@icure/api 8.0.0-RC.1 → 8.0.0-RC.3

package/icc-x-api/icc-topic-x-api.js

@@ -0,0 +1,307 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IccTopicXApi = void 0;
+const icc_api_1 = require("../icc-api");
+const models = require("../icc-api/model/models");
+const AuthenticationProvider_1 = require("./auth/AuthenticationProvider");
+const SecureDelegation_1 = require("../icc-api/model/SecureDelegation");
+const EntityShareRequest_1 = require("../icc-api/model/requests/EntityShareRequest");
+var AccessLevelEnum = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
+var RequestedPermissionEnum = EntityShareRequest_1.EntityShareRequest.RequestedPermissionEnum;
+const utils_1 = require("./utils");
+const Connection_1 = require("../icc-api/model/Connection");
+// noinspection JSUnusedGlobalSymbols
+class IccTopicXApi extends icc_api_1.IccTopicApi {
+    constructor(host, headers, crypto, dataOwnerApi, authApi, autofillAuthor, authenticationProvider = new AuthenticationProvider_1.NoAuthenticationProvider(), encryptedKeys = ['description'], fetchImpl = typeof window !== 'undefined'
+        ? window.fetch
+        : typeof self !== 'undefined'
+            ? self.fetch
+            : fetch) {
+        super(host, headers, authenticationProvider, fetchImpl);
+        this.crypto = crypto;
+        this.dataOwnerApi = dataOwnerApi;
+        this.authApi = authApi;
+        this.autofillAuthor = autofillAuthor;
+        this.encryptedFields = (0, utils_1.parseEncryptedFields)(encryptedKeys, 'Topic.');
+    }
+    get headers() {
+        return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Topic'));
+    }
+    /**
+     * Creates a new instance of topic with initialised encryption metadata (not in the database).
+     * @param user the current user.
+     * @param patient the patient this topic refers to.
+     * @param c initialised data for the topic. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify
+     * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.
+     * @param options optional parameters:
+     * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the
+     * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with
+     * auto-delegations, in such case the access level specified here will be used.
+     * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the topic. The default value will be a
+     * secret id of patient known by the topmost parent in the current data owner hierarchy.
+     * @return a new instance of topic.
+     */
+    newInstance(user, patient, c = {}, // TODO: Why this isn't Topic?
+    options = {}) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!patient && options.preferredSfk)
+                throw new Error('preferredSfk can only be specified if patient is specified.');
+            const topic = Object.assign(Object.assign({}, (c !== null && c !== void 0 ? c : {})), { id: (_a = c === null || c === void 0 ? void 0 : c.id) !== null && _a !== void 0 ? _a : this.crypto.primitives.randomUuid(), _type: 'org.taktik.icure.entities.Topic', created: (_b = c === null || c === void 0 ? void 0 : c.created) !== null && _b !== void 0 ? _b : new Date().getTime(), modified: (_c = c === null || c === void 0 ? void 0 : c.modified) !== null && _c !== void 0 ? _c : new Date().getTime(), responsible: (_d = c === null || c === void 0 ? void 0 : c.responsible) !== null && _d !== void 0 ? _d : (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined), author: (_e = c === null || c === void 0 ? void 0 : c.author) !== null && _e !== void 0 ? _e : (this.autofillAuthor ? user.id : undefined), codes: (_f = c === null || c === void 0 ? void 0 : c.codes) !== null && _f !== void 0 ? _f : [], tags: (_g = c === null || c === void 0 ? void 0 : c.tags) !== null && _g !== void 0 ? _g : [] });
+            const extraDelegations = Object.assign(Object.assign({}, Object.fromEntries(((_j = (_h = user.autoDelegations) === null || _h === void 0 ? void 0 : _h.all) !== null && _j !== void 0 ? _j : []).map((d) => [d, AccessLevelEnum.WRITE]))), ((_k = options === null || options === void 0 ? void 0 : options.additionalDelegates) !== null && _k !== void 0 ? _k : {}));
+            const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user);
+            if (ownerId !== (yield this.dataOwnerApi.getCurrentDataOwnerId()))
+                throw new Error('Can only initialise entities as current data owner.');
+            const sfk = patient
+                ? (_l = options.preferredSfk) !== null && _l !== void 0 ? _l : (yield this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))
+                : undefined;
+            if (patient && !sfk)
+                throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`);
+            return new models.Topic(yield this.crypto.xapi
+                .entityWithInitialisedEncryptedMetadata(topic, 'Topic', patient === null || patient === void 0 ? void 0 : patient.id, sfk, true, false, extraDelegations)
+                .then((x) => x.updatedEntity));
+        });
+    }
+    decrypt(topics) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield Promise.all(topics.map((topic) => this.crypto.xapi.decryptEntity(topic, 'Topic', (x) => new models.Topic(x)).then(({ entity }) => entity)));
+        });
+    }
+    encrypt(topics) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield Promise.all(topics.map((p) => this.crypto.xapi.tryEncryptEntity(p, 'Topic', this.encryptedFields, true, false, (x) => new models.Topic(x))));
+        });
+    }
+    /**
+     * Create and share a new topic with other participants.
