@icure/api 7.1.16 → 8.0.0-RC.2

package/icc-x-api/icc-classification-x-api.js

@@ -15,13 +15,19 @@ const models = require("../icc-api/model/models");
 const _ = require("lodash");
 const moment = require("moment");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
 class IccClassificationXApi extends icc_api_1.IccClassificationApi {
-    constructor(host, headers, crypto, dataOwnerApi, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Classification'));
+    }
+    constructor(host, headers, crypto, dataOwnerApi, autofillAuthor, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
         ? window.fetch
         : typeof self !== 'undefined'
             ? self.fetch
             : fetch) {
         super(host, headers, authenticationProvider, fetchImpl);
+        this.autofillAuthor = autofillAuthor;
         this.crypto = crypto;
         this.dataOwnerApi = dataOwnerApi;
     }
@@ -34,8 +40,7 @@ class IccClassificationXApi extends icc_api_1.IccClassificationApi {
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
      * secret id of patient known by the topmost parent in the current data owner hierarchy.
      * @return a new instance of classification.
@@ -43,26 +48,22 @@ class IccClassificationXApi extends icc_api_1.IccClassificationApi {
     newInstance(user, patient, c = {}, options = {}) {
         var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
         return __awaiter(this, void 0, void 0, function* () {
-            const classification = Object.assign(Object.assign({}, (c !== null && c !== void 0 ? c : {})), { _type: 'org.taktik.icure.entities.Classification', id: (_a = c === null || c === void 0 ? void 0 : c.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = c === null || c === void 0 ? void 0 : c.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = c === null || c === void 0 ? void 0 : c.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = c === null || c === void 0 ? void 0 : c.responsible) !== null && _d !== void 0 ? _d : this.dataOwnerApi.getDataOwnerIdOf(user), author: (_e = c === null || c === void 0 ? void 0 : c.author) !== null && _e !== void 0 ? _e : user.id, codes: (_f = c === null || c === void 0 ? void 0 : c.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = c === null || c === void 0 ? void 0 : c.tags) !== null && _g !== void 0 ? _g : [], healthElementId: (_h = c === null || c === void 0 ? void 0 : c.healthElementId) !== null && _h !== void 0 ? _h : this.crypto.primitives.randomUuid(), openingDate: (_j = c === null || c === void 0 ? void 0 : c.openingDate) !== null && _j !== void 0 ? _j : parseInt(moment().format('YYYYMMDDHHmmss')) });
+            const classification = Object.assign(Object.assign({}, (c !== null && c !== void 0 ? c : {})), { _type: 'org.taktik.icure.entities.Classification', id: (_a = c === null || c === void 0 ? void 0 : c.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = c === null || c === void 0 ? void 0 : c.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = c === null || c === void 0 ? void 0 : c.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = c === null || c === void 0 ? void 0 : c.responsible) !== null && _d !== void 0 ? _d : (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined), author: (_e = c === null || c === void 0 ? void 0 : c.author) !== null && _e !== void 0 ? _e : (this.autofillAuthor ? user.id : undefined), codes: (_f = c === null || c === void 0 ? void 0 : c.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = c === null || c === void 0 ? void 0 : c.tags) !== null && _g !== void 0 ? _g : [], healthElementId: (_h = c === null || c === void 0 ? void 0 : c.healthElementId) !== null && _h !== void 0 ? _h : this.crypto.primitives.randomUuid(), openingDate: (_j = c === null || c === void 0 ? void 0 : c.openingDate) !== null && _j !== void 0 ? _j : parseInt(moment().format('YYYYMMDDHHmmss')) });
             const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
             if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
                 throw new Error('Can only initialise entities as current data owner.');
-            const sfk = (_k = options.preferredSfk) !== null && _k !== void 0 ? _k : (yield this.crypto.confidential.getAnySecretIdSharedWithParents(patient));
+            const sfk = (_k = options === null || options === void 0 ? void 0 : options.preferredSfk) !== null && _k !== void 0 ? _k : (yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }));
             if (!sfk)
                 throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`);
-            const extraDelegations = [
-                ...Object.keys((_l = options.additionalDelegates) !== null && _l !== void 0 ? _l : {}),
-                ...((_o = (_m = user.autoDelegations) === null || _m === void 0 ? void 0 : _m.all) !== null && _o !== void 0 ? _o : []),
-                ...((_q = (_p = user.autoDelegations) === null || _p === void 0 ? void 0 : _p.medicalInformation) !== null && _q !== void 0 ? _q : []),
-            ];
-            return new models.Classification(yield this.crypto.entities
-                .entityWithInitialisedEncryptedMetadata(classification, patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, extraDelegations)
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries([...((_m = (_l = user.autoDelegations) === null || _l === void 0 ? void 0 : _l.all) !== null && _m !== void 0 ? _m : []), ...((_p = (_o = user.autoDelegations) === null || _o === void 0 ? void 0 : _o.medicalInformation) !== null && _p !== void 0 ? _p : [])].map((d) => [d, AccessLevelEnum.WRITE]))), ((_q = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _q !== void 0 ? _q : {}));
