@icure/api 7.1.16 → 8.0.0-RC.2

package/icc-x-api/icc-receipt-x-api.d.ts

@@ -4,13 +4,21 @@ import * as models from '../icc-api/model/models';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { ShareResult } from './utils/ShareResult';
+import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest';
+import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { SecureDelegation } from '../icc-api/model/SecureDelegation';
+import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
+import { XHR } from '../icc-api/api/XHR';
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
 export declare class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {
-    private crypto;
-    dataOwnerApi: IccDataOwnerXApi;
+    private readonly crypto;
+    private readonly dataOwnerApi;
+    private readonly autofillAuthor;
+    get headers(): Promise<Array<XHR.Header>>;
     constructor(host: string, headers: {
         [key: string]: string;
-    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
+    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, autofillAuthor: boolean, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
     /**
      * Creates a new instance of receipt with initialised encryption metadata (not in the database).
      * @param user the current user.
@@ -19,13 +27,12 @@ export declare class IccReceiptXApi extends IccReceiptApi implements EncryptedEn
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * @return a new instance of receipt.
      */
     newInstance(user: models.User, r: any, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
     }): Promise<models.Receipt>;
     logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer): Promise<models.Receipt>;
@@ -46,7 +53,7 @@ export declare class IccReceiptXApi extends IccReceiptApi implements EncryptedEn
      */
     setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt>;
     /**
-     * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt, throwing an error if the operation fails.
+     * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.
      * @param receipt a receipt.
      * @param attachmentId id of the attachment of this receipt to retrieve.
      * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption
@@ -68,40 +75,67 @@ export declare class IccReceiptXApi extends IccReceiptApi implements EncryptedEn
         data: ArrayBuffer;
         wasDecrypted: boolean;
     }>;
+    /**
+     * @return if the logged data owner has write access to the content of the given receipt
+     */
+    hasWriteAccess(receipt: models.Receipt): Promise<boolean>;
     /**
      * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the receipt.
      * @param receipt the receipt to share.
      * @param options optional parameters to customize the sharing behaviour:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * receipt does not have encrypted content.
-     * @return a promise which will contain the updated receipt.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId: string, receipt: models.Receipt, options?: {
+        requestedPermissions?: RequestedPermissionEnum;
         shareEncryptionKey?: ShareMetadataBehaviour;
     }): Promise<models.Receipt>;
     /**
      * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param receipt the receipt to share.
-     * @param delegates sharing options for each delegate which will gain access to the entity:
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * receipt does not have encrypted content.
-     * @return a promise which will contain the updated receipt.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(receipt: models.Receipt, delegates: {
         [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
             shareEncryptionKey?: ShareMetadataBehaviour;
         };
     }): Promise<models.Receipt>;
+    /**
+     * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param receipt the receipt to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * receipt does not have encrypted content.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(receipt: models.Receipt, delegates: {
+        [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
+            shareEncryptionKey?: ShareMetadataBehaviour;
+        };
+    }): Promise<ShareResult<models.Receipt>>;
     getDataOwnersWithAccessTo(entity: models.Receipt): Promise<{
         permissionsByDataOwnerId: {
-            [dataOwnerId: string]: 'WRITE';
+            [p: string]: AccessLevelEnum;
         };
         hasUnknownAnonymousDataOwners: boolean;
     }>;
     getEncryptionKeysOf(entity: models.Receipt): Promise<string[]>;
+    createDelegationDeAnonymizationMetadata(entity: models.Receipt, delegates: string[]): Promise<void>;
 }

package/icc-x-api/icc-receipt-x-api.js

@@ -13,8 +13,14 @@ exports.IccReceiptXApi = void 0;
 const icc_api_1 = require("../icc-api");
 const models = require("../icc-api/model/models");
 const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
+const ShareMetadataBehaviour_1 = require("./crypto/ShareMetadataBehaviour");
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
 class IccReceiptXApi extends icc_api_1.IccReceiptApi {
-    constructor(host, headers, crypto, dataOwnerApi, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Receipt'));
+    }
+    constructor(host, headers, crypto, dataOwnerApi, autofillAuthor, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), fetchImpl = typeof window !== 'undefined'
         ? window.fetch
         : typeof self !== 'undefined'
             ? self.fetch
@@ -22,6 +28,8 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
         super(host, headers, authenticationProvider, fetchImpl);
         this.crypto = crypto;
         this.dataOwnerApi = dataOwnerApi;
+        this.autofillAuthor = autofillAuthor;
+        this.dataOwnerApi = dataOwnerApi;
     }
     /**
      * Creates a new instance of receipt with initialised encryption metadata (not in the database).