+     * @param body the topic to create.
+     * @return the created topic.
+     */
+    createTopic(body) {
+        const _super = Object.create(null, {
+            createTopic: { get: () => super.createTopic }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const encryptedTopics = yield this.encrypt([body]);
+            const createdTopic = yield _super.createTopic.call(this, encryptedTopics[0]);
+            const decryptedTopics = yield this.decrypt([createdTopic]);
+            return decryptedTopics[0];
+        });
+    }
+    /**
+     * @param topic a topic
+     * @return the id of the patient that the topic refers to, retrieved from the encrypted metadata. Normally there should only be one element
+     * in the returned array, but in case of entity merges there could be multiple values.
+     */
+    decryptPatientIdOf(topic) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.owningEntityIdsOf({ entity: topic, type: 'Topic' }, undefined);
+        });
+    }
+    /**
+     * @return if the logged data owner has write access to the content of the given topic
+     */
+    hasWriteAccess(topic) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.crypto.xapi.hasWriteAccess({ entity: topic, type: 'Topic' });
+        });
+    }
+    /**
+     * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param delegateId the id of the data owner which will be granted access to the topic.
+     * @param topic the topic to share.
+     * @param options optional parameters to customize the sharing behaviour:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
+     */
+    shareWith(delegateId, topic, options = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.shareWithMany(topic, { [delegateId]: options });
+        });
+    }
+    /**
+     * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param topic the topic to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * topic does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return the updated entity
+     */
+    shareWithMany(topic, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (yield this.tryShareWithMany(topic, delegates)).updatedEntityOrThrow;
+        });
+    }
+    /**
+     * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also
+     * the encrypted content, with read-only or read-write permissions.
+     * @param topic the topic to share.
+     * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:
+     * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted
+     * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a
+     * topic does not have encrypted content.
+     * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to
+     * {@link ShareMetadataBehaviour.IF_AVAILABLE}).
+     * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.
+     * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if
+     * the operation failed.
+     */
+    tryShareWithMany(topic, delegates) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // All entities should have an encryption key.
+            const entityWithEncryptionKey = yield this.crypto.xapi.ensureEncryptionKeysInitialised(topic, 'Topic');
+            const updatedEntity = entityWithEncryptionKey ? yield this.modifyTopic(entityWithEncryptionKey) : topic;
+            return this.crypto.xapi
+                .simpleShareOrUpdateEncryptedEntityMetadata({ entity: updatedEntity, type: 'Topic' }, true, Object.fromEntries(Object.entries(delegates).map(([delegateId, options]) => [
+                delegateId,
+                {
+                    requestedPermissions: options.requestedPermissions,
+                    shareEncryptionKeys: options.shareEncryptionKey,
+                    shareOwningEntityIds: options.sharePatientId,
+                    shareSecretIds: undefined,
+                },
+            ])), (x) => this.bulkShareTopics(x))
+                .then((r) => r.mapSuccessAsync((e) => this.decrypt([e]).then((es) => es[0])));
+        });
+    }
+    getDataOwnersWithAccessTo(entity) {
+        return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'Topic' });
+    }
+    getEncryptionKeysOf(entity) {
+        return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Topic' }, undefined);
+    }
+    /**
+     * Filter and decrypt topics by the given filter.
+     * @param body the filter to apply.
+     * @param startDocumentId the document id to start from (inclusive).
+     * @param limit the maximum number of topics to return in the page.
+     * @return a paginated list of topics.
