CAClB,aAAgD,EAChD,SAAqB,EACrB,8BAAuC;;;YAEvC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE;gBAC/B,IAAI;oBACF,MAAM,SAAS,GAAG,MAAA,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,mCAAI,SAAS,CAAA;oBAC/F,MAAM,IAAI,GAAG,IAAA,eAAO,EAAC,8BAA8B,CAAC,CAAC,CAAC,IAAA,6BAAqB,EAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;oBACnH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;iBACxB;gBAAC,OAAO,CAAC,EAAE,GAAE;aACf;YACD,OAAO,SAAS,CAAA;;KACjB;IAED;;;;;;;;OAQG;IACG,gBAAgB,CACpB,MAAS,EACT,WAA+B,EAC/B,WAAqB,EACrB,gBAAyB,EACzB,iBAA0B,EAC1B,WAA6B;;YAE7B,MAAM,mCAAmC,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,CAAA;YAC9F,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;YACrH,IAAI,CAAC,CAAC,aAAa,EAAE;gBACnB,OAAO,WAAW,CAChB,MAAM,IAAA,aAAK,EACT,mCAAmC,EACnC,CAAC,GAAG,EAAE,EAAE;oBACN,MAAM,IAAI,GAAG,gBAAgB;wBAC3B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;4BAC3B,OAAO,CAAC,YAAY,WAAW,IAAI,CAAC,YAAY,UAAU;gCACxD,CAAC,CAAC,IAAA,WAAG,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gCACzE,CAAC,CAAC,CAAC,CAAA;wBACP,CAAC,CAAC;wBACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;oBACvB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,IAAI,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;gBAC1F,CAAC,EACD,WAAW,CACZ,CACF,CAAA;aACF;iBAAM,IAAI,iBAAiB,EAAE;gBAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAA;aACnE;iBAAM;gBACL,MAAM,wBAAwB,GAAG,MAAM,IAAA,aAAK,EAC1C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EACnB,CAAO,GAA8B,EAAE,EAAE,gDAAC,OAAA,OAAO,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,EAC7E,WAAW,CACZ,CAAA;gBACD,IACE,CAAC,CAAC,CAAC,OAAO,CACR,CAAC,CAAC,MAAM,iCAAM,wBAAwB,KAAE,aAAa,EAAE,SAAS,KAAI,CAAC,CAAC,KAAK,CAAC,EAC5E,CAAC,CAAC,MAAM,iCAAM,MAAM,KAAE,aAAa,EAAE,SAAS,KAAI,CAAC,CAAC,KAAK,CAAC,CAC3D,EACD;oBACA,MAAM,IAAI,KAAK,CAAC,qFAAqF,MAAM,EAAE,CAAC,CAAA;iBAC/G;gBACD,OAAO,MAAM,CAAA;aACd;QACH,CAAC;KAAA;IAED;;;;;OAKG;IACG,+BAA+B,CAA4B,MAAS;;;YACxE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAA;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBACf,MAAM,IAAI,KAAK,CACb,uDAAuD;oBACrD,kGAAkG,CACrG,CAAA;aACF;YACD;;;;eAIG;YACH,OAAO,MAAM,IAAI,CAAC,mCAAmC,CACnD,MAAM,EACN,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAC/C,EAAE,EACF,CAAC,IAAA,cAAM,EAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EACzC,EAAE,CACH,CAAA;;KACF;IAED;;;;;;;;;;;;OAYG;IACW,kCAAkC,CAC9C,WAAmB,EACnB,WAAmD,EACnD,sBAA+B,EAC/B,iBAAiE,EACjE,UAAgD;;;YAEhD,MAAM,oBAAoB,GAAG,sBAAsB;gBACjD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,CAChE,WAAW,KAAK,UAAU;oBACxB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC;oBACnD,CAAC,CAAC,IAAI,CAAC,mBAAmB,CACtB,UAAU,EACV,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CACnD,CACN;gBACH,CAAC,CAAC,MAAA,WAAW,CAAC,WAAW,CAAC,mCAAI,EAAE,CAAA;YAClC,MAAM,GAAG,GAAG,EAAE,CAAA;YACd,KAAK,MAAM,UAAU,IAAI,oBAAoB,EAAE;gBAC7C,IAAI,MAAM,UAAU,CAAC,MAAA,UAAU,CAAC,IAAI,mCAAI,EAAE,CAAC,EAAE;oBAC3C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC1F,IAAI,SAAS;wBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;iBACnC;aACF;YACD,OAAO,GAAG,CAAA;;KACX;IAED,mJAAmJ;IAC3I,mBAAmB,CAAC,UAAkB,EAAE,WAAyB;QACvE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iCAAM,CAAC,KAAE,WAAW,EAAE,UAAU,GAAE,CAAC,CAAC,CAAA;IACvG,CAAC;IAEa,gCAAgC,CAC5C,WAAmD,EACnD,iBAAiE,EACjE,UAAgD;;YAEhD,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,GAAG,CAAC,CAAO,OAAO,EAAE,EAAE;gBAChF,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAChC,MAAM,IAAI,CAAC,kCAAkC,CAC3C,OAAO,EACP,WAAW,EACX,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CACF,CAAA;gBACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;YAC/B,CAAC,CAAA,CAAC,CACH,CAAA;QACH,CAAC;KAAA;IAED;;OAEG;IACG,4CAA4C,CAChD,WAAmD,EACnD,WAA+B,EAC/B,iBAAiE,EACjE,UAAgD;;YAEhD,MAAM,SAAS,GAAG,WAAW;gBAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,WAAW,CAAC;gBAC1E,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAA;YAC7D,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG;YACxC,mIAAmI;YACnI,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvC,IAAI,CAAC,kCAAkC,CACrC,OAAO,EACP,WAAW,EACX,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CACF,CACF,CAAA;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7D,CAAC;KAAA;IAEa,oBAAoB,CAChC,UAAsB,EACtB,iBAAiE;;YAEjE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,UAAU,CAAC,KAAM,EAAE,UAAU,CAAC,WAAY,CAAC,CAAA;YAC5H,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;gBAC9B,IAAI;oBACF,uIAAuI;oBACvI,gIAAgI;oBAChI,+HAA+H;oBAC/H,MAAM,SAAS,GAAG,IAAA,iBAAS,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAA,cAAM,EAAC,UAAU,CAAC,GAAI,CAAC,CAAC,CAAC,CAAA;oBAC5F,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;oBAC3C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;wBAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;wBACvD,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;4BAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;qBAClG;yBAAM;wBACL,OAAO,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAA;qBACpH;iBACF;gBAAC,OAAO,CAAC,EAAE;oBACV,wEAAwE;iBACzE;aACF;QACH,CAAC;KAAA;IAEa,YAAY,CAAC,GAAW;;YACpC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAA;YACpD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;aACjF;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,EAAE,CAAC,CAAC,CAAA;gBACpE,OAAO,SAAS,CAAA;aACjB;QACH,CAAC;KAAA;IAED;;OAEG;IACG,mBAAmB,CAAC,IAAc,EAAE,QAAgB;;YACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC7D,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,GAAG,CAAC,CAAA;YACjF,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEa,sBAAsB,CAAC,IAAc,EAAE,QAAgB;;YACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;gBACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;gBAC7C,IAAI,QAAQ;oBAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;aACjD;QACH,CAAC;KAAA;IAED;;OAEG;IACG,kBAAkB,CAAC,IAAc;;YACrC,MAAM,GAAG,GAAG,EAAE,CAAA;YACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;gBACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;gBAC7C,IAAI,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;aACpD;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEa,qBAAqB,CAAC,GAAW;;YAC7C,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QACzC,CAAC;KAAA;IAEO,gBAAgB,CAAC,GAAW;QAClC,OAAO,CAAC,CAAC,GAAG,CAAA;IACd,CAAC;IAEO,sBAAsB,CAAC,GAAW;QACxC,OAAO,CAAC,CAAC,GAAG,CAAA;IACd,CAAC;IAEa,6BAA6B,CACzC,QAAgB,EAChB,UAAkB,EAClB,WAAsB,EACtB,aAAqB,EACrB,OAAiB;;YAEjB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,aAAa,EAAE,CAAC,CAAA;YAClH,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QACzF,CAAC;KAAA;IAEa,wBAAwB,CACpC,QAAgB,EAChB,UAAkB,EAClB,WAAsB,EACtB,QAAgB,EAChB,OAAiB;;YAEjB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAA;YACtF,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QACpF,CAAC;KAAA;IAEa,8BAA8B,CAC1C,QAAgB,EAChB,UAAkB,EAClB,WAAsB,EACtB,cAAsB,EACtB,OAAiB;;YAEjB,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,cAAc,EAAE,CAAC,CAAA;YACxG,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAA;QAC1F,CAAC;KAAA;IAEa,gBAAgB,CAC5B,QAAgB,EAChB,UAAkB,EAClB,WAAsB,EACtB,OAAe,EACf,OAAiB;;YAEjB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;YACxG,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;YACxF,OAAO;gBACL,WAAW,EAAE,UAAU;gBACvB,KAAK,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE;gBACtD,GAAG,EAAE,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAA,iBAAS,EAAC,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC;gBAChG,IAAI,EAAE,OAAO;aACd,CAAA;QACH,CAAC;KAAA;IAEa,8BAA8B,CAC1C,MAAS,EACT,SAAmB;;;YAEnB,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,CACnE,CAAO,GAAG,EAAE,UAAU,EAAE,EAAE;;gBACxB,MAAM,UAAU,GAAG,MAAM,GAAG,CAAA;gBAC5B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mCAAmC,CAAC,UAAU,CAAC,CAAA;gBACvG,OAAO;oBACL,gBAAgB,EAAE,MAAA,gBAAgB,CAAC,gBAAgB,mCAAI,UAAU,CAAC,gBAAgB;oBAClF,gBAAgB,kCACX,UAAU,CAAC,gBAAgB,KAC9B,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,IAAI,GACpC;iBACF,CAAA;YACH,CAAC,CAAA,EACD,OAAO,CAAC,OAAO,CAAC;gBACd,gBAAgB,EAAE,SAA0C;gBAC5D,gBAAgB,EAAE,EAA2C;aAC9D,CAAC,CACH,CAAA;YACD,MAAM,aAAa,GACjB,MAAM,CAAC,EAAE,MAAK,MAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,SAAS,0CAAE,EAAE,CAAA;gBAC3C,CAAC,iCACM,MAAM,KACT,GAAG,EAAE,gBAAiB,CAAC,SAAS,CAAC,GAAG,EACpC,WAAW,EAAE,gBAAiB,CAAC,SAAS,CAAC,WAAW,EACpD,eAAe,EAAE,gBAAiB,CAAC,SAAS,CAAC,eAAe,IAEhE,CAAC,CAAC,MAAM,CAAA;YACZ,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAA;;KAC3C;IAEa,+BAA+B,CAC3C,MAAS,EACT,UAAkB,EAClB,iBAA+B,EAC/B,sBAAoC,EACpC,uBAAqC,EACrC,YAAsB,EACtB,iBAA2B,EAC3B,kBAA4B,EAC5B,OAAiB,EACjB,gBAAuD;;;YAEvD,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACtC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAA;YACrH,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;YACjD,MAAM,gBAAgB,GAAG;gBACvB,GAAG,iBAAiB;gBACpB,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;aAC9H,CAAA;YACD,MAAM,qBAAqB,GAAG;gBAC5B,GAAG,sBAAsB;gBACzB,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,EAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;aACxI,CAAA;YACD,MAAM,sBAAsB,GAAG;gBAC7B,GAAG,uBAAuB;gBAC1B,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;aAC1I,CAAA;YACD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC/B,UAAU,CAAC,WAAW,mCACjB,CAAC,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC,KAC7B,CAAC,UAAU,CAAC,EAAE,gBAAgB,GAC/B,CAAA;aACF;YACD,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE;gBACpC,UAAU,CAAC,cAAc,mCACpB,CAAC,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,CAAC,KAChC,CAAC,UAAU,CAAC,EAAE,qBAAqB,GACpC,CAAA;aACF;YACD,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE;gBACrC,UAAU,CAAC,kBAAkB,mCACxB,CAAC,MAAA,MAAM,CAAC,kBAAkB,mCAAI,EAAE,CAAC,KACpC,CAAC,UAAU,CAAC,EAAE,sBAAsB,GACrC,CAAA;aACF;YACD,OAAO,UAAU,CAAA;;KAClB;IAED;;;;;;;;OAQG;IACW,8CAA8C,CAC1D,UAAkB,EAClB,cAAsD,EACtD,eAAyB,EACzB,iBAA4D;;;YAK5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,qBAAqB,GAAG,MAAA,cAAc,CAAC,UAAU,CAAC,mCAAI,EAAE,CAAA;YAC9D,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5C,qBAAqB,CAAC,GAAG,CAAC,CAAO,CAAC,EAAE,EAAE;gBAAC,OAAA,CAAC;oBACtC,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC1G,CAAC,CAAA;cAAA,CAAC,CACJ,CAAA;YACD,MAAM,uBAAuB,GAAiB,EAAE,CAAA;YAChD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAsB,CAAA;YACzD,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;;gBACvD,IAAI,OAAO,KAAK,SAAS,EAAE;oBACzB,sEAAsE;oBACtE,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;iBACzC;qBAAM;oBACL,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBACzD,IAAI,CAAC,gBAAgB,EAAE;wBACrB,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAA,UAAU,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAC,CAAA;wBACzD,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;qBACzC;yBAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,IAAA,8BAAW,EAAC,CAAC,EAAE,MAAA,UAAU,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA,EAAA,CAAC,EAAE;wBAC/E,gBAAgB,CAAC,IAAI,CAAC,MAAA,UAAU,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;wBAC5C,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;qBACzC;iBACF;YACH,CAAC,CAAC,CAAA;YACF,MAAM,6BAA6B,GAAG,CAAC,MAAA,cAAc,CAAC,MAAM,CAAC,mCAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAA;YAC1G,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAC9C,MAAM,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACnI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACpC,CACF,CAAA;YACD,OAAO;gBACL,uBAAuB;gBACvB,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,gCAAgC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;aACpI,CAAA;;KACF;IAEO,WAAW,CAAI,MAAW;QAChC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7B,CAAC;IAEO,yCAAyC,CAAC,OAAe,EAAE,QAAa,EAAE,UAAkB,EAAE,UAAsB;QAC1H,IAAI,QAAQ;YAAE,OAAM;QAEpB,IAAI,OAAO,GAAG,kCAAkC,GAAG,UAAU,GAAG,gBAAgB,CAAA;QAEhF,IAAI,UAAU,EAAE;YACd,IAAI;gBACF,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,CAAA;gBACjC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;aAC5F;YAAC,OAAO,EAAE,EAAE;gBACX,OAAO,IAAI,uDAAuD,GAAG,EAAE,CAAA;aACxE;SACF;QAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,OAAO,GAAG,yBAAyB,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAA;IAC5G,CAAC;IAEO,4BAA4B,CAAC,MAAuB;QAC1D,MAAM,gBAAgB,GAAG,EAAE,CAAA;QAC3B,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACtG,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC3H,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC/G,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC3G,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;YAC/B,MAAM,IAAI,KAAK,CACb,mHAAmH,gBAAgB,IAAI;gBACrI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CACvC,CAAA;SACF;IACH,CAAC;CACF;AA95BD,gDA85BC","sourcesContent":["import { Delegation, EncryptedEntity, EncryptedEntityStub } from '../../icc-api/model/models'\nimport { DataOwnerWithType, IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { ExchangeKeysManager } from './ExchangeKeysManager'\nimport { b2a, crypt, decrypt, hex2ua, string2ua, truncateTrailingNulls, ua2hex, ua2string, ua2utf8, utf8_2ua } from '../utils'\nimport * as _ from 'lodash'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { arrayEquals } from '../utils/collection-utils'\nimport { ShareMetadataBehaviour } from './ShareMetadataBehaviour'\n\n/**\n * @internal this class is for internal use only and may be changed without notice\n * Give access to functions for retrieving encryption metadata of entities.\n */\nexport class EntitiesEncryption {\n  private readonly primitives: CryptoPrimitives\n  private readonly dataOwnerApi: IccDataOwnerXApi\n  private readonly exchangeKeysManager: ExchangeKeysManager\n\n  constructor(primitives: CryptoPrimitives, dataOwnerApi: IccDataOwnerXApi, exchangeKeysManager: ExchangeKeysManager) {\n    this.primitives = primitives\n    this.dataOwnerApi = dataOwnerApi\n    this.exchangeKeysManager = exchangeKeysManager\n  }\n\n  /**\n   * Get the data owners which can access the entity\n   * @param entity an entity.\n   */\n  async getDataOwnersWithAccessTo(entity: EncryptedEntity): Promise<{\n    permissionsByDataOwnerId: { [dataOwnerId: string]: 'WRITE' }\n    hasUnknownAnonymousDataOwners: boolean\n  }> {\n    return {\n      permissionsByDataOwnerId: Object.fromEntries(Object.keys(entity.delegations ?? {}).map((x) => [x, 'WRITE'])),\n      hasUnknownAnonymousDataOwners: false,\n    }\n  }\n\n  /**\n   * Get the encryption keys of an entity that the provided data owner can access, potentially using the keys for his parent.