@icure/api 7.1.16 → 8.0.0-RC.2

package/icc-x-api/icc-calendar-item-x-api.js

@@ -26,14 +26,22 @@ const _ = require("lodash");
 const models_1 = require("../icc-api/model/models");
 const icc_api_1 = require("../icc-api");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
+const EntityShareRequest_1 = require("../icc-api/model/requests/EntityShareRequest");
+var RequestedPermissionEnum = EntityShareRequest_1.EntityShareRequest.RequestedPermissionEnum;
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
 const utils_1 = require("./utils");
 class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
-    constructor(host, headers, crypto, dataOwnerApi, encryptedKeys = ['details', 'title', 'patientId'], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'CalendarItem'));
+    }
+    constructor(host, headers, crypto, dataOwnerApi, autofillAuthor, encryptedKeys = ['details', 'title', 'patientId'], authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
         ? window.fetch
         : typeof self !== 'undefined'
             ? self.fetch
             : fetch) {
         super(host, headers, authenticationProvider, fetchImpl);
+        this.autofillAuthor = autofillAuthor;
         this.i18n = i18n;
         this.crypto = crypto;
         this.dataOwnerApi = dataOwnerApi;
@@ -51,9 +59,8 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
-     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a
+     * auto-delegations, in such case the access level specified here will be used.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classcalendar itemification. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of calendar item.
      */
@@ -62,31 +69,29 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
         return __awaiter(this, void 0, void 0, function* () {
             if (!patient && options.preferredSfk)
                 throw new Error('You need to specify parent patient in order to use secret foreign keys.');
-            const calendarItem = Object.assign(Object.assign({}, (ci !== null && ci !== void 0 ? ci : {})), { _type: 'org.taktik.icure.entities.CalendarItem', id: (_a = ci === null || ci === void 0 ? void 0 : ci.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = ci === null || ci === void 0 ? void 0 : ci.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = ci === null || ci === void 0 ? void 0 : ci.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = ci === null || ci === void 0 ? void 0 : ci.responsible) !== null && _d !== void 0 ? _d : this.dataOwnerApi.getDataOwnerIdOf(user), author: (_e = ci === null || ci === void 0 ? void 0 : ci.author) !== null && _e !== void 0 ? _e : user.id, codes: (_f = ci === null || ci === void 0 ? void 0 : ci.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = ci === null || ci === void 0 ? void 0 : ci.tags) !== null && _g !== void 0 ? _g : [] });
+            const calendarItem = Object.assign(Object.assign({}, (ci !== null && ci !== void 0 ? ci : {})), { _type: 'org.taktik.icure.entities.CalendarItem', id: (_a = ci === null || ci === void 0 ? void 0 : ci.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = ci === null || ci === void 0 ? void 0 : ci.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = ci === null || ci === void 0 ? void 0 : ci.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = ci === null || ci === void 0 ? void 0 : ci.responsible) !== null && _d !== void 0 ? _d : (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined), author: (_e = ci === null || ci === void 0 ? void 0 : ci.author) !== null && _e !== void 0 ? _e : (this.autofillAuthor ? user.id : undefined), codes: (_f = ci === null || ci === void 0 ? void 0 : ci.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = ci === null || ci === void 0 ? void 0 : ci.tags) !== null && _g !== void 0 ? _g : [] });
             const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
             if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
                 throw new Error('Can only initialise entities as current data owner.');
-            const sfk = patient ? (_h = options.preferredSfk) !== null && _h !== void 0 ? _h : (yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient)) : undefined;
+            const sfk = patient
+                ? (_h = options === null || options === void 0 ? void 0 : options.preferredSfk) !== null && _h !== void 0 ? _h : (yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))
+                : undefined;
             if (patient && !sfk)
                 throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`);
-            const extraDelegations = [
-                ...Object.keys((_j = options.additionalDelegates) !== null && _j !== void 0 ? _j : {}),
-                ...((_l = (_k = user.autoDelegations) === null || _k === void 0 ? void 0 : _k.all) !== null && _l !== void 0 ? _l : []),
-                ...((_o = (_m = user.autoDelegations) === null || _m === void 0 ? void 0 : _m.medicalInformation) !== null && _o !== void 0 ? _o : []),
-            ];
-            return new models_1.CalendarItem(yield this.crypto.entities
-                .entityWithInitialisedEncryptedMetadata(calendarItem, patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, extraDelegations)
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries([...((_k = (_j = user.autoDelegations) === null || _j === void 0 ? void 0 : _j.all) !== null && _k !== void 0 ? _k : []), ...((_m = (_l = user.autoDelegations) === null || _l === void 0 ? void 0 : _l.medicalInformation) !== null && _m !== void 0 ? _m : [])].map((d) => [d, AccessLevelEnum.WRITE]))), ((_o = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _o !== void 0 ? _o : {}));
+            return new models_1.CalendarItem(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(calendarItem, 'CalendarItem', patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, false, extraDelegations)
                 .then((x) => x.updatedEntity));
         });
     }
     findBy(hcpartyId, patient, usingPost = false) {
         return __awaiter(this, void 0, void 0, function* () {
-            const extractedKeys = yield this.crypto.entities.secretIdsOf(patient, hcpartyId);
+            const extractedKeys = yield this.crypto.xapi.secretIdsOf({ entity: patient, type: 'Patient' }, hcpartyId);
             const topmostParentId = (yield this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0];
             return extractedKeys && extractedKeys.length > 0
                 ? usingPost
-                    ? yield this.findByHCPartyPatientSecretFKeysArray(topmostParentId, _.uniq(extractedKeys))
-                    : yield this.findByHCPartyPatientSecretFKeys(topmostParentId, _.uniq(extractedKeys).join(','))
+                    ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId, _.uniq(extractedKeys))
+                    : this.findByHCPartyPatientSecretFKeys(hcpartyId, _.uniq(extractedKeys).join(','))
                 : Promise.resolve([]);
         });
     }
@@ -182,18 +187,18 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
     }
     modifyAs(dataOwner, body) {
         return this.encryptAs(dataOwner, [_.cloneDeep(body)])
-            .then((als) => super.modifyCalendarItem(als[0]))
-            .then((body) => this.decrypt(dataOwner, [body]))
-            .then((als) => als[0]);
+            .then((items) => super.modifyCalendarItem(items[0]))