+     */
+    filterTopicsBy(body, startDocumentId, limit) {
+        const _super = Object.create(null, {
+            filterTopicsBy: { get: () => super.filterTopicsBy }
+        });
+        var _a;
+        return __awaiter(this, void 0, void 0, function* () {
+            const page = yield _super.filterTopicsBy.call(this, body, startDocumentId, limit);
+            const decryptedTopics = yield this.decrypt((_a = page.rows) !== null && _a !== void 0 ? _a : []);
+            return Object.assign(Object.assign({}, page), { rows: decryptedTopics });
+        });
+    }
+    /**
+     * Obtain the topic with the given id and decrypt it.
+     * @param id the id of the topic to retrieve.
+     * @return the decrypted topic.
+     */
+    getTopic(id) {
+        const _super = Object.create(null, {
+            getTopic: { get: () => super.getTopic }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const topic = yield _super.getTopic.call(this, id);
+            const decryptedTopics = yield this.decrypt([topic]);
+            return decryptedTopics[0];
+        });
+    }
+    /**
+     * Obtain the topics with the given ids and decrypt them.
+     * @param body the ids of the topics to retrieve.
+     * @return the decrypted topics.
+     */
+    getTopics(body) {
+        const _super = Object.create(null, {
+            getTopics: { get: () => super.getTopics }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const topics = yield _super.getTopics.call(this, body);
+            return yield this.decrypt(topics);
+        });
+    }
+    /**
+     * Update and encrypt the given topic.
+     * @param body the topic to update.
+     * @return the updated decrypted topic.
+     */
+    modifyTopic(body) {
+        const _super = Object.create(null, {
+            modifyTopic: { get: () => super.modifyTopic }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const encryptedTopics = yield this.encrypt([body]);
+            const modifiedTopic = yield _super.modifyTopic.call(this, encryptedTopics[0]);
+            const decryptedTopics = yield this.decrypt([modifiedTopic]);
+            return decryptedTopics[0];
+        });
+    }
+    /**
+     * @internal this method is for internal use only and may be changed without notice
+     * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.
+     * @param topicId Id of the topic to which the participant should be added.
+     */
+    addParticipant(body, topicId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new Error('Cannot add participant to topic without sharing it first. You should use addParticipantWithTopic instead.');
+        });
+    }
+    /**
+     * This method is similar to {@link addParticipant} but it also shares the topic with the data owner before adding the participant.
+     * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.
+     * @param topic the topic to share and to which the participant should be added.
+     * @return the updated topic.
+     */
+    addParticipantWithTopic(body, topic) {
+        const _super = Object.create(null, {
+            addParticipant: { get: () => super.addParticipant }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const updatedTopic = yield this.shareWith(body.dataOwnerId, topic, {
+                requestedPermissions: RequestedPermissionEnum.FULL_WRITE,
+            });
+            return (yield this.decrypt([yield _super.addParticipant.call(this, body, updatedTopic.id)]))[0];
+        });
+    }
+    /**
+     * Remove the participant with the given data owner id from the topic with the given id.
+     * @param body data owner id of the participant to remove.
+     * @param topicId Id of the topic from which the participant should be removed.
+     * @return the updated decrypted topic.
+     */
+    removeParticipant(body, topicId) {
+        const _super = Object.create(null, {
+            removeParticipant: { get: () => super.removeParticipant }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const updatedTopic = yield _super.removeParticipant.call(this, body, topicId);
+            return (yield this.decrypt([updatedTopic]))[0];
+        });
+    }
+    subscribeToTopicEvents(eventTypes, filter, eventFired, options = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield (0, utils_1.subscribeToEntityEvents)(this.host, this.authApi, 'Topic', eventTypes, filter, eventFired, options, (encrypted) => __awaiter(this, void 0, void 0, function* () { return (yield this.decrypt([encrypted]))[0]; })).then((rs) => new Connection_1.ConnectionImpl(rs));
+        });
+    }
+    createDelegationDeAnonymizationMetadata(entity, delegates) {
