@icure/api 7.1.16 → 8.0.0-RC.2

package/icc-x-api/icc-accesslog-x-api.js

@@ -14,14 +14,20 @@ const icc_api_1 = require("../icc-api");
 const models_1 = require("../icc-api/model/models");
 const _ = require("lodash");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
 const utils_1 = require("./utils");
 class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
-    constructor(host, headers, crypto, dataOwnerApi, cryptedKeys = ['detail', 'objectId'], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'AccessLog'));
+    }
+    constructor(host, headers, crypto, dataOwnerApi, autofillAuthor, cryptedKeys = ['detail', 'objectId'], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
         ? window.fetch
         : typeof self !== 'undefined'
             ? self.fetch
             : fetch) {
         super(host, headers, authenticationProvider, fetchImpl);
+        this.autofillAuthor = autofillAuthor;
         this.crypto = crypto;
         this.dataOwnerApi = dataOwnerApi;
         this.encryptedFields = (0, utils_1.parseEncryptedFields)(cryptedKeys, 'AccessLog.');
@@ -35,8 +41,7 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of access log.
@@ -45,20 +50,16 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
         var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s;
         return __awaiter(this, void 0, void 0, function* () {
             const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user);
-            const accessLog = Object.assign(Object.assign({}, (h !== null && h !== void 0 ? h : {})), { _type: 'org.taktik.icure.entities.AccessLog', id: (_a = h === null || h === void 0 ? void 0 : h.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = h === null || h === void 0 ? void 0 : h.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = h === null || h === void 0 ? void 0 : h.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), date: (_d = h === null || h === void 0 ? void 0 : h.date) !== null && _d !== void 0 ? _d : new Date().getTime(), responsible: (_e = h === null || h === void 0 ? void 0 : h.responsible) !== null && _e !== void 0 ? _e : dataOwnerId, author: (_f = h === null || h === void 0 ? void 0 : h.author) !== null && _f !== void 0 ? _f : user.id, codes: (_g = h === null || h === void 0 ? void 0 : h.codes) !== null && _g !== void 0 ? _g : [], tags: (_h = h === null || h === void 0 ? void 0 : h.tags) !== null && _h !== void 0 ? _h : [], user: (_j = h === null || h === void 0 ? void 0 : h.user) !== null && _j !== void 0 ? _j : user.id, patientId: (_k = h === null || h === void 0 ? void 0 : h.patientId) !== null && _k !== void 0 ? _k : patient.id, accessType: (_l = h === null || h === void 0 ? void 0 : h.accessType) !== null && _l !== void 0 ? _l : 'USER_ACCESS' });
+            const accessLog = Object.assign(Object.assign({}, (h !== null && h !== void 0 ? h : {})), { _type: 'org.taktik.icure.entities.AccessLog', id: (_a = h === null || h === void 0 ? void 0 : h.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = h === null || h === void 0 ? void 0 : h.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = h === null || h === void 0 ? void 0 : h.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), date: (_d = h === null || h === void 0 ? void 0 : h.date) !== null && _d !== void 0 ? _d : new Date().getTime(), responsible: (_e = h === null || h === void 0 ? void 0 : h.responsible) !== null && _e !== void 0 ? _e : (this.autofillAuthor ? dataOwnerId : undefined), author: (_f = h === null || h === void 0 ? void 0 : h.author) !== null && _f !== void 0 ? _f : (this.autofillAuthor ? user.id : undefined), codes: (_g = h === null || h === void 0 ? void 0 : h.codes) !== null && _g !== void 0 ? _g : [], tags: (_h = h === null || h === void 0 ? void 0 : h.tags) !== null && _h !== void 0 ? _h : [], user: (_j = h === null || h === void 0 ? void 0 : h.user) !== null && _j !== void 0 ? _j : user.id, patientId: (_k = h === null || h === void 0 ? void 0 : h.patientId) !== null && _k !== void 0 ? _k : patient.id, accessType: (_l = h === null || h === void 0 ? void 0 : h.accessType) !== null && _l !== void 0 ? _l : 'USER_ACCESS' });
             const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
             if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
                 throw new Error('Can only initialise entities as current data owner.');
-            const sfk = (_m = options.preferredSfk) !== null && _m !== void 0 ? _m : (yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient));
+            const sfk = (_m = options.preferredSfk) !== null && _m !== void 0 ? _m : (yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }));
             if (!sfk)
                 throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`);
-            const extraDelegations = [
-                ...Object.keys((_o = options.additionalDelegates) !== null && _o !== void 0 ? _o : {}),
-                ...((_q = (_p = user.autoDelegations) === null || _p === void 0 ? void 0 : _p.all) !== null && _q !== void 0 ? _q : []),
-                ...((_s = (_r = user.autoDelegations) === null || _r === void 0 ? void 0 : _r.administrativeData) !== null && _s !== void 0 ? _s : []),
-            ];
-            return new models_1.AccessLog(yield this.crypto.entities
-                .entityWithInitialisedEncryptedMetadata(accessLog, patient.id, sfk, true, extraDelegations)
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries([...((_p = (_o = user.autoDelegations) === null || _o === void 0 ? void 0 : _o.all) !== null && _p !== void 0 ? _p : []), ...((_r = (_q = user.autoDelegations) === null || _q === void 0 ? void 0 : _q.administrativeData) !== null && _r !== void 0 ? _r : [])].map((x) => [x, AccessLevelEnum.WRITE]))), ((_s = options.additionalDelegates) !== null && _s !== void 0 ? _s : {}));
+            return new models_1.AccessLog(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(accessLog, 'AccessLog', patient.id, sfk, true, false, extraDelegations)
                 .then((x) => x.updatedEntity));
         });
     }
@@ -82,12 +83,12 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
      */
     findBy(hcpartyId, patient, usingPost = false) {
         return __awaiter(this, void 0, void 0, function* () {
-            const extractedKeys = yield this.crypto.entities.secretIdsOf(patient, hcpartyId);
+            const extractedKeys = yield this.crypto.xapi.secretIdsOf({ entity: patient, type: 'Patient' }, hcpartyId);
             const topmostParentId = (yield this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0];