\n   * There should only be one encryption key for each entity, but the method supports more to allow to deal with conflicts and merged duplicate data.\n   * @param entity an encrypted entity.\n   * @param dataOwnerId optionally a data owner part of the hierarchy for the current data owner, defaults to the current data owner.\n   * @param tagsFilter allows to obtain only encryption keys associated to tags which satisfy the provided filter.\n   * @return the encryption keys that the provided data owner can decrypt, deduplicated.\n   */\n  async encryptionKeysOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    dataOwnerId?: string,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<string[]> {\n    // Legacy entities may have encryption keys in delegations.\n    return this.extractMergedHierarchyFromDelegationAndOwner(\n      Object.keys(entity.encryptionKeys ?? {}).length > 0 ? entity.encryptionKeys! : entity.delegations ?? {},\n      dataOwnerId,\n      (k) => this.validateEncryptionKey(k),\n      (t) => tagsFilter(t)\n    )\n  }\n\n  /**\n   * Get the encryption keys of an entity that the current data owner and his parents can access. The resulting array contains the keys for each data\n   * owner in the hierarchy which can be decrypted using only that data owner keys (excludes keys accessible through the parent keys). The order of\n   * the array is the same as in {@link IccDataOwnerXApi.getCurrentDataOwnerHierarchyIds}.\n   * Note that different data owners may have access to the same keys, but the keys extracted for each data owner are deduplicated.\n   * There should only be one encryption key for each entity, but the method supports more to allow to deal with conflicts and merged duplicate data.\n   * @param entity an encrypted entity.\n   * @param tagsFilter allows to obtain only encryption keys associated to tags which satisfy the provided filter.\n   * @return the encryption keys that each member of the current data owner hierarchy can decrypt using only his keys and not keys of his parents.\n   */\n  async encryptionKeysForHcpHierarchyOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.extractedHierarchyFromDelegation(\n      entity.encryptionKeys ?? {},\n      (k) => this.validateEncryptionKey(k),\n      (t) => tagsFilter(t)\n    )\n  }\n\n  /**\n   * Get the secret ids (SFKs) of an entity that the provided data owner can access, potentially using the keys for his parent.\n   * @param entity an encrypted entity.\n   * @param dataOwnerId optionally a data owner part of the hierarchy for the current data owner, defaults to the current data owner.\n   * @param tagsFilter allows to obtain only secret ids associated to tags which satisfy the provided filter.\n   * @return the secret ids (SFKs) that the provided data owner can decrypt, deduplicated.\n   */\n  async secretIdsOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    dataOwnerId?: string,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<string[]> {\n    return this.extractMergedHierarchyFromDelegationAndOwner(\n      entity.delegations ?? {},\n      dataOwnerId,\n      (k) => this.validateSecretId(k),\n      (t) => tagsFilter(t)\n    )\n  }\n\n  /**\n   * Get the secret ids (SFKs) of an entity that the current data owner and his parents can access. The resulting array contains the ids for each data\n   * owner in the hierarchy which can be decrypted using only that data owner keys (excludes ids accessible through the parent keys). The order of\n   * the array is the same as in {@link IccDataOwnerXApi.getCurrentDataOwnerHierarchyIds}.\n   * Note that different data owners may have access to the same secret ids, but the secret ids extracted for each data owner are deduplicated.\n   * @param entity an encrypted entity.\n   * @param tagsFilter allows to obtain only secret ids associated to tags which satisfy the provided filter.\n   * @return the secret ids that each member of the current data owner hierarchy can decrypt using only his keys and not keys of his parents.\n   */\n  async secretIdsForHcpHierarchyOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.extractedHierarchyFromDelegation(\n      entity.delegations ?? {},\n      (k) => this.validateSecretId(k),\n      (t) => tagsFilter(t)\n    )\n  }\n\n  /**\n   * Get the decrypted owning entity ids (formerly CFKs) for the provided entity that can be decrypted using the private keys of the current data\n   * owner and his parents. The owning entity id would be, for example, the id of a patient for contact and healthcare elements, or the id of a\n   * message for documents.\n   * There should only be one owning entity id for each entity, but the method supports more to allow to deal with conflicts and merged duplicate\n   * data.\n   * @param entity an encrypted entity.\n   * @param dataOwnerId optionally a data owner part of the hierarchy for the current data owner, defaults to the current data owner.\n   * @param tagsFilter allows to obtain only owning entity ids associated to tags which satisfy the provided filter.\n   * @return the owning entity ids (CFKs) that the provided data owner can decrypt, deduplicated.\n   */\n  async owningEntityIdsOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    dataOwnerId?: string,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<string[]> {\n    return this.extractMergedHierarchyFromDelegationAndOwner(\n      entity.cryptedForeignKeys ?? {},\n      dataOwnerId,\n      (k) => this.validateOwningEntityId(k),\n      (t) => tagsFilter(t)\n    )\n  }\n\n  /**\n   * Get the decrypted owning entity ids (formerly CFKs) for the provided entity that can be decrypted using the private keys of the current data\n   * owner and his parents. The owning entity id would be, for example, the id of a patient for contact and healthcare elements, or the id of a\n   * message for documents.\n   * The resulting array contains the ids for each data owner in the hierarchy which can be decrypted using only that data owner keys (excludes ids\n   * accessible through the parent keys). The order of the array is the same as in {@link IccDataOwnerXApi.getCurrentDataOwnerHierarchyIds}.\n   * Note that different data owners may have access to the same owning entity ids, but the owning entity ids extracted for each data owner are\n   * deduplicated in case they could be accessed through different delegations.\n   * There should only be one owning entity id for each entity, but the method supports more to allow to deal with conflicts and merged duplicate\n   * data.\n   * @param entity an encrypted entity.\n   * @param tagsFilter allows to obtain only owning entity ids associated to tags which satisfy the provided filter.\n   * @return the owning entity ids that each member of the current data owner hierarchy can decrypt using only his keys and not keys of his parents.\n   */\n  async owningEntityIdsForHcpHierarchyOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.extractedHierarchyFromDelegation(\n      entity.cryptedForeignKeys ?? {},\n      (k) => this.validateOwningEntityId(k),\n      (t) => tagsFilter(t)\n    )\n  }\n\n  /**\n   * @internal this method is intended only for internal use and may be changed without notice.\n   * Initializes encryption metadata for an entity. This includes the encrypted secret id, owning entity id, and encryption key for the entity, and\n   * the clear text secret foreign key of the parent entity.\n   * This method returns a modified copy of the entity.\n   * @param entity entity which requires encryption metadata initialisation.\n   * @param owningEntity id of the owning entity, if any (e.g. patient id for Contact/HealtchareElement, message id for Document, ...).\n   * @param owningEntitySecretId secret id of the parent entity, to use in the secret foreign keys for the provided entity, if any.\n   * @param initialiseEncryptionKeys if false this method will not initialize any encryption keys. Use only for entities which use delegations for\n   * access control but don't actually have any encrypted content.\n   * @param additionalDelegations automatically shares the\n   * @param tags tags to associate with the initial encryption keys and metadata\n   * @throws if the entity already has non-empty values for encryption metadata.\n   * @return an updated copy of the entity.\n   */\n  async entityWithInitialisedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T,\n    owningEntity: string | undefined,\n    owningEntitySecretId: string | undefined,\n    initialiseEncryptionKeys: boolean,\n    additionalDelegations: string[] = [],\n    tags: string[] = []\n  ): Promise<{\n    updatedEntity: T\n    rawEncryptionKey: string | undefined\n    secretId: string\n  }> {\n    this.throwDetailedExceptionForInvalidParameter('entity.id', entity.id, 'entityWithInitialisedEncryptedMetadata', arguments)\n    this.checkEmptyEncryptionMetadata(entity)\n    const secretId = this.primitives.randomUuid()\n    const rawEncryptionKey = initialiseEncryptionKeys ? ua2hex(this.primitives.randomBytes(16)) : undefined\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const allIds = [selfId, ...new Set(additionalDelegations.filter((x) => x !== selfId))]\n    const loadKeysResult = await this.loadEncryptionKeysForDelegates(entity, allIds)\n    const updatedEntity = await allIds.reduce<Promise<T>>(\n      async (prevUpdate, delegateId) =>\n        await this.createOrUpdateEntityDelegations(\n          await prevUpdate,\n          delegateId,\n          [],\n          [],\n          [],\n          [secretId],\n          initialiseEncryptionKeys ? [rawEncryptionKey!] : [],\n          owningEntity ? [owningEntity] : [],\n          tags,\n          loadKeysResult.keysForDelegates\n        ),\n      Promise.resolve(loadKeysResult.updatedEntity)\n    )\n    if (owningEntitySecretId) {\n      updatedEntity.secretForeignKeys = [owningEntitySecretId]\n    }\n    return { updatedEntity, secretId, rawEncryptionKey }\n  }\n\n  async entityWithAutoExtendedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T,\n    autoShareSecretIds: boolean,\n    delegatesShareInfo: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        shareEncryptionKey?: ShareMetadataBehaviour\n        shareOwningEntityIds?: ShareMetadataBehaviour\n      }\n    }\n  ): Promise<T> {\n    if (!Object.keys(delegatesShareInfo).length) {\n      throw new Error('Must specify at least a delegate')\n    }\n    let defaultSecretIds: string[] | undefined\n    if (autoShareSecretIds) {\n      const availableSecretIds = await this.secretIdsOf(entity)\n      if (availableSecretIds.length) {\n        defaultSecretIds = availableSecretIds\n      } else {\n        defaultSecretIds = [this.primitives.randomUuid()]\n      }\n    }\n    const availableEncryptionKeys = await this.encryptionKeysOf(entity)\n    const availableOwningEntityIds = await this.owningEntityIdsOf(entity)\n    let updatedEntity = entity\n    for (const [delegateId, requests] of Object.entries(delegatesShareInfo)) {\n      let shareSecretIds: string[] = autoShareSecretIds ? defaultSecretIds! : requests.shareSecretIds ?? []\n      let actualShareEncryptionKeys: string[] = []\n      if (requests.shareEncryptionKey !== ShareMetadataBehaviour.NEVER) {\n        if (!availableEncryptionKeys.length && requests.shareEncryptionKey === ShareMetadataBehaviour.REQUIRED) {\n          throw new Error(`Entity ${JSON.stringify(entity)} has no encryption keys or the current data owner can't access any encryption keys.`)\n        }\n        actualShareEncryptionKeys = availableEncryptionKeys\n      }\n      let actualShareOwningEntityIds: string[] = []\n      if (requests.shareOwningEntityIds !== ShareMetadataBehaviour.NEVER) {\n        if (!availableOwningEntityIds.length && requests.shareOwningEntityIds === ShareMetadataBehaviour.REQUIRED) {\n          throw new Error(`Entity ${JSON.stringify(entity)} has no owning entity ids or the current data owner can't access any owning entity ids.`)\n        }\n        actualShareOwningEntityIds = availableOwningEntityIds\n      }\n      updatedEntity = await this.entityWithExtendedEncryptedMetadata(\n        updatedEntity,\n        delegateId,\n        shareSecretIds,\n        actualShareEncryptionKeys,\n        actualShareOwningEntityIds\n      )\n    }\n    return updatedEntity\n  }\n\n  /**\n   * Updates encryption metadata for an entity in order to share it with a delegate or in order to add additional encrypted metadata for an existing\n   * delegate.\n   * The first time this method is used for a specific delegate it will give access to all unencrypted content of the entity to the delegate data\n   * owner. Additionally, this method also allows to share new or existing secret ids (shareSecretId), encryption keys (shareEncryptionKeys) and\n   * owning entity ids (shareOwningEntityIds) for the entity.\n   * You can use methods like {@link secretIdsOf}, {@link secretIdsForHcpHierarchyOf}, {@link encryptionKeysOf}, ... to retrieve the data you want to\n   * share. In most cases you may want to share everything related to the entity, but note that if you use confidential delegations for patients you\n   * may want to avoid sharing the confidential secret ids of the current user with other hcps.\n   * This method returns a modified copy of the entity.\n   * @param entity entity which requires encryption metadata initialisation.\n   * @param delegateId id of the delegate to share data with.\n   * @param shareSecretIds secret ids to share.\n   * @param shareEncryptionKeys encryption keys to share.\n   * @param shareOwningEntityIds owning enttiy ids to share.\n   * @param newTags tags to associate with the new encryption keys and metadata. Existing data won't be changed.\n   * @throws if any of the shareX parameters is set to `true` but the corresponding piece of data could not be retrieved.\n   * @return an updated copy of the entity.\n   */\n  async entityWithExtendedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T,\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    newTags: string[] = []\n  ): Promise<T> {\n    this.throwDetailedExceptionForInvalidParameter('entity.id', entity.id, 'entityWithSharedEncryptedMetadata', arguments)\n    async function checkInputAndGet(input: string[], inputName: string, validate: (x: string) => boolean | Promise<boolean>): Promise<string[]> {\n      for (const x of input) {\n        const validation = validate(x)\n        if (validation !== true && validation !== false && !