@icure/api 7.0.0-beta.3 → 7.0.0

package/icc-x-api/icc-receipt-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-receipt-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-receipt-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAE1C,4BAA2B;AAC3B,kDAAiD;AAEjD,0EAAgG;AAIhG,MAAa,cAAe,SAAQ,uBAAa;IAG/C,YACE,IAAY,EACZ,OAAkC,EAC1B,MAAqB,EAC7B,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAT/C,WAAM,GAAN,MAAM,CAAe;QAU7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;OAWG;IACG,WAAW,CACf,IAAiB,EACjB,CAAM,EACN,UAEI,EAAE;;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAChC,CAAC,CAAC,MAAM,CACN;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC5B,KAAK,EAAE,mCAAmC;gBAC1C,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;aACT,EACD,CAAC,IAAI,EAAE,CACR,CACF,CAAA;YAED,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC7F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,UAAU,CAAC,IAAiB,EAAE,KAAa,EAAE,IAAmB,EAAE,QAAgB,EAAE,IAAiB;QACnG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAG,EAAE,QAAQ,EAAE,EAAE,EAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClI,CAAC;IAED;;;;;;OAMG;IACG,8BAA8B,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAClH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YACnF,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QACzF,CAAC;KAAA;IAED;;;;;;OAMG;IACG,yBAAyB,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAC7G,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;QACtF,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,8BAA8B,CAClC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CACxE,OAAO,EACP,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CACpB,CAAA;YACD,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAClG,OAAO,IAAI,CAAA;QACb,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,iCAAiC,CACrC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAClJ,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,SAAS,CACb,UAAkB,EAClB,OAAuB,EACvB,UAEI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,OAAuB,EACvB,SAIC;;YAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;QAC/H,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAAsB;;YAIpD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAsB;;YAC9C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AA3LD,wCA2LC","sourcesContent":["import { IccReceiptApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of receipt with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param r initialised data for the receipt. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * @return a new instance of receipt.\n   */\n  async newInstance(\n    user: models.User,\n    r: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n    } = {}\n  ): Promise<models.Receipt> {\n    const receipt = new models.Receipt(\n      _.extend(\n        {\n          id: this.crypto.randomUuid(),\n          _type: 'org.taktik.icure.entities.Receipt',\n          created: new Date().getTime(),\n          modified: new Date().getTime(),\n          responsible: this.dataOwnerApi.getDataOwnerIdOf(user),\n          author: user.id,\n          codes: [],\n          tags: [],\n        },\n        r || {}\n      )\n    )\n\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new models.Receipt(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(receipt, undefined, undefined, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer) {\n    return this.newInstance(user, { documentId: docId, references: refs })\n      .then((rcpt) => this.createReceipt(rcpt))\n      .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachment(rcpt.id!, blobType, '', <any>blob) : Promise.resolve(rcpt)))\n  }\n\n  /**\n   * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async encryptAndSetReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    const encryptedData = await this.crypto.entities.encryptDataOf(receipt, attachment)\n    return await this.setReceiptAttachment(receipt.id!, blobType, undefined, encryptedData)\n  }\n\n  /**\n   * Adds an unencrypted attachment to a receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    return await this.setReceiptAttachment(receipt.id!, blobType, undefined, attachment)\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt, throwing an error if the operation fails.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   */\n  async getAndDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const { data, wasDecrypted } = await this.crypto.entities.tryDecryptDataOf(\n      receipt,\n      await this.getReceiptAttachment(receipt.id!, attachmentId, ''),\n      (x) => validator(x)\n    )\n    if (!wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return data\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return an object containing:\n   * - data: the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   * - wasDecrypted: if the data was successfully decrypted or not\n   */\n  async getAndTryDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    return await this.crypto.entities.tryDecryptDataOf(receipt, await this.getReceiptAttachment(receipt.id!, attachmentId, ''), (x) => validator(x))\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the receipt.\n   * @param receipt the receipt to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * @return a promise which will contain the updated receipt.\n   */\n  async shareWith(\n    delegateId: string,\n    receipt: models.Receipt,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Receipt> {\n    return this.shareWithMany(receipt, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content.\n   * @param receipt the receipt to share.\n   * @param delegates sharing options for each delegate which will gain access to the entity:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * @return a promise which will contain the updated receipt.\n   */\n  async shareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Receipt> {\n    return await this.modifyReceipt(await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(receipt, true, delegates))\n  }\n\n  async getDataOwnersWithAccessTo(entity: models.Receipt): Promise<{\n    permissionsByDataOwnerId: { [dataOwnerId: string]: 'WRITE' }\n    hasUnknownAnonymousDataOwners: boolean\n  }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.Receipt): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}