             return extractedKeys && extractedKeys.length > 0
                 ? usingPost
-                    ? this.findByHCPartyPatientSecretFKeysArray(topmostParentId, _.uniq(extractedKeys))
-                    : this.findByHCPartyPatientSecretFKeys(topmostParentId, _.uniq(extractedKeys).join(','))
+                    ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId, _.uniq(extractedKeys))
+                    : this.findByHCPartyPatientSecretFKeys(hcpartyId, _.uniq(extractedKeys).join(','))
                 : Promise.resolve([]);
         });
     }
@@ -104,13 +105,14 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
         return super.findAccessLogsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((accesslogs) => this.decrypt(hcPartyId, accesslogs));
     }
     decrypt(hcpId, accessLogs) {
-        return Promise.all(accessLogs.map((x) => this.crypto.entities.decryptEntity(x, hcpId, (json) => new models_1.AccessLog(json)).then(({ entity }) => entity)));
+        return Promise.all(accessLogs.map((x) => this.crypto.xapi.decryptEntity(x, 'AccessLog', (json) => new models_1.AccessLog(json)).then(({ entity }) => entity)));
     }
     encrypt(user, accessLogs) {
-        return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), accessLogs);
+        const owner = this.dataOwnerApi.getDataOwnerIdOf(user);
+        return this.encryptAs(owner, accessLogs);
     }
     encryptAs(dataOwner, accessLogs) {
-        return Promise.all(accessLogs.map((x) => this.crypto.entities.tryEncryptEntity(x, dataOwner, this.encryptedFields, false, true, (json) => new models_1.AccessLog(json))));
+        return Promise.all(accessLogs.map((x) => this.crypto.xapi.tryEncryptEntity(x, 'AccessLog', this.encryptedFields, false, false, (json) => new models_1.AccessLog(json))));
     }
     createAccessLog(body) {
         throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption');
@@ -148,11 +150,16 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
             return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user), _.cloneDeep(body)) : null;
         });
     }
-    modifyAs(dataOwner, accessLog) {
-        return this.encryptAs(dataOwner, [_.cloneDeep(accessLog)])
-            .then((als) => super.modifyAccessLog(als[0]))
-            .then((accessLog) => this.decrypt(dataOwner, [accessLog]))
-            .then((als) => als[0]);
+    modifyAs(owner, body) {
+        const _super = Object.create(null, {
+            modifyAccessLog: { get: () => super.modifyAccessLog }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.encryptAs(owner, [_.cloneDeep(body)])
+                .then((als) => _super.modifyAccessLog.call(this, als[0]))
+                .then((accessLog) => this.decrypt(owner, [accessLog]))
+                .then((als) => als[0]);
+        });
     }
     findByUserAfterDate(userId, accessType, startDate, startKey, startDocumentId, limit, descending) {
         throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption');
@@ -174,7 +181,7 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
                 const currentLimit = limit - foundAccessLogs.length;
                 const { rows: logs, nextKeyPair: newNextKeyPair } = (yield _super.findByUserAfterDate.call(this, userId, 'USER_ACCESS', startDate, nextKeyPair && JSON.stringify(nextKeyPair.startKey), nextKeyPair && nextKeyPair.startKeyDocId, numberRequestedAccessLogs, true));
                 const logsWithPatientId = yield this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user), logs).then((decryptedLogs) => Promise.all(_.map(decryptedLogs, (decryptedLog) => {
-                    return this.crypto.entities.owningEntityIdsOf(decryptedLog, user.healthcarePartyId).then((keys) => (Object.assign(Object.assign({}, decryptedLog), { patientId: _.head(keys) })));
+                    return this.crypto.xapi.owningEntityIdsOf({ entity: decryptedLog, type: 'AccessLog' }, user.healthcarePartyId).then((keys) => (Object.assign(Object.assign({}, decryptedLog), { patientId: _.head(keys) })));
                 })));
                 const uniqueLogs = _.chain(logsWithPatientId)
                     .reject((log) => _.some(foundAccessLogs, ({ patientId }) => patientId === log.patientId))
@@ -202,12 +209,20 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
      */
     decryptPatientIdOf(accessLog) {
         return __awaiter(this, void 0, void 0, function* () {
-            return this.crypto.entities.owningEntityIdsOf(accessLog, undefined);
+            return this.crypto.xapi.owningEntityIdsOf({ entity: accessLog, type: 'AccessLog' }, undefined);
+        });
+    }
+    /**
+     * @return if the logged data owner has write access to the content of the given access log
+     */
+    hasWriteAccess(accessLog) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: accessLog, type: 'AccessLog' });
         });
     }
     /**
      * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the
-     * encrypted content.
+     * encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the access log.
      * @param accessLog the access log to share.
      * @param options optional parameters to customize the sharing behaviour:
@@ -216,7 +231,8 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
      * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would
      * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other
      * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated entity.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId, accessLog, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -225,42 +241,63 @@ class IccAccesslogXApi extends icc_api_1.IccAccesslogApi {
     }
     /**
      * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the
-     * encrypted content.
+     * encrypted content, with read-only or read-write permissions.
      * @param accessLog the access log to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
      * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would
      * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other
      * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated entity.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(accessLog, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (yield this.tryShareWithMany(accessLog, delegates)).updatedEntityOrThrow;
+        });
+    }
+    /**
+     * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the
+     * encrypted content, with read-only or read-write permissions.
