@icure/api 7.1.14 → 8.0.0-RC.1

package/icc-x-api/icc-maintenance-task-x-api.js

@@ -12,14 +12,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IccMaintenanceTaskXApi = void 0;
 const IccMaintenanceTaskApi_1 = require("../icc-api/api/IccMaintenanceTaskApi");
 const models = require("../icc-api/model/models");
-const models_1 = require("../icc-api/model/models");
 const _ = require("lodash");
+const models_1 = require("../icc-api/model/models");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
+const ShareMetadataBehaviour_1 = require("./crypto/ShareMetadataBehaviour");
 const utils_1 = require("./utils");
 const Connection_1 = require("../icc-api/model/Connection");
-const websocket_1 = require("./utils/websocket");
 class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi_1.IccMaintenanceTaskApi {
-    constructor(host, headers, crypto, hcPartyApi, dataOwnerApi, userApi, authApi, encryptedKeys = ['properties'], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'MaintenanceTask'));
+    }
+    constructor(host, headers, crypto, hcPartyApi, dataOwnerApi, userApi, authApi, encryptedKeys = [], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
         ? window.fetch
         : typeof self !== 'undefined'
             ? self.fetch
@@ -28,9 +33,9 @@ class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi_1.IccMaintenanceTaskA
         this.crypto = crypto;
         this.hcPartyApi = hcPartyApi;
         this.dataOwnerApi = dataOwnerApi;
-        this.encryptedFields = (0, utils_1.parseEncryptedFields)(encryptedKeys, 'MaintenanceTask.');
         this.userApi = userApi;
         this.authApi = authApi;
+        this.encryptedFields = (0, utils_1.parseEncryptedFields)(encryptedKeys, 'MaintenanceTask.');
     }
     /**
      * Creates a new instance of maintenance task with initialised encryption metadata (not in the database).
@@ -40,8 +45,7 @@ class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi_1.IccMaintenanceTaskA
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * @return a new instance of maintenance task.
      */
     newInstance(user, m, options = {}) {
@@ -49,9 +53,9 @@ class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi_1.IccMaintenanceTaskA
         return __awaiter(this, void 0, void 0, function* () {
             const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user);
             const maintenanceTask = Object.assign(Object.assign({}, (m !== null && m !== void 0 ? m : {})), { _type: 'org.taktik.icure.entities.MaintenanceTask', id: (_a = m === null || m === void 0 ? void 0 : m.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = m === null || m === void 0 ? void 0 : m.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = m === null || m === void 0 ? void 0 : m.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = m === null || m === void 0 ? void 0 : m.responsible) !== null && _d !== void 0 ? _d : dataOwnerId, author: (_e = m === null || m === void 0 ? void 0 : m.author) !== null && _e !== void 0 ? _e : user.id });
-            const extraDelegations = [...Object.keys((_f = options.additionalDelegates) !== null && _f !== void 0 ? _f : {}), ...((_h = (_g = user.autoDelegations) === null || _g === void 0 ? void 0 : _g.all) !== null && _h !== void 0 ? _h : [])];
-            return new models.MaintenanceTask(yield this.crypto.entities
-                .entityWithInitialisedEncryptedMetadata(maintenanceTask, undefined, undefined, true, extraDelegations)
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries(((_g = (_f = user.autoDelegations) === null || _f === void 0 ? void 0 : _f.all) !== null && _g !== void 0 ? _g : []).map((d) => [d, AccessLevelEnum.WRITE]))), ((_h = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _h !== void 0 ? _h : {}));
+            return new models.MaintenanceTask(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(maintenanceTask, 'MaintenanceTask', undefined, undefined, true, false, extraDelegations)
                 .then((x) => x.updatedEntity));
         });
     }
@@ -93,36 +97,47 @@ class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi_1.IccMaintenanceTaskA
         throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption');
     }
     modifyMaintenanceTaskWithUser(user, body) {
-        return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null);
+        return body ? this.modifyMaintenanceTaskAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null);
     }
-    modifyAs(dataOwner, body) {
+    modifyMaintenanceTaskAs(dataOwner, body) {
         return this.encryptAs(dataOwner, [_.cloneDeep(body)])
             .then((encTasks) => super.modifyMaintenanceTask(encTasks[0]))
             .then((mt) => this.decryptAs(dataOwner, [mt]))
             .then((mts) => mts[0]);
     }
     encrypt(user, maintenanceTasks) {
-        return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), maintenanceTasks);
+        const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user);
+        return this.encryptAs(dataOwnerId, maintenanceTasks);
     }
-    encryptAs(dataOwnerId, maintenanceTasks) {
-        return Promise.all(maintenanceTasks.map((m) => this.crypto.entities.tryEncryptEntity(m, dataOwnerId, this.encryptedFields, true, true, (x) => new models.MaintenanceTask(x))));
+    encryptAs(dataOwner, maintenanceTasks) {
+        return Promise.all(maintenanceTasks.map((m) => this.crypto.xapi.tryEncryptEntity(m, 'MaintenanceTask', this.encryptedFields, true, false, (x) => new models.MaintenanceTask(x))));
     }
     decrypt(user, maintenanceTasks) {
-        return this.decryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), maintenanceTasks);
+        const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user);
+        return this.decryptAs(dataOwnerId, maintenanceTasks);
+    }
+    decryptAs(dataOwner, maintenanceTasks) {
+        return Promise.all(maintenanceTasks.map((mT) => __awaiter(this, void 0, void 0, function* () { return this.crypto.xapi.decryptEntity(mT, 'MaintenanceTask', (x) => new models_1.MaintenanceTask(x)).then(({ entity }) => entity); })));
     }
-    decryptAs(dataOwnerId, maintenanceTasks) {
-        return Promise.all(maintenanceTasks.map((mT) => __awaiter(this, void 0, void 0, function* () { return this.crypto.entities.decryptEntity(mT, dataOwnerId, (x) => new models_1.MaintenanceTask(x)).then(({ entity }) => entity); })));
+    /**
+     * @return if the logged data owner has write access to the content of the given maintenance task
+     */
+    hasWriteAccess(maintenanceTask) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: maintenanceTask, type: 'MaintenanceTask' });
+        });
     }
     /**
      * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the maintenance task.