+            return new models.Classification(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(classification, 'Classification', patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, false, extraDelegations)
                 .then((x) => x.updatedEntity));
         });
     }
     findBy(hcpartyId, patient) {
         return __awaiter(this, void 0, void 0, function* () {
-            const extractedKeys = yield this.crypto.entities.secretIdsOf(patient, hcpartyId);
+            const extractedKeys = yield this.crypto.xapi.secretIdsOf({ entity: patient, type: 'Patient' }, hcpartyId);
             const topmostParentId = (yield this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0];
             return extractedKeys && extractedKeys.length > 0
                 ? this.findClassificationsByHCPartyPatientForeignKeys(topmostParentId, _.uniq(extractedKeys).join(','))
@@ -76,12 +77,20 @@ class IccClassificationXApi extends icc_api_1.IccClassificationApi {
      */
     decryptPatientIdOf(classification) {
         return __awaiter(this, void 0, void 0, function* () {
-            return this.crypto.entities.owningEntityIdsOf(classification, undefined);
+            return this.crypto.xapi.owningEntityIdsOf({ entity: classification, type: 'Classification' }, undefined);
+        });
+    }
+    /**
+     * @return if the logged data owner has write access to the content of the given classification
+     */
+    hasWriteAccess(classification) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: classification, type: 'Classification' });
         });
     }
     /**
      * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the classification.
      * @param classification the classification to share.
      * @param options optional parameters to customize the sharing behaviour:
@@ -90,7 +99,8 @@ class IccClassificationXApi extends icc_api_1.IccClassificationApi {
      * classification does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated classification.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId, classification, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -99,41 +109,60 @@ class IccClassificationXApi extends icc_api_1.IccClassificationApi {
     }
     /**
      * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param classification the classification to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * classification does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated classification.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(classification, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(classification, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+            return (yield this.tryShareWithMany(classification, delegates)).updatedEntityOrThrow;
+        });
+    }
+    /**
+     * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param classification the classification to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * classification does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(classification, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(classification, 'Classification');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyClassification(entityWithEncryptionKey) : classification;
+            return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'Classification' }, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
                 delegateId,
                 {
-                    shareEncryptionKey: options.shareEncryptionKey,
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
                     shareOwningEntityIds: options.sharePatientId,
+                    shareSecretIds: undefined,
                 },
-            ])));
-            if (!!extended) {
-                return yield this.modifyClassification(extended);
-            }
-            else
-                return classification;
+            ])), (x) => this.bulkShareClassifications(x));
         });
     }
     getDataOwnersWithAccessTo(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return Promise.resolve({ hasUnknownAnonymousDataOwners: false, permissionsByDataOwnerId: {} });
-        });
+        return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'Classification' });
     }
     getEncryptionKeysOf(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.encryptionKeysOf(entity);
-        });
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Classification' }, undefined);
+    }
+    createDelegationDeAnonymizationMetadata(entity, delegates) {
+        return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'Classification' }, delegates);
     }
 }
 exports.IccClassificationXApi = IccClassificationXApi;

package/icc-x-api/icc-classification-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-classification-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-classification-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAiD;AAGjD,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAEhC,0EAAgG;AAIhG,MAAa,qBAAsB,SAAQ,8BAAoB;IAI7D,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,IAAS,EAAE,EACX,UAGI,EAAE;;;YAEN,MAAM,cAAc,mCACf,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,0CAA0C,EACjD,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACvE,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,EAC5B,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,EACnB,eAAe,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,eAAe,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAC1E,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAC3E,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7G,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,cAAc,CAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAChG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