@icure/api 8.0.0-RC.3 → 8.0.0-RC.4

package/icc-x-api/crypto/ExchangeDataManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExchangeDataManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/ExchangeDataManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAOA,mCAAgH;AAEhH,oCAAyC;AACzC,oFAA6E;AAC7E,wFAAmH;AACnH,yEAA6E;AAO7E;;;GAGG;AACH,SAAsB,gDAAgD,CACpE,IAA6B,EAC7B,cAAyC,EACzC,aAAuC,EACvC,mBAA6C,EAC7C,gBAAkC,EAClC,YAA8B,EAC9B,UAA4B,EAC5B,aAAsB,EACtB,qBAA4D,EAAE;;QAE9D,MAAM,YAAY,GAAG,yCAAuB,CAAC,aAAa,CAAC,MAAM,YAAY,CAAC,mBAAmB,EAAE,CAAC,CAAA;QACpG,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,YAAY,CAAC,EAAE;YACvE,MAAM,GAAG,GAAG,IAAI,8BAA8B,CAC5C,IAAI,EACJ,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,aAAa,CACd,CAAA;YACD,MAAM,GAAG,CAAC,sBAAsB,EAAE,CAAA;YAClC,OAAO,GAAG,CAAA;SACX;aAAM;YACL,OAAO,IAAI,kCAAkC,CAC3C,IAAI,EACJ,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,kBAAkB,CACnB,CAAA;SACF;IACH,CAAC;CAAA;AAtCD,4GAsCC;AAkGD,MAAe,2BAA2B;IACxC,YACW,IAA6B,EACnB,cAAyC,EACzC,aAAuC,EACvC,mBAA6C,EAC7C,gBAAkC,EAClC,YAA8B,EAC9B,UAA4B,EAC9B,aAAsB;QAP9B,SAAI,GAAJ,IAAI,CAAyB;QACnB,mBAAc,GAAd,cAAc,CAA2B;QACzC,kBAAa,GAAb,aAAa,CAA0B;QACvC,wBAAmB,GAAnB,mBAAmB,CAA0B;QAC7C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,eAAU,GAAV,UAAU,CAAkB;QAC9B,kBAAa,GAAb,aAAa,CAAS;IACtC,CAAC;IAEY,WAAW,CAAC,IAAkB;;YAQ5C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAA;YAC9D,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC9G,IAAI,CAAC,YAAY;gBAAE,OAAO,SAAS,CAAA;YACnC,MAAM,4BAA4B,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACrI,IAAI,CAAC,4BAA4B;gBAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,IAAI,EAAE,CAAC,CAAA;YAC5I,OAAO;gBACL,mBAAmB,EAAE,4BAA4B;gBACjD,WAAW,EAAE,YAAY;gBACzB,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;aAC/G,CAAA;QACH,CAAC;KAAA;IAEe,qBAAqB,CACnC,UAAkB,EAClB,SAAkB;;YAElB,MAAM,cAAc,GAAgC,EAAE,CAAA;YACtD,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;YAC9C,CAAC,CAAC,CAAA;YACF,IAAI,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,EAAE;gBACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAA;gBACvE,MAAM,oBAAoB,GAAG,IAAA,iCAAyB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACrE,MAAM,kBAAkB,GAAG,IAAA,+BAAuB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACjE,IAAI,uBAAiC,CAAA;gBACrC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAC1G,uBAAuB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;iBAC5F;qBAAM;oBACL,uBAAuB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAC5E,QAAQ,EACR,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EACxE,IAAI,CAAC,UAAU,CAChB,CAAA;iBACF;gBACD,IAAI,CAAC,uBAAuB,CAAC,MAAM;oBACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,uDAAuD,CAAC,CAAA;gBACzH,KAAK,MAAM,WAAW,IAAI,uBAAuB,EAAE;oBACjD,IAAI,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;wBACvC,cAAc,CAAC,IAAA,qBAAa,EAAC,WAAW,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAA;qBACpI;yBAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;wBAChD,cAAc,CAAC,IAAA,qBAAa,EAAC,WAAW,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAA;qBACtI;;wBAAM,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAA;iBAC9G;aACF;YACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,2BAA2B,EAAE,CAAA;YAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAChD,UAAU,EACV,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAC/D,cAAc,EACd,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CACnC,CAAA;YACD,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAA;QACH,CAAC;KAAA;IAEK,gBAAgB,CAAC,cAAsB,EAAE,qBAA6B;;YAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,qBAAqB,CAAC,CAAA;YACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;YACxE,MAAM,iBAAiB,GAAG,IAAA,2BAAmB,EAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;YAChF,IAAI,CAAC,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,cAAc,EAAE,CAAC,CAAA;YAChG,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,qBAAqB,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAA;YACjI,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,2BAA2B,EAAE,CAAA;YAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAA;YAC9D,MAAM,uBAAuB,GAC3B,IAAI,IAAI,cAAc;gBACpB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,EAAE,IAAI,CAAC;gBACpE,CAAC,CAAC;oBACE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBACjF,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;iBAClF,CAAA;YACP,KAAK,MAAM,YAAY,IAAI,uBAAuB,EAAE;gBAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE;oBACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CACnD,YAAY,EACZ,cAAc,EACd,EAAE,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,EAC9B,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAC/D,CAAC,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,2BAA2B,CAAC,cAAc,CAAC,CACnF,CAAA;oBACD,IAAI,CAAC,OAAO,EAAE;wBACZ,OAAO,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;qBAC7F;iBACF;aACF;QACH,CAAC;KAAA;IAED,sBAAsB;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,2BAA2B,CACzB,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;QAE7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,6CAA6C,CAC3C,MAAgB,EAChB,UAAwC,EACxC,uBAAiC;QAEjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,wBAAwB,CACtB,EAAU,EACV,UAAoD,EACpD,uBAA6C,EAC7C,mBAA4B;QAE5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,yBAAyB,CAAC,UAAwC;QAChE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,oBAAoB,CAAC,UAAwC;QAC3D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;CACF;AAED,MAAM,8BAA+B,SAAQ,2BAA2B;IAAxE;;QACU,WAAM,GAKT,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,kCAAkC,EAAE,EAAE,EAAE,kCAAkC,EAAE,EAAE,EAAE,CAAC,CAAA;IAyK7I,CAAC;IAvKO,sBAAsB;;YAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACtC,MAAM,IAAI,CAAC,MAAM,CAAA;QACnB,CAAC;KAAA;IAEK,6CAA6C,CACjD,MAAgB,EAChB,UAAwC,EACxC,uBAAiC;;YAEjC,SAAS,0BAA0B,CAAC,MAInC;gBACC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;oBACjC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBACpC,IAAI,EAAE,EAAE;wBACN,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;wBAClC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE;4BACrB,GAAG,CAAC,IAAI,CAAC,GAAG;gCACV,YAAY,EAAE,MAAM,CAAC,YAAY;gCACjC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;gCACzC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB;6BAC1D,CAAA;yBACF;qBACF;oBACD,OAAO,GAAG,CAAA;gBACZ,CAAC,EAAE,EAA6G,CAAC,CAAA;YACnH,CAAC;YAED,MAAM,wBAAwB,GAAG,0BAA0B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;YAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE;gBAChD,OAAO,wBAAwB,CAAA;aAChC;iBAAM;gBACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAO,MAAM,EAAE,EAAE;oBAC9C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;wBACrD,IAAI,QAAQ,CAAC,SAAS,EAAE;4BACtB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAC3E,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EACtC,UAAU,EACV,uBAAuB,CACxB,CAAA;4BACD,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAG,CAAC,CAAC,CAAA;yBACvF;qBACF;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC,CAAA,CAAC,CAAA;gBACF,OAAO,0BAA0B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;aACrD;QACH,CAAC;KAAA;IAEK,2BAA2B,CAC/B,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;;YAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,kCAAkC,CAAC,UAAU,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC3D,IAAI,MAAM,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA,EAAE;gBAC/B,OAAO;oBACL,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB;oBACzD,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;iBAC1C,CAAA;aACF;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAA;YAC5D,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,YAAY,EACpB,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EACtG,UAAU,EACV,uBAAuB,CACxB,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;KAAA;IAEK,wBAAwB,CAC5B,EAAU,EACV,UAAoD,EACpD,uBAA6C,EAC7C,mBAA4B;;;YAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACtC,IAAI,UAAU,EAAE;gBACd,OAAO;oBACL,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,WAAW,EAAE,MAAA,UAAU,CAAC,SAAS,0CAAE,WAAW;oBAC9C,mBAAmB,EAAE,MAAA,UAAU,CAAC,SAAS,0CAAE,mBAAmB;iBAC/D,CAAA;aACF;iBAAM,IAAI,mBAAmB,EAAE;gBAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;gBACpD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAA;gBACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAA;gBACpE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,mBAAmB,EAAE,CAAA;aACxH;;gBAAM,OAAO,SAAS,CAAA;;KACxB;IAEO,SAAS,CACf,YAA0B,EAC1B,SAAiG,EACjG,UAAyC,EACzC,uBAAkC;QAElC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAO,MAAM,EAAE,EAAE;YAC9C,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAG,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;YAC/D,IAAI,SAAS,EAAE;gBACb,sIAAsI;gBACtI,2DAA2D;gBAC3D,IAAI,UAAU,IAAI,uBAAuB,EAAE;oBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,SAAS,CAAC,mBAAmB,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAA;oBACzI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;wBACtB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAG,CAAC,CAAA;oBAC7C,CAAC,CAAC,CAAA;iBACH;gBACD,IAAI,SAAS,CAAC,QAAQ,EAAE;oBACtB,MAAM,CAAC,kCAAkC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,EAAG,CAAA;iBACpF;aACF;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;IAEa,iBAAiB;;YAM7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAA;YAChF,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;YAC7G,MAAM,QAAQ,GAAyC,EAAE,CAAA;YACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC1C,MAAM,kCAAkC,GAAmC,EAAE,CAAA;YAC7E,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE;gBAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;gBACtD,QAAQ,CAAC,QAAQ,CAAC,EAAG,CAAC,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA;gBAC7E,IAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,QAAQ,EAAE;oBAC3B,kCAAkC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAG,CAAA;iBACrE;aACF;YACD,MAAM,kCAAkC,GAA8D,EAAE,CAAA;YACxG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,kCAAkC,EAAE,kCAAkC,EAAE,CAAA;QACvG,CAAC;KAAA;IAEK,yBAAyB,CAAC,UAAwC;;YACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,kCAAkC,CAAC,UAAU,CAAC,CAAA;YACpE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAClI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAA;YAC7G,MAAM,CAAC,kCAAkC,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAA;YAChE,OAAO,QAAQ,CAAA;QACjB,CAAC;KAAA;IAEK,oBAAoB,CAAC,UAAwC;;YACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAClI,MAAM,GAAG,GAAa,EAAE,CAAA;YACxB,KAAK,MAAM,mBAAmB,IAAI,oBAAoB,EAAE;gBACtD,sIAAsI;gBACtI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;aAC5G;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;CACF;AAED,MAAM,kCAAmC,SAAQ,2BAA2B;IAK1E,YACE,IAA6B,EAC7B,cAAyC,EACzC,aAAuC,EACvC,mBAA6C,EAC7C,gBAAkC,EAClC,YAA8B,EAC9B,UAA4B,EAC5B,aAAsB,EACtB,kBAEC;;QAED,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;QAhB3G,aAAQ,GAAwB,IAAI,GAAG,EAAE,CAAA;QACzC,uCAAkC,GAAwB,IAAI,GAAG,EAAE,CAAA;QAgBlF,IAAI,CAAC,aAAa,GAAG,IAAI,oDAAuB,CAAC,MAAA,kBAAkB,CAAC,YAAY,mCAAI,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACrG,CAAC;IAEK,sBAAsB;;YAC1B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrB,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,CAAA;QACjD,CAAC;KAAA;IAEK,6CAA6C,CACjD,MAAgB,EAChB,UAAwC,EACxC,uBAAiC;;YAEjC,MAAM,GAAG,GAAyG,EAAE,CAAA;YACpH,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACtC,IAAI,MAAM,EAAE;oBACV,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE;wBAC1D,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,mCAAmC,CAAC,CAAA;oBAC5E,CAAC,CAAC,CAAA;oBACF,IAAI,SAAS,CAAC,SAAS,EAAE;wBACvB,GAAG,CAAC,IAAI,CAAC,GAAG;4BACV,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW;4BAC5C,mBAAmB,EAAE,SAAS,CAAC,SAAS,CAAC,mBAAmB;yBAC7D,CAAA;qBACF;iBACF;aACF;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEa,iEAAiE,CAC7E,mBAA2B,EAC3B,UAAoD,EACpD,uBAA6C;;YAE7C,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,CAAC,GAAG,4DAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAClI,CAAA;YACD,IAAI,UAAU,KAAI,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,MAAM,CAAA,EAAE;gBACjD,sIAAsI;gBACtI,2DAA2D;gBAC3D,OAAO;oBACL,GAAG,mBAAmB;oBACtB,GAAG,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;iBACtH,CAAA;aACF;iBAAM;gBACL,OAAO,mBAAmB,CAAA;aAC3B;QACH,CAAC;KAAA;IAEK,wBAAwB,CAC5B,EAAU,EACV,UAAoD,EACpD,uBAA6C,EAC7C,mBAA4B;;;YAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;YAC1D,IAAI,MAAM,EAAE;gBACV,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAC1C,EAAE,EACF,CAAO,QAAQ,EAAE,EAAE;oBACjB,MAAM,QAAQ,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,MAAM,CAAC,IAAI,CAAA;oBACxC,IAAI,QAAQ,CAAC,SAAS,EAAE;wBACtB,uIAAuI;wBACvI,2DAA2D;wBAC3D,IAAI,UAAU,IAAI,uBAAuB,EAAE;4BACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CACnE,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EACtC,UAAU,EACV,uBAAuB,CACxB,CAAA;4BACD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gCACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAG,CAAC,CAAA;4BACpD,CAAC,CAAC,CAAA;4BACF,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAA;yBAChC;qBACF;oBACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAA;gBACjF,CAAC,CAAA,EACD,GAAG,EAAE,CAAC,IAAI,CACX,CAAA;gBACD,OAAO;oBACL,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,WAAW,EAAE,MAAA,OAAO,CAAC,SAAS,0CAAE,WAAW;oBAC3C,mBAAmB,EAAE,MAAA,OAAO,CAAC,SAAS,0CAAE,mBAAmB;iBAC5D,CAAA;aACF;iBAAM,IAAI,mBAAmB,EAAE;gBAC9B,OAAO,MAAM,IAAI,CAAC,aAAa;qBAC5B,GAAG,CAAC,EAAE,EAAE,GAAS,EAAE;oBAClB,OAAA,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE;wBACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;wBACpD,IAAI,CAAC,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAA;wBACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;wBAC9C,IAAI,SAAS,EAAE;4BACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iEAAiE,CACzF,SAAS,CAAC,mBAAmB,EAC7B,UAAU,EACV,uBAAuB,CACxB,CAAA;4BACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAA;yBAC/E;6BAAM;4BACL,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;yBAC3D;oBACH,CAAC,CAAA,CAAC,CAAA;kBAAA,CACH;qBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,eAAC,OAAA,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,MAAA,CAAC,CAAC,SAAS,0CAAE,WAAW,EAAE,mBAAmB,EAAE,MAAA,CAAC,CAAC,SAAS,0CAAE,mBAAmB,EAAE,CAAC,CAAA,EAAA,CAAC,CAAA;aACjJ;;gBAAM,OAAO,SAAS,CAAA;;KACxB;IAEK,2BAA2B,CAC/B,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;;YAE7C,IAAI,UAAU,GAAG,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACxE,IAAI,CAAC,UAAU,EAAE;gBACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAA;gBACnF,UAAU,GAAG,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;aACrE;YACD,IAAI,UAAU,EAAE;gBACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;gBAClE,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,4BAA4B,CAAC,CAAA;gBACnG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;oBACzB,OAAO;wBACL,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;wBACtC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;wBAC9C,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB;qBAC/D,CAAA;iBACF;;oBAAM,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;aACnF;iBAAM;gBACL,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;gBAC9C,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;gBAClE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE;oBACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;oBACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iEAAiE,CACzF,OAAO,CAAC,mBAAmB,EAC3B,UAAU,EACV,uBAAuB,CACxB,CAAA;oBACD,OAAO;wBACL,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,SAAS,EAAE;4BACT,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;4BAChD,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,QAAQ,EAAE,IAAI;yBACf;wBACD,MAAM;qBACP,CAAA;gBACH,CAAC,CAAA,CAAC,CACH,CAAA;gBACD,IAAI,CAAC,oBAAoB;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;gBACxF,OAAO;oBACL,YAAY,EAAE,oBAAoB,CAAC,YAAY;oBAC/C,WAAW,EAAE,oBAAoB,CAAC,SAAU,CAAC,WAAW;oBACxD,mBAAmB,EAAE,oBAAoB,CAAC,SAAU,CAAC,mBAAmB;iBACzE,CAAA;aACF;QACH,CAAC;KAAA;IAED,iJAAiJ;IACjJ,uEAAuE;IACzD,uBAAuB,CACnC,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;;YAE7C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,UAAU,CAAC,CAAA;YAC1I,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,GAAG,CAAC,CAAO,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAG,EAAE,GAAG,EAAE,CAC1C,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE;oBACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;oBAC9C,IAAI,SAAS,EAAE;wBACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iEAAiE,CACzF,SAAS,CAAC,mBAAmB,EAC7B,UAAU,EACV,uBAAuB,CACxB,CAAA;wBACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;qBACjD;yBAAM;wBACL,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;qBAC1C;gBACH,CAAC,CAAA,CAAC,CACH,CAAA;YACH,CAAC,CAAA,CAAC,CACH,CAAA;QACH,CAAC;KAAA;IAEa,QAAQ,CACpB,yBAAmF;;;YAEnF,MAAM,IAAI,GAAG,MAAM,yBAAyB,EAAE,CAAA;YAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,CAAC,EAAG,CAAC,CAAC,CAAA;YAC9E,IAAI,MAAA,IAAI,CAAC,SAAS,0CAAE,QAAQ;gBAAE,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAG,CAAC,CAAA;YAC5H,MAAM,IAAI,GAAG;gBACX,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAA;YACD,OAAO;gBACL,IAAI;gBACJ,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC;aACjD,CAAA;;KACF;IAEa,eAAe,CAAC,aAAsB,EAAE,IAA+C;;YACnG,IAAI,CAAC,aAAa,EAAE;gBAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;gBACzD,IAAI,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;oBACpG,IAAI,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;iBAC3E;aACF;QACH,CAAC;KAAA;IAED,yBAAyB,CAAC,UAAwC;QAChE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;IAED,oBAAoB,CAAC,UAAwC;QAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;CACF","sourcesContent":["import { ExchangeData } from '../../icc-api/model/internal/ExchangeData'\nimport { IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { BaseExchangeDataManager } from './BaseExchangeDataManager'\nimport { UserEncryptionKeysManager } from './UserEncryptionKeysManager'\nimport { UserSignatureKeysManager } from './UserSignatureKeysManager'\nimport { AccessControlSecretUtils } from './AccessControlSecretUtils'\nimport { CryptoStrategies } from './CryptoStrategies'\nimport { fingerprintV1, getShaVersionForKey, hexPublicKeysWithSha1Of, hexPublicKeysWithSha256Of } from './utils'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { hex2ua, ua2b64 } from '../utils'\nimport { LruTemporisedAsyncCache } from '../utils/lru-temporised-async-cache'\nimport { EntityWithDelegationTypeName, entityWithDelegationTypeNames } from '../utils/EntityWithDelegationTypeName'\nimport { CryptoActorStubWithType } from '../../icc-api/model/CryptoActorStub'\n\nexport type ExchangeDataManagerOptionalParameters = {\n  // Only for not fully cached implementation (data owner can't request all his exchange data), amount of exchange data which can be cached\n  lruCacheSize?: number // default = 2000\n}\n\n/**\n * @internal this function is for internal use only and may be changed without notice.\n * Initialises and returns the exchange data manager which is most appropriate for the current data owner.\n */\nexport async function initialiseExchangeDataManagerForCurrentDataOwner(\n  base: BaseExchangeDataManager,\n  encryptionKeys: UserEncryptionKeysManager,\n  signatureKeys: UserSignatureKeysManager,\n  accessControlSecret: AccessControlSecretUtils,\n  cryptoStrategies: CryptoStrategies,\n  dataOwnerApi: IccDataOwnerXApi,\n  primitives: CryptoPrimitives,\n  useParentKeys: boolean,\n  optionalParameters: ExchangeDataManagerOptionalParameters = {}\n): Promise<ExchangeDataManager> {\n  const currentOwner = CryptoActorStubWithType.fromDataOwner(await dataOwnerApi.getCurrentDataOwner())\n  if (cryptoStrategies.dataOwnerRequiresAnonymousDelegation(currentOwner)) {\n    const res = new FullyCachedExchangeDataManager(\n      base,\n      encryptionKeys,\n      signatureKeys,\n      accessControlSecret,\n      cryptoStrategies,\n      dataOwnerApi,\n      primitives,\n      useParentKeys\n    )\n    await res.clearOrRepopulateCache()\n    return res\n  } else {\n    return new LimitedLruCacheExchangeDataManager(\n      base,\n      encryptionKeys,\n      signatureKeys,\n      accessControlSecret,\n      cryptoStrategies,\n      dataOwnerApi,\n      primitives,\n      useParentKeys,\n      optionalParameters\n    )\n  }\n}\n\ntype CachedExchangeData = {\n  exchangeData: ExchangeData\n  decrypted?: {\n    accessControlSecret: string\n    exchangeKey: CryptoKey\n    verified: boolean\n  }\n}\n\n/**\n * @internal this class is intended for internal use only and may be changed without notice.\n * Exchange data manager which automatically handles decryption and cache\n */\nexport interface ExchangeDataManager {\n  readonly base: BaseExchangeDataManager\n\n  /**\n   * Updates all exchange data between the current data owner and another data owner to allow the other data owner to access existing exchange data\n   * using a new public key. Note that this will make existing exchange keys from the other data owner to the current data owner unverified, therefore\n   * invalid for encryption.\n   * @param otherDataOwner the other data owner.\n   * @param newDataOwnerPublicKey a new public key of the other data owner.\n   */\n  giveAccessBackTo(otherDataOwner: string, newDataOwnerPublicKey: string): Promise<void>\n\n  /**\n   * Gets any existing and verified exchange data from the current data owner to the provided delegate or creates new data if no verified data is\n   * available, then caches it. The {@link entityType} and {@link entitySecretForeignKeys} will be used for the secure-delegation-hash-based cache\n   * of the exchange data and not for actually creating the exchange data.\n   * @param delegateId the id of the delegate.\n   * @param entityType type of the entity for which you want to create new metadata.\n   * @param entitySecretForeignKeys the secret foreign keys of the entity which you want to create new metadata.\n   * @return the access control secret and key of the data to use for encryption.\n   */\n  getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }>\n\n  /**\n   * Retrieve the cached decrypted exchange data key associated with any of the provided hashes/entry keys of secure delegations. Depending on the\n   * implementation the {@link entityType} and {@link entitySecretForeignKeys} may be used to improve the secure-delegation-hash-based cache of\n   * exchange data from the other available exchange data caches.\n   * @param hashes hashes of access control secrets for a specific entity, as they appear in the key of secure delegation entries\n   * @param entityType type of the entity containing the metadata for which you are retrieving the encryption key.\n   * @param entitySecretForeignKeys the secret foreign keys of the entity containing the metadata for which you are retrieving the encryption key.\n   * @return the exchange data and decrypted key associated to that hash if cached\n   */\n  getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [hash: string]: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey } }>\n\n  /**\n   * Retrieves the exchange data with the provided id (from the cache if available or from the server otherwise if allowed by\n   * {@link retrieveIfNotCached}) and attempts to decrypt it, then caches the result. The {@link entityType} and {@link entitySecretForeignKeys} will\n   * be used for the secure-delegation-hash-based cache of the exchange data.\n   * @param id id of the exchange data\n   * @param entityType type of the entity containing the metadata for which you are retrieving the encryption key.\n   * @param entitySecretForeignKeys the secret foreign keys of the entity containing the metadata for which you are retrieving the encryption key.\n   * @param retrieveIfNotCached if false and there is no cached exchange data with the provided id the method returns undefined, else the method will\n   * attempt to load the exchange data from the server.\n   * @return undefined if the exchange data is not cached and {@link retrieveIfNotCached} is false. Else an object containing:\n   * - exchangeData: the exchange data with the provided id\n   * - exchangeKey: the exchange key corresponding to the provided exchange data if it could be decrypted, else undefined\n   * @throws if no exchange data with the given id is cached and {@link retrieveIfNotCached} is true and the data could not be found in the server\n   * either.\n   */\n  getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined; exchangeData: ExchangeData } | undefined>\n\n  /**\n   * Clears the cache or fully repopulates the cache if the current data owner can retrieve all of his exchange data according to the crypto\n   * strategies.