@@ -31,28 +39,23 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * @return a new instance of receipt.
      */
     newInstance(user, r, options = {}) {
         var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
         return __awaiter(this, void 0, void 0, function* () {
-            const receipt = new models.Receipt(Object.assign(Object.assign({}, (r !== null && r !== void 0 ? r : {})), { _type: 'org.taktik.icure.entities.Receipt', id: (_a = r === null || r === void 0 ? void 0 : r.id) !== null && _a !== void 0 ? _a : this.crypto.randomUuid(), created: (_b = r === null || r === void 0 ? void 0 : r.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = r === null || r === void 0 ? void 0 : r.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = r === null || r === void 0 ? void 0 : r.responsible) !== null && _d !== void 0 ? _d : this.dataOwnerApi.getDataOwnerIdOf(user), author: (_e = r === null || r === void 0 ? void 0 : r.author) !== null && _e !== void 0 ? _e : user.id, codes: (_f = r === null || r === void 0 ? void 0 : r.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = r === null || r === void 0 ? void 0 : r.tags) !== null && _g !== void 0 ? _g : [] }));
-            const extraDelegations = [
-                ...Object.keys((_h = options.additionalDelegates) !== null && _h !== void 0 ? _h : {}),
-                ...((_k = (_j = user.autoDelegations) === null || _j === void 0 ? void 0 : _j.all) !== null && _k !== void 0 ? _k : []),
-                ...((_m = (_l = user.autoDelegations) === null || _l === void 0 ? void 0 : _l.medicalInformation) !== null && _m !== void 0 ? _m : []),
-            ];
-            return new models.Receipt(yield this.crypto.entities
-                .entityWithInitialisedEncryptedMetadata(receipt, undefined, undefined, true, extraDelegations)
+            const receipt = new models.Receipt(Object.assign(Object.assign({}, (r !== null && r !== void 0 ? r : {})), { _type: 'org.taktik.icure.entities.Receipt', id: (_a = r === null || r === void 0 ? void 0 : r.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), created: (_b = r === null || r === void 0 ? void 0 : r.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = r === null || r === void 0 ? void 0 : r.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = r === null || r === void 0 ? void 0 : r.responsible) !== null && _d !== void 0 ? _d : (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined), author: (_e = r === null || r === void 0 ? void 0 : r.author) !== null && _e !== void 0 ? _e : (this.autofillAuthor ? user.id : undefined), codes: (_f = r === null || r === void 0 ? void 0 : r.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = r === null || r === void 0 ? void 0 : r.tags) !== null && _g !== void 0 ? _g : [] }));
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries([...((_j = (_h = user.autoDelegations) === null || _h === void 0 ? void 0 : _h.all) !== null && _j !== void 0 ? _j : []), ...((_l = (_k = user.autoDelegations) === null || _k === void 0 ? void 0 : _k.medicalInformation) !== null && _l !== void 0 ? _l : [])].map((d) => [d, AccessLevelEnum.WRITE]))), ((_m = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _m !== void 0 ? _m : {}));
+            return new models.Receipt(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(receipt, 'Receipt', undefined, undefined, true, false, extraDelegations)
                 .then((x) => x.updatedEntity));
         });
     }
     logReceipt(user, docId, refs, blobType, blob) {
         return this.newInstance(user, { documentId: docId, references: refs })
             .then((rcpt) => this.createReceipt(rcpt))
-            .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachment(rcpt.id, blobType, '', blob) : Promise.resolve(rcpt)));
+            .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachmentForBlobType(rcpt.id, rcpt.rev, blobType, blob) : Promise.resolve(rcpt)));
     }
     /**
      * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.