(await validation)) throw new Error(`Invalid input for ${inputName}.`)\n      }\n      return input\n    }\n    const secretIdsToShare = await checkInputAndGet(shareSecretIds, 'secretIds', (x) => this.validateSecretId(x))\n    const encryptionKeysToShare = await checkInputAndGet(shareEncryptionKeys, 'encryptionKeys', (x) => this.validateEncryptionKey(x))\n    const owningEntityIdsToShare = await checkInputAndGet(shareOwningEntityIds, 'owningEntityIds', (x) => this.validateOwningEntityId(x))\n    const deduplicateInfoSecretIds = await this.deduplicateDelegationsAndFilterRequiredEntries(\n      delegateId,\n      entity.delegations ?? {},\n      secretIdsToShare,\n      (x) => this.validateSecretId(x)\n    )\n    const deduplicateInfoEncryptionKeys = await this.deduplicateDelegationsAndFilterRequiredEntries(\n      delegateId,\n      entity.encryptionKeys ?? {},\n      encryptionKeysToShare,\n      (x) => this.validateEncryptionKey(x)\n    )\n    const deduplicateInfoOwningEntityIds = await this.deduplicateDelegationsAndFilterRequiredEntries(\n      delegateId,\n      entity.cryptedForeignKeys ?? {},\n      owningEntityIdsToShare,\n      (x) => this.validateOwningEntityId(x)\n    )\n    /*TODO\n     * Temporary hack since secret id is necessary to create a delegation for access control: if there is no delegation existing from me to the\n     * delegate and there is no new secret id to be created create a new random id.\n     */\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    if (deduplicateInfoSecretIds.missingEntries.length === 0 && !deduplicateInfoSecretIds.deduplicatedDelegations.some((d) => d.owner === selfId)) {\n      deduplicateInfoSecretIds.missingEntries.push(this.primitives.randomUuid())\n    }\n    if (\n      deduplicateInfoSecretIds.missingEntries.length === 0 &&\n      deduplicateInfoEncryptionKeys.missingEntries.length === 0 &&\n      deduplicateInfoOwningEntityIds.missingEntries.length === 0\n    )\n      return _.cloneDeep(entity)\n    const { updatedEntity, keysForDelegates } = await this.loadEncryptionKeysForDelegates(entity, [delegateId])\n    return this.createOrUpdateEntityDelegations(\n      updatedEntity,\n      delegateId,\n      deduplicateInfoSecretIds.deduplicatedDelegations,\n      deduplicateInfoEncryptionKeys.deduplicatedDelegations,\n      deduplicateInfoOwningEntityIds.deduplicatedDelegations,\n      deduplicateInfoSecretIds.missingEntries,\n      deduplicateInfoEncryptionKeys.missingEntries,\n      deduplicateInfoOwningEntityIds.missingEntries,\n      newTags,\n      keysForDelegates\n    )\n  }\n\n  /**\n   * Encrypts data using a key of the entity that the provided data owner can access (current data owner by default). If the provided data owner can\n   * access multiple encryption keys of the entity there is no guarantee on which key will be used.\n   * Note: you should not use this method to encrypt the `encryptedSelf` of iCure entities, since that will be automatically handled by the extended\n   * apis. You should use this method only to encrypt additional data, such as document attachments.\n   * @param entity an entity.\n   * @param content data of the entity which you want to encrypt.\n   * @param dataOwnerId optionally a data owner part of the hierarchy for the current data owner, defaults to the current data owner.\n   * @param tagsFilter allows to use for encryption only keys associated to tags which pass the filter.\n   * @return the encrypted data.\n   * @throws if the provided data owner can't access any encryption keys for the entity.\n   */\n  async encryptDataOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    content: ArrayBuffer | Uint8Array,\n    dataOwnerId?: string,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const keys = await this.encryptionKeysOf(await this.ensureEncryptionKeysInitialised(entity), dataOwnerId, tagsFilter)\n    if (keys.length === 0)\n      throw new Error(\n        `Could not extract any encryption keys of entity ${entity} for data owner ${\n          dataOwnerId ?? (await this.dataOwnerApi.getCurrentDataOwnerId())\n        }.`\n      )\n    return this.primitives.AES.encryptWithRawKey(keys[0], content)\n  }\n\n  /**\n   * Decrypts data using a key of the entity that the provided data owner can access (current data owner by default). If the provided data owner can\n   * access multiple encryption keys each of them will be tried for decryption until one of them gives a result that is valid according to the\n   * provided validator.\n   * Note: you should not use this method to decrypt the `encryptedSelf` of iCure entities, since that will be automatically handled by the extended\n   * apis. You should use this method only to decrypt additional data, such as document attachments.\n   * @param entity an entity.\n   * @param content data of the entity which you want to decrypt.\n   * @param dataOwnerId optionally a data owner part of the hierarchy for the current data owner, defaults to the current data owner.\n   * @param validator a function which verifies the correctness of decrypted content: helps to identify decryption with the wrong key without relying\n   * solely on padding.\n   * @param tagsFilter allows to use for decryption only keys associated to tags which pass the filter.\n   * @return the decrypted data.\n   * @throws if the provided data owner can't access any encryption keys for the entity, or if no key could be found which provided valid decrypted\n   * content according to the validator.\n   */\n  async tryDecryptDataOf(\n    entity: EncryptedEntity | EncryptedEntityStub,\n    content: ArrayBuffer | Uint8Array,\n    validator: (decryptedData: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true),\n    dataOwnerId?: string,\n    tagsFilter: (tags: string[]) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    const keys = await this.encryptionKeysOf(entity, dataOwnerId, tagsFilter)\n    for (const key of keys) {\n      try {\n        const decrypted = await this.primitives.AES.decryptWithRawKey(key, content)\n        if (await validator(decrypted)) return { data: decrypted, wasDecrypted: true }\n      } catch (e) {\n        /* ignore */\n      }\n    }\n    return { data: content, wasDecrypted: false }\n  }\n\n  /**\n   * @internal this method is intended for internal use only and may be changed without notice.\n   * Decrypts the content of an encrypted entity.\n   */\n  async decryptEntity<T extends EncryptedEntity>(\n    entity: T,\n    ownerId: string | undefined,\n    constructor: (json: any) => T\n  ): Promise<{ entity: T; decrypted: boolean }> {\n    if (!entity.encryptedSelf) return { entity, decrypted: true }\n    const encryptionKeys = await this.importAllValidKeys(await this.encryptionKeysOf(entity, ownerId))\n    if (!encryptionKeys.length) return { entity, decrypted: false }\n    return {\n      entity: constructor(\n        await decrypt(entity, async (encrypted) => {\n          return (await this.tryDecryptJson(encryptionKeys, encrypted, false)) ?? {}\n        })\n      ),\n      decrypted: true,\n    }\n  }\n\n  /**\n   * @internal this method is intended for internal use only and may be changed without notice.\n   * Tries using the provided keys to decrypt some json.\n   */\n  async tryDecryptJson(\n    potentialKeys: { key: CryptoKey; raw: string }[],\n    encrypted: Uint8Array,\n    truncateTrailingDecryptedNulls: boolean\n  ): Promise<{} | undefined> {\n    for (const key of potentialKeys) {\n      try {\n        const decrypted = (await this.primitives.AES.decrypt(key.key, encrypted, key.raw)) ?? encrypted\n        const text = ua2utf8(truncateTrailingDecryptedNulls ? truncateTrailingNulls(new Uint8Array(decrypted)) : decrypted)\n        return JSON.parse(text)\n      } catch (e) {}\n    }\n    return undefined\n  }\n\n  /**\n   * @internal this method is intended for internal use only and may be changed without notice.\n   * Tries to encrypt the content of an encrypted entity.\n   * 1. If valid key for encryption is found the method returns the entity with the encrypted fields specified by cryptedKeys\n   * 2. If requireEncryption is true and no key could be found for encryption of the entity the method fails.\n   * 3. If requireEncryption is false and no key could be found for encryption the method will only check that the entity does not specify any value\n   * for fields which should be encrypted according to cryptedKeys (e.g. note in a patient by default). If the entity specifies a value for any field\n   * which should be encrypted the method throws an error, otherwise the method returns the original entity.\n   */\n  async tryEncryptEntity<T extends EncryptedEntity>(\n    entity: T,\n    dataOwnerId: string | undefined,\n    cryptedKeys: string[],\n    encodeBinaryData: boolean,\n    requireEncryption: boolean,\n    constructor: (json: any) => T\n  ): Promise<T> {\n    const entityWithInitialisedEncryptionKeys = await this.ensureEncryptionKeysInitialised(entity)\n    const encryptionKey = await this.tryImportFirstValidKey(await this.encryptionKeysOf(entity, dataOwnerId), entity.id!)\n    if (!!encryptionKey) {\n      return constructor(\n        await crypt(\n          entityWithInitialisedEncryptionKeys,\n          (obj) => {\n            const json = encodeBinaryData\n              ? JSON.stringify(obj, (k, v) => {\n                  return v instanceof ArrayBuffer || v instanceof Uint8Array\n                    ? b2a(new Uint8Array(v).reduce((d, b) => d + String.fromCharCode(b), ''))\n                    : v\n                })\n              : JSON.stringify(obj)\n            return this.primitives.AES.encrypt(encryptionKey.key, utf8_2ua(json), encryptionKey.raw)\n          },\n          cryptedKeys\n        )\n      )\n    } else if (requireEncryption) {\n      throw new Error(`No key found for encryption of entity ${entity}`)\n    } else {\n      const cryptedCopyWithRandomKey = await crypt(\n        _.cloneDeep(entity),\n        async (obj: { [key: string]: string }) => Promise.resolve(new ArrayBuffer(1)),\n        cryptedKeys\n      )\n      if (\n        !_.isEqual(\n          _.omitBy({ ...cryptedCopyWithRandomKey, encryptedSelf: undefined }, _.isNil),\n          _.omitBy({ ...entity, encryptedSelf: undefined }, _.isNil)\n        )\n      ) {\n        throw new Error(`Impossible to modify encrypted value of an entity if no encryption key is known.\\n${entity}`)\n      }\n      return entity\n    }\n  }\n\n  /**\n   * @internal This method is for internal use only and may be changed without notice.\n   * Ensures that the encryption keys of an entity are initialised. If not will throw an exception or initialise them depending on the content of\n   * the entity. This function supports migration of entities using older encryption schemes (delegation only without encrypted keys) or entities\n   * which were previously not encrypted.\n   */\n  async ensureEncryptionKeysInitialised<T extends EncryptedEntity>(entity: T): Promise<T> {\n    if (Object.keys(entity.encryptionKeys ?? {}).length > 0) return entity\n    if (!entity.rev) {\n      throw new Error(\n        'New encrypted entity is lacking encryption metadata. ' +\n          'Please instantiate new entities using the `newInstance` method from the respective extended api.'\n      )\n    }\n    /*\n     * If entity was using delegations as legacy encryption keys we will essentially revoke the access to the encrypted data for all other data\n     * owners. This however should not be a problem as this form of legacy entities should not exist anymore, and it should be present only in the\n     * databases of hcps without collaborators.\n     */\n    return await this.entityWithExtendedEncryptedMetadata(\n      entity,\n      await this.dataOwnerApi.getCurrentDataOwnerId(),\n      [],\n      [ua2hex(this.primitives.randomBytes(16))],\n      []\n    )\n  }\n\n  /**\n   * Get the decrypted content of a delegation-like object which the provided data owner would be able to access using ONLY HIS EXCHANGE KEYS (does\n   * not consider exchange keys for parents).\n   * Note that the retrieved exchange keys are decrypted using the private keys available on the device, and results may vary from other devices.\n   * @param dataOwnerId id of a data owner, he should be part of the current data owner hierarchy.\n   * @param delegations a delegation-like object containing the encrypted key\n   * @param includeFromDelegations if true also considers delegation from the provided data owner (or parents) to look for values. This allows to\n   * decrypt delegations associated to exchange keys recovered after a giveAccessBack request.\n   * @param validateDecrypted validates the decrypted result, to drop decryption results with wrong key that still gave a valid checksum.\n   * @param tagsFilter allows to obtain only encryption keys associated to tags which satisfy the provided filter.\n   * @return the key which could be decrypted using only keys available on the current device and delegations from/to the provided data owner. May\n   * contain duplicates.\n   */\n  private async extractFromDelegationsForDataOwner(\n    dataOwnerId: string,\n    delegations: { [delegateId: string]: Delegation[] },\n    includeFromDelegations: boolean,\n    validateDecrypted: (result: string) => boolean | Promise<boolean>,\n    tagsFilter: (tags: string[]) => Promise<boolean>\n  ): Promise<string[]> {\n    const delegationsWithOwner = includeFromDelegations\n      ? Object.entries(delegations).flatMap(([delegateId, delegations]) =>\n          dataOwnerId === delegateId\n            ? this.populateDelegatedTo(delegateId, delegations)\n            : this.populateDelegatedTo(\n                delegateId,\n                delegations.filter((d) => d.owner === dataOwnerId)\n              )\n        )\n      : delegations[dataOwnerId] ?? []\n    const res = []\n    for (const delegation of delegationsWithOwner) {\n      if (await tagsFilter(delegation.tags ?? [])) {\n        const decrypted = await this.tryDecryptDelegation(delegation, (k) => validateDecrypted(k))\n        if (decrypted) res.push(decrypted)\n      }\n    }\n    return res\n  }\n\n  // Ensures that the delegatedTo field of delegations has the appropriate values, else returns a copy of the delegations with the appropriate value.