      * @param maintenanceTask the maintenance task to share.
      * @param options optional parameters to customize the sharing behaviour:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * maintenance task does not have encrypted content.
-     * @return a promise which will contain the updated maintenance task
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId, maintenanceTask, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -131,39 +146,61 @@ class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi_1.IccMaintenanceTaskA
     }
     /**
      * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param maintenanceTask the maintenance task to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * maintenance task does not have encrypted content.
-     * @return a promise which will contain the updated maintenance task
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity.
      */
     shareWithMany(maintenanceTask, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
-            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(maintenanceTask, true, delegates);
-            if (!!extended) {
-                return yield this.modifyAs(self, extended);
-            }
-            else
-                return maintenanceTask;
+            return (yield this.tryShareWithMany(maintenanceTask, delegates)).updatedEntityOrThrow;
         });
     }
-    getDataOwnersWithAccessTo(entity) {
+    /**
+     * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param maintenanceTask the maintenance task to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * maintenance task does not have encrypted content.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(maintenanceTask, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
+            const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(maintenanceTask, 'MaintenanceTask');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyMaintenanceTaskAs(self, entityWithEncryptionKey) : maintenanceTask;
+            return this.crypto.xapi
+                .simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'MaintenanceTask' }, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+                delegateId,
+                {
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
+                    shareOwningEntityIds: ShareMetadataBehaviour_1.ShareMetadataBehaviour.NEVER,
+                    shareSecretIds: undefined,
+                },
+            ])), (x) => this.bulkShareMaintenanceTask(x))
+                .then((r) => r.mapSuccessAsync((e) => this.decryptAs(self, [e]).then((es) => es[0])));
         });
     }
+    getDataOwnersWithAccessTo(entity) {
+        return this.crypto.xapi.getDataOwnersWithAccessTo({ entity, type: 'MaintenanceTask' });
+    }
     getEncryptionKeysOf(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.encryptionKeysOf(entity);
-        });
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'MaintenanceTask' }, undefined);
     }
     subscribeToMaintenanceTaskEvents(eventTypes, filter, eventFired, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
             const currentUser = yield this.userApi.getCurrentUser();
-            return (0, websocket_1.subscribeToEntityEvents)(this.host, this.authApi, 'MaintenanceTask', eventTypes, filter, eventFired, options, (encrypted) => __awaiter(this, void 0, void 0, function* () { return (yield this.decrypt(currentUser, [encrypted]))[0]; })).then((rs) => new Connection_1.ConnectionImpl(rs));
+            return (0, utils_1.subscribeToEntityEvents)(this.host, this.authApi, 'MaintenanceTask', eventTypes, filter, eventFired, options, (encrypted) => __awaiter(this, void 0, void 0, function* () { return (yield this.decrypt(currentUser, [encrypted]))[0]; })).then((rs) => new Connection_1.ConnectionImpl(rs));
         });
     }
 }

package/icc-x-api/icc-maintenance-task-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-maintenance-task-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-maintenance-task-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gFAA4E;AAE5E,kDAAiD;AACjD,oDAAwE;AACxE,4BAA2B;AAG3B,0EAAgG;AAGhG,mCAA0F;AAE1F,4DAAsE;AACtE,iDAAyD;AAIzD,MAAa,sBAAuB,SAAQ,6CAAqB;IAS/D,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,UAA0B,EAC1B,YAA8B,EAC9B,OAAoB,EACpB,OAAmB,EACnB,gBAA+B,CAAC,YAAY,CAAC,EAC7C,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,kBAAkB,CAAC,CAAA;QAC9E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED;;;;;;;;;;;OAWG;IACG,WAAW,CACf,IAAiB,EACjB,CAAM,EACN,UAEI,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,eAAe,mCAChB,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,2CAA2C,EAClD,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,WAAW,EAC1C,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,GAC7B,CAAA;YAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,CAAC,CAAA;YAClH,OAAO,IAAI,MAAM,CAAC,eAAe,CAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBACrG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,qBAAqB,CAAC,IAA6B;QACjD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,6BAA6B,CAAC,IAAiB,EAAE,IAA6B;QAC5E,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;iBACtD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBACtC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,wBAAwB,CAAC,eAAwB,EAAE,KAAc,EAAE,IAAwC;QACzG,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,qBAAqB,CAAC,mBAA2B;QAC/C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,6BAA6B,CAAC,IAAiB,EAAE,iBAAyB;QACxE,OAAO,KAAK,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;IACvD,CAAC;IAED,gCAAgC,CAC9B,IAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,IAAwC;QAExC,OAAO,KAAK;aACT,wBAAwB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;aACtD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7F,CAAC;IAED,kBAAkB,CAAC,iBAAyB;QAC1C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,0BAA0B,CAAC,IAAiB,EAAE,iBAAyB;QACrE,OAAO,KAAK;aACT,kBAAkB,CAAC,iBAAiB,CAAC;aACrC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aACtC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,qBAAqB,CAAC,IAA6B;QACjD