@@ -62,9 +65,10 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
      * @return the updated receipt.
      */
     encryptAndSetReceiptAttachment(receipt, blobType, attachment) {
+        var _a;
         return __awaiter(this, void 0, void 0, function* () {
-            const encryptedData = yield this.crypto.entities.encryptDataOf(receipt, attachment);
-            return yield this.setReceiptAttachment(receipt.id, blobType, undefined, encryptedData);
+            const { encryptedData, updatedEntity } = yield this.crypto.xapi.encryptDataOf(receipt, 'Receipt', attachment, (r) => this.modifyReceipt(r));
+            return yield this.setReceiptAttachmentForBlobType(receipt.id, (_a = updatedEntity === null || updatedEntity === void 0 ? void 0 : updatedEntity.rev) !== null && _a !== void 0 ? _a : receipt.rev, blobType, encryptedData);
         });
     }
     /**
@@ -76,11 +80,11 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
      */
     setClearReceiptAttachment(receipt, blobType, attachment) {
         return __awaiter(this, void 0, void 0, function* () {
-            return yield this.setReceiptAttachment(receipt.id, blobType, undefined, attachment);
+            return yield this.setReceiptAttachmentForBlobType(receipt.id, receipt.rev, blobType, attachment);
         });
     }
     /**
-     * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt, throwing an error if the operation fails.
+     * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.
      * @param receipt a receipt.
      * @param attachmentId id of the attachment of this receipt to retrieve.
      * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption
@@ -89,10 +93,10 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
      */
     getAndDecryptReceiptAttachment(receipt, attachmentId, validator = () => Promise.resolve(true)) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { data, wasDecrypted } = yield this.crypto.entities.tryDecryptDataOf(receipt, yield this.getReceiptAttachment(receipt.id, attachmentId, ''), (x) => validator(x));
-            if (!wasDecrypted)
+            const retrieved = yield this.getAndTryDecryptReceiptAttachment(receipt, attachmentId, (x) => validator(x));
+            if (!retrieved.wasDecrypted)
                 throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`);
-            return data;
+            return retrieved.data;
         });
     }
     /**
@@ -107,19 +111,28 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
      */
     getAndTryDecryptReceiptAttachment(receipt, attachmentId, validator = () => Promise.resolve(true)) {
         return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.tryDecryptDataOf(receipt, yield this.getReceiptAttachment(receipt.id, attachmentId, ''), (x) => validator(x));
+            return yield this.crypto.xapi.tryDecryptDataOf({ entity: receipt, type: 'Receipt' }, yield this.getReceiptAttachment(receipt.id, attachmentId), (x) => validator(x));
+        });
+    }
+    /**
+     * @return if the logged data owner has write access to the content of the given receipt
+     */
+    hasWriteAccess(receipt) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: receipt, type: 'Receipt' });
         });
     }
     /**
      * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param delegateId the id of the data owner which will be granted access to the receipt.
      * @param receipt the receipt to share.
      * @param options optional parameters to customize the sharing behaviour:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * receipt does not have encrypted content.
-     * @return a promise which will contain the updated receipt.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId, receipt, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -128,33 +141,56 @@ class IccReceiptXApi extends icc_api_1.IccReceiptApi {
     }
     /**
      * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also
-     * the encrypted content.
+     * the encrypted content, with read-only or read-write permissions.
      * @param receipt the receipt to share.
-     * @param delegates sharing options for each delegate which will gain access to the entity:
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * receipt does not have encrypted content.