+        return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'Topic' }, delegates);
+    }
+}
+exports.IccTopicXApi = IccTopicXApi;
+//# sourceMappingURL=icc-topic-x-api.js.map

package/icc-x-api/icc-topic-x-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icc-topic-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-topic-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAoD;AAIpD,kDAAiD;AAGjD,0EAAgG;AAChG,wEAAoE;AAGpE,qFAAiF;AAKjF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAC3E,mCAAqH;AAErH,4DAAwE;AAExE,qCAAqC;AACrC,MAAa,YAAa,SAAQ,qBAAW;IAG3C,YACE,IAAY,EACZ,OAAkC,EACjB,MAAqB,EACrB,YAA8B,EAC9B,OAAmB,EACnB,cAAuB,EACxC,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,gBAA+B,CAAC,aAAa,CAAC,EAC9C,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QAZtC,WAAM,GAAN,MAAM,CAAe;QACrB,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,YAAO,GAAP,OAAO,CAAY;QACnB,mBAAc,GAAd,cAAc,CAAS;QAWxC,IAAI,CAAC,eAAe,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;IACtE,CAAC;IAED,IAAI,OAAO;QACT,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IAChH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACG,WAAW,CACf,IAAiB,EACjB,OAA8B,EAC9B,IAAW,EAAE,EAAE,8BAA8B;IAC7C,UAGI,EAAE;;;YAEN,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;YAEpH,MAAM,KAAK,mCACN,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,KACZ,EAAE,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE,mCAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,EAChD,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3C,QAAQ,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,mCAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAC7C,WAAW,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC3G,MAAM,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,mCAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAChE,KAAK,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,mCAAI,EAAE,EACrB,IAAI,EAAE,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,mCAAI,EAAE,GACpB,CAAA;YAED,MAAM,gBAAgB,mCACjB,MAAM,CAAC,WAAW,CAAC,CAAC,MAAA,MAAA,IAAI,CAAC,eAAe,0CAAE,GAAG,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,GAC5F,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CACxC,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;YACxD,IAAI,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACzI,MAAM,GAAG,GAAG,OAAO;gBACjB,CAAC,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChI,CAAC,CAAC,SAAS,CAAA;YAEb,IAAI,OAAO,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAE7F,OAAO,IAAI,MAAM,CAAC,KAAK,CACrB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnB,sCAAsC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBACvG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAChC,CAAA;;KACF;IAEK,OAAO,CAAC,MAA2B;;YACvC,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAC/H,CAAA;QACH,CAAC;KAAA;IAEK,OAAO,CAAC,MAA2B;;YACvC,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAChI,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACY,WAAW,CAAC,IAAW;;;;;YACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,YAAY,GAAG,MAAM,OAAM,WAAW,YAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAChE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;YAC1D,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB,CAAC,KAAmB;;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;QACxF,CAAC;KAAA;IAED;;OAEG;IACG,cAAc,CAAC,KAAmB;;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1E,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,UAAkB,EAClB,KAAmB,EACnB,UAII,EAAE;;YAEN,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7D,CAAC;KAAA;IAED;;;;;;;;;;;;OAYG;IACG,aAAa,CACjB,KAAmB,EACnB,SAMC;;YAED,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAA;QAC7E,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,KAAmB,EACnB,SAMC;;YAED,8CAA8C;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YACtG,MAAM,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;YACvG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;iBACpB,0CAA0C,CACzC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,EACxC,IAAI,EACJ,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,UAAU;gBACV;oBACE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;oBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;oBAC/C,oBAAoB,EAAE,OAAO,CAAC,cAAc;oBAC5C,cAAc,EAAE,SAAS;iBAC1B;aACF,CAAC,CACH,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAC/B;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,CAAC;KAAA;IAED,yBAAyB,CACvB,MAAoB;QAEpB,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IACpG,CAAC;IAED,mBAAmB,CAAC,MAAoB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IAChF,CAAC;IAED;;;;;;OAMG;IACY,cAAc,CAAC,IAAsB,EAAE,eAAwB,EAAE,KAAc;;;;;;YAC5F,MAAM,IAAI,GAAG,MAAM,OAAM,cAAc,YAAC,IAAI,EAAE,eAAe,EAAE,KAAK,CAAC,CAAA;YACrE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;YAC3D,uCACK,IAAI,KACP,IAAI,EAAE,eAAe,IACtB;;KACF;IAED;;;;OAIG;IACY,QAAQ,CAAC,EAAU;;;;;YAChC,MAAM,KAAK,GAAG,MAAM,OAAM,QAAQ,YAAC,EAAE,CAAC,CAAA;YACtC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;YACnD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACY,SAAS,CAAC,IAAe;;;;;YACtC,MAAM,MAAM,GAAG,MAAM,OAAM,SAAS,YAAC,IAAI,CAAC,CAAA;YAC1C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;KAAA;IAED;;;;OAIG;IACY,WAAW,CAAC,IAAW;;;;;YACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,aAAa,GAAG,MAAM,OAAM,WAAW,YAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YACjE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;YAC3D,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;KAAA;IAED;;;;OAIG;IACY,cAAc,CAAC,IAAmD,EAAE,OAAe;;YAChG,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAA;QAC9H,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAmD,EAAE,KAAY;;;;;YAC7F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE;gBACjE,oBAAoB,EAAE,uBAAuB,CAAC,UAAU;aACzD,CAAC,CAAA;YAEF,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,OAAM,cAAc,YAAC,IAAI,EAAE,YAAY,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtF,CAAC;KAAA;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,IAA6B,EAAE,OAAe;;;;;YACpE,MAAM,YAAY,GAAG,MAAM,OAAM,iBAAiB,YAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACjE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC;KAAA;IAEK,sBAAsB,CAC1B,UAA8C,EAC9C,MAAyC,EACzC,UAA6C,EAC7C,UAA+B,EAAE;;YAEjC,OAAO,MAAM,IAAA,+BAAuB,EAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,UAAU,EACV,MAAM,EACN,UAAU,EACV,OAAO,EACP,CAAO,SAAS,EAAE,EAAE,gDAAC,OAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,GAAA,CAC1D,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;KAAA;IAED,uCAAuC,CAAC,MAAa,EAAE,SAAmB;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACvH,CAAC;CACF;AAhVD,oCAgVC","sourcesContent":["import { IccAuthApi, IccTopicApi } from '../icc-api'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\n\nimport * as _ from 'lodash'\nimport * as models from '../icc-api/model/models'\nimport { ListOfIds, MaintenanceTask, Topic, TopicRole } from '../icc-api/model/models'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport { ShareMetadataBehaviour } from './crypto/ShareMetadataBehaviour'\nimport { ShareResult } from './utils/ShareResult'\nimport { EntityShareRequest } from '../icc-api/model/requests/EntityShareRequest'\nimport { XHR } from '../icc-api/api/XHR'\nimport { EncryptedEntityXApi } from './basexapi/EncryptedEntityXApi'\nimport { FilterChainTopic } from '../icc-api/model/FilterChainTopic'\nimport { PaginatedListTopic } from '../icc-api/model/PaginatedListTopic'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport { EncryptedFieldsManifest, parseEncryptedFields, subscribeToEntityEvents, SubscriptionOptions } from './utils'\nimport { AbstractFilter } from './filters/filters'\nimport { Connection, ConnectionImpl } from '../icc-api/model/Connection'\n\n// noinspection JSUnusedGlobalSymbols\nexport class IccTopicXApi extends IccTopicApi implements EncryptedEntityXApi<models.Topic> {\n  private readonly encryptedFields: EncryptedFieldsManifest\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    private readonly crypto: IccCryptoXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly authApi: IccAuthApi,\n    private readonly autofillAuthor: boolean,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    encryptedKeys: Array<string> = ['description'],\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n\n    this.encryptedFields = parseEncryptedFields(encryptedKeys, 'Topic.')\n  }\n\n  get headers(): Promise<Array<XHR.Header>> {\n    return super.headers.then((h) => this.crypto.accessControlKeysHeaders.addAccessControlKeysHeaders(h, 'Topic'))\n  }\n\n  /**\n   * Creates a new instance of topic with initialised encryption metadata (not in the database).\n   * @param user the current user.\n   * @param patient the patient this topic refers to.\n   * @param c initialised data for the topic. Metadata such as id, creation data, etc. will be automatically initialised, but you can specify\n   * other kinds of data or overwrite generated metadata with this. You can't specify encryption metadata.\n   * @param options optional parameters:\n   * - additionalDelegates: delegates which will have access to the entity in addition to the current data owner and delegates from the\n   * auto-delegations. Must be an object which associates each data owner id with the access level to give to that data owner. May overlap with\n   * auto-delegations, in such case the access level specified here will be used.