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,6BAA6B,CAAC,IAAiB,EAAE,IAA6B;QAC5E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrG,CAAC;IAEO,QAAQ,CAAC,SAAiB,EAAE,IAA4B;QAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5D,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC7C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,gBAA+C;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACnF,CAAC;IAEO,SAAS,CAAC,WAAmB,EAAE,gBAA+C;QACpF,OAAO,OAAO,CAAC,GAAG,CAChB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAC9H,CACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,gBAA+C;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACnF,CAAC;IAEO,SAAS,CAAC,WAAmB,EAAE,gBAA+C;QACpF,OAAO,OAAO,CAAC,GAAG,CAChB,gBAAgB,CAAC,GAAG,CAAC,CAAO,EAAE,EAAE,EAAE,gDAChC,OAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,wBAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA,GAAA,CAChH,CACF,CAAA;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACG,SAAS,CACb,UAAkB,EAClB,eAAuC,EACvC,UAEI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACvE,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,eAAuC,EACvC,SAIC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YACrH,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;aAC3C;;gBAAM,OAAO,eAAe,CAAA;QAC/B,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAAuB;;YAEvB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAuB;;YAC/C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;IAEK,gCAAgC,CACpC,UAA8C,EAC9C,MAAuC,EACvC,UAA0D,EAC1D,UAA+B,EAAE;;YAEjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAEvD,OAAO,IAAA,mCAAuB,EAC5B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,iBAAiB,EACjB,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CACvE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;CACF;AAzOD,wDAyOC","sourcesContent":["import { IccMaintenanceTaskApi } from '../icc-api/api/IccMaintenanceTaskApi'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as models from '../icc-api/model/models'\nimport { DocIdentifier, MaintenanceTask } from '../icc-api/model/models'\nimport * as _ from 'lodash'\nimport { IccHcpartyXApi } from './icc-hcparty-x-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport {EncryptedFieldsManifest, parseEncryptedFields, SubscriptionOptions} from './utils'\nimport {AbstractFilter} from \"./filters/filters\"\nimport {Connection, ConnectionImpl} from \"../icc-api/model/Connection\"\nimport {subscribeToEntityEvents} from \"./utils/websocket\"\nimport {IccUserXApi} from \"./icc-user-x-api\"\nimport {IccAuthApi} from \"../icc-api\"\n\nexport class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi implements EncryptedEntityXApi<models.MaintenanceTask> {\n  crypto: IccCryptoXApi\n  hcPartyApi: IccHcpartyXApi\n  dataOwnerApi: IccDataOwnerXApi\n  private readonly userApi: IccUserXApi\n  private readonly authApi: IccAuthApi\n\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    hcPartyApi: IccHcpartyXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    userApi: IccUserXApi,\n    authApi: IccAuthApi,\n    encryptedKeys: Array<string> = ['properties'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.hcPartyApi = hcPartyApi\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'MaintenanceTask.')\n    this.userApi = userApi\n    this.authApi = authApi\n  }\n\n  /**\n   * Creates a new instance of maintenance task with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param m initialised data for the maintenance task. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * @return a new instance of maintenance task.\n   */\n  async newInstance(\n    user: models.User,\n    m: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    const maintenanceTask = {\n      ...(m ?? {}),\n      _type: 'org.taktik.icure.entities.MaintenanceTask',\n      id: m?.id ?? this.crypto.primitives.randomUuid(),\n      created: m?.created ?? new Date().getTime(),\n      modified: m?.modified ?? new Date().getTime(),\n      responsible: m?.responsible ?? dataOwnerId,\n      author: m?.author ?? user.id,\n    }\n\n    const extraDelegations = [...Object.keys(options.additionalDelegates ?? {}), ...(user.autoDelegations?.all ?? [])]\n    return new models.MaintenanceTask(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(maintenanceTask, undefined, undefined, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  createMaintenanceTask(body?: models.MaintenanceTask): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  createMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | null> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((tasks) => super.createMaintenanceTask(tasks[0]))\n          .then((mt) => this.decrypt(user, [mt]))\n          .then((tasks) => tasks[0])\n      : Promise.resolve(null)\n  }\n\n  filterMaintenanceTasksBy(startDocumentId?: string, limit?: number, body?: models.FilterChainMaintenanceTask): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  deleteMaintenanceTask(_maintenanceTaskIds: string): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  deleteMaintenanceTaskWithUser(user: models.User, maintenanceTaskId: string): Promise<Array<DocIdentifier>> | never {\n    return super.deleteMaintenanceTask(maintenanceTaskId)\n  }\n\n  filterMaintenanceTasksByWithUser(\n    user: models.User,\n    startDocumentId?: string,\n    limit?: number,\n    body?: models.FilterChainMaintenanceTask\n  ): Promise<models.PaginatedListMaintenanceTask> {\n    return super\n      .filterMaintenanceTasksBy(startDocumentId, limit, body)\n      .then((pl) => this.decrypt(user, pl.rows!).then((dr) => Object.assign(pl, { rows: dr })))\n  }\n\n  getMaintenanceTask(maintenanceTaskId: string): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  getMaintenanceTaskWithUser(user: models.User, maintenanceTaskId: string): Promise<models.MaintenanceTask | any> {\n    return super\n      .getMaintenanceTask(maintenanceTaskId)\n      .then((mt) => this.decrypt(user, [mt]))\n      .then((mts) => mts[0])\n  }\n\n  modifyMaintenanceTask(body?: models.MaintenanceTask): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  modifyMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | any> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null)\n  }\n\n  private modifyAs(dataOwner: string, body: models.MaintenanceTask): Promise<models.MaintenanceTask | any> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((encTasks) => super.modifyMaintenanceTask(encTasks[0]))\n      .then((mt) => this.decryptAs(dataOwner, [mt]))\n      .then((mts) => mts[0])\n  }\n\n  encrypt(user: models.User, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), maintenanceTasks)\n  }\n\n  private encryptAs(dataOwnerId: string, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    return Promise.all(\n      maintenanceTasks.map((m) =>\n        this.crypto.entities.tryEncryptEntity(m, dataOwnerId, this.encryptedFields, true, true, (x) => new models.MaintenanceTask(x))\n      )\n    )\n  }\n\n  decrypt(user: models.User, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    return this.decryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), maintenanceTasks)\n  }\n\n  private decryptAs(dataOwnerId: string, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    return Promise.all(\n      maintenanceTasks.map(async (mT) =>\n        this.crypto.entities.decryptEntity(mT, dataOwnerId, (x) => new MaintenanceTask(x)).then(({ entity }) => entity)\n      )\n    )\n  }\n\n  /**\n   * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the maintenance task.\n   * @param maintenanceTask the maintenance task to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * maintenance task does not have encrypted content.\n   * @return a promise which will contain the updated maintenance task\n   */\n  async shareWith(\n    delegateId: string,\n    maintenanceTask: models.MaintenanceTask,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.MaintenanceTask> {\n    return this.shareWithMany(maintenanceTask, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also\n   * the encrypted content.\n   * @param maintenanceTask the maintenance task to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * maintenance task does not have encrypted content.\n   * @return a promise which will contain the updated maintenance task\n   */\n  async shareWithMany(\n    maintenanceTask: models.MaintenanceTask,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.MaintenanceTask> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(maintenanceTask, true, delegates)\n    if (!!extended) {\n      return await this.modifyAs(self, extended)\n    } else return maintenanceTask\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: MaintenanceTask\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: MaintenanceTask): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n\n  async subscribeToMaintenanceTaskEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<MaintenanceTask>,\n    eventFired: (dataSample: MaintenanceTask) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    const currentUser = await this.userApi.getCurrentUser()\n\n    return subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      'MaintenanceTask',\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt(currentUser, [encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n}\n"]}
+{"version":3,"file":"icc-maintenance-task-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-maintenance-task-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gFAA4E;AAE5E,kDAAiD;AACjD,4BAA2B;AAE3B,oDAAwE;AAExE,0EAAgG;AAChG,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,4EAAwE;AAKxE,mCAAqH;AAKrH,4DAAwE;AAExE,MAAa,sBAAuB,SAAQ,6CAAqB;IAG/D,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC1H,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,UAA0B,EAC1B,YAA8B,EAC9B,OAAoB,EACpB,OAAmB,EACpC,gBAA+B,EAAE,EACjC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAbtC,WAAM,GAAN,MAAM,CAAe;QACrB,eAAU,GAAV,UAAU,CAAgB;QAC1B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,YAAO,GAAP,OAAO,CAAa;QACpB,YAAO,GAAP,OAAO,CAAY;QAUpC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,kBAAkB,CAAC,CAAA;IAChF,CAAC;IAED;;;;;;;;;;OAUG;IACG,WAAW,CACf,IAAiB,EACjB,CAAM,EACN,UAEI,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,eAAe,mCAChB,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,2CAA2C,EAClD,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,WAAW,EAC1C,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,GAC7B,CAAA;YAED,MAAM,gBAAgB,mCACjB,MAAM,CAAC,WAAW,CAAC,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,GAC5F,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,eAAe,CAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CAAC,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBAC/H,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,qBAAqB,CAAC,IAA6B;QACjD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,6BAA6B,CAAC,IAAiB,EAAE,IAA6B;QAC5E,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;iBACtD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;iBACtC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,wBAAwB,CAAC,eAAwB,EAAE,KAAc,EAAE,IAAwC;QACzG,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,qBAAqB,CAAC,mBAA2B;QAC/C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,6BAA6B,CAAC,IAAiB,EAAE,iBAAyB;QACxE,OAAO,KAAK,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;IACvD,CAAC;IAED,gCAAgC,CAC9B,IAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,IAAwC;QAExC,OAAO,KAAK;aACT,wBAAwB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;aACtD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7F,CAAC;IAED,kBAAkB,CAAC,iBAAyB;QAC1C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,0BAA0B,CAAC,IAAiB,EAAE,iBAAyB;QACrE,OAAO,KAAK;aACT,kBAAkB,CAAC,iBAAiB,CAAC;aACrC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aACtC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,qBAAqB,CAAC,IAA6B;QACjD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IAED,6BAA6B,CAAC,IAAiB,EAAE,IAA6B;QAC5E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpH,CAAC;IAEO,uBAAuB,CAAC,SAAiB,EAAE,IAA4B;QAC7E,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5D,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC7C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