-     * @return a promise which will contain the updated receipt.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(receipt, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            const extended = yield this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(receipt, true, delegates);
-            if (!!extended) {
-                return yield this.modifyReceipt(extended);
-            }
-            else
-                return receipt;
+            return (yield this.tryShareWithMany(receipt, delegates)).updatedEntityOrThrow;
         });
     }
-    getDataOwnersWithAccessTo(entity) {
+    /**
+     * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param receipt the receipt to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * receipt does not have encrypted content.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(receipt, delegates) {
         return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.getDataOwnersWithAccessTo(entity);
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(receipt, 'Receipt');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyReceipt(entityWithEncryptionKey) : receipt;
+            return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'Receipt' }, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+                delegateId,
+                {
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
+                    shareOwningEntityIds: ShareMetadataBehaviour_1.ShareMetadataBehaviour.NEVER,
+                    shareSecretIds: undefined,
+                },
+            ])), (x) => this.bulkShareReceipt(x));
         });
     }
+    getDataOwnersWithAccessTo(entity) {
+        return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'Receipt' });
+    }
     getEncryptionKeysOf(entity) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.crypto.entities.encryptionKeysOf(entity);
-        });
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Receipt' }, undefined);
+    }
+    createDelegationDeAnonymizationMetadata(entity, delegates) {
+        return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'Receipt' }, delegates);
     }
 }
 exports.IccReceiptXApi = IccReceiptXApi;

package/icc-x-api/icc-receipt-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-receipt-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-receipt-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAG1C,kDAAiD;AAEjD,0EAAgG;AAIhG,MAAa,cAAe,SAAQ,uBAAa;IAG/C,YACE,IAAY,EACZ,OAAkC,EAC1B,MAAqB,EAC7B,YAA8B,EAC9B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAT/C,WAAM,GAAN,MAAM,CAAe;QAU7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;;OAWG;IACG,WAAW,CACf,IAAiB,EACjB,CAAM,EACN,UAEI,EAAE;;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,iCAC7B,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,mCAAmC,EAC1C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EACrC,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACvE,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,IAAI,CAAC,EAAE,EAC5B,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,IACnB,CAAA;YAEF,MAAM,gBAAgB,GAAG;gBACvB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,mBAAmB,mCAAI,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;aACpD,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACvB,sCAAsC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC;iBAC7F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,UAAU,CAAC,IAAiB,EAAE,KAAa,EAAE,IAAmB,EAAE,QAAgB,EAAE,IAAiB;QACnG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAG,EAAE,QAAQ,EAAE,EAAE,EAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClI,CAAC;IAED;;;;;;OAMG;IACG,8BAA8B,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAClH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YACnF,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QACzF,CAAC;KAAA;IAED;;;;;;OAMG;IACG,yBAAyB,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAC7G,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;QACtF,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,8BAA8B,CAClC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CACxE,OAAO,EACP,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CACpB,CAAA;YACD,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAClG,OAAO,IAAI,CAAA;QACb,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,iCAAiC,CACrC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAClJ,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,SAAS,CACb,UAAkB,EAClB,OAAuB,EACvB,UAEI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,OAAuB,EACvB,SAIC;;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YAC7G,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACd,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;aAC1C;;gBAAM,OAAO,OAAO,CAAA;QACvB,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAAsB;;YAIpD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;KAAA;IAEK,mBAAmB,CAAC,MAAsB;;YAC9C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;KAAA;CACF;AA1LD,wCA0LC","sourcesContent":["import { IccReceiptApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\n\nexport class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {\n  dataOwnerApi: IccDataOwnerXApi\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private crypto: IccCryptoXApi,\n    dataOwnerApi: IccDataOwnerXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of receipt with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param r initialised data for the receipt. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read\n   * access will be possible.\n   * @return a new instance of receipt.\n   */\n  async newInstance(\n    user: models.User,\n    r: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: 'WRITE' }\n    } = {}\n  ): Promise<models.Receipt> {\n    const receipt = new models.Receipt({\n      ...(r ?? {}),\n      _type: 'org.taktik.icure.entities.Receipt',\n      id: r?.id ?? this.crypto.randomUuid(),\n      created: r?.created ?? new Date().getTime(),\n      modified: r?.modified ?? new Date().getTime(),\n      responsible: r?.responsible ?? this.dataOwnerApi.getDataOwnerIdOf(user),\n      author: r?.author ?? user.id,\n      codes: r?.codes ?? [],\n      tags: r?.tags ?? [],\n    })\n\n    const extraDelegations = [\n      ...Object.keys(options.additionalDelegates ?? {}),\n      ...(user.autoDelegations?.all ?? []),\n      ...(user.autoDelegations?.medicalInformation ?? []),\n    ]\n    return new models.Receipt(\n      await this.crypto.entities\n        .entityWithInitialisedEncryptedMetadata(receipt, undefined, undefined, true, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer) {\n    return this.newInstance(user, { documentId: docId, references: refs })\n      .then((rcpt) => this.createReceipt(rcpt))\n      .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachment(rcpt.id!, blobType, '', <any>blob) : Promise.resolve(rcpt)))\n  }\n\n  /**\n   * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async encryptAndSetReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    const encryptedData = await this.crypto.entities.encryptDataOf(receipt, attachment)\n    return await this.setReceiptAttachment(receipt.id!, blobType, undefined, encryptedData)\n  }\n\n  /**\n   * Adds an unencrypted attachment to a receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    return await this.setReceiptAttachment(receipt.id!, blobType, undefined, attachment)\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt, throwing an error if the operation fails.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   */\n  async getAndDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const { data, wasDecrypted } = await this.crypto.entities.tryDecryptDataOf(\n      receipt,\n      await this.getReceiptAttachment(receipt.id!, attachmentId, ''),\n      (x) => validator(x)\n    )\n    if (!wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return data\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return an object containing:\n   * - data: the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   * - wasDecrypted: if the data was successfully decrypted or not\n   */\n  async getAndTryDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    return await this.crypto.entities.tryDecryptDataOf(receipt, await this.getReceiptAttachment(receipt.id!, attachmentId, ''), (x) => validator(x))\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content.\n   * @param delegateId the id of the data owner which will be granted access to the receipt.\n   * @param receipt the receipt to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * @return a promise which will contain the updated receipt.\n   */\n  async shareWith(\n    delegateId: string,\n    receipt: models.Receipt,\n    options: {\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Receipt> {\n    return this.shareWithMany(receipt, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content.\n   * @param receipt the receipt to share.\n   * @param delegates sharing options for each delegate which will gain access to the entity:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * @return a promise which will contain the updated receipt.\n   */\n  async shareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Receipt> {\n    const extended = await this.crypto.entities.entityWithAutoExtendedEncryptedMetadata(receipt, true, delegates)\n    if (!!extended) {\n      return await this.modifyReceipt(extended)\n    } else return receipt\n  }\n\n  async getDataOwnersWithAccessTo(entity: models.Receipt): Promise<{\n    permissionsByDataOwnerId: { [dataOwnerId: string]: 'WRITE' }\n    hasUnknownAnonymousDataOwners: boolean\n  }> {\n    return await this.crypto.entities.getDataOwnersWithAccessTo(entity)\n  }\n\n  async getEncryptionKeysOf(entity: models.Receipt): Promise<string[]> {\n    return await this.crypto.entities.encryptionKeysOf(entity)\n  }\n}\n"]}