+            .then((ci) => this.decrypt(dataOwner, [ci]))
+            .then((cis) => cis[0]);
     }
     encrypt(user, calendarItems) {
         return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user), calendarItems);
     }
-    encryptAs(dataOwnerId, calendarItems) {
-        return Promise.all(calendarItems.map((x) => this.crypto.entities.tryEncryptEntity(x, dataOwnerId, this.encryptedFields, false, true, (json) => new models_1.CalendarItem(json))));
+    encryptAs(dataOwner, calendarItems) {
+        return Promise.all(calendarItems.map((x) => this.crypto.xapi.tryEncryptEntity(x, 'CalendarItem', this.encryptedFields, false, false, (json) => new models_1.CalendarItem(json))));
     }
     decrypt(hcpId, calendarItems) {
-        return Promise.all(calendarItems.map((x) => this.crypto.entities.decryptEntity(x, hcpId, (json) => new models_1.CalendarItem(json)).then(({ entity }) => entity)));
+        return Promise.all(calendarItems.map((x) => this.crypto.xapi.decryptEntity(x, 'CalendarItem', (json) => new models_1.CalendarItem(json)).then(({ entity }) => entity)));
     }
     /**
      * @param calendarItem a calendar item
@@ -202,12 +207,20 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
      */
     decryptPatientIdOf(calendarItem) {
         return __awaiter(this, void 0, void 0, function* () {
-            return this.crypto.entities.owningEntityIdsOf(calendarItem, undefined);
+            return this.crypto.xapi.owningEntityIdsOf({ entity: calendarItem, type: 'CalendarItem' }, undefined);
+        });
+    }
+    /**
+     * @return if the logged data owner has write access to the content of the given calendar item
+     */
+    hasWriteAccess(calendarItem) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: calendarItem, type: 'CalendarItem' });
         });
     }
     /**
      * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the calendar item.
      * @param calendarItem item the calendar item to share.
      * @param options optional parameters to customize the sharing behaviour:
@@ -216,7 +229,9 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
      * calendar item does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated entity.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
      */
     shareWith(delegateId, calendarItem, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -225,70 +240,109 @@ class IccCalendarItemXApi extends icc_api_1.IccCalendarItemApi {
     }
     /**
      * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param calendarItem item the calendar item to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * calendar item does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated entity.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(calendarItem, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (yield this.tryShareWithMany(calendarItem, delegates)).updatedEntityOrThrow;
+        });
+    }
+    /**
+     * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param calendarItem item the calendar item to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * calendar item does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
+     */
+    tryShareWithMany(calendarItem, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
             const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
-            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(calendarItem, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(calendarItem, 'CalendarItem');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyAs(self, entityWithEncryptionKey) : calendarItem;
+            return this.crypto.xapi
+                .simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'CalendarItem' }, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
                 delegateId,
                 {
-                    shareEncryptionKey: options.shareEncryptionKey,
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
                     shareOwningEntityIds: options.sharePatientId,
+                    shareSecretIds: undefined,
                 },
-            ])));
-            if (!!extended) {
-                return yield this.modifyAs(self, extended);
-            }
-            else
-                return calendarItem;
+            ])), (x) => this.bulkShareCalendarItems(x))
+                .then((r) => r.mapSuccessAsync((e) => this.decrypt(self, [e]).then((es) => es[0])));
         });
     }
     getDataOwnersWithAccessTo(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
-        });
+        return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'CalendarItem' });
     }
     getEncryptionKeysOf(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.encryptionKeysOf(entity);
-        });
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'CalendarItem' }, undefined);
     }
     /**
      * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar
      * item.
      * @param calendarItem a calendar item
-     * @param patient the patient which will be linked to the calendar item
-     * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked patient
+     * @param patient the patient which will be linked to the calendar item.
+     * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked
+     * patient. If any of these data owners do not already have access to the calendar item, they will be granted read access (no write).
      * @return the updated calendar item
      */
     linkToPatient(calendarItem, patient, shareLinkWithDelegates) {
-        var _a, _b;
+        var _a;
         return __awaiter(this, void 0, void 0, function* () {
             if (!!((_a = calendarItem.secretForeignKeys) === null || _a === void 0 ? void 0 : _a.length))
                 throw new Error(`Calendar item ${calendarItem.id} is already linked to a patient`);
             const delegates = [...new Set([yield this.dataOwnerApi.getCurrentDataOwnerId(), ...shareLinkWithDelegates])];
-            const sfk = yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient);
+            const sfk = yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' });
             if (!sfk) {
                 throw new Error(`Could not find any secret id for patient ${patient.id} which is shared with the topmost ancestor of the current data owner`);
             }
-            let updated = Object.assign(Object.assign({}, calendarItem), { secretForeignKeys: [sfk] });
-            for (const delegate of delegates) {
-                updated = (_b = (yield this.crypto.entities.entityWithExtendedEncryptedMetadata(updated, delegate, [], [], [patient.id]))) !== null && _b !== void 0 ? _b : updated;
+            const individualShareData = {
+                shareSecretIds: [],
+                shareEncryptionKeys: [],
+                shareOwningEntityIds: [patient.id],
+                requestedPermissions: RequestedPermissionEnum.FULL_READ,
+            };
+            const shared = yield this.crypto.xapi.bulkShareOrUpdateEncryptedEntityMetadata('CalendarItem', [
+                {
+                    entity: calendarItem,
+                    dataForDelegates: Object.fromEntries(delegates.map((d) => [d, individualShareData])),
+                },
+            ], (x) => this.bulkShareCalendarItems(x));
+            if (!shared.updatedEntities.length || shared.updatedEntities[0].id !== calendarItem.id) {