+     * @param accessLog the access log to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would
+     * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other
+     * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(accessLog, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
             const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
-            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(accessLog, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(accessLog, 'AccessLog');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyAs(self, entityWithEncryptionKey) : accessLog;
+            return this.crypto.xapi
+                .simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'AccessLog' }, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
                 delegateId,
                 {
-                    shareEncryptionKey: options.shareEncryptionKey,
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
                     shareOwningEntityIds: options.sharePatientId,
+                    shareSecretIds: undefined,
                 },
-            ])));
-            if (!!extended) {
-                return yield this.modifyAs(self, extended);
-            }
-            else
-                return accessLog;
+            ])), (x) => this.bulkShareAccessLogs(x))
+                .then((r) => r.mapSuccessAsync((e) => this.decrypt(self, [e]).then((es) => es[0])));
         });
     }
     getDataOwnersWithAccessTo(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
-        });
+        return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'AccessLog' });
     }
     getEncryptionKeysOf(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.encryptionKeysOf(entity);
-        });
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'AccessLog' }, undefined);
+    }
+    createDelegationDeAnonymizationMetadata(entity, delegates) {
+        return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'AccessLog' }, delegates);
     }
 }
 exports.IccAccesslogXApi = IccAccesslogXApi;

package/icc-x-api/icc-accesslog-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-accesslog-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-accesslog-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA4C;AAG5C,oDAA2E;AAC3E,4BAA2B;AAE3B,0EAAgG;AAGhG,mCAAuE;AAMvE,MAAa,gBAAiB,SAAQ,yBAAe;IAKnD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,WAAW,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,EACpC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,CAAM,EACN,UAGI,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAE5D,MAAM,SAAS,mCACV,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,qCAAqC,EAC5C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EACrC,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,WAAW,EAC1C,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,EAC5B,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,EACnB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,IAAI,CAAC,EAAE,EACxB,SAAS,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,mCAAI,OAAO,CAAC,EAAE,EACrC,UAAU,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,mCAAI,aAAa,GAC3C,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7G,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,kBAAS,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC1F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEG,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,eAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACpF,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,eAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3F,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAEK,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;;;;;YAC1E,MAAM,UAAU,GAAG,MAAM,OAAM,yCAAyC,YAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAChG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAClD,CAAC;KAAA;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK,CAAC,kDAAkD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;IACnJ,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,UAAmC;QACxD,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAChI,CAAA;IACH,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,UAAmC;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,UAAmC;QACtE,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7I,CAAA;IACH,CAAC;IAED,eAAe,CAAC,IAAuB;QACrC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,uBAAuB,CAAC,IAAiB,EAAE,IAAuB;QAChE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;iBACzF,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACvB,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,oBAAoB,CAAC,IAAiB,EAAE,WAAmB;QACzD,OAAO,KAAK;aACT,YAAY,CAAC,WAAW,CAAC;aACzB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;aACzF,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,cAAc,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAiB,EAAE,eAAwB,EAAE,KAAc;QAC9G,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,sBAAsB,CACpB,IAAiB,EACjB,SAAkB,EAClB,OAAgB,EAChB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,OAAO,KAAK;aACT,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC;aAChF,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,SAAS,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9H,CAAA;IACL,CAAC;IAED,eAAe,CAAC,IAAuB;QACrC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAEK,uBAAuB,CAAC,IAAiB,EAAE,IAAuB;;YACtE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClG,CAAC;KAAA;IAEO,QAAQ,CAAC,SAAiB,EAAE,SAA2B;QAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;aACvD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;aACzD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,mBAAmB,CACjB,MAAc,EACd,UAAmB,EACnB,SAAkB,EAClB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,2BAA2B,CACzB,IAAiB,EACjB,MAAc,EACd,UAAmB,EACnB,SAAkB,EAClB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,OAAO,KAAK;aACT,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC;aAChG,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,SAAS,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9H,CAAA;IACL,CAAC;IAEK,sCAAsC,CAAC,IAAiB,EAAE,MAAc,EAAE,KAAK,GAAG,GAAG,EAAE,SAAkB;;;;;YAC7G,IAAI,eAAe,GAA6B,EAAE,EAChD,WAAW,GAAwD,SAAS,CAAA;YAC9E,MAAM,yBAAyB,GAAG,GAAG,CAAA;YACrC,MAAM,oBAAoB,GAAG,CAAC,CAAA;YAE9B,KAAK,IAAI,gBAAgB,GAAG,CAAC,EAAE,eAAe,CAAC,MAAM,GAAG,KAAK,IAAI,gBAAgB,GAAG,oBAAoB,EAAE,gBAAgB,EAAE,EAAE;gBAC5H,MAAM,YAAY,GAAG,KAAK,GAAG,eAAe,CAAC,MAAM,CAAA;gBACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,GAAkC,CAAC,MAAM,OAAM,mBAAmB,YACjH,MAAM,EACN,aAAa,EACb,SAAS,EACT,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAS,CAAC,EACpD,WAAW,IAAI,WAAW,CAAC,aAAc,EACzC,yBAAyB,EACzB,IAAI,CACL,CAAkC,CAAA;gBACnC,MAAM,iBAAiB,GAA6B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,IAAmB,CAAC,CAAC,IAAI,CACzI,CAAC,aAAa,EAAE,EAAE,CAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE,EAAE;oBACpC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,iBAA2B,CAAC,CAAC,IAAI,CAChG,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,gCACI,YAAY,KACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GACG,CAAA,CAC/B,CAAA;gBACH,CAAC,CAAC,CACH,CACJ,CAAA;gBAED,MAAM,UAAU,GAA6B,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;qBACpE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;qBACxF,MAAM,CAAC,CAAC,GAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;qBACtD,KAAK,EAAE;qBACP,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;gBAEzB,eAAe,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,UAAU,CAAC,CAAA;gBAErD,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,yBAAyB,EAAE;oBACnD,MAAK;iBACN;qBAAM,IAAI,cAAc,EAAE;oBACzB,WAAW,GAAG,cAAc,CAAA;iBAC7B;qBAAM;oBACL,MAAK;iBACN;aACF;YAED,OAAO,eAAe,CAAA;QACxB,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,SAAoB;;YAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACrE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,SAAoB,EACpB,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,SAAoB,EACpB,SAKC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CACjF,SAAS,EACT,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,oBAAoB,EAAE,OAAO,CAAC,cAAc;iBAC7C;aACF,CAAC,CACH,CACF,CAAA;YACD,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;aAC3C;;gBAAM,OAAO,SAAS,CAAA;QACzB,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAAwB;;YAItD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAwB;;YAChD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AAvWD,4CAuWC","sourcesContent":["import { IccAccesslogApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as models from '../icc-api/model/models'\nimport { AccessLog, PaginatedListAccessLog } from '../icc-api/model/models'\nimport * as _ from 'lodash'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { EncryptedFieldsManifest, parseEncryptedFields } from './utils'\n\nexport interface AccessLogWithPatientId extends AccessLog {\n  patientId: string\n}\n\nexport class IccAccesslogXApi extends IccAccesslogApi implements EncryptedEntityXApi<models.AccessLog> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    cryptedKeys = ['detail', 'objectId'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedFields = parseEncryptedFields(cryptedKeys, 'AccessLog.')\n  }\n\n  /**\n   * Creates a new instance of access log with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this access log refers to.\n   * @param h initialised data for the access log. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of access log.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    h: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n\n    const accessLog = {\n      ...(h ?? {}),\n      _type: 'org.taktik.icure.entities.AccessLog',\n      id: h?.id ?? this.crypto.primitives.randomUuid(),\n      created: h?.created ?? new Date().getTime(),\n      modified: h?.modified ?? new Date().getTime(),\n      date: h?.date ?? new Date().getTime(),\n      responsible: h?.responsible ?? dataOwnerId,\n      author: h?.author ?? user.id,\n      codes: h?.codes ?? [],\n      tags: h?.tags ?? [],\n      user: h?.user ?? user.id,\n      patientId: h?.patientId ?? patient.id,\n      accessType: h?.accessType ?? 'USER_ACCESS',\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.administrativeData ?? []),\n    ]\n    return new AccessLog(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(accessLog, patient.id, sfk, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false): Promise<models.AccessLog[]> {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? usingPost\n        ? this.findByHCPartyPatientSecretFKeysArray(topmostParentId!, _.uniq(extractedKeys))\n        : this.findByHCPartyPatientSecretFKeys(topmostParentId!, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  async findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<AccessLog[]> {\n    const accessLogs = await super.findAccessLogsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys)\n    return await this.decrypt(hcPartyId, accessLogs)\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<AccessLog> | any> {\n    return super.findAccessLogsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((accesslogs) => this.decrypt(hcPartyId, accesslogs))\n  }\n\n  decrypt(hcpId: string, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return Promise.all(\n      accessLogs.map((x) => this.crypto.entities.decryptEntity(x, hcpId, (json) => new AccessLog(json)).then(({ entity }) => entity))\n    )\n  }\n\n  encrypt(user: models.User, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLogs)\n  }\n\n  private encryptAs(dataOwner: string, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return Promise.all(\n      accessLogs.map((x) => this.crypto.entities.tryEncryptEntity(x, dataOwner, this.encryptedFields, false, true, (json) => new AccessLog(json)))\n    )\n  }\n\n  createAccessLog(body?: models.AccessLog): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  createAccessLogWithUser(user: models.User, body?: models.AccessLog): Promise<models.AccessLog | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((als) => super.createAccessLog(als[0]))\n          .then((accessLog) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [accessLog]))\n          .then((als) => als[0])\n      : Promise.resolve()\n  }\n\n  getAccessLog(accessLogId: string): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  getAccessLogWithUser(user: models.User, accessLogId: string): Promise<models.AccessLog | any> {\n    return super\n      .getAccessLog(accessLogId)\n      .then((accessLog) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [accessLog]))\n      .then((als) => als[0])\n  }\n\n  listAccessLogs(fromEpoch?: number, toEpoch?: number, startKey?: number, startDocumentId?: string, limit?: number): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  listAccessLogsWithUser(\n    user: models.User,\n    fromEpoch?: number,\n    toEpoch?: number,\n    startKey?: number,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): Promise<PaginatedListAccessLog> {\n    return super\n      .listAccessLogs(fromEpoch, toEpoch, startKey, startDocumentId, limit, descending)\n      .then((accessLog) =>\n        this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLog.rows!).then((dr) => Object.assign(accessLog, { rows: dr }))\n      )\n  }\n\n  modifyAccessLog(body?: models.AccessLog): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  async modifyAccessLogWithUser(user: models.User, body?: models.AccessLog): Promise<models.AccessLog | null> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, _.cloneDeep(body)) : null\n  }\n\n  private modifyAs(dataOwner: string, accessLog: models.AccessLog): Promise<models.AccessLog> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(accessLog)])\n      .then((als) => super.modifyAccessLog(als[0]))\n      .then((accessLog) => this.decrypt(dataOwner, [accessLog]))\n      .then((als) => als[0])\n  }\n\n  findByUserAfterDate(\n    userId: string,\n    accessType?: string,\n    startDate?: number,\n    startKey?: string,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  findByUserAfterDateWithUser(\n    user: models.User,\n    userId: string,\n    accessType?: string,\n    startDate?: number,\n    startKey?: string,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): Promise<models.AccessLog | any> {\n    return super\n      .findByUserAfterDate(userId, accessType, startDate, startKey, startDocumentId, limit, descending)\n      .then((accessLog) =>\n        this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLog.rows!).then((dr) => Object.assign(accessLog, { rows: dr }))\n      )\n  }\n\n  async findLatestAccessLogsOfPatientsWithUser(user: models.User, userId: string, limit = 100, startDate?: number): Promise<models.AccessLog[]> {\n    let foundAccessLogs: AccessLogWithPatientId[] = [],\n      nextKeyPair: models.PaginatedDocumentKeyIdPairObject | undefined = undefined\n    