,gBAA+C;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IACtD,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,gBAA+C;QAClF,OAAO,OAAO,CAAC,GAAG,CAChB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CACjI,CACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,gBAA+C;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IACtD,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,gBAA+C;QAClF,OAAO,OAAO,CAAC,GAAG,CAChB,gBAAgB,CAAC,GAAG,CAAC,CAAO,EAAE,EAAE,EAAE,gDAChC,OAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,wBAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA,GAAA,CAClH,CACF,CAAA;IACH,CAAC;IAED;;OAEG;IACG,cAAc,CAAC,eAAuC;;YAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC9F,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,UAAkB,EAClB,eAAuC,EACvC,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACvE,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,aAAa,CACjB,eAAuC,EACvC,SAKC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACvF,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,gBAAgB,CACpB,eAAuC,EACvC,SAKC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;YAC1H,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAA;YACnI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAClD,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,+CAAsB,CAAC,KAAK;oBAClD,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CACxC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACzF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAA8B;QAE9B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,mBAAmB,CAAC,MAA8B;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,SAAS,CAAC,CAAA;IAC1F,CAAC;IAEK,gCAAgC,CACpC,UAA8C,EAC9C,MAAuC,EACvC,UAA0D,EAC1D,UAA+B,EAAE;;YAEjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAEvD,OAAO,IAAA,+BAAuB,EAC5B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,iBAAiB,EACjB,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CACvE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;CACF;AA1RD,wDA0RC","sourcesContent":["import { IccMaintenanceTaskApi } from '../icc-api/api/IccMaintenanceTaskApi'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as models from '../icc-api/model/models'\nimport * as _ from 'lodash'\nimport { IccHcpartyXApi } from './icc-hcparty-x-api'\nimport { DocIdentifier, MaintenanceTask } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedFieldsManifest, parseEncryptedFields, subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { IccUserXApi } from '@icure/apiV6'\nimport { IccAuthApi } from '../icc-api'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { AbstractFilter } from './filters/filters'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\n\nexport class IccMaintenanceTaskXApi extends IccMaintenanceTaskApi implements EncryptedEntityXApi<models.MaintenanceTask> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'MaintenanceTask'))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly hcPartyApi: IccHcpartyXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly userApi: IccUserXApi,\n    private readonly authApi: IccAuthApi,\n    encryptedKeys: Array<string> = [],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'MaintenanceTask.')\n  }\n\n  /**\n   * Creates a new instance of maintenance task with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param m initialised data for the maintenance task. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * @return a new instance of maintenance task.\n   */\n  async newInstance(\n    user: models.User,\n    m: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    const maintenanceTask = {\n      ...(m ?? {}),\n      _type: 'org.taktik.icure.entities.MaintenanceTask',\n      id: m?.id ?? this.crypto.primitives.randomUuid(),\n      created: m?.created ?? new Date().getTime(),\n      modified: m?.modified ?? new Date().getTime(),\n      responsible: m?.responsible ?? dataOwnerId,\n      author: m?.author ?? user.id,\n    }\n\n    const extraDelegations = {\n      ...Object.fromEntries((user.autoDelegations?.all ?? []).map((d) => [d, AccessLevelEnum.WRITE])),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    return new models.MaintenanceTask(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(maintenanceTask, 'MaintenanceTask', undefined, undefined, true, false, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  createMaintenanceTask(body?: models.MaintenanceTask): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  createMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | null> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((tasks) => super.createMaintenanceTask(tasks[0]))\n          .then((mt) => this.decrypt(user, [mt]))\n          .then((tasks) => tasks[0])\n      : Promise.resolve(null)\n  }\n\n  filterMaintenanceTasksBy(startDocumentId?: string, limit?: number, body?: models.FilterChainMaintenanceTask): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  deleteMaintenanceTask(_maintenanceTaskIds: string): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  deleteMaintenanceTaskWithUser(user: models.User, maintenanceTaskId: string): Promise<Array<DocIdentifier>> | never {\n    return super.deleteMaintenanceTask(maintenanceTaskId)\n  }\n\n  filterMaintenanceTasksByWithUser(\n    user: models.User,\n    startDocumentId?: string,\n    limit?: number,\n    body?: models.FilterChainMaintenanceTask\n  ): Promise<models.PaginatedListMaintenanceTask> {\n    return super\n      .filterMaintenanceTasksBy(startDocumentId, limit, body)\n      .then((pl) => this.decrypt(user, pl.rows!).then((dr) => Object.assign(pl, { rows: dr })))\n  }\n\n  getMaintenanceTask(maintenanceTaskId: string): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  getMaintenanceTaskWithUser(user: models.User, maintenanceTaskId: string): Promise<models.MaintenanceTask | any> {\n    return super\n      .getMaintenanceTask(maintenanceTaskId)\n      .then((mt) => this.decrypt(user, [mt]))\n      .then((mts) => mts[0])\n  }\n\n  modifyMaintenanceTask(body?: models.MaintenanceTask): never {\n    throw new Error('Cannot call a method