+                const errorsForEntity = shared.updateErrors.filter((e) => e.entityId === calendarItem.id);
+                if (!errorsForEntity.length || !errorsForEntity.find((x) => x.code === 409)) {
+                    throw new Error(`Unexpected error while linking calendar item ${calendarItem.id}`);
+                }
+                else {
+                    throw new Error(`Outdated calendar item revision ${calendarItem.id}-${calendarItem.rev}`);
+                }
             }
             const self = yield this.dataOwnerApi.getCurrentDataOwnerId();
-            const saved = yield this.modifyAs(self, updated);
-            return (yield this.decrypt(self, [saved]))[0];
+            const sharedDecrypted = (yield this.decrypt(self, [shared.updatedEntities[0]]))[0];
+            const withSfk = yield this.modifyAs(self, Object.assign(Object.assign({}, sharedDecrypted), { secretForeignKeys: [sfk] }));
+            return (yield this.decrypt(self, [withSfk]))[0];
         });
     }
+    createDelegationDeAnonymizationMetadata(entity, delegates) {
+        return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'CalendarItem' }, delegates);
+    }
 }
 exports.IccCalendarItemXApi = IccCalendarItemXApi;
 //# sourceMappingURL=icc-calendar-item-x-api.js.map

package/icc-x-api/icc-calendar-item-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-calendar-item-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-calendar-item-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2C;AAE3C,4BAA2B;AAE3B,oDAA4D;AAE5D,wCAA+C;AAE/C,0EAAgG;AAGhG,mCAAuE;AAEvE,MAAa,mBAAoB,SAAQ,4BAAkB;IAMzD,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,gBAA+B,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,EAChE,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAlBzD,SAAI,GAAQ,IAAI,CAAA;QAmBd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,eAAe,CAAC,CAAA;IAC7E,CAAC;IAED,WAAW,CAAC,IAAU,EAAE,EAAgB,EAAE,UAAwE,EAAE;QAClH,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CACtB,IAAiB,EACjB,OAA8B,EAC9B,EAAO,EACP,UAGI,EAAE;;;YAEN,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAChI,MAAM,YAAY,mCACb,CAAC,EAAE,aAAF,EAAE,cAAF,EAAE,GAAI,EAAE,CAAC,KACb,KAAK,EAAE,wCAAwC,EAC/C,EAAE,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EACjD,OAAO,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC5C,QAAQ,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC9C,WAAW,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACxE,MAAM,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,EAC7B,KAAK,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,KAAK,mCAAI,EAAE,EACtB,IAAI,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,IAAI,mCAAI,EAAE,GACrB,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACnI,IAAI,OAAO,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAC7F,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,qBAAY,CACrB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,YAAY,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,MAAM,IAAI,CAAC,oCAAoC,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACzF,CAAC,CAAC,MAAM,IAAI,CAAC,+BAA+B,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAEK,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;;;;;YAC1E,MAAM,aAAa,GAAG,MAAM,OAAM,4CAA4C,YAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACtG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACrD,CAAC;KAAA;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,qDAAqD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC7E,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;IACtH,CAAC;IAEK,6BAA6B,CAAC,IAAiB,EAAE,IAA0B;;;;;YAC/E,OAAO,IAAI;gBACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;qBACpC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAM,kBAAkB,YAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;qBACnD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;qBAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC,CAAC,IAAI,CAAA;QACV,CAAC;KAAA;IAED,uBAAuB,CAAC,IAAiB,EAAE,cAAsB;QAC/D,OAAO,KAAK;aACT,eAAe,CAAC,cAAc,CAAC;aAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;aAC/F,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,eAAe,CAAC,cAAsB;QACpC,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,wBAAwB,CAAC,IAAiB;QACxC,OAAO,KAAK,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACjI,CAAC;IAED,gBAAgB;QACd,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,+BAA+B,CAAC,IAAiB,EAAE,IAAuB;QACxE,OAAO,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,uBAAuB,CAAC,IAAuB;QAC7C,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,4CAA4C,CAC1C,IAAiB,EACjB,SAAiB,EACjB,OAAe,EACf,SAAiB;QAEjB,OAAO,KAAK;aACT,oCAAoC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;aACnE,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,oCAAoC,CAAC,SAAkB,EAAE,OAAgB,EAAE,SAAkB;QAC3F,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,uCAAuC,CACrC,IAAiB,EACjB,SAAiB,EACjB,OAAe,EACf,QAAgB;QAEhB,OAAO,KAAK;aACT,+BAA+B,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;aAC7D,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,+BAA+B,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAiB;QACrF,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;IACtH,CAAC;IAED;;;;;;;;;;OAUG;IACH,8BAA8B,CAAC,YAAiC;QAC9D,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,KAA2B,YAAY,EAAlC,iBAAiB,UAAK,YAAY,EAA9E,2CAA+D,CAAe,CAAA;QACpF,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAEK,6BAA6B,CAAC,IAAiB,EAAE,IAA0B;;YAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClG,CAAC;KAAA;IAEO,QAAQ,CAAC,SAAiB,EAAE,IAAyB;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/C,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;aAC/C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,aAAyC;QAClE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAA;IACjF,CAAC;IAEO,SAAS,CAAC,WAAmB,EAAE,aAAyC;QAC9E,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,qBAAY,CAAC,IAAI,CAAC,CAAC,CAC3H,CACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,aAAyC;QAC9D,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,qBAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CACtI,CAAA;IACH,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,YAAiC;;YACxD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QACxE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,YAAiC,EACjC,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACpE,CAAC;KAAA;IACD;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,YAAiC,EACjC,SAKC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CACjF,YAAY,EACZ,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,oBAAoB,EAAE,OAAO,CAAC,cAAc;iBAC7C;aACF,CAAC,CACH,CACF,CAAA;YACD,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;aAC3C;;gBAAM,OAAO,YAAY,CAAA;QAC5B,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAAoB;;YAEpB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAoB;;YAC5C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,aAAa,CAAC,YAAiC,EAAE,OAAuB,EAAE,sBAAgC;;;YAC9G,IAAI,CAAC,CAAC,CAAA,MAAA,YAAY,CAAC,iBAAiB,0CAAE,MAAM,CAAA;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,CAAC,EAAE,iCAAiC,CAAC,CAAA;YAChI,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAA;YAC5G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAA;YACnF,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,EAAE,sEAAsE,CAAC,CAAA;aAC9I;YACD,IAAI,OAAO,mCACN,YAAY,KACf,iBAAiB,EAAE,CAAC,GAAG,CAAC,GACzB,CAAA;YACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE;gBAChC,OAAO,GAAG,MAAA,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAG,CAAC,CAAC,CAAC,mCAAI,OAAO,CAAA;aAChI;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAChD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;;KAC9C;CACF;AA1UD,kDA0UC","sourcesContent":["import * as i18n from './rsrc/contact.i18n'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { CalendarItem, User } from '../icc-api/model/models'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccCalendarItemApi } from '../icc-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { EncryptedFieldsManifest, parseEncryptedFields } from './utils'\n\nexport class IccCalendarItemXApi extends IccCalendarItemApi implements EncryptedEntityXApi<models.CalendarItem> {\n  i18n: any = i18n\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    encryptedKeys: Array<string> = ['details', 'title', 'patientId'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'CalendarItem.')