,MAAM,CAAC,SAAiB,EAAE,OAAuB;;YACrD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAChF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IACD;;;;OAIG;IACG,kBAAkB,CAAC,cAAqC;;YAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QAC1E,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,cAAqC,EACrC,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;KAAA;IACD;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,cAAqC,EACrC,SAKC;;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CACjF,cAAc,EACd,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,oBAAoB,EAAE,OAAO,CAAC,cAAc;iBAC7C;aACF,CAAC,CACH,CACF,CAAA;YACD,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;aACjD;;gBAAM,OAAO,cAAc,CAAA;QAC9B,CAAC;KAAA;IAEK,yBAAyB,CAC7B,MAA6B;;YAE7B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,6BAA6B,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAAC,CAAA;QAChG,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAA6B;;YACrD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AAlKD,sDAkKC","sourcesContent":["import { IccClassificationApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccClassificationXApi extends IccClassificationApi implements EncryptedEntityXApi<models.Classification> {\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of classification with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this classification refers to.\n   * @param c initialised data for the classification. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of classification.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    c: any = {},\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.Classification> {\n    const classification = {\n      ...(c ?? {}),\n      _type: 'org.taktik.icure.entities.Classification',\n      id: c?.id ?? this.crypto.primitives.randomUuid(),\n      created: c?.created ?? new Date().getTime(),\n      modified: c?.modified ?? new Date().getTime(),\n      responsible: c?.responsible ?? this.dataOwnerApi.getDataOwnerIdOf(user),\n      author: c?.author ?? user.id,\n      codes: c?.codes ?? [],\n      tags: c?.tags ?? [],\n      healthElementId: c?.healthElementId ?? this.crypto.primitives.randomUuid(),\n      openingDate: c?.openingDate ?? parseInt(moment().format('YYYYMMDDHHmmss')),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents(patient))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new models.Classification(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(classification, patient?.id, sfk, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async findBy(hcpartyId: string, patient: models.Patient) {\n    const extractedKeys = await this.crypto.entities.secretIdsOf(patient, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? this.findClassificationsByHCPartyPatientForeignKeys(topmostParentId, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n  /**\n   * @param classification a classification\n   * @return the id of the patient that the classification refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(classification: models.Classification): Promise<string[]> {\n    return this.crypto.entities.owningEntityIdsOf(classification, undefined)\n  }\n\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the classification.\n   * @param classification the classification to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated classification.\n   */\n  async shareWith(\n    delegateId: string,\n    classification: models.Classification,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Classification> {\n    return this.shareWithMany(classification, { [delegateId]: options })\n  }\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content.\n   * @param classification the classification to share.\n   * @param delegates sharing options for each delegate.\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * @return a promise which will contain the updated classification.\n   */\n  async shareWithMany(\n    classification: models.Classification,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Classification> {\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(\n      classification,\n      true,\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            shareEncryptionKey: options.shareEncryptionKey,\n            shareOwningEntityIds: options.sharePatientId,\n          },\n        ])\n      )\n    )\n    if (!!extended) {\n      return await this.modifyClassification(extended)\n    } else return classification\n  }\n\n  async getDataOwnersWithAccessTo(\n    entity: models.Classification\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: 'WRITE' }; hasUnknownAnonymousDataOwners: boolean }> {\n    return Promise.resolve({ hasUnknownAnonymousDataOwners: false, permissionsByDataOwnerId: {} })\n  }\n\n  async getEncryptionKeysOf(entity: models.Classification): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}