\n  private populateDelegatedTo(delegateId: string, delegations: Delegation[]): Delegation[] {\n    return delegations.map((d) => (d.delegatedTo === delegateId ? d : { ...d, delegatedTo: delegateId }))\n  }\n\n  private async extractedHierarchyFromDelegation(\n    delegations: { [delegateId: string]: Delegation[] },\n    validateDecrypted: (result: string) => boolean | Promise<boolean>,\n    tagsFilter: (tags: string[]) => Promise<boolean>\n  ): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return Promise.all(\n      (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()).map(async (ownerId) => {\n        const extracted = this.deduplicate(\n          await this.extractFromDelegationsForDataOwner(\n            ownerId,\n            delegations,\n            true,\n            (k) => validateDecrypted(k),\n            (t) => tagsFilter(t)\n          )\n        )\n        return { ownerId, extracted }\n      })\n    )\n  }\n\n  /**\n   * @internal This method should be private but is currently public/internal to allow to continue supporting legacy methods\n   */\n  async extractMergedHierarchyFromDelegationAndOwner(\n    delegations: { [delegateId: string]: Delegation[] },\n    dataOwnerId: string | undefined,\n    validateDecrypted: (result: string) => boolean | Promise<boolean>,\n    tagsFilter: (tags: string[]) => Promise<boolean>\n  ): Promise<string[]> {\n    const hierarchy = dataOwnerId\n      ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(dataOwnerId)\n      : await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n    const extractedByOwner = await Promise.all(\n      // Reverse is just to keep method behaviour as close as possible to the legacy behaviour, in case someone depended on the ordering.\n      [...hierarchy].reverse().map((ownerId) =>\n        this.extractFromDelegationsForDataOwner(\n          ownerId,\n          delegations,\n          true,\n          (k) => validateDecrypted(k),\n          (t) => tagsFilter(t)\n        )\n      )\n    )\n    return this.deduplicate(extractedByOwner.flatMap((x) => x))\n  }\n\n  private async tryDecryptDelegation(\n    delegation: Delegation,\n    validateDecrypted: (result: string) => boolean | Promise<boolean>\n  ): Promise<string | undefined> {\n    const exchangeKeys = await this.exchangeKeysManager.getDecryptionExchangeKeysFor(delegation.owner!, delegation.delegatedTo!)\n    for (const key of exchangeKeys) {\n      try {\n        // Format of encrypted key for any delegation should be entityId:key, but with the merging of entities the entityId might not match the\n        // current id. As a checksum we are only verifying that the decrypted bytes can be represented as a string with exactly one ':'.\n        // Additionally, we also have a validator that is specific for each type of delegation content (encryption key, secret id, ...)\n        const decrypted = ua2string(await this.primitives.AES.decrypt(key, hex2ua(delegation.key!)))\n        const decryptedSplit = decrypted.split(':')\n        if (decryptedSplit.length === 2) {\n          const validation = validateDecrypted(decryptedSplit[1])\n          if (validation === true || (validation !== false && (await validation))) return decryptedSplit[1]\n        } else {\n          console.warn(\"Error in the decrypted delegation: content should contain exactly 1 ':', the delegation is ignored.\")\n        }\n      } catch (e) {\n        // Do nothing: the delegation uses another exchange key owner->delegator\n      }\n    }\n  }\n\n  private async tryImportKey(key: string): Promise<CryptoKey | undefined> {\n    if (!/^[0-9A-Fa-f\\-]+$/g.test(key)) return undefined\n    try {\n      return await this.primitives.AES.importKey('raw', hex2ua(key.replace(/-/g, '')))\n    } catch (e) {\n      console.warn(`Could not import key ${key} as an encryption key.`, e)\n      return undefined\n    }\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice.\n   */\n  async importFirstValidKey(keys: string[], entityId: string): Promise<{ key: CryptoKey; raw: string }> {\n    const res = await this.tryImportFirstValidKey(keys, entityId)\n    if (!res) throw new Error(`Could not find any valid key for entity ${entityId}.`)\n    return res\n  }\n\n  private async tryImportFirstValidKey(keys: string[], entityId: string): Promise<{ key: CryptoKey; raw: string } | undefined> {\n    for (const key of keys) {\n      const imported = await this.tryImportKey(key)\n      if (imported) return { key: imported, raw: key }\n    }\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice.\n   */\n  async importAllValidKeys(keys: string[]): Promise<{ key: CryptoKey; raw: string }[]> {\n    const res = []\n    for (const key of keys) {\n      const imported = await this.tryImportKey(key)\n      if (imported) res.push({ key: imported, raw: key })\n    }\n    return res\n  }\n\n  private async validateEncryptionKey(key: string): Promise<boolean> {\n    return !!(await this.tryImportKey(key))\n  }\n\n  private validateSecretId(key: string): boolean {\n    return !!key\n  }\n\n  private validateOwningEntityId(key: string): boolean {\n    return !!key\n  }\n\n  private async createEncryptionKeyDelegation(\n    entityId: string,\n    delegateId: string,\n    exchangeKey: CryptoKey,\n    encryptionKey: string,\n    newTags: string[]\n  ): Promise<Delegation> {\n    if (!(await this.validateEncryptionKey(encryptionKey))) throw new Error(`Invalid encryption key ${encryptionKey}`)\n    return this.createDelegation(entityId, delegateId, exchangeKey, encryptionKey, newTags)\n  }\n\n  private async createSecretIdDelegation(\n    entityId: string,\n    delegateId: string,\n    exchangeKey: CryptoKey,\n    secretId: string,\n    newTags: string[]\n  ): Promise<Delegation> {\n    if (!this.validateSecretId(secretId)) throw new Error(`Invalid secret id ${secretId}`)\n    return this.createDelegation(entityId, delegateId, exchangeKey, secretId, newTags)\n  }\n\n  private async createOwningEntityIdDelegation(\n    entityId: string,\n    delegateId: string,\n    exchangeKey: CryptoKey,\n    owningEntityId: string,\n    newTags: string[]\n  ): Promise<Delegation> {\n    if (!this.validateOwningEntityId(owningEntityId)) throw new Error(`Invalid owning id ${owningEntityId}`)\n    return this.createDelegation(entityId, delegateId, exchangeKey, owningEntityId, newTags)\n  }\n\n  private async createDelegation(\n    entityId: string,\n    delegateId: string,\n    exchangeKey: CryptoKey,\n    content: string,\n    newTags: string[]\n  ): Promise<Delegation> {\n    if (entityId.includes(':')) throw new Error(\"Ids for encrypted entities are not allowed to contain ':'\")\n    if (content.includes(':')) throw new Error(\"Content of delegations can not contain ':'\")\n    return {\n      delegatedTo: delegateId,\n      owner: await this.dataOwnerApi.getCurrentDataOwnerId(),\n      key: ua2hex(await this.primitives.AES.encrypt(exchangeKey, string2ua(entityId + ':' + content))),\n      tags: newTags,\n    }\n  }\n\n  private async loadEncryptionKeysForDelegates<T extends EncryptedEntity>(\n    entity: T,\n    delegates: string[]\n  ): Promise<{ updatedEntity: T; keysForDelegates: { [delegateId: string]: CryptoKey[] } }> {\n    const { updatedDelegator, keysForDelegates } = await delegates.reduce(\n      async (acc, delegateId) => {\n        const awaitedAcc = await acc\n        const currUpdateResult = await this.exchangeKeysManager.getOrCreateEncryptionExchangeKeysTo(delegateId)\n        return {\n          updatedDelegator: currUpdateResult.updatedDelegator ?? awaitedAcc.updatedDelegator,\n          keysForDelegates: {\n            ...awaitedAcc.keysForDelegates,\n            [delegateId]: currUpdateResult.keys,\n          },\n        }\n      },\n      Promise.resolve({\n        updatedDelegator: undefined as DataOwnerWithType | undefined,\n        keysForDelegates: {} as { [delegateId: string]: CryptoKey[] },\n      })\n    )\n    const updatedEntity =\n      entity.id === updatedDelegator?.dataOwner?.id\n        ? {\n            ...entity,\n            rev: updatedDelegator!.dataOwner.rev,\n            hcPartyKeys: updatedDelegator!.dataOwner.hcPartyKeys,\n            aesExchangeKeys: updatedDelegator!.dataOwner.aesExchangeKeys,\n          }\n        : entity\n    return { updatedEntity, keysForDelegates }\n  }\n\n  private async createOrUpdateEntityDelegations<T extends EncryptedEntity>(\n    entity: T,\n    delegateId: string,\n    existingSecretIds: Delegation[],\n    existingEncryptionKeys: Delegation[],\n    existingOwningEntityIds: Delegation[],\n    newSecretIds: string[],\n    newEncryptionKeys: string[],\n    newOwningEntityIds: string[],\n    newTags: string[],\n    keysForDelegates: { [delegateId: string]: CryptoKey[] }\n  ): Promise<T> {\n    const entityCopy = _.cloneDeep(entity)\n    if (newSecretIds.length === 0 && newEncryptionKeys.length === 0 && newOwningEntityIds.length === 0) return entityCopy\n    const chosenKey = keysForDelegates[delegateId][0]\n    const updatedSecretIds = [\n      ...existingSecretIds,\n      ...(await Promise.all(newSecretIds.map((x) => this.createSecretIdDelegation(entity.id!, delegateId, chosenKey, x, newTags)))),\n    ]\n    const updatedEncryptionKeys = [\n      ...existingEncryptionKeys,\n      ...(await Promise.all(newEncryptionKeys.map((x) => this.createEncryptionKeyDelegation(entity.id!, delegateId, chosenKey, x, newTags)))),\n    ]\n    const updatedOwningEntityIds = [\n      ...existingOwningEntityIds,\n      ...(await Promise.all(newOwningEntityIds.map((x) => this.createOwningEntityIdDelegation(entity.id!, delegateId, chosenKey, x, newTags)))),\n    ]\n    if (updatedSecretIds.length > 0) {\n      entityCopy.delegations = {\n        ...(entity.delegations ?? {}),\n        [delegateId]: updatedSecretIds,\n      }\n    }\n    if (updatedEncryptionKeys.length > 0) {\n      entityCopy.encryptionKeys = {\n        ...(entity.encryptionKeys ?? {}),\n        [delegateId]: updatedEncryptionKeys,\n      }\n    }\n    if (updatedOwningEntityIds.length > 0) {\n      entityCopy.cryptedForeignKeys = {\n        ...(entity.cryptedForeignKeys ?? {}),\n        [delegateId]: updatedOwningEntityIds,\n      }\n    }\n    return entityCopy\n  }\n\n  /**\n   * De-duplicates all currently accessible delegations, by removing any delegations created by the current data owner which have duplicated content,\n   * and checks if any of the required entries are currently available to the delegate through the existing delegations.\n   * @param delegateId id of the delegate.\n   * @param allDelegations delegations of the entity.\n   * @param requiredEntries potentially new entries that the delegate needs to be able to access from the delegations.\n   * @param validateDecrypted validator for decrypted delegation content\n   * @return the deduplicated delegations\n   */\n  private async deduplicateDelegationsAndFilterRequiredEntries(\n    delegateId: string,\n    allDelegations: { [delegateId: string]: Delegation[] },\n    requiredEntries: string[],\n    validateDecrypted: (x: string) => boolean | Promise<boolean>\n  ): Promise<{\n    deduplicatedDelegations: Delegation[]\n    missingEntries: string[]\n  }> {\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const delegationsToDelegate = allDelegations[delegateId] ?? []\n    const decryptedDelegations = await Promise.all(\n      delegationsToDelegate.map(async (d) => ({\n        delegation: d,\n        content: d.owner === selfId ? await this.tryDecryptDelegation(d, (x) => validateDecrypted(x)) : undefined,\n      }))\n    )\n    const deduplicatedDelegations: Delegation[] = []\n    const deduplicatedContent = new Map<string, string[][]>()\n    decryptedDelegations.forEach(({ delegation, content }) => {\n      if (content === undefined) {\n        // Keep all delegations we could not decrypt or from other data owners\n        deduplicatedDelegations.push(delegation)\n      } else {\n        const deduplicatedTags = deduplicatedContent.get(content)\n        if (!deduplicatedTags) {\n          deduplicatedContent.set(content, [delegation.tags ?? []])\n          deduplicatedDelegations.push(delegation)\n        } else if (!deduplicatedTags.some((t) => arrayEquals(t, delegation.tags ?? []))) {\n          deduplicatedTags.push(delegation.tags ?? [])\n          deduplicatedDelegations.push(delegation)\n        }\n      }\n    })\n    const delegationsFromDelegateToSelf = (allDelegations[selfId] ?? []).filter((d) => d.owner === delegateId)\n    const decryptedDelegationsFromDelegate = new Set(\n      await Promise.all(delegationsFromDelegateToSelf.map((d) => this.tryDecryptDelegation(d, (x) => validateDecrypted(x)))).then((dels) =>\n        dels.flatMap((x) => (x ? [x] : []))\n      )\n    )\n    return {\n      deduplicatedDelegations,\n      missingEntries: requiredEntries.filter((entry) => !(deduplicatedContent.has(entry) || decryptedDelegationsFromDelegate.has(entry))),\n    }\n  }\n\n  private deduplicate<T>(values: T[]): T[] {\n    return [...new Set(values)]\n  }\n\n  private throwDetailedExceptionForInvalidParameter(argName: string, argValue: any, methodName: string, methodArgs: IArguments) {\n    if (argValue) return\n\n    let details = '\\nMethod name: icc-crypto-x-api.' + methodName + '()\\nArguments:'\n\n    if (methodArgs) {\n      try {\n        const argsArray = [...methodArgs]\n        _.each(argsArray, (arg, index) => (details += '\\n[' + index + ']: ' + JSON.stringify(arg)))\n      } catch (ex) {\n        details += '; a problem occured while logging arguments details: ' + ex\n      }\n    }\n\n    throw new Error('### THIS SHOULD NOT HAPPEN: ' + argName + ' has an invalid value: ' + argValue + details)\n  }\n\n  private checkEmptyEncryptionMetadata(entity: EncryptedEntity) {\n    const existingMetadata = []\n    if (entity.delegations && Object.keys(entity.delegations).length) existingMetadata.push('delegations')\n    if (entity.cryptedForeignKeys && Object.keys(entity.cryptedForeignKeys).length) existingMetadata.push('cryptedForeignKeys')\n    if (entity.encryptionKeys && Object.keys(entity.encryptionKeys).length) existingMetadata.push('encryptionKeys')\n    if (entity.secretForeignKeys && entity.secretForeignKeys.length) existingMetadata.push('secretForeignKeys')\n    if (existingMetadata.length > 0) {\n      throw new Error(\n        `Entity should have no encryption metadata on initialisation, but the following fields already have some values: ${existingMetadata}\\n` +\n          JSON.stringify(entity, undefined, 2)\n      )\n    }\n  }\n}\n"]}