that returns maintenance tasks without providing a user for de/encryption')\n  }\n\n  modifyMaintenanceTaskWithUser(user: models.User, body?: models.MaintenanceTask): Promise<models.MaintenanceTask | any> {\n    return body ? this.modifyMaintenanceTaskAs(this.dataOwnerApi.getDataOwnerIdOf(user), body) : Promise.resolve(null)\n  }\n\n  private modifyMaintenanceTaskAs(dataOwner: string, body: models.MaintenanceTask): Promise<models.MaintenanceTask> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((encTasks) => super.modifyMaintenanceTask(encTasks[0]))\n      .then((mt) => this.decryptAs(dataOwner, [mt]))\n      .then((mts) => mts[0])\n  }\n\n  encrypt(user: models.User, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    return this.encryptAs(dataOwnerId, maintenanceTasks)\n  }\n\n  private encryptAs(dataOwner: string, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    return Promise.all(\n      maintenanceTasks.map((m) =>\n        this.crypto.xapi.tryEncryptEntity(m, 'MaintenanceTask', this.encryptedFields, true, false, (x) => new models.MaintenanceTask(x))\n      )\n    )\n  }\n\n  decrypt(user: models.User, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    return this.decryptAs(dataOwnerId, maintenanceTasks)\n  }\n\n  private decryptAs(dataOwner: string, maintenanceTasks: Array<models.MaintenanceTask>): Promise<Array<models.MaintenanceTask>> {\n    return Promise.all(\n      maintenanceTasks.map(async (mT) =>\n        this.crypto.xapi.decryptEntity(mT, 'MaintenanceTask', (x) => new MaintenanceTask(x)).then(({ entity }) => entity)\n      )\n    )\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given maintenance task\n   */\n  async hasWriteAccess(maintenanceTask: models.MaintenanceTask): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: maintenanceTask, type: 'MaintenanceTask' })\n  }\n\n  /**\n   * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the maintenance task.\n   * @param maintenanceTask the maintenance task to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * maintenance task does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    maintenanceTask: models.MaintenanceTask,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.MaintenanceTask> {\n    return this.shareWithMany(maintenanceTask, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param maintenanceTask the maintenance task to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * maintenance task does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity.\n   */\n  async shareWithMany(\n    maintenanceTask: models.MaintenanceTask,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.MaintenanceTask> {\n    return (await this.tryShareWithMany(maintenanceTask, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing maintenance task with other data owners, allowing them to access the non-encrypted data of the maintenance task and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param maintenanceTask the maintenance task to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * maintenance task does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    maintenanceTask: models.MaintenanceTask,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.MaintenanceTask>> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(maintenanceTask, 'MaintenanceTask')\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyMaintenanceTaskAs(self, entityWithEncryptionKey) : maintenanceTask\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity: updatedEntity, type: 'MaintenanceTask' },\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: ShareMetadataBehaviour.NEVER,\n              shareSecretIds: undefined,\n            },\n          ])\n        ),\n        (x) => this.bulkShareMaintenanceTask(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decryptAs(self, [e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.MaintenanceTask\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.xapi.getDataOwnersWithAccessTo({ entity, type: 'MaintenanceTask' })\n  }\n\n  getEncryptionKeysOf(entity: models.MaintenanceTask): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: 'MaintenanceTask' }, undefined)\n  }\n\n  async subscribeToMaintenanceTaskEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<MaintenanceTask>,\n    eventFired: (dataSample: MaintenanceTask) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    const currentUser = await this.userApi.getCurrentUser()\n\n    return subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      'MaintenanceTask',\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt(currentUser, [encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n}\n"]}

package/icc-x-api/icc-message-x-api.d.ts

@@ -4,11 +4,18 @@ import { Patient, User } from '../icc-api/model/models';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import * as models from '../icc-api/model/models';
+import { SecureDelegation } from '../icc-api/model/SecureDelegation';
+import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { ShareResult } from './utils/ShareResult';
+import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest';
+import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { XHR } from '../icc-api/api/XHR';
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
 export declare class IccMessageXApi extends IccMessageApi implements EncryptedEntityXApi<models.Message> {
-    private crypto;
-    dataOwnerApi: IccDataOwnerXApi;
+    private readonly crypto;
+    private readonly dataOwnerApi;
+    get headers(): Promise<Array<XHR.Header>>;
     constructor(host: string, headers: {
         [key: string]: string;
     }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
@@ -22,15 +29,14 @@ export declare class IccMessageXApi extends IccMessageApi implements EncryptedEn
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
-     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
+     * auto-delegations, in such case the access level specified here will be used.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the message. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of message.