\n   */\n  clearOrRepopulateCache(): Promise<void>\n\n  /**\n   * If the current data owner requires anonymous delegations this returns the base64 representation of the concatenation of all available access\n   * control keys for the current data owner.\n   */\n  getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined>\n\n  /**\n   * If the current data owner requires anonymous delegations this returns the access control keys which may be used in secure delegations for the\n   * data owner, which can be used to search for data.\n   */\n  getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined>\n}\n\nabstract class AbstractExchangeDataManager implements ExchangeDataManager {\n  constructor(\n    readonly base: BaseExchangeDataManager,\n    protected readonly encryptionKeys: UserEncryptionKeysManager,\n    protected readonly signatureKeys: UserSignatureKeysManager,\n    protected readonly accessControlSecret: AccessControlSecretUtils,\n    protected readonly cryptoStrategies: CryptoStrategies,\n    protected readonly dataOwnerApi: IccDataOwnerXApi,\n    protected readonly primitives: CryptoPrimitives,\n    private readonly useParentKeys: boolean\n  ) {}\n\n  protected async decryptData(data: ExchangeData): Promise<\n    | {\n        accessControlSecret: string\n        exchangeKey: CryptoKey\n        verified: boolean\n      }\n    | undefined\n  > {\n    const decryptionKeys = this.encryptionKeys.getDecryptionKeys()\n    const decryptedKey = (await this.base.tryDecryptExchangeKeys([data], decryptionKeys)).successfulDecryptions[0]\n    if (!decryptedKey) return undefined\n    const decryptedAccessControlSecret = (await this.base.tryDecryptAccessControlSecret([data], decryptionKeys)).successfulDecryptions[0]\n    if (!decryptedAccessControlSecret) throw new Error(`Decryption key could be decrypted but access control secret could not for data ${data}`)\n    return {\n      accessControlSecret: decryptedAccessControlSecret,\n      exchangeKey: decryptedKey,\n      verified: await this.base.verifyExchangeData(data, (fp) => this.signatureKeys.getSignatureVerificationKey(fp)),\n    }\n  }\n\n  protected async createNewExchangeData(\n    delegateId: string,\n    newDataId?: string\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    const encryptionKeys: { [fp: string]: CryptoKey } = {}\n    this.encryptionKeys.getSelfVerifiedKeys().forEach(({ fingerprint, pair }) => {\n      encryptionKeys[fingerprint] = pair.publicKey\n    })\n    if (delegateId != (await this.dataOwnerApi.getCurrentDataOwnerId())) {\n      const delegate = await this.dataOwnerApi.getCryptoActorStub(delegateId)\n      const sha256KeysOfDelegate = hexPublicKeysWithSha256Of(delegate.stub)\n      const sha1KeysOfDelegate = hexPublicKeysWithSha1Of(delegate.stub)\n      let allVerifiedDelegateKeys: string[]\n      if (this.useParentKeys && (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()).includes(delegateId)) {\n        allVerifiedDelegateKeys = await this.encryptionKeys.getVerifiedPublicKeysFor(delegate.stub)\n      } else {\n        allVerifiedDelegateKeys = await this.cryptoStrategies.verifyDelegatePublicKeys(\n          delegate,\n          [...Array.from(sha256KeysOfDelegate), ...Array.from(sha1KeysOfDelegate)],\n          this.primitives\n        )\n      }\n      if (!allVerifiedDelegateKeys.length)\n        throw new Error(`Could not create exchange data to ${delegateId} as no public key for the delegate could be verified.`)\n      for (const delegateKey of allVerifiedDelegateKeys) {\n        if (sha1KeysOfDelegate.has(delegateKey)) {\n          encryptionKeys[fingerprintV1(delegateKey)] = await this.primitives.RSA.importKey('spki', hex2ua(delegateKey), ['encrypt'], 'sha-1')\n        } else if (sha256KeysOfDelegate.has(delegateKey)) {\n          encryptionKeys[fingerprintV1(delegateKey)] = await this.primitives.RSA.importKey('spki', hex2ua(delegateKey), ['encrypt'], 'sha-256')\n        } else throw new Error('Illegal state: verified keys should contain only keys for OAPE-SHA1 or OAPE-SHA256.')\n      }\n    }\n    const signatureKey = await this.signatureKeys.getOrCreateSignatureKeyPair()\n    const newData = await this.base.createExchangeData(\n      delegateId,\n      { [signatureKey.fingerprint]: signatureKey.keyPair.privateKey },\n      encryptionKeys,\n      newDataId ? { id: newDataId } : {}\n    )\n    return {\n      exchangeData: newData.exchangeData,\n      accessControlSecret: newData.accessControlSecret,\n      exchangeKey: newData.exchangeKey,\n    }\n  }\n\n  async giveAccessBackTo(otherDataOwner: string, newDataOwnerPublicKey: string) {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const newKeyFp = fingerprintV1(newDataOwnerPublicKey)\n    const other = await this.dataOwnerApi.getCryptoActorStub(otherDataOwner)\n    const newKeyHashVersion = getShaVersionForKey(other.stub, newDataOwnerPublicKey)\n    if (!newKeyHashVersion) throw new Error(`Public key not found for data owner ${otherDataOwner}`)\n    const importedNewKey = await this.primitives.RSA.importKey('spki', hex2ua(newDataOwnerPublicKey), ['encrypt'], newKeyHashVersion)\n    const signatureKey = await this.signatureKeys.getOrCreateSignatureKeyPair()\n    const decryptionKeys = this.encryptionKeys.getDecryptionKeys()\n    const allExchangeDataToUpdate =\n      self == otherDataOwner\n        ? await this.base.getExchangeDataByDelegatorDelegatePair(self, self)\n        : [\n            ...(await this.base.getExchangeDataByDelegatorDelegatePair(self, otherDataOwner)),\n            ...(await this.base.getExchangeDataByDelegatorDelegatePair(otherDataOwner, self)),\n          ]\n    for (const dataToUpdate of allExchangeDataToUpdate) {\n      if (!Object.keys(dataToUpdate.exchangeKey).find((fp) => fp == newKeyFp)) {\n        const updated = await this.base.tryUpdateExchangeData(\n          dataToUpdate,\n          decryptionKeys,\n          { [newKeyFp]: importedNewKey },\n          { [signatureKey.fingerprint]: signatureKey.keyPair.privateKey },\n          (verificationFp) => this.signatureKeys.getSignatureVerificationKey(verificationFp)\n        )\n        if (!updated) {\n          console.warn(`Failed to give access back to exchanged data ${JSON.stringify(dataToUpdate)}`)\n        }\n      }\n    }\n  }\n\n  clearOrRepopulateCache(): Promise<void> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [p: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } }> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeData: ExchangeData; exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined } | undefined> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined> {\n    throw new Error('Implemented by concrete class')\n  }\n}\n\nclass FullyCachedExchangeDataManager extends AbstractExchangeDataManager {\n  private caches: Promise<{\n    dataById: { [id: string]: CachedExchangeData }\n    hashToId: Map<string, string>\n    delegateToVerifiedEncryptionDataId: { [delegate: string]: string }\n    entityTypeToAccessControlKeysValue: { [entityType in EntityWithDelegationTypeName]?: string }\n  }> = Promise.resolve({ dataById: {}, hashToId: new Map(), delegateToVerifiedEncryptionDataId: {}, entityTypeToAccessControlKeysValue: {} })\n\n  async clearOrRepopulateCache(): Promise<void> {\n    this.caches = this.doRepopulateCache()\n    await this.caches\n  }\n\n  async getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [hash: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } }> {\n    function retrieveByHashesFromCaches(caches: {\n      dataById: { [id: string]: CachedExchangeData }\n      hashToId: Map<string, string>\n      delegateToVerifiedEncryptionDataId: { [delegate: string]: string }\n    }): { [hash: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } } {\n      return hashes.reduce((res, hash) => {\n        const id = caches.hashToId.get(hash)\n        if (id) {\n          const cached = caches.dataById[id]\n          if (cached?.decrypted) {\n            res[hash] = {\n              exchangeData: cached.exchangeData,\n              exchangeKey: cached.decrypted.exchangeKey,\n              accessControlSecret: cached.decrypted.accessControlSecret,\n            }\n          }\n        }\n        return res\n      }, {} as { [hash: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } })\n    }\n\n    const retrievedFromHashesCache = retrieveByHashesFromCaches(await this.caches)\n    if (Object.keys(retrievedFromHashesCache).length) {\n      return retrievedFromHashesCache\n    } else {\n      this.caches = this.caches.then(async (caches) => {\n        for (const currData of Object.values(caches.dataById)) {\n          if (currData.decrypted) {\n            const currDataHashes = await this.accessControlSecret.secureDelegationKeysFor(\n              currData.decrypted.accessControlSecret,\n              entityType,\n              entitySecretForeignKeys\n            )\n            currDataHashes.forEach((hash) => caches.hashToId.set(hash, currData.exchangeData.id!))\n          }\n        }\n        return caches\n      })\n      return retrieveByHashesFromCaches(await this.caches)\n    }\n  }\n\n  async getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    const caches = await this.caches\n    const dataId = caches.delegateToVerifiedEncryptionDataId[delegateId]\n    const cached = dataId ? caches.dataById[dataId] : undefined\n    if (cached && cached?.decrypted) {\n      return {\n        exchangeData: cached.exchangeData,\n        accessControlSecret: cached.decrypted.accessControlSecret,\n        exchangeKey: cached.decrypted.exchangeKey,\n      }\n    }\n    const created = await this.createNewExchangeData(delegateId)\n    this.cacheData(\n      created.exchangeData,\n      { accessControlSecret: created.accessControlSecret, exchangeKey: created.exchangeKey, verified: true },\n      entityType,\n      entitySecretForeignKeys\n    )\n    return created\n  }\n\n  async getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeData: ExchangeData; exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined } | undefined> {\n    const caches = await this.caches\n    const cachedData = caches.dataById[id]\n    if (cachedData) {\n      return {\n        exchangeData: cachedData.exchangeData,\n        exchangeKey: cachedData.decrypted?.exchangeKey,\n        accessControlSecret: cachedData.decrypted?.accessControlSecret,\n      }\n    } else if (retrieveIfNotCached) {\n      const data = await this.base.getExchangeDataById(id)\n      if (!data) throw new Error(`Could not find exchange data with id ${id}`)\n      const decrypted = await this.decryptData(data)\n      this.cacheData(data, decrypted, entityType, entitySecretForeignKeys)\n      return { exchangeData: data, exchangeKey: decrypted?.exchangeKey, accessControlSecret: decrypted?.accessControlSecret }\n    } else return undefined\n  }\n\n  private cacheData(\n    exchangeData: ExchangeData,\n    decrypted: { accessControlSecret: string; exchangeKey: CryptoKey; verified: boolean } | undefined,\n    entityType?: EntityWithDelegationTypeName,\n    entitySecretForeignKeys?: string[]\n  ): void {\n    this.caches = this.caches.then(async (caches) => {\n      caches.dataById[exchangeData.id!] = { exchangeData, decrypted }\n      if (decrypted) {\n        // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users and it has some performance impact\n        // `secureDelegationKeysFor` is currently ignoring the sfks\n        if (entityType && entitySecretForeignKeys) {\n          const hashes = await this.accessControlSecret.secureDelegationKeysFor(decrypted.accessControlSecret, entityType, entitySecretForeignKeys)\n          hashes.forEach((hash) => {\n            caches.hashToId.set(hash, exchangeData.id!)\n          })\n        }\n        if (decrypted.verified) {\n          caches.delegateToVerifiedEncryptionDataId[exchangeData.delegate] = exchangeData.id!\n        }\n      }\n      return caches\n    })\n  }\n\n  private async doRepopulateCache(): Promise<{\n    dataById: { [id: string]: CachedExchangeData }\n    hashToId: Map<string, string>\n    delegateToVerifiedEncryptionDataId: { [delegate: string]: string }\n    entityTypeToAccessControlKeysValue: { [entityType in EntityWithDelegationTypeName]?: string }\n  }> {\n    const allData = await this.base.getAllExchangeDataForCurrentDataOwnerIfAllowed()\n    if (!allData) throw new Error('Impossible to use fully cached exchange data manager for current data owner.')\n    const dataById: { [id: string]: CachedExchangeData } = {}\n    const hashToId = new Map<string, string>()\n    const delegateToVerifiedEncryptionDataId: { [delegate: string]: string } = {}\n    for (const currData of allData) {\n      const currDecrypted = await this.decryptData(currData)\n      dataById[currData.id!] = { exchangeData: currData, decrypted: currDecrypted }\n      if (currDecrypted?.verified) {\n        delegateToVerifiedEncryptionDataId[currData.delegate] = currData.id!\n      }\n    }\n    const entityTypeToAccessControlKeysValue: { [entityType in EntityWithDelegationTypeName]?: string } = {}\n    return { dataById, hashToId, delegateToVerifiedEncryptionDataId, entityTypeToAccessControlKeysValue }\n  }\n\n  async getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined> {\n    const caches = await this.caches\n    const cached = caches.entityTypeToAccessControlKeysValue[entityType]\n    if (cached) return cached\n    const accessControlSecrets = Object.values(caches.dataById).flatMap((x) => (x.decrypted ? [x.decrypted.accessControlSecret] : []))\n    const fullData = await this.accessControlSecret.getEncodedAccessControlKeys(accessControlSecrets, entityType)\n    caches.entityTypeToAccessControlKeysValue[entityType] = fullData\n    return fullData\n  }\n\n  async getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined> {\n    const caches = await this.caches\n    const accessControlSecrets = Object.values(caches.dataById).flatMap((x) => (x.decrypted ? [x.decrypted.accessControlSecret] : []))\n    const res: string[] = []\n    for (const accessControlSecret of accessControlSecrets) {\n      // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users and it has some performance impact\n      res.push(await this.accessControlSecret.secureDelegationKeyFor(accessControlSecret, entityType, undefined))\n    }\n    return res\n  }\n}\n\nclass LimitedLruCacheExchangeDataManager extends AbstractExchangeDataManager {\n  private readonly idToDataCache: LruTemporisedAsyncCache<string, CachedExchangeData & { hashes: string[] }>\n  private readonly hashToId: Map<string, string> = new Map()\n  private readonly delegateToVerifiedEncryptionDataId: Map<string, string> = new Map()\n\n  constructor(\n    base: BaseExchangeDataManager,\n    encryptionKeys: UserEncryptionKeysManager,\n    signatureKeys: UserSignatureKeysManager,\n    accessControlSecret: AccessControlSecretUtils,\n    cryptoStrategies: CryptoStrategies,\n    dataOwnerApi: IccDataOwnerXApi,\n    primitives: CryptoPrimitives,\n    useParentKeys: boolean,\n    optionalParameters: {\n      lruCacheSize?: number\n    }\n  ) {\n    super(base, encryptionKeys, signatureKeys, accessControlSecret, cryptoStrategies, dataOwnerApi, primitives, useParentKeys)\n    this.idToDataCache = new LruTemporisedAsyncCache(optionalParameters.lruCacheSize ?? 2000, () => -1)\n  }\n\n  async clearOrRepopulateCache(): Promise<void> {\n    this.idToDataCache.clear(false)\n    this.hashToId.clear()\n    this.delegateToVerifiedEncryptionDataId.clear()\n  }\n\n  async getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [p: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } }> {\n    const res: { [p: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } } = {}\n    for (const hash of hashes) {\n      const dataId = this.hashToId.get(hash)\n      if (dataId) {\n        const retrieved = await this.idToDataCache.get(dataId, () => {\n          throw new Error(`Data with id ${dataId} should have been already cached.`)\n        })\n        if (retrieved.decrypted) {\n          res[hash] = {\n            exchangeData: retrieved.exchangeData,\n            exchangeKey: retrieved.decrypted.exchangeKey,\n            accessControlSecret: retrieved.decrypted.accessControlSecret,\n          }\n        }\n      }\n    }\n    return res\n  }\n\n  private async secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n    accessControlSecret: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<string[]> {\n    const noSfkDelegationKeys = await Promise.all(\n      [...entityWithDelegationTypeNames].map((t) => this.accessControlSecret.secureDelegationKeyFor(accessControlSecret, t, undefined))\n    )\n    if (entityType && entitySecretForeignKeys?.length) {\n      // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users and it has some performance impact\n      // `secureDelegationKeysFor` is currently ignoring the sfks\n      return [\n        ...noSfkDelegationKeys,\n        ...(await this.accessControlSecret.secureDelegationKeysFor(accessControlSecret, entityType, entitySecretForeignKeys)),\n      ]\n    } else {\n      return noSfkDelegationKeys\n    }\n  }\n\n  async getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeData: ExchangeData; exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined } | undefined> {\n    const cached = await this.idToDataCache.getIfCachedJob(id)\n    if (cached) {\n      const updated = await this.idToDataCache.get(\n        id,\n        async (prevData) => {\n          const toUpdate = prevData ?? cached.item\n          if (toUpdate.decrypted) {\n            // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users, and it has some performance impact\n            // `secureDelegationKeysFor` is currently ignoring the sfks\n            if (entityType && entitySecretForeignKeys) {\n              const hashes = await this.accessControlSecret.secureDelegationKeysFor(\n                toUpdate.decrypted.accessControlSecret,\n                entityType,\n                entitySecretForeignKeys\n              )\n              hashes.forEach((hash) => {\n                this.hashToId.set(hash, toUpdate.exchangeData.id!)\n              })\n              toUpdate.hashes.push(...hashes)\n            }\n          }\n          return { item: toUpdate, onEviction: (b) => this.doOnEvictionJob(b, toUpdate) }\n        },\n        () => true\n      )\n      return {\n        exchangeData: updated.exchangeData,\n        exchangeKey: updated.decrypted?.exchangeKey,\n        accessControlSecret: updated.decrypted?.accessControlSecret,\n      }\n    } else if (retrieveIfNotCached) {\n      return await this.idToDataCache\n        .get(id, async () =>\n          this.cacheJob(async () => {\n            const data = await this.base.getExchangeDataById(id)\n            if (!data) throw new Error(`Could not find exchange data with id ${id}`)\n            const decrypted = await this.decryptData(data)\n            if (decrypted) {\n              const hashes = await this.secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n                decrypted.accessControlSecret,\n                entityType,\n                entitySecretForeignKeys\n              )\n              return { exchangeData: data, hashes, decrypted, verified: decrypted.verified }\n            } else {\n              return { exchangeData: data, hashes: [], verified: false }\n            }\n          })\n        )\n        .then((x) => ({ exchangeData: x.exchangeData, exchangeKey: x.decrypted?.exchangeKey, accessControlSecret: x.decrypted?.accessControlSecret }))\n    } else return undefined\n  }\n\n  async getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    let existingId = this.delegateToVerifiedEncryptionDataId.get(delegateId)\n    if (!existingId) {\n      await this.populateCacheToDelegate(delegateId, entityType, entitySecretForeignKeys)\n      existingId = this.delegateToVerifiedEncryptionDataId.get(delegateId)\n    }\n    if (existingId) {\n      const cached = await this.idToDataCache.getIfCachedJob(existingId)\n      if (!cached) throw new Error(`Illegal state: data with id ${existingId} should have been in cache`)\n      if (cached.item.decrypted) {\n        return {\n          exchangeData: cached.item.exchangeData,\n          exchangeKey: cached.item.decrypted.exchangeKey,\n          accessControlSecret: cached.item.decrypted.accessControlSecret,\n        }\n      } else throw new Error(`Illegal state: cached verified data should be decrypted.`)\n    } else {\n      const newDataId = this.primitives.randomUuid()\n      this.delegateToVerifiedEncryptionDataId.set(delegateId, newDataId)\n      const createdAndCachedData = await this.idToDataCache.get(newDataId, () =>\n        this.cacheJob(async () => {\n          const created = await this.createNewExchangeData(delegateId, newDataId)\n          const hashes = await this.secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n            created.accessControlSecret,\n            entityType,\n            entitySecretForeignKeys\n          )\n          return {\n            exchangeData: created.exchangeData,\n            decrypted: {\n              accessControlSecret: created.accessControlSecret,\n              exchangeKey: created.exchangeKey,\n              verified: true,\n            },\n            hashes,\n          }\n        })\n      )\n      if (!createdAndCachedData) throw new Error('Data should have been successfully created')\n      return {\n        exchangeData: createdAndCachedData.exchangeData,\n        exchangeKey: createdAndCachedData.decrypted!.exchangeKey,\n        accessControlSecret: createdAndCachedData.decrypted!.accessControlSecret,\n      }\n    }\n  }\n\n  // Loads and adds to the cache all exchange data from the current data owner to the given delegate. Allows to check if there is already data from\n  // the current data owner to the delegate which is good for encryption.\n  private async populateCacheToDelegate(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<void> {\n    const dataToDelegate = await this.base.getExchangeDataByDelegatorDelegatePair(await this.dataOwnerApi.getCurrentDataOwnerId(), delegateId)\n    await Promise.all(\n      dataToDelegate.map(async (data) => {\n        await this.idToDataCache.get(data.id!, () =>\n          this.cacheJob(async () => {\n            const decrypted = await this.decryptData(data)\n            if (decrypted) {\n              const hashes = await this.secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n                decrypted.accessControlSecret,\n                entityType,\n                entitySecretForeignKeys\n              )\n              return { exchangeData: data, hashes, decrypted }\n            } else {\n              return { exchangeData: data, hashes: [] }\n            }\n          })\n        )\n      })\n    )\n  }\n\n  private async cacheJob(\n    retrieveDecryptedDataInfo: () => Promise<CachedExchangeData & { hashes: string[] }>\n  ): Promise<{ item: CachedExchangeData & { hashes: string[] }; onEviction: (isReplacement: boolean) => void }> {\n    const info = await retrieveDecryptedDataInfo()\n    info.hashes.forEach((hash) => this.hashToId.set(hash, info?.exchangeData.id!))\n    if (info.decrypted?.verified) this.delegateToVerifiedEncryptionDataId.set(info.exchangeData.delegate, info.exchangeData.id!)\n    const item = {\n      exchangeData: info.exchangeData,\n      hashes: info.hashes,\n      decrypted: info.decrypted,\n    }\n    return {\n      item,\n      onEviction: (b) => this.doOnEvictionJob(b, item),\n    }\n  }\n\n  private async doOnEvictionJob(isReplacement: boolean, item: CachedExchangeData & { hashes: string[] }) {\n    if (!isReplacement) {\n      item.hashes.forEach((hash) => this.hashToId.delete(hash))\n      if (this.delegateToVerifiedEncryptionDataId.get(item.exchangeData.delegate) === item.exchangeData.id) {\n        this.delegateToVerifiedEncryptionDataId.delete(item.exchangeData.delegate)\n      }\n    }\n  }\n\n  getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined> {\n    return Promise.resolve(undefined)\n  }\n\n  getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined> {\n    return Promise.resolve(undefined)\n  }\n}\n"]}