\n  }\n\n  newInstance(user: User, ci: CalendarItem, options: { additionalDelegates?: { [dataOwnerId: string]: 'WRITE' } } = {}) {\n    return this.newInstancePatient(user, null, ci, options)\n  }\n\n  /**\n   * Creates a new instance of calendar item with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this calendar item refers to.\n   * @param ci initialised data for the calendar item. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the access log. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of calendar item.\n   */\n  async newInstancePatient(\n    user: models.User,\n    patient: models.Patient | null,\n    ci: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.CalendarItem> {\n    if (!patient && options.preferredSfk) throw new Error('You need to specify parent patient in order to use secret foreign keys.')\n    const calendarItem = {\n      ...(ci ?? {}),\n      _type: 'org.taktik.icure.entities.CalendarItem',\n      id: ci?.id ?? this.crypto.primitives.randomUuid(),\n      created: ci?.created ?? new Date().getTime(),\n      modified: ci?.modified ?? new Date().getTime(),\n      responsible: ci?.responsible ?? this.dataOwnerApi.getDataOwnerIdOf(user),\n      author: ci?.author ?? user.id,\n      codes: ci?.codes ?? [],\n      tags: ci?.tags ?? [],\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = patient ? options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient)) : undefined\n    if (patient && !sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new CalendarItem(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(calendarItem, patient?.id, sfk, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false) {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? usingPost\n        ? await this.findByHCPartyPatientSecretFKeysArray(topmostParentId, _.uniq(extractedKeys))\n        : await this.findByHCPartyPatientSecretFKeys(topmostParentId, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  async findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.CalendarItem>> {\n    const calendarItems = await super.findCalendarItemsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys)\n    return await this.decrypt(hcPartyId, calendarItems)\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.CalendarItem> | any> {\n    return super\n      .findCalendarItemsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((calendarItems) => this.decrypt(hcPartyId, calendarItems))\n  }\n\n  createCalendarItem(body?: CalendarItem): never {\n    throw new Error('Cannot call a method that must encrypt a calendar item without providing a user for de/encryption')\n  }\n\n  async createCalendarItemWithHcParty(user: models.User, body?: models.CalendarItem): Promise<models.CalendarItem | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((items) => super.createCalendarItem(items[0]))\n          .then((ci) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [ci]))\n          .then((cis) => cis[0])\n      : null\n  }\n\n  getCalendarItemWithUser(user: models.User, calendarItemId: string): Promise<CalendarItem | any> {\n    return super\n      .getCalendarItem(calendarItemId)\n      .then((calendarItem) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [calendarItem]))\n      .then((cis) => cis[0])\n  }\n\n  getCalendarItem(calendarItemId: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsWithUser(user: models.User): Promise<Array<CalendarItem> | any> {\n    return super.getCalendarItems().then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItems(): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsWithIdsWithUser(user: models.User, body?: models.ListOfIds): Promise<Array<CalendarItem> | any> {\n    return super.getCalendarItemsWithIds(body).then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItemsWithIds(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsByPeriodAndHcPartyIdWithUser(\n    user: models.User,\n    startDate: number,\n    endDate: number,\n    hcPartyId: string\n  ): Promise<Array<CalendarItem> | any> {\n    return super\n      .getCalendarItemsByPeriodAndHcPartyId(startDate, endDate, hcPartyId)\n      .then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItemsByPeriodAndHcPartyId(startDate?: number, endDate?: number, hcPartyId?: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarsByPeriodAndAgendaIdWithUser(\n    user: models.User,\n    startDate: number,\n    endDate: number,\n    agendaId: string\n  ): Promise<Array<CalendarItem> | any> {\n    return super\n      .getCalendarsByPeriodAndAgendaId(startDate, endDate, agendaId)\n      .then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarsByPeriodAndAgendaId(startDate?: number, endDate?: number, agendaId?: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  modifyCalendarItem(body?: CalendarItem): never {\n    throw new Error('Cannot call a method that must encrypt a calendar item without providing a user for de/encryption')\n  }\n\n  /**\n   * Remove the following delegation objects from the\n   * CalendarItem instance: cryptedForeignKeys, secretForeignKeys.\n   *\n   * The delegations & encryptionKeys objects are not removed because\n   * in the case the CalendarItem is saved in the DB & then encrypted,\n   * if later we remove the patient from it, it'd reset the delegations\n   * and encryptionKeys thus impossibilitating further access.\n   *\n   * @param calendarItem The Calendar Item object\n   */\n  resetCalendarDelegationObjects(calendarItem: models.CalendarItem): models.CalendarItem {\n    const { cryptedForeignKeys, secretForeignKeys, ...resetCalendarItem } = calendarItem\n    return resetCalendarItem\n  }\n\n  async modifyCalendarItemWithHcParty(user: models.User, body?: models.CalendarItem): Promise<models.CalendarItem | any> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, _.cloneDeep(body)) : null\n  }\n\n  private modifyAs(dataOwner: string, body: models.CalendarItem): Promise<models.CalendarItem> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((als) => super.modifyCalendarItem(als[0]))\n      .then((body) => this.decrypt(dataOwner, [body]))\n      .then((als) => als[0])\n  }\n\n  encrypt(user: models.User, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems)\n  }\n\n  private encryptAs(dataOwnerId: string, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return Promise.all(\n      calendarItems.map((x) =>\n        this.crypto.entities.tryEncryptEntity(x, dataOwnerId, this.encryptedFields, false, true, (json) => new CalendarItem(json))\n      )\n    )\n  }\n\n  decrypt(hcpId: string, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return Promise.all(\n      calendarItems.map((x) => this.crypto.entities.decryptEntity(x, hcpId, (json) => new CalendarItem(json)).then(({ entity }) => entity))\n    )\n  }\n\n  /**\n   * @param calendarItem a calendar item\n   * @return the id of the patient that the calendar item refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(calendarItem: models.CalendarItem): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(calendarItem, undefined)\n  }\n\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the calendar item.