package/{dist/icc-x-api → icc-x-api}/icc-accesslog-x-api.d.ts

@@ -5,10 +5,11 @@ import { AccessLog, PaginatedListAccessLog } from '../icc-api/model/models';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
 export interface AccessLogWithPatientId extends AccessLog {
     patientId: string;
 }
-export declare class IccAccesslogXApi extends IccAccesslogApi {
+export declare class IccAccesslogXApi extends IccAccesslogApi implements EncryptedEntityXApi<models.AccessLog> {
     crypto: IccCryptoXApi;
     cryptedKeys: string[];
     dataOwnerApi: IccDataOwnerXApi;
@@ -94,4 +95,29 @@ export declare class IccAccesslogXApi extends IccAccesslogApi {
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<AccessLog>;
+    /**
+     * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the
+     * encrypted content.
+     * @param accessLog the access log to share.
+     * @param delegates sharing options for each delegate.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would
+     * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other
+     * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated entity.
+     */
+    shareWithMany(accessLog: AccessLog, delegates: {
+        [delegateId: string]: {
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<AccessLog>;
+    getDataOwnersWithAccessTo(entity: models.AccessLog): Promise<{
+        permissionsByDataOwnerId: {
+            [dataOwnerId: string]: 'WRITE';
+        };
+        hasUnknownAnonymousDataOwners: boolean;
+    }>;
+    getEncryptionKeysOf(entity: models.AccessLog): Promise<string[]>;
 }