+{"version":3,"file":"ExchangeDataManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/ExchangeDataManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAOA,mCAAgH;AAEhH,oCAAyC;AACzC,oFAA6E;AAC7E,wFAAmH;AACnH,yEAA6E;AAO7E;;;GAGG;AACH,SAAsB,gDAAgD,CACpE,IAA6B,EAC7B,cAAyC,EACzC,aAAuC,EACvC,mBAA6C,EAC7C,gBAAkC,EAClC,YAA8B,EAC9B,UAA4B,EAC5B,aAAsB,EACtB,qBAA4D,EAAE;;QAE9D,MAAM,YAAY,GAAG,yCAAuB,CAAC,aAAa,CAAC,MAAM,YAAY,CAAC,mBAAmB,EAAE,CAAC,CAAA;QACpG,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,YAAY,CAAC,EAAE;YACvE,MAAM,GAAG,GAAG,IAAI,8BAA8B,CAC5C,IAAI,EACJ,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,aAAa,CACd,CAAA;YACD,MAAM,GAAG,CAAC,sBAAsB,EAAE,CAAA;YAClC,OAAO,GAAG,CAAA;SACX;aAAM;YACL,OAAO,IAAI,kCAAkC,CAC3C,IAAI,EACJ,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,kBAAkB,CACnB,CAAA;SACF;IACH,CAAC;CAAA;AAtCD,4GAsCC;AAkGD,MAAe,2BAA2B;IACxC,YACW,IAA6B,EACnB,cAAyC,EACzC,aAAuC,EACvC,mBAA6C,EAC7C,gBAAkC,EAClC,YAA8B,EAC9B,UAA4B,EAC9B,aAAsB;QAP9B,SAAI,GAAJ,IAAI,CAAyB;QACnB,mBAAc,GAAd,cAAc,CAA2B;QACzC,kBAAa,GAAb,aAAa,CAA0B;QACvC,wBAAmB,GAAnB,mBAAmB,CAA0B;QAC7C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,eAAU,GAAV,UAAU,CAAkB;QAC9B,kBAAa,GAAb,aAAa,CAAS;IACtC,CAAC;IAEY,WAAW,CAAC,IAAkB;;YAQ5C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAA;YAC9D,MAAM,oBAAoB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACtH,IAAI,CAAC,oBAAoB;gBAAE,OAAO,SAAS,CAAA;YAC3C,MAAM,4BAA4B,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACrI,IAAI,CAAC,4BAA4B;gBAC/B,MAAM,IAAI,KAAK,CAAC,kFAAkF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC3H,MAAM,2BAA2B,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACpI,IAAI,CAAC,2BAA2B;gBAC9B,MAAM,IAAI,KAAK,CAAC,iFAAiF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC1H,OAAO;gBACL,mBAAmB,EAAE,4BAA4B;gBACjD,WAAW,EAAE,oBAAoB;gBACjC,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAC1C;oBACE,YAAY,EAAE,IAAI;oBAClB,4BAA4B;oBAC5B,oBAAoB;oBACpB,2BAA2B;iBAC5B,EACD,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,CAAC,EAC1D,IAAI,CACL;aACF,CAAA;QACH,CAAC;KAAA;IAEe,qBAAqB,CACnC,UAAkB,EAClB,SAAkB;;YAElB,MAAM,cAAc,GAAgC,EAAE,CAAA;YACtD,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;YAC9C,CAAC,CAAC,CAAA;YACF,IAAI,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,EAAE;gBACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAA;gBACvE,MAAM,oBAAoB,GAAG,IAAA,iCAAyB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACrE,MAAM,kBAAkB,GAAG,IAAA,+BAAuB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACjE,IAAI,uBAAiC,CAAA;gBACrC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAC1G,uBAAuB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;iBAC5F;qBAAM;oBACL,uBAAuB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAC5E,QAAQ,EACR,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EACxE,IAAI,CAAC,UAAU,CAChB,CAAA;iBACF;gBACD,IAAI,CAAC,uBAAuB,CAAC,MAAM;oBACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,uDAAuD,CAAC,CAAA;gBACzH,KAAK,MAAM,WAAW,IAAI,uBAAuB,EAAE;oBACjD,IAAI,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;wBACvC,cAAc,CAAC,IAAA,qBAAa,EAAC,WAAW,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAA;qBACpI;yBAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;wBAChD,cAAc,CAAC,IAAA,qBAAa,EAAC,WAAW,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAA;qBACtI;;wBAAM,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAA;iBAC9G;aACF;YACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,2BAA2B,EAAE,CAAA;YAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAChD,UAAU,EACV,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAC/D,cAAc,EACd,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CACnC,CAAA;YACD,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAA;QACH,CAAC;KAAA;IAEK,gBAAgB,CAAC,cAAsB,EAAE,qBAA6B;;YAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC5D,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,qBAAqB,CAAC,CAAA;YACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;YACxE,MAAM,iBAAiB,GAAG,IAAA,2BAAmB,EAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;YAChF,IAAI,CAAC,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,cAAc,EAAE,CAAC,CAAA;YAChG,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,qBAAqB,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAA;YACjI,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,2BAA2B,EAAE,CAAA;YAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAA;YAC9D,MAAM,uBAAuB,GAC3B,IAAI,IAAI,cAAc;gBACpB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,EAAE,IAAI,CAAC;gBACpE,CAAC,CAAC;oBACE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBACjF,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;iBAClF,CAAA;YACP,KAAK,MAAM,YAAY,IAAI,uBAAuB,EAAE;gBAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE;oBACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;oBACnH,IAAI,CAAC,OAAO,EAAE;wBACZ,OAAO,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;qBAC7F;iBACF;aACF;QACH,CAAC;KAAA;IAED,sBAAsB;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,2BAA2B,CACzB,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;QAE7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,6CAA6C,CAC3C,MAAgB,EAChB,UAAwC,EACxC,uBAAiC;QAEjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,wBAAwB,CACtB,EAAU,EACV,UAAoD,EACpD,uBAA6C,EAC7C,mBAA4B;QAE5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,yBAAyB,CAAC,UAAwC;QAChE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,oBAAoB,CAAC,UAAwC;QAC3D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;CACF;AAED,MAAM,8BAA+B,SAAQ,2BAA2B;IAAxE;;QACU,WAAM,GAKT,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,kCAAkC,EAAE,EAAE,EAAE,kCAAkC,EAAE,EAAE,EAAE,CAAC,CAAA;IAyK7I,CAAC;IAvKO,sBAAsB;;YAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACtC,MAAM,IAAI,CAAC,MAAM,CAAA;QACnB,CAAC;KAAA;IAEK,6CAA6C,CACjD,MAAgB,EAChB,UAAwC,EACxC,uBAAiC;;YAEjC,SAAS,0BAA0B,CAAC,MAInC;gBACC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;oBACjC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBACpC,IAAI,EAAE,EAAE;wBACN,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;wBAClC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE;4BACrB,GAAG,CAAC,IAAI,CAAC,GAAG;gCACV,YAAY,EAAE,MAAM,CAAC,YAAY;gCACjC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;gCACzC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB;6BAC1D,CAAA;yBACF;qBACF;oBACD,OAAO,GAAG,CAAA;gBACZ,CAAC,EAAE,EAA6G,CAAC,CAAA;YACnH,CAAC;YAED,MAAM,wBAAwB,GAAG,0BAA0B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;YAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE;gBAChD,OAAO,wBAAwB,CAAA;aAChC;iBAAM;gBACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAO,MAAM,EAAE,EAAE;oBAC9C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;wBACrD,IAAI,QAAQ,CAAC,SAAS,EAAE;4BACtB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAC3E,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EACtC,UAAU,EACV,uBAAuB,CACxB,CAAA;4BACD,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAG,CAAC,CAAC,CAAA;yBACvF;qBACF;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC,CAAA,CAAC,CAAA;gBACF,OAAO,0BAA0B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;aACrD;QACH,CAAC;KAAA;IAEK,2BAA2B,CAC/B,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;;YAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,kCAAkC,CAAC,UAAU,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC3D,IAAI,MAAM,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA,EAAE;gBAC/B,OAAO;oBACL,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB;oBACzD,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;iBAC1C,CAAA;aACF;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAA;YAC5D,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,YAAY,EACpB,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EACtG,UAAU,EACV,uBAAuB,CACxB,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;KAAA;IAEK,wBAAwB,CAC5B,EAAU,EACV,UAAoD,EACpD,uBAA6C,EAC7C,mBAA4B;;;YAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACtC,IAAI,UAAU,EAAE;gBACd,OAAO;oBACL,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,WAAW,EAAE,MAAA,UAAU,CAAC,SAAS,0CAAE,WAAW;oBAC9C,mBAAmB,EAAE,MAAA,UAAU,CAAC,SAAS,0CAAE,mBAAmB;iBAC/D,CAAA;aACF;iBAAM,IAAI,mBAAmB,EAAE;gBAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;gBACpD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAA;gBACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAA;gBACpE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,mBAAmB,EAAE,CAAA;aACxH;;gBAAM,OAAO,SAAS,CAAA;;KACxB;IAEO,SAAS,CACf,YAA0B,EAC1B,SAAiG,EACjG,UAAyC,EACzC,uBAAkC;QAElC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAO,MAAM,EAAE,EAAE;YAC9C,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAG,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;YAC/D,IAAI,SAAS,EAAE;gBACb,sIAAsI;gBACtI,2DAA2D;gBAC3D,IAAI,UAAU,IAAI,uBAAuB,EAAE;oBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,SAAS,CAAC,mBAAmB,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAA;oBACzI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;wBACtB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAG,CAAC,CAAA;oBAC7C,CAAC,CAAC,CAAA;iBACH;gBACD,IAAI,SAAS,CAAC,QAAQ,EAAE;oBACtB,MAAM,CAAC,kCAAkC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,EAAG,CAAA;iBACpF;aACF;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;IAEa,iBAAiB;;YAM7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAA;YAChF,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;YAC7G,MAAM,QAAQ,GAAyC,EAAE,CAAA;YACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC1C,MAAM,kCAAkC,GAAmC,EAAE,CAAA;YAC7E,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE;gBAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;gBACtD,QAAQ,CAAC,QAAQ,CAAC,EAAG,CAAC,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA;gBAC7E,IAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,QAAQ,EAAE;oBAC3B,kCAAkC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAG,CAAA;iBACrE;aACF;YACD,MAAM,kCAAkC,GAA8D,EAAE,CAAA;YACxG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,kCAAkC,EAAE,kCAAkC,EAAE,CAAA;QACvG,CAAC;KAAA;IAEK,yBAAyB,CAAC,UAAwC;;YACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,kCAAkC,CAAC,UAAU,CAAC,CAAA;YACpE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAClI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAA;YAC7G,MAAM,CAAC,kCAAkC,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAA;YAChE,OAAO,QAAQ,CAAA;QACjB,CAAC;KAAA;IAEK,oBAAoB,CAAC,UAAwC;;YACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;YAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAClI,MAAM,GAAG,GAAa,EAAE,CAAA;YACxB,KAAK,MAAM,mBAAmB,IAAI,oBAAoB,EAAE;gBACtD,sIAAsI;gBACtI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;aAC5G;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;CACF;AAED,MAAM,kCAAmC,SAAQ,2BAA2B;IAK1E,YACE,IAA6B,EAC7B,cAAyC,EACzC,aAAuC,EACvC,mBAA6C,EAC7C,gBAAkC,EAClC,YAA8B,EAC9B,UAA4B,EAC5B,aAAsB,EACtB,kBAEC;;QAED,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;QAhB3G,aAAQ,GAAwB,IAAI,GAAG,EAAE,CAAA;QACzC,uCAAkC,GAAwB,IAAI,GAAG,EAAE,CAAA;QAgBlF,IAAI,CAAC,aAAa,GAAG,IAAI,oDAAuB,CAAC,MAAA,kBAAkB,CAAC,YAAY,mCAAI,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACrG,CAAC;IAEK,sBAAsB;;YAC1B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrB,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,CAAA;QACjD,CAAC;KAAA;IAEK,6CAA6C,CACjD,MAAgB,EAChB,UAAwC,EACxC,uBAAiC;;YAEjC,MAAM,GAAG,GAAyG,EAAE,CAAA;YACpH,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACtC,IAAI,MAAM,EAAE;oBACV,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE;wBAC1D,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,mCAAmC,CAAC,CAAA;oBAC5E,CAAC,CAAC,CAAA;oBACF,IAAI,SAAS,CAAC,SAAS,EAAE;wBACvB,GAAG,CAAC,IAAI,CAAC,GAAG;4BACV,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW;4BAC5C,mBAAmB,EAAE,SAAS,CAAC,SAAS,CAAC,mBAAmB;yBAC7D,CAAA;qBACF;iBACF;aACF;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEa,iEAAiE,CAC7E,mBAA2B,EAC3B,UAAoD,EACpD,uBAA6C;;YAE7C,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,CAAC,GAAG,4DAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAClI,CAAA;YACD,IAAI,UAAU,KAAI,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,MAAM,CAAA,EAAE;gBACjD,sIAAsI;gBACtI,2DAA2D;gBAC3D,OAAO;oBACL,GAAG,mBAAmB;oBACtB,GAAG,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;iBACtH,CAAA;aACF;iBAAM;gBACL,OAAO,mBAAmB,CAAA;aAC3B;QACH,CAAC;KAAA;IAEK,wBAAwB,CAC5B,EAAU,EACV,UAAoD,EACpD,uBAA6C,EAC7C,mBAA4B;;;YAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;YAC1D,IAAI,MAAM,EAAE;gBACV,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAC1C,EAAE,EACF,CAAO,QAAQ,EAAE,EAAE;oBACjB,MAAM,QAAQ,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,MAAM,CAAC,IAAI,CAAA;oBACxC,IAAI,QAAQ,CAAC,SAAS,EAAE;wBACtB,uIAAuI;wBACvI,2DAA2D;wBAC3D,IAAI,UAAU,IAAI,uBAAuB,EAAE;4BACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CACnE,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EACtC,UAAU,EACV,uBAAuB,CACxB,CAAA;4BACD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gCACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAG,CAAC,CAAA;4BACpD,CAAC,CAAC,CAAA;4BACF,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAA;yBAChC;qBACF;oBACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAA;gBACjF,CAAC,CAAA,EACD,GAAG,EAAE,CAAC,IAAI,CACX,CAAA;gBACD,OAAO;oBACL,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,WAAW,EAAE,MAAA,OAAO,CAAC,SAAS,0CAAE,WAAW;oBAC3C,mBAAmB,EAAE,MAAA,OAAO,CAAC,SAAS,0CAAE,mBAAmB;iBAC5D,CAAA;aACF;iBAAM,IAAI,mBAAmB,EAAE;gBAC9B,OAAO,MAAM,IAAI,CAAC,aAAa;qBAC5B,GAAG,CAAC,EAAE,EAAE,GAAS,EAAE;oBAClB,OAAA,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE;wBACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;wBACpD,IAAI,CAAC,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAA;wBACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;wBAC9C,IAAI,SAAS,EAAE;4BACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iEAAiE,CACzF,SAAS,CAAC,mBAAmB,EAC7B,UAAU,EACV,uBAAuB,CACxB,CAAA;4BACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAA;yBAC/E;6BAAM;4BACL,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;yBAC3D;oBACH,CAAC,CAAA,CAAC,CAAA;kBAAA,CACH;qBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,eAAC,OAAA,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,MAAA,CAAC,CAAC,SAAS,0CAAE,WAAW,EAAE,mBAAmB,EAAE,MAAA,CAAC,CAAC,SAAS,0CAAE,mBAAmB,EAAE,CAAC,CAAA,EAAA,CAAC,CAAA;aACjJ;;gBAAM,OAAO,SAAS,CAAA;;KACxB;IAEK,2BAA2B,CAC/B,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;;YAE7C,IAAI,UAAU,GAAG,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACxE,IAAI,CAAC,UAAU,EAAE;gBACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAA;gBACnF,UAAU,GAAG,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;aACrE;YACD,IAAI,UAAU,EAAE;gBACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;gBAClE,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,4BAA4B,CAAC,CAAA;gBACnG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;oBACzB,OAAO;wBACL,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;wBACtC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;wBAC9C,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB;qBAC/D,CAAA;iBACF;;oBAAM,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;aACnF;iBAAM;gBACL,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;gBAC9C,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;gBAClE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE;oBACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;oBACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iEAAiE,CACzF,OAAO,CAAC,mBAAmB,EAC3B,UAAU,EACV,uBAAuB,CACxB,CAAA;oBACD,OAAO;wBACL,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,SAAS,EAAE;4BACT,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;4BAChD,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,QAAQ,EAAE,IAAI;yBACf;wBACD,MAAM;qBACP,CAAA;gBACH,CAAC,CAAA,CAAC,CACH,CAAA;gBACD,IAAI,CAAC,oBAAoB;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;gBACxF,OAAO;oBACL,YAAY,EAAE,oBAAoB,CAAC,YAAY;oBAC/C,WAAW,EAAE,oBAAoB,CAAC,SAAU,CAAC,WAAW;oBACxD,mBAAmB,EAAE,oBAAoB,CAAC,SAAU,CAAC,mBAAmB;iBACzE,CAAA;aACF;QACH,CAAC;KAAA;IAED,iJAAiJ;IACjJ,uEAAuE;IACzD,uBAAuB,CACnC,UAAkB,EAClB,UAAoD,EACpD,uBAA6C;;YAE7C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,UAAU,CAAC,CAAA;YAC1I,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,GAAG,CAAC,CAAO,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAG,EAAE,GAAG,EAAE,CAC1C,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE;oBACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;oBAC9C,IAAI,SAAS,EAAE;wBACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iEAAiE,CACzF,SAAS,CAAC,mBAAmB,EAC7B,UAAU,EACV,uBAAuB,CACxB,CAAA;wBACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;qBACjD;yBAAM;wBACL,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;qBAC1C;gBACH,CAAC,CAAA,CAAC,CACH,CAAA;YACH,CAAC,CAAA,CAAC,CACH,CAAA;QACH,CAAC;KAAA;IAEa,QAAQ,CACpB,yBAAmF;;;YAEnF,MAAM,IAAI,GAAG,MAAM,yBAAyB,EAAE,CAAA;YAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,CAAC,EAAG,CAAC,CAAC,CAAA;YAC9E,IAAI,MAAA,IAAI,CAAC,SAAS,0CAAE,QAAQ;gBAAE,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAG,CAAC,CAAA;YAC5H,MAAM,IAAI,GAAG;gBACX,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAA;YACD,OAAO;gBACL,IAAI;gBACJ,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC;aACjD,CAAA;;KACF;IAEa,eAAe,CAAC,aAAsB,EAAE,IAA+C;;YACnG,IAAI,CAAC,aAAa,EAAE;gBAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;gBACzD,IAAI,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;oBACpG,IAAI,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;iBAC3E;aACF;QACH,CAAC;KAAA;IAED,yBAAyB,CAAC,UAAwC;QAChE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;IAED,oBAAoB,CAAC,UAAwC;QAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;CACF","sourcesContent":["import { ExchangeData } from '../../icc-api/model/internal/ExchangeData'\nimport { IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { BaseExchangeDataManager } from './BaseExchangeDataManager'\nimport { UserEncryptionKeysManager } from './UserEncryptionKeysManager'\nimport { UserSignatureKeysManager } from './UserSignatureKeysManager'\nimport { AccessControlSecretUtils } from './AccessControlSecretUtils'\nimport { CryptoStrategies } from './CryptoStrategies'\nimport { fingerprintV1, getShaVersionForKey, hexPublicKeysWithSha1Of, hexPublicKeysWithSha256Of } from './utils'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { hex2ua, ua2b64 } from '../utils'\nimport { LruTemporisedAsyncCache } from '../utils/lru-temporised-async-cache'\nimport { EntityWithDelegationTypeName, entityWithDelegationTypeNames } from '../utils/EntityWithDelegationTypeName'\nimport { CryptoActorStubWithType } from '../../icc-api/model/CryptoActorStub'\n\nexport type ExchangeDataManagerOptionalParameters = {\n  // Only for not fully cached implementation (data owner can't request all his exchange data), amount of exchange data which can be cached\n  lruCacheSize?: number // default = 2000\n}\n\n/**\n * @internal this function is for internal use only and may be changed without notice.\n * Initialises and returns the exchange data manager which is most appropriate for the current data owner.\n */\nexport async function initialiseExchangeDataManagerForCurrentDataOwner(\n  base: BaseExchangeDataManager,\n  encryptionKeys: UserEncryptionKeysManager,\n  signatureKeys: UserSignatureKeysManager,\n  accessControlSecret: AccessControlSecretUtils,\n  cryptoStrategies: CryptoStrategies,\n  dataOwnerApi: IccDataOwnerXApi,\n  primitives: CryptoPrimitives,\n  useParentKeys: boolean,\n  optionalParameters: ExchangeDataManagerOptionalParameters = {}\n): Promise<ExchangeDataManager> {\n  const currentOwner = CryptoActorStubWithType.fromDataOwner(await dataOwnerApi.getCurrentDataOwner())\n  if (cryptoStrategies.dataOwnerRequiresAnonymousDelegation(currentOwner)) {\n    const res = new FullyCachedExchangeDataManager(\n      base,\n      encryptionKeys,\n      signatureKeys,\n      accessControlSecret,\n      cryptoStrategies,\n      dataOwnerApi,\n      primitives,\n      useParentKeys\n    )\n    await res.clearOrRepopulateCache()\n    return res\n  } else {\n    return new LimitedLruCacheExchangeDataManager(\n      base,\n      encryptionKeys,\n      signatureKeys,\n      accessControlSecret,\n      cryptoStrategies,\n      dataOwnerApi,\n      primitives,\n      useParentKeys,\n      optionalParameters\n    )\n  }\n}\n\ntype CachedExchangeData = {\n  exchangeData: ExchangeData\n  decrypted?: {\n    accessControlSecret: string\n    exchangeKey: CryptoKey\n    verified: boolean\n  }\n}\n\n/**\n * @internal this class is intended for internal use only and may be changed without notice.\n * Exchange data manager which automatically handles decryption and cache\n */\nexport interface ExchangeDataManager {\n  readonly base: BaseExchangeDataManager\n\n  /**\n   * Updates all exchange data between the current data owner and another data owner to allow the other data owner to access existing exchange data\n   * using a new public key. Note that this will make existing exchange keys from the other data owner to the current data owner unverified, therefore\n   * invalid for encryption.\n   * @param otherDataOwner the other data owner.\n   * @param newDataOwnerPublicKey a new public key of the other data owner.\n   */\n  giveAccessBackTo(otherDataOwner: string, newDataOwnerPublicKey: string): Promise<void>\n\n  /**\n   * Gets any existing and verified exchange data from the current data owner to the provided delegate or creates new data if no verified data is\n   * available, then caches it. The {@link entityType} and {@link entitySecretForeignKeys} will be used for the secure-delegation-hash-based cache\n   * of the exchange data and not for actually creating the exchange data.\n   * @param delegateId the id of the delegate.\n   * @param entityType type of the entity for which you want to create new metadata.\n   * @param entitySecretForeignKeys the secret foreign keys of the entity which you want to create new metadata.\n   * @return the access control secret and key of the data to use for encryption.\n   */\n  getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }>\n\n  /**\n   * Retrieve the cached decrypted exchange data key associated with any of the provided hashes/entry keys of secure delegations. Depending on the\n   * implementation the {@link entityType} and {@link entitySecretForeignKeys} may be used to improve the secure-delegation-hash-based cache of\n   * exchange data from the other available exchange data caches.\n   * @param hashes hashes of access control secrets for a specific entity, as they appear in the key of secure delegation entries\n   * @param entityType type of the entity containing the metadata for which you are retrieving the encryption key.\n   * @param entitySecretForeignKeys the secret foreign keys of the entity containing the metadata for which you are retrieving the encryption key.\n   * @return the exchange data and decrypted key associated to that hash if cached\n   */\n  getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [hash: string]: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey } }>\n\n  /**\n   * Retrieves the exchange data with the provided id (from the cache if available or from the server otherwise if allowed by\n   * {@link retrieveIfNotCached}) and attempts to decrypt it, then caches the result. The {@link entityType} and {@link entitySecretForeignKeys} will\n   * be used for the secure-delegation-hash-based cache of the exchange data.\n   * @param id id of the exchange data\n   * @param entityType type of the entity containing the metadata for which you are retrieving the encryption key.\n   * @param entitySecretForeignKeys the secret foreign keys of the entity containing the metadata for which you are retrieving the encryption key.\n   * @param retrieveIfNotCached if false and there is no cached exchange data with the provided id the method returns undefined, else the method will\n   * attempt to load the exchange data from the server.\n   * @return undefined if the exchange data is not cached and {@link retrieveIfNotCached} is false. Else an object containing:\n   * - exchangeData: the exchange data with the provided id\n   * - exchangeKey: the exchange key corresponding to the provided exchange data if it could be decrypted, else undefined\n   * @throws if no exchange data with the given id is cached and {@link retrieveIfNotCached} is true and the data could not be found in the server\n   * either.\n   */\n  getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined; exchangeData: ExchangeData } | undefined>\n\n  /**\n   * Clears the cache or fully repopulates the cache if the current data owner can retrieve all of his exchange data according to the crypto\n   * strategies.\n   */\n  clearOrRepopulateCache(): Promise<void>\n\n  /**\n   * If the current data owner requires anonymous delegations this returns the base64 representation of the concatenation of all available access\n   * control keys for the current data owner.\n   */\n  getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined>\n\n  /**\n   * If the current data owner requires anonymous delegations this returns the access control keys which may be used in secure delegations for the\n   * data owner, which can be used to search for data.