const numberRequestedAccessLogs = 100\n    const MAX_WHILE_ITERATIONS = 5\n\n    for (let currentIteration = 0; foundAccessLogs.length < limit && currentIteration < MAX_WHILE_ITERATIONS; currentIteration++) {\n      const currentLimit = limit - foundAccessLogs.length\n      const { rows: logs, nextKeyPair: newNextKeyPair }: models.PaginatedListAccessLog = (await super.findByUserAfterDate(\n        userId,\n        'USER_ACCESS',\n        startDate,\n        nextKeyPair && JSON.stringify(nextKeyPair.startKey!),\n        nextKeyPair && nextKeyPair.startKeyDocId!,\n        numberRequestedAccessLogs,\n        true\n      )) as models.PaginatedListAccessLog\n      const logsWithPatientId: AccessLogWithPatientId[] = await this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, logs as AccessLog[]).then(\n        (decryptedLogs) =>\n          Promise.all(\n            _.map(decryptedLogs, (decryptedLog) => {\n              return this.crypto.entities.owningEntityIdsOf(decryptedLog, user.healthcarePartyId as string).then(\n                (keys) =>\n                  ({\n                    ...decryptedLog,\n                    patientId: _.head(keys),\n                  } as AccessLogWithPatientId)\n              )\n            })\n          )\n      )\n\n      const uniqueLogs: AccessLogWithPatientId[] = _.chain(logsWithPatientId)\n        .reject((log) => _.some(foundAccessLogs, ({ patientId }) => patientId === log.patientId))\n        .uniqBy((log: AccessLogWithPatientId) => log.patientId)\n        .value()\n        .slice(0, currentLimit)\n\n      foundAccessLogs = [...foundAccessLogs, ...uniqueLogs]\n\n      if ((logs || []).length < numberRequestedAccessLogs) {\n        break\n      } else if (newNextKeyPair) {\n        nextKeyPair = newNextKeyPair\n      } else {\n        break\n      }\n    }\n\n    return foundAccessLogs\n  }\n\n  /**\n   * @param accessLog an access log\n   * @return the id of the patient that the access log refers to, retrieved from the encrypted metadata (not from the decrypted entity body). Normally\n   * there should only be one element in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(accessLog: AccessLog): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(accessLog, undefined)\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the access log.\n   * @param accessLog the access log to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWith(\n    delegateId: string,\n    accessLog: AccessLog,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<AccessLog> {\n    return this.shareWithMany(accessLog, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content.\n   * @param accessLog the access log to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWithMany(\n    accessLog: AccessLog,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<AccessLog> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n      accessLog,\n      true,\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            shareEncryptionKey: options.shareEncryptionKey,\n            shareOwningEntityIds: options.sharePatientId,\n          },\n        ])\n      )\n    )\n    if (!!extended) {\n      return await this.modifyAs(self, extended)\n    } else return accessLog\n  }\n\n  async getDataOwnersWithAccessTo(entity: models.AccessLog): Promise<{\n    permissionsByDataOwnerId: { [dataOwnerId: string]: 'WRITE' }\n    hasUnknownAnonymousDataOwners: boolean\n  }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.AccessLog): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}
+{"version":3,"file":"icc-accesslog-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-accesslog-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA4C;AAG5C,oDAA2E;AAC3E,4BAA2B;AAE3B,0EAAgG;AAChG,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAMzD,mCAAuE;AAOvE,MAAa,gBAAiB,SAAQ,yBAAe;IAKnD,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAA;IACpH,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EACb,cAAuB,EACxC,WAAW,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,EACpC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QATtC,mBAAc,GAAd,cAAc,CAAS;QAUxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,CAAM,EACN,UAGI,EAAE;;;YAEN,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAE5D,MAAM,SAAS,mCACV,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,qCAAqC,EAC5C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EACrC,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAC9E,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,EACnB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,IAAI,CAAC,EAAE,EACxB,SAAS,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,mCAAI,OAAO,CAAC,EAAE,EACrC,UAAU,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,mCAAI,aAAa,GAC3C,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YAC1I,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,mCACjB,MAAM,CAAC,WAAW,CACnB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,GACE,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC,CACvC,CAAA;YACD,OAAO,IAAI,kBAAS,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBAC9G,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,qCAAqC;IACrC;;;;;;;;;;;;;;;;OAgBG;IAEG,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAA;YACzG,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAU,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC9E,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAU,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrF,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAEK,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;;;;;YAC1E,MAAM,UAAU,GAAG,MAAM,OAAM,yCAAyC,YAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAChG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAClD,CAAC;KAAA;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK,CAAC,kDAAkD,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;IACnJ,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,UAAmC;QACxD,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAClI,CAAA;IACH,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,UAAmC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACtD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC1C,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,UAAmC;QACtE,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5I,CAAA;IACH,CAAC;IAED,eAAe,CAAC,IAAuB;QACrC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,uBAAuB,CAAC,IAAiB,EAAE,IAAuB;QAChE,OAAO,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;iBACzF,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACvB,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,oBAAoB,CAAC,IAAiB,EAAE,WAAmB;QACzD,OAAO,KAAK;aACT,YAAY,CAAC,WAAW,CAAC;aACzB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;aACzF,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,cAAc,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAiB,EAAE,eAAwB,EAAE,KAAc;QAC9G,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,sBAAsB,CACpB,IAAiB,EACjB,SAAkB,EAClB,OAAgB,EAChB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,OAAO,KAAK;aACT,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC;aAChF,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,SAAS,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9H,CAAA;IACL,CAAC;IAED,eAAe,CAAC,IAAuB;QACrC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAEK,uBAAuB,CAAC,IAAiB,EAAE,IAAuB;;YACtE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClG,CAAC;KAAA;IAEa,QAAQ,CAAC,KAAa,EAAE,IAAsB;;;;;YAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iBAC9C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAM,eAAe,YAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;iBACrD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;KAAA;IAED,mBAAmB,CACjB,MAAc,EACd,UAAmB,EACnB,SAAkB,EAClB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;IAC7G,CAAC;IAED,2BAA2B,CACzB,IAAiB,EACjB,MAAc,EACd,UAAmB,EACnB,SAAkB,EAClB,QAAiB,EACjB,eAAwB,EACxB,KAAc,EACd,UAAoB;QAEpB,OAAO,KAAK;aACT,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC;aAChG,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,SAAS,CAAC,IAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9H,CAAA;IACL,CAAC;IAEK,sCAAsC,CAAC,IAAiB,EAAE,MAAc,EAAE,KAAK,GAAG,GAAG,EAAE,SAAkB;;;;;YAC7G,IAAI,eAAe,GAA6B,EAAE,EAChD,WAAW,GAAwD,SAAS,CAAA;YAC9E,MAAM,yBAAyB,GAAG,GAAG,CAAA;YACrC,MAAM,oBAAoB,GAAG,CAAC,CAAA;YAE9B,KAAK,IAAI,gBAAgB,GAAG,CAAC,EAAE,eAAe,CAAC,MAAM,GAAG,KAAK,IAAI,gBAAgB,GAAG,oBAAoB,EAAE,gBAAgB,EAAE,EAAE;gBAC5H,MAAM,YAAY,GAAG,KAAK,GAAG,eAAe,CAAC,MAAM,CAAA;gBACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,GAAkC,CAAC,MAAM,OAAM,mBAAmB,YACjH,MAAM,EACN,aAAa,EACb,SAAS,EACT,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAS,CAAC,EACpD,WAAW,IAAI,WAAW,CAAC,aAAc,EACzC,yBAAyB,EACzB,IAAI,CACL,CAAkC,CAAA;gBACnC,MAAM,iBAAiB,GAA6B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,IAAmB,CAAC,CAAC,IAAI,CACzI,CAAC,aAAa,EAAE,EAAE,CAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE,EAAE;oBACpC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,iBAA2B,CAAC,CAAC,IAAI,CAC3H,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,gCACI,YAAY,KACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GACG,CAAA,CAC/B,CAAA;gBACH,CAAC,CAAC,CACH,CACJ,CAAA;gBAED,MAAM,UAAU,GAA6B,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;qBACpE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;qBACxF,MAAM,CAAC,CAAC,GAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;qBACtD,KAAK,EAAE;qBACP,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;gBAEzB,eAAe,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,UAAU,CAAC,CAAA;gBAErD,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,yBAAyB,EAAE;oBACnD,MAAK;iBACN;qBAAM,IAAI,cAAc,EAAE;oBACzB,WAAW,GAAG,cAAc,CAAA;iBAC7B;qBAAM;oBACL,MAAK;iBACN;aACF;YAED,OAAO,eAAe,CAAA;QACxB,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,SAAoB;;YAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAA;QAChG,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,SAAoB;;YACvC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAClF,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,SAAS,CACb,UAAkB,EAClB,SAAoB,EACpB,UAII,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,aAAa,CACjB,SAAoB,EACpB,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACjF,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,SAAoB,EACpB,SAMC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAC9G,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9G,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,EAC5C,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CACnC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAAiB;QAEjB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IACxG,CAAC;IAED,mBAAmB,CAAC,MAAiB;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAA;IACpF,CAAC;IAED,uCAAuC,CAAC,MAAiB,EAAE,SAAmB;QAC5E,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAA;IAC3H,CAAC;CACF;AA3ZD,4CA2ZC","sourcesContent":["import { IccAccesslogApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as models from '../icc-api/model/models'\nimport { AccessLog, PaginatedListAccessLog } from '../icc-api/model/models'\nimport * as _ from 'lodash'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { ShareResult } from './utils/ShareResult'\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedFieldsManifest, parseEncryptedFields } from './utils'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport interface AccessLogWithPatientId extends AccessLog {\n  patientId: string\n}\n\nexport class IccAccesslogXApi extends IccAccesslogApi implements EncryptedEntityXApi<models.AccessLog> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'AccessLog'))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    private readonly autofillAuthor: boolean,\n    cryptedKeys = ['detail', 'objectId'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedFields = parseEncryptedFields(cryptedKeys, 'AccessLog.')\n  }\n\n  /**\n   * Creates a new instance of access log with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this access log refers to.\n   * @param h initialised data for the access log. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of access log.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    h: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      preferredSfk?: string\n    } = {}\n  ) {\n    const dataOwnerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n\n    const accessLog = {\n      ...(h ?? {}),\n      _type: 'org.taktik.icure.entities.AccessLog',\n      id: h?.id ?? this.crypto.primitives.randomUuid(),\n      created: h?.created ?? new Date().getTime(),\n      modified: h?.modified ?? new Date().getTime(),\n      date: h?.date ?? new Date().getTime(),\n      responsible: h?.responsible ?? (this.autofillAuthor ? dataOwnerId : undefined),\n      author: h?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: h?.codes ?? [],\n      tags: h?.tags ?? [],\n      user: h?.user ?? user.id,\n      patientId: h?.patientId ?? patient.id,\n      accessType: h?.accessType ?? 'USER_ACCESS',\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = {\n      ...Object.fromEntries(\n        [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.administrativeData ?? [])].map((x) => [x, AccessLevelEnum.WRITE])\n      ),\n      ...(options.additionalDelegates ?? {}),\n    }\n    return new AccessLog(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(accessLog, 'AccessLog', patient.id, sfk, true, false, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  // noinspection JSUnusedGlobalSymbols\n  /**\n   * 1. Check whether there is a delegation with 'hcpartyId' or not.\n   * 2. 'fetchHcParty[hcpartyId][1]': is encrypted AES exchange key by RSA public key of him.\n   * 3. Obtain the AES exchange key, by decrypting the previous step value with hcparty private key\n   *      3.1.  KeyPair should be fetch from cache (in jwk)\n   *      3.2.  if it doesn't exist in the cache, it has to be loaded from Browser Local store, and then import it to WebCrypto\n   * 4. Obtain the array of delegations which are delegated to his ID (hcpartyId) in this patient\n   * 5. Decrypt and collect all keys (secretForeignKeys) within delegations of previous step (with obtained AES key of step 4)\n   * 6. Do the REST call to get all helements with (allSecretForeignKeysDelimitedByComa, hcpartyId)\n   *\n   * After these painful steps, you have the helements of the patient.