+{"version":3,"file":"icc-receipt-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-receipt-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAG1C,kDAAiD;AAEjD,0EAAgG;AAIhG,MAAa,cAAe,SAAQ,uBAAa;IAG/C,YACE,IAAY,EACZ,OAAkC,EAC1B,MAAqB,EAC7B,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAT/C,WAAM,GAAN,MAAM,CAAe;QAU7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;OAWG;IACG,WAAW,CACf,IAAiB,EACjB,CAAM,EACN,UAEI,EAAE;;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,iCAC7B,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,mCAAmC,EAC1C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EACrC,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACvE,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,EAC5B,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,IACnB,CAAA;YAEF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC7F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,UAAU,CAAC,IAAiB,EAAE,KAAa,EAAE,IAAmB,EAAE,QAAgB,EAAE,IAAiB;QACnG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAG,EAAE,QAAQ,EAAE,EAAE,EAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClI,CAAC;IAED;;;;;;OAMG;IACG,8BAA8B,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAClH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YACnF,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QACzF,CAAC;KAAA;IAED;;;;;;OAMG;IACG,yBAAyB,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAC7G,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;QACtF,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,8BAA8B,CAClC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CACxE,OAAO,EACP,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CACpB,CAAA;YACD,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAClG,OAAO,IAAI,CAAA;QACb,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,iCAAiC,CACrC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAClJ,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,SAAS,CACb,UAAkB,EAClB,OAAuB,EACvB,UAEI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,OAAuB,EACvB,SAIC;;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YAC7G,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;aAC1C;;gBAAM,OAAO,OAAO,CAAA;QACvB,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAAsB;;YAIpD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAsB;;YAC9C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AA1LD,wCA0LC","sourcesContent":["import { IccReceiptApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of receipt with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param r initialised data for the receipt. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * @return a new instance of receipt.\n   */\n  async newInstance(\n    user: models.User,\n    r: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n    } = {}\n  ): Promise<models.Receipt> {\n    const receipt = new models.Receipt({\n      ...(r ?? {}),\n      _type: 'org.taktik.icure.entities.Receipt',\n      id: r?.id ?? this.crypto.randomUuid(),\n      created: r?.created ?? new Date().getTime(),\n      modified: r?.modified ?? new Date().getTime(),\n      responsible: r?.responsible ?? this.dataOwnerApi.getDataOwnerIdOf(user),\n      author: r?.author ?? user.id,\n      codes: r?.codes ?? [],\n      tags: r?.tags ?? [],\n    })\n\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new models.Receipt(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(receipt, undefined, undefined, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer) {\n    return this.newInstance(user, { documentId: docId, references: refs })\n      .then((rcpt) => this.createReceipt(rcpt))\n      .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachment(rcpt.id!, blobType, '', <any>blob) : Promise.resolve(rcpt)))\n  }\n\n  /**\n   * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async encryptAndSetReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    const encryptedData = await this.crypto.entities.encryptDataOf(receipt, attachment)\n    return await this.setReceiptAttachment(receipt.id!, blobType, undefined, encryptedData)\n  }\n\n  /**\n   * Adds an unencrypted attachment to a receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    return await this.setReceiptAttachment(receipt.id!, blobType, undefined, attachment)\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt, throwing an error if the operation fails.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   */\n  async getAndDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const { data, wasDecrypted } = await this.crypto.entities.tryDecryptDataOf(\n      receipt,\n      await this.getReceiptAttachment(receipt.id!, attachmentId, ''),\n      (x) => validator(x)\n    )\n    if (!wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return data\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return an object containing:\n   * - data: the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   * - wasDecrypted: if the data was successfully decrypted or not\n   */\n  async getAndTryDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    return await this.crypto.entities.tryDecryptDataOf(receipt, await this.getReceiptAttachment(receipt.id!, attachmentId, ''), (x) => validator(x))\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the receipt.\n   * @param receipt the receipt to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * @return a promise which will contain the updated receipt.\n   */\n  async shareWith(\n    delegateId: string,\n    receipt: models.Receipt,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Receipt> {\n    return this.shareWithMany(receipt, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content.\n   * @param receipt the receipt to share.\n   * @param delegates sharing options for each delegate which will gain access to the entity:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * @return a promise which will contain the updated receipt.\n   */\n  async shareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Receipt> {\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(receipt, true, delegates)\n    if (!!extended) {\n      return await this.modifyReceipt(extended)\n    } else return receipt\n  }\n\n  async getDataOwnersWithAccessTo(entity: models.Receipt): Promise<{\n    permissionsByDataOwnerId: { [dataOwnerId: string]: 'WRITE' }\n    hasUnknownAnonymousDataOwners: boolean\n  }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.Receipt): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}

package/icc-x-api/icc-time-table-x-api.js

@@ -11,7 +11,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IccTimeTableXApi = void 0;
 const i18n = require("./rsrc/contact.i18n");
-const _ = require("lodash");
 const icc_api_1 = require("../icc-api");
 const models = require("../icc-api/model/models");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
@@ -39,22 +38,13 @@ class IccTimeTableXApi extends icc_api_1.IccTimeTableApi {
      * @return a new instance of timetable.