\n   */\n  getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined>\n}\n\nabstract class AbstractExchangeDataManager implements ExchangeDataManager {\n  constructor(\n    readonly base: BaseExchangeDataManager,\n    protected readonly encryptionKeys: UserEncryptionKeysManager,\n    protected readonly signatureKeys: UserSignatureKeysManager,\n    protected readonly accessControlSecret: AccessControlSecretUtils,\n    protected readonly cryptoStrategies: CryptoStrategies,\n    protected readonly dataOwnerApi: IccDataOwnerXApi,\n    protected readonly primitives: CryptoPrimitives,\n    private readonly useParentKeys: boolean\n  ) {}\n\n  protected async decryptData(data: ExchangeData): Promise<\n    | {\n        accessControlSecret: string\n        exchangeKey: CryptoKey\n        verified: boolean\n      }\n    | undefined\n  > {\n    const decryptionKeys = this.encryptionKeys.getDecryptionKeys()\n    const decryptedExchangeKey = (await this.base.tryDecryptExchangeKeys([data], decryptionKeys)).successfulDecryptions[0]\n    if (!decryptedExchangeKey) return undefined\n    const decryptedAccessControlSecret = (await this.base.tryDecryptAccessControlSecret([data], decryptionKeys)).successfulDecryptions[0]\n    if (!decryptedAccessControlSecret)\n      throw new Error(`Decryption key could be decrypted but access control secret could not for data ${JSON.stringify(data)}`)\n    const decryptedSharedSignatureKey = (await this.base.tryDecryptSharedSignatureKeys([data], decryptionKeys)).successfulDecryptions[0]\n    if (!decryptedSharedSignatureKey)\n      throw new Error(`Decryption key could be decrypted but shared signature key could not for data ${JSON.stringify(data)}`)\n    return {\n      accessControlSecret: decryptedAccessControlSecret,\n      exchangeKey: decryptedExchangeKey,\n      verified: await this.base.verifyExchangeData(\n        {\n          exchangeData: data,\n          decryptedAccessControlSecret,\n          decryptedExchangeKey,\n          decryptedSharedSignatureKey,\n        },\n        (fp) => this.signatureKeys.getSignatureVerificationKey(fp),\n        true\n      ),\n    }\n  }\n\n  protected async createNewExchangeData(\n    delegateId: string,\n    newDataId?: string\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    const encryptionKeys: { [fp: string]: CryptoKey } = {}\n    this.encryptionKeys.getSelfVerifiedKeys().forEach(({ fingerprint, pair }) => {\n      encryptionKeys[fingerprint] = pair.publicKey\n    })\n    if (delegateId != (await this.dataOwnerApi.getCurrentDataOwnerId())) {\n      const delegate = await this.dataOwnerApi.getCryptoActorStub(delegateId)\n      const sha256KeysOfDelegate = hexPublicKeysWithSha256Of(delegate.stub)\n      const sha1KeysOfDelegate = hexPublicKeysWithSha1Of(delegate.stub)\n      let allVerifiedDelegateKeys: string[]\n      if (this.useParentKeys && (await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()).includes(delegateId)) {\n        allVerifiedDelegateKeys = await this.encryptionKeys.getVerifiedPublicKeysFor(delegate.stub)\n      } else {\n        allVerifiedDelegateKeys = await this.cryptoStrategies.verifyDelegatePublicKeys(\n          delegate,\n          [...Array.from(sha256KeysOfDelegate), ...Array.from(sha1KeysOfDelegate)],\n          this.primitives\n        )\n      }\n      if (!allVerifiedDelegateKeys.length)\n        throw new Error(`Could not create exchange data to ${delegateId} as no public key for the delegate could be verified.`)\n      for (const delegateKey of allVerifiedDelegateKeys) {\n        if (sha1KeysOfDelegate.has(delegateKey)) {\n          encryptionKeys[fingerprintV1(delegateKey)] = await this.primitives.RSA.importKey('spki', hex2ua(delegateKey), ['encrypt'], 'sha-1')\n        } else if (sha256KeysOfDelegate.has(delegateKey)) {\n          encryptionKeys[fingerprintV1(delegateKey)] = await this.primitives.RSA.importKey('spki', hex2ua(delegateKey), ['encrypt'], 'sha-256')\n        } else throw new Error('Illegal state: verified keys should contain only keys for OAPE-SHA1 or OAPE-SHA256.')\n      }\n    }\n    const signatureKey = await this.signatureKeys.getOrCreateSignatureKeyPair()\n    const newData = await this.base.createExchangeData(\n      delegateId,\n      { [signatureKey.fingerprint]: signatureKey.keyPair.privateKey },\n      encryptionKeys,\n      newDataId ? { id: newDataId } : {}\n    )\n    return {\n      exchangeData: newData.exchangeData,\n      accessControlSecret: newData.accessControlSecret,\n      exchangeKey: newData.exchangeKey,\n    }\n  }\n\n  async giveAccessBackTo(otherDataOwner: string, newDataOwnerPublicKey: string) {\n    const self = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const newKeyFp = fingerprintV1(newDataOwnerPublicKey)\n    const other = await this.dataOwnerApi.getCryptoActorStub(otherDataOwner)\n    const newKeyHashVersion = getShaVersionForKey(other.stub, newDataOwnerPublicKey)\n    if (!newKeyHashVersion) throw new Error(`Public key not found for data owner ${otherDataOwner}`)\n    const importedNewKey = await this.primitives.RSA.importKey('spki', hex2ua(newDataOwnerPublicKey), ['encrypt'], newKeyHashVersion)\n    const signatureKey = await this.signatureKeys.getOrCreateSignatureKeyPair()\n    const decryptionKeys = this.encryptionKeys.getDecryptionKeys()\n    const allExchangeDataToUpdate =\n      self == otherDataOwner\n        ? await this.base.getExchangeDataByDelegatorDelegatePair(self, self)\n        : [\n            ...(await this.base.getExchangeDataByDelegatorDelegatePair(self, otherDataOwner)),\n            ...(await this.base.getExchangeDataByDelegatorDelegatePair(otherDataOwner, self)),\n          ]\n    for (const dataToUpdate of allExchangeDataToUpdate) {\n      if (!Object.keys(dataToUpdate.exchangeKey).find((fp) => fp == newKeyFp)) {\n        const updated = await this.base.tryUpdateExchangeData(dataToUpdate, decryptionKeys, { [newKeyFp]: importedNewKey })\n        if (!updated) {\n          console.warn(`Failed to give access back to exchanged data ${JSON.stringify(dataToUpdate)}`)\n        }\n      }\n    }\n  }\n\n  clearOrRepopulateCache(): Promise<void> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [p: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } }> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeData: ExchangeData; exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined } | undefined> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined> {\n    throw new Error('Implemented by concrete class')\n  }\n\n  getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined> {\n    throw new Error('Implemented by concrete class')\n  }\n}\n\nclass FullyCachedExchangeDataManager extends AbstractExchangeDataManager {\n  private caches: Promise<{\n    dataById: { [id: string]: CachedExchangeData }\n    hashToId: Map<string, string>\n    delegateToVerifiedEncryptionDataId: { [delegate: string]: string }\n    entityTypeToAccessControlKeysValue: { [entityType in EntityWithDelegationTypeName]?: string }\n  }> = Promise.resolve({ dataById: {}, hashToId: new Map(), delegateToVerifiedEncryptionDataId: {}, entityTypeToAccessControlKeysValue: {} })\n\n  async clearOrRepopulateCache(): Promise<void> {\n    this.caches = this.doRepopulateCache()\n    await this.caches\n  }\n\n  async getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [hash: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } }> {\n    function retrieveByHashesFromCaches(caches: {\n      dataById: { [id: string]: CachedExchangeData }\n      hashToId: Map<string, string>\n      delegateToVerifiedEncryptionDataId: { [delegate: string]: string }\n    }): { [hash: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } } {\n      return hashes.reduce((res, hash) => {\n        const id = caches.hashToId.get(hash)\n        if (id) {\n          const cached = caches.dataById[id]\n          if (cached?.decrypted) {\n            res[hash] = {\n              exchangeData: cached.exchangeData,\n              exchangeKey: cached.decrypted.exchangeKey,\n              accessControlSecret: cached.decrypted.accessControlSecret,\n            }\n          }\n        }\n        return res\n      }, {} as { [hash: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } })\n    }\n\n    const retrievedFromHashesCache = retrieveByHashesFromCaches(await this.caches)\n    if (Object.keys(retrievedFromHashesCache).length) {\n      return retrievedFromHashesCache\n    } else {\n      this.caches = this.caches.then(async (caches) => {\n        for (const currData of Object.values(caches.dataById)) {\n          if (currData.decrypted) {\n            const currDataHashes = await this.accessControlSecret.secureDelegationKeysFor(\n              currData.decrypted.accessControlSecret,\n              entityType,\n              entitySecretForeignKeys\n            )\n            currDataHashes.forEach((hash) => caches.hashToId.set(hash, currData.exchangeData.id!))\n          }\n        }\n        return caches\n      })\n      return retrieveByHashesFromCaches(await this.caches)\n    }\n  }\n\n  async getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    const caches = await this.caches\n    const dataId = caches.delegateToVerifiedEncryptionDataId[delegateId]\n    const cached = dataId ? caches.dataById[dataId] : undefined\n    if (cached && cached?.decrypted) {\n      return {\n        exchangeData: cached.exchangeData,\n        accessControlSecret: cached.decrypted.accessControlSecret,\n        exchangeKey: cached.decrypted.exchangeKey,\n      }\n    }\n    const created = await this.createNewExchangeData(delegateId)\n    this.cacheData(\n      created.exchangeData,\n      { accessControlSecret: created.accessControlSecret, exchangeKey: created.exchangeKey, verified: true },\n      entityType,\n      entitySecretForeignKeys\n    )\n    return created\n  }\n\n  async getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeData: ExchangeData; exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined } | undefined> {\n    const caches = await this.caches\n    const cachedData = caches.dataById[id]\n    if (cachedData) {\n      return {\n        exchangeData: cachedData.exchangeData,\n        exchangeKey: cachedData.decrypted?.exchangeKey,\n        accessControlSecret: cachedData.decrypted?.accessControlSecret,\n      }\n    } else if (retrieveIfNotCached) {\n      const data = await this.base.getExchangeDataById(id)\n      if (!data) throw new Error(`Could not find exchange data with id ${id}`)\n      const decrypted = await this.decryptData(data)\n      this.cacheData(data, decrypted, entityType, entitySecretForeignKeys)\n      return { exchangeData: data, exchangeKey: decrypted?.exchangeKey, accessControlSecret: decrypted?.accessControlSecret }\n    } else return undefined\n  }\n\n  private cacheData(\n    exchangeData: ExchangeData,\n    decrypted: { accessControlSecret: string; exchangeKey: CryptoKey; verified: boolean } | undefined,\n    entityType?: EntityWithDelegationTypeName,\n    entitySecretForeignKeys?: string[]\n  ): void {\n    this.caches = this.caches.then(async (caches) => {\n      caches.dataById[exchangeData.id!] = { exchangeData, decrypted }\n      if (decrypted) {\n        // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users and it has some performance impact\n        // `secureDelegationKeysFor` is currently ignoring the sfks\n        if (entityType && entitySecretForeignKeys) {\n          const hashes = await this.accessControlSecret.secureDelegationKeysFor(decrypted.accessControlSecret, entityType, entitySecretForeignKeys)\n          hashes.forEach((hash) => {\n            caches.hashToId.set(hash, exchangeData.id!)\n          })\n        }\n        if (decrypted.verified) {\n          caches.delegateToVerifiedEncryptionDataId[exchangeData.delegate] = exchangeData.id!\n        }\n      }\n      return caches\n    })\n  }\n\n  private async doRepopulateCache(): Promise<{\n    dataById: { [id: string]: CachedExchangeData }\n    hashToId: Map<string, string>\n    delegateToVerifiedEncryptionDataId: { [delegate: string]: string }\n    entityTypeToAccessControlKeysValue: { [entityType in EntityWithDelegationTypeName]?: string }\n  }> {\n    const allData = await this.base.getAllExchangeDataForCurrentDataOwnerIfAllowed()\n    if (!allData) throw new Error('Impossible to use fully cached exchange data manager for current data owner.')\n    const dataById: { [id: string]: CachedExchangeData } = {}\n    const hashToId = new Map<string, string>()\n    const delegateToVerifiedEncryptionDataId: { [delegate: string]: string } = {}\n    for (const currData of allData) {\n      const currDecrypted = await this.decryptData(currData)\n      dataById[currData.id!] = { exchangeData: currData, decrypted: currDecrypted }\n      if (currDecrypted?.verified) {\n        delegateToVerifiedEncryptionDataId[currData.delegate] = currData.id!\n      }\n    }\n    const entityTypeToAccessControlKeysValue: { [entityType in EntityWithDelegationTypeName]?: string } = {}\n    return { dataById, hashToId, delegateToVerifiedEncryptionDataId, entityTypeToAccessControlKeysValue }\n  }\n\n  async getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined> {\n    const caches = await this.caches\n    const cached = caches.entityTypeToAccessControlKeysValue[entityType]\n    if (cached) return cached\n    const accessControlSecrets = Object.values(caches.dataById).flatMap((x) => (x.decrypted ? [x.decrypted.accessControlSecret] : []))\n    const fullData = await this.accessControlSecret.getEncodedAccessControlKeys(accessControlSecrets, entityType)\n    caches.entityTypeToAccessControlKeysValue[entityType] = fullData\n    return fullData\n  }\n\n  async getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined> {\n    const caches = await this.caches\n    const accessControlSecrets = Object.values(caches.dataById).flatMap((x) => (x.decrypted ? [x.decrypted.accessControlSecret] : []))\n    const res: string[] = []\n    for (const accessControlSecret of accessControlSecrets) {\n      // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users and it has some performance impact\n      res.push(await this.accessControlSecret.secureDelegationKeyFor(accessControlSecret, entityType, undefined))\n    }\n    return res\n  }\n}\n\nclass LimitedLruCacheExchangeDataManager extends AbstractExchangeDataManager {\n  private readonly idToDataCache: LruTemporisedAsyncCache<string, CachedExchangeData & { hashes: string[] }>\n  private readonly hashToId: Map<string, string> = new Map()\n  private readonly delegateToVerifiedEncryptionDataId: Map<string, string> = new Map()\n\n  constructor(\n    base: BaseExchangeDataManager,\n    encryptionKeys: UserEncryptionKeysManager,\n    signatureKeys: UserSignatureKeysManager,\n    accessControlSecret: AccessControlSecretUtils,\n    cryptoStrategies: CryptoStrategies,\n    dataOwnerApi: IccDataOwnerXApi,\n    primitives: CryptoPrimitives,\n    useParentKeys: boolean,\n    optionalParameters: {\n      lruCacheSize?: number\n    }\n  ) {\n    super(base, encryptionKeys, signatureKeys, accessControlSecret, cryptoStrategies, dataOwnerApi, primitives, useParentKeys)\n    this.idToDataCache = new LruTemporisedAsyncCache(optionalParameters.lruCacheSize ?? 2000, () => -1)\n  }\n\n  async clearOrRepopulateCache(): Promise<void> {\n    this.idToDataCache.clear(false)\n    this.hashToId.clear()\n    this.delegateToVerifiedEncryptionDataId.clear()\n  }\n\n  async getCachedDecryptionDataKeyByAccessControlHash(\n    hashes: string[],\n    entityType: EntityWithDelegationTypeName,\n    entitySecretForeignKeys: string[]\n  ): Promise<{ [p: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } }> {\n    const res: { [p: string]: { exchangeData: ExchangeData; exchangeKey: CryptoKey; accessControlSecret: string } } = {}\n    for (const hash of hashes) {\n      const dataId = this.hashToId.get(hash)\n      if (dataId) {\n        const retrieved = await this.idToDataCache.get(dataId, () => {\n          throw new Error(`Data with id ${dataId} should have been already cached.`)\n        })\n        if (retrieved.decrypted) {\n          res[hash] = {\n            exchangeData: retrieved.exchangeData,\n            exchangeKey: retrieved.decrypted.exchangeKey,\n            accessControlSecret: retrieved.decrypted.accessControlSecret,\n          }\n        }\n      }\n    }\n    return res\n  }\n\n  private async secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n    accessControlSecret: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<string[]> {\n    const noSfkDelegationKeys = await Promise.all(\n      [...entityWithDelegationTypeNames].map((t) => this.accessControlSecret.secureDelegationKeyFor(accessControlSecret, t, undefined))\n    )\n    if (entityType && entitySecretForeignKeys?.length) {\n      // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users and it has some performance impact\n      // `secureDelegationKeysFor` is currently ignoring the sfks\n      return [\n        ...noSfkDelegationKeys,\n        ...(await this.accessControlSecret.secureDelegationKeysFor(accessControlSecret, entityType, entitySecretForeignKeys)),\n      ]\n    } else {\n      return noSfkDelegationKeys\n    }\n  }\n\n  async getDecryptionDataKeyById(\n    id: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined,\n    retrieveIfNotCached: boolean\n  ): Promise<{ exchangeData: ExchangeData; exchangeKey: CryptoKey | undefined; accessControlSecret: string | undefined } | undefined> {\n    const cached = await this.idToDataCache.getIfCachedJob(id)\n    if (cached) {\n      const updated = await this.idToDataCache.get(\n        id,\n        async (prevData) => {\n          const toUpdate = prevData ?? cached.item\n          if (toUpdate.decrypted) {\n            // Usage of sfks in secure delegation key should be configurable: it is not necessary for all users, and it has some performance impact\n            // `secureDelegationKeysFor` is currently ignoring the sfks\n            if (entityType && entitySecretForeignKeys) {\n              const hashes = await this.accessControlSecret.secureDelegationKeysFor(\n                toUpdate.decrypted.accessControlSecret,\n                entityType,\n                entitySecretForeignKeys\n              )\n              hashes.forEach((hash) => {\n                this.hashToId.set(hash, toUpdate.exchangeData.id!)\n              })\n              toUpdate.hashes.push(...hashes)\n            }\n          }\n          return { item: toUpdate, onEviction: (b) => this.doOnEvictionJob(b, toUpdate) }\n        },\n        () => true\n      )\n      return {\n        exchangeData: updated.exchangeData,\n        exchangeKey: updated.decrypted?.exchangeKey,\n        accessControlSecret: updated.decrypted?.accessControlSecret,\n      }\n    } else if (retrieveIfNotCached) {\n      return await this.idToDataCache\n        .get(id, async () =>\n          this.cacheJob(async () => {\n            const data = await this.base.getExchangeDataById(id)\n            if (!data) throw new Error(`Could not find exchange data with id ${id}`)\n            const decrypted = await this.decryptData(data)\n            if (decrypted) {\n              const hashes = await this.secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n                decrypted.accessControlSecret,\n                entityType,\n                entitySecretForeignKeys\n              )\n              return { exchangeData: data, hashes, decrypted, verified: decrypted.verified }\n            } else {\n              return { exchangeData: data, hashes: [], verified: false }\n            }\n          })\n        )\n        .then((x) => ({ exchangeData: x.exchangeData, exchangeKey: x.decrypted?.exchangeKey, accessControlSecret: x.decrypted?.accessControlSecret }))\n    } else return undefined\n  }\n\n  async getOrCreateEncryptionDataTo(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<{ exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey }> {\n    let existingId = this.delegateToVerifiedEncryptionDataId.get(delegateId)\n    if (!existingId) {\n      await this.populateCacheToDelegate(delegateId, entityType, entitySecretForeignKeys)\n      existingId = this.delegateToVerifiedEncryptionDataId.get(delegateId)\n    }\n    if (existingId) {\n      const cached = await this.idToDataCache.getIfCachedJob(existingId)\n      if (!cached) throw new Error(`Illegal state: data with id ${existingId} should have been in cache`)\n      if (cached.item.decrypted) {\n        return {\n          exchangeData: cached.item.exchangeData,\n          exchangeKey: cached.item.decrypted.exchangeKey,\n          accessControlSecret: cached.item.decrypted.accessControlSecret,\n        }\n      } else throw new Error(`Illegal state: cached verified data should be decrypted.`)\n    } else {\n      const newDataId = this.primitives.randomUuid()\n      this.delegateToVerifiedEncryptionDataId.set(delegateId, newDataId)\n      const createdAndCachedData = await this.idToDataCache.get(newDataId, () =>\n        this.cacheJob(async () => {\n          const created = await this.createNewExchangeData(delegateId, newDataId)\n          const hashes = await this.secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n            created.accessControlSecret,\n            entityType,\n            entitySecretForeignKeys\n          )\n          return {\n            exchangeData: created.exchangeData,\n            decrypted: {\n              accessControlSecret: created.accessControlSecret,\n              exchangeKey: created.exchangeKey,\n              verified: true,\n            },\n            hashes,\n          }\n        })\n      )\n      if (!createdAndCachedData) throw new Error('Data should have been successfully created')\n      return {\n        exchangeData: createdAndCachedData.exchangeData,\n        exchangeKey: createdAndCachedData.decrypted!.exchangeKey,\n        accessControlSecret: createdAndCachedData.decrypted!.accessControlSecret,\n      }\n    }\n  }\n\n  // Loads and adds to the cache all exchange data from the current data owner to the given delegate. Allows to check if there is already data from\n  // the current data owner to the delegate which is good for encryption.\n  private async populateCacheToDelegate(\n    delegateId: string,\n    entityType: EntityWithDelegationTypeName | undefined,\n    entitySecretForeignKeys: string[] | undefined\n  ): Promise<void> {\n    const dataToDelegate = await this.base.getExchangeDataByDelegatorDelegatePair(await this.dataOwnerApi.getCurrentDataOwnerId(), delegateId)\n    await Promise.all(\n      dataToDelegate.map(async (data) => {\n        await this.idToDataCache.get(data.id!, () =>\n          this.cacheJob(async () => {\n            const decrypted = await this.decryptData(data)\n            if (decrypted) {\n              const hashes = await this.secureDelegationKeysForAllEntitiesNoSfkAndSpecificEntitySfksPairs(\n                decrypted.accessControlSecret,\n                entityType,\n                entitySecretForeignKeys\n              )\n              return { exchangeData: data, hashes, decrypted }\n            } else {\n              return { exchangeData: data, hashes: [] }\n            }\n          })\n        )\n      })\n    )\n  }\n\n  private async cacheJob(\n    retrieveDecryptedDataInfo: () => Promise<CachedExchangeData & { hashes: string[] }>\n  ): Promise<{ item: CachedExchangeData & { hashes: string[] }; onEviction: (isReplacement: boolean) => void }> {\n    const info = await retrieveDecryptedDataInfo()\n    info.hashes.forEach((hash) => this.hashToId.set(hash, info?.exchangeData.id!))\n    if (info.decrypted?.verified) this.delegateToVerifiedEncryptionDataId.set(info.exchangeData.delegate, info.exchangeData.id!)\n    const item = {\n      exchangeData: info.exchangeData,\n      hashes: info.hashes,\n      decrypted: info.decrypted,\n    }\n    return {\n      item,\n      onEviction: (b) => this.doOnEvictionJob(b, item),\n    }\n  }\n\n  private async doOnEvictionJob(isReplacement: boolean, item: CachedExchangeData & { hashes: string[] }) {\n    if (!isReplacement) {\n      item.hashes.forEach((hash) => this.hashToId.delete(hash))\n      if (this.delegateToVerifiedEncryptionDataId.get(item.exchangeData.delegate) === item.exchangeData.id) {\n        this.delegateToVerifiedEncryptionDataId.delete(item.exchangeData.delegate)\n      }\n    }\n  }\n\n  getAccessControlKeysValue(entityType: EntityWithDelegationTypeName): Promise<string | undefined> {\n    return Promise.resolve(undefined)\n  }\n\n  getAllDelegationKeys(entityType: EntityWithDelegationTypeName): Promise<string[] | undefined> {\n    return Promise.resolve(undefined)\n  }\n}\n"]}