+{"version":3,"file":"icc-receipt-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-receipt-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAG1C,kDAAiD;AAEjD,0EAAgG;AAChG,4EAAwE;AAIxE,wEAAoE;AACpE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAKzD,MAAa,cAAe,SAAQ,uBAAa;IAC/C,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;IAClH,CAAC;IAED,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAVtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,mBAAc,GAAd,cAAc,CAAS;QASxC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IAClC,CAAC;IAED;;;;;;;;;;OAUG;IACG,WAAW,CACf,IAAiB,EACjB,CAAM,EACN,UAEI,EAAE;;;YAEN,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,iCAC7B,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,KAAK,EAAE,mCAAmC,EAC1C,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,IACnB,CAAA;YAEF,MAAM,gBAAgB,mCACjB,MAAM,CAAC,WAAW,CACnB,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CACnI,GACE,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBAC/G,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAED,UAAU,CAAC,IAAiB,EAAE,KAAa,EAAE,IAAmB,EAAE,QAAgB,EAAE,IAAiB;QACnG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,EAAG,EAAE,IAAI,CAAC,GAAI,EAAE,QAAQ,EAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpJ,CAAC;IAED;;;;;;OAMG;IACG,8BAA8B,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;;YAClH,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3I,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EAAG,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,GAAG,mCAAI,OAAO,CAAC,GAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;;KAC5H;IAED;;;;;;OAMG;IACG,yBAAyB,CAAC,OAAuB,EAAE,QAAgB,EAAE,UAAoC;;YAC7G,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EAAG,EAAE,OAAO,CAAC,GAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;QACpG,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,8BAA8B,CAClC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1G,IAAI,CAAC,SAAS,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5G,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,iCAAiC,CACrC,OAAuB,EACvB,YAAoB,EACpB,YAA0D,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;YAErF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC5C,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EACpC,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAG,EAAE,YAAY,CAAC,EAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CACpB,CAAA;QACH,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,OAAuB;;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QAC9E,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,UAAkB,EAClB,OAAuB,EACvB,UAGI,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;KAAA;IAED;;;;;;;;;;OAUG;IACG,aAAa,CACjB,OAAuB,EACvB,SAKC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QAC/E,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACG,gBAAgB,CACpB,OAAuB,EACvB,SAKC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAC1G,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAChE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,EAC1C,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,+CAAsB,CAAC,KAAK;oBAClD,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAChC,CAAA;QACH,CAAC;KAAA;IAED,yBAAyB,CACvB,MAAsB;QAEtB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IACtG,CAAC;IAED,mBAAmB,CAAC,MAAsB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAA;IAClF,CAAC;IAED,uCAAuC,CAAC,MAAsB,EAAE,SAAmB;QACjF,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAA;IACzH,CAAC;CACF;AAlPD,wCAkPC","sourcesContent":["import { IccReceiptApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { MaintenanceTask } from '../icc-api/model/models'\n\nexport class IccReceiptXApi extends IccReceiptApi implements EncryptedEntityXApi<models.Receipt> {\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Receipt'))\n  }\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.dataOwnerApi = dataOwnerApi\n  }\n\n  /**\n   * Creates a new instance of receipt with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param r initialised data for the receipt. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * @return a new instance of receipt.\n   */\n  async newInstance(\n    user: models.User,\n    r: any,\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n    } = {}\n  ): Promise<models.Receipt> {\n    const receipt = new models.Receipt({\n      ...(r ?? {}),\n      _type: 'org.taktik.icure.entities.Receipt',\n      id: r?.id ?? this.crypto.primitives.randomUuid(),\n      created: r?.created ?? new Date().getTime(),\n      modified: r?.modified ?? new Date().getTime(),\n      responsible: r?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: r?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: r?.codes ?? [],\n      tags: r?.tags ?? [],\n    })\n\n    const extraDelegations = {\n      ...Object.fromEntries(\n        [...(user.autoDelegations?.all ?? []), ...(user.autoDelegations?.medicalInformation ?? [])].map((d) => [d, AccessLevelEnum.WRITE])\n      ),\n      ...