+{"version":3,"file":"icc-classification-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-classification-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAiD;AAGjD,kDAAiD;AAEjD,4BAA2B;AAC3B,iCAAgC;AAEhC,0EAAgG;AAChG,wEAAoE;AAIpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAMzD,MAAa,qBAAsB,SAAQ,8BAAoB;IAI7D,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACzH,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EAClC,MAAqB,EACrB,YAA8B,EACb,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QARtC,mBAAc,GAAd,cAAc,CAAS;QASxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACG,WAAW,CACf,IAAiB,EACjB,OAAuB,EACvB,IAAS,EAAE,EACX,UAGI,EAAE;;;YAEN,MAAM,cAAc,mCACf,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,0CAA0C,EACjD,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,EACnB,eAAe,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,eAAe,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAC1E,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAC3E,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YAC3I,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAClF,MAAM,gBAAgB,mCACjB,MAAM,CAAC,WAAW,CACnB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,GACE,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,cAAc,CAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBACzH,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,MAAM,CAAC,SAAiB,EAAE,OAAuB;;YACrD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAA;YACzG,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,OAAO,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,cAAqC;;YAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1G,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,cAAqC;;YACxD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAC5F,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,SAAS,CACb,UAAkB,EAClB,cAAqC,EACrC,UAII,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,aAAa,CACjB,cAAqC,EACrC,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACtF,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,cAAqC,EACrC,SAMC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;YACxH,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAA;YACzH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAChE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACjD,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CACxC,CAAA;QACH,CAAC;KAAA;IAED,yBAAyB,CACvB,MAA6B;QAE7B,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC7G,CAAC;IAED,mBAAmB,CAAC,MAA6B;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAA;IACzF,CAAC;IAED,uCAAuC,CAAC,MAA6B,EAAE,SAAmB;QACxF,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAA;IAChI,CAAC;CACF;AAtND,sDAsNC","sourcesContent":["import { IccClassificationApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as models from '../icc-api/model/models'\n\nimport * as _ from 'lodash'\nimport * as moment from 'moment'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { AccessLog } from '../icc-api/model/models'\n\nexport class IccClassificationXApi extends IccClassificationApi implements EncryptedEntityXApi<models.Classification> {\n  crypto: IccCryptoXApi\n  dataOwnerApi: IccDataOwnerXApi\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Classification'))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.crypto = crypto\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of classification with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this classification refers to.\n   * @param c initialised data for the classification. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of classification.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient,\n    c: any = {},\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      preferredSfk?: string\n    } = {}\n  ): Promise<models.Classification> {\n    const classification = {\n      ...(c ?? {}),\n      _type: 'org.taktik.icure.entities.Classification',\n      id: c?.id ?? this.crypto.primitives.randomUuid(),\n      created: c?.created ?? new Date().getTime(),\n      modified: c?.modified ?? new Date().getTime(),\n      responsible: c?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: c?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: c?.codes ?? [],\n      tags: c?.tags ?? [],\n      healthElementId: c?.healthElementId ?? this.crypto.primitives.randomUuid(),\n      openingDate: c?.openingDate ?? parseInt(moment().format('YYYYMMDDHHmmss')),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = options?.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))\n    if (!sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n    const extraDelegations = {\n      ...Object.fromEntries(\n        [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n      ),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    return new models.Classification(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(classification, 'Classification', patient?.id, sfk, true, false, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async findBy(hcpartyId: string, patient: models.Patient) {\n    const extractedKeys = await this.crypto.xapi.secretIdsOf({ entity: patient, type: 'Patient' }, hcpartyId)\n    const topmostParentId = (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())[0]\n    return extractedKeys && extractedKeys.length > 0\n      ? this.findClassificationsByHCPartyPatientForeignKeys(topmostParentId, _.uniq(extractedKeys).join(','))\n      : Promise.resolve([])\n  }\n\n  /**\n   * @param classification a classification\n   * @return the id of the patient that the classification refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(classification: models.Classification): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: classification, type: 'Classification' }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given classification\n   */\n  async hasWriteAccess(classification: models.Classification): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: classification, type: 'Classification' })\n  }\n\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the classification.