\n   * - preferredSfk: secret id of the patient to use as the secret foreign key to use for the topic. The default value will be a\n   * secret id of patient known by the topmost parent in the current data owner hierarchy.\n   * @return a new instance of topic.\n   */\n  async newInstance(\n    user: models.User,\n    patient: models.Patient | null,\n    c: Topic = {}, // TODO: Why this isn't Topic?\n    options: {\n      additionalDelegates?: { [dataOwnerId: string]: AccessLevelEnum }\n      preferredSfk?: string\n    } = {}\n  ) {\n    if (!patient && options.preferredSfk) throw new Error('preferredSfk can only be specified if patient is specified.')\n\n    const topic = {\n      ...(c ?? {}),\n      id: c?.id ?? this.crypto.primitives.randomUuid(),\n      _type: 'org.taktik.icure.entities.Topic',\n      created: c?.created ?? new Date().getTime(),\n      modified: c?.modified ?? new Date().getTime(),\n      responsible: c?.responsible ?? (this.autofillAuthor ? this.dataOwnerApi.getDataOwnerIdOf(user) : undefined),\n      author: c?.author ?? (this.autofillAuthor ? user.id : undefined),\n      codes: c?.codes ?? [],\n      tags: c?.tags ?? [],\n    }\n\n    const extraDelegations = {\n      ...Object.fromEntries((user.autoDelegations?.all ?? []).map((d) => [d, AccessLevelEnum.WRITE])),\n      ...(options?.additionalDelegates ?? {}),\n    }\n\n    const ownerId = this.dataOwnerApi.getDataOwnerIdOf(user)\n    if (ownerId !== (await this.dataOwnerApi.getCurrentDataOwnerId())) throw new Error('Can only initialise entities as current data owner.')\n    const sfk = patient\n      ? options.preferredSfk ?? (await this.crypto.confidential.getAnySecretIdSharedWithParents({ entity: patient, type: 'Patient' }))\n      : undefined\n\n    if (patient && !sfk) throw new Error(`Couldn't find any sfk of parent patient ${patient.id}`)\n\n    return new models.Topic(\n      await this.crypto.xapi\n        .entityWithInitialisedEncryptedMetadata(topic, 'Topic', patient?.id, sfk, true, false, extraDelegations)\n        .then((x) => x.updatedEntity)\n    )\n  }\n\n  async decrypt(topics: Array<models.Topic>) {\n    return await Promise.all(\n      topics.map((topic) => this.crypto.xapi.decryptEntity(topic, 'Topic', (x) => new models.Topic(x)).then(({ entity }) => entity))\n    )\n  }\n\n  async encrypt(topics: Array<models.Topic>): Promise<Array<models.Topic>> {\n    return await Promise.all(\n      topics.map((p) => this.crypto.xapi.tryEncryptEntity(p, 'Topic', this.encryptedFields, true, false, (x) => new models.Topic(x)))\n    )\n  }\n\n  /**\n   * Create and share a new topic with other participants.\n   * @param body the topic to create.\n   * @return the created topic.\n   */\n  override async createTopic(body: Topic): Promise<Topic> {\n    const encryptedTopics = await this.encrypt([body])\n    const createdTopic = await super.createTopic(encryptedTopics[0])\n    const decryptedTopics = await this.decrypt([createdTopic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * @param topic a topic\n   * @return the id of the patient that the topic refers to, retrieved from the encrypted metadata. Normally there should only be one element\n   * in the returned array, but in case of entity merges there could be multiple values.\n   */\n  async decryptPatientIdOf(topic: models.Topic): Promise<string[]> {\n    return this.crypto.xapi.owningEntityIdsOf({ entity: topic, type: 'Topic' }, undefined)\n  }\n\n  /**\n   * @return if the logged data owner has write access to the content of the given topic\n   */\n  async hasWriteAccess(topic: models.Topic): Promise<boolean> {\n    return this.crypto.xapi.hasWriteAccess({ entity: topic, type: 'Topic' })\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param delegateId the id of the data owner which will be granted access to the topic.\n   * @param topic the topic to share.\n   * @param options optional parameters to customize the sharing behaviour:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWith(\n    delegateId: string,\n    topic: models.Topic,\n    options: {\n      requestedPermissions?: RequestedPermissionEnum\n      shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n    } = {}\n  ): Promise<models.Topic> {\n    return this.shareWithMany(topic, { [delegateId]: options })\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param topic the topic to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * topic does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return the updated entity\n   */\n  async shareWithMany(\n    topic: models.Topic,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<models.Topic> {\n    return (await this.tryShareWithMany(topic, delegates)).updatedEntityOrThrow\n  }\n\n  /**\n   * Share an existing topic with other data owners, allowing them to access the non-encrypted data of the topic and optionally also\n   * the encrypted content, with read-only or read-write permissions.