package/icc-x-api/crypto/ExchangeDataMapManager.d.ts

@@ -1,4 +1,4 @@
-import { IccExchangeDataMapApi } from '../../icc-api/api/IccExchangeDataMapApi';
+import { IccExchangeDataMapApi } from '../../icc-api/api/internal/IccExchangeDataMapApi';
 import { ExchangeDataMap } from '../../icc-api/model/internal/ExchangeDataMap';
 /**
  * @internal this class is intended for internal use only and may be modified without notice

package/icc-x-api/crypto/ExchangeDataMapManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExchangeDataMapManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/ExchangeDataMapManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,oFAA6E;AAE7E,mGAA+F;AAE/F;;;GAGG;AACH,MAAa,sBAAsB;IACjC,YAA6B,GAA0B;QAA1B,QAAG,GAAH,GAAG,CAAuB;QAE/C,yBAAoB,GAA0C,IAAI,oDAAuB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAFvD,CAAC;IAI3D;;;;;OAKG;IACG,sBAAsB,CAAC,KAA+D;;YAC1F,MAAM,eAAe,GAA6D,EAAE,CAAA;YACpF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBAC1C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;oBACxD,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;iBACvB;aACF;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,2DAA4B,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAA;YACvG,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAO,KAAK,EAAE,EAAE;gBAC/C,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACnF,CAAC,CAAA,CAAC,CACH,CAAA;QACH,CAAC;KAAA;IAED;;;OAGG;IACG,kBAAkB,CAAC,oBAA4B;;YACnD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;YACnF,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9F,OAAO,eAAe,CAAA;QACxB,CAAC;KAAA;IAED;;;OAGG;IACG,uBAAuB,CAAC,sBAAgC;;YAC5D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAA;YACzF,MAAM,OAAO,CAAC,GAAG,CACf,gBAAgB,CAAC,GAAG,CAAC,CAAO,KAAK,EAAE,EAAE;gBACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACtF,CAAC,CAAA,CAAC,CACH,CAAA;YACD,OAAO,gBAAgB,CAAA;QACzB,CAAC;KAAA;CACF;AAjDD,wDAiDC","sourcesContent":["import { IccExchangeDataMapApi } from '../../icc-api/api/IccExchangeDataMapApi'\nimport { LruTemporisedAsyncCache } from '../utils/lru-temporised-async-cache'\nimport { ExchangeDataMap } from '../../icc-api/model/internal/ExchangeDataMap'\nimport { ExchangeDataMapCreationBatch } from '../../icc-api/model/ExchangeDataMapCreationBatch'\n\n/**\n * @internal this class is intended for internal use only and may be modified without notice\n * This class manages the Exchange Data Map entities, caching with an LRU cache on retrieval.\n */\nexport class ExchangeDataMapManager {\n  constructor(private readonly api: IccExchangeDataMapApi) {}\n\n  private exchangeDataMapCache: LruTemporisedAsyncCache<string, null> = new LruTemporisedAsyncCache(1000, () => -1)\n\n  /**\n   * This function creates a batch of Exchange Data Map, ignoring the one that already exist and are already present in the cache.\n   * The ones that are not are created and their ids are cached.\n   * @param batch a map where each key is the hex-encoded access control key to another map that associates the encoded id of an\n   * Exchange Data entity to the fingerprint of the key used to encrypt it.\n   */\n  async createExchangeDataMaps(batch: { [accessControlKey: string]: { [fp: string]: string } }): Promise<void> {\n    const entriesToCreate: { [accessControlKey: string]: { [fp: string]: string } } = {}\n    for (const [k, v] of Object.entries(batch)) {\n      if (!(await this.exchangeDataMapCache.getIfCachedJob(k))) {\n        entriesToCreate[k] = v\n      }\n    }\n    await this.api.createExchangeDataMapBatch(new ExchangeDataMapCreationBatch({ batch: entriesToCreate }))\n    await Promise.all(\n      Object.keys(entriesToCreate).map(async (entry) => {\n        await this.exchangeDataMapCache.get(entry, () => Promise.resolve({ item: null }))\n      })\n    )\n  }\n\n  /**\n   * Retrieves an Exchange Data Map.\n   * @param accessControlKeyHash the hex-encoded hash of the Exchange Data Map to retrieve.\n   */\n  async getExchangeDataMap(accessControlKeyHash: string): Promise<ExchangeDataMap> {\n    const exchangeDataMap = await this.api.getExchangeDataMapById(accessControlKeyHash)\n    await this.exchangeDataMapCache.get(exchangeDataMap.id, () => Promise.resolve({ item: null }))\n    return exchangeDataMap\n  }\n\n  /**\n   * Retrieves a batch of Exchange Data Maps.\n   * @param accessControlKeyHashes the hex-encoded hashes of the Exchange Data Maps to retrieve.\n   */\n  async getExchangeDataMapBatch(accessControlKeyHashes: string[]): Promise<ExchangeDataMap[]> {\n    const exchangeDataMaps = await this.api.getExchangeDataMapByBatch(accessControlKeyHashes)\n    await Promise.all(\n      exchangeDataMaps.map(async (entry) => {\n        await this.exchangeDataMapCache.get(entry.id, () => Promise.resolve({ item: null }))\n      })\n    )\n    return exchangeDataMaps\n  }\n}\n"]}
+{"version":3,"file":"ExchangeDataMapManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/ExchangeDataMapManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,oFAA6E;AAE7E,mGAA+F;AAE/F;;;GAGG;AACH,MAAa,sBAAsB;IACjC,YAA6B,GAA0B;QAA1B,QAAG,GAAH,GAAG,CAAuB;QAE/C,yBAAoB,GAA0C,IAAI,oDAAuB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAFvD,CAAC;IAI3D;;;;;OAKG;IACG,sBAAsB,CAAC,KAA+D;;YAC1F,MAAM,eAAe,GAA6D,EAAE,CAAA;YACpF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBAC1C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;oBACxD,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;iBACvB;aACF;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,2DAA4B,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAA;YACvG,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAO,KAAK,EAAE,EAAE;gBAC/C,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACnF,CAAC,CAAA,CAAC,CACH,CAAA;QACH,CAAC;KAAA;IAED;;;OAGG;IACG,kBAAkB,CAAC,oBAA4B;;YACnD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;YACnF,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9F,OAAO,eAAe,CAAA;QACxB,CAAC;KAAA;IAED;;;OAGG;IACG,uBAAuB,CAAC,sBAAgC;;YAC5D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAA;YACzF,MAAM,OAAO,CAAC,GAAG,CACf,gBAAgB,CAAC,GAAG,CAAC,CAAO,KAAK,EAAE,EAAE;gBACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACtF,CAAC,CAAA,CAAC,CACH,CAAA;YACD,OAAO,gBAAgB,CAAA;QACzB,CAAC;KAAA;CACF;AAjDD,wDAiDC","sourcesContent":["import { IccExchangeDataMapApi } from '../../icc-api/api/internal/IccExchangeDataMapApi'\nimport { LruTemporisedAsyncCache } from '../utils/lru-temporised-async-cache'\nimport { ExchangeDataMap } from '../../icc-api/model/internal/ExchangeDataMap'\nimport { ExchangeDataMapCreationBatch } from '../../icc-api/model/ExchangeDataMapCreationBatch'\n\n/**\n * @internal this class is intended for internal use only and may be modified without notice\n * This class manages the Exchange Data Map entities, caching with an LRU cache on retrieval.\n */\nexport class ExchangeDataMapManager {\n  constructor(private readonly api: IccExchangeDataMapApi) {}\n\n  private exchangeDataMapCache: LruTemporisedAsyncCache<string, null> = new LruTemporisedAsyncCache(1000, () => -1)\n\n  /**\n   * This function creates a batch of Exchange Data Map, ignoring the one that already exist and are already present in the cache.\n   * The ones that are not are created and their ids are cached.\n   * @param batch a map where each key is the hex-encoded access control key to another map that associates the encoded id of an\n   * Exchange Data entity to the fingerprint of the key used to encrypt it.\n   */\n  async createExchangeDataMaps(batch: { [accessControlKey: string]: { [fp: string]: string } }): Promise<void> {\n    const entriesToCreate: { [accessControlKey: string]: { [fp: string]: string } } = {}\n    for (const [k, v] of Object.entries(batch)) {\n      if (!(await this.exchangeDataMapCache.getIfCachedJob(k))) {\n        entriesToCreate[k] = v\n      }\n    }\n    await this.api.createExchangeDataMapBatch(new ExchangeDataMapCreationBatch({ batch: entriesToCreate }))\n    await Promise.all(\n      Object.keys(entriesToCreate).map(async (entry) => {\n        await this.exchangeDataMapCache.get(entry, () => Promise.resolve({ item: null }))\n      })\n    )\n  }\n\n  /**\n   * Retrieves an Exchange Data Map.\n   * @param accessControlKeyHash the hex-encoded hash of the Exchange Data Map to retrieve.\n   */\n  async getExchangeDataMap(accessControlKeyHash: string): Promise<ExchangeDataMap> {\n    const exchangeDataMap = await this.api.getExchangeDataMapById(accessControlKeyHash)\n    await this.exchangeDataMapCache.get(exchangeDataMap.id, () => Promise.resolve({ item: null }))\n    return exchangeDataMap\n  }\n\n  /**\n   * Retrieves a batch of Exchange Data Maps.\n   * @param accessControlKeyHashes the hex-encoded hashes of the Exchange Data Maps to retrieve.\n   */\n  async getExchangeDataMapBatch(accessControlKeyHashes: string[]): Promise<ExchangeDataMap[]> {\n    const exchangeDataMaps = await this.api.getExchangeDataMapByBatch(accessControlKeyHashes)\n    await Promise.all(\n      exchangeDataMaps.map(async (entry) => {\n        await this.exchangeDataMapCache.get(entry.id, () => Promise.resolve({ item: null }))\n      })\n    )\n    return exchangeDataMaps\n  }\n}\n"]}

package/icc-x-api/crypto/HMACUtils.d.ts

@@ -0,0 +1,10 @@
+export declare class HMACUtils {
+    private readonly _crypto;
+    private readonly params;
+    constructor(crypto: Crypto);
+    generateKey(): Promise<CryptoKey>;
+    exportKey(key: CryptoKey): Promise<ArrayBuffer>;
+    importKey(key: ArrayBuffer): Promise<CryptoKey>;
+    sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer>;
+    verify(key: CryptoKey, data: ArrayBuffer, signature: ArrayBuffer): Promise<boolean>;
+}

package/icc-x-api/crypto/HMACUtils.js

@@ -0,0 +1,48 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HMACUtils = void 0;
+class HMACUtils {
+    constructor(crypto) {
+        this.params = {
+            name: 'HMAC',
+            hash: 'SHA-512',
+        };
+        this._crypto = crypto;
+    }
+    generateKey() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._crypto.subtle.generateKey(Object.assign({}, this.params), true, ['sign', 'verify']);
+        });
+    }
+    exportKey(key) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._crypto.subtle.exportKey('raw', key);
+        });
+    }
+    importKey(key) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._crypto.subtle.importKey('raw', key, Object.assign({}, this.params), true, ['sign', 'verify']);
+        });
+    }
+    sign(key, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._crypto.subtle.sign(Object.assign({}, this.params), key, data);
+        });
+    }
+    verify(key, data, signature) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._crypto.subtle.verify(Object.assign({}, this.params), key, signature, data);
+        });
+    }
+}
+exports.HMACUtils = HMACUtils;
+//# sourceMappingURL=HMACUtils.js.map

package/icc-x-api/crypto/HMACUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HMACUtils.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/HMACUtils.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,MAAa,SAAS;IAOpB,YAAY,MAAc;QALT,WAAM,GAAG;YACxB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,SAAS;SAChB,CAAA;QAGC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;IACvB,CAAC;IAEK,WAAW;;YACf,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,mBAAM,IAAI,CAAC,MAAM,GAAI,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACtF,CAAC;KAAA;IAEK,SAAS,CAAC,GAAc;;YAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAClD,CAAC;KAAA;IAEK,SAAS,CAAC,GAAgB;;YAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,oBAAO,IAAI,CAAC,MAAM,GAAI,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QAChG,CAAC;KAAA;IAEK,IAAI,CAAC,GAAc,EAAE,IAAiB;;YAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,mBAAM,IAAI,CAAC,MAAM,GAAI,GAAG,EAAE,IAAI,CAAC,CAAA;QAChE,CAAC;KAAA;IAEK,MAAM,CAAC,GAAc,EAAE,IAAiB,EAAE,SAAsB;;YACpE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,mBAAM,IAAI,CAAC,MAAM,GAAI,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;QAC7E,CAAC;KAAA;CACF;AA9BD,8BA8BC","sourcesContent":["export class HMACUtils {\n  private readonly _crypto: Crypto\n  private readonly params = {\n    name: 'HMAC',\n    hash: 'SHA-512',\n  }\n\n  constructor(crypto: Crypto) {\n    this._crypto = crypto\n  }\n\n  async generateKey(): Promise<CryptoKey> {\n    return this._crypto.subtle.generateKey({ ...this.params }, true, ['sign', 'verify'])\n  }\n\n  async exportKey(key: CryptoKey): Promise<ArrayBuffer> {\n    return this._crypto.subtle.exportKey('raw', key)\n  }\n\n  async importKey(key: ArrayBuffer): Promise<CryptoKey> {\n    return this._crypto.subtle.importKey('raw', key, { ...this.params }, true, ['sign', 'verify'])\n  }\n\n  async sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer> {\n    return this._crypto.subtle.sign({ ...this.params }, key, data)\n  }\n\n  async verify(key: CryptoKey, data: ArrayBuffer, signature: ArrayBuffer): Promise<boolean> {\n    return this._crypto.subtle.verify({ ...this.params }, key, signature, data)\n  }\n}\n"]}

package/icc-x-api/crypto/SecureDelegationsManager.js

@@ -191,6 +191,9 @@ class SecureDelegationsManager {
                 };
             }
             else if (!delegateInfo.requiresAnonymousDelegations && this.selfNeedsAnonymousDelegations) {
+                /**
+                 * Important: this requires that the exchange data signature also validates the authenticity of the public keys included in there.
+                 */
                 const fingerprintsOfVerifiedExchangeData = new Set(Object.keys(exchangeData.exchangeKey));
                 const delegateVerifiedKeys = {};
                 for (const keyHex of [...delegateInfo.availablePublicKeysHexWithSha1, ...delegateInfo.availablePublicKeysHexWithSha256]) {