package/{dist/icc-x-api → icc-x-api}/icc-accesslog-x-api.js

@@ -231,9 +231,42 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
      * @return a promise which will contain the updated entity.
      */
     shareWith(delegateId, accessLog, options = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.shareWithMany(accessLog, { [delegateId]: options });
+        });
+    }
+    /**
+     * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the
+     * encrypted content.
+     * @param accessLog the access log to share.
+     * @param delegates sharing options for each delegate.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would
+     * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other
+     * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated entity.
+     */
+    shareWithMany(accessLog, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
             const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
-            return yield this.modifyAs(self, yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(accessLog, delegateId, undefined, options.shareEncryptionKey, options.sharePatientId));
+            return yield this.modifyAs(self, yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(accessLog, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+                delegateId,
+                {
+                    shareEncryptionKey: options.shareEncryptionKey,
+                    shareOwningEntityIds: options.sharePatientId,
+                },
+            ]))));
+        });
+    }
+    getDataOwnersWithAccessTo(entity) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
+        });
+    }
+    getEncryptionKeysOf(entity) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.crypto.entities.encryptionKeysOf(entity);
         });
     }
 }

package/icc-x-api/icc-accesslog-x-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icc-accesslog-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-accesslog-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA4C;AAG5C,oDAA2E;AAC3E,4BAA2B;AAE3B,0EAAgG;AAQhG,MAAa,gBAAiB,SAAQ,yBAAe;IAKnD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAfzD,gBAAW,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QAgBlC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,CAAM,EACN,UAGI,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAE5D,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CACxB;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACvC,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE;gBACjB,WAAW,EAAE,WAAW;gBACxB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,EAAE;gBACb,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU,EAAE,aAAa;aAC1B,EACD,CAAC,IAAI,EAAE,CACR,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7G,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,kBAAS,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC1F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEG,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,eAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACpF,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,eAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3F,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAEK,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;;;;;YAC1E,MAAM,UAAU,GAAG,MAAM,OAAM,yCAAyC,YAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAChG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAClD,CAAC;KAAA;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK,CAAC,kDAAkD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;IACnJ,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,UAAmC;QACxD,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAChI,CAAA;IACH,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,UAAmC;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,UAAmC;QACtE,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CACzI,CAAA;IACH,CAAC;IAED,eAAe,CAAC,IAAuB;QACrC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,uBAAuB,CAAC,IAAiB,EAAE,IAAuB;QAChE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;iBACzF,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACvB,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,oBAAoB,CAAC,IAAiB,EAAE,WAAmB;QACzD,OAAO,KAAK;aACT,YAAY,CAAC,WAAW,CAAC;aACzB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;aACzF,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,cAAc,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAiB,EAAE,eAAwB,EAAE,KAAc;QAC9G,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,sBAAsB,CACpB,IAAiB,EACjB,SAAkB,EAClB,OAAgB,EAChB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,OAAO,KAAK;aACT,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC;aAChF,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,SAAS,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9H,CAAA;IACL,CAAC;IAED,eAAe,CAAC,IAAuB;QACrC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAEK,uBAAuB,CAAC,IAAiB,EAAE,IAAuB;;YACtE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClG,CAAC;KAAA;IAEO,QAAQ,CAAC,SAAiB,EAAE,SAA2B;QAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;aACvD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;aACzD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,mBAAmB,CACjB,MAAc,EACd,UAAmB,EACnB,SAAkB,EAClB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,2BAA2B,CACzB,IAAiB,EACjB,MAAc,EACd,UAAmB,EACnB,SAAkB,EAClB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,OAAO,KAAK;aACT,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC;aAChG,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,SAAS,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9H,CAAA;IACL,CAAC;IAEK,sCAAsC,CAAC,IAAiB,EAAE,MAAc,EAAE,KAAK,GAAG,GAAG,EAAE,SAAkB;;;;;YAC7G,IAAI,eAAe,GAA6B,EAAE,EAChD,WAAW,GAAwD,SAAS,CAAA;YAC9E,MAAM,yBAAyB,GAAG,GAAG,CAAA;YACrC,MAAM,oBAAoB,GAAG,CAAC,CAAA;YAE9B,KAAK,IAAI,gBAAgB,GAAG,CAAC,EAAE,eAAe,CAAC,MAAM,GAAG,KAAK,IAAI,gBAAgB,GAAG,oBAAoB,EAAE,gBAAgB,EAAE,EAAE;gBAC5H,MAAM,YAAY,GAAG,KAAK,GAAG,eAAe,CAAC,MAAM,CAAA;gBACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,GAAkC,CAAC,MAAM,OAAM,mBAAmB,YACjH,MAAM,EACN,aAAa,EACb,SAAS,EACT,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAS,CAAC,EACpD,WAAW,IAAI,WAAW,CAAC,aAAc,EACzC,yBAAyB,EACzB,IAAI,CACL,CAAkC,CAAA;gBACnC,MAAM,iBAAiB,GAA6B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,IAAmB,CAAC,CAAC,IAAI,CACzI,CAAC,aAAa,EAAE,EAAE,CAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE,EAAE;oBACpC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,iBAA2B,CAAC,CAAC,IAAI,CAChG,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,gCACI,YAAY,KACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GACG,CAAA,CAC/B,CAAA;gBACH,CAAC,CAAC,CACH,CACJ,CAAA;gBAED,MAAM,UAAU,GAA6B,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;qBACpE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;qBACxF,MAAM,CAAC,CAAC,GAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;qBACtD,KAAK,EAAE;qBACP,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;gBAEzB,eAAe,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,UAAU,CAAC,CAAA;gBAErD,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,yBAAyB,EAAE;oBACnD,MAAK;iBACN;qBAAM,IAAI,cAAc,EAAE;oBACzB,WAAW,GAAG,cAAc,CAAA;iBAC7B;qBAAM;oBACL,MAAK;iBACN;aACF;YAED,OAAO,eAAe,CAAA;QACxB,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,SAAoB;;YAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACrE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,SAAoB,EACpB,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,SAAoB,EACpB,SAKC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,OAAO,MAAM,IAAI,CAAC,QAAQ,CACxB,IAAI,EACJ,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAChE,SAAS,EACT,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,oBAAoB,EAAE,OAAO,CAAC,cAAc;iBAC7C;aACF,CAAC,CACH,CACF,CACF,CAAA;QACH,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAAwB;;YAItD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAwB;;YAChD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AAvWD,4CAuWC","sourcesContent":["import { IccAccesslogApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as models from '../icc-api/model/models'\nimport { AccessLog, PaginatedListAccessLog } from '../icc-api/model/models'\nimport * as _ from 'lodash'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport interface AccessLogWithPatientId extends AccessLog {\n  patientId: string\n}\n\nexport class IccAccesslogXApi extends IccAccesslogApi implements EncryptedEntityXApi<models.AccessLog> {\n  crypto: IccCryptoXApi\n  cryptedKeys = ['detail', 'objectId']\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of access log with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this access log refers to.\n   * @param h initialised data for the access log. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of access log.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    h: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n\n    const accessLog = _.assign(\n      {\n        id: this.crypto.primitives.randomUuid(),\n        _type: 'org.taktik.icure.entities.AccessLog',\n        created: new Date().getTime(),\n        modified: new Date().getTime(),\n        date: +new Date(),\n        responsible: dataOwnerId,\n        author: user.id,\n        codes: [],\n        tags: [],\n        user: user.id,\n        patientId: patient.id,\n        accessType: 'USER_ACCESS',\n      },\n      h || {}\n    )\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.administrativeData ?? []),\n    ]\n    return new AccessLog(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(accessLog, patient.id, sfk, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false): Promise<models.AccessLog[]> {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? usingPost\n        ? this.findByHCPartyPatientSecretFKeysArray(topmostParentId!, _.uniq(extractedKeys))\n        : this.findByHCPartyPatientSecretFKeys(topmostParentId!, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  async findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<AccessLog[]> {\n    const accessLogs = await super.findAccessLogsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys)\n    return await this.decrypt(hcPartyId, accessLogs)\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<AccessLog> | any> {\n    return super.findAccessLogsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((accesslogs) => this.decrypt(hcPartyId, accesslogs))\n  }\n\n  decrypt(hcpId: string, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return Promise.all(\n      accessLogs.map((x) => this.crypto.entities.decryptEntity(x, hcpId, (json) => new AccessLog(json)).then(({ entity }) => entity))\n    )\n  }\n\n  encrypt(user: models.User, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLogs)\n  }\n\n  private encryptAs(dataOwner: string, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return Promise.all(\n      accessLogs.map((x) => this.crypto.entities.tryEncryptEntity(x, dataOwner, this.cryptedKeys, false, true, (json) => new AccessLog(json)))\n    )\n  }\n\n  createAccessLog(body?: models.AccessLog): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  createAccessLogWithUser(user: models.User, body?: models.AccessLog): Promise<models.AccessLog | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((als) => super.createAccessLog(als[0]))\n          .then((accessLog) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [accessLog]))\n          .then((als) => als[0])\n      : Promise.resolve()\n  }\n\n  getAccessLog(accessLogId: string): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  getAccessLogWithUser(user: models.User, accessLogId: string): Promise<models.AccessLog | any> {\n    return super\n      .getAccessLog(accessLogId)\n      .then((accessLog) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [accessLog]))\n      .then((als) => als[0])\n  }\n\n  listAccessLogs(fromEpoch?: number, toEpoch?: number, startKey?: number, startDocumentId?: string, limit?: number): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  listAccessLogsWithUser(\n    user: models.User,\n    fromEpoch?: number,\n    toEpoch?: number,\n    startKey?: number,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): Promise<PaginatedListAccessLog> {\n    return super\n      .listAccessLogs(fromEpoch, toEpoch, startKey, startDocumentId, limit, descending)\n      .then((accessLog) =>\n        this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLog.rows!).then((dr) => Object.assign(accessLog, { rows: dr }))\n      )\n  }\n\n  modifyAccessLog(body?: models.AccessLog): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  async modifyAccessLogWithUser(user: models.User, body?: models.AccessLog): Promise<models.AccessLog | null> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, _.cloneDeep(body)) : null\n  }\n\n  private modifyAs(dataOwner: string, accessLog: models.AccessLog): Promise<models.AccessLog> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(accessLog)])\n      .then((als) => super.modifyAccessLog(als[0]))\n      .then((accessLog) => this.decrypt(dataOwner, [accessLog]))\n      .then((als) => als[0])\n  }\n\n  findByUserAfterDate(\n    userId: string,\n    accessType?: string,\n    startDate?: number,\n    startKey?: string,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  findByUserAfterDateWithUser(\n    user: models.User,\n    userId: string,\n    accessType?: string,\n    startDate?: number,\n    startKey?: string,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): Promise<models.AccessLog | any> {\n    return super\n      .findByUserAfterDate(userId, accessType, startDate, startKey, startDocumentId, limit, descending)\n      .then((accessLog) =>\n        this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLog.rows!).then((dr) => Object.assign(accessLog, { rows: dr }))\n      )\n  }\n\n  async findLatestAccessLogsOfPatientsWithUser(user: models.User, userId: string, limit = 100, startDate?: number): Promise<models.AccessLog[]> {\n    let foundAccessLogs: AccessLogWithPatientId[] = [],\n      nextKeyPair: models.PaginatedDocumentKeyIdPairObject | undefined = undefined\n    const numberRequestedAccessLogs = 100\n    const MAX_WHILE_ITERATIONS = 5\n\n    for (let currentIteration = 0; foundAccessLogs.length < limit && currentIteration < MAX_WHILE_ITERATIONS; currentIteration++) {\n      const currentLimit = limit - foundAccessLogs.length\n      const { rows: logs, nextKeyPair: newNextKeyPair }: models.PaginatedListAccessLog = (await super.findByUserAfterDate(\n        userId,\n        'USER_ACCESS',\n        startDate,\n        nextKeyPair && JSON.stringify(nextKeyPair.startKey!),\n        nextKeyPair && nextKeyPair.startKeyDocId!,\n        numberRequestedAccessLogs,\n        true\n      )) as models.PaginatedListAccessLog\n      const logsWithPatientId: AccessLogWithPatientId[] = await this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, logs as AccessLog[]).then(\n        (decryptedLogs) =>\n          Promise.all(\n            _.map(decryptedLogs, (decryptedLog) => {\n              return this.crypto.entities.owningEntityIdsOf(decryptedLog, user.healthcarePartyId as string).then(\n                (keys) =>\n                  ({\n                    ...decryptedLog,\n                    patientId: _.head(keys),\n                  } as AccessLogWithPatientId)\n              )\n            })\n          )\n      )\n\n      const uniqueLogs: AccessLogWithPatientId[] = _.chain(logsWithPatientId)\n        .reject((log) => _.some(foundAccessLogs, ({ patientId }) => patientId === log.patientId))\n        .uniqBy((log: AccessLogWithPatientId) => log.patientId)\n        .value()\n        .slice(0, currentLimit)\n\n      foundAccessLogs = [...foundAccessLogs, ...uniqueLogs]\n\n      if ((logs || []).length < numberRequestedAccessLogs) {\n        break\n      } else if (newNextKeyPair) {\n        nextKeyPair = newNextKeyPair\n      } else {\n        break\n      }\n    }\n\n    return foundAccessLogs\n  }\n\n  /**\n   * @param accessLog an access log\n   * @return the id of the patient that the access log refers to, retrieved from the encrypted metadata (not from the decrypted entity body). Normally\n   * there should only be one element in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(accessLog: AccessLog): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(accessLog, undefined)\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the access log.\n   * @param accessLog the access log to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWith(\n    delegateId: string,\n    accessLog: AccessLog,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<AccessLog> {\n    return this.shareWithMany(accessLog, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content.\n   * @param accessLog the access log to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWithMany(\n    accessLog: AccessLog,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<AccessLog> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    return await this.modifyAs(\n      self,\n      await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n        accessLog,\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              shareEncryptionKey: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n            },\n          ])\n        )\n      )\n    )\n  }\n\n  async getDataOwnersWithAccessTo(entity: models.AccessLog): Promise<{\n    permissionsByDataOwnerId: { [dataOwnerId: string]: 'WRITE' }\n    hasUnknownAnonymousDataOwners: boolean\n  }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.AccessLog): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}