\n   * @param calendarItem item the calendar item to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWith(\n    delegateId: string,\n    calendarItem: models.CalendarItem,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.CalendarItem> {\n    return this.shareWithMany(calendarItem, { [delegateId]: options })\n  }\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content.\n   * @param calendarItem item the calendar item to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated entity.\n   */\n  async shareWithMany(\n    calendarItem: models.CalendarItem,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.CalendarItem> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n      calendarItem,\n      true,\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            shareEncryptionKey: options.shareEncryptionKey,\n            shareOwningEntityIds: options.sharePatientId,\n          },\n        ])\n      )\n    )\n    if (!!extended) {\n      return await this.modifyAs(self, extended)\n    } else return calendarItem\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: CalendarItem\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: CalendarItem): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n\n  /**\n   * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar\n   * item.\n   * @param calendarItem a calendar item\n   * @param patient the patient which will be linked to the calendar item\n   * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked patient\n   * @return the updated calendar item\n   */\n  async linkToPatient(calendarItem: models.CalendarItem, patient: models.Patient, shareLinkWithDelegates: string[]): Promise<models.CalendarItem> {\n    if (!!calendarItem.secretForeignKeys?.length) throw new Error(`Calendar item ${calendarItem.id} is already linked to a patient`)\n    const delegates = [...new Set([await this.dataOwnerApi.getCurrentDataOwnerId(), ...shareLinkWithDelegates])]\n    const sfk = await this.crypto.confidential.getAnySecretIdSharedWithParents(patient)\n    if (!sfk) {\n      throw new Error(`Could not find any secret id for patient ${patient.id} which is shared with the topmost ancestor of the current data owner`)\n    }\n    let updated = {\n      ...calendarItem,\n      secretForeignKeys: [sfk],\n    }\n    for (const delegate of delegates) {\n      updated = (await this.crypto.entities.entityWithExtendedEncryptedMetadata(updated, delegate, [], [], [patient.id!])) ?? updated\n    }\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const saved = await this.modifyAs(self, updated)\n    return (await this.decrypt(self, [saved]))[0]\n  }\n}\n"]}
+{"version":3,"file":"icc-calendar-item-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-calendar-item-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2C;AAE3C,4BAA2B;AAE3B,oDAA4F;AAE5F,wCAA+C;AAE/C,0EAAgG;AAGhG,qFAAiF;AACjF,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAC3E,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAEzD,mCAAuE;AAGvE,MAAa,mBAAoB,SAAQ,4BAAkB;IAMzD,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAA;IACvH,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EACb,cAAuB,EACxC,gBAA+B,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,EAChE,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QATtC,mBAAc,GAAd,cAAc,CAAS;QAd1C,SAAI,GAAQ,IAAI,CAAA;QAwBd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,eAAe,CAAC,CAAA;IAC7E,CAAC;IAED,WAAW,CACT,IAAU,EACV,EAAsB,EACtB,UAEI,EAAE;QAEN,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACG,kBAAkB,CACtB,IAAiB,EACjB,OAA8B,EAC9B,EAAO,EACP,UAGI,EAAE;;;YAEN,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAChI,MAAM,YAAY,mCACb,CAAC,EAAE,aAAF,EAAE,cAAF,EAAE,GAAI,EAAE,CAAC,KACb,KAAK,EAAE,wCAAwC,EAC/C,EAAE,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EACjD,OAAO,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC5C,QAAQ,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC9C,WAAW,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC5G,MAAM,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EACjE,KAAK,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,KAAK,mCAAI,EAAE,EACtB,IAAI,EAAE,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,IAAI,mCAAI,EAAE,GACrB,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,OAAO;gBACjB,CAAC,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjI,CAAC,CAAC,SAAS,CAAA;YACb,IAAI,OAAO,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAC7F,MAAM,gBAAgB,mCACjB,MAAM,CAAC,WAAW,CACnB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,GACE,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,OAAO,IAAI,qBAAY,CACrB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBACrH,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,MAAM,CAAC,SAAiB,EAAE,OAAuB,EAAE,YAAqB,KAAK;;YACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAA;YACzG,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAU,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC9E,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,SAAU,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrF,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAEK,+BAA+B,CAAC,SAAiB,EAAE,WAAmB;;;;;YAC1E,MAAM,aAAa,GAAG,MAAM,OAAM,4CAA4C,YAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACtG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACrD,CAAC;KAAA;IAED,oCAAoC,CAAC,SAAiB,EAAE,WAAqB;QAC3E,OAAO,KAAK;aACT,qDAAqD,CAAC,SAAS,EAAE,WAAW,CAAC;aAC7E,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;IACtH,CAAC;IAEK,6BAA6B,CAAC,IAAiB,EAAE,IAA0B;;;;;YAC/E,OAAO,IAAI;gBACT,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;qBACpC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAM,kBAAkB,YAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;qBACnD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;qBAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC,CAAC,IAAI,CAAA;QACV,CAAC;KAAA;IAED,uBAAuB,CAAC,IAAiB,EAAE,cAAsB;QAC/D,OAAO,KAAK;aACT,eAAe,CAAC,cAAc,CAAC;aAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;aAC/F,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,eAAe,CAAC,cAAsB;QACpC,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,wBAAwB,CAAC,IAAiB;QACxC,OAAO,KAAK,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACjI,CAAC;IAED,gBAAgB;QACd,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,+BAA+B,CAAC,IAAiB,EAAE,IAAuB;QACxE,OAAO,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IAC5I,CAAC;IAED,uBAAuB,CAAC,IAAuB;QAC7C,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,4CAA4C,CAC1C,IAAiB,EACjB,SAAiB,EACjB,OAAe,EACf,SAAiB;QAEjB,OAAO,KAAK;aACT,oCAAoC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;aACnE,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,oCAAoC,CAAC,SAAkB,EAAE,OAAgB,EAAE,SAAkB;QAC3F