      */
     newInstanceWithPatient(user: User, patient: Patient | null, m?: any, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
         preferredSfk?: string;
     }): Promise<models.Message>;
@@ -40,9 +46,13 @@ export declare class IccMessageXApi extends IccMessageApi implements EncryptedEn
      * in the returned array, but in case of entity merges there could be multiple values.
      */
     decryptPatientIdOf(message: models.Message): Promise<string[]>;
+    /**
+     * @return if the logged data owner has write access to the content of the given message
+     */
+    hasWriteAccess(message: models.Message): Promise<boolean>;
     /**
      * Share an existing message with other data owners, allowing them to access the non-encrypted data of the message and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the message.
      * @param message the message to share.
      * @param shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
@@ -53,33 +63,61 @@ export declare class IccMessageXApi extends IccMessageApi implements EncryptedEn
      * message does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this message refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated message
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId: string, message: models.Message, shareSecretIds: string[], options?: {
+        requestedPermissions?: RequestedPermissionEnum;
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<models.Message>;
     /**
      * Share an existing message with other data owners, allowing them to access the non-encrypted data of the message and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param message the message to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
+     * shared Message is the owning entity id. Mandatory.
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * message does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this message refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * - shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
-     * shared Message is the owning entity id.
-     * @return a promise which will contain the updated message
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
-    shareWithMany(message: models.Message, delegates?: {
+    shareWithMany(message: models.Message, delegates: {
         [delegateId: string]: {
             shareSecretIds: string[];
+            requestedPermissions?: RequestedPermissionEnum;
             shareEncryptionKey?: ShareMetadataBehaviour;
             sharePatientId?: ShareMetadataBehaviour;
         };
     }): Promise<models.Message>;
+    /**
+     * Share an existing message with other data owners, allowing them to access the non-encrypted data of the message and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param message the message to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
+     * shared Message is the owning entity id. Mandatory.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * message does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this message refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(message: models.Message, delegates: {
+        [delegateId: string]: {
+            shareSecretIds: string[];
+            requestedPermissions?: RequestedPermissionEnum;
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<ShareResult<models.Message>>;
     /**
      * @param message a message
      * @return the secret ids of the message, retrieved from the encrypted metadata. The result may be used to find entities where the message is
@@ -88,7 +126,7 @@ export declare class IccMessageXApi extends IccMessageApi implements EncryptedEn
     decryptSecretIdsOf(message: models.Message): Promise<string[]>;
     getDataOwnersWithAccessTo(entity: models.Message): Promise<{
         permissionsByDataOwnerId: {
-            [p: string]: 'WRITE';
+            [p: string]: AccessLevelEnum;
         };
         hasUnknownAnonymousDataOwners: boolean;
     }>;

package/icc-x-api/icc-message-x-api.js

@@ -13,7 +13,12 @@ exports.IccMessageXApi = void 0;
 const icc_api_1 = require("../icc-api");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
 const models = require("../icc-api/model/models");
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
 class IccMessageXApi extends icc_api_1.IccMessageApi {
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Message'));
+    }
     constructor(host, headers, crypto, dataOwnerApi, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
         ? window.fetch
         : typeof self !== 'undefined'
@@ -21,6 +26,7 @@ class IccMessageXApi extends icc_api_1.IccMessageApi {
             : fetch) {
         super(host, headers, authenticationProvider, fetchImpl);
         this.crypto = crypto;
+        this.dataOwnerApi = dataOwnerApi;
         this.crypto = crypto;
         this.dataOwnerApi = dataOwnerApi;
     }
@@ -37,9 +43,8 @@ class IccMessageXApi extends icc_api_1.IccMessageApi {
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
-     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
+     * auto-delegations, in such case the access level specified here will be used.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the message. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of message.