package/{dist/icc-x-api → icc-x-api}/icc-calendar-item-x-api.d.ts

@@ -5,7 +5,8 @@ import { IccCalendarItemApi } from '../icc-api';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
-export declare class IccCalendarItemXApi extends IccCalendarItemApi {
+import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
+export declare class IccCalendarItemXApi extends IccCalendarItemApi implements EncryptedEntityXApi<models.CalendarItem> {
     i18n: any;
     crypto: IccCryptoXApi;
     dataOwnerApi: IccDataOwnerXApi;
@@ -95,4 +96,38 @@ export declare class IccCalendarItemXApi extends IccCalendarItemApi {
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<models.CalendarItem>;
+    /**
+     * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
+     * the encrypted content.
+     * @param calendarItem item the calendar item to share.
+     * @param delegates sharing options for each delegate.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * calendar item does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated entity.
+     */
+    shareWithMany(calendarItem: models.CalendarItem, delegates: {
+        [delegateId: string]: {
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<models.CalendarItem>;
+    getDataOwnersWithAccessTo(entity: CalendarItem): Promise<{
+        permissionsByDataOwnerId: {
+            [p: string]: 'WRITE';
+        };
+        hasUnknownAnonymousDataOwners: boolean;
+    }>;
+    getEncryptionKeysOf(entity: CalendarItem): Promise<string[]>;
+    /**
+     * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar
+     * item.
+     * @param calendarItem a calendar item
+     * @param patient the patient which will be linked to the calendar item
+     * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked patient
+     * @return the updated calendar item
+     */
+    linkToPatient(calendarItem: models.CalendarItem, patient: models.Patient, shareLinkWithDelegates: string[]): Promise<models.CalendarItem>;
 }

package/{dist/icc-x-api → icc-x-api}/icc-calendar-item-x-api.js

@@ -229,8 +229,65 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
      */
     shareWith(delegateId, calendarItem, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
+            return this.shareWithMany(calendarItem, { [delegateId]: options });
+        });
+    }
+    /**
+     * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
+     * the encrypted content.
+     * @param calendarItem item the calendar item to share.
+     * @param delegates sharing options for each delegate.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * calendar item does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated entity.
+     */
+    shareWithMany(calendarItem, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
+            return yield this.modifyAs(self, yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(calendarItem, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+                delegateId,
+                {
+                    shareEncryptionKey: options.shareEncryptionKey,
+                    shareOwningEntityIds: options.sharePatientId,
+                },
+            ]))));
+        });
+    }
+    getDataOwnersWithAccessTo(entity) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
+        });
+    }
+    getEncryptionKeysOf(entity) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.crypto.entities.encryptionKeysOf(entity);
+        });
+    }
+    /**
+     * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar
+     * item.
+     * @param calendarItem a calendar item
+     * @param patient the patient which will be linked to the calendar item
+     * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked patient
+     * @return the updated calendar item
+     */
+    linkToPatient(calendarItem, patient, shareLinkWithDelegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const delegates = [...new Set([yield this.dataOwnerApi.getCurrentDataOwnerId(), ...shareLinkWithDelegates])];
+            const sfk = yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient);
+            if (!sfk) {
+                throw new Error(`Could not find any secret id for patient ${patient.id} which is shared with the topmost ancestor of the current data owner`);
+            }
+            let updated = Object.assign(Object.assign({}, calendarItem), { secretForeignKeys: [sfk] });
+            for (const delegate of delegates) {
+                updated = yield this.crypto.entities.entityWithExtendedEncryptedMetadata(updated, delegate, [], [], [patient.id]);
+            }
             const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
-            return yield this.modifyAs(self, yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(calendarItem, delegateId, undefined, options.shareEncryptionKey, options.sharePatientId));
+            const saved = yield this.modifyAs(self, updated);
+            return (yield this.decrypt(self, [saved]))[0];
         });
     }
 }