,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,uCAAuC,CACrC,IAAiB,EACjB,SAAiB,EACjB,OAAe,EACf,QAAgB;QAEhB,OAAO,KAAK;aACT,+BAA+B,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;aAC7D,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,+BAA+B,CAAC,SAAkB,EAAE,OAAgB,EAAE,QAAiB;QACrF,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;IACtH,CAAC;IAED;;;;;;;;;;OAUG;IACH,8BAA8B,CAAC,YAAiC;QAC9D,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,KAA2B,YAAY,EAAlC,iBAAiB,UAAK,YAAY,EAA9E,2CAA+D,CAAe,CAAA;QACpF,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAEK,6BAA6B,CAAC,IAAiB,EAAE,IAA0B;;YAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClG,CAAC;KAAA;IAEO,QAAQ,CAAC,SAAiB,EAAE,IAAyB;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACnD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO,CAAC,IAAiB,EAAE,aAAyC;QAClE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAE,EAAE,aAAa,CAAC,CAAA;IACjF,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,aAAyC;QAC5E,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,qBAAY,CAAC,IAAI,CAAC,CAAC,CAC3H,CACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,aAAyC;QAC9D,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,qBAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAC3I,CAAA;IACH,CAAC;IAED;;;;OAIG;IACG,kBAAkB,CAAC,YAAiC;;YACxD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,SAAS,CAAC,CAAA;QACtG,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,YAAiC;;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;QACxF,CAAC;KAAA;IAED;;;;;;;;;;;;;;OAcG;IACG,SAAS,CACb,UAAkB,EAClB,YAAiC,EACjC,UAII,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACpE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,aAAa,CACjB,YAAiC,EACjC,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACpF,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,gBAAgB,CACpB,YAAiC,EACjC,SAMC;;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;YACpH,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAA;YACjH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,EAC/C,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CACtC;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAAoB;QAEpB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;IAC3G,CAAC;IAED,mBAAmB,CAAC,MAAoB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,SAAS,CAAC,CAAA;IACvF,CAAC;IAED;;;;;;;;OAQG;IACG,aAAa,CAAC,YAAiC,EAAE,OAAuB,EAAE,sBAAgC;;;YAC9G,IAAI,CAAC,CAAC,CAAA,MAAA,YAAY,CAAC,iBAAiB,0CAAE,MAAM,CAAA;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,CAAC,EAAE,iCAAiC,CAAC,CAAA;YAChI,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAA;YAC5G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;YAChH,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,EAAE,sEAAsE,CAAC,CAAA;aAC9I;YACD,MAAM,mBAAmB,GAAG;gBAC1B,cAAc,EAAE,EAAc;gBAC9B,mBAAmB,EAAE,EAAc;gBACnC,oBAAoB,EAAE,CAAC,OAAO,CAAC,EAAG,CAAC;gBACnC,oBAAoB,EAAE,uBAAuB,CAAC,SAAS;aACxD,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAC5E,cAAc,EACd;gBACE;oBACE,MAAM,EAAE,YAAY;oBACpB,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC;iBACrF;aACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CACtC,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,EAAE,EAAE;gBACtF,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,EAAE,CAAC,CAAA;gBACzF,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE;oBAC3E,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,CAAC,EAAE,EAAE,CAAC,CAAA;iBACnF;qBAAM;oBACL,MAAM,IAAI,KAAK,CAAC,mCAAmC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC,CAAA;iBAC1F;aACF;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAClF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,kCAAO,eAAe,KAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,IAAG,CAAA;YAC3F,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;;KAChD;IAED,uCAAuC,CAAC,MAAoB,EAAE,SAAmB;QAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,SAAS,CAAC,CAAA;IAC9H,CAAC;CACF;AA1ZD,kDA0ZC","sourcesContent":["import * as i18n from './rsrc/contact.i18n'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { AccessLog, CalendarItem, EncryptedEntityStub, User } from '../icc-api/model/models'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { IccCalendarItemApi } from '../icc-api'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedFieldsManifest, parseEncryptedFields } from './utils'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccCalendarItemXApi extends IccCalendarItemApi implements EncryptedEntityXApi<models.CalendarItem> {\n  i18n: any = i18n\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'CalendarItem'))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    private readonly autofillAuthor: boolean,\n    encryptedKeys: Array<string> = ['details', 'title', 'patientId'],\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'CalendarItem.')\n  }\n\n  newInstance(\n    user: User,\n    ci: any | CalendarItem,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n    } = {}\n  ) {\n    return this.newInstancePatient(user, null, ci, options)\n  }\n\n  /**\n   * Creates a new instance of calendar item with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this calendar item refers to.\n   * @param ci initialised data for the calendar item. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classcalendar itemification. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of calendar item.\n   */\n  async newInstancePatient(\n    user: models.User,\n    patient: models.Patient | null,\n    ci: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.CalendarItem> {\n    if (!patient && options.preferredSfk) throw new Error('You need to specify parent patient in order to use secret foreign keys.')\n    const calendarItem = {\n      ...(ci ?? {}),\n      _type: 'org.taktik.icure.entities.CalendarItem',\n      id: ci?.id ?? this.crypto.primitives.randomUuid(),\n      created: ci?.created ?? new Date().getTime(),\n      modified: ci?.modified ?? new Date().getTime(),\n      responsible: ci?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: ci?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: ci?.codes ?? [],\n      tags: ci?.tags ?? [],\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = patient\n      ? options?.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))\n      : undefined\n    if (patient && !sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = {\n      ...Object.fromEntries(\n        [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n      ),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    return new CalendarItem(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(calendarItem, 'CalendarItem', patient?.id, sfk, true, false, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async findBy(hcpartyId: string, patient: models.Patient, usingPost: boolean = false) {\n    const extractedKeys = await this.crypto.xapi.secretIdsOf({ entity: patient, type: 'Patient' }, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? usingPost\n        ? this.findByHCPartyPatientSecretFKeysArray(hcpartyId!, _.uniq(extractedKeys))\n        : this.findByHCPartyPatientSecretFKeys(hcpartyId!, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  async findByHCPartyPatientSecretFKeys(hcPartyId: string, secretFKeys: string): Promise<Array<models.CalendarItem>> {\n    const calendarItems = await super.findCalendarItemsByHCPartyPatientForeignKeys(hcPartyId, secretFKeys)\n    