\n   * @param topic the topic to share.\n   * @param delegates associates the id of data owners which will be granted access to the entity, to the following sharing options:\n   * - shareEncryptionKey: specifies if the encryption key of the access log should be shared with the delegate, giving access to all encrypted\n   * content of the entity, excluding other encrypted metadata (defaults to {@link ShareMetadataBehaviour.IF_AVAILABLE}). Note that by default a\n   * topic does not have encrypted content.\n   * - sharePatientId: specifies if the id of the patient that this topic refers to should be shared with the delegate (defaults to\n   * {@link ShareMetadataBehaviour.IF_AVAILABLE}).\n   * - requestedPermissions: the requested permissions for the delegate, defaults to {@link RequestedPermissionEnum.MAX_WRITE}.\n   * @return a promise which will contain the result of the operation: the updated entity if the operation was successful or details of the error if\n   * the operation failed.\n   */\n  async tryShareWithMany(\n    topic: models.Topic,\n    delegates: {\n      [delegateId: string]: {\n        requestedPermissions?: RequestedPermissionEnum\n        shareEncryptionKey?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n        sharePatientId?: ShareMetadataBehaviour // Defaults to ShareMetadataBehaviour.IF_AVAILABLE\n      }\n    }\n  ): Promise<ShareResult<models.Topic>> {\n    // All entities should have an encryption key.\n    const entityWithEncryptionKey = await this.crypto.xapi.ensureEncryptionKeysInitialised(topic, 'Topic')\n    const updatedEntity = entityWithEncryptionKey ? await this.modifyTopic(entityWithEncryptionKey) : topic\n    return this.crypto.xapi\n      .simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity: updatedEntity, type: 'Topic' },\n        true,\n        Object.fromEntries(\n          Object.entries(delegates).map(([delegateId, options]) => [\n            delegateId,\n            {\n              requestedPermissions: options.requestedPermissions,\n              shareEncryptionKeys: options.shareEncryptionKey,\n              shareOwningEntityIds: options.sharePatientId,\n              shareSecretIds: undefined,\n            },\n          ])\n        ),\n        (x) => this.bulkShareTopics(x)\n      )\n      .then((r) => r.mapSuccessAsync((e) => this.decrypt([e]).then((es) => es[0])))\n  }\n\n  getDataOwnersWithAccessTo(\n    entity: models.Topic\n  ): Promise<{ permissionsByDataOwnerId: { [p: string]: AccessLevelEnum }; hasUnknownAnonymousDataOwners: boolean }> {\n    return this.crypto.delegationsDeAnonymization.getDataOwnersWithAccessTo({ entity, type: 'Topic' })\n  }\n\n  getEncryptionKeysOf(entity: models.Topic): Promise<string[]> {\n    return this.crypto.xapi.encryptionKeysOf({ entity, type: 'Topic' }, undefined)\n  }\n\n  /**\n   * Filter and decrypt topics by the given filter.\n   * @param body the filter to apply.\n   * @param startDocumentId the document id to start from (inclusive).\n   * @param limit the maximum number of topics to return in the page.\n   * @return a paginated list of topics.\n   */\n  override async filterTopicsBy(body: FilterChainTopic, startDocumentId?: string, limit?: number): Promise<PaginatedListTopic> {\n    const page = await super.filterTopicsBy(body, startDocumentId, limit)\n    const decryptedTopics = await this.decrypt(page.rows ?? [])\n    return {\n      ...page,\n      rows: decryptedTopics,\n    }\n  }\n\n  /**\n   * Obtain the topic with the given id and decrypt it.\n   * @param id the id of the topic to retrieve.\n   * @return the decrypted topic.\n   */\n  override async getTopic(id: string): Promise<Topic> {\n    const topic = await super.getTopic(id)\n    const decryptedTopics = await this.decrypt([topic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * Obtain the topics with the given ids and decrypt them.\n   * @param body the ids of the topics to retrieve.\n   * @return the decrypted topics.\n   */\n  override async getTopics(body: ListOfIds): Promise<Array<Topic>> {\n    const topics = await super.getTopics(body)\n    return await this.decrypt(topics)\n  }\n\n  /**\n   * Update and encrypt the given topic.\n   * @param body the topic to update.\n   * @return the updated decrypted topic.