      */
     newInstance(user, tt, options = {}) {
-        var _a, _b, _c, _d, _e;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
         return __awaiter(this, void 0, void 0, function* () {
-            const timeTable = _.extend({
-                id: this.crypto.primitives.randomUuid(),
-                _type: 'org.taktik.icure.entities.TimeTable',
-                created: new Date().getTime(),
-                modified: new Date().getTime(),
-                responsible: this.dataOwnerApi.getDataOwnerIdOf(user),
-                author: user.id,
-                codes: [],
-                tags: [],
-            }, tt || {});
+            const timeTable = Object.assign(Object.assign({}, (tt !== null && tt !== void 0 ? tt : {})), { _type: 'org.taktik.icure.entities.TimeTable', id: (_a = tt === null || tt === void 0 ? void 0 : tt.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = tt === null || tt === void 0 ? void 0 : tt.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = tt === null || tt === void 0 ? void 0 : tt.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = tt === null || tt === void 0 ? void 0 : tt.responsible) !== null && _d !== void 0 ? _d : this.dataOwnerApi.getDataOwnerIdOf(user), author: (_e = tt === null || tt === void 0 ? void 0 : tt.author) !== null && _e !== void 0 ? _e : user.id, codes: (_f = tt === null || tt === void 0 ? void 0 : tt.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = tt === null || tt === void 0 ? void 0 : tt.tags) !== null && _g !== void 0 ? _g : [] });
             const extraDelegations = [
-                ...Object.keys((_a = options.additionalDelegates) !== null && _a !== void 0 ? _a : {}),
-                ...((_c = (_b = user.autoDelegations) === null || _b === void 0 ? void 0 : _b.all) !== null && _c !== void 0 ? _c : []),
-                ...((_e = (_d = user.autoDelegations) === null || _d === void 0 ? void 0 : _d.administrativeData) !== null && _e !== void 0 ? _e : []),
+                ...Object.keys((_h = options.additionalDelegates) !== null && _h !== void 0 ? _h : {}),
+                ...((_k = (_j = user.autoDelegations) === null || _j === void 0 ? void 0 : _j.all) !== null && _k !== void 0 ? _k : []),
+                ...((_m = (_l = user.autoDelegations) === null || _l === void 0 ? void 0 : _l.administrativeData) !== null && _m !== void 0 ? _m : []),
             ];
             return new models.TimeTable(yield this.crypto.entities
                 .entityWithInitialisedEncryptedMetadata(timeTable, undefined, undefined, true, extraDelegations)
@@ -91,7 +81,12 @@ class IccTimeTableXApi extends icc_api_1.IccTimeTableApi {
      */
     shareWithMany(timeTable, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            return yield this.modifyTimeTable(yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(timeTable, true, delegates));
+            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(timeTable, true, delegates);
+            if (!!extended) {
+                return yield this.modifyTimeTable(extended);
+            }
+            else
+                return timeTable;
         });
     }
     getDataOwnersWithAccessTo(entity) {

package/icc-x-api/icc-time-table-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-time-table-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-time-table-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4CAA2C;AAE3C,4BAA2B;AAC3B,wCAA4C;AAK5C,kDAAiD;AACjD,0EAAgG;AAIhG,MAAa,gBAAiB,SAAQ,yBAAe;IAKnD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAhBzD,SAAI,GAAQ,IAAI,CAAA;QAiBd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;OAWG;IACG,WAAW,CACf,IAAU,EACV,EAAa,EACb,UAEI,EAAE;;;YAEN,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CACxB;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;gBACvC,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC7B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE;aACT,EACD,EAAE,IAAI,EAAE,CACT,CAAA;YAED,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,SAAS,CACzB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC/F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,UAAkB,EAClB,SAA2B,EAC3B,UAEI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,aAAa,CACjB,SAA2B,EAC3B,SAIC;;YAED,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;QACnI,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAAwB;;YAExB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAwB;;YAChD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AAxHD,4CAwHC","sourcesContent":["import * as i18n from './rsrc/contact.i18n'\n\nimport * as _ from 'lodash'\nimport { IccTimeTableApi } from '../icc-api'\nimport { User } from '../icc-api/model/User'\nimport { TimeTable } from '../icc-api/model/TimeTable'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport * as models from '../icc-api/model/models'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccTimeTableXApi extends IccTimeTableApi implements EncryptedEntityXApi<TimeTable> {\n  i18n: any = i18n\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of timetable with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param tt initialised data for the timetable. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * @return a new instance of timetable.\n   */\n  async newInstance(\n    user: User,\n    tt: TimeTable,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n    } = {}\n  ) {\n    const timeTable = _.extend(\n      {\n        id: this.crypto.primitives.randomUuid(),\n        _type: 'org.taktik.icure.entities.TimeTable',\n        created: new Date().getTime(),\n        modified: new Date().getTime(),\n        responsible: this.dataOwnerApi.getDataOwnerIdOf(user),\n        author: user.id,\n        codes: [],\n        tags: [],\n      },\n      tt || {}\n    )\n\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.administrativeData ?? []),\n    ]\n    return new models.TimeTable(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(timeTable, undefined, undefined, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  /**\n   * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the time table.\n   * @param timeTable the time table to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * time table does not have encrypted content.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async shareWith(\n    delegateId: string,\n    timeTable: models.TimeTable,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.TimeTable> {\n    return this.shareWithMany(timeTable, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param timeTable the time table to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * time table does not have encrypted content.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async shareWithMany(\n    timeTable: models.TimeTable,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.TimeTable> {\n    return await this.modifyTimeTable(await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(timeTable, true, delegates))\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: models.TimeTable\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.TimeTable): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}
+{"version":3,"file":"icc-time-table-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-time-table-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4CAA2C;AAG3C,wCAA4C;AAK5C,kDAAiD;AACjD,0EAAgG;AAIhG,MAAa,gBAAiB,SAAQ,yBAAe;IAKnD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAhBzD,SAAI,GAAQ,IAAI,CAAA;QAiBd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;OAWG;IACG,WAAW,CACf,IAAU,EACV,EAAa,EACb,UAEI,EAAE;;;YAEN,MAAM,SAAS,mCACV,CAAC,EAAE,aAAF,EAAE,cAAF,EAAE,GAAI,EAAE,CAAC,KACb,KAAK,EAAE,qCAAqC,EAC5C,EAAE,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EACjD,OAAO,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC5C,QAAQ,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC9C,WAAW,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACxE,MAAM,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,EAC7B,KAAK,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,KAAK,mCAAI,EAAE,EACtB,IAAI,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,IAAI,mCAAI,EAAE,GACrB,CAAA;YAED,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,SAAS,CACzB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC/F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,UAAkB,EAClB,SAA2B,EAC3B,UAEI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,aAAa,CACjB,SAA2B,EAC3B,SAIC;;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YAC/G,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;aAC5C;;gBAAM,OAAO,SAAS,CAAA;QACzB,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAAwB;;YAExB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAwB;;YAChD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AAzHD,4CAyHC","sourcesContent":["import * as i18n from './rsrc/contact.i18n'\n\nimport * as _ from 'lodash'\nimport { IccTimeTableApi } from '../icc-api'\nimport { User } from '../icc-api/model/User'\nimport { TimeTable } from '../icc-api/model/TimeTable'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport * as models from '../icc-api/model/models'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccTimeTableXApi extends IccTimeTableApi implements EncryptedEntityXApi<TimeTable> {\n  i18n: any = i18n\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of timetable with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param tt initialised data for the timetable. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * @return a new instance of timetable.\n   */\n  async newInstance(\n    user: User,\n    tt: TimeTable,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n    } = {}\n  ) {\n    const timeTable = {\n      ...(tt ?? {}),\n      _type: 'org.taktik.icure.entities.TimeTable',\n      id: tt?.id ?? this.crypto.primitives.randomUuid(),\n      created: tt?.created ?? new Date().getTime(),\n      modified: tt?.modified ?? new Date().getTime(),\n      responsible: tt?.responsible ?? this.dataOwnerApi.getDataOwnerIdOf(user),\n      author: tt?.author ?? user.id,\n      codes: tt?.codes ?? [],\n      tags: tt?.tags ?? [],\n    }\n\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.administrativeData ?? []),\n    ]\n    return new models.TimeTable(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(timeTable, undefined, undefined, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  /**\n   * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the time table.\n   * @param timeTable the time table to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * time table does not have encrypted content.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async shareWith(\n    delegateId: string,\n    timeTable: models.TimeTable,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.TimeTable> {\n    return this.shareWithMany(timeTable, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param timeTable the time table to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * time table does not have encrypted content.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async shareWithMany(\n    timeTable: models.TimeTable,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.TimeTable> {\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(timeTable, true, delegates)\n    if (!!extended) {\n      return await this.modifyTimeTable(extended)\n    } else return timeTable\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: models.TimeTable\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.TimeTable): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}

package/icc-x-api/index.d.ts

@@ -1,4 +1,4 @@
-import { IccAgendaApi, IccAuthApi, IccCalendarItemTypeApi, IccEntityrefApi, IccGroupApi, IccInsuranceApi, IccMedicallocationApi, IccPermissionApi } from '../icc-api';
+import { IccAgendaApi, IccAnonymousAccessApi, IccApplicationsettingsApi, IccArticleApi, IccAuthApi, IccBeefactApi, IccBeresultexportApi, IccBeresultimportApi, IccBesamv2Api, IccCalendarItemTypeApi, IccClassificationTemplateApi, IccEntityrefApi, IccEntitytemplateApi, IccFrontendmigrationApi, IccGroupApi, IccIcureApi, IccInsuranceApi, IccKeywordApi, IccMedexApi, IccMedicallocationApi, IccPermissionApi, IccPlaceApi, IccPubsubApi, IccReplicationApi, IccTarificationApi, IccTmpApi } from '../icc-api';
 import { IccUserXApi } from './icc-user-x-api';
 import { IccCryptoXApi } from './icc-crypto-x-api';
 import { IccContactXApi } from './icc-contact-x-api';
@@ -14,7 +14,7 @@ import { IccMessageXApi } from './icc-message-x-api';
 import { IccReceiptXApi } from './icc-receipt-x-api';
 import { IccAccesslogXApi } from './icc-accesslog-x-api';
 import { IccTimeTableXApi } from './icc-time-table-x-api';
-import { IccDeviceApi } from '../icc-api/api/IccDeviceApi';
+import { IccDeviceApi } from '../icc-api';
 import { IccCodeXApi } from './icc-code-x-api';
 import { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
@@ -24,6 +24,9 @@ import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { StorageEntryKeysFactory } from './storage/StorageEntryKeysFactory';
 import { CryptoStrategies } from './crypto/CryptoStrategies';
 import { IccIcureMaintenanceXApi } from './icc-icure-maintenance-x-api';
+import { IccBekmehrXApi } from './icc-bekmehr-x-api';
+import { IccDoctemplateXApi } from './icc-doctemplate-x-api';
+import { UserGroup } from '../icc-api/model/UserGroup';
 export * from './icc-accesslog-x-api';
 export * from './icc-bekmehr-x-api';
 export * from './icc-calendar-item-x-api';
@@ -47,51 +50,296 @@ export { KeyStorageFacade } from './storage/KeyStorageFacade';
 export { LocalStorageImpl } from './storage/LocalStorageImpl';
 export { StorageFacade } from './storage/StorageFacade';
 export { KeyStorageImpl } from './storage/KeyStorageImpl';
+export { CryptoStrategies } from './crypto/CryptoStrategies';