(options?.additionalDelegates ?? {}),\n    }\n    return new models.Receipt(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(receipt, 'Receipt', undefined, undefined, true, false, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  logReceipt(user: models.User, docId: string, refs: Array<string>, blobType: string, blob: ArrayBuffer) {\n    return this.newInstance(user, { documentId: docId, references: refs })\n      .then((rcpt) => this.createReceipt(rcpt))\n      .then((rcpt) => (blob.byteLength != 0 ? this.setReceiptAttachmentForBlobType(rcpt.id!, rcpt.rev!, blobType, <any>blob) : Promise.resolve(rcpt)))\n  }\n\n  /**\n   * Adds an attachment to a receipt, encrypting it on client side using the encryption keys of the provided receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async encryptAndSetReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    const { encryptedData, updatedEntity } = await this.crypto.xapi.encryptDataOf(receipt, 'Receipt', attachment, (r) => this.modifyReceipt(r))\n    return await this.setReceiptAttachmentForBlobType(receipt.id!, updatedEntity?.rev ?? receipt.rev!, blobType, encryptedData)\n  }\n\n  /**\n   * Adds an unencrypted attachment to a receipt.\n   * @param receipt a receipt.\n   * @param blobType the type of the attachment.\n   * @param attachment a attachment for the receipt.\n   * @return the updated receipt.\n   */\n  async setClearReceiptAttachment(receipt: models.Receipt, blobType: string, attachment: ArrayBuffer | Uint8Array): Promise<models.Receipt> {\n    return await this.setReceiptAttachmentForBlobType(receipt.id!, receipt.rev!, blobType, attachment)\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   */\n  async getAndDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<ArrayBuffer> {\n    const retrieved = await this.getAndTryDecryptReceiptAttachment(receipt, attachmentId, (x) => validator(x))\n    if (!retrieved.wasDecrypted) throw new Error(`No valid key found to decrypt data of receipt ${receipt.id}.`)\n    return retrieved.data\n  }\n\n  /**\n   * Gets the attachment of a receipt and tries to decrypt it using the encryption keys of the receipt.\n   * @param receipt a receipt.\n   * @param attachmentId id of the attachment of this receipt to retrieve.\n   * @param validator optionally a validator function which checks if the decryption was successful. In cases where the receipt has many encryption\n   * keys and it is unclear which one should be used this function can help to detect bad decryptions.\n   * @return an object containing:\n   * - data: the decrypted attachment, if it could be decrypted, else the encrypted attachment.\n   * - wasDecrypted: if the data was successfully decrypted or not\n   */\n  async getAndTryDecryptReceiptAttachment(\n    receipt: models.Receipt,\n    attachmentId: string,\n    validator: (decrypted: ArrayBuffer) => Promise<boolean> = () => Promise.resolve(true)\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    return await this.crypto.xapi.tryDecryptDataOf(\n      { entity: receipt, type: 'Receipt' },\n      await this.getReceiptAttachment(receipt.id!, attachmentId),\n      (x) => validator(x)\n    )\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given receipt\n   */\n  async hasWriteAccess(receipt: models.Receipt): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: receipt, type: 'Receipt' })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the receipt.\n   * @param receipt the receipt to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    receipt: models.Receipt,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Receipt> {\n    return this.shareWithMany(receipt, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param receipt the receipt to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Receipt> {\n    return (await this.tryShareWithMany(receipt, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing receipt with other data owners, allowing them to access the non-encrypted data of the receipt and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param receipt the receipt to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * receipt does not have encrypted content.\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    receipt: models.Receipt,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Receipt>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(receipt, 'Receipt')\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyReceipt(entityWithEncryptionKey) : receipt\n    return this.crypto.xapi.simpleShareOrUpdateEncryptedEntityMetadata(\n      { entity: updatedEntity, type: 'Receipt' },\n      true,\n      Object.fromEntries(\n        Object.entries(delegates).map(([delegateId, options]) => [\n          delegateId,\n          {\n            requestedPermissions: options.requestedPermissions,\n            shareEncryptionKeys: options.shareEncryptionKey,\n            shareOwningEntityIds: ShareMetadataBehaviour.NEVER,\n            shareSecretIds: undefined,\n          },\n        ])\n      ),\n      (x) => this.bulkShareReceipt(x)\n    )\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.Receipt\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'Receipt' })\n  }\n\n  getEncryptionKeysOf(entity: models.Receipt): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Receipt' }, undefined)\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: models.Receipt, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'Receipt' }, delegates)\n  }\n}\n"]}

package/icc-x-api/icc-time-table-x-api.d.ts

@@ -6,14 +6,22 @@ import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import * as models from '../icc-api/model/models';