\n   *\n   * @param hcpartyId\n   * @param patient (Promise)\n   * @param keepObsoleteVersions\n   * @param usingPost\n   */\n\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false): Promise<models.AccessLog[]> {\n    const extractedKeys = await this.crypto.xapi.secretIdsOf({ entity: patient, type: 'Patient' }, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? usingPost\n        ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId!, _.uniq(extractedKeys))\n        : this.findByHCPartyPatientSecretFKeys(hcpartyId!, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  async findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<AccessLog[]> {\n    const accessLogs = await super.findAccessLogsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys)\n    return await this.decrypt(hcPartyId, accessLogs)\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<AccessLog> | any> {\n    return super.findAccessLogsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys).then((accesslogs) => this.decrypt(hcPartyId, accesslogs))\n  }\n\n  decrypt(hcpId: string, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return Promise.all(\n      accessLogs.map((x) => this.crypto.xapi.decryptEntity(x, 'AccessLog', (json) => new AccessLog(json)).then(({ entity }) => entity))\n    )\n  }\n\n  encrypt(user: models.User, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    const owner = this.dataOwnerApi.getDataOwnerIdOf(user)\n    return this.encryptAs(owner, accessLogs)\n  }\n\n  private encryptAs(dataOwner: string, accessLogs: Array<models.AccessLog>): Promise<Array<models.AccessLog>> {\n    return Promise.all(\n      accessLogs.map((x) => this.crypto.xapi.tryEncryptEntity(x, 'AccessLog', this.encryptedFields, false, false, (json) => new AccessLog(json)))\n    )\n  }\n\n  createAccessLog(body?: models.AccessLog): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  createAccessLogWithUser(user: models.User, body?: models.AccessLog): Promise<models.AccessLog | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((als) => super.createAccessLog(als[0]))\n          .then((accessLog) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [accessLog]))\n          .then((als) => als[0])\n      : Promise.resolve()\n  }\n\n  getAccessLog(accessLogId: string): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  getAccessLogWithUser(user: models.User, accessLogId: string): Promise<models.AccessLog | any> {\n    return super\n      .getAccessLog(accessLogId)\n      .then((accessLog) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [accessLog]))\n      .then((als) => als[0])\n  }\n\n  listAccessLogs(fromEpoch?: number, toEpoch?: number, startKey?: number, startDocumentId?: string, limit?: number): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  listAccessLogsWithUser(\n    user: models.User,\n    fromEpoch?: number,\n    toEpoch?: number,\n    startKey?: number,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): Promise<PaginatedListAccessLog> {\n    return super\n      .listAccessLogs(fromEpoch, toEpoch, startKey, startDocumentId, limit, descending)\n      .then((accessLog) =>\n        this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLog.rows!).then((dr) => Object.assign(accessLog, { rows: dr }))\n      )\n  }\n\n  modifyAccessLog(body?: models.AccessLog): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  async modifyAccessLogWithUser(user: models.User, body?: models.AccessLog): Promise<models.AccessLog | null> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, _.cloneDeep(body)) : null\n  }\n\n  private async modifyAs(owner: string, body: models.AccessLog): Promise<models.AccessLog> {\n    return this.encryptAs(owner, [_.cloneDeep(body)])\n      .then((als) => super.modifyAccessLog(als[0]))\n      .then((accessLog) => this.decrypt(owner, [accessLog]))\n      .then((als) => als[0])\n  }\n\n  findByUserAfterDate(\n    userId: string,\n    accessType?: string,\n    startDate?: number,\n    startKey?: string,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): never {\n    throw new Error('Cannot call a method that returns access logs without providing a user for de/encryption')\n  }\n\n  findByUserAfterDateWithUser(\n    user: models.User,\n    userId: string,\n    accessType?: string,\n    startDate?: number,\n    startKey?: string,\n    startDocumentId?: string,\n    limit?: number,\n    descending?: boolean\n  ): Promise<models.AccessLog | any> {\n    return super\n      .findByUserAfterDate(userId, accessType, startDate, startKey, startDocumentId, limit, descending)\n      .then((accessLog) =>\n        this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, accessLog.rows!).then((dr) => Object.assign(accessLog, { rows: dr }))\n      )\n  }\n\n  async findLatestAccessLogsOfPatientsWithUser(user: models.User, userId: string, limit = 100, startDate?: number): Promise<models.AccessLog[]> {\n    let foundAccessLogs: AccessLogWithPatientId[] = [],\n      nextKeyPair: models.PaginatedDocumentKeyIdPairObject | undefined = undefined\n    const numberRequestedAccessLogs = 100\n    const MAX_WHILE_ITERATIONS = 5\n\n    for (let currentIteration = 0; foundAccessLogs.length < limit && currentIteration < MAX_WHILE_ITERATIONS; currentIteration++) {\n      const currentLimit = limit - foundAccessLogs.length\n      const { rows: logs, nextKeyPair: newNextKeyPair }: models.PaginatedListAccessLog = (await super.findByUserAfterDate(\n        userId,\n        'USER_ACCESS',\n        startDate,\n        nextKeyPair && JSON.stringify(nextKeyPair.startKey!),\n        nextKeyPair && nextKeyPair.startKeyDocId!,\n        numberRequestedAccessLogs,\n        true\n      )) as models.PaginatedListAccessLog\n      const logsWithPatientId: AccessLogWithPatientId[] = await this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, logs as AccessLog[]).then(\n        (decryptedLogs) =>\n          Promise.all(\n            _.map(decryptedLogs, (decryptedLog) => {\n              return this.crypto.xapi.owningEntityIdsOf({ entity: decryptedLog, type: 'AccessLog' }, user.healthcarePartyId as string).then(\n                (keys) =>\n                  ({\n                    ...decryptedLog,\n                    patientId: _.head(keys),\n                  } as AccessLogWithPatientId)\n              )\n            })\n          )\n      )\n\n      const uniqueLogs: AccessLogWithPatientId[] = _.chain(logsWithPatientId)\n        .reject((log) => _.some(foundAccessLogs, ({ patientId }) => patientId === log.patientId))\n        .uniqBy((log: AccessLogWithPatientId) => log.patientId)\n        .value()\n        .slice(0, currentLimit)\n\n      foundAccessLogs = [...foundAccessLogs, ...uniqueLogs]\n\n      if ((logs || []).length < numberRequestedAccessLogs) {\n        break\n      } else if (newNextKeyPair) {\n        nextKeyPair = newNextKeyPair\n      } else {\n        break\n      }\n    }\n\n    return foundAccessLogs\n  }\n\n  /**\n   * @param accessLog an access log\n   * @return the id of the patient that the access log refers to, retrieved from the encrypted metadata (not from the decrypted entity body). Normally\n   * there should only be one element in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(accessLog: AccessLog): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: accessLog, type: 'AccessLog' }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given access log\n   */\n  async hasWriteAccess(accessLog: AccessLog): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: accessLog, type: 'AccessLog' })\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the access log.\n   * @param accessLog the access log to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    accessLog: AccessLog,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<AccessLog> {\n    return this.shareWithMany(accessLog, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content, with read-only or read-write permissions.