 export interface Apis {
-    authApi: IccAuthApi;
-    codeApi: IccCodeXApi;
-    calendarItemTypeApi: IccCalendarItemTypeApi;
-    medicalLocationApi: IccMedicallocationApi;
-    entityReferenceApi: IccEntityrefApi;
-    userApi: IccUserXApi;
-    permissionApi: IccPermissionApi;
-    healthcarePartyApi: IccHcpartyXApi;
-    deviceApi: IccDeviceApi;
-    cryptoApi: IccCryptoXApi;
-    accessLogApi: IccAccesslogXApi;
-    agendaApi: IccAgendaApi;
-    contactApi: IccContactXApi;
-    formApi: IccFormXApi;
-    groupApi: IccGroupApi;
-    invoiceApi: IccInvoiceXApi;
-    insuranceApi: IccInsuranceApi;
-    documentApi: IccDocumentXApi;
-    healthcareElementApi: IccHelementXApi;
-    classificationApi: IccClassificationXApi;
-    calendarItemApi: IccCalendarItemXApi;
-    receiptApi: IccReceiptXApi;
-    timetableApi: IccTimeTableXApi;
-    patientApi: IccPatientXApi;
-    messageApi: IccMessageXApi;
-    maintenanceTaskApi: IccMaintenanceTaskXApi;
-    dataOwnerApi: IccDataOwnerXApi;
-    icureMaintenanceTaskApi: IccIcureMaintenanceXApi;
+    readonly authApi: IccAuthApi;
+    readonly codeApi: IccCodeXApi;
+    readonly calendarItemTypeApi: IccCalendarItemTypeApi;
+    readonly medicalLocationApi: IccMedicallocationApi;
+    readonly entityReferenceApi: IccEntityrefApi;
+    readonly userApi: IccUserXApi;
+    readonly permissionApi: IccPermissionApi;
+    readonly healthcarePartyApi: IccHcpartyXApi;
+    readonly deviceApi: IccDeviceApi;
+    readonly cryptoApi: IccCryptoXApi;
+    readonly accessLogApi: IccAccesslogXApi;
+    readonly agendaApi: IccAgendaApi;
+    readonly contactApi: IccContactXApi;
+    readonly formApi: IccFormXApi;
+    readonly groupApi: IccGroupApi;
+    readonly invoiceApi: IccInvoiceXApi;
+    readonly insuranceApi: IccInsuranceApi;
+    readonly documentApi: IccDocumentXApi;
+    readonly healthcareElementApi: IccHelementXApi;
+    readonly classificationApi: IccClassificationXApi;
+    readonly calendarItemApi: IccCalendarItemXApi;
+    readonly receiptApi: IccReceiptXApi;
+    readonly timetableApi: IccTimeTableXApi;
+    readonly patientApi: IccPatientXApi;
+    readonly messageApi: IccMessageXApi;
+    readonly maintenanceTaskApi: IccMaintenanceTaskXApi;
+    readonly dataOwnerApi: IccDataOwnerXApi;
+    readonly icureMaintenanceTaskApi: IccIcureMaintenanceXApi;
+    readonly anonymousAccessApi: IccAnonymousAccessApi;
+    readonly applicationSettingsApi: IccApplicationsettingsApi;
+    readonly articleApi: IccArticleApi;
+    readonly bekmehrApi: IccBekmehrXApi;
+    readonly beefactApi: IccBeefactApi;
+    readonly beresultexportApi: IccBeresultexportApi;
+    readonly beresultimportApi: IccBeresultimportApi;
+    readonly besamv2Api: IccBesamv2Api;
+    readonly classificationTemplateApi: IccClassificationTemplateApi;
+    readonly doctemplateApi: IccDoctemplateXApi;
+    readonly entitytemplateApi: IccEntitytemplateApi;
+    readonly frontendmigrationApi: IccFrontendmigrationApi;
+    readonly icureApi: IccIcureApi;
+    readonly keywordApi: IccKeywordApi;
+    readonly medexApi: IccMedexApi;
+    readonly placeApi: IccPlaceApi;
+    readonly pubsubApi: IccPubsubApi;
+    readonly replicationApi: IccReplicationApi;
+    readonly tarificationApi: IccTarificationApi;
+    readonly tmpApi: IccTmpApi;
 }
-export type ApiOptions = {
-    readonly entryKeysFactory?: StorageEntryKeysFactory;
-    readonly createMaintenanceTasksOnNewKey?: boolean;
+/**
+ * Allows to customise the behaviour of the iCure API by providing various optional parameters.
+ */
+export interface IcureApiOptions {
+    /**
+     * Specifies how iCure can store string values (e.g. json). In production this should be persistent storage.
+     * @default the browser's localStorage.
+     */
     readonly storage?: StorageFacade<string>;
+    /**
+     * Specifies how iCure can store cryptographic keys. Preferably this should be some ad-hoc storage key storage.
+     * @default stores the json of the jwk representation of the key in {@link storage}.
+     */
     readonly keyStorage?: KeyStorageFacade;
+    /**
+     * Specifies where iCure should store his data within the {@link storage} and {@link keyStorage}.
+     * @default {@link DefaultStorageEntryKeysFactory}
+     */
+    readonly entryKeysFactory?: StorageEntryKeysFactory;
+    /**
+     * Specifies if iCure should create maintenance tasks for requesting access back when a new key is generated at initialisation time.
+     * @default true
+     */
+    readonly createMaintenanceTasksOnNewKey?: boolean;
+    /**
+     * Additional headers to use on each request made by the iCure api.