 import { AuthenticationProvider } from './auth/AuthenticationProvider';
 import { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour';
+import { ShareResult } from './utils/ShareResult';
+import { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest';
+import RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum;
+import { SecureDelegation } from '../icc-api/model/SecureDelegation';
+import AccessLevelEnum = SecureDelegation.AccessLevelEnum;
+import { XHR } from '../icc-api/api/XHR';
 import { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi';
-export declare class IccTimeTableXApi extends IccTimeTableApi implements EncryptedEntityXApi<TimeTable> {
+export declare class IccTimeTableXApi extends IccTimeTableApi implements EncryptedEntityXApi<models.TimeTable> {
+    private readonly crypto;
+    private readonly dataOwnerApi;
+    private readonly autofillAuthor;
     i18n: any;
-    crypto: IccCryptoXApi;
-    dataOwnerApi: IccDataOwnerXApi;
+    get headers(): Promise<Array<XHR.Header>>;
     constructor(host: string, headers: {
         [key: string]: string;
-    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
+    }, crypto: IccCryptoXApi, dataOwnerApi: IccDataOwnerXApi, autofillAuthor: boolean, authenticationProvider?: AuthenticationProvider, fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>);
     /**
      * Creates a new instance of timetable with initialised encryption metadata (not in the database).
      * @param user the current user.
@@ -22,15 +30,19 @@ export declare class IccTimeTableXApi extends IccTimeTableApi implements Encrypt
      * @param options optional parameters:
      * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
      * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
-     * auto-delegations, in such case the access level specified here will be used. Currently only WRITE access is supported, but in future also read
-     * access will be possible.
+     * auto-delegations, in such case the access level specified here will be used.
      * @return a new instance of timetable.
      */
     newInstance(user: User, tt: TimeTable, options?: {
         additionalDelegates?: {
-            [dataOwnerId: string]: 'WRITE';
+            [dataOwnerId: string]: AccessLevelEnum;
         };
+        preferredSfk?: string;
     }): Promise<TimeTable>;
+    /**
+     * @return if the logged data owner has write access to the content of the given time table
+     */
+    hasWriteAccess(timeTable: models.TimeTable): Promise<boolean>;
     /**
      * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also
      * the encrypted content, with read-only or read-write permissions.
@@ -40,33 +52,54 @@ export declare class IccTimeTableXApi extends IccTimeTableApi implements Encrypt
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * time table does not have encrypted content.
-     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
-     * the operation failed.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWith(delegateId: string, timeTable: models.TimeTable, options?: {
+        requestedPermissions?: RequestedPermissionEnum;
         shareEncryptionKey?: ShareMetadataBehaviour;
     }): Promise<models.TimeTable>;
     /**
      * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also
      * the encrypted content, with read-only or read-write permissions.
      * @param timeTable the time table to share.
-     * @param delegates sharing options for each delegate.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
      * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
      * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
      * time table does not have encrypted content.
-     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
-     * the operation failed.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
      */
     shareWithMany(timeTable: models.TimeTable, delegates: {
         [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
             shareEncryptionKey?: ShareMetadataBehaviour;
         };
     }): Promise<models.TimeTable>;
+    /**
+     * Share an existing time table with other data owners, allowing them to access the non-encrypted data of the time table and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param timeTable the time table to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * time table does not have encrypted content.
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(timeTable: models.TimeTable, delegates: {
+        [delegateId: string]: {
+            requestedPermissions?: RequestedPermissionEnum;
+            shareEncryptionKey?: ShareMetadataBehaviour;
+        };
+    }): Promise<ShareResult<models.TimeTable>>;
     getDataOwnersWithAccessTo(entity: models.TimeTable): Promise<{
         permissionsByDataOwnerId: {
-            [p: string]: 'WRITE';
+            [p: string]: AccessLevelEnum;
         };
         hasUnknownAnonymousDataOwners: boolean;
     }>;
     getEncryptionKeysOf(entity: models.TimeTable): Promise<string[]>;
+    createDelegationDeAnonymizationMetadata(entity: models.TimeTable, delegates: string[]): Promise<void>;
 }