package/icc-x-api/icc-calendar-item-x-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icc-calendar-item-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-calendar-item-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2C;AAE3C,4BAA2B;AAE3B,oDAA4D;AAE5D,wCAA+C;AAE/C,0EAAgG;AAIhG,MAAa,mBAAoB,SAAQ,4BAAkB;IAMzD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,gBAA+B,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,EAChE,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAlBzD,SAAI,GAAQ,IAAI,CAAA;QAGhB,kBAAa,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;QAgB/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAED,WAAW,CAAC,IAAU,EAAE,EAAgB,EAAE,UAAwE,EAAE;QAClH,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CACtB,IAAiB,EACjB,OAA8B,EAC9B,EAAO,EACP,UAGI,EAAE;;;YAEN,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAChI,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAC3B;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACvC,KAAK,EAAE,wCAAwC;gBAC/C,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;aACT,EACD,EAAE,IAAI,EAAE,CACT,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACnI,IAAI,OAAO,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAC7F,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,qBAAY,CACrB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,YAAY,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,MAAM,IAAI,CAAC,oCAAoC,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACzF,CAAC,CAAC,MAAM,IAAI,CAAC,+BAA+B,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAEK,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;;;;;YAC1E,MAAM,aAAa,GAAG,MAAM,OAAM,4CAA4C,YAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACtG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACrD,CAAC;KAAA;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,qDAAqD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC7E,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;IACtH,CAAC;IAEK,6BAA6B,CAAC,IAAiB,EAAE,IAA0B;;;;;YAC/E,OAAO,IAAI;gBACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;qBACpC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAM,kBAAkB,YAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;qBACnD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;qBAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC,CAAC,IAAI,CAAA;QACV,CAAC;KAAA;IAED,uBAAuB,CAAC,IAAiB,EAAE,cAAsB;QAC/D,OAAO,KAAK;aACT,eAAe,CAAC,cAAc,CAAC;aAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;aAC/F,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,eAAe,CAAC,cAAsB;QACpC,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,wBAAwB,CAAC,IAAiB;QACxC,OAAO,KAAK,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACjI,CAAC;IAED,gBAAgB;QACd,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,+BAA+B,CAAC,IAAiB,EAAE,IAAuB;QACxE,OAAO,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,uBAAuB,CAAC,IAAuB;QAC7C,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,4CAA4C,CAC1C,IAAiB,EACjB,SAAiB,EACjB,OAAe,EACf,SAAiB;QAEjB,OAAO,KAAK;aACT,oCAAoC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;aACnE,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,oCAAoC,CAAC,SAAkB,EAAE,OAAgB,EAAE,SAAkB;QAC3F,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,uCAAuC,CACrC,IAAiB,EACjB,SAAiB,EACjB,OAAe,EACf,QAAgB;QAEhB,OAAO,KAAK;aACT,+BAA+B,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;aAC7D,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,+BAA+B,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAiB;QACrF,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;IACtH,CAAC;IAED;;;;;;;;;;OAUG;IACH,8BAA8B,CAAC,YAAiC;QAC9D,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,KAA2B,YAAY,EAAlC,iBAAiB,UAAK,YAAY,EAA9E,2CAA+D,CAAe,CAAA;QACpF,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAEK,6BAA6B,CAAC,IAAiB,EAAE,IAA0B;;YAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClG,CAAC;KAAA;IAEO,QAAQ,CAAC,SAAiB,EAAE,IAAyB;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/C,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;aAC/C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,aAAyC;QAClE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAA;IACjF,CAAC;IAEO,SAAS,CAAC,WAAmB,EAAE,aAAyC;QAC9E,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,qBAAY,CAAC,IAAI,CAAC,CAAC,CACzH,CACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,aAAyC;QAC9D,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,qBAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,YAAiC;;YACxD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QACxE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,YAAiC,EACjC,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACpE,CAAC;KAAA;IACD;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,YAAiC,EACjC,SAKC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,OAAO,MAAM,IAAI,CAAC,QAAQ,CACxB,IAAI,EACJ,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAChE,YAAY,EACZ,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,oBAAoB,EAAE,OAAO,CAAC,cAAc;iBAC7C;aACF,CAAC,CACH,CACF,CACF,CAAA;QACH,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAAoB;;YAEpB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAoB;;YAC5C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,aAAa,CAAC,YAAiC,EAAE,OAAuB,EAAE,sBAAgC;;YAC9G,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAA;YAC5G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAA;YACnF,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,EAAE,sEAAsE,CAAC,CAAA;aAC9I;YACD,IAAI,OAAO,mCACN,YAAY,KACf,iBAAiB,EAAE,CAAC,GAAG,CAAC,GACzB,CAAA;YACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE;gBAChC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAG,CAAC,CAAC,CAAA;aACnH;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAChD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC;KAAA;CACF;AA3UD,kDA2UC","sourcesContent":["import * as i18n from './rsrc/contact.i18n'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { CalendarItem, User } from '../icc-api/model/models'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccCalendarItemApi } from '../icc-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccCalendarItemXApi extends IccCalendarItemApi implements EncryptedEntityXApi<models.CalendarItem> {\n  i18n: any = i18n\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n  encryptedKeys = ['details', 'title', 'patientId']\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    encryptedKeys: Array<string> = ['details', 'title', 'patientId'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedKeys = encryptedKeys\n  }\n\n  newInstance(user: User, ci: CalendarItem, options: { additionalDelegates?: { [dataOwnerId: string]: 'WRITE' } } = {}) {\n    return this.newInstancePatient(user, null, ci, options)\n  }\n\n  /**\n   * Creates a new instance of calendar item with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this calendar item refers to.\n   * @param ci initialised data for the calendar item. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of calendar item.\n   */\n  async newInstancePatient(\n    user: models.User,\n    patient: models.Patient | null,\n    ci: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.CalendarItem> {\n    if (!patient && options.preferredSfk) throw new Error('You need to specify parent patient in order to use secret foreign keys.')\n    const calendarItem = _.extend(\n      {\n        id: this.crypto.primitives.randomUuid(),\n        _type: 'org.taktik.icure.entities.CalendarItem',\n        created: new Date().getTime(),\n        modified: new Date().getTime(),\n        responsible: this.dataOwnerApi.getDataOwnerIdOf(user),\n        author: user.id,\n        codes: [],\n        tags: [],\n      },\n      ci || {}\n    )\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = patient ? options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient)) : undefined\n    if (patient && !sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new CalendarItem(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(calendarItem, patient?.id, sfk, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false) {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? usingPost\n        ? await this.findByHCPartyPatientSecretFKeysArray(topmostParentId, _.uniq(extractedKeys))\n        : await this.findByHCPartyPatientSecretFKeys(topmostParentId, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  async findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.CalendarItem>> {\n    const calendarItems = await super.findCalendarItemsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys)\n    return await this.decrypt(hcPartyId, calendarItems)\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.CalendarItem> | any> {\n    return super\n      .findCalendarItemsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((calendarItems) => this.decrypt(hcPartyId, calendarItems))\n  }\n\n  createCalendarItem(body?: CalendarItem): never {\n    throw new Error('Cannot call a method that must encrypt a calendar item without providing a user for de/encryption')\n  }\n\n  async createCalendarItemWithHcParty(user: models.User, body?: models.CalendarItem): Promise<models.CalendarItem | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((items) => super.createCalendarItem(items[0]))\n          .then((ci) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [ci]))\n          .then((cis) => cis[0])\n      : null\n  }\n\n  getCalendarItemWithUser(user: models.User, calendarItemId: string): Promise<CalendarItem | any> {\n    return super\n      .getCalendarItem(calendarItemId)\n      .then((calendarItem) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [calendarItem]))\n      .then((cis) => cis[0])\n  }\n\n  getCalendarItem(calendarItemId: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsWithUser(user: models.User): Promise<Array<CalendarItem> | any> {\n    return super.getCalendarItems().then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItems(): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsWithIdsWithUser(user: models.User, body?: models.ListOfIds): Promise<Array<CalendarItem> | any> {\n    return super.getCalendarItemsWithIds(body).then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItemsWithIds(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsByPeriodAndHcPartyIdWithUser(\n    user: models.User,\n    startDate: number,\n    endDate: number,\n    hcPartyId: string\n  ): Promise<Array<CalendarItem> | any> {\n    return super\n      .getCalendarItemsByPeriodAndHcPartyId(startDate, endDate, hcPartyId)\n      .then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItemsByPeriodAndHcPartyId(startDate?: number, endDate?: number, hcPartyId?: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarsByPeriodAndAgendaIdWithUser(\n    user: models.User,\n    startDate: number,\n    endDate: number,\n    agendaId: string\n  ): Promise<Array<CalendarItem> | any> {\n    return super\n      .getCalendarsByPeriodAndAgendaId(startDate, endDate, agendaId)\n      .then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarsByPeriodAndAgendaId(startDate?: number, endDate?: number, agendaId?: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  modifyCalendarItem(body?: CalendarItem): never {\n    throw new Error('Cannot call a method that must encrypt a calendar item without providing a user for de/encryption')\n  }\n\n  /**\n   * Remove the following delegation objects from the\n   * CalendarItem instance: cryptedForeignKeys, secretForeignKeys.\n   *\n   * The delegations & encryptionKeys objects are not removed because\n   * in the case the CalendarItem is saved in the DB & then encrypted,\n   * if later we remove the patient from it, it'd reset the delegations\n   * and encryptionKeys thus impossibilitating further access.\n   *\n   * @param calendarItem The Calendar Item object\n   */\n  resetCalendarDelegationObjects(calendarItem: models.CalendarItem): models.CalendarItem {\n    const { cryptedForeignKeys, secretForeignKeys, ...resetCalendarItem } = calendarItem\n    return resetCalendarItem\n  }\n\n  async modifyCalendarItemWithHcParty(user: models.User, body?: models.CalendarItem): Promise<models.CalendarItem | any> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, _.cloneDeep(body)) : null\n  }\n\n  private modifyAs(dataOwner: string, body: models.CalendarItem): Promise<models.CalendarItem> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((als) => super.modifyCalendarItem(als[0]))\n      .then((body) => this.decrypt(dataOwner, [body]))\n      .then((als) => als[0])\n  }\n\n  encrypt(user: models.User, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems)\n  }\n\n  private encryptAs(dataOwnerId: string, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return Promise.all(\n      calendarItems.map((x) =>\n        this.crypto.entities.tryEncryptEntity(x, dataOwnerId, this.encryptedKeys, false, true, (json) => new CalendarItem(json))\n      )\n    )\n  }\n\n  decrypt(hcpId: string, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return Promise.all(\n      calendarItems.map((x) => this.crypto.entities.decryptEntity(x, hcpId, (json) => new CalendarItem(json)).then(({ entity }) => entity))\n    )\n  }\n\n  /**\n   * @param calendarItem a calendar item\n   * @return the id of the patient that the calendar item refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(calendarItem: models.CalendarItem): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(calendarItem, undefined)\n  }\n\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the calendar item.\n   * @param calendarItem item the calendar item to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWith(\n    delegateId: string,\n    calendarItem: models.CalendarItem,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.CalendarItem> {\n    return this.shareWithMany(calendarItem, { [delegateId]: options })\n  }\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content.\n   * @param calendarItem item the calendar item to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWithMany(\n    calendarItem: models.CalendarItem,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.CalendarItem> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    return await this.modifyAs(\n      self,\n      await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n        calendarItem,\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              shareEncryptionKey: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n            },\n          ])\n        )\n      )\n    )\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: CalendarItem\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: CalendarItem): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n\n  /**\n   * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar\n   * item.\n   * @param calendarItem a calendar item\n   * @param patient the patient which will be linked to the calendar item\n   * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked patient\n   * @return the updated calendar item\n   */\n  async linkToPatient(calendarItem: models.CalendarItem, patient: models.Patient, shareLinkWithDelegates: string[]): Promise<models.CalendarItem> {\n    const delegates = [...new Set([await this.dataOwnerApi.getCurrentDataOwnerId(), ...shareLinkWithDelegates])]\n    const sfk = await this.crypto.confidential.getAnySecretIdSharedWithParents(patient)\n    if (!sfk) {\n      throw new Error(`Could not find any secret id for patient ${patient.id} which is shared with the topmost ancestor of the current data owner`)\n    }\n    let updated = {\n      ...calendarItem,\n      secretForeignKeys: [sfk],\n    }\n    for (const delegate of delegates) {\n      updated = await this.crypto.entities.entityWithExtendedEncryptedMetadata(updated, delegate, [], [], [patient.id!])\n    }\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const saved = await this.modifyAs(self, updated)\n    return (await this.decrypt(self, [saved]))[0]\n  }\n}\n"]}

package/{dist/icc-x-api → icc-x-api}/icc-classification-x-api.d.ts

@@ -4,7 +4,8 @@ import * as models from '../icc-api/model/models';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
-export declare class IccClassificationXApi extends IccClassificationApi {
+import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
+export declare class IccClassificationXApi extends IccClassificationApi implements EncryptedEntityXApi<models.Classification> {
     crypto: IccCryptoXApi;
     dataOwnerApi: IccDataOwnerXApi;
     constructor(host: string, headers: {
@@ -55,4 +56,29 @@ export declare class IccClassificationXApi extends IccClassificationApi {
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<models.Classification>;
+    /**
+     * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
+     * the encrypted content.
+     * @param classification the classification to share.
+     * @param delegates sharing options for each delegate.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * classification does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated classification.
+     */
+    shareWithMany(classification: models.Classification, delegates: {
+        [delegateId: string]: {
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<models.Classification>;
+    getDataOwnersWithAccessTo(entity: models.Classification): Promise<{
+        permissionsByDataOwnerId: {
+            [p: string]: 'WRITE';
+        };
+        hasUnknownAnonymousDataOwners: boolean;
+    }>;
+    getEncryptionKeysOf(entity: models.Classification): Promise<string[]>;
 }

package/{dist/icc-x-api → icc-x-api}/icc-classification-x-api.js

@@ -105,7 +105,40 @@ class IccClassificationXApi extends icc_api_1.IccClassificationApi {
      */
     shareWith(delegateId, classification, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
-            return yield this.modifyClassification(yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(classification, delegateId, undefined, options.shareEncryptionKey, options.sharePatientId));
+            return this.shareWithMany(classification, { [delegateId]: options });
+        });
+    }
+    /**
+     * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
+     * the encrypted content.
+     * @param classification the classification to share.
+     * @param delegates sharing options for each delegate.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * classification does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * @return a promise which will contain the updated classification.
+     */
+    shareWithMany(classification, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.modifyClassification(yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(classification, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+                delegateId,
+                {
+                    shareEncryptionKey: options.shareEncryptionKey,
+                    shareOwningEntityIds: options.sharePatientId,
+                },
+            ]))));
+        });
+    }
+    getDataOwnersWithAccessTo(entity) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return Promise.resolve({ hasUnknownAnonymousDataOwners: false, permissionsByDataOwnerId: {} });
+        });
+    }
+    getEncryptionKeysOf(entity) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.crypto.entities.encryptionKeysOf(entity);
         });
     }
 }

package/icc-x-api/icc-classification-x-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icc-classification-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-classification-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAiD;AAGjD,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAEhC,0EAAgG;AAIhG,MAAa,qBAAsB,SAAQ,8BAAoB;IAI7D,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,IAAS,EAAE,EACX,UAGI,EAAE;;;YAEN,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAC7B;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACvC,KAAK,EAAE,0CAA0C;gBACjD,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;gBACR,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACpD,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;aACzD,EACD,CAAC,IAAI,EAAE,CACR,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7G,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,cAAc,CAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAChG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,MAAM,CAAC,SAAiB,EAAE,OAAuB;;YACrD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IACD;;;;OAIG;IACG,kBAAkB,CAAC,cAAqC;;YAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QAC1E,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,cAAqC,EACrC,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;KAAA;IACD;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,cAAqC,EACrC,SAKC;;YAED,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAChE,cAAc,EACd,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,oBAAoB,EAAE,OAAO,CAAC,cAAc;iBAC7C;aACF,CAAC,CACH,CACF,CACF,CAAA;QACH,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAA6B;;YAE7B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,6BAA6B,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAAC,CAAA;QAChG,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAA6B;;YACrD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AAnKD,sDAmKC","sourcesContent":["import { IccClassificationApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccClassificationXApi extends IccClassificationApi implements EncryptedEntityXApi<models.Classification> {\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of classification with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this classification refers to.\n   * @param c initialised data for the classification. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of classification.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    c: any = {},\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.Classification> {\n    const classification = _.assign(\n      {\n        id: this.crypto.primitives.randomUuid(),\n        _type: 'org.taktik.icure.entities.Classification',\n        created: new Date().getTime(),\n        modified: new Date().getTime(),\n        responsible: this.dataOwnerApi.getDataOwnerIdOf(user),\n        author: user.id,\n        codes: [],\n        tags: [],\n        healthElementId: this.crypto.primitives.randomUuid(),\n        openingDate: parseInt(moment().format('YYYYMMDDHHmmss')),\n      },\n      c || {}\n    )\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new models.Classification(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(classification, patient?.id, sfk, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async findBy(hcpartyId: string, patient: models.Patient) {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? this.findClassificationsByHCPartyPatientForeignKeys(topmostParentId, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n  /**\n   * @param classification a classification\n   * @return the id of the patient that the classification refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(classification: models.Classification): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(classification, undefined)\n  }\n\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the classification.\n   * @param classification the classification to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated classification.\n   */\n  async shareWith(\n    delegateId: string,\n    classification: models.Classification,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Classification> {\n    return this.shareWithMany(classification, { [delegateId]: options })\n  }\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content.\n   * @param classification the classification to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated classification.\n   */\n  async shareWithMany(\n    classification: models.Classification,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Classification> {\n    return await this.modifyClassification(\n      await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n        classification,\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              shareEncryptionKey: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n            },\n          ])\n        )\n      )\n    )\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: models.Classification\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return Promise.resolve({ hasUnknownAnonymousDataOwners: false, permissionsByDataOwnerId: {} })\n  }\n\n  async getEncryptionKeysOf(entity: models.Classification): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}