+     * @default no additional headers
+     */
     readonly headers?: {
         [headerName: string]: string;
     };
-};
+    /**
+     * Specifies which fields should be encrypted for each kind of encryptable entity. You should make sure that every application in your environment
+     * specifies the same values for this configuration.
+     * @default see documentation for {@link EncryptedFieldsConfig}
+     */
+    readonly encryptedFieldsConfig?: EncryptedFieldsConfig;
+    /**
+     * Each user may exist in multiple groups, but an instance of {@link IcureApi} is specialised for a single group. This function allows you to decide
+     * the group to use for a given user. This functions will be called only if a user exists in at least 2 groups, takes in input the information on
+     * the groups the user can access (in no specific order) and must return the id of one of these groups.
+     * @default takes the first group provided. The group chosen by this method may vary between different instantiations of the {@link IcureApi} even
+     * if for the same user and if the groups available for the user do not change.
+     */
+    readonly groupSelector?: (availableGroupsInfo: UserGroup[]) => Promise<string>;
+}
+/**
+ * Specifies which fields should be encrypted for each kind of encryptable entity.
+ *
+ * Note that any value you specify here overrides the default values. For example if you specify `['medicalLocationId']` for `healthElement` the
+ * fields `['descr', 'note']` which are usually encrypted by default will no longer be encrypted. If you want to add fields to the default values
+ * you can use {@link EncryptedFieldsConfig.Defaults}, for example `[...EncryptedFieldsConfig.Defaults.healthElement, 'medicalLocationId'].
+ *
+ * # Encrypted fields syntax
+ *
+ * ## Grammar
+ *
+ * The grammar for each encrypted field is the following:
+ * ```
+ * fieldName :=
+ *   regex([a-zA-Z_][a-zA-Z0-9_]+)
+ * encryptedField :=
+ *   fieldName
+ *   | fieldName + ("." | ".*." | "[].") + encryptedField
+ * ```
+ *
+ * This grammar allows you to specify the fields to encrypt for the object and recursively for nested objects.
+ * - A string containing only a single `fieldName` will encrypt the field with the given name.
+ * - A string starting with `fieldName.` allows to specify the encrypted fields of a nested object. The encrypted values of the
+ *   fields in the nested object will be saved in the nested object.
+ * - A string starting with `fieldName.*.` treats `fieldName` as a map/dictionary data structure and allows to specify the encrypted fields of the
+ *   values of the map. Note that the values of the map must be objects as well. The encrypted content of each map value is stored in that value.
+ * - A string starting with `fieldName[].` treats `fieldName` as an array and allows to specify the encrypted fields of the values of the array.
+ *   Note that the values of the array must be objects as well. The encrypted content of each array element is stored in that element.
+ *
+ * ## Example
+ *
+ * Consider the following object and encryption keys:
+ * ```javascript
+ * const obj = {
+ *   a: { x: 0, y: 1 },
+ *   b: "hello",
+ *   c: [ { public: "a", secret: "b" }, { public: "c", secret: "d" } ],
+ *   d: "ok",
+ *   e: {
+ *     info: "something",
+ *     private: "secret",
+ *     dataMap: {
+ *       "en": {
+ *         a: 1,
+ *         b: 2
+ *       },
+ *       "fr": {
+ *         a: 3,
+ *         b: 4
+ *       }
+ *     }
+ *   }
+ * }
+ * const encryptedFields = [
+ *   "a",
+ *   "c[].secret",
+ *   "d",
+ *   "e.private",
+ *   "e.datamap.*.a"
+ * ]
+ * ```
+ * If you use them with the crypt method you will get the following result:
+ * ```json
+ * {
+ *   b: "hello",
+ *   c: [
+ *     { public: "a", encryptedSelf: "...encrypted data of c[0]" },
+ *     { public: "c", encryptedSelf: "...encrypted data of c[1]" }
+ *   ],
+ *   e: {
+ *     info: "something",
+ *     dataMap: {
+ *       "en": { b: 2, encryptedSelf: "...encrypted data of e.dataMap['en']" },
+ *       "fr": { b: 4, encryptedSelf: "...encrypted data of e.dataMap['fr']" }
+ *     },
+ *     encryptedSelf: "...encrypted data of e"
+ *   },
+ *   encryptedSelf: "...encrypted data of obj"
+ * }
+ * ```
+ *
+ * ## Shortened representation
+ *
+ * You can also group encrypted fields having the same prefix by concatenating to the prefix the JSON representation of an array of all the postfixes.