package/icc-x-api/crypto/SecureDelegationsManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"SecureDelegationsManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/SecureDelegationsManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wFAAoF;AAKpF,oFAA6E;AAC7E,mCAA2F;AAK3F,oCAAyC;AAIzC,2EAAuE;AACvE,sHAAkH;AAClH,IAAO,mBAAmB,GAAG,qEAAiC,CAAC,mBAAmB,CAAA;AAClF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,2EAAuE;AAGvE,MAAa,wBAAwB;IACnC,YACmB,mBAAwC,EACxC,sBAA8C,EAC9C,2BAAwD,EACxD,wBAAkD,EAClD,QAAmC,EACnC,UAA4B,EAC5B,YAA8B,EAC9B,gBAAkC,EAClC,6BAAsC;QARtC,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,gCAA2B,GAA3B,2BAA2B,CAA6B;QACxD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,aAAQ,GAAR,QAAQ,CAA2B;QACnC,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kCAA6B,GAA7B,6BAA6B,CAAS;QAGxC,uBAAkB,GAO/B,IAAI,oDAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IATvD,CAAC;IAWJ;;;;;;;;;;OAUG;IACG,sCAAsC,CAC1C,MAA2C,EAC3C,UAAwC,EACxC,SAAmB,EACnB,eAAyB,EACzB,cAAwB,EACxB,eAA2E;;YAE3E,MAAM,cAAc,GAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;YAC5E,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC5D,cAAc,EACd,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAC/C,SAAS,EACT,cAAc,EACd,eAAe,EACf,eAAe,CAAC,KAAK,EACrB,SAAS,CACV,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,oBAAoB,GAMpB,EAAE,CAAA;YACR,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;gBACvE,IAAI,UAAU,KAAK,MAAM,EAAE;oBACzB,oBAAoB,CAAC,IAAI,CACvB,MAAM,IAAI,CAAC,wBAAwB,CACjC,cAAc,EACd,UAAU,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,kBAAkB,CAAC,sBAAsB,CAC1C,CACF,CAAA;iBACF;aACF;YACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,CAAC,kBAAkB,EAAE,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC,CACpI,CAAA;YACD,MAAM,gBAAgB,qBACjB,kBAAkB,CAAC,yBAAyB,CAChD,CAAA;YACD,KAAK,MAAM,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,IAAI,oBAAoB,EAAE;gBACtF,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAA;aACtD;YACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAC5C,oBAAoB;iBACjB,MAAM,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC;iBAClE,GAAG,CAAC,CAAC,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,yBAAyB,EAAE,uBAAwB,CAAC,CAAC,CAC1H,CAAA;YACD,MAAM,IAAI,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAA;YAC7E,uCACK,MAAM,KACT,gBAAgB,EAAE,IAAI,mCAAgB,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,IAChF;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;;OAcG;IACG,8BAA8B,CAClC,cAAuC,EACvC,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,wBAAwE;;;YAExE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,CACjF,UAAU,EACV,cAAc,CAAC,IAAI,EACnB,MAAA,cAAc,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAC9C,CAAA;YACD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CACrF,gBAAgB,CAAC,mBAAmB,EACpC,cAAc,CAAC,IAAI,EACnB,MAAA,cAAc,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAC9C,CAAA;YACD,MAAM,wBAAwB,GAAG,IAAI,CAAC,0CAA0C,CAAC,cAAc,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;YAC5H,IAAI,wBAAwB,EAAE;gBAC5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACrD,wBAAwB,CAAC,YAAY,EACrC,wBAAwB,CAAC,gBAAgB,EACzC,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,CACrB,CAAA;gBACD,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;aAC3D;iBAAM;gBACL,MAAM,iBAAiB,GAAG,CACxB,MAAM,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,CACtD,gBAAgB,CAAC,mBAAmB,EACpC,cAAc,CAAC,IAAI,EACnB,MAAA,cAAc,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAC9C,CACF,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAA;gBACvB,OAAO;oBACL,KAAK,EAAE,MAAM,IAAI,CAAC,sBAAsB,CACtC,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,CACzB;iBACF,CAAA;aACF;;KACF;IAEa,uBAAuB,CACnC,YAAoB,EACpB,kBAAoC,EACpC,gBAAqG,EACrG,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B;;YAE9B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAA;YAC5I,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAC/G,CAAA;YACD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CACrC,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAChH,CAAA;YACD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/F,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAChG,IAAI,YAAY,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE;gBAChF,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,YAAY,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;gBACjI,MAAM,0BAA0B,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;gBAChJ,MAAM,2BAA2B,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAC/F,kBAAkB,EAClB,gBAAgB,CAAC,WAAW,CAC7B,CAAA;gBACD,OAAO,IAAI,qEAAiC,CAAC;oBAC3C,yBAAyB,EAAE,YAAY;oBACvC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClG,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9G,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;iBAC/G,CAAC,CAAA;aACH;;gBAAM,OAAO,SAAS,CAAA;QACzB,CAAC;KAAA;IAEa,sBAAsB,CAClC,gBAAqG,EACrG,iBAA2B,EAC3B,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,wBAAwE;;YAExE,OAAO,IAAI,uCAAkB,iCACxB,CAAC,MAAM,IAAI,CAAC,iCAAiC,CAAC,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,KAC1I,oBAAoB,EAAE,wBAAwB,EAC9C,iBAAiB,IACjB,CAAA;QACJ,CAAC;KAAA;IAEa,wBAAwB,CACpC,MAA+B,EAC/B,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,WAA4B,EAC5B,mBAAuC;;;YAQvC,sDAAsD;YACtD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,CACjF,UAAU,EACV,MAAM,CAAC,IAAI,EACX,MAAA,MAAM,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CACtC,CAAA;YACD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CACrF,gBAAgB,CAAC,mBAAmB,EACpC,MAAM,CAAC,IAAI,EACX,MAAA,MAAM,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CACtC,CAAA;YACD,MAAM,iBAAiB,GAAG,CACxB,MAAM,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,CACtD,gBAAgB,CAAC,mBAAmB,EACpC,MAAM,CAAC,IAAI,EACX,MAAA,MAAM,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CACtC,CACF,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAA;YACvB,MAAM,yBAAyB,GAAG,iBAAiB;iBAChD,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAClB,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAA;YAC1C,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAE3C,MAAM,YAAY,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACpD,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;YACrH,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAC1E,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,mBAAmB,EACnB,oBAAoB,CACrB,CAAA;YACD,MAAM,UAAU,GAAG,IAAI,mCAAgB,CAAC;gBACtC,SAAS,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,iBAAiB;gBACrD,QAAQ,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,gBAAgB;gBACnD,SAAS,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,SAAS;gBAC7C,cAAc,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,cAAc;gBACvD,eAAe,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,eAAe;gBACzD,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1E,cAAc,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,cAAc;gBACvD,uBAAuB,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,uBAAuB;gBACzE,WAAW,EAAE,WAAW;aACzB,CAAC,CAAA;YACF,OAAO;gBACL,sBAAsB,EAAE,YAAY;gBACpC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,UAAU;gBACV,uBAAuB,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,uBAAuB;gBACzE,yBAAyB,EAAE,eAAe;aAC3C,CAAA;;KACF;IAEa,iCAAiC,CAC7C,gBAAqG,EACrG,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B;;YAU9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,kBAAkB,GACtB,UAAU,KAAK,MAAM;gBACnB,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC;gBAC3E,CAAC,CAAC,MAAM,IAAI,CAAC,iCAAiC,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;YACrG,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,cAAc,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAChI,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC/I,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAClJ,uCACK,kBAAkB,KACrB,SAAS,EAAE,kBAAkB,EAC7B,cAAc,EAAE,uBAAuB,EACvC,eAAe,EAAE,wBAAwB,IAC1C;QACH,CAAC;KAAA;IAEa,iCAAiC,CAC7C,MAAc,EACd,UAAkB,EAClB,YAA0B;;YAO1B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;YAC5D,IAAI,CAAC,YAAY,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACrF,OAAO;oBACL,iBAAiB,EAAE,MAAM;oBACzB,gBAAgB,EAAE,UAAU;oBAC5B,cAAc,EAAE,YAAY,CAAC,EAAE;iBAChC,CAAA;aACF;iBAAM,IAAI,YAAY,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBAC3F,OAAO;oBACL,iBAAiB,EAAE,MAAM;oBACzB,uBAAuB,EAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CACnF,YAAY,CAAC,EAAG,EAChB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CACxH;iBACF,CAAA;aACF;iBAAM,IAAI,CAAC,YAAY,CAAC,4BAA4B,IAAI,IAAI,CAAC,6BAA6B,EAAE;gBAC3F,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAA;gBACzF,MAAM,oBAAoB,GAAgC,EAAE,CAAA;gBAC5D,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,YAAY,CAAC,8BAA8B,EAAE,GAAG,YAAY,CAAC,gCAAgC,CAAC,EAAE;oBACvH,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,MAAM,CAAC,CAAA;oBACpC,MAAM,UAAU,GAAG,YAAY,CAAC,8BAA8B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;oBACrG,IAAI,kCAAkC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;wBAClD,oBAAoB,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAA;qBACpH;iBACF;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM;oBAC3C,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAA;gBAC3G,OAAO;oBACL,gBAAgB,EAAE,UAAU;oBAC5B,uBAAuB,EAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAG,EAAE,oBAAoB,CAAC;iBAC9H,CAAA;aACF;;gBAAM,OAAO,EAAE,CAAA;QAClB,CAAC;KAAA;IAEO,6BAA6B,CACnC,MAAc,EACd,YAA0B;QAO1B,IAAI,IAAI,CAAC,6BAA6B,EAAE;YACtC,OAAO,EAAE,CAAA;SACV;aAAM;YACL,OAAO;gBACL,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,iBAAiB,EAAE,MAAM;gBACzB,gBAAgB,EAAE,MAAM;aACzB,CAAA;SACF;IACH,CAAC;IAEa,gBAAgB,CAAC,WAAmB;;YAChD,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAS,EAAE;gBACzD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;gBACjF,OAAO;oBACL,IAAI,EAAE;wBACJ,4BAA4B,EAAE,IAAI,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,iBAAiB,CAAC;wBAC3G,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAA,+BAAuB,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;wBAC3F,gCAAgC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAyB,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;qBAChG;iBACF,CAAA;YACH,CAAC,CAAA,CAAC,CAAA;QACJ,CAAC;KAAA;IAEO,0CAA0C,CAChD,MAA6C,EAC7C,MAAgB;;QAEhB,MAAM,gBAAgB,GAAG,MAAA,MAAM,CAAC,gBAAgB,mCAAI,EAAE,CAAA;QACtD,MAAM,uBAAuB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,eAAC,OAAA,MAAA,MAAA,gBAAgB,CAAC,gBAAgB,0CAAG,IAAI,CAAC,mCAAI,EAAE,CAAA,EAAA,CAAC,CAAC,CAAC,CAAA;QAC9H,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;;YAC/C,MAAM,iBAAiB,GAAG,MAAA,gBAAgB,CAAC,iBAAiB,0CAAG,IAAI,CAAC,CAAA;YACpE,OAAO,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7F,CAAC,CAAC,CAAA;QACF,IACE,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC3B,uBAAuB,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,MAAA,gBAAgB,CAAC,CAAC,CAAC,0CAAE,YAAY,CAAA,IAAI,uBAAuB,CAAC,CAAC,CAAC,MAAK,MAAA,gBAAgB,CAAC,CAAC,CAAC,0CAAE,YAAY,CAAA,CAAC;YAEzI,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;QACrG,MAAM,yBAAyB,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,yBAAyB,GAAG,MAAA,gBAAgB,CAAC,iBAAiB,0CAAG,yBAAyB,CAAC,CAAA;QACjG,OAAO,CACL,MAAA,gBAAgB,CAAC,CAAC,CAAC,mCACnB,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,CAAC,yBAAyB;YACzD,CAAC,CAAC,EAAE,YAAY,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE;YAC1F,CAAC,CAAC,SAAS,CAAC,CACf,CAAA;IACH,CAAC;CACF;AA5ZD,4DA4ZC","sourcesContent":["import { EntityShareRequest } from '../../icc-api/model/requests/EntityShareRequest'\nimport { IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { UserEncryptionKeysManager } from './UserEncryptionKeysManager'\nimport { CryptoStrategies } from './CryptoStrategies'\nimport { EncryptedEntityWithType, EntityWithDelegationTypeName } from '../utils/EntityWithDelegationTypeName'\nimport { LruTemporisedAsyncCache } from '../utils/lru-temporised-async-cache'\nimport { fingerprintV2, hexPublicKeysWithSha1Of, hexPublicKeysWithSha256Of } from './utils'\nimport { ExchangeDataManager } from './ExchangeDataManager'\nimport { ExchangeData } from '../../icc-api/model/internal/ExchangeData'\nimport { SecureDelegationsEncryption } from './SecureDelegationsEncryption'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { hex2ua, ua2hex } from '../utils'\nimport { AccessControlSecretUtils } from './AccessControlSecretUtils'\nimport { EntityShareOrMetadataUpdateRequest } from '../../icc-api/model/requests/EntityShareOrMetadataUpdateRequest'\nimport { EncryptedEntity, EncryptedEntityStub } from '../../icc-api/model/models'\nimport { SecureDelegation } from '../../icc-api/model/SecureDelegation'\nimport { EntitySharedMetadataUpdateRequest } from '../../icc-api/model/requests/EntitySharedMetadataUpdateRequest'\nimport EntryUpdateTypeEnum = EntitySharedMetadataUpdateRequest.EntryUpdateTypeEnum\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { SecurityMetadata } from '../../icc-api/model/SecurityMetadata'\nimport { ExchangeDataMapManager } from './ExchangeDataMapManager'\n\nexport class SecureDelegationsManager {\n  constructor(\n    private readonly exchangeDataManager: ExchangeDataManager,\n    private readonly exchangeDataMapManager: ExchangeDataMapManager,\n    private readonly secureDelegationsEncryption: SecureDelegationsEncryption,\n    private readonly accessControlSecretUtils: AccessControlSecretUtils,\n    private readonly userKeys: UserEncryptionKeysManager,\n    private readonly primitives: CryptoPrimitives,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly cryptoStrategies: CryptoStrategies,\n    private readonly selfNeedsAnonymousDelegations: boolean\n  ) {}\n\n  private readonly dataOwnerInfoCache: LruTemporisedAsyncCache<\n    string,\n    {\n      requiresAnonymousDelegations: boolean\n      availablePublicKeysHexWithSha1: string[]\n      availablePublicKeysHexWithSha256: string[]\n    }\n  > = new LruTemporisedAsyncCache(100, () => 30 * 60 * 1000)\n\n  /**\n   * Note: this method does not save the updated entity.\n   * @param entity an entity, must already have secret foreign keys initialised.\n   * @param entityType the type of the entity\n   * @param secretIds the initial secret ids to include and share with the auto-delegations\n   * @param owningEntityIds the initial owning entity ids to include and share with the auto-delegations\n   * @param encryptionKeys the initial encryption keys to include and share with the auto-delegations\n   * @param autoDelegations the data owners which will initially have access to the entity in addition to the current data owner and the access level\n   * they will have on the entity.\n   * @return the entity with the security metadata initialised for the provided parameters.\n   */\n  async entityWithInitialisedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T & { secretForeignKeys: string[] },\n    entityType: EntityWithDelegationTypeName,\n    secretIds: string[],\n    owningEntityIds: string[],\n    encryptionKeys: string[],\n    autoDelegations: { [delegateId: string]: SecureDelegation.AccessLevelEnum }\n  ): Promise<T> {\n    const entityWithType: EncryptedEntityWithType = { entity, type: entityType }\n    const rootDelegationInfo = await this.makeSecureDelegationInfo(\n      entityWithType,\n      await this.dataOwnerApi.getCurrentDataOwnerId(),\n      secretIds,\n      encryptionKeys,\n      owningEntityIds,\n      AccessLevelEnum.WRITE,\n      undefined\n    )\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const otherDelegationsInfo: {\n      canonicalDelegationKey: string\n      canonicalAccessControlKey: string\n      delegation: SecureDelegation\n      delegationKeyEquivalences: { [p: string]: string }\n      encryptedExchangeDataId: { [fp: string]: string } | undefined\n    }[] = []\n    for (const [delegateId, permissions] of Object.entries(autoDelegations)) {\n      if (delegateId !== selfId) {\n        otherDelegationsInfo.push(\n          await this.makeSecureDelegationInfo(\n            entityWithType,\n            delegateId,\n            secretIds,\n            encryptionKeys,\n            owningEntityIds,\n            permissions,\n            rootDelegationInfo.canonicalDelegationKey\n          )\n        )\n      }\n    }\n    const secureDelegations = Object.fromEntries(\n      [rootDelegationInfo, ...otherDelegationsInfo].map(({ canonicalDelegationKey, delegation }) => [canonicalDelegationKey, delegation])\n    )\n    const keysEquivalences = {\n      ...rootDelegationInfo.delegationKeyEquivalences,\n    }\n    for (const { delegationKeyEquivalences: otherKeyEquivalences } of otherDelegationsInfo) {\n      Object.assign(keysEquivalences, otherKeyEquivalences)\n    }\n    const newExchangeDataMaps = Object.fromEntries(\n      otherDelegationsInfo\n        .filter(({ encryptedExchangeDataId }) => !!encryptedExchangeDataId)\n        .map(({ canonicalAccessControlKey, encryptedExchangeDataId }) => [canonicalAccessControlKey, encryptedExchangeDataId!])\n    )\n    await this.exchangeDataMapManager.createExchangeDataMaps(newExchangeDataMaps)\n    return {\n      ...entity,\n      securityMetadata: new SecurityMetadata({ secureDelegations, keysEquivalences }),\n    }\n  }\n\n  /**\n   * Make a request for sharing an entity with a delegate or to update existing shared metadata by adding additional secretIds, encryptionKeys or\n   * owningEntityIds if there is already some metadata shared between the current data owner and the delegate. In case there is already a delegation\n   * for the delegate, and it already contains all the provided metadata, this method returns undefined, since there is no need to make any request to\n   * share the provided data.\n   * @param entityWithType an entity with type\n   * @param delegateId the id of the delegate\n   * @param shareSecretIds the secret ids to share\n   * @param shareEncryptionKeys the encryption keys to share\n   * @param shareOwningEntityIds the owning entity ids to share\n   * @param newDelegationPermissions the permissions to grant to the delegate in case a new delegation needs to be created. If this method creates an\n   * update request instead of a share request, this parameter is ignored.\n   * @return the request to share the entity, or the request to update the shared metadata for the entity, or undefined if there is no need to update\n   * the entity to allow the delegate to access the provided data.\n   */\n  async makeShareOrUpdateRequestParams(\n    entityWithType: EncryptedEntityWithType,\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    newDelegationPermissions: EntityShareRequest.RequestedPermissionInternal\n  ): Promise<EntityShareOrMetadataUpdateRequest | undefined> {\n    const exchangeDataInfo = await this.exchangeDataManager.getOrCreateEncryptionDataTo(\n      delegateId,\n      entityWithType.type,\n      entityWithType.entity.secretForeignKeys ?? []\n    )\n    const accessControlHashes = await this.accessControlSecretUtils.secureDelegationKeysFor(\n      exchangeDataInfo.accessControlSecret,\n      entityWithType.type,\n      entityWithType.entity.secretForeignKeys ?? []\n    )\n    const existingSecureDelegation = this.getExistingCanonicalKeyAndSecureDelegation(entityWithType.entity, accessControlHashes)\n    if (existingSecureDelegation) {\n      const updateParams = await this.makeUpdateRequestParams(\n        existingSecureDelegation.canonicalKey,\n        existingSecureDelegation.secureDelegation,\n        exchangeDataInfo,\n        shareSecretIds,\n        shareEncryptionKeys,\n        shareOwningEntityIds\n      )\n      return updateParams ? { update: updateParams } : undefined\n    } else {\n      const accessControlKeys = (\n        await this.accessControlSecretUtils.accessControlKeysFor(\n          exchangeDataInfo.accessControlSecret,\n          entityWithType.type,\n          entityWithType.entity.secretForeignKeys ?? []\n        )\n      ).map((x) => ua2hex(x))\n      return {\n        share: await this.makeShareRequestParams(\n          exchangeDataInfo,\n          accessControlKeys,\n          delegateId,\n          shareSecretIds,\n          shareEncryptionKeys,\n          shareOwningEntityIds,\n          newDelegationPermissions\n        ),\n      }\n    }\n  }\n\n  private async makeUpdateRequestParams(\n    canonicalKey: string,\n    existingDelegation: SecureDelegation,\n    exchangeDataInfo: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey },\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[]\n  ): Promise<EntitySharedMetadataUpdateRequest | undefined> {\n    const existingSecretIds = new Set(await this.secureDelegationsEncryption.decryptSecretIds(existingDelegation, exchangeDataInfo.exchangeKey))\n    const existingEncryptionKeys = new Set(\n      await this.secureDelegationsEncryption.decryptEncryptionKeys(existingDelegation, exchangeDataInfo.exchangeKey)\n    )\n    const existingOwningEntityIds = new Set(\n      await this.secureDelegationsEncryption.decryptOwningEntityIds(existingDelegation, exchangeDataInfo.exchangeKey)\n    )\n    const newSecretIds = shareSecretIds.filter((id) => !existingSecretIds.has(id))\n    const newEncryptionKeys = shareEncryptionKeys.filter((key) => !existingEncryptionKeys.has(key))\n    const newOwningEntityIds = shareOwningEntityIds.filter((id) => !existingOwningEntityIds.has(id))\n    if (newSecretIds.length || newEncryptionKeys.length || newOwningEntityIds.length) {\n      const encryptedNewSecretIds = await this.secureDelegationsEncryption.encryptSecretIds(newSecretIds, exchangeDataInfo.exchangeKey)\n      const encryptedNewEncryptionKeys = await this.secureDelegationsEncryption.encryptEncryptionKeys(newEncryptionKeys, exchangeDataInfo.exchangeKey)\n      const encryptedNewOwningEntityIds = await this.secureDelegationsEncryption.encryptOwningEntityIds(\n        newOwningEntityIds,\n        exchangeDataInfo.exchangeKey\n      )\n      return new EntitySharedMetadataUpdateRequest({\n        metadataAccessControlHash: canonicalKey,\n        secretIds: Object.fromEntries(encryptedNewSecretIds.map((id) => [id, EntryUpdateTypeEnum.CREATE])),\n        encryptionKeys: Object.fromEntries(encryptedNewEncryptionKeys.map((key) => [key, EntryUpdateTypeEnum.CREATE])),\n        owningEntityIds: Object.fromEntries(encryptedNewOwningEntityIds.map((id) => [id, EntryUpdateTypeEnum.CREATE])),\n      })\n    } else return undefined\n  }\n\n  private async makeShareRequestParams(\n    exchangeDataInfo: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey },\n    accessControlKeys: string[],\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    newDelegationPermissions: EntityShareRequest.RequestedPermissionInternal\n  ): Promise<EntityShareRequest> {\n    return new EntityShareRequest({\n      ...(await this.makeSecureDelegationEncryptedData(exchangeDataInfo, delegateId, shareSecretIds, shareEncryptionKeys, shareOwningEntityIds)),\n      requestedPermissions: newDelegationPermissions,\n      accessControlKeys,\n    })\n  }\n\n  private async makeSecureDelegationInfo(\n    entity: EncryptedEntityWithType,\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    permissions: AccessLevelEnum,\n    parentDelegationKey: string | undefined\n  ): Promise<{\n    canonicalDelegationKey: string\n    canonicalAccessControlKey: string\n    delegation: SecureDelegation\n    encryptedExchangeDataId: { [fp: string]: string } | undefined\n    delegationKeyEquivalences: { [alias: string]: string }\n  }> {\n    // Be wary of explicit delegator and explicit delegate\n    const exchangeDataInfo = await this.exchangeDataManager.getOrCreateEncryptionDataTo(\n      delegateId,\n      entity.type,\n      entity.entity.secretForeignKeys ?? []\n    )\n    const accessControlHashes = await this.accessControlSecretUtils.secureDelegationKeysFor(\n      exchangeDataInfo.accessControlSecret,\n      entity.type,\n      entity.entity.secretForeignKeys ?? []\n    )\n    const accessControlKeys = (\n      await this.accessControlSecretUtils.accessControlKeysFor(\n        exchangeDataInfo.accessControlSecret,\n        entity.type,\n        entity.entity.secretForeignKeys ?? []\n      )\n    ).map((x) => ua2hex(x))\n    const accessControlKeysToHashes = accessControlKeys\n      .map((key, index) => {\n        return [key, accessControlHashes[index]]\n      })\n      .sort((a, b) => a[1].localeCompare(b[1]))\n\n    const canonicalKey = accessControlKeysToHashes[0][1]\n    const keyEquivalences = Object.fromEntries(accessControlKeysToHashes.slice(1).map((hash) => [hash[1], canonicalKey]))\n    const encryptedDelegationInfo = await this.makeSecureDelegationEncryptedData(\n      exchangeDataInfo,\n      delegateId,\n      shareSecretIds,\n      shareEncryptionKeys,\n      shareOwningEntityIds\n    )\n    const delegation = new SecureDelegation({\n      delegator: encryptedDelegationInfo?.explicitDelegator,\n      delegate: encryptedDelegationInfo?.explicitDelegate,\n      secretIds: encryptedDelegationInfo?.secretIds,\n      encryptionKeys: encryptedDelegationInfo?.encryptionKeys,\n      owningEntityIds: encryptedDelegationInfo?.owningEntityIds,\n      parentDelegations: parentDelegationKey ? [parentDelegationKey] : undefined,\n      exchangeDataId: encryptedDelegationInfo?.exchangeDataId,\n      encryptedExchangeDataId: encryptedDelegationInfo?.encryptedExchangeDataId,\n      permissions: permissions,\n    })\n    return {\n      canonicalDelegationKey: canonicalKey,\n      canonicalAccessControlKey: accessControlKeysToHashes[0][0],\n      delegation,\n      encryptedExchangeDataId: encryptedDelegationInfo?.encryptedExchangeDataId,\n      delegationKeyEquivalences: keyEquivalences,\n    }\n  }\n\n  private async makeSecureDelegationEncryptedData(\n    exchangeDataInfo: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey },\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[]\n  ): Promise<{\n    explicitDelegator?: string\n    explicitDelegate?: string\n    secretIds?: string[]\n    encryptionKeys?: string[]\n    owningEntityIds?: string[]\n    exchangeDataId?: string\n    encryptedExchangeDataId?: { [fp: string]: string } // TODO if secure delegation info, check cache before calculating\n  }> {\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const exchangeDataIdInfo =\n      delegateId === selfId\n        ? this.makeExchangeDataIdInfoForSelf(selfId, exchangeDataInfo.exchangeData)\n        : await this.makeExchangeDataIdInfoForDelegate(selfId, delegateId, exchangeDataInfo.exchangeData)\n    const encryptedSecretIds = await this.secureDelegationsEncryption.encryptSecretIds(shareSecretIds, exchangeDataInfo.exchangeKey)\n    const encryptedEncryptionKeys = await this.secureDelegationsEncryption.encryptEncryptionKeys(shareEncryptionKeys, exchangeDataInfo.exchangeKey)\n    const encryptedOwningEntityIds = await this.secureDelegationsEncryption.encryptOwningEntityIds(shareOwningEntityIds, exchangeDataInfo.exchangeKey)\n    return {\n      ...exchangeDataIdInfo,\n      secretIds: encryptedSecretIds,\n      encryptionKeys: encryptedEncryptionKeys,\n      owningEntityIds: encryptedOwningEntityIds,\n    }\n  }\n\n  private async makeExchangeDataIdInfoForDelegate(\n    selfId: string,\n    delegateId: string,\n    exchangeData: ExchangeData\n  ): Promise<{\n    exchangeDataId?: string\n    encryptedExchangeDataId?: { [fp: string]: string }\n    explicitDelegator?: string\n    explicitDelegate?: string\n  }> {\n    const delegateInfo = await this.getDataOwnerInfo(delegateId)\n    if (!delegateInfo.requiresAnonymousDelegations && !this.selfNeedsAnonymousDelegations) {\n      return {\n        explicitDelegator: selfId,\n        explicitDelegate: delegateId,\n        exchangeDataId: exchangeData.id,\n      }\n    } else if (delegateInfo.requiresAnonymousDelegations && !this.selfNeedsAnonymousDelegations) {\n      return {\n        explicitDelegator: selfId,\n        encryptedExchangeDataId: await this.secureDelegationsEncryption.encryptExchangeDataId(\n          exchangeData.id!,\n          Object.fromEntries(this.userKeys.getSelfVerifiedKeys().map((keyInfo) => [keyInfo.fingerprint, keyInfo.pair.publicKey]))\n        ),\n      }\n    } else if (!delegateInfo.requiresAnonymousDelegations && this.selfNeedsAnonymousDelegations) {\n      const fingerprintsOfVerifiedExchangeData = new Set(Object.keys(exchangeData.exchangeKey))\n      const delegateVerifiedKeys: { [fp: string]: CryptoKey } = {}\n      for (const keyHex of [...delegateInfo.availablePublicKeysHexWithSha1, ...delegateInfo.availablePublicKeysHexWithSha256]) {\n        const currFp = fingerprintV2(keyHex)\n        const shaVersion = delegateInfo.availablePublicKeysHexWithSha1.includes(keyHex) ? 'sha-1' : 'sha-256'\n        if (fingerprintsOfVerifiedExchangeData.has(currFp)) {\n          delegateVerifiedKeys[currFp] = await this.primitives.RSA.importKey('spki', hex2ua(keyHex), ['encrypt'], shaVersion)\n        }\n      }\n      if (!Object.keys(delegateVerifiedKeys).length)\n        throw new Error('Illegal state: could not find any verified key for delegate in verified exchange data.')\n      return {\n        explicitDelegate: delegateId,\n        encryptedExchangeDataId: await this.secureDelegationsEncryption.encryptExchangeDataId(exchangeData.id!, delegateVerifiedKeys),\n      }\n    } else return {}\n  }\n\n  private makeExchangeDataIdInfoForSelf(\n    selfId: string,\n    exchangeData: ExchangeData\n  ): {\n    exchangeDataId?: string\n    encryptedExchangeDataId?: { [fp: string]: string }\n    explicitDelegator?: string\n    explicitDelegate?: string\n  } {\n    if (this.selfNeedsAnonymousDelegations) {\n      return {}\n    } else {\n      return {\n        exchangeDataId: exchangeData.id,\n        explicitDelegator: selfId,\n        explicitDelegate: selfId,\n      }\n    }\n  }\n\n  private async getDataOwnerInfo(dataOwnerId: string) {\n    return this.dataOwnerInfoCache.get(dataOwnerId, async () => {\n      const dataOwnerWithType = await this.dataOwnerApi.getCryptoActorStub(dataOwnerId)\n      return {\n        item: {\n          requiresAnonymousDelegations: this.cryptoStrategies.dataOwnerRequiresAnonymousDelegation(dataOwnerWithType),\n          availablePublicKeysHexWithSha1: Array.from(hexPublicKeysWithSha1Of(dataOwnerWithType.stub)),\n          availablePublicKeysHexWithSha256: Array.from(hexPublicKeysWithSha256Of(dataOwnerWithType.stub)),\n        },\n      }\n    })\n  }\n\n  private getExistingCanonicalKeyAndSecureDelegation(\n    entity: EncryptedEntityStub | EncryptedEntity,\n    hashes: string[]\n  ): { canonicalKey: string; secureDelegation: SecureDelegation } | undefined {\n    const securityMetadata = entity.securityMetadata ?? {}\n    const canonicalByEquivalences = Array.from(new Set(hashes.flatMap((hash) => securityMetadata.keysEquivalences?.[hash] ?? [])))\n    const directRetrievals = hashes.flatMap((hash) => {\n      const retrievedMetadata = securityMetadata.secureDelegations?.[hash]\n      return retrievedMetadata ? { canonicalKey: hash, secureDelegation: retrievedMetadata } : []\n    })\n    if (\n      directRetrievals.length > 1 ||\n      canonicalByEquivalences.length > 1 ||\n      (!!canonicalByEquivalences[0] && !!directRetrievals[0]?.canonicalKey && canonicalByEquivalences[0] !== directRetrievals[0]?.canonicalKey)\n    )\n      throw new Error('Illegal state: multiple secure delegations matching equivalent hashes of entity.')\n    const canonicalFromEquivalences = canonicalByEquivalences[0]\n    const retrievedFromEquivalences = securityMetadata.secureDelegations?.[canonicalFromEquivalences]\n    return (\n      directRetrievals[0] ??\n      (!!canonicalFromEquivalences && !!retrievedFromEquivalences\n        ? { canonicalKey: canonicalFromEquivalences, secureDelegation: retrievedFromEquivalences }\n        : undefined)\n    )\n  }\n}\n"]}