return await this.decrypt(hcPartyId, calendarItems)\n  }\n\n  findByHCPartyPatientSecretFKeysArray(hcPartyId: string, secretFKeys: string[]): Promise<Array<models.CalendarItem> | any> {\n    return super\n      .findCalendarItemsByHCPartyPatientForeignKeysUsingPost(hcPartyId, secretFKeys)\n      .then((calendarItems) => this.decrypt(hcPartyId, calendarItems))\n  }\n\n  createCalendarItem(body?: CalendarItem): never {\n    throw new Error('Cannot call a method that must encrypt a calendar item without providing a user for de/encryption')\n  }\n\n  async createCalendarItemWithHcParty(user: models.User, body?: models.CalendarItem): Promise<models.CalendarItem | any> {\n    return body\n      ? this.encrypt(user, [_.cloneDeep(body)])\n          .then((items) => super.createCalendarItem(items[0]))\n          .then((ci) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [ci]))\n          .then((cis) => cis[0])\n      : null\n  }\n\n  getCalendarItemWithUser(user: models.User, calendarItemId: string): Promise<CalendarItem | any> {\n    return super\n      .getCalendarItem(calendarItemId)\n      .then((calendarItem) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, [calendarItem]))\n      .then((cis) => cis[0])\n  }\n\n  getCalendarItem(calendarItemId: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsWithUser(user: models.User): Promise<Array<CalendarItem> | any> {\n    return super.getCalendarItems().then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItems(): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsWithIdsWithUser(user: models.User, body?: models.ListOfIds): Promise<Array<CalendarItem> | any> {\n    return super.getCalendarItemsWithIds(body).then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItemsWithIds(body?: models.ListOfIds): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarItemsByPeriodAndHcPartyIdWithUser(\n    user: models.User,\n    startDate: number,\n    endDate: number,\n    hcPartyId: string\n  ): Promise<Array<CalendarItem> | any> {\n    return super\n      .getCalendarItemsByPeriodAndHcPartyId(startDate, endDate, hcPartyId)\n      .then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarItemsByPeriodAndHcPartyId(startDate?: number, endDate?: number, hcPartyId?: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  getCalendarsByPeriodAndAgendaIdWithUser(\n    user: models.User,\n    startDate: number,\n    endDate: number,\n    agendaId: string\n  ): Promise<Array<CalendarItem> | any> {\n    return super\n      .getCalendarsByPeriodAndAgendaId(startDate, endDate, agendaId)\n      .then((calendarItems) => this.decrypt(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems))\n  }\n\n  getCalendarsByPeriodAndAgendaId(startDate?: number, endDate?: number, agendaId?: string): never {\n    throw new Error('Cannot call a method that must en/decrypt a calendar item without providing a user for de/encryption')\n  }\n\n  modifyCalendarItem(body?: CalendarItem): never {\n    throw new Error('Cannot call a method that must encrypt a calendar item without providing a user for de/encryption')\n  }\n\n  /**\n   * Remove the following delegation objects from the\n   * CalendarItem instance: cryptedForeignKeys, secretForeignKeys.\n   *\n   * The delegations & encryptionKeys objects are not removed because\n   * in the case the CalendarItem is saved in the DB & then encrypted,\n   * if later we remove the patient from it, it'd reset the delegations\n   * and encryptionKeys thus impossibilitating further access.\n   *\n   * @param calendarItem The Calendar Item object\n   */\n  resetCalendarDelegationObjects(calendarItem: models.CalendarItem): models.CalendarItem {\n    const { cryptedForeignKeys, secretForeignKeys, ...resetCalendarItem } = calendarItem\n    return resetCalendarItem\n  }\n\n  async modifyCalendarItemWithHcParty(user: models.User, body?: models.CalendarItem): Promise<models.CalendarItem | any> {\n    return body ? this.modifyAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, _.cloneDeep(body)) : null\n  }\n\n  private modifyAs(dataOwner: string, body: models.CalendarItem): Promise<models.CalendarItem> {\n    return this.encryptAs(dataOwner, [_.cloneDeep(body)])\n      .then((items) => super.modifyCalendarItem(items[0]))\n      .then((ci) => this.decrypt(dataOwner, [ci]))\n      .then((cis) => cis[0])\n  }\n\n  encrypt(user: models.User, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return this.encryptAs(this.dataOwnerApi.getDataOwnerIdOf(user)!, calendarItems)\n  }\n\n  private encryptAs(dataOwner: string, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return Promise.all(\n      calendarItems.map((x) =>\n        this.crypto.xapi.tryEncryptEntity(x, 'CalendarItem', this.encryptedFields, false, false, (json) => new CalendarItem(json))\n      )\n    )\n  }\n\n  decrypt(hcpId: string, calendarItems: Array<models.CalendarItem>): Promise<Array<models.CalendarItem>> {\n    return Promise.all(\n      calendarItems.map((x) => this.crypto.xapi.decryptEntity(x, 'CalendarItem', (json) => new CalendarItem(json)).then(({ entity }) => entity))\n    )\n  }\n\n  /**\n   * @param calendarItem a calendar item\n   * @return the id of the patient that the calendar item refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(calendarItem: models.CalendarItem): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: calendarItem, type: 'CalendarItem' }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given calendar item\n   */\n  async hasWriteAccess(calendarItem: models.CalendarItem): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: calendarItem, type: 'CalendarItem' })\n  }\n\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the calendar item.\n   * @param calendarItem item the calendar item to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async shareWith(\n    delegateId: string,\n    calendarItem: models.CalendarItem,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.CalendarItem> {\n    return this.shareWithMany(calendarItem, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param calendarItem item the calendar item to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    calendarItem: models.CalendarItem,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.CalendarItem> {\n    return (await this.tryShareWithMany(calendarItem, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing calendar item with other data owners, allowing them to access the non-encrypted data of the calendar item and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param calendarItem item the calendar item to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * calendar item does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this calendar item refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async tryShareWithMany(\n    calendarItem: models.CalendarItem,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.CalendarItem>> {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(calendarItem, 'CalendarItem')\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyAs(self, entityWithEncryptionKey) : calendarItem\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity: updatedEntity, type: 'CalendarItem' },\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: undefined,\n            },\n          ])\n        ),\n        (x) => this.bulkShareCalendarItems(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt(self, [e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: CalendarItem\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'CalendarItem' })\n  }\n\n  getEncryptionKeysOf(entity: CalendarItem): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: 'CalendarItem' }, undefined)\n  }\n\n  /**\n   * Links a calendar item with a patient. Note that this operation is not reversible: it is not possible to change the patient linked to a calendar\n   * item.