\n   * @param accessLog the access log to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    accessLog: AccessLog,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<AccessLog> {\n    return (await this.tryShareWithMany(accessLog, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing access log with other data owners, allowing them to access the non-encrypted data of the access log and optionally also the\n   * encrypted content, with read-only or read-write permissions.\n   * @param accessLog the access log to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this access log refers to should be shared with the delegate. Normally this would\n   * be the same as objectId, but it is encrypted separately from it allowing you to give access to the patient id without giving access to the other\n   * encrypted data of the access log (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    accessLog: AccessLog,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<AccessLog>> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(accessLog, 'AccessLog')\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyAs(self, entityWithEncryptionKey) : accessLog\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity: updatedEntity, type: 'AccessLog' },\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: undefined,\n            },\n          ])\n        ),\n        (x) => this.bulkShareAccessLogs(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt(self, [e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: AccessLog\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'AccessLog' })\n  }\n\n  getEncryptionKeysOf(entity: AccessLog): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: 'AccessLog' }, undefined)\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: AccessLog, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'AccessLog' }, delegates)\n  }\n}\n"]}

package/icc-x-api/icc-calendar-item-x-api.d.ts

@@ -5,18 +5,26 @@ import { IccCalendarItemApi } from '../icc-api';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { ShareResult } from './utils/ShareResult';
+import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest';
+import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { SecureDelegation } from '../icc-api/model/SecureDelegation';
+import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
+import { XHR } from '../icc-api/api/XHR';
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
 export declare class IccCalendarItemXApi extends IccCalendarItemApi implements EncryptedEntityXApi<models.CalendarItem> {
+    private readonly autofillAuthor;
     i18n: any;
     crypto: IccCryptoXApi;
     dataOwnerApi: IccDataOwnerXApi;
     private readonly encryptedFields;
+    get headers(): Promise<Array<XHR.Header>>;
     constructor(host: string, headers: {
         [key: string]: string;
-    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, encryptedKeys?: Array<string>, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
-    newInstance(user: User, ci: CalendarItem, options?: {
+    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, autofillAuthor: boolean, encryptedKeys?: Array<string>, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
+    newInstance(user: User, ci: any | CalendarItem, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
     }): Promise<models.CalendarItem>;
     /**
@@ -28,15 +36,14 @@ export declare class IccCalendarItemXApi extends IccCalendarItemApi implements E
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
-     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a
+     * auto-delegations, in such case the access level specified here will be used.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classcalendar itemification. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of calendar item.
      */
     newInstancePatient(user: models.User, patient: models.Patient | null, ci: any, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
         preferredSfk?: string;
     }): Promise<models.CalendarItem>;
@@ -79,9 +86,13 @@ export declare class IccCalendarItemXApi extends IccCalendarItemApi implements E
      * in the returned array, but in case of entity merges there could be multiple values.
      */
     decryptPatientIdOf(calendarItem: models.CalendarItem): Promise<string[]>;
+    /**
+     * @return if the logged data owner has write access to the content of the given calendar item
+     */
+    hasWriteAccess(calendarItem: models.CalendarItem): Promise<boolean>;
     /**
      * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the calendar item.
      * @param calendarItem item the calendar item to share.
      * @param options optional parameters to customize the sharing behaviour:
@@ -90,33 +101,58 @@ export declare class IccCalendarItemXApi extends IccCalendarItemApi implements E
      * calendar item does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated entity.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
      */
     shareWith(delegateId: string, calendarItem: models.CalendarItem, options?: {
+        requestedPermissions?: RequestedPermissionEnum;
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<models.CalendarItem>;
     /**
      * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param calendarItem item the calendar item to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * calendar item does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated entity.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(calendarItem: models.CalendarItem, delegates: {
         [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
             shareEncryptionKey?: ShareMetadataBehaviour;
             sharePatientId?: ShareMetadataBehaviour;
         };
     }): Promise<models.CalendarItem>;
+    /**
+     * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param calendarItem item the calendar item to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * calendar item does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
+     */
+    tryShareWithMany(calendarItem: models.CalendarItem, delegates: {
+        [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<ShareResult<models.CalendarItem>>;
     getDataOwnersWithAccessTo(entity: CalendarItem): Promise<{
         permissionsByDataOwnerId: {
-            [p: string]: 'WRITE';
+            [p: string]: AccessLevelEnum;
         };
         hasUnknownAnonymousDataOwners: boolean;
     }>;
@@ -125,9 +161,11 @@ export declare class IccCalendarItemXApi extends IccCalendarItemApi implements E
      * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar
      * item.
      * @param calendarItem a calendar item
-     * @param patient the patient which will be linked to the calendar item
-     * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked patient
+     * @param patient the patient which will be linked to the calendar item.
+     * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked
+     * patient. If any of these data owners do not already have access to the calendar item, they will be granted read access (no write).
      * @return the updated calendar item
      */
     linkToPatient(calendarItem: models.CalendarItem, patient: models.Patient, shareLinkWithDelegates: string[]): Promise<models.CalendarItem>;
+    createDelegationDeAnonymizationMetadata(entity: CalendarItem, delegates: string[]): Promise<void>;
 }