+{"version":3,"file":"SecureDelegationsManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/SecureDelegationsManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wFAAoF;AAKpF,oFAA6E;AAC7E,mCAA2F;AAK3F,oCAAyC;AAIzC,2EAAuE;AACvE,sHAAkH;AAClH,IAAO,mBAAmB,GAAG,qEAAiC,CAAC,mBAAmB,CAAA;AAClF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,2EAAuE;AAGvE,MAAa,wBAAwB;IACnC,YACmB,mBAAwC,EACxC,sBAA8C,EAC9C,2BAAwD,EACxD,wBAAkD,EAClD,QAAmC,EACnC,UAA4B,EAC5B,YAA8B,EAC9B,gBAAkC,EAClC,6BAAsC;QARtC,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,gCAA2B,GAA3B,2BAA2B,CAA6B;QACxD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,aAAQ,GAAR,QAAQ,CAA2B;QACnC,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kCAA6B,GAA7B,6BAA6B,CAAS;QAGxC,uBAAkB,GAO/B,IAAI,oDAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IATvD,CAAC;IAWJ;;;;;;;;;;OAUG;IACG,sCAAsC,CAC1C,MAA2C,EAC3C,UAAwC,EACxC,SAAmB,EACnB,eAAyB,EACzB,cAAwB,EACxB,eAA2E;;YAE3E,MAAM,cAAc,GAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;YAC5E,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC5D,cAAc,EACd,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAC/C,SAAS,EACT,cAAc,EACd,eAAe,EACf,eAAe,CAAC,KAAK,EACrB,SAAS,CACV,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,oBAAoB,GAMpB,EAAE,CAAA;YACR,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;gBACvE,IAAI,UAAU,KAAK,MAAM,EAAE;oBACzB,oBAAoB,CAAC,IAAI,CACvB,MAAM,IAAI,CAAC,wBAAwB,CACjC,cAAc,EACd,UAAU,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,kBAAkB,CAAC,sBAAsB,CAC1C,CACF,CAAA;iBACF;aACF;YACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,CAAC,kBAAkB,EAAE,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC,CACpI,CAAA;YACD,MAAM,gBAAgB,qBACjB,kBAAkB,CAAC,yBAAyB,CAChD,CAAA;YACD,KAAK,MAAM,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,IAAI,oBAAoB,EAAE;gBACtF,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAA;aACtD;YACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAC5C,oBAAoB;iBACjB,MAAM,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC;iBAClE,GAAG,CAAC,CAAC,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,yBAAyB,EAAE,uBAAwB,CAAC,CAAC,CAC1H,CAAA;YACD,MAAM,IAAI,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAA;YAC7E,uCACK,MAAM,KACT,gBAAgB,EAAE,IAAI,mCAAgB,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,IAChF;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;;OAcG;IACG,8BAA8B,CAClC,cAAuC,EACvC,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,wBAAwE;;;YAExE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,CACjF,UAAU,EACV,cAAc,CAAC,IAAI,EACnB,MAAA,cAAc,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAC9C,CAAA;YACD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CACrF,gBAAgB,CAAC,mBAAmB,EACpC,cAAc,CAAC,IAAI,EACnB,MAAA,cAAc,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAC9C,CAAA;YACD,MAAM,wBAAwB,GAAG,IAAI,CAAC,0CAA0C,CAAC,cAAc,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;YAC5H,IAAI,wBAAwB,EAAE;gBAC5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACrD,wBAAwB,CAAC,YAAY,EACrC,wBAAwB,CAAC,gBAAgB,EACzC,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,CACrB,CAAA;gBACD,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;aAC3D;iBAAM;gBACL,MAAM,iBAAiB,GAAG,CACxB,MAAM,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,CACtD,gBAAgB,CAAC,mBAAmB,EACpC,cAAc,CAAC,IAAI,EACnB,MAAA,cAAc,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAC9C,CACF,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAA;gBACvB,OAAO;oBACL,KAAK,EAAE,MAAM,IAAI,CAAC,sBAAsB,CACtC,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,CACzB;iBACF,CAAA;aACF;;KACF;IAEa,uBAAuB,CACnC,YAAoB,EACpB,kBAAoC,EACpC,gBAAqG,EACrG,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B;;YAE9B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAA;YAC5I,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAC/G,CAAA;YACD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CACrC,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAChH,CAAA;YACD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/F,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAChG,IAAI,YAAY,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE;gBAChF,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,YAAY,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;gBACjI,MAAM,0BAA0B,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;gBAChJ,MAAM,2BAA2B,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAC/F,kBAAkB,EAClB,gBAAgB,CAAC,WAAW,CAC7B,CAAA;gBACD,OAAO,IAAI,qEAAiC,CAAC;oBAC3C,yBAAyB,EAAE,YAAY;oBACvC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClG,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9G,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;iBAC/G,CAAC,CAAA;aACH;;gBAAM,OAAO,SAAS,CAAA;QACzB,CAAC;KAAA;IAEa,sBAAsB,CAClC,gBAAqG,EACrG,iBAA2B,EAC3B,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,wBAAwE;;YAExE,OAAO,IAAI,uCAAkB,iCACxB,CAAC,MAAM,IAAI,CAAC,iCAAiC,CAAC,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,KAC1I,oBAAoB,EAAE,wBAAwB,EAC9C,iBAAiB,IACjB,CAAA;QACJ,CAAC;KAAA;IAEa,wBAAwB,CACpC,MAA+B,EAC/B,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B,EAC9B,WAA4B,EAC5B,mBAAuC;;;YAQvC,sDAAsD;YACtD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,CACjF,UAAU,EACV,MAAM,CAAC,IAAI,EACX,MAAA,MAAM,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CACtC,CAAA;YACD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CACrF,gBAAgB,CAAC,mBAAmB,EACpC,MAAM,CAAC,IAAI,EACX,MAAA,MAAM,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CACtC,CAAA;YACD,MAAM,iBAAiB,GAAG,CACxB,MAAM,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,CACtD,gBAAgB,CAAC,mBAAmB,EACpC,MAAM,CAAC,IAAI,EACX,MAAA,MAAM,CAAC,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CACtC,CACF,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAA;YACvB,MAAM,yBAAyB,GAAG,iBAAiB;iBAChD,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAClB,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAA;YAC1C,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAE3C,MAAM,YAAY,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACpD,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;YACrH,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAC1E,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,mBAAmB,EACnB,oBAAoB,CACrB,CAAA;YACD,MAAM,UAAU,GAAG,IAAI,mCAAgB,CAAC;gBACtC,SAAS,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,iBAAiB;gBACrD,QAAQ,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,gBAAgB;gBACnD,SAAS,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,SAAS;gBAC7C,cAAc,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,cAAc;gBACvD,eAAe,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,eAAe;gBACzD,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1E,cAAc,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,cAAc;gBACvD,uBAAuB,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,uBAAuB;gBACzE,WAAW,EAAE,WAAW;aACzB,CAAC,CAAA;YACF,OAAO;gBACL,sBAAsB,EAAE,YAAY;gBACpC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,UAAU;gBACV,uBAAuB,EAAE,uBAAuB,aAAvB,uBAAuB,uBAAvB,uBAAuB,CAAE,uBAAuB;gBACzE,yBAAyB,EAAE,eAAe;aAC3C,CAAA;;KACF;IAEa,iCAAiC,CAC7C,gBAAqG,EACrG,UAAkB,EAClB,cAAwB,EACxB,mBAA6B,EAC7B,oBAA8B;;YAU9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,kBAAkB,GACtB,UAAU,KAAK,MAAM;gBACnB,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC;gBAC3E,CAAC,CAAC,MAAM,IAAI,CAAC,iCAAiC,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;YACrG,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,cAAc,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAChI,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC/I,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAClJ,uCACK,kBAAkB,KACrB,SAAS,EAAE,kBAAkB,EAC7B,cAAc,EAAE,uBAAuB,EACvC,eAAe,EAAE,wBAAwB,IAC1C;QACH,CAAC;KAAA;IAEa,iCAAiC,CAC7C,MAAc,EACd,UAAkB,EAClB,YAA0B;;YAO1B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;YAC5D,IAAI,CAAC,YAAY,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACrF,OAAO;oBACL,iBAAiB,EAAE,MAAM;oBACzB,gBAAgB,EAAE,UAAU;oBAC5B,cAAc,EAAE,YAAY,CAAC,EAAE;iBAChC,CAAA;aACF;iBAAM,IAAI,YAAY,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBAC3F,OAAO;oBACL,iBAAiB,EAAE,MAAM;oBACzB,uBAAuB,EAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CACnF,YAAY,CAAC,EAAG,EAChB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CACxH;iBACF,CAAA;aACF;iBAAM,IAAI,CAAC,YAAY,CAAC,4BAA4B,IAAI,IAAI,CAAC,6BAA6B,EAAE;gBAC3F;;mBAEG;gBACH,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAA;gBACzF,MAAM,oBAAoB,GAAgC,EAAE,CAAA;gBAC5D,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,YAAY,CAAC,8BAA8B,EAAE,GAAG,YAAY,CAAC,gCAAgC,CAAC,EAAE;oBACvH,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,MAAM,CAAC,CAAA;oBACpC,MAAM,UAAU,GAAG,YAAY,CAAC,8BAA8B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;oBACrG,IAAI,kCAAkC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;wBAClD,oBAAoB,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAA;qBACpH;iBACF;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM;oBAC3C,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAA;gBAC3G,OAAO;oBACL,gBAAgB,EAAE,UAAU;oBAC5B,uBAAuB,EAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAG,EAAE,oBAAoB,CAAC;iBAC9H,CAAA;aACF;;gBAAM,OAAO,EAAE,CAAA;QAClB,CAAC;KAAA;IAEO,6BAA6B,CACnC,MAAc,EACd,YAA0B;QAO1B,IAAI,IAAI,CAAC,6BAA6B,EAAE;YACtC,OAAO,EAAE,CAAA;SACV;aAAM;YACL,OAAO;gBACL,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,iBAAiB,EAAE,MAAM;gBACzB,gBAAgB,EAAE,MAAM;aACzB,CAAA;SACF;IACH,CAAC;IAEa,gBAAgB,CAAC,WAAmB;;YAChD,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAS,EAAE;gBACzD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;gBACjF,OAAO;oBACL,IAAI,EAAE;wBACJ,4BAA4B,EAAE,IAAI,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,iBAAiB,CAAC;wBAC3G,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAA,+BAAuB,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;wBAC3F,gCAAgC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAyB,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;qBAChG;iBACF,CAAA;YACH,CAAC,CAAA,CAAC,CAAA;QACJ,CAAC;KAAA;IAEO,0CAA0C,CAChD,MAA6C,EAC7C,MAAgB;;QAEhB,MAAM,gBAAgB,GAAG,MAAA,MAAM,CAAC,gBAAgB,mCAAI,EAAE,CAAA;QACtD,MAAM,uBAAuB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,eAAC,OAAA,MAAA,MAAA,gBAAgB,CAAC,gBAAgB,0CAAG,IAAI,CAAC,mCAAI,EAAE,CAAA,EAAA,CAAC,CAAC,CAAC,CAAA;QAC9H,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;;YAC/C,MAAM,iBAAiB,GAAG,MAAA,gBAAgB,CAAC,iBAAiB,0CAAG,IAAI,CAAC,CAAA;YACpE,OAAO,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7F,CAAC,CAAC,CAAA;QACF,IACE,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC3B,uBAAuB,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,MAAA,gBAAgB,CAAC,CAAC,CAAC,0CAAE,YAAY,CAAA,IAAI,uBAAuB,CAAC,CAAC,CAAC,MAAK,MAAA,gBAAgB,CAAC,CAAC,CAAC,0CAAE,YAAY,CAAA,CAAC;YAEzI,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;QACrG,MAAM,yBAAyB,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,yBAAyB,GAAG,MAAA,gBAAgB,CAAC,iBAAiB,0CAAG,yBAAyB,CAAC,CAAA;QACjG,OAAO,CACL,MAAA,gBAAgB,CAAC,CAAC,CAAC,mCACnB,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,CAAC,yBAAyB;YACzD,CAAC,CAAC,EAAE,YAAY,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE;YAC1F,CAAC,CAAC,SAAS,CAAC,CACf,CAAA;IACH,CAAC;CACF;AA/ZD,4DA+ZC","sourcesContent":["import { EntityShareRequest } from '../../icc-api/model/requests/EntityShareRequest'\nimport { IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { UserEncryptionKeysManager } from './UserEncryptionKeysManager'\nimport { CryptoStrategies } from './CryptoStrategies'\nimport { EncryptedEntityWithType, EntityWithDelegationTypeName } from '../utils/EntityWithDelegationTypeName'\nimport { LruTemporisedAsyncCache } from '../utils/lru-temporised-async-cache'\nimport { fingerprintV2, hexPublicKeysWithSha1Of, hexPublicKeysWithSha256Of } from './utils'\nimport { ExchangeDataManager } from './ExchangeDataManager'\nimport { ExchangeData } from '../../icc-api/model/internal/ExchangeData'\nimport { SecureDelegationsEncryption } from './SecureDelegationsEncryption'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { hex2ua, ua2hex } from '../utils'\nimport { AccessControlSecretUtils } from './AccessControlSecretUtils'\nimport { EntityShareOrMetadataUpdateRequest } from '../../icc-api/model/requests/EntityShareOrMetadataUpdateRequest'\nimport { EncryptedEntity, EncryptedEntityStub } from '../../icc-api/model/models'\nimport { SecureDelegation } from '../../icc-api/model/SecureDelegation'\nimport { EntitySharedMetadataUpdateRequest } from '../../icc-api/model/requests/EntitySharedMetadataUpdateRequest'\nimport EntryUpdateTypeEnum = EntitySharedMetadataUpdateRequest.EntryUpdateTypeEnum\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { SecurityMetadata } from '../../icc-api/model/SecurityMetadata'\nimport { ExchangeDataMapManager } from './ExchangeDataMapManager'\n\nexport class SecureDelegationsManager {\n  constructor(\n    private readonly exchangeDataManager: ExchangeDataManager,\n    private readonly exchangeDataMapManager: ExchangeDataMapManager,\n    private readonly secureDelegationsEncryption: SecureDelegationsEncryption,\n    private readonly accessControlSecretUtils: AccessControlSecretUtils,\n    private readonly userKeys: UserEncryptionKeysManager,\n    private readonly primitives: CryptoPrimitives,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly cryptoStrategies: CryptoStrategies,\n    private readonly selfNeedsAnonymousDelegations: boolean\n  ) {}\n\n  private readonly dataOwnerInfoCache: LruTemporisedAsyncCache<\n    string,\n    {\n      requiresAnonymousDelegations: boolean\n      availablePublicKeysHexWithSha1: string[]\n      availablePublicKeysHexWithSha256: string[]\n    }\n  > = new LruTemporisedAsyncCache(100, () => 30 * 60 * 1000)\n\n  /**\n   * Note: this method does not save the updated entity.\n   * @param entity an entity, must already have secret foreign keys initialised.\n   * @param entityType the type of the entity\n   * @param secretIds the initial secret ids to include and share with the auto-delegations\n   * @param owningEntityIds the initial owning entity ids to include and share with the auto-delegations\n   * @param encryptionKeys the initial encryption keys to include and share with the auto-delegations\n   * @param autoDelegations the data owners which will initially have access to the entity in addition to the current data owner and the access level\n   * they will have on the entity.\n   * @return the entity with the security metadata initialised for the provided parameters.\n   */\n  async entityWithInitialisedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T & { secretForeignKeys: string[] },\n    entityType: EntityWithDelegationTypeName,\n    secretIds: string[],\n    owningEntityIds: string[],\n    encryptionKeys: string[],\n    autoDelegations: { [delegateId: string]: SecureDelegation.AccessLevelEnum }\n  ): Promise<T> {\n    const entityWithType: EncryptedEntityWithType = { entity, type: entityType }\n    const rootDelegationInfo = await this.makeSecureDelegationInfo(\n      entityWithType,\n      await this.dataOwnerApi.getCurrentDataOwnerId(),\n      secretIds,\n      encryptionKeys,\n      owningEntityIds,\n      AccessLevelEnum.WRITE,\n      undefined\n    )\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const otherDelegationsInfo: {\n      canonicalDelegationKey: string\n      canonicalAccessControlKey: string\n      delegation: SecureDelegation\n      delegationKeyEquivalences: { [p: string]: string }\n      encryptedExchangeDataId: { [fp: string]: string } | undefined\n    }[] = []\n    for (const [delegateId, permissions] of Object.entries(autoDelegations)) {\n      if (delegateId !== selfId) {\n        otherDelegationsInfo.push(\n          await this.makeSecureDelegationInfo(\n            entityWithType,\n            delegateId,\n            secretIds,\n            encryptionKeys,\n            owningEntityIds,\n            permissions,\n            rootDelegationInfo.canonicalDelegationKey\n          )\n        )\n      }\n    }\n    const secureDelegations = Object.fromEntries(\n      [rootDelegationInfo, ...otherDelegationsInfo].map(({ canonicalDelegationKey, delegation }) => [canonicalDelegationKey, delegation])\n    )\n    const keysEquivalences = {\n      ...rootDelegationInfo.delegationKeyEquivalences,\n    }\n    for (const { delegationKeyEquivalences: otherKeyEquivalences } of otherDelegationsInfo) {\n      Object.assign(keysEquivalences, otherKeyEquivalences)\n    }\n    const newExchangeDataMaps = Object.fromEntries(\n      otherDelegationsInfo\n        .filter(({ encryptedExchangeDataId }) => !!encryptedExchangeDataId)\n        .map(({ canonicalAccessControlKey, encryptedExchangeDataId }) => [canonicalAccessControlKey, encryptedExchangeDataId!])\n    )\n    await this.exchangeDataMapManager.createExchangeDataMaps(newExchangeDataMaps)\n    return {\n      ...entity,\n      securityMetadata: new SecurityMetadata({ secureDelegations, keysEquivalences }),\n    }\n  }\n\n  /**\n   * Make a request for sharing an entity with a delegate or to update existing shared metadata by adding additional secretIds, encryptionKeys or\n   * owningEntityIds if there is already some metadata shared between the current data owner and the delegate. In case there is already a delegation\n   * for the delegate, and it already contains all the provided metadata, this method returns undefined, since there is no need to make any request to\n   * share the provided data.\n   * @param entityWithType an entity with type\n   * @param delegateId the id of the delegate\n   * @param shareSecretIds the secret ids to share\n   * @param shareEncryptionKeys the encryption keys to share\n   * @param shareOwningEntityIds the owning entity ids to share\n   * @param newDelegationPermissions the permissions to grant to the delegate in case a new delegation needs to be created. If this method creates an\n   * update request instead of a share request, this parameter is ignored.\n   * @return the request to share the entity, or the request to update the shared metadata for the entity, or undefined if there is no need to update\n   * the entity to allow the delegate to access the provided data.\n   */\n  async makeShareOrUpdateRequestParams(\n    entityWithType: EncryptedEntityWithType,\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    newDelegationPermissions: EntityShareRequest.RequestedPermissionInternal\n  ): Promise<EntityShareOrMetadataUpdateRequest | undefined> {\n    const exchangeDataInfo = await this.exchangeDataManager.getOrCreateEncryptionDataTo(\n      delegateId,\n      entityWithType.type,\n      entityWithType.entity.secretForeignKeys ?? []\n    )\n    const accessControlHashes = await this.accessControlSecretUtils.secureDelegationKeysFor(\n      exchangeDataInfo.accessControlSecret,\n      entityWithType.type,\n      entityWithType.entity.secretForeignKeys ?? []\n    )\n    const existingSecureDelegation = this.getExistingCanonicalKeyAndSecureDelegation(entityWithType.entity, accessControlHashes)\n    if (existingSecureDelegation) {\n      const updateParams = await this.makeUpdateRequestParams(\n        existingSecureDelegation.canonicalKey,\n        existingSecureDelegation.secureDelegation,\n        exchangeDataInfo,\n        shareSecretIds,\n        shareEncryptionKeys,\n        shareOwningEntityIds\n      )\n      return updateParams ? { update: updateParams } : undefined\n    } else {\n      const accessControlKeys = (\n        await this.accessControlSecretUtils.accessControlKeysFor(\n          exchangeDataInfo.accessControlSecret,\n          entityWithType.type,\n          entityWithType.entity.secretForeignKeys ?? []\n        )\n      ).map((x) => ua2hex(x))\n      return {\n        share: await this.makeShareRequestParams(\n          exchangeDataInfo,\n          accessControlKeys,\n          delegateId,\n          shareSecretIds,\n          shareEncryptionKeys,\n          shareOwningEntityIds,\n          newDelegationPermissions\n        ),\n      }\n    }\n  }\n\n  private async makeUpdateRequestParams(\n    canonicalKey: string,\n    existingDelegation: SecureDelegation,\n    exchangeDataInfo: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey },\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[]\n  ): Promise<EntitySharedMetadataUpdateRequest | undefined> {\n    const existingSecretIds = new Set(await this.secureDelegationsEncryption.decryptSecretIds(existingDelegation, exchangeDataInfo.exchangeKey))\n    const existingEncryptionKeys = new Set(\n      await this.secureDelegationsEncryption.decryptEncryptionKeys(existingDelegation, exchangeDataInfo.exchangeKey)\n    )\n    const existingOwningEntityIds = new Set(\n      await this.secureDelegationsEncryption.decryptOwningEntityIds(existingDelegation, exchangeDataInfo.exchangeKey)\n    )\n    const newSecretIds = shareSecretIds.filter((id) => !existingSecretIds.has(id))\n    const newEncryptionKeys = shareEncryptionKeys.filter((key) => !existingEncryptionKeys.has(key))\n    const newOwningEntityIds = shareOwningEntityIds.filter((id) => !existingOwningEntityIds.has(id))\n    if (newSecretIds.length || newEncryptionKeys.length || newOwningEntityIds.length) {\n      const encryptedNewSecretIds = await this.secureDelegationsEncryption.encryptSecretIds(newSecretIds, exchangeDataInfo.exchangeKey)\n      const encryptedNewEncryptionKeys = await this.secureDelegationsEncryption.encryptEncryptionKeys(newEncryptionKeys, exchangeDataInfo.exchangeKey)\n      const encryptedNewOwningEntityIds = await this.secureDelegationsEncryption.encryptOwningEntityIds(\n        newOwningEntityIds,\n        exchangeDataInfo.exchangeKey\n      )\n      return new EntitySharedMetadataUpdateRequest({\n        metadataAccessControlHash: canonicalKey,\n        secretIds: Object.fromEntries(encryptedNewSecretIds.map((id) => [id, EntryUpdateTypeEnum.CREATE])),\n        encryptionKeys: Object.fromEntries(encryptedNewEncryptionKeys.map((key) => [key, EntryUpdateTypeEnum.CREATE])),\n        owningEntityIds: Object.fromEntries(encryptedNewOwningEntityIds.map((id) => [id, EntryUpdateTypeEnum.CREATE])),\n      })\n    } else return undefined\n  }\n\n  private async makeShareRequestParams(\n    exchangeDataInfo: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey },\n    accessControlKeys: string[],\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    newDelegationPermissions: EntityShareRequest.RequestedPermissionInternal\n  ): Promise<EntityShareRequest> {\n    return new EntityShareRequest({\n      ...(await this.makeSecureDelegationEncryptedData(exchangeDataInfo, delegateId, shareSecretIds, shareEncryptionKeys, shareOwningEntityIds)),\n      requestedPermissions: newDelegationPermissions,\n      accessControlKeys,\n    })\n  }\n\n  private async makeSecureDelegationInfo(\n    entity: EncryptedEntityWithType,\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[],\n    permissions: AccessLevelEnum,\n    parentDelegationKey: string | undefined\n  ): Promise<{\n    canonicalDelegationKey: string\n    canonicalAccessControlKey: string\n    delegation: SecureDelegation\n    encryptedExchangeDataId: { [fp: string]: string } | undefined\n    delegationKeyEquivalences: { [alias: string]: string }\n  }> {\n    // Be wary of explicit delegator and explicit delegate\n    const exchangeDataInfo = await this.exchangeDataManager.getOrCreateEncryptionDataTo(\n      delegateId,\n      entity.type,\n      entity.entity.secretForeignKeys ?? []\n    )\n    const accessControlHashes = await this.accessControlSecretUtils.secureDelegationKeysFor(\n      exchangeDataInfo.accessControlSecret,\n      entity.type,\n      entity.entity.secretForeignKeys ?? []\n    )\n    const accessControlKeys = (\n      await this.accessControlSecretUtils.accessControlKeysFor(\n        exchangeDataInfo.accessControlSecret,\n        entity.type,\n        entity.entity.secretForeignKeys ?? []\n      )\n    ).map((x) => ua2hex(x))\n    const accessControlKeysToHashes = accessControlKeys\n      .map((key, index) => {\n        return [key, accessControlHashes[index]]\n      })\n      .sort((a, b) => a[1].localeCompare(b[1]))\n\n    const canonicalKey = accessControlKeysToHashes[0][1]\n    const keyEquivalences = Object.fromEntries(accessControlKeysToHashes.slice(1).map((hash) => [hash[1], canonicalKey]))\n    const encryptedDelegationInfo = await this.makeSecureDelegationEncryptedData(\n      exchangeDataInfo,\n      delegateId,\n      shareSecretIds,\n      shareEncryptionKeys,\n      shareOwningEntityIds\n    )\n    const delegation = new SecureDelegation({\n      delegator: encryptedDelegationInfo?.explicitDelegator,\n      delegate: encryptedDelegationInfo?.explicitDelegate,\n      secretIds: encryptedDelegationInfo?.secretIds,\n      encryptionKeys: encryptedDelegationInfo?.encryptionKeys,\n      owningEntityIds: encryptedDelegationInfo?.owningEntityIds,\n      parentDelegations: parentDelegationKey ? [parentDelegationKey] : undefined,\n      exchangeDataId: encryptedDelegationInfo?.exchangeDataId,\n      encryptedExchangeDataId: encryptedDelegationInfo?.encryptedExchangeDataId,\n      permissions: permissions,\n    })\n    return {\n      canonicalDelegationKey: canonicalKey,\n      canonicalAccessControlKey: accessControlKeysToHashes[0][0],\n      delegation,\n      encryptedExchangeDataId: encryptedDelegationInfo?.encryptedExchangeDataId,\n      delegationKeyEquivalences: keyEquivalences,\n    }\n  }\n\n  private async makeSecureDelegationEncryptedData(\n    exchangeDataInfo: { exchangeData: ExchangeData; accessControlSecret: string; exchangeKey: CryptoKey },\n    delegateId: string,\n    shareSecretIds: string[],\n    shareEncryptionKeys: string[],\n    shareOwningEntityIds: string[]\n  ): Promise<{\n    explicitDelegator?: string\n    explicitDelegate?: string\n    secretIds?: string[]\n    encryptionKeys?: string[]\n    owningEntityIds?: string[]\n    exchangeDataId?: string\n    encryptedExchangeDataId?: { [fp: string]: string } // TODO if secure delegation info, check cache before calculating\n  }> {\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const exchangeDataIdInfo =\n      delegateId === selfId\n        ? this.makeExchangeDataIdInfoForSelf(selfId, exchangeDataInfo.exchangeData)\n        : await this.makeExchangeDataIdInfoForDelegate(selfId, delegateId, exchangeDataInfo.exchangeData)\n    const encryptedSecretIds = await this.secureDelegationsEncryption.encryptSecretIds(shareSecretIds, exchangeDataInfo.exchangeKey)\n    const encryptedEncryptionKeys = await this.secureDelegationsEncryption.encryptEncryptionKeys(shareEncryptionKeys, exchangeDataInfo.exchangeKey)\n    const encryptedOwningEntityIds = await this.secureDelegationsEncryption.encryptOwningEntityIds(shareOwningEntityIds, exchangeDataInfo.exchangeKey)\n    return {\n      ...exchangeDataIdInfo,\n      secretIds: encryptedSecretIds,\n      encryptionKeys: encryptedEncryptionKeys,\n      owningEntityIds: encryptedOwningEntityIds,\n    }\n  }\n\n  private async makeExchangeDataIdInfoForDelegate(\n    selfId: string,\n    delegateId: string,\n    exchangeData: ExchangeData\n  ): Promise<{\n    exchangeDataId?: string\n    encryptedExchangeDataId?: { [fp: string]: string }\n    explicitDelegator?: string\n    explicitDelegate?: string\n  }> {\n    const delegateInfo = await this.getDataOwnerInfo(delegateId)\n    if (!delegateInfo.requiresAnonymousDelegations && !this.selfNeedsAnonymousDelegations) {\n      return {\n        explicitDelegator: selfId,\n        explicitDelegate: delegateId,\n        exchangeDataId: exchangeData.id,\n      }\n    } else if (delegateInfo.requiresAnonymousDelegations && !this.selfNeedsAnonymousDelegations) {\n      return {\n        explicitDelegator: selfId,\n        encryptedExchangeDataId: await this.secureDelegationsEncryption.encryptExchangeDataId(\n          exchangeData.id!,\n          Object.fromEntries(this.userKeys.getSelfVerifiedKeys().map((keyInfo) => [keyInfo.fingerprint, keyInfo.pair.publicKey]))\n        ),\n      }\n    } else if (!delegateInfo.requiresAnonymousDelegations && this.selfNeedsAnonymousDelegations) {\n      /**\n       * Important: this requires that the exchange data signature also validates the authenticity of the public keys included in there.\n       */\n      const fingerprintsOfVerifiedExchangeData = new Set(Object.keys(exchangeData.exchangeKey))\n      const delegateVerifiedKeys: { [fp: string]: CryptoKey } = {}\n      for (const keyHex of [...delegateInfo.availablePublicKeysHexWithSha1, ...delegateInfo.availablePublicKeysHexWithSha256]) {\n        const currFp = fingerprintV2(keyHex)\n        const shaVersion = delegateInfo.availablePublicKeysHexWithSha1.includes(keyHex) ? 'sha-1' : 'sha-256'\n        if (fingerprintsOfVerifiedExchangeData.has(currFp)) {\n          delegateVerifiedKeys[currFp] = await this.primitives.RSA.importKey('spki', hex2ua(keyHex), ['encrypt'], shaVersion)\n        }\n      }\n      if (!Object.keys(delegateVerifiedKeys).length)\n        throw new Error('Illegal state: could not find any verified key for delegate in verified exchange data.')\n      return {\n        explicitDelegate: delegateId,\n        encryptedExchangeDataId: await this.secureDelegationsEncryption.encryptExchangeDataId(exchangeData.id!, delegateVerifiedKeys),\n      }\n    } else return {}\n  }\n\n  private makeExchangeDataIdInfoForSelf(\n    selfId: string,\n    exchangeData: ExchangeData\n  ): {\n    exchangeDataId?: string\n    encryptedExchangeDataId?: { [fp: string]: string }\n    explicitDelegator?: string\n    explicitDelegate?: string\n  } {\n    if (this.selfNeedsAnonymousDelegations) {\n      return {}\n    } else {\n      return {\n        exchangeDataId: exchangeData.id,\n        explicitDelegator: selfId,\n        explicitDelegate: selfId,\n      }\n    }\n  }\n\n  private async getDataOwnerInfo(dataOwnerId: string) {\n    return this.dataOwnerInfoCache.get(dataOwnerId, async () => {\n      const dataOwnerWithType = await this.dataOwnerApi.getCryptoActorStub(dataOwnerId)\n      return {\n        item: {\n          requiresAnonymousDelegations: this.cryptoStrategies.dataOwnerRequiresAnonymousDelegation(dataOwnerWithType),\n          availablePublicKeysHexWithSha1: Array.from(hexPublicKeysWithSha1Of(dataOwnerWithType.stub)),\n          availablePublicKeysHexWithSha256: Array.from(hexPublicKeysWithSha256Of(dataOwnerWithType.stub)),\n        },\n      }\n    })\n  }\n\n  private getExistingCanonicalKeyAndSecureDelegation(\n    entity: EncryptedEntityStub | EncryptedEntity,\n    hashes: string[]\n  ): { canonicalKey: string; secureDelegation: SecureDelegation } | undefined {\n    const securityMetadata = entity.securityMetadata ?? {}\n    const canonicalByEquivalences = Array.from(new Set(hashes.flatMap((hash) => securityMetadata.keysEquivalences?.[hash] ?? [])))\n    const directRetrievals = hashes.flatMap((hash) => {\n      const retrievedMetadata = securityMetadata.secureDelegations?.[hash]\n      return retrievedMetadata ? { canonicalKey: hash, secureDelegation: retrievedMetadata } : []\n    })\n    if (\n      directRetrievals.length > 1 ||\n      canonicalByEquivalences.length > 1 ||\n      (!!canonicalByEquivalences[0] && !!directRetrievals[0]?.canonicalKey && canonicalByEquivalences[0] !== directRetrievals[0]?.canonicalKey)\n    )\n      throw new Error('Illegal state: multiple secure delegations matching equivalent hashes of entity.')\n    const canonicalFromEquivalences = canonicalByEquivalences[0]\n    const retrievedFromEquivalences = securityMetadata.secureDelegations?.[canonicalFromEquivalences]\n    return (\n      directRetrievals[0] ??\n      (!!canonicalFromEquivalences && !!retrievedFromEquivalences\n        ? { canonicalKey: canonicalFromEquivalences, secureDelegation: retrievedFromEquivalences }\n        : undefined)\n    )\n  }\n}\n"]}