\n   * @param classification the classification to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    classification: models.Classification,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Classification> {\n    return this.shareWithMany(classification, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param classification the classification to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    classification: models.Classification,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Classification> {\n    return (await this.tryShareWithMany(classification, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing classification with other data owners, allowing them to access the non-encrypted data of the classification and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param classification the classification to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * classification does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this classification refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    classification: models.Classification,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Classification>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(classification, 'Classification')\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyClassification(entityWithEncryptionKey) : classification\n    return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata(\n      { entity: updatedEntity, type: 'Classification' },\n      true,\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            requestedPermissions: options.requestedPermissions,\n            shareEncryptionKeys: options.shareEncryptionKey,\n            shareOwningEntityIds: options.sharePatientId,\n            shareSecretIds: undefined,\n          },\n        ])\n      ),\n      (x) => this.bulkShareClassifications(x)\n    )\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.Classification\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'Classification' })\n  }\n\n  getEncryptionKeysOf(entity: models.Classification): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Classification' }, undefined)\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: models.Classification, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'Classification' }, delegates)\n  }\n}\n"]}

package/icc-x-api/icc-contact-x-api.d.ts

@@ -6,35 +6,31 @@ import { PaginatedListContact } from '../icc-api/model/PaginatedListContact';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { SubscriptionOptions } from './utils';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
+import { SecureDelegation } from '../icc-api/model/SecureDelegation';
+import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { ShareResult } from './utils/ShareResult';
+import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest';
+import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { XHR } from '../icc-api/api/XHR';
+import { IccUserXApi } from './icc-user-x-api';
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
-import { AbstractFilter } from "./filters/filters";
-import { IccUserXApi } from "./icc-user-x-api";
-import { Connection } from "../icc-api/model/Connection";
+import { AbstractFilter } from './filters/filters';
+import { Connection } from '../icc-api/model/Connection';
 export declare class IccContactXApi extends IccContactApi implements EncryptedEntityXApi<models.Contact> {
-    i18n: any;
-    crypto: IccCryptoXApi;
-    dataOwnerApi: IccDataOwnerXApi;
+    private readonly crypto;
+    private readonly dataOwnerApi;
     private readonly userApi;
     private readonly authApi;
+    private readonly autofillAuthor;
+    i18n: any;
     private readonly contactEncryptedFields;
     private readonly serviceEncryptedFieldsNoContent;
     private readonly serviceEncryptedFieldsWithContent;
-    /**
-     *
-     * @param host
-     * @param headers
-     * @param crypto
-     * @param dataOwnerApi
-     * @param authenticationProvider
-     * @param fetchImpl
-     * @param contactEncryptedKeys custom encrypted fields for Contact. Note that to customise the encryption of contained services (`services` field),
-     * you need to use the serviceEncryptedKeys parameter.
-     * @param serviceEncryptedKeys custom encrypted fields for Service. Note that you can't customise encryption of the `content` field
-     */
+    get headers(): Promise<Array<XHR.Header>>;
     constructor(host: string, headers: {
         [key: string]: string;
-    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, userApi: IccUserXApi, authApi: IccAuthApi, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>, contactEncryptedKeys?: string[], serviceEncryptedKeys?: string[]);
+    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, userApi: IccUserXApi, authApi: IccAuthApi, autofillAuthor: boolean, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>, contactEncryptedKeys?: string[], serviceEncryptedKeys?: string[]);
     /**
      * Creates a new instance of contact with initialised encryption metadata (not in the database).
      * @param user the current user.
@@ -44,17 +40,17 @@ export declare class IccContactXApi extends IccContactApi implements EncryptedEn
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
-     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the classification. The default value will be a
-     * secret id of patient known by the topmost parent in the current data owner hierarchy.
+     * auto-delegations, in such case the access level specified here will be used.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the contact. The default value will be a
+     * secret id of patient known by the topmost parent in the current data owner hierarchy if the confidential is set to false, else a secret id that
+     * the data owner did not share with any of his parents.
      * - confidential: if true, the entity will be created as confidential. Confidential entities are not shared with auto-delegations, and the default
      * foreign key used is any key that is not shared with any of the data owner parents. By default entities are created as non-confidential.