+ * For example the following encrypted fields:
+ * ```javascript
+ * const encryptedFields = ["a.b.c.d.e.f1", "a.b.c.d.e.f2", "a.b.c.d.e.f3", "a.b.c.d.e.f4"]
+ * ```
+ * can be shortened to
+ * ```javascript
+ * const encryptedFields = ['a.b.c.d.e.["f1","f2","f3","f4"]'] // Note the use of single quotes to avoid escaping the double quotes
+ * ```
+ * If you use the shortened representation you may need to escape nested json representations. In that case the use of `JSON.stringify` is
+ * recommended.
+ */
+export interface EncryptedFieldsConfig {
+    /**
+     * Fields to encrypt for entities of type {@link AccessLog}
+     * @default ['detail', 'objectId']
+     */
+    readonly accessLog?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link CalendarItem}
+     * @default ['details', 'title', 'patientId']
+     */
+    readonly calendarItem?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link Contact}, excluding `services`. You can specify which fields of `services` should be encrypted
+     * using {@link service}.
+     * @default ['descr'] // encryption of `services` is managed through {@link service}
+     */
+    readonly contact?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link Service}. Note that encryption of the `content` field and recursively contained `Services` through
+     * `content.compoundValue` is automatically managed by the sdk, and you are not allowed to modify it.
+     *
+     * Note: any non-empty values for this field will break bi-directional data compatibility between v7 and previous: Contacts created with
+     * v7 will not be read properly by previous versions. If you want
+     * @default ['notes[].markdown'] // encryption of `content` is managed in a special way
+     */
+    readonly service?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link HealthElement}
+     * @default ['descr', 'note', 'notes[].markdown']
+     */
+    readonly healthElement?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link MaintenanceTask}
+     * @default ['properties']
+     */
+    readonly maintenanceTask?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link Patient}
+     * @default ['note', 'notes[].markdown']
+     */
+    readonly patient?: string[];
+}
+export declare namespace EncryptedFieldsConfig {
+    const Defaults: {
+        accessLog: string[];
+        calendarItem: string[];
+        contact: string[];
+        service: string[];
+        healthElement: string[];
+        maintenanceTask: string[];
+        patient: string[];
+    };
+}
+/**
+ * Details for the authentication of a user
+ */
 export type AuthenticationDetails = {
     username: string;
     password: string;
     forceBasic?: boolean;
+    icureTokens?: {
+        token: string;
+        refreshToken: string;
+    };
+    thirdPartyTokens?: {
+        [thirdParty: string]: string;
+    };
 };
-export declare const Api: (host: string, authenticationOptions: AuthenticationDetails | AuthenticationProvider, cryptoStrategies: CryptoStrategies, crypto?: Crypto, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>, options?: ApiOptions) => Promise<Apis>;
+/**
+ * Main entry point for the iCure API. Provides entity-specific sub-apis and some general methods which are not related to a specific entity.
+ */
+export interface IcureApi extends Apis {
+    /**
+     * Get the information on groups that the current user can access and the current group that this api instance is working on.
+     * Note that the values you will get for `availableGroups` may differ from the values you would get if you call {@link IccUserApi.getMatchingUsers}
+     * on {@link Apis.userApi}, since the latter is specialised on the specific instance of the user in `currentGroup`.
+     */
+    getGroupsInfo(): Promise<{
+        currentGroup: UserGroup;
+        availableGroups: UserGroup[];
+    }>;
+    /**
+     * Switches the api to allow the user to work on a different group.
+     * @param newGroupId the id of the group to switch to.
+     * @return a new api for the specified group.
+     */
+    switchGroup(newGroupId: string): Promise<IcureApi>;
+}
+export declare namespace IcureApi {
+    /**
+     * Initialises a new instance of the iCure API.
+     */
+    function initialise(host: string, authenticationOptions: AuthenticationDetails | AuthenticationProvider, cryptoStrategies: CryptoStrategies, crypto?: Crypto, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>, options?: IcureApiOptions): Promise<IcureApi>;
+}
+/**
+ * @experimental This function still needs development and will be changed
+ * Build apis which do not need crypto and can be used by non-data-owner users
+ */
 export declare const BasicApis: (host: string, username: string, password: string, crypto?: Crypto, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>, forceBasic?: boolean) => Promise<{
     authApi: IccAuthApi;
     codeApi: IccCodeXApi;
@@ -101,4 +349,5 @@ export declare const BasicApis: (host: string, username: string, password: strin
     entityReferenceApi: IccEntityrefApi;
     agendaApi: IccAgendaApi;
     groupApi: IccGroupApi;
+    healthcarePartyApi: IccHcpartyXApi;
 }>;