\n   */\n  override async modifyTopic(body: Topic): Promise<Topic> {\n    const encryptedTopics = await this.encrypt([body])\n    const modifiedTopic = await super.modifyTopic(encryptedTopics[0])\n    const decryptedTopics = await this.decrypt([modifiedTopic])\n    return decryptedTopics[0]\n  }\n\n  /**\n   * @internal this method is for internal use only and may be changed without notice\n   * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.\n   * @param topicId Id of the topic to which the participant should be added.\n   */\n  override async addParticipant(body: { dataOwnerId: string; topicRole: TopicRole }, topicId: string): Promise<Topic> {\n    throw new Error('Cannot add participant to topic without sharing it first. You should use addParticipantWithTopic instead.')\n  }\n\n  /**\n   * This method is similar to {@link addParticipant} but it also shares the topic with the data owner before adding the participant.\n   * @param body data owner id of the data owner to which the participant should be added and the topic role of the participant.\n   * @param topic the topic to share and to which the participant should be added.\n   * @return the updated topic.\n   */\n  async addParticipantWithTopic(body: { dataOwnerId: string; topicRole: TopicRole }, topic: Topic): Promise<Topic> {\n    const updatedTopic = await this.shareWith(body.dataOwnerId, topic, {\n      requestedPermissions: RequestedPermissionEnum.FULL_WRITE,\n    })\n\n    return (await this.decrypt([await super.addParticipant(body, updatedTopic.id!)]))[0]\n  }\n\n  /**\n   * Remove the participant with the given data owner id from the topic with the given id.\n   * @param body data owner id of the participant to remove.\n   * @param topicId Id of the topic from which the participant should be removed.\n   * @return the updated decrypted topic.\n   */\n  async removeParticipant(body: { dataOwnerId: string }, topicId: string): Promise<Topic> {\n    const updatedTopic = await super.removeParticipant(body, topicId)\n    return (await this.decrypt([updatedTopic]))[0]\n  }\n\n  async subscribeToTopicEvents(\n    eventTypes: ('CREATE' | 'UPDATE' | 'DELETE')[],\n    filter: AbstractFilter<Topic> | undefined,\n    eventFired: (message: Topic) => Promise<void>,\n    options: SubscriptionOptions = {}\n  ): Promise<Connection> {\n    return await subscribeToEntityEvents(\n      this.host,\n      this.authApi,\n      'Topic',\n      eventTypes,\n      filter,\n      eventFired,\n      options,\n      async (encrypted) => (await this.decrypt([encrypted]))[0]\n    ).then((rs) => new ConnectionImpl(rs))\n  }\n\n  createDelegationDeAnonymizationMetadata(entity: Topic, delegates: string[]): Promise<void> {\n    return this.crypto.delegationsDeAnonymization.createOrUpdateDeAnonymizationInfo({ entity, type: 'Topic' }, delegates)\n  }\n}\n"]}

package/icc-x-api/index.d.ts

@@ -27,6 +27,8 @@ import { IccDeviceXApi } from './icc-device-x-api';
 import { IccBekmehrXApi } from './icc-bekmehr-x-api';
 import { IccDoctemplateXApi } from './icc-doctemplate-x-api';
 import { UserGroup } from '../icc-api/model/UserGroup';
+import { IccTopicXApi } from './icc-topic-x-api';
+import { IccRoleApi } from '../icc-api/api/IccRoleApi';
 export * from './icc-accesslog-x-api';
 export * from './icc-bekmehr-x-api';
 export * from './icc-calendar-item-x-api';
@@ -51,6 +53,7 @@ export * from './icc-maintenance-task-x-api';
 export * from './utils';
 export * from './crypto/RSA';
 export * from './crypto/CryptoPrimitives';
+export * from './crypto/ShareMetadataBehaviour';
 export * from './auth/AuthenticationProvider';
 export { KeyStorageFacade } from './storage/KeyStorageFacade';
 export { LocalStorageImpl } from './storage/LocalStorageImpl';
@@ -106,6 +109,8 @@ export interface Apis {
     readonly replicationApi: IccReplicationApi;
     readonly tarificationApi: IccTarificationApi;
     readonly tmpApi: IccTmpApi;
+    readonly topicApi: IccTopicXApi;
+    readonly roleApi: IccRoleApi;
 }
 /**
  * Allows to customise the behaviour of the iCure API by providing various optional parameters.
@@ -303,6 +308,16 @@ export interface EncryptedFieldsConfig {
      * @default ['note', 'notes[].markdown']
      */
     readonly patient?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link Message}
+     * @default []
+     */
+    readonly message?: string[];
+    /**
+     * Fields to encrypt for entities of type {@link Topic}
+     * @default ['description']
+     */
+    readonly topic?: string[];
 }
 export declare namespace EncryptedFieldsConfig {
     const Defaults: {
@@ -313,6 +328,8 @@ export declare namespace EncryptedFieldsConfig {
         healthElement: string[];
         maintenanceTask: string[];
         patient: string[];
+        message: never[];
+        topic: string[];
     };
 }
 /**