\n   * @param calendarItem a calendar item\n   * @param patient the patient which will be linked to the calendar item.\n   * @param shareLinkWithDelegates data owners other than the current data owner which will also be able to decrypt the id of the newly linked\n   * patient. If any of these data owners do not already have access to the calendar item, they will be granted read access (no write).\n   * @return the updated calendar item\n   */\n  async linkToPatient(calendarItem: models.CalendarItem, patient: models.Patient, shareLinkWithDelegates: string[]): Promise<models.CalendarItem> {\n    if (!!calendarItem.secretForeignKeys?.length) throw new Error(`Calendar item ${calendarItem.id} is already linked to a patient`)\n    const delegates = [...new Set([await this.dataOwnerApi.getCurrentDataOwnerId(), ...shareLinkWithDelegates])]\n    const sfk = await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' })\n    if (!sfk) {\n      throw new Error(`Could not find any secret id for patient ${patient.id} which is shared with the topmost ancestor of the current data owner`)\n    }\n    const individualShareData = {\n      shareSecretIds: [] as string[],\n      shareEncryptionKeys: [] as string[],\n      shareOwningEntityIds: [patient.id!],\n      requestedPermissions: RequestedPermissionEnum.FULL_READ,\n    }\n    const shared = await this.crypto.xapi.bulkShareOrUpdateEncryptedEntityMetadata(\n      'CalendarItem',\n      [\n        {\n          entity: calendarItem,\n          dataForDelegates: Object.fromEntries(delegates.map((d) => [d, individualShareData])),\n        },\n      ],\n      (x) => this.bulkShareCalendarItems(x)\n    )\n    if (!shared.updatedEntities.length || shared.updatedEntities[0].id !== calendarItem.id) {\n      const errorsForEntity = shared.updateErrors.filter((e) => e.entityId === calendarItem.id)\n      if (!errorsForEntity.length || !errorsForEntity.find((x) => x.code === 409)) {\n        throw new Error(`Unexpected error while linking calendar item ${calendarItem.id}`)\n      } else {\n        throw new Error(`Outdated calendar item revision ${calendarItem.id}-${calendarItem.rev}`)\n      }\n    }\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const sharedDecrypted = (await this.decrypt(self, [shared.updatedEntities[0]]))[0]\n    const withSfk = await this.modifyAs(self, { ...sharedDecrypted, secretForeignKeys: [sfk] })\n    return (await this.decrypt(self, [withSfk]))[0]\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: CalendarItem, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'CalendarItem' }, delegates)\n  }\n}\n"]}

package/icc-x-api/icc-classification-x-api.d.ts

@@ -3,14 +3,22 @@ import { IccCryptoXApi } from './icc-crypto-x-api';
 import * as models from '../icc-api/model/models';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
+import { SecureDelegation } from '../icc-api/model/SecureDelegation';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { ShareResult } from './utils/ShareResult';
+import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest';
+import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
+import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { XHR } from '../icc-api/api/XHR';
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
 export declare class IccClassificationXApi extends IccClassificationApi implements EncryptedEntityXApi<models.Classification> {
+    private readonly autofillAuthor;
     crypto: IccCryptoXApi;
     dataOwnerApi: IccDataOwnerXApi;
+    get headers(): Promise<Array<XHR.Header>>;
     constructor(host: string, headers: {
         [key: string]: string;
-    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
+    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, autofillAuthor: boolean, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
     /**
      * Creates a new instance of classification with initialised encryption metadata (not in the database).
      * @param user the current user.
@@ -20,15 +28,14 @@ export declare class IccClassificationXApi extends IccClassificationApi implemen
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of classification.
      */
     newInstance(user: models.User, patient: models.Patient, c?: any, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
         preferredSfk?: string;
     }): Promise<models.Classification>;
@@ -39,9 +46,13 @@ export declare class IccClassificationXApi extends IccClassificationApi implemen
      * in the returned array, but in case of entity merges there could be multiple values.
      */
     decryptPatientIdOf(classification: models.Classification): Promise<string[]>;
+    /**
+     * @return if the logged data owner has write access to the content of the given classification
+     */
+    hasWriteAccess(classification: models.Classification): Promise<boolean>;
     /**
      * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the classification.
      * @param classification the classification to share.
      * @param options optional parameters to customize the sharing behaviour:
@@ -50,35 +61,61 @@ export declare class IccClassificationXApi extends IccClassificationApi implemen
      * classification does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated classification.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId: string, classification: models.Classification, options?: {
+        requestedPermissions?: RequestedPermissionEnum;
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<models.Classification>;
     /**
      * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param classification the classification to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * classification does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated classification.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(classification: models.Classification, delegates: {
         [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
             shareEncryptionKey?: ShareMetadataBehaviour;
             sharePatientId?: ShareMetadataBehaviour;
         };
     }): Promise<models.Classification>;
+    /**
+     * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param classification the classification to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * classification does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(classification: models.Classification, delegates: {
+        [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<ShareResult<models.Classification>>;
     getDataOwnersWithAccessTo(entity: models.Classification): Promise<{
         permissionsByDataOwnerId: {
-            [p: string]: 'WRITE';
+            [p: string]: AccessLevelEnum;
         };
         hasUnknownAnonymousDataOwners: boolean;
     }>;
     getEncryptionKeysOf(entity: models.Classification): Promise<string[]>;
+    createDelegationDeAnonymizationMetadata(entity: models.Classification, delegates: string[]): Promise<void>;
 }