      */
@@ -52,16 +57,14 @@ class IccMessageXApi extends icc_api_1.IccMessageApi {
             const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
             if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
                 throw new Error('Can only initialise entities as current data owner.');
-            const sfk = patient ? (_h = options === null || options === void 0 ? void 0 : options.preferredSfk) !== null && _h !== void 0 ? _h : (yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient)) : undefined;
+            const sfk = patient
+                ? (_h = options.preferredSfk) !== null && _h !== void 0 ? _h : (yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))
+                : undefined;
             if (patient && !sfk)
                 throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`);
-            const extraDelegations = [
-                ...Object.keys((_j = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _j !== void 0 ? _j : {}),
-                ...((_l = (_k = user.autoDelegations) === null || _k === void 0 ? void 0 : _k.all) !== null && _l !== void 0 ? _l : []),
-                ...((_o = (_m = user.autoDelegations) === null || _m === void 0 ? void 0 : _m.medicalInformation) !== null && _o !== void 0 ? _o : []),
-            ];
-            return new models.Message(yield this.crypto.entities
-                .entityWithInitialisedEncryptedMetadata(message, patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, extraDelegations)
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries([...((_k = (_j = user.autoDelegations) === null || _j === void 0 ? void 0 : _j.all) !== null && _k !== void 0 ? _k : []), ...((_m = (_l = user.autoDelegations) === null || _l === void 0 ? void 0 : _l.medicalInformation) !== null && _m !== void 0 ? _m : [])].map((d) => [d, AccessLevelEnum.WRITE]))), ((_o = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _o !== void 0 ? _o : {}));
+            return new models.Message(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(message, 'Message', patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, true, extraDelegations)
                 .then((x) => x.updatedEntity));
         });
     }
@@ -72,12 +75,20 @@ class IccMessageXApi extends icc_api_1.IccMessageApi {
      */
     decryptPatientIdOf(message) {
         return __awaiter(this, void 0, void 0, function* () {
-            return this.crypto.entities.owningEntityIdsOf(message, undefined);
+            return this.crypto.xapi.owningEntityIdsOf({ entity: message, type: 'Message' }, undefined);
+        });
+    }
+    /**
+     * @return if the logged data owner has write access to the content of the given message
+     */
+    hasWriteAccess(message) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: message, type: 'Message' });
         });
     }
     /**
      * Share an existing message with other data owners, allowing them to access the non-encrypted data of the message and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the message.
      * @param message the message to share.
      * @param shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
@@ -88,42 +99,64 @@ class IccMessageXApi extends icc_api_1.IccMessageApi {
      * message does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this message refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated message
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId, message, shareSecretIds, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
-            return this.shareWithMany(message, { [delegateId]: Object.assign({ shareSecretIds }, options) });
+            return this.shareWithMany(message, { [delegateId]: Object.assign(Object.assign({}, options), { shareSecretIds }) });
         });
     }
     /**
      * Share an existing message with other data owners, allowing them to access the non-encrypted data of the message and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param message the message to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
+     * shared Message is the owning entity id. Mandatory.
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * message does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this message refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
+     */
+    shareWithMany(message, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (yield this.tryShareWithMany(message, delegates)).updatedEntityOrThrow;
+        });
+    }
+    /**
+     * Share an existing message with other data owners, allowing them to access the non-encrypted data of the message and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param message the message to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareSecretIds the secret ids of the Message that the delegate will be given access to. Allows the delegate to search for data where the
-     * shared Message is the owning entity id.
-     * @return a promise which will contain the updated message
+     * shared Message is the owning entity id. Mandatory.
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * message does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this message refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
      */
-    shareWithMany(message, delegates = {}) {
+    tryShareWithMany(message, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(message, false, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(message, 'Message');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyMessage(entityWithEncryptionKey) : message;
+            return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'Message' }, false, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
                 delegateId,
                 {
-                    shareSecretIds: options.shareSecretIds,
-                    shareEncryptionKey: options.shareEncryptionKey,
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
                     shareOwningEntityIds: options.sharePatientId,
+                    shareSecretIds: options.shareSecretIds,
                 },
-            ])));
-            if (!!extended) {
-                return yield this.modifyMessage(extended);
-            }
-            else
-                return message;
+            ])), (x) => this.bulkShareMessages(x));
         });
     }
     /**
@@ -132,17 +165,13 @@ class IccMessageXApi extends icc_api_1.IccMessageApi {
      * the 'owning entity', or in the {@link shareWith} method in order to share it with other data owners.
      */
     decryptSecretIdsOf(message) {
-        return this.crypto.entities.secretIdsOf(message, undefined);
+        return this.crypto.xapi.secretIdsOf({ entity: message, type: 'Message' }, undefined);
     }
     getDataOwnersWithAccessTo(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
-        });
+        return this.crypto.xapi.getDataOwnersWithAccessTo({ entity, type: 'Message' });
     }
     getEncryptionKeysOf(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.encryptionKeysOf(entity);
-        });
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Message' }, undefined);
     }
 }
 exports.IccMessageXApi = IccMessageXApi;