      * @return a new instance of contact.
      */
     newInstance(user: models.User, patient: models.Patient, c: any, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
         preferredSfk?: string;
         confidential?: boolean;
@@ -98,7 +94,7 @@ export declare class IccContactXApi extends IccContactApi implements EncryptedEn
     getContactWithUser(user: models.User, contactId: string): Promise<models.Contact>;
     getContactsWithUser(user: models.User, body?: models.ListOfIds): Promise<Array<models.Contact> | any>;
     modifyContactWithUser(user: models.User, body?: models.Contact): Promise<models.Contact | any>;
-    private modifyAs;
+    private modifyContactAs;
     modifyContactsWithUser(user: models.User, bodies?: Array<models.Contact>): Promise<models.Contact[] | any>;
     createContactWithUser(user: models.User, body?: models.Contact): Promise<models.Contact | null>;
     createContactsWithUser(user: models.User, bodies?: Array<models.Contact>): Promise<models.Contact[] | null>;
@@ -170,9 +166,13 @@ export declare class IccContactXApi extends IccContactApi implements EncryptedEn
      * in the returned array, but in case of entity merges there could be multiple values.
      */
     decryptPatientIdOf(contact: models.Contact): Promise<string[]>;
+    /**
+     * @return if the logged data owner has write access to the content of the given contact
+     */
+    hasWriteAccess(contact: models.Contact): Promise<boolean>;
     /**
      * Share an existing contact with other data owners, allowing them to access the non-encrypted data of the contact and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the contact.
      * @param contact the contact to share.
      * @param options optional parameters to customize the sharing behaviour:
@@ -181,37 +181,63 @@ export declare class IccContactXApi extends IccContactApi implements EncryptedEn
      * contact does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this contact refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated contact.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId: string, contact: models.Contact, options?: {
+        requestedPermissions?: RequestedPermissionEnum;
         shareEncryptionKey?: ShareMetadataBehaviour;
         sharePatientId?: ShareMetadataBehaviour;
     }): Promise<models.Contact>;
     /**
      * Share an existing contact with other data owners, allowing them to access the non-encrypted data of the contact and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param contact the contact to share.
-     * @param delegates share options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * contact does not have encrypted content.
      * - sharePatientId: specifies if the id of the patient that this contact refers to should be shared with the delegate (defaults to
      * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
-     * @return a promise which will contain the updated contact.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(contact: models.Contact, delegates: {
         [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
             shareEncryptionKey?: ShareMetadataBehaviour;
             sharePatientId?: ShareMetadataBehaviour;
         };
     }): Promise<models.Contact>;
-    getDataOwnersWithAccessTo(entity: Contact): Promise<{
+    /**
+     * Share an existing contact with other data owners, allowing them to access the non-encrypted data of the contact and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param contact the contact to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * contact does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this contact refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(contact: models.Contact, delegates: {
+        [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
+            shareEncryptionKey?: ShareMetadataBehaviour;
+            sharePatientId?: ShareMetadataBehaviour;
+        };
+    }): Promise<ShareResult<models.Contact>>;
+    getDataOwnersWithAccessTo(entity: models.Contact): Promise<{
         permissionsByDataOwnerId: {
-            [p: string]: 'WRITE';
+            [p: string]: AccessLevelEnum;
         };
         hasUnknownAnonymousDataOwners: boolean;
     }>;
-    getEncryptionKeysOf(entity: Contact): Promise<string[]>;
+    getEncryptionKeysOf(entity: models.Contact): Promise<string[]>;
     subscribeToServiceEvents(eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[], filter: AbstractFilter<Service> | undefined, eventFired: (dataSample: Service) => Promise<void>, options?: SubscriptionOptions): Promise<Connection>;
     subscribeToContactEvents(eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[], filter: AbstractFilter<Contact> | undefined, eventFired: (dataSample: Contact) => Promise<void>, options?: SubscriptionOptions): Promise<Connection>;
+    createDelegationDeAnonymizationMetadata(entity: Contact, delegates: string[]): Promise<void>;
 }