package/icc-x-api/icc-icure-maintenance-x-api.d.ts

@@ -4,7 +4,7 @@ import { IccCryptoXApi } from './icc-crypto-x-api';
 import { KeyPairUpdateRequest } from './maintenance/KeyPairUpdateRequest';
 import { IccDataOwnerXApi } from './icc-data-owner-x-api';
 import { User } from '../icc-api/model/User';
-import { IccExchangeDataApi } from '../icc-api/api/IccExchangeDataApi';
+import { IccExchangeDataApi } from '../icc-api/api/internal/IccExchangeDataApi';
 import { DataOwnerTypeEnum } from '../icc-api/model/DataOwnerTypeEnum';
 /**
  * Api for interpreting maintenance tasks and applying required client-side actions.

package/icc-x-api/icc-icure-maintenance-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-icure-maintenance-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-icure-maintenance-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,sEAAkE;AAClE,mCAAgC;AAChC,gEAA4D;AAC5D,wEAAoE;AACpE,wEAAoE;AAEpE,6EAAyE;AAGzE,wEAAoE;AAEpE,0EAAsE;AACtE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAIzD;;GAEG;AACH,MAAa,uBAAuB;IAClC,YACmB,MAAqB,EACrB,QAAgC,EAChC,YAA8B,EAC9B,eAAmC;QAHnC,WAAM,GAAN,MAAM,CAAe;QACrB,aAAQ,GAAR,QAAQ,CAAwB;QAChC,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,oBAAe,GAAf,eAAe,CAAoB;IACnD,CAAC;IAEJ,iEAAiE;IAEjE;;;;;OAKG;IACG,kBAAkB,CAAC,MAA4B;;YACnD,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAClD,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAChD,CAAA;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACnG,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,mCAAmC,CAAC,IAAU,EAAE,OAA2B,EAAE,mBAAyC;;YAC1H,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAA;YACzE,IAAI,CAAC,mBAAmB,EAAE;gBACxB,IAAI,eAAe,KAAK,QAAQ,EAAE;oBAChC,OAAO,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAA;oBACpH,OAAM;iBACP;qBAAM;oBACL,mBAAmB;wBACjB,eAAe,KAAK,qCAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qCAAiB,CAAC,OAAO,EAAE,qCAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qCAAiB,CAAC,GAAG,CAAC,CAAA;iBAC/H;aACF;YACD,MAAM,YAAY,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAClG,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,gCAAgC,GAAG,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;iBACtG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;iBACxD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;iBAClD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,CAAA;YAC9C,MAAM,gCAAgC,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,sCAAsC,CACxG,MAAM,EACN,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5C,CAAA;YACD,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gCAAgC,EAAE,GAAG,gCAAgC,CAAC,CAAC,CAAC,CAAA;YAClH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE;gBAChC,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC1D,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,YAAY,CAAC;iBACvD,CAAC,CAAC,CAAA;gBACH,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE;oBACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE;wBACxE,mBAAmB,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE;qBACxE,CAAC,CAAA;oBACF,IAAI,QAAQ,EAAE;wBACZ,sBAAsB;wBACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;qBAClE;iBACF;aACF;QACH,CAAC;KAAA;IAEa,sBAAsB,CAAC,WAAmB,EAAE,eAAoC;;YAC5F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAChH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,CACtG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACvD,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,WAAW;gBACrB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3E,CAAC,CAAC,CACJ,CAAA;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE,CACzF,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrE,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3E,CAAC,CAAC,CACJ,CAAA;YACD,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAA;QACjC,CAAC;KAAA;IAEO,qBAAqB,CAAC,OAAe,EAAE,eAAuB;QACpE,OAAO,IAAI,iCAAe,CAAC;YACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;YACvC,QAAQ,EAAE,2CAAoB,CAAC,SAAS;YACxC,MAAM,EAAE,iCAAe,CAAC,UAAU,CAAC,OAAO;YAC1C,UAAU,EAAE;gBACV,IAAI,2BAAY,CAAC;oBACf,EAAE,EAAE,2CAAoB,CAAC,gBAAgB;oBACzC,IAAI,EAAE,IAAI,mCAAgB,CAAC,EAAE,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACtE,UAAU,EAAE,IAAI,mCAAgB,CAAC;wBAC/B,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM;wBACtC,WAAW,EAAE,OAAO;qBACrB,CAAC;iBACH,CAAC;gBACF,IAAI,2BAAY,CAAC;oBACf,EAAE,EAAE,2CAAoB,CAAC,iBAAiB;oBAC1C,IAAI,EAAE,IAAI,mCAAgB,CAAC,EAAE,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACtE,UAAU,EAAE,IAAI,mCAAgB,CAAC;wBAC/B,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM;wBACtC,WAAW,EAAE,eAAe;qBAC7B,CAAC;iBACH,CAAC;aACH;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AArHD,0DAqHC","sourcesContent":["import { KeyPair } from './crypto/RSA'\nimport { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api'\nimport { MaintenanceTask } from '../icc-api/model/MaintenanceTask'\nimport { ua2hex } from './utils'\nimport { PropertyStub } from '../icc-api/model/PropertyStub'\nimport { PropertyTypeStub } from '../icc-api/model/PropertyTypeStub'\nimport { TypedValueObject } from '../icc-api/model/TypedValueObject'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { KeyPairUpdateRequest } from './maintenance/KeyPairUpdateRequest'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { User } from '../icc-api/model/User'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport { IccExchangeDataApi } from '../icc-api/api/IccExchangeDataApi'\nimport { DataOwnerTypeEnum } from '../icc-api/model/DataOwnerTypeEnum'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\n\ntype ExchangeKeyInfo = { delegator: string; delegate: string; fingerprints: Set<string> }\n\n/**\n * Api for interpreting maintenance tasks and applying required client-side actions.\n */\nexport class IccIcureMaintenanceXApi {\n  constructor(\n    private readonly crypto: IccCryptoXApi,\n    private readonly tasksApi: IccMaintenanceTaskXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly exchangeDataApi: IccExchangeDataApi\n  ) {}\n\n  // TODO api to get all tasks for current owner from owner with id\n\n  /**\n   * Applies a key pair update request between another data owner and the current data owner to allow the other data owner to access existing exchange\n   * keys shared with the current data owner. IMPORTANT: it is your responsibility to verify the authenticity of the public key / update request\n   * before calling this method: this method assumes the new public key for the concerned data owner is authentic.\n   * @param update a keypair update request to the current data owner.\n   */\n  async applyKeyPairUpdate(update: KeyPairUpdateRequest) {\n    await this.crypto.exchangeKeys.base.giveAccessBackTo(\n      update.concernedDataOwnerId,\n      update.newPublicKey,\n      this.crypto.userKeysManager.getDecryptionKeys()\n    )\n    await this.crypto.exchangeData.giveAccessBackTo(update.concernedDataOwnerId, update.newPublicKey)\n  }\n\n  /**\n   * @internal This method is intended only for internal use and may be changed without notice.\n   * Creates the necessary maintenance tasks to request access to existing exchange keys with the new key pair for the current user.\n   * @param user the user which owns the new key pair.\n   * @param keypair a new key pair for the current user.\n   * @param requestToOwnerTypes specifies the types of data owner that have shared data with the current data owner or which were given access to data\n   * from the current data owner will receive a 'give access back' request. If not specified, the value be inferred from the current data owner type.\n   */\n  async createMaintenanceTasksForNewKeypair(user: User, keypair: KeyPair<CryptoKey>, requestToOwnerTypes?: DataOwnerTypeEnum[]): Promise<void> {\n    const currentUserType = await this.dataOwnerApi.getCurrentDataOwnerType()\n    if (!requestToOwnerTypes) {\n      if (currentUserType === 'device') {\n        console.warn('Current data owner is a device and there is no need to create maintenance tasks for updated keypair.')\n        return\n      } else {\n        requestToOwnerTypes =\n          currentUserType === DataOwnerTypeEnum.Patient ? [DataOwnerTypeEnum.Patient, DataOwnerTypeEnum.Hcp] : [DataOwnerTypeEnum.Hcp]\n      }\n    }\n    const hexNewPubKey = ua2hex(await this.crypto.primitives.RSA.exportKey(keypair.publicKey, 'spki'))\n    const hexNewPubKeyFp = hexNewPubKey.slice(-32)\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const requestDataOwnersForExchangeKeys = (await this.getExchangeKeysInfosOf(selfId, requestToOwnerTypes))\n      .filter((info) => !info.fingerprints.has(hexNewPubKeyFp))\n      .flatMap((info) => [info.delegate, info.delegator])\n      .filter((dataOwner) => dataOwner !== selfId)\n    const requestDataOwnersForExchangeData = await this.exchangeDataApi.getExchangeDataParticipantCounterparts(\n      selfId,\n      [...new Set(requestToOwnerTypes)].join(',')\n    )\n    const requestDataOwners = [...new Set([...requestDataOwnersForExchangeKeys, ...requestDataOwnersForExchangeData])]\n    if (requestDataOwners.length > 0) {\n      const tasksToCreate = requestDataOwners.map((dataOwner) => ({\n        delegate: dataOwner,\n        task: this.createMaintenanceTask(selfId, hexNewPubKey),\n      }))\n      for (const taskToCreate of tasksToCreate) {\n        const instance = await this.tasksApi.newInstance(user, taskToCreate.task, {\n          additionalDelegates: { [taskToCreate.delegate]: AccessLevelEnum.WRITE },\n        })\n        if (instance) {\n          // TODO create in bulk\n          await this.tasksApi.createMaintenanceTaskWithUser(user, instance)\n        }\n      }\n    }\n  }\n\n  private async getExchangeKeysInfosOf(dataOwnerId: string, otherOwnerTypes: DataOwnerTypeEnum[]): Promise<ExchangeKeyInfo[]> {\n    const allExchangeKeys = await this.crypto.exchangeKeys.base.getAllExchangeKeysWith(dataOwnerId, otherOwnerTypes)\n    const infoTo = Object.entries(allExchangeKeys.keysToOwner).flatMap(([delegatorId, delegatorFpToKeys]) =>\n      Object.values(delegatorFpToKeys).map((encryptedKeys) => ({\n        delegator: delegatorId,\n        delegate: dataOwnerId,\n        fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),\n      }))\n    )\n    const infoFrom = Object.values(allExchangeKeys.keysFromOwner).flatMap((delegateIdToKeys) =>\n      Object.entries(delegateIdToKeys).map(([delegateId, encryptedKeys]) => ({\n        delegator: dataOwnerId,\n        delegate: delegateId,\n        fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),\n      }))\n    )\n    return [...infoFrom, ...infoTo]\n  }\n\n  private createMaintenanceTask(ownerId: string, concernedPubKey: string) {\n    return new MaintenanceTask({\n      id: this.crypto.primitives.randomUuid(),\n      taskType: KeyPairUpdateRequest.TASK_TYPE,\n      status: MaintenanceTask.StatusEnum.Pending,\n      properties: [\n        new PropertyStub({\n          id: KeyPairUpdateRequest.OWNER_ID_PROP_ID,\n          type: new PropertyTypeStub({ type: PropertyTypeStub.TypeEnum.STRING }),\n          typedValue: new TypedValueObject({\n            type: TypedValueObject.TypeEnum.STRING,\n            stringValue: ownerId,\n          }),\n        }),\n        new PropertyStub({\n          id: KeyPairUpdateRequest.OWNER_PUB_PROP_ID,\n          type: new PropertyTypeStub({ type: PropertyTypeStub.TypeEnum.STRING }),\n          typedValue: new TypedValueObject({\n            type: TypedValueObject.TypeEnum.STRING,\n            stringValue: concernedPubKey,\n          }),\n        }),\n      ],\n    })\n  }\n}\n"]}
+{"version":3,"file":"icc-icure-maintenance-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-icure-maintenance-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,sEAAkE;AAClE,mCAAgC;AAChC,gEAA4D;AAC5D,wEAAoE;AACpE,wEAAoE;AAEpE,6EAAyE;AAGzE,wEAAoE;AAEpE,0EAAsE;AACtE,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAIzD;;GAEG;AACH,MAAa,uBAAuB;IAClC,YACmB,MAAqB,EACrB,QAAgC,EAChC,YAA8B,EAC9B,eAAmC;QAHnC,WAAM,GAAN,MAAM,CAAe;QACrB,aAAQ,GAAR,QAAQ,CAAwB;QAChC,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,oBAAe,GAAf,eAAe,CAAoB;IACnD,CAAC;IAEJ,iEAAiE;IAEjE;;;;;OAKG;IACG,kBAAkB,CAAC,MAA4B;;YACnD,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAClD,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAChD,CAAA;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACnG,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,mCAAmC,CAAC,IAAU,EAAE,OAA2B,EAAE,mBAAyC;;YAC1H,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAA;YACzE,IAAI,CAAC,mBAAmB,EAAE;gBACxB,IAAI,eAAe,KAAK,QAAQ,EAAE;oBAChC,OAAO,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAA;oBACpH,OAAM;iBACP;qBAAM;oBACL,mBAAmB;wBACjB,eAAe,KAAK,qCAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qCAAiB,CAAC,OAAO,EAAE,qCAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qCAAiB,CAAC,GAAG,CAAC,CAAA;iBAC/H;aACF;YACD,MAAM,YAAY,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAClG,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,MAAM,gCAAgC,GAAG,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;iBACtG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;iBACxD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;iBAClD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,CAAA;YAC9C,MAAM,gCAAgC,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,sCAAsC,CACxG,MAAM,EACN,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5C,CAAA;YACD,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gCAAgC,EAAE,GAAG,gCAAgC,CAAC,CAAC,CAAC,CAAA;YAClH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE;gBAChC,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC1D,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,YAAY,CAAC;iBACvD,CAAC,CAAC,CAAA;gBACH,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE;oBACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE;wBACxE,mBAAmB,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE;qBACxE,CAAC,CAAA;oBACF,IAAI,QAAQ,EAAE;wBACZ,sBAAsB;wBACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;qBAClE;iBACF;aACF;QACH,CAAC;KAAA;IAEa,sBAAsB,CAAC,WAAmB,EAAE,eAAoC;;YAC5F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAChH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,CACtG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACvD,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,WAAW;gBACrB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3E,CAAC,CAAC,CACJ,CAAA;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE,CACzF,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrE,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC3E,CAAC,CAAC,CACJ,CAAA;YACD,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAA;QACjC,CAAC;KAAA;IAEO,qBAAqB,CAAC,OAAe,EAAE,eAAuB;QACpE,OAAO,IAAI,iCAAe,CAAC;YACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;YACvC,QAAQ,EAAE,2CAAoB,CAAC,SAAS;YACxC,MAAM,EAAE,iCAAe,CAAC,UAAU,CAAC,OAAO;YAC1C,UAAU,EAAE;gBACV,IAAI,2BAAY,CAAC;oBACf,EAAE,EAAE,2CAAoB,CAAC,gBAAgB;oBACzC,IAAI,EAAE,IAAI,mCAAgB,CAAC,EAAE,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACtE,UAAU,EAAE,IAAI,mCAAgB,CAAC;wBAC/B,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM;wBACtC,WAAW,EAAE,OAAO;qBACrB,CAAC;iBACH,CAAC;gBACF,IAAI,2BAAY,CAAC;oBACf,EAAE,EAAE,2CAAoB,CAAC,iBAAiB;oBAC1C,IAAI,EAAE,IAAI,mCAAgB,CAAC,EAAE,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACtE,UAAU,EAAE,IAAI,mCAAgB,CAAC;wBAC/B,IAAI,EAAE,mCAAgB,CAAC,QAAQ,CAAC,MAAM;wBACtC,WAAW,EAAE,eAAe;qBAC7B,CAAC;iBACH,CAAC;aACH;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AArHD,0DAqHC","sourcesContent":["import { KeyPair } from './crypto/RSA'\nimport { IccMaintenanceTaskXApi } from './icc-maintenance-task-x-api'\nimport { MaintenanceTask } from '../icc-api/model/MaintenanceTask'\nimport { ua2hex } from './utils'\nimport { PropertyStub } from '../icc-api/model/PropertyStub'\nimport { PropertyTypeStub } from '../icc-api/model/PropertyTypeStub'\nimport { TypedValueObject } from '../icc-api/model/TypedValueObject'\nimport { IccCryptoXApi } from './icc-crypto-x-api'\nimport { KeyPairUpdateRequest } from './maintenance/KeyPairUpdateRequest'\nimport { IccDataOwnerXApi } from './icc-data-owner-x-api'\nimport { User } from '../icc-api/model/User'\nimport { SecureDelegation } from '../icc-api/model/SecureDelegation'\nimport { IccExchangeDataApi } from '../icc-api/api/internal/IccExchangeDataApi'\nimport { DataOwnerTypeEnum } from '../icc-api/model/DataOwnerTypeEnum'\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\n\ntype ExchangeKeyInfo = { delegator: string; delegate: string; fingerprints: Set<string> }\n\n/**\n * Api for interpreting maintenance tasks and applying required client-side actions.\n */\nexport class IccIcureMaintenanceXApi {\n  constructor(\n    private readonly crypto: IccCryptoXApi,\n    private readonly tasksApi: IccMaintenanceTaskXApi,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly exchangeDataApi: IccExchangeDataApi\n  ) {}\n\n  // TODO api to get all tasks for current owner from owner with id\n\n  /**\n   * Applies a key pair update request between another data owner and the current data owner to allow the other data owner to access existing exchange\n   * keys shared with the current data owner. IMPORTANT: it is your responsibility to verify the authenticity of the public key / update request\n   * before calling this method: this method assumes the new public key for the concerned data owner is authentic.\n   * @param update a keypair update request to the current data owner.\n   */\n  async applyKeyPairUpdate(update: KeyPairUpdateRequest) {\n    await this.crypto.exchangeKeys.base.giveAccessBackTo(\n      update.concernedDataOwnerId,\n      update.newPublicKey,\n      this.crypto.userKeysManager.getDecryptionKeys()\n    )\n    await this.crypto.exchangeData.giveAccessBackTo(update.concernedDataOwnerId, update.newPublicKey)\n  }\n\n  /**\n   * @internal This method is intended only for internal use and may be changed without notice.\n   * Creates the necessary maintenance tasks to request access to existing exchange keys with the new key pair for the current user.\n   * @param user the user which owns the new key pair.\n   * @param keypair a new key pair for the current user.\n   * @param requestToOwnerTypes specifies the types of data owner that have shared data with the current data owner or which were given access to data\n   * from the current data owner will receive a 'give access back' request. If not specified, the value be inferred from the current data owner type.\n   */\n  async createMaintenanceTasksForNewKeypair(user: User, keypair: KeyPair<CryptoKey>, requestToOwnerTypes?: DataOwnerTypeEnum[]): Promise<void> {\n    const currentUserType = await this.dataOwnerApi.getCurrentDataOwnerType()\n    if (!requestToOwnerTypes) {\n      if (currentUserType === 'device') {\n        console.warn('Current data owner is a device and there is no need to create maintenance tasks for updated keypair.')\n        return\n      } else {\n        requestToOwnerTypes =\n          currentUserType === DataOwnerTypeEnum.Patient ? [DataOwnerTypeEnum.Patient, DataOwnerTypeEnum.Hcp] : [DataOwnerTypeEnum.Hcp]\n      }\n    }\n    const hexNewPubKey = ua2hex(await this.crypto.primitives.RSA.exportKey(keypair.publicKey, 'spki'))\n    const hexNewPubKeyFp = hexNewPubKey.slice(-32)\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    const requestDataOwnersForExchangeKeys = (await this.getExchangeKeysInfosOf(selfId, requestToOwnerTypes))\n      .filter((info) => !info.fingerprints.has(hexNewPubKeyFp))\n      .flatMap((info) => [info.delegate, info.delegator])\n      .filter((dataOwner) => dataOwner !== selfId)\n    const requestDataOwnersForExchangeData = await this.exchangeDataApi.getExchangeDataParticipantCounterparts(\n      selfId,\n      [...new Set(requestToOwnerTypes)].join(',')\n    )\n    const requestDataOwners = [...new Set([...requestDataOwnersForExchangeKeys, ...requestDataOwnersForExchangeData])]\n    if (requestDataOwners.length > 0) {\n      const tasksToCreate = requestDataOwners.map((dataOwner) => ({\n        delegate: dataOwner,\n        task: this.createMaintenanceTask(selfId, hexNewPubKey),\n      }))\n      for (const taskToCreate of tasksToCreate) {\n        const instance = await this.tasksApi.newInstance(user, taskToCreate.task, {\n          additionalDelegates: { [taskToCreate.delegate]: AccessLevelEnum.WRITE },\n        })\n        if (instance) {\n          // TODO create in bulk\n          await this.tasksApi.createMaintenanceTaskWithUser(user, instance)\n        }\n      }\n    }\n  }\n\n  private async getExchangeKeysInfosOf(dataOwnerId: string, otherOwnerTypes: DataOwnerTypeEnum[]): Promise<ExchangeKeyInfo[]> {\n    const allExchangeKeys = await this.crypto.exchangeKeys.base.getAllExchangeKeysWith(dataOwnerId, otherOwnerTypes)\n    const infoTo = Object.entries(allExchangeKeys.keysToOwner).flatMap(([delegatorId, delegatorFpToKeys]) =>\n      Object.values(delegatorFpToKeys).map((encryptedKeys) => ({\n        delegator: delegatorId,\n        delegate: dataOwnerId,\n        fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),\n      }))\n    )\n    const infoFrom = Object.values(allExchangeKeys.keysFromOwner).flatMap((delegateIdToKeys) =>\n      Object.entries(delegateIdToKeys).map(([delegateId, encryptedKeys]) => ({\n        delegator: dataOwnerId,\n        delegate: delegateId,\n        fingerprints: new Set(Object.keys(encryptedKeys).map((x) => x.slice(-32))),\n      }))\n    )\n    return [...infoFrom, ...infoTo]\n  }\n\n  private createMaintenanceTask(ownerId: string, concernedPubKey: string) {\n    return new MaintenanceTask({\n      id: this.crypto.primitives.randomUuid(),\n      taskType: KeyPairUpdateRequest.TASK_TYPE,\n      status: MaintenanceTask.StatusEnum.Pending,\n      properties: [\n        new PropertyStub({\n          id: KeyPairUpdateRequest.OWNER_ID_PROP_ID,\n          type: new PropertyTypeStub({ type: PropertyTypeStub.TypeEnum.STRING }),\n          typedValue: new TypedValueObject({\n            type: TypedValueObject.TypeEnum.STRING,\n            stringValue: ownerId,\n          }),\n        }),\n        new PropertyStub({\n          id: KeyPairUpdateRequest.OWNER_PUB_PROP_ID,\n          type: new PropertyTypeStub({ type: PropertyTypeStub.TypeEnum.STRING }),\n          typedValue: new TypedValueObject({\n            type: TypedValueObject.TypeEnum.STRING,\n            stringValue: concernedPubKey,\n          }),\n        }),\n      ],\n    })\n  }\n}\n"]}